From bd2585f8fd9a1065cb47402616a8895f29a94b63 Mon Sep 17 00:00:00 2001
From: Abdulmuizz Hamzat <103611443+buildwithhamzat@users.noreply.github.com>
Date: Thu, 9 Jul 2026 10:01:24 +0100
Subject: [PATCH] docs(self-hosted): rework Railway + Coolify self-hosting
guides with walkthroughs and explicit env vars (#700)
---
.env.example | 2 +-
.../docs/content/docs/self-hosted/coolify.mdx | 290 ++++++++++++++++--
apps/docs/content/docs/self-hosted/docker.mdx | 6 +-
.../docs/content/docs/self-hosted/railway.mdx | 179 +++++++++--
apps/docs/public/coolify-01-add-resource.png | Bin 0 -> 554128 bytes
apps/docs/public/coolify-01-new-resource.png | Bin 0 -> 142689 bytes
apps/docs/public/coolify-02-services.png | Bin 0 -> 413871 bytes
apps/docs/public/coolify-03-env-vars.png | Bin 0 -> 619757 bytes
apps/docs/public/coolify-04-image-tag.png | Bin 0 -> 61241 bytes
.../public/coolify-05-dashboard-domain.png | Bin 0 -> 411689 bytes
apps/docs/public/coolify-06-deploy-logs.png | Bin 0 -> 493084 bytes
.../public/railway-01-deploy-template.png | Bin 0 -> 196262 bytes
.../public/railway-02-services-overview.png | Bin 0 -> 228785 bytes
apps/docs/public/railway-03-jobs-smtp.png | Bin 0 -> 1346059 bytes
.../public/railway-04-minio-credentials.png | Bin 0 -> 1381357 bytes
apps/docs/public/railway-05-api-config.png | Bin 0 -> 1366286 bytes
.../railway-06-api-config-additional.png | Bin 0 -> 1506603 bytes
apps/docs/public/railway-07-deploying.png | Bin 0 -> 1510772 bytes
.../public/railway-08-first-boot-crash.png | Bin 0 -> 439014 bytes
.../public/railway-09-generate-domain.png | Bin 0 -> 415575 bytes
.../public/railway-10-redeploy-dashboard.png | Bin 0 -> 414728 bytes
apps/docs/public/railway-11-redeploy-api.png | Bin 0 -> 331579 bytes
apps/docs/public/railway-12-signup.png | Bin 0 -> 125649 bytes
docker/coolify/docker-compose.yaml | 146 +++++++++
24 files changed, 555 insertions(+), 68 deletions(-)
create mode 100644 apps/docs/public/coolify-01-add-resource.png
create mode 100644 apps/docs/public/coolify-01-new-resource.png
create mode 100644 apps/docs/public/coolify-02-services.png
create mode 100644 apps/docs/public/coolify-03-env-vars.png
create mode 100644 apps/docs/public/coolify-04-image-tag.png
create mode 100644 apps/docs/public/coolify-05-dashboard-domain.png
create mode 100644 apps/docs/public/coolify-06-deploy-logs.png
create mode 100644 apps/docs/public/railway-01-deploy-template.png
create mode 100644 apps/docs/public/railway-02-services-overview.png
create mode 100644 apps/docs/public/railway-03-jobs-smtp.png
create mode 100644 apps/docs/public/railway-04-minio-credentials.png
create mode 100644 apps/docs/public/railway-05-api-config.png
create mode 100644 apps/docs/public/railway-06-api-config-additional.png
create mode 100644 apps/docs/public/railway-07-deploying.png
create mode 100644 apps/docs/public/railway-08-first-boot-crash.png
create mode 100644 apps/docs/public/railway-09-generate-domain.png
create mode 100644 apps/docs/public/railway-10-redeploy-dashboard.png
create mode 100644 apps/docs/public/railway-11-redeploy-api.png
create mode 100644 apps/docs/public/railway-12-signup.png
create mode 100644 docker/coolify/docker-compose.yaml
diff --git a/.env.example b/.env.example
index 56faca5e..8ec0b0c0 100644
--- a/.env.example
+++ b/.env.example
@@ -12,7 +12,7 @@
# - For production, PIN an exact release (e.g. 1.4.2) so a merge to main never auto-breaks you.
# "1.4.2" / "1.4" / "1" are immutable, published on a v* git tag.
# Rollback = set this back to the previous version, then `... pull && up -d`.
-CIO_VERSION=latest
+CIO_VERSION=1
# ──────────────────────────────────────────────
# Required
diff --git a/apps/docs/content/docs/self-hosted/coolify.mdx b/apps/docs/content/docs/self-hosted/coolify.mdx
index 907bb790..02c6232c 100644
--- a/apps/docs/content/docs/self-hosted/coolify.mdx
+++ b/apps/docs/content/docs/self-hosted/coolify.mdx
@@ -1,55 +1,277 @@
---
title: Coolify
-description: Deploy ClassroomIO on Coolify using the pull-based Docker Compose stack.
+description: Deploy ClassroomIO on Coolify using the pull-based Docker Compose stack, with a video walkthrough.
---
import { Callout } from 'fumadocs-ui/components/callout';
+import { Step, Steps } from 'fumadocs-ui/components/steps';
-[Coolify](https://coolify.io) is a self-hosted PaaS (an open-source Heroku/Netlify alternative) you run on your own VPS. It deploys ClassroomIO as a **Docker Compose resource** using the pull-based [`docker-compose.images.yaml`](https://github.com/classroomio/classroomio/blob/main/docker-compose.images.yaml) — so your Coolify host **pulls** the published `classroomio/*` images and never builds anything.
+[Coolify](https://coolify.io) is a self-hosted PaaS (an open-source Heroku/Netlify alternative) you run on your own VPS. It runs ClassroomIO from the published `classroomio/*` images — your Coolify host **pulls** them and never builds anything.
+
+## Watch the walkthrough
+
+Prefer to follow along? This video walks through the whole Coolify deployment end to end. The written steps below mirror it, and the [Environment variable reference](#environment-variable-reference) has every value to copy.
+
+{/* TODO: replace REPLACE_WITH_VIDEO_ID with the Coolify walkthrough video id once recorded */}
+
+
+
## Prerequisites
-- A running Coolify instance with a connected server.
-- A domain pointed at that server (Coolify's built-in proxy terminates HTTPS for you).
+- A running **Coolify instance** with a connected server.
+- A **domain** with a DNS **A record pointing at your Coolify server's IP**. Coolify's built-in proxy terminates HTTPS and issues the certificate for you.
+- An **SMTP provider** (or Zoho/ZeptoMail) for signup verification, password reset, and invite emails. See [Nodemailer SMTP docs](https://nodemailer.com/smtp/).
+- *Optional:* an **OpenAI API key** (transcription + AI course generation) and Google OAuth / Unsplash keys.
-## Steps
+
+ You'll reuse `BETTER_AUTH_SECRET` and `PRIVATE_SERVER_KEY` across services. Coolify does **not**
+ run our secret-generation script, so generate them once yourself and keep them handy:
-1. **New Resource → Docker Compose.** Point Coolify at this repo and the compose path `docker-compose.images.yaml`, or paste the file's contents.
+ ```zsh title="Terminal"
+ openssl rand -hex 32 # BETTER_AUTH_SECRET
+ openssl rand -hex 32 # PRIVATE_SERVER_KEY (must be identical in the api and dashboard services)
+ ```
+
-2. **Set environment variables** (Coolify's UI — these become the compose `.env`). Coolify does **not** run our `run-docker-full-stack.sh`, so generate secrets yourself:
+## Step-by-step walkthrough
- ```zsh title="Required"
- CIO_VERSION=1.4.2 # pin a release (not "latest") so upgrades are deliberate
- DASHBOARD_ORIGIN=https://app.yourdomain.com
- BETTER_AUTH_SECRET=
- PRIVATE_SERVER_KEY= # must be identical in the api and dashboard services
- POSTGRES_PASSWORD=
- # Email (required for signup/reset/invites)
- SMTP_HOST=
- SMTP_PORT=
- SMTP_USER=
- SMTP_PASSWORD=
- SMTP_SENDER=
- ```
+This uses a **Docker Compose resource**: you paste the compose file and set every environment value yourself. The flow is: **create a project → add the compose file → set environment variables → point the dashboard domain → deploy → sign up**.
-
- `BETTER_AUTH_SECRET` and `PRIVATE_SERVER_KEY` are required. The compose file fails fast if
- either is empty, so it never boots with a predictable session-signing secret.
-
+
-3. **Assign a domain.** Map your domain to the **dashboard** service (internal port `3082`); Coolify's reverse proxy issues the certificate. The dashboard proxies API calls server-side, so you normally only need the dashboard exposed publicly — the `api` service stays internal.
+
+### Create a project and add a Docker Compose resource
-4. **Object storage.** Recommended: the **bundled MinIO** — enable its profile with
- `COMPOSE_PROFILES=minio` and Coolify runs MinIO alongside the stack. Give the MinIO volume
- persistent storage in Coolify and route its public URL (`OBJECT_STORAGE_PUBLIC_ENDPOINT` /
- `OBJECT_STORAGE_MEDIA_PUBLIC_BASE_URL`) so browsers can load media. Prefer fully-managed
- storage instead? Point the same `OBJECT_STORAGE_*` variables at external **S3 / Cloudflare R2**
- and leave the `minio` profile off — see the [Cloudflare Setup](/docs/contributor-guides/cloudflare-setup) guide for R2.
+Log in to Coolify and **create a project**. When you add a resource, Coolify asks what type it is — GitHub, a Docker image, a service, or a **Docker Compose** file. Choose **Docker Compose**, then **paste the contents of [`docker-compose.images.yaml`](https://github.com/classroomio/classroomio/blob/main/docker-compose.images.yaml)** into the editor.
- **Upload size limits** (optional): set `UPLOAD_MAX_*_MB` in Coolify's env for both the `api` and
- `dashboard` services (same values in each). See [Docker self-hosting → Upload file size limits](/docs/self-hosted/docker#optional--upload-file-size-limits).
+
-5. **Deploy.** Coolify pulls `classroomio/{api,dashboard,jobs}:${CIO_VERSION}`, starts Postgres + Redis, the API container runs database setup on first boot, then the dashboard and the **jobs worker** come up.
+
+
+
+### Confirm the services parsed
+
+After saving, Coolify parses the compose file and lists the services: `postgres`, `redis`, `api`, `dashboard`, `jobs` (and `minio` once you enable its profile in the next step). Confirm they all appear before moving on.
+
+
+
+
+
+### Set the environment variables
+
+Open the resource's **Environment Variables** page. This is where most Coolify deployments go wrong, so treat the [Environment variable reference](#environment-variable-reference) below as the source of truth: **set every variable it lists as required, and leave the optional ones blank.** The block here covers the essentials to get you started; the full copy-paste reference is a few sections down.
+
+```zsh title="Essentials — set all of these"
+COMPOSE_PROFILES=minio # runs the bundled MinIO object storage
+DASHBOARD_ORIGIN=https://dash.yourdomain.com
+BETTER_AUTH_SECRET=
+PRIVATE_SERVER_KEY= # must be identical in the api and dashboard services
+POSTGRES_PASSWORD=
+# Email (signup verification, password reset, invites)
+SMTP_HOST=smtp.yourprovider.com
+SMTP_PORT=587
+SMTP_USER=
+SMTP_PASSWORD=
+SMTP_SENDER=ClassroomIO
+# Object storage + domains: see the full reference below
+```
+
+👉 The essentials above get you started, but the complete list of what to set — object storage, domains, and every optional variable — is in the [**Environment variable reference**](#environment-variable-reference) below. Copy that full block before you deploy.
+
+
+ There's no way to guess which variables Coolify needs, so the [Environment variable
+ reference](#environment-variable-reference) spells it out. The rule is simple: **every variable
+ shown with a value must be set** for a smooth deployment (secrets, database, domains, object
+ storage, and SMTP are all needed). **Every variable left blank after `=` is optional** — fill it in
+ only if you use that integration. Leaving an optional one blank never causes a build or boot error.
+
+
+
+
+
+
+### Confirm the image tag
+
+`CIO_VERSION` chooses the tag pulled for `classroomio/{api,dashboard,jobs}`. **Confirm the tag you use actually exists** at [hub.docker.com/r/classroomio](https://hub.docker.com/r/classroomio/) before deploying.
+
+
+ Set `CIO_VERSION=1.0.0` to pin an exact release. `latest` is the freshest `main` build — it moves
+ on every merge (rolling; may include unreleased code), while the version tags (`1.0.0`, `1.0`, `1`)
+ are immutable, pinned releases. Pinning an exact release makes upgrades deliberate and deploys
+ reproducible.
+
+
+
+
+
+
+### Set the dashboard domain
+
+Open the **dashboard** service → **Settings** and set its domain, including the internal port, e.g. `https://dash.yourdomain.com:3082`. Coolify maps that FQDN to the container's port `3082` and issues the certificate through its proxy.
+
+The dashboard proxies API calls server-side, so you normally only expose the dashboard publicly — the `api` service stays internal.
+
+
+
+
+
+### Deploy
+
+Click **Deploy**. Coolify pulls `classroomio/{api,dashboard,jobs}:${CIO_VERSION}`, starts Postgres + Redis, the API container runs database setup on first boot, then the dashboard and the **jobs worker** come up. Watch the **logs** — they tell you when every service is up.
+
+
+
+
+
+### Open the app and sign up
+
+Once the logs show the stack is healthy, open your dashboard URL (`https://dash.yourdomain.com`) in a new browser tab and **sign up**. The **first** account becomes the organization **admin**. Every signup or sign-in after that joins as a student — unless you invite them with a specific role.
+
+
+
+
+
+
+## Environment variable reference
+
+You set these on the resource's Environment Variables page (Step 3). This is the complete picture — copy the block below, then replace the placeholder values with your own.
+
+
+ **Every variable shown with a value below is required** for a working deployment. **Every variable
+ left blank after `=` is optional** — fill it in only if you use that feature. A blank optional
+ variable never causes a build or boot error, so don't put junk into fields you aren't using.
+
+
+```zsh title=".env — a complete working Coolify deployment"
+# ── Secrets (generate with: openssl rand -hex 32) ──
+BETTER_AUTH_SECRET=
+PRIVATE_SERVER_KEY= # identical in the api and dashboard services
+
+# ── Object storage profile ──
+COMPOSE_PROFILES=minio # runs the bundled MinIO alongside the stack
+
+# ── Database ──
+POSTGRES_DB=classroomio
+POSTGRES_USER=postgres
+POSTGRES_PASSWORD=
+
+# ── Domains & routing ──
+PUBLIC_IS_SELFHOSTED=true
+DASHBOARD_ORIGIN=https://dash.yourdomain.com
+PUBLIC_SERVER_URL=https://dash.yourdomain.com
+PRIVATE_SERVER_URL=http://api:3081
+PRIVATE_APP_HOST=dash.yourdomain.com
+PRIVATE_APP_SUBDOMAINS=app
+
+# ── Object storage (MinIO) ──
+MINIO_ROOT_USER=
+MINIO_ROOT_PASSWORD=
+MINIO_SERVER_URL=https://storage.yourdomain.com
+OBJECT_STORAGE_ENDPOINT=http://minio:9000
+OBJECT_STORAGE_PUBLIC_ENDPOINT=https://storage.yourdomain.com
+OBJECT_STORAGE_ACCESS_KEY_ID=
+OBJECT_STORAGE_SECRET_ACCESS_KEY=
+OBJECT_STORAGE_FORCE_PATH_STYLE=true
+OBJECT_STORAGE_MEDIA_PUBLIC_BASE_URL=https://storage.yourdomain.com/media
+OBJECT_STORAGE_BUCKET_VIDEOS=videos
+OBJECT_STORAGE_BUCKET_DOCUMENTS=documents
+OBJECT_STORAGE_BUCKET_MEDIA=media
+CSP_MEDIA_SRC_DOMAINS=https://storage.yourdomain.com # so browsers can load media
+
+# ── Email (SMTP — signup verification, password reset, invites) ──
+SMTP_HOST=smtp.yourprovider.com
+SMTP_PORT=587
+SMTP_USER=
+SMTP_PASSWORD=
+SMTP_SENDER=ClassroomIO
+
+# ── Optional — leave blank unless you need them ──
+CIO_VERSION=1.0.0 # pinned release; blank = latest (rolling main build)
+GOOGLE_CLIENT_ID= # Google OAuth sign-in
+GOOGLE_CLIENT_SECRET=
+OPENAI_API_KEY= # transcription + AI course generation
+UNSPLASH_API_KEY= # Unsplash image search
+LICENSE_KEY= # enterprise features (SSO)
+ALLOWED_EXTERNAL_DOMAINS= # overrides all CSP_*_DOMAINS below
+CSP_SCRIPT_SRC_DOMAINS=
+CSP_STYLE_SRC_DOMAINS=
+CSP_CONNECT_SRC_DOMAINS=
+CSP_FRAME_SRC_DOMAINS=
+CSP_FONT_SRC_DOMAINS=
+TRUSTED_ORIGINS= # only for direct browser-to-API calls (proxy is same-origin)
+OBJECT_STORAGE_REGION= # only for some external S3 providers
+SKIP_DB_SETUP= # blank = run DB setup on first boot (leave blank)
+```
+
+### Required — set all of these
+
+| Variable | What it's for |
+|----------|---------------|
+| `BETTER_AUTH_SECRET` | Session-signing secret. Generate with `openssl rand -hex 32`. |
+| `PRIVATE_SERVER_KEY` | Dashboard-to-API auth key. Must be **identical** in the api and dashboard services. |
+| `COMPOSE_PROFILES` | Set to `minio` to run the bundled object storage with the stack. |
+| `POSTGRES_DB` / `POSTGRES_USER` / `POSTGRES_PASSWORD` | Database name, user, and a **strong** password. |
+| `PUBLIC_IS_SELFHOSTED` | `true` for self-hosted mode. |
+| `DASHBOARD_ORIGIN` | Public dashboard URL — used as the auth base URL and in invite/email links. |
+| `PUBLIC_SERVER_URL` | Public origin the browser uses (your dashboard domain). |
+| `PRIVATE_SERVER_URL` | Internal API URL over the Docker network (`http://api:3081`). |
+| `PRIVATE_APP_HOST` / `PRIVATE_APP_SUBDOMAINS` | Dashboard host and subdomain routing. |
+| `MINIO_ROOT_USER` / `MINIO_ROOT_PASSWORD` | MinIO credentials — also used as the object-storage access key / secret. |
+| `MINIO_SERVER_URL` | Public storage URL (fixes MinIO console redirects behind the proxy). |
+| `OBJECT_STORAGE_ENDPOINT` | Internal endpoint the app uploads to (`http://minio:9000`). |
+| `OBJECT_STORAGE_PUBLIC_ENDPOINT` | Public storage endpoint browsers download from. |
+| `OBJECT_STORAGE_ACCESS_KEY_ID` / `OBJECT_STORAGE_SECRET_ACCESS_KEY` | Storage credentials (match the MinIO root user/password). |
+| `OBJECT_STORAGE_FORCE_PATH_STYLE` | `true` — required for MinIO. |
+| `OBJECT_STORAGE_MEDIA_PUBLIC_BASE_URL` | Public base URL for media (`…/media`). |
+| `OBJECT_STORAGE_BUCKET_VIDEOS/DOCUMENTS/MEDIA` | Bucket names (`videos`, `documents`, `media`). |
+| `CSP_MEDIA_SRC_DOMAINS` | Your storage domain — otherwise the browser's CSP blocks uploaded media. |
+| `SMTP_HOST` / `SMTP_PORT` / `SMTP_USER` / `SMTP_PASSWORD` / `SMTP_SENDER` | SMTP server for signup verification, password reset, and invites. |
+
+
+ Of the above, `BETTER_AUTH_SECRET` and `PRIVATE_SERVER_KEY` are the two the compose file
+ **fails fast** on: leave either empty and the containers refuse to boot (so ClassroomIO never runs
+ with a predictable session-signing secret). The rest won't abort the boot, but the deployment
+ won't work correctly without them — set them all.
+
+
+### Optional — leave blank unless you need them
+
+| Variable | Enables |
+|----------|---------|
+| `CIO_VERSION` | Image tag to pull. Blank = `latest` (rolling main); pin an exact release such as `1.0.0` (see the tag step). |
+| `GOOGLE_CLIENT_ID` / `GOOGLE_CLIENT_SECRET` | Google OAuth sign-in. |
+| `OPENAI_API_KEY` | Transcription + AI course generation (jobs worker). |
+| `UNSPLASH_API_KEY` | Unsplash image search. |
+| `LICENSE_KEY` | Enterprise features — SSO requires a license ([book a call](http://cal.com/classroomio/enterprise)). |
+| `ALLOWED_EXTERNAL_DOMAINS` | Overrides all `CSP_*_DOMAINS` vars with one comma-separated allowlist. |
+| `CSP_SCRIPT_SRC_DOMAINS`, `CSP_STYLE_SRC_DOMAINS`, `CSP_CONNECT_SRC_DOMAINS`, `CSP_FRAME_SRC_DOMAINS`, `CSP_FONT_SRC_DOMAINS` | Per-directive CSP allowlists for extra CDN/font/frame domains. |
+| `TRUSTED_ORIGINS` | Extra origins allowed to call the API directly (normal dashboard traffic is same-origin via the proxy). |
+| `OBJECT_STORAGE_REGION` | Region for some external S3 providers (not needed for MinIO). |
+| `SKIP_DB_SETUP` | Skips first-boot database setup — leave blank so it runs. |
+| `PUBLIC_APP_TITLE`, `PUBLIC_APP_DESCRIPTION`, `PUBLIC_OG_IMAGE_URL` | Custom branding / meta tags. |
+
+### Object storage
+
+Recommended: the **bundled MinIO** — enable its profile with `COMPOSE_PROFILES=minio` and Coolify
+runs MinIO alongside the stack. Give the MinIO volume persistent storage in Coolify and route its
+public URL (`OBJECT_STORAGE_PUBLIC_ENDPOINT` / `OBJECT_STORAGE_MEDIA_PUBLIC_BASE_URL`) so browsers
+can load media. Prefer fully-managed storage instead? Point the same `OBJECT_STORAGE_*` variables
+at external **S3 / Cloudflare R2** and leave the `minio` profile off — see the
+[Cloudflare Setup](/docs/contributor-guides/cloudflare-setup) guide for R2.
+
+
+ Single-node MinIO has no redundancy — its volume is the only thing protecting your uploads. Give
+ it persistent storage in Coolify and back it up. If you'd rather not operate storage, use external
+ **Cloudflare R2 / AWS S3** instead (R2 has no egress fees): point the same `OBJECT_STORAGE_*`
+ vars at the provider.
+
+
+### Upload size limits (optional)
+
+Set `UPLOAD_MAX_*_MB` in Coolify's env for both the `api` and `dashboard` services (same values in
+each), e.g. `UPLOAD_MAX_DOCUMENT_MB=50`. See
+[Docker self-hosting → Upload file size limits](/docs/self-hosted/docker#optional--upload-file-size-limits).
## Upgrades & rollback
diff --git a/apps/docs/content/docs/self-hosted/docker.mdx b/apps/docs/content/docs/self-hosted/docker.mdx
index c17a5bde..6dcc079d 100644
--- a/apps/docs/content/docs/self-hosted/docker.mdx
+++ b/apps/docs/content/docs/self-hosted/docker.mdx
@@ -30,7 +30,7 @@ curl -o .env https://raw.githubusercontent.com/classroomio/classroomio/main/.env
2. Edit `.env`. At minimum set `CIO_VERSION` (pin a release), `DASHBOARD_ORIGIN`, the auth secrets, and SMTP:
```zsh title=".env"
-CIO_VERSION=1.4.2 # pin a release (not "latest") so upgrades are deliberate
+CIO_VERSION=1.0.0 # pin a release (not "latest") so upgrades are deliberate
DASHBOARD_ORIGIN=https://app.yourdomain.com
BETTER_AUTH_SECRET=
PRIVATE_SERVER_KEY= # must be identical in the api and dashboard
@@ -112,8 +112,8 @@ The script builds and starts Postgres, Redis, MinIO (object storage), the API, t
ClassroomIO publishes versioned images. `CIO_VERSION` controls which tag you run:
-- Pin an exact release (e.g. `1.4.2`) in production so a merge to `main` never restarts you onto changed images unattended.
-- `latest` = the freshest `main` build — it moves on every merge (rolling; may include unreleased code). Version tags (`1.4.2`, `1.4`, `1`) are the immutable, pinned releases.
+- Pin an exact release (e.g. `1.0.0`) in production so a merge to `main` never restarts you onto changed images unattended.
+- `latest` = the freshest `main` build — it moves on every merge (rolling; may include unreleased code). Version tags (`1.0.0`, `1.0`, `1`) are the immutable, pinned releases.
**Pre-built images path** — bump `CIO_VERSION` in `.env`, then re-pull and recreate:
diff --git a/apps/docs/content/docs/self-hosted/railway.mdx b/apps/docs/content/docs/self-hosted/railway.mdx
index 36452101..ca0edd10 100644
--- a/apps/docs/content/docs/self-hosted/railway.mdx
+++ b/apps/docs/content/docs/self-hosted/railway.mdx
@@ -4,14 +4,148 @@ description: Deploy ClassroomIO on Railway with the one-click template.
---
import { Callout } from 'fumadocs-ui/components/callout';
+import { Step, Steps } from 'fumadocs-ui/components/steps';
The quickest hosted deployment is the [Railway Template](https://railway.com/deploy/classroomio-1?referralCode=8OyIj5). It provisions the API, dashboard, and jobs worker services plus the Postgres and Redis plugins for you.
[](https://railway.com/deploy/classroomio-1?referralCode=8OyIj5)
-After deploying the template, fill in the environment variables for each service below.
+## Watch the walkthrough
-## cio-api
+Prefer to follow along? This video walks through the whole deployment end to end. The written steps below mirror it, and the [Environment variable reference](#environment-variable-reference) has every value to copy.
+
+
+
+
+
+## Prerequisites
+
+- A **Railway account** (a paid plan is recommended — the stack runs several always-on services).
+- An **SMTP provider** (or Zoho/ZeptoMail) for signup verification, password reset, and invite emails. See [SMTP Setup](#smtp-setup).
+- *Optional:* a **custom domain** for the dashboard and storage, an **OpenAI API key** (transcription + AI course generation), and Google OAuth / Unsplash keys.
+
+
+ You'll reuse `BETTER_AUTH_SECRET` and `PRIVATE_SERVER_KEY` across services. Generate them once and keep them handy:
+
+ ```zsh title="Terminal"
+ openssl rand -hex 32 # BETTER_AUTH_SECRET
+ openssl rand -hex 32 # PRIVATE_SERVER_KEY (must be identical in cio-api and cio-dashboard)
+ ```
+
+
+## Step-by-step walkthrough
+
+The one-click template provisions **all of the services** for you — Postgres, Redis, `cio-api`, `cio-dashboard`, `cio-jobs`, and `cio-minio` (object storage). The flow is: **configure a few values → deploy → connect the dashboard domain → sign up**.
+
+
+
+
+
+### Click "Deploy on Railway"
+
+Click the **Deploy on Railway** button above. Railway opens the template page where all of the ClassroomIO services are listed and ready to configure.
+
+
+
+
+
+### Review the preconfigured services
+
+The template comes with every service preconfigured — most need nothing from you:
+
+- **Redis** and **Postgres** — no configuration required.
+- **cio-dashboard** — no required configuration (optionally set branding such as the public OG image; not required).
+
+The next three steps cover the services that **do** need input: `cio-jobs`, `cio-minio`, and `cio-api`.
+
+
+
+
+
+### Configure cio-jobs (SMTP)
+
+`cio-jobs` sends invites, notifications, verification, and password-reset emails, so it needs SMTP credentials. Fill these in:
+
+- `SMTP_HOST`
+- `SMTP_PORT`
+- `SMTP_USER`
+- `SMTP_SENDER`
+- `SMTP_PASSWORD`
+
+
+
+
+
+### Configure cio-minio (object storage)
+
+Set the storage credentials on `cio-minio`:
+
+- `MINIO_SERVER_URL` — optional but recommended (fixes MinIO console redirects behind the proxy); the template presets it to the generated `cio-minio` domain, so you normally just confirm it
+- `MINIO_ROOT_USER`
+- `MINIO_ROOT_PASSWORD`
+
+
+
+
+
+### Configure cio-api
+
+On `cio-api`, set the SMTP host and any additional values you want. See the [Environment variable reference](#environment-variable-reference) below for the full list (object storage, auth secrets, dashboard origin, and more).
+
+
+
+
+
+
+### Deploy
+
+Click **Deploy**. Railway begins building and bringing the services online — Redis, Postgres, and the rest come up first.
+
+
+
+
+
+### First boot may crash — this is expected
+
+
+ On the first deploy, `cio-api` can crash. This is expected **only when you rely on the Railway-generated subdomain**: the API needs the dashboard's public domain (Better Auth's base URL), which doesn't exist yet. If you're using your **own custom subdomain**, this crash doesn't happen — skip ahead to signing up.
+
+
+
+
+
+
+### Generate the dashboard domain
+
+Open **cio-dashboard → Settings → Networking** and click **Generate Domain**. Railway assigns the public domain the API needs.
+
+
+
+
+
+### Redeploy cio-dashboard and cio-api
+
+Redeploy **cio-dashboard**, then **cio-api**, so both pick up the newly generated domain. They should now boot cleanly.
+
+
+
+
+
+
+### Open the app and sign up
+
+Open the generated dashboard URL in a **new browser tab** and **sign up** to create your first account.
+
+
+
+
+
+
+## Environment variable reference
+
+You set these values **while configuring each service on the template page** (the configure steps above) — you don't enter them again after deploying. Use this section as the reference for what each service's variables should be.
+
+### cio-api
```zsh title="env"
DATABASE_URL="${{db.DATABASE_URL}}"
@@ -47,7 +181,7 @@ OBJECT_STORAGE_MEDIA_PUBLIC_BASE_URL=https://storage.yourdomain.com/media
Optional: add `GOOGLE_CLIENT_ID`, `GOOGLE_CLIENT_SECRET` for OAuth, `UNSPLASH_API_KEY` for image search, or `LICENSE_KEY` for enterprise features.
-## cio-dashboard
+### cio-dashboard
```zsh title="env"
# RAILWAY_PUBLIC_DOMAIN here = this dashboard service's own public domain.
@@ -64,7 +198,7 @@ Optional: add `PUBLIC_APP_TITLE`, `PUBLIC_APP_DESCRIPTION`, `PUBLIC_OG_IMAGE_URL
**Upload size limits** (optional): add the same `UPLOAD_MAX_*_MB` values to **cio-api** and **cio-dashboard** (e.g. `UPLOAD_MAX_DOCUMENT_MB=50`). See [Docker self-hosting → Upload file size limits](/docs/self-hosted/docker#optional--upload-file-size-limits).
-## cio-jobs (background worker)
+### cio-jobs (background worker)
The jobs worker has **no public domain** — it drains the Redis queue (video processing, transcription, AI course generation, and emails). It shares the same Postgres, Redis, storage, email, and OpenAI settings as the API:
@@ -91,22 +225,18 @@ OPENAI_API_KEY=
`PRIVATE_SERVER_KEY` must be the same value in both API and dashboard. It authenticates server-side dashboard requests to the API. Referencing `${{cio-api.PRIVATE_SERVER_KEY}}` in the dashboard keeps them in sync.
-## cio-minio (object storage)
+### cio-minio (object storage)
-We recommend a self-hosted **MinIO** service for object storage. Add it as a new service from
-the Docker image `minio/minio:latest`:
-
-- **Start command:** `server /data --console-address ":9001"`
-- **Volume:** attach a Railway Volume mounted at **`/data`** — **required**, or every upload is
- wiped on each redeploy.
-- **Public domain:** e.g. `storage.yourdomain.com` with **target port `9000`** (the S3 API).
- Railway also gives it a private domain (`cio-minio.railway.internal:9000`) for the api/jobs.
+`cio-minio` ships **in the template** — its `/data` volume is already attached and the `videos`,
+`documents`, and `media` buckets are already seeded. You only set its credentials during
+configuration:
```zsh title="env"
MINIO_ROOT_USER=
MINIO_ROOT_PASSWORD=
-# Optional (silences console redirect warnings behind the proxy):
-MINIO_SERVER_URL=https://storage.yourdomain.com
+# Recommended (not required — ClassroomIO reaches storage via OBJECT_STORAGE_* below;
+# this only fixes MinIO's own console redirects behind the proxy). Template presets it.
+MINIO_SERVER_URL=https://${{cio-minio.RAILWAY_PUBLIC_DOMAIN}}
```
The api and jobs services reach MinIO over **two** endpoints: the private `OBJECT_STORAGE_ENDPOINT`
@@ -114,28 +244,17 @@ The api and jobs services reach MinIO over **two** endpoints: the private `OBJEC
(browser-facing presigned downloads and public images) — already wired in the env blocks above.
`OBJECT_STORAGE_FORCE_PATH_STYLE=true` is required for MinIO.
-### Seed the buckets (one-time)
-
-Railway has no `minio-init`, so create the buckets once with [`mc`](https://min.io/docs/minio/linux/reference/minio-mc.html)
-(run locally against the public domain):
-
-```zsh title="Terminal"
-mc alias set cio https://storage.yourdomain.com "$MINIO_ROOT_USER" "$MINIO_ROOT_PASSWORD"
-mc mb cio/videos cio/documents cio/media --ignore-existing
-mc anonymous set download cio/media # media bucket = public read (images)
-```
-
Single-node MinIO has no redundancy — the Railway Volume is the only thing protecting your
uploads. Back it up. If you'd rather not operate storage, use external **Cloudflare R2 / AWS S3**
- instead (R2 has no egress fees): point the same `OBJECT_STORAGE_*` vars at the provider and skip
- the cio-minio service. See the [Cloudflare Setup](/docs/contributor-guides/cloudflare-setup) guide for R2.
+ instead (R2 has no egress fees): point the same `OBJECT_STORAGE_*` vars at the provider. See the
+ [Cloudflare Setup](/docs/contributor-guides/cloudflare-setup) guide for R2.
-## SMTP Setup
+### SMTP Setup
You need SMTP for email sending. See [Nodemailer SMTP docs](https://nodemailer.com/smtp/) for provider setup.
-## SSO (Enterprise)
+### SSO (Enterprise)
SSO requires a license key. Set `LICENSE_KEY` in your API environment. [Book a call](http://cal.com/classroomio/enterprise) to get a license.
diff --git a/apps/docs/public/coolify-01-add-resource.png b/apps/docs/public/coolify-01-add-resource.png
new file mode 100644
index 0000000000000000000000000000000000000000..ae881758c955c1933c770ba60ba72abdbbedb84b
GIT binary patch
literal 554128
zcmZU(1yEei5-%KuK#<@L!QI^x+%32*?(V(`?u6hFAh<5D$S%IPyE}mmZoz$d{NMNP
zt?%AjHK%6gRGsPR?qAFFoG3LFS#(rl)E6&apv%iiX}oxW41Dq8HOD)o=Qkfs%IlxI
zm+l&}5-+O8NcWy6Z>&Ene}3@-obdj^^zHK;#YIlf{lyDxkAI$*YgQCKFJ3$q$xD6K
z^f5kswEa#ao4OPA_}ISL&P{cKlM$t~a;^U9rB+yTb9qHcNx6M-)@nB;BTbqF>TOs{
zEtSKfs$ul^7G~xyOhY$6tCEtI<_i1fiUXv5F&A8?k1s7=`Fc$gy(3
zDnjX2p~%65yS=2lY}T=`k(rW4IA0zzg}iNfuFU7SEp}c=
zR!NT={mbEvZge26B`vuXU6RoT3HEd*{+)sz`c*a=Eq?s>rADv4IP*5WTmz!;KJcnx
zP+i_}!)40~N62AluT|PyV+spS^)WXkhkcr98lRU|p!j{+Wge7MO^g&HL$HdblMJRc
zs|j}F{fY1+A>8_@2671*sH8e!yYcirI{o#i9ex8hR$3b&HDuj#I8WPX0aPqQ1AD#P
zV)?ENXs|y=+R~1lLRybdOS0}8ni6rW7w<)C_$o2nnR$6hdVq#TKb;*uz-SD6EMbRLD7MiK>Lde|9>Dh^sUL
zX1A7TTG-+?>1KziDu*+V6b*6aBaB5!x-@mQOb^dJ+`P6a#*b?>Y3k~4(X1gTV%%+;
zT862r7H_MR%ok^Eq)RAZLEfZ-_@h1>G5wKb1LDhxvxsVn2z+Mqt^KmW`^$9Hwxv}O
z`6j!Z+q!#5dI~7zvhGaRUn>K=3!PuAA%|cd&K+jORadencuLXy5aZjMmc-0{9ih*km;j7k4
zWvhb6>38FtC*$3HmB##C^ZhB#Gw_I=9KrE6@QK)Kvh9bow2Ea%LW8pP2%0J-XQoBm
z5^dA@a<>Wbj-T0;&c6#ND-lM2uXueN`GmDFl@O2uF)
z;MFZ^`kdx9(Y3v~V9RR2!=)djYL^6tR`#?uB?O6uImTvb&hyv8{RUe1_Zwy`w7a;j
z##4D~RiLf96ym~+l6Z8ZhjKpvIqZu|BKKsAfnGOxvEB8GuK;|jsSQ*!HhgUOABe3F
zOn8yhN7MmUZ!4EZ_D3!TGYP6SIpS`U(^Ovv?eMQ(-}?3iZInnzjk%Yz4nEatHcpM%
ziEHFO*7?T{%+-%R+z#Dc#fi$yr8GDP`93RUfhTQ;#t^t9;CM~;<%_-o$1*DM&%i>z
z5sS2`2RJY4Inl>+qcY9fecDw(TIaI&*2)~h*#xGjbNQa_xEdC2U1HJ~9}#nZdE@Fi
zpF2^WFG1O;{+`|{TL&D=nv~0@a19~8>g)P$|$MS4C*aZkE`ni
ztR*NybpvynnPeo^9K>~rn9UCU5|qxGuPLuAN-05TTD<-S)Hs^f4suv#IA29ET6k)X
z7R3^HHnPxn+Y4xs1@DnrWr}+%fylo|tvRe-y0e3ixHNKt+9&7qIm&+6j@fq>YNfol
zf*M0o^hZ^OBdoP;6mJJv&z?$5yfRn93+-dwK(}?~f7XlU7jYbw;B^nXC>0cbemN
zle5*n!(opPP<{)wQ)q5C0pq{
zmqrbJ9$gw*wC}pL>t@ZTo^I!{r)<0h92WI&@tQ5>7o1!=WoYXv)yYyTKh63xQHzKHWw
ztL8ePTVA4-?Wm1b{F}r_pBj*L?rpafwp4b~mhCoXkJBR~Mj9khtvimw?5Ua_ea;{7
zQ);SJSRj>nrXg~=&hPi|BT#yzrPb9U%~CT>0;>#QiDE1`FLHuX*F~O?+
zHpUPReM*QgE2I407r2=K06L7{IeNGPGYec{cn^M=dj_n|_AcEs;_U}xx5ZXGbj^WJ
zb77-09+~e^8cggre0Cay`&OPR++-phv~~m6|VGCc7t-R
zz~2%L@v~)KxxW*HA8cpq#xC1rFZ~JN0sLlOCo*BV$HzE1g!an9hdFg?>#u+!?_?4*
zdrhv|8kgx+yeEWWkL@Vccc+{5ccD(uIB%41+i?*o2)9Ku$qd?1
zNRrub2LYpGtv=;S`8=!=P|pMSMwhWNFPoTkk}9^GW^Vu}%+BOD>?tu>X#w^d!|Zi_
zAFpC=txUCMarv&|z+*Z9BMR+x21!bYsxg(t@NAmr%|VUZTKw+|gY4L(%&)M+a9z;(
zjcQelpFso=wsvJTqhVj?A?n}`a^)quB0C>pkJz$&vV{m1YZ?Ld$sS6I`SR_X=L)Sh
z!)to=fUGJl+TyTuvm+=^(rKx^xhMi`dU`RlmPtjdyb1|o-huXRnAz)Eo2nCtXxk*c
znX}Kg`jTWbb1XkAC59C1SS;2)Nj0sgWK%P-?F&RoI>?rFFlb;_j`t?lqm26U^^~=*
zq8iJfq2b%949fI=!y)|FIqGcR_YR)i+9e4ZDoL5DGUuO)zH)I}p&7xgxH>w~2SOAE>P163@)TUlXG^mW`El}=NH%16%{#uu!wbTST)|*D`8@r1T=~U_Es&xUN6wHesRkLw-4Djf?9l4G8R#Q0rwWB;z05Eam
z?iBZvIV2$MrBLfqX?rvY2}A^L!79oO_NJ=kb7!-V$DsiktBO|aIADCcnEvajcys1^
z+9MF-xDE=t2oAKy%Bshn?p^cV#tXDMsPSE^3OwJ)UKdkpQ)aRdN>Wa(R?7}3;G#;&
zayo<8^;+qXv9;$j%0Tp*Wg9AI_eMDQxFy#Np9Jt!`phm{l<21;_Y?t6%CfB5qrCEG
zR{MO668B#xI}zT-SuGj5U^{80(}QZgTD~fA;?pvxs1#}&$Kc(ycjZ7w
z&8MXW_f}7c+k>pvp~LE}z0#>eS@yEhjg66&$LyY?7GN|-S-KpGe{=L#r^f^6(%2}z
znhWFx%d9IT?dvz-_5Us|Y5%eku{$JodHqKp-gG+5znFh|Lb=p-w4cXVVO7}^o8jix3
zR9!-+ZZC~~757LrDDcG)Fn2e)y1i5^oY^DwQEh!j(}A#}%b%a5{Wc-HU@d5fFUhs$
zk#|qV?(X1nK}frMy@aK^y?oVc8Rx7nwU(FT@i+5P1A$SN1cddXEe3ZU*MaAkC=)Dw|+hVik_
z^%YX6rgWe!f`Po{eut?|mpd?iNL$+8Q+d3QGCm#ef{7x3Npb&>8Z2v^v|>#5$Dx}Y
zRnTH);Ha5B^;Msj#bWGT?mHbyXl2+Ne{mTq)T
zg&2)PF7vi-M}D-}s`j#y{q*!xO!h1WbUpppralk^;hA1XtI3
z17>D_QSq+utXwN!YHHdvynyg(&u{7i@;!B7>qzcL0K3xSYIUN7vZqGAO%F{^-%8D<
zX8c@Qe8!P8h`3`jtdhu}T?GPO3JP55t~TNRg;GpT?yc^0b>PTH_+`WZkNHb3zA*c*;-XB{whe{pn36ZxY>m^?nDf@D<
zd;j2v>8XTJtrG{ArN$G9xXeoTXr6vur>F9Cugp;Wa@Zd8P$c76X3FYPx{2cAbxL4u
zZEjdO0&l43g=Mw~RC|F$&o~~CD{k~Xa+1lQIKvfOi{*K9RL5!W{^;|{*e7tPEZrl%(_Wp(1azRfD+A284!63zsOdjy)6?Qi>s1Oyt`?S%^R
zispau+P`#*^%Z_~jqVv}>IfDzZg(i}jV(>#Xf7uT-sLo3s#d9?QgJrVn=MPz_f;V_
z!nG?MPjL|GTQQ*2mo<;;O-UM~Xpu?<@AJ4k!Wjd~|cEWes5RT-~;u=2#?}@x214>#&s`(
zL;IHoy-eZ4b6=WNPDexg;~ve*FH{*S7EI#nFz3aUK;p);7?t4YF=fk!_RIaMMF7yk
zNSr4uSj?20FFPmvF5Rg)5nfR~QBk2jXHjPyr8%odSpdu2&NqI=A7msmGt51sknVas
zxP+@Z#?E$gzS1;_&9Zrswb|faArpAt1ZLFeNG=;}NpI-s6thz@AS)?AyaNFA8v+X)
z41tpCL*VmkV)%ATR3f<69;}_4#koJLMQ?dA&+H^Z|6utjAnJMPHz|{y+MF3UW5H;8
z0cOvPp2t?sO|MOc+G=HLsiw0*7RN7(@hVMtwfNr~I6lQKiZ^g>P>j!qSZOWu0OH4`
zo=Oe9L#r4&M(&nCH_iG7rSmmS3+K>`xC%8q$2N53BWLXulxE-O^SSn?C#|R?sem4clUTN=jLmt$Xn`CX@ef|E2a-)YW16Y7uCeu<`_%C
z+P&nSxw0z85T$BoMI1}dGd8;?{wj9+^(NlI5q@x{nsQ3d%9w0#89*_2T;*OeY6(Kr
zKy8-5MsZ+O>g3Q9h*&(#jFnFTrBTf=adScs1~s?r%y6>Md#t!0CLIp8$Ac-L@(>={;m<9MMsGxex1uRPQfun&6s0Bj6r
zJYuw;`C|=g9sT${=p0k`E4G#^a9Br!-s))(zLwbt*R_uCIY{sdAzyU7Yn#Bc9WZm#
z${Ieepl|2$oCiL*DVJNcgJ%&Si-rrCfabW?i@|?)^j{9MKsjx
zNPidlC#FJ9&~_gjSL5Trv$Eb~4wq|KT#j2=P$09qjMt()iLIQ>)zaRRyp|paSTuz!Ix;Zx99AWl?F00#
zl7emPez#lmk?kn|1ulBrJYhla0#GV`Utc?RNbksW~C;
z3aU#x5p7}TEDbFW_=k==^wY$PI%h!)+I=x$hm+a6iAXiGhG@gw7AoaG4nIn|2Zcp^
z`K#>umxp}Hw3?XW{D}WzX3Z95e(cf?I?|AVy}2?duw}+c|AS{jM8{)jp&v(A?!*LH
zLXhMG_c4loO13|KI-mFRDc2_v)Ly~0)$W+K6&h#+%Fb&32Is@p%j+4P9w{Ba7_Me8(4r`mobM~Y-nTV_
z<)&QmVA*vj2sC8|C2a~r3GE$HR;@ul3~)f*mlo8;XwX@qN<+|2nLA#Q*x{`O)$!=Q
zVNs?0<(UJg>X^Von(J%H(w^z;$dy~o!DqDW|MbOF3D9YgQT;~!
zp*3Yx|5;IM&4EFa^$WnPJnfH=MhrQ)!)XdF32mYdwL79XeTkMxW
z%^f3Z?d+o(nR|QRcqAg{{y_Q7H1TjN_oTQb?~>kJE3hE*6j4fS3jSI^jq`%hLyp5;
zw5yemGB+SL@Ro1#GCYvJc)0Dbe1%vb>XO#rmsR+96`gE9?SwXab2%EPn@TO#(}K-J
zokUp}ZEQPITNO~pe7JAX&d$C#kY(Xn*`S6wKwpZkRzgf;WkQHmTxo`OxAm8{$GCw7
z+ljsQ*d=gXtwb?TcCM(pf4l#yTGxD)FYxy6;ugbgcS9Us>mESIvbB-+81s(fT#vI{
z0Tu>~JP~}JqIl8wsiD$Y>0L#cg&+5MI^-^3LN3tA;IrBzNdNd|;qrXJS6}IbS1B6u
zWK>BM*Kc4$r9Z8nWLSt<0itXQGwO>Vvr~qCz&VBal!RI
zba?UGxnE_C)vCmcX!kk=V55o+hhG75VwKqf)ARMJZydAqoqNlRZ?tAmW)H5HwIgUa
zM)lX#Vxac?=)UC2J5Y3uiU@sQa^2N9-pcyWAEQU-<~$^pXI4F+ZGHJDBFer%)`}pk
z^D~k%)T-d>^pYi$Wrpg$6OlL`nr6Y=-iKV(9(KDr5z3^_)!$oR;8K_I|gtp1q&;m*37b0QyyqN;k
zr_m^kw4ZSQ!awIgSrgzw37(WBaTpqU+5&(-^RBG+Q1WqgZvLW?ll#^;Z$HmDSP@PZ3$=B#yX-8sEod>l(5S#b4L#3vxrm3!N#5Cb8j7~QNV9v&4&l*?NElUC#c$hVx+Z5q(b8X=TB)4tLX;A
zeBQ~-tT`8*{noQW&daDXYkuf5Jdt;w-ZZQ)u9iQ}v_w0V6>>h`9hio3
z)>cIH`SMLIU||N~Eb;etS{|aEpK`n6EXi@ye&x5!q*>#a!dhp0<$$gAIEuE^b3VN1
ztRDxZ?d%^XR*M4MBGte_S4QTd!Pf~SllVA*ZmSZg=i}w_rP`ytyX4+=Xrt*-2KnjjjwT;WENNsM|xtF>rU|>$V}l0luGQli=A=@QYz6^Gz0^
z&t#rP_R7j)-q9*x#jV8!W|0B2srA`hr5mwx{S&e?jX&h>#;E}TvO2hzH7@=UH&?h~
zw*cNEF`czJuvR{RyPMZn0qy&NyE*sdjb-C3o)1hzm*G1Uud`tdDX@d=l%GB~TSvt?
zUz3%4V+-+-L*vP$QNnWo(fJHRca1TaLziZ42PDUTUF^k{w|en9KqhQ#Z`+p0-|b_R
zuR}KbOe&7%5lw4^_WBONK@{3zLBT)SJIDJ;93R$gt{CQV9uZ{$JWftezvtqgCK8tu
zR%c4mZc`3M{T%SNkUGZ_DMM)&0P)=QLc9xEqUX<5uRDuvE@&Klu5b=sXwa&i7tpo1
z>&fu{aK!k$Emq20f>Br#GX(+2aNR|A;9=A&w7_a8QEj7ny%x&sd#1yJuQot10x`Tw12?waX-cc({(sFfu=T0;75MCl
z>v_KAS8(3+3!Iv}+R_v&c8A_R-0HbzpAnYs1vo_XrWbfTL)AU
z;5e1lQlSGpqd42@uH@L|#ggF?0y!HfZpHfvJ|2GDg8h4-&(m6a6l1xE6q&fvQl1
zjT+YaCUCnt|CyoxXi&aU(q^S|@pFFi1d?2I#x&mu?exGQsRH%7qNgHVmP`=E+G2{7
z)FdD?J)Z$e<5cU46XE)x@GgStJEN=w?xY(scAglGq@(b=
zb1YjpQK2Z-Tp)LxWF5mb-YkC%Al=mKI%cf$0nJHVGit~IOGXz0R!DGtfb@G6h=Sic
zMv2zKa5m)L^`5Yim-}rvteVZl7@Z;
z1|(O
z=P}v~!$Odb!c^=JX
z9@>vQv5R8Nd|_YVB`SYf2U&jy!tAIcY_E?vt8}&58dRnV+E|`J+5byi!T#d<8veU8
zWcT=(Z_HFEaF3;!`eq=JdiUr^nkuo>ou%R#YPhfIk)Hm1D3|)cCYy)`EuaRYJ5CzO
znNwgFVM)DzjKpjCUV4$o-9&a2btEU_XCaYyo~H6gh@j>_A@&dXT8v}-F^|7iTts#I
z-YzZ^B0KY|ZL_PWekLX_guM<=(hE&fM@n<`
z6%4OvGzI66Q0BQ2JDwixDv(MTmy(=U~F*tZ(*=JTG>q@Ib5QZkuA%n9{BR&tiryc*>Wv^4w7Kt&ntQcA{&
z_Dk6H-6PpOR)WW;V)FBR%td95|DnV%v@}uDmD1*Ma|Risrlz)92kq0wa&u%uf#l@m
zGODTxu7uo1|6qWJRzseW=vb18Cs?AbV*+QC_r)5ijelDDek@BU--gp_x
zY-@D-j}Q9KR{QzKU|~}VckcP{vZ#9lyKBtR&+~cEhi%l~V`D0H#OeRnzZ55T>HVQf
zO2^FYM^iE5yWrdIsy5|&hz?C_`&(WJqg;m8=-z(l{rgi#|KCRN?*YmyvNpp>#S*7H
zwT`nhE_?z4WnEoej?SZ&Pl9WxnVq}4`}JL>Jl8Oex1jFYu3K8fTh#oZ(jRbwv`YTazVyCIdW-r
zu|1yilz+T-`fNMe#q`AO@NBF9^|7>2cGZv|G2GnToREx+H~zO7xbz=4FuT#y(SZ_%
zVFIO)z&0)XfKfy%MXUU(aVz=rJi9Yv2Ov?(LI;xfHhHLyLCb3P_J75>S&&g3YCCp2
zY#`#U*eI6(4JxK?)D!IT7#bZP&-&!UZ1aB&9)lhkNeDomcGz|9roI_4rIg?Hh@Q-2
zp6^cQu@G#jV{X)nN~^gcilv1h0_a1xO5~vONVLT|$
zFdQUJM<#sAlQr_+RGwEL_V{~t+vc$?WX%p`yK!wN5DG-e?!b8FBYG-XO^yz2=K;i$
zZW8ZE4cCx>mXWJ4TEXt;cz{Tfl!dA=>J9tg%6p6e)IVml|n$gt?*FTf(=@h
zY{A@q`)yGqI%NjAL_kh;sDdCH<=f;X8jp{f$1;s85iUhvB=rB7Vc#g3@D~Y;@>4bN
z@nJISu|oBl#X(}@N8p5g_ux$hXT#U0_O{XnF|`L}|Hk0I29}DyxOJb+#!a$LFo(zc
z-tzfsO}d#*dXq2WgiBO&_eDGvwhAS&o$MQ7Og9d>X2bnwi9Dt8O)In_9}+x1Vk<=Q=%7rSj<{)e$DwAojl~@(
z84bTw(#IlBlN>AE%;@A|oO`#0&(ngeV9`2iT%1HZc$2RZ|)eNn#`oM9``8sdRieyA^S3
z`dMb*5M{+o{}D2}>Akun_A81{`HqcLh6X#;OByRd7Ar=kQ1z<>WkT=*fC*oXEk%t%
zRt>fH`+!G5i|99qChl;|bb5x-CpN$j1fD2mI{_9Gf%@j@cTtkVNl5`Db#~9t4=6Ej
z-3;F)$TU*PmTE{y?=#~{12XWVDUBr$+Yn9mfH}&8rA{#jdy83?pXGs|wQ@7wIR|y$
zd(zid=6@Cp@W2aIv5?N0-97ZMVL3VRuwH~(Q>;SXM?L~|+)g(dv%Zgt3wQ%Lo0p|a
z|0Kx&(Q-vHSv$=1pMS07%HW~IkI~wCIBQ)yUiWtOrdK=WCTu!Bc53@mwNlgg`F^lh
zSa2&8P0@gQ%23FAuaGsY3wzg%S;1I-Dkf51#W1?3NGWTeAu2#-NSc;k!}J}IwKFGa
zpGH|^h8xPF+`Aal3RRxL)Cynes5kdN{EC#Q$R&9adEx<~1#+pv-&s8Kxz`fndmML_
zC_caPmkLo5Nhw94Rr;6(iw)a~NoUGQz7y+^xar<^9o{-0*m0{M?+1xAH!yzpc^qNA
z=OO)EhK6!RcVDK7noV}Jz{eALv>d_7vk>9K6Kt=;4)2PfFbi-%JFlxtH$tVPP}rzK
z>RK4SI1+z8*1ed`Hy&6teSoqql-VF}Dy~BwR50>|A$DM~y|+p;Rs#`$q?T<_tJ1sngUB);s_Zr^NruL-3Wj{&w)&3H>T
z=#ho~9-=7pJ8LeHB&rn_Xiqhv7krHjb)ij=DvDKlvui(WA}bX4O%8X}vg#Fvq8`c?
zhua26s`QpbQ>cBf2pbFQrX6L312|TKf$1AYYt5UCcd?SH`)IEReMl#zP%Q_mBMl9j
zFpmg(J_XP>Yh343dl76FbwdpG4)L;v6Mg?E6zGl^^~_EUH~s*={F2CD(LV}$Xd~~R
zRQ|R?TvBbz2sgC_5PGSzlEG|Of(`|an|9a^*P$emA&%ZrK
z2jZkJ+-4OXjSIt$VZ+UPjl4(Sy#;*?ZH+dgO@$n{@XC7%$3Y?O*i4kT8|8n38Gip^
z@6UbgWKC#ry*=wk{z2zCu$v^Z&zOn#$MklB5j^x`h7rz;FK=Q|NU?s?H_yQ{6A}jI
z40t+0ki#i*`aRksw`|acx!B~x#&%Ql@aF!yG|gf-)GjvNhVZ6I?@q;oxf#PN9wIhQLEIxV9Yi>VI0d@m4m|B}U;{&eG3aezQU
zgMzF9>mzpmz<|>VaGmUC8h9z|vnw{)=1qYV5e|0W5hE3-q3Azpe0`5e{z=ChQ>E>i
zt@gZ*!L7HNl!QhjvRCl7A1k2`E74s0RC~YHD9;5AY=erD7}XD_B1nCV9#C)+WbY3~
zW@GE;XY6OAJKAAwh08@6YRt%jSt!un5@E_@hrY|_EMw2X&(`qfG1ZnoS*yc&T7Fu6
zB2Ey$;y~&h+X3D(DaGNBFQ`MrlI^5b{*^QQD@HqsW!^5N_sM>d
zDNx7RedpyCcZPVh@?}%bh7F+-BP&rKYyqcS=ts2cm)A7rZ#0Uign&%~b!IskL$hUu
zs~P!l9U3HTb<&YSS7#vmv7M^9wMhJ$8%j1>k(p=K=^tTf9aWy#BMmDxx|q^kLpI#R
zB5H6C$=hY?$yzV5^LZg4oKJZ_{y8!3`5=VjKasi;C0B&J;TGXKkrIQ~@=5?(hK5*D
z;KwI6uK2+%%O}wkgS^AZSr-~LiRpTFq;q;~P;Fu-6ti*U?=l{kuvsPS
zBq?j~W*UdU)zRVAV$n}uau=1mO3kSJ5@(XD6S7XpYcgp@{xIm8&^Kq`eeU0f_thI`
zDa?fAM4uxTQX-{YkA`Sj##PLXJ!phlCIxwdH#V@)F0Kk-Ed&`5+}dG1T;G;mj@-_y
z?|kUdBYe+COSxS>Xxg!ZB2{oc=@Zuw6;3p?00bg?KG~Z8f~j6K#I*Bp4c5lGA1p$}
ztMfsa
zp(v3|v7v-2;lgZcA2^NOMAG0|YG4
zWzpiG*N-XUQqZ7uW*FU;BGy5KQ^_UYCsv{raJOS-^whXM$S^tfF|||G>p)UaoymT7
zx!rKl)t;Dgdd%5R#vMHHVwmhDeCzxia9IJ2gnO@`h_zqc0z_ig5r+{sm+z~8uX3lk
z_zFezHt8k1y-#oVLLrc)Kb?!hoDgq(eZB4}eBAo@;fDqrsWSXjH4w>r;+X)
zrCe^xcc+7%LkWC$Y^$9#bs4m_M{0q3AR*?OKOuwC#!Q*}O(!NW{CW-cwYP|twB;Pb
zW0~JFYi{c(ialsg!C9X@SJM_rsKECxXGU7D96K}Rk5wnS+6vCEWg75I<1HI8n$sk9Od>v$t~KE-M?msGEy#KC
zDkw(-y;KaTiW<@5h%NN5-3(z}3=uc2I#rBppQY54=)g4oO=d*55?HrxZ+*qCXKy5m
z+PKO>MRuI!u;E+eG|X+gk(ks;yU#UD_yZpGZLGlaRMRIe8Sp(_6jJ#RHG68B(YPeC}NXZYu!2
ztJf=0kN#I?{bQm6E;j-gWQz$^Rk+*5?B-TpFB8O0ZABi##5=yIibn2+L7VENqK(MH-e~aOjuAB{zfIB5k2-d@)RWx>
z(JrpxS?do-VviR%jXOEQg}GAeDw8etJ(UdcQcP3gI5)GZ!056H9q@oFt&!pHUq8h7
z+Sr`=WL6+V$@k^ze7Oc#~s#1&3B91*EJ5}71^4f!TOa!eMZ0F{7jUTzLI9hWH8nBAo`qu2iHU2
zeMS%Qzb~5ODP(sxLgb_+(=#$88o$f7>heGxt3vbN$rh3Y(6O&}=5e9sBZEVIk&e2i
zYW3c>;%?V!Wk?l@n%epcU>7ht{PINPQ;?lv!5`44PnkQN>DO-<42G;Fcbrgns`WrD
zlo<-i4;AfV!G`bO}T<
zZxH(3A%Xp`F;?8iMRyPPKg*7Pj9+yn5W8<0-#E|p#fBcOMhy<{oNm5n-$;W6z1+JJ
zBNg()?WUF#@ZP2gLc{>zJ1}4Mcx&SOYe!jU9bEIYweE!(G_mWgYO|9KcxiI9&vCza
z=Q->FU8VJ&oQo`*L2mgxg(3CKQsnPMfzRe7a_^XL>qS;BJVN{dt4c+Qa&#on$Hv{1zJ
z@Vfq;F&=>QbO%6SwclQf_vy5sA>TZtwa2Q8p3?Z;-+hmy|FD%nr3*3a)9^x}_$d}L
zX`jT^l$vNTwmDRE?sJk2b={ky9T^)hup!-$PTp#C)AD+W!jht)J0iJnBvI8!)1MzH
z#~5*J@g}6LO=F%<$#PiWbPZX+|L!&JHvQye&gb>N?>0pxKT&Gb=oiLle`CP-tY2oeS}u2)vSd*_)g9IXa$ca(iP6KofTMI(aMX&zCO6Xg9INu-$YDA
zDgu;qI;EM{*w!Cv&)6=Te@DQuZP2#dZgEI%hTjob8$8mJgd8M|M)dbRR|nx965;S&
z$AgXu$V-ot6(o;Bm%Ga}m(3FKo-EiSI@{0ouWIF(MiIvnjI(iJE~s^2v~4b<4uoXK
z>a}T83k7!+j~iB%Lwo^y;wM$6FrRb`>pZ{K?3T0>%R2TiVQ&yap$5$*j&|-VKFweo
zze0idVOn@A3;vl~rDA0G@Ia5GO@h`$s)}jC#k!-nSmZs0?<>IL608GuLjdUhqAD77
zJci-FeBknSBl6-)W2A&D(e!lEfE9t-HV7I+%QC`h65xPc$NheQ)m(Fu2R3t
zp9!%Q|7)X#_P{rJa-?}KG7zJwREDwarpOA79E{ySWXz45$7^_Gz=yxLeQ%O=x76G)_rYu{veZDK)jbzl+Es2qIoSs|6Yrc=lt(SKP
zH>)Q>_FX+aZ&2S>F+t6{<1vLLR)*t|`RSZm!Fm5toq5I(Kla$^u%l3R-`~F+7!+c$
z1+od5E`J8FR)X%2`fi6G6BDuOp-_X8>SWvJ08(ny=)A9Fn`mOW7ha1YaJS^}o6Cye
z8u=jE5UZ7djB8djafjrbat~oL?U3U?iN3wbYbO}jhznZ|;b_Cx7Ls_louiy5oXgK>
z75`rDg$c~*6$EA{O`qVl;k|aHj}dky&W2NvJtacnEL4*=;Mgh`QlmXIGjL?#_P0Z{
zGaQ`{S)|gIUik3&;u>9rS4PVB`=(9=kjKs*E&v>h3s;eDh%mM_9ZH
zbhQ2J{SlAo+~YRWv)%Kkwjlc;`1X$}{6*EopiaoGRxHOke~UApN_Jo{F!yL|=X`*T
z%_Jy@yh!7v(Gd}8iz9^>x|g}zAu*!m>GUb?=^S{u{`={4{V}1DkJI*N&--)t^sFpt
zCr0LJY4yI>WF539cv9wv6{rfm`Au6AEZ8Y)zxRKqhrXe5V~I=B+)i~VqUjfi*qq|2
zG7^gbATIO*4yvD!o{rZa{U3hQi}!}vxj5RPZg`-!TpjhB=lZ=`f9T^s
zt%luJPp*r9^a|}!F|lH
zFrD{*@XGmJZtXATQuW)_+T`AFWwNpQzu_~a?=tHQ0OU5g(?iQNhbsSC3PD#+j*fWa
zH^_v&J|@bg_r{^I3ISJp{ad)c>+TeJ;@(M8_hs0b=w+?%CfoMxo5lVJvNb3{kK<9S
z6W~vstj~ATi4gaZtGB9i2-NEl8r{bsk!lTt%vlM|r=Q%7?a}q^jDX7ewr;bT*m%0P
zc$2)p)gbNESY-l?*LuZ-+<%5llc~br!QO`0w{%}7z?>gW6GEYzX_UBCAMr6L$>Q_r
zb0kWBc5EqNg~_4F$-0`+E^X)QQ}
z+hvld@?%udGLNL1Yct`;QeTH)s+a}@pk*J~irnso+>F36H>=?N6U#94kQPkS@y=x|
z)nZOz?l@*0w!H5E8NDHV)M2hD1%{nJH-9WE2Tl`DB}#0bOOYCMOUcPGGB{KH@={%#
zQW94L{FH(@lWL#+yyPXYj`nE$TAD3iQGD`V|6t~5w4FLe7Pz|5?ktS40zqzDeOA0k
z2;kwO|7Nrr_^obdj0(V@xQZgEbTm-t?|Q!>TodS`yTqGd4Me;TxTb&3SE^fs&6;lRFg*!|n*Yw57CLlG<5r=^Qmbad9=G~Tr!
z%est%;R`T-_IPr^VBuqd`1p7gZm(AI6tS%Y>O)K#i^74J6aKaIe=hd_|1FsW>#i`m
zH(&4PfV7q2tRgadcH4zL$ExUj+I{lg-ri?x>k?NacP#3Slw17LCbbpI0RJXfxck>d
zka!KM&`2fq$2Tp+V^xvwvrMKz0gvs4a<6sW+dRb-y>gv)jnG&9TbvRsnPwwil!!wqRx?{%24^3q>^uhVJyoP
zr6dxb&cjZc?{pP!U6QA#sMAj_WFSUbCI}=8Lbj=>85zYUcD0T3J;Xt}8lU_0c<7IW
zD3_E`qGIXSj~~>)2Zu>xp-{X2{cz_b9F16Q;jDMY)L13^!G`lKHf*Ea>4NnCkagbC
zZ2#^5Z>yz7Z9=Wud#e#6t-Xp?TU9%DZHYZnwO3GkS5>titx+n}h&^Lh?HL3`5Gw?~
ze13m@@B2O{$Kg-s{mS*auIKf5KHsw`^>fs>NG?+!NA6##x+n*;?2?_tORyUI9+o@i
zFIQ=N5>Kms&iuZWmXgrkoM`<)sQuEV?OC!<&hMCkd+^%V!zQkh#VyJTpv0-AK#uZ}
z0{M}Z7Idr5!5OACW+ZHdX1{v`lhM7_;gCb~#*pGc4lddLHK3R-`S6cI}X*z>q`9~v$EgqSrJ`x*?zKWnDN^6mU
z+Y`olk9r|6V}O1mJH-rpS*qSZxKg~q)DK1cA}etvz&vPbMk^r^|KlBdA%)DYN8sj4
ztWR%YKuJX@NA@r>#Z)jnMHY*U@5Ym}jzCQSQovwxwEa|ds+GF+4ohKP@7DZZJEtr$#>vy5pNtltEiqTo=_2Ie&>}2687!
z3oL-`Lr=-v5Q$Ur_1{-07Jfms%}g?)K2E=YcbTk-TRAQ%D(i!N_){F}-nl4BzJDs5
z{)j(A8<^R%*b-9hG56q?vh2qPg4~Hb*mjW(X02b(-iOEY(ItN#x{1bFlaXFX{a%W_
z+VecBpNQnrQA0+7l?21O!|SPiM&<>oi>Gf=Ri;d*7?v;ir{>t)>H7mkVh9eu*fc$n
ztl`eWjxW72n+15pC+>t?Z`T9QPE?e9%*6p_BtRH6hcup
zm@O?E%v2IeXD{Ql$XeXBu1>DxY9K5YCeEP8CxTY*xuv81ZC|6bMM$cr+#mQbz%jtaN)z#zN<^Y!1-4>z_
zWUrHA8|d-~SQ%#kkVH2+!(z(1+0R3|>i5Fkms-gJ7EWn7gVvyrE%?koA
z?iB#Ts5N+%YurX|&im|0asIlNP{E&FHk|I+Z|-ijbthu>#|_Aol_HHj
z9~&DRE_qXQdC|#r%~EQQewEd@gt8l7+F5w*eNll#wf{$5C)W53W1*o?eZx{%CIaH*
zo$_GFL1qKrN}N2kd+uPC9lev1lkK2T#=*hCo>->sy}iny9r?J5B$jf?mQpECt-qun
z(zdAlv9pOD8lA-dL|u$oONBYDnU+XVIMgQQ6y>$g)H+K)e3-m5eoKU@QcyymlyNrleW|3Akx|nq7f9_Z+8FWK(VnpoFXPE&t
z+CKY|WC%cL_8Jt7;ZP*2(v{n>u$OjkV
z_?u{Owm%R=K%ZXIWmghsPg?axdVnYcxFRe@)T2`8yzSengRPAZzf6ef3IBp3Y+bQC
zsnbL*V=FaVrC4KXh0EmcO2A#jz?<`_f3k!A&P<}RCdUgTkk$Z9EtoP|y>MQ8*1VG~
z|Dy=w#=rpu@NjTb0^sdF_kfdq20pjOcl~=YERJ(N7X0!JY9QN{(_zUq
zqsISSwzm$fpOHkTjDzwcapD6{HS~HA>?*kko;X2znF!8qtAHh5%h80RlB5Q8?7`D`$}yhr4r$)3~DXJ*#=Q29OHgy>C4u7REUyR&V|SHuV_
zNGrutVn)zq0GqC8nvp?vldeu0P*f>`i-`S&I9Ti3g@WlB7|=51<+O>~4lwqm^EqVu
zx@dM;m{x`({IyTr6HL?Cf8I*O8w$ZWT)r0T3O)0^BT1Z6jv5b@kT&Pz*(i_V!jv-e
zpu=Hh>~gZgV%zWE8RkmtefXyBvJkW;d8s>l3=`U9W!E+6V#HevelpCtGpm-Q!xef1
zL7W#Clyy+zDe3V->S;nh325A1K2ukyzrUTW
z?Ok4Cr~d`16Z|=<->tMEbe+9Nu+rAk?%BpaUo!eXG&uuEFJ@EqUsfxE;PL%hD9JuU
zCNCZ10Jf7IPUc+s+K#g>Wh~hD&Fk~W8$ZVsH?rv$`}^`qy1LHK6vNILv$BKOyz5KEj*WG5(kFnfMXb&C4S*1T
zYVLF@d)J_u`9J65>w_%$IoX#9bqLCq1&(R?X~7?nn_Ih&C2ZOZg_*@C@NDWvUtl0z1Q2IXx&z7d`;9ylR-TU#lg3&
zIG(OyFy7~dW(VJ4*VpYfFideO(?X*+d!g#w{#iNltz_7-&1!Bh*CU;zzqyoPxW`0S
zCb5Q=0rr=!5Z3_($^m~=Aa&pZq;!UAuh&d~sC%WEJoQR~)y<)>lSDm$E9S;VjX_`A
zM}?8^gySAlj*5GgPFvrBmjvI6d*Ru8OY(_TF-YpaAO4}C?z#L$@HwF~yR6?Pc>JEE
zvUquJ0oR+EpH+D`?0eJ7*V5mw9=+Hau2SPHSroj?y}XBR`#G3XP^@0}Toco(+SVxB
zK$sO3O0iadQO7of{4)Mi!YZ&^Aq+v4FV-o@Xw>JML4F%?<+gv~1B806{CZxPfi3J}xf5nxc~vt(x77*ui&H*BAi
z**7AS(Gy&C%3Fa%5lWv`uevua~-$G0*CK6h4g%~;=9vz%fWF5Y&^b;6YWD5s%v-^aIUsKSR+ne
zb1f85*i1qKGBmV_lYnD?1T=XL--O=4MGErBr0M>i|AXYSPpRlM2VtHM%-}nQSlL3)y5ASq8-4zlhg$DCd#C$rTMMD6M9OmDU8AtWZwjcAB!#A|)!74sW)
zHP0|fy^pi*wj;Nsv&iBgT@=Z)sC->ktNp>_=+%sB5XPXsCy3j^#a-cJTzU70Iq{v$Ph$CX+Y
zcuQd#B{&ngv~)bTMDJHw_U@B)
zD3h9~yIwS{1sZmCq+`C;J)YLXNmBZ0w*`I#HG>dwwKM#NeR#7hd8xMuaCy41`-)3K
z<^^rlXAraUCLOVK!`2$iWA_DNhkop!;Jd0Gc9jcS
zK|$08ltiVspbd4#LX@_ub42rBw2Zx)S9})|axSH!7^naB?N)q6Lm>W#dCNY^*&d6TL=6J#5&B|e;=RUzNCom&6k_`+U
zcg%(-XL5`b)d+Jxz1J^?ZIHv0-ZE59cgk+Z8X&^B(r?d-_;50iDoO3qpF0{xXE94F
zsK#`xih&!&z?8KOCs!dkEul9v@j;r2ccL7Vn1_V2(GpKqw@r$&2ufY*d=W~l_Lv_^
z1qBvu>*{o}#H|Iy%sm~=kR1j|ga|W=o+>E9=DdKIs@j@hC_fl;JLn*1kn5tzzUZSi
z96#>0qpUPepUu9NLeT(x$%mp5ZN?d#EAa)LDEelKrR44mCW`vt*=B)!YA&f5~Wj
z#s((S%JdnbSD)Xr)*<{pHZ@U_TwZSe{rfn;I2)=xer7blj}S>I6tw6Wgl@-uryJw;
z^XZoHNa+IieR|KbgY6!DL_P|nDBWS)tDRwzn
z>l~j60kXOqn*G$GOUH3^uJ$aht~xq`#m6(zaQ`iYA^kxh;~;_mE#^ZhdOn%s9Fo-3
z57{{*n|z~a4h&U#(Ddt5>!P)i+JbMW@~75@F?7HO-v@|WgN@6Q=#xu)lpihZ{y}eH
z%Xh`90#4*^@~`|A_SU+zu#Oi8V%Tj5VD_QldsjvZ8S6nioIMFJyfmKW7x*buyHnSv
zJ47v!aHN=EZ&nT6rJ$Hd|Kb3k9mddp&7fnjT5+-L5imh$P*jokKHoBC3xlb>1^okVAeV
zhf?W3rvxTC0WnJ1-Y2&C%`>S1oXbh{t2Cww^^i>;j1_s33WI~2ysyKj`@@3sKd=tB
zgMP7W&NF$?@0_JBXCjFGwG2B>?)?uZdpl;oc;C_qck^)vmKT#n)ue$rRC+(`^V*Z2
zD)d}pC?l17*(H`%2L4AK{ccq2wqaOW>{2>xLqCnTusARXcrS!IaWiQYq@zcJ$&XHG
zR>yja+scarsV=QNbh|}_#D`Wd1D4vb;g_<6BWF-&MHMohX1K7o?7%f?MAF{fb7tPt
zZ*Eyirk@W?_kg3y_GtA&G3+zxmSub_?OA6yxyZ7`j{C1)z%Bn
z?g=8~Xy5Cl6JSg>J|@+{zu1F#``m(*SGm5l0%759#M5NiF@`=}l`Y0o?ftqiay^x1
zpGT67d9!w}->H#JRF57Jf4<87+`bx69iFP%MeS=(Q&dnmyFIPNiS(>SzxDGEN}k){a#{XqPQ}t
z6-Tm>HO$*LykSH}Vlf9B;PgFKlUgQtSBynzQ*TNE5AdT1^FxoBh>alx-42i?+w|JGgR|B-8Q8m>!Oz*}_w;zNCRQB`>7a-z=SxXApI
zUYjSkqp0QLppQ3YWw8mXE@MQdMK_V29=JE-d@xU>yf8MwtPG~IuZR>afLB1EoH)0>
z5E~v^9=!@1PnFjUY?^$=nJpO_CyS|C9{A}hwl3Op!1lyRs@Y9puLWaGXwPnqDla~l
z;|x2poA;Zt>M;-5nI@{lp)4V%yPfqOb0$J-)pgBr-O);rrb&}B_Z{)aK33
zI;-N#dCWeU4MBx7+flD@RX+{k*X9do%wWlh)ey|ltal2K(
zB7C8#o|`#&C3(uacL(*&=ftN`Ij=m$}^1_F(&n?W=QBY6^
znGsXBoDuE)^1vC)XDBGX5DuNi%}miTiacdamuBSg5$mzffou8b^^9H&Dm6b;N`_FH
zqxu>V?9Armb*b3q_1eZ`xe@O%u8O09v%fmAjk^$7AugMxyvE%M=cP$(e}-oIi)1bY
zJimId;`j`IH@vbpdfm;T^OqPOSG&xoAIxDtCFV%=z11f7l6``B!^zTYUU-?Vlc~-K{vrfve
z-S>SrOkQ*;G5iC+yEm6<1J(B6nu)k-z1fA9POs0f>RKNYJ;PVQk^_vw-j=ENLrR{T
z2s1q$aF&++m)uf`0Kl$!!mnrD0xw$91Fw%_b8Jw&xqF)YjDRhckMVM(I`!y@;tR2>
zRoJoDepfk&KY1y+XipwmCzz(kpQ?u_K{(&IIOXW#O;LFVyYRZcReZUV&T@ZSminO@
zWJ2+3?Wac|OA2h8oPfPfye4Tq%&f{|YHd+%iE|!*W=5apK-ynvP35^1t-ROB1v`>#
zg(J^!u*l1%fD-ZhHv>gC!A5cithqbx7)u`u$vz7iIsn_;*vw4CUL_TA7e6-lCj$QJ
z79HJPEuOfa&ZB<{Bluoe>GouH-lYkZiLZZtzvdOYEQGQ_UNtc{T8!SqV{>P>r)~KL
zH5V|-e+Uyz1X_wHy++e_97vXO|iY$&&7X07W7gZZ%c&
zmAL_Ejq@b-9;Y2k%RwvzpU4n>hHfV^^KyjEc671wXCu{M_@X9u;&wk=sebu$Wc)I%iF+gfN;;zGDWX~}4o
zVisE&!#?KZS$AQ>FYbpQbrLaB(8aw|OJJ=LcDWsTG2enC!+0JA2a8@QQz
z%lM#+-QNA931jqfiN+=t`-rEgt)oL_F$8@t^qLIR20@-bRBKR7&=-rYCu;UH0XJwC
zVIVbJ7ej*wR-#KCdMLFYR1Br6DZh*OY3q3`BCUo=52H^jDp!tENP6OPZ2R?{8ybCf
zY#_N30>ZOaCXKwKEPMiZG01LJo)J6X1fA|f!-MNz~8kK||fad?Td6d*z+^9n^9W
z31O_Jeq!c{;9oe$+>rE!BuC!&orMCRS*+i$%&Kni*l$dDP5UFk{pIBkjrZhs3v+Yj
zM?4l=?e8l4!ygFuzQ4>%?2!@=gIdGazgp5&!Hv;B-6j+tN+;If9mSjzh1Mc`l|;A&
zFlJPgGVGNSVk>LEsjTyJx&|Q-MgB|g7d@NJ)2Z2yP1dTIK8>6iDLB>f_*CWV%dntQ
zWDNl`;fJSLiTNI)B3_@71A-*Mys!CgUr^~SN+^LnmH)Cw?fHMQ>o+c2
zWm){=^|D@D;}M@_`)UVOPo;Iw_&j^6=!4fA`kkq_Lk54FyncmE)+_8U_F!iO7M;#j@K`=uNAdn+Ga4@&!d>`6IHM|u^uEB)LV)dC@gpsNAdKRso87dIlUI{HAn{+_OKC)k<1dxxq=vY>s&6bly4&J3q0;fv^hx=U
zGxU!n2QoBk7mve8D=E3YyaNbBSZ*ZP0;7$K)jVDj#+90$V!Xa5{hU#J!M|~Ii0^<>lc3fzSI*(PH6gqN`@n^x>vrXvDK6%8!4$LvJGUZQ2si6M?23(L@;#uy%xI
z?X*zVIb*k&gPk;Qj7YIyEVPE7T=hk^y#6Z*fLP${Z`uUp1uc_y!jm4fyO9J?iSna*
zmi^vdPDZ)swp-)K20~=Chx@(%(i}?U|FShLqv*LG83|+~shM+nSd;t`nf||q{`6a6
zB!8C!SfkpNwTPMewc-8C^Pu_c7FU_P?03X9Zh{l%>heC
z7VS^;OyYD;JIl0tUo>W>f7-wuoTj^0Zk1Obh3AOIhz<%d)%Hma*&WU@
zSps3ylsHNuMpei06aFov0bm5ZU@Ca9I8)2Q!6s`yMeGXQs#+o{(55*fH_N=Ka^Xf$
z|A3Ox+KGA2U>9$eSZdBk&N{E%nf#*fpo}fs=O-z1^4T?7QzN12Et6GWQ@rYO?L0Pr
zmrZ0+TLLZd1nWhM0@1LoO+OvzPQTMRoU#a
z2mI8bmXc`KknyXH^Pvry``$C-_P4Hmcfx$wf5O~IN6JiRLRd{%+4;P9%RS5Q%WDNI
z-QifUN`!D4Qs@H9m=Nd*rdVoKNkA$E+`PVuBs!MbYz9x1iFQ-SRL{YAC^OfFXpV@1
zP1LGT-8)pJ;n?Lzx6jd0uV3fU_Kei~R4AOo&VJ=w=;Np_b)=#d|RSj4yHn
zTjTk`xp$gj+hW!s$4^k=4o?zk<3Ci?-cv1Pg*rUbjpAJ#SW2zSl$;WE&$xHOTtS~L
zmJXgBe9^X3%&zVj>pc
zT52;3l2wk}+7iarj|^AN#5C%8c#i{Y}h9
zwh|d~!%Lw;P9ru?^>siYk)25`rjV<_z;vobig_h&GgYLK2P0N&dyzK>aM-id)F9W-`p_5`jPp~nV*cD`po3o!dP9q>#4cJyUAtA
z^8dY@$kH{G
z*MnbHXwga=BQt6BZq(d9Gh7V3-KVMFGiDI0rDLWL6Qe_G?ERwVxAj+B*C0C633Lt%
z7w%=Ae(+cD%PpfP!(gXi=09BKkNKD%Uz>n{A;7eLz8W{8pu}e+>U!bsPgiPR+7Nt9
zL3AZM9os)27pzQ1|Ncr-UEL7Hlh01Un_>7-yigm+UmrCn6iYeId<}tJR&tE=tE1h!
z5Pm+-<}lv_xAtpw^R^%-OyXso8NSVhzSIT=l!|_bjKl>yn`;+%eE9Ls0+MD6N=mdW
zOt(PD#>Y#ba+s_iiXkVrB$ABm?7o`p7QbF_s(t4~{V2PK2|45bNAV$E%%bx4XZ!54
zLFwTaRjBgPKT7b%%P&zK+_iaGh~f=gY?W0@LVUj-V8BELoDsFeP9D|ek!S-{8^uV
zt~x%-TT!So72%XMulVP`^~r=EOm)kIGDzng%zhbS6yiHh&PuNZeIBFUhoKZ4Lq8y@xN02K{ewcx|DHV@wi)Y~`=l)*t;tJHbS9NJd$YyFAnY)G4`M>*
zMvD@-d5-y>{YzJHGj4dic;ZLDN&E98BSFh6+Jl9X(jX__qHA@P-WM-J!N2&s{@p7c
zZJ6A^`mOghcgM%7eXicGKf6geqcxVUqq|z-+b<`XJ!J3iM0^NJV;Xv{+0&_6Ck`^g
zwZ8R?A`j@x9}g4NCPhmT|H-B8MS$7om-T8rFKQoYZr`iDgc4pPjKdwpP$SDf&8)le
z5Wsg{1@@l$U0%gtf@PjsTvEafakJl$6c=Z8-h3?w1YT0>kzGXp
z!i!lY*fa-{o2Huzw2t|QJ$G@IwaD#}A3>p(GtI2q8zDrlzj!H#2pXycjejGQEzoUg
z{QFim`7ncWrHjmUg(c8n6H-PIZ)if;NW+@0E=
zl^qlVjzGV}W!$^Q_ZcJP)CO_A@8h%>1dJ#fMdax3@$$9Lr#-ZMth;kJn^M50j>n9y
zrFqGtPi1C${v?Y!{mbSD2{p*iVJ&l!QcHS{4YfaYdgtAWF!G;y)~;{2GCsoIZV;Id~K2=>E9eoMBNgabFzoMO=rVwdS#?!A2{L>@-vU3>fEBdC9#
zTE{AtKyT$rq%7C!_S!p_v~2$If%>qGnR^O7WHvnNg{4h#lbm-MxlO7XRd=2Xx6i>akho
z;_O;V?;q8*knuL1u29-s$y^;7BjZ8WI8dj;^E5-Vzy^Kz?8n6>aP^pDw
zxuv34_+-9P^U=FTm8pdoY}3!m_#EM0j>Rj2k5V!}X$q&fhtnlCie(qf`j4_AqK&lQ
zII*48IbL)*R{kTNmpOn7ZQbo^FyH!RDa8H$jRtn~!3o!VVp^J7ogV0cWyk6cql9%s
zoI!S#oqtVS!co{)p4ovDfl2vq!*7PQfkcz^ns`!Uo}VTh7ePXnM3O^26A^I}eYSvv
zA$G!=P^_0}Xg)yni`9R7Gl&eYXE^HP
zBQLrS_Tn}svaqoYAgnt}y(Vt3w3NQm7X0SE)}o*iy~cIhgChKn^TD(RjUDD>w~x;>
zPW$8CUi!E)W$*p7mcVVCO^1h03OKNVYpc>9r?RlVE+!x-U?P$&t*jh7Xr`Suw1Il_
zB8tJ~@1D--GBxzrOM~Ctj4bw3#HFg$wDfdrNvkLBn?(lYtJkmEW+t4am5iE1dWMNg
zQstBumCq6Mo~=V5fEd-0Hc)5q=FW<@*7&*iMH|<
zvIwKk2L2T*t5#^Dl__^%CyHmFTZMVUN!sUFM4NxDJIni@dtn-pfk!p5K4+txdz2)z9TD1yAikdIE^dAx;EEn{dO`RqW$ye
z`1nOJ4E3mCJ;8Ng;;B)uB**6O8m}caUhMh5L7e~fX~dTp$0w3B-W?^T+U4P6HuLTG
zLDt8-L84EXLS^BK6?H;PhK5GVm$Kytd;O7kB&}x2ILtj8~k@gB&>hE9jho6${xtcFYLwR
z06u5ehW
z9o7PLl99SsrjQrF(yy{c1~`|HQ(WABQNGxnh`d&nfLnLZ`#$b6)jh^`wWO#S45}cv7~AQSqfIu`JMH)qoFYzoy>q;-aQ3%O~wl|4l+3a
z0N(gjt%6Xjl_gu@4FFTNy50^jP_XD~)$AY|bS9#9-93Va6o=fm3EU87SE^&v%X=+h
z>mN$xym)0VjY}O!lCACvp-AKKJd_Br1KYQYCCQ;_jsM+w-~JKwj3N<
zM*5FJ;qIgsxl+!&WVZMEVNikM0kabZkec1B%SW_F5bFjiN3CyY1l>{gv_L6<(_qkm
zNRa?+z#-=EAXk;vA&~h;&N+*dV$XJK$K5RZ3Hwe5uo=UdQ
z5l!9tvM&Cy@nhz&(IRPXWX2h+Y&q7iVX|HRrfyfdF5ml{+(PM*i?Vy}#Rb%dKRV~@
z{+SiqmM?TUslOE-vK>OBBp0PP5d5D
ze5oShq0?2DOt{5=UKX;r0ouCVKi
zz~izddnbt$OW_#ZUtDwkoNbuaeaBF=@zre@p%)g{1n1I*1>7nD-z@7^YQ~+r{hOlD
zGd&#@#OzbU($TTQW7K*q5q_EvAV#GnmVNxq^#tq?D5!R^=6rx8B*GG_t_MLq|8Dz-
zjcO!bKT=YTNdy?7bw;ijs|pnpyB)XA=r4L3pX@eqH96xNt%%E+W~k>-dj`@84z6f<
zY1XH>EGo2?EgigmYcT}N0dd=DjCSO_ha;egac5vpy;;Thny*BadL$o%>iG7j{$aMp
z$MSP`%M!hX#~+?R+Ya%_=5ARMvzGDPe&NT;U
zk|Ss95D$7g6k|P%En9+z6tj!37jTM@lce7s#iwjpH;uz~L<4TSqb;XjyNF)od3@$j
zRaM=1IR)LLuaAsq@UOKJ>rBrSeTzrA0ecz`vw!R;Z#$aE$FP!*haK}8{6|UfG(x?2
z2I;T$XZrmq8uh{0#jA5mm)xzVJ5~EvnbN2=(Jz|M
zbos`0%S>HHy2hBvo^|t!8Cmw^OJ0+L&KCpr3t?yS)**jAEDNnQmDm{~8^degfz@JV
zxkBF-UmrQ2^}-08iN_>}wwMwEh@_OV9p8|_w
z@M`5Rd``P^Tm55gjwpKmYwg(Jx
zeKMXFJ<({13iZ61ZpxsDzj952KZ(Cvh#a4%Ele>WZYX#pY&beQz<=h8=H?|{Tb~Gw
z|C~hrH6Nw8daT=94mp#drGE7JfO)L>yR;bvgtp1|>adGT5SsK$&hx9Ar>D^@DBk@g
z>1~US&@Ep0@oOyop2y{YO~Csn#>V-RP3~?2>Hp?H5A7Cg5k6}a2v%QrIa+MWfnZn7
zTauMY8^jAi?K2$$nAhN|@0L^aUc(geA8KtzK8rQ_M+()^>Y{R$#osawqAx3-@;r2N
zw2a2p&aPzJ>rK=ZKQNZ{O`(rs
zn63{K^aKU7jD!-a_B0Ye(qa{-qY*cL(~P|2xtP6OI9+Ke;GhGC?8e%J-^3oy{4^N+
zm}1l~L{TOsvXbL7dyB3v0BSd~XmxgI*80}I7jE0zCp8|=@)1mkFpG7_}r~
zuhEEu_9iboXedRQ$!&gNn}51A1<^jAWc1j9zITn)F8PXrkLalU13t>;Y6>xHJe|!D
z%}gs~>)cAOLgQ^fiA$>26cRRtZ3HkU#BnU$rMF(AcYo^w+ff|8YcM@I6>s9hNoi`f
z9|=3R2)!tVB^=D$+6&&-3%$y9-e10?`OwmG?^RCE=GN){4(N*G>Y&jETtcrU&)&N~
zta>JSm2wT3_unz1LUgC1hE~>#uW6U?W3_?!LQ@u-f&N&DR?a8q!y)fRM+BY!f~do#sf_8(AQs#)DU+@*}=^NhiW9wUfYxWw%BNXH-
zlD6Vj68;FS#((koNPX|$35G3(leXPlf`MeENRa;iPPB+
z+4LOCJ|4kB^Hh0lwBFG@YVM+e2OJ{2FNb+S3egAnJE*=0i}yzHal2F{^o2;mTev<<
zPx%*ce>1(fgA0aZJL?b>iojqkt6@C%?PdOx|*Nk38*`3sHLf|h!y#MjhR3md`<#7RWK0uLe>lFtJOWQ)g
zl82|y<=oQMpZUGKilD}SPFpYbWCi!1KyTZFRcdgtwnUV=+UQi{-cnH^NqzZB$0%ds0KBk1>m
z7?5sauCDk}ou3Eeqcto}o|%er+;FccnWbBN$?+da_yav(k$-;2H4Y0|KyXh=UiI^u
zS@!G@7zF^v_O0HW1`Y4@%i>Hvbqp@wjqTWY-O@ipXfZkz=)bakT!?ltbinAb`ZxB+b&QX{(Q5%0Vo1oS
zOIp4&c(g1u;36&#mhDqk+wCt>g(Sg2I~qj4DBBtA3V9XMEEs9)|CsbwhA5B3v2K$&
z;&&H@!~#==VK0L`owW#%iF-_ZG5t4kzo2K|DvO)dT%lL;MeZm!(utr@OITxDT`)#6
zB#+K(-K#KoZ`yWndUSvsyZvSo|99!f5PNx(|E|o)Wf^ZaB65Q~�UjG3JS8Zw);7
z*vKK5eNanP9EoziJ)sx6KEOouKIcN8Jv2Z6Sy@cd8Lrtmup~9BAL|*6sk(O@B??{D
zrc2}-V*|#lthKNtEk#2=lBJoDc3a*yC^LV~Bg3VYwKlKY*Vqr?7skXSN!J>+x?~=#
zWmrr7)MX3e`@cnz(b4{S^WP^!%g+EIg*iOkCYr^E(xwTJ@`Z1dla-yd*M8UYN^Z#InQYywjZ}-
zEL=|W{_Z)<#4{H5vA;3!n+mAzY5EiY1P43A{7=8fxb0mg6O+{MZR++vseNXN!@kx939+lOD(S=IeL>i*_m+{(Wxp1sB2{Z
z((%uPR%5vu$fLfZ8t{vMsWGkJE&>6M&+$<1KQEf#DHdm?$`{6ct9N>iCLltFzjlV&
zvec^R32fxM0B6$QXsc|$zs|Zz%
zaY3J~FB@u(PIe9GPLXWg7dw|dBs--iU+QBi<0#&}0P#__QhPN5-=wCTRGCb;$Z_Wb%Ohm}wkf63T|k`%dZL36;>F-wC>ZSXBM
zs?4c{`>hYwVeHaMV>Z99>AE7E3zcp=T_IOLpV<2PZ%qR6$2lt-Z`Y-)VQtga_IrQ2
zr*|gWJzSAx?%8xkS>+)yf}j%P`E9#EX$EZ9VRiM2j5bxyct{zw^K57F+pI
zS9Q}1*)0tTgmI8{#qNo?Y?9s%+@bG&Vrf^|O)P<*IRid32Ur%`*iql?lC*@`-*rNI
zILexX{-kKF4`JfK1E^%j>&h>Lx)*8hU$iN_{hU`;+i@|_9OAuVnAOm}$rxR}eR`92v85Pc_?G7>S&Uqe|hvhmg%7L?}6xY`hD_@^3@8x-qWecyOV8^kVI?9m7*t
z?}RQa)%rV>s@K|We;%n_zmtxY&IyBtsoS|w+?VyxX@
z^l&8>W&2~c3o{&12#(3C%2K&tf$!}AL&5|u%zDH)!ahP9tnj4{+7VOk$UCvM18R3w
zW;r<>-LgI@7r5}&&!1RjsOXouyl1&9VrSmq{}1
z;!>hPAKAC3I2GQ_KaGi2W(}uE-pkExS)~&vhRaRK&#?5JT6*q%v!u0O8j>_~fOVBY
zYSv_Qfpxy31z|aS_JX<@w~cgg#dOJnIR5Lm)rpw83SSF4h&l>ZlXbpxnB>lH=j4Q@
zQdPOEp5mLNpT1Fax^2A8U7HcL=zh0$FA>u)?)SBjKyR-TpePl-vMyuEvl!XEX~h|^
z1e4w88szi|dFw%soQ4K{DtXqDTkwyhQ7&P
zZmZ~Z()#bue>}ON>b4Cr#siH9NB7?gQ;JJYhK6i42(Skis2OE{4V>Zn!(<9f*|a+w
ze1rG6%(ZdnFLYW_vc(#V{bbV!Q2fJ2=`#r5s;SBu>rBiQgkITtdvkt^?mk;bZHo5TGV3A-|4(n$Dg!dNMdzRtyQ<;sAH8r7It2y
zOBh@U;pWa5l>TX7=tYJvo~pAci2?Uu%-oaf^sZpR*A|
zfL66jyRxoM`$mPotD-^K(&mM!NHC!+qoN&HDJ)
zxnbvWOgVi~U
ztj?>0toF&{V$?a3OOknU8U*<>Qag*~#l5nKV>Ni5S~IaxhDM_l5xtscC9ml0H+pqL
zCn~7o9fxP5-sW=UbG5u-?+i66xlG^ntiKc)zP=1Kz?-4m}<8kA~_m5T8GuDQdOQ3O!L>X~nmNv55~skS5Y7h3ES1Sj;HFfbL0CxRYhy
z;^`cRY6+CMZwKPS%{y!zu@7P^!{eVcfPDUsM!Yi(3N#EphLA4qEt@;ug3|3n+J6h%
z(amY2%BZ#FB=rZqc0>wvG5mu9prX0>I{2kwMWtP<mED9oweS?ZmO2BWfk1t%0p&O}`Bs_Reg
zx9?U-W5bdr&_uKHE%J^)Dd
zDLb5djpjulm~NU2=H~D3O{M$$^4_EDv6eLNO@70kPY?b#1EP}EQjQb?6*u^JUEk2=^^2lC
z;R%J>Hp4k$hKFo~?V+8%^Shrj2ta193Iz?LVivnt8zd
z`q2l!27C`oUmVOUxKl`l*gih8&?h&22S@`HhBZ@19{M*0@H2MxJH?+EeTx_VRP++{
z%(3(u*;dK%y+j2Adr%x~Z#^n9N*l$J_1nh&!uFtSF?zV;~;&(iywh?9~>W@$U7^OvqAB=AE;@J1OU$Xr9u9xZDrTGiR69w8AyTeFkVm@Kd}$+bfc(9;3J#=U
z*-nWwf?wrT6FR2I2fVw}6V_Gq!6MUJu{`qg6R;0MZ7Zm}JxoCZKh}bwS7Z6oj%bdM(EHHFIkc
zRU6=lt4Wr?{x&Yx2I|y%`Xo_>v;V`Df`eZ`wEDi8Xzje4UNA3G`+D9{~h>~dwHd9L_y#=}nCIOK_xKHj?P=hDmOMGnZ#%tyK%
zo5Y#qjZ?abo5tzCont?hIf~7*7z-d(+csTOO^LVIjO-J`o<8`>VtN`WU$E25M6AVJ
z?F^|$m_44bt4(N4&rO-O%!Rb30HxAS2Msj(`_rXaxv}5z*=BRUNY+(`CzuwhTlu*j
z&lev+B#m=|A%eQ;$Q9F!?~qol$Njkd$@#OsmcaD|kyJnho&4r#iAU?X)0X*{(&q^r
zE{Ee(x3q&>j#fbKImYA>$=8lRYWL&y47nHeEhlBnr39=K-Fp>4-5zG0&{B6Z7Us!%(4%;=tY&Q
zr*1U@jdEX4xJvxr_yS5zHzI~bIjnH4s}orrKp8v6-L>kdNMgj-6mqc(=wFe;*HXl%
zOMr4COFtZ?#1bOhXFi9{_M07JEw(=aaiZvE%GG22~2gpnK`V>u#)vJ1?SC#OMjB#dIS^pLu_#~-y9_6~m
zXP-Dtm^4x%Calf1hUIw`H&*CE@iQ-WHa2U%@<2YNx9)nlCGW_d`K^HBJTOVU$?iN~
znUBAs{lnf`0}vkHwW2Vi3e2}S_8HC_4Rr~XE*g`&N$=%~Iu&VXKxef6v(Nl==!$Ku
zrTe{3%AP9Upq(Q1OqymCKK$8G&%Al%qoFtSF5Pa#H;%jgdafhqFRFjH-`A(yUa&Bj
z?Y=!rGxIwGbh2>J$4=jN>N*bdjA74)h=&EittwTGdnG9iOYBWChA{aXKFnH=u`R*}
zVWZz{^MH*qv(;`11i>4PnRTQPgIN702;hKF^xRKZbjuM_L>;(2e=ox>Z(bgbZyGie
z%`u!q*{_Y_IZ|OTuDd-_lV(n7i_F0C1eT(db#Sp#;&HphUkjNEyQ;&%ZqP#o8qOCW
zEZzKQZQBx2+T(c<;6_?PlQ6J;{vxM%wHOulX@+
zPJfujKz~~w$O`Z0LZG7T*sV80v=iG;30Q{wON`7Uh74mg%x)fXNN+LaxFS$$yu0Vt
z46U{$0Zb1Q*y#SSynFms4O|%m`tkqBh4HWX4aClRKV~SNcLXQPy?VKJPeo3QOlh|1
zf{UBe*sc!*QCcZhENUucIlRnr4mk7-YD#RKJ1Ks~qw(!I_n!3U!Ur%Rx
znrl>t4v)j}#O8~aq}^=fC0sIiR0FiTaC(uGc3wL|tZg0j1$&9b4&s|_rfU+*lC|H|
z$M$tt=)4#OknX&h5QeG-0(RM+p^_}K(~7-fk+XzWuE9sKe<-oAL5qzFB$6I`>ubFM
z7!I@%L$#NuluL*`9~z1)iV~P!+m0=9bSd?pwcN41zt}pznPeNt(L!U%k}-XqqpZJS
zno{;6qb|PA^X14zGDb{O1TGqHYgsXk3l*9Ybqtkip)H2n36sn~^sQ;HKK;5~>%P43
zr-SvISY7>n$!Wc$EqmGEYUCfIUvm3YZ9Y&V+n8GW&E&lL_+RN=hEIiZwX?qD>(~6X
zb>9fouV&=-3~*{7dXu+;YX7JI)c5V7P5_4*!*7a5!#r~EB>FOXt7}qrD6yTIm2oUn
z*kp}e7WTDGV`Z+>ni`7Rs}nZfpvE~LC>SxbKi!xJvp(b;*$Ej|d=J*ovM@}aX--T`
z{Ofu|`)tP;I8i^MQ$~)8KY|;T3WD3)#UU-Z>OHL|ogl=C>O9OkvAWYB6L1%Z?YRXR
zP_GSI=PzBb0Yc&&FCS0nHX1}pHIwzL!@gY*Lt4U`JR4kL!HzSicxPDn7B}f>%nnW~
zlu@&kCZe*xBp4#@C|>_29aG1bQD4t7(sto*GMb@U8a}Z^*qTYVRXZ}29kENXh)(f4
zZFIZTDjDJ);xTZJgUHTqb$wte&U*(_IC=5ZOIn$aA1d)po3`Vr^FRKA-wj@LJbpb{
ze`ULjjEsoG@^}2Y1vk2Xp#BUoca4m8;vz9)`flv~!oQ2j4>Z#ikh|Nz0?GV#tJ)I0
zQtvGDP0X?*xDkbi03qVisD6#j=Q>t9+Mad4^v#MaMO4J^bmOHfi*$GvLlkpqdCmt0
z-tnT`bXm>M2pIM;8uMh%O1Ah2)CG?p+PfsE5UOssn^U+w?pa1REEF%hh|#5X-j+{3S7tmyUiLlY
z!FG!OXM56Y;!pONxHUR)FKrd*pT;=X3K#i{+z=-n
zxbW3`-ke_Tp*vqs?x;`fpKL;OX3
zRG>K{$ro5T&u2$`=1v~NzIY#YG1M#HmAw_}rBmXo7fH@6{)1Mv+9Slndamz7KNO1k
z-VFC8#Gn}DoHoy<{m0!A#lhNryOF~GPY;9%E*YRqYsqUZ@PLZ#k
z3A*t+C7Xtc>^M1v3k>y*mo0CY?%XoU79Y68XeALSTSy|m4sV@`wTBc1^AEFX
z203KiyhV9ptqUA=uXfDzZd)9-y7rpdoNPF*5H&M3V~q6S0$F<}Gg}TSg|p
z+vqFDcvay3Y~$KU#q#id;nM|?<$9;J?g$#qM6>$e;bJHRcx8FkI!|l9q(5IAlXUpz
z@PP=Vp$e<$b!Ku}ETL;`1o4T81Yk|6PbCx0#-m^+0D3^zDRy?b+ZhPO`dkQD3>)@w
zptAKrA>eE_Hnx9yVN6bYUo0b`%RX8r5D9j83Bz~98igyHPl^f&nM;OmhOfL~=In$k
z+5qhgYb4uhop>8xelGZECV`OMW>wpVaooHM!nH?R+?GDK$-GFD)%i=efUVz+0HJ86
zpD{1jU#;~fmKry_4s%K#xgL6tNzGC;kFwt_`ii*r2sG$9H|lB#a;7~?872`}ycDHH
z{x!V#@zOcExw+X}l%LV&v)STy_S#HQUf^<6&G)kbHB>Ls-fw*kP~q|L=BC*R@#L%S
zVE;4{vxIBS1Mg|bl$u^)01hT8lT|ee{ivF6)svdMjhIU{G$8W8KdoXlZt=iCUsCGB3S>m#7*^yt4cJA{OD!K%q{^UMlEoj~>PtSmsxuVz-4r*0|xi
zON@$Yq$qeSgiAi?=Zzq!_h`)-MFGt34HLdKp;BXY(fm6FzbYOl==*M`kkC`=eHGv41Wg;RFYIOu%+8XVc6EL@U{i$ETaVBv?MLMZKyXn!i8O~B-|HK
zV}$p-xw`hWV!VQ#knOzKmD)B=`w(U|`9qPF8
zDM_rSeYVW~rO@aGYD!t}(?5|mT?5%7tyKYv~h4iC+t6g)vUhfJUF*aE|-
zd1%3<*AiHroT!=||1To(Wdw+g2Li^9D*d#cDW!q&)m0}I&CiC0i(S!NGr-tkQFQNi
zf|)9XuzCvTl`QR|f^wc1Vs4e;{V-}2_ppL_cUj(1--RIl}0Z`H2&1}hiXUWxv
zs=+oPjLO%>Y*ysLbuq+M=}Gqajw%|HGGKgtaOt2RCe>@W5fUVbNmwACf74{5eznrE
z{xMWV?^bDLj$MthwfwXfvDZQ`FtT~N^@|>ZfNqlv83FfdYzeC($lYy)ZI6G%6(#*a
zYUc5LbGm+D?eF7OF=ckupJ?X5zpE36+A=msb$e&f_;k3GF=hD6!bX-~;U;e*RFayZ
zYY?N~`k!YP5ykb^bNiRX8Eh_>a0;9hV2wX=gN
z&NAtvMp_?YLf!DT9d#8pvkdV*Py+e;;MzIwf+j={I<>6Km{i@QIT^!vK@=Iqf1$X&SrDMh(@7`Vlj<)
z6Vds#Z4(FE9ACVhlL2+cGb@Un-;&dNyC(x`QB^UHYzO_k8E9n-sRqYi-cHMouJtCn
zkyUhI^hMsEISwTID*7wh#Ulys046{)_5prQrF0dDUjO@Tivpq!6?2C;300THQa?5b
zf67};3u;f#Mm}u1VtJO&SMk@*k$dXk0X&dX!;`v?iT=nfW;?aR?-ct@27&c$BoxFC
zRakFB1LEkARwPJWtwqltjBnG65zqVE{5rV?8vRTd?qNH1l2CBZqt%UKU2gl0%CWJc
z4dO?dW%`0v>8SjI{2>y}bC&qI1}#jOvg8^<1T3ejwb2?oDB;4yiX6}dbsJEl34o9q
z_9I?M4x52F{Jgtrq03t314vv{vme2R0SwgDm<^VkP;9te@m=z%=L;mUDwR{g-G^P%
z1>p1ZV=tVAQPN^%S9WGRJpGQP>-4HO*Bw1Ri7)Js9A~0zO*}pb)b)1D?8Vi{qYcML
zuJ7klRWM0E(Pnz9p|btQp*Qu$;Nhcd^au}z@EYC6(_F1}DXna1Fj_$u_Cl5#BHG7O
zRXS2kpMk6nGy4;EvA37;&SG7uKHfy9lU&)LKk1`yV#5gGHm}>jfat82l+*-5iY7GR
zhRr`qYFF%k7J&bxr!@K#E3VGe2tlBGMpqxN$Zid_SDHbhh?lZZYbjyh|ZiQ(&C>}%5
z4UKMByGx>br1HG#f(;u^hMI410^{~GP8k~P7G)*1m+gyN>vu9r*6%q-ttLQjQl&jNVT;5KeP-Fd0EM3K)|Z!$jXjwN^8Ihv)z(oFi=j|QyQ=?UO<
z_QLMhNRM1j7zjoV!-FALI)f{$XSfA6JbVwuv*}Ox)FSKo@+YgT>U_-cs@6oU9GI6C
zhjHXA?lCmGm?rCh1|CLR4J0SD1w=*%UOWRP
zi_$oLT)nrFot&8|ROD@ihljJX{!msFWN1l%N6RL=6OZ-BH11Fim>e=79ks(sH)V1R
zrQYNjxixXqn+gxVan{&*{kK?QO?L1`=csmM;J)3Ju3YS1(qG`k=+9?7&O_(*83nUh
z&CL@02V8W)_U+!^9rf{Z6vns0^QM1zhpr;JzqIc$Wb|0kg|X!w^rK(=l`*|4mJ#VR
zcxFE6-7kVt_PuX1XZbw*wASqyt&}$i*-+BxSwsg$zI&?$oES}(
zVQXup$YbPa1Pq&d5tB;^dCbCCtbP^7arR@`({XpyTKOG^6{7ela4FV@8Zh
zc3Sg0lJ^j^8HO`t?4QnE#}4vD+ipycUptc8F8kJ<$<6u3z!Q^zBMf}#Kyg(eqvxiDD=ol$5-&=T0H(n|FMcD7Bo+XhN_oM$06*S)#V+N@T
z7f$CuPx{Q4PUoVU^i}nsRGrobgvDuBP^u1}?R>(rj6>Q`XGA%0<7ghgENx8nO~#-F
zh~ce^VWYM3hNm*KQ99O$QIJX>zUm5?R?I*&qT^R`ng95=+|&23oN4_w3dEg%E4rOO
z5qnh~cnPqOupt-_z}6_TULFf!SDY{|ObYA`L;OmOK#vw44t&Ry#^P`%pF!DVfpf%V
zzD@k}(cUlL={~nA+v+G=qjamuc1h-9I0H@(cp+?*>Qb%#x9^=uw%v9v=Z+bq(YJuR
zzw%(=M4~nZq`Od^wN;%23)nLR=T{I%l5A(&O?SJ@*!Q#Hxr;AU*owE@K~8V46=PpC
z9dxVg*Ock$HJ>dUWcYLv-n+kikGxl5T(-*MTKXWxlr_%uQs%HgJSCief+TMYm__*f
zoiXn$9$?UOra|Yx+SPTh!D8Dx64n>qA34}xT)GYSfw!s`h<7Bd!J>G`w%8DzaEWXp
z0Y+t=9Ii3_kdXp?tvxTSe$cvT7Z;0!3zX#V74VS&;2!4cjT7GokKJanF|nY>U`*>n
zuLuAeQXy*dCLJ98_<`#80WNQ>MyQh2dfQdx6p*Z#)6c
z8&v8K&%if%7;lj?>t&oA101xw8Q2r`$a~Z%`WKn>Kfx#qFOCR~dI5!o4Y);t0tEiZ
zle?+)UAHGEBqT&JdMYfv?Yn^{V}1m{t7FJkpE2CxIOlyZ8~iqbG~J>8h+Rl)L*m5btYkgw{vBp>L9AxxdW_TP;l0Z#uUP2ulb~6Ipb4
zS@1aAk94NIhC0N13~u;-flVCTwL0D}&@?NQq{bwBwI36nWgYqe*7G?5F@FdM_co*T
zIM1d1SAZ!uE!_ml^?5Jo!OMMuo~e{M8qELg(c-~d*M3cM2zJks@=L}sl6*{!!|bdO
zHyGST(e%LiI=$)0|KgSKm`omG^2OiHjW}>s2
z7`iqd3-XM|;)zSpC-J(hb8qoQ##v}nt$JN}+i{dA=?ed)kZ)N(@N~&sk7^x2HGVJ4
zio?}%?3*~DIzr-|?7Du?xg4_hHOaF6Z415JE;7%;@C7`|0zhbRcrSggk6_cRRx{OH
z?5mdI2}kav>={3E-?nuVP$PekFWs08eCkN?ZuLf1ei+OWgQzTmQMSL`cfHz_dz~YV
zl7p6?_GQD~bQrd^Df&B@;NTE5(MyfE^QBmikG})N1HMX~FXQ~P#pQ(D
zq9ELmBWlPqsf#{Unk!1dw5t|3uhcVS0Lui;Ij+p
zxCmxB;3}PL%X=|P6kziRYp?OzpERuQ>+u^A%q^+2ZYFVq_>$3~DEGQWCZ3v*u>M6q>gBL@zxxsGnSKvsev|+;q;M%;W!1NwiQ~Mi