From a6fe800a47ddf8610c7f395cac9749f2eb46e3cf Mon Sep 17 00:00:00 2001 From: Elvin Efendi Date: Sun, 8 Apr 2018 16:37:13 -0400 Subject: [PATCH] lua-resty-waf controller (#2304) --- Makefile | 2 +- docs/user-guide/annotations.md | 13 ++ internal/file/bindata.go | 4 +- internal/ingress/annotations/annotations.go | 3 + .../ingress/annotations/luarestywaf/main.go | 74 +++++++++++ .../annotations/luarestywaf/main_test.go | 69 ++++++++++ internal/ingress/controller/config/config.go | 4 + internal/ingress/controller/controller.go | 3 + .../ingress/controller/template/template.go | 88 +++++++++---- .../controller/template/template_test.go | 41 ++++++ internal/ingress/types.go | 3 + internal/ingress/types_equals.go | 3 + rootfs/etc/nginx/lua/balancer.lua | 4 + rootfs/etc/nginx/template/nginx.tmpl | 60 +++++++-- test/e2e/annotations/luarestywaf.go | 121 ++++++++++++++++++ 15 files changed, 455 insertions(+), 37 deletions(-) create mode 100644 internal/ingress/annotations/luarestywaf/main.go create mode 100644 internal/ingress/annotations/luarestywaf/main_test.go create mode 100644 test/e2e/annotations/luarestywaf.go diff --git a/Makefile b/Makefile index 24905326d..ea54c0c1e 100644 --- a/Makefile +++ b/Makefile @@ -50,7 +50,7 @@ IMAGE = $(REGISTRY)/$(IMGNAME) MULTI_ARCH_IMG = $(IMAGE)-$(ARCH) # Set default base image dynamically for each arch -BASEIMAGE?=quay.io/kubernetes-ingress-controller/nginx-$(ARCH):0.38 +BASEIMAGE?=quay.io/kubernetes-ingress-controller/nginx-$(ARCH):0.40 ifeq ($(ARCH),arm) QEMUARCH=arm diff --git a/docs/user-guide/annotations.md b/docs/user-guide/annotations.md index caa62d2a6..a4457a4b1 100644 --- a/docs/user-guide/annotations.md +++ b/docs/user-guide/annotations.md @@ -66,6 +66,8 @@ The following annotations are supported: |[nginx.ingress.kubernetes.io/ssl-ciphers](#ssl-ciphers)|string| |[nginx.ingress.kubernetes.io/connection-proxy-header](#connection-proxy-header)|string| |[nginx.ingress.kubernetes.io/enable-access-log](#enable-access-log)|"true" or "false"| +|[nginx.ingress.kubernetes.io/lua-resty-waf](#lua-resty-waf)|"true" or "false"| +|[nginx.ingress.kubernetes.io/lua-resty-waf-debug](#lua-resty-waf)|"true" or "false"| **Note:** all the values must be a string. In case of booleans or number it must be quoted. @@ -463,3 +465,14 @@ In some scenarios could be required to disable NGINX access logs. To enable this ```yaml nginx.ingress.kubernetes.io/enable-access-log: "false" ``` + +### Lua Resty WAF + +Using `lua-resty-waf-*` annotations we can enable and control [lua-resty-waf](https://github.com/p0pr0ck5/lua-resty-waf) per location. +Following configuration will enable WAF for the paths defined in the corresponding ingress: + +```yaml +nginx.ingress.kubernetes.io/lua-resty-waf: "true" +``` + +In order to run it in debugging mode you can set `nginx.ingress.kubernetes.io/lua-resty-waf-debug` to `"true"` in addition to the above configuration. diff --git a/internal/file/bindata.go b/internal/file/bindata.go index 1e73c576e..cab66add8 100644 --- a/internal/file/bindata.go +++ b/internal/file/bindata.go @@ -95,7 +95,7 @@ func etcNginxLuaBalancerEwmaLua() (*asset, error) { return a, nil } -var _etcNginxLuaBalancerLua = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x94\x58\xdd\x6e\xdb\x3a\x12\xbe\xf7\x53\x0c\x74\x65\x61\x6d\xa1\x59\xec\x55\xb0\x5e\x20\x6d\xd2\x45\xd1\xc4\x39\x70\xd3\x53\x14\x45\x41\xd0\xd2\xd8\x66\x4d\x93\x3a\x24\x15\x27\xa7\x68\x9f\xfd\x60\x28\x91\xfa\xb1\x92\xb4\x37\x49\x44\x0e\xe7\xf7\x9b\x8f\xc3\x48\x9d\x73\x09\x6a\xfb\xc0\xd6\x5c\x72\x95\xa3\x81\x05\x18\xfc\xab\x12\x06\xa7\x89\xda\x3e\x64\x61\x3d\x49\x27\xb5\xf0\x37\xab\x55\x57\x28\xa7\x85\xb8\x9b\x6b\xb5\x11\xdb\xca\x70\x27\x06\x62\xdd\x8d\x28\x5e\x39\x21\xbb\x52\xf4\x1d\x37\xa5\xa9\x72\x9e\xef\xb0\x2b\x60\xd0\xba\xc7\x2c\xec\x44\x51\xbf\xcc\xa4\xce\xf7\x23\xc2\x3a\xdf\x47\x41\x3c\x1e\x78\x57\x24\x84\x97\xd1\x46\x92\x4e\x26\xf3\x39\x1c\x90\xdb\xca\x60\x01\x42\x81\xc5\x5c\xab\xc2\xd2\xf2\x46\x1b\xe0\x0a\x96\x5b\xa1\x1e\xe0\xa8\xcd\x1e\x0d\x38\x0d\xa5\xc8\xf7\x50\x95\xe0\x76\x08\x0a\x8f\x20\x85\x75\xa0\x37\x50\x95\xd6\x19\xe4\x07\x28\x11\x8d\x57\x20\x1c\x1c\x85\x94\xe0\xf8\x1e\xe1\xbf\x24\x5f\xa0\xe4\x8f\x50\x29\xca\x42\xae\x95\x33\x5a\x4a\x34\xf0\xc7\xed\x87\x3b\x2c\xbc\xc6\x35\xcf\xf7\xa8\x0a\xd0\xeb\x6f\x98\x3b\xb2\x47\xab\xb5\x0f\xa8\x8a\x52\x0b\xe5\xfe\x07\xff\x82\xd7\x17\x6f\xde\x5f\x2d\x2f\x3f\xb0\x0f\x9f\x97\x6f\xd8\xbb\xe5\xdd\xd5\xea\xcf\x8b\xeb\x26\xe8\xf1\x4d\x58\xc0\xd9\xa4\x91\x58\xdd\x7e\x5c\x5e\xb2\xd5\xed\xeb\x77\x4b\x76\x7d\xfb\xe6\x3d\x7b\x7f\xf5\x19\x16\x90\x18\x5d\xa9\x82\x19\xbd\x16\x2a\x69\x44\x2f\xaf\xde\x5e\x7c\xbc\xbe\x63\xd7\xaf\xd9\xc5\xf5\xff\x4f\x84\x42\x41\xda\x35\x66\x1d\x77\x54\x44\x82\x93\xdd\x71\x83\x45\x76\xb2\x1d\xce\xb1\x1b\x58\xc0\xf7\x1f\x63\x6a\x62\x75\x43\xa9\xcf\x15\x1e\xa7\x09\xfd\x65\x93\x19\x7c\x77\xe2\x80\xba\x72\xb0\x80\x57\x33\xc0\x87\x92\xbe\xe9\x23\x3b\xfb\x91\x06\x7d\x4d\x3a\xed\x0c\xd0\x10\xd4\x03\x90\x32\x52\x75\xf6\xea\xdf\xff\x49\x27\x62\x03\x4a\xbb\x28\x49\xf9\x56\x13\x00\x83\xae\x32\x8a\x8e\x69\x33\x4d\x36\x5c\x48\xaa\x90\x86\xdc\x20\x45\x47\x55\xa9\xc1\x4a\x30\x09\x87\xcf\x21\x81\x2c\x83\x29\x19\xd3\x06\x92\x4a\xed\x95\x3e\xaa\x24\x4d\x27\xa8\x8a\xe0\xd4\xa6\x52\xb9\x6f\x97\x2d\x3a\x96\x57\xc6\xa0\x72\xac\x51\x31\x4d\x27\x00\x3d\xdf\x99\xe2\x87\x90\xcd\x7b\x6e\xb2\xd2\xe8\x87\x47\x16\xd0\xe6\x77\x87\x47\x60\xd1\x7a\xb4\x45\x37\xed\x6a\x4a\x27\x13\x80\x7e\xcc\x21\x64\xf0\x36\xa4\xde\x4e\xe9\xf7\xa7\x8b\xd5\x72\x06\x89\xd2\x51\xac\xdf\xeb\x1b\x2a\x95\x8f\xde\xc7\xec\xb4\x75\x46\xa8\x6d\xdf\x18\x45\xe3\x23\x8f\x09\x6d\xb6\x5f\xcc\x87\x5c\x33\x2e\xb7\xa7\xe9\x80\xc5\x93\x69\xeb\x5b\xf8\x92\x48\xcd\x8b\x79\xd3\xf0\xc9\x57\x2a\x48\x1f\xcb\xa3\x3e\x34\xf2\xbf\x65\xb8\xa1\x2f\xef\xf1\x40\x2c\x86\x51\x67\x3d\xc8\x2c\x20\x11\x25\xdb\x71\xbb\x4b\xda\xec\xcf\xe7\x70\x77\x7b\x79\x3b\x45\x79\x2f\x14\x6e\x50\x15\x22\x05\x71\x28\x25\x1e\x50\x39\xf0\x75\x1e\x46\x99\x05\x52\xb0\x5f\x5e\x7d\xcd\x78\x51\x18\xb4\x76\x36\xbe\x5b\x6a\xe3\xa8\x1e\xd2\x62\xdf\x15\xcf\x85\xad\x1f\x0d\x73\x36\x47\x61\xe1\x49\x34\x5c\x0c\xd3\x13\xd5\x69\xd7\xad\xb0\xda\xba\x12\x57\x82\xf9\x1a\x0e\xad\x07\x3f\x17\x43\x8e\x79\x06\x8f\x11\x66\xf5\xe1\x94\xa0\x97\x80\xb0\x1e\xcf\xb6\x2a\xc9\x08\x16\x33\xd8\x70\x29\x85\xda\xfa\x44\x50\xdb\x7a\x8c\xf6\xcd\x74\xb0\x39\x9f\xc3\x8a\xe0\x3c\x5f\x11\xf3\x10\x94\x06\x3c\x74\x4e\x3f\x62\xe8\xbe\x23\xb3\x6c\x94\x45\x3b\x78\xe0\xd6\x31\xa1\x0a\x7c\x20\x16\x1b\x12\x60\xb7\x31\xb3\xba\x31\xc3\x41\x7f\x66\xd6\x2d\x80\xc2\x07\x77\x9a\xf8\x59\xc7\x44\xda\x76\x75\x6d\x32\xe6\x30\x78\x70\xe6\xbf\x3a\x4a\x4f\x31\xe2\x45\xbf\x36\x69\x09\xde\xd8\x2a\xcf\x7d\x21\x37\xda\xe4\x62\x2d\x09\x85\x71\x0d\x8d\x69\x37\x46\xc3\xb4\x83\x30\x67\x30\xf4\xb7\x51\xf6\x2c\x0b\x8d\xea\x85\x86\x95\x7d\x6d\xd1\x98\x34\x7a\x2e\x36\xad\x53\xbf\xaf\xf6\x9e\x4b\x51\x80\x70\x78\xb0\x41\xcd\x23\xe8\x7b\x34\x47\x23\x9c\x43\x9a\x66\x82\xa1\x13\x9c\x54\xea\x37\x90\x32\xf9\xe5\xb6\x19\x63\x2a\xfb\xa8\xf2\x48\x43\xcd\x6f\xf2\x2c\x52\xff\x69\xea\xa3\x54\x8d\x79\x2e\xad\xa6\xfb\x15\x9d\xbf\xcf\x0c\xda\x12\x73\x27\xee\x11\xe2\x74\x58\xdf\xe5\x56\xa8\xbc\x9d\x4d\x76\xdc\x42\xbe\xe3\x6a\x8b\xc3\x14\xd4\x39\x2c\x50\xa2\xc3\x01\xb8\x27\x91\xdf\xce\x61\xe5\x4d\xd6\xaa\xf5\x06\xae\x3e\xdd\x5c\x40\x89\xf1\x1a\x3d\x65\xd4\x5f\xa7\xf4\x21\xcb\x0e\xa8\xad\x33\x92\x84\x10\x19\x89\x9c\x6f\x64\x65\x77\x8c\x4b\x39\x4d\x9f\x15\x64\xbe\xe5\x9c\xae\xf2\x1d\x16\x8c\xbb\xc1\xc1\x86\x4f\xba\x50\x7b\xb7\x7c\x7b\x3b\x83\x84\xaa\x65\xb4\x12\x7f\xd7\xb7\x67\xae\x89\xd7\x1d\xfa\x1b\xb4\x19\x1b\xfa\x09\x7b\xa9\xe4\xf6\xf4\x8a\xb2\xac\xe0\x8e\xc6\xdd\xde\x4d\x9d\xd1\x7d\xd4\x93\x98\xa6\x27\x33\x40\x73\x34\x26\xaa\xc6\x65\x1b\x51\x6d\x47\xef\x67\x34\xf3\x46\x6d\xb0\x80\x32\xa7\xd8\xe9\x4d\x90\x15\x98\xeb\xa2\x45\x59\xad\xb2\x63\x4a\xef\xc7\x9b\xf1\x6a\xb5\x9a\x01\x24\xb9\xae\x64\xe1\x05\x4b\x6e\x2c\xb6\x13\x19\xa9\x39\x1f\x4c\x19\x5d\x2f\xd2\x74\xd4\x65\x1a\x4d\x58\xcf\x5f\x1a\xf0\x4b\x2e\x8c\xed\x1f\x87\x42\x77\xee\xbd\x27\x66\xa8\xce\x89\x48\xd7\xc3\x49\xad\x69\x0a\x58\x80\x33\x15\x4e\x6a\xfa\xdd\x9c\x8e\x59\x30\x72\x82\xe2\xa6\xd7\x50\x56\x20\x96\x8c\xe0\xc1\x4d\xec\xa1\x5e\x14\x69\x20\xf2\xa1\x81\xa8\xad\x63\xa8\x47\x12\xa3\x4a\xea\x9f\x63\x68\xe3\x1b\x87\x86\x9d\x0e\x44\xcf\x0f\x3a\x2f\x74\xa0\x9f\x25\x4e\x35\x47\x1f\xa2\x75\x76\x93\x09\x25\x1c\xab\x5f\x5e\x5e\x88\x85\x31\x9e\x50\x43\xe3\xbe\xc9\xf0\x1e\xcd\xe3\x74\xfc\xc1\x33\xeb\xf7\x4b\xe3\x1a\x69\x78\x1a\x86\x89\x1f\xf8\xe1\xb8\x43\x7a\x0b\x3a\x47\x33\x04\x3d\xf6\x5a\x63\x1e\x57\x3d\xc5\x43\x6c\xd2\x55\xf4\x64\x4c\x79\xa0\x8a\x3a\x97\xe5\x8e\xdb\x30\xdd\x53\x3a\xfd\x77\xc8\x62\xb3\xb9\x80\x44\xea\x6d\x27\x87\xa7\xe9\x1b\xa0\xbf\x73\xfa\xe7\x02\xe2\xa3\x37\x19\xf6\x77\x78\xde\x1c\x2a\xeb\x60\x4d\x2f\x1a\x29\xeb\x77\x70\xbc\x00\xb4\x01\xa9\xb7\x33\x58\x57\x0e\x8e\x44\xfc\x41\xa4\x89\xda\x5b\xe9\x53\x5f\xfc\xdf\x42\x66\xd1\xb1\x83\x36\xc8\x9c\x11\x68\xa7\x67\x69\x4b\x25\x3b\x6d\xdd\x0c\xe8\x72\xf3\x9d\x16\x42\xe9\x50\xcd\x04\x3c\xdf\xc4\x8a\xf7\xd5\x06\xdc\xd1\x6b\x7b\xda\x2a\x6b\x32\x37\x46\x35\x4d\x47\x44\x4e\x6e\xbe\x93\x46\x93\x7f\xb7\xd3\x24\xe9\xaf\xc3\x66\x62\x24\xc5\x7e\xc4\x3c\xaf\x83\x25\x77\xfd\xc4\x59\x59\x42\x46\x03\xf3\x7e\xf9\xc7\xba\xa2\xae\x51\xda\x4c\xdf\x2f\x40\x4f\x48\x8c\xd8\x0b\xce\xf5\xfe\xbb\x00\x4e\xbf\x88\xb9\xa6\xc0\xec\x66\xf2\x4f\x00\x00\x00\xff\xff\x42\xba\x8c\x28\xf4\x11\x00\x00") +var _etcNginxLuaBalancerLua = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x94\x58\x5f\x6f\xdb\x38\x12\x7f\xf7\xa7\x18\xe8\xc9\xc2\xd9\x42\x73\xb8\xa7\xe0\x7c\x40\xda\x64\x0f\x45\x13\xe7\xe0\x66\x6f\xb1\x58\x14\x04\x2d\x8d\x6d\xae\x69\x52\x47\x52\x71\x72\x45\xfb\xd9\x17\x43\x91\xb4\x24\x2b\x49\xfb\x92\x44\xe4\x70\xfe\xfe\xf8\x9b\x61\xa4\x2e\xb9\x04\xb5\x7d\x62\x6b\x2e\xb9\x2a\xd1\xc0\x02\x0c\xfe\xaf\x11\x06\xa7\x99\xda\x3e\x15\x71\x3d\xcb\x27\xad\xf0\x9f\x56\xab\xae\x50\x49\x0b\x69\xb7\xd4\x6a\x23\xb6\x8d\xe1\x4e\x0c\xc4\xba\x1b\x49\xbc\x71\x42\x76\xa5\xe8\x3b\x6d\x4a\xd3\x94\xbc\xdc\x61\x57\xc0\xa0\x75\xcf\x45\xdc\x49\xa2\x7e\x99\x49\x5d\xee\x47\x84\x75\xb9\x4f\x82\x78\x3c\xf0\xae\x48\x0c\xaf\xa0\x8d\x2c\x9f\x4c\xe6\x73\x38\x20\xb7\x8d\xc1\x0a\x84\x02\x8b\xa5\x56\x95\xa5\xe5\x8d\x36\xc0\x15\x2c\xb7\x42\x3d\xc1\x51\x9b\x3d\x1a\x70\x1a\x6a\x51\xee\xa1\xa9\xc1\xed\x10\x14\x1e\x41\x0a\xeb\x40\x6f\xa0\xa9\xad\x33\xc8\x0f\x50\x23\x1a\xaf\x40\x38\x38\x0a\x29\xc1\xf1\x3d\xc2\x3f\x49\xbe\x42\xc9\x9f\xa1\x51\x94\x85\x52\x2b\x67\xb4\x94\x68\xe0\x3f\xf7\x9f\x1f\xb0\xf2\x1a\xd7\xbc\xdc\xa3\xaa\x40\xaf\xff\xc4\xd2\x91\x3d\x5a\x6d\x7d\x40\x55\xd5\x5a\x28\xf7\x2f\xf8\x1b\xbc\xbf\xfa\xf0\xe9\x66\x79\xfd\x99\x7d\xfe\x7d\xf9\x81\x7d\x5c\x3e\xdc\xac\xfe\x7b\x75\x1b\x82\x1e\xdf\x84\x05\x5c\x4c\x82\xc4\xea\xfe\xd7\xe5\x35\x5b\xdd\xbf\xff\xb8\x64\xb7\xf7\x1f\x3e\xb1\x4f\x37\xbf\xc3\x02\x32\xa3\x1b\x55\x31\xa3\xd7\x42\x65\x41\xf4\xfa\xe6\x97\xab\x5f\x6f\x1f\xd8\xed\x7b\x76\x75\xfb\xef\x33\xa1\x58\x90\xd3\x1a\xb3\x8e\x3b\x2a\x22\xc1\xc9\xee\xb8\xc1\xaa\x38\xdb\x8e\xe7\xd8\x1d\x2c\xe0\xeb\xb7\x31\x35\xa9\xba\xb1\xd4\x97\x0a\x8f\xd3\x8c\xfe\xb2\xd9\x0c\xbe\x3a\x71\x40\xdd\x38\x58\xc0\xbb\x19\xe0\x53\x4d\xdf\xf4\x51\x5c\x7c\xcb\xa3\xbe\x90\x4e\x3b\x03\x34\x04\xf5\x08\xa4\x82\x54\x5d\xbc\xfb\xfb\x3f\xf2\x89\xd8\x80\xd2\x2e\x49\x52\xbe\xd5\x04\xc0\xa0\x6b\x8c\xa2\x63\xda\x4c\xb3\x0d\x17\x92\x2a\xa4\xa1\x34\x48\xd1\x51\x55\x5a\xb0\x12\x4c\xe2\xe1\x4b\xc8\xa0\x28\x60\x4a\xc6\xb4\x81\xac\x51\x7b\xa5\x8f\x2a\xcb\xf3\x09\xaa\x2a\x3a\xb5\x69\x54\xe9\xaf\xcb\x16\x1d\x2b\x1b\x63\x50\x39\x16\x54\x4c\xf3\x09\x40\xcf\x77\xa6\xf8\x21\x66\xf3\x91\x9b\xa2\x36\xfa\xe9\x99\x45\xb4\xf9\xdd\xe1\x11\x58\x9c\x3c\xda\xa2\x9b\x76\x35\xe5\x93\x09\x40\x3f\xe6\x18\x32\x78\x1b\x52\x6f\xa7\xf4\xfb\xb7\xab\xd5\x72\x06\x99\xd2\x49\xac\x7f\xd7\x37\x54\x2a\x1f\xbd\x8f\xd9\x69\xeb\x8c\x50\xdb\xbe\x31\x8a\xc6\x47\x9e\x12\x1a\xb6\xdf\xcc\x87\x5c\x33\x2e\xb7\xe7\xe9\x80\xc5\x8b\x69\x7b\x29\xaa\x60\x59\x09\xf9\x92\x37\x7f\x64\x52\xf3\x6a\x1e\xc8\x21\xfb\x42\xc5\xeb\xe3\x7e\xd4\xdf\x20\xff\x53\x4e\x06\xaa\xf3\xd1\x0d\xc4\x52\xc8\x6d\x2c\x51\x66\x01\x99\xa8\xd9\x8e\xdb\x5d\x76\x8a\x69\x3e\x87\x87\xfb\xeb\xfb\x29\xca\x47\xa1\x70\x83\xaa\x12\x39\x88\x43\x2d\xf1\x80\xca\x81\xc7\xc4\x30\xca\x22\x12\x88\xfd\xe3\xdd\x97\x82\x57\x95\x41\x6b\x67\xe3\xbb\xb5\x36\x8e\xb2\x25\x2d\xf6\x5d\xf1\xbc\x79\xf2\x23\xb0\x6c\x38\x0a\x0b\x4f\xb8\xb1\x89\x4c\xcf\x54\xe7\x5d\xb7\xe2\xea\xc9\x95\xb4\x12\xcd\xb7\xc5\x3a\x79\xf0\x7d\x31\xe4\xa3\x57\xb0\x9b\x20\xd9\x1e\xce\x09\xa6\x19\x08\xeb\x51\x62\x9b\x9a\x8c\x60\x35\x83\x0d\x97\x52\xa8\xad\x4f\x04\x5d\x71\x8f\xe7\xbe\x99\x0e\x8e\xe7\x73\x58\x11\xf4\xe7\x2b\x62\x29\x82\xd2\x80\xb3\x2e\xe9\x47\x0a\xdd\xdf\xde\xa2\x18\x65\xdc\x0e\x1e\xb8\x75\x4c\xa8\x0a\x9f\x88\xf1\x86\x64\xd9\xbd\xc4\x45\x7b\x89\xe3\x41\x7f\x66\xd6\x2d\x80\xc2\x27\x77\x9e\xf8\x59\xc7\x44\xe7\xae\xb4\x26\x53\x0e\xa3\x07\x17\xfe\xab\xa3\xf4\x1c\x23\x5e\xf4\x4b\x48\x4b\xf4\xc6\x36\x65\xe9\x0b\xb9\xd1\xa6\x14\x6b\x49\x28\x4c\x6b\x68\xcc\x69\x63\x34\x4c\x3b\x08\x73\x06\x43\x7f\x83\xb2\x57\x19\x6b\x54\x2f\x04\x06\xf7\xb5\x45\x63\xf2\xe4\xb9\xd8\x9c\x9c\xfa\x79\xb5\x8f\x5c\x8a\x0a\x84\xc3\x83\x8d\x6a\x9e\x41\x3f\xa2\x39\x1a\xe1\x1c\xd2\xe4\x13\x0d\x9d\xe1\xa4\x51\x3f\x81\x94\xc9\x0f\x5f\x9b\x31\xa6\xb2\xcf\xaa\x4c\x34\x14\x7e\x93\x67\xa9\x4d\x9c\xa7\x3e\x49\xb5\x98\xe7\xd2\x6a\xea\xc5\xe8\x7c\xef\x33\x68\x6b\x2c\x9d\x78\x44\x48\x93\x64\xdb\xf7\xad\x50\xe5\x69\x8e\xd9\x71\x0b\xe5\x8e\xab\x2d\x0e\x53\xd0\xe6\xb0\x42\x89\x0e\x07\xe0\x9e\x24\x7e\xbb\x84\x95\x37\xd9\xaa\xd6\x1b\xb8\xf9\xed\xee\x0a\x6a\x4c\x2d\xf7\x9c\x51\x7f\x9c\xd2\x87\x2c\x3b\xa0\xb6\xce\xf8\x12\x43\x64\x24\x72\xb9\x91\x8d\xdd\x31\x2e\xe5\x34\x7f\x55\x90\xf9\x2b\xe7\x74\x53\xee\xb0\x62\xdc\x0d\x0e\x06\x3e\xe9\x42\xed\xe3\xf2\x97\xfb\x19\x64\x54\x2d\xa3\x95\xf8\x7f\xdb\x69\x4b\x4d\xbc\xee\xd0\x77\xdb\x30\x62\xf4\x13\xf6\x56\xc9\xed\x79\x8b\xb2\xac\xe2\x8e\x46\xe3\x5e\x57\x2f\xa8\x1f\xf5\x24\x46\x3a\x6b\x38\x3a\xe8\xaf\xa7\x88\x5a\x3b\x7a\x3f\xa3\xf9\x38\x69\x83\x05\xd4\x25\xc5\x4e\xef\x87\xa2\xc2\x52\x57\x27\x94\xb5\x2a\x3b\xa6\xf4\x7e\xfc\x32\xde\xac\x56\x33\x80\xac\xd4\x8d\xac\xbc\x60\xcd\x8d\xc5\xd3\xf4\x46\x6a\x2e\x07\x13\x49\xd7\x8b\x3c\x1f\x75\x99\xc6\x18\xd6\xf3\x97\x1e\x03\x35\x17\xc6\xf6\x8f\x43\xa5\x3b\x7d\xef\x85\x79\xab\x73\x22\xd1\xf5\x70\xaa\x0b\x97\x02\x16\xe0\x4c\x83\x93\x96\x7e\x37\xe7\xc3\x0b\x8c\x9c\xa0\xb8\xe9\xe5\x54\x54\x88\x35\x23\x78\x70\x93\xee\x50\x2f\x8a\x3c\x12\xf9\xd0\x40\xd2\xd6\x31\xd4\x23\x89\x51\x25\xed\xcf\x31\xb4\xf1\x8d\x43\xc3\xce\x07\xa2\xd7\x07\x9d\x37\x6e\xa0\x9f\x25\xce\x35\x27\x1f\x92\x75\x76\x57\x08\x25\x1c\x6b\x5f\x69\x5e\x88\xc5\x91\x9f\x50\x43\x4f\x03\x53\xe0\x23\x9a\xe7\xe9\xf8\xe3\x68\xd6\xbf\x2f\xc1\x35\xd2\xf0\x32\x0c\x33\xff\x38\x80\xe3\x0e\xe9\xdd\xe8\x1c\xcd\x10\xf4\x30\x3c\x19\xf3\xb8\xea\x29\x1e\x62\x93\x5a\xd1\x8b\x31\x95\x91\x2a\xda\x5c\xd6\x3b\x6e\xe3\x4b\x80\xd2\xe9\xbf\x63\x16\xc3\xe6\x02\x32\xa9\xb7\x9d\x1c\x9e\xa7\x6f\x80\xfe\xce\xe9\xef\x0b\x48\x0f\xe4\xec\x6c\x7e\x0e\x4f\xa1\x43\x63\x1d\xac\xe9\xf5\x23\x65\xfb\x66\x4e\x0d\x40\x1b\x90\x7a\x3b\x83\x75\xe3\xe0\x48\xc4\x1f\x45\x42\xd4\xde\x4a\x9f\xfa\xd2\xff\x21\x0a\x8b\x8e\x1d\xb4\x41\xe6\x8c\x40\x3b\xbd\xc8\x4f\x54\xb2\xd3\xd6\xcd\x80\x9a\x9b\xbf\x69\x31\x94\x0e\xd5\x4c\xc0\xf3\x4d\xaa\x78\x5f\x6d\xc4\x1d\xbd\xcc\xa7\x27\x65\x21\x73\x63\x54\x13\x6e\x44\xe2\xe4\xf0\x9d\x05\x4d\xfe\x8d\x4f\x93\xa4\x6f\x87\x61\x62\x24\xc5\x7e\xc4\xbc\x6c\x83\x25\x77\xfd\xc4\xd9\x58\x42\x46\x80\x79\xbf\xfc\x63\xb7\xa2\xad\x51\x1e\xa6\xef\x37\xa0\x27\x24\x26\xec\x45\xe7\x7a\xff\x89\x00\xa7\xdf\xc4\x5c\x28\x30\xbb\x9b\xfc\x15\x00\x00\xff\xff\x52\x6c\x91\x55\x20\x12\x00\x00") func etcNginxLuaBalancerLuaBytes() ([]byte, error) { return bindataRead( @@ -175,7 +175,7 @@ func etcNginxNginxConf() (*asset, error) { return a, nil } -var _etcNginxTemplateNginxTmpl = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xec\x7d\xff\x73\xdb\xb6\xf2\xe0\xef\xf9\x2b\x30\xb2\x6f\x62\x67\x22\x29\xe9\x4b\xf3\xfa\xec\xf1\xdd\x39\x76\xf2\xe2\xab\x93\x78\x2c\xa7\x7d\xf3\xb9\xb9\xe1\x40\xe4\x4a\xc4\x33\x45\xb0\x00\x68\x5b\xcd\xf9\xfe\xf6\x1b\x7c\x25\x40\x82\x94\x9c\xa6\x49\x5f\xa7\xec\x4c\x6a\x91\xc0\x62\xb1\x58\x2c\x16\xbb\x8b\xc5\xa7\x4f\x68\x17\x17\x05\x3a\x38\x42\x13\x74\x7f\xff\x48\xfe\xe6\xc0\x6e\x80\x71\xf5\x6e\x66\xfe\x36\x9f\xd2\xc5\x52\xbd\x3e\x59\x2c\xed\xab\x33\x7e\x76\xf1\xd3\xcb\xd7\x25\x9e\x17\x90\xa9\x8f\xe1\x1b\x53\x2c\x07\x5c\x88\xfc\xd7\x8f\x97\x67\xaa\xcc\xdb\xe6\xa7\x29\x30\xc7\xe9\x35\x94\x99\x6e\xf6\x95\xfd\x61\x3e\x56\x8c\xde\xad\xdf\x02\xce\x2c\x5e\x17\xf2\xc5\x0c\x84\x7d\x67\xca\xe1\x2c\xf3\x4b\x1d\x37\x3f\xef\xef\x1f\xc9\x12\x64\xa1\x3a\x31\xd1\xd8\xbd\xa3\x19\x87\xb4\x66\x44\xac\x65\x81\x82\xe2\x2c\x59\xd1\xac\x2e\x00\x4d\x41\xa4\xd3\x72\x49\xca\xbb\xa9\x7e\xc3\xa7\xe5\xf2\x2e\xc9\x85\xa8\x64\x11\x5b\xcd\x14\x9f\x70\x7a\x28\xc1\x43\x99\xd9\x96\xe6\x35\x29\xb2\x0f\x15\x94\x82\xe1\x94\x94\xcb\x73\x8a\x33\x4d\x40\x59\x20\xc3\xb0\xa2\x25\xa2\x8b\xc5\xe1\xa3\x47\xb7\x94\x5d\x03\x4b\x2a\x46\x53\xe0\x1c\x38\x32\xa4\x9e\xfc\xac\x3e\x5c\xb8\xf7\xf7\xf7\x87\xa6\x13\x4b\x81\xf6\x0a\x28\xfd\x62\x27\x55\x7d\xbc\x58\x90\x92\x88\xf5\x3e\x7a\x26\x5b\x31\x70\xd3\xaa\x4e\xb0\xf9\xd2\x02\xed\xd5\xb1\xc0\x6d\x17\x2a\x92\xa1\x29\xab\x4b\x4d\x84\x49\x45\x32\xdb\x76\x09\x68\xf2\x0e\xdf\xc9\xbe\xbd\x21\x05\xf0\xa0\x31\x56\x90\x15\x11\x49\x49\x17\xa4\x00\xd9\x5a\x58\xb4\xd5\xc8\xa7\x4f\xd3\x27\x48\xd2\xf4\x60\x6a\xda\xa1\x6c\x39\x85\x72\x9a\xd1\x54\x13\x3c\xa5\x0c\x2c\x91\x73\xb1\x2a\x76\x4c\x3b\x3c\xaf\x45\x46\x6f\xcb\x44\x90\x15\xd0\x5a\xa0\x27\x53\xc5\x03\xd3\x27\x08\xdf\x50\x92\xa1\x5b\x4c\x04\x29\x97\x48\x50\x8a\x0a\x5a\x2e\x51\x56\x33\xf9\x1b\x23\x06\x72\xa0\x75\x85\x3e\x68\x21\x99\x66\xe6\xf3\x95\xf9\x7a\x7f\x8f\x0e\x1f\x3d\x82\x1b\x28\x05\x47\x9f\x1e\x21\x84\xd0\xaa\x2e\x04\x49\x70\x9a\x42\x25\x90\x79\x68\x79\xa8\xbe\xd9\x71\xa0\x65\x09\xa9\x20\xb4\xe4\xc8\x35\xf0\x0e\xdf\x99\xa1\xf0\xbe\x4a\x2a\xc9\x8a\x35\x07\xd4\x7e\xa0\xa2\x45\x71\xf8\xe8\xfe\xd1\x23\x49\x37\xd3\xba\xe1\x6c\x5c\x14\x93\xd3\x75\x89\x57\x24\x3d\xa1\xe5\x82\x2c\x6b\x86\x25\x44\x6f\x2e\xca\xd2\x45\x8d\x93\x0a\xa7\xd7\x78\x09\x49\x5a\x61\x91\xa3\xd1\xb4\xe6\x6c\x5a\xd0\x14\x17\xd3\x82\xcc\xa7\x45\x8d\xa7\xff\x43\x32\xb5\x7e\x4f\xe6\xd3\xbb\x1f\x5e\x26\x2f\x5f\x8c\x0b\x52\xd6\x77\xe3\x65\x59\xab\x22\xdf\x4f\x9e\xeb\x62\x87\xa3\xc3\x0e\x64\x03\xb8\x99\x47\x1a\x68\x51\xe3\xc3\xd6\xcb\x1b\x28\x33\xca\xec\xb7\x18\x26\xf2\x83\x6c\xc3\x35\xc2\x73\xcc\x20\x4b\x32\x92\x0a\x94\xfa\x5d\x4d\x32\x2c\x30\xfa\xfe\xdd\x61\xb4\x28\xa3\x75\x99\x25\x8c\xce\x49\x99\x70\x81\x05\xa0\xe7\x3d\x25\x0b\x9a\x5e\x73\xf4\xfd\xf3\xef\xae\xe3\xdf\xe7\xb8\xc0\x65\x0a\x2c\x81\xdb\x15\xee\x85\x12\x94\x4a\x0a\xcc\x45\x22\x68\x9d\xe6\x90\x25\x58\xa8\x5a\xaa\x9a\x9c\x80\xc9\x7c\x9d\xc8\xea\x73\xd9\xb2\x19\x56\xf9\x30\xf8\xa5\x26\x0c\xf6\x46\x0c\xb8\x58\x4f\xe4\x7c\x18\xed\xbb\xaf\x29\x2d\x0a\x48\xc5\x12\xb3\x39\x5e\xc2\xde\xc8\xfc\x1e\xed\x3f\x72\x45\xc6\x63\x05\x1f\x19\x31\xe6\xde\x2b\x1a\x23\x7a\xfd\x14\x31\xe0\x4d\x71\xf3\x02\x1d\xa1\x2a\xc5\x45\xb1\x67\xda\x7f\x8a\x46\x01\x9d\x3d\x1c\xa4\x48\xa0\x02\xd1\x6b\x24\x72\x28\x1f\x79\xac\xca\x18\x65\x12\x71\x05\x01\x2d\x30\x29\x20\x3b\x40\x23\x34\x99\x20\x41\xb9\x90\xf3\x71\x8f\x01\xdf\x6f\x60\x41\xc1\xc1\x83\x10\x34\x89\x8e\x14\xa6\xae\x68\x99\x6d\x83\xb5\x1d\x82\xaf\x83\xb0\x6d\x2d\x82\xab\xfc\xff\xbd\x37\xde\x46\x2a\xf4\x0c\xbb\x05\x34\xf1\xca\xee\xed\x1b\x20\x66\xca\x1b\x29\xaa\x7f\x4d\x9f\xa0\x5b\x50\x12\x43\xe4\x80\x6e\x70\x51\x03\xa2\x0b\xf5\x23\x57\x6b\x20\xfa\xd7\xf8\x0d\x65\xb7\x98\x65\x90\xc9\xbf\x90\xa0\x68\x0e\x48\x4a\x06\xf9\xa7\xad\xb9\x04\x9a\x90\xca\x70\x8b\x16\x92\x9e\x84\x91\x22\xeb\x23\x07\xb5\xfc\x5e\x30\x2a\x68\x4a\x0b\x8b\x03\x03\x5c\x24\xa4\x4a\x4c\x73\xea\x51\x0b\xb7\x5c\xd9\x54\xc9\x43\x87\x79\xc1\x61\xa8\x9a\x95\x8e\x0e\xe1\x37\x94\xe9\x95\xdc\xc9\x46\x6f\x15\xf1\xa1\x30\xb9\x30\x73\x72\x03\x9e\xfc\xfd\xf4\x09\x31\x5c\x2e\x01\xed\x0a\x56\x73\x01\x99\xec\xe0\xc1\x91\x6e\x42\x75\xe5\x12\x70\x71\x76\x71\x72\x76\x7a\x69\xb1\xe2\x20\x12\x0b\x73\xc1\xe8\xca\x62\xe5\x41\xe8\xc1\x24\xa4\xd4\x3f\x81\x9e\x5d\x04\xa3\x24\x05\xd4\x1c\xcb\xe5\xbc\xe6\x90\x49\xd2\x67\x20\x80\xad\x48\xa9\x07\x20\xa5\x75\x29\xd8\x1a\x65\x50\x41\x99\xc9\x25\x8b\x96\xfa\x43\x41\xa0\x14\xe8\xec\x02\xe1\x2c\x63\xc0\xb9\x3f\x3a\x43\xeb\xa8\xfc\xd0\x68\x2f\x4b\xa0\xa4\xf2\x97\xd4\x16\x18\x91\x13\x8e\x08\xb7\x82\x47\x22\x98\xe2\x22\xad\x0b\x29\x2e\x05\x93\x9a\x44\x8a\x16\x94\x21\x52\x66\xe4\x86\x64\x35\x2e\x1c\xce\x35\x97\xf8\xea\x3e\x13\x8d\xb5\x14\xb3\x35\x47\x15\x5e\x7a\xdc\xa4\x71\xb0\xb5\xf4\xe3\x2d\x0a\xea\xf3\x54\x81\x99\x64\x58\x1c\xfa\x75\xa4\xaa\xe2\x9e\x58\x9d\x73\x22\xe0\x84\x88\x75\xbb\x26\x65\x4b\x34\x5c\xf3\xec\xe2\x78\xf6\xbe\x5e\xb5\x2b\x6a\x1e\x6e\x18\xcb\x63\xab\x9e\x71\xd7\xeb\xed\x4f\x82\xcf\x74\xe7\x4d\xaf\x6f\x72\x2a\x17\x00\x4d\xc2\x44\x13\x26\xf9\x95\x96\x80\xf4\x9a\x71\x10\x2b\x70\x60\xe7\x82\x03\xf7\x5f\xb4\x84\x19\xf9\x15\x1c\x03\x46\xe1\x2e\x48\x21\xb4\x78\x91\xac\x7c\x0d\x8d\xea\xf7\x93\xe0\xa7\xb0\xc0\x75\x21\xde\xa8\x32\x3f\xc2\xba\x8f\x97\x31\xa1\xa8\xfd\x88\x9c\x01\xce\xf8\xa1\x2d\x90\xdc\x32\x22\x7c\x3d\x45\xd2\x47\x7d\x14\x69\x95\x94\xb4\xaa\x79\x1e\x7e\x6c\xbe\x65\x50\xe0\x75\xb7\x62\x41\x97\x09\xaf\xe7\x92\x03\x81\x8b\xd6\x47\x06\xb2\x43\x52\x51\xcb\x68\x2d\x3c\xad\xaa\x29\x72\x0d\x50\xe1\x82\xdc\x80\xd3\xe7\x5c\xe7\x7f\x04\xa8\x8e\xe5\x27\x74\x7f\x6f\xfa\xd0\x94\x36\x0d\xf2\x6e\xe9\x4b\xfb\x45\x12\x4a\xd5\xd2\xb3\xd1\x48\xad\x64\x5e\x2f\x16\x52\x8f\x94\xc3\x12\x8a\xb0\x13\x55\x4e\x0b\xaf\x57\xaa\x54\x30\x76\x21\x18\x87\xae\x7b\x62\x60\x1a\x35\xd4\xf4\xa0\xc0\x4c\xaa\x72\x11\x8c\x78\x00\xe4\x5c\x96\xeb\x22\xc4\xdb\xd8\xcc\x69\xb6\x8e\x74\xa9\x8d\xcd\x2b\x9a\xad\xfb\xbb\xa4\x80\x74\x3b\x14\x03\x12\x74\x48\xc1\x90\x92\xea\xbb\x64\x85\xef\x92\x05\x81\x22\x0b\xb1\xf0\x60\xbc\xbd\xba\xba\xf8\xee\x1d\xbe\x7b\x23\x4b\x05\x58\x34\x10\x0c\x41\x5a\x20\xda\x10\x34\x41\x1c\x08\xcd\xa4\xeb\x0a\x78\x92\x63\x9e\x2b\x40\x6d\x24\xd0\x77\xcf\x5e\xfc\x70\x68\x96\x0b\xb9\x4f\x4e\x4a\xbc\x8a\x57\xb0\xad\xe9\xfd\xf4\x7b\xbc\x82\xb7\x98\xe7\xef\xf0\x5d\x80\x73\x17\xca\xbc\x4e\xaf\x41\x58\x40\x71\x28\xaf\x54\x99\x00\xd0\x0a\x57\xb1\xfa\x9d\xce\xbf\xc3\x55\x04\x82\x02\xa1\xa5\x9e\xa6\x5d\xac\x4b\x16\xc4\x85\xb7\x35\x8f\xf5\x29\x02\x27\x40\xaa\x0f\x4e\x0c\xa7\x1b\xcc\x88\x94\xac\x51\xe2\x78\x38\xfd\x64\xcb\xf5\x90\xa7\x05\xa7\x33\xb6\x51\x38\x7e\xc7\xf4\xee\xac\x94\xb8\x4a\x85\x9c\x27\xa4\xb4\x5d\x0c\x88\x1c\x2e\x08\x1f\x9b\x0a\x67\x65\x63\x98\xa0\x65\xa3\x11\xd1\xc5\xc2\x89\x60\x8d\x2b\x59\x96\x72\x0b\x4c\xca\x1b\x5c\x90\x6c\xb0\x95\x33\x55\xf4\x4c\x97\xdc\x06\xbe\x16\x1e\x6a\xc3\xce\xe0\x17\xb3\x72\xa0\xd6\xe3\x84\x87\x2c\x77\x09\xbf\xe8\x45\xe8\x84\x66\x1e\x29\x3a\x5d\xf5\x0c\x1f\x76\xf5\xa3\xde\xab\xfe\x25\xb4\x6d\x36\x69\x4c\x26\x8a\x18\x65\x5a\xd4\x59\x68\x9d\x21\x2b\x98\xa8\x89\xaa\x41\x66\x7a\x69\x4b\xe4\x2b\x24\xe0\x4e\x4c\xa5\x8e\xd3\x87\xe7\x2b\x46\x45\x41\x2c\x8a\x73\xfd\xcb\x62\xa7\x7f\x26\x29\x5d\x55\x49\x01\x37\x50\x38\x5a\xe8\x6a\xe7\xea\x9d\x1d\x28\x53\x5a\xa1\xd2\x2a\x78\xa5\xde\x6d\xa7\x2f\xfe\xaa\x34\x4b\xad\x7e\xc8\xbf\x2d\x32\xf2\x87\x8f\xca\xf7\xde\x6b\xa5\xd7\xdd\x00\xe3\x72\x15\x7c\x3e\x79\xee\x7d\x5a\x91\x32\x29\xa0\x5c\x8a\x1c\x7d\xf7\xfd\x4b\xef\x43\x88\xa7\x6c\x36\xc4\x52\x15\x92\x93\x97\x40\x86\x70\xb9\xf6\xde\xde\x60\xb6\xee\x1b\xc2\x1d\x74\x52\x73\x41\x57\xc8\x32\xaa\xd4\x14\x19\xf0\x8a\x96\x66\xa3\xd4\x68\xe3\xd7\x4f\xd1\xee\x8d\x52\xc4\x71\x60\xa8\x93\xa5\x70\x66\x79\x5d\xe1\x78\x8d\xee\xef\x7d\xa6\x1c\xc9\x97\x37\xe8\xfe\x7e\x14\xc5\xc2\x08\x52\x41\xaf\xa1\xe4\x3e\x85\x67\x39\xbd\xd5\xd2\xf3\x4a\x7f\xdb\x34\xfd\x8c\xc9\x8b\x8a\xde\xfa\x5a\xe0\xca\x39\x2a\xf5\x12\xdb\xed\x91\x2e\x75\x80\xe2\x08\xee\xa0\x8c\x70\xb5\xf5\xba\xc5\xac\x24\xe5\x92\x1b\x91\x22\xb7\x7b\x04\x17\xe4\x57\xc8\x12\x2b\xa6\x12\x59\xc6\xd8\x0a\x75\xe5\xe3\x2c\x23\x52\xe5\xc1\x05\xc2\x37\x98\x14\x0a\x92\x93\x6a\x07\xa6\xd4\xae\x5a\x48\x2a\x9c\x82\x7d\x41\xca\xa5\xdc\x38\xa8\x15\xc6\xbe\x93\xb4\x22\x29\x34\xef\xa4\xf6\xb5\xa0\x6c\x85\x05\xaa\x2b\x2e\x18\xe0\x15\x29\x17\xd4\x27\xe3\x39\x5d\xbe\x51\x25\x5e\xf3\x14\x57\xf0\xbf\x66\x1f\xde\xa3\xfb\x7b\x50\x3f\x8e\xfe\xcd\x69\xd9\xf4\xf7\xb1\x9d\xd4\xae\xce\x47\x03\xd4\x4e\xed\xc7\x6e\x72\x4e\x9f\xc8\x95\x0b\xd5\xac\xe0\x48\xe4\x58\x20\x9e\xd3\xba\xc8\x14\xf9\x71\x55\x01\x96\x9b\x0e\x84\xd3\x14\x38\x9f\x14\x74\xf9\x79\x1b\x20\xd9\x3f\xdf\xa2\xa8\xe1\x25\x01\x3c\x89\xc6\xae\x51\x07\x93\x9a\x11\xb4\x5b\xd0\xe5\x52\x91\xb9\xd9\xa3\x37\x9c\xcc\xe0\x97\x8f\x8c\xb8\x3d\xe5\xec\x9a\x54\xc7\x0a\xea\x39\x5d\x7e\xbc\x3c\x77\x6c\x62\xe5\xa9\x29\x7f\x7f\x8f\x9e\x1d\x86\x1b\x79\x4f\x84\x21\x33\x8f\xbb\x72\xe2\x54\xf3\x8e\x6b\xc2\x4d\x9a\xa6\x27\x8a\x5b\x50\x77\xb7\xdd\x91\x80\xb3\x35\x2f\xa2\x10\xb8\xfa\x70\xa0\xa7\xd2\x91\x53\x3d\xd4\xdb\xb7\x94\x4b\x6d\xed\x20\x7c\x7b\x41\x99\xb2\x8d\x06\x5c\x43\x16\x47\x8e\x76\x51\x8c\xbc\x26\x2d\x38\xd7\xb1\x0b\x2c\xf2\x2d\x21\xfa\xb6\x90\xe1\x7d\x59\xd8\x63\x65\xf3\xf9\x8d\x1d\xb6\x6f\x5f\x4b\x58\xe7\x74\x19\x2e\x0c\xad\xfe\x36\x0d\x76\xea\xd9\xee\x6e\x86\x17\x59\x34\x2f\x81\xd3\x42\x39\x6b\x54\x5d\xfb\x33\xe0\x98\xb3\xea\xe6\xe5\xe9\xfb\x99\x57\x77\xfa\x04\xfd\x9c\x43\x09\xb2\xa4\x9a\x38\x48\xcb\x7c\xae\x0c\xe5\x7a\xff\x75\x4b\x44\x2e\xd5\x73\x8c\x46\x8d\x95\x7a\x64\x24\xfc\x53\xb5\xcb\x8f\x7c\x40\x84\x23\x0e\x02\x09\x8a\x46\x69\x41\x39\x8c\x5a\xd3\xf5\x36\x87\x12\xad\xf0\xb5\xb2\xd2\xe7\x80\x84\xdc\x9d\x08\xdb\xea\x04\xa1\xab\x9c\x70\xb4\x02\x5c\x1a\x69\xb0\xa6\x35\x4a\x71\x29\xa5\x01\x27\xab\xaa\x58\x2b\xa3\x55\x08\x74\xa4\xf5\xcd\x46\x14\xa3\x06\x33\xb4\xab\xe6\x7f\xea\xa1\x2a\x57\xa7\x9f\x61\x3e\xa3\x52\x47\x44\xbc\xae\x2a\x39\xa4\x73\x48\xb1\x04\xad\x4c\x18\x84\xa3\x14\x73\xd0\xfd\x6c\x35\x16\xe9\xf5\xad\x92\x58\x73\x70\x7d\x1f\xa9\x8e\x2a\x02\x4b\x08\x94\x91\x25\x91\x82\xdb\x52\x37\x23\x5a\xc0\xe5\xf8\x06\xfa\x48\xdc\x26\x1c\x49\x73\xd3\x90\x24\x0f\x2a\xe9\x30\x2a\xc6\x14\xd3\x21\xf0\x8c\x94\x29\xe8\x2e\xea\xb2\x19\xdc\x10\x2c\x00\x29\x8b\x57\xd8\x68\x29\x65\x77\x61\x78\x64\x0e\x39\xbe\x21\x94\xa1\x5b\xd0\x78\x3b\x03\x22\xe1\x52\x52\x33\x8a\xd3\x7c\xd2\x40\xd8\x41\x97\x20\xb0\x41\xc3\x8a\x37\x0d\x2a\xc7\x65\x56\x28\x9d\x70\x81\xdc\xfe\x7b\x90\xe3\x1a\x01\xad\x86\xb3\xae\x96\x0c\x67\x80\x76\x9b\x71\x75\xef\x3e\x75\x64\xaa\x7b\x4c\x91\x43\x57\xe2\xf1\xe3\x96\xe2\xab\x98\x36\x10\xc1\xb2\x51\x3b\xdd\x7c\xd3\xe4\x80\xb1\x12\xed\x8a\x1c\xac\x25\x31\xf4\xd6\x0c\xd9\x52\x35\xd1\xfe\x09\x81\xb9\x4f\x8d\x8a\x2a\x8e\x6c\xf9\xfe\xfe\xed\x86\xa6\xd7\x44\x02\x89\xca\xa3\x78\x6d\x06\x2b\x2a\xa0\x55\xab\x91\xb1\x4e\x8d\x51\xf6\x50\xb5\xf2\x26\x77\x52\x6b\xd0\x14\xd0\xcd\x3a\x1d\x30\xa5\x8c\x41\x2a\x8a\xb5\xb2\x19\xa6\x92\xc3\x38\x2f\xe4\x1a\x55\x50\x9c\x91\x72\xd9\x1a\xd2\x2e\xa4\xdd\x0a\x73\x9e\x98\xa5\x82\xa7\x39\xac\x06\x07\xb7\x07\xcc\xc0\x60\xef\x6a\xa0\x87\x61\xef\xd4\x4e\x4a\xa2\x1b\x6b\x1f\x97\x99\xad\x86\x30\x03\x45\x04\x39\x11\x16\x94\xa5\xa0\xc4\x67\x46\x64\xb7\x5d\xe7\x46\xa6\xf4\x41\x04\xda\x48\x92\x5c\x97\x4f\x04\x55\x8a\x0a\x1f\xea\xe1\xb3\xa6\x2f\x23\xa5\xf7\xc8\x7f\x46\xfa\xc5\xf3\xd6\x37\xee\x7d\x7c\xde\x61\xe8\x08\xad\xa4\x0c\xd4\x38\x1a\x45\x5a\xbd\x19\xc0\xa6\x07\xc8\x00\xbd\x6d\x98\x81\x57\x2e\x5c\xaf\x71\x51\x4c\xce\xf8\x6c\x76\x7e\x81\x39\x17\x39\xa3\xf5\x32\x6f\xf9\x31\x77\x14\xfe\x1a\x37\x1d\xc7\x30\x39\x27\x5c\x40\x29\xd7\x65\x3e\x91\x75\xd5\x64\xb9\xbf\x97\xc3\xf2\xe2\xc5\xdf\x94\xb8\x8f\x78\x43\x64\xf9\x86\x1e\x9d\x8e\xeb\x37\x2d\x1a\x6c\x6a\x31\x78\x5e\xbc\xf8\xdb\xe1\xd0\x54\x6d\xb5\x68\xe9\x81\xba\xb3\xf5\x37\x62\xf8\xf6\xea\xea\x62\xf6\xa5\xd1\x0b\xf6\x35\x1f\xe6\x4a\xd0\xcf\xc1\x88\x05\x94\x53\x2e\x5a\xcc\x26\x5f\x49\xc1\x48\xb8\xfe\x73\xe3\x4c\x96\xa5\x86\x26\x6f\xf3\x7d\x90\xb1\x75\xbb\x12\xb5\xa4\xc1\xe3\x41\x62\x64\x13\x22\xae\x4f\x7d\xaa\xfb\x09\x5d\x55\xb5\x80\x37\x75\x51\x04\x2b\x88\x63\xe9\x9f\x41\xea\x38\x8f\x85\x5a\x4f\x8d\x10\x97\x9b\x61\x1f\x0b\xc9\xc6\x56\x47\x91\x2b\xaa\x5c\x5e\x9c\xcf\xce\xc0\x61\x50\x15\x38\x05\x6e\x0a\x38\x69\xae\x02\x22\x38\xa5\xe5\x00\x9d\x24\xfc\xdd\x45\x5d\x14\x9d\xb7\x01\x77\xd9\x69\x7a\xb2\x61\x21\xeb\xd0\x75\x14\x6d\xf2\x69\x74\xcd\x1a\x0d\x90\x7b\xb4\xa1\xc2\x36\x2b\x5d\x2f\x2e\x9a\xa8\x89\x47\xba\x61\x54\x06\xcb\xeb\x69\xe2\x16\x4f\xd4\x6b\xb2\x90\xbb\xf0\x84\x94\x89\x5d\x0c\x9a\x8d\x9c\x9c\x79\xc1\x17\xf3\x34\x76\x01\x06\xca\x15\xa3\xf7\x16\xde\xe3\xfc\x22\x9c\x17\x8e\x56\x8d\xed\x47\x4b\x2d\xf3\xd2\x99\xf4\x76\x90\xa8\x59\x89\x68\x89\x38\x70\x65\x58\x4a\x71\x9a\xeb\x88\x1a\x94\x31\xcc\x05\x49\x71\x21\x97\xf4\x55\xc5\xe8\x0d\xa0\x0a\x98\xb2\x1a\x94\x29\xb4\x99\x7e\x36\x3b\x9f\x69\x20\x27\x38\xcd\xdd\x78\x48\x74\x0c\xf0\x24\x55\x1f\xa4\x66\x25\x48\x79\xf0\xfc\xd9\xb3\x67\xd6\x29\x36\x9b\x9d\x1f\x78\xa8\xfa\x80\x42\xe3\xb9\x07\xad\x1d\xc6\xd3\xd4\x6b\x5c\x0d\x3d\x76\x19\x5c\x14\xf4\xd6\x05\x1e\xc8\xfe\x4a\x55\xc5\xd2\x40\x10\xb9\x51\xe0\x91\x06\xd5\xfb\x78\xa7\xaf\xcc\xc7\x8d\xa6\xd8\xc6\xd8\xb4\x07\xab\x4a\xac\xe3\x80\x7e\x84\x35\xda\x8f\xd1\x50\x23\xa1\x7c\x7d\x9e\x81\xd4\xa0\x36\xb9\x86\x75\x4f\x97\x79\x41\x96\xb9\xd4\xce\x18\x64\x75\xaa\x45\x8a\xa4\xe0\x58\xd0\xf1\x82\x30\x2e\xc6\xf3\xb5\x00\xd7\x9c\xef\x18\xf2\x08\xdc\xf2\x04\x0d\x77\xe8\x84\x54\x39\x30\xbe\xdf\xc8\xbd\x2e\xdd\x53\x6d\x48\x94\xe4\x4f\x75\x71\x87\x82\xf9\x8d\x1e\x7b\xed\x1b\x90\xda\xa0\xd4\x70\x3b\x28\x5c\xf5\xe4\xb2\xd5\x06\x3d\xb8\x11\x6c\x4f\xdf\x5e\x60\x86\x57\x5d\x6c\x35\x86\xa7\x6f\x91\x8a\x76\xdb\xd2\xfe\x24\xf1\xf2\xed\x4f\xf2\x77\x96\x57\xb2\x05\x87\xb7\xf9\xed\xd3\xd7\x20\x31\x6c\x46\x76\x86\x4a\xad\x2a\x99\x60\xb0\xab\xf3\xd9\x25\xa4\x94\x65\xdc\x67\x9b\x6c\x2d\x85\x49\xaa\x06\x32\x29\xa8\x55\x29\xdb\x72\x89\x17\x09\xa4\x59\x9e\xa4\x35\xbb\x09\x06\xfc\xf5\xc9\xe9\xdb\x13\xf5\xb2\x35\xde\x13\x6d\x02\x56\xd6\x0b\xde\xd0\xcc\x18\x86\x95\xfd\x43\xc5\x03\xe8\xf1\xd4\x22\x9c\x94\x02\x58\x0a\x95\x48\x40\x57\xeb\x1f\x23\x63\x73\x03\xc6\x94\x13\xc2\x1a\xdd\x34\x78\xa9\xe0\x84\x0d\x6b\x7b\x8b\x8a\x3f\x90\xc8\xdb\x6a\xf7\xf7\xe8\x08\xfd\x4f\x3d\x82\x49\xf8\xe1\xb0\xd5\xa6\x31\x29\x78\x33\x8d\x81\x5c\x7a\x9d\x5c\xf5\x66\xfd\xb1\x64\x0c\x13\xbe\xaa\x4d\xc0\x6e\x2b\xe8\xc1\x52\x1a\x95\x51\x44\x75\xa9\x0d\x9d\x35\x65\x6d\x5f\xdf\x92\x0c\x1a\x83\xb9\x71\xb1\x91\x0c\x7c\x93\x79\x3e\x18\x2f\x13\xe7\x75\xa5\x1e\x96\xa4\xaa\x40\xec\x77\x06\x2e\x95\xd4\xe1\xfa\xab\x9b\xa8\x90\x59\xeb\x42\x18\xab\xa5\x7f\xad\x70\x65\x5b\x6b\xc3\x1f\xb4\xd6\x29\x36\xde\x32\x9a\xb1\x21\x92\x5c\x3b\x9f\xa2\x5d\x6b\x2c\x54\xd4\x9a\x7b\x91\xc4\x0d\x7c\xf8\xa5\x29\x36\x31\xc2\xd5\x06\xc2\x4e\xec\x1f\x57\xeb\x0a\xd0\x28\xa5\xf4\x9a\xc0\xc8\xd6\x77\xc0\xe5\xfa\x77\xbd\x1e\xcb\x9e\x39\x48\xef\xf1\x4a\x31\x56\xa3\x25\xe9\x52\x28\xc7\x3c\x3f\x0a\x8a\xb6\x1b\x3d\x51\xcd\xb4\xdf\xbe\xc5\x5c\x19\x04\x65\xcf\x3e\xa7\xbe\x45\x48\x89\x26\x5a\x16\xeb\xc3\x47\x2d\x05\x6e\x6f\x69\x04\x86\xb5\xca\xff\x68\xa3\x21\xfc\x80\xd4\x67\xfb\xbe\x0e\xe5\x02\x26\xdc\xb8\x0e\x56\xb6\x1c\x18\x19\xed\x70\xfc\xb4\x94\x56\xc3\xe6\xfa\xf9\xba\xcc\x2a\x4a\x4a\xb5\x7a\x9a\xef\x4d\x8c\xfa\xe4\xd8\x58\x46\xfe\x2f\xd2\x0e\x0b\x15\x6a\x75\xe0\x15\xb0\x16\x5a\x15\x49\x80\x49\xc1\x8f\xbc\x8f\xef\xf0\xdd\x1b\xf9\x4e\x16\x90\x1f\xad\xda\xe0\x97\x91\x05\xda\x3a\x03\x8a\x98\x43\x22\x9d\x73\xac\xb2\x81\x47\x1a\x07\x09\xce\x5e\xa9\xb0\x3f\x52\x2e\x35\xc7\x7b\xcc\x6c\xfc\x2e\xb6\x08\x1c\x17\x4b\xca\x88\xc8\x57\x6d\x62\xfe\x35\xa8\xbf\xd3\xa0\xf6\x4a\xab\x6d\x25\x95\x1b\x4b\xfb\x47\xe2\xc2\x45\x3d\x89\xa1\xe9\xf1\x6c\x22\xff\x7b\x7e\x88\x76\x90\xda\xc7\xe5\xb4\xc8\x80\x35\x04\x76\x91\xc5\x3d\xf1\xa3\x5e\x04\xa9\x0a\x88\x6d\x22\x56\xff\x38\xdc\xd2\x3b\x73\x94\xc1\x59\xcd\x09\xb5\xb2\xac\x70\x65\x3c\x00\xb7\xa4\x28\xd0\xdc\x84\xb9\xd2\xc6\x3c\x27\x4b\xfd\x9c\x13\x01\x05\xe1\x22\x08\x5a\x35\x5c\x48\xca\x0c\xee\x9e\x06\xdc\xc8\x9b\xa3\x2d\x61\xd9\x82\xa6\x7a\x0d\x6b\x4a\x4d\xce\xcd\x3b\xbf\xf8\xae\x8a\x70\x3f\x38\xb2\xb3\xd7\xd4\x6a\xea\x87\x5c\x42\xb8\x2d\xa2\x74\x04\xc8\xc2\x92\x4d\x41\x77\xb6\xc3\x7e\x9e\xb8\xae\x4d\x4e\xce\x4e\x2f\xcd\xe9\x0e\xb3\x38\x9f\x42\xb9\x56\x76\xad\x4f\x9f\x50\xc5\x48\x29\x1c\xce\x6f\x29\x17\x72\xe1\x40\x06\xd3\x26\xf6\xb2\x65\x94\x36\xf2\x47\x42\xb2\x11\x2f\x68\xaf\x07\xd6\x28\x19\x19\x78\xfb\xa1\x14\xf3\x9c\x96\x11\x29\x60\x02\x6e\x7b\x7a\xd4\x76\x8f\xaa\x10\x88\x8e\x6b\x74\x78\x3e\x6e\x33\x57\xad\xb7\x56\x9d\x77\xda\xd3\x11\x92\x97\x58\x80\x0a\x6d\xe1\x0d\x4b\x78\xba\x8f\xfc\xac\x22\x64\xb4\xdf\xb6\xb0\xf2\x3b\x4e\xca\xdd\x5b\xdb\xaf\xc4\x14\x3f\x3b\x8d\x93\xe9\xd9\x61\x3f\x95\x58\xd1\xd0\x27\x4e\x9a\xe7\x1d\xd2\x6c\x83\xae\x32\xf6\xf4\x60\xb8\xab\xc3\x80\x7a\xb0\x7e\x16\x46\x01\xc9\xa9\xfd\x5f\xb4\x04\xc7\x2d\xfe\xfc\x7e\x8e\x46\xa3\x01\x0b\xa1\x37\xb7\x71\x51\x18\xeb\x94\x8a\x34\xce\x10\x93\x73\x59\xa3\xff\x2b\x2d\x81\x4f\xd0\x6b\x9c\xe6\x48\xb9\xfc\xf4\x44\x31\x45\x39\xc2\x28\x03\xed\x4a\xc8\x54\xd9\x96\xb7\xea\xf9\xbb\x57\x68\xfc\xdf\xd1\xf3\x97\x48\xe4\xb4\xe6\xb8\xcc\xd0\xcb\x17\x6a\x1b\xab\x02\x92\x81\x23\xca\x10\x9e\xcb\x05\xe0\x87\xa6\xc8\xf3\xef\x7e\x08\xca\x44\x04\x89\x6a\x4b\x72\x8f\xf6\xb9\x5a\xe6\x91\xd4\x68\x18\x68\xdf\x97\x12\xaa\x46\x1f\x4b\x4e\x9f\xa0\x57\x8a\x16\x46\x30\x59\xe3\x0e\x47\x7b\x0b\x46\x57\x53\x41\xd1\xed\xed\xed\x7e\x0c\x93\xdc\x4c\xc9\xa7\x68\x57\x50\x75\xdc\xed\xd2\x54\x9e\x85\x92\xcd\xae\xb0\x11\x86\xb3\x9e\x25\x15\x83\x63\x2c\x79\xaf\x48\x99\x99\x25\xf8\xac\xba\x79\xe1\x33\x60\xa1\x2c\xc9\xc8\x9c\xb4\x53\x35\xcd\xca\x1c\xb3\x33\xa3\xfb\xfb\xcd\x46\xc2\xd6\x09\x81\x56\xf4\xcd\x60\xa3\x9b\xbd\x04\x9b\x6c\xf4\xdd\xb6\xb5\x69\x66\xc8\x72\xfe\xf9\x5d\x72\x7f\xc8\x3d\xf5\xa0\x91\xd2\xef\xf2\xd7\x20\xec\x9f\x88\x92\x61\x24\x8d\x69\xa2\x73\x22\xf5\x73\x66\xc2\xcb\xbf\x66\xc2\x17\x1f\xbf\x6d\x66\xc1\xff\x3e\x38\xf8\x3f\x5f\x89\xb2\xb6\xa9\x3f\x09\x3d\x3b\x73\xa1\xf5\xc6\x73\x39\x68\x8b\x91\x55\xf2\x9c\x3d\xaf\x99\x43\x25\xf4\x21\xfe\xe2\xc5\xdf\xba\xe1\x6d\xc6\x93\xad\x3c\x92\x72\xb5\x54\xda\xe4\x02\x8d\x0e\xfe\xdb\xcd\xa8\x07\x50\xb0\xbf\x60\xa0\xbc\x0f\x96\x5c\x27\xc6\x76\x64\x57\x38\x6b\xc1\xb3\x0e\xf5\xe9\x54\x9d\xcd\xa2\x86\xc2\x61\xfb\xf7\xf7\x7e\x24\xdf\x20\xcb\x7d\x7e\xb3\xfd\x4d\x6c\xdc\xeb\x6c\xb7\x47\xd1\x0a\xde\x8e\x54\x4d\x98\x40\xdd\x5d\xf3\xdb\x66\xf0\xe2\xab\x7e\x7b\xb4\xbb\xf5\x82\x4d\x78\x41\x70\x67\xdf\x26\x60\x55\xa9\x63\x60\xa3\xd9\xeb\xcb\x9f\x5e\x5f\x8e\x0c\x50\x6b\xac\x90\x0a\x9d\x45\xbf\x6b\x95\xe8\x18\xd6\x55\xc1\xb6\xb9\x11\x7d\x21\x93\x23\xf2\xcc\x8e\x41\x4b\xf1\x39\x11\xef\xe6\xc9\xc7\xd9\xd5\x87\x77\xc9\xeb\xcb\xcb\x0f\x97\x33\xcd\xb8\xe1\x60\xee\xec\x28\x00\xc3\xc3\x11\x1b\xf6\x1d\xb7\x13\xd0\x15\x9e\xea\xd3\x80\x72\x23\xf7\xfe\x9f\x67\xef\xff\x85\x74\xc2\x84\x34\x87\xf4\x5a\x45\x9a\xe8\x68\x11\xb9\xeb\xd5\x71\x53\x52\x45\xe5\xf1\x91\xde\x41\x1f\x8d\x63\xb8\x3f\x36\xc2\x1e\x4c\x43\x7b\x0c\x97\x19\x5d\x99\x13\xa3\xff\xae\xb9\x8a\x5a\xd3\x67\xe8\xaf\x4b\x7a\x5b\x2a\x20\x7c\x1f\x61\xee\x50\x56\x60\x25\xaa\xda\xd5\xe1\x8f\x5b\x8e\xe5\xbb\xa5\x8e\x04\xd3\x30\x3d\x9d\x3d\xcd\x15\xab\x93\xf2\xc0\xab\xa3\x43\x54\xa6\xd3\x25\x11\x79\x3d\x9f\xa4\x74\x35\xbd\xae\xe7\xc0\x4a\x10\xc0\xa7\x26\x64\x79\xac\x9d\x59\xf3\x82\xce\xa7\x2b\xcc\x05\xb0\x69\x4a\x4b\xc1\x68\x51\x00\xe3\xc6\xd5\x55\x5d\x2f\xa7\xe9\x2a\xf3\xbe\x18\x67\xcc\x92\x6e\xa3\x5b\x35\x44\xb1\x87\x08\x9a\x71\xf5\x25\xf3\x25\xd4\x1c\x8c\x11\x4a\x79\x02\x24\x3d\x1a\x9d\x64\x8e\xd3\xeb\x82\x2e\x8f\x6c\x13\xaf\xf4\xef\xc0\x59\x89\xfa\x95\x93\x4d\xcb\xde\xd7\xc1\x32\xb6\x5a\x08\xeb\xa0\x77\xf6\x2b\x6d\x12\x18\x8f\xbc\xe5\xc2\xd9\x34\x5a\x59\x3f\x82\xfd\x24\xda\xf2\xcc\x88\x7d\x82\xb3\x23\xd6\x21\x1e\x17\xb2\xf6\x89\xc5\x42\xdb\xc7\x88\xf9\xef\x9e\x79\xbb\xf0\xfb\x48\x17\xa6\x84\x8f\x33\x6d\xd7\x1b\x17\xf3\xb1\x17\x9b\xff\x6d\xfb\x12\x7c\x94\xcc\xae\xce\xdb\xf5\x19\x02\x9b\x4e\x15\x91\x03\xf5\x26\xbb\x40\xdf\xe1\xfe\xb0\xba\xf1\xa6\xe8\x24\x0b\x47\x21\xb4\xc9\x12\x44\x62\xdd\x2d\xaa\xc4\x5e\x17\x8c\x59\x06\x02\x38\xad\x43\xf8\xcd\x53\x2e\xef\x26\x70\x47\xc4\x9e\xfc\x43\xae\xc3\xc9\xd9\xfb\xab\xd7\x97\xef\x8f\xcf\x13\xbd\xfe\x68\xc1\xdc\x6d\xa5\x19\xe3\xce\xa7\x20\x6b\x80\xdf\x10\xc7\xeb\xbd\xd1\x87\x1f\x23\x5d\xef\xa2\xf1\xe1\xc7\xb0\xd4\xfd\x30\x17\x29\x19\x64\x4f\x57\x85\x23\xd3\x3f\xa9\x94\x43\xb4\xc4\xc5\xa8\xc3\x20\x5f\x9a\xd3\x86\xe1\x77\x4e\x31\xdb\x27\x7a\xea\x38\x23\xbc\x2a\xf0\xfa\x70\xeb\x92\xf6\xa4\x89\x3e\xa4\xd5\x46\xb0\xa5\x9e\xa1\x0d\xf3\x9a\x8b\x7a\x6e\xe9\x6c\xfd\xc7\xdd\xfe\x46\xc6\xea\x61\x76\xfc\x70\x74\xc3\x29\xf5\xbb\xcb\x85\x90\x18\x2a\x0c\xe1\xf9\x77\x7f\x37\xde\x82\x58\xe3\xbd\x9b\xdf\x06\xc0\xc1\x41\xb7\x6a\x44\x0c\x65\x50\xae\x65\x8d\xb0\x6c\xf0\x63\x47\x2f\xfc\xe6\xdc\xce\x1c\x10\xfc\x52\xe3\x42\xa9\x2d\x91\x34\x2d\x19\x31\xd1\xb1\xf6\x31\x47\x87\x57\xf8\x4e\x1f\x1f\xee\x9c\xb8\x35\xcf\xe8\xf9\xb3\x55\x6b\x62\xe8\x49\xa4\x63\x53\x24\x09\xfb\x9e\xcf\x14\xa0\xa1\xa8\x6b\xb9\x54\x50\x4b\x06\x74\xc9\x18\xe1\x9b\x28\xab\x44\x43\x27\xc2\x2e\x7a\x47\x1b\x10\x42\xff\x1a\xab\x4d\xc9\x8b\x67\x2f\xb6\x19\xc1\x7e\x71\x63\x7f\x8e\x8d\x52\x31\x36\x22\x3a\x2e\x7e\x1e\x30\x51\x50\x10\xf4\xd0\xbc\x33\xc1\x32\x1d\x57\xd8\x56\x42\x60\x0b\x80\xed\x8e\x3c\x4c\x1a\x6c\xb9\x05\xb8\x7f\xf4\xc8\xfa\x78\x1f\xa1\xf0\xe8\x9c\xca\x61\xd0\xf8\x7f\x83\x53\x73\x33\xfd\x3e\x76\x7c\xf6\x37\x1c\xed\xda\xe6\x20\x55\x83\x55\x34\x2a\x64\xf3\xd9\x24\x17\x1d\x78\x75\x72\x81\xcc\xd1\x41\xde\xde\xc8\x3e\x45\xbb\x22\xad\x66\x6e\x1f\x3b\xb9\x3a\xb9\x78\xd5\x0a\xc4\x70\xce\x50\x91\x56\x2a\x8a\xc2\xd5\xb0\xfe\xdd\xd6\x5b\x03\x40\x79\x34\xd4\xa1\xc6\xe1\x22\xfd\x5f\xdd\xa9\xad\x16\xda\xff\x7e\x8a\x76\xc1\x78\xa6\xd5\xee\xbb\xa9\xea\x3b\xac\x5b\x1b\x6a\xd4\x79\x54\x30\x91\xa9\xe0\x9c\xd9\xc6\x3a\xe8\xde\x1b\x24\xe2\x67\x2b\xd0\xef\x61\xb5\x8f\xe2\xd9\x32\x5e\x76\xc6\xc0\x70\x66\x84\x88\xbe\x69\x6a\x72\x0a\xa9\x31\x8d\x6c\x34\xb5\xf5\x1b\xfa\xa2\x08\x7e\x25\x8c\xbe\xae\xd9\xf8\x3f\x6f\x28\xdc\x6e\xf4\x5b\x8d\x47\xeb\x8d\x06\xd2\x9f\x2e\x45\xe7\x87\x54\x02\x26\x16\xe8\x11\x5b\x3f\x90\xce\x4a\xf3\x4d\x64\x51\xc7\x28\xb0\x89\x9c\xaf\x4b\x43\xce\x76\x97\xac\xb1\xd8\x3d\xbe\x1e\x1c\x75\x1a\x77\x0c\x53\x1f\x4f\x07\x25\x7b\x9d\xf9\x92\xfd\xe3\x69\xbf\x64\xaf\x33\x4d\x4d\x57\x23\xa0\x66\xf3\xb6\x97\x9a\xf1\x22\xfd\x5f\xb7\x96\xec\x4d\xd5\xaf\x2c\xd9\xbf\x9d\x68\xef\x0c\x82\x1c\x9e\xcf\x16\xcb\x5b\x40\xfb\xe3\x89\xd4\x2f\x47\x02\x27\x0e\x3f\x87\x0e\x51\x51\x66\x53\x64\xf0\xa0\x03\x2d\x51\x76\xe9\x0a\x75\x85\xd9\x17\x97\x85\xdf\x6a\xf6\xb6\x4f\x4e\x19\x72\xd9\x6c\xb1\x19\xa8\xd8\x56\x95\xef\x6b\xe1\xf4\x74\xde\x18\xad\x19\x54\x20\x88\x0e\xd6\x32\x49\x61\x75\xa5\xae\x32\xdf\x72\x5b\x65\xfe\x8e\x46\x49\xb7\x81\x3d\x4e\xab\x6e\xd5\x4a\x48\xdc\x93\xa4\xb8\xcb\xee\x5e\x18\xbb\x62\xf5\xbe\x30\x76\xe4\x6f\x1e\xe3\x71\xeb\xad\x1d\xa5\xb5\x20\xb5\xb6\xbb\x7d\xf1\xf6\x9d\x7d\x71\x6c\xbb\xd9\xec\x38\x51\x8b\xd3\xbc\xf0\xf9\xed\xa0\xe8\xad\x90\x57\x52\x1f\xc4\xd2\x29\x74\xb7\x84\xf1\xc1\x1c\xa6\x1f\x7f\xbc\x3c\xd3\x30\xa2\x6e\xb8\x41\x18\x0d\xdf\x5a\x3c\x5c\xda\x94\x2d\x21\x9c\x19\x17\x85\x62\x6f\x05\xc1\xcf\xb3\xb2\x25\x90\x99\x5e\x71\x3d\x20\x7e\x62\x96\xd6\xd0\x98\x93\x5e\xa8\xf5\xec\x4d\x9e\xec\xa3\x29\x9a\x33\xc0\xd7\x87\x51\xbb\x5e\xc8\xe2\x5b\xec\xaa\x7f\x87\x8d\xfa\x17\xd8\xaa\x77\xbf\xb5\x93\x4a\x9f\x7c\xb8\x9c\xb9\x7c\x0e\xea\xe0\xbc\x75\x33\xad\x48\x9a\x13\x28\xae\x71\x71\xbd\xc2\xa5\x72\x37\x19\x0f\xa3\x71\x23\x8d\x53\xca\xf8\x98\x56\x50\x8e\x43\xab\x4f\x93\x2c\xd3\x17\x29\x81\x24\x51\x32\x97\x9a\xf9\x7f\x42\x19\x6f\x51\x7a\x07\xc9\x97\xe8\x82\xc1\x42\x1d\xba\x42\x2b\x10\x39\xcd\x38\x2a\x01\x32\x8e\x70\x93\xd7\x87\x56\x5a\x84\xe1\x32\x43\x19\x59\x2c\x80\x41\x29\xd0\xa5\xf6\x5c\xc8\x99\xa6\x01\x92\x05\xda\x73\x4c\xaf\x81\xa1\x23\xf4\xf8\xc3\xc5\xd5\xd9\x87\xf7\xb3\xc7\xfb\x9e\x4c\xe8\xe4\x28\x7a\xac\xcd\x03\xe3\x13\xed\x2e\x1b\xab\xb8\x54\x33\xa7\x0e\x5c\x57\x54\x37\xd4\x27\xfd\xa5\x39\x60\xe5\xf1\x55\x58\xf0\x84\x41\x06\xa5\x20\x58\x87\x61\x6f\xd9\xb0\x57\x2b\xd6\x7a\x08\xf4\xf1\x61\x84\x31\xb6\x6c\xe8\x9d\xa6\x79\xac\x11\xf3\x29\xec\xe3\x96\x60\x8d\x98\x8f\x81\x6d\x56\x80\x87\x80\x7d\x87\xef\xc6\xc7\x4b\x68\x01\x7c\x87\xef\x8e\x97\xb0\x09\xd4\x89\x36\x6a\x8e\xaf\xd6\x15\x1c\xe8\x3c\x68\x55\x81\x49\x89\xd2\x1c\x33\x0e\xe2\xe8\xe3\xd5\x9b\xf1\x0f\x5b\x81\x38\x57\xe9\xc3\x0e\xd0\x33\xaf\xb4\xf3\xa0\x59\xb3\xa3\x67\x3e\xfb\x8b\xcf\xfe\x18\x7c\xd6\x91\x89\xa1\xea\xa4\x77\x21\x63\x67\xe9\x8c\x2a\x50\xb7\x44\xe4\xb6\x24\x56\x21\x21\x6d\xf9\x67\x23\x41\x5a\xfa\x90\xbd\x54\xe2\x0d\x61\xdd\x20\xe6\x26\xc2\x65\x32\x83\x94\x76\x34\xe4\x3f\x7c\x74\x6a\x73\x8a\x2c\x12\x1f\xff\xfb\x7a\xe6\x3f\x7d\x52\x07\xc9\xbf\x59\xfc\xe8\x1f\xad\xeb\xd1\x6d\xa6\x0e\xde\xfb\x0f\x0e\xfa\xfc\xa6\x54\xfe\x43\x04\x67\xfe\xf1\x28\xb0\x39\x9c\x72\xab\x00\x19\x25\x8a\x35\xa9\x10\xed\x09\x44\xf2\x22\x49\x6d\x9e\x8f\xde\x50\x2e\x97\xd2\x85\x98\x8c\xf2\x26\x38\xee\xea\x7c\x86\x78\x49\xac\xb5\xc9\x9d\x20\x70\x38\xa8\xf4\x6a\x7a\x1c\x81\xa1\x55\xcd\x05\xc2\xc5\x2d\x5e\x73\x9d\xd2\xab\x65\x50\x04\x3d\x91\x9e\x06\x89\x47\x66\xef\xcf\x1a\x08\x26\x81\x06\x57\x39\x23\x68\xcd\x52\x40\x2a\x0d\xfc\x82\x4a\x94\x88\x98\xb4\x71\x68\x07\x05\x9a\x81\x9e\xcd\xce\x4f\x80\x09\xb2\x50\xc7\x3b\xf6\x7f\xdf\xb5\xe1\x4b\x87\xfa\xa2\xaf\x17\xfb\xfe\xed\x25\xb1\xca\xcd\xd0\xed\x8a\x4a\xa9\x8d\xee\xef\x55\x0a\xee\x07\x89\x93\xbf\x06\xe4\x9b\x0d\xc8\x57\x5c\x47\x1f\x30\xf3\xff\x7c\x47\x1e\xfe\x24\xec\xd2\x9a\xbf\x0f\x1f\xd2\xff\xf8\xb3\x16\x7f\x92\x81\xdc\xa4\xd5\x28\x55\x21\xa5\xab\x15\x94\x02\x5d\xbc\x7e\x87\x78\x8e\xbd\xeb\x61\xdc\x05\x36\xa9\x30\xd1\xdd\xdc\x2a\x20\x4b\xa9\x15\xa8\x03\x9a\x61\x88\x1c\x2e\x33\x2f\x47\x62\x73\x17\x9b\x6d\x71\xc7\x36\x73\xe0\x6d\x16\xd5\x88\xc3\xea\x24\x87\xf4\x9a\xd7\xab\x40\xef\xe2\x45\x92\x36\x3c\x86\xfa\x9e\x10\x98\xc7\x95\x01\x4d\x5a\xd0\x54\x36\xa5\xcf\x87\x36\x34\x2f\xde\xd4\x45\x71\x92\x63\x52\xfa\x13\xa4\xd5\x2f\x7b\xdd\xd0\x50\xff\x42\x4c\x62\x50\x3b\x1d\xe4\x02\x57\xc5\x50\x94\x5c\xcb\x71\xec\xd7\x49\x6e\x80\x91\x45\x9c\x28\xfd\xce\x66\xd4\x7b\xda\x22\x4e\x9f\xe3\x5a\xe4\x57\xe7\x33\xe5\x03\x69\x9d\x0d\xf1\x4f\xa9\x78\xa5\x22\xe7\x78\x5e\x3c\xfb\x5b\x54\x6a\x6d\x6e\xde\x23\x9e\x6c\x63\x72\x72\xfc\x86\x14\xf0\x1e\xaf\xa0\x85\x4c\x8c\x55\xdb\x95\x2f\x60\x35\x7b\x7b\xdc\x61\x59\x1d\xeb\x38\xc8\xb9\x03\x40\x1b\x8c\x3a\xa3\xab\x07\xc8\x34\xd0\x33\xba\x03\x90\x7f\x52\xd5\xf5\xed\x2c\x7d\xb0\x33\xa8\x44\xde\x03\x7a\x10\xb6\xce\xd8\x40\x68\x79\xaa\x20\x6c\x35\x57\xda\x40\xd4\x70\x5f\xe0\x65\x30\x5b\xbc\x34\x4f\x2f\xfe\xf1\x3d\x7a\xf1\x8f\x97\xe8\x68\x08\x13\x07\x64\x6b\x89\xb8\xdd\x62\xd7\x4a\x6c\x86\x5a\x19\xcb\x86\x9e\x96\x48\x71\xf9\xcc\x36\x65\x5a\xe9\x41\xa6\xf7\x78\x95\xdf\xce\xc3\x4e\x46\x3d\x24\x43\x86\x6d\x69\x8b\x2c\x19\x7e\x71\x5c\x8b\xfc\xc2\xaf\x22\x47\x6b\x20\xb9\x46\x9c\x06\x2e\xd1\xc4\xa5\xf6\x94\x4d\x8e\xab\xea\x92\x52\xe1\x73\x8c\x72\x9d\xd4\x8c\xa0\x23\x34\xdd\x6f\xf9\x4e\x8d\x00\xf9\xdb\xb3\xef\x14\x52\x7d\xe0\x82\xc1\xd9\x82\x67\x9a\xde\xc5\xbc\xba\x47\x21\x01\xb6\x75\xe8\xee\xa0\x72\x79\x97\xc8\x6a\xf6\x02\x2b\x7b\x7b\x1f\xbd\x01\xc6\x48\x06\xbc\xb9\x1b\xc2\x2e\xce\x15\x56\xfe\x24\x53\xe1\x69\x0b\xa0\xc8\x81\xc1\x82\x32\xf0\x13\x7c\xc3\x5d\x55\x90\x94\x88\x62\xad\x73\x9b\xeb\x13\x5e\x26\x03\x04\x5e\x62\x22\xb7\xfd\x26\x4f\x4b\x0e\xb1\x66\x5a\xad\x30\xe0\xf5\x4a\xa2\x24\x50\x8e\xb9\x39\xd1\xa7\x32\x45\x9b\x93\x63\xb2\x99\x05\x65\xad\xa6\x6c\x23\xe7\x35\x46\x29\x2e\x51\x45\xd2\x6b\x7b\xa2\xa4\x49\x35\x1d\xb4\xd5\x6f\x9a\xb1\xc9\x4f\x6c\xfa\x1a\x25\x50\x3b\x7a\x9c\xd3\xbc\x54\x9c\x93\xcf\x84\xa3\xa8\xd3\x5c\xe5\x77\xb3\x5e\xb9\x39\xcd\xf4\x6a\xd9\x89\xea\xef\x71\x06\xab\x27\xf4\xbe\xa8\x9c\x1a\x31\x87\xae\xe3\xcc\xd7\x77\x9a\x39\x94\x70\xd3\xee\x85\xb8\x33\xd6\x38\x09\x5b\x4f\xc0\xe5\x71\x58\xdb\xe3\x1e\x71\xcc\xab\xe7\xc1\xde\x79\x03\x6d\xa6\x93\x6c\xb7\x9e\x48\x16\xed\xad\x0e\x4d\x0c\xb5\xa5\xee\x79\x88\x3c\xfd\xe4\x31\x37\x43\x7c\x26\x71\xce\xbd\xee\xb8\x43\xc5\x4d\xce\xe3\xcf\x25\x98\x6b\xe1\x9d\x3f\xd8\x2d\x3f\xf1\x83\x46\x40\xb2\xe2\x1b\x73\x0f\xa6\x7b\x46\xda\x5f\x6e\x8f\x68\x36\xc7\x2e\x1f\xc4\xac\xe6\x6e\x3d\x7b\xc8\x7a\x9b\x53\x0f\x0d\x62\x12\xc2\xd8\x40\x18\x3b\x10\xfd\xc3\xd5\x6d\xec\x01\x71\x0c\x0f\x43\xa2\x7f\xf0\x06\x19\x33\xb8\xcc\xc9\x3d\xcf\xdb\xa7\x7b\xfc\xa4\x94\xcd\xc1\x6e\xfd\xb4\xcf\x3e\x45\x84\x92\xbb\x47\xac\x5d\x76\xe8\x08\xce\x28\xa0\xab\xda\x31\x4f\x5e\xd1\x6c\x6d\x36\xa3\xd1\xb3\x22\x84\x2b\x9d\x2f\x7a\x63\x60\x03\xab\xe7\x42\xc1\x18\x66\xd1\xcb\x09\x03\xc4\x06\x6f\x27\xdc\x30\x06\x3b\xe8\x02\x73\xbd\x16\xc1\x9d\x60\x38\x55\xfb\x57\xad\x0b\xfb\xaa\xba\xa0\xaa\x8c\x5c\x75\x25\x79\x6f\x88\xbd\x98\x22\xec\xfd\xe7\x6f\x2d\x1a\x18\xbd\xdb\x0a\xcc\xb9\x7c\x77\x45\xdd\x8d\x4a\x9b\xb8\x96\xf3\x62\xac\x3b\x33\x96\x9d\xb1\xe5\x76\xbd\xfd\x88\xbe\xc4\x49\xef\x38\xb7\x39\x52\x34\xd4\x86\xbf\x53\xf4\xdb\xd0\xef\x37\xc8\x1f\x0f\x0e\xaf\xe7\xff\x86\x54\x8c\xb3\x32\x84\xc3\x93\x2c\xca\xe9\x71\x28\x84\xf3\x1a\x98\x02\x12\x40\x21\x1d\x28\x3d\xbc\xa1\xb4\x08\x73\x89\x4a\xbf\x84\x91\x42\x3d\xbe\x1e\xa8\x30\x28\x03\x60\x4b\xb5\x31\x38\x4d\x5d\x45\xb5\x42\x93\xc4\x0f\x97\x19\xda\xdb\x6c\x80\xdb\xf7\x32\x5b\xcc\xae\x66\x1d\x96\x53\x4a\xb1\xb9\xd4\xe2\x48\xc7\x4c\xb5\x75\xe3\x4e\x98\x42\xcf\x33\x9a\x09\x46\x52\x31\xbe\x62\xb8\xe4\x15\x65\x62\x3c\x83\xb4\x66\x44\xac\x0f\xd0\x0a\xdf\x8d\xf1\x12\x8e\x82\x4c\x1b\xb3\xab\x99\x0b\x6e\x69\x19\xb3\xe4\xb7\x33\x7d\xf9\xdf\xac\x9e\x67\x74\x85\x89\x4e\x2b\x68\xaf\x04\x9c\xd5\xf3\x53\xfd\xb6\xe5\x41\x0c\x40\x5c\x18\x7b\x93\xac\x58\xe9\xbf\x5d\xf1\x96\xf4\xea\xcc\x44\x3b\x34\x3d\xb3\xbc\xe1\x86\x73\xba\xe4\xe6\xe4\xd5\x43\x0e\xaf\xf6\x2d\x0a\xed\xb4\xef\xed\xb5\xf4\xa3\xb6\x1e\x9e\x95\x97\x2e\x77\xd8\xc6\x44\xe3\x21\xfa\x8e\x44\xdd\x13\xbf\xed\xc6\x7e\x12\xdc\xbf\x34\xf8\x21\x57\x0f\xf7\xc1\x38\xec\x5a\x54\x23\xd3\xee\xab\x28\xef\x12\x4d\x52\xaa\xd0\xdf\xbd\x25\x08\x13\xd7\x79\x56\xea\x23\x7d\xc1\xfe\x73\x62\x3e\xfa\xeb\xa1\x49\x8a\xd8\x02\x39\x7d\xa2\x80\x4a\x3d\x1a\xab\x53\xaf\x52\x4d\x52\xec\x2b\x17\x10\x0b\x66\x65\xbf\x06\xa6\x50\xd7\xfd\x32\x0c\x52\x1d\x19\x4c\x83\xa0\xeb\x16\x03\xab\x7a\x7e\x20\xaa\x5f\xef\xb2\x2e\xfa\xaa\xf8\x61\xa7\x7e\x15\x13\xa0\x1a\x25\xdb\xf4\x89\xcb\x5c\x27\x57\x46\x6d\x65\x97\x7b\xb3\x39\x20\x9c\xe6\x04\x6e\x74\x6e\x93\xd4\xde\xf5\xd5\x5c\x6f\xc0\xe4\xfe\x52\xbe\xc6\x68\x36\x3b\x47\xbe\xd5\xd2\x4b\xf8\xa2\x77\x81\x10\x75\x66\x37\x8c\xbc\x47\x59\x64\xaf\xfe\x86\xb2\x14\x66\xb3\x73\xa7\x98\x3d\x40\x56\x76\x80\x79\x70\xf6\x7b\xd6\x6b\x05\xb8\xc9\xf6\x79\x56\xda\xbf\xce\x09\xf7\xe4\x44\x33\xed\xde\x53\x95\xa0\x5d\x43\x75\x76\x94\x0e\xf4\x1d\x04\xa5\xb6\x9b\xab\xcb\x93\x4a\x4b\x0c\x4e\x6c\x30\xa8\x79\x4c\x4c\x68\xeb\x36\xa1\xb6\x18\x47\x11\xbd\x3c\x2a\x4b\x3a\xb5\x76\xcc\x3d\xef\x26\xfd\xbd\xca\x0f\xe3\xae\x8b\xc7\x5e\xb4\xaa\x0d\x53\xd6\xb0\xc8\x0d\xc4\x10\xf8\x02\xd9\xa2\xec\x13\xd8\x00\xff\x8e\x8e\x36\xe5\x71\xb2\x21\xc1\x2a\xf3\xd5\xe6\xc4\x51\x9d\xf6\xac\x99\xf9\x1f\x7f\x3f\x8c\xf5\x2c\xb6\x91\x40\xdb\x67\x99\x72\xd8\x85\x17\xd6\xf4\x6f\x2b\x50\xaf\x92\xd6\xb7\x98\xc5\xdf\x6e\x5e\x22\xde\xd1\x8c\x9b\xb5\xbc\x0d\x66\xe5\x7d\x72\x09\xf2\x23\x1f\x13\x56\x17\xa0\xd6\x8a\xf0\x3a\xdf\xa6\x84\xff\xf7\x44\xca\x82\xde\xa3\xe8\x0d\x62\x1f\x7e\x3e\x9e\x5d\x9c\x50\x06\x52\xc0\x75\x98\x77\x73\xf3\xf4\x16\xf3\x6a\xec\x95\x1b\xa7\x36\xbb\xd0\x78\x23\x3a\x0f\x25\xea\x16\x19\x81\xc3\x0a\x5b\x66\x06\xf6\x2b\x4a\x59\xf0\x1b\x12\xfc\xc6\x84\x46\xcc\xb9\x82\x86\x34\xa6\x6e\x47\x3e\x43\x44\xfa\x66\xe0\xae\x6c\x1c\x30\xaf\xa2\x26\x2d\x85\x83\xdb\xa4\xa4\xaa\x45\x0e\xa5\x20\xfa\x7d\xa8\xab\xf9\x06\xd5\xa6\x19\xbf\x8d\xc3\xde\x0a\x52\xf3\x91\xef\x54\xe9\x44\xdf\x21\xd0\x24\x40\x37\xf7\x80\x80\x30\x5f\x5a\x70\x9a\xab\x8f\xdd\x33\x03\x31\x3e\x31\x50\x3c\x90\x6d\x16\x1c\xbb\x83\x9a\xd9\xdd\x53\xb4\x5b\x10\x9d\xac\xd6\xd9\xd1\xed\x01\x32\x1b\x27\x3c\xc4\x6f\xba\x76\xe7\xfd\xf8\xe1\xb2\x23\xbe\x4f\x9a\x91\x65\x49\x4a\xbd\x5b\x0a\x6a\xf9\x52\xfc\xd9\x73\x6d\x15\x77\x3d\x90\xb5\x64\x9d\x2d\x80\x3e\x24\xdf\x8d\x83\xf6\x0a\x73\x92\x9e\x92\x25\x70\xa1\x01\xca\x19\xdf\xcd\x68\xd1\xb8\xfc\x7b\x6b\xea\xeb\x23\xe6\xf2\xed\xa8\xb3\x0f\x90\x43\xa8\x3e\xb5\x6c\x2a\x6d\x20\x97\x80\x8b\x55\x57\x51\x6b\xea\x27\x35\x07\xa6\xc5\xd8\x20\xa0\x37\xa4\x88\xdb\x40\x62\x29\x76\x24\xf4\x4c\xd5\xfd\x0d\xe8\x69\x00\xbf\x19\xbf\x2d\x2c\x0e\x12\x00\x65\xe4\x57\xcd\xc9\xa3\xae\x19\xea\x21\x1c\x3b\x7d\x22\x47\x56\xea\x9a\x6e\x6e\x38\x85\x1d\xfb\x19\xaa\x9b\xac\xd4\x4f\x51\xca\x40\x7e\x08\xf2\x50\x7b\x2d\xe9\xe4\xda\xdc\x4d\x45\x97\x36\x7a\x70\x02\x5a\x67\x9b\x2a\xa8\xb2\xa7\x6b\x28\x7d\xf0\xfb\x77\x50\x6d\x26\x6f\x0e\x26\xa9\x3f\x7b\xb2\xb6\x84\x69\x50\x74\xf6\x93\x01\x74\x37\x48\xfb\xae\x63\x4e\x6b\x3b\x93\x8f\x97\xe7\x71\x2b\x44\xcd\x08\xfa\x7f\x4f\x7c\xcb\xc7\xc0\x6a\xd4\xf2\xd2\x19\xd8\xee\x60\x64\xf4\x6b\x4c\x4c\x6c\xd5\xad\xad\xd3\x14\xfd\x61\xed\xa5\xad\x76\xbf\x8c\xed\x54\xa7\x33\x5f\xbb\x34\x91\x35\x07\x6d\x20\x40\x98\x6b\xcf\x8a\xa0\x2e\x3b\xc0\x53\x34\xaf\x85\xc9\x3f\xd5\xf8\x29\x7b\x36\x76\x51\x0e\xb2\xbb\xfe\x9f\x64\x13\x1d\x16\xea\x48\x89\x1e\xd7\x4e\x38\x46\x01\xcc\xe8\x10\x6d\xe5\x1d\xe8\x69\xab\xa5\xc9\xff\x1e\x06\x69\xe3\x07\xfd\xcb\x14\xfd\xe7\x36\x45\xef\x20\xb5\x65\x40\xb7\x30\xe7\xfa\xee\xf2\xe6\xf6\x6b\xbe\xb5\xe7\xca\x7f\x3e\x9a\x2b\xb3\x9b\x27\xb8\x5e\x3b\xba\xf7\xf2\x16\x14\xdb\xf8\xa4\x7b\x3c\xfe\x21\x58\x78\x97\xb5\x37\x4d\x45\xdb\x79\x1b\x5e\x6f\xe6\xd3\xeb\x81\xfe\xbb\xe1\xf6\x23\xd7\x8a\x7f\x9e\x97\xf9\x5f\x63\xa9\x2d\x8d\xcf\x2e\xc2\x16\xfd\xfb\x43\x06\x37\xb8\x1b\x6e\x8e\x1d\x68\xb7\xb9\xe8\x58\x96\xb7\xed\xc6\xee\x77\xfd\x3c\x5a\xf6\xb5\x30\xd4\xb3\x6d\xa6\xaf\x0f\xd7\x93\xa8\x83\x52\x74\x10\x88\x8a\xb2\x35\x40\xdc\x8d\xc9\x0f\xa9\xaf\xee\x22\xf7\xea\x0f\x04\x1f\x44\x00\x45\x83\x22\x1e\xe0\xe2\xef\x09\x84\x88\xa2\xd2\xb7\x86\x50\x83\x43\x7b\xd0\xb6\xc6\x3d\x1c\xea\xf8\x6d\xf8\x96\x65\xa3\x37\xe2\x77\x70\x5b\x11\x41\x96\x72\x09\x7b\x7b\x75\x75\x41\xef\xd6\xe8\xa7\xba\x28\x81\xe1\x39\x29\x88\x58\xb7\x0a\x5b\xa3\xd8\xed\xed\xed\x44\xe7\x76\x4e\xe9\x6a\x3a\x2f\xe8\x72\x6a\xe0\x90\x72\x39\x16\x39\x8c\xd5\x95\x77\x77\xeb\xf1\x8d\x0f\x6d\x7c\x4b\x44\x6e\x72\x49\x0f\x77\x59\x87\x97\x77\x9e\x4e\x1c\x8e\xcb\x55\x6e\xbd\x61\x82\x2a\x60\x04\x6c\x5a\xf0\x1e\xbd\xfe\xfa\x29\xda\xbd\x71\x47\x26\x06\x72\x85\x44\xd1\x93\x62\xf1\xba\x73\x91\xb7\xc1\x51\x7e\xbc\x89\x6b\x2f\xbd\x92\xca\x88\xb9\x48\x1e\x19\xaf\x7a\x5b\x99\x35\xe2\xb2\x49\x2b\xc3\xe3\x2c\x5c\x66\x03\x70\xe3\xa0\x67\x50\x66\x1b\xe0\x32\xc0\x0f\x87\x7b\x09\x38\x84\x1b\x01\xbc\x39\x8b\x68\x4c\xb3\x57\xff\xbe\x72\x55\x3b\xe4\xf7\x61\xf7\x6e\x19\xfa\x76\x0d\xbe\x32\x3e\x00\x77\x28\xc0\xf4\xc5\x67\x42\x76\x71\x6c\xbd\x54\x89\xc1\x35\xe1\x30\x2d\x7a\x44\xc0\xc7\xe3\x5d\xfc\x47\xc5\xbe\x44\x59\x96\x5e\x13\x48\xb4\x37\x38\x5a\x33\xca\xb2\xb2\x92\xf6\x15\xf7\xf8\xe9\x0d\x5c\xb5\xe9\x8c\x3f\xbd\x70\xc3\x2c\x99\xf6\xd9\x41\x67\x25\x4a\x31\x07\x44\x17\xc8\xe4\xdb\x11\x6c\xad\x04\x72\x09\x77\xc2\xbb\x55\x54\xbb\x74\xe6\x3a\xf8\x52\xef\x6d\x95\x73\xac\xd4\xf5\x22\xd8\x4a\x00\xce\x31\xda\x87\xad\x12\xd2\xef\xe1\x4e\x38\xfd\xbc\x8d\x7f\xf8\xb1\x39\x9c\x22\xd8\xfa\x3d\x2d\xcf\x32\x58\x55\x54\xb4\x23\xc2\x7b\xb0\x48\x04\x23\xd0\x66\xc5\x08\xcd\xfc\x36\xaf\x54\x95\x88\x87\x5a\xf9\x16\xb5\x1f\x89\x96\xc5\x1a\xdd\x52\x76\xcd\xad\x8d\xc6\xe4\xee\x45\x84\xab\xfd\x4d\x4a\x57\x15\x03\xce\x21\xeb\xdb\x49\x46\x42\x79\xb3\xec\x15\xe6\x10\x31\x44\x6e\xab\x34\x1e\xab\x94\x45\x63\x95\x93\xcf\x4e\x8f\x7e\x2b\x54\xb7\x7b\xc7\x59\x86\x70\xb9\xf6\xb3\xbf\x84\x27\x66\x74\xae\x85\x78\x9f\x02\xe5\xb8\xa9\xe3\x85\x74\x6f\xd8\x0b\xda\xa1\xb6\xc6\xf5\x58\xc4\x38\xfa\x82\x97\x72\x58\xbc\x7b\xda\x7d\xa0\xa1\xee\x16\x10\x66\x80\xe4\x12\xd3\xf8\x96\xb5\xcd\x5e\x50\x84\xad\x8f\xd2\x9a\x24\xcc\xf6\xf8\xa9\xaa\x97\x65\xe1\xf5\x73\x76\x05\xef\xf3\x2e\xe7\x98\x5f\x30\x58\x90\xbb\xc0\x8e\xa9\xe3\x8e\x47\xba\xa1\x76\x2a\xa3\xf1\x68\xb3\x61\x42\x3f\x91\xb4\x5a\xdf\xb7\x3d\x2c\xbf\x6b\x2e\xad\xff\x90\x3c\x58\x5b\xf1\x46\xaf\xcd\xc8\x0c\x57\xaf\xff\x68\x38\xaf\x75\xab\x52\x41\x97\x9b\x6e\x5d\xe8\xbb\x84\x15\x6d\xef\x94\x55\xa2\x5b\x9f\x4e\x54\xf1\x63\xdb\x86\xb7\x3c\x34\x49\x77\x13\x42\xb1\x17\xf8\x35\x3c\xe5\xc6\x5a\x4e\x55\x20\xf0\xc8\xb0\xfa\x68\x7f\xdb\x0a\x74\xb1\x18\x75\x83\x26\xac\x92\x61\x82\x33\x7a\x9f\x3e\x8d\x2b\x68\xe3\x41\xe6\x80\x2f\xd6\xe6\xc6\x72\x57\x74\x4b\xdf\x46\x0f\xbe\x3b\xe8\x3d\x45\xe0\x52\x95\xe2\x1b\x4c\x0a\xe5\xc5\xb5\x71\x31\xb1\x03\x16\xc6\x32\xde\x91\x22\x0f\x6c\xd9\x9d\xbd\xc9\xa0\x24\x90\x4d\xd0\x25\x60\x4e\x4d\xe2\x26\xd7\xe9\x53\xf5\xb1\x5d\x7b\x7b\x14\x86\x8f\xa0\xf6\x1c\xa7\xe9\x39\x72\x1b\x9e\xd0\xd3\x77\xd0\x20\x75\x93\x92\x3a\xfe\x92\x16\xb4\xce\x5c\xd0\x6e\x13\xb9\x22\xe9\x58\x6b\x1d\x6d\x30\xd9\x46\xf4\xec\x8e\x2d\xfc\x76\xf3\x8d\x37\xad\x88\x85\x2f\x7c\x23\xc4\xe7\x5f\x7b\x63\x9c\xe4\xad\xb3\xbd\x3a\x27\x94\x52\x3e\x95\x54\x55\x97\x4f\x11\x8e\xe6\x20\xd1\x5a\xd1\x92\x08\xca\x20\xf3\xa0\xa8\x9c\x51\x52\x61\x35\x8e\x59\xc4\xe9\x42\xdc\xca\x55\x7a\xaf\x20\xd7\x80\xf8\x9a\x67\x64\xb9\xdf\xa5\xe1\xd0\x45\x29\x5f\x83\x76\xcd\xde\xbc\xd9\x97\xbf\x97\x28\xe9\x70\xc8\xb3\xea\xe6\x45\xf4\x5e\x5e\xe4\x2e\xd2\xb0\x1b\xef\x2d\x27\x5c\x3c\xc5\xc2\xb8\xd7\x15\xd8\x87\xd6\xcb\x2f\x8b\x96\x7c\xdb\x46\xa2\xb9\xfb\x63\x6b\x76\xeb\xbb\x8d\x25\x9c\xc6\x4d\x86\x32\xfb\xe7\xff\x0f\x00\x00\xff\xff\xaa\xdd\xdf\x17\x94\xae\x00\x00") +var _etcNginxTemplateNginxTmpl = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xec\x7d\xff\x73\xdb\xb6\xf2\xe0\xef\xf9\x2b\x30\xb2\x6f\x62\x67\x2c\x29\xe9\x4b\xf3\xfa\xec\xf1\xdd\x39\x76\xf2\xe2\xab\x93\x78\x2c\x27\x7d\xf3\xb9\xb9\xd1\x40\xe4\x4a\x44\x4d\x11\x2c\x00\xda\x56\x73\xba\xbf\xfd\x06\x5f\x09\x90\x20\x25\xa7\x69\x9a\x76\xca\xcc\x64\x2c\x12\x58\x2c\x16\x8b\x05\xb0\xdf\xf0\xe9\x13\xda\xc5\x79\x8e\x0e\x8f\xd1\x08\xad\xd7\x8f\xe4\x6f\x0e\xec\x16\x18\x57\xef\x26\xe6\x6f\xf3\x29\x99\x2f\xd4\xeb\xd3\xf9\xc2\xbe\x3a\xe7\xe7\x97\x1f\x5f\xbc\x2a\xf0\x2c\x87\x54\x7d\x0c\xdf\x98\x62\x19\xe0\x5c\x64\xbf\x7e\xb8\x3a\x57\x65\xde\xd4\x3f\x4d\x81\x19\x4e\x6e\xa0\x48\x75\xb3\x2f\xed\x0f\xf3\xb1\x64\xf4\x7e\xf5\x06\x70\x6a\xf1\xba\x94\x2f\x26\x20\xec\x3b\x53\x0e\xa7\xa9\x5f\xea\xa4\xfe\xb9\x5e\x3f\x92\x25\xc8\x5c\x75\x62\xa4\xb1\x7b\x4b\x53\x0e\x49\xc5\x88\x58\xc9\x02\x39\xc5\xe9\x74\x49\xd3\x2a\x07\x34\x06\x91\x8c\x8b\x05\x29\xee\xc7\xfa\x0d\x1f\x17\x8b\xfb\x69\x26\x44\x29\x8b\xd8\x6a\xa6\xf8\x88\xd3\x23\x09\x1e\x8a\xd4\xb6\x34\xab\x48\x9e\xbe\x2f\xa1\x10\x0c\x27\xa4\x58\x5c\x50\x9c\x6a\x02\xca\x02\x29\x86\x25\x2d\x10\x9d\xcf\x8f\x1e\x3d\xba\xa3\xec\x06\xd8\xb4\x64\x34\x01\xce\x81\x23\x43\xea\xd1\x4f\xea\xc3\xa5\x7b\xbf\x5e\x1f\x99\x4e\x2c\x04\xda\xcb\xa1\xf0\x8b\x9d\x96\xd5\xc9\x7c\x4e\x0a\x22\x56\xfb\xe8\xa9\x6c\xc5\xc0\x4d\xca\x6a\x8a\xcd\x97\x06\x68\xaf\x8e\x05\x6e\xbb\x50\x92\x14\x8d\x59\x55\x68\x22\x8c\x4a\x92\xda\xb6\x0b\x40\xa3\xb7\xf8\x5e\xf6\xed\x35\xc9\x81\x07\x8d\xb1\x9c\x2c\x89\x98\x16\x74\x4e\x72\x90\xad\x85\x45\x1b\x8d\x7c\xfa\x34\x7e\x82\x24\x4d\x0f\xc7\xa6\x1d\xca\x16\x63\x28\xc6\x29\x4d\x34\xc1\x13\xca\xc0\x12\x39\x13\xcb\x7c\xc7\xb4\xc3\xb3\x4a\xa4\xf4\xae\x98\x0a\xb2\x04\x5a\x09\xf4\x64\xac\x78\x60\xfc\x04\xe1\x5b\x4a\x52\x74\x87\x89\x20\xc5\x02\x09\x4a\x51\x4e\x8b\x05\x4a\x2b\x26\x7f\x63\xc4\x40\x0e\xb4\xae\xd0\x05\x2d\x24\xd3\xc4\x7c\xbe\x36\x5f\xd7\x6b\x74\xf4\xe8\x11\xdc\x42\x21\x38\xfa\xf4\x08\x21\x84\x96\x55\x2e\xc8\x14\x27\x09\x94\x02\x99\x87\x16\x47\xea\x9b\x1d\x07\x5a\x14\x90\x08\x42\x0b\x8e\x5c\x03\x6f\xf1\xbd\x19\x0a\xef\xab\xa4\x92\xac\x58\x71\x40\xcd\x07\x4a\x9a\xe7\x47\x8f\xd6\x8f\x1e\x49\xba\x99\xd6\xf3\x0a\x4f\x4b\x9c\xdc\xe0\x05\x4c\x93\x12\x8b\x0c\x0d\xc6\x15\x67\xe3\x9c\x26\x38\x1f\xe7\x64\x36\xce\x2b\x3c\xfe\x1f\x92\x4d\xf5\x7b\x32\x1b\xdf\xff\xf0\x62\xfa\xe2\xf9\x30\x27\x45\x75\x3f\x5c\x14\x95\x2a\xf2\xfd\xe8\x99\x2e\x76\x34\x38\x6a\x41\x36\x80\xeb\x99\xa1\x81\xe6\x15\x3e\x6a\xbc\xbc\x85\x22\xa5\xcc\x7e\x8b\x61\x22\x3f\xc8\x36\x54\x23\x76\xba\x5c\x54\x78\x92\x61\x06\xe9\x19\x51\x94\xc0\x8c\x00\xaf\x05\x92\x94\x54\xa3\xb3\x55\x81\x97\x24\x39\xa5\xc5\x9c\x2c\x2a\x86\x65\x39\x2b\x6b\x54\x81\xd3\xf9\x62\x74\x46\xb8\x7c\x73\x51\xe1\x2b\xe0\x62\xf5\xd3\xc9\x6b\xc5\x6e\xb2\x2d\xc9\xec\xd3\xd9\x6a\x2a\x3b\x36\xcb\x69\x72\x63\x48\x28\x1f\x06\xbf\x54\x84\xc1\xde\x80\xc9\x5a\x23\xc9\x7b\x83\x7d\xf7\x35\xa1\x79\x0e\x89\x58\x60\x36\xc3\x0b\xd8\x1b\x98\xdf\x83\xfd\x47\xae\x88\xea\xa5\xa2\x99\x82\x30\xbd\xc3\x73\x74\xdc\x04\x7b\x87\xe7\x1e\xd4\xa0\xf0\x48\x62\xb7\xe7\x01\x34\x22\x6b\x53\xc7\xd7\x6b\x57\x63\x38\x54\x5d\x44\x46\x6a\x35\x50\xa3\x37\x07\x88\x01\xaf\x1b\x30\x2f\xd0\x31\x2a\x13\x9c\xe7\x7b\x06\xd7\x03\x34\x48\xfc\x86\x3c\x84\xa5\x04\xa0\x02\xd1\x1b\x24\x32\x28\x1e\x79\x9c\xc9\x18\x65\xb2\x93\x0a\x02\x9a\x63\x92\x43\x7a\x88\x06\x68\x34\x42\x82\x72\x21\xa7\xdf\x1e\x03\xbe\x5f\xc3\x82\x9c\x83\x07\x21\x68\x52\x11\xae\xc6\x1f\x8a\x74\x1b\xac\x67\x38\xc7\x45\x02\xec\xeb\x20\x6c\x5b\x8b\xe0\xea\x8d\xa0\x91\x76\xf2\xd7\xda\x31\xfc\x03\x86\x55\xb1\xac\x11\x22\x1d\x9c\x6b\x11\x19\x79\x65\xf7\xf6\x4d\x93\x6d\x34\x94\x9c\xbc\x03\x25\x60\x44\x06\xe8\x16\xe7\x15\x20\x3a\x57\x3f\x32\xb5\x64\xa2\xff\x0c\x5f\x53\x76\x87\x59\x0a\xa9\xfc\x0b\x09\x8a\x66\x80\x24\x62\xf2\x4f\x5b\x73\x01\x74\x4a\x4a\xc3\x6d\x5a\xa6\x7a\x1d\x94\x12\xee\x03\x07\xb5\x5a\x5f\x32\x2a\x68\x42\x73\x8b\x03\x03\x9c\x4f\x49\x39\x35\xcd\xa9\x47\xad\xf3\x72\x21\x54\x25\x8f\x1c\xe6\x39\x87\xbe\x6a\x56\x98\x3a\x84\x5f\x53\xa6\x17\x7e\x27\x4a\xbd\x45\xc7\x87\xc2\xe4\x3a\xce\xc9\x2d\x78\xe2\xfa\xd3\x27\xc4\x70\xb1\x00\xb4\x2b\x58\xc5\x05\xa4\xb2\x83\x87\xc7\xba\x09\xd5\x95\x2b\xc0\xf9\xf9\xe5\xe9\xf9\xd9\x95\xc5\x8a\x83\x98\x5a\x98\x73\x46\x97\x16\x2b\x0f\x42\x07\x26\x21\xa5\xfe\x0d\xf4\xfc\x32\x18\xa5\x14\x0b\x3c\xc3\x72\xf5\xaf\x38\xa4\x92\xf4\x29\x08\x60\x4b\x52\xe8\x01\x48\x68\x55\x08\xb6\x42\x29\x94\x50\xa4\x72\x85\xa3\x85\xfe\x90\x13\x28\x04\x3a\xbf\x44\x38\x4d\x19\x70\xee\x8f\x4e\xdf\xb2\x2b\x3f\xd4\x9b\x9d\x05\x50\x52\xfa\x2b\x70\x03\x8c\xc8\x08\x47\x84\x5b\x21\x27\x11\x4c\x70\x9e\x54\x39\x16\x80\x04\x93\x1b\x8f\x04\xcd\x29\x43\xa4\x48\xc9\x2d\x49\x2b\x9c\x3b\x9c\x2b\x2e\xf1\xd5\x7d\x26\x1a\x6b\x2e\xb0\xa8\x38\x2a\xf1\xc2\xe3\x26\x8d\x83\xad\xa5\x1f\x6f\xc5\x51\x9f\xc7\x0a\xcc\x28\xc5\xe2\xc8\xaf\x23\x77\x36\xee\x89\xd5\xb9\x20\x02\x4e\x89\x58\x35\x6b\x52\xb6\x40\xfd\x35\xcf\x2f\x4f\x26\xef\xaa\x65\xb3\xa2\xe6\xe1\x9a\xb1\x3c\xb6\xea\x18\x77\x3d\xdd\x3f\x0a\x3e\xd1\x9d\x37\xbd\xbe\xcd\x28\x17\x53\x43\xc2\xa9\x26\xcc\xf4\x57\x5a\x00\xe2\x6a\x91\x3c\x8c\x15\x38\xb4\x73\xc1\x81\xfb\x2f\x5a\xc0\x84\xfc\x0a\x8e\x01\xa3\x70\xe7\x24\x17\x5a\xbc\x48\x56\xbe\x81\x7a\xa7\xf8\x51\xf0\x33\x98\xe3\x2a\x17\xaf\x55\x99\x1f\x61\xd5\xc5\xcb\x98\x50\xd4\x7c\x44\xc6\x00\xa7\xfc\xc8\x16\x98\xde\x31\x22\xfc\x6d\x8d\xa4\x8f\xfa\x28\x92\x72\x5a\xd0\xb2\xe2\x59\xf8\xb1\xfe\x96\x42\x8e\x57\xed\x8a\x39\x5d\x4c\x79\x35\x93\x1c\x08\x5c\x34\x3e\x32\x90\x1d\x92\xfb\xba\x94\x56\xc2\xdb\x84\xd5\x45\x6e\x00\x4a\x9c\x93\x5b\x70\xdb\x3f\xd7\xf9\x1f\x01\xca\x13\xf9\x09\xad\xd7\xa6\x0f\x75\x69\xd3\x20\x6f\x97\xbe\xb2\x5f\x24\xa1\x54\x2d\x3d\x1b\x8d\xd4\x9a\xce\xaa\xf9\x5c\x6e\x3b\xe5\xb0\x84\x22\xec\x54\x95\xd3\xc2\xeb\xa5\x2a\x15\x8c\x5d\x08\xc6\xa1\x8b\x50\x0f\x98\x7a\xd7\x6a\x7a\x90\x63\x26\xf7\x89\x11\x8c\x78\x00\xe4\x42\x96\x6b\x23\xc4\x9b\xd8\xcc\x68\xba\x8a\x74\xa9\x89\xcd\x4b\x9a\xae\xba\xbb\xa4\x80\xb4\x3b\x14\x03\x12\x74\x48\xc1\x90\x92\xea\xbb\xe9\x12\xdf\x4f\xe7\x04\xf2\x34\xc4\xc2\x83\xf1\xe6\xfa\xfa\xf2\xbb\xb7\xf8\xfe\xb5\x2c\x15\x60\x51\x43\x30\x04\x69\x80\x68\x42\xd0\x04\x71\x20\x34\x93\xae\x4a\xe0\xd3\x0c\xf3\x4c\x01\x6a\x22\x81\xbe\x7b\xfa\xfc\x87\x23\xb3\x5c\xc8\x1d\xed\xb4\xc0\xcb\x78\x05\xdb\x9a\x3e\x7e\xbf\xc3\x4b\x78\x83\x79\xf6\x16\xdf\x07\x38\xb7\xa1\xcc\xaa\xe4\x06\x84\x05\x14\x87\xf2\x52\x95\x09\x00\x2d\x71\x19\xab\xdf\xea\xfc\x5b\x5c\x46\x20\x28\x10\x5a\xea\x69\xda\xc5\xba\x64\x41\x5c\x7a\x27\xf9\x58\x9f\x22\x70\x02\xa4\xba\xe0\xc4\x70\xba\xc5\x8c\x48\xc9\x1a\x25\x8e\x87\xd3\x47\x5b\xae\x83\x3c\x0d\x38\xad\xb1\x8d\xc2\xf1\x3b\xa6\x0f\x73\x85\xc4\x55\x9e\x29\xf8\x94\x14\xb6\x8b\x01\x91\xc3\x05\xe1\x43\x5d\xe1\xbc\xa8\xf5\x18\xb4\xa8\x77\x44\x74\x3e\x77\x22\x58\xe3\x4a\x16\x85\x3c\x31\x93\xe2\x16\xe7\x24\xed\x6d\xe5\x5c\x15\x3d\xd7\x25\xb7\x81\xaf\x85\x87\x3a\xdf\x33\xf8\xc5\xac\x1c\xa8\xf1\x38\xe1\x21\xcb\x5d\xc1\x2f\x7a\x11\x3a\xa5\xa9\x47\x8a\x56\x57\x3d\x3d\x89\x5d\xfd\xa8\xf7\xaa\x7b\x09\x6d\x6a\x59\x6a\x0d\x8b\x22\x46\x91\xe4\x55\x1a\x2a\x73\xc8\x12\x46\x6a\xa2\x6a\x90\xa9\x5e\xda\xa6\xf2\x15\x12\x70\x2f\xc6\x72\x8f\xd3\x85\xe7\x4b\x46\x45\x4e\x2c\x8a\x33\xfd\xcb\x62\xa7\x7f\x4e\x13\xba\x2c\xa7\x39\xdc\x42\xee\x68\xa1\xab\x5d\xa8\x77\x76\xa0\x4c\x69\x85\x4a\xa3\xe0\xb5\x7a\xb7\xdd\x7e\xf1\x57\xb5\xb3\xd4\xdb\x0f\xf9\xb7\x45\x46\xfe\xf0\x51\xf9\xde\x7b\xad\xf6\x75\xf2\x44\x2d\x57\xc1\x67\xa3\x67\xde\xa7\x25\x29\xa6\x39\x14\x0b\x91\xa1\xef\xbe\x7f\xe1\x7d\x08\xf1\x94\xcd\x86\x58\xaa\x42\x72\xf2\x12\x48\x11\x2e\x56\xde\xdb\x5b\xcc\x56\x5d\x43\xb8\x83\x4e\x2b\x2e\xe8\x12\x59\x46\x95\x3b\x45\x06\xbc\xa4\x85\x39\x68\xd5\xbb\xf1\x9b\x03\xb4\x7b\xab\x36\xe2\x38\xd0\xeb\xc9\x52\x38\xb5\xbc\xae\x70\xbc\x41\xeb\xb5\xcf\x94\x03\xf9\xf2\x16\xad\xd7\x83\x28\x16\x46\x90\x0a\x7a\x03\x05\xf7\x29\x3c\xc9\xe8\x9d\x96\x9e\xd7\xfa\xdb\xa6\xe9\x67\x34\x64\x54\x74\xd6\xd7\x02\x57\xce\x51\xb9\x2f\xb1\xdd\x1e\xe8\x52\x87\x28\x8e\xe0\x0e\x4a\xb5\x46\x03\xdd\x61\x56\x90\x62\xc1\x8d\x48\x91\xc7\x3d\x82\x73\xf2\x2b\xa4\x53\x2b\xa6\xa6\xb2\x8c\x51\x2d\xea\xca\x27\x69\x4a\x94\x3e\x25\x47\xf8\x16\x93\x5c\x41\x72\x52\xed\xd0\x94\xda\x55\x0b\x49\x89\x13\xb0\x2f\x48\xb1\x90\x07\x07\xb5\xc2\xd8\x77\x92\x56\x24\x81\xfa\x9d\xdc\x7d\xcd\x29\x5b\x62\x81\xaa\x92\x0b\x06\x78\x49\x8a\x39\xf5\xc9\x78\x41\x17\xaf\x55\x89\x57\x3c\xc1\x25\xfc\xaf\xc9\xfb\x77\x68\xbd\x06\xf5\xe3\xf8\x67\x4e\x8b\xba\xbf\x8f\x9d\x2e\xc8\xd6\xf9\x60\x80\xda\xa9\xfd\xd8\x4d\xce\xf1\x13\xb9\x72\xa1\x8a\xe5\x1c\x89\x0c\x0b\xc4\x33\x5a\xe5\xa9\x22\x3f\x2e\x4b\xc0\xf2\xd0\x81\x70\x92\x00\xe7\xa3\x9c\x2e\x3e\xef\x00\x24\xfb\xe7\x2b\x20\x35\xbc\x69\x00\x4f\xa2\xb1\x6b\xb6\x83\xd3\x8a\x11\xb4\x9b\xd3\xc5\x42\x91\xf9\x93\xaf\x09\x30\x9c\xcc\xe0\x97\x0f\x8c\xb8\x33\xe5\xe4\x86\x94\x27\x0a\xea\x05\x5d\x7c\xb8\xba\xe0\xbe\x3e\x47\x72\xae\x29\xbf\x5e\xa3\xa7\x47\xe1\x41\xde\x13\x61\xc8\xcc\xe3\xb6\x9c\x30\xda\x30\xd7\x84\x9b\x34\x75\x4f\x14\xb7\xa0\xf6\x69\xbb\x25\x01\x27\x2b\x9e\x47\x21\x70\xf5\xe1\x50\x4f\xa5\x63\xb7\xf5\x50\x6f\xdf\x50\x2e\x77\x6b\x87\xe1\xdb\x4b\xca\x94\x2a\x35\xe0\x1a\x32\x3f\x76\xb4\x8b\x62\xe4\x35\x69\xc1\xb9\x8e\x5d\x62\x91\x6d\x09\xd1\xd7\x85\xf4\x9f\xcb\xc2\x1e\x2b\x9d\xd1\x6f\xec\xb0\x7d\xfb\x4a\xc2\xba\xa0\x8b\x70\x61\x68\xf4\xb7\x6e\xb0\x55\xcf\x76\x77\x33\xbc\xc8\xa2\x79\x05\x9c\xe6\x5a\xad\x2a\xeb\xda\x9f\x01\xc7\x9c\x97\xb7\x2f\xce\xde\x4d\xbc\xba\xe3\x27\xe8\xa7\x0c\x0a\x90\x25\xd5\xc4\x41\x5a\xe6\x73\xa5\x57\xd7\xe7\xaf\x3b\x22\x32\xb9\x3d\xc7\x68\x50\x2b\xb5\x07\x46\xc2\x1f\xa8\x53\x7e\xe4\x03\x22\x1c\x71\x10\x48\x50\x34\x48\x72\xca\x61\xd0\x98\xae\x77\x19\x14\x68\x89\x6f\x94\x52\x3f\x03\x24\xe4\xe9\x44\xd8\x56\x47\x08\x5d\x67\x84\xa3\x25\xe0\xc2\x48\x83\x15\xad\x50\x82\x0b\x29\x0d\x38\x59\x96\xf9\x4a\x29\xad\x42\xa0\x03\xbd\xdf\xac\x45\x31\xaa\x31\x43\xbb\x6a\xfe\x27\x1e\xaa\x72\x75\xfa\x09\x66\x13\x2a\xf7\x88\x88\x57\x65\x29\x87\x74\x06\x09\x96\xa0\x95\x0a\x83\x70\x94\x60\x0e\xba\x9f\x8d\xc6\x22\xbd\xbe\x53\x12\x6b\x06\xae\xef\x03\xd5\x51\x45\x60\x09\x81\x32\xb2\x20\x52\x70\x5b\xea\xa6\x44\x0b\xb8\x0c\xdf\x42\x17\x89\x9b\x84\x23\x49\x66\x1a\x92\xe4\x41\x05\xed\x47\xc5\xa8\x62\x5a\x04\x9e\x90\x22\x01\xdd\x45\x5d\x36\x85\x5b\x82\x05\x20\xa5\xf1\x0a\x1b\x2d\xa4\xec\xce\x0d\x8f\xcc\x20\xc3\xb7\x84\x32\x74\x07\x1a\x6f\xa7\x40\x24\x5c\x4a\x6a\x46\x71\x92\x8d\x6a\x08\x3b\xe8\x0a\x04\x36\x68\x58\xf1\xa6\x41\x65\xb8\x48\x73\xb5\x27\x9c\x23\x77\xfe\xee\xe5\xb8\x5a\x40\xab\xe1\xac\xca\x05\xc3\x29\xa0\xdd\x7a\x5c\xdd\xbb\x4f\x2d\x99\xea\x1e\x53\xe4\xc8\x95\x78\xfc\xb8\xb1\xf1\x55\x4c\x1b\x88\x60\xd9\xa8\x9d\x6e\xbe\x6a\xb2\x47\x59\x89\x76\x45\x06\x56\x93\x68\xf0\xd9\x42\x97\xaa\x89\xf6\x6f\x08\xd4\x7d\x6a\x54\x54\x71\x64\xcb\x77\xf7\x6f\x37\x54\xbd\x4e\x25\x90\xa8\x3c\x8a\xd7\x66\xb0\xa4\x02\x1a\xb5\x5a\x6a\xef\x1d\xa4\xf4\xa1\x6a\xe5\x9d\xde\xcb\x5d\x83\xa6\x80\x6e\xd6\xed\x01\x13\xca\x18\x24\x22\x5f\x29\x9d\x61\x22\x39\x8c\xf3\x5c\xae\x51\x39\xc5\x29\x29\x16\x8d\x21\x6d\x43\xda\x2d\x31\xe7\x53\xb3\x54\xf0\x24\x83\x65\xef\xe0\x76\x80\xe9\x19\xec\x5d\x0d\xf4\x28\xec\x9d\x3a\x49\x49\x74\x63\xed\xe3\x22\xb5\xd5\x10\x66\xa0\x88\x20\x27\xc2\x9c\xb2\x04\x94\xf8\x4c\x89\xec\xb6\xeb\xdc\xc0\x94\x3e\x8c\x40\x1b\x48\x92\xeb\xf2\x53\x41\xd5\x46\x85\xf7\xf5\xf0\x69\xdd\x97\x81\xda\xf7\xc8\xff\x06\xfa\xc5\xb3\xc6\x37\xee\x7d\x7c\xd6\x62\xe8\x08\xad\xa4\x0c\xd4\x38\x9a\x8d\xb4\x7a\xd3\x83\x4d\x07\x90\x1e\x7a\x5b\x23\xa0\x57\xae\x6d\x4a\x39\xe7\x93\xc9\xc5\x25\xe6\x5c\x64\x8c\x56\x8b\xac\x61\x46\xd9\x51\xf8\x6b\xdc\xb4\xdb\xc3\xe8\x82\x70\x01\x85\x5c\x97\xf9\x48\xd6\x55\x93\x65\xbd\x96\xc3\xf2\xfc\xf9\x3f\x94\xb8\x8f\x58\x43\x64\xf9\x9a\x1e\xad\x8e\xeb\x37\x0d\x1a\x6c\x6a\x31\x78\x9e\x3f\xff\xc7\x51\xdf\x54\x6d\xb4\x68\xe9\x81\xda\xb3\xf5\x37\x62\xf8\xe6\xfa\xfa\x72\xf2\xa5\xd1\x0b\xce\x35\xef\x67\x4a\xd0\xcf\xc0\x88\x05\x94\x51\x2e\x1a\xcc\x26\x5f\x49\xc1\x48\xb8\xfe\x73\xe3\x4c\x96\xa5\xfa\x26\x6f\xfd\xbd\x97\xb1\x75\xbb\x12\xb5\x69\x8d\xc7\x83\xc4\xc8\x26\x44\x5c\x9f\xba\xb6\xee\xa7\x74\x59\x56\x02\x5e\x57\x79\x1e\xac\x20\x8e\xa5\x7f\x02\xb9\xc7\x79\x2c\xd4\x7a\x6a\x84\xb8\x3c\x0c\xfb\x58\x48\x36\xb6\x7b\x14\xb9\xa2\xca\xe5\xc5\xd9\xec\x0c\x1c\x06\x65\x8e\x13\xe0\xa6\x80\x93\xe6\xca\x7f\x82\x53\x5a\xf4\xd0\x49\xc2\xdf\x9d\x57\x79\xde\x7a\x1b\x70\x97\x9d\xa6\xa7\x1b\x16\xb2\x16\x5d\x07\xd1\x26\x0f\xa2\x6b\xd6\xa0\x87\xdc\x83\x0d\x15\xb6\x59\xe9\x3a\x71\xd1\x44\x9d\x7a\xa4\xeb\x47\xa5\xb7\xbc\x9e\x26\x6e\xf1\x44\x9d\x2a\x0b\x79\x0a\x9f\x92\x62\x6a\x17\x83\xfa\x20\x27\x67\x5e\xf0\xc5\x3c\xb5\x5e\x80\x81\x32\xc5\xe8\xb3\x85\xf7\x38\xbb\x08\xe7\xb9\xa3\x55\xad\xfb\xd1\x52\xcb\xbc\x74\x2a\xbd\x1d\x24\x2a\x56\x20\x5a\x20\x0e\x5c\x29\x96\x12\x9c\x64\xda\x01\x07\xa5\x0c\x73\x41\x12\x9c\xcb\x25\x7d\x59\x32\x7a\x0b\xa8\x04\xa6\xb4\x06\x45\x02\x4d\xa6\x9f\x4c\x2e\x26\x1a\xc8\x29\x4e\x32\x37\x1e\x12\x1d\x03\x7c\x9a\xa8\x0f\x72\x67\x25\x48\x71\xf8\xec\xe9\xd3\xa7\xd6\x28\x36\x99\x5c\x1c\x7a\xa8\xfa\x80\x42\xe5\xb9\x07\xad\xe9\xf5\x53\xd7\xab\x4d\x0d\x1d\x7a\x19\x9c\xe7\xf4\xce\x39\x2e\xc8\xfe\xca\xad\x8a\xa5\x81\x20\xf2\xa0\xc0\x23\x0d\xaa\xf7\xf1\x4e\x5f\x9b\x8f\x1b\x55\xb1\xb5\xb2\x69\x0f\x96\xa5\x58\xc5\x01\xfd\x08\x2b\xb4\x1f\xa3\xa1\x46\x42\xd9\xfa\x3c\x05\xa9\x41\x6d\x74\x03\xab\x8e\x2e\xf3\x9c\x2c\x32\xb9\x3b\x63\x90\x56\x89\x16\x29\x92\x82\x43\x41\x87\x73\xc2\xb8\x18\xce\x56\x02\x5c\x73\xbe\x61\xc8\x23\x70\xc3\x12\xd4\xdf\xa1\x53\x52\x66\xc0\xf8\x7e\x2d\xf7\xda\x74\x4f\xb4\x22\x51\x92\x3f\xd1\xc5\x1d\x0a\xe6\x37\x7a\xec\xb5\x6f\x40\x6a\x85\x52\xcd\xed\xa0\x70\xd5\x93\xcb\x56\xeb\xb5\xe0\x46\xb0\x3d\x7b\x73\x89\x19\x5e\xb6\xb1\xd5\x18\x9e\xbd\x41\xca\x39\x6e\x4b\xfd\x93\xc4\xcb\xd7\x3f\xc9\xdf\x69\x56\xca\x16\x1c\xde\xe6\xb7\x4f\x5f\x83\x44\xbf\x1a\xd9\x29\x2a\xf5\x56\xc9\xf8\xa2\x5c\x5f\x4c\xae\x20\xa1\x2c\xe5\x3e\xdb\xa4\x2b\x29\x4c\x12\x35\x90\xd3\x9c\xda\x2d\x65\x53\x2e\xf1\x7c\x0a\x49\x9a\x4d\x93\x8a\xdd\x06\x03\xfe\xea\xf4\xec\xcd\xa9\x7a\xd9\x18\xef\x91\x56\x01\x2b\xed\x05\xaf\x69\x66\x14\xc3\x4a\xff\xa1\xfc\x01\xf4\x78\x6a\x11\x4e\x0a\x01\x2c\x81\x52\x4c\x41\x57\xeb\x1e\x23\xa3\x73\x03\xc6\x94\x11\xc2\x2a\xdd\x34\x78\xb9\xc1\x09\x1b\xd6\xfa\x16\xe5\x7f\x20\x91\xb7\xd5\xd6\x6b\x74\x8c\xfe\xa7\x1e\xc1\x69\xf8\xe1\xa8\xd1\xa6\x51\x29\x78\x33\x8d\x81\x5c\x7a\x9d\x5c\xf5\x66\xfd\x89\x64\x0c\xe3\xed\xaa\x55\xc0\xee\x28\xe8\xc1\x52\x3b\x2a\xb3\x11\xd5\xa5\x36\x74\xd6\x94\xb5\x7d\x7d\x43\x52\xa8\x15\xe6\xc6\xc4\x46\x52\xf0\x55\xe6\x59\xaf\xbf\x4c\x9c\xd7\xd5\xf6\xb0\x20\x65\x09\x62\xbf\x35\x70\x89\xa4\x0e\xd7\x5f\xdd\x44\x85\xd4\x6a\x17\x42\x5f\x2f\xfd\x6b\x89\x4b\xdb\x5a\x13\x7e\xaf\xb6\x4e\xb1\xf1\x96\xce\x54\x35\x91\xe4\xda\x79\x80\x76\xad\xb2\x50\x51\x6b\xe6\x39\x1e\xd7\xf0\xe1\x97\xba\xd8\xc8\x08\x57\xeb\x37\x3b\xb2\x7f\x5c\xaf\x4a\x40\x83\x84\xd2\x1b\x02\x03\x5b\xdf\x01\x97\xeb\xdf\xcd\x6a\x28\x7b\xe6\x20\xbd\xc3\x4b\xc5\x58\xf5\x2e\x49\x97\x42\x19\xe6\xd9\x71\x50\xb4\xd9\xe8\xa9\x6a\xa6\xf9\xf6\x0d\xe6\x4a\x21\x28\x7b\xf6\x39\xf5\x2d\x42\x4a\x34\xd1\x22\x5f\x1d\x35\x3d\x11\xf7\x16\x46\x60\x58\xad\xfc\x8f\xd6\x1b\xc2\xf7\x5f\x7d\xba\xef\xef\xa1\x9c\xc3\x84\x1b\xd7\xde\xca\x96\x03\x23\xa3\x1d\x8e\x9f\x96\xd2\x6a\xd8\x5c\x3f\x5f\x15\x69\x49\x49\xa1\x56\x4f\xf3\xbd\x76\x69\x1f\x9d\x18\xcd\xc8\xff\x45\xda\x60\xa1\x5c\xad\x0e\xbd\x02\x56\x43\xab\x3c\x09\x30\xc9\xf9\xb1\xf7\xf1\x2d\xbe\x7f\x2d\xdf\xc9\x02\xf2\xa3\xdd\x36\xf8\x65\x64\x81\xe6\x9e\x01\x45\xd4\x21\x91\xce\x39\x56\xd9\xc0\x23\xb5\x81\x04\xa7\x2f\x95\xdb\x1f\x29\x16\x9a\xe3\x3d\x66\x36\x76\x17\x5b\x04\x4e\xf2\x05\x65\x44\x64\xcb\x26\x31\xff\x1e\xd4\xdf\x69\x50\x3b\xa5\xd5\xb6\x92\xca\x8d\xa5\xfd\x63\xea\xdc\x4d\x3d\x89\xa1\xe9\xf1\x74\x24\xff\x3d\x3b\x42\x3b\x48\x9d\xe3\x32\x9a\xa7\xc0\x6a\x02\xdb\x9a\x5d\xfe\xa3\x9e\x07\xa9\x72\xa8\xad\x3d\x5e\xbf\x1d\x6e\xe9\x9c\x39\x4a\xe1\xac\xe6\x84\x5a\x59\x96\xb8\x34\x16\x80\x3b\x92\xe7\x68\x66\xdc\x5c\x69\xad\x9e\x93\xa5\x7e\xca\x88\x80\x9c\x70\x11\x38\xad\x1a\x2e\x24\x45\x0a\xf7\x07\x01\x37\xf2\x3a\x12\x26\x2c\x9b\xd3\x44\xaf\x61\x75\xa9\xd1\x85\x79\xe7\x17\xdf\x55\xee\xf3\x87\xc7\x76\xf6\x9a\x5a\x75\xfd\x90\x4b\x08\xb7\x45\xd4\x1e\x01\xd2\xb0\x64\x5d\xd0\x85\x82\xd8\xcf\x23\xd7\xb5\xd1\xe9\xf9\xd9\x95\x09\x06\x31\x8b\xf3\x19\x14\x2b\xa5\xd7\xfa\xf4\x09\x95\x8c\x14\xc2\xe1\xfc\x86\x72\x21\x17\x0e\x64\x30\xad\x7d\x2f\x1b\x4a\x69\x23\x7f\x24\x24\xeb\xf1\x82\xf6\x3a\x60\x0d\xa6\x03\x03\x6f\x3f\x94\x62\x9e\xd1\x32\x22\x05\x8c\xc3\x6d\x47\x8f\x9a\xe6\x51\xe5\x02\xd1\x32\x8d\xf6\xcf\xc7\x6d\xe6\xaa\xb5\xd6\xaa\xf0\xa8\x3d\xed\x21\x79\x85\x05\x28\xd7\x16\x2f\x2e\xc1\xdb\xfb\xc8\xcf\xca\x43\x46\xdb\x6d\x73\x2b\xbf\xe3\xa4\xdc\xbd\xb3\xfd\x9a\x9a\xe2\xe7\x67\x71\x32\x3d\x3d\xea\xa6\x12\xcb\x6b\xfa\xc4\x49\xf3\xac\x45\x9a\x6d\xd0\x55\xca\x9e\x0e\x0c\x77\xb5\x1b\x50\x07\xd6\x4f\x43\x2f\x20\x39\xb5\xff\x8b\x16\xe0\xb8\xc5\x9f\xdf\xcf\xd0\x60\xd0\xa3\x21\xf4\xe6\x36\xce\x73\xa3\x9d\x52\x9e\xc6\x29\x62\x72\x2e\x6b\xf4\x7f\xa5\x05\xf0\x11\x7a\x85\x93\x0c\x29\x93\x9f\x9e\x28\xa6\x28\x47\x18\xa5\xa0\x4d\x09\xa9\x2a\xdb\xb0\x56\x3d\x7b\xfb\x12\x0d\xff\x3b\x7a\xf6\x02\x89\x8c\x56\x1c\x17\x29\x7a\xf1\x5c\x1d\x63\x95\x43\x32\x70\x44\x19\xc2\x33\xb9\x00\xfc\x50\x17\x79\xf6\xdd\x0f\x41\x99\x88\x20\x51\x6d\x49\xee\xd1\x36\x57\xcb\x3c\x92\x1a\x35\x03\xed\xfb\x52\x42\xd5\xe8\x62\xc9\xf1\x13\xf4\x52\xd1\xc2\x08\x26\xab\xdc\xe1\x68\x6f\xce\xe8\x72\x2c\x28\xba\xbb\xbb\xdb\x8f\x61\x92\x99\x29\x79\x80\x76\x05\x55\xd1\x71\x57\xa6\xf2\x24\x94\x6c\x76\x85\x8d\x30\x9c\xb5\x2c\x29\x1f\x1c\xa3\xc9\x7b\x49\x8a\xd4\x2c\xc1\xe7\xe5\xed\x73\x9f\x01\x73\xa5\x49\x46\x26\x30\x4f\xd5\x34\x2b\x73\x4c\xcf\x8c\xd6\xeb\xcd\x4a\xc2\x46\x84\x40\xc3\xfb\xa6\xb7\xd1\xcd\x56\x82\x4d\x3a\xfa\x76\xdb\x5a\x35\xd3\xa7\x39\xff\xfc\x2e\xb9\x3f\xe4\x99\xba\x57\x49\xe9\x77\xf9\x6b\x10\xf6\x2f\x44\xc9\xd0\x93\xc6\x34\xd1\x0a\x60\xfd\x9c\x99\xf0\xe2\xef\x99\xf0\xc5\xc7\x6f\x9b\x59\xf0\xbf\x0f\x0f\xff\xcf\x57\xa2\xac\x6d\xea\x2f\x42\xcf\xd6\x5c\x68\xbc\xf1\x4c\x0e\x5a\x63\x64\x37\x79\x4e\x9f\x57\xcf\xa1\x02\xba\x10\x7f\xfe\xfc\x1f\x6d\xf7\x36\x63\xc9\x56\x16\x49\xb9\x5a\xaa\xdd\xe4\x1c\x0d\x0e\xff\xdb\xed\xa0\x03\x50\x70\xbe\x60\xa0\xac\x0f\x96\x5c\xa7\x46\x77\x64\x57\x38\xab\xc1\xb3\x06\xf5\xf1\x58\xc5\x66\x51\x43\xe1\xb0\xfd\xf5\xda\xf7\xe4\xeb\x65\xb9\xcf\x6f\xb6\xbb\x89\x8d\x67\x9d\xed\xce\x28\x7a\x83\xb7\x23\xb7\x26\x4c\xa0\xf6\xa9\xf9\x4d\x3d\x78\xf1\x55\xbf\x39\xda\xed\x7a\xc1\x21\x3c\x27\xb8\x75\x6e\x13\xb0\x2c\x55\x18\xd8\x60\xf2\xea\xea\xe3\xab\xab\x81\x01\x6a\x95\x15\x72\x43\x67\xd1\x6f\x6b\x25\x5a\x8a\x75\x55\xb0\xa9\x6e\x44\x5f\x48\xe5\x88\x3c\xb5\x63\xd0\x52\x7c\x4e\xc4\xbb\x79\xfa\x61\x72\xfd\xfe\xed\xf4\xd5\xd5\xd5\xfb\xab\x89\x66\xdc\x70\x30\x77\x76\x14\x80\xfe\xe1\x88\x0d\xfb\x8e\x3b\x09\xe8\x0a\x07\x3a\x1a\x50\x1e\xe4\xde\xfd\xfb\xfc\xdd\x7f\x90\xce\xaf\x90\x64\x90\xdc\x28\x4f\x13\xed\x2d\x22\x4f\xbd\xda\x6f\x4a\x6e\x51\x79\x7c\xa4\x77\xd0\x07\x63\x18\xee\xf6\x8d\xb0\x81\x69\x68\x8f\xe1\x22\xa5\x4b\x13\x31\xfa\x73\xc5\x95\xd7\x9a\x0e\xb9\xbf\x29\xe8\x5d\xa1\x80\xf0\x7d\x84\xb9\x43\x59\x81\x95\xa8\x6a\x53\x87\x3f\x6e\x19\x96\xef\x16\xda\x13\x4c\xc3\xf4\xf6\xec\x49\xa6\x58\x9d\x14\x87\x5e\x1d\xed\xa2\x32\x1e\x2f\x88\xc8\xaa\xd9\x28\xa1\xcb\xf1\x4d\x35\x03\x56\x80\x00\x3e\x36\x2e\xcb\x43\x6d\xcc\x9a\xe5\x74\x36\x5e\x62\x2e\x80\x8d\x13\x5a\x08\x46\xf3\x1c\x18\x37\xa6\xae\xf2\x66\x31\x4e\x96\xa9\xf7\xc5\x18\x63\x16\x74\x9b\xbd\x55\x4d\x14\x1b\x44\x50\x8f\xab\x2f\x99\xaf\xa0\xe2\x60\x94\x50\xca\x12\x20\xe9\x51\xef\x49\x66\x38\xb9\xc9\xe9\xe2\xd8\x36\xf1\x52\xff\x0e\x8c\x95\xa8\x7b\x73\xb2\x69\xd9\xfb\x3a\x58\xc6\x56\x0b\x61\x0d\xf4\x4e\x7f\xa5\x55\x02\xc3\xc1\x51\x18\x31\xaf\xa6\x63\x23\x49\x48\x70\x9e\x44\x5b\xc6\x8c\xd8\x27\x88\x1d\xb1\x06\xf1\xb8\x90\xb5\x4f\xcc\x17\xda\x3e\x46\xcc\x7f\xf7\xd4\x3b\x85\xaf\x23\x5d\x18\x13\x3e\x4c\xb5\x5e\x6f\x98\xcf\x86\x9e\x6f\xfe\x1f\xdb\x97\xe0\xa3\x64\x76\x15\x6f\xd7\xa5\x08\xac\x3b\x95\x47\x02\xf2\x4d\x26\x83\xae\xe4\x00\x61\x75\x63\x4d\x99\xa6\x58\x60\x74\x1c\x42\x1b\x2d\x40\x4c\xad\xb9\x45\x95\xd8\x6b\x83\x31\xcb\x40\x00\xa7\x11\xc4\x5f\x3f\xc5\xe2\x7e\x04\xf7\x44\xec\xc9\x3f\xe4\x3a\x3c\x3d\x7f\x77\xfd\xea\xea\xdd\xc9\xc5\x54\xaf\x3f\x5a\x30\xb7\x5b\xa9\xc7\xb8\xf5\x29\xc8\x3a\xe0\x37\xc4\xf1\x6a\x6f\xf0\xfe\xc7\x48\xd7\xdb\x68\xbc\xff\x31\x2c\xb5\xee\xe7\x22\x25\x83\x6c\x74\x55\x38\x32\xdd\x93\x4a\x19\x44\x0b\x9c\x0f\x5a\x0c\xf2\xa5\x39\xad\x1f\x7e\x2b\x8a\xd9\x3e\xd1\xa8\xe3\x94\xf0\x32\xc7\xab\xa3\xad\x4b\xda\x48\x13\x1d\xa4\xd5\x44\xb0\xb1\x3d\x43\x1b\xe6\x35\x17\xd5\xcc\xd2\xd9\xda\x8f\xdb\xfd\x8d\x8c\xd5\xc3\xb3\x72\xd4\xa3\x1b\x4e\xa9\xdf\x5d\x2e\x84\xc4\x50\x6e\x08\xcf\xbe\xfb\xa7\xb1\x16\xc4\x1a\xef\x3c\xfc\xd6\x00\x0e\x0f\xdb\x55\x23\x62\x28\x85\x62\x25\x6b\x84\x65\x83\x1f\x3b\x7a\xe1\x37\x71\x3b\x33\x40\xf0\x4b\x85\x73\xb5\x6d\x09\xe8\xa4\x67\x7e\x4a\x8c\x77\xac\x7d\x4c\xe8\xf0\x12\xdf\xeb\xf0\xe1\x56\xc4\xad\x79\x06\xcf\x9e\x2e\x1b\x13\x43\x4f\x22\xed\x9b\x22\x49\xd8\xf5\x7c\xa6\x00\x0d\x45\x5d\xc3\xa4\x82\x1a\x32\xa0\x4d\xc6\x08\xdf\x44\x59\x25\xea\x3a\x11\x76\xd1\x0b\x6d\x40\x08\xfd\x67\xa8\x0e\x25\xcf\x9f\x3e\xdf\x66\x04\xbb\xc5\x8d\xfd\x39\x34\x9b\x8a\xa1\x11\xd1\x71\xf1\xf3\x80\x89\x82\x02\xa7\x87\xfa\x9d\x71\x96\x69\x99\xc2\xb6\x12\x02\x5b\x00\x6c\x76\xe4\x61\xd2\x60\xcb\x23\xc0\xfa\xd1\x23\x6b\xe3\x7d\x84\xc2\xd0\x39\x95\xc3\xa0\xb6\xff\x06\x51\x73\x13\xfd\x3e\x16\x3e\xfb\x1b\x42\xbb\xb6\x09\xa4\xaa\xb1\x8a\x7a\x85\x6c\x8e\x4d\x72\xde\x81\xd7\xa7\x97\xc8\x84\x0e\xf2\xe6\x41\xf6\x00\xed\x8a\xa4\x9c\xb8\x73\xec\xe8\xfa\xf4\xf2\x65\xc3\x11\xc3\x19\x43\x45\x52\x2a\x2f\x0a\x57\xc3\xda\x77\x1b\x6f\x0d\x00\x65\xd1\x50\x41\x8d\xfd\x45\xba\xbf\xba\xa8\xad\x06\xda\x3f\x1f\xa0\x5d\x30\x96\x69\x75\xfa\xae\xab\xfa\x06\xeb\xc6\x81\x1a\xb5\x1e\xe5\x4c\x64\x2a\x38\x63\xb6\xd1\x0e\xba\xf7\x06\x89\x78\x6c\x05\xfa\x3d\xb4\xf6\x51\x3c\x1b\xca\xcb\xd6\x18\x18\xce\x8c\x10\xd1\x57\x4d\x8d\xce\x20\x31\xaa\x91\x8d\xaa\xb6\x6e\x45\x5f\x14\xc1\xaf\x84\xd1\xd7\x55\x1b\xff\xf9\x86\xc2\x9d\x46\xff\xa8\xf1\x68\xbc\xd1\x40\xba\xd3\xa5\xe8\x74\x92\x4a\xc0\xc4\x1c\x3d\x62\xeb\x07\xd2\x59\x69\xfe\x10\x59\xd4\x52\x0a\x6c\x22\xe7\xab\xc2\x90\xb3\xd9\x25\xab\x2c\x76\x8f\xbf\x0f\xee\x4a\x5d\x16\x2a\xa6\x3e\x9c\xf5\x4a\xf6\x2a\xf5\x25\xfb\x87\xb3\x6e\xc9\x5e\xa5\x9a\x9a\xae\x46\x40\xcd\xfa\x6d\x27\x35\xe3\x45\xba\xbf\x6e\x2d\xd9\xeb\xaa\x5f\x59\xb2\xff\x71\xa2\xbd\x35\x08\x72\x78\x3e\x5b\x2c\x6f\x01\xed\xdb\x13\xa9\x5f\x8e\x04\x4e\x1c\x7e\x0e\x1d\xa2\xa2\xcc\xa6\xc8\xe0\x41\x07\x1a\xa2\xec\xca\x15\x6a\x0b\xb3\x2f\x2e\x0b\xff\xa8\xd9\xdb\x8c\x9c\x32\xe4\xb2\xc9\x65\x53\x50\xbe\xad\x2a\xdf\xd7\xdc\xed\xd3\x79\xad\xb4\x66\x50\x82\x20\xda\x59\xcb\xe4\x90\xd5\x95\xda\x9b\xf9\x86\xd9\x2a\xf5\x4f\x34\x4a\xba\xf5\x9c\x71\x1a\x75\xcb\x46\xfe\xe2\x8e\x9c\xc6\x6d\x76\xf7\xdc\xd8\x15\xab\x77\xb9\xb1\x23\xff\xf0\x18\xf7\x5b\x6f\x9c\x28\xad\x06\xa9\x71\xdc\xed\xf2\xb7\x6f\x9d\x8b\x63\xc7\xcd\xfa\xc4\x89\x1a\x9c\xe6\xb9\xcf\x6f\x07\x45\x1f\x85\xbc\x92\x3a\x10\x4b\x67\xdc\xdd\x12\xc6\x7b\x13\x4c\x3f\xfc\x70\x75\xae\x61\x44\xcd\x70\xbd\x30\x6a\xbe\xb5\x78\xb8\xb4\x29\x5b\x42\x38\x37\x26\x0a\xc5\xde\x0a\x82\x9f\x67\x65\x4b\x20\x13\xbd\xe2\x7a\x40\xfc\xc4\x2c\x8d\xa1\x31\x91\x5e\xa8\xf1\xec\x8d\x9e\xec\xa3\x31\x9a\x31\xc0\x37\x47\x51\xbd\x5e\xc8\xe2\x5b\x9c\xaa\x7f\x87\x83\xfa\x17\x38\xaa\xb7\xbf\x35\x73\x50\x9f\xbe\xbf\x9a\xb8\x7c\x0e\x2a\x70\xde\x9a\x99\x96\x24\xc9\x08\xe4\x37\x38\xbf\x59\xe2\x42\x99\x9b\x8c\x85\xd1\x98\x91\x86\x09\x65\x7c\x48\x4b\x28\x86\xa1\xd6\xa7\x4e\x96\xe9\x8b\x94\x40\x92\x28\x99\x4b\xcd\xfc\x3f\xa5\x8c\x37\x28\xbd\x83\xe4\x4b\x74\xc9\x60\xae\x82\xae\xd0\x12\x44\x46\x53\x8e\x0a\x80\x94\x23\x5c\xe7\xf5\xa1\xa5\x16\x61\xb8\x48\x51\x4a\xe6\x73\x60\x50\x08\x74\xa5\x2d\x17\x72\xa6\x69\x80\x64\x8e\xf6\x1c\xd3\x6b\x60\xe8\x18\x3d\x7e\x7f\x79\x7d\xfe\xfe\xdd\xe4\xf1\xbe\x27\x13\x5a\x39\x8a\x1e\x6b\xf5\xc0\xf0\x54\x9b\xcb\x86\xca\x2f\xd5\xcc\xa9\x43\xd7\x15\xd5\x0d\xf5\x49\x7f\xa9\x03\xac\x3c\xbe\x0a\x0b\x9e\x32\x48\xa1\x10\x04\x6b\x37\xec\x2d\x1b\xf6\x6a\xc5\x5a\x0f\x81\x3e\x3e\x8a\x30\xc6\x96\x0d\xbd\xd5\x34\x8f\x35\x62\x3e\x85\x7d\xdc\x12\xac\x11\xf3\x31\xb0\xf5\x0a\xf0\x10\xb0\x6f\xf1\xfd\xf0\x64\x01\x0d\x80\x6f\xf1\xfd\xc9\x02\x36\x81\x3a\xd5\x4a\xcd\xe1\xf5\xaa\x84\x43\x9d\x07\xad\xcc\x31\x29\x50\x92\x61\xc6\x41\x1c\x7f\xb8\x7e\x3d\xfc\x61\x2b\x10\x17\x2a\x7d\xd8\x21\x7a\xea\x95\x76\x16\x34\xab\x76\xf4\xd4\x67\x7f\xf3\xd9\xb7\xc1\x67\x2d\x99\x18\x6e\x9d\xf4\x29\x64\xe8\x34\x9d\xd1\x0d\xd4\x1d\x11\x99\x2d\x89\x95\x4b\x48\x53\xfe\x59\x4f\x90\xc6\x7e\xc8\xde\x41\xf1\x9a\xb0\xb6\x13\x73\xed\xe1\x32\x9a\x40\x42\x5b\x3b\xe4\x6f\xde\x3b\xb5\x8e\x22\x8b\xf8\xc7\xff\xbe\x96\xf9\x4f\x9f\x54\x20\xf9\x1f\xe6\x3f\xfa\xad\x75\x3d\x7a\xcc\xd4\xce\x7b\x7f\x62\xa7\xcf\x3f\x94\xca\xdf\x84\x73\xe6\xb7\x47\x81\xcd\xee\x94\x5b\x39\xc8\x28\x51\xac\x49\x85\x68\x87\x23\x92\xe7\x49\x6a\xf3\x7c\x74\xba\x72\xb9\x94\x2e\xc4\x64\x94\x37\xce\x71\xd7\x17\x13\xc4\x0b\x62\xb5\x4d\x2e\x82\xc0\xe1\xa0\xd2\xab\xe9\x71\x04\x86\x96\x15\x17\x08\xe7\x77\x78\xc5\x75\x4a\xaf\x86\x42\x11\xf4\x44\x3a\x08\x12\x8f\x4c\xde\x9d\xd7\x10\x4c\x02\x0d\xae\x72\x46\xd0\x8a\x25\x80\x54\x1a\xf8\x39\x95\x28\x11\x31\x6a\xe2\xd0\x74\x0a\x34\x03\x3d\x99\x5c\x9c\x02\x13\x64\xae\xc2\x3b\xf6\x7f\xdf\xb5\xe1\x4b\xbb\xfa\xa2\xaf\xe7\xfb\xfe\xc7\x4b\x62\x95\x9b\xa1\xdd\x15\x95\x52\x1b\xad\xd7\x2a\x05\xf7\x83\xc4\xc9\xdf\x03\xf2\x87\x0d\xc8\x57\x5c\x47\x1f\x30\xf3\xff\x7a\x21\x0f\x7f\x11\x76\x69\xcc\xdf\x87\x0f\xe9\x9f\x3e\xd6\xe2\x2f\x32\x90\x9b\x76\x35\x6a\xab\x90\xd0\xe5\x12\x0a\x81\x2e\x5f\xbd\x45\x3c\xc3\xde\xf5\x30\xee\x02\x9b\x44\x18\xef\x6e\x6e\x37\x20\x0b\xb9\x2b\x50\x01\x9a\xa1\x8b\x1c\x2e\x52\x2f\x47\x62\x7d\x75\x9b\x6d\x71\xc7\x36\x73\xe8\x1d\x16\xd5\x88\xc3\xf2\x34\x83\xe4\x86\x57\xcb\x60\xdf\xc5\xf3\x69\x52\xf3\x18\xea\x7a\x42\x60\x1e\x57\x06\x34\x69\x40\x53\xd9\x94\x3e\x1f\x5a\xdf\xbc\x78\x5d\xe5\xf9\x69\x86\x49\xe1\x4f\x90\x46\xbf\xec\x75\x43\x7d\xfd\x0b\x31\x89\x41\x6d\x75\x90\x0b\x5c\xe6\x7d\x5e\x72\x0d\xc3\xb1\x5f\x67\x7a\x0b\x8c\xcc\xe3\x44\xe9\x36\x36\xa3\xce\x68\x8b\x38\x7d\x4e\x2a\x91\x5d\x5f\x4c\x94\x0d\xa4\x11\x1b\xe2\x47\xa9\x78\xa5\x22\x71\x3c\xcf\x9f\xfe\x23\x2a\xb5\x36\x37\xef\x11\x4f\xb6\x31\x3a\x3d\x79\x4d\x72\x78\x87\x97\xd0\x40\x26\xc6\xaa\xcd\xca\x97\xb0\x9c\xbc\x39\x69\xb1\xac\xf6\x75\xec\xe5\xdc\x1e\xa0\x35\x46\xad\xd1\xd5\x03\x64\x1a\xe8\x18\xdd\x1e\xc8\x1f\x55\x75\x7d\x3b\x4b\x17\xec\x14\x4a\x91\x75\x80\xee\x85\xad\x33\x36\x10\x5a\x9c\x29\x08\x5b\xcd\x95\x26\x10\x35\xdc\x97\x78\x11\xcc\x16\x2f\xcd\xd3\xf3\x7f\x7d\x8f\x9e\xff\xeb\x05\x3a\xee\xc3\xc4\x01\xd9\x5a\x22\x6e\xb7\xd8\x35\x12\x9b\xa1\x46\xc6\xb2\xbe\xa7\x21\x52\x5c\x3e\xb3\x4d\x99\x56\x3a\x90\xe9\x0c\xaf\xf2\xdb\x79\x58\x64\xd4\x43\x32\x64\xd8\x96\xb6\xc8\x92\xe1\x17\xc7\x95\xc8\x2e\xfd\x2a\x72\xb4\x7a\x92\x6b\xc4\x69\xe0\x12\x4d\x5c\x69\x4b\xd9\xe8\xa4\x2c\xaf\x28\x15\x3e\xc7\x28\xd3\x49\xc5\x08\x3a\x46\xe3\xfd\x86\xed\xd4\x08\x90\x7f\x3c\xfd\x4e\x21\xd5\x05\x2e\x18\x9c\x2d\x78\xa6\xee\x5d\xcc\xaa\x7b\x1c\x12\x60\x5b\x83\xee\x0e\x2a\x16\xf7\x53\x59\xcd\x5e\x60\x65\x6f\xef\xa3\xb7\xc0\x18\x49\x81\xd7\x77\x43\xd8\xc5\xb9\xc4\xca\x9e\x64\x2a\x1c\x34\x00\x8a\x0c\x18\xcc\x29\x03\x3f\xc1\x37\xdc\x97\x39\x49\x88\xc8\x57\x3a\xb7\xb9\x8e\xf0\x32\x19\x20\xf0\x02\x13\x79\xec\x37\x79\x5a\x32\x88\x35\xd3\x68\x85\x01\xaf\x96\x12\x25\x81\x32\xcc\x4d\x44\x9f\xca\x14\x6d\x22\xc7\x64\x33\x73\xca\x1a\x4d\xd9\x46\x2e\x2a\x8c\x12\x5c\xa0\x92\x24\x37\x36\xa2\xa4\x4e\x35\x1d\xb4\xd5\xad\x9a\xb1\xc9\x4f\x6c\xfa\x1a\x25\x50\x5b\xfb\x38\xb7\xf3\x52\x7e\x4e\x3e\x13\x0e\xa2\x46\x73\x95\xdf\xcd\x5a\xe5\x66\x34\xd5\xab\x65\xcb\xab\xbf\xc3\x18\xac\x9e\xd0\xfa\xa2\x72\x6a\xc4\x0c\xba\x8e\x33\x5f\xdd\x6b\xe6\x50\xc2\x4d\x9b\x17\xe2\xc6\x58\x63\x24\x6c\x3c\x01\x97\xc7\x61\x6d\x8f\x7b\xc4\x30\xaf\x9e\x07\x5b\xe7\x0d\xb4\x89\x4e\xb2\xdd\x78\x22\x59\xb4\xb7\x0a\x9a\xe8\x6b\x4b\xdd\xf3\x10\x79\xba\xc9\x63\x6e\x86\xf8\x4c\xe2\x5c\x78\xdd\x71\x41\xc5\x75\xce\xe3\xcf\x25\x98\x6b\xe1\xad\x3f\xd8\x0d\x3b\xf1\x83\x46\x40\xb2\xe2\x6b\x73\x0f\xa6\x7b\x06\xda\x5e\x6e\x43\x34\xeb\xb0\xcb\x07\x31\xab\xb9\x5b\xcf\x06\x59\x6f\x13\xf5\x50\x23\x26\x21\x0c\x0d\x84\xa1\x03\xd1\x3d\x5c\xed\xc6\x1e\xe0\xc7\xf0\x30\x24\xba\x07\xaf\x97\x31\x83\xcb\x9c\xdc\xf3\xac\x19\xdd\xe3\x27\xa5\xac\x03\xbb\xf5\xd3\x8c\x7d\x8a\x08\x25\x77\x8f\x58\xb3\x6c\x5f\x08\xce\x20\xa0\xab\x3a\x31\x8f\x5e\xd2\x74\x65\x0e\xa3\xd1\x58\x11\xc2\xd5\x9e\x2f\x7a\x63\x60\x0d\xab\xe3\x42\xc1\x18\x66\xd1\xcb\x09\x03\xc4\x7a\x6f\x27\xdc\x30\x06\x3b\xe8\x12\x73\xbd\x16\xc1\xbd\x60\x38\x51\xe7\x57\xbd\x17\xf6\xb7\xea\x82\xaa\x32\x72\xd5\x95\xe4\xbd\x25\xf6\x62\x8a\xb0\xf7\x9f\x7f\xb4\xa8\x61\x74\x1e\x2b\x30\xe7\xf2\xdd\x35\x75\x37\x2a\x6d\xe2\x5a\xce\xf3\xa1\xee\xcc\x50\x76\xc6\x96\xdb\xf5\xce\x23\xfa\x12\x27\x7d\xe2\xdc\x26\xa4\xa8\xaf\x0d\xff\xa4\xe8\xb7\xa1\xdf\x6f\x90\x3f\x1e\x1c\x5e\xcd\x7e\x86\x44\x0c\xd3\x22\x84\xc3\xa7\x69\x94\xd3\xe3\x50\x08\xe7\x15\x30\x05\x24\x80\x42\x5a\x50\x3a\x78\x43\xed\x22\xcc\x25\x2a\xdd\x12\x46\x0a\xf5\xf8\x7a\xa0\xdc\xa0\x0c\x80\x2d\xb7\x8d\x41\x34\x75\x19\xdd\x15\x9a\x24\x7e\xb8\x48\xd1\x9e\xcb\x9b\x1a\xbf\x33\x7d\xdf\xc3\xd9\x7b\x6d\x62\x13\xd3\x16\xff\x99\xb5\x75\xab\xc8\xe2\x07\xdd\x91\x1e\x56\xd5\x15\x02\x00\x87\x05\xdc\xf9\xd7\xa6\xdb\x47\x7e\x92\xa3\xab\xbd\xa3\xf6\x06\x4b\x9a\xc2\xe0\x00\x0d\x4e\x4e\xaf\xcf\x3f\xbe\x8a\xb4\xd0\xac\xc0\x05\x65\x78\x01\xea\xda\x5d\x59\xf1\x0e\xcf\xa7\xe6\xdd\x16\xb5\xb1\xce\xdc\x37\xb5\x21\x83\xea\x12\xbd\xc1\x01\xfa\x84\x06\xee\xaa\x41\x09\x55\xfd\xf8\x99\xd3\x42\xfe\xc0\xa5\xdc\x37\x2b\xaa\xeb\x77\x68\xbd\xb9\x25\xb8\x95\xf0\x73\xba\xd0\xd7\xfd\x0d\x0e\x54\x18\xf2\x4f\x27\x57\xef\x22\x54\x69\x2e\xaf\xfe\xd8\x9e\xc1\xac\x6a\x79\xfa\xc5\x5a\x4c\x65\xc1\xc1\x01\x12\xac\x82\x87\xe0\x67\x57\x14\xcc\x16\xd5\x12\x0a\xc1\x7f\x03\x0c\x29\xdb\x7f\x43\x75\xb3\xa8\x6d\x0d\x81\xc1\x2f\x53\xe1\x2e\xd5\x7c\x40\x35\xbe\x4d\xb5\x0e\x29\x62\x21\xc2\x3d\x24\x9d\x31\xa4\xf2\x31\xf7\xd6\xd6\x17\x39\x7f\xf6\x24\x44\xde\x24\x7c\xf0\x1c\xfc\x2c\xdc\xd5\x22\xfd\xa7\xc4\x3c\xbe\xca\x49\x2e\xdb\xd0\x8f\xdf\x51\x0e\x7f\x13\x64\xea\x26\x0e\xda\x3a\x30\x38\x52\xb1\x2b\x4d\x6d\x7f\x93\xb1\x7d\x52\x4d\xfa\x7e\x1b\xd4\xbe\x97\xdc\x69\x72\x3d\x69\x51\x5b\xe9\x85\xcc\xbd\x4e\xc7\xda\x6d\xb8\xa9\x1e\x6a\x79\xea\x75\x3c\x83\x89\x60\x24\x11\xc3\x6b\x86\x0b\x5e\x52\x26\x86\x13\x48\x2a\x46\xc4\xea\x10\x2d\xf1\xfd\x10\x2f\xe0\x38\x48\x36\x35\xb9\x9e\x38\xff\xce\x86\x3d\x47\x7e\x3b\xd7\xf7\xdf\x4e\xaa\x59\x4a\x97\x98\xe8\xcc\xba\xf6\x56\xdc\x49\x35\x3b\xd3\x6f\x1b\x4e\x34\x01\x88\x4b\x63\x72\x91\x15\x4b\xfd\xb7\x2b\xde\xd8\xc0\x77\x4d\x8c\xd8\xd9\x4e\x71\x7c\xcd\xd4\x74\xc1\x4d\xf0\xf1\x43\xf2\x37\x74\x9d\x8b\x9a\x37\x9f\x34\xd7\xbb\x0f\xda\x80\x76\x5e\x5c\xb9\xf4\x99\x1b\xef\xda\x08\xd1\x77\x24\x6a\x27\xbd\x68\x36\xf6\x51\x70\xff\xde\xfc\x87\xdc\xbe\xdf\x05\xe3\xa8\x6d\x54\x8c\xec\x3c\xbf\x8a\xfe\x4a\xa2\x49\x0a\x15\xfd\xb2\xb7\x00\x61\x42\x1b\xce\x0b\x1d\xd5\x1e\xa8\x60\x47\xe6\xa3\x7f\x24\x34\x79\x81\x1b\x20\xc7\x4f\x14\xd0\xd1\x5b\x10\x58\x25\x7e\x90\xfb\x27\xc5\xbe\xf2\x0c\x65\xc1\x2c\xed\xd7\xc0\x1a\xe8\xba\x5f\x84\x71\x1a\x03\x83\x69\x10\x77\xd4\x60\x60\x55\xcf\x8f\xc5\xf0\xeb\x5d\x55\x79\x57\x15\x3f\xf2\xc2\xaf\x62\x62\x34\xa2\x64\x1b\x3f\x71\xc9\x5b\xe5\xe1\x50\x1b\x9a\x13\x5c\xa0\x19\x20\x9c\x64\x04\x6e\x75\x7a\xaf\xc4\x5e\x77\x59\xdf\xf0\xc3\x50\x86\x6f\xe5\x6b\x8c\x26\x93\x0b\xe4\x1b\xee\xbc\x9c\x67\x5a\x11\x0a\x51\x7f\xae\x9a\x91\xf7\x28\x8b\xa8\xab\x5f\x53\x96\xc0\x64\x72\xe1\x74\x13\x0f\x90\x95\x2d\x60\x1e\x9c\xfd\x8e\x23\xab\x02\x5c\x27\xbc\x3e\x2f\xec\x5f\x17\x84\x7b\x72\xa2\x9e\x76\xef\xa8\xba\xa3\x44\x43\x75\xa6\x84\x16\xf4\x1d\x04\x85\x36\x1d\xab\xfb\x03\x0b\x4b\x0c\x4e\x6c\x3c\x84\x79\x4c\x58\x44\xe3\x42\xbd\xa6\x18\x47\x91\xbd\x73\x54\x96\xb4\x6a\xed\xa0\x8a\x7b\x77\xd4\xa8\x14\x69\x6e\x31\xc6\x5e\xc0\x86\x8d\xd4\xd1\xb0\xc8\x2d\xc4\x10\xf8\x02\x09\x13\xed\x13\x98\xc1\xfe\x89\x8e\x37\xa5\x32\xb4\x51\x31\x2a\xf9\xe3\xe6\xdc\x89\xad\xf6\xac\xa5\xf5\x5f\xff\x3c\x8a\x2e\xdd\x11\x5d\x1a\xda\x3e\xd1\xa2\xc3\x2e\xbc\xb3\xad\x5b\xb3\x86\xb6\xdf\x31\x44\xca\xf4\xe7\x44\x0a\x97\x88\xb7\x34\xe5\x66\x2d\x6f\x82\x59\x7a\x9f\xdc\x1d\x31\x91\x8f\x53\x56\xe5\xa0\xd6\x8a\xf0\x46\xfb\xba\x84\xff\xf7\x48\xca\x82\xce\x6c\x2c\x35\x62\xef\x7f\x3a\x99\x5c\x9e\x52\x06\x52\xc0\xb5\x98\x77\x73\xf3\xf4\x0e\xf3\x72\xe8\x95\x1b\x26\x36\xc1\xde\x70\x23\x3a\x0f\x25\xea\x16\x49\xf1\xc3\x0a\x5b\x26\xc7\xf7\x2b\x4a\x59\xf0\x1b\x72\xdc\xc7\x84\x46\xcc\xbf\x00\xf5\xed\x98\xda\x1d\xf9\x0c\x11\xe9\x5b\x42\xdb\xb2\xb1\xc7\xc2\x88\xea\xcc\x4c\x0e\x6e\x9d\x95\xb1\x12\x19\x14\xc2\x68\x28\xc2\xbd\x9a\x6f\x53\xac\x9b\xf1\xdb\x38\xea\xac\x20\x77\x3e\xf2\x9d\x2a\x3d\xd5\xd7\xe8\xd4\x77\x80\x98\xab\xb0\x40\x98\x2f\x0d\x38\xf5\xed\xff\xee\x99\x80\x18\x9e\x1a\x28\x1e\xc8\x26\x0b\x0e\x5d\xae\x82\xf4\xfe\x00\xed\xe6\x44\xe7\x6b\x77\xa6\x64\x1b\x43\x6d\x43\x65\xfa\xf8\x4d\xd7\x6e\xbd\x1f\x3e\x5c\x76\xc4\x55\x85\x13\xb2\x28\x48\xa1\x15\x86\x41\x2d\x5f\x8a\x3f\x7d\xa6\x0d\xc3\xae\x07\xb2\x96\xac\xb3\x05\xd0\x87\xa4\x7c\x73\xd0\x5e\x62\x4e\x92\x33\xb2\x00\x2e\x34\x40\x39\xe3\xdb\x49\x9d\x6a\xaf\xb7\xce\x9a\xfa\x06\xa5\x99\x7c\x3b\x68\x9d\x03\xe4\x10\xaa\x4f\x0d\xb3\x42\x13\xc8\x15\xe0\x7c\xd9\xde\xa8\xd5\xf5\xa7\x15\xd7\x6a\x12\x40\xbd\x80\x5e\x93\x3c\x6e\x06\x88\x65\x99\x93\xd0\x53\x55\xf7\x37\xa0\xa7\x01\xfc\x66\xfc\xb6\x50\xba\x4b\x00\x94\x91\x5f\x35\x27\x0f\xda\x96\x98\x87\x70\xec\xf8\x89\x1c\x59\xb9\xd7\x74\x73\xc3\x6d\xd8\xb1\x7f\x49\x43\x7d\x31\xc3\x01\x4a\x18\xc8\x0f\xc1\x55\x0c\x5e\x4b\xfa\x7e\x09\xee\xa6\xa2\xbb\x39\xa1\x77\x02\x5a\x7f\x13\x55\x50\x5d\x20\xa2\xa1\x74\xc1\xef\x3e\x41\x35\x99\xbc\x8e\xcd\x55\x7f\x76\x24\x2e\x0b\x33\x81\xe9\x04\x60\x3d\xe8\x6e\x90\xf6\x6d\xdf\x14\xbd\xdb\x19\x7d\xb8\xba\x88\x6b\x21\x2a\x46\xd0\xff\x7b\xe2\x2b\xff\x7b\x56\xa3\x86\xa3\x8a\x81\xed\x72\x03\x44\xbf\xc6\xc4\xc4\x56\xdd\xda\x3a\x53\xdf\x37\x6b\x32\x6c\xb4\xfb\x65\xcc\x87\xfa\x46\x8f\x95\xcb\x94\x5c\x71\xd0\x0a\x02\x84\xb9\x76\x2e\x10\xd4\x25\xc8\x39\x40\xb3\x4a\x98\x14\x8c\xb5\xab\x4e\xc7\xc1\x2e\xca\x41\xf6\xd4\xff\x51\x36\xd1\x62\xa1\x96\x94\xe8\xf0\x6e\x08\xc7\x28\x80\x19\x1d\xa2\xad\x0c\xe4\x1d\x6d\x35\x76\xf2\xbf\x87\x4d\xd6\xb8\x02\x6d\xa0\xe1\xdf\xd6\xd8\x3f\xb9\x35\x76\x07\xa9\x23\x03\xba\x83\x19\xa7\xc9\x8d\x4e\x10\x6f\x6f\x1c\xeb\x47\xa3\xe3\xf9\x50\x2e\x18\x0e\x52\x9b\x68\x4f\x9c\x4a\xbf\x8f\x9e\xbd\xbc\x05\xc5\x36\x3e\x8a\x2b\xbb\xb7\xc5\xa2\x06\xe4\x35\x15\x6d\xe7\x4d\x78\xc3\xa7\x4f\xaf\x07\xba\xb0\xf4\xb7\xbf\x5b\x13\xb6\x93\x16\x5b\x39\x5a\xfd\x67\x28\x77\x4b\xc3\xf3\xcb\xb0\x45\xff\x0a\xad\xde\x03\xee\x86\xcb\xd3\x7b\xda\xad\xef\xfa\x97\xe5\x6d\xbb\xb1\x2b\xce\x3f\x8f\x96\x5d\x2d\xf4\xf5\x6c\x9b\xe9\xeb\xc3\xf5\x24\x6a\xaf\x14\xed\x05\xa2\x02\x4d\x0c\x10\xe5\x10\x54\x5f\xe8\xbf\x5d\x7d\x46\x05\xf5\xeb\xf7\xf8\xdf\x45\x00\x45\xfd\x02\x1f\xe0\xe5\xd6\xe1\x0b\x18\x45\xa5\x6b\x0d\xa1\x06\x87\xe6\xa0\x6d\x8d\x7b\x38\xd4\xf6\x68\x16\x70\xa4\x63\x59\xff\xad\x37\x5f\x1b\xb8\x2d\x89\x20\x0b\xb9\x84\xbd\xb9\xbe\xbe\xa4\xf7\x2b\xf4\xb1\xca\x0b\x60\x78\x46\x72\x22\x56\x8d\xc2\x56\x29\x76\x77\x77\x37\xd2\xd7\x1b\x24\x74\x39\x9e\xe5\x74\x31\x36\x70\x48\xb1\x18\x8a\x0c\x86\xea\xd6\xd7\xfb\xd5\xf0\xd6\x87\x36\xbc\x23\x22\x33\xd7\x29\xf4\x77\x59\x47\x58\xb5\x9e\x96\x2b\xaa\xbb\xae\xc3\x5a\xc3\x04\x55\xc0\x08\xd8\x9b\x31\x3a\xf6\xf5\x37\x07\x68\xf7\xd6\x45\x0d\xf6\xa4\xcb\x8a\xa2\x27\xc5\xe2\x8d\xba\xdd\x36\x82\xa3\xfc\x78\x1b\xdf\xbd\x74\x4a\x2a\x23\xe6\x22\xa9\xd4\xbc\xea\xcd\xcd\xac\x11\x97\x75\x66\x35\x1e\x67\xe1\x22\xed\x81\x1b\x07\x3d\x81\x22\xdd\x00\x97\x01\x7e\x38\xdc\x2b\xc0\x21\xdc\x08\xe0\xcd\x89\xb4\x63\x3b\x7b\xf5\xff\x4b\x57\xb5\x45\x7e\x1f\x76\xe7\x91\xa1\xeb\xd4\xe0\x6f\xc6\x7b\xe0\xf6\xc5\x58\x3c\xff\x4c\xc8\xce\x3f\xa5\x93\x2a\x31\xb8\xc6\x23\xb4\x41\x8f\x08\xf8\xb8\xcb\xa7\xff\x28\xf7\xcf\x28\xcb\xd2\x1b\x02\x53\x6d\x0d\x8e\xd6\x8c\xb2\xac\xac\xa4\x6d\xc5\x1d\xae\x6a\x06\xae\x3a\x74\xc6\x9f\x4e\xb8\x61\xa2\x68\xfb\xec\xa0\xf3\x02\x25\x98\x03\xa2\x73\x64\x52\xce\x09\xb6\x52\x02\xb9\x80\x7b\xe1\x5d\xac\xad\x4d\x3a\x33\x1d\x7f\xa0\xcf\xb6\xca\x38\x56\xe8\x7a\x11\x6c\x25\x00\x67\x18\xed\xc2\x56\x09\xe9\x77\x70\x2f\xdc\xfe\xbc\x89\x7f\xf8\xb1\x8e\xcf\x14\x6c\xf5\x8e\x16\xe7\x29\x2c\x4b\x2a\x9a\x41\x51\x1d\x58\x4c\x05\x23\xd0\x64\xc5\x08\xcd\xfc\x36\xaf\x55\x95\x88\x85\x5a\xd9\x16\xb5\x1d\x89\x16\xf9\x0a\xdd\x51\x76\xc3\xad\x8e\xc6\xf8\xa2\x21\xc2\xd5\xf9\x26\xa1\xcb\x92\x01\xe7\x90\x76\x9d\x24\x23\xd1\x2c\x69\xfa\x12\x73\x88\x28\x22\xb7\xdd\x34\x9e\xa8\xac\x7d\x43\x95\x96\xd6\x4e\x8f\x6e\x2d\x54\xbb\x7b\x27\x69\x8a\x70\xb1\xf2\x13\xa0\x85\x41\xa3\x3a\xdd\x50\xbc\x4f\xc1\xe6\xb8\xae\xe3\x45\x35\x6d\x38\x0b\xda\xa1\xb6\xca\xf5\x58\xd0\x14\xfa\x82\xf7\x52\x59\xbc\x3b\xda\x7d\xa0\xa2\xee\x0e\x10\x66\x80\xe4\x12\x53\xdb\x96\xb5\xce\x5e\x50\x84\xad\x8d\xd2\xaa\x24\xcc\xf1\xf8\x40\xd5\x4b\xd3\xf0\x06\x56\xbb\x82\x77\x59\x97\x33\xcc\x2f\x19\xcc\xc9\x7d\xa0\xc7\xd4\xa1\x37\x03\xdd\x50\x33\x9b\xdf\x70\xb0\x59\x31\xa1\x9f\x48\x66\xc9\xef\x9b\x16\x96\xdf\x35\x9d\xe4\x9f\x24\x15\xe4\x56\xbc\xd1\xa9\x33\x32\xc3\x15\x53\x6f\x28\x11\xa9\x03\xe1\x95\xab\xf2\xb6\x6e\x24\x0f\xbd\x0f\xa2\x76\x55\xd8\x0b\xec\x07\xde\x26\xc2\x6a\x28\x55\xcc\xc9\xc0\xb0\xd4\x60\x7f\xdb\x0a\x74\x3e\x1f\xb4\x9d\x13\xec\x62\x6e\x9c\x20\x3a\x9f\xae\x9d\x4d\xd0\xc6\x83\x8e\xdd\x5f\xac\xcd\x8d\xe5\xae\xe9\x96\x36\x84\x0e\x7c\x77\xd0\x3b\x8a\xc0\x65\xc5\xc6\xb7\x98\xe4\xca\x5a\x6a\xfd\x4f\x62\xb1\x7c\x46\x03\xdd\x9a\xad\x0f\x6c\xd9\x85\x79\xa6\x50\x10\x48\x47\xe8\x0a\x30\xa7\x26\x47\xa0\xeb\xf4\x99\xfa\xd8\xac\xbd\x3d\x0a\xfd\xd9\x0e\x3a\x22\x37\x3b\xb2\x3b\x84\xc1\xe0\xfa\xba\x33\xa4\x2e\xed\x53\x91\x96\x49\x4e\xab\xd4\xc5\x87\xd4\x1e\x22\x92\x8e\x95\xde\x0b\xf5\xe6\x75\x8a\x86\x89\xda\xc2\x6f\x36\x5f\xae\xd6\xf0\x0c\xf8\xc2\x97\x0f\x7d\xfe\x0d\x6b\xc6\x18\xdd\x48\x23\xa1\xd3\x0f\xaa\x4d\x9e\x92\x5e\xea\x9e\x43\xc2\xd1\x0c\x24\x5a\x4b\x5a\x10\x41\x19\xa4\x1e\x14\x95\x9e\x50\x6e\x0c\x8d\x01\x14\x71\x3a\x17\x77\x72\x35\xdc\xcb\xc9\x0d\x20\xbe\xe2\x29\x59\xec\xb7\x69\xd8\x77\x27\xd7\xd7\xa0\x5d\x7d\x06\xae\xcf\xbf\xef\x24\x4a\xda\xed\xf0\xbc\xbc\x7d\x1e\xbd\x02\x1e\xb9\x3b\x9b\xec\x01\x77\xcb\x09\x17\xcf\xe6\x33\xec\x34\xb9\x75\xa1\xf5\xe2\xcb\xa2\x25\xdf\x36\x91\xa8\xaf\x99\xda\x9a\xdd\xba\x2e\xfe\x0a\xa7\x71\x9d\x0c\xd3\xfe\xf9\xff\x03\x00\x00\xff\xff\x32\xbb\x37\x9d\x2e\xb5\x00\x00") func etcNginxTemplateNginxTmplBytes() ([]byte, error) { return bindataRead( diff --git a/internal/ingress/annotations/annotations.go b/internal/ingress/annotations/annotations.go index ed1847922..495ca7def 100644 --- a/internal/ingress/annotations/annotations.go +++ b/internal/ingress/annotations/annotations.go @@ -37,6 +37,7 @@ import ( "k8s.io/ingress-nginx/internal/ingress/annotations/ipwhitelist" "k8s.io/ingress-nginx/internal/ingress/annotations/loadbalancing" "k8s.io/ingress-nginx/internal/ingress/annotations/log" + "k8s.io/ingress-nginx/internal/ingress/annotations/luarestywaf" "k8s.io/ingress-nginx/internal/ingress/annotations/parser" "k8s.io/ingress-nginx/internal/ingress/annotations/portinredirect" "k8s.io/ingress-nginx/internal/ingress/annotations/proxy" @@ -93,6 +94,7 @@ type Ingress struct { SSLCiphers string Logs log.Config GRPC bool + LuaRestyWAF luarestywaf.Config } // Extractor defines the annotation parsers to be used in the extraction of annotations @@ -133,6 +135,7 @@ func NewAnnotationExtractor(cfg resolver.Resolver) Extractor { "SSLCiphers": sslcipher.NewParser(cfg), "Logs": log.NewParser(cfg), "GRPC": grpc.NewParser(cfg), + "LuaRestyWAF": luarestywaf.NewParser(cfg), }, } } diff --git a/internal/ingress/annotations/luarestywaf/main.go b/internal/ingress/annotations/luarestywaf/main.go new file mode 100644 index 000000000..6135a0367 --- /dev/null +++ b/internal/ingress/annotations/luarestywaf/main.go @@ -0,0 +1,74 @@ +/* +Copyright 2016 The Kubernetes Authors. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +package luarestywaf + +import ( + extensions "k8s.io/api/extensions/v1beta1" + + "k8s.io/ingress-nginx/internal/ingress/annotations/parser" + "k8s.io/ingress-nginx/internal/ingress/resolver" +) + +// Config returns lua-resty-waf configuration for an Ingress rule +type Config struct { + Enabled bool `json:"enabled"` + Debug bool `json:"debug"` +} + +// Equal tests for equality between two Config types +func (e1 *Config) Equal(e2 *Config) bool { + if e1 == e2 { + return true + } + if e1 == nil || e2 == nil { + return false + } + if e1.Enabled != e2.Enabled { + return false + } + if e1.Debug != e2.Debug { + return false + } + + return true +} + +type luarestywaf struct { + r resolver.Resolver +} + +// NewParser creates a new CORS annotation parser +func NewParser(r resolver.Resolver) parser.IngressAnnotation { + return luarestywaf{r} +} + +// Parse parses the annotations contained in the ingress rule +// used to indicate if the location/s contains a fragment of +// configuration to be included inside the paths of the rules +func (a luarestywaf) Parse(ing *extensions.Ingress) (interface{}, error) { + enabled, err := parser.GetBoolAnnotation("lua-resty-waf", ing) + if err != nil { + return &Config{}, err + } + + debug, _ := parser.GetBoolAnnotation("lua-resty-waf-debug", ing) + + return &Config{ + Enabled: enabled, + Debug: debug, + }, nil +} diff --git a/internal/ingress/annotations/luarestywaf/main_test.go b/internal/ingress/annotations/luarestywaf/main_test.go new file mode 100644 index 000000000..043bf410b --- /dev/null +++ b/internal/ingress/annotations/luarestywaf/main_test.go @@ -0,0 +1,69 @@ +/* +Copyright 2017 The Kubernetes Authors. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +package luarestywaf + +import ( + "testing" + + api "k8s.io/api/core/v1" + extensions "k8s.io/api/extensions/v1beta1" + meta_v1 "k8s.io/apimachinery/pkg/apis/meta/v1" + "k8s.io/ingress-nginx/internal/ingress/annotations/parser" + "k8s.io/ingress-nginx/internal/ingress/resolver" +) + +func TestParse(t *testing.T) { + luaRestyWAFAnnotation := parser.GetAnnotationWithPrefix("lua-resty-waf") + luaRestyWAFDebugAnnotation := parser.GetAnnotationWithPrefix("lua-resty-waf-debug") + + ap := NewParser(&resolver.Mock{}) + if ap == nil { + t.Fatalf("expected a parser.IngressAnnotation but returned nil") + } + + testCases := []struct { + annotations map[string]string + expected *Config + }{ + {nil, &Config{}}, + {map[string]string{}, &Config{}}, + + {map[string]string{luaRestyWAFAnnotation: "true"}, &Config{Enabled: true, Debug: false}}, + {map[string]string{luaRestyWAFDebugAnnotation: "true"}, &Config{Enabled: false, Debug: false}}, + + {map[string]string{luaRestyWAFAnnotation: "true", luaRestyWAFDebugAnnotation: "true"}, &Config{Enabled: true, Debug: true}}, + {map[string]string{luaRestyWAFAnnotation: "true", luaRestyWAFDebugAnnotation: "false"}, &Config{Enabled: true, Debug: false}}, + {map[string]string{luaRestyWAFAnnotation: "false", luaRestyWAFDebugAnnotation: "true"}, &Config{Enabled: false, Debug: true}}, + } + + ing := &extensions.Ingress{ + ObjectMeta: meta_v1.ObjectMeta{ + Name: "foo", + Namespace: api.NamespaceDefault, + }, + Spec: extensions.IngressSpec{}, + } + + for _, testCase := range testCases { + ing.SetAnnotations(testCase.annotations) + result, _ := ap.Parse(ing) + config := result.(*Config) + if !config.Equal(testCase.expected) { + t.Errorf("expected %v but returned %v, annotations: %s", testCase.expected, result, testCase.annotations) + } + } +} diff --git a/internal/ingress/controller/config/config.go b/internal/ingress/controller/config/config.go index 7e8d7250d..5c253cd09 100644 --- a/internal/ingress/controller/config/config.go +++ b/internal/ingress/controller/config/config.go @@ -503,6 +503,10 @@ type Configuration struct { // NoAuthLocations is a comma-separated list of locations that // should not get authenticated NoAuthLocations string `json:"no-auth-locations"` + + // DisableLuaRestyWAF disables lua-resty-waf globally regardless + // of whether there's an ingress that has enabled the WAF using annotation + DisableLuaRestyWAF bool `json:"disable-lua-resty-waf"` } // NewDefault returns the default nginx configuration diff --git a/internal/ingress/controller/controller.go b/internal/ingress/controller/controller.go index 5f1f5a98c..aa0fcfed8 100644 --- a/internal/ingress/controller/controller.go +++ b/internal/ingress/controller/controller.go @@ -457,6 +457,7 @@ func (n *NGINXController) getBackendServers(ingresses []*extensions.Ingress) ([] loc.Connection = anns.Connection loc.Logs = anns.Logs loc.GRPC = anns.GRPC + loc.LuaRestyWAF = anns.LuaRestyWAF if loc.Redirect.FromToWWW { server.RedirectFromToWWW = true @@ -492,6 +493,7 @@ func (n *NGINXController) getBackendServers(ingresses []*extensions.Ingress) ([] Connection: anns.Connection, Logs: anns.Logs, GRPC: anns.GRPC, + LuaRestyWAF: anns.LuaRestyWAF, } if loc.Redirect.FromToWWW { @@ -928,6 +930,7 @@ func (n *NGINXController) createServers(data []*extensions.Ingress, defLoc.Whitelist = anns.Whitelist defLoc.Denied = anns.Denied defLoc.GRPC = anns.GRPC + defLoc.LuaRestyWAF = anns.LuaRestyWAF } } } diff --git a/internal/ingress/controller/template/template.go b/internal/ingress/controller/template/template.go index d38eb377e..55024414d 100644 --- a/internal/ingress/controller/template/template.go +++ b/internal/ingress/controller/template/template.go @@ -119,29 +119,30 @@ var ( } return true }, - "buildLocation": buildLocation, - "buildAuthLocation": buildAuthLocation, - "buildAuthResponseHeaders": buildAuthResponseHeaders, - "buildLoadBalancingConfig": buildLoadBalancingConfig, - "buildProxyPass": buildProxyPass, - "filterRateLimits": filterRateLimits, - "buildRateLimitZones": buildRateLimitZones, - "buildRateLimit": buildRateLimit, - "buildResolvers": buildResolvers, - "buildUpstreamName": buildUpstreamName, - "isLocationInLocationList": isLocationInLocationList, - "isLocationAllowed": isLocationAllowed, - "buildLogFormatUpstream": buildLogFormatUpstream, - "buildDenyVariable": buildDenyVariable, - "getenv": os.Getenv, - "contains": strings.Contains, - "hasPrefix": strings.HasPrefix, - "hasSuffix": strings.HasSuffix, - "toUpper": strings.ToUpper, - "toLower": strings.ToLower, - "formatIP": formatIP, - "buildNextUpstream": buildNextUpstream, - "getIngressInformation": getIngressInformation, + "buildLuaSharedDictionaries": buildLuaSharedDictionaries, + "buildLocation": buildLocation, + "buildAuthLocation": buildAuthLocation, + "buildAuthResponseHeaders": buildAuthResponseHeaders, + "buildLoadBalancingConfig": buildLoadBalancingConfig, + "buildProxyPass": buildProxyPass, + "filterRateLimits": filterRateLimits, + "buildRateLimitZones": buildRateLimitZones, + "buildRateLimit": buildRateLimit, + "buildResolvers": buildResolvers, + "buildUpstreamName": buildUpstreamName, + "isLocationInLocationList": isLocationInLocationList, + "isLocationAllowed": isLocationAllowed, + "buildLogFormatUpstream": buildLogFormatUpstream, + "buildDenyVariable": buildDenyVariable, + "getenv": os.Getenv, + "contains": strings.Contains, + "hasPrefix": strings.HasPrefix, + "hasSuffix": strings.HasSuffix, + "toUpper": strings.ToUpper, + "toLower": strings.ToLower, + "formatIP": formatIP, + "buildNextUpstream": buildNextUpstream, + "getIngressInformation": getIngressInformation, "serverConfig": func(all config.TemplateConfig, server *ingress.Server) interface{} { return struct{ First, Second interface{} }{all, server} }, @@ -167,6 +168,47 @@ func formatIP(input string) string { return fmt.Sprintf("[%s]", input) } +func buildLuaSharedDictionaries(s interface{}, dynamicConfigurationEnabled bool, disableLuaRestyWAF bool) string { + servers, ok := s.([]*ingress.Server) + if !ok { + glog.Errorf("expected an '[]*ingress.Server' type but %T was returned", s) + return "" + } + + out := []string{} + + if dynamicConfigurationEnabled { + out = append(out, + "lua_shared_dict configuration_data 5M", + "lua_shared_dict round_robin_state 1M", + "lua_shared_dict locks 512k", + "lua_shared_dict balancer_ewma 1M", + "lua_shared_dict balancer_ewma_last_touched_at 1M", + ) + } + + if !disableLuaRestyWAF { + luaRestyWAFEnabled := func() bool { + for _, server := range servers { + for _, location := range server.Locations { + if location.LuaRestyWAF.Enabled { + return true + } + } + } + return false + }() + if luaRestyWAFEnabled { + out = append(out, "lua_shared_dict waf_storage 64M") + } + } + + if len(out) == 0 { + return "" + } + return strings.Join(out, ";\n\r") + ";" +} + // buildResolvers returns the resolvers reading the /etc/resolv.conf file func buildResolvers(res interface{}, disableIpv6 interface{}) string { // NGINX need IPV6 addresses to be surrounded by brackets diff --git a/internal/ingress/controller/template/template_test.go b/internal/ingress/controller/template/template_test.go index 8f76be975..6d2191fe7 100644 --- a/internal/ingress/controller/template/template_test.go +++ b/internal/ingress/controller/template/template_test.go @@ -32,6 +32,7 @@ import ( "k8s.io/ingress-nginx/internal/file" "k8s.io/ingress-nginx/internal/ingress" "k8s.io/ingress-nginx/internal/ingress/annotations/authreq" + "k8s.io/ingress-nginx/internal/ingress/annotations/luarestywaf" "k8s.io/ingress-nginx/internal/ingress/annotations/rewrite" "k8s.io/ingress-nginx/internal/ingress/controller/config" ) @@ -296,6 +297,46 @@ var ( } ) +func TestBuildLuaSharedDictionaries(t *testing.T) { + servers := []*ingress.Server{ + { + Hostname: "foo.bar", + Locations: []*ingress.Location{{Path: "/", LuaRestyWAF: luarestywaf.Config{}}}, + }, + { + Hostname: "another.host", + Locations: []*ingress.Location{{Path: "/", LuaRestyWAF: luarestywaf.Config{}}}, + }, + } + + config := buildLuaSharedDictionaries(servers, false, false) + if config != "" { + t.Errorf("expected to not configure any lua shared dictionary, but generated %s", config) + } + config = buildLuaSharedDictionaries(servers, true, false) + if !strings.Contains(config, "lua_shared_dict configuration_data") { + t.Errorf("expected to include 'configuration_data' but got %s", config) + } + if strings.Contains(config, "waf_storage") { + t.Errorf("expected to not include 'waf_storage' but got %s", config) + } + + servers[1].Locations[0].LuaRestyWAF = luarestywaf.Config{Enabled: true} + config = buildLuaSharedDictionaries(servers, false, false) + if !strings.Contains(config, "lua_shared_dict waf_storage") { + t.Errorf("expected to configure 'waf_storage', but got %s", config) + } + config = buildLuaSharedDictionaries(servers, true, false) + if !strings.Contains(config, "lua_shared_dict waf_storage") { + t.Errorf("expected to configure 'waf_storage', but got %s", config) + } + + config = buildLuaSharedDictionaries(servers, false, true) + if config != "" { + t.Errorf("expected to not configure any lua shared dictionary, but generated %s", config) + } +} + func TestFormatIP(t *testing.T) { cases := map[string]struct { Input, Output string diff --git a/internal/ingress/types.go b/internal/ingress/types.go index dcc3b71bd..8ad0bdf0e 100644 --- a/internal/ingress/types.go +++ b/internal/ingress/types.go @@ -30,6 +30,7 @@ import ( "k8s.io/ingress-nginx/internal/ingress/annotations/cors" "k8s.io/ingress-nginx/internal/ingress/annotations/ipwhitelist" "k8s.io/ingress-nginx/internal/ingress/annotations/log" + "k8s.io/ingress-nginx/internal/ingress/annotations/luarestywaf" "k8s.io/ingress-nginx/internal/ingress/annotations/proxy" "k8s.io/ingress-nginx/internal/ingress/annotations/ratelimit" "k8s.io/ingress-nginx/internal/ingress/annotations/redirect" @@ -268,6 +269,8 @@ type Location struct { // GRPC indicates if the kubernetes service exposes a gRPC interface // By default this is false GRPC bool `json:"grpc"` + // LuaRestyWAF contains parameters to configure lua-resty-waf + LuaRestyWAF luarestywaf.Config `json:"luaRestyWAF"` } // SSLPassthroughBackend describes a SSL upstream server configured diff --git a/internal/ingress/types_equals.go b/internal/ingress/types_equals.go index e262fe1a1..9d7a6b3dc 100644 --- a/internal/ingress/types_equals.go +++ b/internal/ingress/types_equals.go @@ -385,6 +385,9 @@ func (l1 *Location) Equal(l2 *Location) bool { if l1.GRPC != l2.GRPC { return false } + if !(&l1.LuaRestyWAF).Equal(&l2.LuaRestyWAF) { + return false + } return true } diff --git a/rootfs/etc/nginx/lua/balancer.lua b/rootfs/etc/nginx/lua/balancer.lua index 5a79a7379..6e776efd2 100644 --- a/rootfs/etc/nginx/lua/balancer.lua +++ b/rootfs/etc/nginx/lua/balancer.lua @@ -38,6 +38,10 @@ end local function get_current_lb_alg() local backend = get_current_backend() + if not backend then + return nil + end + return backend["load-balance"] or DEFAULT_LB_ALG end diff --git a/rootfs/etc/nginx/template/nginx.tmpl b/rootfs/etc/nginx/template/nginx.tmpl index 421edd1ba..3cda3f746 100644 --- a/rootfs/etc/nginx/template/nginx.tmpl +++ b/rootfs/etc/nginx/template/nginx.tmpl @@ -36,20 +36,19 @@ events { } http { - {{ if $all.DynamicConfigurationEnabled }} lua_package_cpath "/usr/local/lib/lua/?.so;/usr/lib/x86_64-linux-gnu/lua/5.1/?.so;;"; lua_package_path "/etc/nginx/lua/?.lua;/etc/nginx/lua/vendor/?.lua;/usr/local/lib/lua/?.lua;;"; - lua_shared_dict configuration_data 5M; - lua_shared_dict round_robin_state 1M; - lua_shared_dict locks 512k; - lua_shared_dict balancer_ewma 1M; - lua_shared_dict balancer_ewma_last_touched_at 1M; + {{ buildLuaSharedDictionaries $servers $all.DynamicConfigurationEnabled $all.Cfg.DisableLuaRestyWAF }} init_by_lua_block { require("resty.core") collectgarbage("collect") + local lua_resty_waf = require("resty.waf") + lua_resty_waf.init() + + {{ if $all.DynamicConfigurationEnabled }} -- init modules local ok, res @@ -66,8 +65,10 @@ http { else balancer = res end + {{ end }} } + {{ if $all.DynamicConfigurationEnabled }} init_worker_by_lua_block { balancer.init_worker() } @@ -815,6 +816,48 @@ stream { {{ end }} location {{ $path }} { + {{ if (and (not $all.Cfg.DisableLuaRestyWAF) $location.LuaRestyWAF.Enabled) }} + access_by_lua_block { + local lua_resty_waf = require("resty.waf") + local waf = lua_resty_waf:new() + + waf:set_option("mode", "ACTIVE") + waf:set_option("storage_zone", "waf_storage") + waf:set_option("allowed_content_types", { "text/html", "text/json", "application/json" }) + waf:set_option("event_log_level", ngx.WARN) + + {{ if $location.LuaRestyWAF.Debug }} + waf:set_option("debug", true) + waf:set_option("event_log_request_arguments", true) + waf:set_option("event_log_request_body", true) + waf:set_option("event_log_request_headers", true) + waf:set_option("req_tid_header", true) + waf:set_option("res_tid_header", true) + {{ end }} + + waf:exec() + } + header_filter_by_lua_block { + local lua_resty_waf = require "resty.waf" + local waf = lua_resty_waf:new() + waf:exec() + } + body_filter_by_lua_block { + local lua_resty_waf = require "resty.waf" + local waf = lua_resty_waf:new() + waf:exec() + } + {{ end }} + log_by_lua_block { + {{ if (and (not $all.Cfg.DisableLuaRestyWAF) $location.LuaRestyWAF.Enabled) }} + local lua_resty_waf = require "resty.waf" + local waf = lua_resty_waf:new() + waf:exec() + {{ end }} + {{ if $all.DynamicConfigurationEnabled}} + balancer.call() + {{ end }} + } {{ if (and (not (empty $server.SSLCertificate)) $all.Cfg.HSTS) }} if ($scheme = https) { more_set_headers "Strict-Transport-Security: max-age={{ $all.Cfg.HSTSMaxAge }}{{ if $all.Cfg.HSTSIncludeSubdomains }}; includeSubDomains{{ end }}{{ if $all.Cfg.HSTSPreload }}; preload{{ end }}"; @@ -1009,11 +1052,6 @@ stream { {{ end }} {{ if not (empty $location.Backend) }} - {{ if $all.DynamicConfigurationEnabled}} - log_by_lua_block { - balancer.call() - } - {{ end }} {{ buildProxyPass $server.Hostname $all.Backends $location $all.DynamicConfigurationEnabled }} {{ if (or (eq $location.Proxy.ProxyRedirectFrom "default") (eq $location.Proxy.ProxyRedirectFrom "off")) }} proxy_redirect {{ $location.Proxy.ProxyRedirectFrom }}; diff --git a/test/e2e/annotations/luarestywaf.go b/test/e2e/annotations/luarestywaf.go new file mode 100644 index 000000000..113e40787 --- /dev/null +++ b/test/e2e/annotations/luarestywaf.go @@ -0,0 +1,121 @@ +/* +Copyright 2017 The Kubernetes Authors. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +package annotations + +import ( + "fmt" + "net/http" + + . "github.com/onsi/ginkgo" + . "github.com/onsi/gomega" + "github.com/parnurzeal/gorequest" + + v1beta1 "k8s.io/api/extensions/v1beta1" + metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" + "k8s.io/apimachinery/pkg/util/intstr" + + "k8s.io/ingress-nginx/test/e2e/framework" +) + +var _ = framework.IngressNginxDescribe("Annotations - lua-resty-waf", func() { + f := framework.NewDefaultFramework("luarestywaf") + + BeforeEach(func() { + err := f.NewEchoDeployment() + Expect(err).NotTo(HaveOccurred()) + }) + + Context("when lua-resty-waf is enabled", func() { + It("should return 403 for a malicious request that matches a default WAF rule and 200 for other requests", func() { + host := "foo" + createIngress(f, host, map[string]string{"nginx.ingress.kubernetes.io/lua-resty-waf": "true"}) + + url := fmt.Sprintf("%s?msg=XSS", f.NginxHTTPURL) + resp, _, errs := gorequest.New(). + Get(url). + Set("Host", host). + End() + + Expect(len(errs)).Should(Equal(0)) + Expect(resp.StatusCode).Should(Equal(http.StatusForbidden)) + }) + }) + + Context("when lua-resty-waf is not enabled", func() { + It("should return 200 even for a malicious request", func() { + host := "foo" + createIngress(f, host, map[string]string{}) + + url := fmt.Sprintf("%s?msg=XSS", f.NginxHTTPURL) + resp, _, errs := gorequest.New(). + Get(url). + Set("Host", host). + End() + + Expect(len(errs)).Should(Equal(0)) + Expect(resp.StatusCode).Should(Equal(http.StatusOK)) + }) + }) +}) + +func createIngress(f *framework.Framework, host string, annotations map[string]string) { + ing, err := f.EnsureIngress(&v1beta1.Ingress{ + ObjectMeta: metav1.ObjectMeta{ + Name: host, + Namespace: f.Namespace.Name, + Annotations: annotations, + }, + Spec: v1beta1.IngressSpec{ + Rules: []v1beta1.IngressRule{ + { + Host: host, + IngressRuleValue: v1beta1.IngressRuleValue{ + HTTP: &v1beta1.HTTPIngressRuleValue{ + Paths: []v1beta1.HTTPIngressPath{ + { + Path: "/", + Backend: v1beta1.IngressBackend{ + ServiceName: "http-svc", + ServicePort: intstr.FromInt(80), + }, + }, + }, + }, + }, + }, + }, + }, + }) + Expect(err).NotTo(HaveOccurred()) + Expect(ing).NotTo(BeNil()) + + err = f.WaitForNginxServer(host, + func(server string) bool { + return Expect(server).Should(ContainSubstring("server_name foo")) && + Expect(server).ShouldNot(ContainSubstring("return 503")) + }) + Expect(err).NotTo(HaveOccurred()) + + resp, body, errs := gorequest.New(). + Get(f.NginxHTTPURL). + Set("Host", host). + End() + + Expect(len(errs)).Should(Equal(0)) + Expect(resp.StatusCode).Should(Equal(http.StatusOK)) + Expect(body).Should(ContainSubstring(fmt.Sprintf("host=%v", host))) +}