From 7b9f651317cc36606568eb7cc6f63f88240cf9b4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <admin@numbus.eu>
Date: Sun, 8 Mar 2026 14:12:09 +0100
Subject: [PATCH 01/43] Cleaned up the script. Fixed bugs. Added services.
 Categorized services.

---
 deploy.conf |  43 ++++++++++-
 deploy.sh   | 204 ++++++++++++++++++++++++++++++++--------------------
 2 files changed, 168 insertions(+), 79 deletions(-)

diff --git a/deploy.conf b/deploy.conf
index 4695105..3c3fe9a 100644
--- a/deploy.conf
+++ b/deploy.conf
@@ -30,6 +30,43 @@ export NETWORK_ROUTER_IP="192.168.1.1"
 export HOME_SERVER_IP="192.168.1.5"
 
 # SERVICES SETTINGS
-export SELECTED_DNS_SERVICE="pi-hole" # or adguard
-export SELECTED_SERVICES=( "frigate" "gitea" "home-assistant" "immich" "it-tools" \
-"nextcloud" "passbolt" "clamav" "virtualization" )
+export SELECTED_DNS_SERVICE=(
+  "pi-hole" # or adguard
+)
+export SELECTED_WEB_APPLICATIONS=(
+  "crafty"
+  "frigate"
+  "gitea"
+  "home-assistant"
+  "immich"
+  "it-tools"
+  "jellyfin"
+  "netbootxyz"
+  "nextcloud"
+  "passbolt"
+  "uptime-kuma"
+  "vscodium"
+)
+export SELECTED_SYSTEM_SERVICES=(
+  "clamav"
+  "virtualization"
+)
+
+# OPTIONAL SETTINGS
+export SELECTED_DNS_SERVICE_SUBDOMAIN=(
+  "my-pi-hole-subdomain" # or "my-adguard-subdomain"
+)
+export SELECTED_WEB_APPLICATIONS_SUBDOMAIN=( # ⚠️ Must match SELECTED_WEB_APPLICATIONS order ⚠️
+  "my-crafty-subdomain"
+  "my-frigate-subdomain"
+  "my-gitea-subdomain"
+  "my-home-assistant-subdomain"
+  "my-immich-subdomain"
+  "my-it-tools-subdomain"
+  "my-jellyfin-subdomain"
+  "my-netbootxyz-subdomain"
+  "my-nextcloud-subdomain"
+  "my-passbolt-subdomain"
+  "my-uptime-kuma-subdomain"
+  "my-vscodium-subdomain"
+)
\ No newline at end of file
diff --git a/deploy.sh b/deploy.sh
index f6f3d87..d38d7e0 100644
--- a/deploy.sh
+++ b/deploy.sh
@@ -7,12 +7,82 @@ export GUM_SPIN_SPINNER_BOLD=true
 export GUM_SPIN_SHOW_ERROR=true
 export GUM_SPIN_TITLE_BOLD=true
 
-NECESSARY_VARIABLES_LIST=( LIVE_TARGET_IP LIVE_TARGET_PASSWD \
-TIMEZONE LANGUAGE LOCALE SERVER_OWNER_NAME SERVER_USER_EMAIL SERVER_ADMIN_EMAIL AUTHORIZED_SSH_PUBLIC_KEY \
-DOMAIN_NAME CLOUDFLARE_DNS_API_TOKEN \
-SMTP_SERVER_USERNAME SMTP_SERVER_PASSWORD SMTP_SERVER_HOST SMTP_SERVER_PORT \
-NETWORK_SUBNET NETWORK_ROUTER_IP HOME_SERVER_IP)
+NECESSARY_VARIABLES_LIST=(
+  #LIVE TARGET SETTINGS
+  LIVE_TARGET_IP
+  LIVE_TARGET_PASSWD
+  #SERVER SETTINGS
+  LANGUAGE
+  LOCALE
+  TIMEZONE
+  SERVER_OWNER_NAME
+  SERVER_USER_EMAIL
+  SERVER_ADMIN_EMAIL
+  AUTHORIZED_SSH_PUBLIC_KEY
+  # TRAEFIK SETTINGS
+  DOMAIN_NAME
+  CLOUDFLARE_DNS_API_TOKEN
+  # SMTP SETTINGS
+  SMTP_SERVER_USERNAME
+  SMTP_SERVER_PASSWORD
+  SMTP_SERVER_HOST
+  SMTP_SERVER_PORT
+  #NETWORK SETTINGS
+  NETWORK_SUBNET
+  NETWORK_ROUTER_IP
+  HOME_SERVER_IP
+  # SERVICES SETTINGS
+  SELECTED_DNS_SERVICE
+  SELECTED_WEB_APPLICATIONS
+  SELECTED_SYSTEM_SERVICES
+)
 
+# Available services
+DNS_SERVICES_LIST=(
+  "pi-hole"
+  "adguard"
+)
+WEB_APPLICATIONS_LIST=(
+  "crafty"
+  "frigate"
+  "gitea"
+  "home-assistant"
+  "immich"
+  "it-tools"
+  "jellyfin"
+  "netbootxyz"
+  "nextcloud"
+  "passbolt"
+  "uptime-kuma"
+  "vscodium"
+)
+SYSTEM_SERVICES_LIST=(
+  "clamav"
+  "virtualization"
+)
+# Services descriptions
+DNS_SERVICES_DESCRIPTION=(
+  "Pi-Hole : Simple open-source DNS black hole"
+  "AdGuard : Feature rich DNS service"
+)
+WEB_APPLICATIONS_DESCRIPTION=(
+  "Crafty : A web-based control panel for Minecraft servers"
+  "Frigate [Home Assistant required] : AI-powered NVR for smart security cameras"
+  "Gitea : A lightweight, self-hosted Git service like GitHub"
+  "Home-Assistant : Open-source home automation to control all your devices"
+  "Immich : Self-hosted Google Photos alternative for photos and videos"
+  "IT-tools : Handy collection of online tools for developers"
+  "Jellyfin : A self-hosted media server to stream your movies and music"
+  "netboot.xyz : PXE boot various OS installers and utilities"
+  "Nextcloud : A self-hosted productivity platform, like Google Drive & Office"
+  "Passbolt: An open-source, security-first password manager for teams"
+  "Uptime-Kuma : A fancy self-hosted monitoring tool"
+  "VSCodium : Run VS Code in your browser, accessible anywhere"
+)
+SYSTEM_SERVICES_DESCRIPTION=(
+  "ClamAV : An open-source anti-virus"
+  "Virtualization : Run Virtual Machines (KVM/QEMU) with Libvirt"
+)
 ### Default settings <--
 
 user_input() {
@@ -265,56 +335,40 @@ SSHEND
 }
 
 services_selection() {
+  services_choice() {
+    local SERVICES_LIST=( "${1[@]}" )
+    local SERVICES_DESCRIPTION=( "${2[@]}" )
+    local FINAL_VARIABLE="${3}"
+    local HEADER="${4}"
+    local LIMIT="${5:---no-limit}"
+
+    local SELECTED_SERVICES=()
+    local SELECTED_SERVICES_DESCRIPTION=()
+
+    local SELECTED_SERVICES_DESCRIPTION=$(gum choose ${LIMIT} --header "${HEADER}" "${SERVICES_DESCRIPTION[@]}")
+
+    for i in ${!SERVICES_LIST[@]}; do
+      if printf '%s' "${SELECTED_SERVICES_DESCRIPTION}" | grep -iq "${SERVICES_LIST[${i}]}"; then
+        SELECTED_SERVICES+=("${SERVICES_LIST[${i}]}")
+      fi
+    done
+
+    export "${FINAL_VARIABLE}=(${SELECTED_SERVICES[@]})"
+  }
+
   echo -e "\n\n ➡️  You will now select the services you want installed on your server:"
 
-  local AVAILABLE_DNS_SERVICES=( "pi-hole" "adguard" )
-
-  local AVAILABLE_SERVICES=( "frigate" "gitea" "home-assistant" "immich" "it-tools" \
-  "nextcloud" "passbolt" "clamav" "virtualization" )
-
-  local DNS_SERVICES_DESCRIPTION=( "Pi-Hole : Simple open-source DNS black hole" \
-  "AdGuard " : Feature rich DNS service )
-
-  local SERVICES_DESCRIPTION=( "Immich : Pictures and videos backup with local machine-learning" \
-  "Nextcloud : No fuss Office 365 replacement" \
-  "Passbolt: Security-first password manager with collaboration features" \
-  "Home-Assistant : Manage your smart home and security cameras" \
-  "Frigate [Home Assistant required] : Secure your house with security cameras" \
-  "Gitea : Your own git platform" \
-  "IT-tools : A set of useful tools when doing IT" \
-  "ClamAV : An open-source anti-virus"
-  "Virtualization : Run Virtual Machines (KVM/QEMU) with Libvirt" )
-
-  SELECTED_SERVICES=()
-  local SELECTED_SERVICES_DESCRIPTION=$(gum choose --no-limit --header "Homelab services:" "${SERVICES_DESCRIPTION[@]}")
-
-  SELECTED_DNS_SERVICE=""
-  local SELECTED_DNS_SERVICE_DESCRIPTION=$(gum choose --limit 1 --header "Homelab services:" "${DNS_SERVICES_DESCRIPTION[@]}")
-
-  for i in ${!AVAILABLE_SERVICES[@]}; do
-    if printf '%s' "${SELECTED_SERVICES_DESCRIPTION}" | grep -iq "${AVAILABLE_SERVICES[${i}]}"; then
-      SELECTED_SERVICES+=("${AVAILABLE_SERVICES[${i}]}")
-    fi
-  done
-
-  for i in ${!AVAILABLE_DNS_SERVICES[@]}; do
-    if printf '%s' "${SELECTED_DNS_SERVICE_DESCRIPTION}" | grep -iq "${AVAILABLE_DNS_SERVICES[${i}]}"; then
-      SELECTED_DNS_SERVICE="${AVAILABLE_DNS_SERVICES[${i}]}"
-    fi
-  done
-
-  export SELECTED_SERVICES
-  export SELECTED_DNS_SERVICE
+  services_choice "${DNS_SERVICES_LIST[@]}" "${DNS_SERVICES_DESCRIPTION[@]}" "SELECTED_DNS_SERVICE" "Choose your preferred DNS service :" "--limit=1"
+  services_choice "${WEB_APPLICATIONS_LIST[@]}" "${WEB_APPLICATIONS_DESCRIPTION[@]}" "SELECTED_WEB_APPLICATIONS" "Choose the web applications you want to install :"
+  services_choice "${SYSTEM_SERVICES_LIST[@]}" "${SYSTEM_SERVICES_DESCRIPTION[@]}" "SELECTED_SYSTEM_SERVICES" "Choose the system services you want to install :"
 
   gum confirm "Do you want to edit the default subdomain of your services ?" || { echo -e "\n\n✅ Continuing..."; return 0; }
 
-  for service in ${!SELECTED_SERVICES[@]} $SELECTED_DNS_SERVICE; do
-    local HEADER="Please provide the desired subdomain for ${service}:"
-    local PLACEHOLDER="${service}"
-    SELECTED_SERVICES_SUBDOMAIN+=("$(gum input --placeholder "${PLACEHOLDER}" --header "${HEADER}")")
+  for service in ${SELECTED_WEB_APPLICATIONS[@]} ${SELECTED_DNS_SERVICE[@]}; do
+    SELECTED_WEB_APPLICATIONS_SUBDOMAIN+=( "$(gum input --placeholder "${service}" --header "Please provide the desired subdomain for ${service}:")" )
   done
 
-  export SELECTED_SERVICES_SUBDOMAIN
+  export SELECTED_WEB_APPLICATIONS_SUBDOMAIN
 }
 
 disks_selection() {
@@ -414,20 +468,22 @@ network_config_generation() {
 
 services_config_generation() {
   echo -e "\n  # DNS settings" >> ${CONFIGURATION_PATH}
-  echo -e "  numbus.services.dns = \"${SELECTED_DNS_SERVICE}\";" >> ${CONFIGURATION_PATH}
-  echo -e "  numbus.services.${SELECTED_DNS_SERVICE}.enable = true;" >> ${CONFIGURATION_PATH}
+  echo -e "  numbus.services.dns = \"${SELECTED_DNS_SERVICE[0]}\";" >> ${CONFIGURATION_PATH}
+  echo -e "  numbus.services.${SELECTED_DNS_SERVICE[0]}.enable = true;" >> ${CONFIGURATION_PATH}
 
   echo -e "\n  # Services settings" >> ${CONFIGURATION_PATH}
   echo -e "  numbus.services.domain = \"${DOMAIN_NAME}\";" >> ${CONFIGURATION_PATH}
   i=0
   for service in "${SELECTED_SERVICES[@]}"; do
-    [[ "${SELECTED_SERVICES_SUBDOMAIN+x:-false}" ]] && echo -e "  numbus.services.${service}.enable.subdomain = \"${SELECTED_SERVICES_SUBDOMAIN[${i}]}\";" >> ${CONFIGURATION_PATH}
+    if [[ -v SELECTED_WEB_APPLICATIONS_SUBDOMAIN && -n "${SELECTED_WEB_APPLICATIONS_SUBDOMAIN[${i}]}" ]]; then
+      echo -e "  numbus.services.${service}.enable.subdomain = \"${SELECTED_WEB_APPLICATIONS_SUBDOMAIN[${i}]}\";" >> ${CONFIGURATION_PATH}
+    fi
     echo -e "  numbus.services.${service}.enable = true;" >> ${CONFIGURATION_PATH}
     i=$((i + 1))
   done
 
-  if [[ "${SELECTED_SERVICES_SUBDOMAIN+x:-false}" && -n "$SELECTED_DNS_SERVICE" && -n "${SELECTED_SERVICES_SUBDOMAIN[${i}]}" ]]; then
-    echo -e "  numbus.services.${SELECTED_DNS_SERVICE}.enable.subdomain = \"${SELECTED_SERVICES_SUBDOMAIN[${i}]}\";" >> ${CONFIGURATION_PATH}
+  if [[ -v SELECTED_WEB_APPLICATIONS_SUBDOMAIN && -n "$SELECTED_DNS_SERVICE" && -n "${SELECTED_WEB_APPLICATIONS_SUBDOMAIN[${i}]}" ]]; then
+    echo -e "  numbus.services.${SELECTED_DNS_SERVICE}.enable.subdomain = \"${SELECTED_WEB_APPLICATIONS_SUBDOMAIN[${i}]}\";" >> ${CONFIGURATION_PATH}
   fi
 
   if [[ "${TARGET_GRAPHICS_RENDERER}" == "true" ]]; then
@@ -541,15 +597,13 @@ Please review the selected disk layout before proceeding.
 
 **Boot Disks (${#BOOT_DISKS_ID_LIST[@]}):**
 * **Boot 1:** \`${BOOT_DISKS_ID_LIST[0]}\`
-$( [[ -n "${BOOT_DISKS_ID_LIST[1]:-}" ]] && echo "* **Boot 2:** \`${BOOT_DISKS_ID_LIST[1]}\`" || echo "* **Boot 2:** *Not configured*" )
-
+$( [[ -n "${BOOT_DISKS_ID_LIST[1]:-}" ]] && echo "* **Boot 2:** \`${BOOT_DISKS_ID_LIST[1]}\`" || echo "* **Boot 2:** *Not configured*" && echo "" )
 **Data Disks ($CONTENT_DISK_NUMBER):**
-$( j=1 && for i in $(seq 0 $(($CONTENT_DISK_NUMBER - 1))); do echo "* **Data ${j}:** \`${DATA_DISKS_ID[${i}]}\`" && j=$((j + 1)); done )
-$( [[ $CONTENT_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" )
-
+$( j=1 && for i in $(seq 0 $(($CONTENT_DISK_NUMBER - 1))); do echo "* **Data ${j}:** \`${DATA_DISKS_ID[${i}]}\`" && j=$((j + 1)); done && echo "" )
+$( [[ $CONTENT_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" && echo "" )
 **Parity Disks ($PARITY_DISK_NUMBER):**
-$( [[ $PARITY_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq $CONTENT_DISK_NUMBER $((${#DATA_DISKS_ID[@]} - 1))); do echo "* **Parity ${j}:** \`${DATA_DISKS_ID[${i}]}\`" && j=$((j + 1)); done )
-$( [[ $PARITY_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" )
+$( [[ $PARITY_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq $CONTENT_DISK_NUMBER $((${#DATA_DISKS_ID[@]} - 1))); do echo "* **Parity ${j}:** \`${DATA_DISKS_ID[${i}]}\`" && j=$((j + 1)); done && echo "" )
+$( [[ $PARITY_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" && echo "" )
 EOF
 )
 
@@ -561,12 +615,15 @@ EOF
 
 Please review the selected services before proceeding.
 
-**DNS Service:**
-$(echo "\`${SELECTED_DNS_SERVICE^}\`" && echo "")
-**Services:**
-$(for service in ${AVAILABLE_SERVICES[@]}`; do echo "\`${service^}\`" && echo ""; done)
+**DNS Service :**
+$(echo "\`${SELECTED_DNS_SERVICE[0]^}\`" && echo "")
+**Web Applications :**
+$(for app in "${SELECTED_WEB_APPLICATIONS[@]}"; do echo "\`${app^}\`" && echo ""; done)
+**System Services :**
+$(for service in "${SELECTED_SYSTEM_SERVICES[@]}"; do echo "\`${service^}\`" && echo ""; done)
 EOF
 )
+
   gum style --border normal --margin "1" --padding "1 2" --border-foreground 212 "$(gum format <<< "${SERVICES_RECAP_CONTENT}")"
   gum confirm "➡️ Proceed with this services configuration?" || { echo -e "\n\n❌ Aborting as requested."; exit 1; }
 
@@ -576,17 +633,14 @@ EOF
 Please save the following secrets to a secure place (i.e. your local password manager, or a hidden sheet of paper).
 
 **Boot Disks (${#BOOT_DISKS_ID_LIST[@]}):**
-**Disk 1 Secret Key:** \`$( cat final-nix-config/etc/secrets/disks/boot-1 )\`
-$( [[ -n "${BOOT_DISKS_ID_LIST[1]:-}" ]] && echo "**Disk 2 secret key:** \`$( cat final-nix-config/etc/secrets/disks/boot-2 )\`" || echo "**Boot 2:** *Not configured*" )
-
+**Disk 1 Secret Key:** \`$( cat final-nix-config/etc/secrets/disks/boot-1 && echo "" )\`
+$( [[ -n "${BOOT_DISKS_ID_LIST[1]:-}" ]] && echo "**Disk 2 secret key:** \`$( cat final-nix-config/etc/secrets/disks/boot-2 )\`" && echo "" || echo "**Boot 2:** *Not configured*" && echo "" )
 **Data Disks ($CONTENT_DISK_NUMBER):**
-$( [[ $CONTENT_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq 0 $(($CONTENT_DISK_NUMBER - 1))); do echo "* **Disk ${j} secret key:** \`$( cat final-nix-config/etc/secrets/disks/data-${j} )\`" && j=$((j + 1)); done )
-$( [[ $CONTENT_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" )
-
+$( [[ $CONTENT_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq 0 $(($CONTENT_DISK_NUMBER - 1))); do echo "* **Disk ${j} secret key:** \`$( cat final-nix-config/etc/secrets/disks/data-${j} )\`" && j=$((j + 1)); done && echo "" )
+$( [[ $CONTENT_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" && echo "" )
 **Parity Disks ($PARITY_DISK_NUMBER):**
-$( [[ $PARITY_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq $CONTENT_DISK_NUMBER $((${#DATA_DISKS_ID[@]} - 1))); do echo "* **Parity ${j}:** \`$( cat final-nix-config/etc/secrets/disks/parity-${j} )\`" && j=$((j + 1)); done )
-$( [[ $PARITY_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" )
-
+$( [[ $PARITY_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq $CONTENT_DISK_NUMBER $((${#DATA_DISKS_ID[@]} - 1))); do echo "* **Parity ${j}:** \`$( cat final-nix-config/etc/secrets/disks/parity-${j} )\`" && j=$((j + 1)); done && echo "" )
+$( [[ $PARITY_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" && echo "" )
 EOF
 )
 
@@ -649,9 +703,7 @@ cloudflare_dns_setup() {
   echo -e "\n\n ☁️  Configuring Cloudflare DNS records..."
 
   SELECTED_SERVICES_DNS=()
-  for service in "${SELECTED_SERVICES[@]}"; do
-    [[ "${service}" == "virtualization" ]] && continue
-    [[ "${service}" == "clamav" ]] && continue
+  for service in "${SELECTED_WEB_APPLICATIONS[@]}"; do
     [[ "${service}" == "nextcloud" ]] && SELECTED_SERVICES_DNS+=( "onlyoffice.${DOMAIN_NAME}" "whiteboard.${DOMAIN_NAME}" )
     SELECTED_SERVICES_DNS+=( "${service}.${DOMAIN_NAME}" )
   done

From 25315a2f5d8de204969c144c4237c73905428341 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <admin@numbus.eu>
Date: Sun, 8 Mar 2026 16:06:37 +0100
Subject: [PATCH 02/43] Bugfixes. Added previous run detection.

---
 deploy.sh | 62 +++++++++++++++++++++++++++++++++----------------------
 1 file changed, 37 insertions(+), 25 deletions(-)

diff --git a/deploy.sh b/deploy.sh
index d38d7e0..0c9b14a 100644
--- a/deploy.sh
+++ b/deploy.sh
@@ -77,7 +77,7 @@ WEB_APPLICATIONS_DESCRIPTION=(
   "Nextcloud : A self-hosted productivity platform, like Google Drive & Office"
   "Passbolt: An open-source, security-first password manager for teams"
   "Uptime-Kuma : A fancy self-hosted monitoring tool"
-  "VSCodium : Run VS Code in your browser, accessible anywhere"
+  "VSCodium : An open-source version of VScode in your web browser"
 )
 SYSTEM_SERVICES_DESCRIPTION=(
   "ClamAV : An open-source anti-virus"
@@ -192,10 +192,35 @@ necessary_information_config() {
   fi
 }
 
-setup_ssh() {
-  mkdir -p final-nix-config/
+hierarchy_preparation() {
   mkdir -p final-nix-config/etc/
   mkdir -p final-nix-config/etc/nixos/
+  mkdir -p final-nix-config/etc/secrets/
+  mkdir -p final-nix-config/etc/secrets/disks/
+  mkdir -p final-nix-config/etc/nixos/secrets/
+  mkdir -p final-nix-config/var/
+  mkdir -p final-nix-config/var/lib/
+  mkdir -p final-nix-config/var/lib/sops-nix/
+  mkdir -p final-nix-config/var/lib/numbus-server/
+
+  if [[ -e final-nix-config/etc/nixos/configuration.nix ]]; then
+    gum confirm "It seems you have already run this script. Previously generated files need to be cleaned up. Proceed?" || { echo -e "\n\n❌ Aborting."; exit 1; }
+    rm -f final-nix-config/etc/nixos/*
+    rm -f final-nix-config/var/lib/sops-nix/*
+    rm -f final-nix-config/etc/nixos/secrets/*
+    rm -f final-nix-config/etc/secrets/disks/*
+    rm -f final-nix-config/var/lib/numbus-server/*
+    rm -f final-nix-config/home/numbus-admin/.ssh/*
+  fi
+
+  echo -e "\n✅ Writing configuration..."
+  cp -${FILES_COPY_FLAGS} templates/nix-config/configuration.nix final-nix-config/etc/nixos/configuration.nix
+  cp -${FILES_COPY_FLAGS} templates/nix-config/flake.nix final-nix-config/etc/nixos/flake.nix
+  export CONFIGURATION_PATH="final-nix-config/etc/nixos/configuration.nix"
+}
+
+setup_ssh() {
+  mkdir -p final-nix-config/
   mkdir -p final-nix-config/home/
   mkdir -p final-nix-config/home/numbus-admin/
   mkdir -p final-nix-config/home/numbus-admin/.ssh/
@@ -218,21 +243,6 @@ ssh_to_host() {
   ssh -i "final-nix-config/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}" "${COMMAND}"
 }
 
-hierarchy_preparation() {
-  mkdir -p final-nix-config/etc/secrets
-  mkdir -p final-nix-config/etc/secrets/disks
-  mkdir -p final-nix-config/etc/nixos/secrets
-  mkdir -p final-nix-config/var
-  mkdir -p final-nix-config/var/lib
-  mkdir -p final-nix-config/var/lib/sops-nix
-  mkdir -p final-nix-config/var/lib/numbus-server
-
-  echo -e "\n✅ Writing configuration..."
-  cp -${FILES_COPY_FLAGS} templates/nix-config/configuration.nix final-nix-config/etc/nixos/configuration.nix
-  cp -${FILES_COPY_FLAGS} templates/nix-config/flake.nix final-nix-config/etc/nixos/flake.nix
-  export CONFIGURATION_PATH="final-nix-config/etc/nixos/configuration.nix"
-}
-
 hardware_detection() {
   ### --> Get hardware information
   local TMPFILE="/tmp/nixos-installation-hardware-detection-temp-file"
@@ -293,6 +303,7 @@ for DISK in \$(lsblk -x SIZE -d -n -e 7,11 -o NAME); do
   # Disk ID
   DISK_ID+=("\$(ls -l /dev/disk/by-id | grep -m1 "../../\$DISK" | awk '{print "/dev/disk/by-id/" \$9}')")
   DISK_SIZE+=("\$(lsblk -x SIZE -d -n -e 7,11 -o SIZE /dev/\$DISK)")
+
 done
 
 echo "# Hardware detection results on \$(date)" > "${TMPFILE}"
@@ -473,8 +484,9 @@ services_config_generation() {
 
   echo -e "\n  # Services settings" >> ${CONFIGURATION_PATH}
   echo -e "  numbus.services.domain = \"${DOMAIN_NAME}\";" >> ${CONFIGURATION_PATH}
+
   i=0
-  for service in "${SELECTED_SERVICES[@]}"; do
+  for service in "${SELECTED_WEB_APPLICATIONS[@]}"; do
     if [[ -v SELECTED_WEB_APPLICATIONS_SUBDOMAIN && -n "${SELECTED_WEB_APPLICATIONS_SUBDOMAIN[${i}]}" ]]; then
       echo -e "  numbus.services.${service}.enable.subdomain = \"${SELECTED_WEB_APPLICATIONS_SUBDOMAIN[${i}]}\";" >> ${CONFIGURATION_PATH}
     fi
@@ -482,8 +494,8 @@ services_config_generation() {
     i=$((i + 1))
   done
 
-  if [[ -v SELECTED_WEB_APPLICATIONS_SUBDOMAIN && -n "$SELECTED_DNS_SERVICE" && -n "${SELECTED_WEB_APPLICATIONS_SUBDOMAIN[${i}]}" ]]; then
-    echo -e "  numbus.services.${SELECTED_DNS_SERVICE}.enable.subdomain = \"${SELECTED_WEB_APPLICATIONS_SUBDOMAIN[${i}]}\";" >> ${CONFIGURATION_PATH}
+  if [[ -v SELECTED_DNS_SERVICE_SUBDOMAIN && -n "${SELECTED_DNS_SERVICE_SUBDOMAIN[0]}" ]]; then
+    echo -e "  numbus.services.${SELECTED_DNS_SERVICE[0]}.enable.subdomain = \"${SELECTED_DNS_SERVICE_SUBDOMAIN[0]}\";" >> ${CONFIGURATION_PATH}
   fi
 
   if [[ "${TARGET_GRAPHICS_RENDERER}" == "true" ]]; then
@@ -498,10 +510,10 @@ services_config_generation() {
     HOME_ASSISTANT_DEVICES+=" \"${TARGET_ZIGBEE_DEVICE}\""
   fi
 
-  if [[ -n "${FRIGATE_DEVICES}" ]]; then
+  if [[ -n "${FRIGATE_DEVICES:-}" ]]; then
     echo -e "  numbus.services.frigate.devices = [${FRIGATE_DEVICES} ];" >> ${CONFIGURATION_PATH} 
   fi
-  if [[ -n "${HOME_ASSISTANT_DEVICES}" ]]; then
+  if [[ -n "${HOME_ASSISTANT_DEVICES:-}" ]]; then
     echo -e "  numbus.services.home-assistant.devices = [${HOME_ASSISTANT_DEVICES} ];" >> ${CONFIGURATION_PATH} 
   fi
 }
@@ -923,8 +935,8 @@ if [[ "$ACTION_ANSWER" == "[1] 🌐 Deploy NixOS on a remote machine" ]]; then
   gum confirm "Do you understand and wish to proceed?" || { echo "❌ Aborting as requested"; exit 1; }
   strictly_necessary_information
   necessary_information
-  setup_ssh
   hierarchy_preparation
+  setup_ssh
   hardware_detection
   services_selection
   disks_selection
@@ -947,8 +959,8 @@ elif [[ "$ACTION_ANSWER" == "[2] 💽 Deploy NixOS on a remote machine with a fi
               Launch a console and set up a new user password"
   gum confirm "Do you understand and wish to proceed?" || { echo "❌ Aborting as requested"; exit 1; }
   necessary_information_config
-  setup_ssh
   hierarchy_preparation
+  setup_ssh
   hardware_detection
   disks_selection
   server_config_generation

From 85c9a4c8737be858cc33d2094c343f36a490f77a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <admin@numbus.eu>
Date: Sun, 8 Mar 2026 17:03:06 +0100
Subject: [PATCH 03/43] Improved TUI.

---
 deploy.sh | 66 +++++++++++++++++++++++++++++++++++--------------------
 1 file changed, 42 insertions(+), 24 deletions(-)

diff --git a/deploy.sh b/deploy.sh
index 0c9b14a..2daa446 100644
--- a/deploy.sh
+++ b/deploy.sh
@@ -607,52 +607,70 @@ sum_up() {
 
 Please review the selected disk layout before proceeding.
 
-**Boot Disks (${#BOOT_DISKS_ID_LIST[@]}):**
+**Boot Disks ```${#BOOT_DISKS_ID_LIST[@]}``` :**
+
 * **Boot 1:** \`${BOOT_DISKS_ID_LIST[0]}\`
-$( [[ -n "${BOOT_DISKS_ID_LIST[1]:-}" ]] && echo "* **Boot 2:** \`${BOOT_DISKS_ID_LIST[1]}\`" || echo "* **Boot 2:** *Not configured*" && echo "" )
-**Data Disks ($CONTENT_DISK_NUMBER):**
-$( j=1 && for i in $(seq 0 $(($CONTENT_DISK_NUMBER - 1))); do echo "* **Data ${j}:** \`${DATA_DISKS_ID[${i}]}\`" && j=$((j + 1)); done && echo "" )
-$( [[ $CONTENT_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" && echo "" )
-**Parity Disks ($PARITY_DISK_NUMBER):**
-$( [[ $PARITY_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq $CONTENT_DISK_NUMBER $((${#DATA_DISKS_ID[@]} - 1))); do echo "* **Parity ${j}:** \`${DATA_DISKS_ID[${i}]}\`" && j=$((j + 1)); done && echo "" )
-$( [[ $PARITY_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" && echo "" )
+$( [[ -n "${BOOT_DISKS_ID_LIST[1]:-}" ]] && echo "* **Boot 2:** \`${BOOT_DISKS_ID_LIST[1]}\`" || echo "* **Boot 2:** *Not configured*" )
+
+**Data Disks ```$CONTENT_DISK_NUMBER``` :**
+
+$( [[ $CONTENT_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq 0 $(($CONTENT_DISK_NUMBER - 1))); do echo "* **Data ${j}:** \`${DATA_DISKS_ID[${i}]}\`" && j=$((j + 1)); done )
+$( [[ $CONTENT_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" )
+
+**Parity Disks ```$PARITY_DISK_NUMBER``` :**
+
+$( [[ $PARITY_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq $CONTENT_DISK_NUMBER $((${#DATA_DISKS_ID[@]} - 1))); do echo "* **Parity ${j}:** \`${DATA_DISKS_ID[${i}]}\`" && j=$((j + 1)); done )
+$( [[ $PARITY_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" )
+
 EOF
 )
 
   gum style --border normal --margin "1" --padding "1 2" --border-foreground 212 "$(gum format <<< "${DISK_RECAP_CONTENT}")"
-  gum confirm "➡️ Proceed with this disk configuration?" || { echo -e "\n\n❌ Aborting as requested."; exit 1; }
+  gum confirm "➡️  Proceed with this disk configuration?" || { echo -e "\n\n❌ Aborting as requested."; exit 1; }
 
   SERVICES_RECAP_CONTENT=$(cat << EOF
 ### Services Configuration Summary
 
 Please review the selected services before proceeding.
 
-**DNS Service :**
-$(echo "\`${SELECTED_DNS_SERVICE[0]^}\`" && echo "")
-**Web Applications :**
-$(for app in "${SELECTED_WEB_APPLICATIONS[@]}"; do echo "\`${app^}\`" && echo ""; done)
-**System Services :**
-$(for service in "${SELECTED_SYSTEM_SERVICES[@]}"; do echo "\`${service^}\`" && echo ""; done)
+**DNS Service ```${#SELECTED_DNS_SERVICE[@]}``` :**
+
+$(echo "* \`${SELECTED_DNS_SERVICE[0]^}\`")
+
+**Web Applications ```${#SELECTED_WEB_APPLICATIONS[@]}``` :**
+
+$(for app in "${SELECTED_WEB_APPLICATIONS[@]}"; do echo "* \`${app^}\`"; done)
+
+**System Services ```${#SELECTED_SYSTEM_SERVICES[@]}``` :**
+
+$(for service in "${SELECTED_SYSTEM_SERVICES[@]}"; do echo "* \`${service^}\`"; done)
+
 EOF
 )
 
   gum style --border normal --margin "1" --padding "1 2" --border-foreground 212 "$(gum format <<< "${SERVICES_RECAP_CONTENT}")"
-  gum confirm "➡️ Proceed with this services configuration?" || { echo -e "\n\n❌ Aborting as requested."; exit 1; }
+  gum confirm "➡️  Proceed with this services configuration?" || { echo -e "\n\n❌ Aborting as requested."; exit 1; }
 
   DISK_RECAP_CONTENT=$(cat << EOF
 ### Secrets Summary
 
 Please save the following secrets to a secure place (i.e. your local password manager, or a hidden sheet of paper).
 
-**Boot Disks (${#BOOT_DISKS_ID_LIST[@]}):**
-**Disk 1 Secret Key:** \`$( cat final-nix-config/etc/secrets/disks/boot-1 && echo "" )\`
-$( [[ -n "${BOOT_DISKS_ID_LIST[1]:-}" ]] && echo "**Disk 2 secret key:** \`$( cat final-nix-config/etc/secrets/disks/boot-2 )\`" && echo "" || echo "**Boot 2:** *Not configured*" && echo "" )
-**Data Disks ($CONTENT_DISK_NUMBER):**
-$( [[ $CONTENT_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq 0 $(($CONTENT_DISK_NUMBER - 1))); do echo "* **Disk ${j} secret key:** \`$( cat final-nix-config/etc/secrets/disks/data-${j} )\`" && j=$((j + 1)); done && echo "" )
-$( [[ $CONTENT_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" && echo "" )
+**Boot Disks ```${#BOOT_DISKS_ID_LIST[@]}``` :**
+
+* **Disk 1 Secret Key :** \`$( cat final-nix-config/etc/secrets/disks/boot-1 )\`
+$( [[ -n "${BOOT_DISKS_ID_LIST[1]:-}" ]] && echo "* **Disk 2 secret key :** \`$( cat final-nix-config/etc/secrets/disks/boot-2 )\`" || echo "* **Boot 2:** *Not configured*" )
+
+**Data Disks ```$CONTENT_DISK_NUMBER```:**
+
+$( [[ $CONTENT_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" )
+$( [[ $CONTENT_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq 0 $(($CONTENT_DISK_NUMBER - 1))); do echo "* **Disk ${j} Secret Key :** \`$( cat final-nix-config/etc/secrets/disks/data-${j} )\`" && j=$((j + 1)); done )
+
 **Parity Disks ($PARITY_DISK_NUMBER):**
-$( [[ $PARITY_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq $CONTENT_DISK_NUMBER $((${#DATA_DISKS_ID[@]} - 1))); do echo "* **Parity ${j}:** \`$( cat final-nix-config/etc/secrets/disks/parity-${j} )\`" && j=$((j + 1)); done && echo "" )
-$( [[ $PARITY_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" && echo "" )
+
+$( [[ $PARITY_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" )
+$( [[ $PARITY_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq $CONTENT_DISK_NUMBER $((${#DATA_DISKS_ID[@]} - 1))); do echo "* **Disk ${j} Secret Key :** \`$( cat final-nix-config/etc/secrets/disks/parity-${j} )\`" && j=$((j + 1)); done )
+
 EOF
 )
 

From 86bda53c78f0cbb29c7f9dccc375a9ecfe15ab47 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <admin@numbus.eu>
Date: Sun, 8 Mar 2026 18:22:35 +0100
Subject: [PATCH 04/43] Fixed bad rm commands.

---
 deploy.sh | 19 +++++++++----------
 1 file changed, 9 insertions(+), 10 deletions(-)

diff --git a/deploy.sh b/deploy.sh
index 2daa446..ae79098 100644
--- a/deploy.sh
+++ b/deploy.sh
@@ -193,6 +193,15 @@ necessary_information_config() {
 }
 
 hierarchy_preparation() {
+  if [[ -e final-nix-config/etc/nixos/configuration.nix || -e final-nix-config/home/numbus-admin/.ssh/id_ed25519 ]]; then
+    gum confirm "It seems you have already run this script. Previously generated files need to be cleaned up. Proceed?" || { echo -e "\n\n❌ Aborting."; exit 1; }
+    rm -rf final-nix-config/etc/nixos/*
+    rm -f final-nix-config/var/lib/sops-nix/*
+    rm -f final-nix-config/etc/secrets/disks/*
+    rm -f final-nix-config/var/lib/numbus-server/*
+    rm -f final-nix-config/home/numbus-admin/.ssh/*
+  fi
+
   mkdir -p final-nix-config/etc/
   mkdir -p final-nix-config/etc/nixos/
   mkdir -p final-nix-config/etc/secrets/
@@ -203,16 +212,6 @@ hierarchy_preparation() {
   mkdir -p final-nix-config/var/lib/sops-nix/
   mkdir -p final-nix-config/var/lib/numbus-server/
 
-  if [[ -e final-nix-config/etc/nixos/configuration.nix ]]; then
-    gum confirm "It seems you have already run this script. Previously generated files need to be cleaned up. Proceed?" || { echo -e "\n\n❌ Aborting."; exit 1; }
-    rm -f final-nix-config/etc/nixos/*
-    rm -f final-nix-config/var/lib/sops-nix/*
-    rm -f final-nix-config/etc/nixos/secrets/*
-    rm -f final-nix-config/etc/secrets/disks/*
-    rm -f final-nix-config/var/lib/numbus-server/*
-    rm -f final-nix-config/home/numbus-admin/.ssh/*
-  fi
-
   echo -e "\n✅ Writing configuration..."
   cp -${FILES_COPY_FLAGS} templates/nix-config/configuration.nix final-nix-config/etc/nixos/configuration.nix
   cp -${FILES_COPY_FLAGS} templates/nix-config/flake.nix final-nix-config/etc/nixos/flake.nix

From ade006f9e8ca19fe63858f9b0304447a78e63ee4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <admin@numbus.eu>
Date: Sun, 8 Mar 2026 18:30:40 +0100
Subject: [PATCH 05/43] Removed problematic ```

---
 deploy.sh | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/deploy.sh b/deploy.sh
index ae79098..4561f37 100644
--- a/deploy.sh
+++ b/deploy.sh
@@ -606,17 +606,17 @@ sum_up() {
 
 Please review the selected disk layout before proceeding.
 
-**Boot Disks ```${#BOOT_DISKS_ID_LIST[@]}``` :**
+**Boot Disks (${#BOOT_DISKS_ID_LIST[@]}) :**
 
 * **Boot 1:** \`${BOOT_DISKS_ID_LIST[0]}\`
 $( [[ -n "${BOOT_DISKS_ID_LIST[1]:-}" ]] && echo "* **Boot 2:** \`${BOOT_DISKS_ID_LIST[1]}\`" || echo "* **Boot 2:** *Not configured*" )
 
-**Data Disks ```$CONTENT_DISK_NUMBER``` :**
+**Data Disks ($CONTENT_DISK_NUMBER) :**
 
 $( [[ $CONTENT_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq 0 $(($CONTENT_DISK_NUMBER - 1))); do echo "* **Data ${j}:** \`${DATA_DISKS_ID[${i}]}\`" && j=$((j + 1)); done )
 $( [[ $CONTENT_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" )
 
-**Parity Disks ```$PARITY_DISK_NUMBER``` :**
+**Parity Disks ($PARITY_DISK_NUMBER) :**
 
 $( [[ $PARITY_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq $CONTENT_DISK_NUMBER $((${#DATA_DISKS_ID[@]} - 1))); do echo "* **Parity ${j}:** \`${DATA_DISKS_ID[${i}]}\`" && j=$((j + 1)); done )
 $( [[ $PARITY_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" )
@@ -632,15 +632,15 @@ EOF
 
 Please review the selected services before proceeding.
 
-**DNS Service ```${#SELECTED_DNS_SERVICE[@]}``` :**
+**DNS Service (${#SELECTED_DNS_SERVICE[@]}) :**
 
 $(echo "* \`${SELECTED_DNS_SERVICE[0]^}\`")
 
-**Web Applications ```${#SELECTED_WEB_APPLICATIONS[@]}``` :**
+**Web Applications (${#SELECTED_WEB_APPLICATIONS[@]}) :**
 
 $(for app in "${SELECTED_WEB_APPLICATIONS[@]}"; do echo "* \`${app^}\`"; done)
 
-**System Services ```${#SELECTED_SYSTEM_SERVICES[@]}``` :**
+**System Services (${#SELECTED_SYSTEM_SERVICES[@]}) :**
 
 $(for service in "${SELECTED_SYSTEM_SERVICES[@]}"; do echo "* \`${service^}\`"; done)
 
@@ -655,12 +655,12 @@ EOF
 
 Please save the following secrets to a secure place (i.e. your local password manager, or a hidden sheet of paper).
 
-**Boot Disks ```${#BOOT_DISKS_ID_LIST[@]}``` :**
+**Boot Disks (${#BOOT_DISKS_ID_LIST[@]}) :**
 
 * **Disk 1 Secret Key :** \`$( cat final-nix-config/etc/secrets/disks/boot-1 )\`
 $( [[ -n "${BOOT_DISKS_ID_LIST[1]:-}" ]] && echo "* **Disk 2 secret key :** \`$( cat final-nix-config/etc/secrets/disks/boot-2 )\`" || echo "* **Boot 2:** *Not configured*" )
 
-**Data Disks ```$CONTENT_DISK_NUMBER```:**
+**Data Disks ($CONTENT_DISK_NUMBER):**
 
 $( [[ $CONTENT_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" )
 $( [[ $CONTENT_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq 0 $(($CONTENT_DISK_NUMBER - 1))); do echo "* **Disk ${j} Secret Key :** \`$( cat final-nix-config/etc/secrets/disks/data-${j} )\`" && j=$((j + 1)); done )

From 888c87257f77deae85de3f10996594cb477179b0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <admin@numbus.eu>
Date: Sun, 8 Mar 2026 18:32:11 +0100
Subject: [PATCH 06/43] Fixed `cat: final-nix-config/etc/secrets/disks/data-1:
 No such file or directory`

---
 deploy.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/deploy.sh b/deploy.sh
index 4561f37..734328d 100644
--- a/deploy.sh
+++ b/deploy.sh
@@ -663,7 +663,7 @@ $( [[ -n "${BOOT_DISKS_ID_LIST[1]:-}" ]] && echo "* **Disk 2 secret key :** \`$(
 **Data Disks ($CONTENT_DISK_NUMBER):**
 
 $( [[ $CONTENT_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" )
-$( [[ $CONTENT_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq 0 $(($CONTENT_DISK_NUMBER - 1))); do echo "* **Disk ${j} Secret Key :** \`$( cat final-nix-config/etc/secrets/disks/data-${j} )\`" && j=$((j + 1)); done )
+$( [[ $CONTENT_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq 0 $(($CONTENT_DISK_NUMBER - 1))); do echo "* **Disk ${j} Secret Key :** \`$( cat final-nix-config/etc/secrets/disks/content-${j} )\`" && j=$((j + 1)); done )
 
 **Parity Disks ($PARITY_DISK_NUMBER):**
 

From 0238c29f12426341e7b105f28bf7718dd79d0487 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <admin@numbus.eu>
Date: Sun, 8 Mar 2026 21:45:03 +0100
Subject: [PATCH 07/43] Fixed DNS records

---
 LICENSE   |  4 ++--
 deploy.sh | 20 +++++++++++++++-----
 2 files changed, 17 insertions(+), 7 deletions(-)

diff --git a/LICENSE b/LICENSE
index 5f6bcbc..b3a8aef 100644
--- a/LICENSE
+++ b/LICENSE
@@ -209,7 +209,7 @@ If you develop a new program, and you want it to be of the greatest possible use
 To do so, attach the following notices to the program. It is safest to attach them to the start of each source file to most effectively state the exclusion of warranty; and each file should have at least the “copyright” line and a pointer to where the full notice is found.
 
      numbus-server
-     Copyright (C) 2025  raphael
+     Copyright (C) 2025  Raphaël Billet
 
      This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
 
@@ -221,7 +221,7 @@ Also add information on how to contact you by electronic and paper mail.
 
 If the program does terminal interaction, make it output a short notice like this when it starts in an interactive mode:
 
-     numbus-server  Copyright (C) 2025  raphael
+     numbus-server  Copyright (C) 2025  Raphaël Billet
      This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
      This is free software, and you are welcome to redistribute it under certain conditions; type `show c' for details.
 
diff --git a/deploy.sh b/deploy.sh
index 734328d..89068a2 100644
--- a/deploy.sh
+++ b/deploy.sh
@@ -609,7 +609,7 @@ Please review the selected disk layout before proceeding.
 **Boot Disks (${#BOOT_DISKS_ID_LIST[@]}) :**
 
 * **Boot 1:** \`${BOOT_DISKS_ID_LIST[0]}\`
-$( [[ -n "${BOOT_DISKS_ID_LIST[1]:-}" ]] && echo "* **Boot 2:** \`${BOOT_DISKS_ID_LIST[1]}\`" || echo "* **Boot 2:** *Not configured*" )
+$( [[ -n "${BOOT_DISKS_ID_LIST[1]:-}" ]] && echo "* **Boot 2:** \`${BOOT_DISKS_ID_LIST[1]}\`" )
 
 **Data Disks ($CONTENT_DISK_NUMBER) :**
 
@@ -658,7 +658,7 @@ Please save the following secrets to a secure place (i.e. your local password ma
 **Boot Disks (${#BOOT_DISKS_ID_LIST[@]}) :**
 
 * **Disk 1 Secret Key :** \`$( cat final-nix-config/etc/secrets/disks/boot-1 )\`
-$( [[ -n "${BOOT_DISKS_ID_LIST[1]:-}" ]] && echo "* **Disk 2 secret key :** \`$( cat final-nix-config/etc/secrets/disks/boot-2 )\`" || echo "* **Boot 2:** *Not configured*" )
+$( [[ -n "${BOOT_DISKS_ID_LIST[1]:-}" ]] && echo "* **Disk 2 secret key :** \`$( cat final-nix-config/etc/secrets/disks/boot-2 )\`" )
 
 **Data Disks ($CONTENT_DISK_NUMBER):**
 
@@ -731,12 +731,22 @@ cloudflare_dns_setup() {
 
   echo -e "\n\n ☁️  Configuring Cloudflare DNS records..."
 
-  SELECTED_SERVICES_DNS=()
+  i=0
   for service in "${SELECTED_WEB_APPLICATIONS[@]}"; do
+    if [[ -n "${SELECTED_WEB_APPLICATION_SUBDOMAIN[${i}]:-}" ]]; then
+      SELECTED_SERVICES_DNS+=( "${SELECTED_WEB_APPLICATION_SUBDOMAIN[${i}]}.${DOMAIN_NAME}" )
+    else
+      SELECTED_SERVICES_DNS+=( "${service}.${DOMAIN_NAME}" )
+    fi
+    i=$((i + 1))
     [[ "${service}" == "nextcloud" ]] && SELECTED_SERVICES_DNS+=( "onlyoffice.${DOMAIN_NAME}" "whiteboard.${DOMAIN_NAME}" )
-    SELECTED_SERVICES_DNS+=( "${service}.${DOMAIN_NAME}" )
   done
-  SELECTED_SERVICES_DNS+=( "${SELECTED_DNS_SERVICE}.${DOMAIN_NAME}" )
+
+  if [[ -n "${SELECTED_DNS_SERVICE_SUBDOMAIN[0]:-}" ]]; then
+    SELECTED_SERVICES_DNS+=( "${SELECTED_DNS_SERVICE_SUBDOMAIN[0]}.${DOMAIN_NAME}" )
+  else
+    SELECTED_SERVICES_DNS+=( "${SELECTED_DNS_SERVICE}.${DOMAIN_NAME}" )
+  fi
 
   # Get Zone ID
   ZONE_ID=$(curl -s -X GET "https://api.cloudflare.com/client/v4/zones?name=${DOMAIN_NAME}" \

From de04960d55344385717cba05bf3ff8a6ad982b3a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <admin@numbus.eu>
Date: Sun, 8 Mar 2026 21:51:18 +0100
Subject: [PATCH 08/43] Fixed typo.

---
 deploy.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/deploy.sh b/deploy.sh
index 89068a2..43f644a 100644
--- a/deploy.sh
+++ b/deploy.sh
@@ -733,8 +733,8 @@ cloudflare_dns_setup() {
 
   i=0
   for service in "${SELECTED_WEB_APPLICATIONS[@]}"; do
-    if [[ -n "${SELECTED_WEB_APPLICATION_SUBDOMAIN[${i}]:-}" ]]; then
-      SELECTED_SERVICES_DNS+=( "${SELECTED_WEB_APPLICATION_SUBDOMAIN[${i}]}.${DOMAIN_NAME}" )
+    if [[ -n "${SELECTED_WEB_APPLICATIONS_SUBDOMAIN[${i}]:-}" ]]; then
+      SELECTED_SERVICES_DNS+=( "${SELECTED_WEB_APPLICATIONS_SUBDOMAIN[${i}]}.${DOMAIN_NAME}" )
     else
       SELECTED_SERVICES_DNS+=( "${service}.${DOMAIN_NAME}" )
     fi

From 3d3154f25fa012f8142c7b5757d5a9e8d3c5a5e2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <admin@numbus.eu>
Date: Sun, 8 Mar 2026 21:56:55 +0100
Subject: [PATCH 09/43] Fixed typo

---
 deploy.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/deploy.sh b/deploy.sh
index 43f644a..90240dd 100644
--- a/deploy.sh
+++ b/deploy.sh
@@ -487,14 +487,14 @@ services_config_generation() {
   i=0
   for service in "${SELECTED_WEB_APPLICATIONS[@]}"; do
     if [[ -v SELECTED_WEB_APPLICATIONS_SUBDOMAIN && -n "${SELECTED_WEB_APPLICATIONS_SUBDOMAIN[${i}]}" ]]; then
-      echo -e "  numbus.services.${service}.enable.subdomain = \"${SELECTED_WEB_APPLICATIONS_SUBDOMAIN[${i}]}\";" >> ${CONFIGURATION_PATH}
+      echo -e "  numbus.services.${service}.subdomain = \"${SELECTED_WEB_APPLICATIONS_SUBDOMAIN[${i}]}\";" >> ${CONFIGURATION_PATH}
     fi
     echo -e "  numbus.services.${service}.enable = true;" >> ${CONFIGURATION_PATH}
     i=$((i + 1))
   done
 
   if [[ -v SELECTED_DNS_SERVICE_SUBDOMAIN && -n "${SELECTED_DNS_SERVICE_SUBDOMAIN[0]}" ]]; then
-    echo -e "  numbus.services.${SELECTED_DNS_SERVICE[0]}.enable.subdomain = \"${SELECTED_DNS_SERVICE_SUBDOMAIN[0]}\";" >> ${CONFIGURATION_PATH}
+    echo -e "  numbus.services.${SELECTED_DNS_SERVICE[0]}.subdomain = \"${SELECTED_DNS_SERVICE_SUBDOMAIN[0]}\";" >> ${CONFIGURATION_PATH}
   fi
 
   if [[ "${TARGET_GRAPHICS_RENDERER}" == "true" ]]; then

From 99d19af39a488a1ee66fe10bb58a652e580e98de Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <admin@numbus.eu>
Date: Fri, 13 Mar 2026 11:37:53 +0100
Subject: [PATCH 10/43] Huge update to organization. Added future numbus
 projects.

---
 README.md                                     | 113 +++++++++++++-----
 deploy.sh                                     | 107 ++++++++++++++---
 numbus-backup-server.conf                     |   0
 numbus-computer.conf                          |   0
 deploy.conf => numbus-server.conf             |   0
 numbus-tv.conf                                |   0
 .../configuration.nix                         |   6 +-
 .../flake.nix                                 |   2 +-
 .../sops-nix/.sops.yaml                       |   0
 .../sops-nix/secrets.yaml                     |   0
 templates/numbus-computer/configuration.nix   |  18 +++
 templates/numbus-computer/flake.nix           |  48 ++++++++
 templates/numbus-computer/sops-nix/.sops.yaml |   9 ++
 .../numbus-computer/sops-nix/secrets.yaml     |   2 +
 templates/numbus-server/configuration.nix     |  20 ++++
 templates/numbus-server/flake.nix             |  48 ++++++++
 templates/numbus-server/sops-nix/.sops.yaml   |   9 ++
 templates/numbus-server/sops-nix/secrets.yaml |   4 +
 templates/numbus-tv/configuration.nix         |  18 +++
 templates/numbus-tv/flake.nix                 |  48 ++++++++
 templates/numbus-tv/sops-nix/.sops.yaml       |   9 ++
 templates/numbus-tv/sops-nix/secrets.yaml     |   2 +
 22 files changed, 414 insertions(+), 49 deletions(-)
 create mode 100644 numbus-backup-server.conf
 create mode 100644 numbus-computer.conf
 rename deploy.conf => numbus-server.conf (100%)
 create mode 100644 numbus-tv.conf
 rename templates/{nix-config => numbus-backup-server}/configuration.nix (86%)
 rename templates/{nix-config => numbus-backup-server}/flake.nix (95%)
 rename templates/{nix-config => numbus-backup-server}/sops-nix/.sops.yaml (100%)
 rename templates/{nix-config => numbus-backup-server}/sops-nix/secrets.yaml (100%)
 create mode 100644 templates/numbus-computer/configuration.nix
 create mode 100644 templates/numbus-computer/flake.nix
 create mode 100644 templates/numbus-computer/sops-nix/.sops.yaml
 create mode 100644 templates/numbus-computer/sops-nix/secrets.yaml
 create mode 100644 templates/numbus-server/configuration.nix
 create mode 100644 templates/numbus-server/flake.nix
 create mode 100644 templates/numbus-server/sops-nix/.sops.yaml
 create mode 100644 templates/numbus-server/sops-nix/secrets.yaml
 create mode 100644 templates/numbus-tv/configuration.nix
 create mode 100644 templates/numbus-tv/flake.nix
 create mode 100644 templates/numbus-tv/sops-nix/.sops.yaml
 create mode 100644 templates/numbus-tv/sops-nix/secrets.yaml

diff --git a/README.md b/README.md
index bbdf194..3cf6680 100644
--- a/README.md
+++ b/README.md
@@ -1,54 +1,109 @@
-# ☁️ Numbus Server: Your Personal Cloud, Simplified 🚀
+# ☁️ Welcome to Numbus 🚀
 
-Welcome to the **Numbus Server** project! This repository provides a complete NixOS configuration to deploy a personal home server with a rich set of services in minutes. Our goal is to make self-hosting accessible to everyone, allowing you to take back control of your data with a solution that is easy to manage and highly reliable.
-
-## ✨ Features
-
--   🌐 **Free & Open-Source:** Built with transparency and community collaboration in mind.
--   🚀 **Easy Deployment:** Get your server up and running in minutes with a single command.
--   🛠️ **Set & Forget:** A highly reliable, low-maintenance solution.
--   🔒 **Secure by Design:** Strong security practices are at the core of our configuration.
--   📦 **Popular Services:** Access a wide range of popular, pre-configured services.
--   ⚙️ **Declarative & Reproducible:** Thanks to NixOS, your system configuration is entirely declarative, ensuring reproducibility and easy maintenance.
-
-## 🛠️ Key Technologies
-
--   **NixOS:** A declarative Linux distribution that makes system management a breeze.
--   **Nix Flakes:** For reproducible builds and dependency management.
--   **Docker & Docker Compose:** To run containerized services with ease.
--   **Traefik:** A modern reverse proxy for securely exposing services.
--   **Sops-nix:** For secure and convenient management of secrets.
--   **NixOS-anywhere:** For seamless initial deployment to any machine.
--   **Disko:** For declarative and predictable disk partitioning.
+Welcome to the **Numbus Server** project! This repository provides a complete selection of highly customizable NixOS configurations to deploy **home servers**, **backup servers**, **computers**, **TVs** in an automated manner. Deploy devices in hours instead of days !
 
 ## 🚀 Getting Started
 
-The entire deployment process is automated with the `deploy.sh` script. This script dynamically adapts the configuration to your hardware, network environment, and secrets.
+The entire deployment process is automated around a bash script. It helps to dynamically adapt the configuration to your hardware, network environment, and secrets.
 
-**1. Clone the Repository:**
+### Requirements :
+#### For numbus-server :
+-   A NixOS-based machine to deploy from
+-   A NixOS-based live machine to deploy to
+-   An email address with automated mail sending support
+-   A valid, public domain name
+
+
+#### For numbus-backup-server :
+-   A NixOS-based machine to deploy from
+-   A NixOS-based live machine to deploy to
+-   An email address with automated mail sending support
+-   A valid domain name
+
+#### For numbus-computer :
+-   A NixOS-based machine to deploy from
+-   A NixOS-based live machine to deploy to
+
+#### For numbus-tv :
+-   A NixOS-based machine to deploy from
+-   A NixOS-based live machine to deploy to
+
+### On your Nix-based machine :
+
+**1. Clone the Repository :**
 
 ```bash
-git clone https://git.numbus.eu/raphael/numbus-server.git
-cd numbus-server
+git clone https://git.numbus.eu/raphael/numbus.git
+cd numbus
 ```
 
-**2. Run the Deployment Script:**
+**2. (Optional) Fill in the configuration file :**
+
+This step is globally recommended as it reduces the risks of typos in the credentials. It also is better suited for repeated deployments to multiple machines.
+
+```bash
+nano $your_choosed_device.conf
+```
+
+Example: if you want to deploy a server
+
+```bash
+nano numbus-server.conf
+```
+
+**3. Run the Deployment Script :**
 
 ```bash
 ./deploy.sh
 ```
 
-**3. Follow the Prompts:**
+**4. Follow the script's Prompts :**
+
+> If you followed **step 2**, then choose non-interactive mode.
+
+> If you skipped **step 2**, then choose interactive mode.
 
 The script will guide you through the setup process, including choosing a deployment mode and providing the necessary information. Once completed, the script will:
 
 -   Adapt the configuration to your machine.
 -   Generate SSH and `sops` keys.
 -   Encrypt secrets for secure storage.
--   Generate configuration files for Docker services.
--   Deploy the NixOS configuration using `nixos-anywhere`.
+-   Generate configuration files for Podman services.
+-   Deploy the NixOS configuration to the remote using `nixos-anywhere`.
 -   Verify the deployment and guide you through the final setup of the web UIs.
 
+## ✨ Features
+
+-   🌐 **Free & Open-Source :** Built with transparency and community collaboration in mind.
+-   🚀 **Easy Deployment :** Get your server up and running in minutes with a single command.
+-   🛠️ **Set & Forget :** A highly reliable, low-maintenance solution.
+-   🔒 **Secure by Design :** Strong security practices are at the core of our configuration.
+-   📦 **Popular Services :** Access a wide range of popular, pre-configured services.
+-   ⚙️ **Declarative & Reproducible :** Thanks to NixOS, your system configuration is entirely declarative, ensuring reproducibility and easy maintenance.
+
+## 🛠️ Key Technologies
+
+#### Global project :
+-   **[NixOS](https://nixos.org):** A declarative Linux distribution that makes system management a breeze.
+-   **[Nix Flakes](https://wiki.nixos.org/wiki/Flakes):** For reproducible builds and dependency management.
+-   **[Sops-nix](https://github.com/Mic92/sops-nix):** For secure and convenient management of secrets.
+-   **[NixOS-anywhere](https://github.com/nix-community/nixos-anywhere):** For seamless initial deployment to any machine.
+-   **[Disko](https://github.com/nix-community/disko):** For declarative and predictable disk partitioning.
+
+#### Server-centric features :
+-   **[SnapRAID](https://www.snapraid.it):** Keep your data safe.
+-   **[Qemu/KVM](https://www.qemu.org):** Run virtual with near-native performance.
+-   **[Podman](https://podman.io):** Run rootless, containerized services with ease.
+-   **[Traefik](https://traefik.io/traefik):** A modern reverse proxy for securely exposing services.
+
+#### Desktop-centric features :
+-   **[GNOME](https://www.gnome.org):** A modern, elegant desktop environment.
+-   **[KDE Plasma](https://kde.org):** A full-featured and highly customizable desktop environment.
+
+#### TV-centric features :
+-   **[KDE Plasma Bigscreen](https://plasma-bigscreen.org):** An open-source TV interface for Linux.
+
+
 ## 🔧 Deployment Modes
 
 The `deploy.sh` script offers three modes to suit your needs:
diff --git a/deploy.sh b/deploy.sh
index 90240dd..db9a546 100644
--- a/deploy.sh
+++ b/deploy.sh
@@ -7,21 +7,20 @@ export GUM_SPIN_SPINNER_BOLD=true
 export GUM_SPIN_SHOW_ERROR=true
 export GUM_SPIN_TITLE_BOLD=true
 
-NECESSARY_VARIABLES_LIST=(
+NECESSARY_BACKUP_SERVER_VARIABLES_LIST=(
   #LIVE TARGET SETTINGS
   LIVE_TARGET_IP
   LIVE_TARGET_PASSWD
   #SERVER SETTINGS
-  LANGUAGE
-  LOCALE
-  TIMEZONE
+  SERVER_LANGUAGE
+  SERVER_LOCALE
+  SERVER_TIMEZONE
   SERVER_OWNER_NAME
   SERVER_USER_EMAIL
   SERVER_ADMIN_EMAIL
-  AUTHORIZED_SSH_PUBLIC_KEY
+  SERVER_AUTHORIZED_SSH_PUBKEYS
   # TRAEFIK SETTINGS
-  DOMAIN_NAME
-  CLOUDFLARE_DNS_API_TOKEN
+  TRAEFIK_CLOUDFLARE_TOKEN
   # SMTP SETTINGS
   SMTP_SERVER_USERNAME
   SMTP_SERVER_PASSWORD
@@ -30,11 +29,83 @@ NECESSARY_VARIABLES_LIST=(
   #NETWORK SETTINGS
   NETWORK_SUBNET
   NETWORK_ROUTER_IP
-  HOME_SERVER_IP
+  NETWORK_HOME_SERVER_IP
   # SERVICES SETTINGS
-  SELECTED_DNS_SERVICE
-  SELECTED_WEB_APPLICATIONS
-  SELECTED_SYSTEM_SERVICES
+  SERVICES_DOMAIN_NAME
+  SERVICES_SELECTED_SYSTEM
+  SERVICES_SELECTED_WEB_APPLICATIONS
+)
+
+NECESSARY_COMPUTER_VARIABLES_LIST=(
+  #LIVE TARGET SETTINGS
+  LIVE_TARGET_IP
+  LIVE_TARGET_PASSWD
+  #COMPUTER SETTINGS
+  COMPUTER_LANGUAGE
+  COMPUTER_LOCALE
+  COMPUTER_TIMEZONE
+  COMPUTER_OWNER_NAME
+  COMPUTER_USER_EMAIL
+  COMPUTER_ADMIN_EMAIL
+  COMPUTER_AUTHORIZED_SSH_PUBKEYS
+  #NETWORK SETTINGS
+  NETWORK_SUBNET
+  NETWORK_ROUTER_IP
+  NETWORK_HOME_COMPUTER_IP
+  # SERVICES SETTINGS
+  SERVICES_SELECTED_SYSTEM
+  SERVICES_SELECTED_APPLICATIONS
+)
+
+NECESSARY_SERVER_VARIABLES_LIST=(
+  #LIVE TARGET SETTINGS
+  LIVE_TARGET_IP
+  LIVE_TARGET_PASSWD
+  #SERVER SETTINGS
+  SERVER_LANGUAGE
+  SERVER_LOCALE
+  SERVER_TIMEZONE
+  SERVER_OWNER_NAME
+  SERVER_USER_EMAIL
+  SERVER_ADMIN_EMAIL
+  SERVER_AUTHORIZED_SSH_PUBKEYS
+  # TRAEFIK SETTINGS
+  TRAEFIK_CLOUDFLARE_TOKEN
+  # SMTP SETTINGS
+  SMTP_SERVER_USERNAME
+  SMTP_SERVER_PASSWORD
+  SMTP_SERVER_HOST
+  SMTP_SERVER_PORT
+  #NETWORK SETTINGS
+  NETWORK_SUBNET
+  NETWORK_ROUTER_IP
+  NETWORK_HOME_SERVER_IP
+  # SERVICES SETTINGS
+  SERVICES_DOMAIN_NAME
+  SERVICES_SELECTED_DNS
+  SERVICES_SELECTED_SYSTEM
+  SERVICES_SELECTED_WEB_APPLICATIONS
+)
+
+NECESSARY_TV_VARIABLES_LIST=(
+  #LIVE TARGET SETTINGS
+  LIVE_TARGET_IP
+  LIVE_TARGET_PASSWD
+  #TV SETTINGS
+  TV_LANGUAGE
+  TV_LOCALE
+  TV_TIMEZONE
+  TV_OWNER_NAME
+  TV_USER_EMAIL
+  TV_ADMIN_EMAIL
+  TV_AUTHORIZED_SSH_PUBKEYS
+  #NETWORK SETTINGS
+  NETWORK_SUBNET
+  NETWORK_ROUTER_IP
+  NETWORK_HOME_TV_IP
+  # SERVICES SETTINGS
+  SERVICES_SELECTED_SYSTEM
+  SERVICES_SELECTED_WEB_APPLICATIONS
 )
 
 # Available services
@@ -42,6 +113,7 @@ DNS_SERVICES_LIST=(
   "pi-hole"
   "adguard"
 )
+
 WEB_APPLICATIONS_LIST=(
   "crafty"
   "frigate"
@@ -56,15 +128,18 @@ WEB_APPLICATIONS_LIST=(
   "uptime-kuma"
   "vscodium"
 )
+
 SYSTEM_SERVICES_LIST=(
   "clamav"
   "virtualization"
 )
+
 # Services descriptions
 DNS_SERVICES_DESCRIPTION=(
   "Pi-Hole : Simple open-source DNS black hole"
   "AdGuard : Feature rich DNS service"
 )
+
 WEB_APPLICATIONS_DESCRIPTION=(
   "Crafty : A web-based control panel for Minecraft servers"
   "Frigate [Home Assistant required] : AI-powered NVR for smart security cameras"
@@ -79,6 +154,7 @@ WEB_APPLICATIONS_DESCRIPTION=(
   "Uptime-Kuma : A fancy self-hosted monitoring tool"
   "VSCodium : An open-source version of VScode in your web browser"
 )
+
 SYSTEM_SERVICES_DESCRIPTION=(
   "ClamAV : An open-source anti-virus"
   "Virtualization : Run Virtual Machines (KVM/QEMU) with Libvirt"
@@ -162,13 +238,16 @@ necessary_information() {
   user_input "HOME_SERVER_IP" "  Please choose the ip address that your server will use (i.e. any address in the 192.168.1.1/24 range that is not in use.) :" "For example 192.168.1.5" "${IP_REGEX}" "Invalid IP address format."
 }
 
-necessary_information_config() {
+import_variables() {
+  VARIABLES_LIST="${1}"
+  NECESSARY="${2:-false}"
+
   echo -e "\n\n➡️  Please choose your configuration file :"
   local CONFIG_PATH="$(gum file)"
 
   source "${CONFIG_PATH}"
   local MISSING=0
-  for VAR in "${NECESSARY_VARIABLES_LIST[@]}"; do
+  for VAR in "${VARIABLES_LIST[@]}"; do
       if [[ -v "${VAR}" && -n "${!VAR}" ]]; then
         gum style "✅ "${VAR}" imported successfully from the config file"
       else
@@ -985,7 +1064,7 @@ elif [[ "$ACTION_ANSWER" == "[2] 💽 Deploy NixOS on a remote machine with a fi
   gum style --border normal --margin "1" --padding "1 2" --border-foreground 212 "➡️  On the target host : start the computer and boot into the NixOS iso.
               Launch a console and set up a new user password"
   gum confirm "Do you understand and wish to proceed?" || { echo "❌ Aborting as requested"; exit 1; }
-  necessary_information_config
+  import_variables
   hierarchy_preparation
   setup_ssh
   hardware_detection
diff --git a/numbus-backup-server.conf b/numbus-backup-server.conf
new file mode 100644
index 0000000..e69de29
diff --git a/numbus-computer.conf b/numbus-computer.conf
new file mode 100644
index 0000000..e69de29
diff --git a/deploy.conf b/numbus-server.conf
similarity index 100%
rename from deploy.conf
rename to numbus-server.conf
diff --git a/numbus-tv.conf b/numbus-tv.conf
new file mode 100644
index 0000000..e69de29
diff --git a/templates/nix-config/configuration.nix b/templates/numbus-backup-server/configuration.nix
similarity index 86%
rename from templates/nix-config/configuration.nix
rename to templates/numbus-backup-server/configuration.nix
index 3f496df..a519138 100644
--- a/templates/nix-config/configuration.nix
+++ b/templates/numbus-backup-server/configuration.nix
@@ -17,8 +17,4 @@
   # Secrets
   sops.secrets."authorizedSshPublicKeys" = { owner = "numbus-admin"; path = "/home/numbus-admin/.ssh/authorized_keys"; mode = "0600"; };
   sops.secrets."smtpPassword" = { owner = "numbus-admin"; mode = "0600"; };
-  sops.secrets."cloudflareDnsApiToken" = { owner = "numbus-admin"; mode = "0600"; };
-
-#  # TPM2 PCR check
-#  systemIdentity.enable = true;
-#  systemIdentity.pcr15 = "PCR_HASH"; 
\ No newline at end of file
+  sops.secrets."cloudflareDnsApiToken" = { owner = "numbus-admin"; mode = "0600"; };
\ No newline at end of file
diff --git a/templates/nix-config/flake.nix b/templates/numbus-backup-server/flake.nix
similarity index 95%
rename from templates/nix-config/flake.nix
rename to templates/numbus-backup-server/flake.nix
index 9763186..0db377a 100644
--- a/templates/nix-config/flake.nix
+++ b/templates/numbus-backup-server/flake.nix
@@ -3,7 +3,7 @@
     # Core Nixpkgs
     nixpkgs.url = "github:NixOS/nixpkgs/nixos-25.11";
     # Numbus server configuration
-    numbus.url = "git+https://gittea.dev/numbus/numbus-server-module";
+    numbus.url = "git+https://gittea.dev/numbus/numbus-backup-server";
     numbus.inputs.nixpkgs.follows = "nixpkgs";
     # Disk-partitioning helper
     disko.url = "github:nix-community/disko";
diff --git a/templates/nix-config/sops-nix/.sops.yaml b/templates/numbus-backup-server/sops-nix/.sops.yaml
similarity index 100%
rename from templates/nix-config/sops-nix/.sops.yaml
rename to templates/numbus-backup-server/sops-nix/.sops.yaml
diff --git a/templates/nix-config/sops-nix/secrets.yaml b/templates/numbus-backup-server/sops-nix/secrets.yaml
similarity index 100%
rename from templates/nix-config/sops-nix/secrets.yaml
rename to templates/numbus-backup-server/sops-nix/secrets.yaml
diff --git a/templates/numbus-computer/configuration.nix b/templates/numbus-computer/configuration.nix
new file mode 100644
index 0000000..f42b219
--- /dev/null
+++ b/templates/numbus-computer/configuration.nix
@@ -0,0 +1,18 @@
+{ modulesPath, config, pkgs, inputs, ... }:
+
+{
+  imports = [
+    (modulesPath + "/installer/scan/not-detected.nix")
+    (modulesPath + "/profiles/qemu-guest.nix")
+    inputs.sops-nix.nixosModules.sops
+  ];
+
+  # System
+  system.stateVersion = "25.11";
+
+  # Secrets management
+  sops.defaultSopsFile = ./secrets/secrets.yaml;
+  sops.age.sshKeyPaths = [ "/home/numbus-admin/.ssh/id_ed25519" ];
+  sops.age.keyFile = "/var/lib/sops-nix/key.txt";
+  # Secrets
+  sops.secrets."authorizedSshPublicKeys" = { owner = "numbus-admin"; path = "/home/numbus-admin/.ssh/authorized_keys"; mode = "0600"; };
\ No newline at end of file
diff --git a/templates/numbus-computer/flake.nix b/templates/numbus-computer/flake.nix
new file mode 100644
index 0000000..9b319b0
--- /dev/null
+++ b/templates/numbus-computer/flake.nix
@@ -0,0 +1,48 @@
+{
+  inputs = {
+    # Core Nixpkgs
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-25.11";
+    # Numbus server configuration
+    numbus.url = "git+https://gittea.dev/numbus/numbus-computer";
+    numbus.inputs.nixpkgs.follows = "nixpkgs";
+    # Disk-partitioning helper
+    disko.url = "github:nix-community/disko";
+    disko.inputs.nixpkgs.follows = "nixpkgs";
+    # Secrets handling
+    sops-nix.url = "github:Mic92/sops-nix";
+    sops-nix.inputs.nixpkgs.follows = "nixpkgs";
+    # Power savings
+    autoaspm.url = "git+https://git.notthebe.ee/notthebee/AutoASPM";
+    autoaspm.inputs.nixpkgs.follows = "nixpkgs";
+  };
+
+  outputs = { self, nixpkgs, numbus, disko, sops-nix, autoaspm, ... }@inputs: let
+    # System definition
+    system = "x86_64-linux";
+    pkgs = import nixpkgs {
+      inherit system;
+      config.allowUnfree = true;
+    };
+  in 
+  {
+    nixosConfigurations = {
+      numbus-server = nixpkgs.lib.nixosSystem {
+        inherit system;
+        specialArgs = { inherit inputs; };
+        modules = [
+          # Numbus server configuration
+          numbus.nixosModules.numbus
+          # Disk-partitioning helper
+          disko.nixosModules.disko
+          # Secrets handling
+          sops-nix.nixosModules.sops
+          # Power savings
+          autoaspm.nixosModules.autoaspm
+          # Core host configuration
+          ./configuration.nix
+          ./hardware-configuration.nix
+        ];
+      };
+    };
+  };
+}
diff --git a/templates/numbus-computer/sops-nix/.sops.yaml b/templates/numbus-computer/sops-nix/.sops.yaml
new file mode 100644
index 0000000..de69314
--- /dev/null
+++ b/templates/numbus-computer/sops-nix/.sops.yaml
@@ -0,0 +1,9 @@
+# .sops.yaml
+
+keys:
+  - &primary $SOPS_PUBLIC_KEY
+creation_rules:
+  - path_regex: secrets/secrets.yaml$
+    key_groups:
+    - age:
+      - *primary
\ No newline at end of file
diff --git a/templates/numbus-computer/sops-nix/secrets.yaml b/templates/numbus-computer/sops-nix/secrets.yaml
new file mode 100644
index 0000000..68bd283
--- /dev/null
+++ b/templates/numbus-computer/sops-nix/secrets.yaml
@@ -0,0 +1,2 @@
+authorizedSshPublicKeys: |
+$SSH_KEYS_FORMATTED
\ No newline at end of file
diff --git a/templates/numbus-server/configuration.nix b/templates/numbus-server/configuration.nix
new file mode 100644
index 0000000..a519138
--- /dev/null
+++ b/templates/numbus-server/configuration.nix
@@ -0,0 +1,20 @@
+{ modulesPath, config, pkgs, inputs, ... }:
+
+{
+  imports = [
+    (modulesPath + "/installer/scan/not-detected.nix")
+    (modulesPath + "/profiles/qemu-guest.nix")
+    inputs.sops-nix.nixosModules.sops
+  ];
+
+  # System
+  system.stateVersion = "25.11";
+
+  # Secrets management
+  sops.defaultSopsFile = ./secrets/secrets.yaml;
+  sops.age.sshKeyPaths = [ "/home/numbus-admin/.ssh/id_ed25519" ];
+  sops.age.keyFile = "/var/lib/sops-nix/key.txt";
+  # Secrets
+  sops.secrets."authorizedSshPublicKeys" = { owner = "numbus-admin"; path = "/home/numbus-admin/.ssh/authorized_keys"; mode = "0600"; };
+  sops.secrets."smtpPassword" = { owner = "numbus-admin"; mode = "0600"; };
+  sops.secrets."cloudflareDnsApiToken" = { owner = "numbus-admin"; mode = "0600"; };
\ No newline at end of file
diff --git a/templates/numbus-server/flake.nix b/templates/numbus-server/flake.nix
new file mode 100644
index 0000000..0296512
--- /dev/null
+++ b/templates/numbus-server/flake.nix
@@ -0,0 +1,48 @@
+{
+  inputs = {
+    # Core Nixpkgs
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-25.11";
+    # Numbus server configuration
+    numbus.url = "git+https://gittea.dev/numbus/numbus-server";
+    numbus.inputs.nixpkgs.follows = "nixpkgs";
+    # Disk-partitioning helper
+    disko.url = "github:nix-community/disko";
+    disko.inputs.nixpkgs.follows = "nixpkgs";
+    # Secrets handling
+    sops-nix.url = "github:Mic92/sops-nix";
+    sops-nix.inputs.nixpkgs.follows = "nixpkgs";
+    # Power savings
+    autoaspm.url = "git+https://git.notthebe.ee/notthebee/AutoASPM";
+    autoaspm.inputs.nixpkgs.follows = "nixpkgs";
+  };
+
+  outputs = { self, nixpkgs, numbus, disko, sops-nix, autoaspm, ... }@inputs: let
+    # System definition
+    system = "x86_64-linux";
+    pkgs = import nixpkgs {
+      inherit system;
+      config.allowUnfree = true;
+    };
+  in 
+  {
+    nixosConfigurations = {
+      numbus-server = nixpkgs.lib.nixosSystem {
+        inherit system;
+        specialArgs = { inherit inputs; };
+        modules = [
+          # Numbus server configuration
+          numbus.nixosModules.numbus
+          # Disk-partitioning helper
+          disko.nixosModules.disko
+          # Secrets handling
+          sops-nix.nixosModules.sops
+          # Power savings
+          autoaspm.nixosModules.autoaspm
+          # Core host configuration
+          ./configuration.nix
+          ./hardware-configuration.nix
+        ];
+      };
+    };
+  };
+}
diff --git a/templates/numbus-server/sops-nix/.sops.yaml b/templates/numbus-server/sops-nix/.sops.yaml
new file mode 100644
index 0000000..de69314
--- /dev/null
+++ b/templates/numbus-server/sops-nix/.sops.yaml
@@ -0,0 +1,9 @@
+# .sops.yaml
+
+keys:
+  - &primary $SOPS_PUBLIC_KEY
+creation_rules:
+  - path_regex: secrets/secrets.yaml$
+    key_groups:
+    - age:
+      - *primary
\ No newline at end of file
diff --git a/templates/numbus-server/sops-nix/secrets.yaml b/templates/numbus-server/sops-nix/secrets.yaml
new file mode 100644
index 0000000..38c83a2
--- /dev/null
+++ b/templates/numbus-server/sops-nix/secrets.yaml
@@ -0,0 +1,4 @@
+authorizedSshPublicKeys: |
+$SSH_KEYS_FORMATTED
+smtpPassword: "$SMTP_SERVER_PASSWORD"
+cloudflareDnsApiToken: "$CLOUDFLARE_DNS_API_TOKEN"
\ No newline at end of file
diff --git a/templates/numbus-tv/configuration.nix b/templates/numbus-tv/configuration.nix
new file mode 100644
index 0000000..f42b219
--- /dev/null
+++ b/templates/numbus-tv/configuration.nix
@@ -0,0 +1,18 @@
+{ modulesPath, config, pkgs, inputs, ... }:
+
+{
+  imports = [
+    (modulesPath + "/installer/scan/not-detected.nix")
+    (modulesPath + "/profiles/qemu-guest.nix")
+    inputs.sops-nix.nixosModules.sops
+  ];
+
+  # System
+  system.stateVersion = "25.11";
+
+  # Secrets management
+  sops.defaultSopsFile = ./secrets/secrets.yaml;
+  sops.age.sshKeyPaths = [ "/home/numbus-admin/.ssh/id_ed25519" ];
+  sops.age.keyFile = "/var/lib/sops-nix/key.txt";
+  # Secrets
+  sops.secrets."authorizedSshPublicKeys" = { owner = "numbus-admin"; path = "/home/numbus-admin/.ssh/authorized_keys"; mode = "0600"; };
\ No newline at end of file
diff --git a/templates/numbus-tv/flake.nix b/templates/numbus-tv/flake.nix
new file mode 100644
index 0000000..00c8472
--- /dev/null
+++ b/templates/numbus-tv/flake.nix
@@ -0,0 +1,48 @@
+{
+  inputs = {
+    # Core Nixpkgs
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-25.11";
+    # Numbus server configuration
+    numbus.url = "git+https://gittea.dev/numbus/numbus-tv";
+    numbus.inputs.nixpkgs.follows = "nixpkgs";
+    # Disk-partitioning helper
+    disko.url = "github:nix-community/disko";
+    disko.inputs.nixpkgs.follows = "nixpkgs";
+    # Secrets handling
+    sops-nix.url = "github:Mic92/sops-nix";
+    sops-nix.inputs.nixpkgs.follows = "nixpkgs";
+    # Power savings
+    autoaspm.url = "git+https://git.notthebe.ee/notthebee/AutoASPM";
+    autoaspm.inputs.nixpkgs.follows = "nixpkgs";
+  };
+
+  outputs = { self, nixpkgs, numbus, disko, sops-nix, autoaspm, ... }@inputs: let
+    # System definition
+    system = "x86_64-linux";
+    pkgs = import nixpkgs {
+      inherit system;
+      config.allowUnfree = true;
+    };
+  in 
+  {
+    nixosConfigurations = {
+      numbus-server = nixpkgs.lib.nixosSystem {
+        inherit system;
+        specialArgs = { inherit inputs; };
+        modules = [
+          # Numbus server configuration
+          numbus.nixosModules.numbus
+          # Disk-partitioning helper
+          disko.nixosModules.disko
+          # Secrets handling
+          sops-nix.nixosModules.sops
+          # Power savings
+          autoaspm.nixosModules.autoaspm
+          # Core host configuration
+          ./configuration.nix
+          ./hardware-configuration.nix
+        ];
+      };
+    };
+  };
+}
diff --git a/templates/numbus-tv/sops-nix/.sops.yaml b/templates/numbus-tv/sops-nix/.sops.yaml
new file mode 100644
index 0000000..de69314
--- /dev/null
+++ b/templates/numbus-tv/sops-nix/.sops.yaml
@@ -0,0 +1,9 @@
+# .sops.yaml
+
+keys:
+  - &primary $SOPS_PUBLIC_KEY
+creation_rules:
+  - path_regex: secrets/secrets.yaml$
+    key_groups:
+    - age:
+      - *primary
\ No newline at end of file
diff --git a/templates/numbus-tv/sops-nix/secrets.yaml b/templates/numbus-tv/sops-nix/secrets.yaml
new file mode 100644
index 0000000..68bd283
--- /dev/null
+++ b/templates/numbus-tv/sops-nix/secrets.yaml
@@ -0,0 +1,2 @@
+authorizedSshPublicKeys: |
+$SSH_KEYS_FORMATTED
\ No newline at end of file

From d09e261b148cda63e68ff52b3c93f3be4c847792 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <admin@numbus.eu>
Date: Sat, 14 Mar 2026 11:50:09 +0100
Subject: [PATCH 11/43] Updated the script. Updated the configuration files.
 Script need a lot of work.

---
 README.md                 |  1 -
 deploy.sh                 | 52 +++++++++++++++++++----
 numbus-backup-server.conf | 88 +++++++++++++++++++++++++++++++++++++++
 numbus-computer.conf      | 22 ++++++++++
 numbus-server.conf        | 36 ++++++++++------
 numbus-tv.conf            | 22 ++++++++++
 6 files changed, 199 insertions(+), 22 deletions(-)

diff --git a/README.md b/README.md
index 3cf6680..83a55dc 100644
--- a/README.md
+++ b/README.md
@@ -13,7 +13,6 @@ The entire deployment process is automated around a bash script. It helps to dyn
 -   An email address with automated mail sending support
 -   A valid, public domain name
 
-
 #### For numbus-backup-server :
 -   A NixOS-based machine to deploy from
 -   A NixOS-based live machine to deploy to
diff --git a/deploy.sh b/deploy.sh
index db9a546..88e7771 100644
--- a/deploy.sh
+++ b/deploy.sh
@@ -36,6 +36,12 @@ NECESSARY_BACKUP_SERVER_VARIABLES_LIST=(
   SERVICES_SELECTED_WEB_APPLICATIONS
 )
 
+OPTIONAL_BACKUP_SERVER_VARIABLES_LIST=(
+  # SERVICES SETTINGS
+  SELECTED_DNS_SERVICE_SUBDOMAIN
+  SELECTED_WEB_APPLICATIONS_SUBDOMAIN
+)
+
 NECESSARY_COMPUTER_VARIABLES_LIST=(
   #LIVE TARGET SETTINGS
   LIVE_TARGET_IP
@@ -52,6 +58,9 @@ NECESSARY_COMPUTER_VARIABLES_LIST=(
   NETWORK_SUBNET
   NETWORK_ROUTER_IP
   NETWORK_HOME_COMPUTER_IP
+)
+
+OPTIONAL_COMPUTER_VARIABLES_LIST=(
   # SERVICES SETTINGS
   SERVICES_SELECTED_SYSTEM
   SERVICES_SELECTED_APPLICATIONS
@@ -87,6 +96,12 @@ NECESSARY_SERVER_VARIABLES_LIST=(
   SERVICES_SELECTED_WEB_APPLICATIONS
 )
 
+OPTIONAL_SERVER_VARIABLES_LIST=(
+  # SERVICES SETTINGS
+  SELECTED_DNS_SERVICE_SUBDOMAIN
+  SELECTED_WEB_APPLICATIONS_SUBDOMAIN
+)
+
 NECESSARY_TV_VARIABLES_LIST=(
   #LIVE TARGET SETTINGS
   LIVE_TARGET_IP
@@ -103,6 +118,9 @@ NECESSARY_TV_VARIABLES_LIST=(
   NETWORK_SUBNET
   NETWORK_ROUTER_IP
   NETWORK_HOME_TV_IP
+)
+
+OPTIONAL_TV_VARIABLES_LIST=(
   # SERVICES SETTINGS
   SERVICES_SELECTED_SYSTEM
   SERVICES_SELECTED_WEB_APPLICATIONS
@@ -119,11 +137,15 @@ WEB_APPLICATIONS_LIST=(
   "frigate"
   "gitea"
   "home-assistant"
+  "homepage"
   "immich"
   "it-tools"
   "jellyfin"
+  "n8n"
   "netbootxyz"
   "nextcloud"
+  "ntfy"
+  "odoo"
   "passbolt"
   "uptime-kuma"
   "vscodium"
@@ -145,11 +167,15 @@ WEB_APPLICATIONS_DESCRIPTION=(
   "Frigate [Home Assistant required] : AI-powered NVR for smart security cameras"
   "Gitea : A lightweight, self-hosted Git service like GitHub"
   "Home-Assistant : Open-source home automation to control all your devices"
+  "Homepage : A modern dashboard to organize your applications and services"
   "Immich : Self-hosted Google Photos alternative for photos and videos"
   "IT-tools : Handy collection of online tools for developers"
   "Jellyfin : A self-hosted media server to stream your movies and music"
+  "N8n : Workflow automation tool"
   "netboot.xyz : PXE boot various OS installers and utilities"
   "Nextcloud : A self-hosted productivity platform, like Google Drive & Office"
+  "Ntfy : Send push notifications to your phone or desktop via HTTP"
+  "Odoo : Open-source business management suite (ERP & CRM)"
   "Passbolt: An open-source, security-first password manager for teams"
   "Uptime-Kuma : A fancy self-hosted monitoring tool"
   "VSCodium : An open-source version of VScode in your web browser"
@@ -170,8 +196,8 @@ user_input() {
   local SENSITIVE="${6:-false}"
 
   while true; do
-    [[ "$SENSITIVE" == "false" ]] && INPUT_VALUE=$(gum input --placeholder "${PLACEHOLDER}" --header "${HEADER}")
-    [[ "$SENSITIVE" == "true" ]] && INPUT_VALUE=$(gum input --password --placeholder "${PLACEHOLDER}" --header "${HEADER}")
+    [[ "${SENSITIVE}" == "false" ]] && INPUT_VALUE=$(gum input --placeholder "${PLACEHOLDER}" --header "${HEADER}")
+    [[ "${SENSITIVE}" == "true" ]] && INPUT_VALUE=$(gum input --password --placeholder "${PLACEHOLDER}" --header "${HEADER}")
 
     if [[ -z "${INPUT_VALUE}" ]]; then
       echo "❌ Error: Input cannot be empty. Please provide the necessary information."
@@ -246,19 +272,21 @@ import_variables() {
   local CONFIG_PATH="$(gum file)"
 
   source "${CONFIG_PATH}"
-  local MISSING=0
+  local MISSING=false
   for VAR in "${VARIABLES_LIST[@]}"; do
       if [[ -v "${VAR}" && -n "${!VAR}" ]]; then
         gum style "✅ "${VAR}" imported successfully from the config file"
       else
         gum style "❌ "${VAR}" is missing or empty"
-        MISSING=1
+        MISSING=true
       fi
   done
 
-  if [[ "${MISSING}" -eq 1 ]]; then
-    echo -e "\n❌ Please check your configuration file to include all necessary variables"
-    exit 1
+  if [[ "${MISSING}" == "true" ]]; then
+    if [[ "${NECESSARY}" = "true" ]]; then
+      echo -e "\n❌ Please check your configuration file to include all necessary variables"
+      exit 1
+    fi
   fi
 
   if [[ "${DEBUG:-false}" == "true" ]]; then
@@ -1031,7 +1059,15 @@ EOF
 sleep 1
 
 # Choose the action
-ACTION_ANSWER=$(gum choose "[1] 🌐 Deploy NixOS on a remote machine" "[2] 💽 Deploy NixOS on a remote machine with a file configuration" "[3] 🛠️ Update a NixOS remote machine")
+ACTION_ANSWER=$(gum choose \
+  "[1.A] 🌍 Deploy interactively a numbus-server" \
+  "[1.B] 🌍 Deploy non-interactively (with a config file) a numbus-server" \
+  "[2.A] 💾 Deploy interactively a numbus-backup-server" \
+  "[2.B] 💾 Deploy non-interactively (with a config file) a numbus-backup-server" \
+  "[3.A] 💻 Deploy interactively a numbus-computer" \
+  "[3.B] 💻 Deploy non-interactively (with a config file) a numbus-computer" \
+  "[4.A] 📺 Deploy interactively a numbus-tv" \
+  "[4.B] 📺 Deploy non-interactively (with a config file) a numbus-tv" )
 
 if [[ "$ACTION_ANSWER" == "[1] 🌐 Deploy NixOS on a remote machine" ]]; then
   TARGET_USER="nixos"
diff --git a/numbus-backup-server.conf b/numbus-backup-server.conf
index e69de29..77b799e 100644
--- a/numbus-backup-server.conf
+++ b/numbus-backup-server.conf
@@ -0,0 +1,88 @@
+# -->
+# MANDATORY SETTINGS
+# <--
+
+## Script settings
+export DEBUG="true"
+
+## Live target settings
+export LIVE_TARGET_IP="192.168.1.10"
+export LIVE_TARGET_PASSWD="example"
+
+## Server settings
+export SERVER_LANGUAGE="FR"
+export SERVER_LOCALE="fr_FR"
+export SERVER_TIMEZONE="Europe/Paris"
+export SERVER_OWNER_NAME="yourName"
+export SERVER_USER_EMAIL="user@your-domain.com"
+export SERVER_ADMIN_EMAIL="admin@your-domain.com"
+export SERVER_AUTHORIZED_SSH_PUBKEYS=( "ssh-ed25519 AAAAoefzefpoipoeCEZJCPEACPAcjapjcpajepcjAPJECJPEJAPJAZ yours@yourdomain.com" )
+
+## Traefik settings
+export CLOUDFLARE_DNS_API_TOKEN="yourToken"
+
+## Smtp settings
+export SMTP_SERVER_USERNAME="your-address@gmail.com"
+export SMTP_SERVER_PASSWORD="emrp raps vzoi vnoe"
+export SMTP_SERVER_HOST="smtp.yourdomain.com"
+export SMTP_SERVER_PORT="587"
+
+## Network settings
+export NETWORK_SUBNET="192.168.1.0/24"
+export NETWORK_ROUTER_IP="192.168.1.1"
+export HOME_SERVER_IP="192.168.1.5"
+
+## Services settings
+export DOMAIN_NAME="yourdomain.com"
+
+## DNS service
+export SELECTED_DNS_SERVICE=(
+  "pi-hole" # or "adguard"
+)
+
+## Web applications
+export SELECTED_WEB_APPLICATIONS=(
+  "crafty"
+  "frigate"
+  "gitea"
+  "home-assistant"
+  "immich"
+  "it-tools"
+  "jellyfin"
+  "netbootxyz"
+  "nextcloud"
+  "passbolt"
+  "uptime-kuma"
+  "vscodium"
+)
+
+## System services
+export SELECTED_SYSTEM_SERVICES=(
+  "clamav"
+  "virtualization"
+)
+
+# -->
+# OPTIONAL SETTINGS
+# <--
+
+## DNS service subdomain
+export SELECTED_DNS_SERVICE_SUBDOMAIN=(
+  "my-pi-hole-subdomain" # or "my-adguard-subdomain"
+)
+
+## Web applications subdomain
+export SELECTED_WEB_APPLICATIONS_SUBDOMAIN=( # ⚠️ Must match SELECTED_WEB_APPLICATIONS order ⚠️
+  "my-crafty-subdomain"
+  "my-frigate-subdomain"
+  "my-gitea-subdomain"
+  "my-home-assistant-subdomain"
+  "my-immich-subdomain"
+  "my-it-tools-subdomain"
+  "my-jellyfin-subdomain"
+  "my-netbootxyz-subdomain"
+  "my-nextcloud-subdomain"
+  "my-passbolt-subdomain"
+  "my-uptime-kuma-subdomain"
+  "my-vscodium-subdomain"
+)
\ No newline at end of file
diff --git a/numbus-computer.conf b/numbus-computer.conf
index e69de29..8802a97 100644
--- a/numbus-computer.conf
+++ b/numbus-computer.conf
@@ -0,0 +1,22 @@
+# -->
+# MANDATORY SETTINGS
+# <--
+
+## Script settings
+export DEBUG="true"
+
+## Live target settings
+export LIVE_TARGET_IP="192.168.1.10"
+export LIVE_TARGET_PASSWD="example"
+
+## Computer settings
+export COMPUTER_LANGUAGE="FR"
+export COMPUTER_LOCALE="fr_FR"
+export COMPUTER_TIMEZONE="Europe/Paris"
+export COMPUTER_OWNER_NAME="yourName"
+export COMPUTER_AUTHORIZED_SSH_PUBKEYS=( "ssh-ed25519 AAAAoefzefpoipoeCEZJCPEACPAcjapjcpajepcjAPJECJPEJAPJAZ yours@yourdomain.com" )
+
+## Network settings
+export NETWORK_SUBNET="192.168.1.0/24"
+export NETWORK_ROUTER_IP="192.168.1.1"
+export HOME_SERVER_IP="192.168.1.5"
\ No newline at end of file
diff --git a/numbus-server.conf b/numbus-server.conf
index 3c3fe9a..c1dd981 100644
--- a/numbus-server.conf
+++ b/numbus-server.conf
@@ -1,37 +1,41 @@
-# SCRIPT SETTINGS
+# -->
+# MANDATORY SETTINGS
+# <--
+
+## Script settings
 export DEBUG="true"
 
-#LIVE TARGET SETTINGS
+## Live target settings
 export LIVE_TARGET_IP="192.168.1.10"
 export LIVE_TARGET_PASSWD="example"
 
-#SERVER SETTINGS
-export LANGUAGE="FR"
-export LOCALE="fr_FR"
-export TIMEZONE="Europe/Paris"
+## Server settings
+export SERVER_LANGUAGE="FR"
+export SERVER_LOCALE="fr_FR"
+export SERVER_TIMEZONE="Europe/Paris"
 export SERVER_OWNER_NAME="yourName"
 export SERVER_USER_EMAIL="user@your-domain.com"
 export SERVER_ADMIN_EMAIL="admin@your-domain.com"
-export AUTHORIZED_SSH_PUBLIC_KEY=( "ssh-ed25519 AAAAoefzefpoipoeCEZJCPEACPAcjapjcpajepcjAPJECJPEJAPJAZ yours@yourdomain.com" )
+export SERVER_AUTHORIZED_SSH_PUBKEYS=( "ssh-ed25519 AAAAoefzefpoipoeCEZJCPEACPAcjapjcpajepcjAPJECJPEJAPJAZ yours@yourdomain.com" )
 
-# TRAEFIK SETTINGS
-export DOMAIN_NAME="yourdomain.com"
+## Traefik settings
 export CLOUDFLARE_DNS_API_TOKEN="yourToken"
 
-# SMTP SETTINGS
+## Smtp settings
 export SMTP_SERVER_USERNAME="your-address@gmail.com"
 export SMTP_SERVER_PASSWORD="emrp raps vzoi vnoe"
 export SMTP_SERVER_HOST="smtp.yourdomain.com"
 export SMTP_SERVER_PORT="587"
 
-#NETWORK SETTINGS
+## Network settings
 export NETWORK_SUBNET="192.168.1.0/24"
 export NETWORK_ROUTER_IP="192.168.1.1"
 export HOME_SERVER_IP="192.168.1.5"
 
-# SERVICES SETTINGS
+## Services settings
+export DOMAIN_NAME="yourdomain.com"
 export SELECTED_DNS_SERVICE=(
-  "pi-hole" # or adguard
+  "pi-hole" # or "adguard"
 )
 export SELECTED_WEB_APPLICATIONS=(
   "crafty"
@@ -52,10 +56,16 @@ export SELECTED_SYSTEM_SERVICES=(
   "virtualization"
 )
 
+# -->
 # OPTIONAL SETTINGS
+# <--
+
+## DNS service subdomain
 export SELECTED_DNS_SERVICE_SUBDOMAIN=(
   "my-pi-hole-subdomain" # or "my-adguard-subdomain"
 )
+
+## Web applications subdomain
 export SELECTED_WEB_APPLICATIONS_SUBDOMAIN=( # ⚠️ Must match SELECTED_WEB_APPLICATIONS order ⚠️
   "my-crafty-subdomain"
   "my-frigate-subdomain"
diff --git a/numbus-tv.conf b/numbus-tv.conf
index e69de29..8802a97 100644
--- a/numbus-tv.conf
+++ b/numbus-tv.conf
@@ -0,0 +1,22 @@
+# -->
+# MANDATORY SETTINGS
+# <--
+
+## Script settings
+export DEBUG="true"
+
+## Live target settings
+export LIVE_TARGET_IP="192.168.1.10"
+export LIVE_TARGET_PASSWD="example"
+
+## Computer settings
+export COMPUTER_LANGUAGE="FR"
+export COMPUTER_LOCALE="fr_FR"
+export COMPUTER_TIMEZONE="Europe/Paris"
+export COMPUTER_OWNER_NAME="yourName"
+export COMPUTER_AUTHORIZED_SSH_PUBKEYS=( "ssh-ed25519 AAAAoefzefpoipoeCEZJCPEACPAcjapjcpajepcjAPJECJPEJAPJAZ yours@yourdomain.com" )
+
+## Network settings
+export NETWORK_SUBNET="192.168.1.0/24"
+export NETWORK_ROUTER_IP="192.168.1.1"
+export HOME_SERVER_IP="192.168.1.5"
\ No newline at end of file

From b156bf443e7666c13321a33c8fde4ca8e627d9f5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <admin@numbus.eu>
Date: Wed, 18 Mar 2026 13:26:13 +0100
Subject: [PATCH 12/43] Added documentation for the numbus-server

---
 deploy.sh                                     | 243 +++++++++---------
 docs/deployment_overview.png                  | Bin 0 -> 260960 bytes
 docs/index.md                                 |  45 ++++
 docs/logo.png                                 | Bin 0 -> 32548 bytes
 docs/numbus-backup-server/requirements.md     |  31 +++
 docs/numbus-computer/requirements.md          |  31 +++
 .../configuration/automatic_ssl_certs.md      |   7 +
 docs/numbus-server/configuration/index.md     |  19 ++
 .../configuration/live_target.md              |   8 +
 docs/numbus-server/configuration/mail.md      |  24 ++
 docs/numbus-server/configuration/network.md   |   9 +
 docs/numbus-server/configuration/script.md    |   7 +
 docs/numbus-server/configuration/server.md    |  13 +
 .../configuration/services/crafty.md          |  13 +
 .../configuration/services/index.md           |  45 ++++
 docs/numbus-server/requirements.md            |  31 +++
 docs/numbus-tv/requirements.md                |  31 +++
 numbus-backup-server.conf                     | 101 ++++++--
 numbus-server.conf                            |  83 ++++--
 wg0.conf                                      |   1 +
 20 files changed, 581 insertions(+), 161 deletions(-)
 create mode 100644 docs/deployment_overview.png
 create mode 100644 docs/index.md
 create mode 100644 docs/logo.png
 create mode 100644 docs/numbus-backup-server/requirements.md
 create mode 100644 docs/numbus-computer/requirements.md
 create mode 100644 docs/numbus-server/configuration/automatic_ssl_certs.md
 create mode 100644 docs/numbus-server/configuration/index.md
 create mode 100644 docs/numbus-server/configuration/live_target.md
 create mode 100644 docs/numbus-server/configuration/mail.md
 create mode 100644 docs/numbus-server/configuration/network.md
 create mode 100644 docs/numbus-server/configuration/script.md
 create mode 100644 docs/numbus-server/configuration/server.md
 create mode 100644 docs/numbus-server/configuration/services/crafty.md
 create mode 100644 docs/numbus-server/configuration/services/index.md
 create mode 100644 docs/numbus-server/requirements.md
 create mode 100644 docs/numbus-tv/requirements.md
 create mode 100644 wg0.conf

diff --git a/deploy.sh b/deploy.sh
index 88e7771..b25a0b1 100644
--- a/deploy.sh
+++ b/deploy.sh
@@ -30,23 +30,22 @@ NECESSARY_BACKUP_SERVER_VARIABLES_LIST=(
   NETWORK_SUBNET
   NETWORK_ROUTER_IP
   NETWORK_HOME_SERVER_IP
-  # SERVICES SETTINGS
-  SERVICES_DOMAIN_NAME
-  SERVICES_SELECTED_SYSTEM
-  SERVICES_SELECTED_WEB_APPLICATIONS
 )
 
 OPTIONAL_BACKUP_SERVER_VARIABLES_LIST=(
   # SERVICES SETTINGS
-  SELECTED_DNS_SERVICE_SUBDOMAIN
-  SELECTED_WEB_APPLICATIONS_SUBDOMAIN
+  SERVICES_DOMAIN_NAME
+  SERVICES_SELECTED_SYSTEM_PACKAGES
+  SERVICES_SELECTED_SYSTEM_SERVICES
+  SERVICES_SELECTED_WEB_APPLICATIONS
+  SERVIVCES_SELECTED_WEB_APPLICATIONS_SUBDOMAIN
 )
 
 NECESSARY_COMPUTER_VARIABLES_LIST=(
-  #LIVE TARGET SETTINGS
+  # LIVE TARGET SETTINGS
   LIVE_TARGET_IP
   LIVE_TARGET_PASSWD
-  #COMPUTER SETTINGS
+  # COMPUTER SETTINGS
   COMPUTER_LANGUAGE
   COMPUTER_LOCALE
   COMPUTER_TIMEZONE
@@ -54,16 +53,22 @@ NECESSARY_COMPUTER_VARIABLES_LIST=(
   COMPUTER_USER_EMAIL
   COMPUTER_ADMIN_EMAIL
   COMPUTER_AUTHORIZED_SSH_PUBKEYS
-  #NETWORK SETTINGS
-  NETWORK_SUBNET
-  NETWORK_ROUTER_IP
-  NETWORK_HOME_COMPUTER_IP
+  # USER SETTINGS
+  USER_ADMINISTRATORS
+  USER_NORMAL_USERS
 )
 
 OPTIONAL_COMPUTER_VARIABLES_LIST=(
+  # NETWORK SETTINGS
+  NETWORK_SUBNET
+  NETWORK_ROUTER_IP
+  NETWORK_HOME_COMPUTER_IP
   # SERVICES SETTINGS
-  SERVICES_SELECTED_SYSTEM
-  SERVICES_SELECTED_APPLICATIONS
+  SERVICES_SELECTED_SYSTEM_PACKAGES
+  SERVICES_SELECTED_DESKTOP_ENVIRONMENT
+  SERVICE_SELECTED_GNOME_EXTENSIONS
+  SERVICES_SELECTED_FLATPAK_APPLICATIONS
+  SERVICES_SELECTED_WEB_APPLICATIONS
 )
 
 NECESSARY_SERVER_VARIABLES_LIST=(
@@ -122,16 +127,18 @@ NECESSARY_TV_VARIABLES_LIST=(
 
 OPTIONAL_TV_VARIABLES_LIST=(
   # SERVICES SETTINGS
-  SERVICES_SELECTED_SYSTEM
+  SERVICES_SELECTED_SYSTEM_PACKAGES
+  SERVICES_SELECTED_FLATPAK_APPLICATIONS
   SERVICES_SELECTED_WEB_APPLICATIONS
 )
 
-# Available services
+# Available DNS services
 DNS_SERVICES_LIST=(
   "pi-hole"
   "adguard"
 )
 
+# Available services
 WEB_APPLICATIONS_LIST=(
   "crafty"
   "frigate"
@@ -151,6 +158,7 @@ WEB_APPLICATIONS_LIST=(
   "vscodium"
 )
 
+# Available system services
 SYSTEM_SERVICES_LIST=(
   "clamav"
   "virtualization"
@@ -158,27 +166,27 @@ SYSTEM_SERVICES_LIST=(
 
 # Services descriptions
 DNS_SERVICES_DESCRIPTION=(
-  "Pi-Hole : Simple open-source DNS black hole"
-  "AdGuard : Feature rich DNS service"
+  "Pi-hole : Simple, fully open network-wide Ad Blocker"
+  "AdGuard : Feature-rich network-wide Ad Blocker"
 )
 
 WEB_APPLICATIONS_DESCRIPTION=(
   "Crafty : A web-based control panel for Minecraft servers"
-  "Frigate [Home Assistant required] : AI-powered NVR for smart security cameras"
-  "Gitea : A lightweight, self-hosted Git service like GitHub"
-  "Home-Assistant : Open-source home automation to control all your devices"
-  "Homepage : A modern dashboard to organize your applications and services"
-  "Immich : Self-hosted Google Photos alternative for photos and videos"
+  "Frigate [Home Assistant required] : NVR with real-time local object detection for IP cameras"
+  "Gitea : Painless self-hosted Git service"
+  "Home-Assistant : Open source home automation that puts local control and privacy first"
+  "Homepage : A modern, secure, highly customizable application dashboard"
+  "Immich : High performance self-hosted photo and video management solution"
   "IT-tools : Handy collection of online tools for developers"
-  "Jellyfin : A self-hosted media server to stream your movies and music"
-  "N8n : Workflow automation tool"
-  "netboot.xyz : PXE boot various OS installers and utilities"
-  "Nextcloud : A self-hosted productivity platform, like Google Drive & Office"
-  "Ntfy : Send push notifications to your phone or desktop via HTTP"
-  "Odoo : Open-source business management suite (ERP & CRM)"
-  "Passbolt: An open-source, security-first password manager for teams"
+  "Jellyfin : The Free Software Media System"
+  "N8n : Workflow automation for technical people"
+  "netboot.xyz : Network boot various operating system installers and utilities"
+  "Nextcloud : The most popular self-hosted collaboration platform"
+  "Ntfy : Send push notifications to your phone or desktop via PUT/POST"
+  "Odoo : Open Source ERP and CRM"
+  "Passbolt : Open source password manager for teams"
   "Uptime-Kuma : A fancy self-hosted monitoring tool"
-  "VSCodium : An open-source version of VScode in your web browser"
+  "VSCodium : Free/Libre Open Source Software Binaries of VS Code"
 )
 
 SYSTEM_SERVICES_DESCRIPTION=(
@@ -1032,99 +1040,54 @@ it simple and use defaults) and take care to note down all the passwords. Change
 
 set -euo pipefail
 
-fastfetch --logo nixos --structure ' '
+clear
+fastfetch --logo nixos --logo-padding-left 4 --structure ' '
 
-cat << EOF
-
- ██████   █████                            █████                          
-▒▒██████ ▒▒███                            ▒▒███                           
- ▒███▒███ ▒███  █████ ████ █████████████   ▒███████  █████ ████  █████    
- ▒███▒▒███▒███ ▒▒███ ▒███ ▒▒███▒▒███▒▒███  ▒███▒▒███▒▒███ ▒███  ███▒▒     
- ▒███ ▒▒██████  ▒███ ▒███  ▒███ ▒███ ▒███  ▒███ ▒███ ▒███ ▒███ ▒▒█████    
- ▒███  ▒▒█████  ▒███ ▒███  ▒███ ▒███ ▒███  ▒███ ▒███ ▒███ ▒███  ▒▒▒▒███   
- █████  ▒▒█████ ▒▒████████ █████▒███ █████ ████████  ▒▒████████ ██████    
-▒▒▒▒▒    ▒▒▒▒▒   ▒▒▒▒▒▒▒▒ ▒▒▒▒▒ ▒▒▒ ▒▒▒▒▒ ▒▒▒▒▒▒▒▒    ▒▒▒▒▒▒▒▒ ▒▒▒▒▒▒     
-
-  █████████                                                               
- ███▒▒▒▒▒███                                                              
-▒███    ▒▒▒   ██████  ████████  █████ █████  ██████  ████████             
-▒▒█████████  ███▒▒███▒▒███▒▒███▒▒███ ▒▒███  ███▒▒███▒▒███▒▒███            
- ▒▒▒▒▒▒▒▒███▒███████  ▒███ ▒▒▒  ▒███  ▒███ ▒███████  ▒███ ▒▒▒             
- ███    ▒███▒███▒▒▒   ▒███      ▒▒███ ███  ▒███▒▒▒   ▒███                 
-▒▒█████████ ▒▒██████  █████      ▒▒█████   ▒▒██████  █████                
- ▒▒▒▒▒▒▒▒▒   ▒▒▒▒▒▒  ▒▒▒▒▒        ▒▒▒▒▒     ▒▒▒▒▒▒  ▒▒▒▒▒                 
-
-EOF
+gum style --align center --width 80 --foreground 212 "
+ ██████   █████                            █████
+▒▒██████ ▒▒███                            ▒▒███
+ ▒███▒███ ▒███  █████ ████ █████████████   ▒███████  █████ ████  █████
+ ▒███▒▒███▒███ ▒▒███ ▒▒███ ▒▒███▒▒███▒▒███  ▒███▒▒███▒▒███ ▒▒███  ███▒▒
+ ▒███ ▒▒██████  ▒███ ▒▒███  ▒███ ▒███ ▒███  ▒███ ▒███ ▒███ ▒▒███ ▒▒█████
+ ▒███  ▒▒█████  ▒███ ▒▒███  ▒███ ▒███ ▒███  ▒███ ▒███ ▒███ ▒▒███  ▒▒▒▒███
+ █████  ▒▒█████ ▒▒████████ █████▒███ █████ ████████  ▒▒████████ ██████
+▒▒▒▒▒    ▒▒▒▒▒   ▒▒▒▒▒▒▒▒ ▒▒▒▒▒ ▒▒▒ ▒▒▒▒▒ ▒▒▒▒▒▒▒▒    ▒▒▒▒▒▒▒▒ ▒▒▒▒▒▒
 
+  █████████
+ ███▒▒▒▒▒███
+▒███    ▒▒▒   ██████  ████████  █████ █████  ██████  ████████
+▒▒█████████  ███▒▒███▒▒███▒▒███▒▒███ ▒▒███  ███▒▒███▒▒███▒▒███
+ ▒▒▒▒▒▒▒▒███▒███████  ▒███ ▒▒▒  ▒███  ▒███ ▒███████  ▒███ ▒▒▒
+ ███    ▒███▒███▒▒▒   ▒███      ▒▒███ ███  ▒███▒▒▒   ▒███
+▒▒█████████ ▒▒██████  █████      ▒▒█████   ▒▒██████  █████
+ ▒▒▒▒▒▒▒▒▒   ▒▒▒▒▒▒  ▒▒▒▒▒        ▒▒▒▒▒     ▒▒▒▒▒▒  ▒▒▒▒▒
+"
 sleep 1
 
-# Choose the action
-ACTION_ANSWER=$(gum choose \
-  "[1.A] 🌍 Deploy interactively a numbus-server" \
-  "[1.B] 🌍 Deploy non-interactively (with a config file) a numbus-server" \
-  "[2.A] 💾 Deploy interactively a numbus-backup-server" \
-  "[2.B] 💾 Deploy non-interactively (with a config file) a numbus-backup-server" \
-  "[3.A] 💻 Deploy interactively a numbus-computer" \
-  "[3.B] 💻 Deploy non-interactively (with a config file) a numbus-computer" \
-  "[4.A] 📺 Deploy interactively a numbus-tv" \
-  "[4.B] 📺 Deploy non-interactively (with a config file) a numbus-tv" )
+SELECTED_DEVICE=$(gum choose --header "📦 Select the device type to deploy:" \
+  "numbus-server" \
+  "numbus-backup-server" \
+  "numbus-computer" \
+  "numbus-tv" \
+)
 
-if [[ "$ACTION_ANSWER" == "[1] 🌐 Deploy NixOS on a remote machine" ]]; then
-  TARGET_USER="nixos"
-  echo -e "\n➡️  Proceeding with deployment…"
-  gum style --border normal --margin "1" --padding "1 2" --border-foreground 212 "➡️  On the target host : start the computer and boot into the NixOS iso.
-              Launch a console and set up a new user password"
-  gum confirm "Do you understand and wish to proceed?" || { echo "❌ Aborting as requested"; exit 1; }
-  strictly_necessary_information
-  necessary_information
-  hierarchy_preparation
-  setup_ssh
-  hardware_detection
-  services_selection
-  disks_selection
-  server_config_generation
-  network_config_generation
-  services_config_generation
-  mail_config_generation
-  disk_config_generation
-  keys_generation
-  sum_up
-  cloudflare_dns_setup
-  export_configuration
-  deploy
-  postrun_action
+SELECTED_MODE=$(gum choose --header "🛠️ Select the deployment strategy for ${SELECTED_DEVICE}:" \
+  "Semi-interactive (recommended - use a config file)" \
+  "Interactive (manual input)" \
+  "Update and Maintain (existing installation)" \
+)
 
-elif [[ "$ACTION_ANSWER" == "[2] 💽 Deploy NixOS on a remote machine with a file configuration" ]]; then
-  TARGET_USER="nixos"
-  echo -e "\n➡️  Proceeding with deployment using a config file…"
-  gum style --border normal --margin "1" --padding "1 2" --border-foreground 212 "➡️  On the target host : start the computer and boot into the NixOS iso.
-              Launch a console and set up a new user password"
-  gum confirm "Do you understand and wish to proceed?" || { echo "❌ Aborting as requested"; exit 1; }
-  import_variables
-  hierarchy_preparation
-  setup_ssh
-  hardware_detection
-  disks_selection
-  server_config_generation
-  network_config_generation
-  services_config_generation
-  mail_config_generation
-  disk_config_generation
-  keys_generation
-  sum_up
-  cloudflare_dns_setup
-  export_configuration
-  deploy
-  postrun_action
-
-elif [[ "$ACTION_ANSWER" == "[3] 🛠️ Update a NixOS remote machine" ]]; then
+if [[ "${SELECTED_MODE}" == "Update and Maintain"* ]]; then
   TARGET_USER="numbus-admin"
-  echo -e "\n➡️  Proceeding with update…"
-  gum style --border normal --margin "1" --padding "1 2" --border-foreground 212 "➡️  On the target host : make sure the NixOS installation you want
-        to update is up-and-running, accessible with SSH"
-  gum confirm "Do you understand and wish to proceed?" || { echo "❌ Aborting as requested."; exit 1; }
+  echo -e "\n➡️  Proceeding with maintenance/update for ${SELECTED_DEVICE}..."
+  gum style --border normal --margin "1" --padding "1 2" --border-foreground 212 \
+    "➡️  Ensure the remote device is powered on and accessible via SSH."
+  
+  gum confirm "Ready to proceed?" || { echo "❌ Aborted."; exit 1; }
+  
   strictly_necessary_information
   setup_ssh
+  # Maintain legacy update sequence
   more_information_config
   folder_tree_generation
   nix_generation
@@ -1132,6 +1095,52 @@ elif [[ "$ACTION_ANSWER" == "[3] 🛠️ Update a NixOS remote machine" ]]; then
   congrats
 
 else
-  echo "Aborting - you did not type 1, 2 or 3"
-  exit 1
+  TARGET_USER="nixos"
+  echo -e "\n➡️  Proceeding with new deployment for ${SELECTED_DEVICE}..."
+  gum style --border normal --margin "1" --padding "1 2" --border-foreground 212 \
+    "➡️  On the target host: Boot into the NixOS ISO, launch a console, and set a temporary user password."
+  
+  gum confirm "Ready to proceed?" || { echo "❌ Aborted."; exit 1; }
+
+  if [[ "${SELECTED_MODE}" == "Semi-interactive"* ]]; then
+    import_variables "${VARS_LIST[@]}" "true"
+  else
+    strictly_necessary_information
+    necessary_information
+  fi
+
+  # Standard Deployment Pipeline
+  hierarchy_preparation
+  setup_ssh
+  hardware_detection
+
+  # Server-specific logic
+  if [[ "${SELECTED_DEVICE}" == "numbus-server" ]]; then
+    services_selection
+  fi
+
+  disks_selection
+  server_config_generation
+  network_config_generation
+
+  if [[ "${SELECTED_DEVICE}" == "numbus-server" ]]; then
+    services_config_generation
+  fi
+
+  # Mail setup for server-grade devices
+  if [[ "${SELECTED_DEVICE}" == *"server"* ]]; then
+    mail_config_generation
+  fi
+
+  disk_config_generation
+  keys_generation
+  sum_up
+
+  if [[ "${SELECTED_DEVICE}" == "numbus-server" ]]; then
+    cloudflare_dns_setup
+  fi
+
+  export_configuration
+  deploy
+  postrun_action
 fi
\ No newline at end of file
diff --git a/docs/deployment_overview.png b/docs/deployment_overview.png
new file mode 100644
index 0000000000000000000000000000000000000000..cfd189f3dc85f3e540bb236a77e75269c49e9247
GIT binary patch
literal 260960
zcmd>mg<G53@-7nGp_Jefv}kbm;#O#Jch}<X(Bke=ytov1C=}OHG`LgT^`?98bAEEq
z{R=M7lP6!Yk}qq`%$k|?&O1b^C`n_W5~0Gtz+lMANUFlX0El2<;G2;Vq3`%qCv(EU
zz?xV|NT}FINJ}`_IykF28kv|$TDdsd8hNU4z`)SQ`^MGE_o-kHbg38Rxnh%&kg!Ke
zBqgA>@;2a0Iw61PIY{a(E{hwGPM|{Ic?k@92}B*Ye;v-x&x`yeac^g<aP7;sCu?LO
zl~?ShpU+9#CNBk_y`%jNe5pXEj_xpHW)U;ZRTQ9u0)6K!tEyV=xk_a7N%#_?G@{k@
z@)F(iX&?MGH;HgSk6fm-|2}7e<^(UcrQwy6d>#II<d*Y~-9U>DO^Qxhb<MF->@Mu`
zZL*bv_0|=`DNN^whJD+LA-*I$&3;Tl$9cBN5IE8Wk;nSLt^hq}o^{pSP$Hj$p?E5~
zwEhvtZZ`O2O^GnoME96ucY+n==x@PvhWVh7=7?{}n2y}ibT)&Fvx02w0Nrmb>qLRG
z(&-iIfxpxYn*mV}m5D};G3)i~eL=QU`u-*AIDSAYGo^4$$R3&61-#?F4=j9%F<xN`
zrVdo<025gW6?6<3SbO-*6X<JOGfi1@MMao5&}(EE04xy<0`v+N`VfXC{`a*MEIkbT
zU+=@gz=T`D0RH)m67>1cUmW!D=R1Et!{x#K>k|N?JotZI!#Dr=Xg)7D)DB=!9A&gz
zU|?R;{CU92s#2fAz=*=gN{YSrfIZ4a%2NN{@<Prq!cv2F#L{sCDZeZZpqQ`Gh@z#X
z1-A?-f_d(CA(_U*iV6zGk;Xi4KD|r&8gvOM>YEloV?vX^5?Srhn&@obU2%WV$+<f{
zPjMN~N<SIp^UhfnycqppkVc)66o9J&Cnt(R4@;8=_-`*%&;i5v5@Z>n|9LnMzyym=
z)ByV5U;F1C-=#!D!;B@$2pRs@ZT}g6!)ZzWAAdFv@F_X~72|uDDu?QSnpPg*z2&6v
z|Cs52y?8|oozo|bBJ;xkzLNhMFP+Tu{l8cG*El^l+#AkU#ByUY|Cc2G{(ipL!~aWC
zw$M4zb0=lQ|35?}9(?_ur689#k6b#bVoT2j`k%u8_mo2sf5ZO=<v_<pYjITa^XFBp
zrT+6cREUd6|4pC&z9kBMpfM;<T%tCAHtIi*|4}T~|1XLy%|kxNZT2|(VrpSAQl?h2
zwcO(3e0`+F=l|UPH0mx~A4?0>&2Ucl2Ms-%_BS8CQlp@tsMZ?4eK_vasM6K?s$ThK
zdnA?hq1PJae~MEy3p>I)A9iYOYbeqA_SEQs-(xTDXtin8Ps)+kWhW|2*q8t2yE{J7
z#@4~4wG=`iD*hW8Rn>&|WvbshK`f`~H?y<vp)-mpEGm+XCgM7Bhv1N7({ui7OVOjj
z2`ZmIrY9yQT8NHdIPce+Yc+hzQA5#{?Z&V^Yahyc&B~LvEv!+kuQy-Cz#3TI$;NP^
zT>BE8c{5cYO#=c+Tpulf+T2f4Ds`HM=YB73{g{$C4^3A|NYd59ee)p+6`xV&JL@VV
zb=rh^e}k@PwiE6{holXV8Ni}<FFu~j1(Dhv9|^r67~MtNS@EDuUmZ8ijz{C$Et2~7
z-fA*0(3i`4Rwjefipp-Wp?38SlrQ_w?h=*7HJm*75f5@cT@&N8hTI%4(LLOpH0d`$
zV3}_Sv9uMTRxODL+aK27-@hElgjm1K$j7I3@UxumoAq3hwUnb_+-HIfi5BNGJC1?m
z$pGtihZo_62B*Xd?Qe1^m725<n7<R9QMPGXygtavD#kaoTB+8HDVFKihf#l!P3j+(
zO|XP8($J<&3<wD@Ont(NpZfjn74%1S+a1N6>s+XJIjifPuSc~m>;>cNlt#|_=(Z;9
zFI3#uO0$LqY3MlWxBBBZRf|;d3E2z-E>Bhs_&@GZL|{F_PW{XI<TWEx5V6I5`-N`(
zd!bFE(Qb)Wr_nb4Y3IU|gR7|(tb&_<ZlNEUjC&Me8AOO*Y1(<XXX*4UXr}=1Nh!eT
z&PD1`U_>;<lM;}_6|CbUV%MI?K9=Mi67FTL^4VfI41;))AXvLn``f1_i_vCmqCFBM
zOtQGQpI;BPdtR8f-~j6;vQxq;iR3mLql@(G?^VnFm}RR|X+M1Z!0hEPO9Hjl2q2t+
zZY%WyUH$ecq)+N2FLhhfQGC>ufaz+Cuj;d^=l)806FM=sg4fjn&DG(r*feJwvA?aH
z;vV^Qbm-&qSSI&SSTwO&r|0pqd4K5n&dqGntFoK~rf*{(JHx(N%lmS`W#|^wQ4{71
zEGWP#u%Ct9>V9v3Q`V$+$<>*{YmVZmXF)7RxrDBr`+WZ0!f!;-N!5*Pp4A(RG-0%Y
ziO;%|T);^@CZp`#)BRN<r9_xaiBfi<>*1W+f&HjBs%mW-0nw?ksAA6f`m1zdlZ>><
znCWI$kkv{-bi?6Kb!)Ct8uL0gY|i^csC%xJ3E0OEzadL-MVlKc-X=DinCmb$UmA+A
zsZIu)49F~T+x>oQ)2wKl`^Qq{V!E|1Mq5nxRRv199FBDtEQ)s;t(RpMd2CoJf!h@>
zTDqksA&7s>wI369_pD|~A$rkFpO6-^`gJVRbSbB!ZV(weyX|AV&6o=<q``x?Up}iQ
z?KM#hnZO(Q6sCCpmxt9lw@q!U#oDru2dlE$u68s(ZGJ{%Ln^u6!O7)yL-$%cb$WQr
z&^=A=NJdM!*~w1FbmLo{mZ$5bB8>@sH+#K6j-T-VXyq8$&=lL-=(;3#n31)MX)wxY
zs_vb{{$gwN<;mjPMIJk%8<%gJRce-@n;9@SA$aEe-yeV4nD%7+tOJ{r9C6=-!UiJ_
z-JWe0Dd!41fwQS-L&MO_$FHmO+Dz{+_u01#7@Vng3w3?<$oB<Wt7l8IiGGn9FjhkY
zl0KY5C9mZM@2IzbXT_~)OW}LD__L;{rYd_tbkvQgu&32N&);G06xXoodhwf$*?~0q
z(3bmZa^pa-k>M}<=`MK-D{HuZD`@Da@I#^C&Ej)cN~tnnby2T~Ly+<)H8kcEWHSoN
zZX6l5tj!vJ5lJ*I3*y|1Ar&y)=#M-<_CAp*nx!W68)Vz(DXymeB@<cn)mjfK8hS*y
z=IRfXIZPPZv#I@GW$Wx_xV7pGBeQt@dRd~i%2U$yi~jAKU;^>X$*u><{h20SE^^s-
z6O~OJo2t(3Ht~6yy?M%v;DoIIOt2H>G)ij<;9+MA2!+tzdL$PP*V*kVdHNr`Css+o
zXY?44`YBeKhDU@+!b{=Mc~{(i(_>n;+S;jm(@nq6UX!WyMK!hN^NGBkO*KFquk=0N
zy92IDo1os}5lB==ozJ@SgLIzn!?hDZI~^y(%GbYh8Vd#N=BCk$okV3}hK2NW=Zl*B
z^XN?b1TWg|f<KWeDIhffk3^ft-qz$B39qxJxzBmo(T^W-mzN)Vg1KL-DWG7`kElh9
zU*31=rxIOR1LN2Et$wuy>wZuQ78)?#{mIV|xIwFuZ;T*Yoyo#r#ZYH+p|sFx6|TpT
zF4KcQ=4|rsl#%T%fpQpKj)(Zyv@Q&+702LZ*A;pW?es#&zl^aHaH?zgEq$C>Cj*G7
z#qPZ>zF_>Cd2gY<q_B7Za{27sN&UqZzFZ#r)@fQGaqDvktLd5|e34?T+dFkM<|^oJ
zHB-zJ7k_JI2RDG(=^3%5J6zji+R~)UUQ6;%5ES*nTXX1Xbv>-03)XF?$BH7g=^%WQ
z!b-ks*l-Qqk|A$lYV(~|TF*&2#=cfZZlB-n=8n`)2s5Im4QhWP%nxivKWTr6ITEhX
zxzF%GUkUq|=)7%G>{UB=(jY8H@dbsNMk7AviC^yIU5DAPPCa(3X=-9a?k{MSp=y6+
zr-8UMq9ip?B@L~<Ji9NL>E<{Pu}j*Mus2Iil%+Gm(qMZ7(&XONOJR6k&gm4r4Msfg
zK_Z_IWNt4qX80aL<9B~)bvRbzF+^px+SYN|QB_T?u72}P^Pp6lfJS8zpn6y+dxGOz
z_%`)*o%2t*bPkJ{)3~yKEOjHXn-5PYhu1JSqdQi@>tia?U^M=fX~aZl-Zyo)w=^mc
z5AFu*d6iCk<F>*yD~$=ki>L~oa<zWdPbm46eWk+}J7bB%Wgm(zy2o2X%$TlJDnH}W
zOTf7*I{vViXd6kturS@9E^^DhWM_)W(f&Jh4@ba=Unt=*KmXLwk4L1Hdu$q&F?H3`
z`Vyrrp<E6y4u)Y=Md$jm%}kqilrIs!wVi4ZQ&!gcj+GNTGqA<Ee6Av4ppsa2goW9p
zVAqQI&)#%_1BBbo*X47bEH97e>sSU|TmGH<2i}4Lc>18})Anqc8oS$?sFi+~-=o+h
z5mc}$M*v&}(FL9A4)ufLBCV5!-%Cvd4}8OK`br6i(iodO&Wu~$tiOSVfp72StM%2H
zuG;_jXo^5>3>&!z;osZyLnd{G>u`L2j~?iAs^$MgZ9l-Nx#8XAAFrIC-_aU%ygK2a
z@uc@>?J5*-{Whig-@Y!hS;k=?4_#Jh%Hn_NpwbyjppZ{tiT@L7AM{&?B^#PbQVdWe
zi2_6V<))hzO{^yC0&N$YW#=liK=5OhDSvNM+z2eV-HF^(t$OpJ{9q)r$5W%}Ql;$M
z(&jmKV-#IB#+)PW4UI5DM<MrPpZ=tJzwE{7QICiBN(xbF>~AH+BCgoK8W`ODiXvpU
zJ9zJT+JjW2guZO?Mca}Bc?;^UxBB<-rrUfSWUDnei0%_o-a!+8dXP$+k)732dF80D
zO%=v$fw)8xSKe!lzm^ApQ<yQk%D4XT6_{`2f#dusRzeHzQpLQuf_vl9=)#X72#z83
zfql{cmz!Nt@tKklC*PuKO0B;+vo_O(dQ}`(Cih5sy#=TkwK9`4C5M!MI4uyq(0(jK
zyjw!?4$p9Cq;-Fvy~3T<6Y5dTc1F{kCxmXc{0&1+aDIySt@nkSEj8LDXbXHGYO-V6
zvBz0&{^kKynItH1nBhZ6cN{?#I|#YWJ##A9B_S>jJNm;EJJb&T9ED(!+3bv8o}cQ>
zF3k5W=Gq;W3T0tqVkY#IiTiFU_c^xgIQZLUqMAAG$r#Fl2>I+)t8<pQoeP&O)G^Ae
zzdT8+wOUGMVToii`ukmd7@BX>a2~xt?o}!*#Gvi$E|E`>+lj<GKfTqVhGttb4BGvv
z!QF8RxgHMJB<Vulji?xAE5_0>B=MvIZZdMwrbhkm{^S~Rd4<UDD|2ks8_Mi8awymx
z;p>lU|D}67xC)ytpF3wGY9GVYs&{;F`Weh2Y%cvC;P$gA>AD`lf?SRnrCVlITrzaJ
z`ufV$?`dN2MW39`Vri?xqQmz4Z)iu%>o>@#;29Ebb9jECZF^1ibL>Mpv(b+rdbqBJ
zv=zs(H_~YJ%VycL?-!b#3f5$kf!k^-Ulwx_@{M+n^=M&CG0NVROKC=z3jB4XK$W1N
z;nK1u6vI>gs`&|77x>yM>d!JL^pSNr3(gp!G5Fk^x?OGL^_l8#@n4BnxP$d|Ta&dW
zICShP3{lSgu}?b=o;yQ{IA(?6@V+~}Z|fLLO0u|I9j{P!o2QqNus(N~i<&P!-l@+r
zjJZfZv|w{C@i@??OI4V#2`#G4DrJjq_ay)RIL=U}C8GF7U6p62?jXuS$!w%HI6Wad
znVEo9|5IzGo0ijsfI}$ic9HeBuL;)u_5H&GMam_ByZkplSI@G(&XhKqGOZdpJQJ1V
zzdt)1`YRZji3f<rF=|vLZ4D<EwRqKq{zPoP0r57+yGdEwWEMS4D<}YVz9gQ$S}@+I
zFuF{<?U0iDlwC63Xy<*6T(C(KPfxI2kQKjagQKtLezXGOGq*-{b@b^IsQY*m#5_Z<
zt5q;$Q}|JKTZs6VT*(fz>A(g}o$Ug<71X97q+gD7W>GPiz)ge8Azy*P6^)*^zuvb3
z8Y>`7XeG=^Txh?3^sFFl+m362*wgqtrrZWu^laC&$3lqKvFvH;7sWbguL@nd#;5&1
z`diJ{#V0Y6|5TD$|0yDVBllHXYx<xlGf&>)sDn=YbJ_QQe5Wy00A)DA5*c1*iFf84
zk!)9-E+gTuJJ^-Bp;L%&$OLse%Ja>F#dd^ePB_QKjKDW*hRy00^_X0Knyy^lsbjSt
zY6C|`$Q<#n5-DHpsg+FVHe!hXE?hdt?soZF(1K}c0vNZ%LMHqs4$r8xrmk9~jjv}%
zrA)xQz$$%Bno?HnM_s@AqJT*lNV%&J13gx08Ah0zeKRdfQaIK~Zj;0OEksS6;t;32
z`tW{WSwIR=Ut|(d<O6GXf)Ux9U*%D^iMk!1-peVy3Q>ASZjMh^8QkaoJAI5$f<w=<
zU2KqLNxxBI)|RrMp~{<$K(@=|PK<wgkWFR{W+h{r$<6io&BbROgn0fa6E`s6dN_<+
z-@h7IAiZ5}o>|O@A~{p<#+iI2H*I!-rbd^Mc9{3|EKj@3&v)U~7vKaDbXo6K>lN7u
zq<j+-7zseQW5coC*RD%jm0caopDmaZDn^+u!Zk`{Z)@MgtadeDhGvO)LpsN8c|ojC
z$25mR?Dvo<)oLr>D|>p(9|)tMzz4;jlEiu8`#Q;E<Zyou4A7W@oe4P7b-`O8ci)+7
zU6jlxCT#MQvc_Xf@5<kKyTKuq%u|a+h6TWSui?!~_(Z}A*t<cIO0zNV4<n@=M=+-Q
z^|qn7^r}zTW`{1D&qZoD^X>>G`Hd9gODV%mC#kpDxl7{M$H+V9jXjjZ?|E`&`&{Ju
zAjjPE=~wB`)%(sKtCV69lTb?>&dl_GdjYc*GCnQTmZSK0sFzEGnc$-vjSwKS<5J_=
z^RTM><-!o?LDT(2+acvjDLl%+5lx?=HtWR+le>?%oj77c@dNibkZ+;HZ1Hf$w5I{V
z`M|Vsz=+-m;<o@|G9`W{PcLKSI{cZiz8NmNz4gYg?eK&~G*A33$d*<es^?>oe{xF-
zHx%CdKqB?%bF-b{y5tDP8s|;K`mOC*K`@b~`E(JQ`Ig(rc=q{D!@l!0P@^RJR~{`5
zb}ZoZ!srvu4SDf_dbv8YHCVE8a!u-0`E2P|G7OsKC-qT1n)02>go;fqw^w>XgmOTS
zh$Ew1PkOc2iU#zGOI-18D@(F>pWb;BhL>8I+V}caemTqIPjyiW4f|nB#hm<?Q`bb%
zj78iWKQcypWwYaypcRvTEa>|TclU8<dYR}#&}A6;`ZygIY&^8+T4#Rox-C{C<cE-q
z2z?+gMfYXo8>#uNMNv!3<z}bZIeu&AS0RYSO7F{66orW7Y991>-Sy{K_2~q7%zuQs
z5IDb3B&{)U9r_@zE!4P8Y46u}#x@+ys)mO7c;N5uoTGSfzE5zWD=@I680hbT<`Ao$
zzSp4<2{}0|R|h{6rJ{*s5jYej)qJqK1uQlPq7#f$Qf!QO@@<x+-P$frhwcx&6^{ZW
z%rRN9ipt8$RDX@`LxGwyY9GR%A~mlOgkmfz5YS%FKfuXX+-)C@*Lz-=>r~|kdCNi3
zC}ZOop;2rinKzuxDVR^=mP|e59a97muJLyFc&uFj8vu%aQG8HxJ?FR%?(W{t{NVS>
zvMh}@$Awyre$g#CXK(WL+RMD0>-0#e8M^!EMm$O?Ag>;QCujG3{&1ILUuBb-z1?4i
zUP^x~gRFC@wM<fx%u*i8^FXaMb8XkQOCay26Rr`Bl=0}U{x`TLgccTNBUQ|8TenbD
zrcLZiy2!y(BAH2Ybl!nxY*+|tg3EdoK0m0`65-A8bdmgavW9-GIQ+$nM{ST)g454(
z?QdT{9?Z&Cbv=7o{i@1-Ur`EnL<R7my5|Ub*0tY2yc@UtA2-R1jQYa9Uw0FQ@=~?_
zAS5I_KW;l&y!uJFFHYTyO~J-otzM};lm<2dn5;6QzuIYr!W4g<3}iVGze7)KRtVuL
zjyaw?gzIV2<i78#I<B?LF3l#pR0bvQxzV>0%?YJ=dV%}f(IMwOUo-9mRIAmQ`E1q0
zP2?mCY1Erb4cZ!+Eto3ETu<g}r}NFw+MK1GYJ@*traewRGXG$M$4ONP)343{thI9`
z;0`e}Ntv8u8Pn?&Z~P50Nr4f`wD51zTkWGWJmE1=%3gcM8)L8zMf~D;j?}&URFLl9
zpZYWj2~O~&o{<u|f>=^@u7UMM+leqUw%^94TfOSHp*LXh0!>S)sX1Lp&#pfQ&lB23
z&U06%)AR}7uE9ey*=P*wNN`YI0Jvw5UcSX{zNUwW{pCXB#iZ%2OaG>&O+g*~$-DX_
z5<8_MoOT3x(A0~*|C1{ruVWrMDgW$s*EFvKXYOWqApCje>Z24kYAmS$EwfHz(#}|>
z4%Vwh?BZPi=N8|WA!R?R4zH^^V~KY$&;XmMxBfXW`w^E4{w7wh&28bqgb5jAmXI=q
zPElQAGD!sXS*iF#HH&*R88gF&^0a2OViC!>`G6mjUu8`Qc|0PREuOhPJql@aTGMBb
zKEWs_Y{=}6T`0D_9y9CG3VOBPof&p@3=&#w!V@IUnhfw2wT-UdISF4x)z=Pv(Y+ff
z!-Liia*X0*`_rYRoj*r`O%Y4#$7PhbtJEmnXQItS*ZOPmXnD67@Oa=mv_iw!ErUu0
zwk>jfX{$T$zuK;L>Jf2TQZ%i&Wj0t&iCd?~(=BfklA5jTSj`k`1&7jvT;)?9WVCc6
z40sork7dkdBHVc2oNBH`p*nW=hN77r%$ChXble}5f3QRjCe@d5*&YA(`=ZjpSN{Iy
z#GyoijcSAwsaVZ1npMA@H+JxYQEYuMU$O4`CuMtoh{<-Rm=Jcd{ALDn0h;6(%P4D?
z$*hdcB%TXwynrgMzL%bMQ$m&9BJk$2P=-N0ez@nn9GSlT6DWQn?^ww6EaRJJ2x5Pz
za5leod=H~F37hz?Du~k>W@01H;hfEw)Nc5RZu!9hoZT{C&p@_cKL5FhPzp5=ZI^X^
zYUy!!rrFh`WjkJ{Q2vF5TT|cf;n2+=?xJ`!5o?q^#k=viaU|mYw<qmGRF+Tyi?yH6
z<xM*vZTIH!Vgik2R+8=c*u9HUA`HF7n1u_1A>?(5EhVGVWKa6@kY|@BZ}kzGt-7nx
z2{h1F)Ud&^b{%^bZ>3v)hCTf%0|qOT-2br_AA5j^$4XMXU%YyW$LSTn`!Q3~vh(L`
z@j$T;^PA$Sw4IITH7DC72H#k9?QqQ5<d8o8e$ye~7Dc}vSw{mj5)vyx2(w)l6Y~Bc
zvg#=vli~d>Q@E!g5^=}jZC)POfBVgXjUW|h$c4sq`=d$OpQ6pIiu7(|FKKeA;ZCK7
zd^O8A;<>rCthcrYNwcr;-1|$XcVdl7C706tGm=C#0Xq}94jr%9j>)|CC<(c3)86wO
zR|Ybqiz?GfNz{bMb3(AgvB(>-Vxs&uaRTEHe6a^Pf-Zhm8?3gvZxYtJ9;!1sJC4&T
zX3T4dMK5NX@7J%ixuaFB0pGbE%*JEVBC99A@l5p;GF}!UTv@5Nh{cz4WF1U1$MiP*
zqT3wKQIhS$ixh}+w>%K#;e=TnV~Adl5sP&oM_THg=gnI%q#(Ap($++ZvQlUE*-T0p
z7&M!Uq$icf$FqdeE2G~pb*iK`G(4ODg{8HE6MhGtu{)|s^Y*@lY|95sd?;7fVrf8Q
zLY^LM01m@^?!NA2_FJekbMvk@AFIM9CQ*h9XK$5X6GLC@4)BjqONw-vLOM;L5TP<}
zYb<Wxk}wEju#0quhi;{q0eVWM2>Is9nO#E!oBLP4d*9~<QEP;&_y)DEgGHCry1E;;
zeVS{hX&bsy@e6Ke(dHbx<s&>$0xRIFF%~_xhm*PWQF{&6o~vSzIof%#j19H5wR3D@
zp7zL-KBvlu3XPLipUCCW1K4(c=CPvooW|(csvlAWfC|<E%M|O2RmrR0#y0i6amf`n
zKBgmJ)qU-GIQNyIa?E#8K&Uhs1$E_%6KKKgc*_31KQ5=EFvDUPuq&>c#_gX&!gDh)
zGEsDINHmXl_NW&c=3(z!*#=EEoFux56Jg`?DGu398oJH~h`A?;UHZTYo_XCA{h~fc
zwS$G_ge}ftY+)>7TR<lo`ekTTF$HaHeh3VVF!F^SujlR7fl<Ir08<v&B#dhVn}zKf
zj10~?>3Z?A(KIQX$Pv<czN+>gdVYFv3D#BB(8m(KH9T&2{dLOPei~GvSu0MfkOoCJ
zm}-sT!l+z(@`|%oT3r)Ma=eB=!2v6f5oQDPyrY=ZFma_wAE2o!h}`cspR2Tt=OJ!2
z*8kC@?Zjn5$YSDqgm4bPv7a=@3cwOUJ|IGZL*aKfVxZjzA$#2R2dqlm28c+#VdC2r
zFn{%F9~)RSx-0DyKq!v3(T(MI3eQN(x0%~1)&h=sdFXmsN=a0s0QlVRmz>Y(IBcI&
zD+h&9QK{V6RJ9DCGAaz^w`ZZ55Q%-h=z${S4yjY-o!r}?Qi=`K-+h(>y;BCy=L93f
zRY{cwU4AJ&4<}s?515|4k>|bf*Lh>>8~Dxbw#yd7#P+$OkGF#&&qgCJ{dmfnVttH{
zadc;j&9BoMPsbemX0G9frAeEW_5_f5Vy?2?Ay$NZQ@!4H=;Xr7b697g*ZKaFG4=);
zNRS~c;liKg8Y5#ot657YN3p^$_}9F-N0%1R!wgkiH{(uc|5y5BvUTQ-0{3M~6GV(r
z4#lnCgdAfH5nL^dJ`FYyh38dJtc+g$dC~}cpk-dVa8E)3G6vxGXr@Ii$A@>q4YXIi
zTm#mKI?d4$Vf?S^?M4910O^1M9>?OoR99amH>m36`KGI~x%-Dm!7%VAur}%$k8>IY
zO|a0=1B^Pxhr+%m^%YzUJhPZ3?tx>4m$HD5Zs~UJxZU{t2l%vU;Fylej|^;q!WQX#
zF2(r7$Wh_>pL?R#6(C9Yn<=Yz(aujB1YI?Q0`CA4+3)sBa{U(P${bcZ-Ar@exeX5?
zb3*`7$gy5c4(PPg?jgoTG_l9OODTeGd%kh=N3-=|{BY<4bYx^6{DzXPcb8C4)r2Sj
z+9Da;yN05+HV8z#?Be5|*l&WyW(tpz;>|F@rLvB@Ky?3@K#5cqy$Z3Dc4lD9%hKwz
z`NSC5o|;Tz$va0`_^$uB$?dnc4sG!)MNOQDnG|*)0U3HlNI(-z4oQSa64DNE4w;oH
zbNGw}Ygn9|N<`4olJ49@<R1Qv7+aMMf<uN(gu=r+O#t4(u{*~bjnKlj&+X0(7Y^DT
zuF$Hlpp(jTM|g@0_#6Sa6kAM5=EwGEW+@d3!q_gxtT9^9T+9&O=-~bl?lKjQh(Tn!
zG#n|?@R^6QrrT>ci6I46{Kr~P@bB6z0>2(rqgb@j&y9r!;c}O&jvW*d+XYKdNcG~1
zC;i#CKO!WRMZZ(zt@xN`CCdtORn!`uBkSvFZqPh`AVrOE#Ul={kli3esBZ4j*DVKC
zV00Bb$i0}jXX!AIeIANeL6(=&g{Ou*EV<Cx?TqKXd{6BFjS3l5zlh%7>-~#r5D28}
zCih1t3PD_MS&8s${yEV60=em=Q%LSE?YZr>9GLWdJR7VOiwyj1BRr7A;RP1N#_c?d
zcF^3!1HC4=&3(Qsxh9oB3#3Sz42U0@{+#quoM~TIum>zqniTzEx!T#mj3vd7h!eJS
z)Ai!(t%S}ai1qxqE23kxRqg*&PWoZ+DyttJ=);!7Krle;YG|51<$G>H4BGQRVatdW
zdnSK5BcJQu^*KG8%k%+rzMO`O%-aFK&-Nf}_f5Y1toAdDw%1&*nvf9@{6RdPwB&^D
zBSY<<ur%K0-R<(Q!4N<PdvRq&un4yfvq`#+P%zc9Du9?YvK@>B3l`Fpg`r%-;aGgT
zDn@Tath<L4m6j+n<AjZoMjQAGaL4u?aRO75LOmYKE-)N**O<C1-f5!ar1Rkjd<h@r
zJp4T2|2*?a6HD+kVA-(`BL!uUg7@*4|5Ga0hIBNMnUJU<ITIx=exdT(J2t~^7)HcN
zeGd$eP{e+^VFhwS5r~1;J`JNArRWsh-e<P;WykJ^KsP!F%Bo)G6j=j@F^V|$VBge<
zc3#(}E4;TPYY0YK0v#O6a=KJMClTFTcVW#S!g;?5sOtgo%V$~|7+CcA*qsayH5YUF
z0f?{j)N%n84Y(su_Q}h6bJB>t&R;~96V9TcM5PvI`DsN*dNJ6<!>L->{#ZJfS%-x*
zsx-&EeNtCE%F157Vctw|GK~H0#PViG5TfyPiF~R|3Zdj=As`5v(@+BOpZ-D(uq6N<
zY>qRe?N})5>hbTKqNvarPtJhS<883{J<&(r7iI^rpj!KW{9t6K9!~@c;buF?=CXy<
zI3dCSOvl4<TV?G*6nH$kGyt~$2cJG{1cO5SX%1fBA;kOS+W;7}59|geLt5j0Mc{xc
zdInB_z7e=ltrvM=ha%wD!0*MF9(*;?UM4U|w7Q3cktNI2QO3obY`uyka8fl!a=j}3
z6ay}>VxdzGUGa9_qQDpMSHE9+?pl4n&UzCO3J5?z69@`YPhBw07i>WsxGbZw&LrY$
z1l(Tu-{Hu87Va#KJ=r*Z#j+F%lXJiU`!{Gz`)WtKyiOz=h#QzugR$fe4`>ew*wTo^
z;D~*&0%dpGcV){wOoZQf5kwWO;sTS>3<Osa6o&VhR46ln8NdmOdz6`=JtT#KypC)(
zu@~b-fEx4Z*EQaQW5o!KOGXcmhcE8rCl>ejSpK&X-ekK)5-$b*)8T15;$20|_U&g<
zj2@0YMzI$;nddFsr_WWn$)Xgn=o;<79B+#R*Rl!lFW<r<jGb1aq)v<QYi>WW!sP0P
zk-jIpFdWsBX8WXBwi{gc%B6k0mDZ8s-vV0)EZLzyCEKkk?}%%yq{H;)rXSk;)Zt>F
zbfTD$&cE<><20BsESB@AAI5^Osm~?@k>JBf?e7)54U=+wuwjpai=1Ky*Uo4GFj3ak
zaorBUufW2sO(~C#K~E75E*N<H;DjlMYRVD6D6&Mh=6NiM*nL!pi!rs)={fPPsX;#;
zx=HH%aki>>XMb8Z#qKiD@p%0+yCI-2_z~_<F-IaCbBrULtZz0F3HW=Q!pvZU)X=s!
z0q4;0uGT;dcl#p7)`h7zjuCzr<vSTGz+<B*U=T4VfX8#;Od#q^xJOi4A-~H}@Qihj
zP9Yb$N#7&Vktqm!hPu6im%tcjiNS;|KHOI(bRW+HVa<rmVw~iVOH^mdA&pAXTP@XT
zb3m()3^vrOC*De&HG@I8D%R2OV8k`3rq5F3_qw77c?cuBBgqqHE!sQu3CwW}&^>(+
zY7VCEs)7-vL9x5abuZa2Gb0&PxB0kWsb&$&PY!U8LO(b`TT3@b$!Z1z7m=J)QCkkf
z^Hw9Wx^O41#8zg^mFE>aUwU?z8g<rbhAx`o_wk6`ZBqw!P8!{1<%hX`dTf$%!QIi!
z>@>7NQ7{=O^G=lNUg!Whi$90vqGY^jTd69Z%2)b&ObzM8jXPwKZoW}4eV>2^y9mJc
z5xhvqFwmAy5gD(yyytW{xJ}%L+5-a$o6;p?3nGjMMg$@<>~3qK&!|X!VI;qE5so?&
zjqmy0ClE&R0EQ#Ad{s{xydb1tjE;~(fYV2~ex&^6kt7%i-t3xocSTINhpdJTv18ly
zArWc!Jf_!0e=vj}Ff!qN>?jP%@R*nYLrwy(utxDtP=|Zy+wolBZk$%Z&5?KA?}=hS
z>IlBUn`}OOspNF2;WybPd&CV4WblDU;2OdnX+ame10jeni$ZSRs0UyT9KeHNj3^~=
z_ImGggi-`f63Y6xljLJ}IW5~%BcKv}t|=n7+f`*!(qJdl0z0dj7ANL3h5`{q99~VN
zU0*1xpk~mCNi7c>B3|@(FI#Hjs&j<hy)5W(U*s}UVy;{AAzCxt5?#}M%=tG7#|;`!
zWsnUleACw!M6fQ0(9)+&%p2}u_i^O#T6?lSu2W&WThdOCoKfut6)*P#%cUN$gGmml
zJr~5!YRBQz4X=7-T9a{+DZ!~{?{@jgnHW@Ox0btURogu);ag3yk8^XiZ%bZlAY;&R
zC=UxLcY$=&9cmwDtsOnz51`;K(A8}{MV^efbonU3HGSvgt<=@UG30`mvH}AlQM&g`
z*@6XuNxuyI^@N{qO%4&d+x?e!aIo2OkO4!M)-_vPw!wB-yF5H^lv}{PPq<g>K1#?a
z%UGZ(!cZmA)8pXv6W<8q%!gxqg!aLZdlDv*CjY#teLpN8_uWAO3Kbti)9k79?o~aq
zV<U(!>z)7vYb)?wZZ3u7s$navnbFr^9p_hwe;5yX%>5^iRf_FPD=mcIy80v)ur4hf
zAE<Uh*zM7l=y+K-V0uxUnA57nNO4rs64r`En}GyL;Xr)gMo)8Jex#@7jXqZBzFHLo
z;(m|2y&f9y7F)hulwLre+^?)=@NT=Li!o3IS_c;S9`JjiQ{ou+6Wv(*Gr{Ob>J50u
z6T^n~?7O8u6~`g=UyJ4B3OLscP`b$r(~yglHKZo3<72v@r7<PWt7+!sp@h_@sMJ&*
z8ERL}8tZRIV117WIVc)U4o#;Yf9##S6N7OG4V@v_O1avqO{_Cq3=%Y!u>SqN<!n6@
z%3$&8J$AR8piI9#ByhgrYuK%6e{4$)wjUYOgaW_xbOC3Q0Yb~oXG+~NE+fc@>SHY?
z98JU~uW#I=R%%TK7uSM3Fbn}4CnUi<Nif)H?qXdW3B!9}vpn6XStO1fdd2}_H9|*|
zk|=!>%qBkz4<kvh=+2;&vWDwHkHV^`Q8iX{3k~-Tx=C)D<TVs`0Fg0mH%FQ~>Mk8O
zj5xNu9+jlgX{$3XI(WWMu;A_}co4>SBs0xExOVgvI-JZ7Pr|X#+(S!^FWhneY@TgJ
zv6w-Re1KoDVR#c_qz$qI((sV5@BQV_$_}%%lg|KJBrgH->!gWD6-YY{7KyuHz^(55
zX8YZN1&zvkIAFOiziSGTJ<vkv^^cPP955X*>`BO-K(El3pq8*j9tZR57BS59hn2Q^
zVHT(S{L-sWVVg$89$1)<#|J$JcuXG_mX{AtMV%N_OuNy{?t|`HsNxO$jy-&14d7A>
z7{5C_ecO4bw5D)PxX^xIKJ}iC%A-74lTX$Q{eZ<++Lx=S7X=p?|3Wy6(PBc^Z*qH`
zc^*ECN93sj@FgC`3FnxnXV;O>;`si=|HYdah@I*nRf$8vR>6iI8S*k>@H|a)Gwzr_
zeiVK-#MLWvX;a-{9$k^(^TV)HkYyFPgiHhUQJOd02B52kAVj^hh*Qeqol?SaD%hS)
zHT*mqe~SUMS@*(EGSg{ec#TXAyZ}Dc6hoj#@vKT^+2q)LDy6t}-KaQ$3B-0OP4%SC
zV3{=la<R(k!WH4Lf-XGWsmF-ia|5gtzr6Z1H%kk5iAd+;`3QGf;h{-`&=(wI!depS
z)<;|?UeqPJs<vZ(n@P2jCWx23W=8VrX``b*sI)vYN0g6%Ni$BGQ;fve6}bvevgHeP
z2)8=e2p>zmRn(G7c`)=a*tw1!v0YCgp_fb}sqUawjv@}`7y5v89S$&YY!+ExA)emC
z&ppz&neNmZ-(<_Hsm1rQ!xV)rd#kS{cPNszL*a3}aYlhyr}5dv=qHMz9K|cxD@)|J
z(oJs#12e8{h9pG%W!Sk*e;ik~*?DG1tQAY0nkaJU8TTraCn2b@dW-OiZ4CN9M7EzE
zMz&ljRK+tr2?j|XBR=H;zGT6Gsz!w@w$f=Z!6aba^xfl~3y%Atb{BmGEyLM#0!Dg6
zM<Y&3?iy`au@|<APu8N_;rQ<YituwiHc--qeOobn2A4lZX#oHsNa_WK)TE#&8U}EH
z|8;%t0zQGGJDnyOB0(6XF<L>#xaR1|Bf`RQRA&$gp0&XNrp?YOhi_;aEO2}_-Gh*g
zKGI8tw)m&duE1*i%hT%1H$)-b^>JijI2eU9LBj<pI0LHJY#W&FA#nGRI#L`!f|w#w
zUH?J{uxcz4+K8O9eLtHZ>S^iPvO;2>gR?!vO4;wmtIET(&fn+(K!wH_tdPMubnRR0
zP_rnx_8vo>LyYMUr+}HY7U%S%Xn<2z^ELA59uGplj(OKagdG5_XadgyLI3z((l$SL
zhHj7ebnqeKHx!<#Cb|EE8PzHpt{-sK%{+Ego8@4@1&g$1_}7`1UGY1eaV?+RR{`Kq
zN++>pB)g<Z135Xkj7OhLw#Y>u!kOFfaN5P;iB+Q_0yKj0h$|?-uKM=Aj5Hq-AbnmV
zz9N1UH#|_?7)Qc{k+?w4><x#6qCn`})szu|-xHF6vA`Cf6CSNXjTG|$#(*#!JZJ=&
z04NfryQv*3_SQL9tE}f~XM0aw<Wvda)c(eAKr#D*O>V^JE}2nd5y$S@D8zTZ#%Qjl
zcP40RoBVMNX>KI&DS|Z6BM3Y`jM9$<WH*ht8g|?bKoDb3cOchPA0Be(fqU1=-|T+g
zSLz~0es?q$8_zFE3dl4RLkBA{upVVKA%yKWbv@aQkj2A-5*{Pt0|Q5Ve4;$hT?Tn~
z#$6#lXF5O>>p1Jo@aVh{Pr_#3^&#g^OotH`aN82gh97frT+p2sk&2^A>$j+%KKZVX
zpDA#yxesp+%RDCqC!?Qoipdy;Ks-mfF-~CbX==%_+2+IDww6f*oVR4!vfd1a$U*bS
zEos6%)=Rsf@VX-!GF%9^naCpCyAZd6iS>Q4^k(6`dW90hh4+GyGRKRKXP~24qsPHF
zR33z5+`o>Xg{t2z*g*Q&i{<<$%}=kmkwtA8kDOi&U3nj)KpHO?S)P!cXlg2-u79m=
zhQs)Ne2MR?oAbzR!N)+R^%&r=`(zWg7IzpO=SF?eJpRO5a2#*dKC)A-OJkSGRWGlH
z___}<TDM)MZnPuKyW!@J($V0l>aPY1>?^>VlK07Cn}|bo$|*zB$|;NYA%{QLuFPf1
z6InLNhzPC(8=%yXSFq^WP~Pl310afI^JjntoD|9c*cgELnWJt94gS!^;30!F+3fN)
ze6CL#eC&ESb~iE?Xq0;ACkJi}cm&zQaHE}RCOi&@SDd7ob(P_lBCRO?0CO*57&{{C
zof<bfCC}IB({6g6hnBiJaztJ!4MP}(l&xUtSTdn=WbCY)ae<SDE{<U`4-%JKut#Qk
zI9Mu178zdh$$|)G`%4td+1=S7c@rWZXuPW3{(-0KPEjZ3c%^MO1->uC8Jvs|53Aub
z9w-(bIMNw)d~>wG!6RaUZDQH#+~RWjocnT@n}Q+F$Pem(GW^b=sM7VPYhwXpIB4w~
zQ6Umd%zIM0RKPA~-tn-qNxLW9cTc%Npxx7=2vHE+4!WNu2alkTBjZ0xb>%JlnByY=
zs2by03$C}MSJ93NApBk;YMnvXDDHw!4;o$f$yfA7!x&eXDfAb8SR%HBJ&}G$cvUn2
z>f-L^=e}=&?#RBl%3mDu2JzHF-AcN8gBh4~{b%Fr;^}nTsicfz3v@5hs!SG{v+Afw
zoU*+h)SItno{TfQwLqW#Q~<9t4}&$)sh5xSC}cYE-aC#JkDc>?6mqzzva8HtlBboC
zg=cmq5;McG5)XD3u`V+nmOVb$v5gq+cu0PkW-ZDAYeQRAu$h^QwjVzQyi<uK6{M9H
z>0o+Ovp)S@zV{QJl4W=K`Vje}R^8|)JjlnL_ex~dh)oy{;WqZ9w7<Pw9Yyxra3i$f
zfMP(Vc5DnF;kFT6FwJRxuUL25Zm2vj2ng{7^LBu8fSS$eAbsc=Arc;9vh4W?0ke4;
zUA9p~K-il%ONrqSs}0RuA6neewa~wc_T~PDW+GggeBdk`*7l`RRxzIS&8L;@&r^0}
z8}qDeMggiZ-J7@LC$pLNDoXBx1LTZ?9<e=>{T^8A<l~W!IGTvf#!=p(I2yvN%2IoT
z=^@^0oeg~Aafiwf-#s)4yVr%($3Ox*IfHc{7Na%eqr~MF91-286~DU<??Y^*T*te2
zNQ;U54`&}AS`UL;*T%#M`GnbeP_U3Z0BziGH#dG3{*tu%SxB^}ZoB6r)ir}ttjMRb
z&wifXBhot4<QFE}LQ*1wNU)M2(F03n<>`=3#i*E>RN3bB6LzX|VUW}*@rI;qiQ~Pi
zY$_%0h4kq{QmxuSI!u4$PR^mC+U|H_!N5fbjf~!sXVakt%^FRfcyMZ%UkoZ7T}*ad
z(+gPk`D%-pa^&;;T1v-9fjXb<G;ir$rQ9D+9Y%I7FLZdz8V^c&Kek;`<lBya+eU>8
z5?_7Bjlh8e3id>ab{!ya<OGqDAMrTk+}Yh66W=b_L?PN=_+hE5pSTHM<Pi?Dp?(-Q
zToNbj$r^DGSPI(S9Ui&v_Ie=2`zq{bhWrY1*|Xzh9KQEKXU*aOTQj!%BydoLmS=;!
zdCV7UciDbb<z)R5<>br}B|KUntaWR*2=A+}uJB!l3)z9{<o&D5=Eucx9i?-Ym{!k=
z*@-FX0E!rZi>aT8FPupdfw4qs5q94~NwejAr}ePL0&-?8*~jywGk^&`R&kk%11=dT
zf7+`4Bq|iG(5a(Uwa-JoWmAb5$F(uN^=%HczQzl6cgW!h$9Q1Cc+OBfO?}E1Bl|5r
z@XROyhoQZe=<!;p`62Fc_2yaG{`r2)`6TxEVoA|o<KMk$a`7;=Z0zjp&Kjgft%`Vf
zg2@aLERB*3ucei@DFfbR*tb_AUhT2ezh+M98~71jm>0Mm?V&lNz(F)!A3n=TCN&;$
z{hqQ|m_@f<TZu4`0-SGb-{E$&z*xbyo_gx_FyBCGt4Y}pHvT$7TO|M@f^y^6v7vw)
ziCn94KQ^!1X{myrn{)hdq9%>(;zzse!E#DQ4*Az(n)JR^9g92BJbiF@^a+|+<elgF
z4SUO~aKZAg%dov_{%~3Tq9Cal!YTM05kmM}cIL}Krrn&xl8D9P;IRlRWrckz<Pweq
zR39p#yh*^<^lOi;#-+lyeNyK9{m;t*MF?YYW%&JWP||+`g*pZ9EO($c(#I3GP<j7m
z&&>~W&GtfsQ`OZf<C@B73WkG4Hmpc9uCCwPD3d0;{R9-Smo*?S6tU6-aDYL6R{Ydl
zD7+*B?ZUf_pIQYah=!u#7dagcTyHZQrr;pH9@AwanD8&E)7LlqlIz~IJn_JOy?bWe
zJ+uCOwLOiIb8T!5?rojjMzsM{IH@^)|6U$9AR;|5e-j@YS+o^exp<%g(mE+d5Cq<e
zw!d}|9j{|>^~p}Q!pn}DpP2@Tk4@xZyxob=TD)13_5)R@7=<E&a2srwWyt*ZC}nvd
z$f1gWLeoV+@7oHxej<GY#RlRWY^WW*`_stx%FD~P46oG6nCWrvM5J@0ed(87eINy^
zAE5wp{Q5w+Lp#-R&`me#Vbe&Ra_Ue^)<{nTJC?<8kQG{?T5il-X3uYV{io5ow0~3V
z=>zL%MA6aJHF|Uci<I5dVS-sinP^OYV(EJbVmBn?J9$v@*5IP{aDHaokzPoMII1@p
z-E=cZ3i;gm`D*Q)a`mA2w~bGWX~l!yYBIFnM-VDsN&QUANK}~sE6fX#3=0H!OlFPF
zEKd6w>cSu0ehg&{?0ffO>=(b&eeic%P76x>vJS_(Prd~KK5e=G!&>{px!uPD3b<8d
z)7C-@D_TwV*?;(WjrJ?nshwu{q`3Bw2<&z!Rl!VS!Ku8BcPj9M=p$T1ieKer)E}!0
zoTq|zAliPj(489)7=wlRIsJ8LjTmuvgsRfMRq(VP$#k{qsm||g`_85$Cb#ZOsDNe%
zAqk4_zqTDVAs~%=svqFL_5Hjo0zCrr4=uzN(ysNV$x1r?*Na)Vzy^O!w8p2%FB5fT
z{Vr=O-(4uigWdV1OlLWt<($Tm-+E(`HP}B4j<SEEQ#R9?LdI1{9~u^BK2&@t&e+yC
zODlCK9;Qw+^XGz+W3fG<ZX%+cdkPmnAOLM~53@}7TiqqOkf=R7<J*wL>BGViyVXub
zKl_ldkbVHA%GT#DU+|5}mHCgi`Q(4`PyY~^NnlfMscGS>6X}$P2cn5x-XZ}app@bH
zRj{h;QN8I9?!#BTwnhxH$URX(q+)eW+j+LtZFLZ)c+@NUrG7wKtz-PCP7AaZsu{h+
z#o2WC`Kd)5-ihe;IkpLsKs|F@VGqvJaVMS!gDEMc=q<UDM34S>3b#dea~tClDTQqE
z2ETAO@==a4$`1Y3<@?Gru^WtQlkajU)5Y>Ogq-$qrnZX=W#4RM2Es^N+UgGaFL{c$
z{dOgsqhDd5r-w)Q{b@*QM$Q6bEozygfO&9<(;O1Ca&ubt?^?V!h5dS?5czq|yM1`c
zn$A8MMFGq+0&F3Cr;v6aY?ZmxYdl56Z;w*J_4W0kdA`jJNb>8m(I)Bs{?OjY)z)_<
z_g9DVt|lQ#7bw?=2IqXvTM-Vzvt{}nUT%P8R`LTeG9*lrnmb;TIUNzrUuA02(+Ulb
zsI)RU2K?qJu*(inr8DNyUc>G^qss2ka6eIIt|ctBR+dTbfPRQx4<Pkr(DdXT-<BXh
zEhqMAbXa8>MCrdNvJf>~;3M12YQ4J}f+l$jK6}6X>|#^JpmoYn(HOs|Qi2)k)Ay$%
z;oQL!znfO=ABf1%J@_evZ5QgcKY3sxjs4)Oo)CT*MU0|OfgkMK&9JG$Ng11cMFx9M
z#E6S6I$7;2zTFSj8RbkB={lE#B2-(E;eAD{Z>c)*D4chKLK|Q3x{QjfmNLq?3d>q{
zo~j~Mc8gv#xNbfKNk~a-@L#l<gDM~UXXq6&CAEbb1Vic8UI?mBJrCmlbPt>6{z$l?
z>tvmHI&bm0FwN+TBSw-BevNUl@~aIVmX`efPU76)=2=&LRDXTNbd&q>I(~KMt`dqZ
zzTw=W{9-`SErC0Lg;fbO8y7w8ya?#F)PnK^D~(=9kqiK_Zh$0yQdC$QKvluD3qw+-
z^*5uzcToP{R#qf0>F8RXU<F_7L(M8Y*8rx}XSC+mOytACl;7d`0~dp6c%hA$!@@@<
zGIuoSsrD<a3-<^dyld@VSJsDQ7>r#Z;Bj_$Agf<g+Al>mK6HjIB$MXu@F}G(A2xQd
zxh01Of_zk~>T7gDk-5WP)v15F8ujZd(hP)8iv)uaG3vy{YFwuD(OxsvJVi8Or5MWR
zwa0^`7uP&`$PjT5cE+=94hJl{LgE*y4Md2yS7UKNKSolR>wiV$PN5P=6(OMm4ZnXj
z+%3RT%;X+x9eB_quPJ7Qxc<^>Bu5wt$450E&$1%C+YUYzBX1pJnvs6NOaX#lPW!Mz
z8!zxo49C7Axi33~cbEqgZs{7R6)V*G5(j6oPa!P}<gO1OKW4i_7@(DkZ}R+zDUqGG
zi#F8@*Sq(~ZXMHez{}0S*rpjwY-TvT-ApLE&<9#hrCeeX64Lv_J|yI^&*B<~zj%%@
zru*0b0$A71<+Mup!*~cX+;-1)TEQX{oS%#4N0d*3w)U@LcxF$9x4NIOh`iiQ*pXAP
zR^i`PY1I!j&Oq4>tP$ijPETZw%dDPf0(Qz;IK-Tx(g7b(=Q0kBt`mx+9DkskP)z6(
zu=*OMyk7<pD-xTg`{7lboG-n-5TB%&@;hv_O}2pe=@6yUFpi|Q4JVp-kmKRK8H$5+
z6lS(mQ|U^2eYL7eHoS?GVREl*m@PFViaatdQi%6|`yJJ)QaT@*1mZ3U@j9rii7{K0
zD6g{XUF2~r$(pe+OFgrM)(=tTVc;zXq6p{Wc3^XnT&wc~dIEX^c~9p}Vi&@pw>=c1
zLnOr70ro&`5!48*j1|5w<r)nV`e-QH^?ZLg*L=efz>C?lu^vvI0`(RMT!mn51HU^n
zt=5law}jV8ND>FctG8hve=l-bO1eu)|EaOwZ6zun$(YoH%kUb)Kt<>~N8cBKp#Z$V
zqf=@KLqkkA5C*dJg=3|jK!Kk|+rYc-EhvAZL5d14KKE=yhB55qPd(0RvBAoa`&wXN
zzP!5AdN=an8zCI*$nU>M5O%LCeuKY2*jaj--NNM}K14O#>`j68e!ND!{6l4sK9blD
z27hnAgmz*h;fnwf{0_=Wj@sQs;HS2gMed+H4Tn(9n@sP)`TpCt6sL!u?N_1UbU}Eb
zNIq2;G-<a<3W`4rZp2DvvqgCfk9%z!3VYt;h(VJVCjwe&{%N9ugxAT7WvBcy&N^jZ
z;USufs(?no(h!A>C_y7BBZ*bTvB<*awBiztQ$X?lOGmR*^Kmc=#%VSbJJVxfe=jWH
ze%zpoopB0>tl*e0V!RbD2R(HU))@6wq~SKR_A=a1+}`S4kn{<m)?)UgdQ*eC+B4EL
zG25l0fJPlu&9QN@Jgn}D|A(!&j*9B-{=a7!Qo5vJXzA__X+Z=j=|-d#h8`NEOF%jV
zQBqMrY6$5@LO^mT>CVC5;r_&Zujl!$^T(_+i#eRL&lUUH`@LV+k+$5!idE_fU^q00
zHu~)JS=z1YBk84Sevkx{K@C}Pz1hv#n$KBhn00^7Nch-sM+uo19r1o)@#P#XzM@j%
z869%SX@bWlptHm7DW&K`3CuTu^e%;SeLt@0>+6(!dYat3iFw#NHv36grqeyc#0Hbn
zmOP&;MJTA5%H-t>M$%xEVn_?VX--ru1uv$(|977i@gGi<0k+$(b5Elhm=KQ0IeUFp
zIc8$8)sOeOQy)W;rx9H#FDS(>*E-cWnO{-bx8o7e_X~s`3BmbIDZkjINzXV6FF+`H
zfx>wL?&o>?X=M&0dEQ95OsgI>M%Tehs_3+g<o)fcrr~ck8xk>>9gcF{`auDdGG@)N
z+EW90bR4aQbY=npG+Is%`Ywi}V^V6%@a1)O!6dnE(Mxw(BP<~kE3*E%&U8}dKDWBJ
zfs~biSLz@~8U9uh@%6DDU2i9AKhj5AS@f$7_j-n-g<-uVVc7`-dh-nl;bP8+4zy4!
zXs+3pS-!S<u`}Sk%R<0~)}I5?x(=Sifr)BqY?EcJC`N`ons#N4ukG}Vq0SQeZT1$;
zQ8&YVhdEKVc@|BKh>JC)XN=M*7D1?J6xwki!F;D_l3G7qX0sLtpSe~$AVKWeIv+q^
z>Jg6OW<JXit{&Go!MBzm6J=D+6*?z#yQUDW9v83DDN7Li0kdqD+P0A(?wF_$?qBgC
zP>u{TYwG3K8~z|`o)FaYd%yM}kpG%_K9c$I(eqs4tb++0!yntW>*~h*uN3z7VM29V
zvnF4wesSWK@;peIA!>MzQS@+87v*_;7NjP)u_e)5cFqoj_qoCJww=C@JupibTcuw#
z1u7OkELmC;GZgyK*(PQ|-<!+0g!&c8#z4O(Abrz6*cwgNz!Swus6sS%EOfx{j)sq6
zNH0x)&|!%#oYoHR0es0T>U(J!tb6=>$Jvr0L=ddD@N8M;$+W(a%$0y>#ki|0ffZ>O
zF;wM(s-%v*7{z}eL_!=ul*Ipm-!hE#ijsL%YYp+4(WuBA`Op`&e(gp3idx*=ax~fF
ztKNER;I#>HgsyYjw=p?Oczq-T^HB(4M*@R$2B9wo>G1<n<~iDYi|pkPWx2!cMAY?p
z{aWF#8$8ch9Ew{Y8*_1{Dvj$XRBCx~>RhD|=h#m_=nwZB+W^vT_E~blt>mkrW}lHt
zf2_Vi@~GQM%n9yPtuC>T1&AAlGtJ=}YBkEw7W}p=4U8Vv9XFjdwpO)XJ@=;rCO=sX
zUqJq7`(8GDgJ_x>XAGY>jl!I~3uZ};VY;+Lvbe?NzHHJ>vl2<;da$;WFyV7os5%~Z
z{#|LEx+l}3*}jrilu2AckeT(V*!eX<rAhy<>G(HqRFHfXW$GnAR0nj0?^rAG`SfP@
z(4z|virfB(pKHOOT0v*OObgq6h3+x}-ua<05pg%n4BzxLPS2sr>HcD!fH_pjz6O*V
zP5Olm)Ux4<N}h73%K_1VyDo!>G5QcsY(^iA0y=9n6?sqP^oUv))JFO3yM-G(Xq-gc
zqjmpls__QL#lZ7l-g&a!_BG*SuN6YB>lU%0m^5C$1ZL->U)418ySuLe^NG8hLzUD%
zHaaCPrDs}*k2z%or7fjfkk|IIitk%WpXcJ2RJ`btw!>nl$C`CiH;(>tQ@pouuML7X
z(=)X;yFZBMJ5lIp{bB7I0T^vv`h;E7aUN~5=*(A46KFSa9y9a7e^6%uK`xlVzyNS4
z6y!u2_Xsc8bQWba;gd7EWGGhJX<28(eO1fGuo5t;+T2|trV~yqt$$E=Fo4zG5u>zV
z(~|$|1dlxcLuh9!8}MDOaPFH@Xjw5aNGpY|tyURIzr5LFpu7bt7phP8e$8P*@a<<(
z2~Ufp(}wt#eZL2yhamRzx?kOMlN&|`uEvY?TapHY-N@R$mbE?cmJ5jq=nZog&`;8<
zQW^%UmI^b@L-~oYQ)Fo~H?!TBzLnq;J>NWU_8M9j`@+WG2D{asdzbCK<A~nh0TUkG
zNX%~iI-+G~bMIjTj?x=e-j7*d2`33rN16h=TJvF#14s5}K3(KWdh-YC1Y4F;@|w1&
zcxU^6SUfepzxL5Cd_y)@O5KKerdBYz^nwlWciCDS9e0`2<P(hLe9!zpA6E#slcbRb
zU0GHgAT)@V{Y23Hgi5AAa?}T(pJ7+F+~-Qc;s4YJ;jCH=ip1>(Uth%E>dL9CQtH|W
z&yK{?Ljc_e{UD0I!gLTl&QY#2BI-q)vRrY*(c>u`QZ^&Vn43P$Y7FWI&)}%NhFzSY
zxK{cAO9=iRHxifdBIvYe5E&8;VmMp9q14*T^}L|dF*a3HUVi!`oVf4fdmN=GL)}yw
zI{Wa32RKtFs^$+LVT%-Yy>&lUbzC;#dS2896~1^B#i4d<THXBmEkDecT*O0$`G!n2
zRIIv)EgT*A!HJ7`NR0oz4(cK_y^k=55BIHY`Ntx!@y@NAy*C%5+f4m~I$V}6Pp;F^
zNd^NO{F}a}WV$!yDtfHZ7X~XpXKQSlq|b+&Jm;gIw9oSJW9=RHt?z$#VOCX}D;)}G
zX+}#t4l0}9eI`t?P|Pafv3AuSR`Gz8;N$p*XTHqhwLcu|u*KeeXEh%I3WS@#2Bb~R
zVMg7|%{9L3$u3-c-`co%>FzjESYv%>_oV414+uuBLMq9F2jI9*D}v%w@f(0G1fJ4H
z;;tRUqFam#9>GUGzAtaU%P4xIln5;13tnJDH&;-db=cDNMwb{NA?4)lDlp;)M3%%9
z2S)Oyh%ijP5ANZ8pUUk{a>ya6tZX!tiNzh1t<fX7Ks5qNh1TMecW#dGAyzB4F6!gp
z*XP~Ykz>bm@#px=n-NZ`30Bl-Yl)@GjRKn@93g6KK(K+OKH<&oJ+uwa;ekD#CePrW
z?B&~ht)xyB(@ke|EQ)$Y+UiK5vf<v=IF#VgaI$FIEWY#4W>2AM!oR{~cQKDHVrb1O
z09V=3AdAM;dWR$W2z#HcluAGZjgP+zqgmzvp-4NW-;B;bH9*mR;bK)P6*vuRCH7z1
zj3H&jz{T5r$xLGQ>)mHzF_$=_0-%aNq?f6{(9ZTt)SFTedh-Ham&bv2J`hKbu#n+%
zY5J1P%D{Ix^ko3f>-+Ulu#HLHet^0tm&FNP*0l4=>)aEpzv?0HN{zd4_)TsBjoeQ=
zpRmdgVFRM{M!ZQ5*Jr!CPs(6I;cpk7u3$`)A~oS#xGtIFw$jWUIPULVuP&J;>C)u0
zNPwyYEud5uR|Dh$9*OuaM4>rxHgp7oHn^BqN2&w*6SteK)1(iuAUnsg@`!u*mkQ&%
z|JX$%1jKs=l-80N@E@|3W{U`TP!LfPQ5={;_s|4fgdY-uyTba}hNJIFpNsMVA=%hs
zq{mapMq`b~cNHqXi5lrwIv@OeV>H=?X&3yB*ia~!^0|hpET&q%k=Es)L%&Di{&9O{
z|02E8@W9gdv0rMKVj6T=K1W{(jctPW7I;u-M7FH|2a@ps8xU>WQ`9_<$3~<4GrcIM
z(ydLIT_zpErB;({33GZiu`@qZe4V)dQ!a;(7gJgM`nT*q50fU}M`G!E+u*Uf^IMoZ
ztM5r}1#SC1Not=$+n>&RcYhTU3ItUOp>;18qoHs^2pHPJ;f{e*zk5<X@yYJ=zSBfY
z{0Z&&1nR}2j{RFZ{xaTP)b7!b*dU<O$ivnCCxV6~lGkrI9+qM*lQ$vx>rFO<0_HJ<
zjxiJ^%k#To8YX_0aA0MZQVlveXK2dbxxS5SNdd|gMY$I(+t>}%Q@}P@&!r=!(@tXl
z4d>nwK<-WoEYXXc$7Vt&ADt(VqJ=ErsjKiiPQFXmS8J#!4)oZ<mGIuo<jy=xKSy&M
ze_qyi;TAvgu1kab&SBp30TR9cgsuJy0>fYj`cZq<7BR63bTpf>Qv0nIEFcuGIq0#g
zdRPoLj(W^^tD*mDyZfuXAoj$pEiy2W&sX_BFLepDI7SQQZ%V?%(BY1nXOSBF&R4x*
za@kPsM_W($i3<(FW{(g$ZLiOXw36I=w(m0A|GuKXIc!KBc^hHmh}wBH6WYR4rYFv2
z{f{i#jDyZA*<ax2M34H|E=r4hcw_SDD&e;?M2XF?nzJSHwEweN+kYPkxMmuCNb1j@
zpS%a||NP{Ykt6A)(t5Fi>wk3ee6mDu+hBZ<+xabk<k})v8vz&*@*zO_{IR92pL_{1
zBGw9-%j{Cy{85?3Ks$v#?AwN`4Ir^IBs8dn?VKm7Ys8b48@H9tpQ4)P+5Qb){>QWr
ztk5=w^E2Y9s6IKKQfIY2e^;^i?NLIWIO9zaz}%SsoWW(N&H1$A!Kw4~o4wuH{>j`X
zwKm?|cK}b}$-;|?yIVotMfW^s6*Zrzp<!c$aA`DDD7tuEAJFdwE!doV{$G>HFXPY-
z52g{?k0gtg>7?%ZpJ{wOH1C!0Kl_BRY^Ka%S6ZSHckMje6?9tXRxf|@@aokrlTRX*
zO;?on6A=y$cOM`zoF-3o*YxoUwmE=U^8dULd1=y2Nw?M;)KGBWhez3K$_8&t8(?FG
zM%c)%R*JX>A^aYLFj-n@KYe>%Qx-7-8qP&ZIdh=gj!cZ6fFiyJ>$C@g+yS_2TLVsP
zA%hyLQs%5$PUQ~LT14;z`7yG#yG7pO*Xg%^@gDy9-yu&}-6h#o^Md?Sns1k*KDnH`
zN;sFQq92>8@$0cX`Cvf4BB(Fe?ffQY4*nkAutd%({zlrj<*J>GblR%yW+NPD{G$?<
zx|Z65$#3areMD5EJ2O^BK`h4r=>P&S+JcuAALqT(6;+N@d9~ep;jG&G3UZ~HTPI9T
zqX7vB&r^zs#CD<NdGo)f0AlQ{Xj$D}%Y=NbEUET`Nhs9>Br)E5hsq!NQux+`2!-*V
z=z$gX;gLsc0~<^Yj?z>F^ipj3JQj=$!&x>E75iM-TxTOvanHTi>7FMS`N%^ctidSb
zua-`kr%~(tC+Kq9xw`KJ1DEv}*=L&99-eI)&3XYQj0}t-yc2nUeRRODE~GdH;Od@+
zI!snDrvpPu@~of<@4u79UzO*~=#(zOD-jgP79H7iX0~p$;=^I+9T|fPqs^e3fQmbQ
zdn(;_)mvw@#}bn>gkcWAxcQiiX&AW9Jg5#5e`wEVW{>ZJrb;63`D?23=(sE|B|i|g
z?Kw0V$kOP!Mp>9yPd%~Dm-Nti%0!2-Izx4#MPomE&283lzfkFDxFT!3_NiuhUJf_8
zw6*S5y2^<D6!4lKY~LR}{{OsYN;dg}?nT)@&04n?q^mCO^WDVqwwBL316RBI&5Bhu
zHAxM@A&hO4%rglYXw`)+ei|bLySvZH+eDbUe?Q9J`2mjG8?wLm{f{)NPQT)D`yNGX
z9{!z#R;jzQGX{@`S~QKCgF^x1?f9no+}TcTC?V7MEYGv}f|sTTin@h`!kelK5`V}4
z|AFuQ)%rs+p>X1xof02papUn$uT=XzVyevhhnsXhMkC>ouYMaT6cmuNB|xe!VLU%H
zG}A2r8CcBIn(=OD#LTZx&KWnClZGsnej-~xTLTM+bw>r$*KgUib3f73?&T!@@=7#y
zHeyNBeev4u&$^i4gw|@WfC5Kiwv%85w1^|<PRG;cQZ4dNQsnO;n^glo3AN`ovQ%C8
z^)jYECgzCY{1>}V95shlMDIu}V;dTi_)F(GgP_x0w}Dll;9^ijfOeRYIpdh;*`LOM
zi=U?D79ZaTSC~nahLQ?C4avw3?a(0XYJ9J+q8KK2QCe?$`6b^q@e#0w>#}dU|E#i#
z)90zto}q(IetOHC_dw(ivht+IwKKyEiB!9DwK~JO671{MD!spj+;nZW!<9>D{vA9*
z1X<(@y3b`VjYREiXOev!h=O<5v)4+OJ6}Jvb)QtKaGa<s5BRg-KjfKJW(%;J=71vP
z7tjkN!u3~)tKT=4&6HSztX3|7!UW7rF)Q)6gQT3SY7dJ^HZsokC85=SwqBJxo=xiu
z-}!xgSrZbTTPyF9sGe$6u;8R0xn(D1ZL0iFw@4!bH&Yq7Em)TcHt5X<47oSDAhDfn
zOEt+RQ`^_J7W%4ndJ>Kh_+q{4LX~iFe63$l@#VpXxbN&%RTP)h4OFAg(X-{6Pg3fh
z&npMHFSfi%zn1krfcgfX(O&yEdyQXF<N>`g!hwQ9)!<P%Q_NG+A^c0uM#`dYiV=&X
ziq$g3ox<$b+4AYO6QWO3P7>`r!X|J2orpu2NG*SN#9<r{J&E%73L~EqnqYCI4~jPv
z35CY9CTFS$3|E)~6{q)_elU69WhyGfMH8d0)FDEFiY?U2AF?K)&&%Eo=(#mpWiRJ#
z_aKAvo2(n-tKlF3%SiSH-tQa1O2OVU>1w3<WI}H;GahkPHCIwqGO3aJQ9nHqF*U~Y
zPwS6%L(?*wY4*y9PhV1-w|-NzGh6z_%%uZmK(deimR8O>+^nyo5>^8YSH@pFQf=Qt
zBV6yPs^>^iA9ZCfw+$ZUJBzxdgxUYp?ZVtY&%HhyAlz&FqsbSQQCz5D(v8gmyiRmc
z4Hoip*HphJW$JY0Y5E)$M)=A4XGXl5Yai0z0pOYxlcvZtuIdaA?)ooNe<Lf><b_F$
z>g+3bg!JwkEf96myG7obHEGb1vKI=M@)D&M2F9)fZ)(M4d9vmuO7ds$MGcBJUMu$F
zU^H%Z0RMMb4tJd~W>B?@!9hc*4g;6splL%vgZ9VEE~=1}L*v&%(Y2;#aWlh#QhndP
zZ`-0$PCb|BBaEtCfBdMl$xj$B(!(V!E`0JM%^3G@UK`+HbYX$f_^al=JxrjL<K=cx
z|2_LPUiiJ<vz#b}29`4_D=3%L9A<)6m8rx|2w&;rmo5`iT7^ceWm=E>V@qkBA2mmJ
zW@UN5!{o4#ooDKr52}1CoV*cqi2Ku4nnpHLX0FS+fv-N{=Byu!p|=yzC>l8S{wiPq
zut;~VioE4vgMZIQDfNx-+ji$uzwZ3U)&?>^k#Lx;{@Yhox*sD?=q3$KUOF<aas6gB
zeY<mN`md)Ye~a$TApM|6JEu2(2th0}=Tq}hHk=0JdHdn%5z@KZ*aNhT7P2yx%xu?z
zzghy2)~tLVLS2^>YA3X^5ye)C9Mj1*Szk@Di4WgC&t~QKf3*X38_BU+5iIHdWuvlD
zBo5ojMBPMDSfov<Bwe6_1LS<Nfz&+)V}XH&g5&qC)|m8E+aJG*k-fLYf*XsU*IrI-
zHRR737?_1{a2M}Uv$j<4@~A)M%y=qra>w`j$Fn<NMWn@4>`Y|HV71PFEHt)bdZ&?I
zBTaI@(u}K3EOPILoQqY8o&CJ=IIDhvgf!ojzIlty>G4N{R%<1j&mGDdlhwn0_sA&6
ze>x1Sr5xU~(|9QTuCmEzz#<No>a~}1YA|DM?Rc}2ta=2M4{td8EgL%OKHv2jHph)G
z={#mlCF2e^V-g-2zIuog4h32>w)nR#F0?N+Ka%I#yt3o5_|L;ekU)s@^u@(Jo$>&U
zD)XmR!Il+qtv+=>DhvnEL*lCC65gR1>lFR#h?8X@V)TA`PEmg5Wo2VgD-zi0JhYd`
zgL%yg8-H_c$r0r;gh9mYvp9&VwJ#r6?ae>@UGi?N$xqqu%kvcFI7~yL<KZ7T23^oa
z7%BA=t)#(Lvv2)ZE^{y9B2TDAZ1uVc2y?4tSB92K_4TziJ}o@3aGBK6fCd8t{hgQ1
zkIw&`M%eAa`JYW$r`fMD0T=zMpS&itt&BAvvFa4Onw}EeYxfxUhq;xT>p|q-NPEbH
z{p%S$HbUFrGp*4h&ry3k2@?#LdTMnZ0{PU*9pgI-qia}gS%bPSZ_L$eo_o8n0%V6I
zYp?>laR^%SYDHF%LXc{rL%&lqOLJCt--d~bQ9~dSJFCe$B7VpnwbXvpfjrkj46-nD
znws~gkaOG~jB6Tdl}D2*n+#dsjU)mcai<kTG~>TZ`d*!zvYTD|q<@K>>VJ#j%wppe
zNju{!ubnTb$0;17RQob4joRL2Rpr$?<0kv@#$X4h>EhfUPWsO{S>G-tdaSP-a?6X5
z{ySw9%;0EUzNor6{^eu)(WAYGw4D|2lC(^Ft!gjHX+<Pp+pz7^1o^ydvsjg(VUVy@
zD3#rQN)z%OIfqes#|uI>VIt?{ibJ)7ype2&B?oIMm<&axC_;nsFfV!t@iLl%P3P;t
zGuMSIt7Is$hWeq)s(_+=uR;9biw17RE-9hP;PyM&3BS3(=kqR$HfVn9b$O1QPwV4X
z-)vovHiq+3y&Q)7e2a-Jnk`*t4j<rCyf(kZ%9YIGk;oRbT|ATdbdt*Y1W+91$)#Lw
z98A)m-)^)B?yMK4B&A(UCSLtR#JqF3AF}Y*8R|&b;!Tt-z&bHaPlRrXu?PaGY)5lb
zGVuYl2D900U9v_VBJNacC*nf|@3J@Ek$Ic9i#mbO0wgrbhZ<{xlc9%88=m@<J;?nJ
zN;DGl1@?TOXU0PKQjP7dBvtV4mxcV(&m`E{z#M5+{JN6vvsPRLq=~Ti@^b_!wRNlt
za&mqAAv4lcSW$aeqEED4EH>rE!EljnK@aDD0ozdQkbbt?_T6HYehHzcD-3R}96)Uq
z&cFmHdAaOPkE&apoRj0g|L#K!mit7_GO%o*|7lsOhW?sD44=WiD`u*Zo=D+!`t<~d
z5GoXghnFO=AN{<K<80=!qKYe~z*Pu5ar$J-rtGmWe-XakgL%OWZnrHnk5H5_M@Yxr
z0*U{}3FW^{<nJ+Q@a9&zv4=Y`n(<GaF*%c5ZF>yfG$B1pIR}TYGG>(5U_r<k^T0D;
zmUwEk@X0#jp69Vh=UR6CFSbe=v9AMW-%zLp9{`ff9<SQTswbL}Nh0sAwEyy6Jx|_3
zOD(05-AX#4Y!ak9c6m(7wVv`#g_+IwXqa`;D<1Q^U^}1A&_6Te->auC@(|8$_qOvZ
zfhic_+E1c{UXb{kJmqN0nc^mLUZaFhfPeKvfG<>v#D_7b&inYj(3e%CJ;7|`TrW&7
zylK#0d?R`)@B@`j%Hgyr*O!Tj9sSpT0#9_Wsob!-B1L{RJ#?O|n<rKTGCSB#*gTQ{
z4h8>lQ=<*gqVWr*X?{;uI6>rADwj6;mMWXfNG2#-D!AK!L?H?i76MVS)$?`g1aD`E
zhKoa3X|^dlC3EaVQAcs<i^ODmqInN^edU_U$z8Jn53qyifnjFY|KIL+IMm}8u+2Bm
zO4M8Y8Zl*<I&~QQ)VitpBI=$`-V=5K>%yH#F>-&`xXy_hx4nwZ=^q}B9~o`ZQ)Qef
zxre`CFfpQ0V2k};RjJQ?()2&Bs{&4q#sHuqUdyDi>JufDBOmP4`{ZGvCAL=p@P2p>
z!t_T|yZRE#2Ak)Ab9GXc_i<b=-gi09c$4bKv5uM4IWnflU00NjqG!52lKTa)`Ce{M
zJxUpLv{NAUr4@IVPk8Iw#;&FBHOu&Yu&>H$%F}JMAf%={u;wLz3;pS^Zs1`5_H=K^
zp(^=p_v7WvP->cm8#CVoS_vkg0<}JQgF~}3693%?j~;?_@w3rFrB60J1Wq<ZNJFvW
zirSR-b9bnyG90w&Dl@48srhdnI&)1v)oVBt{q|qr`a(};X9f$aH;vVyMnNZ7u<?;Q
zCJF#OZ};XpTNK|1(30Unqb>gDOsD16e5QD|(KGIU8fvE+g3osA*DAJ{xvgS);XaDG
zRm-7ES;97v6^mbgVSXq{WY2E>S+8j*h0(dcpqF&RY-N$h_#RiQocU1TP2jC>>$JIg
zdhR5bsW6`OW9tYn^~2Yv0Z$#HPw!7%-AS;B(P5yaLhrMkpP$?Tl&lRs=0%=ksH2s<
zh|8@0Rc7z7jQ?4hFzI^@Jx8>PklRMzOuv;Fb|jFcN&?D?`H*0CoxHR*fOcWv2m{C&
z6@|TEN?J+@%1`eYWi5p_GEdh8x|n3l_;ry0Uz*b`YsoeEY9hbH_jnzH^GM>e?d)rE
zF55`onGpb{3uNQwzHAf!Ai|3zWZ*Tl2>jB5Y1(bdj!l~51CY1QBntzHQpEoN9HVyt
z{^0U88n4{G6w?H-<iF!yP8F<EBN^$E3jrCspd|u6AG9np99T-&ax$(d7<?OWxh~em
z!K@PJo?UcHR}10=^kQ!qP@AgbK*qV|H+m|d)a(T)^_4Slab$RQ5bEmZ*%2w&$$56E
zye#iik0*~819!agVjhsoZvl$s6NA(I?2%@Aha{G3(RX!Os~r4K3!8{*I<k0mP2XJr
z!n4a4m-qUF1JhbnsDFHp0#+|-BuB)E*B|lTCF=}Pmy6ceB{VKR8Ifzd`f$@Z|9OCu
z7?z62EiqZ&r!CTR!qK#Q>L61scULO+bMyY)&<E^Jfbd@yA(gpq+{pXf{V0lnt^}aH
zoVCM~7YOBUMyYKVuNTg3Z!QkMdoLIb^~Q$-&B}mU<at^(01apaKw|?mo#|alRLl+g
z&BqBRzb6N%AF}r0+PDJ5gsG(<fOd*&$DLt&iFO=G8hC%TwxIY)9bt3udDCLwho>KR
z97T4!W>2wk+>O4z$dbOjSZ$nlB9z9wy&MVd|F~||_|@365-{AEWV^o|AmW%RK%w@7
z-R8JznhRTPjI8l&ez^Yp^!@eyv?#9?s}rDx;MsmAdwzhRqi7x7wL9u)v>5<_Ws*=k
z@`dLDT=W6aRag3iQTJ~24gU#l2XT)TU<Z$m&(Z$W)6_1veeC(YcXE+NAQ=}X`0mk`
z1po}FIt`V7`GBV|#Jg+|TL<9X9P!wUhHfWXk;=cI4Bi#-eyeCzDjObH1gA58w49}$
zYMa|QCE(}e)-ULXkav2%$FYo=g4Zj`)W)<lC~*D+@8-BP4*+s973I|Vj3m$j;MEhf
zKd9*Fdyb5+BY+w8d#J7upx=|nxgcF)q+i8k#t7TZ^WRGb$~TO3FjdwCn)yTT2(`w<
zM@dT-*}bzJ5SD;rO<2rQAKW9XS1D9R@%x01oXf9nDjvSRaIgvk!o3W2>@~^P_X(LH
z7Ac`ZIl=bLd-wVGoSTG0S085N9c~jyqML+$wi|del}o{lLY*(x=aEppO_18?x?Tnr
z^z|y+Vy%bxTQjxAr}l_ShE8&&%x2t_P3AkMkvUbimSsb>>o;|kMEYE=lQAqJ*_)K6
zpnL$J=A82;awFElSYy=(ww7TTsydec=f(l3tmbz;yvvnOur_qx=P_XcbbO?<!bU4T
z(n{vOYw4ERnm1ylFQKJ3Yka}Ugo7zTK<%6}{m5GqK6%<)_)~ffA>xZ<R)LL5BaWZl
z{)49*$w0{O{A_mz+u!L;S;>e<vyK~0)Jk0WHoaH=%RKz51=he@#7#_KyJs2C(2w#t
zmAE(wEB2b!D;Z&+KPVo@{H!eAYt@!K-)G9;UH=28|4g(}V$CC!6?OgO?Kw5O8m{Rh
z`VRsP?%57i*FJ66zod`ZowE@7l=|2NTJNy6U`hua{Pscq>6}l|e27&j1Z=a!h9Q`|
zLvb_9MI#SBY3}q$KW__|56X$XJVbtP#So~Pzm%ZJ=g?ca3Bn^kVt1pz;*etA3|R}M
zTfv>cx9s$G3pDlhb+9;69$d~@K)EL~NW*IEI)rihBNW2LaPlPx?BfjdrV))R2W7N_
zavLx?!^dq$<M(MtB+8{G>>YjjHT<7o&PGULek$TI&2E$cglDrEpBla;mCa$XAvNio
zVxO~tXx0eXtp<Zn##BZ5O2x(BAUnBceh~J{qpWo3h%p`v08%@LGO31R!H3bS761cI
z>a{kiH(&H(y6x8P=OU0E_q^WCnD*Qd4`)Khts-8@B4g2I3zx>T@j)$fER(n%Q}+Gf
zGAc3!#FrKEhwZ|+&AhMQHlxB@afIBOe2)no7Tv4a0hLqCt&&B7&IRk)yS)?DDk-=8
z4OlbPOjNn1#h<HbuWKH?_P3P#n5A#f%~f+^Wz|hF(PgisPTAVVwM>0r7Ncifz6vj_
zXWy1?vehiWR&Ng1GVHoTBRo6i-L{-d?Cn3?9}pK6+aKE-g4cKBc;QP)BuRQZ&uM$V
zEq5v#TI^F=-{1808sYlbRhM?PzCRir6d3<L^+A62jGCz%i*oeT`U2c1ru5=&jTlgO
zO#bD?RBNNK(*(;oTfldME2TlA_m-|#YyDV+4flo8;|^XQKoJlr!rzqXdx=%`GcRoR
zzG>2S_KI~A6Rx38bV56my4JFFEggid$pjZEDGu(41*`EAhm<`HOhP;$v6t3L2U1>Z
zeOR6GmwUs}$azYFI9o4mv}P-WW!kH)@$Z;1$9voTzZZT|`1qP@sUr}qhx{Xr53qXl
z#J;ux1DLmdvftA4N0$PM)s5@a&kRi)JgOapXQ^g?<X)aENKEETHwFT={s<@wAKG{_
zEi>L^)84lM>WYRH8(VkjQ@fYx-iXK6SNGPsa%pr(f#MzkSYK*$ORcaYP1_L(GQkMr
z;AOWsP(6jOYqL38C|aE{1QD!o6BwH{D|&%mYx^Tzv}`XY_Qr8!ySi;*T~jV(!sX6O
zepdhW)ry!ji8vn<Rv;W2i6nkt-*DXM6Sv1|pCF{dzpHXYy~C`UFc|LuVjqsjm0k-(
zCaZF*va8hm%Dy1LGP1Ef%9YgB>B5=KB(^^)nt#zrwDIlGoOwZ7DX?@m>uva$W-EVb
zJ~Q|7Q#9PF0ZTM`OnwylZ8R}|$>M!c5A!S9zzFX`Jj%HfLuI1bo_Fr&5f(wysROZI
z69&<FCl+xop^V@BaeQm{9scCE9D~w6NS>o8z*{ZnO8YH7L<$NDwM@^2Rfa@j8e<yQ
z%~P|xkn1fMPXO1Y)X6%Qn!6VIKyAO}e7Nv@A$A=Vj7#AfndP-ktL+ddIhd2xVt6_A
zR_6N8pV^ZwSDBgfB;pEn3*uLKnM<>Z^!R7{tBG=ZFMIv#w$(}7Zi8fRv$i_`&EoGW
z7o>p|Lvdox{gVVkh%X0rERM30b~WPrEx~g+tsJQl6VVrz@pU7Dsd6C)(E<|=Gr0S$
zHkwlvEyzAZ5bwwR3({}A-Yyffp0iC%Qo>hU5uA_AYDRfCzimeNu8g^xESgz#PXxc2
z7-6}cuW+8rUkK_kzg;?VW_3P13P#OKZU#YnzZ8bZ3!Bnx2YlzoCFix34n@aD$G2_6
z1hwi*g80Gj!JIrMb?yZ?+c4=BuseD~`xn~w*8`XH7ZdcgBXBl!{*$8tzNQ8b_z94k
zrv)vEh@ArduNQ(6m&p=0Nwxcx{18AP+gRCf!h(nRUorf-P{mSFn~CB#j}8SU_3;qK
zbNifN@q9`j5T_;NG1`IUATX!b=ieaNGvI<txv)!sg4%F-5SIW70cpt#T48R2EOkO9
z;CQ?zNg$RACFx!!V@4Fe9EcWJq%8(&>ugfe3GhWn15~vp2M~)n*$Gw*Vi9h!jz3c-
zGry*u5_MbqyGSR2_2xUI;-p(M6P+IKWT-(rPXuiV%^RD;vLy>58BKy;A@S{UBL5aS
z9KixQfaKKPDyb~<C|$E?hL;ouo@gFvVpG1<u&Cfc5N!*ElX=Cn=Ohx0iTF9}5_Ky!
z#n}N$?z6iZM&61LRJaeCvrZ-kBOwu497Z*E2g%HSlF|v`D4m372{RRxTl~!><jv2y
z@UQX}h0JOKQwbs=@*#EV!h0~U!&NrZu&-mp3;3XC>pkDlj=*!eE78X{-$?qwR_D8J
z!E@h_*?+UQod5hd7)47O{zSo~hIdC{ia1c_cu>f-MbNXtB13tR{cIqOLyxvWwJZsj
z2sbG|=NfRi7LBmNC5}<7ZaCGKInEg2qk1|rb{5yO)AK$Fry(pMX{$}clE;CCkIrZo
zjp0()Qk)e+HX&)&e8)1@!5fhmEoX$^k3P$VBAYR52LG&2PQOSyLuWzcUJ=ZD*aUy9
zmPzAYmXC;_(En+D)$veeCVZq1@uGkGEvoKpC-?d1l%PaGzujKn_>#p{tK{m&-7iT~
z4;o!_Rtxw2Dsm>jNH1L1_C&PdCSanCJ$9cG9At5XIzkhl!)Z)hzx8z_kY59YxZ2O!
zkX8_lkrUX;2*2f8SRS%$pMxbImHpB>AM6Kz4eWyOjm9_OI~qRJ-%!jHgoZ#bAVLeJ
zaY8`Map2}~dPEZJmForAZJyTsGyV+5Xlex!F4sP(^P{hUR~XIRp;*=4-C!p)$M$>L
zUwuJ1Q1or~`~K@49^r~0c#VA#mKwMsHjbD}G!T4qNDF@ec0}u~sVl<b12L-MBtWpO
z3%h4^LM7MZpNSn8=*+HBDFW*^(gM<LPUw9mjP|)On@k}%B?$Y%As5t11WgjH(|i|t
z(jBYadYrp2j=)T^tppiycrs$xLMrsuoH}MeySj(pR;W_YmcLlIO(h0C90nsix2G!U
zw&ZstoD-tL>XldNwXs3@wG80!!*CG?>G?EBYm4367IjK=XE+xAhLXwSSD?VpDoK2U
z8CcFT?o0CZJwd=~OEQtNmm1Es2$2>Zg(&93-LH_~_Rc(Tm!O*(xY=#A_`D`s><qSl
z*s>IG#v@tq8WT!24jISR!8}{+yf<AS#}}YOi8b=)3`m%DWUJA_L^^^V<|o-zP@t9{
zDFOY3=Y#u_M;MEL#UgV|s}7MV@(FyNQrI!633HUsKWiIj@gZM8eI~OqSs~%3>j%y?
zcQdOIA=h4FHLWR1l0>3=RqROtaTvLZ!b?9pf|dirMIs9n%L00^8Dm*}Zp1xTvJRDY
z1bEMElX4~z9)Z=t$Fqw&472C{%4wf`g4nH5tY#A?BCfV{+4VJFnL6h-Ux^ThvQQ|W
zZHn3DR_PoYR@515X3Tu!DJOvSth2pmB-z1YqH=92%zsL3)$fOeLyb+{YmARx#OQEJ
z=Z6cNHDHQ>+|gd%LC{``AseDs$F&88;jCg!NJkL=ib^6m6_N5+@8PxX1>6E!O;Hd%
z*ZX?WV+pY*phpOX4R9;?CEN)?Z4M%$hU3UONQ3yo&q0!KdXgpu;R_le?!9om!91Bc
zV;(9uX{($zz-#^mld(cG3e{@=fPdJ&sB4u+gbw$`rgFVvl&+b9D1u-hK|We693t{r
z=vXmU0bB$`=6bP7r3mF5q$`NvlJ-NoO_c$A3uO=})e|wt(Z%vf${(Ov<t56TWoDB)
zN3x2w9HP~LE#M{y8u_-yPZ7+65<(pfR1A3-M4H%F-=E`)+r9vK?e7s}p=Cxr2w95p
z(^kHAklu_qO^keh03Zss^HDnv2?gM0As^W=VYrbz2!Ds8d!wCw^`Q?uVDZf&A#GSa
zcJQ_PeQEDa!cZJHyfcO#)G}dkLmW|bg3N+5Vab>jl6aBoNDh>;h0BCz&GoR0u#2oi
zV#m0ZG)Ww^^O1aAXR+<#JKwxdP8)IS=RvxTxP5G8C6$Eu1g^8|F6yORP<gcBI3V=j
zmY3a-pO=?b^!6>Zn96a6EXtkWb6{;j3cJlWu1BbksHXX%C99qhX;v^y(?&n&#h)74
z_v*-pegmBbY+Sbb9Sxr6r;h9>NSkD0(JLhRj5)h#C#;$5Y_Dz!rD<AyWyX=65Q%z)
z=nUxr@1{#=W*F-x>q|rNHQqdMy(Xalw93@MNM4h0tR;&!yte$VvDHB*R-AUU<ypd;
zA15e>4X;(nSG&=z!4$lvx6j_@2HHQJd#B0SlN<yIGnJygIGSFY&GO208kN605}e`L
zCfw8Egh`zsP~1aeXXYsb5dIR;^eO-z{Slv-9aNEIgx%P;!InqkRdF^?Y4bFW1mB1N
z>_CqgWk*oLyN6n_;z53HeKvU5E=p_{UbSid;0k$KcdZZH>M_xniv(3SgPs0FprQsG
z^k%fB=7`kR1Cq^;Gj84CAkSJq!80;&n^6h~`aMj5u`a}pt{RW8?)xHK4gN|c!dDRU
z3IrnxLO`tOgLt6IDRgcsJxPOyAmwIx={|&n(HAN%zjm3tz_kcpFdmhciNN6?F;ty~
zh()(h2k2N2&IBz}PH6?K!<ng##L#~&>xQ0EKfz#%_fR~jaXSo!vV^pR)I&BDqWMLq
z@B|?pgQ+@6_BZkM_ZI1HwGAj4!m*Vh*OZA&(&0qSZqQ&T9|%c=zllS)f{)&Qat96F
z8YjKqcb2^=-rAXTZ!>dx^Yvr$b%LZs4WQ+m2U_#WayYaFecI_yg>okGMCa3N<LYk6
z;5(A8q#lq|k(+)T#kmd*M8iRE4A(}PGx|PQ435^vW~!3eq(2IoXGtQ-(~3!8Ewcb9
z2Ei{!Oi6q%ktZ`%5x1_p#hh}pN+Sc#aV!aANm%Am6#mKgu;~d+nP*0jP|JPR6vn{o
z89-qE!@SExJ#gQ6Bb4RO;i+nzG`7<gw0ihlvhragUzLRKt2irD<Bx#5W?Lz%<g5U>
zJDi?_5MdapSZGOz+30Oyc`WxZ8nGoupqgShrFTeXX?Bs{iWptlbAp^)-Z%}m1arOh
zU3`X=$U6^odI$n3J}YM;2Fbu7^LsWJ1Eo6D6xUS2kR10yEK5te5(XX40|_yeF@bB3
zLQ+0jNYX|riE~5#=ReYCS)w&RiW&HFRx2;Y0Dk0_3`Fw4afynMFrS^-kG>Hb#7afy
zRu^w;@tN%qoo;!VguEMK6yc8e2ua~IFj6ICv5`9to*)PfvcafHs1K(=a4ZQt$3J`H
zI)$M_-HXXrhi`m{fDno=#jvA0Z??<%N4irjiXF4mqix8;?a~}AP3a#@MD9l&9#A3C
zmRX2YVFN^x%9)^W>{T>Npj-~>IHQ*o5l&fybwH-3k}0+*(8_Ft8l%}4(5XO0TWrVC
zZeN$uwQh{<lja|`DAz2Mv2V`$LoaMDWfesEz0b&d3UtC-<Q1Rj2p-V)tZ*nq<J&TL
zDFnlW_*JGzs%g+eA!sDIMWj`#C;3?=`Bm+Bx1=qtU49yNHRbLwOcD7ta0m6Qu#0su
zn@(*#Ij1U#!hRu<%P^~K++|B_khW|T{qF26D$K3coNo5nsoML8Ck>$oZ^K_J0DES{
z0v=D2g#l-r(4EI)0rYzp7C)PTMUYR${yf|Uj7bKPY{+7FqE$v`Bm+I`1-tgfgz2!<
zk?Md%%x{ct7NsW`mLW!`?&UpbbX;}BxGzuwak!7cmdwha>6hFyaQb!SPy`I^am>9{
z#4%bDVY^~e%sO&pHD~a(1z|J*bJ$Rz8VPs1ShY^<+k~Nvicw>w(-3)rnyo))wo&_H
zXFnM>79DboDvi0C6|fJZ$-9%7+>(_$HWrTXt%$fP*l`rMa63X#{R?(2;OHH`VH*^v
zU~H6Pc10Q_38h!Wl_xYxBmo_+ul2FKOd+=V1M7fl1YC;V_=K&_xWSB*GQz)D2JAS8
z`wAE?lxcv?36bjRZyZ6&r1og#z2`qS=nE~H6Ao?<Qj%>@64E^rG>t-(QrpRSHKOJW
zF$rswM_Nm{XyS>}4*DaTWP<5Q0>i9}Vdt6Frb$-Ke?BPk&+s7y`f!RuT2bdox5c*V
zMU7GCpA8@^@E1jkv2KYCBYQ2EY}sGklOMg68(HVGSoRd?Vy3&n?wuPg^cC8kDy@9w
zHrM^+q)FkZr|9aDl}y;(vI*IW+1h+Oh^h@IzB@(7CsV@*X$8n)R=hHT6pJ0tSNKx|
zM`K}QaF>Ovf?le>?Y;&^Y4tU>JkifjKvE6MtK;~MV6}J?mD(d~-?&zaT?YP;cUj(`
z9F|ZeN_KU+RC0OVLMpfh9LJL2@wyu=xaK7Njl;uFfn#iWgmqEh(<N3^Mrc8$C+%T_
zSA%`H@)Yh}k}Oi@SA}x3E2dLp5O+C(Gjv2$Z2@E|TR9v#qh>%UMURVZV?(dIj{&M+
z2a$Z~^G(tY${Sm)kx!ifJ?@o_OzVI|imcOG?`LssN7-fH&QQdK)iMso3e;=_T1YF&
zS|+pSI0C_BUOqJFo7F%x_1S3E(1$&g*VHW}&lR%u#SyEJgZKis4oydj4*0444UD{&
zp(s=qTM3$jGs4)MQZvj<8%u$Qj=#}EI?T>~&x?tJnVt@NqdQ1d(DOxe>y5v;MF8O;
zlVzN2_`MdA6}Vv(pu{^K_qPwkNk(kH<|Hwdl71Xj(KQEY`AlIvM@IbY&@=Sl7jqou
z(d$=sI)zHzDpICiYAM;9-#Wz`&1*{o>Sw%y%uVH-5-$(wmpOJ+qaUAi_%Eb}UtaUS
zK3S)i9WlYLkvnjG@NQoY**+Q+xEmKls`tgPes|UdOZg@_b*ZHFBhvFdQ_9E6X6WxN
zSjF}CI*QmW6Vr>>ZOy3!-n#q3M8fVO)Y!_Mla72jG{6~=a8fvC&EwQ8Izw;MLGU45
zE}t?f+m<^3WGL9;)j9l#k5C@Fb_isqc&~=VOD~UHUP|&Mg0PPWY!*lE%({R(zhtxg
zy)wrGjiu#_l%K3v?EEH#7K-hj9m&#e5|1Hfyd0T-7ITdmplb%%$DXyn1<7<H6-++u
zc1sb|fGut5K%c_ZK%!tZ&>hUizu(%r(S8W@0(2k5-1B&nG3)Tj{iIvyqX!-uKeeZ*
z=xT@I9Nj6L=O+Nl@YgPBf@<QX%+zyQH`(SM2_#y(CT3_TG72t#1=3ftv@+}dB11h)
z<dP_IpbW7E$tR$?XIB=qWg*?2IoSRMd`H})6rj8>;1_x-X()|%B%E6EEElNo9*{4;
zIE4(;CS-(y<n<j4{gpgXLGQO>tTSjhxa6Tq_$fLWB&cNrG^t35dlmGw1jjj6o2cUS
zuGqGE6D=j;19wj6d73l{wm+KLYNdSWL$%kiP;>AlE#We_#(rO+E2#;}NhKlbXTIZn
z20^m<bqj?l7np_x<WVfF`gPIwMY~s8=U&qDdr#%=6ZoThChhaW=>y$eEOl<r>f2h1
zaI4&q&XzhUVPUTnpcah;3cZCR%BxBlJFKlbgUL6dNjUnk%kxru4V`AwP_hHcLNm3;
z%??m6=$BEEX^MRTukX-K8i`V{G%XDJ^fZ@c1kJyH!wybst+V=N>EmPM%#xz&-9%0`
zB@d+*toY=v_?NfWEeslEB&LDW6@-x!K?xhcH{fm$ayEh7YDzHT8=zdL8x7oR+?bD-
zgyY7_8dxBB<#Co(ev%U2%KT}qH#pjfSOwpc79t4G7W>pq`bOak27+aY0{$9<en8SP
zB>MukGP3`%D}f~p{XIAb{2>lslR1=kb2@P#QEHY=?B*^*l;aA$-#bpI_Wi0KVx}?&
zs(2VN63`U1(2R9~;SQrar1vXJV=z7iHxNnIMGbQV<EW!I*wZ58miG0*kEVu6dHdor
z4#C6VW+Lsnm~(76R*M|!WP+d$5;-cjgtLTSj&8IHlVhJ<`7#X-_FtA!3%x^+5s>Ni
zdwfWVD+->q-U0a|?3uunerVw+^}Ks(>{IlQ6W&pVMxZAR#vBHkJ=MU@W~>K4r3P(-
zbf;o#AxA%T24jw$GNcLXmcjHcx&*{%p|1(`CoC%}s0xTu!0tLUH$&$*OUY`Z7(JiF
zjHRYh_X$hr7w~sn&e-#l9YB0xb>U|#TXZ!8c@BdxDHbN`Ool*E7o+yY!sn<9UPwx#
z=*2t-mBiFOM6Pv{7M8eAkgf++r({Oe1T)q&5Y$)@wYA-Rc8e0d(7p(QEv90z^p{v;
zxhNIY(8HMA<3qz&-X_24a?V~I<0xTQ#+KBGb%e(7un=C~D+=*ql!Wrl$R(NX1gi0M
z_m~{FKoE-N9*?XEvHG4-KPcIL%(y!Oy=yI(hLDK7bY#!6O?taowY7^t9*URG><z;P
zX*ccNNOLaYel(;0tj)G1SK?*&uguaC;tl#-e0eNq221?Mo$*41@<d`AMxx**r1gR8
z(EQDcHy$>G(o1Q$5hTPg1%FCj6AqfM=|9ZFnr<G67XcB&aYvOLaSPzrlJ}J@?x%QI
z^Vs9T35VCj5#m!$+=&ZM=S9daqeQ{#AU1iD)l!*W%wF8}*Ab~6?%Zgb+g#R6Q;I_y
zNoa5~5EnGcgP%>B4&=EYlPe0P2Z`#&4AYEbDiChc)nFkMM}>F~q>C-u*x;lUbrm5D
zkfk>gg1p@C;MVI|JFphsF}`igOb7bSI4my^QsMSMZS0mwmvMm%MqY!tNeb2yuy5wg
z)YA`;)2A&YoC>QIBAlW|=^DdVNpSMP(KxG?fuqDO@(H87AR&z>zSZd1`1=a&e#G>l
z!=R?kH@=V~BcU_FKC0plqgq5U#h*!DcCCL{086lFV(Dj4JELdvf(FjbN+dF%@{^b#
zBj#3y9gCM*b8wedO_*Q-DdAD^YD{Y>zJpmh{iu|eA}k;4oaLnFoF%V7?`228jM$C>
zJ<$Uo7h7{Jdk~29OG>s0v;blvb>GeH_X{Ac8Jk%iHEj*{?(v8IulFf?9!BgFT!rA-
zC1CH4VqUFD^#@tHeJ-uTEhyWs3;)uk7w$!+`V#*@7Vh4O+v_jc^)+Gv<&#zGk-H|d
z-eZnz8qU1P4!TGXkUL`xUadrrd42nHy0)YFr$gB(%3sUt9?4(x(=TeMvSU2<E!7qN
z`s_w0<L9Qu9mhXh-+I|av20ZnjeoH1Rmd4QRd)ZPo-3B~7mhW-ANtGDVVOd-?)tk7
z4%qA*M0O4<&KN=^gwQM@;-1Vy__AVKPB;cH6E@Z}X?%jc=vm1eQ&&O!wJT<eHj8D!
z2sF4zo_i`j3~a<A$+qCzjCBZpaEt&GbuNw_dKB-6_!W5rSiR+;kgB4MV=9#LDZ<~}
zdLw?pF;=37RL-J%r(N?zyrO7xafIW__~ezzYCL^U&S(tQ&aKeGst|&|04F9FcfU~X
zWlA1DeZ`+mj;vLuk!KNoglHV{-$CmM3DQZiyA-HTSgTtJHa|7vA_8|d$mdi}+)fY@
z6}~U$>q4S%tVEi%S>jfK9jCswdbE~prq&j%#%WY6WQp-!5Xzh+F-IJ9tE*5#R%Eap
zGX#1d8-29dJLfSXNdHdR1Qc)A@X!eJf=Ewrx6n2s4`cNDQdv%CTVzA9bd&n?nb-QD
zN1-sRzho_B^*V8qW|z$`@p4Hb>>R(O|Cw9M+L1(8LMjT&%2Um@tJ%;Z1|@z&_tzU+
zqZTi_es|9P=<A<K_b!IpgQx`Tp(AZiV6y<942d7Un{0P02*)LpA0V-|d1M)uQHyJX
zZz39#ya{(h>5vi8-iXf2)%;CZFns|Q7tEf;JAjD1*7hNpQOP8hSM0Ey--{P=V<UIg
zwhnoEa&fZ0&C@vMwbG*P+&s1lo<9s1=uRQ5^;&L@+Z>6i>e}X8@UI|WAcTG9HgBF`
zU4tYQ7AuDaO<YO;MD5L~5*|*`p;qXW)gGBBLsr%6f>*aD&a)T1Di*+%NNNOA0;`;H
z44u-8rZMjn3DL^qVwYN#m?;ijn!_rIG11gt$75bM&cpG$8LwD(FqxpbGvRXi4ztne
zbqir?%o1#<r0i~gneShTZwY|t+}+XJe7BVH{S_e;h8g<zajyasbg6&uVkwN!^v1tJ
zD$rG%mMF`xyVD3;6IvEdSl0XK7g=~K<2P&zrbJagdW)<qK6D5pDaSpXZyS03f)mQ(
z?EkSUU|G7ma3CE<MB;xhU-b~*@{}IfD+u=$v|c``iy9&IAPFz#G<8hppdfl<C}qr>
zgpM#79HU@<-_siXE~@ySJN3J})b=ZC6TH8_0q*{s8nly)NPSHLtP1a?U}6t23iq;i
z@Ths=dj0jgUM}he!S_7Xaolmt|J>96^||N-CBnaS?dyR5_eTG*$3LG(Rd=@XnP!XQ
z{=Y8q*LT2$kdD1Rn)fm9<{5V$NBFlRVE0vzpSR^YI%d9~=JZ@^v~wj@ZUT}DLhcS{
zU5Nkr-WMQ6NNva2$onL#$ol*1svM^m<%7<;a#q8Cg)w{;fX!8UaX%7u-#N-e!ccs9
zHhIpSx%!b`%6vvOh&!4Ujp&P-&kiHhS>p__C9wZ`mP6HhDF!mi|NP+YPPUPE<==Oj
zmx(f+rfnu9*He}|O$0u*aE(Sfr!i0%Q=yj3G##qZLHm~(j!NzxnLUFQj}v&jC6h7G
z>AX&!^p-S*_wKBnW(MyUDk1wBKzp>)6+@a)9-_51Z|mhnSK*ye&UQn5XMlJ|kX!Zf
z#)!qy?~adFfZ$>85Evs&?l?Y%)#g)$N?04Hr;VO=hDGVy4u6}ZAS7o3aP~a4rwhye
zGLj~>_^aP(bkeX<Kw)L`(V+4Zu-Wu%3acjVvilaa1;Nt*6u}KEM!id*apZmlG={qa
zXlP`7=JS$3<#!ksp?CNWkn!3DEWjJLGMFXw6~L{XKhP_U`{Fp(VI~A@)aESWJoR#!
z+*C(t^XHcaua2BM8+e-B8Qv*A>h?dEG{$!))mp$%WS**g<^UM`>*evr+;FbcE+FvO
zU~O?H9UKxC=t0^Zhz;z{e(@6M%^<+z`}=kj@ZEV{jF-eznzziBKFVHKGpQ;Ds8Q~D
zmax|fvcN6%$TYlB)Fv`-KLyl(ANH<Hij-rVANyPN|J4R0ih<CU@=3tnpz$*ixAdn~
z=0Bf{RMA}`k23z;+~j|C`6VjV{3q$l@2UQK<bBVc-`sp2aY3cLN~m=kFWg!SOT1;Z
z^nxu~&3*EV6?s0_tC7LCDl6lE73X5n_Ddt3%Wm?wL1JFAT{YEe<o_e;Eu-21w=T>C
z3sSs5aW6#*6n8IL+}#Vs9fG^NI}~?!FYfN{?(R(Pz2D6I%v$_Nc>SEcpKXkPYTwMm
zcCtz~vOG2ym^ZN_7P%6bk6&gr)1p%Cny*DDbI4<D3c%UO6^p`CVPAD4#U}aEV6n8l
z>Xn<@1|i=N#>nMMVmV{3wYxc=Oy`Hy_Wq1Qs{G%ys&GUWzz`t1<Zw8QhICH{_v%Pb
z!;NBG!nZgBFP|Ygp8Eed-61)StB&=MytH$!kvnXLYP3kF@{1zIkN-@GvU!1Zp+R-t
z)=zaHaFz87pW6p2v04Dl-dRWCMHo^Ir`15<8QXQES0g0KO)W#zu}tVL6!(z&1(nzB
zxUT)B)mhs&kGsP$h>{Hd%g1)Hl*N7#F59EIU-^vp_&x50w7NyyMhe~b-#U*SFJ7yk
zQlBTT1zUf-cRH6<iKlW&A8QQN<kz%CrCVLrB4sU=G?!YOnj4m%Y*w%xmipPd!avpU
zcPOf5A!5;UT-EXwlkavz#6}iZ+kNyb29TK%s4A=^ehJZksgp-GLAXHYa9@0V7!ml8
z{&&-W+)x|fXq1Zdpy57ML8dK!vlWCIb;5(&v~Ne)9~bW5@;ZOISlz=5(H>bsWSp$B
zhtCwTT2aCnLv?qAe8~UZA;m?Zx9IPYzROcrxD;>Sr_i0!?w3`?G9=andERbfk-YRy
z?XVp)<XWudIL<eD7-lHa;qo3F{(wlc8zZFHmmLEtYEj>BeR%J6qx$MAZv0x!Z|GO5
zZG*%U+mrfT_Gi_>B4v%o)YrcU3ou+E4y#&ZDK@pM*uK--p&3|TQ-LhE#`EekvK+JW
zN=J#Tt)B+Sn?G;2viR%b24t3?`M>D@48@Xmx8ZyAr-*>42c34I*qbOEDRjQztgDg!
zz-6!98%b(}WL7qFY(pXzTcZ(T)6g~0|J&vK&t|)WXF6Y&!fG}<2#&EO3_PVIMj`sG
zrHdXbsW24;lAu87BLSf->@3%tYeJH-?dXzvz!878QduLltP*1l@;`GWi8lm`FF}k#
z^`>$gCC3lsyJ?J?l-B>=$l{hw$3~LqGsGR$-`_(aF1;$x4b9RGyWzJO@yKu0H#K)B
z<qbkkE}vu2x9DDE^KcY&b=W9FwIO-;Bo{+#h{Vg)&RH3=Z{iYXxp)b*>cVFSu}5`Y
zqB~1vm$?u}(TaRTV-XKssj1gox%?VUh&!!&!jO`zDNmTAu9CXt{ET~8@!M%U@3q}B
z{X~JrwVDA@K>P)b__#Ubn9@0bn%$#GsMYNBEPXq}sa%RJ4lA>&<#L*VW`7|+eO<C=
zyK66Quy|&o)hsSU2H&dC>a^_UPuvV65ubSc@Hc3Wct0_1{Wzi(B;c3vHjI4O+EPo<
zbhQ2x_5S(;%o1Odvjp?{`eh0i`^=ZjQ^$oJMnV@FXB>hJW47obeLhz%QRjS%yS_w^
zMw;ONXp_$1x|<%eXxob2jA2BeGokp})6HhLJLnP=`0&5253(04K=aW>FtU}r+Fa}e
zxRDCciT98AoiKw5GTpBwl4kx9CuK~4U{yBo_}3dQmdv9zY=iEs7TD-7VMIDE-(MOG
zcD}x>2cxT0Sf*KkEK*X~dl9-=sKld@N_tro^nZ-ZTUUL!Jd&Q2)k6=OG`bh?-Zsoz
zJOxHLMYa90I-6rAU8)kNnBL%fU*ux9)_?d!pqGGEQmfYQzrg?0i$cU{ChK)4Xik+w
zTdVgN&qFydmT9Pn{k^Uogt}yVW-`C&ipxw=t{{T_sq^Toxq4@Z8-ohF)X#>9X^)YX
z*>WeP4ODS72emd+d0Neu_&d{?d8_mJIkO@Qx{avOL5S@*1H}ySk>Ba%ED|vIi+d=&
zXZ7QGE2sftEqKs2I9J}g`%H1b8vVA>o1Udu;6||^)VgkI`Lech7Pr8M4oKZLI7@S~
z`0ah~7`Ct!?_Ah)Z|%DI)qK7hT<|g+gSnS4U*;m8#_!oNXQsAd)ppT;+d7A8m5-ND
zz96@UGkF4e6fYI~O#EcZ;Imx@H>7hqg2e@$?$fj_G4Xjko*h(uWAW)^dHU`Lr0Llk
zTm<xt|Noun4KG+H4ov8lv2R^5p#(*ig)&5LFEspZ1I8Q8Iv`0bqNW6kR_!DZnE^V}
zWG~{!^~@EU<CKAkK0Os68Pl69_a^J>MU3sR@NB0&&dGX<vQ{@mu4REE&)-nZ-K}aJ
z{m`IDLUwp>vOgKoKeL`Z7cAGzDrr6yreZ|iV+blKZStwy6LMK-I$zidyrs{h>sS6b
zCm&$_tsg$RZo4ydbzKx?G29){pr|ioER|SSaHmk_TT(%wvI1~-sQtLqe^HH5j7FBf
z@K3mg1IACNcXUeztC^~FX5v%9pb!DksM8uQsvy3YWe-*0BCg4C#aiG&@1KAl#)Sfl
z>9f4^UvX`hS^rqT4y31KXpCewKu@9NE^OyZs&%?OFU{9$T8{a$j+eh&=_=WtJ6(Ki
zc~E-u7-WDPYKVkgbtIv{*M|t2oF@5aYYnROn^af@a#Lorl~&Ya$JBqfljyb7nv-O7
z4Y=9Q>pYzwTI1bgNCk|_w43@NQOnltRu_9hgdCoIr+W>SXKW|-V#M68o5_Qb^$pyP
zQI155LnH#zv1AK4)jkg!M#QgA&}p~#BBe{&t_mSIDHC<51?p#_^<~OYY~wq65Puz;
z8w41zS`kx!zH~ogbtmkh_W(@0oBCA>0ckjP6ptijQ9dEE_eV&6YPMW+T4^^<QZ84V
zGb_G;`+lN(E-9<qin3UMm1ZG(Y{l*L=x@jKIkv+58|u$ET065x|G1U9#GrcuJ9bp8
z66LDEa(s<;>^p7K5MnYNtX8%Q2Ym|v*mTuLiTakgGWpj2X-#Rb#l8cE{%Y{t@0I#L
zg>(y9>XJ9EWcCJ;t*>QGUR#v4zyF!76r&}QyG1QJ22|G4)R$^Nf|Seb%4w3uhX#o>
zTW#vQ71%T`^xMxC{~9)c_pl39=c)3++NB#cJ{f$T(-0cPVXP++x69~JmHNSNm3);s
zDG$g;rQT(uq%Za0gZ*jlfr~2gXO!7!nd5KzX1rr7m<mJZ7nzNBb+N{h%Vkrw;b783
zn}U0}rD3}X%&_$`Mf*n3V|W{BvAKd}p~IMSq1sT6O1=y$c)hNM35)(K;~oe9I@j2-
z#!f>7;SX^GncWKO4acLG<MqJ;FUb+(I63$dNs?9ZUdhu4tDGH!2_!Gjf7>AtVVMl{
z)QMFctSsB(!|Mhm?EEFi2=zZpqS8lEU<<2e!y<Q0yy0E{*$NW&$<;9LKVD4iWl_7J
zi89#L#uUN{DJ(KZSf)HJu=z}rd;=!3w|HmAJ16&kf=U|TT6G}Y2}T}iPb0McnVJ3}
zI6MI@C5z|2h+H%^Z?=6qz3w^8^Zsg7olT{8oQRT#&~rxMWTvB?ocB@`Fe{7^PViCu
zJqc$t>^cy9z3x^nk-=5L-+#NFClP5>q*<Q2#%~&pG(`P<dt@&aLv5qVvUN<oT8ot0
zn4bJwj-mK|{R7$dI!`O?o0sLG9R6f|DUvdEmZ+MPQ`DY@H9s11HMc-lc5I0ZnozZ-
zUZNH(+9!8h_R3X@de{mpk6jgz4G#z5&GZ*3tYqH5q0sI=6%0=838h-&J`?(~pITu8
z>4W>y$rwU1pz0!E!_%A|F(^C=CiWvU%twCH+h<3G!tRD8Uu}I-&G;)mMb=<2kGPUc
z04NmsJ!`2!rJds=61HY__8SCSW8%ru!{@$5UaD0qnR<Q{PCWT?grB9MP5H+`#Bbm8
zwhKM&c3wo2*DFH6fZCj-Dl#2S?)6fZc==j=M4M>{A}Iij24G?zzG68UZJ?ub24!@R
zz%1XJ8Tt`*^id)hX{D)J)l7Lk4c>=Y00hVn;!l9u3>gix=dRcErAwCvRxn*hpMa|S
z$U`<V-W_UJ2It)f(HE}vI5E8JO>CxacdrSO+Z^M{TO9V+;n2al&F8c#iWL3cFCYym
zWgJ^F?bD@(0nzv8iw3U;!HB0S{Eg`&sd9t*(4-hK99i*K2K&d|Ia!Ob*EuJp?DyTN
zI2Ca)t0XnT0pgMUV6N~_m3$5;iX~oAtSI%|0}kKNv>4>!Ia~1^kxG9!<#J7B*A~rZ
z4U3WAbd7#)sLM-nCK)J66IxcN5Z<~@lJiTl2bZ9^jxbE0Q;fjrn6Mk_QVOQY>J^&V
zThK!z3cG_t+%G3D)k@VhygD;IOi`ICMJoE=F#MHhp((j0T-rLix2`b=eFRegbmp_S
zKWrB>U@{CPD(#cuw$LOxD_WNIm8_;U^j|m+XMI;fo)+lMHAc%AE1ia&Qf9*sj8r8(
zbqlDk@amt6XasfOVxzZ8Mv~imH6{mVHsb_^l%iWn#sAkonCzPS)8!UvOUOrOPCrD_
zZbKM}@lVSc!LXEK!G=aInxWA7V*UM+0Bl9?9oqN!)VR?gfrPD*3lXG5;y-gbyO)g<
z|C)Qt-M4#)cq_LKx>pf364&{>`UoucUY&59aQF`2jHZG(*qM(OX}#{zIHzQHaGO_l
zugSg#-Hi87QGfdtJg%v46Lrq!zS%_!U-UU)kY2Z-?rl3i$@0EtZ(a#OZYWM*JwUic
zR=t&SZqNS9H@WpnL(l;NI-#PUMtzy~%vXAmpdSY~f9RM3#G+T{AaCaF!z_wW<Q0}W
zK~&@#_K%4)l-)}||Ddk#x~+XN$mvchRuh1(C(Qk@^dcj6ewVm}N)5s6*P^l5JFiHh
zboN)bhs8Un=8t%8ocRw-F&T~;l4VvLL%<Kco5!u4bMi?3Z_)5wWJb`8b0uQtK6TIY
zd4@BGN4B~%&bSF>Mp|yLk?eHZ*2L7hJ<uPXorBSj5)ULwk;HuaW%GReJ&sVT%Em`l
z6tq{NOSGr$8=WRm@2B#>ZH4RjWFsUh`YHp-yrmB7-Wk&K;0kxlO%D583*d3fyrUfZ
zQBzfIjqKCF=R#B(SBK90AnvQx6nnBSk*&5iJVV^n6U|-dSR)x!y_Xjo2a%2>?+H<a
zj6_9@IBm=%I^wPfkN1fVgE`-?f4N*dT(o+E!oO^G@md^Wt4|Gt!gEkAc+wc^@dl~s
zze}0W)tc3mY~+{`dXAZR@vJ29w%aADb_iSf;^r2t)IHQy;0brOK6CmayjdrJMj9M7
z>pRDdT%xL@77a(e?vs~Pblvh#vMZdlylQ1hL)V`#8ezH~)Nx|IE3<;y#0y6Jj8pb!
zE3COsIO~$g=fx*ow4T@9?P^zoGIoccCA#?XKAm=lAVt`K?me~9$%Za2FeTsBr>$Q4
zEuV?f8y38t*!{G=a2RCIP{N=Z0ga}#&_C_y5Sy4Ju-IJ+L%<7)LwC)t=Voc_o|&=r
z*oxEhLG<_+a4~)qyS<qCBVFSv(h|~01GdI(cFGm+giOg^7j7H1*6us_4LT}>$E|Vx
z;lr3y&*$#!?Q%Kg5Q+YILE`e|oTFmb7(I6Vq3!$Q<$p?B|83Z+LHp-HgfvxkkPP8g
z8#X%z8{|mD1=Wg9ti5ZU+TYUVOEvkeD2;z+_G8(55Geabs7XITWjD&7uYW`*JY7KK
z|Lv))1dQ(5S8ux{rVL%|b+W`J)xTexvL_Ui2U5p0Ehhf@(W4u@rPjx%SN(-<oti|9
zOe@{(edBUuDm$8*5I5tH-V@}e?iAE~BieeGwHxN->W~dWp;z%bYPoB$=y7e%VOLfY
zDWttdAJu9YRWT<BTPSn<@h+9%x0w*dXGcoPN~<c*ea7IUw%-JS9j(;3C5=$ZwU+RR
zn=@M_Xe^`}sgNYi)5PoNmR*)MS~yv<7N<cj<E-^GWYGq^$be;+=(6di#*4LF&V+{F
zWbQ50yX52&loxGVaA_4A&j>gBnvlh6sn*$Xl!=PYY<A4jh;mqv<NaZErnyc_mD}S@
zpRwkqgA;z2d&C^x8kE-RY|jbWuhg(y`5Y@))3fq&?<hfO*sdksviSFp;#qm*{dsRl
zWN-I0>J)(5K_(FGocAa$9i_Va3DS<EeGxg1Nw*KU=8J}jds|f5LfZ8Zr{La&Z4vb!
zC>cvT%?@YYRXqGwQ<=~mByKR&;`y!pbhUHh?1M|P2-nSv#d?qC0BoBp=__1NHs3O?
zT|M2>_~(p=<JFU@?sv%jzGOhW#Y*kUS*IBmjfQGD7%3p(ks_gNB6U{jVNIjcBke^d
zPpOhLD#q#j1*bI$W9&@B3v#$4H~|FOY6XVv)IER;0lPV<o3O!uoVly&jU7v3Md_Vz
zD)cu9ep|ZHQp*luh#rZSwKKdQ{`A>=nm17+23EHqxJrIlb}@QC<9EK|98}1lzz#+m
z!SMKvyhaZME{;reoQearUV)AwA`59FKO^Ex71ry0jNQ+2>JbMX<#dpdKM4UU{WXbk
zb7%;p>G>H#I-BH_;vc#v2dpt|Dv#-wU!2czl6g+NIbe`ngHDTP@*>w>X4_Q+jZlb)
zDJporhjEZ3*o0Ej%yGUJZ=p0@DB}Cq#8=2ITg8eAsjJ__FjL8LUcdyS@3zrX*z=|A
z2pIzwch|deDoZQUHu&m+0NqkXykW2HJ)tMr=kUgThSy8j1*_DLBFkVvo91{{s~#FD
z^acKA8_eVzDHs=xOlU6Z*Ts)|=s&DVI_ULya}A1!3E%Rn!kym_v;z*xYO%F7nwk^K
z)nq8TficLfmV2uS^bR0ikpSZC29M>Cs+Ogr7$i@~1)KoA&N4%iU6L3Lc?i)h7L9Tq
zO93edC>weIw%l6%?4-7GWgYIEw{Tf_UaQl1XQQn5$Tw>lYp^2nl`h7le@wUis3tnf
zp3HXH`ItmD9%v=IC)%xIr30y$o)FDC>q0=*wAK=^h$RY_nUxoj2R-SW_N#svNwfY`
z^vP*D$F2651jnr}+US}8SNxj=U{PFZkXS^}V7Mg6Z^w$Xz6SoxFVY&O4pLXv3y{Rr
zvW5VjPsP^{ZJV#~!mifdtmWYQ*i1aW>I!2;Bs_vk@K(9?vZ1AW7ojC}@p=3AE3}U2
zmMOZRjiyD<%#^hihS;FYh<IcaIeG?|v2woQJaR!rPSGITz)l02diNG^j)WHb>E5g&
zQrXtj+a-h~)IhfHl%ZISnP(L&bYqxB<m^2<Zyi9LA?+$@QrPeiMBHfNUF1iHajk<4
zA1OY8_&Xo1Z<P~}C;k}N7Ld+Nj-*mq^Ml!>Neci_*_X-cJ>oBc@mJ!$1SHsY<gLOX
ziF6Ujy#q?<0D)9A>;v7brDy2P>te#H(|EFC%A8w^Nk7X3(B##9-I0mv`njEx+7$Ux
zc%?Y;WWM~xL_;oweI<1VoE*Y3z|Lb%O0{~Q1(F$=;x9EBw#ttIp+eu^GzRVmR=I*L
zQu3ND<&8sxr;#7*>dq!oI*h7WRXyQ&%yT#i3|1shtoz?U$~Hb0LWN&C2YD4FUW#Sz
z%xs6?#OX1NW2JnbYWYrkByMmP&mgwlXdT`)4#*H*#BwLjyb~_BCb>;S!4kGH+xm`a
zwTzM^;z1m*`?2}=|Kh2wKK|n0bN3Ew?ociEf^X8DCx1|Oh)np?ORGeNfk3DY_*{+-
zZd+s3I~Lczuoa;ox5s#KUic<lh@QN26?~w4G!*rs;esL}j903qu@3OKI6eu6TTOde
zTU!VnW(GcK=|TxnkEipUV2C=QiC^bGg(iMGH#oIL1p%zp+xJR>;lu-eU+bA}G<r<K
z2s>z`Zzxf8Z3cl>@IMZa!KA;ONP)PdaHhE(*La^iEQ;FSS5Me<6MuJ0UUqyTiC%q6
ztWXiz#7Ao~S+T-FxmpUCU_gepQAhNkSrC~GAgsw2{)kN46Z958ax)<|F)n=lN=m)k
zvMH#8NC&yrYCCKdDk;l1FU1`NTtZ74Z>#8PY=Hvy2yF$Mu`gXrm;V+Ih9Fi*ihuqb
zr|KOIOde{HK3PWC^Vsy+JlDy0!gBtxUSk#}1jE(jj+?Gn`saIC<NmJKVzxWx9|WRL
z(bPQOE|xwr@d;vjI1dpp0zf*bDQkvSWA!E^CZ_Q=N&93tqw9_^(n0v#IuuH`D1WJ>
zxwLLoe9}X(?7j*l3bK&~RM6(Rf3A;@%B^h^Y-rN@+G8Lqd2RjS=he5>a!I`GwzxOi
zq?0L9kGBwu)1Ne7goIOfjwrwE{8~plg*W#7pNpIMM|2Q513Y^j`{44FEPrzK-C8sC
z{oNWaEq#aKKxF+@=tO=U-rZX3@U=h+n>a|zRoLU9t*S)-(|@`b&E>$=8&b38$b#YP
zCV^}{h?lp)c1KjTg^8=fG+5*9`TBOoG2z6V*QcZny8;dYu(?!#_*rVN4=@M>c%5Xn
zmP?IbkGBF!PhaA`t|a5u*qpF?CVT2?u$k&n;JrGW6Zjm=-3K|ZS9`f#3YureZlBwt
z5ON<6W5>>-uKf(K3mo_yg?b6vB@Mbu?HriMFj+Wp#;OFAe62$_rP|UfTO|_+4twLq
z{K_F^m!$IjtY0RBkc5tE!2>?d@%r4&d0ND8v1@v@&;umKXn_Tk-3w;Fdl9qpS$RIr
z6z*coWl|@lQkx(qV(N{d^iO3Z;z1rB*4*0qE373Uw~s{4==$scsu+rrFEzvBrZ=3`
z95!LpF%o~nW3?3jlr7DYY0&aPxLO;epF&J2D;g^tJBf+Jd4eM=gLq4%axDoD3Wmum
z`Gn-62nh7RUxU~Qt80IUQKat8SDLIiMaFx7TP%JbhX)8-#G_@)N|_Bt%l~SjEdI6&
z*ZY|QK#IvN0>6cBb9nee%$21?Tg*sFS&VB-d$S!lZI;FR+)rgl7^9?S-%;!JF>+6_
z3;hyO?fN(Us}UZ8jP>#Soa-MerRHp&11U+lr_@_DT^-(xy)|!>ULo+mU&-tXNAR(|
zNJNM(Gn;R6%|c-I^*1q;6;jF`3evCkKNpFkQFmv*P*g^bf7fWi$Sz*?idH)H=+L~7
zN#AYbPiB9TOP!O7$((>_|G#UVFO$6Hwan9sFGG}p!g$X>cUOQPH#_~djtwT&JHCKw
zt8Io9h2ICkWCSHR7vnre?b-|`>EpL{nn|e9<(rVNLvwQ}5^C}fv%m<~EAj)obAH)<
zT;FWRD3y6>Qk0!{wsA@$3U~c%9ym$(L9+Ai#y?3BA1^QmcUvp40!fu6NQc?<DmjBm
zI3UkW1ixU!7Pw7v9HXm^&KqxX+)JqBn<0ypHX)cO_yBto+lS{>_~OfM^Rhh`iQCS?
z&M{o}fjvPr7I5`okOKWbL;O8Y5-_=nLokLNUlHjZTk=si&|R|%N9;2k^oj(>C;OGZ
z{{BbhU{{fzJ~Tf+GQck)9Aho3AcmLM>$$npANRlFBCi<*uP_`m8oK*>RSpTJ2a(vR
zjd!p9@$4vj>UGR1biC?sww=t1TE-yz%SYEjDNxV`d>Z9uKdYMfd0f?!`_6M*v#;)q
z;mfqYql+f|?wvy!N^?ur_mN_fImLY5>>P?fOd~av_+2yn`P_(YgN|Kz)wTIg;O6#M
zo6<5to^{phg1{O{bcWTR^gg{Ph9Un~7Pcuj1NbJ|bt4%E<V~Y0lNt07GzF1gApbRW
z{9Gz+inlOTU`Ni7iSlhky8T*nO2?33u|5nsJ?O4=5;DkddyZRcPeTR#!bBjovrdl*
zUYvFS41BXJ1aeit>vs9mMER>V;KwsycoZ@54}2K@=Xs!70DLf2Q|V1I6>8W|s07E)
zC{sx6_7NjUM5s+=&|Rd8$y6#{Vm613)_LMikv{%|pQZrcI#j`kTu08ah=^)sz~^Yh
zI&N_yC}mhQgh~=!L0B+)G@!ba2fo@2nuQeE^KN;=;&}U~DnNrj%4NbuX0^~LeC4z6
zzgMwgXdicEc|F35wnI0-UMtL`^N}aOH^_EJ!q=D(W9MCvz15L~AGF&m0hWUfr%m{N
zFqmzsSzS35M8!*zcgeQNEu=0p510;!2Jy&Gdf@U7C(;zlrGBMXDhQcplSW03NU1Lj
z?T@><-$i2JQlR9jSh}7SRL%IA9g_uPjo8JT35phs|DbsF=|EUWDY@Xz*S-q;C*^Zh
zb#Nv0PuSQrYn|RG7`!#m%S+bHtb@8E(k*BvXvUNMCMKlJ!?oxIF@X{LG^Mb3W!~&Q
zoqIeq^X@#5{r#ncnvz}LoNprA*!a`|Cs79JFH_7*r)E_-+GdFj(%J-=D#i^)jv?!X
zW0fse3lX^T{EbjB?u0qGij>%IXR5j0pm=aDoA=(5XNa`JeUIZ@AhuT-!U4MIxT}f5
zQVNLxF6xavI(9Ujb$(cjBfuxC0qgpQO%6JZR+{wyMhB4@hFKl&#n1-jt&P~W^6TY5
z*OfZ=8Dr^a-R-Y?1te|I1_qUO%+W7;`Q3U&A_5pak&*`R!EmFo7PZAZfKcjveif~8
zZ)|F-?<vHw^Qi-wUVR%a->|+{5Sv*7V@X_@NbZ|Tmkdu+F!C81IT%s>%?(1PlQtYa
zCz?oTD2U+P6ivRXgTqKpfsKLBTi3BMZ)X!B9>3Sn`{&CPXBML(B)_<nvncQ-6baP0
zOynNEfR9+`S+AKczwo&~8r$|ZJ!9y)Yw^$H+_}%MiP)3BRcK)lgLlzio)<cax~Z?H
zeFLliD|}CeBQYSw@w`df;9!CzV`Mq|xU>6b-<_>247PfUsd=Jz@g(k3BjF4kdyGDh
zFax@dy>O_*f?v2Pv91UJdN;TNHGd>SN9wDTIceA|HueGYb7;uXQ1QhS)Ow<nh~0o*
zT6W7CLnz1a=8*m)2_*P<A1E(?==L_L99~IhyItQvt9K~kE0HTT^~E+Rgf)bQ_CYkU
zo2>T^aDpjiKihr+1{aJ{%v+Xi01O;L_5EscbR=n5U@n{Kl_l0;WthpLxlq?284XG7
zhzPtVb7hp<n}OjhTZ8FAR_)4$%8Prh%0`$~#${--&V%-_m7rTm7rzAt9mGTS@BeBp
zq|6f)ib7GNNPY#PMI<8QH$}(IYI8@l*Lt3?CE*yg3%spj(OUG5k#T-jiT;K_eIRhE
zw<l{ZD>~3*l+i}OLN5-@11D~E1iKBAO&#NQ=GX>eg#8d|8rA9e1tU&gN{<oaPF(s^
zN1H0+)^x3(CiF6d>d?NBhjMZb`I!$K>tjfY!IR=`GN5yYd7X9X(M=0ii3wu|$4fl<
zZp83cwp+oMVqSp2KmBp@awrL}i{=-CC|wIhCb_LP3x#(ZY}<rwg1OGE|E4csao<2f
z%U$VPp}3Z(5Rg!(ya;*weQ4owT2|Mt`p%g4t8Pa~bb#!}t5U_a`JSk*%oYx7#tP36
zI`PvHIZmm1QB+BNsrnwCGX0CZ-r*~}Yt>0%H*!y8#ESN4rx$9*xeBMW{|@a!*&&V1
zFXcO68=iRA;@dnC)Ci?knx=}i3Tx=p`)$|+9%u`Mwfl2Qjgm%!4D9kjit}{~!~9ri
z>aVUC?O%ul5Go2*(x~58g&nT`CzGu7Af?4G^Rc1g=u82XDwIK7%GA|H!wbrZl*8tf
zCBvzk+GAD`+%3jAMKdk4*vY>c%NuB{taYd^<D>8Q{IO`5yXKb|bLf?=gO~*l1T|;0
z%ZmQPHo4Kd0eMjw@#$fpW_)aFK1|sltY`fJ$}iJCyT9ReP}3Z8;SkWT*>)GOP<Q^L
zIcvg0mg9wrVvId?ZPsCbiO2rh`zb0Qvxd!1x-X2b6Vdjp*PmQ%1gNb8SXZmN(gEbT
zLHSMq#r$;vvkI`;vNRMz64bB7xSn4-q26@M0YV7UfT9>BhQ!xw1!!zD!1}r$V$|I0
zy;-IqLQu$1y<kF6!*Hd%;t3&^cLx>j>x&EH=Y*Ir&-QgTixsnhe4ORCT=>^-Y7XnA
z&u6eA&(UxjDy|b{&^mYzNbw&(D?Y48g#AQ9aV>+)5QN<xZ0GI0S(&P&R1Y$?+cBzM
zlNdDn!GKe4_itA3eupjyVqF@j&B881ECf(O1qnp)?IH|iSiLa*LvC?YxFG_%_{{wQ
z$`H-8DX}b!5aIN4oaZkWx>HV@$-NsAufgj(M9k1HM7SXTnQBa`H4VmdPeLv(SwbO_
zz(H;VU(4lf%5i9zO89Hl$8^jN;*U?9fT6C((r;~KQ?}7E^b!S;9@5R^1_vVtn@w>o
z3{p|6S01_}6S_L}*SXkrljH1Parz@+laf8lnp<~eIt3DNT2^Q0fQI5hu)~9$noqDz
zhtaBlE!G4?g#`;`i5}L9X@CUP1VYyYA@@Y{ky{wpNg6?5QRE4)DD%g4BROHS4=X>f
zzRXSknEf7GGyKMT#7cQ!&2yGqw_vO=M(B_2jlfm{_`09`L-0>1-*gwt6q%Jj%W;yF
zAN|<VAYp-y1u}s~UU8d)GWaTpr4X8#ixRz~8EyXg|2)6T_nL*vLk^);tP@oV*c8-6
z<BD5PHR5I;{;qqI9V^bP-j6_)Qf!y(_!+LJT4ojnOsuew$E5(f?VAqzQ_)Prkw;5L
zKdee$YU6*5ci@?Hd5J=adACJX7@1LZhVQIF7{Q+FMz_|%Y}*Acf9s8jQ^LNH!Ab0X
zbvAXc<xe@e=4CN+o603&eo2E#fGDFB5$63$jH)%}bnvuqT?NI+YD-Gn4uN|$$(8M5
z!6;9%X#D^|VQQ7@B#M%p*pQ?BW9nV|FWG8S?{*oh#fv|)Cc{@zUaPLi!viXQVXxlq
z9g7Gb{7=}GG7A_YK%gQIAqS_T#qK|gw782_Wct!Y!vkbw=Lg0i4q4Km3B#zZbt;wd
zO#Xw&D37ep>dTuK&w42NZRy|DhB=m99N31vQTW}vX~WXCN_xyRbpb!|2p`ii-rEjs
z+rIvwgd@uf_7qM*(g}FYWGhWF(EeN)6~M0oXrPE1EfPqKt^^`|1SuA_T!O9%jbP%1
z?8??sj|Dm}vTP9NSrMZ(=dCxr**Q5$<jn@ViLJ}k>`NF4uzb8_3?+y*K$dawv0}XK
zOG1A?4OYB?b_r|OD4_#ju8e|SF2lUit#(e?y}~!*-mQaC&dpsMtfp2I>?0QFL!_@(
z1xYZ)X(a4sDa{u+F9N`{svMQ@;_%nr6c`=MF1FE9-50ek16;D`9^UlUXzI8OKd22a
z@_vXdkm+b{@q#H2R4E_Bl-jEN(~~htzDRMTJXT*vfx+Rlmf{J19xD$k%K_#I;fHN^
z1k*PPoWBM`erKfN8ly?%Jq}Ok*zQ3Ad*e^Yj|llcEq(WAaOfxwGuU)q-gW+3xI&0?
zI7S2Hysxizf>;HTUSncIyj%Z9q1G>WUX_&o_Bnu?BWEJhdW}5g-yRNTGg}xOryb~4
zQD#zObxx2vgogwe5<K`#=9o*x0GSD>1?YkBK%uYL(mF2cN%5mvOqL;I#QeIMSP9yX
zFngbYwIe1vWhB!T)}VTD2L0edD@+2n2#=gT%yzEl$TLl++OP}_!rpI6ZX<X0)fHWH
z^(8Rbt-R345wT2E>;CP|NSqE^Q8K^H*+A{CWkPB?w^hZ>Y|%mu5l@&9uTiziI&csa
z91(t6oorRJE9+3>`ff&v!JA7F&8qxwJ06MuFWuKUDw4(M(NpX3KTGWi((Y12x&7ny
z!mX%B-11|HVXt^D8v^JWjl~N6+$B~_%3BOC`BBS}1Udc(YysVjiNj>xB<+Z?Ho0<|
z?DGFf_Hp~1*BsFNKmEH_1RNl^agaAdOa?*k8v}w~X_Gf5>1S`T{)3CK=1R%6@3L^}
zN!5?8=DZNQKcf;HzyeGf4_L4%YgZ@ziHKusNcu!EC(s7C1w{CZS{S?6z>68aOH2k)
z;!;=c#zZ5yuL}>MO?f&X+r&kIimKU|FHA#z@jwBZ#jz+&^Tq;c1Vav>6JOu8xmue%
zodtG@0fi6WLfSHBrRbh_%@<3qL!tqrXE2$R67VNt^-)7NI2;19c7yeZJ1$Z~ObB;}
zODb6BEFk~ba3u^<6Of9hxW7x6ONpfQxXP1!|D-OMh=(NTmBaz)(FZ+tO4zs{(o!W$
z0F2i|Df>S374uAjrdUK+p2Us=1m%BSz)sEL--cG*&39=iTuBj5Q5N8iY%-o%UEb={
zx{9JSN`m^6?4MyE?;szQe~$6nbCQsA&H<w?hWYl}l+;|0>4I0|tL-WOJjpuI?STJ5
z7~bH5h_Dm${IXchCbs?6i`tt66AqSE1Bj1tvc2Byod(2LoFkwvD1-qBhG<G0hn9y;
zzQZQItS&8JOKW@!yR>lDN(nV40QyjR^_?cvSm+w5*dj6H8u?gUPVZH`UjH1x@Q@DY
zn)?)bB>#xi*m`)-_EonBpdLK505}r-0@a-q$OkSEq4G`R=|upeaFqzbBpPGTla;qL
z*8M{?cDZ<ZNEZY23b6S15`I1)HaHmy>VmzSuSBipB-1VEU>~d6&*E_!_Ib1NYi&Lz
zOxID<Jp?|i9n#2@CD(VyaOaB)P_Nx~v^UQ1y3%N9>AJsh%znPiyY8LFm9oqj=ERl{
zfNCQiPv_X#x2e5mx2bq{&d0rYohQ6@NIr};j_vUwK-~4zi>g1K(g;B{Z&i<{Q=A^d
zxrWU^3-rkhlk&QQZ8@^<9z^I*EucIs+Ce@$I~`(X6KjU-xavp!Lj>@Jrj@VgN`8Zf
zL_4o`3BxVC&`0Q4mG)l=*G5ijW0&pIN0tX9sn6OWC3J@nCe?BEtu`T&M-2x{eQ427
zRm<0H0!%HPoI$IoWyF6)T%JasT@q)s=a!W%Csje3t$dco)h&9Em0RPwPJ=E-OL*iU
zX)ZCOz{l{?=Pvc91I>G{G`{f20^Q2tvS9NC-SKK9aa<_(f9D6JyjB79#BWv|lJd<b
zEWKq@AEPSCfvP^{gMR-795y~-Z&L92j?dztms-70R<;Xnp`u7xCki-fR`Y6?C4$F5
zc^-XL<(BOS25VL8=Z0CESd2^3@ir7~bgAbKjA!l$5x0CRgwn&V*=-++(;gac7}nmk
zmtjl{_vVBY*x+l@F<yW$zy?T3=dj;r9A507StOP4pXSN9V6-HUvW3iaZ+~^l%P>{o
z5Q3rhLEIdwJ^?E20+c?<iAY7B@z1CRiP(vUuhMo~0Hp~Mgl%rbe_tvc-%GoH(0tR%
zVb$SoS)iQtp$KL0y!06nzFIoSS~`Q|(?JJ(y5dB@P`_aB_uL+YkEOZ)>;hLsu4FF2
zAFcAn<si52*KgHv3ihulAf}DSv@7Yj6|3nLIoaw~siPuQ-aeD)2f9265trk$*$oj5
zlzz4>6-6$O8}@fK2%kih)MZk+_H(fd;6W#*7DMu%vjW>jm+n^JTRSv=e{J$0o-(1y
zpDmTw&XX<~&-zV`c;#&&0D-npz#CsMMIn;4s93ZmBSCHZ_!qo$RY|NDQ26JyNKk@3
zVI(x6pAt>G&JZ3r0mRrAU5<%i9WdSvLGL&E^$foib$drdvQ(8YL}F1I&gYg<&bZ5_
zg9ixV88nN-=gd_u6eI+kGb1ar&EOmP?853#=Y>e223BzzV(lPry2wU>FspJcQ|JL<
z48ZnEvBPg(WeIT=z$NPIWvLx9ZMqr*9+EzRGcP!a_U~eirqlwDKzYIH9P#^APZAA3
zM`<k|6)9!K8Q&E-m0rq)ho-fM$}?GR1(FLBl(*+*5GvQ?JQ%R|-5lP6Na=A9T{W~?
zvV0iPF#1kI2NQm$WG1g-?Q0am@UPfXpD=CM7*c?{(5JyLc_kdqNXyxVn8B3k1}T*X
zh_s;S(-E!-0!VxT;|~CR3)XuTBC8_Q6*YH}%V&<_Q1JZ$bzhyRTKx2rAp2Gn1+fjC
zYjyFT`sSZPyK>2CRpmSB{8$<p*^W1ni9X51Dk9;QQU^mz?woevWVr4x#YWpSnMO8I
z)h2)se?Jx_@LUmN7Rc*X`61))YJSp5US*54;^{w=j^j3j*OznL8tDT;IJqJH2{v^&
zrK{Z7dk;!*)$ClVfR+{yo8e2EJ$;2aA^v?Y;k@G{ePczLVLca4DGeIUl%t+W>0idU
zo@+YJ5)d{<zwTceu#j0ua+Awn6KUe-DPb!u98mn-hmKsV0!^BLKmY-PdgaEX!T&TU
zI@5qn-<PqruT2ec=@$<)`V#ftYoL40P;ZhSXG*DyWQ?=5+M24d)0*I+dhfpE3D392
zg^YY`JD|dLG=_{p{utt)zy2QH_H9V-FA?k!p1_CR*|;UIxqa#J=XbA-*H*{R)Bx&g
zbp&{7ZTJ+~ZsEa@QTQ8RID=aIa($Qy$Ovi+%NZ&B84-;lyiL)#Q1|JO9A~-8<qYrW
zV%uZOb<Y|gu8?_Mj84uZ%~IvOOdZwhQQ~`b@UU**E9h$9&FsUJrR15-)Ge2=0ArL(
zE>J&_aQXIf;k=I2CQFHYjoVh?4&@?5hx1RdSW8{ZVv|*9T4-2x9`gxci;nEE$>*AY
zL5-0p_$09(o&@smwvFMZkn2r@YF{s}lBw);xyfE7HwPV|Tgz@s1B;>%^ZvPlxuP#`
z8Y?@uy4=cXlrsj#QfI%DeZMb;G2?Dr2=hS47Tk-gDA(W=f+ow0Y~%UXo=Qa8t95}z
z?H7cUH^89l*_UAWT`?z5DpgW9{Nr~*dz;s!-piV%HK#}HfS*WwAC^#^{f3U%q8!|9
z;fBj9O`c$z$U(~1!ZT5o$&&DrrP9RZB9n^{TlUSTNRqf9`>g{};z_~c9tEg`B~ri|
zkt9zrAhZI_63Uw$l`i9;cV0hVIyqNh09qU@m(XoV7VwK?SZ)(gRXHkvFU`%O?At9W
z0Y+#Ny_MCkU+}Pb2=glG6cKv4gB2apMvJhevdB&vgysijo)i-pSSFn0ovCfPIP{|W
z^Hbd?FLwSZ9Qcki0X$?kTT#0a@j9Saxd~>rx|JQ0BRbf#^rp=qb}j^Fbdqq<kK+)|
zt1JRhX;ie(n6<?>Cr{X%c*0v{6z7oVp|6kI=Fu4t`>|=m{Rq%`Ow+((E9Ew=W{)Kw
zMldx#>A3LrLOjje@0(elPJitC&{ON;o~Um>!0xnL=$H{-c&}e~gorIxi#>U=o~#NX
zFsDIoiJW4L+IYIR0g=*9UN19~5U(f4o)3!NTQS}?tOtwf+T>eE2LeNj4u3`UhM1l6
zEz$fyK<}e{?Q_ceM5YQ;{z=%u(Y2{M@5Q9ff0s*FeF?Bc&8AZj1!%22hM>K<udUVT
z)pT(~0Q(2vOt<D8V{89=gsEL8A6AufgpL$L7)CA#fki*#4%@UuOhBfMS>M-tUKI4Z
zm}63qq}<r=nN1ntsp|RJ6Ce*MA#=5#xH8>Xl~r|u;E)ymj9-l(f0Enb%Q3WH6Nazi
zwOg@_yi9JlX!ghvi5dkmK-tlMI-41IMsWW+Oo~<s>Fi4lfAf(Eq}9?d^rle8AknT0
z#gt)m-voeGM@+w?FBg6$JNTttH>o~n@`uNz0?l<w(nuo9=}h}+#Kq&9NGIY}$`e#}
zc@>OzkEG1dfN;1|E!auKp|Iy&y#x7I&v7ZcF4lPjL3j1QhN|=T2U`)fzd4Da{cS{N
zUpp1xckSEeFVoe<!DiIi!v{{e7}_xOX>6AZB8)&3CC)@h@@v!Q55(>Q2v|5PWazy1
z2`^o1n&xYyI2>8WC~w@(wl5J7b3-yx9%v&@_F(kKEvHyMH7BU1*y`^7J|;NY&cCn7
z14am;61D4{pd6QyH>DD^bSgdg?ZUE~(_Mx?ep-t%DhR0E+Tx$qMx0Qx#}GJ_O}s%&
z^htKrG0B6`IF!6WR61k-{_9`XTjfp_>7ADuO$tJ{tvGdN%dtcy&4LS@mfzM@U)eFN
za;tB2oZ!s`bj6D~wkXd1+^;88VYrfIJK`X$!$k-#(IhLOO%HY0RW_&Nzjkl+T;MfR
z^uhL1p(hn;WXXN$kIwPbz#A}anu<l8^T!5%nOO+UJ%m;`dwe2B3sC@CnR;iP8`cOZ
z6z9cSxk#S;rYVIb%POG)U_HZc30<+ei?aJG1^)vGN%WP)$JNlBV~PLGfr=vGEcH>W
z>E^rY#cU9ue<J>v_!z6p=Vi`?JEYSpz4jW2<VN$y5iXM>1emiV9=z3P)q;ks0bj^`
zh&CB$lrR?QqTp)Ypebk*7!Clm3z);W^Ksmq${2v(E)*7v4cZdVMw{}EL5mGJXZ;;~
zWZn}`w|>UyiypBD@<1s4QGe^x+!lWUBE5`PggX{1x*1$p8>EFY+r$?q=`@aMC@FRi
zZW7(%oHWemFxcEfKSNT=Nn+QolU!G0%8$f+0`IhWwZn(OE6fs>DT=XS0=20tf-dAN
zG?-w7!Gxb08$t_McI%Y4KdFCue^*Ao<hg`_;ezgBSgHDlLcq7}fSVQu%$Pw<;96w%
z=5~+>KoEjjL?yDB$;1)hCB>$Q<8j$7x`~9OnH|!6H~ex?{eE=R-6-Y=vhzG$Eo>vk
zV|ELFA9AbGpcJJIT_xLvw*JK6V$KM+FUqMpAK~#!8QqRnBx;XfIsf*+hg^(6qTe=?
z<i-+1MFdJ}I8T({#Og5R-Mv|Hzkj)Ee-xiI-FN4n)?(NDwi_Itn|hDAi<O{e@DO+L
zVwR<Ta<Jh!upaL`@*kdNtKd5OlQMlL)LyQ-+%SCN(<L~;;i(%VJt~km5RWCgkQGq%
zt&|7T1zQe_Z15+t7KgLoU(9O_8qHp9FJB#q2~Y~!d!;$l{7t~B#CaWDSgI16Qf*@>
z-7Fx0+*z#S;?-(34FNb~i5c)fT(c^|?1O?8vt20a7Fk~J;KHm6uaB1`x<pl?lxpXq
zB7u~ZBpufw<s4i-cb9%Vcro32xX15#!>Ah|0gvC>&&<qd&*w!7A@G$u2m-O7iZyS{
zE)}}X(99smM!#hkt?LZXB$xy_dq?YoofFw60rczXA;&WR4$s_!yYIzoUXCb-jK!2(
zQVF01W<+WG{6sfJFmpWMHLpX82rx%|CD8!nx}ZYj<<(OrxBsBGTwoY8Pu-7jB&<(I
z6WTE4--Os4l(DFvuivWS2ykQ%qERx8*9H_xGaq2M4g~Yz1%5n}#2C058veQ+@#7Ut
zK)L6>5L+0PW(n~cL`6&U_<vadnh-n{UT1@+XB+XHk2MOJFX(NW|0c{iou6pU(QN&+
zhV>!q$z%|4OT_IppVU6)2T|gTy14q<bnW<wX$(BQ*IeWB67brtMzohXBxX^*C(sg)
z4q_rxgmODSkCZh$=^g3^3qpf+p#3SMOLt;Sh;5&~UB7zUn|k|irqA64p2*r(-$1;e
zkkM0XQ7zXnzA^fv-Qf-{2(ne0FD!=Cy2Mz7dDw&Fl{4s^H-3g;H!q}|=Xqzj2w+d4
zV&RNy5F`b#l)^xn*3x;;VELgI|Hq;O5ZD&oKu5l|8vFyK=!41^F$4rdjmM%#hQZFt
zPycI-!Ct%>$h-Tb_ggCjKzr6&1x@J8>Kkc*0J|LF!BEb}kr@Q)`$KrbKQj2-JHv1=
zaG#Vo&dElEur<)bJiv&0n|Zo^bzskPpx-Q8_xpYEHWSx`$&GF~62CRr+odIxXu!Nb
zb^W=3-RoIGRCb66hr56D9a#dVI)v}qjq}F+WXjv^3;XlIL?%1a<o}S28p!c--F+2)
zEyk9)Pi?H?fr<mNTo1DXEW0;-bR<0>fPTPmnZ-)OnCH`oE*Ilmfi!+;vA;fiVpl<p
zJKxi8T%?-$b-*5d?VA?ufvsV3LiaP=kT&uozK0OtzcgHkZJ`ma>D<13>w%)vjb&Fe
z$0yC*KtYy}-#F-jX#AWN_3S_X2CW@D66?OJ9x5eY<sp;3%wSdF=(fMWvI{jYTh>B6
z`L<9JZ`(-H34r-Pb+4|lhL|uM##r!<EUjN-?c-qnG}Z0(fNnI>*RvURk0y~mMC;9q
zL!B*-4U|qp`LHlza?5@Ub<fD~Br&G#mu;<nsWiR`D0U|INEDa&_?J8MzE+j^7aBu@
z(OqK_IzPiHb0rtl47BclV`yBrmSR!DsJA@_={t8qFV*(pnK&L9OKgWxSGJxx9$PPh
zVr57Z;j}Hk-@kkiWC*vl??>HC3^k0oED6_Tjb`4S1s$Bucy~^jSO)8&{(r29P1jo4
zCmJ+ahu_XwOLLwblz4JHiAk6cBP|34Q7gs&ckRFCW?&&u9HNs)q4}dcL?`=*t(4A*
z4A`{M+$j2V+&hE`Cns&2;uvol>JFv+IV+@z*phN6HUHBA#mUYMtK{}i6yKIm%kzy+
zuWle(PIPLj8Fzv}1W1pIlClqv)ok|}Dj1O0SVFL*FvmY|jasykXR$~DpVtY8jHhPV
z2fk*%m|+;0gd2FlN9gAlTWSF|d%WDYi~MGM=asbRGoc`{-01M=zPbkX0zI-Z``v{k
zx=HqN#f0Z{#TX!t(<Yn0-!&UXffnL$-4ydQoVXI8m6CZbdt;f~|2TuCU_jpKPtTmL
z8QJ#xM-m8;<O2XhlTnJqUO$6}^EDL+!!8^|nD>*zr~rB1urt=>hp2;%+ECjf&fVwM
z@b?@NBE6`{NgUK*gnN*y0lmBeh!<m6AZ-+Zcbe#8AkJtdP*3Q?)A};i17QmK2#w-_
zrRyQhktEV>W}L8@J$lj}a&hcp{R{N8rk0Yti?<tIi20O~k%Sdz9Rg>SYDOJr8go+7
z2tk(9$oAm2c0Bg|`U_Uy(zp0eUFAs;dVsLFd1B2W&<wM=GtiqEu#sln@#muRqXW7}
zZ4c<|ElhWX%5&)rU5ADNSU1T8_ouR&?-N0OcLU-xdXSO02n(7u|4-wp_v@ri4x4Z!
zauxUI4vG8$BF{&CkSHlR$2o+lp8-7!&<0Q&Zq-73<SX!VhFKi8Ib#s6X@+b)y!SEW
zFSH@f{$%JoG(08dt;TZgRwsxMN*bCCr}T9(%JY^SKd;924?1#q)G9J0U+u#Z0=u=(
zL_`BZIL7!7rSDuja9SS_fT+zxcue&>1Z(Wv0&R-P1SI)bn(*8YM!Qu}4%y;xf<%AN
zOYA}{^{Wp+RCq|K`uqEy?t5R0!_oFK@U-)O*}UJ@Xe_V}aLY{G#iI8P;(zqHQ^f5M
ziJf9=JKu2GK~BqN@;rqN#vjCKV=W?K6u8?2XK^wY;OM$f@d`fz=)j%%v2{Oi=7B!H
zyn~-0U*rP*Qy0})P2ecGN~~pCn&e;&q-;EK^f|}RqhCWX(#R1jY|%Ebb7mf}k<l+{
z7F@Pi_2bO1r|^GOFV$k;IYZH+kiw`hT1_%!K<ClJ#50y1PY?g)I@w&1mS$ow8R+i4
zqZIyU^P!mRx)L6+sB9}NQ7s`F*7!OpFVlf6M+w{*Vdy;dUN0}{Lk7aAeH`XS5deW`
z?vM}``sP#U_e-PA)$<Z+lz)?u1EZ;DUybhF+qR2)lYkb|hrwqb=X-xN1od|Q2S&UN
z@D3J(l6W!2%#NIM8%_Sf=JoCllBr%*YzGP%P3K9lDNB4ImAurkQBg!EtAqX_^r6#q
zwQ0Q$Vl1QtSoRNcHm=%*;Ui(AcfA+M=cbQCvUs)zy$iEEm&dLqyxwccwUfz>gg6t3
z%_~m#T|xm>qy&da?+}cF<;M;G$BsDBAhZMg6yT}L{qeN({iKs1rRQoCq~OPTG*cKg
zL!OD8Rbqj&{uvE@t;JEww0_7G9}P456W}3}*KIkPRG8o&K;ExHUG_r42lOxN{gz5>
z^b--!Vg#zU?Dfz2hX5QM8{;~J1mCv5qhHp)Oo4?7ek2uTzZk9jj@teMof1F=pQi|k
zQX%+p3&|8|Dj_4lq;O{GTEAbXTz!qpj-WyPKQ2R!Ftm$o`C`*h%-AdTuJh1>2qYM8
zRgGS!Rc#B?P99lA*mEOF{}pnyD?-<B5%Ifg{lyF_lkQ;~-%e)-xt@h1TEj_l8_2_v
zyi9umRz3%?y}opQv_=qe&-<JeDSt8lF<>X7LI2{dPq)ouf6CtZBn{~Z2<#}JM#DsJ
z7o#~^=2@5B{>Kuohd%j!T06m&9T^1M3-Zl}B7+8?q8&WY(fV@&54oLA58<KdZsB+S
z;R7#QJl|Yfuln&BfUo}nzNt@L(TR^}f*{SRIOLK&6#1Jt2$DUvFXJ7sI8z{P@39Ho
zf-Ply+adJ9LFh$(b3f7CuzRM=gJB4*qex-9gz+H&A7nVEi$R?LioF?$mLE@aKaRzT
zgcyno1oML-8_g1lwmUqMVb6%(-f+VB4A3{k@DKNT8>#bRn2y?v(aP6!XjudY$g{Mu
zxxEK3M~X)z)Ag8orIp=3$aQVMpLw0ZvJO-bCcctAnS~P5o`JuE-~k6&37@r)wQNLs
z;2zu(68|5rzA~(?r0JG}pWyE965QQ_Ye<j;m*DQs!QI_0gd_wH5*&iNyK92G!`)<N
z-aGUCgy%ea@2*}|T~*z^)|HX(SliT8V&9gwX8|ZSBs<e>PE-`QvgPC<CvhbX1NR!n
zOgX#uLGUUwn-_tj(jLA~7{y=<9`RX#Mtc=BqzCoj@2;~9nns6KgQTrq*T}-h&{+p~
z!x762LqqW_zkpIdMP5~tsfVJ5;Q2F?f|jQUN8n2H5uu3K4ug3>2|*ZasioMZ6*U9b
zpr%b%C@vU13ZsgCGwD$<HJsD0rN%3o1W4^DlN1~&I&mkV2V~Jum=6t9pHD~HH!PaY
zqlI?LEC%l&w2V?pfF{I_ehGUQ;vkW>`mMbgHuuh$K(q)Z2o!|7v&xV--K4vrf1fy3
zOTjiuMnU4M@2Mc5#~|*g3FBQ}$z1hG({?_qF%aDR94@f6P>vV6Ts~ZEzZ^cpIO@D-
zxtTA75P?cTug>*<e|hP;*=ES3zqKB%=&PT`_V~PzHx)vJ-(Stm!&wotF(R@%dB{|!
z6M?7oOZO1-reL&I2+OvAZouFhi*v88yl;3oImrQ~Qe(mDY}k^G_>f?Njt}8R`|T1`
zLJ-B)goDgf1de%GZv72q;hEPhz`SH*zT*P8OJZgB8)Q%Rq*#NUp@wXD^K#{_QU?<}
z{J3dkZG4Qop*Ld0t8mb}R}#uJvdJYCws9|sQwQA>ECOp?`<h8Of>mR*62c!(ObqVh
z5aTd6``zyj>awrooxLBmphOSW-o{Ng74Cc}vJw5z#7<sbu<nBG!`d|LfpV<dRdwCa
z5(-qCwFvNNRTA@f|9JCjnEUCYxX=~Shmcwv{t-J9-&AiUu2sy4NaF<_8=J1%<XUO5
zyt~!IVr%6aAKi}Y=W76`Veo+Tt`%^D_SJ{tcO$mVI$6G?1oPa2$hP+<jB5m|$Z?k`
z21)B6b}>=H={B=_TPV^AEHP3Oo*lo7ulmiDMgBz49h9<!yAYuRj$(Jr1=gLjuopdS
zA4KV%(h-gx?Q-~W^P@|ypxOu$*6jT5GLbaN8EDCIvlWx~c-P3)!fO*rSFegtp-7KO
zaOOkr^M#$!rvm+0J-wy%=_cSejP)x}-&B+Ph2-WQ#Tp~}7<$Lyp{ux?q1U1_?K8|9
zmhHn$(~SLPtPbf}nMx~VuhLMu$%2E>8UC-JODwSHS4RGw1eZOVuR;O8BP;&l5KAT`
z2W^&op4b;yLWnaiA(y=uEb!*yWR?PiC97U3;Lc^-Se3fOPHTM8`Q^<O$Ts;0Tcr>{
zYH<F?tG&`UC*x(FP`G2{4PQb2#MAmZM<AmhIP?^#64>MQLsb0kNb=^{Cn?T$0km+j
zx6rr0z6M46zk#)nr6GidV*4E)B4tB!CvpHIV3B!@+(fmD#3tX-Rs!YAm&1-u2{i{L
z2N99g=}jZ^+@&BAa4r#yzBF1`g&77(P0$&Vi|kX)r~09=^$-O~rR);d`T7e4e1b_9
zCjUUrV+1B$k#-fSUdAVLr)5Q0BUEDrUBZ)+y3<yCaMuQw!%hseq@ztCR__>PcQh6B
zY3Kslv8D$Pp~4Z9h3-3`v%u2Fev)RSOF^pT=1fR^#ocz5^|OGL!D8o5y?FlWh|B>l
zJo&B=nd%Q6R5@Xrv1Pdsfk+B3=@sZrEhA#W5s=h5zN@pf8Oq?Q{$^D--@Qfj&E_a_
ztK>xobTI#)gLpacELp7vg41@-6en7lA8d#}r+XEGg=M(K%wefHaXr5vyEAc=oxLH3
zDpDgMf4NF*!+Oar1+xjqPf()Kwi1U6<@7~CRREJ*KH0w%(_aV|P&>!1hlK<MjglGQ
zC-~3kA-;u@GB!krO3-ifVlkLPXiISO$5%nb|3anul1c-r>%4C#Y31kJ#4`eg(qk_L
z?iV?rrTfcTi-~USWjSj(({Lbf=X*_ixtMiL<UdTvPUhV41BIAxG#(C}V;`kI273E5
za)%B%rfghzS4L2B9C{qarUS4Y1dFvv*>kGB-_!?bzfsE{GFgybq0ThPZ3YzPV$Q`v
z(WOge_J7FSfy<qgVfJ6P?71UFYYr#gAuL%>xuE=mPaMLwK%4b@I9IKkKyvOvaB_9Q
z!=feC3Kj}Issc<|tl#56uFYK3mPV_o50iSnwe2si^Jn^2Re+Sr^`@=tq1Nc~#a;hR
zIp1jCcUsxyQ7GKKyQ9_>h<F0Y>sm}Ek!9pf#5@zqx1<%w27Mu6s~D^^5={i+%uug^
zlN+SM^N$;%kDc0|D<`oQ&=5bOVJbimf+*bye%2nX1X71#!Zls)97jP3P^eT`tMfy?
z;KqT2B%xwJeJwuBrE&C7CQZDL7y3_A7))-94xvo^;6AZKP!0wB>*PUnNBE`d$6c%k
zgP~9NROFU`TAOXoo3b`4DEotEy4_5ziykt+#pg!O9l*4DAcRORh!10<c9?*$KC(fu
zB-1rQHUbj;w7c`@BE29hCs%pod)0Wku<|%99Yg#Jk?8V88_6jY$)eX$v+eL;tR-bq
ziV2H%tG1gg<9Sy!X$}}T&w?EHAe}h^D6La*9#iJ)h9M3cmI|e*RM~7m#HWxj-6R-Q
z9|ByuA_F)+x=)E&R-%eKs=$;ok=E#7J?0;6*K1cFSV@L%F8fQ2Jg32M(lG8U5^Ub|
z&}65%Ua0|;&#aeMefAqYN&}u<!!|l~WAe!_KfX?#Dz%Rvu(LkB6YBgEfE|@#dQi!#
z8;swY8Y~J~E&TYl1c<|=HW=<K%1Wr5aJ5B?=3$U`Uy!xQ*ZQ^D>TBnd0s5H;sQjtM
zmB)$rn5@Apx<7teokm<${D$E<VTQ^|tjDn84T7?bhEnmT<OQEAT|-HUPeum#g7TYs
z>hX~RE&?_z@C=4^u3y5`jI)-V5f3OKtf2)ljQRmuk0i4_3Xl<~v6?^}5(&^a6bDoQ
zH2Pq@IT8nHB=c&ru{V#^3LR7?J3Fb^%Unq#F-I|A3*{O)07gu?H3~A~@xj+yhSd95
zoEKMA<~Gozt&#d&$HY#y0qUS=4#KMs^Lgc#5g&U5AwG~9u(8xJhe1>+iId6UU@*6d
zZB#PCQK6abB_JiaKMh)v;JbE^fMvS`m<6YRGI{e7Pay9UelNv(Aqrzj(%hcZs!gw3
za0{R@b3O1_M@CB^Z}<e74n1NZWfr{1K4efy;`ra{$nh0)NH*Mu&*6ECO!Tb+?3+t*
zcBA_e@f1ht_|*E%jkCt$;F`ppmnp(i>8zRS!iMBGQ{E+W?8osbu3Y7p$b!#AN1@#I
z8e7bGD!N9-dbhLkIE)r5LMK5mUW?}NeVK$%dE(Ge$LrdDH=jGJA>2{l%jh_%h7oFR
zfBIM2Ky8CY&PkfZj~~WmO1DTO`F5a|jk`t=ph4*S3p?DaT#PlKV^iBWay|3h73pqy
zvKmmBY1GLjhtI7mR4d{RTj;FFgV}E28Pw{SM`Pjznz7hXsY0neX>M1h-}&rUi$D?b
z_oJX3I*V|+ujDxE(KERN?z2d{@fWgI(GUDUkK|o}db!H&=^f*8#?57?)3CY!_nSTy
zU!y{i`_T|IVuKZIf;T*IDEx)@qY9&9pvg8k-3>hY^6}WG`+#h`hU2gL5B<mV%=E9x
zg$T8fefJsa-fHn0AnmYJ2n$|nU3gA?^WJhSZp;m+(laD|c8R%C2-42*!gg||&3bRR
ztK}1e8K{dy7?=9P8Jolz!6XzpvOT^6)b$6bcK@wGfVySJ4PKSF97W{QkygdQT{Oa^
zMJUfkcy6rdNF7<ZT?`~H3~rxzubs_j6#k(rX6$O@qy__Sj+m%?#N4ZLGr}&`Y*?v=
z);q=gQF{vBhb`Bnr8Npmn3k}d49jL*&)LTP;OVmGRc@k9CQrfbxqy7lhcS_kz5N-e
zy+E@8#$akCwO$RHCbieUiyJQIM8AwmKJRw<PC`lfei3@<S16?ZnK56;=qDl(&@b*-
zS-j`#ftKXT^R|t%#}jrrO?sJ8*NaNVXZ_alt;1XT>q^wW8&D}gh9zQ^scBc)XQxv8
zZ9qM{QQ&YwjmhENPUy%#yi703;K{v@FDZV}gH_EK>f|C4+@>d};>6+HmO2Lm;H%!j
zxOb4eao^AfSbhNdgC9D=o4euM_$Dr`{7ZTeN<vjqQ7CsFVj=rc4OU$n!Mekm@h$mx
z>8GZp#}_9rW%$3HkLo`UhjhZ9<(e)gr{e9I=G<l-t@an$kVoG0R_wss9%-TwtbZ<)
zD-gEXzgkWh?;m4Vn0lAOplv1}{afQAl99cEt8~=n`B5TcP&vqr$xgqT`_%V=8-+S>
zpMWNR56hLBNV>#$C$qg23@4p7T3_~XuCU$Ll+r4fff?=if|>VoFHB3d`k0Ij6Q?!!
z*Z{}MYqMBA8xhfT35VhFyZ7Gdvv;0hClWHRpd#?@XoBYb#g_l4LkA@HidO#UFAh0J
z7(aD8c4@L|0UScOtZTg?>-|gr5Rz%YxU+lHCK!HXlx^m;NO<sB{4}i?o|^m2Z}pS^
z@;czy4MI(5uODcgN38WZ;iL6NhElEfGKb(dSi9gi;RU@H!QZqT9?*B||7>Z^6vK-&
z=8Zce#5|`lHq&X^JXVv;OmFLxB4eqXM0n%>&cB~$a^1qeiRcY9g?^88vgE@Xf{pTx
zNA;ZVTU!U{f3c;tSwSVNB_;F?YgL^;RbP=FtLd68Kf%bB<Sl!FC@98W;WZmaAlZg1
z5HDm_J@NI~CMbzyZZ0)>BwAO^o!j=fu4B?2wi_6G9=-L4O+f!r0u4<~O&#&nx`Lq@
z6+~E)m+lcGtk~#u$iL#n?UcLX5pnM_#i(89mRqz`!q#s2DrTOz__x%1gfN0Sx1%|#
zqXH3kSKHcivPu1fZW_6cUD$A9Vg_G|$9L%kFWql{VA_j8YsT%L=-lu#3^OETb<)vT
z`K55_l%{SLnWz`Xd^{59S3dIBa+U`qL+L>@_6V?Ab0$48B&YpM<-HJ}JCn=$H`+-l
zv|#$TM35%K461$9yx%fO{(<NfupwCmlyW1(5WLPFM^FHag0$bEQ*I(4geB0c_&ztJ
z6A2}Y$JkI_UfyJ{_FEO!iL>?`8}qGxe7-RzweL>@FyaNC=$lUl=E0$<pUx+K#(&Fw
zdHV&kLK6C1r{wGB<g;YF&5njM$L({1K4C|BWzykzmEWTAYYd&HKo5w+xEuK_xEwFo
z)jiIo_xbA~jk5mTQX)-+dfq3m_`R<yCaL-s>NgEJz^$y3#>UhvLOMEYp!{cr>>YA@
zk`?gVYtp>7xOgvlS7N!;(hkb-z&dNfpx)>HBLil%VDP9x_V_&oJrfhBQKxHtJ;?wc
zt=aI~2)mM8sh={kTGnZ>uizv7!gAd`Q8;o?A9QaEt=0SrWzp;#)CiR%S(uAF%V7@%
zK##imG9*UZ@A69Aqp#5M%Jdo-zfYxZ>U4R0X8sbF(1gh_#F~t>wbSJl7mG~BE>WzQ
zV+{+R!ZZ=J=Jufa8!G8p%iC4SU$3UAWwFYmnpil*N>Rrth9HAHF(fwbc$FM{d6h~o
zDhfWnoK8q{^(k^Wme1n{=|xUY%>bgk$!~H*S#fs0P&ej@)qeV<VE8JS8ik1VvvE&<
zR)dr2V!Z=Nikj_m<AaD3V}AQ3Tef(u%8wrhON}$`f>}Ls4r?87pIhIt=74fIdfm`5
zWq(8<S;jQhqqYroEz<Lp^aQ??^C^WrWPzxVv#7o?Z_-V)a`)cq$FV4}iu=;f$d6{&
zzBHu^9fy(C@V=v?Ls91dpy;F#5qUgB)w?Q#{WCmNnN<#*!YguXx3gj;NBofP&x<->
zd@fmd8JWJ-Fxl|-BULTcyuK|ll~B-e5kO2Tw|q8D7Mp$~o(UMoC$x>5*^)iIuwlvF
z8|NzZ_(~6Km|s-&S~;7g`<vA1s+=E+q>8d~$_YB|hmmw+Sa`Fu43~HL?E*G8#;W01
zf%!OHU0ttVzoXpR+Ip?7OLd`I>~1BdVYoo_mdOUd);S9F{rGmYcH1|iTu!yrPoF-)
z!oj6y>{M1(cD$!v|DX-8`TQM!P?$q4))^GgNsEXY930&7>g6&^$H)1VPMBqsmJUXo
zvg-%Ot`6K+2+Qz4>IvKP>3WKNm_Rh69?&)SgOt<U%+?gF12~I>?wuVPQ^Ao5`tKNL
z(vWeH-s#M)f2V6U-RTIV;O72*Cg@o4GF#8we9!&0R>|kj7(d!|e>lti{{1`S@TT(_
z<B&!b|25Q<lD0^$2&6%%;hv^Xd2OsdEoJ{G#J4Sxx4|)bjspVH^UT%`4qstoS;g#E
zFFqa^rCey0b02lbkNYq}romb>nL49YWrE+jUh3K1QcyF}(n=Q;7Sgb=3=5%x!4}P&
zbe?a6;pqfshdJJQ<`eTfN<EXhE^Y!kmU@NE0t5FhIe$f$XUXUlIx$edGK$V*6>e>5
zkB;!v^c8TO?Ve~I9gkaRHC>`pJ#z!I!qHtjQoD(lRQ6n=BYL?SdB7#mEunTB);YbL
zAI)bQ3id^u_ttYO*WqnZM(<ltO59lSUr72h2Q3o*@W{ePTv_Gi#PKmb;v-1_C2cPt
zKCO8FP-QwW_}ir?ck*SD{~3mAe)~;KL+42Sk00}!3wd`Ge(1^oFYmF_G?)?eta1J9
ze9s7A26+y)+-zqi#8BrVppjy;n2(w2Jx_WarmBAK`}AEVS7m=D*py7H0g^9w`PpQu
zBrShK;`uqZP$1f~QVFmm4^x8~8GZ_?IQU!+nvv_gud^WV_X|)2vc{?C3zQ7i&rDnw
z)&Dcs-*2afEKuc1bRL|He>?E^Pew_RG#w{R$^ZA5|M#)Yl48Lj%WI`xzg|I~n;Y~I
z@OW~SjE+VgyJ-I3$MOjS;>B5y*!DtD=jIjiC}V{Xqd=a2jT%@HMs;CJy$zP8axV*E
ziK799=@?fj7ZGWb3P&#V&~1y+M2Y8h;~zuieTA*}|M(2QVZgNcPFc=Of|LfC$O)a(
zLMX1z$Id1H_Zw!PzhVCo{Wt78OoQ2=<U+`in)zry)=P$8PXBxCpS9^3JtOGAQ_bov
z%iZF|6!OKfB$m4Z^BXn(c;5g2ind>fC8Mj(p^N;q)_Y@l{DfH>X?x7c{}}V{AMO&t
zzA@h=>JgV2i-z4DTmAieezI`e+*~3b?VnlyGqNAy{u(*Ev~ly%l9&KoDA2w-smM#x
zW!+ux?f>hUqw26Vr&22MQ@$ksGgEQXN1NRs+Q7;GTItVlM!lY2FFgI@lODAJ6BnBd
zjNSZy-uu@dc{^ZW_RgYQ(3%zf^RZZ1Sd_e`zF;ZQpF{oyufKoW^ZeV5Fc*Yor99IZ
z_z-2C2FH(eq4{^}|F)35Ds%?oxHwv=^4A5xP@^{V-wRtL^0@QGCFySa$HpA~HKA=H
zU~@{@J0V+v-;K|}YV6d#nh%8KaxOqvvz+<AlSvOjeSRQ_+-E@qT%!o@aWKz)mlYQC
z?%x>sGkOCvSlbVS)zy$a`(&~Au<wwv>pd?ltA|*1>d9$nXx4Xj=+@TOhL$Jj{_~Du
zIsdg<Zf<VJU*j|<$H(YoWMt|B&752;dQIjcJHLKeh<x%O7LZh`b9e(d7vJxAmtzm$
zsDk$8!2+G%bthR-S($Q<*CBs8uU$?$cQCxB<_s<L%dg5NW@ZEBeh*f2H5Q4~G&FrP
zEtlNsB0ioIm$(05?+<#~_`yjjDgCz>d!|6G&Ea`&uHE9@5EK$Zh<^Y^n3|fZa@>-i
z`{DAnsJOU){G$R52gf)+#qZK&D8MdxpCG!J^vujjz|j{OfPb6netc)6FOe=XH8oW&
z+eVTut-j~f+yJo)_@61Twe(tFpA`^M#C?Ir$ThoVkr((coQu_A&el5=-k-$!VZT6a
zk}lG!u%6>^YPM)BObMqzBNJhMR-Y&4vu_JS(K+`7ILxg@3u2S~)iFkiQIuWkNzAHX
z5Ky@et+7$*DYFDz<Xw-JZD?iJ+BMAcWCD{5^Q)>}qml}lOTpXjA04quh9El-vk74R
z+an=@v~7E`15OmItST`if*(34=J(=ECmVD%G*adUYhy2gLXZI@Lz^cNNJXZLkV7=J
z#h_js7O7CEuB@gOZ@t_!H<+e>IKAiH&f^^L`+T|CYsmFJ^oF22nrP-+hwNV{6a(|I
zLXwiO34r}uP@7fnMo%o!NXTW_u|U!SdmRj*l_g0-L6P4ayXz(2wgx!C>T&2SJDsds
z&Gq#)ZG2vB?esk&8*_mvhwMNhBnR!DqPMq~O?7vO&HLK^<nq#0QC5KIKVw^<6pIIf
zVe(Pr8WuK&yYQUGz~CVE@~k^a{|Fr|ZSD7lmNM9^03aSJJEV~~C8(*XaoEh)6!+oa
z;SB(28^ZHehy@(*&6_uA_54iwl3H46QDmYmzs~*-pc=pxMzD#&JwJcqqnnzV(ozTD
z3|MF4=(QJZVpHOOXvalIHwc1ff)pK?omXPo(>}v`V$8LoVVnvw=N}jtI5c=I*(QWi
zDr?BZb*vPDgq%6s>gR_A_X35GXDmqazh?9ob9Ag~&}L(f4Nd`*--t9@FmP!hX`hEx
zNU)ZU>@{QBOFzG0L(MIYUtO+v-r9qE)Cw|1PfrVYbKhu0KmhcaWZN%w8&W_&@w3A|
zIiEA(e;jm4%zv!`*)PuxCX<F%tFP;uuBv+;qQm-6@EIoF4=(GDg2Jm|WwBs*Gf|j*
z??=V$w3L)-YGyVBm`=KPFHp`u7<>osAxL!6?%%iV9sfJLO2X3Pk21B(?`pk$YuZ8A
zKQNGa0MLL(N}JF#FtC@)NJ*uQ+}z&sEGXyFgUqM_)Nzu!AY@cGHa7O{3p#Gfax(29
z<#q&2mGE%-b+-82m8J$sbOwR3GII7{{yp~~8Uu_93Gz}M<Z~SZ35SJaaERjZhvsRH
z&5qv+N6G%2&#M4I?2o{q2GiHQDGm5q3u*FB%E~e69tH+^QH0#`&&@6aYG;A}T1MP|
z8H^lQ(S+sb<fMcc{MIL69h&L&argH2_J>meV28L~(6!u$9@Iz&eESlaM7Ef!YMk8f
z-px2`#TN|#i6X5_`VGN#hRtjcEoAac`rk1%?<MrPNyUY#flIj4&Tx9s#yxU5llIvD
z{#<o2(hFp4+FhHk&xv1>=UYViwq@{fD7k>Z{HEoq&Te}f8O&E8dF;DKKjyD9)kDA`
zWEKD_mw&BAqlA#3Kcy0#+WQ~6_7s+PhuZd(mS>sOB)%%uNUP~PX*^?QFW#-fL)|=0
z#OKFNL0xe-tIu9&9*|Wvl^SB<k~C}ndj&F&h5DK__LYK*Ytp(K^LJBaW!A^7mwQ`V
zrnMUvCC?cMA>hP$W&x7ud6|TqFlRk^rq!6|$1abm&rY;Od#m&B(Tjl>CE9qr17?zH
z`3Xy{28)WQolxdmTQfB3peFIMQv4se`3~~kn!*7u>#ebv$e{h;bMu~6%Mi=BJE~G|
z-0Q#7KS~P$ir9=rq_VQIZ?=*S5F^+w_~$ZU5kOU^67Fs9Fc=mAAu}Plc8c1%3!XN*
zsMp}GC0j*1^uJ~cgcTAJQp^dNot@RV>M+^FCXkSjc;}<9{|0(k{@DkFPf_{o82isH
zWfc^xGDw>7-Hj(I!fBcR8zb@(VbeC_acHbFU3~a~{?(e&bKW`hyw+!hic~v6V-tQD
zOmi4urk9YCmhK0X8SFe%^#3YH{+ATlV1z|Ra_XVv<m3$T81livA%<w018D(JDB=)i
zoQ;|R>8mJ|vpx}riEMQ`TWNqH*1Lsz0$iVh{~!Sb!o$O(qGvm)w~361;J6{sa*_D=
z*Em4|l~S&N%a`=<t?BOi27vaEzir?7#eZC(S;-$s8#%wC!!aEpYQ$p#NZs4M0ohP}
za(Ii;4lGb4W+Yc^qJe}7pK1AbI49PC66v256PN}RXdpM}=wkjFL<1LkeeLelNVG8q
z)G95?Z6C|gD(Jf1fV|`Lw{OY6e_MVoFHa2#fp74>sqz@y@z&4u!Rj3u;Wfk*$^kS1
z;sEK5zQd))1FzQtw>;qEo*dD8TU*=hZgc{XZQ)Lf-EnhW{F=G&mi)i1kcWV%)9Ty&
zOCWJ33pg;s&AZ3GGV_59w%)yKbA4wxn{x)Y>9M!3uQIlMkG?V5-({&Uj&S=|MYHxy
z-eULMd(r!L@AX}Dddj5KRE4*1le4}G(3y>7B}YWO;P<*L#UQe@w2Y#VUxUCi_(9do
z@q!-B&$Mzx{g&~wn1v@b9*pmDKF2Imwy}DpuzW0O%dD%bYd}LrP8zLHU2AU5Z9Ud8
z_^kfY$ufT8Z&2?lLpL2Z*{=mOpssyKEEgT<?;re5uixr^QUH*`y($-MO!OYP0^E8Y
zsfMIJZf#@37`MjLcjQNCi?qRN8)W<X?)EmrD+j5myU2{&PNW`{#CanlY3AeN@?1ve
z3zSKfYtx*}Os4c6PMQs^5Nuo=c?<2&lR9M>Xm)5Prx%zr5SH;3Q~#R;eEW?SeZRMP
zSqEt1J62Dy*SvlQzrSbly3^`@Zl#>su_|gQR&Ek%qM>B&ND?#6+Ukv`GCf{x-<D~A
zG%M%)yS#3c^KTXB5^JbPPEMxz_3PI*VGTNI3SPr5h<y=8&z0r4swi~HpQ!Fp>tb?m
zxY1+Nc}0G87}492WF{Lu$Gs4$>kgh-L;uUyM3v(!lBj$8$`Xx^2x?}(ey{DQv*Y9X
zYLfZ2PsGaRt9Zi68$hBl0K@{5f$5iylzTz$w;u8aT6wUmxVS`&@!)t&Vhm>699wjv
z)zg4XBq;>E`c_r@(dSCk2czEi;D-)Gfw3!?3B_K)rk>Izm1Q73L7svCEv4y=sblRv
zv+Yh%%WW010x>Oc(uGq_0t*W(IyKN|NK5AHUvP8Fgen*Om9MI$MGw@RNmFD#)IFS>
zT_ha=WEy;u(DyX#v>G9jvoR32C31X%L#;XI&Y{J#A6V;us<{2gwztgYy3%2nraE5J
zoXBK#jA79YueuV_-Q-W@<u~_lkQ`B0&{z<6viU3$1~Yk8q@xK<g-Em7tEcmWLYOqm
zWJQuTo-5}cE_>8<<eCAL&@{AQ%kkNK%v?;mb~SW7p~Zte#pyAiR30^jMsY#RXDp3t
z!n#TDA%7oHg|y{;;}IScmI53J?hAlJ3Nro5l`5I4W`*!48hj#eQ(ahJH<|<T*ix-Z
ziBshqY`=O1y6*1YO$;g;ZjZE|6p%cGDCFnR%ZCR+LM-nKfNDU~ySQ7`&DDR+sJVK<
z1})JEgC<07VPQe5-3;(l+2iL!*lmBwjBho&tt6sk@`Txylv775B&;QdDs+^<o}3eG
z>X_9HYXBwcG}z$c*LW8pzXz=0+eS{BJJl4O(vp;4>YoOTV}(B?eV{%4Uxf`Uu!@Yz
zM{~R@-s(IC4g&}|FFtoBm>m8L=Mdr7_KxF}{nG&Q*Hba=MXG-oHJo$2jx)&`Oa@)I
z)IUAmZRI17C6(-&8|JXfSff&KshZ4ww@Pg~A6H1oiDzL*d~I^;GeKi&6jA?!Uw<7%
zMo7&?Sw4>radKu_+`KnM>Bu^zsn8=KDUNzX<gE1h5CApCLAZ})?q7k`U<H<*V}G$h
z{kiwq$LA>3{fT;j>TE}W(D8|l`cH(G&*O$hF4U?sD{q2xs3LB7|6wqLMn&|Yrl_ch
z&jfMG|0!~s5YfvcdJBmF>#75ZRo2zFR#98%6|T1@gu0m4q72T9KTJTG#y%C1jZVSd
zBut7%O73CHvu}7XrF4)v9I{~L{HBJlN^n6}qO9@l^Ljta4N56mtTu~nI1~c-O|BG`
z68##EL^itGq+<Unc5N^W@ZVyVu^X!<7wqp7%(<=Ry?LY2ue$jH2@%o0eowg(mk^&Q
zH9PxddDCeG@sJ3k6KOitnFzOvM1kajKnu{~1_DDK0qDcsCHOdgwn*z2Z(gnm$xuQ^
zlY|^`hIthX?}8SP5&l^}CNS$=4>G{1t1dfo)ZX66H$FM<e!MA=y!bI;q4FZT9<yEv
zx|FZ;D9W%zR!v=#$qW5;yW{6R#0Db^R~buJph{o<SW+UZ=X3FPuHL3lQ9FSai8M1d
zAvwmypZJ%_L<2oUL;-56YZ1XiR`yK^*CcN*<N%@Qw@z{ea&d01elAHZs^VXni)Sd{
z+UfRLl$~WZ3!7^VP83|s*rKfE%LM+1uYjL~Qi#RQiRtTyLsnHG_b7swWaz#<$V5Df
z#0)B0eqO>xI~X$^zcIhgc$+ZFE4KP&xVwAI?>Rd!0%ku4LHmlga2U2rg_Gg1zIULw
zS@t^W14Ll%+IpQ4|3ZvCFSx>4fJvcLzfq$&hLAzwlM0rdO7me;W{=d>H`x8`w$)x)
z?^MN91H=>{5+r@U_BF(LC1c^rz@>W9H{6$krr}GjC%!Cu&o@*mCD1QE<^dQPz=oJ1
zY9vac_JCPLW_hOde2p9j2gl*Kfpgto?;XWMJpOS86l}%Lo{IJr%;`Kzoiw){kTG_8
zkRYAdNXQ#^cII488Ow^W7Q;^XjY_+n2}{Bj-4`f;c70rDm>C0of9lW5a1Lt;`H7&v
znjm>hu<-TBaV0<T2}Iqpu(MfQ`CJ;9tk3`IqnS~QvA&}v71h<EPn3xfO9nR|I(MIm
z?UcfL2KWmyPAL-SP)>A5r6@An0;*P$W%{klSdG6gL=Ik?)BnVK2#F@5W}}qt9weq>
zDT~qes+k#qU&;qi7vdk=%F8%I9g!KE2^895Kw6(1^;b`Zj{%}c?Q8Ne{AZeZI-gMx
zvh!%hm9nS1%e?$*8CKW}FvLu<YLbG1x?GTnk@4_0?T0axD;?M5)RY`<KRCNrgrc%@
zo!an?gq!`S$e%=<7t9t!Nvqf`(aX%j0<g^0E_$nwG5n2cbO6s|g)&>zU$UYlxC`PX
zL->XkT?(F&fC_mmkzzOMH9$=7q}iBdr?S2r&hc_(1>VL+Fv3m@g+_)Zm&2#HD7562
z5_kFBj#tM#er42K<RIs`l?d+?|5=VA`;==`4oJaPH(})!6qFb)*e2`A0^eQb9C|MO
z+WZuxtPeg%gj|Oq$|(`j0@)0^sdG7?%|&(hYe@M(*__YqFl%#jGt4fp9GR5Ao>%)<
z3os^oO6Ug!Wb`KkKXCY~UljEfCr0XjV(6b>Usc7yAf`Pqd(1Z39P3inw`UF1g1g+%
zWr%$dV5DR=KR>4-5BPw<X5L0@!qXS0L0_XGhT@mQ`aM7jE=ESXy0u4x5l9uB^JdOI
zbL#Kj@bD{t2}ujN@E~|td2@q2CnY^IV4)Q&$3%qeym@0DcI*|(4?bv~OCA-QF)d@9
zo}897S1h50)Ld1o0MEVUgNU~TQajoQy~)<h&yOWzB+2;`eHOrMqLN^#5T=U@ObqNI
zIr7Hr3fB_AlrJIZ?wnGgA#(h}pI^MNUa1=Bai!s^C^Z#XoDpgkrV$e9V1exA0Yj@G
zgFfs9Vc}!YYnJPCuLxgqI+A?;3rx<*P`at<=zP61Go>7^-$fsq{=8He+E-5xlYp2R
z&+rTv2j_d;XWb?<O$nG}Q{P|e=7`a#l}K#@vOw6|PlNiR;_iutc|>l9B{DWTYS5E7
zmj72q-FARp4`hODyjpRsxj~(Uf3{PAbq8E=D+Lv##LCON27UM4YR1#iO?bIZ7mT7=
zrV|fj)ebIBICg&Jq@jg^fATWqpI0bO+^Qz4SFwNhkL^*Rk>|dB`-a1chPEbO_~*Z3
zDp<#-=ji(0EB27);^N{@ZZm}s3)!P$t1vq7y<+sjf2|3^O8zUnwxqU3;B4V$(F6Uz
z0_H6|NWt8I$Gr{$bJv~cj18chj|&1}DO=y>QT-iH6k-%8%-e`bSYKccMzJNm4YnJh
z%Zbqi&muuUWxT=gUYaQf!3{C$&rbt_kQUx8jIP64xrC%XAGH8H&FV3%j;`)ck`>;R
zQHv3*T9tgz#R0;PuQGwcx$Xk4GzP4&z@0;d-I`Q~J-)yC5_wjzrAR&-V^EcUo9z=A
z-w<nsclt_2<*1zQ&h1y<aAV`qSIu(5-DQ}jF4H{UH8)=U0~H|mcn?P26>ZxLHr$0Z
zcKQCdBRiqzwJFY+rh-^HBK^E9QLcvsa#HE6+zt~w2aSh|!Z{4D?eonGp4;m!3I^nl
z(g+=e`Ip^SDk~%wJyg|S?J`wFZluce8X3pSH^MKrac9bPQ`Z-b82UtCYL@FH$Mvd)
zD@BOw)Op#VN?v^gppS+wwgxuDUEP~0&lExtu0T3?{kOHrK_9$#-26lz(Pz~PD=IEl
z#c#@29`sHX<Ohj0tmmoq{eCkv_zhccq%0*)tX+6=2i;Uvn{5$Z&+$|_2b)!WYHUQ7
zNKncZ542u6td8Z6bt;i?B$dm5@bOmcn-CG4wI$X<397vxe|^&B5P^zfQ*Cz2@ATM|
z_3C3#NgTS9jt8kule1jET0?LTAj#M`U!RNAJJaLKYH0nv*LXGH%mRIwPSnm0+*Y}E
zRy&Ww{4Td0f3C;$KKs}%%TVoJDAr0}_I94kj|#@V(eY#ZVY%Rey!oo!MC{XAL8}Va
zJxCY0oml&Ak+yN>FopA@*|F(k`1Q5dKyM$F>0{v;4KuCIE!r;C#sSu-Gx}d^*Pjx!
z0u7og>ZEmvOTpy&(9VyJZgotoGXkEB?CE?fbx6qbopm0l?rxXe<0cTT2sI?nrVs;X
zb&pDo?OmvJPw(VdAvG<tBK-OKcVUmo&W*s*CSl<rqksea_g;#fm)RFYCOvDN99|u;
z9+xd%?-xqd%g3~e;}uy6x`C_9-A;5=S4rMSH#?>}r)(aFV=^>CY!y>$(_&fxHGZRa
zy-%a}je2bVzQe{~<x0G-)UwuDCAE~y0B^4MIHKY=*U@l154|mHoW9z?(9PM;I$`D?
zU%%F7Af-na!!XfttWqT6d?!syy+~=GUC^_(Z$0O|>QCIqZxO_nlbiqeh>3;4g7rE?
zVZJ0DlMKV~cK>Ibb0R9@Z1(7AySL|&jkjF3sFR+?qsvEYy~<be%Gn{mVeOD=K<K#2
z8#i;OPN%DQDGKMKX^oUTTsmc`XURJstLmYRKPP-e(frBVt0_?^K|@Vjq@5GVNt66K
zO_y5SP#lw!x%i6jvLi<Xa_uB=Rr4n0&8n7^f~wRE&XgYhrS3}CK@L_b%cQJ_A^(?-
zdRcdGt?IMAG8Jire>w(j?ch=S<@6kuCxjg2T1uEtJ~&Ku{K3J^lsuCK%)5^pJ%)o@
zX*k>Fh+vJvcDKupS5Y5jHLRB@?>N-AnAi+LrCw=go?i>2Ob5~_<4d|+UOQlpg(qJQ
zu*q_sD$9{-Tm?F+ET7=>KSg{2&T4qY2DO{(vw4h@Tun`oZSqS>ilFJSpKl|Eh(EGk
zt=RQ9*Dmq~XJ!>hFbF$IE92zyNJzp2MKn!(8gjC9!6Tm@P25r@9Qm9r6VuQ1RihuW
zK^JuetssUP6UDXTN|W~JvL&zGV3X-hurncSp`H<raz1#CZz$Dzf436dD|z(d^wU)!
zftPsxzVwro+d;yU`)^JTP(g5Q8J24Pnlk=7%1(WeI2Sv+xT=oV_$Sd3?2V1S-^rrp
z<>$VC_=J2)VDd9WkK2~LWj(R0>LKvJ(dY^Mxpk2o#pR;gWf-U7<sw3Zg5v8^MO}ec
zn9{%nPx>$EUa<qAtltt&&UzHg6)WoVL%ue1hg2LRW%b=zzrVP#<gYNy-CuDR`|vWC
z#z~ZW<kBY8ThSr-Fz2PVvuoA;{XrI%iJ$qNq4q<+B{&i#87}r^T#-YkK%?N2@?QZ7
z$QX8^L4eN<+xar}sAOB7np7N&V-h`HvHG#YPmiZ_dYZg?z}i2*rJLy@VH$FxRgQZC
z&RkAK?Fs1Y*O4iw&HxAH7DM4-`|ENaOTWv-u4uNKKkj{bi*9@xy>{2OuT658XnPU+
zQiq<w;e>-_YdBhUdpIw(Ep}Bm0h@@)i8jh^W~#Llaxo5%%<XQsL5nCcR%PD5sl0W2
zEK&c{8<7E7G+K%eP8i{^=%i^VNM`uy{-XSKggvpR408s@D`^^3ZbL$B4375mrD!6W
zuX$p=SKFEE@CzU2qJDL&hmcY?bakEHdmYKWtj+e{xVjd;k~LC{;(tWG;R_k@YqFwS
zZe@P;(Ug&Eu@7Ro#mUH31O0I+)iw;7tmz(7>Sq?1gqzg+ooOZtV&xOl&0@!*H5VNf
zdWV91w`|FE9RrZvU(LVcPj-<1&7zy)k6sT;VFvpu*6Fy)KqUM$!11&6Y)`>R7<Dmf
z;_ok!uQgO@@fcZqal&YAbDFu=59d^Hw!a%sq4K}?)F@sN)rF76AD=v#x@9^RX&^Vf
zNn4piQYshx9SH9&cc|T{f@;T4t&Xb_e{x2<c=?9m_2Mx9SgW7tecU;gC--C)nX{&l
zyRBEk?f)8ksAB%zdxwQG!IYBHwzi4AZT7HarMDbt(3-^-n-k^(A?%kMc=}v3Uj{x5
z?PF9zw3I~Pb&xoP+H2WkM5xKzf>`cxrPtKlMeMD=(R|sw;ObE{{$9O?vzU`>^-VM;
zFoaGRyUduV?1Nh|`%em+N&0jS$IX}gg0r~?v)5TOYTpiW?`lx!)?Dp_ZJiLkbI%O*
zb^CB6T8QzmP!hHdc*^c4^875iUWB8dC8{B+?3SExa&3E9&AsEO_E}+TN1EnKzgi3Y
z_I`_Nc+K6N?S4-ZjUX0oVT8J;tFJd7e0nycAF4TmakKDyio?M@;zT1KK|#Y8aw8;6
z-tsWWnP9LXj<vgIC6#+4oAyps<HJv+g_etx>}Q{Kon0G%tYJ!<xO+7xbtLA0>}@-|
zZC^b_x=j42@-i9hL>CsSc|`MrVSqJxiR>UA3qe`d{!JLOhk#N7T`_(<<m&<o+m8XH
zfz90*<5O^}{ktUacd3Mh_Hn%0X7|H_EP;&3pe$1@ITcG<F0o5?$(oslC6<+e?-#GL
z)Tw1^$>Mt{Fx;rQW)G{?7tx*gIc%sM6M_iP2t2!<TgZR!kb0&-y$TUVCrEq#z&O~A
zJ+G(R@?&Ov`jw}R+zez-1?%fR1y+KM@1KN-<}>*<vpNF<qD}^W#&f~jpg8^L$J2Zx
zJJn^GSU&<Y^Hto}xA$n3iK5=l!Z{H}vymW06$Q_SCxSrn5HBFvd0Vo==pL!U$mits
zw_{EZnop)G(jn}Y4F{^FDRtB4_|<kX47mB^`-#Nq$5rUv3>&w)m1rWOkvOODLFxzy
z*9!FAZB6j^LW$@c-ZXXfz55+6*a@Hlvo?&$h+$9;A`M=@(X&lZ0V;rW^dvD+{d~3k
z*rHGpZoNh|d;{5bZFhT}k}~#=nB2NlFvOsvdpLw$RSFD$_Oo6q%c^HH_-ZBfs7=d`
zNk5RACkB|h!LR84?3_Z~>$0fG+62&@D*`EtITVEF^2cIfU1|A}(fCr^gHNk)?GY3h
zNbkYCYxoF(E1z(glO(n0B0kiC{^0_k4GO%WAkE>O3DYt)8%cYpNli)!SnQ?X#bf;D
zvHS3hmi+2{AS5thuvE6d#J7vi>K{JrH*@Ud^J8L@E?T>!dSK#rDzg_fz8BW0iaivF
zNZt=z$65^>4dY4=R|T=QZtKgoV~At&GAozqHq$PHhF10t*)KHwq)$GYfrSLLZaUM6
zn%|Y_cA<#+pDX|Rwta9!)nxH67=%D+b|S^m`AZX_RQs?cw4$iM4>0+ckL}6_y?=bV
z8&5Uik-)3xxGyaCo^uz{S{Pd`tdtpnuU*C_s{f&k7AZNWEv<uyhH4pcw{!hfb<XhY
z5$5#r_QFv}bOk>Qn}U*DQBk_8MP_@5v+@SlkYg@2oxu(`aI}8?O&+>5iH+3u^lBu-
zCV@aB@3vj#@l>-<%p5E#33C-4JG1Jvr?ds4#k~KO+PYYiV0$s*MJsr3Frbl$u<8W#
z5l0pq2k}pz7Mry7?##b03L1x88yPw*<uq?!t4`+abSGF$Y|h;saq5x0XZw^3bfhr&
zW_K*`NA+)Wb5HXzbRV(SsLnIUGpBm#j!7jz?xn&Q0d3S7eJ2haR4&BZoYkFQ@UZRD
z5)GD?g&lXLaF-MYZ#rHtF$5wEU?GyEh2q=~Qx|UDV8O7$4`<%s(evCJ4-uYatzp=3
zlbX@$-*>b6(O4A9^x3tXpisH)2S6P^h(65`4?NxPo6)ccEjl}pt`QvBEmOAo?Y$(3
zt_Z^eZaq_BVy9}RHN9Y$z2>9h{yw$QiK-=Rg#R-RLlR!W(-rkJ$b>K-;)m9<Eb`$I
zIg>vrIrtGv>0@|pcUid`8n8Vi&^d-l5O*EVPhc%fK#%Y4>CwN-Wiq4`kqEIZlgKx`
z-#;lH{D?!P;&$nic}cZql&`2Spi7A$<I*_W_A?f)2We}(>m31PYOAKpqAm<MtBfhh
z=4sTwI9=U-w}hRGV$T4#30_%lC|E(3@fTHPrxA^>R8x@jisGr{2=tGAPSy^3w$IIP
z=(KyW+NmLjfkM;{`>Gobs|eDy-$*SFel245$&IvI-dk+gU?k(yP^mUkS(+yu6c3T+
zG6_bi#v}Lr{Ki#2S$}t=)qv%LZJbl~K|g<tci?37n5CbQi<In@tZyG#&Gp(z0tW+J
z0~}%NZicJ>)o{VnB2|Oq?^%Y=UrI3jg7T?5j426t(T*;K-!ew@Z?zS}ti$7oFmU%#
z7Y&Ley+r9vZ}*{90l2wwOe8d7jsy))Eh{ACURxF*OZviy?hjZh?rW#$#~9m7@EsBc
z(YqTxRmv`=L&qlf2GM_R)}rcZznv{Z=1=z>N0g%*JrebObfa=TagWXr7>~M>_X)&q
z-=lz8>_=i^EA|8<qe<!aaX1gERyb9=qDWIFe{vA7*s9nx-INm+qD|Y6AB0CE8+Rt<
z{6*hPzt}89?J}+9e(K(zorAW+^i|OpBgYQ;2^@ng5r*cA&1S~2*(Lrv>y10=lF1~O
zfzSVvXAqc8`SBaK)z*<clAn7!v|Lzt3Yo}L00u$5fE^RZ{c6LG$!-0c>Vl!`3put?
zzvIQ!j9|@CbQ63yVWRpkz9TiCvpIwWBU9i-qwgMMo6Nackh4QmJIV@WOtz+N*pN2{
z8Ed|O8FCCJx;#uI6N6eylcq(E=PP~VR9cFC%)=<kR{Xf9B4nsBIkZQo(vS9dUvR=_
zaQ_%rB5UkSDx8ia>6M!$pbPDG^GV4Rn(&MGqi+dmyzQ-GOl)fY>g?_|aLt>wv~qr#
zvywuyi@;J%2RQAz-tudD<OQac+Y!(HIwh6K^{RVmKOSMcKg-j(guCb5Yl0|;mpK`<
zbdeF!m3t@@Kjq>3Y<3^oa2{qHy!CZ2@=uoYAf!l=S;U+wTYZsF_n#O%u7PXIO6ySv
zeBXMQI~yDqG!oqtkr7tVi&2fgKk=QC+!M-SFpxUa!Up)f-X%cQ7!f`VyFZ`ORB8!n
zk5~I3Qkz3R{pg_*8_W52N9nV=XMDw&Q()9CMind7M3B+_!Y5IiCZ@Ey4VuB&99-b&
zFI!KL9s#!Apcw`AC{|&!bR}dBXFn4fj;ISef=lsH7A<zA^#Z6hoQi*LxT{7PnWHt+
z&}V4v<lp2yPM89F_Rc}*8Yypejh5acrqb7^CqkqtnD`dYehSk{1wg~R6(u}fZqZW;
zzc!ydSn(EH_FMDuZc$`3h!ei<LTJ>r&Qp^yo*n8$k#^GJWX~_OsJ-$fbrddry7TN4
zh=ao@geQdw!wJMtftdD|P|!9Qt<OqLz`=!|+x+Tg8yXpu>57y$F4YgI++F`2aD|%L
z1VYNynxzgH6<hx98Efrf=cJAb_gFtFNChK(wjXNNX|Kd>X+7Y;u>&29@&e@o5vd`D
z^?O$59J<b_Nn2a@gdid*vGqM@I7I7pzzb|_@84hc2CaHrNfH5sBjxJQuQ^~SH5$Z3
zUihs*b@B}0AKVMQN|($;>#O(JFkLQmq9HH6;1JypqG0rz+3$*Z6>}i;qO%462Fa4G
zd(RPjBvK_Or9Me(uGKd8^R*fh1o5((IJi>8MLUDp+bG_hvK)RSS9sU#U}aiN_H#(S
z-<&(MJy}m%SoigP&rYO1uq{E>E4@27EUf~+pK1i%(;m|^L=d}~3qE$PXYmqQrh5O>
zFqOqB#B;w!wkt9^Xft2+*+3+8DO1C{N>;@CMsn?>$@wI~a23Q3F@ldZ?k`&VAgJ+f
zuGT0MRvbI*Rn=HYevTvEPNxMm$I|h%bQtb0bQKmu>)bThVuZNCM5A7~&4pusa~v>8
zJ~)I3LGI{JYgxW6A6(J2o~h;Y#IN!5SB?tAA0D&%z7Ctf_dL10w`Q`Et)_oVu=U{^
zb^-D#9;vTZN@sLd4$8TIZ&UmLr29E``<{0oh3LCQpqvw~zId7r49$o^Dd#n>sjjqy
zYDT1uB{s}C6No(X*w~02x;SS>q*?K~)HW{RoZC7y?%9-KZDw9TCE@wV-db@FGEOV^
z*93LansYtP?1<8Jt_~Rr@vK%oRnO>gO4Fg7>-#+Hb&Rl4uMxvSzd#3;dboV!mbs_w
zN6B_b-KV2wP10=95o$`4(x-BR!SbGaH!?xST)$Ocf>?R@&NZb9(scyQDU0jJnb!MA
z_Lc^_%St>_Mr`%8_Zug#B2~B6M9xHnv3J!@B6*kDa!3_}_;8ldY`%*H33#8hBSdR)
z5>g;CgXCK1;;~Oe)sla@C$&xFS4+TLNrDXEhnYeo*btx-nYs&@sU?X87U*}6uYs0K
zZo*Trfw%~UcsmEP$Z#0_Icz@u*|l(_VyciR(}*Sk$bXH8BsjVPxF&sktzNV$9E^UL
zh{O3<>G};kbj_Nyzqx`YX&NFWv-ZFz7b5nv0zX1z{zoWq{OrKtCs`2&f$f{r3LJuK
zc0xfU(Ppu2VGfl549fO6L>|J(=qIru$&#OIB%!8VkxUiy-o!ZMzfJFC7KX?KyFyAR
z#*~;kwmWsNL%%NK#jTDFj0}`ExyiW03&Wc;lg(C;(Xe+$i4W92Meckty$WqK*dzlk
z`Q#V?3oQ!FRm9|!n2*p~XsSw$*R*J<rn&Dwd~qCA-MlRQ5XZ%$Cap+7gM2mHy5{eF
z|J#x}&zUo1Z#6zF7TU|U@or=3!_(Ty+K?0!5*A$YUF$K_Enzq#(Sl-?0<G9)zmI5`
z2*?m*&ugXV*%|kOwyB7&z3}O=guS$3y_L+VkgsDrHDy#RHZ0oCHi+CFRu4a%V*^4!
zI|3J6KvJ?@X?9@?4(eq?fcJQxwa2Q@zD#4%%X*bQU`A;sQKTKe5^56NsCks&{KgV7
z95sGxM3~+dy`(ox0$!Ln?Y;5rwMnO&KhpXJd77e_QP1qA)&{?Ngg160dkhdV3SP^G
zEuKvZbKJ$xahRN=pWTA&NjQz827Ry#K+5uDLEOiSd_Okmk#A7C4b1d{PtcX<iQizq
zHE8V_@*d>(hT({%8M)}n)n$fYK)T<Xuy*G*(5X|#?I#%}W`+tfW^&<E{G3?8+7S=D
zIX}ojQ>67k?7-;4j9{)N&3M^|6+%!6+1Tc9Z|$4i<U?c|vT}OA6SVx#DH(feXl#OI
z?M7u^aAEr4C0C9){RB$Z3|`Ziun>3|l+tTY*nR$Vvvg!aw0L3B^nfbOs_B}VHxAns
zV)w9~Ds7NQVHS?^gyQD<W0y4`zbAREj3*}C11C*rwAP_LFoe^I)SBNOT@MLdOibA$
zj^U33Z+<++Rud%>W2X2zK|A~r3waTSE@oqXRV1<1kn=VV^uv3Y*jUw3f6+}y2qe;M
zAAh2kS0Z)<Q&!~WMpbQIf1z%YCqB}BkDe$4sG%U~Otl7OVZBT=swGCK%kL2<ImBw)
zWN;TBh4GKhH4Toi2}MgMhW#~LCY*1GE(Q5qC_{7-&_K>yn7OVZWsfeEG9l}&HSdT>
zB0^_2ocNLXigX}uXT@hGj7Eoi-?|zWDS`ys|1n5JD><NJmO4xsTQ-dqG9=L2SI=ok
zie2U2GQkN6XSGPERGTzvfqy}`ceNi+HODV;M357RtxSKYdVRyi2yhX|sbtZ8AXmPO
zeSu;_V()EHN5{cNP3dS)tuf!jjTB#Ta7c)}F!+!zZPGiN3c@=UIOAzXrRS+|`7|q*
zdimq`yZUY~!ou18yvV0bvXRtIwho`bdlTBIgBlw3iXX_5n0{Hv!3O5Anzc?bSzHo<
z-y4~Z0ex=E2Vs?$(7EV|tp0lF&h4Mpbkz`fOBjqaCVw%AV;F3A5X|-{62RJ_dsm0?
zIx6T0d8s*K)W$`=^-_SXxNP_OvC~8Dy*khR6VfjBu}2IxM&a~l_ghz6r`mJmqbM_R
zXCnZ~CS}xZe8p_o=!Eod?I%8|4IiU=G9S-wo8}}qmzFr0`u0sIL>U5i0-HAkYS&(f
zCaT0_^B3!u!yl$F7og9J<wNwyfjv0``{6JU*J=;tpuu=RcyvI(9u!pw8*=gKIRPSy
zk&rk&A~Hd;|0qZWi=+Jongd&H1If)>?6(p%7Hn%|hitdiXxp-WQM`N{^#n*&JD1oD
z-NX1V6>@by^s9|8nDq9xa}aloiXoDo_g4}oMkoVY@`<?0TmjHmUf?xOI6mHCe;aNo
zx;k06Gh+jv5K-jXZ`C_6!Fke^g{_KdqU}k2=iqa0AN4rH*}jyk+F93cz$xj!Hs1J{
zpZksaNta9=jQn45E41P9$tFrZD2I?ywzeU=gGQ5|lF>B!{~u3p!4+2*E$s#g+Bm^A
zxHk^L-8E>C;1b;3p>g-%8r<D2NO1SY-QD5#d(QdpKj<-f&%M{0RrQo&Oa83;UQ?@t
z#C0h5M$(oTmdSP)#`TWhOPTk}VmGT1jOGlT{#5-Iyw;KF32JQs;+q!u@}q~Lw`uxv
zT+}y=yN3RK>z){>vB7QxgLRh-;dyYG>O*TF)Yy=q6M}kua!82&FwlpvzF{-ck^y~%
zpcrPGqPNAJX%k5DSv<velap@4phn&X3{5vM@p<3~TBi-8^V<2%#;&H~r+Pe+zw!sY
zvAzZw1=vtbVn}NYmm#G;c{JIrU#AT<z=FvEv$^j5u*r>gsnI-*xQ3qrR)+3>&$tLK
z<+mR_cC9v9mvTIa@<>QW9q|sDXAfQMNgWkTaB<R{{P$?+79gTu=lo%`utU%R%?FOV
zU~?*N;1DnAP&ycG*G|34zz>_Ax~JUawZ^cRbiX?n(&S0MxSO^4baf3+nx;2<BcZd1
z$iaN)+DRIE5|9l=+VyN`tOyFs*uq>8w@jNRBu598C5QHUPPUo%C9fH`?rR`J^*pQO
zp75iHN1$8?d}L<|sz+tQj-#-b$F8;>q*+kvgQTGJ*4kHis8b>fPXwYnAc;c-Zz0V~
z_`Wm+|ASuiwF&i1vDPs*<3gR6Ta@b%)*OF&*ey2y9noy)on&-E+ksCJJl3Z<`p_oQ
zxKEC|oIIb+06Hau$M?dq0a_kHEav3O&c#>A=pW6?5aSsh9OuxaL&#8wC@=!J1!&yV
z(EM&?Yc4mD_6mIq5jZdkH^sZ~HCfl5k9b8z0`urQT;@a#O3*}xp|PkOb9z-o23rme
zECv$EpQc*OyCOGB3`#4zg1cBaT%!@M>ane9fl0W@_<|vTzdc$@v_|S;Cbc#oF=QMf
zmcJx+?p%P7Ka#Nf=WOV|c)5!Gu>-wv#!#j=B-2qN5ji~wX^(-r!)W<fu~eNDc)l}^
z-A%?dByRWK22bjsRiJoa>sNxIzyu8*p<xghOEBQK{mgdR!~ZVzHd|mV#JeNKLsEu?
zjmwMTCYNW0bE32$jPvhNUhUnnv51KVtwIdG*;Ti(Oxi{X(leV`T&@*Y*15tWZcg`d
zJ4r_UXc&^Uwhtu6nGdjfRTi`B@8N$V$0G!G_S3m@_kKB#ezDfyY2Ex59KAZDT<kD0
zm~gGzXj?gbxVx4{m`_6xtxW>6y1=tAQGI<=-vFBi6X<mHV7cxCu@puk3Y79|nzpx_
z#d<K}>)$X0YkS|B3yF1ws@G8n5Ua~5;yd^UDrgc+reY%qViUUi`qY?4BF5*%`|(A;
z4fHtu{dF2i0&I#7R8W&HxD;0UtWjuD?f|ZE6mbYKLMeA|Sa7$d)c{7BF5g;SkJIEN
z<@nw)Bz$8W$^1@gy8(9AZ@l;Lsl0)mE6Dqzfjg0%s_v&pbprme$VekLs-S1^+OWqp
zX`?Ne04)ad4z%{edtB16-fUWrukZDVBU~F7Q0RgpNYt}Ix%{#Dk5kUQE+WLw;zr1~
zZP@EY%yi%dP?WpcK5voaxx?P%y|$^i&o#VWQsP`{&KK+MMU7$7@>#R&p+Z6tCPPEd
zMTMDyMuZ8lQpM$|2Dm1sJkRF#1Ek$fjn}KN?z3)151m@$clBIF=Y+83nO-{A*kC)R
z5eBxB9@qAPRc=ru14$7$HR|v1E`!MWVG}h754U~|N|En;qnD~txug?S3@0vk9hPyA
znd0-e4dw4X?Co7>@fng4pet0)%w0ryklV^FkgP^#vA6p57-&X<?q*-`b)o~0xN#yI
zjd5HiKFZprwZ<<ddB+S>{y#_G|5&n!(m&~~f3zAJv&ZLEJ~^(sw7XIu>L+<$#fOgn
zd!og=7V;16e}JH8N5qQ!{lu;Z;J2=A@pp86{w!Sv9b}6I4sWC(VQb+1MZ|l%wch;k
zm*1Uo%Hrf)(l|B{MvQ_Mx@OI!Kn35ZD!tWFp&*`NLxVjW&yMoZSQ@GyEA1j6{B;R_
zebXjd4vGENGj|9^b0i%$A^N4bT<9;7r{Ap^`wIxzJ9x#K)Qc3GOC~xAU{*`XF6AI+
z;ux%yR4FRysIY7Vdv@*#@S0}+V^3z#D%}~475r6Z3w)yNXM2wjPqeGjTfH`JzRMi4
zeO_Xvo!5>kBP1R9sZn)WvsQG5>h9f4u?Sc0t6Z43D9Vee&z2N8LS7k%pZy2mX7Cw}
z`kyXD>4QiJ=}tpULW29Xka}9)DRh18XyvGQZbzx9^RIkJyi9)?d}Bm0upAT#*>M8L
z;&oz>o2OmPA&zQ`-e`t1(ykd=wxr#S<B^_mOMdp^EQb5Bzzq%KnSogkD%DsMFQyDC
zE-gcB@As*0!MP&X_;>PvzIi8V_(Cf|tgB^>R102EO!kf3(w?NK1OV;l>$s2u%FkmC
z&*hdGTL${eEB_QpM&H`Yb#O(iQAmzDzE+^qt8Q@Kl3G{|m-An|d=Q6QXg#=n{UybC
z8&}Y-DO$FU^CGQK3yaI(#dl{%Nj?TdyQ>S?1d0b`0~DfPU`e?MCKtLMGY>>Yuhe>t
zgInpF$UO>JFk{#*pvAr(p2bH4!?H-vccu8|)8qp3z5v{62C`!WhijX#DIb4xhQ<g^
zKD64%-FF0929UIpt&#sC3r7o1Sr8{eQsq1-kLH#zzb{|?pC=G<1+L+S#zqB8jXlQx
z^pru`0^5YhHE^O4j1`5s`60F<x6r?`pfPhZH0^9sztbck6teQTF4a)S2fW$4q_JLo
z-$d+<i@bQhZ&omZLD}4)g?jQMSFLerUh1(To?!h`GpzPK*8m-W;U6f8ElLcz28fv$
z%nXH~f3pa4imB+R;bt!wnc6So=wu(Hruyv&TFWk<OR*9dH96-?F}zlM?2R)e`NXxu
z>VLp-t%SWxh*OE5Yqn$i9%{%es2|+~Bk)PlASC<zmBW=66nuzhj6M58Mz}>KZ#4Ws
zTZsMD8I;V8C(6pm+%+Dry#+I7B@FXSvb$!m0U{qr8|(OP<9qK4&b|7Wf}|y116sKb
z4f__q{URbwH0-*3f02|=55=t5N&LRsjBsXnJvF?E?%uv;979nZ&I=FH?zrEQs>2B9
z7y>A8?6J`)Du+Q_{l?>&7})eYi_<(b#bn}P(L?E`T$8;8RCHW}yG90DNUe1$2F6s0
zuQQlfAne0P$1|Sl2A3@V=)2jwiPJWC@1v|CdQJ&Yqg_?<y*S*@ia8cvqgr`=Abu;l
zEq!IvjXCBp7JTgJNCC~Bquz<k$&Uz>S8q*6E?9DvpYo~=GPG%}EVGnSnIB8uJD7HS
zT!Lo2GAW+Bvh|g<>;6daV|Sa;60U7?vo2W-*SCxY-a-O|6_PA)NL1D^wS7J`4C8`Y
z(`fz~{F*E2Q4So}a1GW(Imo^yD^{;{_9DJ88h>+}MKpgmcjNZKcq`yS(ZYOVvkAsX
zv3}W28xzELo$8MU(~Sl7&c80BjVFW;A8f|Np*A58vxpR|HK|}5TuXONL|`)NjZ6W!
zKzx^J`$QA0tz_=mzo!saQO~!HL0UBlQZgh7*u;~mg|#vYfrAo6nu#XZBsBkjK9uJx
z6v1XWmtFja$CD`q+tlHO{EjO&YPR2tO?@jBm$+dFKN0I)6T?oFiyz?#)yCtYn1}Th
zW-G2F(O=Mis`MVVI3j^Qhjp|$Odsvz@-h&vGWlU5Ds*+~B;F9?h?iG^bnCaeKouuG
z+6P2>G5Z@}N~*n|5DhvGl)*A(0w}h<Iwj|9!?fCe_D137PNTi<!e<}9rv|_>Of#B}
z9AoK@ki-KA#saE4LHy{tBRS!}5DkG^%Pq3mcvuXiXG@m!sudDx2v{1bg?S9!RBCC_
z?N6lVLE&(`N(4gyz80i~F5qv=SGGx5ZR~3;Q6A6NY{{SuFu_`i3{m<Y!+RbzW2=HI
z9@bds>hJiXwTOr!%PgG;T>cDlLawPbM%SE-KT(w;k%Aeq8(H%+SZ??QLX0QbQsk}w
z?Z$q*FBwbn=M6!JKx+`^(GDDAVVlv?@&m0>WRlXMpiYN|HLs`ETG^;sG4hk(#RHLf
z-f7~sZv97=S>e9$rp--X4;X4Mb>~gmz@v%S%OyM|Qun{m^kwRphzFR^h{|bfUNGYg
zfi7-bZ1f;mE*N|;I=;r6OA%t~p|Z*2n5y<;X$WS3YFOo-dG3{~$s)$nLC%#_l8*J-
z)#^93lqG{b>rGcTdM^9MZ>BQ{ctx#_=*b98)oYfrDlsB`qJzud)mjjG$zGIWh_t#l
zXfrB`f!@~$_5a4FpcC1lvWbc*DWfbkz9EP;BBr#MNWfMV&Tg7EBBWUCGGY4+6%920
z%dhm%sfO<@F#!id^kUJULzK4eL>+7d#<do-?7W+hltO(haM#VE97Qw)nq`-@C0G`h
zs+CIbdLP(|38c}epdF?MjvzwTmy0G9P7+yrK+7pKk^pZs?x@G6K?ruDRQQJ9uy5@B
zO{EE5AH`Y%PfXwJo#`O;1*Q7aa~Nwc6@!I+rZefKgl`b~u79o$IQ)%<(pU*py3~7<
zW~8Jo(mE9sJhW@ek^Qq)`g{blh)?s3!}_~2Rbf{X6a-1HMz-uU>U}ZD<MMw7_*~ew
zj8D-=$r)UuXew`cp9Zz0vH?sFN)$1O6hGY$h>bb?AbzT7owmy1o({B&UY%`o;6mD6
z&KC^4x*CfWH3}|ZRG<;e%XYLW@Mw86z-o*R(o8DWS|GU-C&{i^#eFVjT78-!3L^oa
zmfQ_QVL+~F*sFh7U&Q{35ryZYkzud|%K-F#LGuGLKVeI0Sq9}{IMFC_^g#{v3Z@vG
zno4`OcpfM|J#D<3ZNGYCIT73xAiwjR?&Nvg{05yN=8;444l-Oa#t*CAADyhP+Af=X
zlY$hC@XK}6d_ChXxvbvn@LbH`OHP724%w${n|hop#``99e4b)>L)z|k!=R34hs27t
zHk5GWetGwPw;T`2uBSP3<&+zjdQrd2M?^^PDC^dz4xGZ_OW-~mWtolA&j<tx@}?*y
z87^qR0XGrv7iI{wQ#8#a(Nvsn+j)-1)+)QwX7p+LWE&Zs@EyKLlUMSDh#a>cK65xT
zdMJBO@xhdY+sW{H$UfMuW<54I0f1r{IF+hd(euQm8rT!@W<R#^eEPju^lx~Fx5wwN
zbCKv4OT)jNwpx28y<Lw~Wh6o{%csT6G>&=bM6PA`?Rea`zfcsa*yrPk<OPh;{+1^e
zK$@2`(;=OIVa7asT+NT<s|k&rP0VBe3Ns4B?D4CV(cL*uJip>6yPJDP_zc75RFjzF
zwtb4s%#cvqJ;6rv_;Swyn(q~PxMIuOOe&)QFZ>>W#c)2ge1UKSObgFN44g+j?3<iF
zJ1&z{f+fgV_~oi>l3ThUTyUGU(Z%qxKpN-Zq)LT>_(aW=Nm;Jq>v-dpvB!}>4krOS
zx_n))8mDdG$W!yRcbG2vT;^=NzVYET@J-pl5W0*yiBPQW+Bu~3R@gXQ9XCP=hg>GV
zoX%+}duo$-(*~2Vt*_sI{%e|A+#XE<X2H}?d8>BY7fx?Osv_!<+n3^zrZ20ee{UG%
zwg1*EDO(DcAZX5ysvxm>h}L1~L-!MQ^RJ%QSY5z|uzQ%`(cA6*OL^cX+zQF#YrS+d
zm;j|j_es$X{)5f_qg=bwNZM@{On@ZX?~pk-LBtR;{1n&4sRw=^U#%k@S{b#AlfjfR
zG{3!_cAPXnw_LWV=6^uEOdffVPmv9iV>E5Oo+KUKcjHPYWv(;-Dt(f9mJD^I_`l)-
z#A6N}kn$BK`jyY}m8hTT9f8}KAV7&xZzicEj(L}`#?vlCH({RE7iDLS6i#m?ZMvAh
zxN=E&63*=EXRT!-@B&5*{o5~&O=<vX3_sML9}2WGVo8Ihj;{vk?7o?-mlcARYJ(#3
zj|=94#{8%;1#P0AF-d2f0!E(q<<pk16%Bnr+XDwGRQ?`#Gfs8nO-UK<uRIk${zMZn
zJ@gv~m2Ye8ywg#8U)<y*HZPEq>g?fDl!=32n~%l~Ftz&JnS#kPBY@akZevaZ5YtLl
zZyd_1WNirZ$M@bOFme|#uu?K_i;f7_O}CycI2TTT(AIsdFqC7=lJfhd7TQG+R@w&@
z<9Re58=gMyR-N@AAU!R?$YuUm0L9MJ%=-cYMC$G>ptw=X)(z;v@{jX>F`F3h$}7RH
z{UJ#M<`~pD3ClFvJYqF;M-q=~dXV8_-((fN2p7|)`CaCBd2_2F6Lcl$;9ig=92r)f
zh}@|<xNb1=7P`r!>TINiW|KF{^Rv<{Mq4z{`vdtWa0`nsX7dMWHh_O)Jzbu-B6LTK
zF_Y~nMHhqL%^fvLgy(Z7U(8-MHudbT`3OBL^-5;Y4UIzI6I+?~9lF(rr=K}&roM&2
z_Rz$xiG`d=uCRS^gX*htU~DpADayj1G87<kC~Z=Mno+q_V|<5tbDb52!oh~6qOciX
zEeNOvi8<QOid1;_Czt-*$+ifCH=K7rhv;fw%5PbL1Iyd0aB?d%ban61cV>;*pl%^i
zYDooRn}2{hwXdD1ihWC_PrWCLf~?Gs5Vg+25l^f9H0tBw@*W*+U}hGt$wmWOM5$wf
zGQpaIK>N+$s9tXBgT$C8XF|ZHMNh&)ij1G0nv4eObL>6A4gb`Me=EGJcZ--JnHyB1
z%K{i-#Gp@#y4r+IdUbFOlL*&tEE!VisItE2ZMH_+*h&f})rPO9G=5-p4-hU5xs3Ox
z$23OY?>$Db;Y17O28QQnya->3i%OKUYC`eWl7iv3eaan30Feeq$}y?YG8pCpJji+I
zi+jT{&dbm5I1Yc!X$9rAfFnTTE;x<hnw6TXk-E*R&vow?CtG)MG!ncLm)K#+7Gcam
zp+lqFe{d-H2R7U}h?Z(5-T9`<$pxvvnL_fnOAC0dX#1+0j}^xM7Kc-Yl83TLsI8m5
z1gGSJi-buZ`(P5-$Un~uBFWEVWW$>%##`UC>*U&UQ#-QpP5b@730-1^qNddCv}qq1
z5mo~6eZgmhedYffu<`bGF=+4OJT02YA6wofhEbrn6K{yK76YeCDT<Y_Z4@1^V4PGv
z{i&Wnj4VyO=FODd>SQq3YgRHA2Yg;QE&WI3tr|_hVo=%+u50kiNfSZz)6j)BZ0gfz
zYH@#P#J`_cJ(he^7?u(-`h^e!rI`RfQq~GZRy3rc{$lM%<^n}o{iF2><u<`WZhem$
ziCBY%sNEm?+~b^;clcHSY^iLoT@0-4UP{m{LCpYqRo!>%&FGul6Co^WM?jX%uEa&`
zMScS<iW`zPHlMro5gi|iQOKU@ltvDAnPh*<$6Irkso>&*t9O<RUrq@8cv0Jv!ce#|
z9u(C6lbzoxk&qQ%1S7v9(}A%E^DA1PJI}=e*!*!6@<>(gSQ9s=tTqub90+iHTUq1r
zJ4tiO5#%{%id7n&Jh|bcm_mcIHSgv=w?<okEG6c19p;8OauAim<Eme`8T3x@XPX?^
zYT5=Y2ZHN8p&ft@#3)_%?o6<upVOB<k`Vh%pX>0)`SGiIoVE_n3ldN!LzYJm(yqOT
zuy64BKRORgZ(cH@%zMuONk79lnp$Rr?y^hkUXe>^kSF1~T=~uj)=stc{CTn6CuNaN
zGX}{M&z?l_4AsMmr_jb;zDDsN0RTIjq=uB3KuNH)t5)P1y!w{|g~QJ;`CgsPLfc1T
zZ}H8&&2%x@Bv__Tds<J`Qb)t~SZ0RN8PM_)4y`h3BlduOvzi|;b3e{=)UmY|;^*Nl
zYMu>9-<RNr)-Yi1CwY9UK(l0~B~XdRY-;{gcq4(6=`cM_td?eo39bo<2Wv^Y=<-@n
z0sLhc%ql@hM6c_nr7|02YFqwz)A~!W>9s}@-M(+rcH;Fm=@<FfFNL{=c=g5{B+ZU$
zTLv;pY;_49Y($|uJl{PBqr!{iVH|8d-CK=Uk@tD()TsIeD+bZg_T3C7B0z0$QOk=-
z^}CPDr1-VRQZ8S>-QIsQ2~Ea3umSz7#$zltL=?|liQUt@3{gqj0-ht{hPG9YUR&M_
z%D)q~h_|l7Tn4nxZ@o8bP25o@IjJj6icpc*Rt1-+FZy<<A&E@>+r3aKI71wP^@)I|
zV@;uySD&Z-7jyFM_lEz=ZR}vVKdig$(Fi?-GfGbQ|7XVXGU>y{*RWZq7J8h`Dg2a;
z!13OGGLs1c8?-Ea@cnzxhMYBpekW3Fh+GfBgw304%WGukGWdSO-1mWK2J!tgifOQ3
zMDWq$*exd?7mM8sM^oV>P(@kvP&DK{yOn<8kKggF%c_0OtP)aE%$nKVe#C;1fo3{4
zCb?S*Fm~@0HwI&X(7Z^@XdpIBO__ZE3{q-tUP>3co}jyB2y0I<<L?zF8mR8MXernz
zSx+we&u{T80s!Ol`#xG8#SJncCu0wBjWB}(!zB~x)fhYwGnT-!fy8gPwkL<yyd_6=
zCCbiSCTO49Ohchp_eQhF*-JA~S^1rmH+!!-lxWoUJps=k*eg&CU?S(m!l|NZr^#dN
zJ^e6_o8UAvXdWI*o$W!)%IOcQQqacIGdI9@mWhO&^s`-NT(a}@H+XB;^<%N?2qjCk
z4W08;qfkHT9;O$Q4GeUPKI8t3=;UnDTXDm406S{bIA%DsC}Buq%8LON8hAKyD2K7a
zc<`Oa4!p9xzJSN8&4$m$);qSk!g4^E>TTS(1vj)RK<d6$7oQWr3)GsY^0Y|0!p=YJ
z0mfClX&28R3edcY{!Z1gxg$G_{C{i8XIcoLi_~V-RvgZgOd0lYV(>l9ZcDSe+x8!?
zV244MHkH|O_fLZ@TTY`bT%{bdYZ#)ymdo{x_j8<hLwC`@*9XlmMy%TBNp-{jS$zgf
zVA}t)0}wFrX<j5Le5}o_B?f?~bh~hc9Ad{jESLvEJ{f0XQ0rMS21R^@5y1b?dNZ<?
zN-ieZQ<;<E!p*5uYdG1qjv1!D@0HVv#xOpvxy{$k7t=oLaAq(CZaTFR{y<eEymjcG
z=x_-;>vS`=BIr*M@wS4`^4h~;%?*0{G1N2;zIxJmwszXduxnVf%eZLdUeFkvHWT6o
zO%LA`|LGr}<`n!D>*nRt{7f?FCU;^W*hJbIAujO;J-hxs+C_5ApiUXd;Fggtv{^yj
z<4d2Aau%!y<>B6c`K14KbqiqTjz0WQQ+^~b`=*r*5MV`%KpE@59M$~EDMNZ8#VZPe
z2SkU*m%xife{#5dbl4e*i}8kH{9=KVu{k0fzcuvp4N2A@#+JP>mu9fS2a+=1#Do1-
zgGX$f&{V&9?E6`Fw%NDlOE_G-`h#Q(Y_nmMuj8+}s2p~Tc^uK-8c{YvO7UAu*#+0&
zn~Rb7EU7{gTP9_EYwn|zp_C<i)bsaMp%wCi8A-y6h<kB=+vQr<eAx4^P?`gzG1-EH
z?$;*gBOFguTKS3N#D-t#62F@q&y=!R>#C;yEotXbSa1A4nGo`IHPwZW-|{MfiwkuO
zSw9<@!en|eKN3k9GpQed^Q1i;9k#&6N9US0pkM>)24(~3*%}H<Cm}lHAtTfuEP_MP
ziR<K|5YsSHyRl!tdI=ER9H}#R=*#v}Y&*@@+4sFCpM4Ublt6Ox(uzUKk=ef_t%bv-
z2AAu{jJ7T2BLCt+0%THD!WR)?z46pgX2+)v#k*!cdd3TeXq3aZ*AJqYa@}T6%tXl{
z6LSBzcaQy)xW+2KHN?_sg2`34W^BiC9%=-`px7d8pcTjUclVcpBHX^21s&T|BDu{N
z-kr%|bWp*IGBm1e&rvWOHE)NmS1TQ8<GzLM!XH<Z=5TpRqaEb#<|#gxR|efl;n}90
zjp9<0ZT}@7f+E;Fgr();*c;q5sjQ(~#Y2_~&As_Q!*D1?kCigP3m|p)-zfVRcuyxt
z)S?a<X%~J{$c`VM>ulXB8)8Iy*O35$`5D_-s5Wb0SDH$Qo&PaQ+v5>Le`};QU#erJ
zBVk~en$4?}jNjJ%tDT70U1`(y;zFR`8&6(*YUuV*`9>EYs3iOuB<L6B?Ek-0J;fT}
zgv;_z$7+FWYkOQ5f!MFit2uY6Clkfb<HN@g0luHUA`<{eRaOF>?^SlvL77u;I*Y<Y
z-z%$;;z1HoYWZ_tM@fEEzDu_LJ9?M^eu4S{lBj{DU{C-i1>}p{acFXD$`B+{UX5JQ
zwjO~A+vgx`A4nWC*kzU_&(#Cv*o`|E&P{+>x|+;4HP&Ot*tX!m!5Jd!DO_|eB@Gh~
zSQtm~aC%%KUL@7m*Y7)6Igk2;;<<0^?$<Bb8g`*h@Q`IGzlKMQLv7BY8;3kUzn(A|
zU|d>NX|vL)-lr-7qNe<hBNJdt_TTSLuQk~_-K(b(VjxwAl+d>FcTFTjgz$#cJ>Si5
z$EZeLjW{SI!^syRQU>VW3=;5u_bi?jLO*>_B$SA+NwZJ?IP?w=i?t~8boldjbnrhX
zOB;+_3ww-m8wiPGUqeNOoQk%2@Bo|WSQ%7_gIl~1J*jSC5m^l3WSzze3%SRtC|};*
zCW!>Wg@=ZQwjMbB{P`0R6*VO;4jmCe*wVz$4-o*swzIQyXrv3V@vA@Y#K;L!zU<v+
zQjNHnJ0T7O2yS+}4?24|Z+(@Ci2UM)zz?u9aEVaYY5KPz_^MoX>9ej~n_r+Ux!v-9
zIXY>n2#OItdV&1eYdBDUunDw^AztG=NCJ&Cp<EN3blR^SZ3Hv0*CyvuXEm<q&ZIVc
z8QxFDK`jr_O1>n^41xg=Pq8I;!*<hQb3LmBD69oR`~3;tWUazs`)F@@V&OUEzxm(1
zM^vWefuLJ<4-Vv5e^ui4X5H_OBsw0?(eXlZ&vah<5Tc3(Yiq&?Aqp}99tSgA?rZvg
zX;`A5PdD(o68WN@EYns;&;Vnk7;nYe_{pOybbNd|R@!Kbbr32s{ngc#WRyJsQ-D1(
z(xAog!4|7(Dn(ehI)N7N?c?fpwhmTQEG{RfhAntLUsR0B^wJ=m!?E!7A?L&Tn!#C$
zO$MZFa)2vM@K5X4|BRe7Za~I{{`!1D)~#5-z!%e7GWgMqZm*N#CI7In8}o_Lcs;2?
zvUXwqPI!DJc#X6Yk+cw-q6pu&m+<DC=BRWoNpBdR472lnL1jrL;^=?a>8hcEw%lX+
zGA54@o==m>??-s}FpEr2te^jRh=mssbS2+hJsC_WW*;FWmEFzWph2gA@^sxwqA28L
z%h_TXXXl3C?Y@+4Xid(eZ{uDkk_BS_<-lV^{QD@n32Eu4oWdVESiK|qj13L*GC?Oo
zotd=K=b-5^^s?PulXO;N5Cpb|BmpmkH?;B_E0^4l@t`mh1ZmR*q6c1VR14iDG3Ib<
zLX%xLS;LTtD|>74a4I}L3i)0k)8&Q2isx4~)E`WamNRJnOJXfBbvDXBYG-&mGXEbJ
z2<2vnW;k#S{>feDII4DE-h!H|r#>JMT8#2JIg9fmgT<l4wp`RJe+}HH#FB6{YKGU_
zYaQkX*Vdl5q4qs}`=a~3Jt;5A%siuV80d54jEI0T7Z*O!H+u$|AdA#b-Q5t5S#&^+
z&x<Ps(Ec+!q-+ik2@w&|EIEN8<riZ^r0RwmG^&(8i7X&}v$Aq9jxHkUbBS);f54se
z^!<DDimIW%e@E6J9N*{LqlBcSLh>(M=qv%NTNPN2_<=!ZE`{UN+ab!yt%=nC>a^K)
zzTp3`l~dWAeORNI?0##S(#dBSC(UC;W6>fDx>{F)D)>WCT{KBPDbCA()E5-^dpyxp
zXq4PyzCVK+Ti<DS>oocRDVC`f039nG%mPV$+>7^kgusy$xema+JNP+Po{0;{W8=qk
zASU9<CrGcc6BU%^{X~Mr+E<8s%XpAeH%*>foagRbUw~nt>34Kz8}oP1`zoeWc<TZg
z3ER|9n)IzmPvk~ki<LSw&eO!4zmnv$`L&DX)4xJkyUnXbw*L{f5-|+GAo3FVp4CiV
zr(Fn5xDJ;J)9rMLTq>3%c~ReM93d^|dG3!11Z_;O1?CZo!a&*iErYlE%lFbii{p!a
z1y?rUHh2k=2-Uei!_^3GvAbuy5=J1@Asc}5<eI|DV-OVsUfX!zh12Ygn9BV{16v6!
zGjF+Bj8EuY$2MB+vCE|l_g}8ntl+z=zwVQMplj^A6G8v8&J>yeyT7^>lE!l{crzki
z0$=wNl_LI7gSrc51O0*;c|L|GxrmNpzRjY!{PvG_Sv#8KSpc1dp`0nqeeM&T+oVNA
zLdHxDsA{(USA+DEGAl|ZD!u@r|4`Zj_*Kj~P1)oyibkw|&y!A2n~@Xu7o{MTen)L}
zwsmSv&UK$7{wK|&%SYf&<8<Q7Y}Z++us~U@8n%WsOj%R#P)Ilpe@Md}6ST8eF>8&{
zU!;+L|Jax(>dnRz5V5G!roy^7e-KAQ2Jc>!4554`5|@Q5PvZy}#%;4=!e8tQDGM68
z-WxTAa4RJTO!8&SZK+979d#RUw}qj|=>!$wzz8x0Dz{fLS=Vnu@6(iV07)$gR{oi;
z%S*BCXml=(2n3jqrAvFmd>I1O=2dG65IO>?z&dlk&X$Qoe5Pc}P<Y_0S$lz&<K`pc
zj!L|a_m2>`Da#&K)1rj$o4wt+$OeU?V)e7d-<2Ml9WXsg?uka@YGuON2*~wUJpXgT
z?piZ&ZC+(`H_D(dPdM0%nMOcW+0cj;EcMhWzkRb8v%<vhdL-k=|Ax!#P<&fqty8P_
z5BZ<T`_7H&>DZjB<Vs_6n(_A3LVw+J@;oL4@PtgFLngBWa;co<d%UGt6k-*cVH%AA
zi)cQ_+fv#eTU0?jtwX9h-)Y!MGpS}%6s(T34p3QuPtCcN4~Rg<K!<rN<z}C|<9X`R
z)q+?-ddM9yCpb^{_y4jG+|UhXv_SGv;t8UjvYn7ZwCn3p7DARXNXN@h$tXO-GA-w!
zuG3mHjdTNPVXt{=`FS*bb}+iBMUpv%3QIpgD<T1m4(K+xLo9bNUD#M0axc-YcDc{~
z+TU#$@;Xu^7aZ%=-UuK!r2U(E_2LYdKazQMJl?a@dl~<fNRz%Z`j0HnZHwpb-eVf;
zrGRGq+iud+Ng3LnKBcyLULFl?Gx!e@3J$KEwFQ$%VPo{TfV$<reMz-djYs2Czm;aS
z995HHS7_6Z8~gAhOawH<t_2mV9^c8l3wA2=xWYQCS`Xs0a-k@3@Zr3&ldtlh!9|sv
z<`;;3I{r|xP7~Tplt35xXV^Ws$l`<$_Ssl{&(Wq+O;ep)kIcaYV%krJxO(IAO2gSM
zraiWgxoYeHOEQwZku4n^{2qJBnq%}7ViegP`}pZXe!lIjONxO~e@g!cXkcKQ3gJ!R
zE0sdp<@C60*DT7G_}^}4*_`&}zqb~{yRIIz7d`|)Ue@>B<X;=O45-8Tktz5{JTO}X
zqQ^!Gq-1(ze^PK<-ayowUrqT6tWWauPp$$~KUQ%Q6;(~#jYhWHzp^!OQK#H?kUr5p
zu9}83t;OgL7gU;ggae6cObdAWAKH)UC%-tvlvX;V*;_@e62Ro#u&;qV#|a2G3O48T
znE^2w7dJQIC6|3VqYI8XuYiXmP=s>R>mx54nUtf&Q}(=_)y}qgi;s@6X}9;ralHW8
zJNCsQGLJK6B4*LZ#HXs$$0;*aMWp7c%O+zCf~9Pag-k#b<JHiNS)lal+2!MLa=B`z
z4kfQt9Tf+?)*3t~i;&0JG3WQjuNUswy0#QTVu>_CBO_BD@p%rkW2DoQuhZ9P%~FId
zQSyXzhO~D_fh;vsX<#KuF|j6|KhiPQLSN&>zCwt_(=fhXSwpCi@ibj`!E}*0cqDVT
zTXnB&yd6yIuQqdfZ55(oSm|Jop2FDw8a^u|7#TJ3=-7ayVxy7SVEpL+p&OZ#_Z)M+
zRvF^2Y5w$?cmF=!-iyoonOfoZE+Zb~n-k6j1N>+LaM_Lp#~;zunP9KASw^7@+%1T^
z2X@?kbg{s*#g5iI@}vX3-M`1c5hRD0nySu-P(_--^kPK-K2YPgt^_IB?4xeyX!|Y}
zJk)q)0)gkK7pNeuOU`{7g#H#A!fGFU*|>1WF?|Fo{1B5t>s?iCb<+gJy5Ev8Rf|Ed
zZ^3!wTRb#;FNDLd2=aZynHcK0<th`c-6N4AlaXXZa^<W8d$gDZ*Gt8@V^;Y5%4wI^
zjId;OOK`V1;gWaM6MtBpVGSoQmA9I(HLVGw_mHCAu=}WtF7Z>o?GZUCdw%=$#10ad
zNFTR(NRRTBjb{j%mpVq*5coznU6ZfkgYm*D&zk*v<y)dR`_$y(SpNn!DSW5RwF9%d
zVO4+JTqDkb(dQ*r%Fr95A}mj}N0HMyg4kKsv5a|@w8Dg;2oEkEcs8WJSKF_&+3^$`
z1!TR8yey!PB`)78q@7(?ep_6Y`E9#FslZmd+Y2~fYiyz6v;$vn@nD&6qX!GMsHm6R
zFPpXdyz0<gkPK9B$;^`csUIX{dlYF%E9PK(wPbOE4~Y;p?5?O<8{kQJHtCjjAC;L2
zLa%0<0v9`KA;&~-6SWl!L)y=T>wl5!kxcGR%8SDGn8?31SYzWu);N0slk8VJXAuA<
zual>PF{tTT53-ev&*?K_!45H+1hzt`wVhpeomCjQ!#G)UqBcXHKWRd8r>)dEn?nVS
z-2qi+>O$)zPz&wmeM9Qy8tH{L*!VLuGb=A)U4Q<==N)oEbI@X{P+!p{{W2+vKq2HB
zhO|M_Z4J|)&;C2MZa!;?brqi`W201CVL<dIkz6<?URAJ^V?fP$z$T;>tU+5%_8{mf
zZ?a~Uv@*xdq-FCyW6xoQC|yHca}!2_-MzeyrzTaehjJe|7=+*;sWC#*>UgQm@Q21B
zQY-4YDT@u4-4gEuG{3kjx{>R?=58CnC{{_>H8t#g|1z&C6bz(LFatzSob#haSu)qV
zz7cw3;q~ZOH{poF#^3jPWTYav17HSP)Q*?=L>zpa*Ff1P6+qrWxzJ1NmGD#Z5J@6h
zlWjbaH;9}JKtLQonLSCS>tJ@QWi0+dg!o-4i#gtI%g&fJ!DEFBG~7||+u70eZ0zB=
z%;vEVHcgXi^4>}9PT+8Fe%&YB0A@gpu%JcchbM4xG<CNGUermoz<Ud<Ql>$0=)81?
z4Cr%F(RR4akxC*FDGj^o5dH;*954^>GP3(kL2-9)v>wk2=h__j6Ar~4iQ55q=m8+f
zWM3UitX463-1hre8oSU>YW9Km+rgHm#iJBPZ^b2%XCI8|Js~uG+3J_X+w{Vg%NEy9
zHJ$y#84mBA<@9{8KVG+E--aRO9`*QKl7~pmdx-r?tZcnmy9vSMHV_!1vv1OINH3f%
zTkQ`!1@;YLCLQ?RzrREoJaE@|6UtXkQQc3rs@N02iJbiT`6fGC+aQ4R+~V~gpqxO8
zur?rKbG6&=1*bOP=drx6o3~$a$9?^x>F%yG1rd;Sx3!Kvp_b*lBGK!|vKLxUNfpD#
zM;f@DQW!Jrt0!);G3=5-O*Ha(Cv}E`_Ug#D?%n2*cdq5@4a$jc`m5nP`j`)(_9FvN
z7U*dzPx$HbH=!Jcs#iQoQA`3>_HRQZW*irgI=MG6_r>~+0Fw?XG0!Pp!=|OIC>xQ0
zyB1d!n6ezVDup=1wXE)^)VEvaZ$f<zrcBKhtMpbW6)G(LOp4QTmZ@L$o?ViYoK3|V
zFP4$(I01&W4QKJpoorrNSg5t8>p0p#hb|6j3$i!KyTp!lkBN+2$*kXPeoCd<2LP;6
z8=KK}YVCTBL*ARj?+Z3snk%k$3|Y_4Gdq(5Z%4jf4QhvNMJFb2*LQVx2ZEMqOUf&z
z4XH8DW!ewc8jCwFyFKK8d34q<>rKuQ8fCdMQ%*gWulINCS_GR<r&I|zZ73P`E8;w5
zA8(154>C=HU+#2~|1iz~Q;lcL#YqpM*?taz9%P3Ei8<o8P_>I5&o`23!jH2O!0dW6
z4eL{aS*pzp`v#TUzcaEJq|ivzFJdT<rv4NZx><R-?qLY|_q?<fSv8U(7pWgC%;fu&
zG3M0jE->m-jL(bh)ScX#Ef)r4x}8rnG>gd<r?>(#=GaZ1#!SDZ=y?`&ivMo3rLJsm
zm>wu9-55Vfzd4=0%>3e{DLoOPixSPVnc%<O+q1@Hmv!pMLbT$id|=*+oOQ@mlA)o!
z%ra`mIA2@oQfaM~PC@#1M^UO@4(czr`e2@+)b2Ez(B)$=J87)<jYLPCEA+s!oG(fS
zR)1cMY1$sr`Q!V3m($L+cvlWeNjnqZ7dx=+-aYj2)Ljs(?u?@p(!D^|98tZiGO(pc
zpWFpl<K9IdL)vn@Azd1}@*KS6#5f86j|G5V!~7c$LZKs91|ukE1$s^4s0*8o|E8*(
zdq#Q^Rt$}x3>LXPUmJ=491=}<ax$Y{zIRb3EMVV%r<iB_lkr~?7XWGDUb_tF!*5!a
zi=CsCNu`}Ul|z5utj{~6T{7t=?_nntF4cce9K*QOWYz4fA)4#(23M6oSm<%H>w4C#
zd47~ZVP-aAUkJ6}$GEQbp5ysqlU{G#`dvBn_P8hyR^4ReH|O>IDeuJb`-aeaZM{1#
zmtfL7?`Z1iPW8vQ_M?}}=_d9J#W535X|%N~-{C!uKbFogi0ZZFo>1vi$ER$KeAtT!
z0F_|oL*Jl64DDm2VC-tM^%l0NtQ)i1Wb$OgML+YIo`Hf?br1U%yTT_~(W(7kf6e8C
z2Ze=qZCCZDO#LPbAkd)bP_fh|n?kAf`x(K?qLYo2->FCHXAIdKaoCh7A@16>zCrvS
zTcOZkw^B{yMe2j)Mz<Wop^aOfq{~~J(i!zt-J(K7*gl3I>xJq!X0jx=&alGZUa^?q
zo&s1jlnzPB`-_A7pXE0_yj->$)K~`-PGFuh=htQ4*5`lm2Xm_l@A-%9w%2hT#b0W{
zBtpFy7!>fgi{9ALx_whm3>yEsg+2l)U_C9Db)`|mF!=quW;&3^M1D9rb?X0UbrLI!
z%HSIJuvz2vOfs5L6re&KuH&>KUWUSFmqtYQ#Tw6`%={9e_Nm5)mK`?Af)?<P-9+qS
z>@}E!GEBGLIXV;R$LxH00IYjCPGv$RuTD`D{pdhBserTiHDp)i&`BpFtrmoqN*hB1
zL)jmtWcF{Mna0vKIB23g|JPkvo&EJ!8Rd}E8e6n4*f-ialkue&N)A2-e9T^>9QuNC
z$#;3&DC(vaf2_6JC5nB3^K`G{I^3!IKk{dhzc6W(Ir6?oUnQ_I_IE17{_*3``yxJW
zzt&ZRiPP91L}QXpUx5WqBU^QBD&6)GuUsOK`@?-#G@JVGnfzogVzpX%udcLW@<;WH
zLehN17ZWIM955~&RGfo{UGx@dRj`QhMo8d;acJ!5@#k{Wdvo?10eoyFY*TEdPC1JW
z&+_eT>PSv)s)HgwJ$PpZo@_KLPVKE=?jgBA`etI5Gg_}?_q3b8M0dia%;iY~OEpG8
zL>i(9U!n3Xz`;*5A7$@sr-NgGacQ$ON+YU+&kt91dRX=|ez3Z{51Ur-qnjsixIdy{
zVxv&BdD-^X>FNxh;4E_s`~E#KWI2LgR>2e3KQmi{u#MJq7VMa=@LE9o-n`8Q;1Ocz
zX=RCOy665h_G(g9;hNpDZ9)Bm6sxVJcw^=(Iy6#87GX6&w@ZsN;hfmL^(q50HB($C
z-#tBsh9>H%z-Co41$+!ol&cMx&O;W~qPZv<lTFtSUCV%5r5drSvf!C-+p|Q!ylw8i
zBjy%wO^><z%uz;K#@XiaYC+8iD&Mj)feZeQzp||%<(9-|ohXor1bf6LVe+f|z3m1=
zBsEi#_Rp~d0$JAqzUjCEGzV!oQJQl|pAUXs<8<T+{c%r|9{@_M2c4Dzw&fv??3&qS
z{$n=heYcNxrM#}kr}Qf#&YhY<&+3oLR@x$3xxBtMXo<_ovWmJlu+>m76>Q1G<+<k0
zo{U0ExY6+<Mc&!xk3k<&CD5v*-Vt`qW|PHR6!coXnAhS4zsqb6zhA&w>6?^t6gNGc
z$kEWC?2l-*Sb_T|_h;wyN_|wHHs_R$_f2?aHE3@H(#JDo79J|Xzqm8`K#`-jlNZt!
zbP!=ET4JbO`#4>Frc=Bp?(4>%?35#9+!4-S3Kyla6}Z>Txz-=Yz3_U9pNGkwUvFq~
zoU;M6%R%bB<70=F*$nJi4?RfZ1;N)*MAL7n6&hkG^#9yzgi$k<$o?GS%5cD!4Z#`0
z>GC;oa%^THVijeBzOCi)ekV~o5hP(n$Jr@XOcXk93`*|SX?Mmi$xGJf!O7Y(cUwOy
z^W9YWBy;1J<2y+AfUHsFEDrNhkFv#$YI!L)-VaTlQZxYbQoSHPm*XqYZ}=8eYrO7z
zdqU&qz7`LwZMDdo4<%~Wgem4;h2C^E`f`y7Cgy8vLM(E>DsVXNyiD&X(Elycal}yl
zG8h%FQ`NGzS3Ep#A3+0l7o#o-?LXZc-St}h`3H;wQ{>lNCF|{7c<?Ct?0WXK`z_SZ
z{%ln!UaBVyln>MxM<{QmAXKaNJ}Ipqf%9{sseq<JE~oE%P?Nq~eWT+avF}em#*~17
zJC1(jKOrdJqMna`52<RuRk8AEB!KMw=)pHM%y9z05$b#sFSZA2mTul~t9{S0o8sMK
zk{0w<c}7{m$o1W6Oit?4)(d6n9KRN%3CfIO-Fkmi97E+B{`qmHS^60-^<i+FpuA3R
zRy#xHUbDOk6X5w>So!gf4{%(2Psh!MDQFNdW0De`mEWqGEFz8ZI>=SMTp<HRLq}Ju
zwsL1pld9*JzWqZ-fV^om%Hii|=A?Q14rra@H1inNWiH70a9pfN;em@y=RqfTr~jA0
zYl@-bR@EPJ;w04Z-&uS7%o-E(Jd%}RTUcl$%6*|_2&)`Fg{|%=4fvCe_%q$KnrxPe
z_e9XzU$OMyU8kQgZH&{$2xHj<6^^+|D1wFnuEygUs+-7_Z2>bYUhZ~B>C0kYF3P^$
z&&L3uSBouWX0$sc`w$l)r@c(HGojtfd{SaBw<N_kKE4Y??9=TDz50fIM^%}?gqQ%{
ztlJ67<v)wRngiA++Om6GuU8ZGDs+l9Vsg97agSWM46{9dHrT^{0mIQ?pWJB^CgrYN
zkVr-)pKOIC$cH9t@l*!O+EMxOz^MkA#GQFIE$*-rBdW*=7-A*?RtgsfZqfd<I|&N{
z+Fau}EOaNwXCdE);YCtErsOiU1cr;Y84pj`q4w|LktTP=cpeAIvbqfpPHlFf)crG|
zOg^J}jnjHCz9hp%(4}IBO0y|fdX`&Z%wPA%AOPosNjJ{(Qf3tfO4OMhqYKC>#sDD+
z9-34AiOe|?iHD`6PD%^6$c0d&2JlSjL{x!u|K(&Mgo+>y`9QQv_KK9V`LEOudgq2V
z|5!DN(njjAfky8HdgYultM`9*&qNx1fp21qzw?}ATLvbRoMWgG0$6u-GBZj<g|zJb
zAn%iG5Tl8#4GK+wb$ZqLqt@PP*<NS+zWGuyEL1jN_cPu!w-D(x>bTpcX$k$~O`XPY
zpZanLCW<@j#SGrNM7f5H92H0sjp)#kGL8m{yt=38I2}4bI7~|Uit3<u$*><8lUuc_
zA@RrZ6=e_f<g202#T@;(hgF3}xe(41i7b6?MWXTMs5U!iwU`Y`{o&rV@MfuU(%izk
ziP>(b$m83ky>>-5t2<wVy6$=F{xP%?!E-F`-`l^D&Qay2;a!2^Fk4?}_xe2_T*u=X
zf?qMCo+$3JMdHzt;l7=ZzT7ema|a9wyHNqj2!@Y<q5||jzMpFjiwnh5^t*Lj&zu!7
zkZPURf0X9AyV%aIU^w=A1aUl<dkQoDYzBMSKHgx#iEfbL_YiFTxL7PI_s%1ya1ZpC
zuwX{;>*!2HgO=pTL^D_70toCZql<Fcx3rIxCwM+*I61LC?#qd?*#o|iIBM(;Pbl!s
zL9dEc`EC+erYy{P$Wt~eIxM_Zzuy<xfjhBcYJT<7;}QT(c1_vDD`y+$=ZR3-Y+)KX
zE_lgKlC-p%tvl&ki3_tp3i9gJaPQ}(Tj<R2LFbYAAUQwBRW-}S@=j$%wnwrZc73$d
zL;<^^24&4>hKnxMZx3gujL+6qiv?NVoDMza`veX~d1ZeyI%K13uDc~SoTlxsh~rba
ze$3(uxtM&~0o?s6(I{x64;?QA?RRT++DFspB;N>NJv%ew@f}!Ip5M#OagwMSpFG=m
z#-!N3ET9mG=D*3S*}?U3^z<TwaVz<n9ewQ5mWHEQSvjZG5k;n{#`;5&OXhQGP!d#B
z&x{7LD0E%WWx3dBw03B^ctz?Cs%PQ?nGfQq-o4*DCC>;F^3LDIhES6|%XHZX&j@@~
z*II)tE>+i9g$FBU-fh0~U*aIR2`DI|;nW;gt(MQ1P`5W*sDGj2P+e_|i^}UP{5=7c
zjc=LtgBJ~6nuZ143V{SOI!T;7GejA#Fd)J3h+tw0NGBAJl?@EeK|k+nWIxW1kHPx{
zAI91dDCl#A75cOgphGmhNigGg+2^m@a{jW&&^sl4Y2Ty%weq_hZbCu<n9jYlLDMnl
zsh0sk2~(P?!wKOi+`Ko#a4-sA)aJ#oAEb>q>Yi;)m_d#%h9FEY%r%zD`(2~th1Z1k
zi#>e;huY{1o_f-dr8h4mJ^7U=0%`*br-p}5$N0@@kM~ZQq8Wy_Oqt)qa0I1lRCIOI
zj+FVzX?)sgHjKe&Fp-=GM;ZqE=z&@x1?BgmLAWROttJ{iCbi-mx(Kk-bIKq!2r3p%
z_rAOg!{Rsn%t@0qv&Au?UV-&S{puEIQQA;cx^JKO2?@CHp;YX5*1`JrK1SF|+T*9B
z-{mlE7bI?xm2mpud_g;jPR@sOkqi@x+IE3p>M#7GuyB>*E~@3=xI9a9aAiEhGzF82
zl7^^?7bk*Z*TNqU0ZAWq)wzQ9!KOh7on54~)Gv|SsMs^8Vt5&SZ8t2AYlOgv7`;rZ
z!D3}huNq>a{gUJ@%GhBK#vYgIy9<^2{6x^Pdq6LfR3tkij6*&&muQ^q>2-;Ual0)=
z`n0~z7fcX%0OvIJ`ZbeAL5!Dwq{l5dvye++yP*73L^>1$1vMt}J{AMzZ$KBGiI~cG
zQj$q-C5#uRapgWoiC%Sz6WY*vrYpK5VZ&lVfE*_(iClH6!0J5@3se}CZ5dxup|T%q
z^HZ>=o?5xKf)kSk*CJDUVQ<O%%#SZzYwz6E>lM84j)ig`wiE2eK?xYUq-07Wzv%<F
zVD~&H7X(B(19rLSW@I4cc-R<VLe9|-c|62y+?HA6Mxj!2gv`-Vaw@e;umNASa(?f{
z!G;U{?a|T4KR-95vbL#a)tOH$$VsMQaI!|2I3oOhiz0eOKA^UiR=DffAn(K6w?X87
zznrv$!hf_ajE;s>aop-<>MAT@S+*6lZRlLL^P?liG<paq8t)WkOWz!a>;N}0>Yb63
z-|fx3WcHbtOdN(j4YoUjtt?|u`cRPCvoFWC+N>&H=B#uVd+U6kzNKFsG5)RY<WRv3
zxXQAN>J_|BhmXOnBK}u*9b+!qmY^DkhtMjtQsM@noTDCBsMB+}z#~gW@C%rdwJb-w
z5zZKSe(BKxtx*ta+9hS_xXP;jN_Y{d_?{5<N^Fg`?{oPUp6cev&bZhzLj_R{g&X^B
z1&!mwQm>YIAO~o&CJadRPohYffxyF>Q;fa8dr4)4i3EltQ=HnxH-(aigJv+ZazkG<
zDP}K&2CXL57bUh=QfW{;g>GO+LK6nc3zj3a8H`%`yXO_=ljx0iTsxE;zdC$aH_gB&
zM^FT^0m!XqA*+2(Y*V)=O*!hGX%>l?VCcI76#1>;^2)33_g)w>q2Dwd)7}_Qd0D=M
z2NHB>NH;wl@Sp$Y>?ZFT*k|L*a+%yuD6@n=DOwH^eyYpkfffw@3;VeqEf{fEt>1IQ
zLjeAvRJAoCQ@Jj<10d2XM^@5O&$NaYI5Y*13B(E0Zzt-1P;2qmz1&_=HC9z7vMc}-
z1zVHJEoMgYZc)+6lEEgH2D(|CW3I3$K8<ZYojI9c0Q2)&9*_T?^wCCKS|co~SxUpL
z@FuxUg&57LxY_A02#jn_<oT2q*uJT?3me|l{lwzJM2m&yzI!WWJ1B4UP4uEkC#}7g
zN)q>vvY00y*AD&vsCvtQDuXR-l-R(gH;r^`x}>|iJ0+x~Te=%m(oIOGbcZ0_B`G0@
zbVxTy-<NZ~bMJS56Z6i@nl)>l^{i)&lt`3H53OVyx3^!wO+llNbU15FmDvW(BfN$k
zByz%|P_NMcB)EPQ{e30()w@%-9OS%E8<|J;vom=zjMGAtqpGN=<omzprv1ne-ON+C
zUYhxeZ*p-$yjgT@ia+UXcoX;~@tQuM5a_w~pd-qX;6`*NeS_a7br8En<zwQ+!*{g~
z*zyU9DJ6gEG<5~bXl{I2MtmAe{*f&nb+Zu<uO1$rQMewkfY(1tfr-5*VIaTCUViA3
zTG?uNe&(^s(<Nh4Qd?5NfUyEE_R6YOeBd_V@>G*Zs<%n{Z^DHVn9QIp$cbD(P?foL
z)?_kNb)R5bLt2ODK{6OoGBnTjPg6?KzNf?!j)+EvZJFx1d8OV4YI4MaVOQZ>M7LAl
z1HJLz`Q~`A)WQfdQ%w5*1Y|Pk2(WL5D;;e-`U7rzT1{WeZ4jyP2^2Mkoo62KJyP&<
z%06&^IUO_7XjTv)j)NiwN`p1K&rQjwq3dXvk?A5Xoee(PO6Ta9oD%DlD<$fZBLm2u
z2LjkA%$^S$PxnQE>HGAICHWuT*J2y=Gj+sBfJDxI%J&^7Xc-@TY7093w-MlVQON$J
zBj;m?#~Pn2JY=|DVk>~GOI1xF@{4JIz>Z~EYyweI8V$^nUqrj5sBw#Yqbl4itkwVK
zxvxpvbafqdhM8_r_j8MEFsV*6m|!QaHMEhcv6u&89WgXo9&++z#H#wnOXcjv;{F*3
zZhwVZ0WAWMzen`GK_b)$##mq897e|}PuHKbikX|s%!`jgNsJZOWc!}4rCW8uv>zG*
z{YsAy!OWcVQ|TSdswAtTsFS@jo|a#-KMXL}(oJ#M&0m8Z^imSmCisA;*p|M{Mua2w
z^4wNkFe^+$gNjpxu9{|$C`gnN-%h_{9g5$I_I_=8&Znan5Qb2F_biCeyhT%5Gs-@s
zW6u5_L+63&)?B`d3x~O7k6+zk2b?$MlpidtB6X)V(|X~QYK1XZuK)93Pa|pJC!HT{
z6inijq-8yt-?l};CG9@MA;KX%5xk;!>8lorvRX&8;^trR6^iJb2Q*6w*WSMhE5X8c
zuU^PYJpCC*`;RWy^K7QTM0uB-^Y)J-`(b2lDkh8jvI{CUX0OGD;e7cvlJ}NcwvZse
zJ$}XVQDP^`yPESkh}wzJixu17loje@v(jN*SZjIc4?qPms-T!xlRtjIfF3$OBYoF>
zb(07mmUoxzzCN0XoQ8;;x2;x;`NV63#_aiexQrB$2h&|RYu2T(6{Zw00!tl&83`E+
zU;>W0sXMrIoz=1MiWCYP-D8N<$SuR(bB_w8EpG>u_DX*%GRB^g^-05@Kv@4K60P^Q
zJ~Ge=;f9l;K>482@T;^U=%{5>jgcwI9Mb!IscV#XO6P<8oewjHr@kdF*>l3Q={NZx
zRl-9wQzz{=0yGTD7bJ-+q5D|I{-4OzA??WE{J)9w<!db;uR_})FfzKX!TKf#nC+{r
zWTU$$iBE^R?MYvireJbZM*9a@ZAw&`eCWkGfp(KKjW$F0l%Wm!X9MEZ8^>k*XB&x_
zL{eOE?0TN8tAZ@^6}sMO4PS{2EU%&zw<G?%@fNh`QI`{K!os6eZ$U`?bDZXRlZm$C
z3l>C>?&>kgu8(S&x!($a)fLf5e2;oJ>!8zO*BNh=U8WO~k_%0TB|7FkViLeSEH0De
zND5ayC5Su|#D6P?iMb*6d*r<~KTP2jq@so!;xP_y#}LyAx74^~id9&N{gOMuS~}d_
zX_q|%GZswi&s&Ya14ZuR-g_N+<X}WtyhagG0oPF3$Z36)p)>c(EhM`*tt=`+18Le7
z6?yDVY94a_r2;E2=7CgN4p1jC+a(mV4ApByBO)>qb&vftjL&4K7J6Xb3~lErI^K-1
zPg)`m8%dj|L1zmnsA7r_;C$D&lal(HNbWz-&87Xlk98*@SB{JuB$xO1-tAON?;WbF
z-w>5C49ZmnoW)g6N2Ffjxgh6K&7M%IpFl%@%o&)jwCxoz(rve;4<~>6Jn##(skTb{
z<1|+lb*G`F9Fwv<61o&O4Rs<KCXY6s-h`E^Pil2+osj*Yoe0+_*BH>o{8wt%Gsv3v
zxaht#Ti~~M<0OK4=s_an%*kt7Ir$N%E<yjKZ;u)#l~Pw+G~vdis9pt?>0%GshqX5>
zFOC(QaoHk%<e@+`SR84UxI)5(<D0gT&_v*ruo!#}+9pVgNy1I;Am}5^sGa_(T=1(Q
zO=EoRPb^*}G*U;pyElQrzlu41Y`!YR*=cDM)4X!0liZcG3ROUnQQ-<zD(DT5!@d-i
z0-EBN{w$|A)}QpUPv>wR>IMSk&*-2LiKyig0fG+AP<wEHDLf*&Lfl3(!FS3{r_6HX
z=0={y(#d0+)nKz@V&2gt_N``Oe$R3ieZ`!p{8t@P*c>-qXBc~P`Qd$`%rp?iFG><p
z5@&6{3d~=_2qGnXx2}IH&56Ix=V3TWlsQq&g1#ab7H}b`?kLj2B`)4qK@uL0iJDPq
zVb;uXlz^wW*$^-k0}?07d4iQ|RXpqKy51&ii1OI3vA}1AS>#|_*J%EXV&~{qQf-MT
zh|o1{;!ituEu$9`DMd59+PQ6o*fz&9C-*;3J~^i9`53U<W&fO&6<@7@N6N1Ml!&Kj
zf5p&4lf1+?;LEEaYW~!JTWy3)c#qX_@p-Q`yZ0eHS)EDIcyYl_7iE+bi=>cW0ker}
zkurr`Ek~gE_-cIlRsk!$jagrsM^EURzdEjlyIUcBE+9KT@pM0>oh(rouk6TF?UXE5
zFYe<LI!vXxwz2oo<W_d6s2AC?%#S`eVl~aX7nC|_bPU_J8i2ov;>{>>orVpJ8U-ID
zL!^@PUTZUjMtpD}ta9@uSMWk@?ct2jO(YEyfdlTMYbKx00<pAr$4Xqt%rOvpDYZD)
z1w3mxYSLj#2?bCwpSSH5PCEx!x3s1RmqP@N#CGFHpOJMKz<&?QN1(vOB^_qRJb|aI
zRt+Ncf%427qerM}e08rg9SfAdbOYMA%;9E>E0BW=bjIg2jLkdGGTatI^bD!bwnsKg
ziVnJ~lfCE#ZQXu<XnOQITB19cJD*YE7TTQFAn6H**Me8x6h3LE_2=<wNFH<(Qb(ji
zND*RIZ5R-sUv)rNp61WcNNc!kZTuGSe7~9&WL3dl>~GJh=GX?Lq`GA#;I!((nF;+H
zmEb^3{nD~{tm}Pu*GUm_nA_OpA_@A%gdhFwkiMP1$0Ycdl6pj1eWbNcLxNO{yWN#y
zis-}hkhybUTQh(CTP_|ZX0(`>O47}|ZC4GnbOi-r_`qGx?IY^&P<^32(Z~9G!r$h7
zy)Im$pq2rBE~F!)W~9PWU{ugWE2n5wxQovcs0if_)}T3uXZxbyE`>|~w9gTo^iC;}
z(<Y0wKHt(vIc@5*bT<V;WRt~f%1{S2B1Oh;BJvgb_s$&?&37bsZjpKpd0|K^cvZ=n
zV^mk}V6>rW`oYS#rBUJ~+%rseIQVyx1D}SDTi-mLE*+43{Y;0h|E{eTm)Y#CMu=6*
z-uW1>p;f15n5D*+Z!{QPNs@Az_*_)@*F;cI@Ja{%Va+P%b>8dvecdaOyW*knv#VJ$
z4D8jQHjyfagl|LYt_18E%sUVnV+Ng?;i+~)7^E088uf9yIZR62=T-y9rE<-WhRIrd
z{Hji(?%(Is?uc~zuM0Q}D{L98b5JgDRv@qJ4%yjax#@5s=BqES?5~`QbO{KBWl16_
zSX{rsn-oh=V(ka5=IOYt^B&B4Ej}w+wfL>u`vQbtlQ0o{VOX<B(;!O26CzjYZYM3f
zX9_c+N=D86U3T>hqS76E6;-Wo)w|8P<j-IDvDm0cY-vrn&p4*fQ(Fe{E)o!Or$qAq
z`u;rA&T;FWLu|s|(z!j{o`gE6rP30dd)d9B^sJI^E$n~iUuDc`Fh->I{MX_3?_$F2
zM!UgeE)-h2{5_~b+g8|KOAhyuSM0M4*X0%jqUeWld;;4FIO;O>*bU>6OzMxMq~lXX
z&1p7jecMwMSuG_S#hl~g6oJ=Ez-KGizwp$xU@WD4&azdxO!d17pFRgC5MNnJGm%2t
zuhpJVXVPc$CfGZLn~ECCzIC+f;9HA(LZH0q{^?grx|Eq8<hzWE#D4Y$BlIH~DV`Ho
zjV3AXxH8H9@RM*N2=umgy6TWdk<a)%{QiZ?E$K__x-<S?i44udtv;0*wMKyAC`B%S
zTPchBL653lXs?O;v^<n6aQXfC^JyLHPpxVnUJYv`sSo|dK3)GV2#F^9VIa(0g$1r+
zrT!z~t#TuYnYmJviWb%WtsvH4{EolY+Tj46i;@U3Aw@&ekNMo30Ifa_LPo)i@(XSy
zJP%W5MW(704V6@qCYlD<$DKyM=EL8GIeZ7!Zzf0##r(s5%!ySR-^MH#q8HyEx7G9-
ziYSYOdWF1zHaznKfy%n<3}sxyffY2km?}gcOgOGq?j8#hMu$4Se&5GE;B#VjV?=62
zD}Cp->banZt@}&qV8V<d4Wh&ti=`R1`moP3BJ86;&}oE)-j0ua^OtGS2sP9mRZ`No
zA8!LlHk`PVKuo7hI##8SwALqpemI6VCW#$d^JPScdS~>QqzX6JN5-!PL;rlFZx$f3
z#-nWA#M=8+-c)JOrN-y9y538F>S&vp%uIWK<1xy)8$COsGYRJ|&VzL}vEFvPcVv}o
zG%ehyWO;*N{-pTebCfui#T7Uw!G=TWE;1^T!m8l2SmKcuX89;+N1MeD{vd#g|9paY
zGX`RdMf)1fE9sZUS4F<)9_MFyiAqe@^6t*_h(@O~<P?n7ij$5VL!~57bNTTBD^Z;M
zO%t=m;o{)ao{?R6a{4Rs2`t{PXedzm<7=nm>_?ml_2M|WtAmkC*^kz`&hcbI?z43M
zTV$|FvI1ghs;zI+dVIE~%(&smNC?O$pkA#OLMo5;qQ6;B565lWO_Sma_Uxp8JbP}b
z?p0`_B}RA)hOdeZ*n|<wjWP?RF5l@?I6KkdFDW+=s+!b`N};;m(pPpfm3>#Y>yJbz
z<@Me&q19C^UuR}=)ZOmT>sXo~Xjkr<n81T`_|8BE7FE#ycsYk{Tx^Qzk=2xL;0KG*
z-Zz;tz+*S{GsG^DA-Yt&k9J>?<-WCq_sVUek+LO5w4})juZ><>LW#h5l6EGh;cd$3
zZ%4f_@f~zzV*?{Y5Ma2DrG!ojpT{O(OIeda==zHDhuaela2w%|ezxiICaSK6u*5vq
zesbC@1QlLX*xO#ZFg=&blK_<I#G*jk5^AamJQ|fgA5M)<kAv^y^)eMM|3-=bAbWle
zU9kOQkD0AuKTE!7EK19`9vex)5fk~DNWfS<SLA4??RVa>62=uH&-;RUqu&mt-%wB?
z6@Swm7~e@U%`Mv@(!G-Y5br%JT9{>nV2XJ$IO(w<TRfU3K*lxnu6#iyNKiZ3!|Ql;
zQJ2~<AB1ZK@4oRDRZ+t_s5DtuCs;yZN5Nf7M65-w9qJGt{ezTyu3@|A!f&y|>D%uW
z#<I}Vu^)-lmeB%aI|s(0ObeJfMB}`(=4-s+jg7YI0~JvY)nDl^D~kyXx@+XB9!?&7
z!%iaPAqAT1sA9=E$+_V(8E5Qm-W3Zm>>4NzxMg4A^=CHXGi8z~ZL{}_$Le`_Y%8r+
zTyuGxrkh)$&8C8URC#O*sD<v7PNvOJJ4qW0CiJ;(ABnasfh4&S5$A%jM_dEgWGeRX
z?aR9h4FpcH&!4|}%$UVgul&HuD96}zV=62cb#uVt;!ye2GNNtO<mZP^pcdMjQhsyC
zGB@x%$Wra<O9>`8O<lGf#NYN$|2~L)Jl*GuvNkT)E&}bpsqUJHBb61@(WrL$iAJ)(
zRHmg(;CPMA0O4RfX;*0Wm5@donbXk09iH-{A{|C?J(<&QZCb&(a_-(N%1Nfq4|J$b
zy&0km`o)X$J+5>4{jKY(!a!8-AlQZ(^B1+_5Z6}b7O`Qo(?gD6U%jgjR;oI;L-G`E
zTk@qh(Uj<`(tM{IMl>iOU6S4_#IQ|3c=PaFD8kuB<?;J_w<8}Hl)E{@-0|RIGinNg
zth9E*h!hDSP$Z{m)xsgcz9*g^g#w;Z+Br>Q)RVi|YYa3eV_w$~jIKs+11&by4!xY9
zLr#8|p4+@hAJ>PjXbN|qpJE`CoY(Y8(rbq-RPMV>pHpwwH@U($$W+6U6)?o-jUs}C
zzTKf8LInYwXNXHhEsA!(+O$KCm#8|#T|VHR)0&a#XcuWr-1#v=j!etpKD5J^orwk{
z*%5X1r!M~kKl@pq3wbpiRhumxdYrD-WT=MZUgwSe&3;@*{a91C*I>+UUt*nf3gh3s
ziAaYaAf>8nXIr#_8b^i`Uay7}B3UltwYM;U!=)23Rik^RGgzl6T4g+4J5`IiN@RR?
zpKyE<gSz~n>F3rpgnL4l4#lhR_aB)2j1)xq96z%po3hulfaxVjUs?noD<uGqr3xI8
zy&h7AmnFxJ3(~*Vcf@W<PKCx=ncbbh9FYmsF8%RsaPh;uc{^GomF#w^p_XexkqR3|
z9V$Z@by7JX{&%_)Bl7Fg`Ym#PSbJqfsu`IJeJJtZTNaIf2mH>Zx>Dz3#$3ql;6ai1
zRk&yjWUZS+NQ!Ws<2;J=*1BIjaAT6WLmi@Pa{zM5=bU|l_Znjw<e~w_is)4``3qF$
z(oM6L!|0|=H&0_7@x$u@131k7YvXV$L^QYFnGYBP56y+D!`X0}63$5OWH6rDko!HE
zCRVj+foZigtQ2!gN{xb3M;1xn_*av$%FzcF7ymeKH(Z_%Dsv1(sL51bu-R*zHHws?
zQBPi7Rw{)A3Q=ZWUHA`jXEy=8Otf@ah)A{B$s7sGo@vY8M@{uwqN4BE=g&9y`8pXm
z)Z;^vs!2)8Q<_^-br1ivHuy=GE>tqF`XKZp^gupPDp}b|iPeIcqw|L(*dw%urEe~R
z3oq&a9!T|%Cs>&M^8NU8SEE?y7bX5$@6z>sWTsio<$d4>KW~Fv25jU<#>(7JoUkeI
zP4)@mZz`-_R1bq+z7J2I_-EVtTsE`$KAbNLQu19^MJ0<&Ge0>a#<yD-T70lw>!q<2
z)l-+kSIYF^puzh}gpj&kPl(?I(oF}m2viZ8y*`B^o4;a2&A+A8NX$Id!i8fw;~&M)
zn<xD)&fb_nmY|iIn3Z1hIl8q}^KM2c$D9E1w;&-x$ilZfDzU0cJGu_Zi0jxWrdK1%
z!bdv^K`@>la5sLYpFVnUR<E@-+cF~O6C@%{6iQw2;nP80kMlYfeZl3v6|k#(^ERNz
za*xH7to^~DY(``Gpf>+H($eH2GOMu2L;e|fA+bI|Bew=zVp?4vv5yj-R7ZxbOqI4I
z6kMw!H^y&Af+Zu-7^sgR^@+>Psblx9O57+OPCo6+O@&a*e3CWPCr51WY_8o1X6p6k
zHq5)px;}ZU%&7W9&6C(_lFnJR*r<Z*n<0X$iN~k_+S+S6-Hng--zuBU37~egdQ!_t
z%FM#N?>vg>jf4Uf3FzJ-o9HC>++?rnmWWC7&f1h&S=&tzup!yVgv$@DV21vZ4>?6`
zC%Lx&aql%AMp@P6a(v(3d7Dbcb?Z>8kUx2cb->KA@$=q+NrQEoJvdG**wB222=*Gk
zxB&lL;c9w`7laWyOxx|Ul0v6Tj?%%OO7}Ge8TY3q?GubyVQB77g;+8YM|Z6~Y-i{b
z!a%Sr>Zq{>4##^lCvh2h5$}bILy2H1Y4!;xnJ#nI;$cgOBTKNcO+#@B@Osu)=5RLX
z?1@wX&htPeg5)ZTKJ(LL{x3^RuZ;Wy-w!MUIc?mSsqZoJ7qs&qXKsZ~+6gz87|Zvi
z-R?}u4x4w6r(VZhu`kCICB`aEnUrp=y2Q8jr#BT$4a6(q-Sd3rk&(75S4~_E)mQq>
zo}o=EPPQY($?|cNl%DVBY25n}6EXSwZ{Jum8u?xhnG$3zC=!K`0&}^mAjP)(Ak342
z?%LIbWAuYj>Xb#2Xs&KE>!gj-D}*SCODb366Mp%tAnhu(KczgbDWI}bcr`k^e6pL!
zxw5J{p%NbUoJ4p$X{s1Fj5XA8JPFp|Xl3D+4|qLCPu#bl(lE(V#9T|w4Reg7?rczD
zM0b(huzcE+$)tKBej(m*P@$9ibF5rJXku(%22y5c%2$;v1`_+ZvYLD~BEolC7y`<T
z%2j@tTM>R7N58)<_|C%qzWu!jc?~Kcgb(gIzp1f3DrF#1t3T}uDTho8i5;W?tOglM
z1PJC9(fSi!mAUnRY}G&d<&9?Ip2t($we|O>r_^aa>|rJKUo9b_<#*wS!E<n`7Qc#z
zv#_@^TkeUxm958XB%C7+U_QjsP*?RiNc`_$uV}w#9d|{Ru?@1VuOaQFZ)E%UrIK+|
zWbcWV2Hlc%>>jFb{xRG6LzB1W=&ST+aWI=wY)cKlb!v2e7NfUCV8wfh3IahbW_2M^
zw%sf&Mv;+X)E+_WlvR(7K`$%)K-C?1_P1_xM&?A+M`xhEA3E)N*Uf~P%^29RZjkf(
zz<(XQX0&SXS?!!z$=<#=arU~7+zSuelF>e1sSVTE=sn}_R=TtS&MTOmPK~Ax*O<YQ
zK`GvaaR$naBwO1+MY-6IUOFbWBV*Wr8?XI5jwwnbvQW)A6^T!`jkUF64*gr8BdJ;0
zYqpPdX+?3`BtzL1hWjIHs}=ej-fXTSzPePlgltAor{B#f^BEoOm5~lE^Oc4(3V04z
zhl>rBnH)c_PyJ{aMwXf!Ogsr+bG8bA*Qj@-a4&D7<n<aq+}NI0|CnA<|IY^XV<P}t
zAKSUvQ%L<)iou6*oh0D=ACq7Jl^><bnMc`g1;9?%B6gkx$_dO`o@eLI&8O*Cu38!?
zFc}NCR9m-_83V{{mGHRO+pKKMp{dbiGs*gsA{U<?Zi1h`DQgjpc!Y`WhC{o#iyNi3
zlU`c1K0U5Jo20TDYE5B4@u7WPPX}G!kB~@5{~|t?Y@i;A1NBPQv-VpV@S8wso<No<
zQ1LXJ%@}XQUg5xlkE_n}nqm5II)uoHyy`H7^uqj#jGGhma+qeoYvU5}$nBjLqVH+Y
z^iw0%Df#`AQOE(Nr<c>B?!Wlv0l-=@Lb)VD_UWT9cytcdI2Bb?J}r@9ioK^Hsjz_c
z@W34KApAhbZ&vU^%+`oz{ktFO)RW@R?Ukk--)BqCDKMdPzw51)C520xlF?s1j`W3o
zlQu*LL3Gs>{-V5_W@k@GnBe$wPi><zksx7cQkZYks}+rV5<4?>G=0vm$Z}S+l<6(u
zb^M2j?N5CWfEGz)(YR*pmiv97(3O_Ns}k!A<O1BC6hke2@|S=8NqF_vNAL7Au$8l7
zfzw2ckR-A8E2*&F<3g>>v?<C%G@)ORy-^jW0;AWzR@ux^wLpR2aT<j&P5jO?Y4e%^
zniv1t3&6O>ADhzEH`yL#mUBo6w+-jjS}45%+zm1ptx;rR<Ls=?7oZbQy{4kDh=@f;
zbzq}~(<2wKrb&n-O3k{`6bG{v`sGR%(^2LsRZ8aFb<BKIKmH2y9l>b#7d4bE>s5i}
z2M!eo0p*4gHeT^fp)U%vST&O`Nnil!TkKp$8e0$t@u(DOH?CSdSVTU9*J0;$rOmqr
z-M{-MRt3Wc?b1A%q=V2?Fh2gUJ3bKzDIS{UXhXUJ-ok!MVfV95xjxRLfpXrgbJvfR
zg$3nk^ZSGkF~fT7Cx$H7?DZZAHSFuc++v)i^?*j{Fx@4z9U>;wl}4oaO6*}g9OfY5
z7B`C1=&AJvBG+O}S8MUpLG=EU$)L4<vMHM-t5v`65RAt^k<Ht6z)vwTyEZZq(C7IQ
zBiF`m7Z)ZGci)MhJJqUdUYP0qa-Y~RE&No~C>4C0EmLtSyvbj)=w*E|LCzjg5JhkM
ze+&^9?6_c~e%xGj`~`00)d8-y4C3315W0Nbi3zgB#&->kCv#%+yWMv#z=lr8z<n4v
zM)b>FWE{c#OeZQTO5(qF7g4WWrllg=E6bL;E)-S&@9F+Tc-!OfR~=XIQ@~=adAPQk
zCge<xSS-LN6gRfu(}oaG;AhzIE>0Vwx%}&!$L@sMG~GJ%cSA!1d8mYxEEpC1@%T^M
z*mj!Par~PW*L;U?2sn8s|KV$K@rZSriC51Sk<ta=JpLE}MT3k!Lq$bJEk*IrluIj=
z&BZ#)Xq8;CKii)}Aa*P5t^R~*5vO^9u9?E#)#zt=s>AT@=*XBPTOyd<T~MFG2RuK7
zP*;GmPk8yoOT)s$-F@rm+p1T~=6J31AEDc|aBQpY5O^%<yMD5cn-zcdTLzi#FeG%4
zh~LdI8;~7q$Rye^Kie3<LP@}TJpNgdkf}dGv_vQa66Cf;H($BCK4SUv-P0r3awM1A
zCce*eYdDGhM<j&g)H-yrSea;nVaee8`?9|HgK&SGg=p;%6Xn}oc4bGw$=NdPkL_~u
zpNQRd4vYOa`Ek&DPf`y8GjT;T-#gE2zCEKvZ+SzB8Tug#?xw%0%}aTr`Dmt29{YwY
z#uLLL-uA8LOqn)=VPim2WkxRB-k+bvTGnsg4&6oCKJtSKFyWPqoJ|`PuN@a@AHQFD
z815HVCCujrfHWdBCw9g&cVS}%u98WIt6jmdA_y9%X2Fl1C06bfu#2K1Xh}$cj73Tb
zHvh6~xG?X$4a^Y#ZRHc=2}F|dBh=|(9Xt5%9njp^-KIlM@=v>OgSJlH4-X6(1hm`W
z$A#clOHF3Qe~P3o9apJid#97n50mCq|77D<UBa#MI3~sJD;ws2%7a<(SI;(w#u9=q
zX<Iiwuq^Xc-q&<oXSAR8qR0Q0K$R<dJZzXOl8(me9HCj&ywm*q{IDzDb}j66_;*R_
zEO<BD+n5eKF~Z#m_2I^f0l7-YMpK>jio6~Ksu*>hyB@tHIpyqv_lnc9P*91(Mbo*u
z0Bs9hrloH#C-{DqcV<Di#qIw#KE_-1G@zcKSHn*PE|_?a0Mw7oJMtyMQK2oIR&9lh
z*j<DO{1NU<KBs*VWP0_S!=2A$Bv7P*bOhhttDgn3=<+!M4`)Nw<b%UvKB^KkA`hp1
z#~Cr8=C?>#vL=NTyFS6Y-xiD%i)Dp&4G-p(NrNWu-f;fshR9>Z5vZI5a@7f|)sr7s
zF2(SmpU2Kcwioq&;9!bG_%n`OtlXcB?8{bIPx4h&<s=*Aq%XDtzAX=ds@DI&*^nzR
z7RsaMswZols#<^tkI#k=Fsc1Unam@vaAirhF%v?Q4L0hy@|N>?3f>n$v`2Af;OS0T
z;#TEwx~`WTvK@rc=svKpudhBo-TdiH1VL5$jpCI9-o5+U;8=KBuxy#%xs%~QRwglH
zd8b5)f<^ZC4!tM7AhzI#z#fX8>k?Dh6vvX}p8TtzzxmP29w{C{k5>!vRFZWQ!^5sn
zw8ugvL@3+`-c&%YxzWx!Yd}z3NziHLWV%p(%<0>o9hj2{mMv)l!l2J)9KVozVT;cu
zZ-_U-{Ege@pkU=I6c4%5o|4?4{dO`cf`3>WA>O$}A(Lx8t7EBb9xL<^ltfJ*EQyE^
zJQ?^ER>rj~Jom65?qGv9m)32<g=!acr0iD2Hz#!Pn&G=>3veq0;4M%DxCr+b7P-)D
zlA5tPgtF`T@dQb0CkcQuKtuTBd+?!G$89G<Vc{~7N!_UqI4)T29B6HFAGuG?YO%ZI
z+m-26vl!9!t;ei8{Onsd{mx$VkcPiRl{g3vJay*}DJ)P!MdV|_v$Zl351DXp(!<r7
zE|pwvlhkoz_C9A4=I_iO3zP@GTL6x>?o;>3CIgR^#b-x@PRYB={Z0HY1{CV;H{`fr
zg!KvG6V{nRcqG_V_{<LB+AU(wDd4ESBf%-r6!q-p1|Ki41UiZ;aakeeU@_Vo^awTs
z(U<$xoIX+imE|6N1rHSTh;6j_g&Q`}6OKZ(6}%R3n6Qg%O`>0Aq|00YKj1Y}q{xoH
z1vqkVv_`Wj33?4&yvX!gELbq?%`n;BMK>b00J`X-G)~Dze>7##aBd{ps7O8~W#DC!
z_Gs|KCZ#g43xA$kin)Vg5EMvbkU0i=NV#^tA5?p6hW=X<F$kr?(wL=2qml!=3FJzE
zr}&3Ss|ln8x=C<9`aX=P2W>Dzrm)tzJ{_z+9jzK0jH~khd9Qbohy&3|<OLf@9!qSk
zF+uQaZJy5F=VND~pNIIqC0*cMp#!f#eL`H>LPQs&p|z1Zmd+F2amYhBHMwVR_sTtH
z6p5b37OFo3q~NjIl~+hzn?B^<;>LhDYZN<lQ_068cw{M&R=*U7`n{+|kSNn{?g6st
z?o&6xej!fJJ03$m%d+>Bv#KQgE?UjQ1`aRvT%0%>+vY?o7(Y`Ls_dJx_z`c&KL3@4
zv&N{PC0tiP>xWmW(jV1KL=}{HC5;0Ry=sJqQCK&85CCECV78b|8#90??x&r{isu}{
z`-dSMS{ZVYXS<=PNs?~@GX+KB4$PtduD!GTBA*mV)`J%wfC&UEEL5+4<+`oKx``FQ
zZ$wVPEy;j|*R~^N(mzGN#&^BcGHyT92!*VZMbJR#LkrZpY{L@?@34Ec(qET6Ox#}`
z=;ukyxD1o+q}}%WccYIo<luwXF+TN7R=9i&ATvFc>*0o%imZ*!tBnJtBw~OU2yQ7M
z6GtOxPdj9Gc6QFrEm$;hY`Z)-L`r>4X9a$re`va-0JRJXk6QH7ydsz{(G{2m&aT5$
zS$lI_q6rm)<gEVqlVU+A5+XZYAjc7{2O*$upF5en{tY87!_%T|-uAShVG>wQS2u`2
z%X4Bf#z#7T=Vq(RVb{^QfxX!5rWWvNqTF7uNwzVnEb0f6b?+W#6xk!n<tVAY1QO4p
zdfrP#*iXxhpM22P1VgV#Dg;c47;{>F;+=;ywJ=JqGZ;dti4!ri5Q|@h!byZFwcZz`
zKf97`A?<d1z%NT7Z4=H!1ZsZL464gPL5ln?utF^sjeL@o_JEilHUv)%rjTwXB65kz
zKB(z34Z8omDs+O|F4s-Yh3Jy}!y+Q>b%GE2KTvvBu3%*C+r#{e$RWV95r^PVu>Qc2
zdSlGc<M6{$HZ%WXP(acBD6%<FT)_La+QPTK&PF^t$G}|XJ7EfD1L6|KGrmj+X-Bo(
z<pIl_=kW`$)eUKZfUfsE-i<yWaf$n<U}#AT6}@X$P{G9vNywzuLnFj%5X+=fWJ@ku
zn8GMC9@r?|+}>z(BSzSc>y9lPvYHEX{Bm}Nq3D?P*J39eO~UtPXhL5ER2yYE{<Ql1
zxQbBW+d`{3qp?&wgObwidQW(5;^yv|Ctz_DWk5xd+ldn;fdw~=xYWHLKg9qW&~Oko
zC!Q3&$@0jh1O#8kFhe#b4PsXrRHzskOBm}CQ6$&>q5nj8<;#YI!!(d88S*z$tnZNC
zy_sDKn-gPX{6272{`Qj(;uI17^$>-BWj9Ozw;{2JCfAibd=!@*T!d&)wvXAGBA4YL
zMl|<2MSvL@swhz~x0gB;^!x2ZI;{xWuStK}e}PiJ&sT}AvGO(2{|RDz6P*Eq-QMbH
z*T>l16DmgPy5YsM^;xFmEEwY-Ug+0))3*Pz<Y365g?B&xL%`I@HAKCuq)}ndna_?C
zUsMX$6Qt<t?M=(MJMaijiFHv;28vgd57?bX>xjIVUmgrZAhlc}w#)^mls!t7&v?EJ
zTd8d>ZmGLIugpXe5M{v*{$Gu%HTyr}!aP~0lklamuTNG_U=HONr&3IjRDibR)7J7X
zHOXK8c^{bWD9Ma>jq5qN5;q0np+69Y2+@S@<2MrE<7=|6MbIaz!}a#Cl!&m{dH-&9
zV&8?+^Bzp_Bs>of(h}_TS9WD>MLmUtzLw0Vw}C5q!XKZLutquQ=@E-y2CAH}sl18N
zo!r@_$lLRVKetTZECvJ3+~UJkBv1oxx6`tTz^$)_`Fp&J3GUDgL5hgxGVGv}2{c7%
zVo(G^5#~ZJHYU^2t&)dvQ61Yp37cxL<t=fwS<skZM)#%VIRAO|j-ul1z2c~E`)3Q^
zAM@TXi$jJ`a=G|TDtD36fjK1n?nki1#hGhDEJLheL8#(eoKSS;`2vp4JLAp()ds^=
zVI!>>?ePZcoN6u7kJJ!zkit`o=cC@2uh70IYeDzzVV3Q$q%O>^X7Q(cRk!FeaMsx9
zaIp{U&3TSe5DmQ~+}KVs8YMv}{D(K2gK;MOnz)N7TA}5LTT0!5xhEsL5-X@M5?p?F
zGAJAcPJ4T%7-pS#^&Mk>1bU)Ql9$G@9m;vwF4US6Rk-L6pmNsgRdx+`8zzOxB*_lG
zQ*QwYa%dEsP2|-h6Of(K7h#H!?@Z>Nz>Y4=)mEtyYG)Js&%fB@xDg0-!zYKjeyFTu
z{f0e4uS^SJYkc0xbP<vQaYc?|L7iBuBzPoZPHF14#*{1)vp%0mU;sM4!QMrvzQW!A
zEFhRkgUzK5uu~HCPbq|(2Ey@VES7_x+`7hIDW@rhJ$X6P;VZ2I%QXM)=bZ!CSOi$6
z^uozb?38Y^darEblJ($)za0b7<0kDnDMw!{Gi>3|2(=CTYol0=S`@^Dp7M>o`XF`-
zv?lg*723_VhA%f3#0*@z;q|YZ+OW9T-6ojt%{;pSOE@x?yY-*;ZLUt_fMeS%g4^F7
zT?t=ZlpOZh$B6}q2)$umC%2Ge;Z?p56sc;%2>9B=a4^s18_f;P_o%26ZqYp5c$3kp
zwc@cDiaZMLgJ#cn3-Re8GQk_M49h{VhyWmjvs&+sjMw<p<dEio$kolE@RxxC8%k<i
zXA$Xul7Qq+C?O%itZ}p^{(K?+CkVC-Wk4t<I;;1&UbHcZf!hpuxzDsi;I|NmwBwVP
z(SYB2-UMT`Ly5V!Daz>AMQKFX^H2I)v~@!_iCG?@Sz%p@2(j{Tv2;nvYe$pez36pP
zr65HryG(c3j|8IC>Rj$;QGxpL&Al!gar`kLi1`({-TwS^&u)cefj)_|6U&v@-adsq
zgcM8Fe0#mPQ+K|4hBaaOFVi91dk4zc=@iWRn<mytbAd5dP5Peb(4jqO=Ub0UI#<Ky
z*I+jJOK<mZQ*S$xciP&)AOGuo@T1@yA`tg^(~C{LPs(u2z2?zgl};LrTB2N>;d=#C
z2AbVIm-QQ!gg<VZkM&VF%=aLoSZ{Bn)Vpgo2V5NSe`l<q;kBPjWS*Odzr~<%$pvoO
zJOr9N{=35H1bfu6@%pzj2w#fw^@SIXU^x1pT=kaUrry}fqY$|*FZ|@e>);60PZle@
zG)Hn-X|5>pPN)XS_<K7hH7V~ZNQEz{z1lUUv@-{K-(XIIa>P_ZT)~9!ExgDCT2ko0
zC^_J-ZAg8=wGV}G1;jJ-fzcQ(SMzVs%fY7)7L@I%8h-^Cia;JCzNcPm0x*rG9z?i-
z93<2nI32Svg}0<b)8eqVOOn%3RBOaJ30deTpmriE;lGq01g$#M-^bKX2x!c|1m-p)
zy8<y7y)5915Xf6`5#HLv0xRuSg!-aV+~mf-vk3Fo^zI}f=$k{9a9VJaaD$^a0|TVX
z?f>eeL)IeU)g(U(2d)hSaLNsKuYz|G)n8+y4TX~ub9vRuwGLK<pRM|zbT}K6;VtP+
zWrjI@`q+v2imN|6v#T}8_Vexa7JYC-To&<G&f530-kU`3HDu1d_McuwwZ%uh)taYh
z8wd9W%ihEE?s19t-TJ4D$8|&=;yWnn)H^KtcnuTtTtyCiJ4#0xO+|Wf`^VpmWrL&t
zyYW6Cyh}Km|7iiVcvDXA{-Ea-Qppll&v~}Zs+?Jt|8mFr{iO4L<7-wiWleCG3<|||
zGwbSH!RjmIk@8xBHNNkjLwa_9nwsAKoJn)~-jwu?EmLXy`|Yc?kIo~_BmgqEOp|vL
zTNoWbJdgQXC)A{3+bwNmkf1d=FP2hM$@%-<*K|u**TcE8O^=)}&`vZ+f1|9=DE_Mb
z{xs8S)<j&hcv~3VHI|fR6S1BsfGxM{spxV)(M5OgyD>!=ZUSk*)F>Hn{?iJYaV)yg
zBZ-xp_2nMxp8l{&&5nlBe6Wa~IgGqMOJ4JV1zlgQAOo37wXTu%?%Oa_G`ny#G&1x>
z2y+%uZ-}L98iz`N@Fh+pdOinZR*x8wSNk&sQs&c?Ty1WUzh*jN)3{|HG1>w42R{wT
z9pV_|ownNBvqy`{A2zNJL8K?LP21m)VwpP&J2bGtOB=?YsDJ5q-fZdBl6T(VDmsp=
z;vAD)?Xr&u=S%tgS@r-LcLNu1BQ#oWpz{Ygs%aSp;-Ww5mf0i)mr88Dm(mumrbU%p
z2>9a%wKohek7r|?H8D4XT#nzf7eR{|P3HrLhV?S5q>SrWtypE)U&w24FY@t%EDXrH
zU#|w<{F#_@TNbeX(D-x}JthWgoM0>V=whGI8HxIid9YUzKkK9+KW09ks+3Y_qj@y+
zpXx~sK5*h1jzws43d#*REZiS^xOw>~nb)D!add_8>VPjXDDX~L`SR~{A-ZwK*v?_y
zG+L@gWkEDhI7f?et$cKsbVI_(&Lxk%JyO@_J7J_OKBla3ER{0rx_bMB--Kyh`#N%p
za#DEmbqwf4k8)Y=UeX2Y8Z()yCs4CC5G!Wwrco0=3WC?;0ZPCO!di&O=0rXA?wo{R
z7<)%5zU)91qvJ!X6oGd<(*&8Dh$WkSyKEDIGwEt1?W>2@fZXttxB5E4w6RX+3%0ev
z1l!ym(a~7>yoq_af!AL?<#tJYwI@F5b~dqAkaJO-8^!m$q|kWtx%OO5@Q0G$f1u%h
z1_a2uPO?BL=-fPze5$|4!JU6p-{aj_z2`x32JTY!EG<@YsMWxF&h1%*$}$8qNXtMW
z39j5>p_(i3?mZEM^32ysvwz0S3#F{6BeBWp$!n$n$x>-<|5gus)IzUZYlMxRMYldW
zWauZ5<1>(4%XB$E_?atq6&Fwl>SGGb7Vwh7I$Yrp=0BNPP+RQq{FWu+u9ZR0o02ab
zC75Pq{JF!yxAIdH>wRqfP~b&vGDh_IwJhfJX;oC0WDubH(tTCKSlq~ZR@?laD4h`%
z!GM-B;8c?6>1=?=tfjx2Tdxupt0csuhn+uP#xz4OC~M?kpry4bH(?pmp9GP5`lFXk
zC%Jsh3o1Z_ZzoWz@TM@eYQLZnu{fA8sdpZGXIO)p$M5)uJ{kr{x#dLs;q5}Fj*IBf
zg?ZX6<6s*58L*^xH#YL<r&z4C`%ZMk&FJ{w9H#^x+$bIw7z_FxmIhQjn;_I_+~RiZ
z9kg+cr(8C?pz{612qd8Eal4N71Le<+G5ckA>=WnF6+S<sREsTF<JqfI(|tBZHaXAK
z6m2jaeb`1!t5zr~=s25FR**S5OBQ+p{jD4(?91Fo_G+u2=*UZsUVz~!i6Th%SR^#b
zM?hoU`op_qhENv8xBR>0iF3bq#?0BG_j|oyZ>gfCc}*(xL^nmP30P=&xs&YD>LZ3`
z?c?;(O_@_a({c&O`&U5FAHJ&pJt#88W4OvLX1GBVnH%2yspUbv?zUQECN9sV)97hq
zjEniy8^K0zm@tW^N(No58rhZ*WW!}67k4vuAsph_IW5YX!u4k0Rhxr0<4{$n_|ofr
zk+E6d2)6W(n7?-gpLW-j$C~-BBb#;@dG4C7<OLz7t;IWp-iMlC+Z3WuD>oq|*H;<x
zXd8JSvt5zUWp!u^K3`Rdwd=Dz80m3jP?Jx>h*)>of9?Hu|2YvNu8K-Z+K5n2R=ZYl
zuoJN>m0x?2|7`l}*5pUAa7BMGgZEvJGnO3W8dt(KDVD8#`3Z#S>rlGwugXk;@UT*0
z*Fw{eu>PriK_@KK>IZSVZ_?XVni}EF3|nx=R;(Sg@V%|x-qhpa$uGGOEvH%UU3fL{
zxJ%GQrqt#aOaG#If9bVeoVCvMFJG7dLCDnYk2Xs7ZO+M@j-ULZbah>7&aWK1G0!r8
zmRLPkAJxAbaTE-4t+B#t<#ul1H2ZgGi2f2Bj)Nhoa%G05^k<=PbRogl4Y`W(sVsw~
zlH0jyrht?svP~fXmJo-c$@0KBz2=Q!G_~*dw1)ULCwLs@S$F60i%puGUm<9QO57a(
zvHn$SUT-m=&Gj^1Vm*1Sn#}qB6CiQ4&&tORqY1;YUj43-<}zDxSgMEkg{46(Semce
zlvzK%r8kMnAnw1f-<J&7$GDK1eJSx%=WgYJegLcKrF|<S?PGlSn^-P{v@5MI<A{Kz
z?8UV4<KfI1_*Z-i$AUgtzuUi`9D`w-Cf~*3@q{|F*um0S=N#sk+C$NQg`ptc5_>tD
za`>mL33zSg&He<XEX1|S9d|uHArNh$3q+FJzZi80@K0f=2qGM!w@1nF$n#m&?g$S3
zkQiD(xh1A>q%nVs7Q$*GmxKJ0r4<lIfU=VadsSLlSq%fqkSF`SpC!D1jv^&z@^V;2
zkbmUsa&;&LN$<i3lJ9X^4MTQQ{ho4uQ~YO?mlJeLE#cUimghDWZ1YlNpO_GWgXu-r
zPmVB~B=05(&V8K_)sksJssX}L__>vsAa+;ke|F!)2K%wMB@!DUfq^@eRW#DL(UJ2W
zdfLGE9~cJMD<b%=!L7>XK~}TFBgeW(;D6Tfn$7>Vpn6MzIRH1}#R>Wl3fEQK-!F5+
zJb2vv5t#CSW)4{ZOK|xlAfso;9F#Tpq`)Jjnpa>*G}0HK!;6r#zfI!(4@%wrlB9gW
zDS)96;MIAiQX|!1NCoq9?KHqHwNE%AQ4r}FoXo#-^g!x_IR5?LZ2z;goCrO<^tz1y
zVep6mmFf{g1D$c^pfCzdjJ|df3m>kkga7;YWl#}%rcl3I$w<RgK6%nI19f23%q0Ut
zp44EF2hUWzZcYn?=g8ncAM<~{2?IVMgu`WIRgT9;=kO0ifC!$JWMZJdGu90hrprM5
zK{qGn47KT)^uK%k--*+K{{f>|>M|5qX;qSH#sW*GDabZohAv4pTi7GTzz$Lsp8x-*
z4U7Z_2s<<Un`kGI=;{CejUna1WAInzlX|J=>i_izp^TDL2A*N;ucje%c$R-+gkH?)
zJ5wE&2_u3CT$r;Hp^#gC%+lHaJ$GV+N{(<rlFIL2Oz@&4*1<YV0iT^XK^AzxW`uEi
z>`X&4FKjzH1;AwDLB@ov22`2+E~x<Xp-mqUB$pBD19~IHk<2vOY1_?Let|MDD5tTT
z6e)hD#}Uls{eNxUm=Qs;AhcO6S1d4J6&PQ__+=A~)f@&W05!>oZQIgc3*m8{K46Jq
zHXtg>@!3E%Y;`YIE*Ra2T~#kymZAn3)+XsAsY8R>6crWE0Z@7rlYd#GJ^r`p|0W|L
zNCQ#gk=cJ`7%yF~{R#m`5)dtk>9&tERROWS->@if*^QS40Vq7Qrv3aw`{j(XyMeg3
z?X(p8!JM*DX^Eu$PbffCFtv&*mg&Q}%KKHCgD3dAS$Y1>^L*fk;W_2=86}t94D=T8
zjkIwjydQqFR_XrFB=RD_5$M@K`CtUq(lG%tU<}MZbo8@Aqx@d>Y2b@Lsoe<9+D)D9
zG>z{yP<r6U>oD4P^M^s2%TIB9f3CRP@0HH9zU@XuaxUEijt|eN($Cu1ClmFN>CLo}
zt1n;97qG<=_kNa)T}+B|0ID|z|H6;n{BQ6z8Y;-0O5;@Q$JeM{qv;ae$&!QpJcbO)
zVG@kfZ}ai!Bqy({Y{6Scs~pewTc3-@Q*)R7DvWt;^PoJoRGzT+rKVLz{R+sg*QxpT
zBwU(rCKp<Q0{2P;NrK!?I<(|t<AKb`NWJwK^AhZr&;L391^Dok=eupYs2<PXIsh~8
z_68GApOO<^GpRvpr(y-ZD3Hqa<8)_I`_C~OR*wcGTpwA<tcp#1rruy+-vU9fb$QLC
zD|W`W^BrnZI{a@&8FB-(hF7ke{^ut&I>A0+B0hQ-w%`KuT+GlD$m@c2Vb(+KEGo$U
zG=xN`PKlrb$m;!I;&kJ(B8{TfU<RFD8@72>p(hZFzRjD};0XK3#<~Ii{dcvhVs_?6
zcX5%ZP1!5xf6JB!7dkbCIyS8V7Z>;%G$GaP&Xa`{{fNT?UMs(z)m9$?5_)vmLY~QH
z4;w@?5`Q|9GzzGRh1~v~ntwY15+BB>9o{RxLn#X%Q{3K&V}{ntto6s@)tmPr@5&~o
zF1NF0cIGvcE#_Hs;F0pdmg7h{O4)>e{qMK}ft?Q{kZP7EWH<g>&W=egq+@UIL)m-5
zq`*@P6!u_>=$EbW0BGgjd{rg}DPJYDq&W~Xv_%TA>XwX&58Ua?%f`Mh@W;V?)dbCN
z+0E}RbN}2Gkd?O2s7}M=5wQ_o(qG9{gj(R}ql`VVf3BzZzuTxaG$A1oZ@PjyE^HN4
zRX&xQe~#dy<CIKw9L5PcVSCg3sr<>%=Knak4Lo>-sNEd@i6o>-CMKH~&0Ru_)RQn=
z9^38h?Gf%t5n3R}o&t}EOgs$%jf&|D04J@WSJgKFqb15n7@JIB4IDu$A3qE{j~Qx*
z75*Yp5euCGoi4}R*h->(&U+rspNSC&An-w?iJq(lB=c3Iy5P5*N*W2sgsyLz9huTP
zfwoFN3=06c7;RT^ro;Xhac?Aa!r^w`iwJ)WS^VSHh=TD9US*(oNf(E@mJ={U2{M}Q
zJ3vOc3kJYvFJ5HraeoAaVJK-y=%AQe7;3{j$lCsjk+fr4<b30Fzm_@$1RPhTFrWg7
z7Yv0$6&9*Z(3cnVDh<{tkbM{<fPiql)~w-RGDoy+&3wAm!=~h|?08-!ZIpx{ZMQ}2
zsyqQ52^DF9;;CY}aalbrNK}w`@5y}N?jrY@Ro$K-K3mwE&`*dk^~G_nJ|25Jo1Gi$
z$WR;ZDsyyfx&FI5s9~W2(NS<OU@2js#V`yhFUOF-+?6=8aF%)iNc%_dU-ljES8==7
z@54^oy;(t*Knfon!zd`&pC81`j4<6)Us>Alc9WeGVR@^jbtfY%0E3ans$@4*;-5^S
z({(=H@`K@;?@O{9Ee7p58#t{5xS<lInvrDBUnCn8pv_)CzpBa_{p~<PXCb^PIH!>+
zaC2_il{(h5!cgMk@acl|-T({QR@;?K=5YUl3EWaiOw?3Ve=lFNsw5vl-Jye}-^la<
zDL?Ct{#a-J9LzXU{_E&pfVEM-)Kp8U`3GS50SpDL8q<!jo`Ac(k_lZlm>uwG5vu<t
zMW6y=v-kOVocI3;5hSR=uFq69{gc5@9=9tuoxAN7Xp6knUCy(mNu<x%!T+RNAI`@%
z{VJ__1(wSg)N@!VgCFWx%{tpFGn%{r)6K)cDb=k=z1*KuPX7Gaq+&%Iz879v&ovwM
z3}YH@PbnQqFfwu9h?j|$wl5ISFbn<g0l10@Ja;zVF0;CifDS8EAhe%~8UK!VzjnhM
zqRa5Hr<9xS@b|ufL;b^#^|p@sC8`pn>ZYj&*hR;YnQSYV_W&P*XDjR|g5(qp?V}D%
zy`9mu1n3y6h=h=$fz2FqO0jRUcHe9{gtgGPD$c+#^oLXweoRj6Gh>=YgKMwXQjhyk
z2T^aa<xu>L#)TbKkjU24TF}_X$34=Io*b+{dOmVqSin!#NuoN9QA&4}k>NWgY(98R
z4ArqdEGArs-`_pjM(@hGKJ;8%d}$|d>;XUt17tdUj%%AkM$)&#t&qELe#DDDgU74x
z)i&=FuU*t;hZmr4ZG#%_%MVdDZtkC+VXG`RwzwiR`3~~U7x#miJ*%|#z-e%87ao4%
z1Tj+~*p#SNg~0tvv?PLez63tiGnJaqpLI*@;Z)l9a$0`U4_rHy&0{xXXpU!vEhqT;
zzkCB8a2~5gN))u^VnR4u>hXoegY?k++xas<uL*nC%AfzB#e|Z!41~6;PSQAZU$(w`
z9vDvmh=ih|TWTYPs9)9%MI_C5-HTupDz~PA+nm$SuW@5uYHz@Sbmr`HUO)u0t)P!@
zga0T~#W#~Ljq;7ETDv4(yM3f>s?w0V_3`@m<UZn!*16_uXZI}(0Gp!=Gj4YLV(fp^
zG*hn2^6giSSm5_la#O6W`fm4xg2_jcWFju>=>l1H6(rf*NMC#V@&oUal@60V^Sklh
z?B-N<6J}bVB?sEW{#-@&Mgl)6=PV-vK=rcr=AU?>5lDr2XlGz0!*5e+fe&a1N562}
zd~hiN!lG&!F1o+97Jm6%z+1|TPzfKSc2i{QdT*g7ceciCRn#MWLEqF@HiO@VJ@Ee8
z(>LTnuqW3Spv!cTKEs%_ms=Mq4L1knOwotYb7T$FUwwRepU9vfK#+VoJ8yR~k0}O3
zLm(zW&p<#sU$ETQQe%E7b($I(QT*^dmiqtU=_|vc`o3_7&Y`5cr9<f)QbGizkrWUR
z=^A?I?iA?|q(QnnC8fK&Tk;-$|9kIqKJtaxXP>>-dTXh~zI=|fqu%5Z=`yV0N`zI~
zQAR&>>fKrKqyho}RSGA1Gl`v>3GTiq%{mB~%#TLJ7}v-*xMyxgm=hC~(4Xm_*WD#^
zVX(n$YtKJQB-}u92bd=(R3L&%e3^MY1~Ue1aLNT!p&q9Xp9FkmqwEUece}uF`*2Ns
zqxl>^1a#&#RHpMlv>V<<r|0wJHUYC{;Aei+VhvV7g8#S%a2zhi;E3<7t$<GC18%TU
zdsBEoBMuG@9Mb|S_rT#$C#e->nBa{zCzLy@|M|$)C%);Vb%D9>1t7}el6rIM2c=0O
z8KN8%2|&2fQ^5JHVlLb_M#c6_-qn)Ac7*e~+M|!cwY~wp7OBHm3(>^%km+JIDCZgb
z`4k(=C*+mkb&6v=cShw}HXIs{-718i@lC&!I)rfy%T%%E>lFF-4()%GfopT-na;P>
zHcRt0*lTbD=YVRVpS^BzeFPg#f<)vrAjPQJ2y0Jj1=z>iPeCC@nDmJVu5x5iTl28h
zRbo2Qhr}-@LG3;7VE1@88X?-p42zl6a{rc)Ly?acV!kJYT@%DnW20bG>M@R{hDQfn
z0TGL$Ko^rhDJ=X39cT5+$a;zl1HU_A2%CG$0jYlX*M9hzKnlMcUo-Tcu9r^sGZ|dM
z2k&QP@yF^<sDyl^gh6bis!%IH9y@E(^F;Y3{vM3ZGDwTg&ij`}gz<d}HNXzxvVBHH
z=gOZ@v7y1%u8<UY5k!5k4}wBywpx(}PJwG`sJOg!Kfx1!%nqLB6xb_5alRg_k^IZM
z3Hk{-3DACI!v0JDK(3ul;^SzhZ76-#t`vEedK&=ek1Y7c@Epg+)Z$cMhI=q<1djPi
z8<9sOx{x&a6l8jS`A~5zky<euq}TB|x)V##@AC)4-M4GDO!I83G+fQD?N>8~KAN8r
z$XoV){xH2gT{}+0A&H28TCwW_kI>OVZMN6ef~j1jkuy8OOysTy1UmxV;9iT6FMHox
zzvJOT!6A*oTtzsupEFBtXvmB9RHiy>hHZZF85wd!M%wHHQfV)2jM9wI&k&-bMb1MO
z-49BS?>3-v7$y188RN&x%GI^)`PR2DkbytQz~DiahV(Ywag@4Gf$JTDs6YNz>!=v&
zjW?>rE2*rU7Z5?F4SwC|0jM8qK0QeAP-_$Ds5^F<`~K-9BhurnU(F#;dAUIj>0nc6
zNQA7=v3O=D(?twwgywUq#z)EL-ifFl@-3n*ydgexJ_Y_T)<L#G`ek(}vI<gg4|CGl
zL0MB-yQHizQy1Ge8Woj0sX+Uj$+%TMQPCw_6n5QeyQVdzj%%vN-FH!oknC%}nV$S)
zgMASeYJ+B83MBGk@yE`1V*m$^ifJE$k;7M`{aP<|^G629Wr%tRz3Hf<xEqlqmw7OJ
z+A`D=KwY4rqSijmG17a!jegdSNlf>m@qa!I78kfNmE>;D3X#Ig?)F$msv;gm?FA7A
z7(k8FaLAU65sAKR`#%b1Tma%qL5I`>_#R(AVmiR1qKbdqc)%es2Wdx6J2izPyE_bY
zq4_{9hjWMV@AS{xQPga_)ipGme)0^7OJDDocw>kYEr=Pc6ShN4sZ+wBV}dM?cuay*
zu(*MnAs_J7-j)xzoP>Z6ME#PL8ml*2k%hZL8&jvS3g@!qO&1WMMv29C9MZETVf3E@
zDjI}Nj!sq{&U}erMnnsD<1PnEa8Ga*L9XXFMk>gxKk&dH8DuJZFwpLoOqERftcv~m
zTX1uhk^vO!6kvDZ`f^3?J*XB`?9RMTZQ7VN7sVSmtEi@hBuV;N+iAbM^vA;Bm6$+@
zUMhvm?0?|N*R!}f6n$MhGf=N{S2h!1hcuZI6_;d)7|?O-Q?%OQCmga2(=7G`AHs`O
zNYzRf1l1_;(r<@s<8#_&Up!vK%1!iz<O4*+)ZAS7Gw2)1Z=$C!AE^1M75yZi&(2RJ
z7jTUJAdJ%gC+HVNtS^^Zcd$*(S^k347a(V6d)aB5=7DV7gnA<@GE=_-Y&-&rm-h6I
z00(8md_3YRJRq74QHRSt$JdoG`^gp+?X#uM`~OxQ*q^+iNR*W)Pp*_U>JQthAJC8>
zXb}N1)MKx}^>?|u9vH-foajQ2M#h7Z1Q<d|_H4V^esLc>)&hDs!rHV3#cx;r9bLLi
zK;go-P~%1I8~@JFDS_Ox|Gdr~+SLxDeI9ZhQNFy_-a50OzC?@;x<DKB8e1QIs*Zkx
zJwD_mz_i-Qy*SzsE#-c@8F5LL186}&OgAAXbt}hcNYDJ%Z)N9wO;@!8PFmiy-#-3E
z;KY){mE@3=$BgR2py8SHt!>dlySKwa#hW*4eGz9<^Wm<#MkEtSBXo+Uj{ymJ(e#^F
zonE0hoG*(v)?J9~M}vcnT5;O*2IVh#(YFc<Gl@{6t#gbaC~;k62TtKGYL?ThqEnzb
z6tq$^hGw;YjPxZ^Fs2W1vH$)KH}JMygQ^PDNu$P!9zz7TMj1dRivC8Pj7D5Cuy$hd
zo+d4;Pzu@3P^!V}u(A)m8UNvlsWFBud->Co!R`&l&4}dp3TzST)8-UWk6MhYEM@I|
zNqIjzYdgvl!L_=-M4enBv8!!66bza4p?_Xy;~B`ClUchtz}iM%uZ<i<3mOVv#%{*M
zP~!aEv_K`e>$_l7m+T{JTzVe%{v#?K|6irR55IWh*+Uv9>JZ(jHeJs9?*|uufQN7*
zqa@nWE@k%B$cy4amPZ=vlT`ybu8}Hw=;_17sBqo1UBMSB!T~nC|JG3q2VyVnCKLP4
zm;Jqpn3uC}=QVTqi5C=p0RN1KS_F2|-_`C%(D6~37ex{=<o;;3(!}>FqlZ<~N0J4d
zPR0@iL!6TIP|86T6^oP2Gn9m*Z2chm;)ML29NYl9e3G1lf+RlmyW6sAKP|Y&ydtD!
zTqqXTYt#*fUJ{wiiPY7g8Cf?B$1YC@A{P;kpu}e+Wt2N4TvgIF_dw5cV|u;c*Y8=t
zaV`-wDq^Uohp<@&W;PA$dQKd?9i+I)=V4JS+n@{F)F*AAfm)}4`&+;66~sDr+b{A2
zv^l~#z9<M7GRrM7g<uTBQ{lGZWuQz3whlyI$_>miPb7qw;N$S>_M=(HwaWPbSS6)m
zj6M^D&XPgMG!np#xN+kpBECZ{jt~Gh$ess>&QE~RuL?=@8;gM(8KNbe@#-g#<djnn
zvf>;Rq(}INP*H))Xa}f@38$xM+k%^oIxux4#rNoTy6Ez%{T!Boev{~<Z!vf1+p{#t
zX&MOQcziRqUVD)LLJ^AU_@{o4?gB+Ma)>AC{i)1e`$l$N=aqyUn)Mp9<eXA7-7V$$
z-si}syp4)SK+zolLZqi>owB4R>_oFtJny%&eW}oWJpq`of|bSwM^263B(5|tsqV5H
z9vhAD@qa9HfE4T=A&Hd*UxnkZ2Q}i2%=hOGZ12@L|Llm|*<5<}HE;jKjArg=@u&LV
z2976ajBljZf}mL?41{k&;G2;wg3~~ouc>utt%(@5=k`#-mw^VpUhFUbIUFQrELb&H
zwxR1x1)}<8WsJKLjOTlkg@TkRk1DTCN<)1aP5$a|r>AbHX|$mImL%Bc=KdT@0-i=%
z26Iqal1=5z&+F{i=>2zvFSpWBt>9%TQB;A~J8Mg}xn8YZiqrxh+LS9YTMfw(_`aDu
z{Uf7Y&3xL+Tx?z)m!SG?Rgy&SAHYT<NdCA^Tyef}b98qNE%4&JOne|CA9cPiHhdh6
zm5-5B7C8&R1yeEsdnE@I&U<6AiHQW0ne@YKFrenID6+d>a1DaUKmb@KjBAL%G(y`?
z8#O*45{Wk)!dYLmK5hi~0lNXN@C1kHkL1M?CDBg&Ga8D|Q0yVv4ced*;Z`M#AAT7T
z2L-CS=8NN0THwQ!pD;c=JnSs(ua)NSWu94S(kF!E{qKCs#!wDklJFGBLD5uq<2f0S
z@J3cJi_1h#_QwC@AYs>bu?!!9v5p`kSY00B?;SH1ffJo|%1?>QbY#>?E5yV!7LY5U
z4vofZ^-qJGeNm-k!GQyG?#`j)XJ7jV2JAOcr#;uRn8{H1<SI(X1dYjv$KRcpbu7ko
z<5eMl?#6foe5VU4r~aL{%>JQq?PsW_pxeqw9O65<C)9b<=7gp$E2NKpT-c`<UZ>W-
z!RIjR?r$Dz9=+$`h7X;IXY`%{D~73fTie5{s#UI1)OR?mt%#PG<Lz$;b}UXuUmv^C
zk6ih@TR|;(2Otb|cA-xyt?bW#=Sjdo><)|phm~@x8#NtLzb6HGc)DqGoi6K7o73e*
z<iLVYaDD`2uSfV<FZc?>es>gw@Mc-lahw$CsQ4bI565_A?6RQp1^&b6$}`6X5u4L8
zl7VH^rJLe}ShVu-Tc+sjPCgMlD7Nm*e=gkJjStZi2BebsW{Hbfmw|keNUY-b0S6c>
zf3;3Xa72=x{_@)%VcT3}N?l;W(E1=O_zbPq*D?da^k|7W^XPSvl>zQNV~qEbn*n6G
znXmhUfCj(9OeDMSE%H3ljY>|t?Z$m)8SZx4HHlBXSLfAhgVwIxt-7|y(*LI`;4ug?
z+XzuZtglnCUXKz!w!1+Pe?Ohld>TOejA>y1@?pkAw>Ky|OZDP}7$b(91gc(Rh>fzD
zsIm>Oiw0#^l##*j$iP<6H0RYCVe>Aycqar?9co3y$13oMTNuUmJm@#coe5I4+4Vtc
zhh33@kDVH!sCBmWC%Y&a7;AFK*XCsy2N-=pEMrgP5&qVJk$>xsZgwa-S3T(w?*G;9
zxeCOsd0GbwV?Sc@f4FA<79m20PDiqfu<-qd9q=<pb}|JIPkL-wF@<Y4zWeS-8{gm7
z0z3&9A_oWjgY4NyT4{dudX&?aSj_DH*_Hoak_2zG0aMUMX$iEA);Y**Xo!Qm>S##d
zdt_mOuZ%%J!ro+{a4KT)<u-+II-WUq`8dzpX`=rCT^2@ooCf;hD|np{2r(Xq`Aey1
z4%FgZbI@5sdl=}fLc8Dr0hVWx9oo2Vl){H7wd#l4{!#G*EO)<A%w&8W!=}81^t2mg
z6Q#}YLY9Tqw3On1NU`q(Eo?^;K(0mxox5~jmD9KKznq%CaSO)=s6)f)e`X@;(hub1
zk(_jY#^aY?%$NU03lZU$Z?2fdBIA2+FkO`#*s$HZjaoXhhO_D$y@NiD^f{wa?DRYR
z2l~ja(s8|nHYqGEJB3SC<26?H8rPu^*1U!<Pi?afkdvNr@AFV~RoZ}+@|XMjKO)Jl
z64xkFf|y{ycANrd8XpIUkbBt>c6{&zVHVU@JkG=X*30yOb;QA}==x}BCnOMnY8o~*
z==0a#(jyGyz6Z#iI6E5p6B2Q6&u>_r?)of<)Cm<rh=xp)F<3F+0p@|YxHMV-3{Kz~
zz8rBS(9ou?v02hZ<#*pHt=mjg7Ed%>^f-|T+{g=hU$R&s@v}HsCiVL0dcn4>@Ub%f
zKhn!C8`Ws`GdMLlc_%^_fNcp3h-<VR@mRj#k)d)Wi`n8>DMgSa5HdFWlJAiKO@#8|
z{|kYx2_6~7s1n!zY5(;vd;KvE#+C)&0rY<QDnGxTw6-|xp3?l%ENG;!k&9upenp@C
z<<&1;B`b@AV%@8vukyvTiI?ziUf#{DBy8p3*T!oK9q4{Hv!L^O9=WLJdtguk1M7Bq
zOuU-1T)M6^MaLN6qtSxL!6uFq(U4v<mLohWuXgVVR{Pn=6((HcpeWq)QzX!BA)E3G
zkaNaF^*)1kDuLV`FrB1b6^h&&@4T1;rB)?z+l5^KwP=;pOs4wHT!U5eZ<t3;$16<e
zgd~p<{tGpq!Wlt?BOS2Mp<MwX<c!KV?V6Q%Q|o~~fFEVi-o&8VB6a2@|6akN8-Fu_
zGn;%NmqX`dBgtZwvBGSK@Vkgx)gJ)kuKNAk%yya5a=Ni04_hwzOKGb7#?Qz+iTI$8
z1;!Nb*wlZ0)M42xt}+lvWYvmOoP6{3zji0Ey>7*mwcu*a=Wf!n4!ZG}hld?}O%>NH
zdT%yb+fwD+r8%GzOZSQ~(iI~BK&a$bTD=$mG|)}3dpd-(q>k&jRJSIs@A>wf+xft2
zv$Qy{+BRnlqL)go#q#@)uj2D!<8Whf9-^Ws#TgqGY6pHE37h`jHWesZHjSJVy7Zy+
zQkRXUqzL`1`{O^VE<q4JCSUl9vR0a4qz6dD1#FO}1#y`7iICEqq?0^ZFoOhpdZaqH
zQjwu@5uXjcMzMNgQR6btkokAzU|tJUX>vI4i`UvF`>7Y3zv7P{`;Yaj^jdaYi&6eE
z6e;sfUSUqPF!?A@Msw&lrX_CBt*1BlzYbB%fpdWZLeX>A(hjUH=x#TS{7Ec_)E#E*
zq{}Y_E}o>u$bCVFHQEi^0)Aivy^&pwQ%Eh45RHc-<;Ol9%jgPW2P52L33M876h&4!
z9HW14vM6I452U#X2fFbO$N*TA?I36r3vhJNB2Tv)=lSk@%>eFLCBtrS#nX*B(>{nx
zt4~8}C(7`T&L(6aHN~MD2KRy-)uTApJNR`7*1Y%>j8OHyA##0N6BM>x7P-;o@@c&=
zm77k3SjYWPR0zh3E7BZJ_$eP(h-l;7vZAShl$Y8H?PDSR<#E{4+dE>5+Wi*3Akm`#
zHOU9&HPD=$LR1k}qsb^GZ`xrT5Q%zV6<jhr7$^AkGK0@L6_69uD?nqg<lPNJTtkI(
zjLWC>pZAN)7bV@gdchMv&B+FclW2bJvD0(&N-WtI_uZ$>-@d@>sEE|mqzt@CvZ0ZA
zGWY71E5Fk>%a)lG3pit${}%KEE<dv-G4e7}FO5J4$J{D}d=A^DBff?^AUj);Db!vE
zvT;nt?EAhwKPE-?u6-rI5hC(}hy14!F`CtF^=$CGT?>Bmi6B%&-@n#&PEuCSE#JxJ
zudeQaD6i@TNMpw1$ID^ZO$3h<keDb?l3kuv{dIZqQC_CpI+e#My^J-vOougmrX(r)
z%77c-&<518b({H`T#iU*D3$DGcpz^g$oM}PcwK1>2&caGFQcOOlD$maCS_FBapd^l
z|Dpneu~bc2O~>G0IVdPtv9QnA!~`TDe!uV0b31O>(OWMQwrT6qC}k3091+i2yf>A_
zB(Oz@laXcdPPsVi%rP(PviG*1JH_-Bkb)HfBh8ePU01xcs-`~AwaOGN<}KTa&ez2|
z4gXV9lvjIcKMU(oCnvi%V<K^|y@Xto4j1)wn!nck(QA}mp1GGTd-A#%=5Nw7E@@d;
zU6;LQ%*H~adcMAC8{p^tFqG0%o@j&6C?{2;_kYJh;ltDWDOvttb0)>qvJIAfa}odj
z96(nUmV}&_q+qAMVN5X~D9P!|Y55|u=zrJlHu^PXj`i#8d_mbb9dGujhChnDd8w)C
zjbf9+OYa;4vifzGDpFk@2i9Mxjy*n_;Qe=v|GiXR+SMvYJFYK^TyVn82{}4Ec+_5k
zM<p&UqMWnkAug@N{o_l#i_`vJ`L7Sphb<_ci93nMO`nUH;1NSOgy6@ePg?vtj7;=Q
z`aT?<<^5Tde`9`}?tVNh`1<Y6pUpIR#xr_*yc>fKC$5$omegHTG<w7wqK*3p!&{@@
zb8)qhbl0<m!<M%5q$}^c>$;4Z>EA_t3BkPQj;Exjq)f<Q$dhh?H^l*eS-D1Zsg0r6
zZDPxF$Gv8qfj*h&S10a>cGorD)&Cxqd0t3Q2ylAN12>uV%+<e!&{x*#Ck9c$+11fY
z(W6%FR#~RJkUX_=EDG{97b#pB4(%pj+V7(?k*Kie?WqINlFs%JOZ%<7Oz6u9;tA#a
zg^FKYC63P{l%`B`ZFDP5GmyDSn95E{>Qw0vY-HM2Qe1KLeccO>4ENp4QPO+T0O5a6
zV7@PFQP@U*?^P41|8(gcW#zA~V7Hj;3jD)`Gg2ss2a>?XOrRV-v~?CsceK9u_c{tT
zq{L#XvYht^0gRK_F;w9-<8mNU@!Oedeu+h+AwD6unLRZ#dImNF8UITCQ<m2ktY6Ys
zNLlN=pb5wVl*1BmDlN=6KHUJz_VUylf)S(Gq3sjcRJDDw5f!ms?w`J0?cXd^i?0AH
zu?qJWw1<C2+d(Ow)fTDgb|vbN+Lrq@G@*xG`QuMtWYj@mOt6XL&T!3L5fk@rtVG#2
zGdEpoaiVg#a$meLm^bJvYh=z&zrl39{wuAjZvc(Uz=gAt5Bz^G55#f|6je&{_RB1x
z8wCozYmF*ANm1zGaQJ_JZEyLS1&9`o4JLkj<&>)Pq91eTnI{r4|Ak2XR0slM3g$=j
zh0Nu>;!5lf7`M#yA4Hmwn~@c?5wJC&{iMaDGB?>vY>(27UVwMe1#ns8Q6`=&13&8J
z$*SjtnOFt0D6;8QwCnPHwRokW4{w{7?D4mqckd!@LIuiM-ub{$_^>ylaCZHX3#@Xs
zKR8u<tWojy<k4a}^s2GMne_urRd$1dr?`k+*3>Iw`am!s7|=|UVwz|j<RRGvn9`$S
z8N-G+rva(PIsZXS!#u4J+eKhar$GT#?83FxL8YXPx_bZzZf_Pc2m}bvwzwRndYr+A
z!>OKfaJ)^KZ3iBIxEgNdFjXHeT)w<5D)8#8Zk<hfx(3IUbfDntns096!=k4<$Ey1S
zPbQX0vmzbyJl6Yz<jJq|L2pVH8va%}j_5{X9hJ&I-fdaB%ZMfad27zL)ecvjXYO}h
zwE3~%%P{T9#ct@UTFV(5D{{k?#%fCw4OSvUQn8E8j5m26z;w`JnOZ=n2S^ZpXmIp$
z<0twJv5i5PW76;F#A3f2KQdm|^_G$nB}RERy=-gjBIN#TD?;0)Ao_*Qx>g7N=T;UI
zO#>vmwFvK3Ane2T{^q1^qc8fCu5PO8VC2JQ4o-WZ`_;Y<9nD>HTwEL*H~08{SmZw%
z4fwP5|9!F(q_f35OIt%pq3xxWia!c(VM!t!5zf?MYa4+WN9l8phwqf%|7MJ5Bzga^
zCI4ZU|AJ1Y&8YtAa$%*GQA&Z(Lcr@dZEKf+HQLR(MWKmpu43Gq)rKtt+xz_RH{VAM
zeISFzX3@0m{!)!>BDaZm`mOxm+uNMu^Qh~C?q1!h46p4{9V>v_cbNnMVv)v;l&ahO
zKk#6Y+n;%P+E?|dNwak0EE?C&%R}o(yM2eeFNe&pAwv10NQ2xsx;?=HssmE9)!@b~
zcTu0GW{jD8pp&&G<Fl!-ZFOE^QU91H(Sy!059{~O!J%cirkuAjG<=*d({I^cruu#v
z(gKin)4Eqbi*Lzyb5xpa{{kDBS^+H3mz2S;9Fl9iI+i`nK|?e6_R%<&2NJM&^#j*I
z%W1TY7S^PjhcI-?w~d(9DSW|h`MuKVyH~A6tSIl72qj9PZW;81%arr|Ht+QL=|&y3
zV!dB+Q&H@97RbGlMaWi!&F7?ss)rtOquSO#cz;U_4Dh`hS1Z;meS^(|ANVu(+goAb
zh3ms5lS=2Wx))gNIU++;+y8rETwqT{gR9wk-RTN9grUK~Dgc7e>5HPkn3iJ}zbo=K
z0?ZVm9#`UqHQ~ve+Cv<rB?nn$)7469R%0c;Q&Hs`px~So<W<S(v-d*+X~yqvC~6Yl
zYRyIHy!{p^7wZiuOXnb4?3(Q6%VjxZx&JLlmIaU9`KG*<Y>W5N{ItIDX%ERqeV(`H
zrDAfVFppKpJoiF2Q;*4O<z4<KhhHe9K~5(&OPfot^Q-O<F7HQ0fBv4}`+{MbH4B#)
zGgXvmO<eX~mS+`i!}qy=oNl_+)`JAD5_>|lYjo=6_(<VZ$<+i~O%{b7>Bg<wJZ*t3
zvI2I<Y@3aLCUo~1e*fatcg3sVNf@lIJ}K=V5Oh3cW~8MhYVp)`VLjd#e)xg|)Tnqf
z#)4%CR8`3xFTJ2(C^$hM4B{b=iJh*nNfSUyO<oF3Sc}~-6MOyUON1%RKCdWe>FXeB
zI9jMXT~9O*TvT~}Rj!7l!{VH)Y^(>g%!-)>x1DL$MI#m^fw`wufOP{)vK`&wje2-!
zC8>L0!JyqDQe+@^hh@N+)>zqs-Gz7#Ke4Mt)6^7W`KgQ4D2CYE-mG#~{!sL_H=p&0
z*WB`nw=G(CcrwFj1*M6lf@nKO4}{&NeE!7$(@QcKS()VSdqZ^{3~#lI_UM4+<%ngy
z9$C&#iR4`{Y9YSkKzR{l6btP)8cD+lM%t+)grV(<$@ZZ*8b9u0#N>r-hh=o$x4K`X
zuDYXMN)V)Efw$Y6cf*|<^C~L{tG9Y{&blI1QW5oeO0;J1NV`AD$_6PKZv87@Q{0=d
zOGpKx3HxK|eu9X0%uJ1&Usewa#!o~pnkhPl8fhxG`Mx325N8<YXvTc8;<K~fCx~7X
zMH8_0<5;%x9(2!dYW-vyq#2qXHndVqVygsFJ+y~EQ~QVUP__*NZ+Nw13KWD6k(#eG
zNt$J!I~8zeHUJyZOHwx2^nF;!XdI0){~{<=C$k}o{`TYx5Jp(r$buVUgy<vS;~TNZ
z=JBl?^<c7Ss<h+tY}LtbDCUnMFa3pD=icLY7=%T`@q8*Y2SgnDwKc-E3ljFP;NCb{
zC0j^&T-yaC!ZE=*esGxY6qPP~^BVjhoR+b62W!jqnK3>1yXVqPH>3O$Rhp<o-?dmj
zV$mk_NWZD{2hYH(Z=h3wyabBvR<}_b;W+zFU#3XYi0i${Ipn?607cM-sGh)0vGaj-
z=tr8m6Gi7HEt}=fmW>(m^1F$X<B1x1?g~LU-M|nClOL0PHn>M7t969(J4P~uPFkjL
zAar<RTA>n3wW-EhEAwCPqUXZce^Bh69ihEibTec#C~^Eja`4;v#Nfuy3QiyEWa=-;
zzXR8w0$$|Pi|f@c{!PwxzNw1-KN9tbHwqN4LVkVJATU7IHHozhx?Ym8a+P*psZeBA
zBJ~h`)W2@|g?&o^5&>CENUt~A&)B#w!aag_(u8fVHumdls3vlQ8CbyR`U#BLiwqh}
zwc%_8Wo+0y3GMqaoG4>BYQGzsBQg-H5R=+n_jpesmLRN@dSvIr>_P0gmvD%wMKv`w
zYpp?!B}Fpb9k}!`_Ba|&hL5^Vix(Sg&Yy~gGsRbcR`$p@s2P9z#_eTOg(BO1Yw&1o
zE*K`|`SX{FEe`Hh*39U{p5BYN20D8txpCGTV({B5xP`~9N{NJT5?A4~lg(m_V(&T4
z!E$RC1*A)!<l)oxU`o>3oPLlP1Yv<|b*|R=L~Mr_MGi#WFXq{uWW7kgA-42%IR1`3
z+gPfO^w%408n9lD7xaj`llvPSB{lv-N44d2saKA0Qtg)_J(_!emzzTUD1=j}+aSKa
z7T7_5%j8YH;p45zr(d=HyYTzs#v;FuQZS!)UW<JLZ>%4GMTmZ0yWD`cjH;Kz!s;i)
zF|q7RpAm2UkQVM@^v!lO)%vaa9&A({YV>rWRbEK|&uHMeiTi^G8uRxA4vx!8W19fS
zB;z{s&xlJbZu&y4{Z5wacCCCC(kjY0CWuE`kZq-UE;4x6zeblI*sq^G_PtT^a2`)*
zPmRl39{0@~?if>P1S``KNc~y`ZCX)Zg-(L#+jZg`R<p<sEa!riBT0^?H*<P#fr|3F
zXPu#JIOPX3u}41k-AX>sER_i0@l}~LwTu&pm8`XxoK5;R_f;elkmwfifXmxWnB#H5
z$xdsM$RujHMN?Ml<?Zp;umA6%Act^w7ODDcXx6<FnZ(qs{|CmlkIFKJr1(Ado-MDm
zr;cu(<-(W7wwapTzNlq%C3bd`i;b7!7|O*1q9TSM7_UJ|TJYPDxti~sk3Z+$U;l1R
z7j6gxNuxDCZ6))04Sf96<QROlpRy?@#0?00;+n712M6rep8m>4Ri7cC2&k-L)QIZi
zIuqynZ`z|+wA*E{KT$)1f{G$8|IAkM=@H;^h43FOA7O6yUL7>3!}qqINq?07>N;F|
z#0SB}af1U(YdC4pLz)7%r?q0qVvr`b|7@`yJ~lWa*?e;r3Pt3J(LLKyE13Vi(YMgn
z@>t8_<+&9?ok>Vzs+7+X^959K+WSYxCPP}*(|lc8OCwM{m@}EZPFyL|#!<7hx)yD?
z<lX)CF?72|Yh)Q2o?q7D*yR4E?gRSCYYilSs=0zky8FvoB6ZcgvT56-Ud8-aW%Wi}
zBV;b4st^r%GdEyB!newz_n_N~)&ybjbXZ}4kthjkTv6LQ1qp9MY6)=)Z0$=xm{JQ_
zMZjg0t_RU-;E%;JwTPDS=65rhAYN)0@5YFGo&_R^-5oT3Eq5x+vYwGZdwz$MBpWtZ
z&jH#>fs|HpnBiGaze7tPQ7_RQULT<2IKVjSI{^v~J0DV*BJ3V~LzPoBC?uhr71@O@
zk7QBEnwue*#Q1BWJ|o{o$+;a1n=F6NIE!a*AiC$}4!7U|6=Ke+G<^ZPX|$LWTU4jH
z7855n--4;*e2KEp2i~;HGYiBz4}#E-wPcH(t~PRImldK(7TPk8grM!H7o)9nVj0)z
zC|Cj+A@71P?PKxb-gTd5h(;1sanhf2r@A<j34=OaDKl1G;zuCrh#*ORw|`nTOY1pY
zRUa}3j+}@deT}K?G;n<3ERbKrOLlihJ>EqUK)D+Y#gnh$R^Z`*IXV3$1gw!vAXpG2
zMAPVrQ|!%v3<Pn(-_=P{S8?>m4yM{*_m>(O7KCw1;1yLSMcPW|VNco%<4?sfw8Q#?
z9}rc{*H=5PD?l{cGP*r$$D-eMo)D70do_WtargW{+F8N^q#-fX!$?NE>LVn5bgHR?
z#ph{i#j?)Dxz0o5&V3g;I%TaIjTtOUTQSc*I6kLY%5yb?+#2WN9aR78sqHdJ?QVV)
zB_8d&;WDD_vT;fhfW7<INzpCFupKSq8o?Wf*<siX3RFi4*!#uG2|uUKOwLG|o=I1i
z`yVNR@!JBd&%ZhJ-y&-FPrnsc#cckNDY_H#=t4Pr(z!F|^Ry1G>hhov40=oXsDgzh
zaxJZfQ-rOI_&Da{GNN;a%~R_#{7O&G+rUe9!KVEgXPFS$A*!9@BYxFLTBVw~137Sm
zW2*E@6t(L_9vL7lBW%;-uUxab+l}9WU3rk~>8TO(;)wTsvy%D3%BY8F<Ba~OWxR>G
zTQ@+BvYx6B<;4}iLEQ{?Mk3!zBeKkQO3$puFPAC)sbu5(ntVllGxTiT09LoQ7`Sj}
zv@}L`CuNxTi3=Nq9Uw;2%ccZD*l@TZ^93*ZgydX75OkSk;Vd9$1fN;82}Ex_&i-q{
znZAP63)MS{!a#eUuVql22%UX;ro^PpHw84+zM?Lo=F5MbEc?Z+VRtyRcoR-)(eBZp
z?pCx%TS&?lEnkd7TWQy_x}^uGpw0Gu^D{*xKr~zO(DoOV{E>>74R-98Gjy{Hj!4Iz
zje)yT!?tCh)-eUt_^rI}x6h`u40S#QP68xG$r#n5op<}|&Xre!HE#OCb;w)d3GQG-
z-0B)9Ds;0I&MO4YcL<B+r)M__jG)&D8tBw&-LQgGP!J#G5p}az3g1dsopJTXcocme
z9u6}OOJWZat~vwid=oXqe;<jzh<@{AH==fF%v(y_d{FL5j~pSB=?GQ`hLVC9h)0=+
zAH9)Q*CSwL@5mcm(ql((IixAG$Y@#MC3dd9u28RH)&{mBNKYoc6T|5xhcU;92l=@q
zR%4644Laq;7{T^>y+!w6%dO4YOI*SY8ju_gtqzmwi*7myYGtAZ-NFzLNawvRZzIG~
zOzfV274xK5v6%7Yzy%0u9&RQUZ$AecXcF~BFT5NKmliOpf<f*?_MNXE8p15>NWJB<
z<M_K66r+1dCh8U|s3XF*;WoYdq5zIQVs4?%w(ib7W^hPbB<pl;Z_rRlUY?t{W{7MI
zg0>gvUZ0*HTpfOnUZaKjO;z(rpbSM~(2e&arHF>?u?*-P-?v#KTUM&?l|k@eVb|m8
zXc?e=23d685&i@TuoLYq7*v+jsi(La%zQAuK3HJU1zrf4SYxeMY5e-|(>nxd+&_4)
z;d@<J-KwYvVY8LatmcJyHqX<4zL#}>&SLj|3z9z5MaT+9SH(5ga9;He*eA@R#aWN8
zYc4d)M}-q7fS|Wa=0`l~H`Sw)nQw(YZ$#|X3b4V`w4LeQ-__ELRD$4%AJsFmz9N#N
zt@+_9OG`?WJx|1J*MG9i&SW>(6rhkpAXzFXXQdbrF}Qzl^!KMzw-K>jEYyT!(ujkn
zmQ+VDlGlmOVvmO)@MELWSc$3+<try__N?A>(11~gA9eZPcg}Tf9atG+R3@0$;*)+@
zGjU$INKx$Gc<jX+2Q7OSDX;4ET^!{<Sb}o>(&Qq(<!qnFK?CPLSDY{ZRQl13#U6jp
zH7V@8ze(wUr?FhZB*p(v$*{u6*9#ysuDf3;&&Df@?LmI}v0y>M+LZcpx~N8Oy>)3i
z4|i<qE09KCS-+ZFJ;4qvU5c~f)Sgke+9&KEV`;!mF3;fJWo8KNKzi<YwXQ<_hXMqj
z<y#n}l1msZ{s4kLM`JwD;b)!@@2e+fsc$}_icnnbPZE}Qcxxe7704mOQR4J=L%HxU
z6hpSNs=B*a&ThMRRf}ZD`hAbBkkSl7@OEL2*$VlC96752gWef&{Nf>e7I=m$i5?<M
zS;_YNL~Ca4f*s^3qh@;?A%{#QZUj)mWaj^u1@KNdPt`P}&A$jQI-1z6_|T%!n@TeG
ztzRYAyBv-Xm#p_+<<ZFlxZ$Ngu=+7R)RoZpIdgg?%V)uj5@vH}^Cx?JZx%0r^4iH<
zh1PMbd}aMoQc+&M9Lj@2M^nho$1&Y2%0EI{^UXBag`x`SguOxtd@#Ey{^J`k6u8#0
zV07N&`7T4h(Qd%twvQ;{^y}u2gB9(0UmlNx9b4V-yrk>R=uD@Di@THc28`O(N2H{r
z)Gz*26yGS^8Md6E*(XER9D&QRwx_MUAW^&<@?&vg9)rP5Wc2eN6DruI@fw<7DS8e`
z%gU;<bW(RHB@MQ&vgqPWEPrtorF)nH*Msr(O0{LYqRyIa3AL4~`o{SYa9BmLH*ZRF
zxH0R2P16OBScn6HCQw9;EY_wNG~nsDG|1s`xZ_rQ^j5o?d5a_Cf~AEJ;jtm2G8A?X
z)01Acvdn74JH!VE>gn)wZ&uM!N0|GCGaje+Z3Ah+00Oij$NUQ_!P0m3hiyl+VA7<p
z(jex#E85u-xsixUU0#7j2oiu=0AhH{j6o7<$C+P+q>3SYO=V{$z+HWIh%jIM@hhSk
zo8|AM%b5lxD-<En#No$=LAo%W+;y3%iIKrLNTJ*yiYI21x;_RaiuWg`$Ofe>wR)V=
zPG{6J2E;7SASWKpRSo+B@JDX{iFB<VRtafiouoG&GfruR0r&3AZ%OMN_QFate$NB>
z59<)$MP!3w19mbld)Sn%?&!zqqw1QAnK0b83~+|XEGa!t^$<~_u!wD`MtJF$f{EX@
zaA3nBR+sZxwDkDT1#d@ZtJ~6&Y)Ah6OS|BEUi#;9bxx4GB8fukq&74#QaNe;Yr5K5
zZJ7Bf%5sM<Ss3fw@IU-D9a%1)rWtQ6G#E$BgzZ9QOns}N=zxYnU4TOgyN7s6=`xE{
z8ufG)VFe*C4Mr%j52+BZj+D#f4nSQfz$DBRq{5*mCl<&?u@-sEV*t^TtN!DzXCk(e
zl<d@3LdhcCz(^c(32~=h3aH(Ut_A6LQVouwS>j#>QxYR=NWbe?v?N+f=Rpw>+RQ)y
z%$C+CGS01vaJlr})b!At{a6dV3M(SeE!T1SSHobg8#7S5xINx2T(@hjm2x(A8zEz6
zZPL;lN<4X6a1u9*r|=CozOJn+^|)?44{XAw(EL6gl;pCWN5>R^07v(n{o@)G<X9E8
z5>quKCp_Ei5zX2KRqYjo;P%odN!dl`7>?|S&JsrWo<t-*Hs40rKh+CppF&6VYv#Sr
zj+@FB885Q^5Re}XS!j!!XerPqY{txQg{K&phU@hp?VJgC$Q_@fCd5JS$EeD)6r^t(
zvRCB!_vpPi7OLl-{$0(K`X2v41C!M|g<9smV+C)<DX4JN`HYL*5`8wyqZ$@iyOS_a
zxJI-<by{1dTXeM@{`Yg)kGq1x>y4&Z@RO+h^B1K>QVVgs5=91$PW0oGGUfD7s<D68
zthVOI8nUhFYb}iR^V@(xp}7+cNyoWurDIo8NJupirdv*?e=VNO@m#hU#*aGp$j9@?
z8~wq-o6Yyc;#oeG@iIA71|4sM)D%b_%K@NNrpQ)QJAFjNddR%ABKJOOHqepiL{OZ#
zYA~bALpPd6G>yMiu1|lEtgTEv`1c&`*`!kbXh7?<k7Qd2U0D{H;@@c{^{?e|HS#v*
zE$?nB=dTipwD_kflsDnCWZp*-H~kF0hCo%CU1VbM+&Nl{9@nt@JM6PhrY3vG`hv8l
z&(xA8>rQh?KwPzDvtNEc@%(MX-2JTlwE1i7m|_*rlEamJv+X|wP6%vd;SDg8$XW>5
zPn%mlfQ_jZ;O9N|e-(VIrd*Z`TzmwQTt}@xi>ILw51)#Z=++G8e=}<T>?y?|Xf~MO
z3D(BE;nYy{o~tq&G1|#S#PO|s|MAg50KI+%-saB_{?RXgQj8IhG3~H5V;J$`2DCHW
zw!aHgJ`mGq^`r?p>fQgntWds`wGc)?!E!n(QF-DC634azfg?N$_j4~)Mn$1@3L#!U
zgPVtc@HaW(*K)s`;HFl3ucYMc1=6Gr?}@E6AEo4{q-EJ9(;rpmxCS_hMG+Dd2qJ7y
zddjOH{hkJ$y<bQLD~Z=1HQ|zU8_h!U4)YiP%hBr>{Is4*k_Yv;y0O!n@k$!J!i|eA
zXlT{GS{Q=Ts*6vmu$I{qXo?d<({<}Am%|YI@koqqCJGHiiN?8p8XAV<QY{pO6V7#*
zSi0Oo8;gawa<pudJMFd?b#~ma=1KBBJ(oNW!}AsMy55`5ULQ}YZjpK{^y)VeAld&R
z9UPM#GgH)%pjJqIk_;?Fyk-dBP4*&gl%q?(Zvm(=KBXUX=!q%a)CF&(7XrTURk>1;
z&8v;xH*(@vFO9YOkLsH(`e=C>AI9I=OM6Xe?e`8fj#7%o8vk%AkNA1Wa^(5$MxpsK
zFHLX!G2Mf2BQIe4hEe=;D16%YQJTG*6c~BL^;(PjJmS(p(+Zm!8bqQ7JdNWWY-h=M
z3a^r@^cxWY5gk#V&uUC%9MAfAjN$&*<+!Fb?G?VWZ-p3zZcX)9jiTiuM7&F-xxv%c
z(2vHVAx2qYfmTu%?h=k=WS@orj$xPf11NwobhjZW2S3Sn?i(7ZnzOGOYAm-};%7K*
z#H_&6y4|fOo>ku<yT`pR@opl2#qNgR)w-++2`9!f*xqOavjkF+4!b%u-V_}2LlNAg
zcOTpR!HW-T8X>m2D{=1cxDIV|zWdsIVyvlX1g|3sh4|LE*BCiwxAdXbQ2d*;Xv$#<
zo&5ok&E_o&f}W0k5H}+UetW3hWfC}7Z9DXWeEvj6ZO8=F$r4N{$wshfGX4=Er`?zt
zW7VUs`d;eZTZ$a_br6aj2!bjne#(#detZ#Sy7bdd#MaZ}z3_>+$s^$0CYPY0^ag<<
zc6ibI9(Qx27o}EzkBa@U(na<%Zf|?>FwMeNaU2wisBlPN+!ODv2D$%m$NZwTSE0!h
zG3wo?iS>%nmVKiu5NrY`A%KNu8{ChXgHFnNNeDBG#e~})^b~SEJ_NzTaO#N!q7*1W
z@Bs1u284bY4-CbA$xI$6k03dv78IO=qc8nbS4#}Ub+uNjeZtNI+<eXp*GCIG?HHFT
zir8z_UYs9eoI$6c_wIl|cTqQ16aE*y30$`z9VcBZp+Ph9u?&Kuw5gE!KlD%82kBqY
zPtg$>kl--6(a#E9<AXia+n)GrRzc<h%Zi2!UL)NS2$5RV@Zw!uOKQx&`yW{fMc`0<
zvB@{y;)r!w!d~B%fI#gK76Q9v7>E9%G4UWO@;-Kf=rLs6=*L3#Ggo!y53c1568`Bu
zu}iVgndiMqlfz%!xl1V^7A^;!T*z_$((2-vD+J!)RJ}d9T`vVNUdh^9WM=OK`W$Dk
zFd0M{saP8up_oy~7el{w+ueK?w|upma=@+*qI-I3T5*m=Tf1AY_iYrvnLJ^Q#mK%V
z*$9tkoWH<UuD5C~MN)ZQ85KVnL7T2D_2ztf>LFT6t;CWu@KOuA<jnBwq(Di*LAB)b
z5xe5{knrl_@9>1eL6xUG;iCQQt6IGf<!~iBo&CMxawHcp=C4l1tyZrMr7w394(K?U
zJuUVk@@qH48Irzdn9T&zZ_q^d3RB8+LyOV2o~57bLp;DITOG*EgG&|p(GPiXHmFmH
zw5qBwCDr~qd>buM!pW;2!YnBu%yd<CU_3(&1(zg#&)i=@j<_66{jKLvR$9aH$isEP
zM9B%>o-4<rBDwcH_<t6e=aN5>&6Mdm<MP7PFEb13#W=KUKgxU!UC41SUDygZ7a2Xd
zBxQO>+8!T)EB95>z|UUEUD6nJ9EEtQ`IbE9_4*RBXL|~=2!xnuK>#bp--IiTTNjSO
zU=l%tNEBr99z^_-T5U%_#Wnpa4oAMQ43?Z3Y>|W48$n_+wV6*dxCZ#A>~_@t!H94X
zJG9+0sa@=&Uc=LXq&n|WMKeZGZz_$1A77*uy-^egy<j^?4a#<lp|oX0IujBIb%HtM
z&WIxoWsVV9Oga^YFU=og;2Q;^Xe~z3aguOCc7)$u)$Sb>zL)z1J*t_}8&FWt`Z#iK
zfM~=t?`*^oqY0lBaFAA6@srY`K3M}=F*=uBn4v{LQRBJ67&~J&=k~~M1leYMcgf$X
zolhyABHY)?c|HjTzl|RLin>lrvCAbR9e%yXNMtR@t|HwPG<CXxAjNlC-#&)9MCjQI
z89CT{JCWk&cv7&G6$$K2Ul6g8hqnoaDF3A+R5<(oHf`mp*=gio!_lZ!b8MMm6n66B
z{7CVNk>PGb$)`LqK|-SqZ>Wex*N`=Mu_dhTMl>dqBfZU()x5k~?e&K_XObT`=v?Zd
zzdna9;aT7OT#8a__XV%qb=xD~@`UYju)jO5e@<z6S}~~ma)fu-(B{R__zJ@gKj`_v
zm1s6Y$>ZC^P<%=0M_xJC*?Nmyud8v|1Kz4+IcBoiusv4xja@WXCG}DRjd5a%ZzZU#
zjtCeQt{wLn)_>QP!oqO7O3U)4m{E>ayiYM)m8S50w<f8Sc+27;BWXe=nUCAA7V3DX
zI5zbvg7N>U))}WodU&VR9L}-`{ArOYX>dIH5a}3Cp(whaV`EXQ8ZOJXJ;yzrr}S4i
z>ISHm2Y(}TEgJ%sdr$dzuKKeSqQFy?@Yskxicv8GsL1l>sTzkPK)ZA7X9MX>Sa#H;
z@U{;o(V|~k+^-xA+<OE0Gno)3*yLD45P6IaO~&G*B<4X`aLYac7Vsajc3&wAw@Xz-
zKLYl8r#<A$uCD18^jK7B2aqW>j7eJDGymf^m>4Q9X>(yGBo!``CJ7O0!HTU<{S8GO
z0!0at$n-^op>3EQOKY~H!O2M=vA{4UAm~C=z4%8$m_X3=o-luUJWE$<77C{U!uVIC
z?FqB%@Ve#dbaZp^g0^@S7){-d^7#-A;vY@3K>YNZjh&3&uQ&Chr3;CV1Rm`FCxMa4
zhQsCwuq5#3dbDf25ZiHy#};N-*SbYuY~>pN+W)E5`wSU{&xqK&q#wE4AB;QY(kI(b
zp&YV^i$lFLsUwrDH=4Y77KNO1>##MUL2}3p4~G>Jy^(@I8X_Xlcv5)4|A`td4L45{
zLg@CeYOi&)4osTRtW;po=p&}8B%*|}hG+T*e{e_-4Qr4@kJ`>EFy@aA)3AB|C!z4~
zUvXxW9CDG39>Gla*`uY4oY!XBU}duRbsSxH-djiz`%vv{U)x=`#;QdO^=Do<%)Q_V
z>)|wB+HMic(T8O75`b60?c3&0;shi1PCYJ`4>ro8rtfG>NCtqAMgHAG=df9>Kt>44
z0+hGZJ@8WG4$`#Ta{oa1s02_dt~B}4RZ2e;arIf0N;+A-J&b1f4v0B9@fr+s4T2yG
zyj;5_#2tdm7MXCuURIn5QYah?ml$H4JdB{9V#WP{Jy}x{9mxn&6+J>Y)jlQ;GLN$N
zS~?i#5wr@+z{ydEKkcv%IdAhTky5$l;ZJ|7wJjAEmh5Lqoobb3#GVwHyOJr|_Y^&0
z=W-y#Xf9SCjB?U2?DyD=YWuoz&4(#9NIm>SOlYfY@oI7YbfE>%-ZUeJNg>p+r?2mp
zVqSI(-xo>FaATglL-jZrYw_>t>1+66;|o4;0oJTx{M;X%PsP%B&s@>^zDSs=Y#f~#
zX;_%YHJ@209DpI@^l8#zCxPtMBsdBa!LRNJR;8sCuS35bOqS<{8x$J+ZZr%1?eFko
zLDS~91|SWXHSZ(YBU<~YLu2FBds)e+KR<g;GW5c=v(s>Q7~BREk&mfVIv}}Pr>PDi
zz=xV8eRQV0UsJcr-wm{FZLqnoJyiQOQg_&&L3jK%k)N1oMf~n2TDrt-y0?vMxe<K)
zCDDYX=|oXX|1+z3S+(2ApWj5!donXxx3dp7=lO7y6Wr3=&6MiC$skE-kp(xjUVfTu
zUm~$`lM^$laSUnR)gu%=7$|lUHHU<&g1b?E1r`nh;cXCOdlz<mX!GndiRPx<pTq9$
zPDSY@>BGgvVOgAk8pDDM!eYW8rhSj-N2llkRx#D6WnDmA-7P{WJ+c5b+ySB>y>!B<
zT#Ps9HZB>|+wKEW@om)>p2j^!h7q@?8MV6Ayt1US!Z{MkIx#YE+Y|XH?!B-?3Q5*u
z)mw=zJ8K$cGW<jcsB+rWd;Iian2lu!Xl0eF9tI~Lf`wKCAbp0v*ikWFv!0Nbfq>8a
z<;j;optK07KwoUeaQGcP7O)`A<k7cGVS9x9t=?%Z?#Q#f1G)L`bwW@(s~(GHnFaTh
zZNaO66VBrkZeEjb=d95}F(3$y7>&U%9DoM>r)fT$DfZpkSz42XgB+txk^l~5C$vj4
z1qckSi3A5>R{1Bht<$!8nV<5KdAsW>ZvXZqxn1UkSHPmcDgmh26WnpZ^e+-To5Y)v
znflgSdY1X1a=zK)$S`<So#EN~xSR8!gI*s_J+P7K=hgGEC>lZ=Cqf(B{NKDF<cPb6
z<^el6r~S!aa<3)k5h(8?KQ}OX`HgwPf`Abc!j#CEnjcYC$*5;C(O;>1q4L+>Vlm-@
z(6jw}`+tHly_$ixo)UE&tC{Q4l1`nrhN!WPI`hIR{83tKG9FHv6zxD-y0b**x1JNi
z{pwF6v5tpOV(QPp-5-KTlj{3VB-``yB|a92b0GtVR2d+DqP`@G2=#*DKUfDSFx|eC
zrh3$${coC`DCd)()0&XAQKnPxrykWY2U>zBnqF&6eF3r-ylt7+-=IN)JiN9sGqm0&
z23@WAJbPIEoQQtB<WD3LhwM#7P<?+<+`0XQp^%0_Ws1AiuZ*NpqU4!(`CBuueCmB>
zDFs)r?DT&p;E;C4j%Dc}oJsLC5!8SL&5EPgm+H9>nPy1PEb6U3|NB;`R};r@CEtkj
z#tvGOI;H0%b=Tn}oajAR13^ka5XP#X%*geKUM3)rOh7Qw3{)Us6W*vsAw3`WaGRwN
zDZCi_Fd`^;ik;d%eroP>ZO-vcyu9I+D8y7k72OMGs={;tuTKkNNPI8-7GfF#0<9+Y
zp^7m@iv+PcqDGj~Qp%M=xH`K6cj2}r$Y3PW80|w4X}FzIKoD4i0jS6x85lqqdE`c8
zZw(CWq+>?lG7&ERjEuP4!K88hU%|^8sGmXPdR7A^WJuB7B}1ZMDsR+5a8R1V+)O~$
z+;jpWDgi@K$_c|rnfry>y?k3qqzr@#&;yenctK;3Fz`*e+zj-IJz<H?K%?gS(YkWB
z9|#Zq4G)p{KnmQW#&LNdYiZrdDb4*uv5brC&Gpzur}?PZ1e5p8Ssx2~p@%>41$*Op
zmpmW;Pb{TJdJ2)^wwU(^yRv)-6s|ue>#jv@MYxt5>MlKtRU{~7&KN}UZXhA*FigC)
z;Kw`Xd>4Gbm^UAPkEEN8Z>GJi7lUd8{xX^#ze%)^H*dRNorOY4C3^zl4~PRUF*vsj
z5r{RRwV_|yUp-L6gQZb6HAUA9%0SIK2^pAINhn7ktQc?H!El^IjOAbT?cs9B0Tw}7
zrgSTCh(Td`ILGjVI!{Aw58(*3DN?}vj<-47orRMy6!AEf^v{4#{~Cy_oP9|RpcUep
zrlHSM!Zau{fRyxmWz!?JZ<vsXf!Oonxfq==jOiil)F4O3RJblG6~r+_FB~t)RKx}D
zb2yX2eMka43=x79i<RwX5E=)<%tA-@it(15L_I)K0YT0(pZ{grSnK%vl_02+l!)T~
zAD+&FEvj&9!!rye4bnN%UDDm%-65bL-Cfe%f^>IxcO$9N-QAtv=sD-R_yxee_WSO&
zp8J0AHh4n51iZG36#-8*0aDNW{8B=FU)42oK0)`#NKv~n=YK(cYD+eN)RHc<Y^t(e
z)B=871i&t>y<8@{2u<_HiU()DFSU-&>QeE=$&*;p^2chaISk3%67>8}lBfWdZ%Qd~
z5!qrX0QtixwI~Tt{1gKS5dW|dXnT!*8V9%rJcE0Uhx0_suev8(k%JtIgQttdr>l?F
z{^YDF<>JHp!SV$HknhN+vM>c;M){Eo$Q65)hMuC0QHDggq{&SBm^X2oan9o%72G_a
zN}yhz?pz1yVOa-l*0oW0=L+QsGzZZ|2?8EOlbS?B<vxgI!NWw4$TJrf$*1k|^{Tbp
zLzrFL3*^{N7Ux4X&6;l)4vK)t-aL}j!dTrUtG(7wHjy!|&}Sb{nAgA!JttGXgp)qe
z1tfvoSKkCdMt+VzNbYz>KdCT~P3c3dCo3sHH?HrO8CH3}cOVWDy?T@-8nTge02qKK
zrM$t*lyAG%S-AosAC@3mCcQv7BSd9NwP0{65CB~XPl~@DmK|e03q%XJM!pW4C_xe-
z0DJ&ot380j$@DmFj9$BV*#JiUFSN~tr}Ns;T}oz~&E5S|hZu5Aoutz~j~QoLOa(6L
z(`(A-OQ^-nwYDTnzSqi618KI4(&B&}N<vxj@E@|tT5F6M`agQIGnOYV{&(R}fgDEE
zGAF?eCq2Q;LCbq{N1se4u_Z;o&)Klu0J)PdtctpNeXTvG817V9`51qw#5PlYd_R!+
zva5mdF%_tR5h5OukNv%s;SXb&TAk`zn?LMg9IeeOj(pi`N^QA6_!{>UA73C0)*ZMM
z?)OYM8#61?uT3{2SRprsf=y<8NI%(@_mJD5=tNC^S>X4tVsC_^Y(PICEY<<khWmaw
z!P3R0VhVFl0Xo`1w|&0W6r7*9jR=X`GaiV7S^7tJ=+N+x<C;jYn^FHSoH+DrI5+et
zM(!^V$5ON{loE_Ffl1IFsn-PVBLFHt6xsq6K)m*}dYA667zBqTn~RcyV+{p>HW5Zm
zSKNkk+|b$;HU$Mg{k1wQLJWO+r7+pBS0Fb3KA@=Jd3Zu5&`xMuxLZ}Y6~?m13zvWf
z>l#rI+FHB~MK7fO<}Vn{9I*d>Vo%3t9GBA)_orY}!_|_l8p4Lp06Pre1`I#_ZVV<;
zJp426N>>)e!5KHEsSuT3kr*W(w@rBm%{jfS9#a4KHuj(HTZ$u2t>{x(WEc#O|8BXZ
zk=?R$QX0;Bf}b>-uMX!T8pigRmL}L~W?KxY)b)!GA;fFf$eG>F4AxSoM+kB%+dg(z
z@5`OuIkp?K^^~0ZLhbj7Oo1|$RNe~5H%8Zd6U_WS;iaEv3M~oJu4W0BN**fGx@JA1
zkDbdpBEC%Ojs~yLdb&?MM!*GZbtKv%8|@pJ8V>_GFx9w{L$tqWfw=Y^E#k&#cVtr0
zg5iUml@VL}xpuLlp!?(fYY071Xz1OR(N95f&}4{YNy)OFD&#Q1Tvg_QE@4*d0}p`m
zdb~=yK{#e1?Xh!j_Zv_w5RCRS#?=X=g}#ci285X>ITp<l1D=2K3LN|Rc@VcAZ&7fN
zhbbCy7h^xV<|Fp)w172O__yQ~RVyezXL8Eq0F@sogZ2_2Ja``qdC~1n2{0`dtr&Fx
z6wEns>nxYwaFjs+yK~p<NdS4cn-TY7v*>mVRT58s0}&(9Qhmc$C_J(keLJi6Q>uzo
z_J)A);hb_agZP}{RPT@&Ek~fUx~;*MJJH#{Slhp}WUgl_P3bDhl*<(qLE)RQ8H=Y=
zwT`+CAAmobcGPhZ;%!{6iWudptZulPov-<wH`^*}NpN+n6=A6~gx~Ph3NK{lWNhy9
z{C6{2rsUr<#IL9Qd`tAD8CZ1c^@I4R>6qGhMaLb!-jko_vMSClzR%}nG@RK7oYOD9
z(xfeNv{cBu8Gjr1F=_O^B*~gjZLy>`FoJzXhU9&nEwJo(uW@HrK*-ayjYuRRaD<cW
zA09Wh-KOObt5{H<eppadNFPx$o=~P<g>T`i1X9}*MAmRU(o2!F;K2wJz_4&3LNP<1
zgmmt?3YahqyM1fy+e^{p^{*jGCwR<UyBCQWI7jshoI0r|$(Mp&ay&|Ckw|6QLbW9`
zkGT65{qcHvc@V=R^36*WRJ8Mhs+PRjmml6kTJVR3CUi4;0Tv^G$&P-TQm<(bYv+BY
z1Ny<eB@}BkZEJ8iHspGo|KVSZG`solEO&FpNlUQB9~sV-$O+bDeq(3TQV7c3bkev?
zz00N3F;~r`Tt-yo<wK=$Ix)Vj8(W!1Obxmsl56m^jr*CS!p{6bLXma<78$)pV0eN-
zs(Dt|V~ZK#gq<09GK)KlZVG_rH|_f@lzJ2(JZ)&DA18E})94atuTiQs@(D}1$45qK
zm&Svuxa=|+vht9A+H^IX-_Q>^x$oJ6l8ok7A}?``w?vE|Iczv9x1Qws`lpC(x5*|(
zG|Tdj`s?j`vhuGDrH#%58cDUw)-*>dk+nJPJhvz2-h-ubg}0tGZ}?zI!WgdOmk<;p
z+VjARODHxWMvt4zBoz=_vs0eQk8tx?PDO)Lso*dER7Z;ch#f5absuqObSe2TXm>Pn
zU35ZWHc_`j$b`c4IKCUU@hXjk(IQ-nHx7#%pY&O4kt@@ErV`<|8ybusOm#tg<_C9o
zNP>tS8SO#30T)hd595cXmUmLJ%d?>odIfpTQP)$^ns!ne7J|dk?&X85%d=gpkCzSe
zyY~k8ub{-G7Bg#JKu_SALbXAjXA5<}^Ppn5m`GdU?OfIC@6w^s?5>9`M5DOa6r;(P
z6UXmKnPz*A6JzT*G`f27eOqhZ=A7ssI2^zr8cg>KHs(TUCdGQ;1h~>FXwLl6(U9Yh
ztugG%<RX2$u7ZH+Nz}I+NmjqgHCVu93X%npKAela-{8WpFNw2utEKSJ=Ch5EG|EN5
z+l}a)hMw0lQN=QTNc+zykwG9e`doG;au&yOE9#N)UJ|4IqgdlsQMLojx>UwJ53T*d
zTl<-kIrj_H1F`Yu^LbpAf{mxJNZdQ%P+7D0fJ<_)YDFQS3Ldp}prW(>Wr*I|H<kVC
z)H$P1z$S6T*+0_hoXzi!SOAd=A0WLU;XY-yame0i^Mn#m_Cci~bj|BL2go7ze%g<b
z34v`Q>PsQtQR?2Fbx8^7B;RNKrG^F<3a!;9zM}`>j3t_aqROQjRSN}mdTonu4K^4g
zg2j)apI28g!X#wx?0yzRBwHOM%jWT1rG`RP9jULv_+=|c3}RQoe>0C-Fa1-7XYgj%
z2PZO6Xsu4yn&gm{WGj0uIz_oxe>^`5gfm2JE=iG$CN+VQGoLEoU|@tpdf*8cDORt#
zWjGC(YJk*t*qlJaTWIlc;Fsj5sa&Cq>vuk=56Wtt$%C`K@A^ZnxrKyHzc(DswOA4!
zmnrKWpL%?7%VlBXrxIl=Q+|#1*F(kN8$OWAf($)%{G&*!{cFEHah%mH-h9PF*QB5^
zH0=0{xT<T!t^LJn=2rq?oS}5|(A^2-4zJ{f51(7L&SK%7U|xT&!_>j>2b)??x$7lv
zyId&w?J;eQ%l6=27*rA5>=;WJ7xDVoad(o};z-m(wv=lx@dvX?KL7WJ38u+!P415~
z1-Gxu?zahFvKqe2Ak&`~!vZqp3Rp#6wKdU0>}=g=Nbu(iM@4*<qz@L^Ew##pf^DD(
z+P5npW3=sxEYDR${{=I380t_XH%NU-dKaIpk&z_-5MO(l7(W^dn)E)^VkapOwmzfG
zT+SVd?(P>fni}@LUC8z?jm)j)g{c>{+GZ2_SJ@xGg}OHt-T7yz5TMx5&@ak~hq-Jw
zo)Dc-znaT0b^pn(4OND+2r6L94P-QIhGaxYT>49HHV>EbVgwHPGlL3@)}rTxXr=%Z
zLM>}{YqY~1rI<)Boxw_7Hp>i~Q|G||)LWXQZCgl-6bya)mvMY{rxHxbj|%fO@2QR>
z`AXdFxdNN!)bfjxY%vOh&*&!Cq<_H6E7F7&M-%!>_&$GXJ>jcfGf<((5H8K%D)2I2
zA5AJ_q@a<Sq#>!JUDQsrjc7D?)-0|tL2EjinI-l<P%hKB>Y=_-D@M4Ea!2Ot#$Wd*
z(s)%b(^y#T@U-5a%3<uK&`FBK`#1=(wVESh(^m_=96J---ZLLfm30iLMWAcJl@Mp^
zI!*IV-?~3F+p5J0p@w*52s-x6GH6-S6;@SS;#4lg_&k&0=y*SAy^Z|MlF?fN0#fV4
zUP`-#24W#q#)&%znC8bP>~r{PQ*n+P1O|cP!SEL7Ls&^JB1tqZ`Gu{&;oPuAeo^#J
zzT<wGmCU7FY*3QXBc4ugLb)YD&<7R4AQ17o_cor$Hq^hTLhSHf%bpX`o`HPT%k+GO
z0r%CDDAZ++wsehc=_3s8hx~;el|0x1AIMRU-E1Mt;LlXsz`RJqdZ?NM!RJ0fuDn;o
zAQ+$XuGJ=lBswjkxavX93R~yIPSI3l<ze;$Y16`kjmLfIF^!}!1XT5EO8K<;D+t5H
ze>qGh(I4~=^t;S~6oNuXsAje*bTSFdeF61Zb~N3N)*GoqBe;PA(bB((UuY)2s~imE
zZZty0?Y>3pB?f64r+mxAK;~6h86qyK39u9+-g|(Qb3ve*CathJ4`_!c463*k9_gNj
zasMeO4T~dm6pSi>VJ`Bu_dzyUuSL=5{Oi}YY;>f^1P)v(Gut>?D03~kM<j~f{1YRE
z>+!SC`(A)Rt+|BK;$HiD@5g0s-b#4l#ScWmEg_8uJnau8mJ?i4a0QNWr896A%yDkK
zHkmF*40<t<ABxpPc&`m9BD<@>M`DsqgVY(oZ#f`NiA5A(<K-{QY=Xry3jL5wS;2gy
z8pfaeQe>ZaznxB7PBEDXr7%72d58|x<Nf633f}6y>36-JVAs~2!=EFx9B~=!)~SxF
z!6YvY?QAcOPtX(@`3lA~-Dhv#L!Rl2CyGB?`TNX7TKJKulj6r?<+eEPDd={1G<=*v
zWJT@{?|Lljg1Co+7d#PGRv=wS8S!5jtiPlZb@*H}p6LoNP8?|sPKW}`V0fL6w|D<Z
zohHJjLIT<s&!7HIXGeo!Lz{JKO~am^{<h6NEin<0F{LX<ld#QWhu)+2!J5#;Z#VMK
z)WkK~zrMLYS-UEFyY$|Ff+Jua{)PFY20~*jRnrZiz-x_gyRIG%{i&(6URp#`$Ct*G
zHi=!V5ufXK(tl5++t7#|MX)g2@nm(i%8z1YPTB2c9+NrSrYiXb8up5xOf=zYHdN^2
zPPY%|9AkK_w1S)y>=!#dgEQO~G%Lon_JP@=<KKI7IMy?I7IfY`&W!>YypVZR=s9nH
zO-R3Qy~Q2zQu~*t?p(GwM$HBVC`VZ5GaDl4YZJmrotha9o0U&(D1=VIhmh>F)zGUN
zTy5mxFHOe-Vsy53k9o)YYBK!g%vQxX25qPn5{F0J#O3iv=YwO2M=4b?dkBR=S3B*q
z{GT&mg>bljV$E`)_O}}unOd8Z_Z2=T1nO%DtqQo8o=K~9B9Du$wpC`Iv%c3bP1No(
zSQ$BJ#@RMHT4F{S0Qm$`I1Ryah5Q^|&25a|T7cv~f2|G2M-f;#t@&`2DxUHB6%xUr
z%oiDY?^GtggHQs1^+dqW8(vkbKaCaNJ+6yE_&O2fZI(+ev-*xUxufd)@84bb-^|J=
zL@_|(NH<@I6(jKvqF1Ucv1f*&+FZ4R{YWeORy_oO>(taKSU-=1z3+rX-&J~v#R{XY
zKo;45e-KK6@I-Ks{O@0L2o0uaFj5N@hIluE0sQf~m?VG;+Pw;fNYiHs#H`dAe~l{e
zFQH7Gh0nz#Y6aOuHA1o_1e`YMHxMPNmjYXiHuBM*Umh-UwW_3u?O@Qkk8qHb{xszQ
z&fDYT(L}R{$8+;1v!O0((TkIXx|4_j*>q(h#{?w%vkkIFjqYy73&-d6i=hnriF;Mk
zM5fj1X%`Zn<47(c==MKuh0=n6>iZ2ydNZZdJADpM@oHJU>_ia)3%^T}j#B*%OOaZ_
zR^##HGN$4T`6y#cTJw6Y88@t(#VfO~sj=ao9Wl~xwW#yfM0ftnmgEAM4SZjwB^$pU
zaeR>zg?7_e@8<Q~UHmE@^Zc--S`p{dhf+k+BnqKosM0a<X7T#cs63H$hiS>gsjOz#
z`p*Pj)FduhII-K0((nGX-k`|2TU?r^v09mD_Q&UVZ0o6Tg*HPTuguo9-Eut(Cb?A8
z7!;D-U8O1K#Y(44!_K!(-2@K@x$J=SE1di;_L&}zCkWER(P(Ix{F;zu5OQ;D{PZh&
zfe`p{Tuqxc?ogAHj1;A?Xz97Z((2+786{iVD$}ma1Cj@q<*>5zQ?R<hXDo$^-B{sv
zB($>^SH?!OgF+#a)BTclgrCmk7TZzmP6bbI<e5!XDcPOi1bipPT91Vbx^@LKj91){
z9%QOf<?7Z>Y&Sbow(h3qQXckym&;dTn{&3{9TfbNG!^a^n-hq6)^>wWU4&m;Nzw;#
zZD{ejV@YMrXOozSB%Dc>?i<H^#cuyEe776}yKbfhG46t}!ajq;4~5?&b!nQ$T7SQY
z3~8tKgLT69Lw>s)666WESwdB$ZX6B{XWhkkpSrX~CixFhPRKoxO4Fi4Wr=(lGwZ)Q
zTOL>(YbMV{MrGMrVF2X%&N1F<PVzD2RsFcibmUV;OxxBzEvZikrVR>LeqG2FpU57_
z<G21zEo(kMb^8v<O@F;l!@W2UJ@SmmgZ=%~3qRgv9}LvSO(7qpAG|WqYcl@BQ#8^-
zl5XRo65jA+G>I({n~PsCgo-gH30s0Uc}f~0uIo}}TRnxyU~<AGpT+&LVvz8T7jquP
z%txj6ae>^A(o}BePcEmXQ7}5Dv@lyYOkHaAL;t~nFocpcTPB2J08sqAPIg-d6^>F_
zZidq!L+Y>Fc@I|=CA+*j+491(VKuB-8R7BZRw!@uasQl71?5CfXbg4;^(aq+-@#F?
zJ9p3#PfBo0$g@u>t5fouVGelI^fs(Khy4QVwBxs{AWYf{aCVs{j>6{#oQ#=`5uHP1
z0)dr5C1k<6^8BdiC6~A5+Jmod;)T^V00jTc#&Ev0QgX!@qP&K)9VgkZ{Z)d`QbvOk
zI0NUA0Od+VKqw^e_wHxPUaoU0d!zvSANg(I>m&%7qWazs$(px`g$vK7Kz1K>zgFfG
zV^+)Z3~IqrF_lCMgqawl^+$hX{JRPq&4s1L;&eMVdg>#2UGGhx(Lb>Kojj0qZE}lG
zZHVue=8w@T#)gE;+zn|t*X^X#@>{q*_&wr78gShO@p~~|W*3XpfT}mvR^9sW9tW@%
zglza$T?1R<#$tfU>GKmh>=yJ>Mok%`+*>M$BC>*?0E$Ecy|72Fh#y3Z5>)Qtt%vp}
zl=DGCpus(1e>U9Jn6YYdBG3WF7QU^c#4L^b%3X`K`-|i@v@%5)=|sQOU@Q!Lx6~dM
z{2!s)(OAl7pGZHzj6e#i7a|0OdJlG(2Vw^<ah4da;dSN1g8x9zf=IWiq#sXq2U5|a
zy2~<E2;-M1ctCG~yMcQG_`*e7H=M93e!|fqZ$Io!c3LK#V7ZAs0Z^pyx%yNydQ!+6
zd_rh5Ot^IIFl46rR|w=f9WIt@tNy@zw_{CO1R+p5e7+f4i3mARnaUG|#GwT58YWbD
zTV~G1dZiVZTmBwC;1r0IIm<`zu3w0<RE~ZQ*$7LSEq?^S1}$RxZXKjdxBm{<&*jE9
zE^a4K4zDbfyN>Vea82D{FVa2JoBi&MI0!Q0Mhl8ZxQYeGZ(NY@`QQv!@7E1*yr3G+
zm%J~ce==>fmkTHq8Rwf<N|9Y(y2Ph$!tWNHZ*#SUV}+>Lm*W!?-sOCXY&ZY!;UXgf
z$~QtcW_R3`!x<3L(G+#hCQ<7_^VO3WLl0VbdreSe(1j(J&{dWKaG)*t^}H?jheS}+
z0w?_G3y{+jdr~qSXMuogR9BG5Fh2yb?60ZF5ZO+P$ors{%K7ye00)4M9s(5Qf+RS(
z@BQBAh$M=AYagEmAOn!BF;W*kUof^)Ox{hM^6S0fPTM~+z>ovHxZ*Q6kPLhGUB{lH
z?FrzsCM_7tKk#AR(f*{<EkVH@{0AGUNK(g*EHC&PObnYtD}2kJt+2tHOa}p=CWXv^
zG*q>U+?7C~v~T6_w{!Qs;#BY}-wBb@7T9}v!<hmKq1R>VJx;(z1r^tC3%LW0N9(|&
zDyesFw9&=1@_UWedOR@gh%}p~0IjciolVCpTYvx-nQ8ONP}s_Vk5EFPDHb`FFbYvZ
zT5Zwzj)+9Aa%P{VEsG&4oJD;{;BdFVJ+1<ceD04^#Yl$hN9g_isoVng*wuEiD##a~
zSXJ4R0Be&}a8;E-T_Q5g?GAzA;%mkeGWP9&A${YKp<z?Wn&ztJ)!=}^<ZCC@5y8Ld
z3p#Rra<UO*<@ry5C~&_Hx)VZm6@__0`yY{{fV@5(oZ#;{{nujgZf8-H>nR&?b&*8i
zCQ+o_a=vQSdk$~g4@w-!1#Q&FwCeS%q@%b8HWwPZQhzVfbw*SQrzC%k#3uki5-a66
z&_{?{b_#xhqYgkHaqdU#Bd!%9Z`5&ygKcKweA~MBGi7!1%%Akbh(RLWTwI}ql2KtZ
zZ%c^04kJAw{N0gu6>X9Y1$F*-T_%qHi)7QxYv!&4f%xHWcfvUx=^QQlBa#s*{JM@g
zeKvT}GQcvzJi@L-gMHB65Y67sV0{1vZvsY}N`-Pg-R}ta`t65|G#DyyI9@tDpBw=i
zCBXa!VN%o+@6_4S+5rGEf)dMy!(4&HSp_>DTVL1r=cxo>c73&;k#Qf>C7qy3Fw5~?
zE)l3=gUf4Wc4Sc6x!%J<vny?ju2h@9kKVu!2ml(<=&hrK-991+-U+{)`Uii~c~}+-
zrb}jA`ceK-qfVoIU|>yX6M$Q*Xu34Rl&k~EFMI9|O=>|lsSy_Wodkc~DUij(*GGG3
zEv{U<N!J^|Qz0?q5&X{CVuPi2=68~|znfgV-`&bVq`vgM9SxRqt@V{Os)hGXm1##(
z=FbtTl)Ps&Mtv^o%6|0BIsvudWRSH8+Pit7gU&NP){#R@<%6-6OBvrrw>XnGlIgbO
zD2)afmG|&}d{3?>2e7KyHm5Fx_Nd%a%7)Y&CAiF(r!|Y`@W}9)yxE|tS$u?ihr;~k
zmenohJH`M+ui6Kc^`cw?)5wWN`64~_ae1fVt=UZNEBVym9{MTn)?NOp7W4`sXM|8h
zX%et$S6(*?0K`SUszQ!-6{!*W?8p334OjAZf$)nMFIZ%YVV?(x#K%;LS}G(o^COoU
z`kr;Ya^CSg_Qg<95Mm_C{X;hgqCpd@jYSc??v4KK&3Fl0O{(psT9)_~hGoyDKv8HB
z9$pwhLHFVdSg$X!+O!j(=ck-w1e)v97EcE(Ggm(6yNu&kb~xhLB;p|pW)5SK${o(N
zD7TP#b-npCLEejY5ct(wmU?)~Q>==Bg5Ft_-}SM4+}pOYfJmxtS~03onn}UIyGp-$
zwo<S46OIF;mcp$z&Vtf@z$LN=WP_Nfi>x$Y+#C1~#Y&5OrhINd;6K_~DUt;xo8%S6
zpO)Fb&HdnBO)h7kSbruJaVVR?6@@|9oQ!)ts(hTnAchZ~2^0qDKMdlrcJGyI*;qE(
z(8Y&i0_V?tS3SnYTZ_A4Rgl-Ev$wal$RtYDOeN<GdHzH==`Y8u3lFs!N@nhRZ%TCc
zA;bIGhxI5>_(Ns|d52J2i5Et0sAy=D5%5r@g6-Un-~Hmr7-s?<lF!9s@s*_sEh}JP
zq4T5nF}njw<%Hn{$VbIEr(UHCXaHIOv29A+KHO>C(LT>xCkkw!VhXAd$Yd0;7~VE{
zCJlFcU+}y$AsQeF+_FZ~oD&BLx#6AgT-?beAqZiH5^94;Q50www|o&2e=z2X(K_n2
zIs_P!;djK33iF7SQOXl3@5>c<V#rTP(;!>J2xL#%wAu<CHnW%|%Vq%SWmO&~z-F-L
zc?Ksu5|~nlHF@82)H3|?fE_2i4!;XJgpReFTwb^9eljQwp|3#Uh}jlo!3tqp;6FLZ
zpRcOuks0LvO+MuQ`o&LzH9CTZ!s_)fh?I7<$~VUCJUEfnVWeuH@sOHah|5{Rj;NvA
zwtdTCHL6smb8?DS>`5FeIBl7Y#(sXo{?e?07N&ri87gu-%ZU{Ps}phXG(weCpYZ$L
z97J63vM*4eqz_M8qO|cBGKPH3Q?uDg!@fVj$QtwHSEN6Q8aSTl*cYbs`zbr=rpxlV
z80jKZ3Uh;fJ}*Az91pG3=XDdt)uSD$-xSZ_3Ib=N?*3#)QbQX020!#mzzCFOnDQ)@
zBgyf*RC&cc2=9%tV2sTg?d&l(l6)EpCQj<AFAcebocJ7ah2x0@Rs+FXki5NK*29he
zM*HU>l;k$lB7hJSn9ulr``Kh3E}M`06}MB(_ulK`(;nWC)GqD}{`n~g0ZH!k@E!m^
zM5P16{3#+=jXEqWM_2wxuGv><kOh}4(<Rv;cZ=n_D{U*3LeLfz351S18D+pYK&v49
zWh=1rfu%ex0y6n}QspLOhNPLVjFDipi|Q^ntCY5(C?uzo$(nyZw|obHQ$RZ<(|xe$
zZoOf#Sq48)=e#w=8O!Hu2gD^~DM4Wr1=Mk3{uC8h(oiv=b(sFF#5SZEH8(h=je9c!
zPHEc<4lNocJLPIdN6iWcU#j$>_N(_ZG&&qMo3oKJr1||$=;y*~h_jWBb9(uftX(c7
z+b@u9aql10C{y?fMq%>4WLqB#$JGqWArwMKbi}f~ikb0CT@G!bK2snH15bT53O}!w
zN)>ro@pJAaB_u@Lz@K(I-}-Pw|B>O>A$#SQ_Xa6OAK%!1(IT+yI-aDJkndQZ+Bpy|
zIuB#FH+3Jfm765IS=Fkm5Nns9@w>$~*15duEOi(+wQ+<f5`4y)FsPT0;M8u)St&nj
z_PHIuvDG7=&=vIkr9<9OPv!e;T7uh2(r=BtzHzYJQrB@gN_YF6n09Vo@~YVZ3?wL)
zn_k~VeK`5}Oa(bKAjihjuWmfNLA7LXJP>MFp|lz>%<Qy3#Ve9}R+W6|${}HCEzTMH
zMZr1XmNgTsxDAu&XCJT;ZakZ367O(Qwg~BW<P~ko4n`d^0lz*i+48;y^zK@9a~+qS
zyNm)~Um=)3gaKmAe{uW#{pxhfY)BYAu-Rm4s{_R#r)-QPx-S$N>1~yWmp1-GU!0r|
zM1{hT<S!ivdPdzxwdHJi+E3IZ|A1v2(alT?ue2Li4?n?QXb#{020%?r>vx>QrA`ZN
zB076?!K?P8Du*+$9o4&4IT(iwWVlSepFs2}b;t}VYUm%t)j4jPX_4*l_}E>_=@9XF
zC}-<EKY41-+WU8>td!abW5UGYsd;3pZ6WiEWy+fCdVM~QJlga1SOF5K*$Hu;bMO_$
z&p`xy4n>%z8Gwer1EVXADtoY~C6EeLx+yU;u<u)K{!i3wuucc;R&XNv`MQx#DoAUQ
z-F9R4+lv@IT94oAL6PhdhfW!R#rvLzJS^?Fk_YcvyPOw|Y3g6VEH(}RPUVd;tu&8X
z9I0@rl3fSO?0PD~qKKqg>M&o%$vx}qgQBm)9KZ<KQurDX9HASdS6PwG@a7{5!g?*s
zFQ*AuHc`4vy|L8EV(~_BzQ@7TX1=QU!CGzu9==<2qaKEUj2o20=Qn?<ZV*4Y>|A2;
zx*rFA+;2raFg|Ic(h<?kabekEO5Kp#weWnyA(_`CVW{;^yIcJ6^P@)I_g6Q9KMj*U
zS0!ddleM$@I=WtU1fjbfmBP}QaFeh{EnlvPBPvvX(Q0-elj~uTw!5t2>)!W>@OocH
zQlLuDKHDZQ)0Eg7{$X!+Klto<l(kk{LD#rA-65%8Yb^4F-Du!9_1#SOc(Ww}!f^S5
z=($rIx<9vb^iAxgH*LhAGTj9h;7saQd+XjV9I(9<-=5i8FV@qP6oj`L5>KQKzZYp{
zMMvh{?$L&nm~Ggbl1!`G@wojbM*xwaDRnv|^Zoc+71X_J;O-z9O=z+9FyU&o-tB+t
z<0yEN{JW*3q(tIT``i4DsO&w~A2;SmmU!mD51D<x#v}Ng_SnDM_wO;XZZm~$SvHZv
zLOJw*iw;wIsbFoqs5fz%F*JtX%HsiU4QypmV82<0`{Zwv9=ywKudlRT<jF(NBa9dK
zi^<oh(0}FMgK>DB5!c+Tw(tVQAvd}jAxRK-3wdR5Jv|b@liF_YQqirwaf=7_56n8`
zT!SE0RXdPQbI^-Q1K?9nI^rIKK3Hn^;Nt|@T8_Hx({1wwMEHRqd@byKL1?_*J7>3X
zNx|z*yW~#^AS6>iIQVg~Ri0N$&CCIP#{D#5@yxg7E4!3df-h0)6A|VDk3))mo|zDA
z4^eJb+vXHU6%9r@4-L`E<W~{GxvTSKTkT7{Ad4)*bCZdM;^9+G6XcWeRWwo$;h}-C
zO*7WB!1%cm4Y=y%TxIOa&af}z9}QJZAg^zQ%r_3knQX9!IBJattp9s|OEWu2ARV_m
z8#O=m7<{c<@f9nL*)G=EX5|nC5Y~m|7b9^4{@H#S4I`CXI@sS6aLip0M;U(gA(pq2
zQ(P5r9f;s)UD^W0qu1`R07SBjl*6#6E@7ajo-?r>=dIWKY))|Z^y2{oFP_5ZT_&gQ
z{#jl5Xj9-V;QMzP?V3+PFV{ta4HD8(CrmyUI6*wOKkE~2UzFF9<8bw(HS;GNWs|vl
zcgx4!^basTfJL)?Yyxrf{4fOXA5a-O!+L8mH<VVPFUNL%Y0ihdJ$d8U2<|RS&vt(C
zjHoDMt{cU&-X-}m+GaR1C{UDUx%Ft~@`&Rwv9Q<m(kl)V2?_W|K*3W6#C6*0mNGn;
zhW)8D9HZ=Dn=aL0ayN;wd=vD!Byn+CQ?^W7o`99ZH<H&y+^NzXYphze;ng^)&KHp8
za2rJfB?8>;|HSz2<SM`JCBKc)s?o2hBP$S1)-Tvj)C3%%v_4Iyu$X+KV0eFqcRBM@
z<z1Cx&^-x{)38*9A6qTNwv57-v#iI}YDh`B3wQ8$%|nXc?Kkq>AHKL+J>Qxy%{XN)
z8OIHh(5tMs5fKpyi>#>T2{PRL+i_{_*WU29^|Z!R{u!}=i0@CA#~uGuUM}ougBayx
zCT_DJMjT0hqW@fz5^S-=IrLSp(cZvErZpBN&?}(P7`GM~0M-MD&Eo`)g`Do`^*%nF
zAdD(wz=#y{TH71=^g1KOh%hVoWwcM^DYh?N`_~ZvBvTRWsnKMkbi;>QC!MLWLX7^R
z|IMD6vD{zk3e|cK)lkmWG)>gQsY#RA^QS-2&xi*Y>mXv1#~%XU9`+g)dM@%MvmLMH
z+Wc1oUV1!*uSeStNIE2EsJw9Y153%<_b7fYM9B*Y=QnaCcR~p<RW))&H|}$q(^Va@
zR5c>hqMpXB9h`YI<?8rcCS=Vki3cXBw>&YmmQUm-M)Csi3SaC}g9>E<tUtXhHN;~5
zb2K4B4vaR6#b(=>CZ3zG$+EHj?gpK13yoEayHh6<FT6{kRFc}`i|i|2BX?QXm*lSR
zOZ4Ad81yFSEH4{K@mWy{bO$$(#LbtB35b6BTjraoAeJqGCknz6VPk>k0X4*n-dd&w
zf1s};Yfw6P;Gg5a2nz!EL+C~eB|UN6F@E-SB{Lw$(gN{x>pqX`ojS?Lguh4|`}?7~
z5thhIOBvus-i1G*|IY;w=z-7?nZ!xiMRHwR02I{ucNv(5<iW-H`}>}H>GV<i+IGZ)
zK(L#VrwkDJqATivT~Gfo{Dq1WerR&?3sa`gsIy&_5y%puXO(HqeW*co-bfU{46U=y
zNx}BX|HNu+41jva1!oPj7wpls0Nbq;8)%~P(VVP3W6DQF@T0*DeQw-0LRrta=t)`5
zhbSPJ96#)H#y1x!?oilR+E9ZZuJ_L9*F&BLPa-i}j%<$68buo(IWO&%lDD2Ms*n(0
zvnt8m4TE5;@hz_-{fSX(??jhNvDuWixcepV^}dnc`w>v9&JL+uvfU0_QmJ46Y}7bA
zd%%{10u6mQK{(Q;l!ynw>%Dqum~k>ofE31S{;lP}fR5bwQjTJJ42$ROHTP1JbJoXd
z-QoF4y@K3sxS;PVm@3q?G*+h{;9>iq4g4ITtRUbKIg{rxGJnbB7(!ZGv31URzj{<w
z=O+FvvZeSITDI^bY^KL7(z`6gHN`B<kth`yh$6vj$PH>m4{K6P&N=QW(4Vw^61U2r
zW!FgrCQcT?cT++~IaDC?O~zv=dose8Y@e!%y_p@yU$s6WdLnbeUR^fDP;D7?W`nyx
zkWd!OFm%vBIvqUzK24VDCqyrYKF!|b<dZCMwc3qa_ferG;IMzLrQoW4^3pRx1QaW@
zX>nXksL4e@%`Mq{1zBGoLu3~<-w|HOXZ$r)gTgR&lw^$qqs4W7lariRE;o74grlvM
zBmXr0du6oackh!AgwL6|qlpS8-~*e5T1FvB)VARu5NSmlr7cN`c4Ec$DwL5nJ3VHL
z+m{QY8wn{vqrQ*t2ir#BHa?8<syD2k`8>#K+5=D>$&FW}^{HvAKd5B+=x$j0g~B0i
znUirN_(FGzSNXTGL!wY^&JK#Yxj?+=6Tz=@rd|%JsN?{=%=_v0v)<KwfYCl$s~+<S
zu6P^7HN$-=_$q@=<(MX&@vpNbzEnqoon2%G{ZczzQV1XDOv`bfaZ^rqR*2aw))~(I
zI7T*nul8)U5@zMCuRrElLl7<q%+WV7T!EoFklJARIiZttq#-KjVNtN-^WJ27Q+hdJ
za#f?(qk}l7RhMP!O<Mm_#M^Z*0~w*{jnb&_-$db<jHWv|5SxWPQI(oFqB5Xu@h?)=
za!lxX*u`fZrNgG7J>|HGazBG&Nw50q72a^Lc&kBzd#0;tRp)Ly>AVcT)%CH*A1TKX
z?`B&{_kKgf9*q#wPh|j|h{JN}XG4?yw8T<_Px3G1ok-@<qj23%zklWFwf1O7ZB=A-
z?Wow!pb|HYLE%YZEwpe9RCq$5$K!&m4pVIl?b}CRPkkPl>b=+77TqnnVf@(6ZnyQ;
zeF)hGh=XnX^e8jN<<Sd-RWH+Q$X_MG%wT5J>;`(5|7e=U_HCbcuz^zgqONiy`1&Y#
zdj8pQT%$~RTta}ow-rgQlYLcBaR2@nmEzK-BKDF$(G!eLhVxZOMDAX(0mu5rYfCiE
z9LGzv$TVOb5QmsRrRWk2Y)AG(0iYCZFDy1%r$PFi`-5~hbGGMGNohd&@CN5R>lNks
zb|U`>k{wadb0K<-oq_QN4kkWPdlp5A0l06YFNCN|R$r!@W;wH-P6&3`tj+0Q6Bvxq
ziUc4a-Ff+#9wEaEFVcC1p9x2BIis*JKc^5FelFvLF$dG13z<O61pJL`!<Q*73d0Ho
z%=z9@@!D?(l4V$}cD7vkkSx1*2aOqa+AR<(?*x!}M$ePHtqCsM6CN(qd@k|}>2tZ<
zmri@cQPsbOT0Q-FEw@C+I#mB+G4Yf|yXybAsSd{YHVPwoM_faPQw2#tytN<2ux5Oz
zQ;(MR8*J*liPC>>1TgYHCks*bQ8V#Fx|Ey6!#lqrEC%FkF1=kw%Zjfz2lhjYBkDDn
z8PeBf9H|_yM}rtkNp-={LXe1Q8|P`GQvqW>9T6DQ{9Yo|CzbE+sp+gK)t=L)f5Q<-
zFNMyWtsIt+okxmV+IE?j_425?#FPPaA|KvDg%{=BPk!)udh<~*iFRCvzM4^5X|JTc
zn;KWOFk`V}F&}ytN~-P*0;PM`4|odC0$zHGgm?kmdLf#LsZc5Qdf=e~#N=fi4a~iP
z=Dk5)e#ytG@MhsDMARSt)e_I5`*0H&r1lt#RNJU*=04g7+P6J#uigHvVmfx?(?dXi
zPAcfY^qGdMebhqOm4`cw8NdPh%i~R*fcGP=)rB1=G?Pe9otnW>x>T4OYI|DF*)#vY
zP%t$KKKKyjJl4Em9m2{(S&<JQIB2`!q(<mPxvEs~HOY=t30mSvBVai1_5@4e)AKHQ
zP*LD9L7t)l>Axq&<R9vBFi16k#<!9bh(dSQX$&DOcalbCwMqcB*JgxYv=3+1@M6YS
z?620+&LVdo<qwxs1-)eg6E9c=s>V_j8YT^1<TB6LX@_vXY-N$0A({6c*N98&b|b!K
z_`3Drvqd!_9y<2*B6DaegJ__jSO=8R*3=$0d~X8HMu(qod>^7dHcHYU<jQtU*uYed
zRm-cEOlrREs((4hfP7F)8{HoLl`wuCyty_MJn2UAK|>ww&boLyh`!5lkTYwe4Zt-f
z5rT&8Ajn(t*b=-&|FE%Ia{pn&kr}5niV(Y)^|B-`IuERH6{UJOtR58ag7^E+;*FFO
z7R#rjejcLFgd=uItf8UvogQgXFSlHAyb86dtj~h4e}=;Qx$?~eRymGqa!&7Q@%Kb!
zB;S=rDeWe_qR*CsExVsn5KZ9r_y0rFRVF5tN7Cc`sI}hV&}DZ_it={R6I+cL{X}s}
z%?z_rsczbL%=uZ@O9bR8Y>77<bcJL6eKh(Mb6reE%Ew{j*j?Yz(fa7J0?G$}Awkex
z<$$6gBZSbq{m%AmA(h(_OL=Bo$N6i9p`(v4i@9IOG|y%Dg$%YTr^r4VI!gPw)n)Gz
zo*SP#>Z?M8acC#v-^&Z>EWi(FfhydOfiCB@D~^Db4VBfAXo!5yxA}{D^z8BRhdVOn
z-$^Z6p}mr^NdJiRP+3~m@7SiNX-(peh<p3lr8;DV;N=;Lcn?av1B?||3LNQH=&jGs
z+Cz#h@j)yIc~l+#D&f)VicbU$R^*C~h?*xKRCAsQx^${qhUV`fMOJhE`nKCMN0LPf
z0X#0O@{vzflQS#?R_!7eqCt%z@&q;`to<8=-5(WY;DtcX?}ktd+oS?uX*IQ_4O~N+
zx~5q!<d1Y!3pBxzH%C>r02tw=`hYKl)!*1+!dTbakoFzuhO!ca(pA5x^=$U7CqDU9
zkzV$l_O&h*7m2CRFn=h12672$OZo(sjl`lh4h_sTu5={mm5c`PqP7kPK0@i1QhR`2
zVM(zL_fw2Akzx}=?2KQFFyrheEtNhFQXcV;F9y^MQ1wF&LYF}SFq+qU^cD`M4oyuS
zQIiTBKZH47^@51N=)311jxe-c?!xWZbe(z|mHv_j?){5l+iX)f{aM~aw+$3ojLN@<
z6(F3hA$-9;FCS9A{Q2d7)ZFXr=SJpWOe-+7?_$by<)_{N7EeLhzyHAA-`y*bo<R#9
zcvgrYZsCXf?Nv###81cbbkZ9)pR$wUVBLuUAR$p7u&A;<EA-Z@jxvzymjaiFDAJlu
zfNcO0p{SJSv3##kF3QB79$L>QEWE1>TfD2EVZVWm#`h*jTl}b4qYf_dntWi6{^sb2
z7)Nx>bjRJ#r@s5#(_SuHnys*=;dT^G%1H>MQcz*&;NLBV$?KLm?V?r-o^rND$=zIq
z#sVOhb5MG#bykI8^Xm6Wt;#usr8cvy2>M~Q(V-3m$BsF6H>o4|P!N>_^XFkoU1zI<
zU=R?KhHl`4m{#nggMwJPAJqbt!cuBWnf1-F`e}px1?A9+5YJ%E@2vqA^0knED*ONH
z?tyG*e#nq$60;2Af1!wG9OUK3#nYW*2R9Uh{f(HY>W<RLSbH|IwPM)hU(|Uh0faqi
zZTofN%Kk{=`m<=D_b7nCsePSNIW%c5lud!asgZM91T1Jmw8v;8Fou~@-tEbZKt0i8
z#uk8}7;LYB4!3cDcpM{R`a4UL79>LAN1F3ZS-+umlnFZ*(8;EeFWHRtqvmof2}P^9
zSnZo7>2GK;|2e-<pikn4O|xc8GQ0VV3=K2JER}}3z?3_f(<x5|j4|l)@@V}Uw4Rdd
z*2UOOE~*EH_eHFG<+_Tt!9^^=Qn+6DkHY`IzxT9xcB_;pZ=;2^y^Qz99jBTCEd!(e
zGq2`N8&PM>*1XHj;>q>Il;g`6$ddzkcFg~V=9wAd>N5F?(_}4Eu1*PgNk#f1Xct0V
zIq={0zL2RW!_QEJno@s_^{@GqK8MW$?nNEMszKE(adDN`?~YGpRSVbxOZKm$K)*tl
zigTf7ig*YY+X<AwxQ@u5?^K>B+hmWoA|Ey9vGi{+gMSL5IYsU9F>RzM851!@FtczP
zGYXqZ*dgtu^Eu2EMxcIs^@uvOCVF(LPKDAX#(;Dk-Y6tfVi1zN5|1}Hc3Gme8Z<q2
z`FpQC>JXB27Fb5tX21*ma`g3W%at&HLzSL%CQT$p<{$LE{bzjqyM=}5{9TdjG2Hi<
zd>&QdC<B`=Uyr$O4?{?Fb`J=m3(sG?Pyz6(?h5~t;G;qCnGbrpt#PyAWoDv9NOgtQ
zsjY1Obe9HjoJ;3@8*IhedlRgzxC1#u3DI#W>E<zS>-Iw<N`zq0R(UZSNa{6~ZWCs{
z&8!L@bf&-#mJgir3=D-Sr4H2i+FV%r&Pp`YExT649)9qn7hHako(2re3|257&$Y&!
z7+$$<_37;0dO$>VvAU`{Evue*q!I6#T0Z<PMk{~S<eV6Eiy{^~*e!C-jripiQ(UuO
zrYlLWRBm)p-!%gTpj`5mqDZmSaGR>Y8QFn=6O|CyEUY&4<L57Is&zlhN@Eexrq5#P
zzbol{5DG}e<H6%(GXnnrioYwAzd!4*Y(f@elouE11SPs{jgC^{%Lkl)H*FA(<=fw5
zKsbyODPQM1A9#Uf2a!G0?)SJnYcrI?fD{}I7}OuL0_V!ax;Z4}oiHIRBf4Z`ec~r0
zH1WJ;rO6tP5&M%y(v0w~<PbWE6!NLDQA%SJsOrAH&{c9Y3>s+>ES3S*i9v_;td$s2
zal&<nkm5vT9int#30KQ-zdEXo_+8Y?+Z4@2;aCrq5;clIM2RZOrU_9x9GGF-3QL`z
zL+D=M(KpR9>TF(lmb$Ec?`a-<TrJ)~ZnmEQaaxXp4yJ1?y4;pK`g<mUoK~w-vxeGC
z3L$Ffp9;A}ezu_?ahO-a=!5QsWMo1)-sQ@!PeBg+zkJlNy_ns2!|C$kc-m2Ld~qVJ
z_>^|5jBT&wbgrnQW!&%D{KEC8oBw~}s3EN%aqtgJ7wp_}cByLR)V&VkpTFlbe;@N0
ztjyn|_sgYw{MjgjPr$?!$L^Pa(_!DC8Mo^8Wr>0t(O#(b<S1=OZJXEP%phD3^cp@c
zKhP@FC%W&*%jU!@F-!NhM#m_aae|wEA%CbHLM&aWBfMWTaM2R1f=n6l@OI+sGjwaS
zYSQ)gwALmSB_o5*-Fg<9p(-PGrrcrmjaJ@n8M63TYOGqe>3V=9<{gApD5DFB>*Ulk
zy6uQxuJ?5V0|r=p;7Nu`N5v;f2$w!g84X%~)Po*j$1B%Ngqns>U^pe{shQo&i+AR>
zknhLh;$Wwzn6B3b73NLC5^^(YI?XbxIfvXm)#Bnb<*WW(#&Cc8=i4(M%M;H=&707&
zM(aN=ybQg4c4vI(2$4~D2}25twr^Q$t@eEhEbALS=;}D->K3{IQUT6^S)~#)Qhez9
z_p%jZ-_6o03j6|U)`%?=3^KPzwQO|Sl>_ssDt_eRm(mnK=@U)k>$Ny71ed9V!Qqoy
z%-LT3|NjKiUW0<%tz2_AjLsXMX<U)Y0g?C;=!)Y#P*9W%MK8?qdsfJcd_0=U4LX_c
zT0<d}tz)!a(pvgV`tsd-bH@fboyT)__GI4T&o;cA&D_M-KgGs)3k!`O%#sH*s&*SQ
zrtZeu?zFB3qsnEEW{Itub)$kh2SCU{<uj!$>elOl{*0f%=J;o49e&t74|i7zU5Pke
zmsE<2xiQ!a8!I6vkUm1(LEJrl$=mvgQtBT2FxClfn-MD6<Ec|o7t=}fJ^#x5-!TFv
zkMq?-A=+EB^2>H9?`g<z)AP}Vq;P2g^oh<txt#RK6Pu(77Yw@Wz2WqJBYbe(?vz%C
z^Ghw=j0;uA6AQdetG9so*zTp5I_#TdJptF|ziVrd9%iHS<5|NZv#PzJw*+b=bLAhd
zXc{2`fZMmaJK`y2voD=zbMWtApfNDOu|lK)fH+4h6{^&U6_=)^9HOC27f-&PkG2)A
za~-$k7v7oMypujBc$3ZiC%?HRMG_n*wBgaf-;_w<p|78O2pYLCDPo00N@tq1#gh~=
z>Lyp;Iwni5-p-hgm6PKFcy$j-JyMS>zlNw$Y2B}<bTS$B((*H+_w>5ZlV`pxeaUDT
zBG!)*tUU{@H(wB`_53n6|1>nb#MG%zgc@LCAv@Wgc{zU-Gm<X&(;l1R8iqbt0q+n>
zH=ZFk0|89j#uMXDjC#w6J(OgW(c?1I7@5RzklZEN->jU2GI({_tREe*aThb~Q|PMT
zx>itTzAH<x;ycSplIUvSB^gc3b*LwcR`}WHMYw_IfI{)@&o9=q2KVq6VeL-KA7i-R
z#6kXaL(76Xuol>ubpJ}o{<U!#!LwmQ4eab(8lH91k<c5E8vfu`?R*&Sn=x3C!7poX
zGs=0sgCiMM{a7g5&gj&^ZJXKtu;BHu@o`ehMItzE3m^9LRVKd;p=!LYECCi?aPfTg
zr(d5R{y=J|<`nR3mU`JOw+rqBV}HCKlr5@f8!7FnC=OPg-_;cYe+mko6n`suCzn7s
znqs>xGmU#vz~4gV_{XU$0r9g|>FYI4S>id3w7h15ODJbSQaCw?J;<~${2esE(+}!;
zL2GA0F@Gm4c<>k|yoIKG(S4uct5U$LzQV~tXY(b=cla2uJ#-pxuiDgML-rUd_1!w(
zJ2UwL_faB4@5sy$7rwWuHP?P#+@WudW;dhp^%EAXZZk&QMTL*=QY#bcQ+a1kW9y3O
z3Zi@zF0|R}D>?ALm>l91%B<e=(fs;}1HDIX08@#}a;OvcOK@mFcm27N$-8ybu;X4c
zzWC(UyWA$t2hjJy!-kojfidZ0Dgvf5bTSgWYtu5J>%^f+J@N?ccR3HY_-nkyA+tiR
zGHqPD7y#<<li|^WmyVjRp8g=XQk@Qu-6S#Ao0RP7Q4Vk9Bz|Y|?ZDkN<G%dED__o8
z=*O1S-0KHlcY_MSnaT$qMgap#KE9robyJrvdbS!+3Q`7Nzp=<Of*y6~ul24Y{`@Ae
z99TfDI1S}M75$@*<uj64arV?UO6}XfhA`&;6ooYhzzgkuNY_F%rGBuox(k%eGHg9=
ztiW9_^`u$vw4Oy`SB$*cE7O}&J^R|5xxQzzYYgY0jH6{=#7t;8Sku`RCY9s=4&#@|
zc&ZH=Pfn+Q`1K<=h=^UvaH!HF$08lb$fk!Rg80NelUi{Bf1O)UJwsecPEIxAHx0V^
z*72%4>{$r=tN#)#wOoRz;-g$AT&-AbciJg4s^6kwkpx@QPnx4t!Hg!0CcOOaW>?vv
zTucM<mp@t6k@jYmqR@aJp`|_lgq0zO-}8zxb<*SVA@Z7p9c*RjMPSn4t*;h4-1=MG
zgk6n$3~oYn1lhIx_JeXz(kaNJSuN!i*Vo|j{b^tW5ojW6%HJ%w>Q_^e>*JE-h(MQe
zXGYIi)kC@Uz>HCMivL^`qVs!`9Q~ns%cE%%w7}Mzv&vj$&4Gt+6G>%`;WekR1;P?_
z`K@m?k1z5|4)T4e6C}$v_dT1h0WhIh|Lq;!m*{?vp{S8t(v;ufb=w11uz6kbl@)uj
z%U+bNF@^D~8=**7OmLT~)6G*`j3DEh+r9DLkfL7TApOX@u=rvN>8&jt>7{&foFd?J
z7|ql?sg%j41Kpm&R1mA3sN5#M_677(phm0K!tj<C-Ah=%38{)XSWA|!<07sVjTE0e
zHjWG4wRN23>#Q%s0P5PeROsOKRZg;~4S42l9yQbAO4Tkz>_OL;Z^*S@Cup@VS23DI
z6m~;oaTuljVJrEH8HwLXU$EYcluYc9x|P5EY!R8nsnq8@il~Zt5!qWFkKXaJXPGO6
zL8fB8cf7w_j1-0#TDG_);q(6(20fvLtJ-A|+)R&`&{fj)m^|-QzuXy04D;R*)Hd0@
zNl%f`{_kBi9R+}n(PTqF7Ja%&SY23{D^CfDrX&?TqP+ARl5t)*_{FGYLO>DO!-deV
zP0jBtBb5<l>vP^#w>Kd@@Z+O{LI4ELt&w3qP>qjQ>M~a<h)_P31WPFjjos*dang18
zl#9l9{(GU$hJ+akr}4=<pgCh!?J~V89EQf*V4d%H^5WY6R@lpuR$7N?jcWfBIwPRs
z6VrRMM)w}7d5-^M>np?RT9U4DcLD@IKyVB0PS7C1f;+*2I|O%^;O-%~ySrO(hv4om
z-zN9Y%sY3!Upzb<&feW!U0t=RdMzI@+fkPL4R}1;5iXI%UI?-$n<IHTs`YYfon6nG
zj&OH)rM>cr3l<bzJXHP=rp<JI7WOd7-TDcN-pgj9zyger(7u?n^NT32i0bf@_Cyb6
zY@s34RoD$S&ECp5%;*9#p~Y_Yg&8GjR{F0Wasd{S9_N-IRUy6~;NT*XI*MtWGo_7W
zUbG#%4`MusK{C?pgS{W{(}tidS#k@9`v<H^yZUj-y3}E(p28gcNYIG95tpn+Q(3Y|
zczJ850mWV<?*b99Nhn<3CBf`$(+{}kL!k=aqc(yq6yMJIkcn@GyJWy)!=cKhze`)x
zkzJKtL?Pm%DH};UfV=McPAQ!bL8z4>8yhzeGNNHPJwvZxeOn%atQ-@aPSN$SHF(?M
zyX1kk_TgY=s8R;ssCRdQS?_e~_EScQHd!b~aY9pIq;&^W0w99IbB)8vyh=$ao*(v>
z#D&jI<-36dO9$+{)mHq7?e3h7>1=H{(%!GnFlL~>n#Ee_^@^PH-B@bo>M^W?<@fEi
zpC*xPWP|z&No3W{mnu<y{+tcNve2lvEUDGY&E4Ztv79H>xIT7x*XDV1%uK;3=X|qC
z5N+i7DH<`pUT;>m=O7Uij++`g2L>q?UId2c2Hg*PTiC+-w>l^X(wjBGa*itH`Y;}o
zJdcLCfX%`&qRUDCWW`pK$;Dz+6H7J5eu+W{6UQ4YqU^xwE)Zes?B_2-QOh>7vp{pp
z^#uoJt1FrYt3%EtZvA>p%yTwX3L)azqa_mY(9q?#5r+cp!MI^U<?nu$M-}jHRQgM#
zo^l9(%x>)$o=`%>m9Jj~DfO`F3FWfi0w&NdBk+l_Q&IT`>&QCSRa_eZXE{4ztve|q
zxXNJF!<VL8<ln~Ob`^xO30krTbBz`;jbhbt*J^vowk%AQ++Rw<IiVO#G`|nB#2sg`
zNX9w+pN%$_Lie@8c96!56&|@G+FZ&<xLm7a3_389Q#fsbLQM>rz&d;!ELgk7sEF)0
z87z|Z=J)A`*)L<!0v`82izvv|Ahl_uS886o$O?ln$3|S`gIzV$S}cm1`JK}3Wv$9c
zMFr|s1D2aKz51WTLzY%4m8-pOm3I*y@kR{Gb20^=9|tIxpHnj>Bu~nKQY4|T;B=`B
zzPJa+$$ZgOzI1SmStSwD{`5nDu!xG7IBuz5N<I28AobWd=!^xy?Nm=!tV<%e$gkcw
z3=gAf^TvF!oRqVy+cO*i4~}xx_3~2^@7DrMS`<P72FBL2fDr1Gv><P<j>5Y}LZ0PX
zk-mt5&qS%zxJL_IMS%-zGm;N}^=DRP&7_x1S~lGfIhu-PV`>cw(CH)Rd_9!(c_oKR
z-rFW;l6%q9ADERv=NA@f8@B`JTPQ<e)%JUf^nGgVUOT~)3Q28_;lpYbfC{oI-JxQ|
zZbDfb!-cYmX$dbHV(><#EhU8>wXGDrWFm2^{nYd2aWcIYTM&gMrq-LqEcXYAeEr2(
ze;7L6#I_|*(q$j^Z2y4D5at?_g3F76m7F)=-7xy-r=*H76)03t?~A|d2*z$0EH|>i
zp$TGTk+88(!>2iI7dvAAeeCoKdrgaC*E*kyn|RHsni4>nRW@d_J@ee4_|8=7(1Spm
z#bKD9>lM^aO=kulz5(}-VoH<9K|5%wR*rHYu@DZeor{%DVHe#;P8ZvIyO=`#9t^FP
zm+v7sLvhuS_^fkzGJc$6I#nvzyNHU<ls{zR0#8~O8zjr`pC{c;xIz(BW~@}iwzmPI
zT=$}ZTX%!L{uTqV&o6{u7fYWWwg3#FtnJ)rFDZ^3R>}JA=;5TPwz<mM8)N^PS^gKN
z?TS##1Lq_kw^b(Mx8S0lK<W5F+ET_8!|D(YIOLih<l?=>+DCUYA*OLXUcnNoa$D6F
zixf=zaw4Jk9i33%hO^#Jqm$sF$i;N*$16wH;F!f9&@f<b_P0O_wN@F@2lJmx#2Zby
zrS{#WtE_al1l`A$oHEqyk(>;!p0j(-_Ydc7Z@b|sDV)RRPfl9zu>uJVL@7dq%=|lz
z869ukQzm)z7087}4mN{4SHdK+z&}Lezx2cmm14@6+Nx^cVS8Jjq2pbLsWg#T<AU!L
z<_U`oIVPM41cU;Lw?JGjXip|@F=73jiiwxqR5vl*grKD+kP{kRPZ%ZB*=GT2f@0JG
zm2=SKz+BEMeP<!iGj4N>o3m2k@YaGwkx1$#0`Y_AAJ?M@+GjMJXuIsEyAhZgzwG6R
zH6FoE`9M?@viI~w=&s^NZ)lQVM;2x>375R5f+Nuxw<G>+?p0!D6s6<bUxN?6Uc^Fd
z{ou?2TA~TK+&j_~V?SCU>&Y`ZepuKL`wFA~!HXChKNsr5H$l<FLQC@IZyj+EL+HhV
z<@`cXV5piDXkXSG7H_cn(;;EC+<qE|<`;=xCbF4k+kZyi3ewlG-YoBO-S&e&kFxB8
z_Bn@^fp)#UWipQ27~5O*Rjs7Iv})5)balc;=5|t?9)t`nlwd%oW(9NQX)zf+`WbWn
zeJeVwt>#s5o)pU4E)MTo!C}}thffKFPfT^Mve>U`!^?2G6JC3^TS>oaD1s-#B{nY^
z#6NeqIUbRo4C{bA?>8~YC-XY@ogb#&u<gj%oFQ80)vI+ZWhlGofG$ie6#YP9Si^`l
zNP=Iz?8&}t+V9g5DlfssceJ>fF8P#J>dhXnZ7)8D6$#1yF#nZ8mTf<At#9E~1mgpC
zjJ36|BG?SIL?>I=1b)Q8z?cwojzFzk7lCjDnO9ps@!2nehz3G;#72l-yccEIj)5o$
zp+3U-#;=3M<Z|YjjN*__mFmf!ptb<5@?=~uiQCpM)Q!n$+RUM1?qorHG3ZHfFQ*iB
ztwEDs+QbRR!FM<B_x=Z%YoVpxgkLh&aX|q-McCMsgi3yTdVDd`q6o+q_UB*BbC*~y
zWQQgo#mR6z&6@y&69t%sBuc1$Mj^)Gyo!PwwFG;8(ZEE0)eL?QWeEu`8t{fZ?;&=x
z+|?q_6lC4QlikRaFjX?sAfsf3F3x>I%rV-dG*?V}{qj7c5z(wCJ9dqmBToJEn1GY?
zQM^*Xx%2P_6qJuT+2_LK5IBxW2{wsu7C%<V=Y4q4R4w_@wgcJsYEp#`iprRl(Ri>u
zW+M$6acjioVly`cu^K(gs}?hgNfmTZ(}5fflK`*(`CH}Jq|lVp^$l`{((a(=24?dO
zQJgl2kJbmf=}CD)T+?~N^g=<#737{}n8Npkg5!KuRqBjye&UO@ViE_9d9n3^ppsL+
z8vDyT?pLR(F!{Yj>NbX>ukY}(V|~+$cm|N`L=$1sk@^SBaGL_e(li;LwPHH?0<A}x
zb)HP>D~nMB1TjCX+25IR0qMRNoosCS{;F}$Ya9iLDBq(C8txVw+CPP0F@y?U-qi11
zqkVURd*qT~k-?_Y0S%!k(jk1qMt)f?cz#Nw<}dmUMYmLdi{niBUf;$g>DxuLc%d)q
zy@BNxAtJnw%p^=PRFDAL$Bdx)HYb_-xO;Q%?P>)0tWx4??`dm4zZn`)v|F2Wb;RbY
zd1F~Lmv8$@xI9#24a{p4XDK(Ub`|74I|ay=s<>!i=d}AV-fnR9mW*>hRPdWLx5Krd
zAGTnDTNO}*#i;#)752ZyYRvj)b)$=v<T-Ph$Qrq&Bl#PhmvW@zzZHWsaF}}ykWoe;
zg46vlZJGZ}$F2~g!9yFXXk40)i(K0vYD4+<9X4&WW<R_4RxcM;DR&_i_FgF_M;)%2
zPmVuLV(GIW;Uv%CK(;<L-=_sA4O1CrAo4U3T2oT<4@vg7G%5;&QK|gb)_sDjRwkYP
zATuFHZR7jazcg7~07B+RV6Mx@DdhvQMm%l%Y}IcxUCiV&-5;r@hT%IP=8cu#cJfI;
zB6&y}P(BKb2{5j@Z@>>IK-4MzhDPJ9;79OlGH7B=NYj5BC2UmBIMK8~0}qi+pNe}d
zVOSA#Po-7uBf^poG7wyXMmTYENGIa==!9<iTBZ+{L<{F7`2`+=pFi&mNn$<t0fHaV
zxU~LbJ;G(%!UoLqkE=$(DG*FAA71%6tj=Th<8MU9`mZ>5cyrN$$=YzZb5((tN=$lz
z2x!C%+J|&F_cy!8#ZuN)pa{r4${o{QgeCr<JFgnZy^qwXIcZ<YbyF)G*P2^(^D2Iv
zW>(FdE|OlQ-F-VXiGKIf+W*QUHvvGI!0eU25Zwa8adgm&h=$e==1*Cq?z+WKfZrPz
zMH`=vi7_BoC@&GTb=yq-AcBdDZ65IFd_fKe>j0@Ke=QN+je<$(a`%Zdr*$F%|9HPx
zV?lP{csz9(v&br_n?FQa;rM{E^FX{`S}x=7mnLO4&>U6b@l?;P3lC1cmG(h;YyL_B
zjRka;;&>91mmCLy!EZ2SVm#QUz9_XXqe;8J=<f3o<%CgvQ<DdD0OkG7Vw7OMPzBsD
zVYhIPfci)Yj^yecwQ%rvFE?n?4&W3w2^oAee_udviDkxDZvUGife`!#X0(igk^!Y#
z4NJA0p~Jt+_!2Y<&G5$XXfD^AXkcyQH{-Zhvo>EETE|T+ET!ytW}4bD%Zr0jR+h%j
z$Alx_%Opa3{>`7x-u1%YV9SGGNX8q&3*N_yc{Vu|9ed__1gU0awQTE+;Kx!TCNRVv
z(bf&MS3r_)hsY`9q6E||0=qhy2m&h)E2fQ0r%?7YSG2cawaVXkNir;i>iG69<O{kM
z*Ge93e=c#g?GC!`2RGd@ZK>>wEeqsRI1>NjjXJ>F3E^qfhDBpDC4|=u=$-~f3OHI~
zX(^isT3geuHWHrm*!0We5MWe*XL)g}_g34Vfz62_`3y0ZC<?$L`gp%Qm(s3=6LQKA
zvPFRTz)}N=!`$9}4}xzZbakX|V3v<W`AVZlzD}xf*QgeQWrxtnCKyq7dLo-%_NF#T
zp<%+?nX<C3LmiJ7x1D@J4R|EUHW&2wF$x+>K_lf~e~Bfv=;vYLTDxaPw3u0dsrB;t
zdQfT&B!g*pvGVjX%OEyt_mDz}Vhm3jgu+cImIR_9wNuq;+?e}VE1)J($i~L^8yC&?
zzj*AC?-gsJg~Bg=NJI=GOzperaiH>fHqhSqQf2-EzQ<!CuLOt8^r9#Y6)xnU_$g`3
zv@wgVXhy>2LxbVXNObIV^ihK1GS|avAS46hE#ih~bWQw4T1q&C_hOjklg)1{<~4PZ
zKhtlr0Vn8+QrKQ@HccZFHzylVP}V>xF4MgCX_~j+nuB~i_$(P(G~<O)yLq#JYjeHJ
z&pyz`reZ%MW8V)1M@hSDNCk@MsQ6CaIH_H@eZ4bfk?qUNWzo3AVOdO;AA}@6h4uTe
zK?*lV4fDRRf%`S*-G-2iQ0^434FS3EW&H$&4oNwDXh}d+4e|%OfT9gWrxCrH;chfv
z+l3bi=&!=-@^Z8qzeVd7)z#3c0jr<(G3t&%#-GB_E91>S!#*Zt={0I=Pxg+DBeQ+@
zlXd)tMYTP{<wPY#&eil?ko>8>1*)$$O?xM2PBWYe;Hmso0v4t8mS}De<{Og=u7#a?
z5-n)%3O@XHtL`CkayNA+wB97>9OX!jK$=M@b_*6EdpK?|#P%Kbc8SNa*sziPA*ZJ&
zuKfslV!e12AovWsWJTuXlFUaUKE6+w&dLd!x^PPfEfVK=k|W1Uv}+BaDsnuGg6ID6
zLoP$RtW(JVWSx+l<OgGA5$3ow$@MA0^XWim=-{N8;a3}{))#lXcxeA-@^?odAb5Za
z6wKp)L-%0a(EJoyXSl!oYt!?o?1lXHP@U;7q|t;3F3Rj!Q6}>CSH`oFtNCCzvHKS7
zY~Gu%L=voN+8FOqiQOR>Fb<<SSEH76(Zp8uRqkxC*4*HjbJ<m`9dy}nnL0ux(C$O;
zJ0CNC`#|q^OK~sqeWFkV>rQAK*l*`~Nc(knv5?wuzIe0h#DL^^HvEg3fss*FD~;c7
zCFA+J?tJh^6(A~{9=r2p#MTla6<-=r;x@dPqCJ>h&lFrmH~0bk2>EDd#QFjmmR6Ix
zAe0kvN=p%cE&-r0{6u_Yfb>{@Z|B$Q3%Mh*d1hdp!-eMhP4UsK1Oe&gylGWBFQNz4
z^HwCOP*@>1!Mv;*?f`lFYmRtieB>3Z?&6?D3<tlQt!>i>RmS3mSGWBJ{Z{jr5#h?`
zcSZbK<fcFOm_I49CH0TL5g%MI{F54Vk$6E{2x#RIahb&yD`Z@6ncatvdCG_uuB+>_
zxj}(`7DvD$CLx>AMCoX=VFex4D0CV*A<*G>V)gQ~c0tc$1i6f>S1DFxuS#+uh&qpT
z2q!$BsY(V*!_KSK%{pcAWjRmTqgW&8L&vj``#0lSJ`=3@nM+t8Jk0pf_Q5VX=G>!^
z3ikvp5V_^J;veupBy3>EmVrzC7)c}nRK6{W^QR76$ka{NwpVo&XNTo~#c-^;D`K})
zsVeZ~N-f&kWfjb->Br$hjG%!tFBIRJG`!iu8HgQFOvTk;@#|>(`e&3?;vhwtLA5#c
z!in<)tCdYSgVDHZw-F)&$aWHI?GmUER<hoBzM{?P`KmN!$W3%<Sh!O`WL*K7p2Ed6
z4ppt{kd}{?1{%F88oG1uMHwJer=o-mC+;0$3N0Cy%oV1Qsqmz_dreN)C<|Q_@UMCX
zSHClAaD0ufzvUd*ODORs=_-nP=5*tDHPcKAC|Q7NrzWE$&fkhYmS~=DlV|lV;&Sp*
z_20(;F+}3n_nJ)koQ|@^@`)t#o6%#}<q)$AkzUtBbdWZ<DQktHgbCITvs`x(qR>gH
zmf?MW^!ZX3>cDubyOqY<c0M0fIC}M^Eht7Gs$_?7V*mbclwg}0h}iuKHSu^nmZ`i~
zQ;IQ~(umRdE5CyxCe}LmN<1X(Sks2uo*#9#E^f!Rgu<ua>o35))U@EgratoKPz<SM
zF-JvpL*_3#Y{4ZVaXV}$*TYFH(1`zrRYx$r?HZX|tk;F_?#4VBcGyf7Ify+}k7vDn
z64N#Q?9w$AG%7`uhl!ZH^O)Y#-OTI>RF6|gTmg^A5~b;Pk-^TPF!CRaD73rC!v&l4
z_Yk;T%Ox;kFmv6%xK({MiTO2(X9UM814ScO6uDGba=v%MA9vohbq<Ka3<6pP6sodn
z|8fScaJtiLzwpb{n^YnQ=xx=Ig~@(%==c@yyp9G3%DPVN2RKOQ`BbDK^Cp4O^KOXQ
zVu2NBs*2%?b;~_R*aU113i&)HtHT8ipS^UM>TdCTD>c7Da!BI4-;5YW^7*^!T3m?m
z2rsb!hM7bp=@l)y3!R6LgP}B=S!$?U7i`D0|5{HZ@N~9cQ-O^i6))*$S?wuV+li^M
zT>QljIjaAhJO%LJm6;&s$FpB@MphG_Tz0bpH-jnDqh?5iWX-wx6>7!9$Gto;p6QmG
zoD$dvEDXo4`6_L;#JD_m{qlb_fCi`sCTS|RgQ}yMb!TJ&S6LtqrKC&6qeg*`Z4q@>
zHkJSoZc6Egin<(|>)3HT5sai+{GDF3qn*N`;S{?+Tq}G#&n;eTRy#*TE$l}l+oNHR
zni&iE6XCIu2oC-tZE+gbZWY%4RQK`?3-`F;M%x9@LnN2hqRcK4{SX!~F2wZ{vi|El
zv&-*r4#S>8tjSWvWc!0v8JMs=#wRgAO6Ph4eSoEU^|}uD(kT>hh0pO=34<y!p-m2V
z*wk~{psl_kBi$G8QG1KwM5dS+{du4|ntx>UX9r&huleNDF99r7ZlkFjPNm(N%~Zcw
z*H-6*Tw)eWQmQ4T%(T5!t$-|ZEdUPm9<AFBs3TSycEPw?#A2I~T$T5_Hk`CRWV5e1
zD<L3<U8>1YSGhkp-W^tr8BSz>sHF6athQKHsdW7!*>{MvH=gHPJ!Zy8$QmIc_3$Qq
zOSj{jrL+HBLVzF?nV?r+C8m+>;W!hQinC?}Auq*;hsge{mcT6~8-M$;JqAol*;vW%
z6q4H7>D86WKjDZh%p3oTlq12q*H72GfO*U4ZvslB57)<W{K>)kqHP|`!ir@(h5i;&
zu}MN4yoHW1BA`Yzkb_YL0um4o$4@WT4kTMF=AGW!?9DgT*^Q-fJD52fChYFtZLNrw
zj0@hp)hx!BPvfv$q8dtIOt4t28`vBC6_c8LxI`VJs4lIaGJ~;5qoV&?z40c#;=VLP
zqq{n&m#K~)7vfWRJ9&+Ypem>5v5#BX#>M=F?e!GyPbxlgEOIQ{{Kx8QGhD`}D?PLW
ze-e=Z3DglA8F@8nOswf&UEIchR;PtjusI-(_H*N*u{oQ>X0SnDt~k&=R3K+HFuMDW
z@YjN5pX2@H9Li4`-l+8PSECZ8gxHy0_$lh|pED>BiJcKkDx;O;c^mb0sYU~3Z$~yM
ziCMoJPDuAHn^|lq)7vx&&0}RHL}ZUO`LrR2@tc!X#z0osa~tIt6e3<Ke}8}5&3<(1
z30;0=oT5#iUfVT)L2tDst>l~;DMQlsM9jBuI)4s-^3PGlj3Bk6I#@FEgV3foP?wUv
zO4-U{V5b;u5H{RLCL*pMy+@n-WT$<Ro|a}|iQynNkMegF^AzrMILM)^(cxezw5J5}
zet2FugA)C1^W3=XZ=UX+-iFx3+#Y+zr*N~0PV8FV_-jizQ3QyDSaT4alIe92&B~R7
z%CEI}B~5I+5ZO0F@K~fLljhAS>YT`c_DM^5>e19s#VXY~Gi+gzT|Yj660gc$(4T>x
zKJHg?S1d6+CF|}(4<Zhm*JjUn*Wn4AFqm}we3kJ~zD$aynXpR9C)5&A0SH+W`RMoT
z>@&egx$l0*#U{S9SgegxLZ18Z2yGV$ARD@TtglDVnk;F%@HD(u%~GR7(dN$15L1mM
zCqNPAR?**cvAuKuZ9qSW->b>#Y0NKxhfBhdK_rt1UGQtYw14N=Peq&t)g`G`jQ8=-
z^bmb9Eyc!T=`krO_|ujc>$(>4-tZe68%voQ3ys!_q};Vf<FQP{-%h<#6^)`HCcZtM
z_2mF!iHLvU#;=f&i7lLN(s-5#>`mjtag$c_dp{T`Sib;8EG*mfX*sRa^P)^T`&Xat
z-7f;x<a7&-sBxV4$Sf;B#(Mhz#?X-4V^Nx?hJZZcP@baLmUiG*N+*9ijN15jMf5M!
z>G%x<S{Q-M_u-+x9NGvnxE+GICD}^YJwDQY;GFKiz2V=h{pUyKI{N#ptaYYZ7FG-h
zZIk!WS<x`<vgWTA@AYRt|NUbG1KcjnB)*I2Da{ca{G>6N%@0iGKfeF3v3lPNdbOVc
zbLGI$7#tiN-&oBrSi_x-01kk%W}GD~LQvltsp#;A3rT{)+}Zz%Xa9bgdP1mv&CjZ;
zyXj1lX)<d9ueB9xEZ`qY_4P8c;lNMW*P9H5eZ@Oh{s!6p94Y|T1`AGS6iL9fQ5h_c
zI+jGix`dML_?4AZmkBT1MyW&&#XECOw-l3|`tQ&G{bL^z+|Pe-Q0lYtsh#_jg~MBj
z2_G+b<O$}OnMiXqxL%X@<^krJ6$1bLUw?ixk%#(dVj}Nca^5QnGMUiT7cq$NOMA_E
z|NFzqm=F}KtUo3!zqr@vMvZ)JFKPPkDFuETe}@Llz9f<_TXritT%)XfU5`nDm0t<}
ze{AR9U)xEhD=gxy`PJNy3~iqV{ocvXX)M|5e-<i0@cV~$zW@pz)|v7}A>akQ`gMi7
zjxtUA@cyx+!1LwZfUy+tsni<#k?3}S$iBA!iK+h}>i=GTG%UEpaWt$hlQg(MFKAz+
zzz_?Te~c9vd8Xd0A?cmfEa1a?XC6Swl<P)?v!Xew|KFix6M)-Igr9@g9xr16v$KTp
z)lvQ(2+ck%$nRPm|G!uE&uj+4052F6@Tr<#Gf=SLLze^39L)dy!hcP<H;fQ4Xc+Hl
z8Vdxt+qcNA^xORF(dAD6pU>i<09J*EqEXZk{W|4|Cz@oa0ck7$yMD+J^eHlOB{`o0
z+wU%Ri~ugb^ZlYSsUNawn@y`vrQN-~jUJ@Te(J1HJpmgV`gfb(<qUu2%P_lMnz(F6
zi)W({A4L7%EfgTw1wzvtH%nwuEeQ}bd|gh%NS!LnCqP1D%j$XCD!05`zR`Y<)cyW4
z+U=x;gN`Bysb03bySu+96vyc17`TcS$~Xu}tmNh9cKZdC7tD+Of5x{T;ng5JMaaUF
z9SpL*K2+oSc3ZBbqQYIFcYQcNO^^74*)0^N7<YRtgArh#w(U#jvdh2c`~x2Rk9}IZ
z0ZVV~b~`^29wZ2$y6+en$7;YP^kz%7Dh>J~_ObmNWp8z(C}mTl{1I`u5n-=Qrwf&@
zn65kiXF7qETDu0Uef|2hDhD6kJ1h(-iPcoW0WpG*heA4m!NJpD0<GHYbOvc>H0?VO
zt8vZ3JARau{E1ClNLz{e&sQUD*Pj{qPU&ylzYt$oNaHjN=q#AK1sxf~i4p>qCAu8N
zo`I5=pFdcx*Y%E`e#8MU0nQKRMFi~)-W+&^w>vhYHXROwrgfh+T?eS-pWaRgN;Zvq
z3%j89>-@%&gYW9}Wzx<Fkb@%h0Vj#HnwpwS(}JT2s1PuDlEOfaMxMYZ!P;OZgWmcG
zQX&FQYr$7_$7d8QJnOXfeZ3AJ=wmks5y#^tH9$vx^SSoFT8CaYINDl6bmn?DqyhTD
zT8FPfO1-w>2U;pBv=x_QUfazea5Feo=~u4<_+P#>Svk3cU`$FCryyde4Mq?%lt0Xr
zk&@}8UN*C0`4_?5pvcHF{uTazjtPYJF=f;Tdn}2AhSw@SKE4sqkZX&lryt1Z>s(2}
zd39E0XAzAn6z|?ithT!60oSEVt+uwdDm|WD6DpahSWn4?KsF_(LL}(a6dx1O91>Ln
z|F!-8u6v+@Lj+V&ZTUl3;f5y4E9w!qW%hWej@1G}82QT<O(ba3ubyPO3;!ui<m2vK
zMNSy8z=}gWJ}-qC9D-1mcM2cJ^VU#8(^Eg|M2Q9mu%vRAzJ`CD=dXp8KaVS5fv~Z$
z5sqg;7>iNuJ1_jXrZ2?%9$_p?Qc`jfVCzkGtUC%2RC?WBN~l&By98z|!oD0<UBwna
z42<#7DmbsJHyl4L53=Ai$9vIFAm0UK)bb}}_|GHgA$X-7cgH(|k>FrGglLz};Lr_!
z)H|PLKO`HBB$E&*)Rr`WfCt#&?ol06>I*qK)*|6DcVES@isqJgi;v=1KGLcbTMNAT
z`n#9-WBA@p)jvHE7!(>#zij|H9ds6WD0D{4u*K918m{m%g>{2qZn-`j>*v??E+r#2
zdfFB{_J_2*-lXRTG(``{JriPMIYVLC-%(IB)}tgPC4CC;ap?Qk?EIOeOn!7-p&<<l
z5N~-V7K0HvF7+cR&O?pm@&cdTjIl;Bg9s=F*oq`EVnYk+WDvJ)$oTBV3#bt(?s|H9
zSI-5*kMHH-Ah;Y4RdF(ZxWfLAZ}0=HEmJ;z!7dL833<#oPTTpY>2w#-$&{-L6cJgC
zU*CK*hxmj04Tt>(gM9ruW>nwm=@ZW?32PWWM?~cRgbnzl?LOGp6>rj+Dq^>maTr-o
zImS{|h0sKXLrBI`U(Xe;NRQYn!kb`#u}kTOhKk`f93a1lZf@qKWWTil!qERV_9;Iw
zM0G>1oHguE%E}HhsW5&p5Rr;=3H2z3#jkVwuQxPumy?jN-lLJ!P*Xg^rMX21{`lYD
zv;?HJ_`$!{GKkfNJ8frhp2fUQPjGQ@pJ@T0Bbgqew>J4`TwJHGp(BU=`#y8^DIuff
z<4OyuJ@LaoBLV>0Q&5P}#XUe&L2iXwrrP-ZJMDw-%jgQS_jU*ndyF`2=2Wk$(xG{h
z0Q3ZnM6c}7UeTi9wf}slDQxg!T%Ti10-XK)A^vU%#2W(j#fv$Q0Kw{4o2(AYy#f#~
z0Zm!ih|sPzl8zYf&TxU$8sF8if5c8m-qvuZyaQE+L-F)o?nk1qP%!!df1ri%&-x%B
zBnklIxCK0o_Ah$N$6Q=IUguM`#Us>zoH?27aOIgFGW)EdNqmOi7#94QLkiY8f*@h2
zTkyB+U+36DSU8@9d|}|h$^OUFI(%qvl7rHsXx^ebfeO3yoUO53Tty3FhZ@c%SrD7L
z|4j;kS^NV~pq=J$dmbGbVYB~lpM&JBAq<A@4PByAqON7f+X=~lwaspWOm{8LBEH7Z
z@}A!+;_dhmnRrA$Kv}*8TtZRM)TARPCqHJ<?itMc7Z<<@aHyL_l#9w_1Vatq67heV
zyMoWk0^HWLX>fLa&P=o!)a{vZo;NI*kI#nq08iOy8c);I4^f~0TAcP0Qo(@WG#)1@
zJ-w`=PL22F?Q8&-kVeT&1PfF)iuV^XR?T{Aq3zK$T7VHaRz`z;V0%O(w>Xz|A7+aC
z6{}oF2g!<;@$&%?0WU76b!HeI+hDNV`b}-g|2_Zw#J!*g9S&xcHAXAPCw|Bg4-5|@
zd3sr}K_!zwd}3s^CUd@XVjLP`Y@?$Lm1`tvE$Y#VnP-uPiNFQ9i(f`>PO)QTpfQ$U
zs7rpE+`5@lu^F-ER!u<mh7%X0j|22#Xyc4&wwC7Y6kHk=Xs+B}t|8_tTmuhPtF%Uy
zQXSGnofF^d`S9K>*)f|==E9xSv#tKe{Qzl*>L`PDvue3zyA(G&yNXyO5&ah~mmgy7
zqnPk;qIu)((4LRCHh0ry9^{^`TXMGBm$;_rzk~xm;*pY_;8Hi_+)Ji7Qb)h%pLq>$
z0GNkCtNGnS?e<VUd5Yl#Pw1xMgyfE;&|}1j=gWib7~jp*@A+by|5#;^7!>e)DvjE&
zHl?$tC`;@k7NmIM3-|UsaH47BUX?*^-5F2w8C=9qelusx9y3r$&%;Q2b9ujybd6qv
zWMCU*qCzY06d7JEO*8LA+P(9%Yt;yMzMK%>q7=9ra1ct*&Rd-MdmniBif2|=E1?i_
zZ|eKT#l<z$>vqG^GBPGq8ILt$o%dSh)vSGiTZ;#<Ue<S%l!!kWOIYQgtkX=F8*9)o
zBR)DcCt`NP9{@CkRW<g(G+FD9cNe2F8<Yai!QIti(Ke_N35<`Yl9FaAOT5M{R|~*Q
zTZXg)X|mDce#v>p%Z;a$i%r8O^5A!!=eD-k;^N{IB6FU9dod0X-L3%SO1B%!`GkxU
zpQsG^x)m1VQMj>^#5EDsyI~$iV$IVpR|_|QfsM1GttI!6<KW=EkRrm*OJZPPylaxi
z8Q7bVX}sAb0j?*1Pfbnzf}Y85<_BXr&e(Dp1JL0=`o61{jbeP<!ZA8G_@2^xSfv6y
zUGSHf;Ab+ah=l%70oPBCC97Ma0UX+%BFxOp$&O7W4u9LT3<fwICJ_Hp5_>*YVB*lw
z&}?4r{fa4`kGwZ@id#yxoK*QN_&YABTEVu{?VDz?bhLBA()7Cr!|>NKcrrSt({pMn
zpOf||HKhY17CI`>VhQv^N<6QVoi~J_2TMwhPU-=4F19aEH;5;2Zzj~Ug-zP!%z#MX
zd}+3g;izizwLN?+&phMMgplPR0f^UGp&)43Q)h{ToII`~zCErI54AV*x;#zK4u@xx
zl-F|q$x?z8pvskQPrFdJ$lQ;V5n&W8Zj^rkH@F{$+SB>+6d&v*JG#~3#fwXwdkY5G
zzRWgX=o?MZ;bq&~s@7%Wf#2?aa9HmPUu`+C+e#Xg`Y8`6-s{}KA{qhY@0Geo++0QR
z(trkS?6a$m^I=7w;o)3`tYH|t7pb<1?)y56MG86otK4pi?!lMa<(H`H(Y*<F*%@MB
z3)G9iDgB%~J@#y-C2qT{Sh{I<KM(bM=pp2;O6&b=lY(N<LC2kA9@i{tO^zjR%;nG5
z8=f{-CJb_QB9CKA`4{1kf)FX*iJntwEFybrh^$qsbHx>{$=d_a>0GrMzgC4XN<ojv
zkI}R=hpxJ|CkvdN^%*m(WbqHp<MK*M@1U%CY|iVy$<gD&$h=)*jjmO}1<b(^l!?Gf
z&Fp!7lrfN{6}aiP`jFmy+KCuF;b@-sSC%B011i_;fVk^n^jK#`-~3sAI^1$2ImVzi
zNzJE)F-70m?JtIl&GVCFd=m}iY!ck4K&afI*A<a=UR1XdgJ?Fu>hb7&2gvS8?`5A6
zWN&$(PY8?TCFeZe_6fv))^_`l&&%|o^|Ee^y<xx*`PF{<Mb<8)GlnWe#JBp!9#uDe
zI9cWhke3Ypjg-KB@KQy3xs80Ga=ST<7C%X+(-~J9SY}}%A1%fa&Z=w!i~-~&=-;Sr
z0f2HDFK2R<;`G_)Qx-SIu8ady58|vre+svmZRi*1Y`X=?DUZ8Wp6`M!Ft+?N+CcPd
zK@oppIF>lzmd9uCB};rp7n37C1zZmMQ;Wd4@u!;7juylW1!ND@yi&xUVoq^@UI|`)
zhY+B%%8&u$6Z_~4p-3hP8VK!cKz=*HR8xXdIuB*2N@>g!EJ{D1XqHVXrWzUmb|gC`
z86W&v$6Xn&nQ47J7$YOrno`z$=RH&>sbGkxN=Jz(Dg?cO#$bKYZ_Ps-2)8sPOpbrG
zxCVFuXHHq$%Ya<2;OBQQWn~`9Uu052X^VAM*ro@(Fn>a@x<Enc5$*{M$X*X|UtxY$
z(`-7eX4U7h*D8sUbI|1^vjUG`NapI(vlB+foK(K2jccys?}(a|Sa(`}Z3aq&$XVyn
z*odRe<Gz!4%crL4`bc*hK8S<uvN$7RhVSc&fkWd>fl`{^iVmDYrs&PMsyDu4RhkZb
z86Zrf6`@2{LCl_sUPx)I(I~;gh}l?XW4b}L+uBOdi6?$sgLNqCy8at;3X+17(7C(u
ze7UIv>fm?1B2}Bm>s`4H!oo_4JmOnkYCn*?DZ;?wtJB!hhhB?2wTB}Kb*z>m@x5lw
z+eyan7#K?7>mGY$LM1{25R)+s{l)g_0GF@#OH4xQAr}8;vNcZYz;Q6y#T=?5OLxbE
ztNzDn<7|bm_|`Wg!$RX~_vynph5Cm~%|_>+E8@+%i~MSQ#&M~f-&*ADbo;>PTg{pX
zrtChamlogHaeVQAJ&PXp2}@6!W{zV+Du2~Yr6Q`2&0uL5UQC87d{Xd`c3|xls@RWU
zyOMNB8t2&p(1Y2xGUaxELq4oRP%F;Ak=5$0vxex-5*ug8f%+(v_&~BDoG3N~ROC|;
zqq}4|6kzAKs9c$rZ~PF0rZA$hk>QZdXNsfaE0~zSEtE_2JV(@~P~9uXDK~ELe-v94
zkW#OcX+3_lDcN{eqS$m$E8Yq7xQo-;A}_YgqOg!(7Y76yS2JHF&d(#`hX4l1&EOLO
z5>wng+s~m*g$HGYg|-{L0EtHSsC#zaeMERFzvhC&M`h^*0@KCgdlyCIZe;#9#Pspx
zCk)ZRy~4qqRd=O(q@uR7h7MD!7h2^+jUUzVD<ZA~tuoLGs;X2#T3)AfLRbi1#WPt#
zPDv^K3RsAZTx9=@jf)!q;@I4lWSU=n<L#20Ww5>g{tz4)X?3pEhgF`ND@wzP=U`@5
zSZ(^N_hWg=W5Mzr46}gs*2Z-92Skp~lT&>hOiX8u=Adea`n1>N*<j2Bt#T&WGTKc<
zL#E|z(anSPR(-xHufu-q&>e8yPep=fv?Zq2VRxJ)`}1$JeOi?o&&S`yc?u<X@12ed
zX3Y_wTK>v5+K)i(cEeGv?wbR9zcy#B+Q`aUu9F{60|ml@j1#S&B7mDgffY3eGg64(
z)M0K=W*HY%AR(xw-c~)(=zWZ2pp62$Iu*X<st(Gj^!F5ovRyvUuwRTTxi%}k)@^<a
z%EEj0RR=M2s$eq1(X_za#FV;M<;B5>i-rN3QO{xgOX*Z`8(lpN4x1%Y6RN;RO-cC9
zT?f;z+>DkR9ni^H>9iV^Ry-ao#6?@r!mT7eUxA0k`*gmn0zyQVACFsZwAbTeY_D2j
z;2*BaJn8TDd7ehBJQM>^iB}9EY0pw>4f;@$_}pp_S6VbcUO>S+?nk=oV04oSF3UmR
z5lOk{i^rc5)y4LRY?RNT@HWW{kjgV#uL&mcx>VX9%p7q~cyZM@9;uV?KtK?5f@h1+
z$}|PdMU@trU{ZXH`jjK4Wk+a(Qc4Cvq~9rhUy~Ay3@m+2g0`z98kMu)@oL+P40P0@
z$o42PpVP4>H5FA<ut=bUz=%XQr|O?dY9>D#NMq!;8Tr+IYQr(^aS`52p54yq)u$`M
zGBQ$s7?1aLmdi9+_x2T_C}bw1OK^Tq>DE*p4Qee{r)jL^qM|t{zNNMnL1OvBT<I}7
zNi(-;otML(EDF^x1+5Vh#Tb*L%RJJqKdQ@_5Yb?)oj5&q>sjEX4q{8MjJRK33hj3C
z1jjn|&3BH|?8C}RGspAYHEvA5MmT?d`8la*`*;e^<+@g&$?4fKUFSaHSYtAdwG>uu
zKB|*&?V`FTJ@HIRK44_|3#iW-4V{me$^24au4H*v(^Z2F+Nn7TydjJi*-!SNnXix*
z-%DI(qJz2oUR%X@OmtMWApIj%HfH?Z%+sBxvn7GrhH=sZhnQ=<HNQ=bkGTw&v9(?`
zufAZYFB-zVUTHQE3OO}-`A1O~Wxi2ZY6&O(!<&=MSoVdLYlZA=gtxwWz*W7U3YuJU
zZiG3GxCsw#l?AFH)vecRgl~M6jDK2N&kEICnvf(d1UNQ^a|seh9`ca7u^&bM+WO&e
z^+N%n7Mt_YT6%Y?q^jC<wz>o#jn!@Q%G%qwA~%`MT%~^9BxaG_V&Pp7GX0hKL9{rL
zDQgzEKIC0Hp5Np6)w)%X5m3M$T1Je40!KhVjv~-Jye&!Ow8<vZiz>`lDX+hMI`L!#
zbgH80HEQdpzo`6hyV~D64u?Zqn=R83sN??Xm;W<-EzK0wE(vU|nV84%W8zDe(biyG
zrK)cbUon3xfbZI=ARPKaLv?#TKi*XW<yDeeL6h}l(V(}iCQ+|B(PWjeoOn9=Vf|=*
zLX@M$T)7?x7T)#I;?4p*x+fqomg{t~a%DRbSldwXEcW*C>BNIlm4!bC!nj!<$4q8g
z)uQU+H3_i?jenvaImTsC*H)}pf4W&sD04qDM|U9(=gjgZo(;$67|a`El#KM|%Qj$V
ztI$?T=c1JsP^DN@vG^tE{N3mf(x7PIptlF#@Hk_e23IyJNhgDP84XV<QT1XTPwjc#
zmaA|B+y=q<?U#&b7BQ1e4{|UmUTQe3#m`pXKUguwbhZR;J|+z@k!)aWyp#41-IJ61
zj7}oN?{>w)_2Z0`Q~U<}b6<nC(|X(m<shF<qc}T*c3B6)XZY@fC#T{WRd^|9bO=|}
zqa1JH9}TYNi>+(&snh~n3l*k&6x4hw8?B_WkQFeXso!5B;^0wb3ixwB_5{_vwAF3N
zKa+5|?VtN<Hp5^VW=!0KxAvy_CZb-fs)CxU7*#Mzlz0aSC*&vu*yp1i+--lB^4xkK
zVy7fn#C|xTi|@J%Op``h?dvrUA;1#I=Vw#CM>(Kn3IVUD^DvJ7s$Q!m8<*~w4M}@B
zun)m>zcRtiPo||AD(5M%7!1R7zszr;7<`?;y^x>Re~jE@IPf5CIP7lVz!2uBKOW$Z
zZ+PYwYSf+xu6{yI`Edf3sCJh{h^cQ359q=k>!)P&+|c)p#Y))gI{Tn@Is>70w<ne5
ziRx}1kC;6ltN6=D(g`{0z5xYRSmYhnr0u!<FeKASxblk24q+0DaYWc#CSmz)9@G80
zMS4w^M<U&MFtwc%UA>waE5sXj>($;zB(854BOHX_e%;YxaaeoD%S}zw+pE-B>l`Q2
z`&BMLp2Oo5()+b6?O~M6OBrQ`C+HJh^+%N=XgY0c>9sm+5^$l{?57eC46m~|UF(oF
zS;Jeq7s+i8N2rMW?RL4lUJR;d?@w*#?N;!yvq`HYjz|1<^5lD`nerfU>WZix=tR^I
zz(uyP#ZbeG2lPj7?mOV+82nXS^u8DMa(lor9*#oAX0-7pae*m_{E&SA)xcsu<kf0r
zJmA!hj-zK=*xjq$A>hhgTOEN5s1mL0gjAT^RpRmXhYLcVvo$31)yckURts%E+C*sB
z5OKQ%VeEEQo|gDWuwsB1w?ZCzddcw}+8Qj4_?(nH_qYmvgdiJhY5F#l4cn1Ii#90>
zH*3tNUj%Z=cK1(ApGV^jS1Bvd4y>j!x^Wy~MU2TKdg+t*|DYY+HG4=BJoxarXWB=o
z1SDY`0_uDY9+1R?v#lZPPNGq{RIHSJ*@Y}Raxm37HLP|T_v1BPY%M8%G|W@CJxoY%
ztQ^^AFS>%$G9*7W`c)~z@ZPjcsD<Fm!xW8Q+@qZ5%g<cn{GljGk>yf<8ozJ%O>)rS
zIb-Gg5yc|o98@da-d+WAF8U$4X4p~I{$8;|{HhEZ@fOj~IS&WsUZJ0TusTtY=bR07
zqRlDaeeFoOU~}vty;<YZ9TprooLBQ@QYjFung};&TYt*k2vL@Jj&B*Q%npw@0Ge@)
z%D*I<%rbqDCE}wFRDMIlz)i9<rVM|LP2MNHS)lH^R_dcHeFMH+bNq1!ucJBXVNlZ)
zcXkpUrHeHJp|kfM`e3=iou^(;p9wRk=t!n<cMjxdcr_U73yZ?Om(M=kTY-lVOd<;b
z_?uEvFqiHO!lLhe#GaZ&&THT}Rz7^?gI-f!%K+xKEX8VrU(Ct~Rj$x(ff&6Gw1wC+
z(xH4qLWSzd&L&N8BK#DR_^z8S3q<-2=ovY7>!vNn>K~KU#H9Onn<iM0SiI47e|4a>
zRzctZt;??tAK4BlX)V`qx_3)Rj;}IReSwSo4nSW>-isn2@nv$D>qC;Fx|4#|K=Fkq
ziVY7*`5E~5X<_$1o&vSTxJHt4^JRv*4Pv}E$98v1C6;n7wjsGrmSsZhfkPFY24?f+
zQ_*6TsE3+WiaI=or`;XQ+ulqJqmT?}=G&zXMH>V>&m=Y4^4YGEpG#d{);Nf{6&71O
zohbE-@9pE%S-(0#;U4&xnsttaoSjm4rJ;H@Chug(e+KKFZ>iSm$WCEQpe1gk`DBFk
zl9+$A)aITM)4_m;W*dw7RzGexUHKqnp|&ivmRz+QZkH{$4paBqVt&UD=9!4YE|u&$
zw*slO`**<my=Y11kC2wNU$JQWu-Z60&+;*qgH8m+P$SgXjPo!BVB`q0u?c=nX_0pE
z6@Z$XuP<h+Tg<2Ma-712Axm-Vg+PTLzZqs<PPkW;w>Roe=6p}>_g3}W>Ys^QOvCC5
zD_ddA`4Xn^iK3%HI4qTavWL?&Bd#=_+#ls2Bt~)6)t{-`pG?gcL|UM!jWx6Nt>>BH
zNn8(K#0v}7BJuPTN>Zg`eQEw;Upt!SLMP?K&p(}}5v0E6;frP~w9NV1E9LV0TvJfy
z6b@zvX=62(->%IxV_sYKP++~E7<Es@EE23JQ**3F4Y|a<B)W}q799d&195u`5(cS&
zBIt7T_qKqzM`Q_Xoevl(Bsf9C$yy_uVSkjlpBL1KqZbwulWMsbsDP}4kh-1;Bn+Zj
z6ZVsa7WQL2lzuOv4OCarA&NH|F@tH1Tjh|SB0}M3xBI<m&JVH^{z}I2Ai$3qMO<&9
z0i7%E*}=oZL-XS&WSi0ZQkK_P&^n9vc2DCcJ_Oo>Hl9#MyGMr)7vJ`Jl(bYzb**h3
z0&L>A)lA%tljl`w6@^!roQe~|<0)6bw1Yl<)LxeK2}4Z58FZojbV^K~=MS^}Px=J0
z39$`vuKgT-WLDqO5t-p8a^KaO9(}yI8%A)oK-3rXX;uHZ2$p|q(|Demm|Ac}-asSq
zTW#^$pXY}aF)4(9+xKeAQGE4s!*=1!wBEeTccwf+dT2R6KMaKorG<7kRP89eqf!v|
zkcFgk{1oc#DAmfCQhkAI^W`RBImGSfkS=<JpWQRi$Z0GCRy*%rnYR0jhHRxr>-30p
znW7Z4g;jSS;2D@M+@Rq?!9j{WM1br?E_Q4>y;|BO6f*QefG4a{x>S6`bf|E+om$`T
ztQ2u9pz67MC_t3XR?qYziDyy$dVALJX<25U=RV&qrQv}1Hbv=Sf9|bB-;WHB{ckPC
z1*SwDYX}Gkn(Z7av%wDSsCa$>hp<@)+<jG(D3bg@4V$G5g$UA=<mo-Fr=fqQCDHKw
zjV~&{H8@HVVwAZ)s$eW=IoIZuN^=o))f(#4$9fXM=D8DDtbPF|OpsZ(M5f@YZq|X%
zqPLofcdmD+K!CE5O0>%aDlu7hef`{B7csB%xZ18a@}jCs?>*#Ks$sTT#rNTq<&;Hp
z#q0*$a%s2A1{ebF_x3n1ox}$ylP{d<?GD3QOU#|YhSfM#Zo_-Hb`XdP<psLDZv}eM
zaR`>QZS8v&Q?{E3%O3k0;Mn0L{ih}wi<z7!w#A9vs~0R_zPsK-^{x#O_=5SCWngwR
znqMS&`9uAJ`mAyXpZ+1EJ>zb#B8##5I|N1dE!^kC)p}CF4IA^bdN1<CuXE)cX^5Y}
z_t$vWt+R;q^StnH^@RkBq3&geV}QQ9MJ?m?g?0y_k1(Shj~Bm*Ep<v0GK1Rr>4x81
zz9}8Thld;fYz4oLQvOmZ;^nqVQG>UadGS*u(e1Yb?B6{WmXO{;EpA*lbb!E<ws>;Q
z{MFYz_V#+rz;nnk)F1rc>tSDbY(`DEVTHR?wW6)?F}xxJc|R`uszGxbI-(W7u{M}%
z@u>3!Uv;ZQE1#6n%WKt?Ig_@}aC&~ya==VHs=ZhxckkbH8%zqR8vWXO{xMI(rjNe;
zyK|ig<kRPb>t#z!Gz5%AP2|m>w-aJoFdI{i>)9|$@7BoXY0Du<RG^EVi*_^*E+Wx<
zuljM3$5r!CH`d<^Z|?Clm(h7RRoHd3mypTyAj3TgVj(OX)RREO6{^~(`wCQIWTd+C
zQ6n5NcJT0+2o744O6|5jTlsKd+)ijkeP;K8)bGC=yeKVGwH0+;zYm&CB;&obdkMaT
zs33#o?M6CBH1$Cug%Y$p8wrU0sA6aK2;s|wwfmxB)v^Uwx|$Ja72yphR2w8a#_mI~
zvELg)Gj|qI##vOL%l&2e?cK^v>y96aLQjP)qG>*IVz3AjNl?@efR{Zq;>`*?so&Z<
z<cUx%IvQ0FA^-y0$HVG8pC@SP@VWR$eGfqR<q$;Y-mVO#j|$%cbbBs^J`27-Yk<YS
z&J(2IN<Ra`M-WZBP(%aubGP4tVs&|q2H#NfpAz;7ZlVYHKnssF^b>(eZYAm#%6TXz
zA)d6{q~lxlMxN++J~@a-B;g0~M;Y`+#o6}WrMn&5loGA2BiaSoh~{Q#2XWfSBvMWd
zII|>xMlR#(34;jMq#sO)4Mqxiz>$3&9_;+wcD}(G!?Ed#x+Qs5V?El%u6ZgO_=5CL
zqhO9NQNQ9UzK6%E;7sQ_T@NJY*8KJna#U^`c7q5+W5f4eb_$Zg&;q0Z$LTsGbnUqn
z_xT+M$E=q5T4xO`1DqI?E)pTfs+_gnC<qO-iKc{A2hZqw`()+{tC&%XF$+he)D;}a
zMrgHI_QA`BcEa4v{za37xw%cHY<cJz0DFNBB@eW>nfflN{45pLT_-U*<pmiF_^t6l
zSa_Gm$0}m@MA^ICBE_YCRg*-+*q;<p)nvpCL30_5JFL!R*ofVXaPgcqQM>7jGRtb*
zP#jHTsYT|ir3x-mzM?eX+j`0w!extP?D(8F(Byj#^fjhBS_eqW8CY&Fx_fQEttzok
z$47>6Ah^F=4NfZM%zG$axqbW^rY^Qw=q7fXx^0*T3J~F_5uE?YgnNB5cTx;0_futa
ziyOY5@g4O6Y&{||p1zdJ>PoWnTf1=3M>GfO6)6&DB#7_$2FtsWs;3V@kHt4B-7{w>
z(r|{kI6;KD#0seJTP)osoBh!dx5Anvqqk1RU%m_i-Ry+$xvPk*`Cz%h%IYe{1J__#
zzV9*RQ9AoVE`bW^GR^yL^h(6&F9K~FLy+81h(0ju_qV?z32lC>?)#-y?aOq#S#isr
z@>t=m$Q!gf-2V`G8bH@m=}{X9$P~U*rPcuyEy>)f(G?xqp4y%d+B8>5CUS8%-QcK-
z&<K2;g)-0yK#RGHP${oHL!Co~T&7?hz>cd>^)JVeO(PKDL9+)9Mai7L^97p|UXYY~
z`>r?$QMU~cQvD3u`n*Q`@jLXjA#;0-f2;LawrsEO^tav&15SY>@sGM5*0Mnk?*+-b
z({LQ3x4@zycyW!HvEO@yQ43E4_0Yr9TuV_zqI5LEUB*6N$cqU6m14B$l*}Ym7LcqL
zJp`oBLZNa|>MbNTWAmv`Rd$x;bH2N(+c-NNqK|*$TaHrnNUl|byAD;d%qU#L%iReS
z*n1f*II5)=iJu5x-fSb!VnD#%+O&`my-%PlO2i>xaS~h;cyG)=BKuxNvuw>*u!9XT
zpTqUE8zZQdr2Re4%hBrdNRP=HcNZxPNp|gxX)i(aq1aL0UKrV|EGu>?Innin>po46
z_TPQ>CK6B!yC=#{PlPK!Z<LSuqE!HLn)>E@k{Vgax2C?6N()WqPYel?K4FMSQX#Zb
zmsy_;*rQ5qZe#V5w=&~2B(0X&2jJmEj)_QH*aC!1NFbqTFLF5y^HQ+fRjwu7cj?J|
z`pN}-L>s<Pa~5rgmJ=*F2ueky$IhtBl?!fjZHIl~2VLbe7GKWRx<4n5I}u$z`l@aL
zY8;c93`Nf!_vM==C7p<+r~oOIQTHYKY!B6%=KtgBEu-4{qHk^7B^37{#a)U+a9Su(
zT2d(P?i45*0u+}*(c*;yCAdp*cXxMp4R-Up|9i)M$NN1p#yMx7wf9<cKC`}dEGsRd
zSlNI!%ujY~NDF^NC3}QB&A_y&k=y+G$hA8@C%UmN-I<bAB|vvIq(ZbL_4R~c*^HXE
znt&#Njo1?pX1<3j3jPVMhcSP?jfv8L@v^eidE{YVkng`{^EGKv#}W5!WnhL8FbO<f
zB)7s?SX0{NRqlQSsmXo;{xf=k&(emQ3#V*4cN*7Fm||lGS<A-HXHDy1oshSjq4$rI
zTJE5l<Km*L2ru%V_hdkyfI;bma@V6TkE0_)nWW}@UJiY`B{4)>BpdI27#el7KnD!B
z07ZQgU<AxrUI>^7b7Z0@KhP+bF7LVyJ_WM8+-JS)cfDE>BVgFrFUaz^u8_ldi#}?V
z<u?;fI5kM&LWf2R9&RUz0vO-X#m6Qh<)xiNk)VQej1-y_dMfm0pujG{8ABms>R`%O
zYA>RgW*u{qcWXg0Yg+VvCXeiKOIgoX1u=JwT!=<cDO{qiGx24Q90g@n-h=WZ%)E`v
z4rM`cO?3gaC5$sn`zXj6(N2DBUq=I17yRk?R^DTrpLIW&u0UgIcn*Ug1tp^MumCR0
z{#u~s#?<kEe7_-vjx;RBYq%)*Zh_tav^I3#f7|%yLRhdcm3DoLqjsFYkQ*k@SaLR2
z+oOqn3R9SOH73KZC0Ja?i!T;n-K;4akb)b9yV?1e!;Qt=?q5zwMmEGyN*@ebNkzTF
z&VhQ2(f8~tCB2HGrSQVVj@90i*u=US*8%9&ziG1asI?~^7j2timCp`m7?TTlsg$tj
zvwXr|YZ;JwQECl;54(50{#;X31N(mC9Au@~^{$f<ls14~HcAdvCP))iL4AHdrh~6%
zJ|8-$&w`_N?xswj`SF3kHYtk>(}Tvj{gsb3$AB@1Y9;9!&RB(=vT`~0O`p5~C6><c
z=^q8k!SJerk@_ffhlz!H_*rQ0(aT=o@3e0l)s{b0UO|B;i(j%G(Pu4lk+4k_n5}6b
z9a2=uprE%KH?sc_or3pZI@raeau>pgNl=^^io+{a+Nd&R!3>~uwy-V&<LUt8pjD9(
zqTaL4)9GVTRA`+;dubn{&8(lgx<Qb)r+NIe;(3ka?bMedr-{dQwW{;y0_3QS@^yi`
zBQ+A{hkv;_aEereGL5q0^{KQDUVra7{%JrJU^)xWu<f5%!49Z@3mCe9;K&_MH|Cf0
zz_Xp!lo8~Kk0drx5g$230l;`DH8v%0-}mwNC8o9mwJs9J&BtangxqGldI*v2?;?;o
zP#WN^p$YU)@sW4ey|%bch60e-L+a&dbV)<lJ^-}=QdlHg5si{Ifhr8y3@YUTF|R6(
zO|I{ALg`$Yqs)S2a$%WrCqU7-j|&rVa;PY%obbmPAP#5^culgxU~!e@;mRB2RepgV
z9=ry9U3`@p6^PCJGtmXy&+xK_!4RD7ErP*k8j_mK8>gl5>05nvsir5&<3ojX+b;d2
z*9d+liHcBOY(=hL7}`;2%4P@+jBHO3g<$h!G;|w%6ZFtL_AVoxUKYhPws30~V-+2@
z_^dt|NOC8BPlrnygQ{F<&u7%khtd*f3SMas=PxLs`)&O6EVz{nPx)mWD~cBQ2l85H
z%qmPw4i^Py(K)$|B+>0`B<0S<GUg-ijOtOSwGutRy)e>68G_;?)0_Gd#uCQ6Mv!VH
zjrO4aD`l5vPzQb(eJsLZ9D@~-4QjIHg$C8p{BG6h9WzppU19<N5GRBfhibRLFH9~l
zdWjM2+AyLaqF@XKffMX?K4mYHQna#B=VMDQ-^C6;`u@dcMZE~aGT}j^A4~H8n?NBX
zjJEWobh?Yxv$X5vLFoAII94<V`OFK+KF9K4TvLaE_mhA>+e=)!q=%Mzq5%tkp1s<K
zi}b(k$mb2Gg_LhP?hj{4gWjh_T;%;>w$Hb`$O*ZOo{GXh7XLF~RW>r|9?5}mH8`V&
zK|HOM6N~ZYXs;4av-eSiOy$=UiPf{l4DtjGkC*CXwauBLfNWQ-Eqmw<-H*<NG6WOw
zqHUILj3i7-zczviUD>=WenaMYlHMRfMePP#zi;5-DUH@7?9YTkim`S;O9U;ZFs*sS
zE7O&E-X(OUC6pWXIWVy7aj-c4cQ7e`aLTJ1M|x&S{qe|OZAo2pKyAzO@dOSbcaK!c
z3!x_q102o=vlIG56mv&|nrVxL?2;~5HtAdi(1R!VW03U4va)$t1lIb0qga|$r{7z&
z6)d`&4nH&4rq37H$fs(UKTh)1jypI?T1AmegkLPQI<&eU%=DxG*^)FbNx7MtaxN&m
ze)ErHTacDXE1-7JdN(*niu$(i8!1Vjy(}332L;n?K!?}YCx@6(OQL%6Q=ydp_qY%z
zo=+7FMkg-|PZ6Uj-l>N*CkleAM5YnAptvg_R`~|@+lvkqK3Oax9H1D0eW+fy;(MI@
zcRv2xuHw>ixjdpDQmG6|sKIo_7@vGk9^$-P#f@g+c1<$o3DTf3ou`mbatPKJ;1gd?
zR?C>7iX@m4=3A9TPB|C4*^UKs&N|zo$u*)!e>H?lgaJJa7b0Y?PlwP3)5k{vkUuD*
ztv#Z1Fq#lS%H;++v%`=vj0q~XLS7T@oJC<OB)YWy%rfgF9SKwcFfY(VLLg@-4d@aI
zA;u;IAgy-doXE>yrhm^AM)aFKq9GBQ0LR)%PZ$a?;tDqsm5X{06;T5=y>gH%kdUD_
zj6#~2=s%EYteK!pJj^-h%{DS8uZB#FSRY)T*0j2=dzuSXWm8O^iBO>~zn8;4r-$-)
zU7&N_snHV&`ZiIj_5>Z0MAF2Z_daX_a_UR>H)H*;n0CoX(|fB)O+r4i_2fLY8K9p>
z9x^WA%n7vgdlO>aa=mhRs(JoTg0#uBb}I5%dig;5_B8@bqJko-ug5u>o=9saym9p|
zTD`>~D_!!#2H1;V#OgY$gG1aD)Es{toTsq=GlRkC`H;71+WF}#0&<UE_w^`ky>EB@
zvD4N4W!w&2_!wBPa7DK;sEb0g;MQl63G7rDl@zvfAl-$bSxO3aHb`$djU;b|#x~61
z{^tu+UA@-_`!{zGJt5K%>p6;rD2zW3hk>Y+wJfz7+0K2}4h5%Qo2A+tRA?u)w04zv
zZSu(WV1RcvztqH^SM^8?qN`jZCg?v4S@u0MmOWz3zDiPPK%&SK=v(!6ia@R)GcuZK
zdpvXSo^*NW6@8-K;Z1|m_j{+aU|FqFbAN<t&Z6wb2_fX$7lg&W+RjWiV0g9hQz7Bx
zVnG#W78xx8?fSHr5gI=&_;HhMDBgme>mzP3ZRO){i<6!Y+Pe8XSo=Iumf+ap;<TLM
zcB%Y3=L#HLYV+hTiV##swxNW#vFb?-3ExEz33mGT9(w94SUfu4B%inz|2MPDM;rb?
zgsmF4kxQIbBX8zeDDh78Ga2la{-3Zd1y&&XqWle@=MO04dx>~f#XFVLbRI#=WhSOm
z+9J~_i(+(BF*Pr*T(@7@+`p3SU5_1$7G3s5f0J>Wj{#NDWtk7<KjGF+O3y|inRk`3
zVctTQWNR6;<D_x6!XQBaHt;$Bwq?lFFK2nEj+Dh$AvS%qL;TxRxAKW-QuM8GZC74_
zGfl#Zjo#^mG3T#Svv2xnI5)2-UDZLV3*8aI8@R~$-_Au8IulGrM&HS62A?^g(DNDs
zg+N+Cc`K)$oTp)Oai6gyP>{^2P~L04>ti}*@Ic)n%Rx<NxPuikiLceRM~ISfXM&)@
zr4(4)fbr};B%Z6lb6Kx5H>T?2E8b7QHGLf&&>BNi>;14(DQ*YWpCM$NU5l^Hf8-<>
zhN@9N{ANke>f&F3TK9PI#{!Vr&`t3juSAr&9a1jq^?<e&m9eVG6s|lsip)9hb>@SK
zBg?-a6Jyy}FSb)g9dZcVJ)2!ax6ygg=oIi3fbftr<zH=y6dYlkLmvWYCwQILLP)Wn
z)^Za0Wk3BlrvF7<KjDkeIy$x(zb4``j>?ZD=Yy_>_$ysSDCM-v?A6U2js$-n`%w3v
z_z9sqvd+lv_yayVmBDw3`TqCv3wTP?s=}KVC9a*Dv#xLBmc0LD*k>!nk^<rBCNzNK
z{ocnDRx!=4r|0+Ev(4c_!t^*zu4sIfxxk>^Z@-Lk^I>}}ywSGEJRL@eFyr$j5vN?s
zz;|OCmj%kXRGQPZ2tK1#f+e3mYp5#fhPcl}p^~7;6HqK0HSXbvN#9ve>8)>ssJ`>q
z%-Hu$D|IJsi<7etqC<7JP%>a+krMAO*-MB<PKFA-P6rr`Og21N2uQ1=V-6h==>rJn
zV(T%u^?Gb!Va0*0Hl1T{gAD%m#&5D3L?J;9JwD|8<~eqY#=E57mu47v>cyLSW7o)6
zLj%$D9OxgzqjNx?h)LOa*e`C&W&9X|-dFuXfT!{{bwPR>n^mXcQ)cOuM^6z&9+=Bk
z40*q-$e6#Q0`{1k!9|RQgCet$39-W=BQT8Ws0@4p1PuuHV4RbfYU90qt1*4^$7U&z
zxrSq(-3Y$OE0&WRghQKS(IsS%f1J!@vry_qDhLg^4-4tZQ<nB56O$ZrRqvT-P}+OE
z&j0Aanp(s-nS$BV_-)i9IKMjT6D4e;?}wkV{(>rR-`(cXKSUh}<8!Rxjw8XsE51T2
z44SJ%!8>1fQn?ptImcIahZfI^{H3peBKg3A<*@jNt<Vvh><1v1aO&P_;fmgUjJCch
zu5s$x`zeN*FoL-EwI<(RN}T)#bzhB1Ylw=zp-BR0pb^LH`j76yxv=o#)Ud=Ae$?Yf
zp)$Wh4r~ERH{b94a-2>}w0l<Kf)+9opqG3BFawaoJ|c)JCD3W-FiAfJbEE|7L}#6`
z03%>?+@13|HbsDQzR`MLa~bLqQGZ+d<-N<<>VqeIjo*sPS3<?%tuKC<xGY_TE6BKw
z1L+)v91SgX%v+2V%)H*k$Q3-7C5=`>X^rdl09M3UC4Y%&>%!%SoHOuoG7@aiZ{VU3
zIbenII)JX$x+Txt(AooAn7*8Ys5yl0+(dRgorn_h=Khb-UmX|+1KT{70$UzdD<xc3
z;G&_}_}76O?++j<<R{!e8_Gt1;H$n7t#Sc7pTB2)fCTIn6;aK+s_<w#_3H~}sACoa
zJ$p^px(`mzVLL0_u1^03i1j6{y<3w2XD`|{V;EkkO5{@#P6-K>$CibNFWAH>844dq
zMk067ZVXAI`6xiLfug~7)GjoYSBhypk#IhG)W8XEwy!o>62PH=^yJxYT!RcYg{Nxl
zi}x@zw4AYLM!vj4HUON~6cviXyMviZ<?Cmn?l;VGcG(NX?}cjM`QZnNIN~;oAL^T}
zHeKZ`ZOV1~&I)R9>vlwmtTwsXymU+tM-!4q*B;cy=gWPxUZy$4)yd!Yx@gq-+U{`U
z7F<tUbWoX)&%@VFQv9rgXcl3C9M77RvD#>;1#l|@!-&xcU2$al`}<vz@T+MU`}AeG
zAl9K|D*S(r0lK-@W|YX-a)rhL;PodC&%KIA{2$HZenKijowW3g(QfkM=ekzc^eDae
zHoYj<ZoTi3@yeYc**=^Y<&fZqR=<C7-(VnXrsDP-&L{uYF;Bit#UgBpmY`~R4jXb=
z_V!p(M=n+hCN2(Z;x4*Chz`1rqt_r>FviU}dNM8=DR`*$GUHVA7TGBW=`A`gc;xU4
zpfIc<FbwGfYyE2n!p|v!u;*30V#jwsi3-a<74}C5-7wN<ipu1og;aEkck6k3Jr;5*
z@A8)N$>zq)bu`ptU;*EP`qOaS#N6qos-67o3ychnFUZ)0b$<nC#-1BLJ1;ZRK+POt
z@k=-tUM%TcXq&9!IcF`aZ|C8&&RF`N#v4=ujBu_*uBr_^ouPj;7Yb?;9KD?!eY&H|
z*{h4h>H@ElNVvuwuV9lT`~o>Sfy&!a7y|n6aV_1mS`6?~^<v455yaf29iX$^peqRc
z*~M3n7T${5od7Q{XzY(IW{Nc-Z1&%Le>?3KV(C?HvUo)jw}+rEEt8bW{Qja1ge)mF
z_&(NrMGN<_o)&?}`0>`&-Ea=H!);U@9#9?mxjT$5L^_4i`#=(RZ?7&z-P57RcuzEq
zykz7JOb-plal#p#)dUYsE<|mlkhQ>O&AAF^NS?7@+g~=BuojRh5kAn}cl6nRo1OvL
z%`Hr*i_kR6rk*#Y*zADr3zTyX&@~3kh?8yg9{R=r2P`*|^ilKTI2doI)H42cRzK)6
zK+$>|z(?MTxkA4=s@SI3g@e;Yab){ZXE+p1OVr7l-jDVu=u{E~rFcRov^+Oj6ati!
zGDfb|;RiBnk~6-Gd1Z^`R{lPUX|>9Av|i3wDk-Yi)8;IAxo*?)Gz<d^FP$Eb2m&zl
zU2fkDa$~NSx)R)Z3_}h>)v*O)pmig|NOf`whU>5RFdy%|dTo(izKf~;!KJ@kM<|qB
zF2_#?zojNm4gY<^8yx3sD(A3Bw~*`{;AU{A!w`jP3Mzm9Oi{|T(?G7*oUKTMy(9;~
za6!kOH9P=unGZE&F+Dp!=`_$Gqoq&;Pad{ba(@S907QT1PP_h-CNCmg@QyCi`eMkC
ze9(q_;9e<ylD^!KfH!!|dmBZ|BsKlFIPsZG$3_xOQhu%O^~5``86um1*3jc?Fdlu&
zV<1egdIbHg<mV#xo&z?%yHfrJzKYf<g(>w_9v`PnthI%S8mG_XYd`LY>-54T+6Nr!
zDTwOy>S&Duu*xHzZV-9bro(^5w$PCSABYtQw7RUqJorvfx2T|~`%Ee{tFl-O!T^2n
z>^#PK$eu~*h=(a2K!JbhK&*?7arhor=sT)8QHO?seURpbx(O+j9U6V#i4q#+ENU<^
z8X7!o8byH)8mI&5MnR8%D+Le$cb{K|P7zJ6r&?vYJO$O86v>J!!)SrmDfO7)<;Ae?
zFKtmCpzI=g8SheJc%P4EShnF!h&`el2I67H*=eZh=3ok*F@Hzh`bm;-v>8I5wh_Y6
z^YaOKNz=Pp)&l=aj4gTt#xcbN^I|dNJ)mhUjLb1emeaPQRRrOY=$I^7H|vClQV4ni
zaN43=ET4`0K|cGayA3bT56fN{i_v{h3RD&>MXYyGgvWTKe}D&33>DnY+$QSA_#IxF
zz{7f?bvcDcOocS+27k2050h5#vmR<E(PRRBV`tW!VJz&cM3)}Z?{9wW5F?|h(v*tr
z$egp(@3bZR3luc8lrOBO$)|w2;A=sIG&@thlGw*S?~m<b7XKxFkiW_B+4Rqt)Vn!K
z{K#Q_FkH!?;kns(ZAe_^_PWfIw|~b!_jcuvj{3oqO_^b@&kcPXllOb)VV^0}Yr4!F
z7hP}nW5$1<#?)u;16X@1Skmi9lJ@-I<N@#m*kX&k`XPnc^4O<=H~$EEb?XdqV#)eF
zg?_0M{<B&NcabS;Mc#EZ&6!J~;J4av=Se-&dia3w?A_>0duy2T+v`*st~?AsR5}d5
z*`*GsIQVO1UBZboPgIQ2>P>Tz_+*2%^Z^aS2GD08JsT*Yo?fc8;#jd3TNk;OAx2k;
z02^nC3ZU+X9Ib_paELHRYMX?S7Q-`r#|1XT5w?N@n%I=J_t)WHk#svhWlekau|8kG
z{N1D#P=*qN6y|Qp1bPodp=iOcen2iwPY6??!E(8GncDtXJknP%uzY$aDIBsYz01T#
zcRkLEMYEOcFSoUqK#oV}e`hi~<GJcLdrh2-R=zGvzCrly`_(r$AB}V;51HK@%Zsi4
zQX_x~9E&cUJO}j%_>&}z0gXr%*-0u8X~V^megUmWxjI`0@Lpd*&I}u*B=dMC|Cx{(
z@!4}M25cf!*8^_u!aAOi%Yb7$qXcpz-|=WcvnWu9*X7yp>YCz1U$6_)E!s#V>Coqv
z3sU7;$|i(hJ-}0!d5^l39=2nqi24Ri0PmPnj;Mm_@$t91bEj6QI5fm#!owMfcm(~&
zttrZG=LEV7QecFbYg34e5|$j-`HaxiuvqHHAqKP(6w<}Em~)mvtV`(q<|>g)Ie}c9
zap{;-55NTzIZkY_9!ew^owZoE=r7T7f&~)&TzohwgW!KvzKof$T7T=%zg;-k4NJ0p
zN<c8n0}9SPl^CD*mu!wYo;Dy~1WJ~gyLHh>Xl9Na@-1Ao%H+E!ov&_nR9x*yceECm
zRsTjfVzG3>w+9NF11Gdgf=}E7aIQSJNT0a%tG@pFX;8s@;oxAeFBXu9(+_yA+x264
z^11pcL~6Of?zr@kD)-ahHXoJE%_ELEUREJ#wU4h1pilWP#^b8!#XRCpuMXGmMRWp$
z{2d=96o2M;KilWKC3>CKoeqwCrP6%&(xT1zUDI0U*r6~|@=6~;>v3j6!@AmoO08J4
zK9r6VLDb~ebcVN<le4>#v!u?iS1$?Jw<*FRWyrLY7bHzNKtliuAQud!su362Duiae
zErIu-L!S=X6CoHJYQ_#|V0EuSGsU#|J|*{)LE!|`KoL&?8H)sr5!VI04+@hj2d*_=
zc2uXokt?SQcyuA3in$7z>W>T+8``$xh?5705xv&Y4GnWqhlg1p$)R%|!w4Q~y($Me
z#5ot@T$VW4)+Xzm5WypEe<XN0`&*ow>!PrZf30HjqceuxAtT?;&>A0)uHR<7aY(Zh
z>7tU06-L^<MOVXif7@EF4l>VnSh?st4b30;-~Jur_-6>GpH(Y++6hq<5hI0}jELyW
zZQ!vnkvfejPdqf?v|P?at(hAAD+HUuj1*e@uD+q)zh#Uij6auPgS-P}E6e3Kkc7Wi
zlr>jTG!TuZZ=y{SmAB7Blp&(lcpoGi%t(Ndn-crd=FzjQY6Oq3vPMFUXic(KWt(vf
zrGD(?N0|81?Iak9p{Qk=k*{t#O;JrE$S)&0toU}}>kINxvU|8>e7)Sk4Lvo1eH$(p
zmkCc#cNnpVbG#466WZX~`T9+b!z@$V9FJj>I@o@RdHbCld-PkmC%0Yy*S&620`}P}
zqo+drgt@_O<$CB#8p+(r7StkrE2x<HDyQ=+9FS8fL&NMqx=F$liDu#<xAg<z_=I`g
z9s)YX+ZgIYF4~h%tzgFmu3w%-66w$CW8l>lV;Sm)Dq{cZI`j3kX#v+Yq_-aeC6p?P
zPvz`!V64w)<Dr%Iol0Vnuiu${Ia|sO8lv5J9Yrx_l$mj#twzVcl;8NToniQylbGtj
z1t<OE2a^#yw{3*Sf$d)J(jcwHnH*R8T48&)H}43IlFE_JGcdGyCQWG!ofOvlMo$~z
zp9B2E0<{4tn|0Q2(X}ofFGnR%aQkuM6<Z05n*mB-8NW7ZEVP|F9UKz2`{1!koPkd2
z2UmhH&R}MpLi$%j16-Vs0P$e#gYRk+nYvY$V#IzgQVQsDgAF?D-`94ww)Csy2q_gl
zWfO4WTjLi0YbmQn?}!2h63X1_53TMizekT(%zz!3VYd&6Gn2)KtAMD12|1iCG`9%e
zRHFw%h$xDr`#TmE?1s0wM!z5?gLZmo^wOyJp&%=h24fK;Nk<MyHKts?d5gpl;vE$7
z=07`_qm1;!^wFBM@ilqCIl1FB?Z$Bh&Pk_NAmv@<#CsNuh4)4P#QdZ>`3dTPq<5h7
zvwfK{eXQ+U8_`BA1#}SgTCm5^t6dRkmg=mqD8|^wW)u<cOrwk8bD)4`rY=yIf;oiH
zYU9E~06i(2F%Tb=({-H7R~3P81PUmuxKtj6k?64OhWIsR{yEF))ngoJ70$*ILuuUN
zFHO4Je68?OBC)<>DTEo?Uxu`}90Qpl_`Kyxc~BK+F3~_jx9?9uDIZTgTOSN&HO@>{
ze~~UcJiTQ7t3xU~Y@B%hY^OwNu4kF*fbi_IS9C7@c@*CEpR|#<RI|!V{kC)1>JaZS
z@pDpWuFIr)GbJ_ELD$mq&(+IwZS(Q(L$|WI_@gR1Bco+h>X{YH6;Ix~5znQsovTB$
zDz2r-ZRfJfdJQo=htj(GTe&A$Xgpj4)0SKme};ZJO_K3e)}S0<I{yF^?Uj&stTa^Z
zo&J^9tqAR!FFiDQs&z+RB7M{R*@>FH0~t4TO*n4*5d~hMcPn{77|)3Q$vu!P$Z*p0
zFf-?Y-GSTs7JH!Ad$;xFid8RGJ2A6n>SKC{)p`Lg*+R^}2N)D(olw(~l^#|hTGv##
zKt_a*p7)K5a>tjicje{K2jL~^%$JG!xBjEH?69r$jdKSmpB45e*--J<a)rh`n{*8~
z4#~HBQ{Sx5C>V0;=Hxo%kVaxsVjJK@8+SG`h#v_`{<IcJY>ds={!i4}2=EAZM9o7=
zgH!=Ek+@LV?vdKQQU0+XxM~|nCVIp`gdD^qni0Apg+0>@bf-bg=0-gR@*J*^&w6U-
zYEgb7dqQ{?<WiBq!5*mPj|Vba7{_6lqGF*J$icqWgvHaa7&n4r?1LYhL2?rJ&ZoW2
znQ&yk3I~ErRIe_W49w|S6vRot5bJ1-`V{4W`$U&VYL7*_Kn><SM)rbBcPFhM=5h5<
zm?9${(!<zWS?njL8-y=bcoFLM-LIm<3svrZ%<xL>SCI&8xnj5XxyKtxE|Bmt{+Zt}
zyhmII!*5%EA;Vyiom_Jy)DG)uY$w|vY9XJ-r);CDY1D33`9LiPX&A!v<Db3H=3PiA
z9G;>~|CJsZlTuJE_G2V9d5AnFKPEj2-yA)OXln5O$Ce@LXXz$&zU)h8BFV2`{q9{_
zviT9)Vd-NmBtC6svX;%1?5xIj%-bzHT~;99u9ig>>EFgTre9=~9bKIUzF^xS!Lit`
z^OPMIyT0P4Z$D;CY%&l@=#ea%%zwZ3$bz+aANp&iu&XtEFIv>oCy7eJDfsCoi8{T~
z0YEX8=1uOzXQaH7sN2+`a2P06Tj=v$f^{dgvh%2uFDKaTt<b%#$H-*`)f>9jBqC^o
zR@`--&sXYl@i~jxr5-Pybmd93*B!98{pM1hN}SF`UymDJ{6}ibR_SINbKFz4z(&Y-
zqP+1cs6Q|m@wYyqo<qohK#4I_thdZaG|~-3hH3xaew+JN&2B#}WGKTHB)|aJD3R;s
z6oh33m_z<A3*dR}%>eq?Wq-7@p$>h=z}lRGA8saUUsz2Z*2%6D9LHIWnI>V<<+3rF
zo7eEyrbDch%pEmf+DAY1(a2j*!=2X_76o<X@G*<r`=inRqL!!g@Ro7%EU!zc@rEcX
z$Lq~@hg?^)+ik_<3JZl+L1B<Dnklwqj(fSbq9{_l=dq0O%WZONwfu#ZGLXW*Q0H|$
z%A-v8Zw5zX^R5!$)p_T<+ffaBg2Ql9$;hiVM7zQGi|i;vSW-+0DVDamQw@i9##;&R
zz$h_pfjI4N8=|nK`hHyjFJm9Y(+w*$*GUU*1%vu9Ng+#E^ug?`?O<-G-Jk4yW&mEx
zsA2E(qSNT9$Tn><?rMC^;n9)y2C;!)62NXrFEU}w5T<F(ISWh@s$U($-1w~Usx&an
z8f#WHrp~a%tAB>u&@Le}!(4CH9>2zXt%JdOrM|aU?{K69W*>6MdulO|R6+1>VX+WX
zd4ARZxj92Tb3c~c9;pbElU2JyiJK}M0ea#p{Iz%bKQ~Z;DohCQ-?}gPi@d^M*B4#*
zd#Mab2$KG{axD;Y233?VW+|Ha!lOOyuGTJZW;8kc)T6yo)Bo`ZUsoXRL&w9Z&sd}(
z+~dSNsOh#msVLgO5*sQd$7eheV_1&R0N^V&(~!?Y^l)Zyvv|H(UxH!o?M&nBTj+t5
z$St9<w4S}oBCf&0KP`-0Q2&W|lHe4)={XDLdKoc7KbgAtHhjI~il}C#Nu+LX&&bs|
z%aR9Zyg#28sVI7XxD2_Oyg^OV=oX_Myrv@=HX^be4qbW4`IPYBc|zWQ_TAyjpK#A-
z)57`DUD5<(yWkxM(r$5(K>gpZAGBdw^WwLsM|}~KtfLg$82K<LsP<@X;s<FiIH)PN
zl?ng<UKmhb;D1-j(F7l<4M=wPD8H6^I+y5SwV!)T<HL!y&#{^+-D#-3HtpW6b>_&3
zB&iY{6M-ry%L74e^r-mb`u;DMam01>X@I6oW=bJ<UFME!-C?#{Q_cITd7Q@kn6^z@
zi;eaU<c{{#Zcfw*)q$VE4_*J5zLS3wAJQ|C?1V!kvgxUB<oAS1KhM(9NDcfo!ndaO
zF#KR2^l2`x<vmzfuX0EcE6kWaBG;k2VI<7DuY1qeV_Q(d<E$`4+GT-C$j%ro;PEVk
z(BU|@hNnrPIa~>;_nkIJxH*=HRkvx*yK4@Y64C)}Hml|D9(6dRWqNX3x%1-)L>=S*
z|0=u-#z1;X*d3{QJHRa8rlf-L5)<9sk@EaheIT_Y-mlH5+ip=cNVfhKvy#PlThoAF
z<1bs!JA>{Go5ki-7z;}iFd>xmaaK=6^R$>gz`kZnn*YnSths{L9Th~OGcBin|JS!p
z$xF9>yN*%S7YX>tU&OQD_cwOT=rfN&t;1pMd}ZpO{proWH_zu1N4Y5_idj6h-{?m@
zyX14jcmO2IH=F_|4Y=#uoQGXGexb)5_tduuIgI%qB5ICTW(GJKZCVt#oDI1c_g;40
z1G_PDyDp%(LlzxuIe6lfGRB$=K8)f2dpZ1{yUvJD!isM^A@i|iE%xcEU>0hZIW0H)
z!GiD{s@fi#<-Nf18J0bL&mBV6JUaWIa#(!KXoA*pp=G(xV?9I^uU=5?=WBV~)Va;k
ztj~2ANZkAsaJC?VBm#Efgk$b}IhH;a@!cvz_7EH8Xxq1lbXC{fBNTt;T*TrOn*=Ec
zF^>_;(uKE{?@hk0{Wi_=16{c!QlG|ls+1==Jm_ZS@^mrK;31<}o>2)mcYQ50sMdKv
zj{1H~g_C?!+U0pj_t*K3yM&L{x7jN1_d4Hn`LC!aXX6h!4D{*R9_JGZ9G*7tYh7<R
zB${vIuK)ec`bxhrJ@6SvW0|x#hL&2uzK2>6rv6)e#>d^M_)iN{99~wlK=+%nIr~m}
z8po2RnsBL_xferev((`i=N6b^qi%BhJB<V*#)7$9QCs8xSvddm3~9y-wLQGHdF{8R
zyn18Ig4A}em5*&+LkdaX%b3bC(r*=EPkX_vvTDeVMzhJ|^>vQ*GC$I3QZB^<5X|fH
zZ{-E-;Uf0Brh1an>*}|+oUYS-njn=ctU&psNK5?PdL8`XEsypA4-*wVi-ID(LvPC;
zk25YiM`DY>+?^DC&GHGXcckbVj``BFDg$Y*lqivIzzWk*>`Wt?mz4s$t$uRDYVR7m
z#asGsbCnMUG!M?4wd{;krpnqPRsW@}Mu>6RHwe7VE7R}<<5`hN<QOJ+zp>r`a+V;)
zd^F6k*ZUkU+~T~P&RJWyc8d7Id?>HKwZ%YUh3q>g-5l4~IbRj^rF@s9z4w`Z@eYPv
zHns&3V!|lHj>mjH84(dQh|DikeXa9@-)cB4cYO7L-?10##x}2991eEBzgRm7s<oH~
zqZdh996z|%D+%e34a=Ard@p$wI9?IJYF7kIt{@|9e<q(^r5xCDu^wfxo2U(cJzJcZ
zPbndCQjO1O0{k%Hou{ZEPj*bQM2Pao@k>j;^rXCma7p-5aPD3+dcksG-v1PYr4_0<
zPR+Y4gto5Mq!Xh6>+$OCu!Pr{adJ<c&E%ig?_}pb&#3+N;7)vf8e*;lQ43?GA!erA
zpiRy?hFnlpbCRFNHI&4vQM!?cn4DaY@^r{NZ3I1Z7~lY~`axi97!i&ZTbavp;|;_V
zHIC}))HM~@M{oR)heD>VSKrrI`?l&kJ9|tNTVJD}?j{C7d5)A1nGQe!>${QkOEc5E
zzBmZoziPGjHDxP)b+|yPsn?WZ&wMuVgJT~i!Z5<>tqlF9yH_FBkg$!*EnMC?!+d!u
z-^Y|;!^WZK2Z_~l+prcVC<bHh`rmlL5(0v`cpFvw?jzD#yG0&}`a?*DgwG1k;MZ)^
z?T9y9r3^FW-{co-JtDau&2uuO{N4<PP&+l(*UKb?`}g$Vk)OF#=<_&-)-xk{fWGFH
zsn!Mg5Uv2wDowX>-t7F~kHGxEdkZxD%JXdgLpqW+j_!KS8nf1JTBEko)X9ybo~(W}
zf9TY1x5yV-52`M26~#gFY*)s$zmMAXIQ2ZKNn`KV)o1Rj8mSNP&>c6k$RT>WZoSqQ
z$n@rRxxwSp`TG<2j={`dI|U(<m_NU@{-<a;KiI5Q3!ro9l()rTTYJqnxD_BMUj6@}
z2~<^8t4vUe5ZJ#O+lyV^6BJRZnWp4_QVwYuAHFDoXClAo$4Mi*m@<7DVmWs4Uufi!
zTHb-_I6fc<hFv(Pqf;V{Mn>J{6bD?C&^A$-uicrd^wdSMgfWyQQN+qePpMTj`$%gn
z+uKJLs)_f%^9PSUP?)O*iMu9%m#|>?rkhAzwZg2esUlg3h@;zB_a-*n5a9UOZ$F8{
z<%%HTS1ucqvz7Gmp<<sWR4}eSXq>-kdD;7YlMD5dzMdEy`Ma)4%sTgJnHmTLKq1n6
zws{W{@Y5aZwOUpxflc1L#fkmMZI%jkv`)Gb2z|9GBe_mscVb|oH`aIQ-*8co`1ZC2
zjcgpX^8h*?+iJtNf~vSeo%~$XhFwK-km#KkrvDr^(!7&>z@b>KRVIvbBvah%LExt8
zj;IrkSL4{(Xkl4$M!JNty2KVsuN9GNfSEyeXK-+dJ_udKupROw=gri9$F6%qGw;(i
zk|CCSdXbCr|4Jxi7DS4Eb2wd`><81f<|VHY@Yne>r5r<3K|26MBKn}mGA-qORgNHd
z=^`MMCHg#M2EGj<o78QKhLB4Unfr>!I;1mB+xCCievvykEpv?^eX<U?d@UvyWfI3f
zW*%Haq);<VJa>LdoDPGIWa=CIz_GtBW}jDU4VoMpU<e3BxMCYkO^HUq$VhH3UmsbP
zZeBJVi(#_FLGM?Em&>1ru4w{!b9dY6g@Y;B{shEZiiU`?!h6s%|3=a>3%lwk$vMxf
zYVu<Ah0_uW^(-l~UGu<bFUF3iu;(Tls`}$_3``|L&VrMJl3LqmThzO%0b29tu!J!m
zbEo3cJGA1Rl1kyonfkWqb~9H2Q<~8OnQfy_kC?2DNoIrW2DQ~SM^h6$Qqn87(}@iM
zJf?!0H!V?qwJ!TgxA-3r7-_M=I9wI2;e(`!`r5>%gYPcxt3<R_v+6WbHrju+YrS13
z3zN92>IKjRxhpy8BZIEKE@nt5|NHZ`swX<Gw6<(?%qzVLW0-o$*s(RBSK0ze%<}8U
z!!I>oQeBv!W^K<;5;wSOmKdrFRSsn(2IV~#H!3#ixfL)X$)#w_Kxr3|z_+E7<uTJX
z`m9qK&^cO!63?SI_w)<CEn+FgO{+4R9Jy?R4unfsUH1hSYre+PewGRI8_(ADEB>U-
zBOG}CN2>l}t@b0>QG}A(vtEaRTl`IOK0-cz2z9Rx=xw(<m(%x|>ctswfA!N0GiG7s
zN-7C<!!oT_Dc?jeFTG#ns%25kOUpXlS1kl8YpOk}zO>>gbgI$z9H<eK|E5ej=ia(Q
z@lelF{%Nk}Te4e!QJFNLGf%Cdl5vJ-q2>6&zPOZIKh_z)WBE_@&S%O7`f2T~zlJ53
z!C_%f5`=R^=!%NAc~kE2Lj9762ihlc#Hrx_Y=b(4G*vlMW#HqnFugj*oA62!E~6Ix
zNX6u(oMxj8V$EH*wKn8Mo|nu10lqQKmYb)CThBcCUvC_6%+bYQ4&RnB;*NRZ=Dzq}
zb+_jtBN^6c<;yWqj(vomEZ3TDVgxE$_>a}|drT`Z;vdaS=jU?aIn%$9M)N&dY)D|D
ztUX?^Kyohcpi5olT`gaM+tBkfUQh)Kz(zV2W`s+kr^`Mr)(&)F&QiNaEGi_xuN|F{
zbzkFVyZ_(>NWXsDJg87U9EZOW(N2t)$N73DoR!6wD|GGK_$qo?AXN4z`fBMfu&K?m
zW?G${3301o`@*&Tu0HDw2U4C}WSp4PJeKWLk<CA)8&~qZAy3PN3VDIiLCpExun^JR
zk4DGdHOHl8%ND~6Z-#~USf5y2D8a*qHmr(3U}OOgS)bvdK3k99w{&6qanO^#Wu%PZ
z9+F@ZSsXPfhjux^leo@{#Dkve6YLz%RS<}@n*Nh8JL74F3p1V7cT+ues;&j`Ysm9O
zWoo4J<;yI-PwM35<HSH7ubn)~TAO*6ro-@X5dc0~Tl#a_1>>mRF-S6m=Lf+IxBg+9
z^Qw!VKE0m>tAbMV)6rtBGVpO}A2F`ENE~P~^Nv1A4B3LPrJVPuDN{Ie5oWnE=1w%$
zRmgf03P3#K*v`J5`FX7}{L1k_Z9EhyI}HOu?z%6@6|H~Pm<JxN$3|)D+BhyDAGodl
zvg6!^Rnm1f*{#sladVQAEA(pkZt#%1nHs?jf8D@^FcB2o{-|@=MY}K+N_d+lxev-%
zY<8@!)94$O2tgdlMz=|VStHY!ys%G{=Vw?%WSI8nKNVxT0x8%(SEOIl&d$Q4j?LaO
z=ENmdffv$mcXXOoj!7OitMkj=dv1fqG(`f1AK3TU+TXLb^39{;Nx5tV8-TwFuBO>U
zev%e%ytMPIHxuDmHm+JtWqM^^22Z+o)%hdo@U9}~mat|fjokmp05$jJ|Glc)wDEr?
z70do@n?w*HoH|1ZMV450hEmO{5K$~A#3vc5y%){W?5$s=AAaf@Z}vow)Z{8glD#qS
z15ooBL#7k=eO-vawQoCh^z(p2_r%v0%QFtO3<kO^3a{?@510PbT%Rsz^K-^Ka!~$+
z!7<#AbCG`8Ikf+sRyx93P^7LqnzOmKp#4~C?==8d@KdXHGJwA+Zei=^81QBWQ$<n$
zzoR9+HheRvg?X`=OLiQ$MKxX0fF*>*AOo&fs<uzJ9h@B$kPpW8KAw3qjIM^)7yyzR
z(yN&8h>YswUN~Hx)lP3^c;$cIN#DrwDssJuoD`t7*zz)G=19G-F_|V@Q()xX|I8Eb
zqB2USYbr*v+p>(~(1duwL!^oqVX!xj^K%Q=wpJ2oZAqi?_cKGUzf4OxNqu+!JQHfZ
z*ut><rflg5+=_e12+PynJCBX6QXg<6`jx@RN?cmWMJ!HuWKCN9soa8*IHu1w$04?M
zru?gXF?&a_KUYS}(w~8+%|dX!o`<8&u((jdbf>N!d|wOmi^&I!WvRKpv;B<+SqX44
zmV)g~=?;!tvVHeZ@WIDPt+MNH#VDGNlkY^q*pNdqT0I?n0Vfp?hxy|+ZjnwcZ$K}O
z_u*V?(Cg`Um5K@E^D+1mum-q_4D#~uf(UVu*7Jf*u|>aD30U|u=B05HM6memqhT6j
z$7@~q(MHU2iS`3KueuB5pY|-6z}ijFh+QjG6aYD5xFrZLuDdK4jkFiF-?y6}HFk^4
zuT`(fWb&~MY5h5%U)=Eel`M~hd8>84OZ(T*>O!CG5y8zao9F=<*oQ$SM#2T1Nssqi
zWUfPhB0hZ)`j%70b9Tb7_Y*r9Df9H@-fzF)XH8)Jm`D;arss)g)<Wf+wVUwAzJq%^
z`(^0Y81uHoLX*MoY2@4r3P-N8G_0+nVpYBtyCC2Kfwg{$UZOevc(uVt<@7Zw<aYFN
zbQkpXv9CIxi?x17l%zCtsIvoY5v%Dd3?_I5aV%`noOvW9n_IZID{&~Rg;%@5=Xg|;
zqZ#9G99B<zco?bD4}Sl@g`$88<JpvJFKB_H*Cq<L{kvVUL)3>Fn~1M`PAig3)_KW;
z?^3-!wLjk-&Abx_0|FivS78V=5f8-tbmd=(>-NC&8RNqZq@s_?If28Hl=cuAl1u1~
z4RD-o4yhpvcdwd!Cw@yxq^a|BZNTNjsdw`&>dEBoQH8(3Rg7U<<Gu5Y{V(3~Q!^H{
z$X2H<m8Q>ue1nI}{iESUh(`I=H@D+E_J8z$9o|z<)tyQ{mM<}WF~Cj2)}2-)lUVV~
zH4VWTaX>kvt?q-A>(qSvXjzM$s2v~N;(HkQkdfb^5pYSZEC4v;r-(%6Og)vlP_cZ(
z&`@B@lxGep3#9(=Wqnrn$QEL6tSwTc6hG8gtn-@;zeKwLJfp$cfV6fZ-^8gd&;F~d
z4GJ6D=}lw!uv@`K;lIj9Eou^Hr<!ZFd5mg~3M~Gl@hW@yq|M;VY3+=Ku@&aC4yh5p
zTf=eE+vm0>j0IyN9APb6(c~DC1_s~9x>$!5%*&FZHZQ}l@A3m$KPE3Eu8ysX9JFXt
zy7OB6R&QKo3wM`Z*W$RNR{n4(u4}l;&a?*Rv&afDAlVN3%7BsbxzVN$MeKkR#!XCA
zcf$jc*>u2BFCXM!!gSHGMuHRD{OwE-{fh6-`+RhR(+vrI$$<8ZDz5`ZJz>wpuT*36
z-(`f<9NxQ#_+rJ+X8A7@33E49M-_``s2hlS%Fa-i*l+!2DsegNDUGVmba0p`V{MoY
z2t!$7dzaXfDTjTV!Ej61KlJz`omuNQblBJJ4-%Z}2U3mw(Wco?(@!l42cHW9Gmf5Q
zT6j^+Lr~A^4b~#ss)7i?Sik9LUq?nGpR9kXu_XQV498QpcBh@_R+1E$Xn?LU^6!fz
z=u_4Uc}bOXD2VAm@lr(F;2L{Q+6tojqMjeFKh;rk;F{(%^yS?6El{5j0x;3E9SR!e
za-1-&*t<m6Mxe!nrPM#C-@%zUab{i(X@q47AY-h?>R!?Qe|JKV5cy~-;iUou4{Ii0
zmD~rBL*a0JF#QJMSl6qz{*f_uP@0Szf$6LXI*daBSel#99nDv9D{{8S;Rlh7=6ozr
z2P@5#iG1`jnqw%Atob4<Q^JLHlH(&t4S=ZvsUeFw7Pxj?$$@L{yw1uWAK#z#(mvdX
z2YA1f2HW`HMjOTVF%g!!X<^Qb)J9Z8fOEyJ{W{|Y?S$-+{#&1r%DJh8Yt!J;z3*Ck
zg4GBlgn7(!+Y*^Xjt5E&Vc6DADOZy;J%3S_@5Eh@+d5EY32No1@b<?AKUyKj<KbeQ
zN{`E(v!;c`g?*K02-zL+dob8}RrXTuK~msw^)f$eSa<n(^BW**eR*HdehBictAepG
zr1QL1p=OF48EQTpZgDs(;R?kg{Xvq6IAb#u>Mg4wXXItt&*ef9Wzpjo59Ee};8V$$
z@`LXrKielSFGc=b8la{3N{Y`ksDu2sv<I--OvW{pveR4#ILplyeP3ROqUY*{_f#VD
zVYXe`us304muA%UB>6Tf7)ucA?9}3$AN1MWC%aGD&*vvrVL>F@ypeN}iQ%XhvrbEY
zDpW#o3Bq2P1tz-rCnR0ug1C|BRfGAEyBMQbJDfJ?gG-{!xRJ#+!=v6+Rs)|w?D^)B
zE?aqSxDXm(J<DpeIjxrb3|(?!IO@8Ssh;sSm!mZo@;Sk#bGu2w;V<sCF2m5@xm>yn
z*EYLLBF;vl+_w?Tx+q@A)t*PI<NKiwXoSlRHU%3@G*zYYjX2qLjXQGCL}YXM?_6#-
zeN-sqRACsrIv${AW`k*3Zv$zw5L)n3xTR~cio<eWw>ikDW=k&UE6NO(&aKx!Ewa3K
z5=7Wvsis^?0i>iGIlo|ZZ+PbSOoKt6#!4d?6)7<1++fm=`gwQ<#wUVS6fZp`R1)OT
zuI#QaSk<X!k;R~9z;U{E1>bspT_c_C^%XQpg$>a=yEX9E#Ucia{RNlUHjA>pLd4tQ
z_xPp=n1#3$GEWYq=lO1;r<2NpUra+>tu@U4)tj^Kj%InbjH6jck{YIA4J0A#yhqTg
z4+MeBcLc;E$}*&+M;w{P*yx2i2$S-p=bVeqlF;}&aBmE4#`XI-{=HNetJm%?&rc?y
z^@;4@&&cBEU}XeAM|(lOsUuiSLCnBHF1^sn3SA|M$Kaqx8b;%8@DaI<4YT#e3+f*}
z*J{XXy2lA-D`+;XT&%IPDyjA+(-0+J&PK3Jap?#loklGPt{hml*ui9DS7@8BEH%0M
z$9-4m>XhOt1~!EjIAyJ_)nW0?FGTW@KJ7OHvv(S`P`-8VY}zhVmCrwY7sxsF>CHv=
zCJSQmX+-%v>K@+zYFH^yOWjx?1rsz{o?Lxekbsk&Qmv;INEL(krCx8rvuR3wpbYUh
zKhAN9cK{$7T!@#M61B4kFah;aKy3so40#Tbgs@jC*b`P^iubsh-m4>pu$s<PS`3z(
zE;al|BV@wbGfUyKtj5H}=nKpq18W%w)YbPOSiVPyM4#CnynkM@FV(*YFOz&$5$H*)
zw*tR+sh;OY{dWktr<}l7$uK>uR!!RuTAv%sv`TW@=y`H=<My9hX*UUFzTMt?jl6}B
zkQPf2(>`;!@_HF6cn`VTLbydN@pl^2soF2c)6vXrch4^sVo1~Y9}nh&8RVl$;%lxY
z31WPjEBD<dG4S=@4L;#;cq?8e-~9NoQP}3^@IyBr<&xD<Ol*0i-p4Lx&aM8l*S|YI
z``=Q&UNiFkTtAAHv(#xzDl-E!0Ug^Y$r1U7Gt~1e&JSk~Y`Avu-FCC$V+Qe1kN`$N
zx={c1;vt$RnTF(@!!tFC?drN3V{flBaLigk$P1rz#B-!<rK6~IE(zz3hw~7UhEmup
z52!+JOZufoEOtx-D*kVNxmtJP2I9oS+pUHj#dPKduEim#AXTzbik6v94}6LK43sH}
zpq~$zYxrpX+3@IjDQUIP0u?jU#cA$$TUZIY8uF12*VPYn6lQD}oUrJzQVl&T2M}4f
zQVA8iin-q|4$<QGrDr8V(qcnQmc7=$AnA7UGJWO;70Vl(o~(Lw*c@+aqmZhwj%=J%
zusuD1O%{~74SFifYqb44l5K~#3Hgdq{Gvmc{-anS&f0p6QLrzU_b_ThGhNzcARj@|
zKuJ!`Hr|FLA~%YEyMhnk_X6}2TyC@~-dXHdM7g;XYM0H_c*qiHI*JWzY<OjdW&?(P
zw8eUx8ZAcgFc5}G1h$kzRhYY~+g_QCG`Xeg;gs?SZ!@CG28O7Xz-y|8#uY3`yQRaB
z4WX?2Cgd2oHVK$Gkl+A#K>&^e%XafK{O}~9kfsfJeEMZm=9#IQ#xM?<yY=Piba~MC
zC^FoMkay>Jv92!baf|ijwPY<H1j%^wb1OX2XFT>Z0fc4@j<7!=G~E=M6|URw9uQq*
zddxqaVT1=5KV@}%PkmN#(ZicH9W<|;;KP5-a$S+6jm8K0j5*YR!7YeCS)@yC)pAT3
zqXR3Pf-}#{{I81<uZT8RnV0*~jLcWjlt`FoofRg~vb%t%*?{>7QqEHJ@<^!|F|>Bj
znRpC7@zurR>hnyXbq}u^8)gSim21x%u4#G@aT^?w8`Fs7ZDOV|zlQ}~LuBGPKOdW1
zBj>h0ET4*xk!j3UV|U=J!s%b`dQG}TQFe+7GF{seTgF*-ATQ3Z7E@;T&i@O{WV1oe
zx!jd`nU{XL`snEwtgYlzKZ0~LDtW2KR$h?4o9Qzm{dm@?sj1OmI1ABxeC~t@DUj~K
zPn$2*mt5H*`SlP`xEisx+U)EEMBYu4SkGN|leDkc74H!o6bfK{x!`@-X!D|ISNWHz
zuucWv*9f4pk9d&q`WNpV|A1uipy9maY=zVpx*xj9;7*}&@*{i)aQxjk{56&DW*_K0
z7c78{LCJ-XD0b8{(4daX{kuxO{3UEhCRsi9taO@3sb6nflkxL8Zq9@3%QgeLPe$Cv
zk57TeiU%Y@<IY=m*b;v=0DF}OQNqaZ(eUyO8H*Fihr^~*j{MD9y9zpM83!5Pqk8R$
zC3+F-Z0#6%+n$+^O_um2{>Av8chNT?=*UU<Lz_V3SgBjfmp@WNsZ9z<ay&m9ZU43F
zd{woxQ=KVIpjJ$)I>S03IgE{7oII{xp^tFQ+y)!5_xImqt-_NmtnK~uzdtBPSK4@c
zhLfTwNndZMzVX=?cxcFcX?f8RSJ0}b3Jd#wbXEKd_m&)NI#}^;M3C*!jlJpBs}t7f
zZHNo1{Zev|u3dxOU7H`a#z3z+<1?x)|KKfQtg%a$0oiX3zGJLJ$t%IS?c}mgA6RaN
zN#<OB3zm(}#jOhvkJa`t5+869_ps=a*?0TNfeG}$j)^s${?vIoSSF6d?JZkZPDsMM
z#<J@oCjv|EK_Z4%6QFh>mv3Q-T9rVXN$&S2l>dvXvy6)}de`*~-JMcHr+|QT3?)d1
z4&5N#(lvBRgMg$6C@`dScXy|BNO#8>|NHFU-sgPg8?)BC-uGGeeO-~t91^O2_uUv}
z$mz!77qZOtZOuHPNJBly-F0^t1>(DluSEZ(6olh&DZV*T9}UX=Ty&7?&pHx5=BLvA
zZ9^*=zi5r=ai&vYN`(_J5}Hdre^g2obVZ=m*|v30;pG%?xN5!+Dw9pBRn~V>)lUI^
zyXAN`uUt8+Ig84e6j#hJ9by?=Z4Rm0sIeIO8ZvS^xA@~6y_-P*!h%|nkmTZtZcs9V
z3P~~xB{kD%u6&i1g%|2qIcXR}Bk>$2t#j7ZO{Qrkku5;^*$ojy;UpJ(uYFeX?QpD&
zvYo;$tn?isMB4<p8d*}x&hL?_>Jd&_BErbGVuvD~(>J+T;dX3o;A6weCJlQzMFQ=N
zL;36uSy5@uD?aWSHw@GEqX1N^3@hNT6Q4#i$>*w=JVhZ$!}yQ^v(PtYhQ>mPS>vD3
zSRpTF$fr$S7oYTge^Rb(3}Y~v$#(689R8&+!@sPID;;}5NvpC^W(w3cp$5(aZzGYY
z0P^o+$Ua4O*C3wtP!6a7HmjMj<TY`C=&l+#ewLwBRjd#))Ezg`=(M%7)=cg^pcK?g
zA>%jU{+2iqQ?fL9yww8w4aXui)AGSM_GY}iC;#^$nLc%r2kVSB8q^%?j<%v9nl6Ed
zG{U`|PiW<as56eoS}+JHX#)!tL5;+pVjus-_ZVZpziD<jL$RP_ryz-@^SOg>S)u{i
zL2uc{uRcmm=16A<*t{eoUzA!TeK-JBAw`ECGQ7WG3}Q!FwT#UXWklFhsvWC79OV4+
zWPaS974*z_AbzszoLbG#57yE7CSa4sn9E?FR_7ZUk><xZXdmQG2)eYrSuRb^)T5jL
zyt!)MQ%`p$GxQdUE<lh$)M0+L|8%efhj=M-B@@11w^<WjWLfrBF#k(R{LAU8^X<Po
zt}eM&%{CRzG#XZJOeuY(u!r!a`MzG=Bz|R#Ec4uvZUbZ4rw9be?Ac;3wSJNgHa_-?
zlteab3z4bR7z$$cX|2onvkgbX$4@i&Rn!sM(5(XB;agh)?Trn>wZb5Du}TW3AM)>&
z)tiG*s;v6sqkC)`5DwjSs5Ou;OFoP#_3bSYJt$K=bp<LBYroo>(GBrWKp{9ts;0J{
zHP8W>uF(I&++eX{Bv@kdC-l77n$YBYGK<%yV?zFlp*;Dm|7yE26nPg3-nHQTiOS8&
zW{oRJTbYlxzd0Xh=Kk)=3G0k9XruS|9cR~yXF(Mu=3kxx!vxBT%$~eZJ4&Rb?pFxs
z2!3k2MVslzq?N>iEBo_>gH=))f5$j1=xLw3Q5sD6#;-`fcJkF`=G|g@j^cnOIeT&O
zh;i+H<aibiclfL0<aq8}#H*fNBM+Sg^oh)-5|+0-`?eC+g!`M6WhJ>RUul-<SM1pa
z{MJwwT1Y_51Ph&gelG;jjU6cCh&3q?%LYU^PxZ%Ifm4xwbxF~|kFO!<p*+)|$#$x0
z+N}$qe*yg~%bC)jh14vcSgss1ivDUrrFqm!gaL$hRfcEn)~=9Nbyatn;2g&@9#l0I
zIA+@d?UtD!*6d37%lNwJ4qoA9eGvmeFRXSr89t?<@=oJIwGEMxYD<%-KMz3{?o|kF
zz#m%)ykJ3P|LVC727k9)F5U<XFp{vxr7xZz6VyQ2jHg;?uL%^9OLJ<Gy3Cb8OZSv&
z8^1_<W41xHu{_rsOJxi1ci8;8BDX*aefUP&i{E0rp1h)c=X(C&xBdG73DF+$be6b7
zUJnm)61fg$LJCQ7)8I4}RxxhVMCZ_3M)!Ke-Jt)KAxh%fWi3j7i!@XQN(|({tTc1&
z8qgB3gBL}3XuI%9D*M!qk^kC^?7UXEsvnx<lW>*d`!M19GZF32+9Bu@3McuTrM#Uz
z@(TskmJIHt^ZNcr{$D-<CEp(cJ&ueWzN9ju>aYYoiI>TST2K(hDRo1}zvZv_sMRyx
z6MdZy(nI1TW^J_OZ1Y|P`6EJD^d%&`_pRsBSXwOBV<Wl5=w3B5nYPlx^Ok~hOl_hI
z$mo<e^MVv-YiLXLQtT%@o0c;Y<p`&A?>f`u-Yr2zP$K)S;u!@^42MPrylS?2)Ma<>
z05@)!bL4>tK<~z;B_0cvdCuq{24o5tz3Zcku54f8k1xKL@1Nv*LzobP0d@$NX9Q3@
zO~6{Fep~Z)t?%eAB@C&ybb&23gmF|UCpV;Kf9|ul^`D}KQiEz0_T^}Oo4(qp*OE=Y
z5ijeZV0}REjok{nN4yyZUOI8RW`GJ(Vn+{qJR`8=sQW8O`PcE|@nx3}j?hy+pF*Wg
zO?eYzNQ$3qC7hn4^A~cK!7_?uvGxjH@zv~8Y4X=JqBFsQUv%w8gv_|k)qCPv4{{<T
z1ReAYE|g><%deh2!MrmCNg@Zw23kj|_!gQ?lV%*W6`hsYggYaL8ASw6s&%n#n`$Qn
zdZAu2zR^!nuFkq4h@5o&>n-6jN||$4xq_sV6giC;3g24aS(hbWpLc&JJZ{dc{>c(c
zd)*m=PIw5n()cW=m;>0Mw#iEO8+Sd3R@9noO#Km_B_X09XD&~;`IwR$`+y6)8HmcW
z;0=-J3P~k4Jk}xaIighp;5S$Q{?<QePsZ|-vK^QGhe=6avZ5IMyDv`udzb7m%GhAC
zJvdfXKNk?6*CL*)C#r=Ez){}>BAIk*1EBt=!88n)lBiBV2eKtkc>d`^;^nt%M#qVS
zQoS5O*IMhtaWusNkUPwFV7b9HOHaPp1w;?WtC9+^Q2Fn@+?T)X!#Fm2?s8wgkk2xk
z%o0zJq^)@EX2qIE3S3k6rQtDf*@b334adQqElcGAPqvn{_;GgNxnWxk%wC^_Yd?Am
z6Va-`Rv`a`x+qVW3-?vu6H9ii6)r;;+<&?mOKzOi&`;T+i)tFwK>Eo2v!Seke<MK{
zPsiwSgVZ2{P$%9=jDU-7xDmlXlgs#tvA}V&G0wveJgcrE>Vo#<>i2l;(dN2sF7Szx
zg6Rt~2_;-<ZKQvQzAV%k;{M~{LxO~fl+XMPg=}K@ZG>E&8jihnUOn4ch|kqO(33!$
zpB*-gGJf6*m1Wz1=;;*?vH<Uf`W6GVa`XMgZz|*Y-_kxlQa9Jd-!K8^1`oLNFHhTC
zF)6x8LF?iBM#Yn$XNkXl6W?lLzx1oNAp0GA$E>3c!YWwJn)JkQzm7!-ci;sZdn|U!
zI_Pm1(C-3r`}VxXRnNqNB(cv%cDrto(J_s1mm<ud(O{K+$5FVJQ|a%)SD>A15vS~B
z$V|s`9?_x<N7zx*O?^F<p@jL-9?TLyglO(3DGUfQtN^eUAq=ejRvL$k|F(7mo=SFf
z!yb-aE-J|%h5UUk4Ltw7eB!NmC$5)DG+R8lAO6Ns7zi(sjJ_T@3Oo@t=90LpLe%u4
zr2w>0d3#hO;KqDjeXH567M?Z{&Q}8F|2Tu;v3ll5#ghH-tS|Cw9s%keM3(sJJRWcX
zurLOJL16I$=P1N4P05RAEfOueL67*SanPWvZ!^D(2R^2}b1e$8pw@zRkPP;ZvubTm
zvGRcNwBtE&yKQnuQ4}iCJZ0tObV>}X5)27wYs{+TBkW|kSd*of0adcbJ?cjGDE;ng
z_e0BQjeBB+aldP|>pZilv;s6Oyucjc^bg6@w$TpLmZJ;Zjw;oo3-G%|EhQ}sWuA}u
zg>NC5p<^6=28~A=PJOe3?-B}$;*i3dS$I2Tq@3gtq&PELhyUEJ3cx)DG0`>Pis8$e
zB@P{7+j2nCWgEB57;lESbr=ONPbyw}QguG5EXyU?AL%W1X|2~CtOtC>o3NlyEn-6k
zBKgTZ7Ga0X8Ogm>#r^QwS~1HIk}G=NR@H{ow3ZzPk1CNCa9lJm`90hf8T;U(y5xnw
zBTI@$$fQlO_5;T$`bJ}Ph<h7gxRHWb-*E*^b>Mj2X&Ay1PKpgyX(sj=L<J%Czj+_4
zg~PR(j6W6x_4YkPz9%lHTtrHXLd9c6b-Mi5tWW0-PYE_;MdgP7CDw$J8iK*C|84`H
zCK)ka<pa(dflCPJ^B#+muh2BP>NwS=iqIK=?#c2Hz9UVBSr8F`ooq^0xP9O0Rf+nj
z<qVR63+<U$Q*XDOC@)CFdI+zjWh(AZBn=KLlY=>}HAPJ%*sqHavLf%pVp+nkL*J`>
zmhmA=l4<<(M;cGES2ErShi3nZ#{b8r=N!t>h4HK&d-v4azVE>@oq~XfbVL)-V4P0g
zwVJr_)*@;(^DExi9|mV3*HSiMhVG`(as0kBD%D@8lR*#ic`h3@;dfOkfyB<P=d7Hx
z94zd1+2CqPPH?VNx62Vv+~x}VW=#{QZc3%yO)f?ed&QC5X!tIeeG1SIQPwaJ?zItS
zdc<JqhitcU1Tk+AzI=xsp(NlS?Oq^s;Mu;eG&mM$GF|?-x3tm~)(8!&bfyEDRDjVa
zw2W}QOJJ&bLc4L>O9>dMRf!nG4;fS$fj-jnPqg!p7XenO_aEQaM&`=O!&=ki@~7a4
zPH*^Zw>5j?d?XX2uqxl6em#@m`(-rE^Y~lBtXn~x)ww*Cd7+*Hi8@^o__+C#4E#*?
z=Nki&yALU~ouv8C!qau7QK@z8Jn#3#^P8H;jJ)<!^b_D=0F!<LX;>V<_IK@wxgn=3
zN2wBNm~kg=ZfQOs?hkU1H|VYW8?^UTR_9Ww!Y-SM*a$VLFq@HLg$BXF``Du->+Rgl
z%H}<>+B(Iz4L(B-BF(!MA4%hx$js_YR%AX<RuyQHF6}pz80@PKKf7wSp7>ngj2MWb
zR59eU(j!)qUsgLcy~%K#DNRv)tKg0*k7r7<B_oXfC5Ol<>uHqo%B=+K9H#hsL4Scb
zlRacvdQfY4`eTJCDU!M{Os%2$H$3j!!F+PNNX2jTS3-be#R^mW+sRHR<6q7O|Ek}<
z9V7H2KtT_U#)%7;H`?NU4KPWS`gyecW=fYAwFZ@Z;l%JXEToif?C+V2^1~6iU=UV-
zXUNC+jGkhl61(-}&~HDw=Wd4!zA_k?>&EfV!7M81j152hf_dW7c{Cf_tJUgT!#5mz
ze6AY*ZoQdIB65Lr8_sACll0cOuuf)tI)aN?Hx+$p-!JM|(KXK<{TFmZ{aK6+PHwGV
z;kURWGW_w9=G%uUwK`wv?AkuB=QZ)8{3+Nwn<V6X*YnX+XI+*LKYsZAlGhsq5F>(~
z5No&@fM6joGBX*O#Vk~?ZKLCZWHRDFC$mInnk0yU4&Oyr92EKS{1KxO2Xi=W$;EHg
z#mDgQ3|WX~0zc;wBew<A3j?_!)vL->Z&i=!(?b^?F*YH1N8dAp$OHyiBYe~yhJbwd
zmnpe9=B=l*c-mGW3B;GgbkW-Me-=?qY4I15S1SjP?z&l_+G`iMD_ytmxFpwKnfR!f
zy+RsmArIKplxPf)*zG)RM&R#F#ICf5dZP9I`o%<G^<^{w-0jb+<Jp6-%decFJv80x
zJQPZ~H(p%OpZ4MB&-wdK{~ShlnJ*bgYgt}YB`*~h(WVq<EIVw+ooE)#ML(28ha<UZ
zr}`A|3CtbQbQ43U^ayGvXjGZ-h|Xnu%%Q_{B{JNxU3Jv;Z494xzgnBg@F9gw>hUx`
z_0{pd51a6_@6=+l>S-%0&1_o!I->7De@tVtf-)pwBygLl&F`dd(Ic`)UzK-K?>{RA
zZA^re#Ie3MY3SYVi3(c<AdC!7<<!e9pVf#Q<v~KN1Juyk=hfNo^TS2`Z$l6x>g9|#
z3^iGi&#rD9&;gU9RT?0}&Iv?0qUiOiw?qSg+pdkZ*zzxRhCjR;c>ufS`2EUvtp?LV
zDi&Adt8#_6ZdI^O5!;}NmK68O%0bBD#B{PPLx_aL9|00d=yGk9f{_1hn(Gh%OY@yZ
z3`0+l6^B!%^*s&8kD)bAg{LAV+{y4dSo`b1%jg+d-^->SInmCNgK`m>#cb@n;<Aq)
zg^a|FUm@fsOv)1|2Bu+mn}a?wZv~EN2Oi5wFl|`sJJ!_wiOEmifvohpZBOzpd&lmr
zqeUyeqKQD)$75knTR`wgz8^_pm6}C04?C4=A#C%ii|$zeeBiOy^iXj;Iti^ZH4_61
znry#u%A35P65WTOfz;EaN8i$&63B@3!LvW|CE_-gpQ3m;6m3`@kpIg1#Qn8rmZ=9X
z)?<-<i;maV7WC|79f$3W{ZA#sNf{B=OK_Nw``y=RhRz=&(7uZ!6tLY*7pVWwfbu{=
zhZzLqVM`2}1DtfRBD4~QVYx%d<FV6fQD0MR%wP;SrE-wBvM83+Rwc4>DW+=E;&f0U
zqAsX3n8Z_0_m!Xaxe=!GIkbaGhv=wpulw##2z813R_Lr4lk=4fKC%z7(VfO_#&L13
z+B!wfS5EchwMWq_k(3))k}KrAD*0Jqrr6299P#{oW=?OxC`n68^<1_#kB2QD)}=>B
z^OJr4EMCyrL_tbIQI~=~Z+$<)E3re5=aPJ;kIC094*`F+?kxt|-Mynx9aV;V|Ifz?
zvD=n#*g>wt@vx^k;#Uk<Yu&+u3JJa+%x!lzN;cjuV=KGDZinYUsQG7faPHL~sdQc(
zqB<2fi*OxfFv=+{3F0hv&Q$PB5@scKF~~Fo28h`TYajWV;%@Y*YJ+{62-M7Bi%UH!
zK5yzU_)~naq&y9=-nrh#V;GyV1f^XRm(9q-PGs{*Wm538!KEQV?})2_6l*Xy25>%R
z_K`r71_{xv_xMKu9)@o}p5#|#Bg5wVu3Bl8Y3sB+A@#nLz#1v-Hju;qKqI{!&34sF
zAAhcxHm{&oX4<n8hkc={gO;&GNZ42&z8<c3`v~ndrB)q3L{l`50iQU3Scxy3CDp5Q
zcd$Uo_5G?!1m$9{s7%gYUb6m2)4mX4`v28Qki=g5`qr!$D-|Va7_a_a2=d?UC*T3^
zvKNTV>1{_MnhUTbZ-WiCKc-(bO|9vRk4CTsgE{I%UI)cJ{im=nwCGxcK)r+1{NU=i
zQ^!ofghRCfnK1G^X|Wp!0}YI;I2)Oo@!wuci(j5B_OL-%9BJ5hMh0Ut^u5Oit4Q|Y
z>7|&%sksKiExsDYZ7JPDAt&x=3*-fCCkxim5TdRA$*TjH$In>K6iYijT2c~L`f+iK
z#}0(N{6^*5%3TT`pceWvT~NU9IC}}tLv>5^;AmwA0aZl&36Mcwqav6`=~0(ypu*;v
zEdeWuC<A<q%=6dq@-N+b&e(#Pg!gcRy3<s^%iRqXxnylv6oN8rT#CE;L*rm$%sz(N
ztb0lQ$>W`Yp15VhMIgfzQV|GK(^S&T%3wd58CB{AmET35?6s6w$02&4CZ+bU^&LR*
zDVqH(BEFuv`_QSKzYsNYP^mgDZy{&p%^T(Vb>>F)t2?9%5JeUe=4X3gE_1x6E8QRW
zsHnQQh@t28<jps;LT9lSzC3*qy8ruUTCjyyXOD?Lz)FqU#D@ldOAvYx1X&QchIrDx
zttpPZl9H@XzZJ%~$k^rhPbtDkD_#k}!8yYwe)6-j66f)(XL~6LyIU9h%rq1>qVS&l
zFwT*Efgi+JVJ<JjbGsR7GNJXx@f%wqE)W=52?li&H7uJbOFGHyk3~9h9xcjZA^s)p
zc*>K^BGQ^2iJgj1;(svHCep94saYw~rpMm?qs8B=5PnNaF<B=>*W1>2=c>3bU@kTO
zn(kJ>&-5jgxfl0TU*o}Gc_|C9PIOa9s`MZ~Qtz~%XZwcSJ8sV}#oP+y5t+jOS0@2$
zh~F^US9R-gNH?L!u|=V#c-GI#qhux*9^9;&>S1Y@0%$%iy4eo+!nuEojeSgQJPRqZ
z?QIvP-%p+-ZUk+^Lw+?HH<G4keBp!YNm5x9fVLTC$r(RZRJ0!j1LC?XA{hQVi3%^|
zq@YAJK|e~5H)qvjnj@1l)S+!~#@`_xgvxYCMHfF+ULgeAGJR|!u_FX|hK_x#pzslG
z6Jo;p6;72gXAii9Hxy8+cM3!y^T6kL>@Q2vCv7Jj6sBf8%R-*<e(DPWE>b+>IE&iv
zyEQapJj{^ouB0-|w6307Jy-K_SDNX&EQ(Hzo4+FHYB;z{GH<4M@zy!6G)xsdbf*9i
znB*&lHSy$m{D?d>_CM{j7neBk;o)QNaxMO=894SDx-xXlSqy+cHKwB&ay)h#7!v)+
z4m{>x_NMESVqPXacTpuSvdBj@zDwuC&N?a?HRXeSiMMG2ApQ>rsbwClSap&5AlIIR
zr*PtqyC@AE{%Yzj?;XK3lXWbg4>synfSVX+qgMyi#oYodMU(21APROB)NXW1jsLwk
zWeb3&umAPHb$Aj1Z0PfHU^(#y<aF5?(tXDM^@=|&hey^^hhGrzQ93--YcQXH73jTt
znoK)&uanUioW@Q~Mq@S@6R@@M#*H}0LFCjqf)k6ZOwytrk)HOshmT)`w)zNqxV0-y
zeq^Ou1gCzDq0qtf8#Ht?Ia|VfcsRUsb(eo5Hy91R2mvk;AUk(weR?iVnQfJIwOn7n
zlEhG}rBPE#lG*xba>HtP_vOVJKfJO-e3L5RcP%fjlh9dyQu$n5_zRVv<xIQ1Dqnj@
zj^<^+GGniV_#b>A`)+CDrvWE*nGk03#>*4Cn}A(^+i$be@KN2^AD?4`T@@fuy?g*K
zbscCM{<=h<>4KNv&Li-7{yJ{#d42NXN^LfZsMKb6ZcF@t`(2wt5Q-CK`+Y$^W+1ge
zMPK5dgkMkp-HTJ(fVWCR!v>|CO3<JcEvER7JIoU9XCxpB7xsLnES`YY*Q*sB4Y(C~
ztA<6YeJtX#vZc4X5WqcPR;7x7RURO3bTC-D-iqI4kOZQ*#stLC2(~9+?S0RUh*`e$
zIw&*XcihHUqOYTD7Zim0*CpZTMa&Oca}O*}r|)TRI5eNHhsQ$C+P{(!#iLZV&!u)<
z%a+X5x2L-$*+zN}d?puS#B1{$(Umj3GmG9AfyCj7`ruMm-B^yeS29Kw8<<>4@!*N_
z%8zoBTz160pZBVJs9nmoVqs3qo%>}toA0J6ds@DU@V50XTp+7SCf<CHzdmE-rt|^!
zK7*<DG%57@IA^u8W$8xyB*8EFeO|%jIV(aL6J_9`&2({*9fF(z6AEdrDyfM7u{rym
zNZCmZ2TI+;R`fm1|KzFuD{~wF5fOTDJeWA%_&!Nghfg05uu|z*9uYO-E-8z+m%(pm
zd=vM|ddB=+j$Ys|kdLHfB33K5WED_qGZ}##=XhepLWu<<F>oF$KO89^^*wcOo?O%Q
z=v)r}s*(w%K;ciz%E@}rT1HmWupvI9qiRNW&k8d4ScB{lKTwc)+%mMpnHTh~VjN`F
z%a1SCgWsGZ67a116=yL#^u3z_ykCkqFp~Mx#7$NvIL%=4<5za0-mh$a+Z1g+UHql<
z=9LUxPphp)e~C5ipSO@>&F7O^mn^dDFG>hA$s6j_)<hZ%l@$-ZeuB4B>o8LrdNNX8
zYt0H@ADG8{6Np0i6FSmurT4$Pa{ubM&?!J}Ya>+K5b3v<<)?rvbJVD6(7W1@Z}(fW
z7=*W8Rq)VdewGO<$HnCFayGBywt|nx4%Si;88-D7Y3Sv_q|TPAZrO^Ui(bI|8LaSP
zptRzinnBUU$KQl{%s0qtZ@elLMusCyO57jTd|ku6^a{eir3b%af@oG6VO%Vtl{7Kf
zH#H>dznRARib71JWim0{a~*~t(MwNWVXpo7cY}kWOKi2d?^}(%w{&l)f&%J-WApG-
z@rTbzap>BtMTywoxWPb%i|cWgu;S=%MF0O!t|tF#?dc6yP6e^Ypox#+;AUng$s$Cq
zgT%Rjg)PyflE<U@wga`+?g>SNy{cDHufgf^WOBx$9Brypg7bbf3uQ3!(fjkVr)~N-
z@2M4am$}IUIoH=<1pd^f*-a0X3I?5f83H53x)#~sAz@mr2m$|>LVJUj?Qe{TI*i^p
zC)OS>IZfLT+C-B@Q=fx4NAj;&E8*AGO|8zUHCC(o9jAjUxdxLEe#beboSj;iKMEe2
zj!P}2rXqaN8H*=jQhC__^%$sE=7X~CIwQm58t3^lC0b(z0M3ZAoYeHq=cfk)?t1f<
zW|9;<%)N-m*s+1RMtHktE^mPJqmM(1ce=n&)tp*ho*K>)QphBUVe$g+QZf77(+EJW
zM<@06Z;r6rAR7c`Wo{C&H9HHK>k2zsN@+0(&zflogCWBD=?}ZwD0#j0L1<R<5J?iu
zE@C<fUCv@#k|z#z@9Et?@a7Juj!oYchpAhZYSl3#z4r|#k8RlF-fzLIXwJyCz_Q@U
zW_4*~Br1oozpctjSdOv;qJ{O3NAJT>6yQ1iy@_LCVHmvCbjbCZAg^{ui6Q;p<g-MF
znP>K=B`vu()`7{5xO2{1hXwgroan<Ni5B~&x?`7Pf_Pj!bQ6YP%@U?p_;)^W`}P#6
zj!tC+!OS@BOL>w1DVFR?fGhr+1@Le2>%0Y^y}-#O`|^S43Ksmv?NAu%);g*9AUg!+
zG_e<{@Un8^KL;!mB}zHb#9_gGm{OHEf}V8YO4v~efA054uX6<g_6*L~v*3ci(kToE
zBozbM?lw3x?8px}X{pJh9PWA^p!PlOSb``st7KNhiQo5seXX~H!07*1(Wr{ei?6HA
zK1Dl7IJW%RHtFX)J57K&Dh`da@zHptnY;QDzS7>D{nDp4|G$iNE?;aryUh9;)39an
zQEA(XuN;sph|&1kTp%Hr)w0n?DRJV}$R&^^e4v~uGT_Vm6rn;RBMJ$t+!_1?oewhd
z{tw!eqs*M$Cx$*NP6z0N63=JpOYg7}%;-GPAd$z>C2Q}Jblb9{1J9S29BozfJ#dWu
z!BW1v-<NI{2t^#~#3tGmrp~(hQod=V)AChTnnTU&PxPV&#)~U8j5ysHy2@UQPz^wv
zWTX<;i^GOk>(Pt2HDAru<iC19Tc}4t`jgfjkhl7O7x2nk0E@RC?%{9m4$!KfBtEw7
zT$!73Nhn>Y#Pz(HtQ6m=zR>5r_?CYF(UcZ=t`2`9J`R11GSJw#6=vA7n1GQ|Ew%JR
z4tI$;XTR-nn`<=BBm+DncC&0|&QMQ`>|znjgHa)j<{T<3r&eG1XLA2=qbIsFGH4#2
zqaD<(u^|>^xNl0c2Jjfuy6URmcnOTefLWSZ6773>V>pM9Zm4o~@hY;Cw{ZhWR*Fjy
zQl(YYEVuPPeZQsT#CdD0?KmQ$wCY$3o2hx~7}goZHuuc=^R@6UE7iTiB^J3~?)Ppz
z78M1N9sZMNBG5LDR?KH!n$BF8-$DNnCgD)~=R%KWYn+`<LbZR8O=(;tP%zk)|FAyq
z4+?&jTFA61GG<JQMq`<9wH-M=Hn3;;S_UyG&;3bvR{krd(lN=A-h4e*Y*L0a;ZlP|
zDkffJ>wWBB%gy9xp6n(W@XupaQ;BJfhNsVlS?}Cnx-M^1Q|PYi_dM2Zpw)TJ@VrR8
zikQI#e9DKfE~@W0J|;?<+(l?Da4}IpKPcDas%@~`6{RS$!Oy+utY`(bCA#p~5k1C1
zrtPR=p-H;WBiOej&gKW=(GO&xjGMiC7xr}W@?8Ggygdq75?UKIn!`q8wCn&Ea@jU{
zoYXq3G+IQCXV<-o-qkV0{r6Lq7Sm<_3+1~Dqt%jlL~<H5*5Az*DpPpqI|W>NoJ|4R
zUrMc~>_)4$8*m=`S}bzVlp)dSG?ktH;)X#aIL)ZL@6dwglqK<jAH0CK4MptN+VUun
z1m>}<-FqRA9+!ie?>~k#CRCh>imm=wGUIV(e5OgS`JAq3(qN+3NG0k$ZDESGUnJM$
ze!aH$X7)Xjfux>aJi$cIP=8rvkFmrBqDwIdCWNNs)rcg4`1IJ0!K75rzj1^q^6WnE
zzC?)quSMl-MCOQi+|M^t`c;2rU!c^npaw&u$={yhso$!JgQQG%#Kysg+#;^ONbNel
zDO|gtI0fb#dM+gPTDT1Gmiws2y4GR+6~%Qsx9w7iL3V!_oFh}H`px96jn;2*vj^Rn
z#<!Rip#mhx^)Fi~thHV}pD3Q!oNQm)rsc(7SdJ}Br%F`9Z#wL6rMq62%IRibY7yDT
z?SFxD1lDG!01QMBHn`urk|EtcjzVCR+G`7+^d>0Pec8e(L5M|SwO2QA_%)P`^_5vo
z#ymaT&g{B{(T!oQs8-BMa4(H3W)3&$Rl;|P4psWaJB{YI0LhA%QxnBG&+NE2Tx0Kt
zbnr)G01>q(3rQK8%aymeb0r1`x{u-dr15=(AoAz?QIYF)*g~zUx0F$RxZQHL$rR~p
zm*;aT-P$Vmkqn`WD_sl@op+$Sdf%4`_OEmlvfOs^tDi)+3~O9h{XN7RuNx8NrP#0z
z|BO&;#!K-iZ-q4X+ovY7X}JTrFcF$}Ymb+yjp&PPKA|Mh>0b`oXZ+ZVjze+q$@`v+
zAixh<R8Vhm_z+Yw8;|p`#BzrM2Y%L^s=KdDd*2x<k6HUoIP1KH5=-^oAJuyQd1X8I
zGq`5odqE*}q=oz_;YrR8?%{y6K;GJ})=7US#3sEw9n(%VDfv`h75gNjGc;Q2@QqPc
zE%;|_wgz<CzV_4eE4fL&6Ef;YK2McPkN<kB!cauS!(Ou3{{rS)!vQ~Hb0LY^tu)p=
z+}hV|2pFSbl83Z$h32;)VoBAWM&@r>0Zy?JLV6@kFfLFUT&_d}-29H2s<~>#w0&SJ
zRWs=@n)s_gT(Ssc)FOObmQma{EIXV=>p=pLQvCt82yWxhyJpw|TCCUkCAkP&D%}R4
zBF2_Qo?DHXoa>lOv>%z-jw@9}KCH8!X98j_Z;wwaB1^_I>o02hU@+ZQ*$l=-5_t3#
zk3_kQz{EIatt%eyW5V8FEnXSYY=i$-fu$*IR1W-M57I?ryQ;EhgQHVcvdr5Gh|Bfm
z`mLs^T!ZF9Gy>;CTALpF5FHby$OfAaDmaBJ-tk6_P6IU(%s+{G-yC=R^hjV&E!(5j
zuICa9op}B=eEZ7SA78-u$D`Mcm29*f?iYc=-69^zzG-2yf^5I=8ah6B!NIKH^LVZ#
zry`R7DL^9ckx(zt73dAk)COWzo`2(%n1_4R1hwEMytd_$nt4K((~N_JT1_SzNEI+w
zIfH+M#8{o#{}2}M$~kd&cIEgh`QvR>5)~Z_>?<K5R2(jBUO}c|z@rt;e|dX3Ij>*X
zv<E#zZ6IEy-Z!qf|7BSCSCR0J2C-06L!+$a^gQUxA5v@LxTku|5cGE6nc|OS0WIEF
zE`4ECq|5I_`T;>R07(w?=|~H})o&XWzmAWB`WjY4v!!}j&*YYi(bQzC^MDXZvFpQy
zsg$8R-?Zp2z_qmcSN_D*b>9jUQ-xQ?GKHqzrn*?syRx!W#|Wou!M0F)>fGR4bZ$|h
zZE-;6TSMHj^GL42C1J<RKYeu>^=J9Epw61^=4=s<vI7rzz<tF*;$64AvAEme`~-4^
zd8@OiA0_*$W493nydCRuWU4~w3KW~fq0tKz=Y5%F7ZyJw$1{bfp<0|K4rS8f$Xk@A
z5pcWSoo^p|g9JaRx$v$E#%*5s;G)gaJo)`VA!`d`b$hM60P?NqqKLy-?YuR&N}*;)
zejZh+R~Z~|5%_o^e(0aI=X;Er>A}kj0h3)?&CSZ*2iTvR>y<oU3+I)`GeX_^(ZC#Q
zS<imQHq7HFeP`?G_==oPWX^1jb&i%ESg-7Y%}2(y9dz>NvHl#Ck!XR8>b<Za`soHX
z?CB)uQny6%(gZ{Z1LN<<E@;KP8^LMAV~=Q(L@#jMg8OE2j!V=<!|~k@OKpa^w@#Z&
zYgc|f*IX#)yn(Iq|33d%M6r_-uEOKqcdQmjwVSQaP^ai?zXEhC%|^faGzaBt7cve_
z<<<ZrIE1m!Os~LMp)q!VT;P7T*A6*qJ5W-l8kLd&ip$;G0L_aeWM1q~p#R;R3na1}
z`DXFYyN8$ru!fTD0-^xN4aA0I9&CO~7h@8R0J%k=;Eg$OyVvJUUb#7w=Xxk9C3M?y
zQCpHLqsDg5-F$$`W7*{C{;Fv<&WvZm?`}IaiyGjBM*!CWmLV2i(m+wQL-RY#sU~TE
z2Km!+p#4FeM;`au2o^+wPId&NE?E^!<*7~!1U&mbbkRJowM#shMdIJ1IR(H4yfL+i
zOroB#bDWDnuk+a9ByvZ2lpRbrscgVA`t$%9FDi@2U@|Me+x`dC?7NYAgg<wHcpAS;
z^`E3hmTGZd$e(^-^#aaInjy3cDBRDBbFDl5D6u~KML+d@$Xt<lLMr2^%>Lklx{h0J
z3{yip=P-*d;exD2uc6xsoOYon1w}>I3%vGLiy@LZ%l&tP$BqFH8T1-y^#2@)ehJ4J
zl~8lf>jg_H6G?rf9Z;Xt@S8r6SQ;T0>xP63a8nTry*Ej`?S8++;qfnpYnm&%Df+~u
zQf^W!7Ny{LO>}M^@26p>IS%YK?EtYUkIy&VgsS!8&dbqUt$X(<=^H=`hh2)Rts81E
zc>=>MSjXUpQPZwNlSlWdt+C)4`P>bG%!&0#Ir(6AyN#bag44-NWw4*ooTUbJRf6%o
z5g8})+2V-XAMKktpD^6tJB>G^+Ev{Rih=@!SE&zFG^)bg?9A>W<_MKcy?^ib;U)5#
z@r&}tjch;_rsg<}-?|XL>tBK;*R|YeeDyT9okF{aRQT2QQMO4}X$D$$P=tC%=D|X1
z3&qdn>H-F;A+a=7_|jF|h(JLZm*6P(puaC+uv+`2k9Tc}hDA9zER+G$M!m|g?kUkF
zo=W-K2t`IX#yJjUeJjfqq-E!LPYp*grF|?iT!5pPtUlT@86dW|uBLJs^5|3ktEXPS
zRcm<vmUqSQ@r}?O{7I32w9+~jThhAkX7j7nyOFh5;^H@ZPLaLb#}iJGfSu-&-~O&O
z>VK76ZpF`<3^h}Jq7Idn`sh>5*l1}{T^Uf~mLmoj<~c5U8Ser`s(0g4Shac^_NL2n
z>?{UTU4O3gC$@5~JSpE17n@sXFSHqW@2ne?7o|NY2%xCt>8tYj8bT!Mn%r>AMw&VP
zsviQa02ELLV{)*T!KVa(O#3ms&$bdJ%+MZzPrpoQO0xw;mBPaT@U)B4a3BC4@NfZJ
zYit}P`vAdF6UN!{`l>~&{ygzo#Cbrv5WXP`tvuk{W#}q^2h3e!4=aO*{sYDkoctOn
z6^-C3OrZ=u>%=A$?T#=8<DN8POEjd#9Z8nmNnA)Kt>ye!)SD&kA{6aUR*aOVxat7s
zi<T3=u|Rtx$7V;>w8#6oHg{->5DNFvVoeEq&UHl|4j6eEmx6z|CVdwqgJ4Wfg<u{W
zB>vvM-f3M5Rh(9x0R71L5neJdS|DiYriW_wl4hyDzy;ffpXDe-7cT$h{6{b^`}FAq
zX~Eh2>NrQYI|6Ng(I^M8_7jHjkzVKH#uFrWG<SOkzUk(HKgh4Iy(N1(gWOH=p*`3~
z(nf}9KIZwxG~4mV1mCgk{(Zvk4qD($LgX2tVps4FCtE~J<o)Z;25nq!nsG_kxcg#P
zxVz~}r!OFlS8E<eM|wd!7fg*O5XeD(8Ty7n6UDW>0Duc2yv%SV^N^<;45?q&FME9n
zxa$n}0t|Gc8jLeXkT^bpGa4)>RANVle19xIE+d+{kv!qd0me29s}Sy$<|G}EwSt(b
zJ=<k3jT#;Nq@vLPG;8-6HxkBvZd6;0x%93<E)IoiMo|$RK!Yajk`Fpa*n5s8{PvK-
z*pIa?n@me3w$pk-3^t?;2t{lnwGIW(9`1p!X~}H%TcIiMPO}q#Wj-GMh}|i^D53k>
zIG|xya-7~BwPvVCiBwepzYvsb1`87<t2h)AD>;vwO{4rKkmKXFYF=}Goh|0o%f>ct
z%Fv^S*oQ+|BXlxaS%W#dSY-AyQxWi*Q?nHYr-XEdEem{b=Gn3=p*UIh3%3hH;K~+q
z>wU%N2ud_5M|@5lHTn#Fl`DQep+1{uhG`Ml@7od5e!G=YRBKY%KKR%5I86Jy3-W<z
zMG_UUNj&{Th_0}G(a4K&_7N$x?brQav7b3kk&b}SbZDTz-}xYOt@FS;krHp<NdfXG
zMUCAraqP++s&7qccysspce-s}eoLv}No5kqTVuD9zwtjN;D4PJ8;LkbkOwqTkd*(1
zgAQs}magY}ev?v?s~HB$QPeruNuSV|!fU%nzZUrqMs#ZB7)A_MGp&w@e;_=0FVym{
zFtwdl;#YjWH2YC1IfR$@-OgH$GkMnIFHh*u@q;_@oFnz~&$s@fc4o>Q(Y6_zHPH{u
zOiQr%jh*;!-}dj3;sKdrPnT0)X~(hJ&twoS?npskT<9gc(Or}Y6OI~^c9r*F)N3T9
zoy9-P6wvE`a?#RcX+zQH+s#o8fD2+gD#&7n)cC7r9`H0=7KQz!8Z!^-LaRbXzX*ur
zR>og8L*^dD;AZcNCxF#&9;hw>Eb)-FF#zJUZ~U)+=UC9z0qp>ypKstN-?$FvxPv?y
z2me0=QJoYn=-)=A)_cNk118h>o(7I2D*_tL?JCHi5#PlC#+OkAz>+C#1!Fga{vC?R
zkd%9LLMHR~s{;z6Px)~GPslhSI{R}q4H!qqX*bJb5uQG#te5Tk@}@nt6+s(V0lP#j
zr1jckpQXG69w2cTS_$N1l^j+!g5v<6pl=z_FYpM08W7(j6$Q&e>ujK~T+RsWc9DA%
zil>WCGVn0BT)HZn{ZFy#6t51!0QhLg#hAu}6b;Z%wgYkvzDDc~-UxU&SrZ@J4eox(
zxOP&0BS)K1&kw?}5;>yHW!yr&59ZFr)@I`-X}j&=TAt^n8K{s1D8ZOOujhN8BAkQF
z&5otr)%fQ~@*_!CubYPjc6c@((wBUoj?$M|Ehr$0bA(mkSc^>WQ-H*6V6=35la%QC
z3OZ;(VNRcMBsGy?*m*It*hg1-<btnZV0|C_CG66mDW!~O1s{jmZ6pf<wk6$DpMxuD
zS9Axe!mPI1d3Ou<Jp3Yr#0VWpI`F37cE6`u2@bp5JMJeunZy?@{PkRDZy~EjQfncn
ze#KRMvttc<Q{3Qn)bFf3XLxyKEa9_nC&Ra;?JDcB_8ysdx!N}=i<ISfygYcuL2XHe
zdd6l19_6vS*U(}4;Pw>&JI;~tGc@lqSt?UPg;!@PKOKG38N(Ml%twoQ>#DT`j~Kzi
zIIwN@=FJlTyE5`hIeaTSEfRBsZ1nO=f6i-WFrJ>jJk^@cDp*P;BxRSAzJGI6^S9Xb
zH~wWj7N+QzxltqAAxn<myv(E8ZZm(kw-N~XuV#w)Z(16P%UiF=7P>}y>@l+Iod-}-
z-j1+A%FJVAa&N^8%HP+$#$Zb?Ui%>?cl~+I@2a_`R_CdiAu$gI!`F3l_*;VZ^rz9g
zg#P0!m#!n6J@K0_MOx%9dt);^pcLch3!9NI`fkUXYQI~UwLb+RJtb1a3xSc??v~fa
zC<^G_tc$@BoK@f561+l5O?LV5J=1Z;ZXv6C#{%gLBp?_AW=R&V)i&lhp5ixvhLagU
z#<T#Sy@~vq1)2*V3on?(iS0n(;JEi<B`+{fM3SdLE-<PZ4olElJL4wY<m^sDl!>Z_
zLInJ3<h4!Azby|ChH|v?Z6Sb21W>u`5b>lljqmV?09VX8z8i}|a2N^dxi<1O0x-y0
z1PPJ-98kOFAB&hPr3N?^9WUV8BPqdyv;zmy79O5jALkwSJ1r2PKrcWAQ*Q|A1|?YV
z@uBUdi9I6?6ChD*rUSJ=nPsp$S!t>hiE%djn0?LL3st+!l($0d#x7Z{Cm46f<rc!_
z3H<0eSXhb&iU$HL0NiCv{$;tCmk|XRM?q+J8>H~tDB`}lVAmql&L~R}gz-<KxAUaK
z*q1<^Ku+Kmn%kQbkXUmCjV;1XIO*b$eptIPj#Ty=RC0EtI>OHb&9_I60SBt=aCSc6
z3G8%RPuPmE|J*Cky8f9^vHH7Z1Uni@Z`x{ghAo~VTF5hRt+w=*%(?Jtkj3r}HJ&Kf
zeUsB$0N~`8*BbhFnHuMo6mz_Rns#QLIce+_LfvS-4j!m+T(@;Sh>q}_QW004{}?;P
zZRNvU4cdTIGoTju>#2n~p%ufH#?4G!qpX50VlakJt@~B|a|q`~*jBYSr-I>SLqaxu
zJeoO0_+v9l3DND<Ow~hchIMC@h;&2L_F*CdA4H+pT+<@5!gUizgmw*QVvQz#cWjWs
z3oJ)bcp2-qEhP!=W1C@H8m{}acwEXOORNr@sE`J~YX5@eXZ-65&#6qiAZVG4(`qK*
zE0u)r^5{STZNl1Oh3O7Ps!m>3L=--5T*bRma}!!?cptvyYB;0z4E%|zH4~eT5E6OY
z-f4PC%JZ5-`_54jLw;mr<^m!z7n(dRJa_+jeHq!J)rv9tOTy?qv>|i$cd7FI6+`Nv
zOZ249#*SL?=UeYyI05J%n`bmA4~_@<eiYLDeZ-IAx|W3Qb#2+AO?3?%Kry-<a!oT|
zV|2_aqA!wB<M=HUeD<_Sae$%E45HgxI^q~s<oNaY^poKrD3upL$^ZaSR*demvJY$1
zRJe>plefb=<!B+ffNy{+>R**{JixC2Y5*sDKN=|R+;e@iS(1)La1`@C-xm<z5P{N<
z1!VzYstpx;s&Qvo&ZNzlfy+pH6Nn7}+-?_VpH801?o}EbhPM%bdohf!08Q~s&A+_Y
z9no+Qc&mz4d=W3x(bhCcWl+G0yRUX0B@+XyCMW<j(EX9yO2b_2ZhJrkPnb4dF6w=E
zJw9P@s}u<yCMbcM)C#pRSAQQf5i3)%0qQ9}OmP{<jXNI7Og<mRS&?Vl47}Y#5G%yM
z@-!J8XWq}V<AT};WacDQ3ZM1uY-I>V_@@W&r8SUbHYImtc6aW^1w5LmL=9iPncgjx
zHdTG6wU_DcvSMr!cz}Hrs<b8`LpZ1I&nR*6THC|n7}#;)kkW=JLNDWg`5|#2xcM@}
zM~+pzF{c6{C;uU-4(s$JsZ~Fg(G}q)`#)dU^+K;$oc97Lka2}txCWJ;4@V|6J}9>G
zL0<wk`C|;o(=H4IfBx$C?kM}JuUrXan}5?|CrFP+O0-M@SXW-+Z}^&6WwA?w)4oXp
zwM7oX>^uwZD}Ap^XiGnb*pHeIFILaG$qS&a#Zk#0iaRUh_u%WOuMNh}@{Z{685=<P
z9JxvYsqME~6VNl4-#w*r&IQAXX1aa;T`-5FMx5k$#ysDGb4Zhk{mq82=LxN4&-&PU
zQ_P?vtw(|jF^}H_JESOoI^!ray6c$=HPg#q1G@)?hToqe-Go~_e1X2yplUDXdJfaj
zC|nrS(RI_W9dNf_WK@jm<qYdWY49G;*>RBwRAZ%AjQ2!XP?Ox$5~fIv_1s-$Tk<kF
zD<foF$penVx2OX$loZSgAgMrKZ{IH`jg27&SR58}^qrpfDlj(&!QC7*@!<fFj#w=5
zpjnNuKqVKz6z^3sIvRGF&BHk@g=t5XhYz56!q8L>FlmM?2HFcT3zjl~b)%vaw&e)Z
zisP-`$jBhBB@%z?zUg^Fd)&?ON{%K5GN1&tI{ko;>;*_S-sIZGB34vkYXIs9VE6>+
z-srXT5XZ{hNe3{uz1eWrj<g!-FzU`n8>rQ(cmArRiGBr463}bn%I)dv9^g|Iv>60H
z`cUUBMZM}yT?OhT+5&j{D)rF_cV3Z5ASH*Sb-oG~pK`dCe9mRx@%?|6RA?JH=CO17
zC{LYKoI|O&(@TU^h@P#|k3V}lXnQG6FY66@iTN@F*njeXbCL2<Z72~2(1Y&cg%Zkk
zF^`>0NkL<4CpePNa==NpL_o5L;~+GDE8ms@@qtaN#AciQYh99@if|pEmI`lP!tXH|
z@#cLX;LD+6nO2vM@~H=1$3D>5uqAf+%|4?DDN2ASxT&x|S|LyyRBwxyc^>qeTl<iM
zP5ftg2I(?egsfybsYTCPfyPV}MALyL+uT@$1hGEx0|czpAIr<EqNkrH`Si|mq2}V$
zP!=ZPuKR{_Uym1`5y@|v!!~l3PN^7DZmI{dtJHL{w7vjSC|c|H32<FD1zjpPIo^<A
zb7#~A$-><l@tFT^Nmdki!LcA8SU2J^K*0CW#%(@-jTUvhKT?gx4b%+i4N|Ce#e!y^
zETioL@PKh9QeH3&)SkH>eyH%%bvO7_@VVCyAVurmb|Uc<nPQyP(P$cX(Z)KI+U4Qy
z7m54_Y6c_jUj#QJZkR8-j)}#7hC3Xey3BJ@lVqesszjKseODc7`!aC9;7c_D8zk2s
zEAGI0w?xTmxFK-rAk50hP(EfYt*<1QKjd%3Jt!g~dIPb*MNCS8n-oOFL$pN8b%bH7
z=)ar6mE_WSzj?DdxQb_c`I6cHyIAX`HRXZg>h-^TRo+}X`D+x~1+k&1)&hZA(AiR7
zOdshT3H3ZI%8yCn0uD$d_43I>F)t6iQk-2%CM{%{>f|h$%Ws7deG^7l`^AAho2^Hv
z3;v`Jg>hvRAPriyAH?2p<#DnHQQw=(oOaOq1*UQZ>}=rQuAa40wW^cD79Th;JIrWh
zg91~^X6W^0uuy`y@2_t!#LMf^M~Du-N5KeHqD8?Q77n1VQlIX09u9`iSF2-G-H#rJ
zTb5to2H5<89@C@FnqIQcREsk>0~+S=Z>`x}Swu@@jaJhQuv&fHhmw!V5Zra+(YhnZ
z%Z|UR)eY^g3!d#eqs04Bo7cc6G#*rWMhGI)CQKgDPJ5-#R}_APXFMakJ8h5yadS7s
z8N9X>DfwHO56<%j{3<Fc;v_*5e}uNo+m4qvq7DV>8$Wt#Pw~TPw!OScEVx-<exy)$
z(`_hmgpt?HL(x=IjGF%;TP<q!v*%*)vDg41g=!~FU%dsI(<F7d>h*V2C@akdBbX1*
z3{e0hHk6}-ie3c1?Umr$UXyDx!Ux5^YXs%uB^Sv}@(#(71LJ$?pR1rZW)2VFf>tqr
zR|Gi+8X!^9gqr)Si8*@Tn*e8#foL$pFnoI5Q)x^cZxZ}wb5X`pn-?r|D?|(n_Mk=L
z3HRTY3EDg?@2j}j7^$l;bF8!1ZsBH*KvdJ)B=T8pSh>W%68N_!I_KKo>r|gTuboJQ
z8ku#>IBg~>b)*=uFjnq&!u=3Y#(@b$0oZubCQIK+qm0I9nb;6J_qe{e>yR%F#sEMW
zH18qrA_m{5WQ9t?LWj^B%)1>h;dWaNW;Qm(9%rh!8l*QAK`t^R2$FNLF1mN6h9!+0
zgo6#2nSQ<3l^r)YqvzzG$Ba|m@|His)3`rgBlR*Eo2khUdF^ajld^v|O&OjcXv?X`
zN-Zx#B0x%dTB!N0;HKl>ABsqufqINjO7z>bBuI+$)+taidZE$BHbMNVdx?Qbz#AUH
zCTx2%@oG?b!<{(Dl0bS3UNIcqZDTk9f~B_nkc{P#e3VXrrchHb$y#A9QvB`;Bj5)>
zllrTqiAcAcLx{`3Js_=zVfAJp6&OLsi$cy2gdj*CPhW-vWgWeO`{y~4B(xDL#t?;#
zaE_RF039sB2zZP*z)z={!P`_0gaCXFF1-DG14BWam!}U2Oi-078ayppmb77M97%);
zM+A`fce@Be7|A$tI%|I!81Qb8G2@*I1nesU!UZhVCmZ+DsDj@4o=WOF_5%orK6l?;
zqM{S1bZk2Gu1=3=^HA@d!s&$``9b9rxv@j&ItrcL!LB<*&>TlDctTI@Q2+Gd_roVU
zXS4H7`C9xxj`g2F)M)~h7lAwrDw)I~LbAF2nGrO*&7*ah)6OL{U81JV%h4~Te-?fP
z{7ViHVPa=ayQc3Jx4jTWzuT_BXN<L4Lm7)wDc#bIwQ8S}NZcq5bRA@nJe3Q=fXwZC
zx&e216c8hYUVuG}{c+RQ+Cw_nFunTG9=iJ6&+pKjK_p6sdsUp~TH*_2PE%`iOc9%g
z1u@gO9*Yo*$o3<8d2Qnf@HYj>J$kjgQ%_V1`zt^WZk3z`rI_b5>1M4#!)I9?UI<&-
z_SHG>)-2dtNuSDQru?rwAq=&doY$EG#EiGhZo@{*GzV^WCvd7V{Ovs|8|3OV1)7z8
z{nxr<3%Tr>p{Eyg#k9>xfJVBkaD6nti%`xad=2@7inmbV8BCEhnkACDSB9YG3laq|
zLWwH6miu@Bco4N&ES9Kyz!H)LlDyf5YNIrK5NZdb3%Femckpo_!tAH(q1o0%`OETu
zsQL=1sP?aIW*AZ$k?sK$knZkA5J~Aq5$Ud>LmH)1KtMXALAs^88>GAAJKXo`{eNrC
z(zSHXnR9kNd;fO4<2FckgY(K}$W|(A^>YIb(>~%6z-}jh-j9P6XZ*<EoSr;mEHzJa
z?ew~+Ukm^XGP0z3-@9sHieQ3+(D1X{+97G@hFWl}u)|-WLS3RnQRqOjkrcEnu8yoe
zj*=o%PsunXEf~d~9Rh)Vm5)G2l>plkP{_iKXtLWd8Q^^iPeI+IsDbkNXHe3-m=?cO
zoP}$zT>UYrXK&@R1!{h?*~k2Iw;ORIM)>?}Qs3EAa#8bFJ0jk%clF2aByQ9!G{5=Y
z5w9T?qncb(+#p+-7luS*(T0&qknjaSSBNNu5Ijx$heIO8ah$xqTFq_xO;Wp=li3aW
zK#YYtI*~I4yh+8ShA=i5><R6VR)Q?~)7G4uIv6gTruQ|TmRT%$Vaxt|W~&WP_bT1)
zf_Q&XU{o&VGtVT-=f1XD<E{uU_kG5`snWKj=LQDQ4h{JHclmO;HJx#TI>l3{8kMaJ
zL$!@jzkQkmudq9tJk!s)PJShx51){~6Efie!&MW3$#BT2_*?dTzuf3*J5ARi>^!Ag
zF5FQ4-se!JC`umLy8<)z6-$jm`6R6Mp+s1)r$a1nJR`1LH>H|1DHiF1q<pzIA)4dd
zjb4I{8%yH&ELXpJjHC9U`v*19842dxuYBx`oG3_Td`8cEfh_$Ds`0~gG;RjP=k6J*
z|Fo$M{tkO_<PLr_cU5XV_d$8(zLl!FB~bLp{a}^9i>t}Ji{0Y$N$LVyFqK9sAz7w0
za?7T3hdu0b5-|VHw6W{F3YALrBX^72`<?Gr`x|;AA&896w%{k8z+xVk+kuRmDVDfO
z7%D<GAO^veUP^*zpW#hlb-=6{{zLSr&NcF(RN_qX$D)Fx)h_;K9@k?NB$wa#%>+wG
z7Htqx3X-QVuq`^<TIgX55;@OTAGl9gAc1B|csSR}Cn`5UXY-S^{WM{ixX2|iorl4k
z6tvWg<8KiD+2;##8BW8Y9o!VHIONQZYzc42Uz*IdT`LaGs3*!t63j4GNjfAWc#0s8
zR<2n2ZnP7BrwNpLI-6T35uYOOS!=5y!fYayaj=Ce=2OMybs9PD(M<w&jv(cqI7_y@
z1I`H!Hh#q_3H{c=*%B5>;esEicih>~aS(7#$~mgN73Dt$?++opcv&Xl6YRqXJ8WU|
zy8^M~rk-*?n-V9ACiJWI{nTDDD72#zZ})3RX#?XKn^2DB$2$K3N<WI&ntKY7(x)w<
zzMAwpbXc-j(6Uw!gMLc6(k;=4D8<tdicC!g1O#8A%va~@j!g)C4WtidbHnRBqu9eX
z{1M(`n=<f{nLe>@#p0INH%hN7DN7vVWWM^~GpJX58%+2pkI)YECziB%+Yjt;WW@Gi
zv7G=(Uyn{UZFcV;+KLBUmC5jBm96Hkc@+48z(_D2e9+Hd)i}<u@^v|eED1^KKzK2y
z5D>1`@=egor1GgaMg0vG*7D;;OI7CC29Jsg2Z~RU`4G@>g19j`x#i<fUTu?(Qe)%5
zk$390tOReJElmr)^x{+_=v$x7j9X2?x9LR5sK^y7J0YoO-cwRw642d2O%aWWRn<y+
zU%~UwUX5;kxH?@gSLMlM#4^?G?E}U(s`dMiS+Y{qq3@U>;o%zm9_uLnsBqC!=tI+5
z!yH+0Mb4=FldG3cEFYd(&n}U=E^^E8j_$NNF!ZO*%LsoCaX1-itgZE}2lE5LrB%LS
zhe2^Fb67V8Hgc4~fEF5+q}<n-FE4wl){ZPvx+eB7H|G;c2Me7?u8Ra0JkKKptI|0z
z%D>VuAZ?`BM^M1w5K`D7b~`uuGPz7!tbNRA)4-XU=N>D%o|IfoD;eMofF@(T#0nhN
zM;SMji9RfEsv8)?-=e5Gb#7AH)oA;cBWs>iP0EG&aJg`_0ft9pA6~rO;0_;tVocOY
zUDeh>()mK?$h)B8?D9kH{3<_wCsC;9vxxz)<C0Fp47yG*IN?PQ=yrhrfWQw;iV@Z9
z6YB|P+Ziwfm3;yJ+<xzDcCjrX;Pn}>GA{YoVgFQ_aZn<9rw~CK7NxQ<n)4b%Gr7gn
zN^->e#|7Z4t}v~4{fN~5@CZ^6e+V*R!T3oF-{9_;ci{;oZSy=?Ck5&?x*xgN0MKC{
zFnbJ_A%u*{qQH6+M&7>A)_vQn(PY#K*#j}SNEm!0^+iIR!JsAxJ6!EIs5Z;jcl%8<
z>J=vLE&n#D*XkidZ;eTWpXJ<wT0prF9A~rh^J2kWQQr{OCJz@V9O1Y89!0H2p9S$^
z&OVY5$-M@t*za64!Io=+K=>2ycA44jFa}GYIb<7_8Gd(ev|b8xft8h_Mg$$*J(g&$
ziNLTil?Vt9yRCh^Oy6Ci#$>l<A$a~kU1&32tKCeCtp*BH3C>t{TaX>81Q31_V-499
zp7Hxtz0Kq{2&m$H7RD{0N--sJ+uR7*w_qOVaLE$Xq(toBMKF$VNA;Af!I)Y_5`%|O
zuaWs6g`M35pMPCqZ-Pg3|B1fI-@NeA+8gtLz(e|JzOtpM@5Q-L*&S2_oTiwO_f=&t
z9qZ&`5GP!)zN7l><`*&edu6enha)AgLd40Bu9pRv`P%nINPgM?vy~{|;E7$)zV)XY
z=^U{ZL|9?LFC|4HjgR#|9aSZ0j=VctHQNy6EU-)-NAjl^xGw7A3=#{Px}a2Q(@obe
zV84H&z$j?8oyF-7q9n4{_%&+9X(sivgwP|H2n(rGDT!j-bTUV_1BQ(E%t%ccc^KHq
z9Ou6+7?{JLIE)l7p&M>=wpw6%zkQ{m|HfQB5jF`f4$tAwTFtUP@rTLy<gi7H;K+ZZ
zB7t8)xDN1|4fxW2MC5#@fte2+gcllsd<;AWTq;nJ+7Wf?_pjftPnwcYDs}Maa>7rd
z-zxZ*)%<=FjSBU-Ru)q4qR?QoXLlzX^*k)%&f6Kb7NWoK_^l^9;dSu?ZKJ5dV}}&S
zk?hjpXC>#4p1PY!!qwJUcjPwovL&0MAY0@T@a=MIKWCT;fgB5t;grESE`k(lEBXEY
z!TkV%mlO5CijP}5P^n>`l11U?$s)&k@&q1}65R$nh!sH`)2c;*sev($S^uNj^d>_X
zD?#Vt)qryt5?q*cKTlhpA02q+6M-86;?@&1_JSpA<bk_$U~r>9W<Txf46<MImBl2m
zcu>JTl`wb<Q-HL5j0ZuyKiHU93?*t4&T;n1HjMR#+xvu@Rsj4J5smwl6v5+&%v018
z3(CS|k^AKhu(_3Guf*V%1wOJ0y=uvAi+ct%jG~9OMXc#Zc^zO9@C>&Sy>q`mkv-f7
zF2ZI#XgS;+d6sn6$NqkW`Cd%DP}5L?wu|d4`r*vw?9V%GYM!Y<=|uw%Z3PnYn$o)h
z{k!jmH4eW=X1`Z$cU&3-VB9v}AZ!}U+2|V)M^q4>)gVH!T_i+UTBe#uA*<mxgu;19
zh(i0E@)pfIK%t9OC)(G9j{b$`!St89U`!iHVhYA3ow>G4&vwD^MY`Q;{5kfeo7N}H
z30N4F^Y8Ho+8V)`NEhr4<}88gguQoMa|ducGYj{ji*HH=Tz`K})EOe~oULy^kA*{V
zVeuhK&3-YWBZ5_R<lH&iOTc;Dz}AgcA?RW;TjQGLapZjyBip`db$D0SsQy)wppgX@
zZGqV#1b^@W=n^mS<Us^>td(l34$T6~3>v)(iWl^3(FvZb6WfxsV;4ewxcC`(kigwj
zFqrn_{jSKGq03%w$vfmu$E%S=uh(WJ36|IB@g5|L8nepQK}04l6dfwb5gq=47RkF-
zjso9q-zPR)$7+nnu4M~cwZ@iTm+{kNr;pQ;>>N%GzC>3%##DO9;!x#Em~!oJx>0HI
z#Aw4p=nOZlX;~*dAT<vwBklNDnSh>t=XcE_KQ~D(PU3f9Jr-d3))5HbkjxPi?}!>3
zyJ}fNSqna-NADLgpSvBJW9?PVU}W`{trchs3W#F8g=yWT-|d=9K|6S{o)2yMRFdxb
zI3pFKP<CzqymLE@C`Y^X34Vf%avAw>iRpUOfge5`HiXvSikYjaFvLBFM8M#Id8WSG
z)mGy;!MvkG@?^DvS&u-8WRvIFMD5ha`4aU;mkzHKOJU4@N?!_F>UMCSaVsAtB45LY
z`>XVaX&2D#-Qq)|Z0Wnb>Yrbk!q7VrzCuFBX-}u``Hii*Y(2{=wyU=h@ps6ouKoB@
z&L;ULd+~fvc7J-;#P3>_M^yjB*zgi3e(grQ=;MJjRkCMwaC8$9QcR2IFLZtIkS;OX
z#NAlL{DB!I3bu(mm2c>^c;)TIs3dgudC5BVth(hydttmaE$&l%C5d<NvfcGj7kS?X
zH&<U0o%+Rlh?{Ku?bpPJT8tFJ>47ROo9me%W0IXoI`&)PJYP#lSmQiRwRX)`4sFV4
zTWm(WaarvS(cQ!Ka!r!}N=gW3M0}&mZA?#yj}D<0k(X$6OLWx9AXZT+qs96UIrgkA
zODcFb^i?FOOyl3bg14;d9fh_lh<PWRZWtnbhPO3K8=2cik6gM2S=w3pb~Udp*&~8L
zLBb1uckn`=Plm|M_bRK212eN&KP&=1p$)?j8ChTChIJLyI$}Al<=l#;Yjx_rbB1k&
z^k#UmcFG!`&_+l=CW;(hmS@=qPU?^irU{1$Ub7U5QPE+S7ZhC*9MNvMoNhF>(XqDL
zwz@IcaoUZnIB~D{zQH9_o;296zV}K;JSJT#yjv(ozj)aoUuD75hj(_Fm{So3avLm*
zf&<9Rk4!Rts2<#Ms7l;@QOiHWlEQaW?GX5;o_Mf>oV~_{NwZW07y`#ctUv$U*?XCc
zTQ6EIws{DdLIKK4EotQ7_-V_wdagQ1eRgTEm0h`zsf*Y8OouSNNd9g4sgj7fWLfs_
z9bwNl0*T;EGfL2HbkNaMdKqU-HcM<c9wh}A1uc0k;We(iRJmuG%}W91W_GwM=28c`
zV^<hnn3PMrrXe@-qU-hV+;ELxy2@m$Lj^Fh>2#G<^6rqD(YJgSyrp*dUUuyP^=QC`
z;QBb7QOvqs20Lu~gZ&Ye+|CJ}OPAmg4T%aU+$|vqM*&BXD)+aas!fmQddxbVGEz5f
zp)5F%(v&qn?<*Kemk3TzG!uLLJG9%+3c83KZ(}viQyR&BpS!f3&AgpeHF43U=b)rB
z>cPezSXqQDUHJf`a5@j62hWhnEr`{PS~2%E;$~4`n7}L+OqBLO4|G4Dc=%(xW^FjI
zcpOm}Fxmo|VbCiEZp79sk~MmGNPo}~n);#Ll<iIIdxK*6yNK)~9SDcQrwMs?QY{>n
zGk2WvOhuxY!uoc0?FTPWp^s<^U3uuk&d>XTY?B<IPh*+ffyOuOW9`I|2hIOoNC8?)
z!@TI07xoy2zIQ*EzfkzL*fg*#v`7c5@peI{m>`!;+(m(xuDC!>g|&pyu(HZq>n|H}
z%&vz_N_l~xitPkcgWv|yLS^JIx)?FHRX^Y-&)2z@YjHzNstYvQggx(ej+;Z*ak42n
z838N<U6KPY0%KMct4R46AHH%i(T=-6dEv0msjC}5`2-!#x7}#*dZOB7_S}l?p%~#f
z)%zi$fVWHthXN!_Ve=-u>Z`ouaU1i!vM;>fdUahtHQQyyqi8-#rzBh^t_%jhWJmtP
z5vFhy@~=p-=-#gYu%_@?#^EVQbN0USzKeCElI}}RGDc?Lbv6Di7*L6ShDiDJaXSo@
zhF3D;123cS!@^*8Syjs?x8`p#a42D1AgH%M?WX_jR)KI#+4bUN(>Z4-T9)AR2BF8_
zb)f(u56Pgq7H5bEO*cyOacB`gdHnYpUy)=t<@@VF?>N4*2KU{gu3v2Z#d*#g+lMHb
zprxhr%U*^Onf)~#-pb!mw}*-3y;szm(ta;WWC0>6LO5h~?8UPhj#q_ye|qoaj!cZv
zF5c}s|GGY17(=i60+E41WDHD@4LWfAl_2lE0`(j3s!}vsKq#}C|NK`CL~pkAwG%l%
z6K+MtdRZ6QPFc)|%?^3b3A|UHDU^Au*s{g+B@@#C)Z_d2!WejW%<g^6^E~2H&R>`5
zjAcntkpYjtQHPS(JTx*#rM)mm_46udu{&QdH_YHFdGWT>qihttD*5T+|B)ZqCc(gd
z?6EsnAst`G81p3wPe@0DZFvy`N%>X=3}rC@BRS&bKU}N}%T>5>QgFk^6`XgPzAVDH
z2^%tSMD9~7(yEZ6RY;)VuR4hGJwYhH+uMurJ`aWF(DhlE+*QwX0(=BvQWyvjB$>7`
z5U*=Ibb0r-pd;nvlyxwYo*wrx_W^OaKt}Wj@c)Se9j*w~Yp8yQ9Boh}dA!sw{3?eD
zprqQ=M(ZB}l|ty>zh4XbdHqAD#!c;h!+kLpiQHp|u}xsgP2jgnx(woPwC5B3Qh|r@
zdTz1{9w&<VB_-VSCpDjKV+0wb%gtYXPMMB1S*cV&!Fb}Rj!+HQluI}e)TQuwaa2QW
z{Q7Z7UySp1C~D-@$nb=rsu3f~B@j*Zd0xzKj(;!1M8m5G)IkKSC%yEUNi@iR?Z;$E
zUt7V!=Mv%Tys%No$I}mob(to9vIb+wI?owDrvo##KM32YPRx5&Q!K%~12x>ax0?qb
z-lVGN>b|sYI0|eivUS)TNUb<vJMa_pg+du6#HhvU_1eTa_ao%-&fq%Gp-amU3YMxL
zm2&pR1(h6}^4b+m))v2qx2L8wwaSbF1c0asnD84zc2n!~kA%S>h+=T^{rfXN`WP$p
z-s&(`(5-iKr@M%4Y_ZiW>>dk5HJuPV>KC>M)wFZf$Jj~kkDpKIx#sK-8jn*CJi1)u
z!%27U@}J&`S(Gk<Q~5H0DeAb-hc0XF)<ZeCIGye|xZd?URd9^iccAjKH_?GgC|RV!
zlC?Bl5)3$rpu3^Skx~AakXTBRvX4MnE=#7G-Y6Z{=YJlqISZxo$B!PZ@S^*(67QGE
z+*UCte7LTgw^zr9sRdAJaaVYcW`n~mkin`<b04yZ!Ib@qzelNkE(xE#`gg|w6lj9y
zk`EG;o&Al6s7Z6wW$Mt9=>=u7{3Bcb{Qv}8daaRBpws|_nNl_)-vY-jU9<%3zX^P$
z#CtR5lCiY3?AN^!4NFF;w2bLWO&Uc2w@ou#si?fBJfc_ddbnAPS1V9Y3_x!X)M<@~
z67x$%Tm%s8|0&JmpUqe(I+Hr+(vf6eFoiBfxbmI-EG#6GP%(bL=;^Gdbial4$WEpo
zt<rGtOzjw#1_g)YM#J>6^1c^+Y4}Q2>wzvjdAj-iX}pGvt!Yknc1{m4s?T)3&XG+X
zx2F|%auPKFQJ?trdC<T7{73f3kPRlvD=Sq|IXB#Zj(~E{8>iZD2jY&Vl`@>PRHsNK
znUpO!g+}lYq+9<jrKn=FmX#~WQp?D~Fl7-D7rYW)p__Ch-XJ-*a~0MF*z4_EPNf7d
zB#s?ROUq=AZMK?lMa7Yf<ty$=(3@`xthEHdAbk2&H5&yPnZrb76zQg?L?j`H6_Ys4
z@m^|bUx0oVH7sV=LBR_dBcrdA=RxR?Ztb7Xp&nS~sa9t3@cR1tNOoZ7dSATa$I^xd
zffp0)(cMobiU%1skfaKTXc-qo;RaKJD-MQi{R;RYRJ0GL5oPuo43r!QqKs&$Y+xhU
z0`BWNup-cAwzjq=qplv8osSQX6Jsoi(r~Sk;Ll$Clqlu(GFJ%{&UU%_=Uq|5?Q!1*
z{smw;WATA~@eDVuQh)h&`OHU3@p58l$Uq{<43E$tTP&<56OlpBu%_Gv2?ULO015{w
zfd1IHyu9bN+VM~iptijs>*zy{HnIqZ2u@cs436*<IWi_aA29xjjZKA$iVDiXG4^uu
zd`#|l`g%Tfn-h8xochygpz~9<(_jCi3zxD50f$uDe{zWkX5lz&Te*XP9jk~|uuy61
z4hf47A6;xUvdaTFwfef%+3OYD#}77&5-m4%b$r5ft^0pp;L$%N!8qN+-H!T0dYGO8
zDm;s#Y*CYnB<#uy(vNgJK3+CFkp+Cr|9zTwP@3&0dVAn9TaG^-UPqL{Lzl$BPl<Gp
zW7WciK=nh-%y+}&m{or-fI&RMVOi4f>Aap+{?p_dSQ$f0sG)^z#>i6vh|l}~fdc=%
zj2t*Z3|^d0M>gK^3KfKk-ozHO8$=1G!BwEFTP1V&f8OrjC;0*?96}MWR<W?5(VAFi
zfPB<4Z5p9IZ!19=%4#VIN>BYOJQSd6T$}!35$3nm)SCzmQE&l>%p@FKwa#FtOdm4z
zM*9`Af5q%k*nBdvn@?!dd4oD5%&#zkhqz~-5L$fWv8<hms~nflbaNY3;rE|mU|E42
z_P+~wwY1{0VRG3Xj0w-YwG4UA;c^LA=ITdnfP&8Ri45J(xGU>FD#9SwbW6`USd_#c
z`d$1VumPHQ8}E+_R@IjcXSL)8C8bjT5qt`t*Oai3mp5zA(s+4WIO)X!IKl!v6qx|e
zhnXdmsh_7;0m3d`0)Bru1W+f#8hmb}yCW0$N)vi12i66i=J3^_7WmZSa5~ep>t9v^
zUj#e~PvEPeEW@!tU;J|efR6$$HdB=?xTWqKfSd^kr-}Zte*lk$ghB3XG8-0K>G+X{
z!oZhrt@}Oey84HgM%(%Z0I&D2Eo;uhZ9e(7%1%dDBju?%1&2v3lG)OR=>Ln53{)=-
zZ_j}iNi#_M_XR;XTe8hsTM&DW)3x@O_lhtvKkvw&gJ%n`b<b-t%EkX9wFo#%4h~oQ
zd<eyb9eBKP%H<BhM`mJ@Jmq?~1=%G-cQ7R8lTHJG(|;nB0yBQRH_v8!(Vu%Ooh=;6
zlc#1)Exi%%ANU^&oQG?JmMY?R+0VP(){5vt@JMGaiVp*a$W!8U%D6vIgSukP|5tZT
zq0K`fX$my~kX?YtQ|}HNCvi)IUS+T=ApbrS@5T7<-Y{uEs=nPN;^JyY45oBX4~>mM
zU%q@vHtxg~2$2dES(4EWo}~1NrZ9LI={nmQX2BVAMgLDK4_|_@kV8Lx%K83X&dAu9
zhJiue*Vk8pZdugQd&A)=(OYe8pmmGEZlxVXR$e|9k3s$N8OeDd1W^P=h7J#F7jFmx
z=-{7Kw<{=UDF45bDD|ls=o4GhzhBp1n>J7X;(b%?&ED!W{!BWvg_RHr34Ls)IR?%x
z^z}T?)OI+UVqp4@0;|!s=bf4(?e`GQ>#p!0!P{t*H8r2}JMVwq*f8UD-2VJwuBL4E
z%`-7^YhEHOw&?hHx_YNQqK~*PLMSer0D<)cJw7y0gX)Qi&jHzw#uEPj=qpV@PcJtz
zI{M2HIi1IDEm&1UBYDte0eIs=^8vt^@!D^Msj91=JEQE=fzoLKLCX!AeBc9~{h>2O
z@PC9%0~gk9(?#l>@P0W*Sy`Fl=Hh@mom8BzbQp&Si_4HSXfMLBajH`cd@lkBpm10@
z`PuMMUrHvf7sur;{U6Z=tYt7<3=flDgJx@6n__rQPENV?qR=~QYwi^);!i|>W&!xj
zXSMVW4-F4fYLw`4%2L>>SXkt>cXZU|Nfrh|8a@F+dqBioRfP$T*k+SJL`C<6TV?u>
z+Z3Q&h_9cY=}LPDoBR2Pil0qQ3;q%m&hVl0pPmgSV-aJ$wLM;w%`YnA?1IwJIHp^3
z9g^c5Qa|dXMd@8;K?E6k9C5PnX{smmfAq|T6y(AQ?7VEyR((!S&xS&ks`zm^u_8NL
z0t0Axnukjf_P)Q}AM_9h-%C6aA-szGbo{kNhO{3!8ecsC-v4OTM+%mYb3BQ_i~=Yv
zZPE+_J^k8Ji{Hr9)YMBM1Ee%=ZEbCY1q{thFbyMPzl(&4xq0&7Z4l%(9C&YUVq5Zq
zlKF6ST|jsuF?s5x|L49`Fcd~;fDW*3r&df`J6WgJPBMaA*eiJmw)yM$*sh{6Kfi}0
zIVOfmK913lO@=!hz2MB_(QJ8#O|^<*Wk|PC7#u184<UVoP&9o(c3c^n1#(mAyvxI|
zQdEWy;2Q$2VLJ8wQ}{=U8ARRXe7cNrKD98|^8Xnobn`#<qnHk+M)yr2kt&u}k?qUm
z*jV@P(cF4mA)~AxGwstA=D%36v9V*4lNk~d6F1l&C_&y(KnBUB=OeEbGFu`MlXV{h
z?0-MpSOmge4TYLztz%*4^8T`#wFITu3@Q}aU{@k#l{arphrdd02tM9~2Dpj7^n&!w
z-qvt43Azy9(C)MUWH1a11ohLYvB_+2Z%<%QS5rf2z%N93$!M;ntZZ<;to7Ltmzsm6
zAxs(<(9_|zwoddon4liU=38$#L~YE-|M82!qhTQ<BeNJ{0Vnn>B2iDvi;D*ux+-XK
zMB=`DNgRxhj;8$p)<b86E)4<(?($^o#$a)e4E=H?SK1E~gRNfTKju*@z_qpj&4!dd
zK0boQVVjCOiMU-ab?Yj-Sm#8*_fmjF{S2?cyue>TbIJrgavu}mzSRHRKmyJXm)(4T
z!w|bs7iTcDdy~a{AY}n#*$L;6_>oa&d3RY^XsL&hwr0%#nJ|NFl&M&;w}UC?vPD~4
z7Kwb0-zjq8pP*dwKl*Mjq)W{QQb8g{ZZ7g2+IsQ-eh$jg3W<r0H9cDCz<Ks;!qXHP
zBW??h61<G}2ui4)61m`CJ_P}mq?qkSReGB6FB<`ffK7vigG0s3%S-Fu>egAQ7hO+D
zO)b6w6jpq-TIrB!egj~r!?9??`ap?hmCr@7zlRN?ml*!zU{tdWiox$*0L40QB2=Ua
zuCA<v!C~X!an8vfdf*(Q0B`GIL@<r=33g^`?OCO2w!^Of-y1)A?mWoK>T38T*dO7k
zfcuIoI}J^TzZ%*Py)<cX(<7-%!t>HEg2epN7vXmQNl*NrE2@cxOXH0GWVqZKFs~uH
z^-)D7=E!1ep_?1JwE4*3EA%DHdFTG&<{=b)V#EIp7Np|g8t|XJd^?s3VFMs4GWzoJ
za@H)1UMfT&SR@1KM}Q)wk0CCgfu-2x;J>uO$F=zQF%D4O{O{jmuCLur-e_o;>k$(Z
z=TuaTc4(M5?$au(szS@k%6!Wt2|CVpCfB=!@5}0$`>qB3;XYtMk;22mo-$g7&XKr;
zhlF4kzVdZ%vjvZdCkYw-${1oX%5$Z3#%*S9xWgwpvOBe~;dY!*`orTT891pepk#pN
zXNJh}$&>8LY>Dmd_u;Q+CMIYv-&t94mXMN?dg$3gwh+>fQbNkwPUs}E;E^yA$eAtp
zlDEKMf(sZ74g~{a{~iSum2E{_Lc$;V{<)%?Tb+riS<)9d+E*zS?a25#GnU^0P2&{r
z2*mJ*^ZLCP&_l7uahdi9k~Ql>W@cyCfg$R^nfNnakIUfCU%n8*SKbB6sEU2h&Q^*W
z>&eH#Az~60rNkj1p%UezCd%vVNni~#bDFFv)x)vD_aWX68Jn14+@mLPs{A1*?Own!
zrYbxAgTZdO8T<EKt^8N2)^O*xY}r^7pohHt!!(<$jEs#&tiX3Y0K;&SeCW3UM3R6>
zH0>{SSO~y}uYkgd><?3=q8Ow?j2g$s627faLFcM9ru3H~xaCkYofwJEu-KtPWI|%B
zJYkS-iSZH95b2I^!p^ZKpa#P<HYc6v=<X_!P&|_U!Eg*bvbQ<4O;SYfOXStwMSosP
zkL}CF>|GB}UI+S_k00~y+v5elFmZyf?J|d!`m%O{JSzaWbOR`LTQW@dUw`d`O{M(i
z4K=yfWoE<8e!bn%h$%`48C`{jFg<U@Gue?##*hg4&rydm)U;vBu`YmS0#~p|X%M53
z5Er(t6g>%)4r!-_CZlT=y&Tc37TYMU(??}aiLno=>Px#rS_k%!*`02^cHKxc@0X*A
zIPWW(X}BQ;Tr!z()q)S4AQ1`dkou3Z!nBcfnmn`~yS}crvLdt3%wYZcH~tEVKXqb8
z?4k5dDG<m^A!c<Y><f@2bYb(!h*AzwREQ?PBU53c?OB`tv_7-WZfCJmf7}xouA-yE
z_&8AUar1O*YpXylgZO*mfIv#aRoOJT=GWNS(!dmmr?Zm(itvK`5-?@vxPI~Om5>Ve
z)>gKHmiyuxHpdpZGlSrGRw9fRvBz&d11b0iN=hZC`&XjLs<YZ1(3SL|oY`C+2;U@D
zR#tY`IqpFEvaeMDn#*VPH2sH40X*|XL{c)K;cP;?+;H?+PfD3;T=7GL$*aVdnb_Ox
zzy7(sCl>OANhx71JB<LJ`pO%&wZjSLwVa1*<_f9~0CZYwi<U&bZ!p3SKrA7k<+96w
z0Ps~=MIhpj{2P=)h=_>R2EDzcg>JWS@d)F(ze_hU=4-_|t_Mf8sCTRaw(a&aTtga;
z3cJbgMkN^=nFNx#%Wt>$n9TAH3Ss@p{FCN+fJsfvG?5m8@e;X^|9yuVKe)IOiB6X_
z(_jS^YQwwO7%toI8%9g3mHaLhuW$}c!KGSXS8z=3w~?~Hl}o(Zoj8b_)Q`{WmT6H*
zXi~oXwe=*cTgc%t<e6)5jV*ZP5W7tL$A0-NWAS+1)-(VEm`0|&-l&(jiHy(<W_PoY
zWC+AVWJIWpS51%Vq}SbCqd&|vNZQ%k)4Y7C2tdQev;obM0}#ImI2{|tW`R#sn%G0(
z>i+ks(c(n_e6zdIsQoHMAfG|LkRyZ~+w%X&-9`y_gTOG}ukHF1A{`zJEGp{@c!D4J
zCZ{V!KC{I*&==hn0TlSE#+Pd653;~1#clR`C^PPY3NXpi{?hweAP=2#J`sErVzflK
z))Ly^Bk{ju&3le;>DIGRld!lO8v$~jW1HMq1JT(s7s>4(YzJil&PqDws;$#g_#EHb
znK4D95V5hEF_LEng?z~c!1)xiM0@-1i#{rph~Q{oN4mV1SCdtVbJKctwsQor_WTo2
z7Z8_|l>U9!sAgr9&v9`?(W1U>H15}6H+D2U=pYc`ZhdJ6+8)OX4D;PM`{S~<1s(V2
zYV{(|;z*woHJD~k4S=w108kbY2r^t1{R=)Dv6}mhUJrBX8X6@*%@tzGK>axjPv}1a
z#)AOSC*cxGm@cT8^p<~Z=7;6T+?+tzjMRfFDteYM;s>86C_HXJWNSmIqy9(5yks&m
zGDMcfqXa0mJ85#SC_zq%fPaM|hoK`!`5z_XVB<0e1O%vPY4PI3JI-=G=cqw{$?!js
z1<s)vIHC0U^XH$hJD&lX|0Svv*?J#i_7#x6UxwhQutD8)%CU(kY~1Vt{ri>GRdqoj
z5*bJ)Q}ZXaDq|1~>Fw*wsi~1^HSUyk@Sutn!HA|-0!Tza0CG|6poJ3q05ILefX;R6
zHGp;<45kV*v4NCEvq_ZrYInuoh+d+%w|5Q5`{BfMh#IZLhWJ0K;G7(VX5+V&n33$v
ze97+x1@mq%oi$!%w#@r$Jp^OJx(zNYVBG-9qz+8Sr}`JFrc*2H>oY4VDsK0tJjWik
z6`B-w3WmruS0Fd1g@h_bH4m}0Tqs#u7MOF|U=?K!u^?*-jGdqWIi1QlF~7}7LhV1{
zLYf?$)}r>?w@_7cLO*da!5@hq@PRWLOl%RRgp4Sbifu@fcf$`r7$>5Q>r-(62>ym~
z?$5<g76|yztl7`Yz$Om@LBPyJO#8<o`B7s%#i8=?5d~rnizaVG=c-K-#mpA_PT!Zd
zAOQ9;!Mf@H5(N#kBf2PXiG&c1`lt^zsUkz>t>0)I>h63$)&UU-w~y(MEOD4v+m_9y
z+P^5P86Snh0n9ogDw<#j*ktAi)*A_MniPdhTcxkBco;X3#c-L~Di!pS2dvSp)7G@@
zzb3<m*QctA>-W|cOW)fF!oDlsczCk_Kz0R@ArQpgDHt3zM`d;O#niz|VsK+l<_9_y
zG=IS3Ac}=_{Z$w=f00SHY2)^zD<g`{<Af#@nAIEIA7hiMi8<nJR9WtVnK@;8@9E`e
zsAyjSrp-;TxP)}isz^m&_XY5GOhVkd_N=A|^8F^_)YK7Wcip6IOH-X=7nBJ#h>q5b
zws!WuTL7)l!Dq;+v<5@X@HFKwbjOkWNyOZig=)n!P8Dsn;?-#A^6RqV55;}k?=9bP
zSvBO}Ns-^wS?f3rW0%PMv_BPw{<zp^KYvOjb=$d&FfZGD^yJ45s3ldyWd5(FHYqH9
z`#ndXzrT`qioVj))0n*8-(tmP-r=TIx<Q${2V;qHzAoK$Ik;eRJy+4XxhmlmEdCj;
zMx$YR!~gRO3?`y=(ylM-(d&Qzig4nd504YW+EqjDm>HPPtkj!5Egz_szS{GJCZK$8
zFCN11bndKOgNBw;t5}zhTH8_E#UzZe_5!7+J9XXVZArRzGV%J{^1PkN%?+D<&)d-r
zJxsCyQVad%D_pycX08|YPFgplFYGmnxi1Eua|Fecz=5t|=x{igM`U0CpQM!;{g*en
zjTe!Bll4@emkvMjAa<p}zR`C}H4`LtHZ9Jdz0?|_7rA3Co#lqFBhaLQ%ACfMhJHsX
zJa<>5i0)Pt8{@nYrTP>P4cK10$(={neU(+8qny~x0Ldw?YenXE&BY|L4kDvFD+7_?
zm})Th1!TFamh#MZMN|KLLe)0y$G_&ccwbL4cN?MlMK9I@03;bI87pm_lU^_4l}HG#
z0*^vHaWbUE(_LytXOX7_iI#qeL?T)fi&g<H>!0MQM>3qwrJ;XoqbJMY3lLESDH$F$
zsBSma`g8I~{uT4bRzV%zdv^u{e-=o<_@-@Rs<qWmSKN<Vy8TDn=f_(0iZ}B%f;D5S
zWUUO>f#yp`)1&LdB@ZI8@rbh5*@S-ER5Kwq{>5(Y<dLFk+h6?(`a;(at1iN^*sPXQ
z%h%GnIB#j><5SV2jroPut>c9gu)d^Bf6{f3R9{5}A|D;mXh#<a$fIQ>tA#qyH~g=Y
zv!Q?~`!H<2lF6*Arp6$n1hJ$cy%lSthMISJBvu*JcHRVGo^p_FN<&s+R7{6wg2FXn
zYEL|J0L|%DJHrSei+^q(x5)4YzmP-MFCNvaM4>oxo2djt|91uRsh^l1a~Rdl5RiWq
z=SFR!{1dhxVu4u#BMzn+lOJyRYh6|{Dyx5>^(KSnn`4}@h)PjA3u&CM8>f`DwP@pC
z?T*etUhu^V|5_7!UY}&%AQ|Ps`qKToYz)tkc1BT-tlSgkWH%zqf=3_~Gg?98+A85m
zKADv?8~O92fMU$))M*bp4I5We*U?1aK!j6%jgw@X$gB5vyfK_s#XtIfGl&t<e|nOw
zX)j2TX!^lO!#ma0hr@EEr}b0r*qdx!+Ci=N`-G~YeBb3t<c8PTiBw+aYk!o}8F3*@
zXD{N9&K~`=DudSsn2yh9Ua=H*Gp%Z7lK#tMA(mR3_?xL3%S8$^YA&C~1#n*^#ySe*
z5~ayFxvuvc)_&#Xi#nl_tKCQyf)??qKezg&Xs38HmQTjIF6mnC-KK3e!pg*|#+Lhw
zU0%W$_gY8AMwIs%s+cWKr#WFH=Gu=^R2)O#VxtB=JF}NKbNYGpx*BPTY~HoA_HLSc
zhdCNRuAd`mS3YvL?$XZWFY$p8g9@(t!BT^%yR%v^hCRqh_EVr@2HH8HX;>)UX5>ES
zAYX!JV(sO?M{&E#Yp%DGk~Ij&{2tfa-ZC*nJGi+6v9UK?gyJNbFR<xxOcWCt7=$kh
zu}Q8i=>!xaK6om<BA<F6wxF&%O`#b;+Mkh?W_ls~GUR>ATLh`+b_gkgmAc_mcBG?H
z#vW~01BtaVaSJ!uL=B*c<@u6BqZd5x3RUk^dbdN3v>Ya>JyFrIFowRt6EAY@y&u*=
zSgzxfmg_XxGgdmv`d%pG)bxO4oZXe1EpI0kk%0l7n=5e~Q;m};AllUY&Z!zJ<2yfx
zchPe@j_FW6e2;ixQ5(u#zu>LKL^4Y~JySjB>P*0Dp6B@0>rkj_HH!&YyE#($6PNq!
z0?I+9!mIQdp+K0<UVVXKeezi0KHx1L2?dsj1#kJCcpK>%g#(0&Y(Hqk_fz@rGku~=
z$~Rq%wqjK%oW3$;Cw{_mj;_&x8e<8I{A*6#-Kj;C1WFDk(hEVl<P9Gh!YDK|fBxuY
zpl2EmR@{F@7J7gA763Aq)Z3ePWt$dop)L2=7xo_iWf@?fP$;73zf^RsALmm`nGkGO
zpbS`!<UAQ9oi+~B6gcVEtn6j(KwN{uePTNkfelBt2d~n-`eG|jmoWWs(&dyqbvJY<
zb2X>&P}L>z*)zC|1gg$91=M1OE%VtQ5wRCUn7(*D*o5xQR<Wl!4a!7enN!+ZG(vL=
zmKnvLfAP-E$^~0T&D!_)s|WiH8L_uz70IL@T#WZd@CT1O;a|21oasECO^q+A8@t#d
z;$M+PDO%t5p0b(`;Pj+TIC^BdiHm5860^Ene~J6%hG#H9oSBoKIq{)bRVlDBy}?jZ
zQNQ7>fxoy#o-%b)_Tg6@=6bVKuUUpL=fnB)0q@`26v_QD@d?vi-$`@C3rFij+$}3q
z^WqWx@z->kk5fo{H_P3ab;e9S*G!I<=Wdl};I2j7qz(H=c9|^ZTGKyp;8BvXkx^S9
zUAt%zrcT<cu+b6vh#_fr{<aluX|YqomHg<khflAm6a9NTB)WJ7EVt0(XJ>SgE2Rp9
z!A#kX+(TEfB7CYu`}<PegRnK0KrL)8fLTQx3^RB6b96-XZ+Lr23F>z;4iT?$$5b;Z
zEhQ`yHMbcgS;%pmA4*(C<*e&Gdncp4d43*hp4*&Z5HdV{lZ~PUUY%nIJtwE(fhv^e
zGDodrdcCF^kIk%WXb)!A?8OOm_=JjLm?TkA?Thy^;)A;q`aGAG%Vb;U6L1<DvNZ@3
z8GbWz_jAbmwJsXL=Xh?nnJ*6rs9l$n275w-(m0tOWLR8v1yPf>-#c)5e#M3sTDArc
z@H@(I6<ENrg400Gg7+G1h9eF;QDi0Ij^mxM;xSX+=-8zN^QNM`M2m=IoBf*F^ntwU
zHmeSoV<*>>6}=XvA~!SxQ$+um!rM7}`p~tcH`|uQ3<X9gpMvX(P(7L(5ios<tQ()_
zjuV3s?`P<m%p~xFpNi*?dSMfsAJW1Z2cx`p!xYa0al4QK41X^X!CU9C9^+0P&vLc`
z8^Xd(hn^gGD6fpNg<&a|xDrxy8?48)k1^JY3o0pt!SFe+yO!sobvK-?H)85d=HD!`
z+`+|GhP(;Gmn3UtQ@u@Wyd|UN+Y**S^S|i5W^Sa&*Q)I-=!ieoo$6|tKX}1WlgzS1
z{u<mr%<{FymGy6Y>V@o(2O7^{n(f{=2=z@g>)%Khsu^8-%F+r8MG$|9MPyJ&_wL!l
zw7f>&+`6;ng5R292)^I@Ph6y(`sq25ceXw6-alWMB^6K4TM>y1RM|zn&0-bXaSW{E
z&TJuANg}7vM|WN`PVnrS$4O86nB<#6FwKrHUrh8HS+|)j=7gg?<5eVcgH12NE?|3d
zi|-TX6@v`l<GBcBI8;`>*NgD9Ga5u(wPJDIXRF-_`N>v%W9&#1y&&he5%OFu6H3pd
z_iaEw^J{z9KC7r+5aG7#u(*Ydik5+mMSPGSD*n}G1R*8L>XR%|;Rpl<rKjtuUw&EN
zcltkvb=3`eiwk0^e~00kb-pik<kO>;XyXE+a~4O+Nd&v+A`T)#2>uR0fzh$p(n32u
zgHK&3B5Lbv7N)pm%o2oPljp`lv*tou!iRRXK-ZL!w+DTvMHqHwsW8j)_OJ^z(l@~{
zDT`)|m(i@NVeuVkXZNtYRyGGfkpRzZ?nVJ}<8WEZD3$#e?Jjje4EmGS33a>SjNt7A
zKR?w`zj?Ps<u?u$5Z0ZLaJj;dkWU_HDsek}SMAOfrZ#yIHN<j;X2Jb&M_rplpLKNp
zd+|As5D!nkZ8g!iXg&s^CU<_c(b7DNB7U8Y)K{?%rS7?H#5McI8^oPVE9a!TYi-n7
zVcNoT+XW8aNEfit-8_PbIt;Og>)KadMz>^c??>7kbcONb;J;E{bvw(_A3hA=y(237
z<)#-9XxMxhfNbR5+3}sajED{7*I43fzl6YQy?$rsuqh3|X?(Smsjp-Zl$fMMhBwa&
zSx{c=`6Bt38U1?U>;L6YK=ZyCfBdis?<@OfKGNA>i71&$7q`V{`6EN<E;J5KRq_>X
zI}}IjQ>@0oSqWbn|IlDK{r(r-MksPPZ_|!(kFa~qjq0tCdO;M(7Cw#o+*inaZD8Bk
zV|Vkg(H<aiiv6-WGmXImjugHQr~6V4&(w!MA`c>`fdj!$pX;g_4B_Yd)OwHdvsvAf
zvWe>M&GTk`n%*kS)5IeJ{5Pc?fhPO-xzLaN*E1QiaLX&!_)iOs4WQcW3-hxMv@`t<
z3|UPLG>3B*g8W}gKp13*E)flx1s)=$B5YzheMba4NsWzP_4?bhBGmDMqHrmVdq1F%
z%yQx`?zqlyxojt$sF~O@9tyyo59#|%wvu8BP`}u=dhK#wvk_JEwU+KYp%m=G!`O7g
zD!PwY0F%xLBx{C;GZaQf@)5;Q0vDiFz1k7j!RvX(-EjRRc8FbF1Kp=uO4H>t#Wc+^
z_t-lbW&KsN@zKp4b7M?a#IK>NjeaIkhyC4SWu^GYYMHNEWp}#{@0yWM8!VBW$Repg
zkx+xXvcvAqve$njFz8Yy#9+$sTdiuih(BWX7GvFfje}#wa$uwm^5H;D@dB9Exg`vt
zS{KpkySn&AIn%pf9?$keeg<O)#D<@~#)t5t2xMr_S?J4DAaPm#K{DaAabe1s-~xjH
z#KJKwAXkk|AKDxX*Co}tbm>-M0yS&Cp+EEx*@Bnw8BLO~>vI3ejca(a@6nuJYBY{u
zjDPi{^t)tuv9ckvh43-1$n921Mr1cHoS)aoE{)kbB8%V;>k6jYI?+a|)?ZEqWF(lB
zP|pzsTsAv{SSG@Ja9=Od&!NWtO_3cm^+>!fuxLK?p+RdLREx9kz3<Jr=hy8I4Z|{`
z;6Te0d9H$u<g2Z18QYU=7@*=$6dB7Hdjh&kt353yQ~Rn<@aEYC*49Jyh~T7Y5p>B8
zj77N1OLW*3LWa)N)sOo3w8i5yTw3bev6@b{kmA!go4_ZClyleYxdYL1=-5+d3w?a6
zUSIk9A&4*3HAHZlM_T2jun5uxe`%?~&pgYR^wacF4q0h9+2C_=^0$flR&l4faM-?&
zZdNOyiad-!2B&FAMYMmK9>7nrYtZ24uKEl=iH0cp2^_+1>8+9NLhU|Zsi3kTH?2b2
z3rjL@y$uVdkeJ&~<>DGOJmq_SLT!AlYEv>JG(?nMDS|cP=o?IBpjHLh78*PhhjD)|
zR51tu_SM>Xi}vabk2Mo+G2|y@;)-2B2R=lK&q6c`M8aA|68gw5eeVT~V@&q%E;)6-
ztYUui20Y*Q*#`Ptr(fDWki_mTIBduQVmGHsZl4~NaJz_nlp9p!IT#n2EvL7Gek#IN
zvMH$H4N`bl7<PyQ{}h!8QkQtCp)Dq0Bx`~gEJ<mAN*j<Oa9$$^-_i%9$^S3a;X>n+
z{60nOgL2<k(Oyt=dQ2MirwJk2^xGqIyNw~P{6;;qW3uLX(z3Hdhv#)3>MP?|x=xFu
z?_JE%YZaqeZQUAsXs;GCiw?FzNljze?K4qH?M)*#Sn?R}zK~4aR!yfB?tL%GA6uun
zAQtzy{yJ{ffuKXuM>#P11(ROh@kb~rIpH!Gj4bd>&f%TxTEC{#;wFt;BUvH%HNr~!
zcGta1=X=f8Bi;18sY7jJ3g)Jp*RkHMd=qW~HLQvn$*^b-b&W<5+0mWK{O53>Z(AdT
ztI>v}2fKKB_~sZN<FojMq9BUFJe1~jM+SN7N6WXvx=B#BSF@bI*4#wAAO#{H2y*Xq
z>h4cw7ASm%N)JZ4`}ZX+$<?j>J>kEPejmI?wMJ&d4JE<F(iOT}9i)-hIJFqcP6h4_
zloU{Ipk+6&A~G0><Tb0Lkl)?s(kf7KvHpT4r+ixt^pDcy&C+cY9^sUrRu$)9Iq$~y
z@%<vc5<^DNz3$Ra@pu>nWg*+2hLDKUWib6Io&JY2XerGyg2DmcgFxzT%_p-xjl?-3
z8s5!pQHMezq85?^B#!R-<r5_4wY6<nQd<Z@NZ-qTCuC8|Xy74F`bV+6FY*t`vpgr=
z86#e5U}am5hQstv(fVXEQSL~ay>d8lu~x}M=(;iF#J(C46%t@c7ALtw#u>;x11Sk6
zl%F8rzH6&vqy;(<kSexqI@0Tn8fB}3EvZW+qRtUe7>;;3Ez4yQLlQ3m@~T>g{Gt^G
z&unNKNGK&WYIcNdhDS%{5Dk(q7BKkx%K_0>VgZ9*${P^aGsqkcHKAEXn!lCP0dA5o
zx4;h8qP2(Hj!>DKU)Dkr$yb_9cTJc_Msi3mf((yiY@|SeXh7I&Fkf|(r2!<4NZD+!
z8$grqm{txkX982u3dpZQckfOeA0sS02aJRiB4oV89C<}OHOh{rU0O|%r>rQVR?7qy
z)Q}Xlx(}NJnD-U}!Zr^;%9^dfks@TBNLT8#`CIjP!D_Y+Uzt8(fW?-=rv-jPHuvfI
z`DGphn3wodUxF64$NGlA!6;4_tVhT(WKjCzKl46>1R@C4e2-nR)_tn4Wv7<J!J2Jb
zpg~P~g&Cy{rw2KQc*;a26fYwydE5k<3CA&1;;-4cEcGn{&7EZ^y7D|?pA!Vk^ZoN!
zb&DD34c3D%$IwvJsReYx`y`z`U*Q_OiX}?j>)dsN(Hew}SG8Cu4y_KU7i8!@nGmoD
zn|q6Hl~=N7_cO=<4ii*~&+wM9@j~`YPSdpYsSOjFsf&E!>p@^f9-(M*>9LeGjZXLu
zFT;Mc$sT3{e`(=63Dq#7u4%LJPe5p!P`W(T{`3t(+>Fjc&H>Rdq|d8WWN@MZAB()y
zSF$nCHDeLW?&~U!+GRIq<`W)XO?ys?7f?G@O-gz*501pO)*q1xt8X10gV#=F-=B7&
z<qa%c2VeyPk~IwZ606va+Q|=`)D>T|4xi>Kh?_<g4%6pry;(c5zE7t=mLSaRnu*XD
zGo3MSRgn9&O~!f@;^y7Y2JZXp+7~9RU@DvG)~_m4e-65U!+HB{YpS&#Od~7K(~OZx
ziIT4?pOQp+Yu*hUpQ90yDxD&NsdKvB;h$7R|2h9^z5$j^wkg;fy$x*77Y$j*@N@iD
zC#ySO#z6rr4*mF^g?+ntJ9R$KNiEfL9KH<`1^LL&B>b|apAGF~0o804KOYoUCFTOS
zeGvP&yy&X%#{z1Fa0i0TL!)NSB~#c=MswcaYfP{Utq4>kbwbD<wnwgmYkNOU<YpK#
zS*N^PU<R?ArF%~XS(7TgfM>rxdf(l;PJS~K*c4hDQN>+g-_(<go!6y(7m#6iKpm0#
zefb%(ds&1}0;`aDQlPE^r)N`U2yV0pwr52o`wZwcf-8IJB0UeHfH`Ar!OnI15s^%)
zI%z~n9xfOpfH6e2CJ)D7NhlBv9T`CQ+6-hgEUH=3s%HY-iq0vgjWu+wHgtA8TwJr?
zdtSD9S<dYl`?|5*vp*~O&8j!m#l`_{d^pD_5=xT<>iwGchhfZQ!0`<qNdwQnej}=x
z1-Usd^o^g}!g0OnwJ#nYe6q1nkfcNs)JZZ4cWEk3(a!EcT`?hH^BfY<w$%$$3h=QY
z4Dn3$-)vyTkjlMtk@g##2|6(_xuB=YD|?~@^La+l<>b@iMRxw~yWP#V{R`c_`gx1}
zh2LxF5zf1@tL7<z_rHY&-<Mt&h3}OO&J1;o)w%{Z@i6u9M)4KZxw{9nV7~68uXzQ#
z=ZRyAi_o@y*wviebFUYWBSApCVf74;zvF2lC-BkE;wxQseTw430Tj!^0@(<&r7`h|
z|JFbaJpmEevaZIM<j_9TxoFq_&VK<hCW#!MHY1Se{+^x^{Sr6#7pMH|kFJ{+D%lI@
z31y~_$ugf|+Mzd0M0?MUuAwYw;LEHJ%%>Kmqf738QL{BAR<SJ7CS$$)zS}A9uk3W=
zm0zr*n9(4Fis=MdX_*c?JnFa-Z<W|-$;AzfgO{GB`~U><hy>0iJggP&>ZF0fTtTAS
zYbS%vKSv}CC?X0XVs&^I!ltb>jLz0B3}fo=#P}7{g8ZGk=V8WO@5Jg6oEPY>HkITg
zZJXR2oG@w@_v&UuT#wX#wJ)|uje_2+`T)l44yY#_BB$KHpnojLT|m?0bojvdm)GWy
zrF@tN8ZY~X^X3x^AWyOxxi`9w@0>7>RPLDA5>Rl!9df-i9~H+dOXhZ7l2cdipd3QU
z;E)rfw0Id_ET_DL%S+~h``GD)2pkQiv0{7(c!DfqVi19d4>Q60YfORKQn5B3MKEDu
ziF*F9=~M2;GkrUwgJ<vFF#A8D!%Qd*`TayAVJ$@Sp4E9Dr$S)SfL0sG?Z?fh-^&V8
zq87;?{ZpPC2qcjIsew_V0*bg|rTnb^W-|#;LApw!_Alqs<cf-Nrh`G@XFq6{jXf2=
zjOAUlh7Y`=<}heA&0ye~nuWY>+sA&t*md#vcr2=qE<i3~(-jKp68`M>`c$x7{KL~f
z6oM^cTUcAi2G(uQ+P(Cb?vUFrlvGhuhZZS@#{jF!p}FP-HO*bFKkG%O3~>&@;9Ij}
zUr{4mq*u+uSw3QI&C^FRf5l{wVkonRj6n`HM+#S1N}?;#KT_tt<~n*4%0(#|RYK{!
zuhNqsAg+<V<(6Xoy&$?m`a;gr(e&bY!7%zY+q(@hS(!wGZ4tJfa?2~bt1(K&=hJ3<
z|BtP&4ybC|z9tS`2axVYKpFw*E)hiO1_>z%={$6Ubhn5!NOwthmvnch;J44cUf+Gc
z_x*>$*=Ow)bIvu#m}7>KVmP`D52f-7=AK(20N|ezlm(94+51WZL@GpFx92YvSoUWf
zmc(I-q~FHl_w7mu(7pEv1O)}AerEZWKNwe4EJr_QoE0cYc>s%0q^u+CDfxI&^h;YF
zl{MKG)k<l&H{namB^J{w+En9;j;`;xNE_9^ZW!Jdm$XxLTjod!(b_C!jT-m>TuDmU
zMCcfB!i&4!AoHPO0MzKXPlf`2FhfLnm=QJ})lGYY0rwb=_YE7vnpS6QZSJrNTJr-D
z!<bL|S{WOKz1~F6R@7ItxF`1)+_~&dvZEJe>A7%<zAGqewz1y&i||#K20)C7G$sK6
z|69D%e0;n5&(%UlDyz9#vl$DspP}qQo_OE#-P&Y5C+pKGf6*0UFh&Xw$2&+U+C6VG
zGg7T5<Flc?<g5juuiWn!ELFKfLX>bek_}Eh;J{@mBzqt0CtiK?C|p0kG{5$_o-~hY
zYb#aCHZ(|ciAw}Sf#OjVHX^>~vH!TFmFI9^^l0$eNo3ULCPsZz7M-WbZ%pMhB&+(q
zz(|x=Zlq{#opqeTtGG8e$=paNIK=7*JG?#T0})0APbbhnZL(Ft=#5+`-7Li_Ve&{5
zXwr_f^414BbulZ<i0qasROk_4w|P1rjuXw@T`Ay@6VWIfd5Uw|o7ERwt*UprTil?_
z6au_g8mW{SB5b(G(4sG2?`Ys41b+?-K!WQ{9nI52OMFF^P?R_#|JJHWQt~@tc9vKt
zg%<bAoRX678|KQF*+D=FS=-|6*uMS8nJ+n(8YznyU^XqsuP@c{Xfp-f&4b=|HmP3!
z*sAtP1OJB8XrBv9vF$#H!<*ih6;gSv?%4EYw20c9vN_@PV;6mC6`oX8?@jhwnDnDp
z%zxJ4&^6B!jpn*0G*#HA`N^QV_#|df!#<IA*Mgme`Y)a!I&3hyQxsw_I<SwDS50Jo
z@1r(0loi)}iE|c%@5meagj}X9YxEn4Y9Y4Ntg}?fQ_P{Lc{z0_)28Phldk*UVx9ex
z3%-^zegY5#&T50L1#)tTn~jB$f?!lc96><rQQgNkMQ$M*nL<ngOZR@*kfzt>J4IM7
z8RVHly5tXcShS3cy)3zVDn6aXgSf|E5p_>DFCI%`obR$wc(O-Fd3pgW;`;6U;|TT2
z&KO{vzI6wc{F!e;VpwB?_k&Hc%hZr&r?hn&cnYq;Bv>p=6x_jsJ2wa~jG$b~Bv)Qb
zLqBulf<DC>H$iVsH5Lh^S8J||S>T0ugmlMLexTOF*9i}%YMPI#BdzEGh$9p<HMU?V
zHJ>j+ypwX}-{f3nxJX>y;VkaGLOk_h^4OnTGTe4qfwty+-MjD$c>rS4@zErFGUSb8
zKzQ)cn-7IZh#f4Yy23O7K72`3@+M}&f!2EM2^ZR;XI2Y@O2@fbC2_BbGJY=tR)W>g
zBOzHgYV7liduC+*_iw3IQUX)o#y=rmXQSnQiBlbU%0HoKBwrM{cZO5{(I_(zCHxp0
z@%5Y6OaPu6U)S}vFYUQfVJO<hc%NTB7TC5w?CjmIz}j$`5=V4&2bU}zb<7#=*JkNk
z!^p^}33({Eir!;hVQll7*|)rBBV=zd-(Un45h$fNbW-QM^R3}|J>sV>dt2@Cw8j1v
zu|=tZM?YvH>Spp|5y=*wxRPAE)YE58#mr$JOPDxWHKT?yEEaDo(Dy{|MzhymuYP~i
z9cFr#_8I31&b%jCr>cYuQ#|vTzrU2Ug2mRm<gB7x10prE%|O(5n=_^6UeUOw=rl&%
za*(Tf71tbZuEf$qi`K1+Haldowq~6CK8cA+`|7fZmyy^#4R%V|ncvliQw8Z)l4JP$
zY$HPzYz1|Mlr1(2Bjp10YIV=!yUh8pB9VHc%eAiy9gVzu{G31O-B&K*s(ua_&tGCi
zxD%+*KmL`K1#ULu5@Ko%m@50^_IZ?DCC@b-o65k`PMg3lX5=r@#@`k`SBerwL8TCT
z{U)4K>u~qD!5F@Az6j&!T-o2)%Kcu-xT^hzl*_4@bm^+4Eh{QiAr1)QCqU7bFUefU
z{luDgFMq`~aRnjN(}1tAg;-xF9yLiEd0enHd`BegRDVU0kWTUQb>To*xLxr1rzCb7
z=Ngv!ZIr&0=e096VtKtH&N@yO=J4UIFL*Qr9OaZQ(D+&DhqPFj$=%d&#yP{Y><-V~
z&)v+ky*o=YVWJ<57sW$RHmK?-U%t3wGg-R`;AExK9j2IjCb0C&kE6Vz^=*XPL64;R
zR$RRWx0ymYDn{=ITiby~l@cR(H8?TO;euI^aWq@gzG1SUb8@|ODsf}*;qvLy@nqH!
zj%lg61|qtS?aK*pApgKIkM-RB?!Jn)Cex5&1P(SCbF3+Af@+k<TrfjH@lT740~OO9
zEVWyo6F*;LhK<2ElWR{s6;6A^NhHEsf$B_Hh!~Sao<e1YSr^<;ZN+sg?^}ZxOc>Rw
zZV~u+1mcdQvG4ku@G8%;+2r#$omkj=*~pg}?u9)i_=m8AITBwTsdE%`)1pY}`Mt0{
zZy!1~zjsREkQkQ<M<^AsocmE}FeD*8Sw5qy>Zba<`P33alkZ)VMLC=F0;k=)hvwr7
z!N+i}p;f{nPCWgq4>z$o)5iOjOseP>Gww`UMz|{P#t%MM{)BvK?DRr(6P)+f=((+m
zbdGHaavlK~5ZpmMa-B9njz(Ie{WwqrAE0jY?FlcM^@ywiTxgf_IiBA!3J}0h85+jq
zaiu~ms$3-?kW_A}iCy%{=7*&Apd?#W^$Nbq2Y9aih<G}7hp4$#08wwmYR$f-Gl*NS
zx9VTq#L3}mk#aQ)9}Cm88)RbBxerbjYju0{w^Ht;;98g<D2@4uN1%N6ar&mqM$zJ{
zqk;7DTsTjpA1||MJ#%O&<Fysf<V@;S8)E>ri~0UN4mlaawcz<P4CY;KSN#4-*`U{`
zpTtWH-Wm(Crc9BMFTvXF9kQz-&;X?uQyZy?O5~#rS4mE68V~%j=C~oae!hNmzkb?T
z|6+?+P2(~Pc~>+R2B#E^+sK<FNRo6rlJ=tKf<XGi`$wruj{<h_uHw)8gVn2Yb{5N~
ziuta6!7S$I@9<1kvLRliZ}2N#AX<w2;&~%-<{YO#Fwr92-@!8w9_(lG`t=Bq$9cJM
z<bLG6TZ@%#xY}R3<booaCn^gg9}!A=FZ>XT4PQ>Cvx?wrxsfSg(FBfu$30H!c`rit
z;_;GL?@f$%`y_7RdS+hE;9~rB5hMGE3mfU|h1uNsX;Jr$e(^P46M1Q(?u2CSg5$j<
zQ&Lx7lfdzDDWM*#1{wUru<9pd77K3u-d%WYlh!SCNNs1smli|+sFZ$A{_<Vxxi8`p
z=8}0Vb>~ze)0=ATI60$7QF@<X@ch&Ylzl6Rc20pL@+hr0Iz|-00;u^~{+0#6p@=xp
zuF<>*?r;wp08-2cfWN+yb?1->q_m*53P0Lfe%BJU?cn;nju-OG7-mw64`aY0TDQN@
z-fTj!of%2y(C4Hd+EFJILxx$qF<y&}SS2Zj`#xx58SyEANM|sRx6MHet%KGet-~iR
zTMsj7ti@@!D%mk;OfQQZ86bdkbl1}~hKs#;V^(j-*!>kYYMb9*gL{9FPmsFQysrCT
z^P2AvREjndG$Qn?H8uIFuImZP<bHcJ)@z!xSaq+`qw_C=)%U6IYeZzkefrWk7Y2Pg
zwPCm}LcVI+_dF=2I)Ms$K!PZ*ju&z=p3J=4^NqJZ=2|}De0~{>(*LCU_`9(?9TiU}
zG6o;^3=G9dYRM8Bn&TF^5lR!Nyg}+yp!dr(Vf|_0TOK*JPCQ4;P(}VMDv}+fE^NZ;
z5GK<f=NGlKvilG)d<D`W_oWUW-Df6^w)4DJ;Vf3`Ct879j@3$KuhX2>A`fnqF)kT3
zZ|k?;4ToNuzFdum#6OKL<_6L#{9kIlZPB~UN`Z!9QxEy+8l^l+%`Y%*+!UI{#7z!y
z^%Hl)j=2wm%w+OVF;kar;_0;)sV4|Z_DYEd!6{ry-$S7pz$Hv@2_>JE%O!#R>rTUb
z)}}Z1+pMau_lr+!P{P7v1b}?oVCy;TL{#^@MJLi_=J*}MNV7!e%Y5`bmvAmGr2eq;
zp$D`Ns18a6GT<($9=XvY%$s(SUl;2qevr!<))$YQTrz&GODG4t|Ky($Ve7oj6qD(k
zMNXRrHR?JD%^ryAXnxrHI~z!Qt?u1#mda$rN@6e*%90qyiF3DAXkgID-iNw)UCf;(
zqu0Zkvb8R_P`7C)PR+U_!<ASROz&CoqMIV)s;m02vz~vob*IQ(#ie`kMz?T5ocl_6
zp{~H#w5is2UmVnz?i|F?f*lHZp~bU7DQUL9ioZOb*GC!@U4`}FKLa-(#A#~fv&(je
zj*raGI7y23+U}Io@e!4VwQZ#bt3$|?MUO@?!f}tzu8%gZ>Kb+lc4EpPXdA8r3+T~M
zU;vYCAwG=m*q&(<z78Pvfh6eG7w}wnj2eeD?$gvfabKQRb4Xu^2BV6TgBu{qAQ!re
z86@}A;%kl1aP^$v2G~!aK(}x=kPmz*+9|brx38W9x5niP9yJj2MG;34q=k9l$M0FI
zWEbUTEhA5uE5pM00$Kuor?zdbGd$t>YTv2d#k46kC_zZqhU$#NoHT=3m@Z?YR$nK}
z$y@|zcZ33JI!O?FdJ2)_1wPcHd=O=gP#HquoLz6nchn?TfNfAgIzrmN?pV_Ec2|n}
zT{X5&!PAIyxUOq<{pX@47zeZ1Mo{J{Yt|X-xb-nL&cdkms>YN{TX0@6P}E1`5}oIr
zS&@vm=@GgyV|}GAyDW_{PJ{8vYhKe6LyeA;9?mpmV;>S>aRhcQPmh_NhVYHmBhxm6
zZk3cn;s&4O+ZI$ov|)3je&)T0(HuQ6*<nfdigXg3yqQeU*Dqx+0xPkky&YXEI9#Yg
zXEPO6W1{AqTvWM>W?@bN-miLxc<__nRi6hnSPH@}>-ps;cqZXrAV>ZyIN69VP;pdh
zEFV$gOz~c^roS-ncs;7Lf#yR9dkT;KGShKE8C9IxVhS7t8<B=Me8!HRr{}`eMV}|%
zgsQ0~wh;XU$66{Q1k3ySc$)P*R1o>5-BIyO4)3dS8x1GD9<F14(#W)k;cE`2I1{EI
z-TWndJh^fv`484XUoc|)JN98$U-$_vHL&Wt;{e&0Sd>~94k&RONHL!pRPO%1jjzyv
z3~Z^pJ+3MnX`QdAdFCf?CWuUxlE6eo-_F3qIga?`r8@~?`|=mMK=E6xD$22ki%J$D
z=4_UT3l^5o<e&~wqTpkV!wM{R!O>-s*l`IU0=SBny7V)ic(sHWwNhD#iawdhwAcw!
z=k>(w;BbM`s;au?%8BU9!YOGe7}W)XZ#{U5Cb|q}MvO2()s`Ft8h8V@Km}uHwL*te
zx{9F2;kbW#<r@v!2)x<Y%uJR{)i9yfbf5(7#^m-!z$hU;asPF&eSJ-Si#Gb)LAd*U
z@aKV4>aOsBX4E3x-b|Qdj2^gS@J3(xGS-T-gf}U_L>*`SbKxS8^>M>UcanPJjh_Vj
zFd^<NI^T!#9)X(p%nv}e$~FvP`4$HDK2c^S@n*CY-4h1sZxIjZysc1yPQr~$uN?6y
za{PXbk{;4`6a--N#rd9(vJGZo(UG=$4Jq>!;7(LdGH1!E!)fFUkT01mTQ7C0HrJXw
zu@lu*4cKy>{W?JKd|w_RGxqa-=H$%-;kvG^#j&X(;;oHydID?&hPjC8FqM7Qil^qP
z)cIqL_eWByw6@f&lIp&?M{PLR`KY`YWR8Nbj4g-U8=M7YrJM?m9VO&cIHgQ0k?}90
z>+HMNrs!)C)bxFJARhQ;SjSBdDxMdsSMZI(Vm_e?FS$Ie3mQvTnWtDSTfb^|Iw{*m
zm|P1@Nd%XBIr}<V6*p1PgQSIIPv(vc$8r{!cn;uJ`86uwE_({TAjil|TP{>k+!w<|
zp}J&$bd9FPymOhHpnC)n3Tt@!ehzCJZFwyl1rm(&(KQ#veHJh&kvahMW&3TI0alW6
z(vFp|sj<+iSphYCAZ9kqSVNkLA8}@H8H}H20m6V%{`({t9Nw+>gfN0Q29j%Em@_Df
z)O9!!-9OB<9dL)sI3lrUBLOr<MPb;<fX@_%2nV0wVNp;j&`kki<klQEIoxL^PD+l?
z#waRLs8zUuHtGQKa3n!(y!H{Lug`SK_ZyNkAw0f-omEK9{Y{3_&}BI>q7Fbi0OP|_
z!IR@cAno+6@MmvD;~)e`XLz#;`kv(!X3aqaays@YL}taKc2+Zpu>&yos|Y@%gmmh|
z%Uf~==?lxudx2lXtLWcKx=2IZOhu8)yUF0%94E_uj*7T{om8cHRp{bhAth#xkWj|L
z=lrr$f!kj^)-2^twYTlzP4<9827h_802OnSKI^_`pj}T=J`D=fJXi3#-4BCHQlKu1
zomx6%i5G07!95rRmTj9sZhII+O)l5-EQvb6`X^-w<U-+KH!?+&;1k>h3yW~LcgABh
zp2Br&T@8Nsd_HC;&ZrY{{60*Lq<!t8-Fm$A+bH{Exrc$ZYBDN<t|1oM)Eg?+UDz*<
zo!Yc?#xWd}N(XaUZk-w^Z)kA48PxD?Sv2AeJ2r?^3I;4}JnyB}VPPbiPS!$><{a+%
zgD-g>-mKTX6haohdr(sRW$gIe%Xh0@RJ^AHjbWqMO*Jd;y?uAhwCOhxt(tmUOwhU7
z53?rGd2WwxJi3<>m}`n>FF!GFNA`YU`=x`!eJol}Jgq_fP2yY-x(02i1d#~1u7vB~
z8yY$@qVyBfj~|9<U-|dIoLNwkBGltddp+*g2JrGtuOEC<y~fe~1R7AWaeEM<({Bc9
z?!O`E(cq=<!nz9J^eA!5$(OvKjBIx|0El@z9Ih$H)N+)9I>L@^F8D7~nkW5dlkUFd
zC)F5-3_Sbr3yX$NjFfqXPPt+aMV?hHt#?c^WoMr<vZr2Si2AjJ>ST4hOG48_<}Zt;
zr?!~}Qkb;E7d_&C6$|&=hqECU@jb$Rt2zI-#)ZKRh&@ciVeZ9O#%FN~4IgR3>)G)T
z0hVv!Dwe_!dJ78P=m~;5L|a4+(uQtd(9pHcC5T@BqBEuESO27gs=966N2As)V&pNR
z3;gvZVE|Y(&7apxeDKU;tq6`sjs{^XDBHN+(^)I|C)15gUFq;UPwEVywzi>?3`~od
znC7CrwPG9=U;ryog0nItQkOr8;t>>|APbsNBXuz8uGwuPc|UPs6&00Lv+LBdUSqZX
z^%&tDGhl|<cf0OB^isqg_GQMmm-x#M=GWs1-MQlTHaC(#`a69dSKP8w1ZYHY1p>|Q
z4-p0&jh?E|s-ut9P~{nfmR45$gs>rZ#p_bE7zxrVv(4jW8~ex8*ka0idji;O%$p9H
zj(#i%9$CWTIcRuVIsDN6-2##?9{!3VY&JX`LidDbdnoz|DM}?>WfcXIghyYq(q1!|
z`U{rTr(6M%=QDu}$T9x;78IQMgB<J2*?nxU)y<PwNdz1|VS5gf{jdhHx=gg~=$GG7
z)k{dQN591VUZ^i%(_w+Rmn2>w>Vk1sy_RiunTFIT!G!28Xm9v(98V<SJw@cvjclaV
zueK`egdS9ff3yIu?WZT}pAaAT4PDc&41uzA))i0!#Qk`qXrU!Sf0tdY?1Buy00k=M
zzU4;uscywm-R}A=+Q1WPL4$@Zbf48o6N1C<!KfDgo{s{*XixXZd`1|1Ke3xEael+#
zn$#EvBN_%1C$ht=mVgsKS~?=Sr@LUSzwkVJS$~b@Z4Ck!D?{=^HPo;XKLS7u2WQDB
zLfx*Cex1D0<Vx`*J3I?K$|>zrp`I$bHyApD3EJZDrLeV+0hSaT-)3d2X7i;zUV7x{
zIVW(aeR-zyl^k)`zWE>}Q2lKR9$wCrZ4k3aT~-7mSRmg#N1_ULz;hl=4Y(+*5b)Hm
zJ5EsC3zvHwr2Z;6BsHrO<rB3D=7|zvi{+_BNTSMv9pI(jMi56WpQK9|tdiIF^sy~}
zR9NPrLPSm$h3xoP7Q5Z>LlY+`Bw{wm!SIBw0B2J12)oGZ-m)AOJniYTPKp-(2->Xv
z2{8+AkG$&SLZp*dPk<Sqy&Uxsi@FEt(bRphWoz>@>HoQzlA2438X754sfmbZU5z>)
zX(FaB^wT7{!5{#|8Wwla(!l@u>QZIDLDcbDrs0iJ%C|fLf*!u+ZE(k0nMt@8HoJC4
zYh(-7Rby%CD|{A>ECtx=uNK6#QG#c|KQ|aePTMmo6@IU%DBKbKNtpgmaj(mL{Q+I2
zhw8=K9sRm{dp&&-(<}k*MOXwxMs)Th;@}b)I4O^s#3N5n+Fbwk@HCX9=Grb~cQVgr
z-or5mJ6#1vA2Y}+DgF|)d)sG#_-1X9r*4r%+s#L{QQ-@s!_KJY6_3dvCrX`m&5BaU
z{^d&Uw&9#ikK1b{b&&=TjC=EyrBjp`#pTDTsc%>XGO&c0S9c}X_{>!cMwW*TSMyU!
z+t-lw)8QkUdyZKw);fw}cl321OZ2>FY75WUh~0k-FJW!nX#eD}X`h$gzK-~|ud%SA
zc|LaR#k9LFz8OHE7p?itRI{;ZFFqSrk4MMqKoohlHE$?!L-f@e$Diq-T@i)Ri!m1A
zN+5GO&BcXde?f*}A($9(JE+}$8rO2A+0&6kTHI!kZaIIReC<<R!q$m(e{kP8KU13>
zT!U~u*7}IP+)@g;LfVP?X7u5Ur^uc|ld1mYijJA5sF20?g`$?jW}2b}rx&-QQzMY%
z4B&;_<0Bu$ehhaJ-t%8w`vGE?k<Q)AUWc&F>g}Lk$;X*`-QJ>?;b&sQ$BVCRp0Fvw
zby69$5Q-E5K#i^Jna)2Mrw?!^k?50)uw;jarl#|)@5`a69E}(ZIcNG^IxZ=xm0*?3
zTFOx!VgRDEvPn7sB<^LZLQyT>|DalabYNm)3-XJFg%m)908tz1FBt|%JGhOB?(nb#
zP#`ev3IrPV%JnQ&_6mMgwL(Kd_w%9SZc7CqI(E^sxBm>r0nTMKXx7K-ip;vi>y_UR
zK+S;=1<pF<=aXgLn<JDlJoSH7)3KlG*SK&7zT*4d74c^!;3<8OJnPtMzmATUmj124
zv|<ByxHkp^RYN+WAG(t>hz2F)8b-Id{DItk-oPb{8VKD82nCZs0j#zF(7e{$S)eu!
zEu@kO#}*rw`6JvE$HxvSWlfAfVH_kWi7+HQJg)mr>-~F+6A8EjPC)2P7T4UOVC-GA
zweK;73y+JX;f{Z8B<aErW`N*w5gPa}6i$p1D5u52!O3g*nKG%%M$wfl_?P4xq7qC9
zrDah+Efe*i$2Djtrf5kEkX+jDt@zOlz0NQbAN{EsA_M{84AAdJrHooa(IlDudg5;w
z0wRW6z{;Gk7pg*(nZVT7*XJj^9Qz6Y1?6(vYwG-A02wOZPw~Ht@_d$Ykx@}&fF7Q*
zk{ZDP1DyUDhNIVrKMZgYU6jeHtP{0hR-hFUN*DLLXa8o31E48x+~^S`BmWdsLPd@Q
zPZ;Rr<Q@^evNX@1!`S=<y%2x_nc_F0rD?H+<CZa>K2gctHLni^kYg+fx>+^80f65$
zqgCnOi%$um0{0FL@nAiuv!%zZF>h~5n{9(FR{vrIjq*Z5bKvToZo|8zWMoZE^CcxE
zFFbvNjz5pCtipF~VPpWW1T6yiQ)kG>;G_8+P|%TgInn47agdZ?3{9ixErD(nfJ6XP
zM#KRaMt_s*`Mde5_nifOT(5vf5v{kW)kXVkj`{d2zMS6>FE0-L4J!VO7Bw))V$rU7
zoBt}A8ptOn<}`76w48L_Lo558aSBS95`TV^k(}3l*Y1nZo!g#1LlV;Plsg<`qG#L%
zAo75CMDXfXz#s4o87ds3**%<q$nR|a1%Pkvq*~|XfVsHFg;p(^VI4*{O$5E09wg#)
zKGH$Kz;OH(@WTTE6~hK`a8D)!I!5M+T*Hmq^U&X$f5j4XGTQ2NsFlp+o{+|0rwF9g
zsE01ATc#DES{DXSkahSS-U5DHx!b9xe~-r!<Z9@V4HTyaynaVv^M5O)SK#1c8I%%&
zD7-XOaMs@a>K5q>Fn0g^E%yfk&o@+HoZfWGs`jdw)~@QIZ0QN^M=jdZU$b@(<tR%k
z@<stgkfISVpcVzlm6-*`ll?~GAg}+@7AaCMOSnJMW=kJ(tOSUGpHDjaUR&d`L5qr;
zL0YNAld-Eb{LS8BEP8zU<la9yhyZ1oYp34qO$cV@?I%!EhR=`O)$Rxqy=4lgziR%V
zv)aam+|}LPPZK3bJyWV18<ASuKV7TGJ)mo<n92;m2N`3sHNL=~t)oopmPL1JFU7*|
zk;NyFmMt@5rN-04!NCc(9Ku^u1_VN4*6j2o0CElhBU%PVVEm(UQ$`sL>|v;66d>^N
z#_3?5hT`WH15oqFU@|@4NK0*+rhWm507Quh$>4Y$ajI5++Re4DK2wCL*X=IqJz4xV
z(jSV)>_H8im(CP`D1gy&jRFS%tC>4sfj?4YD;yy9YzWU$>+R47c`dD!rt8Q1%F}9n
z*~erWpt!UdsFlkAz%loi?sH%$HHHBOl6_#2ffDP}rmW`j8lNqRK}qDHibbnRcIDZo
zB@m01MKIpe{G|ogMD-`Lq@xJ5%~FmgJyX!Xi^==)Wq`S?iMq$xlNte_@|zx6C0Beb
z*%;JeTz%bQCRmq3w@(ABPj4$Bl-ZBU*4O8mx;Y;5prU2_8ZPe*d4qSe;N|2S(}0lj
za`sF~VA2?ZrdkC|0$x#K(*_{^Y9W~YhpJ;s0Q=G^FF(H@XnVv4s0vj&?yJpJnuMjz
zK70id^YkIO^ztfN3AEueGpCv{1tOn_wK%4OjLLs}Pq>Wnsl_q3wu#$2GkV(UB*heZ
z)~FYD+9C?qvl#vTd^`EGed051Q%QOK{=OAH)4#<R)p6S>JONoY_4Jdy)pt-OhQD^o
zI*O!>49U!P2rfg4>QhXz7qozESB%3K%-+xI_lks4Kyj@bZ<nmCMjZ$#K-R!E802|{
z3w}~O!m5KjypEKDK?{on$NNGcuen4DC^`O|+pIW0cyIcCY>E~rM+OS2UcJytrF}}J
zH(jRvY#@=1*HB$U6Oce0&wjpqFPq(d-935i{?3&f1_ZE<9-V+b8GjpeTLD;qmAt$>
zSwOkwWisb?WXzc|{lu6UoW7Bf#EuT}r>v|AFCILan|0?G1U~0VL_G0a{#vncC5KbX
zn?L|O!xjbh=Mo|)Jf8C50Sgs1PV`a@6$>rCs!OsjDcw>qosx-m&&)%FmVqIxEKrUQ
zUOu~>2+!u+0`5v=8bJ5=vi~zjMaTw~G{VA5KeJW=DK`~uZDvPD$MMlo%95np$)rP)
zbl$;2JTkJw4l}$mVx#8?fQW9}R@<?MsAv{8DJ9<;gP@?!%I*_9JQG2J@*#>a@2hzV
znfd=wj>4jch7JkEoiFMC5){6{g+=tgoiM+b(|^i+(<k~Z^^a@+`v-D>Y2qh?iAKUh
z3N08Sb%SbE{4oN5{SYVv#5gB6r&d@{y()O50L4F!>hF056qf*DKVFHU$Uk)Lzx_s?
zFAR>y(QHL$F%zH=i<8V_nb6m>8rq<VgmME1@T*$bLk~Kw0SORW5=^f@P8d4z91y6K
zMHpL)xql$g0;%u1<yt8DxphidS;wAin>z~o#}4<N$Y;j^KJn-{15$Q<1$vZrT>nW~
zM7KqwY;122R9nvEH8f~Zas$F|nDwj~vT!Z3zzefQ7E)aIX^l*a+pc$G>_7W&!K5}i
z&<g>9MusXaEiF(cRQcEDpFAEiAf|ECD_TkNpJ@cjCIDmCb(T{dhDkoJ^E?bB4bXT3
zv1NwQ8d7~OKS%8YgZ)vZDe|Au-B7^Zcj0I7?n>=@U&FXB@&a?=dA_R02AyCuqzJ`-
zNk*_y!(_MPknD`DNWu5yM?!T5X#!ISh@S%PUOJS!>|ZKXk8*9~FT_3|{%S&+-ERSC
z+dHXP*KSm>3cAu0x8IKg;Ct!+BbetCgj<e=0Tngcx;QyCI+xA>2K~uwn7JVt$g=^2
zH{MRu%YVIP5a=KqcSksr|KWt*An_g;X||H!;_e}^dMk%Cz0eK||HMDr*nmJvmgC^W
zimP!KegrEp<lKQwb!T|kfn3;r&M6aK7}NNFJ$f5dysd}^AAlGJ(wEDE3f?WD2ulG`
zTQd6im%zC6KfDu4*eDu+j^fkz%x&Clk-b7J7g)?r#*XdJKP1{p+0W6Ig~B!eC7pG{
z1=~Xk<!fy>LOh+JQde9|i(69w`_|?1q~i2nLpX(!%Ygs>8C?OPc?moes5{(TRPxEj
zJu(|){u2d7`-tGSbtM4OjCxfUd6(M)zMjs|HT#4ta{mOD-tXe;>N~Ul9G^BC<hI=Q
zBPoR_#3(}i=N*2?KzNYVZtzA&qV4gsQg%DfOU=KI>F+OSdj<!n@qvjS8QhOy_0;XQ
zezn$polSVBeWZBQtbO#O8^dY><yo|7C6)h1?Ni#hgU3v(O4p1b9H-c5j5!dpKPI9v
zyG<R*qWf_|BMWbR!F=Gadm@gru}dL!^`Ysh^lR5V?cp?juH|Hhqo!roFx(&?i4|hF
zNb|bD0C#mM@CgpauzyJ?df|ScL>tu#*cO=&L<)xqk@puh2uFNgyNIYxM@%^rmm29q
zLu_*gu0xFDh12uqziwmu@KM(j6Bc;he?AAs&}+|Wx3+b~wmZ%xgO%ZyyhktaePA2T
zfjwL83c-!Z%+yD4KW^Cg=X?JCxbhfsdBvu#gI>M;cTMiM+&iU@!QxrclGW2Z(^Of=
zfD&&n)V*rgSbbXU3>xsm64nSt!}2VXl30b5EuGM?0|B1veo1W}aMe6J_%?!wZ<k31
z_kYGlg^j%RVwHthTzm^tnh2PI;7Zu2izD$T#ek%^p4Y7jRFCrDN259-CMo0Ld^Pid
z7Uh@^g5LvX%-VMX{kRAcUU@%64Ac?355NTd_j^N-H@3F=fi_-wQepVx1+Q~EIw6u0
z2Gb#cU|nyG^+KLuXW)2^wRT8E#52K}W;<j_c(`FlYGUbn)JyE~mGRFCKyYt3I1x$8
zPkp{U!Zt2ZMnr<d(m06K2B^lF++Q8$3+4qt*X}=a4Gck)9fV0P$oT8=_!lcwoBprf
zLx4ot6MW<5U0sLyOL_#CUwcJmDGsgoKaTqYF-TBH9Dvb}`2vfXW0F@SD`GiWK=q^1
zIT4VBNhQZNGrT&Ov%fvt>>ziexbt{V@iPt*XInvpnr;7oU)lq#QEd?ql`90Je={B8
zOu%p&BI?gETyF8~h9fY7tMpamWWa=&OSEBQj6Gk&Ueed0WY;F)F!J9;p#>Vfu)VSR
zL2IRMy@m2}x%d*^1h~gpVPEh4_r_QOGy1}iXjfZIaW0GD7wa`^y~+@LFN|cGZlGwv
zTRUB%%>XE3JGN7WW$g+}l0X-=2D=RIVG|<axHs96v9Y<?2kp;r!%sNovjBPr!tw+S
z1XD=_KFL^L`fH>AdmWpQ(Fxf_wQ8(1cc?3XmNp&LwEK$3DHEpYD~`a1=pIUJ2p$6y
z5NwxBH#;LsB0#?`)UZ@5-Cyiz?%Nk=zqgO*xHaFy2o!(|*6o4k&N;#Xr^(h}G7T70
zb|{6%WIRu9tNDKW|Gp%$B<0hma(7pU%)mu+YZOpwdf8MKM!<%;|GKP^bziaA-1%^x
zE(nVPuqe?>&F%y!)bCq9{vw5Y?E_s%gXkh7g8k_d=JlQ^UfuQVSBRm2irApXmGH%_
z@A~#gW+I(JLee@IyH5XNe`dtP3HapyY~XU!F1VWa6Zu=<X;fzQ(m3E*BsuMk^(MLu
zwyAt}Ym$bl8dBWv$Ma6UxvztR@j;|x;Ab?t-|s^1yR2(}n6lvR5aXj!c$`3XKVN5$
z5P-aC>FD2qe0e%|#&UJT5&Z)H=e>hOfqRA`@g<N3c;nB9p}|7A#KRy7uZCW?H_yWW
zlKS#0eKBPsYx7a+pOvM4_-+AoX4Y$VOD1n;|1ei6H9kHbnp9yp1T!Xzj<iGr#&BM=
z3vxYv<cC_Ze=qJ&aBxIKyqF&%o)(<}9a^$2pe99a`D)QYE*lfYkSpzScS0tG$5PEd
z`lK=Peu+wX3T!JWp-M8wxQB)1RZLtANNS1!X*~mx6!m>IF$-#tZ;o!G(|Emu+4<aq
z!{27}KVRrCZZKPJINs#y@W#J-b34<Ub$54H>J`Mi&3AhL`KOc=Em`F!PY;CoKshi_
zJK0XDKE<j<5d6Y%FNt+ccy&m)J#jh_^NMIS4cHE-wEv&OZ-)#v&IY!>xUK9vK+xZQ
zqZj+zaMgB<wC6;=qW#^)`*XZGrWYS~D4o(R2I|#=M5`!Qf&<Noc9~|Cey$Po+OTv6
zVevM1@*V;5toFbz?N}1$9!%veJK?GzqgTq%0UE*B{qKAEpyNseVe;63<2rea0G)n&
zz+`kxP?B?Ua-#MjRjL{wtVXOWYs^Be94z#R_==VG>-zJZbZf7)W6k*(%p;DKTQ596
zPo_Yb-2sea%E(dXf7>-52})8>uiA8>Ds!y0?^!DEhv!|s5wK1xZ4m0O(||ZH@b8YV
z3-NZyZ>4~JsEjAW6MFYHR~mx~=)3tI`Oz*2lZ*-dXK$y7fWQK2F3VF6SI4#gIdlZD
zI+U`ia-knVwK|nADT{fPG6Xg2wqDA~eY!eaQ1I|*;y(iRQ4ThAebx)qD})&UJ=;38
z8tt221Y9plO5(KtF(LAyFh{u08EIJ?r&Azq<vE)Ipnar7>kiS?M=1{IWURH9G3oYr
z8uiCL4am1z3Tio|QA5A!|1>fi@_*+bD-U^g&;*EQTaMl~KGJq3JEYcOl3z<bp$3+b
zk@TW)+Jt;3>5Jp>(nCY(9E>0s0|dz{{$D2{hfV1|mnG)sYojyA!|)Dt+P1c~Ca=}Z
zd<-s7LFOwdlE*N+a6+W0Q=X#*1Q;1;q{D;td~`<sj|c4!Zv*zpXTZVHr-C+otKXI5
ztv_F7F@HvU#FK&zoE7dUFT6bg^z%Bq_0aO31kJ74XetR>ety8m%{qSnPiz4_BrDQ1
zKx0^V+~73zu2NptD1>K{ei(#(&aVLH6biLzjvGZ9t**VeACbhVlwEd~offPi`i&$1
zb)=zj3Jz6UO6(>5{;;TJAmD%HQ=ePYK7U>#>DbVL2`LN)9#yzjApJfQ85MBvlhn=I
zJz0P+jsec!hWmB<e-EmSN|_ksc6IQyM7tJ$IwQE+!qx`&v)DxX8&&B0sglhx9uOp;
zZSV$4)nIwF&@4!bi;F*@UTZk`@4cnGgj_!T4tHRmx_$ne^YM~Y3-j@Q!yPHyC;zr*
z7H8)sv^;f!3vRb(Cj5YWAgQ2>GH`Y_4(7gX9Ye(@j~4m+hKE^42I?DZVBi3W=y>ae
z8o5`mBI~s-_ofs#^!H_);Zs&v?QpSIWXSEmdOh5AB%RAxVLl=+N<P_1N=izd6?cCB
zJ6H%-18HcJ3%R|0l_~rT@CCfyK-!>#!g83c<%U`-JEYf(%VvM3jNk&X@sU!QmKE<+
z4m@n-+*FCSIu0%_-P5OEPvRZT<mE%b#lk6cg~5S<U+RycQ+NmM2;sVKI#=(Is3Yi2
zmD00(`GX3qiY&_cac}%}gYzL(v)d&nK6^A4u&BS+4VW1~@%!~mih#*+%R{Bv2)U{(
z7cCpFdZ|u5wUv_?%Sk^y%5kpCaamJ#tKlWk&LR2K_+WO25~g0^vsdRz>n?$>fzg{-
zk?!S|GxDOut!LWuK~9ICC4#QTo86t?F9X6Y&J!eFe#FX~A&BIQ<vnGO>#E7Zo(=CZ
z2DnG33sfbv94(&xKyr@7Y+g`E&uhRTAz<b><-j4KV6I*>$}=rV;WZ~*G=Xj{Kp7&e
zNMF{*De`esUhh@LhUupK^mi8iDjG$n(mA^O=g0A+515em<XooVf_FQ)fgc&mp4Ykk
zep$*F*ljuXfRgT6dpME3!7s1A{{9%N2UgbX7VZx-idv34*_OkIIJhKb`!97r6mqI?
z(Z8~oEdJcMHWre+UoAlygWWqa5br?;X4~HGHSru88Ht}@z#JI!T%Z-QuJy=X#vRCY
zI-DPGRH8`EKixp4C&s|9QB5%SA$tXAy#Kmy{S})`F%-9$rV~;`#_TD58UI*&mH5h2
zV9#&q_E6?5;&A>5%!mPZD=&PoT%-S-^#^UyR&m_<m*LbPA=tDQXvBE3+NtoSM4;#Q
zImsb}MGgRB?7ko_vwk2iumN-p9Ivt_*qwAQsM?)Y+T*dv-ydzj!By9G7P9PpW?^sr
zX!BLA9KMtVzA+cN4IsVZD+)g*S<7WrifE0K^AhB5T^r`&X>R#7W4v54^9~njwbh3b
z)6mT5<bJRK&XD%{hjZrKL1DkYL_96AeY~Ppi%0#>pW7mdZ@wtWsdUm3+4Ue3InFS?
zA7$aMG%d3%0nDf}2XaBO@pOPfrNt4krl4m9>73^*2*YzHJ7^<F<fow_?QUp&UD4F<
z*D6GX(-?jPx-P~8#<qWM@O-?qM|4-jEv4#URMCQg_G`5j*;l>Xd>Wj>exF7!K9Iam
zn@P1x@0*U*@mq&VvkCdR@(W`*kvavGAW$;9p|9Y>#RPqV21;RgQjTh*IpyeZ7+W)=
zx7(u<P9~U*CSE7$s^lq-daY9zdZ=XqFko9_?A|xLVV7Yu1KO?bZ_X;uB2+s+Jg)Ns
z0b?x50@#`7pVQ0;!e`TC@xJM#c*zo&knXmhKfONA{W*71^*T6(W2VwT>g^XDW59Gn
z>}7oT$X(|WH^u`T?9FHJldroeCOcNcFZLIdyso}wT95`|(sxVL>)+6;X?zYwtd#zF
z_`y3?<k#&;%%Y&?(S5ror|nu+Dsow46);5bQ)KYM>dq3)*|q*JUCcv4T2HrYj#70=
zOs7At6(R}(A|y(vgzbTdtukVGt4yGhs|N9N%V$%HO$ghF*ujbSP-FRoGCDJrhDZjh
zw^-fl3rE*;`9>$}jr!$>;b;uir%C3Q`h{-;#2B890;<THtzOr~Rr_<VGTg47?#9el
zGkqMogj()8SmZ^OLwq@_XvSuli)n*T{FOGhFXp~Ln&@98X>1a1k-&Uu^#9AN7K|ew
z%vURTJpgFyr}bU?dtNUVKZYfSK1J;p1R+d9d!-J*c^89GXDZH^cT(V)Gp#AU*Kv9u
zm;yM9l#j`q4)Lk_3h|W0XXoc8-$U`v29+{DnOdjzPyBkQ;<gyO*~;D5f?l2_@!^Pr
znQNTV5RWWq=H#CjYgTCurwP&IN=Jkid(}<9_&Y2W4WP0GB>Hc^w?3vGC|9nQ9{=<n
zx7-0?u<Pmj38<BoTQ-D3*RU|4?HMt00!+oTc}MJG3*J&4>RpBjlNBFWdLC2N9qTS!
z49VNY7SG0?&`xy3r#u^<yj>-=oUBywy1W0LBst_R3%3RO5|V+0cx{vW{6l(XspF;Q
z4=R?6Cciy=RwbqAT|cz7L+psKHY?4shxlDoI=!7E4$r7@b^o~J3?{JsD8<2)6EB}B
zIxZ9|GVs?q<XY)9suWsEryK!y=8&un>|bvOdwZjyZLnB3^<oSs0{NXokn1aSxX9q*
ziD5lYc&(OX$sgxBW70F9l>u$4NCljVRe0xkhJPPJCUOWMpFaSNm7iLiEqWi2HP9rl
zRLZ>-JUBwdgfK;j9(LVzBQUdOXEdGl7eT#8z1yWl*EN4m2qNMNpdroayrlDfv9jW&
z+eeiytl)j<by=AoT%ecR!2MxCr+blC?N#~<x)05lYMbUsmH~h54O`^JC!os8$_*hp
zVpbEAfm!#~XP3l0s?H(7dh*LpNPkE{S0V@5U~aU@+Kh<vR;+KRl?9wa0GvZDMmQ0v
zi-}Kf6M!pljFw$Btz!pFNJv-&aHJKTfY_Od8O||wPj;{FZC`5&n<T-=;9zmFqT`|c
z?=%alw9hhxCJ0Mm`;kTwb--fE^6d$p?j_(ZfoL6IS}*T>Rr#V<>A~q<1Aq)@RB+Uq
z)G6kagd^ctX0j@|Zk$&A<+9{RGfuz)WpPqxp*u87%W;~IQyNdP8+V8I&&tox|27>3
z2B7jBpskqm=J;opSVL+xzq$&v-LAhTKaK#-ksDX)cr}&|XxBdXvL}=&hR!G?P$7{O
z+9+!Cj3Dvz%t=O!vItd7PkZ$b;6nv@$de`N>VZqbZ!7I9!&N2dtn)1se$VJzO1Om@
z>sZhGD>?ZYuawo|FgasQNTP$P0I>gG2g7V^W}RNk9(K6}n)eP5N18vO2K?6QT!UlL
zWU02c8~P#9nBNNVF>s*X>VXPX%UI<wV)IPCBy@*kym`*>JD33L{uNAUTsV`lYZ<Lu
z3Rnj25PQvN2en~HWa;IajyD*y@n?9c06ike$Hb^;rt8Cl9;U6e>F9-}=RYde8~Poy
zLK9Jv6mT3VN0pA-Pv$B<HkKDn0X8=n239;lGyxiylr{tDhZtZM6w+TfmI~na=>xf*
z6c~994vv^;<!Y86H$P}#I0eXoAT6GlC-l)jQ^;K{l3a)h2-ac~o@q;;u?Je+C+d4W
zC1BM7SH6OX0oOA{R~9m&Ye0EBP_VU-V#5pQt<mK3#@^mu_4o*5e|c*tl}<!Nf8J@I
zfyc5w$$%H##hEHdG>)nbQN1Wq$Yi_WbER<)CLrzp4d@#pMT;t>{uFy0p|O`Q$w|2Z
zV{gw_RJymW-t+~C8V@!&P%T}%Z+^}aeGF*KQ769~4<vjBmLIQpHGx#eXiZMB+JyNo
zklspIuxV7xf0b^rg!GJ*N<YRo?rk1aX8i)V8n;|GAIsI+{GiUe{LbsJJO25M;@2s~
zc!jad?U8dUGk~B6Fkq*rc(tB%pm7>?Aw%WUsl5cz1g@t@yzVE)$6s<E)jMnxSHg;$
zoNe@(ez_guU5;z<yzie-5&`-^d_)lxViJ~+##Y$6-Ofx@E79tM_6$$v?lak7+Fy}a
zvRZD@UBe|QD6)}Ae4kV7({K(wmeI&n2eT3uli}DbUo~?1bEs%_Hr=BsR0uQnc;ZiY
z7aKg7ovZ)K1wddx=wqW5pYuukxmdMfgP1papvgHPy%vyFpY6X6+$s}!ET?<lC<)Ou
zyI*6fHZ4YB8(0ITvhw`|eXeLOV}jc3cOlyqpEN$Z4h>6D!A0~O*a0{rWFSiIgWimQ
z+`{KWl~vaj$!XlXuE+<#n4v|T(laph9GrX`7)esW$N5^=3++u79=H7K@w(dr-ZCAK
zp-v@pFD9I|HeJNBl!jq1ER=-brzkEgw_4Q$(lLsksJaW`(c9oQlkVH)=CFP0=q5DJ
zorI=RsJiPF<H%Ih{eUwEhJ)ZAHprID@=0))Cj`F@kqtw9Idk)=x-t9{YKvtp^iQae
zcaFSu()r|UK3V<Tq|TnolN9HdLTP-sTG+f_{^e!(jX!XgAN3K4=}e#*KpXy2MBpOy
zJpVc%fcXZal<c7E8;OwDPnTRi!#jQA_hUH$yUd>5ljUY3skp63;~OHs&PC_|z$-7m
zLn}|vpUm@-u+`vc*@1J7j;qeM%1JSBOO)`PERZgs2|veG5~KnQ6vuJJFl2Bw-tKrT
zSH|SMQ++M`+RA34{`0UAK-*u*>mru|uO9J88StN+l5YW2&s9Iq=U$l!)J9fWBz142
zA`yc4w>`+B#tsfCqlwV2iG^R7PBK%H(kr6gkCe@6zoVEgR((Uv{q+9TYbm&cJ*ZtS
zM1;HX<u%vQw|}*TEHKToLnAc{t0X4}G>eu+j;jQ`1d&lYlidM&ZowiW<g3{iuqEg*
zxI$SgJ2M&&NSh=AsUl*j)+)#NO+lx06k=3E@yxV1GFT%epkG3J-TeyZ+0A+sNm$_C
z-T-O^+^)}M?-1#A<#pu^ak);rR)|Q31f;{EP`}lyI|t}*UWCP9A_G(GYWm!2TC32q
z)cwypt=#Ii%Aw6Qnp9UPTTK@y-#!%eTB=F@z)p7b4H9a!t9@IP|H)fdG$S;Lu=Eww
z3oyb>74DzsI~8kMtzl8@`ugINkXSy6fxsiB9A%y0uHHza%IDx6yWi`|>D?OUD>2@H
z>S+<b4}ll3^bYS+$07^u71_J+K(%1FimSb;0gYw$piljrN4%&XSk%Rbp20O64Mis<
zx#+fyl1z0MI*}nuutyce?yPaWt!{UG0CF-aptVca&KH5pA|ID!<AU={D$IS%+0nd#
zGzuVwZ0&?BNeWl{wo&TaVi$3%8Tnlu;adblB*FlYC5+SB+|x@`fxb-7tK?I(o?{Za
z4AHPIAbc%Ne|^xr={i!%Z1<5b>IMr;sNwVRc<F}*iGdV^;?@@d?IkHnF(deA)@geX
zt*GYOi-WgFrt0hgem^B(X>7;S_#MJ;1!3d(5-E0oD4&=B<L5j|r1Qy&7;a*RbPPiR
zygyoFJ7i|v<K-7Sw(JPTraGyQJELNO=tM>yo42}JwKnO{WcNinAzan=dXz{4kOU(#
zsdGKw;*>9uIw_KQPnFP7s9N+gHG~=F@j&b1czL;sZuFP1Y~sKrb2oWfFq>Fv#dE_9
zEMjh1AQP`f8;11oJ-ywigAmsvn!^uyrI`-S{N4L*81blCs=6zyxytV=A)k92k6SFa
zlnl0saEr;x%^@D;;@Wn&T1_q$L?ZL3h8!Pvl)1d>j19&*7wdo%GjwB2KQila*2iG_
zYSD2<SL#mU#~{k0mj<$Z#?XZriP=bo^;RE{sfHpFh;Q!No3dD3##wD2fu5s^zml*9
z(YEj&2-yvMLd4nyslls1Z_hEd26cx`ilMP{s*N~{!C3oZwyq9^V4asiIGAJ`vd<Z)
zfsH-kTd^*TJXnZ3OL1hf^}>6xrwgv)&?Hh_3Sw@6X*}%l4fthn(S9s6LWmMA7XDyU
z|2d^1e8ZU%hmIP!t6vFT6eS0=p2vrEg>26sfP=X~l+V{Eb09%Nl4h#d8DBur60ntx
zSr-_UFgYs#AjAC*roxVKfSM!#$=-Js>z#;CUb*-n!jpF1C6`XYFRy3Y!q0(@G_*jp
zm$2wCB1BI|rOBaur<?+gvo?~>qCG?EgS0j)>YJCXUiTlvg$mEmpTnVk2yF-#MK95*
zAD3M3F@oQW?ET4D`MeiLeg<GVZ2%2z^RwP+N#R-b+QMK~jfBAy2`#y9lTo3eXeeWT
zkA2Ky_oX@|MqUca@;9^->leGbooRiXGLR%`OK?ygZYLP`t0U&6UV@nkw9SrMk#r~I
zo&N^Ju(|#d<lV$CiMXDetLuAC<tcp@G@&xzA>epI?zTf!4>XuSi?19HhwZ|b#8?-1
z2bce-wp1Ub3>xI<#+UjrOtb~+!Ua0hyLU(3n%i}IBA<oV%aOdErjlciH)G{cI=H?V
zU<PT^4WNYb?@B)#^Engty!+^&1i`z;KM%Ww*@ej#a~<~l^>7`L^I;q2QsQFt7$CDH
z@rzd3&5KjCwHv`^w+Z=<QXsSMnX>#kOKeSADbz8G>%l`c^06~cGmj!Olf_%hV_$yU
z&3x<wv*#N<Y#(B|*ei*qjGA`)SxWSZqCVdAh&(@E%+OZVONJjLX*?-oda!?h;*Csf
za2$5>+&jl9o{w*r67FhQj6x9cgKKv>M4k(Co`>FHg$O|Jm~W*)%0{+RMuxh0It(n`
zjMj{rEIF_1ia#Shp5*m*a<(JJ)6`KnW&&0lJ^LlL3-))A39?Bn84zB^G50H_@r^N(
zA57bmJ<;5gyuH00@wSPxjl++79!K4e8;28y$U>n!*nt-(8%OD6<yw78PRO-%9waWc
zFc)A_OAv->sVYiBiK_h8no^F1aEGBx!`2ov0dX?mOeRygi;^CBxTpT$VmO6o-~t{Y
z{fAzpgQ8Q~dlGqSd5Zq0k_f15*6q}OKg?MWC>^{`!}OEvPze0S<BV%FIXXK)hU%%$
z#VEyM*q7qkUj#U@>eMMi=Zn~c^bCX$Tj3X+&9Z(U<^8iWnh6SU?7F}2&H|$A!1A5>
z>Z0~19oesQr2{36Y&0tJU{IfjmXkSeai2%HqW858KLYs6(Cj#QFm*9pUG3|Xk~PKV
zXtqHbfe*#@AIkceH>q$48Qc|HzOZcLRHe8o2?WQtrL_VrUn1xb{7KIv5NMO^(S18>
z_JKf+=N<g@2A21Y1QBp|`)UkePNr$SFW^{#{;jJq-KfaSG)H3d-?>8Fqn$KX(||^`
zZD7<z=0Vl&WOwv1>@7|QVhGr;O0?+#;*#B}p=}$*9@LJl5`5d~;bT=`(a~f?YP_~~
zI`!4!hXde9fSo}FXLr~5S}~K?%I5TEh-8Rt4unF*i*{4m0p0D#;6$=L>w21|{|yG8
zDeEOMy<9Vp<qEMEk@e!MKPCgxtuUcR5h+tcolA`_We1)snti1Vq5gPrjQGQh{)|YB
zvCrSY_oJfHEE|^&9o=_giC8@mj>GagD90D&kb3%s)O6;cCFi4IU?hsLJTy+#-3e{u
zp~6-!r^Hs79EaJg0*ET~;==L-^1Ra^#*LMTHL{&<gM08nyu*zr@{{9h#yH0N5yA6t
zDonn>r}qmVTAz78o@Xk8Wt_gh&e>u1hv@<}&Or&{PZb)$ajhS`?-#bNeOgY09>m0C
zR=W{EIjayPa`p$q?L^K=1>H2IOe*^}|C*Kjwp(a|&$1g*Au(6XC`R?&9^rdJO?I78
zy^l&H-0*e}x%=QC!IL-01WpS?#@*?agGj?ta`~-Q>9^ASafY&x@krQn?3eG+B;gOm
zp9U?K`^G4UP!fX$kN`k!@TdPfgI5rK<95M(^gQ^+`-2VbitTyz`{v~$ef}1+VTWf&
z7^P?-NK`!<xy4*a?|GNG)Z3!Z+t8cJaST|+2}NzPyCkI95y4MZqBfC@wi9a8CruW5
zm}&7P;YZjOrM=E#Gm+n6UK83#*S!+$7acah?x>qHh)GlOP6`vmDp$*93+LbH%Y3|G
z@Du5Rmn44pDi8MwggEulvuBp?Z%hg=Li94lqPlE^B;#wOd4YMA(B%Tf@E%X0YfH&Z
zt!uq2=k*Z3y{$|NAW(#~>Emg!RGPf_knWym)9fGmA*s>#udC{bn9nv{XkMcEihx%Y
zCDrVM<QO5peI7KOYf3;ag&6z)XgcTMM%(u9*S5KJn{sR0=GL~g-P$&`wvE)b-EM7c
zy|s-u_w&y0&txW<D>GM;^Z4R(_$R}`K_=rnrXpjJB_mejD({ivDwmd{mPEW(V20ug
zInx8E(Qx6SD56r-yPi?ZBWE?*|MJndOg}dImgFWfysIVe3VV)-XP=Sj#m}Cn7WIiV
zkpeW(Fz=&VRA;J$MP~Au=Q(w8KaRZDhe%}2jr^_HCa5SO54(ecV6FQ-TNttb34%JG
ze?!QJnI5{Iwr$tVS<LxQD75})R4XZqlSwH*X21d#G)QIZ{QAgYAV?Kbd}|-T4`o?l
z0$rfa`&Oc9ulnhg+XT(<U5KeNJ>@%VgtM6)Rr<&}=tMy;dN%I5Ao|O@i@@|~aAQEo
z8rb3-!y_z2s>>ZNq>H-$cQ}w2ugqv54)2LW17{JreWa`5F5ZhQrp{@gB-lH^JFCIq
zFOgo}x$hJU18YR@09)`Gb6M9@<kP#f?<`SANv7cU``rIYgg^A5JTCpLFP{=?80jF;
z-}vOS$kn5OPUOwFT!mY_W5<d)Nj#2IDM?a_INrnSk<I3-_7ug6Ci<33$_zTd|A{%j
z;e_$}BD|pw(GFpu!?qM4PU>~1Pzh7v&x`j50#xzZisF6-u@1GTKR2F5d2+}S@qGb&
z0mQxUhu>qdA<dv2U=y$bQB>$yMkXY6a^I#BL(;*|D~nD-DDKfEw&`rM#q!7`tb}BV
zKctj@-t>l}<;QFB=U1bT#pf8sd7iP*gub8>DH|}?SmNR}x=9mABkO(d!^9{r+z(V1
zvKKx<?L2UEHtiJEeKBQF_8~Luqts$n#*$A~i(8<9z=e^O86myiO!ToJQb{M1wW>-p
z%l|eKx0}_}N*)1oiOE0<Ap^4k3q&n#`Ylu~j_1N0_AWeOi{kXf_HByix@<PptnR}2
zy}b;*&eXsw5+)ZP%^2;cL11y+>O4s`du8E?>3~cKSwN5*m5>rsju4F}Pg)Fw_A*oY
zagk2T(2Bw$ho1nlydlqzitov0Q`0?wHQd=O!O>;Kgmw5xRkkC^EdMm@zgaGyOY~`n
z18WOEIX@x}4lU&5?Yb6iH}z^3vh<&_JY00}GBj(5+@+w5o<IjN*^xOUUoHLlaCL)v
z#v_qrXMQnN-quutW`rrbXn~3l=$^LM&;z}RRGs?fdy$_X4k%0dGm~lWn?CK?{@NsA
zOAjLz6^EvdcrPM^-_HgzpcNi6Q(QU%$q?b3$aeEm=%esg107{X(57njmW`Y`^6wB_
zSCofKV7SG{qNp%NW~1w$x_8=+s?0G=2{CbXt&fXaNz8p`FaLAX4)eZV@}hr)?nM+r
z(gr~M-Aa*E5vCP^7psT+!CwI<2Mq^@g^NWop@!oQwvD+0=Ku5k)fy53fKMD@+IRW0
zj`)Ne`TZ1<uL-K%G>spxDt<mB2nYB_Njg**bbu4_?^-FCRuXtfW~mQ1^Z0mJQ2-PA
zZ-9g)@%e*>+JB1F750I21Ibz2bsGiWGG_T|U5mUXO!z!yC=o?$n>!ctdj*2(x&uvM
zNKBZtKv_N*zVjTAtA$xyAt9EZ{0j+U7WJu7eV(lMef@ML)u|S}k_dtOF3A%cU=-;J
zSI>~X5hLX9wn^rK_QrGlp6C}gwAUk^Ue#}s=cL36>(Ojh^u%ifZH@WNzpHH`6HUls
z*=_&x%8?)9rQHTvvoTd$E%p8sFbFak=U!CRRti>@b*XA-Hg7?`f!WoOdV}eOs*F&V
zW}BZUoUGN^On1pnIqf`UN%@kJ=c3^}@5#zql9c&=1J6&ZS&Md$%O-Zm1#R9(eDW=r
z7!BgTnM>L-XK`V-{Fbxk*$JUnpLx}WxAmu<+63=>BCoNz<ohHZvKUE(Qjkd4^P>|L
zFY3~olNz+L6ylHwX50hC0wssq+=~fOWCV(|zw15MEUXu5VvB#t(28=J(UOUJD-rWi
zSt@3$q+SLss<IaPCB42X+tE$0v)6doA`b8FqQpjZU!^x$t>}Ry@e0|_S3-62anLgA
zSUIi<b=S~;EN$VG934l9zPHyhYwd1n|G5l0)*FLlvZVNKj;oCStZAm>D_W~|4QVRk
z8j2o@jqk!nYDVPjJSH`wp3s^7{J3A@svfOJGl>)Z0Qz3>CyWX@6@^%2#qoxQgD>BP
zQNJ#oprPR<FiOCwxYP6DKvBhHBrL~}Gb1`dkdlI_6=&qF@pnikpf7sJSlCm_nO0HR
zhvkkMD4H(;iGUiVNBCffs>uyI4A2uXrp_mGfYu^d{Sk7$DCUH=6BOVDbslU5F9rAQ
z<*D~;OUovJ@aUm<T>J$RlUWSB8+~9ifY~G)Uu|R)m84d6#xZMW(?~O`J#c`)E=G<Q
zreqkr1TQ*B8Fa_(rt;JNbB&@1WXQm+Hqev%ybc$_Yo$2C+n?pHbD*1IV--tI(`tx+
zwc^^x1^B>fXe~G?xx{I{kHlW(h{HkvOy62+HK|&X*lmD>*0S6o^wmZ2#H&<gibTJc
ziM_2D8b`2gko$P~_q8&oybgIjrgsP(*an&0&v%(BfFa{Uvcl{Kdc5DyaC|9U4BmW=
z-xl2L5+FBLWK@4*E}_3-`CV=6#e*#)Nj*8HVY_TI@uw%biojP=%~z^{$aSBW16NyF
ziDaN$1oO>aIM05$Wc)JmtJ6@jP^q|Bgci!*#eK~%x9Xf$$)nzf3V9E!E)3Xdga{bl
zx?DkL9ZrUAQp9Z?QoyA6M0{jC3#E*r29T1=o|NK>fL4qem1Rgw8@q<ht6MHZyON(P
z;W@+>JRfL7c-#wOr!Z;R0yz#h)QX)aclnI`KB`Zy*y3_iC9aqfU1(<U^}56de|Jln
z^>5_Sh5bu>KA{}06se!)N%E5vd_9wD@cwWRqccJdybd1K8|z7Dj6}vT|5Gf&x;KM9
zUk)wQ^p{>>n3FWWZ`cL5$uT4GPd<=xQHf!$*<s{4rKEcs_!di_DiH13#YHP3^`3lC
zI!@J~abr+K*E{;f3)=d6-n3UX{f_*D8jc#?Ilx1qOa-{gLgfN}bgIQ%XB$V$E%Fp`
zChR1!$BX9l+sl57b0ip7H%^2)KL(o4jcDJ?FRH#ZcfRMC;2xC~5(7HV4-Pd*JaIjd
zJsuEyA02}QcU%{JL1o&tGOCn&yC|nD03myu>!Q3J-S|hCtch>C#b9I%VYHu>DA25L
zI<O6KId&kPxga)uT1=6-bor3{nzt!WaF1?ZQ*)OG`zFIPcmrYxxgIvX5pZkJuLDz+
zB`h)*1`tv1Qt9g+Aj<EVhfBrLVlg61DtuZ4Nr=XJG0Nu|lTDGP{X;XJNAUJW-=Huc
z`e#hD?Y$I7;%rxETlf#qZm`qkv^b#}z3R-jZ12gO9uJ%|?v4-}B(c{G#74$zo_y3Y
zD-(%P){LaXg1yZ~<YveHsOTh>yv4&5dz1*ut$CMQu*m@N8Th00A!hmAZDxA>?v>=3
z27A2UEpk(Qbu|s$4VFXYdFt$QC<uUJr6;(W-)((pU2EZ!CtrQ0`E$NKH^1pY{1=&{
z)*2}ksev4zLU}F_bY*|PHRdd;(<-&-S?%!(KhT@{4O7W5JcNDDpMY)pNbh2{l$|os
zq`|d}qJ_cku(S$j4|gL@r0|X#+w`BB8?GCxs~C*kvlYZzHVEQcpM`e(p1_#rnBtw=
zqw9roVGfi-W=L;yJNkDwFCT0=@`KeDX5B*_*VeF77YV^CA7i1|RqesCigCjgwrgkA
zPqo+i!^FM!uHo)inY24p3O^pRUjWDiPn@*cGL!}R=|7#`M4E580WJnPrcMM;&CWK7
zu8iCnw0d!0oQyjR(c9X9U>ej^W3@0^^dEfZ>yH2bE{%JMr8k|@BHf$}G`*~$$lNI+
zEzCzB&JzwiU-yQ@*rN;l36giUlbvjN?VZJ}CCQrkjsU!9n4p>yCqm7Z#1S_FSx{my
zgwlJkaDm{bL#mTd9p5ZTF{~_J=?T=jxQLi@V-N=@;)B4jj0mW3v&`d>+EJOO9n9mZ
z`!=M=><;<rP$St#tIQ)w+v0%QgcyyORk+YXzgndU9{R4`U=}%^fL6^Q%k&}1V{yLb
zN`pt~p;d4Jcmxb+%(ad>+|#$Qa%H$oX)-{Ox>cJf`i~FvWg}u?+4C`>A%Jpy)PA9i
zQbJ_WvJ}g);4!3*PG?3$)w?ai8$s|F4Nr)7aH2G;9~d4?$Iiq@@RYFi>UH@>2D*PU
zrz}I>2p}dR#lWB##_Q}JH-1v<??-0yTO7@-cJ`7f=-M77qNO6InmsGagdyimFT_?f
z-rm^GW<4y{jX%kKNGi~W*gfAyS0xq!F#|>Aq4h{Sa#J)aY0)z_tDBpySn8V8lg~U8
zI5=#f>(LfDcxUlx3ebfu5nH}3)+HPsIbe1`t3O%&!bIk+hr4cb`A|%XYG~Jirc9tB
z-~Ag*?sdKk&(ri&x3&gn$!p~7bl<1K)9_XP>vXF^`Q<S;%k{I6NQtkYR3E=oKA3vk
zcvNw<#j7)0&~F`Z8>_>~+Sve5B*d{#V64=;H6jtTPmbxaY!XBw#98+KJLReUzD=(E
z{)qt!CipZ~@frD44lVcK;BRk?>}?nQAQ5uXi=*@Wo$=cm%N-6SWHC4CTMmQiC9%C8
zwJgSQe%sl0#QyXKr#ePiV6|?WBFdFu^`}Q>X0@URx5)cF@s^Yq;ARhd4|2-WyoJHT
zy`WmRPO$^^pGtwa81LPgblA(Jx@~GA8ZwvZ`^3D#_nAxIH8dmKOt83U97fhl2#}fa
zMX~d?{Ura(Gno*JQ~qs@WAtZWQwkgck_IB6V<?n#iA<J@Z-9tGn9@XH{lfc9D1P8+
zS=SN2B%AaXU?tlz<(JDX^1GB!1V_Ka*MG~G7t2*7wFgbWL<6`H6PTKoI$h#tk)SXC
zj|DI<T_^t<Lj_xpH})q$R56bfm-HuGORLE+0_FvYIl3GeaMX|)oC_E{FP9}PlL5-G
z;pz6%RRQvfCB;=J+lsbmQ8j3uMWqwK!Bs<k#WTpuxWmB@xffRy=V_IpNhdiE6T_(P
zwIAmujgt6p-oqbm=y*CQj8*gp!@_o+Bfp>^VjWS7<M)4)>4)1kQ!uv6h)1LD$JtBZ
z1l$9TjD)FS#@J`5m;rez%W@PkMLBmyBfcZPQ1#$}Ljt=}CQd-t;6kM)$dzwBV$LS~
z!SEpvrt+j}s<l5+*?P<p0{Vg?{&pA*yi<C^nO+Q$p-Hp)IIGuKGwCNllXMmCp737v
z)07xDYKV+Od>^kf*oW1d;x}C`JN}jCv3%w~e_UX}pZS^(lyLnZta}6k4lqx-k_888
zGFs9e30Rz)T|c(OBEuHvHB^Ad=*bOoU+6)d;w>F2q;0P3c5{-vkKcX(S1O}Yu+cbJ
zR$MP|kYBYYhg;iF(h_~pm&74&a8iAn<Sjl-Q`uFLKI6LiDm{N^j+U|~S=g@y#)F2^
z1@ototp?+NFx`QuA&ztT2SdMor4EYH1QQqQKahX_`Ek}=iFk>5I^)EDkxsOpQtEoe
z0yXmdHZtBcT2?`>`yR(eInp!zMtS$6^oC98)kcb6O(uyW56I$-zuG?{P-q-oI9GtV
zXy;$p0d7{_Jbda|Wj;(pzxY+2QvA!_^a$DYz#43*7zUnNdA4Lqj=+gks?wTn&O^On
z?JrkIU?RJgl9|5p!gOtrX|CoZv<c?WkS#A4Bd%d<3yd1&x?}3DGCCd<%dtr+4+%70
z2`4bFv{^2KO9cPLj!KsioXLjol+q^mCOtE;W@V~FIYIP$i(7RE6r~>STS1=!*`${9
z!7)}k+KTGa?~Y7lsF?1DjWej8<sXPK$-oYmG8SC7nk`y=*k36)!~+xr5N8c}kt%bR
zKMdCzOseV~#+LoGShRdYTL-E%=yvfOrSpZK5XNewGjJ7{|8$-En2MmweVwjwq*Cmf
zeqwnCK?UN6;2@CHlb<eE5vEQG*WJ)hdn9XmM+W{b@tv4kB>*i?b^Tq~IW+~IQ=7v0
z8BV++?IQu6!SC6i;`5(Gja51-{!es##EkIH7RwF`yDC8|4I<gdO|k-Z7|s}$WWi^u
z86MBt-B{(Pa>KQX6uem)ksLyg6u$p?{iwX|K>ysCAe!RK-h^=RABS})<7<#fx()aV
znDd#PVdt9%m>0t|L5vH_!|ti%CnvJ(m!ui6QbL9dg8H*24L-ul0hqqx^@m<)JX*p5
zuK5A@QG4E3-ImgEmbsoIO|WUmCgKSeXhCo#&XI{=T`hCOzChR;OnGHtGL&4OTbTu+
zvEN^>wO_3EM|iVHuNjGn<VDF=#<=gchHshplTSPTI|<~V2qv2>Hv->XkS7>;&_h7p
z9$_`(;Ro>$nC~D*X#L;>WXZQFYkHR$w|U73{M!8cgmI{7<T&TJoV4soqJXhL2D%C-
z{V`(I2`1f^DJa|${TQBQmc`jO;U_#G<V!yu+vph5-DT%h=Hr}ZP&I3u#!0ZIr>UPX
z0!!`?q37qz@!@}7t$B48>H~9HhFX_9#ugk}lJTXk|L;SWZI)D|1f)kE#I-ulB~ck-
z-z;{kpWTS!WaHPjE)e5RWOq$u_){+(V?6%UVlCAMl)hoHX&o{)OQm-YlG4G{jOM49
zLWr_4n-OQ4LmYdjl(H*}DyMYb@+g<<R!(7E|9H&0nyhwe$eFZDPD7O8aF{V63R5T7
zRZ8pQ)(z3I^29pi1io@!UMnx5PUCz3H7ZE5IPTQskP*YJx4LX8YPXtoXKPR~(&+lK
z*S7cLAo`@z&C6LbsVuzN&s&Nc{;TMR8P}<|yfb(xSue9@U5HKelVC(YvStWyfb5i8
z`P>T95%T!%CWAe-a5^F)38hD_EQ!8J4)+?tnp>%X@cadfS$Oe8ys(mfO|t4G?9V@Q
z;@}%a`}#7PH~z`^X1?0=H?w}PL8W1BI$q5jXkNBFZz}C>UDZ#c9iZxVRq8uZ7?`wj
zI`j2e^M+jT$MOfs*4!1nH|GUMJ*AVt2}@IW<UQ(RS$tk%O{Lw{R+}aTcp2d#?$7YP
zRKWd^Slz@!i~5H7!{*Ywx0z#+xJztPPIwH&mUJZ6>E(QH;}C6qAR1i4egb4yu7KzA
zJ2OT=y_^m1KaQ?6XRi8(tR$aLjup~W*ThqsMH4DF#XPmbg7ea1j$b}~s6<X{yAK0v
zcMVc9WjX6dMc(n59t5$vHabnfnv%|$Xlhyogh+5!YN9#TtTg-i&l3EB3a{x?>Q9NZ
zK>a2kuC*4MEIZwL1>ZXqygjRxSN##M@N{%qeI3HI3}Fm9JSe`Eiw=i(S>A7lO9s{A
zkB%F)`yFy|)&X-<Y#A1U%&_T%`mk;sIK2I@=&?KX-ipg`SS!MY=X=+}JpJOiF$ho#
zV!zEa)3JQu4!}FhQ3dW3)|y)o;G>WbzB?mwhv&F@qqyWUAOpJ3S&QtnMGD?NpL!kL
zj>u^3Vj$c+R89u4O~n3KCcDj)TtuuOZQFWX)}#qKGnv8F!W|2N)Zvk+0AeHNzDzJ5
z=0+$@2=&`z^>R;C!DQ1>e4=vPY~@WAjGM_(2yhAX7=RohsfV(t${y|HWdrt%_iiAp
zykr10B2Id}1a0WMNFC|(a%&IO_pa-p|4iSuLT1!*zT^O01difydK+I6B;@sIBZVM{
zw})E)tzr>#A~F!pPv%P{xgJ5-Q^M-%Ki@(cCW74i0wn6YvT8CPmVJ+@Z-&{$+aq?L
z&`yJmo8y8=3PQ#KJ6~lBi($l<sDlEt4Y|3|nf;?Q0$)OM23<{>9*<@V*aLikQsIR!
zGkl7V+oo|)ElYaRU&i=1MI;|%O~Lgc>|pd0E;}r^a5yqMUG*4Nh)~e`GtH3#f%M2h
z!w}pHT+(PqX;0g&Lla7Vx0o;2gQ&6UF|PduhWBah{N@wM<aq0!PRO-~D0%2d$mVEQ
z+*#i@dm|)B)2V`~@W=21u?N$w4bzV7`LecL9HkItU|iGM;>`X8X|Xoh?MO%}c#b7t
zagjrYw)(1H2+YQr5yw~Tyk-EmTqz{kf`^u5+8p#Mb$TbOghmR<BHrSiwSVCtn+NgO
zM22No+hu$`@{6(Rjej??QrUD#{>AOLn_ivStBSu2#Z!x51jInnLSKco<Bq^(ZmGOK
zb@;kz+Lv6@@Ab$L7QEgvZ!Ucng@>8A3E(a;Kk8voqIlt4(E=+7M#<&>IS&$K0E@PI
zvw*9n$bc{qts;=}kAAtnw+YRnI`lfgu53oG2ZrC6w!{15+gddcR}1X`UoPOgYgt?B
z>wXT~s9V*Z=V+3<v@I1eQ+Bu2M1eH9XB1}V3E&#-+ir&?<b(aZ9g56+kEQp5Mv#=>
z`#gg-pMUeE<QYVXaUxSDa6%*Yu1=MaL2`#ra%5X*IRX40e9ttzBg#l5&=p!p8Z-;6
z5#$Yw@Oxa-pwg}V88!>!_IytEc}_!BumE@JV+A|IhC?_dyZAfSDMcs;w{VU2)yHbU
z$moRp*DC>{zzJC;h3A(xBfs+J_uS5MCd|l@TM8w}V8*=m&7lsXTq=(0vh<Z?cB(k1
zjr^}x-+fNZtH3E-n)!M2*So86k(%(`6sWWVeiNZ{Rg>z}QnlgOP?oWUvpEZ#k{E@a
zM5*I@JQo2Xcuqem;`m#e@1_cNh;@VH6pF_vAFJ<c7F1o269PNEqY1h*4FyJKD!hJo
zSvz>pf9N*<#<VjIx<uY7^E(j=--yrch2svxLc^5|BqC*pHw3vtbe^1Nn>aXPYhck}
zkr;GO5FHor7u?TTy#H-Salt7WQBv9O5*Dc_?k@Uuyk)BpNFK8G1#(OkvTEWxpM0bf
z4L?pbEu_{mOBXbgz2UI2<km+>puj$)Dnftk>KN3o7C4#8fUO1Z2ps1>&naSwxUE~`
z4k3U;^ry50Qux;4t#<SiVC=Q_e$=QisWA7?>m)0G$H6@JFm(q11OxyQhT%=&1+(RJ
zt=W2&02lX3`)-?kp~86y1V)3d044l&)Nftk$#tshEW19}#rA9#Q_RI;yFN!=yV8%S
z+rf>RZJaKN&cuQ~ZDbZFklbY@CD?SQ*|yjgGq8?uQU9SfEH?j9*c%(n3vHXCgU{`&
zpR~i~`aWv2m8Le`wuC<cK9b*7{694JQ-`u!hoGL|R~IbTPpDY9(`+%5v0Aa}j`dE9
zkf+FiFOM6JS>8)>9ZpOS#wig0Mzi<zssRkYK>-tr+CMWpAD8YU^VF*!V_j``Gkgl(
z+(LNxe`{vDYv18Q#8@{!|2&zE4S6pfwv}%{QVvFny&Vi1r6R4nN{49>caG=8e`$Fk
z6PKO!6+YP>N|oKVBv`64#tQZ4C0(PJYbcoNL6Ko0+{d<E)BmKZ6(gmKgh^(tM$(wl
zC*uK$a;K=g1N78S?*)Bk`cs^;nF4;qUdBHC?S=*)^LjK~G+b7`$$!171odevOkXDx
zWW?^t{`N+PPl^K*v7rKoa)dScN~wmj0<f%sso>6;*5t{%AmBeX2s<Z(D;-GCY=dPY
z(l@5!9-mmyin?^RxRNYBYQ7vzk_DEWH~lW3m?xj=-Rocb8e~3c_;px2!fSlKGGc>}
z9$2|Lnl6tE7=GWy^XP4W0)Jb&)4;zC^ngtw=~Q^FaE0c(MI*X1$fJoa`_B1~Bz#kF
zwGA2TejkUYco{yJLv7^5TQURdw{_?I!62?6d*>^lcSt!vtGwtET}!DrPA(<Rm#@-X
zN=&_h!?K<3Zn0a14F!!5JS}>!I5&|LM=k<}{Liv#bi!VUpQr~VCxE$%F<n<P<^e{V
zDWZ1HP~S$HD{84PYK=Y?dfY13QiSA;L!KRnj-;1cj+1Gv{9j}u`?iG0QFOP>O9IeL
zOwQFa<MG0JzQ7%JA=_8?aa>Tnjj)0WYMFBX8y?NohjT}D`a}CY{+g!4QeP698k!V`
zDUfRtWx1^Hrc;CZ{RU9`DEh~^TXYlYb?P~1lADI@i&d?$x|*v(nyfK#>F2OaAo*ZW
zUi;`?5qnT!MB)fZ6r3zqP~s5{z!I?YUXZ*BCYOy_Nt}SJ2T6rUMMQg<ZDcPzj`V}Q
zoe6=G5*DMH7+?b^+&xrJ@QjC;AVJ7${<iDw*xuLTgzWt-ise{k+ho)^ne|f{segRK
zP|gjiCB;qWkOU%d-=G1u1a;G1w|fQ2&UDwZYO%0--Op>|fN}Pz<)g(1Aa7-9JsNNp
zL}dn!5doivuY07o%Mt;_ph9X&+Hg{Yt@pzzvY!#+kYK7UPO~q|?ap!>iZ3i#PDZBP
zVTL&^cp4Nu@3P#q;_~l5g)yY8Q}P+*zJq<dk7aGqU$i|dvdjNN<E{Tn#Qg*@xj-V9
z4rPmY7)`j*$Gder5iKku9p;6ch2<=Aorpx3I?Z^>RG|Nuh}0&(s928s%TLqbm)>M0
zIRqNQP!n7-1jOFDqvWphQ@aOLVZ7BJiG#HyOS4B?mxJWYtHupNc`Z9pwB)o9wVf9>
zT(g-omzWL7h2?1<_Zb-#Pj&Z`GfM0shB|vn9B@h*g{}TtjX^{7{H`67{^g~5C8?y6
z{7@Z1Qet*LXz_uJB+KbbmSxPL?DCp_3}o;LTIzk)YJfzj*7%Dmw{+qsZ&z5aKgEF~
z9D#S?3iuAyXsPmsCT<^{$p4PW2*f|8bO0|bs_TzdQqE$Wc6wbZaTh`sSc=s=r#8En
zuayy^Mx<K034sC6&==m#X%ErMwnpL%qQGHEW@z8f;gL~nlZ+CF?`bIs71%KCk*fU1
zOKT0kMljUaGEk(q(!FJhW~&Ghn8*jO@PMV^$Q+Pk{5&P#gm1C`%E0-<tN7$a5dJVh
zc2uD5Lz^N8>q67AIMWtfoR=><{@7WRKnm08*ga2NUwU5y3R4d)MREYSIa0)<YO7c{
zNlSY$Ac74#@>z(0SPE-8G%_H?w60!6!2YFg#c8ytYkjgUtA52BGYxZuLxhn~wF7%-
zj=Sgp*(@Qc5Dv?|7MJnjYrJagIgQSXGI>wC>7ZFjZ?uZrkWcl|eb~7FM%i3;qh-$t
z&W-;EpD_6<k3mQj-z6jAb5HRHgUrj`>#%b#tKZJXBkVWJvfNcz|Mz_o<iLPvlpA*C
znaFUFYzPP&6W3q~WDSTw*VPWs=BTbGz6n^q(JSw(_U$J>SMNzE?^)N0pS>Y`N<j}S
zbpn5r;rT~>fqHPsxZ`yW<90l?6(oq9^a#uIac1RurWZPDSl~xA_%ab<CZWeandM-;
zH@k7-g%{D00U+8~O)?{WYdOAW&srqlTWQpHaP&a>;m76;^WkjlpKqqERX>UJiiRb?
zHNmjFaNsp;&J+bNvC?KLM5}!fK`tI>x6KHv@aeJ=d*`Ox@$akk2RoX`j;c%SJ??~*
z{V|6JE{#SXw+lJC^b1V8L^n?LNkr4%H|kVvluZl7|3Hpj#o88pQpbX>&;*YIL}(#m
zb!jF(1e=$M;er3*fJi5tjm$Yb#1D)Z4E~ualbjk2I^3nhqCUprI_e#+rtzVle~^uV
zBAZc8A$K+v=HUu_6FhB3b%=TMR1&6U_iBZu6&PeMr?)?swVLvoi@3c@6rO?vF{A$m
zVPNwbm*ikjD`+}sR%KsUe7em)W5s6D$O%x9omNFhWpG6)I5${)>I{1Y>ul&vqRv`Z
zw3bfn$^=JGhoN8or)l61Hrn)q8E8E)r=p=~H5!eJIZaJQmHq!JFBpW@p3!hX7OXRk
z(|_p8-mLc{3^4R67zQyX@cxp%NHJ0!bO7df{!@}`T7+9-prxFjLkmzy>2&=d5m>tq
zLKln;$=A6cnsc57!Tb>NSLBLY%+WEW(_6YycC#&q7y8F_MqQtgtUP2gluL4+qENP3
zjo2Y5RC0Dsw56viSA8Jav5f+hgQ^N{F&v*=cv$k(Cp<mU;>=R%sNc6H)W$o(%wQUD
zp3ASr<tU-OAV0La5RYw5+T<>W7OCTe_H*a?uBl(K(CmwwVpdaeb{f`UjK6-!Ul(VT
zC!<YJ=D@FwJEPBM*Ps{@ztfDl#TPC7107lGdjfnASOUP_Zy5<Ed(Xi5ibYH+!whx<
z4Ob8cV|Z!U*}+MV=cxCt;up!HKJWcG-Y?CJGn{wqnv|_eE!T`b29grQ(2eiA#$hl?
zW>2`Gy?v~r6na&*;n)n=5y89IuQu-Oh}CpVXAb`3rD&HFTBgELe>5&4o-kgWYD!S!
zPJfEH->Q7;hM0MLeSAx=9m5%!k2|i|$8Wf<38jXFP0y6ax1o!oy_TSomZj563Z>=y
zTEvapP5rsze#PF;X8)3D;}^vjsY$9|9m%TA3!xTZ(lCLSm=P>AAK9{y^MURj_lGpL
zD%N{Au9=V0u!d*#LWx*Nc#G02iyL+O49Z){4lbg#PanWwIzaY&;J<_M6?p6%v*CU^
zT0FR($s#LMOGY~3rvKkK1!jg#_y0;mOJV`XVqc#h3U1I48bJNdWvC-cCh*x`dh&1+
z($$cgs2)J>ig!4)v><sVsE4KjEsUn*n~~<RPI%MFHcfx130c-+lI`zoU!Ot*{9D?f
zacLIhZ!M2mHX3NsZ*>zCgCZOxF5yUc?qxu=9_7%trjEJGr8Z+*j+SMwEnyx9tmCS*
zJ6B}9qGEB=W;c6A`_3}i&dZMy?JUJG_G^;vAc{3yHuI0Ycn-O31~tPh;KyRli$l_5
zLz@eapE`V~%X+F<XRB2w=h)oGhU?&Exk^`UbIqLQh1^`5Eo6yAC$MANZf`?y+1zqI
ze%z9zw^aL4kn2GBxMy%N=mkBNZ<#UM0-M%Ff`zxsvWg-1ra_18Dq&r=^qxdOVXKSe
zhi|Dz>k)Yhv`@f61va5(h!wL4`J|R(pLyY>sY*>*l>1jyW>ymPULA~2msdNfth-ES
zjOqxA*T&@qWxEPwqgd>`o!bP5^cKGB<Z7?4e}((IN-F9V4`uX@Aw$i2YqE#>Gh|7h
z0JsThZG`Bmr2E8pvIwta&~r0rc`6hR5|$p=b=K&wo@NVDQWTMVqf5ozKD>B!XdH08
zBrTL7k#gWfr)ImUJH8}GGNm<`IM$D3i#^pphHhUqSb7vY36RCc_fb?@T|3a;y_XBk
z4YK>fMxR0lE&Zpgb0Q>?HzS3{uXhWf@`M^Oi8ZEC(GtpsIwXl&EKXA$WUDS>-J*)S
zKy+QcU&7x^%oCO|S;433f82~Hk?w+E9qELHQj_Yn=%yx?_jsFIP;3GnSLNqRH``_X
zOsMZq;4b=mLdx+}=;bT6^`aXze!dMcbA4F}xEcUda4hMF)%|VIA0Ol-p^0yDNq5Zb
z{8O4uY3%fTyP+jMyQi`Uf{yD7S>N$H*O7OY#-A(F{R#QTbYTyk{{nrLoDf51q&;90
zG_nA2PR91=$v`s3W_jk7(8^f(gU7h!LbGNv*J|uN7c|>oZdR!4kYA)uHbz}Iy4&3b
zV)<RtVa;-a&X*VnXD@7J><LfuYxNe9;4jss*_4RlWrAX^nAc4}rJW>&$>Xt-DYg}u
zzg6y9nAtqetM3;&y?QIx3g%M+JBd9Mjtd<2x2}g5xYff-dEAA(GxT1U=ywmxDR~IC
zxpCdFXC3t?BLxESnlsbtX8{!6t>dRJSCb=$jp|Yz+q_Nr_EPd6uq`!74|0N>l+s@+
zY8*`K9!o-thq^2J27!11Xj-iMSD}Ur?gv1cFNKG|LKbHP#FwsdepgYM=oJnRpZ?6N
zY78>zr~ZBUW#qhtf!9|YWVlGGNKN_mNgZ<v=B@{c{kL**0_7$YD>FX`S}*JaC)jW1
zb>`t31m^B_NO)P5T%ZNG;qhFu<bGD?w|U$?qWHtE4ev>_u^3va=3#CbNbs^6`6swJ
zx6q8k@81p?bs>ogH+9LNO)NQzl!TI*Y}MDO0S1l=hY<q`8!F4B;>;N|8sG@*7PrMJ
zNXfpLGrt3(v^ZB?o~nWrrvl87MP&$|zZHV*1%OsR5LgD}M;9d9MkI7RoMrY9tGa_t
zT`}S(7DYW45Qob%1as=EC7Z!7zxAaWe7&4(o7%*snooT>gZIq`yOolR#4y&5!J|R&
z<666yJ|f3-X+UdvYC!}M|1u#?F3bOe+2xW36A}VOmSTSQ=p5$LuWr;^DiVrD9!qP@
zY0V&xZhzzwPbM(E)AlwpVcY8~reUotqiUEKNKv7}h?xeSxOeau=_9bS7}eyX;Po^-
zpl2gF|8T9WuVbR9JFV#g%8%VeL#-7hoB0nKtx=P)3UC|<ZfrX2s8>~G($C`OTM^Gd
zU0@Qm`nn0iER&(F!3hJnqeI8OiEVg6D2WpN#=+TxBbylku_&fU>ba!x*Cm6)MY+-Z
zA)oLZNtJaqn|f10rz?xO(aaJ?u@#*a2B9JjYDnr28k7qr)@J6>o&2bmz#Kw^lml{T
zAHjUB?;dZ^TL+VgbMC%sD+2u~26`BvWS^Qet1|IW-&%}m$4vX~nNHu)?h6}@`Pl^Y
z?F)?~0U}afsooRE1Bu32xSG^LQ?Iw#0df34o#yUSn2wQK>0KDgOG@ib&Ps_(i+`(@
z5oKm4t!WQlQYlTVU4<tj7+wpw>t78~WV!oMr^GXb1=Zy?fA$+R(RnzSBUML>Cum&>
zS36y6w?qD3Srz_hwOSFq^w~qfXK@XQR9DWg(=)xYp;-ofJ-ia<X(bw|*;D_0m)9)0
zs$)??#iar+$f`-9;Bobx%fs@;x503j+E^V0x`c5nFAo9Y0b|9Xl+^u|JoFp{U*SJ>
z-el3l=cNnlzHR$zrOc^QD~hy==*OB6<~a!zwV6(%V2br65PMzzyI*KH*$RC{<70%R
zL1DGVwkBMLo8I8yin?{!Qa|>MN`z`dq2%h^wnQias_iHywooWEDpj*guwDd1Z*^Md
zHFRYur16zi7FI8#4$FwF)W(7z5}vrOrIghc`wW#p?-{?ul)MU00aU3%;FnSEP0L^^
zhB_ekLX)$!pv-JyV5_<DaOVTV8W#)?AdG!Z{*(o??(lI)AGwL4{CyQRnvOBWZxDCC
ziIieiWRqn7kq9<#nv*ErhS+qvIuQeThc+K6oYj<cpV~#Ppu@$oOr~{XH^-g;rCeQb
zASp&w;6z(rEQU9YR3*Lp-;pun?grjD%HI_;sUUKsRa$xAv^Y`97PmU(F0(LYibz8=
zmfl*zxgC^hE31#PDo7PW&a#yiiGPTz8SVbR68fQNfE};Ub3ZClMjfbx!sDUre=Kn0
z=@k3daWa*$!D5=gdaI)u)Pm|C+WoH+<ecG*!%!Gl8b6uMWtd>zxWjpL@jSnwz+DLH
zb}!4?Axxe%$eqM@yQVo&itT=gz;xPX1rQ0i)9KeB8!SC+Mh*;c*euUCd+NKYY1|60
z^qFx47xz63(Bra~AH5E<l_;bM5~TaqJt_b7F0zBI2aKo(yXNKT{iuqXwd|&i7WDYX
zOAo`!1PZdU*Hf()i_Fa~q$9V>dI_^?k);l<ORz0beKg5??^()nHZ_L->eikdQjVxf
zGJ-?(-hKavG;Pu<z4aaD#EXMp{XTKTbG7@kk^JI7Z_kifXp&Cr`yxVwrE!B|IbU?r
zJO$eJNovohtShzb-U**nhW>Ww6=Q-zrHAK&?kfil6`q9U{9uw<a&BIEKjsG(J1`Ks
z|AbGHK<&Bp^E#ETD#Jo*tJV(`oJt>YCtOt++2qg&vx$=HHA;X-#)u)$Ny{n=yqU?^
z+DxxiWumTZ;Lu(mZD8xQKjh5#n6MKo&(E)~icgF@lgd-^Jy?cyOewX`gt6DKbsby<
z*{SEs<}vB;G^k}+B&2&_t9I~@L!cp+;L!2ub?f%k(U1!Vb(|pk`toY4X2L6QeiGQ>
z`WuhaHQkx9|J3Bj(2~F%wVHdTG>^jps@VOUHQ%Mc94h^%Lo-1oKkgw`lMr<0!hIF*
zs5+>LO&jh`jKj*&^%VZZ-fd2?&l%XxfOjX{VsBhc%3BAa#o`@$uG1^$6??*n`R!Y+
ztd|;93F{OQxQleeo?EZ6kSidzDp>uIQPHm!<PER%<f*9|M=~rgrWH3*3c?h_x&Bg_
zr&4#nIpYF4N@KoC@=D>z{+AsI`O%@1Buv>npPaS@<Id)ia8_akHp{8MF;;4xWj2Dy
zX0{e%4ioInzAtt4w>z3jF(}qhW(3l`1SB6j%PErZG13ca8^aZQ@vbP@8jV4;rgF2j
z4&tv|wq>957B7>(9k!L)+XL6+dmabhV)>GH@cyfe{I6P`|C3bMYX(FbB#aK#b?jCL
z(V#5nlQFK7+K`ty!d8l;;xl`Z2|4jrqLP!bKvn4I`-_bgG}Ph+WcDW@QFryKhB(`J
zLRt~uDIeGAYvsv|cU#1Mn6eZk0Y(UOvRqKB;25MFtCM0OjF=tp2063r*K*VTw5to#
z2$4{SW2cTm?RN&-Govn0Zo7b`Lv>JN>Z0AR77aGs&3+#2<qAh-TYG547HtCOqSNO3
zwx^?FNo*zdhT6&e^|!AmVZ2o~6dW2o8Y*mS?MfS#<Jf_eU;c6fG-2qbZkzwFAFaQq
z4cq0NP!5JZFV2wGQmR8VoP*Sd*6t}9YzJ@2CEy{}>Q~T~IDpzsIJC+^s6*KllEIp!
zn|OpYB~ql75imvrr$!NUH|IKBR_n?d{vEO(nToiXqp-mktpT~g-V^0~qDe^GE}%_n
zuQPKtam6vO1I-qio8Fsm-wq?TRzHhgCx^nRWsiGuV&%f-w7Q{tz4G$Kr6}zEt98J#
zrTNITGqg{8oTjr8(jxhKT*Bc|+7!ki_P*uE6f`9&){E`Ljg%DT(gFQgt@ea{m4_x#
zrX7R{lp|p0@e@tZ&6lghlMr0?R%lLx+2+ofF^v+=vC=DAF1DB3exiL3YKoK2?#PPq
zx9VbF-g?yUNQw`IM}%-Y_pZF%@VDzF$43Q)*EyNUN>O6Hcd^}C_^gn^mi2XQn^uEh
zp>QzyH#I5=!K2JtE<d^K=Kd7NZN4l$Bqk!7Xa;;-TT>tjYMG%0U_^se)#Y-h15+W=
ziko#%1H7FRi!*qY&j~qJ0(c&3FY3a1Q5hnQ!7}O}?(Bc=?K)$o6}YBxP8hT%k$F`+
z%bD9YE1?mC0#D@*d<rSZ+YWGq>++J(kFpTR%jsA(u0D2eh^oGd8k6CauG4??NvO)W
zCEww`<qyk%ViMyX$(G*UNZ(9?B7hmal3U-{&q81n&8xlRPpGok)!>=<hvY;=V{K=R
z1!AetF2!&;fU*ogA!8#IB8|(o|J7nZObk3I4-3rrz~05hANZVh>5*%7F2{;uy#L{w
z;0UbUPh8laSwf)vp`i6a@wsBaKVg1Y>2Qaw4jCUGmBxRB3rU3jDG8LpK(?qxGj7j=
ze4qP?D=Jk+e8u96lr+Bwvx)%A6+WP%erzkVe3+7N@z|v=H}<l!|JQPk*I0n=)m$55
zQY^%kz;|7JhGidKF&xFOEZ`MTdpB_yf+|lq5z3IE%E=II(s+6RU&2J9j;UI=w&0$a
zMO(6>3dR{1f=aE?x_X%#vq~t(U`U<fZQgUO#jAjfT9xCvBqii^eBQp#%CvvCIfN7u
zG=IyP4K>wn6!z4%ui>TytmO|4)eo>XHH#$S%)9QM3|vjzj%a;{Lc_5;d1<doKGd1}
z<p7eskeE^-a=hGG`G#U$Ti>>Xx=r6#E>Kl>p~@>d4^1z>6;(j0v#f+WX%!wi72%bb
z4T2CXzL79kCR1%R0_-v)J3<E7V-_Q3LW>;A^4>P@P(gwX^jV(NYRZ6aQN19L-7pV3
zEZs;E@5mSB=gfE85{Kt1fR}$m7*>&(<w`a=L|uMJ#%9O!wyw^|@;o^`p<({G-mLS>
zj<!4Ofpw~0-H!)WF34Cdf}c-*LCYe;hFSj!1Fz*0JX5BiwF7hUkA6(wJ|L5p;15PC
zp4)nju-~<mH>q|xAugobaO9GRzD6Ru!%)-JruD>;#i5K{j@EuhfU2L<hDcFNsTBi!
zL;%QE*n0Z9WQ(e56&TKuTHB_0O&0=AdK7Sb?@O%mCZ;eDQ~|L}*_p&<s1&v;n1s<_
zn@vm+;bC-BHQmmyK0bXj1!bmh*(D`vRx?Ze|4tqD6us$l{m%xpy9&60q*C9Cg3FHN
zh`w;qY<@LzABb+>X`8<SX(!43Nw8V%u@BPaZR7?FTi*YNInjel7-=$<`j}o30&QC@
zl9T~K;O#bAri(eK+{E16+>DE6^Mt<ZwmPJMfYXF4Q6Sp;q8Tw+H|=p506cI>Ts?VD
zI_#jdV2cWA{MrV5TsZ;Ad~3qGyX^GueN7ehJ2<fn$y%FvCk8rl`im(Q^TSQvX-Bit
zpR-Y##iX91vUCsJ=w!QV1aQK5l1+6cak1PHnbl6~L)RPfy)#N1obU?Pzx`#u^nb8#
zb=V_T&`NE+q}Ts=J{kUE2r@72h^RJv|9wyNvkKUW7_?@JJlEjMg~^?mj-mk<*6y;U
zniM;DrIRed#h2zhkbw87XJER2T3+S#y;;X$|D$8^ij2ty8Z^ZGlU({3l=+9=R+^F0
z6Bogc2@RB)EM@&02+w-9q#b4jw~QVE*1-SkWKCpxO^$O-*$#d}N_bfLA3Mu&-gTci
zCM3D?Z<J-~9tv|(N_fAI=Ze<lHWUM@s%w6GAsi?#p;X0tP$z{G1DIbojAKWKn~Tw;
zA1bvpAW|bF8r4FEC9>Ci1XoQ1S}nxrH}VtOzPF|5cWx>ZO?)nU=K)B{N1QASJo9dp
zgleJ5p1tSz;crij#?{}DxVj%$%h7D`DNDB!Ye@T_j4me-=)(G=7h-hjG0$1nMytVl
zJ@@P>Gb@XpMk#l(YgOWd&E6AdD3-w5;LHT4-t)97628t*0E&YmN7wnm=@SI0mlx=d
z_%SoO!;?+w31v_OGGGE99JjkX>mSU_%*JvByr&9<v;_Da*9sVzmUh<~PpjI!TlG4A
z{p+x!Gg1&RBk23i_XCU@VoU{<FE3DA`#hb+AYEsa?)NdxuBbqnBDR(#G<{lnIsk--
z!GKts>oFSeAm(=JgKEDc^sf5BVOMU^Nha?fIi;lk41^sd_}LN*GieI~_m6oFrC)&f
zNg)1E(6X3ec`yrND97h5z}@H@lI^K6%3raaHfK{qdWz(c=`5~rBDPCpEXmWmK{&hB
z2NVvAhqD!~K&bxlD}#MM%kcN-oBf_AThKL3&G1yPe;mz$P_(hCNXy$EklUURJ%9zX
z+3O8o%WP1sN)U8mm+nCnC`8<UTE88!KQPyRTzd0`gLntz_blo8yR*3h8=#NwH{k2P
zVc#kfMfb8uDE}YI7Ru{BODubE6JNlqDTa`1=009iI$R-(GsC6(hA2HehQxoWB86Tv
zvjxKnBfIypxfb4KR}wxDD{?;G(3=}4Jn&*q?~(#*-Dnn1{t$QCLtQZI?b4M6zZ@~~
zZ%cR&eK5_Yz0Y<x5E_)$h$|hJl4Y$nc>b+3VR7Q?(|nzQW*<n>`=<?d&F0e(gUl8R
zpWs~@Mi<usKj#$$C56*s)f%6j<Y?QNHTN8jHT{^6kNy!T2m6mMeCspe`?!%(fcVL(
zcZ7qNqH^ng>-kDYy}N`=;QmkXEqZBxYiRnITrukODV!-6sDW@K!s7Y!MBaIv?n`X?
z2vb-$8@pCyiMS=(%_+U!u{85%WurN#3-{bvt$c1;LWusnBl9XYlNm|lKqt7Cllq)|
zq*Nrcv_CYhAG}?fjCqTsb5I=O#@(+H*8vP|1a*@{OyhmSm`w&jaHZBqFhS6X#AH1d
z*Cemk1oRfhxMH%BAdRq7v?(jevRn=}kks3DDy)<?vqkDS2;>ZqKmZ6q02_AM!UuE|
zhUkWQpgy1HUL+0DUo?;GS%BG9?^jPg;B_hZRy?55(f3SOvH+!}Tzt;s?V?p7ze)Ka
zKVjk9DWco#LY(`y=O}>44*~7CzR&-DPHGxLAiYpn;J-jpBtkp}vHVL33Bx&w_c@Cx
z0<k=8u-Ws+mA_-M23&^GLjVQBhrat36()@$Qs!Qq%h!Lcb!fOon_e&JcrLedt^eQ!
z3OS3!0ROMIo&SMl6f1VF;Gsln4Z06NaOQjBxBrNOAWE~z7+J4Zx)`HQQv#^@3&Oy|
zbAlEQt{D1np&@h9`5R?rh#?cOCzR!SO*~h^Qe=@<<obVlvRU}a(yzdtff{$pBQf}x
zKb$3gznvL=*(7%>Pf(j7O>BWmvxHb@F2^(D|1pn>z`WhdA>Sk`2md1+cq))UhSrw}
zKp}|tKM{H-dnUjBm(N7=4t%)I@V5JWe+jF*CS-$yxUBsz2y*m^%4q=tV5V~I_%yD*
zrM#Wv_CANQJfTYZCG6d#Xd19QJjV(=(L=5GzEAe1e?k*_*MZyWA-_w1e+B<5;oHUp
z)oEBy=dmBlH3fP*RPLWU3vsaDJV;MglO}GPR}3&s7@c}w;Z0Hh-8JTYOvT`P{Pr{f
zky68)0?NH^hH;@Gkn2tR-;eNzN$vvukcoL0o2XV@=B{2#KE55Et@aCav^y*7b9A0{
zG**xy4b-3}8h<?^Q%f6Gp=`+`1qwF=>7UC}!QCdmlS$`eGndyoLr@D{6UU;uU1_fL
zv`|5Q(_-~`KP5qshT+ITrNq~9JE3zI{51W?X4mBaRKIM)MdN8!&uBGubcTDvhA6c@
zLzxG9e>o|!459N~`AY2=obxQ^<zFI#I6NFt?E-=MaatV7>Jjb<o=3$*%iM?t;7P#K
zy+8TZa#t%oSD1wCKP3FS>^|*)I^ntW4DK>JS6f{jaC2y7sTjK{$(uuH=q=3Pl&!S}
zb`46;!<~IUEmk@XAF=Kb!2eXc(zqU8Y9G8c_<%j(DaF7Dt~lM`Pe54rYo)Y@!PN@q
z)k?nO5D>AW7O9@5k6=kL;+(r80NpNn+kt{ZjDzkM(l=LL@#m&NA{c1b9s0+6O1(fR
zzAmVukRN1dCd`c=XNr{rhKrhMQHliLi>}JIsg2CBFDuV<cu2v<nN7o9`A(U<0c5hT
zAo|lZ1m`M*KZq%P+Yd{UuHOmzezhgGAWP7Jo}DX{C=~!46+lr%<Y?e5_q$PPR%?+h
zlqqrH;1rw&>KR!Q?m-N*DX*#&D`?qZ(JU@BTF&NwfY4BB6~`c~-LSgpjAbi!1F15%
zKL{u)iI2*U^NbJe4*I<pc^kf@<EuGeegpk52)b2~3H9-=lBebDm`|p{M>zpRJhOOR
zE6Lo0Vn0BTdFWy6y&~>@A!4~`BbVQTDyUJq&Z2pB<ZvwuGeGWTNT?%3DlJ^$RrySI
zTEKF4d|~7~zO0=<0#1Jf41?Ax{!XvIf4R*R%jNNv&oN(*IArJU5cD<0-8pn$!lM{B
z6a`$}HzPeVK~eZ8)F&_&=%A%RUrB+fNo9za;Q1{OpmnF-@;&3N04g-6{!kmsj>&{)
zpc^O3EZ;9zZTCb<+&SAz^f%I?Sa17m*F!*3>~VlA#w^<_3E(mJAcbdWHC%@fCf9Hs
zRD*uLE;%-vU0!0fnGj<=Z>g2}nRI0Q8`P9ZznQ;cFI_gyaQbRB-(9V!tft1Tj|l)v
z2R&XqRIRa0olcEzLk08)QVkx!<|P{^U8yA&WEeC8#+^=A$;4Qzb-2}LV9D@xT+eY>
zC?QS7okUexFdPfmMf-%^KC?=H!M)wDwyoPpY;7kn|IIdQ<nWj@VN58hN0^{XyZgCV
zcxW{TmY`#uGvr0RYS#8(%Ck_X9R*AZhp*tPNl?674J3Xn@;uD7$-k=}-PJYEu-K^+
zT?^*pO4mY-P1b_Pdi6Q=$UNV^_xvr^=6L@@6)}54jugw*3&b2T+|;}zIdqM+s-~%A
zB*1f;XKoNaqK1169&m?J>&hnC#Oi318H{^|M&_0p2{#&WC4;vqA6JzL^*}-Wxc{4&
zi_`Fa;ypTc;w^>~nHg-hx;qPUkBOjGjTsf!^1orh_vT2(sVUW2qK|eB1Z~W+2K;1b
zidOTX4OcyD)wPcgU-<qy#4%{i_Yjt->?#}<(m5D0e`d)`a;jyt(N=0G0AK-V@lQr$
zPN;0x+O_%a`$SOpa)#PC8WHxB{qTMVf-*}WkiPF(zbe_L7imS1_K=gn7*d>?rn5^!
zYzN<S`_BMW4Kg$wKMmd%e=SmIwfqZbJ;^%J0dunC-9qs&NFk!?GZ|-bNbc~TS%o`O
zv3n6Pr-4}agK(lDtlI%m|BtM<42vV^x<wfn+y-}dcMZ<q5Hz?;aEIXT?iSoF!GpWI
z1&81c2@+h-<bA($?z#8!kEeN>?&_*twf9<kt-hy`M`ME6iXx#~_P3I36n7)8!=_*8
zwx>a$FmeQ`L5}=-L*v*kXjK3r%$yJ8G*jTZxGpjr(}w$}aoFd3a%Y4&zq3`o@58lg
z)ys@3-zFF5*$+{IZ{d=>-1ZpBb`b8(`V#YE;F3-m>l3HdMiZqu43W{)x?A#x?#CJ3
zcf1CZNB!I4+VANo%2hNl)G(UZ%PA<0Z&xxpU9!Jus-VVtSEzZd>^5LJ{aD5_)5@52
zFbKI3XVe0pR(~bLDAT(z3}a`+H6XF#^TLF;)bLMn&y{@gxzHNwPKb)(+fQvFXT^X3
zsK~zp&p9GdWTSo%24V*HA>krx^8l#`8(7V4nA?9yL2Cx1E>RdRqv&br7<%z8lP?}?
z^&j=RW!z=@pppeu&=Mk)v_Saqu%f!(FhZOGPro4TrTfQkRO7648KW*xE<49>#qt^z
z@3nB$H(2rZhV?pdn}RB*v?tSg_{f?)?Hl)yLRs&WxG_Y^PukjqZ_4pLUP|CY(!)F4
zdR)oDc}`=@Xice+aLzhJ9)IutcR775vA}$*a~;!3xnh0mh*oy4RceZHFd3f%{<*HV
z2V$3nPHZuCqDy?3KYO2VR<6yL<k!hfRnJu~Y6}wD*}l*_k-HT$PRC6lqk}N-mC}2z
zfigqI5ofbraAzw%>VxlI3yEUy@Aa*>=BT|u%>8nxVmp)Y1n51wf7EYPO4Y#EVN$7B
z1D#aX9)Zvf1Zu3lKN4|%5LxTk`Cc!7vtgcNB2Az_5MSFYC^$ga4~2Gc9LjcBB()lv
z1Lx%%K}80~b050DF(+JI%AW|HeJEFiA(6}iu|3Y<Hc_MsGK!H$?IkAzQLp_ZnMvWe
z>?pFJ$oYxRQUm|!>fFEDP>@r>xDXQGeRaO+jOVptukL{3c@|%+@O`t9u(rXDE`}A!
z_E69f{QX%Z29<9<nYQ9TjbpwgtinG&Pf|Y6h|oU5`b?RUsX<MU<H#w+G`uSYC+->A
zH>p;<UfgAb!-5R`Mj*_6YgY>bik!iwOEb&CqqnX{`q*}z$*O)^fjArmDJRc*FJ0|>
zZPpf*Lx5PLcG3ycgUjn|o;{}|3q^CSP8mV7hL^fUsx}e?|KCzm@;HZ&%~cDv6KiwW
zY;IJ19u_^5){BMvc?Ka-mW5IiXtF-2;QVwO67n|VOm&~MJrzdm!>AEM`n3F9O&RJ#
zr}fLK)AY+lniaiuI4rN+8Lh$ldSo`dIkYpwH!+ZyxfrjVS_~l*grZ=7P=I)kT{g6j
ze}5nlM^o=NMX9&YnLH2a;z}~ni@+8T7=&lm@9ZOYtSqa+mM{5t+{WRGnOG`|7S*F;
zW5Cg}wwds9oZ(}D4oOB?!=&}@*5&f$J#$4xSmihm40NMZ4%kl*=+tjye0Y9WW0m=N
z(^Z_sHk~U-CrO9CNQ9x;=0<C<aP&_Nwe<?2j$KC86yv-cs=n6}FG;iqmKjOlaI+Ab
z0r%m7v=MZtuKz9BD$S@P^Nte6ECDlYUOcxCcyN3*LdNF|qf!#QC`qJUBFX!JL1qji
z9(W;yq*CYI3k;*w5T+k$B?Daq8tfY*!QTcdS9l+@?SsZe|MLehEy$w)(b7E5L_v^f
zrtWi`@b5Au|4_7B_B;CDATr1?H=4riP-ajCeJ^Sq%5~0h65r>L!1J$2W?iw*QLYEl
zAG)D9g1rmAh~p16r1Vk#nryKI%f*iVx9l_0m6WK?fF*x3X_CSxDI?XTHW?M^*VCZH
zg5Uo4jJE}uoHLm*{$?}6eL~kAT9px&{izJ<u{6P3D<Q~8O<SI-=zcvAp-AL2#4q__
z>gcX8^AYvvJQ3f*5SP(tZ?Xepw@GZ!#7`gMI=<r_<U=lf2H}9*2h;lIfi4tEA>tDB
zuta3T_}6&L=!W&v+d5M3k~?<m8cWMf2H6J%(z`t+A9@o}K6kqPLR@7(n!=krN>V4i
zp&|NWuU|=|`(dHP5JyHh;csnKo0s_Z@H<Bh7R>O51GdPA1PUTuo4XMB?stW~6w>O$
zolQ@)g`keXZ_9ajvT&4d@X07i*eQkI%rr=kiU*fwEj=ti8yKD9wANT)n7;)j5-1@L
zp=Sm(^)`W%5HF+!dvyZ`y&toKSUVrqTxnk;hw*jFvv!8B(=gUN-7dZeGzXNwj!&wm
z%yYVH?06j9hClZcr4+WCN(`gWSxAyUj5pZ1Yo0bDcD4qri|9Pfaq4iIMLoTlADg3h
zdp47_xjaUH%V|;bM!#T@q(wtys)kx#?KF)MU}Ia}+DeBP#6^YYso3)g@K=WUlcTZ4
zVbFAULcHW|NA&9--0b9vVcZuzuc|4IVZoQz(||CJ8sqXdPD#I#>Hb#>SA0wYa9H~-
z*d@eNMH65<`n3TGzpx<nlZqWV)dN#?fz@9vO>x!z+Hd`@s!IZ3qD+}YjsuFOsGbHS
zO<I52cbZBfsScsxSg(D{Db?h=KzFZ&0iM@y2J-Wy<4<t}=}3@JMH++yw;ybDNa}Rh
zChLniiX2Iqr!bVHPGfJ&f6#GD#tQ$%ftLZAOQTIj+{^&s#OZB=A?xoFav7m$gUR-a
zwF{+vEd{W%1~m~C0(omqgda@`{|s2zKO2R6*$9cEAXqTyPcV;c%0%gV!vDQxK$gF&
zK!g2P0ajt^D~CzGrMdyH<GK{u?==n2O{rjs8eQt#XH>S>4zbTE_SG@ET-%#-&9<U)
zZ}00Lu#PLHnP!Yaz7(Q@bZ4WXC=e;?<s(1AA%lh$V1~b(gXrQ@6zQCmXQ+Q!9`XzS
zviv;n_qjdg&zM~M@4+t}_9MvkeSuTmp(KNpAPI7y1a#0{SJPhGd$o`%V^vcj^ryww
zX@<qS&HK%JpVF%P*R8I1BGSdiKTg7dvrzA-#Ze=q<(*bO?9i+<+{O|CJKC)FJ{}(q
zh_^x0?G6_}-^%;dhu^2yHfz^+xYv7X30$0NPu%i@Us&^Yotgul^+REVE~=wedi%kP
zzZusapK}|gPvfes?~+#;d2e7pZmC1diy_hjXbOP($xv#O<jmwe(3PJ-c*d<!k?<4Y
z)sG+;3?5(*ppqFx@EoJraBkU}zh~og7qf-OvE7Szky5$>rS;Z5818I`|A<{KULcNN
z$IAPX(&@;+I~s!<U`&gs42MI&+{-_wUc&zHaQo3!5>Za^4#U8hNoj--8r&|+9XFJH
zJfO)f1{F)p)zEr6<b|<N$5=!rkHn^e6JuX!*MQjfy|XE@CQo#;`iT4vL+;T1_gvkK
zh}jEG6+j3S#7TSEH{|VeUQKm-q9!3p7jgFI!I&<0!zcJFVJmGbYKZg%3<5<#b#ctK
z@}cWOA1yA44LvVK`owyuOFSro@CqGY*VT`TY4kup{t)i>YEwoU|8$%~BPpewJ(28|
z)#0n4-*!`HF8hZd=vK^7UdUjj24brGcjU0;TNNs%A;}i$Rf2d`D9Z&pn4#AahCxl%
zF}O7_GP7GPla$viG^5sg$ERVnFB%o368w1TU}Oq2{<*&qVDE5flP46{_!SM9Wb%PX
zwQ7{SBIhoFNM`%-K}Xpm@Uh6EUDAjgTwv^oF%f<Y#l}ncV@c)IMQ#54S;3%zftnIu
zqKM8l6g^{9$Rk#L_9E-NUxh1HL08)4QPYPTfxV)LgN7!zYTQAEU&a9ZQLcHUOutGw
z1C!9n{Fm^rwqRhnJc^1ry9g?XXiabZ<h-y^!}~|-uKHdZiX!oH+d+<=kt6R8hx12$
zSc8cUX)Tx9I!1#z7ETn459f$MHu%yax%KGYwg1<MXwe38M?soP^Z)6jccZ5>C-R1K
z^JYr)$6_*k0O2KebEwT!vp<rd)dNmgWjq2lCps~#vBOu`qf!4HG8;&B1I&Et*}>sd
zAKrWYO>ADQ9<yA^j_47iX0k0p=%70>;i$NqxcRP!7CQ|M+-2Z^E8kWE-^Ekg6?N)@
z)mOGobXt;NV-y778CYz;pUb>e!U$jN0Mz_GvyP=l6L)Rm57YHwaNJmK1%xp2e>L^>
z<PHN5p_*OPtfna-q9TL@y^H@z(tn%pTC}7=uqA_+{Fj9^mk8vnc_ep^JY3@4;m3cr
zGL86z6@yHohJ+;nmriCkAZon*0Hu3<gNeZo*U`=Te-DTyP2hF9g@r{I816xhoCJE4
z1!B=f$=d4!pe;ooSa9aoM%S==_&TtdA@Yhz1a2T;kMJqp*_ab*=u2Oz%MvD<og50^
zq=X?7ZD2Ra>FEb43ljjde!e)HDTftov*-0Z=&^7S2v|G?(*C6`DanC?;<uCoi)%dO
zETnFk7Vb!}@pcolV36d`PZ&2XL%#q^S<9#O#pu4g2BBVcC>Y2OrB!{%+3n6)6G$$+
z)^wh+`331{Ro%F06Rus|6TkmrTIyRS{NyntVjyoNMiVh85XBvE;CpAiLaT}pB7FRC
z{n~zJi*~fL_Lq1k5Igqt!{V=+#cxdbM$;j`m$m(yo~`8d@}?gZxEAvJ0!<^HS$QA8
zy2$UmuB2IbM<LGkrXtOtVp5{TTqLuIDUk-&9jy7jN=f!U!ry<?-tQ7(+Z?q28>7PW
zp{gW0uZD?|Sxs(Ov3_qGUzs4FqW;in{;BO>vY8!&3g6-{cEA_oLjdk?G#Qb3r|oc5
zvJ0f@Ns=~EvTODF&1vs-pT93;dAFNpZsSnI)|UF&gE}M{h3eLoBj-7+DZHKnOTf>B
z)j+7erQ9|(3(PRKAXRN;s{cN`6!&8>N6kO5*wW$tCJ4TpnG&q5@cZ`b0hZ#iB;_8x
z|CbB3jLRtgdLJw;uhU%Kc>0(@uPn-V?K_^F8H&87ADI=6Au}0XWX5Pwev7<r(5!rW
zmv^^?ba@j+$Rlh{(UKHCY?naSNF^{VE?&E~0ckuO1vMpWvSw!{PX*`KfqHwblj4-0
zYNyp_mFM0BpVBq2EueP4c3*uP*K8E9!ctPo9j7qZ%T=&51{`?5@w9v0;s$ins_iex
zzFiZyD%4f`^19{xH{P>fBNl`nG+5k^Z^yj|lWvd_n!?PJZ?8I)-*`LL7uK}P*lAxc
z@KHDPWunMwdqcui_IVmEPTk5Sa`(!-^z!u#M2fbS-#|htypM!t#Lzo705mi+SrGg)
zAay34<LlZrr{L3pOw)PWGWBU+=Xqs4%Ap90(rwP+rHtSY$HuFMjR7c5?^Bd`q2nIL
z)E|(MGp9eCDe;nQpYi<oLpG;l@a4cHAlAM(=P+)f?L0$kgw!_(n?oSV6jRNfP!H|-
zBfm)mD;@W?jXSn-Qv<Jgz4M;^m*ejN+w`G35Bl39eJOMS%HNEnQ&M)d#fgN8f7y_I
z20DG}i4^9JclaQ0x#EO%!eS;lJpNi=8?U;vD)BVE)g^zz^pn_y(s1gN!q?NU44%9E
zHMYLBq%L>~KFiM?#|wGtsY$uwwuX8G@-7tw1b!9&;vPO>(8qYV>e|}!(^DH82Zwad
z1omx7M790#`(+SZ!YP1<hi74Jjj@z_B#ubt?d|++3PU^ndv&!!I!~6O8k`%s1x<Zi
zRTbmocbPPR3}R^uafgTp2{edEQ|O&g#z4aE0lnS8WvXfg%4~Ad(vY-iMMW)Bne6q{
zamcQAabZ%m%|Q65Up6B$Cs}sJ|EOnvGE7Hk2kG?S2vQLPXjPx_gWumU6JUr4rk6PY
z5vzseE$#yYLAN)@>DRkWQJI4}*rY^T6A%F;=>9Aiy~^t9ki%MU!+B?N((O|bVEFW%
z=4Y*sTGOPZUD=!auG6P^;$k2K3#yTuPelBb9q$c^(v=gDtzgD(x8`!P3HXXc4hHLZ
zu!(jzpZ?5MR_m85ZY|`Od<{djg`f7?H`uz*`ETK6CDRv>(m6_e?`zL)h~5@O#@)6&
z8gc`k%Jdtt=H7~8q&oQ|Q8&2Lx0AoBH@}LXWmmk2G}fQONimZ@C|4t!+G1cn7IO~e
zs<C{opAOH}D$&f}nZS&s^4>k|N7HMIo&Yy<{y;x%L*=C6XVRHrzBjis-K_I3Do%lB
zd7;<ny?F_DvyW7GR=*OK=3`+QgiX^HaxI;|$4mXVY<0qDl0M~_e^rB)@8v)!2sQTi
z7lEL0fk?>6Qs%v(q`Ocx{P3>$A9CKfI61+fI^s_T2DzD!B!X^{4qM$UXOc~U{6V*>
z(M}K}`efIOqod_U!B{9h`!#R{cVccXOG_S~z0l~yM6t(~pVnXk1cXz-fhLMMosc&k
z1mO>a$1&x-*PPG1v0UiHL2$Y;JvG9{T5hD!akAA%f<?{LTLdI}GVO^J`#fR!cj>iS
zCQr`5fj<fUf5mpA;FU|LXz8wj+#%4zO86Z4SwVjg4h2k@k(mANaMoT9X9SAw4G$0^
zQOoZf4*%{daJ#DV#vLFKfW^f2!^G5klTaS*)>g))6Aw{Kb+L{<yL{@-I%K<lT%mW5
zqKEe6-dOe&g;`am6xfS;-XxsH1NAu_OePsp!aPM(BzyR>DILmV8<*K%0`=9bww00N
za@o@xjHVBnHl%W3v{<!%P{08r;MMo{Wuvojsc>kFiKDn<hTEleKG#KF_1#?krAV#H
z$raF}q^~(LI`XckQOhc-Zd4HI1nfau-72hN6AJXT_20oGPsUFeO?AnqS$v`-{~q8c
ztfZ{`$K>_J$iWz<gf-s$($uw7^~(nGvs+w67$>fRgCRp{d$eHp_1r2I_qJ=7jTx_S
zw}?6=&qixe)PD|jy()-e)GJ*+e10!iBb1!mZ5EOxeOG%U2h9*3qi(B{$qXf*<7Np2
zMg0kp*p`C)0O$G}#O->YAbLMV5YQ(a;(WmvlbVr%HHi2PkCaq|ybw?X9H)?$l8SN)
za*0?=4Wt5zaf=6-N(SVi+VZ}^qTkj#kil`)_qmuJ`BK8jkZNZU^DbyOdG}tBJzPE~
zAQv8-85Psa_@4zmdt;N37eR%`o-i%_yvohL!z5B^ZrH!}YP;=loLpI7PADszEca4=
z$pZV_bWG>tid9Z%GnKN&-3oh=VO#}f3lmMhueY9tTi9~&sOel;aLDq^r!Z&C9r<B7
zDHR4~^@7;aYM(xTn=A;?LvNrQW35y#;+F|PVseo?&m?4_p*0!z^n5lE3^*5xKr+C<
zl9hb?jm*-$p(4-a;7v?ZPV+OE4o^jYml`8Mp;hRxG)KYhQ4#Q~)kTs~yTo#;Tu0$^
zQbdcE(J#SspGc%2?Vs}-5+vU<feDy^VYbl(RQwAi-*vrper#kMA>Gil@)r1r-;arS
zKDL?2P$ZrD_7)@&-@UH!a_|Dgn_NGB;)-yu*WUj9(LczaIBl0j0=g=Qd)ak!xztn#
z?gZ1G<+px(QzxEsNlig_-NBdbUxBaUAy%QUC#hH5^{#*L{in2=L;Py1cl~z#hcEA@
zej1qvJPLz<k_SUy=)@N;E=Z&D#J#jRn^7=FZnWj2@qQcZZpqYL32O-{X5rUQ7&#N2
z?)lIaQY&qoJ%vj9XlF{6gyvS>nj_@bJFRu6+zQc<u5bz=C|ON#R4{A&wzamwxOYjq
z$6^+G44u?(RTfSw68_6<*m8Yv9q9TZIx6A}O!OATZ@Mu=<fj9a@IgF6f;au2?W3#$
zuQnkzFC{tTl<0zjf)zzY!7i?@ClE`O8;EqOtRS!m>#`$~J1X~shrE{rm~(J&aQ6CO
zLJD|!cb9&Hh=8#&3<2>g3k${5IYQyU!cC3!EX^SZ(Lvn$Q3Ha*uVPDc7OB0m6vnK)
z<Z;k>s0g>ij%<U$aGt!rFSK#UaV4=hGuMv(#xp>ocULpXe(R~>Wea}OCo5WBd^0zZ
zq@V|Vho(&Ub}vu4(H@Saopwhqp1EA2uzU9iY-q*ZDWdrw8^TY@G+ayKWPkFyj$oDy
zxzfo_yWUrfbz2W<MCjbhQ+zs#4Vhspx}T)wrDj8&zVg~)u=szb3V@?}(tYW^zkCdR
zmpJWDYkF^Nx$q&IqvUEup^YyUCVINB+m8E9;X*^tpHm!u-r?sH|6BF`cY_2>FO`(Z
zEuYq3Q8`eUblA1%IQQ7<2zbuvFh55qjCS~=`4vUd=Hu2yoikeYHOin^@{uJ421U~w
zJY=^F;C;LbT{z|v;mM<=8FYG*hKoVXs0<wnZ~Eqj@qzRfzMph`1bnwPbe8JDoFLDZ
zp(bfh6$6!rosF-+g-ffx5zCK(dFs`V!f`ZTsbDwiqE7plB8dV!7hmb;&oXr@MXLmQ
z=f;ZIJC`akZ9DofaKzmAYQD;2Uko0;uMeJZYHGTerK}&*%=A3}Amy&*N*<x*7Kc~C
zWkou^|KiR1mYsmNKJLq!(r?;-a6pSI?c{qMZ%{JNM1z@!FTfLBHkCV^a{gH`;6Z50
zkT?4?OD@B+(fAzD$G=DB&f~4>5u074uKYP$s>SL)!iV32DpsmI40|-cEssMHX|J<c
zrQP`i?gNxj>Wt}KOM_10WlCgrusW<zx1NU9FBVh9$V{<H1vLf^7S+&nDm`@dowjPs
zxj@vswQNZ#ylAjW=GZeYlPj))fR=3em%P+hCBwwYGcUQ&kDqjC4EVjpUl{(RZeUPQ
z`>OFXP1c`ZW{*<1?s<o1bnfAu48~(M*uNwg6Ag9Fs07z58z-?_5_&aW7AZkefFo+C
z+7K$4_*sYpjuf#cL_ElPvFa1>0tU=s%(=C)LSKmrv8OEG-8Gf_)Qd<%s77{ovBh?R
zDJLg)^XtMt<8UTlSzKIPjR6W8dN8t7A!B~E(UPW=Qc!SBz~r<dwHFEz-xP)x{LK6Q
z;g`t_gj*|yCz9iO(Pu5=i`pY&&ffk<+0IEi31Bv|FTgJpPD?jaN(9>`Y=Mo+itdsS
zMMv9L$nh&l^U$x*j=H9o>J}>H%Y%St;{%t7@Aj5i-lm8zE5B4HhEvWQB$IS*AHe>r
zggUX;yRD-8WLbOpCN)=2l7A`H$=QAUX|bF?q@n6TG5qht&xR!z8%f+4rq^dq?RAq(
z*8Y$_HLJuuKIdd&QQI@rBiqY$F&$-aCAWr$QRtv^h*NTEI>U$)f6I})Ut7~`VD*o=
z97>E~ENxYyD;oPRuy|xZeXrrglhj8p`Y*c7G0-$Hn1q*RAOV`>35_z9g4NKU$F5D;
z=wX+OL?up>dLkL`;$7x?(|0=|^sZ06I%`i$npKtwq4g$v4-@m*wF@4R0w##c(|j*S
zs6umjViC>6nE8NAUO2eFa^)ExaPT$?h!t~mz}m0lHYP}YaG$7<ysmxsu2J9W4{oqT
z91Mwn&5m2hIFfY9J<?sn9=x2p-3?hCvQ5FUX6#Ly&RDgLCuqQQ#)tb=(z9eBdPwL7
zBcMi7^N(Tut$llCx>`g)LQJ-Ti^K&<I&m5dSmW<`Qi{ZN@qnCF$9H8Zv^cHzM&ZEy
znaHRX%Z`8XYh0S7sY;m@aSHqJVMNp;X?wjNzIio>BHT5Smy0!TjrOB};T??}udv31
zbC}GG?)Tgq?7`yX^H4ZEvuldqF|7kfQDQq9yHZ?dYE)Q}S%R4R74tZBLg6xH94z_{
z7HY6M-!~_P5(Nd)j-a1~h}Zp7IhRF0PVh3HRrUv&CC*47P||~Tg4j&Z!Mxnfv+lUb
ziI_LL%7*6k6ooPxDJ1ivkTi`S6#!=HO#y5LMRJPi!i=L5qLQM5P@M*z*`sf++C1EA
zzkQ2kHE0KScXx9`?CW*gTxckg`>aUyP5G&*LunN=#XywCPY7mm_VT@ph{mQFw;R=z
z)aS1+zZ~j=x^N{ZO|7T+jE?>;Sh&D$5z^_I!gxrlezbexXLX}w*}C-WHg1Yw`{S06
zr@P0svTO`Zkj<Z+e8kq{_^GG2o;%m5mbHiBb9SV8<Pp;wWV@R^9I8Y}DVr$-)-*vW
zBjz{`DQ3&f@xGu_w;$Ltk-{?zxpz3-bXi1FxsnEay?3S1D&hxcD3g6oXvf58Y!5^G
z6Gml4&K`S64;R47N5JPtO5;2>Hk%2LC2DLH4e=@sw?e+Wy=k*_aA=!!5+1o4T*;`d
zE_9Xo5-AoMnLNfdZ;kZKWkn<i$iO8GM3v|lo5cGiurEx_7#de2{ZlNMN9JmfFE#ho
z`CwCXV88Xl!p0qE^OAe&@<nRu&puINazz_wi`T0oQcGvLuXN?Kc`HX(eq74iT>@z(
zfv$(~V<n;~UBE-vCiqwa$GX|N+m`iX<`^81ou<7$jn-=1RR(sdikdg3@Kqe$N+4}|
z)oSP8n3nE>7~flxB#cOr%pOL`BDCh7zceJ<epz`Uxtg7w!PQ(q1-`Tv#*^0oPotVs
zBHG**e(0UiW~y)JOY@!IxOE%8Aim?vIBAFr%g~;uGd;5~qh<2RRn}j{ZN5?&zbb(_
zL!Ghvipue>{HJ#-;Cb!#o6t*W$>oiSW4P4$OW_Yoe&GCQIxuRP&3Y~O@`a@&{Puq3
z&4KUtx2KE2bgbbhqrN|fb`Fi5CyX8DQ*Hp&Lqw5J0>xp@ikJQ%`~`<d>g)GK?&m8V
zN~e9&@zUIji;~yuJLKY6x}%uH`L07VOs}B5ls1P-a4bXy{paD9UHSrcBnE%CEc#p-
zP(KT*=G3UoMT+(yGiM;xeV)2okjtw<agt+>mrxBBjZB0Y%f*wRz$V0EU=081gZE9v
zO{3?P=?T_E;TjAjN}`R5jt&DBhT>bfQZ_B0;%40E8`tv{j#WIxJB~-0uLF?O>3}Db
zd9CUYN)&b=1u#({82TM9s88R#_ug1tJq65c{L-2ggL3$4Y>Ev6k@NjszOBb}vVeBl
z4lsT70QPlHU0gZ(;Q8?T=Few{vS_VvQ2bb&9D?&DBU%63miZ!l`@P3${1kIL@Dx6i
zUSx8NvROdbkD%Oi<|szQ9rH^<MNl6%adnh4V$)S^K;Ow?sV~QZ5+$WwDQMd@@RTAQ
zb%X$K6>k1=wQrwP1Q{~-<?p)M3e#tPo=G_!pPud`8@}amPJRmW6q3!xk6+T(8*&W{
z>1vl4lx3F*q@L8-ICJ+A5iiXcI&a|+^?`A(lYzYhK*u)2Q*B>M42WIr<l{&u9eUmS
zeP^1GLGgX;esbBrXLSyXI9*>%zN>o)qg(MT`!I=;vR-PN@dZ6jS%d;wBVF^-+@o2s
zRgymqmc_&nb5V;=Mae4;j9F4Ee?i0Dn{UFP>>0<1EGw5;Zya7?Xq?M?C!A;nAJ5;r
z=z;4o^g*%{mp>O4wP?gDhSTP9HqZ)#Lm;^Job7;&LDTLrhRhnkWMnAUA|OGLKf+6l
zI)|(?`MK{a3I=|x2p!D`hJy-%AipjEF5!)M6_kQa#Xz!1tQuq$e8rsk;3A-K6LL6Y
zjbR2o@*+3L>3!yxFd7{*@^^^eMOa1}@`Nc?NX$Q+rYNUBbV|bWk`&nLqj57(jVW4@
zn>3_`;jQu+l2*!C-sjUqa)BgzH`prf?{2a%op7KtM+baCn?Mk{u_3}7pa*epBq75F
zMHVNp7ErTMEKcot_PxcM_BTY1f5ESHc4q0j-bv$(NHK&8B_{=sPfM8wD2rYp1;Uu=
zMM4KYQoNvR)*33&6GVmICp}$4r~~PTQ`s`5rKP)BfvIpeKT_3kx66$cta{I+aUwr>
z{E>Boej<<^7~=|sJ?9(5DEYJj@vGDV4~jiOj^KezSnPvvq3Q504{tYK3g*Ep8KcIR
zoOnc_22v8ykg_So40g}Xa(hpNK$@ClQL9IVNL-Vgyji0&E87EPvz7}zlzw0l72G<g
zZF@u&xplSim&H}l^^$wH(~_Q*7;H@IJ~syUd7IxvxAVq!t;tEfNn4Hx89xAr5N<qL
z)OS>pYzPAt#`>Wy+(|%T0`XjI$-T^i(LvKGvnxt%h0TPyoJ`x6o$;H6DwKsZN7S(S
zTIbNm1dCD;v6@W21>T!fvwlu2fpMsjA$=&MI5dhaC?k%vP`P~-U3Z-yC0t;(=#!6r
zJA2kmi023Fc~W#9Tv!TwU4<J1Ih?V6grFhg&BSii0W6QYO0zu$1WFJwh-Y^E1cQC~
z+&HAMut~Q@5x~pt4(5hcWQl__p^g8^G)*cb)8e>MhKtKJN%TVGB;-xl*!M=&1#_Uc
z{+`-D_qSU_1)3EMmGTOq=xaEzbH>KRU_qXq2pI{fBpI3#%lIS2YF;|ZQ0$bn=B`+u
zdJqxJq+Nz=oNLhWMUD}g65A;a$q>%S|B(iwP1Tb!0%6>h4-SH_1jUTl%?H7xlq1M&
zo#YI`>?+_;*gLHC-~{MU3{PhB&!6Sf;3Z}2zO1O602ol&ZNW%Gj{bj%Fy!m(5r|eC
zV@EW(7)8(5TM{6KoyQqHFQs;_<JfnSyYwh_KIB-Wml8K{zQj+q`1!mv+lmkyGiIav
zX#JDnw1c2Xl;MY~_b{gUYNIDt#1OJrxx%@K%>-g-Oa@J(2|OQfqnCahFSd^#0?B#Q
z^sp}O(;8(~JHB6UvR)r?A<(dVFDc#7lO+>C`uE*EOPq>$DSRbb%-*4vk`BBiPERFZ
zsy_5e_Whg~I2@y+?UeS%W#rG)DulAh(HL-q5`k;&GwQPvAto^KQac;AX5CJ>3G8b<
zBJ|rO{Y0bUjh%$P1ccR?s`KKUr0ady<#Y6CW79urS_;-lyf!gYn}CCvG9Ww07KLNK
z+&@N*#pzcf@=?`x7;t&*&TDCAmm#GB5|n6>>kf48cv2`;1QpAX+hp=-Jh9__xg?#W
z=p(MAlYWYN6nxS~Y=s7BKpKOtsr?|C03`xB=Re!Wvdm2U$E~4IJW5~@x>HPSZ0czE
z%8GUr>p#XZ+X;r3msi)gIOQimEd?}GKkPioc35E46T~7<VR3QsW)MqxR)MVxjDdmC
zz)~V^tf$v(R|xU)j9v-SK;qu(fWbhKHS)Y&)H?7xr|ZO+{7J%`KvcvD;ogJI#UACr
zGGf5KFFO-~_Z*}Mq*qs0_oYGPe!y<D3VuLsxcxdmPy7%x*h8!Y0Sztvmi)7rZ(W)$
z;HPXXnb~ozc;ajsFeeU*Hc8T+KY(C7?N6bD@^T|OAZL$vaoH*L45QuCC7?D=EH*k)
z;q-P*);rj*wp(4^YvlfJ?fakPbh&?J+%tE--Atf{75=vKz$e4~ak|Nm1=olN!gMxE
zT1Ojd)8!HDCWef2PYu(rrw?`Y`#i%6<GgF_^QiSua7o6nGjNL6J5eUwnIsaiPJf;D
zoM;hnn_WS1?xZ)Q{=}J~TANjg^0=~N?1bY&lq5h5{6o|fN8gWN{u6F29BsFX9d48f
z#E!@I^aPW0&r5W8hWmsz(}&FIvh)hLAR7#J^Nrg+)`?Hvc~qx>H1a2#pgowu0YE?M
zFu)n=*`dk%t|(A8^g5G%%zD!)*i_w|!$^gU34lixi1-fiex=rh!a9KTO+w-*7{CpN
zF%H(((4bCnRZLBy4Z=)vJ)BI!hU@e=o~4jiR>tE1oKbuSU;se~#&wYvNzedgIA-*n
z9Z1on1i}};eQ`9MkB>wG^BDUno}v~4{E8@Yp>e1Ty$*0N@X2xSmO*k!$;lF;Z&wMW
zUx9bXm1LJ$Vv_rCLbM<XKq0`I^fH$n2ved&ZVEGlPAWui3K$MNM&K^_EanDPO~Caz
zQir<Pl7T)177RDQCZXAUHIhDRYv$~y^AF5oH%08tsV}V*kEJDQYdT4D9XTGXQGVQ2
zy>M0YWay<cEoojllxCb3ohU2Q^7(BFl36cdHRP$F&ov}DPQj283kw$~M%(YJeSOnK
zG`lz(giT=&eTTm^pI+4SB#!8Jp@G$)rtkO?Q*8&ljYP07!;KQW+#dT2&I1>Z_y0g%
zE=fHY9NXl)l6n%G3#<0E=rWw-S551?KJ5_3SI(Jyo*KElKAG4>-5JS)zYGbCbo!HU
zq#fA$j+9j^DkJK|*q^)mff!D6i_1%9ZNQ@DX?8StOiT|;D=Babz-T%-^;N-|X+D(5
zGiP<#pb&aDc8*<KtOTIu!?<!*lody<ia4MdQX9ObEoyW0=BUq@?vh?{6BO=J!guYc
zLRDTlNIRT}o}iEo!P#H2Dk>{6W?-13timAq`h6s<Cu)jYrnu>@9X{W#O^3+_LZLCF
z*Mt&@+#4`KDGyBv0HPpZLfAt*PQTZ9<h;asB0VMC;lTKrd|(x~h8AQsW)zCv7r#ir
zG5RZ78O1KZEM^BGvh@5UusbO_$mjfiv0Cc{Vq)8{1p?JMDvLatCuj$bM$jmvt4K%$
zGo$Atfcdvc_c({cZ_rEp$%h8#;h~v#-0Q#mUV{KP!N5TfIL7Kf)CzvipgYZ!)Kli|
zDiF@Oy^5iC+PFgWA0o_763|p&avar<#bpgO|LGvZjtK68?MONOIn$4|%ePT`m@0)P
zpb<2!Z{;)Dn<R%bbZopt$f%hQI%QBR`kPT(kvW76hd~vD&JQsIob$%<H^=+c-t_iS
zH{k>XW84;p*t}Yu)QgnH4*afiRhfjEPT)R3cSFM1)AdnCBSpDioOP@u#sCg8ty03?
zDdvdvh>uadvIGyL7Nv?R!<n;|Le(E((rxt(rcuR{q!$~5h7uz!2s;#6hD{a-jHQQP
z>+}^CC<^{5v9gVkhf>I4Vt2PcB1(UthTGKL(5<zq0j5$kSA{o41)~bZn<PP5lkE+3
zC~Z%+#M#hYHSX#tu^ygc(G4NExQv^(5$byWVa(kd$Fll)NPGF^32*Z9qCgexF!Z*b
z2~$i876HEXDLxu8Q$>$g!&=N6icntEG#IUrLQqh*2p=+#QM|MxAVTBT$Y_xE7YHZU
zbRqJcCz3Gy9;%b<?GfVN)Ghk~%x!%AZ@G(U^Mdj4pG_YP17<j+OLVs3<^X0gZh#_`
zI;B{%`#-;S0re1LYz!@OMSRpGbdZ^oWGeg}x>^5Iq*HJEKab}Mcm#^eKz8MmUdL}q
z;U+iMXQZYvNT|)n$7lc2cBG)MANZ`-JKjh0ESkHlH(GNJQ&YKl_1~u@8Bhf@zLb@D
zix_n;*t!Ss^5rHa4IRzgvzFZIiskbY10t{qV-b}yygZ*IB@)zvTCIujgAgHQ$yiuu
zPbB>v#LL^xGwi{##HrgUQwRJM5S7*xmQHVFn>y10-F-lV^0-csJeVe1j<S?8h_17>
z0euh5&4=s9-WL8~mX)_VJpzA0vDm*sJ{I>pFvby||0w7=dGs4I&bTvPExFogEZrXG
z5O=<iCE|d3b7DE0mPQHFY@**ajI)hbB!R+C0<o_ox>}t42So%d;sc|b%R(UCGx<Zq
zR!EYei3ps>rgEwzk7J~CW<7h@h>@I33t3uZB01}Y&d_io$PzTQeOK;Gct$g+fUOFx
zich~RAYvz^Rf4Z<8_?QpY4=O9z2(PcWmwMqyjb~{{2~@dhon;sSv|<>QN0$2TJ(2X
z3nyW0!_^e8<oBy_JDZ6EYfbXEjS7_zTPXn;nO<s+;7$SttV8B)nUE+p!gQ_|YvbU|
zoE&E9n8+_;;NEB)Ch8$*5rjxnu|XKxL#tM`1R_E;91x93wYZ9`f<niIy)T*W`p7fx
z`4Oz7c2FyHACLk4(oT#T_Jx96sF$l>--`VLa}E(7#zA@z{z)PfNJ&X9RB$TI>>~<U
z@Cm_C{zq5q6Yp*brhnU&Xvl%OdWz?^PCpq@5m5f&vtJbz@}6jAxMGb1;NC>rCwf9;
zVK@ly0(MJ)AMp&$J4^0AiuF=hPCoRHjH$xA=YJFEb9OqV*d7<4{n<Jm@LK|d$5~r+
zoQ<}OMs01}jrA86Bi1{tGAsGJ^INArX+{Eb3U`=QJac9;p$x%`p)7U8{dK*J<Uz!k
zJ^>)b2cP$AOYgSWN7zhiN-?N=OYYPvu-8<@1O3O4*79`9DcA}4Yp}omXjk?7%CIX0
z(B|CCP>b&l6rlFS>^B=Y`5CZEy&F}I?jv2d5(M`i`VFsfaJe9`m`ibrC7BmflrB%A
zSW?H6f9iw`Yu}IAG1f$ax@XuQlx`2PG2^wlDM{)0=t2mqmAn1c%jxcnl)D!Vl1*bb
zLO0WUoJvb>2pNSxuMJ4-3H_uD>FJf%l>QiHz7se_)>b%ZwZzwuX+m!jkc1X2hh8N8
znOVM6VB)i@QIK#44j0SUvZ<_LQNs=RiwrNxL0I`fX*%h9Q`_#?J<&rl={)@1XLu|s
zNEs{{$`=Ea3*{<Vg1pVxWdRGX|Hy}eVlo&x_G8ZY2Eh?75`|q`2;$JLIGdyil>{(^
zAGSna?>8r%FcmJrBbSG;t}jXt{I&HQS`7z8DA%Awa6p9Q-wM`-#31>HF%VH15dl@3
z?2}*<Ly(MAfnK6|(vIrY^6xKLVsi7X`)&H(LJ>1pf)5+3aWifFKRgtn%4wDN|L$^s
z&Feld%m^bszv}bCX3VE9XDdI0wbbe9m^gayt?4=SVptShdCPJ4auOf7N6!>6b(Jjy
zXvKjfbk;TL&|Wgxt%+8FiQ$1nj3k+@HqeSBs+GMUw7UCN)4X=ivJI7M%r{`BqMm}d
zc+^nb`)jtZJBik;Plg&1kzl;x!vreklySF%3*2(dVbqhA2qG^fUY&u*W`et@ZbXEz
z-_AHJ3bFGLd$NL+DQ28sn2dzA2}3#iMpBfJFRIWK?XS#C%K+OS2x#~)YS^)UVj6JW
z%&`#i+c5caztEvY>D<P_-$80DRTxsc)bNU6@E_#cq_}SLqeo>^-Q*43Y$dzv6^bJ0
zJBna+Z8d%g=rd!#;>UVWz0;ILTVFN+)q;2G5r1NO;;T$$&iwA@KJ*Jos3^I}KRhC4
z!j^3^Kd{u*W57ek!4*n~+L&Thp%~7A)eo1Sw407M7YP(IlW>EQldaM#kwGMhq(Myg
zkx-r&UH8=Ap|BiF&@!_H`bRP5V60>XdQnY7Ex3wE!_TN;p94-87_QvKuwjAdwy4(F
zvdH2C{1{1qdZ=#X$Q7|qNS@riFLMpzvy$9EATIYykBOhX{I)7a?>qUl@H)Q?sl(&p
zTyla<zFS9)jIrG)SoblGY_3!tel?~#o~;S?680N^6cB-!>{KORA=cuS={@Xc#mwJF
zH#((#Ml1@|6oZR`JC5C@!_OEdmqh&fJv)AO)2xmH-)5nXdCCZFcB(rWxmOMvO)@@m
za18G^_k@peIQa1(0Gq#lzqjjhV9@NXz&t^B|Ky(BjDbr;yNFk%<IC@}odc<y1I4(*
zBhsoPL3k)ZeJe6xA#Gm0XR~hNP=L{$KfB}W_lN~#wwSiMQhJk3GEyH`>p2l3WEMXX
zEZe=aMp1YltX*{l^=brE^uMQdAto*-zoc442ca^VDL3AW6GW2fVM@RdYJSN;nNl{`
zE;2g0C^i-)*fL};F*r~jHPR-q97<kym!|~FSjRO8`OHKQ#H(_<W5DVfRRJhr5sP%R
zw#HB&9*96!xJ69u3C-va;f@7Rj@1Ud+O9grB7aVftms{#AnfhLq(oF?+4&i`d?_-B
z1@<%!5P5qrGXWMtpHXqb>;-{hBGElR7M#=kp<pNH>`yPaBHx>HPwN#!6k{HU@>g&z
z&UtXf+!51SJV@=W!@&Q2IDM3>e!y#&D^e5>iUZUG`0SSun|S#m>!L2m5OU*Jh}Eom
zqwqf7Tx_0*T$O`lz_rgp$%q>VE(xtw;i*wEBW&^|Ftjh<h2{qRKt57JeVbUSS94vI
zK<VpDw=L3Gv6flmWHuk)6I*rYbYNmT6kF&~o=?2U%cW$N)xabMmbK!%syG0Lfc<fL
za<T*hbHyYYZzibfm@d~Cgt}z$w~5IqC?r9hAZC{I+{`Q7Ksp5@ohggx>sUJBL!|K4
zO?@Jpdd+_|p#S}iw$E_~n}iL*QQ^h1My+rINXqJ8g{cHOoA#J!AesP5`SbmstXJVn
zQVQH?2q#%FenGt>Mj{An#p*BvxKj5A9fhmZ%`GjrMy$!7t0(A#b||4JQ1Sy(_Xpbg
zDmH^s2YwLzmid><%u4oBZ}Az$fNCWq(Q%(ed&l5w&bKE>weo&21ntlUB0y)-m(`I$
zGYV{U`)AjFZjogi@w{Uf`xHA?sXmxt(%SO<HBJ%wmxQFpX{a=J?4%ht<{gqm9|ZIU
zD~c@w!MywX`=d4Dk%9MOnwq%(oYie~<d{P$fDarHy923tDsuTu9|8Qm!IIZ3%e*86
zI55aq506zJlmwVCb_wmS6D~0?5Z@0}2@JP4$qM4lIWFkQf7z#_1oe{jv)giCz`XVs
z1BgijUYzAldfOj<8FqTsM<R{HlVAlPmY9-1^>>;GltdeEC}gmvMI!9^Mfw`6s;Y8q
zyCK~~xX1bwvvp}f!_XM(tJ>K+Bu9n^)s#;#{3BI|%ZpJGu9O3gau~T$(sn^hA+v#O
zegaoV3y6@-h!mKZ3}XbpQPO9>CO)No-Z!%N6j~Rh!D80GZ?m_2g%%6dUybo8up->+
z@8Q^@mxf|*nm-tZ{5!NMOc9hFPl;sb(`j{sNV=p(;P)3r1fqW~q8hoq`$VcJ^tLBE
zeYc}+v9wRoQBfyy!oB7`5U~JC-tDfw^p;TBAa1l0PjX6_Irz&6t3!RY%rQ!Pm<chU
z_&D%S92RvfU?yoes0k6w5{UXjj8YGv(};9}qWk8^P-o2i&(dm81*?(>#=5ey@&?jn
z41t>HA;o?;h2BW3#0A87&xNvo%(yzfp!71hwu%~wkS;mBn*=O+ejkq}SF7XiHZdNz
zm6&x{01>&R!*-zH+K0-!k1RvdgX5ud?sCVY&s2d?Je{x*{sfgTGPwr93E=g6LIsRs
zkx6Fcn84s|HzDm|cmzO=c6%|98}7zzbruf{{UCx;;y7`8MeHXA)rYz_z-w}YPzdOm
zS*c+$0iIFq0x01fwu9Z{sxY<j{8nu6=}>s<S&E?}zFWjC4-5=gPkrTS_}=}*o4)Kr
zV=M>Nk0)}^gVXXrnV~7vxL-Vz2BG@-L;py#*zeo?!k=+`A!Pi}A|fO#SRw;clerE2
zHnku>^tc?g#7aU+xEAw|A>NAwNJaWyT~&H__{Dj=r6IDr1o#cJH<So^z?f($M4Npj
ze9R*N>$339-ri^ykM=?`w-?f&)oQGSUEeI+8SWlSkEl1H-7SKhp6++-x=a)3`q6h-
zq4rSKG9q2q{g-lZygs53F?89mAO`OqKdLkR5eVIq?RhI&QdfJI8mX|-zxz$Yw^Ex}
z;F+w7weWxFikcs@=*L-->zs0&Z2qSMV3`7P>k@)rjFZK8&6-jB&bf1EvXD3STmj10
z=od8OVm(vRpzDkVtUTM<`=Bv!8<VSesH{yatVp!fY&P)n`uzjwY1o;8Yr1O{t=r+g
z7ZtPY%(6eQ{zI1^0QJJw0CBTA1a&JRT>d`|N74V~(RU$i(2tf*-|@;76DtnpcimZ5
zyb6As4ZJ~2J>%rz{`qKz7cS^;p!}aW!v~lacdW23dD-*Y)kWv?wf`@fbz2vxwjzst
zf(0uO!CxgFH)?Qpd}fu_J3uwNxGJ9U@ja;vL9cZFr;0ij*(T}wX7T_Ms?)Z9ol{V2
zZ~khwB*}OCW|_*1|Fl7b%NA62M?vb!k`4)N>fYYoJ&zZX8?iP2na?WFRGCon(?vE4
zf09TRHneL`u&5riPihzdGPF(y8yr=POi5O7_~K|wDOS{Rzf8j5LhFZ=qKl=FaaApJ
zaB?>TK2tj{`l&)Dh8zO-0`Dv&(JGnTgdhxO)W!2A|9ODaUSos;c_jIcW}Zdo&~*_T
z$Hj{9zRRB$|E3>)(B20T8g+Hy?|L2SD!R)_*^pNWjQ_fC`$*2c#5+G{FB5fOAtQp@
zegPSpSaxXkpw1lEtgp6T5gD+!_}w)B)l(o>T1f#KtgCe<Az&WjtyhL0U%zr!_1%iV
z37XOvYeBa}v(Cj$9MLm#hk~RIM&D4N4rV1_wiUi#Sx31Q7i6N@3)?M+)aEh)Xto7`
z-QCYTpHemF?^;@7D%$*Cy_X3(<2C+$uL9s7sziwE)KM-^i^B2b+jrtc<90^^Kk@&}
z6l`ev+>VQ%Efw`OU-SG92_)8l^0FUXT&)TL+XMam#}T406g<mW#|n9%4Q6Kd{k_8H
z8enQK0)>j6swBjRR#AyZi96uUcYJb^n8K&5<3E#I1(JgWmY37LZo`WfKm~{jUaqeD
zCNX6&sk#Y88_d}=LLS*17;pES$eJ%KQO_}VbMsSK;U={heQqZV&i4djelcfT+a-NK
zb8zz}>MO>gRK@<`310o)2vJBLy5h6z`GlF<pI#k#MfnoGP0u~mKk*KF|9w|!gdm8}
z)ze)|kCMj+#irZbcS%U}I6mv}kQv=Pae$1+b|f&GHK$}?U4;D2wD6xm1vU=O!7Od!
zFo%<8Apiyu38@Ir&@<?8DpzKi&9GSc-6DlU1hTb2z8Ffhn57RqjsbnqOu(yvlr(sL
z>*d^$o}JxE#qYTPf7U?`P{jt#5EY^>QC5{L)wC!2MrO2K<uTm{;kH1c@rR)BukugV
zT}EoRxoS^y=<hl6kI;gwB_AY-UPW642E<hUaEgfJeewU15`B&IX#7d_Wzy5--pwO?
z=L8>e15X6tnj(vv%d(vJ(ZyyVhlm-qn$5v@8oJ3uJK}%4Vw|v{FA)@EWedz?64Xrm
zS!H-qRl)k0UXKrgz8`-S6T|#crrAaTIvDjR=D)AM@3z^ZeIM2RSlj(nrS8dvKQe3$
zAyHTqAPt?bHl7S#VY&TT5f~RuQda$0L~kXL$YJ>3(b!N9WLnbrRa2Dkc15-JQk%^%
zE1GB+@an$S>Rg=1y{W8V1X*N|c`gJ1x6{zjsJ;yewWnrFhT+Al8$02{UfC}k&#}(P
z03ct*I9p81l8$7nKB~FrIiNDLTG70AGWqXEOSvp|>9>{Tjaa&Ar-Yr<^z`|y_t&kT
z5GlVgpIE-q?~3K$9L?tjTcf7g!6YG&g*6}**u!>Ob#}Z>hBp7E^jz89U`Sc)|MoZk
zC#0AdVav3Z@ZaUfPZ9Jnk2y6pbvE0vTh7Stmo#bjTPnLPMro~YJS8pNycJ(um3#j{
zjieg1BrR0X&UMy+o6EhW8_PSldlR=y`yjgY?dc*m28MWXu40LsU|}Es_3iEL%}xZ_
zJe&U&vW=}R6`K*;*DgD>@7`WCQo}L?F(+M+f6gikRmx<`WNW=e_k6r<`CM7pu4;qB
zrrQ)r&IyEAIFjR#H2n7&QNqNeq+tCX4>E45jb5V(v-L*#jG2}4L^5C_P_c3H6&?PN
zN}gyg|2LSqxwwB-C`X$g6V9KTDvDW9QI{&D=(|}CxYcTM+L5?|cD+$cUqVa!iG+&J
zoO;;bFX0VoH?>-CwqMxTm^{6<LdwHeOiA9en!nMG&c={QN}(G4H6ftL_l?9Hva_@b
z22IC*tlF;PmhzI)aO;k&IWQ>C)^c>wY4`|%ARw44#2p=pMW<o#WWiiZ^iI(K-*oI9
zAfH`Xk%fhYZE`=;jH<Bb{E?gx0D@2&3+gHuunD=+`ptG3m_H+VHNYowePkqsv-}l~
z=>&w1`|(L1^@=ggphv=DDC6WVPNJ%|T?x|v!ObC*`p;TVx84+1DOWJ9v#X25L{@T5
zrW}_Lh0>$#d=?@Ic9Nnjl0+6*R7AP={m=7Aq>zyCL(Eo6oNwpo&vkXuj<&X2!;krp
z^C9~#;>PO}>yNCpicbzK3vcBkhaW_27U-jNM<*v!qj~7H%Ko#d{(F@W5QHjF^z|#D
zz|lsB2ixz}#)ukhLyH+WK3=+eT6Er|n{6KtbY*|YO+0hSsHP-_BH#;a&lrPbBnv{Q
zj@H-pDvIM~1lDycyM_kwI@UYLTAIhtial$xGTGxA8XK)4M0IRJLU{lH@KLqDf$fx)
zf?FHf%G$bcV?%#@Vj@LP&N>SGfjj%_*kH|H7Fw*VuS)6FC$5ljCJyX1d$Esi5Ze^l
z+~3=yYT@WMvy!+3$}1|CK-4Xrkw-E*|4-B0fD)9yiR=!f`++LQ)v(L^$I+L+he|fP
z2<z!fUq1e}FOQG^VskJSnW9sM%BS{Q88KEH+JTtmqHnh_BBCQFz`MO8rKg8XN=8Ou
zP(oin=K<27%oPsNN>*s~z)_u}2@A(~mRltGfBG6Bam$Gj8iW~3<U7#LKYzz6Bf4SH
zLk|A6*|mP4vA5Vq57457nuBVA=)C<!y)Q;ky&@$gO~ws!X>El%j8+PR(-Jxr{QTeW
z_CHO3|NECOl<ealUu|0c8-D-qw!r`V1u~?D-v^7{j`knK=l^%P3!!4xn5|*0_P-16
zzq|kcX)MH}E|3U8CUyJY>+%0{*#`r1Z$tARM*sU+{$J0)Dk~NShbMF__`jBdRr;F}
z(Cob@vi75Bf^lLdG;s0iRa_`N0TTg+A;RZxfOAi5)f2DQ0UIO;QJ9h)3czXQm=6nH
zPrxdDqZ?@UH>K5offX@EfCv>hGHIFYc;I+l5!kfAl-?i?H2aNf*zZtK*^U+<st=lg
zvz`S9o7XvqVUteK2bz7Od(F4iNP89GmK<Q^Tyfz+6MJm?8m!WBK(jZ9N4^cmuomRZ
dkr~mA|M`=TO0aF8#plZa1fH&bF6*2Ung9;g$F~3g

literal 0
HcmV?d00001

diff --git a/docs/index.md b/docs/index.md
new file mode 100644
index 0000000..f3c1eea
--- /dev/null
+++ b/docs/index.md
@@ -0,0 +1,45 @@
+# Numbus documentation
+
+<img title="Numbus Logo" src="./logo.png" alt="The Numbus logo" width="220">
+
+## Deployment process overview
+
+<img title="Overview of the deployment process" src="./deployment_overview.png" alt="A graph showing an overview of the deployment process" width="525">
+
+## Table of contents
+
+### [Numbus Server](https://gittea.dev/numbus/numbus-server)
+
+* [Presentation](https://gittea.dev/numbus/numbus-server)
+* [Requirements](./numbus-server/requirements.md)
+* [Configuration](./numbus-server/configuration/index.md)
+* [Deployment](./numbus-server/deployment/index.md)
+* [Updates](./numbus-server/updates/index.md)
+* [Maintenance](./numbus-server/maintenance/index.md)
+
+### [Numbus Backup Server](https://gittea.dev/numbus/numbus-backup-server)
+
+* [Presentation](https://gittea.dev/numbus/numbus-backup-server)
+* [Requirements](./numbus-backup-server/requirements.md)
+* [Configuration](./numbus-backup-server/configuration/index.md)
+* [Deployment](./numbus-backup-server/deployment/index.md)
+* [Updates](./numbus-backup-server/updates/index.md)
+* [Maintenance](./numbus-backup-server/maintenance/index.md)
+
+### [Numbus Computer](https://gittea.dev/numbus/numbus-computer)
+
+* [Presentation](https://gittea.dev/numbus/numbus-computer)
+* [Requirements](./numbus-computer/requirements.md)
+* [Configuration](./numbus-computer/configuration/index.md)
+* [Deployment](./numbus-computer/deployment/index.md)
+* [Updates](./numbus-computer/updates/index.md)
+* [Maintenance](./numbus-computer/maintenance/index.md)
+
+### [Numbus TV](https://gittea.dev/numbus/numbus-tv)
+
+* [Presentation](https://gittea.dev/numbus/numbus-tv)
+* [Requirements](./numbus-tv/requirements.md)
+* [Configuration](./numbus-tv/configuration/index.md)
+* [Deployment](./numbus-tv/deployment/index.md)
+* [Updates](./numbus-tv/updates/index.md)
+* [Maintenance](./numbus-tv/maintenance/index.md)
\ No newline at end of file
diff --git a/docs/logo.png b/docs/logo.png
new file mode 100644
index 0000000000000000000000000000000000000000..28581fae8652e470a39818f546fffb7c6b525438
GIT binary patch
literal 32548
zcmdqJ<zJQ07cP9W>F!V(HXsd3=LR;NN`pvuNq2{YlprPDNVjx{G*Z$aASK;>?(grM
z=bw09!0Zn*vsklc<uwZ;)l_7$F<xQ-0Dvto2Y&|u5bz@eKtlnC3(uK5a6tbkr|SX$
zIKBUUAq+Z}n1Mfh;VP};s_tmv>S63`4tRKYa9BIox|kY&H0N-1w)}P^@)7`O0C~8C
zhG)jV6|Xj^xgY1#@pb9`_am{9(Ts(l7kK<o8A2y%<o8uFRZkAi+}?znoC600^pS8l
zoGgyDtmFsq($wTL_vRR9q`X|4f(((GD^b(i2u!Z~(S?b<!p5EZd(*!ef{L7)v$F=X
zv)R`NVMC>dOZuW~mZdw!__QFGWNa*l-~i-Y$Nx8A(Lnzj5Yf=V?_Gf8e`n<i{Qv9J
zXgwkj*!}T*OuT8fXQq14JCrvreN?Jvk%TT$8k_TIhcMwCot{~8#1LKrY*d%A0yD3u
ztWor`u}L)d%OWPi5IRXhy(thV<}rdTzMSW`GYXr+!EX-<bLTpD$6tVtl1G}c;^S5c
z$PwbBSBYu23V(^<!fzerVSr9Ud8DC(@;Am7t5xz>ig+Ub7A{Vf)}BUhw>~hyI%p7p
zz)6Rey)5ot%^jA%gHe;sqpmpkqOqZKoJaI<Ta3$aAqC*2z0M;lqe+_a25P7ob>w0(
z!%dp`OL6~mV%1D6VtQCCEl4I@?5W#_pG8qr^S=AG=fRWFI|I+2HZQr*wTK{)_?tF`
zM-tp$Nnxc-Ze=9vX<Xl3)V|VS2=EF<0)U8!-A3Hwl_T$`+o+jo`7K{sZ#M2X?5rQn
z$DVb|R0#q#Kh-dPxsTlaz<8JZcD<@|`%qPQl94E|BOD1Zf~~k8uDXfcbJFDP;FT3)
z{?xU-HhK9ODF?s9uzuMXEx=7CcCEp7Ua`zx5^<MR4ggSw*!fpnyw}M&8S~cYa?c}6
zCw-3-x6MP5Xk0f`XHe0*YGWjE@K@+1o9bwvALdxIovM{nfwWIZ0L_k=`{t^P&IM-L
zO=rT8dSt{m;&4`41c9$Wxlr<+CG_Drt-SLl*(38gTB{fsVgVIh&~-%lI-}C>T(j>?
zflkcUI)v>B6CGA^fL_7=km6`TKyXJz=qGP`aQx&u??qUlf*Q{Na_Ma1>)X`eb~CzT
z^{$HMOG-RX>MpqLzE{i9E&(Y2{Z-H?S6F_FbEoh2tkQt=);JbX4wC>>lk3QXj!S`e
ze~<A;`l0nT+v9S;B6Xv;=@639Yy)oOE~nM@^X$^9TX$6+HSVMz_^a+FZ*HhuM&xb-
zUcIZDmQ<y)dCSEyF9E6kqmu9rGI_>p!GfS8^gi{*Ffv%R?ee>&KmCyx(1L&tz^I!K
z8{5rw<DZ!&9U1fLB9r6Pr6ASs7zqLkP1CkMNj_L-6>+v*N==mXi!#C9fi`{-6c_NY
z8uQ(vO{JzyD`FtoQ3^8ougi`Bhz`I@$nU#|{8HX|8RwDNig&#XWP;8i-Z=Ya(!-r=
z>YL8Zb!5qmRkjENP;>uGPL(l*v_2D{gkPrbTXu3f!YS^^cf<?)`EQRzlb`3YJNun8
zfj<NO3ww)I;ZsK_P-Z5IpmVoLgzm@o>L*i;H|+%hC^D?uQ8$kmfv{itL_f*l1#R^R
z=v_b6&Qbw3`)?#)4i0}V=&zkkkqSFiq2rPKxBdrsXk^`ZZS>RazWTHXEfNtqKqZ{u
z3Llo&p$Mofa7rHgEwyH!B7fm(MeGX!^~Stu+4DGn-n{Ko1XYa*B0*ro4)tfGKzL}{
zZmSU5s@H-~mY??W0b)I95Ht+gZ5vCfYQt?RH+?P-wloMjK2Hb=pq)fWr_Q9*ryl>X
zn^%wRi$To62lY$TeOmcCNx`HeCT$H0x0rrSh~Bk$j;jaxxX<a*bJkJk?|YLR{rvQY
z#z6!a0gZJxS6}=ha|i$2O|pJ-#xMb>7d$LIMEnM1biuC^ex*FzYECSY^D_oYgSz3p
z&guB{WHFDs$^?HlJ)DzJ23neNfVU)sfz?e*TG<SQxA3z_<aGbzN(0V{ff#H6)C!MN
zc7DHO6Gl;$KGPUXS}0(z;$tIB5Xdlk!AkOcnR3*!e&jjTog)PSCK;NRPkPzyys7DP
zF-f1pk&IqIfw4GDFJ;Cv=@IOF*{J!pr@8aCUHl%J|CS>+`ET8m#_z@@OwMfw$U>^I
z2m=2ON;enbB}}SfZHRjx_+*{tzdG$U0$0c9EIBOc=X`(940nW@d@yJ!XAjj|-T}==
zRGc6%oRpT%B(Ei+?c9EIqK)^WhHDbkPv{mWC>_d<?xu*7#1wx`IUpTW(1#ynpj$BQ
zEFbCTHwvP)k}aeJU{t>Q^lN@;mL*k@CyCRs$SCB5?V}~L$8E+BM}x(bm}ca903cND
zb1i0jr}n5vaBDd797__2H~Aku96dnA@56hBsgw^_S(cA(yDr@@2?&5UZTO#g#5(%R
zz_U8M$q54S;sG9Ujs&Fjt$^2${dc|nil<3HIq3Rm!k5GvuPJbDsv^ybhZZHP=Fwrh
z5JYs?52+N#-E*XMqz--N`>z2V2W^p)J7LScWI$kq*yF~rXbR$!CEY@rI~%YubgMUi
z?fcPpLeN?kvJeDP4OaEr@_E)z6_bVLTMt6;rWT5bI{Y^)TR&vD)5K%%f?3H%pHb)H
zrP4)fSyROk#A;R}mLt%75*a*IUn`(>BL5=gedEDiHnt!35JNox)I0sBp%ysv;`1dZ
z)N&<nE`-(L0T1B@9)@WkNsj-PfbnsSid}xg5x!MAcJ<;1N#I;f4zkfUbM0>kEZP`-
zn#uMdfODzAHU-B|bO;;V!sE1L?=w&AwsEXS{Dems^-akrm;dWFa(2rhwht!Ac{}K^
zbAt38ZZ=3N&&2V6CjN>=&MAey{22Cuw{`5cXDnsef$1aPE<LE`TFu)<)EN#W4*^gT
zk=MwN4E`Sdj<W+Y&;Gu?s@zkaG}EAJu(>SBULWybJyVBn{i`=c*k#ToO%CoMog&~8
z0H-rt|C=_;3!uw=18M^e17~@K;Whu}W@|+~V$cz&k1(dcm)hk|$!Sf6l$fxVt-``}
z*Lox@019xOICR`D<;U_p$I4NG7ZacKTlI*6@fUqU8a?Ot3i8{Tn;U`Q2#VfMn23jU
z*?!eJNj;WnXtu?OY=gc|x}ED%)}IhoKu?1*ceK)q?dWi3I(qRL<Z*}&->dghd+oBZ
zelze01_45%c49^Lg)IE#7lSVJe&_<{=6HrK??QJ)=MP&Bc&!H!euA7L?y2)1w=2j!
zX)ij#TDb7NUnxmaw?2J$?09tuqtTTEjMjbc{vLNkMXn{eQviN_(7zLY>%*<wT8y&s
zKo_j}aMLGSrl3+;7$?x59^P9-YuMuCdt6j+8e~R;5E$h2KT(Zk)6%i|LhvTigh~SN
z36ZxE2>>#*?ADD>Qc*W9N<7J+hCV7qjB_Fv8)myxObUX6!lM{@#^V-cJQM)VBt8Tj
zYOdX^S<511g0|Cqy%*<yeA#zaTfYem5n8xyx@}&I@E!`#h(UpP+w8kOKULZy*6CP8
znok%MyPa)Ul!gW=?lgF~1i(<m#M;C8Tb!-UnSO}?x<`>UVVGs;t{n%Fc$z!K|6L(8
zW*`f-ETBY%WuZ?w8oFHa|Hl;`CAhnAV)<c3oQCe=9`OReG`tRCJ${M-C2kcDz>a*c
z@~=hpBGxiNNrgy7h0|s?-+oy-tfvn;0jDcJ#~pJcGEg)AF<Gnuu!s^|$_`|!RD`k6
zaM6LS;n<ofaoU76B~Xw-(2Kc)s;7ZB(>RDd|DE@=G;ZyljP7n4JTKY%JjlE3j*Z$X
ztU^lkddnh8z-;=k>3Ny&{pz3ARc~b*O2R7oIr9ocMm~G|cS`RtBjh0IrZ^(fJen0{
z))OD&I`3vxOD<louC#iPhl`x$OD1KC4T+TVvIY-Q&=Qb%!PQ=R^Wz(UmooV>dTWCN
znfp|`!}nQtbS_^SH4Y0tZt*u$XmTlHCY5dVAxw_*F~FFPaf<0le>yUN^Qj4~CPQEV
zKlf9_9__C?T6{0Ly3@o8VXEu8Xbw8@J<_xP-QDQL(QJVD<)Ik92U&C#!%PSEUxawx
zXUp5h*&PR`((N$E=<HIwgi!X9!nassCsAa2?Um-=dNTD1--ZY*uEeBwjPs(NeIJX7
zv-N84kKs<tkvW$By=0#>;W8U!D_#{om-RtTK;_q>fYzMd_vqD*gBRB_;`A371c3;(
zj?}uJ{GZMZF_Z4F3wI+4cGsZq4oCvJqQf2{A@QZXNJe{}_{Ir^J--;fWJjLFK@xn}
zD~>vD;>I)gx7;2t*~JA`&O=0@^+gN#U<}So07BcS2m(LS^2A-DTCN4$Jp3;V-|6O(
zP9n#<cq}`uyE;AY)J=v#oh!+Pwct!gI7&7CCzQ1jyOBy~aOpFfIK<lr!-o@p#tubz
zhfPK6voNV4#bNk{_Y-O=nO`ihaMoui=6+8exw~nN3W>=@rulSq(`1<WlWl^&FpDW~
zg7zI#?Zq~)7ahTrQeKHYW+2I2F^--M0-lg&UDPB524^)D)ZEl6kS~&()(+jhGNejx
zvz@Pu)^jKI{YxnBnTynI`ORJy6Fklo1n<n-3IUB&vP>szN2A-j$GkPm8G4tNyA%&>
z^<|0PhhsNA{0h9?hF+AYhgJRUPykd0nCV891|iDNvbIlus5|!N1Dfx6k5}6#(uMWb
zq$DkQeGKD)@|73pu%QFm|7edO1xBQHdfxhE-=^<chC6`4cc-Iar@Kxh8_d^J(44%y
z5EN$C(7XQBbW{=J2YibZf77-dv_#s9CU$;$+^!p1X{Rl~VL*ru5Cp!OmxADNgu0^x
z_~_HotEa1$hmrp7yNpoaG4gov{NzmoXQv`u75_`(xgZY<?EDLm;k%)PYrD~j_tsFI
z=;2d57CizC5(wUWml7k;=W4j}uz1_*e)voIIxMS~rc3NRMi@urtIjhwVYZa-nYIW_
zJ_GI0?2D5{yCVE^{igiVy6@TKe5il^zxET4$X!h9Pmtmq<Q&!Ix}6ij^ap;zsl*hU
zOK&gs>{p8Hz=-XXd?Uct^uXP3Q9A>f{6Vs)i`iAGz@i6eNn*l^z??zAN;77#^S_K*
zx)Z|{Q4e^1G%k#LSnYa(V&ad3UgUrh*x}alW~(zH!a+e8PXGZ~LFRB(d7!D&Y5kgg
zE}QW0&b!~~nxt47#gs4mjDRpl;(e^>mWQHKp8;<tb}L+T7|P21SV-K0*J8IS=G3={
zACob*8T)(yuuH6aeA8VBdRrzMgrRu9`zzhGr@y)L7*iF{i{1Loy@tuhEMT%p=O%{Q
zcc+~kbhPn+*?{OZg{OwOcduo{Rs($ItDZQPfU6^naj4qZGa$pAC=iK;u;czvij#{s
z;GNvKk}wG%H&0U^iawPMdPZH)!-n9X!=l`e88=(6sr*B%S`;FpMw%}FG6u#`11$xb
z(TPJsOT257bvik;NdWUg>-9-dod?xj3DTL5^&o*>xD8{7nxcaCMHBx81u*I6H?`Dz
zQM|e76F!Y&8c&NL*S+e4lPy*0s~16?4Mv<v2*FsgkP;6ciQnezPdLPh24T16c+KZu
z<nTJV?rAs}RROs~w8x+Sh2-3%^_b(_`wo{~-=cLPx|jO{w^M95z+)J-`8}tn|KeLL
zum%)$UTeZ_50r10jR5n8Jq9SlZG4!Rxo?WI0;;2maHvEWQVwdz^Ga{0RCy&{UXWos
z4q$}*m-K^6zi6C-@Mnooq@0nX`=eaa>c9M)>?@c6Fv86Dz+Xt&M<WTDloo$johoKE
zZ}Y1;ktO^quWO}x#N^p|M*Ak)^vXd>@?rlQM|&|Cr$bQCVJQz*#~Uv7$z{?lQ~$D;
z2g3`X`6wqYKb3CLtaWyXA5#h_`*I{8lgQ#X-CKJ-1NUj#<433!?BJ~^04Q-5JsE&#
zI1-Jq_}$b$6r2b02&D7(h!>D_oU@?Y+xfTvOZ`P-ECML-(*z^K18*w1K;`%O;>Xl)
z%nm<*c#$_J2UQBf5fZ^jG!o)>tEcnvlU~+?Q+OEmz>omRQ%Joj8B`7+IIE*p&XA>W
zF{Y*+{xh^ZK<0M=OcG1F9yMsM-5yvEa=(fPphjz=r~|(2j>S*R{Rlv<d|65{Wls(a
zGAYQwaL+>ULQxnG7~;6-2@6Nc0h1Ef-9d4ID`(oDGqoL7d7u9EdJw%N%wu}*($7Dk
zA{;9bh?IkPe>E0UGim!P7I9I+7;#ctNrDxI3toSq`$39aO7hhhdA$Mv^90ca)Oeup
zV)H&Wvnq8W&V>y_N&vwSF)%zd>#Ezs-_&K%c#D!CkPL?+hkzWzRtFJq{q(LpE72X#
z>k|@9cv$n#HS;e|6Dld#iYi5#bV2GyB|HEgeu4=9A=(+J?Qoy#C+AF@;Af^o0Tjd*
zQ1D;lMK}-1{x>I8IJIVOQLaykY;y_V5ucAARJGhESbs{elmqB~H#s_du5aUsvArJY
z>Sp_TsT)=J?QXjj0Z)@gOb?+24IPG5<XJ^W*IG<E_K}$pltkO`$+1H<*8qYmK0#o-
z|7mm>yWUp6^<aX$5Qy5*WZ&#r%f^GWB{B9dQ{L1q*a@c_*H!XU<Fdp8k&91H9w3;q
zD6vHhmMT|Ag~4c|;$UtDpu|XYt53($R>cFMT<_C;`M9eTg=0(Lu4_#SHyr~WJc^Tj
z35HH$OH}o~HVMV9_b)>*_~-FbZ<>C^=2q3WCFGQuts9S`!E;g*09SN^Kt7POQcAe1
z!=lqg<DanCFM(Q#h;ef2wQ1J};=WHvIoNAoQwS8`z)*VkUhIoniu<?Ls0p%ifSx*=
zvvHFOhxf;Cy>;HlJ<}AEP0kN1=ENc#phQ7|V2VHPO}Rvt9HTtDL6B(xvly%Y3;^8u
zN^Qg1dJu#seN`6mw?Ofb)bD}`AR=%<-Tfoij5`-O2NNvMPB*Dl4{7p7$6&KR>mGFv
zJ&xr#42fJ(%pGw=NmL<F(5DhgOC!!ctjP;5I=rPxngS+imnxSm3n}5NGzeCbWOb?t
zTL@Yeqv&r0SP${eKs!bBxqcTUFUmJwLne)@8{UI=_jS%$W|4afn;;NHMwW?M8mhJE
zl*37w<1@)SYp6qp4(kC~A^5nj{>+G8K>$o%r-DX;1yW-BY|Ye)C65lk>1yf!AN5gZ
z_eJi$AVy_ih`k<w;-Gig+z<WwwY2m6mfQgg9UEXX`7`}1mew&I$mr?(5pb6#&d*qB
z-o^<4X>?HfRIFFJo^K*YKOJSa)6n>FC;T&eSK>vW#{kgSrm{2X$ifq?WxtSupaR9J
z&yV+p+TLQ^kB!xKbaeHCh=7@nQPLbCL0})&d&tLi;A=hqqp-K%X=kFG;Aq<`KTUEO
zg6TJOsU-+GDN2S_s>0zSFA9(Xam9FC5~}u|88)!{;Lt~Xy(`UkV2uw{Afdy8QRol^
zZpzY_P~cSzd39(Fjg=DM<VwMRGKeUQv+X{l@T&GtRy?A9Jw-^GGBrCw08I73eb3g4
zF}S8&oellYj(zvZrr2C-Z?y@nb^Y0@ULmDCHQqfinWB+A`@fF;dS5PbHRHxZSW39G
zt)awpWz4ASA8UR(61f^gyaZ=|y#952xj3JzIshv(&D$Q#@HCJFvnxCj!AtK5mA;CU
zPF2M!C(Q@wKcAKj!WW9C4L5gLi>~{R_LkhqYWI9{jD>pvJn5f0`wNqq)a^f*?)E9>
zl_Pht{?Wn6bz|EYuZS#>pg25&D;w^lBYMsL9T;qATm3VTDsP{EP4};YZ+NG9ALh_#
zUD!}eD&!^}nP*;ZKTdjePp9}S1&4|g=2bC|t<k>jIFH2@+uX^8goU4_0srU^)=wVF
z;JfB@CV1?eP@hB~<Ib1{OnRzsvgLpX&^%gA{{u|M&Rp0#8K;pVmzkrE)Fd`=ph#0&
z90&prlRca8J$_sEVou_uP$VPeTyj1H9sl?I1cB!Fl`)3DuM+?e!NNjD@7j+p7y5Vt
zVqaH;)14T5oIZ0kRmY2NHROL^hOnrj2l`#8U0y%Xc%l>5%#C0uNP>A+&LBE0<OisO
zU<ACZkpt$k7=0nt%M=L@!U=c6^I{LgP(<5p@a|gzHcrzos0qs|6vIGg(IE#Ulm3tc
zv@%2<k#gP!f$@e2grP!qr6C_N&O!W7p7pUwyW=>xm7Y3V-7gdP2c}4M6WRBo`2H{O
zD_;FrWB`gCF3K=>x5FI52?NcMHN^-3w?B?@0EucWlF_9*6tLx}-G_lhCm56@??bn=
z)Y~Qu{m0HNH?vrA@AwcrZ#EXNwYoi7t%W?Kjh6<|yUwW9ozc5W=Ym}c0}J`gp@1To
z`U-V0fTTG8AE|~vZdwt$n4|ketYRnSsDHBRvM<dcA8$^2HnH-WY?MvmWf=NkaAgGa
zbh3r4m>F}``L&<`c4Z_|4p<#m#7RS{uXtAE0TmN=Xj9^(oA!q{IxC2ejr)|U6crt#
zW{c8r@?SXMv(lZ^`Ia^jetT$Y2k63=Z)b5k&dDeKSsO9$e?waD3PLP2m1S`x%v~d;
zr9bop<A7x<#|)j%YCwPHv-cRWVSvKohO53I6nKL>UfxuJ-I^*ei)&U>Dypc`KSN5*
z0KmjOjbXmm_f<d6sjHg*=!4EqsmZKkM!>zimiHC$fbK4SW_HCqC%?-rWJ~TjW)(qz
z_QEsaq8&<e%yb+un8_bw=zMRr*bQZ$M(;Y^bcuUs)}|fN2tp^Jq~3Vb0J``M4p1x2
zM&}j%mg9NrF(u$})><~PV3ZLcB%D1b($&US+%3mM#svUZL_&L}qE6p6V#DX+Qx9J^
z%f(YDZ6bPCAN*0UV0$90PenLcg_e1b-bx)ckWXiq0Yz8bb8Xw>>Fr{TD~roHFiKHn
zn4`N|B3)Ma0I%|;3fODDPE^0D^zV4;Ym_+$O4KK=22)XutS#F6Z7aYJZfql2#p1Ul
z9;Q@*+abWbnCzM-6^M#Ujw0ryh?7z~Qw4r?A-b3XG1*E=nItdZr3XTN7Ah=sH<eIl
z?1RZqBT*X`@klSAk4uL%Ne@dg>Cg6Ky(0IkhQFdLqpeiYv7)$vWJ(f0U#GXL<nLS0
z>2cw9ErJ%tH75cn9;@Q+AVj=Ip(*tO^xDT8IsL|Xy-stgZnoMS<{LN#h?t7%)2vae
zmoI7--!$a$hh{Yt#_e6Tb_IUBC^#wmZs^dsV#c6Kq3I$6=_IkQO&7Mc+nwQ856eO;
z@onq5GGn-sWWB^@7+H92!n@=!HrM{ETbJqR7NKP~3}wM*?K!rp^J&<Y<H32c8~!zo
zBXA*dKe4&Xaf@nj=AQ9xd55nCjPDGzd5D@-zip@ud8nO(;VnP0264*;2cuo=?8~j9
zyKBTcVcf0X!Z9kYoMaD!9lxbDYfE&vE~1RXzlGgUuRg~*F7t?Wv|7`BlTN#NJ4R9U
zRAkWsO(A?REBl0e*O$=ZINwnJC`wU^+E`Zjcr4I&UF~YOnu}Mg=VH^lem9V-!w<fy
zRWm3ws8FT;T%b69ctnZ(7+^xnn9xKvTj6mr4Rp^C28J<T&kv~uC}dO|Meu-iNBo^E
zuCkS~ZwZwHP#%BM-J()J47&|#EH0}_Kg-0HjvnPhzGVq2O=`_uuD$9UqGnJ3&>Y{1
z0olSJ6kWl)7d~$N^NqBSQjx4Q8FIOIHxAoVOk<u=2Hu6H%TG`^`z}q#po;T3FJqV6
z;N|bH!mMlmsNuCQDCjt`o3O7e2$@LVYBev(e9Yb@MO;4n2_@GZ>AdV!hwL!`)Ai%#
zPc8&D3lq#jKGVmNEoaM0`_>!14LRG6c?lu0vA#<56jsd2^QPE8Tx1osj7rt6iPreO
zwpNmr&T_ue4Hvh|CC-UK;P80^XJc%+Y)@J9n!dU5wD_h!jZw~JIrIEEf}d}Vq3&3>
z5|c)5zKzoYZ}Xn_5G71u(ti|2b_Jg`*Oujw4UOFY_ATzOVP&JefL2r3v_+Ru-ifdy
zdZdhxl56Dm_ZNl#w<ckWDR?`4)>D2hTd+69{GOa<dVsB$l?CSy#r?<6$ssbS@ZssN
zIu*cEguzL)#R$BQy7sftQ0&)oA`2V;j7{KO@55PG@O9Ou<4T>_p_<l#7lccEvqMS8
zq`WC(g(Qd#RtEoocKC|e#wj-Ax<PPr4~{aeH|?g~EU^WLN0c-cdL4d9EotQaaA+vl
z(P%*d1t#M-G?H6PA8M=Y<b~t6z4gA2k9(^!N_S3svJO|ZNxUPN7|1&dS0*mY5muY;
zH}hANEQ};fyocNGV-F{9;PO{)_|Uu4T1`t%DxD6sMTcANnyT_>oZ4<Wt|g}RA9|+&
zpI<0+#(Jy$I{1J^(Wl`*DJ?uABRcLh3nM4|5HBb0Wn6hwnoeCN{0Gk3^_|%=t)#<R
zVD9`uW)^!CnMsQc(4~d%uoOO>Kc=iYc`w%BU2-6(%_3jNNqd&a&W}*cgsVy-b0oc0
zzdc~1pBwc>wQWgFHK_Rwdh!4D0`w73E5W4(cT5@Rg3QT|A{z39dluAc>&@XEJ6!n0
zaU6YFHe|`Y_OIL|<EE0q(D44Yp~CvpuS6sx|5d+cG|?i``TZE405};Y_bYc2&GMf4
zDLu-|V7SHjo3amTC4C1TRgN!eQ+|EW`e(;B7*)!pe;xCEY0ch2&evElcMz%LmU=Vg
zX;3HK*tMO<iDJi2`l5C_pttUEAy6ywv(RlbRvHUg-De%%H7QMl3&LTIkwI2Bli2s6
zd%>k`*o6@Mw|*`Q1oY#z(vnxFUNcX$pKj(gb1yhI9arCEXd$hr01AuRj*R;Q6wf8-
zJ3mWjwG)!qn(7MnSq6lJ#n7os8S2#HzuyZTZF)4sm<v~9ZQH#Xc$s3PJSVcf|5W*i
z$aBrZ+h<5Yy_Ptvabv(PU52@88)~J_Uj@=35fP1JR-(jJP7~GCP;hMgtTVAi?bLVn
z#TNNvYF-m0!uX_T9NT=u>HrBW>E?d9ry2WF(?%)z8{SCU1c`qc_}ZEbXs{er5l+8p
zaq|z9sL8jQi6Lv^P)^6yOiZJY16@hc_Zk!ig+A$Ek_AFy)!QjcDAKO*sH5+(xnXDh
ze9EB$q#8sk;TNdP?^~YH-p->EGrD7LD>Wu<WtPe{5^pv@C@vvoR2I$ac>jJz^|tUM
zzrGJ5Dz@3Z|J2>>d+4)z8k2Hy_QilXjQTWUz4OiaU+6?+Fe=J|wRA6YpH(mut<XAj
z8p8-lul%Ry2(qj>wf;x+uK{FiQ4LQI_Z*$)PNJ<wznIE3SeD=y(TQS?T5O#R)=-8?
zdXzdl&VC=ZkHb@8QQ4!C5`}3k`42f|A!iyZ(^ut$WvvJ~ou?6Ke%23PmSlaL8VU#j
zt?w5v=@iW2^f`sliN>WOQ`T6`n<Lc{;y^^@{z$#@qloI^!7>~M?!>p@TL-hSl+667
zZPlwkl97x+LwbN%T}I-TAc9b0c4$P}?q`!W=HMM)`|-P<Y(!=gbE5PEk`l&bn*3aU
z4^q!aRbCAJi!{8=8tHiYw9=vQh1X4y`BI$0GELa^2wnzv7~c48A!=|_<rT2t`rBzW
z@usutp4I<H>5sIZ(B$x+iPagxeP4g|1=oFCY;pc)^wJ<XB5IIpn-jptf8)31m-4)`
za@=wyc<piUGO_{CC>uYQhN>S><_l8PN`~%kL>XR4-^_>$4Ty{0s9+{=_H>Ay#x?z+
zuE1#tGDvmt&Hu}wr_R5#-=V8~l>zw4hss;&)Suoityc3V^tZp1XF;e=n~f$An#b^B
z?M_I-Dq`lZW(nFdu^SB~C$dS`xb<Yv@_<V@J8uO*Aar6$lX_^t-WMjy7nuQ;P2*W|
zkoA`C=u~THq{}7Aut{FQ7lO8wF>cBdhBs)OgrPTqgug97AM>5uHfnvgd@tSd$4?Q1
zkA0XJvhNK_7<ir$VCkth!>3Jarv(lft((+Cr<**ZN}Qiv%H_U9Lvn#AXtWfsR$o$f
z@)y%s$N6A0s@{>P7uuwM5xEs)S>5(O4v8s7Fb7CE%ipB3BGVN~W#te9LMi@b6{US`
z732rVt{FhNK53gysDeCFB66PkbM-kxbfgTfHQlNqw)6SD&e4XR8V`l)(z%1|#J?p%
zO;s-my0xU<*hUgno&#Ic4?C=<!4eFrf4uId3nmt=AzUny6N*rRT_3~`bNsFaB)==?
zn(d-0QA|c}Oi1F`e^8vCQeQRb5PpR-K9<_PP3#_K`iAo(C~U6#Da>d1^{95|^Dki)
z)w3kZmDKnAo;YuE(<<~;{O`Fxa<#B63qT0OG_KF5uh+VsS`5v^C+C#dKhQeh)ubu;
zyG|0@UZNUe$|=iaKGR?tQUz+JT0yzS$P+~@nL0((nLD^1j(#Q?|BNLM`~j8qyI66q
zCLwCiz=gX&-VIV3yi#HNK>^QhGt_aipH>_E8WBapOS&6A_V`KEVA2YC=o3N}R?QIW
z0B7rFvwSA!)!5JL$Kt5TmI6qS*zBzCM&hq;J_BdJCI~m^8+_-VNGYA`EButNT-(Be
z+b*|*9ZO>g3Z*!7e{H#3@titM952?*0PTHt%K~CzS#te(A&Dh@wekL+7`=54jb=HK
z#}o=OPU}ldIf$dw-R4i+wvyCRhgMz_v=SR>C33G7Ty^f2Foj9niqNd->_&<NY?OTw
z&|XGbPoO)CfI@~kp6t5Eq_iWCuXol3Wut}mk=z%Zpq0{y&-hH$B8D!@gSQV;c`uSM
zxMlvmp>$qSy(2`MHdf6i&Pfy4q*6PT$9~g!{a4Z9_=bw`0Hv(`Fa2}F(Q`1WP#}Uv
zedm74Mc^zSBCXgz<YZp;YplVzRSXz>mc2JYAA!-&elGaqbq%_zl1G;q=}<+T#lK(A
zM;FipCX&>wBDehByEYY0tc~qrrLlk*T0E0}=(lK#ZwxN_ZNwwCTIc~cPAHDU>Ce+v
zOvVIs__=@Jv!xkgFTIWsMa^D3Rokaxs+3#;p{cR()HCgf-JG%t+27yGMqVIZpmaWh
z96!(Ki{1VCy|y!i-Zd2QOhhoNooKt2E7<07qUF|O^rh|-#_Vj^_F{0;ITGwu&rM>#
ztb!B+&_)-_g&xS}BN2An;y4!-WLQhL#$==a=`aDg=_TX2;65@k)1Q+kUBk}`K{N6D
zaT{gI+r?VIX(qP;TW4~F*o$kV1VTW1pZVs<%^}{BVs!tS={!U*&DvkFnQd4{m+O;S
z$q#?0qPe<4_vk^AjIcL@beyE+_Ug^_$<|}S?DJ$Npph~q++T!66g_rP)PDA57tXjm
z=5YNqx!u%md|Yf8aNt$*cOxPl_#8R8;KYHn;E@OP`9aHU4(vvBwLgpLeTWz)#Qa&Y
zOd70v9@5jc38qC`3gLD3zh9G57&g3g-Q5qSKG^WjWiLt?8VvznRG$wGJ+MaXo;%^h
z@}O~{1sA_1RX~gRN1Ve@5n)R{T=SQ>+G4+Q16ud%15y7brb>oeuxq!*YWTb9#dgKM
z!Ij;H0J^-fqBHh>UHec-gc8xS?y@O81As!V8tIekpU>?8ye{adG&_LE`rCZs9huZ<
zC~kO`4kx#=t)wbzJhY>#4b|*jTaQEz$a@x1W)!N(Y58zZ%9AgFTQljk>9}-WE-)z5
zoNG6o=h4@U2F*|G{#<f)!D;_`eqgvJ>$ahoh2wszcvo3r&$Hh+l3TjkxVp~Co)xAX
zoqonJS6iZw`Hwj)8?uGV+5sJR$|Ve>$q6cbl*%TH*Y|R>D|sbzp;ve&tuWo7LG5K~
z7|naw_uZ}a+X%9Kr5&=sRwS|IiiCcG9Y@YFwX?#m`DTirx#CQ(Boi=tVf$7U=P@_Y
zxqije9PyouhqBSj?;VvyWmkq7m9x5o`bGTm{Xe}@+(7fsFvmpJ<S7;GyiDpGvtz9u
zyy27d*Da_JkMLG2`CskNfbXaEhv^7*{{r>inM5~``1`kE=|8)h*S}{Mv-Fw;RP|T|
zoM8kWQAQq8%{di>aiUZo>xnJfKFTM2PLmlK#6Y;CWc8<Xs!#4wE8Lo^uoOv-xU)IS
z=7HW*2oB(53r+B0Tk;H;2EciEbjvLF$Tc$D-)~C?5CqAGhFbB_<P*r1`%GFVJ5P}y
zH#1$No+=)D$|OliG5`uwn|ZR+OuQ!<YoxEmo3VK`7kD(H>Q-wv_GylG?<=R$qqy}D
z$|IwSMc7d(C|U7eY8A+0e|XdIaXjFPD<^eK8@?c}!OWgF5mPOUzrihJg(ENTbM&$M
zV#K0+>Zs84t2arsfbGC3Sc>vah~wj<2K`RdbnL;zh)v#&gAq*axsO{sAX>?PsJSO@
zm1;@~yM0?>S!7QMPkJGzkR#5eIT%jIStJEF(?DGNUY{kyFDlt@ikXXP=9Bj)ic#?2
zK-r@s*H^=%Yr$uPyoJW&(Xk1fR+m&H8kuwP(61Wy0zQ}R<6DQ9@Qu&ElO4&Y?pvj&
zCQnyYZpk%`S1-XVx{(;>)j?FWzxtN5dYMf9={0_)1?$X{@rl)4W_4@0Jiv7=4vRy>
z*W^n!QNGpJDe<vb!CdLfN<N$NYBGp)pso_qvlaWh@2UPol4ObPPKAybZAjui(TE;6
z7rO9_f_1k$t!`+@vL75J7OVwY@Sf5w`PaASh;{uo0pE|TZ5xlMuU^dsix<%?ShxiY
z8wM(wEZnXtKEIi16Fqd`QGyqHP`wohX@heFzWTEmZZe7-U{kqq=Qq7(AR=_kr~hh5
ztZ}_1=)`F-ZuYvfFh_*2A%M)t<V3Oe-@J2@Q{lS>Jr?Z#^e{F~HS%z2mv7;pf+f#8
zZW|e5(Q0_sl*tvWL-MaZY?IIGr%6HMWg@|F7V$7}k|ykY>xO9CeM#+#C_El44u{Jc
z*ef^g30Yn1W;!r?P@>>TW)p0X5==E5UfHGrSlHNylQ-xWxHDcY1MK=?cS1hQFUH@Q
zSgC5h-@f&`-Xo10Z(S`h=P<mi;(6<&%5g(jcAOpY3NJ6GH?1D0bx}{7=k=`s1I*{_
z^Eb}s75@=g!)0go_+$e>0<V1cIi-Kk<K8SbyKVU0M%}AuZU*THD`TnV40nncGvn^;
zA4ygHSz^4#3A#?crrp>$LPDTO<-cQ|YK*#}0<Uv;)Y-(ES5(-eoh`;6fG!bIk$CKJ
ztEsbSZmN+31fTC&ppW`f8>c0L1EHm>jbr=a(m__oopP_d_%<8k@qWA~XF8q3u1R$S
z3C7$Y+WZl?!y{xb=QOXoI!100pma>gEH|1mQJq=tQ5xf?G^GA4xTnf5KxZRqN&g~<
zZ7)%Xsm!u*sc<$$-@0Nxzg=9YUSUhtyq@B?rj6>A@|>;LP2PgKrs}uh?5qCrf%hlH
z`mvtxej9!7BC1D*T~+9us&ADZUOBp%>d#vUUnJ<r%QrcCRg7l`EmgegpLKIDXZC6x
zb9Gb8aB)5@7mkiUtEU)NI}CVB(>It2Q~=fQP>xh-?Yy6tjs)svaVjuwYM^vob&r!(
z5NS3A^Rs(>F|CTr5rbEsH^G7vb&B+14_TjC1QXeh8P7owuX+~OL8_<5Oy;}*ns|NJ
z;Ox9M;jJCHXKRpNWqEY#UH9i!YxeX&&!ejA--ab2p87I!Kubk|TwI!M3L%P>>}$0g
zv~$P$#nnp^0IgU!%vg&><M4x?)}QybRz+H-;!=;Dc~+jaT4gtjzxj7?QIig#ET8i$
z9lf}V9uC7QkguE*oqB16if0G3JXSB!Q6ZBa8aag`DVbV;PsdTZ8>eRpRgwt4TRoLo
z?O%%I;;=ZcQ>MqgBHI3L@32Mji-zCmFo#xvrhu`6AViCrWn%6ioOACQ5%aCrcfIWM
z2EiTc#E9Jp`bKJx@ntN5f7Yy^#;**(>)X4U$;{BpWCn4QWsm*)kBU_1z$eRhK3BTY
zR5Q4kuOk|gf4Md!yHgbE4stKU#NT5klVF`m-x!JRj$8`8R~AW_T6`7?2{A551|BC?
zJqC29nGp0uSAWebN6RNFF)>7;RDD?0-xi#A3b#`v;#W@RB~(xRghDdt8DU&qvfF?^
z2Q4hM@%uF!hHO}MvqI$t@oBAiujph*tb@ATHOJl2h%EiO{x{Fs(+%-)1GRHGw#{=q
zY19l3-JN;9Jvt+>Ksn?VOt)_>x%TKwyCg5aYPI;$)7}5Hvp}M*wft6mqzN6Bu`Dgq
zG~cQ6Lwc#;FsWd5`BmrgQ+gw{pjpAH0=|}}E$_DVoAG0_*1~0F#(Vh8diw{j4h!W@
z_Ve)mm=^&Gg@)$Ft`9U*>_r!jnl}9Q>C>K#)HJpG0~>iIyZqwY(Md)7<M@M3HZ7+R
z-oy_^v#yO6Q?}bMgC(b7ge98xnvb<7sDX_-{fb~mDv)6QxbVb-hJKGcU4lz$aygq)
zWaD;dE2J}zZTlQeRe8tWWZ9ol71JDO!oX^&6F#zg2tiX09k*&^=SK%HsD^5X|K<|7
zTvU}fH*k#4WYDV^`Pef)rCs)Cj0`DwS5RF1S<xSkx-60KWW%LNS03ZrVnmSBJ_s^=
z{9YxK<n}$fL7_^AtG)JxZM~0ItsZ9m2`$sI-1Db0e{QL1k_zra+qyseM*~(npXplt
z9z!5<VLW~XotlvN+jMxRLY+~6SNCd}9Ys__PQ31Xkm#`|>V6AZs1jqD-e+q=%d;sV
zx}uQE*jen_j;?Ml#%=j!K%81!E`5A|i3LIKVzB7GjV}YM4LRn*M^T=2Ji`2zfnMvi
zL6%NQv)&9h)1qAf?tHKb2{}Tnx6t2Uamgi&e~i@lT{P=D>_GEG<N5m&7zr3Rhihz}
z!)(@d!LX}#9xY_TJ~o@j*k-4UUmm$9H)<WtPn@KER40g&BW}k1RwaukbEZlY5-4jg
z#7nluVU^d|VRes8oZqQGHEC9;0xvMdqJYu~sm=BqIaLN@`QpY21#Rzv38EI;l07e8
zLx6@{j$*odD=orM>gqBQ-RdVN(<mh(7jr*mt;4k}4}-cRWH?+n>U*UL6d?<Z+O4*x
zuM)J=mQ$N&FpJaujQV_sAy&cg!izQi=}PY_QmJYf^Gn1zqeA~u2F<yYC=;1%s>HNH
zk%sE}JEOPE?F+9n1h^^OgUK+Fr2~AH#{RiOL1BPF)TVUiSn3f<kBnocSWXhCcU63S
z*zV69NF%za_TJEOFg>Z5N8JO9UuSBq{eMW&^%X1>cWyJLMKy}hig#l`|HQJ@{D*~}
z`Ah#DcG{_3rm=ZWYt0@`SK2S}@t&~f?+$D!P?=Uy+vHyw6&-iS{{`+rTV#R#8+TEe
zHJ^7lUW*teN|X-FbKk0IaAA;wJ+k!Aj6fMJtrc<w!9p&3;r_utFkKj*IiTSAKz&^Q
zWrOI|2g4hQ;!}v^iWW9pS?KgHRA5Yt!~ZhgN7P!u`U%Z`7kqX@4+%z1e=&1B@bLSi
z;JB?e!rqx{g*E${QS$V#jq(AEEU}V9!?msXTDV!9^5Y-&8+EM${#2b4RGRv^5q&;o
zKu=liT_mNF+0U=UEu@I3r|{Q2ctlCgpV(N(Nee^_DiV1rA2}B-(#8|g8!01K3pzXh
z5>pGCY0;ySB$h>D<74Q@a|Ueavt1>3c1b8RB7B)@L(b8Ja7~BFp%6G2F>U*9#cx;}
zl=x(6^U(47kY^$FFL*DB`CH_@8J2k@CGOnoqZ%8%H5vC_e6Ou0TB@rbwUr=cVLyhV
z498~V8@|;>q!DGS8{=zG02o{F6mW9bKK%`6WNk>Bo+r(#hhQmd?PDu;p#&^xa4pk^
zH?m4xAiLqrHGoe$YYRG!EBLMQUuw_pGd;W6lJ?Pj4t@t)jtjSEZu7iZz&<iSl%Lk9
zQ?4Kg{K*j-Y<VyIWx4uQy@IQ3?$Nzg;ZfEuhSfy5ZD;j*mQ9}Rc{3Mb=35?{Ywe4V
zGrw8%KEE&|mD$<<V6VQwIJ^7KMw)_kxN?-p?6i6(vSxC#hnmKISp>mKGf(NQMZg&u
zbp}(kVQm|ffj+T;B^u*$=|y_^OkT$>cJi6*sHgJn{lOxiZ$(AgB21~OHN&sqkFkmb
znZW2Yc=8Mk9cCMEqpYpM^&mSnhn#4aG1&`F77f2DwR02VE#Z-{hQ|Y10nii3>TgFz
z_4;cOK5RLyeC;U@VZuaN=<;2fw_40xt7WO+rBoCnLCfEfmrtc0Tz?9rV^!9)rKo?2
zmSbi0{bd;*6WvR`SHF#3)G!VU?po>lD);XVchy6P;xr9>gN(U;K3VANF#>e1G`B`M
z#UCdW!|)@LEa%7fn}*WMS}j(NOT@h`f0p#WnBR^*F-|G}<GS+J;XoGmysPBLVn$j1
zF*Qo!P%n5QMF5A9T6t-NFM_^U`9g9=oZdySGg~Sp33Thd`Mk)uZ$?gB9~PhU@=V&B
zjrzX#Q#(PHu6aqB%4&+pj+ns0H1!=BN-~{yNq^&CrNneT$_v%*uNm8#3^6@;i$-)T
zs+{G_yU}mlWW9tE_6n4Ut72pcr)c@B51U)cGH9CA^<Q8*<dD1vlX|1H$`@70fe|?P
zf7=lw#<E-t>MB!EvTI0~RW(hO_gd5G^(c>w8anf18#7=a`gdL#<v-A4MxCkJewBSM
zMlw{J#wvFAZ*z>VQ4#PJN<e~9!w4U3_Bz1_fZoJnJ%r&mD$`)GE2J~suM(XS65EK0
z$-7qK%11>TJ=&b^I3uEAboZjR80WM@OMl6IAbOH>@o+lv_Bxl7mYMdoZI+{^sOoJ&
zwE9>0-Lh>^$!07L?}8d@qJvt=jR}@A+YEENW=JBF<W-HrenUW@tGp$8pz-8HB4&|?
z+6gQ<DNftAuv8(F@cXpL`*THk%{Ux^MLwGkYN-<wE@yL}H(3W|52;bU4XNte<0PJ4
zn?vHI<rGj-_HHGt9h|ze$2(A5DpTKN#n!K@jhx>uW}MgS3U#QZm<=!%DPrmllAu_`
zA`YcNN6`Dl?HZbA^?+zbX{+=!J}A*Us}*+kw8`!yqPCRwi}+2_M6n%z*`=Ly|3U#x
zkH_4eUw*W6#VkD%HF#y>63syt6Sy9_{mZ)?#^bYo+sHSPJvoGDd#x4jXo*04ga~X@
zRgsZ#h@f8KB1K-Cl%)gbvNa~}Wd!%(UeE77$xOyqzf54Y--$>V^?nO#;V4*a5o5|@
zVvF<W>-*OftxbiWt{-5*;BY1JCAVqmHx=&aUkgbw2I9U%?h++HQE~prQp=MZ$gnED
z^v%IW!>24kjs!8i!zx>Sf*Xfwysxoi{V)HOL>D>FFGMm405umb$nv{OhwkW0O4o$L
z7Bva4ru-g^E#Dq>a<{t`Q2pku$e;f%<tz=x=iQs15IVZLzo=n0ZDFw)?7hhr4@9Vx
z4%C^(xsDA>Om>iJm=dl#3C`9F|MC^$h?8!Px&I3%GNk=#^0X8CzzXYDTh(E%k%$FC
z<X+uOxZj6TmC)0PAF)wHY?(!-_ltS|^d$77N=%Tt?7H$f>9~jc3gl`5`A4?4<B^wa
z9d*rikqWslXyOdB+J@HKxms@~E6KC3VXf^Two!TD-x*@`hq^_nb`vGXRM69;oZ2(}
zM<R1TzR(|}M%l;)$PXooW*uVl>bjcGT0o#cYR5~9rb%>Ism3CwlI$PZBvsw=++OGQ
zThA6<r)5LjC?T0c!vunmeA15e2%OnqI04SKt^JsWDM$%?Zf-GJzedLUI%kMkr(a;{
zrmHw&iGe_)>&CvHdN9cHxrumT#lfZA|Hia~W5%ry#AjYn8Gh8ws|uhQ{b$F*^otUK
z3kDf^<A_^lT0s57_yxNx@n1*fz^4pyQCtItj;j0fG1cEvyq!eFUfs}Sd+FYV4{QR+
ze|Ix^^*jUobXj4j$`lk4I*AQBZ_b;^6_D*&eMwuG$1S6iC;kz%w9aA#jz~WmQ{oqe
za7zZK-q|R<8!>X~jj$1;F<p$|-#)(j@|Hg`RDSn!9)20I(Eug}W(V}_x3P8Yehsyy
zyBMR#`Ktj45PCgf?D08E7xk`kXt3ZFZo|fExBgcKT&?zZ8Jlbt?PKp0d5^}DHx^lB
zSOM^ffawiMAiOWDyw4U{N1G?axvew|0VT$`Bmkq;af^EPBEyRxf7@cVng{DFR7%%=
zYG~1DycDPCVdX8~KI`BK=3#Y=cZSOts>wJb&t<i!fyY<!K5zGe4lgoO1d@s;eDi;;
znC(+$jQ@^14q7muSpNyqF#+HBry=+Oocm7k_PVS9D*1HptS9DE5;3xAk=~nq|Iv3J
z7S?IT1#tyTn7FCJc@z9ZR$2VItL<;3wB{`&kcJ{BWETYIs`UCg-;6uOSP_W;tY9~Q
zmcihG&)QqQgR!jjHS2FRdI;Y;_!#}f6Z}1W=1ybM$*YKs4ywaikzuAiM0nF{(t?ay
z5F_2W2{;!M0Q&{0xHS@8P3p{NygyKyt@m*#fOVJrtZ6yMnS&;T1xJJ`43?c1p>gOA
zlXpu>05R1k^X>*7Zws6S9a^(q6?PDu{~nzdBo|1X_4m-R<)G=EKBWp;)^#xKjk|{j
z<~IoKADEF~=zWCb{~6eiJ>g3NJAU?_?X)>#uqNLS__FNN)(BrIB_5e1FZ>vk;_*y3
z{+eOId!W3H+rL}3W|iik+aT^Rv~D!2CoDtrnI1Gb!8GPzMG)i_V5()>9AiO?x9oBC
zT<Wpf9egHndtEz7x*<wQf%{_ef9;7m8Oc)y{YtJf&1%u!%dvD}l?&O%tW4uV!dZ-B
zda5?fMylV=RSJ&K^7pM=x+7<ufp|+L-=zabQBG&)<*CUJBd<FKlx$@#-S2}|uHNAM
zNig0uB**v{N0NTMUDY_tN1<3ciFjbw?_F1F5;GwF&t^oiB(2rcb+r%;5%XXE)L;Ce
zyYF8C^i%1*&IlKyVutNtw8Om<istx#rmjC6v0F0D=`~mbf3g*S+MPEvAj|ro5sRN6
zBU67O!Ibth2#bGm&Q4ULqCd3?)q;2R2ST6-VG-w1%T*qtQ|#f7?{>NaV0(Z0U^I|Z
zV=RSinmpAw(7K`(`*TXsSt`MfJ-r46N#)185{4gYczb*?q;wiWB#uvk;l+ykaNtD_
z<Vo$HDdCT&;E3gf2Wuai9S?}o(e#>ovPQe6p<j@0<L|@7P>V+Wf9XVi%|=r_s2QHD
zM3qG%>{s>EXS_OZ+ze+QbzD$^tu(F`|JfK)U-6^UND=kcYNHh~p_d|`B8K4$zMnaw
zxv}Y>3>(B>f5lPP{B0;_zYmSTU^DA0dE|UIdX`F?zaR06j*gMUlzBtoR1h6M0j*Rs
zQu3lcSMcC>hUNHddaRdP#W`YNH-obu(<i1cfZeJR<}AyjF#e<aD)@l?|Mdb8?1WgI
z&BZ4)%}+<xN=W3B@aCF*DWy#eq1Ai3q2c_nt^t89&*Dm>M}GHGuA&K+;0DUjrvi>z
zp7KO9Gw5p??@+0Eo(w`66NT1jVD@AH@J9`Ptgue;Q{ei&^Vhsi)qP*Efp!v@PN`~n
z>hTd0RnE)5R4D9eS2zXlgK~?(xef_zR|OUrln{{b_MzinFFyLwo;@c=ICGnjhSBl_
zi&+D5n1p_RzmsR5hk)}p=idD$rxLWco$}eF0ALi4KGnv!@O9?4<*e&zGX9c*QE)EC
z1-GTBf`Cj27l?PHJC1DGa%5deuNlM+eTq_J!$xxb3U-CPm==2>=<o8S_}^lZUvKYR
zT;yJ*LuNMGe=TEJNEIRLm#yvw8N1~=2AOqD?>Qc@6O>%f!T+cLv?r)!s;7$891QHN
zW?p!;idqLK6Rt=Kda=-aW@}XFiz;2p<gXZyi=_vKzEiDbhgt_DjIp*l9aUB>zIkmT
zo}=T}yflw6gaqXT;whAa{12C^{Qmm#tE?uP-#=|%1>DFo-g$9WB0thbvom}o5F-za
zm3!xhJj!q2x9QT6Jk<PhS03{5w4W5UXM7M|z^bc6G-gSmbeu(6%7tanJ39Pj^nY*_
z5-@~AdlyOdOWW=IrD*GY?B~x)EFt0p3do1oU=tvjlB9;QRHrle2S58OZ7Ql|hM*M0
zXuE?Y9&_Z&kXn8q04+*es+BE&1;zKS%)M8igoJFK$rF5A7u?xjKE?q+JX-G4%W1mN
z>>qdG(NEt==N0l1wQwkE9f^yc6*d-Y<cbmrE^-lp|I^-AwZ*vv>kbekxVyUqcXxMp
zcMndmL4!jG3GNUixCeK4cMooZ+W>pA_OtKL4><SVOm|mRm%JtY7m71b@oR#~YWZn;
zN9(lvVUFTOztok?nCGT4<=R{nh2w?4uggt7gY9E~aQFVxVD#DDNFqKz2alDYywT}5
z`-CUzue2J9FzBjH=dlQ}8cGH?CkJm9c^mOwz^Y`&Ddd&DPJ8?@cuN+OA&|7pp#xHO
z78xK<mBeBSC_P*M+W1`o((Tk>k2OIicwnl_7Vkz$cz&^fedo<mV21*S)R+evv%I@2
zh|m?qsL|tl`)lU4S5Ib1X7KC}Ux^7@`KqrOpT+k+at$mK6M15_)F0~|De5<G`ud}4
zMF6yCw8T&<@k@`s63mp03&|65L_1A+p8q}^;D68S=0iTxjTR<N6-C1Sz}j&wIVHS2
z7F)a;)NVaCtzO?vW}y*1@AR^O_Auq@@aDVwG5N;j=}4(#-XXV!$6nYJJ;5Z3bMA*T
zm-3>4@FcwymoW=!b6Y?7n=$U>lyJe;GZ|FgVM7%7O`BKb5Wb`H^9ji?71cdVuV*3p
zK-JydO%aDCQdOYuBEiS{%TB6=`0rwpa9ATUB;$kpO)iAq+O;Hie|{U+1ct3O@jWRJ
zEND<%KS2SWF_Mk^?(Xo4ISgG+ARSaQUr`nlBmPoJ{K({o?xm%95Eg2tamu`K8ek<&
zt7@*4j;!58V@yfW3slyW_NP|hY@jb*v7qo=U!W*2YKfcx{Hv|>G<vE!Wr37{ZP9Zi
zL0TT1SG6{Y?4Cc!cQF%VcV!6(XtJtKyzJ8ttpgi4ioG~q?F>VGD*-t@5i$8O<`1Sd
zadkX=w?52j3JYJI8=wK67_B85w72=?Rc+fDT#~~||Cns8c<f^RJ5&C84zp(U`s^U`
zg(<U;)YQ#$M;B{B%^0q{l9Z3H;+M{~SH%_HoVU4_#9xYnG&}{JIqDL9MS16CMhD3q
zI9R}!+vxJDuI+P3A3+(UEzQoU!ZUH?0A+lBL6*W#)Wz(4e>5eA`(h`gu#tVkX4*{8
zP|AjH5C*n0Kkmzz-I^b}Zo??l&|}WWdYd?WxZn%9@<UZAmyVNGBo+$!t{Zlbe^h;*
zh`96*`i#Q4G@I}%GpEMVH<bT5wfnB|s=M~NmD++HF2pc}eDOud5$~&4tO$DL4}+RD
zx{oM(zZXd6mI4<^eu$TCSpc@NpFj&srjG}ou-~Kzlp)gsnw*I?=}bUSlnQ~cJ$e!W
z?Ns}r{s)7z8lnL|bfQg3tE(SEL9Ztz6~a~?+f(%VoR_MGB1!DFI2pL0IcX0)i}_vs
z*dK=-RV<-U-)LUJkb0nW`o%i)J3|Vo%Z`&(q<0~v2vPN~SOCfb<&s39y!0xolpK|W
zX~n|};v6mF4$xg__v3MX1d4pWnd7x=V-?r>^1&dNWo94LNXBK7E56JGOE@Y0pLMl`
zGN$-d;H5Nc7+Wopm?0EK*VBn3tFO;$NJYx=hv1`rD{(H(HiM`jNb~828Vmj#RTFl}
z9`VbxXJCT?8fN;0Tk_=uL4OjGF@;8b6L-V&<=n4cxh(a;uXe&(&PFd&%FG}0kT^6e
z!}m{=Zb!?j0`Hma;b-Lz{@Z)v23Obnw(8cHgikSnY%^k>#}s}BNBof{*pB(6M7BJ-
z0UBSTrxdS0BNDjDGe%lp`?!^mkLcAGcZa_<9BOEZu|7sFEXQToo5<NfRkZ&EsQ?NE
z$_ak6d8ULSrxdtsziFQ+LD^D*+ftCKJt&xB9Amq+Y)Vub<i7{SadH@XR8sFQV;}Kr
z7SK^j^pDX!r!yK*VRo>GC{>18OvrAD0&cl!pYsvHH~*PXh@AZFln3BCuW;OIt6#g=
z#4I@FXeVxnaB0@X4JX3F6+D$ho<ep_kEwrotXKZZjIA}oiCpiH-ejm2!FPzC?em+R
zGzI_|{?5A6`c}c@>U$vxA&1Hq4M0k2tvL}qeihc7JghpKK*JCtPwKy_R-qHTcQZMC
z1<Sh_+_tdz5;RZ%!7(xBlxFaAnkJI?luJ{{e4F+joCuWcSdq%`2Lr{r&}|~4-p@uM
zeB58F0-EoMFA&V7{*(C0?9<}rOZ<(2Pq`TUGc<W#U>bMH)7|A;Sr>+h_#bhQu;=w`
zx_6M;ZxW~82?U0ee=daDzkKCby=+-*jakAI#Rmj8KAKBjc~rOGuaGGUey4{N-1Esd
zWs5vl!!}is?<$Ef;y1$G{5iiefU<E2f#|+y?&C>^Q*fTc>0>!3&pahRL(3||pP;Hi
zFV9a%3$8~-HX^cIMV@Hym6vd;t-CN&&)%y^Qa^{OtnAn7`rZb@&`3MSwTMiVC0L8A
zAk#hGsa9*t8bGG9r;W!khB1EUFNs=1P4T!6=ZiB)$v>PvZ?sTJJ6f*AdPk*OHSB7&
z1!i}$1y5|GGmy0%nd=(D2iOa+9GpQ58Y-(;y<#2C5Fz;uoBUpm9$5!%=BEwo>AaUe
zX|!K{8zbSO@=IK`gR|Tp{HeffwdFHR!zw%H&!&uilUWVku76iu&F^2hWCkcs3Y=Cv
z69_H^j^f>^SZwBc3uQkxa(<=TCDwHd>wU9#o#1?OLx$I2g}=f@j49B%A?`zSZ+pZ-
z=1~ntdz!5)@ao26%7+yh5z;{kHCJSQD~yF*l=e6mP3c+P)_h0C)2i{}(|I7lNFr@o
z7If~n^Q|lxX*Dtf9zGjs@kK{P9p?sC0t<7IfCa>mc`lOzj(=@!&xnJV>fan~<eLcE
zWSgq$9Sj$7EbgM;mug4#$j?^+y#yX${tJs=TG7M9Bdelt{^F$P52e!%9mtfFx>0EU
z0*lF<<plNI&MHfmH1nJ3r^*^vF&`c(;%(Y=6fPUoC7lYpfQRFeQGd~@+YdswHoZ2a
zWoJ=KG+Q8}SP&=qJYGe=?YyU>2R1Jx=rj8UoyX05Oi)i)5_Sfk_<C_g<Ht~5sG+;&
z=dq1)R~LKoMrupA+=*|A8zYh3_2Hbs!*INYKjT-zmw@?{pH?}Rg`KJ0nT7RCwfriU
zJ3px_ZR!(QG;??s-CV}9j+5QT_O$4l`0pHIM$uzk&r#2H6WBTl$w^(lF2HcAQiqug
zDcRnitfG-tCyeU`mYe-fhRvc(!eYAkq>{vBpmRILOhZKp@yeQhv~7P#qI-H8kP6I3
z&lP$vyL^j2Wh}5({8+6LjQeib09yX0PiC2J$QCQD;0p-Pmrk5-Hy~Rdg0lFsJg2jK
z#)G~C!;)#MpN-b3jiZ}6#1zs@<Ch#%<Iy25djNCoRhnDOmh=!6pI=?rjLO8%HfD77
zd{DxwWQw)ZY<$;)6!gRUll+($bj=Y)qW*i>M%(dJj^E~bY<Q?H=FGE;N%e`t&1UXY
z)&=~Sp<YUA?(FBz%pwD-0Mj`51g)XPtoL`<%gMbW#_INv_el>|ZPtnjN>AQQ31o8_
zW$GCO6nj`g^};%@xRDo|@8d_ABTAc6`h@5)7S5l?_(s}itT>Y69P9D9qw4G;iz(8~
zj3}!R9C+I{lqFrYA4CpcCD}i9%m<$6=+1a`=Au0X9CaSH$U+CIZoI5}bRRk)>}tNx
zjkY9adDd0oub<nY$@1pZ{ABe<QaN6nUY9c9?8_a(ktq5uGjUSdN3w}4x<R1}f1Q_=
zhnA}gLpCpy-MR7U-gn5@P%25hqhkAQHEna$?Zrp8RhI2Qa6~Ems76Ew6yJB)V<-xS
zW4B?Ye_cJWvi(kPe23A^Z!;M#cw3M|Wb_wICDtVcE%>qXO+2uRllASeBpHMEGpHze
zfpvHOWhHlO_RQPWE#OPT^jY2a5h%)qfa!uT6W0v(;KYDcq&x$oCbT6YW2@};9Pdw4
zC;Cv6HN=;R$j{bH8%&%LNWe|iJTks?@cvVI>%{<>T(TgbgoquQS?sc;{C7>uui68d
zuQ>{8!U8dZuY`qbPenlmBPeHryHmkAS~bnZWw!55r*fB30{WTeK97gku{kKrC_%z~
zuQlu$8@zV1&o=bOl=K=hs)jAx80Sy8V0C!!ssWWI4*X)bl<r6`6;ClVq?BvVTI*PJ
zlJA!ATf&PMdkDPECBHbGr|{e_`=$gZ1OYlm?GM9yoMSe{1DW#nx_~SWJM@fT5!JKJ
z_&a`mvP9bm3qaVO@x#x+J3PCt&0~2eW(;St(nOoXhvMWrsPfEm`YJ&pC|%ilN)@Dl
zWlc4_nUG}lWsLLRS>)0`gp}pn%35}KFs`Aoh0&$SdpF;5ID^qhP~(s_)~mM}Bl-0L
z*Q1d~t^#y>2&N|xiA#M-A@e8pS9Lyrz2#Y*wk2_%KJoQ9`2iJ|+5@hSeIWS)aj(H8
zMb1#4M~`NrpaYwsea$b|8ZDRi?Ey0B6<%jniZ<HH9;`r4rOsC`X5kw@xJ*Ck4J>W~
zZ=?6X4nj(l4?rF_GCOxpDDvGp0ZcbeIGg2?*J-8P*mybN4`y<~l#r1WH+p9Vc#HBA
zzuVA!ph6e!5;$ujE5kNL$~ZA7B|XmKgd+_*kkCoi=N6$Zt8bIw&d?kz+J<SHr0k&V
zI$)ohzt4tld=%D1RD6Nn<`M$m@c#rbK3r51oHhJO2DIXejaSciv|jeZ8ee_!oHuW*
zZYp~Lb*|8zz<Be@roVQKM71WxmF_9Jezlx%sae^d5(y!8nNNQWC9Y+NaAk{Wa2FTj
zhtyBm&7VD0t-R60zl((JlEt5MK$9)<GgCc(=|Y<39jo)VY1Ik5Nso}5rlhM*ohbpn
zsC6jDtIWQ|bKI;+o$yLMUOq7mk|^ttmPsH6>mZYD9#R3iHtTJt`f%Z}(bbB$Szx9Q
zOrNQ|nDrx1DLaLzRHYZZR33VSHwKBv_}#eXcvknmZR`%d!=U5_u<^}TOr-@KaU7{7
zPZIxdrm1iZK{r7Urr?p@jHx-4&!*$jsw}T0RvZXaTosw!mb&pb6d1cVijw-ezpP(P
zB4i0vwz5l@Na;xy)9riCV<89>Mdh%});PI(Vw&m-dX1)r6%&++C&YmQK?mcReEC)7
zL%tnH6<-Y%z%c3e^)>bN4yJXt<XzLqW>t4?_SNHc;c5?RLD+&}DwkfxYGoyzIZ3Yl
z;Q)=7KRroDM4QCfjpNz6GzFRI&9EezN|kn2o-A|y0=0#X+yAW}oFo}S91EEX7Ljc8
z;bBQ&!u05}r6lU&Xa0KDC+h_sd%*S?c?;YtEPx!O-XV$6oE)U!&Yi~tXs6A%vXG|7
zR@lk?I6?(07T5VWu;~TJfdY-^2;T*I7F{ul1xARa0(~p4LM`v!Znssf;Z<eY_U{mR
z{+1p^_ib=Y9&=7(3~6|4c25o`2n-Ts5eK94p6cY5b6}xzx1~$At#BC06~&oD#k@5R
z_(M(S>63UhY-|<(*-CE~b@8lx#y!6u2L<76_hyOdIC~&<M<I{Zc8E>`w6yAtz1F2e
z8O>;=qOWAdM5l^!GP?r6j=-0TKT=tBir=8SyGzxD9fNa-08YL~`5PgkWNtw&4ASWY
zzkS5iRXL7#{7KE=?iU(v+pY3`Pk3&~VKGb*WvO_gd5`^GVD7f};hB0=ntnUz=u=iH
zUYj(;ZN%VRX6<u0wo!~VPa^a)_<OJO`P6eQ5q<4Czb~Ydhd+o5XJpxw$hp<Z?Ca8b
zZL8t8ETlSS2X_ckXWeuIG>uoRx_34u!y=5j!o+BDJUXA*jyBGpM$vfmhe$*g&$(->
zQQHx!87qKZnvu!wZXC6AlK`q*cUngE*YHhcv(}wkVY2?x*#{5o1zsE2m*k<)P4!WS
z@j8xrBBLoEsDg}znc_v!*W6yEQWy6+mJ4$t6irAi@mDylqN;(3>t`sw-n>54Gb19m
zEm*ZX=GEWM?j&KczMggo${0(fx@8VA?%UJyeI3Z-0PT<`<6sktU#8|HzIPs%IvtrV
z)n_!J*Z?<#$Ua2B-MBf?UWbX+{FO3CJDH8LYFKPo&d}ffUn^VTofjsWrYD-TiYXQL
zz4e^^x{7}d?Wf-lZ4htF+ZpPc?45GLY;X`2V8FVz(V}v-q}O`VyGGR+Llo|&xR;4a
z7`Cx0Z>%TKkY831A7wqmArb~}`LBUUJ3ijJDUp{u2Xi&aAFpC%HoIpSK+l6CiR$}&
zIvU1~tX0`V2D7azz1Gp#fw>zC17H_qPy})u&)S-CQ=dq(t2gw(beT9drTc~mN6%SG
zKUT-kr@?5(^dXAg4g(tCByEKelBUlfjmwFZ#>MG~;@w?j+#O<5NuVx!8dcshu&|D~
zVCTjyOPspr!sy;4EKBKQ8n8j5-IId#z}A+-`+@W_{Z8*Oqutg*_^r6*=NG76#)(>C
zMdA4);+lJsEJNB{OsSYO5yv65WiSswHF2_F{8ppB({^LjEfzd%d6n|}-D>awtXD2c
z*mmqISv&UIR*WCT$(HN*z^)I}0e`xW6>$BuvMYR!oqBe$|A#pzH_QiiWh0SSlsH3!
zY*p)(1YPyM9Z;xFQvL2`cTk#KODqz2aW6=Ke|}7?@aph7%FgOLsT}noU8nA~<OA3=
zY#L5ckZLp_O&qv{r2UklcnKIz@Tp8-D>WM_Y9E!#l}$?$1h~;Nkpv2<JHFddaXcGD
zuAR5yH5Nj-Lm!^8@?GTcfx3TSbOKLY<K63X=Dp{Z0Ew3ZSan{Pq^9s7J=sW=%&u1p
z-;PHZ@&f|MIFG?mc+#|41|Y74XTMvPb(1qNRfr4!MT>W-4iEa#yq*73n~mDt?u53e
z<#d+sk^`AA1K#^QEv#6~i6hBlC#~`HCVL7}@MO@qGQ@Szo`9C2W@(uVFTO29b1qv2
z40=}Aj-RYP8J6=_rhR*N^B+ozHH^Q|WalLn@Vpkn7i63rn0vq`%~aQLV-4%g2_tyd
z5^_C!wPvdJW8D;@->&#;xBUWm9&FPgGWs=d{L#P=(#=YyzlIahOia8hk;onG^)WFL
z5lQf_pv1`*X8HH&<1i<N8+o@-WrwBBcqNzv1~2ok^r)ZIJs?V}ux|YYkhVUG_UDY{
zjw(`Zr$&IS^4hX;5gjx(9UkJ3+1Lq+JcE)Gk8RTWiN2>X6{2*>$}nm=98Fp{69YO(
zjNv*W6N1O|RI{Ei{;a%p;<1PvxlkUz^aGk}_@x!R_&n>TC^YnOCghj~X9+9W&4++C
z%Sr;HRy~ps4zy(kK3^mYiQXv#*hUzqs*pCQ%fh(A;9Go?^(Q1g4{&+<n-3poqWh>s
z3RRQ_T11n@V7kNu0#I-FM*cj)bQ2}RxxV(MoH+IfO>2@%N_!UJcfZ;KPaEZSmXuiD
zq|6XM2(BBFhwBdPTwesg<|^T%PYJliRZs%9gxj)%4<ByQ6S`WDhe3)}1P%D(T|AS;
zI3GH7S>6uezkK*6fk3`^%Uo}FcXD0O1H9ucT>c5gBB*DHJ$|9vJEfEBmf6MEPA8YJ
zaj_S|lWKWp&~`iO6Yq{uK;mM#O(zxr5sU7QJgOUQ>rGcc`^jFf?8r#xQes5R;W@Ee
zU;DXC*pQS{5kQUti5JNCRUFSR-V*Ngz)qji{o3NV@d+4CTZp3I670hN`Y<`t%0PG)
z7=~HvSf6|=iZpY#&gSZmit$dp^5roi82F{*%L^MD^R3&$XFG*lKT#d`731{$+U~?g
zsZ+=b7(3VQhPB*%)Qh3Njh^rFU%-<iOmKRJ2{V;Gp`-+xMz7L<G$DUYUcG0(LN5fv
zS6^L&sCsL=PiA>cfs`m5HGD=t9*_}OpKCT>epg+jid2Lh-*^YWc6*|~d7WgD^u6k7
zW+@^DYwaYY4fn$}<Br&moY;Gx3PYu+5I@s$nm}aGqlGX6Fs<y>Mi6&lvKKw=<aVD-
zdx%>g%sWvz4zmM4GTG-7=Q@$re6BdUkJ;Y>lw&{mYLgK2n2eXYoBWC@PI*3-iMDH`
z0VoRo%+JwykcraATaCZ;T3Y>aU_@iFaGX|DX?<eA=j;sT7ac)%8c2yUlQa4jhukDi
z<tQulLrkLqMuyN4O>hw2kN_()%c$w0tOVzQt_eJdyCg_8+^~3J%k3wbV=SjU)Hmn`
z|83gfc5gTsv5C<UztQ)&U960>mwed$T9`CHuaUnLu6zV4><tgc(NbEeTc3CJtKB3#
ztp>B4b1k>YzGut!qE}_}H(P{SWT2%flTd>^g4#o{Q6<H1uIp3jCVpL2F;CLKihZA0
z1DT^jEoDgGa0WU5xiX9`UqshuSKg!2smLs}=G|&^W)p8*d#zzsYS1xwi;*%b_yrI`
zYZu71E0`Tf_Sk}(1E%+L9+~z{>E1>2CN2>%z2m`{I_)Fx+5T{P_iI1>?=)5+0Gm1&
z;9%hC9}`$O=UY)KU_}}Sh`xRkbF9|jI9stx#54EYpt;885=a+~w(4L0zRj-^g*u*Q
z?8XpfLo1l50@}By`8g1?J^&y@-t}lG(7&QqBi_Wa+U21mb=bZr@7tek8<f=mP^<gi
z$bO0WRG464VCX0rA$QEbvQftw1YbIMpFly&n;hzBGrr2N;rRA_<V)I-y8ROqW(ZED
zL@PMU%H(M<0c!~1k+%;gh<H=)yu<OZWc?rm2>V&xaEosHCNKkfi`UpRi%Iy+qJ%!R
z!jPbLqFIzA1hrF`e=2dw8`EKOIfxF>k>6pdH-mITXY@G@=7Ra0WC>RTym_gBWWqD1
z7S*K8RQ3swE|Me2YFtX>=;~OUvH(~mnO^w%3AMYlM9gg@#l$RU=_;xHZ!3r;>{X+H
z8*(an-?^To{%7}Oy$K^7xGcO}U+th*H~@ELV4@iFXo8TwQ1dS0q74i%?Z~{I7d70D
z41-nC8#OyV8m~j=%MSuQbL^?dw_axWu5IqgUvVvff!W8?(24^&qeQ~~tzou2o$!aV
zj{@3(H?Ky?I|5L8xy~AvF>l{OroNa&+Fi~@KgE7uxY?4j^SJvEJk{Yf1fI|AdfqcQ
zEC?y@`ElxH{OhxpWcCeiI3>vorxKGIm2=p@O7X->5DbG*@|n>0Q1s5*YY`^TOB2_E
zY{P43bF=gB@=xrSnSbnEtaFsXEEd3tx{=1aLtwKLSk}Y?%l118PG#ANS7AY^I@$BR
z-O(eS+eQ%znEjXc->zZH@+#{=TWK6|Zm#a<Kr7#i1%<ww0Wv^?3{dQSkKgp62JYDI
zrn#>z2>khI^hZFZ1ohDK0&ExjBxy^s39fS)D%Kva$sR&lt)1hYwj%A{%eehVz?H@Q
zq9w(cyB0z>|NDIeuRHwqr=56i;l_<y&0x;t?6DPmU+a+~@$%&C$Y>CfwyqtX=-U~R
zRARgSmw<Yg-z}<~yFr2Uq*ms8tvImn$>YRQ&j_v+$I)gtIJC9Q7<VTz3^0Pfu5|g3
ze^vi}LmD>Y;@=qn^@AM+1e^xJ*;M*%)qO9K>Zv#~m8R;Tgv0fITPw6~eWP-783hwC
zfm6%<7s0=@o)dYgVkaa3H8pO=%SW5$mV;+2Q!o@DPJYhj@(=lnebjB<d9k#?jZK(o
zq7C`7eFuvKg`IS*)3_t--pO=IBCU^anzwHEnaZs>9aZ@#xk{D{V({E2-?uO$STC=-
z8#|PcrpPLiKcXvN`X%lChyld9)qzjEjRa;KgpYf?i#0#@RaCu63r^ckBf=!1z|+(z
z(J7wZd)3oL;!_-;Q1u#}^1hv>YIe;-9V4jjQdj{DToDq&jSHs10!s}*)}W3Kd-B85
zHD>&9jEu3PbKOmpZYli(GaJux8=P}Jb7y+GW^uDX7-I3%Dm&N8m#C@<_d5*$oDcq&
zTy4XLZ<ikjB<$<O#lsahYPFp^H_M|`P{3Cwm5H3$TZH}5^>R?4vIrtkLY0cRoG}_g
z3?83Fk1i=BJQTmb@hLH#W*KQ`Mk+(d1pqucL9`jKh-MvQ#BD>`+Hr?Y*W`O40}gXg
zE<PLKt)$Wzu;Hr1Lm*ov*YFD!ps=m7g8gMcEq`Vl+KrY0AR?_0m@QwjU1hqE_LD%a
zB}DY<vvI~qhGtcBt4-i>{LTi0hpvPtvqAX++e`Y(??z76vKQc|2v~qc#<^RHIe*Cb
zn##L`+Z7>_s}DgJ06-f5?~Q<dnLs$e>isbhVJ|#{S{9bNb((hZ8n-X10w-Q512jJ+
z#qcxFgbXCDoPQq1P-65N{zinl_^fH<_@h8S{~OsQdM1+cFc3b@lmM2K8QHbsslq>(
zH0Ol`0JN>cWMX6=6>m^L3|3{%{`M{leW~b8YHRlUh3|Wt+hF@SmaB1%qgdVCRahTb
z`C#6^D+6Jol^=6T$dkfA8em`SuVg{c&cH>%TAXhXU2Mh**Ymee4oG76_7M=kYm_q*
z_if~fK(9V%AT7-gDQX$Q3I@0|Y|-y$LX%>8KD)o%Ll2IbUH-NMMTDI%npgpUKCOId
z_$ue@d;QkiYIR7_niG+U8UWL67p4Yhc=I|rq*ZFyjj<;#KF$jx7MOfT1&~D6iDIn0
z<Pd1KOU4G2d{oA-ixdYcdy{t4!2mb2ewYRo@cVYa-9aCf^Rldao7dfNNPnP|-cs@=
zt)wXM^MVqF5Kn3e%cP!8jxCcxOev9>VRYl%N9BrK@DF0QImE^Mr3uv7B+6^~YWp^@
zy0G`lx_PPyz!#e!Ln<G!!(nxW)dL!I$++|CrfZvrQMYag<HJ$PZr&@eu$O||o_JcH
zz!lXh2ZeuEWTwOa4G_Kqm#@C$jrWwJmL(DKstVmcYq?zRV7p29(|ighju4pb`N_XU
zJnJYJ8(^#Ny%9l%4jQsL=$7)wGvz!|oro7M2~E0NSt2O38Lt9urf`nL#F{fqu%p2r
zYaz;>ay04}Vo|KJKO9>M1320urfy?@Eg^57dMI?NdELFE#ie;@s(EZiU5vwmSihDS
z-OXP!b!>S-&_Z*uN;UCA;Cj^S_Y!iArUCHEOBEs5hup~8Jt%g4$Y!$o=#Vkv^Zll&
z&IvA{dQXTDp(xU|%fJ!&mQXgP;nz`)%|7u16<V9Vk0hJ#!BRnz<+Vz!TzExA3MQPA
zfl|pW-RAVTdeU_9Z*(y<p8zgrB<0Z!F6YzDcWPG{pbG!;gme2Axk|s-S11}WKIDB9
z?Zy~{O<BbHXT?ACmlp&yYeA*@jnA#b?C${^CvHF8=vF^=60uBGxFW6(jdyem8pN3B
z)w@@$l*>x|ujwa*XvPg8cr0dA)p4Yk+@C;%JZZz<@5qDu=OjajmiJDtHH)9O(eMM-
zAfZ7Qmx@+{A}JJgFsWu><H$fR0dYgw*+E+qicKlIGl?uN4)EzdQllzK#ZiSzZz<CV
zoX;o0><|d8fl0Z8uY*sE2i&&vump*8-CV8FQH^-LB=X{)rYH?>jjS4@6vm2fLR8oL
z7?<n}I|Cp9ce9=j0i;!ERuBWb^f$<ifBvHF+Mw|Ln@J%pKHZ9ZC&}irCR6Jqb&AoZ
zp7)kEchDiVQ~`6qMfV{A7|mt|+r(?{Y37kh$PIKeZdWcFQvTC`ud=8P(7iM<+3m4^
zWn?iz3dlV^$yw^ND`DctT|2cM-{SwC-nqOpgIkQd)pdhb*6!cYQhTTsTrVJUtyJ`x
zGDH7eiP9bO`22pO4F<*$&M#MNXujf8|E+60_C@&0)Zzo`9seWxH(T@!V%*~|gbvV?
z1Sfs(9iA2!nRC3C8!n6Yu?b;p?yK$RRLUMyprKQpgk;&M^KZfc5d-5d6+<J%2f4HM
zf)AF1%jhhGx5IJYV`^-kjXqI)FzIqx`12zRQ%|U?plj@ev@qu#vCFutZoB0}5zXv+
z0W<ttMB2MBL_x$Hr+il5#2QiQE1ym|8R~f)v^RC|PG<?a8F=VImeC;FW9VIQ)WQ8h
z#~G<bn+OP)pPuHJINC*9C=Df0RnBeRW2!ZQn8>24_o5b=lbNdLuOkDd48*TBHdBjI
zf2n5;|A6g$X7#>7)T%7dMB~SLh-h&`(;?L3T9L#q5O}Ej6F$v+9x$Ssp|0@5uX0E;
z0vjNbZt7Mi%HS2RUgMqHL-tmfWW1!=W@<B;_i4?kOB`A`_pVosmd6kFyPoLPA-pSR
zx&W<In`e<VZj^9W!YaX!ULlc0lXKyX*#f8+1n_i8S7j__r8^7ZqcF4#4R@`o5kCZ+
zAo`vy_4_+?H(f|^t6`e)RIYDyX_HQ~(1XKVxT4tK*GBP)CG05%)k-plknT!a7+{p$
zR>tfV$C>1#%iEyjYyMG!)!~eQpNKZxTUrd?J!bG}kKXI%S2Ut%d-FOEfryX=-N-TP
zE<>gw0I2604;9sVyPUSRsP-a+fy%(4K8rW+^ZX68Qp(rY_yn{w;(;5Vcnjs!wEjBj
z#2ukmY-$a|Zf^;*TRDh&omNUqJ)_=jv>5F!M9x@4c!A>010wfsTOE34Bn4(vy3z?o
zYf-}nqZt^zGAAD@eGqsYyaI~?x?}StBK0ac`9+zG*e!RemLE{55io`q5?0!w3zimH
z$&xX{(xjF!H=lQ;0k4`69g8z#sYrY9O0#1BXg*Q|Hf?{}Z4*bIQt)OuG&9f%7*Yv)
z)i=(Bz;On*7I)Sk-u#pG&QFHMY<h+7Uc7!;GGfobn=F|_oJ8v5<on`@D*V3j96DUg
z5RxU~OK;KGo3O=uXFw<k>GBh0Ox6#gN36s+RUZ8eWUzcgyBu4__rBrp@`%BY-)2D#
zZkO1!t8KTdJwTC{v5GswLZvhrNL|{d`FpSw1It&~2m;#L4~?(KZ9|tgf^-xBF@`tp
zV6An%=XYFH;=1bcGYwXjGGgdnwB&5rQ@htog`uvTvriiFkj?Aef@NVVI)J;dfY^#5
zgSERhm%Bfy(KSO>%D>KBceB0{XZH~_1!8idfCyy~6THoDk0hh?!fF3@!E7&$OzwT6
zBf-(*hiC|2Kly<ME4n@S$XiT6`p9G<4r+ZSM<%9bG&bOC@BTgy1NR1XihKug23yTU
zY`gU2p4299AG;-JoF7QfHo`!<g_3H^xSOeDp+9$XdP(Zhf0-4|mtC067W~!f&@E$O
zXjJ4k)QyIXf!oV@+f?idsdGz<)f!Fzj{>6eqtsK~cp&GBei0=D0GWRVLmJ>udN+c+
zn3Uq}dXrlDDF7`zRrz{WVdCseT>LJ65ruGm%#j#_@cb;R1T!fay~I%D%aJ(r8}rJS
zfD<_n%|TVsNqev?AQ$HIRc+S6C5>R2ub$E`Km|n5W8n1s?CX-{w69%?C}!u;Mz`a+
z3u3I7jF+!uM9+o989_9QXJvAh#X(`u30WVu^)E-#YoYHaZDKC&31#Ux2$y~)2&6|r
zPG`v3STVUBw+3~q>_8bl0MBHy=wzMiZI~hX?tfn#3H0|-XWaM|HFEpic~5-Q?nt+Q
z{b=)U3<(tyu4>W12IpUFaOODK#l^vUdRMTIV>ePV7H__u>fq=ovzAo=K-|?W`Yg)X
zLjH4PgX``e_rhC;9ouz*yfcs38@>CHFE8n1wnmHR!ZsMkC7!#|LwL?rCgR;4@=ALf
zlKhcD3ue|+u;2Vwmpq8H?-QXuscM)Uq$y~6679_#d=gB5H!Tr@P<w)4?Xtgj0zOBl
zo0%P+AxOki@}gD`t(npxK6%FoRyoJS+(NC{seJ9uHEz<F*Io1OA$s}dp#6p<tO?2{
zlR<jPdV%CUeU0f5tuhF$74OptC?WIoS~uFv(=h#`4~g;NJ@s@&{R4n==8VYpr|9FY
za0L5%oLrN=2U7_~lKPsfw1Yd=ZLWo|$l6RtW2FTPcLC!x$mwX*FL`|yqD0;B*Xdj>
zz0O0T%{Hq0!U*DZ$oK47Pg6I1v?m%`er7^-ZaTV1JqxVYdc=C2PjeH3Sxxq)Tyx`e
zRJ?I1@4_Jn4FClGa}vkRqsz*J{5l5-RUM06SAeWxhAW(X9nejUfNs@Yx#~G=yz1Jc
z0;Bp6(SFrxeSVwdp;CiFk7%9|+HSse9zu26nDdT6Ltz}ov&*M1K4C78BnX?i$&QGv
zP{Lkr>YFOiB};<$ah3T6P}epgAY(g^1ucLjO5dS!W}_uS*n7*l<WX+P<O=)x=U0_|
z<f#`rfGHb-SM)+a*A2#|JQR8f4VHVek7o!?!Rl&?O!Wc_VEd^pmT>zwip&UuQD7el
z>))hZ*|^;)$qx?dJ*DmX<N><vaJXhdyWW<*8gDwNf6M^{=frr_1F<MmGxjl;%jweN
zHibXa-yEHfmw5wJ<ng~jlLsj=PG7*Ld~_sB<0u%o{owtuNraO>=wXqe&GwC*lgoUV
zlwKj0MbE&}vh=f_aor8N@zk)%!WR6nRez;T0W9aiC9%8`$>b<GsB-R5%gE((j>;a~
zh9DF&2ZFOZ%mpUoG&cV%1zp?3Lis=V0e-7uWD9rd**aexBlSr>Sr5*X-TCc4b|YoD
zaNIaxmb9=o+Nr*c2J*~JLbkTP6x%uN!|?a$FF^D2DjBDjD(onYd*@(?@I1f_Lmab>
z_crT2(Q95Ra|J{|?w^#PG_i{nQ@YY26|zT5#u`^6{*Z}HjKzSlx>FV~08wynf~v8s
z<bs9p^Ja%Evxeydmeq4KZ^4f?-$C%XF7zLY1Nz=Z&O;p~Ha^qdz&iEXM&&pX0h@gL
z#><Z%A<^ig)e3jmZ~6S)@oIxh=A0iyO9^|L1(Hp`B=L>7&~%x}wB{Q{mHD91VTFNw
z`YX%d<z5r_`Uo>QpPzbyq}X2i6(7IY^?rM3lwlB>Jf4>NRmMYachY`s4tVXRP6@WQ
z{)LtJlJz|*4B{|2xOgw2AJyBwDoB&LI&UZH?tIou8rX`mMX`BEiAyB~r->QvP0-O`
zEDqF9Nklb${(%P#dW%l|EMec~2?@^dFx2cI?+K~q8uHJPvzSN0D9*gm4mO=RItg7N
zK^SwD1l=vmR86KamfN`fYa{=oWPrWYjl<1C1R#Aq2#m}L*R{x1M$R-A^!=l9(BGeo
zQEpnWo6e0bvFKNNe~v*B$ekN(0oss=E2)tQX_Kz^QW@6_G`b5SRgLe)v>rT*QT!NC
zF8>JwSLmf1n_*fr4ss~XkRwjS-!lBZy@_`*eg2^_KUw!AKDIti874HaRj@RwC*<WI
z;NS|3OiFqR#}tg2-$y@~6*d9=PIwK<z68&h<i)NJW&pXOZb%Fp2yK?)bXi9}f%Xsc
zL8*{`N5VmMOgP%Up8f%56kVK)Co?S}2n^7Vof)z(WvDw(vF*`G_0>+03q)reJ>AVD
zlIHm2*ZIs597o#0Ui0@BrR+2{@remb)aeHTh3DM*D5*@XNIFl+t|Ndpvmeu3hyKI4
zhr+)&o4WgY<TW5&#OvQjN{si}eeC4BnVWj`TX5qhOiJAS;12=IwiNyR2oK$7wtod9
zUx=TlJW^r}C;+t0J*)`dR1EyhDA5@hxsicE=cA#_owU>eRP_K2JwRG<x@8UzJ`$Xl
zho2sAyZ(=6o4>`sAK|UpjHP3$LBz7tXVX)aN-yCvUkU}V020aWrtC3z1tj^*WXiM}
zSjrYSmOWvGvbi@+6RrM(0c?du*P{4mkbc;_6<+4$yKT*}Y9XiZnnJ}twQ$3(w8PX;
zCT6dBBOowxLCm4<t?jQW`SEzpjNS3A)-NM5AKP|~8H_sLofF_#ENhw%i;$&bSP^kh
z<uZ8&cERYVlI9f#=J;<V1JX~Y63zjfyHdIz&bl9vHw!Oa+9sg^q8#I6!{^PHsN|9H
zv}B>6;nsyclY4%e9V$r9qJTKHb0h=iqka~Kn!wT6VDG<-j?QhCKA{%&+iOn(9RuP_
z^g6qCbEx@zj4r#vs{h?XvU*oQqP`6n_%AVGj_Y_}r!waZ5V1ukq%f<UI!4Ha93-?D
zqFJ*LbZM`Nl};Sz4pWBi9CjFfA8&J-U1A|c^W|~gdWyQEQ$i3r9<3km60$>H9z>V$
zpNF@xp=5nr$N~k&o|KXD6PHYt^+Vnqb#dFb(pwNOqxA1pe`Org{Jcqjy2J{i?9E+D
z#a%xf(m>+X-pU)^CNU4yQD?k5t^7!_i-Rh8T)P0g_QeycAKX`@J!}@h`s>80z!=n>
z_s%Al$i2g4+TK2ODo}Fhqo=9hg?RRf&L8x??z51`vM@zW0Lg=}a~?Rqd|!0%F3Fzm
z-MwQ%+>G`~kMyQeGxpy$sp0waOSP>p`T8=R7oGx)xv8ODnr;$z=W7A>c2j@zfh0{&
zKDTU?j0BN%%T>3qt95oZY@bXQpEQyeZIE!;__@fdZ~lO|Ksdux!SfPk+UsR>R&PyY
zuY;~c@$~fuwzw08eTIp~#IC3kk2G9vYEN6Oe%|yFDMa^mZ~q){G3Rp}Cp@T#xdR;)
z4cr5mql|jt)j{03P%F9_Z8@lK62%i`_|*iG$`;XgnzU{e_Wct+E)UlCe;O^#VC4ul
zMt#-~T%VJ|(1Xl1>H(h1=HG*JBWRJY!0rAUziS-<_#M%b{XUldZ~lNFXG~xxrJ1sw
zdsVysHWmXwqyHT39F<;!Q^_Lw@uye$kf?Z!DQ`^k)8g(fcZ&SkF$BSE8ZO;0p$rH*
zPJuCv`A4F<e=+EX=Sx&nK~i-#KkIJ<6$mu6wEz}>NIHs__&gk{Xbiz=iKdZnMc$JJ
zlDLVo^v^7@`)pe6CS|7VLI5Bq4E!;i$3&{hf;L5R$X|t{ST(tU@^vN$I@L{)?-P(t
z`Xq|+g#~@pNoSz@1PAL{l*br2F&gR)$W*pSuLZLb-OmSK%_SsWK&J)$7ZH!B6fz}|
zH8Gf7pDAyoEtl@IhBS+|)O{8ORJ0vtpaI?rM+6AdzHB7&WFQOk%aZ4jaz<Mo^|<u(
z)CT<}4<}1e{j<%+zO^;jjK)*@>UxzE7P1noK30uXU)Q#^xSmyu*q!8iBj+~3Vz&5A
zt^pE*U{4Ew6Gr)$(~|3%sqz{e6ja=C(;yLT79w)|Yi0XDe@(cQ(N;C-pD9luTtc;!
z{pCfn4Qmb{j{t)`{D-KU|3)~i_VE@H?=Gg|wkvd-ju#wPH8XC(;TLy2PvME0>il?6
zuS-61fXHv%?i0>ykJY>fvC>p!m;X4yPvA<7n=Ao6uL0_xGQRd94~kjB*bUi_e*?h`
z`CHxQFyn7R;c~%h=I_aX$<6)u1f1~)YnaXX793r+aRD^wKixV3B?3X<LqMy;UUqWK
z`ND`w0n>MA@{xw}PV?F8RD^gPoyob%KvqG{nv|%_j;fJ3r{=PInQFJnkIIArVlY1;
z!By+i8^o~)`b!Z`wplUujw9xp_1r<3gU5IqR8q+uQ;Hq6r)@Nt?Fv4YBlDbDY(s7p
z)Z)r37u}UZWB`1(d#=Fy%5kL)`6D51T*3v1myJkC-9^qBnPe{lp{GUt{m$D%(Xtlg
zyr@IsDF69vYSSTdB#gwm^v^wM567;i210J%Soa!ArYhSpx)<D7=8TzMSQ@F`G4Mqd
z<n)I=(Qyj%@Y9B114ghB)<@4eu64r+e=Zz8-6yzlobr5g@PBa6#1Fw0+*b6deW6AB
zt!`GRzx}}ok7a9XEm0^OBnd&n2mprpYh;kwN094)8>L)=niCSTX5zZcLp*L=A&<(6
zq<oC^zU)532su!+cD#JrVter?uHPG~i>i?>cAg^@{OH|#B~yMqr4%zOD(>6zq1Wx|
zF;Fh<e)72vNg7(@&*z}O;55Sz%|k7A+YbP6Hkl(7g59r_h*&u14?U@1jqXUsZK1R?
z>Q)ZO62md2+*0$qG%^_4YcFWdiTlfY1b$e<FQ?+;<V~D5e({bI8`3a@ax-vKA^k)O
zbO#WS@Sjd&B(~ugxFm)oNyjOtDMc3rB7)QB4t0XGYja@8F4U+=W_Hzf*rxo`rOwW*
z=)O&kUbOwT@sr=T0o00K(mu@8)upqaR{`0zj+9teYIE}66A%BUv9jiLIclxMFg^Gt
z2phVb*Oy-KV~FMIq0$v&b+md^1TIJLUH%b&Pyuwt?TMg>yV={#Zude!L6)$lP`AqB
zb@~2=S^AWxwb5C@HIeQ*W8FJD*XZUGh!qxSj!IX8QK}>AYpXvmF3ugChYx<Ny!*A+
zJ_%DoK=YG{tNzgNS!%g0NV|vf;89fhQ@~rd)UVqI3w|9(u=nv_@u>lS6$*`+`1;Y8
zm8Oo=;GAf^+>e@z)t{nXwp6bO^-Pb9?+C>Tk$amX>Goe{jkTx~grMc>N+b)3m?Lyd
z4+SF&hEP;`Ah<#pADiW4!*|hu73zB@*QLV_gz1ok1gg?PSrNYWg+vd;q!?&#GxY+N
zH-K0-qo{#H>O?rwHcKBU6atx@?oEhOr(gpZ@}_Dk4x^9s{D<g!s~{FA&hM<+Q24@{
z5`SaVR;T%qoxaqG)+n{6sc?@=?S9+2aL&2EOb%<HzS$T7bpBEJ<KFC2CZo%pWf`bQ
zToroRJZ(rJ{XA*)?|T+D2=aO1-)kx<@KRGy?SS=FRv6Bx7$5X*m{db`yy;;M(c>~f
zlHhvc`{X{>jZa8vs5sF14$pk(yZjd$QKxV|G`<u@SoE#>Cw#VfjV>Gi8l7S+B-R<r
z-(CB%sFdthXu;?bo}vGx{wsVaa;ktPY_C=j+tSH3qu<ct2LrW45FVs<$`$wq!LEcl
z&Zz|=*P+lQqExyobPMbM5vF|`l2irW6QZYfJ6Y^Z6ARA07|IoB%0ZEbqkrUap1dbQ
zpy!IV9(;#IZuNtHt;;B=SDyURM1uw2q0(JwGvlf2YpLAJBaG;w0YIRTg2sUal~HE5
zBEnGBMk&T1PFf)|-)F&+DdvY?TY#2D35aia{ZhN(TSCT<0F?i4m7>VQAo%buUPRh)
z)QCJ|<#NEKu`rYs#wXJQm~cqejjWp$l4J3d{S)vmCVGwjmIN(^K!I8Gn2@bsfiiT<
zkz?3aXNCk2YIHdJ2(3fFEP1Osci{38s*Y-_4%LWkmb@dh;Wf{5&OnYSg$SSsmqY&#
zgfk0MQ&yM~eMMp{pPB-kaq5jxYM2N{H8E<X`N!p7aK{#}^-k%=gQ(DU&=>&W=#)?{
zY0bisQ4>5n7^M1b?qE}ucMW|ztq=Xhc-I7T2bX_F+3t~*oi>nYlk?@EDz_CWD8Ur4
z5Drm`!QD{8xg$$Zg)fp3>G`9*q6PCRT~kc_qII)vYqJxBK^TJ=nH10sJS!x3fFb&C
zxn5h%!=Gp{NANN|aX{0yy6xA+PHi2YIoLVyVkcf-?_No&*5hpMyIO7-8kFx8`HzNO
z9Eio-rTe$yqmmo>hwdUAR}#Y>Z&L!JW{0ymGc7_InTFoPH!xZPDT#G)gw2c)fBUcB
zY@5VV;35FJ1VS#xts<?P61{QPZcL(}NW%E@4JS)rN9{F`U?9iZ9)dRmyotgErc*{p
zp?5g{cavncEnOc##X~g?beyMKmi(UskC)G-9y=b!0kkG20Yj6Yl9xFbq4dPR1QCmO
zS4&8@xDNOS{ofH;zao;bv0h_JhD)nP%J2^Qwd**L0+u}7#X2*0-s;8I`60ePFS})I
z<TqOPn)O7F*vJ2snHmUC-e|T-u(#tHm~{+Z9DDx1u;v?KRBawaHUgC_rfiaO;K`e6
z>*8J{G_T9SeAQ98*Z>KHB>G&XnNxJf@gRua^feK2h%lSZ%?%;u?MvV1uHw#@4|_*8
zb4HF_lqsk($D&9=_)oM$E0{>SP{ya4e2}pi7pqy={BpW3a@fhxk3{3XTRvY+_&9SO
zYxts~m;lIEFOGvD1!80xr$bNSq7cmuxlP6dYl}wvCtsU7RWo#k>Vx{Ds}Pp&=>dy$
zbm5Zo&yQv{0;n}2cm6o)sZfvfIX5ufv+`k^D9$1vEXvM?cu8Vw*$G6PB({FywL&6_
zaLC0cxkiB8gm5{@fBOqZx0m}T-RP7k|B*<dh~giIB%-(=_%ejKNniitF~#h+e<Yxg
mBK-dE8vXwt|GyLL`CVy)8uG+6P8p=t8XzyNB2^_}7WzLyc0RxW

literal 0
HcmV?d00001

diff --git a/docs/numbus-backup-server/requirements.md b/docs/numbus-backup-server/requirements.md
new file mode 100644
index 0000000..ca8528e
--- /dev/null
+++ b/docs/numbus-backup-server/requirements.md
@@ -0,0 +1,31 @@
+# Requirements
+
+### To deploy
+
+To deploy a numbus-backup-server, you will need :
+
+* A **live NixOS** bootable USB disk.
+
+You will make the **target** machine **boot** into the NixOS live environment using this **USB stick**. Download the [NixOS iso](https://github.com/nix-community/nixos-images/releases/download/nixos-unstable/nixos-installer-x86_64-linux.iso) image.
+
+*On Linux* : Flash it using [Impression (flatpak)](https://flathub.org/en/apps/io.gitlab.adhami3310.Impression) or [BalenaEtcher (AppImage)](https://etcher.balena.io/#download-etcher).
+
+*On MacOS* : Flash it using [BalenaEtcher](https://etcher.balena.io/#download-etcher).
+
+*On Windows* : Flash it using [Rufus](https://rufus.ie/en/#download) or [BalenaEtcher](https://etcher.balena.io/#download-etcher).
+
+* **Source** Machine:
+
+Can be any machine with **Nix installed**, e.g. a **NixOS** machine.
+
+* **Target** Machine:
+
+Can be **any computer** (desktop, SFF, tiny/mini/micro, even a laptop). It could be a dedicated server that you bought or just some computer that you decided to repurpose into a backup server.
+
+* **Network connection** between the source and the target machine.
+
+---
+
+### Next step
+
+[Configuration](./configuration/index.md)
diff --git a/docs/numbus-computer/requirements.md b/docs/numbus-computer/requirements.md
new file mode 100644
index 0000000..ca8528e
--- /dev/null
+++ b/docs/numbus-computer/requirements.md
@@ -0,0 +1,31 @@
+# Requirements
+
+### To deploy
+
+To deploy a numbus-backup-server, you will need :
+
+* A **live NixOS** bootable USB disk.
+
+You will make the **target** machine **boot** into the NixOS live environment using this **USB stick**. Download the [NixOS iso](https://github.com/nix-community/nixos-images/releases/download/nixos-unstable/nixos-installer-x86_64-linux.iso) image.
+
+*On Linux* : Flash it using [Impression (flatpak)](https://flathub.org/en/apps/io.gitlab.adhami3310.Impression) or [BalenaEtcher (AppImage)](https://etcher.balena.io/#download-etcher).
+
+*On MacOS* : Flash it using [BalenaEtcher](https://etcher.balena.io/#download-etcher).
+
+*On Windows* : Flash it using [Rufus](https://rufus.ie/en/#download) or [BalenaEtcher](https://etcher.balena.io/#download-etcher).
+
+* **Source** Machine:
+
+Can be any machine with **Nix installed**, e.g. a **NixOS** machine.
+
+* **Target** Machine:
+
+Can be **any computer** (desktop, SFF, tiny/mini/micro, even a laptop). It could be a dedicated server that you bought or just some computer that you decided to repurpose into a backup server.
+
+* **Network connection** between the source and the target machine.
+
+---
+
+### Next step
+
+[Configuration](./configuration/index.md)
diff --git a/docs/numbus-server/configuration/automatic_ssl_certs.md b/docs/numbus-server/configuration/automatic_ssl_certs.md
new file mode 100644
index 0000000..3df10c0
--- /dev/null
+++ b/docs/numbus-server/configuration/automatic_ssl_certs.md
@@ -0,0 +1,7 @@
+# Documentation
+
+## 🚦 Configuring Traefik
+
+| Variable | Description | Values | Default |
+| -------- | ----------- | ------ | --------- | 
+| CLOUDFLARE_DNS_API_TOKEN | The Cloudflare API token with "Zone.DNS" permissions, used for SSL certificate generation. | "bA7hdvCOuXGytlNKohi3ZGtlVpf5CHpLuCMiJrE" | null. Not setting this variable will cause the script to fail. |
\ No newline at end of file
diff --git a/docs/numbus-server/configuration/index.md b/docs/numbus-server/configuration/index.md
new file mode 100644
index 0000000..f0dae2e
--- /dev/null
+++ b/docs/numbus-server/configuration/index.md
@@ -0,0 +1,19 @@
+# Documentation
+
+## ✏️ Filling the configuration file
+
+You can deploy the numbus-server without using a configuration file, **but I would strongly advise it** as it diminishes the risk of **typos** when providing credentials. It also creates a file that you can **keep**, **reuse**, **consult** whenever you are **in doubt** about a certain setting.
+
+> 🚀 Let's fill this configuration file !
+
+The configuration file is divided into **multiple categories**. Some of them are **optional**, some are **mandatory**. Here is the list of categories :
+
+| Category | Available variables |
+| -------- | ------------------  |
+| [Live target settings](./live_target.md) | 2 |
+| [Server settings](/.server.md) | 7 |
+| [Mail settings](./mail.md) | 4 |
+| [Traefik settings](./automatic_ssl_certs.md) | 1 |
+| [Network settings](./network.md) | 3 |
+| [Services selection](./services/index.md) | 5 |
+| [Script settings](./script.md) | 1 |
\ No newline at end of file
diff --git a/docs/numbus-server/configuration/live_target.md b/docs/numbus-server/configuration/live_target.md
new file mode 100644
index 0000000..93c1787
--- /dev/null
+++ b/docs/numbus-server/configuration/live_target.md
@@ -0,0 +1,8 @@
+# Documentation
+
+### 📦 Configuring the target settings
+
+| Variable | Description | Values | Default |
+| -------- | ----------- | ------- | --------- | 
+| LIVE_TARGET_IP | The IP address of the target machine. Without the CIDR notation. | "192.168.1.28", "10.10.10.45", ... |  |
+| LIVE_TARGET_PASSWD | The password of the target machine that you set using the `passwd` command. | "my-password", ... |  |
\ No newline at end of file
diff --git a/docs/numbus-server/configuration/mail.md b/docs/numbus-server/configuration/mail.md
new file mode 100644
index 0000000..fc69931
--- /dev/null
+++ b/docs/numbus-server/configuration/mail.md
@@ -0,0 +1,24 @@
+# Documentation
+
+## 📬 Configuring the mail settings
+
+| Variable | Description | Values | Default |
+| -------- | ----------- | ------ | --------- | 
+| SMTP_SERVER_USERNAME | The email address used to send automated emails (alerts, notifications). | "your-address@your-domain.com" |  |
+| SMTP_SERVER_PASSWORD | The password or app-specific password for the email account. | "your-secure-password" |  |
+| SMTP_SERVER_HOST | The address of the SMTP server. | "smtp.yourdomain.com" | "smtp.gmail.com" |
+| SMTP_SERVER_PORT | The port number for the SMTP server. | "587" or "465" | "587" |
+
+## ❓ I don't already have an SMTP capable email
+
+If your provider doesn't support **standard SMTP**, the easiest solution is to create a **free Gmail account** dedicated to your server. 
+
+Gmail allows you to generate an **App Password** which works perfectly for automated alerts.
+
+1. Navigate to the [Google account creation page](https://accounts.google.com/signup). Follow the prompts to create your account. Feel free **not to provide** real information about yourself. Giving your phone number and home address is **not needed**.
+
+2. Once your account is **created** navigate to the [Google account settings](https://myaccount.google.com).
+
+3. In the security page, enable the **two factor authentication (2FA)**. The best way to enable 2FA without providing too much information is using **TOTP codes** (under Authenticator label). You can use the open-source [Ente Auth](https://ente.io/auth/) app to get your **TOTP codes**.
+
+4. Finally, once **2FA** is enabled, you can generate an **app password**. Navigate to the [app passwords page](https://myaccount.google.com/apppasswords). Generate an app password and call it "numbus-server" to **remember** what it is used for.
\ No newline at end of file
diff --git a/docs/numbus-server/configuration/network.md b/docs/numbus-server/configuration/network.md
new file mode 100644
index 0000000..665aa6a
--- /dev/null
+++ b/docs/numbus-server/configuration/network.md
@@ -0,0 +1,9 @@
+# Documentation
+
+## 🛜 Configuring the server's network settings
+
+| Variable | Description | Values | Default |
+| -------- | ----------- | ------ | --------- | 
+| NETWORK_SUBNET | The local network subnet in CIDR notation. | "192.168.1.0/24", "10.10.10.0/24", ... | "192.168.1.0/24" |
+| NETWORK_ROUTER_IP | The IP address of your internet router/gateway. | "192.168.1.1", "192.168.1.254", ... | "192.168.1.1" |
+| HOME_SERVER_IP | The static IP address to assign to this server (must be outside the router's DHCP range). | "192.168.1.5", "192.168.0.200", ... | "192.168.1.254" |
\ No newline at end of file
diff --git a/docs/numbus-server/configuration/script.md b/docs/numbus-server/configuration/script.md
new file mode 100644
index 0000000..2eb5224
--- /dev/null
+++ b/docs/numbus-server/configuration/script.md
@@ -0,0 +1,7 @@
+# Documentation
+
+## 📜 Configuring the script's settings
+
+| Variable | Description | Values | Default |
+| -------- | ----------- | ------ | --------- | 
+| VERBOSE | Enables verbose logging for the deployment script (useful for debugging). | "true" or "false" | "false" |
\ No newline at end of file
diff --git a/docs/numbus-server/configuration/server.md b/docs/numbus-server/configuration/server.md
new file mode 100644
index 0000000..ddc7fd7
--- /dev/null
+++ b/docs/numbus-server/configuration/server.md
@@ -0,0 +1,13 @@
+# Documentation
+
+## ⚙️ Configuring the server settings
+
+| Variable | Description | Values | Default |
+| -------- | ----------- | ------ | --------- | 
+| SERVER_LANGUAGE | The desired language for the server's system and services. | "FR", "DE", "UK", ... | "FR" |
+| SERVER_LOCALE | Defines the server's regional settings, including date, time, and number formatting. | "fr_FR", "de_DE", "en_UK", ... | "fr_FR" |
+| SERVER_TIMEZONE | Sets the server's timezone to ensure accurate timekeeping for logs and services. | "Europe/Paris", "Europe/Berlin", "Europe/London", ... | "Europe/Paris" |
+| SERVER_OWNER_NAME | The name of the server owner. Will be used for emails personnalization and server identification (if you have multiple servers for example). | "Alexandre", "Jane", ... | "Numbus" |
+| SERVER_USER_EMAIL | This email will be used to send friendly alerts in case of problems. | "your-user@your-domain.com" |  |
+| SERVER_ADMIN_EMAIL | This email will be used to send complete alerts, including some logs, in case of problems. | "your-admin@your-domain.com" |  |
+| SERVER_AUTHORIZED_SSH_PUBKEYS | The public SSH key(s) that will be authorized to access the server. You can add multiple keys in the parenthesis, space-separated. | ( "ssh-ed25519 AAAAoefzefpoipoeCEZJCPEACPAcjapjcpajepcjAPJECJPEJAPJAZ yours@your-domain.com" ) |  |
\ No newline at end of file
diff --git a/docs/numbus-server/configuration/services/crafty.md b/docs/numbus-server/configuration/services/crafty.md
new file mode 100644
index 0000000..2f940c0
--- /dev/null
+++ b/docs/numbus-server/configuration/services/crafty.md
@@ -0,0 +1,13 @@
+# Documentation
+
+## ⛏️ Configuring Crafty Controller
+
+To access your Minecraft server, **ports** need to be **open on the firewall**. In order to **minimize** the number of open ports and thus reduce **risks**, the numbus-server will only open a necessary number of ports that matches the number of minecraft. **Most people** should set the number of servers to **1** of their favorite version.
+
+These option **only configure networking** and **won't** create the Minecraft server for you. You will have to do it in Crafty's interface.
+
+| Variable | Description | Values | Default |
+| -------- | ----------- | ------ | --------- |
+| DYNMAP_ENABLED | Enables the Dynmap feature for Minecraft servers. | "true" or "false" | "false" |
+| WANTED_NUMBER_OF_JAVA_MINECRAFT_SERVERS | The number of Java Edition Minecraft servers you plan on creating. | "0", "1", ..., "100" | "0" |
+| WANTED_NUMBER_OF_BEDROCK_MINECRAFT_SERVERS | The number of Bedrock Edition Minecraft servers you plan on creating. | "0", "1", ..., "100" | "0" |
\ No newline at end of file
diff --git a/docs/numbus-server/configuration/services/index.md b/docs/numbus-server/configuration/services/index.md
new file mode 100644
index 0000000..666dc63
--- /dev/null
+++ b/docs/numbus-server/configuration/services/index.md
@@ -0,0 +1,45 @@
+# Documentation
+
+## 🛠️ Configuring the server's services
+
+| Variable | Description | Values | Default |
+| -------- | ----------- | ------ | --------- | 
+| SELECTED_DNS_SERVICE | The DNS service to install (AdBlocking). | ( "pi-hole" ), ( "adguard" ) | ( "pi-hole" ) |
+| SELECTED_WEB_APPLICATIONS | The list of web applications to install. | ( "nextcloud" ), ( "homepage" jellyfin" "it-tools" "netbootxyz" ), ... [see the full list below](./index.md#web-applications-list) |  |
+| SELECTED_SYSTEM_SERVICES | The list of system services to install. | ( "clamav" ), ( "virtualization" "clamav" ), ... [see the full list below](./index.md#system-services-list) |  |
+| SELECTED_DNS_SERVICE_SUBDOMAIN | Custom subdomain for the DNS service. | "my-dns" | Will be the name of the service. I.e. pi-hole.your-domain.com or adguard.your-domain.com |
+| SELECTED_WEB_APPLICATIONS_SUBDOMAIN | Custom subdomains for the web applications (must match the order of SELECTED_WEB_APPLICATIONS). | "my-cloud", "my-photos" | Will be the name of the service. I.e. nextcloud.your-domain.com, immich.your-domain.com, ... |
+
+## Web applications list
+
+This is the list of **all the available apps** that can be enabled on the numbus-server. You can choose as many as you want, just **keep in mind** that enabling more apps will be more resource **intensive** and consume more power.
+
+| Name | Description | Additional settings ? |
+| -------- | ----------- | ------ |
+| pi-hole | Simple, fully open network-wide Ad Blocker. | No |
+| adguard | Feature-rich network-wide Ad Blocker. | No |
+| crafty | Minecraft server(s) manager. | [Yes](./crafty.md) |
+| frigate | NVR with real-time local object detection. | No |
+| gitea | Painless self-hosted Git service. | No |
+| home-assistant | Open source home automation. | No |
+| homepage | A modern, secure, highly customizable dashboard. | No |
+| immich | High performance self-hosted photo/video management. | No |
+| it-tools | Collection of online tools for developers. | No |
+| jellyfin | The Free Software Media System. | No |
+| n8n | Workflow automation tool. | No |
+| netbootxyz | Network boot operating system installers. | No |
+| nextcloud | Self-hosted collaboration platform. | No |
+| ntfy | Send push notifications via HTTP. | No |
+| odoo | Open Source ERP and CRM. | No |
+| passbolt | Open source password manager. | No |
+| uptime-kuma | Self-hosted monitoring tool. | No |
+| vscodium | VS Code in your browser. | No |
+| clamav | Open-source anti-virus. | No |
+| virtualization | Run Virtual Machines (KVM/QEMU). | No |
+
+## System services list
+
+| Name | Description | Additional settings ? |
+| -------- | ----------- | ------ |
+| clamav | Open-source anti-virus software. | No |
+| virtualization | Run Virtual Machines (KVM/QEMU). | No |
\ No newline at end of file
diff --git a/docs/numbus-server/requirements.md b/docs/numbus-server/requirements.md
new file mode 100644
index 0000000..ca8528e
--- /dev/null
+++ b/docs/numbus-server/requirements.md
@@ -0,0 +1,31 @@
+# Requirements
+
+### To deploy
+
+To deploy a numbus-backup-server, you will need :
+
+* A **live NixOS** bootable USB disk.
+
+You will make the **target** machine **boot** into the NixOS live environment using this **USB stick**. Download the [NixOS iso](https://github.com/nix-community/nixos-images/releases/download/nixos-unstable/nixos-installer-x86_64-linux.iso) image.
+
+*On Linux* : Flash it using [Impression (flatpak)](https://flathub.org/en/apps/io.gitlab.adhami3310.Impression) or [BalenaEtcher (AppImage)](https://etcher.balena.io/#download-etcher).
+
+*On MacOS* : Flash it using [BalenaEtcher](https://etcher.balena.io/#download-etcher).
+
+*On Windows* : Flash it using [Rufus](https://rufus.ie/en/#download) or [BalenaEtcher](https://etcher.balena.io/#download-etcher).
+
+* **Source** Machine:
+
+Can be any machine with **Nix installed**, e.g. a **NixOS** machine.
+
+* **Target** Machine:
+
+Can be **any computer** (desktop, SFF, tiny/mini/micro, even a laptop). It could be a dedicated server that you bought or just some computer that you decided to repurpose into a backup server.
+
+* **Network connection** between the source and the target machine.
+
+---
+
+### Next step
+
+[Configuration](./configuration/index.md)
diff --git a/docs/numbus-tv/requirements.md b/docs/numbus-tv/requirements.md
new file mode 100644
index 0000000..ca8528e
--- /dev/null
+++ b/docs/numbus-tv/requirements.md
@@ -0,0 +1,31 @@
+# Requirements
+
+### To deploy
+
+To deploy a numbus-backup-server, you will need :
+
+* A **live NixOS** bootable USB disk.
+
+You will make the **target** machine **boot** into the NixOS live environment using this **USB stick**. Download the [NixOS iso](https://github.com/nix-community/nixos-images/releases/download/nixos-unstable/nixos-installer-x86_64-linux.iso) image.
+
+*On Linux* : Flash it using [Impression (flatpak)](https://flathub.org/en/apps/io.gitlab.adhami3310.Impression) or [BalenaEtcher (AppImage)](https://etcher.balena.io/#download-etcher).
+
+*On MacOS* : Flash it using [BalenaEtcher](https://etcher.balena.io/#download-etcher).
+
+*On Windows* : Flash it using [Rufus](https://rufus.ie/en/#download) or [BalenaEtcher](https://etcher.balena.io/#download-etcher).
+
+* **Source** Machine:
+
+Can be any machine with **Nix installed**, e.g. a **NixOS** machine.
+
+* **Target** Machine:
+
+Can be **any computer** (desktop, SFF, tiny/mini/micro, even a laptop). It could be a dedicated server that you bought or just some computer that you decided to repurpose into a backup server.
+
+* **Network connection** between the source and the target machine.
+
+---
+
+### Next step
+
+[Configuration](./configuration/index.md)
diff --git a/numbus-backup-server.conf b/numbus-backup-server.conf
index 77b799e..2fa35de 100644
--- a/numbus-backup-server.conf
+++ b/numbus-backup-server.conf
@@ -1,88 +1,147 @@
-# -->
-# MANDATORY SETTINGS
-# <--
+### -----------------> ###
+### MANDATORY SETTINGS ###
+
 
-## Script settings
-export DEBUG="true"
 
 ## Live target settings
+# The IP address of the machine to install NixOS on (must be reachable via SSH).
 export LIVE_TARGET_IP="192.168.1.10"
+# The password of the live installer environment (the one you set using 'passwd' on the live machine).
 export LIVE_TARGET_PASSWD="example"
 
-## Server settings
+
+## Backup server settings
+# The language/keyboard layout (e.g. FR, EN, DE). 
 export SERVER_LANGUAGE="FR"
+# The system locale (e.g. fr_FR, en_US, de_DE).
 export SERVER_LOCALE="fr_FR"
+# The timezone (e.g. Europe/Paris, America/New_York, Europe/Berlin).
 export SERVER_TIMEZONE="Europe/Paris"
+# The name of the server owner. Used in mails and for identification (if you bought support or have multiple servers).
 export SERVER_OWNER_NAME="yourName"
+# The email address where services notifications and alerts will be sent.
 export SERVER_USER_EMAIL="user@your-domain.com"
+# The email address where system failure notifications and alerts will be sent.
 export SERVER_ADMIN_EMAIL="admin@your-domain.com"
+# A list of SSH public keys allowed to log in as the administrator.
 export SERVER_AUTHORIZED_SSH_PUBKEYS=( "ssh-ed25519 AAAAoefzefpoipoeCEZJCPEACPAcjapjcpajepcjAPJECJPEJAPJAZ yours@yourdomain.com" )
 
+
 ## Traefik settings
+# Cloudflare API token with "Zone:DNS:Edit" permissions for automatic renewal of Let's Encrypt certificates.
 export CLOUDFLARE_DNS_API_TOKEN="yourToken"
 
+
 ## Smtp settings
+# The email account used by the server to send outgoing notifications.
 export SMTP_SERVER_USERNAME="your-address@gmail.com"
+# The password for the email account (use an App Password if using Gmail/2FA).
 export SMTP_SERVER_PASSWORD="emrp raps vzoi vnoe"
 export SMTP_SERVER_HOST="smtp.yourdomain.com"
 export SMTP_SERVER_PORT="587"
 
+
 ## Network settings
+# The local network subnet in CIDR notation (e.g. 192.168.1.0/24).
 export NETWORK_SUBNET="192.168.1.0/24"
+# The IP address of your internet router/gateway.
 export NETWORK_ROUTER_IP="192.168.1.1"
+# The static IP address to assign to this server (must be outside the router's DHCP range).
 export HOME_SERVER_IP="192.168.1.5"
 
+
 ## Services settings
+# The root domain name for your services (e.g. example.com).
 export DOMAIN_NAME="yourdomain.com"
 
-## DNS service
-export SELECTED_DNS_SERVICE=(
-  "pi-hole" # or "adguard"
-)
 
 ## Web applications
+# All apps are open-source, fully local
 export SELECTED_WEB_APPLICATIONS=(
+  # Minecraft server(s) manager. Supports Bedrock and Java, Dynmap. https://craftycontrol.com/
   "crafty"
+  # Network-Video-Recorder with advanced features such as person detection, face recognition. https://frigate.video/
   "frigate"
+  # Full-featured git platform. Replace GitHub with your own and stop AI bots from accessing your code. https://about.gitea.com/
   "gitea"
+  # Home automation platform. Every smart home devices in one place. Endless automation options. Integrates with Frigate to get notified when someone is detected. https://www.home-assistant.io/
   "home-assistant"
+  # A modern, secure, highly customizable application dashboard. https://gethomepage.dev/
+  "homepage"
+  # Photos backup platform similar to Google Photos. Advanced features such as face and object recognition powered search. https://immich.app/
   "immich"
+  # A set of super useful tools when doing IT. https://it-tools.tech/
   "it-tools"
+  # The Free Software Media System. Stream to any device from your own server, with no strings attached. https://jellyfin.org/
   "jellyfin"
+  # Workflow automation for technical people. node-based workflow automation tool. https://n8n.io/
+  "n8n"
+  # Network boot various operating system installers and utilities from one place. https://netboot.xyz/
   "netbootxyz"
+  # The most popular self-hosted collaboration platform. File sharing, productivity, and groupware. https://nextcloud.com/
   "nextcloud"
+  # Send push notifications to your phone or desktop via PUT/POST. https://ntfy.sh/
+  "ntfy"
+  # Open Source ERP and CRM. https://www.odoo.com/
+  "odoo"
+  # Open source password manager for teams. Security first, privacy focused. https://www.passbolt.com/
   "passbolt"
+  # A fancy self-hosted monitoring tool. https://uptimekuma.org/
   "uptime-kuma"
+  # Free/Libre Open Source Software Binaries of VS Code. Run VS Code in your browser. https://vscodium.com/
   "vscodium"
 )
 
+
 ## System services
+# All apps are open-source, fully local
 export SELECTED_SYSTEM_SERVICES=(
+  # Backup your numbus-server using this client.
+  "backup-client"
+  # Anti-virus software. Will scan the system periodically. Will scan on-access the data stored in your services' data directories : for example, where your Nextcloud data is. https://www.clamav.net/
   "clamav"
+  # Virtualization host software. Uses Qemu/KVM. Run VMs with near-native performance and device passthrough capabilities. https://www.qemu.org/
   "virtualization"
 )
 
-# -->
-# OPTIONAL SETTINGS
-# <--
 
-## DNS service subdomain
-export SELECTED_DNS_SERVICE_SUBDOMAIN=(
-  "my-pi-hole-subdomain" # or "my-adguard-subdomain"
-)
+### MANDATORY SETTINGS ###
+### <----------------- ###
+
+
+
+### -----------------> ###
+### OPTIONAL SETTINGS  ###
+
+
 
 ## Web applications subdomain
-export SELECTED_WEB_APPLICATIONS_SUBDOMAIN=( # ⚠️ Must match SELECTED_WEB_APPLICATIONS order ⚠️
+# Subdomains for each selected web application.
+# ⚠️ The order must strictly match the SELECTED_WEB_APPLICATIONS array above. The below example would be correct if you selected every service in the SELECTED_WEB_APPLICATIONS array.
+export SELECTED_WEB_APPLICATIONS_SUBDOMAIN=(
   "my-crafty-subdomain"
   "my-frigate-subdomain"
   "my-gitea-subdomain"
-  "my-home-assistant-subdomain"
+  "my-home-assistant-subdomain" # Example : your Home-assistant URL will be ; https://my-home-assistant-subdomain.yourdomain.com/
+  "my-homepage-subdomain"
   "my-immich-subdomain"
   "my-it-tools-subdomain"
-  "my-jellyfin-subdomain"
+  "my-jellyfin-subdomain"       # Example : your Jellyfin URL will be ; https://my-jellyfin-subdomain.yourdomain.com/
+  "my-n8n-subdomain"
   "my-netbootxyz-subdomain"
   "my-nextcloud-subdomain"
+  "my-ntfy-subdomain"
+  "my-odoo-subdomain"
   "my-passbolt-subdomain"
   "my-uptime-kuma-subdomain"
   "my-vscodium-subdomain"
-)
\ No newline at end of file
+)
+
+
+## Script settings
+# Enable verbose logging for debugging purposes.
+export DEBUG="true"
+
+
+### OPTIONAL SETTINGS  ###
+### <----------------- ###
\ No newline at end of file
diff --git a/numbus-server.conf b/numbus-server.conf
index c1dd981..537a19a 100644
--- a/numbus-server.conf
+++ b/numbus-server.conf
@@ -1,15 +1,11 @@
-# -->
-# MANDATORY SETTINGS
-# <--
-
-## Script settings
-export DEBUG="true"
-
-## Live target settings
+## 📦 Live target settings
+# See docs/numbus-server/configuration/live_target.md
 export LIVE_TARGET_IP="192.168.1.10"
 export LIVE_TARGET_PASSWD="example"
 
-## Server settings
+
+## ⚙️ Server settings
+# See docs/numbus-server/configuration/server.md
 export SERVER_LANGUAGE="FR"
 export SERVER_LOCALE="fr_FR"
 export SERVER_TIMEZONE="Europe/Paris"
@@ -18,65 +14,106 @@ export SERVER_USER_EMAIL="user@your-domain.com"
 export SERVER_ADMIN_EMAIL="admin@your-domain.com"
 export SERVER_AUTHORIZED_SSH_PUBKEYS=( "ssh-ed25519 AAAAoefzefpoipoeCEZJCPEACPAcjapjcpajepcjAPJECJPEJAPJAZ yours@yourdomain.com" )
 
-## Traefik settings
-export CLOUDFLARE_DNS_API_TOKEN="yourToken"
 
-## Smtp settings
-export SMTP_SERVER_USERNAME="your-address@gmail.com"
+## 📬 Mail settings
+# See docs/numbus-server/configuration/mail.md
+export SMTP_SERVER_USERNAME="your-address@your-domain.com"
 export SMTP_SERVER_PASSWORD="emrp raps vzoi vnoe"
 export SMTP_SERVER_HOST="smtp.yourdomain.com"
 export SMTP_SERVER_PORT="587"
 
-## Network settings
+
+## 🚦 Traefik settings
+# See docs/numbus-server/configuration/services/traefik.md
+export CLOUDFLARE_DNS_API_TOKEN="yourToken"
+
+
+
+
+
+## 🛜 Network settings
+# See docs/numbus-server/configuration/network.md
 export NETWORK_SUBNET="192.168.1.0/24"
 export NETWORK_ROUTER_IP="192.168.1.1"
 export HOME_SERVER_IP="192.168.1.5"
 
-## Services settings
+
+## 🛠️ Services settings
+# See docs/numbus-server/configuration/services/index.md
 export DOMAIN_NAME="yourdomain.com"
+
+
+## DNS service
 export SELECTED_DNS_SERVICE=(
-  "pi-hole" # or "adguard"
+  "pi-hole"
+  "adguard"
 )
+
+
+## Web applications
 export SELECTED_WEB_APPLICATIONS=(
   "crafty"
   "frigate"
   "gitea"
   "home-assistant"
+  "homepage"
   "immich"
   "it-tools"
   "jellyfin"
+  "n8n"
   "netbootxyz"
   "nextcloud"
+  "ntfy"
+  "odoo"
   "passbolt"
   "uptime-kuma"
   "vscodium"
 )
+
+
+## System services
 export SELECTED_SYSTEM_SERVICES=(
   "clamav"
   "virtualization"
 )
 
-# -->
-# OPTIONAL SETTINGS
-# <--
 
 ## DNS service subdomain
+# See docs/numbus-server/configuration/services/index.md
 export SELECTED_DNS_SERVICE_SUBDOMAIN=(
   "my-pi-hole-subdomain" # or "my-adguard-subdomain"
 )
 
+
 ## Web applications subdomain
-export SELECTED_WEB_APPLICATIONS_SUBDOMAIN=( # ⚠️ Must match SELECTED_WEB_APPLICATIONS order ⚠️
+# ⚠️ The order must strictly match the SELECTED_WEB_APPLICATIONS array above.
+export SELECTED_WEB_APPLICATIONS_SUBDOMAIN=(
   "my-crafty-subdomain"
   "my-frigate-subdomain"
   "my-gitea-subdomain"
-  "my-home-assistant-subdomain"
+  "my-home-assistant-subdomain" # Example : your Home-assistant URL will be ; https://my-home-assistant-subdomain.yourdomain.com/
+  "my-homepage-subdomain"
   "my-immich-subdomain"
   "my-it-tools-subdomain"
-  "my-jellyfin-subdomain"
+  "my-jellyfin-subdomain"       # Example : your Jellyfin URL will be ; https://my-jellyfin-subdomain.yourdomain.com/
+  "my-n8n-subdomain"
   "my-netbootxyz-subdomain"
   "my-nextcloud-subdomain"
+  "my-ntfy-subdomain"
+  "my-odoo-subdomain"
   "my-passbolt-subdomain"
   "my-uptime-kuma-subdomain"
   "my-vscodium-subdomain"
-)
\ No newline at end of file
+)
+
+
+## ⛏️ Crafty settings
+# See docs/numbus-server/configuration/services/crafty.md
+export DYNMAP_ENABLED="false"
+export WANTED_NUMBER_OF_JAVA_MINECRAFT_SERVERS="1"
+export WANTED_NUMBER_OF_BEDROCK_MINECRAFT_SERVERS="0"
+
+
+## 📜 Script settings
+# See docs/numbus-server/configuration/script.md
+export VERBOSE="true"
\ No newline at end of file
diff --git a/wg0.conf b/wg0.conf
new file mode 100644
index 0000000..d23d6d7
--- /dev/null
+++ b/wg0.conf
@@ -0,0 +1 @@
+# Populate this file with a valid WireGuard tunnel configuration if you chose to deploy a numbus-backup-server.
\ No newline at end of file

From e67dc12f42eba0387d47b8191a26d9b86eee1774 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <admin@numbus.eu>
Date: Sun, 22 Mar 2026 14:09:40 +0100
Subject: [PATCH 13/43] Improved documentation. Needs more work.

---
 .../configuration/automatic_ssl_certs.md      |  2 +-
 .../configuration/custom_subdomain.md         | 34 +++++++++++++
 docs/numbus-server/configuration/index.md     |  2 +-
 .../configuration/live_target.md              |  2 +-
 docs/numbus-server/configuration/mail.md      |  2 +-
 docs/numbus-server/configuration/network.md   |  2 +-
 docs/numbus-server/configuration/script.md    |  2 +-
 docs/numbus-server/configuration/server.md    |  2 +-
 .../configuration/services/crafty.md          |  2 +-
 .../configuration/services/index.md           | 48 +++++++++----------
 10 files changed, 65 insertions(+), 33 deletions(-)
 create mode 100644 docs/numbus-server/configuration/custom_subdomain.md

diff --git a/docs/numbus-server/configuration/automatic_ssl_certs.md b/docs/numbus-server/configuration/automatic_ssl_certs.md
index 3df10c0..5486db2 100644
--- a/docs/numbus-server/configuration/automatic_ssl_certs.md
+++ b/docs/numbus-server/configuration/automatic_ssl_certs.md
@@ -1,4 +1,4 @@
-# Documentation
+# Numbus Server documentation
 
 ## 🚦 Configuring Traefik
 
diff --git a/docs/numbus-server/configuration/custom_subdomain.md b/docs/numbus-server/configuration/custom_subdomain.md
new file mode 100644
index 0000000..b110052
--- /dev/null
+++ b/docs/numbus-server/configuration/custom_subdomain.md
@@ -0,0 +1,34 @@
+# Numbus Server documentation
+
+## 🌍 Using custom subdomains
+
+**By default**, the name of the service will be the **subdomain**. For example, nextcloud will get the "nextcloud" subdomain. You **should change** those subdomains :
+- If you are using the **same domain name** for **multiple servers** (avoids conflicts)
+- If you just **want** to change them
+
+<br>
+
+> To change the subdomain of a service, just create a variable in the **.conf** configuration file like so : **<THE_SERVICE>_SUBDOMAIN="your_custom_subdomain".** If you are you are unsure of the correct service name, check the list below.
+
+## Variables list
+
+| Variable  | Default |
+| --------- |  ------ |
+| PI_HOLE_SUBDOMAIN | pi-hole |
+| ADGUARD_SUBDOMAIN | adguard |
+| CRAFFY_SUBDOMAIN | crafty |
+| FRIGATE_SUBDOMAIN | frigate |
+| GITEA_SUBDOMAIN | gitea |
+| HOME_ASSISTANT_SUBDOMAIN | home-assistant |
+| HOMEPAGE_SUBDOMAIN | homepage |
+| IMMICH_SUBDOMAIN | immich |
+| IT_TOOLS_SUBDOMAIN | it-tools |
+| JELLYFIN_SUBDOMAIN | jellyfin |
+| N8N_SUBDOMAIN | n8n |
+| NETBOOTXYZ_SUBDOMAIN | netbootxyz |
+| NEXTCLOUD_SUBDOMAIN | nextcloud |
+| NTFY_SUBDOMAIN | ntfy |
+| ODOO_SUBDOMAIN | odoo |
+| PASSBOLT_SUBDOMAIN | passbolt |
+| UPTIME_KUMA_SUBDOMAIN | uptime-kuma |
+| VSCODIUM_SUBDOMAIN | vscodium |
\ No newline at end of file
diff --git a/docs/numbus-server/configuration/index.md b/docs/numbus-server/configuration/index.md
index f0dae2e..a88d970 100644
--- a/docs/numbus-server/configuration/index.md
+++ b/docs/numbus-server/configuration/index.md
@@ -1,4 +1,4 @@
-# Documentation
+# Numbus Server documentation
 
 ## ✏️ Filling the configuration file
 
diff --git a/docs/numbus-server/configuration/live_target.md b/docs/numbus-server/configuration/live_target.md
index 93c1787..f351f45 100644
--- a/docs/numbus-server/configuration/live_target.md
+++ b/docs/numbus-server/configuration/live_target.md
@@ -1,4 +1,4 @@
-# Documentation
+# Numbus Server documentation
 
 ### 📦 Configuring the target settings
 
diff --git a/docs/numbus-server/configuration/mail.md b/docs/numbus-server/configuration/mail.md
index fc69931..b4855a1 100644
--- a/docs/numbus-server/configuration/mail.md
+++ b/docs/numbus-server/configuration/mail.md
@@ -1,4 +1,4 @@
-# Documentation
+# Numbus Server documentation
 
 ## 📬 Configuring the mail settings
 
diff --git a/docs/numbus-server/configuration/network.md b/docs/numbus-server/configuration/network.md
index 665aa6a..86e8669 100644
--- a/docs/numbus-server/configuration/network.md
+++ b/docs/numbus-server/configuration/network.md
@@ -1,4 +1,4 @@
-# Documentation
+# Numbus Server documentation
 
 ## 🛜 Configuring the server's network settings
 
diff --git a/docs/numbus-server/configuration/script.md b/docs/numbus-server/configuration/script.md
index 2eb5224..ced492b 100644
--- a/docs/numbus-server/configuration/script.md
+++ b/docs/numbus-server/configuration/script.md
@@ -1,4 +1,4 @@
-# Documentation
+# Numbus Server documentation
 
 ## 📜 Configuring the script's settings
 
diff --git a/docs/numbus-server/configuration/server.md b/docs/numbus-server/configuration/server.md
index ddc7fd7..c4965e9 100644
--- a/docs/numbus-server/configuration/server.md
+++ b/docs/numbus-server/configuration/server.md
@@ -1,4 +1,4 @@
-# Documentation
+# Numbus Server documentation
 
 ## ⚙️ Configuring the server settings
 
diff --git a/docs/numbus-server/configuration/services/crafty.md b/docs/numbus-server/configuration/services/crafty.md
index 2f940c0..0ed5cfc 100644
--- a/docs/numbus-server/configuration/services/crafty.md
+++ b/docs/numbus-server/configuration/services/crafty.md
@@ -1,4 +1,4 @@
-# Documentation
+# Numbus Server documentation
 
 ## ⛏️ Configuring Crafty Controller
 
diff --git a/docs/numbus-server/configuration/services/index.md b/docs/numbus-server/configuration/services/index.md
index 666dc63..44b8713 100644
--- a/docs/numbus-server/configuration/services/index.md
+++ b/docs/numbus-server/configuration/services/index.md
@@ -1,4 +1,4 @@
-# Documentation
+# Numbus Server documentation
 
 ## 🛠️ Configuring the server's services
 
@@ -7,35 +7,33 @@
 | SELECTED_DNS_SERVICE | The DNS service to install (AdBlocking). | ( "pi-hole" ), ( "adguard" ) | ( "pi-hole" ) |
 | SELECTED_WEB_APPLICATIONS | The list of web applications to install. | ( "nextcloud" ), ( "homepage" jellyfin" "it-tools" "netbootxyz" ), ... [see the full list below](./index.md#web-applications-list) |  |
 | SELECTED_SYSTEM_SERVICES | The list of system services to install. | ( "clamav" ), ( "virtualization" "clamav" ), ... [see the full list below](./index.md#system-services-list) |  |
-| SELECTED_DNS_SERVICE_SUBDOMAIN | Custom subdomain for the DNS service. | "my-dns" | Will be the name of the service. I.e. pi-hole.your-domain.com or adguard.your-domain.com |
-| SELECTED_WEB_APPLICATIONS_SUBDOMAIN | Custom subdomains for the web applications (must match the order of SELECTED_WEB_APPLICATIONS). | "my-cloud", "my-photos" | Will be the name of the service. I.e. nextcloud.your-domain.com, immich.your-domain.com, ... |
+| SELECTED_DNS_SERVICE_[subdomain](../custom_subdomain.md) | Custom [subdomain](../custom_subdomain.md) for the DNS service. | "my-dns" | Will be the name of the service. I.e. pi-hole.your-domain.com or adguard.your-domain.com |
+| SELECTED_WEB_APPLICATIONS_[subdomain](../custom_subdomain.md) | Custom [subdomain](../custom_subdomain.md)s for the web applications (must match the order of SELECTED_WEB_APPLICATIONS). | "my-cloud", "my-photos" | Will be the name of the service. I.e. nextcloud.your-domain.com, immich.your-domain.com, ... |
 
 ## Web applications list
 
-This is the list of **all the available apps** that can be enabled on the numbus-server. You can choose as many as you want, just **keep in mind** that enabling more apps will be more resource **intensive** and consume more power.
+This is the list of **all the available apps** that can be enabled on the numbus-server. You can choose as many as you want, just **keep in mind** that enabling more apps will be more resource **intensive** and consume **more power**.
 
-| Name | Description | Additional settings ? |
+| Name | Description | Additional settings |
 | -------- | ----------- | ------ |
-| pi-hole | Simple, fully open network-wide Ad Blocker. | No |
-| adguard | Feature-rich network-wide Ad Blocker. | No |
-| crafty | Minecraft server(s) manager. | [Yes](./crafty.md) |
-| frigate | NVR with real-time local object detection. | No |
-| gitea | Painless self-hosted Git service. | No |
-| home-assistant | Open source home automation. | No |
-| homepage | A modern, secure, highly customizable dashboard. | No |
-| immich | High performance self-hosted photo/video management. | No |
-| it-tools | Collection of online tools for developers. | No |
-| jellyfin | The Free Software Media System. | No |
-| n8n | Workflow automation tool. | No |
-| netbootxyz | Network boot operating system installers. | No |
-| nextcloud | Self-hosted collaboration platform. | No |
-| ntfy | Send push notifications via HTTP. | No |
-| odoo | Open Source ERP and CRM. | No |
-| passbolt | Open source password manager. | No |
-| uptime-kuma | Self-hosted monitoring tool. | No |
-| vscodium | VS Code in your browser. | No |
-| clamav | Open-source anti-virus. | No |
-| virtualization | Run Virtual Machines (KVM/QEMU). | No |
+| pi-hole | Simple, fully open network-wide Ad Blocker. | [subdomain](../custom_subdomain.md) |
+| adguard | Feature-rich network-wide Ad Blocker. | [subdomain](../custom_subdomain.md) |
+| crafty | Minecraft server(s) manager. | [subdomain](../custom_subdomain.md), [settings](./crafty.md) |
+| frigate | NVR with real-time local object detection. | [subdomain](../custom_subdomain.md) |
+| gitea | Painless self-hosted Git service. | [subdomain](../custom_subdomain.md) |
+| home-assistant | Open source home automation. | [subdomain](../custom_subdomain.md) |
+| homepage | A modern, secure, highly customizable dashboard. | [subdomain](../custom_subdomain.md) |
+| immich | High performance self-hosted photo/video management. | [subdomain](../custom_subdomain.md) |
+| it-tools | Collection of online tools for developers. | [subdomain](../custom_subdomain.md) |
+| jellyfin | The Free Software Media System. | [subdomain](../custom_subdomain.md) |
+| n8n | Workflow automation tool. | [subdomain](../custom_subdomain.md) |
+| netbootxyz | Network boot operating system installers. | [subdomain](../custom_subdomain.md) |
+| nextcloud | Self-hosted collaboration platform. | [subdomain](../custom_subdomain.md) |
+| ntfy | Send push notifications via HTTP. | [subdomain](../custom_subdomain.md) |
+| odoo | Open Source ERP and CRM. | [subdomain](../custom_subdomain.md) |
+| passbolt | Open source password manager. | [subdomain](../custom_subdomain.md) |
+| uptime-kuma | Self-hosted monitoring tool. | [subdomain](../custom_subdomain.md) |
+| vscodium | VS Code in your browser. | [subdomain](../custom_subdomain.md) |
 
 ## System services list
 

From 29d7eac98187d39ddfcd30773e58d74d86e4716e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Sat, 28 Mar 2026 21:49:24 +0100
Subject: [PATCH 14/43] Moving to a web based configurator. Huge changes.
 Surely a lot of bugfixing to do.

---
 README.md                                     |    5 +-
 .../numbus-backup-server.conf                 |    0
 .../numbus-computer.conf                      |    0
 configuration-files/numbus-server.conf        |  101 ++
 .../numbus-tv.conf                            |    0
 configurator/favicon.ico                      |  Bin 0 -> 25484 bytes
 configurator/index.html                       | 1225 +++++++++++++++++
 configurator/logo.png                         |  Bin 0 -> 32548 bytes
 deploy.sh                                     |  517 ++-----
 .../{ => services}/automatic_ssl_certs.md     |    0
 .../{ => services}/custom_subdomain.md        |    0
 .../configuration/services/index.md           |   10 +-
 numbus-server.conf                            |  119 --
 templates/numbus-server/configuration.nix     |   19 +-
 .../numbus-server/custom-configuration.nix    |    5 +
 templates/numbus-server/flake.nix             |   12 +-
 templates/numbus-server/numbus-generated.nix  |   10 +
 templates/numbus-server/sops-nix/secrets.yaml |    8 +-
 wg0.conf                                      |    1 -
 19 files changed, 1469 insertions(+), 563 deletions(-)
 rename numbus-backup-server.conf => configuration-files/numbus-backup-server.conf (100%)
 rename numbus-computer.conf => configuration-files/numbus-computer.conf (100%)
 create mode 100644 configuration-files/numbus-server.conf
 rename numbus-tv.conf => configuration-files/numbus-tv.conf (100%)
 create mode 100644 configurator/favicon.ico
 create mode 100644 configurator/index.html
 create mode 100644 configurator/logo.png
 rename docs/numbus-server/configuration/{ => services}/automatic_ssl_certs.md (100%)
 rename docs/numbus-server/configuration/{ => services}/custom_subdomain.md (100%)
 delete mode 100644 numbus-server.conf
 create mode 100644 templates/numbus-server/custom-configuration.nix
 create mode 100644 templates/numbus-server/numbus-generated.nix
 delete mode 100644 wg0.conf

diff --git a/README.md b/README.md
index 83a55dc..838e5a3 100644
--- a/README.md
+++ b/README.md
@@ -98,10 +98,13 @@ The script will guide you through the setup process, including choosing a deploy
 #### Desktop-centric features :
 -   **[GNOME](https://www.gnome.org):** A modern, elegant desktop environment.
 -   **[KDE Plasma](https://kde.org):** A full-featured and highly customizable desktop environment.
+-   **[XFCE](https://xfce.org)**: A super lightweight desktop to breathe new life into old computers.
+-   **[Wide offering of free and open-source apps](https://flathub.org/en/apps)**: If you need to get something done, there is an app for it.
+-   **[Windows games compatibility](https://www.protondb.com)**: Most games run on Linux thanks to Proton.
 
 #### TV-centric features :
 -   **[KDE Plasma Bigscreen](https://plasma-bigscreen.org):** An open-source TV interface for Linux.
-
+-   **[Web applications](https://flathub.org/en/apps/net.codelogistics.webapps)**: Install websites as apps.
 
 ## 🔧 Deployment Modes
 
diff --git a/numbus-backup-server.conf b/configuration-files/numbus-backup-server.conf
similarity index 100%
rename from numbus-backup-server.conf
rename to configuration-files/numbus-backup-server.conf
diff --git a/numbus-computer.conf b/configuration-files/numbus-computer.conf
similarity index 100%
rename from numbus-computer.conf
rename to configuration-files/numbus-computer.conf
diff --git a/configuration-files/numbus-server.conf b/configuration-files/numbus-server.conf
new file mode 100644
index 0000000..94ff582
--- /dev/null
+++ b/configuration-files/numbus-server.conf
@@ -0,0 +1,101 @@
+### MANDATORY SETTINGS ###
+
+## 📦 Live target settings
+# See docs/numbus-server/configuration/live_target.md
+LIVE_TARGET_IP="192.168.1.10"
+LIVE_TARGET_PASSWD="example"
+
+
+## ⚙️ Server settings
+# See docs/numbus-server/configuration/server.md
+SERVER_LANGUAGE="FR"
+SERVER_LOCALE="fr_FR"
+SERVER_TIMEZONE="Europe/Paris"
+SERVER_OWNER_NAME="yourName"
+SERVER_ADMIN_EMAIL="admin@your-domain.com"
+SERVER_AUTHORIZED_SSH_PUBKEYS=( "ssh-ed25519 AAAAoefzefpoipoeCEZJCPEACPAcjapjcpajepcjAPJECJPEJAPJAZ yours@yourdomain.com" )
+
+
+## 📬 Mail settings
+# See docs/numbus-server/configuration/mail.md
+SMTP_SERVER_USERNAME="your-address@your-domain.com"
+SMTP_SERVER_PASSWORD="emrp raps vzoi vnoe"
+SMTP_SERVER_HOST="smtp.yourdomain.com"
+SMTP_SERVER_PORT="587"
+
+
+## 🛜 Network settings
+# See docs/numbus-server/configuration/network.md
+NETWORK_SUBNET="192.168.1.0/24"
+NETWORK_ROUTER_IP="192.168.1.1"
+HOME_SERVER_IP="192.168.1.5"
+
+
+## 🛠️ Services settings
+# See docs/numbus-server/configuration/services/index.md
+DOMAIN_NAME="yourdomain.com"
+SELECTED_DNS_SERVICE="pi-hole" # or SELECTED_DNS_SERVICE="adguard"
+SELECTED_WEB_APPLICATIONS=(
+  "crafty"
+  "frigate"
+  "gitea"
+  "home-assistant"
+  "homepage"
+  "immich"
+  "it-tools"
+  "jellyfin"
+  "n8n"
+  "netbootxyz"
+  "nextcloud"
+  "ntfy"
+  "odoo"
+  "passbolt"
+  "uptime-kuma"
+  "vscodium"
+)
+SELECTED_SYSTEM_SERVICES=(
+  "clamav"
+  "virtualization"
+)
+
+
+## 🚦 Traefik settings
+# See docs/numbus-server/configuration/services/automatic_ssl_certs.md
+CLOUDFLARE_DNS_API_TOKEN="yourToken"
+
+
+
+### OPTIONAL SETTINGS ###
+
+## ⛏️ Crafty settings
+# See docs/numbus-server/configuration/services/crafty.md
+DYNMAP_ENABLED="false"
+WANTED_NUMBER_OF_JAVA_MINECRAFT_SERVERS="1"
+WANTED_NUMBER_OF_BEDROCK_MINECRAFT_SERVERS="0"
+
+
+## 📜 Script settings
+# See docs/numbus-server/configuration/script.md
+VERBOSE="true"
+
+
+## 🗺 Custom subdomains
+# See docs/numbus-server/configuration/services/custom_subdomain.md
+PI_HOLE_SUBDOMAIN="pi-hole"
+ADGUARD_SUBDOMAIN="adguard"
+CRAFFY_SUBDOMAIN="crafty"
+FRIGATE_SUBDOMAIN="frigate"
+GITEA_SUBDOMAIN="gitea"
+HOME_ASSISTANT_SUBDOMAIN="home-assistant"
+HOMEPAGE_SUBDOMAIN="homepage"
+IMMICH_SUBDOMAIN="immich"
+IT_TOOLS_SUBDOMAIN="it-tools"
+JELLYFIN_SUBDOMAIN="jellyfin"
+N8N_SUBDOMAIN="n8n"
+NETBOOTXYZ_SUBDOMAIN="netbootxyz"
+NEXTCLOUD_SUBDOMAIN="nextcloud"
+NTFY_SUBDOMAIN="ntfy"
+ODOO_SUBDOMAIN="odoo"
+PASSBOLT_SUBDOMAIN="passbolt"
+UPTIME_KUMA_SUBDOMAIN="uptime-kuma"
+VSCODIUM_SUBDOMAIN="vscodium"
\ No newline at end of file
diff --git a/numbus-tv.conf b/configuration-files/numbus-tv.conf
similarity index 100%
rename from numbus-tv.conf
rename to configuration-files/numbus-tv.conf
diff --git a/configurator/favicon.ico b/configurator/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..d7151a8c3c14ee419ae0c78eafcc28c1cf321a5a
GIT binary patch
literal 25484
zcmb??i8qyR)b@VPXeKimjv+&3Dl&zG3YDph8B>{>%wu>Y6-^>3kt1ZvP!SQ1B2#5f
zDV&N-88c`2p5Obf^?m=q$FdyDTIV_UzW2TNwXf^C0TAr_zb^zR5OfNFAA22VVP?e6
zBFuulWH&KBaO}VT{`bQ~!hSjW<+=a&*F`@wE2RBNa4NtlWs?K?Rw4aU>EsZHzR=A(
zS1UxdpHDXUCc2m19>_lbzRs&Z+a$G@P5bkL@lTx*dEbkd3Cqrja&i5S`k(Nt$JHa#
zHOqtHNk6xA1O%j+emdi%jV-%Y*WYj&b5%YGo!j^n{yCWGWc_6#EB|i0QrG_<FDg8)
ztPLkxY#DI>d3eZRf0uEd$4=%&W7&EOuE(tN#yj+<$5-r0zO0HnYHLIP+<AYwaf%y3
z<Qx1eZW6+!>T9}8^3;cOe%3zTmKd2L{y6DrG5g=cPU64sMqVtvHZe$@=?TZ_Bv0ZT
zt<T~HMnHe!+4m4%7d&s5759%6{aNQFBaix@HjQR=0WaEI4hF4dC#4%NDLX4}nw&Lw
z(=CpJ$83L(>0E2r;w$3|6Mu2p(Qtov#1EVSZJ^#eR$o8Cyfi#jx>@I=2=kU$nNZ8t
zUus2<$LwN~eplHw15scG2`*(O#=X|pEE5zgWY3R2->$G8J$r!rcbjZA=lRZVIS>P=
zy*j!n5GEcsvuz?d5_intjPZ(A9^b^(wM+zDp+zsxvh;q!x}kB<{-;aS^FY<Hy8T&?
zUF+8H@>N}cNahH37rikllO2c;2`QFu7~=DpO~$jy|9Se{^?6UW-lf@{U*oce#tRL)
z-i7^pT5R+-if>Ja;>s)<y(eKk&_Vz@?ljEAgk_3JUs5W0EEH-W=2at1Jj-k{q%Kv_
z6ItFx%1iiT*rD7*R(rD89&Kju87a=MTM9M}Z5`TiUWXV>B6+lLMz5Ic`TFs6{ae@Y
znRgE1igSCL6*J1h-(IpF!V&iU@`yGL*<r=GNUfPLvQ~!<(ZeHZg_>~}cS8>s+NCiU
zH)I~0Esl~hC8p1MdGjRdin7EwvnM>g)IGE#utu05-_UN&A^+v$nR)}4KVOqff(~1q
zu81OioywIYFY`VrHxGBq&6wCqSgE(*?;*g#Y}^ogV1CX7%in$Muuuu-Vd3m9s>3lV
zUF{5$aC8+-M2_%@5gL_pPu9TEAHnUY?`zPrFu?_tD&koAPv_RfSFY`<L}~^+r-I4u
z&+t%N@lENS2(vhQufC3jdJho-KFQRMBc&*w3!$<Q(L*u&*{){pljBfy4Mz*-A5sNI
zwDdl0%TBa-bl~SmV-<P#^xH2pMHGq5gJYu}212JjsB00%YZ=tX7W;aTe<fyNF4m(r
z4**vc6A+X*A>gDk8?aG{KA;<^D8JQiUQpF!{zSSqL7l=iKd!cv>FQg-Hl3N1s}M=$
zXXb3KA`fkee2$V$tR+nRBto9nZ|N-@Fgc_H<I1r3LN3L}M2G}CGhOurMxs`<TKfJy
zabS$f$wr!;yNNc6iuC-xwwmj^vF@}fe>P!di-pX%(R6Ho->vMK?6{K7H^VMoQ29^<
zVvH{poUF6wT3ItWRx7^L&;E&>@TG~z#Y5;{X=$bZPpa|0x#gq!XEXGdp7a_`Zm~<(
zD%@iaq^1M)TG0GZKFkI`j7CWWL*sQ^Gj~{PpW3YzlVRxti3g<<<(7V&^bK!%Oy4c{
zXmWCfxj6)iHe}@ZhbsKz+I8H^h7@4d|DlrfCX*^Ou9@&Et-NlY{(Eiv>`VO$`rSZQ
zyYIK->SU9yyqlO|Zk0Y6>BlYhVAU~%>dur{Lz);)bY@3b(A(7_VEE=xrn?*$W#v_g
zmHv9#y)?Vh%JXg)xt>K{XHn3jaNYA2PmJ1?=pyv#>&DI7uUn#af$Ilhl#d9#%Ca6g
zB5_*+QL-aCE2$y&vc9JXyX~G$TxV*L{AcL89P^^NmUgoQaL0faFQeD<)GU$&+aPa*
zO`Y-V+~u?g>DH!*G~R|jOOs1qjv_aDzs*aH$Gp5=q8byq!6Ut;na2m7xh)q}VL_j9
z0YQavQXObX(obIQt?)r^;#|;uLpI!Q8_NTS`0qN^8iz@54Kn@&8gB}8E}I+82OFIK
z5j`=iPJ-&`ATo_a=Sqwc6edDfMB2SAj~P+(OC39CZuLL!8yOo5e;rL~TwF#_a>Ba!
zG<)mr_sgQHt24q-skj}kCak~f5VRWq^(>^VU2{Z?1zd6iB<~u3xt7pa6gN;CIy_v=
zwy@~cma!_x?ZVP)Fx9iR7an{-*#2_S%xLT_7h{{q5$VUSSFk!9`tXy#;W6WAqLQ`&
zPX@<|&h6~wYpJw-dDeJzHkpL>iQ>RR;Uf;chQ8SD_czcgvVOZ6eZZ-aLU$Ya>0_rg
z_qXr|Y29@-<I3BFg^#Jjqe#aqZ&9@AJOO>pfu{HoCSq`J(uVJZYRX@)-W~%t_^!v0
z&l+F9s3ii4deW0^J`kQTtI*#PHHuII%MmI*8o6k65Uq$=x4bC3V=l2&7{B|z%G2E3
z&KdLQsdh@Z!He25CFxxRc#yIlT!8P0r7Mu=r4>nT1fX%v{`I}5^Jhv<cJSP|@{N)B
zSvp&ByZE-$RprDXytjcm&02lcUV!Q<l`xJd-@GCoyGD^+|D($S7s(`qUxwpLgj~`e
z){m9qaTm$GhDC4im6O0#ss&V0IumEK+1PO<hgGc!!k2h`ewiEBDaCc>Z-d;Q9qg*Z
zTXzp%I{_$PApA|rK+rzH9>V#+3QI0=4Md4-V~aK(bJ$GRl$O-Ec4g)REo(FCK$igZ
zyy~hD*zkcWm)zyewkG-5kT36flqT(#B;22`%+}bkkYQ3haWO*9UVF6>XzU0H<-?;S
z+}z4n_1?XBuRn$#+<f(e7Y|-JZTR|*)K|_)89jd}<c3t0Xs0pU{^1ddku7?QT&lch
ziRj@68iLPGh;K_g6MOn%hiN1UwPr`fq&N5FE+3D})e+@!{e=WOI#%20KbiM#zQsB+
zeE77G)nP@W`w2&K+nQsK=M2A%bMu?<+4eO;BSu8iZN<0m?%lhm%`LPvOOsx0+Sgr+
zSBr@(<OdOgAgCJ5-^p53y0+QP!$CR9-NgMn=yt<o-~pi_1Ggsyw8PvHuM-{Xtn`Z|
zR+S#h%i5aXe^xDQA2u`6y<^!aes{GvR4)IFdlG2dem~)5Q+&(Atb@Y~KMedPEF?62
zOVPA1F3l!0bQf1$kB#MP?vd;*Q9BIM*FP41L$ddhmB}z~dEJ14ThN$d=@{4NudtMM
zER<xn&7AC&-V9^suDg7|$a;XsKWE+-7~w#l!M3dAvC@$5$hp`4JrDQHwB5}?Qp}P`
z&KlM~!#58+U-&cU*0#4PeuxN<$q>n8G&>v@6U!;`E#t^-qv52ifAcLrbV7%_=KLh@
zN+)h;`<oo_<o_yu|6oxaPmf5Z*`_rc8bCr<fhHV7`auf%vwV0*fJKMV6SuhXR4KLR
zS9zb>@`O6Fo7~RdF@KLg(I;zd8!(1`l~~vD`{%SOXcf$>LIMHuik<T0D*cMz5J0Zx
z($i-Pey8n)z=8v;0Fp;<3)sFxtPY6D@5I3i2Dq7v?fw#RDQdF`=<T-;4eQi;c+{u9
z`|;X%O~lVry?i5}+~u><-IZ92wnT)B4n8+T(D%f9270qEQnuxPwZ4D4Q04R-yR_!3
zxMrRS6F)~$%Z9%1tgwE>EnupeS>1c7!KK9Pdi9BPb{NiLO(4UtOP$rjC@ilGu+s=~
zIEY73ZlLjk93EQReL(IR0SXW_HHrLp^3F_qArV*@@Z|QNmX|tZ+RM2>f441D(+Bx_
zM`GNZdj13QeF-cK>CW4JjO1NHKQXO*d1)VQ&C}9i+VJFbYPR$~t~1AU?#h1F+kL0-
zU+nHzpVc&9EonglGYkWK-4A|%iU7r&6^OQ<Bv*+5WQ$LD8Vls%pdb`_L<b%X0jP?7
zPd;9$xBH)5VpR8L$Di{)P@eiZ17W-((;uYNyushuK6Vo=G2}k-rkBfWUM7(xr%hN6
zrfp^Rtsi}CF)Dkb<j8?}3^&B7lnVh>1`>AQPy-d9ZJCQwiJYi6(5{lH3L;cdu;2t$
z1d1#I4|oRU1kLY-XJ+8Tg`tTopc4WHzBzAdh{XwfQwy1t+>sM~^jBTLL7vx{4`lLR
zy!SYsxLvxnVa+boE&Z^VOUmtGTg!1gHNfhOA|w<dbZej-2Jm1fQ>79!3}~8?=l0E+
zGNWIIJ;3fHnTk-IsCo;pu9e>mdHK<xLdMEVL3&4d^66~VZOJd@?y83VI+8#Ces6vY
zd%h3k165dr+8>X&&g=(O75IJ^Ix69HO3lw*Tyv!!H)3p5_Z)v@e8_um%i$u~f}W=r
z>yb(XOng8ds4S517Vo-4g!=J$L}=g|(DhM-ZVXI@3>%<3=s_N<;H;m;n@Nun=?mv7
z7_A4*!uGaYwVJ=GhSJTg<xRJZ#~<1Ow4=#tatP$y$14L^12vW(T0`NU@E^DWT-&M+
zi=yr66<o$;lC$fVX-5J<SRmp0=PeWSaLu{XTy_tKb6c&;pS78tUG;ZA@s|ixgiIj=
z?-RJbPY`0UUg`;guemKQ&MT22yHEs{{0}%$GjePGSet7H;M0EEUsm)Oc7K)d{U(3e
zrs*=^9A0!g6a$t}R1%rO1VV{=EgHb90HDQg7b=UV+(YPGWaaq#QQTUiUb0bwl8CmQ
zO6QrlH_!IvB@dsec-C%N{s!k{s7?_A<9z_*CePJ`g2_O$22`^p$^-8z;vE}lQjHWB
zGw-%H6<vKjC9PL|i+4EaS<A<B5r`rKiz^#QGvjGukk{u2Z=upRt{9)!TrCBRIxP{p
z69HB6#LfRzKXPL7eA|2EsPK+e(QM_qq|+_l9cvXE+@O(?)R}l?*qj$fWl?9f$aq4c
z)<lA1H<6kn45PQOojMQ0C1S8rv>z_p3WMTPK)ZNBa0E%fM+_u62;Td^-N&ncb~Jb&
zr|(i7rFx?}^lQ<zPIhAgaC^?T6RAnQ&=Cj%i@*r*nmhOou?RnXF>+&o1?7_BAlmD2
zP`!4Nsny6v2Nv=)9{c&!(+w`Ymm4lh9n?JUva{Li?}v8pBh4SZP3<DFMS>tRT2;*h
zYfkj3PNK39ykDuO;|Dojgpbd=@*iQ7-Y@^*tn9(q^vT)9Y74e1m;>s5NT|g9S9lH!
z!t}5TB;n8?d_3)<r2wP;J?{ROwOqBkPxdct`S(X%8P;QM%-Y4(q>VNLwQ+`|`W|7z
zq0<DcM7aak$=$F=2<`*a^^(C<ow0)jWRKYFJJ)Gx)xi>&@bhi45v%_<9j|#qU!bmY
zLxKbcTo6_sk^_-09BRpd%IM+gqQ60P0Cl~1w(*3L_Gfmx^)i=89(kodWI}(2QtR2e
ztHXD4x)7>cP%2iooIv$~2#nh7`0v3s0>Ep$*`y-``~oA5PTAR|F%xk=FE3dD#SFmY
zCon!E*@{eP+f^K`fs1U>1U|NSY^|v}Q)l!t2S7di)y|HwJh>@}ula%5Wu>R^;3Epx
zGg~q;2KbH6a6#fxHZ(~KG~R@eDLq^21o&}-h}OpF3jrG$ZH@%2THT_G1FoSlnvY#=
z=gwW#2`lN@WwgI4K*`Id=`8W%X)BT^qNK2@n()n)PGL+TphN;GQRwC6{pp@-H(CD_
zf9uBDXXn)Q>}PqCqfoyCDDM{_Z(kR39ih?IhU+hTp9c|+_VXI0#|!z<ZSX}Pt=G>1
zp(i0!P8idmrd_M~qk_F>*0b!Sdnti~c(6l21*i*d2#q?w>o=YfBU7gVJFg%<N4EoU
zFKC>UgzrHd3^N>>)dJK$yp_c2Rvbcq5UWRY@?6z6w)bu7Ym3*q1JKEeZ8qsB5$=)j
zl;gZGI<AGr<KBtT_W<QO;wk|j>{(rps?n11Aj<S-wlryr^poTI$&=JPziN|%zU0{d
zP=g#Wt|DOEYJ5JC8Nmj|44FG6=6eayho#>+a%pos{RTiUSK^i^3rhLRcK<u+>z3pM
zRQ2J(9jG^>!I+;+O=kv+RxFyg@#y9YS2j38glAj4i7pctG7jvYy0`l^d-|4=()8xB
zP)iRD;40#TQ2U~}Q2%8d)=m$9%Gj;gO`?x$BcNOH7Reqkg)cKFWvlyQ6qrtEJiYPs
z<W{xuL6g4awj0{*0P4T-wBBsEuJ#toc4&#3r$&BcF5an(M>C<rY*U*Tl8o2oI2~4{
zxQ_VLH)K4PSuNOi%y#fdQicJ86X<-vsQLk(pAqUW18BZkZIgU{C#1Q89XH^nkHS%`
zwu!xZA<MwoJ()aY_)axnu~;UsS0}sb&7-pWoJB=Dr`AXm1_8b+^TRkv3nkpb#&kO0
z;%kV#fzU0*;GYm+6A~4%h#rngMX15gITLF$t5SNb1MgmKonBPq8)&ymS$@L`f5=dL
zPiplRfr{;zx&pKcfgs#xLAAz&_L1mD{!=jiOh}Twd?WkilTgzL({}Z<h2gJyt%Ah!
zch1zFu>Txb^dfsw7<|re<DhcEUhC*nYzXzW2HaKwWe_BwzS5CA3wSLO)d`X-tYzlP
zUbpRI>Wqv$sB$jy7bX9~n8dAey!q$8g&N$yx{9X-vIS3HjIw}F&Wp0icoO8qie8RE
zUq38je*JPsy$u_TUf2e|rwFH^(g`|lWCs%<@=8;bPen@6a;d3|@awNlJi*o3+S;qz
zC)Z4zrYK$olTznDzFSu9UEF$>`Knz2Dw*H_0x1aEwjYY;v3ZaK<?qJ*Pv`#)w0oa%
zTx9CtZg_it8z5{@fxvsf+RfO>U1y`MEHtqG?=-&*C|TzmUxO&cr@}<?c94BTo7U2&
z!<+Y?B3<9Vm{)0&jE@*@9skIVpHc5!7AJ$^98?}aES$dbSUU}hTHE*6T!QP5$XMrl
zaEbt}4dAoiz=`hxf+DUY951}`!M%FH?8#ll%x<XGVLuiD3?cQ&D~r?n_WX2DI+}go
zq~YV*J|+3Vjt**7|5Ia!HpurHv+w?{F`M=KYNYtse(*t{5`*x312QD~cQ2}anl4y*
z+`yxHqISFx8!Q7iH3jb>t_U>056q6P=T*hQz1QEQuNiDjx=V#$Hvku&s7E0`z5KTa
zarXC<S_1y5j-L~inJS7|uBc$s9qLyt<uqep&*1=#x}%WLIjk-OpYjl&xc?S`F}Xqb
z1-vT<Tf(2?9j1ArEm5Q}#6@p+&TTNGx9zxLtXmTlE*)jm#N`z;FmrCZq^QEi9m&<9
znA><5^_<_%iQeAcct``QQyodsNp9ZO!Q9|3fx+wTny66bVg}>%J1_2*D4q$M80wO?
z`mWW8o^6$OO+2=btZTDMb0Y{58{4F}l*c{ABVS|%dTIv<g9aYbIyq72Z4ltBBtLdt
zkw1;-sm2Xz!6I-#6qWG6v*77gr=W%nNO;$`rV8v#{R7XEf{qj=)y|xHDtW9>`sdkX
zQ)wHOLZ#L4&iUnXsX6Uy#vcD>`w+Nx`&DMQs6xzLph|;J&^D;F)Z&Emdx16yemx%e
zt}r-)r=N*IEP|HoEE}f)O?Q0z_b1RMl-;;Wx8E7av>M!5euY9KqORr&oikX=!lU+F
zcCx1WvBxHdv4p!e@a)V1Z=QB`{^C@@F=45gbgAsZBrWtuNnjwGc5oTz!2(427s$b<
zu3-Tjq?4ZQoUC;dgcBi9Che~96|tHi($AbEQ%GozDW0Sx3L&*RbfexgKN7Xd-tCA@
zN<KT`%JtYGPmIc#eiNA?)o7?|bogq`oqIPeLg(hcIVcPMEaDD;XyoCBGx>(m8xG6l
zn=60h1zF~gI?O4eo|Xx*z$hyK<>=vDuF7%u^!;P*$(NWYAvWF;vLV9(lL9LN=KlCd
z9jABMx&ABp)1OX;1A`ZQSU`ga2fPtRnh8SV##3W5q50|3mKlz&*nA>YYo)5j%^*u%
z!l<HbGggGk`1D=3;zsYUuD0@|t~Rx#;uQChpki-HW$9`cak#A09q#q>Y@KshZP;5S
zjqrpcYv1UIPfMK^q8vAz@iSSX{P5<>m*?kC?B~wUNi>#Dbf~B*d0uyCVd-{4^y5z1
zuxg`c)zyd0a3C8BV_MLSr{*BkZZ{+$i$qP1gpREG-fJ;~{6H(J<NUK$eY^F!dcuOR
zCDS?oW4B2(bESUbtaV_hxPs8r7NuV4zm4{mvdZnmknCjw!GqHnVVdeY7Am43%DQlL
zvhEkSUJQduthZ`CG(f$Dy@OsRMof4oFQ7e%#iGU%iBlD>XlaSZ&4uN+o6C1}zVz)~
zlK`JL)n`{4*x&@&{46`Jm=}gIFm3}DUn_Ii-xMdW_rFMb%CTFO#KoIBFd13w?I;e}
zqXn|-hW@`RF&t%GGTPZ?IWRoxTr!Ch1pZNQN2q~36W8#wcTdRZ93qozMEDN4y}ryP
zC?qV4kNAbsS9DOi4KPZDL25r-H6>zoOYqc9yd6M*DE0ke97U3ix$ZItl|_5=evBLT
zJY96}?BByPgXL6B<qX3{!!@9eggy&U{bJNxh@e}az9Xq)YrqJ4>i2d??-V_R>}sdq
z(Fk;-k_LoPUIp|(W<XVJ3x^|$@0*x+O`|vLIeaS|qTd-C85y;#d?Cp1oRGn9oT?j}
z+5U|TA{g`v*x`E0DdPvoUBNe#!EX^y(XQDce?y6-6=*gOqTHKC73JR<DAN1Y0(~;=
zQHE<J`ZD<!_Q8?{qHG7DZ+Y2zF-$~hdw0sZ)!;vtL;UJYm6yN{TV*UfIM6jj02!Lp
z7{{frje8zybWhWb;@Sq5>*(d1G5AwMBv=RZ7tmGk2v!g)U9~`UJD_2{;HV-DBMXl7
zUKW_Z?SIo1KE&^X%+wQCXd{E=bXD5S=35D@y00zCwjT1D{}(&TUgezk`JeD|H{UO$
zR%oM*1yZVo;drq((@}$KP6|93KILYT$G)9O6BQH`lroI@b^3J3&%2q?&qaa$d~>k#
z)FEKJ5rmaMu(cI~<U^Vu0U`srx`GQfIMh4W<xuX!Bds0Vaf+zfwySZrglQIz4}Svh
zJQM7m#3d}~Zi_V(%WYk(*c9-ViC7xu6gshOrI>_%Oaxjq1mdb46%uPvMZ~w<k;KHt
z!GVLU?EJtGcFL>(Fu1^{tepaEifrhMhg0+;c#JqOcK#170cG_4NbCM>@WF~$tAjO*
zZPOW@KW^D<I+1gn1!g%OFE1RO8Q8%Dix;Rv5yTjSCFi`M_VP{HwkBMJRRkOC!hsrL
zcajl>xeB*jAdzr-&8sdm(*$*0*9I!1gTB%kUHe?h4Log2@YfwRLDdrE#yS}!gc0A5
zT*onbULds4*Fd$!b>-CE_Z(kD(A%7UFwKA?r==KEBX&@L>rY0fVUoREC${+Bq}pmf
za?C(?7&b((!ExhFuRMXUzEj_b9H7WAbD2InE2xT?4(h3@&UJQltZdUjF$g~c?|&n-
z0gP4pfmnEoz`Z9}7s%2TS@?{nOLI`tj{kN<Ae^Fi(R%rx)>)kDlT(BX(_RtPm%2Ln
zjAv4l4=Y3(CPam7!tSjrnJ}wivrl-qXyQ?Ykf#tZnt;ZMD>vSBG3jLY8Mu3N=}m^$
zWv{xsDtolFZZ)-Rk(icna1BA<?INIKZ@<5?I}Vi21EBHp0OUDreb|AgG@JL1k3If8
zLzj0_s8B6Hc7}WP)32GeT4p{+@67IXknVEK;pop-yHav3`*A^J`>!)uSEcpTXT($Y
z<^`)$@btrgQOnX)#-!r?xQ0%x$o!%$Uhb&0305g7o*<x~3_v&(hC%D-1RQ{b_eFT)
zeaxWv!G_3Bq<0!%Gk)MM1geMJcbSTI*sZDa=l3m+v1^YEPX@)e^wBs)@11&_`8vie
zV)LOI&gk%=m^WSj8i1i>I<@?MMj>)fhbTa`0|}M4y&+uy0ynONJ1KBufpcta-r`-`
z%JKo8Ivgxvt@t;do}hw8KMaILwHkp~uuwV98xRY$LDq!e2z|IWriB*d1S0&LsE%=D
zRK`s+iSRmAc@Lns*r<3(nQouoe?m*Le=Vahb(Zs!7%d`71-@wRx>ljR(`e%%-p&k;
z8V+=jY;T;Fd~R&#IB$ORXu|X7CY}>2`?daO3u3TXD1gY+)aN=bV*mjR_^|<Ri3a$M
zcQV|t>c9j`#W(R-15x`^GoBR14;MWVhE8~6Ww_50?a|}K&AtB!9DH{^oWt`2dPg;9
z3-35->e%;n#~HaX4ib7T{XPZ`9uB+k!i9ORglaqKh-57gXgf%C^-ILL#^1bSzQGBl
zoS>n>ip~lB*YRJuUl5+XIR|5Qs&EXWgr0LS+;S+OINKDHp>63H`5Sw~);^=&#pxGi
zn`;R5KTz-|u+pxB$neMtu%!vYxsJ8&vo)lME5)%&Rk*M_B>x&blv<HX1Hi)6U}@j0
z(LM{fB6$47v+8hR4p(lj2Vnrpc;Har0Q?OCJ<T3YAv7z=)mWe_5nA_POu$igwDBYE
zkHO@{9|eQc)oBpoM249!^6zstAI4npD11+>28p$5s80|`+|UUhsr(&wk-Ee^QtC|h
zDFjAH6M|Nuhiz{(MCBa6%<=h9n#Hh?hUrt8+~(nxk282UiLo(aaP8{VF+qAfj&fC|
zP8m{1wb6rknxh~zvE%8P1Ddzmh;XrNGeC3Z5l1|8)wmIr=i=9PPsam1e{+Txp4PZ=
z+eBOzNGbiDcyC(?{@^=o8ZkOTBqIvx_oPyX`zldRgm5uJ(e*XZf(<)F*@2ya8~FI^
z^O27{>>2zbMnh2n0d4~gD?MkiPXi1fLdv=fLM^f6po)O$C2Lnh#3Bd7>8#plD9ClN
zqA}I?IRS|jN<Y@VAm&`-onLlkMyKnas^8+V#cHM&shXiio%6NdyViDG@WQ8Mzf3%Q
z{ND!t#oB=6t|nqG@~-Cws`?)|(Oz4a!AbW+M{~dCnbTjZ;nR@-xRKBFrV67_H?Etp
z_J4UV{A%K&pIiJ<)1x}Nnz|z-5K&fuHN}o$bw03?mjQat;ZqokK+4yBeHobgQi)&Q
z6%o0dnRusDI=Atsc27mTIQL~TVD)<O8}obY*9acL?M?*MYA)mBLK+{=+GMWtyH;^h
zeIz>OUOcDFEIf>*Mt5+?j^x!2=PJ5h%kskp5PJj*ixcPxylf~}{B3dwT<3qABd8C!
z)(OHIpklwk$C4Mr8BnGQs)DTlk%g|=cx8E5BHa*Y^Zszmb?1;&V@y|DFVA0IYn>kv
z&rZvIP%>m#QIb9FXDM4BbgRCZhsgU3a*g5=){jX~e8UxOX@@vZB<|sDhEi^jOR<yI
zF>Jy~yR&{^I%=A^rKeLP1|h7V;R<kjk+OPg9EVXY&+=ll#V(CQ9uI+<7Kss<=wI1N
zFZzpbIPlys3>sOgbjcI$Bg69F<X`nCHFe%rBi5{sSsB%`Q3=y)Jm1)^oSy#o-7;#@
z{LFOrg^gPX{R!*k!2t~YHDp`~GA_Dzz)h^8V_h$O?a}(rp5c4E@a19xo{I<r93Rdz
z^9RAmd!Y4lL3W25<vlP8<RIPyxV(0QfejaI3Y95)=C;puNz@eS4f|Jy_~ecSF=7#}
z;grrvi5Hg5>ieUNFJHNIgtnM_3MXd#6RQcyI0!`Iirr0IvIo%SqPvnyQS&kspTGZ-
zl8$Gtf%3D*r2XgQ;Dj*w(=nlbA{U8Th=6CBFI0hXDl1fRQ2v<_s1_m4CEpH4f8KH&
zu`@Ofy0cPG+Zkg<n*Wxro_8@Tf%g;LKX`CfmZSA~AK^sQF4>XmgYr}oIzpgwCT^*7
z1HH>xo(=8nWY*f++E3*|;J^oekil#qiFG!Uo>&3lI+El<fcb#XBu6%g3q~M_cqT9;
zW9N2$?~Mpfe)b7%9#>2#C`WV_&hgG`Snm7Hc)V}@DV;t<UTXDKvRzyd$J65xhD>6V
z@cg|<zx$O;x9}D~T{bf{jUd1uTfD2ECipz(Zz&;B@91+-d4XkdoW6?<Ex;6(v-h_{
zI6lxFcLf+3U&Sg*Xnj+Oo1ce%9c}b9_OYqJX#Ppu+O^*w<XH|E5<{<yaGdAy+!znT
zX^-AJS$~Eu0#~r9wUhvMK46^uV23V892=OK>ctNSWBrK)wCymaicxuhW{}=Ip9eYh
zE@ZbjED=1)W3Rba#9ljHG4s3p#!kDeXSaniM>ttOjxWUT7VrGF=2Gx@_M3|`C17XA
z6QDYwwqZ&GL=6W{TEGXJ)P3t$(Z$@NI`WCADz-01M+V=F^=*DYcIV>95+BHJibziL
z&#i$^(rx4t4~uF6Yln{Cn?nDU;qx5mrPOsvpmn1oyND>w@L-Lz$1bBcpR9c5dt{~G
zc$|(s;rYYs$s`_})rEy0d_Ch0S3<Hsim(}^qejM`xCUmWdX}Tw%v4r&BRNbx7ardq
zYfocv;V>2$8^06Q-OYZRG<@41RJ)N2XyhKvK>xns1}j2xG-ybWV5)$=i-aBkO605E
zA#P<HQ2Z$v3W-o1G#V80xI{Rx`q*B@o(y$6)PO#?9{JoKNx`99o1V&dvU0LME9Sp5
z=#IR4{hJ&ig%NYw9h5@_pd~|<9Yg}38&|d;41QEf0`-f7>r!G;HcD`UjYuunU90HC
z1ru5I{x+g8I~MgUdq|<cJ<S`la%fra;}%Z%dPW&mk}<^?)fUod)_XZLpyZ!$LDZQA
z+?$y1NwL9R4}9tegt96Rewngf>eL~i#M0Y3B2|D5oBB5{S$6Ee)4o|i14fbHz{?G2
zMlnrec)Gn5QaV%yUqtT@OotZxHSl6lkJb;L4;Ro9vdi5aQt=#UN1_zcj~}|9y8eds
z!P<9y&EM@nt5{S=px@~OPn0wP4QIgMBS$9Kz>bU>Sa|Wm&qh%8*BHADd7t8|y>|ld
zEHr22GnH9EN4;JhPY(VmfYaZZA4L=FPbSydan!0#V2a(JosXYk+P$V?6R_6NX|H)H
zR~tBRHwfrt7bxRuKClxa`S)@HCxCkrYXEYTfF9{h9<Y1~W6n4bPC?)dE6@_O(1~CF
z{(74-LqYnF&~!0@f<q}d2rk<kJgK>{aN1S2qGxjip@wmu-}o5t>fglDWNh|Kc}AC;
z#5pbuBOO0NfaK()gWPl9g3gP97zzIHv!b7FOJs>)Br%Jsb+jphp1>NW&&ck?3^M(o
zD5RxxqNyVQ8(Oo*z8L~lxW^v5RD~BcZ1am$GA*Mnw9GtDlyImht5;w7RgVw6O;#s@
z0Rrk}n+Dq>$BwyH$uOkCN4~szEu6d7;jCixjUr&u%Jqok7=-0@WJtuVw%aSA5JCW-
z&*19zNegX>1)nELV(b@`Axr?M)nZU4GnPT*!c&WcLFK9zY7ZZR;UG2_H@?8T28q%?
z2t(efltcAjMfLy96I0g1(n>`BvV9s47jMbU7du_zzrRu*xG>>uuhB?eM_ESfOTPxr
z=@=Wl&90)MJI5y=c{&W%bR3u~B|+oXjQE3>IuFS7EI{v(>9x$#b=yEgo&;g4l~p@u
zF_d#lrmh8i0!A=6B46sx=j!TSz05qvu6MuK-<;H?BX%htXp4xW<8ksJFIK2-qO#mt
zA<_Pb&AY=?Y{LO{J;><gL_^|2yRx`-AcPHO(*i*f7=^eJId}o+&992orw9iXOML5S
zwOt6t-y@Lb#025C98e$rH=N)Q6~O)-LnMQN4_q{Q4o!y4=HMvwy*0}`cRvpa7u89S
zW4?b1M=qR#(+1`r9x`Jj_6AV5;(>actLzqzqAQ!VqcZ^Vl$qf+Mgzp4aacynVb!*J
z*{hRX5C2;+->^i<XaCAEpgKg!di66N1!23%`)lxm{019bMd;^85DS)wgW}*RKtJyV
zf_q4i;-vsmkf6+p-VX)FZSrUVZu=zcECUPY?2Ez{1W;>Q8tEMmgv_VGpua7)=0Zxr
z;;T(8os0|(UQ~Z{I(GHSPI9-Q;k!#$CJ;dqM75U<-VupaU;olwwM7zRf0gJ283%zL
zo{Uhvg~7_urI(BvT^LLYa^{Bqn>gw{L5MFaz$uACK>%W5oHWD)Js5d22DIFctKxDD
z>d7sGrkJ`yT`|XO$&R;Bn){2@;7Dla;;g^<qysNx-w1~Hwgl%Z_|m#th^q=27CXAv
zV3rG9)yh4AErS4NB{I;g`ac5gK~|t*Wgs3;nRT_yu$b>=*Vm4Dsm-n>=9sugMDhi<
zvK1NnTV{UU{k)7&o?LX!Q2goZXCkWl+o$6j3l#PucEVHOE&bcXrB|IPL=R@ixxwc!
zJ1T(@P}o7lqwa=C!eid!Nxs#1S6jIgTQB*-9HRPnFdgVaZ3z7zZHY?<f7Z$d?bqNA
z&F!CWPqrx(pU~V@wIzP%d-GP)`u9zvrFfz9F&{*e%RZ<pkO#FNEhGdK<L-{73Bm<F
zXuZ2`K8~la<>!xAtkgh&u(I2^OY<lfxW`}i13`N(U@xzk=#FM5QpF(Q<!Q)Ebc;oN
zVjhv6H9JfJgS2IqJf6PxSIbHF=p@b)sH`!^1gJ(Ev5s_)Ppx<9=uPLXnpJ${Kh>Rr
zvlzQ+JkoaL-`SlrI;)0{f2<lhTUGzPRueSJ9zH++ez{DHW*#z_z*(D7a>;om%wyUI
zwOs=|T>*gst_9A&Rq*SVqke*E>PKo1#y8N6BD6|N@fb${{Q*b<HOWN;7BNf%7A4})
zR|Y;NPW<0JLBw%Yk=p$D&4u9falH%g+6ULgPHZzyTDR&U5<&{Abh&(xg#e1j%!2-j
zU9LfsKJ2~OlRM_J=%y0Or*cjqkFoO1Y)-5?f=~=6w;Dr%#uwc|TyX){l9M2)A^}xw
zLEr|)mf~!Qk}PPU7F0Il8S5C8>GD6CvLD_x*uv(~%v_h|;%1HcefG|HD%P!p!1MIX
z(=F+f6F6PpW4FVuVVu;*-SWlhM7o~=<I-Zbx#uUYDbjZ>GNzU?5*sAPB|LROMmBdV
z(0krpu8ubZGcH)2vG21!31yAHM?0R-Fk)tp3be*6Whkb<6u{Jho+1K<dtAqgznfur
z`Bds>J&pY(4uv~s_XA-quS)m8lgSwRql7GvHA<0CX(C33#D5-=I?wog8~N@AU%nrM
zKY?m@TxQ%J(<)>bwgA|ow<Hmtf|@hRU4q!e3t@YF>f>>!1Hp;__nygMm4L9Qee8R?
z!kVV@o=R=y!UzdC#{(Dy{w9)~<&4oi-xa&ciEW%PuDL!~|JAS}lFLU3ajlp@D86M!
zDbpFU<3ze)Qj+@l5b%jXv$Ec6V(NrXH;Qo#wwe&%2sB-x%2Mw+Xm&hiKU-RwW>(h!
zPNLecI`9+m0U5{`eXTB_!T<e}&iRhXkn!fjK>zF0;z={=Pkf4OV5%Dq^&L~_-wOVg
ziHC(PFI(5Cp5dM$1jWC>f6>#@@}1pB1}AcY*RlW9aq1Ne^tRNgLdR(g6i)Z^J@~3f
zfR7YP`BsS%W~s0k6H4662tpKH<y)fk@02-gy|m_ujQ$#f*>W@ife%zyd+5M#_&Fb>
zOvUJDx)_A3IbjQ0@U|xI69b(aM5^1q#35rc1qT;IskMUeDGqTRYQ<6ZQw+yW(=?0f
zic|v`w}^=@QfIv;61FhSpf2KVH>&%O<?8oOV|rp~X9qCtU~T&MQ^<65e%X!I1~A%n
zB9eC#s_>%d<KaF$$}%>286KpjJ_$s&e7)Uv(v{)n2RyaO4J_QUvDt?j6NgwxPQy}B
z8NMS}c?`2tvqoE8W{qAL*CCHQs4zM)V|MXJER`hAsaVP7sa8aIa~9zu>SPOms*J2G
zg0_%<z-}yptbqs{o=!J_%43#Yfgh#8_@~H!v8=*45G9PXAtDwPJE4?*%vHtS_}DcA
z0WCpQ*XUpM!QH>=k6(<*p||1TPA@0edh8<ls@&+~#3mNYPt256mox?k+36W})LSt<
zp6ahP%krP3pSbnbBnBy^;ki-~<q&>4K*vX_vva}YV8T9pCy{Ek7I|ps*N?lO1!P_b
zpx9h_F`CB8xI><)I|Y;%62?8q?pKttc?6Z&qAcLfZxGwbBI4q*NxzO;Ve+$tFtBl+
z?IVb|02t<a%`0(0dK(k!EhUNyLeI6BPl527ogAd7!AcW=f0q%22V61cca-Dq6ury_
zB}NuUov_e+KA?F<+OB5Qg$ou!e1h-(s{fDh9V+5*O~%u{G_q|(WxhnzR5D5Q7~{wz
zV-)ZK&^S#1$wsiq#V8mrjPm%u{(*eN$AA^Cy_1Ks_-H`{j%z^wT6Or-<*tvq7q9aY
z=3*D_aAKa)_gT9VRnA3+q1Yq6R~M@wU>oj|^+pAT(J^l>rbbWus$i?aM<k7rj^3Sn
z-ZF&1wl{b#66lCN*u~;42VwU)&;X$DfrT&|dejoqY%@5{2?EPePL!5|r|=eSc_iLD
znfZC>#BuHqM!oq_SqXkW1GO86bIs(l^dG-eq|VgSCVtfuozUgl%XeS5)CK(KQlJB7
z8W^jmNpat3u+86CF0;OlcRlTyc=Hwlzmm*v-7*cs!?gzJ7|78T4T(h(?%nN|-b;jH
z1z9k_kdLC+c!a@5_|y}cRiyFk>h{=sJQp!}<VV7RR4uMo^oOu{@^wsqQ_R^mg%|%T
zdfWr$eq{G^%2+x;QC2;xG{1>UQ{Msahe!Eu&iRH}j4hm?GD>zK=wYC}sqB{f->O!+
zzgG97D#+C;h@c(s#fx`We*6A{QO1v^TlEq1FpC-}tn$&Tp$2A$?~wIQXcYvvDA5@L
zX*wZTpEwB}eo#A|AyXWvc0`iYI5x)XNSDS=9{~v4S<$8Y^?Qp<@mk$z1jbXIxQz*k
z=x-m3cZh`tCJztp!z$L)rfxwoXWH*q6D5<{f>#Qe9}EgHl0UyZ|LJf&R#1${0X&3i
zB)|y`KT#5OeJ#W%VtXV`r+Y0Bv-G+)BFgMgW~i4{y>;%{DRw+sr3+3xKK?o|%MU&w
zUo_wVW|qcWROQJy>N8Bs(TsXgiJ4MzZJ*<5FCk#6PG-(!G<aR}*X!3sTjzABvUVHl
z9?m6V_>hmcOQw%Z{_Fg^bp<fSDyJz%Tu~^nx8D#`Xe2y01O(wU*xgkGB3(Z2Oc%aq
zb0$<TNl-*b=N%!=e6ig^S%iKPJ3q=W)<RF#NnyuR3!}jk;|cpP=$20b&v|iLF21{f
zUPy-e+5*KY!WZr$^<+_<H2fzj6X^SpJ}b%_x?`#5pVD*Ee@)IrNF~@z=oPwupnI(W
zsC--ry)%I{&xT1?71@m0^^;|rSeQvx1Z+%I!`^*4b0kU(ur|{gXQ}T*XE1ojXEL0x
z4R2|iMjl5{F?Q!HggWkqbet>28(ZKhdpA#5FZlsOjuYLe5QP4J$XGnxDeN|>uZT%R
zOUhcn33z{g+_7J_QxW|<$LMF7@2KET&_o>&z}x||Oy@V8J|@O>s_5wGA2MoUhFP`d
z?VwS>2@~)1SFtgij1C8!N&3zNr{gdYWz99=?Kff2`W7uu;K!kZ1$5SQwr4~%l*<S6
zMiQ}3G{nAfSEjD|Ah*30FP~`^t1^iz+mdM=0S#qwcqfaAF%<w92$=0g$FCx^G%|HH
zod|dlG#^ox#Vp(xb^u4Eoy_12%fFc_JMfvr9eUp~+acKd4m0<G&$)--Q&d*^>*_ct
zJMdp>0gYGl@StMbb%ddar*^p^)TFxijgoUss&hKKPoHk-?A1PemE6PxvwvK-?3BUh
zgAXih{{sy`Pv_Y0z!$O#KJFZF7@G=6fVsGTg3LisZj{~9I6dwf8g%Q%LEK$C8AVaR
z<4<+S2?>eX;mNZ`z`&~DC2ZWuY`LffWe@nll7!HXvcV<$*?u9oq96sBqKav%0l*8k
zC;w%j8?wA0b3-3!br<g~EVAi!3~5(=1W4n<L$H=|5sPF0c}e(?PP*5KfNvEro+AGD
zN$6X9IFQ$Nc?k14V&OG~(mleEwrDiJCGc4Glem+t%$?|IudX3&GyU1*+CfWZ@bM!7
z#wEuf7AGZP)+i<y0j$IwL=trH5aERG#YVLoYOK+0c<SI3C*V0qXTYwUgCV2JaJ##Z
zY5()&+wx6!=BH$8RFvMhxS&jplT>y^_<|--N~_Nf^Af4oeg`lx8spcY=Rf}QdZb8<
z^CZm9sRWMus+8~i5~Tn=6GZxAUhA7(DZ5yoDBAEk*IHNxj9)r9*Z6W|hrp+M$<Ehz
z@3K}RepV-87dM{A5X+4?hx<gox>!VoxJ14?jJWdSFt-giT(*v8Lr^bHQf7-DGx4>Z
zv@XN#VFTj&^$F(yT0E_?N9XIouqvZX9$+GanGnbSGj#03XkrPAOO8&d?X{PMM?2DF
zcBZ6j-nu*5_IG4`jsfUlaroqtulUu!=+&9N^8Qy&wrBf;oqzOf3(Be5yY6TG?P2o^
z7ECVHIc6mg_UeiDnB$p?jIXVOwC4E78{3E<$qz6`3q9d@^ifvSYwU8*p7CA9{4EW=
zNA>UPR8_q<4(^j1pWc2VrU`RI|3lF3{a~hqaSexw2wj}xa3St&FJ8l^pscw|uW;bI
z(#x3E59%+w&zd_st=~#zd&mUEhphSjymtP^?UPlk&Nxx@Y7JNXd1*?|rL#F0aes=a
z5%u3nwe??8vgSOt>R2E&Uu&Vm8}_E`ti1=qkD%#nSWaQ3q^)y#OL1!XU)Z2Dw~4g<
z-LYvg38(aT*;)RlMH9E~bm#*mkxZ55L|>||rjXEm8(@6a>~>s{Y08z6eJ57VlsiyX
z6+)QoRy~45w4H3OD54Z_Q?&hk=#aH7!KGyKF&-^UTQhj#U1grGSfqu~rm-Y2y3N-|
zbbdDR2%$H6b3m=fF7n&u-xWgaD1(oLDq%KG9O@;<11ryOoY`|XRhG7BPT3`#4pfgO
zWv`3kCx*W2u4CtmYBbp)BnBR;MRnMu$3a$O0)_o>g8O9%q*YnmJu8~fdq@=B2Olo&
z)fxyI+1EfB_fmJ&g`KbU>1R`R{#|w|I{(=hL?CY|z2uy3@Z}&RzQ+lbI+$GDZdLZr
zsaULo2-eL%eimDEVm3><K{#TAhXXe*V+?E|c`U#Ihss2~>e;hemv){zu38gZA0D`1
zLK_+F`KtS>I4f{g9q78icqYL?_k=vmII)atXzI&396X{%M*=+Ybddo#vR`b!<%v`g
zhuqYB<~$O0UplVm1MYxx@lMWKn{P#r)~)I-)pTUdl0SQb&+q}02zpL|ZUoHg*s2NE
z&g}DnXRM_f@a2&hT)2S;)6Iaf+}j++o1%Lp)f&C)c4$TiX+-bSh`#z*&3H58l^W+&
z9E={F205^L3A9sSB-zGN6d-~rO`@zm%xzv(K{;9uWYF{mD_^J#d;WwXSy1K04{Cd1
zw(i)sy3tE#CWQhJ$vb@3(^|Hj`bn6L#^82J(9F=o?tp(dY9o}s1?4W}D3;21SA09_
zew_X3t{9WpQgHqDef_S_J?4j==9)PCrTYWwaO9UCj_Slok<Zla)!APnW}-)iwDmn&
z%VG+O<~NI57_FBl5l~<WTXH*N-`v};7y(Rg90$S|th@$(9MAFGDEy}hj;Tac9T>sI
z-W0d3KfBS|Ftl(x>`X#j#RxVCT)Gei-><w+SZL}T-MY`3n8C5u*<{UEbZf&x-0S?9
ztb!@t<tl!Kw<Sur$`fnoTIl+cpdms#rrKhjR@hv@Vo{A<nEW&Qam<gc<-+Sr`Fm`c
zu*%Vq{FjeNR<u>0z)=8Z?-Yy=g=W5xS}-`1@^rB;5VY^41bJij0;cMNSl|}H?hRh~
zndGcw0gjW^kgD?LfuX*QAaq;E4o_T2Uf7YJe6!L)ntR;)NTg|5IeX$~jyx|^ReeDR
z9p3Uk<uv3BjKpZT{u{e_ApW0?hTnzH?j^5==5yWNaPvroK&1aa`84k>2d|Bn67hEJ
z9s$gzz<ABdcP7*Jtkx)w_Vf;perICO(AuO1iuzkeke3Da6|=zZPUMOr4(fNYfs6E;
zYtm<$(^CY>P`uzz?g6zk4GyVVKc@~Qzi+v5d?K&n<uMU3i?=jSx%XVCb0%dwl&)WD
z%b0ZE5&re#Az#i~ndznc(v7*()<#ZFO5+zuF!8V1=a;Hi-ed#^l;YtN4lHlrsgrEb
zbEaNx6sPLf7A>V@HT;#}UOtXPt3Z2yl$gn5pPH*m%r^NIl;-*)*6dm^mVr>MKBBsC
zMO^88-vFymHIDLUAD}r|ehb#yS3lZ@)SSwFus|!qoGj9<CoAv=c@l4^VMfB19nL9d
zFCKp4eev+JfN6-fJQ2HMqJ8mlxcHWHAO2v{<J<8g1iGpSRgZg<BDU4|PAnp#Z2iLL
zJ$?=c{dHpLTwXXX;R&)>LCMqx50oa6>3l^4s4crMJoIvG%XoI!>weCYMRWb1yOOpi
zw+>&u*RWEhiaAo$+*3E}uzM7LTgF&!%H`Gg=Ik6jWMw^F-o_Vdt7PLRi#v$0rL^A{
zaMn6*6Y%?7sJ)$4V6HQGevM*>%b%<l#QI%2sO?0IssDGM5B^SV6#)8Z9J~D<R+-IK
z<6iin-%}xDkkHxmF(Ed_4MP;Qx8qN?)BdQ8PA+zvJ-_ub-cnD?CBJ%nJW1vE6b7lp
z#Jo;@GQO1i<>|v^O_!pKpyiJbX3HF;;mR`ZsKlx~!OD2O@B6bvF+ZcOZobH4ZQpjU
zs#zZIHuq~InM640<+neSQA@5d@3UHZgAHFeD8@mbJL}~!GF2B6o}9ZkrDfyD9a5Sn
zIcDKY6x)S&ozk4j-I*6O@bFt+2`d$GjUCmQ^>252eM`(r+y4>GeOXyfHMdbgI=4~0
zeMZl=lPj-|6?33Q3KWu;#CBcKsWOk)ql~A|<Iq=|+8q-YekVmG@e|~Dzhk!LDSN1d
zzEe3#j$M;?7mUY;F9}e@0|#7Gw{%dnZSIA<xol28C=*Q$_>3cE^G&<dbv`6@{*>hr
zcZl^`S{RzYpl_<4Ul>~uZfyOPQ8f|&IEn<X5HJdXykOjX3>u5M^n)@b`&euSFPp8d
zdQ|w|`MzEk#*T*dxNHdm5q%hZXqiLlmX*%8n!Oqk)5)FxUgs7p`*T{C2t6JOrIkk7
zS_L*40F$Oer>Qy~qe3_nzYXbSMPvwK7xmb1F!isFwYtud439ztO5f?LDE?>oTHkvp
zz2x&i4;jiP)OFVPdN_fY&Kv7fpT;D|A|k8?OgZl?_&Nz-I<smu;`MfDn5T|=K6-PY
zd*{hpJz8;<{aL*grZT}+2M(DfE!|f<=G19a&{}OAYQL-{y%kKW05l@!V7e`!c0hTh
zT%m9uyDXNJl`+Hr*u_KNcEh*zsdw%!D7QsU>;||MM440TpC%$;#Y-?l?5F;<-#aeQ
zG1=aZ8^h7J+^n}YPc?oF&@R;l9~@jtxZ>Vb7R^9!?o)$3rem;Yx=Il(Px1@6AqEz5
z>mLv4?uccb<#|MEXwNY^EVEFBt+80PRkmh_w*Z5v&IrpseQdV8iGK=Y?yjq6O33k;
z%v`bA8hWF^{kclw$H3k7mB-&ZJ3Ew3Szff7oUvEWmm8N<I}>rX^@eucu@gOWMnFAr
zZ%C{~8zpF<EAKqo{ube0Iw+(FfiQ7qm*@A0*HxJ6ATheLYCH&2fUl4}UfI3QS-hB(
z&7mFkba|TnDRV~XwE*O%J>C`j=oOgl?Hgu$n>ZdWDnP5|Vp62H8L933Qs81Vq${^w
zk*aGjfR;MsRgX_UQYl%?9r_C$SLp;*=7B3$2hN|dHeNr~G4%caw07qIP`!WLAA9ma
zD9R8byR<Qu82i3d3X!3b?CaR~EhH3C*`+L5#xnM0lx0k^Gj?N(v1F{xnDw6T<NgEg
zU+(h<oO7;o&UKyZalN0f=jG*WiSUVf*GRm3SRj-w;qM{Q<`Gw@ao>8(Sk|<i9iU~x
z5pHDsjKrjWCQQ#cLSA$DTAFyb?lq{x=*TDvQ;R-gSP95D(F{lY9*HdfCCCVyI@w{;
zT1ouA+?&J!q!Ulu<vZldC>qa6rRmOnKszH3J<RaGQhl@Q=N7vmpB*MZf$+PPttbv5
zuAOFt(HKi>{`XHunPqA1R~3u$uSie5-z~{Bwq#4}Mn?-xScII9<C5l{=k8j6mPeMi
zqmbO>xB(ZqfvWhB8AG=RKp6$^GJvQrK;l+?x&&%Rgg9$;I=4{kW-Jm`aT|O*BCT{h
zR1Lz9x;GzeDKi8f?dTi@+%7*F-Ye5N!uuYrPNi<lRQRyL{w`mk7)7M9YU1y6dM1&B
zx0?35ZRc13{~cMy#NTOuqyZ;EpKR49cfKwSKh6WhxB!Y-QY`U|@V{IP9~LKA-;+xP
z=fb|?doMvnx3^?fs`%K!mPX_oX+J9&RRYE5LSMSel(GS^`V)9p4t5O3savH00ING;
zbvkN7UzyX|W-56EX*~bH!#DljB>il<kAA4>tXXje_)kiw@nsge>y-k$jI9jbt(598
z0tPBp7zdUct+0WBM<R1_k`WTW9;n3l0i1+TmP)Io?@OQm9J&+v(7)cr&N0qP01yt|
zj;Mh|??$%;&G+7+NZOHPBq-(zX}SskEg4=7{&|+j&1X`i><)(`8x7B_{eFC3{Cq^7
z^O{?E-;93_f%xSntbn{^Yz%>$5r46owsFA2OS2>J{J{QYo4pTgjsYebXXzgE{oIQa
zJ`sB*CWI+D-NUwE1Hnwy7af)cXs)8SLK4CITg%_~MmryUE(-fT0S>aXoZHMPB*)%W
z*pHln&*I^KGWpA`-4{D}Ee?y?${pD?AMD@)Yi^*{?HqEDP4i|MRZUMW;IWq;XEozo
z>oN6Rp+!spbpW7|>DinMAf~PB6%o}U^g-1}O}bGjY~j}Rg?_onXg#BxGtDOXR^*C2
zhXnba*kPr7CH<}3RuDCnP=}c*tcKJ6lauIbmVbX>eY{cHpfh3hWc2)KXjL@>VE4W(
z>`7w9%hKy~0E!hgDr0MC6d`MG;Vt;>!JO!}SJS0p1-CZ}yh|1tty`2(me#Mc-of{Y
zKFvA7yG%Vp%13@c!+zsd01(i_h4QidbH~uce#Yt#^8MJlP9q~@uD_~--|&$3YP@rB
zQobnLAkXdis5c4Gf+^IBk6jT3c^c*+SLjiQzTief4<Dpmc>MFMrZ~@r2by)`CWq5$
zId94<m2C$R#A_#UZRD!aJe25}4ai=ukea9aYX;+QOhZ}*Un092>K%>->0P8mAiKX5
z`5@Q-QTh>tdtWvLL=rYAz(|EiT+y(zCHr<LgoY12`bb;*cr5Bo47a$&DOJ2a@1G#_
z9Eiysz=hrX5(5DAA;Ixv_wXY=MY~@bAX}8B77`9+9JL1@TP#LuGkj)7!K{7xwSSKC
z@kSf0K4Nee``_2kj#<YTOpNmIMs-I#Vm5|}-`g_Jw$Q2Ubh-4!ve1qB|2|vtlQy>x
z1MJ3NLk4<X;erJ5ZN$@u$$5IlU)B8edJl#zGiSu+#1o$O7<imPjvh?dg&VTG*SbL#
zmtq@K%u*S$EBx7IPUmv;EkJ@re$snV-p$5+Of$Ol3j=ztYX~v26Yr%EY#Xej-UHq-
z0sP}~9Pj5<U)*?XTRHlVpV#>L5MQfyx<x%_M{$AOJZF`_#>E*zyrsAa$_1E+Rcd+}
zS)aR-OG`+=uorA-7xPe}xNB(|Nm#W8mY%Tb+fkg$cwVSZhJ`lTUj8MwXY+HB^Yx_e
z&%aEXxuVOHN(`Y*{ST?45InHrF@Vuw>^Scr3d?a^`%EU9FuJgI71}v|z_5?2h(%ex
zV*dTt;tyZT(plevwsBBYNIbK*jlk-xXQ_m}=flC&ljB6#lWHv^UcQuor^0?C^7>zt
zJts`eyb4~+|9vhf0!?-kwZ1j?+JR&z;P=Ms+6cS3hu^y6BopAfRm@O%=BFGI<oH)l
zlFh#iqa!EmSBs-b9KQ4=@z6l-%ADuN5${4RPXk0qX<~ky69<%~{k!4G+3x-FcN{UY
z#g`$+uxHmZh*ghHZ|!^K(<5xX6sqjilmO4;r><hFpoMQdN4>E3h+L`nTV9Wx<FCi}
zG$aL>DSDNZ5Mk?^%;(_~JQnm?ICNmQx_0JrU?gsGy6-HE$?vV(#SUr|nF~yv4?vC)
z<(8+i$hl}5Uuy=bm7hz2g@a+H9Bos4@%@H!im&Cwu%%5d!y1J{0vyQhquz(+Glm|M
zF+i=YXdEpe$_P<d=z<S;(z|)yE^6_@#{^dR80Sv~sM$Kw0+fpjeB*sBX#CWG0<`xN
z_<QKnnWeIRGkuo?%6|a_N1<d+Nd&FGysnhq!;%nh@x9epM?~NM9*Q2wJ+<kr<b>2%
zpFa~IHv%Q2|7LXXj0ND^E7N{xdcp5C{6*^H^I*ug5ayW<z-pA-)vpdl^V!ep&3FoD
z&XX`kUPQ1sdoVkEWYyx9`KTJELcHJ6b`hc5!Fe*EYq=H%aj*D&7M#A|SQE|yqQ0Qh
zX%bQY(5A|70__iCXTzkbcOmI$Or{T|#+jCk+@sGamstkSgTW8~U3sciu5~o2#Dp8~
zYcc+WAtKzfwUuWjCY{S2a>Ob`v<MuDbJnaeFLy}2uT{S&1$RCO=jQdz)7rHx3SUqy
z^D3}1yHlUdDNn=%bS~>W-FWQFU>@D0l(7S+7Wxoh(ypd-+Z3O2|43TP10KW@9Lvpu
zjuVK~oZClR@9qM$yweafQzi_6_O@xrm2*8JJbr*xKu;IEW4m~ohDqqNv5)Rw4|zM;
zzImF4K2p?i7SG!S6)TFEvRMlfsGY4suevuOG+fA{)EF^or3nLl%OG9rqPUF@Xdl<h
ze^ESJhV*qv$>C6O7kJ#kZtOjPKMu5~trISIhECr~^UVK?8R03&4q2A}Og7I9!rMg;
zeMTUIOC~OvMGf0({cY~jpJKUt9#G6gbW}@sF1)+&&a>HA0$B5Kdj+T7I#PjFGOXBL
zaK9n0I4@@#mntRDbO_Lj=#5OjW$u_n^%GlliQoh=WpG-D$*W2sKfV5_uu<b7w3eGJ
z;kPY*+X6M+x9!fsGOAeI8?lQ!3g(_JI%H529V6mmFOfM<G~m3n29yD{I=#DN&iZVY
z^+X_=x|~K2Nc@?U$?cBTm^!B<UmQk`+&yvQoBoNLv0itvPn^2dF7~L8CEq{UE8?9;
z%=2BhB1fj0@)D?qlktM9I7zVJ*Rm5*RFpBsWi9`{uKh9QAo9$Y37!{yuPk~6_JbP`
z@=LWnHUv@y8pd659BsQ8vnBQv^SYUe7I263v5i3JRHfR0IqeBbJml}>cvQsw<vCAS
zE1QT`1L|q$45L$gTLdSSf664<OUw)YK_kt3rm;vwA>5Bt-(apb|8|RZlxwqj2a5rF
z4W3pM((bOBa?JpvVn&}e0RY6Y`&}{KqM95^i=DJo_2<%n-`h@Kt^&rqf0x5O8s9T$
zRrr{*%?gec`GhdC|M@XGS9DiL>I8e47@!!DDJ2fwz<fBqRg1z}=mj{uqtSzTowDYb
zWC>0AcjS2sEu)J<;fLC1R7v2KIk>`KZ`PRQ8=18be={*0;nn2+tg?hN$5d_U4Q&1+
zG!?6^-Nx#WwS(K2T??oQ<=n5~fLZ|<Z4T$cJ_Ko>;VFENq{o_ymttm=?Ip7WgdaX>
z;9%(4dAcM>egHaWR)0mV{U&l)wfW4i-L}{G)h`!Re8wT?Vo2gE6H=Fm;YA7u@zncT
z4WdLXk^9#_^F=`h^uy%#y4lb5#Xj1hjK*q=l!6;;{+-WSNdf7b$WPCKh<GGptOvJl
zbYsUOOXY}brRn{FSv@0q!&;&&{jA~5`?_>;#V~lqzy_!(urma#6mQ+cjg(H)_U_As
z{`fI<>2VqAxJV+Co9oi}x1XcO{ItG@3^Ckqb`9+N#i0cN4hDh&e`SYLr4l?lh}Z2K
ztmjPQ`<0u@{5QF5R4?qUl+#We95*F>NNiADDksW8{2e(GD*JAimRJ7-@T1PmTXMo9
zkkAVvGo!+_`p`f$5qVdw=NH8#D|>HFp)MP7?yb@`j`UsPGp0y1{Cvvpt2lJgj<n`Y
z#KPX!jp~~mu>;rYIoX%=vWSj;MRF{ejRM3wUbc&wxdK}^u`y6HK8K?`*$qaaT2SYC
z0P~yQ^7()%k&QBjIgLwP9n4|6+Yc9rq{CKWV<A)q6L#mKqL@}bvmTdiVGWs&_ZLfa
zNMjnhfmBHen?v8FhfOl|PR<?<vZj)iTB$={6xy@N@YpwfP5H`mGTmA~bU>hbI&*}a
zszSc01yvg|vc7pcB|`ULi3(R_^(iSd<juT|E-!44X*u<}=%4N-8?7iGy&x$Unx%Er
zQgTXT2@K#zaJYbcN@k;M`%kO<;)}GeAx0JV#<9B8!x!Cobygu(7V&38Bb87Ksx<Th
z2rD(3H#DezqwI<;sdo!1P!i|aY#otxW1na4pwTP7iOh*L7h4VVSr5b=5%C`ttWZUN
zXU}Vw)OC;RwvOXJ4bb9pSuzovu(QOl6?||iwI!c{>pZX=$eFR8TdzhNFeiDOYQ~)M
zyr;{>pxiA3y|+Ivbte9#x-0p;t(Am)JL?l`e^$_&_WHCvQx60Sc;o%mG)k9+pR%{)
z*SUwU+q@dVVfM0RTy}fa9O`w(YxBaZDf_(w8ntmfFCh>xWKSp4d?#DH>TQ<s@!}6W
zs31{mSk$G<9h;#^txZ5-E3}utg@fEuRGcT=TvBm<Sy+Uh)XMriukPTB;_2E=$O#Es
zMmivi(QmLt*K<e%p0{!V0k3qdA{bmt*=%RZ^IKx5L4$EMF?*H=S1!ya+Olk&!GQWM
zK;?ysmbS)Ellbpj&8KSL%bB-in`4bKcV@&;n2V631;U|q_@AN0UmbG^_uc{zs{~rs
zGxp(dFd;ZP&-`P>#Od<rM4ASjmak1iqeea9@BQL4o`;P~UNPo2d{(~E({Og<JNv7w
zN2WJeEj$bsq8TU|S1A`$XnYD3Fnk}ka&{wj0~Q~pN5Xj@<zA<yFH*U^xs7^zTlZCm
z3jqrib^;QI`tQ*+q5<%XW31=|J8DFBT!jQUOs3IAMlDVk$)7An$FzTzy*f(-AKTMr
z2ONroq^W-mOug^#f3<MTx0sB0FNw?1FRX5uR!&=(Zt6D)Qbeq7eOPXb@;KX7ob9h!
zh)Gy(k2fb_g$LKm<}0#&!ZH`084Aqw-3{91F+Z^o=6pl{F)RCVdI<Y^RhbG)o;hf|
zsA|<Vd`b$w&n^0a8a(=6Ktv9aUL5?g{NGm_rU-^C&b(D=+L4<eNh>+ZmbbMa>i%)p
zVh)5dnQ-x(k9YH9&r45JUMY|!eH`u#@~8Gc*+ZyrWpd^~CzJM)$nKhvHPIKUmu6aK
zrBT2eiF=#uP1PX56w`aJXyB)M8k%C+D*;Ci^X9%C%TDvL$jjaWSc<Fj&uYa-lb4G8
zBxl2Yg)OwYG<)7mvt29{d#A*+1zb$}ll1ffcPuA3ld$RIS@(eg@*WY>KpES66qzf(
zQLHjGzk+AOxE7w@wJhKI0F7=*9DH3gOdrLcG_p5SkvQBlkYz<x`95Z{OX!KD2~|d-
zJbS(J>Dt8^Gc$+8UVCf(z1k`I-2T|cF~~w`hTipT{p6V2ww;yrrKi}cu8;U(Nl1_;
z_Tqw*OoI{j53qIHzWNgP&)g>|zlVG%c~<1yG_<k7b?m^X|Da??NITsTcrE5IuJCIW
zL3yF!_I*~s3b-VQk3n>Z_<T5+eB3^m5he2S2os#zm05cx3Y5>>E@aHEY!=aVv9GZj
zOhtR<Xn_G^v`oF0$=FXtx=AN+>cw;2by1e%GQg;WQ$z9qkix%Y_b;s`$YkxB2h+Gc
z=fp1LvvbzVqZc8FguKS0f@fpDPbamJ;7<Op*EU~$7wC40;3)3^0yw$lZ|3?`7}O|E
zsjT6Ay5~%&%wUTb6PV!m$G1a=R5R#sI*T${-T*#}0?|!q(7FokMm@rvD6z3lPH@OD
zN6A@Mh=a!8qO4(M6nuI4Ra`vOx&Z_^d|Zo1{dJUk{7-9%L)JYkY}nL71{2d1EgZ%c
zW^Z~z`skSL5_NcRaAIdu@A2)VI`A>HCcxO$em8SAYG!!`Fb4pAOWL6LR0J9WlD*6b
zRd<)%vxpHfAlma%2}OI!&wIg3eUA&u{-B&kSBU*(vf8YXebZnktJt5ban!|s6}Q#w
z$oB2sj+VQ)&C5%K>!*-7)`r!_<DGU-^byW4{D7rwo4Qj%j171?X%G>z9KWn&v=hK^
zGW2P;Pq~{Dc_ge>7dn%^yIApO6=KO2gh>k0fpSxCxWaP&`Ksfd3nG~TH=X>N-|#<s
zf1L77@26(JIqb8O()EJ=62PoenQf{^dy2%}8m1NYQ0yS^XyyUH8S%s5klEpSYsz2J
z1unZtq)hW?6=c)BxIC}&JFHr!Aj*8ozF4x)np?r(TqS4D(JA46r<`rxsKH@<Z&N$y
zY_~vJr(Dl@kR(2R%A802Ayal(+ug#2J+CSO&n%ey+_!JHWhaYD%L$xF*gT!k`<@e+
zNhk})P8HI-fT^N-x!Sdofiu0YEPCMRer2wr_-`4#o^@Gn?b+Z9a|gNwND)__NgDu%
z*LZy~CQk-cq?wfkj;uwC9G>zwGB;dVdZQo-l@0a`K`kWra@L+hM!R}l{KCGqa(RYu
zuEkH>Tlw>H!%(ltN3MD4?s#WzzVBnl)>{8We9cAp{%YQR1W#YVxq4~ap$Ohw?Ny`I
zKDjE(u5m!u%?+U%NQdR0>g9gABWLQIEv;5q>KEAH;|)_OvEy;~XnU_E0UsD>R)V)F
zYbEFSbqbuCw5o<H?+4TVQ->++@38^T?s+j^hSXU~Mc2RZ0Ps_bCE#@D2;GrbbjTk5
zu9hu0twua&Jb*NTXi46*w()8(b4<;{r}x+bB1e8JfB$zq)?H^vj2Lbz^aUvLSTVuP
z31m}rC)xW?Gfu5fc>)bK^Xwh9X8YDr__G8GT?*ZmYEU}a_*RqoMW1q29g>HJO3@5A
zHcDKuh;792;pW4j;~Y7Noa{pwQ-&K^pnbWh@L>J&3^_);#|ajoHslgEi7ifhJfVAX
z?#Aj5tuyLO=WW`C(1Nssn1JuBO#7-pt*?ADXlKs+Qu1zSbZ=zYu4XRPu&dtCXBQKP
zrd?X>6^iYv);o$SQj1C3JT#zj0o~4S1n$xRwSi_|Pr2tkv*CqYnh4j?vZEY@z3Hj}
zY|nU@*2>FQ?wrpAmUxG@x`I-@WanbKFI~qozHDzz(?JV(C?7DrO_fnE>ku_Ig42Aq
zgsf<FjbSeFOOG_P@o^Qn0P%ur_atv0iTr!*sO+FGAd{IN3#|FD>n7)2J-zIdQ{hIT
zF`u6EBFuRz&}{66&#s4C?|7WmtWNXS-auGEhvG*-b~EawqtYo=dB=jMvAl~>M5J=%
z)}Daulpo>o3=~j2ZW0L>u(5kubd4V?E40CN?r{fS<h(Jcaf~m8aer+a!NPFCrgz#0
z`o^1l$8kzm1mHfdPgqS_Wk~>Ee&lL+b*Y?Y)xL9_Hp&Tun|a*w9r<B$$kIt`7`%3M
z3!z$p9t&iPCZ7m)gbr!)zf0yuPIJxnx~!SWo!eE-OIzMU*p3nR-hdBI0sJ?5Uta&{
zz2Hd54|uvByn3^6TAWA@Alos=zCa4@6}-qR3{3YSrUxwEqhtk`O}4Ds?Z5B4%j4#G
zr{l8@oq*;fTmzp<P2usr$yN5GASbRlXH-G`WwA9zF3$$zHu^+H$eSrstf9@;6oMc9
zdLe`pC&Jh2t=Z0w`NH<YUx`hiwah^XRQALBz<+=rs0wzkBHYfLUr4^~fK;|aQJn)z
za%LTB*0}}8AKb+g-eSjJjHivN_V4UD&MYHGQWI4GW9_sL;22%UBLQ8^w?y@t4C@MH
z_!OI;a*7Z)wWDHty9sW;>RWn9O-xAWjwT%*CAFxPbvE}yt}wG;rLot`Khy--?27ol
zb+bDN!|pHn2w+;#g$zz-YZQ&oPwUh18hmbvXa%)X0F;e((gwh!ok-XLuY}I2Ms*(-
zUud=P;JMpPZ?I;(dRs=VgKt-=z}crk2EFa2gZNszcbRgcrqsdV@kvI7lwAS~eSo9n
z*LUAH@3?5VU2=8Im?@C)rb?}28j`cqKtdug*)1%=TgIi{>@bO&uTA(dHX|~=7B66Q
z5`VugnJ;A95+?}@9XC^kS+=Y{ztu7^CR6sgQ0JmN9nGish7C04b$#+pg-z~t(Zn6O
zwSa&tBeysmx7gU*W)RigTM59!mK+;wVoY`?j<ZPKRHa^s&+Fc8Yp%?p0uSsDkbI7q
z>(HoIB|Llbwu8^P<|Fjc=-6{|%OHe$flL<J#^S0*0!A+^W~rLzuh}O@`r`y8h^E)3
zlWX#~MPEYs{93J%-s$!0_ZHjUT?7o{*L_0o%cWo+uHY+AgQprM5SbGGfDn{?ni^Q@
zeXm|=jUrm*jl2xx27{V8W`kPv<w<Fsy!H^(FQ8fZ2zM<dm_q`j5x5neSHm}x`uMmc
z&$xM3dS;w^x@t2ZHDKa8Dnf)Nx5(9Z=D}v+ug+fzjM~qgGO1RyZpdp)K4`ZdfibNN
zFy<2UOrUSw$ZW&0bpZx{U+wN`aL^qNP6XHl6u5}!qpydA750?hn3}HJaO^Iws^gcP
zOf2eZnNtqbu=zS}K+QMOKrHzJFy9PAVCrM4hzygD!joNWx1hNu2lsTOjLp_d7ayXT
zgVxhHJ5&OfqLV(ksBNxsb85p>#wQC(7dE@1vR<AC@yCRd?@h_w<}Ze;Sh=-n8Q-#!
zy`(_1f}hgCuz~xSh&e=xE$ODjX|VE>>sjX58=lRUWuhU5bzflF<WdD|6yATx$ZK+w
zA;!K;aFTGno$rAYi<qz{G3_|8=US`+-eJ*JO9A1~x=kY36My~#m+g~A{~CIrNj?pk
z<NDe&{IhZD)Hea&6Vz|Ho@GV9Rksvv=0_v4m&X3E01D1OyeCyh!82=$MlX1Z*_(o;
zVV;VT(8&Q-;9SdL<9!CF`|rpxXd0=*YPmByquGL&9<4;68}*+s#W;58&0JVeX~w>K
zu&(xgvQMVAPz5<t6OdjLJ^NDaql&|4a9Z=+Lv7d7mlF8hh!lnKNJ1;DZ6V`hB-cBe
zL#wpEVN;R~=Zx<FwJ{4nXKuUx!IXwZOMy~(76=KNuJt!n0Uw+j1Am3>`=*^u$1tsM
z6>g6B23x-uka&=A6+y{-LA29afBe2*n;%%?8hR_D2iolEZ}k{jCtJJ9(=Pr1$>Qq(
zIC<7~XM1n`3Pk|8h*8OLOwwMON*f5R0V5zq`!vg2@c(A`)f3Ct(*|%q9LQQ)G}e!J
zMh8FXN3rJ`eAB%`Si{nPrKp#AZc@N{;)f^GUrqZYbCm!?S78yn$TTL;<_8gZMVsm)
zBIr<Nk#_>oEpj;?*PFf5HXyVGOFk5<Y5Nl+>RrhCsP1|znv`B?`R_gD19}hRoO2V0
zxtqEpI+0*EFHBI3Vn4hEfyy4d@<!G4t=$7MKSkGzEb4|WDhGdQXy=M4nGX3*FLZR%
zo`sZbekchIqnPnW(t97n$;!CmIbjzahc6DEa>7U_kbB!Yi?Jl2Sk%5I8!C8!8DFEZ
z5|vKCd7jQ06Sv~h?AW}`EG+}1n7!axlZ})p0ENeU1>YGpg!l+q?*L*wPK40U!n+df
z=iNkRLcoc1HF=XD)iiF)wMyUSQiHAJ%q!J9M>OFIC!XtVamuzbuH%<$lYcMXfG~kZ
z;w7S9JBCU_?-4K#?^c?}oAzEW9-#r0FuT+u;Dv|W=iLons}7R@hsfK0{13a{={1s4
zKN2ZG&#Z$03JY*M0<K&An&3X(7rbei^RnJ-ok{&+tG**p)8b12t(H6>6lo0kVYAD#
zh_u9=@ps(Tz&FPde*UQhrT9fgbs^(*Ex&gpc!q;G_~m$kN-x`0TBKn7M!sQ;qmE}x
zYV_<-$uPZ7P0sTG1An!8pn)pLyW`nOpBVwgY`LBRo#+AKSI9V))R$bfW&%sK9+h8T
zw(IC;lKvACQrJ9vQ33gygP}bDbYeeg;xJ#znbaXgs$E8|EYJ9#VnF#*NjVL`zPNt>
zf#aYVPMJylT_$o)0K4+-_6LK8%ohcGy9`@vW2P4agxd5Scl7VUV>~hkKNP27D&4vk
zCZE(fJ^Q(WblqS7cg7)gs@a-AQg#~%s@|Z*!G>5M>gT+coU-&FO~3N-xH-uwUR0XP
z4kPs!%xJ1Ze@?aRaKXZ}>VNG90DxDPMpvcYjiu#zZh%*t+4J-#l^8c@ny6x2z=bRF
zZ`q{jlD;dd!9BBL&DwWr@D+pSe|iE|cB|1$9Q;E<Fk9JHB@v?o9J?p&bjcZJTfQuu
zJ2HCS?~W$s=L@<4)OETDuRQ;&&13hqy%`Xsl&lwB2p)JE+&hX4Vo&ou{~ti!R^DUm
zFCwox3nke&lxrQCVCmF;p~AIP=@lMjYFEzqK%j2Akm*M`c~^>nch%#*WW4Mu9&Up9
zP%lyTBp_!sKH>q7nyAW8u%wy+DC&vExj{frT>nupQ?+xhHD#!752oXz<)edGbR8C6
z?T>xV3dn5|wmw205`wV~R1KKb>X}W+FrfcqA{XzRpw$=6Z?a{FMFlT_j;|rHki@8!
zu$pX@fqHXCx*dJb762PY=YH3EYJQHwfq+9`ly37zUs0gG1+TxBK+nqo_TQI;rHVO{
k{y%Lj@&DSO;(08AmZlS!!KEui1kev-eG9!>9jCbe1B40V5C8xG

literal 0
HcmV?d00001

diff --git a/configurator/index.html b/configurator/index.html
new file mode 100644
index 0000000..bee35e5
--- /dev/null
+++ b/configurator/index.html
@@ -0,0 +1,1225 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Numbus Configurator</title>
+    <!-- Tailwind CSS for modern styling -->
+    <script src="https://cdn.tailwindcss.com"></script>
+    <!-- Alpine.js for lightweight reactivity -->
+    <script defer src="https://cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js"></script>
+    <!-- JS-YAML to convert JS objects to YAML strings -->
+    <script src="https://cdnjs.cloudflare.com/ajax/libs/js-yaml/4.1.0/js-yaml.min.js"></script>
+    <!-- Material Design Icons -->
+    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@mdi/font@7.4.47/css/materialdesignicons.min.css">
+</head>
+<body class="bg-[#0f172a] text-slate-100 min-h-screen font-sans selection:bg-fuchsia-500/30">
+
+    <div x-data="configurator()" x-init="init()" class="min-h-screen flex flex-col md:flex-row relative" @keydown.window.escape="showAdvanced = false">
+        
+        <!-- Sidebar Navigation -->
+        <nav x-show="step > 0" class="w-full md:w-64 bg-[#1e293b] border-r border-slate-700 p-6 flex-shrink-0" x-cloak>
+            <div class="flex items-center gap-3 mb-10">
+                <i class="mdi mdi-cloud-check text-sky-400 text-2xl"></i>
+                <span class="font-bold text-xl tracking-tight bg-gradient-to-r from-sky-400 to-fuchsia-500 bg-clip-text text-transparent uppercase">NUMBUS</span>
+            </div>
+            <nav class="space-y-8">
+                <template x-for="section in getNavigation()" :key="section.title">
+                    <div class="space-y-3">
+                        <h3 :class="isSectionActive(section) ? 'text-white' : 'text-slate-500'" 
+                            class="text-xs font-black uppercase tracking-widest border-b border-slate-800 pb-2 transition-colors" 
+                            x-text="section.title"></h3>
+                        <ul x-show="isSectionActive(section)" x-collapse 
+                            class="space-y-0 pl-1 border-l-2 border-slate-800 ml-1 transition-all duration-500">
+                            <template x-for="minor in section.minors" :key="minor.step">
+                                <li class="relative flex items-center gap-3 py-2 -ml-[7px] group">
+                                    <!-- Status Dot -->
+                                    <div :class="{
+                                            'bg-fuchsia-500 shadow-[0_0_10px_rgba(192,38,211,0.8)] scale-125': step === minor.step,
+                                            'bg-green-500': step > minor.step,
+                                            'bg-slate-700 group-hover:bg-slate-500': step < minor.step
+                                         }" 
+                                         class="w-3 h-3 rounded-full shrink-0 transition-all duration-300 z-10"></div>
+                                    
+                                    <!-- Label -->
+                                    <span :class="step === minor.step ? 'text-white font-bold' : 'text-slate-500'" 
+                                          class="text-[11px] leading-tight transition-colors" x-text="minor.label"></span>
+                                </li>
+                            </template>
+                        </ul>
+                    </div>
+                </template>
+            </nav>
+        </nav>
+
+        <!-- Main Content Area -->
+        <main class="flex-grow flex items-center justify-center p-4 md:p-12 relative overflow-hidden">
+            
+            <!-- Welcome Screen -->
+            <div x-show="step === 0" x-transition:enter="transition ease-out duration-500" class="max-w-2xl text-center space-y-8 z-10">
+                <img src="logo.png" alt="Numbus Logo" class="w-48 h-48 mx-auto drop-shadow-2xl animate-pulse-slow">
+                <h1 class="text-6xl font-extrabold tracking-tight">Welcome to <span class="text-sky-400 text-shadow-glow">Numbus</span></h1>
+                <p class="text-2xl text-slate-400 leading-relaxed">Let's transform your hardware into a powerful, private appliance. We'll guide you through discovery and configuration.</p>
+                
+                <div class="bg-amber-500/10 border border-amber-500/20 p-4 rounded-xl flex gap-4 text-left items-center">
+                    <span class="bg-amber-500 rounded-full p-1 px-1.5 shrink-0">
+                        <i class="mdi mdi-shield-lock text-slate-900 text-sm"></i>
+                    </span>
+                    <p class="text-sm text-amber-200/80 italic"><strong>Privacy First:</strong> No data entered here ever leaves your device. This configurator runs entirely locally in your browser and is fully private.</p>
+                </div>
+
+                <button @click="step = 1" class="px-10 py-4 bg-fuchsia-600 hover:bg-fuchsia-500 rounded-full text-xl font-bold transition-all transform hover:scale-105 shadow-lg shadow-fuchsia-600/20">
+                    Get Started
+                </button>
+            </div>
+
+            <!-- Configuration Card -->
+            <div x-show="step > 0" x-transition:enter="transition ease-out duration-300" class="w-full max-w-5xl bg-[#1e293b] rounded-2xl shadow-2xl border border-slate-700 overflow-hidden flex flex-col min-h-[650px]" x-cloak>
+                <div class="p-8 md:p-10 flex-grow overflow-y-auto custom-scrollbar">
+                    
+                    <!-- Step 1: Deployment Mode -->
+                    <div x-show="step === 1" class="space-y-8">
+                        <div class="border-b border-slate-700 pb-4">
+                            <h2 class="text-4xl font-bold text-sky-400">Deployment Mode</h2>
+                            <p class="text-slate-400 mt-2 text-lg">How would you like to set up your device?</p>
+                        </div>
+                        <div class="grid grid-cols-1 md:grid-cols-2 gap-4">
+                            <button @click="formData.deploymentMode = 'interactive'" 
+                                    :class="formData.deploymentMode === 'interactive' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'"
+                                    class="p-6 border rounded-2xl transition-all text-left group hover:bg-slate-800">
+                                <div class="font-bold text-lg mb-1" :class="formData.deploymentMode === 'interactive' ? 'text-white' : 'text-slate-200 group-hover:text-white'">Interactive</div>
+                                <p class="text-xs transition-colors" :class="formData.deploymentMode === 'interactive' ? 'text-white' : 'text-slate-500 group-hover:text-white'">Guide me through every setting manually.</p>
+                            </button>
+                            <button @click="formData.deploymentMode = 'non-interactive'" 
+                                    :class="formData.deploymentMode === 'non-interactive' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'"
+                                    class="p-6 border rounded-2xl transition-all text-left group hover:bg-slate-800">
+                                <div class="font-bold text-lg mb-1" :class="formData.deploymentMode === 'non-interactive' ? 'text-white' : 'text-slate-200 group-hover:text-white'">Non-Interactive</div>
+                                <p class="text-xs transition-colors" :class="formData.deploymentMode === 'non-interactive' ? 'text-white' : 'text-slate-500 group-hover:text-white'">Reuse an existing configuration from a Git repo.</p>
+                            </button>
+                        </div>
+                    </div>
+
+                    <!-- Step 2: Device Personality -->
+                    <div x-show="step === 2" class="space-y-8">
+                        <div class="border-b border-slate-700 pb-4">
+                            <h2 class="text-4xl font-bold text-sky-400">Device Type</h2>
+                            <p class="text-slate-400 mt-2 text-lg">Select the personality for your new Numbus machine.</p>
+                        </div>
+                        <div class="grid grid-cols-1 md:grid-cols-2 gap-4">
+                            <template x-for="device in deviceTypes" :key="device.id">
+                                <button @click="formData.deviceType = device.id" 
+                                        :class="formData.deviceType === device.id ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'"
+                                        class="p-6 border rounded-2xl transition-all text-left group hover:border-fuchsia-500/50 hover:bg-slate-800">
+                                    <div class="flex items-center gap-4 mb-2">
+                                        <div class="w-12 h-12 bg-slate-800 rounded-xl flex items-center justify-center text-2xl group-hover:scale-110 transition-transform">
+                                            <i :class="'mdi ' + device.icon" class="text-sky-400"></i>
+                                        </div>
+                                        <div>
+                                            <div class="font-bold text-lg capitalize" :class="formData.deviceType === device.id ? 'text-white' : 'text-slate-200'" x-text="device.name"></div>
+                                            <p class="text-xs transition-colors" :class="formData.deviceType === device.id ? 'text-white' : 'text-slate-500 group-hover:text-white'" x-text="device.desc"></p>
+                                        </div>
+                                    </div>
+                                </button>
+                            </template>
+                        </div>
+                    </div>
+
+                    <!-- Step 3: Live Setup & BIOS Guide -->
+                    <div x-show="step === 3" class="space-y-8">
+                        <div class="border-b border-slate-700 pb-4">
+                            <h2 class="text-4xl font-bold text-sky-400">Live Setup</h2>
+                            <p class="text-slate-400 mt-2 text-lg">Follow these steps to prepare your hardware for discovery.</p>
+                        </div>
+                        <div class="grid grid-cols-1 lg:grid-cols-2 gap-10">
+                            <div class="space-y-6">
+                                <div class="flex gap-4">
+                                    <div class="w-8 h-8 rounded-full bg-sky-500/20 text-sky-400 flex items-center justify-center font-bold shrink-0">1</div>
+                                    <p class="text-sm text-slate-300">Create a <strong>NixOS Boot ISO</strong> and flash it to a USB drive.</p>
+                                </div>
+                                <div class="flex gap-4">
+                                    <div class="w-8 h-8 rounded-full bg-sky-500/20 text-sky-400 flex items-center justify-center font-bold shrink-0">2</div>
+                                    <div class="space-y-3">
+                                        <p class="text-sm text-slate-300">In BIOS, enable <strong>UEFI, VT-x/SVM, VT-d/IOMMU, TPM 2.0</strong> and <strong>Disable Secure Boot</strong>.</p>
+                                    </div>
+                                </div>
+                                <div class="flex gap-4">
+                                    <div class="w-8 h-8 rounded-full bg-sky-500/20 text-sky-400 flex items-center justify-center font-bold shrink-0">3</div>
+                                    <p class="text-sm text-slate-300">Boot the device. Type <code class="bg-slate-800 px-1 rounded text-fuchsia-400">ip a</code> to get the IP, then <code class="bg-slate-800 px-1 rounded text-fuchsia-400">passwd</code> to set a temporary password.</p>
+                                </div>
+                            </div>
+                            <div class="bg-slate-900/50 p-6 rounded-2xl border border-slate-700/50 space-y-6">
+                                <div class="space-y-2">
+                                    <label class="text-sm font-bold text-slate-400 uppercase tracking-widest">Live Target IP Address</label>
+                                    <input type="text" x-model="formData.network.live_target_ip" placeholder="192.168.1.100" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40">
+                                </div>
+                                <div class="space-y-2">
+                                    <label class="text-sm font-bold text-slate-400 uppercase tracking-widest">Temporary Password</label>
+                                    <input type="password" x-model="formData.network.live_target_password" placeholder="••••••••" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40">
+                                </div>
+                                <button @click="startDiscovery()" :disabled="!validators.ip(formData.network.live_target_ip) || !formData.network.live_target_password" class="w-full py-4 bg-sky-600 hover:bg-sky-500 disabled:opacity-30 rounded-xl font-bold transition-all shadow-lg shadow-sky-600/20">Initialize Discovery</button>
+                            </div>
+                        </div>
+                    </div>
+
+                    <!-- Step 4: Discovery Waiting Room -->
+                    <div x-show="step === 4" class="flex flex-col items-center justify-center py-20 text-center space-y-8">
+                        <div class="relative w-32 h-32">
+                            <div class="absolute inset-0 rounded-full border-4 border-slate-800 border-t-fuchsia-500 animate-spin"></div>
+                            <div class="absolute inset-4 rounded-full border-4 border-slate-800 border-b-sky-500 animate-spin-slow"></div>
+                        </div>
+                        <h2 class="text-4xl font-bold text-white">Hardware Discovery in Progress</h2>
+                        <p class="text-slate-400 max-w-md mx-auto text-lg">We're remotely probing your machine for disks and interfaces. This usually takes 1-2 minutes.</p>
+                    </div>
+
+                    <!-- Step 5: Language & Region -->
+                    <div x-show="step === 5" class="space-y-8">
+                        <div class="border-b border-slate-700 pb-4">
+                            <h2 class="text-4xl font-bold text-sky-400">Language</h2>
+                            <p class="text-slate-400 mt-2 text-lg">Set your regional preferences to ensure correct time and language display.</p>
+                        </div>
+                        <div class="grid grid-cols-1 md:grid-cols-2 gap-6">
+                            <div class="space-y-2" x-data="{ open: false }">
+                                <div class="flex items-center gap-2">
+                                    <label class="text-base font-semibold text-slate-300">System Language <span class="text-fuchsia-500">*</span></label>
+                                    <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
+                                        <i class="mdi mdi-information-outline"></i>
+                                    </button>
+                                </div>
+                                <p x-show="open" class="text-xs text-sky-400 italic mb-2">Choose the language for your server's system and primary interfaces.</p>
+                                <select x-model="formData.language.lang" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none transition-all appearance-none cursor-pointer">
+                                    <option value="EN">English</option>
+                                    <option value="FR">French</option>
+                                    <option value="DE">German</option>
+                                    <option value="ES">Spanish</option>
+                                    <option value="IT">Italian</option>
+                                </select>
+                            </div>
+                            <div class="space-y-2" x-data="{ open: false }">
+                                <div class="flex items-center gap-2">
+                                    <label class="text-base font-semibold text-slate-300">Country (Locale) <span class="text-fuchsia-500">*</span></label>
+                                    <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
+                                        <i class="mdi mdi-information-outline"></i>
+                                    </button>
+                                </div>
+                                <p x-show="open" class="text-xs text-sky-400 italic mb-2">Defines regional formats for dates, currencies, and numbers (e.g., en_US for USA).</p>
+                                <select x-model="formData.language.locale" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none appearance-none cursor-pointer">
+                                    <option value="en_US">United States</option>
+                                    <option value="en_GB">United Kingdom</option>
+                                    <option value="fr_FR">France</option>
+                                    <option value="de_DE">Germany</option>
+                                    <option value="it_IT">Italy</option>
+                                </select>
+                            </div>
+                            <div class="space-y-2" x-data="{ open: false }">
+                                <div class="flex items-center gap-2">
+                                    <label class="text-base font-semibold text-slate-300">Timezone <span class="text-fuchsia-500">*</span></label>
+                                    <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
+                                        <i class="mdi mdi-information-outline"></i>
+                                    </button>
+                                </div>
+                                <p x-show="open" class="text-xs text-sky-400 italic mb-2">Used to synchronize server logs, backups, and scheduled updates with your local time.</p>
+                                <select x-model="formData.language.timezone" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none appearance-none cursor-pointer">
+                                    <option value="UTC">UTC</option>
+                                    <option value="Europe/Paris">Europe/Paris</option>
+                                    <option value="Europe/London">Europe/London</option>
+                                    <option value="Europe/Berlin">Europe/Berlin</option>
+                                    <option value="America/New_York">America/New_York</option>
+                                    <option value="America/Los_Angeles">America/Los_Angeles</option>
+                                </select>
+                            </div>
+                        </div>
+                    </div>
+
+                    <!-- Step 10: Users -->
+                    <div x-show="step === 10" class="space-y-8" x-data="{ groupHelp: false }">
+                        <div class="border-b border-slate-700 pb-4 flex justify-between items-end">
+                            <div>
+                                <h2 class="text-4xl font-bold text-sky-400">Users</h2>
+                                <p class="text-slate-400 mt-2 text-lg">Manage people and their access permissions.</p>
+                            </div>
+                            <button @click="addUser()" 
+                                    :disabled="formData.users.length >= 10"
+                                    :class="formData.users.length >= 10 ? 'opacity-50 cursor-not-allowed' : ''"
+                                    class="bg-sky-600 hover:bg-sky-500 px-4 py-2 rounded-lg text-sm font-bold transition-all flex items-center gap-2">
+                                <i class="mdi mdi-account-plus"></i> Add User (<span x-text="formData.users.length"></span>/10)
+                            </button>
+                        </div>
+                        
+                        <div class="space-y-4 pr-2">
+                            <template x-for="(user, index) in formData.users" :key="index">
+                                <div :class="user.isStatic ? 'border-fuchsia-500/50 bg-fuchsia-500/5' : 'border-slate-700 bg-slate-900/50'" class="border p-6 rounded-2xl space-y-4 relative group">
+                                    <div class="flex justify-between items-start">
+                                        <div class="flex items-center gap-3">
+                                            <div class="w-10 h-10 rounded-full bg-slate-800 flex items-center justify-center text-sky-400 font-bold" x-text="(user.name.charAt(0) || user.username.charAt(0) || '?').toUpperCase()"></div>
+                                            <div>
+                                                <p class="font-bold text-slate-200 text-lg group-hover:text-white transition-colors" x-text="user.name || user.username || 'New User'"></p>
+                                                <p class="text-[10px] text-slate-500 uppercase tracking-widest font-bold group-hover:text-white transition-colors" x-text="user.isStatic ? 'Administrator (Sudo)' : 'Standard User'"></p>
+                                            </div>
+                                        </div>
+                                        <button x-show="!user.isStatic" @click="removeUser(index)" class="text-slate-500 hover:text-red-500 transition-colors">
+                                            <i class="mdi mdi-trash-can-outline text-xl"></i>
+                                        </button>
+                                    </div>
+                                    
+                                    <div class="grid grid-cols-1 md:grid-cols-3 gap-4">
+                                        <div class="space-y-1">
+                                            <label class="text-[10px] font-bold text-slate-400 uppercase tracking-tighter">Username <span class="text-fuchsia-500" x-show="user.isStatic">*</span></label>
+                                            <div class="relative">
+                                                <i class="mdi mdi-account absolute left-3 top-1/2 -translate-y-1/2 text-slate-600"></i>
+                                                <input type="text" x-model="user.username" :disabled="user.isStatic" 
+                                                       :class="user.isStatic ? 'opacity-50 cursor-not-allowed' : ''" 
+                                                       class="w-full bg-slate-950 border border-slate-700 rounded-lg p-2 pl-10 text-sm outline-none focus:ring-1 focus:ring-fuchsia-500 placeholder:text-slate-500/40">
+                                            </div>
+                                        </div>
+                                        <div class="space-y-1">
+                                            <label class="text-[10px] font-bold text-slate-400 uppercase tracking-tighter">Display Name <span class="text-fuchsia-500" x-show="user.isStatic">*</span></label>
+                                            <div class="relative">
+                                                <i class="mdi mdi-card-account-details absolute left-3 top-1/2 -translate-y-1/2 text-slate-600"></i>
+                                                <input type="text" x-model="user.name" :placeholder="user.isStatic ? 'Alexandre' : 'Full Name'" 
+                                                       class="w-full bg-slate-950 border border-slate-700 rounded-lg p-2 pl-10 text-sm outline-none focus:ring-1 focus:ring-fuchsia-500 placeholder:text-slate-500/40">
+                                            </div>
+                                        </div>
+                                        <div class="space-y-1">
+                                            <label class="text-[10px] font-bold text-slate-400 uppercase tracking-tighter">Email Address <span class="text-fuchsia-500" x-show="user.isStatic">*</span></label>
+                                            <div class="relative">
+                                                <i class="mdi mdi-email absolute left-3 top-1/2 -translate-y-1/2 text-slate-600"></i>
+                                                <input type="email" x-model="user.email" placeholder="admin@example.com" 
+                                                       class="w-full bg-slate-950 border border-slate-700 rounded-lg p-2 pl-10 text-sm outline-none focus:ring-1 focus:ring-fuchsia-500 placeholder:text-slate-500/40">
+                                            </div>
+                                        </div>
+                                    </div>
+
+                                    <div class="space-y-3" x-show="!user.isStatic">
+                                        <label class="text-sm font-bold text-slate-500 uppercase">Assigned Groups (ACLs)</label>
+                                        <div class="flex flex-wrap gap-2">
+                                            <template x-for="group in Object.keys(formData.groups)" :key="group" x-init="$nextTick(() => {})">
+                                                <label :class="user.groups.includes(group) ? 'bg-sky-500/20 border-sky-500/50 text-sky-400' : 'bg-slate-800 border-slate-700 text-slate-500 opacity-60 hover:opacity-100'" 
+                                                       class="px-4 py-1.5 border rounded-full text-xs font-bold cursor-pointer transition-all flex items-center gap-2">
+                                                    <input type="checkbox" :value="group" x-model="user.groups" class="hidden">
+                                                    <span x-text="group.charAt(0).toUpperCase() + group.slice(1).replace('_', ' ')"></span>
+                                                </label>
+                                            </template>
+                                        </div>
+                                    </div>
+                                </div>
+                            </template>
+                        </div>
+
+                        <!-- Advanced Group Customization -->
+                        <div class="pt-6 border-t border-slate-700">
+                            <button @click="showGroupCustomization = !showGroupCustomization" class="flex items-center gap-2 text-slate-400 hover:text-white transition-colors">
+                                <svg :class="showGroupCustomization ? 'rotate-90' : ''" class="w-4 h-4 transition-transform" fill="currentColor" viewBox="0 0 20 20"><path fill-rule="evenodd" d="M7.293 14.707a1 1 0 010-1.414L10.586 10 7.293 6.707a1 1 0 011.414-1.414l4 4a1 1 0 010 1.414l-4 4a1 1 0 01-1.414 0z" clip-rule="evenodd"></path></svg>
+                                <span class="text-sm font-bold uppercase tracking-wider">Configure Group ACLs (RBAC)</span>
+                            </button>
+                            
+                            <div x-show="showGroupCustomization" x-transition class="mt-6 space-y-8 bg-slate-900/30 p-6 rounded-2xl border border-slate-700/50">
+                                <div class="flex gap-2">
+                                    <input type="text" x-model="newGroupName" placeholder="Add custom group name (e.g. Guest)..." class="flex-grow bg-slate-900 border border-slate-700 rounded-lg p-2 text-sm outline-none focus:ring-1 focus:ring-fuchsia-500">
+                                    <button @click="addGroup()" class="bg-fuchsia-600 hover:bg-fuchsia-500 px-4 py-2 rounded-lg text-sm font-bold">Add</button>
+                                </div>
+
+                                <template x-for="group in Object.keys(formData.groups).filter(g => g !== 'admin')" :key="group">
+                                    <div class="space-y-4">
+                                        <h4 class="text-fuchsia-400 font-bold uppercase text-base tracking-widest" x-text="group.replaceAll('_', ' ') + ' access'"></h4>
+                                        <div class="grid grid-cols-2 md:grid-cols-4 gap-2">
+                                            <template x-for="app in webApps" :key="app">
+                                                <label :class="formData.groups[group].includes(app) ? 'text-sky-400 bg-sky-500/5 border-sky-500/20' : 'text-slate-600 border border-slate-800 opacity-50'" class="flex items-center gap-3 p-3 border rounded-lg cursor-pointer text-sm font-bold transition-all">
+                                                    <input type="checkbox" :value="app" x-model="formData.groups[group]" class="w-4 h-4 rounded border-slate-700 text-sky-500 focus:ring-sky-500 bg-slate-800">
+                                                    <span class="capitalize" x-text="app"></span>
+                                                </label>
+                                            </template>
+                                        </div>
+                                    </div>
+                                </template>
+                            </div>
+                        </div>
+                    </div>
+
+                    <!-- Step 11: Alerts (Mail) -->
+                    <div x-show="step === 11" class="space-y-8">
+                        <div class="border-b border-slate-700 pb-4">
+                            <h2 class="text-4xl font-bold text-sky-400">Mail</h2>
+                            <p class="text-slate-400 mt-2 text-lg">Configure system notifications and service alerts.</p>
+                        </div>
+                        <div class="grid grid-cols-1 md:grid-cols-2 gap-8">
+                            <div class="space-y-2" x-data="{ open: false }">
+                                <div class="flex items-center gap-2">
+                                    <label class="text-base font-semibold text-slate-300">SMTP Username <span class="text-fuchsia-500">*</span></label>
+                                    <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
+                                        <i class="mdi mdi-information-outline"></i>
+                                    </button>
+                                </div>
+                                <p x-show="open" class="text-xs text-sky-400 italic mb-2">The email address used to send alerts (e.g. system@yourdomain.com).</p>
+                                <input type="text" x-model="formData.mail.smtp_username" placeholder="your-address@your-domain.com" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40">
+                            </div>
+                            <div class="space-y-2" x-data="{ open: false }">
+                                <div class="flex items-center gap-2">
+                                    <label class="text-base font-semibold text-slate-300">SMTP Password <span class="text-fuchsia-500">*</span></label>
+                                    <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
+                                        <i class="mdi mdi-information-outline"></i>
+                                    </button>
+                                </div>
+                                <p x-show="open" class="text-xs text-sky-400 italic mb-2">The password or app-token for the sender email account.</p>
+                                <input type="password" x-model="formData.mail.smtp_password" placeholder="emrp raps vzoi vnoe" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40">
+                            </div>
+                            <div class="space-y-2" x-data="{ open: false }">
+                                <div class="flex items-center gap-2">
+                                    <label class="text-base font-semibold text-slate-300">SMTP Host <span class="text-fuchsia-500">*</span></label>
+                                    <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
+                                        <i class="mdi mdi-information-outline"></i>
+                                    </button>
+                                </div>
+                                <p x-show="open" class="text-xs text-sky-400 italic mb-2">The server address of your email provider (e.g. smtp.gmail.com).</p>
+                                <input type="text" x-model="formData.mail.smtp_host" placeholder="smtp.yourdomain.com" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40">
+                            </div>
+                            <div class="space-y-2" x-data="{ open: false }">
+                                <div class="flex items-center gap-2">
+                                    <label class="text-base font-semibold text-slate-300">SMTP Port <span class="text-fuchsia-500">*</span></label>
+                                    <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
+                                        <i class="mdi mdi-information-outline"></i>
+                                    </button>
+                                </div>
+                                <p x-show="open" class="text-xs text-sky-400 italic mb-2">The network port for secure mail transmission. Common: 587 (TLS) or 465 (SSL).</p>
+                                <input type="text" x-model="formData.mail.smtp_port" placeholder="587" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40">
+                            </div>
+                        </div>
+                    </div>
+
+                    <!-- Step 6: Network -->
+                    <div x-show="step === 6" class="space-y-8">
+                        <div class="border-b border-slate-700 pb-4">
+                            <h2 class="text-4xl font-bold text-sky-400">Network</h2>
+                            <p class="text-slate-400 mt-2 text-lg">Target host networking and server IP allocation.</p>
+                        </div>
+                        <div class="grid grid-cols-1 md:grid-cols-2 gap-8">
+                            <div class="space-y-2" x-data="{ open: false }">
+                                <div class="flex items-center gap-2">
+                                    <label class="text-base font-semibold text-slate-300">Server Static IP <span class="text-fuchsia-500">*</span></label>
+                                    <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
+                                        <i class="mdi mdi-information-outline"></i>
+                                    </button>
+                                </div>
+                                <p x-show="open" class="text-xs text-sky-400 italic mb-2">The fixed address of your server on your local network. It should be outside your router's DHCP range.</p>
+                                <input type="text" x-model="formData.network.ip_address" placeholder="192.168.1.5" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40">
+                            </div>
+                            <div class="space-y-2" x-data="{ open: false }">
+                                <div class="flex items-center gap-2">
+                                    <label class="text-base font-semibold text-slate-300">Router IP <span class="text-fuchsia-500">*</span></label>
+                                    <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
+                                        <i class="mdi mdi-information-outline"></i>
+                                    </button>
+                                </div>
+                                <p x-show="open" class="text-xs text-sky-400 italic mb-2">The address of the device providing internet (the gateway). Usually 192.168.1.1.</p>
+                                <input type="text" x-model="formData.network.router_ip" placeholder="192.168.1.1" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40">
+                            </div>
+                        </div>
+                    </div>
+
+                    <!-- Step 7: Remote Access -->
+                    <div x-show="step === 7" class="space-y-8">
+                        <div class="border-b border-slate-700 pb-4">
+                            <h2 class="text-4xl font-bold text-sky-400">Remote Access</h2>
+                            <p class="text-slate-400 mt-2 text-lg">Choose how you will access your server from outside your home.</p>
+                        </div>
+
+                        <div class="space-y-6">
+                            <div class="grid grid-cols-1 gap-4">
+                                <!-- Netbird Cloud - Only for <= 5 users -->
+                                <button x-show="formData.users.length <= 5" 
+                                        @click="formData.remote_access.provider = 'netbird-cloud'" 
+                                        :class="formData.remote_access.provider === 'netbird-cloud' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" 
+                                        class="p-6 border rounded-2xl transition-all text-left group hover:bg-slate-800 hover:border-slate-600">
+                                    <div class="flex justify-between items-center mb-2">
+                                        <div class="flex items-center gap-4">
+                                            <i class="mdi mdi-cloud-outline text-3xl" :class="formData.remote_access.provider === 'netbird-cloud' ? 'text-white' : 'text-sky-400 group-hover:text-white'"></i>
+                                            <div class="font-bold text-xl" :class="formData.remote_access.provider === 'netbird-cloud' ? 'text-white' : 'text-slate-200 group-hover:text-white'">NetBird Managed</div>
+                                        </div>
+                                        <span class="text-[10px] bg-green-500/20 text-green-400 px-2 py-1 rounded uppercase font-bold">Recommended for small teams</span>
+                                    </div>
+                                    <p class="text-sm leading-relaxed transition-colors" :class="formData.remote_access.provider === 'netbird-cloud' ? 'text-white' : 'text-slate-400 group-hover:text-white'">The easiest zero-trust solution. Perfect for families and teams of up to 5 people.</p>
+                                </button>
+
+                                <!-- Netbird Cloud Token Input -->
+                                <div x-show="formData.remote_access.provider === 'netbird-cloud'" x-transition class="mt-2 space-y-4 bg-slate-900/40 p-6 rounded-2xl border border-slate-700/50">
+                                    <div class="flex items-center gap-2">
+                                        <label class="text-base font-semibold text-slate-300">Service User Token <span class="text-fuchsia-500">*</span></label>
+                                        <div x-data="{ open: false }" class="relative">
+                                            <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
+                                                <i class="mdi mdi-information-outline text-lg"></i>
+                                            </button>
+                                            <div x-show="open" @click.away="open = false" class="absolute left-0 md:left-full ml-0 md:ml-4 top-full md:top-0 mt-2 md:mt-0 w-80 p-5 bg-slate-800 rounded-xl border border-slate-600 shadow-2xl z-50 text-sm leading-relaxed">
+                                                <p class="font-bold text-sky-400 mb-2">How to get your token:</p>
+                                                <ol class="list-decimal list-inside space-y-2 text-slate-300">
+                                                    <li>Create an account at <a href="https://app.netbird.io" target="_blank" class="text-fuchsia-400 underline font-bold">NetBird</a></li>
+                                                    <li>Verify your email via the link sent to you</li>
+                                                    <li>Navigate to <span class="font-mono bg-slate-900 px-1 rounded">Teams > Service Users</span></li>
+                                                    <li>Click <span class="font-bold text-white">"Create Service User"</span>, name it "numbus-server" and set role to <span class="text-white">"Network Admin"</span></li>
+                                                    <li>Click on the new user, then <span class="text-white">"Add Token"</span>. Name it "deployment" and set expiry to <span class="text-white">7 days</span></li>
+                                                    <li>Copy the token and paste it here!</li>
+                                                </ol>
+                                            </div>
+                                        </div>
+                                    </div>
+                                    <input type="password" x-model="formData.remote_access.netbird_token" placeholder="nbp_..." class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40 text-base">
+                                </div>
+
+                                <!-- Netbird Self-Hosted -->
+                                <button @click="formData.remote_access.provider = 'netbird-selfhosted'" 
+                                        :class="formData.remote_access.provider === 'netbird-selfhosted' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" 
+                                        class="p-6 border rounded-2xl transition-all text-left group hover:border-fuchsia-500/50 hover:bg-slate-800">
+                                    <div class="flex items-center gap-3 mb-2">
+                                        <i class="mdi mdi-server-network text-3xl" :class="formData.remote_access.provider === 'netbird-selfhosted' ? 'text-white' : 'text-sky-400 group-hover:text-white'"></i>
+                                        <div class="font-bold text-xl" :class="formData.remote_access.provider === 'netbird-selfhosted' ? 'text-white' : 'text-slate-200 group-hover:text-white'">Managed On-Premise</div>
+                                    </div>
+                                    <p class="text-sm leading-relaxed transition-colors" :class="formData.remote_access.provider === 'netbird-selfhosted' ? 'text-white' : 'text-slate-400 group-hover:text-white'">Complete digital sovereignty. You host the management platform on your own Numbus server. Required for teams larger than 5 users.</p>
+                                </button>
+
+                                <!-- External -->
+                                <button @click="formData.remote_access.provider = 'external'" 
+                                        :class="formData.remote_access.provider === 'external' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" 
+                                        class="p-6 border rounded-2xl transition-all text-left group hover:border-fuchsia-500/50 hover:bg-slate-800">
+                                    <div class="flex items-center gap-3 mb-2">
+                                        <i class="mdi mdi-earth text-3xl" :class="formData.remote_access.provider === 'external' ? 'text-white' : 'text-sky-400 group-hover:text-white'"></i>
+                                        <div class="font-bold text-xl" :class="formData.remote_access.provider === 'external' ? 'text-white' : 'text-slate-200 group-hover:text-white'">External / Manual Access</div>
+                                    </div>
+                                    <p class="text-sm leading-relaxed transition-colors" :class="formData.remote_access.provider === 'external' ? 'text-white' : 'text-slate-400 group-hover:text-white'">Use your own VPN or direct port-forwarding. <strong>Warning:</strong> This server won't be compatible with Numbus integrated offsite backups.</p>
+                                </button>
+                            </div>
+                        </div>
+                    </div>
+
+                    <!-- Step 9: Security -->
+                    <div x-show="step === 9" class="space-y-8">
+                        <div class="border-b border-slate-700 pb-4">
+                            <h2 class="text-4xl font-bold text-sky-400">Security</h2>
+                            <p class="text-slate-400 mt-2 text-lg">Manage infrastructure access and advanced protection.</p>
+                        </div>
+
+                        <div class="space-y-6">
+                            <!-- SSO Toggle -->
+                            <div class="bg-slate-900/40 p-6 rounded-2xl border border-slate-700/50 space-y-4">
+                                <div class="flex items-center justify-between">
+                                    <div class="flex items-center gap-3">
+                                        <label class="text-lg font-bold text-slate-200 transition-colors">Use Single Sign-On (SSO)</label>
+                                        <div x-data="{ open: false }" class="relative">
+                                            <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
+                                                <i class="mdi mdi-information-outline text-lg"></i>
+                                            </button>
+                                            <div x-show="open" @click.away="open = false" class="absolute left-full ml-4 top-0 w-64 p-4 bg-slate-800 rounded-xl border border-slate-600 shadow-2xl z-50 text-sm leading-relaxed">
+                                                One login for everything. Centralized identity management via LLDAP and Authelia. Provides enterprise-grade security and 2FA for all your apps.
+                                            </div>
+                                        </div>
+                                    </div>
+                                    <button @click="formData.security.use_sso = !formData.security.use_sso" 
+                                            :class="formData.security.use_sso ? 'bg-fuchsia-600 shadow-[0_0_10px_rgba(192,38,211,0.4)]' : 'bg-slate-700'"
+                                            class="relative inline-flex h-6 w-11 shrink-0 cursor-pointer rounded-full border-2 border-transparent transition-colors duration-200 ease-in-out focus:outline-none">
+                                        <span :class="formData.security.use_sso ? 'translate-x-5' : 'translate-x-0'" class="pointer-events-none inline-block h-5 w-5 transform rounded-full bg-white shadow ring-0 transition duration-200 ease-in-out"></span>
+                                    </button>
+                                </div>
+                            </div>
+
+                            <!-- Public Sharing Toggle -->
+                            <div class="bg-slate-900/40 p-6 rounded-2xl border border-slate-700/50 space-y-4">
+                                <div class="flex items-center justify-between">
+                                    <div class="flex items-center gap-3">
+                                        <label class="text-lg font-bold text-slate-200">Enable Secure Public Sharing</label>
+                                        <div x-data="{ open: false }" class="relative">
+                                            <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
+                                                <i class="mdi mdi-information-outline text-lg"></i>
+                                            </button>
+                                            <div x-show="open" @click.away="open = false" class="absolute left-full ml-4 top-0 w-64 p-4 bg-slate-800 rounded-xl border border-slate-600 shadow-2xl z-50 text-sm leading-relaxed">
+                                                Allows you to share links (like Nextcloud folders) with friends who don't have NetBird. Only specific URLs are exposed; everything else remains locked behind the VPN.
+                                            </div>
+                                        </div>
+                                    </div>
+                                    <button @click="formData.security.public_sharing = !formData.security.public_sharing" 
+                                            :class="formData.security.public_sharing ? 'bg-fuchsia-600 shadow-[0_0_10px_rgba(192,38,211,0.4)]' : 'bg-slate-700'"
+                                            class="relative inline-flex h-6 w-11 shrink-0 cursor-pointer rounded-full border-2 border-transparent transition-colors duration-200 ease-in-out focus:outline-none">
+                                        <span :class="formData.security.public_sharing ? 'translate-x-5' : 'translate-x-0'" class="pointer-events-none inline-block h-5 w-5 transform rounded-full bg-white shadow ring-0 transition duration-200 ease-in-out"></span>
+                                    </button>
+                                </div>
+                            </div>
+                        </div>
+
+                        <div class="space-y-4" x-data="{ open: false }">
+                            <div class="flex items-center gap-2">
+                                <label class="text-lg font-bold text-slate-200">Authorized SSH Public Keys <span class="text-fuchsia-500">*</span></label>
+                                <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
+                                    <i class="mdi mdi-information-outline text-lg"></i>
+                                </button>
+                            </div>
+                            <p x-show="open" class="text-xs text-sky-400 italic mb-2">A secure way to log in without a password. Like a physical key, but digital.</p>
+                            <p class="text-sm text-slate-500 mb-2 italic">Paste here the public keys that are allowed to connect to your server's admin account (one per line).</p>
+                            <textarea x-model="formData.security.ssh_keys" rows="5" placeholder="ssh-ed25519 AAAAC3NzaC1lZDI1NTE5..." class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none transition-all font-mono text-base placeholder:text-slate-500/40"></textarea>
+                        </div>
+
+                        <!-- Security Warning -->
+                        <div class="bg-amber-500/10 border border-amber-500/20 p-6 rounded-2xl flex gap-6 text-left items-start mt-4">
+                            <div class="bg-amber-500 rounded-full p-2 mt-1 shrink-0">
+                                <i class="mdi mdi-alert text-slate-900 text-xl"></i>
+                            </div>
+                            <p class="text-base text-amber-200/90 leading-relaxed font-medium"><strong>Security Warning:</strong> Anyone who possesses one of these public keys AND their corresponding private key will have full administrator access to your server. Protect your private keys as if they were physical keys to your home.</p>
+                        </div>
+                    </div>
+
+                    <!-- Step 8: Services selection -->
+                    <div x-show="step === 8" class="space-y-8">
+                        <div class="border-b border-slate-700 pb-4">
+                            <h2 class="text-4xl font-bold text-sky-400">Services</h2>
+                            <p class="text-slate-400 mt-2 text-lg">Choose the applications to deploy.</p>
+                        </div>
+                        
+                        <div class="space-y-10 pr-4">
+                            <div class="space-y-2">
+                                <div class="flex items-center gap-2">
+                                    <label class="text-lg font-bold text-slate-200">Domain Name (FQDN) <span class="text-fuchsia-500">*</span></label>
+                                    <button @click="openHelp('domain')" class="text-slate-500 hover:text-sky-400">
+                                        <i class="mdi mdi-information-outline"></i>
+                                    </button>
+                                </div>
+                                <input type="text" x-model="formData.ssl.domain" placeholder="example.com" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40">
+                            </div>
+
+                            <h3 class="text-lg font-semibold text-fuchsia-400">DNS Filter</h3>
+                            <div class="flex gap-4">
+                                <template x-for="dns in ['pi-hole', 'adguard']" :key="dns">
+                                    <button @click="formData.services.dns = dns" :class="formData.services.dns === dns ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" class="flex-1 p-5 border rounded-xl transition-all text-left group hover:bg-slate-800 hover:border-slate-600">
+                                        <div class="flex justify-between items-center mb-2">
+                                            <div class="flex items-center gap-3">
+                                                <img :src="'https://cdn.jsdelivr.net/gh/selfhst/icons@main/svg/' + (serviceMetadata[dns].icon || dns) + '.svg'" class="w-6 h-6" :alt="dns">
+                                                <div class="font-bold capitalize text-lg" :class="formData.services.dns === dns ? 'text-white' : 'text-slate-200 group-hover:text-white'" x-text="dns"></div>
+                                            </div>
+                                            <a :href="serviceMetadata[dns].link" target="_blank" @click.stop class="text-[10px] text-sky-400 underline opacity-40 group-hover:opacity-100 transition-opacity">Website</a>
+                                        </div>
+                                        <p class="text-sm leading-relaxed transition-colors" :class="formData.services.dns === dns ? 'text-white' : 'text-slate-400 group-hover:text-white'" x-text="serviceMetadata[dns].desc"></p>
+                                    </button>
+                                </template>
+                            </div>
+
+                            <h3 class="text-lg font-semibold text-fuchsia-400 mt-6">Web Applications</h3>
+                            <div class="grid grid-cols-2 md:grid-cols-3 gap-4">
+                                <template x-for="app in webApps" :key="app">
+                                    <label :class="formData.services.apps.includes(app) ? 'border-sky-500 bg-sky-500/10' : 'border-slate-700 bg-slate-900/40'" class="flex flex-col gap-3 p-5 border rounded-xl cursor-pointer transition-all hover:border-sky-400 group relative">
+                                        <img :src="'https://cdn.jsdelivr.net/gh/selfhst/icons@main/svg/' + (serviceMetadata[app].icon || app) + '.svg'" :class="formData.services.apps.includes(app) ? 'opacity-100' : 'opacity-20 group-hover:opacity-100'" class="w-8 h-8 transition-opacity absolute right-4 top-4" :alt="app">
+                                        <div class="flex items-center gap-3">
+                                            <input type="checkbox" :value="app" x-model="formData.services.apps" class="w-5 h-5 rounded border-slate-700 text-sky-500 focus:ring-sky-500 bg-slate-800">
+                                            <span class="text-base font-bold capitalize" x-text="app"></span>
+                                        </div>
+                                        <p class="text-sm leading-normal transition-colors" :class="formData.services.apps.includes(app) ? 'text-white' : 'text-slate-500 group-hover:text-white'" x-text="serviceMetadata[app].desc"></p>
+                                        <a :href="serviceMetadata[app].link" target="_blank" class="text-[10px] text-sky-400 underline opacity-0 group-hover:opacity-100 transition-opacity mt-auto">Learn more</a>
+                                    </label>
+                                </template>
+                            </div>
+
+                            <h3 class="text-lg font-semibold text-fuchsia-400 mt-6">System Services</h3>
+                            <div class="grid grid-cols-2 gap-4">
+                                <template x-for="sys in ['clamav', 'virtualization']" :key="sys">
+                                    <label :class="formData.services.system.includes(sys) ? 'border-sky-500 bg-sky-500/10' : 'border-slate-700 bg-slate-900/40'" class="flex flex-col gap-3 p-5 border rounded-xl cursor-pointer transition-all hover:border-sky-400 group">
+                                        <div class="flex items-center justify-between">
+                                            <div class="flex items-center gap-3">
+                                                <input type="checkbox" :value="sys" x-model="formData.services.system" class="w-5 h-5 rounded border-slate-700 text-sky-500 focus:ring-sky-500 bg-slate-800">
+                                                <span class="text-base font-bold capitalize" x-text="sys"></span>
+                                            </div>
+                                            <img :src="'https://cdn.jsdelivr.net/gh/selfhst/icons@main/svg/' + (serviceMetadata[sys].icon || sys) + '.svg'" :class="formData.services.system.includes(sys) ? 'opacity-100' : 'opacity-40 group-hover:opacity-100'" class="w-6 h-6 transition-opacity" :alt="sys">
+                                        </div>
+                                        <p class="text-sm transition-colors" :class="formData.services.system.includes(sys) ? 'text-white' : 'text-slate-500 group-hover:text-white'" x-text="serviceMetadata[sys].desc"></p>
+                                        <a :href="serviceMetadata[sys].link" target="_blank" class="text-[10px] text-sky-400 underline opacity-0 group-hover:opacity-100 transition-opacity mt-auto">Learn more</a>
+                                    </label>
+                                </template>
+                            </div>
+                        </div>
+
+                        <!-- Conditional Crafty Settings -->
+                        <div x-show="formData.services.apps.includes('crafty')" x-transition class="pt-8 border-t border-slate-800 space-y-10">
+                            <h3 class="text-xl font-bold text-fuchsia-400 flex items-center gap-3">
+                                <img src="https://cdn.jsdelivr.net/gh/selfhst/icons@main/svg/crafty-controller.svg" class="w-6 h-6" alt="">
+                                Crafty Control Settings
+                            </h3>
+                            <div class="space-y-8">
+                                <div class="grid grid-cols-1 md:grid-cols-2 gap-8">
+                                    <div class="space-y-2">
+                                        <label class="text-sm font-bold text-slate-400 uppercase tracking-widest">Minecraft Java Servers <span class="text-fuchsia-500">*</span></label>
+                                        <input type="number" min="0" x-model="formData.services.apps_extra_opts.crafty.crafty_java" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 outline-none focus:ring-2 focus:ring-sky-500">
+                                    </div>
+                                    <div class="space-y-2">
+                                        <label class="text-sm font-bold text-slate-400 uppercase tracking-widest">Minecraft Bedrock Servers <span class="text-fuchsia-500">*</span></label>
+                                        <input type="number" min="0" x-model="formData.services.apps_extra_opts.crafty.crafty_bedrock" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 outline-none focus:ring-2 focus:ring-sky-500">
+                                    </div>
+                                </div>
+                                <div class="flex items-center justify-between bg-slate-900/40 p-6 rounded-2xl border border-slate-700/50">
+                                    <label class="text-base font-bold text-slate-300">Enable Dynmap</label>
+                                    <button @click="formData.services.apps_extra_opts.crafty.crafty_dynmap = !formData.services.apps_extra_opts.crafty.crafty_dynmap" 
+                                            :class="formData.services.apps_extra_opts.crafty.crafty_dynmap ? 'bg-fuchsia-600 shadow-[0_0_10px_rgba(192,38,211,0.4)]' : 'bg-slate-700'"
+                                            class="relative inline-flex h-6 w-11 shrink-0 cursor-pointer rounded-full border-2 border-transparent transition-colors duration-200 ease-in-out focus:outline-none">
+                                        <span :class="formData.services.apps_extra_opts.crafty.crafty_dynmap ? 'translate-x-5' : 'translate-x-0'" 
+                                              class="pointer-events-none inline-block h-5 w-5 transform rounded-full bg-white shadow ring-0 transition duration-200 ease-in-out">
+                                        </span>
+                                    </button>
+                                </div>
+                            </div>
+                        </div>
+                    </div>
+                </div>
+
+                    <!-- Step 12: Non-Interactive Git Config -->
+                    <div x-show="step === 12" class="space-y-8">
+                        <div class="border-b border-slate-700 pb-4">
+                            <h2 class="text-4xl font-bold text-sky-400">Configuration Source</h2>
+                            <p class="text-slate-400 mt-2 text-lg">Link your Git repository containing the numbus.yaml file.</p>
+                        </div>
+                        <div class="space-y-4">
+                            <div class="space-y-2">
+                                <label class="text-sm font-bold text-slate-400 uppercase tracking-widest">Git Repository URL</label>
+                                <input type="text" x-model="formData.gitConfig.url" placeholder="https://github.com/user/my-numbus-config" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40">
+                            </div>
+                            <div class="grid grid-cols-2 gap-4">
+                                <div class="space-y-2">
+                                    <label class="text-sm font-bold text-slate-400 uppercase tracking-widest">Username (Optional)</label>
+                                    <input type="text" x-model="formData.gitConfig.user" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none">
+                                </div>
+                                <div class="space-y-2">
+                                    <label class="text-sm font-bold text-slate-400 uppercase tracking-widest">Password/Token (Optional)</label>
+                                    <input type="password" x-model="formData.gitConfig.password" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none">
+                                </div>
+                            </div>
+                        </div>
+                    </div>
+
+                    <!-- Step 13: Setup Type & Restore -->
+                    <div x-show="step === 13" class="space-y-8">
+                        <div class="border-b border-slate-700 pb-4">
+                            <h2 class="text-4xl font-bold text-sky-400">Setup Type</h2>
+                            <p class="text-slate-400 mt-2 text-lg">Are we creating a new server instance or restoring an existing one?</p>
+                        </div>
+                        <div class="space-y-6">
+                            <select x-model="formData.restoreConfig.setup_type" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 outline-none appearance-none cursor-pointer">
+                                <option value="new">New Server (Inherit settings, new identity)</option>
+                                <option value="replica">Exact Replica (Full system recovery)</option>
+                            </select>
+                            
+                            <div class="bg-slate-900/40 p-6 rounded-2xl border border-slate-700/50 flex items-center justify-between">
+                                <div>
+                                    <label class="text-lg font-bold text-white">Restore Data</label>
+                                    <p class="text-xs text-slate-500">Pull data from an existing numbus-backup-server.</p>
+                                </div>
+                                <button @click="formData.restoreConfig.restore_data = !formData.restoreConfig.restore_data" 
+                                        :class="formData.restoreConfig.restore_data ? 'bg-fuchsia-600' : 'bg-slate-700'"
+                                        class="relative inline-flex h-6 w-11 shrink-0 rounded-full transition-colors">
+                                    <span :class="formData.restoreConfig.restore_data ? 'translate-x-5' : 'translate-x-0'" class="inline-block h-5 w-5 transform rounded-full bg-white transition"></span>
+                                </button>
+                            </div>
+
+                            <div x-show="formData.restoreConfig.restore_data" x-transition class="space-y-4 pl-6 border-l-2 border-fuchsia-500/30">
+                                <input type="text" x-model="formData.restoreConfig.backup_host" placeholder="Backup Host (IP/Domain)" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none">
+                                <input type="password" x-model="formData.restoreConfig.setup_key" placeholder="Remote Access Setup Key" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none">
+                                <input type="password" x-model="formData.restoreConfig.backup_key" placeholder="Backup Encryption Key" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none">
+                            </div>
+                        </div>
+                    </div>
+
+                    <!-- Step 14: Tweaks -->
+                    <div x-show="step === 14" class="space-y-8">
+                        <div class="border-b border-slate-700 pb-4">
+                            <h2 class="text-4xl font-bold text-sky-400">Environment Overrides</h2>
+                            <p class="text-slate-400 mt-2 text-lg">Apply specific tweaks to this local deployment.</p>
+                        </div>
+                        <p class="text-sm text-slate-500 italic">Select settings you wish to override from the Git configuration.</p>
+                        <div class="space-y-4">
+                            <!-- Simplified tweak UI for now -->
+                            <div class="bg-slate-900/40 p-4 rounded-xl border border-slate-800">
+                                <p class="text-xs font-mono text-fuchsia-400">tweaks: []</p>
+                            </div>
+                        </div>
+                    </div>
+
+                    <!-- Step 15: Installation Progress -->
+                    <div x-show="step === 15" class="flex flex-col items-center justify-center py-20 text-center space-y-8">
+                        <div class="w-full max-w-md bg-slate-900 rounded-full h-4 overflow-hidden border border-slate-700">
+                            <div class="bg-fuchsia-600 h-full animate-pulse" style="width: 45%"></div>
+                        </div>
+                        <h2 class="text-4xl font-bold text-white">Deploying Numbus...</h2>
+                        <div class="bg-black/40 rounded-xl p-6 w-full font-mono text-left text-xs text-green-400 border border-slate-800">
+                            <div class="flex justify-between items-center mb-4">
+                                <span class="uppercase tracking-widest text-slate-500">Live Terminal Logs</span>
+                                <button class="text-[10px] bg-slate-800 px-2 py-1 rounded">Hide Logs</button>
+                            </div>
+                            <div class="h-40 overflow-y-auto custom-scrollbar">
+                                <p>> Initializing nixos-anywhere...</p>
+                                <p>> Checking connection to target...</p>
+                                <p>> Copying closure to remote...</p>
+                            </div>
+                        </div>
+
+                    <!-- Step 12: Git Configuration -->
+                    <div x-show="step === 12" class="space-y-8">
+                        <div class="border-b border-slate-700 pb-4">
+                            <h2 class="text-4xl font-bold text-sky-400">Configuration Source</h2>
+                            <p class="text-slate-400 mt-2 text-lg">Link your Git repository containing the numbus.yaml file.</p>
+                        </div>
+                        <div class="space-y-4">
+                            <div class="space-y-2">
+                                <label class="text-[10px] font-bold text-slate-400 uppercase tracking-widest">Git Repository URL</label>
+                                <input type="text" x-model="formData.gitConfig.url" placeholder="https://github.com/user/my-numbus-config" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40">
+                            </div>
+                            <div class="grid grid-cols-2 gap-4">
+                                <div class="space-y-2">
+                                    <label class="text-[10px] font-bold text-slate-400 uppercase tracking-widest">Username (Optional)</label>
+                                    <input type="text" x-model="formData.gitConfig.user" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none">
+                                </div>
+                                <div class="space-y-2">
+                                    <label class="text-[10px] font-bold text-slate-400 uppercase tracking-widest">Password/Token (Optional)</label>
+                                    <input type="password" x-model="formData.gitConfig.password" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none">
+                                </div>
+                            </div>
+                        </div>
+                    </div>
+
+                    <!-- Step 13: Setup Type & Restore -->
+                    <div x-show="step === 13" class="space-y-8">
+                        <div class="border-b border-slate-700 pb-4">
+                            <h2 class="text-4xl font-bold text-sky-400">Setup Type</h2>
+                            <p class="text-slate-400 mt-2 text-lg">Are we creating a new server instance or restoring an existing one?</p>
+                        </div>
+                        <div class="space-y-6">
+                            <select x-model="formData.restoreConfig.setup_type" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 outline-none appearance-none cursor-pointer">
+                                <option value="new">New Server (Inherit settings, new identity)</option>
+                                <option value="replica">Exact Replica (Full system recovery)</option>
+                            </select>
+                            
+                            <div class="bg-slate-900/40 p-6 rounded-2xl border border-slate-700/50 flex items-center justify-between">
+                                <div>
+                                    <label class="text-lg font-bold text-white">Restore Data</label>
+                                    <p class="text-xs text-slate-500">Pull data from an existing numbus-backup-server.</p>
+                                </div>
+                                <button @click="formData.restoreConfig.restore_data = !formData.restoreConfig.restore_data" 
+                                        :class="formData.restoreConfig.restore_data ? 'bg-fuchsia-600' : 'bg-slate-700'"
+                                        class="relative inline-flex h-6 w-11 shrink-0 rounded-full transition-colors">
+                                    <span :class="formData.restoreConfig.restore_data ? 'translate-x-5' : 'translate-x-0'" class="inline-block h-5 w-5 transform rounded-full bg-white transition"></span>
+                                </button>
+                            </div>
+
+                            <div x-show="formData.restoreConfig.restore_data" x-transition class="space-y-4 pl-6 border-l-2 border-fuchsia-500/30">
+                                <input type="text" x-model="formData.restoreConfig.backup_host" placeholder="Backup Host (IP/Domain)" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none">
+                                <input type="password" x-model="formData.restoreConfig.setup_key" placeholder="Remote Access Setup Key" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none">
+                                <input type="password" x-model="formData.restoreConfig.backup_key" placeholder="Backup Encryption Key" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none">
+                            </div>
+                        </div>
+                    </div>
+
+                    <!-- Step 14: Tweaks -->
+                    <div x-show="step === 14" class="space-y-8">
+                        <div class="border-b border-slate-700 pb-4">
+                            <h2 class="text-4xl font-bold text-sky-400">Environment Overrides</h2>
+                            <p class="text-slate-400 mt-2 text-lg">Apply specific tweaks to this local deployment.</p>
+                        </div>
+                        <div class="space-y-4">
+                            <p class="text-sm text-slate-500 italic">Select settings you wish to override from the Git configuration.</p>
+                            <div class="bg-slate-900/40 p-4 rounded-xl border border-slate-800 font-mono text-xs text-fuchsia-400">
+                                tweaks: []
+                            </div>
+                        </div>
+                    </div>
+
+                    <!-- Step 15: Installation Progress -->
+                    <div x-show="step === 15" class="flex flex-col items-center justify-center py-20 text-center space-y-8">
+                        <div class="w-full max-w-md bg-slate-900 rounded-full h-4 overflow-hidden border border-slate-700">
+                            <div class="bg-fuchsia-600 h-full animate-pulse" style="width: 35%"></div>
+                        </div>
+                        <h2 class="text-4xl font-bold text-white">Deploying Numbus...</h2>
+                        <div class="bg-black/40 rounded-xl p-6 w-full font-mono text-left text-[10px] text-green-400 border border-slate-800">
+                            <div class="flex justify-between items-center mb-4 border-b border-slate-800 pb-2">
+                                <span class="uppercase tracking-widest text-slate-500">Live Terminal Logs</span>
+                                <button class="text-[9px] bg-slate-800 px-2 py-0.5 rounded text-slate-400">Toggle Logs</button>
+                            </div>
+                            <div class="h-40 overflow-y-auto custom-scrollbar">
+                                <p class="text-fuchsia-400">[INFO] Starting deployment sequence...</p>
+                                <p class="text-sky-400">[CMD] nixos-anywhere --flake .#numbus-server</p>
+                                <p class="text-slate-500">[STDOUT] Initializing remote connection...</p>
+                            </div>
+                        </div>
+                    </div>
+                </div>
+
+                <!-- Final Review (Step 16) -->
+                <div x-show="step === 16" class="space-y-8 text-center py-10">
+                    <div class="w-20 h-20 bg-green-500/20 text-green-500 rounded-full flex items-center justify-center mx-auto mb-6">
+                        <svg class="w-10 h-10" fill="currentColor" viewBox="0 0 20 20"><path fill-rule="evenodd" d="M16.707 5.293a1 1 0 010 1.414l-8 8a1 1 0 01-1.414 0l-4-4a1 1 0 011.414-1.414L8 12.586l7.293-7.293a1 1 0 011.414 0z" clip-rule="evenodd"></path></svg>
+                    </div>
+                    <h2 class="text-4xl font-bold">Ready to Deploy</h2>
+                    <p class="text-slate-400 max-w-md mx-auto text-base">Your configuration has been generated successfully. Download the file and place it in your Numbus project root.</p>
+                    
+                    <div class="p-8">
+                        <div class="bg-slate-900 rounded-xl text-left font-mono text-sm text-sky-400 border border-slate-700 overflow-hidden shadow-inner">
+                            <pre class="p-2" x-text="jsyaml.dump(getCleanData())"></pre>
+                        </div>
+                    </div>
+                </div>
+
+                <!-- Footer Navigation -->
+                <div class="bg-[#1e293b] border-t border-slate-700 p-6 flex justify-between items-center">
+                    <button 
+                        @click="step--" 
+                        class="px-8 py-3 text-slate-400 hover:text-white font-bold transition-all"
+                    >Back</button>
+                    
+                    <button 
+                        x-show="step > 0 && step < maxSteps && ![3,4,15].includes(step)" 
+                        @click="if(canGoNext()) step++" 
+                        :disabled="!canGoNext()"
+                        :class="!canGoNext() ? 'opacity-30 cursor-not-allowed' : ''"
+                        class="px-10 py-3 bg-fuchsia-600 hover:bg-fuchsia-500 rounded-xl font-bold transition-all shadow-lg shadow-fuchsia-600/20"
+                    >Continue</button>
+
+                    <button 
+                        x-show="step === maxSteps" 
+                        @click="downloadYaml()" 
+                        class="px-10 py-3 bg-green-600 hover:bg-green-500 rounded-xl font-bold transition-all shadow-lg shadow-green-600/20 flex items-center"
+                    >
+                        <svg class="w-5 h-5 mr-2" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 16v1a2 2 0 002 2h12a2 2 0 002-2v-1m-4-4l-4 4m0 0l-4-4m4 4V4"></path></svg>
+                        Download numbus.yaml
+                    </button>
+                </div>
+            </div>
+        </main>
+    </div>
+
+    <style>
+        [x-cloak] { display: none !important; }
+        @keyframes pulse-slow {
+            0%, 100% { transform: scale(1); filter: drop-shadow(0 0 20px rgba(14, 165, 233, 0.2)); }
+            50% { transform: scale(1.05); filter: drop-shadow(0 0 40px rgba(192, 38, 211, 0.4)); }
+        }
+        .animate-pulse-slow { animation: pulse-slow 6s infinite ease-in-out; }
+        @keyframes spin-slow { from { transform: rotate(0deg); } to { transform: rotate(-360deg); } }
+        .animate-spin-slow { animation: spin-slow 3s linear infinite; }
+        .custom-scrollbar::-webkit-scrollbar { width: 6px; }
+        .custom-scrollbar::-webkit-scrollbar-track { background: transparent; }
+        .custom-scrollbar::-webkit-scrollbar-thumb { background: #334155; border-radius: 10px; }
+        .text-shadow-glow { text-shadow: 0 0 15px rgba(56, 189, 248, 0.4); }
+    </style>
+
+    <script>
+        function configurator() {
+            return {
+                step: 0,
+                maxSteps: 15,
+                init() {
+                    // Watch the step and reset scroll position of the main content area
+                    this.updateNavigation();
+                    this.$watch('step', () => {
+                        const container = this.$el.querySelector('.flex-grow.overflow-y-auto');
+                        if (container) {
+                            container.scrollTop = 0;
+                        }
+                        this.updateNavigation();
+                    });
+                    this.$watch('formData.deploymentMode', () => this.updateNavigation());
+                },
+                showAdvanced: false,
+                showGroupCustomization: false,
+                navigation: [
+                    { title: 'Live Device Setup', steps: [1,2,3,4], minors: [
+                        { label: 'Deployment Mode', step: 1 },
+                        { label: 'Device Type', step: 2 },
+                        { label: 'Live Setup', step: 3 },
+                        { label: 'Discovery', step: 4 }
+                    ]},
+                    { title: 'Server Configuration', steps: [5,6,7,8,9,10,11,12,13,14], minors: [
+                        { label: 'Configuration', step: 12 }
+                    ]},
+                    { title: 'Installation', steps: [15], minors: [
+                        { label: 'Progress', step: 15 }
+                    ]}
+                ],
+                getNavigation() {
+                    const isInteractive = this.formData.deploymentMode === 'interactive';
+                    const isServer = this.formData.deviceType === 'server' || this.formData.deviceType === 'backup-server';
+                    
+                    let configMinors = [];
+                    if (isInteractive) {
+                        configMinors = [
+                            { label: 'Language', step: 5 },
+                            { label: 'Network', step: 6 },
+                            { label: 'Remote Access', step: 7 },
+                            { label: 'Services', step: 8 },
+                            { label: 'Security', step: 9 },
+                            { label: 'Users', step: 10 }
+                        ];
+                        // Only servers have alerting/mail config usually
+                        if (isServer) {
+                            configMinors.push({ label: 'Alerting', step: 11 });
+                        }
+                    } else {
+                        configMinors = [
+                            { label: 'Source Repo', step: 12 },
+                            { label: 'Setup Type', step: 13 },
+                            { label: 'Environment Tweaks', step: 14 }
+                        ];
+                    }
+
+                    return [
+                        {
+                            title: 'Device Setup',
+                            steps: [1, 2, 3, 4],
+                            minors: [
+                                { label: 'Deployment Mode', step: 1 },
+                                { label: 'Device Type', step: 2 },
+                                { label: 'Targeting', step: 3 },
+                                { label: 'Probing Hardware', step: 4 }
+                            ]
+                        },
+                        {
+                            title: 'Configuration',
+                            steps: isInteractive ? [5, 6, 7, 8, 9, 10, 11] : [12, 13, 14],
+                            minors: configMinors
+                        },
+                        { 
+                            title: 'Finalize', 
+                            steps: [15, 16], 
+                            minors: [{ label: 'Deployment Status', step: 15 }] 
+                        }
+                    ];
+                },
+                isSectionActive(section) {
+                    return section.steps.includes(this.step);
+                },
+                deviceTypes: [
+                    { id: 'server', name: 'Numbus Server', icon: 'mdi-server', desc: 'Cloud, containers & automation' },
+                    { id: 'backup-server', name: 'Numbus Backup', icon: 'mdi-backup-restore', desc: 'Cold storage & offsite safety' },
+                    { id: 'computer', name: 'Numbus Computer', icon: 'mdi-laptop', desc: 'Daily driver workstation' },
+                    { id: 'tv', name: 'Numbus TV', icon: 'mdi-television-guide', desc: 'HTPC & Media center' }
+                ],
+                webApps: ['crafty', 'frigate', 'gitea', 'home-assistant', 'homepage', 'immich', 'it-tools', 'jellyfin', 'n8n', 'netbootxyz', 'nextcloud', 'ntfy', 'odoo', 'passbolt', 'uptime-kuma', 'vscodium'],
+                serviceMetadata: {
+                    'pi-hole': { icon: 'pi-hole', desc: 'A network-wide ad blocker via DNS sinkholing.', link: 'https://pi-hole.net' },
+                    'adguard': { icon: 'adguard-home', desc: 'Alternative DNS filter with advanced parental controls.', link: 'https://adguard-dns.io' },
+                    'crafty': { icon: 'crafty-controller', desc: 'Web-based Minecraft server manager and dashboard.', link: 'https://craftycontrol.com/' },
+                    'frigate': { desc: 'NVR with real-time local object detection for IP cameras.', link: 'https://frigate.video/' },
+                    'gitea': { desc: 'Painless self-hosted Git service (like GitHub).', link: 'https://gitea.io/' },
+                    'home-assistant': { desc: 'Open source home automation gateway.', link: 'https://www.home-assistant.io/' },
+                    'homepage': { desc: 'A modern, secure application dashboard.', link: 'https://gethomepage.dev/' },
+                    'immich': { desc: 'Self-hosted photo and video backup solution.', link: 'https://immich.app/' },
+                    'it-tools': { desc: 'Collection of handy online tools for developers.', link: 'https://it-tools.tech/' },
+                    'jellyfin': { desc: 'The volunteer-built media solution.', link: 'https://jellyfin.org/' },
+                    'n8n': { desc: 'Powerful workflow automation tool.', link: 'https://n8n.io/' },
+                    'netbootxyz': { icon: 'netboot-xyz', desc: 'PXE boot various OS installers from the web.', link: 'https://netboot.xyz/' },
+                    'nextcloud': { desc: 'The most popular self-hosted collaboration platform.', link: 'https://nextcloud.com/' },
+                    'ntfy': { desc: 'Send push notifications via HTTP requests.', link: 'https://ntfy.sh/' },
+                    'odoo': { desc: 'Open Source ERP and business suite.', link: 'https://www.odoo.com/' },
+                    'passbolt': { desc: 'Password manager for teams.', link: 'https://www.passbolt.com/' },
+                    'uptime-kuma': { desc: 'Fancy self-hosted monitoring tool.', link: 'https://uptimekuma.org/' },
+                    'vscodium': { desc: 'Free/Libre Open Source binaries of VS Code.', link: 'https://vscodium.com/' },
+                    'clamav': { icon: 'clamav', desc: 'Open-source antivirus engine.', link: 'https://www.clamav.net' },
+                    'virtualization': { icon: 'qemu', desc: 'KVM/QEMU virtualization via Libvirt.', link: 'https://libvirt.org' }
+                },
+                formData: {
+                    deploymentMode: 'interactive',
+                    deviceType: 'server',
+                    language: {
+                        lang: 'FR',
+                        locale: 'fr_FR',
+                        timezone: 'Europe/Paris'
+                    },
+                    users: [
+                        { username: 'admin', name: '', email: '', groups: ['admin'], isStatic: true }
+                    ],
+                    groups: {
+                        admin: ['crafty', 'frigate', 'gitea', 'home-assistant', 'homepage', 'immich', 'it-tools', 'jellyfin', 'n8n', 'netbootxyz', 'nextcloud', 'ntfy', 'odoo', 'passbolt', 'uptime-kuma', 'vscodium'],
+                        developer: ['gitea', 'vscodium', 'it-tools', 'odoo'],
+                        family: ['frigate', 'home-assistant', 'homepage', 'immich', 'jellyfin', 'n8n', 'nextcloud', 'ntfy', 'passbolt'],
+                        office: ['passbolt', 'nextcloud']
+                    },
+                    mail: {
+                        smtp_username: '',
+                        smtp_password: '',
+                        smtp_host: '',
+                        smtp_port: ''
+                    },
+                    network: {
+                        ip_address: '',
+                        router_ip: '',
+                        live_target_ip: '',
+                        live_target_password: ''
+                    },
+                    remote_access: {
+                        provider: 'netbird-cloud',
+                        netbird_token: ''
+                    },
+                    security: {
+                        use_sso: true,
+                        public_sharing: true,
+                        ssh_keys: ''
+                    },
+                    ssl: {
+                        domain: '',
+                        cloudflare_token: ''
+                    },
+                    gitConfig: {
+                        url: '',
+                        user: '',
+                        password: ''
+                    },
+                    restoreConfig: {
+                        setup_type: 'new',
+                        restore_data: false,
+                        backup_host: '',
+                        setup_key: '',
+                        backup_key: ''
+                    },
+                    services: {
+                        dns: 'pi-hole',
+                        apps: [],
+                        system: ['clamav'],
+                        apps_extra_opts: {
+                            crafty: {
+                                crafty_java: 1,
+                                crafty_bedrock: 0,
+                                crafty_dynmap: false
+                            }
+                        }
+                    }
+                },
+                addGroup() {
+                    const name = this.newGroupName.trim().toLowerCase().replaceAll(' ', '_');
+                    if (name && !this.formData.groups[name]) {
+                        this.formData.groups[name] = [];
+                        this.newGroupName = '';
+                    }
+                },
+                addUser() {
+                    if (this.formData.users.length < 20) {
+                        this.formData.users.push({ username: '', name: '', email: '', groups: ['family'], isStatic: false });
+                    }
+                },
+                removeUser(index) {
+                    if (this.formData.users.length > 1 && !this.formData.users[index].isStatic) {
+                        this.formData.users.splice(index, 1);
+                    }
+                },
+                validators: {
+                    ip: (val) => /^((25[0-5]|(2[0-4]|1\d|[1-9]|)\d)\.?\b){4}$/.test(val),
+                    email: (val) => /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(val),
+                    domain: (val) => /^([a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z]{2,}$/.test(val),
+                    port: (val) => /^\d{2,5}$/.test(val),
+                    netbirdToken: (val) => val.startsWith('nbp_')
+                },
+                updateMinorSteps() {
+                    // Dynamically set steps for navigation
+                    const configGroup = this.navigation.find(n => n.title === 'Server Configuration' || n.title === 'Configuration');
+                    if (this.formData.deploymentMode === 'interactive') {
+                        configGroup.title = 'Configuration';
+                        configGroup.minors = [
+                            { label: 'Language', step: 5 },
+                            { label: 'Network', step: 6 },
+                            { label: 'Remote Access', step: 7 },
+                            { label: 'Services', step: 8 },
+                            { label: 'Security', step: 9 },
+                            { label: 'Users', step: 10 },
+                            { label: 'Alerts', step: 11 }
+                        ];
+                    } else {
+                        configGroup.title = 'Git Configuration';
+                        configGroup.minors = [
+                            { label: 'Source Repo', step: 12 },
+                            { label: 'Setup Type', step: 13 },
+                            { label: 'Tweaks', step: 14 }
+                        ];
+                    }
+                },
+                updateNavigation() {
+                    this.updateMinorSteps();
+                },
+                async startDiscovery() {
+                    this.updateNavigation();
+                    this.step = 3;
+                    try {
+                        await fetch('/discovery', {
+                            method: 'POST',
+                            headers: { 'Content-Type': 'application/json' },
+                            body: JSON.stringify({
+                                device: this.formData.deviceType,
+                                live_ip: this.formData.network.live_target_ip,
+                                live_password: this.formData.network.live_target_password
+                            })
+                        });
+                        this.pollHardware();
+                    } catch (e) {
+                        console.error("Bridge Error:", e);
+                    }
+                },
+                pollHardware() {
+                    const timer = setInterval(async () => {
+                        try {
+                            const res = await fetch('/hardware.json');
+                            if (res.ok) {
+                                this.hardwareData = await res.json();
+                                clearInterval(timer);
+                                this.step = (this.formData.deploymentMode === 'interactive') ? 5 : 12;
+                            }
+                        } catch (e) { /* Bridge might not have written file yet */ }
+                    }, 2000);
+                },
+                canGoNext() {
+                    const rules = {
+                        0: () => true,
+                        1: () => !!this.formData.deploymentMode,
+                        2: () => !!this.formData.deviceType,
+                        3: () => this.validators.ip(this.formData.network.live_target_ip) && !!this.formData.network.live_target_password,
+                        4: () => false,
+                        5: () => !!(this.formData.language.lang && this.formData.language.locale && this.formData.language.timezone),
+                        6: () => this.validators.ip(this.formData.network.ip_address) && this.validators.ip(this.formData.network.router_ip),
+                        7: () => this.formData.remote_access.provider !== 'netbird-cloud' || (this.formData.remote_access.netbird_token && this.validators.netbirdToken(this.formData.remote_access.netbird_token)),
+                        8: () => this.validators.domain(this.formData.ssl.domain),
+                        9: () => this.formData.security.ssh_keys.trim().length > 10 && this.formData.ssl.cloudflare_token.length > 5,
+                        10: () => !!(this.formData.users[0].username && this.formData.users[0].name && this.validators.email(this.formData.users[0].email)),
+                        11: () => this.validators.domain(this.formData.mail.smtp_host) && this.validators.port(this.formData.mail.smtp_port),
+                        12: () => this.formData.gitConfig.url.length > 5,
+                        13: () => !this.formData.restoreConfig.restore_data || (this.formData.restoreConfig.backup_host && this.formData.restoreConfig.setup_key),
+                        14: () => true,
+                        15: () => false
+                    };
+
+                    if (rules[this.step]) {
+                        return rules[this.step]();
+                    }
+                    return true;
+                },
+                getCleanData() {
+                    const exportData = JSON.parse(JSON.stringify(this.formData));
+                    
+                    // Remove helper properties from users
+                    exportData.users.forEach(u => delete u.isStatic);
+
+                    // Only export crafty options if selected
+                    if (!exportData.services.apps.includes('crafty')) {
+                        delete exportData.services.apps_extra_opts.crafty;
+                    }
+
+                    // Remove apps_extra_opts entirely if empty
+                    if (exportData.services.apps_extra_opts && Object.keys(exportData.services.apps_extra_opts).length === 0) {
+                        delete exportData.services.apps_extra_opts;
+                    }
+
+                    return exportData;
+                },
+                downloadYaml() {
+                    try {
+                        const yaml = jsyaml.dump(this.getCleanData());
+                        const blob = new Blob([yaml], { type: 'text/yaml' });
+                        const url = window.URL.createObjectURL(blob);
+                        const a = document.createElement('a');
+                        a.href = url;
+                        a.download = 'numbus.yaml';
+                        document.body.appendChild(a);
+                        a.click();
+                        window.URL.revokeObjectURL(url);
+                        document.body.removeChild(a);
+                    } catch (e) {
+                        alert('Error generating YAML: ' + e.message);
+                    }
+                }
+            }
+        }
+    </script>
+</body>
+</html>
\ No newline at end of file
diff --git a/configurator/logo.png b/configurator/logo.png
new file mode 100644
index 0000000000000000000000000000000000000000..28581fae8652e470a39818f546fffb7c6b525438
GIT binary patch
literal 32548
zcmdqJ<zJQ07cP9W>F!V(HXsd3=LR;NN`pvuNq2{YlprPDNVjx{G*Z$aASK;>?(grM
z=bw09!0Zn*vsklc<uwZ;)l_7$F<xQ-0Dvto2Y&|u5bz@eKtlnC3(uK5a6tbkr|SX$
zIKBUUAq+Z}n1Mfh;VP};s_tmv>S63`4tRKYa9BIox|kY&H0N-1w)}P^@)7`O0C~8C
zhG)jV6|Xj^xgY1#@pb9`_am{9(Ts(l7kK<o8A2y%<o8uFRZkAi+}?znoC600^pS8l
zoGgyDtmFsq($wTL_vRR9q`X|4f(((GD^b(i2u!Z~(S?b<!p5EZd(*!ef{L7)v$F=X
zv)R`NVMC>dOZuW~mZdw!__QFGWNa*l-~i-Y$Nx8A(Lnzj5Yf=V?_Gf8e`n<i{Qv9J
zXgwkj*!}T*OuT8fXQq14JCrvreN?Jvk%TT$8k_TIhcMwCot{~8#1LKrY*d%A0yD3u
ztWor`u}L)d%OWPi5IRXhy(thV<}rdTzMSW`GYXr+!EX-<bLTpD$6tVtl1G}c;^S5c
z$PwbBSBYu23V(^<!fzerVSr9Ud8DC(@;Am7t5xz>ig+Ub7A{Vf)}BUhw>~hyI%p7p
zz)6Rey)5ot%^jA%gHe;sqpmpkqOqZKoJaI<Ta3$aAqC*2z0M;lqe+_a25P7ob>w0(
z!%dp`OL6~mV%1D6VtQCCEl4I@?5W#_pG8qr^S=AG=fRWFI|I+2HZQr*wTK{)_?tF`
zM-tp$Nnxc-Ze=9vX<Xl3)V|VS2=EF<0)U8!-A3Hwl_T$`+o+jo`7K{sZ#M2X?5rQn
z$DVb|R0#q#Kh-dPxsTlaz<8JZcD<@|`%qPQl94E|BOD1Zf~~k8uDXfcbJFDP;FT3)
z{?xU-HhK9ODF?s9uzuMXEx=7CcCEp7Ua`zx5^<MR4ggSw*!fpnyw}M&8S~cYa?c}6
zCw-3-x6MP5Xk0f`XHe0*YGWjE@K@+1o9bwvALdxIovM{nfwWIZ0L_k=`{t^P&IM-L
zO=rT8dSt{m;&4`41c9$Wxlr<+CG_Drt-SLl*(38gTB{fsVgVIh&~-%lI-}C>T(j>?
zflkcUI)v>B6CGA^fL_7=km6`TKyXJz=qGP`aQx&u??qUlf*Q{Na_Ma1>)X`eb~CzT
z^{$HMOG-RX>MpqLzE{i9E&(Y2{Z-H?S6F_FbEoh2tkQt=);JbX4wC>>lk3QXj!S`e
ze~<A;`l0nT+v9S;B6Xv;=@639Yy)oOE~nM@^X$^9TX$6+HSVMz_^a+FZ*HhuM&xb-
zUcIZDmQ<y)dCSEyF9E6kqmu9rGI_>p!GfS8^gi{*Ffv%R?ee>&KmCyx(1L&tz^I!K
z8{5rw<DZ!&9U1fLB9r6Pr6ASs7zqLkP1CkMNj_L-6>+v*N==mXi!#C9fi`{-6c_NY
z8uQ(vO{JzyD`FtoQ3^8ougi`Bhz`I@$nU#|{8HX|8RwDNig&#XWP;8i-Z=Ya(!-r=
z>YL8Zb!5qmRkjENP;>uGPL(l*v_2D{gkPrbTXu3f!YS^^cf<?)`EQRzlb`3YJNun8
zfj<NO3ww)I;ZsK_P-Z5IpmVoLgzm@o>L*i;H|+%hC^D?uQ8$kmfv{itL_f*l1#R^R
z=v_b6&Qbw3`)?#)4i0}V=&zkkkqSFiq2rPKxBdrsXk^`ZZS>RazWTHXEfNtqKqZ{u
z3Llo&p$Mofa7rHgEwyH!B7fm(MeGX!^~Stu+4DGn-n{Ko1XYa*B0*ro4)tfGKzL}{
zZmSU5s@H-~mY??W0b)I95Ht+gZ5vCfYQt?RH+?P-wloMjK2Hb=pq)fWr_Q9*ryl>X
zn^%wRi$To62lY$TeOmcCNx`HeCT$H0x0rrSh~Bk$j;jaxxX<a*bJkJk?|YLR{rvQY
z#z6!a0gZJxS6}=ha|i$2O|pJ-#xMb>7d$LIMEnM1biuC^ex*FzYECSY^D_oYgSz3p
z&guB{WHFDs$^?HlJ)DzJ23neNfVU)sfz?e*TG<SQxA3z_<aGbzN(0V{ff#H6)C!MN
zc7DHO6Gl;$KGPUXS}0(z;$tIB5Xdlk!AkOcnR3*!e&jjTog)PSCK;NRPkPzyys7DP
zF-f1pk&IqIfw4GDFJ;Cv=@IOF*{J!pr@8aCUHl%J|CS>+`ET8m#_z@@OwMfw$U>^I
z2m=2ON;enbB}}SfZHRjx_+*{tzdG$U0$0c9EIBOc=X`(940nW@d@yJ!XAjj|-T}==
zRGc6%oRpT%B(Ei+?c9EIqK)^WhHDbkPv{mWC>_d<?xu*7#1wx`IUpTW(1#ynpj$BQ
zEFbCTHwvP)k}aeJU{t>Q^lN@;mL*k@CyCRs$SCB5?V}~L$8E+BM}x(bm}ca903cND
zb1i0jr}n5vaBDd797__2H~Aku96dnA@56hBsgw^_S(cA(yDr@@2?&5UZTO#g#5(%R
zz_U8M$q54S;sG9Ujs&Fjt$^2${dc|nil<3HIq3Rm!k5GvuPJbDsv^ybhZZHP=Fwrh
z5JYs?52+N#-E*XMqz--N`>z2V2W^p)J7LScWI$kq*yF~rXbR$!CEY@rI~%YubgMUi
z?fcPpLeN?kvJeDP4OaEr@_E)z6_bVLTMt6;rWT5bI{Y^)TR&vD)5K%%f?3H%pHb)H
zrP4)fSyROk#A;R}mLt%75*a*IUn`(>BL5=gedEDiHnt!35JNox)I0sBp%ysv;`1dZ
z)N&<nE`-(L0T1B@9)@WkNsj-PfbnsSid}xg5x!MAcJ<;1N#I;f4zkfUbM0>kEZP`-
zn#uMdfODzAHU-B|bO;;V!sE1L?=w&AwsEXS{Dems^-akrm;dWFa(2rhwht!Ac{}K^
zbAt38ZZ=3N&&2V6CjN>=&MAey{22Cuw{`5cXDnsef$1aPE<LE`TFu)<)EN#W4*^gT
zk=MwN4E`Sdj<W+Y&;Gu?s@zkaG}EAJu(>SBULWybJyVBn{i`=c*k#ToO%CoMog&~8
z0H-rt|C=_;3!uw=18M^e17~@K;Whu}W@|+~V$cz&k1(dcm)hk|$!Sf6l$fxVt-``}
z*Lox@019xOICR`D<;U_p$I4NG7ZacKTlI*6@fUqU8a?Ot3i8{Tn;U`Q2#VfMn23jU
z*?!eJNj;WnXtu?OY=gc|x}ED%)}IhoKu?1*ceK)q?dWi3I(qRL<Z*}&->dghd+oBZ
zelze01_45%c49^Lg)IE#7lSVJe&_<{=6HrK??QJ)=MP&Bc&!H!euA7L?y2)1w=2j!
zX)ij#TDb7NUnxmaw?2J$?09tuqtTTEjMjbc{vLNkMXn{eQviN_(7zLY>%*<wT8y&s
zKo_j}aMLGSrl3+;7$?x59^P9-YuMuCdt6j+8e~R;5E$h2KT(Zk)6%i|LhvTigh~SN
z36ZxE2>>#*?ADD>Qc*W9N<7J+hCV7qjB_Fv8)myxObUX6!lM{@#^V-cJQM)VBt8Tj
zYOdX^S<511g0|Cqy%*<yeA#zaTfYem5n8xyx@}&I@E!`#h(UpP+w8kOKULZy*6CP8
znok%MyPa)Ul!gW=?lgF~1i(<m#M;C8Tb!-UnSO}?x<`>UVVGs;t{n%Fc$z!K|6L(8
zW*`f-ETBY%WuZ?w8oFHa|Hl;`CAhnAV)<c3oQCe=9`OReG`tRCJ${M-C2kcDz>a*c
z@~=hpBGxiNNrgy7h0|s?-+oy-tfvn;0jDcJ#~pJcGEg)AF<Gnuu!s^|$_`|!RD`k6
zaM6LS;n<ofaoU76B~Xw-(2Kc)s;7ZB(>RDd|DE@=G;ZyljP7n4JTKY%JjlE3j*Z$X
ztU^lkddnh8z-;=k>3Ny&{pz3ARc~b*O2R7oIr9ocMm~G|cS`RtBjh0IrZ^(fJen0{
z))OD&I`3vxOD<louC#iPhl`x$OD1KC4T+TVvIY-Q&=Qb%!PQ=R^Wz(UmooV>dTWCN
znfp|`!}nQtbS_^SH4Y0tZt*u$XmTlHCY5dVAxw_*F~FFPaf<0le>yUN^Qj4~CPQEV
zKlf9_9__C?T6{0Ly3@o8VXEu8Xbw8@J<_xP-QDQL(QJVD<)Ik92U&C#!%PSEUxawx
zXUp5h*&PR`((N$E=<HIwgi!X9!nassCsAa2?Um-=dNTD1--ZY*uEeBwjPs(NeIJX7
zv-N84kKs<tkvW$By=0#>;W8U!D_#{om-RtTK;_q>fYzMd_vqD*gBRB_;`A371c3;(
zj?}uJ{GZMZF_Z4F3wI+4cGsZq4oCvJqQf2{A@QZXNJe{}_{Ir^J--;fWJjLFK@xn}
zD~>vD;>I)gx7;2t*~JA`&O=0@^+gN#U<}So07BcS2m(LS^2A-DTCN4$Jp3;V-|6O(
zP9n#<cq}`uyE;AY)J=v#oh!+Pwct!gI7&7CCzQ1jyOBy~aOpFfIK<lr!-o@p#tubz
zhfPK6voNV4#bNk{_Y-O=nO`ihaMoui=6+8exw~nN3W>=@rulSq(`1<WlWl^&FpDW~
zg7zI#?Zq~)7ahTrQeKHYW+2I2F^--M0-lg&UDPB524^)D)ZEl6kS~&()(+jhGNejx
zvz@Pu)^jKI{YxnBnTynI`ORJy6Fklo1n<n-3IUB&vP>szN2A-j$GkPm8G4tNyA%&>
z^<|0PhhsNA{0h9?hF+AYhgJRUPykd0nCV891|iDNvbIlus5|!N1Dfx6k5}6#(uMWb
zq$DkQeGKD)@|73pu%QFm|7edO1xBQHdfxhE-=^<chC6`4cc-Iar@Kxh8_d^J(44%y
z5EN$C(7XQBbW{=J2YibZf77-dv_#s9CU$;$+^!p1X{Rl~VL*ru5Cp!OmxADNgu0^x
z_~_HotEa1$hmrp7yNpoaG4gov{NzmoXQv`u75_`(xgZY<?EDLm;k%)PYrD~j_tsFI
z=;2d57CizC5(wUWml7k;=W4j}uz1_*e)voIIxMS~rc3NRMi@urtIjhwVYZa-nYIW_
zJ_GI0?2D5{yCVE^{igiVy6@TKe5il^zxET4$X!h9Pmtmq<Q&!Ix}6ij^ap;zsl*hU
zOK&gs>{p8Hz=-XXd?Uct^uXP3Q9A>f{6Vs)i`iAGz@i6eNn*l^z??zAN;77#^S_K*
zx)Z|{Q4e^1G%k#LSnYa(V&ad3UgUrh*x}alW~(zH!a+e8PXGZ~LFRB(d7!D&Y5kgg
zE}QW0&b!~~nxt47#gs4mjDRpl;(e^>mWQHKp8;<tb}L+T7|P21SV-K0*J8IS=G3={
zACob*8T)(yuuH6aeA8VBdRrzMgrRu9`zzhGr@y)L7*iF{i{1Loy@tuhEMT%p=O%{Q
zcc+~kbhPn+*?{OZg{OwOcduo{Rs($ItDZQPfU6^naj4qZGa$pAC=iK;u;czvij#{s
z;GNvKk}wG%H&0U^iawPMdPZH)!-n9X!=l`e88=(6sr*B%S`;FpMw%}FG6u#`11$xb
z(TPJsOT257bvik;NdWUg>-9-dod?xj3DTL5^&o*>xD8{7nxcaCMHBx81u*I6H?`Dz
zQM|e76F!Y&8c&NL*S+e4lPy*0s~16?4Mv<v2*FsgkP;6ciQnezPdLPh24T16c+KZu
z<nTJV?rAs}RROs~w8x+Sh2-3%^_b(_`wo{~-=cLPx|jO{w^M95z+)J-`8}tn|KeLL
zum%)$UTeZ_50r10jR5n8Jq9SlZG4!Rxo?WI0;;2maHvEWQVwdz^Ga{0RCy&{UXWos
z4q$}*m-K^6zi6C-@Mnooq@0nX`=eaa>c9M)>?@c6Fv86Dz+Xt&M<WTDloo$johoKE
zZ}Y1;ktO^quWO}x#N^p|M*Ak)^vXd>@?rlQM|&|Cr$bQCVJQz*#~Uv7$z{?lQ~$D;
z2g3`X`6wqYKb3CLtaWyXA5#h_`*I{8lgQ#X-CKJ-1NUj#<433!?BJ~^04Q-5JsE&#
zI1-Jq_}$b$6r2b02&D7(h!>D_oU@?Y+xfTvOZ`P-ECML-(*z^K18*w1K;`%O;>Xl)
z%nm<*c#$_J2UQBf5fZ^jG!o)>tEcnvlU~+?Q+OEmz>omRQ%Joj8B`7+IIE*p&XA>W
zF{Y*+{xh^ZK<0M=OcG1F9yMsM-5yvEa=(fPphjz=r~|(2j>S*R{Rlv<d|65{Wls(a
zGAYQwaL+>ULQxnG7~;6-2@6Nc0h1Ef-9d4ID`(oDGqoL7d7u9EdJw%N%wu}*($7Dk
zA{;9bh?IkPe>E0UGim!P7I9I+7;#ctNrDxI3toSq`$39aO7hhhdA$Mv^90ca)Oeup
zV)H&Wvnq8W&V>y_N&vwSF)%zd>#Ezs-_&K%c#D!CkPL?+hkzWzRtFJq{q(LpE72X#
z>k|@9cv$n#HS;e|6Dld#iYi5#bV2GyB|HEgeu4=9A=(+J?Qoy#C+AF@;Af^o0Tjd*
zQ1D;lMK}-1{x>I8IJIVOQLaykY;y_V5ucAARJGhESbs{elmqB~H#s_du5aUsvArJY
z>Sp_TsT)=J?QXjj0Z)@gOb?+24IPG5<XJ^W*IG<E_K}$pltkO`$+1H<*8qYmK0#o-
z|7mm>yWUp6^<aX$5Qy5*WZ&#r%f^GWB{B9dQ{L1q*a@c_*H!XU<Fdp8k&91H9w3;q
zD6vHhmMT|Ag~4c|;$UtDpu|XYt53($R>cFMT<_C;`M9eTg=0(Lu4_#SHyr~WJc^Tj
z35HH$OH}o~HVMV9_b)>*_~-FbZ<>C^=2q3WCFGQuts9S`!E;g*09SN^Kt7POQcAe1
z!=lqg<DanCFM(Q#h;ef2wQ1J};=WHvIoNAoQwS8`z)*VkUhIoniu<?Ls0p%ifSx*=
zvvHFOhxf;Cy>;HlJ<}AEP0kN1=ENc#phQ7|V2VHPO}Rvt9HTtDL6B(xvly%Y3;^8u
zN^Qg1dJu#seN`6mw?Ofb)bD}`AR=%<-Tfoij5`-O2NNvMPB*Dl4{7p7$6&KR>mGFv
zJ&xr#42fJ(%pGw=NmL<F(5DhgOC!!ctjP;5I=rPxngS+imnxSm3n}5NGzeCbWOb?t
zTL@Yeqv&r0SP${eKs!bBxqcTUFUmJwLne)@8{UI=_jS%$W|4afn;;NHMwW?M8mhJE
zl*37w<1@)SYp6qp4(kC~A^5nj{>+G8K>$o%r-DX;1yW-BY|Ye)C65lk>1yf!AN5gZ
z_eJi$AVy_ih`k<w;-Gig+z<WwwY2m6mfQgg9UEXX`7`}1mew&I$mr?(5pb6#&d*qB
z-o^<4X>?HfRIFFJo^K*YKOJSa)6n>FC;T&eSK>vW#{kgSrm{2X$ifq?WxtSupaR9J
z&yV+p+TLQ^kB!xKbaeHCh=7@nQPLbCL0})&d&tLi;A=hqqp-K%X=kFG;Aq<`KTUEO
zg6TJOsU-+GDN2S_s>0zSFA9(Xam9FC5~}u|88)!{;Lt~Xy(`UkV2uw{Afdy8QRol^
zZpzY_P~cSzd39(Fjg=DM<VwMRGKeUQv+X{l@T&GtRy?A9Jw-^GGBrCw08I73eb3g4
zF}S8&oellYj(zvZrr2C-Z?y@nb^Y0@ULmDCHQqfinWB+A`@fF;dS5PbHRHxZSW39G
zt)awpWz4ASA8UR(61f^gyaZ=|y#952xj3JzIshv(&D$Q#@HCJFvnxCj!AtK5mA;CU
zPF2M!C(Q@wKcAKj!WW9C4L5gLi>~{R_LkhqYWI9{jD>pvJn5f0`wNqq)a^f*?)E9>
zl_Pht{?Wn6bz|EYuZS#>pg25&D;w^lBYMsL9T;qATm3VTDsP{EP4};YZ+NG9ALh_#
zUD!}eD&!^}nP*;ZKTdjePp9}S1&4|g=2bC|t<k>jIFH2@+uX^8goU4_0srU^)=wVF
z;JfB@CV1?eP@hB~<Ib1{OnRzsvgLpX&^%gA{{u|M&Rp0#8K;pVmzkrE)Fd`=ph#0&
z90&prlRca8J$_sEVou_uP$VPeTyj1H9sl?I1cB!Fl`)3DuM+?e!NNjD@7j+p7y5Vt
zVqaH;)14T5oIZ0kRmY2NHROL^hOnrj2l`#8U0y%Xc%l>5%#C0uNP>A+&LBE0<OisO
zU<ACZkpt$k7=0nt%M=L@!U=c6^I{LgP(<5p@a|gzHcrzos0qs|6vIGg(IE#Ulm3tc
zv@%2<k#gP!f$@e2grP!qr6C_N&O!W7p7pUwyW=>xm7Y3V-7gdP2c}4M6WRBo`2H{O
zD_;FrWB`gCF3K=>x5FI52?NcMHN^-3w?B?@0EucWlF_9*6tLx}-G_lhCm56@??bn=
z)Y~Qu{m0HNH?vrA@AwcrZ#EXNwYoi7t%W?Kjh6<|yUwW9ozc5W=Ym}c0}J`gp@1To
z`U-V0fTTG8AE|~vZdwt$n4|ketYRnSsDHBRvM<dcA8$^2HnH-WY?MvmWf=NkaAgGa
zbh3r4m>F}``L&<`c4Z_|4p<#m#7RS{uXtAE0TmN=Xj9^(oA!q{IxC2ejr)|U6crt#
zW{c8r@?SXMv(lZ^`Ia^jetT$Y2k63=Z)b5k&dDeKSsO9$e?waD3PLP2m1S`x%v~d;
zr9bop<A7x<#|)j%YCwPHv-cRWVSvKohO53I6nKL>UfxuJ-I^*ei)&U>Dypc`KSN5*
z0KmjOjbXmm_f<d6sjHg*=!4EqsmZKkM!>zimiHC$fbK4SW_HCqC%?-rWJ~TjW)(qz
z_QEsaq8&<e%yb+un8_bw=zMRr*bQZ$M(;Y^bcuUs)}|fN2tp^Jq~3Vb0J``M4p1x2
zM&}j%mg9NrF(u$})><~PV3ZLcB%D1b($&US+%3mM#svUZL_&L}qE6p6V#DX+Qx9J^
z%f(YDZ6bPCAN*0UV0$90PenLcg_e1b-bx)ckWXiq0Yz8bb8Xw>>Fr{TD~roHFiKHn
zn4`N|B3)Ma0I%|;3fODDPE^0D^zV4;Ym_+$O4KK=22)XutS#F6Z7aYJZfql2#p1Ul
z9;Q@*+abWbnCzM-6^M#Ujw0ryh?7z~Qw4r?A-b3XG1*E=nItdZr3XTN7Ah=sH<eIl
z?1RZqBT*X`@klSAk4uL%Ne@dg>Cg6Ky(0IkhQFdLqpeiYv7)$vWJ(f0U#GXL<nLS0
z>2cw9ErJ%tH75cn9;@Q+AVj=Ip(*tO^xDT8IsL|Xy-stgZnoMS<{LN#h?t7%)2vae
zmoI7--!$a$hh{Yt#_e6Tb_IUBC^#wmZs^dsV#c6Kq3I$6=_IkQO&7Mc+nwQ856eO;
z@onq5GGn-sWWB^@7+H92!n@=!HrM{ETbJqR7NKP~3}wM*?K!rp^J&<Y<H32c8~!zo
zBXA*dKe4&Xaf@nj=AQ9xd55nCjPDGzd5D@-zip@ud8nO(;VnP0264*;2cuo=?8~j9
zyKBTcVcf0X!Z9kYoMaD!9lxbDYfE&vE~1RXzlGgUuRg~*F7t?Wv|7`BlTN#NJ4R9U
zRAkWsO(A?REBl0e*O$=ZINwnJC`wU^+E`Zjcr4I&UF~YOnu}Mg=VH^lem9V-!w<fy
zRWm3ws8FT;T%b69ctnZ(7+^xnn9xKvTj6mr4Rp^C28J<T&kv~uC}dO|Meu-iNBo^E
zuCkS~ZwZwHP#%BM-J()J47&|#EH0}_Kg-0HjvnPhzGVq2O=`_uuD$9UqGnJ3&>Y{1
z0olSJ6kWl)7d~$N^NqBSQjx4Q8FIOIHxAoVOk<u=2Hu6H%TG`^`z}q#po;T3FJqV6
z;N|bH!mMlmsNuCQDCjt`o3O7e2$@LVYBev(e9Yb@MO;4n2_@GZ>AdV!hwL!`)Ai%#
zPc8&D3lq#jKGVmNEoaM0`_>!14LRG6c?lu0vA#<56jsd2^QPE8Tx1osj7rt6iPreO
zwpNmr&T_ue4Hvh|CC-UK;P80^XJc%+Y)@J9n!dU5wD_h!jZw~JIrIEEf}d}Vq3&3>
z5|c)5zKzoYZ}Xn_5G71u(ti|2b_Jg`*Oujw4UOFY_ATzOVP&JefL2r3v_+Ru-ifdy
zdZdhxl56Dm_ZNl#w<ckWDR?`4)>D2hTd+69{GOa<dVsB$l?CSy#r?<6$ssbS@ZssN
zIu*cEguzL)#R$BQy7sftQ0&)oA`2V;j7{KO@55PG@O9Ou<4T>_p_<l#7lccEvqMS8
zq`WC(g(Qd#RtEoocKC|e#wj-Ax<PPr4~{aeH|?g~EU^WLN0c-cdL4d9EotQaaA+vl
z(P%*d1t#M-G?H6PA8M=Y<b~t6z4gA2k9(^!N_S3svJO|ZNxUPN7|1&dS0*mY5muY;
zH}hANEQ};fyocNGV-F{9;PO{)_|Uu4T1`t%DxD6sMTcANnyT_>oZ4<Wt|g}RA9|+&
zpI<0+#(Jy$I{1J^(Wl`*DJ?uABRcLh3nM4|5HBb0Wn6hwnoeCN{0Gk3^_|%=t)#<R
zVD9`uW)^!CnMsQc(4~d%uoOO>Kc=iYc`w%BU2-6(%_3jNNqd&a&W}*cgsVy-b0oc0
zzdc~1pBwc>wQWgFHK_Rwdh!4D0`w73E5W4(cT5@Rg3QT|A{z39dluAc>&@XEJ6!n0
zaU6YFHe|`Y_OIL|<EE0q(D44Yp~CvpuS6sx|5d+cG|?i``TZE405};Y_bYc2&GMf4
zDLu-|V7SHjo3amTC4C1TRgN!eQ+|EW`e(;B7*)!pe;xCEY0ch2&evElcMz%LmU=Vg
zX;3HK*tMO<iDJi2`l5C_pttUEAy6ywv(RlbRvHUg-De%%H7QMl3&LTIkwI2Bli2s6
zd%>k`*o6@Mw|*`Q1oY#z(vnxFUNcX$pKj(gb1yhI9arCEXd$hr01AuRj*R;Q6wf8-
zJ3mWjwG)!qn(7MnSq6lJ#n7os8S2#HzuyZTZF)4sm<v~9ZQH#Xc$s3PJSVcf|5W*i
z$aBrZ+h<5Yy_Ptvabv(PU52@88)~J_Uj@=35fP1JR-(jJP7~GCP;hMgtTVAi?bLVn
z#TNNvYF-m0!uX_T9NT=u>HrBW>E?d9ry2WF(?%)z8{SCU1c`qc_}ZEbXs{er5l+8p
zaq|z9sL8jQi6Lv^P)^6yOiZJY16@hc_Zk!ig+A$Ek_AFy)!QjcDAKO*sH5+(xnXDh
ze9EB$q#8sk;TNdP?^~YH-p->EGrD7LD>Wu<WtPe{5^pv@C@vvoR2I$ac>jJz^|tUM
zzrGJ5Dz@3Z|J2>>d+4)z8k2Hy_QilXjQTWUz4OiaU+6?+Fe=J|wRA6YpH(mut<XAj
z8p8-lul%Ry2(qj>wf;x+uK{FiQ4LQI_Z*$)PNJ<wznIE3SeD=y(TQS?T5O#R)=-8?
zdXzdl&VC=ZkHb@8QQ4!C5`}3k`42f|A!iyZ(^ut$WvvJ~ou?6Ke%23PmSlaL8VU#j
zt?w5v=@iW2^f`sliN>WOQ`T6`n<Lc{;y^^@{z$#@qloI^!7>~M?!>p@TL-hSl+667
zZPlwkl97x+LwbN%T}I-TAc9b0c4$P}?q`!W=HMM)`|-P<Y(!=gbE5PEk`l&bn*3aU
z4^q!aRbCAJi!{8=8tHiYw9=vQh1X4y`BI$0GELa^2wnzv7~c48A!=|_<rT2t`rBzW
z@usutp4I<H>5sIZ(B$x+iPagxeP4g|1=oFCY;pc)^wJ<XB5IIpn-jptf8)31m-4)`
za@=wyc<piUGO_{CC>uYQhN>S><_l8PN`~%kL>XR4-^_>$4Ty{0s9+{=_H>Ay#x?z+
zuE1#tGDvmt&Hu}wr_R5#-=V8~l>zw4hss;&)Suoityc3V^tZp1XF;e=n~f$An#b^B
z?M_I-Dq`lZW(nFdu^SB~C$dS`xb<Yv@_<V@J8uO*Aar6$lX_^t-WMjy7nuQ;P2*W|
zkoA`C=u~THq{}7Aut{FQ7lO8wF>cBdhBs)OgrPTqgug97AM>5uHfnvgd@tSd$4?Q1
zkA0XJvhNK_7<ir$VCkth!>3Jarv(lft((+Cr<**ZN}Qiv%H_U9Lvn#AXtWfsR$o$f
z@)y%s$N6A0s@{>P7uuwM5xEs)S>5(O4v8s7Fb7CE%ipB3BGVN~W#te9LMi@b6{US`
z732rVt{FhNK53gysDeCFB66PkbM-kxbfgTfHQlNqw)6SD&e4XR8V`l)(z%1|#J?p%
zO;s-my0xU<*hUgno&#Ic4?C=<!4eFrf4uId3nmt=AzUny6N*rRT_3~`bNsFaB)==?
zn(d-0QA|c}Oi1F`e^8vCQeQRb5PpR-K9<_PP3#_K`iAo(C~U6#Da>d1^{95|^Dki)
z)w3kZmDKnAo;YuE(<<~;{O`Fxa<#B63qT0OG_KF5uh+VsS`5v^C+C#dKhQeh)ubu;
zyG|0@UZNUe$|=iaKGR?tQUz+JT0yzS$P+~@nL0((nLD^1j(#Q?|BNLM`~j8qyI66q
zCLwCiz=gX&-VIV3yi#HNK>^QhGt_aipH>_E8WBapOS&6A_V`KEVA2YC=o3N}R?QIW
z0B7rFvwSA!)!5JL$Kt5TmI6qS*zBzCM&hq;J_BdJCI~m^8+_-VNGYA`EButNT-(Be
z+b*|*9ZO>g3Z*!7e{H#3@titM952?*0PTHt%K~CzS#te(A&Dh@wekL+7`=54jb=HK
z#}o=OPU}ldIf$dw-R4i+wvyCRhgMz_v=SR>C33G7Ty^f2Foj9niqNd->_&<NY?OTw
z&|XGbPoO)CfI@~kp6t5Eq_iWCuXol3Wut}mk=z%Zpq0{y&-hH$B8D!@gSQV;c`uSM
zxMlvmp>$qSy(2`MHdf6i&Pfy4q*6PT$9~g!{a4Z9_=bw`0Hv(`Fa2}F(Q`1WP#}Uv
zedm74Mc^zSBCXgz<YZp;YplVzRSXz>mc2JYAA!-&elGaqbq%_zl1G;q=}<+T#lK(A
zM;FipCX&>wBDehByEYY0tc~qrrLlk*T0E0}=(lK#ZwxN_ZNwwCTIc~cPAHDU>Ce+v
zOvVIs__=@Jv!xkgFTIWsMa^D3Rokaxs+3#;p{cR()HCgf-JG%t+27yGMqVIZpmaWh
z96!(Ki{1VCy|y!i-Zd2QOhhoNooKt2E7<07qUF|O^rh|-#_Vj^_F{0;ITGwu&rM>#
ztb!B+&_)-_g&xS}BN2An;y4!-WLQhL#$==a=`aDg=_TX2;65@k)1Q+kUBk}`K{N6D
zaT{gI+r?VIX(qP;TW4~F*o$kV1VTW1pZVs<%^}{BVs!tS={!U*&DvkFnQd4{m+O;S
z$q#?0qPe<4_vk^AjIcL@beyE+_Ug^_$<|}S?DJ$Npph~q++T!66g_rP)PDA57tXjm
z=5YNqx!u%md|Yf8aNt$*cOxPl_#8R8;KYHn;E@OP`9aHU4(vvBwLgpLeTWz)#Qa&Y
zOd70v9@5jc38qC`3gLD3zh9G57&g3g-Q5qSKG^WjWiLt?8VvznRG$wGJ+MaXo;%^h
z@}O~{1sA_1RX~gRN1Ve@5n)R{T=SQ>+G4+Q16ud%15y7brb>oeuxq!*YWTb9#dgKM
z!Ij;H0J^-fqBHh>UHec-gc8xS?y@O81As!V8tIekpU>?8ye{adG&_LE`rCZs9huZ<
zC~kO`4kx#=t)wbzJhY>#4b|*jTaQEz$a@x1W)!N(Y58zZ%9AgFTQljk>9}-WE-)z5
zoNG6o=h4@U2F*|G{#<f)!D;_`eqgvJ>$ahoh2wszcvo3r&$Hh+l3TjkxVp~Co)xAX
zoqonJS6iZw`Hwj)8?uGV+5sJR$|Ve>$q6cbl*%TH*Y|R>D|sbzp;ve&tuWo7LG5K~
z7|naw_uZ}a+X%9Kr5&=sRwS|IiiCcG9Y@YFwX?#m`DTirx#CQ(Boi=tVf$7U=P@_Y
zxqije9PyouhqBSj?;VvyWmkq7m9x5o`bGTm{Xe}@+(7fsFvmpJ<S7;GyiDpGvtz9u
zyy27d*Da_JkMLG2`CskNfbXaEhv^7*{{r>inM5~``1`kE=|8)h*S}{Mv-Fw;RP|T|
zoM8kWQAQq8%{di>aiUZo>xnJfKFTM2PLmlK#6Y;CWc8<Xs!#4wE8Lo^uoOv-xU)IS
z=7HW*2oB(53r+B0Tk;H;2EciEbjvLF$Tc$D-)~C?5CqAGhFbB_<P*r1`%GFVJ5P}y
zH#1$No+=)D$|OliG5`uwn|ZR+OuQ!<YoxEmo3VK`7kD(H>Q-wv_GylG?<=R$qqy}D
z$|IwSMc7d(C|U7eY8A+0e|XdIaXjFPD<^eK8@?c}!OWgF5mPOUzrihJg(ENTbM&$M
zV#K0+>Zs84t2arsfbGC3Sc>vah~wj<2K`RdbnL;zh)v#&gAq*axsO{sAX>?PsJSO@
zm1;@~yM0?>S!7QMPkJGzkR#5eIT%jIStJEF(?DGNUY{kyFDlt@ikXXP=9Bj)ic#?2
zK-r@s*H^=%Yr$uPyoJW&(Xk1fR+m&H8kuwP(61Wy0zQ}R<6DQ9@Qu&ElO4&Y?pvj&
zCQnyYZpk%`S1-XVx{(;>)j?FWzxtN5dYMf9={0_)1?$X{@rl)4W_4@0Jiv7=4vRy>
z*W^n!QNGpJDe<vb!CdLfN<N$NYBGp)pso_qvlaWh@2UPol4ObPPKAybZAjui(TE;6
z7rO9_f_1k$t!`+@vL75J7OVwY@Sf5w`PaASh;{uo0pE|TZ5xlMuU^dsix<%?ShxiY
z8wM(wEZnXtKEIi16Fqd`QGyqHP`wohX@heFzWTEmZZe7-U{kqq=Qq7(AR=_kr~hh5
ztZ}_1=)`F-ZuYvfFh_*2A%M)t<V3Oe-@J2@Q{lS>Jr?Z#^e{F~HS%z2mv7;pf+f#8
zZW|e5(Q0_sl*tvWL-MaZY?IIGr%6HMWg@|F7V$7}k|ykY>xO9CeM#+#C_El44u{Jc
z*ef^g30Yn1W;!r?P@>>TW)p0X5==E5UfHGrSlHNylQ-xWxHDcY1MK=?cS1hQFUH@Q
zSgC5h-@f&`-Xo10Z(S`h=P<mi;(6<&%5g(jcAOpY3NJ6GH?1D0bx}{7=k=`s1I*{_
z^Eb}s75@=g!)0go_+$e>0<V1cIi-Kk<K8SbyKVU0M%}AuZU*THD`TnV40nncGvn^;
zA4ygHSz^4#3A#?crrp>$LPDTO<-cQ|YK*#}0<Uv;)Y-(ES5(-eoh`;6fG!bIk$CKJ
ztEsbSZmN+31fTC&ppW`f8>c0L1EHm>jbr=a(m__oopP_d_%<8k@qWA~XF8q3u1R$S
z3C7$Y+WZl?!y{xb=QOXoI!100pma>gEH|1mQJq=tQ5xf?G^GA4xTnf5KxZRqN&g~<
zZ7)%Xsm!u*sc<$$-@0Nxzg=9YUSUhtyq@B?rj6>A@|>;LP2PgKrs}uh?5qCrf%hlH
z`mvtxej9!7BC1D*T~+9us&ADZUOBp%>d#vUUnJ<r%QrcCRg7l`EmgegpLKIDXZC6x
zb9Gb8aB)5@7mkiUtEU)NI}CVB(>It2Q~=fQP>xh-?Yy6tjs)svaVjuwYM^vob&r!(
z5NS3A^Rs(>F|CTr5rbEsH^G7vb&B+14_TjC1QXeh8P7owuX+~OL8_<5Oy;}*ns|NJ
z;Ox9M;jJCHXKRpNWqEY#UH9i!YxeX&&!ejA--ab2p87I!Kubk|TwI!M3L%P>>}$0g
zv~$P$#nnp^0IgU!%vg&><M4x?)}QybRz+H-;!=;Dc~+jaT4gtjzxj7?QIig#ET8i$
z9lf}V9uC7QkguE*oqB16if0G3JXSB!Q6ZBa8aag`DVbV;PsdTZ8>eRpRgwt4TRoLo
z?O%%I;;=ZcQ>MqgBHI3L@32Mji-zCmFo#xvrhu`6AViCrWn%6ioOACQ5%aCrcfIWM
z2EiTc#E9Jp`bKJx@ntN5f7Yy^#;**(>)X4U$;{BpWCn4QWsm*)kBU_1z$eRhK3BTY
zR5Q4kuOk|gf4Md!yHgbE4stKU#NT5klVF`m-x!JRj$8`8R~AW_T6`7?2{A551|BC?
zJqC29nGp0uSAWebN6RNFF)>7;RDD?0-xi#A3b#`v;#W@RB~(xRghDdt8DU&qvfF?^
z2Q4hM@%uF!hHO}MvqI$t@oBAiujph*tb@ATHOJl2h%EiO{x{Fs(+%-)1GRHGw#{=q
zY19l3-JN;9Jvt+>Ksn?VOt)_>x%TKwyCg5aYPI;$)7}5Hvp}M*wft6mqzN6Bu`Dgq
zG~cQ6Lwc#;FsWd5`BmrgQ+gw{pjpAH0=|}}E$_DVoAG0_*1~0F#(Vh8diw{j4h!W@
z_Ve)mm=^&Gg@)$Ft`9U*>_r!jnl}9Q>C>K#)HJpG0~>iIyZqwY(Md)7<M@M3HZ7+R
z-oy_^v#yO6Q?}bMgC(b7ge98xnvb<7sDX_-{fb~mDv)6QxbVb-hJKGcU4lz$aygq)
zWaD;dE2J}zZTlQeRe8tWWZ9ol71JDO!oX^&6F#zg2tiX09k*&^=SK%HsD^5X|K<|7
zTvU}fH*k#4WYDV^`Pef)rCs)Cj0`DwS5RF1S<xSkx-60KWW%LNS03ZrVnmSBJ_s^=
z{9YxK<n}$fL7_^AtG)JxZM~0ItsZ9m2`$sI-1Db0e{QL1k_zra+qyseM*~(npXplt
z9z!5<VLW~XotlvN+jMxRLY+~6SNCd}9Ys__PQ31Xkm#`|>V6AZs1jqD-e+q=%d;sV
zx}uQE*jen_j;?Ml#%=j!K%81!E`5A|i3LIKVzB7GjV}YM4LRn*M^T=2Ji`2zfnMvi
zL6%NQv)&9h)1qAf?tHKb2{}Tnx6t2Uamgi&e~i@lT{P=D>_GEG<N5m&7zr3Rhihz}
z!)(@d!LX}#9xY_TJ~o@j*k-4UUmm$9H)<WtPn@KER40g&BW}k1RwaukbEZlY5-4jg
z#7nluVU^d|VRes8oZqQGHEC9;0xvMdqJYu~sm=BqIaLN@`QpY21#Rzv38EI;l07e8
zLx6@{j$*odD=orM>gqBQ-RdVN(<mh(7jr*mt;4k}4}-cRWH?+n>U*UL6d?<Z+O4*x
zuM)J=mQ$N&FpJaujQV_sAy&cg!izQi=}PY_QmJYf^Gn1zqeA~u2F<yYC=;1%s>HNH
zk%sE}JEOPE?F+9n1h^^OgUK+Fr2~AH#{RiOL1BPF)TVUiSn3f<kBnocSWXhCcU63S
z*zV69NF%za_TJEOFg>Z5N8JO9UuSBq{eMW&^%X1>cWyJLMKy}hig#l`|HQJ@{D*~}
z`Ah#DcG{_3rm=ZWYt0@`SK2S}@t&~f?+$D!P?=Uy+vHyw6&-iS{{`+rTV#R#8+TEe
zHJ^7lUW*teN|X-FbKk0IaAA;wJ+k!Aj6fMJtrc<w!9p&3;r_utFkKj*IiTSAKz&^Q
zWrOI|2g4hQ;!}v^iWW9pS?KgHRA5Yt!~ZhgN7P!u`U%Z`7kqX@4+%z1e=&1B@bLSi
z;JB?e!rqx{g*E${QS$V#jq(AEEU}V9!?msXTDV!9^5Y-&8+EM${#2b4RGRv^5q&;o
zKu=liT_mNF+0U=UEu@I3r|{Q2ctlCgpV(N(Nee^_DiV1rA2}B-(#8|g8!01K3pzXh
z5>pGCY0;ySB$h>D<74Q@a|Ueavt1>3c1b8RB7B)@L(b8Ja7~BFp%6G2F>U*9#cx;}
zl=x(6^U(47kY^$FFL*DB`CH_@8J2k@CGOnoqZ%8%H5vC_e6Ou0TB@rbwUr=cVLyhV
z498~V8@|;>q!DGS8{=zG02o{F6mW9bKK%`6WNk>Bo+r(#hhQmd?PDu;p#&^xa4pk^
zH?m4xAiLqrHGoe$YYRG!EBLMQUuw_pGd;W6lJ?Pj4t@t)jtjSEZu7iZz&<iSl%Lk9
zQ?4Kg{K*j-Y<VyIWx4uQy@IQ3?$Nzg;ZfEuhSfy5ZD;j*mQ9}Rc{3Mb=35?{Ywe4V
zGrw8%KEE&|mD$<<V6VQwIJ^7KMw)_kxN?-p?6i6(vSxC#hnmKISp>mKGf(NQMZg&u
zbp}(kVQm|ffj+T;B^u*$=|y_^OkT$>cJi6*sHgJn{lOxiZ$(AgB21~OHN&sqkFkmb
znZW2Yc=8Mk9cCMEqpYpM^&mSnhn#4aG1&`F77f2DwR02VE#Z-{hQ|Y10nii3>TgFz
z_4;cOK5RLyeC;U@VZuaN=<;2fw_40xt7WO+rBoCnLCfEfmrtc0Tz?9rV^!9)rKo?2
zmSbi0{bd;*6WvR`SHF#3)G!VU?po>lD);XVchy6P;xr9>gN(U;K3VANF#>e1G`B`M
z#UCdW!|)@LEa%7fn}*WMS}j(NOT@h`f0p#WnBR^*F-|G}<GS+J;XoGmysPBLVn$j1
zF*Qo!P%n5QMF5A9T6t-NFM_^U`9g9=oZdySGg~Sp33Thd`Mk)uZ$?gB9~PhU@=V&B
zjrzX#Q#(PHu6aqB%4&+pj+ns0H1!=BN-~{yNq^&CrNneT$_v%*uNm8#3^6@;i$-)T
zs+{G_yU}mlWW9tE_6n4Ut72pcr)c@B51U)cGH9CA^<Q8*<dD1vlX|1H$`@70fe|?P
zf7=lw#<E-t>MB!EvTI0~RW(hO_gd5G^(c>w8anf18#7=a`gdL#<v-A4MxCkJewBSM
zMlw{J#wvFAZ*z>VQ4#PJN<e~9!w4U3_Bz1_fZoJnJ%r&mD$`)GE2J~suM(XS65EK0
z$-7qK%11>TJ=&b^I3uEAboZjR80WM@OMl6IAbOH>@o+lv_Bxl7mYMdoZI+{^sOoJ&
zwE9>0-Lh>^$!07L?}8d@qJvt=jR}@A+YEENW=JBF<W-HrenUW@tGp$8pz-8HB4&|?
z+6gQ<DNftAuv8(F@cXpL`*THk%{Ux^MLwGkYN-<wE@yL}H(3W|52;bU4XNte<0PJ4
zn?vHI<rGj-_HHGt9h|ze$2(A5DpTKN#n!K@jhx>uW}MgS3U#QZm<=!%DPrmllAu_`
zA`YcNN6`Dl?HZbA^?+zbX{+=!J}A*Us}*+kw8`!yqPCRwi}+2_M6n%z*`=Ly|3U#x
zkH_4eUw*W6#VkD%HF#y>63syt6Sy9_{mZ)?#^bYo+sHSPJvoGDd#x4jXo*04ga~X@
zRgsZ#h@f8KB1K-Cl%)gbvNa~}Wd!%(UeE77$xOyqzf54Y--$>V^?nO#;V4*a5o5|@
zVvF<W>-*OftxbiWt{-5*;BY1JCAVqmHx=&aUkgbw2I9U%?h++HQE~prQp=MZ$gnED
z^v%IW!>24kjs!8i!zx>Sf*Xfwysxoi{V)HOL>D>FFGMm405umb$nv{OhwkW0O4o$L
z7Bva4ru-g^E#Dq>a<{t`Q2pku$e;f%<tz=x=iQs15IVZLzo=n0ZDFw)?7hhr4@9Vx
z4%C^(xsDA>Om>iJm=dl#3C`9F|MC^$h?8!Px&I3%GNk=#^0X8CzzXYDTh(E%k%$FC
z<X+uOxZj6TmC)0PAF)wHY?(!-_ltS|^d$77N=%Tt?7H$f>9~jc3gl`5`A4?4<B^wa
z9d*rikqWslXyOdB+J@HKxms@~E6KC3VXf^Two!TD-x*@`hq^_nb`vGXRM69;oZ2(}
zM<R1TzR(|}M%l;)$PXooW*uVl>bjcGT0o#cYR5~9rb%>Ism3CwlI$PZBvsw=++OGQ
zThA6<r)5LjC?T0c!vunmeA15e2%OnqI04SKt^JsWDM$%?Zf-GJzedLUI%kMkr(a;{
zrmHw&iGe_)>&CvHdN9cHxrumT#lfZA|Hia~W5%ry#AjYn8Gh8ws|uhQ{b$F*^otUK
z3kDf^<A_^lT0s57_yxNx@n1*fz^4pyQCtItj;j0fG1cEvyq!eFUfs}Sd+FYV4{QR+
ze|Ix^^*jUobXj4j$`lk4I*AQBZ_b;^6_D*&eMwuG$1S6iC;kz%w9aA#jz~WmQ{oqe
za7zZK-q|R<8!>X~jj$1;F<p$|-#)(j@|Hg`RDSn!9)20I(Eug}W(V}_x3P8Yehsyy
zyBMR#`Ktj45PCgf?D08E7xk`kXt3ZFZo|fExBgcKT&?zZ8Jlbt?PKp0d5^}DHx^lB
zSOM^ffawiMAiOWDyw4U{N1G?axvew|0VT$`Bmkq;af^EPBEyRxf7@cVng{DFR7%%=
zYG~1DycDPCVdX8~KI`BK=3#Y=cZSOts>wJb&t<i!fyY<!K5zGe4lgoO1d@s;eDi;;
znC(+$jQ@^14q7muSpNyqF#+HBry=+Oocm7k_PVS9D*1HptS9DE5;3xAk=~nq|Iv3J
z7S?IT1#tyTn7FCJc@z9ZR$2VItL<;3wB{`&kcJ{BWETYIs`UCg-;6uOSP_W;tY9~Q
zmcihG&)QqQgR!jjHS2FRdI;Y;_!#}f6Z}1W=1ybM$*YKs4ywaikzuAiM0nF{(t?ay
z5F_2W2{;!M0Q&{0xHS@8P3p{NygyKyt@m*#fOVJrtZ6yMnS&;T1xJJ`43?c1p>gOA
zlXpu>05R1k^X>*7Zws6S9a^(q6?PDu{~nzdBo|1X_4m-R<)G=EKBWp;)^#xKjk|{j
z<~IoKADEF~=zWCb{~6eiJ>g3NJAU?_?X)>#uqNLS__FNN)(BrIB_5e1FZ>vk;_*y3
z{+eOId!W3H+rL}3W|iik+aT^Rv~D!2CoDtrnI1Gb!8GPzMG)i_V5()>9AiO?x9oBC
zT<Wpf9egHndtEz7x*<wQf%{_ef9;7m8Oc)y{YtJf&1%u!%dvD}l?&O%tW4uV!dZ-B
zda5?fMylV=RSJ&K^7pM=x+7<ufp|+L-=zabQBG&)<*CUJBd<FKlx$@#-S2}|uHNAM
zNig0uB**v{N0NTMUDY_tN1<3ciFjbw?_F1F5;GwF&t^oiB(2rcb+r%;5%XXE)L;Ce
zyYF8C^i%1*&IlKyVutNtw8Om<istx#rmjC6v0F0D=`~mbf3g*S+MPEvAj|ro5sRN6
zBU67O!Ibth2#bGm&Q4ULqCd3?)q;2R2ST6-VG-w1%T*qtQ|#f7?{>NaV0(Z0U^I|Z
zV=RSinmpAw(7K`(`*TXsSt`MfJ-r46N#)185{4gYczb*?q;wiWB#uvk;l+ykaNtD_
z<Vo$HDdCT&;E3gf2Wuai9S?}o(e#>ovPQe6p<j@0<L|@7P>V+Wf9XVi%|=r_s2QHD
zM3qG%>{s>EXS_OZ+ze+QbzD$^tu(F`|JfK)U-6^UND=kcYNHh~p_d|`B8K4$zMnaw
zxv}Y>3>(B>f5lPP{B0;_zYmSTU^DA0dE|UIdX`F?zaR06j*gMUlzBtoR1h6M0j*Rs
zQu3lcSMcC>hUNHddaRdP#W`YNH-obu(<i1cfZeJR<}AyjF#e<aD)@l?|Mdb8?1WgI
z&BZ4)%}+<xN=W3B@aCF*DWy#eq1Ai3q2c_nt^t89&*Dm>M}GHGuA&K+;0DUjrvi>z
zp7KO9Gw5p??@+0Eo(w`66NT1jVD@AH@J9`Ptgue;Q{ei&^Vhsi)qP*Efp!v@PN`~n
z>hTd0RnE)5R4D9eS2zXlgK~?(xef_zR|OUrln{{b_MzinFFyLwo;@c=ICGnjhSBl_
zi&+D5n1p_RzmsR5hk)}p=idD$rxLWco$}eF0ALi4KGnv!@O9?4<*e&zGX9c*QE)EC
z1-GTBf`Cj27l?PHJC1DGa%5deuNlM+eTq_J!$xxb3U-CPm==2>=<o8S_}^lZUvKYR
zT;yJ*LuNMGe=TEJNEIRLm#yvw8N1~=2AOqD?>Qc@6O>%f!T+cLv?r)!s;7$891QHN
zW?p!;idqLK6Rt=Kda=-aW@}XFiz;2p<gXZyi=_vKzEiDbhgt_DjIp*l9aUB>zIkmT
zo}=T}yflw6gaqXT;whAa{12C^{Qmm#tE?uP-#=|%1>DFo-g$9WB0thbvom}o5F-za
zm3!xhJj!q2x9QT6Jk<PhS03{5w4W5UXM7M|z^bc6G-gSmbeu(6%7tanJ39Pj^nY*_
z5-@~AdlyOdOWW=IrD*GY?B~x)EFt0p3do1oU=tvjlB9;QRHrle2S58OZ7Ql|hM*M0
zXuE?Y9&_Z&kXn8q04+*es+BE&1;zKS%)M8igoJFK$rF5A7u?xjKE?q+JX-G4%W1mN
z>>qdG(NEt==N0l1wQwkE9f^yc6*d-Y<cbmrE^-lp|I^-AwZ*vv>kbekxVyUqcXxMp
zcMndmL4!jG3GNUixCeK4cMooZ+W>pA_OtKL4><SVOm|mRm%JtY7m71b@oR#~YWZn;
zN9(lvVUFTOztok?nCGT4<=R{nh2w?4uggt7gY9E~aQFVxVD#DDNFqKz2alDYywT}5
z`-CUzue2J9FzBjH=dlQ}8cGH?CkJm9c^mOwz^Y`&Ddd&DPJ8?@cuN+OA&|7pp#xHO
z78xK<mBeBSC_P*M+W1`o((Tk>k2OIicwnl_7Vkz$cz&^fedo<mV21*S)R+evv%I@2
zh|m?qsL|tl`)lU4S5Ib1X7KC}Ux^7@`KqrOpT+k+at$mK6M15_)F0~|De5<G`ud}4
zMF6yCw8T&<@k@`s63mp03&|65L_1A+p8q}^;D68S=0iTxjTR<N6-C1Sz}j&wIVHS2
z7F)a;)NVaCtzO?vW}y*1@AR^O_Auq@@aDVwG5N;j=}4(#-XXV!$6nYJJ;5Z3bMA*T
zm-3>4@FcwymoW=!b6Y?7n=$U>lyJe;GZ|FgVM7%7O`BKb5Wb`H^9ji?71cdVuV*3p
zK-JydO%aDCQdOYuBEiS{%TB6=`0rwpa9ATUB;$kpO)iAq+O;Hie|{U+1ct3O@jWRJ
zEND<%KS2SWF_Mk^?(Xo4ISgG+ARSaQUr`nlBmPoJ{K({o?xm%95Eg2tamu`K8ek<&
zt7@*4j;!58V@yfW3slyW_NP|hY@jb*v7qo=U!W*2YKfcx{Hv|>G<vE!Wr37{ZP9Zi
zL0TT1SG6{Y?4Cc!cQF%VcV!6(XtJtKyzJ8ttpgi4ioG~q?F>VGD*-t@5i$8O<`1Sd
zadkX=w?52j3JYJI8=wK67_B85w72=?Rc+fDT#~~||Cns8c<f^RJ5&C84zp(U`s^U`
zg(<U;)YQ#$M;B{B%^0q{l9Z3H;+M{~SH%_HoVU4_#9xYnG&}{JIqDL9MS16CMhD3q
zI9R}!+vxJDuI+P3A3+(UEzQoU!ZUH?0A+lBL6*W#)Wz(4e>5eA`(h`gu#tVkX4*{8
zP|AjH5C*n0Kkmzz-I^b}Zo??l&|}WWdYd?WxZn%9@<UZAmyVNGBo+$!t{Zlbe^h;*
zh`96*`i#Q4G@I}%GpEMVH<bT5wfnB|s=M~NmD++HF2pc}eDOud5$~&4tO$DL4}+RD
zx{oM(zZXd6mI4<^eu$TCSpc@NpFj&srjG}ou-~Kzlp)gsnw*I?=}bUSlnQ~cJ$e!W
z?Ns}r{s)7z8lnL|bfQg3tE(SEL9Ztz6~a~?+f(%VoR_MGB1!DFI2pL0IcX0)i}_vs
z*dK=-RV<-U-)LUJkb0nW`o%i)J3|Vo%Z`&(q<0~v2vPN~SOCfb<&s39y!0xolpK|W
zX~n|};v6mF4$xg__v3MX1d4pWnd7x=V-?r>^1&dNWo94LNXBK7E56JGOE@Y0pLMl`
zGN$-d;H5Nc7+Wopm?0EK*VBn3tFO;$NJYx=hv1`rD{(H(HiM`jNb~828Vmj#RTFl}
z9`VbxXJCT?8fN;0Tk_=uL4OjGF@;8b6L-V&<=n4cxh(a;uXe&(&PFd&%FG}0kT^6e
z!}m{=Zb!?j0`Hma;b-Lz{@Z)v23Obnw(8cHgikSnY%^k>#}s}BNBof{*pB(6M7BJ-
z0UBSTrxdS0BNDjDGe%lp`?!^mkLcAGcZa_<9BOEZu|7sFEXQToo5<NfRkZ&EsQ?NE
z$_ak6d8ULSrxdtsziFQ+LD^D*+ftCKJt&xB9Amq+Y)Vub<i7{SadH@XR8sFQV;}Kr
z7SK^j^pDX!r!yK*VRo>GC{>18OvrAD0&cl!pYsvHH~*PXh@AZFln3BCuW;OIt6#g=
z#4I@FXeVxnaB0@X4JX3F6+D$ho<ep_kEwrotXKZZjIA}oiCpiH-ejm2!FPzC?em+R
zGzI_|{?5A6`c}c@>U$vxA&1Hq4M0k2tvL}qeihc7JghpKK*JCtPwKy_R-qHTcQZMC
z1<Sh_+_tdz5;RZ%!7(xBlxFaAnkJI?luJ{{e4F+joCuWcSdq%`2Lr{r&}|~4-p@uM
zeB58F0-EoMFA&V7{*(C0?9<}rOZ<(2Pq`TUGc<W#U>bMH)7|A;Sr>+h_#bhQu;=w`
zx_6M;ZxW~82?U0ee=daDzkKCby=+-*jakAI#Rmj8KAKBjc~rOGuaGGUey4{N-1Esd
zWs5vl!!}is?<$Ef;y1$G{5iiefU<E2f#|+y?&C>^Q*fTc>0>!3&pahRL(3||pP;Hi
zFV9a%3$8~-HX^cIMV@Hym6vd;t-CN&&)%y^Qa^{OtnAn7`rZb@&`3MSwTMiVC0L8A
zAk#hGsa9*t8bGG9r;W!khB1EUFNs=1P4T!6=ZiB)$v>PvZ?sTJJ6f*AdPk*OHSB7&
z1!i}$1y5|GGmy0%nd=(D2iOa+9GpQ58Y-(;y<#2C5Fz;uoBUpm9$5!%=BEwo>AaUe
zX|!K{8zbSO@=IK`gR|Tp{HeffwdFHR!zw%H&!&uilUWVku76iu&F^2hWCkcs3Y=Cv
z69_H^j^f>^SZwBc3uQkxa(<=TCDwHd>wU9#o#1?OLx$I2g}=f@j49B%A?`zSZ+pZ-
z=1~ntdz!5)@ao26%7+yh5z;{kHCJSQD~yF*l=e6mP3c+P)_h0C)2i{}(|I7lNFr@o
z7If~n^Q|lxX*Dtf9zGjs@kK{P9p?sC0t<7IfCa>mc`lOzj(=@!&xnJV>fan~<eLcE
zWSgq$9Sj$7EbgM;mug4#$j?^+y#yX${tJs=TG7M9Bdelt{^F$P52e!%9mtfFx>0EU
z0*lF<<plNI&MHfmH1nJ3r^*^vF&`c(;%(Y=6fPUoC7lYpfQRFeQGd~@+YdswHoZ2a
zWoJ=KG+Q8}SP&=qJYGe=?YyU>2R1Jx=rj8UoyX05Oi)i)5_Sfk_<C_g<Ht~5sG+;&
z=dq1)R~LKoMrupA+=*|A8zYh3_2Hbs!*INYKjT-zmw@?{pH?}Rg`KJ0nT7RCwfriU
zJ3px_ZR!(QG;??s-CV}9j+5QT_O$4l`0pHIM$uzk&r#2H6WBTl$w^(lF2HcAQiqug
zDcRnitfG-tCyeU`mYe-fhRvc(!eYAkq>{vBpmRILOhZKp@yeQhv~7P#qI-H8kP6I3
z&lP$vyL^j2Wh}5({8+6LjQeib09yX0PiC2J$QCQD;0p-Pmrk5-Hy~Rdg0lFsJg2jK
z#)G~C!;)#MpN-b3jiZ}6#1zs@<Ch#%<Iy25djNCoRhnDOmh=!6pI=?rjLO8%HfD77
zd{DxwWQw)ZY<$;)6!gRUll+($bj=Y)qW*i>M%(dJj^E~bY<Q?H=FGE;N%e`t&1UXY
z)&=~Sp<YUA?(FBz%pwD-0Mj`51g)XPtoL`<%gMbW#_INv_el>|ZPtnjN>AQQ31o8_
zW$GCO6nj`g^};%@xRDo|@8d_ABTAc6`h@5)7S5l?_(s}itT>Y69P9D9qw4G;iz(8~
zj3}!R9C+I{lqFrYA4CpcCD}i9%m<$6=+1a`=Au0X9CaSH$U+CIZoI5}bRRk)>}tNx
zjkY9adDd0oub<nY$@1pZ{ABe<QaN6nUY9c9?8_a(ktq5uGjUSdN3w}4x<R1}f1Q_=
zhnA}gLpCpy-MR7U-gn5@P%25hqhkAQHEna$?Zrp8RhI2Qa6~Ems76Ew6yJB)V<-xS
zW4B?Ye_cJWvi(kPe23A^Z!;M#cw3M|Wb_wICDtVcE%>qXO+2uRllASeBpHMEGpHze
zfpvHOWhHlO_RQPWE#OPT^jY2a5h%)qfa!uT6W0v(;KYDcq&x$oCbT6YW2@};9Pdw4
zC;Cv6HN=;R$j{bH8%&%LNWe|iJTks?@cvVI>%{<>T(TgbgoquQS?sc;{C7>uui68d
zuQ>{8!U8dZuY`qbPenlmBPeHryHmkAS~bnZWw!55r*fB30{WTeK97gku{kKrC_%z~
zuQlu$8@zV1&o=bOl=K=hs)jAx80Sy8V0C!!ssWWI4*X)bl<r6`6;ClVq?BvVTI*PJ
zlJA!ATf&PMdkDPECBHbGr|{e_`=$gZ1OYlm?GM9yoMSe{1DW#nx_~SWJM@fT5!JKJ
z_&a`mvP9bm3qaVO@x#x+J3PCt&0~2eW(;St(nOoXhvMWrsPfEm`YJ&pC|%ilN)@Dl
zWlc4_nUG}lWsLLRS>)0`gp}pn%35}KFs`Aoh0&$SdpF;5ID^qhP~(s_)~mM}Bl-0L
z*Q1d~t^#y>2&N|xiA#M-A@e8pS9Lyrz2#Y*wk2_%KJoQ9`2iJ|+5@hSeIWS)aj(H8
zMb1#4M~`NrpaYwsea$b|8ZDRi?Ey0B6<%jniZ<HH9;`r4rOsC`X5kw@xJ*Ck4J>W~
zZ=?6X4nj(l4?rF_GCOxpDDvGp0ZcbeIGg2?*J-8P*mybN4`y<~l#r1WH+p9Vc#HBA
zzuVA!ph6e!5;$ujE5kNL$~ZA7B|XmKgd+_*kkCoi=N6$Zt8bIw&d?kz+J<SHr0k&V
zI$)ohzt4tld=%D1RD6Nn<`M$m@c#rbK3r51oHhJO2DIXejaSciv|jeZ8ee_!oHuW*
zZYp~Lb*|8zz<Be@roVQKM71WxmF_9Jezlx%sae^d5(y!8nNNQWC9Y+NaAk{Wa2FTj
zhtyBm&7VD0t-R60zl((JlEt5MK$9)<GgCc(=|Y<39jo)VY1Ik5Nso}5rlhM*ohbpn
zsC6jDtIWQ|bKI;+o$yLMUOq7mk|^ttmPsH6>mZYD9#R3iHtTJt`f%Z}(bbB$Szx9Q
zOrNQ|nDrx1DLaLzRHYZZR33VSHwKBv_}#eXcvknmZR`%d!=U5_u<^}TOr-@KaU7{7
zPZIxdrm1iZK{r7Urr?p@jHx-4&!*$jsw}T0RvZXaTosw!mb&pb6d1cVijw-ezpP(P
zB4i0vwz5l@Na;xy)9riCV<89>Mdh%});PI(Vw&m-dX1)r6%&++C&YmQK?mcReEC)7
zL%tnH6<-Y%z%c3e^)>bN4yJXt<XzLqW>t4?_SNHc;c5?RLD+&}DwkfxYGoyzIZ3Yl
z;Q)=7KRroDM4QCfjpNz6GzFRI&9EezN|kn2o-A|y0=0#X+yAW}oFo}S91EEX7Ljc8
z;bBQ&!u05}r6lU&Xa0KDC+h_sd%*S?c?;YtEPx!O-XV$6oE)U!&Yi~tXs6A%vXG|7
zR@lk?I6?(07T5VWu;~TJfdY-^2;T*I7F{ul1xARa0(~p4LM`v!Znssf;Z<eY_U{mR
z{+1p^_ib=Y9&=7(3~6|4c25o`2n-Ts5eK94p6cY5b6}xzx1~$At#BC06~&oD#k@5R
z_(M(S>63UhY-|<(*-CE~b@8lx#y!6u2L<76_hyOdIC~&<M<I{Zc8E>`w6yAtz1F2e
z8O>;=qOWAdM5l^!GP?r6j=-0TKT=tBir=8SyGzxD9fNa-08YL~`5PgkWNtw&4ASWY
zzkS5iRXL7#{7KE=?iU(v+pY3`Pk3&~VKGb*WvO_gd5`^GVD7f};hB0=ntnUz=u=iH
zUYj(;ZN%VRX6<u0wo!~VPa^a)_<OJO`P6eQ5q<4Czb~Ydhd+o5XJpxw$hp<Z?Ca8b
zZL8t8ETlSS2X_ckXWeuIG>uoRx_34u!y=5j!o+BDJUXA*jyBGpM$vfmhe$*g&$(->
zQQHx!87qKZnvu!wZXC6AlK`q*cUngE*YHhcv(}wkVY2?x*#{5o1zsE2m*k<)P4!WS
z@j8xrBBLoEsDg}znc_v!*W6yEQWy6+mJ4$t6irAi@mDylqN;(3>t`sw-n>54Gb19m
zEm*ZX=GEWM?j&KczMggo${0(fx@8VA?%UJyeI3Z-0PT<`<6sktU#8|HzIPs%IvtrV
z)n_!J*Z?<#$Ua2B-MBf?UWbX+{FO3CJDH8LYFKPo&d}ffUn^VTofjsWrYD-TiYXQL
zz4e^^x{7}d?Wf-lZ4htF+ZpPc?45GLY;X`2V8FVz(V}v-q}O`VyGGR+Llo|&xR;4a
z7`Cx0Z>%TKkY831A7wqmArb~}`LBUUJ3ijJDUp{u2Xi&aAFpC%HoIpSK+l6CiR$}&
zIvU1~tX0`V2D7azz1Gp#fw>zC17H_qPy})u&)S-CQ=dq(t2gw(beT9drTc~mN6%SG
zKUT-kr@?5(^dXAg4g(tCByEKelBUlfjmwFZ#>MG~;@w?j+#O<5NuVx!8dcshu&|D~
zVCTjyOPspr!sy;4EKBKQ8n8j5-IId#z}A+-`+@W_{Z8*Oqutg*_^r6*=NG76#)(>C
zMdA4);+lJsEJNB{OsSYO5yv65WiSswHF2_F{8ppB({^LjEfzd%d6n|}-D>awtXD2c
z*mmqISv&UIR*WCT$(HN*z^)I}0e`xW6>$BuvMYR!oqBe$|A#pzH_QiiWh0SSlsH3!
zY*p)(1YPyM9Z;xFQvL2`cTk#KODqz2aW6=Ke|}7?@aph7%FgOLsT}noU8nA~<OA3=
zY#L5ckZLp_O&qv{r2UklcnKIz@Tp8-D>WM_Y9E!#l}$?$1h~;Nkpv2<JHFddaXcGD
zuAR5yH5Nj-Lm!^8@?GTcfx3TSbOKLY<K63X=Dp{Z0Ew3ZSan{Pq^9s7J=sW=%&u1p
z-;PHZ@&f|MIFG?mc+#|41|Y74XTMvPb(1qNRfr4!MT>W-4iEa#yq*73n~mDt?u53e
z<#d+sk^`AA1K#^QEv#6~i6hBlC#~`HCVL7}@MO@qGQ@Szo`9C2W@(uVFTO29b1qv2
z40=}Aj-RYP8J6=_rhR*N^B+ozHH^Q|WalLn@Vpkn7i63rn0vq`%~aQLV-4%g2_tyd
z5^_C!wPvdJW8D;@->&#;xBUWm9&FPgGWs=d{L#P=(#=YyzlIahOia8hk;onG^)WFL
z5lQf_pv1`*X8HH&<1i<N8+o@-WrwBBcqNzv1~2ok^r)ZIJs?V}ux|YYkhVUG_UDY{
zjw(`Zr$&IS^4hX;5gjx(9UkJ3+1Lq+JcE)Gk8RTWiN2>X6{2*>$}nm=98Fp{69YO(
zjNv*W6N1O|RI{Ei{;a%p;<1PvxlkUz^aGk}_@x!R_&n>TC^YnOCghj~X9+9W&4++C
z%Sr;HRy~ps4zy(kK3^mYiQXv#*hUzqs*pCQ%fh(A;9Go?^(Q1g4{&+<n-3poqWh>s
z3RRQ_T11n@V7kNu0#I-FM*cj)bQ2}RxxV(MoH+IfO>2@%N_!UJcfZ;KPaEZSmXuiD
zq|6XM2(BBFhwBdPTwesg<|^T%PYJliRZs%9gxj)%4<ByQ6S`WDhe3)}1P%D(T|AS;
zI3GH7S>6uezkK*6fk3`^%Uo}FcXD0O1H9ucT>c5gBB*DHJ$|9vJEfEBmf6MEPA8YJ
zaj_S|lWKWp&~`iO6Yq{uK;mM#O(zxr5sU7QJgOUQ>rGcc`^jFf?8r#xQes5R;W@Ee
zU;DXC*pQS{5kQUti5JNCRUFSR-V*Ngz)qji{o3NV@d+4CTZp3I670hN`Y<`t%0PG)
z7=~HvSf6|=iZpY#&gSZmit$dp^5roi82F{*%L^MD^R3&$XFG*lKT#d`731{$+U~?g
zsZ+=b7(3VQhPB*%)Qh3Njh^rFU%-<iOmKRJ2{V;Gp`-+xMz7L<G$DUYUcG0(LN5fv
zS6^L&sCsL=PiA>cfs`m5HGD=t9*_}OpKCT>epg+jid2Lh-*^YWc6*|~d7WgD^u6k7
zW+@^DYwaYY4fn$}<Br&moY;Gx3PYu+5I@s$nm}aGqlGX6Fs<y>Mi6&lvKKw=<aVD-
zdx%>g%sWvz4zmM4GTG-7=Q@$re6BdUkJ;Y>lw&{mYLgK2n2eXYoBWC@PI*3-iMDH`
z0VoRo%+JwykcraATaCZ;T3Y>aU_@iFaGX|DX?<eA=j;sT7ac)%8c2yUlQa4jhukDi
z<tQulLrkLqMuyN4O>hw2kN_()%c$w0tOVzQt_eJdyCg_8+^~3J%k3wbV=SjU)Hmn`
z|83gfc5gTsv5C<UztQ)&U960>mwed$T9`CHuaUnLu6zV4><tgc(NbEeTc3CJtKB3#
ztp>B4b1k>YzGut!qE}_}H(P{SWT2%flTd>^g4#o{Q6<H1uIp3jCVpL2F;CLKihZA0
z1DT^jEoDgGa0WU5xiX9`UqshuSKg!2smLs}=G|&^W)p8*d#zzsYS1xwi;*%b_yrI`
zYZu71E0`Tf_Sk}(1E%+L9+~z{>E1>2CN2>%z2m`{I_)Fx+5T{P_iI1>?=)5+0Gm1&
z;9%hC9}`$O=UY)KU_}}Sh`xRkbF9|jI9stx#54EYpt;885=a+~w(4L0zRj-^g*u*Q
z?8XpfLo1l50@}By`8g1?J^&y@-t}lG(7&QqBi_Wa+U21mb=bZr@7tek8<f=mP^<gi
z$bO0WRG464VCX0rA$QEbvQftw1YbIMpFly&n;hzBGrr2N;rRA_<V)I-y8ROqW(ZED
zL@PMU%H(M<0c!~1k+%;gh<H=)yu<OZWc?rm2>V&xaEosHCNKkfi`UpRi%Iy+qJ%!R
z!jPbLqFIzA1hrF`e=2dw8`EKOIfxF>k>6pdH-mITXY@G@=7Ra0WC>RTym_gBWWqD1
z7S*K8RQ3swE|Me2YFtX>=;~OUvH(~mnO^w%3AMYlM9gg@#l$RU=_;xHZ!3r;>{X+H
z8*(an-?^To{%7}Oy$K^7xGcO}U+th*H~@ELV4@iFXo8TwQ1dS0q74i%?Z~{I7d70D
z41-nC8#OyV8m~j=%MSuQbL^?dw_axWu5IqgUvVvff!W8?(24^&qeQ~~tzou2o$!aV
zj{@3(H?Ky?I|5L8xy~AvF>l{OroNa&+Fi~@KgE7uxY?4j^SJvEJk{Yf1fI|AdfqcQ
zEC?y@`ElxH{OhxpWcCeiI3>vorxKGIm2=p@O7X->5DbG*@|n>0Q1s5*YY`^TOB2_E
zY{P43bF=gB@=xrSnSbnEtaFsXEEd3tx{=1aLtwKLSk}Y?%l118PG#ANS7AY^I@$BR
z-O(eS+eQ%znEjXc->zZH@+#{=TWK6|Zm#a<Kr7#i1%<ww0Wv^?3{dQSkKgp62JYDI
zrn#>z2>khI^hZFZ1ohDK0&ExjBxy^s39fS)D%Kva$sR&lt)1hYwj%A{%eehVz?H@Q
zq9w(cyB0z>|NDIeuRHwqr=56i;l_<y&0x;t?6DPmU+a+~@$%&C$Y>CfwyqtX=-U~R
zRARgSmw<Yg-z}<~yFr2Uq*ms8tvImn$>YRQ&j_v+$I)gtIJC9Q7<VTz3^0Pfu5|g3
ze^vi}LmD>Y;@=qn^@AM+1e^xJ*;M*%)qO9K>Zv#~m8R;Tgv0fITPw6~eWP-783hwC
zfm6%<7s0=@o)dYgVkaa3H8pO=%SW5$mV;+2Q!o@DPJYhj@(=lnebjB<d9k#?jZK(o
zq7C`7eFuvKg`IS*)3_t--pO=IBCU^anzwHEnaZs>9aZ@#xk{D{V({E2-?uO$STC=-
z8#|PcrpPLiKcXvN`X%lChyld9)qzjEjRa;KgpYf?i#0#@RaCu63r^ckBf=!1z|+(z
z(J7wZd)3oL;!_-;Q1u#}^1hv>YIe;-9V4jjQdj{DToDq&jSHs10!s}*)}W3Kd-B85
zHD>&9jEu3PbKOmpZYli(GaJux8=P}Jb7y+GW^uDX7-I3%Dm&N8m#C@<_d5*$oDcq&
zTy4XLZ<ikjB<$<O#lsahYPFp^H_M|`P{3Cwm5H3$TZH}5^>R?4vIrtkLY0cRoG}_g
z3?83Fk1i=BJQTmb@hLH#W*KQ`Mk+(d1pqucL9`jKh-MvQ#BD>`+Hr?Y*W`O40}gXg
zE<PLKt)$Wzu;Hr1Lm*ov*YFD!ps=m7g8gMcEq`Vl+KrY0AR?_0m@QwjU1hqE_LD%a
zB}DY<vvI~qhGtcBt4-i>{LTi0hpvPtvqAX++e`Y(??z76vKQc|2v~qc#<^RHIe*Cb
zn##L`+Z7>_s}DgJ06-f5?~Q<dnLs$e>isbhVJ|#{S{9bNb((hZ8n-X10w-Q512jJ+
z#qcxFgbXCDoPQq1P-65N{zinl_^fH<_@h8S{~OsQdM1+cFc3b@lmM2K8QHbsslq>(
zH0Ol`0JN>cWMX6=6>m^L3|3{%{`M{leW~b8YHRlUh3|Wt+hF@SmaB1%qgdVCRahTb
z`C#6^D+6Jol^=6T$dkfA8em`SuVg{c&cH>%TAXhXU2Mh**Ymee4oG76_7M=kYm_q*
z_if~fK(9V%AT7-gDQX$Q3I@0|Y|-y$LX%>8KD)o%Ll2IbUH-NMMTDI%npgpUKCOId
z_$ue@d;QkiYIR7_niG+U8UWL67p4Yhc=I|rq*ZFyjj<;#KF$jx7MOfT1&~D6iDIn0
z<Pd1KOU4G2d{oA-ixdYcdy{t4!2mb2ewYRo@cVYa-9aCf^Rldao7dfNNPnP|-cs@=
zt)wXM^MVqF5Kn3e%cP!8jxCcxOev9>VRYl%N9BrK@DF0QImE^Mr3uv7B+6^~YWp^@
zy0G`lx_PPyz!#e!Ln<G!!(nxW)dL!I$++|CrfZvrQMYag<HJ$PZr&@eu$O||o_JcH
zz!lXh2ZeuEWTwOa4G_Kqm#@C$jrWwJmL(DKstVmcYq?zRV7p29(|ighju4pb`N_XU
zJnJYJ8(^#Ny%9l%4jQsL=$7)wGvz!|oro7M2~E0NSt2O38Lt9urf`nL#F{fqu%p2r
zYaz;>ay04}Vo|KJKO9>M1320urfy?@Eg^57dMI?NdELFE#ie;@s(EZiU5vwmSihDS
z-OXP!b!>S-&_Z*uN;UCA;Cj^S_Y!iArUCHEOBEs5hup~8Jt%g4$Y!$o=#Vkv^Zll&
z&IvA{dQXTDp(xU|%fJ!&mQXgP;nz`)%|7u16<V9Vk0hJ#!BRnz<+Vz!TzExA3MQPA
zfl|pW-RAVTdeU_9Z*(y<p8zgrB<0Z!F6YzDcWPG{pbG!;gme2Axk|s-S11}WKIDB9
z?Zy~{O<BbHXT?ACmlp&yYeA*@jnA#b?C${^CvHF8=vF^=60uBGxFW6(jdyem8pN3B
z)w@@$l*>x|ujwa*XvPg8cr0dA)p4Yk+@C;%JZZz<@5qDu=OjajmiJDtHH)9O(eMM-
zAfZ7Qmx@+{A}JJgFsWu><H$fR0dYgw*+E+qicKlIGl?uN4)EzdQllzK#ZiSzZz<CV
zoX;o0><|d8fl0Z8uY*sE2i&&vump*8-CV8FQH^-LB=X{)rYH?>jjS4@6vm2fLR8oL
z7?<n}I|Cp9ce9=j0i;!ERuBWb^f$<ifBvHF+Mw|Ln@J%pKHZ9ZC&}irCR6Jqb&AoZ
zp7)kEchDiVQ~`6qMfV{A7|mt|+r(?{Y37kh$PIKeZdWcFQvTC`ud=8P(7iM<+3m4^
zWn?iz3dlV^$yw^ND`DctT|2cM-{SwC-nqOpgIkQd)pdhb*6!cYQhTTsTrVJUtyJ`x
zGDH7eiP9bO`22pO4F<*$&M#MNXujf8|E+60_C@&0)Zzo`9seWxH(T@!V%*~|gbvV?
z1Sfs(9iA2!nRC3C8!n6Yu?b;p?yK$RRLUMyprKQpgk;&M^KZfc5d-5d6+<J%2f4HM
zf)AF1%jhhGx5IJYV`^-kjXqI)FzIqx`12zRQ%|U?plj@ev@qu#vCFutZoB0}5zXv+
z0W<ttMB2MBL_x$Hr+il5#2QiQE1ym|8R~f)v^RC|PG<?a8F=VImeC;FW9VIQ)WQ8h
z#~G<bn+OP)pPuHJINC*9C=Df0RnBeRW2!ZQn8>24_o5b=lbNdLuOkDd48*TBHdBjI
zf2n5;|A6g$X7#>7)T%7dMB~SLh-h&`(;?L3T9L#q5O}Ej6F$v+9x$Ssp|0@5uX0E;
z0vjNbZt7Mi%HS2RUgMqHL-tmfWW1!=W@<B;_i4?kOB`A`_pVosmd6kFyPoLPA-pSR
zx&W<In`e<VZj^9W!YaX!ULlc0lXKyX*#f8+1n_i8S7j__r8^7ZqcF4#4R@`o5kCZ+
zAo`vy_4_+?H(f|^t6`e)RIYDyX_HQ~(1XKVxT4tK*GBP)CG05%)k-plknT!a7+{p$
zR>tfV$C>1#%iEyjYyMG!)!~eQpNKZxTUrd?J!bG}kKXI%S2Ut%d-FOEfryX=-N-TP
zE<>gw0I2604;9sVyPUSRsP-a+fy%(4K8rW+^ZX68Qp(rY_yn{w;(;5Vcnjs!wEjBj
z#2ukmY-$a|Zf^;*TRDh&omNUqJ)_=jv>5F!M9x@4c!A>010wfsTOE34Bn4(vy3z?o
zYf-}nqZt^zGAAD@eGqsYyaI~?x?}StBK0ac`9+zG*e!RemLE{55io`q5?0!w3zimH
z$&xX{(xjF!H=lQ;0k4`69g8z#sYrY9O0#1BXg*Q|Hf?{}Z4*bIQt)OuG&9f%7*Yv)
z)i=(Bz;On*7I)Sk-u#pG&QFHMY<h+7Uc7!;GGfobn=F|_oJ8v5<on`@D*V3j96DUg
z5RxU~OK;KGo3O=uXFw<k>GBh0Ox6#gN36s+RUZ8eWUzcgyBu4__rBrp@`%BY-)2D#
zZkO1!t8KTdJwTC{v5GswLZvhrNL|{d`FpSw1It&~2m;#L4~?(KZ9|tgf^-xBF@`tp
zV6An%=XYFH;=1bcGYwXjGGgdnwB&5rQ@htog`uvTvriiFkj?Aef@NVVI)J;dfY^#5
zgSERhm%Bfy(KSO>%D>KBceB0{XZH~_1!8idfCyy~6THoDk0hh?!fF3@!E7&$OzwT6
zBf-(*hiC|2Kly<ME4n@S$XiT6`p9G<4r+ZSM<%9bG&bOC@BTgy1NR1XihKug23yTU
zY`gU2p4299AG;-JoF7QfHo`!<g_3H^xSOeDp+9$XdP(Zhf0-4|mtC067W~!f&@E$O
zXjJ4k)QyIXf!oV@+f?idsdGz<)f!Fzj{>6eqtsK~cp&GBei0=D0GWRVLmJ>udN+c+
zn3Uq}dXrlDDF7`zRrz{WVdCseT>LJ65ruGm%#j#_@cb;R1T!fay~I%D%aJ(r8}rJS
zfD<_n%|TVsNqev?AQ$HIRc+S6C5>R2ub$E`Km|n5W8n1s?CX-{w69%?C}!u;Mz`a+
z3u3I7jF+!uM9+o989_9QXJvAh#X(`u30WVu^)E-#YoYHaZDKC&31#Ux2$y~)2&6|r
zPG`v3STVUBw+3~q>_8bl0MBHy=wzMiZI~hX?tfn#3H0|-XWaM|HFEpic~5-Q?nt+Q
z{b=)U3<(tyu4>W12IpUFaOODK#l^vUdRMTIV>ePV7H__u>fq=ovzAo=K-|?W`Yg)X
zLjH4PgX``e_rhC;9ouz*yfcs38@>CHFE8n1wnmHR!ZsMkC7!#|LwL?rCgR;4@=ALf
zlKhcD3ue|+u;2Vwmpq8H?-QXuscM)Uq$y~6679_#d=gB5H!Tr@P<w)4?Xtgj0zOBl
zo0%P+AxOki@}gD`t(npxK6%FoRyoJS+(NC{seJ9uHEz<F*Io1OA$s}dp#6p<tO?2{
zlR<jPdV%CUeU0f5tuhF$74OptC?WIoS~uFv(=h#`4~g;NJ@s@&{R4n==8VYpr|9FY
za0L5%oLrN=2U7_~lKPsfw1Yd=ZLWo|$l6RtW2FTPcLC!x$mwX*FL`|yqD0;B*Xdj>
zz0O0T%{Hq0!U*DZ$oK47Pg6I1v?m%`er7^-ZaTV1JqxVYdc=C2PjeH3Sxxq)Tyx`e
zRJ?I1@4_Jn4FClGa}vkRqsz*J{5l5-RUM06SAeWxhAW(X9nejUfNs@Yx#~G=yz1Jc
z0;Bp6(SFrxeSVwdp;CiFk7%9|+HSse9zu26nDdT6Ltz}ov&*M1K4C78BnX?i$&QGv
zP{Lkr>YFOiB};<$ah3T6P}epgAY(g^1ucLjO5dS!W}_uS*n7*l<WX+P<O=)x=U0_|
z<f#`rfGHb-SM)+a*A2#|JQR8f4VHVek7o!?!Rl&?O!Wc_VEd^pmT>zwip&UuQD7el
z>))hZ*|^;)$qx?dJ*DmX<N><vaJXhdyWW<*8gDwNf6M^{=frr_1F<MmGxjl;%jweN
zHibXa-yEHfmw5wJ<ng~jlLsj=PG7*Ld~_sB<0u%o{owtuNraO>=wXqe&GwC*lgoUV
zlwKj0MbE&}vh=f_aor8N@zk)%!WR6nRez;T0W9aiC9%8`$>b<GsB-R5%gE((j>;a~
zh9DF&2ZFOZ%mpUoG&cV%1zp?3Lis=V0e-7uWD9rd**aexBlSr>Sr5*X-TCc4b|YoD
zaNIaxmb9=o+Nr*c2J*~JLbkTP6x%uN!|?a$FF^D2DjBDjD(onYd*@(?@I1f_Lmab>
z_crT2(Q95Ra|J{|?w^#PG_i{nQ@YY26|zT5#u`^6{*Z}HjKzSlx>FV~08wynf~v8s
z<bs9p^Ja%Evxeydmeq4KZ^4f?-$C%XF7zLY1Nz=Z&O;p~Ha^qdz&iEXM&&pX0h@gL
z#><Z%A<^ig)e3jmZ~6S)@oIxh=A0iyO9^|L1(Hp`B=L>7&~%x}wB{Q{mHD91VTFNw
z`YX%d<z5r_`Uo>QpPzbyq}X2i6(7IY^?rM3lwlB>Jf4>NRmMYachY`s4tVXRP6@WQ
z{)LtJlJz|*4B{|2xOgw2AJyBwDoB&LI&UZH?tIou8rX`mMX`BEiAyB~r->QvP0-O`
zEDqF9Nklb${(%P#dW%l|EMec~2?@^dFx2cI?+K~q8uHJPvzSN0D9*gm4mO=RItg7N
zK^SwD1l=vmR86KamfN`fYa{=oWPrWYjl<1C1R#Aq2#m}L*R{x1M$R-A^!=l9(BGeo
zQEpnWo6e0bvFKNNe~v*B$ekN(0oss=E2)tQX_Kz^QW@6_G`b5SRgLe)v>rT*QT!NC
zF8>JwSLmf1n_*fr4ss~XkRwjS-!lBZy@_`*eg2^_KUw!AKDIti874HaRj@RwC*<WI
z;NS|3OiFqR#}tg2-$y@~6*d9=PIwK<z68&h<i)NJW&pXOZb%Fp2yK?)bXi9}f%Xsc
zL8*{`N5VmMOgP%Up8f%56kVK)Co?S}2n^7Vof)z(WvDw(vF*`G_0>+03q)reJ>AVD
zlIHm2*ZIs597o#0Ui0@BrR+2{@remb)aeHTh3DM*D5*@XNIFl+t|Ndpvmeu3hyKI4
zhr+)&o4WgY<TW5&#OvQjN{si}eeC4BnVWj`TX5qhOiJAS;12=IwiNyR2oK$7wtod9
zUx=TlJW^r}C;+t0J*)`dR1EyhDA5@hxsicE=cA#_owU>eRP_K2JwRG<x@8UzJ`$Xl
zho2sAyZ(=6o4>`sAK|UpjHP3$LBz7tXVX)aN-yCvUkU}V020aWrtC3z1tj^*WXiM}
zSjrYSmOWvGvbi@+6RrM(0c?du*P{4mkbc;_6<+4$yKT*}Y9XiZnnJ}twQ$3(w8PX;
zCT6dBBOowxLCm4<t?jQW`SEzpjNS3A)-NM5AKP|~8H_sLofF_#ENhw%i;$&bSP^kh
z<uZ8&cERYVlI9f#=J;<V1JX~Y63zjfyHdIz&bl9vHw!Oa+9sg^q8#I6!{^PHsN|9H
zv}B>6;nsyclY4%e9V$r9qJTKHb0h=iqka~Kn!wT6VDG<-j?QhCKA{%&+iOn(9RuP_
z^g6qCbEx@zj4r#vs{h?XvU*oQqP`6n_%AVGj_Y_}r!waZ5V1ukq%f<UI!4Ha93-?D
zqFJ*LbZM`Nl};Sz4pWBi9CjFfA8&J-U1A|c^W|~gdWyQEQ$i3r9<3km60$>H9z>V$
zpNF@xp=5nr$N~k&o|KXD6PHYt^+Vnqb#dFb(pwNOqxA1pe`Org{Jcqjy2J{i?9E+D
z#a%xf(m>+X-pU)^CNU4yQD?k5t^7!_i-Rh8T)P0g_QeycAKX`@J!}@h`s>80z!=n>
z_s%Al$i2g4+TK2ODo}Fhqo=9hg?RRf&L8x??z51`vM@zW0Lg=}a~?Rqd|!0%F3Fzm
z-MwQ%+>G`~kMyQeGxpy$sp0waOSP>p`T8=R7oGx)xv8ODnr;$z=W7A>c2j@zfh0{&
zKDTU?j0BN%%T>3qt95oZY@bXQpEQyeZIE!;__@fdZ~lO|Ksdux!SfPk+UsR>R&PyY
zuY;~c@$~fuwzw08eTIp~#IC3kk2G9vYEN6Oe%|yFDMa^mZ~q){G3Rp}Cp@T#xdR;)
z4cr5mql|jt)j{03P%F9_Z8@lK62%i`_|*iG$`;XgnzU{e_Wct+E)UlCe;O^#VC4ul
zMt#-~T%VJ|(1Xl1>H(h1=HG*JBWRJY!0rAUziS-<_#M%b{XUldZ~lNFXG~xxrJ1sw
zdsVysHWmXwqyHT39F<;!Q^_Lw@uye$kf?Z!DQ`^k)8g(fcZ&SkF$BSE8ZO;0p$rH*
zPJuCv`A4F<e=+EX=Sx&nK~i-#KkIJ<6$mu6wEz}>NIHs__&gk{Xbiz=iKdZnMc$JJ
zlDLVo^v^7@`)pe6CS|7VLI5Bq4E!;i$3&{hf;L5R$X|t{ST(tU@^vN$I@L{)?-P(t
z`Xq|+g#~@pNoSz@1PAL{l*br2F&gR)$W*pSuLZLb-OmSK%_SsWK&J)$7ZH!B6fz}|
zH8Gf7pDAyoEtl@IhBS+|)O{8ORJ0vtpaI?rM+6AdzHB7&WFQOk%aZ4jaz<Mo^|<u(
z)CT<}4<}1e{j<%+zO^;jjK)*@>UxzE7P1noK30uXU)Q#^xSmyu*q!8iBj+~3Vz&5A
zt^pE*U{4Ew6Gr)$(~|3%sqz{e6ja=C(;yLT79w)|Yi0XDe@(cQ(N;C-pD9luTtc;!
z{pCfn4Qmb{j{t)`{D-KU|3)~i_VE@H?=Gg|wkvd-ju#wPH8XC(;TLy2PvME0>il?6
zuS-61fXHv%?i0>ykJY>fvC>p!m;X4yPvA<7n=Ao6uL0_xGQRd94~kjB*bUi_e*?h`
z`CHxQFyn7R;c~%h=I_aX$<6)u1f1~)YnaXX793r+aRD^wKixV3B?3X<LqMy;UUqWK
z`ND`w0n>MA@{xw}PV?F8RD^gPoyob%KvqG{nv|%_j;fJ3r{=PInQFJnkIIArVlY1;
z!By+i8^o~)`b!Z`wplUujw9xp_1r<3gU5IqR8q+uQ;Hq6r)@Nt?Fv4YBlDbDY(s7p
z)Z)r37u}UZWB`1(d#=Fy%5kL)`6D51T*3v1myJkC-9^qBnPe{lp{GUt{m$D%(Xtlg
zyr@IsDF69vYSSTdB#gwm^v^wM567;i210J%Soa!ArYhSpx)<D7=8TzMSQ@F`G4Mqd
z<n)I=(Qyj%@Y9B114ghB)<@4eu64r+e=Zz8-6yzlobr5g@PBa6#1Fw0+*b6deW6AB
zt!`GRzx}}ok7a9XEm0^OBnd&n2mprpYh;kwN094)8>L)=niCSTX5zZcLp*L=A&<(6
zq<oC^zU)532su!+cD#JrVter?uHPG~i>i?>cAg^@{OH|#B~yMqr4%zOD(>6zq1Wx|
zF;Fh<e)72vNg7(@&*z}O;55Sz%|k7A+YbP6Hkl(7g59r_h*&u14?U@1jqXUsZK1R?
z>Q)ZO62md2+*0$qG%^_4YcFWdiTlfY1b$e<FQ?+;<V~D5e({bI8`3a@ax-vKA^k)O
zbO#WS@Sjd&B(~ugxFm)oNyjOtDMc3rB7)QB4t0XGYja@8F4U+=W_Hzf*rxo`rOwW*
z=)O&kUbOwT@sr=T0o00K(mu@8)upqaR{`0zj+9teYIE}66A%BUv9jiLIclxMFg^Gt
z2phVb*Oy-KV~FMIq0$v&b+md^1TIJLUH%b&Pyuwt?TMg>yV={#Zude!L6)$lP`AqB
zb@~2=S^AWxwb5C@HIeQ*W8FJD*XZUGh!qxSj!IX8QK}>AYpXvmF3ugChYx<Ny!*A+
zJ_%DoK=YG{tNzgNS!%g0NV|vf;89fhQ@~rd)UVqI3w|9(u=nv_@u>lS6$*`+`1;Y8
zm8Oo=;GAf^+>e@z)t{nXwp6bO^-Pb9?+C>Tk$amX>Goe{jkTx~grMc>N+b)3m?Lyd
z4+SF&hEP;`Ah<#pADiW4!*|hu73zB@*QLV_gz1ok1gg?PSrNYWg+vd;q!?&#GxY+N
zH-K0-qo{#H>O?rwHcKBU6atx@?oEhOr(gpZ@}_Dk4x^9s{D<g!s~{FA&hM<+Q24@{
z5`SaVR;T%qoxaqG)+n{6sc?@=?S9+2aL&2EOb%<HzS$T7bpBEJ<KFC2CZo%pWf`bQ
zToroRJZ(rJ{XA*)?|T+D2=aO1-)kx<@KRGy?SS=FRv6Bx7$5X*m{db`yy;;M(c>~f
zlHhvc`{X{>jZa8vs5sF14$pk(yZjd$QKxV|G`<u@SoE#>Cw#VfjV>Gi8l7S+B-R<r
z-(CB%sFdthXu;?bo}vGx{wsVaa;ktPY_C=j+tSH3qu<ct2LrW45FVs<$`$wq!LEcl
z&Zz|=*P+lQqExyobPMbM5vF|`l2irW6QZYfJ6Y^Z6ARA07|IoB%0ZEbqkrUap1dbQ
zpy!IV9(;#IZuNtHt;;B=SDyURM1uw2q0(JwGvlf2YpLAJBaG;w0YIRTg2sUal~HE5
zBEnGBMk&T1PFf)|-)F&+DdvY?TY#2D35aia{ZhN(TSCT<0F?i4m7>VQAo%buUPRh)
z)QCJ|<#NEKu`rYs#wXJQm~cqejjWp$l4J3d{S)vmCVGwjmIN(^K!I8Gn2@bsfiiT<
zkz?3aXNCk2YIHdJ2(3fFEP1Osci{38s*Y-_4%LWkmb@dh;Wf{5&OnYSg$SSsmqY&#
zgfk0MQ&yM~eMMp{pPB-kaq5jxYM2N{H8E<X`N!p7aK{#}^-k%=gQ(DU&=>&W=#)?{
zY0bisQ4>5n7^M1b?qE}ucMW|ztq=Xhc-I7T2bX_F+3t~*oi>nYlk?@EDz_CWD8Ur4
z5Drm`!QD{8xg$$Zg)fp3>G`9*q6PCRT~kc_qII)vYqJxBK^TJ=nH10sJS!x3fFb&C
zxn5h%!=Gp{NANN|aX{0yy6xA+PHi2YIoLVyVkcf-?_No&*5hpMyIO7-8kFx8`HzNO
z9Eio-rTe$yqmmo>hwdUAR}#Y>Z&L!JW{0ymGc7_InTFoPH!xZPDT#G)gw2c)fBUcB
zY@5VV;35FJ1VS#xts<?P61{QPZcL(}NW%E@4JS)rN9{F`U?9iZ9)dRmyotgErc*{p
zp?5g{cavncEnOc##X~g?beyMKmi(UskC)G-9y=b!0kkG20Yj6Yl9xFbq4dPR1QCmO
zS4&8@xDNOS{ofH;zao;bv0h_JhD)nP%J2^Qwd**L0+u}7#X2*0-s;8I`60ePFS})I
z<TqOPn)O7F*vJ2snHmUC-e|T-u(#tHm~{+Z9DDx1u;v?KRBawaHUgC_rfiaO;K`e6
z>*8J{G_T9SeAQ98*Z>KHB>G&XnNxJf@gRua^feK2h%lSZ%?%;u?MvV1uHw#@4|_*8
zb4HF_lqsk($D&9=_)oM$E0{>SP{ya4e2}pi7pqy={BpW3a@fhxk3{3XTRvY+_&9SO
zYxts~m;lIEFOGvD1!80xr$bNSq7cmuxlP6dYl}wvCtsU7RWo#k>Vx{Ds}Pp&=>dy$
zbm5Zo&yQv{0;n}2cm6o)sZfvfIX5ufv+`k^D9$1vEXvM?cu8Vw*$G6PB({FywL&6_
zaLC0cxkiB8gm5{@fBOqZx0m}T-RP7k|B*<dh~giIB%-(=_%ejKNniitF~#h+e<Yxg
mBK-dE8vXwt|GyLL`CVy)8uG+6P8p=t8XzyNB2^_}7WzLyc0RxW

literal 0
HcmV?d00001

diff --git a/deploy.sh b/deploy.sh
index b25a0b1..91ac5c4 100644
--- a/deploy.sh
+++ b/deploy.sh
@@ -1,310 +1,63 @@
 #!/usr/bin/env nix-shell
-#!nix-shell -i bash -p bash nano coreutils gnused gum fastfetch xkcdpass sops ssh-to-age age sshpass envsubst pciutils usbutils mosquitto curl jq
+#!nix-shell -i bash -p bash nano coreutils gnused gum fastfetch xkcdpass sops ssh-to-age age sshpass envsubst pciutils usbutils mosquitto curl jq yq python3
 
-### --> Default settings
-export GUM_SPIN_SPINNER="minidot"
-export GUM_SPIN_SPINNER_BOLD=true
-export GUM_SPIN_SHOW_ERROR=true
-export GUM_SPIN_TITLE_BOLD=true
+launch_configurator() {
+  local PORT=8088
+  local CONFIG_FILE="numbus.yaml"
+  local BRIDGE_SCRIPT="configurator/bridge.py"
 
-NECESSARY_BACKUP_SERVER_VARIABLES_LIST=(
-  #LIVE TARGET SETTINGS
-  LIVE_TARGET_IP
-  LIVE_TARGET_PASSWD
-  #SERVER SETTINGS
-  SERVER_LANGUAGE
-  SERVER_LOCALE
-  SERVER_TIMEZONE
-  SERVER_OWNER_NAME
-  SERVER_USER_EMAIL
-  SERVER_ADMIN_EMAIL
-  SERVER_AUTHORIZED_SSH_PUBKEYS
-  # TRAEFIK SETTINGS
-  TRAEFIK_CLOUDFLARE_TOKEN
-  # SMTP SETTINGS
-  SMTP_SERVER_USERNAME
-  SMTP_SERVER_PASSWORD
-  SMTP_SERVER_HOST
-  SMTP_SERVER_PORT
-  #NETWORK SETTINGS
-  NETWORK_SUBNET
-  NETWORK_ROUTER_IP
-  NETWORK_HOME_SERVER_IP
-)
+  # Create a more robust Python Bridge
+  cat << EOF > "${BRIDGE_SCRIPT}"
+import http.server
+import json
+import os
 
-OPTIONAL_BACKUP_SERVER_VARIABLES_LIST=(
-  # SERVICES SETTINGS
-  SERVICES_DOMAIN_NAME
-  SERVICES_SELECTED_SYSTEM_PACKAGES
-  SERVICES_SELECTED_SYSTEM_SERVICES
-  SERVICES_SELECTED_WEB_APPLICATIONS
-  SERVIVCES_SELECTED_WEB_APPLICATIONS_SUBDOMAIN
-)
+class BridgeHandler(http.server.SimpleHTTPRequestHandler):
+    def do_GET(self):
+        if self.path == '/logs':
+            self.send_response(200)
+            self.send_header('Content-type', 'text/plain')
+            self.send_header('Access-Control-Allow-Origin', '*')
+            self.end_headers()
+            if os.path.exists('deploy.log'):
+                with open('deploy.log', 'r') as f:
+                    lines = f.readlines()
+                    self.wfile.write("".join(lines[-20:]).encode())
+            return
+        return http.server.SimpleHTTPRequestHandler.do_GET(self)
 
-NECESSARY_COMPUTER_VARIABLES_LIST=(
-  # LIVE TARGET SETTINGS
-  LIVE_TARGET_IP
-  LIVE_TARGET_PASSWD
-  # COMPUTER SETTINGS
-  COMPUTER_LANGUAGE
-  COMPUTER_LOCALE
-  COMPUTER_TIMEZONE
-  COMPUTER_OWNER_NAME
-  COMPUTER_USER_EMAIL
-  COMPUTER_ADMIN_EMAIL
-  COMPUTER_AUTHORIZED_SSH_PUBKEYS
-  # USER SETTINGS
-  USER_ADMINISTRATORS
-  USER_NORMAL_USERS
-)
+    def do_POST(self):
+        content_length = int(self.headers['Content-Length'])
+        post_data = self.rfile.read(content_length)
+        
+        if self.path == '/discovery':
+            with open("live_settings.json", "wb") as f:
+                f.write(post_data)
+            self.send_response(200)
+            self.end_headers()
+            # Signal Bash that discovery data is ready
+            with open(".discovery_ready", "w") as f: f.write("1")
 
-OPTIONAL_COMPUTER_VARIABLES_LIST=(
-  # NETWORK SETTINGS
-  NETWORK_SUBNET
-  NETWORK_ROUTER_IP
-  NETWORK_HOME_COMPUTER_IP
-  # SERVICES SETTINGS
-  SERVICES_SELECTED_SYSTEM_PACKAGES
-  SERVICES_SELECTED_DESKTOP_ENVIRONMENT
-  SERVICE_SELECTED_GNOME_EXTENSIONS
-  SERVICES_SELECTED_FLATPAK_APPLICATIONS
-  SERVICES_SELECTED_WEB_APPLICATIONS
-)
+        elif self.path == '/deploy':
+            with open("${CONFIG_FILE}", "wb") as f:
+                f.write(post_data)
+            self.send_response(200)
+            self.end_headers()
+            with open(".deploy_signal", "w") as f: f.write("1")
 
-NECESSARY_SERVER_VARIABLES_LIST=(
-  #LIVE TARGET SETTINGS
-  LIVE_TARGET_IP
-  LIVE_TARGET_PASSWD
-  #SERVER SETTINGS
-  SERVER_LANGUAGE
-  SERVER_LOCALE
-  SERVER_TIMEZONE
-  SERVER_OWNER_NAME
-  SERVER_USER_EMAIL
-  SERVER_ADMIN_EMAIL
-  SERVER_AUTHORIZED_SSH_PUBKEYS
-  # TRAEFIK SETTINGS
-  TRAEFIK_CLOUDFLARE_TOKEN
-  # SMTP SETTINGS
-  SMTP_SERVER_USERNAME
-  SMTP_SERVER_PASSWORD
-  SMTP_SERVER_HOST
-  SMTP_SERVER_PORT
-  #NETWORK SETTINGS
-  NETWORK_SUBNET
-  NETWORK_ROUTER_IP
-  NETWORK_HOME_SERVER_IP
-  # SERVICES SETTINGS
-  SERVICES_DOMAIN_NAME
-  SERVICES_SELECTED_DNS
-  SERVICES_SELECTED_SYSTEM
-  SERVICES_SELECTED_WEB_APPLICATIONS
-)
+os.chdir("configurator")
+http.server.HTTPServer(('localhost', ${PORT}), BridgeHandler).serve_forever()
+EOF
 
-OPTIONAL_SERVER_VARIABLES_LIST=(
-  # SERVICES SETTINGS
-  SELECTED_DNS_SERVICE_SUBDOMAIN
-  SELECTED_WEB_APPLICATIONS_SUBDOMAIN
-)
+  # Cleanup old signals
+  rm -f configurator/.discovery_ready configurator/.deploy_signal configurator/live_settings.json configurator/hardware.json
 
-NECESSARY_TV_VARIABLES_LIST=(
-  #LIVE TARGET SETTINGS
-  LIVE_TARGET_IP
-  LIVE_TARGET_PASSWD
-  #TV SETTINGS
-  TV_LANGUAGE
-  TV_LOCALE
-  TV_TIMEZONE
-  TV_OWNER_NAME
-  TV_USER_EMAIL
-  TV_ADMIN_EMAIL
-  TV_AUTHORIZED_SSH_PUBKEYS
-  #NETWORK SETTINGS
-  NETWORK_SUBNET
-  NETWORK_ROUTER_IP
-  NETWORK_HOME_TV_IP
-)
+  echo -e "🚀 Launching Numbus Configurator..."
+  python3 "${BRIDGE_SCRIPT}" > /dev/null 2>&1 &
+  BRIDGE_PID=$!
 
-OPTIONAL_TV_VARIABLES_LIST=(
-  # SERVICES SETTINGS
-  SERVICES_SELECTED_SYSTEM_PACKAGES
-  SERVICES_SELECTED_FLATPAK_APPLICATIONS
-  SERVICES_SELECTED_WEB_APPLICATIONS
-)
-
-# Available DNS services
-DNS_SERVICES_LIST=(
-  "pi-hole"
-  "adguard"
-)
-
-# Available services
-WEB_APPLICATIONS_LIST=(
-  "crafty"
-  "frigate"
-  "gitea"
-  "home-assistant"
-  "homepage"
-  "immich"
-  "it-tools"
-  "jellyfin"
-  "n8n"
-  "netbootxyz"
-  "nextcloud"
-  "ntfy"
-  "odoo"
-  "passbolt"
-  "uptime-kuma"
-  "vscodium"
-)
-
-# Available system services
-SYSTEM_SERVICES_LIST=(
-  "clamav"
-  "virtualization"
-)
-
-# Services descriptions
-DNS_SERVICES_DESCRIPTION=(
-  "Pi-hole : Simple, fully open network-wide Ad Blocker"
-  "AdGuard : Feature-rich network-wide Ad Blocker"
-)
-
-WEB_APPLICATIONS_DESCRIPTION=(
-  "Crafty : A web-based control panel for Minecraft servers"
-  "Frigate [Home Assistant required] : NVR with real-time local object detection for IP cameras"
-  "Gitea : Painless self-hosted Git service"
-  "Home-Assistant : Open source home automation that puts local control and privacy first"
-  "Homepage : A modern, secure, highly customizable application dashboard"
-  "Immich : High performance self-hosted photo and video management solution"
-  "IT-tools : Handy collection of online tools for developers"
-  "Jellyfin : The Free Software Media System"
-  "N8n : Workflow automation for technical people"
-  "netboot.xyz : Network boot various operating system installers and utilities"
-  "Nextcloud : The most popular self-hosted collaboration platform"
-  "Ntfy : Send push notifications to your phone or desktop via PUT/POST"
-  "Odoo : Open Source ERP and CRM"
-  "Passbolt : Open source password manager for teams"
-  "Uptime-Kuma : A fancy self-hosted monitoring tool"
-  "VSCodium : Free/Libre Open Source Software Binaries of VS Code"
-)
-
-SYSTEM_SERVICES_DESCRIPTION=(
-  "ClamAV : An open-source anti-virus"
-  "Virtualization : Run Virtual Machines (KVM/QEMU) with Libvirt"
-)
-### Default settings <--
-
-user_input() {
-  local VAR_NAME="${1}"
-  local HEADER="${2}"
-  local PLACEHOLDER="${3}"
-  local REGEX="${4}"
-  local ERROR_MSG="${5}"
-  local SENSITIVE="${6:-false}"
-
-  while true; do
-    [[ "${SENSITIVE}" == "false" ]] && INPUT_VALUE=$(gum input --placeholder "${PLACEHOLDER}" --header "${HEADER}")
-    [[ "${SENSITIVE}" == "true" ]] && INPUT_VALUE=$(gum input --password --placeholder "${PLACEHOLDER}" --header "${HEADER}")
-
-    if [[ -z "${INPUT_VALUE}" ]]; then
-      echo "❌ Error: Input cannot be empty. Please provide the necessary information."
-      continue
-    fi
-
-    if [[ -n "${REGEX}" ]]; then
-      if [[ ! "${INPUT_VALUE}" =~ ${REGEX} ]]; then
-        echo "❌ Error: ${ERROR_MSG}"
-        continue
-      fi
-    fi
-
-    export "${VAR_NAME}"="${INPUT_VALUE}"
-    break
-  done
-}
-
-strictly_necessary_information() {
-  export IP_REGEX='^([0-9]{1,3}\.){3}[0-9]{1,3}$'
-  user_input "LIVE_TARGET_IP" "  Please provide the IP address of the target host :" "For example : 192.168.1.100" "${IP_REGEX}" "Invalid IP address format."
-  user_input "LIVE_TARGET_PASSWD" "  Please enter the password for '${TARGET_USER}@${LIVE_TARGET_IP}' :" "${LIVE_TARGET_IP}'s password" "" "" "true"
-}
-
-necessary_information() {
-  # Regex Definitions
-  local SUBNET_REGEX='^([0-9]{1,3}\.){3}[0-9]{1,3}/[0-9]{1,2}$'
-  local DOMAIN_REGEX='^([a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z]{2,}$'
-  local EMAIL_REGEX='^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$'
-  local PORT_REGEX='^[0-9]{1,5}$'
-  local SSH_KEY_REGEX='^ssh-[a-z0-9]+ [A-Za-z0-9+/]+.*'
-
-  echo -e "\n\n➡️  This script needs information about the target you want to install NixOS on\n"
-  # LIVE TARGET SETTINGS
-  user_input "LIVE_TARGET_IP" "  Please provide the IP address of the target host :" "For example : 192.168.1.100" "${IP_REGEX}" "Invalid IP address format."
-  user_input "LIVE_TARGET_PASSWD" "  Please enter the password for '${TARGET_USER}@${LIVE_TARGET_IP}' :" "${LIVE_TARGET_IP}'s password" "" "" "true"
-
-  echo -e "\n\n➡️  Now provide some information about the server you are deploying\n"
-  # SERVER SETTINGS
-  user_input "TIMEZONE" "  Please provide the wanted timezone :" "For example : Europe/Paris, Europe/Berlin" "" ""
-  user_input "LANGUAGE" "  Please provide the wanted language :" "For example : FR (for french), EN (for english), DE, IT, etc" "" ""
-  user_input "LOCALE" "  Please provide your locale :" "For example : fr_FR for France, de_DE for Germany, en_US for USA or en_GB for Great-Britain, etc" "" ""
-  user_input "SERVER_OWNER_NAME" "  Please provide the name of the owner of this server :" "For example : Steve" "" ""
-  user_input "SERVER_USER_EMAIL" "  Please provide a valid user email address (to stay informed about your server's health) :" "For example : myemail@gmail.com" "${EMAIL_REGEX}" "Invalid email address format."
-  user_input "SERVER_ADMIN_EMAIL" "  Please provide a valid admin email address (will be used for ACME, and system failures notifications) :" "For example : myemail@gmail.com" "${EMAIL_REGEX}" "Invalid email address format."
-  user_input "AUTHORIZED_SSH_PUBLIC_KEY" "  Please provide a list of SSH public keys of authorized devices :" "For example : ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGhcYDmjMo5YApLkk/3P3HZCnOSzm0uYewNAbxL8Fci8 user@your-pc" "${SSH_KEY_REGEX}" "Invalid SSH key format (must start with ssh-...)." "true"
-
-  echo -e "\n\n➡️  You will access your services via a domain name (e.g. cloud.mydomain.com) and containers need credentials to create those subdomains\n"
-  # TRAEFIK SETTINGS
-  user_input "DOMAIN_NAME" "  Please provide the domain name (FQDN) your home server will use :" "For example : yourdomain.com" "${DOMAIN_REGEX}" "Invalid domain name format."
-  user_input "CLOUDFLARE_DNS_API_TOKEN" "  Please provide a cloudflare API token with DNS zone permission :" "For example : bA7hdvCOuXGytlNKohi3ZGtlVpf5CHpLuCMiJrE" "" "" "true"
-
-  echo -e "\n\n➡️  Some services will be able to send you emails. For that you need an email that supports sending emails (like Gmail for example)\n"
-  # SMTP SETTINGS
-  user_input "SMTP_SERVER_USERNAME" "  Please provide a valid sender email address :" "For example : myemail@gmail.com" "${EMAIL_REGEX}" "Invalid email address format."
-  user_input "SMTP_SERVER_PASSWORD" "  Please provide the password of this email address :" "abcd efgh ijkl mnop" "" "" "true"
-  user_input "SMTP_SERVER_HOST" "  Please provide the SMTP server endpoint :" "For Gmail : smtp.gmail.com" "${DOMAIN_REGEX}" "Invalid domain name format."
-  user_input "SMTP_SERVER_PORT" "  Please provide the smtp TLS port :" "For Gmail : 587" "${PORT_REGEX}" "Invalid port number."
-
-  echo -e "\n\n➡️  This server will connect to your local network and you will configure its IP address\n"
-  # NETWORK SETTINGS
-  user_input "NETWORK_SUBNET" "  Please provide your network subnet :" "For example 192.168.1.0/24" "${SUBNET_REGEX}" "Invalid subnet format (e.g. 192.168.1.1/24)."
-  user_input "NETWORK_ROUTER_IP" "  Please provide the ip address of your router :" "Most likely 192.168.1.1 or 192.168.1.254" "${IP_REGEX}" "Invalid IP address format."
-  user_input "HOME_SERVER_IP" "  Please choose the ip address that your server will use (i.e. any address in the 192.168.1.1/24 range that is not in use.) :" "For example 192.168.1.5" "${IP_REGEX}" "Invalid IP address format."
-}
-
-import_variables() {
-  VARIABLES_LIST="${1}"
-  NECESSARY="${2:-false}"
-
-  echo -e "\n\n➡️  Please choose your configuration file :"
-  local CONFIG_PATH="$(gum file)"
-
-  source "${CONFIG_PATH}"
-  local MISSING=false
-  for VAR in "${VARIABLES_LIST[@]}"; do
-      if [[ -v "${VAR}" && -n "${!VAR}" ]]; then
-        gum style "✅ "${VAR}" imported successfully from the config file"
-      else
-        gum style "❌ "${VAR}" is missing or empty"
-        MISSING=true
-      fi
-  done
-
-  if [[ "${MISSING}" == "true" ]]; then
-    if [[ "${NECESSARY}" = "true" ]]; then
-      echo -e "\n❌ Please check your configuration file to include all necessary variables"
-      exit 1
-    fi
-  fi
-
-  if [[ "${DEBUG:-false}" == "true" ]]; then
-    echo -e "\n✅ Debugging enabled."
-    export DIR_COPY_FLAGS="ravu"
-    export FILES_COPY_FLAGS="avu"
-  else
-    export DIR_COPY_FLAGS="rau"
-    export FILES_COPY_FLAGS="au"
-  fi
+  echo -e "➡️  Open your browser at: $(gum style --foreground 212 "http://localhost:${PORT}")"
+  xdg-open "http://localhost:${PORT}" 2>/dev/null || open "http://localhost:${PORT}" 2>/dev/null || true
 }
 
 hierarchy_preparation() {
@@ -359,15 +112,15 @@ ssh_to_host() {
 
 hardware_detection() {
   ### --> Get hardware information
-  local TMPFILE="/tmp/nixos-installation-hardware-detection-temp-file"
+  local TMPFILE="/tmp/hw_detection.json"
 
   ssh_to_host 'bash -s' << SSHEND
+TARGET_GRAPHICS="false"
+TARGET_GRAPHICS_BRAND=()
 for brand in Intel AMD NVIDIA; do
   if lspci -nn 2>/dev/null | grep -i "vga" | grep -iq "\${brand}"; then
     TARGET_GRAPHICS="true"
     TARGET_GRAPHICS_BRAND+=("\${brand}")
-  else
-    TARGET_GRAPHICS="false"
   fi
 done
 
@@ -420,34 +173,47 @@ for DISK in \$(lsblk -x SIZE -d -n -e 7,11 -o NAME); do
 
 done
 
-echo "# Hardware detection results on \$(date)" > "${TMPFILE}"
-for var in \
-  TARGET_GRAPHICS \
-  TARGET_GRAPHICS_BRAND \
-  TARGET_GRAPHICS_RENDERER \
-  TARGET_USB_CORAL \
-  TARGET_PCIE_CORAL \
-  TARGET_ZIGBEE_DEVICE \
-  TARGET_INTERFACE \
-  TARGET_TPM \
-  TARGET_TPM_VERSION; do
-  echo "export \${var}=\${!var}" >> "${TMPFILE}"
-done
-
-for var in \
-  DISK_DEVPATH \
-  DISK_NAME \
-  DISK_TYPE \
-  DISK_HEALTH \
-  DISK_ID \
-  DISK_SIZE; do
-  declare -p \${var} | sed 's/^declare /declare -g /' >> "${TMPFILE}"
-done
+# Build organized JSON output for yq
+cat << EOF > "\${TMPFILE}"
+{
+  "graphics": {
+    "enabled": \${TARGET_GRAPHICS},
+    "brands": [ \$(printf '"%s",' "\${TARGET_GRAPHICS_BRAND[@]}" | sed 's/,\$//') ],
+    "renderer": \${TARGET_GRAPHICS_RENDERER}
+  },
+  "tpu": {
+    "usb": \${TARGET_USB_CORAL},
+    "pcie": \${TARGET_PCIE_CORAL}
+  },
+  "tpm": {
+    "enabled": \${TARGET_TPM},
+    "version": "\${TARGET_TPM_VERSION}"
+  },
+  "zigbee": {
+    "device": "\${TARGET_ZIGBEE_DEVICE}"
+  },
+  "network": {
+    "interface": "\${TARGET_INTERFACE}"
+  },
+  "disks": [
+\$(
+  count=\${#DISK_NAME[@]}
+  for i in "\${!DISK_NAME[@]}"; do
+    echo "    {\"name\": \"\${DISK_NAME[\$i]}\", \"path\": \"\${DISK_DEVPATH[\$i]}\", \"type\": \"\${DISK_TYPE[\$i]}\", \"health\": \"\${DISK_HEALTH[\$i]}\", \"id\": \"\${DISK_ID[\$i]}\", \"size\": \"\${DISK_SIZE[\$i]}\"}\$( [[ \$i -lt \$((count-1)) ]] && echo ',' )"
+  done
+)
+  ]
+}
+EOF
 SSHEND
   ### Get hardware information <--
 
-  scp -i "final-nix-config/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}":"${TMPFILE}" "${TMPFILE}" &> /dev/null
-  source "${TMPFILE}" && rm -rf "${TMPFILE}"
+  scp -i "final-nix-config/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}":"${TMPFILE}" "hardware.json" &> /dev/null
+
+  # Create YAML for NixOS and JSON for the Configurator Website
+  yq -P '.' hardware.json > hardware.yaml
+  yq -o=json '.' hardware.yaml > configurator/hardware.json
+  rm hardware.json
 
   ### --> Generate hardware-configuration.nix
   if ssh_to_host "sudo nixos-generate-config --no-filesystems --show-hardware-config" > final-nix-config/etc/nixos/hardware-configuration.nix; then
@@ -1026,32 +792,19 @@ nix_update() {
     --use-remote-sudo switch --flake final-nix-config/etc/nixos#numbus-server
 }
 
-congrats() {
-  gum style --border normal --margin "1" --padding "1 2" --border-foreground 212 "
-  ⚠️  $(gum style --foreground 212 'CONGRATULATIONS !!:') You now have a working home server. \
-Data stored on there will be fully yours and protected. Keep in my mind this comes with the \
-responsability of managing it and keeping it secure. Now, you have to log in the webpages of \
-the services you installed. Create an admin account for all of them and configure them (or keep \
-it simple and use defaults) and take care to note down all the passwords. Change all default passwords \
-        and create user accounts for your family or friends that will use the server.
-
-                                        Cheers !!"
-}
-
 set -euo pipefail
 
 clear
-fastfetch --logo nixos --logo-padding-left 4 --structure ' '
 
 gum style --align center --width 80 --foreground 212 "
  ██████   █████                            █████
 ▒▒██████ ▒▒███                            ▒▒███
- ▒███▒███ ▒███  █████ ████ █████████████   ▒███████  █████ ████  █████
+ ▒███▒███ ▒███  █████ ████ █████████████   ▒███████  █████ ████    █████
  ▒███▒▒███▒███ ▒▒███ ▒▒███ ▒▒███▒▒███▒▒███  ▒███▒▒███▒▒███ ▒▒███  ███▒▒
  ▒███ ▒▒██████  ▒███ ▒▒███  ▒███ ▒███ ▒███  ▒███ ▒███ ▒███ ▒▒███ ▒▒█████
  ▒███  ▒▒█████  ▒███ ▒▒███  ▒███ ▒███ ▒███  ▒███ ▒███ ▒███ ▒▒███  ▒▒▒▒███
- █████  ▒▒█████ ▒▒████████ █████▒███ █████ ████████  ▒▒████████ ██████
-▒▒▒▒▒    ▒▒▒▒▒   ▒▒▒▒▒▒▒▒ ▒▒▒▒▒ ▒▒▒ ▒▒▒▒▒ ▒▒▒▒▒▒▒▒    ▒▒▒▒▒▒▒▒ ▒▒▒▒▒▒
+ █████  ▒▒█████ ▒▒████████ █████▒███ █████ ████████  ▒▒████████  ██████
+▒▒▒▒▒    ▒▒▒▒▒   ▒▒▒▒▒▒▒▒ ▒▒▒▒▒ ▒▒▒ ▒▒▒▒▒ ▒▒▒▒▒▒▒▒    ▒▒▒▒▒▒▒▒  ▒▒▒▒▒▒
 
   █████████
  ███▒▒▒▒▒███
@@ -1062,85 +815,7 @@ gum style --align center --width 80 --foreground 212 "
 ▒▒█████████ ▒▒██████  █████      ▒▒█████   ▒▒██████  █████
  ▒▒▒▒▒▒▒▒▒   ▒▒▒▒▒▒  ▒▒▒▒▒        ▒▒▒▒▒     ▒▒▒▒▒▒  ▒▒▒▒▒
 "
+
 sleep 1
 
-SELECTED_DEVICE=$(gum choose --header "📦 Select the device type to deploy:" \
-  "numbus-server" \
-  "numbus-backup-server" \
-  "numbus-computer" \
-  "numbus-tv" \
-)
-
-SELECTED_MODE=$(gum choose --header "🛠️ Select the deployment strategy for ${SELECTED_DEVICE}:" \
-  "Semi-interactive (recommended - use a config file)" \
-  "Interactive (manual input)" \
-  "Update and Maintain (existing installation)" \
-)
-
-if [[ "${SELECTED_MODE}" == "Update and Maintain"* ]]; then
-  TARGET_USER="numbus-admin"
-  echo -e "\n➡️  Proceeding with maintenance/update for ${SELECTED_DEVICE}..."
-  gum style --border normal --margin "1" --padding "1 2" --border-foreground 212 \
-    "➡️  Ensure the remote device is powered on and accessible via SSH."
-  
-  gum confirm "Ready to proceed?" || { echo "❌ Aborted."; exit 1; }
-  
-  strictly_necessary_information
-  setup_ssh
-  # Maintain legacy update sequence
-  more_information_config
-  folder_tree_generation
-  nix_generation
-  nix_update
-  congrats
-
-else
-  TARGET_USER="nixos"
-  echo -e "\n➡️  Proceeding with new deployment for ${SELECTED_DEVICE}..."
-  gum style --border normal --margin "1" --padding "1 2" --border-foreground 212 \
-    "➡️  On the target host: Boot into the NixOS ISO, launch a console, and set a temporary user password."
-  
-  gum confirm "Ready to proceed?" || { echo "❌ Aborted."; exit 1; }
-
-  if [[ "${SELECTED_MODE}" == "Semi-interactive"* ]]; then
-    import_variables "${VARS_LIST[@]}" "true"
-  else
-    strictly_necessary_information
-    necessary_information
-  fi
-
-  # Standard Deployment Pipeline
-  hierarchy_preparation
-  setup_ssh
-  hardware_detection
-
-  # Server-specific logic
-  if [[ "${SELECTED_DEVICE}" == "numbus-server" ]]; then
-    services_selection
-  fi
-
-  disks_selection
-  server_config_generation
-  network_config_generation
-
-  if [[ "${SELECTED_DEVICE}" == "numbus-server" ]]; then
-    services_config_generation
-  fi
-
-  # Mail setup for server-grade devices
-  if [[ "${SELECTED_DEVICE}" == *"server"* ]]; then
-    mail_config_generation
-  fi
-
-  disk_config_generation
-  keys_generation
-  sum_up
-
-  if [[ "${SELECTED_DEVICE}" == "numbus-server" ]]; then
-    cloudflare_dns_setup
-  fi
-
-  export_configuration
-  deploy
-  postrun_action
-fi
\ No newline at end of file
+launch_configurator
diff --git a/docs/numbus-server/configuration/automatic_ssl_certs.md b/docs/numbus-server/configuration/services/automatic_ssl_certs.md
similarity index 100%
rename from docs/numbus-server/configuration/automatic_ssl_certs.md
rename to docs/numbus-server/configuration/services/automatic_ssl_certs.md
diff --git a/docs/numbus-server/configuration/custom_subdomain.md b/docs/numbus-server/configuration/services/custom_subdomain.md
similarity index 100%
rename from docs/numbus-server/configuration/custom_subdomain.md
rename to docs/numbus-server/configuration/services/custom_subdomain.md
diff --git a/docs/numbus-server/configuration/services/index.md b/docs/numbus-server/configuration/services/index.md
index 44b8713..d5050b7 100644
--- a/docs/numbus-server/configuration/services/index.md
+++ b/docs/numbus-server/configuration/services/index.md
@@ -4,11 +4,11 @@
 
 | Variable | Description | Values | Default |
 | -------- | ----------- | ------ | --------- | 
+| DOMAIN_NAME | The domain name that will be used to access the different services. | your-domain.com | |
 | SELECTED_DNS_SERVICE | The DNS service to install (AdBlocking). | ( "pi-hole" ), ( "adguard" ) | ( "pi-hole" ) |
 | SELECTED_WEB_APPLICATIONS | The list of web applications to install. | ( "nextcloud" ), ( "homepage" jellyfin" "it-tools" "netbootxyz" ), ... [see the full list below](./index.md#web-applications-list) |  |
 | SELECTED_SYSTEM_SERVICES | The list of system services to install. | ( "clamav" ), ( "virtualization" "clamav" ), ... [see the full list below](./index.md#system-services-list) |  |
-| SELECTED_DNS_SERVICE_[subdomain](../custom_subdomain.md) | Custom [subdomain](../custom_subdomain.md) for the DNS service. | "my-dns" | Will be the name of the service. I.e. pi-hole.your-domain.com or adguard.your-domain.com |
-| SELECTED_WEB_APPLICATIONS_[subdomain](../custom_subdomain.md) | Custom [subdomain](../custom_subdomain.md)s for the web applications (must match the order of SELECTED_WEB_APPLICATIONS). | "my-cloud", "my-photos" | Will be the name of the service. I.e. nextcloud.your-domain.com, immich.your-domain.com, ... |
+
 
 ## Web applications list
 
@@ -37,7 +37,7 @@ This is the list of **all the available apps** that can be enabled on the numbus
 
 ## System services list
 
-| Name | Description | Additional settings ? |
+| Name | Description | Additional settings |
 | -------- | ----------- | ------ |
-| clamav | Open-source anti-virus software. | No |
-| virtualization | Run Virtual Machines (KVM/QEMU). | No |
\ No newline at end of file
+| clamav | Open-source anti-virus software. | |
+| virtualization | Run Virtual Machines (KVM/QEMU). | |
\ No newline at end of file
diff --git a/numbus-server.conf b/numbus-server.conf
deleted file mode 100644
index 537a19a..0000000
--- a/numbus-server.conf
+++ /dev/null
@@ -1,119 +0,0 @@
-## 📦 Live target settings
-# See docs/numbus-server/configuration/live_target.md
-export LIVE_TARGET_IP="192.168.1.10"
-export LIVE_TARGET_PASSWD="example"
-
-
-## ⚙️ Server settings
-# See docs/numbus-server/configuration/server.md
-export SERVER_LANGUAGE="FR"
-export SERVER_LOCALE="fr_FR"
-export SERVER_TIMEZONE="Europe/Paris"
-export SERVER_OWNER_NAME="yourName"
-export SERVER_USER_EMAIL="user@your-domain.com"
-export SERVER_ADMIN_EMAIL="admin@your-domain.com"
-export SERVER_AUTHORIZED_SSH_PUBKEYS=( "ssh-ed25519 AAAAoefzefpoipoeCEZJCPEACPAcjapjcpajepcjAPJECJPEJAPJAZ yours@yourdomain.com" )
-
-
-## 📬 Mail settings
-# See docs/numbus-server/configuration/mail.md
-export SMTP_SERVER_USERNAME="your-address@your-domain.com"
-export SMTP_SERVER_PASSWORD="emrp raps vzoi vnoe"
-export SMTP_SERVER_HOST="smtp.yourdomain.com"
-export SMTP_SERVER_PORT="587"
-
-
-## 🚦 Traefik settings
-# See docs/numbus-server/configuration/services/traefik.md
-export CLOUDFLARE_DNS_API_TOKEN="yourToken"
-
-
-
-
-
-## 🛜 Network settings
-# See docs/numbus-server/configuration/network.md
-export NETWORK_SUBNET="192.168.1.0/24"
-export NETWORK_ROUTER_IP="192.168.1.1"
-export HOME_SERVER_IP="192.168.1.5"
-
-
-## 🛠️ Services settings
-# See docs/numbus-server/configuration/services/index.md
-export DOMAIN_NAME="yourdomain.com"
-
-
-## DNS service
-export SELECTED_DNS_SERVICE=(
-  "pi-hole"
-  "adguard"
-)
-
-
-## Web applications
-export SELECTED_WEB_APPLICATIONS=(
-  "crafty"
-  "frigate"
-  "gitea"
-  "home-assistant"
-  "homepage"
-  "immich"
-  "it-tools"
-  "jellyfin"
-  "n8n"
-  "netbootxyz"
-  "nextcloud"
-  "ntfy"
-  "odoo"
-  "passbolt"
-  "uptime-kuma"
-  "vscodium"
-)
-
-
-## System services
-export SELECTED_SYSTEM_SERVICES=(
-  "clamav"
-  "virtualization"
-)
-
-
-## DNS service subdomain
-# See docs/numbus-server/configuration/services/index.md
-export SELECTED_DNS_SERVICE_SUBDOMAIN=(
-  "my-pi-hole-subdomain" # or "my-adguard-subdomain"
-)
-
-
-## Web applications subdomain
-# ⚠️ The order must strictly match the SELECTED_WEB_APPLICATIONS array above.
-export SELECTED_WEB_APPLICATIONS_SUBDOMAIN=(
-  "my-crafty-subdomain"
-  "my-frigate-subdomain"
-  "my-gitea-subdomain"
-  "my-home-assistant-subdomain" # Example : your Home-assistant URL will be ; https://my-home-assistant-subdomain.yourdomain.com/
-  "my-homepage-subdomain"
-  "my-immich-subdomain"
-  "my-it-tools-subdomain"
-  "my-jellyfin-subdomain"       # Example : your Jellyfin URL will be ; https://my-jellyfin-subdomain.yourdomain.com/
-  "my-n8n-subdomain"
-  "my-netbootxyz-subdomain"
-  "my-nextcloud-subdomain"
-  "my-ntfy-subdomain"
-  "my-odoo-subdomain"
-  "my-passbolt-subdomain"
-  "my-uptime-kuma-subdomain"
-  "my-vscodium-subdomain"
-)
-
-
-## ⛏️ Crafty settings
-# See docs/numbus-server/configuration/services/crafty.md
-export DYNMAP_ENABLED="false"
-export WANTED_NUMBER_OF_JAVA_MINECRAFT_SERVERS="1"
-export WANTED_NUMBER_OF_BEDROCK_MINECRAFT_SERVERS="0"
-
-
-## 📜 Script settings
-# See docs/numbus-server/configuration/script.md
-export VERBOSE="true"
\ No newline at end of file
diff --git a/templates/numbus-server/configuration.nix b/templates/numbus-server/configuration.nix
index a519138..8c1c408 100644
--- a/templates/numbus-server/configuration.nix
+++ b/templates/numbus-server/configuration.nix
@@ -1,20 +1,17 @@
-{ modulesPath, config, pkgs, inputs, ... }:
+# Do NOT edit this file manually. 
+# Please use the dedicated script : https://gittea.dev/numbus/numbus.
+# This could compromise system stability and is not supported by numbus.
+
+{ config, modulesPath, ... }:
 
 {
   imports = [
     (modulesPath + "/installer/scan/not-detected.nix")
     (modulesPath + "/profiles/qemu-guest.nix")
-    inputs.sops-nix.nixosModules.sops
+    ./custom-configuration.nix
+    ./numbus-generated.nix
   ];
 
   # System
   system.stateVersion = "25.11";
-
-  # Secrets management
-  sops.defaultSopsFile = ./secrets/secrets.yaml;
-  sops.age.sshKeyPaths = [ "/home/numbus-admin/.ssh/id_ed25519" ];
-  sops.age.keyFile = "/var/lib/sops-nix/key.txt";
-  # Secrets
-  sops.secrets."authorizedSshPublicKeys" = { owner = "numbus-admin"; path = "/home/numbus-admin/.ssh/authorized_keys"; mode = "0600"; };
-  sops.secrets."smtpPassword" = { owner = "numbus-admin"; mode = "0600"; };
-  sops.secrets."cloudflareDnsApiToken" = { owner = "numbus-admin"; mode = "0600"; };
\ No newline at end of file
+}
\ No newline at end of file
diff --git a/templates/numbus-server/custom-configuration.nix b/templates/numbus-server/custom-configuration.nix
new file mode 100644
index 0000000..23e44ad
--- /dev/null
+++ b/templates/numbus-server/custom-configuration.nix
@@ -0,0 +1,5 @@
+# This file is reserved for ADVANCED USERS ONLY.
+# Editing could compromise system stability and is not supported by numbus.
+# Do NOT set options already managed by numbus. i.e. config.numbus.* and other options (networking, storage, etc.)
+# Please use the dedicated script for those options : https://gittea.dev/numbus/numbus.
+
diff --git a/templates/numbus-server/flake.nix b/templates/numbus-server/flake.nix
index 0296512..68454d4 100644
--- a/templates/numbus-server/flake.nix
+++ b/templates/numbus-server/flake.nix
@@ -1,10 +1,14 @@
+# Do NOT edit this file manually. 
+# Please use the dedicated script : https://gittea.dev/numbus/numbus.
+# This could compromise system stability and is not supported by numbus.
+
 {
   inputs = {
     # Core Nixpkgs
     nixpkgs.url = "github:NixOS/nixpkgs/nixos-25.11";
     # Numbus server configuration
-    numbus.url = "git+https://gittea.dev/numbus/numbus-server";
-    numbus.inputs.nixpkgs.follows = "nixpkgs";
+    numbus-server.url = "git+https://gittea.dev/numbus/numbus-server";
+    numbus-server.inputs.nixpkgs.follows = "nixpkgs";
     # Disk-partitioning helper
     disko.url = "github:nix-community/disko";
     disko.inputs.nixpkgs.follows = "nixpkgs";
@@ -16,7 +20,7 @@
     autoaspm.inputs.nixpkgs.follows = "nixpkgs";
   };
 
-  outputs = { self, nixpkgs, numbus, disko, sops-nix, autoaspm, ... }@inputs: let
+  outputs = { self, nixpkgs, numbus-server, disko, sops-nix, autoaspm, ... }@inputs: let
     # System definition
     system = "x86_64-linux";
     pkgs = import nixpkgs {
@@ -31,7 +35,7 @@
         specialArgs = { inherit inputs; };
         modules = [
           # Numbus server configuration
-          numbus.nixosModules.numbus
+          numbus-server.nixosModules.numbus-server
           # Disk-partitioning helper
           disko.nixosModules.disko
           # Secrets handling
diff --git a/templates/numbus-server/numbus-generated.nix b/templates/numbus-server/numbus-generated.nix
new file mode 100644
index 0000000..4302f12
--- /dev/null
+++ b/templates/numbus-server/numbus-generated.nix
@@ -0,0 +1,10 @@
+# Do NOT edit this file manually. 
+# Please use the dedicated script : https://gittea.dev/numbus/numbus.
+# This could compromise system stability and is not supported by numbus.
+
+{ config, pkgs, inputs, ... }:
+
+{
+  imports = [
+    inputs.sops-nix.nixosModules.sops
+  ];
\ No newline at end of file
diff --git a/templates/numbus-server/sops-nix/secrets.yaml b/templates/numbus-server/sops-nix/secrets.yaml
index 38c83a2..1a2671b 100644
--- a/templates/numbus-server/sops-nix/secrets.yaml
+++ b/templates/numbus-server/sops-nix/secrets.yaml
@@ -1,4 +1,10 @@
+# SSH
 authorizedSshPublicKeys: |
 $SSH_KEYS_FORMATTED
+
+# SMTP
 smtpPassword: "$SMTP_SERVER_PASSWORD"
-cloudflareDnsApiToken: "$CLOUDFLARE_DNS_API_TOKEN"
\ No newline at end of file
+
+# CLOUDFLARE
+cloudflareDnsApiToken: "$CLOUDFLARE_DNS_API_TOKEN"
+
diff --git a/wg0.conf b/wg0.conf
deleted file mode 100644
index d23d6d7..0000000
--- a/wg0.conf
+++ /dev/null
@@ -1 +0,0 @@
-# Populate this file with a valid WireGuard tunnel configuration if you chose to deploy a numbus-backup-server.
\ No newline at end of file

From 3494bac065d029a5be5fb8b95e32dd628a999688 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Sat, 28 Mar 2026 22:07:01 +0100
Subject: [PATCH 15/43] Added main code execution.

---
 configurator/index.html | 18 +++++++++---------
 deploy.sh               | 32 +++++++++++++++++++++++++++++++-
 2 files changed, 40 insertions(+), 10 deletions(-)

diff --git a/configurator/index.html b/configurator/index.html
index bee35e5..4646f78 100644
--- a/configurator/index.html
+++ b/configurator/index.html
@@ -86,13 +86,13 @@
                         <div class="grid grid-cols-1 md:grid-cols-2 gap-4">
                             <button @click="formData.deploymentMode = 'interactive'" 
                                     :class="formData.deploymentMode === 'interactive' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'"
-                                    class="p-6 border rounded-2xl transition-all text-left group hover:bg-slate-800">
+                                    class="p-6 border rounded-2xl transition-all text-left group hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
                                 <div class="font-bold text-lg mb-1" :class="formData.deploymentMode === 'interactive' ? 'text-white' : 'text-slate-200 group-hover:text-white'">Interactive</div>
                                 <p class="text-xs transition-colors" :class="formData.deploymentMode === 'interactive' ? 'text-white' : 'text-slate-500 group-hover:text-white'">Guide me through every setting manually.</p>
                             </button>
                             <button @click="formData.deploymentMode = 'non-interactive'" 
                                     :class="formData.deploymentMode === 'non-interactive' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'"
-                                    class="p-6 border rounded-2xl transition-all text-left group hover:bg-slate-800">
+                                    class="p-6 border rounded-2xl transition-all text-left group hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
                                 <div class="font-bold text-lg mb-1" :class="formData.deploymentMode === 'non-interactive' ? 'text-white' : 'text-slate-200 group-hover:text-white'">Non-Interactive</div>
                                 <p class="text-xs transition-colors" :class="formData.deploymentMode === 'non-interactive' ? 'text-white' : 'text-slate-500 group-hover:text-white'">Reuse an existing configuration from a Git repo.</p>
                             </button>
@@ -428,7 +428,7 @@
                                 <button x-show="formData.users.length <= 5" 
                                         @click="formData.remote_access.provider = 'netbird-cloud'" 
                                         :class="formData.remote_access.provider === 'netbird-cloud' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" 
-                                        class="p-6 border rounded-2xl transition-all text-left group hover:bg-slate-800 hover:border-slate-600">
+                                        class="p-6 border rounded-2xl transition-all text-left group hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
                                     <div class="flex justify-between items-center mb-2">
                                         <div class="flex items-center gap-4">
                                             <i class="mdi mdi-cloud-outline text-3xl" :class="formData.remote_access.provider === 'netbird-cloud' ? 'text-white' : 'text-sky-400 group-hover:text-white'"></i>
@@ -466,7 +466,7 @@
                                 <!-- Netbird Self-Hosted -->
                                 <button @click="formData.remote_access.provider = 'netbird-selfhosted'" 
                                         :class="formData.remote_access.provider === 'netbird-selfhosted' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" 
-                                        class="p-6 border rounded-2xl transition-all text-left group hover:border-fuchsia-500/50 hover:bg-slate-800">
+                                        class="p-6 border rounded-2xl transition-all text-left group hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
                                     <div class="flex items-center gap-3 mb-2">
                                         <i class="mdi mdi-server-network text-3xl" :class="formData.remote_access.provider === 'netbird-selfhosted' ? 'text-white' : 'text-sky-400 group-hover:text-white'"></i>
                                         <div class="font-bold text-xl" :class="formData.remote_access.provider === 'netbird-selfhosted' ? 'text-white' : 'text-slate-200 group-hover:text-white'">Managed On-Premise</div>
@@ -477,7 +477,7 @@
                                 <!-- External -->
                                 <button @click="formData.remote_access.provider = 'external'" 
                                         :class="formData.remote_access.provider === 'external' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" 
-                                        class="p-6 border rounded-2xl transition-all text-left group hover:border-fuchsia-500/50 hover:bg-slate-800">
+                                        class="p-6 border rounded-2xl transition-all text-left group hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
                                     <div class="flex items-center gap-3 mb-2">
                                         <i class="mdi mdi-earth text-3xl" :class="formData.remote_access.provider === 'external' ? 'text-white' : 'text-sky-400 group-hover:text-white'"></i>
                                         <div class="font-bold text-xl" :class="formData.remote_access.provider === 'external' ? 'text-white' : 'text-slate-200 group-hover:text-white'">External / Manual Access</div>
@@ -583,7 +583,7 @@
                             <h3 class="text-lg font-semibold text-fuchsia-400">DNS Filter</h3>
                             <div class="flex gap-4">
                                 <template x-for="dns in ['pi-hole', 'adguard']" :key="dns">
-                                    <button @click="formData.services.dns = dns" :class="formData.services.dns === dns ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" class="flex-1 p-5 border rounded-xl transition-all text-left group hover:bg-slate-800 hover:border-slate-600">
+                                    <button @click="formData.services.dns = dns" :class="formData.services.dns === dns ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" class="flex-1 p-5 border rounded-xl transition-all text-left group hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
                                         <div class="flex justify-between items-center mb-2">
                                             <div class="flex items-center gap-3">
                                                 <img :src="'https://cdn.jsdelivr.net/gh/selfhst/icons@main/svg/' + (serviceMetadata[dns].icon || dns) + '.svg'" class="w-6 h-6" :alt="dns">
@@ -599,7 +599,7 @@
                             <h3 class="text-lg font-semibold text-fuchsia-400 mt-6">Web Applications</h3>
                             <div class="grid grid-cols-2 md:grid-cols-3 gap-4">
                                 <template x-for="app in webApps" :key="app">
-                                    <label :class="formData.services.apps.includes(app) ? 'border-sky-500 bg-sky-500/10' : 'border-slate-700 bg-slate-900/40'" class="flex flex-col gap-3 p-5 border rounded-xl cursor-pointer transition-all hover:border-sky-400 group relative">
+                                    <label :class="formData.services.apps.includes(app) ? 'border-fuchsia-500 bg-fuchsia-600/20' : 'border-slate-700 bg-slate-900/40'" class="flex flex-col gap-3 p-5 border rounded-xl cursor-pointer transition-all hover:bg-fuchsia-600/20 hover:border-fuchsia-500 group relative">
                                         <img :src="'https://cdn.jsdelivr.net/gh/selfhst/icons@main/svg/' + (serviceMetadata[app].icon || app) + '.svg'" :class="formData.services.apps.includes(app) ? 'opacity-100' : 'opacity-20 group-hover:opacity-100'" class="w-8 h-8 transition-opacity absolute right-4 top-4" :alt="app">
                                         <div class="flex items-center gap-3">
                                             <input type="checkbox" :value="app" x-model="formData.services.apps" class="w-5 h-5 rounded border-slate-700 text-sky-500 focus:ring-sky-500 bg-slate-800">
@@ -614,7 +614,7 @@
                             <h3 class="text-lg font-semibold text-fuchsia-400 mt-6">System Services</h3>
                             <div class="grid grid-cols-2 gap-4">
                                 <template x-for="sys in ['clamav', 'virtualization']" :key="sys">
-                                    <label :class="formData.services.system.includes(sys) ? 'border-sky-500 bg-sky-500/10' : 'border-slate-700 bg-slate-900/40'" class="flex flex-col gap-3 p-5 border rounded-xl cursor-pointer transition-all hover:border-sky-400 group">
+                                    <label :class="formData.services.system.includes(sys) ? 'border-fuchsia-500 bg-fuchsia-600/20' : 'border-slate-700 bg-slate-900/40'" class="flex flex-col gap-3 p-5 border rounded-xl cursor-pointer transition-all hover:bg-fuchsia-600/20 hover:border-fuchsia-500 group">
                                         <div class="flex items-center justify-between">
                                             <div class="flex items-center gap-3">
                                                 <input type="checkbox" :value="sys" x-model="formData.services.system" class="w-5 h-5 rounded border-slate-700 text-sky-500 focus:ring-sky-500 bg-slate-800">
@@ -1131,7 +1131,7 @@
                 },
                 async startDiscovery() {
                     this.updateNavigation();
-                    this.step = 3;
+                    this.step = 4; // Move to waiting room
                     try {
                         await fetch('/discovery', {
                             method: 'POST',
diff --git a/deploy.sh b/deploy.sh
index 91ac5c4..f9a8cd9 100644
--- a/deploy.sh
+++ b/deploy.sh
@@ -796,7 +796,7 @@ set -euo pipefail
 
 clear
 
-gum style --align center --width 80 --foreground 212 "
+echo "
  ██████   █████                            █████
 ▒▒██████ ▒▒███                            ▒▒███
  ▒███▒███ ▒███  █████ ████ █████████████   ▒███████  █████ ████    █████
@@ -818,4 +818,34 @@ gum style --align center --width 80 --foreground 212 "
 
 sleep 1
 
+# --- MAIN ORCHESTRATION LOOP ---
+
+# 1. Initialize the UI and Bridge
 launch_configurator
+
+# 2. Wait for Live Credentials from the Website
+echo -ne "⏳ Waiting for device credentials from web UI..."
+while [ ! -f configurator/.discovery_ready ]; do
+    sleep 1
+done
+echo -e "\n✅ Credentials received."
+
+# 3. Load Credentials and run Discovery
+LIVE_TARGET_IP=$(jq -r '.live_ip' configurator/live_settings.json)
+LIVE_TARGET_PASSWD=$(jq -r '.live_password' configurator/live_settings.json)
+TARGET_USER="nixos" # Default for NixOS ISO
+
+setup_ssh
+hierarchy_preparation
+hardware_detection
+echo -e "✅ Discovery complete. Hardware data sent to Configurator."
+
+# 4. Wait for Final Configuration Submission
+echo -ne "⏳ Waiting for final configuration deployment signal..."
+while [ ! -f configurator/.deploy_signal ]; do
+    sleep 1
+done
+
+# 5. Execute Deployment
+echo -e "\n🚀 Starting deployment sequence..."
+deploy | tee configurator/deploy.log
\ No newline at end of file

From 9f5d91e51033bb8e2e410d45afb561d0352f28c0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Sun, 29 Mar 2026 12:25:43 +0200
Subject: [PATCH 16/43] Continue working on the big update. Improved verbose
 mode.

---
 configuration-files/numbus-backup-server.conf | 147 ----------
 configuration-files/numbus-computer.conf      |  22 --
 configuration-files/numbus-server.conf        | 101 -------
 configuration-files/numbus-tv.conf            |  22 --
 configurator/bridge.py                        |  39 +++
 deploy.sh                                     | 266 ++++++++----------
 6 files changed, 161 insertions(+), 436 deletions(-)
 delete mode 100644 configuration-files/numbus-backup-server.conf
 delete mode 100644 configuration-files/numbus-computer.conf
 delete mode 100644 configuration-files/numbus-server.conf
 delete mode 100644 configuration-files/numbus-tv.conf
 create mode 100644 configurator/bridge.py

diff --git a/configuration-files/numbus-backup-server.conf b/configuration-files/numbus-backup-server.conf
deleted file mode 100644
index 2fa35de..0000000
--- a/configuration-files/numbus-backup-server.conf
+++ /dev/null
@@ -1,147 +0,0 @@
-### -----------------> ###
-### MANDATORY SETTINGS ###
-
-
-
-## Live target settings
-# The IP address of the machine to install NixOS on (must be reachable via SSH).
-export LIVE_TARGET_IP="192.168.1.10"
-# The password of the live installer environment (the one you set using 'passwd' on the live machine).
-export LIVE_TARGET_PASSWD="example"
-
-
-## Backup server settings
-# The language/keyboard layout (e.g. FR, EN, DE). 
-export SERVER_LANGUAGE="FR"
-# The system locale (e.g. fr_FR, en_US, de_DE).
-export SERVER_LOCALE="fr_FR"
-# The timezone (e.g. Europe/Paris, America/New_York, Europe/Berlin).
-export SERVER_TIMEZONE="Europe/Paris"
-# The name of the server owner. Used in mails and for identification (if you bought support or have multiple servers).
-export SERVER_OWNER_NAME="yourName"
-# The email address where services notifications and alerts will be sent.
-export SERVER_USER_EMAIL="user@your-domain.com"
-# The email address where system failure notifications and alerts will be sent.
-export SERVER_ADMIN_EMAIL="admin@your-domain.com"
-# A list of SSH public keys allowed to log in as the administrator.
-export SERVER_AUTHORIZED_SSH_PUBKEYS=( "ssh-ed25519 AAAAoefzefpoipoeCEZJCPEACPAcjapjcpajepcjAPJECJPEJAPJAZ yours@yourdomain.com" )
-
-
-## Traefik settings
-# Cloudflare API token with "Zone:DNS:Edit" permissions for automatic renewal of Let's Encrypt certificates.
-export CLOUDFLARE_DNS_API_TOKEN="yourToken"
-
-
-## Smtp settings
-# The email account used by the server to send outgoing notifications.
-export SMTP_SERVER_USERNAME="your-address@gmail.com"
-# The password for the email account (use an App Password if using Gmail/2FA).
-export SMTP_SERVER_PASSWORD="emrp raps vzoi vnoe"
-export SMTP_SERVER_HOST="smtp.yourdomain.com"
-export SMTP_SERVER_PORT="587"
-
-
-## Network settings
-# The local network subnet in CIDR notation (e.g. 192.168.1.0/24).
-export NETWORK_SUBNET="192.168.1.0/24"
-# The IP address of your internet router/gateway.
-export NETWORK_ROUTER_IP="192.168.1.1"
-# The static IP address to assign to this server (must be outside the router's DHCP range).
-export HOME_SERVER_IP="192.168.1.5"
-
-
-## Services settings
-# The root domain name for your services (e.g. example.com).
-export DOMAIN_NAME="yourdomain.com"
-
-
-## Web applications
-# All apps are open-source, fully local
-export SELECTED_WEB_APPLICATIONS=(
-  # Minecraft server(s) manager. Supports Bedrock and Java, Dynmap. https://craftycontrol.com/
-  "crafty"
-  # Network-Video-Recorder with advanced features such as person detection, face recognition. https://frigate.video/
-  "frigate"
-  # Full-featured git platform. Replace GitHub with your own and stop AI bots from accessing your code. https://about.gitea.com/
-  "gitea"
-  # Home automation platform. Every smart home devices in one place. Endless automation options. Integrates with Frigate to get notified when someone is detected. https://www.home-assistant.io/
-  "home-assistant"
-  # A modern, secure, highly customizable application dashboard. https://gethomepage.dev/
-  "homepage"
-  # Photos backup platform similar to Google Photos. Advanced features such as face and object recognition powered search. https://immich.app/
-  "immich"
-  # A set of super useful tools when doing IT. https://it-tools.tech/
-  "it-tools"
-  # The Free Software Media System. Stream to any device from your own server, with no strings attached. https://jellyfin.org/
-  "jellyfin"
-  # Workflow automation for technical people. node-based workflow automation tool. https://n8n.io/
-  "n8n"
-  # Network boot various operating system installers and utilities from one place. https://netboot.xyz/
-  "netbootxyz"
-  # The most popular self-hosted collaboration platform. File sharing, productivity, and groupware. https://nextcloud.com/
-  "nextcloud"
-  # Send push notifications to your phone or desktop via PUT/POST. https://ntfy.sh/
-  "ntfy"
-  # Open Source ERP and CRM. https://www.odoo.com/
-  "odoo"
-  # Open source password manager for teams. Security first, privacy focused. https://www.passbolt.com/
-  "passbolt"
-  # A fancy self-hosted monitoring tool. https://uptimekuma.org/
-  "uptime-kuma"
-  # Free/Libre Open Source Software Binaries of VS Code. Run VS Code in your browser. https://vscodium.com/
-  "vscodium"
-)
-
-
-## System services
-# All apps are open-source, fully local
-export SELECTED_SYSTEM_SERVICES=(
-  # Backup your numbus-server using this client.
-  "backup-client"
-  # Anti-virus software. Will scan the system periodically. Will scan on-access the data stored in your services' data directories : for example, where your Nextcloud data is. https://www.clamav.net/
-  "clamav"
-  # Virtualization host software. Uses Qemu/KVM. Run VMs with near-native performance and device passthrough capabilities. https://www.qemu.org/
-  "virtualization"
-)
-
-
-### MANDATORY SETTINGS ###
-### <----------------- ###
-
-
-
-### -----------------> ###
-### OPTIONAL SETTINGS  ###
-
-
-
-## Web applications subdomain
-# Subdomains for each selected web application.
-# ⚠️ The order must strictly match the SELECTED_WEB_APPLICATIONS array above. The below example would be correct if you selected every service in the SELECTED_WEB_APPLICATIONS array.
-export SELECTED_WEB_APPLICATIONS_SUBDOMAIN=(
-  "my-crafty-subdomain"
-  "my-frigate-subdomain"
-  "my-gitea-subdomain"
-  "my-home-assistant-subdomain" # Example : your Home-assistant URL will be ; https://my-home-assistant-subdomain.yourdomain.com/
-  "my-homepage-subdomain"
-  "my-immich-subdomain"
-  "my-it-tools-subdomain"
-  "my-jellyfin-subdomain"       # Example : your Jellyfin URL will be ; https://my-jellyfin-subdomain.yourdomain.com/
-  "my-n8n-subdomain"
-  "my-netbootxyz-subdomain"
-  "my-nextcloud-subdomain"
-  "my-ntfy-subdomain"
-  "my-odoo-subdomain"
-  "my-passbolt-subdomain"
-  "my-uptime-kuma-subdomain"
-  "my-vscodium-subdomain"
-)
-
-
-## Script settings
-# Enable verbose logging for debugging purposes.
-export DEBUG="true"
-
-
-### OPTIONAL SETTINGS  ###
-### <----------------- ###
\ No newline at end of file
diff --git a/configuration-files/numbus-computer.conf b/configuration-files/numbus-computer.conf
deleted file mode 100644
index 8802a97..0000000
--- a/configuration-files/numbus-computer.conf
+++ /dev/null
@@ -1,22 +0,0 @@
-# -->
-# MANDATORY SETTINGS
-# <--
-
-## Script settings
-export DEBUG="true"
-
-## Live target settings
-export LIVE_TARGET_IP="192.168.1.10"
-export LIVE_TARGET_PASSWD="example"
-
-## Computer settings
-export COMPUTER_LANGUAGE="FR"
-export COMPUTER_LOCALE="fr_FR"
-export COMPUTER_TIMEZONE="Europe/Paris"
-export COMPUTER_OWNER_NAME="yourName"
-export COMPUTER_AUTHORIZED_SSH_PUBKEYS=( "ssh-ed25519 AAAAoefzefpoipoeCEZJCPEACPAcjapjcpajepcjAPJECJPEJAPJAZ yours@yourdomain.com" )
-
-## Network settings
-export NETWORK_SUBNET="192.168.1.0/24"
-export NETWORK_ROUTER_IP="192.168.1.1"
-export HOME_SERVER_IP="192.168.1.5"
\ No newline at end of file
diff --git a/configuration-files/numbus-server.conf b/configuration-files/numbus-server.conf
deleted file mode 100644
index 94ff582..0000000
--- a/configuration-files/numbus-server.conf
+++ /dev/null
@@ -1,101 +0,0 @@
-### MANDATORY SETTINGS ###
-
-## 📦 Live target settings
-# See docs/numbus-server/configuration/live_target.md
-LIVE_TARGET_IP="192.168.1.10"
-LIVE_TARGET_PASSWD="example"
-
-
-## ⚙️ Server settings
-# See docs/numbus-server/configuration/server.md
-SERVER_LANGUAGE="FR"
-SERVER_LOCALE="fr_FR"
-SERVER_TIMEZONE="Europe/Paris"
-SERVER_OWNER_NAME="yourName"
-SERVER_ADMIN_EMAIL="admin@your-domain.com"
-SERVER_AUTHORIZED_SSH_PUBKEYS=( "ssh-ed25519 AAAAoefzefpoipoeCEZJCPEACPAcjapjcpajepcjAPJECJPEJAPJAZ yours@yourdomain.com" )
-
-
-## 📬 Mail settings
-# See docs/numbus-server/configuration/mail.md
-SMTP_SERVER_USERNAME="your-address@your-domain.com"
-SMTP_SERVER_PASSWORD="emrp raps vzoi vnoe"
-SMTP_SERVER_HOST="smtp.yourdomain.com"
-SMTP_SERVER_PORT="587"
-
-
-## 🛜 Network settings
-# See docs/numbus-server/configuration/network.md
-NETWORK_SUBNET="192.168.1.0/24"
-NETWORK_ROUTER_IP="192.168.1.1"
-HOME_SERVER_IP="192.168.1.5"
-
-
-## 🛠️ Services settings
-# See docs/numbus-server/configuration/services/index.md
-DOMAIN_NAME="yourdomain.com"
-SELECTED_DNS_SERVICE="pi-hole" # or SELECTED_DNS_SERVICE="adguard"
-SELECTED_WEB_APPLICATIONS=(
-  "crafty"
-  "frigate"
-  "gitea"
-  "home-assistant"
-  "homepage"
-  "immich"
-  "it-tools"
-  "jellyfin"
-  "n8n"
-  "netbootxyz"
-  "nextcloud"
-  "ntfy"
-  "odoo"
-  "passbolt"
-  "uptime-kuma"
-  "vscodium"
-)
-SELECTED_SYSTEM_SERVICES=(
-  "clamav"
-  "virtualization"
-)
-
-
-## 🚦 Traefik settings
-# See docs/numbus-server/configuration/services/automatic_ssl_certs.md
-CLOUDFLARE_DNS_API_TOKEN="yourToken"
-
-
-
-### OPTIONAL SETTINGS ###
-
-## ⛏️ Crafty settings
-# See docs/numbus-server/configuration/services/crafty.md
-DYNMAP_ENABLED="false"
-WANTED_NUMBER_OF_JAVA_MINECRAFT_SERVERS="1"
-WANTED_NUMBER_OF_BEDROCK_MINECRAFT_SERVERS="0"
-
-
-## 📜 Script settings
-# See docs/numbus-server/configuration/script.md
-VERBOSE="true"
-
-
-## 🗺 Custom subdomains
-# See docs/numbus-server/configuration/services/custom_subdomain.md
-PI_HOLE_SUBDOMAIN="pi-hole"
-ADGUARD_SUBDOMAIN="adguard"
-CRAFFY_SUBDOMAIN="crafty"
-FRIGATE_SUBDOMAIN="frigate"
-GITEA_SUBDOMAIN="gitea"
-HOME_ASSISTANT_SUBDOMAIN="home-assistant"
-HOMEPAGE_SUBDOMAIN="homepage"
-IMMICH_SUBDOMAIN="immich"
-IT_TOOLS_SUBDOMAIN="it-tools"
-JELLYFIN_SUBDOMAIN="jellyfin"
-N8N_SUBDOMAIN="n8n"
-NETBOOTXYZ_SUBDOMAIN="netbootxyz"
-NEXTCLOUD_SUBDOMAIN="nextcloud"
-NTFY_SUBDOMAIN="ntfy"
-ODOO_SUBDOMAIN="odoo"
-PASSBOLT_SUBDOMAIN="passbolt"
-UPTIME_KUMA_SUBDOMAIN="uptime-kuma"
-VSCODIUM_SUBDOMAIN="vscodium"
\ No newline at end of file
diff --git a/configuration-files/numbus-tv.conf b/configuration-files/numbus-tv.conf
deleted file mode 100644
index 8802a97..0000000
--- a/configuration-files/numbus-tv.conf
+++ /dev/null
@@ -1,22 +0,0 @@
-# -->
-# MANDATORY SETTINGS
-# <--
-
-## Script settings
-export DEBUG="true"
-
-## Live target settings
-export LIVE_TARGET_IP="192.168.1.10"
-export LIVE_TARGET_PASSWD="example"
-
-## Computer settings
-export COMPUTER_LANGUAGE="FR"
-export COMPUTER_LOCALE="fr_FR"
-export COMPUTER_TIMEZONE="Europe/Paris"
-export COMPUTER_OWNER_NAME="yourName"
-export COMPUTER_AUTHORIZED_SSH_PUBKEYS=( "ssh-ed25519 AAAAoefzefpoipoeCEZJCPEACPAcjapjcpajepcjAPJECJPEJAPJAZ yours@yourdomain.com" )
-
-## Network settings
-export NETWORK_SUBNET="192.168.1.0/24"
-export NETWORK_ROUTER_IP="192.168.1.1"
-export HOME_SERVER_IP="192.168.1.5"
\ No newline at end of file
diff --git a/configurator/bridge.py b/configurator/bridge.py
new file mode 100644
index 0000000..91d72db
--- /dev/null
+++ b/configurator/bridge.py
@@ -0,0 +1,39 @@
+import http.server
+import json
+import osdf81ec3e7f29dfdb84a3a7eec1ea38348003b908
+
+class BridgeHandler(http.server.SimpleHTTPRequestHandler):
+    def do_GET(self):
+        if self.path == '/logs':
+            self.send_response(200)
+            self.send_header('Content-type', 'text/plain')
+            self.send_header('Access-Control-Allow-Origin', '*')
+            self.end_headers()
+            if os.path.exists('deploy.log'):
+                with open('deploy.log', 'r') as f:
+                    lines = f.readlines()
+                    self.wfile.write("".join(lines[-20:]).encode())
+            return
+        return http.server.SimpleHTTPRequestHandler.do_GET(self)
+
+    def do_POST(self):
+        content_length = int(self.headers['Content-Length'])
+        post_data = self.rfile.read(content_length)
+        
+        if self.path == '/discovery':
+            with open("live_settings.json", "wb") as f:
+                f.write(post_data)
+            self.send_response(200)
+            self.end_headers()
+            # Signal Bash that discovery data is ready
+            with open(".discovery_ready", "w") as f: f.write("1")
+
+        elif self.path == '/deploy':
+            with open("../numbus.yaml", "wb") as f:
+                f.write(post_data)
+            self.send_response(200)
+            self.end_headers()
+            with open(".deploy_signal", "w") as f: f.write("1")
+
+os.chdir("configurator")
+http.server.HTTPServer(('localhost', 49151), BridgeHandler).serve_forever()
\ No newline at end of file
diff --git a/deploy.sh b/deploy.sh
index f9a8cd9..0ea3ed6 100644
--- a/deploy.sh
+++ b/deploy.sh
@@ -2,112 +2,64 @@
 #!nix-shell -i bash -p bash nano coreutils gnused gum fastfetch xkcdpass sops ssh-to-age age sshpass envsubst pciutils usbutils mosquitto curl jq yq python3
 
 launch_configurator() {
-  local PORT=8088
+  local PORT=49151
   local CONFIG_FILE="numbus.yaml"
   local BRIDGE_SCRIPT="configurator/bridge.py"
 
-  # Create a more robust Python Bridge
-  cat << EOF > "${BRIDGE_SCRIPT}"
-import http.server
-import json
-import os
-
-class BridgeHandler(http.server.SimpleHTTPRequestHandler):
-    def do_GET(self):
-        if self.path == '/logs':
-            self.send_response(200)
-            self.send_header('Content-type', 'text/plain')
-            self.send_header('Access-Control-Allow-Origin', '*')
-            self.end_headers()
-            if os.path.exists('deploy.log'):
-                with open('deploy.log', 'r') as f:
-                    lines = f.readlines()
-                    self.wfile.write("".join(lines[-20:]).encode())
-            return
-        return http.server.SimpleHTTPRequestHandler.do_GET(self)
-
-    def do_POST(self):
-        content_length = int(self.headers['Content-Length'])
-        post_data = self.rfile.read(content_length)
-        
-        if self.path == '/discovery':
-            with open("live_settings.json", "wb") as f:
-                f.write(post_data)
-            self.send_response(200)
-            self.end_headers()
-            # Signal Bash that discovery data is ready
-            with open(".discovery_ready", "w") as f: f.write("1")
-
-        elif self.path == '/deploy':
-            with open("${CONFIG_FILE}", "wb") as f:
-                f.write(post_data)
-            self.send_response(200)
-            self.end_headers()
-            with open(".deploy_signal", "w") as f: f.write("1")
-
-os.chdir("configurator")
-http.server.HTTPServer(('localhost', ${PORT}), BridgeHandler).serve_forever()
-EOF
-
   # Cleanup old signals
-  rm -f configurator/.discovery_ready configurator/.deploy_signal configurator/live_settings.json configurator/hardware.json
+  rm -${FILES_RM_FLAGS} configurator/.discovery_ready configurator/.deploy_signal configurator/live_settings.json configurator/hardware.json
 
-  echo -e "🚀 Launching Numbus Configurator..."
+  echo -e "\n 🚀 Launching Numbus Configurator..."
   python3 "${BRIDGE_SCRIPT}" > /dev/null 2>&1 &
   BRIDGE_PID=$!
 
-  echo -e "➡️  Open your browser at: $(gum style --foreground 212 "http://localhost:${PORT}")"
+  echo -e "\n ➡️  Open your browser at: $(gum style --foreground 212 "http://localhost:${PORT}")"
   xdg-open "http://localhost:${PORT}" 2>/dev/null || open "http://localhost:${PORT}" 2>/dev/null || true
 }
 
 hierarchy_preparation() {
-  if [[ -e final-nix-config/etc/nixos/configuration.nix || -e final-nix-config/home/numbus-admin/.ssh/id_ed25519 ]]; then
-    gum confirm "It seems you have already run this script. Previously generated files need to be cleaned up. Proceed?" || { echo -e "\n\n❌ Aborting."; exit 1; }
-    rm -rf final-nix-config/etc/nixos/*
-    rm -f final-nix-config/var/lib/sops-nix/*
-    rm -f final-nix-config/etc/secrets/disks/*
-    rm -f final-nix-config/var/lib/numbus-server/*
-    rm -f final-nix-config/home/numbus-admin/.ssh/*
+  if [[ -e configuration/etc/nixos/configuration.nix || -e configuration/home/numbus-admin/.ssh/id_ed25519 ]]; then
+    mkdir -${MKDIR_FLAGS} .trash/
+    echo " ⚠️ It seems you have already run this script. Previously generated files need to be cleaned up."
+    mv -${MV_FLAGS} configuration/{.,}* .trash/"$(date)_cleanup"/
+    echo " ✅ Your files have been moved to the .trash directory. You can retrieve them there if needed."
   fi
 
-  mkdir -p final-nix-config/etc/
-  mkdir -p final-nix-config/etc/nixos/
-  mkdir -p final-nix-config/etc/secrets/
-  mkdir -p final-nix-config/etc/secrets/disks/
-  mkdir -p final-nix-config/etc/nixos/secrets/
-  mkdir -p final-nix-config/var/
-  mkdir -p final-nix-config/var/lib/
-  mkdir -p final-nix-config/var/lib/sops-nix/
-  mkdir -p final-nix-config/var/lib/numbus-server/
+  mkdir -${MKDIR_FLAGS} configuration/home/numbus-admin/.ssh/
+  mkdir -${MKDIR_FLAGS} configuration/etc/nixos/secrets/podman
+  mkdir -${MKDIR_FLAGS} configuration/etc/nixos/secrets/system
+  mkdir -${MKDIR_FLAGS} configuration/etc/nixos/secrets/disks
+  mkdir -${MKDIR_FLAGS} configuration/var/lib/sops-nix/
+  mkdir -${MKDIR_FLAGS} configuration/var/lib/numbus-server/
 
-  echo -e "\n✅ Writing configuration..."
-  cp -${FILES_COPY_FLAGS} templates/nix-config/configuration.nix final-nix-config/etc/nixos/configuration.nix
-  cp -${FILES_COPY_FLAGS} templates/nix-config/flake.nix final-nix-config/etc/nixos/flake.nix
-  export CONFIGURATION_PATH="final-nix-config/etc/nixos/configuration.nix"
+  mkdir -${MKDIR_FLAGS} to-keep-preciously/
 }
 
 setup_ssh() {
-  mkdir -p final-nix-config/
-  mkdir -p final-nix-config/home/
-  mkdir -p final-nix-config/home/numbus-admin/
-  mkdir -p final-nix-config/home/numbus-admin/.ssh/
+  if [[ ${DEBUG} -eq 1 ]]; then
+  echo -e "\n ✅ Generating new SSH key for numbus-admin..."
+  fi
 
-  echo -e "\n\n✅ Generating new SSH key for numbus-admin..."
-  chmod 700 final-nix-config/home/numbus-admin/.ssh/
-  ssh-keygen -t "ed25519" -C "numbus-admin@numbus-server" -f "final-nix-config/home/numbus-admin/.ssh/id_ed25519" -N "" -q
+  chmod 700 configuration/home/numbus-admin/.ssh/
+  ssh-keygen -t "ed25519" -C "numbus-admin@numbus-server" -f "configuration/home/numbus-admin/.ssh/id_ed25519" -N "" -q
 
-  echo -e "\n\n➡️  Copying SSH key to target host '${TARGET_USER}@${LIVE_TARGET_IP}'..."
-  if sshpass -p "${LIVE_TARGET_PASSWD}" ssh-copy-id -o StrictHostKeyChecking=no -i "final-nix-config/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}"; then
-    echo -e "\n✅ SSH key copied successfully"
+  if [[ ${DEBUG} -eq 1 ]]; then
+  echo -e "\n ➡️  Copying SSH key to target host '${TARGET_USER}@${LIVE_TARGET_IP}'..."
+  fi
+
+  if sshpass -p "${LIVE_TARGET_PASSWD}" ssh-copy-id -o StrictHostKeyChecking=no -i "configuration/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}"; then
+    if [[ ${DEBUG} -eq 1 ]]; then
+    echo -e "\n ✅ SSH key copied successfully"
+    fi
   else
-    echo -e "\n❌ Failed to copy SSH key. Please check the host IP and password."
+    echo -e "\n ❌ Failed to copy SSH key. Please check the host IP and password."
     exit 1
   fi
 }
 
 ssh_to_host() {
   local COMMAND="${1}"
-  ssh -i "final-nix-config/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}" "${COMMAND}"
+  ssh -i "configuration/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}" "${COMMAND}"
 }
 
 hardware_detection() {
@@ -117,6 +69,7 @@ hardware_detection() {
   ssh_to_host 'bash -s' << SSHEND
 TARGET_GRAPHICS="false"
 TARGET_GRAPHICS_BRAND=()
+
 for brand in Intel AMD NVIDIA; do
   if lspci -nn 2>/dev/null | grep -i "vga" | grep -iq "\${brand}"; then
     TARGET_GRAPHICS="true"
@@ -162,7 +115,7 @@ for DISK in \$(lsblk -x SIZE -d -n -e 7,11 -o NAME); do
   fi
 
   # Disk health
-  if [[ \$(echo "$LIVE_TARGET_PASSWD" | sudo -S smartctl -H /dev/\$DISK 2>/dev/null | grep 'self-assessment' | awk '{print \$6}') == "PASSED" ]]; then
+  if [[ \$(echo "${LIVE_TARGET_PASSWD}" | sudo -S smartctl -H /dev/\$DISK 2>/dev/null | grep 'self-assessment' | awk '{print \$6}') == "PASSED" ]]; then
     DISK_HEALTH+=("PASSED")
   else
     DISK_HEALTH+=("N/A")
@@ -173,42 +126,34 @@ for DISK in \$(lsblk -x SIZE -d -n -e 7,11 -o NAME); do
 
 done
 
-# Build organized JSON output for yq
-cat << EOF > "\${TMPFILE}"
-{
-  "graphics": {
-    "enabled": \${TARGET_GRAPHICS},
-    "brands": [ \$(printf '"%s",' "\${TARGET_GRAPHICS_BRAND[@]}" | sed 's/,\$//') ],
-    "renderer": \${TARGET_GRAPHICS_RENDERER}
-  },
-  "tpu": {
-    "usb": \${TARGET_USB_CORAL},
-    "pcie": \${TARGET_PCIE_CORAL}
-  },
-  "tpm": {
-    "enabled": \${TARGET_TPM},
-    "version": "\${TARGET_TPM_VERSION}"
-  },
-  "zigbee": {
-    "device": "\${TARGET_ZIGBEE_DEVICE}"
-  },
-  "network": {
-    "interface": "\${TARGET_INTERFACE}"
-  },
-  "disks": [
-\$(
-  count=\${#DISK_NAME[@]}
-  for i in "\${!DISK_NAME[@]}"; do
-    echo "    {\"name\": \"\${DISK_NAME[\$i]}\", \"path\": \"\${DISK_DEVPATH[\$i]}\", \"type\": \"\${DISK_TYPE[\$i]}\", \"health\": \"\${DISK_HEALTH[\$i]}\", \"id\": \"\${DISK_ID[\$i]}\", \"size\": \"\${DISK_SIZE[\$i]}\"}\$( [[ \$i -lt \$((count-1)) ]] && echo ',' )"
-  done
-)
-  ]
-}
-EOF
+disk_args=()
+for i in "\${!DISK_NAME[@]}"; do
+  disk_args+=("\${DISK_NAME[\$i]}" "\${DISK_DEVPATH[\$i]}" "\${DISK_TYPE[\$i]}" "\${DISK_HEALTH[\$i]}" "\${DISK_ID[\$i]}" "\${DISK_SIZE[\$i]}")
+done
+
+nix-shell -p jq --run "jq -n \\
+  --argjson graphics_enabled \"\$TARGET_GRAPHICS\" \\
+  --argjson graphics_brands \"\$(nix-shell -p jq --run \"jq -n '\\\$ARGS.positional' --args \\\"\${TARGET_GRAPHICS_BRAND[@]}\\\"\" jq)\" \\
+  --argjson graphics_renderer \"\$TARGET_GRAPHICS_RENDERER\" \\
+  --argjson tpu_usb \"\$TARGET_USB_CORAL\" \\
+  --argjson tpu_pcie \"\$TARGET_PCIE_CORAL\" \\
+  --argjson tpm_enabled \"\$TARGET_TPM\" \\
+  --arg tpm_version \"\$TARGET_TPM_VERSION\" \\
+  --arg zigbee_device \"\$TARGET_ZIGBEE_DEVICE\" \\
+  --arg interface \"\$TARGET_INTERFACE\" \\
+  --argjson disks \"\$(nix-shell -p jq --run \"jq -n '[range(\\\$ARGS.positional | length / 6) as \\\$i | {name: \\\$ARGS.positional[\\\$i*6], path: \\\$ARGS.positional[\\\$i*6+1], type: \\\$ARGS.positional[\\\$i*6+2], health: \\\$ARGS.positional[\\\$i*6+3], id: \\\$ARGS.positional[\\\$i*6+4], size: \\\$ARGS.positional[\\\$i*6+5]}]' --args \\\"\${disk_args[@]}\\\"\" jq)\" \\
+  '{
+    graphics: { enabled: \$graphics_enabled, brands: \$graphics_brands, renderer: \$graphics_renderer },
+    tpu: { usb: \$tpu_usb, pcie: \$tpu_pcie },
+    tpm: { enabled: \$tpm_enabled, version: \$tpm_version },
+    zigbee: { device: \$zigbee_device },
+    network: { interface: \$interface },
+    disks: \$disks
+  }'" > "${TMPFILE}"
 SSHEND
   ### Get hardware information <--
 
-  scp -i "final-nix-config/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}":"${TMPFILE}" "hardware.json" &> /dev/null
+  scp -i "configuration/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}":"${TMPFILE}" "hardware.json" &> /dev/null
 
   # Create YAML for NixOS and JSON for the Configurator Website
   yq -P '.' hardware.json > hardware.yaml
@@ -216,7 +161,7 @@ SSHEND
   rm hardware.json
 
   ### --> Generate hardware-configuration.nix
-  if ssh_to_host "sudo nixos-generate-config --no-filesystems --show-hardware-config" > final-nix-config/etc/nixos/hardware-configuration.nix; then
+  if ssh_to_host "sudo nixos-generate-config --no-filesystems --show-hardware-config" > configuration/etc/nixos/hardware-configuration.nix; then
     echo -e "\n✅ Hardware configuration generated"
   else
     echo -e "\n❌ Failed to generate hardware configuration"
@@ -429,8 +374,8 @@ disk_config_generation() {
 keys_generation() {
   for i in $(seq 1 "${#BOOT_DISKS_ID_LIST[@]}"); do
     PASS="$(xkcdpass)"
-    echo -n "$PASS" > "final-nix-config/etc/secrets/disks/boot-${i}"
-    chmod 600 "final-nix-config/etc/secrets/disks/boot-${i}"
+    echo -n "$PASS" > "configuration/etc/secrets/disks/boot-${i}"
+    chmod 600 "configuration/etc/secrets/disks/boot-${i}"
     ssh_to_host 'bash -s' << EOF
 echo "$LIVE_TARGET_PASSWD" | sudo -S mkdir -p /etc/secrets/disks/
 echo "$LIVE_TARGET_PASSWD" | sudo -S bash -c "printf '%s' '$PASS' > /etc/secrets/disks/boot-${i}"
@@ -439,8 +384,8 @@ EOF
   done
   for i in $(seq 1 "$CONTENT_DISK_NUMBER"); do
     PASS="$(xkcdpass)"
-    echo -n "$PASS" > "final-nix-config/etc/secrets/disks/content-${i}"
-    chmod 600 "final-nix-config/etc/secrets/disks/content-${i}"
+    echo -n "$PASS" > "configuration/etc/secrets/disks/content-${i}"
+    chmod 600 "configuration/etc/secrets/disks/content-${i}"
     ssh_to_host 'bash -s' << EOF
 echo "$LIVE_TARGET_PASSWD" | sudo -S bash -c "printf '%s' '$PASS' > /etc/secrets/disks/content-${i}"
 echo "$LIVE_TARGET_PASSWD" | sudo -S chmod 600 /etc/secrets/disks/content-${i}
@@ -448,8 +393,8 @@ EOF
   done
   for i in $(seq 1 "$PARITY_DISK_NUMBER"); do
     PASS="$(xkcdpass)"
-    echo -n "$PASS" > "final-nix-config/etc/secrets/disks/parity-${i}"
-    chmod 600 "final-nix-config/etc/secrets/disks/parity-${i}"
+    echo -n "$PASS" > "configuration/etc/secrets/disks/parity-${i}"
+    chmod 600 "configuration/etc/secrets/disks/parity-${i}"
     ssh_to_host 'bash -s' << EOF
 echo "$LIVE_TARGET_PASSWD" | sudo -S bash -c "printf '%s' '$PASS' > /etc/secrets/disks/parity-${i}"
 echo "$LIVE_TARGET_PASSWD" | sudo -S chmod 600 /etc/secrets/disks/parity-${i}
@@ -467,18 +412,18 @@ EOF
   export SSH_KEYS_FORMATTED
 
   echo -e "\n ✅ Generating sops-nix keys..."
-  ssh-to-age -private-key -i final-nix-config/home/numbus-admin/.ssh/id_ed25519 > final-nix-config/var/lib/sops-nix/key.txt
-  export SOPS_PUBLIC_KEY=$(age-keygen -y final-nix-config/var/lib/sops-nix/key.txt)
+  ssh-to-age -private-key -i configuration/home/numbus-admin/.ssh/id_ed25519 > configuration/var/lib/sops-nix/key.txt
+  export SOPS_PUBLIC_KEY=$(age-keygen -y configuration/var/lib/sops-nix/key.txt)
 
   echo -e "\n ✅ Generating sops-nix configuration files..."
-  envsubst < templates/nix-config/sops-nix/.sops.yaml > final-nix-config/etc/nixos/.sops.yaml
+  envsubst < templates/nix-config/sops-nix/.sops.yaml > configuration/etc/nixos/.sops.yaml
 
   echo -e "\n ✅ Encrypting secrets in the correct file..."
   envsubst < "templates/nix-config/sops-nix/secrets.yaml" \
     | sops encrypt --filename-override secrets.yaml \
     --input-type yaml --output-type yaml \
     --age $SOPS_PUBLIC_KEY \
-    --output final-nix-config/etc/nixos/secrets/secrets.yaml
+    --output configuration/etc/nixos/secrets/secrets.yaml
 }
 
 sum_up() {
@@ -538,18 +483,18 @@ Please save the following secrets to a secure place (i.e. your local password ma
 
 **Boot Disks (${#BOOT_DISKS_ID_LIST[@]}) :**
 
-* **Disk 1 Secret Key :** \`$( cat final-nix-config/etc/secrets/disks/boot-1 )\`
-$( [[ -n "${BOOT_DISKS_ID_LIST[1]:-}" ]] && echo "* **Disk 2 secret key :** \`$( cat final-nix-config/etc/secrets/disks/boot-2 )\`" )
+* **Disk 1 Secret Key :** \`$( cat configuration/etc/secrets/disks/boot-1 )\`
+$( [[ -n "${BOOT_DISKS_ID_LIST[1]:-}" ]] && echo "* **Disk 2 secret key :** \`$( cat configuration/etc/secrets/disks/boot-2 )\`" )
 
 **Data Disks ($CONTENT_DISK_NUMBER):**
 
 $( [[ $CONTENT_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" )
-$( [[ $CONTENT_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq 0 $(($CONTENT_DISK_NUMBER - 1))); do echo "* **Disk ${j} Secret Key :** \`$( cat final-nix-config/etc/secrets/disks/content-${j} )\`" && j=$((j + 1)); done )
+$( [[ $CONTENT_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq 0 $(($CONTENT_DISK_NUMBER - 1))); do echo "* **Disk ${j} Secret Key :** \`$( cat configuration/etc/secrets/disks/content-${j} )\`" && j=$((j + 1)); done )
 
 **Parity Disks ($PARITY_DISK_NUMBER):**
 
 $( [[ $PARITY_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" )
-$( [[ $PARITY_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq $CONTENT_DISK_NUMBER $((${#DATA_DISKS_ID[@]} - 1))); do echo "* **Disk ${j} Secret Key :** \`$( cat final-nix-config/etc/secrets/disks/parity-${j} )\`" && j=$((j + 1)); done )
+$( [[ $PARITY_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq $CONTENT_DISK_NUMBER $((${#DATA_DISKS_ID[@]} - 1))); do echo "* **Disk ${j} Secret Key :** \`$( cat configuration/etc/secrets/disks/parity-${j} )\`" && j=$((j + 1)); done )
 
 EOF
 )
@@ -559,7 +504,7 @@ EOF
 
   gum confirm "➡️ Would you like to manually edit the configuration (⚠️ advanced users only)" || { echo -e "\n\n✅ continuing with the installation..."; return 0; }
 
-  nano final-nix-config/etc/nixos/configuration.nix
+  nano configuration/etc/nixos/configuration.nix
 }
 
 cloudflare_dns_setup() {
@@ -664,9 +609,9 @@ cloudflare_dns_setup() {
 }
 
 export_configuration() {
-  cp deploy.conf final-nix-config/var/lib/numbus-server/numbus-server.conf
+  cp -${FILES_CP_FLAGS} deploy.conf configuration/var/lib/numbus-server/numbus-server.conf
 
-  local CONFIG_EXPORT_DIR="final-nix-config/var/lib/numbus-server/"
+  local CONFIG_EXPORT_DIR="configuration/var/lib/numbus-server/"
   local CONFIG_EXPORT_FILE="${CONFIG_EXPORT_DIR}/numbus-server.conf"
 
   echo "export TARGET_INTERFACE=\"${TARGET_INTERFACE}\""              >> $CONFIG_EXPORT_FILE
@@ -685,15 +630,15 @@ export_configuration() {
 }
 
 deploy() {
-  git -C . add -f "final-nix-config/"
+  git -C . add -f "configuration/"
   git -C . add -f "templates/"
   git -C . add -f "deploy.conf"
 
   echo -e "\n\n🔄 Deploying to the remote server..."
-  nix flake update --flake ./final-nix-config/etc/nixos
+  nix flake update --flake ./configuration/etc/nixos
   nix run github:nix-community/nixos-anywhere -- \
-    --flake ./final-nix-config/etc/nixos#numbus-server \
-    --extra-files final-nix-config \
+    --flake ./configuration/etc/nixos#numbus-server \
+    --extra-files configuration \
     --chown "/home/numbus-admin/" 1000:1000 \
     --target-host ${TARGET_USER}@${LIVE_TARGET_IP}
 
@@ -741,7 +686,7 @@ postrun_action() {
                                       Do you want to enable automatic disk decryption on boot ?"
 
     if gum confirm "➡️  I understand, 'yes' to proceed."; then
-      sshpass -p "${LIVE_TARGET_PASSWD}" ssh -i "final-nix-config/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}" 'bash -s' << EOF
+      sshpass -p "${LIVE_TARGET_PASSWD}" ssh -i "configuration/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}" 'bash -s' << EOF
 echo "Enrolling boot disk key to TPM..."
 
 BOOT_DISKS_NAME=(${BOOT_DISKS_NAME[@]})
@@ -789,7 +734,7 @@ nix_update() {
   echo -e "\n\n🔄 Updating NixOS on the remote server..."
 
   nixos-rebuild --target-host numbus-admin@${LIVE_TARGET_IP} \
-    --use-remote-sudo switch --flake final-nix-config/etc/nixos#numbus-server
+    --use-remote-sudo switch --flake configuration/etc/nixos#numbus-server
 }
 
 set -euo pipefail
@@ -820,28 +765,61 @@ sleep 1
 
 # --- MAIN ORCHESTRATION LOOP ---
 
+# 0. TESTING ONLY
+DEBUG=1
+
+if [[ ${DEBUG-0} -eq 1 ]]; then
+  FILES_CP_FLAGS="vau"
+  FILES_RM_FLAGS="vf"
+  DIR_RM_FLAGS="rvf"
+  MKDIR_FLAGS="pv"
+  MV_FLAGS="vu"
+else
+  DEBUG=0
+  FILES_CP_FLAGS="au"
+  FILES_RM_FLAGS="f"
+  DIR_RM_FLAGS="rf"
+  MKDIR_FLAGS="p"
+  MV_FLAGS="u"
+fi
+
 # 1. Initialize the UI and Bridge
 launch_configurator
 
-# 2. Wait for Live Credentials from the Website
-echo -ne "⏳ Waiting for device credentials from web UI..."
+# 2. Prepare the directories
+hierarchy_preparation
+
+# 3. Wait for Live Credentials from the Website
+if [[ ${DEBUG} -eq 1 ]]; then
+  echo -e "\n ⏳ Waiting for device credentials from web UI..."
+fi
+
 while [ ! -f configurator/.discovery_ready ]; do
-    sleep 1
+  sleep 2
 done
-echo -e "\n✅ Credentials received."
+
+if [[ ${DEBUG} -eq 1 ]]; then
+echo -e "\n ✅ Credentials received."
+fi
 
 # 3. Load Credentials and run Discovery
+DEVICE_TYPE=$(jq -r '.device_type' configurator/live_settings.json)
 LIVE_TARGET_IP=$(jq -r '.live_ip' configurator/live_settings.json)
 LIVE_TARGET_PASSWD=$(jq -r '.live_password' configurator/live_settings.json)
 TARGET_USER="nixos" # Default for NixOS ISO
 
 setup_ssh
-hierarchy_preparation
 hardware_detection
-echo -e "✅ Discovery complete. Hardware data sent to Configurator."
+
+if [[ ${DEBUG} -eq 1 ]]; then
+echo -e "\n ✅ Discovery complete. Hardware data sent to Configurator."
+fi
 
 # 4. Wait for Final Configuration Submission
-echo -ne "⏳ Waiting for final configuration deployment signal..."
+if [[ ${DEBUG} -eq 1 ]]; then
+echo -e "\n ⏳ Waiting for final configuration deployment signal..."
+fi
+
 while [ ! -f configurator/.deploy_signal ]; do
     sleep 1
 done

From c42c288c6220af551adc605078f55a672894d264 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Sun, 29 Mar 2026 12:30:38 +0200
Subject: [PATCH 17/43] Added trap exit to kill the python process

---
 deploy.sh | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/deploy.sh b/deploy.sh
index 0ea3ed6..dae1310 100644
--- a/deploy.sh
+++ b/deploy.sh
@@ -11,7 +11,7 @@ launch_configurator() {
 
   echo -e "\n 🚀 Launching Numbus Configurator..."
   python3 "${BRIDGE_SCRIPT}" > /dev/null 2>&1 &
-  BRIDGE_PID=$!
+  export BRIDGE_PID=$!
 
   echo -e "\n ➡️  Open your browser at: $(gum style --foreground 212 "http://localhost:${PORT}")"
   xdg-open "http://localhost:${PORT}" 2>/dev/null || open "http://localhost:${PORT}" 2>/dev/null || true
@@ -737,6 +737,10 @@ nix_update() {
     --use-remote-sudo switch --flake configuration/etc/nixos#numbus-server
 }
 
+cleanup() {
+  kill ${BRIDGE_PID}
+}
+
 set -euo pipefail
 
 clear
@@ -763,6 +767,8 @@ echo "
 
 sleep 1
 
+trap cleanup EXIT
+
 # --- MAIN ORCHESTRATION LOOP ---
 
 # 0. TESTING ONLY

From a2c98d9ccf2402ae676247562c0540e18a235ca2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Sun, 29 Mar 2026 12:50:31 +0200
Subject: [PATCH 18/43] Changed port

---
 configurator/bridge.py | 2 +-
 deploy.sh              | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/configurator/bridge.py b/configurator/bridge.py
index 91d72db..a3685f4 100644
--- a/configurator/bridge.py
+++ b/configurator/bridge.py
@@ -36,4 +36,4 @@ class BridgeHandler(http.server.SimpleHTTPRequestHandler):
             with open(".deploy_signal", "w") as f: f.write("1")
 
 os.chdir("configurator")
-http.server.HTTPServer(('localhost', 49151), BridgeHandler).serve_forever()
\ No newline at end of file
+http.server.HTTPServer(('localhost', 8088), BridgeHandler).serve_forever()
\ No newline at end of file
diff --git a/deploy.sh b/deploy.sh
index dae1310..af5c3f4 100644
--- a/deploy.sh
+++ b/deploy.sh
@@ -2,7 +2,7 @@
 #!nix-shell -i bash -p bash nano coreutils gnused gum fastfetch xkcdpass sops ssh-to-age age sshpass envsubst pciutils usbutils mosquitto curl jq yq python3
 
 launch_configurator() {
-  local PORT=49151
+  local PORT=8088
   local CONFIG_FILE="numbus.yaml"
   local BRIDGE_SCRIPT="configurator/bridge.py"
 

From 06f299727c2171cacec681e3b70eaf81ef19a375 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Sun, 29 Mar 2026 12:55:01 +0200
Subject: [PATCH 19/43] Fixed typo

---
 configurator/bridge.py | 2 +-
 deploy.sh              | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/configurator/bridge.py b/configurator/bridge.py
index a3685f4..52133a3 100644
--- a/configurator/bridge.py
+++ b/configurator/bridge.py
@@ -1,6 +1,6 @@
 import http.server
 import json
-import osdf81ec3e7f29dfdb84a3a7eec1ea38348003b908
+import os
 
 class BridgeHandler(http.server.SimpleHTTPRequestHandler):
     def do_GET(self):
diff --git a/deploy.sh b/deploy.sh
index af5c3f4..1670989 100644
--- a/deploy.sh
+++ b/deploy.sh
@@ -809,7 +809,7 @@ echo -e "\n ✅ Credentials received."
 fi
 
 # 3. Load Credentials and run Discovery
-DEVICE_TYPE=$(jq -r '.device_type' configurator/live_settings.json)
+DEVICE_TYPE=$(jq -r '.device' configurator/live_settings.json)
 LIVE_TARGET_IP=$(jq -r '.live_ip' configurator/live_settings.json)
 LIVE_TARGET_PASSWD=$(jq -r '.live_password' configurator/live_settings.json)
 TARGET_USER="nixos" # Default for NixOS ISO

From d857e0d4ac99be0c4852926da728df6ba8e1bc43 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Sun, 29 Mar 2026 13:42:32 +0200
Subject: [PATCH 20/43] Get JSON export to work

---
 deploy.sh | 104 ++++++++++++++++++++++++++++++++----------------------
 1 file changed, 62 insertions(+), 42 deletions(-)

diff --git a/deploy.sh b/deploy.sh
index 1670989..eca8517 100644
--- a/deploy.sh
+++ b/deploy.sh
@@ -66,7 +66,7 @@ hardware_detection() {
   ### --> Get hardware information
   local TMPFILE="/tmp/hw_detection.json"
 
-  ssh_to_host 'bash -s' << SSHEND
+  PASS="${LIVE_TARGET_PASSWD}" ssh_to_host "PASS=\"\$PASS\" bash -s" << 'SSHEND'
 TARGET_GRAPHICS="false"
 TARGET_GRAPHICS_BRAND=()
 
@@ -77,79 +77,99 @@ for brand in Intel AMD NVIDIA; do
   fi
 done
 
-ls /dev/dri/ > /dev/null 2>&1 | grep -iq "renderD128" && TARGET_GRAPHICS_RENDERER="true" || TARGET_GRAPHICS_RENDERER="false"
-lsusb > /dev/null 2>&1 | grep -iq "google" && TARGET_USB_CORAL="true" || TARGET_USB_CORAL="false"
-lspci -nn > /dev/null 2>&1 | grep -iq "089a" && TARGET_PCIE_CORAL="true" || TARGET_PCIE_CORAL="false"
-ls /dev/serial/by-id/ > /dev/null 2>&1 | grep -i "zigbee" && TARGET_ZIGBEE_DEVICE=\$(ls /dev/serial/by-id/ > /dev/null 2>&1 | grep -i "zigbee" | head -n 1) || TARGET_ZIGBEE_DEVICE=""
+ls /dev/dri/ 2>/dev/null | grep -iq "renderD128" && TARGET_GRAPHICS_RENDERER="true" || TARGET_GRAPHICS_RENDERER="false"
+lsusb 2>/dev/null | grep -iq "google" && TARGET_USB_CORAL="true" || TARGET_USB_CORAL="false"
+lspci -nn 2>/dev/null | grep -iq "089a" && TARGET_PCIE_CORAL="true" || TARGET_PCIE_CORAL="false"
+TARGET_ZIGBEE_DEVICE=$(ls /dev/serial/by-id/ 2>/dev/null | grep -i "zigbee" | head -n 1 || echo "")
 
-TARGET_INTERFACE=\$(ip -4 route show default | awk '{print \$5}' | head -n1)
+TARGET_INTERFACE=$(ip -4 route show default | awk '{print $5}' | head -n1)
 
 if ls -l /sys/class/tpm/tpm0/ > /dev/null 2>&1; then
   TARGET_TPM="true"
-  TARGET_TPM_VERSION=\$(cat /sys/class/tpm/tpm0/tpm_version_major)
+  TARGET_TPM_VERSION=$(cat /sys/class/tpm/tpm0/tpm_version_major)
 else
   TARGET_TPM="false"
   TARGET_TPM_VERSION="N/A"
 fi
 
-HDD=1
 DISK_DEVPATH=()
 DISK_NAME=()
 DISK_TYPE=()
 DISK_HEALTH=()
 DISK_ID=()
+DISK_SIZE=()
 
-for DISK in \$(lsblk -x SIZE -d -n -e 7,11 -o NAME); do
+for DISK in $(lsblk -x SIZE -d -n -e 7,11 -o NAME); do
 
   # Disk name and simple path
-  DISK_DEVPATH+=("/dev/\$DISK")
-  DISK_NAME+=("\$DISK")
+  DISK_DEVPATH+=("/dev/$DISK")
+  DISK_NAME+=("$DISK")
   # Disk type
-  HDD=\$(cat /sys/block/\$DISK/queue/rotational)
-  TRANSPORT_PROTOCOL=\$(lsblk -x SIZE -d -n -e 7,11 -o TRAN /dev/\$DISK)
-  if [[ "\$DISK" == "nvme*" ]]; then DISK_TYPE+=("NVMe");
-  elif [[ "\$HDD" -eq 1 ]]; then DISK_TYPE+=("HDD");
-  elif [[ "\$TRANSPORT_PROTOCOL" == "usb" ]]; then DISK_TYPE+=("USB");
-  elif [[ "\$HDD" -eq 0 ]]; then DISK_TYPE+=("SSD");
+  ROTATIONAL=$(cat "/sys/block/$DISK/queue/rotational")
+  TRANSPORT=$(lsblk -d -n -o TRAN "/dev/$DISK" 2>/dev/null || echo "sata")
+  if [[ "$DISK" == nvme* ]]; then DISK_TYPE+=("NVMe");
+  elif [[ "$ROTATIONAL" -eq 1 ]]; then DISK_TYPE+=("HDD");
+  elif [[ "$TRANSPORT" == "usb" ]]; then DISK_TYPE+=("USB");
+  elif [[ "$ROTATIONAL" -eq 0 ]]; then DISK_TYPE+=("SSD");
   else DISK_TYPE+=("Other")
   fi
 
   # Disk health
-  if [[ \$(echo "${LIVE_TARGET_PASSWD}" | sudo -S smartctl -H /dev/\$DISK 2>/dev/null | grep 'self-assessment' | awk '{print \$6}') == "PASSED" ]]; then
+  if [[ $(echo "$PASS" | sudo -S smartctl -H "/dev/$DISK" 2>/dev/null | grep 'result:' | awk '{print $NF}') == "PASSED" ]]; then
     DISK_HEALTH+=("PASSED")
   else
     DISK_HEALTH+=("N/A")
   fi
   # Disk ID
-  DISK_ID+=("\$(ls -l /dev/disk/by-id | grep -m1 "../../\$DISK" | awk '{print "/dev/disk/by-id/" \$9}')")
-  DISK_SIZE+=("\$(lsblk -x SIZE -d -n -e 7,11 -o SIZE /dev/\$DISK)")
+  DISK_ID+=("$(ls -l /dev/disk/by-id 2>/dev/null | grep -m1 "../../$DISK" | awk '{print "/dev/disk/by-id/" $9}')")
+  DISK_SIZE+=("$(lsblk -d -n -o SIZE "/dev/$DISK")")
 
 done
 
-disk_args=()
-for i in "\${!DISK_NAME[@]}"; do
-  disk_args+=("\${DISK_NAME[\$i]}" "\${DISK_DEVPATH[\$i]}" "\${DISK_TYPE[\$i]}" "\${DISK_HEALTH[\$i]}" "\${DISK_ID[\$i]}" "\${DISK_SIZE[\$i]}")
+# Prepare disk flat array for jq positional arguments
+DISK_ARGS=()
+for i in "${!DISK_NAME[@]}"; do
+  DISK_ARGS+=("${DISK_NAME[$i]}" "${DISK_DEVPATH[$i]}" "${DISK_TYPE[$i]}" "${DISK_HEALTH[$i]}" "${DISK_ID[$i]}" "${DISK_SIZE[$i]}")
 done
 
-nix-shell -p jq --run "jq -n \\
-  --argjson graphics_enabled \"\$TARGET_GRAPHICS\" \\
-  --argjson graphics_brands \"\$(nix-shell -p jq --run \"jq -n '\\\$ARGS.positional' --args \\\"\${TARGET_GRAPHICS_BRAND[@]}\\\"\" jq)\" \\
-  --argjson graphics_renderer \"\$TARGET_GRAPHICS_RENDERER\" \\
-  --argjson tpu_usb \"\$TARGET_USB_CORAL\" \\
-  --argjson tpu_pcie \"\$TARGET_PCIE_CORAL\" \\
-  --argjson tpm_enabled \"\$TARGET_TPM\" \\
-  --arg tpm_version \"\$TARGET_TPM_VERSION\" \\
-  --arg zigbee_device \"\$TARGET_ZIGBEE_DEVICE\" \\
-  --arg interface \"\$TARGET_INTERFACE\" \\
-  --argjson disks \"\$(nix-shell -p jq --run \"jq -n '[range(\\\$ARGS.positional | length / 6) as \\\$i | {name: \\\$ARGS.positional[\\\$i*6], path: \\\$ARGS.positional[\\\$i*6+1], type: \\\$ARGS.positional[\\\$i*6+2], health: \\\$ARGS.positional[\\\$i*6+3], id: \\\$ARGS.positional[\\\$i*6+4], size: \\\$ARGS.positional[\\\$i*6+5]}]' --args \\\"\${disk_args[@]}\\\"\" jq)\" \\
-  '{
-    graphics: { enabled: \$graphics_enabled, brands: \$graphics_brands, renderer: \$graphics_renderer },
-    tpu: { usb: \$tpu_usb, pcie: \$tpu_pcie },
-    tpm: { enabled: \$tpm_enabled, version: \$tpm_version },
-    zigbee: { device: \$zigbee_device },
-    network: { interface: \$interface },
-    disks: \$disks
-  }'" > "${TMPFILE}"
+# Export scalars to environment so JQ can access them cleanly via 'env'
+export TARGET_GRAPHICS TARGET_GRAPHICS_RENDERER TARGET_USB_CORAL TARGET_PCIE_CORAL TARGET_TPM TARGET_TPM_VERSION TARGET_ZIGBEE_DEVICE TARGET_INTERFACE
+export TARGET_GRAPHICS_BRAND_STR="${TARGET_GRAPHICS_BRAND[*]}"
+
+# Generate JSON using a clean heredoc for the filter to avoid backslash escaping
+nix-shell -p jq --run "jq -n -f /dev/stdin --args \"\${DISK_ARGS[@]}\"" << 'JQ_FILTER' > "$TMPFILE"
+{
+  graphics: {
+    enabled: (env.TARGET_GRAPHICS == "true"),
+    brands: (env.TARGET_GRAPHICS_BRAND_STR | split(" ") | map(select(length > 0))),
+    renderer: (env.TARGET_GRAPHICS_RENDERER == "true")
+  },
+  tpu: {
+    usb: (env.TARGET_USB_CORAL == "true"),
+    pcie: (env.TARGET_PCIE_CORAL == "true")
+  },
+  tpm: {
+    enabled: (env.TARGET_TPM == "true"),
+    version: (env.TARGET_TPM_VERSION | tonumber? // .)
+  },
+  zigbee: {
+    device: env.TARGET_ZIGBEE_DEVICE
+  },
+  network: {
+    interface: env.TARGET_INTERFACE
+  },
+  disks: [
+    $ARGS.positional | range(0; length; 6) as $i | {
+      name: .[$i],
+      path: .[$i+1],
+      type: .[$i+2],
+      health: .[$i+3],
+      id: .[$i+4],
+      size: .[$i+5]
+    }
+  ]
+}
+JQ_FILTER
 SSHEND
   ### Get hardware information <--
 

From eaf8e746a03885c7f69b0ab70c59b37f5ce076c1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Sun, 29 Mar 2026 13:57:00 +0200
Subject: [PATCH 21/43] Get JSON export to work

---
 deploy.sh | 152 ++++++++++++++++++++++++++++--------------------------
 1 file changed, 79 insertions(+), 73 deletions(-)

diff --git a/deploy.sh b/deploy.sh
index eca8517..3440216 100644
--- a/deploy.sh
+++ b/deploy.sh
@@ -63,122 +63,128 @@ ssh_to_host() {
 }
 
 hardware_detection() {
-  ### --> Get hardware information
-  local TMPFILE="/tmp/hw_detection.json"
-
-  PASS="${LIVE_TARGET_PASSWD}" ssh_to_host "PASS=\"\$PASS\" bash -s" << 'SSHEND'
-TARGET_GRAPHICS="false"
-TARGET_GRAPHICS_BRAND=()
+	### --> Get hardware information
+	local TMPFILE="/tmp/nixos-installation-hw-detection"
 
+	ssh_to_host 'bash -s' << SSHEND
 for brand in Intel AMD NVIDIA; do
   if lspci -nn 2>/dev/null | grep -i "vga" | grep -iq "\${brand}"; then
     TARGET_GRAPHICS="true"
     TARGET_GRAPHICS_BRAND+=("\${brand}")
+  else
+    TARGET_GRAPHICS="false"
   fi
 done
 
-ls /dev/dri/ 2>/dev/null | grep -iq "renderD128" && TARGET_GRAPHICS_RENDERER="true" || TARGET_GRAPHICS_RENDERER="false"
-lsusb 2>/dev/null | grep -iq "google" && TARGET_USB_CORAL="true" || TARGET_USB_CORAL="false"
-lspci -nn 2>/dev/null | grep -iq "089a" && TARGET_PCIE_CORAL="true" || TARGET_PCIE_CORAL="false"
-TARGET_ZIGBEE_DEVICE=$(ls /dev/serial/by-id/ 2>/dev/null | grep -i "zigbee" | head -n 1 || echo "")
+ls /dev/dri/ > /dev/null 2>&1 | grep -iq "renderD128" && TARGET_GRAPHICS_RENDERER="true" || TARGET_GRAPHICS_RENDERER="false"
+lsusb > /dev/null 2>&1 | grep -iq "google" && TARGET_USB_CORAL="true" || TARGET_USB_CORAL="false"
+lspci -nn > /dev/null 2>&1 | grep -iq "089a" && TARGET_PCIE_CORAL="true" || TARGET_PCIE_CORAL="false"
+ls /dev/serial/by-id/ > /dev/null 2>&1 | grep -i "zigbee" && TARGET_ZIGBEE_DEVICE=\$(ls /dev/serial/by-id/ > /dev/null 2>&1 | grep -i "zigbee" | head -n 1) || TARGET_ZIGBEE_DEVICE=""
 
-TARGET_INTERFACE=$(ip -4 route show default | awk '{print $5}' | head -n1)
+TARGET_INTERFACE=\$(ip -4 route show default | awk '{print \$5}' | head -n1)
 
 if ls -l /sys/class/tpm/tpm0/ > /dev/null 2>&1; then
   TARGET_TPM="true"
-  TARGET_TPM_VERSION=$(cat /sys/class/tpm/tpm0/tpm_version_major)
+  TARGET_TPM_VERSION=\$(cat /sys/class/tpm/tpm0/tpm_version_major)
 else
   TARGET_TPM="false"
   TARGET_TPM_VERSION="N/A"
 fi
 
+HDD=1
 DISK_DEVPATH=()
 DISK_NAME=()
 DISK_TYPE=()
 DISK_HEALTH=()
 DISK_ID=()
-DISK_SIZE=()
 
-for DISK in $(lsblk -x SIZE -d -n -e 7,11 -o NAME); do
+for DISK in \$(lsblk -x SIZE -d -n -e 7,11 -o NAME); do
 
   # Disk name and simple path
-  DISK_DEVPATH+=("/dev/$DISK")
-  DISK_NAME+=("$DISK")
+  DISK_DEVPATH+=("/dev/\$DISK")
+  DISK_NAME+=("\$DISK")
   # Disk type
-  ROTATIONAL=$(cat "/sys/block/$DISK/queue/rotational")
-  TRANSPORT=$(lsblk -d -n -o TRAN "/dev/$DISK" 2>/dev/null || echo "sata")
-  if [[ "$DISK" == nvme* ]]; then DISK_TYPE+=("NVMe");
-  elif [[ "$ROTATIONAL" -eq 1 ]]; then DISK_TYPE+=("HDD");
-  elif [[ "$TRANSPORT" == "usb" ]]; then DISK_TYPE+=("USB");
-  elif [[ "$ROTATIONAL" -eq 0 ]]; then DISK_TYPE+=("SSD");
+  HDD=\$(cat /sys/block/\$DISK/queue/rotational)
+  TRANSPORT_PROTOCOL=\$(lsblk -x SIZE -d -n -e 7,11 -o TRAN /dev/\$DISK)
+  if [[ "\$DISK" == "nvme*" ]]; then DISK_TYPE+=("NVMe");
+  elif [[ "\$HDD" -eq 1 ]]; then DISK_TYPE+=("HDD");
+  elif [[ "\$TRANSPORT_PROTOCOL" == "usb" ]]; then DISK_TYPE+=("USB");
+  elif [[ "\$HDD" -eq 0 ]]; then DISK_TYPE+=("SSD");
   else DISK_TYPE+=("Other")
   fi
 
   # Disk health
-  if [[ $(echo "$PASS" | sudo -S smartctl -H "/dev/$DISK" 2>/dev/null | grep 'result:' | awk '{print $NF}') == "PASSED" ]]; then
+  if [[ \$(echo "${LIVE_TARGET_PASSWD}" | sudo -S smartctl -H /dev/\$DISK 2>/dev/null | grep 'self-assessment' | awk '{print \$6}') == "PASSED" ]]; then
     DISK_HEALTH+=("PASSED")
   else
     DISK_HEALTH+=("N/A")
   fi
   # Disk ID
-  DISK_ID+=("$(ls -l /dev/disk/by-id 2>/dev/null | grep -m1 "../../$DISK" | awk '{print "/dev/disk/by-id/" $9}')")
-  DISK_SIZE+=("$(lsblk -d -n -o SIZE "/dev/$DISK")")
-
+  DISK_ID+=("\$(ls -l /dev/disk/by-id | grep -m1 "../../\$DISK" | awk '{print "/dev/disk/by-id/" \$9}')")
+  DISK_SIZE+=("\$(lsblk -x SIZE -d -n -e 7,11 -o SIZE /dev/\$DISK)")
 done
 
-# Prepare disk flat array for jq positional arguments
-DISK_ARGS=()
-for i in "${!DISK_NAME[@]}"; do
-  DISK_ARGS+=("${DISK_NAME[$i]}" "${DISK_DEVPATH[$i]}" "${DISK_TYPE[$i]}" "${DISK_HEALTH[$i]}" "${DISK_ID[$i]}" "${DISK_SIZE[$i]}")
+echo "# Hardware detection results on \$(date)" > "${TMPFILE}"
+for var in \
+  TARGET_GRAPHICS \
+  TARGET_GRAPHICS_RENDERER \
+  TARGET_USB_CORAL \
+  TARGET_PCIE_CORAL \
+  TARGET_ZIGBEE_DEVICE \
+  TARGET_INTERFACE \
+  TARGET_TPM \
+  TARGET_TPM_VERSION; do
+  echo "export \${var}=\${!var}" >> "${TMPFILE}"
 done
 
-# Export scalars to environment so JQ can access them cleanly via 'env'
-export TARGET_GRAPHICS TARGET_GRAPHICS_RENDERER TARGET_USB_CORAL TARGET_PCIE_CORAL TARGET_TPM TARGET_TPM_VERSION TARGET_ZIGBEE_DEVICE TARGET_INTERFACE
-export TARGET_GRAPHICS_BRAND_STR="${TARGET_GRAPHICS_BRAND[*]}"
-
-# Generate JSON using a clean heredoc for the filter to avoid backslash escaping
-nix-shell -p jq --run "jq -n -f /dev/stdin --args \"\${DISK_ARGS[@]}\"" << 'JQ_FILTER' > "$TMPFILE"
-{
-  graphics: {
-    enabled: (env.TARGET_GRAPHICS == "true"),
-    brands: (env.TARGET_GRAPHICS_BRAND_STR | split(" ") | map(select(length > 0))),
-    renderer: (env.TARGET_GRAPHICS_RENDERER == "true")
-  },
-  tpu: {
-    usb: (env.TARGET_USB_CORAL == "true"),
-    pcie: (env.TARGET_PCIE_CORAL == "true")
-  },
-  tpm: {
-    enabled: (env.TARGET_TPM == "true"),
-    version: (env.TARGET_TPM_VERSION | tonumber? // .)
-  },
-  zigbee: {
-    device: env.TARGET_ZIGBEE_DEVICE
-  },
-  network: {
-    interface: env.TARGET_INTERFACE
-  },
-  disks: [
-    $ARGS.positional | range(0; length; 6) as $i | {
-      name: .[$i],
-      path: .[$i+1],
-      type: .[$i+2],
-      health: .[$i+3],
-      id: .[$i+4],
-      size: .[$i+5]
-    }
-  ]
-}
-JQ_FILTER
+for var in \
+  TARGET_GRAPHICS_BRAND \
+  DISK_DEVPATH \
+  DISK_NAME \
+  DISK_TYPE \
+  DISK_HEALTH \
+  DISK_ID \
+  DISK_SIZE; do
+  declare -p \${var} | sed 's/^declare /declare -g /' >> "${TMPFILE}"
+done
 SSHEND
   ### Get hardware information <--
 
-  scp -i "configuration/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}":"${TMPFILE}" "hardware.json" &> /dev/null
+  scp -i "configuration/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}":"${TMPFILE}" "${TMPFILE}" &> /dev/null
+  source "${TMPFILE}"
 
-  # Create YAML for NixOS and JSON for the Configurator Website
-  yq -P '.' hardware.json > hardware.yaml
-  yq -o=json '.' hardware.yaml > configurator/hardware.json
-  rm hardware.json
+  ### Transform the bash variables into JSON -->
+  # We prepare the disk data as a flat array to pass to jq
+  local DISK_FLAT_ARRAY=()
+  for i in "${!DISK_NAME[@]}"; do
+    DISK_FLAT_ARRAY+=("${DISK_NAME[$i]}" "${DISK_DEVPATH[$i]}" "${DISK_TYPE[$i]}" "${DISK_HEALTH[$i]}" "${DISK_ID[$i]}" "${DISK_SIZE[$i]}")
+  done
+
+  # Generate the JSON file for the configurator
+  jq -n \
+    --argjson graphics_enabled "${TARGET_GRAPHICS:-false}" \
+    --argjson graphics_renderer "${TARGET_GRAPHICS_RENDERER:-false}" \
+    --argjson tpu_usb "${TARGET_USB_CORAL:-false}" \
+    --argjson tpu_pcie "${TARGET_PCIE_CORAL:-false}" \
+    --argjson tpm_enabled "${TARGET_TPM:-false}" \
+    --arg tpm_version "${TARGET_TPM_VERSION:-N/A}" \
+    --arg zigbee_device "${TARGET_ZIGBEE_DEVICE:-}" \
+    --arg interface "${TARGET_INTERFACE:-}" \
+    --argjson brands "$(jq -n '$ARGS.positional' --args ${TARGET_GRAPHICS_BRAND[@]:-})" \
+    '
+    {
+      graphics: { enabled: $graphics_enabled, brands: $brands, renderer: $graphics_renderer },
+      tpu: { usb: $tpu_usb, pcie: $tpu_pcie },
+      tpm: { enabled: $tpm_enabled, version: $tpm_version },
+      zigbee: { device: $zigbee_device },
+      network: { interface: $interface },
+      disks: [
+        $ARGS.positional | range(0; length; 6) as $i | {
+          name: .[$i], path: .[$i+1], type: .[$i+2], health: .[$i+3], id: .[$i+4], size: .[$i+5]
+        }
+      ]
+    }' --args "${DISK_FLAT_ARRAY[@]:-}" > configurator/hardware.json
+  ### Transform the bash variables into JSON <--
 
   ### --> Generate hardware-configuration.nix
   if ssh_to_host "sudo nixos-generate-config --no-filesystems --show-hardware-config" > configuration/etc/nixos/hardware-configuration.nix; then

From 97795c21607f34512bcce5d30fe44286236c0af8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Sun, 29 Mar 2026 14:13:49 +0200
Subject: [PATCH 22/43] Fixed TARGET_GRAPHICS_BRAND not found

---
 deploy.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/deploy.sh b/deploy.sh
index 3440216..58105b0 100644
--- a/deploy.sh
+++ b/deploy.sh
@@ -67,6 +67,8 @@ hardware_detection() {
 	local TMPFILE="/tmp/nixos-installation-hw-detection"
 
 	ssh_to_host 'bash -s' << SSHEND
+TARGET_GRAPHICS_BRAND=()
+
 for brand in Intel AMD NVIDIA; do
   if lspci -nn 2>/dev/null | grep -i "vga" | grep -iq "\${brand}"; then
     TARGET_GRAPHICS="true"

From 068bf78cfbc9fdc0647dddcbfd3fe858bca96d73 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Sun, 29 Mar 2026 14:27:53 +0200
Subject: [PATCH 23/43] HTML updates

---
 configurator/index.html | 21 ++++++++++++++++-----
 1 file changed, 16 insertions(+), 5 deletions(-)

diff --git a/configurator/index.html b/configurator/index.html
index 4646f78..a44b8a8 100644
--- a/configurator/index.html
+++ b/configurator/index.html
@@ -109,7 +109,7 @@
                             <template x-for="device in deviceTypes" :key="device.id">
                                 <button @click="formData.deviceType = device.id" 
                                         :class="formData.deviceType === device.id ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'"
-                                        class="p-6 border rounded-2xl transition-all text-left group hover:border-fuchsia-500/50 hover:bg-slate-800">
+                                        class="p-6 border rounded-2xl transition-all text-left group hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
                                     <div class="flex items-center gap-4 mb-2">
                                         <div class="w-12 h-12 bg-slate-800 rounded-xl flex items-center justify-center text-2xl group-hover:scale-110 transition-transform">
                                             <i :class="'mdi ' + device.icon" class="text-sky-400"></i>
@@ -431,7 +431,7 @@
                                         class="p-6 border rounded-2xl transition-all text-left group hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
                                     <div class="flex justify-between items-center mb-2">
                                         <div class="flex items-center gap-4">
-                                            <i class="mdi mdi-cloud-outline text-3xl" :class="formData.remote_access.provider === 'netbird-cloud' ? 'text-white' : 'text-sky-400 group-hover:text-white'"></i>
+                                            <img src="https://cdn.jsdelivr.net/gh/selfhst/icons@main/svg/netbird.svg" class="w-8 h-8" alt="NetBird">
                                             <div class="font-bold text-xl" :class="formData.remote_access.provider === 'netbird-cloud' ? 'text-white' : 'text-slate-200 group-hover:text-white'">NetBird Managed</div>
                                         </div>
                                         <span class="text-[10px] bg-green-500/20 text-green-400 px-2 py-1 rounded uppercase font-bold">Recommended for small teams</span>
@@ -541,6 +541,17 @@
                             </div>
                         </div>
 
+                        <div class="space-y-4" x-data="{ help: false }">
+                            <div class="flex items-center gap-2">
+                                <label class="text-lg font-bold text-slate-200">Cloudflare DNS API Token <span class="text-fuchsia-500">*</span></label>
+                                <button @click="help = !help" class="text-slate-500 hover:text-sky-400 transition-colors">
+                                    <i class="mdi mdi-information-outline text-lg"></i>
+                                </button>
+                            </div>
+                            <p x-show="help" class="text-xs text-sky-400 italic mb-2">A security token from Cloudflare that allows Numbus to verify you own the domain and secure it via SSL.</p>
+                            <input type="password" x-model="formData.ssl.cloudflare_token" placeholder="••••••••••••••••" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40">
+                        </div>
+
                         <div class="space-y-4" x-data="{ open: false }">
                             <div class="flex items-center gap-2">
                                 <label class="text-lg font-bold text-slate-200">Authorized SSH Public Keys <span class="text-fuchsia-500">*</span></label>
@@ -943,11 +954,11 @@
                             { label: 'Remote Access', step: 7 },
                             { label: 'Services', step: 8 },
                             { label: 'Security', step: 9 },
-                            { label: 'Users', step: 10 }
+                            { label: 'Users & Groups', step: 10 }
                         ];
                         // Only servers have alerting/mail config usually
                         if (isServer) {
-                            configMinors.push({ label: 'Alerting', step: 11 });
+                            configMinors.push({ label: 'Alerts', step: 11 });
                         }
                     } else {
                         configMinors = [
@@ -1170,7 +1181,7 @@
                         6: () => this.validators.ip(this.formData.network.ip_address) && this.validators.ip(this.formData.network.router_ip),
                         7: () => this.formData.remote_access.provider !== 'netbird-cloud' || (this.formData.remote_access.netbird_token && this.validators.netbirdToken(this.formData.remote_access.netbird_token)),
                         8: () => this.validators.domain(this.formData.ssl.domain),
-                        9: () => this.formData.security.ssh_keys.trim().length > 10 && this.formData.ssl.cloudflare_token.length > 5,
+                        9: () => this.formData.security.ssh_keys.trim().length > 10 && this.formData.ssl.cloudflare_token.length > 10,
                         10: () => !!(this.formData.users[0].username && this.formData.users[0].name && this.validators.email(this.formData.users[0].email)),
                         11: () => this.validators.domain(this.formData.mail.smtp_host) && this.validators.port(this.formData.mail.smtp_port),
                         12: () => this.formData.gitConfig.url.length > 5,

From 19b3588b2b9a6ea8283bccada152aa182e3181db Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Sun, 29 Mar 2026 16:12:49 +0200
Subject: [PATCH 24/43] Added disks selection

---
 configurator/index.html | 168 +++++++++++++++++++++++++++++++++-------
 1 file changed, 141 insertions(+), 27 deletions(-)

diff --git a/configurator/index.html b/configurator/index.html
index a44b8a8..cb5f231 100644
--- a/configurator/index.html
+++ b/configurator/index.html
@@ -385,6 +385,100 @@
                         </div>
                     </div>
 
+                    <!-- Step 12: Disks -->
+                    <div x-show="step === 12" class="space-y-8">
+                        <div class="border-b border-slate-700 pb-4">
+                            <h2 class="text-4xl font-bold text-sky-400">Disks</h2>
+                            <p class="text-slate-400 mt-2 text-lg">Select where NixOS will be installed and where your data will live.</p>
+                        </div>
+
+                        <!-- Critical Warning -->
+                        <div class="bg-red-500/10 border border-red-500/50 p-6 rounded-2xl flex gap-6 items-start">
+                            <div class="bg-red-500 rounded-full p-2 mt-1 shrink-0">
+                                <i class="mdi mdi-alert-octagon text-white text-xl"></i>
+                            </div>
+                            <div>
+                                <h4 class="text-red-400 font-bold text-lg">Data Wipe Warning</h4>
+                                <p class="text-sm text-red-200/80 leading-relaxed">Selecting a disk for Numbus will <strong>completely erase all existing data</strong> on that drive. Ensure you have backed up any important information before proceeding.</p>
+                            </div>
+                        </div>
+
+                        <div class="grid grid-cols-1 md:grid-cols-2 gap-10">
+                            <!-- Boot Selection -->
+                            <div class="space-y-6">
+                                <h3 class="text-xl font-bold text-white flex items-center gap-2">
+                                    <i class="mdi mdi-boot text-sky-400"></i> Boot Disks
+                                </h3>
+                                <p class="text-sm text-slate-400">Choose 1 (Stripe) or 2 (Mirror) disks for the operating system.</p>
+                                
+                                <div class="space-y-3">
+                                    <template x-for="disk in hardwareData.disks" :key="disk.id">
+                                        <button @click="toggleDisk(disk.id, 'boot')"
+                                                x-show="!formData.disks.data.includes(disk.id)"
+                                                :class="formData.disks.boot.includes(disk.id) ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700 opacity-60 hover:opacity-100'"
+                                                class="w-full p-4 border rounded-xl text-left transition-all group">
+                                            <div class="flex justify-between items-center">
+                                                <div class="flex items-center gap-3">
+                                                    <i class="mdi mdi-harddisk text-2xl" :class="formData.disks.boot.includes(disk.id) ? 'text-white' : 'text-slate-500'"></i>
+                                                    <div>
+                                                        <div class="font-bold text-sm" x-text="disk.name"></div>
+                                                        <div class="text-[10px] uppercase text-slate-500 font-bold" x-text="disk.size + ' • ' + disk.type"></div>
+                                                    </div>
+                                                </div>
+                                                <div class="text-right">
+                                                    <div class="text-[10px] font-bold" :class="disk.health === 'PASSED' ? 'text-green-500' : 'text-amber-500'" x-text="'Health: ' + disk.health"></div>
+                                                </div>
+                                            </div>
+                                        </button>
+                                    </template>
+                                </div>
+
+                                <!-- Boot Safety Warning -->
+                                <div x-show="formData.disks.boot.length === 1" class="bg-amber-500/5 border border-amber-500/20 p-4 rounded-xl">
+                                    <p class="text-xs text-amber-200/70"><i class="mdi mdi-shield-alert mr-1"></i> <strong>Striped Config:</strong> Using only one boot disk provides no hardware redundancy. If this drive fails, the system will not boot.</p>
+                                </div>
+                            </div>
+
+                            <!-- Data Selection -->
+                            <div class="space-y-6">
+                                <h3 class="text-xl font-bold text-white flex items-center gap-2">
+                                    <i class="mdi mdi-database text-sky-400"></i> Data Disks
+                                </h3>
+                                <p class="text-sm text-slate-400">Select disks for storage. SnapRAID parity is used if >1 disk is chosen.</p>
+                                
+                                <div class="space-y-3">
+                                    <template x-for="disk in hardwareData.disks" :key="disk.id">
+                                        <button @click="toggleDisk(disk.id, 'data')"
+                                                x-show="!formData.disks.boot.includes(disk.id)"
+                                                :class="formData.disks.data.includes(disk.id) ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700 opacity-60 hover:opacity-100'"
+                                                class="w-full p-4 border rounded-xl text-left transition-all group">
+                                            <div class="flex justify-between items-center">
+                                                <div class="flex items-center gap-3">
+                                                    <i class="mdi mdi-server text-2xl" :class="formData.disks.data.includes(disk.id) ? 'text-white' : 'text-slate-500'"></i>
+                                                    <div>
+                                                        <div class="font-bold text-sm" x-text="disk.name"></div>
+                                                        <div class="text-[10px] uppercase text-slate-500 font-bold" x-text="disk.size + ' • ' + disk.type"></div>
+                                                    </div>
+                                                </div>
+                                                <div class="text-right">
+                                                    <div class="text-[10px] font-bold" :class="disk.health === 'PASSED' ? 'text-green-500' : 'text-amber-500'" x-text="'Health: ' + disk.health"></div>
+                                                </div>
+                                            </div>
+                                        </button>
+                                    </template>
+                                </div>
+
+                                <!-- Data Safety Warning -->
+                                <div x-show="formData.disks.data.length === 1" class="bg-amber-500/5 border border-amber-500/20 p-4 rounded-xl">
+                                    <p class="text-xs text-amber-200/70"><i class="mdi mdi-shield-alert mr-1"></i> <strong>Striped Config:</strong> One data disk provides no parity. Data loss will occur if this drive fails.</p>
+                                </div>
+                                <div x-show="formData.disks.data.length > 1" class="bg-green-500/5 border border-green-500/20 p-4 rounded-xl">
+                                    <p class="text-xs text-green-400/70"><i class="mdi mdi-shield-check mr-1"></i> <strong>SnapRAID Active:</strong> Your data is protected by parity drives.</p>
+                                </div>
+                            </div>
+                        </div>
+                    </div>
+
                     <!-- Step 6: Network -->
                     <div x-show="step === 6" class="space-y-8">
                         <div class="border-b border-slate-700 pb-4">
@@ -672,8 +766,8 @@
                     </div>
                 </div>
 
-                    <!-- Step 12: Non-Interactive Git Config -->
-                    <div x-show="step === 12" class="space-y-8">
+                    <!-- Step 13: Non-Interactive Git Config -->
+                    <div x-show="step === 13" class="space-y-8">
                         <div class="border-b border-slate-700 pb-4">
                             <h2 class="text-4xl font-bold text-sky-400">Configuration Source</h2>
                             <p class="text-slate-400 mt-2 text-lg">Link your Git repository containing the numbus.yaml file.</p>
@@ -696,8 +790,8 @@
                         </div>
                     </div>
 
-                    <!-- Step 13: Setup Type & Restore -->
-                    <div x-show="step === 13" class="space-y-8">
+                    <!-- Step 14: Setup Type & Restore -->
+                    <div x-show="step === 14" class="space-y-8">
                         <div class="border-b border-slate-700 pb-4">
                             <h2 class="text-4xl font-bold text-sky-400">Setup Type</h2>
                             <p class="text-slate-400 mt-2 text-lg">Are we creating a new server instance or restoring an existing one?</p>
@@ -728,8 +822,8 @@
                         </div>
                     </div>
 
-                    <!-- Step 14: Tweaks -->
-                    <div x-show="step === 14" class="space-y-8">
+                    <!-- Step 15: Tweaks -->
+                    <div x-show="step === 15" class="space-y-8">
                         <div class="border-b border-slate-700 pb-4">
                             <h2 class="text-4xl font-bold text-sky-400">Environment Overrides</h2>
                             <p class="text-slate-400 mt-2 text-lg">Apply specific tweaks to this local deployment.</p>
@@ -831,8 +925,8 @@
                         </div>
                     </div>
 
-                    <!-- Step 15: Installation Progress -->
-                    <div x-show="step === 15" class="flex flex-col items-center justify-center py-20 text-center space-y-8">
+                    <!-- Step 16: Installation Progress -->
+                    <div x-show="step === 16" class="flex flex-col items-center justify-center py-20 text-center space-y-8">
                         <div class="w-full max-w-md bg-slate-900 rounded-full h-4 overflow-hidden border border-slate-700">
                             <div class="bg-fuchsia-600 h-full animate-pulse" style="width: 35%"></div>
                         </div>
@@ -851,8 +945,8 @@
                     </div>
                 </div>
 
-                <!-- Final Review (Step 16) -->
-                <div x-show="step === 16" class="space-y-8 text-center py-10">
+                <!-- Final Review (Step 17) -->
+                <div x-show="step === 17" class="space-y-8 text-center py-10">
                     <div class="w-20 h-20 bg-green-500/20 text-green-500 rounded-full flex items-center justify-center mx-auto mb-6">
                         <svg class="w-10 h-10" fill="currentColor" viewBox="0 0 20 20"><path fill-rule="evenodd" d="M16.707 5.293a1 1 0 010 1.414l-8 8a1 1 0 01-1.414 0l-4-4a1 1 0 011.414-1.414L8 12.586l7.293-7.293a1 1 0 011.414 0z" clip-rule="evenodd"></path></svg>
                     </div>
@@ -874,7 +968,7 @@
                     >Back</button>
                     
                     <button 
-                        x-show="step > 0 && step < maxSteps && ![3,4,15].includes(step)" 
+                        x-show="step > 0 && step < maxSteps && ![3,4,16].includes(step)" 
                         @click="if(canGoNext()) step++" 
                         :disabled="!canGoNext()"
                         :class="!canGoNext() ? 'opacity-30 cursor-not-allowed' : ''"
@@ -913,12 +1007,13 @@
         function configurator() {
             return {
                 step: 0,
-                maxSteps: 15,
+                maxSteps: 16,
+                hardwareData: { disks: [] },
                 init() {
                     // Watch the step and reset scroll position of the main content area
                     this.updateNavigation();
                     this.$watch('step', () => {
-                        const container = this.$el.querySelector('.flex-grow.overflow-y-auto');
+                        const container = this.$el.querySelector('.flex-grow');
                         if (container) {
                             container.scrollTop = 0;
                         }
@@ -935,10 +1030,10 @@
                         { label: 'Live Setup', step: 3 },
                         { label: 'Discovery', step: 4 }
                     ]},
-                    { title: 'Server Configuration', steps: [5,6,7,8,9,10,11,12,13,14], minors: [
-                        { label: 'Configuration', step: 12 }
+                    { title: 'Server Configuration', steps: [5,6,7,8,9,10,11,12,13,14,15], minors: [
+                        { label: 'Configuration', step: 13 }
                     ]},
-                    { title: 'Installation', steps: [15], minors: [
+                    { title: 'Installation', steps: [16], minors: [
                         { label: 'Progress', step: 15 }
                     ]}
                 ],
@@ -960,11 +1055,14 @@
                         if (isServer) {
                             configMinors.push({ label: 'Alerts', step: 11 });
                         }
+                        if (isServer) {
+                            configMinors.push({ label: 'Disks', step: 12 });
+                        }
                     } else {
                         configMinors = [
-                            { label: 'Source Repo', step: 12 },
-                            { label: 'Setup Type', step: 13 },
-                            { label: 'Environment Tweaks', step: 14 }
+                            { label: 'Source Repo', step: 13 },
+                            { label: 'Setup Type', step: 14 },
+                            { label: 'Environment Tweaks', step: 15 }
                         ];
                     }
 
@@ -981,13 +1079,13 @@
                         },
                         {
                             title: 'Configuration',
-                            steps: isInteractive ? [5, 6, 7, 8, 9, 10, 11] : [12, 13, 14],
+                            steps: isInteractive ? [5, 6, 7, 8, 9, 10, 11, 12] : [13, 14, 15],
                             minors: configMinors
                         },
                         { 
                             title: 'Finalize', 
-                            steps: [15, 16], 
-                            minors: [{ label: 'Deployment Status', step: 15 }] 
+                            steps: [16, 17], 
+                            minors: [{ label: 'Deployment Status', step: 16 }] 
                         }
                     ];
                 },
@@ -1064,6 +1162,10 @@
                     ssl: {
                         domain: '',
                         cloudflare_token: ''
+                        },
+                        disks: {
+                            boot: [],
+                            data: []
                     },
                     gitConfig: {
                         url: '',
@@ -1090,6 +1192,17 @@
                         }
                     }
                 },
+                toggleDisk(id, category) {
+                    const list = this.formData.disks[category];
+                    const index = list.indexOf(id);
+                    if (index > -1) {
+                        list.splice(index, 1);
+                    } else {
+                        if (category === 'boot' && list.length >= 2) return;
+                        if (category === 'data' && list.length >= 9) return;
+                        list.push(id);
+                    }
+                },
                 addGroup() {
                     const name = this.newGroupName.trim().toLowerCase().replaceAll(' ', '_');
                     if (name && !this.formData.groups[name]) {
@@ -1165,7 +1278,7 @@
                             if (res.ok) {
                                 this.hardwareData = await res.json();
                                 clearInterval(timer);
-                                this.step = (this.formData.deploymentMode === 'interactive') ? 5 : 12;
+                                this.step = (this.formData.deploymentMode === 'interactive') ? 5 : 13;
                             }
                         } catch (e) { /* Bridge might not have written file yet */ }
                     }, 2000);
@@ -1184,10 +1297,11 @@
                         9: () => this.formData.security.ssh_keys.trim().length > 10 && this.formData.ssl.cloudflare_token.length > 10,
                         10: () => !!(this.formData.users[0].username && this.formData.users[0].name && this.validators.email(this.formData.users[0].email)),
                         11: () => this.validators.domain(this.formData.mail.smtp_host) && this.validators.port(this.formData.mail.smtp_port),
-                        12: () => this.formData.gitConfig.url.length > 5,
-                        13: () => !this.formData.restoreConfig.restore_data || (this.formData.restoreConfig.backup_host && this.formData.restoreConfig.setup_key),
-                        14: () => true,
-                        15: () => false
+                        12: () => this.formData.disks.boot.length >= 1,
+                        13: () => this.formData.gitConfig.url.length > 5,
+                        14: () => !this.formData.restoreConfig.restore_data || (this.formData.restoreConfig.backup_host && this.formData.restoreConfig.setup_key),
+                        15: () => true,
+                        16: () => false
                     };
 
                     if (rules[this.step]) {

From d9c983b40195494b41adb327f0b939193efef74a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Sun, 29 Mar 2026 16:22:11 +0200
Subject: [PATCH 25/43] Image and text tweaks.

---
 configurator/index.html | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/configurator/index.html b/configurator/index.html
index cb5f231..1a0ce49 100644
--- a/configurator/index.html
+++ b/configurator/index.html
@@ -449,7 +449,7 @@
                                 <div class="space-y-3">
                                     <template x-for="disk in hardwareData.disks" :key="disk.id">
                                         <button @click="toggleDisk(disk.id, 'data')"
-                                                x-show="!formData.disks.boot.includes(disk.id)"
+                                                df81ec3e7f29dfdb84a3a7eec1ea38348003b908x-show="!formData.disks.boot.includes(disk.id)"
                                                 :class="formData.disks.data.includes(disk.id) ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700 opacity-60 hover:opacity-100'"
                                                 class="w-full p-4 border rounded-xl text-left transition-all group">
                                             <div class="flex justify-between items-center">
@@ -526,7 +526,7 @@
                                     <div class="flex justify-between items-center mb-2">
                                         <div class="flex items-center gap-4">
                                             <img src="https://cdn.jsdelivr.net/gh/selfhst/icons@main/svg/netbird.svg" class="w-8 h-8" alt="NetBird">
-                                            <div class="font-bold text-xl" :class="formData.remote_access.provider === 'netbird-cloud' ? 'text-white' : 'text-slate-200 group-hover:text-white'">NetBird Managed</div>
+                                            <div class="font-bold text-xl" :class="formData.remote_access.provider === 'netbird-cloud' ? 'text-white' : 'text-slate-200 group-hover:text-white'">NetBird Cloud</div>
                                         </div>
                                         <span class="text-[10px] bg-green-500/20 text-green-400 px-2 py-1 rounded uppercase font-bold">Recommended for small teams</span>
                                     </div>
@@ -562,8 +562,8 @@
                                         :class="formData.remote_access.provider === 'netbird-selfhosted' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" 
                                         class="p-6 border rounded-2xl transition-all text-left group hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
                                     <div class="flex items-center gap-3 mb-2">
-                                        <i class="mdi mdi-server-network text-3xl" :class="formData.remote_access.provider === 'netbird-selfhosted' ? 'text-white' : 'text-sky-400 group-hover:text-white'"></i>
-                                        <div class="font-bold text-xl" :class="formData.remote_access.provider === 'netbird-selfhosted' ? 'text-white' : 'text-slate-200 group-hover:text-white'">Managed On-Premise</div>
+                                        <img src="https://cdn.jsdelivr.net/gh/selfhst/icons@main/svg/netbird.svg" class="w-8 h-8" alt="NetBird">
+                                        <div class="font-bold text-xl" :class="formData.remote_access.provider === 'netbird-selfhosted' ? 'text-white' : 'text-slate-200 group-hover:text-white'">NetBird Self-Hosted</div>
                                     </div>
                                     <p class="text-sm leading-relaxed transition-colors" :class="formData.remote_access.provider === 'netbird-selfhosted' ? 'text-white' : 'text-slate-400 group-hover:text-white'">Complete digital sovereignty. You host the management platform on your own Numbus server. Required for teams larger than 5 users.</p>
                                 </button>

From cf1601f2b91ae5ac1082c276fd037be40faa074f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Sun, 29 Mar 2026 16:52:19 +0200
Subject: [PATCH 26/43] Disks minor step improvements.

---
 configurator/index.html | 49 +++++++++++++++++++++++++++++------------
 1 file changed, 35 insertions(+), 14 deletions(-)

diff --git a/configurator/index.html b/configurator/index.html
index 1a0ce49..f1fa5a8 100644
--- a/configurator/index.html
+++ b/configurator/index.html
@@ -403,32 +403,35 @@
                             </div>
                         </div>
 
-                        <div class="grid grid-cols-1 md:grid-cols-2 gap-10">
+                        <div class="grid grid-cols-1 md:grid-cols-2 gap-10 items-start">
                             <!-- Boot Selection -->
-                            <div class="space-y-6">
+                            <div class="space-y-6 flex flex-col">
                                 <h3 class="text-xl font-bold text-white flex items-center gap-2">
-                                    <i class="mdi mdi-boot text-sky-400"></i> Boot Disks
+                                    <i class="mdi mdi-nix text-sky-400"></i> Boot Disks
                                 </h3>
                                 <p class="text-sm text-slate-400">Choose 1 (Stripe) or 2 (Mirror) disks for the operating system.</p>
                                 
                                 <div class="space-y-3">
-                                    <template x-for="disk in hardwareData.disks" :key="disk.id">
+                                    <template x-for="disk in sortedDisks()" :key="disk.id">
                                         <button @click="toggleDisk(disk.id, 'boot')"
                                                 x-show="!formData.disks.data.includes(disk.id)"
                                                 :class="formData.disks.boot.includes(disk.id) ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700 opacity-60 hover:opacity-100'"
                                                 class="w-full p-4 border rounded-xl text-left transition-all group">
                                             <div class="flex justify-between items-center">
                                                 <div class="flex items-center gap-3">
-                                                    <i class="mdi mdi-harddisk text-2xl" :class="formData.disks.boot.includes(disk.id) ? 'text-white' : 'text-slate-500'"></i>
+                                                    <i :class="'mdi ' + getDiskIcon(disk.type) + ' text-2xl'" :class="formData.disks.boot.includes(disk.id) ? 'text-white' : 'text-slate-500'"></i>
                                                     <div>
                                                         <div class="font-bold text-sm" x-text="disk.name"></div>
-                                                        <div class="text-[10px] uppercase text-slate-500 font-bold" x-text="disk.size + ' • ' + disk.type"></div>
+                                                        <div class="text-xs uppercase text-slate-500 font-bold" x-text="disk.size + ' • ' + disk.type"></div>
                                                     </div>
                                                 </div>
                                                 <div class="text-right">
-                                                    <div class="text-[10px] font-bold" :class="disk.health === 'PASSED' ? 'text-green-500' : 'text-amber-500'" x-text="'Health: ' + disk.health"></div>
+                                                    <div class="text-xs font-bold" :class="disk.health === 'PASSED' ? 'text-green-500' : 'text-amber-500'" x-text="'Health: ' + disk.health"></div>
                                                 </div>
                                             </div>
+                                            <div x-show="formData.disks.boot.includes(disk.id) && disk.health !== 'PASSED'" class="mt-3 p-2 bg-amber-500/10 border border-amber-500/30 rounded-lg">
+                                                <p class="text-[10px] text-amber-200/80"><i class="mdi mdi-alert-circle mr-1"></i> Disk health is not optimal. Use for boot with caution.</p>
+                                            </div>
                                         </button>
                                     </template>
                                 </div>
@@ -440,30 +443,33 @@
                             </div>
 
                             <!-- Data Selection -->
-                            <div class="space-y-6">
+                            <div class="space-y-6 flex flex-col">
                                 <h3 class="text-xl font-bold text-white flex items-center gap-2">
-                                    <i class="mdi mdi-database text-sky-400"></i> Data Disks
+                                    <i class="mdi mdi-server text-sky-400"></i> Data Disks
                                 </h3>
                                 <p class="text-sm text-slate-400">Select disks for storage. SnapRAID parity is used if >1 disk is chosen.</p>
                                 
                                 <div class="space-y-3">
-                                    <template x-for="disk in hardwareData.disks" :key="disk.id">
+                                    <template x-for="disk in sortedDisks()" :key="disk.id">
                                         <button @click="toggleDisk(disk.id, 'data')"
-                                                df81ec3e7f29dfdb84a3a7eec1ea38348003b908x-show="!formData.disks.boot.includes(disk.id)"
+                                                x-show="!formData.disks.boot.includes(disk.id)"
                                                 :class="formData.disks.data.includes(disk.id) ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700 opacity-60 hover:opacity-100'"
                                                 class="w-full p-4 border rounded-xl text-left transition-all group">
                                             <div class="flex justify-between items-center">
                                                 <div class="flex items-center gap-3">
-                                                    <i class="mdi mdi-server text-2xl" :class="formData.disks.data.includes(disk.id) ? 'text-white' : 'text-slate-500'"></i>
+                                                    <i :class="'mdi ' + getDiskIcon(disk.type) + ' text-2xl'" :class="formData.disks.data.includes(disk.id) ? 'text-white' : 'text-slate-500'"></i>
                                                     <div>
                                                         <div class="font-bold text-sm" x-text="disk.name"></div>
-                                                        <div class="text-[10px] uppercase text-slate-500 font-bold" x-text="disk.size + ' • ' + disk.type"></div>
+                                                        <div class="text-xs uppercase text-slate-500 font-bold" x-text="disk.size + ' • ' + disk.type"></div>
                                                     </div>
                                                 </div>
                                                 <div class="text-right">
-                                                    <div class="text-[10px] font-bold" :class="disk.health === 'PASSED' ? 'text-green-500' : 'text-amber-500'" x-text="'Health: ' + disk.health"></div>
+                                                    <div class="text-xs font-bold" :class="disk.health === 'PASSED' ? 'text-green-500' : 'text-amber-500'" x-text="'Health: ' + disk.health"></div>
                                                 </div>
                                             </div>
+                                            <div x-show="formData.disks.data.includes(disk.id) && disk.health !== 'PASSED'" class="mt-3 p-2 bg-amber-500/10 border border-amber-500/30 rounded-lg">
+                                                <p class="text-[10px] text-amber-200/80"><i class="mdi mdi-alert-circle mr-1"></i> SMART health warning. Consider replacing before use as data storage.</p>
+                                            </div>
                                         </button>
                                     </template>
                                 </div>
@@ -1192,6 +1198,21 @@
                         }
                     }
                 },
+                sortedDisks() {
+                    const order = { 'NVMe': 0, 'SSD': 1, 'HDD': 2, 'USB': 3, 'Other': 4 };
+                    return [...this.hardwareData.disks].sort((a, b) => {
+                        return (order[a.type] ?? 5) - (order[b.type] ?? 5);
+                    });
+                },
+                getDiskIcon(type) {
+                    switch(type) {
+                        case 'NVMe': return 'mdi-flash';
+                        case 'SSD': return 'mdi-memory';
+                        case 'HDD': return 'mdi-harddisk';
+                        case 'USB': return 'mdi-usb';
+                        default: return 'mdi-harddisk';
+                    }
+                },
                 toggleDisk(id, category) {
                     const list = this.formData.disks[category];
                     const index = list.indexOf(id);

From d427ef9e752a312473fef6b4fd218f5423c8ff47 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Sun, 29 Mar 2026 17:11:36 +0200
Subject: [PATCH 27/43] Disks minor step improvements.

---
 configurator/index.html | 71 +++++++++++++++++++++--------------------
 deploy.sh               |  2 +-
 2 files changed, 37 insertions(+), 36 deletions(-)

diff --git a/configurator/index.html b/configurator/index.html
index f1fa5a8..87ae9f3 100644
--- a/configurator/index.html
+++ b/configurator/index.html
@@ -32,7 +32,7 @@
                         <ul x-show="isSectionActive(section)" x-collapse 
                             class="space-y-0 pl-1 border-l-2 border-slate-800 ml-1 transition-all duration-500">
                             <template x-for="minor in section.minors" :key="minor.step">
-                                <li class="relative flex items-center gap-3 py-2 -ml-[7px] group">
+                                <li class="relative flex items-center gap-3 py-2.5 -ml-[7px] group">
                                     <!-- Status Dot -->
                                     <div :class="{
                                             'bg-fuchsia-500 shadow-[0_0_10px_rgba(192,38,211,0.8)] scale-125': step === minor.step,
@@ -42,7 +42,7 @@
                                          class="w-3 h-3 rounded-full shrink-0 transition-all duration-300 z-10"></div>
                                     
                                     <!-- Label -->
-                                    <span :class="step === minor.step ? 'text-white font-bold' : 'text-slate-500'" 
+                                    <span :class="step === minor.step ? 'text-white font-bold' : 'text-slate-400'" 
                                           class="text-[11px] leading-tight transition-colors" x-text="minor.label"></span>
                                 </li>
                             </template>
@@ -253,7 +253,7 @@
                                             <div class="w-10 h-10 rounded-full bg-slate-800 flex items-center justify-center text-sky-400 font-bold" x-text="(user.name.charAt(0) || user.username.charAt(0) || '?').toUpperCase()"></div>
                                             <div>
                                                 <p class="font-bold text-slate-200 text-lg group-hover:text-white transition-colors" x-text="user.name || user.username || 'New User'"></p>
-                                                <p class="text-[10px] text-slate-500 uppercase tracking-widest font-bold group-hover:text-white transition-colors" x-text="user.isStatic ? 'Administrator (Sudo)' : 'Standard User'"></p>
+                                                <p class="text-xs text-slate-500 uppercase tracking-widest font-bold group-hover:text-white transition-colors" x-text="user.isStatic ? 'Administrator (Sudo)' : 'Standard User'"></p>
                                             </div>
                                         </div>
                                         <button x-show="!user.isStatic" @click="removeUser(index)" class="text-slate-500 hover:text-red-500 transition-colors">
@@ -263,7 +263,7 @@
                                     
                                     <div class="grid grid-cols-1 md:grid-cols-3 gap-4">
                                         <div class="space-y-1">
-                                            <label class="text-[10px] font-bold text-slate-400 uppercase tracking-tighter">Username <span class="text-fuchsia-500" x-show="user.isStatic">*</span></label>
+                                            <label class="text-xs font-bold text-slate-400 uppercase tracking-tighter">Username <span class="text-fuchsia-500" x-show="user.isStatic">*</span></label>
                                             <div class="relative">
                                                 <i class="mdi mdi-account absolute left-3 top-1/2 -translate-y-1/2 text-slate-600"></i>
                                                 <input type="text" x-model="user.username" :disabled="user.isStatic" 
@@ -272,7 +272,7 @@
                                             </div>
                                         </div>
                                         <div class="space-y-1">
-                                            <label class="text-[10px] font-bold text-slate-400 uppercase tracking-tighter">Display Name <span class="text-fuchsia-500" x-show="user.isStatic">*</span></label>
+                                            <label class="text-xs font-bold text-slate-400 uppercase tracking-tighter">Display Name <span class="text-fuchsia-500" x-show="user.isStatic">*</span></label>
                                             <div class="relative">
                                                 <i class="mdi mdi-card-account-details absolute left-3 top-1/2 -translate-y-1/2 text-slate-600"></i>
                                                 <input type="text" x-model="user.name" :placeholder="user.isStatic ? 'Alexandre' : 'Full Name'" 
@@ -280,7 +280,7 @@
                                             </div>
                                         </div>
                                         <div class="space-y-1">
-                                            <label class="text-[10px] font-bold text-slate-400 uppercase tracking-tighter">Email Address <span class="text-fuchsia-500" x-show="user.isStatic">*</span></label>
+                                            <label class="text-xs font-bold text-slate-400 uppercase tracking-tighter">Email Address <span class="text-fuchsia-500" x-show="user.isStatic">*</span></label>
                                             <div class="relative">
                                                 <i class="mdi mdi-email absolute left-3 top-1/2 -translate-y-1/2 text-slate-600"></i>
                                                 <input type="email" x-model="user.email" placeholder="admin@example.com" 
@@ -403,15 +403,24 @@
                             </div>
                         </div>
 
-                        <div class="grid grid-cols-1 md:grid-cols-2 gap-10 items-start">
-                            <!-- Boot Selection -->
-                            <div class="space-y-6 flex flex-col">
+                        <div class="grid grid-cols-1 md:grid-cols-2 gap-x-10 gap-y-6 items-start">
+                            <!-- Headers Row: Aligned horizontally -->
+                            <div class="space-y-2">
                                 <h3 class="text-xl font-bold text-white flex items-center gap-2">
                                     <i class="mdi mdi-nix text-sky-400"></i> Boot Disks
                                 </h3>
                                 <p class="text-sm text-slate-400">Choose 1 (Stripe) or 2 (Mirror) disks for the operating system.</p>
-                                
-                                <div class="space-y-3">
+                            </div>
+
+                            <div class="space-y-2">
+                                <h3 class="text-xl font-bold text-white flex items-center gap-2">
+                                    <i class="mdi mdi-server text-sky-400"></i> Data Disks
+                                </h3>
+                                <p class="text-sm text-slate-400">Select disks for storage. SnapRAID parity is used if >1 disk is chosen.</p>
+                            </div>
+
+                            <!-- Lists Row: Aligned horizontally -->
+                            <div class="space-y-3">
                                     <template x-for="disk in sortedDisks()" :key="disk.id">
                                         <button @click="toggleDisk(disk.id, 'boot')"
                                                 x-show="!formData.disks.data.includes(disk.id)"
@@ -430,26 +439,20 @@
                                                 </div>
                                             </div>
                                             <div x-show="formData.disks.boot.includes(disk.id) && disk.health !== 'PASSED'" class="mt-3 p-2 bg-amber-500/10 border border-amber-500/30 rounded-lg">
-                                                <p class="text-[10px] text-amber-200/80"><i class="mdi mdi-alert-circle mr-1"></i> Disk health is not optimal. Use for boot with caution.</p>
+                                                <p class="text-xs text-amber-200/80"><i class="mdi mdi-alert-circle mr-1"></i>Disk did not passed SMART test. You should consider using another disk.</p>
                                             </div>
                                         </button>
                                     </template>
-                                </div>
 
-                                <!-- Boot Safety Warning -->
                                 <div x-show="formData.disks.boot.length === 1" class="bg-amber-500/5 border border-amber-500/20 p-4 rounded-xl">
                                     <p class="text-xs text-amber-200/70"><i class="mdi mdi-shield-alert mr-1"></i> <strong>Striped Config:</strong> Using only one boot disk provides no hardware redundancy. If this drive fails, the system will not boot.</p>
                                 </div>
+                                <div x-show="formData.disks.boot.length === 2" class="bg-green-500/5 border border-green-500/20 p-4 rounded-xl">
+                                    <p class="text-xs text-green-400/70"><i class="mdi mdi-shield-check mr-1"></i> <strong>Mirror RAID Active:</strong> Your data is protected by redundancy.</p>
+                                </div>
                             </div>
 
-                            <!-- Data Selection -->
-                            <div class="space-y-6 flex flex-col">
-                                <h3 class="text-xl font-bold text-white flex items-center gap-2">
-                                    <i class="mdi mdi-server text-sky-400"></i> Data Disks
-                                </h3>
-                                <p class="text-sm text-slate-400">Select disks for storage. SnapRAID parity is used if >1 disk is chosen.</p>
-                                
-                                <div class="space-y-3">
+                            <div class="space-y-3">
                                     <template x-for="disk in sortedDisks()" :key="disk.id">
                                         <button @click="toggleDisk(disk.id, 'data')"
                                                 x-show="!formData.disks.boot.includes(disk.id)"
@@ -468,18 +471,16 @@
                                                 </div>
                                             </div>
                                             <div x-show="formData.disks.data.includes(disk.id) && disk.health !== 'PASSED'" class="mt-3 p-2 bg-amber-500/10 border border-amber-500/30 rounded-lg">
-                                                <p class="text-[10px] text-amber-200/80"><i class="mdi mdi-alert-circle mr-1"></i> SMART health warning. Consider replacing before use as data storage.</p>
+                                                <p class="text-xs text-amber-200/80"><i class="mdi mdi-alert-circle mr-1"></i>Disk did not passed SMART test. You should consider using another disk.</p>
                                             </div>
                                         </button>
                                     </template>
-                                </div>
 
-                                <!-- Data Safety Warning -->
                                 <div x-show="formData.disks.data.length === 1" class="bg-amber-500/5 border border-amber-500/20 p-4 rounded-xl">
                                     <p class="text-xs text-amber-200/70"><i class="mdi mdi-shield-alert mr-1"></i> <strong>Striped Config:</strong> One data disk provides no parity. Data loss will occur if this drive fails.</p>
                                 </div>
                                 <div x-show="formData.disks.data.length > 1" class="bg-green-500/5 border border-green-500/20 p-4 rounded-xl">
-                                    <p class="text-xs text-green-400/70"><i class="mdi mdi-shield-check mr-1"></i> <strong>SnapRAID Active:</strong> Your data is protected by parity drives.</p>
+                                    <p class="text-xs text-green-400/70"><i class="mdi mdi-shield-check mr-1"></i> <strong>SnapRAID Active:</strong> Your data is protected by redundancy.</p>
                                 </div>
                             </div>
                         </div>
@@ -534,7 +535,7 @@
                                             <img src="https://cdn.jsdelivr.net/gh/selfhst/icons@main/svg/netbird.svg" class="w-8 h-8" alt="NetBird">
                                             <div class="font-bold text-xl" :class="formData.remote_access.provider === 'netbird-cloud' ? 'text-white' : 'text-slate-200 group-hover:text-white'">NetBird Cloud</div>
                                         </div>
-                                        <span class="text-[10px] bg-green-500/20 text-green-400 px-2 py-1 rounded uppercase font-bold">Recommended for small teams</span>
+                                        <span class="text-xs bg-green-500/20 text-green-400 px-2 py-1 rounded uppercase font-bold">Recommended for small teams</span>
                                     </div>
                                     <p class="text-sm leading-relaxed transition-colors" :class="formData.remote_access.provider === 'netbird-cloud' ? 'text-white' : 'text-slate-400 group-hover:text-white'">The easiest zero-trust solution. Perfect for families and teams of up to 5 people.</p>
                                 </button>
@@ -700,7 +701,7 @@
                                                 <img :src="'https://cdn.jsdelivr.net/gh/selfhst/icons@main/svg/' + (serviceMetadata[dns].icon || dns) + '.svg'" class="w-6 h-6" :alt="dns">
                                                 <div class="font-bold capitalize text-lg" :class="formData.services.dns === dns ? 'text-white' : 'text-slate-200 group-hover:text-white'" x-text="dns"></div>
                                             </div>
-                                            <a :href="serviceMetadata[dns].link" target="_blank" @click.stop class="text-[10px] text-sky-400 underline opacity-40 group-hover:opacity-100 transition-opacity">Website</a>
+                                            <a :href="serviceMetadata[dns].link" target="_blank" @click.stop class="text-xs text-sky-400 underline opacity-40 group-hover:opacity-100 transition-opacity">Website</a>
                                         </div>
                                         <p class="text-sm leading-relaxed transition-colors" :class="formData.services.dns === dns ? 'text-white' : 'text-slate-400 group-hover:text-white'" x-text="serviceMetadata[dns].desc"></p>
                                     </button>
@@ -717,7 +718,7 @@
                                             <span class="text-base font-bold capitalize" x-text="app"></span>
                                         </div>
                                         <p class="text-sm leading-normal transition-colors" :class="formData.services.apps.includes(app) ? 'text-white' : 'text-slate-500 group-hover:text-white'" x-text="serviceMetadata[app].desc"></p>
-                                        <a :href="serviceMetadata[app].link" target="_blank" class="text-[10px] text-sky-400 underline opacity-0 group-hover:opacity-100 transition-opacity mt-auto">Learn more</a>
+                                        <a :href="serviceMetadata[app].link" target="_blank" class="text-xs text-sky-400 underline opacity-0 group-hover:opacity-100 transition-opacity mt-auto">Learn more</a>
                                     </label>
                                 </template>
                             </div>
@@ -734,7 +735,7 @@
                                             <img :src="'https://cdn.jsdelivr.net/gh/selfhst/icons@main/svg/' + (serviceMetadata[sys].icon || sys) + '.svg'" :class="formData.services.system.includes(sys) ? 'opacity-100' : 'opacity-40 group-hover:opacity-100'" class="w-6 h-6 transition-opacity" :alt="sys">
                                         </div>
                                         <p class="text-sm transition-colors" :class="formData.services.system.includes(sys) ? 'text-white' : 'text-slate-500 group-hover:text-white'" x-text="serviceMetadata[sys].desc"></p>
-                                        <a :href="serviceMetadata[sys].link" target="_blank" class="text-[10px] text-sky-400 underline opacity-0 group-hover:opacity-100 transition-opacity mt-auto">Learn more</a>
+                                        <a :href="serviceMetadata[sys].link" target="_blank" class="text-xs text-sky-400 underline opacity-0 group-hover:opacity-100 transition-opacity mt-auto">Learn more</a>
                                     </label>
                                 </template>
                             </div>
@@ -939,13 +940,13 @@
                         <h2 class="text-4xl font-bold text-white">Deploying Numbus...</h2>
                         <div class="bg-black/40 rounded-xl p-6 w-full font-mono text-left text-[10px] text-green-400 border border-slate-800">
                             <div class="flex justify-between items-center mb-4 border-b border-slate-800 pb-2">
-                                <span class="uppercase tracking-widest text-slate-500">Live Terminal Logs</span>
-                                <button class="text-[9px] bg-slate-800 px-2 py-0.5 rounded text-slate-400">Toggle Logs</button>
+                                <span class="uppercase tracking-widest text-slate-500 text-xs">Live Terminal Logs</span>
+                                <button class="text-xs bg-slate-800 px-2 py-1 rounded text-slate-400">Toggle Logs</button>
                             </div>
                             <div class="h-40 overflow-y-auto custom-scrollbar">
-                                <p class="text-fuchsia-400">[INFO] Starting deployment sequence...</p>
-                                <p class="text-sky-400">[CMD] nixos-anywhere --flake .#numbus-server</p>
-                                <p class="text-slate-500">[STDOUT] Initializing remote connection...</p>
+                                <p class="text-fuchsia-400 text-xs">[INFO] Starting deployment sequence...</p>
+                                <p class="text-sky-400 text-xs">[CMD] nixos-anywhere --flake .#numbus-server</p>
+                                <p class="text-slate-500 text-xs">[STDOUT] Initializing remote connection...</p>
                             </div>
                         </div>
                     </div>
diff --git a/deploy.sh b/deploy.sh
index 58105b0..9934eaf 100644
--- a/deploy.sh
+++ b/deploy.sh
@@ -109,8 +109,8 @@ for DISK in \$(lsblk -x SIZE -d -n -e 7,11 -o NAME); do
   HDD=\$(cat /sys/block/\$DISK/queue/rotational)
   TRANSPORT_PROTOCOL=\$(lsblk -x SIZE -d -n -e 7,11 -o TRAN /dev/\$DISK)
   if [[ "\$DISK" == "nvme*" ]]; then DISK_TYPE+=("NVMe");
-  elif [[ "\$HDD" -eq 1 ]]; then DISK_TYPE+=("HDD");
   elif [[ "\$TRANSPORT_PROTOCOL" == "usb" ]]; then DISK_TYPE+=("USB");
+  elif [[ "\$HDD" -eq 1 ]]; then DISK_TYPE+=("HDD");
   elif [[ "\$HDD" -eq 0 ]]; then DISK_TYPE+=("SSD");
   else DISK_TYPE+=("Other")
   fi

From 836f651aea696d3f6232ec902898583795171497 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Wed, 15 Apr 2026 14:03:58 +0200
Subject: [PATCH 28/43] Updated the secrets organization

---
 templates/numbus-server/sops-nix/disks/boot.yaml       |  2 ++
 templates/numbus-server/sops-nix/disks/content.yaml    |  3 +++
 templates/numbus-server/sops-nix/disks/parity.yaml     |  2 ++
 templates/numbus-server/sops-nix/podman/adguard.yaml   |  0
 templates/numbus-server/sops-nix/podman/authelia.yaml  |  0
 templates/numbus-server/sops-nix/podman/crafty.yaml    |  0
 templates/numbus-server/sops-nix/podman/dashy.yaml     |  0
 templates/numbus-server/sops-nix/podman/frigate.yaml   |  0
 templates/numbus-server/sops-nix/podman/gitea.yaml     |  0
 templates/numbus-server/sops-nix/podman/gitlab.yaml    |  0
 .../numbus-server/sops-nix/podman/home-assistant.yaml  |  0
 templates/numbus-server/sops-nix/podman/homepage.yaml  |  0
 templates/numbus-server/sops-nix/podman/immich.yaml    |  0
 templates/numbus-server/sops-nix/podman/it-tools.yaml  |  0
 templates/numbus-server/sops-nix/podman/jellyfin.yaml  |  0
 templates/numbus-server/sops-nix/podman/lldap.yaml     |  0
 templates/numbus-server/sops-nix/podman/n8n.yaml       |  0
 templates/numbus-server/sops-nix/podman/netbird.yaml   |  0
 .../numbus-server/sops-nix/podman/netbootxyz.yaml      |  0
 templates/numbus-server/sops-nix/podman/netbox.yaml    |  0
 templates/numbus-server/sops-nix/podman/nextcloud.yaml |  0
 templates/numbus-server/sops-nix/podman/ntfy.yaml      |  0
 templates/numbus-server/sops-nix/podman/odoo.yaml      |  0
 templates/numbus-server/sops-nix/podman/passbolt.yaml  |  0
 templates/numbus-server/sops-nix/podman/pi-hole.yaml   |  0
 templates/numbus-server/sops-nix/podman/traefik.yaml   |  3 +++
 .../numbus-server/sops-nix/podman/uptime-kuma.yaml     |  0
 templates/numbus-server/sops-nix/podman/vscodium.yaml  |  0
 templates/numbus-server/sops-nix/secrets.yaml          | 10 ----------
 .../numbus-server/sops-nix/system/backup-client.yaml   |  0
 templates/numbus-server/sops-nix/system/clamav.yaml    |  0
 templates/numbus-server/sops-nix/system/mail.yaml      |  3 +++
 templates/numbus-server/sops-nix/system/ssh.yaml       |  3 +++
 .../numbus-server/sops-nix/system/virtualization.yaml  |  0
 34 files changed, 16 insertions(+), 10 deletions(-)
 create mode 100644 templates/numbus-server/sops-nix/disks/boot.yaml
 create mode 100644 templates/numbus-server/sops-nix/disks/content.yaml
 create mode 100644 templates/numbus-server/sops-nix/disks/parity.yaml
 create mode 100644 templates/numbus-server/sops-nix/podman/adguard.yaml
 create mode 100644 templates/numbus-server/sops-nix/podman/authelia.yaml
 create mode 100644 templates/numbus-server/sops-nix/podman/crafty.yaml
 create mode 100644 templates/numbus-server/sops-nix/podman/dashy.yaml
 create mode 100644 templates/numbus-server/sops-nix/podman/frigate.yaml
 create mode 100644 templates/numbus-server/sops-nix/podman/gitea.yaml
 create mode 100644 templates/numbus-server/sops-nix/podman/gitlab.yaml
 create mode 100644 templates/numbus-server/sops-nix/podman/home-assistant.yaml
 create mode 100644 templates/numbus-server/sops-nix/podman/homepage.yaml
 create mode 100644 templates/numbus-server/sops-nix/podman/immich.yaml
 create mode 100644 templates/numbus-server/sops-nix/podman/it-tools.yaml
 create mode 100644 templates/numbus-server/sops-nix/podman/jellyfin.yaml
 create mode 100644 templates/numbus-server/sops-nix/podman/lldap.yaml
 create mode 100644 templates/numbus-server/sops-nix/podman/n8n.yaml
 create mode 100644 templates/numbus-server/sops-nix/podman/netbird.yaml
 create mode 100644 templates/numbus-server/sops-nix/podman/netbootxyz.yaml
 create mode 100644 templates/numbus-server/sops-nix/podman/netbox.yaml
 create mode 100644 templates/numbus-server/sops-nix/podman/nextcloud.yaml
 create mode 100644 templates/numbus-server/sops-nix/podman/ntfy.yaml
 create mode 100644 templates/numbus-server/sops-nix/podman/odoo.yaml
 create mode 100644 templates/numbus-server/sops-nix/podman/passbolt.yaml
 create mode 100644 templates/numbus-server/sops-nix/podman/pi-hole.yaml
 create mode 100644 templates/numbus-server/sops-nix/podman/traefik.yaml
 create mode 100644 templates/numbus-server/sops-nix/podman/uptime-kuma.yaml
 create mode 100644 templates/numbus-server/sops-nix/podman/vscodium.yaml
 delete mode 100644 templates/numbus-server/sops-nix/secrets.yaml
 create mode 100644 templates/numbus-server/sops-nix/system/backup-client.yaml
 create mode 100644 templates/numbus-server/sops-nix/system/clamav.yaml
 create mode 100644 templates/numbus-server/sops-nix/system/mail.yaml
 create mode 100644 templates/numbus-server/sops-nix/system/ssh.yaml
 create mode 100644 templates/numbus-server/sops-nix/system/virtualization.yaml

diff --git a/templates/numbus-server/sops-nix/disks/boot.yaml b/templates/numbus-server/sops-nix/disks/boot.yaml
new file mode 100644
index 0000000..074cc99
--- /dev/null
+++ b/templates/numbus-server/sops-nix/disks/boot.yaml
@@ -0,0 +1,2 @@
+disks:
+  boot: "whoever blabber senior liqueur riverboat filing wronged seventeen grandma moonshine"
\ No newline at end of file
diff --git a/templates/numbus-server/sops-nix/disks/content.yaml b/templates/numbus-server/sops-nix/disks/content.yaml
new file mode 100644
index 0000000..09c3653
--- /dev/null
+++ b/templates/numbus-server/sops-nix/disks/content.yaml
@@ -0,0 +1,3 @@
+disks:
+  content-1: "nemeses starship tackle anime cardinal scarcity marmalade divorcee gondola kindle"
+  content-2: "chihuahua smolder cardiac mooned ovary suing bless nuptials driver slighting"
\ No newline at end of file
diff --git a/templates/numbus-server/sops-nix/disks/parity.yaml b/templates/numbus-server/sops-nix/disks/parity.yaml
new file mode 100644
index 0000000..d0d443a
--- /dev/null
+++ b/templates/numbus-server/sops-nix/disks/parity.yaml
@@ -0,0 +1,2 @@
+disks:
+  parity-1: "armed despise atrophy province strategy lustrous provoking jurist ramble phoenix"
\ No newline at end of file
diff --git a/templates/numbus-server/sops-nix/podman/adguard.yaml b/templates/numbus-server/sops-nix/podman/adguard.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/podman/authelia.yaml b/templates/numbus-server/sops-nix/podman/authelia.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/podman/crafty.yaml b/templates/numbus-server/sops-nix/podman/crafty.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/podman/dashy.yaml b/templates/numbus-server/sops-nix/podman/dashy.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/podman/frigate.yaml b/templates/numbus-server/sops-nix/podman/frigate.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/podman/gitea.yaml b/templates/numbus-server/sops-nix/podman/gitea.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/podman/gitlab.yaml b/templates/numbus-server/sops-nix/podman/gitlab.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/podman/home-assistant.yaml b/templates/numbus-server/sops-nix/podman/home-assistant.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/podman/homepage.yaml b/templates/numbus-server/sops-nix/podman/homepage.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/podman/immich.yaml b/templates/numbus-server/sops-nix/podman/immich.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/podman/it-tools.yaml b/templates/numbus-server/sops-nix/podman/it-tools.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/podman/jellyfin.yaml b/templates/numbus-server/sops-nix/podman/jellyfin.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/podman/lldap.yaml b/templates/numbus-server/sops-nix/podman/lldap.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/podman/n8n.yaml b/templates/numbus-server/sops-nix/podman/n8n.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/podman/netbird.yaml b/templates/numbus-server/sops-nix/podman/netbird.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/podman/netbootxyz.yaml b/templates/numbus-server/sops-nix/podman/netbootxyz.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/podman/netbox.yaml b/templates/numbus-server/sops-nix/podman/netbox.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/podman/nextcloud.yaml b/templates/numbus-server/sops-nix/podman/nextcloud.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/podman/ntfy.yaml b/templates/numbus-server/sops-nix/podman/ntfy.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/podman/odoo.yaml b/templates/numbus-server/sops-nix/podman/odoo.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/podman/passbolt.yaml b/templates/numbus-server/sops-nix/podman/passbolt.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/podman/pi-hole.yaml b/templates/numbus-server/sops-nix/podman/pi-hole.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/podman/traefik.yaml b/templates/numbus-server/sops-nix/podman/traefik.yaml
new file mode 100644
index 0000000..6c015ca
--- /dev/null
+++ b/templates/numbus-server/sops-nix/podman/traefik.yaml
@@ -0,0 +1,3 @@
+# CLOUDFLARE
+traefik:
+  cloudflareDnsApiToken: ""
\ No newline at end of file
diff --git a/templates/numbus-server/sops-nix/podman/uptime-kuma.yaml b/templates/numbus-server/sops-nix/podman/uptime-kuma.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/podman/vscodium.yaml b/templates/numbus-server/sops-nix/podman/vscodium.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/secrets.yaml b/templates/numbus-server/sops-nix/secrets.yaml
deleted file mode 100644
index 1a2671b..0000000
--- a/templates/numbus-server/sops-nix/secrets.yaml
+++ /dev/null
@@ -1,10 +0,0 @@
-# SSH
-authorizedSshPublicKeys: |
-$SSH_KEYS_FORMATTED
-
-# SMTP
-smtpPassword: "$SMTP_SERVER_PASSWORD"
-
-# CLOUDFLARE
-cloudflareDnsApiToken: "$CLOUDFLARE_DNS_API_TOKEN"
-
diff --git a/templates/numbus-server/sops-nix/system/backup-client.yaml b/templates/numbus-server/sops-nix/system/backup-client.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/system/clamav.yaml b/templates/numbus-server/sops-nix/system/clamav.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/templates/numbus-server/sops-nix/system/mail.yaml b/templates/numbus-server/sops-nix/system/mail.yaml
new file mode 100644
index 0000000..9adc3d7
--- /dev/null
+++ b/templates/numbus-server/sops-nix/system/mail.yaml
@@ -0,0 +1,3 @@
+# SMTP
+mail:
+  smtpPassword: "$SMTP_SERVER_PASSWORD"
\ No newline at end of file
diff --git a/templates/numbus-server/sops-nix/system/ssh.yaml b/templates/numbus-server/sops-nix/system/ssh.yaml
new file mode 100644
index 0000000..c900c7d
--- /dev/null
+++ b/templates/numbus-server/sops-nix/system/ssh.yaml
@@ -0,0 +1,3 @@
+# SSH
+ssh:
+  authorizedPublicKeys: |
\ No newline at end of file
diff --git a/templates/numbus-server/sops-nix/system/virtualization.yaml b/templates/numbus-server/sops-nix/system/virtualization.yaml
new file mode 100644
index 0000000..e69de29

From bc1bd49139c6719b72b11c3a423f0f82c8604706 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Wed, 15 Apr 2026 14:25:36 +0200
Subject: [PATCH 29/43] Updated the secrets organization.

---
 .../numbus-server/{sops-nix => }/.sops.yaml     |  2 +-
 templates/numbus-server/configuration.nix       | 17 -----------------
 .../numbus-server/custom-configuration.nix      |  3 +++
 templates/numbus-server/flake.nix               |  5 +++--
 .../{sops-nix => secrets}/disks/boot.yaml       |  0
 .../{sops-nix => secrets}/disks/content.yaml    |  0
 .../{sops-nix => secrets}/disks/parity.yaml     |  0
 .../{sops-nix => secrets}/podman/adguard.yaml   |  0
 .../{sops-nix => secrets}/podman/authelia.yaml  |  0
 .../{sops-nix => secrets}/podman/crafty.yaml    |  0
 .../{sops-nix => secrets}/podman/dashy.yaml     |  0
 .../{sops-nix => secrets}/podman/frigate.yaml   |  0
 .../{sops-nix => secrets}/podman/gitea.yaml     |  0
 .../{sops-nix => secrets}/podman/gitlab.yaml    |  0
 .../podman/home-assistant.yaml                  |  0
 .../{sops-nix => secrets}/podman/homepage.yaml  |  0
 .../{sops-nix => secrets}/podman/immich.yaml    |  0
 .../{sops-nix => secrets}/podman/it-tools.yaml  |  0
 .../{sops-nix => secrets}/podman/jellyfin.yaml  |  0
 .../{sops-nix => secrets}/podman/lldap.yaml     |  0
 .../{sops-nix => secrets}/podman/n8n.yaml       |  0
 .../{sops-nix => secrets}/podman/netbird.yaml   |  0
 .../podman/netbootxyz.yaml                      |  0
 .../{sops-nix => secrets}/podman/netbox.yaml    |  0
 .../{sops-nix => secrets}/podman/nextcloud.yaml |  0
 .../{sops-nix => secrets}/podman/ntfy.yaml      |  0
 .../{sops-nix => secrets}/podman/odoo.yaml      |  0
 .../{sops-nix => secrets}/podman/passbolt.yaml  |  0
 .../{sops-nix => secrets}/podman/pi-hole.yaml   |  0
 .../{sops-nix => secrets}/podman/traefik.yaml   |  0
 .../podman/uptime-kuma.yaml                     |  0
 .../{sops-nix => secrets}/podman/vscodium.yaml  |  0
 .../system/backup-client.yaml                   |  0
 .../{sops-nix => secrets}/system/clamav.yaml    |  0
 .../{sops-nix => secrets}/system/mail.yaml      |  0
 .../{sops-nix => secrets}/system/ssh.yaml       |  0
 .../system/virtualization.yaml                  |  0
 37 files changed, 7 insertions(+), 20 deletions(-)
 rename templates/numbus-server/{sops-nix => }/.sops.yaml (66%)
 delete mode 100644 templates/numbus-server/configuration.nix
 rename templates/numbus-server/{sops-nix => secrets}/disks/boot.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/disks/content.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/disks/parity.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/podman/adguard.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/podman/authelia.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/podman/crafty.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/podman/dashy.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/podman/frigate.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/podman/gitea.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/podman/gitlab.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/podman/home-assistant.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/podman/homepage.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/podman/immich.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/podman/it-tools.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/podman/jellyfin.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/podman/lldap.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/podman/n8n.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/podman/netbird.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/podman/netbootxyz.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/podman/netbox.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/podman/nextcloud.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/podman/ntfy.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/podman/odoo.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/podman/passbolt.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/podman/pi-hole.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/podman/traefik.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/podman/uptime-kuma.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/podman/vscodium.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/system/backup-client.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/system/clamav.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/system/mail.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/system/ssh.yaml (100%)
 rename templates/numbus-server/{sops-nix => secrets}/system/virtualization.yaml (100%)

diff --git a/templates/numbus-server/sops-nix/.sops.yaml b/templates/numbus-server/.sops.yaml
similarity index 66%
rename from templates/numbus-server/sops-nix/.sops.yaml
rename to templates/numbus-server/.sops.yaml
index de69314..3d1bc9d 100644
--- a/templates/numbus-server/sops-nix/.sops.yaml
+++ b/templates/numbus-server/.sops.yaml
@@ -3,7 +3,7 @@
 keys:
   - &primary $SOPS_PUBLIC_KEY
 creation_rules:
-  - path_regex: secrets/secrets.yaml$
+  - path_regex: secrets/(disks|podman|system)/.*\.yaml$
     key_groups:
     - age:
       - *primary
\ No newline at end of file
diff --git a/templates/numbus-server/configuration.nix b/templates/numbus-server/configuration.nix
deleted file mode 100644
index 8c1c408..0000000
--- a/templates/numbus-server/configuration.nix
+++ /dev/null
@@ -1,17 +0,0 @@
-# Do NOT edit this file manually. 
-# Please use the dedicated script : https://gittea.dev/numbus/numbus.
-# This could compromise system stability and is not supported by numbus.
-
-{ config, modulesPath, ... }:
-
-{
-  imports = [
-    (modulesPath + "/installer/scan/not-detected.nix")
-    (modulesPath + "/profiles/qemu-guest.nix")
-    ./custom-configuration.nix
-    ./numbus-generated.nix
-  ];
-
-  # System
-  system.stateVersion = "25.11";
-}
\ No newline at end of file
diff --git a/templates/numbus-server/custom-configuration.nix b/templates/numbus-server/custom-configuration.nix
index 23e44ad..95a8719 100644
--- a/templates/numbus-server/custom-configuration.nix
+++ b/templates/numbus-server/custom-configuration.nix
@@ -3,3 +3,6 @@
 # Do NOT set options already managed by numbus. i.e. config.numbus.* and other options (networking, storage, etc.)
 # Please use the dedicated script for those options : https://gittea.dev/numbus/numbus.
 
+{ config }:
+
+{}
\ No newline at end of file
diff --git a/templates/numbus-server/flake.nix b/templates/numbus-server/flake.nix
index 68454d4..604ae26 100644
--- a/templates/numbus-server/flake.nix
+++ b/templates/numbus-server/flake.nix
@@ -7,7 +7,7 @@
     # Core Nixpkgs
     nixpkgs.url = "github:NixOS/nixpkgs/nixos-25.11";
     # Numbus server configuration
-    numbus-server.url = "git+https://gittea.dev/numbus/numbus-server";
+    numbus-server.url = "git+https://git.numbus.eu/numbus/numbus-server";
     numbus-server.inputs.nixpkgs.follows = "nixpkgs";
     # Disk-partitioning helper
     disko.url = "github:nix-community/disko";
@@ -43,8 +43,9 @@
           # Power savings
           autoaspm.nixosModules.autoaspm
           # Core host configuration
-          ./configuration.nix
           ./hardware-configuration.nix
+          ./numbus-generated.nix
+          ./custom-configuration.nix
         ];
       };
     };
diff --git a/templates/numbus-server/sops-nix/disks/boot.yaml b/templates/numbus-server/secrets/disks/boot.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/disks/boot.yaml
rename to templates/numbus-server/secrets/disks/boot.yaml
diff --git a/templates/numbus-server/sops-nix/disks/content.yaml b/templates/numbus-server/secrets/disks/content.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/disks/content.yaml
rename to templates/numbus-server/secrets/disks/content.yaml
diff --git a/templates/numbus-server/sops-nix/disks/parity.yaml b/templates/numbus-server/secrets/disks/parity.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/disks/parity.yaml
rename to templates/numbus-server/secrets/disks/parity.yaml
diff --git a/templates/numbus-server/sops-nix/podman/adguard.yaml b/templates/numbus-server/secrets/podman/adguard.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/podman/adguard.yaml
rename to templates/numbus-server/secrets/podman/adguard.yaml
diff --git a/templates/numbus-server/sops-nix/podman/authelia.yaml b/templates/numbus-server/secrets/podman/authelia.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/podman/authelia.yaml
rename to templates/numbus-server/secrets/podman/authelia.yaml
diff --git a/templates/numbus-server/sops-nix/podman/crafty.yaml b/templates/numbus-server/secrets/podman/crafty.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/podman/crafty.yaml
rename to templates/numbus-server/secrets/podman/crafty.yaml
diff --git a/templates/numbus-server/sops-nix/podman/dashy.yaml b/templates/numbus-server/secrets/podman/dashy.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/podman/dashy.yaml
rename to templates/numbus-server/secrets/podman/dashy.yaml
diff --git a/templates/numbus-server/sops-nix/podman/frigate.yaml b/templates/numbus-server/secrets/podman/frigate.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/podman/frigate.yaml
rename to templates/numbus-server/secrets/podman/frigate.yaml
diff --git a/templates/numbus-server/sops-nix/podman/gitea.yaml b/templates/numbus-server/secrets/podman/gitea.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/podman/gitea.yaml
rename to templates/numbus-server/secrets/podman/gitea.yaml
diff --git a/templates/numbus-server/sops-nix/podman/gitlab.yaml b/templates/numbus-server/secrets/podman/gitlab.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/podman/gitlab.yaml
rename to templates/numbus-server/secrets/podman/gitlab.yaml
diff --git a/templates/numbus-server/sops-nix/podman/home-assistant.yaml b/templates/numbus-server/secrets/podman/home-assistant.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/podman/home-assistant.yaml
rename to templates/numbus-server/secrets/podman/home-assistant.yaml
diff --git a/templates/numbus-server/sops-nix/podman/homepage.yaml b/templates/numbus-server/secrets/podman/homepage.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/podman/homepage.yaml
rename to templates/numbus-server/secrets/podman/homepage.yaml
diff --git a/templates/numbus-server/sops-nix/podman/immich.yaml b/templates/numbus-server/secrets/podman/immich.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/podman/immich.yaml
rename to templates/numbus-server/secrets/podman/immich.yaml
diff --git a/templates/numbus-server/sops-nix/podman/it-tools.yaml b/templates/numbus-server/secrets/podman/it-tools.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/podman/it-tools.yaml
rename to templates/numbus-server/secrets/podman/it-tools.yaml
diff --git a/templates/numbus-server/sops-nix/podman/jellyfin.yaml b/templates/numbus-server/secrets/podman/jellyfin.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/podman/jellyfin.yaml
rename to templates/numbus-server/secrets/podman/jellyfin.yaml
diff --git a/templates/numbus-server/sops-nix/podman/lldap.yaml b/templates/numbus-server/secrets/podman/lldap.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/podman/lldap.yaml
rename to templates/numbus-server/secrets/podman/lldap.yaml
diff --git a/templates/numbus-server/sops-nix/podman/n8n.yaml b/templates/numbus-server/secrets/podman/n8n.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/podman/n8n.yaml
rename to templates/numbus-server/secrets/podman/n8n.yaml
diff --git a/templates/numbus-server/sops-nix/podman/netbird.yaml b/templates/numbus-server/secrets/podman/netbird.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/podman/netbird.yaml
rename to templates/numbus-server/secrets/podman/netbird.yaml
diff --git a/templates/numbus-server/sops-nix/podman/netbootxyz.yaml b/templates/numbus-server/secrets/podman/netbootxyz.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/podman/netbootxyz.yaml
rename to templates/numbus-server/secrets/podman/netbootxyz.yaml
diff --git a/templates/numbus-server/sops-nix/podman/netbox.yaml b/templates/numbus-server/secrets/podman/netbox.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/podman/netbox.yaml
rename to templates/numbus-server/secrets/podman/netbox.yaml
diff --git a/templates/numbus-server/sops-nix/podman/nextcloud.yaml b/templates/numbus-server/secrets/podman/nextcloud.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/podman/nextcloud.yaml
rename to templates/numbus-server/secrets/podman/nextcloud.yaml
diff --git a/templates/numbus-server/sops-nix/podman/ntfy.yaml b/templates/numbus-server/secrets/podman/ntfy.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/podman/ntfy.yaml
rename to templates/numbus-server/secrets/podman/ntfy.yaml
diff --git a/templates/numbus-server/sops-nix/podman/odoo.yaml b/templates/numbus-server/secrets/podman/odoo.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/podman/odoo.yaml
rename to templates/numbus-server/secrets/podman/odoo.yaml
diff --git a/templates/numbus-server/sops-nix/podman/passbolt.yaml b/templates/numbus-server/secrets/podman/passbolt.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/podman/passbolt.yaml
rename to templates/numbus-server/secrets/podman/passbolt.yaml
diff --git a/templates/numbus-server/sops-nix/podman/pi-hole.yaml b/templates/numbus-server/secrets/podman/pi-hole.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/podman/pi-hole.yaml
rename to templates/numbus-server/secrets/podman/pi-hole.yaml
diff --git a/templates/numbus-server/sops-nix/podman/traefik.yaml b/templates/numbus-server/secrets/podman/traefik.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/podman/traefik.yaml
rename to templates/numbus-server/secrets/podman/traefik.yaml
diff --git a/templates/numbus-server/sops-nix/podman/uptime-kuma.yaml b/templates/numbus-server/secrets/podman/uptime-kuma.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/podman/uptime-kuma.yaml
rename to templates/numbus-server/secrets/podman/uptime-kuma.yaml
diff --git a/templates/numbus-server/sops-nix/podman/vscodium.yaml b/templates/numbus-server/secrets/podman/vscodium.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/podman/vscodium.yaml
rename to templates/numbus-server/secrets/podman/vscodium.yaml
diff --git a/templates/numbus-server/sops-nix/system/backup-client.yaml b/templates/numbus-server/secrets/system/backup-client.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/system/backup-client.yaml
rename to templates/numbus-server/secrets/system/backup-client.yaml
diff --git a/templates/numbus-server/sops-nix/system/clamav.yaml b/templates/numbus-server/secrets/system/clamav.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/system/clamav.yaml
rename to templates/numbus-server/secrets/system/clamav.yaml
diff --git a/templates/numbus-server/sops-nix/system/mail.yaml b/templates/numbus-server/secrets/system/mail.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/system/mail.yaml
rename to templates/numbus-server/secrets/system/mail.yaml
diff --git a/templates/numbus-server/sops-nix/system/ssh.yaml b/templates/numbus-server/secrets/system/ssh.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/system/ssh.yaml
rename to templates/numbus-server/secrets/system/ssh.yaml
diff --git a/templates/numbus-server/sops-nix/system/virtualization.yaml b/templates/numbus-server/secrets/system/virtualization.yaml
similarity index 100%
rename from templates/numbus-server/sops-nix/system/virtualization.yaml
rename to templates/numbus-server/secrets/system/virtualization.yaml

From 80aaacda13ac3d3d5141bf96004912fd62e9bad7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Wed, 15 Apr 2026 14:34:24 +0200
Subject: [PATCH 30/43] Removed the useless configuration.nix file. Removed the
 sops input in numbus-generated.nix.

---
 templates/numbus-server/numbus-generated.nix | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/templates/numbus-server/numbus-generated.nix b/templates/numbus-server/numbus-generated.nix
index 4302f12..c283b25 100644
--- a/templates/numbus-server/numbus-generated.nix
+++ b/templates/numbus-server/numbus-generated.nix
@@ -2,9 +2,6 @@
 # Please use the dedicated script : https://gittea.dev/numbus/numbus.
 # This could compromise system stability and is not supported by numbus.
 
-{ config, pkgs, inputs, ... }:
+{ config, pkgs, ... }:
 
 {
-  imports = [
-    inputs.sops-nix.nixosModules.sops
-  ];
\ No newline at end of file

From 97305c215206c45dce2e92047970ac56e717972f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Sun, 26 Apr 2026 10:39:54 +0200
Subject: [PATCH 31/43] Bunch of changes. Settled on keeping both TUI and WebUI
 options.

---
 .aiexclude                                    |    2 +-
 .gitignore                                    |    4 +-
 configurator/bridge.py                        |   39 -
 configurator/index.html                       | 1372 -----------------
 deploy.sh                                     |  243 +--
 web/index.html                                |   49 +
 web/logic/bridge.py                           |   50 +
 web/media/dark/numbus-backup-server-dark.svg  |   42 +
 web/media/dark/numbus-computer-dark.svg       |   42 +
 web/media/dark/numbus-server-dark.svg         |   42 +
 web/media/dark/numbus-template-dark.svg       |   39 +
 web/media/dark/numbus-tv-dark.svg             |   42 +
 {configurator => web/media}/favicon.ico       |  Bin
 .../light/numbus-backup-server-light.svg      |   42 +
 web/media/light/numbus-computer-light.svg     |   42 +
 web/media/light/numbus-server-light.svg       |   42 +
 web/media/light/numbus-template-light.svg     |   39 +
 web/media/light/numbus-tv-light.svg           |   42 +
 {configurator => web/media}/logo.png          |  Bin
 web/pages/configuration.html                  |  145 ++
 web/pages/installation.html                   |    0
 web/pages/post-installation.html              |    0
 web/pages/preparation.html                    |  430 ++++++
 23 files changed, 1234 insertions(+), 1514 deletions(-)
 delete mode 100644 configurator/bridge.py
 delete mode 100644 configurator/index.html
 mode change 100644 => 100755 deploy.sh
 create mode 100644 web/index.html
 create mode 100644 web/logic/bridge.py
 create mode 100644 web/media/dark/numbus-backup-server-dark.svg
 create mode 100644 web/media/dark/numbus-computer-dark.svg
 create mode 100644 web/media/dark/numbus-server-dark.svg
 create mode 100644 web/media/dark/numbus-template-dark.svg
 create mode 100644 web/media/dark/numbus-tv-dark.svg
 rename {configurator => web/media}/favicon.ico (100%)
 create mode 100644 web/media/light/numbus-backup-server-light.svg
 create mode 100644 web/media/light/numbus-computer-light.svg
 create mode 100644 web/media/light/numbus-server-light.svg
 create mode 100644 web/media/light/numbus-template-light.svg
 create mode 100644 web/media/light/numbus-tv-light.svg
 rename {configurator => web/media}/logo.png (100%)
 create mode 100644 web/pages/configuration.html
 create mode 100644 web/pages/installation.html
 create mode 100644 web/pages/post-installation.html
 create mode 100644 web/pages/preparation.html

diff --git a/.aiexclude b/.aiexclude
index 647c10e..1bd21c2 100644
--- a/.aiexclude
+++ b/.aiexclude
@@ -1,4 +1,4 @@
-final-nix-config/
+config/
 test*
 .DS_Store
 .env
\ No newline at end of file
diff --git a/.gitignore b/.gitignore
index 5031784..af6c9bb 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,5 +1,5 @@
-agents/
-final-nix-config/
+web/ux/
+config/
 test*
 .DS_Store
 .env
\ No newline at end of file
diff --git a/configurator/bridge.py b/configurator/bridge.py
deleted file mode 100644
index 52133a3..0000000
--- a/configurator/bridge.py
+++ /dev/null
@@ -1,39 +0,0 @@
-import http.server
-import json
-import os
-
-class BridgeHandler(http.server.SimpleHTTPRequestHandler):
-    def do_GET(self):
-        if self.path == '/logs':
-            self.send_response(200)
-            self.send_header('Content-type', 'text/plain')
-            self.send_header('Access-Control-Allow-Origin', '*')
-            self.end_headers()
-            if os.path.exists('deploy.log'):
-                with open('deploy.log', 'r') as f:
-                    lines = f.readlines()
-                    self.wfile.write("".join(lines[-20:]).encode())
-            return
-        return http.server.SimpleHTTPRequestHandler.do_GET(self)
-
-    def do_POST(self):
-        content_length = int(self.headers['Content-Length'])
-        post_data = self.rfile.read(content_length)
-        
-        if self.path == '/discovery':
-            with open("live_settings.json", "wb") as f:
-                f.write(post_data)
-            self.send_response(200)
-            self.end_headers()
-            # Signal Bash that discovery data is ready
-            with open(".discovery_ready", "w") as f: f.write("1")
-
-        elif self.path == '/deploy':
-            with open("../numbus.yaml", "wb") as f:
-                f.write(post_data)
-            self.send_response(200)
-            self.end_headers()
-            with open(".deploy_signal", "w") as f: f.write("1")
-
-os.chdir("configurator")
-http.server.HTTPServer(('localhost', 8088), BridgeHandler).serve_forever()
\ No newline at end of file
diff --git a/configurator/index.html b/configurator/index.html
deleted file mode 100644
index 87ae9f3..0000000
--- a/configurator/index.html
+++ /dev/null
@@ -1,1372 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-    <meta charset="UTF-8">
-    <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <title>Numbus Configurator</title>
-    <!-- Tailwind CSS for modern styling -->
-    <script src="https://cdn.tailwindcss.com"></script>
-    <!-- Alpine.js for lightweight reactivity -->
-    <script defer src="https://cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js"></script>
-    <!-- JS-YAML to convert JS objects to YAML strings -->
-    <script src="https://cdnjs.cloudflare.com/ajax/libs/js-yaml/4.1.0/js-yaml.min.js"></script>
-    <!-- Material Design Icons -->
-    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@mdi/font@7.4.47/css/materialdesignicons.min.css">
-</head>
-<body class="bg-[#0f172a] text-slate-100 min-h-screen font-sans selection:bg-fuchsia-500/30">
-
-    <div x-data="configurator()" x-init="init()" class="min-h-screen flex flex-col md:flex-row relative" @keydown.window.escape="showAdvanced = false">
-        
-        <!-- Sidebar Navigation -->
-        <nav x-show="step > 0" class="w-full md:w-64 bg-[#1e293b] border-r border-slate-700 p-6 flex-shrink-0" x-cloak>
-            <div class="flex items-center gap-3 mb-10">
-                <i class="mdi mdi-cloud-check text-sky-400 text-2xl"></i>
-                <span class="font-bold text-xl tracking-tight bg-gradient-to-r from-sky-400 to-fuchsia-500 bg-clip-text text-transparent uppercase">NUMBUS</span>
-            </div>
-            <nav class="space-y-8">
-                <template x-for="section in getNavigation()" :key="section.title">
-                    <div class="space-y-3">
-                        <h3 :class="isSectionActive(section) ? 'text-white' : 'text-slate-500'" 
-                            class="text-xs font-black uppercase tracking-widest border-b border-slate-800 pb-2 transition-colors" 
-                            x-text="section.title"></h3>
-                        <ul x-show="isSectionActive(section)" x-collapse 
-                            class="space-y-0 pl-1 border-l-2 border-slate-800 ml-1 transition-all duration-500">
-                            <template x-for="minor in section.minors" :key="minor.step">
-                                <li class="relative flex items-center gap-3 py-2.5 -ml-[7px] group">
-                                    <!-- Status Dot -->
-                                    <div :class="{
-                                            'bg-fuchsia-500 shadow-[0_0_10px_rgba(192,38,211,0.8)] scale-125': step === minor.step,
-                                            'bg-green-500': step > minor.step,
-                                            'bg-slate-700 group-hover:bg-slate-500': step < minor.step
-                                         }" 
-                                         class="w-3 h-3 rounded-full shrink-0 transition-all duration-300 z-10"></div>
-                                    
-                                    <!-- Label -->
-                                    <span :class="step === minor.step ? 'text-white font-bold' : 'text-slate-400'" 
-                                          class="text-[11px] leading-tight transition-colors" x-text="minor.label"></span>
-                                </li>
-                            </template>
-                        </ul>
-                    </div>
-                </template>
-            </nav>
-        </nav>
-
-        <!-- Main Content Area -->
-        <main class="flex-grow flex items-center justify-center p-4 md:p-12 relative overflow-hidden">
-            
-            <!-- Welcome Screen -->
-            <div x-show="step === 0" x-transition:enter="transition ease-out duration-500" class="max-w-2xl text-center space-y-8 z-10">
-                <img src="logo.png" alt="Numbus Logo" class="w-48 h-48 mx-auto drop-shadow-2xl animate-pulse-slow">
-                <h1 class="text-6xl font-extrabold tracking-tight">Welcome to <span class="text-sky-400 text-shadow-glow">Numbus</span></h1>
-                <p class="text-2xl text-slate-400 leading-relaxed">Let's transform your hardware into a powerful, private appliance. We'll guide you through discovery and configuration.</p>
-                
-                <div class="bg-amber-500/10 border border-amber-500/20 p-4 rounded-xl flex gap-4 text-left items-center">
-                    <span class="bg-amber-500 rounded-full p-1 px-1.5 shrink-0">
-                        <i class="mdi mdi-shield-lock text-slate-900 text-sm"></i>
-                    </span>
-                    <p class="text-sm text-amber-200/80 italic"><strong>Privacy First:</strong> No data entered here ever leaves your device. This configurator runs entirely locally in your browser and is fully private.</p>
-                </div>
-
-                <button @click="step = 1" class="px-10 py-4 bg-fuchsia-600 hover:bg-fuchsia-500 rounded-full text-xl font-bold transition-all transform hover:scale-105 shadow-lg shadow-fuchsia-600/20">
-                    Get Started
-                </button>
-            </div>
-
-            <!-- Configuration Card -->
-            <div x-show="step > 0" x-transition:enter="transition ease-out duration-300" class="w-full max-w-5xl bg-[#1e293b] rounded-2xl shadow-2xl border border-slate-700 overflow-hidden flex flex-col min-h-[650px]" x-cloak>
-                <div class="p-8 md:p-10 flex-grow overflow-y-auto custom-scrollbar">
-                    
-                    <!-- Step 1: Deployment Mode -->
-                    <div x-show="step === 1" class="space-y-8">
-                        <div class="border-b border-slate-700 pb-4">
-                            <h2 class="text-4xl font-bold text-sky-400">Deployment Mode</h2>
-                            <p class="text-slate-400 mt-2 text-lg">How would you like to set up your device?</p>
-                        </div>
-                        <div class="grid grid-cols-1 md:grid-cols-2 gap-4">
-                            <button @click="formData.deploymentMode = 'interactive'" 
-                                    :class="formData.deploymentMode === 'interactive' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'"
-                                    class="p-6 border rounded-2xl transition-all text-left group hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
-                                <div class="font-bold text-lg mb-1" :class="formData.deploymentMode === 'interactive' ? 'text-white' : 'text-slate-200 group-hover:text-white'">Interactive</div>
-                                <p class="text-xs transition-colors" :class="formData.deploymentMode === 'interactive' ? 'text-white' : 'text-slate-500 group-hover:text-white'">Guide me through every setting manually.</p>
-                            </button>
-                            <button @click="formData.deploymentMode = 'non-interactive'" 
-                                    :class="formData.deploymentMode === 'non-interactive' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'"
-                                    class="p-6 border rounded-2xl transition-all text-left group hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
-                                <div class="font-bold text-lg mb-1" :class="formData.deploymentMode === 'non-interactive' ? 'text-white' : 'text-slate-200 group-hover:text-white'">Non-Interactive</div>
-                                <p class="text-xs transition-colors" :class="formData.deploymentMode === 'non-interactive' ? 'text-white' : 'text-slate-500 group-hover:text-white'">Reuse an existing configuration from a Git repo.</p>
-                            </button>
-                        </div>
-                    </div>
-
-                    <!-- Step 2: Device Personality -->
-                    <div x-show="step === 2" class="space-y-8">
-                        <div class="border-b border-slate-700 pb-4">
-                            <h2 class="text-4xl font-bold text-sky-400">Device Type</h2>
-                            <p class="text-slate-400 mt-2 text-lg">Select the personality for your new Numbus machine.</p>
-                        </div>
-                        <div class="grid grid-cols-1 md:grid-cols-2 gap-4">
-                            <template x-for="device in deviceTypes" :key="device.id">
-                                <button @click="formData.deviceType = device.id" 
-                                        :class="formData.deviceType === device.id ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'"
-                                        class="p-6 border rounded-2xl transition-all text-left group hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
-                                    <div class="flex items-center gap-4 mb-2">
-                                        <div class="w-12 h-12 bg-slate-800 rounded-xl flex items-center justify-center text-2xl group-hover:scale-110 transition-transform">
-                                            <i :class="'mdi ' + device.icon" class="text-sky-400"></i>
-                                        </div>
-                                        <div>
-                                            <div class="font-bold text-lg capitalize" :class="formData.deviceType === device.id ? 'text-white' : 'text-slate-200'" x-text="device.name"></div>
-                                            <p class="text-xs transition-colors" :class="formData.deviceType === device.id ? 'text-white' : 'text-slate-500 group-hover:text-white'" x-text="device.desc"></p>
-                                        </div>
-                                    </div>
-                                </button>
-                            </template>
-                        </div>
-                    </div>
-
-                    <!-- Step 3: Live Setup & BIOS Guide -->
-                    <div x-show="step === 3" class="space-y-8">
-                        <div class="border-b border-slate-700 pb-4">
-                            <h2 class="text-4xl font-bold text-sky-400">Live Setup</h2>
-                            <p class="text-slate-400 mt-2 text-lg">Follow these steps to prepare your hardware for discovery.</p>
-                        </div>
-                        <div class="grid grid-cols-1 lg:grid-cols-2 gap-10">
-                            <div class="space-y-6">
-                                <div class="flex gap-4">
-                                    <div class="w-8 h-8 rounded-full bg-sky-500/20 text-sky-400 flex items-center justify-center font-bold shrink-0">1</div>
-                                    <p class="text-sm text-slate-300">Create a <strong>NixOS Boot ISO</strong> and flash it to a USB drive.</p>
-                                </div>
-                                <div class="flex gap-4">
-                                    <div class="w-8 h-8 rounded-full bg-sky-500/20 text-sky-400 flex items-center justify-center font-bold shrink-0">2</div>
-                                    <div class="space-y-3">
-                                        <p class="text-sm text-slate-300">In BIOS, enable <strong>UEFI, VT-x/SVM, VT-d/IOMMU, TPM 2.0</strong> and <strong>Disable Secure Boot</strong>.</p>
-                                    </div>
-                                </div>
-                                <div class="flex gap-4">
-                                    <div class="w-8 h-8 rounded-full bg-sky-500/20 text-sky-400 flex items-center justify-center font-bold shrink-0">3</div>
-                                    <p class="text-sm text-slate-300">Boot the device. Type <code class="bg-slate-800 px-1 rounded text-fuchsia-400">ip a</code> to get the IP, then <code class="bg-slate-800 px-1 rounded text-fuchsia-400">passwd</code> to set a temporary password.</p>
-                                </div>
-                            </div>
-                            <div class="bg-slate-900/50 p-6 rounded-2xl border border-slate-700/50 space-y-6">
-                                <div class="space-y-2">
-                                    <label class="text-sm font-bold text-slate-400 uppercase tracking-widest">Live Target IP Address</label>
-                                    <input type="text" x-model="formData.network.live_target_ip" placeholder="192.168.1.100" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40">
-                                </div>
-                                <div class="space-y-2">
-                                    <label class="text-sm font-bold text-slate-400 uppercase tracking-widest">Temporary Password</label>
-                                    <input type="password" x-model="formData.network.live_target_password" placeholder="••••••••" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40">
-                                </div>
-                                <button @click="startDiscovery()" :disabled="!validators.ip(formData.network.live_target_ip) || !formData.network.live_target_password" class="w-full py-4 bg-sky-600 hover:bg-sky-500 disabled:opacity-30 rounded-xl font-bold transition-all shadow-lg shadow-sky-600/20">Initialize Discovery</button>
-                            </div>
-                        </div>
-                    </div>
-
-                    <!-- Step 4: Discovery Waiting Room -->
-                    <div x-show="step === 4" class="flex flex-col items-center justify-center py-20 text-center space-y-8">
-                        <div class="relative w-32 h-32">
-                            <div class="absolute inset-0 rounded-full border-4 border-slate-800 border-t-fuchsia-500 animate-spin"></div>
-                            <div class="absolute inset-4 rounded-full border-4 border-slate-800 border-b-sky-500 animate-spin-slow"></div>
-                        </div>
-                        <h2 class="text-4xl font-bold text-white">Hardware Discovery in Progress</h2>
-                        <p class="text-slate-400 max-w-md mx-auto text-lg">We're remotely probing your machine for disks and interfaces. This usually takes 1-2 minutes.</p>
-                    </div>
-
-                    <!-- Step 5: Language & Region -->
-                    <div x-show="step === 5" class="space-y-8">
-                        <div class="border-b border-slate-700 pb-4">
-                            <h2 class="text-4xl font-bold text-sky-400">Language</h2>
-                            <p class="text-slate-400 mt-2 text-lg">Set your regional preferences to ensure correct time and language display.</p>
-                        </div>
-                        <div class="grid grid-cols-1 md:grid-cols-2 gap-6">
-                            <div class="space-y-2" x-data="{ open: false }">
-                                <div class="flex items-center gap-2">
-                                    <label class="text-base font-semibold text-slate-300">System Language <span class="text-fuchsia-500">*</span></label>
-                                    <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
-                                        <i class="mdi mdi-information-outline"></i>
-                                    </button>
-                                </div>
-                                <p x-show="open" class="text-xs text-sky-400 italic mb-2">Choose the language for your server's system and primary interfaces.</p>
-                                <select x-model="formData.language.lang" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none transition-all appearance-none cursor-pointer">
-                                    <option value="EN">English</option>
-                                    <option value="FR">French</option>
-                                    <option value="DE">German</option>
-                                    <option value="ES">Spanish</option>
-                                    <option value="IT">Italian</option>
-                                </select>
-                            </div>
-                            <div class="space-y-2" x-data="{ open: false }">
-                                <div class="flex items-center gap-2">
-                                    <label class="text-base font-semibold text-slate-300">Country (Locale) <span class="text-fuchsia-500">*</span></label>
-                                    <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
-                                        <i class="mdi mdi-information-outline"></i>
-                                    </button>
-                                </div>
-                                <p x-show="open" class="text-xs text-sky-400 italic mb-2">Defines regional formats for dates, currencies, and numbers (e.g., en_US for USA).</p>
-                                <select x-model="formData.language.locale" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none appearance-none cursor-pointer">
-                                    <option value="en_US">United States</option>
-                                    <option value="en_GB">United Kingdom</option>
-                                    <option value="fr_FR">France</option>
-                                    <option value="de_DE">Germany</option>
-                                    <option value="it_IT">Italy</option>
-                                </select>
-                            </div>
-                            <div class="space-y-2" x-data="{ open: false }">
-                                <div class="flex items-center gap-2">
-                                    <label class="text-base font-semibold text-slate-300">Timezone <span class="text-fuchsia-500">*</span></label>
-                                    <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
-                                        <i class="mdi mdi-information-outline"></i>
-                                    </button>
-                                </div>
-                                <p x-show="open" class="text-xs text-sky-400 italic mb-2">Used to synchronize server logs, backups, and scheduled updates with your local time.</p>
-                                <select x-model="formData.language.timezone" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none appearance-none cursor-pointer">
-                                    <option value="UTC">UTC</option>
-                                    <option value="Europe/Paris">Europe/Paris</option>
-                                    <option value="Europe/London">Europe/London</option>
-                                    <option value="Europe/Berlin">Europe/Berlin</option>
-                                    <option value="America/New_York">America/New_York</option>
-                                    <option value="America/Los_Angeles">America/Los_Angeles</option>
-                                </select>
-                            </div>
-                        </div>
-                    </div>
-
-                    <!-- Step 10: Users -->
-                    <div x-show="step === 10" class="space-y-8" x-data="{ groupHelp: false }">
-                        <div class="border-b border-slate-700 pb-4 flex justify-between items-end">
-                            <div>
-                                <h2 class="text-4xl font-bold text-sky-400">Users</h2>
-                                <p class="text-slate-400 mt-2 text-lg">Manage people and their access permissions.</p>
-                            </div>
-                            <button @click="addUser()" 
-                                    :disabled="formData.users.length >= 10"
-                                    :class="formData.users.length >= 10 ? 'opacity-50 cursor-not-allowed' : ''"
-                                    class="bg-sky-600 hover:bg-sky-500 px-4 py-2 rounded-lg text-sm font-bold transition-all flex items-center gap-2">
-                                <i class="mdi mdi-account-plus"></i> Add User (<span x-text="formData.users.length"></span>/10)
-                            </button>
-                        </div>
-                        
-                        <div class="space-y-4 pr-2">
-                            <template x-for="(user, index) in formData.users" :key="index">
-                                <div :class="user.isStatic ? 'border-fuchsia-500/50 bg-fuchsia-500/5' : 'border-slate-700 bg-slate-900/50'" class="border p-6 rounded-2xl space-y-4 relative group">
-                                    <div class="flex justify-between items-start">
-                                        <div class="flex items-center gap-3">
-                                            <div class="w-10 h-10 rounded-full bg-slate-800 flex items-center justify-center text-sky-400 font-bold" x-text="(user.name.charAt(0) || user.username.charAt(0) || '?').toUpperCase()"></div>
-                                            <div>
-                                                <p class="font-bold text-slate-200 text-lg group-hover:text-white transition-colors" x-text="user.name || user.username || 'New User'"></p>
-                                                <p class="text-xs text-slate-500 uppercase tracking-widest font-bold group-hover:text-white transition-colors" x-text="user.isStatic ? 'Administrator (Sudo)' : 'Standard User'"></p>
-                                            </div>
-                                        </div>
-                                        <button x-show="!user.isStatic" @click="removeUser(index)" class="text-slate-500 hover:text-red-500 transition-colors">
-                                            <i class="mdi mdi-trash-can-outline text-xl"></i>
-                                        </button>
-                                    </div>
-                                    
-                                    <div class="grid grid-cols-1 md:grid-cols-3 gap-4">
-                                        <div class="space-y-1">
-                                            <label class="text-xs font-bold text-slate-400 uppercase tracking-tighter">Username <span class="text-fuchsia-500" x-show="user.isStatic">*</span></label>
-                                            <div class="relative">
-                                                <i class="mdi mdi-account absolute left-3 top-1/2 -translate-y-1/2 text-slate-600"></i>
-                                                <input type="text" x-model="user.username" :disabled="user.isStatic" 
-                                                       :class="user.isStatic ? 'opacity-50 cursor-not-allowed' : ''" 
-                                                       class="w-full bg-slate-950 border border-slate-700 rounded-lg p-2 pl-10 text-sm outline-none focus:ring-1 focus:ring-fuchsia-500 placeholder:text-slate-500/40">
-                                            </div>
-                                        </div>
-                                        <div class="space-y-1">
-                                            <label class="text-xs font-bold text-slate-400 uppercase tracking-tighter">Display Name <span class="text-fuchsia-500" x-show="user.isStatic">*</span></label>
-                                            <div class="relative">
-                                                <i class="mdi mdi-card-account-details absolute left-3 top-1/2 -translate-y-1/2 text-slate-600"></i>
-                                                <input type="text" x-model="user.name" :placeholder="user.isStatic ? 'Alexandre' : 'Full Name'" 
-                                                       class="w-full bg-slate-950 border border-slate-700 rounded-lg p-2 pl-10 text-sm outline-none focus:ring-1 focus:ring-fuchsia-500 placeholder:text-slate-500/40">
-                                            </div>
-                                        </div>
-                                        <div class="space-y-1">
-                                            <label class="text-xs font-bold text-slate-400 uppercase tracking-tighter">Email Address <span class="text-fuchsia-500" x-show="user.isStatic">*</span></label>
-                                            <div class="relative">
-                                                <i class="mdi mdi-email absolute left-3 top-1/2 -translate-y-1/2 text-slate-600"></i>
-                                                <input type="email" x-model="user.email" placeholder="admin@example.com" 
-                                                       class="w-full bg-slate-950 border border-slate-700 rounded-lg p-2 pl-10 text-sm outline-none focus:ring-1 focus:ring-fuchsia-500 placeholder:text-slate-500/40">
-                                            </div>
-                                        </div>
-                                    </div>
-
-                                    <div class="space-y-3" x-show="!user.isStatic">
-                                        <label class="text-sm font-bold text-slate-500 uppercase">Assigned Groups (ACLs)</label>
-                                        <div class="flex flex-wrap gap-2">
-                                            <template x-for="group in Object.keys(formData.groups)" :key="group" x-init="$nextTick(() => {})">
-                                                <label :class="user.groups.includes(group) ? 'bg-sky-500/20 border-sky-500/50 text-sky-400' : 'bg-slate-800 border-slate-700 text-slate-500 opacity-60 hover:opacity-100'" 
-                                                       class="px-4 py-1.5 border rounded-full text-xs font-bold cursor-pointer transition-all flex items-center gap-2">
-                                                    <input type="checkbox" :value="group" x-model="user.groups" class="hidden">
-                                                    <span x-text="group.charAt(0).toUpperCase() + group.slice(1).replace('_', ' ')"></span>
-                                                </label>
-                                            </template>
-                                        </div>
-                                    </div>
-                                </div>
-                            </template>
-                        </div>
-
-                        <!-- Advanced Group Customization -->
-                        <div class="pt-6 border-t border-slate-700">
-                            <button @click="showGroupCustomization = !showGroupCustomization" class="flex items-center gap-2 text-slate-400 hover:text-white transition-colors">
-                                <svg :class="showGroupCustomization ? 'rotate-90' : ''" class="w-4 h-4 transition-transform" fill="currentColor" viewBox="0 0 20 20"><path fill-rule="evenodd" d="M7.293 14.707a1 1 0 010-1.414L10.586 10 7.293 6.707a1 1 0 011.414-1.414l4 4a1 1 0 010 1.414l-4 4a1 1 0 01-1.414 0z" clip-rule="evenodd"></path></svg>
-                                <span class="text-sm font-bold uppercase tracking-wider">Configure Group ACLs (RBAC)</span>
-                            </button>
-                            
-                            <div x-show="showGroupCustomization" x-transition class="mt-6 space-y-8 bg-slate-900/30 p-6 rounded-2xl border border-slate-700/50">
-                                <div class="flex gap-2">
-                                    <input type="text" x-model="newGroupName" placeholder="Add custom group name (e.g. Guest)..." class="flex-grow bg-slate-900 border border-slate-700 rounded-lg p-2 text-sm outline-none focus:ring-1 focus:ring-fuchsia-500">
-                                    <button @click="addGroup()" class="bg-fuchsia-600 hover:bg-fuchsia-500 px-4 py-2 rounded-lg text-sm font-bold">Add</button>
-                                </div>
-
-                                <template x-for="group in Object.keys(formData.groups).filter(g => g !== 'admin')" :key="group">
-                                    <div class="space-y-4">
-                                        <h4 class="text-fuchsia-400 font-bold uppercase text-base tracking-widest" x-text="group.replaceAll('_', ' ') + ' access'"></h4>
-                                        <div class="grid grid-cols-2 md:grid-cols-4 gap-2">
-                                            <template x-for="app in webApps" :key="app">
-                                                <label :class="formData.groups[group].includes(app) ? 'text-sky-400 bg-sky-500/5 border-sky-500/20' : 'text-slate-600 border border-slate-800 opacity-50'" class="flex items-center gap-3 p-3 border rounded-lg cursor-pointer text-sm font-bold transition-all">
-                                                    <input type="checkbox" :value="app" x-model="formData.groups[group]" class="w-4 h-4 rounded border-slate-700 text-sky-500 focus:ring-sky-500 bg-slate-800">
-                                                    <span class="capitalize" x-text="app"></span>
-                                                </label>
-                                            </template>
-                                        </div>
-                                    </div>
-                                </template>
-                            </div>
-                        </div>
-                    </div>
-
-                    <!-- Step 11: Alerts (Mail) -->
-                    <div x-show="step === 11" class="space-y-8">
-                        <div class="border-b border-slate-700 pb-4">
-                            <h2 class="text-4xl font-bold text-sky-400">Mail</h2>
-                            <p class="text-slate-400 mt-2 text-lg">Configure system notifications and service alerts.</p>
-                        </div>
-                        <div class="grid grid-cols-1 md:grid-cols-2 gap-8">
-                            <div class="space-y-2" x-data="{ open: false }">
-                                <div class="flex items-center gap-2">
-                                    <label class="text-base font-semibold text-slate-300">SMTP Username <span class="text-fuchsia-500">*</span></label>
-                                    <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
-                                        <i class="mdi mdi-information-outline"></i>
-                                    </button>
-                                </div>
-                                <p x-show="open" class="text-xs text-sky-400 italic mb-2">The email address used to send alerts (e.g. system@yourdomain.com).</p>
-                                <input type="text" x-model="formData.mail.smtp_username" placeholder="your-address@your-domain.com" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40">
-                            </div>
-                            <div class="space-y-2" x-data="{ open: false }">
-                                <div class="flex items-center gap-2">
-                                    <label class="text-base font-semibold text-slate-300">SMTP Password <span class="text-fuchsia-500">*</span></label>
-                                    <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
-                                        <i class="mdi mdi-information-outline"></i>
-                                    </button>
-                                </div>
-                                <p x-show="open" class="text-xs text-sky-400 italic mb-2">The password or app-token for the sender email account.</p>
-                                <input type="password" x-model="formData.mail.smtp_password" placeholder="emrp raps vzoi vnoe" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40">
-                            </div>
-                            <div class="space-y-2" x-data="{ open: false }">
-                                <div class="flex items-center gap-2">
-                                    <label class="text-base font-semibold text-slate-300">SMTP Host <span class="text-fuchsia-500">*</span></label>
-                                    <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
-                                        <i class="mdi mdi-information-outline"></i>
-                                    </button>
-                                </div>
-                                <p x-show="open" class="text-xs text-sky-400 italic mb-2">The server address of your email provider (e.g. smtp.gmail.com).</p>
-                                <input type="text" x-model="formData.mail.smtp_host" placeholder="smtp.yourdomain.com" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40">
-                            </div>
-                            <div class="space-y-2" x-data="{ open: false }">
-                                <div class="flex items-center gap-2">
-                                    <label class="text-base font-semibold text-slate-300">SMTP Port <span class="text-fuchsia-500">*</span></label>
-                                    <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
-                                        <i class="mdi mdi-information-outline"></i>
-                                    </button>
-                                </div>
-                                <p x-show="open" class="text-xs text-sky-400 italic mb-2">The network port for secure mail transmission. Common: 587 (TLS) or 465 (SSL).</p>
-                                <input type="text" x-model="formData.mail.smtp_port" placeholder="587" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40">
-                            </div>
-                        </div>
-                    </div>
-
-                    <!-- Step 12: Disks -->
-                    <div x-show="step === 12" class="space-y-8">
-                        <div class="border-b border-slate-700 pb-4">
-                            <h2 class="text-4xl font-bold text-sky-400">Disks</h2>
-                            <p class="text-slate-400 mt-2 text-lg">Select where NixOS will be installed and where your data will live.</p>
-                        </div>
-
-                        <!-- Critical Warning -->
-                        <div class="bg-red-500/10 border border-red-500/50 p-6 rounded-2xl flex gap-6 items-start">
-                            <div class="bg-red-500 rounded-full p-2 mt-1 shrink-0">
-                                <i class="mdi mdi-alert-octagon text-white text-xl"></i>
-                            </div>
-                            <div>
-                                <h4 class="text-red-400 font-bold text-lg">Data Wipe Warning</h4>
-                                <p class="text-sm text-red-200/80 leading-relaxed">Selecting a disk for Numbus will <strong>completely erase all existing data</strong> on that drive. Ensure you have backed up any important information before proceeding.</p>
-                            </div>
-                        </div>
-
-                        <div class="grid grid-cols-1 md:grid-cols-2 gap-x-10 gap-y-6 items-start">
-                            <!-- Headers Row: Aligned horizontally -->
-                            <div class="space-y-2">
-                                <h3 class="text-xl font-bold text-white flex items-center gap-2">
-                                    <i class="mdi mdi-nix text-sky-400"></i> Boot Disks
-                                </h3>
-                                <p class="text-sm text-slate-400">Choose 1 (Stripe) or 2 (Mirror) disks for the operating system.</p>
-                            </div>
-
-                            <div class="space-y-2">
-                                <h3 class="text-xl font-bold text-white flex items-center gap-2">
-                                    <i class="mdi mdi-server text-sky-400"></i> Data Disks
-                                </h3>
-                                <p class="text-sm text-slate-400">Select disks for storage. SnapRAID parity is used if >1 disk is chosen.</p>
-                            </div>
-
-                            <!-- Lists Row: Aligned horizontally -->
-                            <div class="space-y-3">
-                                    <template x-for="disk in sortedDisks()" :key="disk.id">
-                                        <button @click="toggleDisk(disk.id, 'boot')"
-                                                x-show="!formData.disks.data.includes(disk.id)"
-                                                :class="formData.disks.boot.includes(disk.id) ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700 opacity-60 hover:opacity-100'"
-                                                class="w-full p-4 border rounded-xl text-left transition-all group">
-                                            <div class="flex justify-between items-center">
-                                                <div class="flex items-center gap-3">
-                                                    <i :class="'mdi ' + getDiskIcon(disk.type) + ' text-2xl'" :class="formData.disks.boot.includes(disk.id) ? 'text-white' : 'text-slate-500'"></i>
-                                                    <div>
-                                                        <div class="font-bold text-sm" x-text="disk.name"></div>
-                                                        <div class="text-xs uppercase text-slate-500 font-bold" x-text="disk.size + ' • ' + disk.type"></div>
-                                                    </div>
-                                                </div>
-                                                <div class="text-right">
-                                                    <div class="text-xs font-bold" :class="disk.health === 'PASSED' ? 'text-green-500' : 'text-amber-500'" x-text="'Health: ' + disk.health"></div>
-                                                </div>
-                                            </div>
-                                            <div x-show="formData.disks.boot.includes(disk.id) && disk.health !== 'PASSED'" class="mt-3 p-2 bg-amber-500/10 border border-amber-500/30 rounded-lg">
-                                                <p class="text-xs text-amber-200/80"><i class="mdi mdi-alert-circle mr-1"></i>Disk did not passed SMART test. You should consider using another disk.</p>
-                                            </div>
-                                        </button>
-                                    </template>
-
-                                <div x-show="formData.disks.boot.length === 1" class="bg-amber-500/5 border border-amber-500/20 p-4 rounded-xl">
-                                    <p class="text-xs text-amber-200/70"><i class="mdi mdi-shield-alert mr-1"></i> <strong>Striped Config:</strong> Using only one boot disk provides no hardware redundancy. If this drive fails, the system will not boot.</p>
-                                </div>
-                                <div x-show="formData.disks.boot.length === 2" class="bg-green-500/5 border border-green-500/20 p-4 rounded-xl">
-                                    <p class="text-xs text-green-400/70"><i class="mdi mdi-shield-check mr-1"></i> <strong>Mirror RAID Active:</strong> Your data is protected by redundancy.</p>
-                                </div>
-                            </div>
-
-                            <div class="space-y-3">
-                                    <template x-for="disk in sortedDisks()" :key="disk.id">
-                                        <button @click="toggleDisk(disk.id, 'data')"
-                                                x-show="!formData.disks.boot.includes(disk.id)"
-                                                :class="formData.disks.data.includes(disk.id) ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700 opacity-60 hover:opacity-100'"
-                                                class="w-full p-4 border rounded-xl text-left transition-all group">
-                                            <div class="flex justify-between items-center">
-                                                <div class="flex items-center gap-3">
-                                                    <i :class="'mdi ' + getDiskIcon(disk.type) + ' text-2xl'" :class="formData.disks.data.includes(disk.id) ? 'text-white' : 'text-slate-500'"></i>
-                                                    <div>
-                                                        <div class="font-bold text-sm" x-text="disk.name"></div>
-                                                        <div class="text-xs uppercase text-slate-500 font-bold" x-text="disk.size + ' • ' + disk.type"></div>
-                                                    </div>
-                                                </div>
-                                                <div class="text-right">
-                                                    <div class="text-xs font-bold" :class="disk.health === 'PASSED' ? 'text-green-500' : 'text-amber-500'" x-text="'Health: ' + disk.health"></div>
-                                                </div>
-                                            </div>
-                                            <div x-show="formData.disks.data.includes(disk.id) && disk.health !== 'PASSED'" class="mt-3 p-2 bg-amber-500/10 border border-amber-500/30 rounded-lg">
-                                                <p class="text-xs text-amber-200/80"><i class="mdi mdi-alert-circle mr-1"></i>Disk did not passed SMART test. You should consider using another disk.</p>
-                                            </div>
-                                        </button>
-                                    </template>
-
-                                <div x-show="formData.disks.data.length === 1" class="bg-amber-500/5 border border-amber-500/20 p-4 rounded-xl">
-                                    <p class="text-xs text-amber-200/70"><i class="mdi mdi-shield-alert mr-1"></i> <strong>Striped Config:</strong> One data disk provides no parity. Data loss will occur if this drive fails.</p>
-                                </div>
-                                <div x-show="formData.disks.data.length > 1" class="bg-green-500/5 border border-green-500/20 p-4 rounded-xl">
-                                    <p class="text-xs text-green-400/70"><i class="mdi mdi-shield-check mr-1"></i> <strong>SnapRAID Active:</strong> Your data is protected by redundancy.</p>
-                                </div>
-                            </div>
-                        </div>
-                    </div>
-
-                    <!-- Step 6: Network -->
-                    <div x-show="step === 6" class="space-y-8">
-                        <div class="border-b border-slate-700 pb-4">
-                            <h2 class="text-4xl font-bold text-sky-400">Network</h2>
-                            <p class="text-slate-400 mt-2 text-lg">Target host networking and server IP allocation.</p>
-                        </div>
-                        <div class="grid grid-cols-1 md:grid-cols-2 gap-8">
-                            <div class="space-y-2" x-data="{ open: false }">
-                                <div class="flex items-center gap-2">
-                                    <label class="text-base font-semibold text-slate-300">Server Static IP <span class="text-fuchsia-500">*</span></label>
-                                    <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
-                                        <i class="mdi mdi-information-outline"></i>
-                                    </button>
-                                </div>
-                                <p x-show="open" class="text-xs text-sky-400 italic mb-2">The fixed address of your server on your local network. It should be outside your router's DHCP range.</p>
-                                <input type="text" x-model="formData.network.ip_address" placeholder="192.168.1.5" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40">
-                            </div>
-                            <div class="space-y-2" x-data="{ open: false }">
-                                <div class="flex items-center gap-2">
-                                    <label class="text-base font-semibold text-slate-300">Router IP <span class="text-fuchsia-500">*</span></label>
-                                    <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
-                                        <i class="mdi mdi-information-outline"></i>
-                                    </button>
-                                </div>
-                                <p x-show="open" class="text-xs text-sky-400 italic mb-2">The address of the device providing internet (the gateway). Usually 192.168.1.1.</p>
-                                <input type="text" x-model="formData.network.router_ip" placeholder="192.168.1.1" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40">
-                            </div>
-                        </div>
-                    </div>
-
-                    <!-- Step 7: Remote Access -->
-                    <div x-show="step === 7" class="space-y-8">
-                        <div class="border-b border-slate-700 pb-4">
-                            <h2 class="text-4xl font-bold text-sky-400">Remote Access</h2>
-                            <p class="text-slate-400 mt-2 text-lg">Choose how you will access your server from outside your home.</p>
-                        </div>
-
-                        <div class="space-y-6">
-                            <div class="grid grid-cols-1 gap-4">
-                                <!-- Netbird Cloud - Only for <= 5 users -->
-                                <button x-show="formData.users.length <= 5" 
-                                        @click="formData.remote_access.provider = 'netbird-cloud'" 
-                                        :class="formData.remote_access.provider === 'netbird-cloud' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" 
-                                        class="p-6 border rounded-2xl transition-all text-left group hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
-                                    <div class="flex justify-between items-center mb-2">
-                                        <div class="flex items-center gap-4">
-                                            <img src="https://cdn.jsdelivr.net/gh/selfhst/icons@main/svg/netbird.svg" class="w-8 h-8" alt="NetBird">
-                                            <div class="font-bold text-xl" :class="formData.remote_access.provider === 'netbird-cloud' ? 'text-white' : 'text-slate-200 group-hover:text-white'">NetBird Cloud</div>
-                                        </div>
-                                        <span class="text-xs bg-green-500/20 text-green-400 px-2 py-1 rounded uppercase font-bold">Recommended for small teams</span>
-                                    </div>
-                                    <p class="text-sm leading-relaxed transition-colors" :class="formData.remote_access.provider === 'netbird-cloud' ? 'text-white' : 'text-slate-400 group-hover:text-white'">The easiest zero-trust solution. Perfect for families and teams of up to 5 people.</p>
-                                </button>
-
-                                <!-- Netbird Cloud Token Input -->
-                                <div x-show="formData.remote_access.provider === 'netbird-cloud'" x-transition class="mt-2 space-y-4 bg-slate-900/40 p-6 rounded-2xl border border-slate-700/50">
-                                    <div class="flex items-center gap-2">
-                                        <label class="text-base font-semibold text-slate-300">Service User Token <span class="text-fuchsia-500">*</span></label>
-                                        <div x-data="{ open: false }" class="relative">
-                                            <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
-                                                <i class="mdi mdi-information-outline text-lg"></i>
-                                            </button>
-                                            <div x-show="open" @click.away="open = false" class="absolute left-0 md:left-full ml-0 md:ml-4 top-full md:top-0 mt-2 md:mt-0 w-80 p-5 bg-slate-800 rounded-xl border border-slate-600 shadow-2xl z-50 text-sm leading-relaxed">
-                                                <p class="font-bold text-sky-400 mb-2">How to get your token:</p>
-                                                <ol class="list-decimal list-inside space-y-2 text-slate-300">
-                                                    <li>Create an account at <a href="https://app.netbird.io" target="_blank" class="text-fuchsia-400 underline font-bold">NetBird</a></li>
-                                                    <li>Verify your email via the link sent to you</li>
-                                                    <li>Navigate to <span class="font-mono bg-slate-900 px-1 rounded">Teams > Service Users</span></li>
-                                                    <li>Click <span class="font-bold text-white">"Create Service User"</span>, name it "numbus-server" and set role to <span class="text-white">"Network Admin"</span></li>
-                                                    <li>Click on the new user, then <span class="text-white">"Add Token"</span>. Name it "deployment" and set expiry to <span class="text-white">7 days</span></li>
-                                                    <li>Copy the token and paste it here!</li>
-                                                </ol>
-                                            </div>
-                                        </div>
-                                    </div>
-                                    <input type="password" x-model="formData.remote_access.netbird_token" placeholder="nbp_..." class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40 text-base">
-                                </div>
-
-                                <!-- Netbird Self-Hosted -->
-                                <button @click="formData.remote_access.provider = 'netbird-selfhosted'" 
-                                        :class="formData.remote_access.provider === 'netbird-selfhosted' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" 
-                                        class="p-6 border rounded-2xl transition-all text-left group hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
-                                    <div class="flex items-center gap-3 mb-2">
-                                        <img src="https://cdn.jsdelivr.net/gh/selfhst/icons@main/svg/netbird.svg" class="w-8 h-8" alt="NetBird">
-                                        <div class="font-bold text-xl" :class="formData.remote_access.provider === 'netbird-selfhosted' ? 'text-white' : 'text-slate-200 group-hover:text-white'">NetBird Self-Hosted</div>
-                                    </div>
-                                    <p class="text-sm leading-relaxed transition-colors" :class="formData.remote_access.provider === 'netbird-selfhosted' ? 'text-white' : 'text-slate-400 group-hover:text-white'">Complete digital sovereignty. You host the management platform on your own Numbus server. Required for teams larger than 5 users.</p>
-                                </button>
-
-                                <!-- External -->
-                                <button @click="formData.remote_access.provider = 'external'" 
-                                        :class="formData.remote_access.provider === 'external' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" 
-                                        class="p-6 border rounded-2xl transition-all text-left group hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
-                                    <div class="flex items-center gap-3 mb-2">
-                                        <i class="mdi mdi-earth text-3xl" :class="formData.remote_access.provider === 'external' ? 'text-white' : 'text-sky-400 group-hover:text-white'"></i>
-                                        <div class="font-bold text-xl" :class="formData.remote_access.provider === 'external' ? 'text-white' : 'text-slate-200 group-hover:text-white'">External / Manual Access</div>
-                                    </div>
-                                    <p class="text-sm leading-relaxed transition-colors" :class="formData.remote_access.provider === 'external' ? 'text-white' : 'text-slate-400 group-hover:text-white'">Use your own VPN or direct port-forwarding. <strong>Warning:</strong> This server won't be compatible with Numbus integrated offsite backups.</p>
-                                </button>
-                            </div>
-                        </div>
-                    </div>
-
-                    <!-- Step 9: Security -->
-                    <div x-show="step === 9" class="space-y-8">
-                        <div class="border-b border-slate-700 pb-4">
-                            <h2 class="text-4xl font-bold text-sky-400">Security</h2>
-                            <p class="text-slate-400 mt-2 text-lg">Manage infrastructure access and advanced protection.</p>
-                        </div>
-
-                        <div class="space-y-6">
-                            <!-- SSO Toggle -->
-                            <div class="bg-slate-900/40 p-6 rounded-2xl border border-slate-700/50 space-y-4">
-                                <div class="flex items-center justify-between">
-                                    <div class="flex items-center gap-3">
-                                        <label class="text-lg font-bold text-slate-200 transition-colors">Use Single Sign-On (SSO)</label>
-                                        <div x-data="{ open: false }" class="relative">
-                                            <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
-                                                <i class="mdi mdi-information-outline text-lg"></i>
-                                            </button>
-                                            <div x-show="open" @click.away="open = false" class="absolute left-full ml-4 top-0 w-64 p-4 bg-slate-800 rounded-xl border border-slate-600 shadow-2xl z-50 text-sm leading-relaxed">
-                                                One login for everything. Centralized identity management via LLDAP and Authelia. Provides enterprise-grade security and 2FA for all your apps.
-                                            </div>
-                                        </div>
-                                    </div>
-                                    <button @click="formData.security.use_sso = !formData.security.use_sso" 
-                                            :class="formData.security.use_sso ? 'bg-fuchsia-600 shadow-[0_0_10px_rgba(192,38,211,0.4)]' : 'bg-slate-700'"
-                                            class="relative inline-flex h-6 w-11 shrink-0 cursor-pointer rounded-full border-2 border-transparent transition-colors duration-200 ease-in-out focus:outline-none">
-                                        <span :class="formData.security.use_sso ? 'translate-x-5' : 'translate-x-0'" class="pointer-events-none inline-block h-5 w-5 transform rounded-full bg-white shadow ring-0 transition duration-200 ease-in-out"></span>
-                                    </button>
-                                </div>
-                            </div>
-
-                            <!-- Public Sharing Toggle -->
-                            <div class="bg-slate-900/40 p-6 rounded-2xl border border-slate-700/50 space-y-4">
-                                <div class="flex items-center justify-between">
-                                    <div class="flex items-center gap-3">
-                                        <label class="text-lg font-bold text-slate-200">Enable Secure Public Sharing</label>
-                                        <div x-data="{ open: false }" class="relative">
-                                            <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
-                                                <i class="mdi mdi-information-outline text-lg"></i>
-                                            </button>
-                                            <div x-show="open" @click.away="open = false" class="absolute left-full ml-4 top-0 w-64 p-4 bg-slate-800 rounded-xl border border-slate-600 shadow-2xl z-50 text-sm leading-relaxed">
-                                                Allows you to share links (like Nextcloud folders) with friends who don't have NetBird. Only specific URLs are exposed; everything else remains locked behind the VPN.
-                                            </div>
-                                        </div>
-                                    </div>
-                                    <button @click="formData.security.public_sharing = !formData.security.public_sharing" 
-                                            :class="formData.security.public_sharing ? 'bg-fuchsia-600 shadow-[0_0_10px_rgba(192,38,211,0.4)]' : 'bg-slate-700'"
-                                            class="relative inline-flex h-6 w-11 shrink-0 cursor-pointer rounded-full border-2 border-transparent transition-colors duration-200 ease-in-out focus:outline-none">
-                                        <span :class="formData.security.public_sharing ? 'translate-x-5' : 'translate-x-0'" class="pointer-events-none inline-block h-5 w-5 transform rounded-full bg-white shadow ring-0 transition duration-200 ease-in-out"></span>
-                                    </button>
-                                </div>
-                            </div>
-                        </div>
-
-                        <div class="space-y-4" x-data="{ help: false }">
-                            <div class="flex items-center gap-2">
-                                <label class="text-lg font-bold text-slate-200">Cloudflare DNS API Token <span class="text-fuchsia-500">*</span></label>
-                                <button @click="help = !help" class="text-slate-500 hover:text-sky-400 transition-colors">
-                                    <i class="mdi mdi-information-outline text-lg"></i>
-                                </button>
-                            </div>
-                            <p x-show="help" class="text-xs text-sky-400 italic mb-2">A security token from Cloudflare that allows Numbus to verify you own the domain and secure it via SSL.</p>
-                            <input type="password" x-model="formData.ssl.cloudflare_token" placeholder="••••••••••••••••" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40">
-                        </div>
-
-                        <div class="space-y-4" x-data="{ open: false }">
-                            <div class="flex items-center gap-2">
-                                <label class="text-lg font-bold text-slate-200">Authorized SSH Public Keys <span class="text-fuchsia-500">*</span></label>
-                                <button @click="open = !open" class="text-slate-500 hover:text-sky-400 transition-colors">
-                                    <i class="mdi mdi-information-outline text-lg"></i>
-                                </button>
-                            </div>
-                            <p x-show="open" class="text-xs text-sky-400 italic mb-2">A secure way to log in without a password. Like a physical key, but digital.</p>
-                            <p class="text-sm text-slate-500 mb-2 italic">Paste here the public keys that are allowed to connect to your server's admin account (one per line).</p>
-                            <textarea x-model="formData.security.ssh_keys" rows="5" placeholder="ssh-ed25519 AAAAC3NzaC1lZDI1NTE5..." class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none transition-all font-mono text-base placeholder:text-slate-500/40"></textarea>
-                        </div>
-
-                        <!-- Security Warning -->
-                        <div class="bg-amber-500/10 border border-amber-500/20 p-6 rounded-2xl flex gap-6 text-left items-start mt-4">
-                            <div class="bg-amber-500 rounded-full p-2 mt-1 shrink-0">
-                                <i class="mdi mdi-alert text-slate-900 text-xl"></i>
-                            </div>
-                            <p class="text-base text-amber-200/90 leading-relaxed font-medium"><strong>Security Warning:</strong> Anyone who possesses one of these public keys AND their corresponding private key will have full administrator access to your server. Protect your private keys as if they were physical keys to your home.</p>
-                        </div>
-                    </div>
-
-                    <!-- Step 8: Services selection -->
-                    <div x-show="step === 8" class="space-y-8">
-                        <div class="border-b border-slate-700 pb-4">
-                            <h2 class="text-4xl font-bold text-sky-400">Services</h2>
-                            <p class="text-slate-400 mt-2 text-lg">Choose the applications to deploy.</p>
-                        </div>
-                        
-                        <div class="space-y-10 pr-4">
-                            <div class="space-y-2">
-                                <div class="flex items-center gap-2">
-                                    <label class="text-lg font-bold text-slate-200">Domain Name (FQDN) <span class="text-fuchsia-500">*</span></label>
-                                    <button @click="openHelp('domain')" class="text-slate-500 hover:text-sky-400">
-                                        <i class="mdi mdi-information-outline"></i>
-                                    </button>
-                                </div>
-                                <input type="text" x-model="formData.ssl.domain" placeholder="example.com" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40">
-                            </div>
-
-                            <h3 class="text-lg font-semibold text-fuchsia-400">DNS Filter</h3>
-                            <div class="flex gap-4">
-                                <template x-for="dns in ['pi-hole', 'adguard']" :key="dns">
-                                    <button @click="formData.services.dns = dns" :class="formData.services.dns === dns ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" class="flex-1 p-5 border rounded-xl transition-all text-left group hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
-                                        <div class="flex justify-between items-center mb-2">
-                                            <div class="flex items-center gap-3">
-                                                <img :src="'https://cdn.jsdelivr.net/gh/selfhst/icons@main/svg/' + (serviceMetadata[dns].icon || dns) + '.svg'" class="w-6 h-6" :alt="dns">
-                                                <div class="font-bold capitalize text-lg" :class="formData.services.dns === dns ? 'text-white' : 'text-slate-200 group-hover:text-white'" x-text="dns"></div>
-                                            </div>
-                                            <a :href="serviceMetadata[dns].link" target="_blank" @click.stop class="text-xs text-sky-400 underline opacity-40 group-hover:opacity-100 transition-opacity">Website</a>
-                                        </div>
-                                        <p class="text-sm leading-relaxed transition-colors" :class="formData.services.dns === dns ? 'text-white' : 'text-slate-400 group-hover:text-white'" x-text="serviceMetadata[dns].desc"></p>
-                                    </button>
-                                </template>
-                            </div>
-
-                            <h3 class="text-lg font-semibold text-fuchsia-400 mt-6">Web Applications</h3>
-                            <div class="grid grid-cols-2 md:grid-cols-3 gap-4">
-                                <template x-for="app in webApps" :key="app">
-                                    <label :class="formData.services.apps.includes(app) ? 'border-fuchsia-500 bg-fuchsia-600/20' : 'border-slate-700 bg-slate-900/40'" class="flex flex-col gap-3 p-5 border rounded-xl cursor-pointer transition-all hover:bg-fuchsia-600/20 hover:border-fuchsia-500 group relative">
-                                        <img :src="'https://cdn.jsdelivr.net/gh/selfhst/icons@main/svg/' + (serviceMetadata[app].icon || app) + '.svg'" :class="formData.services.apps.includes(app) ? 'opacity-100' : 'opacity-20 group-hover:opacity-100'" class="w-8 h-8 transition-opacity absolute right-4 top-4" :alt="app">
-                                        <div class="flex items-center gap-3">
-                                            <input type="checkbox" :value="app" x-model="formData.services.apps" class="w-5 h-5 rounded border-slate-700 text-sky-500 focus:ring-sky-500 bg-slate-800">
-                                            <span class="text-base font-bold capitalize" x-text="app"></span>
-                                        </div>
-                                        <p class="text-sm leading-normal transition-colors" :class="formData.services.apps.includes(app) ? 'text-white' : 'text-slate-500 group-hover:text-white'" x-text="serviceMetadata[app].desc"></p>
-                                        <a :href="serviceMetadata[app].link" target="_blank" class="text-xs text-sky-400 underline opacity-0 group-hover:opacity-100 transition-opacity mt-auto">Learn more</a>
-                                    </label>
-                                </template>
-                            </div>
-
-                            <h3 class="text-lg font-semibold text-fuchsia-400 mt-6">System Services</h3>
-                            <div class="grid grid-cols-2 gap-4">
-                                <template x-for="sys in ['clamav', 'virtualization']" :key="sys">
-                                    <label :class="formData.services.system.includes(sys) ? 'border-fuchsia-500 bg-fuchsia-600/20' : 'border-slate-700 bg-slate-900/40'" class="flex flex-col gap-3 p-5 border rounded-xl cursor-pointer transition-all hover:bg-fuchsia-600/20 hover:border-fuchsia-500 group">
-                                        <div class="flex items-center justify-between">
-                                            <div class="flex items-center gap-3">
-                                                <input type="checkbox" :value="sys" x-model="formData.services.system" class="w-5 h-5 rounded border-slate-700 text-sky-500 focus:ring-sky-500 bg-slate-800">
-                                                <span class="text-base font-bold capitalize" x-text="sys"></span>
-                                            </div>
-                                            <img :src="'https://cdn.jsdelivr.net/gh/selfhst/icons@main/svg/' + (serviceMetadata[sys].icon || sys) + '.svg'" :class="formData.services.system.includes(sys) ? 'opacity-100' : 'opacity-40 group-hover:opacity-100'" class="w-6 h-6 transition-opacity" :alt="sys">
-                                        </div>
-                                        <p class="text-sm transition-colors" :class="formData.services.system.includes(sys) ? 'text-white' : 'text-slate-500 group-hover:text-white'" x-text="serviceMetadata[sys].desc"></p>
-                                        <a :href="serviceMetadata[sys].link" target="_blank" class="text-xs text-sky-400 underline opacity-0 group-hover:opacity-100 transition-opacity mt-auto">Learn more</a>
-                                    </label>
-                                </template>
-                            </div>
-                        </div>
-
-                        <!-- Conditional Crafty Settings -->
-                        <div x-show="formData.services.apps.includes('crafty')" x-transition class="pt-8 border-t border-slate-800 space-y-10">
-                            <h3 class="text-xl font-bold text-fuchsia-400 flex items-center gap-3">
-                                <img src="https://cdn.jsdelivr.net/gh/selfhst/icons@main/svg/crafty-controller.svg" class="w-6 h-6" alt="">
-                                Crafty Control Settings
-                            </h3>
-                            <div class="space-y-8">
-                                <div class="grid grid-cols-1 md:grid-cols-2 gap-8">
-                                    <div class="space-y-2">
-                                        <label class="text-sm font-bold text-slate-400 uppercase tracking-widest">Minecraft Java Servers <span class="text-fuchsia-500">*</span></label>
-                                        <input type="number" min="0" x-model="formData.services.apps_extra_opts.crafty.crafty_java" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 outline-none focus:ring-2 focus:ring-sky-500">
-                                    </div>
-                                    <div class="space-y-2">
-                                        <label class="text-sm font-bold text-slate-400 uppercase tracking-widest">Minecraft Bedrock Servers <span class="text-fuchsia-500">*</span></label>
-                                        <input type="number" min="0" x-model="formData.services.apps_extra_opts.crafty.crafty_bedrock" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 outline-none focus:ring-2 focus:ring-sky-500">
-                                    </div>
-                                </div>
-                                <div class="flex items-center justify-between bg-slate-900/40 p-6 rounded-2xl border border-slate-700/50">
-                                    <label class="text-base font-bold text-slate-300">Enable Dynmap</label>
-                                    <button @click="formData.services.apps_extra_opts.crafty.crafty_dynmap = !formData.services.apps_extra_opts.crafty.crafty_dynmap" 
-                                            :class="formData.services.apps_extra_opts.crafty.crafty_dynmap ? 'bg-fuchsia-600 shadow-[0_0_10px_rgba(192,38,211,0.4)]' : 'bg-slate-700'"
-                                            class="relative inline-flex h-6 w-11 shrink-0 cursor-pointer rounded-full border-2 border-transparent transition-colors duration-200 ease-in-out focus:outline-none">
-                                        <span :class="formData.services.apps_extra_opts.crafty.crafty_dynmap ? 'translate-x-5' : 'translate-x-0'" 
-                                              class="pointer-events-none inline-block h-5 w-5 transform rounded-full bg-white shadow ring-0 transition duration-200 ease-in-out">
-                                        </span>
-                                    </button>
-                                </div>
-                            </div>
-                        </div>
-                    </div>
-                </div>
-
-                    <!-- Step 13: Non-Interactive Git Config -->
-                    <div x-show="step === 13" class="space-y-8">
-                        <div class="border-b border-slate-700 pb-4">
-                            <h2 class="text-4xl font-bold text-sky-400">Configuration Source</h2>
-                            <p class="text-slate-400 mt-2 text-lg">Link your Git repository containing the numbus.yaml file.</p>
-                        </div>
-                        <div class="space-y-4">
-                            <div class="space-y-2">
-                                <label class="text-sm font-bold text-slate-400 uppercase tracking-widest">Git Repository URL</label>
-                                <input type="text" x-model="formData.gitConfig.url" placeholder="https://github.com/user/my-numbus-config" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40">
-                            </div>
-                            <div class="grid grid-cols-2 gap-4">
-                                <div class="space-y-2">
-                                    <label class="text-sm font-bold text-slate-400 uppercase tracking-widest">Username (Optional)</label>
-                                    <input type="text" x-model="formData.gitConfig.user" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none">
-                                </div>
-                                <div class="space-y-2">
-                                    <label class="text-sm font-bold text-slate-400 uppercase tracking-widest">Password/Token (Optional)</label>
-                                    <input type="password" x-model="formData.gitConfig.password" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none">
-                                </div>
-                            </div>
-                        </div>
-                    </div>
-
-                    <!-- Step 14: Setup Type & Restore -->
-                    <div x-show="step === 14" class="space-y-8">
-                        <div class="border-b border-slate-700 pb-4">
-                            <h2 class="text-4xl font-bold text-sky-400">Setup Type</h2>
-                            <p class="text-slate-400 mt-2 text-lg">Are we creating a new server instance or restoring an existing one?</p>
-                        </div>
-                        <div class="space-y-6">
-                            <select x-model="formData.restoreConfig.setup_type" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 outline-none appearance-none cursor-pointer">
-                                <option value="new">New Server (Inherit settings, new identity)</option>
-                                <option value="replica">Exact Replica (Full system recovery)</option>
-                            </select>
-                            
-                            <div class="bg-slate-900/40 p-6 rounded-2xl border border-slate-700/50 flex items-center justify-between">
-                                <div>
-                                    <label class="text-lg font-bold text-white">Restore Data</label>
-                                    <p class="text-xs text-slate-500">Pull data from an existing numbus-backup-server.</p>
-                                </div>
-                                <button @click="formData.restoreConfig.restore_data = !formData.restoreConfig.restore_data" 
-                                        :class="formData.restoreConfig.restore_data ? 'bg-fuchsia-600' : 'bg-slate-700'"
-                                        class="relative inline-flex h-6 w-11 shrink-0 rounded-full transition-colors">
-                                    <span :class="formData.restoreConfig.restore_data ? 'translate-x-5' : 'translate-x-0'" class="inline-block h-5 w-5 transform rounded-full bg-white transition"></span>
-                                </button>
-                            </div>
-
-                            <div x-show="formData.restoreConfig.restore_data" x-transition class="space-y-4 pl-6 border-l-2 border-fuchsia-500/30">
-                                <input type="text" x-model="formData.restoreConfig.backup_host" placeholder="Backup Host (IP/Domain)" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none">
-                                <input type="password" x-model="formData.restoreConfig.setup_key" placeholder="Remote Access Setup Key" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none">
-                                <input type="password" x-model="formData.restoreConfig.backup_key" placeholder="Backup Encryption Key" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none">
-                            </div>
-                        </div>
-                    </div>
-
-                    <!-- Step 15: Tweaks -->
-                    <div x-show="step === 15" class="space-y-8">
-                        <div class="border-b border-slate-700 pb-4">
-                            <h2 class="text-4xl font-bold text-sky-400">Environment Overrides</h2>
-                            <p class="text-slate-400 mt-2 text-lg">Apply specific tweaks to this local deployment.</p>
-                        </div>
-                        <p class="text-sm text-slate-500 italic">Select settings you wish to override from the Git configuration.</p>
-                        <div class="space-y-4">
-                            <!-- Simplified tweak UI for now -->
-                            <div class="bg-slate-900/40 p-4 rounded-xl border border-slate-800">
-                                <p class="text-xs font-mono text-fuchsia-400">tweaks: []</p>
-                            </div>
-                        </div>
-                    </div>
-
-                    <!-- Step 15: Installation Progress -->
-                    <div x-show="step === 15" class="flex flex-col items-center justify-center py-20 text-center space-y-8">
-                        <div class="w-full max-w-md bg-slate-900 rounded-full h-4 overflow-hidden border border-slate-700">
-                            <div class="bg-fuchsia-600 h-full animate-pulse" style="width: 45%"></div>
-                        </div>
-                        <h2 class="text-4xl font-bold text-white">Deploying Numbus...</h2>
-                        <div class="bg-black/40 rounded-xl p-6 w-full font-mono text-left text-xs text-green-400 border border-slate-800">
-                            <div class="flex justify-between items-center mb-4">
-                                <span class="uppercase tracking-widest text-slate-500">Live Terminal Logs</span>
-                                <button class="text-[10px] bg-slate-800 px-2 py-1 rounded">Hide Logs</button>
-                            </div>
-                            <div class="h-40 overflow-y-auto custom-scrollbar">
-                                <p>> Initializing nixos-anywhere...</p>
-                                <p>> Checking connection to target...</p>
-                                <p>> Copying closure to remote...</p>
-                            </div>
-                        </div>
-
-                    <!-- Step 12: Git Configuration -->
-                    <div x-show="step === 12" class="space-y-8">
-                        <div class="border-b border-slate-700 pb-4">
-                            <h2 class="text-4xl font-bold text-sky-400">Configuration Source</h2>
-                            <p class="text-slate-400 mt-2 text-lg">Link your Git repository containing the numbus.yaml file.</p>
-                        </div>
-                        <div class="space-y-4">
-                            <div class="space-y-2">
-                                <label class="text-[10px] font-bold text-slate-400 uppercase tracking-widest">Git Repository URL</label>
-                                <input type="text" x-model="formData.gitConfig.url" placeholder="https://github.com/user/my-numbus-config" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40">
-                            </div>
-                            <div class="grid grid-cols-2 gap-4">
-                                <div class="space-y-2">
-                                    <label class="text-[10px] font-bold text-slate-400 uppercase tracking-widest">Username (Optional)</label>
-                                    <input type="text" x-model="formData.gitConfig.user" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none">
-                                </div>
-                                <div class="space-y-2">
-                                    <label class="text-[10px] font-bold text-slate-400 uppercase tracking-widest">Password/Token (Optional)</label>
-                                    <input type="password" x-model="formData.gitConfig.password" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none">
-                                </div>
-                            </div>
-                        </div>
-                    </div>
-
-                    <!-- Step 13: Setup Type & Restore -->
-                    <div x-show="step === 13" class="space-y-8">
-                        <div class="border-b border-slate-700 pb-4">
-                            <h2 class="text-4xl font-bold text-sky-400">Setup Type</h2>
-                            <p class="text-slate-400 mt-2 text-lg">Are we creating a new server instance or restoring an existing one?</p>
-                        </div>
-                        <div class="space-y-6">
-                            <select x-model="formData.restoreConfig.setup_type" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 outline-none appearance-none cursor-pointer">
-                                <option value="new">New Server (Inherit settings, new identity)</option>
-                                <option value="replica">Exact Replica (Full system recovery)</option>
-                            </select>
-                            
-                            <div class="bg-slate-900/40 p-6 rounded-2xl border border-slate-700/50 flex items-center justify-between">
-                                <div>
-                                    <label class="text-lg font-bold text-white">Restore Data</label>
-                                    <p class="text-xs text-slate-500">Pull data from an existing numbus-backup-server.</p>
-                                </div>
-                                <button @click="formData.restoreConfig.restore_data = !formData.restoreConfig.restore_data" 
-                                        :class="formData.restoreConfig.restore_data ? 'bg-fuchsia-600' : 'bg-slate-700'"
-                                        class="relative inline-flex h-6 w-11 shrink-0 rounded-full transition-colors">
-                                    <span :class="formData.restoreConfig.restore_data ? 'translate-x-5' : 'translate-x-0'" class="inline-block h-5 w-5 transform rounded-full bg-white transition"></span>
-                                </button>
-                            </div>
-
-                            <div x-show="formData.restoreConfig.restore_data" x-transition class="space-y-4 pl-6 border-l-2 border-fuchsia-500/30">
-                                <input type="text" x-model="formData.restoreConfig.backup_host" placeholder="Backup Host (IP/Domain)" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none">
-                                <input type="password" x-model="formData.restoreConfig.setup_key" placeholder="Remote Access Setup Key" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none">
-                                <input type="password" x-model="formData.restoreConfig.backup_key" placeholder="Backup Encryption Key" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none">
-                            </div>
-                        </div>
-                    </div>
-
-                    <!-- Step 14: Tweaks -->
-                    <div x-show="step === 14" class="space-y-8">
-                        <div class="border-b border-slate-700 pb-4">
-                            <h2 class="text-4xl font-bold text-sky-400">Environment Overrides</h2>
-                            <p class="text-slate-400 mt-2 text-lg">Apply specific tweaks to this local deployment.</p>
-                        </div>
-                        <div class="space-y-4">
-                            <p class="text-sm text-slate-500 italic">Select settings you wish to override from the Git configuration.</p>
-                            <div class="bg-slate-900/40 p-4 rounded-xl border border-slate-800 font-mono text-xs text-fuchsia-400">
-                                tweaks: []
-                            </div>
-                        </div>
-                    </div>
-
-                    <!-- Step 16: Installation Progress -->
-                    <div x-show="step === 16" class="flex flex-col items-center justify-center py-20 text-center space-y-8">
-                        <div class="w-full max-w-md bg-slate-900 rounded-full h-4 overflow-hidden border border-slate-700">
-                            <div class="bg-fuchsia-600 h-full animate-pulse" style="width: 35%"></div>
-                        </div>
-                        <h2 class="text-4xl font-bold text-white">Deploying Numbus...</h2>
-                        <div class="bg-black/40 rounded-xl p-6 w-full font-mono text-left text-[10px] text-green-400 border border-slate-800">
-                            <div class="flex justify-between items-center mb-4 border-b border-slate-800 pb-2">
-                                <span class="uppercase tracking-widest text-slate-500 text-xs">Live Terminal Logs</span>
-                                <button class="text-xs bg-slate-800 px-2 py-1 rounded text-slate-400">Toggle Logs</button>
-                            </div>
-                            <div class="h-40 overflow-y-auto custom-scrollbar">
-                                <p class="text-fuchsia-400 text-xs">[INFO] Starting deployment sequence...</p>
-                                <p class="text-sky-400 text-xs">[CMD] nixos-anywhere --flake .#numbus-server</p>
-                                <p class="text-slate-500 text-xs">[STDOUT] Initializing remote connection...</p>
-                            </div>
-                        </div>
-                    </div>
-                </div>
-
-                <!-- Final Review (Step 17) -->
-                <div x-show="step === 17" class="space-y-8 text-center py-10">
-                    <div class="w-20 h-20 bg-green-500/20 text-green-500 rounded-full flex items-center justify-center mx-auto mb-6">
-                        <svg class="w-10 h-10" fill="currentColor" viewBox="0 0 20 20"><path fill-rule="evenodd" d="M16.707 5.293a1 1 0 010 1.414l-8 8a1 1 0 01-1.414 0l-4-4a1 1 0 011.414-1.414L8 12.586l7.293-7.293a1 1 0 011.414 0z" clip-rule="evenodd"></path></svg>
-                    </div>
-                    <h2 class="text-4xl font-bold">Ready to Deploy</h2>
-                    <p class="text-slate-400 max-w-md mx-auto text-base">Your configuration has been generated successfully. Download the file and place it in your Numbus project root.</p>
-                    
-                    <div class="p-8">
-                        <div class="bg-slate-900 rounded-xl text-left font-mono text-sm text-sky-400 border border-slate-700 overflow-hidden shadow-inner">
-                            <pre class="p-2" x-text="jsyaml.dump(getCleanData())"></pre>
-                        </div>
-                    </div>
-                </div>
-
-                <!-- Footer Navigation -->
-                <div class="bg-[#1e293b] border-t border-slate-700 p-6 flex justify-between items-center">
-                    <button 
-                        @click="step--" 
-                        class="px-8 py-3 text-slate-400 hover:text-white font-bold transition-all"
-                    >Back</button>
-                    
-                    <button 
-                        x-show="step > 0 && step < maxSteps && ![3,4,16].includes(step)" 
-                        @click="if(canGoNext()) step++" 
-                        :disabled="!canGoNext()"
-                        :class="!canGoNext() ? 'opacity-30 cursor-not-allowed' : ''"
-                        class="px-10 py-3 bg-fuchsia-600 hover:bg-fuchsia-500 rounded-xl font-bold transition-all shadow-lg shadow-fuchsia-600/20"
-                    >Continue</button>
-
-                    <button 
-                        x-show="step === maxSteps" 
-                        @click="downloadYaml()" 
-                        class="px-10 py-3 bg-green-600 hover:bg-green-500 rounded-xl font-bold transition-all shadow-lg shadow-green-600/20 flex items-center"
-                    >
-                        <svg class="w-5 h-5 mr-2" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 16v1a2 2 0 002 2h12a2 2 0 002-2v-1m-4-4l-4 4m0 0l-4-4m4 4V4"></path></svg>
-                        Download numbus.yaml
-                    </button>
-                </div>
-            </div>
-        </main>
-    </div>
-
-    <style>
-        [x-cloak] { display: none !important; }
-        @keyframes pulse-slow {
-            0%, 100% { transform: scale(1); filter: drop-shadow(0 0 20px rgba(14, 165, 233, 0.2)); }
-            50% { transform: scale(1.05); filter: drop-shadow(0 0 40px rgba(192, 38, 211, 0.4)); }
-        }
-        .animate-pulse-slow { animation: pulse-slow 6s infinite ease-in-out; }
-        @keyframes spin-slow { from { transform: rotate(0deg); } to { transform: rotate(-360deg); } }
-        .animate-spin-slow { animation: spin-slow 3s linear infinite; }
-        .custom-scrollbar::-webkit-scrollbar { width: 6px; }
-        .custom-scrollbar::-webkit-scrollbar-track { background: transparent; }
-        .custom-scrollbar::-webkit-scrollbar-thumb { background: #334155; border-radius: 10px; }
-        .text-shadow-glow { text-shadow: 0 0 15px rgba(56, 189, 248, 0.4); }
-    </style>
-
-    <script>
-        function configurator() {
-            return {
-                step: 0,
-                maxSteps: 16,
-                hardwareData: { disks: [] },
-                init() {
-                    // Watch the step and reset scroll position of the main content area
-                    this.updateNavigation();
-                    this.$watch('step', () => {
-                        const container = this.$el.querySelector('.flex-grow');
-                        if (container) {
-                            container.scrollTop = 0;
-                        }
-                        this.updateNavigation();
-                    });
-                    this.$watch('formData.deploymentMode', () => this.updateNavigation());
-                },
-                showAdvanced: false,
-                showGroupCustomization: false,
-                navigation: [
-                    { title: 'Live Device Setup', steps: [1,2,3,4], minors: [
-                        { label: 'Deployment Mode', step: 1 },
-                        { label: 'Device Type', step: 2 },
-                        { label: 'Live Setup', step: 3 },
-                        { label: 'Discovery', step: 4 }
-                    ]},
-                    { title: 'Server Configuration', steps: [5,6,7,8,9,10,11,12,13,14,15], minors: [
-                        { label: 'Configuration', step: 13 }
-                    ]},
-                    { title: 'Installation', steps: [16], minors: [
-                        { label: 'Progress', step: 15 }
-                    ]}
-                ],
-                getNavigation() {
-                    const isInteractive = this.formData.deploymentMode === 'interactive';
-                    const isServer = this.formData.deviceType === 'server' || this.formData.deviceType === 'backup-server';
-                    
-                    let configMinors = [];
-                    if (isInteractive) {
-                        configMinors = [
-                            { label: 'Language', step: 5 },
-                            { label: 'Network', step: 6 },
-                            { label: 'Remote Access', step: 7 },
-                            { label: 'Services', step: 8 },
-                            { label: 'Security', step: 9 },
-                            { label: 'Users & Groups', step: 10 }
-                        ];
-                        // Only servers have alerting/mail config usually
-                        if (isServer) {
-                            configMinors.push({ label: 'Alerts', step: 11 });
-                        }
-                        if (isServer) {
-                            configMinors.push({ label: 'Disks', step: 12 });
-                        }
-                    } else {
-                        configMinors = [
-                            { label: 'Source Repo', step: 13 },
-                            { label: 'Setup Type', step: 14 },
-                            { label: 'Environment Tweaks', step: 15 }
-                        ];
-                    }
-
-                    return [
-                        {
-                            title: 'Device Setup',
-                            steps: [1, 2, 3, 4],
-                            minors: [
-                                { label: 'Deployment Mode', step: 1 },
-                                { label: 'Device Type', step: 2 },
-                                { label: 'Targeting', step: 3 },
-                                { label: 'Probing Hardware', step: 4 }
-                            ]
-                        },
-                        {
-                            title: 'Configuration',
-                            steps: isInteractive ? [5, 6, 7, 8, 9, 10, 11, 12] : [13, 14, 15],
-                            minors: configMinors
-                        },
-                        { 
-                            title: 'Finalize', 
-                            steps: [16, 17], 
-                            minors: [{ label: 'Deployment Status', step: 16 }] 
-                        }
-                    ];
-                },
-                isSectionActive(section) {
-                    return section.steps.includes(this.step);
-                },
-                deviceTypes: [
-                    { id: 'server', name: 'Numbus Server', icon: 'mdi-server', desc: 'Cloud, containers & automation' },
-                    { id: 'backup-server', name: 'Numbus Backup', icon: 'mdi-backup-restore', desc: 'Cold storage & offsite safety' },
-                    { id: 'computer', name: 'Numbus Computer', icon: 'mdi-laptop', desc: 'Daily driver workstation' },
-                    { id: 'tv', name: 'Numbus TV', icon: 'mdi-television-guide', desc: 'HTPC & Media center' }
-                ],
-                webApps: ['crafty', 'frigate', 'gitea', 'home-assistant', 'homepage', 'immich', 'it-tools', 'jellyfin', 'n8n', 'netbootxyz', 'nextcloud', 'ntfy', 'odoo', 'passbolt', 'uptime-kuma', 'vscodium'],
-                serviceMetadata: {
-                    'pi-hole': { icon: 'pi-hole', desc: 'A network-wide ad blocker via DNS sinkholing.', link: 'https://pi-hole.net' },
-                    'adguard': { icon: 'adguard-home', desc: 'Alternative DNS filter with advanced parental controls.', link: 'https://adguard-dns.io' },
-                    'crafty': { icon: 'crafty-controller', desc: 'Web-based Minecraft server manager and dashboard.', link: 'https://craftycontrol.com/' },
-                    'frigate': { desc: 'NVR with real-time local object detection for IP cameras.', link: 'https://frigate.video/' },
-                    'gitea': { desc: 'Painless self-hosted Git service (like GitHub).', link: 'https://gitea.io/' },
-                    'home-assistant': { desc: 'Open source home automation gateway.', link: 'https://www.home-assistant.io/' },
-                    'homepage': { desc: 'A modern, secure application dashboard.', link: 'https://gethomepage.dev/' },
-                    'immich': { desc: 'Self-hosted photo and video backup solution.', link: 'https://immich.app/' },
-                    'it-tools': { desc: 'Collection of handy online tools for developers.', link: 'https://it-tools.tech/' },
-                    'jellyfin': { desc: 'The volunteer-built media solution.', link: 'https://jellyfin.org/' },
-                    'n8n': { desc: 'Powerful workflow automation tool.', link: 'https://n8n.io/' },
-                    'netbootxyz': { icon: 'netboot-xyz', desc: 'PXE boot various OS installers from the web.', link: 'https://netboot.xyz/' },
-                    'nextcloud': { desc: 'The most popular self-hosted collaboration platform.', link: 'https://nextcloud.com/' },
-                    'ntfy': { desc: 'Send push notifications via HTTP requests.', link: 'https://ntfy.sh/' },
-                    'odoo': { desc: 'Open Source ERP and business suite.', link: 'https://www.odoo.com/' },
-                    'passbolt': { desc: 'Password manager for teams.', link: 'https://www.passbolt.com/' },
-                    'uptime-kuma': { desc: 'Fancy self-hosted monitoring tool.', link: 'https://uptimekuma.org/' },
-                    'vscodium': { desc: 'Free/Libre Open Source binaries of VS Code.', link: 'https://vscodium.com/' },
-                    'clamav': { icon: 'clamav', desc: 'Open-source antivirus engine.', link: 'https://www.clamav.net' },
-                    'virtualization': { icon: 'qemu', desc: 'KVM/QEMU virtualization via Libvirt.', link: 'https://libvirt.org' }
-                },
-                formData: {
-                    deploymentMode: 'interactive',
-                    deviceType: 'server',
-                    language: {
-                        lang: 'FR',
-                        locale: 'fr_FR',
-                        timezone: 'Europe/Paris'
-                    },
-                    users: [
-                        { username: 'admin', name: '', email: '', groups: ['admin'], isStatic: true }
-                    ],
-                    groups: {
-                        admin: ['crafty', 'frigate', 'gitea', 'home-assistant', 'homepage', 'immich', 'it-tools', 'jellyfin', 'n8n', 'netbootxyz', 'nextcloud', 'ntfy', 'odoo', 'passbolt', 'uptime-kuma', 'vscodium'],
-                        developer: ['gitea', 'vscodium', 'it-tools', 'odoo'],
-                        family: ['frigate', 'home-assistant', 'homepage', 'immich', 'jellyfin', 'n8n', 'nextcloud', 'ntfy', 'passbolt'],
-                        office: ['passbolt', 'nextcloud']
-                    },
-                    mail: {
-                        smtp_username: '',
-                        smtp_password: '',
-                        smtp_host: '',
-                        smtp_port: ''
-                    },
-                    network: {
-                        ip_address: '',
-                        router_ip: '',
-                        live_target_ip: '',
-                        live_target_password: ''
-                    },
-                    remote_access: {
-                        provider: 'netbird-cloud',
-                        netbird_token: ''
-                    },
-                    security: {
-                        use_sso: true,
-                        public_sharing: true,
-                        ssh_keys: ''
-                    },
-                    ssl: {
-                        domain: '',
-                        cloudflare_token: ''
-                        },
-                        disks: {
-                            boot: [],
-                            data: []
-                    },
-                    gitConfig: {
-                        url: '',
-                        user: '',
-                        password: ''
-                    },
-                    restoreConfig: {
-                        setup_type: 'new',
-                        restore_data: false,
-                        backup_host: '',
-                        setup_key: '',
-                        backup_key: ''
-                    },
-                    services: {
-                        dns: 'pi-hole',
-                        apps: [],
-                        system: ['clamav'],
-                        apps_extra_opts: {
-                            crafty: {
-                                crafty_java: 1,
-                                crafty_bedrock: 0,
-                                crafty_dynmap: false
-                            }
-                        }
-                    }
-                },
-                sortedDisks() {
-                    const order = { 'NVMe': 0, 'SSD': 1, 'HDD': 2, 'USB': 3, 'Other': 4 };
-                    return [...this.hardwareData.disks].sort((a, b) => {
-                        return (order[a.type] ?? 5) - (order[b.type] ?? 5);
-                    });
-                },
-                getDiskIcon(type) {
-                    switch(type) {
-                        case 'NVMe': return 'mdi-flash';
-                        case 'SSD': return 'mdi-memory';
-                        case 'HDD': return 'mdi-harddisk';
-                        case 'USB': return 'mdi-usb';
-                        default: return 'mdi-harddisk';
-                    }
-                },
-                toggleDisk(id, category) {
-                    const list = this.formData.disks[category];
-                    const index = list.indexOf(id);
-                    if (index > -1) {
-                        list.splice(index, 1);
-                    } else {
-                        if (category === 'boot' && list.length >= 2) return;
-                        if (category === 'data' && list.length >= 9) return;
-                        list.push(id);
-                    }
-                },
-                addGroup() {
-                    const name = this.newGroupName.trim().toLowerCase().replaceAll(' ', '_');
-                    if (name && !this.formData.groups[name]) {
-                        this.formData.groups[name] = [];
-                        this.newGroupName = '';
-                    }
-                },
-                addUser() {
-                    if (this.formData.users.length < 20) {
-                        this.formData.users.push({ username: '', name: '', email: '', groups: ['family'], isStatic: false });
-                    }
-                },
-                removeUser(index) {
-                    if (this.formData.users.length > 1 && !this.formData.users[index].isStatic) {
-                        this.formData.users.splice(index, 1);
-                    }
-                },
-                validators: {
-                    ip: (val) => /^((25[0-5]|(2[0-4]|1\d|[1-9]|)\d)\.?\b){4}$/.test(val),
-                    email: (val) => /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(val),
-                    domain: (val) => /^([a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z]{2,}$/.test(val),
-                    port: (val) => /^\d{2,5}$/.test(val),
-                    netbirdToken: (val) => val.startsWith('nbp_')
-                },
-                updateMinorSteps() {
-                    // Dynamically set steps for navigation
-                    const configGroup = this.navigation.find(n => n.title === 'Server Configuration' || n.title === 'Configuration');
-                    if (this.formData.deploymentMode === 'interactive') {
-                        configGroup.title = 'Configuration';
-                        configGroup.minors = [
-                            { label: 'Language', step: 5 },
-                            { label: 'Network', step: 6 },
-                            { label: 'Remote Access', step: 7 },
-                            { label: 'Services', step: 8 },
-                            { label: 'Security', step: 9 },
-                            { label: 'Users', step: 10 },
-                            { label: 'Alerts', step: 11 }
-                        ];
-                    } else {
-                        configGroup.title = 'Git Configuration';
-                        configGroup.minors = [
-                            { label: 'Source Repo', step: 12 },
-                            { label: 'Setup Type', step: 13 },
-                            { label: 'Tweaks', step: 14 }
-                        ];
-                    }
-                },
-                updateNavigation() {
-                    this.updateMinorSteps();
-                },
-                async startDiscovery() {
-                    this.updateNavigation();
-                    this.step = 4; // Move to waiting room
-                    try {
-                        await fetch('/discovery', {
-                            method: 'POST',
-                            headers: { 'Content-Type': 'application/json' },
-                            body: JSON.stringify({
-                                device: this.formData.deviceType,
-                                live_ip: this.formData.network.live_target_ip,
-                                live_password: this.formData.network.live_target_password
-                            })
-                        });
-                        this.pollHardware();
-                    } catch (e) {
-                        console.error("Bridge Error:", e);
-                    }
-                },
-                pollHardware() {
-                    const timer = setInterval(async () => {
-                        try {
-                            const res = await fetch('/hardware.json');
-                            if (res.ok) {
-                                this.hardwareData = await res.json();
-                                clearInterval(timer);
-                                this.step = (this.formData.deploymentMode === 'interactive') ? 5 : 13;
-                            }
-                        } catch (e) { /* Bridge might not have written file yet */ }
-                    }, 2000);
-                },
-                canGoNext() {
-                    const rules = {
-                        0: () => true,
-                        1: () => !!this.formData.deploymentMode,
-                        2: () => !!this.formData.deviceType,
-                        3: () => this.validators.ip(this.formData.network.live_target_ip) && !!this.formData.network.live_target_password,
-                        4: () => false,
-                        5: () => !!(this.formData.language.lang && this.formData.language.locale && this.formData.language.timezone),
-                        6: () => this.validators.ip(this.formData.network.ip_address) && this.validators.ip(this.formData.network.router_ip),
-                        7: () => this.formData.remote_access.provider !== 'netbird-cloud' || (this.formData.remote_access.netbird_token && this.validators.netbirdToken(this.formData.remote_access.netbird_token)),
-                        8: () => this.validators.domain(this.formData.ssl.domain),
-                        9: () => this.formData.security.ssh_keys.trim().length > 10 && this.formData.ssl.cloudflare_token.length > 10,
-                        10: () => !!(this.formData.users[0].username && this.formData.users[0].name && this.validators.email(this.formData.users[0].email)),
-                        11: () => this.validators.domain(this.formData.mail.smtp_host) && this.validators.port(this.formData.mail.smtp_port),
-                        12: () => this.formData.disks.boot.length >= 1,
-                        13: () => this.formData.gitConfig.url.length > 5,
-                        14: () => !this.formData.restoreConfig.restore_data || (this.formData.restoreConfig.backup_host && this.formData.restoreConfig.setup_key),
-                        15: () => true,
-                        16: () => false
-                    };
-
-                    if (rules[this.step]) {
-                        return rules[this.step]();
-                    }
-                    return true;
-                },
-                getCleanData() {
-                    const exportData = JSON.parse(JSON.stringify(this.formData));
-                    
-                    // Remove helper properties from users
-                    exportData.users.forEach(u => delete u.isStatic);
-
-                    // Only export crafty options if selected
-                    if (!exportData.services.apps.includes('crafty')) {
-                        delete exportData.services.apps_extra_opts.crafty;
-                    }
-
-                    // Remove apps_extra_opts entirely if empty
-                    if (exportData.services.apps_extra_opts && Object.keys(exportData.services.apps_extra_opts).length === 0) {
-                        delete exportData.services.apps_extra_opts;
-                    }
-
-                    return exportData;
-                },
-                downloadYaml() {
-                    try {
-                        const yaml = jsyaml.dump(this.getCleanData());
-                        const blob = new Blob([yaml], { type: 'text/yaml' });
-                        const url = window.URL.createObjectURL(blob);
-                        const a = document.createElement('a');
-                        a.href = url;
-                        a.download = 'numbus.yaml';
-                        document.body.appendChild(a);
-                        a.click();
-                        window.URL.revokeObjectURL(url);
-                        document.body.removeChild(a);
-                    } catch (e) {
-                        alert('Error generating YAML: ' + e.message);
-                    }
-                }
-            }
-        }
-    </script>
-</body>
-</html>
\ No newline at end of file
diff --git a/deploy.sh b/deploy.sh
old mode 100644
new mode 100755
index 9934eaf..cb64a3d
--- a/deploy.sh
+++ b/deploy.sh
@@ -1,14 +1,15 @@
 #!/usr/bin/env nix-shell
 #!nix-shell -i bash -p bash nano coreutils gnused gum fastfetch xkcdpass sops ssh-to-age age sshpass envsubst pciutils usbutils mosquitto curl jq yq python3
 
+cleanup() {
+  rm -${DIR_RM_FLAGS} /run/numbus/logs
+  rm -${DIR_RM_FLAGS} /run/numbus/web
+  rm -${DIR_RM_FLAGS} /run/numbus/config
+
+  kill ${BRIDGE_PID}
+}
+
 launch_configurator() {
-  local PORT=8088
-  local CONFIG_FILE="numbus.yaml"
-  local BRIDGE_SCRIPT="configurator/bridge.py"
-
-  # Cleanup old signals
-  rm -${FILES_RM_FLAGS} configurator/.discovery_ready configurator/.deploy_signal configurator/live_settings.json configurator/hardware.json
-
   echo -e "\n 🚀 Launching Numbus Configurator..."
   python3 "${BRIDGE_SCRIPT}" > /dev/null 2>&1 &
   export BRIDGE_PID=$!
@@ -17,37 +18,70 @@ launch_configurator() {
   xdg-open "http://localhost:${PORT}" 2>/dev/null || open "http://localhost:${PORT}" 2>/dev/null || true
 }
 
+preparation() {
+  SELECTED_DEVICE_TYPE=$(gum choose --header "Choose the device you want to deploy :" \
+  "Numbus Server : Professional-grade hosting, strictly kept under your roof." \
+  "Numbus Backup Server : Automated, high-efficiency protection for your entire ecosystem." \
+  "Numbus Computer : A modern, privacy-respecting machine built for work, creation, and play — without the corporate bloat." \
+  "Numbus TV : A premium cinematic experience free from trackers and forced subscriptions.")
+
+  SELECTED_DEPLOYMENT_MODE=$(gum choose --header "Choose your preferred deployment mode :" \
+  "Interactive : You don't already have a configuration." \
+  "Non-interactive : You have a valid configuration hosted on a Git platform.")
+
+  git_url() {
+    IMPORTED_CONFIG_URL=$(gum input --placeholder "https://yourgitplatform.tld/your-user/repo-containing-the-configuration" --header "Please provide the URL to the git repository containing your configuration :")
+  }
+
+  git_url
+
+  until git clone "${IMPORTED_CONFIG_URL}" imported_configuration; do
+    echo -e "\n ⚠️ This did not work correctly."
+
+    echo -e "\n Is this URL correct [y/n] ? ${IMPORTED_CONFIG_URL}"
+    read URL
+
+    if [[ "${URL^^}" == "N" ]];
+      git_url
+    fi
+
+    echo -e "\n You will be prompted for your credentials again. Make sure that they are correct."
+  done
+}
+
 hierarchy_preparation() {
-  if [[ -e configuration/etc/nixos/configuration.nix || -e configuration/home/numbus-admin/.ssh/id_ed25519 ]]; then
-    mkdir -${MKDIR_FLAGS} .trash/
+  echod "\n 🔄 Preparing the folder hierarchy for the final configuration..."
+
+  if [[ -e config/* ]]; then
     echo " ⚠️ It seems you have already run this script. Previously generated files need to be cleaned up."
-    mv -${MV_FLAGS} configuration/{.,}* .trash/"$(date)_cleanup"/
-    echo " ✅ Your files have been moved to the .trash directory. You can retrieve them there if needed."
+    OLD_CONFIG_PATH="trash/$(date +"%Y-%m-%d-%Hh%M")/"
+    mkdir -${MKDIR_FLAGS} ${OLD_CONFIG_PATH}
+    mv -${MV_FLAGS} config/ ${OLD_CONFIG_PATH}
+    echo " ✅ Your files have been moved to the ${OLD_CONFIG_PATH} directory. You can retrieve them there if needed."
   fi
 
-  mkdir -${MKDIR_FLAGS} configuration/home/numbus-admin/.ssh/
-  mkdir -${MKDIR_FLAGS} configuration/etc/nixos/secrets/podman
-  mkdir -${MKDIR_FLAGS} configuration/etc/nixos/secrets/system
-  mkdir -${MKDIR_FLAGS} configuration/etc/nixos/secrets/disks
-  mkdir -${MKDIR_FLAGS} configuration/var/lib/sops-nix/
-  mkdir -${MKDIR_FLAGS} configuration/var/lib/numbus-server/
-
+  # Secrets
+  mkdir -${MKDIR_FLAGS} ${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/
+  mkdir -${MKDIR_FLAGS} ${EXTRA_FILES_PATH}/var/lib/sops-nix/
+  mkdir -${MKDIR_FLAGS} ${EXTRA_FILES_PATH}/etc/nixos/secrets/disks
+  if [[ "${SELECTED_DEVICE_TYPE}" == "" ]]; then
+    mkdir -${MKDIR_FLAGS} ${EXTRA_FILES_PATH}/etc/nixos/secrets/podman
+    mkdir -${MKDIR_FLAGS} ${EXTRA_FILES_PATH}/etc/nixos/secrets/system
+  fi
   mkdir -${MKDIR_FLAGS} to-keep-preciously/
 }
 
 setup_ssh() {
-  if [[ ${DEBUG} -eq 1 ]]; then
-  echo -e "\n ✅ Generating new SSH key for numbus-admin..."
-  fi
+  echod "\n ✅ Generating new SSH key for numbus-admin..."
 
-  chmod 700 configuration/home/numbus-admin/.ssh/
-  ssh-keygen -t "ed25519" -C "numbus-admin@numbus-server" -f "configuration/home/numbus-admin/.ssh/id_ed25519" -N "" -q
+  chmod 700 ${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/
+  ssh-keygen -t "ed25519" -C "numbus-admin@numbus-server" -f "${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/id_ed25519" -N "" -q
 
   if [[ ${DEBUG} -eq 1 ]]; then
   echo -e "\n ➡️  Copying SSH key to target host '${TARGET_USER}@${LIVE_TARGET_IP}'..."
   fi
 
-  if sshpass -p "${LIVE_TARGET_PASSWD}" ssh-copy-id -o StrictHostKeyChecking=no -i "configuration/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}"; then
+  if sshpass -p "${LIVE_TARGET_PASSWD}" ssh-copy-id -o StrictHostKeyChecking=no -i "${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}"; then
     if [[ ${DEBUG} -eq 1 ]]; then
     echo -e "\n ✅ SSH key copied successfully"
     fi
@@ -59,7 +93,7 @@ setup_ssh() {
 
 ssh_to_host() {
   local COMMAND="${1}"
-  ssh -i "configuration/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}" "${COMMAND}"
+  ssh -i "${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}" "${COMMAND}"
 }
 
 hardware_detection() {
@@ -152,7 +186,7 @@ done
 SSHEND
   ### Get hardware information <--
 
-  scp -i "configuration/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}":"${TMPFILE}" "${TMPFILE}" &> /dev/null
+  scp -i "${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}":"${TMPFILE}" "${TMPFILE}" &> /dev/null
   source "${TMPFILE}"
 
   ### Transform the bash variables into JSON -->
@@ -185,11 +219,11 @@ SSHEND
           name: .[$i], path: .[$i+1], type: .[$i+2], health: .[$i+3], id: .[$i+4], size: .[$i+5]
         }
       ]
-    }' --args "${DISK_FLAT_ARRAY[@]:-}" > configurator/hardware.json
+    }' --args "${DISK_FLAT_ARRAY[@]:-}" > ${HARDWARE_DATA_PATH}
   ### Transform the bash variables into JSON <--
 
   ### --> Generate hardware-configuration.nix
-  if ssh_to_host "sudo nixos-generate-config --no-filesystems --show-hardware-config" > configuration/etc/nixos/hardware-configuration.nix; then
+  if ssh_to_host "sudo nixos-generate-config --no-filesystems --show-hardware-config" > ${EXTRA_FILES_PATH}/etc/nixos/hardware-configuration.nix; then
     echo -e "\n✅ Hardware configuration generated"
   else
     echo -e "\n❌ Failed to generate hardware configuration"
@@ -402,8 +436,8 @@ disk_config_generation() {
 keys_generation() {
   for i in $(seq 1 "${#BOOT_DISKS_ID_LIST[@]}"); do
     PASS="$(xkcdpass)"
-    echo -n "$PASS" > "configuration/etc/secrets/disks/boot-${i}"
-    chmod 600 "configuration/etc/secrets/disks/boot-${i}"
+    echo -n "$PASS" > "${EXTRA_FILES_PATH}/etc/secrets/disks/boot-${i}"
+    chmod 600 "${EXTRA_FILES_PATH}/etc/secrets/disks/boot-${i}"
     ssh_to_host 'bash -s' << EOF
 echo "$LIVE_TARGET_PASSWD" | sudo -S mkdir -p /etc/secrets/disks/
 echo "$LIVE_TARGET_PASSWD" | sudo -S bash -c "printf '%s' '$PASS' > /etc/secrets/disks/boot-${i}"
@@ -412,8 +446,8 @@ EOF
   done
   for i in $(seq 1 "$CONTENT_DISK_NUMBER"); do
     PASS="$(xkcdpass)"
-    echo -n "$PASS" > "configuration/etc/secrets/disks/content-${i}"
-    chmod 600 "configuration/etc/secrets/disks/content-${i}"
+    echo -n "$PASS" > "${EXTRA_FILES_PATH}/etc/secrets/disks/content-${i}"
+    chmod 600 "${EXTRA_FILES_PATH}/etc/secrets/disks/content-${i}"
     ssh_to_host 'bash -s' << EOF
 echo "$LIVE_TARGET_PASSWD" | sudo -S bash -c "printf '%s' '$PASS' > /etc/secrets/disks/content-${i}"
 echo "$LIVE_TARGET_PASSWD" | sudo -S chmod 600 /etc/secrets/disks/content-${i}
@@ -421,8 +455,8 @@ EOF
   done
   for i in $(seq 1 "$PARITY_DISK_NUMBER"); do
     PASS="$(xkcdpass)"
-    echo -n "$PASS" > "configuration/etc/secrets/disks/parity-${i}"
-    chmod 600 "configuration/etc/secrets/disks/parity-${i}"
+    echo -n "$PASS" > "${EXTRA_FILES_PATH}/etc/secrets/disks/parity-${i}"
+    chmod 600 "${EXTRA_FILES_PATH}/etc/secrets/disks/parity-${i}"
     ssh_to_host 'bash -s' << EOF
 echo "$LIVE_TARGET_PASSWD" | sudo -S bash -c "printf '%s' '$PASS' > /etc/secrets/disks/parity-${i}"
 echo "$LIVE_TARGET_PASSWD" | sudo -S chmod 600 /etc/secrets/disks/parity-${i}
@@ -440,18 +474,18 @@ EOF
   export SSH_KEYS_FORMATTED
 
   echo -e "\n ✅ Generating sops-nix keys..."
-  ssh-to-age -private-key -i configuration/home/numbus-admin/.ssh/id_ed25519 > configuration/var/lib/sops-nix/key.txt
-  export SOPS_PUBLIC_KEY=$(age-keygen -y configuration/var/lib/sops-nix/key.txt)
+  ssh-to-age -private-key -i ${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/id_ed25519 > ${EXTRA_FILES_PATH}/var/lib/sops-nix/key.txt
+  export SOPS_PUBLIC_KEY=$(age-keygen -y ${EXTRA_FILES_PATH}/var/lib/sops-nix/key.txt)
 
   echo -e "\n ✅ Generating sops-nix configuration files..."
-  envsubst < templates/nix-config/sops-nix/.sops.yaml > configuration/etc/nixos/.sops.yaml
+  envsubst < templates/nix-config/sops-nix/.sops.yaml > ${EXTRA_FILES_PATH}/etc/nixos/.sops.yaml
 
   echo -e "\n ✅ Encrypting secrets in the correct file..."
   envsubst < "templates/nix-config/sops-nix/secrets.yaml" \
     | sops encrypt --filename-override secrets.yaml \
     --input-type yaml --output-type yaml \
     --age $SOPS_PUBLIC_KEY \
-    --output configuration/etc/nixos/secrets/secrets.yaml
+    --output ${EXTRA_FILES_PATH}/etc/nixos/secrets/secrets.yaml
 }
 
 sum_up() {
@@ -511,18 +545,18 @@ Please save the following secrets to a secure place (i.e. your local password ma
 
 **Boot Disks (${#BOOT_DISKS_ID_LIST[@]}) :**
 
-* **Disk 1 Secret Key :** \`$( cat configuration/etc/secrets/disks/boot-1 )\`
-$( [[ -n "${BOOT_DISKS_ID_LIST[1]:-}" ]] && echo "* **Disk 2 secret key :** \`$( cat configuration/etc/secrets/disks/boot-2 )\`" )
+* **Disk 1 Secret Key :** \`$( cat ${EXTRA_FILES_PATH}/etc/secrets/disks/boot-1 )\`
+$( [[ -n "${BOOT_DISKS_ID_LIST[1]:-}" ]] && echo "* **Disk 2 secret key :** \`$( cat ${EXTRA_FILES_PATH}/etc/secrets/disks/boot-2 )\`" )
 
 **Data Disks ($CONTENT_DISK_NUMBER):**
 
 $( [[ $CONTENT_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" )
-$( [[ $CONTENT_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq 0 $(($CONTENT_DISK_NUMBER - 1))); do echo "* **Disk ${j} Secret Key :** \`$( cat configuration/etc/secrets/disks/content-${j} )\`" && j=$((j + 1)); done )
+$( [[ $CONTENT_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq 0 $(($CONTENT_DISK_NUMBER - 1))); do echo "* **Disk ${j} Secret Key :** \`$( cat ${EXTRA_FILES_PATH}/etc/secrets/disks/content-${j} )\`" && j=$((j + 1)); done )
 
 **Parity Disks ($PARITY_DISK_NUMBER):**
 
 $( [[ $PARITY_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" )
-$( [[ $PARITY_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq $CONTENT_DISK_NUMBER $((${#DATA_DISKS_ID[@]} - 1))); do echo "* **Disk ${j} Secret Key :** \`$( cat configuration/etc/secrets/disks/parity-${j} )\`" && j=$((j + 1)); done )
+$( [[ $PARITY_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq $CONTENT_DISK_NUMBER $((${#DATA_DISKS_ID[@]} - 1))); do echo "* **Disk ${j} Secret Key :** \`$( cat ${EXTRA_FILES_PATH}/etc/secrets/disks/parity-${j} )\`" && j=$((j + 1)); done )
 
 EOF
 )
@@ -532,7 +566,7 @@ EOF
 
   gum confirm "➡️ Would you like to manually edit the configuration (⚠️ advanced users only)" || { echo -e "\n\n✅ continuing with the installation..."; return 0; }
 
-  nano configuration/etc/nixos/configuration.nix
+  nano ${EXTRA_FILES_PATH}/etc/nixos/configuration.nix
 }
 
 cloudflare_dns_setup() {
@@ -637,9 +671,9 @@ cloudflare_dns_setup() {
 }
 
 export_configuration() {
-  cp -${FILES_CP_FLAGS} deploy.conf configuration/var/lib/numbus-server/numbus-server.conf
+  cp -${FILES_CP_FLAGS} deploy.conf ${EXTRA_FILES_PATH}/var/lib/numbus-server/numbus-server.conf
 
-  local CONFIG_EXPORT_DIR="configuration/var/lib/numbus-server/"
+  local CONFIG_EXPORT_DIR="${EXTRA_FILES_PATH}/var/lib/numbus-server/"
   local CONFIG_EXPORT_FILE="${CONFIG_EXPORT_DIR}/numbus-server.conf"
 
   echo "export TARGET_INTERFACE=\"${TARGET_INTERFACE}\""              >> $CONFIG_EXPORT_FILE
@@ -658,15 +692,15 @@ export_configuration() {
 }
 
 deploy() {
-  git -C . add -f "configuration/"
+  git -C . add -f "${EXTRA_FILES_PATH}/"
   git -C . add -f "templates/"
   git -C . add -f "deploy.conf"
 
   echo -e "\n\n🔄 Deploying to the remote server..."
-  nix flake update --flake ./configuration/etc/nixos
+  nix flake update --flake ./${EXTRA_FILES_PATH}/etc/nixos
   nix run github:nix-community/nixos-anywhere -- \
-    --flake ./configuration/etc/nixos#numbus-server \
-    --extra-files configuration \
+    --flake ${EXTRA_FILES_PATH}/etc/nixos#numbus-server \
+    --extra-files ${EXTRA_FILES_PATH} \
     --chown "/home/numbus-admin/" 1000:1000 \
     --target-host ${TARGET_USER}@${LIVE_TARGET_IP}
 
@@ -714,7 +748,7 @@ postrun_action() {
                                       Do you want to enable automatic disk decryption on boot ?"
 
     if gum confirm "➡️  I understand, 'yes' to proceed."; then
-      sshpass -p "${LIVE_TARGET_PASSWD}" ssh -i "configuration/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}" 'bash -s' << EOF
+      sshpass -p "${LIVE_TARGET_PASSWD}" ssh -i "${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}" 'bash -s' << EOF
 echo "Enrolling boot disk key to TPM..."
 
 BOOT_DISKS_NAME=(${BOOT_DISKS_NAME[@]})
@@ -762,45 +796,29 @@ nix_update() {
   echo -e "\n\n🔄 Updating NixOS on the remote server..."
 
   nixos-rebuild --target-host numbus-admin@${LIVE_TARGET_IP} \
-    --use-remote-sudo switch --flake configuration/etc/nixos#numbus-server
+    --use-remote-sudo switch --flake ${EXTRA_FILES_PATH}/etc/nixos#numbus-server
 }
 
-cleanup() {
-  kill ${BRIDGE_PID}
+echod() {
+  MESSAGE=${1}
+
+  if [[ ${DEBUG} -eq 1 ]]; then
+    echo -e ${MESSAGE}
+  fi
 }
 
-set -euo pipefail
+# --- DEFAULTS --->
+WEBSERVER_PORT=${WEBSERVER_PORT:-8088}
 
-clear
+LIVE_DATA_PATH="/run/numbus/web/live_settings.json"
+HARDWARE_DATA_PATH="/run/numbus/web/hardware.json"
 
-echo "
- ██████   █████                            █████
-▒▒██████ ▒▒███                            ▒▒███
- ▒███▒███ ▒███  █████ ████ █████████████   ▒███████  █████ ████    █████
- ▒███▒▒███▒███ ▒▒███ ▒▒███ ▒▒███▒▒███▒▒███  ▒███▒▒███▒▒███ ▒▒███  ███▒▒
- ▒███ ▒▒██████  ▒███ ▒▒███  ▒███ ▒███ ▒███  ▒███ ▒███ ▒███ ▒▒███ ▒▒█████
- ▒███  ▒▒█████  ▒███ ▒▒███  ▒███ ▒███ ▒███  ▒███ ▒███ ▒███ ▒▒███  ▒▒▒▒███
- █████  ▒▒█████ ▒▒████████ █████▒███ █████ ████████  ▒▒████████  ██████
-▒▒▒▒▒    ▒▒▒▒▒   ▒▒▒▒▒▒▒▒ ▒▒▒▒▒ ▒▒▒ ▒▒▒▒▒ ▒▒▒▒▒▒▒▒    ▒▒▒▒▒▒▒▒  ▒▒▒▒▒▒
+BRIDGE_SCRIPT="web/logic/bridge.py"
+CONFIG_FILE="config/numbus.yaml"
 
-  █████████
- ███▒▒▒▒▒███
-▒███    ▒▒▒   ██████  ████████  █████ █████  ██████  ████████
-▒▒█████████  ███▒▒███▒▒███▒▒███▒▒███ ▒▒███  ███▒▒███▒▒███▒▒███
- ▒▒▒▒▒▒▒▒███▒███████  ▒███ ▒▒▒  ▒███  ▒███ ▒███████  ▒███ ▒▒▒
- ███    ▒███▒███▒▒▒   ▒███      ▒▒███ ███  ▒███▒▒▒   ▒███
-▒▒█████████ ▒▒██████  █████      ▒▒█████   ▒▒██████  █████
- ▒▒▒▒▒▒▒▒▒   ▒▒▒▒▒▒  ▒▒▒▒▒        ▒▒▒▒▒     ▒▒▒▒▒▒  ▒▒▒▒▒
-"
+TARGET_USER="nixos"
 
-sleep 1
-
-trap cleanup EXIT
-
-# --- MAIN ORCHESTRATION LOOP ---
-
-# 0. TESTING ONLY
-DEBUG=1
+EXTRA_FILES_PATH="/run/numbus/config"
 
 if [[ ${DEBUG-0} -eq 1 ]]; then
   FILES_CP_FLAGS="vau"
@@ -816,31 +834,56 @@ else
   MKDIR_FLAGS="p"
   MV_FLAGS="u"
 fi
+# --- DEFAULTS ---<
 
-# 1. Initialize the UI and Bridge
-launch_configurator
+# --- MAIN PART ---
+set -euo pipefail
 
-# 2. Prepare the directories
-hierarchy_preparation
+clear
+
+trap cleanup EXIT
+
+echo """
+   _  ____  ____  ______  __  ______
+  / |/ / / / /  |/  / _ )/ / / / __/
+ /    / /_/ / /|_/ / _  / /_/ /\ \  
+/_/|_/\____/_/  /_/____/\____/___/  
+
+"""
+
+DEPLOY_MODE=$(gum choose --header "Choose your preferred configuration interface :" "Through my browser (Recommended for beginners)" "Through my terminal (TUI)")
+
+if [[ "$DEPLOY_MODE" == "Through my terminal" ]]; then
+  preparation
+  hierarchy_preparation
+  setup_ssh
+
+else
+  launch_configurator
+  hierarchy_preparation
+  echod "\n ⏳ Waiting for device credentials from web UI..."
+  while [ ! -f configurator/.discovery_ready ]; do
+    sleep 5
+  done
+  echod "\n ✅ Credentials received."
+  LANGUAGE=$(jq -r '.language' ${LIVE_DATA_PATH})
+  COUNTRY=$(jq -r '.country' ${LIVE_DATA_PATH})
+  TIMEZONE=$(jq -r '.timeZone' ${LIVE_DATA_PATH})
+  DEVICE_TYPE=$(jq -r '.device' ${LIVE_DATA_PATH})
+  DEPLOYMENT_MODE=$(jq -r '.deploymentMode' ${LIVE_DATA_PATH})
+  if [[ "${DEPLOYMENT_MODE}" == "non-interactive" ]]; then
+    REPLICATION_HARDWARE=$(jq -r '.replicationHardware' ${LIVE_DATA_PATH})
+    REPLICATION_STRATEGY=$(jq -r '.replicationStrategy' ${LIVE_DATA_PATH})
+    REPLICATION_SECRETS=$(jq -r '.replicationSecrets' ${LIVE_DATA_PATH})    
+  fi
+  LIVE_IP=$(jq -r '.liveIp' ${LIVE_DATA_PATH})
+  LIVE_PASSWORD=$(jq -r '.livePassword' ${LIVE_DATA_PATH})
 
-# 3. Wait for Live Credentials from the Website
-if [[ ${DEBUG} -eq 1 ]]; then
-  echo -e "\n ⏳ Waiting for device credentials from web UI..."
 fi
 
-while [ ! -f configurator/.discovery_ready ]; do
-  sleep 2
-done
-
-if [[ ${DEBUG} -eq 1 ]]; then
-echo -e "\n ✅ Credentials received."
-fi
 
 # 3. Load Credentials and run Discovery
-DEVICE_TYPE=$(jq -r '.device' configurator/live_settings.json)
-LIVE_TARGET_IP=$(jq -r '.live_ip' configurator/live_settings.json)
-LIVE_TARGET_PASSWD=$(jq -r '.live_password' configurator/live_settings.json)
-TARGET_USER="nixos" # Default for NixOS ISO
+
 
 setup_ssh
 hardware_detection
@@ -860,4 +903,4 @@ done
 
 # 5. Execute Deployment
 echo -e "\n🚀 Starting deployment sequence..."
-deploy | tee configurator/deploy.log
\ No newline at end of file
+deploy > deploy-out.log 2> deploy-err.log
\ No newline at end of file
diff --git a/web/index.html b/web/index.html
new file mode 100644
index 0000000..e49f7c0
--- /dev/null
+++ b/web/index.html
@@ -0,0 +1,49 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Numbus Configurator</title>
+    <!-- Tailwind CSS for modern styling -->
+    <script src="https://cdn.tailwindcss.com"></script>
+    <!-- Alpine.js for lightweight reactivity -->
+    <script defer src="https://cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js"></script>
+    <!-- JS-YAML to convert JS objects to YAML strings -->
+    <script src="https://cdnjs.cloudflare.com/ajax/libs/js-yaml/4.1.0/js-yaml.min.js"></script>
+    <!-- Material Design Icons -->
+    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@mdi/font@7.4.47/css/materialdesignicons.min.css">
+    <link rel="icon" href="./media/favicon.ico" type="image/x-icon">
+</head>
+
+<style>
+    @keyframes pulse-slow {
+        0%, 100% { transform: scale(1); filter: drop-shadow(0 0 20px rgba(14, 165, 233, 0.2)); }
+        50% { transform: scale(1.03); filter: drop-shadow(0 0 40px rgba(192, 38, 211, 0.4)); } 
+    }
+    .animate-pulse-slow { animation: pulse-slow 6s infinite ease-in-out; }
+    .text-shadow-glow { text-shadow: 0 0 15px rgba(56, 189, 248, 0.4); }
+</style>
+
+<body class="bg-[#0f172a] text-slate-100 min-h-screen font-sans selection:bg-fuchsia-500/30">
+  
+  <!-- Welcome screen -->
+  <div class="p-12 justify-center flex flex-col items-center">
+    <img class="w-64 h-64 auto drop-shadow-2xl animate-pulse-slow" src="./media/logo.png" alt="Numbus Logo">
+    <h1 class="p-8 text-center text-6xl font-extrabold tracking-tight">Welcome to <span class="text-sky-400 animate-pulse-slow text-shadow-glow">NUMBUS</span></h1>
+    <p class="text-center text-2xl p-2">Transform your device into a <strong>secure, reliable and private</strong> appliance <br> using the power of open-soure software.</p>
+    <p class="text-center text-2xl p-2 pb-10">You will be <strong>guided</strong> through the configuration process.</p>
+
+    <div class="bg-amber-500/20 border border-amber-500/30 p-4 rounded-xl flex gap-5 text-left items-center max-w-3xl mx-auto">
+      <span class="bg-amber-500 rounded-full p-1 px-2 shrink-0">
+        <i class="mdi mdi-shield-lock text-slate-900 text-2xl"></i>
+      </span>
+      <p class="text-xl text-amber-200/90 italic"><strong>Privacy First:</strong> No data entered here ever leaves your device. <br> This configurator runs entirely locally in your browser and is fully private.
+    </div>
+
+      <span class="animate-pulse-slow drop-shadow-2xl p-12">
+        <a class="text-shadow-glow px-10 py-4 bg-fuchsia-600 hover:bg-fuchsia-500 rounded-full text-xl font-bold transition-all transform hover:scale-105 shadow-lg shadow-fuchsia-600/20" href="./pages/preparation.html">Get Started</a>
+      </span>
+  </div>
+
+</body>
+</html>
\ No newline at end of file
diff --git a/web/logic/bridge.py b/web/logic/bridge.py
new file mode 100644
index 0000000..ea2385f
--- /dev/null
+++ b/web/logic/bridge.py
@@ -0,0 +1,50 @@
+import http.server
+import json
+import os
+import sys
+
+# Use a memory-backed path for temporary secrets if available, else local
+SECRET_PATH = "/run/user/{}/numbus".format(os.getuid()) if os.path.exists("/run/user/{}".format(os.getuid())) else "."
+os.makedirs(SECRET_PATH, exist_ok=True)
+
+class BridgeHandler(http.server.SimpleHTTPRequestHandler):
+  def do_GET(self):
+    # Route for logs: /logs?type=out or /logs?type=err
+    if self.path.startswith('/logs'):
+      log_type = "out" if "type=err" not in self.path else "err"
+      log_file = f'deploy-{log_type}.log'
+      
+      self.send_response(200)
+      self.send_header('Content-type', 'text/plain')
+      self.send_header('Access-Control-Allow-Origin', '*')
+      self.end_headers()
+      
+      if os.path.exists(log_file):
+        with open(log_file, 'r') as f:
+          # Read last 50 lines for better context during errors
+          self.wfile.write("".join(f.readlines()[-50:]).encode())
+      return
+    return http.server.SimpleHTTPRequestHandler.do_GET(self)
+
+  def do_POST(self):
+    content_length = int(self.headers['Content-Length'])
+    post_data = self.rfile.read(content_length)
+    
+    if self.path == '/discovery':
+      # Store secrets in memory-backed filesystem
+      with open(os.path.join(SECRET_PATH, "live_settings.json"), "wb") as f:
+        f.write(post_data)
+      self.send_response(200)
+      self.end_headers()
+      # Signal Bash that discovery data is ready
+      with open(".discovery_ready", "w") as f: f.write("1")
+
+    elif self.path == '/deploy':
+      with open("../numbus.yaml", "wb") as f:
+        f.write(post_data)
+      self.send_response(200)
+      self.end_headers()
+      with open(".deploy_signal", "w") as f: f.write("1")
+
+os.chdir("configurator")
+http.server.HTTPServer(('localhost', 8088), BridgeHandler).serve_forever()
\ No newline at end of file
diff --git a/web/media/dark/numbus-backup-server-dark.svg b/web/media/dark/numbus-backup-server-dark.svg
new file mode 100644
index 0000000..87562e3
--- /dev/null
+++ b/web/media/dark/numbus-backup-server-dark.svg
@@ -0,0 +1,42 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<svg
+   xml:space="preserve"
+   viewBox="0 0 512 512"
+   version="1.1"
+   id="svg1"
+   sodipodi:docname="numbus-backup-server-dark.svg"
+   inkscape:version="1.4.3 (0d15f75042, 2025-12-25)"
+   xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+   xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+   xmlns="http://www.w3.org/2000/svg"
+   xmlns:svg="http://www.w3.org/2000/svg"><defs
+     id="defs1" /><sodipodi:namedview
+     id="namedview1"
+     pagecolor="#ffffff"
+     bordercolor="#000000"
+     borderopacity="0.25"
+     inkscape:showpageshadow="2"
+     inkscape:pageopacity="0.0"
+     inkscape:pagecheckerboard="0"
+     inkscape:deskcolor="#d1d1d1"
+     inkscape:zoom="0.96303857"
+     inkscape:cx="255.44148"
+     inkscape:cy="219.09818"
+     inkscape:window-width="1920"
+     inkscape:window-height="1011"
+     inkscape:window-x="0"
+     inkscape:window-y="0"
+     inkscape:window-maximized="1"
+     inkscape:current-layer="svg1" /><path
+     d="M201.1 166.7 76.5 397.9l-29.1-52.8 33.6-62-66.8-.2L0 256.5l14.6-27 95.1.3 34.2-63zm9.7 184.8h249.4L432 404.9l-66.9-.2 33.2 62-14.2 26.5H355L307.7 405l-68.1-.1zM356 250.2 231.3 19l57.3-.6 33.3 62.1 33.5-61.8h28.5l14.5 27-47.8 87.9 33.9 63.2zm-199.8 11.7 124.7 231.2-57.3.6-33.3-62.2-33.5 61.8h-28.5l-14.6-27 47.8-87.8-33.9-63.2zM301.1 160H51.6l28.2-53.4 66.9.2-33.2-62 14.2-26.5h29.1l47.3 88.2 68.1.1zm9.8 185.4 124.7-231.2 29.1 52.8-33.7 61.9 66.8.2 14.2 26.5-14.6 27-95.1-.3-34.2 63z"
+     style="fill-rule:evenodd;clip-rule:evenodd;fill:#000000"
+     id="path1" /><rect
+     style="opacity:0.88;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:55.0675;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
+     id="rect1"
+     width="184.93251"
+     height="144.93251"
+     x="277.53375"
+     y="320.73373" /><path
+     d="m 382.85714,316.05715 a 77.142857,77.142857 0 0 0 -77.14285,77.14286 H 280 l 34.28572,34.28571 34.28571,-34.28571 h -25.71429 a 60,60 0 0 1 60,-60 60,60 0 0 1 60,60 60,60 0 0 1 -60,59.99998 c -12.85714,0 -24.94285,-4.28571 -34.8,-11.14285 L 335.71428,454.4 c 13.20001,9.94285 29.48572,15.94285 47.14286,15.94285 A 77.142857,77.142857 0 0 0 460,393.20001 77.142857,77.142857 0 0 0 382.85714,316.05715 M 400,393.20001 a 17.142857,17.142857 0 0 0 -17.14286,-17.14286 17.142857,17.142857 0 0 0 -17.14285,17.14286 17.142857,17.142857 0 0 0 17.14285,17.14285 A 17.142857,17.142857 0 0 0 400,393.20001 Z"
+     id="path1-5"
+     style="fill:#ffffff;stroke-width:8.57143" /></svg>
diff --git a/web/media/dark/numbus-computer-dark.svg b/web/media/dark/numbus-computer-dark.svg
new file mode 100644
index 0000000..79e2a5f
--- /dev/null
+++ b/web/media/dark/numbus-computer-dark.svg
@@ -0,0 +1,42 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<svg
+   xml:space="preserve"
+   viewBox="0 0 512 512"
+   version="1.1"
+   id="svg1"
+   sodipodi:docname="numbus-computer-dark.svg"
+   inkscape:version="1.4.3 (0d15f75042, 2025-12-25)"
+   xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+   xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+   xmlns="http://www.w3.org/2000/svg"
+   xmlns:svg="http://www.w3.org/2000/svg"><defs
+     id="defs1" /><sodipodi:namedview
+     id="namedview1"
+     pagecolor="#ffffff"
+     bordercolor="#000000"
+     borderopacity="0.25"
+     inkscape:showpageshadow="2"
+     inkscape:pageopacity="0.0"
+     inkscape:pagecheckerboard="0"
+     inkscape:deskcolor="#d1d1d1"
+     inkscape:zoom="0.96303857"
+     inkscape:cx="255.44148"
+     inkscape:cy="219.09818"
+     inkscape:window-width="1920"
+     inkscape:window-height="1011"
+     inkscape:window-x="0"
+     inkscape:window-y="0"
+     inkscape:window-maximized="1"
+     inkscape:current-layer="svg1" /><path
+     d="M201.1 166.7 76.5 397.9l-29.1-52.8 33.6-62-66.8-.2L0 256.5l14.6-27 95.1.3 34.2-63zm9.7 184.8h249.4L432 404.9l-66.9-.2 33.2 62-14.2 26.5H355L307.7 405l-68.1-.1zM356 250.2 231.3 19l57.3-.6 33.3 62.1 33.5-61.8h28.5l14.5 27-47.8 87.9 33.9 63.2zm-199.8 11.7 124.7 231.2-57.3.6-33.3-62.2-33.5 61.8h-28.5l-14.6-27 47.8-87.8-33.9-63.2zM301.1 160H51.6l28.2-53.4 66.9.2-33.2-62 14.2-26.5h29.1l47.3 88.2 68.1.1zm9.8 185.4 124.7-231.2 29.1 52.8-33.7 61.9 66.8.2 14.2 26.5-14.6 27-95.1-.3-34.2 63z"
+     style="fill-rule:evenodd;clip-rule:evenodd;fill:#000000"
+     id="path1" /><rect
+     style="opacity:0.88;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:55.0675;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
+     id="rect1"
+     width="184.93251"
+     height="144.93251"
+     x="277.53375"
+     y="320.73373" /><path
+     d="m 310,348.2 h 120 v 75 H 310 m 120,15 a 15,15 0 0 0 15,-15 v -75 c 0,-8.325 -6.75,-15 -15,-15 H 310 c -8.325,0 -15,6.675 -15,15 v 75 a 15,15 0 0 0 15,15 h -30 v 15 h 180 v -15 z"
+     id="path1-2"
+     style="stroke-width:7.5;fill:#ffffff" /></svg>
diff --git a/web/media/dark/numbus-server-dark.svg b/web/media/dark/numbus-server-dark.svg
new file mode 100644
index 0000000..75fdce4
--- /dev/null
+++ b/web/media/dark/numbus-server-dark.svg
@@ -0,0 +1,42 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<svg
+   xml:space="preserve"
+   viewBox="0 0 512 512"
+   version="1.1"
+   id="svg1"
+   sodipodi:docname="numbus-server-dark.svg"
+   inkscape:version="1.4.3 (0d15f75042, 2025-12-25)"
+   xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+   xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+   xmlns="http://www.w3.org/2000/svg"
+   xmlns:svg="http://www.w3.org/2000/svg"><defs
+     id="defs1" /><sodipodi:namedview
+     id="namedview1"
+     pagecolor="#ffffff"
+     bordercolor="#000000"
+     borderopacity="0.25"
+     inkscape:showpageshadow="2"
+     inkscape:pageopacity="0.0"
+     inkscape:pagecheckerboard="0"
+     inkscape:deskcolor="#d1d1d1"
+     inkscape:zoom="0.96303857"
+     inkscape:cx="255.44148"
+     inkscape:cy="219.09818"
+     inkscape:window-width="1920"
+     inkscape:window-height="1011"
+     inkscape:window-x="0"
+     inkscape:window-y="0"
+     inkscape:window-maximized="1"
+     inkscape:current-layer="svg1" /><path
+     d="M201.1 166.7 76.5 397.9l-29.1-52.8 33.6-62-66.8-.2L0 256.5l14.6-27 95.1.3 34.2-63zm9.7 184.8h249.4L432 404.9l-66.9-.2 33.2 62-14.2 26.5H355L307.7 405l-68.1-.1zM356 250.2 231.3 19l57.3-.6 33.3 62.1 33.5-61.8h28.5l14.5 27-47.8 87.9 33.9 63.2zm-199.8 11.7 124.7 231.2-57.3.6-33.3-62.2-33.5 61.8h-28.5l-14.6-27 47.8-87.8-33.9-63.2zM301.1 160H51.6l28.2-53.4 66.9.2-33.2-62 14.2-26.5h29.1l47.3 88.2 68.1.1zm9.8 185.4 124.7-231.2 29.1 52.8-33.7 61.9 66.8.2 14.2 26.5-14.6 27-95.1-.3-34.2 63z"
+     style="fill-rule:evenodd;clip-rule:evenodd;fill:#000000"
+     id="path1" /><rect
+     style="opacity:0.88;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:55.0675;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
+     id="rect1"
+     width="184.93251"
+     height="144.93251"
+     x="277.53375"
+     y="320.73373" /><path
+     d="m 377.25,436.7 h 7.25 a 7.25,7.25 0 0 1 7.25,7.25 h 50.75 v 14.5 h -50.75 a 7.25,7.25 0 0 1 -7.25,7.25 h -29 a 7.25,7.25 0 0 1 -7.25,-7.25 H 297.5 v -14.5 h 50.75 a 7.25,7.25 0 0 1 7.25,-7.25 h 7.25 V 422.2 H 312 a 7.25,7.25 0 0 1 -7.25,-7.25 v -29 A 7.25,7.25 0 0 1 312,378.7 h 116 a 7.25,7.25 0 0 1 7.25,7.25 v 29 A 7.25,7.25 0 0 1 428,422.2 h -50.75 v 14.5 M 312,320.7 h 116 a 7.25,7.25 0 0 1 7.25,7.25 v 29 A 7.25,7.25 0 0 1 428,364.2 H 312 a 7.25,7.25 0 0 1 -7.25,-7.25 v -29 A 7.25,7.25 0 0 1 312,320.7 m 36.25,29 h 7.25 v -14.5 h -7.25 v 14.5 m 0,58 h 7.25 v -14.5 h -7.25 v 14.5 m -29,-72.5 v 14.5 h 14.5 v -14.5 h -14.5 m 0,58 v 14.5 h 14.5 v -14.5 z"
+     id="path1-6"
+     style="fill:#ffffff;stroke-width:7.25" /></svg>
diff --git a/web/media/dark/numbus-template-dark.svg b/web/media/dark/numbus-template-dark.svg
new file mode 100644
index 0000000..a77c261
--- /dev/null
+++ b/web/media/dark/numbus-template-dark.svg
@@ -0,0 +1,39 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<svg
+   xml:space="preserve"
+   viewBox="0 0 512 512"
+   version="1.1"
+   id="svg1"
+   sodipodi:docname="numbus-dark-template.svg"
+   inkscape:version="1.4.3 (0d15f75042, 2025-12-25)"
+   xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+   xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+   xmlns="http://www.w3.org/2000/svg"
+   xmlns:svg="http://www.w3.org/2000/svg"><defs
+     id="defs1" /><sodipodi:namedview
+     id="namedview1"
+     pagecolor="#ffffff"
+     bordercolor="#000000"
+     borderopacity="0.25"
+     inkscape:showpageshadow="2"
+     inkscape:pageopacity="0.0"
+     inkscape:pagecheckerboard="0"
+     inkscape:deskcolor="#d1d1d1"
+     inkscape:zoom="1.2326894"
+     inkscape:cx="261.21747"
+     inkscape:cy="258.78377"
+     inkscape:window-width="1920"
+     inkscape:window-height="1011"
+     inkscape:window-x="0"
+     inkscape:window-y="0"
+     inkscape:window-maximized="1"
+     inkscape:current-layer="svg1" /><path
+     d="M201.1 166.7 76.5 397.9l-29.1-52.8 33.6-62-66.8-.2L0 256.5l14.6-27 95.1.3 34.2-63zm9.7 184.8h249.4L432 404.9l-66.9-.2 33.2 62-14.2 26.5H355L307.7 405l-68.1-.1zM356 250.2 231.3 19l57.3-.6 33.3 62.1 33.5-61.8h28.5l14.5 27-47.8 87.9 33.9 63.2zm-199.8 11.7 124.7 231.2-57.3.6-33.3-62.2-33.5 61.8h-28.5l-14.6-27 47.8-87.8-33.9-63.2zM301.1 160H51.6l28.2-53.4 66.9.2-33.2-62 14.2-26.5h29.1l47.3 88.2 68.1.1zm9.8 185.4 124.7-231.2 29.1 52.8-33.7 61.9 66.8.2 14.2 26.5-14.6 27-95.1-.3-34.2 63z"
+     style="fill-rule:evenodd;clip-rule:evenodd"
+     id="path1" /><rect
+     style="opacity:0.88;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:55.0675;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
+     id="rect1"
+     width="184.93251"
+     height="144.93251"
+     x="277.53375"
+     y="320.73373" /></svg>
diff --git a/web/media/dark/numbus-tv-dark.svg b/web/media/dark/numbus-tv-dark.svg
new file mode 100644
index 0000000..3b7a454
--- /dev/null
+++ b/web/media/dark/numbus-tv-dark.svg
@@ -0,0 +1,42 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<svg
+   xml:space="preserve"
+   viewBox="0 0 512 512"
+   version="1.1"
+   id="svg1"
+   sodipodi:docname="numbus-tv-dark.svg"
+   inkscape:version="1.4.3 (0d15f75042, 2025-12-25)"
+   xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+   xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+   xmlns="http://www.w3.org/2000/svg"
+   xmlns:svg="http://www.w3.org/2000/svg"><defs
+     id="defs1" /><sodipodi:namedview
+     id="namedview1"
+     pagecolor="#ffffff"
+     bordercolor="#000000"
+     borderopacity="0.25"
+     inkscape:showpageshadow="2"
+     inkscape:pageopacity="0.0"
+     inkscape:pagecheckerboard="0"
+     inkscape:deskcolor="#d1d1d1"
+     inkscape:zoom="0.96303857"
+     inkscape:cx="255.44148"
+     inkscape:cy="219.09818"
+     inkscape:window-width="1920"
+     inkscape:window-height="1011"
+     inkscape:window-x="0"
+     inkscape:window-y="0"
+     inkscape:window-maximized="1"
+     inkscape:current-layer="svg1" /><path
+     d="M201.1 166.7 76.5 397.9l-29.1-52.8 33.6-62-66.8-.2L0 256.5l14.6-27 95.1.3 34.2-63zm9.7 184.8h249.4L432 404.9l-66.9-.2 33.2 62-14.2 26.5H355L307.7 405l-68.1-.1zM356 250.2 231.3 19l57.3-.6 33.3 62.1 33.5-61.8h28.5l14.5 27-47.8 87.9 33.9 63.2zm-199.8 11.7 124.7 231.2-57.3.6-33.3-62.2-33.5 61.8h-28.5l-14.6-27 47.8-87.8-33.9-63.2zM301.1 160H51.6l28.2-53.4 66.9.2-33.2-62 14.2-26.5h29.1l47.3 88.2 68.1.1zm9.8 185.4 124.7-231.2 29.1 52.8-33.7 61.9 66.8.2 14.2 26.5-14.6 27-95.1-.3-34.2 63z"
+     style="fill-rule:evenodd;clip-rule:evenodd;fill:#000000"
+     id="path1" /><rect
+     style="opacity:0.88;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:55.0675;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
+     id="rect1"
+     width="184.93251"
+     height="144.93251"
+     x="277.53375"
+     y="320.73373" /><path
+     style="opacity:1;fill:#ffffff;fill-opacity:1;stroke:none;stroke-width:33.8362;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
+     d="m 318.5733,405.71938 v -38.9116 H 299.28665 280 V 354.28838 341.769 h 54.65141 54.65141 l 9.69089,29.09912 c 5.32999,16.00451 9.79503,29.09911 9.92233,29.09911 0.12729,0 4.59234,-13.0946 9.92232,-29.09911 L 428.52925,341.769 H 444.269 c 8.65686,0 15.73581,0.0761 15.731,0.16918 -0.005,0.0931 -8.63713,23.16087 -19.18293,51.26182 l -19.17419,51.09264 H 408.9696 396.29631 l -14.33924,-38.57326 -14.33925,-38.57324 -12.00286,-0.18479 -12.00285,-0.1848 v 38.92722 38.92723 h -12.5194 -12.51941 z"
+     id="path2" /></svg>
diff --git a/configurator/favicon.ico b/web/media/favicon.ico
similarity index 100%
rename from configurator/favicon.ico
rename to web/media/favicon.ico
diff --git a/web/media/light/numbus-backup-server-light.svg b/web/media/light/numbus-backup-server-light.svg
new file mode 100644
index 0000000..2a5236a
--- /dev/null
+++ b/web/media/light/numbus-backup-server-light.svg
@@ -0,0 +1,42 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<svg
+   xml:space="preserve"
+   viewBox="0 0 512 512"
+   version="1.1"
+   id="svg1"
+   sodipodi:docname="numbus-backup-server-light.svg"
+   inkscape:version="1.4.3 (0d15f75042, 2025-12-25)"
+   xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+   xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+   xmlns="http://www.w3.org/2000/svg"
+   xmlns:svg="http://www.w3.org/2000/svg"><defs
+     id="defs1" /><sodipodi:namedview
+     id="namedview1"
+     pagecolor="#ffffff"
+     bordercolor="#000000"
+     borderopacity="0.25"
+     inkscape:showpageshadow="2"
+     inkscape:pageopacity="0.0"
+     inkscape:pagecheckerboard="0"
+     inkscape:deskcolor="#d1d1d1"
+     inkscape:zoom="0.96303857"
+     inkscape:cx="255.44148"
+     inkscape:cy="219.09818"
+     inkscape:window-width="1920"
+     inkscape:window-height="1011"
+     inkscape:window-x="0"
+     inkscape:window-y="0"
+     inkscape:window-maximized="1"
+     inkscape:current-layer="svg1" /><path
+     d="M201.1 166.7 76.5 397.9l-29.1-52.8 33.6-62-66.8-.2L0 256.5l14.6-27 95.1.3 34.2-63zm9.7 184.8h249.4L432 404.9l-66.9-.2 33.2 62-14.2 26.5H355L307.7 405l-68.1-.1zM356 250.2 231.3 19l57.3-.6 33.3 62.1 33.5-61.8h28.5l14.5 27-47.8 87.9 33.9 63.2zm-199.8 11.7 124.7 231.2-57.3.6-33.3-62.2-33.5 61.8h-28.5l-14.6-27 47.8-87.8-33.9-63.2zM301.1 160H51.6l28.2-53.4 66.9.2-33.2-62 14.2-26.5h29.1l47.3 88.2 68.1.1zm9.8 185.4 124.7-231.2 29.1 52.8-33.7 61.9 66.8.2 14.2 26.5-14.6 27-95.1-.3-34.2 63z"
+     style="fill-rule:evenodd;clip-rule:evenodd;fill:#ffffff"
+     id="path1" /><rect
+     style="opacity:0.88;fill:#ffffff;fill-opacity:1;stroke:#ffffff;stroke-width:55.0675;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
+     id="rect1"
+     width="184.93251"
+     height="144.93251"
+     x="277.53375"
+     y="320.73373" /><path
+     d="m 382.85714,316.05715 a 77.142857,77.142857 0 0 0 -77.14285,77.14286 H 280 l 34.28572,34.28571 34.28571,-34.28571 h -25.71429 a 60,60 0 0 1 60,-60 60,60 0 0 1 60,60 60,60 0 0 1 -60,59.99998 c -12.85714,0 -24.94285,-4.28571 -34.8,-11.14285 L 335.71428,454.4 c 13.20001,9.94285 29.48572,15.94285 47.14286,15.94285 A 77.142857,77.142857 0 0 0 460,393.20001 77.142857,77.142857 0 0 0 382.85714,316.05715 M 400,393.20001 a 17.142857,17.142857 0 0 0 -17.14286,-17.14286 17.142857,17.142857 0 0 0 -17.14285,17.14286 17.142857,17.142857 0 0 0 17.14285,17.14285 A 17.142857,17.142857 0 0 0 400,393.20001 Z"
+     id="path1-5"
+     style="fill:#000000;stroke-width:8.57143" /></svg>
diff --git a/web/media/light/numbus-computer-light.svg b/web/media/light/numbus-computer-light.svg
new file mode 100644
index 0000000..8ac9ed3
--- /dev/null
+++ b/web/media/light/numbus-computer-light.svg
@@ -0,0 +1,42 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<svg
+   xml:space="preserve"
+   viewBox="0 0 512 512"
+   version="1.1"
+   id="svg1"
+   sodipodi:docname="numbus-computer-light.svg"
+   inkscape:version="1.4.3 (0d15f75042, 2025-12-25)"
+   xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+   xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+   xmlns="http://www.w3.org/2000/svg"
+   xmlns:svg="http://www.w3.org/2000/svg"><defs
+     id="defs1" /><sodipodi:namedview
+     id="namedview1"
+     pagecolor="#ffffff"
+     bordercolor="#000000"
+     borderopacity="0.25"
+     inkscape:showpageshadow="2"
+     inkscape:pageopacity="0.0"
+     inkscape:pagecheckerboard="0"
+     inkscape:deskcolor="#d1d1d1"
+     inkscape:zoom="0.96303857"
+     inkscape:cx="255.44148"
+     inkscape:cy="219.09818"
+     inkscape:window-width="1920"
+     inkscape:window-height="1011"
+     inkscape:window-x="0"
+     inkscape:window-y="0"
+     inkscape:window-maximized="1"
+     inkscape:current-layer="svg1" /><path
+     d="M201.1 166.7 76.5 397.9l-29.1-52.8 33.6-62-66.8-.2L0 256.5l14.6-27 95.1.3 34.2-63zm9.7 184.8h249.4L432 404.9l-66.9-.2 33.2 62-14.2 26.5H355L307.7 405l-68.1-.1zM356 250.2 231.3 19l57.3-.6 33.3 62.1 33.5-61.8h28.5l14.5 27-47.8 87.9 33.9 63.2zm-199.8 11.7 124.7 231.2-57.3.6-33.3-62.2-33.5 61.8h-28.5l-14.6-27 47.8-87.8-33.9-63.2zM301.1 160H51.6l28.2-53.4 66.9.2-33.2-62 14.2-26.5h29.1l47.3 88.2 68.1.1zm9.8 185.4 124.7-231.2 29.1 52.8-33.7 61.9 66.8.2 14.2 26.5-14.6 27-95.1-.3-34.2 63z"
+     style="fill-rule:evenodd;clip-rule:evenodd;fill:#ffffff"
+     id="path1" /><rect
+     style="opacity:0.88;fill:#ffffff;fill-opacity:1;stroke:#ffffff;stroke-width:55.0675;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
+     id="rect1"
+     width="184.93251"
+     height="144.93251"
+     x="277.53375"
+     y="320.73373" /><path
+     d="m 310,348.2 h 120 v 75 H 310 m 120,15 a 15,15 0 0 0 15,-15 v -75 c 0,-8.325 -6.75,-15 -15,-15 H 310 c -8.325,0 -15,6.675 -15,15 v 75 a 15,15 0 0 0 15,15 h -30 v 15 h 180 v -15 z"
+     id="path1-2"
+     style="stroke-width:7.5;fill:#000000" /></svg>
diff --git a/web/media/light/numbus-server-light.svg b/web/media/light/numbus-server-light.svg
new file mode 100644
index 0000000..5170e09
--- /dev/null
+++ b/web/media/light/numbus-server-light.svg
@@ -0,0 +1,42 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<svg
+   xml:space="preserve"
+   viewBox="0 0 512 512"
+   version="1.1"
+   id="svg1"
+   sodipodi:docname="numbus-server-light.svg"
+   inkscape:version="1.4.3 (0d15f75042, 2025-12-25)"
+   xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+   xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+   xmlns="http://www.w3.org/2000/svg"
+   xmlns:svg="http://www.w3.org/2000/svg"><defs
+     id="defs1" /><sodipodi:namedview
+     id="namedview1"
+     pagecolor="#ffffff"
+     bordercolor="#000000"
+     borderopacity="0.25"
+     inkscape:showpageshadow="2"
+     inkscape:pageopacity="0.0"
+     inkscape:pagecheckerboard="0"
+     inkscape:deskcolor="#d1d1d1"
+     inkscape:zoom="0.96303857"
+     inkscape:cx="255.44148"
+     inkscape:cy="219.09818"
+     inkscape:window-width="1920"
+     inkscape:window-height="1011"
+     inkscape:window-x="0"
+     inkscape:window-y="0"
+     inkscape:window-maximized="1"
+     inkscape:current-layer="svg1" /><path
+     d="M201.1 166.7 76.5 397.9l-29.1-52.8 33.6-62-66.8-.2L0 256.5l14.6-27 95.1.3 34.2-63zm9.7 184.8h249.4L432 404.9l-66.9-.2 33.2 62-14.2 26.5H355L307.7 405l-68.1-.1zM356 250.2 231.3 19l57.3-.6 33.3 62.1 33.5-61.8h28.5l14.5 27-47.8 87.9 33.9 63.2zm-199.8 11.7 124.7 231.2-57.3.6-33.3-62.2-33.5 61.8h-28.5l-14.6-27 47.8-87.8-33.9-63.2zM301.1 160H51.6l28.2-53.4 66.9.2-33.2-62 14.2-26.5h29.1l47.3 88.2 68.1.1zm9.8 185.4 124.7-231.2 29.1 52.8-33.7 61.9 66.8.2 14.2 26.5-14.6 27-95.1-.3-34.2 63z"
+     style="fill-rule:evenodd;clip-rule:evenodd;fill:#ffffff"
+     id="path1" /><rect
+     style="opacity:0.88;fill:#ffffff;fill-opacity:1;stroke:#ffffff;stroke-width:55.0675;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
+     id="rect1"
+     width="184.93251"
+     height="144.93251"
+     x="277.53375"
+     y="320.73373" /><path
+     d="m 377.25,436.7 h 7.25 a 7.25,7.25 0 0 1 7.25,7.25 h 50.75 v 14.5 h -50.75 a 7.25,7.25 0 0 1 -7.25,7.25 h -29 a 7.25,7.25 0 0 1 -7.25,-7.25 H 297.5 v -14.5 h 50.75 a 7.25,7.25 0 0 1 7.25,-7.25 h 7.25 V 422.2 H 312 a 7.25,7.25 0 0 1 -7.25,-7.25 v -29 A 7.25,7.25 0 0 1 312,378.7 h 116 a 7.25,7.25 0 0 1 7.25,7.25 v 29 A 7.25,7.25 0 0 1 428,422.2 h -50.75 v 14.5 M 312,320.7 h 116 a 7.25,7.25 0 0 1 7.25,7.25 v 29 A 7.25,7.25 0 0 1 428,364.2 H 312 a 7.25,7.25 0 0 1 -7.25,-7.25 v -29 A 7.25,7.25 0 0 1 312,320.7 m 36.25,29 h 7.25 v -14.5 h -7.25 v 14.5 m 0,58 h 7.25 v -14.5 h -7.25 v 14.5 m -29,-72.5 v 14.5 h 14.5 v -14.5 h -14.5 m 0,58 v 14.5 h 14.5 v -14.5 z"
+     id="path1-6"
+     style="fill:#000000;stroke-width:7.25" /></svg>
diff --git a/web/media/light/numbus-template-light.svg b/web/media/light/numbus-template-light.svg
new file mode 100644
index 0000000..034aa88
--- /dev/null
+++ b/web/media/light/numbus-template-light.svg
@@ -0,0 +1,39 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<svg
+   xml:space="preserve"
+   viewBox="0 0 512 512"
+   version="1.1"
+   id="svg1"
+   sodipodi:docname="numbus-dark-template.svg"
+   inkscape:version="1.4.3 (0d15f75042, 2025-12-25)"
+   xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+   xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+   xmlns="http://www.w3.org/2000/svg"
+   xmlns:svg="http://www.w3.org/2000/svg"><defs
+     id="defs1" /><sodipodi:namedview
+     id="namedview1"
+     pagecolor="#ffffff"
+     bordercolor="#000000"
+     borderopacity="0.25"
+     inkscape:showpageshadow="2"
+     inkscape:pageopacity="0.0"
+     inkscape:pagecheckerboard="0"
+     inkscape:deskcolor="#d1d1d1"
+     inkscape:zoom="1.2326894"
+     inkscape:cx="261.21747"
+     inkscape:cy="258.78377"
+     inkscape:window-width="1920"
+     inkscape:window-height="1011"
+     inkscape:window-x="0"
+     inkscape:window-y="0"
+     inkscape:window-maximized="1"
+     inkscape:current-layer="svg1" /><path
+     d="M201.1 166.7 76.5 397.9l-29.1-52.8 33.6-62-66.8-.2L0 256.5l14.6-27 95.1.3 34.2-63zm9.7 184.8h249.4L432 404.9l-66.9-.2 33.2 62-14.2 26.5H355L307.7 405l-68.1-.1zM356 250.2 231.3 19l57.3-.6 33.3 62.1 33.5-61.8h28.5l14.5 27-47.8 87.9 33.9 63.2zm-199.8 11.7 124.7 231.2-57.3.6-33.3-62.2-33.5 61.8h-28.5l-14.6-27 47.8-87.8-33.9-63.2zM301.1 160H51.6l28.2-53.4 66.9.2-33.2-62 14.2-26.5h29.1l47.3 88.2 68.1.1zm9.8 185.4 124.7-231.2 29.1 52.8-33.7 61.9 66.8.2 14.2 26.5-14.6 27-95.1-.3-34.2 63z"
+     style="fill-rule:evenodd;clip-rule:evenodd;fill:#ffffff"
+     id="path1" /><rect
+     style="opacity:0.88;fill:#ffffff;fill-opacity:1;stroke:#ffffff;stroke-width:55.0675;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
+     id="rect1"
+     width="184.93251"
+     height="144.93251"
+     x="277.53375"
+     y="320.73373" /></svg>
diff --git a/web/media/light/numbus-tv-light.svg b/web/media/light/numbus-tv-light.svg
new file mode 100644
index 0000000..07462b5
--- /dev/null
+++ b/web/media/light/numbus-tv-light.svg
@@ -0,0 +1,42 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<svg
+   xml:space="preserve"
+   viewBox="0 0 512 512"
+   version="1.1"
+   id="svg1"
+   sodipodi:docname="numbus-tv-light.svg"
+   inkscape:version="1.4.3 (0d15f75042, 2025-12-25)"
+   xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+   xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+   xmlns="http://www.w3.org/2000/svg"
+   xmlns:svg="http://www.w3.org/2000/svg"><defs
+     id="defs1" /><sodipodi:namedview
+     id="namedview1"
+     pagecolor="#ffffff"
+     bordercolor="#000000"
+     borderopacity="0.25"
+     inkscape:showpageshadow="2"
+     inkscape:pageopacity="0.0"
+     inkscape:pagecheckerboard="0"
+     inkscape:deskcolor="#d1d1d1"
+     inkscape:zoom="0.96303857"
+     inkscape:cx="255.44148"
+     inkscape:cy="219.09818"
+     inkscape:window-width="1920"
+     inkscape:window-height="1011"
+     inkscape:window-x="0"
+     inkscape:window-y="0"
+     inkscape:window-maximized="1"
+     inkscape:current-layer="svg1" /><path
+     d="M201.1 166.7 76.5 397.9l-29.1-52.8 33.6-62-66.8-.2L0 256.5l14.6-27 95.1.3 34.2-63zm9.7 184.8h249.4L432 404.9l-66.9-.2 33.2 62-14.2 26.5H355L307.7 405l-68.1-.1zM356 250.2 231.3 19l57.3-.6 33.3 62.1 33.5-61.8h28.5l14.5 27-47.8 87.9 33.9 63.2zm-199.8 11.7 124.7 231.2-57.3.6-33.3-62.2-33.5 61.8h-28.5l-14.6-27 47.8-87.8-33.9-63.2zM301.1 160H51.6l28.2-53.4 66.9.2-33.2-62 14.2-26.5h29.1l47.3 88.2 68.1.1zm9.8 185.4 124.7-231.2 29.1 52.8-33.7 61.9 66.8.2 14.2 26.5-14.6 27-95.1-.3-34.2 63z"
+     style="fill-rule:evenodd;clip-rule:evenodd;fill:#ffffff"
+     id="path1" /><rect
+     style="opacity:0.88;fill:#ffffff;fill-opacity:1;stroke:#ffffff;stroke-width:55.0675;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
+     id="rect1"
+     width="184.93251"
+     height="144.93251"
+     x="277.53375"
+     y="320.73373" /><path
+     style="opacity:1;fill:#000000;fill-opacity:1;stroke:none;stroke-width:33.8362;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
+     d="m 318.5733,405.71938 v -38.9116 H 299.28665 280 V 354.28838 341.769 h 54.65141 54.65141 l 9.69089,29.09912 c 5.32999,16.00451 9.79503,29.09911 9.92233,29.09911 0.12729,0 4.59234,-13.0946 9.92232,-29.09911 L 428.52925,341.769 H 444.269 c 8.65686,0 15.73581,0.0761 15.731,0.16918 -0.005,0.0931 -8.63713,23.16087 -19.18293,51.26182 l -19.17419,51.09264 H 408.9696 396.29631 l -14.33924,-38.57326 -14.33925,-38.57324 -12.00286,-0.18479 -12.00285,-0.1848 v 38.92722 38.92723 h -12.5194 -12.51941 z"
+     id="path2" /></svg>
diff --git a/configurator/logo.png b/web/media/logo.png
similarity index 100%
rename from configurator/logo.png
rename to web/media/logo.png
diff --git a/web/pages/configuration.html b/web/pages/configuration.html
new file mode 100644
index 0000000..1a498b7
--- /dev/null
+++ b/web/pages/configuration.html
@@ -0,0 +1,145 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Numbus Configurator</title>
+    <!-- Tailwind CSS for modern styling -->
+    <script src="https://cdn.tailwindcss.com"></script>
+    <!-- Alpine.js for lightweight reactivity -->
+    <script defer src="https://cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js"></script>
+    <!-- JS-YAML to convert JS objects to YAML strings -->
+    <script src="https://cdnjs.cloudflare.com/ajax/libs/js-yaml/4.1.0/js-yaml.min.js"></script>
+    <!-- Material Design Icons -->
+    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@mdi/font@7.4.47/css/materialdesignicons.min.css">
+    <!-- Favicon -->
+    <link rel="icon" href="../media/favicon.ico" type="image/x-icon">
+</head>
+
+
+<body x-data="setupNavigation()" class="p-4 bg-[#0f172a] text-slate-100 min-h-screen font-sans selection:bg-fuchsia-500/30">
+
+  <script>
+    function setupNavigation() {
+      return {
+        step: 1,
+        goToPrevStep() {
+          this.step--;
+        },
+        goToNextStep() {
+          this.step++;
+        }
+      }
+    }
+  </script>
+
+  <nav class="bg-[#1e293b] border border-slate-700 rounded-2xl relative">
+    <div class="mx-auto relative flex h-16 items-center justify-between">
+      <div class="absolute inset-y-0 left-0 flex items-center">
+        <a href="https://numbus.eu"><img class="w-auto h-10 pr-5 pl-8" src="../media/logo.png" aria-label="The numbus logo"></a>
+        <a class="font-bold text-2xl tracking-tight bg-gradient-to-r from-sky-400 to-fuchsia-500 bg-clip-text text-transparent uppercase" href="https://numbus.eu">NUMBUS</a>
+      </div>
+      <div class="flex flex-1 items-center justify-center">
+        <h1 class="sm:text-2xl sm:pr-20 lg:pr-0 text-xl text-white font-bold flex items-center">Step 1 - Preparation</h1>
+      </div>
+      <div class="absolute inset-y-0 right-0 flex items-center my-auto">
+        <button  class="h-auto mdi mdi-menu text-slate-100 text-2xl sm:hidden pr-8" aria-label="Menu with links"></button>
+        <button  class="h-auto mdi mdi-brightness-2 text-slate-100 text-2xl hidden sm:block sm:text-3xl pr-5" aria-label="Change theme"></button>
+        <a href="https://gittea.dev/numbus" class="h-auto mdi mdi-source-repository text-slate-100 text-2xl hidden sm:block sm:text-3xl pr-5" aria-label="See the source code on Gitea"></a>
+        <a href="https://gittea.dev/numbus"  class="h-auto mdi mdi-text-box-search text-slate-100 text-2xl hidden sm:block sm:text-3xl pr-8" aria-label="See the full documentation"></a>
+      </div>
+    </div>
+  </nav>
+
+  <div class="pt-10 w-full"></div>
+
+  <!-- Main content -->
+
+  <div class="bg-[#1e293b] border border-slate-700 rounded-3xl h-[calc(100vh-10rem)] max-w-[60vw] mx-auto relative">
+    <!-- Device Type -->
+    <div x-show="step === 1">
+      <h1 class="p-5 pt-6 text-4xl font-bold text-sky-400">Device Type</h1>
+      <div class="p-0.5 bg-slate-700 rounded-3xl w-[98%] mx-auto"></div>
+      <p class="p-5 text-xl text-slate-300">Select the <strong>device type</strong> for your new Numbus machine that matches <strong>your needs</strong>.</p>
+      <div class="pl-5 pr-5 pt-10 pb-10 grid grid-cols-2 gap-4">
+        <button @click="" class="flex items-center gap-4 p-6 border rounded-2xl transition-all text-left bg-slate-900 border-slate-700 hover:bg-fuchsia-600/20 hover:border-fuchsia-500 focus:bg-fuchsia-600/20 focus:border-fuchsia-500">
+          <img class="w-12 h-12 flex-shrink-0" src="../media/light/numbus-server-light.svg" alt="Numbus Server icon">
+          <div>
+            <h1 class="font-bold text-2xl mb-1">Numbus Server</h1>
+            <p class="text-sm transition-colors">Your own Cloud at Home.</p>
+          </div>
+        </button>
+        <button class="flex items-center gap-4 p-6 border rounded-2xl transition-all text-left bg-slate-900 border-slate-700 hover:bg-fuchsia-600/20 hover:border-fuchsia-500 focus:bg-fuchsia-600/20 focus:border-fuchsia-500">
+          <img class="w-12 h-12 flex-shrink-0" src="../media/light/numbus-backup-server-light.svg" alt="Numbus Server icon">
+          <div>
+            <h1 class="font-bold text-2xl mb-1">Numbus Backup Server</h1>
+            <p class="text-sm transition-colors">Backup all Numbus devices and monitor your servers.</p>
+          </div>
+        </button>
+        <button class="flex items-center gap-4 p-6 border rounded-2xl transition-all text-left bg-slate-900 border-slate-700 hover:bg-fuchsia-600/20 hover:border-fuchsia-500 focus:bg-fuchsia-600/20 focus:border-fuchsia-500">
+          <img class="w-12 h-12 flex-shrink-0" src="../media/light/numbus-computer-light.svg" alt="Numbus Server icon">
+          <div>
+            <h1 class="font-bold text-2xl mb-1">Numbus Computer</h1>
+            <p class="text-sm transition-colors">Backup all Numbus devices and monitor your servers.</p>
+          </div>
+        </button>
+        <button class="flex items-center gap-4 p-6 border rounded-2xl transition-all text-left bg-slate-900 border-slate-700 hover:bg-fuchsia-600/20 hover:border-fuchsia-500 focus:bg-fuchsia-600/20 focus:border-fuchsia-500">
+          <img class="w-12 h-12 flex-shrink-0" src="../media/light/numbus-tv-light.svg" alt="Numbus Server icon">
+          <div>
+            <h1 class="font-bold text-2xl mb-1">Numbus TV</h1>
+            <p class="text-sm transition-colors">Your TV, your way. No spying on you.</p>
+          </div>
+        </button>
+      </div>
+    </div>
+
+    <!-- Deployment Mode -->
+    <div x-show="step === 2">
+      <h1 class="p-5 pt-6 text-4xl font-bold text-sky-400">Deployment Mode</h1>
+      <div class="p-0.5 bg-slate-700 rounded-3xl w-[98%] mx-auto"></div>
+      <p class="p-5 text-xl text-slate-300">Select your <strong>preferred</strong> deployment mode. Non-interactive <strong>requires</strong> a ready-to-go configuration hosted on a <strong>git platform</strong>.</p>
+      <div class="pl-5 pr-5 pt-10 grid grid-cols-2 gap-4">
+        <button class="flex items-center gap-4 p-6 border rounded-2xl transition-all text-left bg-slate-900 border-slate-700 hover:bg-fuchsia-600/20 hover:border-fuchsia-500 focus:bg-fuchsia-600/20 focus:border-fuchsia-500">
+          <i class="mdi mdi-gesture-tap text-5xl flex-shrink-0"></i>
+          <div>
+            <h1 class="font-bold text-2xl mb-1">Interactive</h1>
+            <p class="text-sm transition-colors">We will guide you through the setup process.</p>
+          </div>
+        </button>
+        <button class="flex items-center gap-4 p-6 border rounded-2xl transition-all text-left bg-slate-900 border-slate-700 hover:bg-fuchsia-600/20 hover:border-fuchsia-500 focus:bg-fuchsia-600/20 focus:border-fuchsia-500">
+          <i class="mdi mdi-cog-clockwise text-5xl flex-shrink-0"></i>
+          <div>
+            <h1 class="font-bold text-2xl mb-1">Non-interactive</h1>
+            <p class="text-sm transition-colors">You already have a ready-to-go configuration.</p>
+          </div>
+        </button>
+      </div>
+    </div>
+
+    <!-- Live Setup -->
+    <div x-show="step === 3">
+      <h1 class="p-5 pt-6 text-4xl font-bold text-sky-400">Live Setup</h1>
+      <div class="p-0.5 bg-slate-700 rounded-3xl w-[98%] mx-auto"></div>
+      <p class="p-5 pb-10 text-xl text-slate-300">Provide the <strong>necessary information</strong> to connect to the device. It needs to be in a <strong>NixOS live environment</strong>.</p>
+      <div class="flex flex-col items-center justify-center">
+        <div class="p-6 space-y-2">
+            <label class="text-sm font-bold text-slate-400 uppercase tracking-widest">Live Target IP Address</label>
+            <input class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40" type="text" placeholder="192.168.1.100">
+        </div>
+        <div class="p-6 space-y-2">
+            <label class="text-sm font-bold text-slate-400 uppercase tracking-widest">Temporary Password</label>
+            <input class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40" type="password" placeholder="••••••••">
+        </div>
+      </div>
+    </div>
+
+    <!-- Footer -->
+    <div class="bg-[#1e293b] border-t bottom-0 w-full rounded-3xl absolute border-slate-700 p-6 flex items-center justify-between">
+      <div x-show="step === 1" class="px-8 py-3"></div>
+      <button @click="goToPrevStep()" x-show="step > 1" class="px-8 py-3 text-slate-400 hover:text-white font-bold transition-all">Back</button>
+      <button @click="goToNextStep()" class="px-10 py-3 bg-fuchsia-600 hover:bg-fuchsia-500 rounded-xl font-bold transition-all shadow-lg shadow-fuchsia-600/20">Continue</button>
+    </div>
+  </div>
+
+</body>
+</html> 
\ No newline at end of file
diff --git a/web/pages/installation.html b/web/pages/installation.html
new file mode 100644
index 0000000..e69de29
diff --git a/web/pages/post-installation.html b/web/pages/post-installation.html
new file mode 100644
index 0000000..e69de29
diff --git a/web/pages/preparation.html b/web/pages/preparation.html
new file mode 100644
index 0000000..e1ae477
--- /dev/null
+++ b/web/pages/preparation.html
@@ -0,0 +1,430 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Numbus Configurator</title>
+    <!-- Tailwind CSS for modern styling -->
+    <script src="https://cdn.tailwindcss.com"></script>
+    <!-- Alpine.js for lightweight reactivity -->
+    <script defer src="https://cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js"></script>
+    <!-- JS-YAML to convert JS objects to YAML strings -->
+    <script src="https://cdnjs.cloudflare.com/ajax/libs/js-yaml/4.1.0/js-yaml.min.js"></script>
+    <!-- Material Design Icons -->
+    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@mdi/font@7.4.47/css/materialdesignicons.min.css">
+    <!-- Favicon -->
+    <link rel="icon" href="../media/favicon.ico" type="image/x-icon">
+</head>
+
+<body x-data="numbusPreparation()" class="p-4 bg-[#0f172a] text-slate-100 min-h-screen font-sans selection:bg-fuchsia-500/30">
+
+  <style>
+    [x-cloak] { display: none !important; }
+  </style>
+
+  <script>
+    function numbusPreparation() {
+      return {
+        step: 1,
+        formData: {
+          1: { language: 'French', country: 'France', timeZone: 'Europe/Paris' },
+          2: { deviceType: '' },
+          3: { deploymentMode: '' },
+          4: { replicationHardware: '', replicationStrategy: '', replicationSecrets: '' },
+          5: { liveIp: '', livePassword: '' },
+        },
+        isStepValid() {
+          const currentStepData = this.formData[this.step];
+          if (!currentStepData) return true;
+          return Object.values(currentStepData).every(value => !!value);
+        },
+        goToPrevStep() {
+          if (this.step === 5 && this.formData[3].deploymentMode === 'interactive') {
+            this.step--;
+          }
+          this.step--;
+        },
+        goToNextStep() {
+          if (this.step === 3 && this.formData[3].deploymentMode === 'interactive') {
+            this.step++;
+          }
+          this.step++;
+        },
+        startDiscovery() {
+          console.log("Discovery started with:", JSON.parse(JSON.stringify(this.formData)));
+          // Add your bridge communication logic here
+        }
+      }
+    }
+  </script>
+
+  <nav class="bg-[#1e293b] border border-slate-700 rounded-2xl relative">
+    <div class="mx-auto relative flex h-16 items-center justify-between">
+      <div class="absolute inset-y-0 left-0 flex items-center">
+        <a href="https://numbus.eu"><img class="w-auto h-10 pr-5 pl-8" src="../media/logo.png" aria-label="The numbus logo"></a>
+        <a class="font-bold text-2xl tracking-tight bg-gradient-to-r from-sky-400 to-fuchsia-500 bg-clip-text text-transparent uppercase" href="https://numbus.eu">NUMBUS</a>
+      </div>
+      <div class="flex flex-1 items-center justify-center">
+        <h1 class="sm:text-2xl sm:pr-20 lg:pr-0 text-xl text-slate-200 font-bold flex items-center">Step 1 - Preparation</h1>
+      </div>
+      <div class="absolute inset-y-0 right-0 flex items-center my-auto">
+        <button  class="h-auto mdi mdi-menu text-slate-100 text-2xl sm:hidden pr-8" aria-label="Menu with links"></button>
+        <button  class="h-auto mdi mdi-brightness-2 text-slate-100 text-2xl hidden sm:block sm:text-3xl pr-5" aria-label="Change theme"></button>
+        <a href="https://gittea.dev/numbus" class="h-auto mdi mdi-source-repository text-slate-100 text-2xl hidden sm:block sm:text-3xl pr-5" aria-label="See the source code on Gitea"></a>
+        <a href="https://gittea.dev/numbus"  class="h-auto mdi mdi-text-box-search text-slate-100 text-2xl hidden sm:block sm:text-3xl pr-8" aria-label="See the full documentation"></a>
+      </div>
+    </div>
+  </nav>
+
+  <div class="pt-10 w-full"></div>
+
+  <!-- Main content -->
+
+  <div class="bg-[#1e293b] border border-slate-700 rounded-3xl h-[calc(100vh-10rem)] max-w-[60vw] mx-auto relative">
+
+    <!-- Step 1: Language & Region -->
+    <div x-show="step === 1" x-cloak class="pl-3 pr-3">
+      <h2 class="p-5 pt-6 text-4xl font-bold text-sky-400">Language</h2>
+      <div class="p-0.5 bg-slate-700 rounded-3xl w-[97%] mx-auto"></div>
+      <p class="p-5 text-xl text-slate-200">Set your regional preferences to ensure <b>correct</b> time and language display.</p>
+      <div class="pl-5 pr-5 pt-10 pb-10 grid grid-cols-2 gap-4">
+        <div class="space-y-2 relative" x-data="{ infoBubbleOpen: false }">
+          <div class="flex items-center gap-2">
+            <label class="text-lg font-semibold text-slate-300">System Language</label>
+            <button class="relative" @mouseenter="infoBubbleOpen = true" @mouseleave="infoBubbleOpen = false">
+              <i class="mdi mdi-information text-lg text-fuchsia-600 cursor-help transition-colors duration-300 hover:text-fuchsia-500"></i>
+              <div 
+              x-show="infoBubbleOpen" 
+              x-transition:enter="transition ease-out duration-150"
+              x-transition:enter-start="opacity-0 scale-90"
+              x-transition:enter-end="opacity-100 scale-100"
+              x-transition:leave="transition ease-in duration-300"
+              x-transition:leave-start="opacity-100 scale-100"
+              x-transition:leave-end="opacity-0 scale-90"
+              x-cloak class="absolute left-full top-1/2 -translate-y-1/2 ml-3 w-80 p-5 bg-slate-800 rounded-xl border border-slate-600 shadow-2xl shadow-slate-900 z-50">
+                <p class="text-slate-200 text-lg italic">Select the primary language for the operating system and management interfaces.</p>
+              </div>
+            </button>
+          </div>
+          <select x-model="formData[1].language" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none transition-all appearance-none cursor-pointer">
+            <option value="FR">French</option>
+            <option value="EN">English</option>
+            <option value="DE">German</option>
+            <option value="IT">Italian</option>
+            <option value="ES">Spanish</option>
+          </select>
+        </div>
+        <div class="space-y-2 relative" x-data="{ infoBubbleOpen: false }">
+          <div class="flex items-center gap-2">
+            <label class="text-lg font-semibold text-slate-300">Country</label>
+            <button class="relative" @mouseenter="infoBubbleOpen = true" @mouseleave="infoBubbleOpen = false">
+              <i class="mdi mdi-information text-lg text-fuchsia-600 cursor-help transition-colors duration-300 hover:text-fuchsia-500"></i>
+              <div 
+              x-show="infoBubbleOpen" 
+              x-transition:enter="transition ease-out duration-150"
+              x-transition:enter-start="opacity-0 scale-90"
+              x-transition:enter-end="opacity-100 scale-100"
+              x-transition:leave="transition ease-in duration-300"
+              x-transition:leave-start="opacity-100 scale-100"
+              x-transition:leave-end="opacity-0 scale-90"
+              x-cloak class="absolute left-full top-1/2 -translate-y-1/2 ml-3 w-80 p-5 bg-slate-800 rounded-xl border border-slate-600 shadow-2xl shadow-slate-900 z-50">
+                <p class="text-slate-200 text-lg italic">Select the country where you are located to help define the device's locale.</p>
+              </div>
+            </button>
+          </div>
+          <select x-model="formData[1].country" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none appearance-none cursor-pointer">
+            <option value="fr_FR">France</option>
+            <option value="de_DE">Germany</option>
+            <option value="it_IT">Italy</option>
+            <option value="en_GB">United Kingdom</option>
+            <option value="en_US">United States</option>
+          </select>
+        </div>
+        <div class="space-y-2 relative" x-data="{ infoBubbleOpen: false }">
+          <div class="flex items-center gap-2">
+            <label class="text-lg font-semibold text-slate-300">Time zone</label>
+            <button class="relative" @mouseenter="infoBubbleOpen = true" @mouseleave="infoBubbleOpen = false">
+              <i class="mdi mdi-information text-lg text-fuchsia-600 cursor-help transition-colors duration-300 hover:text-fuchsia-500"></i>
+              <div
+              x-show="infoBubbleOpen"
+              x-transition:enter="transition ease-out duration-150"
+              x-transition:enter-start="opacity-0 scale-90"
+              x-transition:enter-end="opacity-100 scale-100"
+              x-transition:leave="transition ease-in duration-300"
+              x-transition:leave-start="opacity-100 scale-100"
+              x-transition:leave-end="opacity-0 scale-90"
+              x-cloak class="absolute left-full top-1/2 -translate-y-1/2 ml-3 w-80 p-5 bg-slate-800 rounded-xl border border-slate-600 shadow-2xl shadow-slate-900 z-50">
+                <p class="text-slate-200 text-lg italic">Select the time zone in which the device is located. <br> Don't know your time zone ? Find it at <a target="_blank" href="https://en.wikipedia.org/wiki/List_of_UTC_offsets" class="text-sky-400 underline font-semibold">Wikipedia</a>.</p>
+              </div>
+            </button>
+          </div>
+          <select x-model="formData[1].timeZone" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none appearance-none cursor-pointer">
+            <option value="Europe/Paris">Europe/Paris</option>
+            <option value="Europe/Berlin">Europe/Berlin</option>
+            <option value="Europe/London">Europe/London</option>
+            <option value="America/New_York">America/New_York</option>
+            <option value="America/Los_Angeles">America/Los_Angeles</option>
+            <option value="UTC">UTC</option>
+          </select>
+        </div>
+      </div>
+    </div>
+
+    <!-- Device Type -->
+    <div x-show="step === 2" x-cloak class="pl-3 pr-3">
+      <h2 class="p-5 pt-6 text-4xl font-bold text-sky-400">Device Type</h2>
+      <div class="p-0.5 bg-slate-700 rounded-3xl w-[97%] mx-auto"></div>
+      <p class="p-5 text-xl text-slate-300">Select the <b>device type</b> for your new Numbus machine that matches <b>your needs</b>.</p>
+      <div class="pl-5 pr-5 pt-10 pb-10 grid grid-cols-2 gap-4">
+        <button @click="formData[2].deviceType = 'server'" :class="formData[2].deviceType === 'server' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" class="flex items-center gap-4 p-6 border rounded-2xl transition-all text-left hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
+          <img class="w-12 h-12 flex-shrink-0" src="../media/light/numbus-server-light.svg" alt="Numbus Server icon">
+          <div x-data="{ infoBubbleOpen: false }">
+            <div class="items-center gap-2 flex">
+              <span class="font-bold text-2xl">Numbus Server</span>
+              <span class="relative" @mouseenter="infoBubbleOpen = true" @mouseleave="infoBubbleOpen = false">
+                <i class="mdi mdi-information text-lg text-fuchsia-600 cursor-help transition-colors duration-300 hover:text-fuchsia-500"></i>
+                <div
+                x-show="infoBubbleOpen"
+                x-transition:enter="transition ease-out duration-150"
+                x-transition:enter-start="opacity-0 scale-90"
+                x-transition:enter-end="opacity-100 scale-100"
+                x-transition:leave="transition ease-in duration-300"
+                x-transition:leave-start="opacity-100 scale-100"
+                x-transition:leave-end="opacity-0 scale-90"
+                x-cloak class="absolute left-full top-1/2 -translate-y-1/2 ml-3 w-80 p-5 bg-slate-800 rounded-xl border border-slate-600 shadow-2xl z-50 text-sm leading-relaxed">
+                  <p class="text-slate-300 text-lg italic">A versatile home cloud solution for hosting containers, media, and automated services.</p>
+                </div>
+              </span>
+            </div>
+            <p class="text-sm transition-colors">Your own Cloud at Home.</p>
+          </div>
+        </button>
+        <button @click="formData[2].deviceType = 'backup-server'" :class="formData[2].deviceType === 'backup-server' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" class="flex items-center gap-4 p-6 border rounded-2xl transition-all text-left hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
+          <img class="w-12 h-12 flex-shrink-0" src="../media/light/numbus-backup-server-light.svg" alt="Numbus Backup Server icon">
+          <div x-data="{ infoBubbleOpen: false }">
+            <div class="items-center flex gap-2">
+                <span class="font-bold text-2xl mb-1">Numbus Backup Server</span>
+                <span class="relative" @mouseenter="infoBubbleOpen = true" @mouseleave="infoBubbleOpen = false">
+                  <i class="mdi mdi-information text-lg text-fuchsia-600 cursor-help transition-colors duration-300 hover:text-fuchsia-500"></i>
+                  <div
+                  x-show="infoBubbleOpen"
+                  x-transition:enter="transition ease-out duration-150"
+                  x-transition:enter-start="opacity-0 scale-90"
+                  x-transition:enter-end="opacity-100 scale-100"
+                  x-transition:leave="transition ease-in duration-300"
+                  x-transition:leave-start="opacity-100 scale-100"
+                  x-transition:leave-end="opacity-0 scale-90"
+                  x-cloak class="absolute left-full top-1/2 -translate-y-1/2 ml-3 w-80 p-5 bg-slate-800 rounded-xl border border-slate-600 shadow-2xl z-50 text-sm leading-relaxed">
+                    <p class="text-slate-300 text-lg italic">An all-in-one backup solution for all your Numbus devices, with monitoring tools.</p>
+                  </div>
+                </span>
+              </div>
+            <p class="text-sm transition-colors">Backup all Numbus devices and monitor your servers.</p>
+          </div>
+        </button>
+        <button @click="formData[2].deviceType = 'computer'" :class="formData[2].deviceType === 'computer' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" class="flex items-center gap-4 p-6 border rounded-2xl transition-all text-left hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
+          <img class="w-12 h-12 flex-shrink-0" src="../media/light/numbus-computer-light.svg" alt="Numbus Computer icon">
+          <div x-data="{ infoBubbleOpen: false }">
+            <div class="items-center flex gap-2">
+              <span class="font-bold text-2xl mb-1">Numbus Computer</span>
+              <span class="relative" @mouseenter="infoBubbleOpen = true" @mouseleave="infoBubbleOpen = false">
+                <i class="mdi mdi-information text-lg text-fuchsia-600 cursor-help transition-colors duration-300 hover:text-fuchsia-500"></i>
+                <div
+                x-show="infoBubbleOpen"
+                x-transition:enter="transition ease-out duration-150"
+                x-transition:enter-start="opacity-0 scale-90"
+                x-transition:enter-end="opacity-100 scale-100"
+                x-transition:leave="transition ease-in duration-300"
+                x-transition:leave-start="opacity-100 scale-100"
+                x-transition:leave-end="opacity-0 scale-90"
+                x-cloak class="absolute left-full top-1/2 -translate-y-1/2 ml-3 w-80 p-5 bg-slate-800 rounded-xl border border-slate-600 shadow-2xl z-50 text-sm leading-relaxed">
+                  <p class="text-slate-300 text-lg italic">A polished workstation powered by leading open-source software.</p>
+                </div>
+              </span>
+            </div>
+            <p class="text-sm transition-colors">A workstation powered by leading open-source software.</p>
+          </div>
+        </button>
+        <button @click="formData[2].deviceType = 'tv'" :class="formData[2].deviceType === 'tv' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" class="flex items-center gap-4 p-6 border rounded-2xl transition-all text-left hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
+          <img class="w-12 h-12 flex-shrink-0" src="../media/light/numbus-tv-light.svg" alt="Numbus TV icon">
+          <div x-data="{ infoBubbleOpen: false }">
+            <div class="items-center flex gap-2">
+              <span class="font-bold text-2xl mb-1">Numbus TV</span>
+              <span class="relative" @mouseenter="infoBubbleOpen = true" @mouseleave="infoBubbleOpen = false">
+                <i class="mdi mdi-information text-lg text-fuchsia-600 cursor-help transition-colors duration-300 hover:text-fuchsia-500"></i>
+                <div
+                x-show="infoBubbleOpen"
+                x-transition:enter="transition ease-out duration-150"
+                x-transition:enter-start="opacity-0 scale-90"
+                x-transition:enter-end="opacity-100 scale-100"
+                x-transition:leave="transition ease-in duration-300"
+                x-transition:leave-start="opacity-100 scale-100"
+                x-transition:leave-end="opacity-0 scale-90"
+                x-cloak class="absolute left-full top-1/2 -translate-y-1/2 ml-3 w-80 p-5 bg-slate-800 rounded-xl border border-slate-600 shadow-2xl z-50 text-sm leading-relaxed">
+                  <p class="text-slate-300 text-lg italic">A computer -and all its accompanying advantages- but with a slick, familiar TV interface.</p>
+                </div>
+              </span>
+            </div>
+            <p class="text-sm transition-colors">Your TV, your way. No spying on you.</p>
+          </div>
+        </button>
+      </div>
+    </div>
+
+    <!-- Deployment Mode -->
+    <div x-show="step === 3" x-cloak class="pl-3 pr-3">
+      <h2 class="p-5 pt-6 text-4xl font-bold text-sky-400">Deployment Mode</h2>
+      <div class="p-0.5 bg-slate-700 rounded-3xl w-[97%] mx-auto"></div>
+      <p class="p-5 text-xl text-slate-300">Select your <b>preferred</b> deployment mode. Non-interactive <b>requires</b> a ready-to-go configuration hosted on a <b>git platform</b>.</p>
+      <div class="pl-5 pr-5 pt-10 grid grid-cols-2 gap-4">
+        <button @click="formData[3].deploymentMode = 'interactive'" :class="formData[3].deploymentMode === 'interactive' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" class="flex items-center gap-4 p-6 border rounded-2xl transition-all text-left hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
+          <i class="mdi mdi-gesture-tap text-5xl flex-shrink-0"></i>
+          <div x-data="{ infoBubbleOpen: false }">
+            <div class="items-center flex gap-2">
+              <span class="font-bold text-2xl mb-1">Interactive</span>
+              <span class="relative" @mouseenter="infoBubbleOpen = true" @mouseleave="infoBubbleOpen = false">
+                <i class="mdi mdi-information text-lg text-fuchsia-600 cursor-help transition-colors duration-300 hover:text-fuchsia-500"></i>
+                <div
+                x-show="infoBubbleOpen"
+                x-transition:enter="transition ease-out duration-150"
+                x-transition:enter-start="opacity-0 scale-90"
+                x-transition:enter-end="opacity-100 scale-100"
+                x-transition:leave="transition ease-in duration-300"
+                x-transition:leave-start="opacity-100 scale-100"
+                x-transition:leave-end="opacity-0 scale-90"
+                x-cloak class="absolute left-full top-1/2 -translate-y-1/2 ml-3 w-80 p-5 bg-slate-800 rounded-xl border border-slate-600 shadow-2xl z-50 text-sm leading-relaxed">
+                  <p class="text-slate-300 text-lg italic">If this is your first time setting up the Numbus device you chose, follow this option.</p>
+                </div>
+              </span>
+            </div>
+            <p class="text-sm transition-colors">We will guide you through the setup process.</p>
+          </div>
+        </button>
+        <button @click="formData[3].deploymentMode = 'non-interactive'" :class="formData[3].deploymentMode === 'non-interactive' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" class="flex items-center gap-4 p-6 border rounded-2xl transition-all text-left hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
+          <i class="mdi mdi-cog-clockwise text-5xl flex-shrink-0"></i>
+          <div x-data="{ infoBubbleOpen: false }">
+            <div class="items-center flex gap-2">
+              <span class="font-bold text-2xl mb-1">Non-interactive</span>
+              <span class="relative" @mouseenter="infoBubbleOpen = true" @mouseleave="infoBubbleOpen = false">
+                <i class="mdi mdi-information text-lg text-fuchsia-600 cursor-help transition-colors duration-300 hover:text-fuchsia-500"></i>
+                <div
+                x-show="infoBubbleOpen"
+                x-transition:enter="transition ease-out duration-150"
+                x-transition:enter-start="opacity-0 scale-90"
+                x-transition:enter-end="opacity-100 scale-100"
+                x-transition:leave="transition ease-in duration-300"
+                x-transition:leave-start="opacity-100 scale-100"
+                x-transition:leave-end="opacity-0 scale-90"
+                x-cloak class="absolute left-full top-1/2 -translate-y-1/2 ml-3 w-80 p-5 bg-slate-800 rounded-xl border border-slate-600 shadow-2xl z-50 text-sm leading-relaxed">
+                  <p class="text-slate-300 text-lg italic">This option is used for mass devices deployments. It requires a first run in interactive mode.</p>
+                </div>
+              </span>
+            </div>
+            <p class="text-sm transition-colors">You already have a ready-to-go configuration.</p>
+          </div>
+        </button>
+      </div>
+    </div>
+
+    <!-- Replication Mode -->
+    <div class="max-h-[calc(100vh-17rem)] overflow-y-auto" x-show="step === 4" x-cloak class="pl-3 pr-3">
+      <h2 class="p-5 pt-6 text-4xl font-bold text-sky-400">Replication Mode</h2>
+      <div class="p-0.5 bg-slate-700 rounded-3xl w-[97%] mx-auto"></div>
+      <p class="p-5 text-xl text-slate-300">Select your <b>preferred</b> replication mode. It compares the current deployment to the old one.</p>
+      <h3 class="text-xl font-semibold text-slate-300 text-center pb-3">Hardware</h3>
+      <div class="pl-5 pr-5 grid grid-cols-2 gap-4">
+        <button @click="formData[4].replicationHardware = 'exact_same'" :class="formData[4].replicationHardware === 'exact_same' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" class="flex items-center gap-4 p-6 border rounded-2xl transition-all text-left hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
+          <i class="mdi mdi-check-network text-5xl flex-shrink-0"></i>
+          <div>
+            <span class="font-bold text-2xl mb-1">Same hardware</span>
+            <p class="text-sm transition-colors">The hardware listed in the configuration is exactly the same as the hardware on the machine you want to deploy.</p>
+          </div>
+        </button>
+        <button @click="formData[4].replicationHardware = 'different'" :class="formData[4].replicationHardware === 'different' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" class="flex items-center gap-4 p-6 border rounded-2xl transition-all text-left hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
+          <i class="mdi mdi-close-network text-5xl flex-shrink-0"></i>
+          <div>
+            <span class="font-bold text-2xl mb-1">Different hardware</span>
+            <p class="text-sm transition-colors">The hardware listed in the configuration is different compared to the hardware on the machine you want to deploy.</p>
+          </div>
+        </button>
+      </div>
+      <h3 class="text-xl font-semibold text-center text-slate-300 pb-3 pt-5">Strategy</h3>
+      <div class="pl-5 pr-5 grid grid-cols-2 gap-4">
+        <button @click="formData[4].replicationStrategy = 'exact_same'" :class="formData[4].replicationStrategy === 'exact_same' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" class="flex items-center gap-4 p-6 border rounded-2xl transition-all text-left hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
+          <i class="mdi mdi-file-check text-5xl flex-shrink-0"></i>
+          <div>
+            <span class="font-bold text-2xl mb-1">Same configuration</span>
+            <p class="text-sm transition-colors">Re-deploy the exact same configuration.</p>
+          </div>
+        </button>
+        <button @click="formData[4].replicationStrategy = 'with_tweaks'" :class="formData[4].replicationStrategy=== 'with_tweaks' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" class="flex items-center gap-4 p-6 border rounded-2xl transition-all text-left hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
+          <i class="mdi mdi-file-cog text-5xl flex-shrink-0"></i>
+          <div>
+            <span class="font-bold text-2xl mb-1">With tweaks</span>
+            <p class="text-sm transition-colors">Use the configuration as a base and tweak the desired settings.</p>
+          </div>
+        </button>
+      </div>
+      <h3 class="text-xl font-semibold text-center text-slate-300 pt-5 pb-3">Secrets</h3>
+      <div class="pl-5 pr-5 grid grid-cols-2 gap-4">
+        <button @click="formData[4].replicationSecrets = 'exact_same'" :class="formData[4].replicationSecrets === 'exact_same' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" class="flex items-center gap-4 p-6 border rounded-2xl transition-all text-left hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
+          <i class="mdi mdi-key-star text-5xl flex-shrink-0"></i>
+          <div>
+            <span class="font-bold text-2xl mb-1">Same secrets</span>
+            <p class="text-sm transition-colors">Re-use the secrets in the repository.</p>
+          </div>
+        </button>
+        <button @click="formData[4].replicationSecrets = 'regenerate'" :class="formData[4].replicationSecrets === 'regenerate' ? 'bg-fuchsia-600/20 border-fuchsia-500' : 'bg-slate-900 border-slate-700'" class="flex items-center gap-4 p-6 border rounded-2xl transition-all text-left hover:bg-fuchsia-600/20 hover:border-fuchsia-500">
+          <i class="mdi mdi-key-remove text-5xl flex-shrink-0"></i>
+          <div>
+            <span class="font-bold text-2xl mb-1">New secrets</span>
+            <p class="text-sm transition-colors">Provide and auto-generate new secrets.</p>
+          </div>
+        </button>
+      </div>
+    </div>
+
+    <!-- Live Setup -->
+    <div x-show="step === 5" x-cloak class="pl-3 pr-3">
+      <h2 class="p-5 pt-6 text-4xl font-bold text-sky-400">Live Setup</h2>
+      <div class="p-0.5 bg-slate-700 rounded-3xl w-[97%] mx-auto"></div>
+      <p class="p-5 pb-10 text-xl text-slate-300">Provide the <b>necessary information</b> to connect to the device. It needs to be in a <b>NixOS live environment</b>.</p>
+      <div class="flex flex-col items-center justify-center">
+        <div class="p-6 space-y-2">
+            <span class="text-base font-bold text-center text-slate-300 uppercase">Live Target IP Address</span>
+            <input x-model="formData[5].liveIp" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40" type="text" placeholder="192.168.1.100">
+        </div>
+        <div class="p-6 space-y-2">
+            <span class="text-base font-bold text-center text-slate-300 uppercase">Temporary Password</span>
+            <input x-model="formData[5].livePassword" class="w-full bg-slate-900 border border-slate-700 rounded-xl p-4 focus:ring-2 focus:ring-fuchsia-500 outline-none placeholder:text-slate-500/40" type="password" placeholder="••••••••">
+        </div>
+      </div>
+    </div>
+
+    <!-- Footer -->
+    <div class="bg-[#1e293b] border-t bottom-0 w-full rounded-3xl absolute border-slate-700 p-6 flex items-center justify-between">
+      <div x-show="step === 1" class="px-8 py-3"></div>
+      <button @click="goToPrevStep()" x-show="step > 1" x-cloak class="px-8 py-3 text-slate-400 font-bold rounded-xl hover:text-white transition-colors duration-200">Back</button>
+
+      <button @click="goToNextStep()" 
+              x-show="step != 5" 
+              :disabled="!isStepValid()"
+              class="px-10 py-3 text-white font-bold rounded-xl scale-100 transition duration-200 ease-in bg-gradient-to-r from-fuchsia-500 via-fuchsia-600 to-fuchsia-700 hover:scale-105 hover:bg-gradient-to-br shadow-lg shadow-fuchsia-500/30 dark:shadow-lg dark:shadow-fuchsia-800/80 disabled:opacity-50 disabled:cursor-not-allowed disabled:hover:scale-100">Continue</button>
+
+      <button 
+      @click="startDiscovery()" 
+      x-show="step === 5"
+      x-cloak
+      :disabled="!isStepValid()"
+      class="px-10 py-3 text-white font-bold rounded-xl scale-100 transition duration-200 ease-in bg-gradient-to-r from-fuchsia-500 via-fuchsia-600 to-fuchsia-700 hover:scale-105 hover:bg-gradient-to-br shadow-lg shadow-fuchsia-500/30 dark:shadow-lg dark:shadow-fuchsia-800/80 disabled:opacity-50 disabled:cursor-not-allowed disabled:hover:scale-100">Start Discovery
+      <svg aria-hidden="true" class="w-4 h-4 text-neutral-tertiary animate-spin fill-brand me-2" viewBox="0 0 100 101" fill="none" xmlns="http://www.w3.org/2000/svg">
+          <path d="M100 50.5908C100 78.2051 77.6142 100.591 50 100.591C22.3858 100.591 0 78.2051 0 50.5908C0 22.9766 22.3858 0.59082 50 0.59082C77.6142 0.59082 100 22.9766 100 50.5908ZM9.08144 50.5908C9.08144 73.1895 27.4013 91.5094 50 91.5094C72.5987 91.5094 90.9186 73.1895 90.9186 50.5908C90.9186 27.9921 72.5987 9.67226 50 9.67226C27.4013 9.67226 9.08144 27.9921 9.08144 50.5908Z" fill="currentColor"/>
+          <path d="M93.9676 39.0409C96.393 38.4038 97.8624 35.9116 97.0079 33.5539C95.2932 28.8227 92.871 24.3692 89.8167 20.348C85.8452 15.1192 80.8826 10.7238 75.2124 7.41289C69.5422 4.10194 63.2754 1.94025 56.7698 1.05124C51.7666 0.367541 46.6976 0.446843 41.7345 1.27873C39.2613 1.69328 37.813 4.19778 38.4501 6.62326C39.0873 9.04874 41.5694 10.4717 44.0505 10.1071C47.8511 9.54855 51.7191 9.52689 55.5402 10.0491C60.8642 10.7766 65.9928 12.5457 70.6331 15.2552C75.2735 17.9648 79.3347 21.5619 82.5849 25.841C84.9175 28.9121 86.7997 32.2913 88.1811 35.8758C89.083 38.2158 91.5421 39.6781 93.9676 39.0409Z" fill="currentFill"/>
+      </svg>
+    </button>
+    </div>
+
+  </div>
+
+</body>
+</html> 
\ No newline at end of file

From 68beaebbdfb16b01169f71895c1ae071bc19f767 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Sun, 26 Apr 2026 10:42:00 +0200
Subject: [PATCH 32/43] Credentials test.

---
 deploy.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/deploy.sh b/deploy.sh
index cb64a3d..b13f656 100755
--- a/deploy.sh
+++ b/deploy.sh
@@ -70,7 +70,7 @@ hierarchy_preparation() {
   fi
   mkdir -${MKDIR_FLAGS} to-keep-preciously/
 }
-
+test
 setup_ssh() {
   echod "\n ✅ Generating new SSH key for numbus-admin..."
 

From f4d424e99899353378144bfb9f2a9e28038dcbf2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Sun, 26 Apr 2026 10:42:24 +0200
Subject: [PATCH 33/43] Credentials test.

---
 deploy.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/deploy.sh b/deploy.sh
index b13f656..cb64a3d 100755
--- a/deploy.sh
+++ b/deploy.sh
@@ -70,7 +70,7 @@ hierarchy_preparation() {
   fi
   mkdir -${MKDIR_FLAGS} to-keep-preciously/
 }
-test
+
 setup_ssh() {
   echod "\n ✅ Generating new SSH key for numbus-admin..."
 

From 640b183ed247836498c18b1622dcfbeaba108383 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Sun, 26 Apr 2026 11:08:46 +0200
Subject: [PATCH 34/43] Added a compatibility check

---
 deploy.sh | 63 ++++++++++++++++++++++++++++++++++++++++++++-----------
 1 file changed, 51 insertions(+), 12 deletions(-)

diff --git a/deploy.sh b/deploy.sh
index cb64a3d..2361e15 100755
--- a/deploy.sh
+++ b/deploy.sh
@@ -1,6 +1,17 @@
 #!/usr/bin/env nix-shell
 #!nix-shell -i bash -p bash nano coreutils gnused gum fastfetch xkcdpass sops ssh-to-age age sshpass envsubst pciutils usbutils mosquitto curl jq yq python3
 
+
+
+# --- MAIN FUNCTIONS LOGIC --->
+echod() {
+  MESSAGE=${1}
+
+  if [[ ${DEBUG} -eq 1 ]]; then
+    echo -e ${MESSAGE}
+  fi
+}
+
 cleanup() {
   rm -${DIR_RM_FLAGS} /run/numbus/logs
   rm -${DIR_RM_FLAGS} /run/numbus/web
@@ -9,13 +20,38 @@ cleanup() {
   kill ${BRIDGE_PID}
 }
 
+compatibility_check() {
+  TEST_FAIL=0
+
+  if [[ -r /etc/os-release && grep -qi '^ID=nixos\b' /etc/os-release ]]; then
+    echod "\n ✅ NixOS system detected."
+  else
+    ((TEST_FAIL++))
+    echo "\n ❌ You are not on a NixOS based system. This is required to continue."
+  fi
+
+  if [[ "$(uname -m)" != "x86_64" ]]; then
+    echod "\n ✅ x86_64 system detected."
+  else
+    ((TEST_FAIL++))
+    echo "\n ❌ You are not on a x86_64 based system. This is required to continue."
+  fi
+
+  if [[ ${TEST_FAIL} -gt 0 ]]; then
+    COMPATIBILITY_OVERRIDE=$(gum choose --header "Some compatibility checks failed. The installation will very likely fail. Continue ?" \
+    "No" \
+    "Yes, I know what I am doing")
+    [[ "${COMPATIBILITY_OVERRIDE}" == "No" ]] && exit 1
+  fi
+}
+
 launch_configurator() {
   echo -e "\n 🚀 Launching Numbus Configurator..."
   python3 "${BRIDGE_SCRIPT}" > /dev/null 2>&1 &
   export BRIDGE_PID=$!
 
-  echo -e "\n ➡️  Open your browser at: $(gum style --foreground 212 "http://localhost:${PORT}")"
-  xdg-open "http://localhost:${PORT}" 2>/dev/null || open "http://localhost:${PORT}" 2>/dev/null || true
+  echo -e "\n ➡️  Open your browser at: $(gum style --foreground 212 "http://localhost:${WEBSERVER_PORT}")"
+  xdg-open "http://localhost:${WEBSERVER_PORT}" 2>/dev/null || open "http://localhost:${WEBSERVER_PORT}" 2>/dev/null || true
 }
 
 preparation() {
@@ -41,7 +77,7 @@ preparation() {
     echo -e "\n Is this URL correct [y/n] ? ${IMPORTED_CONFIG_URL}"
     read URL
 
-    if [[ "${URL^^}" == "N" ]];
+    if [[ "${URL^^}" == "N" ]]; then
       git_url
     fi
 
@@ -798,14 +834,9 @@ nix_update() {
   nixos-rebuild --target-host numbus-admin@${LIVE_TARGET_IP} \
     --use-remote-sudo switch --flake ${EXTRA_FILES_PATH}/etc/nixos#numbus-server
 }
+# --- MAIN FUNCTIONS LOGIC ---<
 
-echod() {
-  MESSAGE=${1}
 
-  if [[ ${DEBUG} -eq 1 ]]; then
-    echo -e ${MESSAGE}
-  fi
-}
 
 # --- DEFAULTS --->
 WEBSERVER_PORT=${WEBSERVER_PORT:-8088}
@@ -836,13 +867,19 @@ else
 fi
 # --- DEFAULTS ---<
 
-# --- MAIN PART ---
-set -euo pipefail
 
+
+# --- PRE MAIN LOGIC --->
+set -euo pipefail
 clear
 
+compatibility_check
 trap cleanup EXIT
+# --- PRE MAIN LOGIC ---<
 
+
+
+# --- MAIN LOGIC --->
 echo """
    _  ____  ____  ______  __  ______
   / |/ / / / /  |/  / _ )/ / / / __/
@@ -853,7 +890,7 @@ echo """
 
 DEPLOY_MODE=$(gum choose --header "Choose your preferred configuration interface :" "Through my browser (Recommended for beginners)" "Through my terminal (TUI)")
 
-if [[ "$DEPLOY_MODE" == "Through my terminal" ]]; then
+if [[ "$DEPLOY_MODE" == "Through my terminal (TUI)" ]]; then
   preparation
   hierarchy_preparation
   setup_ssh
@@ -881,6 +918,8 @@ else
 
 fi
 
+# --- MAIN LOGIC ---<
+
 
 # 3. Load Credentials and run Discovery
 

From d0ba62cb9de9c753c2b6916cf1f1d3e3898b8a55 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Sun, 26 Apr 2026 11:09:48 +0200
Subject: [PATCH 35/43] Fixed bad syntax.

---
 deploy.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/deploy.sh b/deploy.sh
index 2361e15..9cd3c57 100755
--- a/deploy.sh
+++ b/deploy.sh
@@ -23,7 +23,7 @@ cleanup() {
 compatibility_check() {
   TEST_FAIL=0
 
-  if [[ -r /etc/os-release && grep -qi '^ID=nixos\b' /etc/os-release ]]; then
+  if [[ -r /etc/os-release && $(grep -qi '^ID=nixos\b' /etc/os-release) ]]; then
     echod "\n ✅ NixOS system detected."
   else
     ((TEST_FAIL++))

From e3550acc108142b3ce5ef0a5492449b22bc56be1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Sun, 26 Apr 2026 11:15:42 +0200
Subject: [PATCH 36/43] Fixed bad syntax.

---
 deploy.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/deploy.sh b/deploy.sh
index 9cd3c57..6695139 100755
--- a/deploy.sh
+++ b/deploy.sh
@@ -23,7 +23,7 @@ cleanup() {
 compatibility_check() {
   TEST_FAIL=0
 
-  if [[ -r /etc/os-release && $(grep -qi '^ID=nixos\b' /etc/os-release) ]]; then
+  if [[ -r /etc/os-release ]] && grep -qi '^ID=nixos\b' /etc/os-release; then
     echod "\n ✅ NixOS system detected."
   else
     ((TEST_FAIL++))

From 5edabe57fb02cab9618aa50a07b69f52af73f208 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Sun, 26 Apr 2026 11:17:36 +0200
Subject: [PATCH 37/43] Fixed inverted logic.

---
 deploy.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/deploy.sh b/deploy.sh
index 6695139..df9707e 100755
--- a/deploy.sh
+++ b/deploy.sh
@@ -30,7 +30,7 @@ compatibility_check() {
     echo "\n ❌ You are not on a NixOS based system. This is required to continue."
   fi
 
-  if [[ "$(uname -m)" != "x86_64" ]]; then
+  if [[ "$(uname -m)" == "x86_64" ]]; then
     echod "\n ✅ x86_64 system detected."
   else
     ((TEST_FAIL++))

From 0f4f203fa37d3aefae456069ae00708d845b8d72 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Sun, 26 Apr 2026 11:20:26 +0200
Subject: [PATCH 38/43] Fixed increment logic.

---
 deploy.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/deploy.sh b/deploy.sh
index df9707e..74c984a 100755
--- a/deploy.sh
+++ b/deploy.sh
@@ -26,14 +26,14 @@ compatibility_check() {
   if [[ -r /etc/os-release ]] && grep -qi '^ID=nixos\b' /etc/os-release; then
     echod "\n ✅ NixOS system detected."
   else
-    ((TEST_FAIL++))
+    TEST_FAIL=$((TEST_FAIL + 1))
     echo "\n ❌ You are not on a NixOS based system. This is required to continue."
   fi
 
   if [[ "$(uname -m)" == "x86_64" ]]; then
     echod "\n ✅ x86_64 system detected."
   else
-    ((TEST_FAIL++))
+    TEST_FAIL=$((TEST_FAIL + 1))
     echo "\n ❌ You are not on a x86_64 based system. This is required to continue."
   fi
 

From 267af96309ec027251e195a98a8a04623ff22b8d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Sun, 26 Apr 2026 11:26:47 +0200
Subject: [PATCH 39/43] Finalized the compatibility check function.

---
 deploy.sh | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/deploy.sh b/deploy.sh
index 74c984a..985f17d 100755
--- a/deploy.sh
+++ b/deploy.sh
@@ -13,6 +13,8 @@ echod() {
 }
 
 cleanup() {
+  echo -e "\n ✅ Cleaning up..."
+
   rm -${DIR_RM_FLAGS} /run/numbus/logs
   rm -${DIR_RM_FLAGS} /run/numbus/web
   rm -${DIR_RM_FLAGS} /run/numbus/config
@@ -27,14 +29,14 @@ compatibility_check() {
     echod "\n ✅ NixOS system detected."
   else
     TEST_FAIL=$((TEST_FAIL + 1))
-    echo "\n ❌ You are not on a NixOS based system. This is required to continue."
+    echo -e "\n ❌ You are not on a NixOS based system. This is required to continue."
   fi
 
   if [[ "$(uname -m)" == "x86_64" ]]; then
     echod "\n ✅ x86_64 system detected."
   else
     TEST_FAIL=$((TEST_FAIL + 1))
-    echo "\n ❌ You are not on a x86_64 based system. This is required to continue."
+    echo -e "\n ❌ You are not on a x86_64 based system. This is required to continue."
   fi
 
   if [[ ${TEST_FAIL} -gt 0 ]]; then
@@ -42,7 +44,10 @@ compatibility_check() {
     "No" \
     "Yes, I know what I am doing")
     [[ "${COMPATIBILITY_OVERRIDE}" == "No" ]] && exit 1
+    [[ "${COMPATIBILITY_OVERRIDE}" != "No" ]] && echo -e "\n ⚠️ Continuing anyways, this is not supported by Numbus."
   fi
+
+  return 0
 }
 
 launch_configurator() {
@@ -873,8 +878,8 @@ fi
 set -euo pipefail
 clear
 
-compatibility_check
 trap cleanup EXIT
+compatibility_check
 # --- PRE MAIN LOGIC ---<
 
 

From baa6bdd28b83f8c14fc99e2799b9d2b3d454166d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Sun, 26 Apr 2026 22:20:28 +0200
Subject: [PATCH 40/43] Added Users & Groups logic : big revamp needed (AI
 draft)

---
 deploy.sh | 742 ++++++++++++++++++++++++++++++++++++++++++++++--------
 1 file changed, 636 insertions(+), 106 deletions(-)

diff --git a/deploy.sh b/deploy.sh
index 985f17d..87562af 100755
--- a/deploy.sh
+++ b/deploy.sh
@@ -3,7 +3,7 @@
 
 
 
-# --- MAIN FUNCTIONS LOGIC --->
+# --- UTILITY FUNCTIONS --->
 echod() {
   MESSAGE=${1}
 
@@ -12,14 +12,55 @@ echod() {
   fi
 }
 
+ssh_to_host() {
+  local COMMAND="${1}"
+  ssh -i "${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}" "${COMMAND}"
+}
+
+user_input() {
+  local VAR_NAME="${1}"
+  local HEADER="${2}"
+  local PLACEHOLDER="${3}"
+  local REGEX="${4}"
+  local ERROR_MSG="${5}"
+  local SENSITIVE="${6:-false}"
+
+  echo ""
+  gum style --foreground 212 --bold "${HEADER}"
+
+  while true; do
+    [[ "$SENSITIVE" == "false" ]] && INPUT_VALUE=$(gum input --placeholder "${PLACEHOLDER}")
+    [[ "$SENSITIVE" == "true" ]] && INPUT_VALUE=$(gum input --password --placeholder "${PLACEHOLDER}")
+
+    if [[ -z "${INPUT_VALUE}" ]]; then
+      echo "❌ Error: Input cannot be empty. Please provide the necessary information."
+      continue
+    fi
+
+    if [[ -n "${REGEX}" ]]; then
+      if [[ ! "${INPUT_VALUE}" =~ ${REGEX} ]]; then
+        echo "❌ Error: ${ERROR_MSG}"
+        continue
+      fi
+    fi
+
+    export "${VAR_NAME}"="${INPUT_VALUE}"
+    break
+  done
+}
+# --- UTILITY FUNCTIONS ---<
+
+
+
+# --- GLOBAL FUNCTIONS --->
 cleanup() {
   echo -e "\n ✅ Cleaning up..."
 
-  rm -${DIR_RM_FLAGS} /run/numbus/logs
-  rm -${DIR_RM_FLAGS} /run/numbus/web
-  rm -${DIR_RM_FLAGS} /run/numbus/config
+  rm -${DIR_RM_FLAGS} ${TMP_FILES_PATH}/
 
-  kill ${BRIDGE_PID}
+  if [[ ${WEB_MODE} -eq 1 && -n "${BRIDGE_PID:-}" ]]; then
+    kill ${BRIDGE_PID}
+  fi
 }
 
 compatibility_check() {
@@ -50,46 +91,6 @@ compatibility_check() {
   return 0
 }
 
-launch_configurator() {
-  echo -e "\n 🚀 Launching Numbus Configurator..."
-  python3 "${BRIDGE_SCRIPT}" > /dev/null 2>&1 &
-  export BRIDGE_PID=$!
-
-  echo -e "\n ➡️  Open your browser at: $(gum style --foreground 212 "http://localhost:${WEBSERVER_PORT}")"
-  xdg-open "http://localhost:${WEBSERVER_PORT}" 2>/dev/null || open "http://localhost:${WEBSERVER_PORT}" 2>/dev/null || true
-}
-
-preparation() {
-  SELECTED_DEVICE_TYPE=$(gum choose --header "Choose the device you want to deploy :" \
-  "Numbus Server : Professional-grade hosting, strictly kept under your roof." \
-  "Numbus Backup Server : Automated, high-efficiency protection for your entire ecosystem." \
-  "Numbus Computer : A modern, privacy-respecting machine built for work, creation, and play — without the corporate bloat." \
-  "Numbus TV : A premium cinematic experience free from trackers and forced subscriptions.")
-
-  SELECTED_DEPLOYMENT_MODE=$(gum choose --header "Choose your preferred deployment mode :" \
-  "Interactive : You don't already have a configuration." \
-  "Non-interactive : You have a valid configuration hosted on a Git platform.")
-
-  git_url() {
-    IMPORTED_CONFIG_URL=$(gum input --placeholder "https://yourgitplatform.tld/your-user/repo-containing-the-configuration" --header "Please provide the URL to the git repository containing your configuration :")
-  }
-
-  git_url
-
-  until git clone "${IMPORTED_CONFIG_URL}" imported_configuration; do
-    echo -e "\n ⚠️ This did not work correctly."
-
-    echo -e "\n Is this URL correct [y/n] ? ${IMPORTED_CONFIG_URL}"
-    read URL
-
-    if [[ "${URL^^}" == "N" ]]; then
-      git_url
-    fi
-
-    echo -e "\n You will be prompted for your credentials again. Make sure that they are correct."
-  done
-}
-
 hierarchy_preparation() {
   echod "\n 🔄 Preparing the folder hierarchy for the final configuration..."
 
@@ -101,44 +102,25 @@ hierarchy_preparation() {
     echo " ✅ Your files have been moved to the ${OLD_CONFIG_PATH} directory. You can retrieve them there if needed."
   fi
 
+  # Script folders
+  mkdir -${MKDIR_FLAGS} ${TMP_FILES_PATH}/config
+  mkdir -${MKDIR_FLAGS} ${TMP_FILES_PATH}/logs
+  mkdir -${MKDIR_FLAGS} ${TMP_FILES_PATH}/tmp
+  [[ ${WEB_MODE} -eq 1 ]] && mkdir -${MKDIR_FLAGS} ${TMP_FILES_PATH}/web
+
   # Secrets
   mkdir -${MKDIR_FLAGS} ${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/
   mkdir -${MKDIR_FLAGS} ${EXTRA_FILES_PATH}/var/lib/sops-nix/
   mkdir -${MKDIR_FLAGS} ${EXTRA_FILES_PATH}/etc/nixos/secrets/disks
-  if [[ "${SELECTED_DEVICE_TYPE}" == "" ]]; then
+  mkdir -${MKDIR_FLAGS} ${EXTRA_FILES_PATH}/etc/nixos/secrets/system
+  if [[ "${DEVICE_TYPE}" == "server" || "${DEVICE_TYPE}" == "backup" ]]; then
     mkdir -${MKDIR_FLAGS} ${EXTRA_FILES_PATH}/etc/nixos/secrets/podman
-    mkdir -${MKDIR_FLAGS} ${EXTRA_FILES_PATH}/etc/nixos/secrets/system
-  fi
-  mkdir -${MKDIR_FLAGS} to-keep-preciously/
-}
-
-setup_ssh() {
-  echod "\n ✅ Generating new SSH key for numbus-admin..."
-
-  chmod 700 ${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/
-  ssh-keygen -t "ed25519" -C "numbus-admin@numbus-server" -f "${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/id_ed25519" -N "" -q
-
-  if [[ ${DEBUG} -eq 1 ]]; then
-  echo -e "\n ➡️  Copying SSH key to target host '${TARGET_USER}@${LIVE_TARGET_IP}'..."
   fi
 
-  if sshpass -p "${LIVE_TARGET_PASSWD}" ssh-copy-id -o StrictHostKeyChecking=no -i "${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}"; then
-    if [[ ${DEBUG} -eq 1 ]]; then
-    echo -e "\n ✅ SSH key copied successfully"
-    fi
-  else
-    echo -e "\n ❌ Failed to copy SSH key. Please check the host IP and password."
-    exit 1
-  fi
-}
-
-ssh_to_host() {
-  local COMMAND="${1}"
-  ssh -i "${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}" "${COMMAND}"
+  echod "\n ✅ Folder hierarchy ready"
 }
 
 hardware_detection() {
-	### --> Get hardware information
 	local TMPFILE="/tmp/nixos-installation-hw-detection"
 
 	ssh_to_host 'bash -s' << SSHEND
@@ -191,7 +173,7 @@ for DISK in \$(lsblk -x SIZE -d -n -e 7,11 -o NAME); do
   fi
 
   # Disk health
-  if [[ \$(echo "${LIVE_TARGET_PASSWD}" | sudo -S smartctl -H /dev/\$DISK 2>/dev/null | grep 'self-assessment' | awk '{print \$6}') == "PASSED" ]]; then
+  if [[ \$(echo "${LIVE_TARGET_PASSWORD}" | sudo -S smartctl -H /dev/\$DISK 2>/dev/null | grep 'self-assessment' | awk '{print \$6}') == "PASSED" ]]; then
     DISK_HEALTH+=("PASSED")
   else
     DISK_HEALTH+=("N/A")
@@ -225,19 +207,15 @@ for var in \
   declare -p \${var} | sed 's/^declare /declare -g /' >> "${TMPFILE}"
 done
 SSHEND
-  ### Get hardware information <--
 
   scp -i "${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}":"${TMPFILE}" "${TMPFILE}" &> /dev/null
   source "${TMPFILE}"
 
-  ### Transform the bash variables into JSON -->
-  # We prepare the disk data as a flat array to pass to jq
   local DISK_FLAT_ARRAY=()
   for i in "${!DISK_NAME[@]}"; do
     DISK_FLAT_ARRAY+=("${DISK_NAME[$i]}" "${DISK_DEVPATH[$i]}" "${DISK_TYPE[$i]}" "${DISK_HEALTH[$i]}" "${DISK_ID[$i]}" "${DISK_SIZE[$i]}")
   done
 
-  # Generate the JSON file for the configurator
   jq -n \
     --argjson graphics_enabled "${TARGET_GRAPHICS:-false}" \
     --argjson graphics_renderer "${TARGET_GRAPHICS_RENDERER:-false}" \
@@ -261,16 +239,154 @@ SSHEND
         }
       ]
     }' --args "${DISK_FLAT_ARRAY[@]:-}" > ${HARDWARE_DATA_PATH}
-  ### Transform the bash variables into JSON <--
 
-  ### --> Generate hardware-configuration.nix
   if ssh_to_host "sudo nixos-generate-config --no-filesystems --show-hardware-config" > ${EXTRA_FILES_PATH}/etc/nixos/hardware-configuration.nix; then
     echo -e "\n✅ Hardware configuration generated"
   else
     echo -e "\n❌ Failed to generate hardware configuration"
     exit 1
   fi
-  ### Generate hardware-configuration.nix <--
+}
+# --- GLOBAL FUNCTIONS ---<
+
+
+
+# --- MAIN WEB FUNCTIONS --->
+launch_configurator() {
+  echo -e "\n 🚀 Launching Numbus Configurator..."
+  python3 "${BRIDGE_SCRIPT}" > /dev/null 2>&1 &
+  export BRIDGE_PID=$!
+
+  echo -e "\n ➡️  Open your browser at: $(gum style --foreground 212 "http://localhost:${WEBSERVER_PORT}")"
+  xdg-open "http://localhost:${WEBSERVER_PORT}" 2>/dev/null || open "http://localhost:${WEBSERVER_PORT}" 2>/dev/null || true
+}
+# --- MAIN WEB FUNCTIONS ---<
+
+
+
+# --- MAIN TUI FUNCTIONS --->
+preparation() {
+  echo -e "\n ➡️  This script will now guide you through the configuration and gather the necessary information."
+
+  echo ""
+  RAW_DEVICE_TYPE=$(gum choose --header "Choose the device you want to deploy :" \
+  "Numbus Server : Professional-grade hosting, strictly kept under your roof." \
+  "Numbus Backup Server : Automated, high-efficiency protection for your entire ecosystem." \
+  "Numbus Computer : A modern, privacy-respecting machine built for work, creation, and play — without the corporate bloat." \
+  "Numbus TV : A premium cinematic experience free from trackers and forced subscriptions.")
+
+  case "${RAW_DEVICE_TYPE}" in
+    "Numbus Server : "* ) DEVICE_TYPE="server" ;;
+    "Numbus Backup Server : "* ) DEVICE_TYPE="backup" ;;
+    "Numbus Computer : "* ) DEVICE_TYPE="computer" ;;
+    "Numbus TV : "* ) DEVICE_TYPE="tv" ;;
+  esac
+
+  RAW_DEPLOYMENT_MODE=$(gum choose --header "Choose your preferred deployment mode :" \
+  "Interactive : You don't already have a configuration." \
+  "Non-interactive : You have a valid configuration hosted on a Git platform.")
+
+  case "${RAW_DEPLOYMENT_MODE}" in
+    "Interactive : "* ) DEPLOYMENT_MODE="interactive" ;;
+    "Non-interactive : "* ) DEPLOYMENT_MODE="non-interactive" ;;
+  esac
+
+  if [[ "${DEPLOYMENT_MODE}" == "non-interactive" ]]; then
+    git_url() {
+      IMPORTED_CONFIG_URL=$(gum input --placeholder "https://yourgitplatform.tld/your-user/repo-containing-the-configuration" --header "Please provide the URL to the git repository containing your configuration :")
+    }
+
+    git_url
+
+    until git clone "${IMPORTED_CONFIG_URL}" imported_configuration; do
+      echo -e "\n ⚠️ This did not work correctly."
+
+      echo -e "\n Is this URL correct [y/n] ? ${IMPORTED_CONFIG_URL}"
+      read URL
+
+      if [[ "${URL^^}" == "N" ]]; then
+        git_url
+      fi
+
+      echo -e "\n You will be prompted for your credentials again. Make sure that they are correct."
+    done
+  fi
+
+  echo ""
+  gum format -- \
+  "➡️  To continue, you need to start the target device in a NixOS live environment :
+  1. Download the NixOS iso from the **[official website](https://nixos.org/download/)**.
+  2. Flash it to a USB stick. (use a flashing tool like **[Rufus](https://rufus.ie/en/#download)**, **[BalenaEtcher](https://etcher.balena.io/#download-etcher)**, **[Impression](https://flathub.org/en/apps/io.gitlab.adhami3310.Impression)**, ...)
+  3. Make sure your computer allows booting from USB drives and is in UEFI mode.
+  4. Boot into the NixOS live environment.
+  5. Launch a terminal. Set a password using \`passwd\` and find the IP address using \`ip a\`"
+
+  echo ""
+  gum confirm "Is the device ready ?" || { echo "❌ You need to prepare the device. The script cannot continue."; exit 1; }
+
+  # LIVE TARGET SETTINGS
+  user_input "LIVE_TARGET_IP" "  Please provide the IP address of the target host :" "For example : 192.168.1.100" "${IP_REGEX}" "Invalid IP address format."
+  user_input "LIVE_TARGET_PASSWORD" "  Please enter the password for '${TARGET_USER}@${LIVE_TARGET_IP}' :" "${LIVE_TARGET_IP}'s password" "" "" "true"
+
+  # INTERNATIONALIZATION SETTINGS
+  user_input "INTERNATIONALIZATION_TIMEZONE" "  Please provide the wanted timezone :" "For example : Europe/Paris, Europe/Berlin, Europe/London, etc" "" ""
+  user_input "INTERNATIONALIZATION_LANGUAGE" "  Please provide the wanted language :" "For example : French, Deutsch, English, etc" "" ""
+  user_input "INTERNATIONALIZATION_COUNTRY" "  Please provide your country :" "For example : France, Germany, Great-Britain, etc" "" ""
+}
+
+configuration() {
+  if [[ "${DEVICE_TYPE}" == "server" ]]; then
+
+
+    # Users & Groups
+    user_input "SERVER_OWNER_NAME" "  Please provide the name of the owner of this server :" "For example : Steve" "" ""
+    user_input "SERVER_ADMIN_EMAIL" "  Please provide a valid ADMIN email address (ACME, system failures notifications, etc) :" "For example : myemail@mydomain.mytld" "${EMAIL_REGEX}" "Invalid email address format."
+    user_input "AUTHORIZED_SSH_PUBLIC_KEY" "  Please provide the SSH public key of an authorized device (or a comma-separated list) :" "For example : ssh-ed25519 AAAAC3Nzam0uYewNAbxL8Fci8 user@your-pc or ssh-* * *, ssh-* * *, etc" "${SSH_KEY_REGEX}" "Invalid SSH key format (must start with ssh-...)."
+
+    echo -e "\n\n ➡️  You will access your services via a domain name (e.g. cloud.mydomain.com) and containers need credentials to create those subdomains"
+    # TRAEFIK SETTINGS
+    user_input "DOMAIN_NAME" "  Please provide the domain name (FQDN) your home server will use :" "For example : yourdomain.com" "${DOMAIN_REGEX}" "Invalid domain name format."
+    user_input "CLOUDFLARE_DNS_API_TOKEN" "  Please provide a cloudflare API token with DNS zone permission :" "For example : bA7hdvCOuXGytlNKohi3ZGtlVpf5CHpLuCMiJrE" "" "" "true"
+
+    echo -e "\n\n ➡️  Some services will be able to send you emails. For that you need an email that supports sending emails (like Gmail for example)"
+    # SMTP SETTINGS
+    user_input "SMTP_SERVER_USERNAME" "  Please provide a valid sender email address :" "For example : myemail@gmail.com" "${EMAIL_REGEX}" "Invalid email address format."
+    user_input "SMTP_SERVER_PASSWORD" "  Please provide the password of this email address :" "abcd efgh ijkl mnop" "" "" "true"
+    user_input "SMTP_SERVER_HOST" "  Please provide the SMTP server endpoint :" "For Gmail : smtp.gmail.com" "${DOMAIN_REGEX}" "Invalid domain name format."
+    user_input "SMTP_SERVER_PORT" "  Please provide the smtp TLS port :" "For Gmail : 587" "${PORT_REGEX}" "Invalid port number."
+
+    echo -e "\n\n ➡️  This server will connect to your local network and you will configure its IP address\n"
+    # NETWORK SETTINGS
+    user_input "NETWORK_SUBNET" "  Please provide your network subnet :" "For example 192.168.1.0/24" "${SUBNET_REGEX}" "Invalid subnet format (e.g. 192.168.1.1/24)."
+    user_input "NETWORK_ROUTER_IP" "  Please provide the ip address of your router :" "Most likely 192.168.1.1 or 192.168.1.254" "${IP_REGEX}" "Invalid IP address format."
+    user_input "HOME_SERVER_IP" "  Please choose the ip address that your server will use (i.e. any address in the 192.168.1.1/24 range that is not in use.) :" "For example 192.168.1.5" "${IP_REGEX}" "Invalid IP address format."
+  elif [[ "${DEVICE_TYPE}" == "backup" ]]; then
+    :
+  elif [[ "${DEVICE_TYPE}" == "computer" ]]; then
+    :
+  elif [[ "${DEVICE_TYPE}" == "tv" ]]; then
+    :
+  fi
+}
+
+setup_ssh() {
+  echod "\n ✅ Generating new SSH key for numbus-admin..."
+
+  chmod 700 ${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/
+  ssh-keygen -t "ed25519" -C "numbus-admin@numbus-server" -f "${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/id_ed25519" -N "" -q
+
+  if [[ ${DEBUG} -eq 1 ]]; then
+  echo -e "\n ➡️  Copying SSH key to target host '${TARGET_USER}@${LIVE_TARGET_IP}'..."
+  fi
+
+  if sshpass -p "${LIVE_TARGET_PASSWORD}" ssh-copy-id -o StrictHostKeyChecking=no -i "${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}"; then
+    if [[ ${DEBUG} -eq 1 ]]; then
+    echo -e "\n ✅ SSH key copied successfully"
+    fi
+  else
+    echo -e "\n ❌ Failed to copy SSH key. Please check the host IP and password."
+    exit 1
+  fi
 }
 
 services_selection() {
@@ -304,12 +420,416 @@ services_selection() {
   gum confirm "Do you want to edit the default subdomain of your services ?" || { echo -e "\n\n✅ Continuing..."; return 0; }
 
   for service in ${SELECTED_WEB_APPLICATIONS[@]} ${SELECTED_DNS_SERVICE[@]}; do
-    SELECTED_WEB_APPLICATIONS_SUBDOMAIN+=( "$(gum input --placeholder "${service}" --header "Please provide the desired subdomain for ${service}:")" )
+    if gum confirm "Change the subdomain of ${service} ?"; then
+      SELECTED_WEB_APPLICATIONS_SUBDOMAIN+=( "$(gum input --placeholder "${service}" --header "Please provide the desired subdomain for ${service}:")" )
+    fi
   done
 
-  export SELECTED_WEB_APPLICATIONS_SUBDOMAIN
+  return 0
 }
 
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+#############################################################################
+declare -A ACL_GROUPS
+declare -A ACL_USERS
+
+ACL_SERVICES=()
+
+compute_acl_services() {
+    local all_services=("${SELECTED_DNS_SERVICE[@]}" "${SELECTED_WEB_APPLICATIONS[@]}" "${SELECTED_SYSTEM_SERVICES[@]}")
+    ACL_SERVICES=() # Reset to prevent duplicates on reload
+    
+    for svc in "${all_services[@]}"; do
+        local excluded=false
+        for ex in "${EXCLUDED_ACL_SERVICES[@]}"; do
+            if [[ "$svc" == "$ex" ]]; then
+                excluded=true
+                break
+            fi
+        done
+        if [[ "$excluded" == false ]]; then
+            ACL_SERVICES+=("$svc")
+        fi
+    done
+}
+
+# Upgraded to support default values for editing, and '--' for gum style
+get_valid_input() {
+    local -n return_var=$1
+    local prompt_text=$2
+    local regex=$3
+    local is_mandatory=$4
+    local default_value=$5
+    
+    while true; do
+        local val
+        # --value pre-fills the input for easy editing
+        val=$(gum input --prompt "$prompt_text: " --width 50 --value "$default_value")
+        
+        # Handle empty input
+        if [[ -z "$val" ]]; then
+            if [[ "$is_mandatory" == true ]]; then
+                gum style --foreground "#ff0000" -- "✖ This field is mandatory."
+                continue
+            else
+                return_var=""
+                break
+            fi
+        fi
+        
+        # Handle Regex Validation
+        if [[ -n "$regex" ]]; then
+            if [[ "$val" =~ $regex ]]; then
+                return_var="$val"
+                break
+            else
+                gum style --foreground "#ff0000" -- "✖ Invalid format. Please try again."
+            fi
+        else
+            return_var="$val"
+            break
+        fi
+    done
+}
+
+# ==========================================
+# 4. GROUP MANAGEMENT
+# ==========================================
+
+show_groups_table() {
+    if [[ ${#ACL_GROUPS[@]} -eq 0 ]]; then
+        gum style --italic --foreground "#6272a4" -- "No groups configured."
+        return
+    fi
+    
+    # We use CSV format with quotes to handle comma-separated services correctly
+    local csv="Group Name,Allowed Services\n"
+    for g in "${!ACL_GROUPS[@]}"; do
+        csv+="\"$g\",\"${ACL_GROUPS[$g]}\"\n"
+    done
+    
+    printf "%b" "$csv" | gum table
+}
+
+add_group() {
+    if [[ ${#ACL_GROUPS[@]} -ge 10 ]]; then
+        gum style --foreground "#ffb86c" -- "⚠ Maximum of 10 groups reached."
+        sleep 2; return
+    fi
+
+    local group_name
+    get_valid_input group_name "Group Name" "^[a-zA-Z0-9_-]+$" true ""
+    
+    if [[ -n "${ACL_GROUPS[$group_name]}" ]]; then
+        gum style --foreground "#ff0000" -- "✖ Group already exists."
+        sleep 2; return
+    fi
+
+    gum style --foreground "#50fa7b" -- "Select services for $group_name (Space to select, Enter to confirm):"
+    local chosen_services
+    chosen_services=$(gum choose --no-limit "${ACL_SERVICES[@]}" | paste -sd "," -)
+    
+    ACL_GROUPS["$group_name"]="$chosen_services"
+    gum style --foreground "#50fa7b" -- "✔ Group '$group_name' created."
+    sleep 1
+}
+
+edit_group() {
+    if [[ ${#ACL_GROUPS[@]} -eq 0 ]]; then return; fi
+    
+    local group_keys=("${!ACL_GROUPS[@]}")
+    gum style -- "Select a group to edit:"
+    local group_name=$(gum choose "${group_keys[@]}")
+    
+    if [[ -z "$group_name" ]]; then return; fi
+    if [[ "$group_name" == "admin" ]]; then
+        gum style --foreground "#ff0000" -- "✖ The admin group cannot be modified."
+        sleep 2; return
+    fi
+
+    gum style --foreground "#50fa7b" -- "Select NEW services for $group_name:"
+    local chosen_services=$(gum choose --no-limit "${ACL_SERVICES[@]}" | paste -sd "," -)
+    
+    ACL_GROUPS["$group_name"]="$chosen_services"
+    gum style --foreground "#50fa7b" -- "✔ Group '$group_name' updated."
+    sleep 1
+}
+
+remove_group() {
+    if [[ ${#ACL_GROUPS[@]} -eq 0 ]]; then return; fi
+    
+    local group_keys=("${!ACL_GROUPS[@]}")
+    gum style -- "Select a group to REMOVE:"
+    local group_name=$(gum choose "${group_keys[@]}")
+    
+    if [[ -z "$group_name" ]]; then return; fi
+    if [[ "$group_name" == "admin" ]]; then
+        gum style --foreground "#ff0000" -- "✖ The admin group cannot be removed."
+        sleep 2; return
+    fi
+
+    gum style --foreground "#ff5555" --bold -- "Are you sure you want to delete '$group_name'?"
+    if gum confirm; then
+        unset ACL_GROUPS["$group_name"]
+        gum style --foreground "#50fa7b" -- "✔ Group deleted."
+        sleep 1
+    fi
+}
+
+manage_groups_menu() {
+    while true; do
+        clear
+        gum style --border double --margin "1" --padding "0 1" --border-foreground "#8be9fd" -- "Group Management (${#ACL_GROUPS[@]}/10)"
+        show_groups_table
+        
+        local action=$(gum choose "Add Group" "Edit Group" "Remove Group" "Back")
+        case "$action" in
+            "Add Group") add_group ;;
+            "Edit Group") edit_group ;;
+            "Remove Group") remove_group ;;
+            "Back"|"") break ;;
+        esac
+    done
+}
+
+# ==========================================
+# 5. USER MANAGEMENT
+# ==========================================
+
+show_users_table() {
+    if [[ ${#ACL_USERS[@]} -eq 0 ]]; then
+        gum style --italic --foreground "#6272a4" -- "No users configured."
+        return
+    fi
+    
+    local csv="Username,Name,Email,Health Alerts,ACL Type,ACL Value\n"
+    for u in "${!ACL_USERS[@]}"; do
+        IFS='|' read -r name email phone health type val <<< "${ACL_USERS[$u]}"
+        csv+="\"$u\",\"$name\",\"$email\",\"$health\",\"$type\",\"$val\"\n"
+    done
+    
+    printf "%b" "$csv" | gum table
+}
+
+add_user() {
+    if [[ ${#ACL_USERS[@]} -ge 20 ]]; then
+        gum style --foreground "#ffb86c" -- "⚠ Maximum of 20 users reached."
+        sleep 2; return
+    fi
+
+    local name username email phone health_alert acl_type acl_value
+    
+    get_valid_input username "Username" "^[a-z0-9_-]+$" true ""
+    if [[ -n "${ACL_USERS[$username]}" ]]; then
+        gum style --foreground "#ff0000" -- "✖ Username already exists."
+        sleep 2; return
+    fi
+    
+    get_valid_input name "Full Name" "" true ""
+    get_valid_input email "Email Address" "$EMAIL_REGEX" true ""
+    get_valid_input phone "Phone Number (E.164, optional)" "$PHONE_REGEX" false ""
+    
+    gum style -- "Inform about server health?"
+    if gum confirm; then health_alert="true"; else health_alert="false"; fi
+
+    gum style -- "How should ACL be managed for $username?"
+    acl_type=$(gum choose "Assign to Group" "Manual Service Selection")
+    
+    if [[ "$acl_type" == "Assign to Group" ]]; then
+        acl_type="group"
+        local group_keys=("${!ACL_GROUPS[@]}")
+        acl_value=$(gum choose "${group_keys[@]}")
+    else
+        acl_type="manual"
+        gum style --foreground "#50fa7b" -- "Select services for $username:"
+        acl_value=$(gum choose --no-limit "${ACL_SERVICES[@]}" | paste -sd "," -)
+    fi
+    
+    ACL_USERS["$username"]="$name|$email|$phone|$health_alert|$acl_type|$acl_value"
+    gum style --foreground "#50fa7b" -- "✔ User '$username' created."
+    sleep 1
+}
+
+edit_user() {
+    if [[ ${#ACL_USERS[@]} -eq 0 ]]; then return; fi
+    
+    local user_keys=("${!ACL_USERS[@]}")
+    gum style -- "Select a user to edit:"
+    local username=$(gum choose "${user_keys[@]}")
+    
+    if [[ -z "$username" ]]; then return; fi
+    
+    # Extract current values
+    IFS='|' read -r curr_name curr_email curr_phone curr_health curr_type curr_val <<< "${ACL_USERS[$username]}"
+    local name email phone health_alert acl_type acl_value
+    
+    gum style --foreground "#f1fa8c" -- "Editing User: $username"
+    get_valid_input name "Full Name" "" true "$curr_name"
+    get_valid_input email "Email Address" "$EMAIL_REGEX" true "$curr_email"
+    get_valid_input phone "Phone Number" "$PHONE_REGEX" false "$curr_phone"
+    
+    if [[ "$username" == "admin" ]]; then
+        gum style --foreground "#ffb86c" -- "Admin health alerts and ACL settings cannot be changed."
+        health_alert="true"
+        acl_type="group"
+        acl_value="admin"
+        sleep 2
+    else
+        gum style -- "Inform about server health? (Currently: $curr_health)"
+        if gum confirm; then health_alert="true"; else health_alert="false"; fi
+
+        gum style -- "How should ACL be managed? (Currently: $curr_type)"
+        acl_type=$(gum choose "Assign to Group" "Manual Service Selection")
+        
+        if [[ "$acl_type" == "Assign to Group" ]]; then
+            acl_type="group"
+            local group_keys=("${!ACL_GROUPS[@]}")
+            acl_value=$(gum choose "${group_keys[@]}")
+        else
+            acl_type="manual"
+            gum style --foreground "#50fa7b" -- "Select services for $username:"
+            acl_value=$(gum choose --no-limit "${ACL_SERVICES[@]}" | paste -sd "," -)
+        fi
+    fi
+    
+    ACL_USERS["$username"]="$name|$email|$phone|$health_alert|$acl_type|$acl_value"
+    gum style --foreground "#50fa7b" -- "✔ User '$username' updated."
+    sleep 1
+}
+
+remove_user() {
+    if [[ ${#ACL_USERS[@]} -eq 0 ]]; then return; fi
+    
+    local user_keys=("${!ACL_USERS[@]}")
+    gum style -- "Select a user to REMOVE:"
+    local username=$(gum choose "${user_keys[@]}")
+    
+    if [[ -z "$username" ]]; then return; fi
+    if [[ "$username" == "admin" ]]; then
+        gum style --foreground "#ff0000" -- "✖ The admin user cannot be removed."
+        sleep 2; return
+    fi
+
+    gum style --foreground "#ff5555" --bold -- "Are you sure you want to delete '$username'?"
+    if gum confirm; then
+        unset ACL_USERS["$username"]
+        gum style --foreground "#50fa7b" -- "✔ User deleted."
+        sleep 1
+    fi
+}
+
+manage_users_menu() {
+    while true; do
+        clear
+        gum style --border double --margin "1" --padding "0 1" --border-foreground "#ff79c6" -- "User Management (${#ACL_USERS[@]}/20)"
+        show_users_table
+        
+        local action=$(gum choose "Add User" "Edit User" "Remove User" "Back")
+        case "$action" in
+            "Add User") add_user ;;
+            "Edit User") edit_user ;;
+            "Remove User") remove_user ;;
+            "Back"|"") break ;;
+        esac
+    done
+}
+
+# ==========================================
+# 6. SETUP & EXPORT
+# ==========================================
+
+setup_admin_user() {
+    if [[ -n "${ACL_USERS["admin"]}" ]]; then return; fi
+
+    gum style --border rounded --padding "1 2" --margin "1" --border-foreground "#ff79c6" -- "Initial Setup: Administrator User"
+    
+    local name email phone
+    get_valid_input name "Admin Full Name" "" true ""
+    get_valid_input email "Admin Email Address" "$EMAIL_REGEX" true ""
+    get_valid_input phone "Admin Phone Number (optional)" "$PHONE_REGEX" false ""
+    
+    ACL_USERS["admin"]="$name|$email|$phone|true|group|admin"
+    gum style --foreground "#50fa7b" -- "✔ Administrator configured."
+    sleep 1
+}
+
+export_data() {
+    clear
+    gum style --foreground "#50fa7b" --bold -- "--- Provisioning Data Payload ---"
+    echo "GROUPS:"
+    for group in "${!ACL_GROUPS[@]}"; do
+        echo "  $group -> Allowed: ${ACL_GROUPS[$group]}"
+    done
+    echo ""
+    echo "USERS (Name|Email|Phone|Alert|AclType|AclValue):"
+    for user in "${!ACL_USERS[@]}"; do
+        echo "  $user -> ${ACL_USERS[$user]}"
+    done
+}
+
+main_menu() {
+    compute_acl_services
+    ACL_GROUPS["admin"]=$(printf "%s," "${ACL_SERVICES[@]}" | sed 's/,$//')
+    setup_admin_user
+
+    while true; do
+        clear
+        gum style --border double --margin "1" --padding "1 2" --border-foreground "#bd93f9" -- "Server Deployment - Access Management"
+        gum style -- "Current state: ${#ACL_GROUPS[@]}/10 Groups | ${#ACL_USERS[@]}/20 Users"
+        echo ""
+        
+        local choice=$(gum choose "1. Manage Groups" "2. Manage Users" "3. Finish & Apply Configuration" "4. Exit without saving")
+            
+        case "$choice" in
+            "1. Manage Groups") manage_groups_menu ;;
+            "2. Manage Users") manage_users_menu ;;
+            "3. Finish & Apply Configuration") 
+                export_data
+                break
+                ;;
+            "4. Exit without saving"|"") 
+                echo "Aborting..."
+                exit 1 
+                ;;
+        esac
+    done
+}
+
+
+########################################################################""
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
 disks_selection() {
   gum style --border normal --margin "1" --padding "1 2" --border-foreground 212 "
   ⚠️  $(gum style --foreground 212 'WARNING:') You will choose the disks to install NixOS on.
@@ -392,9 +912,9 @@ disks_selection() {
 
 server_config_generation() {
   echo -e "\n  # Server settings" >> ${CONFIGURATION_PATH}
-  echo -e "  time.timeZone = \"${TIMEZONE}\";" >> ${CONFIGURATION_PATH}
+  echo -e "  time.timeZone = \"${INTERNATIONALIZATION_TIMEZONE}\";" >> ${CONFIGURATION_PATH}
   echo -e "  numbus.locale = \"${LOCALE}\";" >> ${CONFIGURATION_PATH}
-  echo -e "  numbus.language = \"${LANGUAGE}\";" >> ${CONFIGURATION_PATH}
+  echo -e "  numbus.language = \"${INTERNATIONALIZATION_LANGUAGE}\";" >> ${CONFIGURATION_PATH}
   echo -e "  numbus.owner = \"${SERVER_OWNER_NAME}\";" >> ${CONFIGURATION_PATH}
 }
 
@@ -480,9 +1000,9 @@ keys_generation() {
     echo -n "$PASS" > "${EXTRA_FILES_PATH}/etc/secrets/disks/boot-${i}"
     chmod 600 "${EXTRA_FILES_PATH}/etc/secrets/disks/boot-${i}"
     ssh_to_host 'bash -s' << EOF
-echo "$LIVE_TARGET_PASSWD" | sudo -S mkdir -p /etc/secrets/disks/
-echo "$LIVE_TARGET_PASSWD" | sudo -S bash -c "printf '%s' '$PASS' > /etc/secrets/disks/boot-${i}"
-echo "$LIVE_TARGET_PASSWD" | sudo -S chmod 600 /etc/secrets/disks/boot-${i}
+echo "$LIVE_TARGET_PASSWORD" | sudo -S mkdir -p /etc/secrets/disks/
+echo "$LIVE_TARGET_PASSWORD" | sudo -S bash -c "printf '%s' '$PASS' > /etc/secrets/disks/boot-${i}"
+echo "$LIVE_TARGET_PASSWORD" | sudo -S chmod 600 /etc/secrets/disks/boot-${i}
 EOF
   done
   for i in $(seq 1 "$CONTENT_DISK_NUMBER"); do
@@ -490,8 +1010,8 @@ EOF
     echo -n "$PASS" > "${EXTRA_FILES_PATH}/etc/secrets/disks/content-${i}"
     chmod 600 "${EXTRA_FILES_PATH}/etc/secrets/disks/content-${i}"
     ssh_to_host 'bash -s' << EOF
-echo "$LIVE_TARGET_PASSWD" | sudo -S bash -c "printf '%s' '$PASS' > /etc/secrets/disks/content-${i}"
-echo "$LIVE_TARGET_PASSWD" | sudo -S chmod 600 /etc/secrets/disks/content-${i}
+echo "$LIVE_TARGET_PASSWORD" | sudo -S bash -c "printf '%s' '$PASS' > /etc/secrets/disks/content-${i}"
+echo "$LIVE_TARGET_PASSWORD" | sudo -S chmod 600 /etc/secrets/disks/content-${i}
 EOF
   done
   for i in $(seq 1 "$PARITY_DISK_NUMBER"); do
@@ -499,8 +1019,8 @@ EOF
     echo -n "$PASS" > "${EXTRA_FILES_PATH}/etc/secrets/disks/parity-${i}"
     chmod 600 "${EXTRA_FILES_PATH}/etc/secrets/disks/parity-${i}"
     ssh_to_host 'bash -s' << EOF
-echo "$LIVE_TARGET_PASSWD" | sudo -S bash -c "printf '%s' '$PASS' > /etc/secrets/disks/parity-${i}"
-echo "$LIVE_TARGET_PASSWD" | sudo -S chmod 600 /etc/secrets/disks/parity-${i}
+echo "$LIVE_TARGET_PASSWORD" | sudo -S bash -c "printf '%s' '$PASS' > /etc/secrets/disks/parity-${i}"
+echo "$LIVE_TARGET_PASSWORD" | sudo -S chmod 600 /etc/secrets/disks/parity-${i}
 EOF
   done
 
@@ -752,7 +1272,7 @@ deploy() {
 postrun_action() {
   TARGET_USER="numbus-admin"
   LIVE_TARGET_IP="${HOME_SERVER_IP}"
-  LIVE_TARGET_PASSWD="changeMe!"
+  LIVE_TARGET_PASSWORD="changeMe!"
 
   echo -e "\n\n Now the remote machine will reboot. You will need to input the boot disk(s) passphrase.
   This will be the only time you will have to do so, it will be automatic in the future."
@@ -789,7 +1309,7 @@ postrun_action() {
                                       Do you want to enable automatic disk decryption on boot ?"
 
     if gum confirm "➡️  I understand, 'yes' to proceed."; then
-      sshpass -p "${LIVE_TARGET_PASSWD}" ssh -i "${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}" 'bash -s' << EOF
+      sshpass -p "${LIVE_TARGET_PASSWORD}" ssh -i "${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}" 'bash -s' << EOF
 echo "Enrolling boot disk key to TPM..."
 
 BOOT_DISKS_NAME=(${BOOT_DISKS_NAME[@]})
@@ -806,14 +1326,14 @@ for i in \${!BOOT_DISKS_NAME[@]}; do
     DISK_PATH="/dev/\${BOOT_DISKS_NAME[\${i}]}2"
   fi
   [[ "\${DEBUG}" == "true" ]] && echo "Issuing enroll command for disk \${DISK_PATH}..."
-  echo ${LIVE_TARGET_PASSWD} | sudo -S systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=0+7 --unlock-key-file=/etc/secrets/disks/boot-\${j} \${DISK_PATH}
+  echo ${LIVE_TARGET_PASSWORD} | sudo -S systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=0+7 --unlock-key-file=/etc/secrets/disks/boot-\${j} \${DISK_PATH}
   j=\$((j + 1))
 done
 
 echo "Getting PCRS 15 hash..."
-PCR_HASH=\$(echo ${LIVE_TARGET_PASSWD} | sudo -S systemd-analyze pcrs 15 --json=short)
+PCR_HASH=\$(echo ${LIVE_TARGET_PASSWORD} | sudo -S systemd-analyze pcrs 15 --json=short)
 
-echo ${LIVE_TARGET_PASSWD} | sudo -S sed -i "s|PCR_HASH|\${PCR_HASH}|" /etc/nixos/configuration.nix
+echo ${LIVE_TARGET_PASSWORD} | sudo -S sed -i "s|PCR_HASH|\${PCR_HASH}|" /etc/nixos/configuration.nix
 EOF
     else
       echo "Skipping TPM configuration."
@@ -830,7 +1350,7 @@ securely on a hidden sheet of paper or add it to your password manager (locally
 
   gum confirm "➡️  I understand, 'yes' to proceed." || { echo -e "\n\n❌ Aborting as requested."; exit 1; }
 
-  echo $LIVE_TARGET_PASSWD | sudo -S passwd numbus-admin
+  echo $LIVE_TARGET_PASSWORD | sudo -S passwd numbus-admin
 }
 
 nix_update() {
@@ -839,11 +1359,11 @@ nix_update() {
   nixos-rebuild --target-host numbus-admin@${LIVE_TARGET_IP} \
     --use-remote-sudo switch --flake ${EXTRA_FILES_PATH}/etc/nixos#numbus-server
 }
-# --- MAIN FUNCTIONS LOGIC ---<
+# --- MAIN FUNCTIONS ---<
 
 
 
-# --- DEFAULTS --->
+# --- DEFAULT VARIABLES --->
 WEBSERVER_PORT=${WEBSERVER_PORT:-8088}
 
 LIVE_DATA_PATH="/run/numbus/web/live_settings.json"
@@ -854,7 +1374,8 @@ CONFIG_FILE="config/numbus.yaml"
 
 TARGET_USER="nixos"
 
-EXTRA_FILES_PATH="/run/numbus/config"
+TMP_FILES_PATH="/run/user/$(id -u)/numbus-$(date +"%Y-%m-%d-%Hh%M")"
+EXTRA_FILES_PATH="${TMP_FILES_PATH}/config"
 
 if [[ ${DEBUG-0} -eq 1 ]]; then
   FILES_CP_FLAGS="vau"
@@ -870,7 +1391,15 @@ else
   MKDIR_FLAGS="p"
   MV_FLAGS="u"
 fi
-# --- DEFAULTS ---<
+
+IP_REGEX='^([0-9]{1,3}\.){3}[0-9]{1,3}$'
+SUBNET_REGEX='^([0-9]{1,3}\.){3}[0-9]{1,3}/[0-9]{1,2}$'
+DOMAIN_REGEX='^([a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z]{2,}$'
+EMAIL_REGEX='^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$'
+PORT_REGEX='^[0-9]{1,5}$'
+SSH_KEY_REGEX='^ssh-[a-z0-9]+ [A-Za-z0-9+/]+.*'
+PHONE_REGEX='^\+[1-9][0-9]{7,14}$' 
+# --- DEFAULTS VARIABLES ---<
 
 
 
@@ -896,11 +1425,12 @@ echo """
 DEPLOY_MODE=$(gum choose --header "Choose your preferred configuration interface :" "Through my browser (Recommended for beginners)" "Through my terminal (TUI)")
 
 if [[ "$DEPLOY_MODE" == "Through my terminal (TUI)" ]]; then
+  WEB_MODE=0
   preparation
-  hierarchy_preparation
-  setup_ssh
+  configuration
 
 else
+  WEB_MODE=1
   launch_configurator
   hierarchy_preparation
   echod "\n ⏳ Waiting for device credentials from web UI..."
@@ -908,9 +1438,9 @@ else
     sleep 5
   done
   echod "\n ✅ Credentials received."
-  LANGUAGE=$(jq -r '.language' ${LIVE_DATA_PATH})
+  INTERNATIONALIZATION_LANGUAGE=$(jq -r '.language' ${LIVE_DATA_PATH})
   COUNTRY=$(jq -r '.country' ${LIVE_DATA_PATH})
-  TIMEZONE=$(jq -r '.timeZone' ${LIVE_DATA_PATH})
+  INTERNATIONALIZATION_TIMEZONE=$(jq -r '.timeZone' ${LIVE_DATA_PATH})
   DEVICE_TYPE=$(jq -r '.device' ${LIVE_DATA_PATH})
   DEPLOYMENT_MODE=$(jq -r '.deploymentMode' ${LIVE_DATA_PATH})
   if [[ "${DEPLOYMENT_MODE}" == "non-interactive" ]]; then

From 72668492f5a446ac59f56f6aaa3b7c88ac3e3487 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Billet?= <raphael@numbus.eu>
Date: Tue, 28 Apr 2026 09:00:24 +0200
Subject: [PATCH 41/43] Updates to the TUI. Need to continue working on a
 unified input validation function.

---
 deploy.sh | 393 +++++++++++++++++++++++-------------------------------
 1 file changed, 169 insertions(+), 224 deletions(-)

diff --git a/deploy.sh b/deploy.sh
index 87562af..243fce8 100755
--- a/deploy.sh
+++ b/deploy.sh
@@ -17,6 +17,45 @@ ssh_to_host() {
   ssh -i "${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}" "${COMMAND}"
 }
 
+get_valid_input() {
+  local VAR_NAME="${1}"
+  local HEADER="${2}"
+  local PLACEHOLDER="${3}"
+  local REGEX="${4}"
+  local MANDATORY="${5:-false}"
+  local SENSITIVE="${6:-false}"
+
+  while true; do
+    local input
+    # --value pre-fills the input for easy editing
+    input=$(gum input --header "${HEADER}" --placeholder "${PLACEHOLDER}" --width 50)
+    
+    # Handle empty input
+    if [[ -z "$input" ]]; then
+      if [[ "$is_mandatory" == true ]]; then
+        gum style --foreground "#ff0000" -- "✖ This field is mandatory."
+        continue
+      else
+        return_var=""
+        break
+      fi
+    fi
+    
+    # Handle Regex Validation
+    if [[ -n "$regex" ]]; then
+      if [[ "$input" =~ $regex ]]; then
+        return_var="$input"
+        break
+      else
+        gum style --foreground "#ff0000" -- "✖ Invalid format. Please try again."
+      fi
+    else
+      return_var="$input"
+      break
+    fi
+  done
+}
+
 user_input() {
   local VAR_NAME="${1}"
   local HEADER="${2}"
@@ -428,95 +467,30 @@ services_selection() {
   return 0
 }
 
+users_and_groups() {
 
+  declare -A ACL_GROUPS
+  declare -A ACL_USERS
 
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-#############################################################################
-declare -A ACL_GROUPS
-declare -A ACL_USERS
-
-ACL_SERVICES=()
-
-compute_acl_services() {
-    local all_services=("${SELECTED_DNS_SERVICE[@]}" "${SELECTED_WEB_APPLICATIONS[@]}" "${SELECTED_SYSTEM_SERVICES[@]}")
-    ACL_SERVICES=() # Reset to prevent duplicates on reload
+  compute_acl_services() {
+    EXCLUDED_SERVICES=( "clamav" ) # Those are the services that don't have a web page or don't support SSO
+    local ALL_SERVICES=("${SELECTED_DNS_SERVICE[@]}" "${SELECTED_WEB_APPLICATIONS[@]}" "${SELECTED_SYSTEM_SERVICES[@]}")
     
-    for svc in "${all_services[@]}"; do
-        local excluded=false
-        for ex in "${EXCLUDED_ACL_SERVICES[@]}"; do
-            if [[ "$svc" == "$ex" ]]; then
-                excluded=true
-                break
-            fi
-        done
-        if [[ "$excluded" == false ]]; then
-            ACL_SERVICES+=("$svc")
+    for i in "${!ALL_SERVICES[@]}"; do
+      for excluded in "${EXCLUDED_SERVICES[@]}"; do
+        if [[ "${ALL_SERVICES[${i}]}" == "${excluded}" ]]; then
+          unset "ALL_SERVICES[${i}]"
         fi
+      done
     done
-}
+  }
 
-# Upgraded to support default values for editing, and '--' for gum style
-get_valid_input() {
-    local -n return_var=$1
-    local prompt_text=$2
-    local regex=$3
-    local is_mandatory=$4
-    local default_value=$5
-    
-    while true; do
-        local val
-        # --value pre-fills the input for easy editing
-        val=$(gum input --prompt "$prompt_text: " --width 50 --value "$default_value")
-        
-        # Handle empty input
-        if [[ -z "$val" ]]; then
-            if [[ "$is_mandatory" == true ]]; then
-                gum style --foreground "#ff0000" -- "✖ This field is mandatory."
-                continue
-            else
-                return_var=""
-                break
-            fi
-        fi
-        
-        # Handle Regex Validation
-        if [[ -n "$regex" ]]; then
-            if [[ "$val" =~ $regex ]]; then
-                return_var="$val"
-                break
-            else
-                gum style --foreground "#ff0000" -- "✖ Invalid format. Please try again."
-            fi
-        else
-            return_var="$val"
-            break
-        fi
-    done
-}
 
-# ==========================================
-# 4. GROUP MANAGEMENT
-# ==========================================
 
-show_groups_table() {
+  show_groups_table() {
     if [[ ${#ACL_GROUPS[@]} -eq 0 ]]; then
-        gum style --italic --foreground "#6272a4" -- "No groups configured."
-        return
+      gum style --italic --foreground "#6272a4" -- "No groups configured."
+      return
     fi
     
     # We use CSV format with quotes to handle comma-separated services correctly
@@ -526,20 +500,20 @@ show_groups_table() {
     done
     
     printf "%b" "$csv" | gum table
-}
+  }
 
-add_group() {
+  add_group() {
     if [[ ${#ACL_GROUPS[@]} -ge 10 ]]; then
-        gum style --foreground "#ffb86c" -- "⚠ Maximum of 10 groups reached."
-        sleep 2; return
+      gum style --foreground "#ffb86c" -- "⚠ Maximum of 10 groups reached."
+      sleep 2; return
     fi
 
     local group_name
     get_valid_input group_name "Group Name" "^[a-zA-Z0-9_-]+$" true ""
     
     if [[ -n "${ACL_GROUPS[$group_name]}" ]]; then
-        gum style --foreground "#ff0000" -- "✖ Group already exists."
-        sleep 2; return
+      gum style --foreground "#ff0000" -- "✖ Group already exists."
+      sleep 2; return
     fi
 
     gum style --foreground "#50fa7b" -- "Select services for $group_name (Space to select, Enter to confirm):"
@@ -549,9 +523,9 @@ add_group() {
     ACL_GROUPS["$group_name"]="$chosen_services"
     gum style --foreground "#50fa7b" -- "✔ Group '$group_name' created."
     sleep 1
-}
+  }
 
-edit_group() {
+  edit_group() {
     if [[ ${#ACL_GROUPS[@]} -eq 0 ]]; then return; fi
     
     local group_keys=("${!ACL_GROUPS[@]}")
@@ -570,9 +544,9 @@ edit_group() {
     ACL_GROUPS["$group_name"]="$chosen_services"
     gum style --foreground "#50fa7b" -- "✔ Group '$group_name' updated."
     sleep 1
-}
+  }
 
-remove_group() {
+  remove_group() {
     if [[ ${#ACL_GROUPS[@]} -eq 0 ]]; then return; fi
     
     local group_keys=("${!ACL_GROUPS[@]}")
@@ -581,65 +555,61 @@ remove_group() {
     
     if [[ -z "$group_name" ]]; then return; fi
     if [[ "$group_name" == "admin" ]]; then
-        gum style --foreground "#ff0000" -- "✖ The admin group cannot be removed."
-        sleep 2; return
+      gum style --foreground "#ff0000" -- "✖ The admin group cannot be removed."
+      sleep 2; return
     fi
 
     gum style --foreground "#ff5555" --bold -- "Are you sure you want to delete '$group_name'?"
     if gum confirm; then
-        unset ACL_GROUPS["$group_name"]
-        gum style --foreground "#50fa7b" -- "✔ Group deleted."
-        sleep 1
+      unset ACL_GROUPS["$group_name"]
+      gum style --foreground "#50fa7b" -- "✔ Group deleted."
+      sleep 1
     fi
-}
+  }
 
-manage_groups_menu() {
+  manage_groups_menu() {
     while true; do
-        clear
-        gum style --border double --margin "1" --padding "0 1" --border-foreground "#8be9fd" -- "Group Management (${#ACL_GROUPS[@]}/10)"
-        show_groups_table
-        
-        local action=$(gum choose "Add Group" "Edit Group" "Remove Group" "Back")
-        case "$action" in
-            "Add Group") add_group ;;
-            "Edit Group") edit_group ;;
-            "Remove Group") remove_group ;;
-            "Back"|"") break ;;
-        esac
+      clear
+      gum style --border double --margin "1" --padding "0 1" --border-foreground "#8be9fd" -- "Group Management (${#ACL_GROUPS[@]}/10)"
+      show_groups_table
+      
+      local action=$(gum choose "Add Group" "Edit Group" "Remove Group" "Back")
+      case "$action" in
+        "Add Group") add_group ;;
+        "Edit Group") edit_group ;;
+        "Remove Group") remove_group ;;
+        "Back"|"") break ;;
+      esac
     done
-}
+  }
 
-# ==========================================
-# 5. USER MANAGEMENT
-# ==========================================
-
-show_users_table() {
+  show_users_table() {
     if [[ ${#ACL_USERS[@]} -eq 0 ]]; then
-        gum style --italic --foreground "#6272a4" -- "No users configured."
-        return
+      gum style --italic --foreground "#6272a4" -- "No users configured."
+      return
     fi
     
     local csv="Username,Name,Email,Health Alerts,ACL Type,ACL Value\n"
     for u in "${!ACL_USERS[@]}"; do
-        IFS='|' read -r name email phone health type val <<< "${ACL_USERS[$u]}"
-        csv+="\"$u\",\"$name\",\"$email\",\"$health\",\"$type\",\"$val\"\n"
+      IFS='|' read -r name email phone health type input <<< "${ACL_USERS[$u]}"
+      csv+="\"$u\",\"$name\",\"$email\",\"$health\",\"$type\",\"$input\"\n"
     done
     
     printf "%b" "$csv" | gum table
-}
+  }
 
-add_user() {
+  add_user() {
     if [[ ${#ACL_USERS[@]} -ge 20 ]]; then
-        gum style --foreground "#ffb86c" -- "⚠ Maximum of 20 users reached."
-        sleep 2; return
+      gum style --foreground "#ffb86c" -- "⚠ Maximum of 20 users reached."
+      sleep 2; return
     fi
 
     local name username email phone health_alert acl_type acl_value
     
     get_valid_input username "Username" "^[a-z0-9_-]+$" true ""
     if [[ -n "${ACL_USERS[$username]}" ]]; then
-        gum style --foreground "#ff0000" -- "✖ Username already exists."
-        sleep 2; return
+      gum style --foreground "#ff0000" -- "✖ Username already exists."
+      sleep 2; return
     fi
     
     get_valid_input name "Full Name" "" true ""
@@ -653,21 +623,21 @@ add_user() {
     acl_type=$(gum choose "Assign to Group" "Manual Service Selection")
     
     if [[ "$acl_type" == "Assign to Group" ]]; then
-        acl_type="group"
-        local group_keys=("${!ACL_GROUPS[@]}")
-        acl_value=$(gum choose "${group_keys[@]}")
+      acl_type="group"
+      local group_keys=("${!ACL_GROUPS[@]}")
+      acl_value=$(gum choose "${group_keys[@]}")
     else
-        acl_type="manual"
-        gum style --foreground "#50fa7b" -- "Select services for $username:"
-        acl_value=$(gum choose --no-limit "${ACL_SERVICES[@]}" | paste -sd "," -)
+      acl_type="manual"
+      gum style --foreground "#50fa7b" -- "Select services for $username:"
+      acl_value=$(gum choose --no-limit "${ACL_SERVICES[@]}" | paste -sd "," -)
     fi
     
     ACL_USERS["$username"]="$name|$email|$phone|$health_alert|$acl_type|$acl_value"
     gum style --foreground "#50fa7b" -- "✔ User '$username' created."
     sleep 1
-}
+  }
 
-edit_user() {
+  edit_user() {
     if [[ ${#ACL_USERS[@]} -eq 0 ]]; then return; fi
     
     local user_keys=("${!ACL_USERS[@]}")
@@ -686,35 +656,35 @@ edit_user() {
     get_valid_input phone "Phone Number" "$PHONE_REGEX" false "$curr_phone"
     
     if [[ "$username" == "admin" ]]; then
-        gum style --foreground "#ffb86c" -- "Admin health alerts and ACL settings cannot be changed."
-        health_alert="true"
-        acl_type="group"
-        acl_value="admin"
-        sleep 2
+      gum style --foreground "#ffb86c" -- "Admin health alerts and ACL settings cannot be changed."
+      health_alert="true"
+      acl_type="group"
+      acl_value="admin"
+      sleep 2
     else
-        gum style -- "Inform about server health? (Currently: $curr_health)"
-        if gum confirm; then health_alert="true"; else health_alert="false"; fi
+      gum style -- "Inform about server health? (Currently: $curr_health)"
+      if gum confirm; then health_alert="true"; else health_alert="false"; fi
 
         gum style -- "How should ACL be managed? (Currently: $curr_type)"
         acl_type=$(gum choose "Assign to Group" "Manual Service Selection")
         
         if [[ "$acl_type" == "Assign to Group" ]]; then
-            acl_type="group"
-            local group_keys=("${!ACL_GROUPS[@]}")
-            acl_value=$(gum choose "${group_keys[@]}")
+          acl_type="group"
+          local group_keys=("${!ACL_GROUPS[@]}")
+          acl_value=$(gum choose "${group_keys[@]}")
         else
-            acl_type="manual"
-            gum style --foreground "#50fa7b" -- "Select services for $username:"
-            acl_value=$(gum choose --no-limit "${ACL_SERVICES[@]}" | paste -sd "," -)
+          acl_type="manual"
+          gum style --foreground "#50fa7b" -- "Select services for $username:"
+          acl_value=$(gum choose --no-limit "${ACL_SERVICES[@]}" | paste -sd "," -)
         fi
-    fi
-    
-    ACL_USERS["$username"]="$name|$email|$phone|$health_alert|$acl_type|$acl_value"
-    gum style --foreground "#50fa7b" -- "✔ User '$username' updated."
-    sleep 1
-}
+      fi
+      
+      ACL_USERS["$username"]="$name|$email|$phone|$health_alert|$acl_type|$acl_value"
+      gum style --foreground "#50fa7b" -- "✔ User '$username' updated."
+      sleep 1
+  }
 
-remove_user() {
+  remove_user() {
     if [[ ${#ACL_USERS[@]} -eq 0 ]]; then return; fi
     
     local user_keys=("${!ACL_USERS[@]}")
@@ -723,39 +693,35 @@ remove_user() {
     
     if [[ -z "$username" ]]; then return; fi
     if [[ "$username" == "admin" ]]; then
-        gum style --foreground "#ff0000" -- "✖ The admin user cannot be removed."
-        sleep 2; return
+      gum style --foreground "#ff0000" -- "✖ The admin user cannot be removed."
+      sleep 2; return
     fi
 
     gum style --foreground "#ff5555" --bold -- "Are you sure you want to delete '$username'?"
     if gum confirm; then
-        unset ACL_USERS["$username"]
-        gum style --foreground "#50fa7b" -- "✔ User deleted."
-        sleep 1
+      unset ACL_USERS["$username"]
+      gum style --foreground "#50fa7b" -- "✔ User deleted."
+      sleep 1
     fi
-}
+  }
 
-manage_users_menu() {
+  manage_users_menu() {
     while true; do
-        clear
-        gum style --border double --margin "1" --padding "0 1" --border-foreground "#ff79c6" -- "User Management (${#ACL_USERS[@]}/20)"
-        show_users_table
-        
-        local action=$(gum choose "Add User" "Edit User" "Remove User" "Back")
-        case "$action" in
-            "Add User") add_user ;;
-            "Edit User") edit_user ;;
-            "Remove User") remove_user ;;
-            "Back"|"") break ;;
-        esac
+      clear
+      gum style --border double --margin "1" --padding "0 1" --border-foreground "#ff79c6" -- "User Management (${#ACL_USERS[@]}/20)"
+      show_users_table
+      
+      local action=$(gum choose "Add User" "Edit User" "Remove User" "Back")
+      case "$action" in
+        "Add User") add_user ;;
+        "Edit User") edit_user ;;
+        "Remove User") remove_user ;;
+        "Back"|"") break ;;
+      esac
     done
-}
+  }
 
-# ==========================================
-# 6. SETUP & EXPORT
-# ==========================================
-
-setup_admin_user() {
+  setup_admin_user() {
     if [[ -n "${ACL_USERS["admin"]}" ]]; then return; fi
 
     gum style --border rounded --padding "1 2" --margin "1" --border-foreground "#ff79c6" -- "Initial Setup: Administrator User"
@@ -768,9 +734,9 @@ setup_admin_user() {
     ACL_USERS["admin"]="$name|$email|$phone|true|group|admin"
     gum style --foreground "#50fa7b" -- "✔ Administrator configured."
     sleep 1
-}
+  }
 
-export_data() {
+  export_data() {
     clear
     gum style --foreground "#50fa7b" --bold -- "--- Provisioning Data Payload ---"
     echo "GROUPS:"
@@ -782,54 +748,31 @@ export_data() {
     for user in "${!ACL_USERS[@]}"; do
         echo "  $user -> ${ACL_USERS[$user]}"
     done
+  }
+
+  compute_acl_services
+  ACL_GROUPS["admin"]=$(printf "%s," "${ACL_SERVICES[@]}" | sed 's/,$//')
+  setup_admin_user
+
+  while true; do
+    clear
+    gum style --border double --margin "1" --padding "1 2" --border-foreground "#bd93f9" -- "Numbus Deployment - Access Management"
+    gum style -- "Current state: ${#ACL_GROUPS[@]}/10 Groups | ${#ACL_USERS[@]}/20 Users"
+    echo ""
+
+    local choice=$(gum choose "1. Manage Groups" "2. Manage Users" "3. Finish & Apply Configuration")
+
+    case "$choice" in
+      "1. Manage Groups") manage_groups_menu ;;
+      "2. Manage Users") manage_users_menu ;;
+      "3. Finish & Apply Configuration") 
+        export_data
+        break
+        ;;
+    esac
+  done
 }
 
-main_menu() {
-    compute_acl_services
-    ACL_GROUPS["admin"]=$(printf "%s," "${ACL_SERVICES[@]}" | sed 's/,$//')
-    setup_admin_user
-
-    while true; do
-        clear
-        gum style --border double --margin "1" --padding "1 2" --border-foreground "#bd93f9" -- "Server Deployment - Access Management"
-        gum style -- "Current state: ${#ACL_GROUPS[@]}/10 Groups | ${#ACL_USERS[@]}/20 Users"
-        echo ""
-        
-        local choice=$(gum choose "1. Manage Groups" "2. Manage Users" "3. Finish & Apply Configuration" "4. Exit without saving")
-            
-        case "$choice" in
-            "1. Manage Groups") manage_groups_menu ;;
-            "2. Manage Users") manage_users_menu ;;
-            "3. Finish & Apply Configuration") 
-                export_data
-                break
-                ;;
-            "4. Exit without saving"|"") 
-                echo "Aborting..."
-                exit 1 
-                ;;
-        esac
-    done
-}
-
-
-########################################################################""
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
 disks_selection() {
   gum style --border normal --margin "1" --padding "1 2" --border-foreground 212 "
   ⚠️  $(gum style --foreground 212 'WARNING:') You will choose the disks to install NixOS on.
@@ -1399,6 +1342,8 @@ EMAIL_REGEX='^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$'
 PORT_REGEX='^[0-9]{1,5}$'
 SSH_KEY_REGEX='^ssh-[a-z0-9]+ [A-Za-z0-9+/]+.*'
 PHONE_REGEX='^\+[1-9][0-9]{7,14}$' 
+
+
 # --- DEFAULTS VARIABLES ---<
 
 

From 73adb395c05f227c498ecf5aad994d92c6c3d8fe Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Sat, 2 May 2026 12:52:08 +0200
Subject: [PATCH 42/43] Migrated from multi repos to monorepo architecture.

---
 .aiexclude                                    |   1 +
 .gitignore                                    |   2 +-
 {web => deploy/GUI/web}/index.html            |   0
 {web => deploy/GUI/web}/logic/bridge.py       |   0
 .../media/dark/numbus-backup-server-dark.svg  |   0
 .../web}/media/dark/numbus-computer-dark.svg  |   0
 .../web}/media/dark/numbus-server-dark.svg    |   0
 .../web}/media/dark/numbus-template-dark.svg  |   0
 .../GUI/web}/media/dark/numbus-tv-dark.svg    |   0
 {web => deploy/GUI/web}/media/favicon.ico     | Bin
 .../light/numbus-backup-server-light.svg      |   0
 .../media/light/numbus-computer-light.svg     |   0
 .../web}/media/light/numbus-server-light.svg  |   0
 .../media/light/numbus-template-light.svg     |   0
 .../GUI/web}/media/light/numbus-tv-light.svg  |   0
 {web => deploy/GUI/web}/media/logo.png        | Bin
 .../GUI/web}/pages/configuration.html         |   0
 .../GUI/web}/pages/installation.html          |   0
 .../GUI/web}/pages/post-installation.html     |   0
 .../GUI/web}/pages/preparation.html           |   0
 deploy/GUI/web/ux/buttons.md                  |  22 +
 deploy/GUI/web/ux/color_palette.md            |  10 +
 deploy/GUI/web/ux/css_guidelines.md           |   8 +
 deploy/GUI/web/ux/text.md                     |  43 ++
 deploy.sh => deploy/TUI/deploy.sh             |  86 ++--
 flake.nix                                     |  74 ++++
 modules/backup/default.nix                    |  13 +
 modules/backup/flake.nix                      |  11 +
 modules/backup/global.nix                     |  53 +++
 modules/backup/hardware/boot.nix              |  13 +
 modules/backup/hardware/cpu.nix               |   9 +
 modules/backup/hardware/default.nix           |  10 +
 modules/backup/hardware/disks.nix             | 328 +++++++++++++++
 modules/backup/hardware/pcie-coral.nix        | 111 +++++
 modules/backup/hardware/spindown.nix          |  24 ++
 modules/backup/mail/clamav.nix                |  89 ++++
 modules/backup/mail/default.nix               |  10 +
 modules/backup/mail/smart.nix                 |  61 +++
 modules/backup/mail/smtp.nix                  |  84 ++++
 modules/backup/mail/systemd.nix               |  55 +++
 modules/backup/misc/default.nix               |  10 +
 modules/backup/misc/internationalisation.nix  |  24 ++
 modules/backup/misc/power.nix                 |  30 ++
 modules/backup/misc/update.nix                |  23 ++
 modules/backup/misc/users.nix                 |  16 +
 modules/backup/networking/default.nix         |   8 +
 modules/backup/networking/firewall.nix        |  13 +
 modules/backup/networking/networking.nix      |  60 +++
 modules/backup/packages/default.nix           |  10 +
 modules/backup/packages/packages.nix          |  25 ++
 modules/backup/packages/podman.nix            |  16 +
 modules/backup/packages/ssh.nix               |   5 +
 modules/backup/packages/terminal.nix          |  24 ++
 .../backup/services/applications/authelia.nix | 171 ++++++++
 .../backup/services/applications/crafty.nix   |  74 ++++
 .../backup/services/applications/dashy.nix    |  97 +++++
 .../backup/services/applications/default.nix  |  29 ++
 .../backup/services/applications/frigate.nix  |  83 ++++
 .../backup/services/applications/gitea.nix    | 103 +++++
 .../services/applications/home-assistant.nix  | 177 ++++++++
 .../backup/services/applications/homepage.nix |  63 +++
 .../backup/services/applications/immich.nix   | 190 +++++++++
 .../backup/services/applications/it-tools.nix |  54 +++
 .../backup/services/applications/jellyfin.nix |  69 ++++
 .../backup/services/applications/lldap.nix    |  84 ++++
 modules/backup/services/applications/n8n.nix  |  72 ++++
 .../backup/services/applications/netbird.nix  | 203 +++++++++
 .../services/applications/netbootxyz.nix      |  75 ++++
 .../services/applications/nextcloud.nix       | 384 ++++++++++++++++++
 modules/backup/services/applications/ntfy.nix |  62 +++
 modules/backup/services/applications/odoo.nix | 118 ++++++
 .../backup/services/applications/passbolt.nix | 112 +++++
 .../backup/services/applications/traefik.nix  | 178 ++++++++
 .../services/applications/uptime-kuma.nix     |  54 +++
 .../backup/services/applications/vscodium.nix |  81 ++++
 modules/backup/services/dns/adguard.nix       |  53 +++
 modules/backup/services/dns/default.nix       |  10 +
 modules/backup/services/dns/pi-hole.nix       |  71 ++++
 modules/backup/services/system/clamav.nix     |  91 +++++
 modules/backup/services/system/default.nix    |  11 +
 .../backup/services/system/virtualization.nix |  17 +
 modules/common/default.nix                    |  12 +
 modules/common/global.nix                     |  42 ++
 modules/common/hardware/cpu.nix               |   9 +
 modules/common/hardware/default.nix           |   9 +
 modules/common/hardware/disks/boot.nix        | 192 +++++++++
 modules/common/hardware/disks/content.nix     | 107 +++++
 modules/common/hardware/disks/default.nix     |  12 +
 .../hardware/disks/mergerfs-snapraid.nix      |  41 ++
 modules/common/hardware/disks/mirror.nix      |  75 ++++
 modules/common/hardware/disks/parity.nix      | 107 +++++
 modules/common/hardware/disks/spindown.nix    |  46 +++
 modules/common/mail/default.nix               |  10 +
 modules/common/mail/disk-space.nix            | 130 ++++++
 modules/common/mail/smart.nix                 |  61 +++
 modules/common/mail/smtp.nix                  |  99 +++++
 modules/common/misc/audio.nix                 |  15 +
 modules/common/misc/default.nix               |  13 +
 modules/common/misc/internationalization.nix  |  30 ++
 modules/common/misc/power.nix                 |  12 +
 modules/common/misc/printer.nix               |   8 +
 modules/common/misc/update.nix                |  23 ++
 modules/common/misc/users.nix                 |  20 +
 modules/common/packages/default.nix           |  13 +
 modules/common/packages/fail2ban.nix          |   5 +
 modules/common/packages/flatpaks.nix          |  16 +
 modules/common/packages/numbus-cli.nix        | 155 +++++++
 modules/common/packages/ssh.nix               |  21 +
 modules/common/packages/terminal.nix          |  24 ++
 modules/common/packages/updates.nix           |  23 ++
 modules/computer/default.nix                  |   9 +
 modules/computer/global.nix                   |  32 ++
 modules/computer/hardware/boot.nix            |  24 ++
 modules/computer/hardware/cpu.nix             |   9 +
 modules/computer/hardware/default.nix         |  10 +
 modules/computer/hardware/disks.nix           | 328 +++++++++++++++
 modules/computer/hardware/nvidia.nix          |  56 +++
 modules/computer/misc/default.nix             |  11 +
 modules/computer/misc/networking.nix          |  12 +
 modules/computer/packages/default.nix         |  10 +
 .../computer/packages/desktop-environment.nix |  75 ++++
 modules/server/default.nix                    |  15 +
 modules/server/hardware/boot.nix              |  11 +
 modules/server/hardware/default.nix           |  12 +
 modules/server/hardware/pcie-coral.nix        | 111 +++++
 modules/server/mail/clamav.nix                |  89 ++++
 modules/server/mail/default.nix               |  12 +
 modules/server/mail/systemd.nix               |  55 +++
 modules/server/networking/default.nix         |   9 +
 modules/server/networking/firewall.nix        |  13 +
 modules/server/networking/networking.nix      |  60 +++
 modules/server/packages/default.nix           |  11 +
 modules/server/packages/packages.nix          |  25 ++
 modules/server/packages/podman.nix            |  16 +
 modules/server/service-helper.nix             | 181 +++++++++
 .../server/services/applications/authelia.nix | 171 ++++++++
 .../server/services/applications/crafty.nix   |  74 ++++
 .../server/services/applications/dashy.nix    |  97 +++++
 .../server/services/applications/default.nix  |  29 ++
 .../server/services/applications/frigate.nix  |  83 ++++
 .../server/services/applications/gitea.nix    | 103 +++++
 .../services/applications/home-assistant.nix  | 177 ++++++++
 .../server/services/applications/homepage.nix |  63 +++
 .../server/services/applications/immich.nix   | 190 +++++++++
 .../server/services/applications/it-tools.nix |  54 +++
 .../server/services/applications/jellyfin.nix |  69 ++++
 .../server/services/applications/lldap.nix    |  84 ++++
 modules/server/services/applications/n8n.nix  |  72 ++++
 .../server/services/applications/netbird.nix  | 203 +++++++++
 .../services/applications/netbootxyz.nix      |  75 ++++
 .../services/applications/nextcloud.nix       | 384 ++++++++++++++++++
 modules/server/services/applications/ntfy.nix |  62 +++
 modules/server/services/applications/odoo.nix | 118 ++++++
 .../server/services/applications/passbolt.nix | 112 +++++
 .../server/services/applications/traefik.nix  | 178 ++++++++
 .../services/applications/uptime-kuma.nix     |  54 +++
 .../server/services/applications/vscodium.nix |  81 ++++
 modules/server/services/default.nix           |   9 +
 modules/server/services/dns/adguard.nix       |  53 +++
 modules/server/services/dns/default.nix       |  10 +
 modules/server/services/dns/pi-hole.nix       |  71 ++++
 modules/server/services/global.nix            |  19 +
 .../server/services/system/backup-client.nix  |   5 +
 modules/server/services/system/clamav.nix     |  91 +++++
 modules/server/services/system/default.nix    |  10 +
 .../server/services/system/virtualization.nix |  17 +
 modules/tv/configuration.nix                  | 144 +++++++
 modules/tv/flake.nix                          |  23 ++
 modules/tv/flatpak.nix                        |  18 +
 .../configuration.nix                         |   0
 .../flake.nix                                 |   0
 .../sops-nix/.sops.yaml                       |   0
 .../sops-nix/secrets.yaml                     |   0
 .../configuration.nix                         |   0
 .../{numbus-computer => computer}/flake.nix   |   0
 .../sops-nix/.sops.yaml                       |   0
 .../sops-nix/secrets.yaml                     |   0
 .../{numbus-server => server}/.sops.yaml      |   0
 .../custom-configuration.nix                  |   0
 templates/{numbus-server => server}/flake.nix |   0
 .../numbus-generated.nix                      |   0
 .../secrets/disks/boot.yaml                   |   0
 .../secrets/disks/content.yaml                |   0
 .../secrets/disks/parity.yaml                 |   0
 .../secrets/podman/adguard.yaml               |   0
 .../secrets/podman/authelia.yaml              |   0
 .../secrets/podman/crafty.yaml                |   0
 .../secrets/podman/dashy.yaml                 |   0
 .../secrets/podman/frigate.yaml               |   0
 .../secrets/podman/gitea.yaml                 |   0
 .../secrets/podman/gitlab.yaml                |   0
 .../secrets/podman/home-assistant.yaml        |   0
 .../secrets/podman/homepage.yaml              |   0
 .../secrets/podman/immich.yaml                |   0
 .../secrets/podman/it-tools.yaml              |   0
 .../secrets/podman/jellyfin.yaml              |   0
 .../secrets/podman/lldap.yaml                 |   0
 .../secrets/podman/n8n.yaml                   |   0
 .../secrets/podman/netbird.yaml               |   0
 .../secrets/podman/netbootxyz.yaml            |   0
 .../secrets/podman/netbox.yaml                |   0
 .../secrets/podman/nextcloud.yaml             |   0
 .../secrets/podman/ntfy.yaml                  |   0
 .../secrets/podman/odoo.yaml                  |   0
 .../secrets/podman/passbolt.yaml              |   0
 .../secrets/podman/pi-hole.yaml               |   0
 .../secrets/podman/traefik.yaml               |   0
 .../secrets/podman/uptime-kuma.yaml           |   0
 .../secrets/podman/vscodium.yaml              |   0
 .../secrets/system/backup-client.yaml         |   0
 .../secrets/system/clamav.yaml                |   0
 .../secrets/system/mail.yaml                  |   0
 .../secrets/system/ssh.yaml                   |   0
 .../secrets/system/virtualization.yaml        |   0
 templates/{numbus-tv => tv}/configuration.nix |   0
 templates/{numbus-tv => tv}/flake.nix         |   0
 .../{numbus-tv => tv}/sops-nix/.sops.yaml     |   0
 .../{numbus-tv => tv}/sops-nix/secrets.yaml   |   0
 218 files changed, 9639 insertions(+), 57 deletions(-)
 rename {web => deploy/GUI/web}/index.html (100%)
 rename {web => deploy/GUI/web}/logic/bridge.py (100%)
 rename {web => deploy/GUI/web}/media/dark/numbus-backup-server-dark.svg (100%)
 rename {web => deploy/GUI/web}/media/dark/numbus-computer-dark.svg (100%)
 rename {web => deploy/GUI/web}/media/dark/numbus-server-dark.svg (100%)
 rename {web => deploy/GUI/web}/media/dark/numbus-template-dark.svg (100%)
 rename {web => deploy/GUI/web}/media/dark/numbus-tv-dark.svg (100%)
 rename {web => deploy/GUI/web}/media/favicon.ico (100%)
 rename {web => deploy/GUI/web}/media/light/numbus-backup-server-light.svg (100%)
 rename {web => deploy/GUI/web}/media/light/numbus-computer-light.svg (100%)
 rename {web => deploy/GUI/web}/media/light/numbus-server-light.svg (100%)
 rename {web => deploy/GUI/web}/media/light/numbus-template-light.svg (100%)
 rename {web => deploy/GUI/web}/media/light/numbus-tv-light.svg (100%)
 rename {web => deploy/GUI/web}/media/logo.png (100%)
 rename {web => deploy/GUI/web}/pages/configuration.html (100%)
 rename {web => deploy/GUI/web}/pages/installation.html (100%)
 rename {web => deploy/GUI/web}/pages/post-installation.html (100%)
 rename {web => deploy/GUI/web}/pages/preparation.html (100%)
 create mode 100644 deploy/GUI/web/ux/buttons.md
 create mode 100644 deploy/GUI/web/ux/color_palette.md
 create mode 100644 deploy/GUI/web/ux/css_guidelines.md
 create mode 100644 deploy/GUI/web/ux/text.md
 rename deploy.sh => deploy/TUI/deploy.sh (97%)
 create mode 100644 flake.nix
 create mode 100644 modules/backup/default.nix
 create mode 100644 modules/backup/flake.nix
 create mode 100644 modules/backup/global.nix
 create mode 100644 modules/backup/hardware/boot.nix
 create mode 100644 modules/backup/hardware/cpu.nix
 create mode 100644 modules/backup/hardware/default.nix
 create mode 100644 modules/backup/hardware/disks.nix
 create mode 100644 modules/backup/hardware/pcie-coral.nix
 create mode 100644 modules/backup/hardware/spindown.nix
 create mode 100644 modules/backup/mail/clamav.nix
 create mode 100644 modules/backup/mail/default.nix
 create mode 100644 modules/backup/mail/smart.nix
 create mode 100644 modules/backup/mail/smtp.nix
 create mode 100644 modules/backup/mail/systemd.nix
 create mode 100644 modules/backup/misc/default.nix
 create mode 100644 modules/backup/misc/internationalisation.nix
 create mode 100644 modules/backup/misc/power.nix
 create mode 100644 modules/backup/misc/update.nix
 create mode 100644 modules/backup/misc/users.nix
 create mode 100644 modules/backup/networking/default.nix
 create mode 100644 modules/backup/networking/firewall.nix
 create mode 100644 modules/backup/networking/networking.nix
 create mode 100644 modules/backup/packages/default.nix
 create mode 100644 modules/backup/packages/packages.nix
 create mode 100644 modules/backup/packages/podman.nix
 create mode 100644 modules/backup/packages/ssh.nix
 create mode 100644 modules/backup/packages/terminal.nix
 create mode 100644 modules/backup/services/applications/authelia.nix
 create mode 100644 modules/backup/services/applications/crafty.nix
 create mode 100644 modules/backup/services/applications/dashy.nix
 create mode 100644 modules/backup/services/applications/default.nix
 create mode 100644 modules/backup/services/applications/frigate.nix
 create mode 100644 modules/backup/services/applications/gitea.nix
 create mode 100644 modules/backup/services/applications/home-assistant.nix
 create mode 100644 modules/backup/services/applications/homepage.nix
 create mode 100644 modules/backup/services/applications/immich.nix
 create mode 100644 modules/backup/services/applications/it-tools.nix
 create mode 100644 modules/backup/services/applications/jellyfin.nix
 create mode 100644 modules/backup/services/applications/lldap.nix
 create mode 100644 modules/backup/services/applications/n8n.nix
 create mode 100644 modules/backup/services/applications/netbird.nix
 create mode 100644 modules/backup/services/applications/netbootxyz.nix
 create mode 100644 modules/backup/services/applications/nextcloud.nix
 create mode 100644 modules/backup/services/applications/ntfy.nix
 create mode 100644 modules/backup/services/applications/odoo.nix
 create mode 100644 modules/backup/services/applications/passbolt.nix
 create mode 100644 modules/backup/services/applications/traefik.nix
 create mode 100644 modules/backup/services/applications/uptime-kuma.nix
 create mode 100644 modules/backup/services/applications/vscodium.nix
 create mode 100644 modules/backup/services/dns/adguard.nix
 create mode 100644 modules/backup/services/dns/default.nix
 create mode 100644 modules/backup/services/dns/pi-hole.nix
 create mode 100644 modules/backup/services/system/clamav.nix
 create mode 100644 modules/backup/services/system/default.nix
 create mode 100644 modules/backup/services/system/virtualization.nix
 create mode 100644 modules/common/default.nix
 create mode 100644 modules/common/global.nix
 create mode 100644 modules/common/hardware/cpu.nix
 create mode 100644 modules/common/hardware/default.nix
 create mode 100644 modules/common/hardware/disks/boot.nix
 create mode 100644 modules/common/hardware/disks/content.nix
 create mode 100644 modules/common/hardware/disks/default.nix
 create mode 100644 modules/common/hardware/disks/mergerfs-snapraid.nix
 create mode 100644 modules/common/hardware/disks/mirror.nix
 create mode 100644 modules/common/hardware/disks/parity.nix
 create mode 100644 modules/common/hardware/disks/spindown.nix
 create mode 100644 modules/common/mail/default.nix
 create mode 100644 modules/common/mail/disk-space.nix
 create mode 100644 modules/common/mail/smart.nix
 create mode 100644 modules/common/mail/smtp.nix
 create mode 100644 modules/common/misc/audio.nix
 create mode 100644 modules/common/misc/default.nix
 create mode 100644 modules/common/misc/internationalization.nix
 create mode 100644 modules/common/misc/power.nix
 create mode 100644 modules/common/misc/printer.nix
 create mode 100644 modules/common/misc/update.nix
 create mode 100644 modules/common/misc/users.nix
 create mode 100644 modules/common/packages/default.nix
 create mode 100644 modules/common/packages/fail2ban.nix
 create mode 100644 modules/common/packages/flatpaks.nix
 create mode 100644 modules/common/packages/numbus-cli.nix
 create mode 100644 modules/common/packages/ssh.nix
 create mode 100644 modules/common/packages/terminal.nix
 create mode 100644 modules/common/packages/updates.nix
 create mode 100644 modules/computer/default.nix
 create mode 100644 modules/computer/global.nix
 create mode 100644 modules/computer/hardware/boot.nix
 create mode 100644 modules/computer/hardware/cpu.nix
 create mode 100644 modules/computer/hardware/default.nix
 create mode 100644 modules/computer/hardware/disks.nix
 create mode 100644 modules/computer/hardware/nvidia.nix
 create mode 100644 modules/computer/misc/default.nix
 create mode 100644 modules/computer/misc/networking.nix
 create mode 100644 modules/computer/packages/default.nix
 create mode 100644 modules/computer/packages/desktop-environment.nix
 create mode 100644 modules/server/default.nix
 create mode 100644 modules/server/hardware/boot.nix
 create mode 100644 modules/server/hardware/default.nix
 create mode 100644 modules/server/hardware/pcie-coral.nix
 create mode 100644 modules/server/mail/clamav.nix
 create mode 100644 modules/server/mail/default.nix
 create mode 100644 modules/server/mail/systemd.nix
 create mode 100644 modules/server/networking/default.nix
 create mode 100644 modules/server/networking/firewall.nix
 create mode 100644 modules/server/networking/networking.nix
 create mode 100644 modules/server/packages/default.nix
 create mode 100644 modules/server/packages/packages.nix
 create mode 100644 modules/server/packages/podman.nix
 create mode 100644 modules/server/service-helper.nix
 create mode 100644 modules/server/services/applications/authelia.nix
 create mode 100644 modules/server/services/applications/crafty.nix
 create mode 100644 modules/server/services/applications/dashy.nix
 create mode 100644 modules/server/services/applications/default.nix
 create mode 100644 modules/server/services/applications/frigate.nix
 create mode 100644 modules/server/services/applications/gitea.nix
 create mode 100644 modules/server/services/applications/home-assistant.nix
 create mode 100644 modules/server/services/applications/homepage.nix
 create mode 100644 modules/server/services/applications/immich.nix
 create mode 100644 modules/server/services/applications/it-tools.nix
 create mode 100644 modules/server/services/applications/jellyfin.nix
 create mode 100644 modules/server/services/applications/lldap.nix
 create mode 100644 modules/server/services/applications/n8n.nix
 create mode 100644 modules/server/services/applications/netbird.nix
 create mode 100644 modules/server/services/applications/netbootxyz.nix
 create mode 100644 modules/server/services/applications/nextcloud.nix
 create mode 100644 modules/server/services/applications/ntfy.nix
 create mode 100644 modules/server/services/applications/odoo.nix
 create mode 100644 modules/server/services/applications/passbolt.nix
 create mode 100644 modules/server/services/applications/traefik.nix
 create mode 100644 modules/server/services/applications/uptime-kuma.nix
 create mode 100644 modules/server/services/applications/vscodium.nix
 create mode 100644 modules/server/services/default.nix
 create mode 100644 modules/server/services/dns/adguard.nix
 create mode 100644 modules/server/services/dns/default.nix
 create mode 100644 modules/server/services/dns/pi-hole.nix
 create mode 100644 modules/server/services/global.nix
 create mode 100644 modules/server/services/system/backup-client.nix
 create mode 100644 modules/server/services/system/clamav.nix
 create mode 100644 modules/server/services/system/default.nix
 create mode 100644 modules/server/services/system/virtualization.nix
 create mode 100644 modules/tv/configuration.nix
 create mode 100644 modules/tv/flake.nix
 create mode 100644 modules/tv/flatpak.nix
 rename templates/{numbus-backup-server => backup}/configuration.nix (100%)
 rename templates/{numbus-backup-server => backup}/flake.nix (100%)
 rename templates/{numbus-backup-server => backup}/sops-nix/.sops.yaml (100%)
 rename templates/{numbus-backup-server => backup}/sops-nix/secrets.yaml (100%)
 rename templates/{numbus-computer => computer}/configuration.nix (100%)
 rename templates/{numbus-computer => computer}/flake.nix (100%)
 rename templates/{numbus-computer => computer}/sops-nix/.sops.yaml (100%)
 rename templates/{numbus-computer => computer}/sops-nix/secrets.yaml (100%)
 rename templates/{numbus-server => server}/.sops.yaml (100%)
 rename templates/{numbus-server => server}/custom-configuration.nix (100%)
 rename templates/{numbus-server => server}/flake.nix (100%)
 rename templates/{numbus-server => server}/numbus-generated.nix (100%)
 rename templates/{numbus-server => server}/secrets/disks/boot.yaml (100%)
 rename templates/{numbus-server => server}/secrets/disks/content.yaml (100%)
 rename templates/{numbus-server => server}/secrets/disks/parity.yaml (100%)
 rename templates/{numbus-server => server}/secrets/podman/adguard.yaml (100%)
 rename templates/{numbus-server => server}/secrets/podman/authelia.yaml (100%)
 rename templates/{numbus-server => server}/secrets/podman/crafty.yaml (100%)
 rename templates/{numbus-server => server}/secrets/podman/dashy.yaml (100%)
 rename templates/{numbus-server => server}/secrets/podman/frigate.yaml (100%)
 rename templates/{numbus-server => server}/secrets/podman/gitea.yaml (100%)
 rename templates/{numbus-server => server}/secrets/podman/gitlab.yaml (100%)
 rename templates/{numbus-server => server}/secrets/podman/home-assistant.yaml (100%)
 rename templates/{numbus-server => server}/secrets/podman/homepage.yaml (100%)
 rename templates/{numbus-server => server}/secrets/podman/immich.yaml (100%)
 rename templates/{numbus-server => server}/secrets/podman/it-tools.yaml (100%)
 rename templates/{numbus-server => server}/secrets/podman/jellyfin.yaml (100%)
 rename templates/{numbus-server => server}/secrets/podman/lldap.yaml (100%)
 rename templates/{numbus-server => server}/secrets/podman/n8n.yaml (100%)
 rename templates/{numbus-server => server}/secrets/podman/netbird.yaml (100%)
 rename templates/{numbus-server => server}/secrets/podman/netbootxyz.yaml (100%)
 rename templates/{numbus-server => server}/secrets/podman/netbox.yaml (100%)
 rename templates/{numbus-server => server}/secrets/podman/nextcloud.yaml (100%)
 rename templates/{numbus-server => server}/secrets/podman/ntfy.yaml (100%)
 rename templates/{numbus-server => server}/secrets/podman/odoo.yaml (100%)
 rename templates/{numbus-server => server}/secrets/podman/passbolt.yaml (100%)
 rename templates/{numbus-server => server}/secrets/podman/pi-hole.yaml (100%)
 rename templates/{numbus-server => server}/secrets/podman/traefik.yaml (100%)
 rename templates/{numbus-server => server}/secrets/podman/uptime-kuma.yaml (100%)
 rename templates/{numbus-server => server}/secrets/podman/vscodium.yaml (100%)
 rename templates/{numbus-server => server}/secrets/system/backup-client.yaml (100%)
 rename templates/{numbus-server => server}/secrets/system/clamav.yaml (100%)
 rename templates/{numbus-server => server}/secrets/system/mail.yaml (100%)
 rename templates/{numbus-server => server}/secrets/system/ssh.yaml (100%)
 rename templates/{numbus-server => server}/secrets/system/virtualization.yaml (100%)
 rename templates/{numbus-tv => tv}/configuration.nix (100%)
 rename templates/{numbus-tv => tv}/flake.nix (100%)
 rename templates/{numbus-tv => tv}/sops-nix/.sops.yaml (100%)
 rename templates/{numbus-tv => tv}/sops-nix/secrets.yaml (100%)

diff --git a/.aiexclude b/.aiexclude
index 1bd21c2..213602f 100644
--- a/.aiexclude
+++ b/.aiexclude
@@ -1,4 +1,5 @@
 config/
+web/ux/
 test*
 .DS_Store
 .env
\ No newline at end of file
diff --git a/.gitignore b/.gitignore
index af6c9bb..213602f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,5 +1,5 @@
-web/ux/
 config/
+web/ux/
 test*
 .DS_Store
 .env
\ No newline at end of file
diff --git a/web/index.html b/deploy/GUI/web/index.html
similarity index 100%
rename from web/index.html
rename to deploy/GUI/web/index.html
diff --git a/web/logic/bridge.py b/deploy/GUI/web/logic/bridge.py
similarity index 100%
rename from web/logic/bridge.py
rename to deploy/GUI/web/logic/bridge.py
diff --git a/web/media/dark/numbus-backup-server-dark.svg b/deploy/GUI/web/media/dark/numbus-backup-server-dark.svg
similarity index 100%
rename from web/media/dark/numbus-backup-server-dark.svg
rename to deploy/GUI/web/media/dark/numbus-backup-server-dark.svg
diff --git a/web/media/dark/numbus-computer-dark.svg b/deploy/GUI/web/media/dark/numbus-computer-dark.svg
similarity index 100%
rename from web/media/dark/numbus-computer-dark.svg
rename to deploy/GUI/web/media/dark/numbus-computer-dark.svg
diff --git a/web/media/dark/numbus-server-dark.svg b/deploy/GUI/web/media/dark/numbus-server-dark.svg
similarity index 100%
rename from web/media/dark/numbus-server-dark.svg
rename to deploy/GUI/web/media/dark/numbus-server-dark.svg
diff --git a/web/media/dark/numbus-template-dark.svg b/deploy/GUI/web/media/dark/numbus-template-dark.svg
similarity index 100%
rename from web/media/dark/numbus-template-dark.svg
rename to deploy/GUI/web/media/dark/numbus-template-dark.svg
diff --git a/web/media/dark/numbus-tv-dark.svg b/deploy/GUI/web/media/dark/numbus-tv-dark.svg
similarity index 100%
rename from web/media/dark/numbus-tv-dark.svg
rename to deploy/GUI/web/media/dark/numbus-tv-dark.svg
diff --git a/web/media/favicon.ico b/deploy/GUI/web/media/favicon.ico
similarity index 100%
rename from web/media/favicon.ico
rename to deploy/GUI/web/media/favicon.ico
diff --git a/web/media/light/numbus-backup-server-light.svg b/deploy/GUI/web/media/light/numbus-backup-server-light.svg
similarity index 100%
rename from web/media/light/numbus-backup-server-light.svg
rename to deploy/GUI/web/media/light/numbus-backup-server-light.svg
diff --git a/web/media/light/numbus-computer-light.svg b/deploy/GUI/web/media/light/numbus-computer-light.svg
similarity index 100%
rename from web/media/light/numbus-computer-light.svg
rename to deploy/GUI/web/media/light/numbus-computer-light.svg
diff --git a/web/media/light/numbus-server-light.svg b/deploy/GUI/web/media/light/numbus-server-light.svg
similarity index 100%
rename from web/media/light/numbus-server-light.svg
rename to deploy/GUI/web/media/light/numbus-server-light.svg
diff --git a/web/media/light/numbus-template-light.svg b/deploy/GUI/web/media/light/numbus-template-light.svg
similarity index 100%
rename from web/media/light/numbus-template-light.svg
rename to deploy/GUI/web/media/light/numbus-template-light.svg
diff --git a/web/media/light/numbus-tv-light.svg b/deploy/GUI/web/media/light/numbus-tv-light.svg
similarity index 100%
rename from web/media/light/numbus-tv-light.svg
rename to deploy/GUI/web/media/light/numbus-tv-light.svg
diff --git a/web/media/logo.png b/deploy/GUI/web/media/logo.png
similarity index 100%
rename from web/media/logo.png
rename to deploy/GUI/web/media/logo.png
diff --git a/web/pages/configuration.html b/deploy/GUI/web/pages/configuration.html
similarity index 100%
rename from web/pages/configuration.html
rename to deploy/GUI/web/pages/configuration.html
diff --git a/web/pages/installation.html b/deploy/GUI/web/pages/installation.html
similarity index 100%
rename from web/pages/installation.html
rename to deploy/GUI/web/pages/installation.html
diff --git a/web/pages/post-installation.html b/deploy/GUI/web/pages/post-installation.html
similarity index 100%
rename from web/pages/post-installation.html
rename to deploy/GUI/web/pages/post-installation.html
diff --git a/web/pages/preparation.html b/deploy/GUI/web/pages/preparation.html
similarity index 100%
rename from web/pages/preparation.html
rename to deploy/GUI/web/pages/preparation.html
diff --git a/deploy/GUI/web/ux/buttons.md b/deploy/GUI/web/ux/buttons.md
new file mode 100644
index 0000000..f26c0bd
--- /dev/null
+++ b/deploy/GUI/web/ux/buttons.md
@@ -0,0 +1,22 @@
+# Buttons
+
+1. Button with :
+- an offset ring on focus
+- a small shadow
+- a nice transition
+- a disabled feature
+
+```html
+px-10 py-3 bg-fuchsia-600 rounded-xl font-bold shadow-lg shadow-fuchsia-600/30 transition duration-200 hover:bg-fuchsia-500 focus:outline-none focus:ring-2 focus:ring-fuchsia-500 focus:ring-offset-2 focus:ring-offset-slate-700 disabled:opacity-50 disabled:cursor-not-allowed
+```
+
+2. Button with :
+- a grow transformation on hover
+- a gradient
+- a small shadow
+- a nice transition
+- a disabled feature
+
+```html
+px-10 py-3 text-white font-bold rounded-xl scale-100 transition duration-200 ease-in bg-gradient-to-r from-fuchsia-500 via-fuchsia-600 to-fuchsia-700 hover:scale-105 hover:bg-gradient-to-br shadow-lg shadow-fuchsia-500/30 dark:shadow-lg dark:shadow-fuchsia-800/80 disabled:opacity-50 disabled:cursor-not-allowed
+```
\ No newline at end of file
diff --git a/deploy/GUI/web/ux/color_palette.md b/deploy/GUI/web/ux/color_palette.md
new file mode 100644
index 0000000..bf8b63d
--- /dev/null
+++ b/deploy/GUI/web/ux/color_palette.md
@@ -0,0 +1,10 @@
+# Color palette
+
+|Usage|Name|Tailwind code|Matching border|
+|-|-|-|-|
+|Body background|Slate|slate-900|N/A|
+|Cards Background|Slate|slate-800|slate-700|
+|Accent|Fuchsia|fuchsia-600|fuchsia-600
+|Warning|Amber|amber-500|amber-400|
+|Success|Emerald|emerald-500|emerald-400|
+|Failure|Rose|rose-600|rose-500|
\ No newline at end of file
diff --git a/deploy/GUI/web/ux/css_guidelines.md b/deploy/GUI/web/ux/css_guidelines.md
new file mode 100644
index 0000000..da251a5
--- /dev/null
+++ b/deploy/GUI/web/ux/css_guidelines.md
@@ -0,0 +1,8 @@
+# Guidelines
+
+|Type|Importance|Classes|
+|-|-|-|
+|Title|1|text-4xl font-bold text-sky-400|
+|Title|2|text-4xl font-bold text-sky-400|
+|Title|3|text-4xl font-bold text-sky-400|
+|Title|4|text-4xl font-bold text-sky-400|
\ No newline at end of file
diff --git a/deploy/GUI/web/ux/text.md b/deploy/GUI/web/ux/text.md
new file mode 100644
index 0000000..3175b65
--- /dev/null
+++ b/deploy/GUI/web/ux/text.md
@@ -0,0 +1,43 @@
+# Taglines, subtitles and descriptions
+
+## Global
+
+**Tagline :** Reclaim Your Digital Independence.
+
+## Devices
+
+### Numbus Server
+The Infrastructure
+
+**Tagline :** Reclaim Your Cloud.
+
+**Subtitle :** Professional-grade hosting, strictly kept under your roof.
+
+**Detailed Description :** The Numbus Server is the heartbeat of your digital sovereignty. Built on an immutable NixOS foundation, it provides a rock-solid environment to host the services you rely on—from Nextcloud and Passbolt to Home Assistant and Frigate. Whether you are a small business looking to internalize your data or a power user securing your smart home, the Numbus Server delivers containerized efficiency and VM flexibility without the "Big Tech" tax. It’s not just a server; it’s your private corner of the internet, accessible from anywhere but controlled only by you.
+
+### Numbus Backup Server
+The Guardian
+
+**Tagline :** Your Digital Safety Net.
+
+**Subtitle :** Automated, high-efficiency protection for your entire ecosystem.
+
+**Detailed Description :** Data loss and downtime aren't just frustrating; they're disastrous. The Numbus Backup Server is your ecosystem's ultimate guardian. It works silently in the background, automatically pulling high-efficiency backups from your Numbus devices the moment they start charging. But it does more than just store files—it actively acts as a watchdog. By constantly monitoring your Numbus Server and other critical network devices, it immediately alerts you the second something goes offline. It is automated peace of mind for your entire digital infrastructure.
+
+### Numbus Computer
+The Workstation
+
+**Tagline :** The No-Bullshit Workstation.
+
+**Subtitle :** A modern, privacy-respecting machine built for work, creation, and play — without the corporate bloat.
+
+**Description :** Experience computing the way it was meant to be: entirely under your control. The Numbus Computer is a powerful workstation that strips away unwanted telemetry, forced updates, and bundled adware. Under the hood, it harnesses the unparalleled stability of NixOS, but we've hidden the complexity behind a sleek, intuitive interface. Our default apps make managing drivers, software, and system options a breeze. Whether you are coding, browsing, or gaming via Proton, the Numbus Computer delivers a snappy, secure, and truly "libre" desktop experience that respects your privacy while delivering the raw power of the hardware you paid for.
+
+### Numbus TV
+The Experience
+
+**Tagline :** Entertainment, Liberated.
+
+**Subtitle :** A premium cinematic experience free from trackers and forced subscriptions.
+
+**Detailed Description :** The Numbus TV reclaims your living room. Unlike "Smart" TVs that have essentially become surveillance machines and clutter your screen with unwanted ads, the Numbus TV offers a clean, classy interface powered by KDE Bigscreen. It’s a full-power PC in a TV’s body, allowing you to stream, browse, and play on your own terms. It doesn't force you into a specific ecosystem; it simply provides a beautiful, privacy-hardened portal to your favorite media. No spying, no "walled gardens"—just the big screen experience, perfected.
\ No newline at end of file
diff --git a/deploy.sh b/deploy/TUI/deploy.sh
similarity index 97%
rename from deploy.sh
rename to deploy/TUI/deploy.sh
index 243fce8..3c5b5b4 100755
--- a/deploy.sh
+++ b/deploy/TUI/deploy.sh
@@ -15,78 +15,50 @@ echod() {
 ssh_to_host() {
   local COMMAND="${1}"
   ssh -i "${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}" "${COMMAND}"
-}
+}"Invalid IP address format."
 
 get_valid_input() {
   local VAR_NAME="${1}"
   local HEADER="${2}"
   local PLACEHOLDER="${3}"
   local REGEX="${4}"
-  local MANDATORY="${5:-false}"
+  local MANDATORY="${5:-true}"
   local SENSITIVE="${6:-false}"
 
+  if [[ "${MANDATORY}" == "true" ]]; then
+    local PROMPT="(Required) > "
+  elif [[ "${MANDATORY}" == "false" ]]; then
+    local PROMPT="(Optional) > "
+  fi
+
   while true; do
-    local input
-    # --value pre-fills the input for easy editing
-    input=$(gum input --header "${HEADER}" --placeholder "${PLACEHOLDER}" --width 50)
-    
+    local INPUT=$(gum input --header "${HEADER}" --prompt "${PROMPT}" --placeholder "${PLACEHOLDER}")
+
     # Handle empty input
-    if [[ -z "$input" ]]; then
-      if [[ "$is_mandatory" == true ]]; then
+    if [[ -z "${INPUT}" ]]; then
+      if [[ "${MANDATORY}" == true ]]; then
         gum style --foreground "#ff0000" -- "✖ This field is mandatory."
         continue
       else
-        return_var=""
+        INPUT=""
         break
       fi
     fi
-    
+
     # Handle Regex Validation
-    if [[ -n "$regex" ]]; then
-      if [[ "$input" =~ $regex ]]; then
-        return_var="$input"
+    if [[ -n "${REGEX}" ]]; then
+      if [[ "${INPUT}" =~ ${REGEX} ]]; then
+        export "${VAR_NAME}"="${INPUT}"
         break
       else
         gum style --foreground "#ff0000" -- "✖ Invalid format. Please try again."
       fi
     else
-      return_var="$input"
+      export "${VAR_NAME}"="${INPUT}"
       break
     fi
   done
 }
-
-user_input() {
-  local VAR_NAME="${1}"
-  local HEADER="${2}"
-  local PLACEHOLDER="${3}"
-  local REGEX="${4}"
-  local ERROR_MSG="${5}"
-  local SENSITIVE="${6:-false}"
-
-  echo ""
-  gum style --foreground 212 --bold "${HEADER}"
-
-  while true; do
-    [[ "$SENSITIVE" == "false" ]] && INPUT_VALUE=$(gum input --placeholder "${PLACEHOLDER}")
-    [[ "$SENSITIVE" == "true" ]] && INPUT_VALUE=$(gum input --password --placeholder "${PLACEHOLDER}")
-
-    if [[ -z "${INPUT_VALUE}" ]]; then
-      echo "❌ Error: Input cannot be empty. Please provide the necessary information."
-      continue
-    fi
-
-    if [[ -n "${REGEX}" ]]; then
-      if [[ ! "${INPUT_VALUE}" =~ ${REGEX} ]]; then
-        echo "❌ Error: ${ERROR_MSG}"
-        continue
-      fi
-    fi
-
-    export "${VAR_NAME}"="${INPUT_VALUE}"
-    break
-  done
-}
 # --- UTILITY FUNCTIONS ---<
 
 
@@ -364,32 +336,31 @@ preparation() {
   gum confirm "Is the device ready ?" || { echo "❌ You need to prepare the device. The script cannot continue."; exit 1; }
 
   # LIVE TARGET SETTINGS
-  user_input "LIVE_TARGET_IP" "  Please provide the IP address of the target host :" "For example : 192.168.1.100" "${IP_REGEX}" "Invalid IP address format."
+  user_input "LIVE_TARGET_IP" "  Please provide the IP address of the target host :" "For example : 192.168.1.100" "${IP_REGEX}"
   user_input "LIVE_TARGET_PASSWORD" "  Please enter the password for '${TARGET_USER}@${LIVE_TARGET_IP}' :" "${LIVE_TARGET_IP}'s password" "" "" "true"
 
   # INTERNATIONALIZATION SETTINGS
-  user_input "INTERNATIONALIZATION_TIMEZONE" "  Please provide the wanted timezone :" "For example : Europe/Paris, Europe/Berlin, Europe/London, etc" "" ""
-  user_input "INTERNATIONALIZATION_LANGUAGE" "  Please provide the wanted language :" "For example : French, Deutsch, English, etc" "" ""
-  user_input "INTERNATIONALIZATION_COUNTRY" "  Please provide your country :" "For example : France, Germany, Great-Britain, etc" "" ""
+  user_input "INTERNATIONALIZATION_TIMEZONE" "  Please provide the wanted timezone :" "For example : Europe/Paris, Europe/Berlin, Europe/London, etc"
+  user_input "INTERNATIONALIZATION_LANGUAGE" "  Please provide the wanted language :" "For example : French, Deutsch, English, etc"
+  user_input "INTERNATIONALIZATION_COUNTRY" "  Please provide your country :" "For example : France, Germany, Great-Britain, etc"
 }
 
 configuration() {
   if [[ "${DEVICE_TYPE}" == "server" ]]; then
 
-
     # Users & Groups
-    user_input "SERVER_OWNER_NAME" "  Please provide the name of the owner of this server :" "For example : Steve" "" ""
-    user_input "SERVER_ADMIN_EMAIL" "  Please provide a valid ADMIN email address (ACME, system failures notifications, etc) :" "For example : myemail@mydomain.mytld" "${EMAIL_REGEX}" "Invalid email address format."
+    user_input "SERVER_OWNER_NAME" "  Please provide the name of the owner of this server :" "For example : Steve"
+    user_input "SERVER_ADMIN_EMAIL" "  Please provide a valid ADMIN email address (ACME, system failures notifications, etc) :" "For example : myemail@mydomain.mytld" "${EMAIL_REGEX}"
     user_input "AUTHORIZED_SSH_PUBLIC_KEY" "  Please provide the SSH public key of an authorized device (or a comma-separated list) :" "For example : ssh-ed25519 AAAAC3Nzam0uYewNAbxL8Fci8 user@your-pc or ssh-* * *, ssh-* * *, etc" "${SSH_KEY_REGEX}" "Invalid SSH key format (must start with ssh-...)."
 
     echo -e "\n\n ➡️  You will access your services via a domain name (e.g. cloud.mydomain.com) and containers need credentials to create those subdomains"
     # TRAEFIK SETTINGS
-    user_input "DOMAIN_NAME" "  Please provide the domain name (FQDN) your home server will use :" "For example : yourdomain.com" "${DOMAIN_REGEX}" "Invalid domain name format."
+    user_input "DOMAIN_NAME" "  Please provide the domain name (FQDN) your home server will use :" "For example : yourdomain.com" "${DOMAIN_REGEX}"
     user_input "CLOUDFLARE_DNS_API_TOKEN" "  Please provide a cloudflare API token with DNS zone permission :" "For example : bA7hdvCOuXGytlNKohi3ZGtlVpf5CHpLuCMiJrE" "" "" "true"
 
     echo -e "\n\n ➡️  Some services will be able to send you emails. For that you need an email that supports sending emails (like Gmail for example)"
     # SMTP SETTINGS
-    user_input "SMTP_SERVER_USERNAME" "  Please provide a valid sender email address :" "For example : myemail@gmail.com" "${EMAIL_REGEX}" "Invalid email address format."
+    user_input "SMTP_SERVER_USERNAME" "  Please provide a valid sender email address :" "For example : myemail@gmail.com" "${EMAIL_REGEX}"
     user_input "SMTP_SERVER_PASSWORD" "  Please provide the password of this email address :" "abcd efgh ijkl mnop" "" "" "true"
     user_input "SMTP_SERVER_HOST" "  Please provide the SMTP server endpoint :" "For Gmail : smtp.gmail.com" "${DOMAIN_REGEX}" "Invalid domain name format."
     user_input "SMTP_SERVER_PORT" "  Please provide the smtp TLS port :" "For Gmail : 587" "${PORT_REGEX}" "Invalid port number."
@@ -1343,7 +1314,10 @@ PORT_REGEX='^[0-9]{1,5}$'
 SSH_KEY_REGEX='^ssh-[a-z0-9]+ [A-Za-z0-9+/]+.*'
 PHONE_REGEX='^\+[1-9][0-9]{7,14}$' 
 
-
+GUM_INPUT_PADDING="1 1"
+GUM_INPUT_HEADER_FOREGROUND="212"
+GUM_INPUT_CURSOR_FOREGROUND="212"
+GUM_INPUT_TIMEOUT="3600"
 # --- DEFAULTS VARIABLES ---<
 
 
diff --git a/flake.nix b/flake.nix
new file mode 100644
index 0000000..ad30c1b
--- /dev/null
+++ b/flake.nix
@@ -0,0 +1,74 @@
+{
+  description = "Numbus - Simplified NixOS deployments";
+
+  inputs = {
+    # Nix unstable packages
+    nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
+    # Nix stable packages
+    nixpkgs-stable.url = "github:nixos/nixpkgs/nixos-25.11";
+    # Numbus
+    numbus.url = "https://gittea.dev/numbus/numbus";
+    # Disko
+    disko.url = "github:nix-community/disko";
+    disko.inputs.nixpkgs.follows = "nixpkgs";
+    # Sops-nix
+    sops-nix.url = "github:Mic92/sops-nix";
+    sops-nix.inputs.nixpkgs.follows = "nixpkgs";
+    # Flatpaks
+    nix-flatpak.url = "github:gmodena/nix-flatpak";
+  };
+
+  outputs = { self, nixpkgs, ... }@inputs: 
+    let
+      system = "x86_64-linux";
+      pkgs = nixpkgs.legacyPackages.${system};
+      
+      # Helper for defining systems
+      mkNumbus = { deviceModule, extraModules ? [], nixpkgsRef, deviceType }: nixpkgsRef.lib.nixosSystem {
+        inherit system;
+        specialArgs = { inherit inputs deviceType; };
+        modules = [
+          inputs.disko.nixosModules.disko
+          inputs.sops-nix.nixosModules.sops
+          self.nixosModules.common
+          deviceModule
+        ] ++ extraModules;
+      };
+    in {
+      nixosModules = {
+        common = ./modules/common;
+        server = ./modules/server;
+        backup = ./modules/backup;
+        computer = ./modules/computer;
+        tv = ./modules/tv;
+      };
+
+      nixosConfigurations = {
+        numbus-server = mkNumbus {
+          deviceModule = self.nixosModules.server;
+          nixpkgsRef = inputs.nixpkgs-stable;
+          deviceType = "server";
+        };
+
+        numbus-backup = mkNumbus {
+          deviceModule = self.nixosModules.backup;
+          nixpkgsRef = inputs.nixpkgs-stable;
+          deviceType = "backup";
+        };
+
+        numbus-computer = mkNumbus {
+          deviceModule = self.nixosModules.computer;
+          extraModules = [ inputs.nix-flatpak.nixosModules.nix-flatpak ];
+          nixpkgsRef = inputs.nixpkgs;
+          deviceType = "computer";
+        };
+
+        numbus-tv = mkNumbus {
+          deviceModule = self.nixosModules.tv;
+          nixpkgsRef = inputs.nixpkgs;
+          extraModules = [ inputs.nix-flatpak.nixosModules.nix-flatpak ];
+          deviceType = "tv";
+        };
+      };
+    };
+}
diff --git a/modules/backup/default.nix b/modules/backup/default.nix
new file mode 100644
index 0000000..b64d5e5
--- /dev/null
+++ b/modules/backup/default.nix
@@ -0,0 +1,13 @@
+{ ... }:
+
+{
+  imports = [
+    ./hardware/default.nix
+    ./mail/default.nix
+    ./misc/default.nix
+    ./networking/default.nix
+    ./packages/default.nix
+    ./services/default.nix
+    ./global.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/backup/flake.nix b/modules/backup/flake.nix
new file mode 100644
index 0000000..04c8219
--- /dev/null
+++ b/modules/backup/flake.nix
@@ -0,0 +1,11 @@
+{
+  description = "Numbus Server Module";
+
+  inputs = {
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-25.11";
+  };
+
+  outputs = { self, nixpkgs }: {
+    nixosModules.numbus = import ./modules/default.nix;
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/global.nix b/modules/backup/global.nix
new file mode 100644
index 0000000..8cf2c1a
--- /dev/null
+++ b/modules/backup/global.nix
@@ -0,0 +1,53 @@
+{ lib, ... }:
+
+with lib;
+
+{
+  options.numbus = {
+    owner = mkOption {
+      type = types.str;
+      example = "Alex";
+      default = "Numbus";
+      description = "The name of the person who owns this server";
+    };
+    language = mkOption {
+      type = types.str;
+      example = "FR";
+      default = "FR";
+      description = "The language for this server";
+    };
+    locale = mkOption {
+      type = types.str;
+      example = "fr_FR";
+      default = "fr_FR";
+      description = "The default locale for this server";
+    };
+
+    services = {
+      domain = mkOption {
+        type = types.str;
+        example = "numbus.eu";
+        description = "The root domain name (i.e. example.com) that your services will use";
+      };
+      dns = mkOption {
+      type = types.enum [ "pi-hole" "adguard" ];
+      default = "pi-hole";
+      example = "pi-hole";
+      description = "The preferred DNS resolver service (pi-hole or adguard) that other services should depend on";
+      };
+    };
+
+    email = {
+      administratorEmail = mkOption {
+        type = types.str;
+        example = "admin@your-domain.com";
+        description = "The email that will be used to send critical notifications such as hardware failures, services errors, ACME updates, etc";
+      };
+      userEmail = mkOption {
+        type = types.str;
+        example = "user@your-domain.com";
+        description = "The email that will be used by services to send notifications";
+      };
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/hardware/boot.nix b/modules/backup/hardware/boot.nix
new file mode 100644
index 0000000..86de227
--- /dev/null
+++ b/modules/backup/hardware/boot.nix
@@ -0,0 +1,13 @@
+{ config, ... }:
+
+{
+  config = {
+    boot.initrd.systemd.enable = true;
+    boot.loader.systemd-boot.enable = true;
+    boot.loader.efi.canTouchEfiVariables = true;
+
+    boot.kernel.sysctl = {
+      "vm.overcommit_memory" = 1;
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/hardware/cpu.nix b/modules/backup/hardware/cpu.nix
new file mode 100644
index 0000000..d3fe470
--- /dev/null
+++ b/modules/backup/hardware/cpu.nix
@@ -0,0 +1,9 @@
+{ config, ... }:
+
+{
+  config = {
+    hardware.enableRedistributableFirmware = true;
+    hardware.cpu.intel.updateMicrocode = true;
+    hardware.cpu.amd.updateMicrocode = true;
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/hardware/default.nix b/modules/backup/hardware/default.nix
new file mode 100644
index 0000000..8a652d9
--- /dev/null
+++ b/modules/backup/hardware/default.nix
@@ -0,0 +1,10 @@
+{ ... }:
+
+{
+  imports = [
+    ./boot.nix
+    ./cpu.nix
+    ./disks.nix
+    ./pcie-coral.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/backup/hardware/disks.nix b/modules/backup/hardware/disks.nix
new file mode 100644
index 0000000..6e1acee
--- /dev/null
+++ b/modules/backup/hardware/disks.nix
@@ -0,0 +1,328 @@
+{ config, lib, pkgs, ... }:
+
+with lib;
+
+let
+  cfg = config.numbus.hardware;
+
+  mkDataDisk = idx: device: {
+    name = "content-${toString idx}";
+    value = {
+      type = "disk";
+      device = device;
+      content = {
+        type = "gpt";
+        partitions = {
+          luks = {
+            size = "100%";
+            content = {
+              type = "luks";
+              name = "crypted-content-${toString idx}";
+              initrdUnlock = false;
+              settings = {
+                keyFile = "/etc/secrets/disks/content-${toString idx}";
+                allowDiscards = true;
+                crypttabExtraOpts = [ "nofail" ];
+              };
+              content = {
+                type = "filesystem";
+                format = cfg.dataDisksFilesystem;
+                mountpoint = "/mnt/content-${toString idx}";
+                mountOptions = [ "nofail" "noauto" ];
+              };
+            };
+          };
+        };
+      };
+    };
+  };
+
+  mkParityDisk = idx: device: {
+    name = "parity-${toString idx}";
+    value = {
+      type = "disk";
+      device = device;
+      content = {
+        type = "gpt";
+        partitions = {
+          luks = {
+            size = "100%";
+            content = {
+              type = "luks";
+              name = "crypted-parity-${toString idx}";
+              initrdUnlock = false;
+              settings = {
+                keyFile = "/etc/secrets/disks/parity-${toString idx}";
+                allowDiscards = true;
+                crypttabExtraOpts = [ "nofail" ];
+              };
+              content = {
+                type = "filesystem";
+                format = cfg.parityDisksFilesystem;
+                mountpoint = "/mnt/parity-${toString idx}";
+                mountOptions = [ "nofail" "noauto" ];
+              };
+            };
+          };
+        };
+      };
+    };
+  };
+
+  isMirror = length cfg.bootDisksList > 1;
+
+  bootDisksConfig = if isMirror then {
+    mdadm = {
+      boot = {
+        type = "mdadm";
+        level = 1;
+        metadata = "1.2";
+        content = {
+          type = "filesystem";
+          format = "vfat";
+          mountpoint = "/boot";
+          mountOptions = [ "umask=0077" ];
+        };
+      };
+    };
+    disk = listToAttrs (imap1 (i: device: {
+      name = "boot-${toString i}";
+      value = {
+        type = "disk";
+        device = device;
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              size = "1G";
+              type = "EF00";
+              content = {
+                type = "mdraid";
+                name = "boot";
+              };
+            };
+            luks = {
+              size = "100%";
+              content = {
+                type = "luks";
+                name = "crypted-boot-${toString i}";
+                settings = {
+                  allowDiscards = true;
+                  keyFile = "/etc/secrets/disks/boot-${toString i}";
+                };
+                content = {
+                  type = "lvm_pv";
+                  vg = "pool";
+                };
+              };
+            };
+          };
+        };
+      };
+    }) cfg.bootDisksList);
+  } else {
+    disk = {
+      "boot-1" = {
+        type = "disk";
+        device = head cfg.bootDisksList;
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              size = "1G";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = [ "umask=0077" ];
+              };
+            };
+            luks = {
+              size = "100%";
+              content = {
+                type = "luks";
+                name = "crypted-boot-1";
+                settings = {
+                  keyFile = "/etc/secrets/disks/boot-1";
+                  allowDiscards = true;
+                };
+                content = {
+                  type = "lvm_pv";
+                  vg = "pool";
+                };
+              };
+            };
+          };
+        };
+      };
+    };
+  };
+
+  lvmConfig = {
+    lvm_vg = {
+      pool = {
+        type = "lvm_vg";
+        lvs = {
+          swap = {
+            size = cfg.swapSize;
+            content = {
+              type = "swap";
+            };
+          } // optionalAttrs isMirror { lvm_type = "mirror"; };
+          snapraid = {
+            size = "1G";
+            content = {
+              type = "filesystem";
+              format = "btrfs";
+              mountpoint = "/mnt/content-0";
+            };
+          } // optionalAttrs isMirror { lvm_type = "mirror"; };
+          root = {
+            size = "100%";
+            content = {
+              type = "btrfs";
+              extraArgs = [ "-f" ];
+              subvolumes = {
+                "/rootfs" = {
+                  mountpoint = "/";
+                  mountOptions = [ "compress=zstd" "noatime" ];
+                };
+                "/home" = {
+                  mountpoint = "/home";
+                  mountOptions = [ "compress=zstd" ];
+                };
+                "/nix" = {
+                  mountpoint = "/nix";
+                  mountOptions = [ "compress=zstd" "noatime" ];
+                };
+              };
+            };
+          } // optionalAttrs isMirror { lvm_type = "mirror"; };
+        };
+      };
+    };
+  };
+
+in
+{
+  options.numbus.hardware = {
+    dataDisksList = mkOption {
+      type = types.listOf types.str;
+      default = [];
+      example = [ "/dev/disk/by-id/WD_Blue_ATO431_159Ejz224G0000382b" "/dev/disk/by-id/Seagate_Barracuda_159Ejz224G" ];
+      description = "List by-id path of devices for data disks";
+    };
+    parityDisksList = mkOption {
+      type = types.listOf types.str;
+      default = [];
+      example = [ "/dev/disk/by-id/WD_Blue_ATO431_159Ejz224G0000382b" "/dev/disk/by-id/Seagate_Barracuda_159Ejz224G" ];
+      description = "List of by-id path of devices for parity disks";
+    };
+    bootDisksList = mkOption {
+      type = types.listOf types.str;
+      default = [];
+      example = [ "/dev/disk/by-id/nvme_SAMSUNG_MZVPYEHCO_159Ejz224G0000" "/dev/disk/by-id/ata-San_Disk_159Ejz224G" ];
+      description = "List of by-id path of devices for boot disks";
+    };
+    spindownDisksList = mkOption {
+      type = types.listOf types.str;
+      default = [];
+      example = [ "/dev/disk/by-id/WD_Blue_ATO431_159Ejz224G0000382b" "/dev/disk/by-id/Seagate_Barracuda_159Ejz224G" ];
+      description = "List of by-id path of devices to spindown when inactive to save power (HDD only)";
+    };
+    swapSize = mkOption {
+      type = types.str;
+      default = "16G";
+      example = "16G";
+      description = "Size of the swap partition";
+    };
+    dataDisksFilesystem = mkOption {
+      type = types.enum [ "xfs" "ext4" "btrfs" ];
+      default = "xfs";
+      example = "xfs";
+      description = "Filesystem for data disks. Available filesystem options : xfs, ext4, btrfs";
+    };
+    parityDisksFilesystem = mkOption {
+      type = types.enum [ "xfs" "ext4" "btrfs" ];
+      default = "xfs";
+      example = "xfs";
+      description = "Filesystem for parity disks. Available filesystem options : xfs, ext4, btrfs";
+    };
+  };
+
+  config = mkIf (cfg.bootDisksList != []) {
+    disko.devices = mkMerge [
+      bootDisksConfig
+      lvmConfig
+      {
+        disk = listToAttrs (imap1 mkDataDisk cfg.dataDisksList);
+      }
+      {
+        disk = listToAttrs (imap1 mkParityDisk cfg.parityDisksList);
+      }
+    ];
+
+    services.snapraid = {
+      enable = true;
+      contentFiles = [ "/mnt/content-0/snapraid.content" ] ++
+        (map (i: "/mnt/content-${toString i}/snapraid.content") (range 1 (length cfg.dataDisksList)));
+      parityFiles = map (i: "/mnt/parity-${toString i}/snapraid.parity") (range 1 (length cfg.parityDisksList));
+      dataDisks = listToAttrs (imap1 (i: _: nameValuePair "d${toString i}" "/mnt/content-${toString i}") cfg.dataDisksList);
+    };
+
+    fileSystems."/mnt/data" = {
+      device = "/mnt/content-*";
+      fsType = "fuse.mergerfs";
+      options = [
+        "category.create=ff"
+        "cache.files=partial"
+        "dropcacheonclose=true"
+        "defaults"
+        "noauto"
+        "nofail"
+        "allow_other"
+        "moveonenospc=1"
+        "minfreespace=50G"
+        "func.getattr=newest"
+        "fsname=mergerfs_data"
+        "x-mount.mkdir"
+        "x-systemd.automount"
+      ];
+    };
+
+    systemd.services.mount-disks = {
+      description = "Mount data and parity disks";
+      before = [ "mnt-data.mount" ];
+      requiredBy = [ "mnt-data.mount" ];
+      path = [ pkgs.cryptsetup pkgs.util-linux ];
+      serviceConfig = {
+        Type = "oneshot";
+        RemainAfterExit = true;
+      };
+      script = let
+        mountDataDisk = i: ''
+          if [ ! -e /dev/mapper/crypted-content-${toString i} ]; then
+            cryptsetup luksOpen --key-file /etc/secrets/disks/content-${toString i} /dev/disk/by-partlabel/disk-content-${toString i}-luks crypted-content-${toString i}
+          fi
+          mkdir -p /mnt/content-${toString i}
+          if ! mountpoint -q /mnt/content-${toString i}; then
+            mount -t ${cfg.dataDisksFilesystem} /dev/mapper/crypted-content-${toString i} /mnt/content-${toString i}
+          fi
+        '';
+        mountParityDisk = i: ''
+          if [ ! -e /dev/mapper/crypted-parity-${toString i} ]; then
+            cryptsetup luksOpen --key-file /etc/secrets/disks/parity-${toString i} /dev/disk/by-partlabel/disk-parity-${toString i}-luks crypted-parity-${toString i}
+          fi
+          mkdir -p /mnt/parity-${toString i}
+          if ! mountpoint -q /mnt/parity-${toString i}; then
+            mount -t ${cfg.parityDisksFilesystem} /dev/mapper/crypted-parity-${toString i} /mnt/parity-${toString i}
+          fi
+        '';
+      in ''
+        ${concatMapStrings mountDataDisk (range 1 (length cfg.dataDisksList))}
+        ${concatMapStrings mountParityDisk (range 1 (length cfg.parityDisksList))}
+      '';
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/hardware/pcie-coral.nix b/modules/backup/hardware/pcie-coral.nix
new file mode 100644
index 0000000..06fe328
--- /dev/null
+++ b/modules/backup/hardware/pcie-coral.nix
@@ -0,0 +1,111 @@
+{ config, lib, pkgs, ... }:
+
+let
+  cfg = config.numbus.hardware.pcie-coral;
+
+  gasket-driver = { stdenv, lib, fetchFromGitHub, kernel }: stdenv.mkDerivation rec {
+    pname = "gasket";
+    version = "1.0-18";
+
+    src = fetchFromGitHub {
+      owner = "google";
+      repo = "gasket-driver";
+      rev = "97aeba584efd18983850c36dcf7384b0185284b3";
+      sha256 = "pJwrrI7jVKFts4+bl2xmPIAD01VKFta2SRuElerQnTo=";
+    };
+
+    makeFlags = [
+      "-C"
+      "${kernel.dev}/lib/modules/${kernel.modDirVersion}/build"
+      "M=$(PWD)"
+    ];
+    buildFlags = [ "modules" ];
+
+    installFlags = [ "INSTALL_MOD_PATH=${placeholder "out"}" ];
+    installTargets = [ "modules_install" ];
+
+    sourceRoot = "source/src";
+    hardeningDisable = [ "pic" "format" ];
+    nativeBuildInputs = kernel.moduleBuildDependencies;
+
+    meta = with lib; {
+      description = "The Coral Gasket Driver allows usage of the Coral EdgeTPU on Linux systems.";
+      homepage = "https://github.com/google/gasket-driver";
+      license = licenses.gpl2;
+      maintainers = [ maintainers.kylehendricks ];
+      platforms = platforms.linux;
+    };
+  };
+
+  libedgetpu-pkg = { stdenv, lib, fetchFromGitHub, libusb1, abseil-cpp, flatbuffers, xxd }:
+    let
+      flatbuffers_1_12 = flatbuffers.overrideAttrs (oldAttrs: rec {
+        version = "1.12.0";
+        NIX_CFLAGS_COMPILE = "-Wno-error=class-memaccess -Wno-error=maybe-uninitialized";
+        cmakeFlags = (oldAttrs.cmakeFlags or []) ++ ["-DFLATBUFFERS_BUILD_SHAREDLIB=ON"];
+        NIX_CXXSTDLIB_COMPILE = "-std=c++17";
+        configureFlags = (oldAttrs.configureFlags or []) ++ ["--enable-shared"];
+        src = fetchFromGitHub {
+          owner = "google";
+          repo = "flatbuffers";
+          rev = "v${version}";
+          sha256 = "sha256-L1B5Y/c897Jg9fGwT2J3+vaXsZ+lfXnskp8Gto1p/Tg=";
+        };
+      });
+
+    in stdenv.mkDerivation rec {
+      pname = "libedgetpu";
+      version = "grouper";
+
+      src = fetchFromGitHub {
+        owner = "google-coral";
+        repo = pname;
+        rev = "release-${version}";
+        sha256 = "sha256-73hwItimf88Iqnb40lk4ul/PzmCNIfdt6Afi+xjNiBE=";
+      };
+
+      makeFlags = ["-f" "makefile_build/Makefile" "libedgetpu" ];
+
+      buildInputs = [
+        libusb1
+        abseil-cpp
+        flatbuffers_1_12
+      ];
+
+      nativeBuildInputs = [
+        xxd
+      ];
+
+      NIX_CXXSTDLIB_COMPILE = "-std=c++17";
+
+      TFROOT = "${fetchFromGitHub {
+        owner = "tensorflow";
+        repo = "tensorflow";
+        rev = "v2.7.4";
+        sha256 = "sha256-liDbUAdaVllB0b74aBeqNxkYNu/zPy7k3CevzRF5dk0=";
+      }}";
+
+      enableParallelBuilding = false;
+
+      installPhase = ''
+        mkdir -p $out/lib
+        cp out/direct/k8/libedgetpu.so.1.0 $out/lib
+        ln -s $out/lib/libedgetpu.so.1.0 $out/lib/libedgetpu.so.1
+        mkdir -p $out/lib/udev/rules.d
+        cp debian/edgetpu-accelerator.rules $out/lib/udev/rules.d/99-edgetpu-accelerator.rules
+      '';
+    };
+
+  gasket = config.boot.kernelPackages.callPackage gasket-driver {};
+  libedgetpu = pkgs.callPackage libedgetpu-pkg {};
+in
+
+{
+  options.numbus.hardware.pcie-coral = lib.mkEnableOption "PCIe Coral TPU support";
+
+  config = lib.mkIf cfg {
+    services.udev.packages = [ libedgetpu ];
+    users.groups.plugdev = {};
+    boot.extraModulePackages = [ gasket ];
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/hardware/spindown.nix b/modules/backup/hardware/spindown.nix
new file mode 100644
index 0000000..219d113
--- /dev/null
+++ b/modules/backup/hardware/spindown.nix
@@ -0,0 +1,24 @@
+{ config, lib, ... }:
+
+with lib;
+
+{
+  options.numbus-backup = {
+    hardware = {
+      HddSpindown = {
+        enable = mkOption {
+          description = "Spin down Hard drives when inactive in order to save power.";
+          type = types.bool;
+          example = true;
+          default = true;
+        };
+        optimize = mkOption {
+          description = "Optimize services to reduce HDD wakeups when HddSpindown is enabled. Can be set to \"compatible\" to optimize all compatible services, or a list of service names to optimize.";
+          type = types.nullOr (types.either (types.enum [ "compatible" ]) (types.listOf types.str));
+          default = "compatible";
+          example = "[ \"crafty\" \"gitea\" ]";
+        };
+      };
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/mail/clamav.nix b/modules/backup/mail/clamav.nix
new file mode 100644
index 0000000..a4c99bc
--- /dev/null
+++ b/modules/backup/mail/clamav.nix
@@ -0,0 +1,89 @@
+{ config, lib, pkgs, ... }:
+
+with lib;
+
+let
+  cfg = config.numbus.services.clamav;
+  clamav_notifier = pkgs.writeScript "clamav-notify.sh" ''
+    #!${pkgs.bash}/bin/bash
+
+    # Check if triggered by Real-time event (file exists)
+    if [ -f /var/lib/clamav/virus_event.env ]; then
+      source /var/lib/clamav/virus_event.env
+      rm /var/lib/clamav/virus_event.env
+    fi
+
+    ADMIN_EMAIL="${config.numbus.mail.adminAddress}"
+    USER_EMAIL="${config.numbus.mail.userAddress}"
+    OWNER_NAME="${config.numbus.owner}"
+
+    if [ -n "$CLAM_VIRUSEVENT_VIRUSNAME" ]; then
+      # --- Real-time / VirusEvent Mode ---
+      SUBJECT="Numbus Server Alert: Virus Detected (Real-time)"
+      
+      # Retrieve logs from clamav-daemon
+      LOGS=$(journalctl -u clamav-daemon.service -n 50 --no-pager | grep "FOUND")
+
+      TECH_BODY="
+      ClamAV Real-time Alert:
+      Server owner: $OWNER_NAME
+      
+      Virus detected: $CLAM_VIRUSEVENT_VIRUSNAME
+      File: $CLAM_VIRUSEVENT_FILENAME
+      
+      Logs:
+      $LOGS
+      
+      Action taken: Access blocked (OnAccessPrevention).
+      Please investigate manually.
+      "
+      
+      FRIENDLY_BODY="Cher/Chère $OWNER_NAME,
+
+      L'antivirus de votre serveur a détecté et bloqué une menace en temps réel.
+      Fichier : $CLAM_VIRUSEVENT_FILENAME
+      
+      Votre administrateur a été notifié.
+      "
+    else
+      # --- Scheduled Scan Summary Mode ---
+      SUBJECT="Numbus Server Alert: Virus Detected during Scheduled Scan"
+      
+      # Retrieve logs (clamdscan prints FOUND when a virus is detected)
+      LOGS=$(journalctl -u clamav-periodic-scan.service -n 100 --no-pager | grep "FOUND")
+      
+      TECH_BODY="
+      ClamAV Scan Alert:
+      Server owner: $OWNER_NAME
+
+      Viruses detected:
+      $LOGS
+
+      Action taken: Detection only.
+      Please investigate manually.
+      "
+      
+      FRIENDLY_BODY="Cher/Chère $OWNER_NAME,
+
+      L'antivirus de votre serveur a détecté une menace potentielle lors de l'analyse périodique.
+      Votre administrateur a été notifié avec les détails techniques.
+      Nous vous conseillons d'être prudent avec vos fichiers récents.
+      "
+    fi
+
+    printf "Subject: [ADMIN] %s\n\n%s" "$SUBJECT" "$TECH_BODY" | /run/wrappers/bin/sendmail -t "$ADMIN_EMAIL"
+    printf "Subject: [Alerte] Menace détectée sur votre serveur Numbus\n\n%s\n\nMerci de votre confiance,\nL'équipe de support,\nNumbus-Server." "$FRIENDLY_BODY" | /run/wrappers/bin/sendmail -t "$USER_EMAIL"
+  '';
+in
+
+{ 
+  config = mkIf cfg.enable {
+    systemd.services.clamav-virus-notify = {
+      description = "Email notification for ClamAV virus detection";
+      serviceConfig = {
+        Type = "oneshot";
+        ExecStart = "${clamav_notifier}";
+      };
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/mail/default.nix b/modules/backup/mail/default.nix
new file mode 100644
index 0000000..a7af913
--- /dev/null
+++ b/modules/backup/mail/default.nix
@@ -0,0 +1,10 @@
+{ ... }:
+
+{
+  imports = [
+    ./clamav.nix
+    ./smart.nix
+    ./systemd.nix
+    ./smtp.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/backup/mail/smart.nix b/modules/backup/mail/smart.nix
new file mode 100644
index 0000000..c84e0ab
--- /dev/null
+++ b/modules/backup/mail/smart.nix
@@ -0,0 +1,61 @@
+{ config, pkgs, ... }:
+
+let
+  smartd_notifier = pkgs.writeScript "smartd-notify.sh" ''
+    #!${pkgs.bash}/bin/bash
+    
+    # 1. Send Technical Email to Admin
+    ADMIN_EMAIL="${config.numbus.mail.adminAddress}"
+    SUBJECT="Numbus Server Alert: $SMARTD_FAILTYPE on $SMARTD_DEVICE"
+    
+    TECH_BODY="
+    SMARTD Alert Details:
+    Server owner: $OWNER_NAME
+    Device: $SMARTD_DEVICE
+    Type: $SMARTD_DEVICETYPE
+    Failure Type: $SMARTD_FAILTYPE
+    Message: $SMARTD_MESSAGE
+    
+    Full Message:
+    $SMARTD_FULLMESSAGE
+    "
+    printf "Subject: [ADMIN] $SUBJECT\n\n$TECH_BODY" | /run/wrappers/bin/sendmail -t "$ADMIN_EMAIL"
+
+    # 2. Send Friendly Email to Owner
+    USER_EMAIL="${config.numbus.mail.userAddress}"
+    OWNER_NAME="${config.numbus.owner}"
+    
+    FRIENDLY_BODY="Cher/Chère $OWNER_NAME,
+
+    Votre serveur a automatiquement détecté une panne matérielle de disque dur.
+    Ce genre de panne est tout à fait normal selon l'âge de votre matériel et n'entraîne
+    dans la grande majorité des cas aucune perte de données grâce au système de
+    stockage redondant préventif.
+
+    Votre administrateur a été notifié de cette panne. Il vous recontactera dans de très
+    brefs délais afin de procéder au remplacement, si nécessaire, du disque dur défaillant.
+
+    Merci de votre confiance,
+    L'équipe de support,
+    Numbus-Server."
+    
+    printf "Subject: [Alerte] Défaillance matérielle sur votre serveur Numbus\n\n$FRIENDLY_BODY" | /run/wrappers/bin/sendmail -t "$USER_EMAIL"
+  '';
+in
+
+{
+  services.smartd = {
+    enable = true;
+    defaults.autodetected = "-a -o on -S on -s (S/../.././00|L/../../6/01) -n standby,q -M exec ${smartd_notifier}";
+    notifications = {
+      wall = {
+        enable = true;
+      };
+      mail = {
+        enable = true;
+        sender = config.numbus.mail.fromAddress;
+        recipient = "${config.numbus.mail.userAddress},${config.numbus.mail.adminAddress}";
+      };
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/mail/smtp.nix b/modules/backup/mail/smtp.nix
new file mode 100644
index 0000000..55b84f5
--- /dev/null
+++ b/modules/backup/mail/smtp.nix
@@ -0,0 +1,84 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  cfg = config.numbus.mail;
+in
+
+{
+  options.numbus.mail = {
+    enable = mkEnableOption "Email sending functionality";
+
+    userAddress = mkOption {
+      description = "The address of the user this server will send emails to";
+      type = types.str;
+      example = "user@your-domain.com";
+    };
+
+    adminAddress = mkOption {
+      description = "The address of the admin this server will send emails to";
+      type = types.str;
+      example = "admin@your-domain.com";
+    };
+
+    smtpUsername = mkOption {
+      description = "The username/email that will be use to authenticate to the SMTP server";
+      type = types.str;
+      example = "your-smtp-enabled-address@your-domain.com";
+    };
+
+    smtpPasswordPath = mkOption {
+      description = "The path to a file containing the password that will be use to authenticate to the SMTP server";
+      type = types.path;
+      example = /run/secrets/smtp-password;
+    };
+
+    fromAddress = mkOption {
+      description = "This server will send emails from this address";
+      type = types.str;
+      default = "numbus-server-noreply@${config.numbus.services.domain}";
+      example = "numbus-server-noreply@your-domain.com";
+    };
+
+    smtpServer = mkOption {
+      description = "The SMTP server address your server will use to send emails";
+      type = types.str;
+      default = "smtp.gmail.com";
+      example = "smtp.your-provider.com";
+    };
+
+    smtpPort = mkOption {
+      description = "The SMTP port your server will connect to to send emails";
+      type = types.port;
+      default = 587;
+      example = 587;
+    };
+  };
+
+  config = mkIf cfg.enable {
+    environment.etc."aliases".text = ''
+      root: ${cfg.userAddress}, ${cfg.adminAddress}
+      default: ${cfg.userAddress}, ${cfg.adminAddress}
+    '';
+
+    programs.msmtp = {
+      enable = true;
+      defaults = {
+        aliases = "/etc/aliases";
+        timeout = 60;
+        syslog = "on";
+      };
+      accounts.default = {
+        auth = true;
+        host = cfg.smtpServer;
+        port = cfg.smtpPort;
+        from = cfg.fromAddress;
+        user = cfg.smtpUsername;
+        tls = true;
+        tls_starttls = true;
+        passwordeval = "${pkgs.coreutils}/bin/cat ${cfg.smtpPasswordPath}";
+      };
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/mail/systemd.nix b/modules/backup/mail/systemd.nix
new file mode 100644
index 0000000..0b7a566
--- /dev/null
+++ b/modules/backup/mail/systemd.nix
@@ -0,0 +1,55 @@
+{ config, pkgs, ... }:
+
+let
+  systemd_notifier = pkgs.writeScript "systemd-email-notify.sh" ''
+    #!${pkgs.bash}/bin/bash
+    
+    # The failing service name is passed as the first argument
+    UNIT=$1
+    
+    # 1. Send Technical Email to Admin
+    ADMIN_EMAIL="${config.numbus.mail.adminAddress}"
+    SUBJECT="Numbus Server Alert: Service $UNIT Failed"
+    
+    # Retrieve recent logs for context
+    LOGS=$(journalctl -u "$UNIT" -n 20 --no-pager)
+    
+    TECH_BODY="
+    Systemd Service Failure Alert:
+    Server owner: ${config.numbus.owner}
+    Service: $UNIT
+    
+    Recent Logs:
+    $LOGS
+    "
+    printf "Subject: [ADMIN] $SUBJECT\n\n$TECH_BODY" | /run/wrappers/bin/sendmail -t "$ADMIN_EMAIL"
+
+    # 2. Send Friendly Email to Owner
+    USER_EMAIL="${config.numbus.mail.userAddress}"
+    OWNER_NAME="${config.numbus.owner}"
+    
+    FRIENDLY_BODY="Cher/Chère $OWNER_NAME,
+
+    Votre serveur a détecté une défaillance du service $UNIT.
+    Le système a tenté de gérer l'erreur, mais une intervention peut être nécessaire.
+
+    Votre administrateur a été notifié de cet incident avec les détails techniques nécessaires.
+    Il interviendra si une action manuelle est requise.
+
+    Merci de votre confiance,
+    L'équipe de support,
+    Numbus-Server."
+    
+    printf "Subject: [Alerte] Erreur sur votre serveur Numbus\n\n$FRIENDLY_BODY" | /run/wrappers/bin/sendmail -t "$USER_EMAIL"
+  '';
+in
+{
+  systemd.services."service-failure-notify@" = {
+    description = "Email notification for failed service %i";
+    onFailure = [ ];
+    serviceConfig = {
+      Type = "oneshot";
+      ExecStart = "${systemd_notifier} %i";
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/misc/default.nix b/modules/backup/misc/default.nix
new file mode 100644
index 0000000..bc990b8
--- /dev/null
+++ b/modules/backup/misc/default.nix
@@ -0,0 +1,10 @@
+{ ... }:
+
+{
+  imports = [
+    ./internationalisation.nix
+    ./power.nix
+    ./update.nix
+    ./users.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/backup/misc/internationalisation.nix b/modules/backup/misc/internationalisation.nix
new file mode 100644
index 0000000..4eff542
--- /dev/null
+++ b/modules/backup/misc/internationalisation.nix
@@ -0,0 +1,24 @@
+{ config, lib, ... }:
+
+{
+  config = {
+    i18n.defaultLocale = "${config.numbus.locale}.UTF-8";
+    i18n.extraLocaleSettings = {
+      LC_ADDRESS = "${config.numbus.locale}.UTF-8";
+      LC_IDENTIFICATION = "${config.numbus.locale}.UTF-8";
+      LC_MEASUREMENT = "${config.numbus.locale}.UTF-8";
+      LC_MONETARY = "${config.numbus.locale}.UTF-8";
+      LC_NAME = "${config.numbus.locale}.UTF-8";
+      LC_NUMERIC = "${config.numbus.locale}.UTF-8";
+      LC_PAPER = "${config.numbus.locale}.UTF-8";
+      LC_TELEPHONE = "${config.numbus.locale}.UTF-8";
+      LC_TIME = "${config.numbus.locale}.UTF-8";
+    };
+
+    console.keyMap = lib.toLower config.numbus.language;
+    services.xserver.xkb = {
+      layout = lib.toLower config.numbus.language;
+      variant = "";
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/misc/power.nix b/modules/backup/misc/power.nix
new file mode 100644
index 0000000..f1c73f9
--- /dev/null
+++ b/modules/backup/misc/power.nix
@@ -0,0 +1,30 @@
+{ config, lib, pkgs, ... }:
+
+let
+  hardDrives = config.numbus.hardware.spindownDisksList;
+in
+
+{
+  config = {
+    systemd.services.hd-idle = {
+      description = "External HD spin down daemon";
+      wantedBy = [ "multi-user.target" ];
+      serviceConfig = {
+        Type = "simple";
+        ExecStart =
+          let
+            idleTime = toString 1800;
+            hardDriveParameter = lib.strings.concatMapStringsSep " " (x: "-a ${x} -i ${idleTime}") hardDrives;
+          in
+          "${pkgs.hd-idle}/bin/hd-idle -i 0 ${hardDriveParameter}";
+      };
+    };
+
+    services.autoaspm.enable = true;
+    powerManagement.powertop.enable = true;
+    boot.kernelParams = [
+      "pcie_aspm=force"
+      "consoleblank=60"
+    ];
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/misc/update.nix b/modules/backup/misc/update.nix
new file mode 100644
index 0000000..26b22dd
--- /dev/null
+++ b/modules/backup/misc/update.nix
@@ -0,0 +1,23 @@
+{ config, inputs, ... }:
+
+{
+  config = {
+    system.autoUpgrade = {
+      enable = true;
+      allowReboot = false;
+      flake = inputs.self.outPath;
+      flags = [ "--print-build-logs" ];
+      dates = "02:00";
+      randomizedDelaySec = "45min";
+    };
+
+    nix.gc = {
+      automatic = true;
+      dates = "weekly";
+      options = "--delete-older-than 7d";
+    };
+
+    nix.settings.experimental-features = [ "nix-command" "flakes" ];
+    nix.settings.auto-optimise-store = true;
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/misc/users.nix b/modules/backup/misc/users.nix
new file mode 100644
index 0000000..9ab0662
--- /dev/null
+++ b/modules/backup/misc/users.nix
@@ -0,0 +1,16 @@
+{ config, pkgs, ... }:
+
+{
+  users.users.numbus-admin = {
+    shell = pkgs.fish;
+    isNormalUser = true;
+    description = "Numbus Admin";
+    extraGroups = [ "wheel" ];
+    uid = 1000;
+    initialPassword = "changeMe!";
+    # required for auto start before user login
+    linger = true;
+    # required for rootless container with multiple users
+    autoSubUidGidRange = true;
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/networking/default.nix b/modules/backup/networking/default.nix
new file mode 100644
index 0000000..d1beb31
--- /dev/null
+++ b/modules/backup/networking/default.nix
@@ -0,0 +1,8 @@
+{ ... }:
+
+{
+  imports = [
+    ./firewall.nix
+    ./networking.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/backup/networking/firewall.nix b/modules/backup/networking/firewall.nix
new file mode 100644
index 0000000..e28edef
--- /dev/null
+++ b/modules/backup/networking/firewall.nix
@@ -0,0 +1,13 @@
+{ config, pkgs, lib, ... }:
+
+{
+  config = {
+    networking.nftables.enable = true;
+    networking.firewall = {
+      enable = true;
+      allowPing = true;
+      allowedTCPPorts = [ 53 80 443 ];
+      allowedUDPPorts = [ 53 443 ];
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/networking/networking.nix b/modules/backup/networking/networking.nix
new file mode 100644
index 0000000..3111a7b
--- /dev/null
+++ b/modules/backup/networking/networking.nix
@@ -0,0 +1,60 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  cfg = config.numbus.networking;
+in
+
+{
+  options.numbus.networking = {
+    ipAddress = mkOption {
+      description = "The IP address that this server will use";
+      type = types.str;
+      example = "192.168.1.100";
+    };
+    interface = mkOption {
+      description = "The interface that this server will use to connect to the network";
+      type = types.str;
+      example = "enp1s0";
+    };
+    routerIpAddress = mkOption {
+      description = "The IP address of the router of your network";
+      type = types.str;
+      example = "192.168.1.1";
+    };
+    networkSubnet = mkOption {
+      description = "The subnet of your network";
+      type = types.str;
+      default = "";
+      example = "192.168.1.0/24";
+    };
+    dnsServers = mkOption {
+      description = "The list of DNS servers that this server will use";
+      type = types.listOf types.str;
+      default = [ "${cfg.ipAddress}" "9.9.9.9" ];
+      example = [ "${cfg.ipAddress}" "9.9.9.9" ];
+    };
+  };
+
+  config = {
+    networking.hostName = "numbus-server";
+    networking.networkmanager.enable = false;
+
+    # Allow rootless containers to bind to port 53 and up
+    boot.kernel.sysctl."net.ipv4.ip_unprivileged_port_start" = 53;
+
+    networking.bridges.br0.interfaces = [ "${cfg.interface}" ];
+    networking.interfaces."${cfg.interface}".useDHCP = false;
+    networking.interfaces.br0.useDHCP = false;
+    networking.nameservers = cfg.dnsServers;
+    networking.interfaces.br0.ipv4.addresses = [{
+      address = "${cfg.ipAddress}";
+      prefixLength = 24;
+    }];
+    networking.defaultGateway = {
+      address = "${cfg.routerIpAddress}";
+      interface = "br0";
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/packages/default.nix b/modules/backup/packages/default.nix
new file mode 100644
index 0000000..66c45e1
--- /dev/null
+++ b/modules/backup/packages/default.nix
@@ -0,0 +1,10 @@
+{ ... }:
+
+{
+  imports = [
+    ./packages.nix
+    ./podman.nix
+    ./ssh.nix
+    ./terminal.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/backup/packages/packages.nix b/modules/backup/packages/packages.nix
new file mode 100644
index 0000000..13dc56e
--- /dev/null
+++ b/modules/backup/packages/packages.nix
@@ -0,0 +1,25 @@
+{ config, pkgs, ... }:
+
+{
+  nixpkgs.config.allowUnfree = true;
+
+  environment.systemPackages = with pkgs; [
+    git
+    ncdu
+    fastfetch
+    tpm2-tss
+    sops
+    age
+    powertop
+    pciutils
+    hdparm
+    hd-idle
+    hddtemp
+    smartmontools
+    cpufrequtils
+    intel-gpu-tools
+    snapraid
+    mergerfs
+    mergerfs-tools
+  ];
+}
\ No newline at end of file
diff --git a/modules/backup/packages/podman.nix b/modules/backup/packages/podman.nix
new file mode 100644
index 0000000..ddf80e1
--- /dev/null
+++ b/modules/backup/packages/podman.nix
@@ -0,0 +1,16 @@
+{ pkgs, ... }:
+
+{
+  virtualisation.podman.enable = true;
+  virtualisation.podman.defaultNetwork.settings.dns_enabled = true;
+
+  virtualisation.containers.containersConf.settings = {
+    network.default_rootless_network_cmd = "slirp4netns";
+  };
+
+  environment.systemPackages = with pkgs; [
+    podman-compose
+    podman-tui
+    slirp4netns
+  ];
+}
\ No newline at end of file
diff --git a/modules/backup/packages/ssh.nix b/modules/backup/packages/ssh.nix
new file mode 100644
index 0000000..6cc7ccc
--- /dev/null
+++ b/modules/backup/packages/ssh.nix
@@ -0,0 +1,5 @@
+{ config, ... }:
+
+{
+  services.openssh.enable = true;
+}
\ No newline at end of file
diff --git a/modules/backup/packages/terminal.nix b/modules/backup/packages/terminal.nix
new file mode 100644
index 0000000..88312a3
--- /dev/null
+++ b/modules/backup/packages/terminal.nix
@@ -0,0 +1,24 @@
+{ config, pkgs, ... }:
+
+{
+  environment.systemPackages = with pkgs; [
+    fish
+    fishPlugins.fzf-fish
+    fishPlugins.grc
+    grc
+    fzf
+  ];
+
+  programs.fish = {
+    enable = true;
+    interactiveShellInit = ''
+      set fish_greeting # Disable greeting
+      fastfetch
+      echo -e "\n\nWelcome to your Numbus-Server !\n\n- This system is managed by NixOS\n- All changes are futile\n- Please consider buying support if you can't get your server running\n- Have a nice day and enjoy !"
+    '';
+    shellAliases = {
+      nixup = "cd /etc/nixos/ && sudo nix flake update && sudo nixos-rebuild --flake . switch --upgrade && cd -";
+      nixwitch = "cd /etc/nixos/ && sudo nix flake update && sudo nixos-rebuild --flake . switch && cd -";
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/services/applications/authelia.nix b/modules/backup/services/applications/authelia.nix
new file mode 100644
index 0000000..cf0fa96
--- /dev/null
+++ b/modules/backup/services/applications/authelia.nix
@@ -0,0 +1,171 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "authelia";
+  # Version tagging
+  autheliaVersion = "v4.39.16";
+  databaseVersion = "18.3";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.authelia;
+  # Derive Base DN from domain (e.g., example.com -> dc=example,dc=com)
+  domainParts = splitString "." config.numbus-server.services.domain;
+  baseDN = concatStringsSep "," (map (p: "dc=${p}") domainParts);
+  # Generate dynamic access control rules based on groups and allowedApps
+  mkGroupRule = groupName: appName:
+    let
+      app = config.numbus-server.service.${appName} or {};
+    in
+    if app ? subdomain && app ? domain then ''
+              - domain: "${app.subdomain}.${app.domain}"
+                policy: two_factor
+                subject: "group:${groupName}"''
+    else "";
+  allGroupRules = concatStringsSep "\n" (filter (s: s != "") (flatten (mapAttrsToList (groupName: groupCfg:
+    map (appName: mkGroupRule groupName appName) (groupCfg.allowedApps or [])
+  ) (config.numbus-server.groups or {}))));
+
+  defaultRedirectionUrl =
+    if config.numbus-server.services.homepage.enable then
+      "https://${config.numbus-server.services.homepage.subdomain}.${config.numbus-server.services.domain}"
+    else if config.numbus-server.services.dashy.enable then
+      "https://${config.numbus-server.services.dashy.subdomain}.${config.numbus-server.services.domain}"
+    else null;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  pod = name;
+  description = "Authelia, your own unified login provider";
+  defaultPort = "9091";
+  dependencies = [
+    "sops-install-secrets.service"
+    "traefik.service"
+    "${config.numbus-server.services.dns}.service"
+  ];
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.configDir}"
+  ];
+  secrets = [
+    "authelia/db_name"
+    "authelia/db_username"
+    "authelia/db_password"
+    "authelia/jwt_secret"
+    "authelia/session_secret"
+    "authelia/storage_secret"
+  ];
+
+  composeText = ''
+    services:
+      authelia-server:
+        image: ghcr.io/authelia/authelia:${autheliaVersion}
+        container_name: authelia-server
+        hostname: authelia-server
+        user: '1000:1000'
+        networks:
+          authelia:
+            ipv4_address: 10.89.251.253
+        ports:
+          - "${cfg.port}:9091/tcp"
+        volumes:
+          - ${cfg.configDir}/server:/config
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+      authelia-database:
+        container_name: authelia-database
+        hostname: authelia-database
+        image: docker.io/library/postgres:${databaseVersion}
+        user: '1000:1000'
+        networks:
+          authelia:
+            ipv4_address: 10.89.251.252
+        environment:
+          POSTGRES_DB: ${config.sops.placeholder."authelia/db_name"}
+          POSTGRES_USER: ${config.sops.placeholder."authelia/db_username"}
+          POSTGRES_PASSWORD: ${config.sops.placeholder."authelia/db_password"}
+          POSTGRES_INITDB_ARGS: '--data-checksums'
+        volumes:
+          - ${cfg.configDir}/database:/var/lib/postgresql/data
+        shm_size: 128mb
+        healthcheck:
+          disable: false
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+    networks:
+      authelia:
+        driver: bridge
+        name: authelia
+        ipam:
+          config:
+            - subnet: "10.89.251.0/24"
+              gateway: "10.89.251.254"
+  '';
+
+  extraConfig = {
+    sops.templates."authelia-config" = {
+      gid = "100";
+      uid = "100999";
+      mode = "0400";
+      content = ''
+        authelia:
+          identity_validation:
+            reset_password:
+              jwt_secret: "${config.sops.placeholder."authelia/jwt_secret"}"
+              jwt_lifespan: "5 minutes"
+              jwt_algorithm: "HS256"
+          storage:
+            encryption_key: "${config.sops.placeholder."authelia/storage_secret"}"
+            postgres:
+              address: "tcp://authelia-database:5432"
+              database: "${config.sops.placeholder."authelia/db_name"}"
+              username: "${config.sops.placeholder."authelia/db_username"}"
+              password: "${config.sops.placeholder."authelia/db_password"}"
+          session:
+            secret: "${config.sops.placeholder."authelia/session_secret"}"
+            cookies:
+              - domain: "${config.numbus-server.services.domain}"
+                authelia_url: "https://${cfg.subdomain}.${config.numbus-server.services.domain}"
+                ${optionalString (defaultRedirectionUrl != null) "default_redirection_url: \"${defaultRedirectionUrl}\""}
+          authentication_backend:
+            ldap:
+              implementation: "lldap"
+              address: "ldap://host.containers.internal:3890"
+              base_dn: "${baseDN}"
+              user: "UID=authelia,OU=people,${baseDN}"
+              password: "${config.sops.placeholder."lldap/"}"
+          notifier:
+            smtp:
+              address: submission://${config.numbus-server.mail.smtpHost}:${config.numbus-server.mail.smtpPort}
+              username: ${config.numbus-server.mail.smtpUsername}
+              password: ${config.sops.placeholder.smtpPassword}
+              sender: ${config.numbus-server.mail.fromAddress}
+              tls:
+                server_name: ${config.numbus-server.mail.smtpHost}
+                minimum_version: TLS1.2
+                skip_verify: false
+          access_control:
+            default_policy: 'deny'
+            rules:
+              - domain: "*.${config.numbus-server.service.domain}"
+                policy: two_factor
+                subject: "group:admin"
+        ${allGroupRules}
+      '';
+      path = "/etc/authelia/authelia.yaml";
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/services/applications/crafty.nix b/modules/backup/services/applications/crafty.nix
new file mode 100644
index 0000000..9dc53d1
--- /dev/null
+++ b/modules/backup/services/applications/crafty.nix
@@ -0,0 +1,74 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "crafty";
+  # Version tagging
+  craftyVersion = "v4.10.1";
+  # Storage optimization
+  spindown = config.numbus-server.hardware.HddSpindown;
+  optimizedDir = if spindown.enable && (spindown.optimize == "compatible" || (isList spindown.optimize && elem name spindown.optimize))
+    then cfg.configDir
+    else cfg.dataDir;
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.crafty;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Crafty controller, one place to manage your minecraft servers";
+  defaultPort = "8443";
+  scheme = "https";
+  dataDirEnabled = optimizedDir == cfg.dataDir;
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.configDir}"
+    "100999:100 ${cfg.configDir}/log"
+    "100999:100 ${cfg.configDir}/config"
+    "100999:100 ${optimizedDir}/import"
+    "100999:100 ${optimizedDir}/backups"
+    "100999:100 ${optimizedDir}/servers"
+  ];
+
+  composeText = ''
+    services:
+      crafty:
+        image: registry.gitlab.com/crafty-controller/crafty-4:${craftyVersion}
+        container_name: crafty
+        user: '1000:1000'
+        networks:
+          crafty:
+            ipv4_address: 10.89.250.253
+        ports:
+          - "${cfg.port}:8443/tcp"
+          - "19132:19132/udp"
+          - "25500-25600:25500-25600"
+        volumes:
+          - ${optimizedDir}/backups:/crafty/backups
+          - ${optimizedDir}/servers:/crafty/servers
+          - ${optimizedDir}/import:/crafty/import
+          - ${cfg.configDir}/logs:/crafty/logs
+          - ${cfg.configDir}/config:/crafty/app/config
+        environment:
+          - TZ=${time.timeZone}
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+    networks:
+      crafty:
+        driver: bridge
+        name: crafty
+        ipam:
+          config:
+            - subnet: "10.89.250.0/24"
+              gateway: "10.89.250.254"
+  '';
+}
\ No newline at end of file
diff --git a/modules/backup/services/applications/dashy.nix b/modules/backup/services/applications/dashy.nix
new file mode 100644
index 0000000..4fd4491
--- /dev/null
+++ b/modules/backup/services/applications/dashy.nix
@@ -0,0 +1,97 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "dashy";
+  # Version tagging
+  dashyVersion = "v3.2.3";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.dashy;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Dashy, the ultimate dashboard for your homelab";
+  defaultPort = "8999";
+  configDirEnabled = false;
+  dataDirEnabled = false;
+  middlewares = [
+    "secureHeaders"
+  ];
+
+  composeText = ''
+    services:
+      dashy:
+        image: lissy93/dashy:${dashyVersion}
+        container_name: dashy
+        hostname: dashy
+        user: '1000:1000'
+        networks:
+          dashy:
+            ipv4_address: 10.89.235.253
+        ports:
+          - ${cfg.port}:8080
+        volumes:
+          - ${config.sops."dashy/config".path}:/app/user-data/conf.yml
+        environment:
+          - UID=1000
+          - GID=1000
+          - NODE_ENV=production
+        healthcheck:
+          test: ['CMD', 'node', '/app/services/healthcheck']
+          interval: 1m30s
+          timeout: 10s
+          retries: 3
+          start_period: 40s
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+        networks:
+          dashy:
+            driver: bridge
+            name: dashy
+            ipam:
+              config:
+                - subnet: "10.89.235.0/24"
+                  gateway: "10.89.235.254"
+  '';
+
+  extraConfig = {
+    sops.templates."dashy/config" = {
+      gid = "100";
+      uid = "100999";
+      mode = "0440" ;
+      content = ''
+        pageInfo:
+          title: My Homelab
+        sections:
+        - name: Example Section
+          icon: far fa-rocket
+          items:
+          - title: GitHub
+            description: Dashy source code and docs
+            icon: fab fa-github
+            url: https://github.com/Lissy93/dashy
+          - title: Issues
+            description: View open issues, or raise a new one
+            icon: fas fa-bug
+            url: https://github.com/Lissy93/dashy/issues
+        - name: Local Services
+          items:
+          - title: Firewall
+            icon: favicon
+            url: http://192.168.1.1/
+          - title: Game Server
+            icon: https://i.ibb.co/710B3Yc/space-invader-x256.png
+            url: http://192.168.130.1/
+      '';
+      path = "/etc/dashy/dashy.yaml";
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/services/applications/default.nix b/modules/backup/services/applications/default.nix
new file mode 100644
index 0000000..13a4f6b
--- /dev/null
+++ b/modules/backup/services/applications/default.nix
@@ -0,0 +1,29 @@
+{ ... }:
+
+{
+  imports = [
+    # Good
+    ./gitea.nix
+    ./immich.nix
+    ./nextcloud.nix
+    ./passbolt.nix
+    ./traefik.nix
+    # Testing needed
+    ./authelia.nix
+    ./crafty.nix
+    ./dashy.nix
+    ./frigate.nix
+    ./home-assistant.nix
+    ./homepage.nix
+    ./it-tools.nix
+    ./jellyfin.nix
+    ./lldap.nix
+    ./n8n.nix
+    ./netbird.nix
+    ./netbootxyz.nix
+    ./ntfy.nix
+    ./odoo.nix
+    ./uptime-kuma.nix
+    ./vscodium.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/backup/services/applications/frigate.nix b/modules/backup/services/applications/frigate.nix
new file mode 100644
index 0000000..558efbf
--- /dev/null
+++ b/modules/backup/services/applications/frigate.nix
@@ -0,0 +1,83 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "frigate";
+  # Version tagging
+  frigateVersion = "0.16.4";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.frigate;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  pod = "home-assistant";
+  description = "Frigate, your fully-local NVR (Network Video Recorder)";
+  defaultPort = "8971";
+  scheme = "https";
+  dependencies = [
+    "sops-install-secrets.service"
+    "traefik.service"
+    "authelia.service"
+    "home-assistant.service"
+    "${config.numbus-server.services.dns}.service"
+  ];
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "1000:100 ${cfg.configDir}"
+    "1000:100 ${cfg.dataDir}"
+  ];
+
+  composeText = ''
+    services:
+      frigate:
+        image: ghcr.io/blakeblackshear/frigate:${frigateVersion}
+        container_name: frigate
+        hostname: frigate
+        shm_size: "256mb"
+        networks:
+          home-assistant:
+            ipv4_address: 10.89.230.253
+        ports:
+          - "${cfg.port}:8971/tcp"
+        volumes:
+          - ${cfg.configDir}:/config
+          - ${cfg.dataDir}:/media/frigate
+          - /etc/localtime:/etc/localtime:ro
+          - type: tmpfs
+            target: /tmp/cache
+            tmpfs:
+              size: 1000000000
+        environment:
+          - FRIGATE_MQTT_USER=${config.sops.placeholder."home-assistant/mqtt_username"}
+          - FRIGATE_MQTT_PASSWORD=${config.sops.placeholder."home-assistant/mqtt_password"}
+    ${lib.optionalString (cfg.devices != []) ''
+          devices:
+    ${lib.concatStringsSep "\n" (map (d: "            - \"${d}\"") cfg.devices)}
+    ''}
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        stop_grace_period: 30s
+        restart: unless-stopped
+
+    networks:
+      home-assistant:
+        external: true
+  '';
+
+  extraOptions = {
+    devices = mkOption {
+      type = types.listOf types.str;
+      default = [];
+      example = [ "/dev/dri:/dev/dri" "/dev/bus/usb:/dev/bus/usb" "/dev/apex_0:/dev/apex_0" ];
+      description = "List of devices to map into the container. /dev/dri is used for graphics acceleration, /dev/bus/usb for USB Coral TPUs, and /dev/apex_0 for PCI coral TPUs";
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/services/applications/gitea.nix b/modules/backup/services/applications/gitea.nix
new file mode 100644
index 0000000..8beaf8b
--- /dev/null
+++ b/modules/backup/services/applications/gitea.nix
@@ -0,0 +1,103 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "gitea";
+  # Version tagging
+  giteaVersion = "1.25.4-rootless";
+  databaseVersion = "18-alpine";
+  # Storage optimization
+  spindown = config.numbus-server.hardware.HddSpindown;
+  optimizedDir = if spindown.enable && (spindown.optimize == "compatible" || (isList spindown.optimize && elem name spindown.optimize))
+    then cfg.configDir
+    else cfg.dataDir;
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.gitea;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  pod = "false";
+  description = "Gitea, your own self-hosted git platform";
+  defaultPort = "3000";
+  dataDirEnabled = optimizedDir == cfg.dataDir;
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.configDir}"
+    "100999:100 ${optimizedDir}/data"
+    "100999:100 ${cfg.configDir}/config"
+    "100999:100 ${cfg.configDir}/database"
+  ];
+  secrets = [
+    "gitea/db_name"
+    "gitea/db_username"
+    "gitea/db_password"
+  ];
+
+  composeText = ''
+    services:
+      gitea-database:
+        image: docker.io/library/postgres:${databaseVersion}
+        container_name: gitea-database
+        hostname: gitea-database
+        user: '1000:1000'
+        networks:
+          gitea:
+            ipv4_address: 10.89.240.253
+        volumes:
+          - ${cfg.configDir}/database:/var/lib/postgresql
+        environment:
+          - POSTGRES_DB=${config.sops.placeholder."gitea/db_name"}
+          - POSTGRES_USER=${config.sops.placeholder."gitea/db_username"}
+          - POSTGRES_PASSWORD=${config.sops.placeholder."gitea/db_password"}
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+      gitea-server:
+        image: docker.gitea.com/gitea:${giteaVersion}
+        container_name: gitea-server
+        hostname: gitea-server
+        user: '1000:1000'
+        networks:
+          gitea:
+            ipv4_address: 10.89.240.252
+        ports:
+          - "${cfg.port}:3000/tcp"
+        volumes:
+          - ${optimizedDir}/data:/var/lib/gitea
+          - ${cfg.configDir}/config:/etc/gitea
+          - /etc/localtime:/etc/localtime:ro
+        environment:
+          - GITEA__database__DB_TYPE=postgres
+          - GITEA__database__HOST=gitea-database:5432
+          - GITEA__database__NAME=${config.sops.placeholder."gitea/db_name"}
+          - GITEA__database__USER=${config.sops.placeholder."gitea/db_username"}
+          - GITEA__database__PASSWD=${config.sops.placeholder."gitea/db_password"}
+          - GITEA__server__SSH_PORT=2424
+          - GITEA__server__ROOT_URL=https://${cfg.subdomain}.${config.numbus-server.services.domain}
+        depends_on:
+          - gitea-database
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+    networks:
+      gitea:
+        driver: bridge
+        name: gitea
+        ipam:
+          config:
+            - subnet: "10.89.240.0/24"
+              gateway: "10.89.240.254"
+  '';
+}
\ No newline at end of file
diff --git a/modules/backup/services/applications/home-assistant.nix b/modules/backup/services/applications/home-assistant.nix
new file mode 100644
index 0000000..0a9dca9
--- /dev/null
+++ b/modules/backup/services/applications/home-assistant.nix
@@ -0,0 +1,177 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "home-assistant";
+  # Version tagging
+  homeAssistantVersion = "2026.2.3";
+  mqttVersion = "2.1-alpine";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.home-assistant;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Home Assistant, libre house control and much more";
+  defaultPort = "8123";
+  dataDirEnabled = false;
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "1000:100 ${cfg.configDir}"
+    "1000:100 ${cfg.configDir}/config"
+    "100999:100 ${cfg.configDir}/mqtt"
+  ];
+  secrets = [
+    "home-assistant/mqtt_user"
+    "home-assistant/mqtt_password"
+  ];
+
+# Compose file good
+  composeText = ''
+    services:
+      home-assistant:
+        image: ghcr.io/home-assistant/home-assistant:${homeAssistantVersion}
+        container_name: home-assistant
+        hostname: home-assistant
+        networks:
+          home-assistant:
+            ipv4_address: 10.89.230.252
+        ports:
+          - "${cfg.port}:8123/tcp"
+        volumes:
+          - ${cfg.configDir}/config:/config
+          - /etc/localtime:/etc/localtime:ro
+          - /run/dbus:/run/dbus:ro
+    ${lib.optionalString (cfg.devices != []) ''
+          devices:
+    ${lib.concatStringsSep "\n" (map (d: "            - \"${d}\"") cfg.devices)}
+    ''}
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+      home-assistant-mqtt:
+        image: docker.io/library/eclipse-mosquitto:${mqttVersion}
+        container_name: home-assistant-mqtt
+        hostname: home-assistant-mqtt
+        user: '1000:1000'
+        networks:
+          home-assistant:
+            ipv4_address: 10.89.230.252
+        volumes:
+          - ${cfg.configDir}/mqtt:/mosquitto
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+    networks:
+      home-assistant:
+        driver: bridge
+        name: home-assistant
+        ipam:
+          config:
+            - subnet: "10.89.230.0/24"
+              gateway: "10.89.230.254"
+  '';
+
+  extraOptions = {
+    devices = mkOption {
+      type = types.listOf types.str;
+      default = [];
+      example = [ "/dev/serial/by-id/Sonoff_Zigbee_3.0-id-port0:/dev/ttyUSB0" ];
+      description = "List of devices to map into the container. /dev/ttyUSB0 is used for Zigbee dongles";
+    };
+  };
+
+  extraConfig = {
+    systemd.services."${name}-quirk" = {
+      description = "Podman container quirk : ${name}";
+      after = [ "${name}.service" ];
+      onFailure = [ "service-failure-notify@%n.service" ];
+      startLimitBurst = 5;
+      startLimitIntervalSec = 600;
+      path = [ pkgs.coreutils pkgs.systemd ];
+      serviceConfig = {
+        Type = "oneshot";
+        RemainAfterExit = true;
+      };
+      script = ''
+        mkdir -p /var/lib/numbus-server/${name}
+        if [[ -e ${cfg.configDir}/config/configuration.yaml ]]; then
+          if grep -qF "10.89.230.1/32" ${cfg.configDir}/config/configuration.yaml; then
+            exit 0
+          elif grep -qF "use_x_forwarded_for" ${cfg.configDir}/config/configuration.yaml && ! grep -qF "10.89.230.1/32" ${cfg.configDir}/config/configuration.yaml; then
+            tmp=$(mktemp)
+            head -n -6 ${cfg.configDir}/config/configuration.yaml > "$tmp"
+            mv "$tmp" ${cfg.configDir}/config/configuration.yaml
+          fi
+        fi
+
+        until [[ -e ${cfg.configDir}/config/configuration.yaml ]]; do
+          sleep 15
+        done
+        cat << 'EOF' >> ${cfg.configDir}/config/configuration.yaml
+
+        http:
+          use_x_forwarded_for: true
+          trusted_proxies: 10.89.230.1
+
+        zha:
+        EOF
+
+        systemctl restart ${name}.service
+      '';
+    };
+  };
+
+    systemd.services."mqtt-quirk" = {
+      description = "Podman container quirk : Home-assistant MQTT";
+      after = [ "sops-install-secrets.service" ];
+      before = [ "${name}.service" ];
+      onFailure = [ "service-failure-notify@%n.service" ];
+      startLimitBurst = 5;
+      startLimitIntervalSec = 600;
+      path = [ pkgs.coreutils pkgs.mosquitto ];
+      serviceConfig = {
+        Type = "oneshot";
+        RemainAfterExit = true;
+      };
+      script = ''
+        if [[ -e ${cfg.configDir}/mqtt/mosquitto.conf && ${cfg.configDir}/mqtt/password.txt ]]; then
+          if grep -qF "listener 1883" ${cfg.configDir}/mqtt/mosquitto.conf; then
+            exit 0
+          else
+            rm ${cfg.configDir}/mqtt/mosquitto.conf
+            rm ${cfg.configDir}/mqtt/password.txt
+            touch ${cfg.configDir}/mqtt/mosquitto.conf
+            touch ${cfg.configDir}/mqtt/password.txt
+          fi
+        fi
+
+        cat << EOF >> ${cfg.configDir}/mqtt/mosquitto.conf
+        persistence true
+        persistence_location /mosquitto/data/
+        log_dest file /mosquitto/log/mosquitto.log
+        listener 1883
+        ## Authentication ##
+        allow_anonymous false
+        password_file /mosquitto/password.txt
+        EOF
+
+        HOME_ASSISTANT_MQTT_USER=$(cat /run/secrets/home-assistant/mqtt_user)
+        HOME_ASSISTANT_MQTT_PASSWORD=$(cat /run/secrets/home-assistant/mqtt_password)
+
+        mosquitto_passwd -b ${cfg.configDir}/mqtt/password.txt "$HOME_ASSISTANT_MQTT_USER" "$HOME_ASSISTANT_MQTT_PASSWORD"
+        chmod 0400 ${cfg.configDir}/mqtt/password.txt
+      '';
+    };
+}
diff --git a/modules/backup/services/applications/homepage.nix b/modules/backup/services/applications/homepage.nix
new file mode 100644
index 0000000..689ba16
--- /dev/null
+++ b/modules/backup/services/applications/homepage.nix
@@ -0,0 +1,63 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "homepage";
+  # Version tagging
+  homepageVersion = "v1.10.1";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.homepage;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Homepage, a modern and highly customizable application dashboard";
+  defaultPort = "3003";
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.configDir}"
+    "100999:100 ${cfg.configDir}/config"
+    "100999:100 ${cfg.configDir}/images"
+    "100999:100 ${cfg.configDir}/icons"
+  ];
+
+  composeText = ''
+    services:
+      homepage:
+        image: ghcr.io/gethomepage/homepage:${homepageVersion}
+        container_name: homepage
+        hostname: homepage
+        user: '1000:1000'
+        networks:
+          homepage:
+        ports:
+          - "${cfg.port}:3000/tcp"
+        volumes:
+          - ${cfg.configDir}/config:/app/config
+          - ${cfg.configDir}/images:/app/public/images
+          - ${cfg.configDir}/icons:/app/public/icons
+        environment:
+          PUID: 1000
+          PGID: 1000
+          HOMEPAGE_ALLOWED_HOSTS: ${cfg.subdomain}.${config.numbus-server.services.domain}
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+        networks:
+          homepage:
+            driver: bridge
+            name: homepage
+            ipam:
+              config:
+                - subnet: "10.89.220.0/24"
+                  gateway: "10.89.220.254"
+  '';
+}
\ No newline at end of file
diff --git a/modules/backup/services/applications/immich.nix b/modules/backup/services/applications/immich.nix
new file mode 100644
index 0000000..6c875b4
--- /dev/null
+++ b/modules/backup/services/applications/immich.nix
@@ -0,0 +1,190 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container configuration
+  name = "immich";
+  # Version tagging
+  immichVersion = "v2.5.6";
+  redisVersion = "9@sha256:546304417feac0874c3dd576e0952c6bb8f06bb4093ea0c9ca303c73cf458f63";
+  databaseVersion = "14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357191b76a916ae5eb93464d65c07511da41e3bf7a8416db519b40b1c23";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.immich;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Immich, Google Photos but better";
+  defaultPort = "2283";
+  middlewares = [
+    "immichSecureHeaders"
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.configDir}"
+    "100999:100 ${cfg.configDir}/redis"
+    "100999:100 ${cfg.configDir}/model-cache"
+    "100999:100 ${cfg.configDir}/machine-learning-cache"
+    "100999:100 ${cfg.configDir}/machine-learning-config"
+    "100999:100 ${cfg.configDir}/database"
+    "100999:100 ${cfg.dataDir}"
+  ];
+  secrets = [
+    "immich/redis_hostname"
+    "immich/db_hostname"
+    "immich/db_name"
+    "immich/db_username"
+    "immich/db_password"
+  ];
+
+# Compose file good
+  composeText = ''
+    services:
+      immich-server:
+        container_name: immich-server
+        hostname: immich-server
+        image: ghcr.io/immich-app/immich-server:${immichVersion}
+        user: '1000:1000'
+        networks:
+          immich:
+            ipv4_address: 10.89.210.253
+        ports:
+          - "${cfg.port}:2283/tcp"
+        volumes:
+          - $UPLOAD_LOCATION:/data
+          - /etc/localtime:/etc/localtime:ro
+        environment:
+          TZ: $TZ
+          REDIS_HOSTNAME: ${config.sops.placeholder."immich/redis_hostname"}
+          DB_HOSTNAME: ${config.sops.placeholder."immich/db_hostname"}
+          DB_DATABASE_NAME: ${config.sops.placeholder."immich/db_name"}
+          DB_USERNAME: ${config.sops.placeholder."immich/db_username"}
+          DB_PASSWORD: ${config.sops.placeholder."immich/db_password"}
+          IMMICH_TRUSTED_PROXIES: 10.89.210.1
+        depends_on:
+          - immich-redis
+          - immich-database
+        healthcheck:
+          disable: false
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+      immich-machine-learning:
+        container_name: immich-machine-learning
+        hostname: immich-machine-learning
+        image: ghcr.io/immich-app/immich-machine-learning:${immichVersion}
+        user: '1000:1000'
+        networks:
+          immich:
+            ipv4_address: 10.89.210.252
+        volumes:
+          - ${cfg.configDir}/model-cache:/cache
+          - ${cfg.configDir}/machine-learning-config:/usr/src/.config
+          - ${cfg.configDir}/machine-learning-cache:/usr/src/.cache/
+        healthcheck:
+          disable: false
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+      immich-redis:
+        container_name: immich-redis
+        hostname: immich-redis
+        image: docker.io/valkey/valkey:${redisVersion}
+        user: '1000:1000'
+        networks:
+          immich:
+            ipv4_address: 10.89.210.251
+        volumes:
+          - ${cfg.configDir}/redis:/data
+        healthcheck:
+          test: redis-cli ping || exit 1
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+      immich-database:
+        container_name: immich-database
+        hostname: immich-database
+        image: ghcr.io/immich-app/postgres:${databaseVersion}
+        user: '1000:1000'
+        networks:
+          immich:
+            ipv4_address: 10.89.210.250
+        environment:
+          POSTGRES_DB: ${config.sops.placeholder."immich/db_name"}
+          POSTGRES_USER: ${config.sops.placeholder."immich/db_username"}
+          POSTGRES_PASSWORD: ${config.sops.placeholder."immich/db_password"}
+          POSTGRES_INITDB_ARGS: '--data-checksums'
+        volumes:
+          - $DB_DATA_LOCATION:/var/lib/postgresql/data
+        shm_size: 128mb
+        healthcheck:
+          disable: false
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+    networks:
+      immich:
+        driver: bridge
+        name: immich
+        ipam:
+          config:
+            - subnet: "10.89.210.0/24"
+              gateway: "10.89.210.254"
+  '';
+
+  extraConfig = {
+    sops.templates."immich/env" = {
+      gid = "100";
+      uid = "1000";
+      mode = "0400";
+      content = ''
+        DB_DATA_LOCATION=${cfg.configDir}/database
+        UPLOAD_LOCATION=${cfg.dataDir}
+      '';
+      path = "/etc/podman/immich/.env";
+    };
+
+    sops.templates."traefik/rules/immich-secureHeaders" = { 
+      gid = "100";
+      uid = "100999";
+      mode = "0400";
+      content = ''
+        http:
+          middlewares:
+            immichSecureHeaders:
+              headers:
+                FrameDeny: true
+                AccessControlAllowMethods: 'GET,POST,PUT,DELETE,OPTIONS'
+                AccessControlAllowOriginList:
+                - https://${cfg.subdomain}.${config.numbus-server.services.domain}
+                - origin-list-or-null
+                AccessControlMaxAge: 100
+                AddVaryHeader: true
+                BrowserXssFilter: true
+                ContentTypeNosniff: true
+                ForceSTSHeader: true
+                STSIncludeSubdomains: true
+                STSPreload: true
+                ContentSecurityPolicy: "default-src 'self'; base-uri 'self'; img-src 'self' https://static.immich.cloud https://tiles.immich.cloud data: blob:; connect-src 'self' https://${cfg.subdomain}.${config.numbus-server.services.domain} wss://${cfg.subdomain}.${config.numbus-server.services.domain} https://static.immich.cloud https://tiles.immich.cloud; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob: https://${cfg.subdomain}.${config.numbus-server.services.domain}; frame-ancestors 'self';"
+                CustomFrameOptionsValue: SAMEORIGIN
+                ReferrerPolicy: same-origin
+                PermissionsPolicy: vibrate 'self'
+                STSSeconds: 315360000
+      '';
+      path = "/etc/traefik/rules/immich-secureHeaders.yaml";
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/services/applications/it-tools.nix b/modules/backup/services/applications/it-tools.nix
new file mode 100644
index 0000000..2d35d9a
--- /dev/null
+++ b/modules/backup/services/applications/it-tools.nix
@@ -0,0 +1,54 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "it-tools";
+  # Version tagging
+  it-toolsVersion = "2024.10.22-7ca5933";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.it-tools;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "IT-tools, useful tools when doing IT";
+  pod = "false";
+  defaultPort = "8880";
+  configDirEnabled = false;
+  dataDirEnabled = false;
+  middlewares = [
+    "secureHeaders"
+  ];
+
+# Compose file good
+  composeText = ''
+    services:
+      it-tools:
+        image: docker.io/corentinth/it-tools:${it-toolsVersion}
+        container_name: it-tools
+        hostname: it-tools
+        user: '1000:1000'
+        networks:
+          it-tools:
+            ipv4_address: 10.89.200.253
+        ports:
+          - "${cfg.port}:80/tcp"
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+        networks:
+          it-tools:
+            driver: bridge
+            name: it-tools
+            ipam:
+              config:
+                - subnet: "10.89.200.0/24"
+                  gateway: "10.89.200.254"
+  '';
+}
\ No newline at end of file
diff --git a/modules/backup/services/applications/jellyfin.nix b/modules/backup/services/applications/jellyfin.nix
new file mode 100644
index 0000000..991bce2
--- /dev/null
+++ b/modules/backup/services/applications/jellyfin.nix
@@ -0,0 +1,69 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "jellyfin";
+  # Version tagging
+  jellyfinVersion = "10.11.6";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.jellyfin;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Jellyfin : A self-hosted media server to stream your movies and music";
+  defaultPort = "8096";
+  scheme = "https"; #TODO CHECK
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.dataDir}"
+    "100999:100 ${cfg.configDir}"
+    "100999:100 ${cfg.dataDir}/media"
+    "100999:100 ${cfg.dataDir}/fonts"
+    "100999:100 ${cfg.configDir}/cache"
+    "100999:100 ${cfg.configDir}/config"
+  ];
+
+  composeText = ''
+    services:
+      jellyfin:
+        image: docker.io/jellyfin/jellyfin:${jellyfinVersion}
+        container_name: jellyfin
+        hostname: jellyfin
+        user: '1000:1000'
+        networks:
+          jellyfin:
+            ipv4_address: 10.89.190.253
+        ports:
+          - "${cfg.port}:8096/tcp"
+        volumes:
+          - ${cfg.configDir}/config:/config
+          - ${cfg.configDir}/cache:/cache
+          - type: bind
+            source: ${cfg.dataDir}/media
+            target: /media
+          - type: bind
+            source: ${cfg.dataDir}/fonts
+            target: /usr/local/share/fonts/custom
+            read_only: true
+        cap_drop:
+          - NET_RAW
+        security_opt:
+          - no-new-privileges:true
+        restart: unless-stopped
+
+    networks:
+      jellyfin:
+        driver: bridge
+        name: jellyfin
+        ipam:
+          config:
+            - subnet: "10.89.190.0/24"
+              gateway: "10.89.190.254"
+  '';
+}
\ No newline at end of file
diff --git a/modules/backup/services/applications/lldap.nix b/modules/backup/services/applications/lldap.nix
new file mode 100644
index 0000000..7e423ed
--- /dev/null
+++ b/modules/backup/services/applications/lldap.nix
@@ -0,0 +1,84 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "lldap";
+  # Version tagging
+  lldapVersion = "v0.6.2";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.lldap;
+  # Derive Base DN from domain (e.g., example.com -> dc=example,dc=com)
+  domainParts = splitString "." config.numbus-server.services.domain;
+  baseDN = concatStringsSep "," (map (p: "dc=${p}") domainParts);
+in
+
+helper.mkPodmanService {
+  inherit name;
+  pod = "false";
+  description = "LLDAP, unified user management";
+  defaultPort = "17170";
+  dependencies = [
+    "sops-install-secrets.service"
+    "network-online.target"
+  ];
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.configDir}"
+  ];
+  secrets = [
+    "lldap/jwt_secret"
+    "lldap/key_seed"
+    "lldap/admin_password"
+  ];
+
+  composeText = ''
+    services:
+      lldap:
+        image: lldap/lldap:${lldapVersion}
+        container_name: lldap
+        hostname: lldap
+        user: '1000:1000'
+        networks:
+          lldap:
+            ipv4_address: 10.89.185.253
+        ports:
+          - "3890:3890"
+          - "${cfg.port}:17170"
+        volumes:
+          - ${cfg.configDir}:/data
+        environment:
+          - UID=1000
+          - GID=1000
+          - TZ=${config.time.timeZone}
+          - LLDAP_LDAP_BASE_DN=${baseDN}
+          - LLDAP_JWT_SECRET="${config.sops.placeholder."lldap/jwt_secret"}"
+          - LLDAP_KEY_SEED="${config.sops.placeholder."lldap/key_seed"}"
+          - LLDAP_LDAP_USER_PASS="${config.sops.placeholder."lldap/admin_password"}"
+          - LLDAP_SMTP_OPTIONS__ENABLE_PASSWORD_RESET=true
+          - LLDAP_SMTP_OPTIONS__SERVER=${config.numbus-server.mail.smtpServer}
+          - LLDAP_SMTP_OPTIONS__PORT=${config.numbus-server.mail.smtpPort}
+          - LLDAP_SMTP_OPTIONS__SMTP_ENCRYPTION=${config.numbus-server.mail.smtpEncryption}
+          - LLDAP_SMTP_OPTIONS__USER=${config.numbus-server.mail.smtpUsername}
+          - LLDAP_SMTP_OPTIONS__PASSWORD=${config.sops.placeholder."mail/smtpPassword"}
+          - LLDAP_SMTP_OPTIONS__FROM=no-reply <${config.numbus-server.mail.fromAddress}>
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+    networks:
+      lldap:
+        driver: bridge
+        name: lldap
+        ipam:
+          config:
+            - subnet: "10.89.185.0/24"
+              gateway: "10.89.185.254"
+  '';
+}
\ No newline at end of file
diff --git a/modules/backup/services/applications/n8n.nix b/modules/backup/services/applications/n8n.nix
new file mode 100644
index 0000000..bbfffc6
--- /dev/null
+++ b/modules/backup/services/applications/n8n.nix
@@ -0,0 +1,72 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "n8n";
+  # Version tagging
+  n8nVersion = "2.11.4";
+  # Storage optimization
+  spindown = config.numbus-server.hardware.HddSpindown;
+  optimizedDir = if spindown.enable && (spindown.optimize == "compatible" || (isList spindown.optimize && elem name spindown.optimize))
+    then cfg.configDir
+    else cfg.dataDir;
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.n8n;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  pod = "false";
+  description = "n8n, the ultimate automation platform";
+  defaultPort = "5678";
+  scheme = "https";
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "100999:100 ${optimizedDir}"
+  ];
+
+  composeText = ''
+    services:
+      n8n:
+        image: docker.n8n.io/n8nio/n8n:${n8nVersion}
+        container_name: n8n
+        hostname: n8n
+        user: '1000:1000'
+        networks:
+          n8n:
+            ipv4_address: 10.89.180.253
+        ports:
+          - "${cfg.port}:5678"
+        volumes:
+          - ${optimizedDir}:/home/node/.n8n
+        environment:
+          - N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=true
+          - N8N_HOST=${cfg.subdomain}.${config.numbus-server.services.domain}
+          - N8N_PORT=5678
+          - N8N_PROTOCOL=https
+          - N8N_RUNNERS_ENABLED=true
+          - NODE_ENV=production
+          - WEBHOOK_URL=https://${cfg.subdomain}.${config.numbus-server.services.domain}/
+          - GENERIC_TIMEZONE=${time.timeZone}
+          - TZ=${time.timeZone}
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+    networks:
+      n8n:
+        driver: bridge
+        name: n8n
+        ipam:
+          config:
+            - subnet: "10.89.180.0/24"
+              gateway: "10.89.180.254"
+  '';
+}
\ No newline at end of file
diff --git a/modules/backup/services/applications/netbird.nix b/modules/backup/services/applications/netbird.nix
new file mode 100644
index 0000000..2018076
--- /dev/null
+++ b/modules/backup/services/applications/netbird.nix
@@ -0,0 +1,203 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "netbird";
+  # Version tagging
+  netbirdDashboardVersion = "";
+  netbirdServerVersion = "";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.netbird;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  pod = "false";
+  description = "NetBird, an all-in-one ZTNA remote access platform";
+  defaultPort = "8888";
+  reverseProxied = false;
+  dependencies = [
+    "sops-install-secrets.service"
+    "traefik.service"
+    "${config.numbus-server.services.dns}.service"
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.configDir}"
+  ];
+  secrets = [
+    "netbird/auth_key"
+    "netbird/encryption_key"
+  ];
+
+  composeText = ''
+    services:
+      netbird-dashboard:
+        image: netbirdio/dashboard:${netbirdDashboardVersion}
+        container_name: netbird-dashboard
+        hostname: netbird-dashboard
+        user: '1000:1000'
+        networks:
+          netbird:
+            ipv4_address: 10.89.175.253
+        ports:
+          - "${defaultPort}:8080/tcp"
+        environment:
+          # Endpoints
+          - NETBIRD_MGMT_API_ENDPOINT=https://${cfg.subdomain}.${config.numbus-server.services.domain}
+          - NETBIRD_MGMT_GRPC_API_ENDPOINT=https://${cfg.subdomain}.${config.numbus-server.services.domain}
+          # OIDC - using embedded IdP
+          - AUTH_AUDIENCE=netbird-dashboard
+          - AUTH_CLIENT_ID=netbird-dashboard
+          - AUTH_CLIENT_SECRET=
+          - AUTH_AUTHORITY=https://${cfg.subdomain}.${config.numbus-server.services.domain}/oauth2
+          - USE_AUTH0=false
+          - AUTH_SUPPORTED_SCOPES=openid profile email groups
+          - AUTH_REDIRECT_URI=/nb-auth
+          - AUTH_SILENT_REDIRECT_URI=/nb-silent-auth
+          # SSL
+          - NGINX_SSL_PORT=443
+          - LETSENCRYPT_DOMAIN=none
+        logging:
+          driver: "json-file"
+          options:
+            max-size: "500m"
+            max-file: "2"
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+      netbird-server:
+        image: netbirdio/netbird-server:${netbirdServerVersion}
+        container_name: netbird-server
+        hostname: netbird-server
+        user: '1000:1000'
+        networks:
+          netbird:
+            ipv4_address: 10.89.175.252
+        ports:
+          - "8889:8081/tcp"
+          - "3478:3478/udp"
+        volumes:
+          - ${config.sops.templates."netbird-config".path}:/etc/netbird/config.yaml
+          - ${cfg.configDir}:/var/lib/netbird
+        command: ["--config", "/etc/netbird/config.yaml"]
+        logging:
+          driver: "json-file"
+          options:
+            max-size: "500m"
+            max-file: "2"
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+    networks:
+      netbird:
+        driver: bridge
+        name: netbird
+        ipam:
+          config:
+            - subnet: "10.89.175.0/24"
+              gateway: "10.89.175.254"
+  '';
+
+  extraConfig = {
+    sops.templates."netbird-config" = {
+      gid = "100";
+      uid = "100999";
+      mode = "0400";
+      content = ''
+        server:
+          listenAddress: ":80"
+          exposedAddress: "https://${cfg.subdomain}.${config.numbus-server.services.domain}:443"
+          stunPorts:
+            - 3478
+          metricsPort: 9090
+          healthcheckAddress: ":9000"
+          logLevel: "info"
+          logFile: "console"
+          authSecret: "${config.sops.placeholder."netbird/auth_key"}"
+          dataDir: "/var/lib/netbird"
+
+          auth:
+            issuer: "https://${cfg.subdomain}.${config.numbus-server.services.domain}/oauth2"
+            signKeyRefreshEnabled: true
+            dashboardRedirectURIs:
+              - "https://${cfg.subdomain}.${config.numbus-server.services.domain}/nb-auth"
+              - "https://${cfg.subdomain}.${config.numbus-server.services.domain}/nb-silent-auth"
+            cliRedirectURIs:
+              - "http://localhost:53000/"
+
+          reverseProxy:
+            trustedHTTPProxies:
+              - "10.89.175.1/32"
+
+          store:
+            engine: "sqlite"
+            encryptionKey: "${config.sops.placeholder."netbird/encryption_key"}"
+      '';
+      path = "/etc/netbird/netbird.yaml";
+    };
+
+    sops.templates."traefik/rules/${name}" = {
+      gid = "100";
+      uid = "1000";
+      mode = "0400";
+      content = ''
+        http:
+          routers:
+            ${name}-dashboard:
+              rule: "Host(`${cfg.subdomain}.${config.numbus-server.services.domain}`)"
+              entrypoints:
+                - "websecure"
+              middlewares:
+                - secureHeaders
+              tls:
+                certresolver: "cloudflare"
+                options: "secureTLS"
+              priority: 1
+            ${name}-grpc:
+              rule: "Host(`${cfg.subdomain}.${config.numbus-server.services.domain}`) && (PathPrefix(`/signalexchange.SignalExchange/`) || PathPrefix(`/management.ManagementService/`))"
+              entrypoints:
+                - "websecure"
+              service: ${name}-server-h2c
+              middlewares:
+                - secureHeaders
+              tls:
+                certresolver: "cloudflare"
+                options: "secureTLS"
+            ${name}-backend:
+              rule: "Host(`${cfg.subdomain}.${config.numbus-server.services.domain}`) && (PathPrefix(`/relay`) || PathPrefix(`/ws-proxy/`) || PathPrefix(`/api`) || PathPrefix(`/oauth2`))"
+              entrypoints:
+                - "websecure"
+              service: ${name}-server
+              middlewares:
+                - secureHeaders
+              tls:
+                certresolver: "cloudflare"
+                options: "secureTLS"
+
+          services:${cfg.port}
+            ${name}-dashboard:
+              loadBalancer:
+                servers:
+                  - url: "http://host.containers.internal:${cfg.port}"
+            ${name}-server:
+              loadBalancer:
+                servers:
+                  - url: "http://host.containers.internal:8889"
+            ${name}-server-h2c:
+              loadBalancer:
+                servers:
+                  - url: "h2c://host.containers.internal:3478"
+      '';
+      path = "/etc/traefik/rules/${name}";
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/services/applications/netbootxyz.nix b/modules/backup/services/applications/netbootxyz.nix
new file mode 100644
index 0000000..bda78ae
--- /dev/null
+++ b/modules/backup/services/applications/netbootxyz.nix
@@ -0,0 +1,75 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "netbootxyz";
+  # Version tagging
+  netbootxyzVersion = "3.0.0";
+  # Storage optimization
+  spindown = config.numbus-server.hardware.HddSpindown;
+  optimizedDir = if spindown.enable && (spindown.optimize == "compatible" || (isList spindown.optimize && elem name spindown.optimize))
+    then cfg.configDir
+    else cfg.dataDir;
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.netbootxyz;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Netboot.xyz, forget about flashing isos on USB sticks with PXE boot";
+  pod = "false";
+  defaultPort = "3004";
+  configDirEnabled = optimizedDir == cfg.configDir;
+  dataDirEnabled = optimizedDir == cfg.dataDir;
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.configDir}"
+    "100999:100 ${optimizedDir}"
+    "100999:100 ${cfg.configDir}/config"
+    "100999:100 ${optimizedDir}/assets"
+  ];
+
+  composeText = ''
+    services:
+      netbootxyz:
+        image: ghcr.io/netbootxyz/netbootxyz:${netbootxyzVersion}
+        container_name: netbootxyz
+        hostname: netbootxyz
+        user: '1000:1000'
+        networks:
+          netbootxyz:
+            ipv4_address: 10.89.170.253
+        ports:
+          - "${cfg.port}:3000/tcp"
+          - "69:69/udp"
+          - "8008:80/tcp"
+        volumes:
+          - ${cfg.configDir}/config:/config
+          - ${optimizedDir}/assets:/assets
+        environment:
+          - PUID=1000
+          - PGID=1000
+          - TZ=${time.timeZone}
+          - PORT_RANGE=30000:30010
+          - SUBFOLDER=/
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+    networks:
+      netbootxyz:
+        driver: bridge
+        name: netbootxyz
+        ipam:
+          config:
+            - subnet: "10.89.170.0/24"
+              gateway: "10.89.170.254"
+  '';
+}
\ No newline at end of file
diff --git a/modules/backup/services/applications/nextcloud.nix b/modules/backup/services/applications/nextcloud.nix
new file mode 100644
index 0000000..599b57e
--- /dev/null
+++ b/modules/backup/services/applications/nextcloud.nix
@@ -0,0 +1,384 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Version tagging
+  nextcloudVersion = "33.0.0";
+  redisVersion = "8.6-alpine";
+  databaseVersion = "11.8";
+  onlyofficeVersion = "9.2";
+  whiteboardVersion = "v1.5.6";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.nextcloud;
+  # Container config
+  name = "nextcloud";
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Nextcloud, your own online office suite";
+  defaultPort = "1100";
+  middlewares = [
+    "nextcloudSecureHeaders"
+  ];
+  secrets = [
+    "nextcloud/db_name"
+    "nextcloud/db_username"
+    "nextcloud/db_password"
+    "nextcloud/redis_password"
+    "nextcloud/onlyoffice_secret"
+    "nextcloud/whiteboard_secret"
+  ];
+  dirPermissions = [
+    "100032:100 ${cfg.dataDir}"
+    "100032:100 ${cfg.configDir}"
+    "100032:100 ${cfg.configDir}/web"
+    "100999:100 ${cfg.configDir}/redis"
+    "100999:100 ${cfg.configDir}/database"
+    "1000:100 ${cfg.configDir}/onlyoffice"
+    "1000:100 ${cfg.configDir}/onlyoffice/log"
+    "1000:100 ${cfg.configDir}/onlyoffice/cache"
+    "1000:100 ${cfg.configDir}/onlyoffice/data"
+    "1000:100 ${cfg.configDir}/onlyoffice/database"
+  ];
+
+# Compose file good
+  composeText = ''
+    services:
+      nextcloud-server:
+        image: docker.io/library/nextcloud:${nextcloudVersion}
+        container_name: nextcloud-server
+        hostname: nextcloud-server
+        networks:
+          nextcloud:
+            ipv4_address: 10.89.160.253
+        ports:
+          - "${cfg.port}:80/tcp"
+        volumes:
+          - ${cfg.configDir}/web:/var/www/html
+          - ${cfg.dataDir}:/mnt/ncdata
+        environment:
+          MYSQL_HOST: nextcloud-database:3306
+          MYSQL_DATABASE: ${config.sops.placeholder."nextcloud/db_name"}
+          MYSQL_USER: ${config.sops.placeholder."nextcloud/db_username"}
+          MYSQL_PASSWORD: ${config.sops.placeholder."nextcloud/db_password"}
+          REDIS_HOST_PASSWORD: ${config.sops.placeholder."nextcloud/redis_password"}
+          REDIS_HOST: nextcloud-redis
+          NEXTCLOUD_TRUSTED_DOMAINS: ${cfg.subdomain}.${config.numbus-server.services.domain}
+          NEXTCLOUD_DATA_DIR: /mnt/ncdata
+          SMTP_SECURE: tls
+          SMTP_HOST: ${config.numbus-server.mail.smtpServer}
+          SMTP_PORT: ${toString config.numbus-server.mail.smtpPort}
+          SMTP_NAME: ${config.numbus-server.mail.smtpUsername}
+          SMTP_PASSWORD:  ${config.sops.placeholder.smtpPassword}
+          MAIL_FROM_ADDRESS: no-reply
+          MAIL_DOMAIN: ${config.numbus-server.services.domain}
+          APACHE_DISABLE_REWRITE_IP: 1
+          OVERWRITEPROTOCOL: https
+          TRUSTED_PROXIES: 10.89.160.1
+          NC_default_phone_region: "${config.numbus-server.language}"
+          NC_default_language: "${config.numbus-server.language}"
+          NC_default_locale: "${config.numbus-server.locale}"
+          NC_default_timezone: "${config.time.timeZone}"
+          NC_maintenance_window_start: "1"
+        depends_on:
+          - nextcloud-database
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+      nextcloud-redis:
+        image: docker.io/library/redis:${redisVersion}
+        container_name: nextcloud-redis
+        hostname: nextcloud-redis
+        user: '1000:1000'
+        networks:
+          nextcloud:
+            ipv4_address: 10.89.160.252
+        volumes:
+          - ${cfg.configDir}/redis:/data
+        command: redis-server --requirepass ${config.sops.placeholder."nextcloud/redis_password"} --save 60 1 --loglevel warning
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+      nextcloud-database:
+        image: docker.io/library/mariadb:${databaseVersion}
+        container_name: nextcloud-database
+        hostname: nextcloud-database
+        user: '1000:1000'
+        networks:
+          nextcloud:
+            ipv4_address: 10.89.160.251
+        volumes:
+          - ${cfg.configDir}/database:/var/lib/mysql
+        environment:
+          MARIADB_DATABASE: ${config.sops.placeholder."nextcloud/db_name"}
+          MARIADB_USER: ${config.sops.placeholder."nextcloud/db_username"}
+          MARIADB_PASSWORD: ${config.sops.placeholder."nextcloud/db_password"}
+          MARIADB_RANDOM_ROOT_PASSWORD: true
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        command:
+          - "--transaction-isolation=READ-COMMITTED"
+          - "--binlog-format=ROW"
+        restart: unless-stopped
+
+      nextcloud-onlyoffice:
+        image: docker.io/onlyoffice/documentserver:${onlyofficeVersion}
+        container_name: nextcloud-onlyoffice
+        hostname: nextcloud-onlyoffice
+        networks:
+          nextcloud:
+            ipv4_address: 10.89.160.250
+        ports:
+          - "9980:80/tcp"
+        volumes:
+          - ${cfg.configDir}/onlyoffice/log:/var/log/onlyoffice
+          - ${cfg.configDir}/onlyoffice/cache:/var/lib/onlyoffice
+          - ${cfg.configDir}/onlyoffice/data:/var/www/onlyoffice/Data
+          - ${cfg.configDir}/onlyoffice/database:/var/lib/postgresql
+        environment:
+          - JWT_SECRET=${config.sops.placeholder."nextcloud/onlyoffice_secret"}
+          - REDIS_SERVER_PASS=${config.sops.placeholder."nextcloud/redis_password"}
+          - REDIS_SERVER_HOST=nextcloud-redis
+          - REDIS_SERVER_PORT=6379
+          - ADMINPANEL_ENABLED=false
+          - EXAMPLE_ENABLED=false
+          - METRICS_ENABLED=false
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+      nextcloud-whiteboard:
+        image: ghcr.io/nextcloud-releases/whiteboard:${whiteboardVersion}
+        container_name: nextcloud-whiteboard
+        hostname: nextcloud-whiteboard
+        user: '1000:1000'
+        ports:
+          - "3002:3002/tcp"
+        environment:
+          NEXTCLOUD_URL: https://${cfg.subdomain}.${config.numbus-server.services.domain}
+          JWT_SECRET_KEY: ${config.sops.placeholder."nextcloud/whiteboard_secret"}
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+    networks:
+      nextcloud:
+        driver: bridge
+        name: nextcloud
+        ipam:
+          config:
+            - subnet: "10.89.160.0/24"
+              gateway: "10.89.160.254"
+  '';
+
+  extraOptions = {
+    onlyoffice = {
+      subdomain = mkOption {
+        type = types.str;
+        default = "onlyoffice";
+        example = "onlyoffice";
+        description = "The subdomain that onlyoffice for nextcloud will use";
+      };
+    };
+    whiteboard = {
+      subdomain = mkOption {
+        type = types.str;
+        default = "whiteboard";
+        example = "whiteboard";
+        description = "The subdomain that whiteboard for nextcloud will use";
+      };
+    };
+  };
+
+  extraConfig = {
+    sops.templates."traefik/rules/nextcloud-onlyoffice" = {
+      gid = "100";
+      uid = "100999";
+      mode = "0400";
+      content = ''
+        http:
+          routers:
+            nextcloud-onlyoffice:
+              rule: "Host(`${cfg.onlyoffice.subdomain}.${config.numbus-server.services.domain}`)"
+              entrypoints:
+                - "websecure"
+              service: nextcloud-onlyoffice
+              tls:
+                certresolver: "cloudflare"
+                options: "secureTLS"
+          services:
+            nextcloud-onlyoffice:
+              loadBalancer:
+                servers:
+                  - url: "http://host.containers.internal:9980"
+      '';
+      path = "/etc/traefik/rules/nextcloud-onlyoffice.yaml";
+    };
+
+    sops.templates."traefik/rules/nextcloud-whiteboard" = {
+      gid = "100";
+      uid = "100999";
+      mode = "0400";
+      content = ''
+        http:
+          routers:
+            nextcloud-whiteboard:
+              rule: "Host(`${cfg.whiteboard.subdomain}.${config.numbus-server.services.domain}`)"
+              entrypoints:
+                - "websecure"
+              service: nextcloud-whiteboard
+              middlewares:
+                - "secureHeaders"
+              tls:
+                certresolver: "cloudflare"
+                options: "secureTLS"
+          services:
+            nextcloud-whiteboard:
+              loadBalancer:
+                servers:
+                  - url: "http://host.containers.internal:3002"
+      '';
+      path = "/etc/traefik/rules/nextcloud-whiteboard.yaml";
+    };
+
+    sops.templates."traefik/rules/nextcloud-secureHeaders" = {
+      gid = "100";
+      uid = "100999";
+      mode = "0400";
+      content = ''
+        http:
+          middlewares:
+            nextcloudSecureHeaders:
+              headers:
+                FrameDeny: false
+                CustomFrameOptionsValue: "SAMEORIGIN"
+                AddVaryHeader: true
+                BrowserXssFilter: true
+                ContentTypeNosniff: true
+                ForceSTSHeader: true
+                STSSeconds: 315360000
+                STSIncludeSubdomains: true
+                STSPreload: true
+                AccessControlAllowMethods: "GET,OPTIONS,PUT"
+                AccessControlAllowOriginList:
+                  - origin-list-or-null
+                AccessControlMaxAge: 100
+                ReferrerPolicy: same-origin
+                PermissionsPolicy: "vibrate=()"
+                ContentSecurityPolicy: >-
+                  default-src https://${cfg.onlyoffice.subdomain}.${config.numbus-server.services.domain} 'self';
+                  script-src https://${cfg.onlyoffice.subdomain}.${config.numbus-server.services.domain} 'self' 'unsafe-inline';
+                  style-src 'self' 'unsafe-inline';
+                  connect-src 'self';
+                  img-src 'self' data:;
+                  font-src 'self' data:;
+                  frame-src https://${cfg.onlyoffice.subdomain}.${config.numbus-server.services.domain} 'self';
+                  frame-ancestors https://${cfg.onlyoffice.subdomain}.${config.numbus-server.services.domain} 'self';
+                  object-src 'none';
+                  base-uri 'self';
+      '';
+      path = "/etc/traefik/rules/nextcloud-secureHeaders";
+    };
+
+    systemd.services."${name}-quirk" = {
+      description = "Podman container quirk : ${name}";
+      wantedBy = [ "multi-user.target" ];
+      after = [ "${name}.service" "${name}-secrets.service" ];
+      onFailure = [ "service-failure-notify@%n.service" ];
+      startLimitBurst = 5;
+      startLimitIntervalSec = 600;
+      path = [ pkgs.coreutils pkgs.sudo pkgs.podman pkgs.systemd pkgs.gnugrep ];
+      serviceConfig = {
+        Type = "oneshot";
+        RemainAfterExit = true;
+      };
+      script = ''
+        OCC="sudo -u numbus-admin podman exec --user www-data nextcloud-server php occ"
+
+        [[ ! -e /var/lib/numbus-server/${name}/.env ]] && systemctl start ${name}-secrets.service
+        until [[ -e /var/lib/numbus-server/${name}/.env ]]; do
+          echo "Waiting for secrets generation..."
+          sleep 5
+        done
+        source /var/lib/numbus-server/${name}/.env
+
+        until $OCC status | grep -iq "installed: true" >/dev/null 2>&1; do
+          echo "Waiting for Nextcloud to be up and running..."
+          sleep 60
+        done
+
+        $OCC db:add-missing-indices
+        $OCC maintenance:repair --include-expensive
+
+        INSTALL_APPS_LIST=( "calendar" "contacts" "mail" "notes" "onlyoffice" "cookbook" "whiteboard" )
+        DISABLE_APPS_LIST=( "activity" "federation" "webhook_listeners" "photos" "recommendations" "sharebymail" "teams" "support" "richdocumentscode" )
+
+        for app in ''${INSTALL_APPS_LIST[@]}; do
+          if ! $OCC --no-warnings app:list | grep -iq "$app:"; then
+            $OCC --no-warnings app:install "$app"
+          fi
+          if $OCC --no-warnings app:list --disabled | grep -iq "$app:"; then
+            $OCC --no-warnings app:enable "$app"
+          fi
+        done
+        for app in ''${DISABLE_APPS_LIST[@]}; do
+          if $OCC --no-warnings app:list --enabled | grep -iq "$app:"; then
+            $OCC --no-warnings app:disable "$app"
+          fi
+        done
+        $OCC --no-warnings config:system:set onlyoffice DocumentServerInternalUrl --value="https://${cfg.onlyoffice.subdomain}.${config.numbus-server.services.domain}/"
+        $OCC --no-warnings config:system:set onlyoffice DocumentServerUrl --value="https://${cfg.onlyoffice.subdomain}.${config.numbus-server.services.domain}/"
+        $OCC --no-warnings config:system:set onlyoffice jwt_secret --value="$ONLYOFFICE_PASSWORD"
+        $OCC --no-warnings config:app:set whiteboard collabBackendUrl --value="https://${cfg.whiteboard.subdomain}.${config.numbus-server.services.domain}"
+        $OCC --no-warnings config:app:set whiteboard jwt_secret_key --value="$WHITEBOARD_PASSWORD"
+
+        if [[ ! -f /var/lib/numbus-server/${name}/croned.true ]]; then
+          $OCC background:cron
+          sudo -u numbus-admin podman exec --user www-data nextcloud-server php -f /var/www/html/cron.php
+          touch /var/lib/numbus-server/${name}/croned.true
+        fi
+
+        if [[ ! -f /var/lib/numbus-server/${name}/scanned.true ]]; then
+          $OCC files:scan --all
+          $OCC files:repair-tree
+          touch /var/lib/numbus-server/${name}/scanned.true
+        fi
+      '';
+    };
+
+    systemd.services."${name}-cron" = {
+      description = "Podman container crontab : ${name}";
+      after = [ "${name}.service" "${name}-quirk.service" ];
+      onFailure = [ "service-failure-notify@%n.service" ];
+      path = [ pkgs.sudo pkgs.podman ];
+      serviceConfig = {
+        Type = "oneshot";
+        ExecCondition = ''${pkgs.sudo}/bin/sudo -u numbus-admin podman exec --user www-data nextcloud-server php occ status'';
+        ExecStart = "${pkgs.sudo}/bin/sudo -u numbus-admin podman exec --user www-data nextcloud-server php -f /var/www/html/cron.php";
+      };
+    };
+
+    systemd.timers."${name}-cron" = {
+      description = "Timer for Nextcloud cron";
+      wantedBy = [ "timers.target" ];
+      timerConfig = {
+        OnBootSec = "5m";
+        OnUnitActiveSec = "5m";
+        Unit = "${name}-cron.service";
+      };
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/services/applications/ntfy.nix b/modules/backup/services/applications/ntfy.nix
new file mode 100644
index 0000000..6650008
--- /dev/null
+++ b/modules/backup/services/applications/ntfy.nix
@@ -0,0 +1,62 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "ntfy";
+  # Version tagging
+  ntfyVersion = "v2.18.0";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.ntfy;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Ntfy, get notified easily";
+  defaultPort = "8099";
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.configDir}"
+    "100999:100 ${cfg.configDir}/cache"
+    "100999:100 ${cfg.configDir}/config"
+  ];
+
+  composeText = ''
+    services:
+      ntfy:
+        image: docker.io/binwiederhier/ntfy
+        container_name: ntfy
+        hostname: ntfy
+        user: "1000:1000"
+        networks:
+          ntfy:
+            ipv4_address: 10.89.150.253
+        ports:
+          - "${cfg.port}:80/tcp"
+        command:
+          - serve
+        volumes:
+          - ${cfg.config}/cache:/var/cache/ntfy
+          - ${cfg.config}/config:/etc/ntfy
+        environment:
+          - TZ=${time.timeZone}
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+    networks:
+      ntfy:
+        driver: bridge
+        name: ntfy
+        ipam:
+          config:
+            - subnet: "10.89.150.0/24"
+              gateway: "10.89.150.254"
+  '';
+}
\ No newline at end of file
diff --git a/modules/backup/services/applications/odoo.nix b/modules/backup/services/applications/odoo.nix
new file mode 100644
index 0000000..fba6c67
--- /dev/null
+++ b/modules/backup/services/applications/odoo.nix
@@ -0,0 +1,118 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "odoo";
+  # Version tagging
+  odooVersion = "10.11.6";
+  databaseVersion = "15.17";
+  # Storage optimization
+  spindown = config.numbus-server.hardware.HddSpindown;
+  optimizedDir = if spindown.enable && (spindown.optimize == "compatible" || (isList spindown.optimize && elem name spindown.optimize))
+    then cfg.configDir
+    else cfg.dataDir;
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.odoo;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Odoo : An open ERP (Enterprise resource planning) solution";
+  defaultPort = "8069";
+  configDirEnabled = optimizedDir == cfg.configDir;
+  dataDirEnabled = optimizedDir == cfg.dataDir;
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "100999:100 ${optimizedDir}"
+    "100999:100 ${optimizedDir}/odoo"
+    "100999:100 ${cfg.configDir}/addons"
+    "100999:100 ${cfg.configDir}/config"
+    "100999:100 ${cfg.configDir}/database"
+  ];
+
+  composeText = ''
+    services:
+      odoo-database:
+        image: docker.io/library/postgres:${databaseVersion}
+        container_name: odoo-database
+        hostname: odoo-database
+        user: '1000:1000'
+        shm_size: 128mb
+        networks:
+          odoo:
+            ipv4_address: 10.89.190.253
+        volumes:
+          - ${cfg.configDir}/database:/var/lib/postgresql/data
+        environment:
+          - POSTGRES_DB=${config.sops.placeholder."odoo/db_name"}
+          - POSTGRES_PASSWORD=${config.sops.placeholder."odoo/db_password"}
+          - POSTGRES_USER=${config.sops.placeholder."odoo/db_username"}
+          - PGDATA=/var/lib/postgresql/data
+        cap_drop:
+          - NET_RAW
+        security_opt:
+          - no-new-privileges:true
+        restart: unless-stopped
+
+      odoo-server:
+        image: docker.io/library/odoo:${odooVersion}
+        container_name: odoo-server
+        hostname: odoo-server
+        user: '1000:1000'
+        networks:
+          odoo:
+            ipv4_address: 10.89.190.252
+        ports:
+          - "${cfg.port}:8069/tcp"
+        volumes:
+          - ${optimizedDir}/odoo:/var/lib/odoo
+          - ${cfg.configDir}/config:/etc/odoo
+          - ${cfg.configDir}/addons:/mnt/extra-addons
+        environment:
+          - HOST=odoo-database
+          - USER=${config.sops.placeholder."odoo/db_username"}
+          - PASSWORD=${config.sops.placeholder."odoo/db_password"}
+        depends_on:
+          - odoo-database
+        cap_drop:
+          - NET_RAW
+        security_opt:
+          - no-new-privileges:true
+        restart: unless-stopped
+
+    networks:
+      odoo:
+        driver: bridge
+        name: odoo
+        ipam:
+          config:
+            - subnet: "10.89.190.0/24"
+              gateway: "10.89.190.254"
+  '';
+
+  extraConfig = {
+    sops.secrets."odoo/db_name" = {
+      sopsFile = /etc/nixos/secrets/podman/odoo.yaml;
+      gid = "100";
+      uid = "1000";
+      mode = "0400";
+    };
+    sops.secrets."odoo/db_username" = {
+      sopsFile = /etc/nixos/secrets/podman/odoo.yaml;
+      gid = "100";
+      uid = "1000";
+      mode = "0400";
+    };
+    sops.secrets."odoo/db_password" = {
+      sopsFile = /etc/nixos/secrets/podman/odoo.yaml;
+      gid = "100";
+      uid = "1000";
+      mode = "0400";
+    };
+  };
+}
diff --git a/modules/backup/services/applications/passbolt.nix b/modules/backup/services/applications/passbolt.nix
new file mode 100644
index 0000000..d16c53a
--- /dev/null
+++ b/modules/backup/services/applications/passbolt.nix
@@ -0,0 +1,112 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "passbolt";
+  # Version tagging
+  passboltVersion = "5.9.0-1-ce-non-root";
+  databaseVersion = "12.2";
+  # Storage optimization
+  spindown = config.numbus-server.hardware.HddSpindown;
+  optimizedDir = if spindown.enable && (spindown.optimize == "compatible" || (isList spindown.optimize && elem name spindown.optimize))
+    then cfg.configDir
+    else cfg.dataDir;
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.passbolt;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Passbolt, your password manager";
+  defaultPort = "4433";
+  scheme = "https";
+  dataDirEnabled = false;
+  middlewares = [ "secureHeaders" ];
+  dirPermissions = [
+    "100032:100 ${cfg.configDir}"
+    "100032:100 ${cfg.configDir}/gpg"
+    "100032:100 ${cfg.configDir}/jwt"
+    "100999:100 ${cfg.configDir}/database"
+  ];
+  secrets = [
+    "passbolt/db_name"
+    "passbolt/db_username"
+    "passbolt/db_password"
+  ];
+
+# Compose file good
+  composeText = ''
+    services:
+      passbolt-server:
+        image: docker.io/passbolt/passbolt:${passboltVersion}
+        container_name: passbolt-server
+        hostname: passbolt-server
+        user: '33:33'
+        networks:
+          passbolt:
+        ports:
+          - "${cfg.port}:4433/tcp"
+        volumes:
+          - ${cfg.configDir}/gpg:/etc/passbolt/gpg
+          - ${cfg.configDir}/jwt:/etc/passbolt/jwt
+        environment:
+          APP_DEFAULT_TIMEZONE: ${config.time.timeZone}
+          APP_FULL_BASE_URL: https://${cfg.subdomain}.${config.numbus-server.services.domain}
+          DATASOURCES_DEFAULT_HOST: "passbolt-database"
+          DATASOURCES_DEFAULT_USERNAME: ${config.sops.placeholder."passbolt/db_username"}
+          DATASOURCES_DEFAULT_PASSWORD: ${config.sops.placeholder."passbolt/db_password"}
+          DATASOURCES_DEFAULT_DATABASE: ${config.sops.placeholder."passbolt/db_name"}
+          EMAIL_DEFAULT_FROM_NAME: "Passbolt"
+          EMAIL_TRANSPORT_DEFAULT_HOST: ${config.numbus-server.mail.smtpServer}
+          EMAIL_TRANSPORT_DEFAULT_PORT: ${toString config.numbus-server.mail.smtpPort}
+          EMAIL_TRANSPORT_DEFAULT_USERNAME: ${config.numbus-server.mail.smtpUsername}
+          EMAIL_TRANSPORT_DEFAULT_PASSWORD: ${config.sops.placeholder."mail/smtpPassword"}
+          EMAIL_TRANSPORT_DEFAULT_TLS: true
+          EMAIL_DEFAULT_FROM: passbolt-noreply@${config.numbus-server.services.domain}
+          PASSBOLT_SSL_FORCE: true
+        command:
+          [
+            "/usr/bin/wait-for.sh",
+            "-t",
+            "0",
+            "passbolt-database:3306",
+            "--",
+            "/docker-entrypoint.sh"
+          ]
+        depends_on:
+          - passbolt-database
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+      passbolt-database:
+        image: docker.io/library/mariadb:${databaseVersion}
+        container_name: passbolt-database
+        hostname: passbolt-database
+        user: '1000:1000'
+        networks:
+          passbolt:
+        volumes:
+          - ${cfg.configDir}/database:/var/lib/mysql
+        environment:
+          MYSQL_RANDOM_ROOT_PASSWORD: "true"
+          MYSQL_DATABASE: ${config.sops."passbolt/db_name"}
+          MYSQL_USER: ${config.sops."passbolt/db_username"}
+          MYSQL_PASSWORD: ${config.sops."passbolt/db_password"}
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+    networks:
+      passbolt:
+        name: passbolt
+        driver: bridge
+  '';
+}
\ No newline at end of file
diff --git a/modules/backup/services/applications/traefik.nix b/modules/backup/services/applications/traefik.nix
new file mode 100644
index 0000000..d776c07
--- /dev/null
+++ b/modules/backup/services/applications/traefik.nix
@@ -0,0 +1,178 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "traefik";
+  # Version tagging
+  traefikVersion = "v3.6.8";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.traefik;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Traefik reverse proxy, one to rule them all";
+  defaultPort = "7780";
+  pod = "false";
+  startDelay = 10;
+  dataDirEnabled = false;
+  middlewares = [
+    "secureHeaders"
+  ];
+  dependencies = [
+    "sops-install-secrets.service"
+    "network-online.target"
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.configDir}"
+    "100999:100 ${cfg.configDir}/certs"
+  ];
+
+# Compose file good
+  composeText = ''
+    services:
+      traefik:
+        image: docker.io/library/traefik:${traefikVersion}
+        container_name: traefik
+        hostname: traefik
+        user: '1000:1000'
+        network_mode: pasta
+        ports:
+          - "${cfg.port}:8080/tcp"
+          - "443:443/tcp"
+        volumes:
+          - ${config.sops.templates."traefik/config".path}:/etc/traefik/traefik.yaml:ro
+          - ${cfg.configDir}/certs:/var/traefik/certs
+          - /etc/traefik/rules:/etc/traefik/rules:ro
+        environment:
+          - CF_DNS_API_TOKEN=${config.sops.placeholder."traefik/cloudflare_api_token"}
+        cap_add:
+          - NET_BIND_SERVICE
+        security_opt:
+          - no-new-privileges:true
+        restart: unless-stopped
+  '';
+
+  extraConfig = {
+    sops.secrets."traefik/cloudflare_api_token" = {
+      sopsFile = /etc/nixos/secrets/podman/traefik.yaml;
+      gid = "100";
+      uid = "1000";
+      mode = "0400";
+    };
+
+    sops.templates."traefik/config"= { 
+      gid = "100";
+      uid = "100999";
+      mode = "0400";
+      content = ''
+        global:
+          checkNewVersion: false
+          sendAnonymousUsage: false
+        log:
+          level: ${cfg.logLevel}
+        accesslog: {}
+        api:
+          dashboard: true
+          insecure: false
+        entryPoints:
+          web:
+            address: :80
+            http:
+              redirections:
+                entryPoint:
+                  to: websecure
+                  scheme: https
+          websecure:
+            address: :443
+            forwardedHeaders:
+              trustedIPs:
+                - "127.0.0.1/32"
+                - "10.0.0.0/8"
+                - "192.168.0.0/16"
+                - "172.16.0.0/12"
+        certificatesResolvers:
+          cloudflare:
+            acme:
+              email: ${config.numbus-server.mail.adminAddress}
+              storage: /var/traefik/certs/cloudflare-acme.json
+              caServer: "https://acme-v02.api.letsencrypt.org/directory"
+              dnsChallenge:
+                provider: cloudflare
+                resolvers:
+                  - "1.1.1.1:53"
+                  - "9.9.9.9:53"
+        serversTransport:
+          insecureSkipVerify: true
+        providers:
+          file:
+            directory: "/etc/traefik/rules"
+            watch: true
+      '';
+      path = "/etc/traefik/traefik.yaml";
+    };
+
+    sops.templates."traefik/rules/secureHeaders" = {
+      gid = "100";
+      uid = "100999";
+      mode = "0400";
+      content = ''
+        http:
+          middlewares:
+            secureHeaders:
+              headers:
+                FrameDeny: true
+                AccessControlAllowMethods: 'GET,OPTIONS,PUT'
+                AccessControlAllowOriginList:
+                  - origin-list-or-null
+                AccessControlMaxAge: 100
+                AddVaryHeader: true
+                BrowserXssFilter: true
+                ContentTypeNosniff: true
+                ForceSTSHeader: true
+                STSIncludeSubdomains: true
+                STSPreload: true
+                ContentSecurityPolicy: default-src 'self' 'unsafe-inline'
+                CustomFrameOptionsValue: SAMEORIGIN
+                ReferrerPolicy: same-origin
+                PermissionsPolicy: vibrate 'self'
+                STSSeconds: 315360000
+      '';
+      path = "/etc/traefik/rules/secureHeaders.yaml";
+    };
+
+    sops.templates."traefik/rules/secureTLS" = {
+      gid = "100";
+      uid = "100999";
+      mode = "0400";
+      content = ''
+        tls:
+          options:
+            secureTLS:
+              minVersion: VersionTLS12
+              sniStrict: true
+              curvePreferences:
+                - CurveP521
+                - CurveP384
+              cipherSuites:
+                - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
+                - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
+                - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
+      '';
+      path = "/etc/traefik/rules/secureTLS.yaml";
+    };
+  };
+
+  extraOptions = {
+    enable.default = true;
+    logLevel = mkOption {
+      type = types.enum [ "TRACE" "DEBUG" "INFO" "WARN" "ERROR" "FATAL" ];
+      default = "ERROR";
+      example = "ERROR";
+      description = "The level of detail Traefik should print in the logs.";
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/services/applications/uptime-kuma.nix b/modules/backup/services/applications/uptime-kuma.nix
new file mode 100644
index 0000000..38aa259
--- /dev/null
+++ b/modules/backup/services/applications/uptime-kuma.nix
@@ -0,0 +1,54 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "uptimeKuma";
+  # Version tagging
+  uptimeKumaVersion = "2.2.0-rootless";
+  # Storage optimization
+  spindown = config.numbus-server.hardware.HddSpindown;
+  optimizedDir = if spindown.enable && (spindown.optimize == "compatible" || (isList spindown.optimize && elem name spindown.optimize))
+    then cfg.configDir
+    else cfg.dataDir;
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.uptimeKuma;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Uptime-Kuma, \"don't let your server down !\" monitoring tools";
+  defaultPort = "3001";
+  scheme = "http";
+  middlewares = [ "secureHeaders" ];
+  dirPermissions = [ "100999:100 ${optimizedDir}" ];
+
+  composeText = ''
+    services:
+      uptimekuma:
+        image: docker.io/louislam/uptime-kuma:${uptimeKumaVersion}
+        container_name: uptime-kuma
+        hostname: uptime-kuma
+        user: '1000:1000'
+        networks:
+          uptime-kuma:
+            ipv4_address: 10.89.100.253
+        ports:
+          - "${cfg.port}:3001/tcp"
+        volumes:
+          - ${optimizedDir}:/app/data
+        security_opt:
+          - no-new-privileges:true
+        restart: unless-stopped
+
+    networks:
+      uptime-kuma:
+        driver: bridge
+        ipam:
+          config:
+            - subnet: "10.89.100.0/24"
+              gateway: "10.89.100.254"
+  '';
+}
\ No newline at end of file
diff --git a/modules/backup/services/applications/vscodium.nix b/modules/backup/services/applications/vscodium.nix
new file mode 100644
index 0000000..0421ac2
--- /dev/null
+++ b/modules/backup/services/applications/vscodium.nix
@@ -0,0 +1,81 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "vscodium";
+  # Version tagging
+  vscodiumVersion = "1.110.11607-ls15";
+  # Storage optimization
+  spindown = config.numbus-server.hardware.HddSpindown;
+  optimizedDir = if spindown.enable && (spindown.optimize == "compatible" || (isList spindown.optimize && elem name spindown.optimize))
+    then cfg.configDir
+    else cfg.dataDir;
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.vscodium;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "VScodium, an open-source version of VScode in your web browser";
+  defaultPort = "8000";
+  configDirEnabled = optimizedDir == cfg.configDir;
+  dataDirEnabled = optimizedDir == cfg.dataDir;
+  middlewares = [ "secureHeaders" ];
+  dirPermissions = [
+    "100999:100 ${optimizedDir}"
+    "100999:100 ${cfg.configDir}"
+    "100999:100 ${optimizedDir}/workspace"
+    "100999:100 ${cfg.configDir}/config"
+  ];
+
+  composeText = ''
+    services:
+      vscodium:
+        image: lscr.io/linuxserver/vscodium-web:${vscodiumVersion}
+        container_name: vscodium
+        hostname: vscodium
+        user: '1000:1000'
+        networks:
+          vscodium:
+            ipv4_address: 10.89.50.253
+        ports:
+          - "${defaultPort}:8000"
+        volumes:
+          - ${cfg.configDir}/config:/config
+          - ${optimizedDir}/workspace:/workspace
+        environment:
+          - PUID=1000
+          - PGID=1000
+          - TZ=${time.timeZone}
+          - CONNECTION_TOKEN=${config.sops.placeholder."vscodium/connection_token"}
+        shm_size: "1gb"
+        cap_add:
+          - IPC_LOCK
+        cap_drop:
+          - NET_RAW
+        security_opt:
+          - no-new-privileges:true
+        restart: unless-stopped
+
+    networks:
+      vscodium:
+        name: vscodium
+        driver: bridge
+        ipam:
+          config:
+            - subnet: "10.89.50.0/24"
+              gateway: "10.89.50.254"
+  '';
+
+  extraConfig = {
+    sops.secrets."vscodium/connection_token" = {
+      sopsFile = /etc/nixos/secrets/podman/vscodium.yaml;
+      gid = "100";
+      uid = "1000";
+      mode = "0400";
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/services/dns/adguard.nix b/modules/backup/services/dns/adguard.nix
new file mode 100644
index 0000000..e08369f
--- /dev/null
+++ b/modules/backup/services/dns/adguard.nix
@@ -0,0 +1,53 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Version tagging
+  adguardVersion = "latest";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.adguard;
+  # Container config
+  name = "adguard";
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "AdGuard, feature-rich DNS service";
+  defaultPort = "3000";
+  scheme = "http";
+  dataDirEnabled = false;
+  startDelay = 10;
+  dependencies = [
+    "network.target"
+  ];
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.configDir}"
+  ];
+
+  composeText = ''
+    services:
+      adguardhome:
+        image: adguard/adguardhome:${adguardVersion}
+        container_name: adguard
+        hostname: adguard
+        network_mode: pasta
+        user: '1000:1000'
+        ports:
+          - "${cfg.port}:3000/tcp"
+          - "53:53/tcp"
+          - "53:53/udp"
+        volumes:
+          - ${cfg.configDir}/work:/opt/adguardhome/work
+          - ${cfg.configDir}/config:/opt/adguardhome/conf
+        cap_add:
+          - SYS_NICE
+        security_opt:
+          - no-new-privileges:true
+        restart: unless-stopped
+  '';
+}
\ No newline at end of file
diff --git a/modules/backup/services/dns/default.nix b/modules/backup/services/dns/default.nix
new file mode 100644
index 0000000..bf6213a
--- /dev/null
+++ b/modules/backup/services/dns/default.nix
@@ -0,0 +1,10 @@
+{ ... }:
+
+{
+  imports = [
+    # To test
+    ./adguard.nix
+    # Tested
+    ./pi-hole.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/backup/services/dns/pi-hole.nix b/modules/backup/services/dns/pi-hole.nix
new file mode 100644
index 0000000..b5de2f9
--- /dev/null
+++ b/modules/backup/services/dns/pi-hole.nix
@@ -0,0 +1,71 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Version tagging
+  piholeVersion = "2026.02.0";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.pi-hole;
+  # Container config
+  name = "pi-hole";
+  # DNS config
+  dnsConfig = ''
+
+  '';
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Pi-Hole, the ads black hole";
+  defaultPort = "4443";
+  scheme = "https";
+  dataDirEnabled = false;
+  startDelay = 10;
+  dependencies = [
+    "network.target"
+  ];
+  middlewares = [
+    "secureHeaders" 
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.configDir}"
+  ];
+  secrets = [
+    "pi-hole/web_password"
+  ];
+
+# Compose file good
+  composeText = ''
+    services:
+      pi-hole:
+        image: docker.io/pihole/pihole:${piholeVersion}
+        container_name: pi-hole
+        hostname: pi-hole
+        network_mode: pasta
+        ports:
+          - "${cfg.port}:443/tcp"
+          - "53:53/tcp"
+          - "53:53/udp"
+        volumes:
+          - ${cfg.configDir}:/etc/pihole
+        environment:
+          PIHOLE_UID: '1000'
+          PIHOLE_GID: '1000'
+          TZ: ${config.time.timeZone}
+          FTLCONF_webserver_domain: ${cfg.subdomain}.${config.numbus-server.services.domain}
+          FTLCONF_dns_domain_name: "${config.numbus-server.services.domain}"
+          FTLCONF_webserver_api_password: ${config.sops.placeholder."pi-hole/web_password"}
+          FTLCONF_dns_upstreams: 9.9.9.9;149.112.112.112
+          FTLCONF_dns_listeningMode: "BIND"
+          FTLCONF_dns_domain_local: "true"
+          FTLCONF_dhcp_active: "false"
+          FTLCONF_ntp_ipv4_active: "false"
+          FTLCONF_ntp_ipv6_active: "false"
+          FTLCONF_ntp_sync_active: "false"
+        cap_add:
+          - SYS_NICE
+        restart: unless-stopped
+  '';
+}
\ No newline at end of file
diff --git a/modules/backup/services/system/clamav.nix b/modules/backup/services/system/clamav.nix
new file mode 100644
index 0000000..05a0924
--- /dev/null
+++ b/modules/backup/services/system/clamav.nix
@@ -0,0 +1,91 @@
+{ config, lib, pkgs, ... }:
+
+with lib;
+
+let
+  cfg = config.numbus-server.services.clamav;
+  onAccessPaths = lib.mapAttrsToList (n: v: v.dataDir) (lib.filterAttrs (n: v:
+    v ? enable && v.enable && v ? dataDir && v.dataDir != null && v.dataDir != false
+  ) config.numbus-server.services);
+  clamonacc_virus_notifier = pkgs.writeScript "clamonacc_virus_notifier.sh" ''
+    #!${pkgs.bash}/bin/bash
+
+    echo "CLAM_VIRUSEVENT_VIRUSNAME=\"$CLAM_VIRUSEVENT_VIRUSNAME\"" > /var/lib/clamav/virus_event.env
+    echo "CLAM_VIRUSEVENT_FILENAME=\"$CLAM_VIRUSEVENT_FILENAME\"" >> /var/lib/clamav/virus_event.env
+
+    /run/wrappers/bin/sudo /run/current-system/sw/bin/systemctl start clamav-virus-notify.service
+  '';
+in
+
+{
+  options.numbus-server.services.clamav = {
+    enable = mkEnableOption "ClamAV open-source anti-virus software";
+  };
+
+  config = mkIf cfg.enable {
+    environment.systemPackages = [ pkgs.clamav pkgs.curl ];
+
+    system.activationScripts.clamav-quarantine = ''
+      mkdir -p /quarantine
+      chown clamav:clamav /quarantine
+      chmod 440 /quarantine
+    '';
+
+    security.sudo.extraRules = [{
+      users = [ "clamav" ];
+      commands = [{
+        command = "/run/current-system/sw/bin/systemctl start clamav-virus-notify.service";
+        options = [ "NOPASSWD" ];
+      }];
+    }];
+
+    services.clamav = {
+      updater.enable = true;
+      clamonacc.enable = true;
+
+      scanner = {
+        enable = true;
+        interval = "*-*-* 04:00:00"; # Everyday at 4am
+        scanDirectories = [
+          "/etc"
+          "/home"
+          "/var/lib"
+          "/var/tmp"
+          "/tmp"
+        ];
+      };
+
+      daemon = {
+        enable = true;
+        settings = {
+          OnAccessPrevention = true;
+          OnAccessIncludePath = onAccessPaths;
+          VirusEvent = "${clamonacc_virus_notifier}";
+        };
+      };
+    };
+
+    systemd.services.clamav-periodic-scan = mkIf (onAccessPaths != []) {
+      description = "Periodic ClamAV virus scan";
+      after = [ "clamav-daemon.service" "clamav-freshclam.service" ];
+      requires = [ "clamav-daemon.service" ];
+      wants = [ "clamav-freshclam.service" ];
+      onFailure = [ "clamav-virus-notify.service" ];
+      serviceConfig = {
+        Type = "oneshot";
+        ExecStart = "${pkgs.clamav}/bin/clamdscan --multiscan --fdpass --infected --allmatch --move=/quarantine ${lib.escapeShellArgs onAccessPaths}";
+        Slice = "system-clamav.slice";
+      };
+    };
+
+    systemd.timers.clamav-periodic-scan = mkIf (onAccessPaths != []) {
+      description = "Timer for ClamAV periodic scan";
+      wantedBy = [ "timers.target" ];
+      timerConfig = {
+        OnCalendar = "*-1/3-01 04:00:00";
+        Persistent = true;
+        Unit = "clamav-periodic-scan.service";
+      };
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/backup/services/system/default.nix b/modules/backup/services/system/default.nix
new file mode 100644
index 0000000..a2c0fb0
--- /dev/null
+++ b/modules/backup/services/system/default.nix
@@ -0,0 +1,11 @@
+{ ... }:
+
+{
+  imports = [
+    # To add
+#    ./backup-client.nix
+    # To test
+    ./clamav.nix
+    ./virtualization.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/backup/services/system/virtualization.nix b/modules/backup/services/system/virtualization.nix
new file mode 100644
index 0000000..873062c
--- /dev/null
+++ b/modules/backup/services/system/virtualization.nix
@@ -0,0 +1,17 @@
+{ config, lib, ... }:
+
+with lib;
+
+let
+  cfg = config.numbus-server.services.virtualization;
+in
+
+{
+  options.numbus-server.services.virtualization = {
+    enable = mkEnableOption "QEMU/KVM virtualization software";
+  };
+
+  config = mkIf cfg.enable {
+    virtualisation.libvirtd.enable = true;
+  };
+}
\ No newline at end of file
diff --git a/modules/common/default.nix b/modules/common/default.nix
new file mode 100644
index 0000000..6ed7aa6
--- /dev/null
+++ b/modules/common/default.nix
@@ -0,0 +1,12 @@
+{ ... }:
+
+{
+  imports = [
+    # To test
+    ./hardware/default.nix
+    ./mail/default.nix
+    ./misc/default.nix
+    ./packages/default.nix
+    ./global.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/common/global.nix b/modules/common/global.nix
new file mode 100644
index 0000000..eaa585c
--- /dev/null
+++ b/modules/common/global.nix
@@ -0,0 +1,42 @@
+{ lib, deviceType, ... }:
+
+with lib;
+
+let
+  cfg = config.numbus;
+
+  country = "";
+  language = "";
+in
+
+{
+  options.numbus = {
+    owner = mkOption {
+      type = types.str;
+      example = "Alex";
+      default = "Numbus";
+      description = "The name of the person who owns this ${deviceType}.";
+    };
+
+    internationalization = {
+      country = mkOption {
+        type = types.str;
+        example = "FR";
+        default = country;
+        description = "The country where this ${deviceType} is located.";
+      };
+      language = mkOption {
+        type = types.str;
+        example = "fr";
+        default = language;
+        description = "The language for this ${deviceType}.";
+      };
+      locale = mkOption {
+        type = types.str;
+        example = "fr_FR";
+        default = "fr_FR";
+        description = "The locale for this ${deviceType}.";
+      };
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/common/hardware/cpu.nix b/modules/common/hardware/cpu.nix
new file mode 100644
index 0000000..d3fe470
--- /dev/null
+++ b/modules/common/hardware/cpu.nix
@@ -0,0 +1,9 @@
+{ config, ... }:
+
+{
+  config = {
+    hardware.enableRedistributableFirmware = true;
+    hardware.cpu.intel.updateMicrocode = true;
+    hardware.cpu.amd.updateMicrocode = true;
+  };
+}
\ No newline at end of file
diff --git a/modules/common/hardware/default.nix b/modules/common/hardware/default.nix
new file mode 100644
index 0000000..d580f5a
--- /dev/null
+++ b/modules/common/hardware/default.nix
@@ -0,0 +1,9 @@
+{ ... }:
+
+{
+  imports = [
+    # To test
+    ./disks/default.nix
+    ./cpu.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/common/hardware/disks/boot.nix b/modules/common/hardware/disks/boot.nix
new file mode 100644
index 0000000..b51087c
--- /dev/null
+++ b/modules/common/hardware/disks/boot.nix
@@ -0,0 +1,192 @@
+{ config, lib, ... }:
+
+with lib;
+
+let
+  cfg = config.numbus.hardware.disks.boot;
+
+  bootCount = builtins.length cfg.list;
+
+  singleDiskConfig = {
+    disko.devices.disk.main = {
+      type = "disk";
+      device = head cfg.list;
+      content = {
+        type = cfg.partitionTableScheme;
+        partitions = {
+          ESP = {
+            size = cfg.partition.boot.size;
+            type = cfg.partition.boot.esp;
+            content = {
+              type = "filesystem";
+              format = cfg.partition.boot.filesystem;
+              mountpoint = "/boot";
+              mountOptions = [ "umask=0077" ];
+            };
+          };
+          swap = {
+            size = cfg.partition.swap.size;
+            content = {
+              type = "swap";
+              randomEncryption = cfg.partition.swap.encrypt;
+            };
+          };
+          luks = {
+            size = cfg.partition.root.size;
+            content = {
+              type = "luks";
+              name = "boot";
+              settings.keyFile = "/run/secrets/disks/boot";
+              content = {
+                type = "filesystem";
+                format = cfg.partition.root.filesystem;
+                mountpoint = "/";
+              };
+            };
+          };
+        };
+      };
+    };
+  };
+
+  raid1DiskConfig = {
+    disko.devices.disk = lib.listToAttrs (lib.imap0 (i: device: {
+      name = "boot-${toString i}";
+      value = {
+        type = "disk";
+        inherit device;
+        content = {
+          type = cfg.partitionTableScheme;
+          partitions = {
+            ESP = { size = cfg.partition.boot.size; type = cfg.partition.boot.esp; content = { type = "mdraid"; name = "boot"; }; };
+            swap = { size = cfg.partition.swap.size; content = { type = "mdraid"; name = "swap"; }; };
+            mdadm = { size = cfg.partition.root.size; content = { type = "mdraid"; name = "raid1"; }; };
+          };
+        };
+      };
+    }) cfg.list);
+
+    disko.devices.mdadm = {
+      boot = {
+        type = "mdadm";
+        level = 1;
+        metadata = "1.0";
+        content = {
+          type = "filesystem";
+          format = cfg.partition.boot.filesystem;
+          mountpoint = "/boot";
+          mountOptions = [ "umask=0077" ];
+        };
+      };
+      swap = {
+        type = "mdadm";
+        level = 1;
+        content = {
+          type = "swap";
+          randomEncryption = cfg.partition.swap.encrypt;
+        };
+      };
+      raid1 = {
+        type = "mdadm";
+        level = 1;
+        content = {
+          type = "luks";
+          name = "boot";
+          settings.keyFile = "/run/secrets/disks/boot";
+          content = {
+            type = "filesystem";
+            format = cfg.partition.root.filesystem;
+            mountpoint = "/";
+          };
+        };
+      };
+    };
+  };
+in
+
+{
+  options.numbus.hardware.disks = {
+    boot = {
+      list = mkOption {
+        type = types.listOf types.str;
+        example = [ "/dev/disk/by-id/nvme_SAMSUNG_MZVPYEHCO_159Ejz224G0000" "/dev/disk/by-id/ata-San_Disk_159Ejz224G" ];
+        description = "A set of by-id path of disk(s) that will be used as boot disk(s). At least one disk must be set.";
+      };
+      partitionTableScheme = mkOption {
+        type = types.enum [ "gpt" "mbr" ];
+        default = "gpt";
+        example = "gpt";
+        description = "The scheme of the partition table. Use \"gpt\" for modern devices and \"mbr\" for legacy ones.";
+      };
+      partition = {
+        root = {
+          filesystem = mkOption {
+            type = types.enum [ "ext4" "btrfs" "xfs" ];
+            default = "ext4";
+            example = "ext4";
+            description = "The filesystem to use for the root partition of the boot disk(s).";
+          };
+          size = mkOption {
+            type = types.str;
+            default = "100%";
+            example = "100%";
+            description = "The size of the root partition. Use G for GBs and M for MBs.";
+          };
+        };
+        boot = {
+          filesystem = mkOption {
+            type = types.enum [ "vfat" ];
+            default = "vfat";
+            example = "vfat";
+            description = "The filesystem to use for the boot partition of the boot disk(s).";
+          };
+          esp = mkOption {
+            type = types.enum [ "EF00" "EF02" ];
+            default = "EF00";
+            example = "EF00";
+            description = "The ESP type to use for the boot partition. Use EF02 for UEFI and EF00 for BIOS.";
+          };
+          size = mkOption {
+            type = types.str;
+            default = "1G";
+            example = "1G";
+            description = "The size of the boot partition.";
+          };
+        };
+        swap = {
+          enable = mkOption {
+            type = types.bool;
+            default = true;
+            example = true;
+            description = "Wether to create a swap partition. Useful for servers that don't have a lot of RAM.";
+          };
+          encrypt = mkOption {
+            type = types.bool;
+            default = true;
+            example = true;
+            description = "Wether to encrypt randomly the swap partition. Disable if you need hibernation";
+          };
+          size = mkOption {
+            type = types.str;
+            default = "16G";
+            example = "16G";
+            description = "Size of the swap partition. Use G for GBs and M for MBs.";
+          };
+        };
+      };
+    };
+  };
+
+  config = mkMerge [
+    {
+      sops.secrets."disks/boot" = {
+        sopsFile = "/etc/nixos/secrets/disks/boot.yaml";
+        gid = "0";
+        uid = "0";
+        mode = "0400";
+      };
+    }
+    (mkIf (bootCount == 1) singleDiskConfig)
+    (mkIf (bootCount == 2) raid1DiskConfig)
+  ];
+}
\ No newline at end of file
diff --git a/modules/common/hardware/disks/content.nix b/modules/common/hardware/disks/content.nix
new file mode 100644
index 0000000..a960cdb
--- /dev/null
+++ b/modules/common/hardware/disks/content.nix
@@ -0,0 +1,107 @@
+{ config, lib, pkgs, ... }:  
+
+with lib;
+
+let  
+  cfg = config.numbus.hardware.disks.content;
+
+  contentCount = builtins.length cfg.list;
+  parityCount = builtins.length config.numbus.hardware.disks.parity.list;
+
+  contentDisks = lib.imap0 (i: device: {
+    name = "content-${toString i}";
+    value = {
+      type = "disk";
+      inherit device;
+      content = {
+        type = cfg.partitionTableScheme;
+        partitions.luks = {
+          size = cfg.partition.size;
+          content = {
+            type = "luks";
+            name = "content-${toString i}";
+            settings.keyFile = "/run/secrets/disks/content-${toString i}";
+            initrdUnlock = false;
+            content = {
+              type = "filesystem";
+              format = cfg.partition.filesystem;
+              mountpoint = "/mnt/content-${toString i}";
+              mountOptions = [ "noauto" "nofail" ];
+            };
+          };
+        };
+      };
+    };
+  }) cfg.list;
+in
+
+{
+  options.numbus.hardware.disks = {
+    content = {
+      list = mkOption {
+        type = types.listOf types.str;
+        example = [ "/dev/disk/by-id/ata_Hitachi_MZVPYEHCO_159Ejz224G0000" "/dev/disk/by-id/ata-WD_159Ejz224G" ];
+        default = [];
+        description = "A set of by-id path of disk(s) that will be used as content disk(s).";
+      };
+      partitionTableScheme = mkOption {
+        type = types.enum [ "gpt" "mbr" ];
+        default = "gpt";
+        example = "gpt";
+        description = "The scheme of the partition table. Use \"gpt\" for modern devices and \"mbr\" for legacy ones.";
+      };
+      partition = {
+        filesystem = mkOption {
+          type = types.enum [ "ext4" "btrfs" "xfs" ];
+          default = "xfs";
+          example = "xfs";
+          description = "The filesystem to use for the main partition of the content disk(s).";
+        };
+        size = mkOption {
+          type = types.str;
+          default = "100%";
+          example = "100%";
+          description = "The size of the main partition. Use G for GBs and M for MBs.";
+        };
+      };
+    };
+  };
+
+  config = mkIf (contentCount > 0 && (parityCount != 1 && contentCount != 1)) {
+    disko.devices.disk = builtins.listToAttrs contentDisks;
+
+    sops.secrets = listToAttrs (map (i: 
+      nameValuePair "disks/content-${toString i}" {
+        sopsFile = "/etc/nixos/secrets/disks/content.yaml";
+        gid = "0";
+        uid = "0";
+        mode = "0400";
+      }
+    ) (range 0 (contentCount - 1)));
+
+    systemd.services.mount-content-disks = {
+      description = "Mount content disks.";
+      before = [ "mnt-data.mount" ];
+      requiredBy = [ "mnt-data.mount" ];
+      requires = [ "sops-install-secrets.service" ];
+      path = [ pkgs.cryptsetup pkgs.util-linux ];
+      serviceConfig = {
+        Type = "oneshot";
+        RemainAfterExit = true;
+      };
+      script = let
+        mountContentDisk = i: ''
+          if [ ! -e /dev/mapper/content-${toString i} ]; then
+            cryptsetup luksOpen --key-file /run/secrets/disks/content-${toString i} /dev/disk/by-partlabel/disk-content-${toString i}-luks content-${toString i}
+          fi
+          mkdir -p /mnt/content-${toString i}
+          if ! mountpoint -q /mnt/content-${toString i}; then
+            mount -t ${cfg.partition.filesystem} /dev/mapper/content-${toString i} /mnt/content-${toString i}
+          fi
+        '';
+      in ''
+        ${concatMapStrings mountContentDisk (range 0 (contentCount - 1))}
+      '';
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/common/hardware/disks/default.nix b/modules/common/hardware/disks/default.nix
new file mode 100644
index 0000000..1485d81
--- /dev/null
+++ b/modules/common/hardware/disks/default.nix
@@ -0,0 +1,12 @@
+{ ... }:
+
+{
+  imports = [
+    ./boot.nix
+    ./content.nix
+    ./mergerfs-snapraid.nix
+    ./mirror.nix
+    ./parity.nix
+    ./spindown.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/common/hardware/disks/mergerfs-snapraid.nix b/modules/common/hardware/disks/mergerfs-snapraid.nix
new file mode 100644
index 0000000..76d88d7
--- /dev/null
+++ b/modules/common/hardware/disks/mergerfs-snapraid.nix
@@ -0,0 +1,41 @@
+{ config, lib, ... }:
+
+with lib;
+
+let
+  cfg = config.numbus.hardware.disks;
+
+  contentCount = builtins.length cfg.content.list;
+  parityCount = builtins.length cfg.parity.list;
+in
+
+{
+  config = mkIf (contentCount >= 2 && parityCount >= 1) {
+    services.snapraid = {
+      enable = true;
+      contentFiles = map (i: "/mnt/content-${toString i}/snapraid.content") (range 0 (contentCount - 1));
+      parityFiles = map (i: "/mnt/parity-${toString i}/snapraid.parity") (range 0 (parityCount - 1));
+      dataDisks = listToAttrs (imap0 (i: _: nameValuePair "d${toString i}" "/mnt/content-${toString i}") cfg.content.list);
+    };
+
+    fileSystems."/mnt/data" = {
+      device = concatStringsSep ":" (map (i: "/mnt/content-${toString i}") (range 0 (contentCount - 1)));
+      fsType = "fuse.mergerfs";
+      options = [
+        "category.create=ff"
+        "cache.files=partial"
+        "dropcacheonclose=true"
+        "defaults"
+        "noauto"
+        "nofail"
+        "allow_other"
+        "moveonenospc=1"
+        "minfreespace=50G"
+        "func.getattr=newest"
+        "fsname=mergerfs_data"
+        "x-mount.mkdir"
+        "x-systemd.automount"
+      ];
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/common/hardware/disks/mirror.nix b/modules/common/hardware/disks/mirror.nix
new file mode 100644
index 0000000..8939d94
--- /dev/null
+++ b/modules/common/hardware/disks/mirror.nix
@@ -0,0 +1,75 @@
+{ config, lib, pkgs, ... }:
+
+with lib;
+
+let
+  cfg = config.numbus.hardware.disks;
+
+  contentCount = builtins.length cfg.content.list;
+  parityCount = builtins.length cfg.parity.list;
+
+  dataMirror = {
+    disko.devices.disk = listToAttrs (imap0 (i: device: {
+      name = "mirror-${toString i}";
+      value = {
+        type = "disk";
+        inherit device;
+        content = {
+          type = cfg.partitionTableScheme;
+          partitions.raid = {
+            size = cfg.content.partition.size;
+            content = {
+              type = "mdraid";
+              name = "mirror";
+            };
+          };
+        };
+      };
+    }) (cfg.content.list ++ cfg.parity.list));
+
+    disko.devices.mdadm.mirror = {
+      type = "mdadm";
+      level = 1;
+      content = {
+        type = "luks";
+        name = "mirror";
+        settings.keyFile = "/run/secrets/disks/mirror";
+        initrdUnlock = false;
+        content = {
+          type = "filesystem";
+          format = cfg.content.partition.filesystem;
+          mountpoint = "/mnt/data";
+          mountOptions = [ "noauto" "nofail" ];
+        };
+      };
+    };
+  };
+in
+
+{
+  config = mkIf (contentCount == 1 && parityCount == 1) (mkMerge [
+    dataMirror
+    {
+      systemd.services.mount-mirror = {
+        description = "Mount the disks mirror.";
+        before = [ "mnt-data.mount" ];
+        requiredBy = [ "mnt-data.mount" ];
+        requires = [ "sops-install-secrets.service" ];
+        path = [ pkgs.cryptsetup pkgs.util-linux ];
+        serviceConfig = {
+          Type = "oneshot";
+          RemainAfterExit = true;
+        };
+        script = ''
+          if [ ! -e /dev/mapper/mirror ]; then
+            cryptsetup open /dev/md/mirror mirror --key-file /run/secrets/disks/mirror
+          fi
+          mkdir -p /mnt/data
+          if ! mountpoint -q /mnt/data; then
+            mount -t ${cfg.content.partition.filesystem} /dev/mapper/mirror /mnt/data
+          fi
+        '';
+      };
+    }
+  ]);
+}
\ No newline at end of file
diff --git a/modules/common/hardware/disks/parity.nix b/modules/common/hardware/disks/parity.nix
new file mode 100644
index 0000000..85ea5c7
--- /dev/null
+++ b/modules/common/hardware/disks/parity.nix
@@ -0,0 +1,107 @@
+{ config, lib, pkgs, ... }:  
+
+with lib;
+
+let
+  cfg = config.numbus.hardware.disks.parity;
+
+  parityCount = builtins.length cfg.list;
+
+  parityDisks = lib.imap0 (i: device: {
+    name = "parity-${toString i}";
+    value = {
+      type = "disk";
+      inherit device;
+      content = {
+        type = cfg.partitionTableScheme;
+        partitions.luks = {
+          size = cfg.partition.size;
+          content = {
+            type = "luks";
+            name = "parity-${toString i}";
+            settings.keyFile = "/run/secrets/disks/parity-${toString i}";
+            initrdUnlock = false;
+            content = {
+              type = "filesystem";
+              format = cfg.partition.filesystem;
+              mountpoint = "/mnt/parity-${toString i}";
+              mountOptions = [ "noauto" "nofail" ];
+            };
+          };
+        };
+      };
+    };
+  }) cfg.list;
+in
+
+{
+  options.numbus.hardware.disks = {
+    parity = {
+      list = mkOption {
+        type = types.listOf types.str;
+        example = [ "/dev/disk/by-id/ata_WDC_MZVPYEHCO_159Ejz224G0000" "/dev/disk/by-id/ata-San_Disk_159Ejz224G" ];
+        default = [];
+        description = "A set of by-id path of disk(s) that will be used as parity disk(s).";
+      };
+      partitionTableScheme = mkOption {
+        type = types.enum [ "gpt" "mbr" ];
+        default = "gpt";
+        example = "gpt";
+        description = "The scheme of the partition table. Use \"gpt\" for modern devices and \"mbr\" for legacy ones.";
+      };
+      partition = {
+        filesystem = mkOption {
+          type = types.enum [ "ext4" "btrfs" "xfs" ];
+          default = "xfs";
+          example = "xfs";
+          description = "The filesystem to use for the main partition of the parity disk(s).";
+        };
+        size = mkOption {
+          type = types.str;
+          default = "100%";
+          example = "100%";
+          description = "The size of the main partition. Use G for GBs and M for MBs.";
+        };
+      };
+    };
+  };
+
+  config = mkIf (parityCount > 1) {
+    disko.devices.disk = builtins.listToAttrs parityDisks;
+
+    sops.secrets = listToAttrs (map (i: 
+      nameValuePair "disks/parity-${toString i}" {
+        sopsFile = "/etc/nixos/secrets/disks/parity.yaml";
+        gid = "0";
+        uid = "0";
+        mode = "0400";
+      }
+    ) (range 0 (parityCount - 1)));
+
+    systemd.services.mount-parity-disks = {
+      description = "Mount parity disks.";
+      before = [ "mnt-data.mount" ];
+      requiredBy = [ "mnt-data.mount" ];
+      requires = [ "sops-install-secrets.service" ];
+      path = [ pkgs.cryptsetup pkgs.util-linux ];
+      serviceConfig = {
+        Type = "oneshot";
+        RemainAfterExit = true;
+      };
+      script = let
+        mountparityDisk = i: ''
+          if [ ! -e /dev/mapper/parity-${toString i} ]; then
+            cryptsetup luksOpen --key-file /run/secrets/disks/parity-${toString i} /dev/disk/by-partlabel/disk-parity-${toString i}-luks parity-${toString i}
+          fi
+          mkdir -p /mnt/parity-${toString i}
+          if ! mountpoint -q /mnt/parity-${toString i}; then
+            mount -t ${cfg.partition.filesystem} /dev/mapper/parity-${toString i} /mnt/parity-${toString i}
+          fi
+        '';
+      in
+      ''
+        ${concatMapStrings mountparityDisk (range 0 (parityCount - 1))}
+      '';
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/common/hardware/disks/spindown.nix b/modules/common/hardware/disks/spindown.nix
new file mode 100644
index 0000000..f373250
--- /dev/null
+++ b/modules/common/hardware/disks/spindown.nix
@@ -0,0 +1,46 @@
+{ config, lib, ... }:
+
+with lib;
+
+let
+  hardDrives = config.numbus.hardware.spindown.list;
+  cfg = config.numbus.hardware;
+in
+
+{
+  config = mkIf (cfg.HddSpindown.enable == true) {
+    systemd.services.hd-idle = {
+      description = "External HD spin down daemon";
+      wantedBy = [ "multi-user.target" ];
+      serviceConfig = {
+        Type = "simple";
+        ExecStart =
+          let
+            idleTime = toString 1800;
+            hardDriveParameter = lib.strings.concatMapStringsSep " " (x: "-a ${x} -i ${idleTime}") hardDrives;
+          in
+          "${pkgs.hd-idle}/bin/hd-idle -i 0 ${hardDriveParameter}";
+      };
+    };
+  };
+
+  options.numbus = {
+    hardware = {
+      spindown = {
+        enable = mkEnableOption "hard drives spin down when inactive in order to save power.";
+        list = mkOption {
+          description = "The list of compatible hard drives that will spin down.";
+          type = types.listOf types.str;
+          default = [];
+          example = [ "/dev/disk/by-id/ata_Hitachi_MZVPYEHCO_159Ejz224G0000" "/dev/disk/by-id/ata-WD_159Ejz224G" ];
+        };
+        optimize = mkOption {
+          description = "Optimize services to reduce HDD wakeups when spindown is enabled. Can be set to \"compatible\" to optimize all compatible services, or a list of service names to optimize.";
+          type = types.nullOr (types.either (types.enum [ "compatible" ]) (types.listOf types.str));
+          default = "compatible";
+          example = "[ \"crafty\" \"gitea\" ]";
+        };
+      };
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/common/mail/default.nix b/modules/common/mail/default.nix
new file mode 100644
index 0000000..1de7393
--- /dev/null
+++ b/modules/common/mail/default.nix
@@ -0,0 +1,10 @@
+{ ... }:
+
+{
+  imports = [
+    # To test
+    ./disk-space.nix
+    ./smart.nix
+    ./smtp.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/common/mail/disk-space.nix b/modules/common/mail/disk-space.nix
new file mode 100644
index 0000000..e7d0ba5
--- /dev/null
+++ b/modules/common/mail/disk-space.nix
@@ -0,0 +1,130 @@
+{ config, lib, pkgs, ... }:
+
+with lib;
+
+let
+  cfg = config.numbus-server.services.disk-space-checker;
+
+  disk_space_notifier = pkgs.writeScript "disk-space-notifier.sh" ''
+    #!${pkgs.bash}/bin/bash
+
+    ALERT_FILE="/var/lib/numbus-server/disk_alert.env"
+    if [ ! -f "$ALERT_FILE" ]; then
+      exit 0
+    fi
+
+    source "$ALERT_FILE"
+    rm "$ALERT_FILE"
+
+    # Update the timestamp for this specific path to prevent spamming
+    SAFE_PATH=$(echo "$DISK_ALERT_PATH" | tr '/' '_')
+    date +%s > "/var/lib/numbus-server/last_alert_$SAFE_PATH.ts"
+
+    ADMIN_EMAIL="${config.numbus-server.mail.adminAddress}"
+    USER_EMAIL="${config.numbus-server.mail.userAddress}"
+    OWNER_NAME="${config.numbus-server.owner}"
+
+    SUBJECT="Numbus Server Alert: Low Disk Space Detected"
+
+    TECH_BODY="
+    Disk Space Alert:
+    Server owner: $OWNER_NAME
+
+    The following mount point has exceeded the safety threshold:
+    Mount: $DISK_ALERT_PATH
+    Usage: $DISK_ALERT_USAGE%
+
+    Full partition details:
+    $(df -h "$DISK_ALERT_PATH")
+
+    Action required: Please investigate and clear space or expand the storage capacity.
+    "
+
+    FRIENDLY_BODY="Cher/Chère $OWNER_NAME,
+
+    L'espace de stockage de votre serveur Numbus est presque saturé.
+    Disque concerné : $DISK_ALERT_PATH ($DISK_ALERT_USAGE% utilisé)
+
+    Votre administrateur a été notifié avec les détails techniques.
+    Nous vous conseillons d'éviter d'ajouter des fichiers volumineux pour garantir le bon fonctionnement de vos services.
+    Contactez votre administrateur afin d'évoquer les possibilités d'expansion du stockage.
+    "
+
+    printf "Subject: [ADMIN] %s\n\n%s" "$SUBJECT" "$TECH_BODY" | /run/wrappers/bin/sendmail -t "$ADMIN_EMAIL"
+    printf "Subject: [Alerte] Espace disque presque saturé sur votre serveur Numbus\n\n%s\n\nMerci de votre confiance,\nL'équipe de support,\nNumbus-Server." "$FRIENDLY_BODY" | /run/wrappers/bin/sendmail -t "$USER_EMAIL"
+  '';
+
+  disk_space_checker = pkgs.writeScript "disk-space-checker.sh" ''
+    #!${pkgs.bash}/bin/bash
+    
+    # Safety threshold in percentage
+    THRESHOLD=90
+    # Paths to monitor (Root and MergerFS data pool)
+    PATHS=("/" "/mnt/data")
+    ALERT_FILE="/var/lib/numbus-server/disk_alert.env"
+
+    for path in "''${PATHS[@]}"; do
+      # Skip if path does not exist (e.g. if mergerfs is not mounted yet)
+      if [ ! -d "$path" ]; then
+        continue
+      fi
+      
+      # Anti-spam logic: Check if we alerted on this path recently (7 days = 604800 seconds)
+      SAFE_PATH=$(echo "$path" | tr '/' '_')
+      TS_FILE="/var/lib/numbus-server/last_alert_$SAFE_PATH.ts"
+      NOW=$(date +%s)
+
+      if [ -f "$TS_FILE" ]; then
+        LAST_SENT=$(cat "$TS_FILE")
+        DIFF=$((NOW - LAST_SENT))
+        if [ "$DIFF" -lt 604800 ]; then
+          echo "Alert for $path was sent recently. Skipping notification to avoid spam."
+          continue
+        fi
+      fi
+
+      # Extract usage percentage using df
+      USAGE=$(df -h "$path" | awk 'NR==2 {print $5}' | sed 's/%//')
+      
+      if [ "$USAGE" -ge "$THRESHOLD" ]; then
+        echo "DISK_ALERT_PATH=$path" > "$ALERT_FILE"
+        echo "DISK_ALERT_USAGE=$USAGE" >> "$ALERT_FILE"
+        
+        echo "Threshold exceeded for $path ($USAGE%). Triggering notification."
+        
+        # Trigger the notification service
+        /run/current-system/sw/bin/systemctl start disk-space-notifier.service
+        
+        # We exit after the first alert to avoid multiple overlapping emails in one run
+        exit 0
+      fi
+    done
+  '';
+in
+
+{ 
+  config = mkIf cfg.enable {
+    systemd.services.disk-space-notifier = {
+      description = "Email notification for low disk space";
+      serviceConfig = {
+        Type = "oneshot";
+        ExecStart = "${disk_space_notifier}";
+      };
+    };
+    systemd.services.disk-space-checker = {
+      description = "Check for low disk space";
+      serviceConfig = {
+        Type = "oneshot";
+        ExecStart = "${disk_space_checker}";
+      };
+    };
+    systemd.timers.disk-space-checker = {
+      description = "Run disk space check every day";
+      timerConfig = {
+        OnCalendar = "daily";
+        Persistent = true;
+      };
+      wantedBy = [ "timers.target" ];
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/common/mail/smart.nix b/modules/common/mail/smart.nix
new file mode 100644
index 0000000..45371dc
--- /dev/null
+++ b/modules/common/mail/smart.nix
@@ -0,0 +1,61 @@
+{ config, pkgs, ... }:
+
+let
+  smartd_notifier = pkgs.writeScript "smartd-notify.sh" ''
+    #!${pkgs.bash}/bin/bash
+    
+    # 1. Send Technical Email to Admin
+    ADMIN_EMAIL="${config.numbus-server.mail.adminAddress}"
+    SUBJECT="Numbus Server Alert: $SMARTD_FAILTYPE on $SMARTD_DEVICE"
+    
+    TECH_BODY="
+    SMARTD Alert Details:
+    Server owner: $OWNER_NAME
+    Device: $SMARTD_DEVICE
+    Type: $SMARTD_DEVICETYPE
+    Failure Type: $SMARTD_FAILTYPE
+    Message: $SMARTD_MESSAGE
+    
+    Full Message:
+    $SMARTD_FULLMESSAGE
+    "
+    printf "Subject: [ADMIN] $SUBJECT\n\n$TECH_BODY" | /run/wrappers/bin/sendmail -t "$ADMIN_EMAIL"
+
+    # 2. Send Friendly Email to Owner
+    USER_EMAIL="${config.numbus-server.mail.userAddress}"
+    OWNER_NAME="${config.numbus-server.owner}"
+    
+    FRIENDLY_BODY="Cher/Chère $OWNER_NAME,
+
+    Votre serveur a automatiquement détecté une panne matérielle de disque dur.
+    Ce genre de panne est tout à fait normal selon l'âge de votre matériel et n'entraîne
+    dans la grande majorité des cas aucune perte de données grâce au système de
+    stockage redondant préventif.
+
+    Votre administrateur a été notifié de cette panne. Il vous recontactera dans de très
+    brefs délais afin de procéder au remplacement, si nécessaire, du disque dur défaillant.
+
+    Merci de votre confiance,
+    L'équipe de support,
+    Numbus-Server."
+    
+    printf "Subject: [Alerte] Défaillance matérielle sur votre serveur Numbus\n\n$FRIENDLY_BODY" | /run/wrappers/bin/sendmail -t "$USER_EMAIL"
+  '';
+in
+
+{
+  services.smartd = {
+    enable = true;
+    defaults.autodetected = "-a -o on -S on -s (S/../.././00|L/../../6/01) -n standby,q -M exec ${smartd_notifier}";
+    notifications = {
+      wall = {
+        enable = true;
+      };
+      mail = {
+        enable = true;
+        sender = config.numbus-server.mail.fromAddress;
+        recipient = "${config.numbus-server.mail.userAddress},${config.numbus-server.mail.adminAddress}";
+      };
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/common/mail/smtp.nix b/modules/common/mail/smtp.nix
new file mode 100644
index 0000000..a414098
--- /dev/null
+++ b/modules/common/mail/smtp.nix
@@ -0,0 +1,99 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  cfg = config.numbus.mail;
+in
+
+{
+  options.numbus.mail = {
+    enable = mkEnableOption "Email sending functionality";
+
+    userAddress = mkOption {
+      description = "The address of the user this server will send emails to";
+      type = types.str;
+      example = "user@your-domain.com";
+    };
+
+    adminAddress = mkOption {
+      description = "The address of the admin this server will send emails to";
+      type = types.str;
+      example = "admin@your-domain.com";
+    };
+
+    smtpUsername = mkOption {
+      description = "The username/email that will be use to authenticate to the SMTP server";
+      type = types.str;
+      example = "your-smtp-enabled-address@your-domain.com";
+    };
+
+    smtpPasswordPath = mkOption {
+      description = "The path to a file containing the password that will be use to authenticate to the SMTP server";
+      type = types.path;
+      example = /run/secrets/system/mail/smtpPassword;
+    };
+
+    fromAddress = mkOption {
+      description = "This server will send emails from this address";
+      type = types.str;
+      default = "numbus-server-noreply@${config.numbus.services.domain}";
+      example = "numbus-server-noreply@your-domain.com";
+    };
+
+    smtpServer = mkOption {
+      description = "The SMTP server address your server will use to send emails";
+      type = types.str;
+      default = "smtp.gmail.com";
+      example = "smtp.your-provider.com";
+    };
+
+    smtpPort = mkOption {
+      description = "The SMTP port your server will connect to to send emails";
+      type = types.port;
+      default = 587;
+      example = 587;
+    };
+
+    smtpEncryption = mkOption {
+      description = "The encryption method for SMTP : NONE (NOT RECOMMENDED), TLS (port 465, also called SSL), or STARTTLS (port 587). STARTTLS is recommended.";
+      type = types.enum [ "NONE" "TLS" "STARTTLS" ];
+      default = "STARTTLS";
+      example = "STARTTLS";
+    };
+  };
+
+  config = mkIf cfg.enable {
+    sops.secrets."smtpPassword" = {
+      sopsFile = /etc/nixos/secrets/system/mail.yaml;
+      owner = "numbus-admin";
+      mode = "0600";
+    };
+
+    environment.etc."aliases" ={ 
+      mode = "0440";
+      text = ''
+        root: ${cfg.userAddress}, ${cfg.adminAddress}
+      '';
+    };
+
+    programs.msmtp = {
+      enable = true;
+      defaults = {
+        aliases = "/etc/aliases";
+        timeout = 60;
+        syslog = "on";
+      };
+      accounts.default = {
+        auth = true;
+        host = cfg.smtpServer;
+        port = cfg.smtpPort;
+        from = cfg.fromAddress;
+        user = cfg.smtpUsername;
+        tls = true;
+        tls_starttls = true;
+        passwordeval = "${pkgs.coreutils}/bin/cat ${cfg.smtpPasswordPath}";
+      };
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/common/misc/audio.nix b/modules/common/misc/audio.nix
new file mode 100644
index 0000000..7016402
--- /dev/null
+++ b/modules/common/misc/audio.nix
@@ -0,0 +1,15 @@
+{ config, deviceType, ... }:
+
+{
+  config = mkIf (deviceType == "computer" || deviceType == "tv" ) {
+    # Enable sound with pipewire.
+    services.pulseaudio.enable = false;
+    security.rtkit.enable = true;
+    services.pipewire = {
+      enable = true;
+      alsa.enable = true;
+      alsa.support32Bit = true;
+      pulse.enable = true;
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/common/misc/default.nix b/modules/common/misc/default.nix
new file mode 100644
index 0000000..e441233
--- /dev/null
+++ b/modules/common/misc/default.nix
@@ -0,0 +1,13 @@
+{ ... }:
+
+{
+  imports = [
+    # To test
+    ./audio.nix
+    ./internationalisation.nix
+    ./power.nix
+    ./printer.nix
+    ./update.nix
+    ./users.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/common/misc/internationalization.nix b/modules/common/misc/internationalization.nix
new file mode 100644
index 0000000..d08d2fe
--- /dev/null
+++ b/modules/common/misc/internationalization.nix
@@ -0,0 +1,30 @@
+{ config, lib, ... }:
+
+with lib;
+
+let
+  cfg = config.numbus.internationalization;
+in
+
+{
+  config = {
+    i18n.defaultLocale = "${cfg.locale}.UTF-8";
+    i18n.extraLocaleSettings = {
+      LC_ADDRESS = "${cfg.locale}.UTF-8";
+      LC_IDENTIFICATION = "${cfg.locale}.UTF-8";
+      LC_MEASUREMENT = "${cfg.locale}.UTF-8";
+      LC_MONETARY = "${cfg.locale}.UTF-8";
+      LC_NAME = "${cfg.locale}.UTF-8";
+      LC_NUMERIC = "${cfg.locale}.UTF-8";
+      LC_PAPER = "${cfg.locale}.UTF-8";
+      LC_TELEPHONE = "${cfg.locale}.UTF-8";
+      LC_TIME = "${cfg.locale}.UTF-8";
+    };
+
+    console.keyMap = toLower cfg.language;
+    services.xserver.xkb = {
+      layout = toLower cfg.language;
+      variant = "";
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/common/misc/power.nix b/modules/common/misc/power.nix
new file mode 100644
index 0000000..eb4848a
--- /dev/null
+++ b/modules/common/misc/power.nix
@@ -0,0 +1,12 @@
+{ config, lib, pkgs, ... }:
+
+{
+  config = {
+    services.autoaspm.enable = true;
+    powerManagement.powertop.enable = true;
+    boot.kernelParams = [
+      "pcie_aspm=force"
+      "consoleblank=60"
+    ];
+  };
+}
\ No newline at end of file
diff --git a/modules/common/misc/printer.nix b/modules/common/misc/printer.nix
new file mode 100644
index 0000000..bd760d0
--- /dev/null
+++ b/modules/common/misc/printer.nix
@@ -0,0 +1,8 @@
+{ config, ... }:
+
+{
+  config = mkIf (deviceType == "computer" || deviceType == "tv" ) {
+    # Enable CUPS to print documents.
+    services.printing.enable = true;
+  };
+}
\ No newline at end of file
diff --git a/modules/common/misc/update.nix b/modules/common/misc/update.nix
new file mode 100644
index 0000000..26b22dd
--- /dev/null
+++ b/modules/common/misc/update.nix
@@ -0,0 +1,23 @@
+{ config, inputs, ... }:
+
+{
+  config = {
+    system.autoUpgrade = {
+      enable = true;
+      allowReboot = false;
+      flake = inputs.self.outPath;
+      flags = [ "--print-build-logs" ];
+      dates = "02:00";
+      randomizedDelaySec = "45min";
+    };
+
+    nix.gc = {
+      automatic = true;
+      dates = "weekly";
+      options = "--delete-older-than 7d";
+    };
+
+    nix.settings.experimental-features = [ "nix-command" "flakes" ];
+    nix.settings.auto-optimise-store = true;
+  };
+}
\ No newline at end of file
diff --git a/modules/common/misc/users.nix b/modules/common/misc/users.nix
new file mode 100644
index 0000000..6216e91
--- /dev/null
+++ b/modules/common/misc/users.nix
@@ -0,0 +1,20 @@
+{ config, pkgs, ... }:
+
+let 
+  cfg = config.numbus;
+in 
+
+{
+  users.users.numbus-admin = {
+    shell = pkgs.fish;
+    isNormalUser = true;
+    description = cfg.owner;
+    extraGroups = [ "wheel" ];
+    uid = 1000;
+    initialPassword = "changeMe!";
+    # required for auto start before user login
+    linger = true;
+    # required for rootless container with multiple users
+    autoSubUidGidRange = true;
+  };
+}
\ No newline at end of file
diff --git a/modules/common/packages/default.nix b/modules/common/packages/default.nix
new file mode 100644
index 0000000..c882f63
--- /dev/null
+++ b/modules/common/packages/default.nix
@@ -0,0 +1,13 @@
+{ ... }:
+
+{
+  imports = [
+    # To test
+    ./fail2ban.nix
+    ./flatpaks.nix
+    ./numbus-cli.nix
+    ./ssh.nix
+    ./terminal.nix
+    ./updates.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/common/packages/fail2ban.nix b/modules/common/packages/fail2ban.nix
new file mode 100644
index 0000000..b70574e
--- /dev/null
+++ b/modules/common/packages/fail2ban.nix
@@ -0,0 +1,5 @@
+{ config, ... }:
+
+{
+  services.fail2ban.enable = true;
+}
\ No newline at end of file
diff --git a/modules/common/packages/flatpaks.nix b/modules/common/packages/flatpaks.nix
new file mode 100644
index 0000000..3d257e5
--- /dev/null
+++ b/modules/common/packages/flatpaks.nix
@@ -0,0 +1,16 @@
+{ config, lib, ... }: 
+
+with lib;
+
+{
+  config = mkIf (services.flatpak.packages != []) {
+    services.flatpak.enable = true;
+    services.flatpak.update.auto.enable = true;
+    services.flatpak.uninstallUnmanaged = true;
+
+    services.flatpak.remotes = mkOptionDefault [{
+      name = "flathub";
+      location = "https://dl.flathub.org/repo/flathub.flatpakrepo";
+    }];
+  };
+}
\ No newline at end of file
diff --git a/modules/common/packages/numbus-cli.nix b/modules/common/packages/numbus-cli.nix
new file mode 100644
index 0000000..53a8ca9
--- /dev/null
+++ b/modules/common/packages/numbus-cli.nix
@@ -0,0 +1,155 @@
+{ pkgs, lib, ... }:
+
+let
+  # Base script header and common setup for all device types
+  baseScriptHeader = ''
+    #!/usr/bin/env bash
+    set -euo pipefail
+
+    # The device type is baked into the script at build time
+    readonly NUMBUS_DEVICE_TYPE="${deviceType}"
+
+    # Common utility function for consistent output
+    numbus_echo() {
+      echo "[Numbus CLI - $NUMBUS_DEVICE_TYPE] $*"
+    }
+  '';
+
+  # --- Device-specific script definitions ---
+
+  serverScript = baseScriptHeader + ''
+    case "$1" in
+      test)
+        numbus_echo "Hello World! This is a Numbus Server."
+        ;;
+      status)
+        numbus_echo "Checking system status for Server..."
+        numbus_echo "--- Podman Containers ---"
+        podman ps || numbus_echo "No Podman containers found or Podman not running."
+        systemctl list-units --type=service "numbus-*" --no-pager || numbus_echo "No Numbus services found."
+        ;;
+      upgrade)
+        numbus_echo "Pulling latest configuration and upgrading for Server..."
+        # Add server-specific upgrade logic here (e.g., nixos-rebuild switch)
+        ;;
+      *)
+        numbus_echo "Numbus CLI (Server edition)"
+        echo ""
+        echo "Usage: numbus <command>"
+        echo ""
+        echo "Commands:"
+        echo "  test     - Print a test message"
+        numbus_echo "  status   - Show status of Numbus services (Podman, systemd)"
+        numbus_echo "  upgrade  - Upgrade the server configuration"
+        ;;
+    esac
+  '';
+
+  backupScript = baseScriptHeader + ''
+    case "$1" in
+      test)
+        numbus_echo "Hello World! This is a Numbus Backup Server."
+        ;;
+      status)
+        numbus_echo "Checking system status for Backup Server..."
+        systemctl list-units --type=service "numbus-*" --no-pager || numbus_echo "No Numbus services found."
+        # Add backup-specific status checks here (e.g., SnapRAID status, rsync jobs)
+        ;;
+      restore)
+        numbus_echo "Starting interactive restore wizard for Backup Server..."
+        # Add backup-specific restore logic here
+        ;;
+      upgrade)
+        numbus_echo "Pulling latest configuration and upgrading for Backup Server..."
+        # Add backup-specific upgrade logic here
+        ;;
+      *)
+        numbus_echo "Numbus CLI (Backup Server edition)"
+        echo ""
+        echo "Usage: numbus <command>"
+        echo ""
+        echo "Commands:"
+        numbus_echo "  test     - Print a test message"
+        numbus_echo "  status   - Show status of Numbus services"
+        numbus_echo "  restore  - Start interactive restore wizard"
+        numbus_echo "  upgrade  - Upgrade the backup server configuration"
+        ;;
+    esac
+  '';
+
+  computerScript = baseScriptHeader + ''
+    case "$1" in
+      test)
+        numbus_echo "Hello World! This is a Numbus Computer."
+        ;;
+      status)
+        numbus_echo "Checking system status for Computer..."
+        systemctl list-units --type=service "numbus-*" --no-pager || numbus_echo "No Numbus services found."
+        # Add computer-specific status checks (e.g., GPU status, Flatpak updates)
+        ;;
+      upgrade)
+        numbus_echo "Pulling latest configuration and upgrading for Computer..."
+        # Add computer-specific upgrade logic here
+        ;;
+      *)
+        numbus_echo "Numbus CLI (Computer edition)"
+        echo ""
+        echo "Usage: numbus <command>"
+        echo ""
+        echo "Commands:"
+        numbus_echo "  test     - Print a test message"
+        numbus_echo "  status   - Show status of Numbus services"
+        numbus_echo "  upgrade  - Upgrade the computer configuration"
+        ;;
+    esac
+  '';
+
+  tvScript = baseScriptHeader + ''
+    case "$1" in
+      test)
+        numbus_echo "Hello World! This is a Numbus TV."
+        ;;
+      status)
+        numbus_echo "Checking system status for TV..."
+        systemctl list-units --type=service "numbus-*" --no-pager || numbus_echo "No Numbus services found."
+        # Add TV-specific status checks (e.g., media server status, remote connectivity)
+        ;;
+      remote)
+        numbus_echo "Pairing a new Bluetooth remote for TV..."
+        # Add TV-specific remote pairing logic here
+        ;;
+      upgrade)
+        numbus_echo "Pulling latest configuration and upgrading for TV..."
+        # Add TV-specific upgrade logic here
+        ;;
+      *)
+        numbus_echo "Numbus CLI (TV edition)"
+        echo ""
+        echo "Usage: numbus <command>"
+        echo ""
+        numbus_echo "Commands:"
+        numbus_echo "  test     - Print a test message"
+        numbus_echo "  status   - Show status of Numbus services"
+        numbus_echo "  remote   - Pair a new Bluetooth remote"
+        numbus_echo "  upgrade  - Upgrade the TV configuration"
+        ;;
+    esac
+  '';
+
+  # Use lib.switch to select the correct script based on deviceType
+  selectedScript = lib.switch deviceType {
+    server = serverScript;
+    backup = backupScript;
+    computer = computerScript;
+    tv = tvScript;
+  } (throw "Unknown Numbus device type: ${deviceType}"); # Fail if an unknown deviceType is encountered
+
+  # Define the numbus-cli package using the selected script
+  numbus = pkgs.writeShellScriptBin "numbus" selectedScript;
+
+in {
+  environment.systemPackages = [ numbus ];
+
+  # Add a useful alias so people can check the type via env
+  environment.variables.NUMBUS_DEVICE_TYPE = deviceType;
+}
\ No newline at end of file
diff --git a/modules/common/packages/ssh.nix b/modules/common/packages/ssh.nix
new file mode 100644
index 0000000..a5e7e60
--- /dev/null
+++ b/modules/common/packages/ssh.nix
@@ -0,0 +1,21 @@
+{ config, ... }:
+
+{
+  config.services.openssh = {
+    enable = true;
+    settings = {
+      PasswordAuthentication = false;
+      KbdInteractiveAuthentication = false;
+      PermitRootLogin = "no";
+    };
+    AllowUsers = [ "numbus-admin" ];
+    ports = [ 245 ]
+  };
+
+  config.sops.secrets."authorizedSshPublicKeys" = {
+    sopsFile = /etc/nixos/secrets/system/ssh.yaml;
+    mode = "0440";
+    owner = "numbus-admin";
+    path = "/home/numbus-admin/.ssh/authorized_keys";
+  };
+}
\ No newline at end of file
diff --git a/modules/common/packages/terminal.nix b/modules/common/packages/terminal.nix
new file mode 100644
index 0000000..7fd47b6
--- /dev/null
+++ b/modules/common/packages/terminal.nix
@@ -0,0 +1,24 @@
+{ config, pkgs, ... }:
+
+{
+  environment.systemPackages = with pkgs; [
+    fish
+    fishPlugins.fzf-fish
+    fishPlugins.grc
+    grc
+    fzf
+  ];
+
+  programs.fish = {
+    enable = true;
+    interactiveShellInit = ''
+      set fish_greeting # Disable greeting
+      fastfetch
+      echo -e "\n\nWelcome to Numbus !\n\n- This system is managed by NixOS\n- All changes are futile\n- Please consider buying support to get assistance\n- Have a nice day and enjoy !"
+    '';
+    shellAliases = {
+      nixup = "cd /etc/nixos/ && sudo nix flake update && sudo nixos-rebuild --flake . switch --upgrade && cd -";
+      nixwitch = "cd /etc/nixos/ && sudo nix flake update && sudo nixos-rebuild --flake . switch && cd -";
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/common/packages/updates.nix b/modules/common/packages/updates.nix
new file mode 100644
index 0000000..b6f8312
--- /dev/null
+++ b/modules/common/packages/updates.nix
@@ -0,0 +1,23 @@
+{ config, inputs, ... }:
+
+{
+  config = {
+    system.autoUpgrade = {
+      enable = true;
+      allowReboot = false;
+      flake = inputs.self.outPath;
+      flags = [ "--print-build-logs" ];
+      dates = "21:00";
+      randomizedDelaySec = "45min";
+    };
+
+    nix.gc = {
+      automatic = true;
+      dates = "weekly";
+      options = "--delete-older-than 7d";
+    };
+
+    nix.settings.experimental-features = [ "nix-command" "flakes" ];
+    nix.settings.auto-optimise-store = true;
+  };
+}
\ No newline at end of file
diff --git a/modules/computer/default.nix b/modules/computer/default.nix
new file mode 100644
index 0000000..15239bd
--- /dev/null
+++ b/modules/computer/default.nix
@@ -0,0 +1,9 @@
+{ ... }:
+
+{
+  imports=[
+    ./hardware/default.nix
+    ./misc/default.nix
+    ./packages/default.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/computer/global.nix b/modules/computer/global.nix
new file mode 100644
index 0000000..35a7bb5
--- /dev/null
+++ b/modules/computer/global.nix
@@ -0,0 +1,32 @@
+{ lib, ... }:
+
+with lib;
+
+{
+  options.numbus-computer = {
+    owner = mkOption {
+      type = types.str;
+      example = "Alex";
+      default = "Numbus";
+      description = "The name of the person who owns this computer";
+    };
+    language = mkOption {
+      type = types.str;
+      example = "FR";
+      default = "FR";
+      description = "The language for this computer";
+    };
+    keyboardLayout = mkOption {
+      type = types.str;
+      example = "FR";
+      default = "FR";
+      description = "The keyboard layout for this computer";
+    };
+    locale = mkOption {
+      type = types.str;
+      example = "fr_FR";
+      default = "fr_FR";
+      description = "The default locale for this computer";
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/computer/hardware/boot.nix b/modules/computer/hardware/boot.nix
new file mode 100644
index 0000000..3812345
--- /dev/null
+++ b/modules/computer/hardware/boot.nix
@@ -0,0 +1,24 @@
+{ config, ... }:
+
+{
+  config = {
+    # Bootloader options
+    boot.initrd.systemd.enable = true;
+    boot.loader.systemd-boot.enable = true;
+    boot.loader.efi.canTouchEfiVariables = true;
+
+    # Boot splash instead of log messages
+    boot = {
+      plymouth.enable = true;
+      # Enable "Silent boot"
+      consoleLogLevel = 3;
+      initrd.verbose = false;
+      kernelParams = [
+        "quiet"
+        "udev.log_level=3"
+        "systemd.show_status=auto"
+      ];
+      loader.timeout = 1;
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/computer/hardware/cpu.nix b/modules/computer/hardware/cpu.nix
new file mode 100644
index 0000000..d3fe470
--- /dev/null
+++ b/modules/computer/hardware/cpu.nix
@@ -0,0 +1,9 @@
+{ config, ... }:
+
+{
+  config = {
+    hardware.enableRedistributableFirmware = true;
+    hardware.cpu.intel.updateMicrocode = true;
+    hardware.cpu.amd.updateMicrocode = true;
+  };
+}
\ No newline at end of file
diff --git a/modules/computer/hardware/default.nix b/modules/computer/hardware/default.nix
new file mode 100644
index 0000000..0d931d1
--- /dev/null
+++ b/modules/computer/hardware/default.nix
@@ -0,0 +1,10 @@
+{ ... }:
+
+{
+  imports=[
+    ./boot.nix
+    ./cpu.nix
+    ./disks.nix
+    ./nvidia.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/computer/hardware/disks.nix b/modules/computer/hardware/disks.nix
new file mode 100644
index 0000000..6e1acee
--- /dev/null
+++ b/modules/computer/hardware/disks.nix
@@ -0,0 +1,328 @@
+{ config, lib, pkgs, ... }:
+
+with lib;
+
+let
+  cfg = config.numbus.hardware;
+
+  mkDataDisk = idx: device: {
+    name = "content-${toString idx}";
+    value = {
+      type = "disk";
+      device = device;
+      content = {
+        type = "gpt";
+        partitions = {
+          luks = {
+            size = "100%";
+            content = {
+              type = "luks";
+              name = "crypted-content-${toString idx}";
+              initrdUnlock = false;
+              settings = {
+                keyFile = "/etc/secrets/disks/content-${toString idx}";
+                allowDiscards = true;
+                crypttabExtraOpts = [ "nofail" ];
+              };
+              content = {
+                type = "filesystem";
+                format = cfg.dataDisksFilesystem;
+                mountpoint = "/mnt/content-${toString idx}";
+                mountOptions = [ "nofail" "noauto" ];
+              };
+            };
+          };
+        };
+      };
+    };
+  };
+
+  mkParityDisk = idx: device: {
+    name = "parity-${toString idx}";
+    value = {
+      type = "disk";
+      device = device;
+      content = {
+        type = "gpt";
+        partitions = {
+          luks = {
+            size = "100%";
+            content = {
+              type = "luks";
+              name = "crypted-parity-${toString idx}";
+              initrdUnlock = false;
+              settings = {
+                keyFile = "/etc/secrets/disks/parity-${toString idx}";
+                allowDiscards = true;
+                crypttabExtraOpts = [ "nofail" ];
+              };
+              content = {
+                type = "filesystem";
+                format = cfg.parityDisksFilesystem;
+                mountpoint = "/mnt/parity-${toString idx}";
+                mountOptions = [ "nofail" "noauto" ];
+              };
+            };
+          };
+        };
+      };
+    };
+  };
+
+  isMirror = length cfg.bootDisksList > 1;
+
+  bootDisksConfig = if isMirror then {
+    mdadm = {
+      boot = {
+        type = "mdadm";
+        level = 1;
+        metadata = "1.2";
+        content = {
+          type = "filesystem";
+          format = "vfat";
+          mountpoint = "/boot";
+          mountOptions = [ "umask=0077" ];
+        };
+      };
+    };
+    disk = listToAttrs (imap1 (i: device: {
+      name = "boot-${toString i}";
+      value = {
+        type = "disk";
+        device = device;
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              size = "1G";
+              type = "EF00";
+              content = {
+                type = "mdraid";
+                name = "boot";
+              };
+            };
+            luks = {
+              size = "100%";
+              content = {
+                type = "luks";
+                name = "crypted-boot-${toString i}";
+                settings = {
+                  allowDiscards = true;
+                  keyFile = "/etc/secrets/disks/boot-${toString i}";
+                };
+                content = {
+                  type = "lvm_pv";
+                  vg = "pool";
+                };
+              };
+            };
+          };
+        };
+      };
+    }) cfg.bootDisksList);
+  } else {
+    disk = {
+      "boot-1" = {
+        type = "disk";
+        device = head cfg.bootDisksList;
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              size = "1G";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = [ "umask=0077" ];
+              };
+            };
+            luks = {
+              size = "100%";
+              content = {
+                type = "luks";
+                name = "crypted-boot-1";
+                settings = {
+                  keyFile = "/etc/secrets/disks/boot-1";
+                  allowDiscards = true;
+                };
+                content = {
+                  type = "lvm_pv";
+                  vg = "pool";
+                };
+              };
+            };
+          };
+        };
+      };
+    };
+  };
+
+  lvmConfig = {
+    lvm_vg = {
+      pool = {
+        type = "lvm_vg";
+        lvs = {
+          swap = {
+            size = cfg.swapSize;
+            content = {
+              type = "swap";
+            };
+          } // optionalAttrs isMirror { lvm_type = "mirror"; };
+          snapraid = {
+            size = "1G";
+            content = {
+              type = "filesystem";
+              format = "btrfs";
+              mountpoint = "/mnt/content-0";
+            };
+          } // optionalAttrs isMirror { lvm_type = "mirror"; };
+          root = {
+            size = "100%";
+            content = {
+              type = "btrfs";
+              extraArgs = [ "-f" ];
+              subvolumes = {
+                "/rootfs" = {
+                  mountpoint = "/";
+                  mountOptions = [ "compress=zstd" "noatime" ];
+                };
+                "/home" = {
+                  mountpoint = "/home";
+                  mountOptions = [ "compress=zstd" ];
+                };
+                "/nix" = {
+                  mountpoint = "/nix";
+                  mountOptions = [ "compress=zstd" "noatime" ];
+                };
+              };
+            };
+          } // optionalAttrs isMirror { lvm_type = "mirror"; };
+        };
+      };
+    };
+  };
+
+in
+{
+  options.numbus.hardware = {
+    dataDisksList = mkOption {
+      type = types.listOf types.str;
+      default = [];
+      example = [ "/dev/disk/by-id/WD_Blue_ATO431_159Ejz224G0000382b" "/dev/disk/by-id/Seagate_Barracuda_159Ejz224G" ];
+      description = "List by-id path of devices for data disks";
+    };
+    parityDisksList = mkOption {
+      type = types.listOf types.str;
+      default = [];
+      example = [ "/dev/disk/by-id/WD_Blue_ATO431_159Ejz224G0000382b" "/dev/disk/by-id/Seagate_Barracuda_159Ejz224G" ];
+      description = "List of by-id path of devices for parity disks";
+    };
+    bootDisksList = mkOption {
+      type = types.listOf types.str;
+      default = [];
+      example = [ "/dev/disk/by-id/nvme_SAMSUNG_MZVPYEHCO_159Ejz224G0000" "/dev/disk/by-id/ata-San_Disk_159Ejz224G" ];
+      description = "List of by-id path of devices for boot disks";
+    };
+    spindownDisksList = mkOption {
+      type = types.listOf types.str;
+      default = [];
+      example = [ "/dev/disk/by-id/WD_Blue_ATO431_159Ejz224G0000382b" "/dev/disk/by-id/Seagate_Barracuda_159Ejz224G" ];
+      description = "List of by-id path of devices to spindown when inactive to save power (HDD only)";
+    };
+    swapSize = mkOption {
+      type = types.str;
+      default = "16G";
+      example = "16G";
+      description = "Size of the swap partition";
+    };
+    dataDisksFilesystem = mkOption {
+      type = types.enum [ "xfs" "ext4" "btrfs" ];
+      default = "xfs";
+      example = "xfs";
+      description = "Filesystem for data disks. Available filesystem options : xfs, ext4, btrfs";
+    };
+    parityDisksFilesystem = mkOption {
+      type = types.enum [ "xfs" "ext4" "btrfs" ];
+      default = "xfs";
+      example = "xfs";
+      description = "Filesystem for parity disks. Available filesystem options : xfs, ext4, btrfs";
+    };
+  };
+
+  config = mkIf (cfg.bootDisksList != []) {
+    disko.devices = mkMerge [
+      bootDisksConfig
+      lvmConfig
+      {
+        disk = listToAttrs (imap1 mkDataDisk cfg.dataDisksList);
+      }
+      {
+        disk = listToAttrs (imap1 mkParityDisk cfg.parityDisksList);
+      }
+    ];
+
+    services.snapraid = {
+      enable = true;
+      contentFiles = [ "/mnt/content-0/snapraid.content" ] ++
+        (map (i: "/mnt/content-${toString i}/snapraid.content") (range 1 (length cfg.dataDisksList)));
+      parityFiles = map (i: "/mnt/parity-${toString i}/snapraid.parity") (range 1 (length cfg.parityDisksList));
+      dataDisks = listToAttrs (imap1 (i: _: nameValuePair "d${toString i}" "/mnt/content-${toString i}") cfg.dataDisksList);
+    };
+
+    fileSystems."/mnt/data" = {
+      device = "/mnt/content-*";
+      fsType = "fuse.mergerfs";
+      options = [
+        "category.create=ff"
+        "cache.files=partial"
+        "dropcacheonclose=true"
+        "defaults"
+        "noauto"
+        "nofail"
+        "allow_other"
+        "moveonenospc=1"
+        "minfreespace=50G"
+        "func.getattr=newest"
+        "fsname=mergerfs_data"
+        "x-mount.mkdir"
+        "x-systemd.automount"
+      ];
+    };
+
+    systemd.services.mount-disks = {
+      description = "Mount data and parity disks";
+      before = [ "mnt-data.mount" ];
+      requiredBy = [ "mnt-data.mount" ];
+      path = [ pkgs.cryptsetup pkgs.util-linux ];
+      serviceConfig = {
+        Type = "oneshot";
+        RemainAfterExit = true;
+      };
+      script = let
+        mountDataDisk = i: ''
+          if [ ! -e /dev/mapper/crypted-content-${toString i} ]; then
+            cryptsetup luksOpen --key-file /etc/secrets/disks/content-${toString i} /dev/disk/by-partlabel/disk-content-${toString i}-luks crypted-content-${toString i}
+          fi
+          mkdir -p /mnt/content-${toString i}
+          if ! mountpoint -q /mnt/content-${toString i}; then
+            mount -t ${cfg.dataDisksFilesystem} /dev/mapper/crypted-content-${toString i} /mnt/content-${toString i}
+          fi
+        '';
+        mountParityDisk = i: ''
+          if [ ! -e /dev/mapper/crypted-parity-${toString i} ]; then
+            cryptsetup luksOpen --key-file /etc/secrets/disks/parity-${toString i} /dev/disk/by-partlabel/disk-parity-${toString i}-luks crypted-parity-${toString i}
+          fi
+          mkdir -p /mnt/parity-${toString i}
+          if ! mountpoint -q /mnt/parity-${toString i}; then
+            mount -t ${cfg.parityDisksFilesystem} /dev/mapper/crypted-parity-${toString i} /mnt/parity-${toString i}
+          fi
+        '';
+      in ''
+        ${concatMapStrings mountDataDisk (range 1 (length cfg.dataDisksList))}
+        ${concatMapStrings mountParityDisk (range 1 (length cfg.parityDisksList))}
+      '';
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/computer/hardware/nvidia.nix b/modules/computer/hardware/nvidia.nix
new file mode 100644
index 0000000..648c770
--- /dev/null
+++ b/modules/computer/hardware/nvidia.nix
@@ -0,0 +1,56 @@
+{ config, lib, pkgs, ... }:
+
+let
+  cfg = config.numbus-computer.hardware;
+in
+
+{
+  options.numbus-computer.hardware = {
+    nvidia = {
+      enable = mkEnableOption "Wether to install the NVIDIA driver. Required for better performance with NVIDIA graphics cards."
+    }
+  }
+
+  config = mkMerge [
+    ({
+      # Enable OpenGL
+      hardware.graphics = {
+        enable = true;
+      };
+    })
+
+    ( mkIf (cfg.nvidia.enable == true) {
+      # Load nvidia driver for Xorg and Wayland
+      services.xserver.videoDrivers = [ "nvidia" ];
+
+      hardware.nvidia = {
+        # Modesetting is required.
+        modesetting.enable = true;
+        # Nvidia power management. Experimental, and can cause sleep/suspend to fail.
+        # Enable this if you have graphical corruption issues or application crashes after waking
+        # up from sleep. This fixes it by saving the entire VRAM memory to /tmp/ instead 
+        # of just the bare essentials.
+        powerManagement.enable = false;
+
+        # Fine-grained power management. Turns off GPU when not in use.
+        # Experimental and only works on modern Nvidia GPUs (Turing or newer).
+        powerManagement.finegrained = false;
+
+        # Use the NVidia open source kernel module (not to be confused with the
+        # independent third-party "nouveau" open source driver).
+        # Support is limited to the Turing and later architectures. Full list of 
+        # supported GPUs is at: 
+        # https://github.com/NVIDIA/open-gpu-kernel-modules#compatible-gpus 
+        # Only available from driver 515.43.04+
+        open = false;
+
+        # Enable the Nvidia settings menu,
+      # accessible via `nvidia-settings`.
+        nvidiaSettings = true;
+
+        # Optionally, you may need to select the appropriate driver version for your specific GPU.
+        package = config.boot.kernelPackages.nvidiaPackages.stable;
+      };
+    })
+  ];
+}
\ No newline at end of file
diff --git a/modules/computer/misc/default.nix b/modules/computer/misc/default.nix
new file mode 100644
index 0000000..c40367e
--- /dev/null
+++ b/modules/computer/misc/default.nix
@@ -0,0 +1,11 @@
+{ ... }:
+
+{
+  imports=[
+    ./audio.nix
+    ./internationalization.nix
+    ./networking.nix
+    ./printer.nix
+    ./users.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/computer/misc/networking.nix b/modules/computer/misc/networking.nix
new file mode 100644
index 0000000..accc6c1
--- /dev/null
+++ b/modules/computer/misc/networking.nix
@@ -0,0 +1,12 @@
+{ config, ... }:
+
+{
+  # Enable networking
+  networking.networkmanager.enable = true;
+  networking.hostName = "numbus-computer";
+
+  # Open ports in the firewall.
+  networking.firewall.allowedTCPPorts = [ ];
+  networking.firewall.allowedUDPPorts = [ ];
+  networking.firewall.enable = true;
+}
\ No newline at end of file
diff --git a/modules/computer/packages/default.nix b/modules/computer/packages/default.nix
new file mode 100644
index 0000000..c8c54c8
--- /dev/null
+++ b/modules/computer/packages/default.nix
@@ -0,0 +1,10 @@
+{ ... }:
+
+{
+  imports=[
+    ./desktop-environment.nix
+    ./flatpaks.nix
+    ./terminal.nix
+    ./updates.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/computer/packages/desktop-environment.nix b/modules/computer/packages/desktop-environment.nix
new file mode 100644
index 0000000..94f7b18
--- /dev/null
+++ b/modules/computer/packages/desktop-environment.nix
@@ -0,0 +1,75 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  cfg = config.numbus-computer.packages.desktop;
+in
+
+{
+  options.numbus-computer.packages.desktop = {
+    gnome = {
+      enable = mkEnableOption "Wether to enable the GNOME desktop environment.";
+
+      extensions = mkOption {
+        type = types.listOf types.str ;
+        default = [];
+        example = [ "dash-to-dock" "caffeine" "clipboard-history" "appindicator-support" ];
+        description = "Extensions to add to the Gnome desktop environment to improve your experience.";
+      };
+    };
+    kde_plasma = {
+      enable = mkEnableOption "Wether to enable the KDE Plasma desktop environment.";
+    };
+    hyprland = {
+      enable = mkEnableOption "Wether to enable the hyprland desktop environment.";
+    };
+  };
+
+  config = mkMerge [
+    # GNOME
+    (mkIf (cfg.gnome.enable == true) {
+      services.xserver.enable = false;
+      services.displayManager.gdm.enable = true;
+      services.desktopManager.gnome.enable = true;
+      services.gnome.core-apps.enable = false;
+      services.gnome.core-developer-tools.enable = false;
+      services.gnome.games.enable = false;
+      environment.gnome.excludePackages = with pkgs; [ gnome-tour gnome-user-docs ];
+    })
+
+    # GNOME extensions
+    (mkIf (cfg.gnome.enable == true && cfg.desktop.gnome.extensions != [ ]) {
+      environment.systemPackages = map (ext: pkgs.gnomeExtensions.${ext}) cfg.desktop.gnome.extensions;
+    })
+
+    # KDE Plasma
+    (mkIf (cfg.kde_plasma.enable == true) {
+      services = {
+        desktopManager.plasma6.enable = true;
+        displayManager.sddm.enable = true;
+        displayManager.sddm.wayland.enable = true;
+      };
+      environment.systemPackages = with pkgs; [
+        kdePackages.discover
+        kdePackages.kcalc
+        kdePackages.kcharselect
+        kdePackages.kclock
+        kdePackages.kcolorchooser
+        kdePackages.kolourpaint
+        kdePackages.sddm-kcm
+        kdiff3
+        wayland-utils
+        wl-clipboard
+      ];
+    })
+
+    # Hyprland
+    (mkIf (cfg.hyprland.enable == true) {
+      programs.hyprland.enable = true;
+      environment.systemPackages = [
+        pkgs.kitty
+      ];
+    })
+  ];
+}
\ No newline at end of file
diff --git a/modules/server/default.nix b/modules/server/default.nix
new file mode 100644
index 0000000..5564710
--- /dev/null
+++ b/modules/server/default.nix
@@ -0,0 +1,15 @@
+{ ... }:
+
+{
+  imports = [
+    ./dns-services/default.nix
+    ./hardware/default.nix
+    ./mail/default.nix
+    ./misc/default.nix
+    ./networking/default.nix
+    ./packages/default.nix
+    ./system-services/default.nix
+    ./web-applications/default.nix
+    ./global.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/server/hardware/boot.nix b/modules/server/hardware/boot.nix
new file mode 100644
index 0000000..89c82ad
--- /dev/null
+++ b/modules/server/hardware/boot.nix
@@ -0,0 +1,11 @@
+{ config, ... }:
+
+{
+  boot.initrd.systemd.enable = true;
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+
+  boot.kernel.sysctl = {
+    "vm.overcommit_memory" = 1;
+  };
+}
\ No newline at end of file
diff --git a/modules/server/hardware/default.nix b/modules/server/hardware/default.nix
new file mode 100644
index 0000000..f1a7eb8
--- /dev/null
+++ b/modules/server/hardware/default.nix
@@ -0,0 +1,12 @@
+{ ... }:
+
+{
+  imports = [
+    # Tested
+    ./boot.nix
+    ./cpu.nix
+    # To test
+    ./pcie-coral.nix
+    ./disks/default.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/server/hardware/pcie-coral.nix b/modules/server/hardware/pcie-coral.nix
new file mode 100644
index 0000000..db7709b
--- /dev/null
+++ b/modules/server/hardware/pcie-coral.nix
@@ -0,0 +1,111 @@
+{ config, lib, pkgs, ... }:
+
+let
+  cfg = config.numbus-server.hardware.pcie-coral;
+
+  gasket-driver = { stdenv, lib, fetchFromGitHub, kernel }: stdenv.mkDerivation rec {
+    pname = "gasket";
+    version = "1.0-18";
+
+    src = fetchFromGitHub {
+      owner = "google";
+      repo = "gasket-driver";
+      rev = "97aeba584efd18983850c36dcf7384b0185284b3";
+      sha256 = "pJwrrI7jVKFts4+bl2xmPIAD01VKFta2SRuElerQnTo=";
+    };
+
+    makeFlags = [
+      "-C"
+      "${kernel.dev}/lib/modules/${kernel.modDirVersion}/build"
+      "M=$(PWD)"
+    ];
+    buildFlags = [ "modules" ];
+
+    installFlags = [ "INSTALL_MOD_PATH=${placeholder "out"}" ];
+    installTargets = [ "modules_install" ];
+
+    sourceRoot = "source/src";
+    hardeningDisable = [ "pic" "format" ];
+    nativeBuildInputs = kernel.moduleBuildDependencies;
+
+    meta = with lib; {
+      description = "The Coral Gasket Driver allows usage of the Coral EdgeTPU on Linux systems.";
+      homepage = "https://github.com/google/gasket-driver";
+      license = licenses.gpl2;
+      maintainers = [ maintainers.kylehendricks ];
+      platforms = platforms.linux;
+    };
+  };
+
+  libedgetpu-pkg = { stdenv, lib, fetchFromGitHub, libusb1, abseil-cpp, flatbuffers, xxd }:
+    let
+      flatbuffers_1_12 = flatbuffers.overrideAttrs (oldAttrs: rec {
+        version = "1.12.0";
+        NIX_CFLAGS_COMPILE = "-Wno-error=class-memaccess -Wno-error=maybe-uninitialized";
+        cmakeFlags = (oldAttrs.cmakeFlags or []) ++ ["-DFLATBUFFERS_BUILD_SHAREDLIB=ON"];
+        NIX_CXXSTDLIB_COMPILE = "-std=c++17";
+        configureFlags = (oldAttrs.configureFlags or []) ++ ["--enable-shared"];
+        src = fetchFromGitHub {
+          owner = "google";
+          repo = "flatbuffers";
+          rev = "v${version}";
+          sha256 = "sha256-L1B5Y/c897Jg9fGwT2J3+vaXsZ+lfXnskp8Gto1p/Tg=";
+        };
+      });
+
+    in stdenv.mkDerivation rec {
+      pname = "libedgetpu";
+      version = "grouper";
+
+      src = fetchFromGitHub {
+        owner = "google-coral";
+        repo = pname;
+        rev = "release-${version}";
+        sha256 = "sha256-73hwItimf88Iqnb40lk4ul/PzmCNIfdt6Afi+xjNiBE=";
+      };
+
+      makeFlags = ["-f" "makefile_build/Makefile" "libedgetpu" ];
+
+      buildInputs = [
+        libusb1
+        abseil-cpp
+        flatbuffers_1_12
+      ];
+
+      nativeBuildInputs = [
+        xxd
+      ];
+
+      NIX_CXXSTDLIB_COMPILE = "-std=c++17";
+
+      TFROOT = "${fetchFromGitHub {
+        owner = "tensorflow";
+        repo = "tensorflow";
+        rev = "v2.7.4";
+        sha256 = "sha256-liDbUAdaVllB0b74aBeqNxkYNu/zPy7k3CevzRF5dk0=";
+      }}";
+
+      enableParallelBuilding = false;
+
+      installPhase = ''
+        mkdir -p $out/lib
+        cp out/direct/k8/libedgetpu.so.1.0 $out/lib
+        ln -s $out/lib/libedgetpu.so.1.0 $out/lib/libedgetpu.so.1
+        mkdir -p $out/lib/udev/rules.d
+        cp debian/edgetpu-accelerator.rules $out/lib/udev/rules.d/99-edgetpu-accelerator.rules
+      '';
+    };
+
+  gasket = config.boot.kernelPackages.callPackage gasket-driver {};
+  libedgetpu = pkgs.callPackage libedgetpu-pkg {};
+in
+
+{
+  options.numbus-server.hardware.pcie-coral = lib.mkEnableOption "PCIe Coral TPU support";
+
+  config = lib.mkIf cfg.enable {
+    services.udev.packages = [ libedgetpu ];
+    users.groups.plugdev = {};
+    boot.extraModulePackages = [ gasket ];
+  };
+}
\ No newline at end of file
diff --git a/modules/server/mail/clamav.nix b/modules/server/mail/clamav.nix
new file mode 100644
index 0000000..7713d89
--- /dev/null
+++ b/modules/server/mail/clamav.nix
@@ -0,0 +1,89 @@
+{ config, lib, pkgs, ... }:
+
+with lib;
+
+let
+  cfg = config.numbus-server.services.clamav;
+  clamav_notifier = pkgs.writeScript "clamav-notify.sh" ''
+    #!${pkgs.bash}/bin/bash
+
+    # Check if triggered by Real-time event (file exists)
+    if [ -f /var/lib/clamav/virus_event.env ]; then
+      source /var/lib/clamav/virus_event.env
+      rm /var/lib/clamav/virus_event.env
+    fi
+
+    ADMIN_EMAIL="${config.numbus-server.mail.adminAddress}"
+    USER_EMAIL="${config.numbus-server.mail.userAddress}"
+    OWNER_NAME="${config.numbus-server.owner}"
+
+    if [ -n "$CLAM_VIRUSEVENT_VIRUSNAME" ]; then
+      # --- Real-time / VirusEvent Mode ---
+      SUBJECT="Numbus Server Alert: Virus Detected (Real-time)"
+      
+      # Retrieve logs from clamav-daemon
+      LOGS=$(journalctl -u clamav-daemon.service -n 50 --no-pager | grep "FOUND")
+
+      TECH_BODY="
+      ClamAV Real-time Alert:
+      Server owner: $OWNER_NAME
+      
+      Virus detected: $CLAM_VIRUSEVENT_VIRUSNAME
+      File: $CLAM_VIRUSEVENT_FILENAME
+      
+      Logs:
+      $LOGS
+      
+      Action taken: Access blocked (OnAccessPrevention).
+      Please investigate manually.
+      "
+      
+      FRIENDLY_BODY="Cher/Chère $OWNER_NAME,
+
+      L'antivirus de votre serveur a détecté et bloqué une menace en temps réel.
+      Fichier : $CLAM_VIRUSEVENT_FILENAME
+      
+      Votre administrateur a été notifié.
+      "
+    else
+      # --- Scheduled Scan Summary Mode ---
+      SUBJECT="Numbus Server Alert: Virus Detected during Scheduled Scan"
+      
+      # Retrieve logs (clamdscan prints FOUND when a virus is detected)
+      LOGS=$(journalctl -u clamav-periodic-scan.service -n 100 --no-pager | grep "FOUND")
+      
+      TECH_BODY="
+      ClamAV Scan Alert:
+      Server owner: $OWNER_NAME
+
+      Viruses detected:
+      $LOGS
+
+      Action taken: Detection only.
+      Please investigate manually.
+      "
+      
+      FRIENDLY_BODY="Cher/Chère $OWNER_NAME,
+
+      L'antivirus de votre serveur a détecté une menace potentielle lors de l'analyse périodique.
+      Votre administrateur a été notifié avec les détails techniques.
+      Nous vous conseillons d'être prudent avec vos fichiers récents.
+      "
+    fi
+
+    printf "Subject: [ADMIN] %s\n\n%s" "$SUBJECT" "$TECH_BODY" | /run/wrappers/bin/sendmail -t "$ADMIN_EMAIL"
+    printf "Subject: [Alerte] Menace détectée sur votre serveur Numbus\n\n%s\n\nMerci de votre confiance,\nL'équipe de support,\nNumbus-Server." "$FRIENDLY_BODY" | /run/wrappers/bin/sendmail -t "$USER_EMAIL"
+  '';
+in
+
+{ 
+  config = mkIf cfg.enable {
+    systemd.services.clamav-virus-notify = {
+      description = "Email notification for ClamAV virus detection";
+      serviceConfig = {
+        Type = "oneshot";
+        ExecStart = "${clamav_notifier}";
+      };
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/server/mail/default.nix b/modules/server/mail/default.nix
new file mode 100644
index 0000000..b5f75e8
--- /dev/null
+++ b/modules/server/mail/default.nix
@@ -0,0 +1,12 @@
+{ ... }:
+
+{
+  imports = [
+    # To test
+    ./clamav.nix
+    ./smart.nix
+    ./systemd.nix
+    ./smtp.nix
+    ./disk-space.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/server/mail/systemd.nix b/modules/server/mail/systemd.nix
new file mode 100644
index 0000000..763672e
--- /dev/null
+++ b/modules/server/mail/systemd.nix
@@ -0,0 +1,55 @@
+{ config, pkgs, ... }:
+
+let
+  systemd_notifier = pkgs.writeScript "systemd-email-notify.sh" ''
+    #!${pkgs.bash}/bin/bash
+    
+    # The failing service name is passed as the first argument
+    UNIT=$1
+    
+    # 1. Send Technical Email to Admin
+    ADMIN_EMAIL="${config.numbus-server.mail.adminAddress}"
+    SUBJECT="Numbus Server Alert: Service $UNIT Failed"
+    
+    # Retrieve recent logs for context
+    LOGS=$(journalctl -u "$UNIT" -n 20 --no-pager)
+    
+    TECH_BODY="
+    Systemd Service Failure Alert:
+    Server owner: ${config.numbus-server.owner}
+    Service: $UNIT
+    
+    Recent Logs:
+    $LOGS
+    "
+    printf "Subject: [ADMIN] $SUBJECT\n\n$TECH_BODY" | /run/wrappers/bin/sendmail -t "$ADMIN_EMAIL"
+
+    # 2. Send Friendly Email to Owner
+    USER_EMAIL="${config.numbus-server.mail.userAddress}"
+    OWNER_NAME="${config.numbus-server.owner}"
+    
+    FRIENDLY_BODY="Cher/Chère $OWNER_NAME,
+
+    Votre serveur a détecté une défaillance du service $UNIT.
+    Le système a tenté de gérer l'erreur, mais une intervention peut être nécessaire.
+
+    Votre administrateur a été notifié de cet incident avec les détails techniques nécessaires.
+    Il interviendra si une action manuelle est requise.
+
+    Merci de votre confiance,
+    L'équipe de support,
+    Numbus-Server."
+    
+    printf "Subject: [Alerte] Erreur sur votre serveur Numbus\n\n$FRIENDLY_BODY" | /run/wrappers/bin/sendmail -t "$USER_EMAIL"
+  '';
+in
+{
+  systemd.services."service-failure-notify@" = {
+    description = "Email notification for failed service %i";
+    onFailure = [ ];
+    serviceConfig = {
+      Type = "oneshot";
+      ExecStart = "${systemd_notifier} %i";
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/server/networking/default.nix b/modules/server/networking/default.nix
new file mode 100644
index 0000000..fe4a2ce
--- /dev/null
+++ b/modules/server/networking/default.nix
@@ -0,0 +1,9 @@
+{ ... }:
+
+{
+  imports = [
+    # To test
+    ./firewall.nix
+    ./networking.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/server/networking/firewall.nix b/modules/server/networking/firewall.nix
new file mode 100644
index 0000000..e28edef
--- /dev/null
+++ b/modules/server/networking/firewall.nix
@@ -0,0 +1,13 @@
+{ config, pkgs, lib, ... }:
+
+{
+  config = {
+    networking.nftables.enable = true;
+    networking.firewall = {
+      enable = true;
+      allowPing = true;
+      allowedTCPPorts = [ 53 80 443 ];
+      allowedUDPPorts = [ 53 443 ];
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/server/networking/networking.nix b/modules/server/networking/networking.nix
new file mode 100644
index 0000000..f5350fb
--- /dev/null
+++ b/modules/server/networking/networking.nix
@@ -0,0 +1,60 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  cfg = config.numbus-server.networking;
+in
+
+{
+  options.numbus-server.networking = {
+    ipAddress = mkOption {
+      description = "The IP address that this server will use";
+      type = types.str;
+      example = "192.168.1.100";
+    };
+    interface = mkOption {
+      description = "The interface that this server will use to connect to the network";
+      type = types.str;
+      example = "enp1s0";
+    };
+    routerIpAddress = mkOption {
+      description = "The IP address of the router of your network";
+      type = types.str;
+      example = "192.168.1.1";
+    };
+    networkSubnet = mkOption {
+      description = "The subnet of your network";
+      type = types.str;
+      default = "";
+      example = "192.168.1.0/24";
+    };
+    dnsServers = mkOption {
+      description = "The list of DNS servers that this server will use";
+      type = types.listOf types.str;
+      default = [ "${cfg.ipAddress}" "9.9.9.9" ];
+      example = [ "${cfg.ipAddress}" "9.9.9.9" ];
+    };
+  };
+
+  config = {
+    networking.hostName = "numbus-server";
+    networking.networkmanager.enable = false;
+
+    # Allow rootless containers to bind to port 53 and up
+    boot.kernel.sysctl."net.ipv4.ip_unprivileged_port_start" = 53;
+
+    networking.bridges.br0.interfaces = [ "${cfg.interface}" ];
+    networking.interfaces."${cfg.interface}".useDHCP = false;
+    networking.interfaces.br0.useDHCP = false;
+    networking.nameservers = cfg.dnsServers;
+    networking.interfaces.br0.ipv4.addresses = [{
+      address = "${cfg.ipAddress}";
+      prefixLength = 24;
+    }];
+    networking.defaultGateway = {
+      address = "${cfg.routerIpAddress}";
+      interface = "br0";
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/server/packages/default.nix b/modules/server/packages/default.nix
new file mode 100644
index 0000000..175367d
--- /dev/null
+++ b/modules/server/packages/default.nix
@@ -0,0 +1,11 @@
+{ ... }:
+
+{
+  imports = [
+    # To test
+    ./packages.nix
+    ./podman.nix
+    ./ssh.nix
+    ./terminal.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/server/packages/packages.nix b/modules/server/packages/packages.nix
new file mode 100644
index 0000000..13dc56e
--- /dev/null
+++ b/modules/server/packages/packages.nix
@@ -0,0 +1,25 @@
+{ config, pkgs, ... }:
+
+{
+  nixpkgs.config.allowUnfree = true;
+
+  environment.systemPackages = with pkgs; [
+    git
+    ncdu
+    fastfetch
+    tpm2-tss
+    sops
+    age
+    powertop
+    pciutils
+    hdparm
+    hd-idle
+    hddtemp
+    smartmontools
+    cpufrequtils
+    intel-gpu-tools
+    snapraid
+    mergerfs
+    mergerfs-tools
+  ];
+}
\ No newline at end of file
diff --git a/modules/server/packages/podman.nix b/modules/server/packages/podman.nix
new file mode 100644
index 0000000..ddf80e1
--- /dev/null
+++ b/modules/server/packages/podman.nix
@@ -0,0 +1,16 @@
+{ pkgs, ... }:
+
+{
+  virtualisation.podman.enable = true;
+  virtualisation.podman.defaultNetwork.settings.dns_enabled = true;
+
+  virtualisation.containers.containersConf.settings = {
+    network.default_rootless_network_cmd = "slirp4netns";
+  };
+
+  environment.systemPackages = with pkgs; [
+    podman-compose
+    podman-tui
+    slirp4netns
+  ];
+}
\ No newline at end of file
diff --git a/modules/server/service-helper.nix b/modules/server/service-helper.nix
new file mode 100644
index 0000000..2fbb8e4
--- /dev/null
+++ b/modules/server/service-helper.nix
@@ -0,0 +1,181 @@
+{ lib, config, pkgs }:
+
+with lib;
+
+{
+  mkPodmanService = {
+    name,
+    description,
+    defaultPort ? "0",
+    defaultSubdomain ? name,
+    pod ? "false",
+    reverseProxied ? true,
+    composeText,
+    scheme ? "http",
+    middlewares ? null,
+    dependencies ? [ "sops-install-secrets.service" "traefik.service" "authelia.service" "${config.numbus-server.services.dns}.service" ],
+    extraOptions ? {},
+    extraConfig ? {},
+    configDirEnabled ? true,
+    dataDirEnabled ? true,
+    startDelay ? 180,
+    dirPermissions ? [],
+    secrets ? [],
+    envFile ? null,
+    ...
+  }:
+
+  let
+    cfg = config.numbus-server.services.${name};
+  in
+
+  {
+    options.numbus-server.services.${name} = recursiveUpdate ({
+      enable = mkEnableOption description;
+
+      subdomain = mkOption {
+        type = types.str;
+        default = defaultSubdomain;
+        example = defaultSubdomain;
+        description = "The subdomain that ${name} will use";
+      };
+
+      port = mkOption {
+        type = types.str;
+        default = defaultPort;
+        example = defaultPort;
+        description = "The port that ${name} will use.";
+      };
+
+      reverseProxied = mkOption {
+        type = types.bool;
+        default = reverseProxied;
+        example = reverseProxied;
+        description = "Whether to create a basic Traefik reverse proxy configuration for this service. You might need to set it to false for custom configurations or services that don't need to be reverse proxied.";
+      };
+    } // (optionalAttrs configDirEnabled {
+      configDir = mkOption {
+        type = types.str;
+        default = "/mnt/config/${name}";
+        example = "/mnt/config/${name}";
+        description = "The directory where ${name}'s configuration files will be stored";
+      };
+    }) // (optionalAttrs dataDirEnabled {
+      dataDir = mkOption {
+        type = types.str;
+        default = "/mnt/data/${name}";
+        example = "/mnt/data/${name}";
+        description = "The directory where ${name}'s data will be stored";
+      };
+    })) extraOptions;
+
+    config = mkIf cfg.enable (mkMerge [ 
+      {
+        # Compose file
+        sops.templates."podman/${name}" = {
+          gid = "100";
+          uid = "1000";
+          mode = "0400";
+          content = composeText;
+          path = "/etc/podman/${name}/compose.yaml";
+        };
+
+        # Traefik config
+        sops.templates."traefik/rules/${name}" = mkIf cfg.reverseProxied {
+          gid = "100";
+          uid = "100999";
+          mode = "0400";
+          content = ''
+          http:
+            routers:
+              ${name}:
+                rule: "Host(`${cfg.subdomain}.${config.numbus-server.services.domain}`)"
+                entrypoints:
+                  - "websecure"
+                service: ${name}
+                middlewares:
+          ${concatStringsSep "\n" (map (m: "        - ${m}") middlewares)}
+                tls:
+                  certresolver: "cloudflare"
+                  options: "secureTLS"
+            services:
+              ${name}:
+                loadBalancer:
+                  servers:
+                    - url: "${scheme}://host.containers.internal:${cfg.port}"
+          '';
+          path = "/etc/traefik/rules/${name}.yaml";
+        };
+
+        # Secrets config
+        sops.secrets = genAttrs secrets (secretPath: {
+          sopsFile = "/etc/nixos/secrets/podman/${name}.yaml";
+          gid = "100";
+          uid = "1000";
+          mode = "0400";
+        });
+
+        # SystemD config
+        systemd.services."${name}" = {
+          description = "Podman container : ${name}";
+          after = dependencies;
+          wantedBy = [ "multi-user.target" ];
+          onFailure = [ "service-failure-notify@%n.service" ];
+          startLimitBurst = 5;
+          startLimitIntervalSec = 600;
+          path = [ pkgs.podman pkgs.podman-compose pkgs.slirp4netns pkgs.su pkgs.sudo pkgs.coreutils ];
+          serviceConfig = {
+            Type = "exec";
+            TimeoutStartSec = "1000";
+            ExecStartPre = [
+              "${pkgs.bash}/bin/bash -c 'sleep $((RANDOM % ${toString startDelay}))'"
+              "${pkgs.bash}/bin/bash -c 'export PATH=/run/wrappers/bin:$PATH; exec ${pkgs.sudo}/bin/sudo -u numbus-admin podman-compose -f /etc/podman/${name}/compose.yaml pull'"
+            ];
+            ExecStart = "${pkgs.bash}/bin/bash -c 'export PATH=/run/wrappers/bin:$PATH; exec ${pkgs.sudo}/bin/sudo -u numbus-admin podman-compose --in-pod ${toString pod} -f /etc/podman/${name}/compose.yaml up --remove-orphans'";
+            ExecStop = "${pkgs.bash}/bin/bash -c 'export PATH=/run/wrappers/bin:$PATH; exec ${pkgs.sudo}/bin/sudo -u numbus-admin podman-compose --in-pod ${toString pod} -f /etc/podman/${name}/compose.yaml down'";
+            Restart = "on-failure";
+            RestartSec = "3m";
+          };
+        };
+
+        # Permissions config
+        systemd.services."${name}-permissions" = mkIf (dirPermissions != []) {
+          description = "Podman container : ${name} : check and fix permissions";
+          before = [ "${name}.service" ];
+          wantedBy = [ "multi-user.target" "${name}.service" ];
+          onFailure = [ "service-failure-notify@%n.service" ];
+          startLimitBurst = 5;
+          startLimitIntervalSec = 600;
+          path = [ pkgs.coreutils ];
+          serviceConfig = {
+            Type = "oneshot";
+            RemainAfterExit = true;
+            Restart = "on-failure";
+            RestartSec = "5m";
+          };
+          script = ''
+            ${concatStringsSep "\n" (map (perm: ''
+              set -- ${perm}
+              WANTED_PERMISSIONS=$1
+              FOLDER_PATH=$2
+
+              if [[ ! -e "$FOLDER_PATH" ]]; then
+                mkdir -p "$FOLDER_PATH"
+              elif [[ ! -d "$FOLDER_PATH" ]]; then
+                rm "$FOLDER_PATH"
+                mkdir -p "$FOLDER_PATH"
+              fi
+
+              ACTUAL_PERMISSIONS=$(stat -c '%u:%g' "$FOLDER_PATH")
+              if [[ "$ACTUAL_PERMISSIONS" != "$WANTED_PERMISSIONS" ]]; then
+                chown -R "$WANTED_PERMISSIONS" "$FOLDER_PATH"
+              fi
+            '') dirPermissions)}
+            exit 0
+          '';
+        };
+      }
+      extraConfig
+    ]);
+  };
+}
\ No newline at end of file
diff --git a/modules/server/services/applications/authelia.nix b/modules/server/services/applications/authelia.nix
new file mode 100644
index 0000000..cf0fa96
--- /dev/null
+++ b/modules/server/services/applications/authelia.nix
@@ -0,0 +1,171 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "authelia";
+  # Version tagging
+  autheliaVersion = "v4.39.16";
+  databaseVersion = "18.3";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.authelia;
+  # Derive Base DN from domain (e.g., example.com -> dc=example,dc=com)
+  domainParts = splitString "." config.numbus-server.services.domain;
+  baseDN = concatStringsSep "," (map (p: "dc=${p}") domainParts);
+  # Generate dynamic access control rules based on groups and allowedApps
+  mkGroupRule = groupName: appName:
+    let
+      app = config.numbus-server.service.${appName} or {};
+    in
+    if app ? subdomain && app ? domain then ''
+              - domain: "${app.subdomain}.${app.domain}"
+                policy: two_factor
+                subject: "group:${groupName}"''
+    else "";
+  allGroupRules = concatStringsSep "\n" (filter (s: s != "") (flatten (mapAttrsToList (groupName: groupCfg:
+    map (appName: mkGroupRule groupName appName) (groupCfg.allowedApps or [])
+  ) (config.numbus-server.groups or {}))));
+
+  defaultRedirectionUrl =
+    if config.numbus-server.services.homepage.enable then
+      "https://${config.numbus-server.services.homepage.subdomain}.${config.numbus-server.services.domain}"
+    else if config.numbus-server.services.dashy.enable then
+      "https://${config.numbus-server.services.dashy.subdomain}.${config.numbus-server.services.domain}"
+    else null;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  pod = name;
+  description = "Authelia, your own unified login provider";
+  defaultPort = "9091";
+  dependencies = [
+    "sops-install-secrets.service"
+    "traefik.service"
+    "${config.numbus-server.services.dns}.service"
+  ];
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.configDir}"
+  ];
+  secrets = [
+    "authelia/db_name"
+    "authelia/db_username"
+    "authelia/db_password"
+    "authelia/jwt_secret"
+    "authelia/session_secret"
+    "authelia/storage_secret"
+  ];
+
+  composeText = ''
+    services:
+      authelia-server:
+        image: ghcr.io/authelia/authelia:${autheliaVersion}
+        container_name: authelia-server
+        hostname: authelia-server
+        user: '1000:1000'
+        networks:
+          authelia:
+            ipv4_address: 10.89.251.253
+        ports:
+          - "${cfg.port}:9091/tcp"
+        volumes:
+          - ${cfg.configDir}/server:/config
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+      authelia-database:
+        container_name: authelia-database
+        hostname: authelia-database
+        image: docker.io/library/postgres:${databaseVersion}
+        user: '1000:1000'
+        networks:
+          authelia:
+            ipv4_address: 10.89.251.252
+        environment:
+          POSTGRES_DB: ${config.sops.placeholder."authelia/db_name"}
+          POSTGRES_USER: ${config.sops.placeholder."authelia/db_username"}
+          POSTGRES_PASSWORD: ${config.sops.placeholder."authelia/db_password"}
+          POSTGRES_INITDB_ARGS: '--data-checksums'
+        volumes:
+          - ${cfg.configDir}/database:/var/lib/postgresql/data
+        shm_size: 128mb
+        healthcheck:
+          disable: false
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+    networks:
+      authelia:
+        driver: bridge
+        name: authelia
+        ipam:
+          config:
+            - subnet: "10.89.251.0/24"
+              gateway: "10.89.251.254"
+  '';
+
+  extraConfig = {
+    sops.templates."authelia-config" = {
+      gid = "100";
+      uid = "100999";
+      mode = "0400";
+      content = ''
+        authelia:
+          identity_validation:
+            reset_password:
+              jwt_secret: "${config.sops.placeholder."authelia/jwt_secret"}"
+              jwt_lifespan: "5 minutes"
+              jwt_algorithm: "HS256"
+          storage:
+            encryption_key: "${config.sops.placeholder."authelia/storage_secret"}"
+            postgres:
+              address: "tcp://authelia-database:5432"
+              database: "${config.sops.placeholder."authelia/db_name"}"
+              username: "${config.sops.placeholder."authelia/db_username"}"
+              password: "${config.sops.placeholder."authelia/db_password"}"
+          session:
+            secret: "${config.sops.placeholder."authelia/session_secret"}"
+            cookies:
+              - domain: "${config.numbus-server.services.domain}"
+                authelia_url: "https://${cfg.subdomain}.${config.numbus-server.services.domain}"
+                ${optionalString (defaultRedirectionUrl != null) "default_redirection_url: \"${defaultRedirectionUrl}\""}
+          authentication_backend:
+            ldap:
+              implementation: "lldap"
+              address: "ldap://host.containers.internal:3890"
+              base_dn: "${baseDN}"
+              user: "UID=authelia,OU=people,${baseDN}"
+              password: "${config.sops.placeholder."lldap/"}"
+          notifier:
+            smtp:
+              address: submission://${config.numbus-server.mail.smtpHost}:${config.numbus-server.mail.smtpPort}
+              username: ${config.numbus-server.mail.smtpUsername}
+              password: ${config.sops.placeholder.smtpPassword}
+              sender: ${config.numbus-server.mail.fromAddress}
+              tls:
+                server_name: ${config.numbus-server.mail.smtpHost}
+                minimum_version: TLS1.2
+                skip_verify: false
+          access_control:
+            default_policy: 'deny'
+            rules:
+              - domain: "*.${config.numbus-server.service.domain}"
+                policy: two_factor
+                subject: "group:admin"
+        ${allGroupRules}
+      '';
+      path = "/etc/authelia/authelia.yaml";
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/server/services/applications/crafty.nix b/modules/server/services/applications/crafty.nix
new file mode 100644
index 0000000..9dc53d1
--- /dev/null
+++ b/modules/server/services/applications/crafty.nix
@@ -0,0 +1,74 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "crafty";
+  # Version tagging
+  craftyVersion = "v4.10.1";
+  # Storage optimization
+  spindown = config.numbus-server.hardware.HddSpindown;
+  optimizedDir = if spindown.enable && (spindown.optimize == "compatible" || (isList spindown.optimize && elem name spindown.optimize))
+    then cfg.configDir
+    else cfg.dataDir;
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.crafty;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Crafty controller, one place to manage your minecraft servers";
+  defaultPort = "8443";
+  scheme = "https";
+  dataDirEnabled = optimizedDir == cfg.dataDir;
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.configDir}"
+    "100999:100 ${cfg.configDir}/log"
+    "100999:100 ${cfg.configDir}/config"
+    "100999:100 ${optimizedDir}/import"
+    "100999:100 ${optimizedDir}/backups"
+    "100999:100 ${optimizedDir}/servers"
+  ];
+
+  composeText = ''
+    services:
+      crafty:
+        image: registry.gitlab.com/crafty-controller/crafty-4:${craftyVersion}
+        container_name: crafty
+        user: '1000:1000'
+        networks:
+          crafty:
+            ipv4_address: 10.89.250.253
+        ports:
+          - "${cfg.port}:8443/tcp"
+          - "19132:19132/udp"
+          - "25500-25600:25500-25600"
+        volumes:
+          - ${optimizedDir}/backups:/crafty/backups
+          - ${optimizedDir}/servers:/crafty/servers
+          - ${optimizedDir}/import:/crafty/import
+          - ${cfg.configDir}/logs:/crafty/logs
+          - ${cfg.configDir}/config:/crafty/app/config
+        environment:
+          - TZ=${time.timeZone}
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+    networks:
+      crafty:
+        driver: bridge
+        name: crafty
+        ipam:
+          config:
+            - subnet: "10.89.250.0/24"
+              gateway: "10.89.250.254"
+  '';
+}
\ No newline at end of file
diff --git a/modules/server/services/applications/dashy.nix b/modules/server/services/applications/dashy.nix
new file mode 100644
index 0000000..4fd4491
--- /dev/null
+++ b/modules/server/services/applications/dashy.nix
@@ -0,0 +1,97 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "dashy";
+  # Version tagging
+  dashyVersion = "v3.2.3";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.dashy;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Dashy, the ultimate dashboard for your homelab";
+  defaultPort = "8999";
+  configDirEnabled = false;
+  dataDirEnabled = false;
+  middlewares = [
+    "secureHeaders"
+  ];
+
+  composeText = ''
+    services:
+      dashy:
+        image: lissy93/dashy:${dashyVersion}
+        container_name: dashy
+        hostname: dashy
+        user: '1000:1000'
+        networks:
+          dashy:
+            ipv4_address: 10.89.235.253
+        ports:
+          - ${cfg.port}:8080
+        volumes:
+          - ${config.sops."dashy/config".path}:/app/user-data/conf.yml
+        environment:
+          - UID=1000
+          - GID=1000
+          - NODE_ENV=production
+        healthcheck:
+          test: ['CMD', 'node', '/app/services/healthcheck']
+          interval: 1m30s
+          timeout: 10s
+          retries: 3
+          start_period: 40s
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+        networks:
+          dashy:
+            driver: bridge
+            name: dashy
+            ipam:
+              config:
+                - subnet: "10.89.235.0/24"
+                  gateway: "10.89.235.254"
+  '';
+
+  extraConfig = {
+    sops.templates."dashy/config" = {
+      gid = "100";
+      uid = "100999";
+      mode = "0440" ;
+      content = ''
+        pageInfo:
+          title: My Homelab
+        sections:
+        - name: Example Section
+          icon: far fa-rocket
+          items:
+          - title: GitHub
+            description: Dashy source code and docs
+            icon: fab fa-github
+            url: https://github.com/Lissy93/dashy
+          - title: Issues
+            description: View open issues, or raise a new one
+            icon: fas fa-bug
+            url: https://github.com/Lissy93/dashy/issues
+        - name: Local Services
+          items:
+          - title: Firewall
+            icon: favicon
+            url: http://192.168.1.1/
+          - title: Game Server
+            icon: https://i.ibb.co/710B3Yc/space-invader-x256.png
+            url: http://192.168.130.1/
+      '';
+      path = "/etc/dashy/dashy.yaml";
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/server/services/applications/default.nix b/modules/server/services/applications/default.nix
new file mode 100644
index 0000000..13a4f6b
--- /dev/null
+++ b/modules/server/services/applications/default.nix
@@ -0,0 +1,29 @@
+{ ... }:
+
+{
+  imports = [
+    # Good
+    ./gitea.nix
+    ./immich.nix
+    ./nextcloud.nix
+    ./passbolt.nix
+    ./traefik.nix
+    # Testing needed
+    ./authelia.nix
+    ./crafty.nix
+    ./dashy.nix
+    ./frigate.nix
+    ./home-assistant.nix
+    ./homepage.nix
+    ./it-tools.nix
+    ./jellyfin.nix
+    ./lldap.nix
+    ./n8n.nix
+    ./netbird.nix
+    ./netbootxyz.nix
+    ./ntfy.nix
+    ./odoo.nix
+    ./uptime-kuma.nix
+    ./vscodium.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/server/services/applications/frigate.nix b/modules/server/services/applications/frigate.nix
new file mode 100644
index 0000000..558efbf
--- /dev/null
+++ b/modules/server/services/applications/frigate.nix
@@ -0,0 +1,83 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "frigate";
+  # Version tagging
+  frigateVersion = "0.16.4";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.frigate;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  pod = "home-assistant";
+  description = "Frigate, your fully-local NVR (Network Video Recorder)";
+  defaultPort = "8971";
+  scheme = "https";
+  dependencies = [
+    "sops-install-secrets.service"
+    "traefik.service"
+    "authelia.service"
+    "home-assistant.service"
+    "${config.numbus-server.services.dns}.service"
+  ];
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "1000:100 ${cfg.configDir}"
+    "1000:100 ${cfg.dataDir}"
+  ];
+
+  composeText = ''
+    services:
+      frigate:
+        image: ghcr.io/blakeblackshear/frigate:${frigateVersion}
+        container_name: frigate
+        hostname: frigate
+        shm_size: "256mb"
+        networks:
+          home-assistant:
+            ipv4_address: 10.89.230.253
+        ports:
+          - "${cfg.port}:8971/tcp"
+        volumes:
+          - ${cfg.configDir}:/config
+          - ${cfg.dataDir}:/media/frigate
+          - /etc/localtime:/etc/localtime:ro
+          - type: tmpfs
+            target: /tmp/cache
+            tmpfs:
+              size: 1000000000
+        environment:
+          - FRIGATE_MQTT_USER=${config.sops.placeholder."home-assistant/mqtt_username"}
+          - FRIGATE_MQTT_PASSWORD=${config.sops.placeholder."home-assistant/mqtt_password"}
+    ${lib.optionalString (cfg.devices != []) ''
+          devices:
+    ${lib.concatStringsSep "\n" (map (d: "            - \"${d}\"") cfg.devices)}
+    ''}
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        stop_grace_period: 30s
+        restart: unless-stopped
+
+    networks:
+      home-assistant:
+        external: true
+  '';
+
+  extraOptions = {
+    devices = mkOption {
+      type = types.listOf types.str;
+      default = [];
+      example = [ "/dev/dri:/dev/dri" "/dev/bus/usb:/dev/bus/usb" "/dev/apex_0:/dev/apex_0" ];
+      description = "List of devices to map into the container. /dev/dri is used for graphics acceleration, /dev/bus/usb for USB Coral TPUs, and /dev/apex_0 for PCI coral TPUs";
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/server/services/applications/gitea.nix b/modules/server/services/applications/gitea.nix
new file mode 100644
index 0000000..8beaf8b
--- /dev/null
+++ b/modules/server/services/applications/gitea.nix
@@ -0,0 +1,103 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "gitea";
+  # Version tagging
+  giteaVersion = "1.25.4-rootless";
+  databaseVersion = "18-alpine";
+  # Storage optimization
+  spindown = config.numbus-server.hardware.HddSpindown;
+  optimizedDir = if spindown.enable && (spindown.optimize == "compatible" || (isList spindown.optimize && elem name spindown.optimize))
+    then cfg.configDir
+    else cfg.dataDir;
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.gitea;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  pod = "false";
+  description = "Gitea, your own self-hosted git platform";
+  defaultPort = "3000";
+  dataDirEnabled = optimizedDir == cfg.dataDir;
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.configDir}"
+    "100999:100 ${optimizedDir}/data"
+    "100999:100 ${cfg.configDir}/config"
+    "100999:100 ${cfg.configDir}/database"
+  ];
+  secrets = [
+    "gitea/db_name"
+    "gitea/db_username"
+    "gitea/db_password"
+  ];
+
+  composeText = ''
+    services:
+      gitea-database:
+        image: docker.io/library/postgres:${databaseVersion}
+        container_name: gitea-database
+        hostname: gitea-database
+        user: '1000:1000'
+        networks:
+          gitea:
+            ipv4_address: 10.89.240.253
+        volumes:
+          - ${cfg.configDir}/database:/var/lib/postgresql
+        environment:
+          - POSTGRES_DB=${config.sops.placeholder."gitea/db_name"}
+          - POSTGRES_USER=${config.sops.placeholder."gitea/db_username"}
+          - POSTGRES_PASSWORD=${config.sops.placeholder."gitea/db_password"}
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+      gitea-server:
+        image: docker.gitea.com/gitea:${giteaVersion}
+        container_name: gitea-server
+        hostname: gitea-server
+        user: '1000:1000'
+        networks:
+          gitea:
+            ipv4_address: 10.89.240.252
+        ports:
+          - "${cfg.port}:3000/tcp"
+        volumes:
+          - ${optimizedDir}/data:/var/lib/gitea
+          - ${cfg.configDir}/config:/etc/gitea
+          - /etc/localtime:/etc/localtime:ro
+        environment:
+          - GITEA__database__DB_TYPE=postgres
+          - GITEA__database__HOST=gitea-database:5432
+          - GITEA__database__NAME=${config.sops.placeholder."gitea/db_name"}
+          - GITEA__database__USER=${config.sops.placeholder."gitea/db_username"}
+          - GITEA__database__PASSWD=${config.sops.placeholder."gitea/db_password"}
+          - GITEA__server__SSH_PORT=2424
+          - GITEA__server__ROOT_URL=https://${cfg.subdomain}.${config.numbus-server.services.domain}
+        depends_on:
+          - gitea-database
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+    networks:
+      gitea:
+        driver: bridge
+        name: gitea
+        ipam:
+          config:
+            - subnet: "10.89.240.0/24"
+              gateway: "10.89.240.254"
+  '';
+}
\ No newline at end of file
diff --git a/modules/server/services/applications/home-assistant.nix b/modules/server/services/applications/home-assistant.nix
new file mode 100644
index 0000000..0a9dca9
--- /dev/null
+++ b/modules/server/services/applications/home-assistant.nix
@@ -0,0 +1,177 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "home-assistant";
+  # Version tagging
+  homeAssistantVersion = "2026.2.3";
+  mqttVersion = "2.1-alpine";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.home-assistant;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Home Assistant, libre house control and much more";
+  defaultPort = "8123";
+  dataDirEnabled = false;
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "1000:100 ${cfg.configDir}"
+    "1000:100 ${cfg.configDir}/config"
+    "100999:100 ${cfg.configDir}/mqtt"
+  ];
+  secrets = [
+    "home-assistant/mqtt_user"
+    "home-assistant/mqtt_password"
+  ];
+
+# Compose file good
+  composeText = ''
+    services:
+      home-assistant:
+        image: ghcr.io/home-assistant/home-assistant:${homeAssistantVersion}
+        container_name: home-assistant
+        hostname: home-assistant
+        networks:
+          home-assistant:
+            ipv4_address: 10.89.230.252
+        ports:
+          - "${cfg.port}:8123/tcp"
+        volumes:
+          - ${cfg.configDir}/config:/config
+          - /etc/localtime:/etc/localtime:ro
+          - /run/dbus:/run/dbus:ro
+    ${lib.optionalString (cfg.devices != []) ''
+          devices:
+    ${lib.concatStringsSep "\n" (map (d: "            - \"${d}\"") cfg.devices)}
+    ''}
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+      home-assistant-mqtt:
+        image: docker.io/library/eclipse-mosquitto:${mqttVersion}
+        container_name: home-assistant-mqtt
+        hostname: home-assistant-mqtt
+        user: '1000:1000'
+        networks:
+          home-assistant:
+            ipv4_address: 10.89.230.252
+        volumes:
+          - ${cfg.configDir}/mqtt:/mosquitto
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+    networks:
+      home-assistant:
+        driver: bridge
+        name: home-assistant
+        ipam:
+          config:
+            - subnet: "10.89.230.0/24"
+              gateway: "10.89.230.254"
+  '';
+
+  extraOptions = {
+    devices = mkOption {
+      type = types.listOf types.str;
+      default = [];
+      example = [ "/dev/serial/by-id/Sonoff_Zigbee_3.0-id-port0:/dev/ttyUSB0" ];
+      description = "List of devices to map into the container. /dev/ttyUSB0 is used for Zigbee dongles";
+    };
+  };
+
+  extraConfig = {
+    systemd.services."${name}-quirk" = {
+      description = "Podman container quirk : ${name}";
+      after = [ "${name}.service" ];
+      onFailure = [ "service-failure-notify@%n.service" ];
+      startLimitBurst = 5;
+      startLimitIntervalSec = 600;
+      path = [ pkgs.coreutils pkgs.systemd ];
+      serviceConfig = {
+        Type = "oneshot";
+        RemainAfterExit = true;
+      };
+      script = ''
+        mkdir -p /var/lib/numbus-server/${name}
+        if [[ -e ${cfg.configDir}/config/configuration.yaml ]]; then
+          if grep -qF "10.89.230.1/32" ${cfg.configDir}/config/configuration.yaml; then
+            exit 0
+          elif grep -qF "use_x_forwarded_for" ${cfg.configDir}/config/configuration.yaml && ! grep -qF "10.89.230.1/32" ${cfg.configDir}/config/configuration.yaml; then
+            tmp=$(mktemp)
+            head -n -6 ${cfg.configDir}/config/configuration.yaml > "$tmp"
+            mv "$tmp" ${cfg.configDir}/config/configuration.yaml
+          fi
+        fi
+
+        until [[ -e ${cfg.configDir}/config/configuration.yaml ]]; do
+          sleep 15
+        done
+        cat << 'EOF' >> ${cfg.configDir}/config/configuration.yaml
+
+        http:
+          use_x_forwarded_for: true
+          trusted_proxies: 10.89.230.1
+
+        zha:
+        EOF
+
+        systemctl restart ${name}.service
+      '';
+    };
+  };
+
+    systemd.services."mqtt-quirk" = {
+      description = "Podman container quirk : Home-assistant MQTT";
+      after = [ "sops-install-secrets.service" ];
+      before = [ "${name}.service" ];
+      onFailure = [ "service-failure-notify@%n.service" ];
+      startLimitBurst = 5;
+      startLimitIntervalSec = 600;
+      path = [ pkgs.coreutils pkgs.mosquitto ];
+      serviceConfig = {
+        Type = "oneshot";
+        RemainAfterExit = true;
+      };
+      script = ''
+        if [[ -e ${cfg.configDir}/mqtt/mosquitto.conf && ${cfg.configDir}/mqtt/password.txt ]]; then
+          if grep -qF "listener 1883" ${cfg.configDir}/mqtt/mosquitto.conf; then
+            exit 0
+          else
+            rm ${cfg.configDir}/mqtt/mosquitto.conf
+            rm ${cfg.configDir}/mqtt/password.txt
+            touch ${cfg.configDir}/mqtt/mosquitto.conf
+            touch ${cfg.configDir}/mqtt/password.txt
+          fi
+        fi
+
+        cat << EOF >> ${cfg.configDir}/mqtt/mosquitto.conf
+        persistence true
+        persistence_location /mosquitto/data/
+        log_dest file /mosquitto/log/mosquitto.log
+        listener 1883
+        ## Authentication ##
+        allow_anonymous false
+        password_file /mosquitto/password.txt
+        EOF
+
+        HOME_ASSISTANT_MQTT_USER=$(cat /run/secrets/home-assistant/mqtt_user)
+        HOME_ASSISTANT_MQTT_PASSWORD=$(cat /run/secrets/home-assistant/mqtt_password)
+
+        mosquitto_passwd -b ${cfg.configDir}/mqtt/password.txt "$HOME_ASSISTANT_MQTT_USER" "$HOME_ASSISTANT_MQTT_PASSWORD"
+        chmod 0400 ${cfg.configDir}/mqtt/password.txt
+      '';
+    };
+}
diff --git a/modules/server/services/applications/homepage.nix b/modules/server/services/applications/homepage.nix
new file mode 100644
index 0000000..689ba16
--- /dev/null
+++ b/modules/server/services/applications/homepage.nix
@@ -0,0 +1,63 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "homepage";
+  # Version tagging
+  homepageVersion = "v1.10.1";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.homepage;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Homepage, a modern and highly customizable application dashboard";
+  defaultPort = "3003";
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.configDir}"
+    "100999:100 ${cfg.configDir}/config"
+    "100999:100 ${cfg.configDir}/images"
+    "100999:100 ${cfg.configDir}/icons"
+  ];
+
+  composeText = ''
+    services:
+      homepage:
+        image: ghcr.io/gethomepage/homepage:${homepageVersion}
+        container_name: homepage
+        hostname: homepage
+        user: '1000:1000'
+        networks:
+          homepage:
+        ports:
+          - "${cfg.port}:3000/tcp"
+        volumes:
+          - ${cfg.configDir}/config:/app/config
+          - ${cfg.configDir}/images:/app/public/images
+          - ${cfg.configDir}/icons:/app/public/icons
+        environment:
+          PUID: 1000
+          PGID: 1000
+          HOMEPAGE_ALLOWED_HOSTS: ${cfg.subdomain}.${config.numbus-server.services.domain}
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+        networks:
+          homepage:
+            driver: bridge
+            name: homepage
+            ipam:
+              config:
+                - subnet: "10.89.220.0/24"
+                  gateway: "10.89.220.254"
+  '';
+}
\ No newline at end of file
diff --git a/modules/server/services/applications/immich.nix b/modules/server/services/applications/immich.nix
new file mode 100644
index 0000000..6c875b4
--- /dev/null
+++ b/modules/server/services/applications/immich.nix
@@ -0,0 +1,190 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container configuration
+  name = "immich";
+  # Version tagging
+  immichVersion = "v2.5.6";
+  redisVersion = "9@sha256:546304417feac0874c3dd576e0952c6bb8f06bb4093ea0c9ca303c73cf458f63";
+  databaseVersion = "14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357191b76a916ae5eb93464d65c07511da41e3bf7a8416db519b40b1c23";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.immich;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Immich, Google Photos but better";
+  defaultPort = "2283";
+  middlewares = [
+    "immichSecureHeaders"
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.configDir}"
+    "100999:100 ${cfg.configDir}/redis"
+    "100999:100 ${cfg.configDir}/model-cache"
+    "100999:100 ${cfg.configDir}/machine-learning-cache"
+    "100999:100 ${cfg.configDir}/machine-learning-config"
+    "100999:100 ${cfg.configDir}/database"
+    "100999:100 ${cfg.dataDir}"
+  ];
+  secrets = [
+    "immich/redis_hostname"
+    "immich/db_hostname"
+    "immich/db_name"
+    "immich/db_username"
+    "immich/db_password"
+  ];
+
+# Compose file good
+  composeText = ''
+    services:
+      immich-server:
+        container_name: immich-server
+        hostname: immich-server
+        image: ghcr.io/immich-app/immich-server:${immichVersion}
+        user: '1000:1000'
+        networks:
+          immich:
+            ipv4_address: 10.89.210.253
+        ports:
+          - "${cfg.port}:2283/tcp"
+        volumes:
+          - $UPLOAD_LOCATION:/data
+          - /etc/localtime:/etc/localtime:ro
+        environment:
+          TZ: $TZ
+          REDIS_HOSTNAME: ${config.sops.placeholder."immich/redis_hostname"}
+          DB_HOSTNAME: ${config.sops.placeholder."immich/db_hostname"}
+          DB_DATABASE_NAME: ${config.sops.placeholder."immich/db_name"}
+          DB_USERNAME: ${config.sops.placeholder."immich/db_username"}
+          DB_PASSWORD: ${config.sops.placeholder."immich/db_password"}
+          IMMICH_TRUSTED_PROXIES: 10.89.210.1
+        depends_on:
+          - immich-redis
+          - immich-database
+        healthcheck:
+          disable: false
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+      immich-machine-learning:
+        container_name: immich-machine-learning
+        hostname: immich-machine-learning
+        image: ghcr.io/immich-app/immich-machine-learning:${immichVersion}
+        user: '1000:1000'
+        networks:
+          immich:
+            ipv4_address: 10.89.210.252
+        volumes:
+          - ${cfg.configDir}/model-cache:/cache
+          - ${cfg.configDir}/machine-learning-config:/usr/src/.config
+          - ${cfg.configDir}/machine-learning-cache:/usr/src/.cache/
+        healthcheck:
+          disable: false
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+      immich-redis:
+        container_name: immich-redis
+        hostname: immich-redis
+        image: docker.io/valkey/valkey:${redisVersion}
+        user: '1000:1000'
+        networks:
+          immich:
+            ipv4_address: 10.89.210.251
+        volumes:
+          - ${cfg.configDir}/redis:/data
+        healthcheck:
+          test: redis-cli ping || exit 1
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+      immich-database:
+        container_name: immich-database
+        hostname: immich-database
+        image: ghcr.io/immich-app/postgres:${databaseVersion}
+        user: '1000:1000'
+        networks:
+          immich:
+            ipv4_address: 10.89.210.250
+        environment:
+          POSTGRES_DB: ${config.sops.placeholder."immich/db_name"}
+          POSTGRES_USER: ${config.sops.placeholder."immich/db_username"}
+          POSTGRES_PASSWORD: ${config.sops.placeholder."immich/db_password"}
+          POSTGRES_INITDB_ARGS: '--data-checksums'
+        volumes:
+          - $DB_DATA_LOCATION:/var/lib/postgresql/data
+        shm_size: 128mb
+        healthcheck:
+          disable: false
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+    networks:
+      immich:
+        driver: bridge
+        name: immich
+        ipam:
+          config:
+            - subnet: "10.89.210.0/24"
+              gateway: "10.89.210.254"
+  '';
+
+  extraConfig = {
+    sops.templates."immich/env" = {
+      gid = "100";
+      uid = "1000";
+      mode = "0400";
+      content = ''
+        DB_DATA_LOCATION=${cfg.configDir}/database
+        UPLOAD_LOCATION=${cfg.dataDir}
+      '';
+      path = "/etc/podman/immich/.env";
+    };
+
+    sops.templates."traefik/rules/immich-secureHeaders" = { 
+      gid = "100";
+      uid = "100999";
+      mode = "0400";
+      content = ''
+        http:
+          middlewares:
+            immichSecureHeaders:
+              headers:
+                FrameDeny: true
+                AccessControlAllowMethods: 'GET,POST,PUT,DELETE,OPTIONS'
+                AccessControlAllowOriginList:
+                - https://${cfg.subdomain}.${config.numbus-server.services.domain}
+                - origin-list-or-null
+                AccessControlMaxAge: 100
+                AddVaryHeader: true
+                BrowserXssFilter: true
+                ContentTypeNosniff: true
+                ForceSTSHeader: true
+                STSIncludeSubdomains: true
+                STSPreload: true
+                ContentSecurityPolicy: "default-src 'self'; base-uri 'self'; img-src 'self' https://static.immich.cloud https://tiles.immich.cloud data: blob:; connect-src 'self' https://${cfg.subdomain}.${config.numbus-server.services.domain} wss://${cfg.subdomain}.${config.numbus-server.services.domain} https://static.immich.cloud https://tiles.immich.cloud; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob: https://${cfg.subdomain}.${config.numbus-server.services.domain}; frame-ancestors 'self';"
+                CustomFrameOptionsValue: SAMEORIGIN
+                ReferrerPolicy: same-origin
+                PermissionsPolicy: vibrate 'self'
+                STSSeconds: 315360000
+      '';
+      path = "/etc/traefik/rules/immich-secureHeaders.yaml";
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/server/services/applications/it-tools.nix b/modules/server/services/applications/it-tools.nix
new file mode 100644
index 0000000..2d35d9a
--- /dev/null
+++ b/modules/server/services/applications/it-tools.nix
@@ -0,0 +1,54 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "it-tools";
+  # Version tagging
+  it-toolsVersion = "2024.10.22-7ca5933";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.it-tools;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "IT-tools, useful tools when doing IT";
+  pod = "false";
+  defaultPort = "8880";
+  configDirEnabled = false;
+  dataDirEnabled = false;
+  middlewares = [
+    "secureHeaders"
+  ];
+
+# Compose file good
+  composeText = ''
+    services:
+      it-tools:
+        image: docker.io/corentinth/it-tools:${it-toolsVersion}
+        container_name: it-tools
+        hostname: it-tools
+        user: '1000:1000'
+        networks:
+          it-tools:
+            ipv4_address: 10.89.200.253
+        ports:
+          - "${cfg.port}:80/tcp"
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+        networks:
+          it-tools:
+            driver: bridge
+            name: it-tools
+            ipam:
+              config:
+                - subnet: "10.89.200.0/24"
+                  gateway: "10.89.200.254"
+  '';
+}
\ No newline at end of file
diff --git a/modules/server/services/applications/jellyfin.nix b/modules/server/services/applications/jellyfin.nix
new file mode 100644
index 0000000..991bce2
--- /dev/null
+++ b/modules/server/services/applications/jellyfin.nix
@@ -0,0 +1,69 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "jellyfin";
+  # Version tagging
+  jellyfinVersion = "10.11.6";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.jellyfin;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Jellyfin : A self-hosted media server to stream your movies and music";
+  defaultPort = "8096";
+  scheme = "https"; #TODO CHECK
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.dataDir}"
+    "100999:100 ${cfg.configDir}"
+    "100999:100 ${cfg.dataDir}/media"
+    "100999:100 ${cfg.dataDir}/fonts"
+    "100999:100 ${cfg.configDir}/cache"
+    "100999:100 ${cfg.configDir}/config"
+  ];
+
+  composeText = ''
+    services:
+      jellyfin:
+        image: docker.io/jellyfin/jellyfin:${jellyfinVersion}
+        container_name: jellyfin
+        hostname: jellyfin
+        user: '1000:1000'
+        networks:
+          jellyfin:
+            ipv4_address: 10.89.190.253
+        ports:
+          - "${cfg.port}:8096/tcp"
+        volumes:
+          - ${cfg.configDir}/config:/config
+          - ${cfg.configDir}/cache:/cache
+          - type: bind
+            source: ${cfg.dataDir}/media
+            target: /media
+          - type: bind
+            source: ${cfg.dataDir}/fonts
+            target: /usr/local/share/fonts/custom
+            read_only: true
+        cap_drop:
+          - NET_RAW
+        security_opt:
+          - no-new-privileges:true
+        restart: unless-stopped
+
+    networks:
+      jellyfin:
+        driver: bridge
+        name: jellyfin
+        ipam:
+          config:
+            - subnet: "10.89.190.0/24"
+              gateway: "10.89.190.254"
+  '';
+}
\ No newline at end of file
diff --git a/modules/server/services/applications/lldap.nix b/modules/server/services/applications/lldap.nix
new file mode 100644
index 0000000..7e423ed
--- /dev/null
+++ b/modules/server/services/applications/lldap.nix
@@ -0,0 +1,84 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "lldap";
+  # Version tagging
+  lldapVersion = "v0.6.2";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.lldap;
+  # Derive Base DN from domain (e.g., example.com -> dc=example,dc=com)
+  domainParts = splitString "." config.numbus-server.services.domain;
+  baseDN = concatStringsSep "," (map (p: "dc=${p}") domainParts);
+in
+
+helper.mkPodmanService {
+  inherit name;
+  pod = "false";
+  description = "LLDAP, unified user management";
+  defaultPort = "17170";
+  dependencies = [
+    "sops-install-secrets.service"
+    "network-online.target"
+  ];
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.configDir}"
+  ];
+  secrets = [
+    "lldap/jwt_secret"
+    "lldap/key_seed"
+    "lldap/admin_password"
+  ];
+
+  composeText = ''
+    services:
+      lldap:
+        image: lldap/lldap:${lldapVersion}
+        container_name: lldap
+        hostname: lldap
+        user: '1000:1000'
+        networks:
+          lldap:
+            ipv4_address: 10.89.185.253
+        ports:
+          - "3890:3890"
+          - "${cfg.port}:17170"
+        volumes:
+          - ${cfg.configDir}:/data
+        environment:
+          - UID=1000
+          - GID=1000
+          - TZ=${config.time.timeZone}
+          - LLDAP_LDAP_BASE_DN=${baseDN}
+          - LLDAP_JWT_SECRET="${config.sops.placeholder."lldap/jwt_secret"}"
+          - LLDAP_KEY_SEED="${config.sops.placeholder."lldap/key_seed"}"
+          - LLDAP_LDAP_USER_PASS="${config.sops.placeholder."lldap/admin_password"}"
+          - LLDAP_SMTP_OPTIONS__ENABLE_PASSWORD_RESET=true
+          - LLDAP_SMTP_OPTIONS__SERVER=${config.numbus-server.mail.smtpServer}
+          - LLDAP_SMTP_OPTIONS__PORT=${config.numbus-server.mail.smtpPort}
+          - LLDAP_SMTP_OPTIONS__SMTP_ENCRYPTION=${config.numbus-server.mail.smtpEncryption}
+          - LLDAP_SMTP_OPTIONS__USER=${config.numbus-server.mail.smtpUsername}
+          - LLDAP_SMTP_OPTIONS__PASSWORD=${config.sops.placeholder."mail/smtpPassword"}
+          - LLDAP_SMTP_OPTIONS__FROM=no-reply <${config.numbus-server.mail.fromAddress}>
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+    networks:
+      lldap:
+        driver: bridge
+        name: lldap
+        ipam:
+          config:
+            - subnet: "10.89.185.0/24"
+              gateway: "10.89.185.254"
+  '';
+}
\ No newline at end of file
diff --git a/modules/server/services/applications/n8n.nix b/modules/server/services/applications/n8n.nix
new file mode 100644
index 0000000..bbfffc6
--- /dev/null
+++ b/modules/server/services/applications/n8n.nix
@@ -0,0 +1,72 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "n8n";
+  # Version tagging
+  n8nVersion = "2.11.4";
+  # Storage optimization
+  spindown = config.numbus-server.hardware.HddSpindown;
+  optimizedDir = if spindown.enable && (spindown.optimize == "compatible" || (isList spindown.optimize && elem name spindown.optimize))
+    then cfg.configDir
+    else cfg.dataDir;
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.n8n;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  pod = "false";
+  description = "n8n, the ultimate automation platform";
+  defaultPort = "5678";
+  scheme = "https";
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "100999:100 ${optimizedDir}"
+  ];
+
+  composeText = ''
+    services:
+      n8n:
+        image: docker.n8n.io/n8nio/n8n:${n8nVersion}
+        container_name: n8n
+        hostname: n8n
+        user: '1000:1000'
+        networks:
+          n8n:
+            ipv4_address: 10.89.180.253
+        ports:
+          - "${cfg.port}:5678"
+        volumes:
+          - ${optimizedDir}:/home/node/.n8n
+        environment:
+          - N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=true
+          - N8N_HOST=${cfg.subdomain}.${config.numbus-server.services.domain}
+          - N8N_PORT=5678
+          - N8N_PROTOCOL=https
+          - N8N_RUNNERS_ENABLED=true
+          - NODE_ENV=production
+          - WEBHOOK_URL=https://${cfg.subdomain}.${config.numbus-server.services.domain}/
+          - GENERIC_TIMEZONE=${time.timeZone}
+          - TZ=${time.timeZone}
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+    networks:
+      n8n:
+        driver: bridge
+        name: n8n
+        ipam:
+          config:
+            - subnet: "10.89.180.0/24"
+              gateway: "10.89.180.254"
+  '';
+}
\ No newline at end of file
diff --git a/modules/server/services/applications/netbird.nix b/modules/server/services/applications/netbird.nix
new file mode 100644
index 0000000..2018076
--- /dev/null
+++ b/modules/server/services/applications/netbird.nix
@@ -0,0 +1,203 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "netbird";
+  # Version tagging
+  netbirdDashboardVersion = "";
+  netbirdServerVersion = "";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.netbird;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  pod = "false";
+  description = "NetBird, an all-in-one ZTNA remote access platform";
+  defaultPort = "8888";
+  reverseProxied = false;
+  dependencies = [
+    "sops-install-secrets.service"
+    "traefik.service"
+    "${config.numbus-server.services.dns}.service"
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.configDir}"
+  ];
+  secrets = [
+    "netbird/auth_key"
+    "netbird/encryption_key"
+  ];
+
+  composeText = ''
+    services:
+      netbird-dashboard:
+        image: netbirdio/dashboard:${netbirdDashboardVersion}
+        container_name: netbird-dashboard
+        hostname: netbird-dashboard
+        user: '1000:1000'
+        networks:
+          netbird:
+            ipv4_address: 10.89.175.253
+        ports:
+          - "${defaultPort}:8080/tcp"
+        environment:
+          # Endpoints
+          - NETBIRD_MGMT_API_ENDPOINT=https://${cfg.subdomain}.${config.numbus-server.services.domain}
+          - NETBIRD_MGMT_GRPC_API_ENDPOINT=https://${cfg.subdomain}.${config.numbus-server.services.domain}
+          # OIDC - using embedded IdP
+          - AUTH_AUDIENCE=netbird-dashboard
+          - AUTH_CLIENT_ID=netbird-dashboard
+          - AUTH_CLIENT_SECRET=
+          - AUTH_AUTHORITY=https://${cfg.subdomain}.${config.numbus-server.services.domain}/oauth2
+          - USE_AUTH0=false
+          - AUTH_SUPPORTED_SCOPES=openid profile email groups
+          - AUTH_REDIRECT_URI=/nb-auth
+          - AUTH_SILENT_REDIRECT_URI=/nb-silent-auth
+          # SSL
+          - NGINX_SSL_PORT=443
+          - LETSENCRYPT_DOMAIN=none
+        logging:
+          driver: "json-file"
+          options:
+            max-size: "500m"
+            max-file: "2"
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+      netbird-server:
+        image: netbirdio/netbird-server:${netbirdServerVersion}
+        container_name: netbird-server
+        hostname: netbird-server
+        user: '1000:1000'
+        networks:
+          netbird:
+            ipv4_address: 10.89.175.252
+        ports:
+          - "8889:8081/tcp"
+          - "3478:3478/udp"
+        volumes:
+          - ${config.sops.templates."netbird-config".path}:/etc/netbird/config.yaml
+          - ${cfg.configDir}:/var/lib/netbird
+        command: ["--config", "/etc/netbird/config.yaml"]
+        logging:
+          driver: "json-file"
+          options:
+            max-size: "500m"
+            max-file: "2"
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+    networks:
+      netbird:
+        driver: bridge
+        name: netbird
+        ipam:
+          config:
+            - subnet: "10.89.175.0/24"
+              gateway: "10.89.175.254"
+  '';
+
+  extraConfig = {
+    sops.templates."netbird-config" = {
+      gid = "100";
+      uid = "100999";
+      mode = "0400";
+      content = ''
+        server:
+          listenAddress: ":80"
+          exposedAddress: "https://${cfg.subdomain}.${config.numbus-server.services.domain}:443"
+          stunPorts:
+            - 3478
+          metricsPort: 9090
+          healthcheckAddress: ":9000"
+          logLevel: "info"
+          logFile: "console"
+          authSecret: "${config.sops.placeholder."netbird/auth_key"}"
+          dataDir: "/var/lib/netbird"
+
+          auth:
+            issuer: "https://${cfg.subdomain}.${config.numbus-server.services.domain}/oauth2"
+            signKeyRefreshEnabled: true
+            dashboardRedirectURIs:
+              - "https://${cfg.subdomain}.${config.numbus-server.services.domain}/nb-auth"
+              - "https://${cfg.subdomain}.${config.numbus-server.services.domain}/nb-silent-auth"
+            cliRedirectURIs:
+              - "http://localhost:53000/"
+
+          reverseProxy:
+            trustedHTTPProxies:
+              - "10.89.175.1/32"
+
+          store:
+            engine: "sqlite"
+            encryptionKey: "${config.sops.placeholder."netbird/encryption_key"}"
+      '';
+      path = "/etc/netbird/netbird.yaml";
+    };
+
+    sops.templates."traefik/rules/${name}" = {
+      gid = "100";
+      uid = "1000";
+      mode = "0400";
+      content = ''
+        http:
+          routers:
+            ${name}-dashboard:
+              rule: "Host(`${cfg.subdomain}.${config.numbus-server.services.domain}`)"
+              entrypoints:
+                - "websecure"
+              middlewares:
+                - secureHeaders
+              tls:
+                certresolver: "cloudflare"
+                options: "secureTLS"
+              priority: 1
+            ${name}-grpc:
+              rule: "Host(`${cfg.subdomain}.${config.numbus-server.services.domain}`) && (PathPrefix(`/signalexchange.SignalExchange/`) || PathPrefix(`/management.ManagementService/`))"
+              entrypoints:
+                - "websecure"
+              service: ${name}-server-h2c
+              middlewares:
+                - secureHeaders
+              tls:
+                certresolver: "cloudflare"
+                options: "secureTLS"
+            ${name}-backend:
+              rule: "Host(`${cfg.subdomain}.${config.numbus-server.services.domain}`) && (PathPrefix(`/relay`) || PathPrefix(`/ws-proxy/`) || PathPrefix(`/api`) || PathPrefix(`/oauth2`))"
+              entrypoints:
+                - "websecure"
+              service: ${name}-server
+              middlewares:
+                - secureHeaders
+              tls:
+                certresolver: "cloudflare"
+                options: "secureTLS"
+
+          services:${cfg.port}
+            ${name}-dashboard:
+              loadBalancer:
+                servers:
+                  - url: "http://host.containers.internal:${cfg.port}"
+            ${name}-server:
+              loadBalancer:
+                servers:
+                  - url: "http://host.containers.internal:8889"
+            ${name}-server-h2c:
+              loadBalancer:
+                servers:
+                  - url: "h2c://host.containers.internal:3478"
+      '';
+      path = "/etc/traefik/rules/${name}";
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/server/services/applications/netbootxyz.nix b/modules/server/services/applications/netbootxyz.nix
new file mode 100644
index 0000000..bda78ae
--- /dev/null
+++ b/modules/server/services/applications/netbootxyz.nix
@@ -0,0 +1,75 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "netbootxyz";
+  # Version tagging
+  netbootxyzVersion = "3.0.0";
+  # Storage optimization
+  spindown = config.numbus-server.hardware.HddSpindown;
+  optimizedDir = if spindown.enable && (spindown.optimize == "compatible" || (isList spindown.optimize && elem name spindown.optimize))
+    then cfg.configDir
+    else cfg.dataDir;
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.netbootxyz;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Netboot.xyz, forget about flashing isos on USB sticks with PXE boot";
+  pod = "false";
+  defaultPort = "3004";
+  configDirEnabled = optimizedDir == cfg.configDir;
+  dataDirEnabled = optimizedDir == cfg.dataDir;
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.configDir}"
+    "100999:100 ${optimizedDir}"
+    "100999:100 ${cfg.configDir}/config"
+    "100999:100 ${optimizedDir}/assets"
+  ];
+
+  composeText = ''
+    services:
+      netbootxyz:
+        image: ghcr.io/netbootxyz/netbootxyz:${netbootxyzVersion}
+        container_name: netbootxyz
+        hostname: netbootxyz
+        user: '1000:1000'
+        networks:
+          netbootxyz:
+            ipv4_address: 10.89.170.253
+        ports:
+          - "${cfg.port}:3000/tcp"
+          - "69:69/udp"
+          - "8008:80/tcp"
+        volumes:
+          - ${cfg.configDir}/config:/config
+          - ${optimizedDir}/assets:/assets
+        environment:
+          - PUID=1000
+          - PGID=1000
+          - TZ=${time.timeZone}
+          - PORT_RANGE=30000:30010
+          - SUBFOLDER=/
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+    networks:
+      netbootxyz:
+        driver: bridge
+        name: netbootxyz
+        ipam:
+          config:
+            - subnet: "10.89.170.0/24"
+              gateway: "10.89.170.254"
+  '';
+}
\ No newline at end of file
diff --git a/modules/server/services/applications/nextcloud.nix b/modules/server/services/applications/nextcloud.nix
new file mode 100644
index 0000000..599b57e
--- /dev/null
+++ b/modules/server/services/applications/nextcloud.nix
@@ -0,0 +1,384 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Version tagging
+  nextcloudVersion = "33.0.0";
+  redisVersion = "8.6-alpine";
+  databaseVersion = "11.8";
+  onlyofficeVersion = "9.2";
+  whiteboardVersion = "v1.5.6";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.nextcloud;
+  # Container config
+  name = "nextcloud";
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Nextcloud, your own online office suite";
+  defaultPort = "1100";
+  middlewares = [
+    "nextcloudSecureHeaders"
+  ];
+  secrets = [
+    "nextcloud/db_name"
+    "nextcloud/db_username"
+    "nextcloud/db_password"
+    "nextcloud/redis_password"
+    "nextcloud/onlyoffice_secret"
+    "nextcloud/whiteboard_secret"
+  ];
+  dirPermissions = [
+    "100032:100 ${cfg.dataDir}"
+    "100032:100 ${cfg.configDir}"
+    "100032:100 ${cfg.configDir}/web"
+    "100999:100 ${cfg.configDir}/redis"
+    "100999:100 ${cfg.configDir}/database"
+    "1000:100 ${cfg.configDir}/onlyoffice"
+    "1000:100 ${cfg.configDir}/onlyoffice/log"
+    "1000:100 ${cfg.configDir}/onlyoffice/cache"
+    "1000:100 ${cfg.configDir}/onlyoffice/data"
+    "1000:100 ${cfg.configDir}/onlyoffice/database"
+  ];
+
+# Compose file good
+  composeText = ''
+    services:
+      nextcloud-server:
+        image: docker.io/library/nextcloud:${nextcloudVersion}
+        container_name: nextcloud-server
+        hostname: nextcloud-server
+        networks:
+          nextcloud:
+            ipv4_address: 10.89.160.253
+        ports:
+          - "${cfg.port}:80/tcp"
+        volumes:
+          - ${cfg.configDir}/web:/var/www/html
+          - ${cfg.dataDir}:/mnt/ncdata
+        environment:
+          MYSQL_HOST: nextcloud-database:3306
+          MYSQL_DATABASE: ${config.sops.placeholder."nextcloud/db_name"}
+          MYSQL_USER: ${config.sops.placeholder."nextcloud/db_username"}
+          MYSQL_PASSWORD: ${config.sops.placeholder."nextcloud/db_password"}
+          REDIS_HOST_PASSWORD: ${config.sops.placeholder."nextcloud/redis_password"}
+          REDIS_HOST: nextcloud-redis
+          NEXTCLOUD_TRUSTED_DOMAINS: ${cfg.subdomain}.${config.numbus-server.services.domain}
+          NEXTCLOUD_DATA_DIR: /mnt/ncdata
+          SMTP_SECURE: tls
+          SMTP_HOST: ${config.numbus-server.mail.smtpServer}
+          SMTP_PORT: ${toString config.numbus-server.mail.smtpPort}
+          SMTP_NAME: ${config.numbus-server.mail.smtpUsername}
+          SMTP_PASSWORD:  ${config.sops.placeholder.smtpPassword}
+          MAIL_FROM_ADDRESS: no-reply
+          MAIL_DOMAIN: ${config.numbus-server.services.domain}
+          APACHE_DISABLE_REWRITE_IP: 1
+          OVERWRITEPROTOCOL: https
+          TRUSTED_PROXIES: 10.89.160.1
+          NC_default_phone_region: "${config.numbus-server.language}"
+          NC_default_language: "${config.numbus-server.language}"
+          NC_default_locale: "${config.numbus-server.locale}"
+          NC_default_timezone: "${config.time.timeZone}"
+          NC_maintenance_window_start: "1"
+        depends_on:
+          - nextcloud-database
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+      nextcloud-redis:
+        image: docker.io/library/redis:${redisVersion}
+        container_name: nextcloud-redis
+        hostname: nextcloud-redis
+        user: '1000:1000'
+        networks:
+          nextcloud:
+            ipv4_address: 10.89.160.252
+        volumes:
+          - ${cfg.configDir}/redis:/data
+        command: redis-server --requirepass ${config.sops.placeholder."nextcloud/redis_password"} --save 60 1 --loglevel warning
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+      nextcloud-database:
+        image: docker.io/library/mariadb:${databaseVersion}
+        container_name: nextcloud-database
+        hostname: nextcloud-database
+        user: '1000:1000'
+        networks:
+          nextcloud:
+            ipv4_address: 10.89.160.251
+        volumes:
+          - ${cfg.configDir}/database:/var/lib/mysql
+        environment:
+          MARIADB_DATABASE: ${config.sops.placeholder."nextcloud/db_name"}
+          MARIADB_USER: ${config.sops.placeholder."nextcloud/db_username"}
+          MARIADB_PASSWORD: ${config.sops.placeholder."nextcloud/db_password"}
+          MARIADB_RANDOM_ROOT_PASSWORD: true
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        command:
+          - "--transaction-isolation=READ-COMMITTED"
+          - "--binlog-format=ROW"
+        restart: unless-stopped
+
+      nextcloud-onlyoffice:
+        image: docker.io/onlyoffice/documentserver:${onlyofficeVersion}
+        container_name: nextcloud-onlyoffice
+        hostname: nextcloud-onlyoffice
+        networks:
+          nextcloud:
+            ipv4_address: 10.89.160.250
+        ports:
+          - "9980:80/tcp"
+        volumes:
+          - ${cfg.configDir}/onlyoffice/log:/var/log/onlyoffice
+          - ${cfg.configDir}/onlyoffice/cache:/var/lib/onlyoffice
+          - ${cfg.configDir}/onlyoffice/data:/var/www/onlyoffice/Data
+          - ${cfg.configDir}/onlyoffice/database:/var/lib/postgresql
+        environment:
+          - JWT_SECRET=${config.sops.placeholder."nextcloud/onlyoffice_secret"}
+          - REDIS_SERVER_PASS=${config.sops.placeholder."nextcloud/redis_password"}
+          - REDIS_SERVER_HOST=nextcloud-redis
+          - REDIS_SERVER_PORT=6379
+          - ADMINPANEL_ENABLED=false
+          - EXAMPLE_ENABLED=false
+          - METRICS_ENABLED=false
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+      nextcloud-whiteboard:
+        image: ghcr.io/nextcloud-releases/whiteboard:${whiteboardVersion}
+        container_name: nextcloud-whiteboard
+        hostname: nextcloud-whiteboard
+        user: '1000:1000'
+        ports:
+          - "3002:3002/tcp"
+        environment:
+          NEXTCLOUD_URL: https://${cfg.subdomain}.${config.numbus-server.services.domain}
+          JWT_SECRET_KEY: ${config.sops.placeholder."nextcloud/whiteboard_secret"}
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+    networks:
+      nextcloud:
+        driver: bridge
+        name: nextcloud
+        ipam:
+          config:
+            - subnet: "10.89.160.0/24"
+              gateway: "10.89.160.254"
+  '';
+
+  extraOptions = {
+    onlyoffice = {
+      subdomain = mkOption {
+        type = types.str;
+        default = "onlyoffice";
+        example = "onlyoffice";
+        description = "The subdomain that onlyoffice for nextcloud will use";
+      };
+    };
+    whiteboard = {
+      subdomain = mkOption {
+        type = types.str;
+        default = "whiteboard";
+        example = "whiteboard";
+        description = "The subdomain that whiteboard for nextcloud will use";
+      };
+    };
+  };
+
+  extraConfig = {
+    sops.templates."traefik/rules/nextcloud-onlyoffice" = {
+      gid = "100";
+      uid = "100999";
+      mode = "0400";
+      content = ''
+        http:
+          routers:
+            nextcloud-onlyoffice:
+              rule: "Host(`${cfg.onlyoffice.subdomain}.${config.numbus-server.services.domain}`)"
+              entrypoints:
+                - "websecure"
+              service: nextcloud-onlyoffice
+              tls:
+                certresolver: "cloudflare"
+                options: "secureTLS"
+          services:
+            nextcloud-onlyoffice:
+              loadBalancer:
+                servers:
+                  - url: "http://host.containers.internal:9980"
+      '';
+      path = "/etc/traefik/rules/nextcloud-onlyoffice.yaml";
+    };
+
+    sops.templates."traefik/rules/nextcloud-whiteboard" = {
+      gid = "100";
+      uid = "100999";
+      mode = "0400";
+      content = ''
+        http:
+          routers:
+            nextcloud-whiteboard:
+              rule: "Host(`${cfg.whiteboard.subdomain}.${config.numbus-server.services.domain}`)"
+              entrypoints:
+                - "websecure"
+              service: nextcloud-whiteboard
+              middlewares:
+                - "secureHeaders"
+              tls:
+                certresolver: "cloudflare"
+                options: "secureTLS"
+          services:
+            nextcloud-whiteboard:
+              loadBalancer:
+                servers:
+                  - url: "http://host.containers.internal:3002"
+      '';
+      path = "/etc/traefik/rules/nextcloud-whiteboard.yaml";
+    };
+
+    sops.templates."traefik/rules/nextcloud-secureHeaders" = {
+      gid = "100";
+      uid = "100999";
+      mode = "0400";
+      content = ''
+        http:
+          middlewares:
+            nextcloudSecureHeaders:
+              headers:
+                FrameDeny: false
+                CustomFrameOptionsValue: "SAMEORIGIN"
+                AddVaryHeader: true
+                BrowserXssFilter: true
+                ContentTypeNosniff: true
+                ForceSTSHeader: true
+                STSSeconds: 315360000
+                STSIncludeSubdomains: true
+                STSPreload: true
+                AccessControlAllowMethods: "GET,OPTIONS,PUT"
+                AccessControlAllowOriginList:
+                  - origin-list-or-null
+                AccessControlMaxAge: 100
+                ReferrerPolicy: same-origin
+                PermissionsPolicy: "vibrate=()"
+                ContentSecurityPolicy: >-
+                  default-src https://${cfg.onlyoffice.subdomain}.${config.numbus-server.services.domain} 'self';
+                  script-src https://${cfg.onlyoffice.subdomain}.${config.numbus-server.services.domain} 'self' 'unsafe-inline';
+                  style-src 'self' 'unsafe-inline';
+                  connect-src 'self';
+                  img-src 'self' data:;
+                  font-src 'self' data:;
+                  frame-src https://${cfg.onlyoffice.subdomain}.${config.numbus-server.services.domain} 'self';
+                  frame-ancestors https://${cfg.onlyoffice.subdomain}.${config.numbus-server.services.domain} 'self';
+                  object-src 'none';
+                  base-uri 'self';
+      '';
+      path = "/etc/traefik/rules/nextcloud-secureHeaders";
+    };
+
+    systemd.services."${name}-quirk" = {
+      description = "Podman container quirk : ${name}";
+      wantedBy = [ "multi-user.target" ];
+      after = [ "${name}.service" "${name}-secrets.service" ];
+      onFailure = [ "service-failure-notify@%n.service" ];
+      startLimitBurst = 5;
+      startLimitIntervalSec = 600;
+      path = [ pkgs.coreutils pkgs.sudo pkgs.podman pkgs.systemd pkgs.gnugrep ];
+      serviceConfig = {
+        Type = "oneshot";
+        RemainAfterExit = true;
+      };
+      script = ''
+        OCC="sudo -u numbus-admin podman exec --user www-data nextcloud-server php occ"
+
+        [[ ! -e /var/lib/numbus-server/${name}/.env ]] && systemctl start ${name}-secrets.service
+        until [[ -e /var/lib/numbus-server/${name}/.env ]]; do
+          echo "Waiting for secrets generation..."
+          sleep 5
+        done
+        source /var/lib/numbus-server/${name}/.env
+
+        until $OCC status | grep -iq "installed: true" >/dev/null 2>&1; do
+          echo "Waiting for Nextcloud to be up and running..."
+          sleep 60
+        done
+
+        $OCC db:add-missing-indices
+        $OCC maintenance:repair --include-expensive
+
+        INSTALL_APPS_LIST=( "calendar" "contacts" "mail" "notes" "onlyoffice" "cookbook" "whiteboard" )
+        DISABLE_APPS_LIST=( "activity" "federation" "webhook_listeners" "photos" "recommendations" "sharebymail" "teams" "support" "richdocumentscode" )
+
+        for app in ''${INSTALL_APPS_LIST[@]}; do
+          if ! $OCC --no-warnings app:list | grep -iq "$app:"; then
+            $OCC --no-warnings app:install "$app"
+          fi
+          if $OCC --no-warnings app:list --disabled | grep -iq "$app:"; then
+            $OCC --no-warnings app:enable "$app"
+          fi
+        done
+        for app in ''${DISABLE_APPS_LIST[@]}; do
+          if $OCC --no-warnings app:list --enabled | grep -iq "$app:"; then
+            $OCC --no-warnings app:disable "$app"
+          fi
+        done
+        $OCC --no-warnings config:system:set onlyoffice DocumentServerInternalUrl --value="https://${cfg.onlyoffice.subdomain}.${config.numbus-server.services.domain}/"
+        $OCC --no-warnings config:system:set onlyoffice DocumentServerUrl --value="https://${cfg.onlyoffice.subdomain}.${config.numbus-server.services.domain}/"
+        $OCC --no-warnings config:system:set onlyoffice jwt_secret --value="$ONLYOFFICE_PASSWORD"
+        $OCC --no-warnings config:app:set whiteboard collabBackendUrl --value="https://${cfg.whiteboard.subdomain}.${config.numbus-server.services.domain}"
+        $OCC --no-warnings config:app:set whiteboard jwt_secret_key --value="$WHITEBOARD_PASSWORD"
+
+        if [[ ! -f /var/lib/numbus-server/${name}/croned.true ]]; then
+          $OCC background:cron
+          sudo -u numbus-admin podman exec --user www-data nextcloud-server php -f /var/www/html/cron.php
+          touch /var/lib/numbus-server/${name}/croned.true
+        fi
+
+        if [[ ! -f /var/lib/numbus-server/${name}/scanned.true ]]; then
+          $OCC files:scan --all
+          $OCC files:repair-tree
+          touch /var/lib/numbus-server/${name}/scanned.true
+        fi
+      '';
+    };
+
+    systemd.services."${name}-cron" = {
+      description = "Podman container crontab : ${name}";
+      after = [ "${name}.service" "${name}-quirk.service" ];
+      onFailure = [ "service-failure-notify@%n.service" ];
+      path = [ pkgs.sudo pkgs.podman ];
+      serviceConfig = {
+        Type = "oneshot";
+        ExecCondition = ''${pkgs.sudo}/bin/sudo -u numbus-admin podman exec --user www-data nextcloud-server php occ status'';
+        ExecStart = "${pkgs.sudo}/bin/sudo -u numbus-admin podman exec --user www-data nextcloud-server php -f /var/www/html/cron.php";
+      };
+    };
+
+    systemd.timers."${name}-cron" = {
+      description = "Timer for Nextcloud cron";
+      wantedBy = [ "timers.target" ];
+      timerConfig = {
+        OnBootSec = "5m";
+        OnUnitActiveSec = "5m";
+        Unit = "${name}-cron.service";
+      };
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/server/services/applications/ntfy.nix b/modules/server/services/applications/ntfy.nix
new file mode 100644
index 0000000..6650008
--- /dev/null
+++ b/modules/server/services/applications/ntfy.nix
@@ -0,0 +1,62 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "ntfy";
+  # Version tagging
+  ntfyVersion = "v2.18.0";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.ntfy;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Ntfy, get notified easily";
+  defaultPort = "8099";
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.configDir}"
+    "100999:100 ${cfg.configDir}/cache"
+    "100999:100 ${cfg.configDir}/config"
+  ];
+
+  composeText = ''
+    services:
+      ntfy:
+        image: docker.io/binwiederhier/ntfy
+        container_name: ntfy
+        hostname: ntfy
+        user: "1000:1000"
+        networks:
+          ntfy:
+            ipv4_address: 10.89.150.253
+        ports:
+          - "${cfg.port}:80/tcp"
+        command:
+          - serve
+        volumes:
+          - ${cfg.config}/cache:/var/cache/ntfy
+          - ${cfg.config}/config:/etc/ntfy
+        environment:
+          - TZ=${time.timeZone}
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+    networks:
+      ntfy:
+        driver: bridge
+        name: ntfy
+        ipam:
+          config:
+            - subnet: "10.89.150.0/24"
+              gateway: "10.89.150.254"
+  '';
+}
\ No newline at end of file
diff --git a/modules/server/services/applications/odoo.nix b/modules/server/services/applications/odoo.nix
new file mode 100644
index 0000000..fba6c67
--- /dev/null
+++ b/modules/server/services/applications/odoo.nix
@@ -0,0 +1,118 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "odoo";
+  # Version tagging
+  odooVersion = "10.11.6";
+  databaseVersion = "15.17";
+  # Storage optimization
+  spindown = config.numbus-server.hardware.HddSpindown;
+  optimizedDir = if spindown.enable && (spindown.optimize == "compatible" || (isList spindown.optimize && elem name spindown.optimize))
+    then cfg.configDir
+    else cfg.dataDir;
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.odoo;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Odoo : An open ERP (Enterprise resource planning) solution";
+  defaultPort = "8069";
+  configDirEnabled = optimizedDir == cfg.configDir;
+  dataDirEnabled = optimizedDir == cfg.dataDir;
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "100999:100 ${optimizedDir}"
+    "100999:100 ${optimizedDir}/odoo"
+    "100999:100 ${cfg.configDir}/addons"
+    "100999:100 ${cfg.configDir}/config"
+    "100999:100 ${cfg.configDir}/database"
+  ];
+
+  composeText = ''
+    services:
+      odoo-database:
+        image: docker.io/library/postgres:${databaseVersion}
+        container_name: odoo-database
+        hostname: odoo-database
+        user: '1000:1000'
+        shm_size: 128mb
+        networks:
+          odoo:
+            ipv4_address: 10.89.190.253
+        volumes:
+          - ${cfg.configDir}/database:/var/lib/postgresql/data
+        environment:
+          - POSTGRES_DB=${config.sops.placeholder."odoo/db_name"}
+          - POSTGRES_PASSWORD=${config.sops.placeholder."odoo/db_password"}
+          - POSTGRES_USER=${config.sops.placeholder."odoo/db_username"}
+          - PGDATA=/var/lib/postgresql/data
+        cap_drop:
+          - NET_RAW
+        security_opt:
+          - no-new-privileges:true
+        restart: unless-stopped
+
+      odoo-server:
+        image: docker.io/library/odoo:${odooVersion}
+        container_name: odoo-server
+        hostname: odoo-server
+        user: '1000:1000'
+        networks:
+          odoo:
+            ipv4_address: 10.89.190.252
+        ports:
+          - "${cfg.port}:8069/tcp"
+        volumes:
+          - ${optimizedDir}/odoo:/var/lib/odoo
+          - ${cfg.configDir}/config:/etc/odoo
+          - ${cfg.configDir}/addons:/mnt/extra-addons
+        environment:
+          - HOST=odoo-database
+          - USER=${config.sops.placeholder."odoo/db_username"}
+          - PASSWORD=${config.sops.placeholder."odoo/db_password"}
+        depends_on:
+          - odoo-database
+        cap_drop:
+          - NET_RAW
+        security_opt:
+          - no-new-privileges:true
+        restart: unless-stopped
+
+    networks:
+      odoo:
+        driver: bridge
+        name: odoo
+        ipam:
+          config:
+            - subnet: "10.89.190.0/24"
+              gateway: "10.89.190.254"
+  '';
+
+  extraConfig = {
+    sops.secrets."odoo/db_name" = {
+      sopsFile = /etc/nixos/secrets/podman/odoo.yaml;
+      gid = "100";
+      uid = "1000";
+      mode = "0400";
+    };
+    sops.secrets."odoo/db_username" = {
+      sopsFile = /etc/nixos/secrets/podman/odoo.yaml;
+      gid = "100";
+      uid = "1000";
+      mode = "0400";
+    };
+    sops.secrets."odoo/db_password" = {
+      sopsFile = /etc/nixos/secrets/podman/odoo.yaml;
+      gid = "100";
+      uid = "1000";
+      mode = "0400";
+    };
+  };
+}
diff --git a/modules/server/services/applications/passbolt.nix b/modules/server/services/applications/passbolt.nix
new file mode 100644
index 0000000..d16c53a
--- /dev/null
+++ b/modules/server/services/applications/passbolt.nix
@@ -0,0 +1,112 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "passbolt";
+  # Version tagging
+  passboltVersion = "5.9.0-1-ce-non-root";
+  databaseVersion = "12.2";
+  # Storage optimization
+  spindown = config.numbus-server.hardware.HddSpindown;
+  optimizedDir = if spindown.enable && (spindown.optimize == "compatible" || (isList spindown.optimize && elem name spindown.optimize))
+    then cfg.configDir
+    else cfg.dataDir;
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.passbolt;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Passbolt, your password manager";
+  defaultPort = "4433";
+  scheme = "https";
+  dataDirEnabled = false;
+  middlewares = [ "secureHeaders" ];
+  dirPermissions = [
+    "100032:100 ${cfg.configDir}"
+    "100032:100 ${cfg.configDir}/gpg"
+    "100032:100 ${cfg.configDir}/jwt"
+    "100999:100 ${cfg.configDir}/database"
+  ];
+  secrets = [
+    "passbolt/db_name"
+    "passbolt/db_username"
+    "passbolt/db_password"
+  ];
+
+# Compose file good
+  composeText = ''
+    services:
+      passbolt-server:
+        image: docker.io/passbolt/passbolt:${passboltVersion}
+        container_name: passbolt-server
+        hostname: passbolt-server
+        user: '33:33'
+        networks:
+          passbolt:
+        ports:
+          - "${cfg.port}:4433/tcp"
+        volumes:
+          - ${cfg.configDir}/gpg:/etc/passbolt/gpg
+          - ${cfg.configDir}/jwt:/etc/passbolt/jwt
+        environment:
+          APP_DEFAULT_TIMEZONE: ${config.time.timeZone}
+          APP_FULL_BASE_URL: https://${cfg.subdomain}.${config.numbus-server.services.domain}
+          DATASOURCES_DEFAULT_HOST: "passbolt-database"
+          DATASOURCES_DEFAULT_USERNAME: ${config.sops.placeholder."passbolt/db_username"}
+          DATASOURCES_DEFAULT_PASSWORD: ${config.sops.placeholder."passbolt/db_password"}
+          DATASOURCES_DEFAULT_DATABASE: ${config.sops.placeholder."passbolt/db_name"}
+          EMAIL_DEFAULT_FROM_NAME: "Passbolt"
+          EMAIL_TRANSPORT_DEFAULT_HOST: ${config.numbus-server.mail.smtpServer}
+          EMAIL_TRANSPORT_DEFAULT_PORT: ${toString config.numbus-server.mail.smtpPort}
+          EMAIL_TRANSPORT_DEFAULT_USERNAME: ${config.numbus-server.mail.smtpUsername}
+          EMAIL_TRANSPORT_DEFAULT_PASSWORD: ${config.sops.placeholder."mail/smtpPassword"}
+          EMAIL_TRANSPORT_DEFAULT_TLS: true
+          EMAIL_DEFAULT_FROM: passbolt-noreply@${config.numbus-server.services.domain}
+          PASSBOLT_SSL_FORCE: true
+        command:
+          [
+            "/usr/bin/wait-for.sh",
+            "-t",
+            "0",
+            "passbolt-database:3306",
+            "--",
+            "/docker-entrypoint.sh"
+          ]
+        depends_on:
+          - passbolt-database
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+      passbolt-database:
+        image: docker.io/library/mariadb:${databaseVersion}
+        container_name: passbolt-database
+        hostname: passbolt-database
+        user: '1000:1000'
+        networks:
+          passbolt:
+        volumes:
+          - ${cfg.configDir}/database:/var/lib/mysql
+        environment:
+          MYSQL_RANDOM_ROOT_PASSWORD: "true"
+          MYSQL_DATABASE: ${config.sops."passbolt/db_name"}
+          MYSQL_USER: ${config.sops."passbolt/db_username"}
+          MYSQL_PASSWORD: ${config.sops."passbolt/db_password"}
+        security_opt:
+          - no-new-privileges:true
+        cap_drop:
+          - NET_RAW
+        restart: unless-stopped
+
+    networks:
+      passbolt:
+        name: passbolt
+        driver: bridge
+  '';
+}
\ No newline at end of file
diff --git a/modules/server/services/applications/traefik.nix b/modules/server/services/applications/traefik.nix
new file mode 100644
index 0000000..d776c07
--- /dev/null
+++ b/modules/server/services/applications/traefik.nix
@@ -0,0 +1,178 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "traefik";
+  # Version tagging
+  traefikVersion = "v3.6.8";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.traefik;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Traefik reverse proxy, one to rule them all";
+  defaultPort = "7780";
+  pod = "false";
+  startDelay = 10;
+  dataDirEnabled = false;
+  middlewares = [
+    "secureHeaders"
+  ];
+  dependencies = [
+    "sops-install-secrets.service"
+    "network-online.target"
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.configDir}"
+    "100999:100 ${cfg.configDir}/certs"
+  ];
+
+# Compose file good
+  composeText = ''
+    services:
+      traefik:
+        image: docker.io/library/traefik:${traefikVersion}
+        container_name: traefik
+        hostname: traefik
+        user: '1000:1000'
+        network_mode: pasta
+        ports:
+          - "${cfg.port}:8080/tcp"
+          - "443:443/tcp"
+        volumes:
+          - ${config.sops.templates."traefik/config".path}:/etc/traefik/traefik.yaml:ro
+          - ${cfg.configDir}/certs:/var/traefik/certs
+          - /etc/traefik/rules:/etc/traefik/rules:ro
+        environment:
+          - CF_DNS_API_TOKEN=${config.sops.placeholder."traefik/cloudflare_api_token"}
+        cap_add:
+          - NET_BIND_SERVICE
+        security_opt:
+          - no-new-privileges:true
+        restart: unless-stopped
+  '';
+
+  extraConfig = {
+    sops.secrets."traefik/cloudflare_api_token" = {
+      sopsFile = /etc/nixos/secrets/podman/traefik.yaml;
+      gid = "100";
+      uid = "1000";
+      mode = "0400";
+    };
+
+    sops.templates."traefik/config"= { 
+      gid = "100";
+      uid = "100999";
+      mode = "0400";
+      content = ''
+        global:
+          checkNewVersion: false
+          sendAnonymousUsage: false
+        log:
+          level: ${cfg.logLevel}
+        accesslog: {}
+        api:
+          dashboard: true
+          insecure: false
+        entryPoints:
+          web:
+            address: :80
+            http:
+              redirections:
+                entryPoint:
+                  to: websecure
+                  scheme: https
+          websecure:
+            address: :443
+            forwardedHeaders:
+              trustedIPs:
+                - "127.0.0.1/32"
+                - "10.0.0.0/8"
+                - "192.168.0.0/16"
+                - "172.16.0.0/12"
+        certificatesResolvers:
+          cloudflare:
+            acme:
+              email: ${config.numbus-server.mail.adminAddress}
+              storage: /var/traefik/certs/cloudflare-acme.json
+              caServer: "https://acme-v02.api.letsencrypt.org/directory"
+              dnsChallenge:
+                provider: cloudflare
+                resolvers:
+                  - "1.1.1.1:53"
+                  - "9.9.9.9:53"
+        serversTransport:
+          insecureSkipVerify: true
+        providers:
+          file:
+            directory: "/etc/traefik/rules"
+            watch: true
+      '';
+      path = "/etc/traefik/traefik.yaml";
+    };
+
+    sops.templates."traefik/rules/secureHeaders" = {
+      gid = "100";
+      uid = "100999";
+      mode = "0400";
+      content = ''
+        http:
+          middlewares:
+            secureHeaders:
+              headers:
+                FrameDeny: true
+                AccessControlAllowMethods: 'GET,OPTIONS,PUT'
+                AccessControlAllowOriginList:
+                  - origin-list-or-null
+                AccessControlMaxAge: 100
+                AddVaryHeader: true
+                BrowserXssFilter: true
+                ContentTypeNosniff: true
+                ForceSTSHeader: true
+                STSIncludeSubdomains: true
+                STSPreload: true
+                ContentSecurityPolicy: default-src 'self' 'unsafe-inline'
+                CustomFrameOptionsValue: SAMEORIGIN
+                ReferrerPolicy: same-origin
+                PermissionsPolicy: vibrate 'self'
+                STSSeconds: 315360000
+      '';
+      path = "/etc/traefik/rules/secureHeaders.yaml";
+    };
+
+    sops.templates."traefik/rules/secureTLS" = {
+      gid = "100";
+      uid = "100999";
+      mode = "0400";
+      content = ''
+        tls:
+          options:
+            secureTLS:
+              minVersion: VersionTLS12
+              sniStrict: true
+              curvePreferences:
+                - CurveP521
+                - CurveP384
+              cipherSuites:
+                - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
+                - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
+                - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
+      '';
+      path = "/etc/traefik/rules/secureTLS.yaml";
+    };
+  };
+
+  extraOptions = {
+    enable.default = true;
+    logLevel = mkOption {
+      type = types.enum [ "TRACE" "DEBUG" "INFO" "WARN" "ERROR" "FATAL" ];
+      default = "ERROR";
+      example = "ERROR";
+      description = "The level of detail Traefik should print in the logs.";
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/server/services/applications/uptime-kuma.nix b/modules/server/services/applications/uptime-kuma.nix
new file mode 100644
index 0000000..38aa259
--- /dev/null
+++ b/modules/server/services/applications/uptime-kuma.nix
@@ -0,0 +1,54 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "uptimeKuma";
+  # Version tagging
+  uptimeKumaVersion = "2.2.0-rootless";
+  # Storage optimization
+  spindown = config.numbus-server.hardware.HddSpindown;
+  optimizedDir = if spindown.enable && (spindown.optimize == "compatible" || (isList spindown.optimize && elem name spindown.optimize))
+    then cfg.configDir
+    else cfg.dataDir;
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.uptimeKuma;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Uptime-Kuma, \"don't let your server down !\" monitoring tools";
+  defaultPort = "3001";
+  scheme = "http";
+  middlewares = [ "secureHeaders" ];
+  dirPermissions = [ "100999:100 ${optimizedDir}" ];
+
+  composeText = ''
+    services:
+      uptimekuma:
+        image: docker.io/louislam/uptime-kuma:${uptimeKumaVersion}
+        container_name: uptime-kuma
+        hostname: uptime-kuma
+        user: '1000:1000'
+        networks:
+          uptime-kuma:
+            ipv4_address: 10.89.100.253
+        ports:
+          - "${cfg.port}:3001/tcp"
+        volumes:
+          - ${optimizedDir}:/app/data
+        security_opt:
+          - no-new-privileges:true
+        restart: unless-stopped
+
+    networks:
+      uptime-kuma:
+        driver: bridge
+        ipam:
+          config:
+            - subnet: "10.89.100.0/24"
+              gateway: "10.89.100.254"
+  '';
+}
\ No newline at end of file
diff --git a/modules/server/services/applications/vscodium.nix b/modules/server/services/applications/vscodium.nix
new file mode 100644
index 0000000..0421ac2
--- /dev/null
+++ b/modules/server/services/applications/vscodium.nix
@@ -0,0 +1,81 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Container config
+  name = "vscodium";
+  # Version tagging
+  vscodiumVersion = "1.110.11607-ls15";
+  # Storage optimization
+  spindown = config.numbus-server.hardware.HddSpindown;
+  optimizedDir = if spindown.enable && (spindown.optimize == "compatible" || (isList spindown.optimize && elem name spindown.optimize))
+    then cfg.configDir
+    else cfg.dataDir;
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.vscodium;
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "VScodium, an open-source version of VScode in your web browser";
+  defaultPort = "8000";
+  configDirEnabled = optimizedDir == cfg.configDir;
+  dataDirEnabled = optimizedDir == cfg.dataDir;
+  middlewares = [ "secureHeaders" ];
+  dirPermissions = [
+    "100999:100 ${optimizedDir}"
+    "100999:100 ${cfg.configDir}"
+    "100999:100 ${optimizedDir}/workspace"
+    "100999:100 ${cfg.configDir}/config"
+  ];
+
+  composeText = ''
+    services:
+      vscodium:
+        image: lscr.io/linuxserver/vscodium-web:${vscodiumVersion}
+        container_name: vscodium
+        hostname: vscodium
+        user: '1000:1000'
+        networks:
+          vscodium:
+            ipv4_address: 10.89.50.253
+        ports:
+          - "${defaultPort}:8000"
+        volumes:
+          - ${cfg.configDir}/config:/config
+          - ${optimizedDir}/workspace:/workspace
+        environment:
+          - PUID=1000
+          - PGID=1000
+          - TZ=${time.timeZone}
+          - CONNECTION_TOKEN=${config.sops.placeholder."vscodium/connection_token"}
+        shm_size: "1gb"
+        cap_add:
+          - IPC_LOCK
+        cap_drop:
+          - NET_RAW
+        security_opt:
+          - no-new-privileges:true
+        restart: unless-stopped
+
+    networks:
+      vscodium:
+        name: vscodium
+        driver: bridge
+        ipam:
+          config:
+            - subnet: "10.89.50.0/24"
+              gateway: "10.89.50.254"
+  '';
+
+  extraConfig = {
+    sops.secrets."vscodium/connection_token" = {
+      sopsFile = /etc/nixos/secrets/podman/vscodium.yaml;
+      gid = "100";
+      uid = "1000";
+      mode = "0400";
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/server/services/default.nix b/modules/server/services/default.nix
new file mode 100644
index 0000000..ce841be
--- /dev/null
+++ b/modules/server/services/default.nix
@@ -0,0 +1,9 @@
+{ ... }:
+
+{
+  imports = [
+    ./applications/default.nix
+    ./dns/default.nix
+    ./system/default.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/server/services/dns/adguard.nix b/modules/server/services/dns/adguard.nix
new file mode 100644
index 0000000..e08369f
--- /dev/null
+++ b/modules/server/services/dns/adguard.nix
@@ -0,0 +1,53 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Version tagging
+  adguardVersion = "latest";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.adguard;
+  # Container config
+  name = "adguard";
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "AdGuard, feature-rich DNS service";
+  defaultPort = "3000";
+  scheme = "http";
+  dataDirEnabled = false;
+  startDelay = 10;
+  dependencies = [
+    "network.target"
+  ];
+  middlewares = [
+    "secureHeaders"
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.configDir}"
+  ];
+
+  composeText = ''
+    services:
+      adguardhome:
+        image: adguard/adguardhome:${adguardVersion}
+        container_name: adguard
+        hostname: adguard
+        network_mode: pasta
+        user: '1000:1000'
+        ports:
+          - "${cfg.port}:3000/tcp"
+          - "53:53/tcp"
+          - "53:53/udp"
+        volumes:
+          - ${cfg.configDir}/work:/opt/adguardhome/work
+          - ${cfg.configDir}/config:/opt/adguardhome/conf
+        cap_add:
+          - SYS_NICE
+        security_opt:
+          - no-new-privileges:true
+        restart: unless-stopped
+  '';
+}
\ No newline at end of file
diff --git a/modules/server/services/dns/default.nix b/modules/server/services/dns/default.nix
new file mode 100644
index 0000000..bf6213a
--- /dev/null
+++ b/modules/server/services/dns/default.nix
@@ -0,0 +1,10 @@
+{ ... }:
+
+{
+  imports = [
+    # To test
+    ./adguard.nix
+    # Tested
+    ./pi-hole.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/server/services/dns/pi-hole.nix b/modules/server/services/dns/pi-hole.nix
new file mode 100644
index 0000000..b5de2f9
--- /dev/null
+++ b/modules/server/services/dns/pi-hole.nix
@@ -0,0 +1,71 @@
+{ config, pkgs, lib, ... }:
+
+with lib;
+
+let
+  # Version tagging
+  piholeVersion = "2026.02.0";
+  # Helper
+  helper = import ../service-helper.nix { inherit config pkgs lib; };
+  cfg = config.numbus-server.services.pi-hole;
+  # Container config
+  name = "pi-hole";
+  # DNS config
+  dnsConfig = ''
+
+  '';
+in
+
+helper.mkPodmanService {
+  inherit name;
+  description = "Pi-Hole, the ads black hole";
+  defaultPort = "4443";
+  scheme = "https";
+  dataDirEnabled = false;
+  startDelay = 10;
+  dependencies = [
+    "network.target"
+  ];
+  middlewares = [
+    "secureHeaders" 
+  ];
+  dirPermissions = [
+    "100999:100 ${cfg.configDir}"
+  ];
+  secrets = [
+    "pi-hole/web_password"
+  ];
+
+# Compose file good
+  composeText = ''
+    services:
+      pi-hole:
+        image: docker.io/pihole/pihole:${piholeVersion}
+        container_name: pi-hole
+        hostname: pi-hole
+        network_mode: pasta
+        ports:
+          - "${cfg.port}:443/tcp"
+          - "53:53/tcp"
+          - "53:53/udp"
+        volumes:
+          - ${cfg.configDir}:/etc/pihole
+        environment:
+          PIHOLE_UID: '1000'
+          PIHOLE_GID: '1000'
+          TZ: ${config.time.timeZone}
+          FTLCONF_webserver_domain: ${cfg.subdomain}.${config.numbus-server.services.domain}
+          FTLCONF_dns_domain_name: "${config.numbus-server.services.domain}"
+          FTLCONF_webserver_api_password: ${config.sops.placeholder."pi-hole/web_password"}
+          FTLCONF_dns_upstreams: 9.9.9.9;149.112.112.112
+          FTLCONF_dns_listeningMode: "BIND"
+          FTLCONF_dns_domain_local: "true"
+          FTLCONF_dhcp_active: "false"
+          FTLCONF_ntp_ipv4_active: "false"
+          FTLCONF_ntp_ipv6_active: "false"
+          FTLCONF_ntp_sync_active: "false"
+        cap_add:
+          - SYS_NICE
+        restart: unless-stopped
+  '';
+}
\ No newline at end of file
diff --git a/modules/server/services/global.nix b/modules/server/services/global.nix
new file mode 100644
index 0000000..a338b28
--- /dev/null
+++ b/modules/server/services/global.nix
@@ -0,0 +1,19 @@
+{ config, ... }:
+
+{
+  options.numbus = {
+    services = {
+      domain = mkOption {
+        type = types.str;
+        example = "numbus.eu";
+        description = "The root domain name (i.e. example.com) that your services will use";
+      };
+      dns = mkOption {
+      type = types.enum [ "pi-hole" "adguard" ];
+      default = "pi-hole";
+      example = "pi-hole";
+      description = "The preferred DNS resolver service (pi-hole or adguard) that other services should depend on";
+      };
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/server/services/system/backup-client.nix b/modules/server/services/system/backup-client.nix
new file mode 100644
index 0000000..1ea63d5
--- /dev/null
+++ b/modules/server/services/system/backup-client.nix
@@ -0,0 +1,5 @@
+{ ... }:
+
+{
+  
+}
\ No newline at end of file
diff --git a/modules/server/services/system/clamav.nix b/modules/server/services/system/clamav.nix
new file mode 100644
index 0000000..05a0924
--- /dev/null
+++ b/modules/server/services/system/clamav.nix
@@ -0,0 +1,91 @@
+{ config, lib, pkgs, ... }:
+
+with lib;
+
+let
+  cfg = config.numbus-server.services.clamav;
+  onAccessPaths = lib.mapAttrsToList (n: v: v.dataDir) (lib.filterAttrs (n: v:
+    v ? enable && v.enable && v ? dataDir && v.dataDir != null && v.dataDir != false
+  ) config.numbus-server.services);
+  clamonacc_virus_notifier = pkgs.writeScript "clamonacc_virus_notifier.sh" ''
+    #!${pkgs.bash}/bin/bash
+
+    echo "CLAM_VIRUSEVENT_VIRUSNAME=\"$CLAM_VIRUSEVENT_VIRUSNAME\"" > /var/lib/clamav/virus_event.env
+    echo "CLAM_VIRUSEVENT_FILENAME=\"$CLAM_VIRUSEVENT_FILENAME\"" >> /var/lib/clamav/virus_event.env
+
+    /run/wrappers/bin/sudo /run/current-system/sw/bin/systemctl start clamav-virus-notify.service
+  '';
+in
+
+{
+  options.numbus-server.services.clamav = {
+    enable = mkEnableOption "ClamAV open-source anti-virus software";
+  };
+
+  config = mkIf cfg.enable {
+    environment.systemPackages = [ pkgs.clamav pkgs.curl ];
+
+    system.activationScripts.clamav-quarantine = ''
+      mkdir -p /quarantine
+      chown clamav:clamav /quarantine
+      chmod 440 /quarantine
+    '';
+
+    security.sudo.extraRules = [{
+      users = [ "clamav" ];
+      commands = [{
+        command = "/run/current-system/sw/bin/systemctl start clamav-virus-notify.service";
+        options = [ "NOPASSWD" ];
+      }];
+    }];
+
+    services.clamav = {
+      updater.enable = true;
+      clamonacc.enable = true;
+
+      scanner = {
+        enable = true;
+        interval = "*-*-* 04:00:00"; # Everyday at 4am
+        scanDirectories = [
+          "/etc"
+          "/home"
+          "/var/lib"
+          "/var/tmp"
+          "/tmp"
+        ];
+      };
+
+      daemon = {
+        enable = true;
+        settings = {
+          OnAccessPrevention = true;
+          OnAccessIncludePath = onAccessPaths;
+          VirusEvent = "${clamonacc_virus_notifier}";
+        };
+      };
+    };
+
+    systemd.services.clamav-periodic-scan = mkIf (onAccessPaths != []) {
+      description = "Periodic ClamAV virus scan";
+      after = [ "clamav-daemon.service" "clamav-freshclam.service" ];
+      requires = [ "clamav-daemon.service" ];
+      wants = [ "clamav-freshclam.service" ];
+      onFailure = [ "clamav-virus-notify.service" ];
+      serviceConfig = {
+        Type = "oneshot";
+        ExecStart = "${pkgs.clamav}/bin/clamdscan --multiscan --fdpass --infected --allmatch --move=/quarantine ${lib.escapeShellArgs onAccessPaths}";
+        Slice = "system-clamav.slice";
+      };
+    };
+
+    systemd.timers.clamav-periodic-scan = mkIf (onAccessPaths != []) {
+      description = "Timer for ClamAV periodic scan";
+      wantedBy = [ "timers.target" ];
+      timerConfig = {
+        OnCalendar = "*-1/3-01 04:00:00";
+        Persistent = true;
+        Unit = "clamav-periodic-scan.service";
+      };
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/server/services/system/default.nix b/modules/server/services/system/default.nix
new file mode 100644
index 0000000..488df34
--- /dev/null
+++ b/modules/server/services/system/default.nix
@@ -0,0 +1,10 @@
+{ ... }:
+
+{
+  imports = [
+    # To test
+    ./backup-client.nix
+    ./clamav.nix
+    ./virtualization.nix
+  ];
+}
\ No newline at end of file
diff --git a/modules/server/services/system/virtualization.nix b/modules/server/services/system/virtualization.nix
new file mode 100644
index 0000000..873062c
--- /dev/null
+++ b/modules/server/services/system/virtualization.nix
@@ -0,0 +1,17 @@
+{ config, lib, ... }:
+
+with lib;
+
+let
+  cfg = config.numbus-server.services.virtualization;
+in
+
+{
+  options.numbus-server.services.virtualization = {
+    enable = mkEnableOption "QEMU/KVM virtualization software";
+  };
+
+  config = mkIf cfg.enable {
+    virtualisation.libvirtd.enable = true;
+  };
+}
\ No newline at end of file
diff --git a/modules/tv/configuration.nix b/modules/tv/configuration.nix
new file mode 100644
index 0000000..c4e3772
--- /dev/null
+++ b/modules/tv/configuration.nix
@@ -0,0 +1,144 @@
+{ config, pkgs, inputs, ... }:
+
+{
+  imports = [ ];
+
+  # Bootloader options
+  boot.initrd.systemd.enable = true;
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+
+  # Boot splash instead of log messages
+  boot = {
+    plymouth.enable = true;
+    # Enable "Silent boot"
+    consoleLogLevel = 3;
+    initrd.verbose = false;
+    kernelParams = [
+      "quiet"
+      "udev.log_level=3"
+      "systemd.show_status=auto"
+      "pcie_aspm=off"
+    ];
+    loader.timeout = 1;
+  };
+
+  # Hardware settings
+  hardware.enableRedistributableFirmware = true;
+  hardware.cpu.intel.updateMicrocode = true;
+  hardware.cpu.amd.updateMicrocode = true;
+
+  # Enable networking
+  networking.networkmanager.enable = true;
+  networking.hostName = "nix-tv"; # Define your hostname.
+
+  # Set your time zone.
+  time.timeZone = "Europe/Paris";
+
+  # Select internationalisation properties.
+  i18n.defaultLocale = "fr_FR.UTF-8";
+
+  i18n.extraLocaleSettings = {
+    LC_ADDRESS = "fr_FR.UTF-8";
+    LC_IDENTIFICATION = "fr_FR.UTF-8";
+    LC_MEASUREMENT = "fr_FR.UTF-8";
+    LC_MONETARY = "fr_FR.UTF-8";
+    LC_NAME = "fr_FR.UTF-8";
+    LC_NUMERIC = "fr_FR.UTF-8";
+    LC_PAPER = "fr_FR.UTF-8";
+    LC_TELEPHONE = "fr_FR.UTF-8";
+    LC_TIME = "fr_FR.UTF-8";
+  };
+
+  # Disable the X11 windowing system.
+  services.xserver.enable = false;
+  services.xserver.xkb.layout = "fr";
+
+  # Enable the KDE Plasma Desktop Environment.
+  services.displayManager.sddm.enable = true;
+  services.displayManager.sddm.wayland.enable = true;
+  services.desktopManager.plasma6.enable = true;
+  services.displayManager.autoLogin.enable = true;
+  services.displayManager.autoLogin.user = "nix-tv";
+
+  # Configure console keymap
+  console.keyMap = "fr";
+
+  # Enable CUPS to print documents.
+  services.printing.enable = true;
+
+  # Enable sound with pipewire.
+  services.pulseaudio.enable = false;
+  security.rtkit.enable = true;
+  services.pipewire = {
+    enable = true;
+    alsa.enable = true;
+    alsa.support32Bit = true;
+    pulse.enable = true;
+  };
+
+  # Define a user account. Don't forget to set a password with ‘passwd’.
+  users.users.nix-tv = {
+    isNormalUser = true;
+    description = "Nix TV";
+    extraGroups = [ "networkmanager" "wheel" ];
+    uid = 1000;
+    initialPassword = "changeMe!";
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINjX8YqPMXpuqIrEClMHD2Ol+gqj3+28rYXGWybVNpim raphael@MacBook-Pro-de-Raphael.local"
+    ];
+  };
+
+  # Login message
+  environment.loginShellInit = ''
+    if [ "$(id -u)" -eq 1000 ]; then
+      if [ -n "$SSH_TTY" ]; then
+        fastfetch
+	      echo -e "\n\nWelcome to your Nix TV !\n\n- This system is managed by NixOS\n- All changes are futile\n- Please consider buying support if you can't get your TV running\n- Have a nice day and enjoy !"
+      fi
+    fi
+  '';
+
+  # Allow unfree packages
+  nixpkgs.config.allowUnfree = true;
+
+  environment.systemPackages = with pkgs; [
+    fastfetch
+  ];
+
+  # Install flatpak
+  services.flatpak.enable = true;
+
+
+  # Enable the OpenSSH daemon.
+  services.openssh.enable = true;
+
+  # Open ports in the firewall.
+  networking.firewall.allowedTCPPorts = [ ];
+  networking.firewall.allowedUDPPorts = [ ];
+  networking.firewall.enable = true;
+
+  # Enable auto updates
+  system.autoUpgrade = {
+    enable = true;
+    allowReboot = false;
+    flake = inputs.self.outPath;
+    flags = [ "--print-build-logs" ];
+    dates = "20:00";
+    randomizedDelaySec = "45min";
+  };
+
+  nix.gc = {
+    automatic = true;
+    dates = "weekly";
+    options = "--delete-older-than 7d";
+  };
+
+  # Enable NixOS flakes
+  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+  # Enable auto nix-store optimization
+  nix.settings.auto-optimise-store = true;
+
+  system.stateVersion = "25.11";
+
+}
\ No newline at end of file
diff --git a/modules/tv/flake.nix b/modules/tv/flake.nix
new file mode 100644
index 0000000..37da3da
--- /dev/null
+++ b/modules/tv/flake.nix
@@ -0,0 +1,23 @@
+{
+  description = "Flake file for Nix TV project";
+
+  inputs = {
+    nixpkgs.url = "github:nixos/nixpkgs?ref=nixos-unstable";
+    nix-flatpak.url = "github:gmodena/nix-flatpak/?ref=latest";
+  };
+
+  outputs = { self, nixpkgs, nix-flatpak, ... }@inputs: {
+    nixosConfigurations."nix-tv" = nixpkgs.lib.nixosSystem {
+      specialArgs = { inherit inputs; };
+      system = "x86_64-linux";
+      modules = [
+        # Nix flatpak
+        nix-flatpak.nixosModules.nix-flatpak
+        ./flatpak.nix
+        # Core configuration
+        ./configuration.nix
+        ./hardware-configuration.nix
+      ];
+    };
+  };
+}
\ No newline at end of file
diff --git a/modules/tv/flatpak.nix b/modules/tv/flatpak.nix
new file mode 100644
index 0000000..8370322
--- /dev/null
+++ b/modules/tv/flatpak.nix
@@ -0,0 +1,18 @@
+{ lib, ... }: 
+
+{
+  services.flatpak.remotes = lib.mkOptionDefault [{
+    name = "flathub";
+    location = "https://dl.flathub.org/repo/flathub.flatpakrepo";
+  }];
+
+  services.flatpak.update.auto.enable = true;
+  services.flatpak.uninstallUnmanaged = true;
+
+  services.flatpak.packages = [
+    "io.gitlab.librewolf-community"
+    "app.grayjay.Grayjay"
+    "com.github.unrud.VideoDownloader"
+    "com.github.tchx84.Flatseal"
+  ];
+}
\ No newline at end of file
diff --git a/templates/numbus-backup-server/configuration.nix b/templates/backup/configuration.nix
similarity index 100%
rename from templates/numbus-backup-server/configuration.nix
rename to templates/backup/configuration.nix
diff --git a/templates/numbus-backup-server/flake.nix b/templates/backup/flake.nix
similarity index 100%
rename from templates/numbus-backup-server/flake.nix
rename to templates/backup/flake.nix
diff --git a/templates/numbus-backup-server/sops-nix/.sops.yaml b/templates/backup/sops-nix/.sops.yaml
similarity index 100%
rename from templates/numbus-backup-server/sops-nix/.sops.yaml
rename to templates/backup/sops-nix/.sops.yaml
diff --git a/templates/numbus-backup-server/sops-nix/secrets.yaml b/templates/backup/sops-nix/secrets.yaml
similarity index 100%
rename from templates/numbus-backup-server/sops-nix/secrets.yaml
rename to templates/backup/sops-nix/secrets.yaml
diff --git a/templates/numbus-computer/configuration.nix b/templates/computer/configuration.nix
similarity index 100%
rename from templates/numbus-computer/configuration.nix
rename to templates/computer/configuration.nix
diff --git a/templates/numbus-computer/flake.nix b/templates/computer/flake.nix
similarity index 100%
rename from templates/numbus-computer/flake.nix
rename to templates/computer/flake.nix
diff --git a/templates/numbus-computer/sops-nix/.sops.yaml b/templates/computer/sops-nix/.sops.yaml
similarity index 100%
rename from templates/numbus-computer/sops-nix/.sops.yaml
rename to templates/computer/sops-nix/.sops.yaml
diff --git a/templates/numbus-computer/sops-nix/secrets.yaml b/templates/computer/sops-nix/secrets.yaml
similarity index 100%
rename from templates/numbus-computer/sops-nix/secrets.yaml
rename to templates/computer/sops-nix/secrets.yaml
diff --git a/templates/numbus-server/.sops.yaml b/templates/server/.sops.yaml
similarity index 100%
rename from templates/numbus-server/.sops.yaml
rename to templates/server/.sops.yaml
diff --git a/templates/numbus-server/custom-configuration.nix b/templates/server/custom-configuration.nix
similarity index 100%
rename from templates/numbus-server/custom-configuration.nix
rename to templates/server/custom-configuration.nix
diff --git a/templates/numbus-server/flake.nix b/templates/server/flake.nix
similarity index 100%
rename from templates/numbus-server/flake.nix
rename to templates/server/flake.nix
diff --git a/templates/numbus-server/numbus-generated.nix b/templates/server/numbus-generated.nix
similarity index 100%
rename from templates/numbus-server/numbus-generated.nix
rename to templates/server/numbus-generated.nix
diff --git a/templates/numbus-server/secrets/disks/boot.yaml b/templates/server/secrets/disks/boot.yaml
similarity index 100%
rename from templates/numbus-server/secrets/disks/boot.yaml
rename to templates/server/secrets/disks/boot.yaml
diff --git a/templates/numbus-server/secrets/disks/content.yaml b/templates/server/secrets/disks/content.yaml
similarity index 100%
rename from templates/numbus-server/secrets/disks/content.yaml
rename to templates/server/secrets/disks/content.yaml
diff --git a/templates/numbus-server/secrets/disks/parity.yaml b/templates/server/secrets/disks/parity.yaml
similarity index 100%
rename from templates/numbus-server/secrets/disks/parity.yaml
rename to templates/server/secrets/disks/parity.yaml
diff --git a/templates/numbus-server/secrets/podman/adguard.yaml b/templates/server/secrets/podman/adguard.yaml
similarity index 100%
rename from templates/numbus-server/secrets/podman/adguard.yaml
rename to templates/server/secrets/podman/adguard.yaml
diff --git a/templates/numbus-server/secrets/podman/authelia.yaml b/templates/server/secrets/podman/authelia.yaml
similarity index 100%
rename from templates/numbus-server/secrets/podman/authelia.yaml
rename to templates/server/secrets/podman/authelia.yaml
diff --git a/templates/numbus-server/secrets/podman/crafty.yaml b/templates/server/secrets/podman/crafty.yaml
similarity index 100%
rename from templates/numbus-server/secrets/podman/crafty.yaml
rename to templates/server/secrets/podman/crafty.yaml
diff --git a/templates/numbus-server/secrets/podman/dashy.yaml b/templates/server/secrets/podman/dashy.yaml
similarity index 100%
rename from templates/numbus-server/secrets/podman/dashy.yaml
rename to templates/server/secrets/podman/dashy.yaml
diff --git a/templates/numbus-server/secrets/podman/frigate.yaml b/templates/server/secrets/podman/frigate.yaml
similarity index 100%
rename from templates/numbus-server/secrets/podman/frigate.yaml
rename to templates/server/secrets/podman/frigate.yaml
diff --git a/templates/numbus-server/secrets/podman/gitea.yaml b/templates/server/secrets/podman/gitea.yaml
similarity index 100%
rename from templates/numbus-server/secrets/podman/gitea.yaml
rename to templates/server/secrets/podman/gitea.yaml
diff --git a/templates/numbus-server/secrets/podman/gitlab.yaml b/templates/server/secrets/podman/gitlab.yaml
similarity index 100%
rename from templates/numbus-server/secrets/podman/gitlab.yaml
rename to templates/server/secrets/podman/gitlab.yaml
diff --git a/templates/numbus-server/secrets/podman/home-assistant.yaml b/templates/server/secrets/podman/home-assistant.yaml
similarity index 100%
rename from templates/numbus-server/secrets/podman/home-assistant.yaml
rename to templates/server/secrets/podman/home-assistant.yaml
diff --git a/templates/numbus-server/secrets/podman/homepage.yaml b/templates/server/secrets/podman/homepage.yaml
similarity index 100%
rename from templates/numbus-server/secrets/podman/homepage.yaml
rename to templates/server/secrets/podman/homepage.yaml
diff --git a/templates/numbus-server/secrets/podman/immich.yaml b/templates/server/secrets/podman/immich.yaml
similarity index 100%
rename from templates/numbus-server/secrets/podman/immich.yaml
rename to templates/server/secrets/podman/immich.yaml
diff --git a/templates/numbus-server/secrets/podman/it-tools.yaml b/templates/server/secrets/podman/it-tools.yaml
similarity index 100%
rename from templates/numbus-server/secrets/podman/it-tools.yaml
rename to templates/server/secrets/podman/it-tools.yaml
diff --git a/templates/numbus-server/secrets/podman/jellyfin.yaml b/templates/server/secrets/podman/jellyfin.yaml
similarity index 100%
rename from templates/numbus-server/secrets/podman/jellyfin.yaml
rename to templates/server/secrets/podman/jellyfin.yaml
diff --git a/templates/numbus-server/secrets/podman/lldap.yaml b/templates/server/secrets/podman/lldap.yaml
similarity index 100%
rename from templates/numbus-server/secrets/podman/lldap.yaml
rename to templates/server/secrets/podman/lldap.yaml
diff --git a/templates/numbus-server/secrets/podman/n8n.yaml b/templates/server/secrets/podman/n8n.yaml
similarity index 100%
rename from templates/numbus-server/secrets/podman/n8n.yaml
rename to templates/server/secrets/podman/n8n.yaml
diff --git a/templates/numbus-server/secrets/podman/netbird.yaml b/templates/server/secrets/podman/netbird.yaml
similarity index 100%
rename from templates/numbus-server/secrets/podman/netbird.yaml
rename to templates/server/secrets/podman/netbird.yaml
diff --git a/templates/numbus-server/secrets/podman/netbootxyz.yaml b/templates/server/secrets/podman/netbootxyz.yaml
similarity index 100%
rename from templates/numbus-server/secrets/podman/netbootxyz.yaml
rename to templates/server/secrets/podman/netbootxyz.yaml
diff --git a/templates/numbus-server/secrets/podman/netbox.yaml b/templates/server/secrets/podman/netbox.yaml
similarity index 100%
rename from templates/numbus-server/secrets/podman/netbox.yaml
rename to templates/server/secrets/podman/netbox.yaml
diff --git a/templates/numbus-server/secrets/podman/nextcloud.yaml b/templates/server/secrets/podman/nextcloud.yaml
similarity index 100%
rename from templates/numbus-server/secrets/podman/nextcloud.yaml
rename to templates/server/secrets/podman/nextcloud.yaml
diff --git a/templates/numbus-server/secrets/podman/ntfy.yaml b/templates/server/secrets/podman/ntfy.yaml
similarity index 100%
rename from templates/numbus-server/secrets/podman/ntfy.yaml
rename to templates/server/secrets/podman/ntfy.yaml
diff --git a/templates/numbus-server/secrets/podman/odoo.yaml b/templates/server/secrets/podman/odoo.yaml
similarity index 100%
rename from templates/numbus-server/secrets/podman/odoo.yaml
rename to templates/server/secrets/podman/odoo.yaml
diff --git a/templates/numbus-server/secrets/podman/passbolt.yaml b/templates/server/secrets/podman/passbolt.yaml
similarity index 100%
rename from templates/numbus-server/secrets/podman/passbolt.yaml
rename to templates/server/secrets/podman/passbolt.yaml
diff --git a/templates/numbus-server/secrets/podman/pi-hole.yaml b/templates/server/secrets/podman/pi-hole.yaml
similarity index 100%
rename from templates/numbus-server/secrets/podman/pi-hole.yaml
rename to templates/server/secrets/podman/pi-hole.yaml
diff --git a/templates/numbus-server/secrets/podman/traefik.yaml b/templates/server/secrets/podman/traefik.yaml
similarity index 100%
rename from templates/numbus-server/secrets/podman/traefik.yaml
rename to templates/server/secrets/podman/traefik.yaml
diff --git a/templates/numbus-server/secrets/podman/uptime-kuma.yaml b/templates/server/secrets/podman/uptime-kuma.yaml
similarity index 100%
rename from templates/numbus-server/secrets/podman/uptime-kuma.yaml
rename to templates/server/secrets/podman/uptime-kuma.yaml
diff --git a/templates/numbus-server/secrets/podman/vscodium.yaml b/templates/server/secrets/podman/vscodium.yaml
similarity index 100%
rename from templates/numbus-server/secrets/podman/vscodium.yaml
rename to templates/server/secrets/podman/vscodium.yaml
diff --git a/templates/numbus-server/secrets/system/backup-client.yaml b/templates/server/secrets/system/backup-client.yaml
similarity index 100%
rename from templates/numbus-server/secrets/system/backup-client.yaml
rename to templates/server/secrets/system/backup-client.yaml
diff --git a/templates/numbus-server/secrets/system/clamav.yaml b/templates/server/secrets/system/clamav.yaml
similarity index 100%
rename from templates/numbus-server/secrets/system/clamav.yaml
rename to templates/server/secrets/system/clamav.yaml
diff --git a/templates/numbus-server/secrets/system/mail.yaml b/templates/server/secrets/system/mail.yaml
similarity index 100%
rename from templates/numbus-server/secrets/system/mail.yaml
rename to templates/server/secrets/system/mail.yaml
diff --git a/templates/numbus-server/secrets/system/ssh.yaml b/templates/server/secrets/system/ssh.yaml
similarity index 100%
rename from templates/numbus-server/secrets/system/ssh.yaml
rename to templates/server/secrets/system/ssh.yaml
diff --git a/templates/numbus-server/secrets/system/virtualization.yaml b/templates/server/secrets/system/virtualization.yaml
similarity index 100%
rename from templates/numbus-server/secrets/system/virtualization.yaml
rename to templates/server/secrets/system/virtualization.yaml
diff --git a/templates/numbus-tv/configuration.nix b/templates/tv/configuration.nix
similarity index 100%
rename from templates/numbus-tv/configuration.nix
rename to templates/tv/configuration.nix
diff --git a/templates/numbus-tv/flake.nix b/templates/tv/flake.nix
similarity index 100%
rename from templates/numbus-tv/flake.nix
rename to templates/tv/flake.nix
diff --git a/templates/numbus-tv/sops-nix/.sops.yaml b/templates/tv/sops-nix/.sops.yaml
similarity index 100%
rename from templates/numbus-tv/sops-nix/.sops.yaml
rename to templates/tv/sops-nix/.sops.yaml
diff --git a/templates/numbus-tv/sops-nix/secrets.yaml b/templates/tv/sops-nix/secrets.yaml
similarity index 100%
rename from templates/numbus-tv/sops-nix/secrets.yaml
rename to templates/tv/sops-nix/secrets.yaml

From 24f62ec057564221d061f45de16994786dea4ede Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <raphael@numbus.eu>
Date: Fri, 15 May 2026 10:02:29 +0200
Subject: [PATCH 43/43] Lots of changes to the directories organisation, more
 work needed.

---
 .gitignore                                    |    2 +-
 deploy/GUI/web/ux/buttons.md                  |   22 -
 deploy/GUI/web/ux/color_palette.md            |   10 -
 deploy/GUI/web/ux/css_guidelines.md           |    8 -
 deploy/GUI/web/ux/text.md                     |   43 -
 flake.nix                                     |   17 +-
 modules/backup/hardware/boot.nix              |   13 -
 modules/backup/hardware/cpu.nix               |    9 -
 modules/backup/hardware/default.nix           |   10 -
 modules/backup/hardware/disks.nix             |  328 ------
 modules/backup/hardware/spindown.nix          |   24 -
 modules/backup/mail/clamav.nix                |   89 --
 modules/backup/mail/default.nix               |   10 -
 modules/backup/mail/smart.nix                 |   61 -
 modules/backup/mail/smtp.nix                  |   84 --
 modules/backup/mail/systemd.nix               |   55 -
 modules/backup/misc/default.nix               |   10 -
 modules/backup/misc/internationalisation.nix  |   24 -
 modules/backup/misc/power.nix                 |   30 -
 modules/backup/misc/update.nix                |   23 -
 modules/backup/misc/users.nix                 |   16 -
 modules/common/hardware/boot-params.nix       |   31 +
 modules/common/hardware/default.nix           |    2 +
 .../hardware/graphics.nix}                    |    7 +-
 .../hardware/pcie-coral.nix                   |    6 +-
 modules/{server => common}/mail/clamav.nix    |    0
 modules/{server => common}/mail/systemd.nix   |    0
 modules/common/web/cockpit-numbus/cockpit.nix |   28 +
 .../common/web/default.nix                    |    0
 modules/computer/hardware/boot.nix            |   24 -
 modules/computer/hardware/cpu.nix             |    9 -
 modules/computer/hardware/default.nix         |   10 -
 modules/computer/hardware/disks.nix           |  328 ------
 .../console/default.nix                       |    0
 modules/server/hardware/boot.nix              |   11 -
 modules/server/hardware/default.nix           |   12 -
 modules/server/hardware/pcie-coral.nix        |  111 --
 modules/server/mail/default.nix               |   12 -
 modules/server/networking/networking.nix      |    6 +-
 .../{packages.nix => default-packages.nix}    |   21 +-
 modules/server/packages/default.nix           |    2 -
 deploy/TUI/deploy.sh => script/deploy bak.sh  |    0
 script/deploy.sh                              | 1036 +++++++++++++++++
 script/terminology.md                         |    6 +
 {deploy/GUI/web => web}/index.html            |    0
 web/logic/interactive.py                      |   55 +
 .../bridge.py => web/logic/non-interactive.py |    0
 .../media/dark/numbus-backup-server-dark.svg  |    0
 .../media/dark/numbus-computer-dark.svg       |    0
 .../media/dark/numbus-server-dark.svg         |    0
 .../media/dark/numbus-template-dark.svg       |    0
 .../web => web}/media/dark/numbus-tv-dark.svg |    0
 {deploy/GUI/web => web}/media/favicon.ico     |  Bin
 .../light/numbus-backup-server-light.svg      |    0
 .../media/light/numbus-computer-light.svg     |    0
 .../media/light/numbus-server-light.svg       |    0
 .../media/light/numbus-template-light.svg     |    0
 .../media/light/numbus-tv-light.svg           |    0
 {deploy/GUI/web => web}/media/logo.png        |  Bin
 .../GUI/web => web}/pages/configuration.html  |    0
 web/pages/installation.html                   |    0
 web/pages/post-installation.html              |    0
 .../GUI/web => web}/pages/preparation.html    |    0
 63 files changed, 1193 insertions(+), 1412 deletions(-)
 delete mode 100644 deploy/GUI/web/ux/buttons.md
 delete mode 100644 deploy/GUI/web/ux/color_palette.md
 delete mode 100644 deploy/GUI/web/ux/css_guidelines.md
 delete mode 100644 deploy/GUI/web/ux/text.md
 delete mode 100644 modules/backup/hardware/boot.nix
 delete mode 100644 modules/backup/hardware/cpu.nix
 delete mode 100644 modules/backup/hardware/default.nix
 delete mode 100644 modules/backup/hardware/disks.nix
 delete mode 100644 modules/backup/hardware/spindown.nix
 delete mode 100644 modules/backup/mail/clamav.nix
 delete mode 100644 modules/backup/mail/default.nix
 delete mode 100644 modules/backup/mail/smart.nix
 delete mode 100644 modules/backup/mail/smtp.nix
 delete mode 100644 modules/backup/mail/systemd.nix
 delete mode 100644 modules/backup/misc/default.nix
 delete mode 100644 modules/backup/misc/internationalisation.nix
 delete mode 100644 modules/backup/misc/power.nix
 delete mode 100644 modules/backup/misc/update.nix
 delete mode 100644 modules/backup/misc/users.nix
 create mode 100644 modules/common/hardware/boot-params.nix
 rename modules/{computer/hardware/nvidia.nix => common/hardware/graphics.nix} (91%)
 rename modules/{backup => common}/hardware/pcie-coral.nix (96%)
 rename modules/{server => common}/mail/clamav.nix (100%)
 rename modules/{server => common}/mail/systemd.nix (100%)
 create mode 100644 modules/common/web/cockpit-numbus/cockpit.nix
 rename deploy/GUI/web/pages/installation.html => modules/common/web/default.nix (100%)
 delete mode 100644 modules/computer/hardware/boot.nix
 delete mode 100644 modules/computer/hardware/cpu.nix
 delete mode 100644 modules/computer/hardware/default.nix
 delete mode 100644 modules/computer/hardware/disks.nix
 rename deploy/GUI/web/pages/post-installation.html => modules/console/default.nix (100%)
 delete mode 100644 modules/server/hardware/boot.nix
 delete mode 100644 modules/server/hardware/default.nix
 delete mode 100644 modules/server/hardware/pcie-coral.nix
 delete mode 100644 modules/server/mail/default.nix
 rename modules/server/packages/{packages.nix => default-packages.nix} (72%)
 rename deploy/TUI/deploy.sh => script/deploy bak.sh (100%)
 create mode 100755 script/deploy.sh
 create mode 100644 script/terminology.md
 rename {deploy/GUI/web => web}/index.html (100%)
 create mode 100644 web/logic/interactive.py
 rename deploy/GUI/web/logic/bridge.py => web/logic/non-interactive.py (100%)
 rename {deploy/GUI/web => web}/media/dark/numbus-backup-server-dark.svg (100%)
 rename {deploy/GUI/web => web}/media/dark/numbus-computer-dark.svg (100%)
 rename {deploy/GUI/web => web}/media/dark/numbus-server-dark.svg (100%)
 rename {deploy/GUI/web => web}/media/dark/numbus-template-dark.svg (100%)
 rename {deploy/GUI/web => web}/media/dark/numbus-tv-dark.svg (100%)
 rename {deploy/GUI/web => web}/media/favicon.ico (100%)
 rename {deploy/GUI/web => web}/media/light/numbus-backup-server-light.svg (100%)
 rename {deploy/GUI/web => web}/media/light/numbus-computer-light.svg (100%)
 rename {deploy/GUI/web => web}/media/light/numbus-server-light.svg (100%)
 rename {deploy/GUI/web => web}/media/light/numbus-template-light.svg (100%)
 rename {deploy/GUI/web => web}/media/light/numbus-tv-light.svg (100%)
 rename {deploy/GUI/web => web}/media/logo.png (100%)
 rename {deploy/GUI/web => web}/pages/configuration.html (100%)
 create mode 100644 web/pages/installation.html
 create mode 100644 web/pages/post-installation.html
 rename {deploy/GUI/web => web}/pages/preparation.html (100%)

diff --git a/.gitignore b/.gitignore
index 213602f..db879a2 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,4 +1,4 @@
-config/
+/config/
 web/ux/
 test*
 .DS_Store
diff --git a/deploy/GUI/web/ux/buttons.md b/deploy/GUI/web/ux/buttons.md
deleted file mode 100644
index f26c0bd..0000000
--- a/deploy/GUI/web/ux/buttons.md
+++ /dev/null
@@ -1,22 +0,0 @@
-# Buttons
-
-1. Button with :
-- an offset ring on focus
-- a small shadow
-- a nice transition
-- a disabled feature
-
-```html
-px-10 py-3 bg-fuchsia-600 rounded-xl font-bold shadow-lg shadow-fuchsia-600/30 transition duration-200 hover:bg-fuchsia-500 focus:outline-none focus:ring-2 focus:ring-fuchsia-500 focus:ring-offset-2 focus:ring-offset-slate-700 disabled:opacity-50 disabled:cursor-not-allowed
-```
-
-2. Button with :
-- a grow transformation on hover
-- a gradient
-- a small shadow
-- a nice transition
-- a disabled feature
-
-```html
-px-10 py-3 text-white font-bold rounded-xl scale-100 transition duration-200 ease-in bg-gradient-to-r from-fuchsia-500 via-fuchsia-600 to-fuchsia-700 hover:scale-105 hover:bg-gradient-to-br shadow-lg shadow-fuchsia-500/30 dark:shadow-lg dark:shadow-fuchsia-800/80 disabled:opacity-50 disabled:cursor-not-allowed
-```
\ No newline at end of file
diff --git a/deploy/GUI/web/ux/color_palette.md b/deploy/GUI/web/ux/color_palette.md
deleted file mode 100644
index bf8b63d..0000000
--- a/deploy/GUI/web/ux/color_palette.md
+++ /dev/null
@@ -1,10 +0,0 @@
-# Color palette
-
-|Usage|Name|Tailwind code|Matching border|
-|-|-|-|-|
-|Body background|Slate|slate-900|N/A|
-|Cards Background|Slate|slate-800|slate-700|
-|Accent|Fuchsia|fuchsia-600|fuchsia-600
-|Warning|Amber|amber-500|amber-400|
-|Success|Emerald|emerald-500|emerald-400|
-|Failure|Rose|rose-600|rose-500|
\ No newline at end of file
diff --git a/deploy/GUI/web/ux/css_guidelines.md b/deploy/GUI/web/ux/css_guidelines.md
deleted file mode 100644
index da251a5..0000000
--- a/deploy/GUI/web/ux/css_guidelines.md
+++ /dev/null
@@ -1,8 +0,0 @@
-# Guidelines
-
-|Type|Importance|Classes|
-|-|-|-|
-|Title|1|text-4xl font-bold text-sky-400|
-|Title|2|text-4xl font-bold text-sky-400|
-|Title|3|text-4xl font-bold text-sky-400|
-|Title|4|text-4xl font-bold text-sky-400|
\ No newline at end of file
diff --git a/deploy/GUI/web/ux/text.md b/deploy/GUI/web/ux/text.md
deleted file mode 100644
index 3175b65..0000000
--- a/deploy/GUI/web/ux/text.md
+++ /dev/null
@@ -1,43 +0,0 @@
-# Taglines, subtitles and descriptions
-
-## Global
-
-**Tagline :** Reclaim Your Digital Independence.
-
-## Devices
-
-### Numbus Server
-The Infrastructure
-
-**Tagline :** Reclaim Your Cloud.
-
-**Subtitle :** Professional-grade hosting, strictly kept under your roof.
-
-**Detailed Description :** The Numbus Server is the heartbeat of your digital sovereignty. Built on an immutable NixOS foundation, it provides a rock-solid environment to host the services you rely on—from Nextcloud and Passbolt to Home Assistant and Frigate. Whether you are a small business looking to internalize your data or a power user securing your smart home, the Numbus Server delivers containerized efficiency and VM flexibility without the "Big Tech" tax. It’s not just a server; it’s your private corner of the internet, accessible from anywhere but controlled only by you.
-
-### Numbus Backup Server
-The Guardian
-
-**Tagline :** Your Digital Safety Net.
-
-**Subtitle :** Automated, high-efficiency protection for your entire ecosystem.
-
-**Detailed Description :** Data loss and downtime aren't just frustrating; they're disastrous. The Numbus Backup Server is your ecosystem's ultimate guardian. It works silently in the background, automatically pulling high-efficiency backups from your Numbus devices the moment they start charging. But it does more than just store files—it actively acts as a watchdog. By constantly monitoring your Numbus Server and other critical network devices, it immediately alerts you the second something goes offline. It is automated peace of mind for your entire digital infrastructure.
-
-### Numbus Computer
-The Workstation
-
-**Tagline :** The No-Bullshit Workstation.
-
-**Subtitle :** A modern, privacy-respecting machine built for work, creation, and play — without the corporate bloat.
-
-**Description :** Experience computing the way it was meant to be: entirely under your control. The Numbus Computer is a powerful workstation that strips away unwanted telemetry, forced updates, and bundled adware. Under the hood, it harnesses the unparalleled stability of NixOS, but we've hidden the complexity behind a sleek, intuitive interface. Our default apps make managing drivers, software, and system options a breeze. Whether you are coding, browsing, or gaming via Proton, the Numbus Computer delivers a snappy, secure, and truly "libre" desktop experience that respects your privacy while delivering the raw power of the hardware you paid for.
-
-### Numbus TV
-The Experience
-
-**Tagline :** Entertainment, Liberated.
-
-**Subtitle :** A premium cinematic experience free from trackers and forced subscriptions.
-
-**Detailed Description :** The Numbus TV reclaims your living room. Unlike "Smart" TVs that have essentially become surveillance machines and clutter your screen with unwanted ads, the Numbus TV offers a clean, classy interface powered by KDE Bigscreen. It’s a full-power PC in a TV’s body, allowing you to stream, browse, and play on your own terms. It doesn't force you into a specific ecosystem; it simply provides a beautiful, privacy-hardened portal to your favorite media. No spying, no "walled gardens"—just the big screen experience, perfected.
\ No newline at end of file
diff --git a/flake.nix b/flake.nix
index ad30c1b..d1a4772 100644
--- a/flake.nix
+++ b/flake.nix
@@ -36,11 +36,12 @@
       };
     in {
       nixosModules = {
-        common = ./modules/common;
-        server = ./modules/server;
-        backup = ./modules/backup;
-        computer = ./modules/computer;
-        tv = ./modules/tv;
+        common = ./modules/common/default.nix;
+        server = ./modules/server/default.nix;
+        backup = ./modules/backup/default.nix;
+        console = ./modules/console/default.nix;
+        computer = ./modules/computer/default.nix;
+        tv = ./modules/tv/default.nix;
       };
 
       nixosConfigurations = {
@@ -63,6 +64,12 @@
           deviceType = "computer";
         };
 
+        numbus-console = mkNumbus {
+          deviceModule = self.nixosModules.console;
+          nixpkgsRef = inputs.nixpkgs;
+          deviceType = "console";
+        };
+
         numbus-tv = mkNumbus {
           deviceModule = self.nixosModules.tv;
           nixpkgsRef = inputs.nixpkgs;
diff --git a/modules/backup/hardware/boot.nix b/modules/backup/hardware/boot.nix
deleted file mode 100644
index 86de227..0000000
--- a/modules/backup/hardware/boot.nix
+++ /dev/null
@@ -1,13 +0,0 @@
-{ config, ... }:
-
-{
-  config = {
-    boot.initrd.systemd.enable = true;
-    boot.loader.systemd-boot.enable = true;
-    boot.loader.efi.canTouchEfiVariables = true;
-
-    boot.kernel.sysctl = {
-      "vm.overcommit_memory" = 1;
-    };
-  };
-}
\ No newline at end of file
diff --git a/modules/backup/hardware/cpu.nix b/modules/backup/hardware/cpu.nix
deleted file mode 100644
index d3fe470..0000000
--- a/modules/backup/hardware/cpu.nix
+++ /dev/null
@@ -1,9 +0,0 @@
-{ config, ... }:
-
-{
-  config = {
-    hardware.enableRedistributableFirmware = true;
-    hardware.cpu.intel.updateMicrocode = true;
-    hardware.cpu.amd.updateMicrocode = true;
-  };
-}
\ No newline at end of file
diff --git a/modules/backup/hardware/default.nix b/modules/backup/hardware/default.nix
deleted file mode 100644
index 8a652d9..0000000
--- a/modules/backup/hardware/default.nix
+++ /dev/null
@@ -1,10 +0,0 @@
-{ ... }:
-
-{
-  imports = [
-    ./boot.nix
-    ./cpu.nix
-    ./disks.nix
-    ./pcie-coral.nix
-  ];
-}
\ No newline at end of file
diff --git a/modules/backup/hardware/disks.nix b/modules/backup/hardware/disks.nix
deleted file mode 100644
index 6e1acee..0000000
--- a/modules/backup/hardware/disks.nix
+++ /dev/null
@@ -1,328 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-with lib;
-
-let
-  cfg = config.numbus.hardware;
-
-  mkDataDisk = idx: device: {
-    name = "content-${toString idx}";
-    value = {
-      type = "disk";
-      device = device;
-      content = {
-        type = "gpt";
-        partitions = {
-          luks = {
-            size = "100%";
-            content = {
-              type = "luks";
-              name = "crypted-content-${toString idx}";
-              initrdUnlock = false;
-              settings = {
-                keyFile = "/etc/secrets/disks/content-${toString idx}";
-                allowDiscards = true;
-                crypttabExtraOpts = [ "nofail" ];
-              };
-              content = {
-                type = "filesystem";
-                format = cfg.dataDisksFilesystem;
-                mountpoint = "/mnt/content-${toString idx}";
-                mountOptions = [ "nofail" "noauto" ];
-              };
-            };
-          };
-        };
-      };
-    };
-  };
-
-  mkParityDisk = idx: device: {
-    name = "parity-${toString idx}";
-    value = {
-      type = "disk";
-      device = device;
-      content = {
-        type = "gpt";
-        partitions = {
-          luks = {
-            size = "100%";
-            content = {
-              type = "luks";
-              name = "crypted-parity-${toString idx}";
-              initrdUnlock = false;
-              settings = {
-                keyFile = "/etc/secrets/disks/parity-${toString idx}";
-                allowDiscards = true;
-                crypttabExtraOpts = [ "nofail" ];
-              };
-              content = {
-                type = "filesystem";
-                format = cfg.parityDisksFilesystem;
-                mountpoint = "/mnt/parity-${toString idx}";
-                mountOptions = [ "nofail" "noauto" ];
-              };
-            };
-          };
-        };
-      };
-    };
-  };
-
-  isMirror = length cfg.bootDisksList > 1;
-
-  bootDisksConfig = if isMirror then {
-    mdadm = {
-      boot = {
-        type = "mdadm";
-        level = 1;
-        metadata = "1.2";
-        content = {
-          type = "filesystem";
-          format = "vfat";
-          mountpoint = "/boot";
-          mountOptions = [ "umask=0077" ];
-        };
-      };
-    };
-    disk = listToAttrs (imap1 (i: device: {
-      name = "boot-${toString i}";
-      value = {
-        type = "disk";
-        device = device;
-        content = {
-          type = "gpt";
-          partitions = {
-            ESP = {
-              size = "1G";
-              type = "EF00";
-              content = {
-                type = "mdraid";
-                name = "boot";
-              };
-            };
-            luks = {
-              size = "100%";
-              content = {
-                type = "luks";
-                name = "crypted-boot-${toString i}";
-                settings = {
-                  allowDiscards = true;
-                  keyFile = "/etc/secrets/disks/boot-${toString i}";
-                };
-                content = {
-                  type = "lvm_pv";
-                  vg = "pool";
-                };
-              };
-            };
-          };
-        };
-      };
-    }) cfg.bootDisksList);
-  } else {
-    disk = {
-      "boot-1" = {
-        type = "disk";
-        device = head cfg.bootDisksList;
-        content = {
-          type = "gpt";
-          partitions = {
-            ESP = {
-              size = "1G";
-              type = "EF00";
-              content = {
-                type = "filesystem";
-                format = "vfat";
-                mountpoint = "/boot";
-                mountOptions = [ "umask=0077" ];
-              };
-            };
-            luks = {
-              size = "100%";
-              content = {
-                type = "luks";
-                name = "crypted-boot-1";
-                settings = {
-                  keyFile = "/etc/secrets/disks/boot-1";
-                  allowDiscards = true;
-                };
-                content = {
-                  type = "lvm_pv";
-                  vg = "pool";
-                };
-              };
-            };
-          };
-        };
-      };
-    };
-  };
-
-  lvmConfig = {
-    lvm_vg = {
-      pool = {
-        type = "lvm_vg";
-        lvs = {
-          swap = {
-            size = cfg.swapSize;
-            content = {
-              type = "swap";
-            };
-          } // optionalAttrs isMirror { lvm_type = "mirror"; };
-          snapraid = {
-            size = "1G";
-            content = {
-              type = "filesystem";
-              format = "btrfs";
-              mountpoint = "/mnt/content-0";
-            };
-          } // optionalAttrs isMirror { lvm_type = "mirror"; };
-          root = {
-            size = "100%";
-            content = {
-              type = "btrfs";
-              extraArgs = [ "-f" ];
-              subvolumes = {
-                "/rootfs" = {
-                  mountpoint = "/";
-                  mountOptions = [ "compress=zstd" "noatime" ];
-                };
-                "/home" = {
-                  mountpoint = "/home";
-                  mountOptions = [ "compress=zstd" ];
-                };
-                "/nix" = {
-                  mountpoint = "/nix";
-                  mountOptions = [ "compress=zstd" "noatime" ];
-                };
-              };
-            };
-          } // optionalAttrs isMirror { lvm_type = "mirror"; };
-        };
-      };
-    };
-  };
-
-in
-{
-  options.numbus.hardware = {
-    dataDisksList = mkOption {
-      type = types.listOf types.str;
-      default = [];
-      example = [ "/dev/disk/by-id/WD_Blue_ATO431_159Ejz224G0000382b" "/dev/disk/by-id/Seagate_Barracuda_159Ejz224G" ];
-      description = "List by-id path of devices for data disks";
-    };
-    parityDisksList = mkOption {
-      type = types.listOf types.str;
-      default = [];
-      example = [ "/dev/disk/by-id/WD_Blue_ATO431_159Ejz224G0000382b" "/dev/disk/by-id/Seagate_Barracuda_159Ejz224G" ];
-      description = "List of by-id path of devices for parity disks";
-    };
-    bootDisksList = mkOption {
-      type = types.listOf types.str;
-      default = [];
-      example = [ "/dev/disk/by-id/nvme_SAMSUNG_MZVPYEHCO_159Ejz224G0000" "/dev/disk/by-id/ata-San_Disk_159Ejz224G" ];
-      description = "List of by-id path of devices for boot disks";
-    };
-    spindownDisksList = mkOption {
-      type = types.listOf types.str;
-      default = [];
-      example = [ "/dev/disk/by-id/WD_Blue_ATO431_159Ejz224G0000382b" "/dev/disk/by-id/Seagate_Barracuda_159Ejz224G" ];
-      description = "List of by-id path of devices to spindown when inactive to save power (HDD only)";
-    };
-    swapSize = mkOption {
-      type = types.str;
-      default = "16G";
-      example = "16G";
-      description = "Size of the swap partition";
-    };
-    dataDisksFilesystem = mkOption {
-      type = types.enum [ "xfs" "ext4" "btrfs" ];
-      default = "xfs";
-      example = "xfs";
-      description = "Filesystem for data disks. Available filesystem options : xfs, ext4, btrfs";
-    };
-    parityDisksFilesystem = mkOption {
-      type = types.enum [ "xfs" "ext4" "btrfs" ];
-      default = "xfs";
-      example = "xfs";
-      description = "Filesystem for parity disks. Available filesystem options : xfs, ext4, btrfs";
-    };
-  };
-
-  config = mkIf (cfg.bootDisksList != []) {
-    disko.devices = mkMerge [
-      bootDisksConfig
-      lvmConfig
-      {
-        disk = listToAttrs (imap1 mkDataDisk cfg.dataDisksList);
-      }
-      {
-        disk = listToAttrs (imap1 mkParityDisk cfg.parityDisksList);
-      }
-    ];
-
-    services.snapraid = {
-      enable = true;
-      contentFiles = [ "/mnt/content-0/snapraid.content" ] ++
-        (map (i: "/mnt/content-${toString i}/snapraid.content") (range 1 (length cfg.dataDisksList)));
-      parityFiles = map (i: "/mnt/parity-${toString i}/snapraid.parity") (range 1 (length cfg.parityDisksList));
-      dataDisks = listToAttrs (imap1 (i: _: nameValuePair "d${toString i}" "/mnt/content-${toString i}") cfg.dataDisksList);
-    };
-
-    fileSystems."/mnt/data" = {
-      device = "/mnt/content-*";
-      fsType = "fuse.mergerfs";
-      options = [
-        "category.create=ff"
-        "cache.files=partial"
-        "dropcacheonclose=true"
-        "defaults"
-        "noauto"
-        "nofail"
-        "allow_other"
-        "moveonenospc=1"
-        "minfreespace=50G"
-        "func.getattr=newest"
-        "fsname=mergerfs_data"
-        "x-mount.mkdir"
-        "x-systemd.automount"
-      ];
-    };
-
-    systemd.services.mount-disks = {
-      description = "Mount data and parity disks";
-      before = [ "mnt-data.mount" ];
-      requiredBy = [ "mnt-data.mount" ];
-      path = [ pkgs.cryptsetup pkgs.util-linux ];
-      serviceConfig = {
-        Type = "oneshot";
-        RemainAfterExit = true;
-      };
-      script = let
-        mountDataDisk = i: ''
-          if [ ! -e /dev/mapper/crypted-content-${toString i} ]; then
-            cryptsetup luksOpen --key-file /etc/secrets/disks/content-${toString i} /dev/disk/by-partlabel/disk-content-${toString i}-luks crypted-content-${toString i}
-          fi
-          mkdir -p /mnt/content-${toString i}
-          if ! mountpoint -q /mnt/content-${toString i}; then
-            mount -t ${cfg.dataDisksFilesystem} /dev/mapper/crypted-content-${toString i} /mnt/content-${toString i}
-          fi
-        '';
-        mountParityDisk = i: ''
-          if [ ! -e /dev/mapper/crypted-parity-${toString i} ]; then
-            cryptsetup luksOpen --key-file /etc/secrets/disks/parity-${toString i} /dev/disk/by-partlabel/disk-parity-${toString i}-luks crypted-parity-${toString i}
-          fi
-          mkdir -p /mnt/parity-${toString i}
-          if ! mountpoint -q /mnt/parity-${toString i}; then
-            mount -t ${cfg.parityDisksFilesystem} /dev/mapper/crypted-parity-${toString i} /mnt/parity-${toString i}
-          fi
-        '';
-      in ''
-        ${concatMapStrings mountDataDisk (range 1 (length cfg.dataDisksList))}
-        ${concatMapStrings mountParityDisk (range 1 (length cfg.parityDisksList))}
-      '';
-    };
-  };
-}
\ No newline at end of file
diff --git a/modules/backup/hardware/spindown.nix b/modules/backup/hardware/spindown.nix
deleted file mode 100644
index 219d113..0000000
--- a/modules/backup/hardware/spindown.nix
+++ /dev/null
@@ -1,24 +0,0 @@
-{ config, lib, ... }:
-
-with lib;
-
-{
-  options.numbus-backup = {
-    hardware = {
-      HddSpindown = {
-        enable = mkOption {
-          description = "Spin down Hard drives when inactive in order to save power.";
-          type = types.bool;
-          example = true;
-          default = true;
-        };
-        optimize = mkOption {
-          description = "Optimize services to reduce HDD wakeups when HddSpindown is enabled. Can be set to \"compatible\" to optimize all compatible services, or a list of service names to optimize.";
-          type = types.nullOr (types.either (types.enum [ "compatible" ]) (types.listOf types.str));
-          default = "compatible";
-          example = "[ \"crafty\" \"gitea\" ]";
-        };
-      };
-    };
-  };
-}
\ No newline at end of file
diff --git a/modules/backup/mail/clamav.nix b/modules/backup/mail/clamav.nix
deleted file mode 100644
index a4c99bc..0000000
--- a/modules/backup/mail/clamav.nix
+++ /dev/null
@@ -1,89 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-with lib;
-
-let
-  cfg = config.numbus.services.clamav;
-  clamav_notifier = pkgs.writeScript "clamav-notify.sh" ''
-    #!${pkgs.bash}/bin/bash
-
-    # Check if triggered by Real-time event (file exists)
-    if [ -f /var/lib/clamav/virus_event.env ]; then
-      source /var/lib/clamav/virus_event.env
-      rm /var/lib/clamav/virus_event.env
-    fi
-
-    ADMIN_EMAIL="${config.numbus.mail.adminAddress}"
-    USER_EMAIL="${config.numbus.mail.userAddress}"
-    OWNER_NAME="${config.numbus.owner}"
-
-    if [ -n "$CLAM_VIRUSEVENT_VIRUSNAME" ]; then
-      # --- Real-time / VirusEvent Mode ---
-      SUBJECT="Numbus Server Alert: Virus Detected (Real-time)"
-      
-      # Retrieve logs from clamav-daemon
-      LOGS=$(journalctl -u clamav-daemon.service -n 50 --no-pager | grep "FOUND")
-
-      TECH_BODY="
-      ClamAV Real-time Alert:
-      Server owner: $OWNER_NAME
-      
-      Virus detected: $CLAM_VIRUSEVENT_VIRUSNAME
-      File: $CLAM_VIRUSEVENT_FILENAME
-      
-      Logs:
-      $LOGS
-      
-      Action taken: Access blocked (OnAccessPrevention).
-      Please investigate manually.
-      "
-      
-      FRIENDLY_BODY="Cher/Chère $OWNER_NAME,
-
-      L'antivirus de votre serveur a détecté et bloqué une menace en temps réel.
-      Fichier : $CLAM_VIRUSEVENT_FILENAME
-      
-      Votre administrateur a été notifié.
-      "
-    else
-      # --- Scheduled Scan Summary Mode ---
-      SUBJECT="Numbus Server Alert: Virus Detected during Scheduled Scan"
-      
-      # Retrieve logs (clamdscan prints FOUND when a virus is detected)
-      LOGS=$(journalctl -u clamav-periodic-scan.service -n 100 --no-pager | grep "FOUND")
-      
-      TECH_BODY="
-      ClamAV Scan Alert:
-      Server owner: $OWNER_NAME
-
-      Viruses detected:
-      $LOGS
-
-      Action taken: Detection only.
-      Please investigate manually.
-      "
-      
-      FRIENDLY_BODY="Cher/Chère $OWNER_NAME,
-
-      L'antivirus de votre serveur a détecté une menace potentielle lors de l'analyse périodique.
-      Votre administrateur a été notifié avec les détails techniques.
-      Nous vous conseillons d'être prudent avec vos fichiers récents.
-      "
-    fi
-
-    printf "Subject: [ADMIN] %s\n\n%s" "$SUBJECT" "$TECH_BODY" | /run/wrappers/bin/sendmail -t "$ADMIN_EMAIL"
-    printf "Subject: [Alerte] Menace détectée sur votre serveur Numbus\n\n%s\n\nMerci de votre confiance,\nL'équipe de support,\nNumbus-Server." "$FRIENDLY_BODY" | /run/wrappers/bin/sendmail -t "$USER_EMAIL"
-  '';
-in
-
-{ 
-  config = mkIf cfg.enable {
-    systemd.services.clamav-virus-notify = {
-      description = "Email notification for ClamAV virus detection";
-      serviceConfig = {
-        Type = "oneshot";
-        ExecStart = "${clamav_notifier}";
-      };
-    };
-  };
-}
\ No newline at end of file
diff --git a/modules/backup/mail/default.nix b/modules/backup/mail/default.nix
deleted file mode 100644
index a7af913..0000000
--- a/modules/backup/mail/default.nix
+++ /dev/null
@@ -1,10 +0,0 @@
-{ ... }:
-
-{
-  imports = [
-    ./clamav.nix
-    ./smart.nix
-    ./systemd.nix
-    ./smtp.nix
-  ];
-}
\ No newline at end of file
diff --git a/modules/backup/mail/smart.nix b/modules/backup/mail/smart.nix
deleted file mode 100644
index c84e0ab..0000000
--- a/modules/backup/mail/smart.nix
+++ /dev/null
@@ -1,61 +0,0 @@
-{ config, pkgs, ... }:
-
-let
-  smartd_notifier = pkgs.writeScript "smartd-notify.sh" ''
-    #!${pkgs.bash}/bin/bash
-    
-    # 1. Send Technical Email to Admin
-    ADMIN_EMAIL="${config.numbus.mail.adminAddress}"
-    SUBJECT="Numbus Server Alert: $SMARTD_FAILTYPE on $SMARTD_DEVICE"
-    
-    TECH_BODY="
-    SMARTD Alert Details:
-    Server owner: $OWNER_NAME
-    Device: $SMARTD_DEVICE
-    Type: $SMARTD_DEVICETYPE
-    Failure Type: $SMARTD_FAILTYPE
-    Message: $SMARTD_MESSAGE
-    
-    Full Message:
-    $SMARTD_FULLMESSAGE
-    "
-    printf "Subject: [ADMIN] $SUBJECT\n\n$TECH_BODY" | /run/wrappers/bin/sendmail -t "$ADMIN_EMAIL"
-
-    # 2. Send Friendly Email to Owner
-    USER_EMAIL="${config.numbus.mail.userAddress}"
-    OWNER_NAME="${config.numbus.owner}"
-    
-    FRIENDLY_BODY="Cher/Chère $OWNER_NAME,
-
-    Votre serveur a automatiquement détecté une panne matérielle de disque dur.
-    Ce genre de panne est tout à fait normal selon l'âge de votre matériel et n'entraîne
-    dans la grande majorité des cas aucune perte de données grâce au système de
-    stockage redondant préventif.
-
-    Votre administrateur a été notifié de cette panne. Il vous recontactera dans de très
-    brefs délais afin de procéder au remplacement, si nécessaire, du disque dur défaillant.
-
-    Merci de votre confiance,
-    L'équipe de support,
-    Numbus-Server."
-    
-    printf "Subject: [Alerte] Défaillance matérielle sur votre serveur Numbus\n\n$FRIENDLY_BODY" | /run/wrappers/bin/sendmail -t "$USER_EMAIL"
-  '';
-in
-
-{
-  services.smartd = {
-    enable = true;
-    defaults.autodetected = "-a -o on -S on -s (S/../.././00|L/../../6/01) -n standby,q -M exec ${smartd_notifier}";
-    notifications = {
-      wall = {
-        enable = true;
-      };
-      mail = {
-        enable = true;
-        sender = config.numbus.mail.fromAddress;
-        recipient = "${config.numbus.mail.userAddress},${config.numbus.mail.adminAddress}";
-      };
-    };
-  };
-}
\ No newline at end of file
diff --git a/modules/backup/mail/smtp.nix b/modules/backup/mail/smtp.nix
deleted file mode 100644
index 55b84f5..0000000
--- a/modules/backup/mail/smtp.nix
+++ /dev/null
@@ -1,84 +0,0 @@
-{ config, pkgs, lib, ... }:
-
-with lib;
-
-let
-  cfg = config.numbus.mail;
-in
-
-{
-  options.numbus.mail = {
-    enable = mkEnableOption "Email sending functionality";
-
-    userAddress = mkOption {
-      description = "The address of the user this server will send emails to";
-      type = types.str;
-      example = "user@your-domain.com";
-    };
-
-    adminAddress = mkOption {
-      description = "The address of the admin this server will send emails to";
-      type = types.str;
-      example = "admin@your-domain.com";
-    };
-
-    smtpUsername = mkOption {
-      description = "The username/email that will be use to authenticate to the SMTP server";
-      type = types.str;
-      example = "your-smtp-enabled-address@your-domain.com";
-    };
-
-    smtpPasswordPath = mkOption {
-      description = "The path to a file containing the password that will be use to authenticate to the SMTP server";
-      type = types.path;
-      example = /run/secrets/smtp-password;
-    };
-
-    fromAddress = mkOption {
-      description = "This server will send emails from this address";
-      type = types.str;
-      default = "numbus-server-noreply@${config.numbus.services.domain}";
-      example = "numbus-server-noreply@your-domain.com";
-    };
-
-    smtpServer = mkOption {
-      description = "The SMTP server address your server will use to send emails";
-      type = types.str;
-      default = "smtp.gmail.com";
-      example = "smtp.your-provider.com";
-    };
-
-    smtpPort = mkOption {
-      description = "The SMTP port your server will connect to to send emails";
-      type = types.port;
-      default = 587;
-      example = 587;
-    };
-  };
-
-  config = mkIf cfg.enable {
-    environment.etc."aliases".text = ''
-      root: ${cfg.userAddress}, ${cfg.adminAddress}
-      default: ${cfg.userAddress}, ${cfg.adminAddress}
-    '';
-
-    programs.msmtp = {
-      enable = true;
-      defaults = {
-        aliases = "/etc/aliases";
-        timeout = 60;
-        syslog = "on";
-      };
-      accounts.default = {
-        auth = true;
-        host = cfg.smtpServer;
-        port = cfg.smtpPort;
-        from = cfg.fromAddress;
-        user = cfg.smtpUsername;
-        tls = true;
-        tls_starttls = true;
-        passwordeval = "${pkgs.coreutils}/bin/cat ${cfg.smtpPasswordPath}";
-      };
-    };
-  };
-}
\ No newline at end of file
diff --git a/modules/backup/mail/systemd.nix b/modules/backup/mail/systemd.nix
deleted file mode 100644
index 0b7a566..0000000
--- a/modules/backup/mail/systemd.nix
+++ /dev/null
@@ -1,55 +0,0 @@
-{ config, pkgs, ... }:
-
-let
-  systemd_notifier = pkgs.writeScript "systemd-email-notify.sh" ''
-    #!${pkgs.bash}/bin/bash
-    
-    # The failing service name is passed as the first argument
-    UNIT=$1
-    
-    # 1. Send Technical Email to Admin
-    ADMIN_EMAIL="${config.numbus.mail.adminAddress}"
-    SUBJECT="Numbus Server Alert: Service $UNIT Failed"
-    
-    # Retrieve recent logs for context
-    LOGS=$(journalctl -u "$UNIT" -n 20 --no-pager)
-    
-    TECH_BODY="
-    Systemd Service Failure Alert:
-    Server owner: ${config.numbus.owner}
-    Service: $UNIT
-    
-    Recent Logs:
-    $LOGS
-    "
-    printf "Subject: [ADMIN] $SUBJECT\n\n$TECH_BODY" | /run/wrappers/bin/sendmail -t "$ADMIN_EMAIL"
-
-    # 2. Send Friendly Email to Owner
-    USER_EMAIL="${config.numbus.mail.userAddress}"
-    OWNER_NAME="${config.numbus.owner}"
-    
-    FRIENDLY_BODY="Cher/Chère $OWNER_NAME,
-
-    Votre serveur a détecté une défaillance du service $UNIT.
-    Le système a tenté de gérer l'erreur, mais une intervention peut être nécessaire.
-
-    Votre administrateur a été notifié de cet incident avec les détails techniques nécessaires.
-    Il interviendra si une action manuelle est requise.
-
-    Merci de votre confiance,
-    L'équipe de support,
-    Numbus-Server."
-    
-    printf "Subject: [Alerte] Erreur sur votre serveur Numbus\n\n$FRIENDLY_BODY" | /run/wrappers/bin/sendmail -t "$USER_EMAIL"
-  '';
-in
-{
-  systemd.services."service-failure-notify@" = {
-    description = "Email notification for failed service %i";
-    onFailure = [ ];
-    serviceConfig = {
-      Type = "oneshot";
-      ExecStart = "${systemd_notifier} %i";
-    };
-  };
-}
\ No newline at end of file
diff --git a/modules/backup/misc/default.nix b/modules/backup/misc/default.nix
deleted file mode 100644
index bc990b8..0000000
--- a/modules/backup/misc/default.nix
+++ /dev/null
@@ -1,10 +0,0 @@
-{ ... }:
-
-{
-  imports = [
-    ./internationalisation.nix
-    ./power.nix
-    ./update.nix
-    ./users.nix
-  ];
-}
\ No newline at end of file
diff --git a/modules/backup/misc/internationalisation.nix b/modules/backup/misc/internationalisation.nix
deleted file mode 100644
index 4eff542..0000000
--- a/modules/backup/misc/internationalisation.nix
+++ /dev/null
@@ -1,24 +0,0 @@
-{ config, lib, ... }:
-
-{
-  config = {
-    i18n.defaultLocale = "${config.numbus.locale}.UTF-8";
-    i18n.extraLocaleSettings = {
-      LC_ADDRESS = "${config.numbus.locale}.UTF-8";
-      LC_IDENTIFICATION = "${config.numbus.locale}.UTF-8";
-      LC_MEASUREMENT = "${config.numbus.locale}.UTF-8";
-      LC_MONETARY = "${config.numbus.locale}.UTF-8";
-      LC_NAME = "${config.numbus.locale}.UTF-8";
-      LC_NUMERIC = "${config.numbus.locale}.UTF-8";
-      LC_PAPER = "${config.numbus.locale}.UTF-8";
-      LC_TELEPHONE = "${config.numbus.locale}.UTF-8";
-      LC_TIME = "${config.numbus.locale}.UTF-8";
-    };
-
-    console.keyMap = lib.toLower config.numbus.language;
-    services.xserver.xkb = {
-      layout = lib.toLower config.numbus.language;
-      variant = "";
-    };
-  };
-}
\ No newline at end of file
diff --git a/modules/backup/misc/power.nix b/modules/backup/misc/power.nix
deleted file mode 100644
index f1c73f9..0000000
--- a/modules/backup/misc/power.nix
+++ /dev/null
@@ -1,30 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-let
-  hardDrives = config.numbus.hardware.spindownDisksList;
-in
-
-{
-  config = {
-    systemd.services.hd-idle = {
-      description = "External HD spin down daemon";
-      wantedBy = [ "multi-user.target" ];
-      serviceConfig = {
-        Type = "simple";
-        ExecStart =
-          let
-            idleTime = toString 1800;
-            hardDriveParameter = lib.strings.concatMapStringsSep " " (x: "-a ${x} -i ${idleTime}") hardDrives;
-          in
-          "${pkgs.hd-idle}/bin/hd-idle -i 0 ${hardDriveParameter}";
-      };
-    };
-
-    services.autoaspm.enable = true;
-    powerManagement.powertop.enable = true;
-    boot.kernelParams = [
-      "pcie_aspm=force"
-      "consoleblank=60"
-    ];
-  };
-}
\ No newline at end of file
diff --git a/modules/backup/misc/update.nix b/modules/backup/misc/update.nix
deleted file mode 100644
index 26b22dd..0000000
--- a/modules/backup/misc/update.nix
+++ /dev/null
@@ -1,23 +0,0 @@
-{ config, inputs, ... }:
-
-{
-  config = {
-    system.autoUpgrade = {
-      enable = true;
-      allowReboot = false;
-      flake = inputs.self.outPath;
-      flags = [ "--print-build-logs" ];
-      dates = "02:00";
-      randomizedDelaySec = "45min";
-    };
-
-    nix.gc = {
-      automatic = true;
-      dates = "weekly";
-      options = "--delete-older-than 7d";
-    };
-
-    nix.settings.experimental-features = [ "nix-command" "flakes" ];
-    nix.settings.auto-optimise-store = true;
-  };
-}
\ No newline at end of file
diff --git a/modules/backup/misc/users.nix b/modules/backup/misc/users.nix
deleted file mode 100644
index 9ab0662..0000000
--- a/modules/backup/misc/users.nix
+++ /dev/null
@@ -1,16 +0,0 @@
-{ config, pkgs, ... }:
-
-{
-  users.users.numbus-admin = {
-    shell = pkgs.fish;
-    isNormalUser = true;
-    description = "Numbus Admin";
-    extraGroups = [ "wheel" ];
-    uid = 1000;
-    initialPassword = "changeMe!";
-    # required for auto start before user login
-    linger = true;
-    # required for rootless container with multiple users
-    autoSubUidGidRange = true;
-  };
-}
\ No newline at end of file
diff --git a/modules/common/hardware/boot-params.nix b/modules/common/hardware/boot-params.nix
new file mode 100644
index 0000000..e40e80f
--- /dev/null
+++ b/modules/common/hardware/boot-params.nix
@@ -0,0 +1,31 @@
+{ config, deviceType, ... }:
+
+{
+  config = mkMerge [
+    ({
+      boot = {
+        plymouth.enable = true;
+        # Enable "Silent boot"
+        consoleLogLevel = 3;
+        initrd.verbose = false;
+        loader.timeout = 1;
+      };
+    })
+
+    ( mkIf (deviceType == "computer" || deviceType == "tv") {
+    # Bootloader options
+      boot = {
+        initrd.systemd.enable = true;
+        loader.systemd-boot.enable = true;
+        loader.efi.canTouchEfiVariables = true;
+        kernelParams = [
+          "quiet"
+          "udev.log_level=3"
+          "systemd.show_status=auto"
+          "pcie_aspm=force"
+          "consoleblank=60"
+        ];
+      };
+    })
+  ];
+}
\ No newline at end of file
diff --git a/modules/common/hardware/default.nix b/modules/common/hardware/default.nix
index d580f5a..4c8b35a 100644
--- a/modules/common/hardware/default.nix
+++ b/modules/common/hardware/default.nix
@@ -4,6 +4,8 @@
   imports = [
     # To test
     ./disks/default.nix
+    ./boot-params.nix
     ./cpu.nix
+    ./graphics.nix
   ];
 }
\ No newline at end of file
diff --git a/modules/computer/hardware/nvidia.nix b/modules/common/hardware/graphics.nix
similarity index 91%
rename from modules/computer/hardware/nvidia.nix
rename to modules/common/hardware/graphics.nix
index 648c770..508ccd1 100644
--- a/modules/computer/hardware/nvidia.nix
+++ b/modules/common/hardware/graphics.nix
@@ -1,11 +1,11 @@
 { config, lib, pkgs, ... }:
 
 let
-  cfg = config.numbus-computer.hardware;
+  cfg = config.numbus.hardware;
 in
 
 {
-  options.numbus-computer.hardware = {
+  options.numbus.hardware = {
     nvidia = {
       enable = mkEnableOption "Wether to install the NVIDIA driver. Required for better performance with NVIDIA graphics cards."
     }
@@ -44,10 +44,7 @@ in
         # Only available from driver 515.43.04+
         open = false;
 
-        # Enable the Nvidia settings menu,
-      # accessible via `nvidia-settings`.
         nvidiaSettings = true;
-
         # Optionally, you may need to select the appropriate driver version for your specific GPU.
         package = config.boot.kernelPackages.nvidiaPackages.stable;
       };
diff --git a/modules/backup/hardware/pcie-coral.nix b/modules/common/hardware/pcie-coral.nix
similarity index 96%
rename from modules/backup/hardware/pcie-coral.nix
rename to modules/common/hardware/pcie-coral.nix
index 06fe328..32170d6 100644
--- a/modules/backup/hardware/pcie-coral.nix
+++ b/modules/common/hardware/pcie-coral.nix
@@ -103,9 +103,9 @@ in
 {
   options.numbus.hardware.pcie-coral = lib.mkEnableOption "PCIe Coral TPU support";
 
-  config = lib.mkIf cfg {
-    services.udev.packages = [ libedgetpu ];
+  config = lib.mkIf cfg.enable {
+    services.udev.packages = [ "libedgetpu" ];
     users.groups.plugdev = {};
-    boot.extraModulePackages = [ gasket ];
+    boot.extraModulePackages = [ "gasket" ];
   };
 }
\ No newline at end of file
diff --git a/modules/server/mail/clamav.nix b/modules/common/mail/clamav.nix
similarity index 100%
rename from modules/server/mail/clamav.nix
rename to modules/common/mail/clamav.nix
diff --git a/modules/server/mail/systemd.nix b/modules/common/mail/systemd.nix
similarity index 100%
rename from modules/server/mail/systemd.nix
rename to modules/common/mail/systemd.nix
diff --git a/modules/common/web/cockpit-numbus/cockpit.nix b/modules/common/web/cockpit-numbus/cockpit.nix
new file mode 100644
index 0000000..83f7c56
--- /dev/null
+++ b/modules/common/web/cockpit-numbus/cockpit.nix
@@ -0,0 +1,28 @@
+{ pkgs, ... }:
+
+let
+  cockpit-numbus = pkgs.stdenv.mkDerivation {
+    name = "cockpit-numbus";
+    src = ./cockpit-numbus;
+    installPhase = ''
+      mkdir -p $out/share/cockpit/numbus
+      cp -r * $out/share/cockpit/numbus
+    '';
+  };
+in
+
+{
+  services.cockpit = {
+    enable = true;
+    port = 9090;
+    openFirewall = false;
+    settings = {
+      WebService = {
+        AllowUnencrypted = true;
+      };
+    };
+  };
+
+  # Link the extension into the system cockpit path
+  environment.systemPackages = [ cockpit-numbus ];
+}
diff --git a/deploy/GUI/web/pages/installation.html b/modules/common/web/default.nix
similarity index 100%
rename from deploy/GUI/web/pages/installation.html
rename to modules/common/web/default.nix
diff --git a/modules/computer/hardware/boot.nix b/modules/computer/hardware/boot.nix
deleted file mode 100644
index 3812345..0000000
--- a/modules/computer/hardware/boot.nix
+++ /dev/null
@@ -1,24 +0,0 @@
-{ config, ... }:
-
-{
-  config = {
-    # Bootloader options
-    boot.initrd.systemd.enable = true;
-    boot.loader.systemd-boot.enable = true;
-    boot.loader.efi.canTouchEfiVariables = true;
-
-    # Boot splash instead of log messages
-    boot = {
-      plymouth.enable = true;
-      # Enable "Silent boot"
-      consoleLogLevel = 3;
-      initrd.verbose = false;
-      kernelParams = [
-        "quiet"
-        "udev.log_level=3"
-        "systemd.show_status=auto"
-      ];
-      loader.timeout = 1;
-    };
-  };
-}
\ No newline at end of file
diff --git a/modules/computer/hardware/cpu.nix b/modules/computer/hardware/cpu.nix
deleted file mode 100644
index d3fe470..0000000
--- a/modules/computer/hardware/cpu.nix
+++ /dev/null
@@ -1,9 +0,0 @@
-{ config, ... }:
-
-{
-  config = {
-    hardware.enableRedistributableFirmware = true;
-    hardware.cpu.intel.updateMicrocode = true;
-    hardware.cpu.amd.updateMicrocode = true;
-  };
-}
\ No newline at end of file
diff --git a/modules/computer/hardware/default.nix b/modules/computer/hardware/default.nix
deleted file mode 100644
index 0d931d1..0000000
--- a/modules/computer/hardware/default.nix
+++ /dev/null
@@ -1,10 +0,0 @@
-{ ... }:
-
-{
-  imports=[
-    ./boot.nix
-    ./cpu.nix
-    ./disks.nix
-    ./nvidia.nix
-  ];
-}
\ No newline at end of file
diff --git a/modules/computer/hardware/disks.nix b/modules/computer/hardware/disks.nix
deleted file mode 100644
index 6e1acee..0000000
--- a/modules/computer/hardware/disks.nix
+++ /dev/null
@@ -1,328 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-with lib;
-
-let
-  cfg = config.numbus.hardware;
-
-  mkDataDisk = idx: device: {
-    name = "content-${toString idx}";
-    value = {
-      type = "disk";
-      device = device;
-      content = {
-        type = "gpt";
-        partitions = {
-          luks = {
-            size = "100%";
-            content = {
-              type = "luks";
-              name = "crypted-content-${toString idx}";
-              initrdUnlock = false;
-              settings = {
-                keyFile = "/etc/secrets/disks/content-${toString idx}";
-                allowDiscards = true;
-                crypttabExtraOpts = [ "nofail" ];
-              };
-              content = {
-                type = "filesystem";
-                format = cfg.dataDisksFilesystem;
-                mountpoint = "/mnt/content-${toString idx}";
-                mountOptions = [ "nofail" "noauto" ];
-              };
-            };
-          };
-        };
-      };
-    };
-  };
-
-  mkParityDisk = idx: device: {
-    name = "parity-${toString idx}";
-    value = {
-      type = "disk";
-      device = device;
-      content = {
-        type = "gpt";
-        partitions = {
-          luks = {
-            size = "100%";
-            content = {
-              type = "luks";
-              name = "crypted-parity-${toString idx}";
-              initrdUnlock = false;
-              settings = {
-                keyFile = "/etc/secrets/disks/parity-${toString idx}";
-                allowDiscards = true;
-                crypttabExtraOpts = [ "nofail" ];
-              };
-              content = {
-                type = "filesystem";
-                format = cfg.parityDisksFilesystem;
-                mountpoint = "/mnt/parity-${toString idx}";
-                mountOptions = [ "nofail" "noauto" ];
-              };
-            };
-          };
-        };
-      };
-    };
-  };
-
-  isMirror = length cfg.bootDisksList > 1;
-
-  bootDisksConfig = if isMirror then {
-    mdadm = {
-      boot = {
-        type = "mdadm";
-        level = 1;
-        metadata = "1.2";
-        content = {
-          type = "filesystem";
-          format = "vfat";
-          mountpoint = "/boot";
-          mountOptions = [ "umask=0077" ];
-        };
-      };
-    };
-    disk = listToAttrs (imap1 (i: device: {
-      name = "boot-${toString i}";
-      value = {
-        type = "disk";
-        device = device;
-        content = {
-          type = "gpt";
-          partitions = {
-            ESP = {
-              size = "1G";
-              type = "EF00";
-              content = {
-                type = "mdraid";
-                name = "boot";
-              };
-            };
-            luks = {
-              size = "100%";
-              content = {
-                type = "luks";
-                name = "crypted-boot-${toString i}";
-                settings = {
-                  allowDiscards = true;
-                  keyFile = "/etc/secrets/disks/boot-${toString i}";
-                };
-                content = {
-                  type = "lvm_pv";
-                  vg = "pool";
-                };
-              };
-            };
-          };
-        };
-      };
-    }) cfg.bootDisksList);
-  } else {
-    disk = {
-      "boot-1" = {
-        type = "disk";
-        device = head cfg.bootDisksList;
-        content = {
-          type = "gpt";
-          partitions = {
-            ESP = {
-              size = "1G";
-              type = "EF00";
-              content = {
-                type = "filesystem";
-                format = "vfat";
-                mountpoint = "/boot";
-                mountOptions = [ "umask=0077" ];
-              };
-            };
-            luks = {
-              size = "100%";
-              content = {
-                type = "luks";
-                name = "crypted-boot-1";
-                settings = {
-                  keyFile = "/etc/secrets/disks/boot-1";
-                  allowDiscards = true;
-                };
-                content = {
-                  type = "lvm_pv";
-                  vg = "pool";
-                };
-              };
-            };
-          };
-        };
-      };
-    };
-  };
-
-  lvmConfig = {
-    lvm_vg = {
-      pool = {
-        type = "lvm_vg";
-        lvs = {
-          swap = {
-            size = cfg.swapSize;
-            content = {
-              type = "swap";
-            };
-          } // optionalAttrs isMirror { lvm_type = "mirror"; };
-          snapraid = {
-            size = "1G";
-            content = {
-              type = "filesystem";
-              format = "btrfs";
-              mountpoint = "/mnt/content-0";
-            };
-          } // optionalAttrs isMirror { lvm_type = "mirror"; };
-          root = {
-            size = "100%";
-            content = {
-              type = "btrfs";
-              extraArgs = [ "-f" ];
-              subvolumes = {
-                "/rootfs" = {
-                  mountpoint = "/";
-                  mountOptions = [ "compress=zstd" "noatime" ];
-                };
-                "/home" = {
-                  mountpoint = "/home";
-                  mountOptions = [ "compress=zstd" ];
-                };
-                "/nix" = {
-                  mountpoint = "/nix";
-                  mountOptions = [ "compress=zstd" "noatime" ];
-                };
-              };
-            };
-          } // optionalAttrs isMirror { lvm_type = "mirror"; };
-        };
-      };
-    };
-  };
-
-in
-{
-  options.numbus.hardware = {
-    dataDisksList = mkOption {
-      type = types.listOf types.str;
-      default = [];
-      example = [ "/dev/disk/by-id/WD_Blue_ATO431_159Ejz224G0000382b" "/dev/disk/by-id/Seagate_Barracuda_159Ejz224G" ];
-      description = "List by-id path of devices for data disks";
-    };
-    parityDisksList = mkOption {
-      type = types.listOf types.str;
-      default = [];
-      example = [ "/dev/disk/by-id/WD_Blue_ATO431_159Ejz224G0000382b" "/dev/disk/by-id/Seagate_Barracuda_159Ejz224G" ];
-      description = "List of by-id path of devices for parity disks";
-    };
-    bootDisksList = mkOption {
-      type = types.listOf types.str;
-      default = [];
-      example = [ "/dev/disk/by-id/nvme_SAMSUNG_MZVPYEHCO_159Ejz224G0000" "/dev/disk/by-id/ata-San_Disk_159Ejz224G" ];
-      description = "List of by-id path of devices for boot disks";
-    };
-    spindownDisksList = mkOption {
-      type = types.listOf types.str;
-      default = [];
-      example = [ "/dev/disk/by-id/WD_Blue_ATO431_159Ejz224G0000382b" "/dev/disk/by-id/Seagate_Barracuda_159Ejz224G" ];
-      description = "List of by-id path of devices to spindown when inactive to save power (HDD only)";
-    };
-    swapSize = mkOption {
-      type = types.str;
-      default = "16G";
-      example = "16G";
-      description = "Size of the swap partition";
-    };
-    dataDisksFilesystem = mkOption {
-      type = types.enum [ "xfs" "ext4" "btrfs" ];
-      default = "xfs";
-      example = "xfs";
-      description = "Filesystem for data disks. Available filesystem options : xfs, ext4, btrfs";
-    };
-    parityDisksFilesystem = mkOption {
-      type = types.enum [ "xfs" "ext4" "btrfs" ];
-      default = "xfs";
-      example = "xfs";
-      description = "Filesystem for parity disks. Available filesystem options : xfs, ext4, btrfs";
-    };
-  };
-
-  config = mkIf (cfg.bootDisksList != []) {
-    disko.devices = mkMerge [
-      bootDisksConfig
-      lvmConfig
-      {
-        disk = listToAttrs (imap1 mkDataDisk cfg.dataDisksList);
-      }
-      {
-        disk = listToAttrs (imap1 mkParityDisk cfg.parityDisksList);
-      }
-    ];
-
-    services.snapraid = {
-      enable = true;
-      contentFiles = [ "/mnt/content-0/snapraid.content" ] ++
-        (map (i: "/mnt/content-${toString i}/snapraid.content") (range 1 (length cfg.dataDisksList)));
-      parityFiles = map (i: "/mnt/parity-${toString i}/snapraid.parity") (range 1 (length cfg.parityDisksList));
-      dataDisks = listToAttrs (imap1 (i: _: nameValuePair "d${toString i}" "/mnt/content-${toString i}") cfg.dataDisksList);
-    };
-
-    fileSystems."/mnt/data" = {
-      device = "/mnt/content-*";
-      fsType = "fuse.mergerfs";
-      options = [
-        "category.create=ff"
-        "cache.files=partial"
-        "dropcacheonclose=true"
-        "defaults"
-        "noauto"
-        "nofail"
-        "allow_other"
-        "moveonenospc=1"
-        "minfreespace=50G"
-        "func.getattr=newest"
-        "fsname=mergerfs_data"
-        "x-mount.mkdir"
-        "x-systemd.automount"
-      ];
-    };
-
-    systemd.services.mount-disks = {
-      description = "Mount data and parity disks";
-      before = [ "mnt-data.mount" ];
-      requiredBy = [ "mnt-data.mount" ];
-      path = [ pkgs.cryptsetup pkgs.util-linux ];
-      serviceConfig = {
-        Type = "oneshot";
-        RemainAfterExit = true;
-      };
-      script = let
-        mountDataDisk = i: ''
-          if [ ! -e /dev/mapper/crypted-content-${toString i} ]; then
-            cryptsetup luksOpen --key-file /etc/secrets/disks/content-${toString i} /dev/disk/by-partlabel/disk-content-${toString i}-luks crypted-content-${toString i}
-          fi
-          mkdir -p /mnt/content-${toString i}
-          if ! mountpoint -q /mnt/content-${toString i}; then
-            mount -t ${cfg.dataDisksFilesystem} /dev/mapper/crypted-content-${toString i} /mnt/content-${toString i}
-          fi
-        '';
-        mountParityDisk = i: ''
-          if [ ! -e /dev/mapper/crypted-parity-${toString i} ]; then
-            cryptsetup luksOpen --key-file /etc/secrets/disks/parity-${toString i} /dev/disk/by-partlabel/disk-parity-${toString i}-luks crypted-parity-${toString i}
-          fi
-          mkdir -p /mnt/parity-${toString i}
-          if ! mountpoint -q /mnt/parity-${toString i}; then
-            mount -t ${cfg.parityDisksFilesystem} /dev/mapper/crypted-parity-${toString i} /mnt/parity-${toString i}
-          fi
-        '';
-      in ''
-        ${concatMapStrings mountDataDisk (range 1 (length cfg.dataDisksList))}
-        ${concatMapStrings mountParityDisk (range 1 (length cfg.parityDisksList))}
-      '';
-    };
-  };
-}
\ No newline at end of file
diff --git a/deploy/GUI/web/pages/post-installation.html b/modules/console/default.nix
similarity index 100%
rename from deploy/GUI/web/pages/post-installation.html
rename to modules/console/default.nix
diff --git a/modules/server/hardware/boot.nix b/modules/server/hardware/boot.nix
deleted file mode 100644
index 89c82ad..0000000
--- a/modules/server/hardware/boot.nix
+++ /dev/null
@@ -1,11 +0,0 @@
-{ config, ... }:
-
-{
-  boot.initrd.systemd.enable = true;
-  boot.loader.systemd-boot.enable = true;
-  boot.loader.efi.canTouchEfiVariables = true;
-
-  boot.kernel.sysctl = {
-    "vm.overcommit_memory" = 1;
-  };
-}
\ No newline at end of file
diff --git a/modules/server/hardware/default.nix b/modules/server/hardware/default.nix
deleted file mode 100644
index f1a7eb8..0000000
--- a/modules/server/hardware/default.nix
+++ /dev/null
@@ -1,12 +0,0 @@
-{ ... }:
-
-{
-  imports = [
-    # Tested
-    ./boot.nix
-    ./cpu.nix
-    # To test
-    ./pcie-coral.nix
-    ./disks/default.nix
-  ];
-}
\ No newline at end of file
diff --git a/modules/server/hardware/pcie-coral.nix b/modules/server/hardware/pcie-coral.nix
deleted file mode 100644
index db7709b..0000000
--- a/modules/server/hardware/pcie-coral.nix
+++ /dev/null
@@ -1,111 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-let
-  cfg = config.numbus-server.hardware.pcie-coral;
-
-  gasket-driver = { stdenv, lib, fetchFromGitHub, kernel }: stdenv.mkDerivation rec {
-    pname = "gasket";
-    version = "1.0-18";
-
-    src = fetchFromGitHub {
-      owner = "google";
-      repo = "gasket-driver";
-      rev = "97aeba584efd18983850c36dcf7384b0185284b3";
-      sha256 = "pJwrrI7jVKFts4+bl2xmPIAD01VKFta2SRuElerQnTo=";
-    };
-
-    makeFlags = [
-      "-C"
-      "${kernel.dev}/lib/modules/${kernel.modDirVersion}/build"
-      "M=$(PWD)"
-    ];
-    buildFlags = [ "modules" ];
-
-    installFlags = [ "INSTALL_MOD_PATH=${placeholder "out"}" ];
-    installTargets = [ "modules_install" ];
-
-    sourceRoot = "source/src";
-    hardeningDisable = [ "pic" "format" ];
-    nativeBuildInputs = kernel.moduleBuildDependencies;
-
-    meta = with lib; {
-      description = "The Coral Gasket Driver allows usage of the Coral EdgeTPU on Linux systems.";
-      homepage = "https://github.com/google/gasket-driver";
-      license = licenses.gpl2;
-      maintainers = [ maintainers.kylehendricks ];
-      platforms = platforms.linux;
-    };
-  };
-
-  libedgetpu-pkg = { stdenv, lib, fetchFromGitHub, libusb1, abseil-cpp, flatbuffers, xxd }:
-    let
-      flatbuffers_1_12 = flatbuffers.overrideAttrs (oldAttrs: rec {
-        version = "1.12.0";
-        NIX_CFLAGS_COMPILE = "-Wno-error=class-memaccess -Wno-error=maybe-uninitialized";
-        cmakeFlags = (oldAttrs.cmakeFlags or []) ++ ["-DFLATBUFFERS_BUILD_SHAREDLIB=ON"];
-        NIX_CXXSTDLIB_COMPILE = "-std=c++17";
-        configureFlags = (oldAttrs.configureFlags or []) ++ ["--enable-shared"];
-        src = fetchFromGitHub {
-          owner = "google";
-          repo = "flatbuffers";
-          rev = "v${version}";
-          sha256 = "sha256-L1B5Y/c897Jg9fGwT2J3+vaXsZ+lfXnskp8Gto1p/Tg=";
-        };
-      });
-
-    in stdenv.mkDerivation rec {
-      pname = "libedgetpu";
-      version = "grouper";
-
-      src = fetchFromGitHub {
-        owner = "google-coral";
-        repo = pname;
-        rev = "release-${version}";
-        sha256 = "sha256-73hwItimf88Iqnb40lk4ul/PzmCNIfdt6Afi+xjNiBE=";
-      };
-
-      makeFlags = ["-f" "makefile_build/Makefile" "libedgetpu" ];
-
-      buildInputs = [
-        libusb1
-        abseil-cpp
-        flatbuffers_1_12
-      ];
-
-      nativeBuildInputs = [
-        xxd
-      ];
-
-      NIX_CXXSTDLIB_COMPILE = "-std=c++17";
-
-      TFROOT = "${fetchFromGitHub {
-        owner = "tensorflow";
-        repo = "tensorflow";
-        rev = "v2.7.4";
-        sha256 = "sha256-liDbUAdaVllB0b74aBeqNxkYNu/zPy7k3CevzRF5dk0=";
-      }}";
-
-      enableParallelBuilding = false;
-
-      installPhase = ''
-        mkdir -p $out/lib
-        cp out/direct/k8/libedgetpu.so.1.0 $out/lib
-        ln -s $out/lib/libedgetpu.so.1.0 $out/lib/libedgetpu.so.1
-        mkdir -p $out/lib/udev/rules.d
-        cp debian/edgetpu-accelerator.rules $out/lib/udev/rules.d/99-edgetpu-accelerator.rules
-      '';
-    };
-
-  gasket = config.boot.kernelPackages.callPackage gasket-driver {};
-  libedgetpu = pkgs.callPackage libedgetpu-pkg {};
-in
-
-{
-  options.numbus-server.hardware.pcie-coral = lib.mkEnableOption "PCIe Coral TPU support";
-
-  config = lib.mkIf cfg.enable {
-    services.udev.packages = [ libedgetpu ];
-    users.groups.plugdev = {};
-    boot.extraModulePackages = [ gasket ];
-  };
-}
\ No newline at end of file
diff --git a/modules/server/mail/default.nix b/modules/server/mail/default.nix
deleted file mode 100644
index b5f75e8..0000000
--- a/modules/server/mail/default.nix
+++ /dev/null
@@ -1,12 +0,0 @@
-{ ... }:
-
-{
-  imports = [
-    # To test
-    ./clamav.nix
-    ./smart.nix
-    ./systemd.nix
-    ./smtp.nix
-    ./disk-space.nix
-  ];
-}
\ No newline at end of file
diff --git a/modules/server/networking/networking.nix b/modules/server/networking/networking.nix
index f5350fb..0228286 100644
--- a/modules/server/networking/networking.nix
+++ b/modules/server/networking/networking.nix
@@ -44,16 +44,16 @@ in
     # Allow rootless containers to bind to port 53 and up
     boot.kernel.sysctl."net.ipv4.ip_unprivileged_port_start" = 53;
 
-    networking.bridges.br0.interfaces = [ "${cfg.interface}" ];
+    networking.bridges.br0.interfaces = [ cfg.interface ];
     networking.interfaces."${cfg.interface}".useDHCP = false;
     networking.interfaces.br0.useDHCP = false;
     networking.nameservers = cfg.dnsServers;
     networking.interfaces.br0.ipv4.addresses = [{
-      address = "${cfg.ipAddress}";
+      address = cfg.ipAddress;
       prefixLength = 24;
     }];
     networking.defaultGateway = {
-      address = "${cfg.routerIpAddress}";
+      address = cfg.routerIpAddress;
       interface = "br0";
     };
   };
diff --git a/modules/server/packages/packages.nix b/modules/server/packages/default-packages.nix
similarity index 72%
rename from modules/server/packages/packages.nix
rename to modules/server/packages/default-packages.nix
index 13dc56e..b1f9a19 100644
--- a/modules/server/packages/packages.nix
+++ b/modules/server/packages/default-packages.nix
@@ -4,22 +4,29 @@
   nixpkgs.config.allowUnfree = true;
 
   environment.systemPackages = with pkgs; [
-    git
-    ncdu
-    fastfetch
-    tpm2-tss
-    sops
+    # Secrets
     age
-    powertop
-    pciutils
+    sops
+    # HDD tools
     hdparm
     hd-idle
     hddtemp
     smartmontools
+    ncdu
+    # CPU tools
     cpufrequtils
     intel-gpu-tools
+    # Filesystem tools
     snapraid
     mergerfs
     mergerfs-tools
+    # Powersave tools
+    powertop
+    # PCI devices tools
+    pciutils
+    tpm2-tss
+    # Misc
+    git
+    fastfetch
   ];
 }
\ No newline at end of file
diff --git a/modules/server/packages/default.nix b/modules/server/packages/default.nix
index 175367d..1a231b5 100644
--- a/modules/server/packages/default.nix
+++ b/modules/server/packages/default.nix
@@ -5,7 +5,5 @@
     # To test
     ./packages.nix
     ./podman.nix
-    ./ssh.nix
-    ./terminal.nix
   ];
 }
\ No newline at end of file
diff --git a/deploy/TUI/deploy.sh b/script/deploy bak.sh
similarity index 100%
rename from deploy/TUI/deploy.sh
rename to script/deploy bak.sh
diff --git a/script/deploy.sh b/script/deploy.sh
new file mode 100755
index 0000000..6e644c3
--- /dev/null
+++ b/script/deploy.sh
@@ -0,0 +1,1036 @@
+#!/usr/bin/env nix-shell
+#!nix-shell -i bash -p bash nano coreutils gnused gum fastfetch xkcdpass sops ssh-to-age age sshpass envsubst pciutils usbutils mosquitto curl jq yq python3
+
+
+
+# --- UTILITY FUNCTIONS --->
+echod() {
+  MESSAGE=${1}
+
+  if [[ ${DEBUG} -eq 1 ]]; then
+    echo -e ${MESSAGE}
+  fi
+}
+
+ssh_to_host() {
+  local COMMAND="${1}"
+  ssh -i "${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}" "${COMMAND}"
+}
+
+get_valid_input() {
+  local VAR_NAME="${1}"
+  local HEADER="${2}"
+  local PLACEHOLDER="${3}"
+  local REGEX="${4}"
+  local MANDATORY="${5:-true}"
+  local SENSITIVE="${6:-false}"
+
+  if [[ "${MANDATORY}" == "true" ]]; then
+    local PROMPT="(Required) > "
+  elif [[ "${MANDATORY}" == "false" ]]; then
+    local PROMPT="(Optional) > "
+  fi
+
+  while true; do
+    local INPUT=$(gum input --header "${HEADER}" --prompt "${PROMPT}" --placeholder "${PLACEHOLDER}")
+
+    # Handle empty input
+    if [[ -z "${INPUT}" ]]; then
+      if [[ "${MANDATORY}" == true ]]; then
+        gum style --foreground "#ff0000" -- "✖ This field is mandatory."
+        continue
+      else
+        INPUT=""
+        break
+      fi
+    fi
+
+    # Handle Regex Validation
+    if [[ -n "${REGEX}" ]]; then
+      if [[ "${INPUT}" =~ ${REGEX} ]]; then
+        export "${VAR_NAME}"="${INPUT}"
+        break
+      else
+        gum style --foreground "#ff0000" -- "✖ Invalid format. Please try again."
+      fi
+    else
+      export "${VAR_NAME}"="${INPUT}"
+      break
+    fi
+  done
+}
+# --- UTILITY FUNCTIONS ---<
+
+
+
+# --- GLOBAL FUNCTIONS --->
+cleanup() {
+  echo -e "\n ✅ Cleaning up..."
+
+  rm -${DIR_RM_FLAGS} ${TMP_FILES_PATH}/
+
+  if ps -p ${BRIDGE_PID:-} > /dev/null; then
+    kill ${BRIDGE_PID}
+  fi
+}
+
+compatibility_check() {
+  TEST_FAIL=0
+
+  if [[ -r /etc/os-release ]] && grep -qi '^ID=nixos\b' /etc/os-release; then
+    echo -e "\n ✅ NixOS system detected."
+  else
+    TEST_FAIL=$((TEST_FAIL + 1))
+    echo -e "\n ❌ You are not on a NixOS based system. This is required to continue."
+  fi
+
+  if [[ "$(uname -m)" == "x86_64" ]]; then
+    echo -e "\n ✅ x86_64 system detected."
+  else
+    TEST_FAIL=$((TEST_FAIL + 1))
+    echo -e "\n ❌ You are not on a x86_64 based system. This is required to continue."
+  fi
+
+  if [[ ${TEST_FAIL} -gt 0 ]]; then
+    COMPATIBILITY_OVERRIDE=$(gum choose --header "Some compatibility checks failed. The installation will very likely fail. Continue ?" \
+    "No" \
+    "Yes, I know what I am doing")
+    [[ "${COMPATIBILITY_OVERRIDE}" == "No" ]] && exit 1
+    [[ "${COMPATIBILITY_OVERRIDE}" != "No" ]] && echo -e "\n ⚠️ Continuing anyways, this is not supported by Numbus."
+  fi
+
+  return 0
+}
+
+hierarchy_preparation() {
+  echod "\n 🔄 Preparing the folder hierarchy for the final configuration..."
+
+  if [[ -e config/* ]]; then
+    echo " ⚠️ It seems you have already run this script. Previously generated files need to be cleaned up."
+    OLD_CONFIG_PATH="trash/$(date +"%Y-%m-%d-%Hh%M")/"
+    mkdir -${MKDIR_FLAGS} ${OLD_CONFIG_PATH}
+    mv -${MV_FLAGS} config/ ${OLD_CONFIG_PATH}
+    echo " ✅ Your files have been moved to the ${OLD_CONFIG_PATH} directory. You can retrieve them there if needed."
+  fi
+
+  # Script folders
+  mkdir -${MKDIR_FLAGS} ${TMP_FILES_PATH}/config
+  mkdir -${MKDIR_FLAGS} ${TMP_FILES_PATH}/logs
+  mkdir -${MKDIR_FLAGS} ${TMP_FILES_PATH}/tmp
+  [[ ${WEB_MODE} -eq 1 ]] && mkdir -${MKDIR_FLAGS} ${TMP_FILES_PATH}/web
+
+  # Secrets
+  mkdir -${MKDIR_FLAGS} ${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/
+  mkdir -${MKDIR_FLAGS} ${EXTRA_FILES_PATH}/var/lib/sops-nix/
+  mkdir -${MKDIR_FLAGS} ${EXTRA_FILES_PATH}/etc/nixos/secrets/disks
+  mkdir -${MKDIR_FLAGS} ${EXTRA_FILES_PATH}/etc/nixos/secrets/system
+  if [[ "${DEVICE_TYPE}" == "server" || "${DEVICE_TYPE}" == "backup" ]]; then
+    mkdir -${MKDIR_FLAGS} ${EXTRA_FILES_PATH}/etc/nixos/secrets/podman
+  fi
+
+  echod "\n ✅ Folder hierarchy ready"
+}
+
+hardware_detection() {
+	local TMPFILE="/tmp/nixos-installation-hw-detection"
+
+	ssh_to_host 'bash -s' << SSHEND
+TARGET_GRAPHICS_BRAND=()
+
+for brand in Intel AMD NVIDIA; do
+  if lspci -nn 2>/dev/null | grep -i "vga" | grep -iq "\${brand}"; then
+    TARGET_GRAPHICS="true"
+    TARGET_GRAPHICS_BRAND+=("\${brand}")
+  else
+    TARGET_GRAPHICS="false"
+  fi
+done
+
+ls /dev/dri/ > /dev/null 2>&1 | grep -iq "renderD128" && TARGET_GRAPHICS_RENDERER="true" || TARGET_GRAPHICS_RENDERER="false"
+lsusb > /dev/null 2>&1 | grep -iq "google" && TARGET_USB_CORAL="true" || TARGET_USB_CORAL="false"
+lspci -nn > /dev/null 2>&1 | grep -iq "089a" && TARGET_PCIE_CORAL="true" || TARGET_PCIE_CORAL="false"
+ls /dev/serial/by-id/ > /dev/null 2>&1 | grep -i "zigbee" && TARGET_ZIGBEE_DEVICE=\$(ls /dev/serial/by-id/ > /dev/null 2>&1 | grep -i "zigbee" | head -n 1) || TARGET_ZIGBEE_DEVICE=""
+
+TARGET_INTERFACE=\$(ip -4 route show default | awk '{print \$5}' | head -n1)
+
+if ls -l /sys/class/tpm/tpm0/ > /dev/null 2>&1; then
+  TARGET_TPM="true"
+  TARGET_TPM_VERSION=\$(cat /sys/class/tpm/tpm0/tpm_version_major)
+else
+  TARGET_TPM="false"
+  TARGET_TPM_VERSION="N/A"
+fi
+
+HDD=1
+DISK_DEVPATH=()
+DISK_NAME=()
+DISK_TYPE=()
+DISK_HEALTH=()
+DISK_ID=()
+
+for DISK in \$(lsblk -x SIZE -d -n -e 7,11 -o NAME); do
+
+  # Disk name and simple path
+  DISK_DEVPATH+=("/dev/\$DISK")
+  DISK_NAME+=("\$DISK")
+  # Disk type
+  HDD=\$(cat /sys/block/\$DISK/queue/rotational)
+  TRANSPORT_PROTOCOL=\$(lsblk -x SIZE -d -n -e 7,11 -o TRAN /dev/\$DISK)
+  if [[ "\$DISK" == "nvme*" ]]; then DISK_TYPE+=("NVMe");
+  elif [[ "\$TRANSPORT_PROTOCOL" == "usb" ]]; then DISK_TYPE+=("USB");
+  elif [[ "\$HDD" -eq 1 ]]; then DISK_TYPE+=("HDD");
+  elif [[ "\$HDD" -eq 0 ]]; then DISK_TYPE+=("SSD");
+  else DISK_TYPE+=("Other")
+  fi
+
+  # Disk health
+  if [[ \$(echo "${LIVE_TARGET_PASSWORD}" | sudo -S smartctl -H /dev/\$DISK 2>/dev/null | grep 'self-assessment' | awk '{print \$6}') == "PASSED" ]]; then
+    DISK_HEALTH+=("PASSED")
+  else
+    DISK_HEALTH+=("N/A")
+  fi
+  # Disk ID
+  DISK_ID+=("\$(ls -l /dev/disk/by-id | grep -m1 "../../\$DISK" | awk '{print "/dev/disk/by-id/" \$9}')")
+  DISK_SIZE+=("\$(lsblk -x SIZE -d -n -e 7,11 -o SIZE /dev/\$DISK)")
+done
+
+echo "# Hardware detection results on \$(date)" > "${TMPFILE}"
+for var in \
+  TARGET_GRAPHICS \
+  TARGET_GRAPHICS_RENDERER \
+  TARGET_USB_CORAL \
+  TARGET_PCIE_CORAL \
+  TARGET_ZIGBEE_DEVICE \
+  TARGET_INTERFACE \
+  TARGET_TPM \
+  TARGET_TPM_VERSION; do
+  echo "export \${var}=\${!var}" >> "${TMPFILE}"
+done
+
+for var in \
+  TARGET_GRAPHICS_BRAND \
+  DISK_DEVPATH \
+  DISK_NAME \
+  DISK_TYPE \
+  DISK_HEALTH \
+  DISK_ID \
+  DISK_SIZE; do
+  declare -p \${var} | sed 's/^declare /declare -g /' >> "${TMPFILE}"
+done
+SSHEND
+
+  scp -i "${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}":"${TMPFILE}" "${TMPFILE}" &> /dev/null
+  source "${TMPFILE}"
+
+  local DISK_FLAT_ARRAY=()
+  for i in "${!DISK_NAME[@]}"; do
+    DISK_FLAT_ARRAY+=("${DISK_NAME[$i]}" "${DISK_DEVPATH[$i]}" "${DISK_TYPE[$i]}" "${DISK_HEALTH[$i]}" "${DISK_ID[$i]}" "${DISK_SIZE[$i]}")
+  done
+
+  jq -n \
+    --argjson graphics_enabled "${TARGET_GRAPHICS:-false}" \
+    --argjson graphics_renderer "${TARGET_GRAPHICS_RENDERER:-false}" \
+    --argjson tpu_usb "${TARGET_USB_CORAL:-false}" \
+    --argjson tpu_pcie "${TARGET_PCIE_CORAL:-false}" \
+    --argjson tpm_enabled "${TARGET_TPM:-false}" \
+    --arg tpm_version "${TARGET_TPM_VERSION:-N/A}" \
+    --arg zigbee_device "${TARGET_ZIGBEE_DEVICE:-}" \
+    --arg interface "${TARGET_INTERFACE:-}" \
+    --argjson brands "$(jq -n '$ARGS.positional' --args ${TARGET_GRAPHICS_BRAND[@]:-})" \
+    '
+    {
+      graphics: { enabled: $graphics_enabled, brands: $brands, renderer: $graphics_renderer },
+      tpu: { usb: $tpu_usb, pcie: $tpu_pcie },
+      tpm: { enabled: $tpm_enabled, version: $tpm_version },
+      zigbee: { device: $zigbee_device },
+      network: { interface: $interface },
+      disks: [
+        $ARGS.positional | range(0; length; 6) as $i | {
+          name: .[$i], path: .[$i+1], type: .[$i+2], health: .[$i+3], id: .[$i+4], size: .[$i+5]
+        }
+      ]
+    }' --args "${DISK_FLAT_ARRAY[@]:-}" > ${HARDWARE_DATA_PATH}
+
+  if ssh_to_host "sudo nixos-generate-config --no-filesystems --show-hardware-config" > ${EXTRA_FILES_PATH}/etc/nixos/hardware-configuration.nix; then
+    echo -e "\n✅ Hardware configuration generated"
+  else
+    echo -e "\n❌ Failed to generate hardware configuration"
+    exit 1
+  fi
+}
+# --- GLOBAL FUNCTIONS ---<
+
+
+
+# --- MAIN WEB FUNCTIONS --->
+launch_gui() {
+  echo -e "\n ➡️  You will now proceed to the configuration of your device through your browser"
+  echo -e "\n 🚀 Launching Numbus Configurator..."
+
+  python3 "${BRIDGE_SCRIPT}" > /dev/null 2>&1 &
+  export BRIDGE_PID=$!
+  xdg-open "http://localhost:${WEBSERVER_PORT}" 2>/dev/null || open "http://localhost:${WEBSERVER_PORT}" 2>/dev/null || true
+
+  sleep 5
+
+  echo -e "\n ➡️  If it doesn't automatically, open your browser at: $(gum style --foreground 212 "http://localhost:${WEBSERVER_PORT}")"
+
+}
+# --- MAIN WEB FUNCTIONS ---<
+
+
+
+# --- MAIN TUI FUNCTIONS --->
+preparation() {
+  echo -e "\n ➡️  This script will now guide you through the configuration and gather the necessary information."
+
+  echo ""
+  RAW_DEVICE_TYPE=$(gum choose --header "Choose the device you want to deploy :" \
+  "Numbus Server : Professional-grade hosting, strictly kept under your roof." \
+  "Numbus Backup Server : Automated, high-efficiency protection for your entire ecosystem." \
+  "Numbus Computer : A modern, privacy-respecting machine built for work, creation, and play — without the corporate bloat." \
+  "Numbus TV : A premium cinematic experience free from trackers and forced subscriptions." \
+  "Numbus Game Console : An unbreakable Steam bigscreen experience.")
+
+  case "${RAW_DEVICE_TYPE}" in
+    "Numbus Server : "* ) DEVICE_TYPE="server" ;;
+    "Numbus Backup Server : "* ) DEVICE_TYPE="backup" ;;
+    "Numbus Computer : "* ) DEVICE_TYPE="computer" ;;
+    "Numbus TV : "* ) DEVICE_TYPE="tv" ;;
+    "Numbus Game Console : "* ) DEVICE_TYPE="console" ;;
+  esac
+
+  RAW_DEPLOYMENT_MODE=$(gum choose --header "Choose your preferred deployment mode :" \
+  "Interactive : You don't already have a configuration." \
+  "Non-interactive : You have a valid configuration hosted on a Git platform.")
+
+  case "${RAW_DEPLOYMENT_MODE}" in
+    "Interactive : "* ) DEPLOYMENT_MODE="interactive" ;;
+    "Non-interactive : "* ) DEPLOYMENT_MODE="non-interactive" ;;
+  esac
+
+  if [[ "${DEPLOYMENT_MODE}" == "non-interactive" ]]; then
+    git_url() {
+      IMPORTED_CONFIG_URL=$(gum input --placeholder "https://yourgitplatform.tld/your-user/repo-containing-the-configuration" --header "Please provide the URL to the git repository containing your configuration :")
+    }
+
+    git_url
+
+    until git clone "${IMPORTED_CONFIG_URL}" imported_configuration; do
+      echo -e "\n ⚠️ This did not work correctly."
+
+      echo -e "\n Is this URL correct [y/n] ? ${IMPORTED_CONFIG_URL}"
+      read URL
+
+      if [[ "${URL^^}" == "N" ]]; then
+        git_url
+      fi
+
+      echo -e "\n You will be prompted for your credentials again. Make sure that they are correct."
+    done
+  fi
+
+  echo ""
+  gum format -- \
+  "➡️  To continue, you need to start the target device in a NixOS live environment :
+  1. Download the NixOS iso from the **[official website](https://nixos.org/download/)**.
+  2. Flash it to a USB stick. (use a flashing tool like **[Rufus](https://rufus.ie/en/#download)**, **[BalenaEtcher](https://etcher.balena.io/#download-etcher)**, **[Impression](https://flathub.org/en/apps/io.gitlab.adhami3310.Impression)**, ...)
+  3. Make sure your computer allows booting from USB drives and is in UEFI mode.
+  4. Boot into the NixOS live environment.
+  5. Launch a terminal. Set a password using \`passwd\` and find the IP address using \`ip a\`"
+
+  echo ""
+  gum confirm "Is the device ready ?" || { echo "❌ You need to prepare the device. The script cannot continue."; exit 1; }
+
+  # LIVE TARGET SETTINGS
+  user_input "LIVE_TARGET_IP" "  Please provide the IP address of the target host :" "For example : 192.168.1.100" "${IP_REGEX}"
+  user_input "LIVE_TARGET_PASSWORD" "  Please enter the password for '${TARGET_USER}@${LIVE_TARGET_IP}' :" "${LIVE_TARGET_IP}'s password" "" "" "true"
+
+  # INTERNATIONALIZATION SETTINGS
+  user_input "INTERNATIONALIZATION_TIMEZONE" "  Please provide the wanted timezone :" "For example : Europe/Paris, Europe/Berlin, Europe/London, etc"
+  user_input "INTERNATIONALIZATION_LANGUAGE" "  Please provide the wanted language :" "For example : French, Deutsch, English, etc"
+  user_input "INTERNATIONALIZATION_COUNTRY" "  Please provide your country :" "For example : France, Germany, Great-Britain, etc"
+}
+
+configuration() {
+  if [[ "${DEVICE_TYPE}" == "server" ]]; then
+
+    # Users & Groups
+    user_input "SERVER_OWNER_NAME" "  Please provide the name of the owner of this server :" "For example : Steve"
+    user_input "SERVER_ADMIN_EMAIL" "  Please provide a valid ADMIN email address (ACME, system failures notifications, etc) :" "For example : myemail@mydomain.mytld" "${EMAIL_REGEX}"
+    user_input "AUTHORIZED_SSH_PUBLIC_KEY" "  Please provide the SSH public key of an authorized device (or a comma-separated list) :" "For example : ssh-ed25519 AAAAC3Nzam0uYewNAbxL8Fci8 user@your-pc or ssh-* * *, ssh-* * *, etc" "${SSH_KEY_REGEX}" "Invalid SSH key format (must start with ssh-...)."
+
+    echo -e "\n\n ➡️  You will access your services via a domain name (e.g. cloud.mydomain.com) and containers need credentials to create those subdomains"
+    # TRAEFIK SETTINGS
+    user_input "DOMAIN_NAME" "  Please provide the domain name (FQDN) your home server will use :" "For example : yourdomain.com" "${DOMAIN_REGEX}"
+    user_input "CLOUDFLARE_DNS_API_TOKEN" "  Please provide a cloudflare API token with DNS zone permission :" "For example : bA7hdvCOuXGytlNKohi3ZGtlVpf5CHpLuCMiJrE" "" "" "true"
+
+    echo -e "\n\n ➡️  Some services will be able to send you emails. For that you need an email that supports sending emails (like Gmail for example)"
+    # SMTP SETTINGS
+    user_input "SMTP_SERVER_USERNAME" "  Please provide a valid sender email address :" "For example : myemail@gmail.com" "${EMAIL_REGEX}"
+    user_input "SMTP_SERVER_PASSWORD" "  Please provide the password of this email address :" "abcd efgh ijkl mnop" "" "" "true"
+    user_input "SMTP_SERVER_HOST" "  Please provide the SMTP server endpoint :" "For Gmail : smtp.gmail.com" "${DOMAIN_REGEX}" "Invalid domain name format."
+    user_input "SMTP_SERVER_PORT" "  Please provide the smtp TLS port :" "For Gmail : 587" "${PORT_REGEX}" "Invalid port number."
+
+    echo -e "\n\n ➡️  This server will connect to your local network and you will configure its IP address\n"
+    # NETWORK SETTINGS
+    user_input "NETWORK_SUBNET" "  Please provide your network subnet :" "For example 192.168.1.0/24" "${SUBNET_REGEX}" "Invalid subnet format (e.g. 192.168.1.1/24)."
+    user_input "NETWORK_ROUTER_IP" "  Please provide the ip address of your router :" "Most likely 192.168.1.1 or 192.168.1.254" "${IP_REGEX}" "Invalid IP address format."
+    user_input "HOME_SERVER_IP" "  Please choose the ip address that your server will use (i.e. any address in the 192.168.1.1/24 range that is not in use.) :" "For example 192.168.1.5" "${IP_REGEX}" "Invalid IP address format."
+  elif [[ "${DEVICE_TYPE}" == "backup" ]]; then
+    :
+  elif [[ "${DEVICE_TYPE}" == "computer" ]]; then
+    :
+  elif [[ "${DEVICE_TYPE}" == "tv" ]]; then
+    :
+  fi
+}
+
+setup_ssh() {
+  echod "\n ✅ Generating new SSH key for numbus-admin..."
+
+  chmod 700 ${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/
+  ssh-keygen -t "ed25519" -C "numbus-admin@numbus-server" -f "${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/id_ed25519" -N "" -q
+
+  if [[ ${DEBUG} -eq 1 ]]; then
+  echo -e "\n ➡️  Copying SSH key to target host '${TARGET_USER}@${LIVE_TARGET_IP}'..."
+  fi
+
+  if sshpass -p "${LIVE_TARGET_PASSWORD}" ssh-copy-id -o StrictHostKeyChecking=no -i "${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}"; then
+    if [[ ${DEBUG} -eq 1 ]]; then
+    echo -e "\n ✅ SSH key copied successfully"
+    fi
+  else
+    echo -e "\n ❌ Failed to copy SSH key. Please check the host IP and password."
+    exit 1
+  fi
+}
+
+services_selection() {
+  services_choice() {
+    local SERVICES_LIST=( "${1[@]}" )
+    local SERVICES_DESCRIPTION=( "${2[@]}" )
+    local FINAL_VARIABLE="${3}"
+    local HEADER="${4}"
+    local LIMIT="${5:---no-limit}"
+
+    local SELECTED_SERVICES=()
+    local SELECTED_SERVICES_DESCRIPTION=()
+
+    local SELECTED_SERVICES_DESCRIPTION=$(gum choose ${LIMIT} --header "${HEADER}" "${SERVICES_DESCRIPTION[@]}")
+
+    for i in ${!SERVICES_LIST[@]}; do
+      if printf '%s' "${SELECTED_SERVICES_DESCRIPTION}" | grep -iq "${SERVICES_LIST[${i}]}"; then
+        SELECTED_SERVICES+=("${SERVICES_LIST[${i}]}")
+      fi
+    done
+
+    export "${FINAL_VARIABLE}=(${SELECTED_SERVICES[@]})"
+  }
+
+  echo -e "\n\n ➡️  You will now select the services you want installed on your server:"
+
+  services_choice "${DNS_SERVICES_LIST[@]}" "${DNS_SERVICES_DESCRIPTION[@]}" "SELECTED_DNS_SERVICE" "Choose your preferred DNS service :" "--limit=1"
+  services_choice "${WEB_APPLICATIONS_LIST[@]}" "${WEB_APPLICATIONS_DESCRIPTION[@]}" "SELECTED_WEB_APPLICATIONS" "Choose the web applications you want to install :"
+  services_choice "${SYSTEM_SERVICES_LIST[@]}" "${SYSTEM_SERVICES_DESCRIPTION[@]}" "SELECTED_SYSTEM_SERVICES" "Choose the system services you want to install :"
+
+  gum confirm "Do you want to edit the default subdomain of your services ?" || { echo -e "\n\n✅ Continuing..."; return 0; }
+
+  for service in ${SELECTED_WEB_APPLICATIONS[@]} ${SELECTED_DNS_SERVICE[@]}; do
+    if gum confirm "Change the subdomain of ${service} ?"; then
+      SELECTED_WEB_APPLICATIONS_SUBDOMAIN+=( "$(gum input --placeholder "${service}" --header "Please provide the desired subdomain for ${service}:")" )
+    fi
+  done
+
+  return 0
+}
+
+disks_selection() {
+  gum style --border normal --margin "1" --padding "1 2" --border-foreground 212 "
+  ⚠️  $(gum style --foreground 212 'WARNING:') You will choose the disks to install NixOS on.
+  !! PLEASE MAKE SURE YOU BACKED UP ANY IMPORTANT DATA !!
+  !!  ALL DATA WILL BE WIPED ON THE DISKS YOU CHOOSE   !!
+              Please press CTRL+C to abort.
+  "
+  gum confirm "Do you understand and wish to proceed?" || { echo -e "\n\n❌ Aborting as requested."; exit 1; }
+
+  echo -e "\n\n 🔎 Fetching and analyzing disks from target host... (This may take a moment)"
+
+  if [[ "${#DISK_NAME[@]}" -eq 0 ]]; then
+    echo -e "\n❌ No disks found on the target host. Aborting."
+    exit 1
+  fi
+
+  local HEADER=$(printf "    %-12s %-12s %-12s %-12s %s" "Device" "Type" "Size" "SMART" "Path")
+
+  for i in ${!DISK_NAME[@]}; do
+    local GUM_PRINTED_ELEMENT=$(printf "%-12s %-12s %-12s %-12s %s" \
+      "${DISK_NAME[${i}]}" "${DISK_TYPE[${i}]}" "${DISK_SIZE[${i}]}" \
+      "${DISK_HEALTH[${i}]}" "${DISK_DEVPATH[${i}]}")
+    local GUM_PRINTED_ELEMENTS+=("${GUM_PRINTED_ELEMENT}")
+  done
+
+  echo ""
+  gum style --foreground 212 "➡️  Please choose one (stripe) or two (mirror) disks for your NixOS boot installation :"
+
+  local SELECTED_BOOT_DISK=$(gum choose --limit 2 --header "${HEADER}" "${GUM_PRINTED_ELEMENTS[@]}")
+
+  for i in ${!DISK_NAME[@]}; do
+    if printf '%s' "$SELECTED_BOOT_DISK" | grep -iqw "${DISK_NAME[${i}]}"; then
+      BOOT_DISKS_ID_LIST+=("\"${DISK_ID[${i}]:-${DISK_DEVPATH[${i}]}}\"")
+      BOOT_DISKS_NAME+=("${DISK_NAME[${i}]}")
+      unset "GUM_PRINTED_ELEMENTS[${i}]"
+    fi
+  done
+
+  echo ""
+  gum style --foreground 212 "➡️  Please choose data and parity disks (up to 9 total) :"
+
+  local SELECTED_DATA_DISK=$(gum choose --limit 9 --header "$HEADER" "${GUM_PRINTED_ELEMENTS[@]}")
+
+  for i in ${!DISK_NAME[@]}; do
+    if printf '%s' "$SELECTED_DATA_DISK" | grep -iq "${DISK_NAME[${i}]}"; then
+      DATA_DISKS_ID+=("${DISK_ID[${i}]:-${DISK_DEVPATH[${i}]}}")
+      DATA_DISKS_TYPE+=("${DISK_TYPE[${i}]}")
+    fi
+  done
+
+  if [[ "${#DATA_DISKS_ID[@]}" -eq 1 ]]; then
+    export PARITY_DISK_NUMBER=0
+    export CONTENT_DISK_NUMBER=1
+    export PARITY_DISK_LIST=()
+    export CONTENT_DISK_LIST=("\"${DATA_DISKS_ID[0]}\"")
+  else
+    export PARITY_DISK_NUMBER=$(((${#DATA_DISKS_ID[@]} + 2) / 3))
+    export CONTENT_DISK_NUMBER=$((${#DATA_DISKS_ID[@]} - PARITY_DISK_NUMBER))
+    for i in $(seq 0 $(($CONTENT_DISK_NUMBER - 1))); do 
+      CONTENT_DISK_LIST+=("\"${DATA_DISKS_ID[${i}]}\"")
+    done
+    for i in $(seq $CONTENT_DISK_NUMBER $((${#DATA_DISKS_ID[@]} - 1))); do 
+      PARITY_DISK_LIST+=("\"${DATA_DISKS_ID[${i}]}\"")
+    done
+  fi
+
+  if [[ "${#DATA_DISKS_ID[@]}" -gt 0 ]]; then
+    for i in ${!DATA_DISKS_ID[@]}; do
+      if [[ "${DATA_DISKS_TYPE[${i}]}" == "HDD" ]]; then
+        SPINDOWN_DISKS_LIST+=("\"${DATA_DISKS_ID[${i}]}\"")
+      fi
+    done
+  fi
+
+  export SPINDOWN_DISKS_LIST
+  export BOOT_DISKS_ID_LIST
+  export PARITY_DISK_LIST
+  export CONTENT_DISK_LIST
+}
+
+server_config_generation() {
+  echod "\n 📝 Generating structured settings.json..."
+  
+  # Create a temporary JSON file with all the collected variables
+  # This file will be read by the Nix configuration using builtins.fromJSON
+  jq -n \
+    --arg tz "$INTERNATIONALIZATION_TIMEZONE" \
+    --arg lang "$INTERNATIONALIZATION_LANGUAGE" \
+    --arg owner "$SERVER_OWNER_NAME" \
+    --arg ip "$HOME_SERVER_IP" \
+    --arg iface "$TARGET_INTERFACE" \
+    --arg router "$NETWORK_ROUTER_IP" \
+    --arg domain "$DOMAIN_NAME" \
+    --argjson cockpit_enabled "true" \
+    --arg dns "${SELECTED_DNS_SERVICE[0]}" \
+    --argjson apps "$(printf '%s\n' "${SELECTED_WEB_APPLICATIONS[@]}" | jq -R . | jq -s .)" \
+    '{
+      system: {
+        timeZone: $tz,
+        language: $lang,
+        owner: $owner
+      },
+      network: {
+        ipAddress: $ip,
+        interface: $iface,
+        routerIp: $router
+      },
+      services: {
+        domain: $domain,
+        dnsProvider: $dns,
+        enabledApps: $apps,
+        managementConsole: $cockpit_enabled
+      }
+    }' > "${EXTRA_FILES_PATH}/etc/nixos/settings.json"
+
+  echo -e "{\n  numbus.settings = builtins.fromJSON (builtins.readFile ./settings.json);\n}" > "${CONFIGURATION_PATH}"
+
+  # Ensure the settings file is writable by the management service 
+  # and that the directory is prepared for local git tracking
+  chmod 664 "${EXTRA_FILES_PATH}/etc/nixos/settings.json"
+}
+
+# The existing network_config_generation and services_config_generation functions 
+# are now redundant as the logic is centralized in the JSON export.
+mail_config_generation() {
+  echo -e "\n  # Mail settings" >> ${CONFIGURATION_PATH}
+  echo -e "  numbus.mail.enable = true;" >> ${CONFIGURATION_PATH}
+  echo -e "  numbus.mail.userAddress = \"${SERVER_USER_EMAIL}\";" >> ${CONFIGURATION_PATH}
+  echo -e "  numbus.mail.adminAddress = \"${SERVER_ADMIN_EMAIL}\";" >> ${CONFIGURATION_PATH}
+  echo -e "  numbus.mail.smtpUsername = \"${SMTP_SERVER_USERNAME}\";" >> ${CONFIGURATION_PATH}
+  echo -e "  numbus.mail.smtpPasswordPath = config.sops.secrets.smtpPassword.path;" >> ${CONFIGURATION_PATH}
+
+  if [[ "${SMTP_SERVER_HOST}" != "smtp.gmail.com" ]]; then
+    echo -e "  numbus.mail.smtpServer = \"${SMTP_SERVER_HOST}\";" >> ${CONFIGURATION_PATH}
+  fi
+  if [[ "${SMTP_SERVER_PORT}" != "587" ]]; then
+    echo -e "  numbus.mail.smtpPort = ${SMTP_SERVER_PORT};" >> ${CONFIGURATION_PATH}
+  fi
+}
+
+disk_config_generation() {
+  echo -e "\n  # Hardware settings" >> ${CONFIGURATION_PATH}
+  if [[ "${TARGET_PCIE_CORAL}" == "true" ]]; then
+    echo "  numbus.hardware.pcie-coral.enable = true;" >> ${CONFIGURATION_PATH}
+  fi
+  echo -e "  numbus.hardware.bootDisksList = [ ${BOOT_DISKS_ID_LIST[@]} ];" >> ${CONFIGURATION_PATH}
+  echo -e "  numbus.hardware.dataDisksList = [ ${CONTENT_DISK_LIST[@]} ];" >> ${CONFIGURATION_PATH}
+  echo -e "  numbus.hardware.parityDisksList = [ ${PARITY_DISK_LIST[@]} ];" >> ${CONFIGURATION_PATH}
+  echo -e "  numbus.hardware.spindownDisksList = [ ${SPINDOWN_DISKS_LIST[@]} ];" >> ${CONFIGURATION_PATH}
+  echo "}" >> ${CONFIGURATION_PATH}
+}
+
+keys_generation() {
+  for i in $(seq 1 "${#BOOT_DISKS_ID_LIST[@]}"); do
+    PASS="$(xkcdpass)"
+    echo -n "$PASS" > "${EXTRA_FILES_PATH}/etc/secrets/disks/boot-${i}"
+    chmod 600 "${EXTRA_FILES_PATH}/etc/secrets/disks/boot-${i}"
+    ssh_to_host 'bash -s' << EOF
+echo "$LIVE_TARGET_PASSWORD" | sudo -S mkdir -p /etc/secrets/disks/
+echo "$LIVE_TARGET_PASSWORD" | sudo -S bash -c "printf '%s' '$PASS' > /etc/secrets/disks/boot-${i}"
+echo "$LIVE_TARGET_PASSWORD" | sudo -S chmod 600 /etc/secrets/disks/boot-${i}
+EOF
+  done
+  for i in $(seq 1 "$CONTENT_DISK_NUMBER"); do
+    PASS="$(xkcdpass)"
+    echo -n "$PASS" > "${EXTRA_FILES_PATH}/etc/secrets/disks/content-${i}"
+    chmod 600 "${EXTRA_FILES_PATH}/etc/secrets/disks/content-${i}"
+    ssh_to_host 'bash -s' << EOF
+echo "$LIVE_TARGET_PASSWORD" | sudo -S bash -c "printf '%s' '$PASS' > /etc/secrets/disks/content-${i}"
+echo "$LIVE_TARGET_PASSWORD" | sudo -S chmod 600 /etc/secrets/disks/content-${i}
+EOF
+  done
+  for i in $(seq 1 "$PARITY_DISK_NUMBER"); do
+    PASS="$(xkcdpass)"
+    echo -n "$PASS" > "${EXTRA_FILES_PATH}/etc/secrets/disks/parity-${i}"
+    chmod 600 "${EXTRA_FILES_PATH}/etc/secrets/disks/parity-${i}"
+    ssh_to_host 'bash -s' << EOF
+echo "$LIVE_TARGET_PASSWORD" | sudo -S bash -c "printf '%s' '$PASS' > /etc/secrets/disks/parity-${i}"
+echo "$LIVE_TARGET_PASSWORD" | sudo -S chmod 600 /etc/secrets/disks/parity-${i}
+EOF
+  done
+
+  local SSH_KEYS_FORMATTED=""
+  if [[ "$(declare -p AUTHORIZED_SSH_PUBLIC_KEY 2>/dev/null)" =~ "declare -a" ]]; then
+    for key in "${AUTHORIZED_SSH_PUBLIC_KEY[@]}"; do
+      SSH_KEYS_FORMATTED+="  $key"$'\n'
+    done
+  else
+    SSH_KEYS_FORMATTED="  $AUTHORIZED_SSH_PUBLIC_KEY"$'\n'
+  fi
+  export SSH_KEYS_FORMATTED
+
+  echo -e "\n ✅ Generating sops-nix keys..."
+  ssh-to-age -private-key -i ${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/id_ed25519 > ${EXTRA_FILES_PATH}/var/lib/sops-nix/key.txt
+  export SOPS_PUBLIC_KEY=$(age-keygen -y ${EXTRA_FILES_PATH}/var/lib/sops-nix/key.txt)
+
+  echo -e "\n ✅ Generating sops-nix configuration files..."
+  envsubst < templates/nix-config/sops-nix/.sops.yaml > ${EXTRA_FILES_PATH}/etc/nixos/.sops.yaml
+
+  echo -e "\n ✅ Encrypting secrets in the correct file..."
+  envsubst < "templates/nix-config/sops-nix/secrets.yaml" \
+    | sops encrypt --filename-override secrets.yaml \
+    --input-type yaml --output-type yaml \
+    --age $SOPS_PUBLIC_KEY \
+    --output ${EXTRA_FILES_PATH}/etc/nixos/secrets/secrets.yaml
+}
+
+sum_up() {
+  DISK_RECAP_CONTENT=$(cat << EOF
+### Disk Configuration Summary
+
+Please review the selected disk layout before proceeding.
+
+**Boot Disks (${#BOOT_DISKS_ID_LIST[@]}) :**
+
+* **Boot 1:** \`${BOOT_DISKS_ID_LIST[0]}\`
+$( [[ -n "${BOOT_DISKS_ID_LIST[1]:-}" ]] && echo "* **Boot 2:** \`${BOOT_DISKS_ID_LIST[1]}\`" )
+
+**Data Disks ($CONTENT_DISK_NUMBER) :**
+
+$( [[ $CONTENT_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq 0 $(($CONTENT_DISK_NUMBER - 1))); do echo "* **Data ${j}:** \`${DATA_DISKS_ID[${i}]}\`" && j=$((j + 1)); done )
+$( [[ $CONTENT_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" )
+
+**Parity Disks ($PARITY_DISK_NUMBER) :**
+
+$( [[ $PARITY_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq $CONTENT_DISK_NUMBER $((${#DATA_DISKS_ID[@]} - 1))); do echo "* **Parity ${j}:** \`${DATA_DISKS_ID[${i}]}\`" && j=$((j + 1)); done )
+$( [[ $PARITY_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" )
+
+EOF
+)
+
+  gum style --border normal --margin "1" --padding "1 2" --border-foreground 212 "$(gum format <<< "${DISK_RECAP_CONTENT}")"
+  gum confirm "➡️  Proceed with this disk configuration?" || { echo -e "\n\n❌ Aborting as requested."; exit 1; }
+
+  SERVICES_RECAP_CONTENT=$(cat << EOF
+### Services Configuration Summary
+
+Please review the selected services before proceeding.
+
+**DNS Service (${#SELECTED_DNS_SERVICE[@]}) :**
+
+$(echo "* \`${SELECTED_DNS_SERVICE[0]^}\`")
+
+**Web Applications (${#SELECTED_WEB_APPLICATIONS[@]}) :**
+
+$(for app in "${SELECTED_WEB_APPLICATIONS[@]}"; do echo "* \`${app^}\`"; done)
+
+**System Services (${#SELECTED_SYSTEM_SERVICES[@]}) :**
+
+$(for service in "${SELECTED_SYSTEM_SERVICES[@]}"; do echo "* \`${service^}\`"; done)
+
+EOF
+)
+
+  gum style --border normal --margin "1" --padding "1 2" --border-foreground 212 "$(gum format <<< "${SERVICES_RECAP_CONTENT}")"
+  gum confirm "➡️  Proceed with this services configuration?" || { echo -e "\n\n❌ Aborting as requested."; exit 1; }
+
+  DISK_RECAP_CONTENT=$(cat << EOF
+### Secrets Summary
+
+Please save the following secrets to a secure place (i.e. your local password manager, or a hidden sheet of paper).
+
+**Boot Disks (${#BOOT_DISKS_ID_LIST[@]}) :**
+
+* **Disk 1 Secret Key :** \`$( cat ${EXTRA_FILES_PATH}/etc/secrets/disks/boot-1 )\`
+$( [[ -n "${BOOT_DISKS_ID_LIST[1]:-}" ]] && echo "* **Disk 2 secret key :** \`$( cat ${EXTRA_FILES_PATH}/etc/secrets/disks/boot-2 )\`" )
+
+**Data Disks ($CONTENT_DISK_NUMBER):**
+
+$( [[ $CONTENT_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" )
+$( [[ $CONTENT_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq 0 $(($CONTENT_DISK_NUMBER - 1))); do echo "* **Disk ${j} Secret Key :** \`$( cat ${EXTRA_FILES_PATH}/etc/secrets/disks/content-${j} )\`" && j=$((j + 1)); done )
+
+**Parity Disks ($PARITY_DISK_NUMBER):**
+
+$( [[ $PARITY_DISK_NUMBER -eq 0 ]] && echo "* *Not configured*" )
+$( [[ $PARITY_DISK_NUMBER -gt 0 ]] && j=1 && for i in $(seq $CONTENT_DISK_NUMBER $((${#DATA_DISKS_ID[@]} - 1))); do echo "* **Disk ${j} Secret Key :** \`$( cat ${EXTRA_FILES_PATH}/etc/secrets/disks/parity-${j} )\`" && j=$((j + 1)); done )
+
+EOF
+)
+
+  gum style --border normal --margin "1" --padding "1 2" --border-foreground 212 "$(gum format <<< "${DISK_RECAP_CONTENT}")"
+  gum confirm "✅ I have stored these credentials in a safe place" || { echo -e "\n\n❌ Please store these credentials in a safe place as you will need them later."; exit 1; }
+
+  gum confirm "➡️ Would you like to manually edit the configuration (⚠️ advanced users only)" || { echo -e "\n\n✅ continuing with the installation..."; return 0; }
+
+  nano ${EXTRA_FILES_PATH}/etc/nixos/configuration.nix
+}
+
+cloudflare_dns_setup() {
+  gum confirm "➡️ This script can automatically create DNS records for your services. Proceed? (recommended)" || { echo -e "\n\n ⚠️ skipping the DNS records creation step..."; return 0; }
+
+  local ZONE_ID
+  local RECORD_COUNT
+  local IS_MATCHING
+  local DNS_RECORDS
+
+  create_records() {
+    local SUBDOMAIN="${1}"
+    local CREATION_STATUS
+
+    CREATION_STATUS=$(curl -s -X POST "https://api.cloudflare.com/client/v4/zones/${ZONE_ID}/dns_records" \
+      -H "Authorization: Bearer ${CLOUDFLARE_DNS_API_TOKEN}" \
+      -H "Content-Type: application/json" \
+      --data "{\"type\":\"A\",\"name\":\"${SUBDOMAIN}\",\"content\":\"${HOME_SERVER_IP}\",\"ttl\":1,\"proxied\":false}" | jq -r '.success')
+
+    if [[ "${CREATION_STATUS}" == "true" ]]; then
+      echo " ✅ Successfully created a DNS record for ${SUBDOMAIN}"
+    else
+      echo -e "❌ Failed to create a DNS record for ${SUBDOMAIN}. Check documentation to \n
+                  learn how you can create them manually."
+    fi
+  }
+
+  erase_records() {
+    local SUBDOMAIN="${1}"
+
+    gum style --border normal --margin "1" --padding "1 2" --border-foreground 212 "
+    ⚠️  $(gum style --foreground 212 'WARNING:') One or more existing type A DNS records found for \`${SUBDOMAIN}\`.
+    This script can clear those DNS records for you and create the correct ones needed for the server.
+        If you are unsure that these records are actually in use, please select \"no\"."
+    gum confirm "Select \"yes\" to clear ALL EXISTING type A DNS records for this subdomain and automatically create the correct ones." \
+    || { echo -e "\n ⚠️ DNS records for ${SUBDOMAIN} will not be updated"; return 0; }
+
+    RECORD_IDS=$(curl -s -X GET "https://api.cloudflare.com/client/v4/zones/${ZONE_ID}/dns_records?name=${SUBDOMAIN}&type=A" \
+      -H "Authorization: Bearer ${CLOUDFLARE_DNS_API_TOKEN}" \
+      -H "Content-Type: application/json" | jq -r '.result[].id')
+
+    for id in ${RECORD_IDS}; do
+      curl -s -X DELETE "https://api.cloudflare.com/client/v4/zones/${ZONE_ID}/dns_records/${id}" \
+        -H "Authorization: Bearer ${CLOUDFLARE_DNS_API_TOKEN}" \
+        -H "Content-Type: application/json" > /dev/null 2>&1
+    done
+
+    create_records "${SUBDOMAIN}"
+  }
+
+  echo -e "\n\n ☁️  Configuring Cloudflare DNS records..."
+
+  i=0
+  for service in "${SELECTED_WEB_APPLICATIONS[@]}"; do
+    if [[ -n "${SELECTED_WEB_APPLICATIONS_SUBDOMAIN[${i}]:-}" ]]; then
+      SELECTED_SERVICES_DNS+=( "${SELECTED_WEB_APPLICATIONS_SUBDOMAIN[${i}]}.${DOMAIN_NAME}" )
+    else
+      SELECTED_SERVICES_DNS+=( "${service}.${DOMAIN_NAME}" )
+    fi
+    i=$((i + 1))
+    [[ "${service}" == "nextcloud" ]] && SELECTED_SERVICES_DNS+=( "onlyoffice.${DOMAIN_NAME}" "whiteboard.${DOMAIN_NAME}" )
+  done
+
+  if [[ -n "${SELECTED_DNS_SERVICE_SUBDOMAIN[0]:-}" ]]; then
+    SELECTED_SERVICES_DNS+=( "${SELECTED_DNS_SERVICE_SUBDOMAIN[0]}.${DOMAIN_NAME}" )
+  else
+    SELECTED_SERVICES_DNS+=( "${SELECTED_DNS_SERVICE}.${DOMAIN_NAME}" )
+  fi
+
+  # Get Zone ID
+  ZONE_ID=$(curl -s -X GET "https://api.cloudflare.com/client/v4/zones?name=${DOMAIN_NAME}" \
+    -H "Authorization: Bearer ${CLOUDFLARE_DNS_API_TOKEN}" \
+    -H "Content-Type: application/json" | jq -r '.result[0].id')
+
+  if [[ "${ZONE_ID}" == "null" || -z "${ZONE_ID}" ]]; then
+    echo -e "\n\n ⚠️  Could not fetch Zone ID for ${DOMAIN_NAME}. Please check your Cloudflare \"DNS ZONE\" API token"
+    echo "Check the Numbus-Server documentation to learn how to get one."
+  fi
+
+  # Check for existing records and create them if non-existent
+  for service_domain in "${SELECTED_SERVICES_DNS[@]}"; do
+    DNS_RECORDS=$(curl -s -X GET "https://api.cloudflare.com/client/v4/zones/${ZONE_ID}/dns_records?name=${service_domain}&type=A" \
+      -H "Authorization: Bearer ${CLOUDFLARE_DNS_API_TOKEN}" \
+      -H "Content-Type: application/json")
+
+    RECORD_COUNT=$(echo "${DNS_RECORDS}" | jq '.result | length')
+
+    if [[ "${RECORD_COUNT}" -eq 0 ]]; then
+      echo -e "\n ⚠️ No DNS record found for ${service_domain}"
+      create_records "${service_domain}"
+    elif [[ "${RECORD_COUNT}" -eq 1 ]]; then
+      if [[ $(echo "${DNS_RECORDS}" | jq ".result[0].content == \"${HOME_SERVER_IP}\"") == "true" ]]; then
+        echo -e "\n ✅ DNS record already configured for ${service_domain}"
+      else
+        echo -e "\n ⚠️ No DNS record found for ${service_domain}"
+        erase_records "${service_domain}"
+      fi
+    elif [[ "${RECORD_COUNT}" -gt 1 ]]; then
+      erase_records "${service_domain}"
+    fi
+  done
+}
+
+deploy() {
+  git -C . add -f "${EXTRA_FILES_PATH}/"
+  git -C . add -f "templates/"
+  git -C . add -f "deploy.conf"
+
+  # Initialize a git repo in the configuration to be deployed
+  # This allows the Management UI on the appliance to commit changes 
+  # and provide a local history/rollback UI to the user.
+  if [ ! -d "${EXTRA_FILES_PATH}/etc/nixos/.git" ]; then
+    git -C "${EXTRA_FILES_PATH}/etc/nixos" init -q
+    git -C "${EXTRA_FILES_PATH}/etc/nixos" add .
+    git -C "${EXTRA_FILES_PATH}/etc/nixos" commit -m "Initial bootstrap via Numbus Deploy" -q
+  fi
+
+  echo -e "\n\n🔄 Deploying to the remote server..."
+  nix flake update --flake ./${EXTRA_FILES_PATH}/etc/nixos
+  nix run github:nix-community/nixos-anywhere -- \
+    --flake ${EXTRA_FILES_PATH}/etc/nixos#numbus-server \
+    --extra-files ${EXTRA_FILES_PATH} \
+    --chown "/home/numbus-admin/" 1000:1000 \
+    --target-host ${TARGET_USER}@${LIVE_TARGET_IP}
+
+  echo -e "\n\n✅ Installation successfull !"
+  sleep 1
+}
+
+postrun_action() {
+  TARGET_USER="numbus-admin"
+  LIVE_TARGET_IP="${HOME_SERVER_IP}"
+  LIVE_TARGET_PASSWORD="changeMe!"
+
+  echo -e "\n\n Now the remote machine will reboot. You will need to input the boot disk(s) passphrase.
+  This will be the only time you will have to do so, it will be automatic in the future."
+
+  gum spin --title "Rebooting the remote..." -- sleep 120
+
+  gum confirm "➡️  Select \"yes\" once the machine rebooted and you unlocked the disks." || { echo -e "\n\n❌ Aborting as requested."; exit 1; }
+
+  FOUND="false"
+  i="0"
+  while [[ "${FOUND}" == "false" ]]; do
+    if ping -c1 -W1 $HOME_SERVER_IP >/dev/null 2>&1; then
+      FOUND="true"
+      echo -e "\n✅ Ping ${HOME_SERVER_IP} successful ! Continuing..."
+    else
+      i=$((i + 1))
+      if [[ "${i}" -gt 150 ]]; then
+        echo -e "\n\n❌ Could not connect to the server after 150 retries. \
+        This is most likely due to a networking issue. Please double check your network settings. Aborting."
+        exit 1
+      fi
+    fi
+  done
+
+  if [[ "${TARGET_TPM}" == "true" && ${TARGET_TPM_VERSION} -eq 2 ]]; then
+    gum style --border normal --margin "1" --padding "1 2" --border-foreground 212 "
+        A TPM version 2 has been detected on the system. You can choose to enable automatic disk decryption on boot.
+    Enabling automatic disk decryption on boot means that you won't have to enter your disk password everytime you start your server.
+      This comes in very handy if you don't plan to leave your server accessible with a keyboard or if you don't have an IP KVM.
+
+    Note : This feature is currently vulnerable to on-site attacks. This means that an attacker with physical access to your machine
+                            could steal the password from the TPM, and therefore have access to all your date.
+
+                                      Do you want to enable automatic disk decryption on boot ?"
+
+    if gum confirm "➡️  I understand, 'yes' to proceed."; then
+      sshpass -p "${LIVE_TARGET_PASSWORD}" ssh -i "${EXTRA_FILES_PATH}/home/numbus-admin/.ssh/id_ed25519" "${TARGET_USER}@${LIVE_TARGET_IP}" 'bash -s' << EOF
+echo "Enrolling boot disk key to TPM..."
+
+BOOT_DISKS_NAME=(${BOOT_DISKS_NAME[@]})
+DEBUG=${DEBUG}
+DISK_PATH=""
+j=1
+
+for i in \${!BOOT_DISKS_NAME[@]}; do
+  if echo "\${BOOT_DISKS_NAME[\${i}]}" | grep -iq "nvme"; then
+    [[ "\${DEBUG}" == "true" ]] && echo "NVMe detected..."
+    DISK_PATH="/dev/\${BOOT_DISKS_NAME[\${i}]}p2"
+  else
+    [[ "\${DEBUG}" == "true" ]] && echo "Non-NVMe drive detected..."
+    DISK_PATH="/dev/\${BOOT_DISKS_NAME[\${i}]}2"
+  fi
+  [[ "\${DEBUG}" == "true" ]] && echo "Issuing enroll command for disk \${DISK_PATH}..."
+  echo ${LIVE_TARGET_PASSWORD} | sudo -S systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=0+7 --unlock-key-file=/etc/secrets/disks/boot-\${j} \${DISK_PATH}
+  j=\$((j + 1))
+done
+
+echo "Getting PCRS 15 hash..."
+PCR_HASH=\$(echo ${LIVE_TARGET_PASSWORD} | sudo -S systemd-analyze pcrs 15 --json=short)
+
+echo ${LIVE_TARGET_PASSWORD} | sudo -S sed -i "s|PCR_HASH|\${PCR_HASH}|" /etc/nixos/configuration.nix
+EOF
+    else
+      echo "Skipping TPM configuration."
+    fi
+  else
+    echo "No supported TPM detected (TPM version 2 required). Skipping TPM configuration."
+  fi
+
+  gum style --border normal --margin "1" --padding "1 2" --border-foreground 212 "
+            ⚠️  $(gum style --foreground 212 'WARNING:') You will now set the password of the numbus-admin user.
+You will almost never user it. Consider using a very strong password : you can write it down
+securely on a hidden sheet of paper or add it to your password manager (locally with Passbolt
+                    with any other online password manager provider)."
+
+  gum confirm "➡️  I understand, 'yes' to proceed." || { echo -e "\n\n❌ Aborting as requested."; exit 1; }
+
+  echo $LIVE_TARGET_PASSWORD | sudo -S passwd numbus-admin
+}
+
+nix_update() {
+  echo -e "\n\n🔄 Updating NixOS on the remote server..."
+
+  nixos-rebuild --target-host numbus-admin@${LIVE_TARGET_IP} \
+    --use-remote-sudo switch --flake ${EXTRA_FILES_PATH}/etc/nixos#numbus-server
+}
+# --- MAIN FUNCTIONS ---<
+
+
+
+# --- DEFAULT VARIABLES --->
+WEBSERVER_PORT=${WEBSERVER_PORT:-8088}
+
+LIVE_DATA_PATH="/run/user/$(id -u)/numbus/web/live_settings.json"
+HARDWARE_DATA_PATH="/run/user/$(id -u)/numbus/web/hardware.json"
+
+CONFIG_FILE="../config/numbus.yaml"
+
+TARGET_USER="nixos"
+
+TMP_FILES_PATH="/run/user/$(id -u)/numbus-$(date +"%Y-%m-%d-%Hh%M")"
+EXTRA_FILES_PATH="${TMP_FILES_PATH}/config"
+
+if [[ ${DEBUG-0} -eq 1 ]]; then
+  FILES_CP_FLAGS="vau"
+  FILES_RM_FLAGS="vf"
+  DIR_RM_FLAGS="rvf"
+  MKDIR_FLAGS="pv"
+  MV_FLAGS="vu"
+else
+  DEBUG=0
+  FILES_CP_FLAGS="au"
+  FILES_RM_FLAGS="f"
+  DIR_RM_FLAGS="rf"
+  MKDIR_FLAGS="p"
+  MV_FLAGS="u"
+fi
+
+IP_REGEX='^([0-9]{1,3}\.){3}[0-9]{1,3}$'
+SUBNET_REGEX='^([0-9]{1,3}\.){3}[0-9]{1,3}/[0-9]{1,2}$'
+DOMAIN_REGEX='^([a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z]{2,}$'
+EMAIL_REGEX='^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$'
+PORT_REGEX='^[0-9]{1,5}$'
+SSH_KEY_REGEX='^ssh-[a-z0-9]+ [A-Za-z0-9+/]+.*'
+PHONE_REGEX='^\+[1-9][0-9]{7,14}$' 
+
+GUM_INPUT_PADDING="1 1"
+GUM_INPUT_HEADER_FOREGROUND="212"
+GUM_INPUT_CURSOR_FOREGROUND="212"
+GUM_INPUT_TIMEOUT="3600"
+# --- DEFAULTS VARIABLES ---<
+
+
+
+# --- PRE MAIN LOGIC --->
+set -euo pipefail
+clear
+
+trap cleanup EXIT
+compatibility_check
+# --- PRE MAIN LOGIC ---<
+
+
+
+# --- MAIN LOGIC --->
+echo """
+   _  ____  ____  ______  __  ______
+  / |/ / / / /  |/  / _ )/ / / / __/
+ /    / /_/ / /|_/ / _  / /_/ /\ \  
+/_/|_/\____/_/  /_/____/\____/___/  
+"""
+
+DEPLOYMENT_STRATEGY=$(gum choose --header "Choose your preferred deployment strategy :" \
+"I don't have a configuration" \
+"I have a valid configuration hosted on a Git platform")
+
+if [[ "${DEPLOYMENT_STRATEGY}" == "I don't have a configuration" ]]; then
+  BRIDGE_SCRIPT="../web/logic/interactive.py"
+  launch_gui
+else
+  DEPLOYMENT_MODE=$(gum choose --header "Choose your preferred deployment mode :" \
+  "Through my web browser (Recommended for beginners)" \
+  "Through my terminal (TUI)")
+  if [[ "${DEPLOYMENT_MODE}" == "Through my web browser (Recommended for beginners)" ]]; then
+    BRIDGE_SCRIPT="../web/logic/non-interactive.py"
+    launch_gui
+  else
+    launch_tui
+  fi
+fi
\ No newline at end of file
diff --git a/script/terminology.md b/script/terminology.md
new file mode 100644
index 0000000..b9fd977
--- /dev/null
+++ b/script/terminology.md
@@ -0,0 +1,6 @@
+# Terminology for the variables used
+
+|Variable|Meaning|Possible values|
+|-|-------|-|
+|DEPLOYMENT_STRATEGY|Either deploy the machine with a config you already have or let the script guide you through the config options|**interactive** or **non-interactive**|
+|DEPLOYMENT_MODE|Either configure the machine through your terminal (TUI) or through a slick web UI (GUI)|**TUI** (only available for **non-interactive** strategy) or **GUI**|
\ No newline at end of file
diff --git a/deploy/GUI/web/index.html b/web/index.html
similarity index 100%
rename from deploy/GUI/web/index.html
rename to web/index.html
diff --git a/web/logic/interactive.py b/web/logic/interactive.py
new file mode 100644
index 0000000..3d9774e
--- /dev/null
+++ b/web/logic/interactive.py
@@ -0,0 +1,55 @@
+import http.server
+import json
+import os
+import sys
+
+### Variables -->
+SECRET_PATH = "/run/user/{}/numbus".format(os.getuid()) if os.path.exists("/run/user/{}".format(os.getuid())) else "../secrets"
+os.makedirs(SECRET_PATH, exist_ok=True)
+LOGS_DIR = "../web/logs/"
+PAGES_DIR = "../web/pages/"
+CONFIG_DIR = "../web/config/"
+SIGNALS_DIR = "../web/signal/"
+### <-- Variables
+
+class BridgeHandler(http.server.SimpleHTTPRequestHandler):
+  def do_GET(self):
+    # Route for logs: /logs?type=out or /logs?type=err
+    if self.path.startswith('/logs'):
+      log_type = "out" if "type=err" not in self.path else "err"
+      log_path = os.path.join(LOGS_DIR, f'deploy-{log_type}.log')
+      
+      self.send_response(200)
+      self.send_header('Content-type', 'text/plain')
+      self.send_header('Access-Control-Allow-Origin', '*')
+      self.end_headers()
+      
+      if os.path.exists(log_path):
+        with open(log_path, 'r') as f:
+          # Read last 50 lines for better context during errors
+          self.wfile.write("".join(f.readlines()[-50:]).encode())
+      return
+    return http.server.SimpleHTTPRequestHandler.do_GET(self)
+
+  def do_POST(self):
+    content_length = int(self.headers['Content-Length'])
+    post_data = self.rfile.read(content_length)
+    
+    if self.path == '/discovery':
+      # Store secrets in memory-backed filesystem
+      with open(os.path.join(SECRET_PATH, "live_settings.json"), "wb") as f:
+        f.write(post_data)
+      self.send_response(200)
+      self.end_headers()
+      # Signal Bash that discovery data is ready
+      with open(os.path.join(SIGNALS_DIR, ".discovery_ready"), "w") as f: f.write("1")
+
+    elif self.path == '/deploy':
+      with open(os.path.join(CONFIG_DIR, "numbus.yaml"), "wb") as f:
+        f.write(post_data)
+      self.send_response(200)
+      self.end_headers()
+      with open(os.path.join(SIGNALS_DIR, ".deploy_signal"), "w") as f: f.write("1")
+
+os.chdir(PAGES_DIR)
+http.server.HTTPServer(('localhost', 8088), BridgeHandler).serve_forever()
\ No newline at end of file
diff --git a/deploy/GUI/web/logic/bridge.py b/web/logic/non-interactive.py
similarity index 100%
rename from deploy/GUI/web/logic/bridge.py
rename to web/logic/non-interactive.py
diff --git a/deploy/GUI/web/media/dark/numbus-backup-server-dark.svg b/web/media/dark/numbus-backup-server-dark.svg
similarity index 100%
rename from deploy/GUI/web/media/dark/numbus-backup-server-dark.svg
rename to web/media/dark/numbus-backup-server-dark.svg
diff --git a/deploy/GUI/web/media/dark/numbus-computer-dark.svg b/web/media/dark/numbus-computer-dark.svg
similarity index 100%
rename from deploy/GUI/web/media/dark/numbus-computer-dark.svg
rename to web/media/dark/numbus-computer-dark.svg
diff --git a/deploy/GUI/web/media/dark/numbus-server-dark.svg b/web/media/dark/numbus-server-dark.svg
similarity index 100%
rename from deploy/GUI/web/media/dark/numbus-server-dark.svg
rename to web/media/dark/numbus-server-dark.svg
diff --git a/deploy/GUI/web/media/dark/numbus-template-dark.svg b/web/media/dark/numbus-template-dark.svg
similarity index 100%
rename from deploy/GUI/web/media/dark/numbus-template-dark.svg
rename to web/media/dark/numbus-template-dark.svg
diff --git a/deploy/GUI/web/media/dark/numbus-tv-dark.svg b/web/media/dark/numbus-tv-dark.svg
similarity index 100%
rename from deploy/GUI/web/media/dark/numbus-tv-dark.svg
rename to web/media/dark/numbus-tv-dark.svg
diff --git a/deploy/GUI/web/media/favicon.ico b/web/media/favicon.ico
similarity index 100%
rename from deploy/GUI/web/media/favicon.ico
rename to web/media/favicon.ico
diff --git a/deploy/GUI/web/media/light/numbus-backup-server-light.svg b/web/media/light/numbus-backup-server-light.svg
similarity index 100%
rename from deploy/GUI/web/media/light/numbus-backup-server-light.svg
rename to web/media/light/numbus-backup-server-light.svg
diff --git a/deploy/GUI/web/media/light/numbus-computer-light.svg b/web/media/light/numbus-computer-light.svg
similarity index 100%
rename from deploy/GUI/web/media/light/numbus-computer-light.svg
rename to web/media/light/numbus-computer-light.svg
diff --git a/deploy/GUI/web/media/light/numbus-server-light.svg b/web/media/light/numbus-server-light.svg
similarity index 100%
rename from deploy/GUI/web/media/light/numbus-server-light.svg
rename to web/media/light/numbus-server-light.svg
diff --git a/deploy/GUI/web/media/light/numbus-template-light.svg b/web/media/light/numbus-template-light.svg
similarity index 100%
rename from deploy/GUI/web/media/light/numbus-template-light.svg
rename to web/media/light/numbus-template-light.svg
diff --git a/deploy/GUI/web/media/light/numbus-tv-light.svg b/web/media/light/numbus-tv-light.svg
similarity index 100%
rename from deploy/GUI/web/media/light/numbus-tv-light.svg
rename to web/media/light/numbus-tv-light.svg
diff --git a/deploy/GUI/web/media/logo.png b/web/media/logo.png
similarity index 100%
rename from deploy/GUI/web/media/logo.png
rename to web/media/logo.png
diff --git a/deploy/GUI/web/pages/configuration.html b/web/pages/configuration.html
similarity index 100%
rename from deploy/GUI/web/pages/configuration.html
rename to web/pages/configuration.html
diff --git a/web/pages/installation.html b/web/pages/installation.html
new file mode 100644
index 0000000..e69de29
diff --git a/web/pages/post-installation.html b/web/pages/post-installation.html
new file mode 100644
index 0000000..e69de29
diff --git a/deploy/GUI/web/pages/preparation.html b/web/pages/preparation.html
similarity index 100%
rename from deploy/GUI/web/pages/preparation.html
rename to web/pages/preparation.html