From 268910b783edbe614cf8ad63f8121ace3b94010f Mon Sep 17 00:00:00 2001 From: Simon Gardling Date: Sun, 26 Jan 2025 01:12:11 -0500 Subject: [PATCH] secureboot and stuff --- .gitattributes | 1 + flake.lock | 18 +++++++++--------- secrets/secureboot.tar | Bin 0 -> 30742 bytes services/caddy.nix | 4 ++-- services/matrix.nix | 3 --- services/qbittorrent.nix | 6 +++++- 6 files changed, 17 insertions(+), 15 deletions(-) create mode 100644 secrets/secureboot.tar diff --git a/.gitattributes b/.gitattributes index 02fe85a..5238122 100644 --- a/.gitattributes +++ b/.gitattributes @@ -5,3 +5,4 @@ secrets/wg0.conf filter=git-crypt diff=git-crypt secrets/caddy_auth.nix filter=git-crypt diff=git-crypt secrets/matrix_reg_token.nix filter=git-crypt diff=git-crypt secrets/owntracks_caddy_auth.nix filter=git-crypt diff=git-crypt +secrets/secureboot.tar filter=git-crypt diff=git-crypt diff --git a/flake.lock b/flake.lock index 500e9e0..0b9b65c 100644 --- a/flake.lock +++ b/flake.lock @@ -64,11 +64,11 @@ ] }, "locked": { - "lastModified": 1737510347, - "narHash": "sha256-wEEkmpmd5FF0HEBeA3upQg2W1yI7jGJ7xg2dmKuZE7o=", + "lastModified": 1737683037, + "narHash": "sha256-1J2Pf6ub2DkkoqRq2xEFrusJKR4XHnnFk0wyOPrV2PM=", "owner": "Infinidoge", "repo": "nix-minecraft", - "rev": "ed6d2231a22a507f9a32d5661ef17c76eab8404d", + "rev": "f80c70946d3e27a466b8b9e65b24e36d571eac8b", "type": "github" }, "original": { @@ -79,11 +79,11 @@ }, "nixos-hardware": { "locked": { - "lastModified": 1737359802, - "narHash": "sha256-utplyRM6pqnN940gfaLFBb9oUCSzkan86IvmkhsVlN8=", + "lastModified": 1737751639, + "narHash": "sha256-ZEbOJ9iT72iwqXsiEMbEa8wWjyFvRA9Ugx8utmYbpz4=", "owner": "NixOS", "repo": "nixos-hardware", - "rev": "61c79181e77ef774ab0468b28a24bc2647d498d6", + "rev": "dfad538f751a5aa5d4436d9781ab27a6128ec9d4", "type": "github" }, "original": { @@ -95,11 +95,11 @@ }, "nixpkgs": { "locked": { - "lastModified": 1737299813, - "narHash": "sha256-Qw2PwmkXDK8sPQ5YQ/y/icbQ+TYgbxfjhgnkNJyT1X8=", + "lastModified": 1737672001, + "narHash": "sha256-YnHJJ19wqmibLQdUeq9xzE6CjrMA568KN/lFPuSVs4I=", "owner": "NixOS", "repo": "nixpkgs", - "rev": "107d5ef05c0b1119749e381451389eded30fb0d5", + "rev": "035f8c0853c2977b24ffc4d0a42c74f00b182cd8", "type": "github" }, "original": { diff --git a/secrets/secureboot.tar b/secrets/secureboot.tar new file mode 100644 index 0000000000000000000000000000000000000000..7d87891d6937831a36a4dfc1159fb15815666ca6 GIT binary patch literal 30742 zcmZQ@_Y83kiVO&0xYxBrl(X|!!#*34`Yg4b=D$PyPi*z@WXjpA8MVdO?ABEG6tlk~ zF49E{H}JOXG)Ui^E?DEgU*Wbunh0y7{j4=7*MB~){g11d!9u6CNJH%UWd6G)Nx`Nk z@@?m5rE`D0sM^+ zwyq$18sCbQQWFJaF;y1uF9}N<8a)&{_jC8lNI0S+OK-4Z?~&;=Xc|WtU5f; z`HuPR&D+U%vU!8=%INb4B=G?XZNsdmH5zx1L@wB%^>#y49arI>pkSAO?%OQ`&OSPyS~vZ3 zoy+^J`qSeArWv-*ouF|zxkjnesz5wp#nZlmjI!IQGcVkYsx+)oIpQ1aYU6UrIzDU8 zXCKbS6HX^q@@=UJG+^G|5D1HAeqOk<+I?{FA?{pPc`;s^*xVlj2b+ z{*|(P2`}4@sy0Rn{hQdgj!8V&owIPp3Qwyr3pov0jwhU9!W?cws*z$IpOmi2v_ART zTC1SaJo(83mFDTp6RfH_SLeiSUTd2D&^E5Le9QGm$NRcEoeONugR?x|KAZC`wdGF` zKS#LPWbOqW^Bi*4o7>I3u3qqS*3{Eazxr$GHon$4!zH<1L6@`ncI2lQ8r>&eK3e{6 zwVL^q$f4kgYkRUgZ1T-IfZ%fw_fv0=KZBZ=Ttpx zRDA*iHg>OJyI*p5QMUbT<*z>?AFqphZ{2?BbNOENtp4dzQj?ss&lodrzdilxdbQx+ zJI*hUF)7<;ytHlW-w7`q7v7qCqRwZ=7;Uw2Cz_&EK|WQgtByE01Bk~blzO=dPr zjqr^}?2Sh}sRU3aO>W;w2onfzX6(iiSs{jhzBxZF+Sot9VP(@q5O z@8Uk2Fq8X6kBQ?8k?m*t8O^qFH&;H8G7w%a=y2?>f#`#`C&eq(*zbRfJN;Hz`leCeDn5acyx{PBzykjbw+2eDb5P%Wn(;f zKV9#g?3$|HJB?nCdG^HC9Qz|x>zS5ku~?-qQeACj()px6kt?)IS>C)TXSv-jw`xLp z?6h^?woJcQdp~Pc%X$xfLCH>m>yv9ztV69*{3rbjIePChuX4oV%`T#+mg-Lpc>7Op zll83Lg|3zxTo|KRqCYstuI)LZ>-hB1r`ZSP#VbWz@}r|(_DTP{e3VI}x8Zna)T(*H zAHGcP`eUKEslV~%-z^MZC9d$Vd3C5UF}EPA;NJGtw$F?&NuOQc&$>lf=E*fi%PB8c zRBVrCdJ*eY)LMOm=hVbokI&20nlf)++HHQV$YJ`%I8)7#{3uQ1r%E$dW{I2<&gu_J zc35@rOX@XahF`0HvE^@=d4H1P)Bag@C8w9HUG{A8p6`8`ybEp~FScu|PWP61tgB*V z`a@;uiNBZEEcv-`@loxH&<`f1g}t+HaTn$+c(HVOUZ}m>-Df8bEJ-PPwq#{WC(~b1 zHSRsLPs@Ee_Uf0?_nNtfU9W1gmRlYWGu37L?^~ayUO({ya31M?7Ef> z?2M1D-1)eS-CA}|wA+RAtZg5pIpXDF3p28=9?qHj{E+JtsV$N>w(iqpxM1*nN>$a) zyoo>6KRCNFtyp_BGSxe1vf8BY5-Vd__f+p)e_QST?#fS(g9Y8s9G!nJt?=2z__9mt zUsL(79r)dO@8X>cZ&@~Ztc$wI6K$v*$NK&LNcO zdDflATkd@qeHgnZW7?W~*J6A^bo)7eHQh?A=sDQ0#AhW@cPC77M)gmHIHRi^?5%xF z+pQX|=lnCSa<)=s++TB}#^k)~x0-`b3-$y}QU7SVK<4us3dDG8MS|J-+5>XKBjR$2u=({=Pc#T*kU58-6!!`?>Z<`$<*iRny+Qa(NP& z;Urk<7y16h;cYSNgkA`?yzYL`YGug2^W67>Kwl4=Z)}kdKii09UN76Yes0GKyU#0v zQ*9Q?{kU<#~Rk>->+kY8BtEwy-m(K6YPT z?RMoz{rsERfkhfAi`8=KHf8d8{&T;@F1UN@&Q}Mw{B2W9e|9OEja`k|tNE$No3nF_ z4_oj2_l0fp1+K=8N4HGNUD3NP%xzwf5QCrle%?OYtk73VcP~i#-EH|+BG=KswJ`2= z@PC_YT~k-Se?NQH)~kYcTAZJ69H=@yb>-UGeN{j5b0-Cu>`&y-U(>f*_5P)!{^y@= z+;}Z@gr>mSao~R}NF!TFj-no8v%;mqIT7%|qh`y`fl9wwj_f4Wxvnr>> zF!Ge9PMA-*%yjOHj<0`9z7ni**)7G!aC}DipK#W_OSYG7i9a&?K=sNyTbweA+s-Y# z9w7KqWZKJPjYaD*`7LSlxZ(xjqF1i&@)4@?opEGh&OR3p!{p-E{5dlU z57cm-{&qeu?aazM4^oPyFTVYBE9r#r5|wRno0feI*IZldw5&dD@*ky!=)?*uk+;F@ zt3UH;=$RW#ELuOiiRNSaX%l{vOW)F5 z%Fo1}>V0W!V)`UJc)3~Gtw|})mZC2O3zAnYX!_f3`8A-xCGCCldG#H9i}vc8$X91h z5q1bUR-37}X-d-HPDRGL-#ia*uR3{x<6?RB#H-AmItLhp&;Hj??7jSVX4%A<_w664 z28ir_yTI-*Yv{_&6|LX2mPvWd%=5o9si`T6dA6bli)q?H_9bkx&&%FDOnLLHxAw-} ztpzt1uUvX=eaHD_Yjk7^axLu~|8AXq)#{vq(XGX%?Ij}K)w+{Pz2)5WexBImGvD&g z*`%b}+P$;x|NnD+|LN=I43Ey*z1L;%czt_~bCZa-;FtYcD>hGE*s5_#=poz8?=KbD zH0Ap(f9kcAH9Fi<-CFh5?qAH@nR5?txTMA(;NP)tHvkQDzzTY7E>vpiTmUFrGFQ_b>Pmob(!PT(d}tg z(sb#>`sIsDWnPFx_xyOYJ{Cd4ocm9OiA;)?9n~lgr+zapR^#4y{sh`P(*dZ=A^aD@{~q(F4o0 zmv2k=Oudky&RM--e!2hudyUur9aeJ`XXt5Va9FHxsi|q--xNPpUy%iAKQliYS$%cV zmNA{9FyY5uud6fKmx`b2y%V;>!0!L!^ur+nZwi-Ait3E`9WmG7`q@XRYu1%2|55M|IwaNE}{c>A|Z_<6Uw=}ESPR_jMsPjQ*rrYY8T%#*zQaMAm|C)E|%y<6N zK3ujDKPMSYW8Gu$aF*vSBfl$WpR9W3^Dn(~=e_-No+QL4uU)n0PTmXy#-nG;@((XK zXg1Y8W&MO%$%+pS8eZI7+`4q_7A@n_Psi1KEhqllmhtnzwHFqx5*2eYt{0dwXC6@Q zku~0ZVOayqU(HX4syY0wsc!h=%gPhBGN^cR;tJ-ap3E=p3VaS3&y{k&^zL>b8*Q6NMa=(msd?;EyWv+q1%kM(GOir>w=TawK;H$nPkP<0y=TAVlb)4yi@{9Ad z@)f>%?+z=<^O>i~8Is)i%IEUiACq1P$L+c)xQ|JiV?*3!-6V~D2iP+^<~pubK6-BN z4EC9)8cLE^REvLIG)ZdzI^n%nHYaV-+J@V6+~Ewhs2 z)aS5ctCh^ni(Wm{{&_QwDeI1#%Y>(=N&_3+8{NO&Qjpc%_V&kFfeAdy*QJi1Ka+1D zv~2E+o}AZgrziZGA9$p$J^k(WGd6dg?lV7pKH~AuY|&LlA!XjXtrH(IFRs~} zULH0%@3g?uToSf3`!|k6ZJ{CV-)6G>^qOiCyVUhmZfK^`V`~@pg7WjFdTlZ7iC-Lv*Jw7t| z&+Z#31u3sHdN+U5jbeUt?qefeLmsYWNI{rv*8Iv?>}TH7>nmULzJ z2b<%**(~>}I@&7pEguS_eBH!}!hnpwNO`7p@g;SqKcl3rMJ5+?bdv>Jo zU0<0Hvq6LJ#y$3ejb(q_*IP8k3kFND#}@80X7sVi?a=QrU!vhRLG$>XmnkWY=JFa7 zld2X8xWC_W_|4V_H%)G&823m&H2rGjt^K{)^2Ej`MH~(u3sn=ua{OxM=ub=Fo|}-E zxAbUd`t}xk7lElWH#s!4>}FjUa8T-7<=6d!LOJW!9uR*yP1k9W!(~~G@3w8Wk@4}m z>hotR$O@mj$knMYJKIHnvCmI&^Lg_&vhFKkk-oV~^lF2bKl|_4C--^JtEfA_K3*_+ zuBUR>hOD}TNU%0|~G>_MC#v9}N1}YcbcU|t{e%#

y@op=FS$~X+IWiERTsvTY6^B z>RA8J@<#-CME5;du_s^H>dcyH?YoOk7_(3IiPMR1NO{ioyx`~w{Yy7xUcEYTylBFc zPPti9YXWbT?!RxuCCnLmbhmM>t7~TBz3FX>^5g{$TeLdb?%crC=rn<=ZL_@S3C;gX z=iZ7=3=A%)-?pr2Wv;`=>pKsB?)rAKX6c1(2RpkGLQYlx*~-f?ne}VSk3H8DzZNKn zq;@CI$x`_(y3we?pg;6P=*=~yU*{JUJIb^uHwrQDyb%9O#BbNp|EKaYl3aY*L*DZ9 zcF75yJ!`d4+vB2esp$IxPX*JM)d`#ywth3X9Jg8C_;^FVdfK$}FHe^q?@sD*VWeils}p`=n&8E4GyWe`rC>v_D1d@1OkpxJ~*%Ncw|` z^Xs#GAKqH@X`g|@<zaDnCw?%wp@N7GI(pS&?BpZjmb zVs^3fTig%M`_}eb*?O|p{nLF`#-6EDeh9LzV0da*@o8W0(ZgRR1=qUt&(m9cZ{CAu z>4GKtx^LD#*dDz4Nz$A%UoScwba%KpchCQ~`_CGGnRc;b^~MPAZSN9!@0?}qcp~?! zM$mi94%bCZ3;vW(H%pxOQT?UMDTn8Y@={7U(I=PSBV(g+}_t2u=+#QE%|L1`m5(T&due>%8JcD z;Il}lJI-1+D{J?|j% z&E>Aw_VHd5ysF4zYJ_vP$N%z)FK_g{^4zlZdzPQAoVi^r)y|3?f5|NSLGDd=_$?(NcSbDn2)cE6|{6Zd*OmF16RR%XYR#6Ows zrQgz2aLI+`^Y)<7i6QgsC#`1UdAm#PhNP=eLwfw5do43>{?;!(d!OAbWJ{OWp0C1z zVS$&zGLJ-mljscRPnc;g>f|agQ7DP!^pdXFn0XUrOwxaLioa%Q7h+WCpHiMZ=YPz^ zvar)OiJKEH8+c6Ke)w?jEuj;doQCTA=X~Yqkr`te;-!3q=Pz0AyD7-;=$aoYObBneZPxkW-JO@5U-f=s(-^N zwv36J_1`_aVj9?TLhsXG?ftJeukyUuHnHo+!o6CrcYnQ?@!Uu5)S(>~ZNHA^M=bjI zCHz=swwK9g9ks^}|L&h}7u@1EyQ8FR#t!vu&(;)rov6-P{%*JW`45VgvsnD4oN}G6 z#Kx|0k(FOva9by9!kL{emD+Ji4oTM0u8Vi{-LkZc)|j37`r#Ryqf5j@r!W2YSBE`f z<9VYAB_%HPe;gmRM3(;hAADKksYsk`>zdCK7X;4Q*zuLaw&T!^IVU~7>Hd6>Fqa{I z;gv5%6=>mn?GG_>z53$iMAv-g0bJb5F?| zoHGv9n`&BMBmeJtW`Rgx#JoQT*023MnX`$(c*f>wpZjh)EsA|y(a&(l>exos2WdCo z?(W?8XZks(X5Sy$>1=b>e07m?SjKzf@WzOzRf%zpemm!G*gJ>0@83~Z_bXFByomUs zUNw<7$cl9(-!?BJ(_g$BXDWRT-F;(D)3K*rH_obF-&wo-t@OK`Y2Jos_}*-rqjsz0 zw)vrGjfMjZb-oMCgM=mcO#eF<9FoaR<9xqpVyMB!tO>{G>3&SE>S0fBjkC+_RJ!w~ z$;tD-sI|aDla$|!LSw?3cBG2kdbKgY`Fyn!v!IaCOgW_{}E&|=|yHf@89KfjO))X zTDsPf=OzwTb)rlTW__ckPYz2})e~dfByo zCt3G@F0|d#VqLAc;`3{TjaggH?e1Jvm2o`K!OfdX@@?9wOWHTSTTP!HeQd$)@REj> z#Q#~c|EJx5_sd%OobDBtwo`K$Zz($XmImCGPj!5Cf3Ena-#6jy;&vLwN7rwP zwFr{d+ja8$S;<*vs|?d#neUU^X5|sPBR)8^?ERgu#pV)WN1tgw?RjVOLO<(};Ve#v z-wI#7O#d8`lKaDcd84@a8HpVQJTKxN%(}34&e4~XZ6EE4ue)&6v~e?=w)pZ3tJMFj z&AnO^bMuwe+lLYLSABNpU3%VYw6A4OMb9DChhfi*qWick)BW$wr;n*_|oll&Ik6YyM{Kt51+ZR9@wLA*LiRE`v0@mOuVfnas0=jS=*|sx$!v<4T zA+^otMB?+;WPZA+x53**X69tg<+q%C)GH4eq@>)u^OY@c`XV{VJS6H8A-#E(UvLfi{-4loZc1tdH(X+bL(6#H*@9U*;;^{?;ziITJ zxS6E$RO7PZ#PII30=qt+UKzfW>lFV)1wY5I(~6u+l~!p>J}#KLGSXE&s+(opj~1uhiY zGr5h&DC=9jBIi!`LgCxX!=|R4llP2?TN9C<*I^u|ymsd5O)+feR`y$HyN5sBV|~R# zIsOKhxBWj&)2k{PKkLJJq>KvZ|6M&+{lBT9RCPl-va>8EmNfV+<3uaVpnr@nWtLGjGKqsBPLmv1U4OAX?1>%rs__CSu?rzYR&lZ<@JMo zo3|K#5ZKQhZO-%h5le&YpVucRhO-vfwOyZbW`?iS{R??h&Aho^^H$|fiRX;lQCV}I zYh_cyrDYnqJE9MyibAoTpP3hwl>&kD;?R9+pZ6V*H$qExX9PgEybmRmH+Qy%paKTa3 zKULSBXRFC}-R&E41kx&J9e0}3cfKss_Hg>vEt?es3yxGB5)k37ox;-_xp0x)jdgKu zlSHjeE-0RpS`@PF{M=hz+icZ}PHwI^edS}mqEFddt@;fszdCcwXNiBp8^tAb{gL2; zm2;L~x%+|L>HPHt+9xwT^JV9j3Ok5jz25QlQRAx!uH-}hhq7<1|MK;Dn@nAxtM|N( z7ruRJS~D+AD6i~a)hXR)KO=v??2cDadHHjpzH@-2*sZ`9o^wU_AA3FLTVQ&?PB|gJ zEi2Q`DQn9X9M8Ca+*-4)L?oPpYXOh6#hIV}H6b1ylj=+-e_mmtzkQ9r+U2A-?&bWh zR&yu)`PFE*@?{uP;Dmh1u^XU)fb2)%^4EmRO!-g$Ik*e!doF!r-KTcCK*i z-ED32PCwDSB0T%S0ga!IAv>q%v?_0ReSFU|Azq!lZoQt7Xs}?>waya{G zn@Z_w@zrJRN4NBJW<)mc);jsEv)ie|cjf0Mck^xHQA`Ion)NgsJL>t5am>}8(>Fg_ zwUuS}@fc&@hOIvzZ4rJg9&&iSYQ9$TCI*IQ`rdbG{c}}`dFF}>Gqu>~ zDt(BltBsoQ`BP8TwiSylpFPnyS-;VxZdIMINSK=PiH3spnWv_7`W5_SeVg|{qWk&L z2NSO?P+mPd_|M|XIivNy}HcbRz4GLQ3OQweQ)Atlpls_cHHfh|anaYnvVUO-!_^ zP*wj+*O3jIGL!#gUW(s)eUodvf#kZloXP9zmd*@bZ+dr^)xC!56Z)HOnYJ$fH)}<1 zw$r3k??c4~%|UyOWhcH05BvVrKtA)??tJH`zq?{zF7gY{4N@J+)U2UEJ?fGUoh0b>{kl3hD5j(N|S( z%l3NPhx_hXqqo?z9j-_R0!>OWJ0(wgFitX)ZUoAh4BsI;tEwJ+yIisH^t ztw~x*m2C3A{GR@4b#`K1wyN6Q@qX;rdz*ds^8Rv3mS;L8w^!V(SYXfDuERwWdd%Vu zEu!1HQ{t_Ga5+ve-yGiPSX%?COEa}K`|UpKMibFe^^P>Nm9 zeAa2j}}YF)Fo zS1Z3|F?oY!D*Ih`SBI^&(>T98=z5{nV);{jj_TSbi-$+~rZpX#Gq>V2cZEP`z!p8iEn<)zLyJ*_m_q8J->fz+ZTp7q0`&7 z?xdVr&0S=VZ*^6`{Rt7{~Izb@8pl1oG{JZOXm_- z6!T`QGn=K|m+b!B?zK7m<+7D8-31>@z79-M`?1ruOf|nMI*ivM*yC~2`HzoeP2?C? zMRc-Ein8Yt&{IhAa5K?WI2)IcCbcWGbnnsK?k^r(x^?>0|H`zTLT{9!bl(2`ef86e zZ>9Qsq62RxhUV-!`{YARAg3imP66{ORz-<~Z5;DmWpUM;Cs)~=PJH@bdDr^;<;*o_rfVJ)P}c65TYveK-~*r4 zU5l$iXPql$pTo50*uTo~Q0-YPuU*bsbfn!}asJj6+iN#B7v7h6>1iGyQD(iXB;=;( zL`KfJE4CD`UnR-&@Y|-JKRx92H|OtG3)Ee}xM1e?X_;@nNqkwpeV22P zy5BSYB?XgJYK#{5{EFHgv88-k+1kew^j2pF%Kr7}y0=tG=4p*Jmt8vNuH0vt&$i9{ zU+X0+c1|zonrFMLx54@a5rxN8J7#71`zQC;>z&&oaM?yx=h1rI;@QhB%Hr5}YrlHA z*l#V*Ci8cOyJ9lf_U$_=9`{uz!Sac6a5GcFi9p|kb*J*~+|s-07%DwcK9t8pkmu{v zRS9O>ekDxMdH79_nZ?zn=Ge#h@awie?pHW(9V_Rt zyk_RYiEPpf3*=>MGWR?ReVTsQd)@^7uNzx-&dlVwF17BznQ4{v)J^vN1z8uK$2?pp z^LRlVpZfK%3-5Pi?|eA5tzIE9VB=?h?i=d!qT|f%&aw2$E1T&=Us=;Bn9?-0VbiN8 zLE8jR^khxl^gz(!Po0C=?SSxNZeLxW;{mC6+^gh;ja>dm|6K6<#3lcavywd@vAMPe zoUeWCSMz3e{L4l9dp;gm;K{l#BDu|^i7n&cv=>LyZyor4>S^*z8PzJ5S-!HZua;#n zXZh3waGojsd6vQM|GUdURR(kaFF5O{A^T}fn)Y?abBT{HUf9rs$41emD z{!L+0t2>rov2#5%r;H)eOgKu**5OIRr8yG&CiDlkGoRa+xiR=Q=Q(Ttmv@h>zLli< z;?1+G35Se>d?aRDw;ooK_%-Xd`Ww&6nfrF|_={h+UEXITzs&L9Nil(Wg?g`7zW?2= z`kCj=-n0Evr~Z2&{(kPdqSF@T=jHhI)3nr|$z99a+1Dn>s_$#>#Pa&7w%6yCW>$ao z#VdUn+KacJ&@&0!Wu|!Kc>miS{+AXC9-hdZ+1eai{=aZuwAK5r8L_f%B`p&>ZhdEa zA39fNeeVv#eeceZr2|NqAK=nn8uVQy!>6P zj&H#(`_9K_jfMIBixl2S>^f$X$M+)PiitvD`QLwA?!EodxJ-RAdrSX`AX$ku4fAal zAOFam{Xj<`+`VMh?cl`qis>3Nezebf&E*sPvbu6!k%4Oa6W_O@D>9DF+9b&!7VofY zZlk@FvEjyfYd9C3X%UcS*!lK*K|$SF(PfWW8GZBW`WW@>6rZ2|@%)itqteBrhhINm zy};t^q0(aqeSD*Gw~78LaemL`yTy6)tm3kl>S~Jfl$M=)n15g4v*(|X2klM`>Pxf^ za#tT&VA?OB+qHoQ8eeY|L+7yty4a{di}@ zTb<_j4tFz+Im;}#uA7PNyOL$3tTSsy&}Z=&8WS{(Yr56i~0za(Oo2_zr zw`5M{GjX>DKf_PUX58M%7iu?CvopJdv&-m-dGk`IdFFv1_BY@7cC&^3Vd~nYyPEY5 zI@)t8CJ6cSEuL=u?5YLV8OCq-)>IcSUv8Xr^vRtilB%{EMM3tZw>ovRji1ViYTnG# z*<+cWn0@KkQ`u$Zzm@8y9D1K@p_=8Sb6eBs?Yak>&n8?DE7fjE$(39BWA}F@rA0-_ zj%9rk`tNir7aV^Uxaxa-(JLD<7LU2B9H+e%lKy;XUb}M*$HWycm3w8RkMyiRrm`k` zlV{P>{cqN5%kTP}ra9aHUyOn}Q#U(H$0U!xY&XxP*0U$DZmN8mINNWx0yfgFha9-&%26rqAh~U=8zcjurPxT0Ta9es;iiV&*jl@w3r^0vw0F)?5^M zUgCGcO6UGrmMo(cC)YdtQNLvB`+-OKT8#m(+y1LAmb2ZhWotAJhbd%C{NEzl6_Ud7 zKD_e7%Y0|PbKR>eRjuugw)&r4Fx#%PLZde)B>r&OvE#E>DD31_yv_Jqbn&CRsju{I zPk5skW7W(fev@0}&Zo`$ZFcgkFE-@>yjrpy#>=uyze zTJ?v2@8jv28$}kJjcbZ4XHK)e-;x`kX&_b=FtH`%QC?j_+nZ{(-b()!7meNRe)4Gb zYfZcy@-AieyNTTq1+07iIltMqrTm%elxV{VY=>G)z9&VA^;~nwnd|Yg-*K*O*|KZ7 zc9LTH&zKvoRX81-xZ;DZYk1$cuAGe7p|-XgqnLOf3-vEZ)j1TF7{MNi(?n)ub2TV3S<7q4m{E@o#qxe+QFL9?F zOhTqxeB17K?CIW*6aTz7vET8Nb>Fr3HK|gS-(y-+cy~SLxzP4;)x|?U5|w7ltk>A| zAp7zI!{%1qrpP@zCY)O2`n6$ey-rH(@vgIaa$Kf;7KfOw-2b@6AW%MW$K@oU?vzQT zw}m*Tt@?3Tzt>Xihjnht!iRa`N8WvxKf7Z=Waupuo0#*y%cQ4I{}dvXVz@tUx3(fg8X(`9rTmTopmo~tx8tNIh!QsX)jkD>DWFwKlGXEmenQa^xQ74QkgOH0Q1Fr zcNy37x{2Yv#+v4EqtZa#OiHVLhM{md#fBO&HVql$49VOaHXKE zC6BS{l>hes&lqevEm8NeK;J>Mrgdkmrrl1rq&cEJjaM}*TGpGLKf5cy&UfeaRK4g9 ziQa{UN2i`@;aR?1`}7W<8k5$FSra_7Z{<|6e|e^7ZgpPk=g$AzX0ARVzkHL-^M?E< z;tJ~*OPNf+_;R`X&J}(s?2BEOMM=c{U&zw4*30J81g?NH5mw)Jn)BBExid5JkEi5} z$ubLrIt^1KkE<5e&%Jnk|FRbgr(T&GSF6Cvt6j!s@H%7irVCq_&3zc2wz0i=;a%}a zu5T}`+-n=FGK}^tZ{1>T%_1XpVCJ&Pd%V@W^;%pH_GuY?6Rtn-==}8jU(T1di)if- zKE5^DAWl7XO$&QXU*zXY6EEs=wPZ!w0}Nx2LW=or=7`ADNtW1@nCjMVWmB zuWP>AwpeM+Qt2e_&65OHzBYYyR!?g~#iF3N)6Xw2Z)-Uzt$rq3ojoo6*E)vpC*RF& zn0}~UUm(zcBjKB|&)prH&OeF&cD~7Tf<|JqxYK`+qbY1sFMeN+@cy%Hk+J6)#l$k# z>RbOryOd8Sm$UqGKJ@zRSJt~n4S4qQE^X(S`|jMMpKqMG>(mTBnI2Ur+oB@8Ai~h+ zBKvl8jWu_d_nfKS^zymw<)nHKwbWduT?tk`GS3C3927Jcm$lD7_x*Qpva(88Q)k{`_eC_<-789@zu-zk8{1m z#iJj0%CSv<%J%EctahoTT}@_7Hm+DL5gkyOJwe?vVEJOA#BxZOWz))W!R zKerV3-I}M8I@3CllkA2tcVaGYQi<1;gjDDUxI(7G@4}BRI{lzz5 z(%#l?{Jf6$omYV96}O9>MPaM{?0D|7`%StH1S&XVXDP7 zLAl8s2O`U@(;u%tuW0u<`QoS4Z zxZAjcZtJaJcv{P1pZ3%J^TE1vLb7r5cRs#xKSot%)5SHizuP3Y-r~5_suXtcV8bOp z#ToM#ZEbsf>BLpHsf{mXrAijCW&Y}u-&?hH-lwEBQxxTDY&15XTPQyF{L&*zMZMb9 z(>}VT^ounuJb3X)3-cLY&f_O+%;bN`>^L^3L20q*BB|cfUCcszrtg?38@-mPx9Rib zwgVi?-zr^R{`a?XU1z{KmY&z`l7G#N4a!%@Zep*UvhQqjR(;98dy5%Pq*R{y+;@JS zRe0d3NS0%BjB`^e^g`5^{!(~x?c~mRAJ1iEKB4SH&UP|4pmr}Rd=f(<#y<4a)?a)5!ZO>gVzL4jeonL2jSGQGcc{6VJ>K1NwRf`4-N#?6~B)Qr>qxTT3#OEKFa#X}nzsCbT}t=voxe-A`FKXW zYJ5I_i^cnxITM|?xIbC`_1Xu^YKQ5u7yq}oOn=<9mE&vq{?LO9>h_(p-&4MR`4x}`>m(*J@AnpU`oQ-PUh3`;T{-*RhR(kvn|S z(>k(PPAs`_#bCGd8?Qw!GirtX4<~&xG&g zN7T*HT}PLFiT?rFH%XUQND8kywvYeVf$yAmG2b&Se*Ri=dad@cDCIX7KWthpBYu6)x$RRnNHv9B;1jN~a%*aTpRqg2 ztKUL?xgf*+!1QQ_XMBpQ-21;zPnVxOCDloze9A+U?b^Kccf`-k>-opK`eNOq(~(Cv zeNka}{IRb?K;@p7uEwU+$=RA)^yOGx3s&zr_I_d`oBm(fUmyP0NzFT^l9%K+`RLED zmoM%+EAacZ_Pu>4t!@;pf08TSQ)PB&uKF7R>DANj`2|%ySn_r2=a|k9n-=gLs&(IW1wmmeTPs@NT%_uDw^!zj@Q0*R!sl^+Hw$uQji3+5guG8{(w5+1=I7ElYDM z%2nh3%I(aT(`)=E>|UlfcUfL|-)1?k#SGV1mCt^dFU!GsS@3q=b>S&d;#;i>g;)ih z6U=Yi%zgSXu2cNutfp!6jh;+gDEw6D$#cbx!ApCOz5VDBZkb(DbLyk$GsRn(tUIKH zO1l#N%)0cU?abflUxKo?Uc0|%VzXOFPG0qb{YM^d@Ai9jaq~w$&lNlJ-Nm1On=@;d zKvMt4i&BO=Iy?fh4<2eS z()?)h>zxU(Rll_!t&`Ya((ZR>U1Uh{ztZG{U#>m-OV~YmXBGbZn!o%(tW)R8 z<8xoE@CsWvXHmq9*QTfB9)|QvW(%l!TsqI`-B`M7+tsd*%WWIf&dze{+wo{3?~=_c zm$|Ujr!*RW*>%bDZr00BUf(}OS#uhL5l3O}dyOses#oS*IP7u)y6O#kC^aZR65!`~9; z0-cTxI`(zjzxE0quRNXO5#({&Zu-)qzR3(Nf1^+38!qtLlM>dwSpWQ{ug^}}i+q^& zZ_%gEvCk)Ee=PaPB!B+*r23+H>Kf-PKRWAmm5aaK`O1hfsNk*C-PT!`j(>W4*0{$r z{jd2v2JZ%+%R49C+ZA-&&fR)DnDI*U-1|BW2hP1evi_=E z&^!4fzU6I>7vFE6Vpw2#v)69@(mxH0DhzLb&F3^x6%o4dsOiq`XPQsGe^;`-&LJax zYgfSSU9sLCQya>3F7eu*KCgeRRQKqwL#cwkNe&+cG$yWJ)xTdu%*!p}+xF7Fi{dSN zHaR_d-JT;kwKi$9tBlqOrP&X*H@)UieP57c*KNejpb};`J7pb@+JQ$?^G<~AT=`8w zVAreKlNM8c@ch;GrRPtLJ>+z_Q!<9%&|TK}TP z-7?=(x&C{8dbafUyBc+`(<`Nf-p$=tqPBnUVc{|bo5+plJ{L|tILA3~hl0rS2WxK1 z6-m$7`+ocRjEacE-$j<5{4LM8Wnt4Sjir5UHWAg^elLIFy>P~f+0N%~i~o$X?#eUy zb-(Ah=C4bir)*ep{MTHs-c%VipC1youk|wT+Muy9l4 z<-|hy28&|r~kqt9G6d< z7hN{v@xO@|>u;a6SYPru%PbAsmXflXZX*|QlfA&&&Vt8GF$SlzaHXBwhIl;mqr!w@2+J#+P1x*uRA|ds9x0W`#v^r zhfMF|Ec_w64tYI(7rgq$vS(tv(PtVH?|r?$t!=|YmhDsi`d*)&?sRU2rqRk4Ad!0=hyyL;h5i%;`jxCxh9HM%UlDshdeq~&pi_R(KYzHDzWI?r(D@W%@wq3a&x z#0wPFT#DP}z-{wp%G#aJG__hyYh=^q&m5ZnXOHUhbH#3r0m5?wvi!}JckEr}U+l`9 zqw?*APsF0#8`Gw~%zD1omrdf;VUrN{i0m^ri}V6F{5N0Wbah(6UzPpg((i@1mMmB~ zaf>F`>cG9fPaZlg8TemLJA%b(mXwq0|HI5%Uo*F=EJG(de9G#cC=3HQF;ig#uomtP))elYG|#=GcL(?A2CVkY@oiBk?X&t0s$jCZ-7Hts%pONB>3#${pt j)8`itq z*pyeS_uTqVeZmiggxVHooBBVq*ZuwOHZT2r{<8maMT+`2A6Uh%uI_*Oe*3~0nOj@y znLno-`_1MOY4&W-OjqVvE4$ksGtZiSA#3Fl+ul7bb=%8xv(9l9GI5wl|NC|1L}lVG zgFBsUh7EV0y*bZ0cXf4OQ^00%!|#dlmp^f@{ucM@*S|R&R*uUnSgU+2H_v3d+{Yps zu(*i1Q}xPrxpObARxVlH?$;q2Gh@|nAC<$LIVF=ioOU=kY*`_gdi-vqa?&|Fl^gF) z7JrjJ_ln_ovP9YZwqmh>!~3)6pZ#>>bD&CFtlo)D9WRwu`A?OMOw-Dkaef-};slq| z77i`b&6{scwaM|{B*5#rc|o$ta+6PUF4!DYQ@a(T<3|ey4XhPpv z`AwIEm+W(^VEMnbz;xb@+opl4{IQcxuWS^tyZLVavx$!4&m<=v6Z<})EpPMUG|g%w zu^R%PtX4dik`?;(@uB30Z|>pym+Vox)v0?t#YedBfJj%`uCw1m{2J8xEkdSpiZYpH z@Ck10y1c1?Nvhtb*s%YZ-A;=QEK{cjzqruYeC+?R%lz$cWejWif2&^U>$%?{Sa|&K z^ZaW!JU6^MRJNUM_hXOzBWD_KAMCB$YiFqW_Ml|>f@Tg7tcSn2j z{zdOL3e6R=JSh{t`9j0wlsW0YCnX5KJpVCcc9D%s**y-aS1lKJRq^#}?4Nw3?yAp| z7}xhxE+jm98!p)9xU;tFHs>AA7drpT4qyDS>t(;)-*w9mw%ZoqE zH|p#C_(PzXp)fC?O=3rq-r{oycJ_T=e@bLh$EwW>nSCzaIIy~sL*R_ezvWzUR3gz-PBKI!7{$No(r$tX^7a`9<+5% z*dm6*Q*GG9f~HKHS7|A|YNf+WiHc?bAn7Y2S1*X|Uavv$pk%g=>MEU)=3^7Ma^ z6S_lfOXr0UhNbZ`chfsW)AwJlS$=!vtcQ_q!VjybOM0J({w4Kq;bHl;p4%B1!fZpI zE$}yv{>h?utkES_?ss%Tz@iq`Pg;SiF2AZWQeU3dUGs6qpUJwDPlX6qSSRMMmw75E z8~)#Cz3r*HIGksE84z)@jF}QhH2^K z+ws3MQsffs&b(&*b!gA3h4Q_+lNS6mc(BrVe$1b&q|TL-x1N2b^3X)GF$qsH@ZQonUaf(wfXD(BCRF1Lm>>P>D!am987X(&cVp{AY5E^v1 zXIGx`nRmOEe*Sitaa~QIq_9Tz8hr-8Gc4Z{m z$G63;m(5KzC!O||RKCt8-fi3ECG~5?^;N6PUT>b6xLhXo-i=9zW2bM*U#+2j@gb+0 zs(-J+blKBSH+pMwafXEWH=Ve8`TmPl7u<|oxLZ!timkXe<@yG(=Wm|dbBc%CoxNTC zjP3jDh5u5UB^5Q>8vU(5O#6GWXwl!7Jd+h4$+j$g%JTV+x89B|R=TYRJh*4p?|0nh zEfjg~<^e8iP6r9w$h#>#g2gUK&AtJy9v|F!-&(N)YV zOd??0yc@qF<#iia|NlFEWqPhq@Bib+FUuzQu8VxU+(^}0>{kWfItTSCll&9=u4?~v zR_B~M(Xn__5%=2Ni!CJ`b05gvXL|5n=<$x!{I}u?YA1Crg(qz9T-}m59`Qn>4 z`9^xd2F14oPE2U!y|4D8+5TgM&+WA)xp{ee!H z>RD^~*WD>72n$;oYhJ!)%dDlPhc=}cct%%+Z*~!F;GD2+j&qL`_gt$R+L@~p{_Ztc zA(pvi!O^t;yz?)GhFNaCbL-I0?4=IB%MT`%9jOG|e=79mJw@v*fPH z`wcJG3R=4+-ylBSoc70z+=f*wN%evxu_>R|< za(RUxe0$yanTjEEz|-Qk)lU5V*+-4Ml*2vNt93nn|N7CBlWV&5{!Ma-{>bcVdHcH3 zri=?VRTphftA5j)oc@s~E--w$+>YYRWA&TYv@uP%s~7ktZu();aov!{>t54w)|CA@; zavBd^BmI|7eGs_ulAdkS%f%HOi|&~%JTU8^b*eVgf(bj<&7JFCllttCoyFVV**};c zw%jysU{>Tv{aCDdsPUOB>wSy2IrGJTI)c!?Tj9 z-;kM2^T@M+b5gq)*enyTd=1kyXUO2J`jzs$*X3|m*}YWu)*ww$Ik7Zb%@a%)6!#VF z+ka#2-LpS7?dx*M@U(~!zM!6-(U3nmYwEWBYv#6eU$}g2y|l$oB{}uqabILjr%pTa z?@0G`X5V*$=k}S*{q>|+WnO#mV!17h3~F!M8`t_*m5zqg=y8rg7{@0n&%Iub*9MSy`U(T6!>+VbKRquXZ zk#bwh`QF$r@vAD2#LR0x(n@QRW-Zp9`}!!SmSy^!ZSti8*Xj!-3KW)Ui{G9+f7*me zQw3JJ)m*%`OZMTDUybLI_vQB})ZKd>;HT7BxaPvs2{&a9m07NuDD+H2z*zqBwy>Cp zYX{dYx*>e#cd?Vmlsrp|#)Gc{@3q9(oYM3+miAEUa&2Nf`Qd*b&yN=|8@}%66#w(& z*n~Zw8Rs{5R%w4_TH<){+vb#&H}u!N@e?UYNiuw4xnJ(z@euu;5BlebT2C*yv$(2L zHRXEY{X-A;Msx+oxxEvS&63@2-QjS!?2vs7S5E$1fh`J)jGhW|Y>o{z+1>0s%_P+J zc6R%r=g$suuXr{0kmlt2{XO3g-BP;xxwt4Rz-;%Ua!sEFXJb~U`uPDdYz2rt|?Veh%+``$e8X;QenkK=*j4i*F7 zPi%2>W`76{Mw0Yq=t*sSbg34@W@EqH@ci|(Ut*on81}3vHu3U7FN7Cc8&gq+h z!V{&L%CBEvy|T5!aYeb1amStIwSUC+rdV0Lvz}X)@uI%k{$SR;14~~nKfHm>vOyyJ z>n*7{)Bo2>HCZUXoXC9Uenga*pwHPgB54XfUH^jFw5ML5u+1c1pJUG^v3!l| z|Jk|GTQ*Sed#~vAS*!ontX!R-`6fj_>X2Ys-Nz|Ms!G{vrB_W0IZ^xZy0P8Wl$y4y z9AC`YyS5rdO!?Q8Iq7uJl7|^3OSz>}DvFOs$IYAl>+Topw`c#WN%d{AFPm~kdHENK zYckKIyp**Mr53%IEnXkZIDz-i4#^d98$6Hwi#E+G{`4A? zFQ{@S;>k&eZ94kTR&G8!QBG7mV5i)rFPlrUi&!~)Yw`rHKA*)RS;?w$IPeQ6+vn0R z-$Uvct~x#)KTZ_L#UgZb#l)yxAa{(4NWJyi=mUWyAl91@D$V4*%@+Kw{_o z@(nR7)-Bm}s?Jlbe)>hTkeBc0Y@gQoq+_H1PF9C0^;7J1{|9-cxUY|Nc@=s7)XK`h z-Fvh84|_injP*Wsa&vfynf?CES(CC2QhqPl?VB`f<)mYU$LADtFVVQP_TSb?RqK>5 zvTwCp{r1eG)?>?=e%+ZT_M@_%d+W@Yb+Aw^ehMDrYjeU|@C^W(UdyDRITi9^BURB?j7=ybcyo6{d2d-yn?Kjk4pM4pL~40c*Pf29;aU2(8Ta# z?_Ap_J=NX0AbYu!-rk^(hc7gy*Uhv!WDvK(6JJ+;X-aXPoR z&8hVz`>qG(p3d6NJN@K`+n-;#AJpGE!@zIhguJvf&(`efvj2Af;O8}E7orO4bygaf z&GUZrU*qOA)|$$)ke0`$m4{TnU1E})=2{$_E+lQs`1^Oj!QCvnPtRI@K7325K+Zz* zQMk(nZoU4Tn|cP@clzD^yRP1BLA0&H)wM5$8~byXe`qt)VBd6Y=^>p1mG7E5bbj15 zR?^r$OFnjLmHf%OC!YKikzrDfjP5&E6gRE^oAZZr#lD|ZE2Q-dK3ukVs@=3VdacM? z%iO2lfz1r|yAD-jbj4MoRo6fC!uvqNJ8gI+Af5r)_Du*6;eiRUEVikXCQe0CW zHgCC`xz!GBroyc*J#NVtZ7mC1%lH478DVL@ulC+;Hh-1Bth4U1?!OW7GGI#XDHgYl zMzs=-F;|PDk4!)IUdL6xZRsrQo~>rC?V73IcAK7-4EX)&e^bD=Lo7v&DQ~#7o2|TO z6*#$1ZusxLa9VltUfKOOEGKW@d)@Fslhy+Vy;Nph*+UsmCN8`Fob$T(l4Y(ta^Bum zj4=wkH+5zF&i&oO0ZDPI&0oo0H_O?v@WDKD?l(`}iw>=ksXUi;{F=&hv8^`C@7yj5 z6@K<=jcx6z**6Qg4(z%k=ebXM4%6bTH`$8i&BNqW4js_HUaz-x?)kLNRd4joK0Z$N zt=*kC$$hhU>!~f0OEmlCr}S{|yEV7sult-Y`bF&#pZO-+KYx9ay|3Co=@he4;kMM& zu3K~eD{j~k^@s6@=#l==8fj(LZ;9u7MD^5LZ|lshf?CQISGtA{pNrz*`h1)kAPc4dYdd2bS@o$|*@d?bIZ+Chs zujwtlasK#p)B9V)?oQCy7;RZJ@4CyZCuQ+*L1#PXyKt#*ICx}V?87eqbx*qAdLCeO z(1~{mzp1z0bF!^lAoKP9>f(LZ)fesgy)E?b$-j~_L^nk8uIbfEi*BC&Wbda(>%9vv zY3wd9m^5SUvOmizPN`LA&#G2V@Sbrqkd=*n{UJRr`Le`}f(0$g!cWz%e$=|J-*#ld z-29%I+o$c3dsDq_YK!Zn#ZxY2SQj3cRX?qW^^K$CE?XCu_bWF3>@;N1oFXQE>qwF^ ztEtH}*XEeI+8<~9vW}-@iTvHIQDOYL_}PrJ43mGCEz9|MQgn^XAp#A2O7tHuJDO|G)KR+Y!z;{Kv!}dU-6<{3Og#+2y7a>6?1|)wVOjOQ-KQ zn$yDj%k0ywV`bAn%ry%2%0Ha6X{VL-r;EnVKmCngJ)<|H@qgV0eUaPNaW>ZqwR%0RPTd*EIj_3sq^(uV;ah9iIl>~ZZ!$@9E(|i*>wf)e{>FS& zxr86@4X=E&(`}Y0DxVhh>+c$-gIODerM;hd!;6KF7)&=t1jR1al`oqPebLj z=DVb+Ua+j=2@mmU-&AtBA?i_8t2$3jzU<2ro!$3m70thKxVN`BEFu4lwAHIe?Yw$t z&%~efe)E244F??A6ICo~ z0#Y*K#N!$IOpZQW?smfQW2JM~&drZEdq;>Y)z;kM8KQ-5~ULiFDs5voyw82l-!w{hMm_ z=~(`Z`-WT1-nk?^%VSnF6)l;j!u4SB>V#W+^rt@EcChU5gqp}_O({}K^&G8>&$_&7 z+wA$_S%hLxfUlLn-TRXgHj0#py?oob$Ljy4lAfvSeyGNa9c}pfQ+7jy`fH`)x@8C7 z=7v6ssJ0IF)tzyx$>P{vhMm3P6HW&S8CQ>#bJz#W=m=!>b33{8PyOk(K-(+9PYqt1Z2Y+4 zZCvtM*{i7y#-HN$98g}_YhSygqSdWed~S-h{oK8aw*IXM6+2NoiShYD!c)kA>DgXS=E2iwl zoKEwU>{GY27hB$qF})FY;)eaxjaOX1bSqbQuCY9m5qRsv-6$U0GCsaNQ+=9lmbJfJ zVXA4k&}vKH+v~-S(zk0ZZ!Y~Am@2$1m065y=ftPHylYPyJ)aSCYNfOM%9ZQxpOyf3<=Ve-+7VMUXg&ziYKdRe^u)&J%2)u|VfvKMh&Ufoq=plz0% zeeub{ijagiwbE{TL|$o3Q`_4SseZ`aZMrIhgg*Q1OTrEJEVo`~-N}0YCi|LupAvcu zUOMpoGt7uMyNhda&#UP(l&)`FzG}tQdtcIQeZ(Up6AgNoyyQ65)xPQ0^@M|R-EBrm zS*yEZjV-clTXeWj_U25e7hIdYXx**pf=;_@v+q1N2>K|fXMCBEDh zzjOOVY8%hY%l{Y5%GjpiIF~p4QSJZfhwC_&-F94eT2|oS8L4M`Tt5D7(X5$zGykIa zp^1+#iFfTcu)U$Ha^v~Zmv5uH^4FB!{*`oUZ`%JfmHIPRz~;BdF?-Q ztGPjXrDwh~ok%;HEwt^wRry(^``d4=)ID)Qyr6pZCi^Kz=IskRC1!PAW`EDZDK2_5 zFRap$VwmYWtK`^ZWfj?qHtzEuszMf8atn8?=iIty#o?J<{?_)7 zr03t>cjTdv)Y{eWR5xorJr(e?qB*oFFj;(e)`V3$50iV}T{c^+JN1FLaL4-WKpEk5 zPSJK7wwqUYe{}d;d{@&>YF1Xdm#1iS^p|FX(6cLdrkGo0E%sdC zr?BU zKjl+IaJkjBD-Yc_CoKwD5uL&xSmZv5PybZLlJla)>E~97Z7P`Vn>O#tA?c6%_O3t4 zC+PcWM&vxV{e@w?^G-AT_dnY2UMXGnQNQYw_OkSoE0|hLvclMB*oPf?Rxi0irPbxP ztH)&)-tKddaCHEITgA8vHwcadGpVn-5D>>kcTenLT^-*4_WL_eW2g-lu0j za5)_liDLTkB);eUGdr8M`A;%;PMW~`Y_WDyeZ}@8i|=h*wcuCl#iTd=eCebWr+L21l0RQoC+H-uS$g=LkpApHNo8?W2{|Hs7K;{4cJh4~X>~9E?H+@d z$0j=_F3kR*=q;cs@;o#7>60W;UE%jj6MNNf-q^OOCh__+18FUWl}olK?fSML_sViU z<$cTh^J?cem1y13{l3)k;<{f!_NDnpn{1*!>@L{P_WN>tkzO|c6_)EaR(@}Bye=|p zb@c3n)1q_cr_Ia%bmfGr`Kya3|K%=Zv=^VHZPNUC?}SrtBc8eKcoqG10T-WE$Z2~y zjbta=+h^a+G~lV&I$7b(xono(nfz~ORvcuDP`Y|Dx@EFrrsL)i!3;Jue2ZBJICeF)b7uRbF5Czdi6KD#!t9q{h~RSP5!+^aO>j#f6fUrt9_WhhB0fRne!(v0ns1@_Fj?42^WLoTW6-7RPiy9PZRzv z-}|)xj)U=C_ET5G%igM$D171Ho$I%K@&+WeJSWW*K_Sn=V=x}dTmr%K%eLJB6Y)P3)&*6h-HC+xs=@rKRY zw2u>w=A37q>1=YinaOY6$-w zf1~Eto0(pPFXPtj`n>XLMOtjNTzL&^SK;=92g_!yxqI^M>e|y&&N4UJtMO*4&$S74 zdEL_`e?z}?)t`>tKN?SQ&*e~!IF-1N>Elba+RKkx7N6~?{FA-Vu1V|9sc)TkN4`I}HCp}4o-_JO-e0t~D9pKW{KN+1$7~lkKbNoJ=H9m@ zfc5s3!!qyn?g}d~@6%FV;3R4>eb1qkw(PHS17x;z#jp5v{nP8{sU2^!qd(4CJK^uM z&?_YY`tf@uUpxDkUC&*q{^Od!Dlv9fx6@xbM2v-}K1*(#Tezd+y?oo>RkHiG>juVc zJ`xeScb=baQ6uuUCm^(``YZ9yR>%Ff%8Dx*|RP@ZeAY?DL zqVvH4i@*mtQ)(j$mu`IhQjlBCwST6?E~AIDFYmv?U96V+?9zp^`lip7B%2LX3b%Z^ z>2I<9nvLshMZ0YxGfLk5@BDe3duEjN^Q&z4Sz_-`UT-O-`L-eZbgH{Y@*(*Cz zHWY2pUvN_7O*N0qtd%ooy*$*`-F2pQuD9rf1)g7K+NvGUvC)0E#qWxX;kzIDH!aU> zJCi*B#+kd4$!j{I`>#AW?v}dUo9Vz5|3-C}=k->Z3t#z~Cop?gO2lcz)+|1@ATVmP z-5Z~^W^;36V@^yL5jk(NX|tBDm}JhX$H&e@^O@doyBvF1_FqzjePEbP$n`(Mi;8$= zBulZ(l6>QTfOCOuvDl$mzYl~=V$yp1w$W2Fy6}s=%5(dL4a}1Bmv?`^u$^jWo({iJW2|7Phxz)A z;@^Gcesev$?d-PqltRPB<8Kr5Bs=31xT;k1l0F^3Zg}?S%c$yUVaaJe?_PxO+SSvO zw^q}AO_|8msh4`wE%n=uBWIVh&MCz98kmQY(W&sL!|IAfR6(O*+$&8_OnF_!%P=ZDQ?mH2KC z8>i*7*w3{7nQ~U-?);jKMjOvD98O)-c7BDKZr`UW9;P1C-z+Ec-j(G^CC_I3alAI^ z>Gj2)tNB+*%Sz5v_6>V9m&0WFE~UM9d|s?K`0>X!T;XnopvB6^(=V=z%Q*4e?T%AW zuzd=X*zT{(gV$fNOgPHmSDTx4w}tf<6WfHpGhcT}{bBr$rX3o^TH%r7`Zl5nZ zGyc|o?zHdfGw&GxlHRxQQ}>kcPL=6~JRb@**9ER8C_?Zuy{JIqg1=#Ic>3;S2W~5_h;JE!p0=-0X7QOMyH|wmjV+ca4M7SGx0CXH4NuwK!~d#Ot>%_fwaDG8*SR zczixCzUzA5*}$lG)9=GQ-sjG*mC-x&(N}Bb;g>%W_8t(_JJikiVPf)JYwy4Ood<@Ur1*PZ_>^=Ei#p7xy;;Pm{{wyljU z$$8IojtTBMb!1ZGSrMyEZSHaAMHAQrWP;QUf-)Rxe@l)ANQ+KROb8Y>fzyuH2ArmJkyq1j9hwx(Z;7gZIlvM<{zC6F5YOYD2NPPovA zdp#1ej>3DsDJ14wujZRHuUuHC|J2HYmtLtU!c}LOJ;aqJOm9`YwZ7CrL#f#~;NA8$ zc})7Jj-Ts4Gv(C2dnZ*sU%kIR)ADUo>@qutsYfe&?fDcrrY3(4R(({b;-I_#e`NOi z6>@QTPrtwT-QOEm5?b5McBO4M+hm)G!4(JF?su5%Si1Gk3AfBJAy=NTPC?rhUr)Es zc5~|8WB2~b>O%)UyzV-2Y+>k>_kAjYnHlXGha0sew`$+@j`$m_;rIKEmTj-WpH1R{ zFDqY1-@fNr6?Ek8)x}W>b2d8dyP)`TvwdDqoWr{AhA$R&pO`NqE1)e;|`F|VC^eAm~+*2HuA$ILfUn_F5+^iBc=amY=&-T&{WQgLpwfhOyiZ z=V{fe*N5)T3upT{Q+TJJq;1~y==-JHSENrp!hePTg->;;m~`XfvTG{I&Q50cyc$A% z*5%FVog28+RQ$oIPSvJQuVqdLwBG6dy!C~{%WSpwms@!h3@a=JTRZJ^K9$X#n!7i9 zl4otlx{RA5?Kf4mUEWGPG~1-q$jj-(vE))*gsnrhS^Bc}ZzdV`@(aHuUERAN@vYDF zy;r@=&(4t3HkkQ-quU%^fq+oyZIUxLm`*>E&-8f#%jL@jx7yY}FnO6@X6gL+amMP~ zB1+AXVG+T~QaY=S{V`ze@%&--R4_|2iY@w2vyjn+onoIQ%IqTUrEh<)-@Qva?qg1C zyXd{AVMolobgZ9bK$<%9K_(bKYh-*$0Xf`DMA@c^=K*KUc6r>cWc)DOpc# zJDxuNHGge_*JO{ce?C@UZxU=>Ve#A9@O$*b`)!{*xAkB1-TTp`tGO_AYD$7C|Hdne zgr{EXFmO6A^6+T$o?UCiIUjBHoVwhk%W}naAEg=#S)1R^J8Q3QJ(D!qWrowq4K5pf zpJ)ngJ^uB>(Nhk>Mtx4Rw)g(N=f1GC{l|H`<=0u?`tqa%Zi{)Q8rX3ElXT+|=Q&3n z$~|Vg`-Ck|7@||;qG~V!5iPV3ZmBA1sJ`%>< zVrN&!{bc*~`gMVxkwdQ;&j6E9XFwxQ@vfBLT44Jz1bE6l3vboZhdZBMytoG*o)z1^H7{3Im z)XUFpGU`3CYJ%*F9IewjprZ_wMBn zGgLaH5@k9oFNrM)NbHvGDt{h-XsN11ljr36wdvD^H#9G z3SxfXQOmy~eG<1R>$}HyxgjHqh?b?Q` z{Fkk4-n$5@WxjrN-7fKlU2z*a(m37uZkZWr{TH5~sG4hg|L6H8OMadA$%+4Usyi%RvYt*{lC5y&$w`|}*A_Z0 ztxVD``dPg9K)BG!yNeiC{pj?+A^L6hCm*Jpg}>(iJTPHR&AF?+`%KD|Dv!>d^FzC2 z`DML^WtCQiuPRsiKjr+St@`VTa*XTilG`tDZTTCq?Cs_W?ceX5Fy_dQpQf*rVxN}W z`NA)A&&M4l>1V%HOyn?~_Tqwj9M6Z2Eh=jS=1o-9i_)vk+U&i{(T3q>?3exLUX@JU zW)T#*mE&wm?4LU4Q*wO=^5k|ilF9FDh<0hqp)f#gBiz($l33Xee*MN z<#u#r|75h@qx-b*6h^7$4c%hf`Cjkg_hol=bo z9&u8U_cl+SoPUr>K}^-3@9)7)Hz$4L%ConM#8^##?6vTyIp+;0 z&qe+*Znm43&)=?d;P58Pdz&0R6L*Ic+8 z>ScTMk>On9Q0bpWS#nH@Z8AOkIIrKBt#MkFTj9muyL^HwEW9_)p1WoLA^!c0`4`yz z+OMqEz7)GEV6WmM*ICDXyklPF+O9XTna#rWcgMo0h!#A+bg(_t;0@<)RB? z-~8Q^RCmeu4%@$jQ`5>L?tVCQ`^GeNmgNO+wpOQaUTemF(s1eSrHwBg*=AhR4e#P< zIKprE`J>k%!=xh`W(ybDPu=&vFu-|{di0UZj8jft%(HfFY!RK4J!uzHO+BCWfiH%g zu9|Wu-lQcgFX8El)rfx0)1@tOwxjph1I7w5mTiv|KiH?8p1)(4Z?CIV-v2bO{v-TF z57zWOb2aWcytehPrLgGoX&n)})PnCiEnRiF<(p)fLZM3HviE0Kq;{GvFWnM)xRj;- z-xc;nMRd)BqXXUQSm%QfA z^)l~T=i&Iwt39G(5_ zTJl>f<#YPxtfo29X093@4hR2Mp1+ee@2sudDIUd#B9qQby<#!C>>Kg2Wn)z-d} zS64jo3clj%^d{Jfp^#u$|Awak93H2r7b%HrZ2el@?pW+o4oO^n>W-`~Eampf!PbIs(J)BCf&J+gPJNPar? z-HchC+-IMvJa0J5a^89Irg_`s>#--}FV2_rgy8r3bW~w$?SKE%5`PvYyWtP4&3K_uB?7sq-)=@Wircb4R-Jy z2%DjE`-RjxpO^(kuHThwPX~M{*kY6X@_&EH5)Co+e+PuX;W{-Lde=jr2CQmTMo& zYaFNZ<_l^yy$d#+2_4e1p-wVXAMhh9m279n(9{(IR3O=ISH-ID74zj_Rpv{=_K?%tfWH%x_XSM{|s zN>Ow3s+L-uzM6NISM01ezp8k|_n#A*f_RiJze!>hU9J;;|L~$oY|FQqZkVCWdi5*A zy%yP{A43u@>^s7DIgU|PJjmO=Rbu}kqfpSE36ZdQ+4L}xxRDBn?G~@`+XF6An`-pEc)}}O=~MuOsiyVwbaAA z&F%E%6g$Ib9$}XiJFUpQ_uw6`K(SL1_rg0X45qECeD%e-D0livj-vW0`foQbTxux6 z9;!S2(cHI*_pR5`o<;p z&GJe)Rw=VLjnb3PF5LEU+Tu-JHZ^k(y*FEAuy~4mq7m1Ny_?;`Dxa?idlaRzYueN4 zZ#U=EEAGGh_PU*DEbC=A5znhvRNsH?w|@OLlXYvz+mbnx+1~79FEjYvF=?07@0$$o z_`?3YR$9@#-0IbZwfhMZ%1X`{T0g7 z7jG3W+G_vmT3a@s1;6$KUB?L`&7bscU7W*b{#szo1s}%m!k3>vobr@;hk<2(f!X!K zyA1UfMt5G>S*;JK*uBj1NAvVIf{QsWYA<{6=7m#&YSpbR+8>`3#-Dj@cT6=T>Gei2 zn{}188&<|7i#o25k13bZIQF$xhB5p}!(GL^COhu`d%qp{!t%fK48xQKCp%TxRA)-3VGXSSpt=)Lb=cqlAt zbJxy!vHuPBx-1AeE4914@_X=>?GxXAhz?jC5_2gr^WKrh68J<(+d}^4vvpZ6a>p{9&1T?a?XgPlb9cAO4^J@bJNQnI%uy=Q8h1IEBZjH&76Swaj`Y0P~ zJ&$|Eu`Bb!ZHw>n%t=kyxbS!G=GKdBGEo=aS+@1n@U>)Sv)(*+GUwP%?Uz1cXB{gu zY*>`Fp6ol({B-Jx`}>zDZ?{<3&)EMr;ELqpSKc!xJvq#^C-~*>nfpaqjukDFe$Vsc z+36{U-#m`~sNlN4y40ZS?Z4O@jWe@j^^VDE&v+QF^?y=k$F+A86i*bM zZJ(QcV$teQCXJi(@-=0zwLaau>P_?WGf!vKURr6oqHR{wuNiZe8Jm}N76xbP`Zra5 zZD)NGe&^YP_8m{cErChd%s^{4_EN{ z0Jo1E-2D1q?B_AuOnozbr$hyaOdMtYX^i;nvdHyk)sa9ERbuaH6y$t|J Cn=_LD literal 0 HcmV?d00001 diff --git a/services/caddy.nix b/services/caddy.nix index 0d62bb3..be4c1df 100644 --- a/services/caddy.nix +++ b/services/caddy.nix @@ -39,7 +39,7 @@ in } ''; - ${service_configs.gitea.domain}.extraConfig = '' + "${service_configs.gitea.domain}".extraConfig = '' reverse_proxy :${builtins.toString config.services.gitea.settings.server.HTTP_PORT} ''; @@ -78,7 +78,7 @@ in }; systemd.tmpfiles.rules = [ - "d ${service_configs.https.data_dir} 0750 ${config.services.caddy.user} ${config.services.caddy.group}" + "d ${service_configs.https.data_dir} g+rwx ${config.services.caddy.user} ${config.services.caddy.group}" ]; systemd.packages = with pkgs; [ nssTools ]; diff --git a/services/matrix.nix b/services/matrix.nix index df9f0ac..816f3d6 100644 --- a/services/matrix.nix +++ b/services/matrix.nix @@ -12,9 +12,6 @@ services.matrix-conduit = { enable = true; package = pkgs.conduwuit; - # package = pkgs.conduwuit.overrideAttrs (old: { - # cargoBuildFeatures = pkgs.lib.remove "release_max_log_level" old.cargoBuildFeatures; - # }); settings.global = { port = 6167; diff --git a/services/qbittorrent.nix b/services/qbittorrent.nix index 656a544..57bc643 100644 --- a/services/qbittorrent.nix +++ b/services/qbittorrent.nix @@ -59,7 +59,11 @@ IncludeOverheadInLimits = false; GlobalMaxRatio = 2; - QueueingSystemEnabled = false; # seed all torrents all the time + QueueingSystemEnabled = false; # seed all torrents all the timei + + # add a few trackers TODO! add a script so I can just do a list + AddTrackersEnabled = true; + AdditionalTrackers = "udp://tracker.opentrackr.org:1337/announce\\nudp://open.stealth.si:80/announce\\nudp://open.demonii.com:1337\\nudp://exodus.desync.com:6969/announce"; }; }; };