From 94451f9aa00bf4be1531d3c523b540316c5ad191 Mon Sep 17 00:00:00 2001 From: bunker-admin Date: Sun, 19 Apr 2026 16:32:38 -0600 Subject: [PATCH] A bunch of documentation updates --- CLAUDE.md | 25 +- mcp-server/package-lock.json | 2 +- mcp-server/package.json | 2 +- mcp-server/src/index.ts | 2 +- mkdocs/.cache/plugin/social/manifest.json | 6 + .../admin/events/checkin-scanner.png | Bin 0 -> 30603 bytes .../admin/events/create-event-drawer.png | Bin 0 -> 85425 bytes .../screenshots/admin/events/event-detail.png | Bin 0 -> 116289 bytes .../admin/events/public-event-page.png | Bin 0 -> 111383 bytes .../admin/events/ticketed-events-list.png | Bin 0 -> 79656 bytes .../repo-data/admin-changemaker.lite.json | 4 +- .../repo-data/anthropics-claude-code.json | 10 +- .../assets/repo-data/coder-code-server.json | 10 +- .../repo-data/gethomepage-homepage.json | 10 +- .../docs/assets/repo-data/go-gitea-gitea.json | 10 +- .../docs/assets/repo-data/knadh-listmonk.json | 10 +- .../docs/assets/repo-data/lyqht-mini-qr.json | 4 +- mkdocs/docs/assets/repo-data/n8n-io-n8n.json | 10 +- .../docs/assets/repo-data/nocodb-nocodb.json | 10 +- .../docs/assets/repo-data/ollama-ollama.json | 10 +- .../repo-data/squidfunk-mkdocs-material.json | 8 +- mkdocs/docs/docs/admin/advocacy/campaigns.md | 2 +- .../docs/admin/advocacy/representatives.md | 2 +- .../docs/docs/admin/broadcast/newsletter.md | 2 +- mkdocs/docs/docs/admin/dashboard.md | 8 +- mkdocs/docs/docs/admin/events/check-in.md | 81 + mkdocs/docs/docs/admin/events/index.md | 87 + .../docs/docs/admin/events/ticketed-events.md | 125 ++ mkdocs/docs/docs/admin/index.md | 6 + mkdocs/docs/docs/admin/people-access.md | 2 + mkdocs/docs/docs/admin/services/monitoring.md | 4 +- mkdocs/docs/docs/admin/services/tunnel.md | 2 +- mkdocs/docs/docs/admin/web/landing-pages.md | 2 +- mkdocs/docs/docs/architecture/index.md | 8 +- mkdocs/docs/docs/deployment/index.md | 6 +- mkdocs/docs/docs/deployment/security.md | 201 ++ mkdocs/docs/docs/getting-started/index.md | 2 +- .../docs/docs/getting-started/installation.md | 30 +- mkdocs/docs/docs/index.md | 2 +- mkdocs/docs/docs/services/index.md | 4 +- mkdocs/docs/docs/user-guide/campaigns.md | 2 +- mkdocs/docs/docs/user-guide/donations.md | 6 + mkdocs/docs/docs/user-guide/events.md | 5 +- mkdocs/docs/docs/user-guide/shop.md | 8 + mkdocs/docs/docs/volunteer/shifts.md | 8 + mkdocs/docs/overrides/main.html | 72 +- mkdocs/mkdocs.yml | 5 + mkdocs/site/404.html | 72 +- mkdocs/site/404/index.html | 72 +- ...a-smoother-fresh-install-v298-and-v299.png | Bin 0 -> 41524 bytes .../social/blog/category/release-notes.png | Bin 0 -> 24719 bytes .../repo-data/admin-changemaker.lite.json | 4 +- .../repo-data/anthropics-claude-code.json | 10 +- .../assets/repo-data/coder-code-server.json | 10 +- .../repo-data/gethomepage-homepage.json | 10 +- .../site/assets/repo-data/go-gitea-gitea.json | 10 +- .../site/assets/repo-data/knadh-listmonk.json | 10 +- .../site/assets/repo-data/lyqht-mini-qr.json | 4 +- mkdocs/site/assets/repo-data/n8n-io-n8n.json | 10 +- .../site/assets/repo-data/nocodb-nocodb.json | 10 +- .../site/assets/repo-data/ollama-ollama.json | 10 +- .../repo-data/squidfunk-mkdocs-material.json | 8 +- .../index.html | 74 +- .../27/test-blog-post---version-7/index.html | 92 +- .../index.html | 1816 +++++++++++++++++ mkdocs/site/blog/archive/2026/index.html | 124 +- .../blog/category/announcements/index.html | 104 +- mkdocs/site/blog/category/platform/index.html | 160 +- .../blog/category/release-notes/index.html | 1761 ++++++++++++++++ mkdocs/site/blog/category/testing/index.html | 110 +- mkdocs/site/blog/index.html | 124 +- mkdocs/site/comments/callback/index.html | 72 +- .../docs/admin/advocacy/campaigns/index.html | 74 +- .../admin/advocacy/email-queue/index.html | 72 +- mkdocs/site/docs/admin/advocacy/index.html | 72 +- .../admin/advocacy/representatives/index.html | 74 +- .../docs/admin/advocacy/responses/index.html | 72 +- .../broadcast/email-templates/index.html | 72 +- mkdocs/site/docs/admin/broadcast/index.html | 72 +- .../admin/broadcast/newsletter/index.html | 74 +- .../site/docs/admin/broadcast/sms/index.html | 72 +- mkdocs/site/docs/admin/dashboard/index.html | 80 +- mkdocs/site/docs/admin/index.html | 72 +- mkdocs/site/docs/admin/map/areas/index.html | 72 +- .../site/docs/admin/map/canvassing/index.html | 72 +- .../docs/admin/map/data-quality/index.html | 72 +- mkdocs/site/docs/admin/map/index.html | 72 +- .../site/docs/admin/map/locations/index.html | 72 +- .../site/docs/admin/map/settings/index.html | 72 +- mkdocs/site/docs/admin/map/shifts/index.html | 72 +- mkdocs/site/docs/admin/media/ads/index.html | 72 +- .../docs/admin/media/analytics/index.html | 72 +- .../site/docs/admin/media/curated/index.html | 72 +- mkdocs/site/docs/admin/media/index.html | 72 +- .../site/docs/admin/media/library/index.html | 72 +- .../docs/admin/media/moderation/index.html | 72 +- .../docs/admin/payments/donations/index.html | 72 +- mkdocs/site/docs/admin/payments/index.html | 72 +- .../site/docs/admin/payments/plans/index.html | 72 +- .../docs/admin/payments/products/index.html | 72 +- .../docs/admin/payments/settings/index.html | 72 +- .../site/docs/admin/people-access/index.html | 73 +- .../docs/admin/services/crowdsec/index.html | 72 +- mkdocs/site/docs/admin/services/index.html | 72 +- .../admin/services/integrations/index.html | 72 +- .../docs/admin/services/monitoring/index.html | 76 +- .../docs/admin/services/tunnel/index.html | 74 +- .../services/user-provisioning/index.html | 72 +- mkdocs/site/docs/admin/settings/index.html | 72 +- .../docs/admin/web/documentation/index.html | 72 +- .../site/docs/admin/web/homepage/index.html | 72 +- mkdocs/site/docs/admin/web/index.html | 72 +- .../docs/admin/web/landing-pages/index.html | 74 +- .../site/docs/admin/web/navigation/index.html | 72 +- mkdocs/site/docs/api/index.html | 72 +- mkdocs/site/docs/architecture/index.html | 80 +- mkdocs/site/docs/deployment/index.html | 78 +- .../getting-started/control-panel/index.html | 249 ++- .../environment-variables/index.html | 72 +- .../docs/getting-started/features/index.html | 72 +- .../getting-started/first-steps/index.html | 81 +- mkdocs/site/docs/getting-started/index.html | 74 +- .../getting-started/installation/index.html | 288 ++- .../getting-started/prerequisites/index.html | 81 +- .../docs/getting-started/services/index.html | 72 +- .../docs/getting-started/upgrades/index.html | 72 +- mkdocs/site/docs/index.html | 72 +- mkdocs/site/docs/phil/index.html | 72 +- mkdocs/site/docs/services/index.html | 76 +- mkdocs/site/docs/troubleshooting/index.html | 72 +- .../site/docs/user-guide/campaigns/index.html | 74 +- .../site/docs/user-guide/donations/index.html | 97 +- mkdocs/site/docs/user-guide/events/index.html | 74 +- .../site/docs/user-guide/gallery/index.html | 72 +- mkdocs/site/docs/user-guide/index.html | 72 +- mkdocs/site/docs/user-guide/map/index.html | 72 +- .../site/docs/user-guide/profile/index.html | 72 +- mkdocs/site/docs/user-guide/shifts/index.html | 72 +- mkdocs/site/docs/user-guide/shop/index.html | 101 +- .../docs/volunteer/achievements/index.html | 72 +- .../site/docs/volunteer/canvassing/index.html | 72 +- mkdocs/site/docs/volunteer/index.html | 72 +- mkdocs/site/docs/volunteer/shifts/index.html | 101 +- mkdocs/site/docs/volunteer/social/index.html | 72 +- mkdocs/site/includes/abbreviations/index.html | 72 +- mkdocs/site/main/index.html | 72 +- mkdocs/site/overrides/main.html | 72 +- mkdocs/site/search/search_index.json | 2 +- mkdocs/site/sitemap.xml | 196 +- mkdocs/site/sitemap.xml.gz | Bin 870 -> 910 bytes mkdocs/site/tags.json | 2 +- mkdocs/site/test-page/index.html | 72 +- mkdocs/site/test/index.html | 72 +- 153 files changed, 6027 insertions(+), 5750 deletions(-) create mode 100644 mkdocs/docs/assets/images/screenshots/admin/events/checkin-scanner.png create mode 100644 mkdocs/docs/assets/images/screenshots/admin/events/create-event-drawer.png create mode 100644 mkdocs/docs/assets/images/screenshots/admin/events/event-detail.png create mode 100644 mkdocs/docs/assets/images/screenshots/admin/events/public-event-page.png create mode 100644 mkdocs/docs/assets/images/screenshots/admin/events/ticketed-events-list.png create mode 100644 mkdocs/docs/docs/admin/events/check-in.md create mode 100644 mkdocs/docs/docs/admin/events/index.md create mode 100644 mkdocs/docs/docs/admin/events/ticketed-events.md create mode 100644 mkdocs/docs/docs/deployment/security.md create mode 100644 mkdocs/site/assets/images/social/blog/2026/04/16/a-smoother-fresh-install-v298-and-v299.png create mode 100644 mkdocs/site/assets/images/social/blog/category/release-notes.png create mode 100644 mkdocs/site/blog/2026/04/16/a-smoother-fresh-install-v298-and-v299/index.html create mode 100644 mkdocs/site/blog/category/release-notes/index.html diff --git a/CLAUDE.md b/CLAUDE.md index a5f4f08f..9aa7391d 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -22,7 +22,7 @@ Changemaker Lite is a self-hosted political campaign platform built with Docker - ✅ Granular Admin Roles (9 admin roles + module-specific RBAC) - ✅ Collaborative Docs Editing (Y.js CRDT + Hocuspocus) - ✅ Engagement Scoring + EventBus + Gitea SSO -- ✅ MCP Server (Claude Code integration, 27 core + 40 on-demand tools) +- ✅ MCP Server (Claude Code integration, 27 core + 6 on-demand packs (~65 tools)) - 🚧 Phase 15 (Testing + Polish) - Next --- @@ -161,19 +161,32 @@ changemaker.lite/ │ ├── hooks/ # useDebounce, useLocalStorage │ └── types/ # api.ts, canvass.ts, media.ts (TypeScript interfaces) │ -├── mcp-server/ # Claude Code MCP server (27 core + 40 on-demand tools) +├── mcp-server/ # Claude Code MCP server (27 core + 6 on-demand packs (~65 tools)) ├── nginx/ # Reverse proxy config (subdomain routing + CSP) ├── configs/ # Prometheus, Grafana, Alertmanager, Pangolin configs ├── scripts/ # Deployment, backup, upgrade, registry scripts │ ├── install.sh # Curl-friendly installer (downloads tarball + runs config.sh) +│ ├── uninstall.sh # Remove containers, volumes, and install dir │ ├── build-and-push.sh # Build production images → push to Gitea registry │ ├── build-release.sh # Package runtime files into release tarball │ ├── mirror-images.sh # Mirror third-party images to Gitea │ ├── upgrade.sh # 6-phase upgrade (git or release-tarball mode) │ ├── upgrade-check.sh # Check for updates (git or Gitea API) │ ├── upgrade-watcher.sh # Systemd bridge for admin GUI upgrades +│ ├── update-env.sh # Merge new variables from .env.example into existing .env │ ├── backup.sh / restore.sh # PostgreSQL + Listmonk + uploads backup/restore -│ └── validate-env.sh # Required env variable validation +│ ├── validate-env.sh # Required env variable validation +│ ├── validate-compose-parity.sh # Check docker-compose.yml ↔ docker-compose.prod.yml parity +│ ├── test-deployment.sh # Post-deploy smoke tests (auth, services, health) +│ ├── register-with-ccp.sh # Register instance with a Control Panel via invite code +│ ├── ccp-deregister.sh # Deregister instance from its CCP +│ ├── pangolin-teardown.sh # Delete Pangolin resources/sites (dry-run by default) +│ ├── gitea-init.sh # Bootstrap Gitea admin user + SSO app +│ ├── nocodb-init.sh # Bootstrap NocoDB project + base connection +│ ├── mkdocs-entrypoint.sh # MkDocs container entrypoint (live + built modes) +│ ├── mkdocs-build-trigger.py # Trigger MkDocs rebuild from API hooks +│ ├── legacy/ # Archived Cloudflare tunnel configs (pre-Pangolin) +│ └── systemd/ # Systemd unit files (backup timer, upgrade watcher) ├── docker-compose.yml # V2 orchestration (40+ services) ├── docker-compose.prod.yml # Production (image-only, no source mounts) ├── .env.example # All required environment variables @@ -505,10 +518,12 @@ cd api && npx tsc --noEmit && cd ../admin && npx tsc --noEmit - `api/src/services/pangolin.client.ts` — Pangolin Integration API client - `api/src/modules/pangolin/pangolin.routes.ts` — Tunnel management routes (includes `/setup-automated`) - `admin/src/pages/PangolinPage.tsx` — Setup wizard + status dashboard + automated setup button -- `scripts/pangolin-setup.sh` — CLI wrapper for automated setup +- `scripts/register-with-ccp.sh` — Register this instance with a Control Panel (CCP) using an invite code +- `scripts/pangolin-teardown.sh` — Delete all Pangolin resources/sites for an org (dry-run by default, idempotent) +- `scripts/ccp-deregister.sh` — Deregister instance from its CCP - `configs/pangolin/resources.yml` — Central resource definitions (12 services) - Newt container integration (Cloudflare alternative) -- **Automated setup:** One-command deployment (creates site, updates .env, restarts Newt) +- **Automated setup:** One-command deployment via CCP registration (creates site, updates .env, restarts Newt) - **Continuous sync:** Hourly resource sync via nginx cron job **MkDocs + Code Server:** diff --git a/mcp-server/package-lock.json b/mcp-server/package-lock.json index 0b75eedf..35d676af 100644 --- a/mcp-server/package-lock.json +++ b/mcp-server/package-lock.json @@ -8,7 +8,7 @@ "name": "changemaker-mcp-server", "version": "1.0.0", "dependencies": { - "@modelcontextprotocol/sdk": "^1.12.1", + "@modelcontextprotocol/sdk": "^1.12.3", "axios": "^1.7.0", "zod": "^3.24.1" }, diff --git a/mcp-server/package.json b/mcp-server/package.json index 585c2f37..fd2cebee 100644 --- a/mcp-server/package.json +++ b/mcp-server/package.json @@ -14,7 +14,7 @@ "typecheck": "tsc --noEmit" }, "dependencies": { - "@modelcontextprotocol/sdk": "^1.12.1", + "@modelcontextprotocol/sdk": "^1.12.3", "axios": "^1.7.0", "zod": "^3.24.1" }, diff --git a/mcp-server/src/index.ts b/mcp-server/src/index.ts index f646a2f1..7e2a8174 100644 --- a/mcp-server/src/index.ts +++ b/mcp-server/src/index.ts @@ -6,7 +6,7 @@ import { createServer } from './server.js'; // ---------- Configuration ---------- const config = { - apiUrl: process.env.CML_API_URL || 'http://localhost:4000', + apiUrl: process.env.CML_API_URL || 'http://localhost:4002', mediaApiUrl: process.env.CML_MEDIA_API_URL || 'http://localhost:4100', serviceEmail: process.env.CML_SERVICE_EMAIL || '', servicePassword: process.env.CML_SERVICE_PASSWORD || '', diff --git a/mkdocs/.cache/plugin/social/manifest.json b/mkdocs/.cache/plugin/social/manifest.json index bf7167f0..c440bb36 100644 --- a/mkdocs/.cache/plugin/social/manifest.json +++ b/mkdocs/.cache/plugin/social/manifest.json @@ -15,10 +15,12 @@ "assets/images/social/blog/2026/03/27/test-blog-post---version-6.png": "c6d68bac2cdcd6b8c52256df35d542be64de7e0e", "assets/images/social/blog/2026/03/27/test-blog-post---version-7.png": "968790eca9846a211cb33101c83bedf4f2008261", "assets/images/social/blog/2026/03/27/test-blog-post.png": "fd4dfc0ab942b7d648409d37b344d50e348150c7", + "assets/images/social/blog/2026/04/16/a-smoother-fresh-install-v298-and-v299.png": "3f1f26021d859ff82c13a70e9b4d16c07a26a0ee", "assets/images/social/blog/archive/2025.png": "08cbed159d450158ab4d79807f37adcda08bce39", "assets/images/social/blog/archive/2026.png": "b1fca8902961e9201a69205fe51b8a67a0651a75", "assets/images/social/blog/category/announcements.png": "f2afe0f942265650aac482ad8796bc8cd10834c7", "assets/images/social/blog/category/platform.png": "729705d13f917a6863191dd21711ed7f04a5172d", + "assets/images/social/blog/category/release-notes.png": "363ff5981cc223307f13e754d5d35f482dabb2f6", "assets/images/social/blog/category/testing.png": "1438c3d0345f4e20aa2d7c4cfec517791ebca5e8", "assets/images/social/blog/index.png": "0a85f3ee65b23a328848eaf24fe667e7d8232a3f", "assets/images/social/build/index.png": "30e75040da55694ca6485d51a35fb4d19a26b408", @@ -43,6 +45,9 @@ "assets/images/social/docs/admin/broadcast/newsletter.png": "c8f57b0ff3a929aa395b3555e8c50f944cc5225c", "assets/images/social/docs/admin/broadcast/sms.png": "94e531a95225a513736aafdb9987b54ace920f14", "assets/images/social/docs/admin/dashboard.png": "9683194a46c2908f456d14c9cc7303daf732d8e7", + "assets/images/social/docs/admin/events/check-in.png": "00e0ba04f063dc4e6b0b7015e0299aa701285922", + "assets/images/social/docs/admin/events/index.png": "1c93fcd45caebf488ebb4737c883a60bfd082682", + "assets/images/social/docs/admin/events/ticketed-events.png": "f91cb4d5e80fe2a07c57303b82e12ab704649bad", "assets/images/social/docs/admin/index.png": "f2e04da736fe31d06d64d4df53be86c06a76e939", "assets/images/social/docs/admin/map/areas.png": "dc8cadddf1207f7c6902d8ba56371ae201a0a8bd", "assets/images/social/docs/admin/map/canvassing.png": "4fa27bf4d80f3fde318c1b5531676be10dcb78de", @@ -78,6 +83,7 @@ "assets/images/social/docs/api/index.png": "821636fc5573fa03afda225052f77a75be336959", "assets/images/social/docs/architecture/index.png": "d91bf60857284d22cc6383000fd043bb7534287c", "assets/images/social/docs/deployment/index.png": "40b7c0d2492c1bab8d9947cf792866c1169cf83d", + "assets/images/social/docs/deployment/security.png": "d8fd2be9f1f32ac26d748e043e85b4a4f6fed825", "assets/images/social/docs/features/achievements.png": "8d338dd93da45f6193003003978a1be7a08df3e0", "assets/images/social/docs/features/automation.png": "b55d8e0973b48a6c3017e38aa70718962cd22582", "assets/images/social/docs/features/campaigns.png": "52e76e14d110d5be81f375a9e6480cd5e510493c", diff --git a/mkdocs/docs/assets/images/screenshots/admin/events/checkin-scanner.png b/mkdocs/docs/assets/images/screenshots/admin/events/checkin-scanner.png new file mode 100644 index 0000000000000000000000000000000000000000..7e48260156a726907fc4d81b7c6547b97e599e13 GIT binary patch literal 30603 zcmce-c{tSV-#}==>nJf~8T(+&jEkZYl8|+>XWt29 zhJ@@P`!ZR_7-lSE#_YdO-}}Cw-~Da`rFJv z{J^OLAP`90$nf@k5J>nV2(ruVyKmh12hdyVV?!U@HPDHD zXZ6L3qZN;PT{c7HA(0yUI5jw2){C}mN*3qQU~W%)gWnYQ z8zT17eh`SE0IY3;^k5E{o`~gdjT&InvAr{~Wp+HSMcgd6O)RcBRwTllyg1BX7qvoD zQKIXUa|Vi-t$*0~?@vX+5*X+1w7JE*5?Zu={=p~w07V+1ujE}De*39lwx3^5p5G7p z*{1>qIVvuaNX?|R1!PEwV7Ey$Tw~}~CzQoIXBE1=itRHNMjH5Y-2|IZunz3roaOL= zo=e3&mj*IJxNamn0Yr|!g(_yw8GJuaYuYFkwfo$c%aafk^r-N?1N7-xX{B0n>YY;3sGk4AI-=iQeD=XTmr(MO ze@-!#Pn_06wpRJi*~X%YWSDH`Hw77s0Ui~xtfI}-=n)yT2$US2#n8P1ER9r~X+v>8 z9(uigb1#n7tDzSV-(hR@e`Lvr=Z5gj#xBEO;q_v{NAMxs4AT?V<_B z;5>RH(Vkh|Gr)<;iQ{ZVh&P;kWi1CrcIVHioD|^8x$L35uh`5d!v>q=6^( z+3%%#>th2X7kN28o!+I$pHhXXep6|fFBC%)yu91m)FH?0qVSo8BNIn5v8bMUvmTZETD-MlTIf@^x^#Ad>}Qvr%-+W3 zLQ@%~+4=^jJM@oYG`opJoDSy>8hJxK#kXI$Kt|p3>BH-_ zPi7@G1S_$fl*a0wV{+HGamHq;S2blz%23>T0-wC@e$6)Vh^FhZyj8j-_h+q@UDM}t z4PKz zJ$13Dx-4ZX)3#X9dps7*feBC{Wu^L-ON$8T?#vhefVPv#84ZPhnC#5S@#l8Pi(LZt zce6n0iK4|}47;Z~ZlZ>gmlMYyAMi5UN8=ShRcBri$&nqJ^?I}3p^O&E&h)LMuet$U z)At6=hlwMYP-EH83x)RN&MhsH-%fa^R859%V~zI@dc?h)0fphguZwPyH);=Pu56G; z1{((QBi;=f#0>C6rjGYJOn#8XQoD~!-ZsE)B|@=2Lo23HX}WM?bHD@o`)YKhqsG*m z_oo?o(Akj9IiB|5$g!hIG2Q%B^v!?=-dkY4SE0y7Pzy2f_-W8oz!$g9(1lJca%+y@ zz*iMiN|Wzm-^E+R7MZA~*MC;wC~TIA>4iRdG8iC*+O!b(c6NV_mqO2dyV~HakhwiF ztWej7pBLEsw67~ms@@cQS?I32^oKSxck6|Qz#Eb$eT!HM55S~X&<912*EK)!V&@sa zIWx*>LosKxSOOGjiicR};t=?oIfrz)pW^I%##W~}gL3@kv4QbGoqqF9nOO!{E;X3m z1*O47jy%Zpok;Fb#nF3n;@Dqfwwrt{4oHA`KTM%KxK@3l0YNE*0*ggLcjHA?9Wi)1N zG?LT|RYITMqMAH3%S>_~{@v6>m;ceD=KJK^8JoH1ISN)Tib?15-wdcbl5Mtj!$%sP z7nZLL0Ty1z2CLj${hl*09?I{@$Ldi6PT8D41ZGwhW4xD=uyClq|I!WPH(GqIAA2aK zOn5Bws@s#DTs8C%A*vIz^`P`7D2$+?d=um_Wi6*o&XK~GUz`~Fn;66hF2IHSvnXaN zG0oeJef_ed1HCas#CUH{jclVsCM1zk5_G1y;nP>Joo~PS1mLY8qoPQ&n%o*NaV5mf$hUL9S=W2D ze!YBJ8s{MazxV|^lWdElrmEgml;aZ%tVCYr41Bn{I_hj(f0;l}QX*iOUl@)%>Il@z zXNbu+Pp8%ae85aZ&(NSddTX2v*4As9`}%3fQ!;Xd$>Ssv($Wql@z*;1%CHd$Af|==>O)-$&VGnF z9RN68-E$~xtnTqbha)0j3>?HMry9A0hi`RRNPwSp2U~^eY`=i&JdipXm+C*ts?LX) z9c5}T;AzRtJC`9}qo+=tn&Rlk{Fq0Q7WujtqyYE+QhEI;{9>2 z(R1hB)3;(bv-9#MN}d=KK9ohiD4t?Nf0RBG^A$2^t14jkxE0$DeLwc*Qg7+?jluJc zmSDVQt5Lbb=MwdA0hE`=si8va5Z*GLC3gy3d&MWHEcsrQ_tq;5&Q?r;7t+;gD<(r5 z3(;k)6^SXvsg&x4hIT1;owT^S6L6=2g#Y;_;clGP+RCQ#wL@V4ry*Hr$Q)1JoI%;pfmMT5SZ+{I`!nTJQj4=5FQ$b#fKX#le0X9766 zd_76fP+r=wfF;leyNh1S+50R+ic5$8a}PGuHQ5kX{w*eFb9Y$4nR-o z8ceII&OZ+m(7B4sD#n)S`~l)FaI#+AUT~7^Vs*tUqP@GFtaN6Mu4&q@cddE)I5VjJ zg6T1i_Nm){oKhwe{_%vnQzoxz&djFv&rFL9zWcH!L+=sx&zri@Yy@{`EG^Y-4t5FA zZmM>hqxVF>a;K(l5LPE~Lm=N*R*C6K1xn+>o??Ktwkj6LI^5J6GhUkbx!ct+EA1Ia z+-fP)g}M~o!2Xj1RK%A&5sW2ox1 zcgiw(iB84`*t6{&>F7yhoH4yLDRjkP3{6A&4H;yhXN~rrz|8ODQ8H~Ni4#uTK}CoP zYH5uZ$M2OW=d>0OF+XnQO>h=XH*XuckuCS@*W{K6zIqs)opl`iqWsFB#+z1q)=;&H zqJdfnd(a;w7>w#m&2+~MvR7oP5u4WK+5vjQ#Zvta@1$?|bKkeclBL7WjUAJ>PNp;- zIclbf?wB(mDR`Xm_ zdi+wra%jA<{#9 zS?TP#@=)q0UVW;ROu!aNu;32E22-8K1f)9#ij&K#>kAlAqgU(n^b_X4EZ?Srf0)n?JkXgL7fg(HmD$Hf#eG;o*G3! z`jd^xu1|h^(oOv=1X>gM6=(!KHr?`*Ys#*6niF$xYIVmc^i(daGsY>=J7Y>Fx#j?Z9H-t6_6;!-^B{D{5MUBxZqplk{&*( zsz)#L5o?=*38alWxdp1?H(gFm>!A0{$cG`o=d(A9)= z9wo|>kR`6~oDKgEF5o6RYUnp#@ss^GIUjCce`$$jr$7cKC7Tr;sB#us=#J;5RN`cR6-B{+4xmzT3laWf# zFMUr1JBOZaYBRvBY(us1gc(Rp%@2zQfM-{8@&@7X9*vuc5R~AD#A(FJoM^cXKCoca z4a#kk;15eckq(q;n!OK$S%-sq^9c?F@>057CK#4ho22VaCQEpPWH|T?vjia)6$Z6n zUIK=1vV`GnSVSd@ycnV3H_~W$Z^{IK!?>Gbm|>0HuU`bL`DEC1$cRy5o*JItDGVi6 znT&BMs;qkC>g@QTOXNrcj0SSY2o~F|aGFGHT;WdFj7ZGVUCEjTis3Wv9fOIXfkygQ zvaVTe=|=a{Lg>W?89UMVO(Ta8`lx7f=w~o+#&xWWn-3 zWMBwZ!09AL1F%**uO87RLr6i9;4o26y8jFc8cHis!=pLe$Yg`2wP&7>*xyR6(zUmD zB?N2azS6xzVqUui2?MxAMTDxy3~s#00K=?>r2BLv(`afJAp^#R_3yoT<>F@jpD z7@7%@YoI5YF62^29Z!?<>M`rk@@7m|{(_gGS8%x3)U>vX>I$a8pHaFUc#im6;8v(h z^&5j^4|cN$`E^wT<=#f5cuV~D&^asga`hN&Z}K$%sE9F*&5kl-eO-cb`o7?quZBL6 zK7l|Oi2myZ5q(hx3O*&UFYSYWtDlDJIky?}*+cq5$iMu#6JtbHn}t$DSwY!NR*C!a zp&>0{(1uHH^a0S?d)J*eekuZPA*#(`dZ$|ZxS<9JG;0DlzzwbJg#rE!7QIXD8yNKb z%;5<5cjGkofLbVry+ILw4Mdt;c_hB(1`zPyRbwqoS%+asf0x<~jYj5@u+{swgtN{ti|DxUIvHsQ&cZ+i*j4 zi7NpYp5@+nyg~$BCPZ4o(MyR7iQ&q7SNeK z2k1f^6@o-o3*-PY>E{`Mk4omJ34nLU>w{kZ;tl`jtlNJ{*Coq=4qnrbJa{p>Q%o%C zPR<}MH2GHeY-XmvRx_H%9vw|`1kfSm@4g^)^%#woq-Uc;r+>A0y^tu>^6_`2OJ)x& z>*{NF7>qy!0zO{xhvRo?Eq~Wrw{AH&IJj9`w?(VwYH3HzYr3cI1Y1L!DygVkykt2% z9$!^e6&oAdAIktadVh;Pq;voz^3R%8hP-^9m&kZ!Sy|ayJw;l>Yo-5b_&*kX<3>%^ z!&QTKD^oit6Meu}X^ET^7J2c9e&qQ}O18E(dxCT)Lhc8*{L|V}=yLEI^+yd)^4TeE z=j7s(f1UuShl2;4H|Hj3<&8~Ed&l=nhiKf+iC;^`?zJ&icl!8iDovJspf84EhaCSt zal_*g91aI*7u44mc#or7K|qi1Q#+&`$BKZ?_5;-8AE#p2bqN{CrOGb`U9bFEbaHQA z{-(%yEikUTnaPI^9tdW!WIulE?-@<<$k;Dp_@BN5Fo6F7-wN!!wi0~zF$_v4BjR3* zG-WORtkw&d;~aV|y!UvqCi%-ire@xC)v$kpn{A|I{JIOkJO32QuO6RD*5Iy_?C22M zWV6^A(AqC|_MOY%m1p+V^W|}1{+N6p`KRecxB!vKY2EJ*Cv46( zYLI2Oo>fMeaTYm;E>2#{DyViFnJ4J5e^&1xm+C**@P2wC_VpF6_dy67Up?!W>hnYP zGGr?E7hswHY~CqPovr1@jqzN}r;3y1uDU(ougVvX7K(tLCxz{Gl;*^M$q_I!CAdAm z-hf|TR;qML`fA`Rav*bpZ@q-FYEJVKTUO&hqaZe zU1xE6W*-cT70M{T^>X0+)qx_*D_K>Y3$+bWxV!}IZ2nypf8Jq&M$N`y5#-%{={KaF)8s4n3`)H72B=M zU301y(0l8M1IceN11XA@WuG}35+i|$KX41rt<{Qp#3K4TjzM^22xMd#ZxCZC8#0e{ zk@fxavDLzB(sAaRH*q^sE^t{hN*!FO6Zq}(TxB-*$5tn`ku>2#?7*{j>dMj7%Kq%t zxV{e$9)A9$jFdd3?akh=cv|zS`Fr9>&9gauM8EaqXquJgwv$|u0}s^=E>4 z1D-oM{p@d7bunpjZ*+63u3LU^;O%0m9D>x);MIcAt;O+l=*%?&?2Eg~+v3;ol$}f` z3C%O*o||fMI?}q!&*vb#EeVY0{pQ)PLw!5NseYlE< z1V4sYIr04bs92ue*z;;VANJQTXLfhx;VH;r)#d9kA8xoW+q&OPTE6rXCn`Ynci$j9 z1O3$k1RA!td)zyc0+ms#DN=QZ&fYKP)2QHn%7DUFPlv2sB^y&N7{Ch9k2jJK10lv< zMXe<_#~9)kbPMqEyOdG^F9E7I{Xlb@M?>{k z?sZ+1pG6P7%1M)J_B8XnWTU=~DrnaIfFYHmw-$)};NZ0lW~NT9j_S85fhSF~ET5D@ zi8-z#?BaTkxj_GE63p{95JSHMM)j#*Bs4^>tm~)J!Mt3%ddU1dn(rC8aetR92xo zC)$4m%qj@3HKn9lDTkJ2)t6LV2alI;DLdteV_4g`#6HiyVgP8wFSUNs?@U^jKcx9I zXmvspQ|jqu%UN3k&vHnxG!5dBql z>6b~nXL8c&)J19Stjo1e`=P#R#TiUeK|(pwU}AXZiv?tCDK!hBV5KgMYBKn3F%hD* zyxxYiR5s2J$5mBEJ;+beq3>?HPfeXl(%t$wonHkoD=UOnk788F9Y6S6FH}}mb%7`A z%gBW4=&EGTZ-=Da5jZ`V0(dMq; zkp|68nhoHUd!k?P`ek^-vzipEH<+%2tycf--;%Q#O!{R;1uRj$ick#y zoQ_*Uky0C&x}R&5f6LB$_2@C{u^cbCt*&?Np0m@-{592^GovF`av>ohNMFJ_UZc5T z^ymwe967ks91f;_tAAj1d;SPCQ|sip9+5y;Fe!U3xa0)dg`n%27Y%h$6~F5{>*j@_9NTQUY#R@RaR(| zv(+PS6VmPZ?K1HW2P{umsl_hMbZY28b<@Dx_RPalTwGMy z?Uut*@#~q1SYF z;$+&^KXIqmtM>ePb0vFE#U1!m(J|8(P7*Zf{-4g3sR#if4(snt4z$sy2iDdymXj@; zb-=2Y?I)9g-zw4&MItwsDrPfvSRUSiue zROO>T!PTKm^RCrlWg=bXnM28wZDWS8Zbri`Ijhl86%GYU<+;Olv>_j+iI9&4%F^ZS zci+RyB7z5phE~kf+qQ0By93vR!XK7yHhCJufN%OKsRt@!S3+RvZm&_H-rogH*-0At{ z?E2H3etkyV(o&+?P3l@4p5%EfxH%@E*w$Dgg%z8+#fu!n?R+SdXPuf|PZ(0w@u8^| z4ywU+#FxgW8s{4#aj7Yt&7NP;!NHuE)Zpc)fz+#K8zqq9qKu3w(*t zj!e{a6S0mV;U}F+nq^1*d@dQwUjbuJkEF;dj4yjcyEvI z38AY@49*=mNixhWMgFGU^pG(S= zbZKTv8XRZ%1EY&i6VS(|NAf*)xQka62{elwDLxf}vHs4+ORC~_zkYNdiKr(A(8eW+ zh%cIQD|o+P;3D<7%^dXs9l{@Bx(Y|Sz)m)s7jtq%X;|pc za8v%(?cR6&a;hd{43P@bV&a=rMr@lzVVTxP+yz4MPWw|{(F;g#@Qsv1AV=capP-;T zt~vC>R-E9dToQ7o3Ezwu|2FS4fpzMM!Z!WPBGC6$h~8#IqnDbG$xUJmsip&wj5F{> zp|&b8TyBv2N?>1a*wLC9uMygPQcfq}NeRu=$_ny$LMW#SEO}Sai`A!JTL=g<{s3UU z=P`WF>KnVpcn36ZyPjLZ%Ii2o$Y1*a$1g3On^(m6(YGX2p))61sHd)NuRAyR=b(5@ zSUumx6K-(j>3!2p4VOe*fE`ylK@A&}UvMsLCQ*a?9Wl_IFRi-+nPC+eWFjxhEVkb@ z$=tz99@2DVgHPAbWB8x%e-&!c`}zx-M&Is0;X-a7J`WFOL@N1`?^;4UDf(FJjc;3L zP9R#Ys+|*BD>Doo?^HOtPnV1(&iH$(%zT^t{Hc!TS8bsxtUs%z$*|mcqkG0CV0_Bp zm`EYXtJyOUcxTnL6t!HICg(6E`M%ki{d@}t%v$DGaI+4jkJjIbI8(b@)?Zdypb^OT zG-IUoyY^MyY4_5dus^31C39MQD24*7_fSKvM^pIay1zwA^}m+b@2GJ{=}=MOZ{hvN z#74`eLPFpRRV0VC{aX^J!DkibK#p?27LMQJe+wGn-}*k=5Xw^Om>mDUHP*kD0qbhr z47wgRb1io{Ed1S>AaWkHw)}+qxtZ%JBzUfWScocBJ z>fS-$VUa=i8k*RIs<`ewvJF)4t)sE~9!%Jt$`ukPsM z%g@XqR&#MC z$4~X5iH?tgra&RlCS@=|wRvSdxG&0<`LKrjC3L?ih;s=03}oxE0{?7&ScZMds)ucdk%cV&;yQ&V;G7c1Zo0gtMW~bt&&$wLOOdt>AFtxHRiU`JjZn z&4Ulv=s$XTA5(zpsjO<8l5cw5OI~y4L1%gaO;u=jm_^0)v=eeD{%4 z9w5>8JG_FUb!v>qWl_(7*_%$UXJyIQ8;jpJ^N1px50joopfI!Pd})nzDxyL=BSgxrsd$@UDMxag2bro*r$jz#D1f zpRKA|O#Yv4l#w^G4jB5vUXhM|{20lhc#(u+qKm1!=ECh)SD)Td2 zhzv4n{mc`)cY}Tz63C-jC@1TtIFus09jlVvCp-KXvI)wMMt(nb40DW8VuOg6hJ5g z9`XNcQR9C}uPXi$76NQ)mcISwxb?*3(D1P2!MD#k{w#FE2?ds>3O$d97&!iI2pbX> z78Y7d_wek>9sW=B;gTpQ;?FVm4nP$D>kaFAwEcf#5N&>O-Nweo0O1PKRv}bR}VNwbqi}$8CP`t-eVbQc>YMtT_pyQP*~}s0T+3oR%c+k zAYM_JdW>OJoqWIW0qBbB!Hcn0BA^Hp>(Jeb$8A;hCxclXHVP|bGO#N4_7vOHv}rckd2|DH+auJ+Kj_cH{<&#m`AI5X8BG-($g%Xe-9h0!mXzu zt@zocO;-VgCmt^)V|f&GaF2SPg;)sFmQd!t&=Dgv6|bu~lal#``?$TWJGIGSy7e6_ zj_}l^YcXv7ghNovKb5JlR6Zc#-H5y*0w`Ud(r)BPGbuLML*x4?V|h8!P7?`r&BBM2 zF|dHm+%TE$%oh%G8@jm~ zX7BqmcfMM{`+jWOCX+i^l;0Szl*7=TUmKKTQ*ANZF9-_m7OiOyo^q2VwEw^_Yd{@_ zr)7X;Q#cQRP;nS)EjP|#7tbGKPH&NfA*$%$(Q{02z)no^4go)xYU{-t5l}y-&v&T} zaFVTuCGH)S5|Jq$>&0wjrolr)oV8B$nsIx-9`j41?T-5K;L=Hfvp((B1(+S>PUua( z26T6dG5Xr9i1j`0?!z*NZOXvqVx*?X#S7{5r8YC|XDjdEea-80K!gx>%cMnU;}jrm z`zeRsjufS$xg*tR_Dot8ctWb$Om{Uy5$_}_WWe%~6D%Jycu?xV{SJo>l=s{&a?h6y z=+}r#rO!m8n?LHFNbfdSPd;Jg-&voDYNs0rVC{q>& z`OaI1F7)8n(|}~CBXHRTiR(umnqaTLqNTC;ahV@bn@tpICTh%yC#eC%L$BNG%&%>h z!~yEAAX*-l;Ix^4bD>MnjB3>+L8P@W)j2*c3Yy#`*?W7G`50(v3R;n6oWX>KBpJ~@ z+!jZTLMv3(D{?UjaIRQ;MM2}2H{$xzZ(fo$Qu$0x)6j89Rxa@979G%{MObty9MG~< zMXyb!l_R}P6|@-B?gQ9Hf1l1pH>U&*C|lJ}%b}V}sCT`LS%{43a~~x<30Wu#XzloT z{`VR4mcfbII(f_wZR00?(ws@}gUT7HpAL?ytHb%1qmP;LZ}-tpIw!V8^e^@K36K-h z4ff5IRSS5G;mEf8yOCGsiSe!#USy1F@XxsbR>CtqI{a8Mfk%(nMpj`XACj7PN=~lV zqg{;bFA-MXN5rCt8%5^v9~)3)+B3P&#p-#s2LS0uCXgk>#dg8dyhpu)JMR4l7tjge zk8R_5EC`pQNg^;mMi|g~ZQ{)>6f6<_fFZQoYK$7Hd?vq^rrLcta4$cd`68jS1WziK zBdsM=mDiUHq`326vUKq!+;NQ!0izY`u6DjrLzE=*P3O9On)6Zsgs( zaALdFPnGp3baSAb{bRz)ju~`?Cng7W_q}!aDZDkhNTJip4!Hy?56VW1E(z>wf0Pg8 z|J7E^M7Gmk4|0U{!(%&SU{`dzU|QP+3PtlM+JOTGedFcsXg}M0!S9##B@1Nzxo@%t zFak0b{bUa6a9NAJEh=M|!TT_E_~>HXhpV{thVU3_uA7FUbtMLrD#@jzI-Qi;MITzx2kzBh#v^9C{ofWA+o!F0 z+3hYa^fX5Jw{b^i+H;O94R+_mN>6N#%V^9rW#hg2^uYvHR^u)`;Vy$1j<}56?H3)p zF5iTBz$cEd>!|8tQvhA@!O8^87R1=|>PP$YWe_(e-ezJ;B z5&>J{W2w(Py;kf(rc(1%mlYL`-34kkX4inyh#(nbtSzenqfJ|ure1uxD7RDAR>tif zK)95ejKw0=j{?+Uz^rJ2$!R$nA=qqSMn`dGW^lCL>&C)w*JReyynd>Y@o55AT=scO zKn{cs-b$*{n!KbGu0C-`tLkJgB}u?kTc`j2s`5@PM7>X^USa%%4vRC=7eMJYAZ2FX z*Uek2Pv))%7_U6@D#sG$b`eR5dYQdoTy{;?=3Jxru*N{2(j=T~(24U5F(T&|umj~e z5m>4?c{wxF)Yx-nf8_GIta5prCo> zm_EM1>}W!vz|VbvaQAAVGpU${CVM0NztKGd|U{1VZFKa``n20QvAnYj_}UD zh8r@hc)rUieW$ibtEu)jDD4Vem~{h1xec*)EAjpuB5#8VC%^=aRuq>mRJ6XhA7?1LdJBvx6N%mK^?d1d;P2nG%0@kNR%LQvOfO2ar6-UZqqSz(w7;nq(&GU5>%x?1} zpjl^Ypr?Jw7#wxmu*r(gn52ooGMJkX0T597xUEkUXT4_@3eTJ(hGelj>n!+pB)Imn z$E7D!X@Dg+P?`q7Oh^5SrjS$o>2d#Oxx9fXy=L_hemzm$Z1+npWLEd0s~7s`l<_mj zhYbmAFy*3t63*qo$kg}U6-+X>%|JqvnK2PCR+>qiu$EjjxK>QFsSaV^f^oOP&J6Ex zA=oBTiaD)$iJ;3+7goBd7Q@;EIws@v>@89)luhjiv7-k_qA>pIn1- ztAl^8tAC-{`hiaX>K!H^z-WNF6KDG~oSc&a=6K{oYN9rU`R;#0_jvG1{KMpLtUjJ21`%#;s~XC2GH^ko8asW6S_ zztAp_lX^!^6dnwpAIdhYas2l7525mRy2`@w+_j6BUM_3oTDbs&NLpK64bI&h)0J-8 zTX$}FYG=ck(EV?{eEp9|;A}h&hkM6;J7Cjpjd}KdH`X-U<8SQyC5f7`ctM4r?|JO;otCmMo1*HOhPAB?j6M`88w1 z$B(n>q_v%Z(7@i_UfV$ddDhrCQn;VQ@R%MS#iJKGe$6Hln2lZJA(_EeQs6N+gph`e8?zaJ zwj3^k_x@Eh_`k1&@Rkd(&d!@bkLM~}ucs!{uKm`6m^%rGm567aQonxGR;Bae0} z?G3wi&JvIbmv{hT==Jq=Ds{Hvu|81X_c}{I>iE&42m5-Il$A|y;6ALb9R!JpL+t@= zmbsCUkNIY_D()~)+jl{Fx?q^R7QI6mO-xJ_KY6XDI!70D;`CN_+v`1Hx6W8Tu)BYM za&qz%sO8M}k&%ZsmUV!YX$N{;nH4yxz3>)zXSxseK0X%6;8R506#K4kS|8EtMY?8dZ!2KHdB z)Pt{F+vcjO;OYI7GHZX&@0RmPu(-?5f_J3_zDts&t+E!DYJSTlC!pg{?`w#{8`zi$HYQ02xro?9A-I)@?Tw@8)Hg@5>o($gfjQEVQrD zNw6LsI=LoZ`HF<*bPq>Nsq(nu(GI9@&ck{<8dTT$>CHhyv}{UmrR0ZTE~xYh#`aM@s;h6~5A{$EQZLU-wf zn??nIt8ati8!WYfl2XP^KGROiQ?mhGZWglmrRNCTvj7!!79ahYDJR((*PXc>No zPQq-GjcL=DNJb_p0guXV8IcmkLKhUPIqdf}y-l=9Ry0NBrr&*+TkH7>^3E1!f<;z= z+>NrT3u8xJSi|)Kt`y?(_zwex8{}pwC^yS(BtD6R#gUc^pbZJ-s74Uz#3FFvR1`Sh zZ)jrAS%CdF3*ufDj9!0wwoO8hJReQezM53jEcmBE93`gS+a#z%VqL#|eKso?Q340A zeGXb?1^XoLnTm+X(_AMw5l8G(HA@O*}HM$;@cYwcw;9>o&Pe<)Ski*5Rp z_sNCL(c_G$X5OrFOndRQ1Ai zJ-V^Z#R!&#)jA&rs$w~d(@VFOKBq|8ZSHIrd=0ld>et&2`RiRGdiq4=&&{iRl!l8#t6}=sVj-2wFOEI{uN4l*PWn$kAQ~lay{Jmz1Q4-e67p z9D8$anBEM?< z0w0<$eOp~s1}`YcKZ!4O8B-3*E~nhie{8DHZ~z}EpLPkvKI*G6+FT&aQbC z+Q0AJ7awo&Y+hA$_zEpkF_1+5LpaeQ?o*dngI_!DPJ`Z=!aIV1K_i+bD|cYJVrA)y zg5J_OEU%?C{v&nP9UjsMKm0wYuci{!Y;b&RDf~4xa!Kh_Rg|4>gVvVT6lFmDT1HAQ zg8>_=!Sk%S8(jRts#!ns$sJhTM(R0*b|-ZUb_eYfGUOKVWvOy>rX5cH#l)*&VZb}* z35&LrbzRRfl_i#A|m@tAznt0t|`|};Ie!<(iE>pe@|`v?%V2|!9actGq;DxmIa3m>2tVik*TC~pn!qI>Xlzzz5>R7{D#EWmf z&Z{b3($=vDfev~#egev~Z=Y@8FwYEETo^;iU-<2QG)Y$%J{#V6#@s?C&N+~IwaS+4 zMW)yvIU193qwsQlDNwFPS_aSh(J&}48;|X4%F(jup9~6GtzPZ7B8V1g#z`zZsgc!X zchLN3P4578d^q~lfxDw`-WXi7T~eNK3JS=1KYE9$Q>D|iypbXWWxW{AkLhcd6n^C< z$NJGQY!I8KSJ`-`2^`H~z~(Cx*mp(y`gO03$tVn0d@Pe68G0LSadsriw6M3`K z{POQNXWs%=@u%UhLUVTq^>40a!EIcy9dMr@KHDIS^)LN4f5&2gOP5mYZ{m#kp)s_s z1T$&GS^?hNdpy;!?>$+)Eh3UbxJv7qbc7fwH!du9#(fUDyVOM3<*l;1#(!KKiT~)w z&p`A-gl%K&2Qxyq@`-J#Lda7}rdHt{%x4Cpi^y%sHQebHEBg@KnxvT#jTS_w zN#))bM$GyPeusu4mg1po{zIBWdQrMgZR3S+Kl<_ff7)kegqcKb!6GKp;re>E5&`wp z^Kac+m)#_LJI>-P7}(wC2|!It)9SH^H zf6h)?1yT%^@g$9EN|k8fS4}z1k_)VF53!t~hxNKCB|2*}oo26UF9+>5!cp7o7Y%yy zUBdN5Xj;t8*N61xzZsS5E&d3n2-fH2rnL!Ke#6iEla{t&P(jQ9W{3R(6%nC8vfE)9 zWAtFb`mLYI1}3EkPi10x3&w=dKHRi9qP&5&O5;98>nohlb7TJqnpxMF#m?mQnL5nA z{ACIk#Q&9n;xzg!DE=t7mj(``h5D1PTY1KN!cZB&!u;>X!oL8f{rz`Phjb~`(>4#T zTt5N=y!nwX$16Y}wtla`qA(yMBSQ$ZSMew4L`C=?@q5oY0ZAX@f}z6MvNJ0OK;t>x zk;yf6b;1!Q4zu5btlfOf2aRKX6{P@;vZ4>Pgvp$cNglKRtWt}wM*v|E5V1MQC)#NE zuYAA#L;%2BAYF3M#0`Dt7X0xT+aGwLmAymR-rjm09lZx6@>h${l`HMROXM;W;G;fv zSy}d@%OJ-y0EXUc@u40HfdB<;$p6*ecSbd}uIt8yh>D0(M5!)1gd$x)WU&P4A|-SJ z(jgS3Bh7_dg&<&nPz96{AoL(XIx4*y0)zko7eypA=}q8%tiAUcG-_HWA*Rr9Vxo;11v>=}IL@a@GLH_9^pn~}8R zVH4pA`!+;iMcD~()0u_(^5r`yrJ$1=KgRQ;9_Q}mfMzYwel*=R~tAwBhGDK2Qke!)+WIC9^XG=`d- z+@|klWVb*^`H7X-kS80R?EM4m4Q11z4dGkqnC+v5%JrvAuzU@2Y(SnBdx~HNUIg!5 zqbmcwQsz3g@)dH_&pSsqVv?j819TyC)wwhI?U;Q`|Cd-JYq__Wn>O`9FioHk`|Syh z-KvQ2z1GO>{x`C4PEU#wn^p};9G)6;i&wyjHCMD4OD}B$r5;2+pQctiU}GY;lQB*V zwQ@Nctiyal$t4z*V(1vH!L;`L7_+a*Vo^!0xW%|MPQX8Y{+Yd)T@`n;^Yr*vmN~j% z6Er40S;AdU6DQ!3(j{h1L`eu|-@=J%4NKY#U7kgjrgJW2G`Ur4Y0sq&dI%?;gG`qA z?EMOR^qH_bh-C9ID_+|2ZB0#>Mpr|p-oK=I(#!{vZa8x+Ea?oFf0v%Uqejk~qOybG z7{@WI#gsE`iBLW@wM%|<1a%m10$|DwQ^sBkypyj+$7;9c5QgvzzXp0yo)vA*reoKf zxah5HGgb1;NFxOf%tB^f%5oWAvP1Lietsk&E2OSN8{s;e<2$(_p#$U8k^N!R`dUW8 zydz({IYvBV=rqLJ2t}i5qCU74gIH8nuw~3(SMKgeX4B-$3}dTu&9mRkLn5cO>T=hf zRYNoO$1T*6jGTrrxY27w)5xTGa{!Twn#Owk*4Bpdup4}bKYAADDT%ASk zE{20zMx4k((A&oM4gBedxSc^HdW%ci{z+pG=)Vfl<-Z)CXO*5%6o=Q#lZ7{Awjrxx zXp1m@5=T)@v_0@R~ z*jz>=EWh_ovqdI&6cR|Virtp<$~i(DdSJlzem$PgQVN6deif^=mzs`rJs1-h=#6-* zVwq**y!cjucP$bnHz{xP`57?2pjnTmyD z9mf)Cz0Xz=e&IE>W@_NPrml-E=r5ey6r_;NNuRTA)qN@LR?;-rW_gL|uG6#xj~1!V zZ>4f7vFc)p)>Zi-y0Y@lKHCQS*C~@m&9b#cjKSJDqL*dGJr~YSpK8f~O>I?)G(Np9 zpBP-!{PSH*ZslRiWt7LqjA&;Elpk>;tW;iFU$P|j3dw{;GhInXlvnMbyB)Jci!Tb- zP^yBdbBW)6*c#;;Ql@dY!Xa&Yzdi0q+@*Z2jV%4L?^J~u0LI&K2|>ZK#39w2u66lR zTmzVMvCA3kYO_p#85XaVx_REAjl7im*b!zH@d;_;#!ooTx8s)zm{!xMP3BzaC-Izr zm*>%2*gakLyv^V0i~_@8(SCk4SN=uo=G;b$5d6i5znjLziscqKi1?!xVNbg>@>zC z_v&)X#UB&=#$sYe9QQ>-F;U+lL7Qq7MS!h?S}o*Zwqab-+X@hjyY*E+}MB4qCZTk_PTcM zoeI%BVKJXc8-urywY+a_X#rz*OemV*>0TJwcMR3@?`!>-jB#|)Gz-kT0XO7|&pSA? zFzU=t@Yug3X)r7Q4(By*WzLcmU;gr)T!ZvmEtgLyt-V6jTyYf#lEus=rf;aG6rm$A znSgclOPCoTW@>3bl`&2rovZY;O<#dStEHj^vOPu2)7#haq{&ij~&Odz1jgn6Ve z4fxv`k62>4lm*8seGJ1~LL8i1qp+9fprinG(e^m9swHn| zjv_AYplYvN12+R=a5x&fmY73mik0xZHC)=hkb75dK_M|s#CVKB$oT8ed}ND9B?yRS!E+iDxLBO9;rC| zw=b7rFfLtc^)w`ic-4rr`~qa#f2Q4_(6(NFlv%KCa&l~f8&aWwW{}jrn|$V}xrK$> zG7|kE>;8Y_X_U_(xqw`s{in3vyoe}-hFDdp3=)!(z)#O1Pk#Fhr~$jW$E3OWdC(b1 z0wlN7AomEvjT_)L_|0uu`z}2nXd9FJbe?{EO!@CAP-dg}!rR5?%WMn~JINCPs9>T+ zjh79iP*GLi6OecCm&`GE%Qoh|cIqZ{4bI!{03)zs8LGrip1SC#-Xef5L^lW<>k>pnUS zSrUN$1Q`v^ijV%~?_2-?W#H$n&=>Iee~Nbhr$hSx&>n%@8M5>sSO6&8QvX3J=9#TzYZ%AF`YMxRXrN;>@fm;Em`0p0@vzxOJhmd?w>F!X z-MqgoMWfMIwi_4Rb+%4}y}Sm9gl6VIHppgg{O};Bpr*iuw9at6a0;RfUg%)+t-P_i z94B;shJDFnKTe!n}Yj0jx2X>WWRAZ~-A&{7M8SM%%!NkWUZzTB?W&Fsgw$RbqT`0a?b z>KH!aZQo(mDpBQmo2`Lkd1cT8_Y2P{I!MSbE_ZAY&Kc*b{fqP}T>NT=#Npgf^D4na zaVaLyCszz|r_nI~ov?Xd1&K-KJ~{ZEK%ag&+bm}A&x;^pw%jK zm=2oQc1a}oap%`2u@e@i>C41SL2QhROMtvs__SH``+#kvnGnrC(&h3hrrmM7(*}~N z_`f8Q6*xuJVl#9(_u5SlzkN3eq@Nhw2dOGDre_d_F zd#ZAchiX`qP~4AEMV`)OBaB!7*3@2n2m+k=;V17bqiaKlzx!s`$BZUzG)K%G-1U-k z5*lb5Z944gZC-~&s6UeU@{N7s^T(@(kx^T=BEz!UONUJrzx+0 zn$Pm@O?nEAkrwygn4bte^mZm;-~{Zu@)d480}t z?!Aa9fvLUeH9mSD8D`D!?QUrQEg$QKjlE!lUV}4eu7S0Vra)RhozznxkgNV?OqRG>8SP^8qloW?OY+n1rec)@`^uSP5e!*d?cE9)0ux4-i{)^)I{_>ml@ka3Bl`F z-D8B>ELRHLmt6U2W`;M=dcSsQ+@a}lpMd7Y?3;~(;j8I-bMMV{Z9JEmo8Ry6Kg*O` zZCT5lucbX_kA{gD z6Bk>B-iV+_EB&h9`Xx+L4g+_S_&U&@61@M3@TStA4bcAdLkMv&_^fV^-Zw*-U9reV zIoEdt(Crd6@6OLPa2t6 zsNf#=81&^)cSrh+*srKG3f80gN1iA5)u)7HcyxLyGV#FgUwS9;{%A@<=~yPkw)sYl zmJ7l~LNZ#Nm-gheZvSywS|!4Ps#)6AeqQeVue9YHeIvWC8?nT+b|ZZf>x?B;;dwIk zcJiFUQEm8%4#x5&D{Q$yTV&?9Y^LB+x)?_#1#doLLI`Vg>r8nji=$E^FyAO)QIL^S)N;w00J)Udll;)?7{XT84$C5ZQ95#*|jlxt+m5eiL$j1g# zWvnklI~3=`cSnol4uwE&bLLn2i%(R96REu#5R`d?tMRu>(OXkx^DEzt4;hX6+OB0J zOLj|K-PGik)TCozoO*cpiGiH=J7qpgQD8egV`04gE1rQoF*|%pQ^J6}DLQ$K^;IUT z=Ly3=Ie2F%v<~egx_?cFQs1@*m`p2-C7}~6W@1JG`@M0ii)AyCt^tIKFSa0na4S9^BMW>D@4e;8R~`_9iROl);oPwIU4Hi z29r=l&+USoLc8g12UvDw{{(>qaRJ%H5;mv1^u;izqSs(&5I@KHiS^-uu$}Eagc7uX zQ!&h_p(}8tqUVBi+~IV(U+q%nDWP`UaPYm`rb)&I%1O zr25}$mw)=wIYQ7$f%{y5Wsj}b?gvS3_$1S{z|kRf_idQ%5tR`f>d(fqUSsdn)j&-T zqAZ_x6MhXiX1B*?-)|1^tXPF!eKf|ZT4(2;w}KzA4PBl#sR*%89B5vjGT=$E@T1I2 zHU_uBIiCOuw$QybYEC!hG_b}70TWcctK5G){UV;z!dUUvS@y3#jvg$4J}qw_kb}YV z-&}_q8yj0Bxur&|ZmBk{bu}tB2!mKV2Vlz6k8c)oeu9((&!`((R~=cvf&Cl3#UTOO z+Tp>E;0+I54L^L=0ttMwHviwj)V=%>|A2rqkPELtg5Glex%$PZm*U?jl9@UMk3j<- z6k-=I$^jo78@qBr8i+7vobuZ=G$iHZw>LLWLoWP90)WQ=J3ni9;O})q`#{?OfZ@;N zc(jQ-<@4J+%+ZH5kTY5*40-+@D{bR5n?)j6fp(EpJ}}S&e2mURuAT)Tu7zbDT>#V* z08}p4*CFjI0SE zhETed#x@E=trO_t&jN;V_&rAoep)IKkt2Dl`F&U7JILf~0QtQ0BB#~GwD189>swQX zCGP7$b2^-4UG-iZ-L(RfHGLgr@Y>X**-zg%1agTNwN8T&?an1P$ag-k<^p3ktl)pf zJ82qwPOfcXtgZNHk}cqgnhuaEoI#$@O0k}$YLCZB5elGAWH^C$eq`gm!InVbS{MPk zqPW&ksa&SCXW9`Mng^&JHZ1aKTziUX!>f9XMvUm)mm(r?i~9B0o|}+ei%E2a-yxGxKs4GwaJ3lT?OspNl0E2ivbuAK z)9<^(D-ew}T_rzOQV5`OQ-^UI-*gF~!=WRmsomHnrhTO`{sSevp*vgu-?@N>TT+3Km8l8P z#G=eGf$QqLba91Id5dhMkwC8|X<4~|qoU#y8N#?fA3)5QIzO&r^2Q^Ge+%zjKlZf+kmu)y>=jR)6$ z4S5u-Jw^9H7iu~Z_-*W`ioiLI7p%09gSy}6=D4^*Fyg;zII5HONuGYF#=UYRhCNw4 zLybl1 z2>-ZmhcsTa{J{dY4seFWg;?aKd`=hSUpp z(tz2X3y#J<#hxD-ZmjUoxZ|?DY1+1Ua$zVkqOkSYu(VRa|Pj6*u^;G5U`@FpT zS`lEz7mPgLGWp7~wj!VnH=&p0hT6-Pkro|L#7f{2pz-M(thR z{7S95^0d2k$|UN~Y0>=lwVBcFxoX%-mB4JRkkecUnHMe=%ETN}a8xQw6~;6tQG zaL5oq-RqJ_QPk<>tyq0>m;M&iw9IoN0ihYgSaR*M=RkGm*#NOb@wd4VJ>*U$OHN2d zAb9;&n5pXkAK^8vF3kAsX58Jy-br1}9055Zvz1_eJ?=NHmDSB&D0|E-vd4)&txTUw zcpuI(3unD@nvhdT#Jr^7{9I(yGgHMIT&XX+OLbP`&XlS>xa8-gV0cL+))D{Cv~&4k z-SL&553r5izbz-dI){6tcc*QZihSeSHrQui6MYw1tZ9nA;@K~U=lqatMqZ~^Xk4@^ zwkxKIsCCf7sB)4+=_;R6MtuZhe66}X(i0fO637ug6qvMUhLH1o;9UPO)L?Zx@Z8yG z@K`}lZX?qhwVZsUG#?GWB^KjF1-Tdo+iLR_Y!#$IjAodgja&FLc_A}HB z37o3nvzohHe^_vMZ?(POx8~GAl;8HCnIUIv!;Q}<3282 z%B#z6qYCUVfq-XpgZEjb)+?+5emnMIn(p}k;lx8DDJBY*QP=MU;qHp^2d%scyA8a& zTfA6G1zCrNm9 zu?3gQgnQJ!+x@20OT+5ETvLg+J-E9@hx+(QFY|?&F6eE}&7Ais?I2oxOy^o^?~&%J z6%$Hobt(FAY&QxZHkvTPiKiqmHAfaBLfA49YjrxlnwF02Q%bz4c6B zFru{6MlT1|M~VeS8(8ofrnKRHebC(4c4t&29Tn7ToI&sYD98Tu@Xo_7>-*MRs|S4V zo6B{|KKS|(GxvJR>p2qB-pKBx#%oPI{Z;TDw*?G$h$9xYPY5%i=g9uL-B_lK#~&OA z#kth-LQQfa>OoOlucZIkMJ~@Gy-USPg<>_oEfVlUdAsqd9El| zRq>*zARq9MH8w@ZTH-X{!4OHy%Xj5}6)opZvw^aW%=SC-)>D>lo5b>1z|twGBVtBp z=A=iIab~BSp*H3xJDx;0DuS;U7oIy>FBfT{RU)zs=#h$c0d za7~8*KLv45VQyQ+fU&&m6mqJbzoYM8CW5XNq3KDp&wso&CGVt;CZqks8WqP9p~+`p zxuQb%idRDFsOhYSVGjn2Fl9k7e~S*>$o{jKMO%sR->1zkRv)JesQ0v+YT`6WDQfRV zNUZw3m1|4L;E z2|;W$`9!=%&`IHLx?0qN>UXKStZ7!1nSgzo$5O)5#YwH&Q_9m^x@KBDPfCCYrmJ(% z?h+IVEw!nX9%cTkO^`P5u03g1y`($O?PB#hDkVPqCWb!&v4gsoKd!WxBEPA618Ceo zo;2cg`UmnSlCuF6_z0xGEg5&}{MQ;rz@Gup1%Isu0TDq<%ch6yOlqlJ2R$`iJp(;?0H)CV3_6NZN3tA&E(X#9mno^JC~f5XTL%x3Jf6T^=QSEm z05~M_!Kdd=(rNySBeVb#o#3d1G}wOc|MvV-|56p}hA?m)zHm*6A80U~fnP6~@dL!}(jTV9f)v>OOXnbV zuSA4}JHZ&XTz>_0Fh2p*cjDCmY;wu*&HjrdT44Blg|p?&=fN>+Q`0M;4b|AvbYx_Z z39K7Tc%X5zU6-Ry&omI`fUPb%IsMI;;jhzHeaKNxJlybd*p3mq2CN{|+iyc%2=AZhVhVg{NO-h+iJ(ds$R2*|@7Z}(6Uv<^6o_P@%E zI+NO7FmlL?vB!R$<3L<{5~gWjU?7+YZw?Owwj8g1&WgWyLE>+flv|(*^lyac|I*O^ z&tL36_xN8}g@5zhZ+`{=VA=nPmJuxcH>$MKVds_rQNDCCry%&|e`JdOyr%#1oP~eJ z?f*pF{{I%MyT?nTr@$mYkSA}B%f~N&y8sMqm`}RMTe7~Koa^>!I`CN`^hY?Vd^j26 zrE@2WO*?}>=HU#9Jkikpxd|AAKSvA2-`y{gU~rC)^J)s7fM3p>y!U7zdK?SC VOWIoklPm~CTjQR3*{^ny{|m0;LBIe2 literal 0 HcmV?d00001 diff --git a/mkdocs/docs/assets/images/screenshots/admin/events/create-event-drawer.png b/mkdocs/docs/assets/images/screenshots/admin/events/create-event-drawer.png new file mode 100644 index 0000000000000000000000000000000000000000..3fdd5e58be648af896078c6a56021f2f26cc19d3 GIT binary patch literal 85425 zcmc$`Wmp`|76wQJNFYE67CcCTOYj6sa3^?hcMa|&!JS|e+#$F-g9O*X2On&J!6t*- zFgy9ad++W(`*WXt_WbGYs+!YvPFGi-I`zI2`AJ0<4~GH=0|Nt3UQS9K0|PS`1LIN1 zlZWV%1+E977#PnnO}dA^ zwmhK=nIu__D@0w&y)=LJlB$N#f30X@>K`G?gYWut`P0w6_}W_hlI&H zt!7}N&yVRIQ~hn!oL;{2=>Kx<{QdfG{a<;C&mn|9nAoOEXT<38Ln88Z z(dxR9UrGN_fv!sUGx`0mmUYhDG%R%0@9$s#UYbng2BBTsjr{j=9jlNCUHTN){Ga}z zPe1&Y#KlJ+zru30&?-MjeCYmbisEy1Ty$YSmZ2v4>aV=o$iw_=0$M(p4XKmv6W>@w zYSSkt_HE<(h6iZZkIo)AFuCFUV<);%w*;UMP&u}e{08*qX`Br23)5_sG(aV5%dD4O z2qNL#cTU#7y6QveM9{r9(oaHm)5{4C6mVH9&p)y_ezpF$7A>DAT{WdyrrqoI3Wug) ziVSX#|96M)sio|%qGzc(`C@whb{Z`;xh(y5b#mhyijx1>@lR1Cro6?E^j<*Nzqdq} z{o^eY86m1T0p;G^)9*c#xgHT?Op(Jo zeu2JQ%kJ^V?w%w|lB!B(_ThQhbjphXxaa3sj##FHrFK!%-#VI|f3A1&%q~;B0+(G~Iz`WF zeZ9Pz8jhFLFU<)^Nrw1*UQI0)h+kIRk@ZyBX$lt@-JZTuUd}}pNYc&(4T~_dPXw9l zTD84;5y?4k{3cq@R#(kqysZ}=FbkehH4zY)uTWKKiZ}9f=;Ce}=!H0?uaO z=9Ql=EV&T5Nec3{bQn(piQbe0F56e5H{sKjHf@MBGMcU}E9bkL)z|4?#$-O4t`%dK z-H8R6_mbQY#mbN<_*{>uOMbbZlVq?6d=hf^DdC!rQi-0w#L5d=#uHHWEl?NN#}{ik z<3N1H*bCtsu@aO{jk??Asw7l$ji0$1(FqJ}0HB@PH}2KlqsX~cejNd|~YhJ0Q{oU-s9UT@BnQ_&*-G=}x)2KMTH-6LxptB4VH zvT`_hbsAhusVY)`pf~D4At)4@S|W;hs6_EDwKgcHFhnqYZ>t_HN(j!DO7h zjDsrrdrqQwiWEMQ*>D^vnDZJA4Jm;}h8f-LMw{?h8&A67Vz25;riu@*50h?Oe2| zaPZh8PC)(XFy5n`yc>=2B&QlrHy=CSlRQBcX?k9#xWvXC)h?9(-1rvBP@PA4UCw7M zpaaAhd4k+|Hzt(KA9OiaotzeUkpi~E90miym8suwm z39J7$;&WTivrJS?Q`6i&z%p4!(@8&rLA828cgn0RqgwG;F$&@e>k9f}dsxg~Uh^s~ zq5s4&bDnMO{^+AC$|1l-!_R&&oHjE8LRIr@`u$pc*JU5ttTn%bCuzcbs|%gwVa1dI zK!?inBSV&~deaS8#=QTYf9CgF0Ya&E7Q8ofSC<8a} zH3s~dkOke}6ES+qUr#Z4;V&L~JrmmN1#49c5JTmm)1M-0^{^-pxCTKBqHe7S)|^3x zOG;5g1X;FDE>nYR|AzNU_7z2*oKVu&;NqvFseoT|tiSK`@w|)#4J*1Nj?34aPQz)b zm@cEF=r6oG8p^m*UQe+iyHKO!5Pxp}C80aM${qi(?$6GhqMlfdI-J`La3K-h^ z-gO@A6{O>AZQRl8UDrHlvDm~R=&~vx=0OH4r>WA_{{?>Dj#&BTb+AlzxFe!FP*zE4 zui)m+Beq3u19Uz96FDC!{)61}z8Xkk7c>YDTrR9K=xX9t-V`*x`!n=S#=e6vSjZk~ zO#^8WF+8kyHx^mmtMcBQ66w6&?#!VninoHV0?W%pBw03iofNH)ux0JqJ4`!$Pp!qf zgyWq>Zzn#gZb;6B>ha9_BF=i=w>!-=g=<4?B2PEN;azGFT0a~kJ9+4YGRf;jhb~G# z)!SjB5|DfAo6a784`>odtjl2dY!*3q&`3?ACUc$2UePcEM?8x z?)3T+6b(LPPig8rH%6`U&A19yMUUvukAON`qC{bg&bNa1R^|u#)xaeiGNl_|c?pH7 zUyG0l{i%`FtBF%Lxs(b`W=nXdkInBJ)d?g2t4L}CPOqxAJykiuUmp*iE30RF@0f-? zHMW17_*k~8(2~>YLW@DSS3Z|xzfgP47UG86q`aOKmRl^w6yW{a7h-!E1p?G}tj__d!Kb}w^YJh@f| z=);^t80B9aT-V)pI}_k9h7G@{G4n`kb$*rYG%5GvUi!)7?`Pu>xMwS@giZADk5D}X`es>mnY)2A zt1Av`x0w@xJyeVjkz`#rLE_PLmXUfk@MCgt@6b+PR|0^?{8igw0i*2vrR~lz3w6I$VhcZtt%+cIB?7F z43=Epd3Ba;80uU3RR}vn)xQBgh*zweC89QvorAni!t%ZAy32s~#~bUO2B8kwC=0WB zo$v6Jt&4?J7WYd~_p)=aiSp_@N6C@nBmTMfX``B#CzRDx$2zKkztGWJc=>|*nIA+! zM~_Np?eOT>v~Mx$5Ko$`LJN4RY`*)aq_qD@qp%xmDD{!G45?mls1Kgd)qVx>Q)G3? zZpYNSs`u1;Rj76GgRKna&2mOvEf5y~=cSnFt4h<+Q{hb1jpqTkar;J^wbyQBnyH(8 ziChjq+Xxww>Ww=8L;w^UxBxysXc8^546D?}*2tZz47f9G-a5Z*e<+e-ddW*rsbF>M z^jY*SF`QN{+PPER=w<|T9Pmp@$>w5;LY<-xmp0&IU&qb7JS8HO{GtZnym)kp@Aop$ zSMPd9wjuPvQ;7XJx1RDyS$J~>N0;atWkQNW5F!+Z1EDW0Tv2*`(*bSgE$jq9%9>-v zALM6_WVHj>hFwPCYhtS#8?OOyf5f7?$Dx{-R@~aB)=SJCaihv36FKIK+2OEQ;iRHI z-o6z}aN^gwh1q07-Kq_u_-ivouZ(fUVqajY&)p6Gu8n0(V6cNjOWl{zHV0&%;>?DN zg#^^1YLW{vB{%!_FtcXOiLw~N1?$(!amK&Vh3@Ps$q8;^u?NHNj)PZ0B2-VqW5LG; z*Evxim>23CABj4{cR~_vt&H`tmO7Y9|n~7`@+D`tL`8rdgymEpH zBRFnnX|e=!an5^hMGj{Ri~AnMl_{s(tT^~KGz@qgD@i&xr&X=gUzWyQRGp1AY+G3V zd>Z85;tAb%ZNtkMyuDf=Z^HxnqOQfgzrA5Udj-XL7n>SKT@~8}YjDzS>JZ}R=s!9! z==5%cz0e1|gh*RzK~GZ3M;NA_08KLT)xNZLFu-XcbpZ?S0U)~(fx-bS?jQ{u#)$?+fMRD@~UFDduNmhw$k#2 zr#Fn}@_K*9fJmlzaKE!tV6FlntrpeTyqA{unvp|NQIR14SH<5woisQ<@u8kCOg1x* z*|;h}cWmCAHhXM*bnSZY5#zkqPONd4Vvyi&&0Wmpdapi=@@;vz!!KPXV%(t9rDb#4 z_y)O2@Xyq$SZpf$a_uRvq*R=e-Z_`5TG9FFKXF|#ymtoa4MU=+))HlEQB3Jp&XU_K zLHwdZMz8}UR~g)rl^u2p*rKJ_QVsOd;R=}k#4UFmCC24UjGkCsWhYP9M#T(+L$Z3-qx|yr@9VOS>pnFeu z-D8}o8OAZrfc@zA9ww99G5t8GOM)DBvghTkt!Wk&Q*-`ETnQ8i1+9s-sJtGz%&DH9 zKF}K2`KX-MQ?qs87dnyCW!7Qf_vZWuUg=qDIsrLXCiz)HVO@352A9`CL{JSfM&q*; z^D^=dEX5GSTh6C*O!4x+xd1woc9(&>!jAwW?J}JPzV;{bbJaX@i&!kyv8ko;yf2^B zIwz{5_5?j1l(%*XHjd?1U*DWwtkHJy59d9^V9d49nlq|wD7p>0SCs|r&0&xB2VW?2 z*)}fT9dDnJbpnnnFH0Ogal;Mo&$&dW@miO=az}^rNQQqLU%tnO*SGGG;gwe072S>C zmGSW-44T1RW);=(+bH;)D!edAWTZ>aR`^ee&T?=al#5)zNoy#C&^o&D*m_`K{#M}A zZ+|Q*|IW`;_Weg*ZAdR0&Thah=+N)TgzW91@4ceE#`#U(8S`#;CJT@y4mmyV0O3WfhjUzX-f^=UPdi!wy|P&2No@ za>5A1vVs}_VT6ae_=Kf-by4#dX%q2*H+qudKT<`n7s&v-nmRThT8}j$mYv|+wXVKx z|D9-%HdAzC{)7(d6lwK_>4JFa#K6+ATBGs@PZOO62nJrW_bAoA?*Y)TK0jcsD1nj`u`=OzsEmiRj-y@ux zxg2d-TA$4x)qPHbcDq?iYlkI0>FO%TImvxJlXzYuwDfqKch6SkBir=Mm{>we)<-rG zqPE%?N7b$1={ouwo>fkGTdcjOSliKD5DI?P=$@`I3D}`Th$6;%&vyU#(M~0`nw~Dj z>d(U=m)du(e%Ddc1mZ$HA-~VC7;HuJ5}Q-HYl zE;EN(!-RIN)%A5dUW{J)5^>qo*Pq3dz|{b%-{kFpFfqd{Q475WD><%@Grs4I^9Kli z^Q=6Z>=sw$>nTavb}CLi%9ZP(M+hggCBE_ViwWfI+Sru!RPx~L9Ip_!rh#29*Y+%; zen$*fRI!1(>%LqNHUWEN%MWixA)BP=s}?(djH!3{r*d$;ySgCsHNDFlY|;W(6y!}O z@7_6KKKyoSO=R;}%lTh$It3rJ=t?Hb~tfZ4%<0X$=M1tNs!(VI8RT!&0T23upYO*NNH3 zov)UkeWMOGzX`XnC^ocj6{EYOR&=u=)NAy_#KZGb0=lP>(zRLo-~ceL#Xa(!Y!Z+!nhy|1e8b2b9mo*JP~duxa_0}in`^hxVaR9Q(+}se;o@(+q}fTA z9SeZ3v9QDU@WBzPNsGF%}^3q7iK8Cx3HHhPpo()rND<;eZs+54{t0zeL1jA=7 zi=_1=GK<@=GTMAcwmJ|!ba+&#W@l8P@GowEsI_s`u!^Bp)q}{oxpy$7 z!LFa-=h~Z4%RkT559jxLnK(u^+V_xNdv`!DPRLi!9B3kv>N(>QD)8>& zNo|`@Jg^B?w-~&#pkS#$^^i(eQ zc2*zdzCWOL1?2S9IqM$CQcc+y9<+4*{Zl2-y&_ulS+;^sZXTugAt{sJSj@~UoQ^`* zs!Gp+D!{I|>)aolDR7#0e137pH1xdCZDGx?X)oo2FH4FMiMX%%v$z(Ix$-IjLk72v zyg`~=)sJj1H5|K*CXSk?xejJ7_e;QvFwhmhsZ~QtNZzmYZ3Hg@1G*jA1`2{*uXJP{ zI|jniDv; ztw@v~FnZG6AWCRoL`$F1!S5~}Q7BEOkR4PfS27O|DbdopY?JLwQ)rq?5*glak74@C z`y6tnNAw3jN*|j1$u3>qgtr(fL04HmV-RzHcM*i2pi1|CIDHYB&X?K6Nc_~U$#J31 zykL%JVaCy^b($1(7^Q&6H?+rBmjx2P-*dNW;=F&JUN^xLT%Bs4xlwTC@ZS5LLGHt&l)DZH@#4&_@ZfN z+mq3M2t?bmu&B<|M8qyvYz6F0f1B!k(yFaha}taGDjp8CR=0(fHZY>&cH#W4n5Lec z(&Hj>sqiUcxIXyL@N2#NJy}_i^`FCBTUla&H!QA*$NnbW^K(5ierF=(iHmQ)h|<7Q z22$l1DbB*3#IJ>E7d^obWQAVrxXKQi;$1!Jx`sdEOPaPU62H7{C!o15(^=@1!N9;Ubq?+C(h3Mv?p9M)|6+ZOv+?y z$Z)Qem7@fHxn~dQ^29A978L}O_frlnYc6O6^q=Bi%m7KO4o2#d?EIJ%_4~@)dpWwu z=$neLo?aNWE$9~r?v0f3|F$X#3^p2X`p~*En^A~bNgniJSmzeZi2yPKnperohDjqD z)af2ze10Z1>=13{2I4ceq`x2na#S*y{st|VYvX?oY=_ttr%Yv6&0v->HI-?^c~`(2 zkA;c8Ts(%UR2?>_2B{V(ZVATT?)NF`q>v^Y>%8ZjzwPaF+XqOjqDEN^>6}nk_XbKi zU{2N;kR(cPBtnUWY)0H<#%cfQ)h4czw?VYNno56aRt6qcti#D8%a@n2&tLZyGy7k# z(dUpkzx#dF(Rl@ofrwsIok%Bsu77d9WQ{UCYB7{gelfN1g*Wd?Y%wB?_GBh&1{Jr% zhj<=bGE%-+Ticd!H2v%N;?MlR z%_zR`GNl=^n1AU^Q_qjiZDTgl?F`o!!6SKh>udB;r33P9+%CG=uf!`f?axBdRB1z_ zL090>4&9W3?KMu5#4pWZ+kV>$ox2FHkoh=b)_1TtNDOMHcDxM9P*4>AhM{BORXR>+ zX6G~_MX>tzm`RMCl|yM%4i_`Hp-s`Ai|F`>+p~W;O*NSJr~&_B-d7{=_?QB1#w5VY zocU9Z^I3-QEst|Ud*0j-!aVf7(^%xzc@15G0m~`DGw8Op<8q^Jk-BS3CPFwSX}IwC z%iPb82je~PJ(KvUmu_-NV^O-&sCrovZ_-vhYBAu`;Um{{wyx+gMw^DYSfCH8X*CQ^^ z$eV=suyq2})+QHCCDp`YSqwS7Je}Ue4)H255VS@*Hz_QW!(@Q`l~yG?gW zA0Ty1Ip(*p3cYs!FoLweIFdAprI~>GR#J|quC45yB1y&rFmb>e4%Y%)K`fU%+ArTe zbi0`cbYzi@GY{t6dAn!ls}U?77Zdxe&`?P9GtAENDXS-j45X`+urcs*a2WbIKa6{~ zQ5!dT!b-#hOL;gg>{!ACaIw(ug#@7}0fY)ry|z>N`+4t)j{8`7Y;wGX{fTE{wv(0>0v3fA)trh&mU*z2 zDV4|287k|{oM*A5Zz&Lyxso5ube~~#(?7>w{gR9~Al&_i>?}z&{S7hM_F(|q?oJkI znz~$Ah!*R0~8+-)se;a#RV@yzgU{c}O^uhHh3 zEnOvdeTK(x#`=8w{=BaJ@GWv&S@@zq^68b?;D$ip-NkiY2Ej%9*n@nUF0k!Htk71T zb@o!~_@&2uml5P>Yj;+}K$n{iW`Z?A3r}{gVx7_y(VIFsDZNh+@5bWvN1fLX+O<3F zyo@P;46fXnk)D1)i;d9 zVrn6i9Y-@?r2w~Sj=huq@=^TG*FMQ zNSv0sYV~}fNh^h|7)H;hrC)~5NM}y!NRUuIW_*!#Ydp4?ed=dY_EzXu+`*gl_ftud zkh9tjmY2_fcU#8F3p{HAroL|afdjXHf{AF?mgJ7&3^hBl3DYkUZ?`Y#$;jeXHp*u! znNVkkd2jxk3(z2;(Xe*@QcAaW#7z9m(Z?)&j^`y#XfkVm(P!KOzg+*=Ja1_u4M|}n zkXe6RX2WYLqIbsp&`Z0R%_Fq^tj=m{A(TLOaVzNBqxX~K(Q;SIR5;s*?*$0WA?gTe zI??m$4*%;Nsmce=LDjj3<$hgF`m(-N$G1*~K_6Og+*A*_m9pI*-yJ?-mgu_PQx$77 zp&r$i@GOWOQ~8DRj)u9t54fnSn=1`n4EY@ELAED2R)|hfNIeszRl&d@Wf&lO_C%}A zfv(ykN`|Tj;Q@<4B_hC(!^Sw&CyVwR_T}Uwq4Rh$Jx-s8i@KmdRl(svk$X0Dc#P!r zdRH;Gk`B>57By6kCH0-QD9`r2xMr0Mi!%B~R+Q?ng8a}aAlmhzH>U}XBmPcjRN%Xd zd$yy4qkx`dfinBCkZ=LS2~j7kZ3(bh2p^ipJvTR|CNE(T&?e3q{2V*5Gq1wSFlU$S zznSAx*A1{eFXco1$)Gsk5+GNm=@c>AqJc>FPX%=%R(>Q|h5b3t5Y)EuHjSSfF`6P& z{F!%9IbdbprJ9+q6$xL#@ST^*NUxFQC9C%OSWEEk#+QRAaIZ*>C&!=Rz85KfeY)K9HI8M$iqDNPV~vVr=`c_W36)+sgV!j`Wri)se2$62e==kU z<}$Hed-mP!q{Z_Dr^rA3nx{n8-mF1FBIp9{cd(x_znbGyXr<2|OSgGB9sNt+6YZ9< z-Whm^HUq5j*s}RTA=l%?+Q?)#U0Ghab!m2fbxx6uQny*~v^A+#hgGMBR>Y}9HlrAJ z1S{E~P!?pAH!E^A>)tOq7{rt>vzX(%-F0m(T_V=&;xRf9Ik`s^k8+%;i?piRcy?3~2Oxl2==7 z#7PyW_Gys-uL4sPpJ;tCPq|wlq_Nqkq$t8@T2)@&$=)=>rj^QxVmFpVp!PGLXIV*e z?g)XYY#@xq$V#r2AK>GDIT6c$0Q)`&)p`x_H)L&e#nP;Oj zx!lgbhsh%Q73Q+Sx3X|zAHp&eiS%DkPQ4NM6cIna0HcklO=UQ>)0OTy8Od)N&C=Ol z=E~`kA=?|@gtl5V`Ra>_j5bM5!S4@^gX+sFz9Nw?NGld@&-W#Qojeu`b+03UivxkN zBu`hyImkdw28VPki|NGDLqwnU7qN)@rVVubTA*g95ubVjCvdko-pDXuedE3eop3s| z)>nwg2vmYHy_U8r!*MVYA|8r1 zIpK<V`7onr>h^4dW~7n@<{0#&RGdU2J@-^&*3=0@$2{j%E7SgSQN5VItu z7d^fVI8}9IK}TBOmmB#E^&74Fiz~J8a`;YKI%IQJ--p|3#G~P!kNT0A37_DOUH$W;vA)G8kXl6Hwd|ATFll32{`FXnu35sM$LLEj49 zYHKgIhVJwDV(4%+Yin|L1w7nB?B$6e@3zpnz=F52a*VUZMfi|CVmGh7(HH{22e*(9 zE<&9NX(=>a_BVqv=1oTxwnE^AnN``*CNVC1XgYMYHcuYrv)14NEUmZp9#U)caa2$I zndUp$ms;FZN#K-UI)l!dQN-T-SS9GZ-O2lS@X0y8)zvVx_qdRNOIQ0P#rXdC!Hw_j7Vp$#y|RX0dTh3c=RC~CF)%lsbj#N2 z8zT0qk6w?6%vN24Ccti&Dm6zHwvvW>vvLT!TO;CYZ_o|zd!c5fE#v8AbxLy4Tf?Cp z5~XlsBlWp6KO`)8Tt|%F&7zE6Fp$zW8#W9%`!EM1+O0cp!_%Lq71k8q*anMylCJM0 z5N{b}@!q5KJ$X#&h8yaC!}RsI=AwWX(QZT0*pbgCl2NK>9gRiK1}2;NWbTmuxve{P zoLbS$tzyi~*kXHg6h2SU`N=$C-z#9J+AG$+Y=`d{^;Fol{Jv@M=fv#%@jRTn;%@VD z*skD1mv5SpB769Sp^)jJ;QI(V{(yrjaeB58EXgSQ1RD*@a{CLBU4NiY2$rFpko^YidE&P7=PEU`1IcEeiYhED?vdQ7}Is3TN2Wf1&7&9ljwHzS# zD=A#YdXijQ76x&wZ!&VIsB}KMR7Ks5nQYa9wYH}kuiHAPj1`fcm+zrk@gl9-C7^M6 zftz9$_Vi{OB!A3luTOBEl@K3+;Xf~t~~ z={T;e%$};O>Wh15&Q@@6adD*Zs<`c@oHD88!0?{m$4GM4s{4(SxR+`TY(Y*q1RWeJ zyIS@m8!6H{`9RhpyY^X|=P#}r_5e#Z$qq~E(&Yy^t}-OPbZ^Cam?~?gZuI@>I>Uh7 zx3Dl>RC5M4C{4NQ5R=bvV%DrxAT|8X3@6seFX=wEG(bNK4Cj@|y|JB&vCe z#z`eELwzpCduf`j2dgR(Zyxb}DMHwdU)Z%ui1FEo-_r?){ecdY`(WOPUnPM;zaOrr zi_pZ+FG_4JiFtUPPt}BB(PuPOlz``KcX-Ba8}XLVxuvtRMmAdi?FZ>;XP0=hSyfD4 z_LFv_Bg2K_hzv9wh%RKF8?0STzG||L@7NJfE81v!+Lo{0i{2Z^|M6>P!=a*UdZGJG zgHFbhg)0n=+i5UbU3L_^TXX0CpqG*|lBiv6C?CwNHzn$k&uKJwcU8c9cH|uhpZR9; z=Pa_VA%+7%NDgZ??D`U$#|-F&QY^ne^I5bIu=1FIN4yc{O?%^cqvFy`z@xD6-M5ce zF}m%28`$x)q2J-yf+3t%NWDH_YlchY`11O8e4a>FRk{AO>R^>`_VzdJ{k@+vZFczy zFH?28HXO2oq7hCT-FHo&63RNxu39rjfhiGBOKb@9i@tYGEf=a&^!fie4tIMwsHC<1 zM(Au!R=>&Ff8$iu&tQ$WF~=a@1KAGUzQptQKjgb6-jgLox-8s%K(AY-`fo;QngM|g zWr-TTIqBg)0+s6aw{e%2lDGyE-Upw^J9<_j)S#GZD* z`&(*;Z5X*jm&?Waeb`Q^4D_Xg57Ztte{Y~X9yXnBDA7Kp>D6&@WNc7e`yB}tyo{s? zYS7csCM^^Gv%@tJ(&T>*lNHz-(Xp4p-jAm-Mod2{JL6ArCvYY-Ke`NDgBY9+Nftrd z&m_uQuRpE!7*pGMDSydq#^X_l09Qp2Ec9Hc!-7;w$Odmp_=Mr!nKR)9AGbmzF)`$% z2*HEkdnV$Qd(737UA$3S>4nXGk*S;g!16go@9SoVec%dW;*x&3D*^SpliuvoJ%_uq z3q<(j3+3f<)P4T8BDP}0>iyJZmB%5w@180f4W5yR$L~f2SCr9R+Rl280RO!?ku7w{in(1@#u)I*ocP%DY%6HAvF|UbLlM*g_@a3& zI;)_)+(o*Qn>tXF`E?}5{C@G)l>Nv}onfN}{Dbl{k<|g{7>J~Tw_`o0dLh)1!L5re5NFnD99=KH$&>r)j>b->7Wb38giu#@-Bu>o1jw9#>kLms zcT(Ge!&ST(XFKRHYPuIIB(3el7tgQoX#n=k!YVmJVCsw_k{yDHcint283XRGwja?L z>`1*#L(TP0ef7U!>Q@iOmB~_uk4@mL;6p|CAN1w9W zJlL7RziT%6zXO_mBzpe^H2;I~Mz=Hhc;L~TAZ>?lO!4q9nj0-&F~>KLXim<5NL#xU zW_0rL$o^ln_I$WXKQ&++NstbS3|XSG{)?*)kquFQ$PJbvR3bt{zZC%jrC-r%#9L;`G2Cef0MXmmy9a^HQ}%9EZt#I+3G1v>qfqL?c)&ZXwy<#YH8vUv0`4= zfh`Dar4+BK4{_GbY7f+ZI^&(6x2(Do&KERu<5~=rGer4|{^cs5r8`kD{=r~+iskFj zYwF@P-d(OJDT%f>&!2D_Yd4sWhRt8Zg(;4EtzjA)Hkt#C{I}i^x%h=w8QVJ6W1^WE z|4299DTzykVWWs~j>o=1aOt3uvz4{gWKeYzImq9&wi=?>XoU%UR}d5Yv_1AbJmb)` zQ?6LuYKJt{dFhv((SGR;NdA%HzvfRyFA!t7$UPS6Yb$n*XFnOJJ=&f*G2+2g(Ab4F-| z5zxR))N98qX^{!Uoout1^*D4G^ZNZe>#GwcfZkYkglB&fiNfVv7!ja-wJy^VHXSkO z3Ix{|s^hDLpl1n;R8~jz2WU5Z^|LoBj#O4v1g?5tEY0B>QCt&)<%Gs=(@n5$@5BD znlft2&$CVrZ5D_dQ6$)}LyA2mrpXwQuD9GSY7}1t9Db2t-(c6t$E!+S*C^<@C>rP- zWZyo;Fl|-zC!)Fier2Qn2$}tLaDHYM_H1}|e~M1x_c4umbFdhTYF0Kq;&aBHxoFjK zajMue&cB2yv~YuVilU?V;Lh|62V4U3>N6Sb$Qk$*4mX`9?^)6KzV=C@nA$TZKUlyI zC=lLN?Cab0y7@UZi0}7X@9%8)S59q=9^wbR>gL{H)2a69U_kJLg_R9OfjzG>UJ4n~ z_>#pBmY8CviDoOYkn#qK_s%41>+DMy>cq`WJqg~{bke1CR_a;c%6dP~sBKg49@YVU zO|mwx;Q_d-r+8u>HA6q~SzkB*+&x=-YG(J3!UBtx^Gc|iz`r-gIL`5bX$+oTro>SVOP4U$1)<=B#;GYN zih{DT#2*WlH%O_R;?`Q2*~izc@(`=RpR^PvP+zV|#? zDWt5>)s^XeXl{L(b=ki=jCYXpcBKW@+&s^3R9EX0IymigqMhonq$?2tEJrvL1UOm_ zH;sP_X3C)GhxThNg9nx@Tl_NY{D2nw$#mPz86qQ%!Y7Q3hfNLH&SoXS)B^M1s8RI% z7u4{bo2I?C6Y)Y=y|lGdM@OR*k>>haNZ1}E2%Fc|bTFj7>3bg-ZmM{oYcB0^eIq*> z37WU9lRy7&G_pe&F1Ks>SgBR%W<3?}#qf6P_d#LTvn^f(Ow&Y7J%n4C9UW#_Op#Y* ztQH?q9~wf_v;O%WS6<@?$vJS6r19BKx7&1ob2tC;&qo(`nVvvs+NV%emBPsUJD_GHWbWQHl6(aIG3PUr02E^}lvm(*@*lG6i|BnBfLZNUh*$_RT-dkV& zpJnno&(Tjx>OW4N!oiYw@Z*(axfD^{8COkpAGiIsAXSJ+x)OjuLMYVOv0F@J95b7#uY*#e;_jN)GDI*P`!qaX8B55JU zJckNh)tOi{PjXWHCBAG66@EO3DC#j!E1z^y#i$ZlRA?5s{VCeuXEsSVe*?P}eVd*K z9|RnAyIhsuDGTD$iUb0Iyq$@?8xj5VwNe$J(WMqkppt;K+ABQe`z|g~TI0aWamiJ~ zfXkiQOZ7xPSU*?Sb7M3gkD+*i=HHo(JLkDex4I4*x_6>A`lgUllaJ#3`tD5jl}V7Y zO>97VmI!dSHfD^E=aIE)cGtXbRyQ73;Pquh3Sx z&3&Y8JynWJ%bTxV*?_R~o1v_Sak@`2B>@!ao1>h&NLsLDUP90XE(ncpfZT(GwMSol zE8Q@7(2b;j?s_f3soD*7C8{7|MjQY5ha4YO6nBpt^GmwF#9DU4qzfh8X4CVfGOajM z>+FwQ#5id7CL*@xLAVtAri+lqcsY-Q*JO33x!`Mgvru&!<0d_aEn4V#40_*JgEof& zS4PeDf%OA_LmI@*N)^jiwu_Jw=~qnGDhw0(4VOqMRulSTvV5_S_GOy4?;pYQ$RsNczxHvQXyA48At zzk;@Ul#I~to!n$iw&`#Da7oT2d5c6sorp0)w3CTrizsE+x?Zp5VqrTLSxR@IHhIe| zEKi|LR|?f&GF+iP4NR(fp79TP55MKQ21x74l<5`hoVFN&7wAd!m5~sBHn4;#HK&Cxa2HX?PX0e9u4S1d$!bLx# z9BtbKNckfA^Z5_V29xshb3QhG6c)|)24x}kfGGz$wlf-Nzh`*-nz6A1E~)IKi*X&) zme53TbzRPzYFNY3Oife~S)pqarJCYtqj|Ws?_Ij)c{WhBR#EMwKFEh(o>f=Bk(G@p ziPL+9Mh}C6vZ}8+^WNY~>&kT9?@h~4*H9(;ACD#JnrG%r`3&0@{0A@bF-#~P5(>UB zO>jaFnf&bw?<;>Xq&XSRm@*qa+GX1gfw^|U(ivu063etlS$CqF6!}_ z=#0R>{}*8TEFK5LOZnAytB4BvJ*|=Rk(D9ldHoRoYx`RP>ybhjmh{Xw^v-jvaZ;Y5 zBG?x8Fn*NbROS`&p|>|~<+mAV&jbC_6oE)72j&UYDMmJ}sKM;OJuvEgppbx_lfR-K#e)i#jO#1k zXFEN9)H4wFrer270|0c@dY6VxeN=oBrQViM38L!i>`tIG{?pO{T-`~d4HEJ{O={Tr zhG)Q8eN?8#PPn_ryJhZJVW1IMgeU{;=Ij`xR5C}FP|`G`XQ=X-jeJl>N|JmMaeCt9 z>FJuj>=TS`!;O=7=HGbG!)dcO+w)BJ;j& zhGUx>TkBUh!I8gdIO7Xc)S%>NSu!&rvPC8Kwt63hLhe)1eBAJ+kAD6@B~HUePig<_ zZA3l7h#SDk$D(xtB^m8|F*WiT4>Ijc9f_AmA?qAB{;V!=E8Y9O$#G-mJD+UMmQ@Rk{S{B3~y0E%-940HPyOll_by(-PV5?Y%U`u`MTpNSV?V^YRPM+*&H% zL~-9DzIxXixYBpmE$h<6kSSBb@i9qF^?Y!@X%(uGz^%CDoVK#I@+wbUv!$+uci!VS z=l-t*MIBpsaD!0Q4;c;L^aA01K;>kRP7bsAyKYp8%gggv2)#5$}3oPDe%3d8-r z?TAsp4HoB4o+!EXepQR%=K2z{R<+V#?>G%JD_JQ9A7?(ZVK3LjftdWlMWHs1E=Zs$ z#jPxK1Kx8mJtG=NY&DJqY0i!8IHE;fL4T#c$wjI&J)PX>GOg^5}G_{?ButJ!|HFvwk`eEz4K$Fz35qJL?!XMpYS za$icfoNYwyj~Xq*xZ;FWGk;;@zM)b`K$NmuRb;J|G)p2eKU{;&TtQ!fEfS85b;*zm zKv!yT*WM%@_YX`-&m{p?O5QFvkPgT!y)ltl>Vgh&ocUe9R3QSV z2r<#F+;PtzhdQhvLCVOr4{rmuPA{VlN124T%_gM9yO|Mx8ts3`a|CQ1?BwQ+1icl zy__5X3(leSr24dn=6h}z2f5;isfXermCft|r6}*nnxA=IDkhDmJ^4O4x+*H!m#&#y zOZymB!!$$ls&2>58P@5qE0wcOc=hx=rx@tUDD`To&2Ef$)x|oezbmU9q?FN!H)(sx z>WaFH);>dyK`dQ9CFxn^U&6ev(r6yT!!a!qNa1MC za_7vn9dRB1&Y8ya=HXRbiY(bltZd|A&gR7%etwU;&XD@^o8OTmHB(hNNjsC1HexL# zMxH*m{q4lnA7LlfX1=r}3{#jf$W5n`t>Z))nHMnnJRTpD?1bA)$oVc%`gdO)?w=e) z^utd|)La(Fjhx@?!t+I*l+`OvD?%C*2lh zHXT#;45kVit%e%mnxZ8WHBVl*mN<=`teliH!_af8W^OfMB39{9bLB0`X-l)|@R$3< zGzlQIW|>O>*kc4kSZfbz(3@nwnjL9$&(Rx&M2VrU7L*Zr2g%W#v@mhLlF!IjaU1Q| zybrNJ-LSAwF0!hsttyj4ay)!xUSrrMq&CKaqqPtfCP8k>`=nJu?`872X~x8&lEq+( z=g-jWfy!|}9b;V4du1z;*PGg}TP@HYy~(im>7Bp*%_aQ`o4i&4fsLDV9ObzNsi0%?}K{+0``|ZA}?hWDABj(trV38TJ{;!Hv5wjK@ry;xgJfUMwN)EVDLDo)1T-L zO%KT2I0ndd#AK30itRrpt|Pm!wJ$dTO7KLsgD6>&r^&;O*S3j0aReiaf}_;8kI{uk z-^P-64QJgV54BQ4x6wv^d(`IGuq`n3O{DLQ*yj2L4^~b>gnQu5#}8WAc2oblB)4o_MR=`R^vy%7Go3RFrr4k3fp5tl_FwzJ`h1 z|8_vVvFQPzH*bVh%czIx2C`iNi9EfYwW-<)v*rG%>L(q%6|f&+JLC25{kt1MRHuLt z{N=t0%F$Ch&iOs3hSAo?Z5nCVdm7Rqnt|+c;-|A5MVM5MdCkbfVzsyh2$@&sUPubK z?}4hC+lQGZA%n&P3K$a;5)y&fq<5!2tabiiO*24|oVs}Qng%lc57^nk+l=`tq)1m{*aTA|u^^yxGlZ&$ITKJ(Bm zmS}rUW_J5-ZyAnX5eRAk$yTOPE!XPYt=_hwMLhFpos?kZH|zz} z9>6qq63+!&7IRFGUQ3raJA?#rq&t|px3Ut8 z##C;@8KJTnY5pJtB-xofMf)LD3xY0S+ z$36=rhH#@c*nC1vtrH}xx@NDve7gzb1>3W<>7etusb+c8I0d&+N@ih|QlxZ{MwM%s zT#xIvxR*-z4(5BZ_@$uc8%E2-I>YG^Dh-2( z?Kn{pu-ekT|29mP&Esfb@E!hdk#1<&Vvpe~1S8j5v4@b=NAtALxaP8+?xIwq3=O=9 z-uhlOlfc5uS<1nyYz|m(-Jz|es7{V&a{E4t#lT^MKd8U8P#0YAAv-umnw?nU1l3G) zuHS?}+}Nih2{k}V4}!A`(~ED9Lst3NT`nN~yDmqD{jX5Mf(|*#!UTFZ0{UI~+UVLk zKkU|K0yncuj5iw00Yn#ojiQ0Xkm$_HM$Ii#p9dC>*+y>noRf|I`sps=1iU-PVWS*t zd19HozW|gy(pjkeNk6o9Wog6g0!sKSM?9(F@Otd@wrNVm@K%^uZrg%A6r{;X(%>nv zWd6VNd4bK}49Zl^B;@|+Ypq3wuoP;&T&bKX3XWy$eAL+(~JbvYFiPSWc zfYabE)pb@4i^dP2`8l9j-Sh>mQuok-F>P6`X~4Lg{)bAVO)a}|HR63PZ%`Sj+F**T z>Sg${nhU4UpEgucQ{}=|#?ASt|6l|OAbx#ezcIhZ%@&Zj0q!?q(%Oc1 zSBxk9WVi<-o5AOV5XOdMVPm^{?gnuaF+`C?4i3R(mC0ti0ta{ixYXm$t2B}?uY4z_ z>_Fws3#)Sqm8R}qevxI-_#SnGA5~T8F?%$NWbDi*Rt;FAR-Cx_&`XB*55w0=c~k`0 zKOd!};yx?yCiFC2_1tGeE+Ognw9`Lm?oOO^P74UW9)*$P;%8yPzuo5%GD-$gDUMDK zNT4bp0N6U9jZ6ln80iK=3o8Z&jH~?YY=i&oA{Ql%)UNsNfB^zt-@J*t?n}p8+~>z; z*TTi%vso1_n%N{^d6iHr-oO=Sxp0iz;FDi8>f)HD-l`}f(XqO`xUeudrk^w9X|I&o z?ke#kU+Kb5u7!G7ryUe%!8>zym9`wYIM+>!NtMKbSwJQLoe^12S?OeV5 zy)~ex3N4(FM|U5*z^8jQUr+@xBZ9E$#*L+y2%FIw<~HE71J0OUNj< z$jeLyz*r4dA~ci%Xdn;gpFf1z4!*{X9z#NMe#s7eDe938|6=G+gq{Bn+7|Vn#Br1% z0d`ivJvINzrTv2Fpgat|)CqhfqfEFCghKj>hBK^B3%D3Z{}a8a{_~rE1uNBGGDLBT zl@KVwNODb#Gl2 zWc(C1vRE(p@)ZMi1o$AKBITj23*KnLRGt_04!{ePNpK$2y?Y~M8!tkxX5Xld2&{-C zjQ?Wafe&$U>)HkXs)stdFyY07KGy*E3n~S%Z~f(Lp#1+4`FKHBe20Bwh@v;L``#TF z|CPk+4f7O(Z?F0YKHQq!Ab-CgJE0%?09>wv*v}6p2_7+oCYiDk_Z6DqH<{2_@@N_ku`k~S{ z;dy`d>qWRi8d8(7Uj7$R7y##oBlZvUnKb(p3`JV{C3FK7pKb*3b|*PTLv7>sRhR^K zXBCV92Sd@4!*c3NBE$83KqH5Oi^ee0Oet(irrRaT!?Ay_Nm@X~@^VxJ95kXjsvGZT z(r>zZv1h=u093bvL$kY=3SFPl_P^ECp^aLhE>cJ}QrQepBd-;_pn&nE1J(b3)=&X) za;2KOX*qo@PO-l@apf%2xJi`KdPxT zD4a;;?d+V4n?eP{kFMjgw1a1re?F;!ejE_JgfzZvgILA*Yevf7kAqX60?Lt&OLTDS z!W!m^R3n~R!}bJ=Fbg_)cy>EaW3*16@t>DyXAQv7U;>1x6LSj7eWjiAhmRYl9HPpI zvc3WNZ(~v!9dm9s%IzUgBbaHnM;^sH9$MFl!R*Q12|sdv{jPYZG^@vRdlcTS@I2`M z`ccXvURj7H1Yj~g8n%?7WR1&X;30;PBv3T!=t76lk|+(M{pLO}W?izXa{Ep4W0^gP z#u&ez1H1LvD0vku0q7kUqeb5AUrU{t13~E0&u+acLGPp1Pe7jm(g^y z7DZHl=p~&Ssd~2H2OXGAUhjkp(Wh?=qHh}0OQSz_Kg@>-0 z99&kx%t&(>uaadki*$v+o_#mNqc9l-mZgYcDb{*4}%UEk~9q|{^`dKr1 z7IB(?j;fXZ*3Nh3z%Q+*fAC?(vM5?+S6jpzi?JNRMp9 z&Up{vMOyyB%0X0F4U$Nj_TAq$UjvwT*LWP+y9}3lZK}(L7W%>vRULCDq4{a=sXbC3 zC9Q-cqHT*dPwr_AuWach$pS&RuLsgPfRypTi!FEv}<|YhR!G2A;sm|h_6>k2q@%r6E#eDlUT^RT z`$yxW07T7Tma5tsnP@j}Fhb2fRW@=rc>qVx`wDg1Kj)nOf&+)x;CmRf=)kACDcS&h zxD}A&0^ZrXJz-;bcJJJvx^hoK5~ahho?D(ynG{D@Tw@kfpGg2T5x0E;zR?YqO#Z?vGmGNk5_0Nt>I zK6bBs-CkD&&0~?);$k5j<}5CcqxB+}W=>BV(acEOZng4a+Sy?47(5W4DFi^u=1s$3 z^_uIdz8u?fxj+`;#8?DMa+*X&jg(@#4&dqbZFt=v+6h`3x*DnSrR47<$5i?mvcQ1n z7*K@cNrfs1;?i?GmdS5@0FY+8XTvy3AfwPSX1Z0R`BfNcjs)p}lgv^0<|l{A;XGF8 zlmq_{Xh}n)5Y}i=b}hN4H*qEIXTm>72;8NQb+Bl2c~Q}t#Zn5)M14~n5@_!<2_p0Y zqUu`{bqj1f+q?LC~(x)}Q;jO6*bvoh4)&QZ(FJ-Y)*i;}b=FbK7C0RS< zQi-(Kp6fq*@x!Jx%f5AN3cV-w_T7h$dTU-FSY7eG<_}8w+LTp(>NgppD30Ci-lQbt zX9>bK@M}rt!LwMapE0Agv)E*h3vf5kH6#6}QO~CCd~IN)xWRnlIDK>blq9|;E$3o~ zuDA)P=(oNQ*ZwIU3Evn+!$urgxcy9vBcbW2B3+cnmADdP$ojn}i2iC`T7bHvV@C^vkq>6sz&7par|j|9&WsmLkSFim6Pa<#7DAlW z@R#bs=qJ+O#rViDB*l}3>5gqXaMjmetL9UF``mY$eqPg)E|F)NXKY-FR!$mq*z?)S z)ixwVSGT}D#Ct%p+-TZros`|BXm}$#kuQz;Mhtpu8cowb4=1D>*I+*qordFmNzUdkj;=nFs!#C8ZQlUn;LF2Ck+e)sv-u)t7 zG#^a>aYiBXpd!2x_Ui1J)78dj7z*Yo-5`3`$EO1^566UOW^FMV&YZ^_UMDrWp1Mq6 z-@pRjm@DMDx@+sE1=u%MexpE{eA87|7aN!=!Dugy^IDU0zr99gN)I_^+0#@1v#*u8 z`}^15SosR`zXyM|kAxf7_x7KH|Uz{JSJ+sWBeTi!n#$tQa6t5u64~XzB@q#ed0<#*N zifM>{nT%vJ*?>_3v_QJ~#QSwt+jaXzy?~Ae29hBAK^M_s1s)uybFp}Z@LNUlMD zpaR^U$(3Z*chy}Xe`LNcWY1UHG9);fqiE71Mk~mDJ;Jeoz-Eq&0y}J#|H^-PUs6t? zz{Gqn6Xt21^%XL$phIHhQ{+lyJw@6R5i8!$ZFU+CBkNIh4Lm(^icd84;Gi4ApEV+r z<^jQ&o21}@fu3>Pa!(Ob)B>}DDIs(QO*D^?$tg-T2~k4>-ipw2VwR4R3Cs!8yc=<7 zeqY8tB=Rrq)Y!ul#!3lk)=br>A9a3CQtL>*yw2;vfVxigI|fzax%8+_L1x>e+2%z! z{CN^OX2Z(rQj^DUhm6=JvdKZz>=zmsz`;FWi=DiL{;aa(ym z?+7y1J+s*zT~Z+xsB9*vsSLNI8qq^SZab+qH@RkzG#U0$nEaR{uk=4yK)SE6OWhL6 zL>RPc1WTo9QU2Gy5DK|+N*Zznhg-|#0mC0RMyi%EUgryr%XLTEuG?K~9wzD;#l@xc z^0G><+J}u>Miz5|3|7+w9u{eHKh1qM94a!r&CQuNsF_+JQo_jf(^dq=AENKQBU*ZNuy)(7}=qrqnK>lh3Hc{FVEDM(b^?w<4MC56;*2bIBWFD zr-OK~!8d(NuNC4_W#fgW{Rh(zM*eJU)n)g_6j(#_;v@vE_R-k$6b1y_qcDWRMDmme z_vN2K8}A=4vs3ZB^$C&l3_|EBZ0^kPBLwyss78t1dCSzhOydSEgJzjOO8wBV-ohJI zwj@g)&hFgI`B4mLt)SMYQ_B5F_+%Y-5+afo+;VvF%NJssO9$4S8s%r%)J^#Ze#vP4 zL|ybuU-Ezf+x>*DtZUF#i={uVbHfT|K&ghYo4B;rikwVFtm||dINxvK(2$X?Uxh5X5OB<2#5=yPm66X;XS0V252{HD< z56+V&^Xfw697^8#V~VEbSx;hpT-8La1n&^W%Q&+qQR)>SDjd~xC;i&ceES(RAFXUt z-LRa`~p6B>2v7&XrpIoE?)Jo>Tch9re@&zIwf_#>-J{dC(L#A3YGA3?19&` zCT5xz2!Hza+OTzX6GWGy&VyLqPcbYJKbY{%8ZA6*n~q-xmQDxKe|&BV%;+wnv+$CV z_+o}}PGu-0QRVMiDv!B15S>{CacMSmk$9*p*o70mle&=0b$njP7SrBunxPESygR#p z3*1M>Nnka^oT^NWp=IN8r&7hJr>CmD?&K*qH#_cPi>TodowmSGcjdH(dpRXNRclpU zJE)^t9ipe89>2x3bh~tJO_t@hr4@*0Y9&}WK8q@ErbqkrY`IibtdN1BhTWy9w@HP} za?||yBDSKv|46T#VVsFWQ?e;LhqQNXVS1Os`haN5nPoFFo|g{p;teqzFxya7vy~Ga zoLDULTl%6IH&&z3#gR#0P8zWgrKX)CLJXeNTmuU`*Mukj$Z_Io1*deJzPEMLXG`vG z^=S0&y2}2dPKaziHDet$jQLZAN^>hmO(P^^K~4t3&4oaovH*+8+^Ad@t2q)-BR8<& z@Ve3+*PK(x&Vk}^N|c~Pkp|ia4zx2l+Q7RiljbUOnOD;$e&}4oUnG?@%}cDyVDe5J zmU$36KL9V7L`IJpgd#VMOoD3~!z-67TcEbSwdFK1k8=tV)cdYYmFvvd^b8($f=L6i z&^F%F+Q+FQ!KTUDcj2-pevz_Bb>ia1Mdab7lO@LlOYNYb#pv0u7YS}I;(Q;x0Ykqt`hiKJnO9|ysYIUu+=eOY_Z+fsA$wY&;MLilz9*@|PsS7K3S$?~Ns^>|@ z7(c0^n^)cjN+(jgY%UlyN1P5Fry zFVy|MDP$d#{FB0a>P81rDS1vBV`Y3q1VIm5jD}+N;L6~a_NtSsa}|tV@Ft1**)LWS z)`sFsii<%Jmaw=$CK1CTNuE8cb0@TCYw=T?)1Ife^c%WVNUISAswz!R93{`H4WY=Ic)lh* zKqk4LH7s&C38mt8Z#$Up=c9Z=7&EspmY#12mV@ZteRN4D0iX>G4}Idw*go9ik3s6h zPKebcJJABDF65?(kp(`G>jD0~yr3WS(?;*#U};VnR@25zti2CYMn$^u(ycRlN9W@- z4*9Zws^bv;jhumG)o(b}O(}LHZ)4>3^mnWjfu%g?7t-MxBSgZC-{??ArCbLvLshBU zM9G4LuMDaN!W^hMR700zG7dVg`dhe zW7e$3Ndt&-H$Tfe`)p*q{W0PxFf|$gF)*3|s0H=ITO>T5+SfS7v ziO?NJ&n?PD+JDV7%G+wCJq)T0Q4uaQVa0Fxz5o{Wm#r-x%zGorjVL#YkpxO%i5$TRe`=V6ZH(r-RphIcnS5``o zqFS2>4DhZ7#&Ghv?-?nkoQrs0ja#_BL$h>}_q(TBXFGo0uJ@h7`$%>9R%hcx$Mfm7 z#6;kByB#;>KA0=>aOHT~_9uObyJda#Gcp3FP?9MLfFP<%>{wwWlKEHaao@cnCwv8! z!WH2j3)Qg#$0<7s>7OCEIoCT`QJFrov|&KOC|$gtJyx+&H1P@9w?3v3;9VR;bO32z z_V#CabbLvntHF_#4dGvU#>ve<*7!WTT5eZPtrmx`v|_jFwk_yep?~4prpM*f8K(fE zc=vS3cU;ZT)ATELh2d$`G4JG?{iUjK)07qW6UxfPmrJwuXHX)uP}_yU{$x9+VB14i z6g~A&6$5{p>pXL->iRyD-pwe^J))DR2$!dCU42F4+;|CCqvg!_IPv;A4k_cD&k^M1aqO-wc*a(4OpNQ$lX z;X=UY=w9F^k!!25|5}*>CCC6+cA+;~`krkHJg)oY?nQX&EftfJiii}6YLJ}z9`_5} zjCR}vt8^Wil%Oa3+$H+nRF~r&a9I0V*hTN2J^9`wE*h0SUIhra<%3NV#2!xy+v|8{ zYfjgmk5~XZ#1=`(^UZB5WPdL+tfs<48dWnk?JuN* zqCG5oHO*p26swO{a90Xd2W;C#V@T~<^Im)+KuD|7F1)im?*!}>K^dskmV|UasSuog z=rcR9ibLFraH{v~X_$@XGDor>ZIseef}rJW=Lu%TMTqvE|JTY{ND0BjFnvWr^fJTD z9DDVJ=H^TVLGHz#3S%2C)5%y8 z+CnJz<=W}Ra|e1Jm(Q(E7x<3BipUY@nZAFro~>u!Z1q;tVPb2V%f;oW3~C1mm$|ur zvJlYje@f06buk{`9*oWZoSf_HwDl!cjHo1G2A+BFCKtX)SMoRJTXAtMq)3QXYn5_- z+honM27T{(FG)|z4*t`QXGcJ>wZM2bVBX0`la7M zxAmVARy4rYHhmENwZ<(}Lu%d%8B)_N$>3~|y?$!H>(na3GQpv?auImU5O8UGHWMh% zuyj?DK_t(6#*D*4eld0gy)t_F3Jjq)%q0i~bKb#4V(62j<^W#;!h!=nT+WZ~Pjw@K z0YE<}A(0cA)@sG*dhhtrnMb)U~ zgELA+M|5yh0;JiMuS$hw1&vDC!^F$TpH@o{n#5(^IQ3fDev;~JVOm=b1_?yIRCKQ^~| zs>R?wg0oFAD>?LRv1LHFTRMmDOMk`xwGjo;mukkudM{ivYM&*f!z|patj^s*LU5 zK=Bhnjt<5m-vfIF5Iy5@h;hAR9%hDt6C|BIy-j#tV)39^F!Fk~(_8cP$7@XZP}g#P zJRhL9a@nh9)wY8RBt6_>3Y4G;xO9*{j^A^9k zJoddkKO$g!ya}YSjo^zwZ%cH^=+RAInJuRQL8X0 zT6cU6U-|asGg9O-LhQ45z!@FHqR%6fFT~}~H}7cCg+8N(u=E=(0GAn|K}=?pNqM=T zBCvr6V*j`p;9i;J=bicw7VyoFMrawJx+OSMSb)2LQ4cgY#P{fAIZHNQNDk@*ok$=I zI2|Y*o6hB0_JE|g<;O_ZH*G*@dUHdyJi!QvF_(%#+o)TOTVf3UqTwOZ`hSmyidbrW z&uKiBXDF=u*_ORKaG6I&(h%h|I>G6DR)uHou$RM@`Bk&gujbm?(K`En)ZHRxh@o1@ z8;!xPuFlAc|EdI*vx<2t{DV8dZ?u{Y7dc{%CcSE67U1v{OXy)SsIPpoPvDag8Pss! z-gZY%>~V%D3J7D6W^&h81g=?DxnVx}>BBdUY+sES|7+LkfaYKT6xkx$vB}*h8U52{ zW>Z0j87pREdXRfN3wNerEIR1!RuJZ`lue^LF?mn9Zeyd+A-*9icWvS2S&>{8t$q&r9WrzX{(A4?m}+%7Rm;n@gAPQo~eB z!YHI6b@EmlzMbt6P2(GG%cojGwr>?=OY>Jt`N9|4`5^BWaa=Cy&U)Y|~pj6^?pZ2^a=8qk5nE z0xsv?tbXg>a1bX(!8V)t5@3p}jd<-pdbmHzh~|>>pFJ2!)7;@Wa}-cN1ea;Iy7Z5p zM2;um%n2AZe4V!A)0^kheBMFH%54VC9~MUJFLGB7E3d7d!lB8_E0xG;WeB%%y#ejo)$8BoR?5*HGl7KM38y$gFU@jd%r^F@lIp#0CWO2Yy5dN4h>-CCckWD zzhnQ}sGZ6>xP`~%Qe`V7{IA-p!@;@aPkQwA?(ryW z9h~UZ=DWbsv}$x1MnT1!Sl2?zphSYrry)~X8`A%KDPK!V_rknx_P5bV^&%*`ql>`R zh_}Aqv*v0fIt@Vs%YxPF;9n5;-`-n-6=1vVIgk7h0s3Kbo2Z$Ezj!Y%eFY26ly{6@ z+IsziwC_70l%lqZS8Zh;uq!}zzT`fDIr>z|cU4Q-&hFC2GLEY}Lz^6|OwRZEN(awF zm*qk^jciQ9=BC}BMC7x&X$Ao`45^R!&-Q%?4`^z}3B+G-FWk7Ws;p)uQyLoZUuwk! z%0{nRo1S_Pc%cOuT3krrPx!1s$&-x@a|uQ4@_V$hk3Nt?hyluUvqiYZcqY*bHK( zu}O21Yh(nrg98S@-TYGgMEb}sI(Rml9WFJqdJh~t5wkeSWaB^X9A^1II_YqLjWKKg z*n*7@9?lh8Y4wkt<;NP--LVCI>L}-Jo?j=$)Jq9Nij6}f_J(i6redq_9sGtsc zyD7$QD}0F5l=N_Q9&>74i%3cIX|GZHiGEFRykV4bQf7T!6{Aw`btQ~q=!@x{-&fTl z>_@PWAzaoOYY?!{Qu%0nRUDjNQR0QLt$?hg5GyrG1gRl@Oow7m>h>Q&d!8TNfqwN= z3hNobEWj^6Ks@k*jlN)bi*9IKqph@|r0{eAJRQL9S*563*-}Hu0i@&<7LdALUrtjR zH|f}uX#`t?*sU}q4csL+svbVD_0KOlRZbp7IEe1w(e{SkHqG`&s|>l_(dnwVJPnxy ziE^FC_PUj|O{0X}iG`9=#CSIlu}yq!oFt#aMBj<9kyW$#tl}Z5U?Ay(J#Sfeo)0aq zm%OrD!-?fA2Cm96(QweSyI35CdDT9i{Jp94m%WDM=e8N2rxvQ%G$q|UFm^h(nDOG9 zUMm`@p@=GF|F-wZJi*_xzlda*4QM5$AF*C@1sD&aiek*ESyry&M?F)2eBUke?NV9O z+#V4PdbL2r-}S&p0nXW&{!B!nZiVV)fCTghU7d|Z0uG^&lXT_ZZ?eCnBqwO3l&ewy z35m(7LO?)Mj|9Y5==PLkMSn7XI*0xAg`?1Ne6`C+v~DBy(XG&wiaVe-!5R%O1B)K} zUZ53yc9?ol8+nKXu{i>GerR>6Yl-(V)5plJJunjW85c~C@&u^!yEb|Vtp7e>fY<`& z+9pl?KT0YnMzs^I4&WWRj*y_udwx6N`1gIm0Gy;y@6q)%z>vCas!Xd>T%LK?;ZOdO zZw~R-QYG)O1>6eJWV7|_UPJqM6a>>lQr~|1AOOrX04dEIz&>~{^`i;AFMB(*d3JfRJWPul=dt0$2U-bd?ABD3NK-3Z{wytC^H=>&ry@R+W+f?Zv5{9X z4$n|qy=$0cPV*&0FLie_lbiYiY*)pq`S3E{=^F@jyt3D0>NH4qOv#q!wFsAy2tX+B z-$tr_72?=4<o`zp>E#uB}~J zNlwxD)5#sIZv!k{6Gd^7F-?jS@<};a-C8#+w=VT}uIRSL58jVTzAbSJ&*&*}}1cOr?{8bjR{>)VRr!0$DMT+gF zI-}fV2fYv4<6E@kOUNe3?aR{Ax<*`QUAO= zOKn|wUBEikpGl)D$Lcsra+qY{2H}Wa zp(iV}G-?_kFkXwu*|rK#oYobJldYtAdH$M1fL*cQ6M)KG)8MP7^Ltih%0=(v;rmWd z3zG84rxDU{#=JL;jrpIZ56`EWXAOr36zwGOoiunmiLvC#KBC~aUU?lCn^ZJ{y2&9W ztT>m3&fyhbyEN$N#}woB^_Ej(_G-NsLw}jJ@~f0@B4}a^GX9t}pD_TCFpPL$E6*Wp zp8SoC;NXadAEh6KT2^Z9*i(3OyZQ2VcF6Q>A$|3R!3=G_S7`xw_{3Kd z+S$7xv`q=q3P%=SS0IkBMJzRes@am*=v2Bjh_rlJXr6{8u}gZ4DoZFKO<=#w`o#wg zWnT}(HIT9z#4C4Q4X9Ti2eEO?F~yU5VBzR&Z!NSTf1dY?(bHGIw+8o3)*9eH_nGV} z@W#dC!2}tr9z99*E-aB!>4XfO{XiX#x2ubQV`27}=*hhOX=6XpU55R2sZ|D%Zoz>m z>>aMb?)v&on~?5!g@DY%=PSLg365l<4MA&KBz%-}Q;179UV zR@_U9?t+cdkceP1qCyx~P

`et%mdyj<;$=i($eh+dw7rT@Rk4s`pSYTJ}H$pxR z;f7sEI+7=ajIHYeLTFTpnkZI_ae2y8x7I8O^&!8buv%B_DSYlP`6=Qo&xfaGAI{dD z?->yYq2&Y~tx>>Y!3%3B5iA1}NI1_hs-d9RPwAjh2 zDa@S4R#23d6A$@`uNq-URf_4=lStzK{E=Ej_?UVCX?p^j)lSaLAC8X5Gg(Dlg?_pTQ+{|_Z~Y-;qDVr%b(sy>rs7iJaSzbdb&xYfg@drU zA~OH64IaK6KRULp%dPCF0i-9L8z#ZZt)Vw`1#JuB;Wiby46()XIx5w{YZx+mxq~Hu zg7lxf0E>a|OE|0CY@;=@B*JnG37J1MG#f>kX{E+hRvV0pbyjqW0f+z!IRNNg;D|UE ztXUC)+^O~(J@Ujn?T-|Z5M0tNViCJ3nmE8e#=&95Y)?@T z;O`rk=;9C8N(X!<9@MTjRY^NNkL$C7@z49VnZx=-XErdKGVOjgz3ac=rMEvtZf0i4twpd0dD0u-Sl{%;EJre9Da`R1fj>(iZF zGO%vxsBcz*`6rY*H_)$*BXD{Sa5_h`9(oelB%M) zD9zm_IN0ni&i7tEFMaS!VH9^0p(MKiHsEYG8h(o(lU}NrMyDF%N~%+W0{_}dH7V-m zp&OAR)vW6GWpnYAck82Ea0efGxcz_-F~*1*7vS1z$dLL);^OKw-6VfNnO<@irh^o?g2WiD!TOHbM=$Q(vb$zZl>N7E@h+4-VlW2`Ch8 zuQUu!f9D14-$>ZDbIKNh;M9J0jN!k+V4$hACcx?!fO2a~hRU^D>%24+q^gFju|msF z*^tZ?h z`SIeb62Lk1w~$5yFpGKY?G*4198cz@8E~D-g%~+B0C&dXmDB9}N~4s8ra)o2G(7kSM6tNcC{K$72y-r5700Vc zHBD_e#fgejVgPD5Kc>k&+B&jHE!&kFvo7DQbkRk=al>7p?Tl(bcx9|)f}+xlL+W>O zJk~KFv=iHzS%(4nY+JENn||9~B3_*~nS2GM_DgKYwEHe4W@Emf*MU7l##rS%tLgy^@n9@@ zFAZ8LjEe<&>OhJ(Ff7_x_H7@?{I3V{?}H2==2h;gq)*2+kY|w}ZG?yVj*IXgF+3M&hExI264l4T5E;r5Q>G;_s|k|8fN{*RB{Ck$#VuwWc?3 zZ!vwx#ya`)bFc_8;HU`9P!_eW<_X3dJCE;Ls@@IgO#NVrgG?I& zqw`y)lz$O+sF76n51f>zp{JXP7=|B0yT8TH6EyD_G(z=X zNx$~;lTKT^0?%BjN*6r;xO0I6JKVrdTc_<$M$Co(#@BtBgavw1bz>mA%<-ll@g-dv z=u|21GGfMe|0W6=dNqAc-p}Itr{)Mf&K|&e3Ox4u3MsL+6DD_N(NC2mj{ih6cR-_? zaPpQ3#*-2QwZNTRIRRNLJ0|$zg3k+aTwO$pbgxpZ!W-Xj>;x*u$^eJ-i3s#IeLc*r zx50>-+BR>q^I7eDym17jJJFR7V%J3lc&Cf#B}$ z?(Xgh?(Xhx3GNWwlVAaYJBNci0fM``9^7R*$@|rmdRJOnKy3aujG?qKCRb8pdfHE;3A(V&EOCtDio> zUlimHF>GTVR14$!IAG#hR!%_9?BDT!1A_j0`v1#}+5eJQ$p6E4|6fNNFp>YmX^c2_ zR9}3GB}+_T!oWWV@P_w4Yf<<(4Zmem?g6&;cHq-?g&k`%LTk2S-qVAycas*^^xKIV z%eKeHJj0}+vK)bJ0QGJ?nK4Z{CXtVnIl6%_UuW6cy>L&5!zU1cSEXO14zmYq{ zSeRe+vnvZsE!!fo+QEMtn;3rsq{-3{TwG!NR_4T%QcnP^9YgSSiDjN_W1isM^Q(N$ zg2BZP_0Eg6@k#!b?W>q1H;Qwn`)5G5{qLbgvs0GV+qT-qe&pnT_p*3V_5|w}5U9Q_ zhepXUD)S{m_~8is<*aO#q6}m8zE-%k+o0#*Glogq?RaNPfH2q^bSVX(vI+znJEG(= zfOe|wIYX^o`n;bu`rG-(`EUZ0e>&Y@6C0*5l6Nof#uIsiBJEE|m6!wFX8WQ93PaA) z7x7mDD%-lnH7``;8w6_0zLR7$G3H=Dcvtsdu$AUM1=B$w&lk%Uu=q80&qo(og8k1| zo`T#+@-62XV?wlLFZ;H!3U{h6wzju^^t1!2!{%gxW3htK?4?ADcUIPT&TiSli%cae zKZIUDFF$HmX2YoeTYL0OYiuW~`ODp1;BoQ(Tm2tp?HGSUFz#a2`sl(tXVy+djH{#Y&DP`H2$0W!^P(_*QRB@k!)F=qF!Ey4vwIq~D^>h)8F ze9QGZ<2D_UviaQ8V}nWH=ArOIFLI#21Bv_7O21svT}Uyl|K(Yf*>Jz`Q{&5$=Zd3N zF4cOXHvC1>#ZWI}W&7jMjiJy)THEs=U3q$h3)it<4U6A%`O9OmA$JpE%64Wbzh1Z& z#rL5Z(afopD(~bKqxVXU>M%3G`oJDY;t~b7j(2-UL1Hc({I_*ddAAS1l~oO zaYtIX&%)zBmPn-Cq_2@ffSF06KFDIc4lvz(=;s%or|hN6B?EsLYs?j#o-(fW{~#AT9EZ&A7K1||>15$tf?w{LT} zq2Gj&`pNxNp)+e)HoUt($>JxP80w+Qh=5!yY*xQTuUcsRrp9I)vwGZq=0?iJMj}wH zC$WT8$=txT#iIMPjaGvK%%zrBo3D6yWZPvA8hkft_?-Da!pH=^LkG-U<9XFt;c+>S z7nOc1d;mE|BDz^>SAehdB=7x2OVQTdm{3gv8>CB{tt=SXdm-@Voc}8BEZFFjZDPOO zb-c-BL&)K94~-1rH$?ctt4+vv;N*6Y`6ax6`+0pgub4X!!XE!Lh7b9lJWmLlqrMv4 zyn*UdeBe#mF&=IjfiEm6ske6GNm(IXNyxyGRy_X!rgiu&az<96x}nF4rcphEdXkuKsm&KSpo zCEiP^6Pr@L2bvAvxRPIlg3h^hI!vTUeRvSMKwiFn;Yc`OyItP_z-X5=jq4-@G3oyU z#R9y+k=FXPh%Z3L;6&b;Ms|?a|HJ|g4FV6J&hVE$4s24EY>%~)Oy}CQ&Y7E=;ZkCz zES}%aBw6$)-1s41h)t&=rpCu^bcK7A&w79j7dh?%^Z<_9ldgJxuFMtw*{y^M|ML?2 z&-a>vi$?WzS?M`hjT)DP#}v(nWwpK4MOem--P=iK_#7MZNP$wa=H7gH??-pk?vBfI zRx;J`8*y{`eI(1cQf%&eB(Smr{qO3XD1Nczm+M&lIvaa=F0>?}Fevl`}+WgcQ z$C5=iMC|96rJ#TlU*G=nsM}s)e{jQIun+b`7H$CO%a~87Mh~&$kNIsb6Jls@F76+G zRWOeE6}nWeS|8YXZ!SxDY-k4#cOtuu3Ab*?Kb!HJ+E&_EmtM@VZ$L`cG7 zQ2NIG!IP>Y19o`MFbc(S1WL=z$DzzKC}UR_<$ddDue6w{j1U)E` zT>3M{w$9Tx2P|HZ8h2JeT3hr3H!XhiS=k6Z%nVaAUn_z7r?N8ZCUHL6L44k+ul`y=Dp$Fe41?ybp_Y) zUlR0(lTu2Wj~%2F&5$o2>MaVzNI{zxOlj0Yo<|#flgaJ3Cb5v<*=LY-5%EiO5E)03 zwaW?Nf7WJXK$QFDjI`q-176|qxZku78}>iwXXqE=-$D7xOTyM2XZe^#kf%S)?Ga-6 z%!n8l`4v-x`reh$}?VRftZj-Ji#%e;pop z6Oa>HS^48P`k`o6+Mn0>msCj~SiS?awY8Y;q}XB`%3(tAq4glwPhk z;lR6+N)67JX<1c~ud7d&2G{4HC@n?zhn0EHue!It|5l{dL7(Oz%f|;C_gCtnBn#f$ zuI#4n*F!7ESD$QqUgzvda~eg?rL2#>LpYFXQgS%0)y`ERy;(N68(f<+rz;GoXPbK* zuM9wQoQBl-jhWeKC9>jt-|zDbxXut`rS-jfnSMOTYXirt`Mb}OPlx(2R^wL^J)VIe zhE8Z7M_2NW8QJj!&FQZilCZY{2N#a^rSCxB(a-c}R!~{{lbtZ=D~Wm@!jO*w_E=xE z;l#b;vw5qy=;=4?muJ^+3+x4Uu?BgP_sV{Cm7+IOME+7XUmlL6g&&M_Xgf4)J^ilO zmF=g?dP(Ic3xkFIF7~e8@D9AFd{2z^6D4Hjm)s#4FB4oeC*4R?w4=d*d;9ZJvArBD z_45>iYc{in4xwJw#RPPEj$fH=l+SA1nVHtsR#qx-o#C-Wn)#a^iqd8>{Bp}}xT3o!_;6Bvk;($>O{nzPx6$Vyu$I1ru>eTkbq;A+`}3o!c`d#^A=>OS(RMt87#Y%j=+=4AIWs@T<^nI486J2{g@EmMg zqzvRnVWkL75j~6N|I*Iy&HY2RI<)wIs~I*zue&O7^OqXYB(6lmH}pPxSiLm>J9XDw z@+14Q432*Mj#cfQP30kbp?er`Bex9s6OZdCCPjg19ONZNbml6C(YdEsX2&U7UfCod zqXVm;v^wp<8uH>F)qBHLKkjUWBIYqNsKSrM9g>htsM(L4X8YT}tOF&BhOJ2-uea4f zY%4Y=Qsi-zVzgJ9&OMMgm#nEdw1SaAGNr2*)GzgxOL*t;mSJ7M<%lS4to zfd`+&z#erU!}fobXGN*m6mozchnXQQ&7+%g>PZgodmAa7#21su88tf1!)m2=%h1l_ z-#C_ketT~lczdxxOtr6>Hgi-_a(A#oXy~r@c*Y!fnf0v8rCLz&yi@^OcC|lrdn`J+ z=YI8dar-nunQ;xSPc;RKagN;KP{wcmm|8+1WJoPTL;bqEz2bgm?zPyljt)f9{ZeQ+ z;Z7q=QuqcwDdZD)P@$WG5$Fuq1d>#!PU%wpGDs~sEBJ@=C!}Kc2GQzl8+H)f<&lKx z^><5(9f0DE_~*B3RW%`EnTy-)7ifFCSj5W?Dy1YQ22hVf0-mEmZ?FT-hw})zGi65Q zh401IDYC*99$ua*b{T?tuuzX6ap8ttFMC)@;N^&Yv2LOJ3vdi!;7uqPWDAdc%)Q*I zS-W|dx140Z^aAESV7m0J;d;4>FLhkmr@r~@TE!(a#l%4I#B}Gm$@^LVY+1H3-Q_)! zOWrpLN``;5M^zDK<=*GK;N7En1hDKqoB3(id?OOhywIBxAO9J9&bgp&A`%xa6kN*T zi6w6;0WC5N-grOPu@#%`5zbe-AZH31w1K`^Va(DlI}^U=@dwKXYiAYw_qaC=9(Zm* zKd6e-^_(;OL~XJdbo7VcgIx0og>hW6^5dmu7a!(6d`J7on-wG}n)vbhcZKlNsHH}d zeC5kQO-{(trv!zvF`2^su=Pa2;SeUWiP8`X2|ZFWITcG<^BxV)0R}y=Kg2=2CE|ys z@N?SgDyaCrBGa#X1Avu?cn>gDhE@tReyjyQ7!r)BdWYEvA2POKYB&cwhjcMOMu#hB}QDU1c8lz?9t_mD2t$sI2fY^XzMdsiFB8`Tk!tXy?lZH%I0xT28|NLzEd>$*eLHzS+uq}_%@nwM+@^skI{?fgerr?`*yHIw& z;Q07x**{#~P)Kj+gK{{_%o#VZn|WYxZX z0pOCLns)yI=XETtoi#Z$GULUfy`Kb%gq+6yZMSrC0woHui`YLQx**^Gf^)!q|A&#G zGg+$;s9%D#f4;cD(WLp8umq}uAX4g2MbZ-WKlQfrb^|D54tjtCa?Ae?k*=(oH{o&x zgI}-)VC3$}x1!&5AOe^I?|Ao>D{orJjs7BX0N36uQoMpq>!w#JA5dl3bo$-)no9IF zGv`xcf%z~Z;b_?`LE3kUKTd|xiqqZ4`|fpAKmK6Wzk#}t_20zj`(J}PVQBPODtD@a z6j@l;5)hI!iyczolVR4BtY9?0(#^`T;fE`Mg1i5C)H?*!L)g+8P6OO%aN*99uN*oz zoqN$x4M~h13DCf0KG5(u3a<(gcBTn1ss?H#>;SOFJajXPRJF^H>krZ>h^!N9SjAp5O;$7<~z)->V zeyH!hxpfLOA3}4b=t9RaSPOxlMW8GqvGBn^BY-tA;1V!}OW})s3mV&X-aS4<*F=%L zg0lFWimszGz%U*T^C$|j?fg?< zJu0La0995bPxVpoFT(pAX1tu?9vCco9i@{Bcz7r2Kf*bw2vXcm6+H76gLcxC@OuZm zPg>AT0!$g-mF0K{u;eBF2(c!DkofI>30-GVP!+@^%e!^<0!A66)Q!yrpn#4X(# zQ0Z&dVb_g=%R-H%_DcM3r$dl-bO`x#q6iC0R0wrkBC5fy``g4)FU4F3gFaa70-UHc z{DQq}0bOX)b~DM&Th89$i_q`QdA_$qC^ogJm4jc#{N<@iDq5R(_({hG{R?Jj(kf{+ zifN9y`mbgj?!~dE@YL@P$joc9DM)yq5@bZ9E!A+ zEX7Flv?4-cMwR^{F-!-~%e?@t?w}|1yn>lRNx=oZI^E~7I`EXmqD7%NIAfD6)+~bq z=k-~svb>*<<0hOu!M3pHz-jgQNN%ISC%DJ<@TC6D2Nw&`tlTfEUk~?>iqj_hH2})^ z#SSN_)CMPQ2WkBBIKDxD%2^xLx39I$V)iW!-LaPT!U**^qB_CMb>rrV*8V^E2y3w1%o!pIy03T>ur|L zvYAq3LCcX@)+FnCD7@q#pM4d*#wOzTu~EB-p01XT*+QoJwO}0l`Gf!j&drwbkTn3ytpg0`5Jf<>GgZyyg79m%Sy+a%+0G$ zLETGR?vwQE`SlWbfoA*3Y>5#DcvqQ=zK)<%q29M->JG+u;37F_B2Q(=>?jumYc(zAK*KZx|1MFTE_~4n zk=LoeTbE8u)B;G-aAsSRA$*ddBg_4Evhq#K0IN=CS*cRjJKrx-t);6DL-OZ-f@_Ce zEBL8*3m*=1p|xuZ-#oYtQo3<&=cC$Y(OgtqUv62KOFLzOiT}mgNUN1}erZbHrDkgs z$%mOyrg>wXv|X(N177y`vMJ$r-Ut;sjOt+y#EkK3Mh|N~ME}}8y1ZmP@7iZs?T2uV zg{`Se3>|FBn{bkAQg)-0$iRY-u$UatG&!%$drn5`mh7!@WU{j9CH8OT;UX1^ljic9 z_R(PrzK(TzNkuqyN3aM$IrqvaQKi)e_1IpwxW$v&)^QXIlJZTJcjqyDT26L)yA!H>?)Qqzt3o&t7@i`{JMhwd&Gb_Uy zT?W<6zrLI2m+LpQelT)4ARu;mQx3K#6RnZC3$<5KU8$i3d zoQNv>kf^TrL($m-DUmielYx}3{(Ggb(Y^fg+kVWrtycIPs%V0Mz8vR9jL@FY-F^amkJrl*CWCs8Yp(pw$IKu;6EH z9eX_i`^2#gb@lye*izpZ{bOM2HE~ti5p=is84--2MxzE!`;Q(C#hkipH2$t!<5(3s zwB>~nlTu4Vlk%Q!g*gFxO44?o@FnS2;mtX}gT8txF6==O%&dDQQ(;gJ%O)830@N^T zES|$r2<9&1BVlN&_9$v{p_ipzM^QHk)!aW)zRV-QNcF42!H9i=s_xaXhuKH{!qFV@ zn@wO}mAQmU%GHokJs5`mH0zS;$? zPG^LJc~UOa^b8i&$}0Qdh_ipi2hTMk`K~&iTy$sz8OzqvHz5^<%~sU&kpB7G-`OSCcZu2I^kP~)-|+cMYIo7nYaoc(gCB?xI`#oZQ0eAv2f~USrLv zztSext9O|uk4ogq`#_B~d?(O2=H^i~MoP1klaix=OkZ3ypb;pLu2QHph9-OWv2w%` z#5OgLDt7SaOLIZ9#)-f9OX`yzsp6pQr1k!`M0|$9AcYtin$3GkyzaRoQ8J=5wg{?K z5gC}Hlxh4jDdrzaLRAqW0|0HpocT}Q!PuNyMDDp0>U>YdpE^osNAmUw?J^W>Pi|F- z5B_f$_gvgKd0Ql)o7oi8a+CByO9}b?z zo}*+o1Sxvzoe9Fs-*?)7o5SdrN>%9){r-_D&Giu8XIkIkm>3Tqoz&;0a%=*s&h-qJ^$I?q@Dj>9mxpd@6b~dai=yB`y@S#Ofe%oJEp$75>G?$0HOfSsME|j*Ny#?E$r~OV@t&8!A)qfV20Eki!fEWohlFYs)hbDJ zzpw)ze`TN%rf^2rQvqbCzRJ&DDm8PThmB=xjV@XR zezrK~J>n%l#Mw{}kdfABF^9D75eL&4cASiw^*0m%R&b)kmUDbedG+;T51PkD?saO#ZM~=LmvjdyET~M0^!<3&8COPr zMF;aN&Nq7K(vRQz5Cu@&ZY~?HmNJo}tj=1n(bbiG?Bs{K7>p1E*9K^kF&!=XmvMyE zqso0lo)fg%Q!dH8C&N?uArWIKOtaH5d0zBK?a!(6W>-kC^_lMj;yGo$^pxO@4q)an z%bLiLcIUmnx?)2`J9-Q$_7c#}>LmUi36Jh<;ELpHWz^~QlT?KwIil}HarZRo78=cD zY5i+FZtIk=S0wP%pnj1jM&$$>J=W!X(qe~qJ~AQa{|ydW+Pfshc=vgeKTDxnGy&{J z`?Wq|{EVbt=gtb@c(Ir78%=*Hx>z$!u4k2a-rMs0?$2;3Z0pCfqYy8zDyZL{hQ)B1 z{jmn9@4a4AWY{CFn+*>(S)g9lcgvupOlkFk>>Qr4et%NF0hk;2|_Uo#z*EiIEg^j#YdB>7f2%o~8&bad)5gC+E5&3Mw@UtI()0H>@r{kYjOb{&SSR-TmFP zY{{FNOT_&*#>y9<;9#P^UG715ol3eqU-NNcMmXPhX~F z-J{fp`<^d+*&HF4kg_$_*UowzE;DmzbMk4*k}>< zP3wtBO+~B3$|P&s%mRnI6{tSj|5VEox~q+;`P zvC=L#U*1s3(rP_P6b&D=``uayV`Mrotny~LiGNYM*UJ1p%XU{#g=W2PTGCZvOr_cD z$YyB$4zi!*RY$(nEZ4h>7z%VT`B0+;Uafbu(-y_j2%*KK_=6SBI<8#puyns?pCy^^ z#+zBGqrCI^1JSp%E;t4QHgA=W-ffVl#AiP6iZo(r`k8h=a&`2}#rM-xhGnr*G?GL7X1? zwk`1$W2G-M3+44f(-qVHTr)b%$C)0scIB~LnNv#?cvaBNqB30+W=3q{Ve4$&?|&iQ z=6%wW34wv5U?1Fl+Q1xpgyVd@_dl_KQOM)y-~eeh*${MW=t_KfLc)`*Z9I#_TSb%>{#O)1sus%Nk?E|byzSRZv9ot)f! zd6cQe5m0SLC@OZOq1dRXyLeL!g%-Pt+(F;!>UsDHV5toX6({ zwT0}xi&NRpAtJAIM2u5@cXCR+=zyt7eVAr;AQ`{7GJjjLyt9{+z~i+jm_w9RXgSkb z*HxEVIhtje{3aS4fJ7G#|NX~K^KelZ9AQ6CV?BLQaW$ng4-d`fLRP6Vhrca@ zz<`$USwZ43*d+&lPiV#&^fjBzNu4csapQzVLYQL8SRWm5vjRwfOL1H$Abu{*3Q)V` z{&_JcsL75j+1RW4IGXtnZ}9<|RNza2BQw!AmXVk9r2^Bmc#-&9oZ7oJzXAyQK1ebq z!7W0r9HWC*c9jB{&tuF9z8%fq_^xR_|L-ILR^#`9#SlaZ0MuPtD$#jOuK<$pPK?RF zF#`1qQljFAQ^YXWgf>AlRQNU!i;~n6B3H6gW-t&*AW6RS3s6quW_0~t6(;zd_0Og1(8t=kWUQ_49K90LUgmI7Rh};lJU%4fuzI% z=ZImQr^}(voLs9$!Mx;aPWKCSFa$W5`&rUJNczp;i`B&L6*qUimBeQpRl!dYxz*2% zC_JH#EHT7wASc!w)O=q5a%ddPHg6~>%_i0Mc5d!7N1zZitpoR!bpGPpcPpG z{GX{o!FBSuLP0S_vO~uy1xo8b7`%%4{jFhng8LuQ&l(!9Z&6zJC|+?|Knl*Qef*-f z&98vqfc~M0yK}V$Fn<;okwfLl@iFROF-Q|kPjLSljGX>^O%n%Mhzk2&oR_+b&!t){ znbN(=&@?p9Aogj~Bhvoxk*Y7lLvNFB0!nmNVFg}e+Re0=sPgLYx3HKUv+k#}KPSV}eze!iiCELB>m*&sL3^Xiwv(LrA{jzI}FdIEA76vCG(tLKO}whGRh?&JkKwVv5u%NVm?|E-ZQQi1|!K>1z>HIKLzim-d%4K;-t_ zRggHFpskIXn%REwwoo4Ar@nJ_wX4OpRZ>zw`^mCv-C7NS{YYk323FwdhlfZq#i6MX z5nJ^n+YS`W3@ZQU&wBo?I$jHku|#)+H&S$YX=!D%rQ2PTHk>EVpz8M5p;Y9a&%b2( zV)bAO&R?6WOY0j(F+S#c6wA!maw5h)WrXOZB{Jw$R9tWh$uuuGO-?LHkh;k`j{RJ0 zb9eM@{QKHKi5jyE?v0)^b2&0TxwMdGV<$o< zVEQYH)Um?AfqAjTyL;C{QcBJ&(A<6K@o=~3O$&+c!mm%irTg(a^~{gC$7UmQdV&eA+P4)Cimjz;mJ1N zNkbv3Kke6=aOyjy+%Hd-H^p>7C)Y08TS1;tNXe8n#wm&^;TBh3BigGR7%!=(eb2)5bDdgn%drw}nzc%a((hY- z*mTSlq*a`pN=!sMw59_}ftAD-wDfZ_RkAa`G_5`t&a*-TY!77?#fF8vKEJ1DbvoKW zidz;D-|)G0(cUt10|^)>%1BOu+o9LJxYP!B1jjQ{n>%UT4i(N3(d7PpQ4pZp$69p* zqifubEz_f%+20W~P2Hz={ssHRUA=8Xe*3sk`Dxad`B7=RD!yCx6;xWvDH2auC1~02 zS4u_R7lvBy$Xhq?g1HS(K6;2kc_M{d20oO?M%}ZzfvL+hDvoE4Re4vJ5$_E@F~I?g{7zrWPt#S>R@3LDf)p^ z!ld*aa+UjDl%(PNmGXc|8Ew4>qp&r1TOW4Nltw4rH_8hnzbwOklQ|)!Lv-7q=kaw$vX|O zXj^Xyg*`+w{gHU$mH>-cg8+KNZT673<9 zb4|e(9%jw5v$`xBn^oWSvAnEccUVSc?fYZm75dVcvrx&XQtBB$9FSKpnBC>Qj&bc& zatioH$9oxWaqFEq>c%yJyWNdot+g zWhZ4*{4BIxG0@$?IXD8AEsFE2(-}#nB{4OV?blFeiIilk5Tkx2X1R3cXeLVC;wC)I zRw6ak3Q8iYjpVAu*WqnVTQm;pB$8$w^ds5zeU~?%pBR*s4p7l6Q+@UHgDt5(HIVNh zxt~w{lw~Dy?G7>m5c|U!0P91ub+n~jEnUs}!ev9^r|~xO$*-%Er|rf(@2y0}qNdLe z#9*aLH1U*&5JRgg?UkBch_Cyxb2sB^M)}fRr>f!8IC*@U#}_OA@Bf)4ZUCqVs}g-j&rxq;aOqoi_>mRiUlJBGm+Qb zGtA|+2Q|8UTh@~V{#yJIz#Ck9@ZBVHpZ z-Y;eBzq5(uGCjFebGLO>wKW=0&En&@f3GNQs=64&2dFo*=2Lmn7y&A&DEq&6QR$UvpTMUsCi4c6S%*&dzpYRcn@@B>>H+&twoXxvQ!C6ys>r z&B-Ybr#Ebd6f3tbIraTWnxlywvM=|@=EUf=tWD39Gzt68oaHoI&b+K=>L{oOG6s*Q zpbE&Fj2>Cj9fmb}9P!z4tEW`@md&KG^H)NSgu)BmmRG2(%bJ@j#w&+@+Wm z8PSsg14}3DSzKxJg}?iC=8vKkm0|^F=K&1`{t&1%nrm@-2TQzJqDBYu^#Q0KkY-Qu zE(ppRJqwEv4#!P%nIZ1DWu@p?X4uP35-xi^a}V8Zpi9W7yV~8AY|1xiO!7~~hDY_t;F`!`jnx%Qa)nfOX7?X`uf>yLEzvTP z!A_ACCzFc1d_Y4}Q#P%7r*M+n8J^?C$K6OGta1zA@ZUv!l8EX|pVwtT(~Fu+l4$q{ zCxLsu%uLIM_27om2`$$-)>doIw{Cl<9t{BUvgd*A$tAp`O*WZSvEtOe=F`q@nbK^n z%(nm4G7}_H%Fkfm@f!;H&IR968#?2yf3Ah0VQ^d9DB;8++t&O@z$>VxrBJtyGwb=? z>S|W;<7G{K+s4L-#JvWM))$9fTuJ-Bcy1i!BX>f^RhPQQsR}T4yh{eX+z6(j&B(MC zxV&2D{fPVCEr%GEH!=|=MN8k{E3=A%Q9}a3uhHZS=fK(V*=v*9JK;EbGP3>EqNfqz((Q@bD`t|h5S~}Wa z=8+?w&0n{ktwH3n#%L52h`p{6)&!N+SoZ+AYJLU`BLzeYz)A{IRV(SGzfc{iw=E+e z^d1pXUntP(-5u$)e3lS*`Lefkw0Bg6XuwqW8b3--RAPxm2wFkAmn(<&g+<^PCB!SS~uL+j6A9)1zu@ zA6mbCe$a>B!X6JUPQwBujI?WDugcT6?ydp0K$D5Y{sp||v)A@e>*$Cr*9?!Ot)hLs zs_tV>??q8x;TC2^6TdtT{Q(lPwon3_HZKyrI>3^P5~|0?#m?hPP{SW-Gb z5`cU7zZ{Ex6wDZeupdxRVtC@fa7{R3pmuf1P9^bL4A(e}XcO5Bh(1 z(H7vaL4C9T+^TsWl@JLhlno6P(!4@6zR2hUjXIHrqx#qLA!YckS#g5s_5k7oFE0xM z{^u!mlHv#H(k*z&4j>iM&#5xy64#UXD=1^dM6+}@-cd_yjzvPDZ&6C4+3Be%Onq&^VPZDg z)~=p&qcKWq-^-hr3I@xe|1-Imaj7s?`cdbf|g`-R7 zh0oZ*njdCs66!*fTW)bGw3TQ2#pi`GBj*Ucoj7)#j9*l)O z0HZ&I|M1%UY^o0MAy6^tl)zsfRq>=)`}->t9Q&BQtViK2_teGg;iOC)y4O!-^ykmM zgEA6OP>?@yYEmx5N85*O

3v71RX)BnsxDGSfv(~Cy*N?J`V*?6d+pr@yxCuC)1 zWv0QyS3de|V7#J&>5oVyFWkLClQAfG;~KN!;2sGZuG?abcH=neF?0#`PU(`^Cnjqq z{HJ$biGL3-MaiKm#LwN7K3pPm*eHmhO%jlfo8hE$rH<+&mxjGwJ8dBTIr(cyMXU6% z&`hEP-$}o8564(Y%N|MTm+?S)frEgK{b7Pj(o&=~U*lASnvg8KDBj2wl3@&!zn@PI z&^IgTXL3{>wz*p|Y2!&j(U0nsO=^3PT!yeSud8EfY8t1VS@5N7LM0i#_h>0&+fa>A zNQGJKv%tjxrR#KGd7;#wPKhR~M@Dyxlw`oMQog<~7@OqFw)e;aIhHo=ZSjnc&k_6G zGRF3sx=>T~(kaE0;g)`ukx{v0aQC0IpZg^(*?Jn+>KHmptse%b^lSaxJ0HyD$)a`E z;;%xGuOgQ<$XDo;&gk!6kS>nNO?kV&IvD>9=n#d91kYx{-HJ^Q_rfCEUP+9DSN&VE z87eIwuW#i1rS4bhJtRwm5yrHB&d6r`In5)?i~^UAhZjDX%rMUq7$=Hd8JBF}rB_aP zjQCK7ydY>|2NQQ(xu??fhc2_DcgI~f29{AuQo+tmWv7QjUrZ-#SVhwjRqmS#6@E<; zVsYtx$mQ_Vevs)Yyxg~hbEMV5@90mWY9=A0za#{x4dkff-#u&MW}|U>$aMxO5gWvd z;Q~qsAT&G9VIkf41&x}AV_Msgo#~d}SS+olM@s1QL#_1A+x2F8YIJB&1IP-d`U|o5c>H;kF!7^JNoG?75a>x~6&#*f zs%i9T2i3X`Q9NDEVku6&d1%ygSC8sm7tjm5lmXK+F>(3o%;fq{@7l=Z3V3?>n1P%R zsi#M%C*EHqlJ7LkC*7}nGWryyNbya*_ySmhUQZ*=|gW8Hx?9> z-bb~wB(`M2*oMj4aGwW@ZMf^HJ^bSD8WBlJo^2s+?jlU0h1*HdnT&{H76M_Y>7D<6Xz6XbRo9L#dn;cKCq+R4p zbcZE#bgVza8EY0664+azbjnJRBhL`7w3gSo%o^<54mS|GhsVo=PE<%;RM$;K?m9?g z<>mgk)WkcV%l6UPb*FgZT|osh?9E@jYKq)nit)MZR_1Y< zY&1F_)ilZgy|dZFJoV06d*9zSS>~Ojn~Ic=&d*ccC85g26O^HtNb70<`y5aTJ~KV( z>@AK!kes#`cc>u7i#8|$p4yTEX7fuMDK%Y+iubh^kge7tilLKooA=04?ooVi(2)GC z=b&i!Ei*n83Rax1?stxlgXrj^bZMXCH?cr_x)zjdD$`3-WK7=^0#0Wnq-_Bans8_q z7RfC-JF^Z(%BnPr(Z-Kk6;wt~|$+kGj{>$7;jD6^3eGNGA zaN<5X8Xh`M)tHTiodnt3mu_O~#I2v5bPwX_YpIlmgzFXT41vybLDQkjrdPu~a@i+H zj$%3v9txX@_lcM1r*DdxbJ9~2g%(L#l?>(cGbq)dNc3PHUrnx?Ce==uvuOu@XZ@fP z#>D8lvHrS9^}<ANEFNH0*|exvSTF>dFIyU4A&5z3=v&{1HxHOkJU9v8?GT^$JnKvt)bH7NAc}5tHh~cD&PHNBmAV%8B5haO4>q8gfrgWW(H!dn694Eeu!P@DF4FEEtcj zkaw_Uhx`QC52QQ=uj7!?9-2lhY*>b=26Pq|@bO0GCu@K}XZQitKKs(isQ+|5?!G1^ zB~>K8x0dXC zS@^VII01|T``W6-xJB8SW^P?D^NIKQ6Ai{gX3_QgOUG`F+=Q;UHN}b(IuBI1h)tR0 z{=rHn@4qvzMJP;3_+*yeWMv6<;>x0b_GbxmU|O?Ah-j;(JMLWJ%1qu@ohpAAq4xA` z5qNz)G#!~}6PQ)@ue;Yt`yEV6d`6~(6&#>KY>}r63zf3j>8ZJ?`I)#p9Iu|2eai|f z{W)PbOiW!YEyi+kvXYaX))LMH5Z@fZ-Vhx}a4$7ohILufzQa=#D>WYN!mr4}T%Deo zB9$c4?_!>%u-X!(Ol+D>vG@ zc~@#`+o`h*cGoMsw8BL7zepWWIMQsS`0FvV*dIwyoSK*4c)KFMC69qiTck`H^!4>6 z2l5~#b~ZMnIlTUsci8s!$GeV0(^GQ<5eiC^hwR08MGDhWil=o%^O|S9q98*!L(5`5 zdpQpe4~OeyoZU|~uaD1?YFsB@_b=qLxuIts;1hIyq&shlk)=hq3s)Q+#nJ`QnGgNS zXjXME9SvK?1eAM7Q&~~LfbOB9hoyXyeu@>#uU|R5wCdYzClzzi_btPL5>(qL;xp!xd!-F4X1mZsH6}~w!EytAs{4EVx?HHr*ZwZ&muxjM)?mg zixXv1z&hacNJy3ZaZd>MiFvd`Ony!vqGJ8=)1WG}UO9%a$x&+3v=UXWV(%Rv17IW} zwf}owuhvccFFZ>~T`pWZy~$?*vGV_mxwj5#>utM*>p}%6R-iyB1&WvAP@ttniWV<*=UwM}=`B~$;Jo+zxdl8(O13>`UXnu>gDL4R&}+*LkG`z$Ll>apivc z%=+dgT_Q-~TK$%!iG)mgs)T@K1z>m;vq|A3mwhsynI~2`OtG}mci6bm&u}rSq#PH9 zusYiMVLi0Ava(ri1Kp|8kAM?Fu~X_+hCX{+p9<91tCAI}>x#BtLw|Ir4RCe#{kdXL zDVzq9jd^C}4l$-@;vjVu1e{OB|2#~SOMkwGyJQq3`AbD@D}PqY#uZ>*fO+z>Zn-T0 zIJ4;(d)H(I9wn_Y`iLGME|u?tNx`1Uho=Y(IQO3zY87c9T@!ZY)l1`->W!6dWeB{M%3qRebL#Ha z%*aTlYFFO?FKlYBCe4!h5{X;4_Gai1k7WXoX*e~_BpsIc7=;L|^{d=@aExF5YM;E} zFPub&sb-y6CZ)Vj2b zE-ICj53J34=Oh){S>I3js;`Fp-|>%Q!+*s;6KV%JZ*7O&vIz6W*`rj&zkLEu`zqOU zt$V3Az(&6aj%i}=hLj_ zL;0ep9F!#+dtpRVOt-A=^x)Tsb2tSEpfgh=VHH#2W%nHv(~QfggkEhQx&m7uTAZ7= zWY6&NC+2TBvbYx>^R*=>58QG{))=xDNmG52?|9jLF-7-Mrpftb{W=M+k!36h(drm5 z^2W~$Ta?~+Gf8{#3-vmm?#30|oT^ujzN=8i4KA3`Hse5uhaPoCw8XGuoQ_}CL1Wi* zeesbc<`e*PxzI0Mz0;Kd8nz>jYVrvln0z++M+&Q@eIaAHLNgWKlO?j&AvO&~ zgIc&LxNXfe{(8!Dy`j_Dss1{+)!K*Gc)NIPHKx>P?jh)SEKF@+@J439$|Nfb12Id{ z_&2WK2lNNr%HbPnsi{2)6Oyn={)*r^JK{1?LPE*~OV`Jq6Tf%N9hMj)WVA{Jz)0_} z%(A0~l?c~ugZN_13^ePB3dcJeYYswVarFmHKGWOX zx1b91-PD_sqV3=3D1NXjowPMUUb5BxU|pj&N<){;Ar30@EE78Gyt{l4CfzQj=kY;e zMN%i*WYPv3FvT$T*&%dg=;+2C&GM#rxQU&lcX1z;*vS;V)!pZxfo8hk2x)0|&UUcq ze}E{=YzUAy>%Z-1=W`$&qZH@e6NNEIGCk>u^51pJeuSBo(De_5jUasY5ZZ-0Y`(= zj5;R)$KPV5j{RoWM`YXDgsL%!-{5X;Y@JNy(|{0{B@}5rs)z3co$Vo&Hg3l`jqUY| zZ;hU=_wnf39&IPiEdPj3)|Rdp7=T*sp)A-kJ2^RFD}z4bbbQN?K64?d$Q^;OY|`+1 z!7!V3$tW1S@D@yCY)%%$S;!*vGd*vUu=>92mY1{47k$?>C(m=Ttb_gI@}2bhuPZhY z&*!nX* z77JKf`a(|p-6ID5n%$O)`F+}4RD=?!b3mxo&(kxu()tOwzjozXiS=-i?YM{nQ<8AW z+_8J)!a|l9bYn$DV=L>PqSZG2fd3zwrpMPw9p8yGXd9bTH|yymeEaXkIU#N1*uYOq z_=lwwpO zER}vU$vaOee>DaXv&z(hOiFLA(p+@gRQ{@ZWtqe+#}E+tFP!sZ8{fqy?K7A@?&O0F z{p?F;07Bns=Nrp>g&@3weQniJ>j7w3IV~yr$u|`ei7$IWh35B!p24}Ev4}{p-H%nU z%EVj)l8jIpFN@Q{?>%92B84W7*ONYsAoYhi2pw9`j%5VT+IKArm9J_=83`2jJkthi zTI)1NpNMbKRcg5poLyx8Ph7$j` zaXzCEPF{W5)IWlp91S1aoL|MiEE01{oy(CV%BIsxi;zXiowzJ1mBwQH)y&)GE~TGT zvTsy6A2czuZ+Fmf32$Kx?vA-ME_3$QpA}6Gk>=q-D-`jkSD_-tn91L3BTXtMz8d76 zJ!uUiZz*@Ggj0IX7*ii;Ngfwm>cba#*siV`BOV)E(MLrkKN@DqHA{fP_z|9CcT6%^ zFKxFE4S0Zgo+QGL^@;4G=Yz4fIn6v;y|TQnz2;efWnp0^i&eXzw#$iJjM@{y!YAYj zkWCS36QSP~Jc`+y`1}e!#rp+KI_fu9xw~aaayu|C>AXi`Gfn+;h4nN|E^g^!_h&Km z$2PyY-f-(5?qpvzo5nYsTHE)T!pj06Hed?UCdj$u92c=e0N;iDA=oY>`ipt zU{xn0Zw8(NMCpr$a@^}%H(U-kpT%G@X#>B9X5TvKUY&9_fBMnUi_mO7d5Uf4oc;ux zJ%m~Qd@N@htgUsA!9PQv`C9Q@es~zQ#_|Hg!2??Lg0Ov#NP0{T&^~Yj$CMlt;Z8h8?wPW?TQ;9K`)Q+`%{K!;l^r=_# zJ5BSW5Yt_TQi7w;;8&%Dl0tvHq`50P)Pjq;O~n4xB~I@~$^E$gF}k3#R>xs1t;+Na zZo0u)3D&Y4th=!&)GQ7QyV7`D@chnrg^;~*Y6H*Ve@uOsnsi03%R5dK)#&-&vf?bN z8A()gPj;jmmpU!nKrgaJN&V)0HEAQL-Eao4MwP5ZUN#hp({2}2ik~~#8R1crtQZuW z@e<$49jKqw(DX%x;?o6Mxg@vU=;!>*RZ5h?)2)}_ws$;cosRsZ4Q35Bb#U!bHgP?e z6ExyT66}o+;tNLu%em3Fx6gjwX*Vto1|Yg`rL(5-5ydu+@{YP7Y#%V{4Gk&IyABvO zi7fMf|M@>BoBj`JD>Yt9^-K3%08$vZ8f9OR0!$Hb{oka){7pP8?#f@pW;s!_O9DAyYN!Mn_&xpQx`V1lX?t z%PF(*gz}2*T*8z(FJa6@Ix(AkaU;sg&fl|-UK=>9=F<;$itdm6AT7?7t)yY+JbLWf za&Ia~At^s1VzjD80uF~?<+UwL2V4po;}mIxw8L*|FP=tE?v5Ev*E^;j^u+j|h%n;i zhCa`g`fUUb+|AFMIo!UK=A;{_&A(PO-v8zR?QOr!NA#`Li-WB9Umb2O)n(K>0yCg# zxj^+Sa}6iZxjO9hRAO`+Ys_}W_V2J%116u|KiDARi+D5ZMD!_ivXjzffxg#bym zhh*iVNXof7;DzY@4#o$#@T#IcOCLmi^4Ipw%WfJWaujJP_MORDe0Z}Xev}i?zMlpa z`t%BqvoV%{?z7U82}%-qXnTWR7@ z%q`7*mHN=8GT@E3b2M3Aa>Ri2yH$Z{BMk}6R=)mmNpY&EMUoNFf1q}*`9xv2p;NEQ z!b5bKr0cQP!tQE(%fTI}KpxVuZ#08|*!4fs@;eCOn~J*kkOw%BkBJ-alldfrZS37=k3FtFy* zuTa5Bne4atl0b>6WK3{4?o-E7NvR~|jVsj4eGp+GAHVv&Dynt#QysfPP~5#cNpfJ3 z4=dD^oo!Ytt4b0JaokQCI*`*(1zimFU+vAz1^e%gJCXn+BiH5daki9|i%}5d_<_7< z>u-+z9t<=9nzgwiVlrtd7}BfFhfH7vQeUN|dyc({!qr`t7&Vbt#kPoXDxB{bfH4~+ zP!bQ8)as1qKEqgI4gffi{f%kIPRh3XWTe)0vuK)i&BYIv1~qab>>^4T59m2C=-(n* zm{QxF);?(Ii@9>2SAivb9zU$tj5Sl=bCqEGdAir1*2vjVm@j4pW;-28$?Lo4sZ#LN zb$A4ngEKK9#xc>7(z=|nA)lt*_h0B$_py8^xH>+dYoMGiYUJyh^Zbu#e7C_pl2SfZ z-J3s&2OkV354*>fw@&n|VWM$6qV_6xMn@z1E|M>5u-oJkfr9jH1NT@ZqQ~nwVnN$D z6&qWt122yRDBGM9SVEtv{u>LpkZJnojhuFejeUaPow9HZKNSdl;-{Kg zX4B(?iclFU0-SAN8o;O0*@B&Z{ET<5T4=>ugxqxc{G#!lLv+1V*%bIkMzEH0MErhL zh}nLYfQ!qWpFAdZbFhWsDIM9>Q)p81r|itZ5(U-KgD9Jy9UC#D{gwv5@j>FaLeC>K zLoU5A(|U0K6V5-A?g7lqELLw6CY%)d$ z@ZqIh1*i7t#YY@dZ#m+IzVB;r+IffqE9DIfW1kZ__%nyy(3K>PsgbK(4qVC(rL&fF zUX2Tw9h{K3U!l&8l7)CGfjHI7p*F5S6H$T;Ra_z?SRFtsnwx8{Jox!@Q&?V}=x&>$ zNx>k*&Mv{hJZop|3{~S67#kX6%%Dgks$6%0?W2W7d|)VN=Htz3r-4~s5h$sK85 zLX)`qOqHxmL;Pn%ezCQB)y=9*djL=@Yioy}g_BcP#JD2;kW#@P)B*5ZWJ9NU9%J=Y z^?D813=`iY6U@L-f)xBPqC%Z}bxNfoC);|dEA){)TlV)CQ<;(=+(tJ#yt~7og*@XS-vf2IJ!!(A{`PS4H zBMu$jFn;c1*uscyS&8=%jUR=h!ig;CaJeX2oBizWMS~r+gudnER0$4sbBJu-<1R#e zi^dOT)_WHRsn+QMuNF3{ivwN!j|qV?3+3!Cj6#o=7y6Qt}XD znD86fCbc9-N4g({e3VHOZ+K|1R!B7SSt@t;SkAdBVwoWdUCCz=5z(ZknZajN&66AR0+$1Gh(Zs>LT@xjBV=nQFXV2_8Z<0Lk3ot zl`-4fNI3DW?)VKh*1xKqhpypDji!(X8RB9~!5pGp`EyL~Gz>>(hUjj%cC@u?G3BGm z%oDRjm~6!Z3_hbj^*9x8Y`tW9reYXAV=wl0{12m{2`ihJxP~as!)q%-_-B#GhfZzu z_XXaiO+cEu%u&woJjfK>IWqY3;?Yhsd6FCp#u=K@chI-`-Tdk}U#~)_pm>V~>phN< zCuI{Xf1|4#R!h&WcQmyez?L7kEGt`2PcGmbU95Ez#@F_U_IN9FKQFnVrG=tl`0D&Z zwpkTS(wKRKe|PX1hlxVQPljP>8o4h?TiH#Tx~l|(gjzXH0&O$d+bZ|G%2@7!(NrEAF+ypKAO+xBV>u& zpUpr;xOW_gr@=~!T>27h1@PXI7L44Wz4Tih-qp4KTIgeu+NmNagj-a1{VjRWwEGA% ziL--Iv|1OiG75bbxfAO2po~ zdRzlf2ZxRJrlzx|kd^O+A;*^b%w|4*(RB87cbFS~G2|H1iemu+>dYdKL<^Q8x*77B zxD?;Y^RFAP-Jf3{e-C-!02xRXcB_z*WR`-|fWg&BujP+RXRm@Tf8M2UVII!;&<9xd zJsV?WLH@mu`R=EY09J`Q*q+km;$_scX*y`zDCBiH7|UKLk35HUfz;J;N%Zwq-DiJw zW%Pe_Wi#PDod1Z=F3?c??-aVs9`jP%0wStg9@;apy~oy0n~$p>DZXFcO6xeAJ=MJ! z9`*m~#x6K+{EO$%E09GXkU||jQ}ATT&#Iq);@j&0J)RrM4M1+uW5Cb&q2lJILY!gd z4bMlf`S`CpTL1GwUJm5?zSyDAHsuAGcOD*5)1y?hquFnZE*V{U&m6fPXd4msuK%Bq5x$mEz{tv$8_W6m;wKK1SgS$e+ z1lW0lwb>Q<($dEW9nxhEB^y+|en2JlQ`6>%8cIL=l_6KZ(ETAh8{FQMih(pYYGZ@^ z0vX-kWP_Ird$XH9&sQZobS~f&vzB$P zfZ-@YP0jvcq`H1i^65Z>u_U3AhKcCV=0~7!5DuCm=5&5MASIf+DJCBdG)#XG_f_T` zR6}g0ka9O5nbQg1_<)%1U2JR?OdNuaqt;m>cJ|?l7Jx|MdZ|& z_;2!A0`UIdLMKBVY83*kYLKunq)g!Ozjh{xk_XTJl39)A;4G}+*A8PtEU;kh8!QH`3U zo>X{vi$j6b6PW=akySNi6>rBj&2(Oj2yp|#YJ!mCoH${d%U(fkoU;z$$1VHDLPUS@Zd@tQ!>`z%aL|Ek-2s?0c za`HU^kh8Zw{S+zPwvWJKLIaN_D z!D+6ptmFEv8X>~TvC&?nS$U7rIRm^9yt0Ih97_)#5gSG)PUx+Lb*b!t2-6F&kJ}M0 zG3@L`D@JJ%I`}oX0iC3b@>`2FD@v64Vyq-6sK{N-ykK%%GE|9F(4>P_|-Ioef)H7jDmE3`b-11dpIh6l3;+=_nepJ zqNpdJ0=i3Q4KvgQjc6EH?5G;f2xXAFp8L|0idpuDF;T=y5JuQQ?xl{5aw=v$2xW3| zP)}W;YKI#NIB7Q$QGKJMM7kV@${-ThmTIjOH5zxvrR`&e?r=;c#$^ze0tjU{DIPKU zZl!e4B}*X<%dH8Kwlp-i$sN~87>`#^2mJB9f0iWVj@dF|Y_K%}2ycI+15<#diTqBr z*;s?***o-St8`lm8CsVTUI#^zx;l;-aToe(mP>S1kWVdXx^t6F#8t!`eUAnz%&*`!vtL;`mFLTCI{%%zZF@YjJahA)+X-m z26%45)fg3EOQmpZc5dDK4N@kYPW*Nh@vzqeLpZR4aLnNrL~fb2c@F2Y2_=1vf%Z1I zA7;$r*7FB_m)|Zi1>iF&eH8*%y=}3rule;^d}9W>Y-bM#cN1q$HwYLTJDd>o=HUP* zDmVC%j);WG?&Ltmt$GKuu^L9M^qhOf3luPpVaeQq(-ywjnK`!#sBJ_40BwE0q6RN`s^AKkVU771|vlOihia-2vH zF0(yqiqui7(aj6ik-HH!u)TqHb&my25?5(>%N}ux7)^Tr(Xc*nhrw+Q^-%Ea+v2%) zt_gy(>G-p?7Oo1a$h<->)DjH{P27!oPE?w^>Ym{s1&GM=<2RnsvAtQ ze77m+6hbX;g9}k$^V6^?LNeRGwtkdLG&Os08_RYSHq3*IqB*PB(`9e)Kb(lT={I-p zESqZOU~?l3`xO)NOd!B}W;e8i5c3_!!{oQ`zvEYgTbjOJM|)B!@FkaXP-oYDvZ?(r zQj<8YMRBY2&Bv3iY-xL;n)^qD-G&~NkPmB_+-qRSvS8 zf{z}VDK_^;Tn}L19<_d!HaoT_IJk}8L^EByM~1jKc?J4IC0UwK%B}so(}K7pAJN1} z(w#`3Fo4)y=D#T4Gv^MRu5>fzUhHOVq7Rzx4}a5I0ydbsAaY<09iXva%XtKk?@NOy zVu}T-M;S0xkmE~=vc<*lwhd|i=XjDtXvr|zYtdXe`zp@i{gGy=Ysk~r8yy>UcG~6B zK%Bni;4jTD=HL7+Sk{EYcYk_7(Z^*?1wZtFcJNk)FSgu3b=h_?nVpDD+|Pj6t4Zx; z7$6s$#b$iw@JsknaB^t+L6k?_z5^Ypug*~%9Mr3d&wsYszIESV(kjBA*@AXfSm~8P zKwM-y{;)?gRsLUr{)!;#dqQbx@o@-9zH$3){(c0|y$@T9ZvvA0ca9T~wDM1#ZNL4@ zPoju>KgUfBJ!Z@TfDJZqd?1d53AQHBpz2{L)B9x+s&=}!XT`WMd(unvzzaMQ&0Ad~ zx}wE^0@)uTCm--Uqj=71#aUT(Z5~S@%6&TJ2c6jKSS#A8A#64ehT*yQES23rDcRPo zMS3#Di#J&Q2^D>-T=loo#*!%3l%{9Vr7b)@xqKYRAI7VB+*MF|19)<4u$zx>-}dZ$ zf`H?r&UG|o(onvnG#jFd+HlS8KvI)!uII$OQusjPRs3jCX!3LVbbK2i<$g@Bm^%_Yy+IoMdqZ<4{ABs#b+p*Xuy~e zbylOgMIH>##*$k_?{BF{HN z@<`Dw3-4q9#EoLOJs_Uqg8APPg82&U(f0FdQ1HM_Lz!V*EmOZ z7O<46^pT}qFRl-(FzoK!p3y%*QmOf2=!sIlch=%X=%At`P$(?Rl0-#1j!3yOUA{%ip7$1H73207_PGi`wR-G&C;-Mxvez#)bHo(KEC5$OPqHIAm*V{ z=Db(CRx~s*ap+<$<$D*JUjbS7&G*G^|Eo0m{;ird|Fr;jf?>F#<>~(EK5I~N5vB8J z?6*`tI%$yWgL}G#4!!sqazxBHQc&6`!(%}k$2@k0=!9C9mDtXD~& z;~J#i)v$`Q+3c3w3OJd;xPyxBWefQ`U~{IKys?Z&DMajany}Lw1&4~Vuj$xE))(i* z)Tf@eukcMvrR`T~l?alv4P*6#(s!KDfGmuWears;IvTjNd!V|*AuI1WGA ztJrtqTyRRhyMF??izn)0vi~+v5 zCvlPgq`L_N5nzKYA?A5d&xbc)lT4b{=B48NVWcJ6nfboL*o{ zDd?gvQc-&Tv+K$?<+#Kwl<3>Dh4vDI2$_tOw1Rm5to2oz53KGZAY|Qv1DprD50#w^ zsnCpYlc1+VhAwLv5kohzqJ9-q))F|q4NzEzZP62>BWnae19>gheW4W(AdL0p8bmM} zftpTT();6;aP0cNXE-rI{KNUVfKv?fdA7{@bGAK z@h-gG@Z*4B|Dk+0X3Y}iN;ew9a40~Ggaa{aSj+*15HzepY05>eaa z2xL|V%>o#6&GAiy18L-~+(DHH-Rk5b(qzP0{iQ&C5lIny8%5Wa!KSDicNKOYlu5m} zKfJ;|s1U3h!Y5hj^B>qX+tFKgjI-CNv&t9!F|w^zW~Ic~+*^W-b|fE{FD7(Y3yGJ= z^SG39)p4?xPR-KQhjlAvw%=g$1@h#CFV#!=aRq=Pq%G0s?ghu25mtaywUG2a{4!Ds zP~dq5YCR-uIKsqdK$G803750qbSYDo!0!qQr>36_^Juv43Ao-|jc!sok$&+Y!_Qm;69^7Bwn4 z_g5|1z1&3@Qv{FXUj2gk9{oH7C9!d+Q>{CDwTS!+xy1s=tvtjul+r%c+e>@1RWsml zx`y}%YLJ*rzFmWtOL$$L``t`J;&ziT;)T8iG z=H91kk%JDNkRjt(X7D2ww; zndv>a1u#_JL3+X!h3xEfJ%B17*doGg>%1Ken|Bs{KP1N%pG-O#wNIJn(EszD)G|KN zgXQc>JhkDf z{P(}9(c&TJ+MxW|PR(eIvUVy$USg?9ns8c8b4&BeryknBDEz0M7gk8Q>^C`7e2O~h zP!@i6Y2CHbX^`E$3%pi;!G;UG*QLzcc(WCZ-u=?O!yVaUl%rNfD?MpVbAi{^8Q61y zDR8l@+Baq+KInFvSSXB>7}D(e%GB6bb27s=IhUquj}hh~8)D1^-kIbUqL=n0xS1De z6{iszOiuJ|CfkQ5vJAq8?u~+m`@7w2r6w%m-B+X!yVF9Z{SQWZ?$p0`acYw`MsS*A z1W5hguEibFf%Fi?7_$FT`ch)qEC9eX;dSGc+v!KUjN z9T`VjrT{X+uL7P+i@6@jnwYb(77y@Ygw-zob=BGT#phNVdq>t?=%-cgkQ}akHV7kS?5fk&-fHC)V}_w2Mu|9t8=x{t#zlx6KCTEP?7aG z4O11cLWUFSj&-R$Q{7o)dBG$Ml}0+twTDWe$tdRV?W;zOX(jjG)zs6o)`qwLQqxF7 zX@z*TiLBski~~H3lB!2%etY$`V=e6gS!u|n##|@<@A;2e+u2!LmFNM_KAw{8MUCO} z$>RS0=&<|Rx!KtbJrdUJ5GUC^{3Wy22cy&BrH_DKm?_=9%dc%>_tq@!*QP<6%KA``u?(5gD!`Y_n#Ef;y zd)D?yYi@ekS-Owy@8`U(R>l;pX3Jf`Qo~o1qwxM7b&y&qIRxcFT9;0lO1}`$-2mYZ%_Mj znEhI$?1k`br`w_*o=pzPj=R=MNKaI$kcj3)Puy3TO-)THHK}z%fssgL%SRS(Mbib} z2>fp+580TOvOx>_ii%rnp=v!x6G1M=WY7C8ha&2U3gs+&B1Y390ai>)rfqkdS*Q`RjWmxr&1|3m*R=awMFK z9Qie7wi*-fcYHDjf!sYj1`gGvrL`YPiYf6q=s6QoQ#Z7IjxriY15jX zw~W3sb*Ro|$KjW5dTqr*E1ieUSpwIc-xYdjGg)J(leto8iKWEb}R_*d7MqBvad^Rl8`23;c@Vp4--dX zrJMrWZ@0~UG`eQ}WFE8^+PcsEs$x^?P0OHMQ4ze%MZT%dbG%7SNyM&9(2cc^t5an= z%6571CV%>-n)Gxz{-YoKIWucHQSg~cGOzf1ftplR`IV4863g||0|Su+kdU`4^y=QQ zwoFM%z;C#irp*5(egs-AGc>;pTBg8}mRLoItiyj5`V6g7j>vWdZF!ZwT_B;_O z5KLV`?Gt7xG*?)dtV0>4lAF7`pP~NhLF9)mW}pShZ0g3a5%C5(D1#zSTUFBgPQGVb zDJ4B&4to9rF4BK+bUbd_7-^!u*YHX5)M+yuCr?ubRLB&4o2%L-96@Nx1fP7#)=zD( zCT*~R!9BaONsGJRLg-XR%ZQ+DZ>|RA%L$6-bbC2u@vzKpQXS-A9TpjC=uBu@Uz5hG z`7nV5&B6PnP$7}S-tWlkQiNjhAJE?q4M<+wsR%2@Y`@bi;yS(FZJm`JZ)g&mHLQ41 zUbE6~kKKaT1APBhIgnOec(K08U^&@Yc+KOA#|qmV5bQLz3Gqsb!k*8*i;x4>#?#ll zDL>+~!a~Dig}vEo7=O*4i{8;6o(Pcw?O zLIs5F@ph{H`+zY90#EAZ#((lx6Y!8bLaDLbftXo0DF6`k@k_$h`jWCt4=AFul%mgK zjTHk_QwlSL%%^DJw*5#|$7_GKM3vm!S_(qE4OLT$@SIS6&lw{b#_XT^sEiHGyunVm z;Vj<@4cc4|xqIj;oeE=u2}8oK4Zhe} z<~TV6HqG0tkcHrlITh2fw=BDc6f(&~MlNC&^0JN58MoVl#)a*f&`s z6M*@xN8bXjy)Pp+?f%65W6rK(_4srva+oS#mtXt*E?#zCM+B zv1tRCVM*TMi!5djRmCdh&Z_TUfWu2Ey~!mbys^8QfGyu&8*OvTwOd`8LR zA7Oz^t0xbIt+hC>pRBw*XIy9(uIR%vs2l|=ZtM{i`C@ioZi`KuIX=tGIuzy;W~v<`F<{crr?81H&)7SoNAbgFczJuQurB+%&qlFolpXMTciam%Y9= zCjbb+JluRHJm!GeeNH_-<&6nXf7C_`OqK!8=O2rinzra~s3`-Lu{Z3`|2D2z0x7_L z%$IOKJn288lTW*Xye|Jbam-NppV0L`osRw+N=N_u99tbv-mY@vCo>rJ__dvMpl9gO zG6eJyyUv9Ku78}1suvT8XV?L(W z(*R?)7RfxxJ(45yjQmu2rju72m1=WooEK6<{wl{`$2nARx{x@7?{X{k^YA~3uviHq zESl}U;qMr-s981al^1=u{H>Gl#O$EW%Zbh0N24p1JMO~MABI3jJ$#(R$+fA&%hj)j z^qug|`nVZx_O$^NG5C1V8Ep)~qLaMSnnyo!2W%6nr%R-?SG#p}EJtILhi+B4s`ED+ zA56g=>}tZ^wS49C<8oUnQbSPK$;TX3vo~bu;Et0?NpG!;oW>Q=(5%`DrMqkDZP4>= z<-4T&(Mm0)YXsFFpEYCI-4pAqwzd8z4Y~=SWoOM=^$R#4Oic}~R(XjP6qH96j!Qoo zr=Bf;n~}3!Y=B4e&Hda|7_cr-(wXz>xPyCL-B92?@SWzY?!-)r^%4u^qa$-gb^p?* zh@<#w&x7#A)FD`5|C#f~gmzRsS&TS5JxHCeZi@~dG(tljKyyZ_Oz66z}XmHHC%7shjSQD(Q@X-=WQ!Twqm2_fr? z7FcWj&z#>t3)d3L7(dD~cic9W_6RfRgT8V2`^Tj(>&00~W8)@%iz(86{)i`rMinn4 zT=D-Oj*FrSh<y=Cnhent#AD0&W-0`7Hl(a#np{PJE@zL;}?sNUv z55B|#httK}gR@lnAwjB9Jj;d-Vp)@X_r1eu(g`QrcHLIF+D#RWs<~tTFdt@ zYI6z1eWfOOsP&If3Vj$VhOwcV@DNh*g3Mis@&k%2B_OTH5vK5`B~Yt-Ae} zHn8wGl(4%c5>b2H3&{QfRsQiRJ&Ha#xdc8tscsQDwAOlH@_oQ=#?UgMnOxJ&rKm*% zHn@H-tLvi;x%v>e^%3&zN3v0rFsQUbn4#3@NWXwX$0U)4{nH<}4UGKC2yGkf*{kXB z5@XvwHuy7kX|Oc^n{g!(tv(!2ZqT-h_DXoSUT&5*NV~UyWB4 zVglqCxW9-q&yLP1vIo_OOBj&q);rIsWq3lHL_TI-kh%Jov6e|F%FD|0a!=nE zv)3-^0_nU@W&r!NR?3SJIN4M@g+%?X}F)l2PmO6 zne&XF&oHh*?N3k#zP)LYs*@cyaMBbLC@rduE*pL`5OMe7w?ZX9Y0iDtCMgya?jD7v zMWD4s*TJnAX%h$C_BPvZ*`>R!j&Xo7L=U~Pso7#yT>l}pRlu#ZymnQS_7I3~zk5+l znIRQ0PMAuOzsu*(g6fYJhX~r!wndx~LO~4mFK=BXSva$CC zBP?>|8g95hJ4zWNY!*~XNoe2k&<@mG+Vg`*o;$}5t(rbq60AScu}5dKdMqPsC4cHX z`Cru;xK+ShO=n$1)<5$4x%UAFKwP>(lW^!CKFX(;nAfG?gDsNhV4L8CeBw*7Q( zYdLXDx$wjd!Tfr@7v?u(C^yueM_s+1b6nUxYmlIHQUBjqfP%@O4 zGV5fo{^Y=7NY}LK0e~WXBIh6X*H{`b(2M3$UXj>tx>ttq&6Z87@dQeXLKVHY^bRLn zxO7ufkuGGjsxf^`=6|lUbBFiUSwormkAGx;ESWSw7W4S$e`p$cvN62MIu|g%E5CQJ zrtdjqj2oklf&3B`fnjnRT2SNb`vv+O$fq+EW_d##TCii&6-rBUFGrh}Xe!w*Me;be zqZ-Bl*au_S1sNnOoJo!Q4St~=0q?fKHzxfnFfyTM|^00EUv!T(81zj9ofi>J} z+iG0;5!FF;I0Fn%ucBH%P(b*Y-TOC+_7oQ<7RKbiQLn9pXQK#F=@EJj?Y%qjK9J$k z4XP!n*A{?pP62GWTT+Oe+ze(KTC26lKBtukNK*6y5eC5C@Qngk!5$ywnscS$~Wj^lQC|py;z<``V4QjF_A4K7o$qgLM1X@ zzdJHrKgxPU%sV!fcQG2B9XEL*lIHS01mm~@JGiPgTZHi$J(v5hLM51dYF>CIE14MM z75f&0nDkF_j%os^*DU5vw^Gaw(rV6*cc%lVKNKT(ny+W1TqVQu4iZF1-==2g`ydX( zB}S}g>MBpl15d=tQHtYsy||{u>j9b%AH)wGROdxk&HFM9-GR#yk)t(|1Zk2Cr-2}g z_?!p3xi_45P)8vVWyMAivo^mn!ox&;SU6C6RDDznJ?sfA0b1)XUi?x&6r|Cvts;ys zPSWGdbtbfz0Aj-$9;4-5+~Kx#thlnpyh(56!pieB zI2>T6rt(2P6;g=RPflwzaKhP(hkyJU-|-Qw#(J&M{iQRsdhNLHXtc`_I5@q+apB9d zahOv;+wA4*cC($WRo25*&hQn_HL`|xo#vLkDMEv8bxj-6=5X-z@Z<`LyjE085(r*D zaV7BD6asz!SE$|DC7h!=0y@hnCZ5;MfmKOL1`VFK^XU!=zM#G-H`abKOP`YRo zNkVS~e}Y4ad-@HT<-w$l5Px{v<|Z|Eg2TmXC9gw{WN_uT7N$^YF*Mz!MQD=!TB=ZT zEG_QL9{>5yXjXnea47p;o~?j*FGRs!BS(?-2y%sV3x&=UqU;?|4ZkVMv&tge7rv2o z=&+&_;M;yW(*;`w@}-(lkk~t;@p-c!Jtu>Jg(lh5xyvOGrUO8PtA~e`N)jbG^A?Z2 z=00r_ZGi-_9+iLc&V4NQ#lv|=cLjQlOBybX>$|Bgu~t#R{hg_)_cv@E>^HW;sJu@j z-N8NM)8o*kO)on6?Kux^#&Wgbj93AVJi^DXgIlV~YU@*oy)t}c5)XS#k-d~#^T@tv zRPNxt;1qEl6)sz1mfd*zWk_jk@oDUA`}afiaw`3;do%K!HM$Hg?3R7~;pC-xEvvKP zUnXNN=T%?}yR)||TDzbd6~ zE){}^r4G5f*{8*NB+~J8h1~pqs(bIKD88;s7)1pE36hfth$M+h7Fv;$JHt;l`MzsG7rz>Y$jo{dZ9Rky zjN})ToE{mcW4qK&2=HU+Lu%!MltUt7`xr)vNjc?DJ}f?=GTN6Y()65i<|370`e4pYu_Qkbtr#A^w7#a z#K8t=E&EutT{noix;oAvtX3Mr3WrFxA$m(UP0+5l4Id2^+P4@yC3gzY+eN|~F7h9r zz-J8R+TJrRzBF(*5OCieiDvEYCzDqX9oRkoN5w|3i)m3tAvgu-PJC_FR0Uo985K

Y@&lZwP1yJ@BEiRsq6$$fpp%jp31UDPB{IetM#6c_jQ>6*k`?rp#{)~ zg1)))wmf^Kgqh*r7mMHw7q`12uVfl>a9D+R>Sm%kElJ4MENt$P)TQ!k*NT^sJ#tU@ z(rq=CziIP=Es3J~mG&zZlHm|^t8`h&aDh?{H3#t=XT!KFRfyb9_M4!B{Lq*^8CbsNpe4irDqcYWe?L-XB8p>JIs< zx^iw*QS(L{*UF(soF0dWEowG@le_k8d1OsVPNPqAdb^|wy&_SXVhmsGs;h6-W;2wl zVp!ZY4f}iZ=`9+yR3UC~Q@&(IY3d`3p~RTya~@T%Gr#!lOr$)ui7B$(0w@s0wge|b zFTFT#)mD#}hK%P~DD@5uCiAnh3TG9Udm-1QENk~`b@l2^)$<2Z`I)`dDtc9GYcFKH zVc2I4%cD1v2-Uu$s`}d7Jv$arkntW(4PIg&#iy0*g1EuFJWwaoR;Lw@hRQis<>b_~ zI1zg%Ipvt#=WKc1zGoYNqP2`tim(WHZFakdQf@M{2^A@*`}FkkhH>o3WJU@!OmH@1 z6O|G#TLUk}T0e8hc=J`oePV!Zf=(b12<0Xeg%0zn&#>|DI5727r0IZwD%RszK#|w( zouDdbOPS#}S(O-Pv; z4rI^o`v%|yH!T{icLAN@xMqfT45kKJt(csCO`=(~`p0(|a=0KSaJmn;F9MOvx_?7a z9SNAh9QDSjyQ>!_6J|YS@oIXMfx(@ZGb2}D*MSWI-Cj0vK`yKOyYMl0UVVeN z6c306$;kak${mFNSCChtTndx>k(al(G`S;Sew5un7xdl!@BI5uZ7cs*gD*Wm%^pKs z4IGI9oEXIU=KSB`fjPZyprcPL2zRkMgQpl_tcV&a!`3$73fB$KMZTe51U|)91&Atf zdaQpwjdtMV5uc50^`Mx$5+wNx%8XM7fB7rf_MQhw{VK2nT%11>-Q3UFg1zocZY%(Y zd$ob%!5FK`Rww@Z#N(>@6&MWME+-&;x3c~&8(r1=26AnM0Xt{fv zf_7K>@w+JDKlS$i?KVRHPeE?~2eCqCa$t605XO^Sb`juMptqXvpB$F$Q_YXB*o}5?mhH7Lw1wr00dCz z1!B$JeMfX7Zgq{b4r(#-!I0GAT8Kc==&%y2Im(Ky6mk+kwQzME@2+iM>-PCk(lPzF z(Z=Hb%?+Sc4fk(3{ZsbXEOiBtE)TstTc@)0lU-d)BU^Q5D)h8Y=FQ%s3F@+`1f(D| zueh>~DIq*X#NK+vy^~t^F@Cd%OKjcYo-n=oqjy;G?>Zl?aQUXyga!S=GLOwR(4=Qj zLDv6Bz)RBWcMNzwDSNkgk$cyb!ou=&(t#6tsZF<5BFrPvDT4BAIjkP52+u8-gmSnt; z!-Vg*vVMAuFi>E@TLW&1KX0L697k0TXyIrm`RW?gyPcDP?&)R{rviWrFa?73yV+gz zq+Fk*7?xT)@9GFK=UME{`=8{BhycPnHqa}OHmL4u^uf3)F0LBEp{EVj2P zIfZVbW{Y%TUW2-}(fDimI-=Nz(B?-Aj25$X8y7jtt0EEZg=#J6Wj}-D;d+ELxEZZ2 z-8B~qPK|lE&KKuUU_Y@2I-8|^p6Y$Qe%*`$r9^bU8`8bdY_eV7WmLNLwvh)IKd{0G z9;Qq*qvSPvXqiIk&;zCj*WzKFCf~mLldg&8xqs0NJOG-3rdOS3co%)=zp#LTu9DQa zfIdsRf+9QGQ=xx&3OV~723mS?ExiCwVaGLhD9MsA&;26@>XYjZZpfJSt^%SMHjH5I ztk3OZDMgTslre|pdO|+BV8U7czVc$ldtf&3k7v+ZJZeT;>s;4sM+u}CS(p0plqU+5{jJUDRo0Gjf1 zRqy9=a!OTcPYNoPjGOXnQO+G*1fmYXWg`Eoxei3O%?W&4ta`4_b0aluG*lTl?Z*LyDVw*3`rMfmVj0IP zC%NK^cCl(~?&*33oeRH@QA-#6Dahu7vtn2FvIbYg5|%ufJj}h+6P2*{0)FQ`?|uob()8mVdc`0`BBrr|AJ2958|mzcUZ#_@L)7g*)u zZz+Mbu6s595js~{;MkHzaNF3%U_Geh z`Xqz8KF3f=`R(EH(o)h9Oi8%L8TBEezcE@jAQZ1R8S47kS&5UlIL(-sxzKZRjka{I zZIo3F)=;mq&a$8~I)>mDVB;kto2^)ywsp=fO{w*vf4bf^Ra*)Zb%UdWMTGWjCl@YG zmh{0H{KM+kXg~Bhm$6{|-S-f3`YhMm6t?BQzzhBr%htcwXbmP}r&lz7bMqkw+A`$~ z4||w_+5C^Oo$!`FMpHe_8XDjeT zm;wPUaL@n$yM6q5`2TO*)AyfaTj}Ug#^S@Qdke+A1}AGR*V|}~)xz*hd=OX>BZ1s} zup;9M5k;y_dKf^U_sIjM1%r3FyntJ!;MuG#a^O z9!FE4Sg{IT%eTj0e=exN7bPg7UV=S+wMsC!|A{O$n|q4-S$~KwTeAt(c6@yiA2&Iz zsQEx~J`?{$V4OnH;##F4VDcchU70RAQQfEekW!ZI)}q45gJ^?BtGCkmV%pxW|^g z9Z#vmeQ@yIf(^PeC%~`US=er?l&;{q^d*6c{CWk;IcL2%A2e7vMVc8|=!v-bH_a{*s|rPm?K`HgCJ?}8#$SHhd0R#_3P+wO79tl!MWppn zp3dKtyL+|KCuIJFb&>0H)ku%EZM^Cq=L18b3m2X0Fn!`sx!o%zlL&e}!DoD10?lYI z`{Lkab}cbd7S!)buJZ{AzW?bq(fKmBU@TS5#A7tkjjDcHTQ4ihEQ|rQA?h zavV?e}<%6)g17tUbS znyQ@(th&*@0H?=6581CzmQa3NnBsdn;zwsUOckQ+k{H>mSD?+WHTK0}5ob-<&gL^8 z3DpG{M{+Yuh=<=SZKuPznKyr>4Ru00vg5YSWi-7p2;E4JlT^*}-17!gYKA)K^J-@H zuo`*#XKj{pSmsfWgg=|JQq5B&<%{!HWNSb1>}eB+x$Z236K1B}ua4{d;C?%!pdzb^ zqzPZtLb}IXQNQl#KJq9|o5$1J+6~?}(I_C6WroB3s``PE8#jWmv zU)G(8gyswN8P)GeFL>_nsKHD+H+`Bg#Bp!yIC6>(^7KNq8V*2o znV__5)gvEpM%}VyF|;`|AmBpPDD^CYd6J@)?~N>5d3vKg!$$uq8;nF+>L!8|%~@eps2rWjE*KY2>T?kl8Pe!v z_Q|q2Ti%(i39v!!T&A(j&*BT%&$HiB#m8@2C#_xxkrq-y7z~ZA2>G^ZV;|KBXvSTy z(#90S;yO~NMl~iLfOmem{&FZ{Ge&Baa#^|=T@Z$MvqZb7l`QXZyVvK?JsoO3`^mU^ z`QlZ9$xWNss|}}djj3fMh^UuW($!Cm~uPp6CI z%mz%llWqmUa)(EzTc)-ZIM`xx#tj=Q5*kdm4r z>^8j$ie|cn2PKw|y2}zKUmkloX+>qibIuxy z6OtwxFD|`!w171FVkBd=SU5Deou2hZ+|`Q7vNad zvW{L2DN0!IF;5wO!mHinVmyJsB*o+(gonlj3Uvw%vu?(5C8Tmb6%v4zbTp}UA-XeYCL^u0Hml%%n;l-7XP zW_Y-~+PPskV-orPxANJ7L@hN9D;1hK>lIA>)=9f(umfdwR-CH_3m})+n zz;h#zoZ6;pcySza^t(VUp@efJwh1MrJ62kJbYl5Tl_XA+mvOxAnhOLyI`2lcOq9({ zr6(J|I1c$15x=ICtCZnU@lh=$mG}6tTuk~~U!asXgNf`&r|kvj*MG{Kb__t7vrYI7 zf0?ZEM6i;&=4#MT^F<8#X)rMB2Zb^T91s2|i+tjD-eKlLH^wp5eb;C{+9qP?P38CXbnQ)-eVH)e^%Tju3ha@N%f%Ig%_42t%5aHaZYhR7*IZh7NW zXxqPFB_~@gR9Mx-zxB#x!v2Nl5ze7T{BtmlU(h6w2dP)L$-V*W@~9(7*bEza1j^ zI&bua$wd{($7f-UN@Z(`SaxoTH)&-mWHfEoVFB97YhQ}TlNDFPLmEk$I@M#;4{^Y{ z>C-KE_O=7_n-=y5Z6L&0AcnC1Z>vfhZJS|Tk3eW&u#-(s%+LV0C~EVs2BwPSA3ae#Ss~Zc zUOJMelzseP00df`x)|t20j%tA$U`x7{Tfv4zIA!2)qryxeFQxl1^K_Vto$QW^}pUI zd?axZSo{C+6nwnh)0sOmBa*erzyO>ZhCvhnFz3RslY$r9S>I}Sc}sw6H||Tw7%zQy z1l=aL!rSYvG?;yFmXq0~(*4j4$h6rd{wG-X*TsKf-E}O5*|CbpegSs=z@g}6A5Co? zd5g>$zEr$LE>r(`wv5xSl|6vOR0BZM%bk8Bm%nyBUxZ`x+>r&|>Tn;$FGx3cl&GQ6 zt+!!!M2wHma#Q5P2m$PRO$rLaH=n&75lSQc1p8f&=-6J`X0rU+afGe)5r2v>{v*gX!SThAorwnz79}t$VABpP#}*8X zb4V>C&X-G1(@BiuwshK72v9g*EfPN0tS=~5YC3jDZPKC$s`sX5Dn=2uv_GfM4{>?% z|NOoTk2f=njC|=5(S^VnK1_UgC9pfFmzI{8K$66e@|d{&v1SaLvV5X`qEn@fc+R-} zArj9Z72!j4kFq=W>*jBJEDVD>7ghC6oiBx6-R6pN?Mv(PmwB0G72h`j!_#_?eVo=+ zK$>s!G<+L5eo#-xRCI=LR@dA;#fLbVQLL+Oj#yfByHyKA8Pm=+NJXu8V?WOglDS7> zh_|xrc4r#s5JVj1Q0F7rm*VBlfI42#5ahBz`dFI&#vjpLrySeSvjI?t{)GtS z=e0LKHN%unGr*2}=_Cta4AD5(4X1Tldk44j8E=N5{REM@vBMX6-Qtx&$P=iGyLZ-W zczvqOw#S8bwr!xG1*3+0hace@kXTdJuPvAQ8ZVYO1*ny!C0bcmeg3wB6bhQN@7)3= zS+PVvXJ)hC#iuqbbIhe4H8)ijNpqlBvVgLqt_xOGO%)Ww20g4!D{TobFRi*i++t<| zAUq81D*WYU#p|KCcogi2+@eE6p>eMT&AO9KPUkoCY$v4Wx@#1quyE>^?g!FQ{cjb5 z4pE9-w<4wfvtE~e2hcNL4xX>!7M-%4K@A)Gp4h|%D1Rop&A`C$)Y6=$s1Q`_(_5vG z@LWTLu5c-T{i%n&0}*+t8f%;pV9n?wRU6TaL+g4%wueaOVawgGp|#&ds^*c;aFi!V6V~$(u0;6XzN6qdyB4}*|Ib#$P z6XRcg<6dRk`E;LXgp;WL1rH=Ew+#Jul_->1n1kKOvn*Lm-u0?^bD6g2^JwJ@wf%C~ zp-gCSdMuA4nPf|D+3@bkR5;eDW-ZFpHKy{R2L4f7FQzp09Gl_AyEO44l9;IUr)jkp zt@Ad{K{7I0_W_yxqMNDKMH}dsOvqD`Bq1#=_8Nk$+LL9bI= z5`k9&j0wlHKYBK~Q>G>VA!u{2I4%lm=5XAG6r0ts7pZr?g85eXngyf``4TaNVJQ?M zrhjY@J73CDvuZQR2QcKE3)|U4-^gFmDrFGLjn~lS;uWz)8+&>Gu1+pTF=`h0-2xnB^_-uZlrb zWtfHMr+(-Fc$H&-nxt~``hokd&`Evi()HEFKP|PE(@hSm+}T#W z!Yq(FQphHGRbXQa>FVl!rz9KG^Hh+w>~!Kc$1C3X!TRAb90-wTT3eE!k7cYR^ZmsT z?(g($?J@!y6+iqE58zUi%$y7e7o-I!FIWZNOZH~%dX6~KnTZNXL*>Ar*^qTy zIWt2@bNVK8;lmML;tK(@zgj2vbp6`aMdz2ol|+OVL98ujDYeS$viIq8%jcw&D*pdAB6XMGsO2?ZK$Y;jM#VJ*e2hi)9#>d(S;#b%R z1cK+0px4>gLV+i~LrC`*aLL(@9?AorqQ(94oUmhA2!r5WAO)z+g%|!TR1P4ciV>w* z1Z$tBLDeQ=d)nTQEd1X8ENG}#B93D`l2a1%2{WOPhf>n%P+ArY4r4%1SLt^$IVnz; zX6OpI+?{0xYOXggO?dQFO;f!Xs$4(a$NTd!kpuMPgV$U~GoQ)}v3$=NC1jRmdLx(8 zudQA`qz_`a4P@l7aDEAkp+l`1Uhg5^nE-1a-SyEm;LfrB;_Zui;Wt(Q4zVVzL!J?z z#4VeU`LG!u){r}B2f64xJGjuJG4<+-ML@!_itSHa832pFb&9dV)_}I zA>b64>>>+HcqImWgLDRoDhIghkce1rt@~6g*!cPP_iyqNzZjOJ8GI>7$@-j95Ff2A z9g|;Jmfc*j^D}=ybdC|%v{nFZo{ezFd^%0Ru=w_A1cYpBo%SBar++WDnLcAN^Aa~# zy0v)tFoR-ii$d4Z4TyMB!=f7n2qWhw=DVP(**CM}=EW0HZm{vrVq_d=3VUse z6MY(+bsfiQKV~P?ya!f%;63f-ec>h%d`5Dza@i5EknA$#>@4QFEOTBTXi`)7rO@K( z;B_MceEZMN40zs&Q;L>^_(v)uXyNYGYu9oi3PkPBb08(7vj@_RPCD(}+|iV(;6cYc}27`tkRt%GO2}C+e_@xaG`W7J7Mj1HQ(b|6vrT zjjhOuVZc8YRphYn!`FBf2t#{rVvn#XHa0fTvDmXz6D@v{r?Lns`8Vs}7JUgVGGo1_(VH)LHt8zn%xqP)pLiA;gg^udfpG`e@&GLXAnD^Yw zSA)z6eRtmTFwJRY;|c=1;Ss1uL0HWAByt6$gl6fVJa@q6RM4+RCsNeR(dp%YDq(cH zAvO1HcFw)+k4H*@V$Y{42ft5pq8}+|Z{Y>~w-NGPEE;CBkIf1uI%@gdHMCn!G;~_X zaNk`m*B`Hp^vJCLYYrnF1r(O(I$$%*QX^Z>N$q$A9ipIJJft(v+y5r;zkb)k z*%9v3PMb9{GfKUGidX5>@hKQ4CiW&TnB{69%Hi5Ek_vqjQ{H4ut%)a#R*sJznkkZU zv}`5mvW}Xvq3z~t3$4$vBD(+i))zhtQ9=9~?Ymx=hxbEFCMK08e3n6Lr{G%Jts;-1 zS)Vbe4UAVVzS3i}&H>!tWTduN{s-F>2qH|3< zTFNI2$q^bgk1odMXPz(R8s+wF$OA^uz}6aPx_uj;-bTL}4&4MvhH)G0dwbc`PUUd% zkO536l>b`s*9LjnO|R*J{4?QCn50vZX6O zoi;~1qWI4W(n|W)<5u^%*~ehCP5P^K<~3voQ$^Fk(EO|Qo?_7j zz8L7A0Xf#e7a!3Wt69wH>=h7^k6y4d`4{a%tkbWGj8#q+HjXu)>}FCwe2hj*>X z$fI29t5F#-O3;bU;7ZOv@re46kCaSHAEZR|1-%s0E_00+Y(`0Si1)t zy3pTI9LF0+VXFk*0^9hi&0KUQG1Ja(Q{SOk4g+|1j!ZY^FpEpnvaLL`DvM$8w%?U| zm3yf)Da6Hcgl65FMSiXeF$0F(_hbd`%n5Lc0{Crf+|4fm0%@axwaJ~yt#1hG~dbYJW!)PQoeAi4Q2Zi%6R7n8!LNvL#i_H0l4P^A2*wt)_=KM zq`fwh>U|+#F|QeWN_u`LfI`Tx7CCB07n?lk?%HsHBNgX>4PXxR6GJI@fb&38`!j0Y z@x_S6ve}gzJ3BaBio!A2`5jG@anUF$_svIYNYRR}tmNp!HN}WNN~IutzgpP5uKHxX zZRFMSeAr2cc?SG4bL7EmWVn1Na2|xyH^o)>Y}m_1Lh?jNDrc-TOJ2w7hFK-C#fxOmhS3}6YVSP_CYx0}$TQj&kPx8@zZ( zuyZ#}JHJa6ePF_$;RpRW5+`^6W8iW>UQr;-b}UO=^x^5C3?N#^VZ2xB=7wvTCUXN| z0h{C9=+NP)?;q(=5Q$W@&az82+A$L;kxB6@#mu9wU4``?0(dn5n|9;yJ(_ihMHhX? z7ar-B%!=sOYM+BMkq=G&eC!xd|Ni~5L7HF(rEVaF@EQdi>9bBIK#-#@r=ivSRgS9uP>)A}7oc2A_!iW9)hFqjpab`c=a3bq@ej+O6Az8dCbUPlXl zZhl3FV}XE96Yirdr*vPMC4(!zK|yXn{DZQ>oaYb|c#1dy*``T<>ZXp=@1z8z>y%Yg z)s9ooCaBaA`qTn+yClmUjmU6I#rfoN8<0a=q&BGWhw;T&G0e_Am1T4dbULyW!Dnm4 zN?qG>ms^Z86vcxsQ8PY4DMQ_ZWW(Yo>wgC<6wxovtMLhSeiyyY;0$m_s`0T)ex@j0+j(%g0 z2JYBOC_>xU5nF`rR6w^Ht%>V-M8#(ZjorU4A(@< z#h9Mz<%TG`gADQ7RqmE8UmrPhsozo3iB=RK5aTX~b2Or+;Q(Op-nRU{4yU1o0m>ll zcXL)@JuDd;22`f|Q@ZPQa*fFX-+Iaq(e4*fwJ%0^m&;;i; zE6KgXp!cx<@4G4QiEW>!xM}G;w}9#BsvbG{@0GM83AnL7cUDBWtc zO{aaIrItp(*DFST2&JeP*knHL)+vWA`{=Gtrt-LyYplKJYJgKr>}Nc$gQ9*-*la@e z^E2&xoTa!a{$^iaTXa)YYzpPi!xt|Y;lNCM|1+1TKQYf9=4H7@IkYoSO;;vx&bzjf zBhQs1jk{BIJV-!ibaW|lIu?g4d3Kl}h6?S@m>!PSj zLfFtskoe=*2ZY+U!(#f@eQBbNlX#v>$AbJ8l0V3pfW@t_puRQVv6cDL%8{9S zByjgDmw}^{kH~}}6V^GaSk7POFRBGC;5C!?MrmL@D;oXsk!m4e!TKw2r}* zTA!MNgZY67MGzjV8*CZuwAUIG4_Ik05GSw+t1=0P?UXgEWemJ?UF$x!x8=oipEXWR zAWkLY`BA>UB6B{7ufJZ%4`u62m=se{;xMRFTPQ~lxI&v|&0MA>(tK~IaGNfq@-_zh z+144AbDOj;=dgEA^yH0UK%sSMMm`Ltf&YuBc%Y$nC656rXK=k`5wp2MgzvuKLDr&N z&#znw1NUMW8?WQ%+HA1%5O_Xly<2Cn+s!r5_8VMUp79dg00Wio%egQ1Y#oH)BlgO~ zke!(HCN#Gre6K;??&KpAl--a^qP6=4p-T@D_wUzn*Ey1zxN@r}mb{qz=pU$3VD#dy zWzY|tn7djV^Iyr$Xn!jNgYX$0Fr%!s} z(-&GX>PHjDs5)Nd2LTszHUD;`<&DDmT%lB(k}5unZTwIDS;(% zu~{Tvio0J)b1oQ?A=W4$EH>u8wI|a!KXn!0y?j^X=a17EeCOk}+IHokL6t1x`DSA+ zGTjn()}se;i*RsB;q^va&3+6Yjc~)dPCn~4%4@~qEx)x7>ge@M{l#+$(iyGWE3#9^ z-Ii%>QB(Mxn7Q=smX3Dp3*9Cqvl%zym@5*WukvI9-&}VTA%*lyrd>-f@{l5>eD2I2 zQ%+5D*4EX;c{L|@2=DyyBFiou60jsuh!XKI*sHwXJq=LKd2O;%9iTbRG*Unh;P_GK4rdj%4 zwmO6v3i)|kj2_#uJ%XowS%ARp>ZwX+eH$f}VD#GP3~h;0yAfG=%p4?5P?-4enCx^v z9VZ{%He}NxP%55o^_vB!pb+V3t>21Aak-7B*tyFdt8%drN^-M27fcd=+A?J)N6@Y& z$IH}Y!MjbAl~+EnTA(hGn^W4mrqob+N2U1kB3o|A@TCg3=S)^b=}FY5={fceK&$k(-fhJYk>v$R`{Xf}RptwK`0OKl7U#%h zp9RZUx%5x$ov&C%$|#*X{m1TSQE}u7O_p}pk50(+9&o@iA zFg>4Vsev-RLdQz`%{u)kApHETb`SOb$BJ&J-!}Ox>jJ{@2e*Il?cDxAg7LM3!(yRi zX=HVxv#H))a+p#dMCu2%(pOCG6 zckl9pZ#EE-V}yJJzD#oq>+r@uexE_7U)_25hAd%ZYIoBY^Gn81PC1VNfTKTf{F2^ Xep^=TanKNzx-N)lz_Z$JJQHrCR3 literal 0 HcmV?d00001 diff --git a/mkdocs/docs/assets/images/screenshots/admin/events/event-detail.png b/mkdocs/docs/assets/images/screenshots/admin/events/event-detail.png new file mode 100644 index 0000000000000000000000000000000000000000..c61a04511263fc097567780158233f7bf5d8c4bd GIT binary patch literal 116289 zcmdqJuaMzo2 z&w0oFa{qw)yZh4`dt|J=v-Vn#%sHPYOi4is3zHP{*|TR@(%;0DpFKm(e)jAo`KuSm zI|uEh)X$#1eI_j~qUw=;u#BpUuS14*{2>V~2KVK25mph_s&{yJWOz0Qhjx`2;I{C{ z$gqs!?A(Ct-`Ve9DNk3o&R#JGGE&B3VxHdn>mD5-ufv00-iZ`ms-a@A;WL>uw{T(< z4-{MO;W;n(2Mfd78{j6vWf`G2>S);_HMHw?hUd5-?y zSk>bd&ws=0Zn3}5{~Hrf{C|Av*f-Dc1A~IZ5qy&5Bzv2i@mEJeUrdKeoXI>6laI$`J)l}~%dL>n8p$(=;DY!~wKr@s3vD-OdbfMu(5dy7G$ z!k_TDO87ya%4vigUjA5C!+J2(8tqZJ#;FE5$4bY^$l&1j)uL}QGW&b*$*&GdbZ!kd zxW=>aFQ&5EGi`wn+1Pq%$*FT-;2L#Mr~_qF`bxu5g?D_wngtZlylPQ^@8_7f=#lhl zo8`SN-_|cEt_sQ1OyWEvMWXUaNS-xfvu05;@TkG6YDZBI>Rd-Kmaqvc3; zCkqg5TQfB^$y9fW87=|?_j4^5ha85t#iq{ScCWRuuhMdJcR9bNg3(<)!jp*KNC!#6%~x13o2RQRdri+}xN zpf?c2@`*=PMb;NKPBm^`!Kx&BL7H3!?TG*BN*Wb)-{P>%5I#$C?QiOf7V3fpN9Df6 zVvD)q5|xx5X-X+~WG5@l;|gq8x=%~v_RG7D&SU}AjA5BayX>on>bWh3l(E+eZV#9< z@M-a;NN!_=ryo3)56CTMyBMEk&NWsF^SGYh?vuMP;+uJi8;@MgL%{p08<)6OaawHGU z=})u$*{9hh7ZtGY-;Ulh<>!Cu>G_D}MyWQ)VO{}XxW~tN?`!KVm&I*3(I8e7tv5P4 zY9iI)chkRhnvp|wR|#!!nd^>h)T8*)S$2&0x!+D?54f}ap_*}9-!Dggm<2f58Gor& z_ioNwbD*gqr;;0dSI?pXDN$8xcG>9_Z`Bf7Su!TNT0PMx@QC&r08CpVgj&S-mmA`1`_=T#cQ z){4>G<_fyn?Vj&!`73aik~>lRe!?4==O&f;+pae6+@HrQk0tN?Nl9`2egzzOpxt}B z=&ls)3QZhMt=eR<`%|=jUIj#v#K|N*XKm6N=@*m2ZgM{Ziu!z1;o4?OljJ?fVk${! zfw)FC92z)Z_EPV#gHsNSCofUp12}0SzvJn>ts9x8<=4u!>#7Io{m+1VQl>gSYrAfm zovi%JtL@IZ?XGFBxfSwq#$AEZ_-s$4)S3)0li^4}&vYn-OEwU~9SPww&PAWiWpE0}UTchHy95fZD3UdP z-|6x%=1@tuR#Px|IGVq>dwTHJorfD3Rnwk=vI$>ah#bAp;+^xzhK$3S_6-VAhc|=Z0fBXW^6f}6I zl}ED(uh;PI`gC-(ztm0k_I{+wU0|J6R!t8Gw2~LRbDQIyB^YN~jf0C_sYs2p`_Go{ z=ra-#`W}2{nnlAUAdy$|<%}#bub`;0n%6m>4NOY9(}Ma(hUb(BK~-Z}Ad_ZH>G9^D zvL=p9rjqEf@b52nXSSlBm~V1RXb>j*oE)H%LQ=rR96Vtn21UWYE9IJ!gF7XU2gt$?o|eoa;8?OI$>B-oZErfkF}m@ht* zbtm%vn{nmu{LuLD%(l8tSsccx$4x2K>C(cyK9hmNcq~-Z5TzFF7IVC$y>~@41LOx&_YpWolBn z)4#P0BJbZ<6@#M3yv$n#r@Q;(_DXeyjLU0vUqT`)L5qjlwC{{N`cpscme!!~4mV|j zpK4)7gbci~Zm&cH1%o?r)NSEtp8)q^Xk+EFS;b~s*QLV)LjT^~qR4{PZtQ{94isZ| zl-}<$m0&jDG)o4tUAThmxT;TAciy?0oNl#t4%n|)uk=Kg!3rZ0lSijTlMksU=7}A90)VRpk3gtEFhJ-Hba}K zq4jPYZn=t=KQHWd*R@g8S^hp*;(K&&V18pDXbL`t>U;w?P&kL1iBeK6FdeU_S~Au1 z3Nxcb{aEgRcH{W_O7gp|fjR26+@7d?<=0AAc*l;${ATR!AG`v`>U?*M11U3WfX3nS z&0F{G-6WY==KAGVQK4&6x4Y~Sa;2zCZ@H61(9(Z)*!QW{CW;`P;_3ZVR~kK83#Ut6 z9VZS#Fvk3T&6gJRf}UQ>>YZVxOJJM-m0|z2M4VaF-qLb7=(?DKXWEeN0l?QD$1ulE z`+2425H=gHdbv1wTr6MeE>G5)J=nezQ5uuESJm`E6L`sD((@V2AAD#{2g_l%D?+kR2)0NTz=|*>UoJo#W5TVZYo!;&|Y+KTmetMMc9g_Y?Xa01c zIgX8Vadl=)Vs6PabemftlAK%*t!%6x91+t@J$F1xIneacw1?+ ze`neXJlD>6omTOE7wr&e<@#-5`+x4DZEe9h1S(#`=fA`Z3`BrGhJ;*y&Ht4sHM6uR zK{|iOK4FPQBYi&ic4YX>h0xiguw1UCLPi;`2qBdcx?h$?hW+ufbJiBMMTg-^@AVl% zmn#JMf_$-yel(~vr5IeMMau{?%&_zD+-`?3oIec`MO}$H>oLUa`k4T;s180s4(JHZ zs-t{oO+3g+LRhO)_nLTSjY>vnqr!R~AE4UwCqLWm1b}rGY6E8XW_UCZqoLOnSuApy z3GzEf9BZh~%^!SZjaBX&}ceQPyjZ5l^9tbq<*csOgZQrdUPA`S_9|{U1 ztqkmrLKF7KE}zp}H2uY6%-K!7pWzMcycTxLN`bED1%A9?yMQmq=~){k6nBShOP+{PSS>%=Y|E ziL9(FP)2k{3H}hACdFO3EKjLino2{^VOd?(!jx zQ~S`~>}ABnIG&7h2BvzcmKjukM*%b^#N)@ssaWl5fXfPzX9>}>NRpzq!}Va}txU$E zrXgU^kz;gTsp|mEk>$^Wa9Re){5Vt;TzDS-$0A^*aWH8nHvh%^n*AC8Kn40hy{?ml zmq+uaAQwf=2$W(94QaPg%hHZ4Hm#RPGm96?5Oz&TeY+SI8cDiPYfog=kAs0Nhztkw zfO;5s|HA^j6;lo}j|nT1fvpve*GaD~b!E17y!UpyROmnDhN|Ksmf9bxgs|l*vXTV} zvh;*Cn3gQqv(tXYzDU@ldv`~C49YegzyEx@z>i(V;`5?VDMc&A<^7YRK)J^`3=iZ_WlK{?V`&QC zVO=bGP^`<6H|@-~aZ`}89*J!eUC5Ly?=nVH#N(Vw=XXu%Fh<7P!q@0iVt0;# zd*J*6qT8F1DHH{Fdm*FnYF0w$&iEsS9S^sw+5wi&{0+Cbgd*MwC1BuGvzy??an&F) z1*_qY^dS;DQ_kl7Je^ zIPGWVrIB%3?%w`ox&k-*KK$6lO`z;d+BI2K{PCgFur$X#CN2)ZI^U3u;dKcwDK2}f zc}zc}N{?8Wiv<)a8dDBbHsExGHJ>E62nA0 zxvpJh)c^M|&mv0>5C8PEUtZpFOSjhK_1&LgApUu=dilrHzu9JymS^O3u5~LnZLm5s zB5wp!`AQxw_RQQ&PUTm!qsI&>3j)0=qn7k^@^XoI8)el^pUc~|_RjOU(}nt*zhkAm z=vO&Z=<%BcZvgogMB-f}fSd(mm5#0F*iv4X>qDxFg-**;feLtq(R@?_&?nMzrkS0{ zA|DZT{V4dI-w4EiaqElI{htPa_H@i|Kls2^*480wzIbnMZ@3M9kzVLAd7@GF*FWkg zw|Ucp=bqRTS?#&3b!(HU_R8R7H@iv$kD2kvlB8gAY5&hFF1yoQSMNeEH*c8ZvLqQJ zHd2;dT=Mh?>-Vva;9u{CkZ~|y=As0XXJf@O<7R!%2Ln2#!imvCgchKs!Pj92qdfek zq9S)Fu`Gp(k+#;MpW$-tLaNB!j&IfJMxjH36VeKKgRk!i?ohFYY!SK)4!V;aEtL!U zzJYkp2sw=Bn>M4AO^ZU=d}o)8ODwGmX^Pl7BQ7oLZ02T5r$zlduEHz?5@v3(_difE z#@&gNxlI9EOq44Vb91|q;fw|4LX)%@KoFr4wL`x&;TwhtxU$4i+@jPbvlK#iryO~p zN{p!y2n_520>^~}KL~LMbo|O>G3CG|M|V|bwS&$9JxUVPOYI0rr^&HU@Mz-UXC61R zj`O}~P(Dn?6dHBFXuNo(N_Z;|G#7e($)!TR_l?1LVQx5pO2FCVPh{qCOY%iSAQTGG ziE_rkRroym#v>xNU|F*Sah6$DTh~A|erZIPw=~){FP<`lL102$dDGyAKp$IS6yRe_ zq4VUO6iZuNv^O-GQ4Z~)+b08^+zYqxmhW2euS}cW1bP@kjI1C1%_S|g#@uzM<)~Mz zA7%-pUcBU>4Fv(tN&1}!@P7+!=x9blwH!Z`RSdn&T+|rdBVSJfiaDD+2=(;Z>IRlV#l+_wN3cEef_(Vo6 zR~hrF(Xz1xX+)^(d5-57kz84Y7gp5y5g@%45H$LRs|T1_z$rb5ptypLfU zzG#=%351V=P;7Yse^wOZ&7}aizXVln+#6?CeUO}#+x8oEt-yneQXUpGjiwKM*~=Z$ zZ29!d53g83V!+ZZBd0_xi2}e?vBX+7aov=BJ?0H=(rspUS~UUR*~KTB3bP2jy*xB; zx0<3U@usDvo)|iWWMKNR6Uw#utf3KntmK7d^7@PRNM1N~x;})^bgxgH{N4ze$nK$) zu&>(G*EZJhhdaZ$iYHg7Pdl( znp$Fc#)yIvf9ocP)1-;jF}a|jCZeTVUtur%n?X>NrkHL26syh6t!E2oP=@zRQUTTC zLe30V<>GQ_vE%_|HQcsX$hF*2pa{kmi z&*k^LJjh25W%fMvZ4ytH9U*7e9@+l%wlozxJ3DAtgcD2K+`^e1WWMC@pvX`RSaFa2 zNedYP(&ylVvjmFe*liE)3!LX&t@-~fgF-?Hrr_>9lCGfnjGdRNGR_tH_?ZlHrIUYR z9-g4iMqjUD+;u5F>u@)!0}P2ZHv2WxACyH(b=A$xbV>>9LKmxy(97paxtQ{o0i0R} z0?w|7v7iI{n4|6|UVMN5l?4hX>Fwu1cW zV41VEI2t~zrU&PRlTc$D(?%+Ri(5SAN%;;-L8XLe`GG#s?w2Suz;KcJnRWNSF-NUW zj~ixo=8C$vxT&>PQ_loHkC*-wLYrxkN#T?bJ|HeBRzfInh+GL}>=EmiKzzVtwcpS|eMT8{Mn8$^nOp{YMPc=G2~|9V z*;Iw)aszc;Ij}y_iI8svtE$0$$=_*r@KM;e;|uCbCJ0Bt3tJJq$%dH0TQ6aBC%+AZXYxzCo!K=^|y`pPw*ixzk&?GASeNK4yS^OJ|4E8X6hh zj`tv)1zFL7qP~cJbNK164!q*3;rJgq;3JhLo0ZXc-*05AlR%V;9Z0%AHj|u;O{HF& zgh9Ab7lWGG!bzQaL<-0HY|QJrp&7SNd_BMPT=VY6SHHPDR-&-;vmEfnYMNttD^>FVc5QFJ8~xqX%=c;t<7 z=1I-TL>)r8%9f+p$)~>YbBqu(xA0fypS|ooEQ3Ltlcm2_r^}!PZb_d@tZPYFmXIY*h zq{{dj1wA*(QR!xz#Ovovtkia&O$foAZkW}yKq5Trva|4{6^`eE`O5tDpy}FWTfV8| z6ESlnbO(Cob+#`E&jcjbeCWq-@0=+qykTv1j5M(nZuL~_gwB+*qi6uMjO9{v6H=a5elpE^_qU?h3$3LYR^S58@&VGPtmG!+ zSzB3N6Zs(AlMZJI&m+{|+@?f5xYN*m>1{EWx&*D;L`WPYo$72Y5Othg_}}jG%ER)T zN$R(OVc{VxJbKF=hW1WIG9O+)(JCo1UX*(&5;#FKjqUVW4T|*3Yr!~SqFA>JeJn%3 zl!SeXI@7R22I^bBT+7o3eb4PPvIbHJty2514p)@gr`BHqY%|wQFSYT5VJ`wnx%TRr zpd6+(iqv@}_-RKoBPj=iJxH(~F^PR7-0XOvpsl$3Tgf+1z2Z)iApdwnFAV?m(0{+l z^Kz4VYWOS4c@Q{@tW^V79@sO2RZ=Y^Bv*PKrh6snM%mx=9HpCnMu z*RBu__oM`3^+Z;mjx3g=GI;p*8GSiP70KSKLFfaG{p35yUP&;?VE{8qo>ukaTc>Dx z@O3GwESBSyf!e~B&nbj`La=;y*_9aFH?#4W7;pQy%OE*9AO$r$S9wk^28NHR>KYIg zVB}R1bQ9!Mp(Y;~`S+C5=pdV+grTkhX)-&tQ{R_|hsJVnqbQ#u(AQ?0; zWcnv|?}3T%Azt|B75qB6w ziG+lt$e73?dHSO?y)=qgyTF;d_i3!4{UE%)GB@_)oOLprdSO!W@y5qJu$noCOI`7T z?k<*!M@*RG!864_j95S$A&c!(ka}YOKHE)a1ZAf4JZe^ZZ=hkmDbF;6Ot*Y05hY+i zXhiW9k={ucP<5zc0S-NiuASgyGzAd!**iy??xz{0YO*8T0N$+bgH~F*pO=#vUUZ6P{UV8F|3-|rLNMMcHo^?AkP(|cPu zM?Rgyfr+??2NJ{SG6@3OsjfgbEz!`oQVQUN06#BVrh<8OA zdpi1<#A4Vj^NKSa?b_D{T+ImpL*1?9J9(J?7BZ2|tUYbVJ+-26ct2;#njp%+mpt42 zCcBeah_rhG#nUx{cYFYyR=>WK%;An;n6ZSIEFu_swelP^%EVXNz(Z!dc30q|!Rr=K z^6?;`!LGiyH-FF`hb6<=u*Unvu=|?-HRvL4_$R(-_43Iq$e^?&)yhH1!eTI~e@t#{ zlx$MNtcHb_z6PwuP_ljd(LjTF;XU7#$hoUH((KI!rFo~qYUd_%ZkC2*XLb~m*}N!p z;){Y@AOh%oN`yu7>vPU5m~3=exk`cibLXI9b;$${O!wj#ADF_L=_mxEokxRRYO1WF zrKxWi?#v2Y8)*Hx`G_$%R_YG^yr?|b`ZT^_2Fjkze6(OH*q3onV-`C=uY$$+Ud{}p z!?9mlTB-sKYwXhir+arpTB>oDi(IsyhJEp~dvrh8viFJikxeA=hOH=`6Rk9XEDt5* z*Z939G)1wCtck$0vH4yMytiBIl5o z{+-{2g&yy6(g^`NUO6?sW|ESJ?C&%U@|?XmjN#L4HKr^5`i0M>K3;(|COyP_BMTe0 zA>5+f9l>wH$BJy64tfN5oE&cYboIzK5w0Iw2f{O!>pUnk2rJz&4bN@OFz;#y;i2OU z*Dv&cR&~h}(>c^+?a*0Z+_?HeEi}p=Gc_Ry7A5RZ?%BF?8@KNc z^LCnj96aMusNE}-(%hEj^Ee{sZn2UFK<7Lry`XSCcdxT`yp7!l6I_Y|oleBwRa+?0 z0bt;%L*l{ahzyl(^G?0k`+QpDH(;T`Zz9^ABfEuA#jH3TnQH{?IRh>M%iR>u=Y(T zf!1r7!O-xKZkuZaJ%%)>jaxEjed=!xSNsd5p%BdB0hYrt_UHA&o6N&R z&8j$uLXuMM;U6G%_G@2kH!maa=p)Si=9klO77cVoM55Y%hgV+lH>hP{d!U5i!_oLu zjj~^mKa?9Z*!G3o1cqLjY7F`ioTGxYs3sO)dM#!In3$M-3BC=R!Iy0r^$+}cyZSzw zvPr9sttfb=O$`qyWudCF58*r7+PW34^SCcY8kZ$?=B4Bv8o(@v>fm|ZLSCLxL@f*J zHI<+4mZrptAuBBS$$9tdWV<`<;#1`CW2xc6^oud|qOK_pU3Ve<)k-~Xilz&Fdl!0^)lwk)UM zaicc)zDk179#e}(_=n%tJR((xWpPxfOl3k-Uq34K1gQ(yGtV{Xs&i~#KWFjVTe|27 z^qQ@(Hc_e#$uf(1ge5u-!XJS69%}ibj%;O-}SA4mBzyESPnR62neG zDkJ@$6b->6k6wq4^1FNeM%=C<*=atkDsGmxeZ1dv@K z*}H1kYNnhezxTTGp|y2i4XZHYfisV3=`E*q6%MGpQifn_@=w)z+oi1LOVrEUP{>@V z8t`FgT!#)L7Zc+ll9Xd>IG9Z5sv?Ee|7S6ypBUAH)^8eHXlKK5N|TUFQJ(fh$CJC@ z+1tBE?`TY&T)LqSuMd){Ct~%k( zBxpL_+-fy517bSb)`Y+kHPuT~ zp1(LAe5WNj*NkbckEeTFrnW|0f*B<*eU61wZGj+hx7V*; z^sawIBP{WT(tTh{1gQ?hBAa9XGHa|jh57nMlo|t=o|9juIVwatJa^k;lH~{~XiZpa zG)S!XyQ`6AANbOJ_fewu!Kmu|+_eKg&wJ2l*gau{9gE4F;mX>V-!@;Pvmz0o^K{-l z0S=zgfX`Nr9Yz(8IUwePG9pAB*i(u!0W0u>V|Z{jrab3k+uv*V{>b{%T5XL?!LlGB9ujv8Nb<~S^O(uelISgNiY2mm$eE!mOc|u0Yb1T1;1Po zHw>3#=POOhTAF~Bly7t&KEyoC z(E;8TkjZszJ-4bR$~X~+zVo*F(hAvBuz{OgS&7KAaK3RtGJh;tog#2ght(Yc_Y*pL znIt>?=GGgST1E}OYhmN=GR$jvo|7b$(`W43|><~dHVR~+xcvD>)G8~L@a)k z>DM&3%A51yvk4c-HeSvSC)_D0Q{JPLd%tG6M@FwDsik6(OC!zcjL?8UX^(2#6Cn4R zy&Rs$CHc*tvKo3(TQ)lc_Zu0sqr zNryWu)m1(HuJhja=`(~NoG+VUQxX2;O~Cy6g$OAaoYfu`GbFU*3>Ee+9CO{Z)=}3O zh{t3ITxq?qsM0e)%84w&a$}^buKu^hnpmjdbo)|OU?!i`!nkB4F}#t*_HKmxQ(lO; z)jHVmpYU5(x{l%AQ_4q-=qAUW){0R3cb zQBqsZ#PK(ZwOA|f7_1zV;r9!veZ?W3hGrL1loR96VUe4OxxS&fdnsW>o&DmangM7m z9D;t0dL@SBlFN}oN)^s%hLk!Ex|ZBv$r@^JJu6`$;qOE!11&+*H3gMld^3A?F?ujlPzVN) z#5G7)0!z1`_3=LU>5{w%%Vc7TX%=5D*j3wK-ClpTOkxAPXr2aZbE_;@lO6qV;m&_DD2cF9Fet$iJwN9i(?s^^?2SMWY?_~Bfq zQm-WeGHGPIP9K?TFX*_PTrb;@c$lzo<5&67K&?GbrpaAs%9KqdK+(_OQ>c|xD#nZ~4$ zNqkQg#*E~2X1WlrZNhBJ+tWSguU#4p!1ko|y(zrVsY__Hj`y&#L_6_x$FF%lQpHl0 z_7IwAN&(~Hf}g`Evvju0rN(FK+jUpT0@iPI#0uv^qP$#Q+RWFm+K!yhC01mJg+5jY z^4l!dwn)0A%M8?5@ulXsOCA2pWfF1G>+5D@gbRy}}3k0f-yQh2+4!%r0 z=%Y8ey~j{}<-+F%JpY{V&`<$mH}2|PAKm}IMG`Z`mSUGL1PdqU5-#?Ps~i!j2ceYg zjy&EFg%9h-cu3y4I3em?@&B*@OVt8jATpW}u8DL%T28_Id+;!L>fv*=h-B}*9#zfz zRbS-i^`vYNIfu4^nOCg9In=@bNKfVV=W>4{@tYGBgujg}UE}aMEN`~zy%OAy=3LPDmr zy=BHScT>NB+H(2s)4n+JmbvOWWfy0G{dudha@L-ajuhGZnQ}ebChQILMIF~FwRLn< zffa9)t9z;+J_^-3PPzJJSuMJzbDy9zg^3sy3Z+FhzinDKBqPd)_18=%R-_XOn?s#)w@>)RyWW(#Zo$Sp``J1`-fp^Zeev!;a zdCv6jdf=UiHZrpCK zgAY8*X|c2NNbmB%;No>|^V1rn3a+ozyt?QOK00UJw4oeQ#UcSFQ%9H#C}G`i$2r^V zq#_aA_@d3sH6#nCz?WH1DIC-f>qN*m3#Qsi9Ug!7Q5aDSh;Fs-qND_xUwRjhCt-VTm02fK6TRc$ysEFcRN6wQ-( zEA-nyIR#vXw{#3!N{$XUZT^@k6Jw=Uv$Lhx0Ny_gdXGm!2TM&^5Mj%Eq)KmhhsVcD zLs^-venJV44jLqiz%i!5D*E^k)6EgVusTSw*9OGIc%@srC46R{q#`_j+4>k|Bu< z!Jag(#qHeHOSSV6y2X{n{ED2dcD_iQ5tSvQO0TbMn!{zV-`u}D8jx*M^z!E^S_vr9tqAn>P}TI zlC2;Iz8t@wv|FnK_o4xX@m42goChP86IB-5q~Q!v=`b;9_FY_3E;GTYn$k%~czy1_ zv>xa5wDOpx>0^#cGkT*QQF%J3$Utx+quI{|4tYRE%2mFg8e=3ntu?-*YcWAxP8!bJjQ@_eLhhAk8^VJ9gY$=z0MYWpaO;V)L3q&J;l|A>aJTf$d<#lQvQ<;kG z!Y3qAQ(w)Kw)7Ij00^|F1B6D7NuA2@J@(fv^n$j|g<#@(No-Q}1psA6l-_rKw5K~H ze@fuQ-36n%dT2>8aOn1g#f45hE#Fe2bdFTAI9s*SwROss>?B=CICL6p-OromhnLhK zjyvk%BxGQ&{4Gf!&0HxGExx}P{z^ihAV{F5TKrrXR^-#(EbK;wB^;?O51(acHu>q^ z@z^%|(OyFnla8$zS#@#xqLAZ!AMEOO30QnxV|g*IEN}*wn!Wei8xOmgQNJ(WDs}p` zY`+Oz!~`TDIb&LC8umX~$nZr}D44)SGpEMIRS=PN_?`D zVDnwMa;KPvX~>Q<_yl7bi_W)mMdUUv^e`Bvdc<-$FcWEDXrt^5n__xxUg5QIGmj*M zmPzLXGm{R)Rp>y<2HOd>q|wK@_?AGhC=jU&bJ1G`74q4h{yy{MG()lA#c?}bXrTBBC3sqw$`|4_F6HkPS zaS%A7u9~QD1(*rO88xW6GYoFAfAuWh`Edzn7PG}`=A*Q9SoYsPNO0%z959=mTs8V! z22%&?8GH#ef=mtt{2a3aSUiy0#kpMhP7hz!XYpeGJJbxv18OC*s{dB0twu9$v?AT= zzgN8A|6gm}{@*L~GV>b>`B0P~_?@T3|E@p)OyZxj@+_VUfzOKe@4Z#`E^3DVR_Onz z5u()Tz|3dZj%4rKVVwD;ki^hL=wf@os+BV1L?-o$&96WQsa^Em(CO~xT%Ux zD8KFE4&$JpcI{U3&Ad-h-7qoP;{`GU-}v8Tbay*JJVxiO70_a-JUm+fpSAG zA+HChRR`DPnOl5&YS zY+EL53Sn-~^T|*}1HW5x^`(?kJgOH>+$ch5Cp2S?4VH)glY-%E#PtnFGY~lqU`W#7 zMbqK#0idf$nn2#x#%2`jBB5a8BTBR4A>T5N2@6gP>mk>~{A^Hvs0S}Uukaf~7LB!J z&FE@QZl#!aL3c~80_*!pf^iTouFGv2?cp~pLZfFZt^;>Jx~KMO0&iWazDyG;96T*8 z?jfrd-{0LP6*@i-)4p)=P{b*7kD6~JS({|@4tdnqCAmF*^WTSz2Vh9*XVBXQdb!JQ zohaxxZI4_iO3O#e4mRiJ10VQ+2F4Vv?dNxIXRGXNIn@$0>{kf5sD>EiwNpyOy#!bL zO*bQkzsdY5Ln3vE+9dCYwPcXsg;<5n-O+yFL^@4I3ug?5%SOL6scV`|ImN1v5j4y@ z6GKf~r*S^oXDg=6c(EZfEM&D{rdp4=i_Of|ix@*+2*=EY%-zN)yZ_1+;{QmV#9F&Q zDb71N$E{Gl_3I|1#Gx{CY3uwCqw!Ln4tx3P4h2vx6^G0yZ&dL5NZPzovm7l^Pd3cM?hh~w=ACl}qP9r8%CNYXbo)sMLE2mp9eIFv%Zz|JUE6{q{_AO|5S3F(+M zXMp>`%J$|1J;O;{C>#qWPN2t05E27ak6-)JcD?H%6zQ&2ZBklnJeBP|UgVp%k=I7q z7GZ{@PNs4wWb0GI}jpe90bTUl_4(3)3+vJ*6Z#B{3~a&@ zlGiwOy?0G5_2jdz`*L_s(YiPlMZ#c~a4a6&9x90|nYA;X zX|{v!K1NCc{6F3c@Whzs7v~m#tCmRj=U_31^d4V}lTaIa;TBmN881UdHCcD+1u85; z9C_Jyis{%LPjVdZ)4^yGm~#JF(r0vHrnnBDKGB@q{5;dJm-3A?9awUA^*_B=bCO}e z3JsQ;Rw1{vqTZT>qa_q?V~ zVKTc(zpPUC?P31kWEIT^JUlv0?TbW}J$<}N3V+x+>=G5`^H?R$7v9D!kqIpl<@a{B zuB|f(hy>>4Ro)>4u%mJdV>yIBjKVucE&=FvLB%O^;5B?UMN!2eRBzf2kOjsNVb!j^8wUfUteQsDk2*nu2*SXB`oEwg|y3S>DD=819 zWxV?7BXsH_A6%(c1a|uZH2ZH^v*i+os2Q#(THWid*d1qAFZi*y`MZvvx8vf*9X7WR z39>}hCC(+ctHUVz(N`ASZ(RbaMj~Eiwc4puwJ7M#Cm8)1)}^R9E?r*HM-~x*jCesT;mrL&~wnyP;ivE&eY3w;pT%!vfN3 zBHJ&J8sRrAY{y+OGeyCI30}P3$qGm8miCk(MC&bMQ;Va1e-P=cZDLDH?3;Hj2kqR0 zITOhjzR5iP8r=Szum5xO&xZdH=jn&iqiB;_$(kt?=f?V1Agzem+_vBWLUpw=KjSB~ z_n&qJ&z}7~Qc-`74pdQ_QYuY7Qi+)|h_Sn0{$B%uzelPe&(T%Q{ugzux--NnNdC{? z`O*HL6J^m3JyWH@tYN@plOd04ix0v-OOhG+ws960=YixR9sl)4U$+7RP#9igIMRLvZ~oNlge`h6YKe(ip)$* z*!=l#qlTnGxNoFn)uR7hsp6M!9ljQ1)9Faa=!PT>n={1C;&;UJgm&=%>+6pjk`xVqEET9&zL)I{w%GYIV!hG0bRAbO0yoWPC?ZC5j|%_Wo!V+s$LS zrkpwHXfx&e`Z=({?I9VKMIvoF$n{Hp!<4e3-|7`ht3FP#uZbn8%-sIf# zWu}8dqoaerZb*rU$SU>pWEJ$I`oGCYM`c;DeE8sZzG{h9bJMXl4U67@x>^jyXEq8Q zSyun1u+pe3Ec;j%b9!?h{U{>G45Al6^9zq}c~74^?K(;IZCH6yPWH9QKM#DQL7ty* z31#KnoowvAJrWHCn5iF?8mH+%DcMfs-A=|8dZEo5GS08@c5P=TIy}x7;9}xS!&0{~ z!~j->9ymEfN|AW`akl5k_8AH)vN6R{v9ws>xm;aV#@!mETozeXGx-%+7j@EO&Zb2A z$)uJ6xm`RbH7ec!qL7dOY8n`Tl5G(_j48{lIA2`Y;Icoz-nsubxIPtPCFiD?1$@W) zfwEJV$MGyOlu{+rLT!ea&*>TeeV4Gq@UG_zk<{HqTAXDA0q^?%i@3iIit_#6xM3AZ zL6ndN6=?zK4pBh5L0Y;)V#x&*1nKUsrMtVkyIZ<*X`a)MzwbQ%JTuQf_sq=xZVn)iUQ-h}SaZ?_6bQxPvw&`-GRcFQ_Dvs)nK)}wsR!B)gbM|IP3 zxE6Kp^5mA^Z)4f@CMGwI7UO+f#r42$6|l{iO;pw-)aM6J)sZ77EIKx3W|<>F4i}2@ zECY8+n7#uu(tO>5+}Q~NRb|QJKu~v4pS+_Z6mY*fvuxlQ@d)0W^CjQBz0?{aZAjV5 zf^M>NPvmuUbOQ5f1GJ4_%XH8eO8~;`Jh%VEr%fkWNm0*nA*}wjvZ}1JztYB?@(NUX}%$Db50(OQEgXDX~CTrKg)#-!O%I^aTNr{_T8Id}_ zp$|xg_L&*)1dx69=bXHhabf6RBqYvvj21>_fh(>ytW@4rL#R7z7`SeR(VG9>WRL!U z4{HiaEz(4kMPjeS%22U32{x`u+Efz1-Ff?cpZsXpz--KH&<>M*$=x*nvzU_%shd}O z_S9ah-t*f?{++T0Up0houf|j&#(#J6NS2XtmIr4j4)S{$$}4F`(heoosao6^9j3d; z%pB+N^7FhddOcOwbe{h!eA<$qI-r<{r#dcZ68OUEFs<~9>R+D^>{u?;8Du~jR%X(ACdqwv;mv zfQYS_OYPq|ZXp|gUwg47SkeLPKPCZiGi~x0-1`E7`IEw3YGf=>)w!KQA>674F3yFxBFEz4n>s%6eQ($;jbu;XJPFMLbtzfd9 z%lA?KBV!iP;CObwF}%NW%iLTe zMby6wBOGIjjz*gL6U<3$UX_zRyG%P)jaB`5nct2X`zD%&dF=06)kFNrV`M=cLe|0t zBSg%D>J6TO zXH`>9oo9PeElY|1e#cOr6@@-5u*W(0ssJ(ziaR zmcd&#txAPlz%0U1x>a8?(0(6AgfpcMVNnVAhpM#mu z^KP8*ZuuN4t@NUIjNB|OMZf8IroRZu`;Ht?=gfT?efZ`qXVr?29u{CXfWn;|8yT8u zN-1YsJsyAl^GwLfe89iwY#~N@*paE{{fz0VsT74N&zFV;niqQQ|8AiabA%u_K5osX z)8Dgqgp;^Y9t}&4(czKXrW4n#6{QvsI{twuy$$u#M0QeJnQxCyw&v>wylOs?E!r)W zTz@g#V6^{4O~p7@U$E^@Wi_3<_5nFQcZYU&<8Y<>OK>t<%%Z{7*}h^)LKVa{xpF_%d|3KYu8z~&xi@@`OYFXHI^X*N<; zd|5<*UTPi);)A==zh!$j9udCc*G?%&SJIU6q5R8;0gJdZoDNp=45i&URZ>ft`$M`h z88L$1^6$?S6ugwIN7R8*D&YnvQt16xCeQmA-QgUq{lws-Tn4qIJ*ewJHE*@eLqvYU zdqf?nIF8!=6Au~}RRZ0TMO7t2LmC2qs!Ic$O^R()$pkBJOL!V)X++W&I$w8aVpP&Q zSDbTJmSfM?^js2>30Een+qyJwR9oI`v-wEmazy`z6xlUogWZJSI@tU9DD7@2mCA4) zPNkRCCz#ua=bG?gI~$vS^(2K~~9_!)U5o*$t?8$~)r zyo50cC+@mX-!{26xa^y(un@53BHxv?rMA4x+uSqsNxZM4EqX1XXMDMl*+ouymil-M zM#=3QCy`|t81%aVa^NN+B4Q(NY6vT?{Sw(p&?l1l?zFPVMqfO#x6163uAcuK*5d4_ zkR3^T?Al=3alPVV!7hBi6U{1EoNbY8w{|nJuo$5ba{;i9-o5)p^&kMfO&G->OyRD{ z>LOxa&W>9EmL4E}l&@{kXAD#sYMA!$gV&QA1QvKROXQIxzc zlievu7}>cfd7tdfCL+SZurTlmws2oszi51YyEw8w_ydRBdR*##KKJx=V2BRn@bruR z{nH>zGa_4x!m&w6tGHNmUa< zBNYslX~r2y=dE3AWE@8u8|BUoEeIKwxa}viD^S0Sf%WdE&Wl`Cbr~^X$50{hu;Rk6 z1+^mbx@eh1duCP|uI>6u!oTkKCx=GUG}A}ePg$77Ytpdp3J%nSl`>-(Um76e$UlXm z58f$GZ(2hjE*>Hc&to`n)!8?~|WIb#&@-*}%mwI?Y!d~#<&2bym zi1m0C&Dc{Dvc=8$-LRdNy=_$1{1oc0+b0hi4GCe4sV~hLo~4KVuNKgpnw`-cL2N*w zun~~1_(fGXM>rlPL&le7{bS#W^$ovVM8++vCZEN~(Pl{TybQFr!f}Qy$mT5?r*Vq( zof?ilD>EJ?`HId?9NN6^b{orP>C^wOASLBpl&&Xa5%?9}0vsiL3#V z?t)}IJ>8xMgZ>RT16Pe@E4^G0zoTg&DsuR1h@Pdy-UQ0m>7XVlWNiIsG6L{lLslrG}WQmMi~}tQ0c-OfbNt|#m39{vx~}k^NR}F z@sg8t(Os6wze;bhP9!_cuTw1_bz8pOkH8N4h*xK+xoehpgjFL`#8c}idi0Di_OMEC zh>U4mB`U}t{SSZ5uARUK{)bRuf&ALPAsK3(*M+Sagh3b;g~JP|d^%^@~QR zwz9*!0>MGDhL>dFVD7UQse6@1X*aj{yuVq^crO)|Guf0XR|cs@m` z%mK0fS?QiB6QnbxbyM%F#32HFY`CNWQpndEky|{R@I^>U6U>u2C;MlC85w_gW!4+r z{Y;f2=N}_ey!1sCTOxz4D|Uizovln8&U<*o&+-Hs1$lYfWU4UfvPc~_%>zdHKge|Q zA|jppyKrQ5+(q+DutUJHmhErhKi^s$o2SyaO_*O%6qXUsyUeqjXUOvD%xwqylt`}XGw&LU>~&Wq zl?xXT=8%0NY@(c5#KL{$t=KaSaL=FlGwG&I(bRNz>z1;rOKe?)EDIY^`nV<&`S0sT zkT7Ip2JvR##GdKTKY#V#&8J=6S%p7oxiqAlgpC!x6^s-Xra-;$P5g&i-FI?x`*h2_ zX>Rv5rYgrz>O4dWK_A{1lL&NsZB{r;Twn1VAklDCR9O`C=y)Mo8?gCb_j{77XBBa8 zbh4CJSSXXLpvLOy?|(Duz0}ZXG~IRH6pW4XB%aN?yDYqQwB!_BNHf?yRuG-;woXjm zaJlxj3si<(yB;8r6~@b?MU~{Z4HD6?R}tx_zg(}^+dU!I3UDGrHbaoUCqI3F5QBQ> zhWN)pWY~~u(*T8HUvFn+l3gQtY?|wH{}ge&4gwrg+49u<>}D9zlaFfngUgp2gA-H| zlvX9iW|cNwcB(bn1+o+ru=XxWaWOHIT~o!JT)UlST!G|Z0)p6zoplY<<8|ANpJ@r+ z%1ReHc=7B7`8I{R(^WvyON8^Qyx6=wA{WTn_B>ccYr`uH8pl}8W*iSja|YDcU1NS9 zB`AbNMB>i$4Sc2^e}S>d&z8>nV&TM-g7HBj%Q0d+@)^g>56XdG4$>x<`$!a1j0=Wt zGttF|(JeXIw3}|?bW@q!=2b;twxpy)S@VsXfx{<;v9#>kE>u>JTm5?uYA5PrY3ACD z4MjRnvq<~NMmuwVQ7=pv+lUTbcy>KctV5IRXNc0Gs`{L1m+~l9AqAb1x}KLJMPkKdRbrXIk6Asy`Rx zeCEZQ$^!R{pn+WFV`Q_h4@nE$mHRW9(1)bNSnao(=?2Kp0zVhZP-`y;I{JC}_YHV# z{eE$HX>)mrF!yAfk0X;m}!_LgZ<^H3ap~c3j-L9rNpD{u=m)*WCPmKYfFF z?G>;y4{awoI7a+VY;2D2ad7wHXSLy?Ki#mgr3Nv{nx{YiO1Buv$_aQlKj%rf!xxsy zBpZDi6l4IcuqG>d-T1nDO|QDv_m|}b>kd*>Z9(EipRL61mIr68Ly)J(9-ERS5 zyEtFd3EG-2m7>&vTM?kDY~b~J^V5(m&>2H=nkRVp%f+~__Sp*b+hi3>0J`a9_uXH7 zq;MMDV} zWA^GsH5y{VUx-Oa+-b;AXHsw2i%h_<zC=u@K(Ef z*=XA?Qjxu|#?*%9j1&wVpZVyNi~bWWxc^xC9{*M9JQp*$ zF(fQ3-%3|w70))KBENI50*g=jj~4I#R%kbqyn>wacxk-*^ubN}M{#0Y3JL-@Az4>x z3;_oIh^`n@8i{8zE6c}gZ<`kADELFWwotk@W#va?!$vF`T=jMj%lxM%(>iw!gEP&_ z$(R=W+Rl%3ck+C0tbvMV;KFlbYO`=@JFbpsWG{qbc7R;barVofXI0sTn(DEf$d0G_ zcKV#CAD8$M))`;6O7q2Su#9G#G%hjR=j5sPebmevWIcZ9K3{gew!KSxddzsI4OSa4|Qkc zZFrz{Nci4)?0gC_WQht?V>X~u5U2L$EZ@8Y%1@K8RU+qloA84fNcVXv&)lyJON>Mc zGs7|mD++)f)%S9^I|{hO>Va$twjj?5Q-?-|TbKcoP~$`2op?l4x7B7mtL0>|UoNwY z$_VAaz-MSg6wK;JM8JDdAt52VG1aKPNFLZmYY=^>BlfdhHu_s|l}@90oqGo5`V;)V&@O)?^2MHw>aFtErO6 z{QM*NWR9XGX7`{B{lS;wk{TN0TxOzX5*Kbvk`NWf{^S>Tyx}iprpR7X6p<%kh2ox4 zl8>@^UP0)TE2jbi%JavE^Mk2IpO$b*q1L#Jp>V!k7T(OKC&dWAdqW6^msjV=>;cna~UgT9!CCKlUIDzM81rIib2Mq`x+ym$=RQ# zhLa30i)w^dNAM*HDHcgGw5F=~vQxs2r<7u71}$!X8+bQ5(2_UZ9j+ckaUXmD3rC#( zcCiHt$2L9f;y&A6-tJ~IOM7)6cJsg}$7*Jf{Wg8tez3GK?fcGvIz zwvi+DrsS$!59q zn_*ZAucYS3^->~D#<)8$IXf@ti=$&d@eGb8Z>`)O6HPykt1*tj#U@$m(@oe~$qzM) z9ffQsNKl#edCw$*U8|yIDMT7_n3|kjD?#It&0OPh+M>c(AG=qVd0Vx4*&4}WQVk^0 z!~}yt#F?9`v^`m;FtHcJtDC0xe4no+0@JdP6j%_LW>mDyXB&1}xAS%gl`KTh?g()e zDyA2La1{EhTtnJc@)zs3CM#~fmwZp-e}Ay($Z4`+EKDJMYS@~m$jrj*w&$~&wZE`p zJW@+@_w_7%pR@R2qrwFTt-Pe%_+lTJWjLTs>_-!}RuB)q1#-CRJO0H(W2qOJ0yR9? zcXywsWaMUMxCwP#|-`Zb70JH>JJZ z`aOTx8yclEZ7cZHjUmfwD=3zKB0_B0vTqE-r`9*KP&dTqG%(uNoGOF4mr~P0l72U@ z=Em#fa-iHUGUm~WL`0yP!vsb{=tK8y6G?J7Y7$ zU{B**A29mnNbEMjO1$CUh~*2M^G;>pCZC7`49L~h;EK5x`;07 zedUk2IQNoq=duP#it^LOQ{?!rvH66_wwDj|%o&N^FL7v$Z0dW_bi%W!+X!_9JV;&cbz`l`Sljv5aO2E ztaO4w+?8KoRpK2z0LQx@pi<*wVJtP?d(bEWQ7-!7E})pR-2FV8qiCmUblR5?NWSwB z+mzNEWI2Y*lG9<9bm#xC7SPA1!jYE5xOC*m#qs+De$%a$bC#8nl{IAd)fL|P>3W~q z;M8UJ&~;<>6)WP>ua= zpo>Oi)Iu#Gowp0Iy8FAEq*CJjj|yFCpS3jH+Iip|q`l`z3{?sabMDJ_zoiFBbYedr zgzvUibwlH)ABeyPP}G*?P*P>U z=RExPGlw35AdiHqYQwuY)oahFM4-e}qF7TdDEz+%hFae?PCrR;WM&?V>CI(!hui1^ z10(1@7tqsB+mX{S`8JSYL?D|auNx4d;7`2&D6ee58T?5jE>!tNcv$F{^JqPA5g*+% zG_5hvK62Mks}+=&f6K?`nWMj@KIUMw98CCOT!b|tGPcHkA?aicmF|NHR*qHf7bO|x zVaf220o{8DnD0$SMqBO3_lM^7@%|3pdl5kP@@Rb@3m2C{374QCqa6npCMO%=zxJz( zqW#0sCTG$@fs&MC7cBU3^7BKUtJN90zi0I5kvP$l=hWEi^vfVBVN`Y!yDvggD(AC9 zOlahq{_kgLYXZ-nR*V0w@qpKCgB4K!pDuN*SEV^LvO}NQ#P1|`2L5!QxBoU?<})5P zc6eA+gi1(wNW^6v4($sRpl7(pKKxJRkP_BLKrBnyJ4Zk)c_Bs&FmpDeex;*+@?p$j ztL_%atlP2MCfoIjA9ej+Gm-O=(_>^={r9xZOPGlPLI!VMWb}0Z&eB)8i4}iK_iX#$ z%U8rg;Y`6=Ilcsr11vzFT-61gpMGsxx^R61ef{Bwf2uE!-p4@q!Vo+2eHi-6(IZ)>*USI+b4yhM|hNh?8>m5>x*Eria z7Iw+Tt@5;5YH4VjB+-RcAFX(toRI4;|O@9hXhTj;QQGf;o+byDb;+O2VN%*;e} zC_N)8h~aVic3610=>B*2c}v()eloFw=tG_u8{5-tB`U#B!S(C0#|c_p*NKRbkVbRY zd8Mo_a1=jzJejbxLsh9fkUMde6A3p;YYWUz*qf@hM!J8c=tphUm0!AZK0d|x?MoAB zK|BXc=cC%}#2jW8z1r^jE=OC7<;O z{Gr?Hn3Kdr# z)a!@FDu{{rv%L7|%m0o4N|`$j3|?1B>QaZ$Z4Gyb{r zT|r>F=3v4_pmY%Gb6s@xsZez1>sET0pQ?mjkB3Sl69F+o-~C1yzY3Xko<05~@7VrU zO`W!UxLzwi6_Hx`xY&u~v1-+6@rEu(kkRYwa^0X~_TVE>R&0v%t8fs*Tq&#eT zUB263d`sTv>xZGYY$f-6Xqh?>MM_90t=pvC|NESDkemWbrZGpb?25_DP{#SRIC~3& zRpR9V1?6xZtem8*fY(4(YwT9?M%2V?EE&PW3NcP1B6 z+Ydkc&`Yz6E|zKZMn5wRcF|=EB{YTZ|NkoT+@AX@+*A6i4CUs+#1Uc%2vAXhL|ra= zsLsocVYQt5)DZS^MK0O1k*voGbQ>8KMTASge!!-adjnx)($)YLi z0u3rXzy$d#JaMW7wLw7j(Bw8+2$op~8a}-`rpk&PLSa$22K&2~l?JNmV_4ws(AN*C zwS^FK$$7wMkRjn33OY2KOLus%1llh|C^{_kFT%PDPC9JyTT=j6DH5#NMK6+_?@llf zWDlfb*h`g3(#g8W=AmcxW0BQg&q(3OIORq}{LbH^NtNR!Sf3#9Cj#Eb$^w;>*4MJA zmP;B4Kuk!8N!z>clo-vWdR=~oEjOt8cK7sgNmf`*6xP)LoL47nLZ}OBJav*;%gfDU zP-U6RDEzLbRy!9S{qTM%DJiK+;wSq)y>}qt*Rko>w-W8ZuL&T2-Xu#_)C%RxV$oKwu4mfm4r2OcAM$Ke>3ZZi(vu=>C zIP$Y%2((R@h)R>o7JglWjM&iLTzy^JU~9o6NpG|9YM*dGjVX=E8EMC#9NrKrAWMLFN<{e|nFsklg(8554h$mca=4pVe!q zMiVuxWKyV*ZekXN3sHWPOIs;{i9+&B~z%bGC6xTPLqI-bj5ow z)@AD_j<#D#U-NzaAm3Mlki(?)&(EdodcCf>zSNO6`9+`mhh09W;8IQlQqLJ zs(_RPWa7-#L*Oh^c#2xd%r3+R90UZoE5skN=PflFcCVWQkxZx9EOm7ttHY`gR{$N; zUDci#{VMnOCNrNZ0_7z-Jad$LoLLyuANQd@-dMorC(_8%2p;o=x{dQ^hrSnO_I7z( zl0;m9tCeXxg1csY zSAV3M>tu*92Qg7^PdeLzuMB|R6dRe|pj0pP2YDS&KLNA*EfUi5p}g{AQ7Cr0J7)69 z3exZgQ8m9ncA=)vdz{t*B&zRsD5GlqK9UY{Xi=V&igr`S+f^`CDn`)M zyhw6?!;42w<@Vy~m1_VCNBM`%7;1`IL=^Z`y%#m9sHV2+EZ>jBucE)i(1Y>Xzhl`1 zMi-8hdZIr3$_k4UzvU6dvub*(Lq&33>laWwITY;whvghNVu&iBwlv z8gYL{a))pXL>^CP)3vyL8G zj>XbAT6IRq3JI+O);`&ii%8pz12=clUG(!ruweov_NrZhA8Jpw4!zcDO2S3#9iWL690``36D^0WevuFLiK0s~Ss+olMZW%TMODGjfP`sp6?T9ESltdKYFY z{;9;4$~TUld3}9OkZ3lZqaq=$<`-m#mr&^C_B=W~TC>cF3GppSZ8_BLLDlY$ikc4f zL58+ySsW6D0RVcC)@50^z@jb^_33cb;cGNRGfqyh7kawV{EBL}gsi4=+xxWb;BJlw z{p)zFfY3=Ad1ua*=$aFh%s(^^TH~ z4eJRXIhUdG&VMQtrpDVRZ42La%MT-vy*;l;?=tvjmFAfQpgJS!g14+ zvmU6&Cjq*bj~RKfja|!TcT6kh=BDRj;)cgj13sJ&hrn>!#%n83$wNZr6jx*|TQO9a zD=I9rb1aAF4MPedgTyaz?Pjd9EOZJVN%cd>qFkspNB;cx zl`|z%vmO0~AQ4No2LG-#FxN+oV$jwF+u(1kuasHND08P(m6R77Pk8-U^$nJ|#K9L* zeRNX{1UPCFtbdX2WTqgB@9T%-lV3y#b-}e8t}Yw5s9=du=RU_qLlaA%7=DqcrVyGa zvXNwAJ-j*ZBx*VSVR|xmy-6LDN!aQBY$8{fNEovs&+M1GZ`xyobV5Zj>_GR;)4wWe zq`{>u5Cf_Akwq|$EGgG=xlYG(ZpFZOT`C%y(AYP7MLs`S{4SFPj#D5c6cmWL zZxmi_*!|%(cop&MuI^lb_SwkGKtB=5iyltJ%No0jYXQ0{QBi0Gkr^EW1A`>j5@K~t zqhM`lyp9E*6=sv#IXY-lKey!h43+a8goULbmd93hTDSks;Wx#5_ z_+ZeJO4(xO=HkvLY_O};mymI}#z^tt`^Y>MnbQvJRV^xJLSY?~_j6mrd@`UhX?m8X ztaY(Lb89T~@EI4Q!Gt1gnP8fMs7bicMhMTNLWU*%n4Yu4otY0-ol=7LSe zSf(X$K44+h3f}r_W|K43%wpiF|L%>^WmYt%St!4Ib(R}a=OW{B+<%j=&D^QXxY8Lq z#xaB0iD~OX(0SB4&zlx%b$gzcuFE_+##Z4)(n$Pp*bjt}Yirm*EGsYZE6MGg7hB;M z*ZZ@+L?TQ*y*2Gx7x|T>&JVKaifn1_hl{TI6PffpFtgz2f5nr`Hnl$ZeBE_=|cu<9h=q`O~$Yz1z@{RMr3hy}^a4@2oegLu9c65I*0!^Vg|W51)MR05qL zK?39XjFpA>V1z~FQDqR;7?+mzWjAs0FD8?nXCno8fU~|GNFD#dYQ`h6^L$XkIm%5I z74vh@b5ba*fy$?qgbv8s&H@v*&+g>#6)~}hzw^Lo0dOak%E;w~ z3dd7EQq)8IcGovJjF(u2~%I7*Dm^)KRd8>g~SKPf0UrAhDkeUg;y z*U9Cp5N1rQOKPAN;gqj$9*?0#KaG~j`niygDiO0s`Z$wo6sVn?PKFan<>}xZ>Rs8f z65|ilg2K^f1y~YXdg9`PN_Pa?1oC06r9N@Bxn3E6uJ`+Fnm((Gvb<;g`9q%BEf@N! ztQM@&-EX|jK=vzNhTY{zLzWX|I`qBNC;EL0p7Qx(vnxrT4#`xPvaqyAzb@R!5Pk-c zzIauXeL{KP)_>X%IRp?#0Q(ik%8{PoNm`oK>g)fYjdu?0B&IAQoC0|K@#D+j7+aC0|J5|gDz#D zliz;b&Ht;;>(#sWobppCaYb1V#m5bJ_bfmBIGCA759<-o&9;9b;hA+&*9ttNc(reJYUGTw;!R zylDK&1G5uQ!JGZAsK#?N>+3_m+&CLkG?_CP&QEIEp3R$sNA90v_jEy3GwQzVR3$CY z?^6ln=40jgWztQ9?AttaR@Mpqb^Y|WY3FD5-m~x~+tU@_w$1E%PRGyMBcbYEw9OID zdoyk^Kd`W{8F)*I=7m$%z_tM!@#YDjlT@HoEjCXIZ-8=z8b+7rj6Xqr_nG_FS$c?Gaw zzhQF9${CdJAz$<2Ize_KfQ3;`4;YSx1Ox;Cjy@@4)^9;_y~a-Y0@0u4sZGEmc`IS3XTn`SN@%}v*#Q>*c3T=HI*$<$tKHiQ z^x#p*l}TExCboSS8=zBT8O)n=JC-Rkhs;26@Ytuqy(~PUytr1hLH{aAl-VCYO9V>^Z)GOLt2_mVtiLlJm!pVhrp^7>=?*5n|2X&-x8u z%**)baV)Srk+<+wxvWPCjdC<+1k-%nCwYfNP3%#x#$SsK9PT*+t6_~yoPk_U-|!dh zvyeDCCtf!YW(o#^o9jD3(aX)vTZGgkyVQ$mt^uLPjN1mt5gy68zjK|c;~+iXngd|* zyW=~f4%cX9i}>%H35gGPr8JRb!*_7GXrOBErukqNWVTA zOo4(?;<9JSR$$!hvZ3xRAwS58L};R1k``eZ9jnMSL4u;|lwvc?@}|3+o{oMGp zsk{GkzrQRBFBDKOb5Y*E_IBeZ10EnF(Kz-30Pve^+6@NAvkS8khc9+6m(Cv0D)neG zs&)$dU89~&)B~*>QqNK3EsnI^Q5to`+ww;TSzzL5A!}RJUFA79h2E5!@v*F#))Mj; zEt)BQdWI2!#|hoSJ3^2t(qgsQxpqJBNreYC#YaTwFI-oM1d{0*=ezG@7poj)Waxvz zs4@uV<>gq^s7X^3ax>{7ByK~iq^y*u43^ZuXw7TzcD!9N)9(au7bS@%^itlDE<(iv z?OzqdRcqWg5e>`cr(_j@n6f;1VW-Jfu{SNLv`dAUP2bN8rO!?OM&$g^ZR{KI%mR_2 z4A=fwgmrd<-0Ta*1k($(DvLp-gls0m0Bwo;jQx)^M|UDou(49A4VM8!Vx4+LWqCE^ zm@=>mFyAJ<0`nZ!xjy}w%~U5TpwIdFu|OS68NvR6?)Uj$vl1TNB7!h=FCXDEveCS_ zN+b);yN+V6xBsgJn7cssXMX&UUq84m1w!re@D=NfcvcRx`TUh|P)8>5FW6qtZ*fM^hzP+iwW;w&IQcPE89teqqR9P}t@3_m{Nz$o$Gm>(8d zq%Drpop~56w6RuX;{KEKSZJu4Lrj>2)Vk6XHoMT4;uN!mMzRgIu))d|k75uQbW-#< z3JqSQdVN0~^;|Q;oSYof@4_D+CE>GJ?xa8#x0{p{<8wKhJs$+>I>Y>VuJp*rnyEgA zn&fl0o^@yUm@32DS$88i@%YNPyNbyl7zOg2L&fyj(oaz5Oysq$;bcNzsb4sdq=&2t=I;KOV0J?i`PH-J;3CN`rY@h zQ=U{T=V@dvCf7brAXt}hXTYl?{zTL$L=CC2=BNnl7L73RuR#)LZSkI=xZf3%xg5o~dZMK{PA2={y zgVHr~YX<)VsA|hjS}pbmAk8{hk`vbGtOo(Gzr0|*`NBMqN64QxuiXq0H!T?DE-h=V ztb_tV_aekeFu5Kiu6z=?2=)!Khb}|DRULUY*um#3b&3|g&c!~XlrQIVpGDK64gSGw z-Lh?}Jx5x8GW?RA^XT-)LYG@%5cF_^d~O9=b)bn&gk5FjLoR&PCh{EkQNesn%342E zzdjZ9u?1{)fn(gF{>M zrC)p9^KEY}F}2GQJ?^*uE@J^l2pXKgfSF_A{WgGi%;zaomGis80h4eePqP(yXZDoN zBk_2MAHG5oH7!j>Cho2!p=>P zw9NQxLC=Ytg5qk8E%=eJ{FJPOWP9AH`d#~^T9IM+<#c;%mfToAv&o`$FEQMLn*jT+ zDv>x6MCBen{^26UoZHS4w7$w4;BC9EMg#__gvypFX5Btk1i$N zwNq7EjQ_`(ppL$Ll9Uml?`+WUA*7Lq{xMR@`_#36Ep-oOJQBFDw6utL?Pvv)Kj`&W z!49P*JRVa^aC-i0;-~aeWVR#wAZM$LgsFr@Mr41+EjbIY`|&!m(M6v2faaOOv&Vm> zrGFtLf^4peCy#rdGsykZFg*HyNLV3;lwu>RsQ7JJMpm&k44HbW*yX*7BQGf={>ZkN z{=sls?Q!p$zXAlX*p!j>Oj2*Z<$aI-LOd@!yLE zBAQmf?fAc+aY@0u_wOtF=zsW>M}oh6{`15A{R1uU|9@Ia*nf%wMSZl=-W{d#j7$Rx zie8fu20n7l*IxqtFl597jld)IBK`MV9%zyurB!9dsM#W;6GD0;^nk_RSxuznB$u&p!QtRIsZ2F-G)AeA!3e7})NR|*EQ7xf(@FM>GgoEoKSss!ly!!|=vc1{ z$ZZ@FOO68PMNQPi14KSyrKSt6`)S)mQ3HhrUp;9sBP2VE;slBs2>)JY*^!7jH;xmf z5`KCh5`N#rxI8SYK*FCgl@us(bG~&uI!49+Mozvoo17T1({kB-99(baKDf_B{Ll=* ziM0txpDWhn)2Dc3uyxtdK;DV2D;^J$gr~?7@4wfB%LE7vB53LXLhnu4PT*GPm3sjG-lCJ?aetiJy}VW@i}o1ljs->c`8Q z#QY7mXYD#22{C?q?7&*8*#}cq zRTXZEVMJ+iu&c3soh+BHvpCxct0*ABZoCe_OQwm=I9G>k(XOp-5NS#ad}H8NBTQWh z?I2L)l8Wcyf5WhHbgxh&%5FOP?K1m^S+qr9ke^OU|9e%IEQLZez;1W~I2oY`()?Pj z4P5}d`j$K`cJu-m(E)NlR-5w88>Ug6FE`Q!6KoUm3XW$z05<6ehJ1y=->>u917r4!rGB-Z6#?4x#lQK%}3U^%G7S}NUq50+2y?G-xZ|#Gm zxcFBMplUZ6soic+?@&|u5s)z2q%I%<;bfp}+3n!zTG$N7lBZJnJTQAj2 zoE=5RA6`Rk%_b+)nOu{W$9#t8RFZhBS41#PcroUyFR9_T@MP^Whcz*0T#R_OJRW@w zMhnfrKkX60Zg23U=g-`U+68M=lnTT*E%(hPnPuhW0|I@YJ;P}FzHa&15eFeMGTSjF zJ7YLqCR#ys5byLCSl@aIKrdW~njhWD0rZw)L7MqYE&GgK`g2+@~@3+`w8<4}=wL3wbv*wWlU7qev4XMAZymdGC|F7+D_%dsX z1O%iSoBoqE;+y1kqqN>7^YAR#2V)JF$8AhrD8ndgTe)nZNjy9*J=22;mWACP+TeuW z;g-A`NzD=J7`u~k0`}&zU$){3Zo(A25)1qKdKluEw6s->&Z8Ot)$1E=L$qa)1(F?T z8AyrUFVaB6Hw*zd959)XinJW1$f`nm7Uft=jK__>!Ig;cp6{~&-Acz=4W0s0Hm?e; za4ksUh~coD0-i4Vh?O?v+y=H4Zw-UgsS8?*V@|1hi-RgZ0n47;ryzM}mWGEB|)Sqmjv}NyF$1bAzNES04 z=RbeipbwkymtD(F;~(lD-@;%^^ut?nu;Q~0T=lia3p?q~|7y8PnF40WR(_%%GKi&C zo-{k<_6d6R97ME1KIcPv`@O)E2u4Jn7UUA`kp_c!C%}Ett@ptF=lXwH9xRbWE?$3) z2OT(9+XO_CFf&jhp@m0qvOon{nR z=Qwn_9_T!OcM11dy5T21D|1(E44_J$ot>Xu5P5y%95!+E#o7RC$Ih)yG%GGP%rl+; zDpK?6mZ7%ves&slk*(@dq(VbgGr6okc#crMvT^AHZdim2r_5{Hr1|+P+b<|HoMcIt zm6b|Y^UY@kHp8Axa|@)fM-E|fW+ny({Vr@HD`%1Udiv%IL(?2?kCA>d646bhDQVu{ zHHSx5Z}2c8L9UT4tUpeSt(b(^U@}Jl0sJddJvKk$g$uy>h8&HzD-X4B>-rgtb=defI@TSW2}^@JumlfXJQFaeP!%lh-X0r`OrOx-3Cc z^#y%FA*~6p?TobO0nmvmj8|wumrc-D z5c!1rc6V7Z>DSrev2ld1nv=yP3AO%O=u|a^wApAyxE*>ffFz}kXnA_93^l3t0P%*C zITaU8HSjP;8;6Zej%UE*KIUa1Py9Dy9uzjlPrOVDt+jSU4AF`(Uly@IH&1ke>DG#^tJ+Giwmgf4a2cyEVa`=DytY zlp!AtYdK#(3Y_=%%*TG-qf;TQrkG@Iae0Hiy?8)m0(@#Fgg2XG_D;op+%L?*KnF-e zkUZk<+40U&_nAef#+5dMWW$S@YB&T-iegq84$lXD?A&zk7xR&Ab{D1ciutjzuJpQ5 z@6sLatBN0UynwYk>tpaN+}ny1r^~@sgdXd08!3keT;z5gKMtV51R7`iB#nJD9OZ~7 zXO2xpa&C{a!^`{#qD!2lQR{g3D&JuGnkmH#zpSc`V+qE0i>2T>#@QvTl4`dCF8VwNqcI8SFZ`BA6h7Y_>&DikT zAVqY9)X1`@<)`Y{2ET57?SRYf^+UQRWq^a_SmTVDBTh%bjYB(Zcm7o zpknFi`tP*~PB5ZqwHP^p$S`|Sy6ovxYy{F#90BH#8M+qM@+E1)y`K}qIx2$e`WxV( z(9#;=YPz;?yn+`LCQc&rC*H`LWyf#+GF2EBSCDG{hr@o)lV!$e z*aWp;nSs8Ra5y0^%JDW68a|!O#p8J{JnX(OuahrViPY0(6gDv>%I<03@{a1$68SU< zC7vlwF}?d74;zb2)zlkDCoh7?3p7;B^M?RY2M^zG29uLg6oW&zWvWX0Lcb7<Z({@%K88@d%Im+j=!4O-R~_wUqO&)&H4 zy?J-yi91tngH*!jIFZnB(@4c4>=~9RXVA6SN3|oH`NFN?%ViuF*}Rg5sp;Nwxd$$* zB{_~@?82lHf$~ChkkPM7#tK-HZ|CW+M{g~Xmk@ng-?ex~8h^G>n)4^173<{rm4~y5t zCEc$%0EJu7f98jp|5`{iL_O=VQUbdeL^v41r(LaaO)L8GQ(ELLvb zR%%ILGCKyCe9>@RDSxQ3YJeuYAAh_AUTE?;TORkJf;v6WTeza2^l5e5d#wGmLlu_F zB%qzWzpid>1Y!st!r^7#K7_%~ac`%UfCY5hvKFPDB88T$ZoYPpitDx@bMDRTckejs z{0;|W^8t>_Pz2YB8M+m@q8kz>kATjsgZN{)pp`6T)GG=Qox6vC&^ac7MDshe~Zr$Pk4xaS_;D!f$*C{bnq6RdS0Y0JI!1)8tT* z(7CQGI4u}6aGAf+uY|A0IL}_DyZlc)^Oy&q1p-OO1j0a>3!k-{%SvCw3w}#n$CdVp z%HH+gz5I&gp&7q?#}R=7p;i+U;l`I$+_?TynNpXqyPXZfSrExY~eaRvq#3rCaSHJFj}J45FTI z;P}scQ{w*wo?{8q7@7tXNomXt8oN_2v2`m5a@@Oy2ct+w+rNP0WniMcH`5Id4S!2U z#KmCD)rE~*-8{a!n>0H+v>1(FRZ`C^rzdzsUXCl9U3)jE#%tW5eIJn56pWYWdn?d) z9M_6wmXJJMtecO4I4X$K_lp%|*eTCU=oR;b+BjQC4EfbOTP_#DF&9nPNJ%YP#s{Vg zw#iA7aw3BDM*QbBiq9bQXlru|_!TKkwv~S86|I7#2nwy8w##oM&TZ|5EsL?b;1jHar76`nyPC~CWsoXH-fm9RlIt284 zGd*ojxleO*Zr&CE(FE_^YjlV(=$>S~3DA*5obP$!L`B2WU#cd)j{(U9kl!~RFPI%f zJ%Vx+kit9;F48nih3J4)D_%q3d;GXZklW*Ua$bHQBogwrh|wSZ@xdSC4Y3xDpGhur zk>$^muYYkU-k2XGEDILxdE3oj9Cjn+UEz(bl=!bGhIZb|0$pD8@>XdCp+9NuJ{J9H zJf+DsdD1r)O?CCe$(YHUKbsj5L}>RX?~m@1+ox#dW#*O?y|JzBsbiUMwtAURVkidIadx7miG7krRG@fSGfj|b@Scdi{18y z8vjpy>54n>kr`qvxjAQL{cUe6oo0OSOS0k6s5i)e26~iSe4LCHHNf=POE?u`mmmT1 z1;n?Pv!?yxXM8z9!o=F#sWj%#kDvp}xf30}15lE{PNGA=PtjH#=ZhD=DIfTXe9hT;B(-AD*Gkx}@uSjMT;5A-<_GXTD=XsX> zzkrizdIsx_(#0Tl%iNv9rB0rxA#wP4cjPeITop%c-wNfj+PcdYA=d3_+6C%64^x`D z2uC-iC|Qr^JF9XbD%)sqitIYoN!^jq9c2m1MdUL~EE!OmOok8j!lEROPJpZ0{T1^J zA&I@#T2f4+Y^9C*TFerEsABXDY}J9Jk}C#x4hL_o>ZyWjW4^1)bzh6 #XhSjYji zQhp?e%pFQ%!ukwxPmdp4(QhuW){fR`b&1Ynx3yh~7Clyy$QXwr!Oz;GaFGxbLt&Qo zfWI3gAf;&eT&PNQogW-NxWFS$lPL9@sb*5Ap%sNY2R&4U(kTJ{$047FhDJxdo(~`2 z7Qq-~5<-+DGKoN3YTB6Jr)nXUVxq>@TI0a4xZHR)>LjFV_Lwma2h?F#m-oCf_6K*5 zfzDdO$hgd=v(4VDPHLK(=97Q)l=hV|oMQiMx*JhE;KR>z2g{w^4G#sj-f1Q$vbyZt zKTY(!3r4#b{6sl}Ayk+iRfVExF+#wLsq>tbjg614SS&L{{JgS3@uS9KCE>~B13l4g z?fpWvXc^;NzTFSdc}B(LM%z-fAjAX1I1LT1YziwAv;WTJx;Bw@w0u2q_4#CMP-VtdQ>y zi~MotGQQ_(Yg5tF2iaj<5p5BJQUmi_$5x$thbk*sgZ<=bcKgM-45Kg*#{=ViM?Dmo z)q!<1e(TXzz$KC%82#uvti_p=OQTgwo7xJzomMz+;E)XS-=F$3)49U1lXBYPey*wa zkw-)lZBWx`YB$QLqKy7V%y3scuq0Y*j)OH>KubcAm=NRf9CYtTMyJ0nk@+-ekYgBg z(T)8-Qda(ktYUy0{~WY-rmvwA%=O$nd=2f-iQyJJ8&9;=Jn8bo{kw>YH+)rxewhub3w=} z*Z;u#!iy031XTwCaMyUP_i6;)Wr5k4YlI1~^^&WCAShA$m)3)eC#~jxm zG7}j_K9SI5iWYifMSTr@PWtQmo%bA{g)_zC!s8k7F)$erg$V*yhSwgdC1ykH!w=%E zA`;mavmB#A8;Zvr;yW@zRs$5z!#XGZ3d)M;ts6_n4$omcjb$GHXW% zalG}Sva)inU@}JYG+i3EZI1e5di(Qd(WQ)3X;uKVIUX40BGdi9H+GZrM2r-W8ck++5=?*L>|fkhzOaelO{3|%kW42}txE;;4u%pyKke1}4u!3~6uHvPEv!O+4jTdpdgz7>p5uc9Xd}S98e_(d)FT*DWAi^saH( zv_yS?Peg@u1c8}pYWLe6AVvxkWd}-?=4DS+$a9ZXPZm+r(UFk>{q^L%6UtM3#Sfgj zm7NmpRvdRTLn|O-D-_N$UU@!9HUJFYR?+%VzOODdyD?sCDVL6IF*<}PFMap~J{rfD z<&=;=A6>+Y33y~BAB5DY&}i0BoDH!RAD9-alnThloZwoCh`_qzP(E~>FL4Kt&WjZb znNdDp4zPkL(Z%N21xN$kN)(ZPyq5tmJBqgNr60<5-4rwHeAKn;IE~49W}4{$;q|jM zQA@X|gvPj)LOZh8@ArDHPyv=hOf*Tk6xpuDWE2Mk8vVwvSly%rs z480%+6zMG-0%An?-MqC;`D(@pMIQxP))-Gp_y;fz@o%YJS%A9IhTp48iGl#|H0VDn zG(|pER1l=Dma7JM+Hl#qQ&4rP1H9SP zuMQ_s?^)a)UV~`jyQfhEBj5Us@ChyKi9N~f^7MHPl3#`kUNdh*ezorOZzag+wr-#9 z^WQzqTsPTZU#tzh-h0)kz3RA|pGGsGE0B)Z`C)uPB;Di9BrwF_ zuoNwn7;XSfOO-*HcGDC)xH{jCN$ z1c8LET+5-iNHKn+5dw^TiPaaDpaZG66I!gG?4PF5?rFM!(9BH6Fpxx=9vwv-3@Y$ z;?}Q4-w`JB!Kg@h%)Wf*DONmeX|h-8oKDdObWj>mj{6AqVMyBZ3NgeqG}4lxKJ7|v z&7$uq=Vem4%lNOhfowzYz^~v;`n!I^@?%MCEc!y7H9uz`YnpHk78x1o0F~SgxumeM z8_>BiZ*`#MjzK|_oQ=`B3ph5@ulP8H7JG{gHC!wit%W>guV6m8l>KB@|7ii^PajM@FGW@c3YOc%u zxX&Dh=;cY6_AWjn-HCUC>$5dMkWRjH#NefjSJriy-P2AWB3H-8>|12mC(=oVxyh`v>YkB_ zal7eROsh1Y%?I9zO6*x0rp3_Kx!)C zKk$bQ&^ZI@M?gsJ;PYZ&V3?+!t9qVQ(a}ze8h@6h*K0jip78!BDTo;r`eo%jtYx1qi>I*T<8&&B}u_YJ?;8 z6Fqb}A{M0X(sGKb_>87(o*n-t9p-r_Dy(}9=K|+pt0=4DK;u1XMDGvsv-Q-|lYe9M zB6MfXCrn*L%mNOeuR%SIW;QB~P;!VfKZ0{a>vQB2mu{Onm-|ptspPO0@7EQ=YlU0$ z#|C#axJNv%t4We#TFbyN0^r)JEo#(idh}NO5d;AEpiZsxH1d%1CkMz0?N%^s6NAcG zsgYsz3X;)J16E1PpIZgMei#VWe9qLWEPIddI z`w1?kyD?e$wvC5~+!q7glpJx7-2D^id|?i&p(if!&qlGE7rK0Q5o!kl7&82kEzMsy z>}bOHi=GaBNpm&XPdMlokjUl+m&!5)*SpbH&GPX0le7d*NA{zm5NZOp^j0fgD;p3a zJJCa<#biGOsP!Q3Fghtp;>fp|We2jq{@5QVA(|ilrdb00&A5qah4XhquOXn7y+=HD zycs+m3=Or>Nz9kP3+&yVZwox zQ(QSX3i$f%Lb(F=El`FIA~t@;diz_qaQ&EoVj$Zhyhxd(HKiy8JqSZ<5tb2P1Sr_hQC=>|anh?Xf}) z0pNs;7SI8zx7m^^qR+Z{xs~FZ_3$f`1xT}cuG8tEfViQf0f=)zo`&hK8e8t@CK3Nd z5`0PyG~|qzw+4Te7%^0-&9%H>6%_4^lu((|0ouq$fd_@bvHM^=Hv`i z?A+**k&=p}|KuU_)BqOr42zfp10o;gs1=(p`k5_qpuAsL^g^B9 z$99GygFn*0pZ~Xlk^k*b{x>ZOz=A-@4fooj6_Xc9O7@G1eIblh6%lFrkcyd%726?8 z{guHp_D;IUSs`{RE;7m>>?w_21)&~zx^5MY0nwD=-f?F@3`Z3wDg-a=!!K*Z= zkK*knm`N%~){3|sl4*$D%6w7F)r;WRz%Gy@4<3(W*jJv}-Ea0JG-&-NSC5=XE9)iH zmLxh%Sj<i)^`3XNN(7{No06L#>I%s3O32V(h#c2 zfOk_-R*Ck3N8lv{Tl^aNn_DQ?CMG5Zyd(b9G_w;p~M4r-T&vm9k*{j<4y-v#V6*^ggw{z%fiai{uI}F)K!Y5MJ@W< z;pu6ss&7}u)E0!q*WC$RpQjG8QuMwM>JFT@eUP#=i=@$v2&)~ zBmApGa$NY`(}g*P?DG0!RI>X+ZS^(a~(L|T1Oka!rn`4>>*4)lMoO{>G0P< zIKW^>rMIn|CWc7Qn~@jUj=Ny%KA@zfBfwn+8+gUbmK)HOduu-IIpUJD;%4M4OUjGr zFl^iR8?W5Fe$AV6#_-Rjya|c1{3Tx-Yj6&3lZk9_^p71v}4MA%Gbf$oe ze;ObGX>}X;kv0FiHkmE7yvGKovLu!McXucyn90E8Q)Q-i8g6}^wo`*C-?vnW%&wP;_tqx0j6OIxe^#e3++KV6?%T({zlzusG6Km^ftwyqTK z2B`XnDs)lrC{pn4w+34)83DVJG2@${icYuQ)w^mVN5ik|ge$L4Ru0j23A2jI)?Exc z(-6trkPb8COZQ*5ui~4B=aA+TG*nm}^b3|b>r`Fb8b7yyLVZLp#a&# z4UcuFgK%l4nj*UukJ-j!6SMPYVdSgm`?0UpBBfzLv~-O&e#07f+sb8@n|F&ym|>xC z;$xqczF_J70wRbx&pL7GkRtWO(4O28Sy_*)NCgIzR8m}A7Wvq?=$rL;G1K0epJ=3< zp1a^ttJMgOX>3SE8s?VG%K2TnFts_gH6k1C-G6~SE2+c=A2mT&(^mDQot-w%a2{0{ zv{&!c7J+ov{-G)$Q38j~kLUCK>22fBUD>{K<(#>|TQ4X})Lif=6i=y0V18}$MseI( z`BpMm(saZ;A69nzU{Mj28&DM>wY%UFU+U!>6G}T_)<-UOuE;3=J5gVtbSrm`dT!ziCKGw!&(`f2dB)v71S@Mua1RqlJGac2(g{#!n5)8&3H z9@;1FYrlwV&I_XzRShu4))bjOG#`xuAi?&Kbo1r0%kkva^~uXcEnT^$NOz1-j zm1`+Y>^q}grwSV4;QY42gRXM$B|mm=vKMNC>DJjol^s2?+`oySKbVBV)e zlMAUC6x`6|x;YU{eh;hB9n4g<@roD`+MnvV1<0Y5B~mh0`e8${1id}ure(v|2(gZ2 zYCR9IYY~$Qg10FsXqK%FJNY6Kxb{S>4)eZFOW!X>u|9{nN1{-f@a7q%nP&0k_EJj9 zf8pnc=G@*0Nnow7;`M$(m~k_md06by=7bV{30cl0wS}3CgX44C*988GcoC7 ziJ2GtLrEru)G=6W{`vCeb%Dff=|!Cx=JgBJ#jLO7o5y+-eWuh z$S(yEyc{T)3PHd0(vbVLvwx@2Q8^bG94Q_aWFKgy)$;78`&m&UhS^X9d4}%1{1ibM ze4YIgp;<-pXOgY`{e4ckFDq+jv;ho`2)t5d`2zn%Utb0o-S%o(>+UFu?B6CAfZv`~ zL@e1SCh#f!+<&3@@m74#!iaw$qo;+#chX@j5!3(F4lWyWoDYkYUzzoUTV+rBWR#sUFXuK!w;i$%7Xvti9^^Xd;?loc?9Is63%=w_MzB89E}8s~fQoh&c!h z#Jr@+Qv->zT59_X_Z^HCy9*>ea7<XL41HIzIFFH zt=W$1&fH=FL)wUAcBYiZLcx47;~0>WUd!r$GMBox=0KC+!bH3le4=c_NKb-#b+&KW1>J>&SDJ!|;+BLuzm$`Qhn}5XSh{up-npah z7|?K>Jlr%mhJM06EW_TkA|!A)bIr`8KY^rk(eI-4auVbnKVzcEchza|9fNU&xNZLk z_4M?Rj)@)Pu0^2VQRF)Zl}A=W%Jb^xC+^F;M+g?%G(!etoRezlJ)NG>741CIKJc&@ zGmD{amcT;z4Yv%p%bi_3cDATkb@Ni*$D>hs_%_fLX03%ns7QC#9p%RvNi(A$<$KrRn(-YKv_;ulatJM|WpW+Z| z3kf2^>-7nFNA9jzMYGZg_cB1ch?%fp$DT7KE1Gh?iq{J&%d}*+#@ewK=R68;ZP8b! zYkM#~JrN~7?qX`Ztv%l4>(vc4j_#=H(;*cXHW|^&Kw$2H`Zlgg`a(1t){$8+N%*Pr?qngns(cI~chi;cpVCX2>TK^Se5lZm#=ulFY-i0d=-W6B0EJFpxr84*c$ z2~@j_D1-@)+g^s3`S1jeT*7TpC5EQY_k7wsURGYTF+{~(KtghY8@NW$Tr!M79Awf; zW#M>j%H&v4T~`mM?ZxqKOX8g36EzP}S?*H78>WaCY%LcN?JyT zMyx)%jU?85}01JHLWeptj1VXOQB7% zONpbO#?B3VokdXo`*>zJ{Ow!gm=%G(9OPiEP~MLt40k%$C&1Bsj1VzlnlUqyNv_xk z5s=%32g!*B85LX%gGoEd4-!r2Gt+pqtUiejs0DV4O}L;xiH?Z*RM`rml0v$LRm%%@ ze?X~{#XE;uF;=I9vu7=79XCz50F_r8K*O!jxfE`$qejPBFXE%(%4T*a0f5y|x&$=j zrwHjM62@Pj@xmRzsvP;GfneS~<o%Gade_05o z3B#=muiB6)y0Cm*+Bc6ioChDr4)!EPf`fwSbB&j2By)X>4Tv=%n1#WpmR3_qC zYs=!?zh3ybbviTA?vmK*Dlm>S_+wgm2ok*{?*0>y+fObwo?JyN-K<=^#A3YS>3)5G zpxJQAVKQY#(&9$NF7ob**5}bcqTtfz5yS79ZVKL&xFwrLl%HV*S+2BB!A#&TyVEDe zYE-OrK3J*`9TNL@AO-|f@n4Z$UxOqzc`=5%y8I0o7(*t!(1$LAjF_Y#Q@ORF4hg-# zG74ThBeDy8zilM{C@805ea6K{m7G)bYpON*Mldc0TlH7hD-EGlJ#IU5>v?i*JiqKj!ouQO5BG7Gz^2zl2y)A&n2W9m z$2qsnOMuJOce$oe*dWl9m|_FKoKdx?s}Tz(JeOh!*P!y!C^oHLA!)6-K4pPk8bvFOrW zs_ANu&F3nD#2r0L`Lltc^Nx)4jr}jMK6r7$bBRB_)#r(vrzAhw@y4B(Tbg}f^sF^e zfrM0NwF-r{I}0P{Wa)=&TBUaW%rQ^B3|Jr_mKHnOd^Th4|J<9s>c|{&)`~h-l3wQ1 zNIA5!D3ZVP&@^6!!e4G+AfU)8^I2s&D$^$OkuAGqFh%w28-{GZsPwcq`wXRZzC}zI z2vHlaN=32M!VA?~)2dQ}m9(jbh84ei{t)pJ>%WH1Ai1{o=~=S9QG3^(~CZh7TS`LdOn%8FdOTV!=G z!VQ*{rCFXaR(?;A`z^iidm9e{*KJbLCJ*q+T_mAS)BB1QfH~s$u;x^ev`bq}9yvxo zzZf6c+ap{yJV!br*01~UkJK!O4a6T zoE2j($B!V;)wu!nZN{4CHcfh+#j)F%BrTivk@-TW*TWYI)56tXBd?tZ2L=bJcclrJ zyaCk9^$(V2soB2Ll*jGj#G@(2ObS&^kF$=`$;$HOv7`=sd(!cU#TxzC*#$mJc&h2b zKpnAv=~||I`O=CEc2x?uqQT0x;)XF|TD?;Xlj!`jqYj};bnqqk7*j_MYWDD+(xhDw1rA6Pibh@ClZ`= zogN-u%#R+lRO!fkjRB3)m-6>XMutYMEm&^G_1@{Zmw{HMkbS#8T8x2fs*vN&mw(^! zxiX>hbdRX3fma8aI?9dbQ`K4>x?_X7pR+38-$YgygFWQIFIx!y*q z`rri2o-d;*?~RB~TtxO4fhhF#8!WvD+-ZiVvAfGy5Fq5q7%b01*sv(mW7%W1R^1U# zZf1A$9_}TGPmEij-t+3Q}k#MK@h*|p9{RcMpxQc+S6lf3UcxLQ*sr=%1T z7Kz^_5#d1G(1&k%%P%SFIaQVzBdx{zy!tSPd)R9#c}U#u!R>eouL!F&6@y=HmBM?=*5Yyocm4g#3Mav-p-l79H+6qFhEZR8K?2&4d+Q53Fo`xbeFFv z`n9|kJrm-8%VvDHBC#a^0-VQ15zWX}w&Ggjy0z%j+EiC(G8h@R+;lB=n)510>zf%9GxIWxo!^K8O)umk{R2gY2x^^< z+N+O9uX1_EZa{^MzC9ioyX(E;EIFAqKkE@I+TuC6M4sF%>iuIS?sR$;1Ty$7xxuEPc6B9eq5jEk!0_^xI!_ZMQsIqZZjUIe5_M z(I2=CPcGR1y;3UbwDNlL-`Dmo$`qU9j;h_)Gw6fF`{=km!JH8VS9ksX;RPS?DieWu zwUp=wW%9L;{qN8q7A+qXv=!2Qf`hzx{y9d8vbWGkDEO$(`|FN?;RY2<7J03#ti#Fd z-?L1Ke*O+%x?`e##zqH;BT<NG9b4;}7ZJASV#L4+$F>_m+QVE#fva&&_-`j)Q2=Puj z|J@T2U^)|1h0M2MlV6WdFuIubL3;QyP599vXmrfnO6Qg)=bEsTAMS4d0dteH+rnm` z^bU6O3G=nbe530f?0sjXaGG60t-;nItaM5VSU8C(WwxbckyoslQl074T z&l;VNy+m*AEm8p*=ni(-+=+A%4YIu|*my)K`jk%w_s=i*#_)lNh(DG(FNObaMEj`& zRKWXAWy-(D3T(C@jwPk^Yb;fR5DX=Z&j;xw;?w}nh<{!xP!9~@p-jqE33jl6mW|P( z)D}~tgyFUh_3gRRnG8xk=8^Ch;js3wa5zlkD;ObuzV|{x!Y!kdr{5=IW}2BUdaK4K z2dk)SsV}G_sOgavE_hBw-ow1wQh4`Dk3HVrxp8@=D&WVrjI0t5-si^?&Wppr!};?= zt_x42w14Uhn7@=a#@CWH9=HBe3qUvb0y*@O@<1i1qLG(Tpr)Y^JVy0*V<@OJ=v-Wq zC=`ws{UPM;)o&O%;FFc*TihM_g9IKPo~g8;;DKbu1B=jY@IiOS-Y6&0vyO+SdN z{FMI!i;wkdz({MdL=h}l(1l6V5xc~t{@whN0`Ll{qMy7O@tm_cfOVNh-munUni=)q zZ{xr$&HVcn)Q9W;8fU*P{!cr@4*7rCgrT5%x&P~-{r~yK<)+Z#xd=vP=4PXRe(`X_ zx-?C^l9jv&xjm^Q%{r>smO4${qUE~6Q)>1+RUOVnheq7j;Cns_BO@emspl45xgLA< zw>bhn-?sS@nSD%8!dY0>C;mjiFgm(uG!dC7RcRB#Hn%YWUwnhRSF(DUwur$Q!zbB)Z%^#PWMhnCjmmw|m__x+S@o zABINr$D8_MxLm2!&~TTk%^q80SaH}h^DsZ`rd^ZDTx;UJqmF6orMJ2Ly3iIVUQe|y zlcvp6(0b)xQ?*q z^zbqn-8UI|cq4U*Xk8#m+qBV<_OsvlPC`|kcZjC#Xo>}9m8HCbK%sWrC z?hExsvp%c1lUB+ITednKf-zptV;IsmTq5?=2l~iJ!s0xuOQ96Zc^&aE#=`Kl9O8BYq$Wp-nj#kMhux>#k5>#CaW9ktHDE_4$mHB;Y z>6z=8SoLBJEdMMw(^0WnTDlxO@Me<^H6|xO4oiPzvr?-W)wnG8|57yfr_jrs3CDl4 z_zufXcaY7f>`A-USM{;#$j&$6kwGwKy>AGOes2!dG*c79stJqO$h4V`7Gh_+Ztpt; z>u#4lQ#OAl8}nT_ms)EJ3o`Y=x|+D>@V?15Yo-i=3p0Hr%3FP*$H0%q=2Uq_7nTpb? z&AWt7#)lpsu`Mpi3Irv(nz~j(C@JBfP0nIs3XbwJ3p)qshWjacf2zdp_-nw*QB5*@ z%M1AXm(kIuG3StW!Hnf0D3jz(6OMQLi`E*Q3(Y#&@#Ki_BBgFfi6vDaGIsr1m7`XE(FTH$|R*=9d1+kIFQ#tQFISTW^;C z+f-SJoH8;7SVkG43WTP7C}ETlrOT|$wIz$F4;#U)FbPxpHlr{z?gdkAyz)Sj5{Q;q zaC+@_CzaFFpI-NgG@n-IR&jO?S_{eech!kHanJ?IFpQO}v5j@v{lk)g=5r9iHl@A`!8hg`*R4&?t?>zqmKo*A*PKlJ z)y-ay;jNiWjq~vE{aN~p53m_BUBdb#Fv|by*tk&5u=x}PX`oHa=+yo_w)Bxi9oOzZ zN7B61*>gkQhfCf!n+X*5xNR_L7YQr%G>ImcY;^C)L|>DHG;-0z#s4IouBx3bddse~ z0CBxeHYKn$ljZu<*hlfvQj)CtS!bHX%36d<%?SL9(Y<474QDHqZQKBbgfpC!`$n zb5*SGMb)JxrIGI`zZqwl3B+!(e{==67OcSE6Dcr+l0IrQS64JI`j(yLTdLM9@6`0C z=2r5nKPvAH6FqyanU66F97AI5NWc-V$Hu{$N#4rx+(GA-WZc!NP+$PrQfu8&)2!uu z3-)nbxF2bWHuFS}PHox6r*VM@Jk*36x}-hx{E@M`)TfCngJKVhT-C@FBn-}B_0@%i z{;K+wL2PY9`M^&!6wL9)d#1TGt=atZVka_Auw!N`bFZ%XO^*1Eh5bhAR+rgB%0U^ShJL)GdBHiR5hAd*@I?vCx zmS4Wh4Zg(msBxI;@Na(B9#HUgDu>+fOL5p2*mI)tqIxo0ch12z`&0am4Gu`faepbVTd4!NA>Lr(>qIQ%VViPTdrkJ%pH3Np=ht>2r znp&MIoBMWqHIdP}Y<_XShLSmw-?#q4%o6Zvl&%H^l=l6$a3p-4a)$Eq3YLc&;F2N! z_k}rsF;$h9_vG0u}$c~uyl4F#@< zMdo=cZ4K{?abGf_sS0lK8);>$@Pj)6?Z0oEwCp(MT2gkuY?411mkLK$zw>?t-Ad+r z*U?99Z0{U&XJK|5GProgpv7WAF(p)GNf6KQfgRxeUv_}^wFV|yYpKo7v|wvKTa_wG z_V}uQvEs{C9r+?R?!Tj6Mj_J_79NeZ4y1cekVWP%i{$U;6n^#Xf8ZxS-Tx~|;X5W; z{pb7OzsCRJpltpRDdqoR<#RGX%lxlkX@@^8_L&fzW@FCbxEuWh1TFSWbTsV@7@M5|2)*hQF>O0pZ zBnQ;0H#g^hkIx_eDnotC=hYIYf#G>j2BOcUN0T+2D}KO-7(mG(zC`-g(^0+@6x1S$ zS}J`z$?bRsaa4B|(Wom>8`MGJBs*AGJ41ZSMsA;3kJO4n;gVo#VPvw>l{fOC-usC| znZL&$%8qK?&0)5dlPR;Lvd#m6f?_qZW4f4@MEzxKR>@-hOF#-Wh$3TWcZ?%J4aFiE+86y zg}3t^SsEOm!D5(~ocT6W?LAY+Vzd*kdo;ZeWS!HqRy6)Hrc|jl`)zq_TwVC~Z8T98 z)25XaiYL?riwI>=KZ-3}t5CX7`btqr4K)pObe*jKlq##K!Q|9Z+7nF;os{g*SEwQ6 zO9zraBvh1?4X#dk`+|M=weJgcu(0;W37z(#`A-`w#-qkF4O(`sZ|1w+%xRPnAU#aq z1wQjA9&})+^7xhDJ zCYs9zwxm1|-}@FJ)fCLs8+&7Fd#0uwawScTO=a=A(^xv*CAXtMcCFi{;f1#xX1908 z`IGY_V{&T=sD{?{&z5#`PT!e^7v|*b9&br; zmZON9g8a+73)lI+J81&Dwav?`t2iYR68*lZi?znsbnFcE!u&XS{4rLGt<7=y@~X%< z2Rf3?ahmzxg{C%OWhTU2>?g>nesMUSD5rju?Ztc$j!|Q!$N!#$wCagPK)F1%lszyz zDJjP5NI}Rpv$s_iliAVA1M;{Gt!?_kEMplyY;V`(^7<;f%IU+=qz756fHg!{@O3|^S zI;T!9Ef%k*jep`EF(W^FULB5o2^MH_cPeb7JzD0vbIOf7c+w^_VKrTPkI5x?kz0^c zAQzN(|Mr*`L%g8R1w2J*;VSiM;YtZHrxlL113kOnC@F|)%lvc0#2m}QX-{T-E_|A0 zMV(Ct&;>kR4pQDv6}-U4jjec&*f?`OR=g2w)m4&V z{*m?bXUO{=q?Bx%9An=2qU$DaR+7W{)RdAI{DZoaAN&8Q1t2fBxFyfWDHR&h)tVX$ zq*LzcP(qtTg7r63xPNS4>ZuF-l48`j-^j{f5m&uHQ)kf^wAN&GEO|PNBcpV6(73yt%A36V`~NfcIAiadQx{xx72VaVYppfsBXhEUvrr-?QdkJ6 zfx7OloSaY&8fV{+)viq$mAyW6X}XsY02~21hM}O$7v@C8gs<8%_t8jc&S|Z)^CJ%oT zLV96;sqyG+vxr=KR6AA(+d;?s3CM@SJtj1$Lz1ErDY%$dv)F~dnWd1%%Pph#;}E9R zRE5-h%BR_&jV-KE`EaxAI-2O1Vy>M12o7Cj)|wPQL8^Jx^ui3#k(xT92o z$6k?Ctvvr%`~}bDx2Phs9C&|Yf~@r)px$F+thSb-b}aI7J0u`xWoj* zN#>o#z~>}#mJR0*zbK28Ex8~J3tp=9D^?{;T4MjC`MVI*vnE=(<+7> zU%zFNW)~tFDn4_@WYXZb6=s*qG!r+uR@Byn#$dBi6&e({i}SFjl_5l8kc_q{x|nQ^ zk-77_y-i2zxWL|*GTWmoP@tt$aJoxF9!JUPB-wwhAGBexMNLD~?NH5ZH!MbE-SIh$ zT`a9O71|6}{|!yk9QH0L*DXBJMR~}V$ymD#k?1Zsg}vyewfL;Ez&tMH9jm3Ol;;iz zhk2|5`6MWK0M%48J{1t7f=w{kPNFe)dDBhA6rY7N2BM0+vZ)~1@1}YRQi`oY+y%Qw zQ(~`U^%xYeFT4yXaDga$DubKGUFni0hQCa4n6a(guP7p8V*T7sC>-o*Ql_HKAmdOa z5xft4`B{-fmOYhJu;Qd&E!S`u3@n1Z8!?L6p3Ru}N(~@;tn8u=F~wj9Z;DM3zWQW{ zQ{s4X;cR1W>`mLFQuh5@z8x3n^jts{+J1iPCNgr!z?CA7?vqMEU_;bG+d0XppKq+N zA8m*RpJIg(aWXo^D^Af=W^q?;1rs-670-1H$Os9oq&3M*a(}=&hno+mkwkwH)a$Owa!D+baBx^ z2}ZSyzcIyQ+jlv$53R#Vex%r5XpX@rx10x?|4%t zl6fXTMn5;&$txL7_9mckiyDqTgqe2G0FE(@*cD@hNk!Ed57?mhp7c%Tx@o$nn%(UH zF-Zi+H^1QHomB%88|sf$?;F(Y$3MA3izsFFK~r*tU$H=9VLY#o52f%-zGlb8M#@9r zp5f)12OAx#D1JPYM3uwB(tjxm;-bM%G%1hbRD&J&_R$(qN???e7pMz<26o`js_dUM z&ZBtXw0KPLd;P|9425;w!x}Xo7hGe-T^*5Ohp`VD`di{7BwYS|5o{zFtHhjkkPQOZ zu^r^FgJPn|syJT)333VYn@ zyZGC3bt|)D8Q>8mEiEl2C6A3gX#!Wtwce3e1)_ynQ4q7)Duub!`?@dlf@9wze$>?) zp^rmE^N6(u$A9XLVh9H3dloJ?$(Z4psH&+Xob4Tc8}0n*5IYW7mAnee%ilaZtu*cL z8*to*iOprK3D0&=bPD8qTy(YR2^ov40^8`>i#Z4f$A{K)>R~BOULpxp&KWG)GyjyN zl%?XhsL+zC$VgIY&RU0XdXb5DlnUE>7HO%8)X)oXs;}wieR)lHBCrta{`zbgShBX{ z_f~765s;n#EnZt2tcoc+&86y!>ab;_I7Tw*ELvPg19G!_L*zH&VB|Q~F;LRrt}b8p zLopOlV%37uK!4roY?ns!WYFCOIgS|3?uQ68mEQ-NRLz!q5}j=)Nx(AeE5E)nztH&Z z_af5)7>$4~D;E z+~XO(uo)z-9WAbox;)YXQRgQ(ox3?rM2^dgh-yqo?x`Fd+-i?TsZvz7~v>x}|_QsyOBKOt=6iJ8&-Wh|Fu`_}g5v`!+)lfEzX%j- ze(o}jyBEvdzhr{D2FcP($~eWRMDUDPGj4c+Z1z9a6^Vnfc_P?-?Y$xi6Bq9*x1zeK3!ZKcPM^IOb2kQYQ$oVm3xCzQK|Ne$Fqu16Ocr z(TVW>5p~y`NnD5~ohZwyR8LM>-J$NZd0toAqk$jNU;j?Q1@{Ak+Ic2PzA`3#(ip`| zdKRw0c9^-EJ%s>6WR)-tVLvnchkpYu)k>p$f@Uk7q(vc&CrCDu77|g%^_Piol1_cj znT+Z}O+y6?O{PH7fgi#@EE!StpG=94+cDv@@F4-UL1NwqCevTca-?G9re$7xc?7a;O`adsmxIvM7-BTE~lpz z?bivbt!Cl}ZL90*AOF4`9DRK9Gr~!}Go(Rd66^PhbK$0Dg~elPA%!`2x52Mk8vb)( z4DU0-XbY6jEj=v@9~8)?;hT|%M<=Z=cSeizq9O{umo%QGj?E<07W8-n z@oq_SgM7GlJKS;y0G`4LO1|ZQ_cv$s5jr)yWC%>R%hDxz7?$N(cArXcCZNXuksl0Z_hx?)x zPXSIDA02|Sthlp0Tmoz=G3H4p#jq_O^((-%xXeH zwfrb2J1&xq#NkDSVpW7iH)fK;qvLY7$Tdo=8~woNq82`LFCHGYwZLbXuRiZT5G}dO zUhjy$=CEbuk*?ZVDJU*bW2h&4{=mjhR|hI6hVf_<7^ZbkT8*#Zfobx#5FhagVv7#W zb#ZWPZ=y?V5!(;1O49eot5WJrb_!w*7Y0J+JP%iENwbM9gT*UEZ-e)>wX}!{V!BOp z3W~FU)?&F`mY>n*WXz4fE4j=HxIjI95axyk^?0+(GBVHS5$x3q^9iTj=m< zk8m8j$79|njaImHSdS23DnVazwYY5(2+PNpI@??sx5yeOIS|h^w$>>Sp+$3*i3A1m z&fE9*M=NAWCIo`ZpcK&Cx6~nXFx%TjzuLIi&PCc~hZD%oeT3qQ_qJ;#Pyh;|d(l#A z`CiXj`r3u- zWa`jig7cjE9YX>!kg=PYb>>}UW=Z-3Z6-?|FT!+@23g>YaDnAf+0Uh3$^3eJ{G*Gw z+fi-O3u|CT97`yleYFDtd-ouYojYZ+S+5N*WzvjH@y3nfcI^W znn-fi<#5wp9*?%>DhYf{bBcyG?;4#iCZQmkO_8JU_1&9KK`Ng1sT73{7&xCpOK9S- z0>;RFxiV|Ke%8PtTKXBE-une#(9qI8dK|CW`N%E4>+i`!@~3S8fn!n~G}VVEwnEZY zbanJiW;=hz%GM{@+#Ko8K4bQZ?E-+38EfTcOMgdmZk3@(U`{g{l&0LR7zN@O(&5rN z#oLqB3@+W_6zHRBJ2ubp0oAh176(;?h4)+TE2rmP@NhiE#tFm~v>in;#cL)o8^n3c zvLllWuQ;g)VT!l}_wsP70qyc8daDN3(YxdZr^BV$>SGfsnbewGRlnW&pf71M&}MKX za@syE&R>uSa*)C_P33hu-hQxUQv%7!#UDL92cGo-IyGewXuc`wBg6x+y5V`J)Nq-b_7W;7ZZr{>~o1A)~S#D}rWvLc=Kg;MT;JJ#AU?jdB=J`-gT@<>;0JZ@7 zoKC2JAHSF_cL<9tA63t~al4zSgk|B#`y9ds8pY^Mujw-W7}BN9~P=;&bFqtV~I@flSwhx6=o zAIrOIBok0)mG*V5e)SfDPTDKZLk5_UH7jEdD9CeSDwKk;ep--TBbN zvM5S;zuX)R3aP4_Om(}x+;f$DiiFeNnM1Y~t_#shV0PG%TM`#G>Jo+`vDq`|FSeQ) zH)nK=rQi3CT`H;`O@L;VKl^svm)mUlw6n6=56UfhtmUF+)eF31;Nn_&hhW5%ubhym zkfBU!O6Vw0V6lzM$T2h+_%e{(Rw7?bzO8U)VxSNqUl-iqKIfQ=vhZtXD39Zo6jJnk z_ltX;UDl^Bb^7MbFi%FwcJi|bevLg@BD+I+T&N4o5+&XFY6&STKX#$s1^Nyqf(6zG zz^-B*HP+Ac2u?ooa6&_dVTe;=9C`W;P_0LAD@<`1)0e_wO6LYc5vFKcy8&}mwD*sX9a0CP|7ufw$J<=W1|7M-~l z-ZBt}Mu#?W7+3>9eC1qvGRw#P*im8IWe+?!lI9xsPe zSuis%Np@P`)KH?>ML_!Pq&+t=o*+g`Q{9U(63My?E2@4*8Y(Iqhr_e667v1oBxQQR ziKDn)Ma23Ag`hlD-3rDpefW(B&DE}>r-!>2Uyv0YsO8EB|-!@UiNpbh}~$uE2!q{=*ID?`*Mg~4}Q+bv;~!0(gYmhN%9qBau< zWMFYJ{y<+t_QZo*CGZ*m-O-hFXwZU$gzCF|Q!OWF+OeJf5z; zajoM)Gy$6B?n=p^ygVDhh;@HtRjk4JT{R736qQXsh)v3Q-;lHZG{IMuR!v2<)CWx# zQu%=(&$63Vf@2YXLNw8Wm+Jtr7ANVGdsWkcs>NKve#5k$s*a4lr7i73Vw)98J}*_K zTfFcAf!FWBi0=^(x z9fV7ScO05Eof+eH+^sRV%`7-|lYAf6$)EkO^~=;TKh}O1rlPB}*9W&lS||jv-cd`h zulHsX%re270NP|hx_@y>P#G!Z+2GdXnYvqSP(XWS3fmT!|(MhV6x%eP^ zXJun?m@>)zU6)@oevoDpW($qFJzKAKb}XBf=FUcLC}T@oe_j_wjVEJ_;zd1^mqEJZ z#>|Ob&6me-cHu0RFuj19^|>K-rKWP`?DAOqf+FyQjy9qkj;hMng^|pXXJ)jHuh8G5 zS>q{ZnIsfN`uWdC4D^9kV<2)5sVPeXiQZX_zAf0vm9Met$;qpS7VUo&cV?vZDm-@ zTf>jLOESPtNx5|a(y|}Qvh6AjP2mn+EELt=0;h8I0yTV3(>op(T&r%>pWB+u#VH;v z+u7~bzkBPY5$?mn3G}~s&m(|xe|!2{M1$O;sf|9VkG)3mLp&42n^)Tsw;x*;1d|j=^7o4@0DIi<2;Jzce_So72 zZ+V#=hz&%>uy^SCkl-b?(oKUhMudEX&u@?%)4qT}8s#ok=6RHZo4d=y2V<57!|h9R zVUzd~%2P*bA{YSANPRh`aFEv{K{M1j8y*vJ+Y<;|vbg!7R&k~?iR4yLl2Nt4<*qYD zoU;9nK#P)t@(@=2YEz=kh3Lom+pTruyS~i%NY{5WDCyKA4_^VcRf40@(_}uRPEJJz zh6q54uueu=$4RG{#F%nq3e$x`EG*2i3ZRh~f)O4~Z;oLrE!AZ36fiLdiJSVf(j?It z4NWQ=E{|)h#}>63>`WDxqWiOUlVehA2CqMxsJ2bzuz%AR9~ldhXB8d-Fj|y!y!?9N zG-?{Y68&puU(>kzs_k3V)28H;k!(w<`grys+4!iY%|11Ydj%!u_Q+4j}ssElB;0NqK=|0~Q;zY?K*uIlU_p7uv}o4%SI@Zfv)k zC0grh41kIN&A4}798UHbw}Ax;tR;i6ln}{xAUU|@L>k3h{9c3+NkC&7t?vMBR)}rR zKueoP@%0eCWJqJNb1-rgwYRlkLdCT19T}8gJ4m^Y{=L3tqbeR3O1gfxSXAmyLmhp! zhVUtg-4tr!!n&mHVgjbF$67%h(U9ZOBD1++TNjf7>)bzU?9Atp9Y{*X1!!@TjMza(`Y~;(XfQ=?LE>5ApOy68kv#`(N6@kl!{v@*(M|^_*Zkhu< z5%X+ezFejI{ljG^9q~Tbu8(!!HdEbY(WP6{mF}9r8|$7UYXpyLQ@s7zof!~R|uW; zluetFOiM^T{L#hYWw0zUEbZd3yKoI#aXRdLPoG!|v|2md4y&ECm+nW^cT8xw`2u9a zNr92xIi>=vX2qg0rjtC97yF#Ck7UV56K^X_X%qr+jhd>YHonR&Dyq-aaLLKrD+-y5fr9b3F!t!f4Q-&_t`!KZ<)>Ph-RNAhR6Fc7J1aSV$}75S@BT^b4jnz60aP@CLB~hm zmsbmR0Z9rAPNRCmUAq7d_JEo@4_)X@0V{;{;M07{V^e7%x^Gr~{#A=11_%@_`{>F= z)?grd95h~zSdx^K;&^{TuNW$E_+9pnLXL23Hd;Ge+ivHG9B~*$%yb4eoM)OKwLUOi z=VDY4JD{~L3)$X_-1Y!Lk?JKjbw;}Hy#TJ_ z)Hl>3eYC+*c+L{-Iz@N98x$$-*7Vw;t7<dmt4gW$o;4 z|9TK9UjAkWKDF#?QI;f9nV8LQG0||OnRZi}OBj#iE~mrJubqw8Q(05)4Qo5szf5u3 zJnt=(-OezYXri`)GY}K?WA z=_u(kevfdOyRIExt6{%sFH1m-ate*jMD;#DR{pCf#H{P)UbZRF9ZwLIV$;ukDRT44 zl6zx8{;!$`Ux3JOx^*LqI`Eq}?of*}7NgIyfRi+>I2-T3byNVCy4q>K;zP$<$XgmF zE{B%=>RmYn5S%U=f4srLa0d|pNbO#|8ftRac3=pIj9e8=OVxe2#Fi#O<{g4tPku7y zrqNPAuz1Yso&?XTHSFUVO8%(GW~!0Vm571t(X|C_5ds!pOe+xR!;GeG8red4hGsYA zQoogzg|^0f8QFpK@#MPh_p6bm0;<|;4DoOS-*aPKGSjUo3)sQ2@T zmV6qIt>bb@cPraE9{2gG7ZajQKQsdK?aL4+%hCChhCSoE_K%!)q)hkficUCIe1<4# zsA+o;k(i3=hyCzFmprQA;gMK-2{Zt`c0g{4J|L>&H)%~Dd(?UWw5W(B_LIKp=OgPNB$~^M@$3RDp zuOhjcR0xBT7G1G+R$KtoTzMzFI} zIT{GHeY^`W-Bmtt+q{2-Gcihq1ef2YuPN`&Qe5c2)lRI7l}=bI%qncqy?^jW$3JEu z2AEgngguk!JidxpR1$&a*50$DRF)UkJ#3Q=ZWoBpuw4+jHP}KSDdc>Hy#2ZNn~rJb zMb?&>fdZ=s@0FsJ0Z|?`J#|Qc)O7XfbcWX$N_xaUvQEmu<+rJwmaf&#{_w1wD?j#e z#!|)Hmg0dBS#QglibkTMsWTM{|28bKZc4J#)ap_-OfNE>!_%y0|PsNZP9K2+fxK51%QZPg#gdRE#rfPqOsW{7pnH>DM7=z zjKlo85ZEa^Lb&I^5enJ{{^`~ibcaz#mXTk2aHvsg@lMqHxUN|}+#%F!oaKzqVTjFr zHk;j8JMkw;yzOIi#g~Fp_&$!ka@vz+2wM+}4o^8s5S-9ZOZ8nH3Hw}5O8Nn=ZKtLY z(AubdnarPN;vwVUT@THSBqb-~JV#Hb9_RJ(`Av(5Uea9Hgeebo9QZ7nUl>%L_?2N3Wmt8GbBH zMfcq7HitWT{#&x%unH*kpRl#DaGJc})az#}PDbUuHla8hmYXnud!&wDe-Ws#{W|e= zH0YJ~F0-XxGyJeky8QD$wg>#*!ty8|Nf3DWyQyYZ$zM_mZs4Uw{J*xE|NmV}(RhN$ za%x%t3(=Aah_Zp7_2qvF;0J#70vcVT*YC-Jz8!ZE1lH$@*kIF|Ge7KiO`OW&csP3StUrM; z+oLS}zteA1Gbu_V9+ew2*-s`%D@U^^Wn|=Ps;PCtrCR_K;uohd=u0#H3*ZjE|Mrvo zGqA1)YLnwuh)9)~t(isTFJCBrMuf9ZfB8j8K2kY)AQc%PVOahn68DA_iBo@&7M|3w zceH1>Fb7Q)c64NtQOZ={=q(!d+#Up|H!TrUmT2{tdAP##c7L7kK8b8c!5^ym7{(^> zG8krrYg7P>iH?qqi;4Tk=Rim%Aulff`7>7&Cr`DUTuUkmFpS0jxxD~L5sY=$w4Xno ziTuIhqqy<@Wh!iVk>cQ>p$7V5Xg>5XZ>cWeiBd^zgjVtJu>MY~b^UT$wdGtQok=2Q z+pndf7_wqOqeXv5zjI7rRYbvX+Z=^c?bsoD;dQ(?;2&JRc)qJ{ z(iXIe`ig95qT(;&R6j~8D=Ddcp}>yA*2mhE&~nPA0)C&o|BQ%@sp^>VfxZ1gXECoi zy`tho&6O*8PR@k(%`tR?hK7c9WH$WqLqlW!TdManwm+d5k0KDkmgdQ}K-WhVIX4mR zzOT}Ljm|^_hLl?46OVq{E7LVR$GEPIKfEmu`Pv!iE<~iVqFy@%)95+02qVHtBmVmU z0kVBK=l4iD>t2niE_KC9rE@A|%Wrc#i@Snx4Rj|g_OdT`W_W8Wh+RB7}3lc5QAH%6!G*lRJy%%}`4Gy1!wD76)NrJh$N*ns%b!sOOiA zy;k{P0NoRrD*Hwj z$FNV*@iLj6FD2v?NacPW6=BG_(PI7zb;%84WlA;Gp(R@NVQA1ZwKVE#&yQT2Uc;Sz zVA!>Doq>1u$MqabXRWO+LM($uy`3_q?NJI-J2k8S^sGZldbKC z?go3Vq8m-u>q!}Nm9w5KIWJ3dkMYij)2Fd$xp{EkEqx3U7fph|9Gka3!)k% z`q-vjJVOVjIq#yjADZ>6c_t+8wcCC`)LTwo1cp9IsiCNW&D^bk_EA$%4R0gbP`~9& zm`7L~7VdH7XFtN&q~u#8jMd6)-Uw7}fAzj){LI@7oz@pJXoy|1OzJol^V38DwS(nx zJJXzbB{u((_>hQ0ueB`nB>`*he4(JgHJ^{nytlPH$5E=XJQg=I>4-~QpWg@1Ukq#( zPRL$M421c8icj~9oS{#6Ze3Z zIRv38d-yfK?DFLeHaC~|4BFl>ewxI61)}SJ6~M_IhPe2Z+i!NhS3E-Q?dmc8m731cdQ|X(#L@jA6RSDetr4B#<0h+*_!@r zbKY0G|Itp|Cl>n?A~{puyTvLxuI)*MYCo)Y-yGZIn`=83jt`XwYir*qc&LSO3GnIH zT|-X}M640I(l6J;uw`sG)_-D@cH|vHuTWv5eul$~9aD4P<8TRLs7g+Yea2AdHBd%B zk{&9n=Z1z%sSbYn_Bu{i&!~Cr?cv{V?o?E(oynZvq+EO{`wo9+Cnts@)IFZzD{3T; z!#n=!D3%~68>bObW^adkU8Wh=&b**_POhtuAkwfQDv?(r=IRX#z^r^^F2(z%^UZ7< z=*l25^zai|EvbWY6I8Q4U#EB}8wDak>9zB2rVarfc{b(f zYQBi~LSypqVRXDzj9pVpD>Wh&gUH(Pa#EOD9QI$|=eI%Upo0S0_Qbdqkj&KO&idRM z1IQF>Qc8sDh0zCBo#@DQgDvX`&IK2)bK-3ifL9uS4b)ry=Wx>b?WMUjSSc+Jh#?R- z08ABt+!sg2uUo?7>YfEaYECKLi5z(%-UI^T73kS^cE?z~Cx`xSn5%_<7vR>}<1V9M zdT7aE;qVJ1IJ(D40!qRw>fTbKX$991OJh{_PI@*1I&u!k2bb`8b^s3%llfsXB>ppt^6s&{f#<|&tt$d(lq5D1UHm*nE!!~z?7F%1jtwh zTcUm)kZMb)-GD!UN&u>kZAJB4hqL*`!AO27Q-#Jx9oj^5Q{C9)qYnb5zbdn%4RAbI zfZ85KHDc?_^Qqo%{tiK14={P|d0k}^Kd?Vocw3vcC9On&MrTH}G^Nd>hlU559<480 z$tUTo>ZEVx!yFwp5-V^ORt7p1*PL9S8yna~S5ABbUxo!Ugohp&^3Wt7G40Qt(}wO= zl#HZ`cRkKe>%qpoM3W3lN~95+&#5;xLyCQNx5Bix{aQS z0NtOxLT|9Mx}=s6WJr0TsHBw0Jyh!Bqc{O!0l+wt(s(5$rHcW|rY~=V(kcpF^CBZh zogZk8ssPSMR!J(3p35mZ512mtM^{5jkBvn|ZmYLsA~HwBykJ=?03d{zyRzhD1x^yt z3p0oeH}&=8=-RDoN?83?%w5apq@8a!rVG0c+Syn%t;Ss|5zYS7=^oB&su<7~5ie*` zFHB#}p>g1BEjc`Nj7KOzfi0V0P7oJ?8UQZSukbNInXE zbFn#EXS~vFLZDMk5qi$XX6$~nv=+7KPI=;Br{y7ZpR`&l zrNZ5#DvFEawqvFe8Q#ZIVQ+nz)HS8r!0=Y4UkkD9Ex(_TBw%EN>P)05R(SiXmcIz7 z$xelUJD1-+REUJ)3WO7z#@6pRqwzAP^A0A zOj;9hfM$WAn{j8pII9BczP%x)s-t+5o)0>8sjQzDg@^>@Q75I>lksy$JP8HR9Aoag z*_7$-r@%U2j*jhdFEdeBj;y#%qOPUY@@J7v{BA&Gg+e^c$j$CyxxCU}w5P>4zv=#= zA;7@P`dw(ul9*viHVdutBgQG!K#lc5Ye>8N z!5RK%jJ>8)p5%UKjj|8i@2%z*31Hs>KO4{!QKO;hRI$4e5mR!&_6~{-X{*!sIc>bP zWlhOKsrDx~7N8F=aFm)peTLqPX?x%xa(;ZckS)$qpLoff%)je?vVDO`DK%MCyi{qo6!3MJTuGcb7 zZg~vsti^(lmuU!|sXv1xG|D_4)@O79C4FXp4p6M6N;d5SIdub|zyXt!@V^?i#+OGSi3~g`_B*4C4YG0BuGD9xP>k1)gX219n`fniQbRg_Msh&00*#ZKXO@K5 zCRq`U+2sy2Jh97xcpm4VO2X%y>z{V(JsvH+))jwu=G_n9|g{*ejF*a!^ z$B$1MHV0P|jh3~ZCj-Ihx-Dc&=Ot97S4JlssH%?5AJCQ2krLDMTL*g*DS+W|b1BQZ z9YV!lf$fjc@{lP50-^8`Er8Uf1*~zwm2^Q46z=s4{q*W{_OXbB=CgR}j+NoXIqB(E zyCNw1q`<~Lk~a%o+YVW#+B&$%XrW~_XPzAApK(qH-~%ro(%_3pB@w^7L9`U3+3{?M zqPirFva&MEIsxwSbzop%v7Mb!-NU|>eP!)x{q|WM8KU)g)x^^7bC&F&=Yzz%>wAWS zQ#!|_ou5|M(-kq352T@}=eUy?9smGXOf2lee10hVIsP(D z5>+>2V59xvdP@+X2faJ{21H1-{15tfC~1J$tAQZutSzz_vp~*yxg-iOX5XUj>+B96 z_%l{r1@AApe&vuoq_oIBxvgsed;p@-NBp+yC!L3niKiWpRK?5HlXGWn+NO?l!2Xe` z|I}C&*rHlIC&h-oFZ9yVWVWt8OuvecjclPo+N6qz9&Pe{X?!8mzL4qt4N$=V9-}`? zUpgMJ^oatU80;nbatkTIa&Dc!hMO{PcG^p4 zdCDmtdBRut4F2wO2I;Cugx|v|pldE`+ z1(+KzKM}I13-7OqkMf&Xw~wIi3fBhft}}P%*(ioWhJwX4Kj9!KJ-opp`?^5kelS#6 z<*_Eyu>9w9;NYAffH2XTc1NbVM3ZVcJzG~$d&tAxMG=)53~bs5t5}H_JNvI4Xv-h= ze@11tKGj;hpPv&2p)u18{;VaJ=C(m?P|=K6fHFl@*no4k!IA?C(PbsxEC3Yo}WENu&=Ar~E93 za}`LIE(H=s z8Jz0MoqhZEn~;?l;*>#nnt#l@p`y80Bpi)z>7F{u|H*;ij6O<8DMqm=lSZh7M{rpu zAC@T?0^#CQJUjqk)7Res=5HcCeuVspCHnD${@5Wf)l0TfHk@4)KE3*>~ehA%4wvj!1jWSz1x8`q(ed z%zgzy&;}bjxudos*AaBqJzhVQ^W(~i{<AI5-Tboyw zDmwGaKN}L<@T-4weYpQ+ISFbOuUH`k$&|lIE5S>608suv?$ys=+BX+_VuZLe#Qr&1B$<1QfvV>>~WC1 zd`1yaeW~b&#-Ay%_%$$aw2&J!COZY1L!P5gPA(-MT6!wj3@?Y_UkIieg5dx2G3oO8 zmdb#GQe0e~lv>9IS=1U%He4|V=9`%okPO#YdioSdTC>MhbyytlV^c{$;f;XmiR za59R#y%3f|1dYi%7yi72U06P*tkqTC4EX-TsA)+5eOX$_0zC*o>6>*=)T7|j6WV5U z;H00%6n<`*x}RO4HF~#xng1LfIDOTF=tYrPQUE~yFVbxwR9AJ{JZ{hEe|XO?+5^nw zKcDjds_eE-vHS~C2Iij|ne_WR;ov}#VP3-8vX?==r-gBJH%<&#kMj4KhGR`Ia8FWESesmO2Yg?9X-)TP_Y-MK#o^L!_1k?&1?XwDY@zlf zkMi!nL%q&Vt?S$2EKu|%F&q{zoHCoWE=5xqo=r?#MJ{?*QI%ogG;KGEIjEKo;ZJ~!~S^3mI!_6$<&nD`Ds zEn|nh6^_NWMzSVIRp5KFwUq^?4Xwa`v49^@o_hk$(4Q@|)ec?XFl>c;sdKN~)a2#m zA6swyiUAnK=6rMsDEC3fNc-q`II~Ln8o`NSfO|O~j55PjJ28g(#r-0|-p{(o&5v{U zeTr)BO`52+NO#Cu9;v%1w|czox7GGA*@IWeS;9}M_lunkkN_^=|Azi!tJ-W6Aa>cD zoIhq}kL;b2=d(pOf_2%g=AV+_G}@WImJh3Ltv)4U>mKNo@+XrBY9OrHomTuF&!2Qy z|Dp|>I+)91FW z@hL0xVjI(jDf3}t;g*w@imE%eueZ1QzCH||w-m^2hDqwaH$JS&ZcbL9(90>3?6fjf zS8O1+dGOq}_u#kYdo9t7A%&(q>RAR&d&Q`)sV4D1tWgZU+9;mKd2~`uO?l+ip3BxH zi2am%yyxEOIuuW*QTKqzCRzL6h2&4Mh28E6+q*n&cc$GNFFCa>i5croq8tb|c6*Q) zj?O7yA|eg@0t}4u_=dx`M|5VDVf(ix!e*)ALbhl3s{`c$8v;WW5KHLRC0X3yk6sC| zc4q4eSSFdPwHDZiszgQ`#))<>mjY@E3yL3ZTMoD3D6TZ7KQuL(Hr?F=!4d*o`0Kno z=-!-Xjsk_Hc`8Rn%6jLdy{XK)NnOa}&Ta>M)(}IY{o7CnOvDmfjxfiy_XqJ%ZOe!H z>e-y+Te2L8p&@}nOc8Vntq6rv)fv&=wE7(e1$4H0On#v6C$FPh*Ny3=bu6i%*51K2 z0WG>U>inimBF}iXG!73Reb3K{(?w=!u4_k$r0)*N%OQo9XR60nZ?NolGsq}{t16f# zsGP!aZ!RB*{NLn!|5+vecnMS)sxT_njI`%CSvp60Xh`TwcQ#rW8T4*@>3!*WtGe-7 zgfQyC*57euo!J~KR=yR*Y|+K@O5K9Or84;JQ)=6sXHaiR*$WuWn*SyH2oP^>rMh6@ z7Xc+^T=;+OUey>|ULM($5L-E+A8zo~SAUNsIQ%(e{`R0X9Q?Cugv~iO8CVOUv zl1tlG3kS28XE^7|*L7Wo{E)Me_xR1K?6Q9|inzL@);7Zh1f%4>Pi7m7GvMRelFd+T z$Q+*f>HSm{SzeKwb3TYk>Zz%-*Cgd&)TA=-?)#2YH;qj{<9o4jO=>r?R=Q$&YDPre36o*N9Ydh0j{jE*ltG_F|dAt`+p z5i}c2AfV$F0OlmSFhI+zC`^La?f#i2S*;ZsEl2p0bHOuSbj!j4Oo*lG8t;u_LJ#=A zW79i_ zD!0Wf?`g_|VS79{l^%6|=Idy9b+$dWu~+sr z(KM$^o&7SeJE;r>F8$rfo52M!*iz`>UZ;Q+Pgf>1hnO}PC9q)#M2ip_*)8y7l0-tM zaOlyYt1=+V>|oSP*k2Xo2853BqP8Mx*m-{R?-&lbc8L zwQ<>{txHTJqg#q~#J%q46`Df^5`{!iWM#GIwMz2x5-oo`G>JioCm#4d)$zAR!xJCo zTs|HRh6DH+(BxvPm=-`P4j|AlEmT3?;&M(LYrL~FYg0m%V4r8Iu?*@wv|$KHWL*Q8 zAk3D61t8gvprvokhE66Zs?%jjNKa5h3=i}z>IvVb{L_1wQW|b-XJ^47#H@%KAT~tLC?HM}$ zU11?~#`5j;VL<;SD0PLd-q;TfLVh9$1bdTV`M(!pfl2-(av)ph@>_WK19Jfysg0q2 z^GT|w`G|U7`pNj551Li_LtJ#&SKWQNS%cH}2<#)oUB^j#gb$0%f7qSI;Cwyclvz#d zVqkgt^JB5d6E9b1_&SQ>yT$7%v)N_>E59c)-vz%uFD!R%S~_1g&k{k4XXLmsvZN}) zL9!@NmhTne3y;zSo=nMUMLdGFnK*P!S&ZF*LT0lvW-yVS^@$UM~aZU z*Kb7ka`lr(mE*XGWuwy4$W7Zf^|&Y^2K00|`@S(FAmjHo1T%0g)>Coeyj#;^g(oy? zNB}3@_mmG@fd$FLd_oz%D$o1=`bFs6i(sX?L4l~3WR>vZ_aKMnEtzR|3 z&YYS5`ciMpD;Kjt;zIK29$Jqp)c@UpxJxsPGAGCtMKZmmI+;r`mPQk~&l4dnW!NNm z^UmmD!r$^?-TMj;EyRqGob1`-HK|qdTYTUqQ?bK6ss7?35%d3lM^0N-Tsx z!3Ng|{-HlNNdZ|t`9t6a7Rz3>(?Nl?9{B6c7rMn%53kDUmKHzZBFX0kPTO6L$vg8t zejtiZPbL-IQhmf#HmIj12u_NKvrDy$HZH7i+ zg0xnbxfnnxR1wjUGU3%H*wmydV5?y%{3A~w&X-k@gHWgRr(8UJ)8H4<;pX!)dWu9A zDczdT7HN2~2625+u211hPpmvTy#kmmt^(wYD)0<&2@Is%8;$C?8E|TM78%_*#T4&@SVLq^|vCqBKk;ujO3SQN@t;X_Ej)brj9cg+)XQg%h;O*g+ z`uGRON-NGQ_Bb<*sfdgsxL$JhWnbuSL}gal}r2a9_d+m^9zE_)uujU zZ^hrZ1hvamW#w;+&a2Qn2~p=vw{{r}Ls>9L)$0lKSM&MWJ%^fKZnC}OnfVyz8#a(X zkH5s|=((t0#=rQ`2DZd%pK&C9g2`IH2J<>#22^#PXSrOLUC2M~7S4_~`n!-hs)ER9 zR%ar~%_fqyK3&h(*gcsTDD-CzpKHXs`uy9L^ZXvhiy2O!4|9kAg!2~Rw@$+4e(x+U z5lnLEAIeQM0hHgyo9FlG7j;NbcDqUz-HW1h&U#sgd%cvvxWL7^=OinGBm(MHvL^>J19M)u#wi4mr_V>m*BSGqChU%pQkCFQ zVVfnKDJ}_D9wI z)v>&(p(iW%Qk>+ITr8KmqkI#sX?F~$f0b*0;64*GZmFZ0(75Wt_?d?4ow--%WD)DV zLyMp}e&g=V!@iR$zU*11WFtpc(W2W7b!dd0Z50WJ?GzZOAi_!DVEN^uMLq@BFEp*9 zxdGeV0@)ZFIrlg37%4K&iiw$LNR_IJ_SLPWoj9iAV2!z{BNoW)%8OhDdLqww4i^ag zLDK`LkB^UCq0YO^pu;(54|uRp_c|Int)x&rMX~rdGVgrui~Dk;YwkXWw{!3B`OnKmNA ze8A8eAV%4+fHe4A956Lk@XMSGYLH(XMi4V3usW2eIa`Afno>*+(-Ty5C(^Lgm-3De zm`cJ%rAu{#ER77hTfZMr8gb%oK}H%fjp*@Ylu@VucOXPXcl|mDE!@}g!y^p zL`6llR}ViK=mBGnqP14bq2iE7-q&iQDPP#n;X^|*?uo_|tYnQmeFVeO7FPGQv@HI_ zk+-+qzwGeHH;d-1Fa+gc232Z4b1(0@?H^&46Q-`{C$*;MWF%5l_s52BEK~&?0T-?E zd!jmNK5yjm?GcHLrH%G*mf_f^K#6fci04Fuff>5BV2nqswKF7d&}}<7n>=86RFWLL zH{5(*bWuK54@(gZY{MJ8%~qv-(ReV4s=?d)CM!Cdg8uRE9v^Hzf60Hbs*Xx*a2{kH zJ>#iMf4!p541dvTle@8Sd;v2TR;~~mUgN^prwAsN?eV~WKmMN>d?WB+ZUy=NrBarg zq-uQ%=X>;w^rEl*BglvFfqIF5p7Xy+9Yw)&(r~hW zRM?ILfRy=K|GII#arY1Yx$4Z!ZzALc9UZNqke}Ou_nb9ROdZzwPhdp+imWwmofe6f z#&KCpr$9OixBT0#z58@QGzOdp3sJ`si~)rR;{8Pn1;EJ8uq$up#0WpndAN5yp9sXA zFsXK8rMY&S0Krjtx7zOw#lLokd1$6b#`3^xU`$wmQw5F=gN2Fe)cRDP=u=?E2P@|A zhB5t+*#P)e5Nj_7^aiDFsl`Uw&1-oL*MT4F00@~Ey|r_?L7QNrJDXWvP6HKLtHqi% zOii?Mh}?_M&!WRMHt8Ac@8&3FF#tdg-F4_bF8;2dY7^h6mjIObliTZxb-*@zdV5}! z|Hh~25NkEpa$;Zk%YKKg#$h&<&6d&4x}00Bha4>UVs^eAloL)?>8ylwdfzZlK@W<6Pmht&8T`!o-?^RHLa!uxAP~w?P;jN4g@Co1IRMD zCpy@O$SE04-#Jr`DKYF<^BtB23LQKeaGWT3#;apLNx;iD5n;&_B@S3LG+EH2`RBavJKgqFiJr z3!aqJyVDzFC*5y4 zaq{$KTOGi1B9eldx?l0*Idr*Kh-C@>@oft+JY5hL5xUcvse)7yuomzB@$tW7VjR~g zd*m-Gmu?$K%g8vL&X~^F15``)>el>)58?s)_HYsPq7dEn#Jug|Ub2<4+t?3Y;I*n8 zS$RAH72u|`Qbj%;3Z{_;*k zcJpeaRtc}hIO?8Es5domD99azH6lt!dHO45Rdx=31&Sp9@`**Nz?LugVyZ|2*1DW`#OgKyZIXkvl7K#wu0UcM5zau9Vp2#P{b^F&bYX*%bjsFXzYl;t=tS#E z2e)UE+$)#dr|tBPayPtg%1%U4R*suyQyRptV`NhL9DK(S92j?h4if)hYnoG0pV+`$ zZ{zAy?eE_{rkJ`7bXVK`<&R6IXiCk)!`-p5gp9-P*@&dCZKT9U0lF+1G4IB>eR49L zqU#wuwpd^{VBx4sOMjYiFOJ36-wk#zW5@3vvmvCP>22*{WZ>dB(c3#eyBYTQp}gFq z;-R0$XUVRLHfNi9-H*9l<**;!q(G$XazB4_)#@3X~@-L3f`Qz0_37+b19| zNEd%UAMnW^2q(xy`|VVc{%3fz55Xwk4+E84j>pb|qa>L=v4Gyl`ndx8%>v_#TUEza zV$$jIw7YM6BecdB4$yseqm?BmZk?t#T-oGQD^AdHq-DUB$n7y4Y+25g$$I(~8GMPl zU-b55+?ZT&tAR7za-gnv8^i5<-p6S=0zKxTdkj>JaJ>LMP)f7}0H)Af~otUQCuf8~7rQ#S3sfA7C zc7e!l%FtA6-Q6~Mxv4kZ^a8FV6Se{Hu!TnoHasbv20YO6`tPCYYU{}AZ~S6b(he2+ zI~F89Rxw72+i#5>Oav;%CVLCIskaQef0%bZhz8!x0H-j;c@1hW0hzH6!!f@NpyE%t z3_SIAHSViO9yTgQh`G%?LVa7h>>F}2l;spv72d_*m%oXAn;Cq4yJ>DWbg^|R;f^3h z00xPJdPdW+iK_?iCn{iUQ!ANQN6|j)6PZ61l%AR^OY+|%#e%G>#oeboXP=P_aR1Ev zT>OGy#_Nmmj(W1*M53u6Kn6>5zER=6mw0>Uf;3WUaP32?a(;VHM>M6%jv*3PQBwBJ z_LOkV?%)y<%j&koN%{ik6s)r8$x(s$u$(SGYVSLTYN0XVF(ML4rUGPhl(K3X_M`Gw%v09(AY<34Ky?F zNDORxrB@<{y~qqI@7GUHUsUCz;DYdGTl+mwEHvtHTXqcITaU8>Xu!{_uVZ@wjkf0Z z4~>}}%y8K#px(@Z84Jr$JZ05!+62%J8ZVdOrfmR^7M!s%^o0H1=2 zHp6|l*NE%~%B)}YuQ(hcHYGJov+fbErvOX3wEbXFJf~6KOg_;hwLD$!x60WY(FjQ5 zr7r97AUyl8)JB?_V=0j@($DVvjcD_ge}*|2>2zt~Pv4BZiHZ5TTYK*X^Z71Y`hY7H zM;8xZ{^vM376WTQpp%O!`UyXP(+(2W$UN-GZC`E${=nV_R4za+l1$i~%q*~6teR^; zsBz^yo2~Wszcw4r%r(rF=eawEw>{Azpf>XrQ}=CON#%wYn9 zYUDRmw3Xvd*NvL)uH0xky9@ye(dD%|cA={}S6M}^1^u7Vy10b2v)l(Gje_i(eT(p# z2Y7XdtetNvDTPPUU*8YhVUZN+kEmr9hz1LiH)3O9-kjYOclbq!k5!1jNHp$G?7ine zYpqRdk0%X3-{-8fyE+8eY5-73{hnf`rjk}3ciyk^q$!6gWl+|(+x5y{jbG&W&)%`d z$fhN52_GPnIHg_OHD*^7-|x#M7r+cT@Ejl1T;plN(4rIJ>*}v@3b{C(EVUn2(xh|g!QHr#ywBX;;TaB03a1rA20!7 zySpPlObw%p3ge}%IMZXqmhTz+Lh`(kQE74^%8QXwoh*hfMa7uR3>_(?{A>CNBAOQ` zFCL~|UK&)UeI0*}!<3z4t;$9CaJ4J9)~~4KTUt6&uN$7T=v!MrAwR@27O57gEV(3u z=GrE|zK#Vz65Ey*kERUwy)A=;u!wUT&2cK|U`pi^-6McurYYzL%@x3=$YAJ&Bm;vl z$lPTxPE%2zQ^LLAoT&KTG>w{)`tE$NN{)gft5#ls3?U(YmSoD-6Sn*#z=esr|F+#3 zBAqtjbqlp|FG!J}JORMBZlS@%G3Zp~Zxz4DPFU#&Y5(j5?rfUA^PNTGStIK(8D@=GWT_ zCRMAv!P1VricnQ$84-=4`QPdOS%srst(5k3`cDa^@-p$gv^}zJ5M?_MiP@O!k9*3Z z3+ICxMA2e@ml>=NkK%C0vgP;~Z|a->)Mj(N@>_Iwx>YPQ=;7DbMs>bp)kAIAhvJpv zs!SZDcn?Ur(>MZ1?~9xH8=I@8vgdB$KB^6`8+5fn^#-P=*n}-x?6A&xw~r_QR+B$zE8WnyUtaPq=h# zpMkc1CRZ$*A1yXnX~Lm`ISc^so93a8`LyglE{9W1P%jARo=B^7)8Z}^!Je?faCNEzlA8Bpj7Bz4L$u&>-teWm;F2kgk}9!E$(>|&cYN6D zskPHEv{{upaI1Uj7MAcJ)C=(9_(!vvvG;)ZMdHe)yC2k!Uh*D{_zwzvbZ2w&2-RbN zWAfx`H+z2>7;?!)g_@ir9#GHrsR=yzD#ZXtbnFfE;HIs@F?I~*#%h6mxrIr?(Yt zUZ-Lv{ZL!hm2xSnCjC#A3xxW#+w84dD0y~d%4jDSR^?2iTCHPSUB=(PzxmY9eQvR3 zP-byH_9GopqiCLg5jF2NlRJ)~e`L<4JvLDK6CJxrux02IV+nw=-fb%5f@$8>GRW6( z4OmbJm=y6J5k@!?AYd_7lumhuV+0FRuL?3VzMixBY=&W?a<%L;8nx$J(56aLv39NQ z7$k*3Rpf1(F06lD8B&@Y~@FZ;eRT$yDu0NT{(JU3(8$h0V4G@cix7 zby2ywgJ?cjEPLu&Gpltm9qzJpm9nYw%QoF~=d{+l_%UGjC-4q?M|rc057A(eWqo_i z4zwKy>%AG9m)i({x;*qAke!M4(;ra7Fv4Vzp|*l(1XGoP(`QE%yc=mZR`cRw%qs-N z9nz+&3zLCKBt$W9^N>p$8R93OB zBjA%MB$@Scom?HYiB4~&-q{zAhK2h*D_`rM7|kag>$|%jAxQcvX#q#`g6|IWbvjhJ zOF0+^Q}YT^XtH1OlORQ^`@NNr5W--1S4Q61yKJy)!7BDUhC1q5_&er8<(m8*mvB9? z-x|d><8;$(t;~8I)ZB4pF3Tq15=j-2p!JV^_O)QF4swuIsF1L+5eS>o9~78kfi?7Nrv_J?gK% ziY76ndchNOA4GYl46~n`);KQnK6#$T|E16BYh;O+V(V}I_qTMOAz1XLM2*aoecIbp z!JX!`jLc5u&wkdnQemNJZmeyA2^5AF zhe~7$th1?FD^1D`DOBH|z<4O6<=_4^TcepgM17P8(V2t+FE!HGMCWDnYoe%}gr6}% zmGVZhuf;<&Cl_+PY*mz+HH}Q(cbN<=Rn>$F+H3S+LJ&|4yJLbu+YI7^ua^ltPF2B+ z=b{5+mPw@+Luo8%b@3~!t479A<~jwDc3kWYDVko2nD$QFwf@_Zn7QoS&h58H%^DlT zYwmB_Jx7Xop&yI`c zWO^1|l;1O=I6D@{)#8#&Ail3SEvtx3l*0RC>BOWaWoh&e%QwS)o&CK(^Ahj~r<=cz zo>;+a6*iQ-^67r^DyXtCh_y^}`B!cVEIG?N1~RCY*j7cc@2Q@RX`VGRQ$jc53nu3M zsWupxB_>K5iV?#MHK62%)`Q&>DDqPJDl8rt7Z=_M-f@_PXX5A<@y}}47^;h+1*;fv ziZaumb8D2G@AJC$_Vza2x;2=%_*7k=(SM>>y&A~MKWx<>p=a&_wZ294PdNfGb2%;bx=WO_5o z>@&ITw~Y*BGnw!QbJ($z8^5Pc*xvFc{sLZ5#$WuZVR7L_DLEkLMnT2gJ*6m_mSANl zjMqTd!14I)cX$U1ZA0Utn+!V>4KX^hE!iFt*&n1rYBZfckLRU%qvC=M5DCjZ4Ta11 zSv$QSh~Df2c-+=)7Gxrg)pjb$;Y~%0o|LH&l>uET<ml1d1H^&ajvWW*3&&GvAb^|1wDM?RuirPq=en(D>+u| zXpHH-N8YfV*cHuKW05a3l68E2kU%Bow^$I}Ys8I>HBb@qXmn5RUP8zE>(BUP8?uGu-cstCQ(R{a^Mu@kaX$Dx zC6JlH*DxVME4I`SWS9k;$MzRqIk`ws=C-#nT~p!9%d5V8=bR&W4zE`CazMS{{M_^mMMaIB zs0SQ&Ny!P#f{5EK*->TH@5B%6`hA{ABym_4h;xM7)|NM8qwTTtV(b|N~S{&kIvZzI23E^i@c( z!E=QDht=x*_(mcCLH)IBKgL*%u}HGKvz%Sn64;PXZQb_0de#?NW0ATOvMNOc0?G{s zyF`$mk2LIC!-3Ko9zb}GgXN?Hk{t>?$SR`_RJxnp2T2Ks zF7*_3I8_J)0zSj?rxAJgj#>pK%D=-Uo0yvlZt8YeI;R3a9yiI6LmLZg9Uu=kB~>}B z*F?sZf#6c~aE>+|2KfA3H@0f`!-J*M#I6a3?K~`Z)+fd7yIj+O?iMrEU-SF+et$m%{#}zaU?*I@8aX&MB)7EFR-%gKAGBYvPS5j8aZ6Cc| zI`yqG>o79P0cN|)>cQmAonCv(vYW*{=_a?j$MJ+YkV|aVof!n^din?Q8vFid_MuK) z;Mkif2Fl-ndiS_V@@||MROnCF$jTro+#k!h+iSmv8rz+@;5Lla#Hj%kt7YirYEh=r z%x_cW1`fcAo`Y856vQ%J?MqVhHcwvofu_Ck!%MBRJy{<*(7z^13fSWe*a2Lwm-Hhj z4!mHdi2q|Gu+4dpaNa#A6R@w^3Kt$VR!`3-{bmafXCSIpnwW%&y5Bet^?e9|7vt3g z2q=)so*eq*3Q7?GeEY6k%Nazp)!-78dkxhl6N6T>noLdfeupOjUu#7|6M{^ezb6(L zArf(!?wA2tO6N#OQXcruD<9%PcNBY6@&620^ej`dFPhEDU(F<-In1J+HP*NEg84sBR+IS&Dw{7>ouo77gL%}p5 zCl*RDqJ0>Y20;St2LCd>hIZx%EZ$lXbr|Bz;)vuRr=5@ZEfig zxr#brCL}3bc6xul4o}`rXd+guGWHcFc=z?|R~OeJVt72>PR|_5o8`LR9QvShlKjk$ z>Fd=+=t%Z+FNABTNk*rrxWt2TZwfW<$f5tvDsW!_hfU1(G+-y^c+1p9!*aso{CUDC zv;+5jGWnn~VWvlqa__K;#|s)>lqDNI zTppS<%xydLY%rzKHK#s5Kj2F^fkG;Xx*6|?qtw}LIxN9Y^LA}6HYCx}xLv?6{!0tE zbeO3EAz(edVW;a``|RTSdR1{RQN;IU3rfn1op3N$ytGX}rq;M-g9y1S4ia+slyp}Q z)x}0YVxZccF86iQR6A^GpUG zcZYdxe%F!iS|`Rcek%LNFa{!n$A%C4Q4U=Tup=>xLVQPF>|`V-deQHcYjB?x$@1L0 z9nD&fdUs#T%XA!*$C5 z&L+o#@|@lw07?WDTj)LrQeNP#Z7@{w>>DfqGZX+xlF%j@X_<9V4ZcLK!TjVpw#nmO z)>fPLbCBZ>@3ZM+31b)C;-1Up=i-&<;A~PT@H>xXyyI|9b9=0Iblvy*Q_km}RB~vN zmQf(B;JEmP%K)cN`|kUm*mA~bO7!3lpr%l%{BFfG3dzXOky|VcH};v(bGi1-x;q9T zR==to1^ILI{m6%@qu|%H{}4eu~60|8b~YE7K;Ci(eliN^~{cWi7V+?{e|C)G30%gazVINbPomJ^I$O0EnCVn z1SD7}$ldZE-ui+P6PTbKq)|}}{U9*DeOlmIbf`N_ zeDyg^B?!GJfEYA`pV3K9GvXStjpCa48rq&#QsUBEhpKSECO8g0M-BFm;o#S4SuYAd3E=4 zluse4O6yJ#*as#^EGY6Qm~!iDbBTedCqR9~pm4!9g} zmRe7PDa85eKs)e5;eI~l^AVWFV?#qHdF)83qeaSbuNGLOv;7For@(JD_i>APNjPA<&R)0)|oW8vMz#8W77^S>^Xvqh2t7K zJmrFxp%ibJ0c>|5@cTlWbB?ivZka1W&E4r__i$pFPB0Jv&#w<xn7$=YD#J}?YyD4JlwHW*-AZ6fIHnsrL;9%NapI!WT!CZ7NS)clDeV{%7 z&QP$FNu*_BOBnHKUmQFEeFx*4({@HT;4+g?H``l?B_=FVW@{jbVT7-0!~oH-9C{|{ zQ&lgU;i+GmtQVHbp1hzjv&;8jH*|PPV3IB->Ws zfd+Ss+$%<=(VO0L0Is(-%#pW|`Jx@jQ~>1X!Ihd5_T4btCcAA($~(qu_~ZeB>vcSy z`AyI*%yjS~G&Vxr_5wsL+Yel8Rk=vi&vw=sSX4O)BO;P4zbL^i?gGLu$lZWtFmm!V zFwR{7dDCm4>To749FYF=OZhy{n}B6x*wPA7Ffa5FHDdlUDXm7M0KdRa+?Rk$^)$Un+Wrqq#jFj)=RW<(@ zT!PkSMlFGtGiSig!l24!UKKt=u%xV1}n`S0hQ?K%Xt z!HN@om87fCIoh$7lS%1lKZ~Ga@Cc9F>>Fs`02V6aJy+eWms%THhlLNuF%Lt*3NH0- z9iAnNX1BjjLIDdhRLS6o@6Ur0c{+#YG2unx@Zva5rNv;a3mNX~8YH-*s=0zLdfr)y?in^CgOJqn?7BFMd}h_^5QZ$jz>9Z4X^J z2WGQym@+E!QL1g<>1CTQ=EAaqrU%e{Q`|!kBwtVgwpoC&@&`=CA~ti@%&NZ8d5@6p zbf=NAv|j^rT2=n@YJ%`TREHi6TDQ$ty=1b^aYo00I}c8#7k$Zaa1PS}{)w(Wp$gre zizV01GesVS+~#1+oFsPhh+6QDfcxyPYmhH_*S#m+X`BJEjUjHPW;UBC1}kPj2mT*)*@sWe>G2Gd%Pj9(JU{Jdp;StQxBGu=5OHPhR4wiK?+p*RKeTb*AagSLGq$-Zo zj)LM|e_KA^>Y*P$Z)Dh1%W1jqlk`*C}qL9gWFE(ethp^NAjx0O%Qi0c?vHhxX8zu zxd>_h4D*H#w}f5^Oax&E3!J}X2#WgIU^+A0pY%b!<^IW)pxvmSf@0vP&DSLy<%9DgzflV znnp9_Vr0&AzE7g_4-fw9cP#f>QtLKmRw5t56CsvNY)-S1O-sDb>4$8(qeKxH7OibBgG*c+G^i+B|RBBia^@(TQXvz3m2M|oUtjAvc zs&S$H;N$xv=1U1bu9J<@mNZ$?k1Kdlg}YLR1!o||DY!8EK;({4przJ7dKDgG6{Na= zbOQvyiUjMosEGeil$cE2LrYS4g|{&_=a?(E$wcuyGw_~j zdxk6_D;yG6em{OSlK15gdg#%y6yDp+p7boEZ2TDKOO(=zbz?54HwWEuH9Gu=NSrQn zv?zROwtKTyr>$O3(dB3F)NL+jR4vsDrLZ%Fw7&4AKTucW?j7uMIVYOVHEa!S6;~S= z-o8m1VJL09)x1k}WFTapk&~0-Z~x<7;pFw2Ar2O%Igj*}=vK?)muv~1aUYkE5AhtR znKeY#RZeg6oE?I)4A{;L^4i8v)QkVr<@Pm?PrP0+Qs1Yx$VV9by+u)L^KD(g5A1*+ zhhoMwVR&|I?VX+D6Eurm%GCQ#f9rP~nX!t0jDC#Q1EA{S$p#IYb3mCVnJ1K zT2{mTcyC2figsqvyZW+y1AehYo0lj^+n32q(XTpw@-vXI(BTx?=~?LLshKBIcVSo} zr$;xe38(XYufC|j@*xbyB(VCk?U=KyFWW}vb2E^*qhpSaoAkPgMJ+{2Tec0+vn$-^pZR&scVGLNLb6^7?(>ynRYEtA%WHjm~qQ#fdK}@zh=BuvHQNdU+GE zAD3{)s*J~Cwf&Iq*LjYo&Q_a;j}8yY~lGd~)x|FPt7Ojtx| zToBByE)!qu?EHGN=&-fji^?2>pqQ3Xw(p7ksY`v9>&{^K0w)-$T9_J;{WHw+m=yVr zXY)<`+gix|pz1~ptl;P;8!*9@8I{ssfSofdznX^iYOj&V6UyB{`~v1r}KGa z>Mt=HOT_LV2TkItbNc6|sA)X#lGW%3{dn^?$>Ohp!6C1J2KVDsc7xS;-5a5>KHjh7 zuRH-b&;qi!t?!F+3o9pIzsEwIzm9D%jqd;*lL3CV5JB9mzkl{wg7QDI1s?yrc$ok4 z?1Q!I-;e)G;0Wd8t8plhW6K4;x*jSKKfj`^)s*`BdcX}VP6o?{zrq4nKOUcT$yR1P zd#ike>H{_iFih>HrRIu}y!#)AzST3(iw$ns|KZRt*n%7COh#*ad~ItO|ES=?UvtXW zn6e1yp`W(e{(bx<2m!ZQ^TwSP4sP{V9||}AS4BJ4bZvA zmYEz#f-I9B%pejh;%Bcu)yqP!vVG9~q}pVY7Z};C^6ti^RO>q4w-z zPl9R}eziuoyyKz_3lYyV&TSVUEyj_3OUZQ$0RAO+uPk8dKga=ULrJBRFIY(S*+=Ei zU0T+iZ6!GpYnUxRy8} zS<$;w2m^2>mO|Sqz}`KnVTy;8@^0tqqf?GGOWlv^wUxKWof_h0<)3EDo$P@RvwGW{ zPMOL0WHw1Essv~_5ib3}s{dbdH7+Bbbcw@VmAgxc(|Jx?G^jtxKnF!Uct{<noUN5CQ*~$YZyR z-6;7zA2wL50U8FQ;kiL$=t9HPT6SCsByN9X-mTTSO?(!2U1u`^&`LowM$Qpv<}oxh z2Kri@ayj$I5iZ-U5e*g8afh^>q=H9n*}TzVhrOTzq)DihYR}t@ao&B1N5bG#7I*RZ@emOX3Y1f<<$=zRW06e57mYM@MKk!4I$ zq(@zVJ_9A)qE(f&2JTCf6%e=3m^{IB8LJ@ji1I+y)fKE6mu~v$of#XHXcuQkwu;ba zYTA>PP$Vws51^QFlV%Us^Mxy4w$%c6sC@LY4`13_mNH=_2Hu3|CElaiWY-=o>jDFRKlQyU4LF;%C0lb zsw`D{fqB2+#t8Pq-Vk?hwK{9gqc4F&DeQ&#`k)Ht*d9GA@HSv27?zt$cO7^FliY8( z;V~FGXl5#oNqXq6(N4cbCWrzrocYfV8epl9KAixmh>?XxQ!ewhsS3FLN<-Qi)8M@` z?ns)1(^XLIr>d@AnAtKuF&uw3Aak89yKy<9uGwF@$embAPe=Z6dZ;J!nGb0aBC+fQ z+AIeOi9k2ALPSy`k7a)@9{~bPAP5x-+`R zWj_=cO2IrLW}8jU?cBfuxQun_hMlE1;lx3`R#;quxuL1@;JNq=E_Zd3{H|!Z&%JgV zk7s$l=WQwwKK8HfgdDnvW;O;F_ZUBp?eFOcKKLp3>gHw5Nv0*DAi(rv-LVGX@<`cD zV8JlHID-s*V5KE(>#pE4X5c1b8h&#CU>XE}a;ics$!mb0J2#A2=yATUN2GOMgJ~^^@C@L(2uZhqj{9{!phOiVvCG z^~w&;0WX^NEuwq%)WgirBjZRM37OO1%I#yw144rfW&2$Xzuz0#%Id$V$N*5|A8c2{ zRR_`^gwH}@#}L4+jqw-b{G~%fEJ78a(BAWL>Cwe*@ffcuAh~6dOzRhl-gJQowg`(( z8K%G#Xaj!QR6$HSgy_Wrp%tEgR{H$cQ$=~Oe3i?2#17{%@DYa{SzKOBzJO>~h`6qqTSqe0rinM{9|BGI`CGGs% zJbf}p^aj)huny}ROIPZ zIN(o5ZfXr(Pypwj_eqdsW1<`2dIl~&kWzPdW6Eeqk3RuX1ZceUG|$tb&sME%6J)o! zL7z_mL|ZZ`xx{#t2l1YDIHN8>g)R$}{F%@v}O@&@DloQE8{^<^1E9X5kVx3iL^@sp@?5Qa2V;s$ z%W&UoGh<_Pji>XYD!ohani8!H5&`>T%BDO!c7G^G?KXiwwz$F^_#M3M=AY@sSmh9q$*r{ zGo~d%^se_D0O?haU>{BU87O}Iz8w)YjhG2TqW<#zHix4biNVr$fw|G(5)qy7OFG!k z@5N3l{<*}%hsaekWTI6j_i4;Rc2MFlt=zHU4a9eP7=uDU1``tzB3kA74cmPBqRx)| zA93|fA(f!+%&mQg1d+TX8>8f=q&Jun^u|KQzU}_)6Nb(k?ixT)nm>UdB|(dHY1|4V z<=LLRLEo688>TxbLdCy2Xf6}Z4bJZsROg*qB0->^-LHw&(o<#seXLDP+ zg&{FK=e>h_WTm#=ysLM0lJ>SD-4Y1oGD8_(%+9|&&PX4_V=|j5i&F)Z4Y8Qr3lN~( zF8eAtcjtDjH@#o6LzUG*xX%M_zY(yX87jdS9st(4OX-9_r{Y-&b63lJmfeG0^~6a6 z!4o_fIpyQyYp@J+t26CqF`F)OTY-m?K$ zBs!ZRICc(r`$3&@y{>rk{O|Yjj)?L9SaN6bz&)}A$qQUPyik#sbQwMvZ4n8mqkvvC zPj>HR7q~~ZxZ6?P*&-+)+e0}&LB`uZJLkCji2mlYECb_25qIIyZacV-B>d&4SyBS7 zAq@B`C2LQR*IrWxQ!{pR*ACQgbZ9@x_&OYbDTVd#y;cY!*j_C>bvI>`Q&(RIL4x2L zfI&2<=iO=2L3rHSz$9NalTr=6xA1)d^BHcNU>o~cT<^Xgqa%Kd;q;?-XG!VtS1>S~ zDf#JQN*PK4SK=gI+{llI50MlRYx7_#vBTE;AaM>A8)d6;+_Pn{Nje#4teYG9h55;g zEEO_RKd?0P4_ou|sVrE>fC;U-w7R|JUs9c+1i@9sq;?n-T>JY=C$BoEoOMY zgFEx#ojA%F9)@cjtBsgA2B_)6!{3_!ReiTxIS-^hl=-Kf)w9Ws3j?OK4!HsAS?w7= z64>xxo_&F<&k`h_ejW0@@je~w={=Qx3QtHYsTUpqbsF5)GYh0-2<5POL z7`1+4WzD4m#?g0OeG3&AQX;V)B4PoTs{$zF#u;S}>ylw%-i#?wXZMezNlAD%8#Yop ze!t9j_s1tk*&n7P@qH)xC4SuQNz>VvVUm- zgUO)l{LpPd8S+JNfU(YMxc-y5^FztSP#H_haMgO*pCP!q!Ay}NvhHWo#7QsrO(@ZO z)R_+US>`&Y6@5zP){dIzzi)<-_BCsFn?%oDy1e7SkX{qly$OneZMwycrBhk3KbQOe zXnV`3xVolIm_Q%`gd_yF5F)s{22ao=Sa1mLP6G`z2_D?7fdIkXwQ1bl-Q608?nb6b z?t9idYu3y>Gwb`#FV^nEK4;6RU3Jw}RXn0iiM(O8-fi`2`wfYmyvEEoo*wgk74fWG zms{Vh;xcX8*lZ6^$o7m2+l}CX5kvqRC@~FFCHWT5)abxe0K-Sw#&<#yuTOmyUb{k2 zC>JAGh>Lo=dD4QXTOnuolN!=;fK%3Cl)!>ps=e)BZ~#91+Q62WbZa=REJ!I^Uf@On ze@yOPS((H2wLAH~C5?6Gi=Z6}tc>7ofYVutrAj#1mZ$zWI;1Q;dTs19oqfBT0(LtX zmTK>^s|x~$sd4WL|Mp+@&i}kk?l7nmD)smy5H#y>sbOF1bWzk$v2^HY_FjK)c~n~D zXe)xYD8t`LeQiD9g)!gF_2+Zn&50rr_tK#`psC{M-r-P7mC{B?*`RQ>(du&3;j2+= z4@jZI4{?WJKSW6Nz*N1*Y%GLlBzn&ur>rj|_(R031G>a3J4GH7n#S)2o#)MI%UUYq zgPQ{-tUS*))?otfVplD#DyXU-e^%Rz=c_D<_bLd6GuYJ!KhI{$%cBQbe^pr>pH3}| zKN=nh6N%sBaX(~%UaP=j*}bbMhK|Vgcz|iCv?6RMhxU57LE57cd|n(>ZE!~Z!>yxB zcMZm+CbOVvkNLgImZ&YRk27Z+YEhZZGG7gUR>u`$zI&xrV7@jtLCfL>Xz<|^nc?s3 zY5yp2GIegjM)KU5TTeVCBlLY=xpRpTUFQ=moNOEV)s=&c4p|SaWSsO-7Y%+!@z-5M zK_{())(ODaZZ3V#<`ESrW6FgN8OJI?YQH`Kfjb6dk9_%f9J)ck8COs6mzs#i`6=o? zIrl!J>P<~TXw;dL6MI=%oIA3-Q78ZMzS;TV>QBY(1f9nZ1rg2BN2o-V$N z{PhPmx)8RV?qMlh(`EB=l3{&xJVhYBPD)@>6)%5AW9Yzntm(~=GPw3^9a<@9)iY?9a z!vfC*Uu7Q$^_6tV!6=y(zF{OcY%Q(58wuA!F^UcJnw21l((8FvbI6&W;y+HmW$x} z9;9YtIdcSn>dd1E7pOe~*yD3KAE{i==Na-g&MgU(uGaNLa`19CpmJyX!h>P#28jB` zfmpwpJU`+8&oTo;U$6wJXDkCScrY(Iw_V zavo3JqZo|0SaSWXEgaVDtcHH zU!zbW`sDmL=d;URU%OOrY}x{qy(#0N~0CU_E%x@%gUI;-72jjhWvAbzW}_jr$)1 zKYV-y+W*_ma*sl1Sd`Gh*tY8dli0`H56}Kdb==hZ-e1izygiYG{8%(7To;`GI~cp{ z??36Fzj>2+^^MxX_$jJ<5~`LXs^DR>%IY8N6$Ss^bJTmoI6%u3S7MBHm(BWbc|`Vq z#POz-zp@d*7zo^-NcAR5zX?r;yYM;YL?10}iP-0&$n^BAI&P(3w6)j zIil4i1AA4No~|2i2W$+%vDN3Un-4PH)>W!MO`JN_45}o6zBQw%28BT zH~X0IRZAmUC7!{|(;!H-d6=StSDCsToAMw0+r|6eLjt8Y0smhy?>{u^KhONnN<#g) z^*^m2^`GBNSDtl|0@Xzwi;27dKEu^ep?{_iZ7I|I*h^eeeR^TSZFBJf0l|v~h+ElY zJId?L8P~QCwG4~-{sbVi}Ymok=7O+C=e3gfdJ3o8FxRHwfgxtB4P;W61?P zB5q9D!aWnz`C1=b2sj+&{r>%Xfoc1~6V&lyx2%N2ziMB|jgeosbEI?;&B9vCMcJ7` z6tmMdV9{1nbZp#TQc*7MqtA5h2Ob@gf0MZ%($k?-{yih$>}+pZM*s0RnPE99;Ns8` zkQs;yy*&_c|Dsys*xVPMRDC1l)Yyn?XPM1%%=LJ_ft^+5Dn|mERGvx8EGQ`6!rKA4 z_CxZL?Xt!ukyF+P9D?630-EJ)Jl7*HinNCv_nDJI1?pJC`@^-C&!Rj=8l828 zp;d%DuoTC3!$$^r`$)M%Dnql^3b@#ir~OoW{h^HWFR0lajxLT$DkmnNt-tH=rxLJ5 zm}4>9yK=9-`tPII;p`?Me;)W-mjxh+>01N500Lk$g+Z+-O~z>*(J$%&3~XC@kh|@T zJl`1`-atisqvA}@taAPbC68T|mOfTVMenBmSL#6dZ zm?F_^dG0Nb-t`X*9`V+jq$k15YY9O9q%}W(pCEa`2fP||@2qAoO`1x#w2+Of`@KcF zvh&=?Z;v>6gZ^qNNK4_1_3rX&!Bc0Z-0)_O zrGFGQG?$n}!|-9B-_iJ@aWm@iqmD%Wp||8h4!5H8@~8mm@%;MUnB8U7*o}AI%Z!HF`<7<1#SY3LHRNvxdi%oz z)LV}BEkgg*s7;*{ubAoiS_EmtJqYQNxw%(NHaB`ul|bl8%j*79y~>{}fLASEjf-g| z$DYK$cQwE#p|*@c|Ck*g^SN0QwE`}`L+8XKVEZ^lKW$k*;v#)j$@kx{Ix!9vtHsza zj{w$Di8w@Lg@O5@?#p|sf>tQ|EzDY*(Bp)LU_oB)_#318) z>*;i(wN91EAnV&6yoE+LgRv-@Z>D5CdKLxuD4C)u>rB*5f2G9~D&eU?r@g-#HucCq z`?uB{TH-UwiTmXIRV<8*vA8ekyZUZSy8(Ek9A8H7W5;@=#?T1e`=LY6NMBW5Sp*Uw z=ZM=Lb+1#Qdi|P)OXKCTeFXt(kiiCRlQ%F-6>*G0tQ6>HGP|O9yIO?S^jlsHDfdF@ z)aLi8t*^I_o^{>@GYTap)M{{cdpP~$D_?@6LhS6$S5(9s7Ye!!Kw3w+8QRFJmUPs& zJDl;WB)~Y=_B{H?9b^7iFZG#?G-IEMdmPE=;+azw=a?!NXF0{z?y5my;yLL20E4yX z_;B^oL7>~{U7Y;$hxZ@q-;buIP5*&k-JS<3{D~@e6Lh25xi|rx&=4T6lsSW$kE`Yq zYJ$DkU)-N&2!8*P8VIvP-p*-vyfM^z`N*~V!a#5VxVTAiv7l`~2us;?JqcBfqnHJo zC^RnZNa7o!E!Uy-v;uVb+bM)NvAq`qeue9KWN%Zd|E#94qGW@2I7s;s|LD+hTaJEu zvA1L=QUg3{4eF?cVTQo}MhX2XU)PO0l40BSVQP=~T~c64#1O+!&aEDkX7TqOiflc$~J&@ZRT$ygaL0 zopZ#DSh;E6yhjB;^L4r}b`kUxJp3I~*Ygr~26xuCu6UyWF+4Aj?clV!IoEU2+I5WO zwUF6WQ8s=(0h_IW^f6yN<+a}dM{H>8nrskKuy6+_I!ybjvBXDN_s*%15E_Uy9L)Av z`F=Z%uAN*gJM56%1RF8Jk6XhgiR==l7VHTAoZL-%UmlIRu!TEn>|-km9fz%_b_MPh zeLakl2GP8DdAyRk2)sF}z6DIPrFQH#Jz61s^w(AGZPHYn{;hJF9gm{+A~b336tRH# z4VLm7juUpDtyuve@FX})L`PZwnZsWXF&2J^^J!tYUTq~h-=}o{7Ym3; zvoFiCJxLr~&;g>M z?~ndbEWB1w4%0tZJIzv43E^+-+igCUu*XSr+TW=LU6x12>f4&)i9HrPICP^sht@~7 zAH~fJoM3u)(E53y88l4_h$M4+l<{KX-NFWM4oC2X;#@B>)U34|K7bQ*wz@zd_<=e{ zmSZg^8{hJ3B`i~s^xfU#z@ioC#8?O5bIlCu%QpCKnCIbH>AJ7ebh=2_hx8ogcg4m~ z7GGTR)wu{B_ar2Y-y+lYCrr`x^{bZ(grS#*PxB3$(^1jCrQOOY4g^9>P`(jtUygq$@vzNy(?U#-Ko=O zbUPtdWSXEJK;SWMnNM`BZ@%YyBuXbt*l2s&&+Ts{J*;Mr$g4>8dC*oQcr^)d7Bm9P zH1cc{rLgaYUUM+Md@J};0q3VC5sTZ(1)iEJs&q_`$j#-hh|OZzZV}MNV<`gI_Hw4t z2%uyAofp$!R7w#HK3|yaT|Yf_$Xcj3JX+KN-XeNE5BDb*uQzHtTV9E+Un#~Ga}uA% z=?dxI%`&gj&<~8(mf^hll)wP5sja3p?SrqP70#dGYfZP^=$apIkr_2CM6N9{w4d>bB;FM0?D7a5MOJL7 zgJy5qLZUn=S8TrIbA?RQQDEv;?U%~if1O$WNs+SsjN0Hyv^AerqqYLbeJKXDfG&np zZ3Zg96LUN+O|k*mx|_uZIxjF7so4%D+Ic)1zn$4ofzqrtvWlx0+$KXro4-5Pi!V?l zL^|Gzi~I}<<11m=4THMUU3^Ue^BJ61)Ps(_+tz$~e&(?V!*}|jSM%iu6e5lA5nm!q z|NB;O=T2-WC^Nla1PHje+6xV07P>9c^qeresi%UJ?Tl91KpXc8L5&s8<2+H>S-lV> z90|EO7SJt*s}j~+A0!RbAA)OqrVOO*q3ZS9FdL7d?eAKE)fQOeJSxK@b#`&X!AQt1 z^n_E)bzKpZ%yT=}TdZ+-kaSxyyPq$t?QpbCRB$;-bO(hrk$fj4e;;J=ZjQ?E;kDw1 z>~5IHQzCXmPsI}^B5UxKLx>D=U_iHbY<1@J!H?@#Q2yhEV~@ckEBVPRmWYHd22Dyw z{$$Ni(9y=Z^k!HsUz^CvNdeE|%=y$&ULRlgWR5`NWXsjJ3ex$;72FnzvM%!1`Ih-6 zpVbXg=FJpwNMN;^GvP!O@w8YA(PsFS8vP6)w_f1JjfX#F<85HwOe`UDoNoEj`lb%_ z3;`T79}fdL`-5q`{jyV$>xn9hbB^QM#Vj5di7;)ub}ph``0+WANB4S#>K2wlbp>#d z*jiP*Z2^`OX|n^Co#F(q%HQ#4l2Py`t1a5r&duZ5sF$s@4pO;YWz)ydGkNUwS1-QA zJNAT)b3V$qXrQ|T zcPSW^@3MwZQsVvG!Adb|Gwn0M-C9f6F}eJOu$5a}bw*GQ%_A7hvt!RR{7pv4Bh3?G zflrOOzYe-YF0MXfQEd-zqMXV(cutQabR9~XHLi`$>shSo2C2yxFu%0C6-Z9cxyb>C zvUc>$@;gW(OL;9t{a6PbKZ=Jc?7qX&(GrvUXs51XB#&n#3^!c|kW~|H5P6h4D}A$X z06W0PPs;JAfEWFs*x2Y|gkyh?;)GV+p%@>i+2~{fRC$!dl~jheDR?oPdAHFz@Y&Ix zA27eZy`J(26FChICX)!`wwZH2{ZIs+f^cxq^3rlM&%B_Zt5#C|qNAx)?b=$^JAh(D zcM8K))<&i-;|->3Q|hVHsI9hxmDSX!2%oJa2)natW>01Ye>x$ zLz^eGQ(Ir}qP_b(Ml1SxL@5_6h~6PL-|+p9Pl0?i#W5mQ`JMOQ>@!?v?H_EcG8B=6 z2JuX;(i((sP1jSdGn0%)mLc_M9^vI&$F`FQqyC20q~YZRhTXOPar0UcSH(A2(WZrQ<9zRf4)6%|<}WvBvp?G&VY1Dz!K6tYb|{IT*)(9oa!BBJ)pO57L; zu5r~o7IAo3|EbozE7b(DO~Rfbi|HhNQ?~wnZRpYVu)}~t&FS8=xW+R0y~(--4f>h% zhSDZTTtME&w?Xn44b54tw^(XscIuA7bc}+({iVnUCZ;k&mMVX*pDBL8zL zzM~w$JoT5kXUCL)v@Qg;j4U*Mls{0gZ6` zBoqE@`V%UF)Y#lsE_}}&Iywsk&5zEiLI!V~;nEc<^8g$+i4A2FPy4NLo+{xy6^l+O zg$w2((_9M+^&!2&Dn85HXC|%(Qdn*IzHiGNqc*L>b#s)gJ(lv97YpXsY}9 z5)*l?^KP=h?nm>5D#~9YqXpCVt+m7of3UGx!RHCWQ$A<;t*|!Cu#~4jW8*Jb7jIy?Oswvi@XG4Wbj!T}5LRh5;cy@^- zWva9)fX+ylnF$-?8d@PMpEikYlhLA^-hQ5dd=NY zQ1KI7Z20ydh?wvhDFFq%FV)j&!MA+08MwTMO$Zh+cN~e7_7t>}Nu0KfI4LB| zZ}2#}D3(fmMYxF6O%G#McUg7-xyl%mw{UrxezSCU{45#>xK}@q3PS~tC3d-&uJo!q z3^eZL!H*9QfQQTwQBQeg!Txd=4sO0I)1x%$?y=g^!+mX*HWj3WquX=3b-87wLqLldc}dlJC$ZClbhpX(NmNvqy&+Llb+6ByD`mz_ zb9JjW0akD1zthOV0@1nZh3tbBTwXf-X3loQ)=;T*r9b7;?j}nMH zE4Pyhk5!%)>R#h^Hx|=&&sZS_7;NEF$18WiRxgY^o%@uMsia%FdL&UPBljaW`1^NYtNT=({T2FP%8_J?6> zEA=brv8|hX%r&4;N`wv3K-r@uh^X4>_%;$EJPm~nEzBdKpj{`S=-Ok1Y@zCG_N@-n z-8+Ek9`bsPwp!X;zTNb$rLlQ9;tNn;+PjqXzNWdYh4FnCcH1~2BGeLw?In6G;1Nea!ke{P+BxrFxOeeonF=7T?mBr*Gr`EL8C^ygVe z=vy{+A@qMF;b7&V zRC)ITSeW-7_+f`=5K#~otH6_z`f>Z^#W)|KVMt{ROWp6ldf*eQOfW^EdN(v2*18tD){Pityb%-rxN5DS7k7wKM2y3 zVOjM0^Q+$7ujm+Jef@;@^oF{tQ`|A`rc%%AnXTSe)~zcm?s_!VEmY6{wSCCG|HTrg z9e;AeJ=ANkKK!4p!qLZQ+Qa5tM<3bj(_dD{9|@rPMAHjE?Ug!KZjUhoPz}#(#t#Z= z(W=)QX_?Yb)_zjIv{MGBLa7-}zTz2;aC~9t$qPD`Z9mK!H_Miz0_j~mE1%v;FwL=f zo~`MqWvDFIwm{*3AJwaur)1MTM{YN*k>cA1!}hXbVckZZ1;`cR1axu?y1htN+@xUG zDQl3){3*}sE9pagb;_Lt$t|rds41%}Q(dYko84oNHMeHZA3JTo^Gpo5yB|E@uRoZO zZA6^T0(9X3Nwb(MSKzkvZsU}Dt5uw{nlRlPVRrt8iX1Udrqm?uB}abg5c$&+o`+!7 zW`b#zO&EMGUP^&a>dpq=GDc! zM9Hjc{8r7!mu~mp4UVKR~r-Qs70G)`P+ z#}eHfPpu!vuwc2K%MCB9Cv>hoIu+JFZd%jtGD%A>kP)_cC#>U2ERWl7-w5V-#it6( zwlO!&D>U1JAKh(eUcQPYG=2-~viNT;kWGnpDegLpJZ*L!%~x`1W!7`t*)_lV@Nt8Q zNp@{cqjHYSMktAv_fj^MkZ^5TgA}E6^HF5Z z)I(P+_qhl`WmmBDlZ`H7u@nXpp#b5?&J9~$!xe|M_n{y!-Cjblg6mF&#(rb6x_k(Q z4jPSANB1{>_OR~Oa1+gqmn}kKGM`G0w$fJ18r&NUI^N|gAM1@D(}lZsrdU0Y{Yfu( z@L;@k^)80R)*f}53`}^G!hs?+?j!1}f&dQV-`cQ)iV_o{OIEM>kM z68$2&d%G?Xt5Rbfc91qY-wOL;sQgt)JgU!cO}}@(yEVvCC<=0r!&m+6Ql9@(bsMDUbb8a+njn* z(elD~0R^$WPbF-IdIM+j>JGa;ktB9$CcOAsw^KvSFq`ryyEXSqzThZ36$ziQPcWLG zlc&?JJ8*a0f#ON_)sdFmgl zwJvn_A`tNHb$YA%DA%9vzdi3^4N@u!eopb9n48HGmr}OkNYcWE>rZxz z9LC}Zk+M)BW)Ed$OGAB~KrqNwvFc(9_lwuCu5~#tbnmNbO2NU~%(mV-yV);_Y7vyY zK&D}N`0+^I=Uf`Ymn+sopVwD+*aHFsdDc-*gmD*jS;fH*1Ri!Pt+4NX!fuV|)&Qw6 zMe7`!=(I259!e6*Ust-m4(lRZs*r2H|1Kmx3L>SrS_4@NZC>T#T^|A#xCW1+q(yG# z6urfRL7s?xh4pI;9MloXC;fP)F+C2yzu!1S%F4Qmmt29wq+ zIHz%EhmQdu!dg0S=t3t!J@9fqChh^ri*J_o7Pi%SCGa6a@z}BLO5aXdA+igcXCv?W z`w2r-X%x${aeW095*~B$Bwp9oz6jk+gOgnwro5UH(n1gReB-;mz_DICvcp;S8?4%^ z=B>d*!@7Jn20s0>Rzq((me6KGDB~Q53CeYE=IfIi)kI2=UD%3^T(>=ZsN;#haAeN# z=;DGbDwZ52@0~PA9<;ra^7p}1QLFVkjIMp}=>FSeDKIBK03~Y6(k;rT4V`8d=P_PU z^L1EPTT~|E<7K56&&`j?4rZP7s0C{B6>Rix1Td-vh>R-%J6IT{6GoAibX8Eeq4GBehehtzgQ^0F%!lZ!TYOt~l-sml+V)Rz_T zza4m;@if7@YxI?xWfC1ep({=|-BGM@K2D6G;OkU$xJ1{3H&m6ST%hgcqaHQicUcjN z*IjHhg74;lca@}@0#RGsnTQDtF_~?)QMD1W8{Rk*09X!a*^Yx1PK>xNyVA5!O5DWH zcgbAVr9ahzg?^upxV?q?$KQS}Euy zY$a2~?lf^9zGW!X?>e$|S#GSz*)GwA|31l-)5nF=2$WB5_52?gOVd?%N~Vzt&iHNPJzb#z5JU%n5uz0i(S{O6vfZ=F>63WXliB1;JnFLedkn1Zyu-P zexa6sQ@$L9H{n?8*sQXtW8d$JceTVLR{AQVbwx@7Ht*TR7cMS)Dl>6z)D!OTS{M9e z^<9{72{NGROsINGXlU&yLWZC3+#dR%ip`zEzZBf&;&k@|+WRBZ=I{E=#?_C} zvLD&JN44OfYuu^qnn@KJAt;r7O;fS)-rZTv+Vqf@m2r#{rJ9|hH~osT5rSjAK(#la z-MMatrnF4#IN=Y7?|X^9UUW1DX8adLzlJuSZe-g@l={1yw?gKZJ0qmA-O;Vky}o<) z*qnJ0r7e3k|N7V366X|sc#4O6ip@SVkwt|zd3ShX)2}6ZdSV?z zry$Zl-Vw0t)<314{(mqT|L<(J(Z_o6N26Gna9^`A{t&5*FS&Q71==s*lWw!>S*x>t z75OTDHsw2`=(8m8>hD4j8|<>TZvKTTLo$IT_f5leu!I_ zO4;4U5G`EJEK=r#h?42xm{6vSiniubZn&V5a}+-~jicsmqplRj!M>tYEAn~|x>s}b zjrZgb{Df5DjI|RRZNWw87c}Qz3K4?he`~~hc^-~-S|j!5Wr=h=Lz{+70(4Jjf_f*e z?CqpBcQv+^iY~7ciQ*s-Q?U|MeX+iq^-UILP3K;@sE4UQB$CNx^Rd^-fi8L6BnjSnD6grP14+5%=v>;P7BI%u(k?r1OLHGS)VkgBnr#A{F zVQywljl8avd`TixUzLG5IjVX?T@^>UlZ1|E!!?#?-k|AFBN^W{>L?K=?Qc59O-S2-`MW20sDO;&tBZ*eN%9Q-kC9!XB};Fn;fQLPantlr7k zPR1Nt6BV)|mRycfTJxRpAk&WCb*;SOdhQg&PIa_+(^> z7{Q*Ky6mgPEN7Iqa>5o`u4XYNh$v9evnDgKrtkVpth`Gb^~I6f9sV|;o55;f2mWOH zjX_UWBp;DnG9RF4vv<;8(r3&+wa=G);gW>WVP82P}RB3Ii|K(JI+ML_w>1p&Q53A|MGX_*2ZzjoE&zAkEG=9xq zGWEzeF+6LMXg(fUsP8n7;4#pE{A#@v9+eS_bZ9}CepfFr(+L>Al_{h4hiKe!;vW{l7PW?I@xzPWdm~mP& zcA>hRi+b=@HfRKw4<>RnXFgc`MU5!Nzet`=^LmM+7*?^Pl!cm@_VSSx3`y~W0VWvB zwW+k{E=Qy1xN$40Z1y-z+r=j=`3c? zgGTrxd)1wl>eS@h0|)5kr#|RrBAkRKN-kYkpi?{P>%Ull#dUpZ1GG_prxnkIRI%Uv zs+-4|8MqRXgVafki-w$+B8B-ate_F680E%@=Jl5aAK=CSc ztiQJ+3AKQ$xcF;}!f+Edi%q|aIBP*hs2}XO7CXguP!=%Awcg;d=#Xk$&E3$mc)8}$ z%WfeV2a~5p?_kt&oJ=P9SfpE?fV@x9@0U|Pm_SVa{BqmhVlWwW9(W5S)<24rq%*)@Z$sHf>*xG+8PNqPSY&0g!p4-^WT8-v6m9RBvjX*bPpuH2^t%lG(ZPx2fgI77vS{FL|sl2XS%E>zYnc zS9$jfZ9_wCPYV;@1Pe(CnU2Ci;lp0w7mWUpS5us4eij>9U3k++MMSNAw7nZD zy=p4bhJB3}%N8UdMmZev>Q|Q(Cmg}PyJ}3jx`b>F3*uqA9B*sRNK*NL)<2vU2Y!fY ze7tD;@_F`Ueq}e&U_!!DkyVf5_HbMZ$kV{ubv)EbAV}+;r_)3pZaz;^=bU@*3TEzi zxaPu*o~~qzPcK#Ddg2S&;m~B{+%@S>XKVFJ_H1O67|%wizyaiq_MR3Janj2(?l%D0 zJg+Bq*AIA)MM3`g#2f*v z@y7UjyK*LIJG9n}q`O(2$;#2+^t`|MNc4N5*tjoW84o>V?q6tYab z7?YiRO;Ui2y>ZqZ!p?uCn;^t)a}jT5z&*A+1Lr=C|51G;-CG>^XhCNA+4LP z!ziEIQW)e`_i?T0(r_AK?x6t?cq~szkw-Mnhw4d3mr2#AP~j=TG!7gk+Zgz50sUV z%A)%Yie8YHb7Z|sJ*TZrsKqC(aJ3v)ygvmd(K`j6wJw6I^$?n%o07u5K_U?vsFC|s zZEBXHJOvNi`qc8(8r!3O`HgWZoAA``3mAXFu;~mx6bzwy((@0R)hO!FNQZtHGfKnzNNMn*1YJApSPEm`{Ri*Y3SYnl` zQJs7@~mT@lOeFBLD51}vjJ`TFc^AuV^6n4G{hRI;PSca53{m;8Ib?*}u@yzOe`Or?1aT^R{Tg;?zJ<~Ub zD@;YE#z@vJ2bF0TFRGN7EeEUPi_tun%3_IU0$KOzAp5+NJNV5QXLK_~Zhy?`XxiHJ zlIJh{viTU}F(p5dg)S?#GuN34wqWj^X@KpyndtAJg}HcpTILZKR~)(bsf#*ymI8`^Nd;$aa#PZG>LJdTek}`cTxD6_gji z_3_#!A#mmsm53@WM(8iS$z6Tex%g&Z5&|I&jY+MjwwkNopY>2MDMfP^M`>P#OEnB> z0rFdi1U^^VjG%ot&qCQVr;wDu@RDB&`AD*BL45j{9-ya@YyU0_qeZ=@svObky)~f? zv0fEr1)a?q%Y!_l-bs~ecNc)i3;cs!Zw=q+oz-`4IAzS8ONX46`>dmLu41XqM-aS0 zS@unL#8sKch7TOT94|BL>RYm>i=3%1`m8*MQpd(y<^!6(RUHbSsjF{vrW$(gC5~kG z=^US?=hBfljH(*DseSWSvT=7Ao{Qe0fHl^;K|er^hS$x6EI%zC7mF@(GhDRtP~}4| zkAsw=Hx*1@~(tm8Xzi3MvHkt(*|MIdx%;jurmg? z4!>$*8={`%XqWxUr%Qae;Dlpszd_c-4Phkf2C+ueMl~YcsyB-=I$0hnj!g|2R#z8{ zcRi4wL%#F1@@kT4$O)q_IzASD&Y^ z6%P==Ky-7soUwwQ{y4lSIB=nQH5^Q1V63=&6eZO=yMjImxK6MNr9UT!E zIB$&in2mDE;df&d8w#0n{~{-DA@M_W>=P}NsE1Wjj@1{W^@$F><(&^!-Hd6pstZBc zSZp10slGi||I?y0l5`ESSx)6>m0nD@&k!32W5~k~J;WsXv1f0-bErs&x%-HElHXdN zb=LoU9vnwD=YXs8`Jo@Vg|?>|Bmj@|s{_DzBT>>t#@xQ7y(NIm<6C0M<+kQVVvn%v z>0s}9eNlr&ZlQJU`6nQE8UR8hcl7ZQ`y;-pn^h(O^VQBd*Osg~7->-L%vsT+Cjk!$ z{d>g>w6)1Js$W5q`gQ70o5R)|FXuEp&n{1=hL1{L`KKlNKNU9(=i9x0$2|c|FETM2 zi%ERZP}(&&?qI@fd#%n%93^+}RsHa;jVS;o53jBqR%wj^MTjux;DyS_v(`0oG<|wb zPRhGoa3mknZy`LpmSFJnQL3=XaluJ;k5@)T*BP6+4-%u~$_*9=Y8YI~2JLLJ0A=#H zlKlaUeGC!Zk}ig(E`|YDH-j%IC`kz3wuYiC38BI?#n(J!Boxkiisx#n?hLR6`wJB{ z4^ZRPQ-!8`RCjiMlztns7<5&xJAb1qQm4@|&YpVCnZUqQbcssrLy)N=T^<@HBOe{% z59YH{t!ub;nO18N+8IG<5F#i%S{yp8$(X`jhr(sgl31!!K;3;0QommH?-Z)db1rV% z3L{oU9^zDW^buH`_iINtF3r4o1^M8U#S%bt+zZEBQ~Ric>wN6M4Xe&F=_-C>LltEe z@*xnzfHQ;EhO>=J`xDH)LWQ$)RDUN* z4QTTU(HbHc)$reG?~ScJ61Y$q>)|)w8Y3fQ;x2Fpd59_`e30p?vHR#Gp+0t%P=sAj zQ+%1^zFLl_mGY?s9#Xk`!t|_M%Rp!>hKp7CuafFZZ1w&eC z*L1&wNzp)091G=WfdG-pZ}rhZMeA#_nR%dt`aza~B({8Mkw`xYLGw}WBXse8aL~Yr z=@=?Iy(yVI4ex8)nZDEVfrK2ME!7+3E~Z+t0P=?!%5xMV#bGxymAq)w!ztlMRJIoI zJ6-^Go5DC+#g*S)W!{bjPf+({9q6Sy4(@?&l-sP+&r`hrDsfnDBdDSJrFO4SaeZ?q zy0qwM@x);}9bFg20LK9&P3&JSrb1lwY@B`QIGrVw7fRDnG6UWfcJpbOvVSW)m zqb4vTD>+I>>(lv&&Ej;8aXlDhx;PAKs1oz+eS;CP=UpqnU5}u%n5#u?Bu`pUOlL?y z-F6Yfg_X$ZtpDxE)DR==+LQuuLbqFa6w`I5WQ6na)Z9!S+ubJ4!;>HG{gD4iceEf<+AQpJ zShcr!xQ#G>26lr-T4aw~yTB7Fkv+lNY6G%i%Sm3;1(uV$VU4wJCQfa0m_arlax|fP z-4C=Uvn6zuVJ;ivohgg722aFWd=faK3?!!;Rj95H0*wTEd{~K4+VPue)wY4Yc#_oW zftY9h3Xt_!veCRaky6XE8^3^BB9;%MCWT+?`DXJJ6Id-&-9K4PAZ69|yQ(_|zyO0p zqtTyo06a`caD1Fdxuu8aRv*yXb!%IIkR>2*s`h*z0Eh7Z<~;a{7?|CaH6UWtI6j@f zScrNS0Xf;vWWb99T+FH1cmm)%$wsfDZ04d)w#lgwGK4jO2JD0I%WR>t|vl$Q<15M1&Bz??0m8*&u=leR^DlYbcO{% z;Yqe(Lo86z3JohFEnx=M8u540)wjpP$IxP&N7(#;n`!R+{l(j_^JXtc6bx05TZ(V< zRP$k=y$2$(W$4xx+`lKvgH-wWp&&5BAU4Ff1#EykI)cJt2fp|br zFx%TtNvQ7#-HS&DZ%Y~;UqExczHc z8PA~sZ7F0DV*tevLG!DiEQ$_Y_9JRd@ZWSCvd#17(?L7z*u7_hVxauN9{-WGUt_1oF)a> zeeV3Xg~c0HSV^X6_yp_YU1>5D8r_6New|`*T7n(t6>W5$`Dvw{6Fp4x)`Ag8Mr2?lRHnpR>UZuIpP?S|LGcs}Z+lp>_KU`?g;Y~xRFZ15-82g;vpg&y9smCSDZWYP4s^77fF!Ru zFFqgTEa4@9WRdM-f~Dk_FiYbG1Hk#HT*M{cDmA%d3*lLYPTr6rp2 zk)3Js`G;G>KXCL`{lSmm<1F%FB8+55utw9eMcwjPKCVLsQ6F1BkLh(=F57I9QOA+| zwt0C*?VGWetHf@9@#Xj1Zq^yYlU}U`OW&S^uqL*3ZzJqdrkL8zj)Q6~`Y`ZYvy!!1 zLloAeq%cF|u@k^5Nz;Zlyws~twL4K`@n-1auTXIDV*VSu;=XjcPyZ^Uiq!5gLTH=U z*DC{C+fkN;g46RT{tY#Pb+{PaNmQxDnB1nTs7e(vrtRxxVEZ?c#p^jAa5sOrs-|0Y zUjC!*uJ?749oVvIxE~}efB?*H?#reNM{^{;_dSlCT(T6KwjnfK3IbSXlw$x%3jKx(m9)A z{hCCnNUr8H&g0sQ$gCEyAI*VwzDDtr-BXCl->AA)Rlv4Xr)ldnf3MjPslkuuqv?Z> zk2o;NUWws6v$qbZP4Cdsnbp$y66escp;unmtUaf~rdDYqJwAUA?A9@Sk)Lxq!q?74 zk&cb*uIWTg+_#c3&D|UK!(38}7-Y&%)caDX{bd76@>0)lG0)f{cD*~K6l5QgP!K+S zdPhK7k@u|ue9Q7#|)vF_~*cdz2Cm2&D}Tr8Hb|3ggL1V`_|%Xu?kDm zOPkDX4u~C2K^?=2YM;$^!7GjfLA93lm($;dFn7ht6*`CO#P>}K>YI7Hc(ML*4B^-b zWs@mffNl`)6)T=mMCYhlNKkdFto)F6{T5n=SmpL_XV}=<3|@U9jkYg%DizM{qA=#W z!kIwflm>nK-qA_#&)57*o@d){lwsaBPh}@?xV%$Zanjsz<%KC1!t98sU#{Ux;fQna zXRt7N{2*{!d^+WP_&F_@3YeS9{r=QfDw`6JVz#Ef{5b<%JpFo&CYR2dSy&5T2~?Tz zWA}&P;q~c~vGO1ySsuq-uy>jE(*FMQ(DyExWMUOrWNwAG4bi(9=+Xh6?0n~fQEZ;= z-!l)6q*Vsao23<3jlOBRR7cv%-#7Dy#x;B$jeEQz)QTdpYkS-h>NqpNjBpMd+Kp8NZes-Gc*z;c0>t;USUsLbIRL4P=wIO-IdA1k+P1~VHXB<%g+oShT+QaeLYVe96e*reaUR2@}(HW%FZB ztf{zmk%9KFPVyrm`9H&8MfO#K@1K#b^4M!!@>RcHysYouUF5BEowlQ@&K=zv70Ys0 zYivAgdiXcU-4yVRD*VZ+bqy&y?;vIAOL|sO9Iwmp;mt6OinmBAt9n%@6<3i!>`uho zkBs~QzJ-3Cwf=THHR;PU&s^d#2N3HqI4LqOC~*d@+7mV-z9-DL)pNd=bK{K=qgF>h+vgAe4SbhUW`SwnC_YB2N6)e{1hM zgPPvHwSxr@iZqdq9N-*Ol%^m}Km>vX0+v#Tg1f~HM7GHYx*M`vArSvUs#F-f>UPt|Q+zO;q3hz- zSmc7y0eeF7W*ylhcRaXpBbnDuDJg-wF|=yPwp2l4_ZJt9*PH9I>iAIT~XXYjleu~o>JNPe4-{^lUtTjz@v(gy$ zjg(tgo!2_UD;l(yCfdKscvJdmnx)9?&-bv-2;^|(#)gmE!u^a@`krv9NGMqPs3XGlM#SVFyd`D*s2=Dlb0JFP;x*rv7eBJZWi{mH1l;S{ z2$;jNy+5<@>F4iNlX18C-#Sm1`|~?aPb_@-TFJD`Y85t3>TEWBcyx6P`FoZkQk%O4 z{eFip&b&iE*N6EuBi$R@w|5SHjiRGc&OdZ|H@P~+MA(HRX*C1RQ_$hn&4&icZ?aeC z{Dl>w0w%+*C@?Pc57KSUv!|xZ4TcE+x(s)U;O8~g??k}6LL;hfAW)*KsXxP&6FvDO zFK#*)53@)Q9WB4=`}j%T+H+FLklcrDsr?)I<9pA(PV z7}~4(jvn6VlI|$FdD%s;B{Fg7edQ1zd*-Gy=VI_<$UmVRl>gB@cAPZMVfVY+-c*r3O){XNTXMrgHRuSO)I zF!yd`o3Zcxa@;hSlx;3=klYiK&?4;=T>sh8)?vw2XR^QsG`(u~JME*v-zT;^wH|}& zt%EgQ0*0HR!-TkLtV_;aRr`HSm_xFNtz0Du&ESWCYbg)ewDJ?VHFB(1@E=ft) zl7`)l;X)t66d*y!1${q!GuNo?ujZu233Tt1Km*!W#e)&4UXdMFg8*TCf$z1wXXTpT z=ha|K`+3%rprp%|RO+b8$SS>d!wG|s%oSGh~Td@IAE8g za;i5Wq}T%y8|^^ga`#vYcBh~A=eH*sfWWWMuZ^84&vU&iRyBJ0VZ&{MNVg~OuQ3z; zDu=ni04n$*p88x%?wH$CQocE(EXBZZU@>5SD6?zchqhSevS=^N?BA_CX>DnWOY7gE zACzeJ$=TD`mKZCfY#XlpUc{u53!F}$%-WG^rgxY|!O!TtAo^~!sw#j`dwN2cjkX_~#PJ*Qx?q8%w8X+mMoU;#j=fr<~njw_xm zWledK*W$>oysRA0w7UIa^jP%xdOx;`J92)%lDg7ZVvyAyJ@2+2Epw1WTG4qp;)=lN&)UH^5?f4V`#QZD+v2L|XYU$oWZ8yd zHU{{R1QeL8?xyP0eYyJUCiBXK+)y)TSVo^qX)amDY30aiPwI zRxw9{hd5Lk+ZB_MoI*mr;>4+lT5j1$uD}4w)8d6Xd#wsNDD*F|ZhSjpd$yF`a)ysc z8`}Dk#%y-1K9%YCew#c!r&&SF9ZN^MTj5^3DAR+sR!Ba+y(3a%-%^0!voH+N5k}a5~ zZ;&~UO~rI0&eP9W*T`zoJ^1XNY=~9WNxlbG>r4X2nYfL1@$RT8`~{^eF1te?!dU5m zeP${rmVNLZ&G~^Fyh6MY@B3DGlv(X)v_X|0FrpmT&3k*ZNz9GWXDSyah`kjqPezmK znNo@NS_}kLrLEU}Up=$qr=;`tRNgj3U$UK6i;2nr*eSoItTdCT4ceNqX7=6~(%AjxBiu?zZnOy^Eh8dP zEsw}`DEHAWV9^>_eIFOuDCt3ssUcMg(MGEN)u5?#EfIAQ2t&_Z{TXF#VKk+ zuL0`0qbP60P#Y9Mx=^uPbD5rR(MuykI03E2(i8GJ;kwq;sTs9zGrEq4yCBQZJWY*O zup&ZElTA|}yW=P{J znrV5$=gVQqo+~C|e&t$u9fOV~vIL2JM4HH4xU$S(s-Kwl0Wf%yVaJZ`3TZ!P3hiEW zN?VKRriDeG-eg`r2RJ-z`Ual*JNIu4&IhyOj23$NU*sBX4p01AYilkZbCT_QMW^b! zleppUC~9(D&~3J9%-P&&f@0NdQo5lv)8~ZyPIs7KfIfmeEx^LAn`|ZuduZ?OkI?$U z|3yXkzs>@7jk_tGR{@g#WKN>s4W;gUU-!h>*4Nq~Za9D35lu^q>K!QY8>iULR~C;= zzs#{nVtMR2aF9VND*I~8h{d?pD{7j)F6S80qu+yrZ8poh&F)amki_!_VF3?N#@sfi zyLsI}t?B)DE8CuqzhpTEgV57fM%|uUZ{72VZ!vp&l;hDi7PK$U+Pmj}sgbg7LtS+g z2>4WEN_Ag73;aR1CQh&MqWaVX$IF0(BzXKQE*x?-EbMI#K^Rb@c$Ba?Sm+_7OCiRemf?0*9@T@u zB5f?5z5Z6+_j+?H8Y`ica&PXWxrXh45Ddi972)9>becMdg>$BlZ>x@fQm}1H9%I1t zG&7$cxt?0Lt=B&4feaXwA7;UhKL;D1Cx^)v?f_Q6Y7D31Jd+el8n!ZDN>C~rz#>6C zpHy*+V+B@cU?%AR{8;Sad#* zvzLSmnyUsMDbF6MV;`0dFhlH!JzPr9Qw( za7kWM_=F;4Coh)`(9=O~33#nP(DRlxV#$E=!Dy|y%{<(R`P7Z6ta40Sg23VquFYny zaw~)@J_v`8^2uW07dojQRqWzepBSrZ5xl;&gi)4U1OIjo`R{5A)9-Lm?343Z}sBK8aM zzvluMd`BjWN|02e{e?`>ZXO38HkC!S=kmCFl_#z<^dzxz(QOPq2R@3WxsBEVpSFdEg=JPim4 zS?Lm$3VXwos&+g0Cz>y!UKG^ex$8?Jsfm@58pFGZA1XeL8P=N?qj)C;vXJWw=6N2W zV#FtP=ulHdQ{rfOR7g(ojz*x&s8fL*kHq%3nVZguR3W?pH~Kpt9~G2Boq3+;MTa4j>1jL$g;7!pQf^*8CgBn zzQYkcBNgS=dmGPs))Pf_CP->!K+=?%l}!PAf`Deh?=cbJDm=P$$~^B z)spXfY{oU!r!I)G;5(Y)pH~c-r?!az4GJNuWsSHtDvmpqwAwYx4SA+#q=>cgXf?3n zYA=SIOx~4-su1)F&c3=XR?=YQYe6JbzT0S`eO}O5*CaJaEL1|vzOr0w?c z)nuwd164?7rS^}~7cX>w)jR{Rxx-E#`IODq&R*EFXj?q^Aywvlol}t&v#DnwLwAap zXF{fZtI58(Y~&tTS+m>#$H$w2rbgLHp%evc==YD--t6rg^7ft@_=d}-d)f->yd>?n zUUtC7A6E!^tOl^UOa^|z%(kJNq&~m!U!%KQ6P24dCt(h2;5w=@ygUC#^#&Zb<>BDnnMSF=3 zVR4Ld>Pg(1wl~Qc&S|f#-6ACvIOpVgyge80m%o%(k71>s0UL^hT_xcaD^^yXaQeuMt)0 z@5;Y#FHlKQ9M*m5ARH8TSN2=;DZXL8VCr!WC7B89%Ok&-oi;z}>^$G(p2pIkoL4}U z$;hAYSjh(~hK?5w?i696`9J>p3jX`5WRf@I3jV{8=S@}3xocz&*CNUqiO1Xx)81Lx zA59Kn0TyBp`9cL8AI?RKnsP(&i=wyP!sNd(jEcMMysOAp9xRy?Uko4N2?CN%3t*yk z&J;~5)ARX|dTCC8Wxn0az^^}Wjfs4X-0NK59gkC*WHF7Bg+<;#T-<=`xnFYqk=A}n z1lIBqI8YDC==`!=w{ZFAOHxrebr%%d{yMCZ6aK)gn}wAdWr~{djbMyIoxi}1g8Q%F z;*LR_unwR=@h`a{f*bOoSQ&jUr=%bAMA5$K@zYsne@MR`LDR)Y=| zXvQaHg4<}u=!|Pj&bM0yeSFnTmT;>V%8e-YQos*q)?$kF;|SXqPjM|}5LvSV=Mh7+ytoCSEki?(B0*7rH)#XtKAPFRJLU1K(1t>PpL$*kah zPdy?=-%CFbLEBjp73CkWcKg)lKR2)2hnpI~=QwPyu6cu;NWuZJBlgycZIt^_$!CQz@cu2ONe}o z;S^--iPy6baf|3)XW5&adaS0dWy8tK-Z6VwRmYjgw(#i0+x$xk{#PdJ0*-oH-8`Ff zIds{fV64Y)JU)k(v!7qje5;y9gSV1RQE5V5AS?l&Z8cdi9US5CY@TG%-Jp|v7yKjS zVIDh2U%oRdu4mbkX^O`LI6qfwW8jUD0?GR>~qVb~QCY|zq?-Mbo!t9pk! z4H;_%oLvyiobm}q5*D}5#n;<0oIS&V*S}-(ga5y@0jyA zjNrljqtb&@ssevVE)z){m_sgnO*r^~SiJNNudOh2 zAaA05Jq?Cul=`XUnMivBL|+|sNWOpcNS-g_&u3D~bP%pv_^Q-PM=Dr-S!nF&mw$Pg z_HSnW`qwY2es%5wx67Oo^~6bDFd@rl4@m^KRPLlpK7g{p(XizVdB6ippIpPegg0V} zd4Md3j;>I)L+kDMRlMDRB7h_r1Iai2D^PW4aC3&T2JZn&OwGi?#C{w=gY&jKWG{-R zyY+q{kH6kM&R8sS*0+SewM~2)@#m#Jxt&@Y*6hyhvIe!C=#sXWNTyU550pA0dDu!N zpy<(D0||iIv&%VJG-OA->)V$$0QcvTrQMI@qMv}n8?xOH>>J}#a2Qso&H^e>P5e^Rl~}racoSKQECKZ^3O$}u&P45@ zXx6hG#=-nYH@R!a6C!NQN2Bv%E!eW#wGI~NOziJRJ*5Nuz`?~{B=yt@danWp#?!BI zsl626MWjBZNGx3PMbz7PHl7Q4JzqoE#agc{6xpT_zFll+t$c(6L|N2=!XFKj!1b#A zqtVSYC%fUosoE=6Xn~gV{vb_^V%y8G)2aTnqSo|>yi~h_k2#9y5lYal1DIu(NKB%N z3;v|{-+=RN;C~v&uz2fv9u9>@3JHYKSCPR&ix$YsH8>H#dW`y?Q4woY2-9fzUL|Eo?anNh<`9CKIJo@Ut z-`;>`{@rwi|Jx%Vf&a@)C^}by9{(wM>DH0#wspMYxE>rS!_nXGp8Pu)jsGuh1+@3S z(>!)0_5bHJW%Hu_p9KqvkK{NE?f&O3-K7H%Hyj*%WwI~_qo6;uSjQo}LN%3Z5qjH) P1G}pMQ_sKs=-Gb&uli%s literal 0 HcmV?d00001 diff --git a/mkdocs/docs/assets/images/screenshots/admin/events/public-event-page.png b/mkdocs/docs/assets/images/screenshots/admin/events/public-event-page.png new file mode 100644 index 0000000000000000000000000000000000000000..d3a06302e97255bd557cff92e4f2aead08afc0a5 GIT binary patch literal 111383 zcmagFWmsEn*DczoLQ8QcPy)q@7Kh@+HMnbWcL`35yF10*H8`OZ5AGV=-CcH`?|Z+! z&votVobx9?R#w)^y62o@j5+VILKWmB&^{7YNesI-Ye?x>#&sO7m-Px1%L8Yz_YE`o)CfEknDvq>eR z6kV)ngN+=jA|nTcc%X8~3bpqkO;!^1Cg)skG=B*oU6It6wrXu=YIruhdeEcn61UCpXHz$IG!n{7Q=FFT2asu&vt7$1%h+(f_lplLd zLzHOlW*>PmWs;U4Z)Zl-V=g$hGpv!5p>gWGa9*)5Qsj#Ht|2lT2kSrJx5 zMFNV)&z|t~0!=RyYM}n}x+ROuM6i^Sxf1UxlC8;-+s18!-!cFzUS1_YE5K;Q%KLp? zt6y-9-m64AK*2%FSz!b}MZfD-#i|>|MlPdzx}kW9QdTJi&t}_KF-g)Bq5P<_iw~3e z`&yR{92AkouD#B*ta4X9KZtq~DRoiLTZ-`}?8Z5xoS7r*8_JO<^clw|`XZPkLeumKQ$c7GS)_VA}@v zV!_CyO=8?v421ykY~#ChdG&)g6Ekne>+l2qbY<6EGZX5ruzpPtqK0KFDkDYmu9O`U zx)G*Pe9*jNc23ASXG}r-c3SJV2%uFW=G}^wP#nt@Grp<)52R;xDY=rj-SrQ#7x=u= z5H@}qD=s++1!x6cbP_fCY@g89qE?Nnx44EthM#p^(zuHF4vDy8D%PQgvN(<#;UHdg zWw68dH&>RsBeEN!saQ!T_TJ)43I}-p!7LRihX%Hltouw#$I@#4hZvnV|Ar;PA6BGK zMPsDJ;zl?b))yTNh=!3J>`1f@c5Hc9p_F`-)yByUV~$leP9X;Y_YU7!ocA;T6&;Cx z$X@(Mq}Sa$&)I!w41c&_VdK|OpE+$Fh)`Sx#~9n7HXoUF{H>ySF1u3%?WGX)JsHtG zp@pAjsPx3td*T{_et~qBi9P|4cyYu#E0(;7xG2_s4S;bxYd_YEp#%H84dVwsRDMwJ zpRR}?JAfUGtTln92qO?OSB&A7l74J}njmCU5fPUO`LQiAxl79?4kh3l0-ZB=c$@6r z;#=iO*%hFlwfBpX@}$MInr)cB#_%7S8`z~Y%7TzxlmM&%XeQ;Be!VcQPx}TmW{9Vl&oLB7Z^Vl&oeBG~kOo7#hL zN2%At-#S2L-mXsz@py5=-x68nj2TxAVx%B>rN|Yp#YF&Yc)XC40{Azg2t-836RcwB zuG|Yaul-X+m1A@2!_izM-OzY7!9odsZwRQ!wtrwz|N4HVPdfs{Kv zqO_DY4mk{Y>fCD-G?^8Y$JNuCVHfPcj}F(4aJh!v3Us$nv4?sjJYC z%Wm?q%EnShJ8O}FfB>-+Nq0xmh>Mn>n2Q!%wkfzyDMZm&U|$^YtBX0FFOj;R8Wa;s zop7JR-P=OKtQ#hK?tIBI@is4{Wj+Uk(=dJ9!Y_s@onqfbuJ`PD6cAF;;RWJNYKcE-C$cB2LV=5{HU4$YaJRR`$BOpd4T8W zlV!V#M_uZ#}L`YuYTi9>M{cg?xjW`L%+ z2{mP*GxR_V=xnWB4o#3HA{hV}z}|mg8Y`WLl~Xo^XeL7{hf~nmsPjD)RA8^pV4pC8 zI#$AH2F;60Jj|YkQuHBhc=Fn`iQuB|(_bDIAU34-e zaItWeyi*3y^Z5#8VjW7Ef>`&(M-Fm9A>^-%1XIMd%$4^);E=wVAwBg-4Mj zy4oOEqB5j!fu?P4gy{)F2%5Qo_V}@ip6rj%in!IWj6ohL1_I*<1d>a z#H9?V6);-$oF;jLA>#D*vnPK96-sBh&a5T`|BF&@CYCWGtz(RJ+z3%C9tdNfs^Wet zA%|G-ejm|3q?sPM%r1w2BN4i5P~+1|`=&$sKGDvqN9_t=aOeE7w$D^t0+0bF6f+U8 zJ^%qgh`^}x`S3-kayXk6I^+(07zB&2pa6U84by<8s0oU`v5xAsM4K~F?@gxW_RJ2g ziQEXa!yHnCCM&QLSSsB3ZuL%?IgdQz6KfWL#uTfb70D;Lv>AVS&?sc@byY;9jYuWq zC4#VU9W$5S!_f&@M-HHsqeeju=3l3Q7{&tPG60*uh*BvWrY})GNF&1mVFpr5v-PD2 zlN#q@i`tqhm+l<0{yv&BI$`>mF9tw8JWa@5bUiH-ZO68 zh(PkRpTRYrZ@FPzWXc@X%#Dn--*8qsp##E3ZYgk=1 z!(B{#*vu?XnJF3p!89UWTH@LO?FtjGd%ew=aRiE;9`v^jlLgcH18DP{fhN2Ehaxmc zL20ZkmvenuM+pndM-3E&aM(5Y4&V)UP(XwW3ByS1toU~{rs|D&br}M3%UJVr z5DI*-=UcJYy=qhvWKJpOK3pvfz;7Z;*N{DMON6MP-bhyaLTCxFH;_EdFy>!PRR2AV zj};-2&Nl@JcOd#K{Rc`z3Sg&_8S&V=Vq%lG=v}hsDV$aLaurs7vg|oieM2lWM?d$J zjN^*(5E)M>HZ_dy%}nQQT?@#d{-9Y4F!Gj6(-`m5OBc#3jF`xQX;kAMRbFeLaJwWx zvaz&L5cCWZALx1%M=ZCx>CywDDEp5u#=j{b&F4lyzoJ-1hyrjxG+u+|R(=S5(GvWb z-ak?Uzr@QK^>Vg*P$~yleK9)At42d zKhV=5Jr1`}N z6#7Y$sPABzynUDY=}l<{i*8tivNubDBA25cfsHUO);I60$ojFuDJ<%)*zC#fasg9z zmg)D3d;YN;oz`Okg#!IvZ=~puf$3Nr{P_WYsLig% zl2I=I-}cJy1VR=XOT97JRXn?zjg2|!`tx_=oMLIlo{(m%1CQUiO@)ThKj^dFYxjs$ z*QReM9sMv^q&xGL?!BAPvUM#HzRr?*TGT9;k+JE0&(?@63UA?Pv;|T59eH?oGkI3t_S{b; zs5hv?_9CfkgU>YTIB9kDGM+&aye4;*zh}9qsa5rKJ!d#Jz?1Q%VY8X|QZ;8=2Cumf zN3(u&+(q)~mR%Q&>fB!k;^#Q)co2Ffq~dKqZ7ECj6Gi)I0=;jBspd|9x8Gf&*JjO~%EWM1?={qw|e5`#O9{N#tyzjcP+ZMKC{hhgoRy|W=9pN9^5r5et;rhoP%RPqd& zav3NsN&Ve$`6h#g_N(Wz{S1L>^Ame{;9B!`=5EEA^>bChO%}-~1o$%aT~Db1;MJsw zSk7$TRZnS4r3e+d(eGtJyz_Sb<)JAXj*tl2w&|?9TxN{uBp|}=!bV{bJ;$~v%<5ol z$EAR5gC|B?!Fg)NM3J^;`KF#K#jfvv56w%i&W_nC& zWRc?cKIGm9Xy=qYF4~x^WAIBtvV1|L`!+QSc&u`qiZZ!BAB4JJ6bJMUDUI113~kVw zo~IwMOTZnRhLE)zO6v+qYBO1A?6I>HMVpN+`fAp25a!I(CUoctu$kv02N6PfUuvbN zfBxOHr=hrxuF1JSVU#50R*5ne(TnfO%&>dWjhq0 z<|_0)kBchf1Z&Fdvy-=+9YX1!lzPmFw?j=tvUa%QE?H)b&wq2z(~4-4;sUWO7Y~nH zFH+~v@RDb?R~t=sw>?s1uG-_>e`iVaKDTq0Ks`_4Syo?Xu6F6N^P<7#8ojVn+{~hA z;{5~st>mdA{z<(Y=K9pw2#PY8bEBEhml*bePi3eBa^(@!d@W~IAbA4{7L@IpyPR7a zY-l@J;khHc`)!uy+Hzyht;JEF8+(o4M_#C-&;h# z8y+`KhV+Zg_sPt?@t<(mFrWsV@;x5vaH$W2>Gb5sec$IyGJXAX5oTbr@bFGG!@oDJ z>EZBE*D#HgHJ9&Ye<4fd%~+T~e_F6ZDjyY1Z4rO6p!K@Jp<>Wl801na>G>f}$cbg5 zvwLihV4FpUg)MKus1l`D%R9n-TcA^W|mZH92yqUCHgF zUq0qY0@-LT{`l6m4`?x_x2vtzKu_9pdcny1^|Y&+{p~Lop*S|GXngbK-sltn_(#p+ zF_R3sE8#*YG%$Zdc=X2O{lx@@!U)%_>r}raj9GmtxtcdqiU)Z6exfVb&iacS=QWMU ziq=q8w5)jivNWO}aUPK{TK9xAZ>eN{Nne{_BBtBIpewn`DGH5uOPT+ymnQX*;*8mq z&S+Q*aX}qjrQBvFrp~Nv8sdk1cMjp^?Sn!XSul;!wAK)9m%WgpkF}SlZdF8ziA8zn z1l9~|?Rda$G_^G764+~w6kL;^kIVL07?&T&Y2wD<{$pUx^UMA2!%;8F?-o4jhE1S^l5Uy`rw zQkaN|o=damz3vu(vF+94`1dpG=IOM>2Y1>FQ&mh{zAnvoe*!dpc%YQej3e1;ysE1W_c!8*!mSPC*$b)Y5x3&9mRIfj z)8oO%9KaZkp@6{#{Vr|Y$&9|Jinp4r)a5C>O);so`Pj~_>dq*wN6F;vprMwgy#jRv zz16hXH%c^R2o8df9jOM+L(5=&32319>xe?d3uYf+glnwx-Z6@h&P<6QrToJpQ;WQe zzKqoTl~v!*$4k<dFN+I|}x_Ng!ik9)F_GW}j2Di&@3CF3jLH(gJ%)k?K->O9Z zr982z^vqE|7PEG*K}s`){3-wY4~1EKk?=pl5ATkidMJ2F$D3Q6I;*36=EGN1GktvU z6Nj@2Fw~EH89JwXdg{^Kk7^;Gp=XE7;n=yeu{FOXxd@~J)I~dgyivqw6ZrcklqcL{ zn1r_CMNvlb#Jm=+JNHpjF?vV=ko!SOLVc#H-7C;X=RzCTm0o00tGvkB>m)>JAuqHL zp*#g#J>Tw-f+fzsrP(XF2Y=hpu+c2)W=Z?j+tu{7+0!w}PW_&M1TX5GS<+(pU|*RO z+?XEY5Dgm+VPkn#ig`2u7qK-3EU6!Ab*n+EA zbjcyqUoLRId{lL`QmNia#Y)XEkCP)r0UFx%A0O|N#G&(!G4Yn=V9CSaRO1v;Mhui_ zjl|I?NDVqz^XVjP8C|2Ol}aZ*yAa9a!J8aw zCbiU-Dm2ZgsFos4qU4i(HN`Jq_0^{1^@wk_&LGj*h z%eA>|1%Qr^rxKRs*`a`v@se?%fTM*w71YS6X3i92a*qD^IC(hql3#!FNz8!Rj{b+A~Z8i8OfLPxY5D^v#QzkXosW6&?R{R9pCxcKvSWObYnexiI z9+;BRc{G6KS=8g;HTL7VDiKiBx^TAs^ya0Sftn)>XCNkdw&8fVV&DiUE@aS6Pq%`1 zTpV9VeadvcEh8pZnilxME~| zQJ4K&7Gj2)c;R{Rb*fF7$2=KAW@OcgDiI&5Sf-5M$GhAvxDyN;-9IbCnX(6|OfALZ zZ^6__gif+oBUEEcau}uw6t=xcrZyhAj=qdZR(HjBC!_pBZ(8AIZ;F&h`!tw@)MoShXJb}M zH`M;B*=m7h3+C;;5s?qeg$T;Toup?B90@R7O0U&;Ed|5E4_JMVZTsvOH%yjs5{Y1| zvuAbT!Lwhl23`tJhfNFQNR!eJD&OO{ekwcMP2SJ{z1s6Q36t`DtVAVc;`Ag;gg2lR z-0vdBhg6Roqkn=GJP7ZqMQMi0$cJYYLhCl6shUC=ds$QJ#in4SVaady$&1TRvlt)w zXO{39X@3nm5m(wB_X{Y3G*J8>V9Ll+jKf<#LQ*frR$`H9(fiN1tXxzz zbVrNN3A{!V)b3dL)62=p`Y-6u**&n5cYp`Ic1Vi4_zp4JsAxHIC!h{~P?ccKGrm~4 zyvFllKmWbgdeqHUz4e2jy-+GRxFDeAq2FX{nBP-gW#>9Odk^_NK00aT-(X6vWsK=$ z4%2CO8|iIPM?&xENI>5m-pAfJPcvgj4~%d=Wnn%Fc!9gS3%Aa4p_C3#LeCjWy+O_* z5`g#Z^G0R$lq9F3n~ThLsM->v=#XSTlw`|=S=mVU0v+GZ&R#PPyVZr$_O5Houl+NY z867h-8P?rQa6pOE<|=V3-h%v4C_4friAG^o{?feZt<0p!Lt9d6e8l9hMCBwUeL0i5 zpqFLIL*c0HP_>Vj$kali4jSCN2I6}ZzGd+~Wzw;O@%fVqJengJ7X}ptHJuUj)Ky_r z=&r}Vz^}NpF%jZZA5NPfjqxZ%7buWoTi?=b=$5j4>7}bbIU0Q>edg3Y7sd;S&c|%L zNBX?(xXw+2MjkK+q{Y#>c;nKmHw_r>^$_}dAg$>{rd1HyU3HSw3$kBn__q1yo)*JPO>2@7;^@-n+F|#P zoele!<768AIj}I`V4*i z4Gf=z=wZ~k8_A(AeHGOWYU3-tKYb^Y5+ZR_?deckfk``YoOZ*R@&fgkR9+ej;@Vtf zQz0BB%jKJv*gTS;it&srNwCC+yr{w--JecCH{xRJfiOa$%7Xuy1@N#g3qF`e>Zs~& z@RHW!As@q``$A!KMKnh1#5mng6rN}isko2_ z-FRE!ALZ+_GaJc_fD^c*{FJJ<{izsN-1`K-CD{$TzuBP}q{-fG03~2HoiI`+XCH9%b2L&(I{Um|mZgoNDvvAkp&!3yHvh-`c8!6d-pC2&WlQ7Wy z*49!CJX*{Kbm)Hk(P!IrP3(P7RMg=wFd$=C2j7=bO5ORJscqn53wxT_*R#gEDM zn$(-HgSvEj=NZ4Y38f7sfNtu^G;Z_VhCZ30$Vb(5{%^G7{MsE*XT?>Y6^c4GwbS#P zv-yGe33vb27chTSaBKo$d<{ckrtgy^Mj}KT0NTymYoo>Cb`zkD@N7tdra%#Ki{m*769D4kzJN{&WA9uyMh-2p!9fF9mi%8fo2RDaa1%O`_diYrTih| zs{2W?bh@pxM$kxvkyOCKI0&fRZ?E%XlODM{{5+aZt@gV5Lm-H!n$uM|!(M`f{-{zz zc<1IIeCd(1A}q=|d2;|_1iBI|G2GpST*EQsy&vn!y1KgY31pieVoOMW+mPiFBX}Qo zw`b`kzaWwJl!?$2j~*zls6xG;zL|cwqB0((|5P1E?Vfv`l=`)!^OrLX>IG<|besEWXW^+44 zMrKnU|1hD*eX$?nz=x<~S32a~#kgUa)t2gR_49HCno?<7_?~yzQ?j zbp!&CUZ29fCr%>fGDK;+YGe=Ih?(i^W7`N!uJY7PZp|SZn`>{&pYos zIOB7Poky_-*B@5~tQ55SFMmX72soc2RI7-aA`o>JC_1$8O>qW7F0k6JuU$MM(SKVW zz-}b%M~f94KQ&RmmzU|mVpTR1_hmF}IBhSo;=UB+`4u3C|U~VBWP9*(?H z&1Vd&?)6J2OM}VH0ukjofSG7prMCYR(djmuU!GlEj`vS-F3XYCKVhf?T11%;H~XU! z7`yx7FO#pW9pyX|BG>JbRc&kLhVM3bJ!Y~hK3ism&H@w1^~I;6%834Mk(5DSQoIJj zXg$@t#q=s=U+NdW2zZ=KoYwcAk1nKIsrA@weE|C^XEB);!ttS3$CA&#TG$K+)tT@s zjU{K-2#?AL)_>McuER0FsFt&qXOd}$otzGY^`jCLEiDgLmYX%TnaRGz>b^xyE~^9n zsw?HuzFSe%X3$FEq{`zItK-ZBZXu6VVG+}fSLaunyk_f#54q!=j)n}%mWD6WBm;_c z5*{u^#2x*9+Y4TO+2jw7@8L6PS|}6K=4V>T(y4-sXlkhRq)YmhVJ4W`T5oIL3s%v< zlP)LLS39z7Yka67D_Rkw(ogf`a3+GPu@WGR#@0`pn;A z$wpmAs!PJ)e3O3xX3|>;W;{-2-#=OblvLPZ!!N43ySbM|9hm!DMmi>Y5Vt!14L#m9e#3FWd21q@IOx3if8$3Kb=j^z!0DhGV&U z7)!`Zs+e1uW<8Ophbk&QGwu({>zVX-_S+2BKaR*2?9SO0Ymnf>~Lg4I2neN zA*EFn{6(Yj=3Om;)_3xyoG}dI-U40BBD^`Z0ON7fOU|(VYY`sh{e9se_p2*@3+n?H z<|$Dw)&UnqbFo0%1oER0)j09kUqmf6n`9;t)67apsWkpH2}0Zdde+EVV7naSTM)|# z9h?PVFHN)r*YlMmx%)AaX8d{~v`Db^u@k56eZGhp9S?|I$lCVD%plkV;9CFtc8WuQ zmRV`8`O4Vp9k7$3bb;ikkvEOtL@nG`Xaer^9pVgf-+1M_Kek5B7Zv)}rrm2ZQg8?L ze20ofbl!|;|E4b@`!ay)X`a{L^PYgRvdS>5au#TI!u|-O@gfEALXdSQen`THhwyz5r?51PnT<$wkKnVo=7~4K z+Dz;6xQq0x-8gRirA@DhzINz5$W6cULI0*hl$q4O*4%oE?d>k?)6106EgO)T2Io6I zrd%25@fV11bBDtL$)0ECK3ydX3H^Y91d0!z>!1XJ8b|H(Jx|?Z$M;HI>w!ll}%p7_Ts{ZCgXZ9HCsD751)y6bJFz=;pFon5P=b1$BS zax0w1UaIv6oo{v1Id;!c#l6mla*dz9NPZr=-`qC?k%+C|PDx&y-A-~c*?t^_2fY*W1&etI;{aswyp)Qo89c&V`Q z-ixyS(s122+)E8FobfAutjIYLGv)|6e9JV0^AP3@2XxHbAoqwK73rr)D1EPri_Rj( zMoU0J*j2%j3ak=dw~~{o=u1hro)=GXC#aIwRs)}dHvg;{8kW2hYK;-xomF2D;Zu%9 z8SME=3$g!}?TAX_&eNGJH;0>+0zy2E2xbL^shz9=`fWOURPCWdUEy4l|9BqSPz(=&{Q*7xJo<-*6$;2%L{62 z>5s9XWouiuz=|D}Xx`!vH+ss{|MYyq7I_;)fFC&Pf?+u%WyX!zq>!u%tqRr-^r*l` zrC+-VcB^}-rhLt`f7FIFAG7_|xuW0&z(@1r*el?2=OFtuG~H11YS!Z*n3?nV=uAS| z&CD~gKe6Dd5jfyhRc3XgM{M1PROg7hB_x8a+ouv4=llWDZexz_d)jmDlJ50=Czsm~ zSbJ1vl;AlHpN~2`_*EjKLpw5ytImX!Cq)MExU-)w1Bzj5S^~C z(LH)3|24gTf9^Rpqp_ZWD-|P8Nwl;$F&c%TNjzXWjVj*j=(hgc1`Jf0YO~NU%2${D z1P!-wXNiyV128-`=Z%b#89S;uMrLi}(C#mK6qdc7UH7;+{&0N!p~FpFa76*2lJ80r+1dP&2?;pb2&Y#NXvy8tLeIfz zo7(>@LNo^X^|T z@|GH>eNDY#rcP6M(8~jS5~q#)5XO0hd>N$@h;?i8-Djy7sM(3*u3niB zG>;id_5A_*fKj7_|E@0!54ZJ#laV5qIIdP^;6+_&==bgNK}ot_JEBJ)Y*A9nfe5;0 zgP%Haqy+2hHq1z$eJA5nhZ4j--yUx*f7Xsy9giGoxojNqp4m@pGL%~0=w83WrlfdO z`7XIlx9+2-^z2A{G+RcmOq{bu1K$O>hUUJ{zf&tiBp z>Bg(5uW4}qvQLZ~G8OlCs?k;lmo2GWJGSvJ(@~~HNgzQKD(apG-N2~)UCXxY4yKf9 zhCX$)_|WeC#4E9r2hy!8{`T`fUf?O!4%&lR3gJh0JM)GXG!AuDn;&1@FXeL4!17cJ zV@3JJ+i#3naCV|xS6WA1&7~$SpSWB?AV$fWr$Ai|! zCZwRgavMmESpkDv$s_wuX$%f;_!K0B6>6)Y!4aSRpZ)B2;JjOAHq2 zV4}C1JYYYMjS}nTs$``}5%mfUy#}r+`eSwlJXsr(z>Goaa_Uj-A6aj*{ydX$+ z5H@|Zxj|6tSlKXKsx`Iqqo=xiI52YH!q;ZVlg##pT29eKUe1I7s9#K2Z}ygUym|ni zYPz_ny7wAZNKlr>_AQgvVa)q}DC^T(3FYWH&V8!z64Ro+A zIhlc?Fp|bG>&%60b(!3qlB2)S3hS#k5=3{Np4so=gx?3Ls7mLH{mn710L6&|<|#hI zUD9WOr*GJ46nBR@6NkSutZS_D$V_j9jFPSna#JUXx&-?}hNw zgAY=@^d0xT@8RKX06LJpa)J!|EPJ;$XA{u^m|0bS&~Bua$@GRTQ%u$GH|#hUNvJ3L z2%79D`z_OAxc6Br8W`3@SSI>`aryUuCa3%S`fhZJpC#DS=O5U~>H3Lm4Q`@J!jg$L zoa*}!eH0{0;=>`mIJ|a#-~#CQ@J^cQc}kZ&X$FIq16Iu2J#(!E5nCAdtR`6*2~j6C zO`J{a@3FM2q8oeHVPe?Kc9n-pdq?8$)ttQ6U%>05kjd?EQqfe_acIRddmi~?us+O?z88SNWqjVEA z{^Qy56V=IOZJcS4P1sG;j(L>2d*t??)wNfNJ>-A=2k^XG-l?kK%lu~gHniCquXHk_ zd1#NdOjj_}f~Wb1+Dhea5gO$q#qfm#6R#1An0&+AJ0RC95F7{lr19&sCjH}Cwc$de zFfQ6}4RLkaZ4nf=@NEU2}95*wO4@#u_W^!-zC8d`hD^Pw|(z z&Nx7KU^kjJk}Z}e18=>@wadrmu!DYtcVPv-tGx8jfOZeS!$0nN223V61`e>%ailsetMU^7pwD7G@r(xHRdj-8sxJk z5~D*0--*!7B_0j0u_y%Uc%t4Dfp;2la#qsz-*6xgDC>m6`7wRTnWQ-A^B<*q*3=&R z(eQTEKj~q`0gG+@C(IDl9ZO2rGND9CU8#H)qcpD6k^f!KlJG$?u)#g!@$j!+3F?;a z;U?25d7-XO)yNtK!d@P1Wn99RQo5he<5yUucQ3o5#a?W~=)+hx1xXq{gWZ58NY_;4$5oCGSw9LgLItepaI0 zLThuwD@r-vV%cCyLMZxZIBId|(mNUEP-&+ZL&eg^i=<1ZL~$l@H76yUUVbDP-s7^t zqJvoTNqRK^q9v#$(kN*^k~kb~tiqLK?_Gpl)6Zp{_xpL@2Hsby0`R=D$O)z${i z(Y*%uQ#+OJ##W*el`Q;t>7*3J`T#i%v&UT}GUTD2szV^b!68u`^4=V<0WK#6);XJC zldGuY^ZDHD(`FZb+2CGTo||TaS9r4PlO4_gm!8qThG-2YL5ao#e>85U|VZ(-VYZjN>Dp;MI>+cRkVAofJE3`P~N~F zx%}McrNM$`b(mkS;f(-Hn|FY1@H1-%kxbG)v}Y`4;J$|G~nvo6jPvW_X* zUl#O*CjGpP$5jdyEWhSgJ!5NFNyzu0U$DRY7)bW`W?Bm$7m-wcd#}ky3i(KNTimwbC-|<{^sVPR50(Ru?#TAIP05qy zwdMU+efi&Sdi81mAo~p7+L0T~GF=$nW7MyYp%Z^rV3-w7^;++TPJbL+DMqu(UdVks zwu|j?s#jzQqWFN}c-%U5os2gg?dy{#FB?$!$OrI+(x1nNSBOZX>{zL+kgcw4XMI|q zCRp$7SYG)V)J}Z=u-+a|jaqb@bFVLU)NkUb z+D5@*86Fb&TYaT5YRYQQ?Qw~PFSjDNr3FLXb9SH5Yoj5L!_CK{d{kdu9R6Z~T;qkB z3vG#azTUQPvMO?F(-wOjmWV=j7ohtAV<)B~+4E!}slJtr2(rmbW~zC z_0Ro0Dti=h?5ju%i25)W^yRyD-;yDv+U;ZOPG2Nwim+4W1egl`8(+_&V42j0bhWW8?rF#e4cpg-RH12#1Pz4+TEr-s9Z zdyVG`h|)3sF@t~nnmvY&(-U3>;2=C}3SO6%=V2dm>>9cUpnkr9*U13FXJ1Mm#}Q*@ zf_M6Mq-|r8d;|J~1Ma5J0Ua5(kV0e%?#}ox`vZHb4dEW=Jy;eF^uOR#$+JkLGE z0JBKMxUis$Bic2r0ZHYme0AsS%<7ACPFg|RTl+mS7TzYSm}tI`n6m!WpQq_9=#3@Y zKN>0(+Ja9))VVDHAY*|mc!=z;DB|@X)I90i3)#m)lIFYHrrNWzk53$B zQg@bb{m66nb&6wVZ`L+eBHggXy!uSeBT4`_z4^VjrzwS;MT_lORhm`KA%Y<%$8v{J zFIy#1b(nVDl2bOyA$Ki_AeM-uy~>Y2o2aWa88t<|j`It|4A9L!bIj=rey`Ujr?~Iw zLa`=PxHHjQ$)DTzH!lH|!j50cB8r{*u(Bveq4ESWLyBkGFW27W*9&O30R164l$1#x{@9gm@D- z9g&iOV#}ejLzSnbux3ROj;NRbrkI+pZ+zgX?|eHyM9&EiI|Y`4ZwYtv9=Z;$Gmvq`?Azso@;dirja6UJ`ks&sl9&$rCEI-tGy3RI^YIhVr zzpk~{p{W|q&DT)-x+BKHDfH4l(OITP=fo|#v(4zL`Ka6SL#zRiuUwxA^BGlNU@X|r zs|~Jza`tKQ%O9NR$2f*xzp;61PR&L>I=tyP_~AL*N$e+2iXo3?_#2DP8VLG8(z+}c z(83(i<=7Mbk57f-6vORkfCKUT|M&t%Ic}4-;@@QHU>5TJG#-qQ3|k?hUGOZ22=ijp zv}-Fcp@&}fdZbf&AOCja6lc)NbSq;A)ikSsD&h`xYAUN-D{glbCEBVO_ES&vh8rLQj!z3Gd*Y6( zIJf&7Km(ZLbINqyreNSSC+I#Lp0Jq#enPUbju>Z#@)xf{7z8`TgW}w zT=MG>A}p3re}c`CF5E5ukKN;R{?11%r<@Dp(nKHxFR4@ zm-J}m<_d~mB?g{v6aSFaAeCmV#80M*sf&5NlfLfa`Z(Qjv3|7kzu0@rpt_oFk24_w z5}e==AZT#61PiVQcXzko1Pg8lcL?t8ZXvikhv4q+&TNwBedoRR)=W*!r>UvCKS1@V zeR`kn-M!Xo`~AbdkwQ_KQ?4NIb1xMuP)R7Zxtgtg;xE!N9PtU_Tf#)+ar^Q)=0RnC z$|ysS2Q0#U{A+5-#en?Cz!16XM2=FR*im&+;9|}O;0rLDO}1P*eEe2Inw!D>DO6Qq zv;<%E&5j^x3VpWiSHjb)m3m^yjiLJ)Dr^60+KiPs#0!@r2&Q!I-dJc5Z|qflz0Lsn zjfYdqS%5H{OY9%IG;Py`{PiYNbn5m4kc z1KAKxIQ>ac5mGq`ECt_H)JxZBGUIKe;uKtMzkW}*+DN2W9xCo>W^TG4i&=wY(Lj6s zgkJ=yLFp*pvQEA}xUec}Ri6EQwVBb%zMvAsxM;rh+Ol!Za{~XBYq-*p;_{F_=@R#X zO(lZW99{GBTO7M%XB>eRtGsO42?D*@_;2JfP3Fyb1OpM51-ns>Zxo9v8U^1m+jqJJ zS@|}WFKDoGR~`jpjd2rF#)?ywiEb79M$$z0*QrP$&RRILpxVwml;N23O~;PqXro`u z6SVhvaOAcs_uI7dHzzj4dY6?ssDF~b`jI<=71~`BPgbC_EMCTDQFiiIAOmSo7f27%#B`HFbLJOcQxF*6YlMf^;Aj??QOzU z%Q`EEsFw5=EUM8DNRGJR@RbAHH4}QDU?f_LJ9Y|GLun1R?Ufc|kF?yZsHDIs?mNZ@ z>0HYeqdp|!BYaL)*S&oM@~GI|dP#4k5HM=`Q8r7dwdFJTxi?%zGpG5aN+ovinQ8BktEx*%lxrMQ3u^-H z!xS)PJ__?3?$7k8)*=@O&mv18RwNb08#*f-kZ}VXrcM`-i!=G)^=>U)-&W@lwnS!sD`o< zT`lzHA;&MFOnyA6rQ7MdSL_T6TVzSp^bFDt(>}!8_K{>YwYD0;Iv$t%h~ciCJU66u z_C@b=mhPTcZZJ{h^RgWYNX9oUpbU0RT%Udp(bZn7b0UP;yeV+BTPSNuI%86VX2vy_ z`zEq?f6EOCt7hYj?47?;zjq)@c&g;%cVBkWljTlVW?NVsi8w*h4Bgs*fbgQIGI@c5 z$vT-burQ(Hm!G*C?f39dY4tNKsa#Lq`2xdH9~`sOIEx$^m>7*pc%$koW)4XW8=+km z=+v=#79om>K2YpKC#QUJQHpq!YmrGw^;0eSdk|ntaD3m22Upz+@d`@Im_arSQ!VD8 z4ND}_2N#x;Cc{W4(CooVqhkhh z3-;>S#=gvvvy{0{V2gpHO*3p<8EL30iTT)GdX9+bb~D9o>tW%0^z^ac%{6YaqlL;p zJ&=9&uNVx#Tws-i3Az!DJJ~~x+SXkX@}F57btDg6C@6AU)?}p*>ZfX zQ|Nxr9fog8_S6a=n4ar6+B5Ct<4HDhx&451ant+D zgxHj+SmAML1QE8Z_Q_pwu>2i&V_UY+hYFq~^r(Bsu31Wt{5<2bZ#W+^IJCFpaE?e& zPeK}FJGp(_W_rTWcBaO@H>dqr>%b(b1x|SPo%fr}3MdJyYE5hN4q5M6{u=b=a}+$z zRWWjxb-Ib5tCya*qPj!ho#ni!u{#zCXL`Vjq*L6jTRwklr{>SR>HnBf_tiR-*h9*G znx*TI#G#=DW}3eQ?6Ll?%i(+g;+f$pm483iC%o{6TmB=LJT(J0ANn-Yp!Ghj8cG!I zAzjdVIp^%zw*YyTg)Y$vF3J+2IWj#q@teyeB3~3Hht+ELBWm7B0u|nkv?5~OhR(9R zxK3D?mU<3@Tfq_i4Q_k)GJZ9UF|Vh&!@a6Auik3Xqa(Vtq3Cx*Mfk*od`HLS#Z7Kx z>`4>haKWyz)Q4ds=fp19pO{*`iPdW=$jNVK)*VdK!u;ZmO)Vl}!BU*O0OBuiTlqgN??e zG~;3I=H;JjXeXjKUQYxP^epdP#mNdnoKrD)Ihhg@;E4Jk@8?4xFp*oG>vx(CL+s^3 zRDqQ5ItAY;YrTjL)mC5LU|w(`xWy%Vr8gys)=5vl@U2{4XHuTs=~W~m6{)sZzOI@2 zT-rn18NC)3336&}O|Q<@^!Q{7>xp#P45v?GCDqr13vHe?B;mD`kw~tI;ZWyv0nv~OQ@LT+%340Sh&Et zt`Qkaq^uh3QjyRl_9O%L?m*ap2JW`v!F`8HKr27X|!<@`HropkvytD_*9L=ZRgwCV*G;9u5b3n#hRBV-_a# zv|>+br1~x@v#XS**YfkFt<6zU)yxNi60aQswua}c84c0c6trZbPFi&KNEm-hi>0;k zD+wfvd^Viik4dqWN#a<2`>=&9qv;4l*NAn&I%WOPS_$mDNZb+I z7A?!Q41RpYJK4EJ7+vF{H=Vw0^HsT_DSjnUC4N;AfuN5vTr#xp+e(-yGS>Y_^ZdBQ zW4Y$EH#xLRFlndw0+%&rg$CiH^L#QZ?>N?zja+)(%GhMy_-11XZ@pE@UUDjC)XoYq z&U>1&y@A`}L!A&PN>@k1QoSX#1}Ax%cW|~+@kSVk#HsX|{G%Ez7kevULq=GwA7I~y z8!|;4-jL(buv zA&a$$(%;vM2sO6!9Zs%<47mpe-mQIhif?i)(!7?heLM`zt&S+gpsCWn zCI|D!LdOFq#ejGrBTFsOVs5Wa7hXk!I^^H`u0tvz8MvEnVXLdska1T%CVBGgC7kbs zg}0Zj&1t1pjXYmy%Bgqz@2APm4$Butd@D98Pb+6Zyfwc9s`>qB8wUC0DNuD?SL~u8FG3s>HSj{rk9EMz>-LuO32TDN9Z&Qzpk6>gp9#Iw5{-{O(ENmxYg!l+qAUo(9X$lO{cC-I%v z!p%x|CQeA#lS5(bqms(x61WbMLuy`7ua?ptwAcuo)Y#h{9z+9m!NEuyr@`P)WMXqf z%%QhY(U=S9#HrX{3tKld!FE9`C$lr8)%rh@ht{2o4Q}iEW;W-xS$})6yF(ja=t@gl z7MZR>*Y-n28RLon(a_^jAkww&_3~ImM_wVbnvWBGa!g77d{!-53IJQDI0!+i(Z5w$YVuL1b8)C}R$AG(dby^@h`R9d!vqv~xHrnD zhiYuR_x#St;#bq}vG|lZQLuegoIXKQiL5!T94dijVge&~;DKN8so#O^0sS2@j&{CI zfb+3RzSrmynXR{3VF>nwi1)Doaojo4lc@H6KOcUUQ_%6(jVsFR+PlSDp5KMx*7q(h zoyvP?38jK%(#lr{H#MwlVGIRs*CCm7c1h(>ub8l$*V8PyGF5}|1zPm(#a!X$prb|a zBFwW1;ir%a)!(i3tY7syd(fno(=)f_sbmWxlx2T`IZ=y@42VQR4R>=>DB@Xtq9 zW_?+x{IO-4lgPluSp{&&c)}A?(|it(&Z=dw15?`*L}Zn~Q8JAyGc{2M7F65~*Oz$B zhf7CrE#^@pS=vfiXBTZlES!^P9k7}1Go_xl6+ydhp-Taka%l5pmYRw2I6!Yc3F-*OLpgYrel$w|)f*JLeNSLmMAXy(`8L8Wf#vp^Bj0p1)HZL-lHJ zpUUeMMPr3yVaPV4)kE7mZXh2{%e5?_Zm4c{T6jjjwSjTwkBnuDSVC zEh*1|MqMu1Rld5Mo1o|}WiEH-Ei)Qr&fC%|H&JGhj+B+PmEhL`g>0RumI+vCjl5IGECODrgPxO(HiCH=D;Tbf036EK4Rys zj%FuOKVaA8g9d!lT4C*aYFwUUjmd2gqTA(I;z;28l`yi?*8LH2N9{mY4R&kKGQ%cumm{&au(?#%r@E69x7%%M4pfR7bj@p(pO@~2A@NH@ z5S{p%nA#w#kjsvzf&r6#oK6%r`thwB&df=5aW$b$VR-@7ix5MF4gG}l7Kgi!C36>+ z9Wt(aS=M#CYzi8bjcdW=OEQXg8j7?`{FDvOx3~QhjZ8&L3UgcO%gd1iu%N<)imM;D z<@?vmKh#2*Md;{8DM=1z9}hoWXpdjU9S~OM&-(9i-F$&6JsaJ20S?GTT_?_*C-!n( zW33BxkSE8A&euIGFwaGf>5}hgsJ5P#VI(mY5pepvf(^&S=hEYN;}5fVzwBLVHy(F; z_oP|YkDT&JjbS7IGTlx69I0mLLsEZlfI^BUZ-)h=pfOG%h6knlk<3@!jR(KjKsZy8 zp38kC0als2np4hF)7Tv=*WD$z65NM0L+yLXSYEsHe*9TfQi_uLEXlc4f=BtM6?2xI z?Zp$JDVGISV z=kf1)B^U47*y`W{r+D?C=F=KzV|I2cR|cZ&YTOIIA&!U$QVl(nGGNK3h0m5Lntcwj zj=Va$&iKavBXZ=*K>0aKfuaDGO z)QrR54UiC%uALdAtW$UT#(Cel+Aa!m;YT3RF4)Ds+1S2d%x!7j3@gSRCsI_>piOpB z^vphXYdU+TPiASS!>|N&n7NZ#xymDV3JUjwPx`fSKv#xKr%j=MYa3%3?LD(U$(p_tpw^{H~0lI=pa$M|eBHg=!n(&@MmOPug6wt3QJ8@fh z(>Ts_-5=Ebw20O4WTxzr*QtQ6lx`hdMto!diBww{fX7Z-OJOFW8-D(2%ttk{93Jwd?KAOH1f;=lzHga>(zj`}3i3JJbxQ*F zylOJIa;0}GZ?1VYUCBxmcL>q7-^-LemY@Y|gfz-JQ?z6eKzEarozoV{zZOre($`iSf*3$4wdx4NXGHZEu80>?LC| zc;rY%J6{s`|M)oWm=QxCGaPa*P*@|B_u6%BiP9XcpjOAtD_ejxCud5b-05gx}=8*d%5u^q#ANwwCxS@Ao09=FzGL4oE>GG%Xz#Dw-8F`k+g#AG&6-c;>z z#oW?=BMabGX6@C*|3kkDSJK*wo8W*Pf49>UTN8W2Y@_&e+pQ0eMz>)m9H-+B8nmDLV%w z`!w%}4)SVuNaCnc?;5?w<2oxd#;zE$He4+!(!w^L0l(ne3DjH69NoEy^c?Co2v&_f zmKcNP$u+FEzkf+j05g^lF!k%}<03TGserYfOSmTZ2?z`e$HtG(rzRAtWMBX0W!t#? zZA!bVP>9_s^$n`+NW7<9?k0X?<+|#}NSPzCJTl2U0|M(9nm3ZF=q*8O!Rx1|!;c*w zsj934bKY<|Yb-Rs))O`s(Y}A*)?4he9n`vP7+Dmx_uq_6lMoU(Fh~~ zH(D`L_uW+AER25M+t3?uaD2Q$TPgo&1hd~X>ptOr>?QKRVs0xMh`X%y5b zM#1EKHCr9(U5oEU=Irc2P1JFPIFcqS1lTKSUZ>6#CI}71>AWRoeW;X*Eya zw9NWJyMXFZkAg!k3dvUr?E%x$yrZUsc96yibXBi8r#6_*kx06waVymBE9NVn_afCqUl#nMO0?s&-;>^82@V4Xg7lcXMW%a=s$CwiKm0Cg#m-su zj+9Mh5$|(|WCf^nGe*^^QewD5jf?=`T8@Ru&?JnUe83|;i(Du^+#s$uiWU_hz*SboITuI=6)Ovm7o`c&e=!BibfLW`=M`hO)hp0 zJPxx6YIv|lAZ7Q8uKO}`$yA23p2dvh;B)KTP+kH!r=Na-*Kkt!Tsr>&YoB@_Gc>ZUe{fU@LNBzJIMXN0=s)v_xs`dTKgX~L$! zGre`lMxl_0W$-V*HEU9%keeV09VgqY*TtRiFTpi3leetADm-YWy&_<#xov+4c0h3q zaT1ac+W~nDZYs6g#T6qEDVTUE``;Mgdilte%7ox-WW&NS-ygWUSrdY$g>RXxnT2m> z@_?Om73ydPS~z6*hTzFB=w>qvN!@u&HQ1(1THIiF5)%#Agycd5+k7Tq zcKe;-HkiDq71}F+F>7S#m_aF7$C2P)a{;lk<5ifpw{tSxvaQgskbO+R>B+0QR*g*d zZXv*XSK37ZkcvF^EJRKt-2jOcW&s`fFC*NmM!``mja%U^;AqdhF-ITZuH}FM7;N*M zmX89v&#Q?&a}Bg{HWUFRM)g0~f zg%Z@A|A2=xL?P~Q#n4%2P{$=PbSHtshVI#7afsH(SddsU6bBPjLdea_hDK>T5iGic zVk-=d;rq8k+J)P%KJ)*@V_6wcV}LrabIlvY_y!H&~JA5 z4FpAvmJ@{)2VB;1ld3K$+&yOTBHQ&Gw)JT~&Y2 zq%vuo$}@)bC9)5L#Pn)Re}V_vC(*=;$~eX=24Qm>mHa8(YX7!S!|`9u?{Cm-$AejobNSB;&QJtfDO()(WhM#K~wAE_!(na^zIoA z`CK;y)&$++FK2nXlbIZ2ju^}<7?R#YIb+Xas9!KR##@;4?b54J8i8XobUPg5k8I3e zA`1){y$_^aGXZi{?$D^{{=X9caw+* z_^^=*qxNr@`^?Q{ll}`AyifoSqzQ(cE+69(Oj?HD4!&Y zM84a*<{4~UAY@LImsJP`O?#_i^SuEu+D-&U_mn=}K}=aY03tj+`9N1V6QNQF=RvkS zy<0SfQLaPDFoL8Q`cw1~>(qMODMK#{KE7d$BcN(P1@OTW6=4#kchuo2d8xAAav|UX zhBkl+X6;R=gdt68!NFxq3`sBfQb>1X0Hd0ZPct>sU^46kA$i9i-0^>*zsCAM)YYg} z;a6!z?3AK+$?P!8fqE@}p0imN29@qA*L)WhK2|C-x=Z6Oq?tg@;J7rEUky& z{)A21n4@x3K{^-!`OcWNrQ2P>bP4_dOQkP&qH?We&Z$1_`-6R~r|VqcK+4}m@|lzm zVJLhPtosM{S|R4HANn~DR6rsr>X{cTib^hsVac=;m+L27Al8G>{ap)f5C&wj>oX{_ zOwrCzRWL3JkgCIRKmaf~=WXWXGaorihna0pUyqqhbzp|tXOQw4>K%p+vS*Q1gS;M_ zcnzo$oH6LutAP&2f3zD1pZR7YwdNTRDjF}V?n~cF~AXKN6vcuZ1~cEwYQ{2C?;cm zYLdVE3t))is2$4#UK*OjOB)*>19{dLW#Z*w2DE23m<@Cjdlz^!k{gx)?f9dPrr!S-!hsnrYFUo)%dk zwcV>4u`@!E;X#+lqWqbp|Bp++7NcJZ8Xf#pN4087GfcBFOD^(2D*B|Tm9lb zlR0p$WJ{S7AWjenZD{3BULE`rS-&A+3}`#WU|LRf8DZ@~6F_4EC`vxgE6^au7ulKZ zP?G5WWl76F;vN0MT^%0=H2G^;MsNPB^`Gn?wR(^Eo-xTJj@O^SpT$Q2@{ec)gkkp$ z+^4b-HlkpY=+>3ZTYsEfarZ?Q;gI}HP;Y%m5+-gAIX-hWk$}62nVu%00U4W^1lsxw z5XFV8lcbn78d|b!SmICwl0QZ=kvS7VOolaW?z8Giw<9Q~)+DnJ*!8xZ>ym(~Hef>S zBWyt1$c3x8wD(*HK#@Y0pc@F5p_F31m}{~`0R0k!VWV#G|BeOcV*}bfgZP%Le^`wU z`81PJYrH@Cv>oG85iy1*5?JU;G80?e{Vy-UOHSZ# zi->d~0_fUwAvmzdn~Bgf5r$`jL3#;d1QVOFlLfMqpd~(sP}0zt!g27~tXhmwScMfV zV4|YA@ZG^I?G%|-j@v%6J6Y92gel~`3TW`R5iAv%;VsXN{c>jTO-zLjZLb2Nt=SmR zaPz5v66s(HqcD{{%SdeLTE#J$%u_SlE*075AJwD>IVuCi;6^|+jG*n`2F_~!4=?c= z@B`5Q*DgXH2%W-6SmlKzO(9_b@{-Lb;9 zYR@tpBo{9yObc1|+e)UA4iYZBC7p68{KeBE&G@Ze<<^2ZP6o%sd=ZQ4Ax*sE}pK1t8tA zpLHn4J0&Ob|G0|k`G16no;5%WvsQIc6yu8z9I0=$_Baz3Ft`vF^t!t{z|4mGI6$`G z&zvx=klEolR-!FaSL_Ku1OreTa^RE`k?D2OtbQxoNq!N^y8DBz3oMtzV~raws4zxu zFi#7D50#4!!vVi+`A2c+e`-hsh@%M>1OZHN5kN>~x+jxdsl;$U_8-Iopds;@MATFh zO;8#zplh=o9D+E4uCK@BVY1|eKk);e+pP?6-dqU$?0p?N-8{gn6~;a9X}UPi=ZO}K<4`iDWEJRpLsPI ze+wf0^kxv;QF&5$X5l2VXFYi{NhY=WvFWD?Wcz@|;9{3qWRQ%J+xb|0C~^_14{- zZ!?w;V9_%I(S;q$Z(~|vpeQ(q$vBC?U&9E2*o;5&HP4>Gkyl?6&Grfqg}`IY*wGyX z0Q?Unl+2Z=zM;%ZA;8C++~76flvX-;Q5+u#zC-{(GC80%@eh4pr*B)5C*AV=%^)cjG5@Tqpt>GfcERhCC;nmrk3twUI=WM2D!;~Wr}O^}Hd zH(2_?C?WmemYPv2Am-W76CUXRS1{G?TkzqyGXk;@BrHHIE!oH$HCvgGtOx^JTfcwZQLBNfy z**-N&ox9Tm!VW9C-C0cb z#n8+Zm?G5r)3zoidhRTdEMx0qD&Mfrm^mbo35Cq6`-l<>Bq!7hkt2mae|sL3!?H{W zMvqOxlBCoX@BWpIXr3JmGy~*>5Fd`5fpG{nAo{RR^QLt?unSAks;Em0HB$v;>e1G*H={#7d_y3XP;6_>gkL1rC zuNScYk(NS!&G8>en{WSrdi09!dyjw31^l~^|1WFc%ij#XSN-qHc=5kY@VPPkZ^wJC zh5uo0tlj{hV(UX$kIY9`P{}-qK#=D=(_Hv`zb`RthF@nRK0VsIqpQcp$GDwO#*rvK z-ws^munFz|)#x#EyjY(0$E#s5Tsc)`Ue$y0CV%Z*bqwr*mzh}{Q&jwRn_MQPX%$DL z1J)H$aKe zjiQO+*1N-D;LyT{pBeV4BW~A=lFWosDiO6V591$J{rutxg^B)czT3o>F)&`#W1OTm zJVu8Ixob(t19z*lmzvLUqGEHBj35p!|LEix;&o|CE}~t>2e-FJpGmba4*3HbuSw|F*DGfC^0MQ-{(JK1oJvmjU z%bKZJZuejDEOIGxqY0`U-}9TicJp*1mKv!q86IwsFF)AB{ZV;|0? z+14*v!X0Drkb}aABy$)oNQY?==3qkUuCk%n%>_L4(t2v?yQu!GTTrMN^3&M_?a6xm zE7#p_`ZKmd@yG3{`A$gP(9~c(s@7b?jr0;59u+u~VE$tIQZ=bp!F6#?+AuZOtxj}S z!>Qr732jjRPWawa1WP=Y1_i^F);ntZL!WS(6g;$dJVc~W$i8Aih#*@0p%Ta`k~wmk zcp@~tM}>SAc==aqUTvBQsY612*KrMd3_(5ON{c4jnH)fGlQDL4O+S<-}TI=V7 z3XGr${VZ>lO#j`+y`1=A{7+vijV$89y3q8Uhz>$-^S&>v=`xxHXQmcqJr4KEF4w2U zQ2(|qhTP{c!HQOe(dmhf?8{YN_HEHt?S7k;Ej4-mrxrVPiKSsriv;oc+P6u9`)^<7 zS1Vrmy=8_NA21}r{6c^W`SmoUQhwYnQu=VT;IuS6;Ylc#^R5~5f}1L&Yg0h|4dtd=PyJRR*zZ)xaxWmXL#Hskrv^zSxx#@hdUx=-f<${ZrCj?~1oQ&~PN+q#I zzv?hGaR@O?9i`db?8Uc}P-{QCx}!m71|`mqWDI6jaF5oDnVPCNA|lO3*|N-fRwMJR zma(ODnJ4fko>#?zBQvdA8Xqf@YvJ?YK5v2P*Ft9J?)qJHxksjV>;7G3E$F9#sj8bY#IdOf9XU)MASs8dD#N@AxR5Z8kU z0uz$ITNhg#zO&c5%aCz;!||0eXvM!NU?d4IkCPY#@u1idM)LpU-eG=(Bgk&xJv{9g z_24Y6*+@dY){Z?zIOG5gQj1PNd7l@bgu}y3<*mWM?ra6@I%)1WC!f_)D^7wlFyXqg zod2O`MpXZJf>+DUY+wl%`SH&C$sfm zj?bZG7qRl=px&xq>m(GPnoRHAm5B*pSuNJ8ULi?!28Yg}ipaSW+ikT&nf7w4Yt7ew zQCHTv&n$TCIem}y=8gKb3O3piWbTN7e%k;fu3BX|AeSP8`W8OV4u1IU(BVSD-Q|%j z>WvVFSYJDsR-~|68|8h2LIW|aRP0rlCI|buVAdlo#?ubGJ%2_&d`}sCr2dJNN;n~W z$;qUhP@`eg{%l$Z+Dd&s~&sGT+LQdG#UR9(5)>N z^F24H*uJ_ToP8^xr7tXp!Yo-@CCLsvt56||&KJ;mbhfvMJj6)mUxj`@Ma}l(6Q0&w zi&n`yXcEMRdu+Y%Iykw z!Cu72D2rC@5~SW&J)}CJKf#prRzak+{ z1f`Rn*qKWybU*52a*#{4OmD5Hf^kqMo61SawpzKr@n0Mr&)w0RVxgdF4s&W2)IB+$ z>b3l>1+e%cW-cxAV#!nv({I=i_Ah8kC=+;B>ob1CjHn zax;#rJ$jN(t3cTzhahNPjnS46S*Mb0A&976B>e7o-~10(QC7JEA`V~4C~Zh6xEz$& zk#nk=)5UmAp~J7rBVVCnxVZ=4_e(3Te0n&b(}Q*ir}^P6^4fNw=Id*pIt6k`(2vq& z85#FogQ_gZEJCO@kK&a_#I~B&*VvV<(9U;6jcqJ;EU%~H3#;)?mSY-g(Dc?=%f{_v z(pqHZ)2BbucnIfHp<%OfOX_Dv<*u3!p<9~P+axq6rpOvK|(?S`o79Ukz6or!(CHf%$)VjUM8tZGDOAfet$DR;)@;+9Zs-54 z26bGW>PI~^b9I?RZ|Rm+k?r|C;%OuHHBo8tA=9IOdCg1S%%l(S%oJ=t@uuE>4l?A3 zD>7m%|JW(=nxJ5J-FGBdnZ2eZx4u$XVam(M7nMGBF!bW7Ha8gqyG*?#t0KEOGLts5 z`v`);2-NU``Eq$Cs_a@#Kcf6WbG3p|he>(J#WJzUE)p`$T+ zPrK8y<|=vhDnzeruRF|wl{H>xZ+mavbzjZ>x|BMdC3OCDn=X*nt`{mwOv+QmG{R4{ z8xgfdBPu2@pB*~1E*yM2n*R`$uRt1!YmLgmHl40!X5a7)RcXPxz-BG}qX`x!D&~_6 z$7-5CV|((z7$H=_q>SZ(a0XBR&rMqeqj86lZ0I4mt~@A#Tv#S)xL2Fx`Afy9ikQ<5 zZ-k(8G?D$GQI5(7gD-~FJhigOhZ6Y^!mHxcO z5(8G2BmbHUAb0Buv9{JW+l0pa+f|k~UzFv)_(?0I{ED*j=VmwT*RepG$%Q7qPql3v z`Yu=^(#G`#fpB3O<8+_egVet?=llvzuxA@q+tLriPJ5Hh-CjV({c!Gq@L)c% z#^DZ6-6v7wU(;-`vk$#ujUR<(MXIbcxcwhi0apP z;DqgD5ZURo$jg#~AXJ=V*Q8uRZHrXzwC1YLhEfO#Z`iKx8{nb0j-8)}7=JFScR>64 zt{xJ$>ur9^&gQLbslwbdPa5`fj@?=X7Ynn-1Q39_Z1$wEqpY|VHrC8}gu!hyL#A@+(q+Q}VBzi6m@KVe6}G9D|d7*}=Dc7Hkl zCf%sCkSPtNwa6NpROjmlc+RL?35Y0f&LA8(iQ$*3?B9}nZ}}5FGbX`5#*3(B5jk!o zC+=+}6f^w{Zg9UFwk)#eg$>yq#;5#1j5i);CIfc#hDQc_*aFY^Sh(v?9q2fw`UD9vFA2`%XyRXZdZSEU~+U_L6 zH&3G*we!2E$sWFkB#BkU4ULMCcD5C(Thv^rWn4Ph{CcNsinUy?l^^GmVH^3=$RA>>R7efu!;ReWpxLF>*e zr@GQ$|G^yL*vMiT-L>{gz9fYW*X^7IhOR`FW6SljcmCT9*#Y+E)C`yG9nic@~QmhW=J` z(j9(l#$wU9=e+*E;KC+oevZkdKQ-XU=3LfL9?ejIh*BJklSM3PXCjHs(4#Ob->TPh z@wtOJCI}a=e|&pTMtsTV_5NS+BgQc`)eDyAxWu8n$%^#eWT&Mn-g~7Jec^;NT*=xC4&kf*c zYnqo|cWRH@9|UN&J!x(RQFWBDZnm_rt`$Ko&{9x;AZDW)rf95SHs6~1dP|KR^M-EU zl|FtKR>=?IcrfeK;&VS&XM&zAYkRN3N-32w9XG&qo1wwC186su5&gcHH&@K!91^s5 z8NnNAah0-Wo?ot?p~%|q9v*a(#(e;Xl-H(r|9pol9)i~gvZQO9HW-cf=Re2}{~DBj ze2nFieZy0{+yK96mWjt%wfMMO%~RR~ml|1VV?{wT@OQ?80rMvU5Cs{UayM*Af8<3< zO=WVLD(>82B;wO;U%W19Dle+cs;S7m-;b34D4{;Iz~rQ{@HF26`*BF4mdase-Z%f4 zVW=|XUm4si z<{=3lY6^adj(7R$!5~dv+yyf2XlohKL8Fpcr4n_;q{)GP#Yxi7fbwetU3^>zK}eg& zS$o!9ULK7rgW=(M0TF7FwiN0Lf65T|qotM*tRLM%te-__&I7-Xm(6!$6}Vh-6ODGpKSS{1hC>zo?mrKd zv9I|MVgIe37g_&WjrbnD(&l!ju1d|)W;C7}f1$AHvZXSD@z-3u5dJ$ox9sLTB6+77 zd|0QpC*|RQnEBUL0j?A2kJ0}DK8D__vzDHCPzzoD6=W@uV%mWAPZrpSf7TY3-#gPg zpM<1H_<(C2Q|Hdcf=-%AKmKzM81YX;Vx#7}LHMLUQpfsFyL|ED&zc7Z>^nZ?CKTub z4_gJ|eKQ)amaVLZt)zdZIDnfxgrNV)3HbMY=>^@tzYnB;_Wgf%?PDI80<0sTqajpw z^2B0y8jSUNaYhla-T`+KQE#q7^@XIPXD)f*;?%~;nBj}vmv9X_Li7;7UynTPqL$zT z+LQC>`UYx^mH9_?V^J@3y*e*~TEU;fB(F3kL~WL@pDX1()Zb;NdGY$M{ETG&*-$zB z-u@VG%D;!;ZEl7waZtqy1V3ULU|m}Zh%$ut=^!B>QK1XGd4cfN&hFy;IHJ#xw#4n; zF%msx7e-US4pb&ncLqIQ$oFk{IzVzJ!Hrz@_Jg8bE=({>X zEg>6t<`US+$NDKE60H6F3cY^fzJFl@@5SiOKn630$oW&K1I3@wvNh!R;>4()aTyb; zT>RFA8k=Sjk>9b!0f zm777+Q=mLWFD>32jQv>SeWX$TStL+L?Bk<1uk-EBqKc88H%OAfVg-I)ryCsL<2=E2 z!u9mc^8}KT$%X^vK}`YU&;39u=hXyqRdob?{>4weYAP>*2UV=Q^tbZhpDPdZSJ#lc zC=uhr;qKvHyfc03ij;Vyy+Z%%66e$%{9mak)Wx5Dwp@e5k%I0CTs za_yRgGUnv-xa+;-z3fFRO;1;e z>ZTIHIViOh*fhXyRA4<8e-O_@-u-{D_f`RI1#R1IjS7_FR;;DC1rHQ!kpjitp?Gn3 zNJ@)Sn&J*ETHFf3U5XcXf;$8cL^plk@7o9eKHZ0Z4sx>AOxBvLnOSo`*Zqw5n=({a z`A=QxE4`e3`3~35FN-I>IG^J`Z*bgCc+3;@QYaO%zy&_J@aiXK-DmU*-dXf}KzVn& z+70KV6cWy;duxIgr~FG}tPtNnkBG@_BGlCr6SP+hgm~jhn`v zK0S*06Y*<3_9nY)Y#hu2=?!c^YT!&;^$h2J1MX01-!yR012iLmCl7dF*T zp^70kdpfmL`-pqAK6Q?>3RSp1nze0u%gHGnXm3QO? zj4N_b0;rgT%WINT6%)iT9R42P;&KX$9D(6HS3bz=Ri*}J8zDLl=ZGoW4`(xREjZ8e zr>=T)k^qSWkg@0^*J&z7^m#w)h7#WGZ|}|L*C1e(jfhL2w%@+<#BtxcIixMe^utbc zrN}Bxus$*;`~5EZBK9lew5#{csBua*h!zrNokdY3t%3M_5sZ(gf}{?Zodk^82OX3z z8I^F5zb}}`>@?_@CQLKd75bR|h+*~GUZGV-=n$V6IT$1K=|s=vf@%zQs8va5QKRApa`-Kp1BOYg5nQ+V>i#85S4z0vQ0Z z&P@Hxq9Bh#qO#R18Msdl3uKQYgfu2u@w8Oq#2X(!G~3ctCsL z3Oq+OtILAP{t_^69^{kdR$Kp?$#!$8H*-Isr>!lDqdM1|z~Lw@wkOgo<@Bs)vJ!I; zMCCz!75ksDtoq+rc854}kxTp>A)tms&6G>(#Gy5uiRgl$xvIeB4IZVnr+la0wL38hikkme>#o7&E75mMR0lP z>LPVfy+b|JS);fm+_5dbHZw78(y#EZy8 z=pa23&ll?TvjY!=9OaRJ1Z7+GnNB%!WD`LT+TOtRt)4T zEK>su)$ogZ9&|6Zv7f02ul=NE1${ZyK;FMwfCKG8GGG8ggSa-%iCs#b-Rwsx9w6*C zF^Obc9U9qrn`AQ$xydLfHQssT{=Zs)BwJ?7acqhU(c3(HtHGun^VCozk8q{R5c<#P86!g0td9+FpwMg~L zew-?p{S7A_C$_}%4BuQikaH7_5st{NxZd82mIVkeuLd$pZ53lBXs-kRT#-gR!iuJ4>n_|VeVsy zV*WRmRg)Gi=7b@uTqf>ga<84H>G4Zg%Qc$Od`NyMCzyR)x$f2_7}X2d-z;eVK8U$# zACttbbHV;>7gZWdk<1@QQu9L#Rs!RN08eA`_8AQa_M*Pyl^9mCQt!= zM&@PcFN>M zTKmj$!u;6#Q(FpO6Rf64q;)&GjWHIlR4e6Z54W$Eo?=&KO+cJmihsFdZ2%Xl2Q>J0>rHVmPc{DQGaKzZbGbjI-{KHMeFc z{&`+BfET$J5s{SsfC6aJy&d4z67d>xMgWR)=LYScznP;O`ARXYo`uutS|oig#!iF( z!T-AX+3Xc1XkoGYg{|A;XO{tzs~ghpeptbZO93^Z8UO9>w;bclaCz`*{h@t@OAW(_ zMemK8`3T{Kue^uh0Rnx12ecDo0P5>gJr!K|V{MelPMXFCYd@VU+HrK39g;NiGDfbm zkF6ivzZ+M5*L1q>>_prUBb*cz^wn3FvhK&U_C1LhG>93ppohHEiwKS*Udb!a zl|0THutY%{o9*9yX|4J9Og;{zZMM>d9D5}F)4v_;b4mV8YWt?$+79f~nj(l908U~Y zj9YWRv^JDsb6sm-gN|BbzXH4jwAuIVN%##*{9Ss=$hw0`_?3>vsb*M6z7>=Tp)g~k z^&}z7cC$R0>tk{?*$X+4=Ogj|WcAyPWvR!! zvI4Z*s(gM733?v$UuxbS(eg|zV5Pzp_#o8%yb_Q%;lGRZXf9TJ9zfbW!NnuXll=w^ zLSoO_JE-41Ed-KgVw624`;<~+9AM58H?xJGnNq5lms;r;#rB zqHMS6`t7aE_?G^6#2Q`bEeazm#Ns!@02TCq!>BBl{?jAvoqS!UNRvE2oo8Z{6%3q(Z=I-A^U- z9ut|2hLvH;aLp^rcf3K{Kiw=r{ep%OMple|ZVXKx7eidJb^eSkSEuR`Z4Ekl=INN3 z=6<8@NpnB;P2?lv9Pm~h+$Ls{(I`KCrt@s)Cl{j=XfJ8@+hF{$sc2YKu6|kIi-rsM zqS-upM$G;W$^Bk+*+NtaTd{ZW+hH#Mc5x9*vAE24I65%p-7L8JvY_1wiyB`TAlOlt zyY0sv*AHxO0n;}x7!PTjI115!0tY=>VDyrR)sSf57r5Ks__1c_pT- z`-7b8vov0~R2&y0zOMzpw<8&Qg!P~4v60viopHipUkcZ~qqCt(1Q8QZ9RPGmy;#pq zCu=`Dq&KdzlvEp3RyQ zp8E1M(wY~TEs7c|oRt31CQlb*wF8BAt3{}^uzXE@p};aUjUR9rbd;?)b>?^lJ70(c z--}=&vv){*759~*-+FK8DkgiE#o1A)_CfB`_E(ntt+|D4cs^OEH<#Jq`O2MiS7Yku z#DiI*31+w-k&$18Owo17kU*>ZttF?@uPbw~1!mt;{VH4IwJ1jqq=JjFJ5X#MCuB+O z+{;un;IRHHP|D!_MYYsU9eDPS7fPV}o(jduS?;lwbh}Cq^9)CW)TeheB<6#Jw%&S# zYG6LMHMs1F`{AI+Q3)yPU6p)L4C`^FA3d8tNs~j6r z9?vx8RJ~!}*igTHz$HF9M2i18C6P$tpZllA0ls=w_V!7n&XJR0of_{$WeZ8vnHJW0 z%h{PIH>fL!g}ps7tW9TeTBD4+BjD!m;NJ7G)WV;_ht8=_fy!P8F{ zf4;5`T^p_OH?`{jq4D$x1Wy2(1)r|{ZswOTID$6^_e=AX&4+ZKomu{5C|6EUDp1k8 zV=3UT6!+`OPU_eXjI8&%DFuroxv}`%bG7&Beor8_4@b=cb}q3w6|;0mb;5sgN*~uhiS#x( z15x4=amJIFNczN;VIBb_aEFtUY3(q#b;P(+MZ7NZxM8R z%hHVdN}iuNRK~!;ZolHc|5lDJhpx z0kNL$0I^e2dx2~m@tj6)_-j%0zQ`MYJ`%M+OD zVBbx8^P;*HrMUG+P}JK5fVRBMph{R**^i&mE3^>-#?$9-P58qjhN|8K@02AHJ|kMY z`z)MG*Iv=H>{MWjI^{7Jb-$>IK3(+<|gLqB6Ec#=H23ppS0)=~2alnh!hC}C?EPS#X)l3ugd z2-#Q)rHNVXpQ}rs-io9X_)Jow!k~$m3@~B_EUklEA!E_9>OW9ob}b zNP30qv701wkj9)lwqLoi6-m|dVg`_4)0)-D$Dg;$Z?&m-;v@C1-1fmFHm%&>7=0}# z2ymD~ype~7B>hB}WP}2I?v&%qKNXMYteINggO|ipk7;}GukfRcp*us~3zD=kqBT}< z90JCrNBpw>)BkD#(%-R0uOq;x8Ll;8ZqL>I{M+vK>HdF$2CpIj#bxeUo+%I^MI)m! zjbUA9>xN#Z&E89|Aop7l(o$t0T2aH9ft%8+f-tgqnT0qCkZgD}eIG&%|LdkU3?@zf zDB_ll?5a3!s2G@)a2rF2740T( zF-l2OPq&%tEb=HU%d;Kmw@XN7qO20Okr_0Je#T{o$eWtut98cqKi>k55R+_8W^g;z z9rv_f1Q2|;uKNZU`KFwfJt-VwXUw>Q&-yKr0D5VM!z?R1?-NRPxzGRyWAd6bpJe{A z8i;PXKyZBBoj;dpiW!|Dnlif)%b-DR%RYHI=y@$T{r3YvuBB<6LSUTW@;oe(@>+Iw zD-KiFIC8%e!>%O`{}Ki>7-+J--^Ckz_^G#3`lu6beQyBen?fJhewd0>(8@Mt3&tE- zIeV25rhCv5fzg4*4A9nebC7e;2UD5I*_&k0IsV1T(Q#hhFL6MFRbT`7X>;?tiC?iF zRTNKFL-`1578UOjoJX?giru#$x{jduE&P3j`gz$dRYAacp@js{UbmMxo=B;QS@%&! z^g#RlE?sr$zdiRhRdZ;bhqB)d1iB zgyv8)h@Yr6_R5Q$5r4}oFM+Pgzk{U4Ef#2ds>_3VmlfhxEvHLfO?|dN56}m z*H3RkYR)Dpr!b@g0TVdu6n}+KR9a%hgdGChh}o-M_VYVUl3sqhY*hTKs1`ec!uh4N zL=)RJ?NRB5$UoB(d&C-%w;)&NdSQy;(XTN_^^b*1PfvmNP(*-W$h|`8>obDAz1%V= zZwC?2?ZWS?!Uw`zpAy}t+@qGBjc1H7R+4swz?WlQ8%R<|3&qo-Ur#base#E3;~_8G z8VUz^EO=6MU+p?UwJLV|3tNYjS6*V1u<%!!J7a`7ZGR`jQr#VcUv>R4?+Jour5?^A zh7>T!gN>EWiS@O=6xnnS$3KahEA9EGIp*Rfba#;q&R$SNu~DE zHtd0F8riod+U9`gkgdzmVbQ(-PTP<@ScQwa8EE8-rP z8ra|F$4x*S--oqa(OfER7h`HpP98^RK=Y`bs(GqhSt5xDuHMZ)*k14^?xbhYe5G+K zTQPTJBq<2(UZDX~8@d2O2O1{Ha--lkB>|eT3c%keEsnpg6_66Pf#sUpRfNZ3F9+07ti00kZdNxN5HTo}e{rj~%jbI-qOmR#9!$yg zGaUC*`~n(Cr1_t>u=0tFuHO41EbKPG7}UBPmBNU0*sAG#xhxUWR%kJnmMwMsrx*6h zlJm=TuQpc!AtICHSvcO()mK;IvEJU1-avlWwT1^&|q&XFSTCH1j*+tO- zdq9o(toJ%wj$CdZuio{#=sGkoHLhBT&QRG{J%&Z0=K~(9x~VkECb-p-a+!po<3dJd z`p5Y2(1E@x^2I(+!s)TjbPSp-CunV4eu}{QVrphX*3aVUaU?4%Pxi1N)YWsVKn)jG zqPG?jPXUk)4E(J>Cs~Qz+9J2~FRW;qpo~*_P1*e~RQW&dm=IK`0SY89|D{Z2YH4H7 zC);l;G;c-dMfr`UfQ{7@8PT6d3-U?Q%JFc*Z1b7xgUYk*oZg8>C#?U#kGC`i9pQh3 zApyUZNDsRdHOB8hRHe9E^aKZ3EbbuIfi$rxXKnsm zP$gDJBm$f|R@i=vKK$D58i%d`en>CB_Cj{`{F(E|Ar%FSjc2a6u7Fa_*m+pH-^qLm z3?mr>KHYtUL&rTf4O@xBvQ1YeWMZ~s@?p~FS9S-Hj4v93ZgUWqGQ@&#ohU>_;7vP` zyS#kF3hvFNXVvQfhef2WvPa3zPd-_f!0q$JY|UBy3`DQvKIy(XZijY-V64rj=vFs& zkhsX1w7CvJ@uM)S7Z>!d*p-}qdr8DhQ7@C6k#POd#LuNUg-LV6(bF#1NXPb@RZAeg zX_0*qR$r&3u;qJ_I|M1hag6iGPNHbVz3aREO8`ai8xL=N%QoFmFWx!?_t z4P&dH_DORyl0k^|sSg)udC~(#@N%~8*gBw*b!h`JbWG_E;Ymm&uL&pX+AX@rH2T|X zAIKRHZGBj@v`7@C3pacU1rOO(uJNF`7>qrprqm-Yf4{ z6wWCHR|}Hx>vaIuLu=08c#@fm#p`lEbiFv$zO5u_QeS+|h%L!DL-VCQnQ|8^H#qj@ z!1(A$#@;b1Xd-^CkW_4hJ*Gv;07fr>tNZh|Q^P#uhc2-w#vO*8{P!iJ|LB@BHV-#B89F=T{K~%|@jFy^}DNp7?3& zj6*J2Y1|IM3c+4w@NkzbdrhvZ)W>7j{o9D!?ZjNGw+i|a#o2a)O420y{7+N83UQYq z{fCA;Jp7S{FV*`#m)D7RQF^fJTm12YMbrj}93mEh_-pHhWdVK3(hf3Z$|hLfKCMid zKhY-s))AY+ZV#nA;J?NFIq0)&!Qi9;>y?bAi_U4T`{<}g86!MsS=i2I=IcC-uUKV) z4O-i!JXfg$?_Ea53G}HE+h;-49&q+2!W{Sg%+8YS0n!}svv#{UdzHqtHA&C*aRaJx z)Zbyf%EaHsyg47fjXvAuiR@or4HHBGTDZt#Yc|{5UCL+60NQeWnT}n2PJL5;d3&_4 zNsCnZ5hR}upSS;e!?p^c`3DI6q>Fz=1r%}$DwpIYNk=`Q=-+t0DYc;qkbmo$u?*l7 zG@%gwjO^pT4SP+H+*^n=`Pt!0J&ZwqQej11eSC%`x*Pt7b1dr+v^_d+VFz}SY3KO7 zT@*@iF2$Y~?Xp_6_q7HuPgJ5lyW?}J70E^sxmpQK_7nS(cXrK zmj%a9oScj;B7gWZh+`eljaCXB8-3?thdFYlLmGH!}! zrc1kUHgvwA)r>SXHT0sIy3_X%()+U%`+B^xxcOrL*H~W{q|L-v5S@{g7|@c>RIeHs;^-mz|AwOfL2_XouA@nV7QkuQW`%-ijhCl49y`$It+Zu&@ApZ?+ zuc~|AzXh|PPrC);xP~5CdGfQ!3|g!+ez;2o{JOTcF7`GmF&ZRp*B03u|Ag$`oRf&z zpOdPIr2x8)@~D^?f|%Y-4^bBv7s6Q8?(VCnO2v`A>reT`t|Rqg?fI%>zkOX(q;0f2A0h_NaiB{SIN_VE@miQHUk6QGX?JCHzxl^@mms+x+jJcA1`I7 zm(S^g+rOH*?#6t**HIo;%7r!PCiowY60O$>@HkPXM}K}aLv{a?G2y@4C=aWI5Md4O z|L-~BodE9>0tR%=qyJR%&m$1_p#;P!&l{ny^`G{*j+HIzU)zs1N58mp$A#uU)(+yQ ztlGROul`-l?PcD%E!}?o_RgIpf&YN*FHa(<^8b-= z(Ij=~<*}6&so5cG)G{2DT*os`ASP+XvABXoG7ia(8(64mz2;+cMvX-)Y8n}@4^9{TZAEk1N|d{|H&+lYs~s`4Sfmx5V47{fL&b@&DD4oZVCos3%d zz6+8jT=k9PB!CH4RpTb=3Spnp7Nz}sX9pigELQRK_d0HqftSF$LwS|33lgDwz+0X9 zg!Uh{cV`aIZvTp?ZCL!GZ=e0k2tOAtGw^T-vsk#`E;t-()Dpl;v`l(I1-b?1i3l>H zBwRZOd!Nt=;qzHh@~U@k+J)!+;s}9@ih&fq3%eAM@!n1*l>Zv8!^Qfs zs!4Su`h&FPK2vkfd0_8SFk)YxtZ_H_je)+d(X8xdZlPolZoN3~^dv!ye+wI^m5ceS z7$=;PGWC1#ucDhG&_+_YS9j!<;~&?%wBA32L@<5sN*~b65SS#FThDl-=7X|R+l@Q4 z^{{yOe{_{nQgLResjVM+p%2|{ zCu?%U)CT7tI4S>)`a9DO9SB)CH74Kv!ov;7JOzkNx+rjFqJL2s9{d73LqDgbGM(3a{~ zZOj`is)AE)dC9K+SZt!7^psW-V!6LrO-M0{l6U0_jUia~H?ddu_Fvng zcgZ6vBXdOW3U3BA*r~rI;&K>iP7@^XZL2Rbc_%>;v>prH(X(l}aNl7vT_bBW`S$y8 zuEH0R65XOzkMUOSsHT#ZTg25_a1x9l;VJfE1!V?XZTdK$-)hq#t6So}E08OUH;SXJ zO@BCYdQ2MXZt=jOG2OG}FX|X|AA*C`lM%A}ZHKeXi({Q3VF(uiZiuto14>a{l3)!_NXakcYxqT}g!$0ZCq#BK$s8hp5T&l(i zl;=?@?PL0H)1lmIk5~Qj>IqO%3*O&8nyoHfF6Nj?as6oDT=G?LOaSs8tX%E~QpqjY zD)4~y7e^=_3DzGvKF;TRdjCL+zF4?t?Vw~(d~rkzw)<`wUfxd=XI3_XiAA{>}l9!A*q87MKil%cf5aQ)GCN5ISy!lyk$K=LtJSazajkqy<$%%J zuI4?w9vZb=CV%>VR!%WQl%(X0ZEXvfv;)SNPtUzHd{uzaFU?PD+J+DTGHHg6Dy0J5 zW}DfjP2X{kmI;HGs@!a;t1;r` zsZ1mQXJW^@EjO>-o@RdlU8+3RR9b1nz_VYW`NG;Al4zbE!Q22pa|GV);+FbsNK9U~ zSFMKoG|$Aer8B;}(g(CAuob*ED`X4P{&;^t342pElZrc6P~M?x$-)__4{Hvi-QJ$| zgC&IzAP={D@!2SqZY=j~QhC|3&bPx~1Y z-)IVa-z+q1a!uHG#S>$=g#t=6+MFu@4X!0S$P%W`#qW{Xg(V%q&bneCaPB82H$6x> zFN@iX>tLD5Vw^E%Q{2DR&!PqI9IY&cUhE!&-x!KGZcN5p!l{R7J=N>{``H`|@4GP_ zMWRS?%QI7aLE9rwUAn)Dtfk?m`~C4Co5*@$sg@M?N_zmzvEfC&;VFp2&;HaI<=b+7GKoXz z&h{u|o3}F==sxpYpCTTgt;E`(d{sT7^L{LUoO$S$*ChSc@9c6X#|$%(Z8ER3^udx? z0OsU)pZUXf{n3FPK6oLDagrW(n+>+zYH0n9V4ZJv0KE4LVb{V&1|003g1stk-<*p5 z_Nlm7d&(A)VM*7#mD2UvlS$)MFODEJ@r8KWDcT$+?BChbBkWIth+f1t@Z$rdH%@na zcf9+Ym+CF<-q>)RUyb3X{(jMfI@dSviIo$ziFG;LShRa66!ewWVOz<5J>6NI7%{}p z1w1wotKRN_F@OcEb{esG$%j3=#L%^Rq@vE^thkv8W)mhQHT2%!G8PZd^4P51hC$GG z*0I3^Wy}P0nOu0fwfoGhMRU2i$lM>(;55_qn0K04vLsu;YC;5VuwmW=cZEo2ogTCN z{xIYT=@%@<+=_#@;Bb#hgZUQ1$5sNp-$puGhWC=Z<~uqmZNnx&E0v8&d_W|&f>3W1 z;N1_Ez`0vcNdwRKrYp0{fI@77kH(V)6-{+r=ml+8m@iR=W#2dP?qUk;O7mxy3k}OM z-QozX$P8(37YcWP^tZ45cRol@ETET+X3A_5A{Q06dlKc;&Ih_2Mv^!LZRdxpD!Ohb za;?c}ZO{D|SQTMzenSe44&Rp3X^wSLy#MH=Sm93DPwFEM4i?Co9s0jjs*6KIgJm)~)+aL*1omE+>+N zi;s|gNM4szf3eC)-xwOffXs+l%wLMKpe(u}4FmheHE*!aWYIM|#;1U^@X=NOvbK zR4s1H(--#MwLa>^-&T^{!UsdjdnHa}zFIR-*q9>;8KjmUkjI9AhC zA8EuGpESpP1`Wn0HfL0`*baB4ku~8XHkzh&=`km*rjO1_Z4`|_ZYX8fyLzKtpyWaFMs^mqB;xldGFe0QXo1uPuftLpZ5dC@Cp*0H^xxrvCE6iE#T z%^4*?Kfjr42c6}835(|#Ao$E<^y5iaO#)RDnk>0^UGJLSTcQ?u82enANuyh4nW_zi z2h{&LkVuX{OD@5~@|=R9Z>0EVYJ|Th8F21K-i!LY`-|hcs%xMxPh-SS?H?3 znd%uR!nKk^^h(SHcUo(iN>ZDw9#08I#4V^jqZ_tAEeesh`d=+T*+6I@*KwTQk`?&r z3s`$@`W3mbi6|O;kmJt=oj!CC?ngMSw4n|xyJ9yPhF!b5@k7$T-|gM~mR-D0&r9Y0 zsjY2FRg~2#EC_xxh4&d=lZ=YSZOozrqjHn zKu0jj3p+S`nk&JfaVckeiMD(&kjYIiw_x`@JieCj@Y=Athl2?0^oi&@t=N{pfy<;s zvU-EhS5<;nw=&0S;r-i;26y;KkpyGY(wX&soJIM3)~EN>7RS#Rgw!!{`UZC%MV0(c zDZ$X!G1=$B9`G{p)>=E~JL<5;th-beH5M2rBn{?svu2`HFET3mn?c&|92;M#M@5A14qn=$9rzLP!K4?_!+>7>>&;}RD(tlRq; zz@gUi%pkG*WubkB3a1W?XNXy=xB{cKK28^5bHhmn&?w=Ni=N~5MAT!#`juas9RBehbj zM?lk4za7Z?%t6+6oPHgvCE-@@9J~!?dXNA9jF%#rJY~w@v6DL+uR*iz<&x3@$^jJH z$2Sst?2-j2ccD;{WslC^@h;(XTn zsoXi9|2Wm({-*yUaXtSNyJS+`d5k?wc)N$+mpIVr^_Qu{9bombQWT;|<4~Gwygd*7 zA@+}B$jy1NE_aTbGku0k%>Q(Xf0FFG&%bL$+r35>5_=vit?TF=of7a&;H5)SKQc>m zIczONf!9p7y49J-qW7PvZVJ%@ihp{R_dcJG4yz$C85>{JH9`%ARrC@htHu^*(QuY8 zX*>M}Wh>KD5?d>kxAxkSM(F&ivCOm;p_i z#mC*olW|8P_y)^xMsm~P@sWCECHBO%lIoRQ-p5#q$P%n{AmSeJwEqqcr|I@AO7Ke< z4c@~{H^ES)uC9l#Vr!Vc7sMy;`w-gGE-y!;Tt7RLojE?Qv6q>2QkpbZTp%oL-uEfp z>z%7e*5fh$Xi(7m5u~B=f*txoKP_Z%_*W*$1$gvMG`^VzE#w?D-M2Q}D0nWqBRF<0 zN!xz8Y0T=V<>6qfcRVPJag|0*H1#R5H5Hi+S&wB(zop8$^aCYV1Yo%2buW3CL~!Ej z{V_2amRn~wV;sB)7U1gx>&m+?Iah|u=jgJ&CnjbicL_>85v@0yL(Kr6u}J0Cx7PhD z>qTwmBGuaQj|Vb?4w{O?yMMtd0Qwb}vI&_|jpvyzTSzA(_yJb{P&{xby4@e-oBhYL zM)1Y~=+&s;epLXp81XRnU(+9qjf=8ZrnIT>f33b^EUFi?Ci8OMUwzX^YEGl2x~5{; zet;7@`emJz7f#KZHZ<9CRM0}Gx|2ya*@~xKr=Q^3FaGre-zaqeY(B0G2t2h%qt?Zm zOSQ*5=PMiQ3kP{kuVhN+EmQ>?6Z022K3B-siWPAAyGB+mtxm%c*vR!6Cx9)ZEr%8}3OiaM5!cADba)j8@upw~_cGrrEv8j>O{xzdQtGULb zz5=P1O_4@tSByWbbMSs}&3A6(xGR9A+j(uJl96T7c|5$D0bb*g4S(EvnBf=zRw$fn z+~@`~Yb#zS!3L)HJO;E*t_cAbBo^T@4Cn%L>Y7^E9zS(IO8nO{%c%KJDG6@HvkMWO zBr5PhK`y@UFzKR6WB;*cA>{IskIlNw%t3I7p{}7!^XshCUx+u}1YTH%S501P!0dKc zk=eo$Mdoi&opi5t>wdmo$34Y}Zf_saq|x+xZZ<&yc2-`43NBd75UQYwLuA3@RM{}g z!=n%M>NUsGFItaF^~=JzEJ-!@tM4qb9~(NY;PI84;ceP&55MmF;X_H;op?YT?bekI zR&hKkDj5NNiO|h!xYq?*eTU)~sJS9WeM~VX(dY{NAqUCaP%&V9HjL!43%ER(nqBFU zZLXPZPkG56z@0KqlQjF~@YwSg{J2BV%HU}@bpq(`I6QM7FQ{VteA}s%XZga`Y;8Nh z{;kpG?e49gohipn>VgljJ_U^;3d=O^~8zlg^6D6 zUiqrv)sSZTv+hkm5`k$gg7wZ4^<&XHCM>?e@(G#W)0yh@vnMw?Cbg!gEDRGfJY9ct zFiQn*0-$}YB2`Rhk17=*LT;9x&Uo5^(;gR%qnO#Y*KhND7Scw6mfTMK#Fgz?mnoi|4iPz}*Gva|P_u#vrD5Y`B4!kOVr`8<8rnk7KY>PeMG zU5R;sTD|`Pbta~!N)&_?3mq?gR5BYj;AI{}{s#Fe#*TlK#LWa?r?AceQ(Z*&57ha$ysC8av zI(0GQ;l8gASmWwvf4u~oI4|>SF)jdrZR=Uqp}VlSL`d99ba43Gtqo*kU%;U0eG43?4F(Vgje*xg zw~hoy1FQX2PoML#Y*Pf)iUP(1Pid@`A17sEg5SR(^MT`UIeTwGQFWzwHZsz6tO~6s zGlsS2?S_dd&&xCRDR$`@Sod~}KJ)J8j2oM}vwyI77wz@2tTSz&Sp~u4F9kCOCrm|w|hzEv9xE!*)h!|f!LAu0!zqIArD4S7;UTnW$oZU{_t(|&J|-7F-sWUV@6 zm}a|Iyga#?xsDffye~81(SB<5R;>lAyZbmw(-w>!4zqG@Cu-{FR;8UbDEF80uWh zxzvF6uN($1*^gG1HZv8djJuOyu4?POWNF19^8{=jpUo@(@!O6O@FxL7+DoCWP)rRU zHlurO09+6;L&CHJq3Ns4{#;e>00YkfZzbza!ERalS1S)b(bCK6+%e(ViD-6gqKxWW z-nkTYn{npmzS^uDTy8LdWAxBT@v5qW`aarah0wzNzk}#$+Ku>Vvr3YbZ5IuxlY&Q! zh+sY?sJ}iYe0^kMVGGb+t<}oEQ|QgIKcW{H6O)gw8zO)iunycG(ap#)tn_JXJ;Xkv z+Vb-~FT}eMQ+F~bn^|=H zmLN11aj7aZGrV5tw)|ncW485Mc@W{_EbOXlLtYWw=v0385`-dfb=o&T`C)ytDb<}d z^mG%?*NvZKFyascUs&umw!4_rS4uLyrOnD$T)oE%b7L^y3jekSb{Ec}b-9v~*dxw; zOatZecXA`d_6V$UuWBxhoo<(?ZEHK{m%VMat*XF-mrh z{-Xuy`QnIIRSD0)QxV47Ak*?GazxVdFlnn5es(H{L{J|9%DR1+*4 zWj~#V$8xiO`Kib-tuYtcD>%?IKs0}PoL|W@-cbHaE~khgU9I)5-Rbs(2=uqJg6i6S zE@KgXBh(3VAkWClWpXZ8ZPH?YrW=?U%lO+M+0}$Gci6l(crv`??$3;UWF_?XwRg4c zs-fc@l|=y z%%Oax$b`$xg2-FJ*?qjJMHsT#9;dr|SYEkkY_i@uutjbRFI!y9tgShT#j^>6@h*Tz z4R`|cCRUkyb9g$%dzFYMgOttQ7~;4Fk^1B<^;!)Xiw^b4PEtF}=6we^2@m}vanl(z zFp;VRQCO0(Z*wVpgCyun@`p$uW{k3G>#)$?gPGzl+)D{ zFQ$xJLCZ5D5RHoJNx`q9tp#KehW_dAp>Wj!@L@R%#2?Jzs%IyeoP!wo90z91^fFJ% zGiEfdvfXOBeBI~`UqmhJ^hFIFJYUs>D6%VDTo^kh{m3s4Sj=GACs7?YQ=LC7Ju-{3 z_jc(VBI5E#j-Cz9OvQ*SXrtSD@^S2bqeAfjJvEa7d0cSg^-J?>C~~sEoGk@*8w--=XUN!`^$wHT8Y(g4jhs6p${c5PI(& z5drDarAzO8 zIcM*+_g;HFYdve_^ubAq4s@*z7e}y>;(lL2_w754x*y(18)D2BET6U=t|uk6C}jHA z4!v}wxvzf>riq!kQMfKVR`iRP=Y7iXVT#flklA>XdJfVI$6fF9CM#!;v9M0i`G9zqhP)Zp# zu@zi}bG9S0v(Tf%bU3H?LyK|#zB2T3Rhgly_7??f&uXrR^85B9_|}6eL>W~DbCbkj zN0RL;&!ux>27Xt4JwAt0y+Ct;NH2TN37Tf+@l7IVjL4_Qg{mp>9AAA0PvYM>ijLtf zB&SXLw=V$QD99;k=4f{|C8*Nu(%F9Pkt6St+jJEA=r#X5!_~<>9KSn&Ub2ps0Nu36 ztV=zAMui7%m=zPZq^nghGPH?H6M(mRm+s)}dpgcgAAOjil0=fx_}cYX&P=HLRM>to zAduS*jYWqHh_!h%`P_U?y|PWZu+vl`6-;i}&vp75qv&-$ytz+YFou@dbjqjU5Zv0F z9d18b-oZ0SNjsb+!`Y?4SG(o+TUp>OQ1@qUfjsy2DG4B%f3AMIxqp2~mHRJ6%K2h| zy3p9mn&#Gne?I&byZx`&spczpoaAxeto+PyKxNY%d)Wkj)8Z+cg(F#HjA z^RX=?DQf$RVe_SSHm&zX7no%;9df}iAx{cUxUbLmCiPZB{Ve@lRE{EUBR;p3z{+7NrxqCaA%@4rym zbCAR!OOEcpI2K?^nmis%Fkh4ZKnIvXI!Yv!Df({%d>N+%SUKWlj>gt+b zoa@H704u$u)x@j4dbE0o+@79G@QP zrRW@(SGY7P$l5Zx+!5!tuWdmuvmR30W;vd?pj>}kol$vK(V0pFWQE74vBs|}bDzy} zC=fnfSRV>*3sLol(*bFSF3Oknme0rvJuxS^~fK$f*P zLACxO_+;tkJAE(2ybI3v--Gj3G6XWPOP=F3;bR<~p7>3X_;}siU5e!QpBiY6{^CgsD`C(A*W|7=Ow&hd1ry5jc&jG!tx+;5Ye?7(<1NCnk zYJVXJ@dzKO!<1MFz?#!w;#p^ePS=%+q=ge+s%N}*aKrr^MjzDTECSbYBA=4txI$za+dauJ4kfSm5EbHI69W6`(O6wqx=gm zyV(BV%0H!bL|!1`Vn|2RlAwAiFG?feW%-iNpH-UQbe^zwY5MZW9y^M&OT|Bfm~~B# zLpGav!49%@Dk&0sTck$?vThzqaKY7Kbg{o`vI9Rl6-|J9O9WpHg ze$QJQ;J5^?znH^u*81ZTu~2Yaq3@{;J8Bq7aGFr(b??cI=Xz;S4+@!O^D_f0p1f8Z zjjp(Oa67NuGAF{Q@uQM- z1QGufEPkvW+%W1mU6+Sye8K*5trZ0tG;VVMOP>U41Q)VbKgP_~;Qo+`5y&0R!3%>g>A;@HTbIbAziWmx=37gu z2sMrGA_gH4vwJw=?tPm*XX8u>*6*>!ady_ij&37pX|ONei0Q48iQ$+$|2g%{)|?LP z|94?1BBVIif$kP-tc^TRC0EI z3YvWis?K$B3S#ABf2o-wSU|A+pyBJGE_t%_QaCONG z$blx^w+r;+*-LvGJ!WyV#DIP3{1Q0F8d+pD)(kZ4uK|T9DOw>uT}+Jb@avKG?u)fo zlgcxO^?4v5hi(KSMP+DVk@H`p#yh+8xb>Ij%g3ql)1#Z$ba_6rnA9s}evfTWZsl0+ z2_^%A=ud;R+Ya0Qu3M*ZcQOpG%m^)F*w$}zG_&ZUw8qy&q@xP6^Dko&wLR-4f)pId zkZiX@J;O(-c7NsaC3R8*j&+N8N2axF>tFFh`XihyMl^RyDxeqHg${?VXx@oY-hkg5 zl=Qt*Upp3EqBGe*i|c9#2X z{Pvg88Kyq6qFhQ7oq$d%{83N~D?d$>xfp0ujKF+OOUpzD7kN)9dXu?FtWED;hAY3^ z!`r#k^wIvAn$W*#%re0Y{oJDq+v`0LZC%sgXq$U|6yjUccI7H67x{cebD3-U$anI= zI7f}l*aR8JLu<6!u(*qnlLF5=o=Hs{b(^LE+6il{NPK$9f&&d79;Bmslc&5$R@t2G zykq9}Va-6UU)$ruC;hcIi*#~wZjBcPG`%EjQAo#!4N;ud_;}opz=~*0MHlCC($+ID zTTRH<_3z6xMO@^{=X?BN$hM7Gf*K9oB8h2N%lI%3F}5{RyMzbl=1;AKec?nqw^$B0 zK4;E^mhLY&wP|Y3N9&s6kqry{U3Heny4(!qu`ajenVn;v2T3I7v^XuLXw(bNW@e|%dX6Kll+_~!oYmQbruVfk#2n-g0LA1Ii~0!d0TE-S=E zLkl+?4HZ;WEc1UCl3;$GLx5u%i^TzbN=x_{FDLz z8P?Dpo;Cm5X%lX9P^UQpPA07|ipw!q zQlDr$9Oyio;ITom*F!m8g9Fdr6aUL_VgC-*Dk`=a$-IUa*aQ zqx@M2RH^oG1Y@HQobqfR04RXntFv}IJC#oPpwrvUTB7$8I=fQu|h*69kihy&ySqo)fHo)NSB6R=9_a!hf(xu%zLixis?qPo6C(B!SpqRP?L*P^l*F6Xcv(bEf&;%RXNUu18vm3!2?E}AxC|EFw^E(eTq+$-n zHf<(qs(;mqz~+|2Mnwvj6Dnpzca%J0yD$WsW_V-e1~4N=7{=e%_+nZphg6k27^pNC zs|R+hpaK$LaCW_U@e{pn{Sf>Y-0bKfkE3PPrE0C8D;RS8#QG#fOFel~{Zic}Lmvkx zTlxOg7BrIvXwC&V=ldDyFG6A~W_!a0i)CI9*I@A7`9?(n4ku1v8aV*gru}>r$DL}P ziM3-^SwprQp;P+%-3_Fe4q!3hOpjmz)RS52T)<-RBL$jgbv*f3S=|3CJ_6d}1g<;< zND|oVe*kD{2j)5n=QP%S-a7pj*V!2m5C919#{(u>-*`gF z+kpds?dA8oH;(bjavusPGzqD*i9Em4r#OB9&I%+{yN=4@w@U;>v3m>ALv#D_kD@2e zI1=XX66It=J?`D*Ym^mPkC}y{rg$mW}(1W8|9g4Jua`V z;$y@SVYIh?SOJe{xA5|sSofTDRm7nHUfambOzRpSBZ7F4X~GhDTOxGo*KLW_iE1+h zj6$|8z{~4b=MPQ5@*p1UPhH;GS(P}2DgWCS;4TuACG-;Klw7jcniR+H4=@;2d;&Dl z3;A0^e<*BKIYgX+A#ba{iPF8UrI!b9jC?Ws7+C3yGy9hC@ejGE$l{yJi;J^$cM`Og#T$>i<`R zci>z9?_N^}WH^2w0_pox`4t5fmseLAfezPMnwu{z^~Pn!mA=#k1pMsQgSotTp+#c1 zmD7uh7<|?nD&YXrcR)+)xc#3DuOB6g`yTJ^?qkJ9Q-vdh+~%dHE{`!4jnSBLTB5)5_ufTV)EBWnen--!s4qqN{(g+II(}ZPZ?a#{r z&YQc`frKdq!x>`U>cGfOahAuz}^V+x)ZJO@9hO_ zg{(I}Zk;}XKrr|~*ZdyR2K@6E;Bh!O{{u^Amy9e??Q&MK>~hb{hQTExnG90l-ZP*8 zk9!($%`0Uy5U+_jb=ezw;xar0T7ef*FNSJq?I+Vs1epb{GS zok8jQgVar11wjX92RA$&jpgHgmDLB&Ra`QJT5KWp!|ar4TMHZOxn!$LD{M8opCe;y zR*uh`_xtq`RMZQy%hfw)h9%U~tpf$u=2gq^b9d84)~2qbeG4|~_QQ3cqEtb5e~e^( zZI`G__#b9(Gu=otr+JOp%2t;cY{E)=bl{yIM~l_qBYYN}(O45Gh{@7KHbAq=U{^sG z?7LnVwcryw<>|zRVu#)`Jgg}));HrVjX`^c^;lOIe$XzWp9p^hHy&emRLZyjlkU*^ zvgwj`>AUCt^OF&Rf`AWgJgPRJv$irmDqz*=9h=wDx{{*(=Mnq?S5>Ho-8jL*}ztc7^d# zdsY~udA?VJ_}PexuYv4LX_)%Lo5);P6DFu4O(3b>`%eVCq59+Z;;GZq+U1Nlv~YKi z>rxqRS+Ja;a>d^av~&>Q7u|T)Tm4ivrmcQun;;D~Mv(6I&;+ot6q@HtW{-X5L-m{> z-@g61bRx;0O=E5^vQUGwGx<>qO8$pry6NgVhcPW zjH^o$HB8Lv;`2vZq6#DISVcN#CI^(RfT-0ZJA<}uD$DK2UNHsaXl=jB!BbXz_$(J@ zq8j(^gW-opwyvep>6)fGWqJ#7?M8t?wqM_x8)p(TpK_*_N^XHe3rI=Ik#&bU(Af{I zSKr?KX8JwwRWQ9)#_WyCPdyNN*PTxQMF6&BSnJ8c?L|U3B*nG)5|ivvqSkuxCmqDB zuRMs8_-9QtM4jBXXQ~Q3{pu8*P*k%4 zqIRr?O0`l*2eR{HbQ{a7*3t$FAM~lb)U_w9^kGs%%kPwYQRgLj=^L3i@uz;Eg4KYA zvscC9J4m=Gg42k}+4#UPD)qD+e#6sGzjnyNREHgV{i5_G2}O`RvVj4no#M-_0s=mv6_X z)+;WS?obi%Ia0uwy5CFkH5;5XbbQW0STu2)cr?oYj^c-xGCA$V>+GPIn|wqJO*=p^ z4xc@sfuCI0rY-EA;nreh`>AvMNy56#!4&o}UR~*)%qSVaKo;&qB45HV6*m3h)f4J$KEfQ#vP93Ld^Zix`82-Ocqt+K zEQGBr2?WyK_NO%eH<~3RZUh9$lE(u_O0PjfWbNVivoVPoUIFzX%LjW~_| z!nub*YX?Z~33OSx0zh42vGc4GWUZAKx7B{N{>RFcMou-NkIn#UxeV_ZMons{oQ&8}YoAw!)^|{lNKJ$aGn6`KzUyxW3qzPU@O~i)C-Ro491h)*uRi4@j==R?q z^e!Y0V-{c^(x`>B<^_v&rM5}G8zCw)BQ)5UjWfSRd~k0-SlWvLWrx0}=-Umj4ON@Z z-8{y&D_rOcLHP{AZ_Mab-Mp{z7d4i;9YR*oGF=x!J~ob0(aN@H!`6Vx;rM2s{@jQE zpqD4bKX1+X9MsuQX`?`IHM_l^z3R@aD0L!j{&G0-N2qO02O2OP`0cT0G8{4+hy<2R5a%>` zFzC*YcuQn@$`Q=QsRH6~0%b?gE`Qq3<54qcLWXa{)mwDvCC=Y1oC%`ITav>DeCea#Sx zal2VrII4e+e4_tZ%XX@%-u6(oN*w&&&4j42KOxmmXN;JT-ROG5H_G2jCDurE z3Jd)7Ey}*-^6ZaGn3qqyZwzn>d+*7{e@KemD1NP$Cr74#)V%9Xx0J6w~|8hJM6mCbeSWC(H7XRDdah&Fk3I|7#N59L4q5sAjy z7TnjIF&EU}v637G*)aSN>3_R`hSL zZCzhsHjH;l8zJ%tjN}&a-^7OfRyZrR+|ZByFErFR3{QCmrbqqXdhhmzK(5B7rt~K# z)AS@JFAp4S6xHLu(muzeT4k=F6|nM~^T~ejAW)uKGT;^0-)yn9n*%k)55L!bojoO$ zgZtpcqH3LlJue%9mNY2`RhdSFulom$(o)#v7=>9 z|Gi&di6yUOO0e&$mKVwB+XfKl9l(rH!uZ}a1e{5y;N6IrEd07i$~TwzcD@0xAge<} z*!|lVfPJGgUCx6CbJ85}2Vot{uCTiLo6UopqLSr2BuD*1_pC(KlJT|bj2q|GY>;vV zurudEWxFLr$-X;&#SQV_=-_b8=w`{=&YmadggV;rkr{yy|~_t6erw(c{5S$a|cCV?yf z1xYZux93a);4RI^uRF)#=L0>e>0a*r#46*@{N8?3sl%Y8tFx5Ci?ROE=z}ZWbHz%yb7sYGM=7CBjck2LSk?5 zM|8FmmTtN93s07v9QL7UT&O&r{TdYwN*TvoyzuI^bk8Ip^y(-^ zbz(q;jA1#c&vMHZzXSQ{E-epwF3#^eN!8jWknTbI_ANV4>S2dVb>?Fv=GZm~nQjrmy{>0)9&b^y(tu7tPHcs! z_ao5+d9&M8ro6TG`|bM(fdO;zx1ZG$3sVinYt{v7%L?mq0p3C~35BhI0zxb!Dy)>s z*FwYI)2G~D)!PHsL!Ovi<1E#v)~hRFoAMX@gS^ndsV9^wL90cC%8q5zhqHA zG`kQgY5A3(p}ZGrP)uc7TWgOL7iH~f4!aBDP>yohX0O;t;4ljz?%fY;YXR51l_txq zVghk!if2QQRWf+WzzYkJd?iIj0>6?0Fke&vE!3@Hc>on_7~ih2r`|H}gvIz4;FGd}E{wb*zfv zYH*o(Q65a=E_2e~JV{FB9LvGs!DWFSb_GSQiIXeG&4yVm@Ygj^1W}JES+9L;`h}-G zdYGQI`b|2|00tJ&USXfrm;5cBs8F=UHi+M*_jX=hq5D*HjjRP@kX%^EJKL=I4}%Rl zDMrnea_RykMevVuNAqeqHH+^R!M?Q`WHit6IW{+JJef9eDXEN1A4PHbY*pM@sL}S) zr3ZbNf9N`PwKL|>QkL;^&~p9Hds2|zBl`+ev%i&Y*%zZzLHXw6n(ZmYlS5Xy=M|Y0 zhNm4e%nUlpXVI{RE2k*AtU7w`Nv`JnmtsmII`K|ub)&^c%JN_Mn^O@8NmsC|&H+<2ga;=nk$s@@zO}9aL{L z3BSV|+?^aBTo&ez%^T{0uzB+Nj_f{+^sv zM_9SU2=n-jG!1NPZ=%Ic5jIlFO1%^CisDU&3`E&14qaeh&@e-ky5f(Zrm%GvNEkgT zC7XhtQ)*bJ@)Yb%pOY~xf1Wm*%>yP5CGd^Jiht8bR2+kZ^2UUqh-~A1ZK-M8IxNa} z4Pu3Dx=QnLiI8Pfz8siq^DJm;igsf;M9wANAXX-`ma_%JK;XmGX^Ee*iC zIo6H=sMdsfuV^*zWDJ@}AY`Ye^9a*xMvK|JRa}TOgjqCQ1(@}}du(Uy=O!0thc5LQa}Vq+H86u`*~7xVYp&#hw`tg$)?uBO2to7)l$bDn-5TZ`0G zGcxi99C-(oOUu`x;z#VOnyH7y;5y}p+*FeZc1P78q{v8^(q61?BYQI`NKrp`N~Pa{F_4G+!k{X?)+9Y2#{Nc<7f}?;;uVBFOYF6R5#ikd-aJZ zy%6=$kC%+v4pP)`*ciVi8?hF013A?dvf%^3t!>VdbwfcUguNphrufpb2|mQ#fO`=J zXGKG1z}Hf%mrE4I6%)E;c#mRgx__}N@U&2QVxXi+4B%0NEd_lt)7ra=-E)8BNYgXO z$!zWIT$_DFs0GqM@Ak<}BQsU%8A7gySX-SR6qf(wb`X)jEGV&1pqFR!wmypG9d_p~ zJV#cOeU)oCi4?~;I$66}74D zDbIa-?mXN%xrx=|T4)Vi+)D5}d0qeWTgo?*S$-qcLwqOOZzRtsIqvmEQ||bSiv`s@ z6fC`ZD67LnaoDlkp50M^EItqt2beDiT7L7dUq>Pu_LM~}ERrH)VdI~9iljJkEjk@h z>)+XkeLk!m%Fbs_OugaJ?Tmr~Hb(ye_L$gAn}phzPKkH(MP z4lCXC>9!L1#isNqi*I$`(WWi}v9^QNMNa@@c{eFPv8~QauhdqQ(J0Yp`Z`iozTDFoCN(G);*C5;^nh3Dc|cTYCaDEjajN|^Q2niyEl}83zWa&ar>OS zGs>A}78joerukBou4Bw2eg$>EvHeqCHxa^w?egvN zNy9{YMZMFx@Il`Q%#=Rbv&2qE)kzus(k+xo|1gO^^B{71)Q$`$(?_e7MUges*rHC) z0J`iC51Eyjht=ebBIZr=Zu$ro3JBGQGmLFWz6sEk<9*w?8wx4kV9K+jy6f zIu?-E)xs|4V9~^AVPbkr7ZE%?3!MBljvcSbcdjJ1E|6`rVMVa^z66`<(D5VB(ktay zbv9^dX>~!NUXFRy$%7$1Aqq7_AJPvLT|D_w#6)InGYf^QBotaZKKi;YMrT;feA-NLU$GTuj*2ZO zhvS6%mhzAsXM=pyj#2lO1%PG9g91EtRDnPz6%dWa(fjx?`kR<1h7t?!m9W&8?0e8- zM7Sr`O#b-ja1Qtfxc(bCzKzOkbJG7i$8P`sc1dK&$hi{udWwZ+Je?E%4N^U-SjsTrV5`xOmhAciIZR+rxksFPd?g zz%)mkn_7+p&p$?< z^aW^*mUI(DXkd(}gbTf8V}nUS0ll@^p_7S?vxO2~}jO{JV%VZHc>Pm}ga zhIy5Kth~H_^J?QtD}!UF)X_M0Y5VMzC?SlxxYUtKlR;K;w~PMlbx~ESa_qj+D(WhW z3NA#~OTjd#7EI`qaWAt=wK*LiddQk5;s{aG4n^p;3B<#K4S@b=@ESwA)M2 zJEKvqN*#ul(t*y@rO?v-V@Qho1BOTVIzz0(^9V!4<)?Wtr^?r~%1q7G`SYvgdh|wN zLL8m&W5vV|X5-NnkVf;dC*)T@R%4g;hq}*Dx?qZsclxAMwL3)?54z}CvtqZlB+DFFarAGYavuHv#oHEh7X7qrS=+t_tA0`OnL&7;%p;t9v=j+9$z5?W5i!M)wZ zXWfHYQ3p}`*ENQ4o3*U8MlL!7YL=<%xSH;tUs`&sxPCFPw@VrAn z*yy6Oh3AKvzsLG;XSE9T@_o?Q8?Jb!r80cGmV^s+i&>6ORbn@-VhXI;veL!KiAyGz z+7cFNg4ZEu^|wEQ``(29K-2xik$M780UD8_+R#nsBU*(1x!gDWKDbH6LSH{X7xnx}n~+(#N*G(D8eV?G{*dvNyIn%fjpD-Sy1LgJ*>IaG zBh*c)^s9ZSwOOEG&R!u+H{GacLc-2E3EmLttQn1HeA9gB@rEJd@JVKb?;9@4 zB(}j+5l-1KK|m#nG=y3Ri!&(2yo|lW5TYo zP%(Mnt{bphc0GWkCg+(oLS0WENMgS5M)p(hEqN=QENbCY9j2t=UU`>;Q7KTKVx59j zV!|>mYsMCmd1Y!8N^$fokM8m9kte_Eyt)uwR;$j)ICr`DCmrkL`bm_C-v^9SPP(4> z(fv!puln%f@5;H;I(niVBGMT>Xw`;@=O-X23p!-E$M1D&v4fz$QJyrod_5p5StPBb z^`Q64+EUKmbFFK#>=h~z(A%fPC$ktd)>sX^7l&tK1;#=k7mXp@i>MZ8{pKDwX=|DDu5&PK69!HE7sFTa>) z){6JIx5nqw)|P~M(#m8mX|jy5-1r&UubRbgXbN&D{R`qEO4H%Q01l9SsTuBjp6u#* zF2ucNllC*B#aAQk)WpY<&h9sDMSOp~jz7{bE@!qyYzI!)7ww-c^GAC#_kv3vEXQWl zxLZ#DU3+YB&ACog*yPGA_EK1n8tSy!5+0Y`t|u#p?``PFg=Im_0?h4Gq9$L6^5*-~ zjsXkFDj^ZJzvN<)*X;up@8ErF6OfVnBPggO8ZS&W2M6>BBaEEjRvt?A7CeFR(T1BnVd9fO; z@`>DRbZ$1XepQVuGlPP%fP)9>wLFuADjHt6t#_~hn1tU5U_RXT}j?1G&~} zu`(0-O%Yh~jx11rW0yUM9WwE zd*&Pz`}S?AMux+MelCqduMeAyZUeN{_2%Q`LKlhu!;R zz3C-P53@Vop@`vaZIT}`@SXZDPmE`!?_DAmAM2;%-f?MtBwH9JN(HtT_xi55{1e%H z2YI-(m2U3gB_rcqVCGU7ODqi0l{~wwsktH8xP~yxpl_rz%=q7qSjf1#s-Kgow}RhQ zP{1$N3zX{bz=d1xKu^jxSF9M>{jX;>{m^M|ZMoEpH@eM}$38|L8Yn zwr2&AFlcJq*xD0%j9Lzht!XEz-YF`GgI<0fl~0V6)3J=?oE=v`N<&mXahPP3l3zpg zmGTT>0<2{|gEKAyH2e$b07#1CJe+D$^$QQDk=|@c8rAEHY`V&?uIoAS757>4% z|2OHs*jxWwi|0R>`v-B6mbY-;08rsNKsOO&ZuBwx=j`mw>DL^MA{8wE8t3nA2)03* z-Q=#*ECC)tiqPP?`;qWD+vW#>edtdjPMp(*CQE*FRd9&?>E6I&ei#tr zj^6Jfx%@hpt$KN6j0X9NL0Y!dxY^Y&5wsP)UZ0)>0Xb?VAIIkvIiFs>pNIRi_P=;L zrAl)nS;_B(OE*INxPIhPgeZ0)yeif5-Bd|ao z+>UPFfWg&vF9HW?BTcgU`VDhQ*&HvF_Yz$%CK_XZM$78@QAfIDMH3QZyX=R13rhk2 zW7-M#*8#?Vd1|!@xvbs$n)U5=zOv-Saw_E1&plr&WnoRnEov@Xc$IU<-nX*ZVXGRb zo0-QiVt)4iinde_iRAYth~8c5an-S;*DaUL_-44>?*aF-J5VhvqEsYm6}kx-ucZsw zrJlIlilZVd73azS9k%ZZPbLzcwSV}ng>aM)Q!;bbHx%Um2CRAwzvA*`LnkMl`Ny>U8Qpss&ZPHldBu~&dA#ABKVDX*>B87%}K@S&RS+$m;Di?XfL{Z+* zbtZ$yD(H%r)PS897B!QKzhgx&8a!{)ZO6Z*WNrlV%8+j6hSKVVqWOXTaz>g-H zyO|qGBMkR0WA+zX4OPT~Jaw{BbuZRGUFI)=x^DL0GGmh?aI(F5@8Qt8F`!Qe`t`>g zgy65cld`-#yGna#eqUeu*6*-NPA-r#-DD73lZ?wccO#|;-51{-g>qJ2-$)pr9tX7S z$6+vGZjxjbqF_rKM}-;K{?20((<)0eZx@7o8;2+@<)Tp#ZO!Ssy~6|lmU%UrYnxOP zdM~U0>P?+j<>`$g#8sySjHI*REG+V0$;rJ6QeP_K9d$P=KHDC!3gGbXBExteb{Px! z26NF@`b~&7V)-wD4M2Etm;I+y7P+z@fJ1$I&z0kl!{>t&?_(jC3*itycNsaWljxe+ z2)kEe^Erc=WXL-=y8C4(A|ci&1NxLlI&WFlJ3l{+vlgC8dc|dlg1ORu$Sx#mX;-T& zv)M}d-NL&#(gOSK0Qb8%32P$^sBKzsW9}n;m$*dVm&Wc8XRi}`oBn7Ar`Mc6g2AFC z<01m@dVn)>|DzR{_DT>t-nqrKl^0wA?fh(2U5CBc1>^=4L*1)%%XtE%ph zvXI68aXFB^_2gg{~zPlJ9(Uj80@3ff7+_&E7lnmlf?gTnH{%+E~c z2_?i+mEYa3&-(hezc!>FErRkQwwlTe#SF*;5(6fn5VxQUd{V%qyDHAw-^Q2+2Z9lu2Y;5?af|YH{LnsI^N1t->adt-?NZ?SMGJ#NyzrVI`__oF9?jUy759$ zwUEP=n+(3i_d`)d?dJpIp5_ROnzp?!!xz?$OP}|KGTk(2Aa0$60nPKiAu}xnk#-mT zq5YERDigWd^UlwI5{${&r8c%Cc-GWt$=Sha1PcmxL&N$#Xr`+@(7b2H{!9n7Szc3V zneV>$KK+UH>jidWJqlKk{#&3$u8kvwZj-1gCBKaw$+UueDztdpI34;u5JD{WEGCS^ zHU85s{(j9=Lz`5rolls-RVtEiV%p>S5_v}wrRVY1`$gB4zoSq2{%Z^ir=3<1?$hJ< zMi^<^jhu-7>+x`eF?uY-@jlsvX46nsWl=C+Kvl z9QJ-^<9zp~qWE%oAe_c1cZPq=t=RoQm68FM^07|)RUD;<&qqXO8EMOK z3HOWloIVw#!R!Ej^V^pdbzIYbql>CkO3H8uYr7|U+cfd2_;6gSOL5hMhN)65DB)g8 z%#D(~NW*nq>DB{ItJ3GPp|+maxj#YJo?548ne*Y{v=`Nu6}9jEwW_`LTn{?AaT=X@ zuw(4XfL^N=h1weqwSou>dRQqszvTJ!?960+i#kmsP82uC1GvV>D|o53HlDMPC`*~` zxdntkl;R%Jh#4|EB z$EZgc==V)0yL)-G+Sdc3wEYjcW+=(cQ_1*-M*XrE;A8&2i!+$P3X!SD9y64lXK41Uyz$g0f`#*R7asU>?lL(DiLVno4|MDM2 zUZ!QRwmBfY|0*l;Kg=XRef@L&H%6HNFE;l2?=~f`ZwC_MeaqLawOqF>xxBo*i(`QJ z{TrJ|D9)%QUBd?Dp9JCPZ1}(waq3L}Wr5Kw*UbNC&X@)+PNSH@orRsNn}6kswP_PP z+$IXNX;IlG!g1KcT7N%!rhWR@rQB8`(?vjiG|R+4)`yFLsxSftgS!F7B3pvP1KC;r z8zUt^V&lTbUyfUil;e4Zx3h%-Z8DJJzgZ!hxA*It7>}z0&JV5k`(Nh2KWz(WaJ6yS zUy|oGtW(5+CfJQ~-1_?}Jo0vX*MRDoo-}0P*OS@k+l>tI-EVEw<3lYbk9e$;a18Wy zW`TxG0HGA-XNpV*UT7eL(-=BZDIXS=up*;`2Xx&I!!iZJp_IXz^BE_JcNtZA=%4-I zFO2p*Inbb_a0$Uah;i643CEfYFf*hr*WK}D?>T2M^+yc-{=)jUZg`E-3u3_bMeaY+Q8Ud;Omc+e}4})Lolp5wjkTa5RQP^3B{z zx3;#eFSFhM5BAy|BAM9^md;bUjI^ck{vdWxe&N;?C$9<2!gb_Iy z&{rZ7!0a@7$J6O$%dKQJE6z6@MGoQnoIRRni0m&L2K}Vqi_>&S8yo0)OCofrCxcI8~XjMektcAjfJs%0se z0X9oQ5HF*PTzvV<5;~^%1E16xAEOHt&Lse_nw0T%Tc{T4-ZrZLyVhJ!Iik;4X;6Fb zja)3(BR36|flw6x7M+N=y1nA7ulul3u1Gn%_jMY!_H~`~Oc{A4{GbXAeQK{GKqvcR zpprmG9{b~skbH38!D&v*$Cl$0uM9uYC&%hK;ki+mnGWh#^o^ndaw9@OZ0^hpbYW6L zw}jxW!(P;Ygi#NF0X91I?k{B3@4Vk!PCoVr8T*@i?lNEcyN&Sg6wSlb_NVmhkbKiM z8av!9v4nKYD(89%tnvLwm9>RtEU%*b_N?an@`?$8I{kOOg@9s6_1!oXQ9rxF>hHxU zM7BT4whp#C&N=e7(ZXr_t6+jv$WgrH(R&-OcV{DMbHx%4YA<6eU|i?HT>AJKE#0Szx-JiK!US@k>0FB37hr^*z+CL1DmyVpK`8s12wFsTrR=tm= zkrPD?UXc;-W6hR_Ic`qFT1`f)?@)?>fYyGSTE;5x(3;~WLjXQ(Vt=u2-adCvU^C62 zDm7vp?urD67@VCtx=kXCAY#7kMt>JJ?uWYt9A@w$+odjF?>ffua zYI+R?QoNjfp2g+8B&X5F0F#not#l@&x{A?G8oaJq> zm4~H%*m_~94{d zJnFoAX%jmx67ltCao5#J4#x2gN#s_-kCPR#Uf(pDL>~9Oq71NugKccbXhUg%%+=qy zr9A#mxOKgHK3^{9)$Gcj+B(+M+IG;KV7ik^=VAH#Ykvdheu8$?$P4*I2}y1dh)ef$ z+dTxe+4dKqz9sgdAAjT@{amG&)`};+tK8m<^SE(E=d=hdWK`C(d)Q?-IHdUdvCSZ| zw~iS2t9`plb(xpu{e|=@)Z<=-Dg}a&-|>@;$nw?(E7yuPKJDPa6oXy&mk9%Yt^h3v zmlPD)+REAB<{PAr5a8NxIjf=#k-+2A#LYg~g25`;FDXPoS}_LH7u^-?GG}*N&59C{ zOsoZo^|N{n8=bk4jRCJe*ct-mlBdSDKQPv{H+=eT!*OIYJ$neSfIeLKR>x8Q4z+sG zhhbsUyy}iFOn5x6p=!&vNDs04tNnX0>hU|&%+kQ0e^!7%`Z|Te>z5ybdr}&oaQ7^u zC2(sXjcpd?;B+9V3CQ&G0_cY0!50}6kR4mhbxFZG!TihZG1YR&JXgoo{kg+;3$9l# z0rARHA;67GqRD9icAI)dq6Q+eKZn8Q& z{yZ{TFQu~gyuixl6#OndAqm-Kk|2)3%eancenDO0eq^fGw z25!q>4O8V~GNI_vHG={l=X&(g_mQP0Gy0+x_4nSGTDX+l1(i_C0-~OvAJGR851qGT z=~(#h(yX?V!S5j{T{!2C?`9hj@x2q{*i^bIgL_7mubM3&2&*u9VFC z*}wd?*IlY#UB7Rh!Inn2Z{#=nf zId0-z5(@u(9yE6XRMTVsQgUu1!d}h*McnB~ov}#w@EFX#{2&DeutN(JCOV{vn-R3~ zxnN-v`8MM48?C#_`?Eu9l0#V-O+UdllN5^*+$o|Ul2FGGe? z%!f0l^$(i%Q+{VG?BsR~t$|m3*b(ov)}3h!Z+Td{g!A276=i>`#-~N2AwqLm)o*~s zqaFOVHG3G!y83JCGW+0Hze1+Q@%PNiLac_~c1anyP8J=+FRwLORpoSCjw{dLu$dSf z6_h_zz(IFIM>W2o%vToID6mhNTi;tWJJ-6jvFkl{GyD|AGdR>^cn_F4oDfHjeW&L_ zU8k#?{e}{8y_%TZ=%Ni~42#@rj^Io&)2=KFo3k$0P)T< z4)C#9@-C%Tw?Cd)yPBwz+ovClJKk%mt=qJ#i-!X&j25c|sZn!}>IwH>h}>5Wbd9Gp zsmc!JGu&Hp+#yeXZ#-b1i{}YfNDy>tM5cUcj6((X+}uic_)($Z@E|xJo~6v3N|%1! z*Rmd%UZ0V59{7R*W>j9=hBKGgC$*8T#~)wAaELsh;ti@$!*4DarHfOy?p0#rPugr(m>3@npxB{qsB*xjFZb1?to&t@-?i};GfDW~luPxKk zGe9%(XS+^RqTj`w%Zj?&%2(fdN#k1kxW}rzOW8Xyxeqrw>wa~crS2X2@U0g;q^g%R zS+j^Sh#U}HmP(-V>>4c#IIvVg_Xa-@pc0G+ZB{~OZhCx$_)X&msvExBs69~F=!+d0 zw@QnWFnT;AX&7%FKlp3ZPh^}w1{3Xe`1YnzHMgi>V5iSa5zMI= z37x14SE)Hz(BKx#aaZW8h%H1GgCG+^oT3Y+g(yb^e@KL`N+tpg9FM3=G@5_D;(#31OdoO0<`$OQ(O|x`FngL<% zAtObg(!+U*r_6&;oQjog&~QqUg`n`nlgx%44W@&l_T=~en{W50JU#`WR%6qptmLEX zFX`$(G~N6T5W0OA?!ywHD9wQ5*yhp63GUbH>q`}O5&e(-O*~?U0qH%ny(X}U&r>Jm zY#seCT*9)>ax;eZ<_2l>Iuf4hyP5mR^XX1m!n$mO+Cd=8dn@$=`n+|(!c3LyEdrR9~qSW zWSXrR_Hz(=Fh=1YFYru&op0>%47b;KQBIp=BQM@h>9zfPlfvoiw$igXz4xOym=rJD zH5l{e^c1JqU#=L`d)n-|o_KYQVWTq#sK zo&`N&%h2g+A3MY}7XLM;N9@6;1p+liGdsCDL8bd-ysy*s>)(j4UBGe;HtvOd;)Ja2 z?!EiXqo_Z*H1S^_sdf=(HVIV&8S~CcWsmgfNk1K(954rld|_x`3qVNgT+eM=P0ZbA zJ^ga(_CYW=?+rj#m~g}_*XY~w&>(xLb?W4HZGrdB+9(Sn;ea;ANu9E`y}cmkLs~TQ zr4#93SWOuD;x#`s!55bJ>8$G+wN%v|i3lTblW|-MwSwG=Yj;Yut;b8SW=&3k>*Q*- zmC=*JyYKLUNrPLL08Z>5z2(@HfR`^!-u&pZ1#&+aX{p|r*XqhN^|*rUX_3fB|5!W*D0lV<$qhgnmZ~oz>Cc9djmT#Z_xtPyIs&F>%lSVPt{l*a(xKE9WfFk!LGKbBuiSPco@Des^&yQ$@bW(K&lFO#oiDR?LX9-ykq^Cwp24F$66 zpwzT)4D9b8niY+YWKH~Jf2l}(Z!pXk;r8kKV4(wC_h$XGmb!fjRMq&=<4I%T6~=zG zdLN~d{qI$36ir2LL)AtW)0&+ZbBlc(w-{p@i>%&Uje1wEwqkI6kS@gcfUF$Z9rpC1 z#VTYp4gF01Vo|z4q;2oh2MX5|`beJMX7Jlq5#PoNvvcwB>w?zX3ZvO)+4Gf}H!7ZL z?)0i@8BT0|lk!6qzTxdJFZ6QK+5d({k8gD!sk4**I26E=NK*VUplx4taEB zc!3~vXO=2LSfqv{S;LW=pO33_V?T*4E<5)a_QjBErmTLN>)}m%;icjpEs!VawrWKR z&s%McEo6wMfUu(MVM0Q&Up-Wd?xg^gLnkzy{f;e(Mxidnl}@qdK+#3EUVZxGVdVCq z1be9KE5rAFIdz*#Ur;u)yfCQYg3s3kzt(W0-w{VYF9mz@Qx#qDHI+mAJR5=R}i>dH%a#={VKv-o~Vy5-W^HJ8nQ-b#= zW{I!Vd?IjzOuzViHugk3C%w3Mhq7<8TRI^0_P1dXPx5THF2(O^A*k8EC~JPYsoDqC z%HWyP*5#DvQBkJ4#oRkfnx2I1=UoDNXW*&!BAK^)h1#Pw20-hi0eL0^DJiYW?x;~d zS$;nkM2dDn)!AOYuy9%??>`nzyNFN0zJ7n9gaCgbae?uD0!miHC z015Q-bt8v>hMNdGASWtKUeL+M{~R9zKoo#YW4iAZtoXTtAX%53-x1a8X50DuhCz&E zmq0NKmw~7$7+oSky_@ znRAW<_97U{i`Lf5^qR6pse{Y?dR30^No{zI++jNc=t$1vWJtAnpm`az4svZ63Rt31 zN*=p0X@e+OY5}VNsSZ#Yva)v#L(pa#^cLHz&+!PFIP!05bjkYO^OjF%Ny~o}qC8M{ zJrw%UII0s`X?RU`Y%Yxq@4D2wI*^-gMrIMGiOfE2>Wt6fj8Fy-RDmi81rW! ztpVLx+$_cqay%^>j*)ER^z$=-&-pA*%B!T`*0M;r?Tm8BM$dmO3%N}ynJO#5(v~N& zSin5MDUp`I%V&{M8akQnC4NbQ^H|W=S69F2Bx&3~lGM>gE~+iXjGxAozP+4cu9I#q zyxwjh$XUwwq(6*dRx!*$AExcABZ9cdbw;a8im2ixN=<)+C-9=W8a!|WK*-qHQo}cL!w2gw}pqx4tr<%R_C<~ zNIYR?$+{(1n-Aze6lEgxmuj3%8XpxvXnW8~UhBdg9Ki($sTA(&20+6&*LF7Ki|2~` z0ds_Xo{|(5MVx3r4WVY%yheuqA)3Z#&eOFGA`Edc@Jl{vPjM$my6B!L9fabHbWvw9 zPORgzpU_kp0)EJ}Ie6_#HwJ|3@^Ao22;&d18=o&3fQX;#v21uHlGHnp^u)@uNnm%X z`RFBi{atWBlK6hF#aeIgjqQfD;=(VKwmyjHkMFd~R3lAvsFVYa7`5p6>;!s3>Nwq< zM`8f{1vb>*cU%iTNGY)tQgre1tZkUx6P>-3)@u7axHHv#e54~oBZrQnCeX^eo$c)K z9MNlzW!`b)Y*fHvrU!ISbgyr7-KP^` z%uNm^@!?c6iG2n@JCFU;0LJyduz(sBU^d;~#-gU`LyK(zzTfpI%wNh3d3lXg7`k>tgyKCJuwAY#mCSnmxv3{i{O@=$T z%?(N69z_D5p93%v;EVy?QyUi{2Oe-^rOP(AvPos0c?plN86o6sY*&d-0{K}6C~{JH z+#{bkqdiebv^I?W&g=!=Q&ULRA>dnoy)x+O$h;WXbHe%P?h(yo=;wUO5S6X9{(BBy z?nGeAG%k)NEutpC5$bT#McOmL!L~@JT7w@Kda}QK``beQYL&RTW5+#ppJdXm|6ayk zl8m>6J5QCNX-{>!4+MK!87iH5`dy@N##e%=Pf2(O{VubNgZG*gf8y8RF29e?3kF(} z<^JJT=jQbVR|iHxvCMnRJ8YP3&+5o)5O3!aNTxqYG(24hmdNMy?phjMA7h2!%hDJznQy9k+Cx%FFXKV7T ztR94Yc>Saw=EkfVs$PXP1)n>`c_`j!HeWBHdZyFgWV|pMN=x&cGw2S;kyGx>ibnkd#bNp~!ogS!3_vIB~wfMd{@pa#&%oy3r!4 zZ`O_NwwbJzb)gIDksjsnczm zjU-w@YI5axdX=?8o2NjpOcJA0ki0bqo#)#57~B^yYq<>TJ;BNZ9bmLgRv-9f(l?8RWaF58ut@*PUG9TLKt zb2>>Zrjfmmy@i(g#Z$S#M9*}+^-pbVB?4-_@x}^`Hx!*#juF#WbOiF+8(Q0c`!ECY zL)*ulkLe+FfwW@6lHA4|} zrKY3a&Q7Ih>WvZ};_9YIubnPs=aY}(DZNN<>CzK~0yjV?7haP(veYSp*}(uXerT|@ zby8`TZ%c=wDQEVUbxnt=_18U3xTDxR@-qb6jKcvz&Cl%5$5x~{paKSmg=<&e&hAIp zrJoN}6g;IH3OkCjhIm1 zb>Xg|`vpg$j^@2+E(x3DC6Hv_i@I|Z%|b5$@jR`bQJtpWZw^NTE;L8|(4i4Jr4C`F zI@9;Xm6(AEHv7qTz* z|Nma}8nDt+I9~01s@K~(<(#t&5U46jt2=Vvjsgr@#c(Pi#q!3g>heMa7nF@_8@U~v z?YmZ=oFn3LB@8jFmyKSheCm;Dm~O__0A+3z$M zy&KDL2Oy4%kA}Aa_^PF=7ylCSy1JALd04eteHacEc0fEb_&lEET zJ2|G!sYS^3JL(FnN7;XtO~nUkSNyzX`lAAxS2qxlM;YoLT4!1RG>O{x0d@=nfwhQD ze9n29m{j{`-hDliBVEl~9M}-3=BlT^4HxC=$&O1$t0eO2KmTs9HVCZUbN+zeL2l&? zWJ2}1Y5X7SYjn_a`SMoJH_a!t6RCBMyT#d$M6Dk5m^-7nQM%*YvK)EsJwkURVCXqJ zkttyRs6llrYCo%dM}k{VYS?8Ws}7+D+u6CDB^+V6{wkJkCNer@WM{UIQP%qt@7bA< zQh>*b9xQRP=97cVgOT?9M~!4jt^g~W98O8TiQ?D1E;}<0ir{_+l7}ziaZ@;EscO2fKh%D@5qPKV-X9c;xbiMB&;=Mv(&B$jZm69v$`R(BUgA`8<)A8Xt|d-isZ+|2oEPpD~AJdZpY8!&|~6 zDxpk&)9qUngQ+^*B?;`#+|4KGddxeh zF(aQx*HGt-pl6u?A^o^W_mlvqB~|CXSV4adaJP#xloRf`U@iGayl3t zuhAG~#61(vf?HboICweamgWBBSGtAX3v+WFte&yu5@457+L3v1$+mFp>EXlFxcbyh zg94kr3iJFfBrqS(#?p1tfFI{|Ax~cRwf^j1`K_opJF-F+oObT`>$3uUC9|);X7zMe z1UPsUb*w8e_V89yu-~{T_!aMJA_Kj>y+^uw|Infs@JG_H-^qT!RscR9apyo#KRYS& zC*1-5#g1P#-9bg(WeSlCR%WN2ojrM8lZg(cneI3I5Z08HYQXH{1&ymNUE6aYkY68~F_j2t=h6dP%JOxEnW!T<2H- zykJH0{yUA1XAct3uX360@hT<7=<>F0A#84g`F@Thw6rPXPRcoo8lAt_O%I#VD+tg9 zSfzH|yJJU3I8p)3ui4$_l5U|V42aI329PbLV^mLlGQRw&+0jjfYRCt54OBrw<&PvX z9U(BL>)K~_LyBGMgg@^R@k!19tS(0a1pNLZrwSHRQUVkJ3Kx0?z_5qnO?I;aA*`F5pQs5z}G=OkD`S@>W z$p2je7a)uTpcDX6Ea-Onvek3^P_l%23NOXnFO{CIkeK7BYsWn$Rc+BU=P0y3{+%6P zTjEeDU%`FM*ny-CPKvqR_{;A__}}+OTnnpRd)>ww&3ck9>H(xfRRUo<@IFDPwCioL z@@E$Y&Ie9B&RQ<<%G+!;HGrITbPpQ>ca3HwLlYbi5D9>fVVweb_iJB{j^ZgV@J#?> zF>jRuQ93g{_hKntq#U>t`3C@(14;*cZAndS#OcM?gz?B^f42+P8T)cH+GV>_P49t= zfcj$18bG`M;1cl?0KxA^P&ljaQl)WI%=eOelLP3x84q>3g9F;S9mOe5)LZfa)*E4_hncV7(B1@Z&%Z!5djQ8m?d(+*1|}dMo{97r*gK-}M|y(=lD2Vzo`lKuP@p zW#5ZHX9UAYeXT#aYBkQc2F3I~<1QL4?zzjj0&pk)(1UD0Pup*ly^{nCiV>5?~|S zWjCeh(zDE^OC)s%A&733U9*r2xaVYLXpYD=jPDPL7VbH$8hQ=E60^S7-?Ig~SZ1yT zH`F}u|1(m#Uy{>W_=wp{a?%JNbwMU?*39VbIO|COA}%zoPrZ6Onq@*vj^B1l1D=zTcviJMEe>HX6wPh8EnWNc*pBM6 zBlh^&$&L)$AlrYi010J~_3qrk1{}=0K=%L*4XcJM!8iLlUB9X$5El@epOayf^4=j* zlrxlaY&SiwD>|;X7)=uGia14iw(THH$u{5Ghg-@)!U3fdT&i=KJ|_I6fXb{aVvpA) z$%9u-IOFB~V%XiWj2q0T*>Rs2tknyw^m9A>=pJSK7%R%pAJxB2nNyK-^iA>5d3jv| zuM74*lDdE1u~EX=QtznQ?{nw&!a|JhY%eY*;F)o^U>ivLW=7V*XsEH$I-wM|Ljnj@M2@yzMBN-BJH$Y7=n)$9dG|~!ViD?QHo-|JuT|2_5LfgaV1np z9>jQqb;q%mzc(QO)^rGHlb`=r`V-)79a9oSfZuHa-4$X1A*sG00wXvhXUX7|oJwtoio!W!ED%na0n#>sTS2DawWNk5ly&B@@#v(q zTNnLWEgY7G=FC~Ms@~{;G)VXjPInmaMsdSDA?|~)bYMz`wu?EjlKc`loZi$~98z|* z&}tHf3d*J{T6rKE-<&-;Cf^0Rrt{~Sg>b#Iy34r9;_zNh62tsXzH+^F>|`Dt46_W_;mEqXh<24o9>8_9n3f#oMx56OuC;9-z2y~_Xr6ey=ac$li6ZVU*7(xUOZJ#-Lu$CKsODSX!|gIG-|AGV?OIv9rJgtGS-)k*E1 z_&E~31i!R^qnVhi7F=dYNAOLhAqS?<^l1Uxn`r-iRQ>0*iwIT_Kfa~DNqi35KV3aW zic^Z4j0zQ^pENkgPdiWy^_2(_y%a-So>Y!LsW;TS>tZx89FCBYL}#HNxZu;0^AT;m z8_yyqxYcN0$BwD6%j6I0eBaMOlHPVc7&uN02_^d5PYLm~u0}#Oj}Jut>5mT$u>f4G zPQc%spUFu=o#s7R6?rx~kD0D3IVOk=rzWVJERGr_gA4uEAMQ~D%P6;NVSOKx;~_lB z-q$LTk-G*L(==MTO5fs@`JOG(B*v8iqUs#jqUud0(|?VI=DK{0kq#oNLPg?|6f{uJ zDN|~6Hhu%G7+E8ap7#CF-Nva1(IOGD!aTUM;f`*QrDm7O`LFkWfb{xbU9I6YuJPMV zdpC03+irLFkG%Xnxai_zhs#FTH|>OjGZe!;hvX1aO%bltGo0JvG8Nu;gclx=zak|7 z{t|u9D_qY>AgQVDQ4PdsRJCqA;LpZ|*7HGI>pjOUOVNR1*ngr~hWpEW$+<`}5zbTb5b~`O;#ltgCAu>a#A+`Ks>r6EAszE&@%a zn*+Z`q3;I72VemO0eC_=abeFCTz3I8#*1I@LrFYB8~JvD20%xH&^k<2<~CH~E0KWh zyHxtquG3loo)yh0vh7#i={9ts8WK(`8b_DLwTf+kC7~us(#K6%&^3|mf$13}oqd4M zhJIWQFi%P$&@C9JU;RF7-czmX{DVxm;R&x%)GtCyOLAr%2&dknMTiLo?y%#Pie_MP zNAs?Fb?>}qsXR{bpiL(!=Pj2WVBrB-4zudCXB$jP)da$s>ZOc&THqUq{wf0S=H{|_ zJs`r62UH#Ci|Gz-1;)5}c#(c|GN(DOB|s_(>J59<#!H0oVSb48!q$X3rCzi|G%F;( zg;$3So^jhf^|>I=6I_)%8s}O$^R>Gz-`zJ|e0fPf@gg@RVKNgF|8;u&&qHd{*+`Ainqm=_OJ=IInqMVg2S2R>yJpuCJA5pAtUDN zFp^C(+iFr%!}DWI&LJ##fH3oUqCVtOH46*l`le655w?KxAtsaFS?|M%7Cmy)ddFAQ zrpRjOG(^5$U6sk z4=iiUHL9+bwV32j{Et_$KVeBmQ`4s4-fJ?TsarJ*Ek2oPqu4<)iBiF^C8Q}>2J>OE zQ5~q40))e57S$f4pZX8dBlUf|94PA)X~pw#=hgQUuMvr+zew`+zSrp7ju8SVLVv+r zNjl}q6+FY!(WRyaQ?MJbracZp`K=M=a)ymmsR=XtK1R3LXhQMETBrl~)?j+uoCCL${Q56a7o{SvBOBGq`KIVjIK-IlP!)7CpM$Ls2k`O zFHguxBW@|f=a%Pc46j~^SHLN;3=3>3V(3|WY2`qPOnZo|Ta+_+!AW(*c$IoOhb zgaqW{e;j<6t@fQHd^0lq{pXR2CwKljy`pf*y_$nixU{vlC*H31hT_r)P;B(T z?5JggZL()EEXTRzMN9OO>wEA5#c2{j!w~12Vm~~c6k3e3H^D^@aDUI z+L~7xSUZru27X~#HToLiH;w?x$h678tvBNtDD!j|3OOehF7S1Yj(>+c8&bNPjM%2Q1GU4Z0TAFerg!waE8J}kq$o_T|0ZBua_@vD_T>y z@PqH^a>tN=_Vy%elc4Bvkd^bi{46Edz2$rcu?d3kCW3u&eg{n`Kg)DP32!aRsn&TI z3-}gL1;c9;NsPeGwZ7Z!19fF!6}YWZ8%=XW6)O>2` z58i6@V+dRm+p(&_I&GPH;v}LE4B2%5%qZcXa41WaG%3gcg%>^|v%Wez*milfvi7;ahIy4;idoQ-5t;ZDEeh z+~zIE#b-WvI%~NO8mrGALi}+Xajh5PAHWs(K!)*^?X>2N<@w`L<3*e~+>Zb)O~e%A?asJq+@S$JgFW{1IaKZ3MaR zD!bi(p`MmF-?qfruE8L-D*f~^BK7uOx53MAa)f~2mmq!^JNTA2=7iViY>`t0!hvH& z|3Pg+`U0?X$17u}*lR}^(dT9LU4o?JF#cRwumCP0hqq)X(L*Thy7*F>5LW*6F?MJD z*gKjTABTVpXHQi{u$8kB7z?G(CUs$YX`a)Rv>7QC4|#nD9`=0>SpuDUEUAjCj(l8N z1ki)V8oEd6gSlrnq3uHUiS9SNP6jgAD6CPtne{6PBu;3s4L~@mwEGw1>ync7ufBk{ z`c!%HBn=8JGyqT4+z>_L=v{d49#+)*`a-S0*-h~c7*?JoB>DYAu_G~jhWy<)+g|nb zFQ%>rVCuVxG6Eod5a$f(ku1mHVSVhL0fnPvzKUCV15aro_eF2LfnDQFiXS>{D){gi;?IV3@(sx0qrhS% z6@^G}>gtZ<(pZ?YM7kd=!}=7GuWGPU0--ny=5m_7Re}*KLeX`lZO$@KK<|-pgRbr$ z21zC71CI-UD&U=e_C`l|IcW$jqmvJV5ertA_eUuQ#t;w5XpN6bWDR9J$aON5P2NwH zmX@l{i6V*bKY{D2^TC}136Dz1sy(4>T>}~qw8T3M1iUy^V1{N8{DMT)zf$6>C=G3J_%6b~aVfCq@1DGXZoex1 z%`H|@Es8&R!=~W;P?fnL`rB-6i%DCR*aaH^Ve&su7T5=15DH*?187*y>EFyO0L}Wt z2spGr``!fvi#LFCKh*xBS|Y6EcNYQf+%1!T!7+IO!+&;W)o(n{p=f|Bq@j{;h-v)Rbcfm~zQ-Y%&1Ht}grAIsdD` z7qdPC4mS>rFU4f=NW){5Xj6dr^RK*ssK}aEWaeDvzbJJvw*zSzH2EJ{UIu3N_*ILO zUj9d9G9PHv?muKcbDd+Xl`&)B)+-yskdTn}JJ|;3oe6JC0Xm`qKu4qn$}XJrGYGCz z)6AzZIcP@%B@3a~0n*@>`3%5!+*v&MXI?LwhUU_nSc*V9MH}r)=_&%eO5nTfLUh=47n)1DlLF0RRFI0Z#=~{Z!atD<|@|`fT*ea8sIEu19cNK?lRV~1F~vAlLg1J zZ1Yt!=_s6ifYObYr$e!i5C!UN(I3yTXI$3;hG+A54GZw*1Id5oXPSCZL#p|s3gUM} zo>4f9g~-cEvc&N8^+HO!2=wF^E7(E+py^e>ZpguD}-KNg0Jg3Q*?KF`;*8 zNR^^FH!?CZP10w??Y+<=vg+e}Ct0H9G5g?2dzu(Ptz>KKCCNo+-n|JlPW+`u|7*oV zK-0tJuX@S<%3tkW{#)~qFLlJ)8}D)rKX3@_0cVPPY%cGX0gZB^4QwLrid8r@jvGHs z6BT$3JvaZP;DSa-Xq4PiB!gfyGl&nkOj;TcO7@Qc3Ke=3Ww-+(Bh7TsoIzW zn<~v+z%bo?P~lz&*umAmb}swhPxK}h<*NvYUTpTrdd?330KlWz{;TF8^g^!Bga7*H z3Es`hnqu-s)HUF=%Z9|S#$IrN#V znx3Av%1BP1-abIA`K)e142G);Pq3_h?n;g!v)kVI;QS2G&xpPRZ#*o6(Dokt=Ex0l zR1zRh&Ta_g4gpe5=`1xi5=n>Cpqj>~4pkg-XCKwFN(QI2kH=7FJvq~g?oo#&s9*kD z^+UHizSwot5|c?sOTBO|r4+(+e<+xAT-9oitgk3n`ZWzOM4EBeU?a1-MksO9u#Ts@ z$U#WL%bvm!N@=5QI&yzQ?*a24)#4xzuQso__%3d;m(&)AC3S%wlN#aR9QDgW2T&j* zsaWX!)xKvMF1$9=nLT@hr^Wd{?A=lxoS9pb$g9DsZ3Ocyg(#c+BMz1 z&dq%%!jFc79Zupxx7m=C?k|>-vx!WQp2(Be_Iv7(qwR!o-?nJZCc|;ggW$39{0yAG zjczeghZG^jDhkxYJlamgaH$xS6y(7xh*4`^+vS&9A8)`(JIu5{@0LiwkB1hasQL;~ zzwhg3^SNuDn(pC?`9$SY* z=}c4Ji3!lbXI4-xsiSmz;OrO`UqXG)7cGy-rJYM>@+E|mh}EiZY0cDvz?Ds_18b1o zjG@T*wf+WDk376apd;rh+aCkM5Wh4`BsMlE1>*ao{_KFO)*^Vr&*HCw6!bE{0rGd>%6EHj7WL6F^R3A8;tRi(CQEo##qAv6_cPIypWD>7eDnLfsQ(bvg`y6b${#&MFCrzt0_MCDUxpL>Ok2YZngU`-8% z6*MxvIVfCbTz!@u*{hh8=(`KojXq8KXy_Qi++A6MBtGe@tn{ zSsxs{&yRKQ4zSDU;8lLzVeZpmDm=C+ zb>mF0)$aUtq~;Y(XlN)BTehKyiX6`vkG`qHPpScXSXMq&^{XI=m&rgxRpPrZi#Ij< zP)|dntY?fPX_Qs>3p(o_`t;1y!_|DS{q!Yj>FT49bxY@cezWqR2w9#&#v(akE8H;{ZpBwh21aR(a<>rU!wa0NYDS3RHCf9Am?Ktn(mTyGdj3W77Zy{g!HwCj=u2$p z0t?%fFP*owKXZR&5-Hb4Mf#XN1P@q#Tab0b=*^?>i_ap}*vfk%_G3-l zwa(@TW}4mMv~ItO_=$1fLJ1ftY!2<&sK#@7KRhSr{qbV+wlqZ}a>w#W16%Uimw9&v zIpJr!aYo?90=%nKTwnZ8)x6gn^I?M^@mlA7xaAw#9#XL)e^_x`l17>ovvZPfzR>1t zZ?}j>#h<$jFfXA{JzU8GXQA!!1ao1D#F$AZyU)^x8!27s`fNqNdU+m%2-r&%Jjw9E z7VdiKUQjicYJX8tEa%V`wrRNJ!mSC3qm6mJbhB~1(8K}0>uu3%wmJMlM(snIWJ`a+s#swXxdVp*>g*-i9LG~F#BtiiTQc+95wNhKvu z2n5ddPMiq%k0A=AyBR%DgNIA4InbkTkK693hEO%t8EI0w_93`vNdqu9J!MtTUR}H2 zN5xO%Y_ScK`p!m#LXRA6A#DBXSh=i|MQDQRd8TNP0`6i;7# z1@$`Lok*kRE09K6m4|9Q!J+AXjOstQX?&+M7)LtX3=)zzt zZ)VSU$QE|zbfQ8+&pi5;=;7QX{B(N@;}NF%-Koc8V`tonIOG(7nf&J0^;khR`B|yJ zrOng}|C(;g+cySoP&i&g3faBN>ALt(k{u`|Co$kZ3Z~-zx3^q>M(qO+wvO! zm$s1Bbs%VG`aVtUjX`eRQAAIK_NjN=`36kxaG2pOw((N9PT$FG;D+;xfas+21rs3c zocjw|i*uean-ZX^07seBzXLX7zkhq0&Bp+)LOud_{^Qoq{wIZ{8W0}*d(J+FoQ(n; zQ-+ZgfqiB6KIRu-hH+;9}F%ijGswequ+d;`9V4woq+?31@v8%nKKl%?*0{44iY)L%uOLWCG4xf1fA zyL0y(Nr`3p?whD+YUKAa&z+HXX`^EP#S3NQ-`hz1T`FfE-M(|Xn`)Eq*DU$>J1hEI zvUq_!IhFJ>qJH%mM;GIo710wh=5~u%V^Qcg{l%lG&q!aY>Z$(+y@z*m$sKBp1guG4 zNYhvVy!hedP1yqE9`m0e$=_$k>Nq%|dew)}o-J9|(`T=Nlt1e(zwer=OF(8lsb7Vu zns-Ec=3b#-RT`YSLy(Uq$I^D>f-iKYruIFt7K=~f^x|j#8nZJC*_Z`Pkd<#6XLLT# zEd~|*o!3Qy&^s{rsSF?cv8~s_yR^Qy2zK(D&P$RPOVh<5^{_k9HAR!*Z3~9w%ZFdW z<9`3O_`$yxuR;(u(TO}*J+TnzE1mbhS8lFD+z(31RZ3rVy7kv|`$J~i&ufdinIDa$ zeikVmNql0aWTq0qZ4A6%5QEt!G(0Ya{JcOhzK>2plRsnbaza6hJVlLwwMxEC#?6Sh{9Q@ z;LA-$W^(UNl7Uj5FqTd0Ul^vlLP5J&S}M#FWwjs?mBUF^#;*gZ!?=m@6&t%s=<$Zi zy^K%g@4epqU+leQR9s!xB}$SfAqf@&1c%`6?gV!)+&#Dzt|7PucPB^zg#{1pF2SK7 zxJz*7p2~aQ?lHc5N00u#?*7;34`Yz9YuDMb)|_juwcMZ+&xzHhBHgQnR5J+alJNt~ zODjUEo6e6E!~9DcH9kY;XBX@mRO6PaM2?~5JX6^3t&GhbKNU)XzT)g!7grqOWgc}H zc~8>LGi4B2lrcxM&ptGXXCHJ-`c7~-%@8cy5#Uyf>D&#(-sv}j+f%xS{g`6 zzduaWXsCfh9e=tg_>CCq0d#6H7JHof!HteLAus+5lZ<`dtczJrG`6Hqi%A8h@E|-5 zP0P31yIr%%_gz_RUVdyp9%dNP$MWD+XIr4X`l$!|Txe1B6@Pj0Vhhp7SRTryPF;$` zwPh7>8!q5Qt0S)R$!@ZdqEr+G)O@Kn9kS+BqfyG1tzshngox#}47KEluVxcqwHkO- zgE}{yj?~lP1q&>5H&&Ct*KQ6UI3`1R6uwQ|i#B$avq5>Ztg|V)cKtb`0`|5o&GUOJ zx&4|QJNEU3hs=^`I+D{<+zh99er?F|8*QRZEC;jlHwQ{ml$hbes#aGACB=NS5wkD4 zf^}V8S0#Q+WpluKi|r`rErdQJUtQ|>Y@rC47FWkrrE$&R>|CaI;#gK3qy5W#&OU>? zjNA+tzcyc5^#!15mjQy1++LR-A4T6>{M=|~&VS&;oZdYzfZgm+6=jX1$X89G8Yzs- z8;Oy|S+0ajS)edD`uyolAZMt4w%+dnPGy`>{OcN9;hv9N27ewS_0971-Z1?bDJb79eCBU$$_p|Pp zxlO80EegDUxxCqDaNzuUBt5R6hr;JEU~S-K*M+?XAs)9HgHuHPk_N3r(UAr#U(3Ey zc~h(V5KNu;EsKhQ32c7jc{=#SWZy?SQLcvjkB*^V1O#I86zc>R6v?X%zOR-N2}t~QqZ+@>x> zcu42Kh3voo8h#ck+08vVlG24d7URAT{o@}afcuH|O$jNChb&o*xY*C13*D z!GHv~{W*h9<3i)^m9Z|-vvxaE>c)H3db+UGT!RPG`#HFp*wAkn$TAI>(s>KSW^^L7 zY9;jh0Yme<381(QNs=1l?MG?Q5o{Fn`-jw_aMJ1$aOw<62tK#fn9>k`^gkRxnvVsF z4FE@#*ct8znU(&0-VQcOrPKfWJGhk#b!>d;zyJJiy0hTFoFy)vfBg45S^M7podR<1 zzue2e4kH&bcr*LKAYFf@j0f&DIkW(tD1vtegPw-kNxt9Hn~UMNKf=G~nrro*riw$l zDOe>8V2iqr_uaZoYPxjCGCH1>j;4mXx~>8YFD@?74g_2WF5otikr0@H_fl$p*UHU` zJXXh>RI+Z0vZhk%%|GRhR@dWPi=Atekv>ywtXDO%u;tnq?BKTfYJYz+l`)6nwM?i1 zp->GuJHHH&T?Ke;fq+YEV`}Wqe6q*X_rB$2dX4e=LT8upE`wHyqP@b>?^fxrF~nt8 zKHDw+Sc=69*mcmmLEa*6PF=_LnAY>60WPMzz6HSszWetlz=%#rn$qLypPf)^MM*-cib*fXCeAC&fF(SG@^eHTI>IZq~+Hly?c_o)?zog(!B`OLfG#j~-Z$uejp9|ctKZ_OA2}R`rKj3ttGfGRG`c?Z zhl$KLqg!a%*C1-l9iIcgDc>SK^F@oZ)-{wThuMHT-?{sUi9~}Nn=SKwb$krc-q>wU zzw7lC?~8W+7q3&@x|i0#1in{XX!i$}b9|CPT)wBrb|AbJ+lJ#i#HUtyo8{YqrwqA& z0JXipEUZ;}DD_J(7nrAtRTSzSXP8t+Me77-ecvg6Vjwed9S2}Wy><8MyGal_36XT_Nz5+QO9tS^2&5QG`?_a?k`UB z+)fDpzB_g$b}ge<3|q!`U(4TGHbBn6;TB|B;q40@H+(7$kwpALY72c^5rIN@bnClb z6%%|Be&vnT6+O~eB^L}o&^PN>EC|;Ps>bWB51W(r*;lw|a%XzGc+Jt2P)bd}N|1JY{QqlQdrrXzLVwq9D zp)*siDa1EUl9r%)9%!W6ouwBrPp8Y+i$-keevrK61V8dfK>QJb*vo?QSl83trbjkg z-ml5|ToGR}W!?NEcVPh!2H~0mxw=DBQeRY%5FXnLqu6@ZUYhR8X~M2l9J*0d)TG`X zp6)7)5WX0qBLc|5z{AAW*ZV{=Jyk{gz8JKK>H2P(@KBc-%@58)gDI=4l`Jcsqs(Wc zRn8jjAL%)}c{1YlI4MiH9WR z-sraP%XCXMV=L#!Z{7GS?Skwoh^b%&&+X`}d^*6)6CQDrS> zJWeLp^jPi~%HDCU)JS-+Kkl7et~9>OR14#DQgv=0%Z!yovEN}<0%5M9tC zuhf^Gn;c0uDd^9Y{lCir;7@5{D~jR zC{5~tYD1Rj5xjNfQ>gkRB{zg5oID&vgl`c`F82OgWd%^K6E(NEG-hAM_`Qhn_6ryTh;}{m1tdD~=l_Qo`Y(D<|6hjbzYWxa z^Xzvpiy*K(zr$BWUjh3>6d=m%J{I-%CNbzx0u^n(5i^~NN&xfGCHse<9c5#xM0F_1 zY5GM2=|*3~{kOln@3lPP?^mRYL|ibJcmOpC`~CzR7y#`9IZF)zUr|iFz2!*O5h~}@ z#AE-%Xh3YAtS=hq?KT`oA^Q&k{rj8P_ZT&DzCZiXZ~+hEZ(0slQdJd;kIVU1I-w~5 z`-AS8V~J@_1I;3FCEzLCJ+{UH_@jT;`!*}ev~3RN<{Ae4JrI&VHSQLsq?k29v$;J~ z;L}$fQX3&dSTY2JEnrrH*7;lrDtPyODHS&1(6ixeWDdLVMrlxDSlFNT{@2Ph@FrzI z!(fL%JmUH^3YMWHn(#c@aAZDX<7;6A2S=0j^}^3YLXNtRI*$y%=z>I+V+dUA^W3<6 z9&xRkz;6%^qNRcP0nh&&>G$83ksF&B8l++@=^fI z`CG^c`2ByC%l*Hr@voQqpInXq0dcNVXa%qG#25o9U({{=?mg7jTwhkeF2r{D;fl4z zPna0nN>~5UYQ4TM($Nu%CUvp(ocJsXO(!@?E4wX0yU|JTs=MyTYEpFU&7p|*AM7XD zo59hf<#iTSoiOR2+d@87{X3SY>CQi;!o~(d*@6RuLk*sKo}9)81Co}1esn`zL`N7#1O(-Aa{GuHFCjv+M-S+F|d zZOuC9PnDCnHHX?=ubbOXAyeH!bu~BTKfUzw=ou~U5y{%j{_SJI5LB*VxlAAp>(|p1zxa8K*UPInYKEB^~ z<1x>0a}*|6Y8{y7(nq$q1a4mD-pQutYCVrYE4*r>J$ruBu6o}8P$JNLd7u$NG@tb0 z93NF4Tq4s@0YspBiEydOv22;f6qQCQp@>1Gc`aB|-OgNA{U>G;<;eD09@1HooR1?p z$L&XZUFuwj47E0kgdS)*TcVhfYWF9ffarI1j8PR+^hv3At822pf$N%!m^`cG}k9P z%i@}n%S_sA)|z{mV5~+{EjeuW9qEC6ImEk74;x|uE1diyC!b`8^9Y6Py;5$d9fq{~ z#8@65K!4D_W8go2WJ(GR$k}uK9NzW1cKXPtl*07lomSiC@|sw(ZqMt3iY2e{W7y+3 zVcumF>{LtfkqpgVdEdaV(X(9%N~|ImovGQpbj4^Kb*r9vmiZbRWvhQkou3&hmN8bdA+h z&)7S4;~3m*EK%>$q<+(=AJSF}6N*7;T4H=^)o?qwKY}(Hsz_@YWk4vC61SVZy$sxq zifp9#)@u7b2kG%Mwdi14q=Cp2CwtL^D?XdT%q^x~Mj6wQOo>SNo1NHh)Bn^;@p%Uu z+WTqB%Bh!Uq0^+{U}{$<#&E~aTCKK1+e>yxQmYc%X+j_rR5VdoeAzxnl3-Ft)v7zW z*xr+l!KN(39H?;&7Ggg&xgf_Up_4u5F~2M9fUg;OaxrrJrfO;%mh)$wNPPNGvpLByGiu{S}`_Nsy1WvZHc!idJi^uD5}fO7T`A;R>v(NWpYPr*+f}DCqAY z(Pho&+S*{En7E>sa70iBn`JM!nmY2hk!xb1>BwgXwLY#P@wr`<-1OZ1fjE4(pVvP) zDw(^{YaB1Kqg{!kd2ZVj8sjzybMa7_HWYSWVk|wDv-*N(i3F5J%oMGD*Vq%T9-E$7 z2C!NVsqna6gZI{WZg%VaFZEb8CH2R43`N14;rwj6p)fwa56oT=H^F8T`*-Z8JP%r0cLpEc41_`*Aoa%T2odV!Do7v zb{qM%)(!-w^y*fUG`!4u9X#<%#krEn6esr+?nALUVtC`%K)t(tG&EfE@fBjsJsFVW zcMGb}fQJipu8^Dx=xBxMR+9zcoiWhp>Z&o*z7`qrVzn+>SQDI;INBeW0sTh@m3>#e za#C#(>rxYOWju(iB!`-6f+9xqa2XcDIF(JhV}DrHl%3L{FF?;uM?4_!a*Z~1p@rnN zhwnMneeaTAMD|pN04k`UoYR`NsE6yZZTkX)EINYMDe znbB$qWh*_Mw_PW?Zsxc8GQMv*B&0vAVqjFuf~uiV%tr|?wxRFvWm5qOJNd{Kt=A}u*vfFPmmCRwmjfTqbw!^B{qrExyBN#mSw zho?wSfCr#jLLjtk5jrK>HRk<71WqM(V(J1l4%Hq)vl3$o#BX2S?Yp)pvpMTVrlr`2 z?na|k(}#GD!W4&dQS}()My@P7qJ=9JQLu})EM9|-<1X5st0t#OD50TV9Q$r&WR;p1fEZ|qQ^rH5Szsrz9A$} zS8(_ZE3zIMXWN;G_^ei~>NF7M&?Ay!rg(SC$jLn+%4eoN{uadx_%+&o_UNd)htn7M?ZIaS$n`A!?J;fE8!QjIvS6zXz=6#dzXNOEY5TFar8lLe3rMkFiA}Ep*Re` z&Xyt72NjiL8Sk8h*;33dNGD~-sd#VrG)g#rOs;<#LbjJdlVmk|%ad-&9aj2bj`es5}& zXg@-EH?D3?h>JB4_<@sY_pugmb=3g~i151__XP;+E^_jV7ZI(@H{7qeXqR!js&#xkQE&SBMRg-17i=Bd%zC6Sx@ONl=;K8B&&RBW{%6SNJ4bOL#InV(vmvbz ztDO)xjpD_jW3N2!)A5z2MImdy5G5}k>xu0;!9QZuHX}d>zAc*hABT0h*{<@*PgaLn z5FlTj|J;(?gT)J?6WHsZdJ*t-k^xPS9D}5&3un%N1Uvjlu%_VpD*NQX3#_sJt>Iga z{mRh-!6wSM-S$pnk!pAfcQ5+xeoezchVrzqR?NK0x zjRzI0A8_s)=>LXw0Fr=WJNT|mb7RFCCgDP4T`FBKP(7k^HHeRxn))7Cz_)*oL0!W2 z1w}f4ZqpV*7o1%B5DC|*=<->u3B(90ZA>ouRuv75eFV;pf6#xAX8)g!;vh6UCxAeB zG6&_kXu_*)=2@RD&Gino(c0OpuPQrl?3Bdj=hhkE2NDC;_rv1*A}&dQ6mn0Z*Q(yb z$aeTVib2(7Qnc|Dl_}_>jljiuCAxwh$}PY`bU*7RvA6slWBoaTe@~6vG(YfDJdavt zGK~WuC4Sk*>=r3x;$^42L-?wh)h7PYcp&b3G{^3c{f(OYNq$&73BV+f!gYb|#!kJx zSs&Ikm5OFx`6DU8q(>uH05C`omngL7ITk}?onL`{<6b&ALRaRUR5LVy2};4;ga`>| z-Y%oSR(ymllYz?apE&)YZ>piQ;5JgHmNhS-Qu#}z0x+R zi<|K-SyAuC;@^RluKMMxX2rfs!OQj5m|oyRiFM#JETy&3+xqONJu8ZVQG;f#)#MUZ z$depOp+WOoN&S0KxpI_|-*%;4zmn+04-gTqa6^bsreuZEk>QS{cks8M(&s7hY#k3l zYYDbARV7tJkrV47capxq6M}lulfgQ?F_xbl(^&UnF!LH`$vsT;!ryaBK4ijt)IYvYPsq&M?F!zS zD*MFcbW^#izdnHpN>SbKH(1s9?ls$wMbL?S8*}|iA~ID}ZHrqB;#@1IuN(e)==R+0 zPE-}C#gVb7Eb#Niv)$_O@Pnz!6$h)>!@UQ|dl}uh52cWqmDcuRe}NLlS>C=s1_!oJ zMnzy!pQ*X!si(!$jqlH@rczUGCm)Ui?H{*}y?Qs?8h?)L8}v`M-L@^3ThmaQca?h> z41~$LWbE-SJ!H1{00cNSow}gA#ckdB+*C>!w8P|>=)|XO^DB+<%w~a53y*Kt;P-(1 z0OH4LAB{0hW8Y=j^zP=sLA_m;nVNi2wX)mpvWBO#?B%4^P8tQGGW(}3zJLJ7 z+_LdH+fi@++0AHN;vHhoo2MU7rvCWiFA$)(w*)}Pwr8o<1pHG8vA(jSO_3DnJoBli zxw<=Okr{2RLWXbUdr>ANtEyS-chuELFy6`|-{Gb0^TpthG78vEi@);eCl@)k3o|Dk z)s&CCd?`1b8g~S`c)Uz%ay1Yp_b^>8G}7(@O-VVj#zP^}dTk@Nl1;3N}Txx{Ow};@s-p6AaG9upYic9s$4qkH zrPsE6+9LYo;=Zew{_8kgXHQPy=2E@h^5!HU8Lw3c=k9u2sFA_0gobisGf~KOqm+s8 zwvUX>{^sXY>hDp$<%e!rV*WqNVLETwo-8v(wd%b81|t(Gh#QVWM%r-nZW71L?eu}j zL4*3=i-|KjoBPjxV92R+jZn*~TN0y|6DvUyT3@eucGviL2uj5?k4Um~2r{LbDq7@Q zi*QMf2Vx2HL1xL@=c5D_Kn=TdB-@#DG`VQri428Q>>ZIm?k3`XUO&2mmcB6(OFVIk zkrycO+tGd4jW`cJL31h9F5Jq{r7A;{Y;up>3w|B(P3TtS#$M5s7UVp2Wz=kyHuJ#@ z<)XnwUKz1FXdt|#w~|Rk(NCj(weAb@2m^Ms1fPFs`-ET-J*_%^B?ObRu+BQoNHzFV ze(Ycfa+QQ?P<9pbr70?!k444l`Bnlpks^zPs64FCcVf<9!efo}cw6%tW&qYejSlNr zCMJr0THI&=?-f^zIEG{7=J0s)-`m-CHPZ6%phXWq3HsWQTt9b{geGgj+5d zMpC5eEe_bIrSrt!HQBreb%n#aDSBOMSXkS;JuR`!#FC4{yHd3d1XY0|5b6;&E={Id zBy6|Tw~!rUkPa5^eV!P8#Ok*O916TBIV}4840Jlvst>5y^J!&`a!iz5thF$yXi|sF z6dcR_8!MfdU*BPAn=O7OYg|sVf`r_sBYuMSrAR-i2?Y7)drWK$=h#&fxclZR_PqQy z<)0S&eo(ITH`{h0HpdX6_K`OkN3QoF=4o|1ww!+Z8J9#kSVL{&YnrhlZQ99CgcpkH zj>py<9h1nHz-=q8Th_E%Q%`h#aBc+;M4IRSRsp9=CUW>6!s zqgBt;`j5&~@u6&fuS@gAGOSY6TXU(?nC~dFnFAkS3@^5aEzsq$8RrrrhSNyyCA~Ar zns76jL=lq7F{kMEH-thkeoeM{J?-7qc<$dal^~$w?cD7>vAs*Kv~pJHtm8X-w6xi= z7CQQX-SCBxGpaW=UeLRG&7$qb96tc)4`31ims(yLq7b215!q)HrakTmNRje<<*fZe z`{wLkAKCfGS{VmOyvokfm^#fX@qRHrCC+q2+vs%>M{~$G9rmIbwM4c}>a)yw5l|+C zW28^2AVbque>Zq319w-7wUK3{Wg$PKMyXh#XRq>8^J!D#y4TBrLdWBi=2Y_|C#W zb$D>(=+}!5mMUX$;~y5WcslwStqhLyFZc4x92B4g7|szUB|KKB`+Xte!win9vt6t= z^<6*^rNJD&OF50AZyyS2<3k6QK5?Fekg-{o&0vayp)#kvZ@WBcS=GfSD7O*y)*VN) zB*i2=G|wV$$(&ucyjg#di2xpj3s~MxI~?M6N7-zX5=)~nOWtTQ-Cr)}B#4`7>Y|_c zA)Z6|M|Z(Nkl&G27Sm2du!4z3m64uXN+Mq9wOpGt9 zn|$MzJ$5gWl+@5!#b|q>QCGOK_nON!M6|E#g~?zOCY`(kWv?H}!xkGAXgK_IQI(5| z-XJ;g)IFMPoXy+a=4OizN&nV+?-kv3sI>gOnDMZt;rY~RS3tnrb)P+;BdK>>(!?w}9CA z2T^nFg&ZM=RWRULi&0MeeBH&27>%4&qXaJ6a1UbgjGq->)y<6mkV;18>Gr-fu$MN5 zZ#4gnpT!-&Dzc#0oA_+~> zEH75Sl9HD=gyX0S=hBBekF5oczTize5p0BIM@GPOtAGn(SQUuqJSFt;2_9UnHEaJy9=HzO zOMpJ;4}sQjyEAn5&{7_HH7?8EnHTn`tO(o=nR|#ZDub*@Q-*?cR$1p zh<6bp0QEgWWs0xYLCXD=Omdy+0Dx_rnPUj27f~a#`2iO|lRPrv6#{*AYd`=f`&w)X zl1QZx+@}zg`WN3gc^Zq@KY=T6TCQmG)Bnu{{OY@)_zT#?fn+*B@(*Or6A|I^_}({c zx$vrqJNGi`)X4!LZ{g2+ZcwDDQ~!~kziE6aE}og&i7N?R~ZKEY#7BjDs@w9?#y_wH)=Ap;Of&!3Jvk|V@o)WjdcSJCjXBmb?y_^+jL@+%Q_G66on^2P6Al|bb)ZcqT$wb=UevnB);`Z1q5o1 z%y$L^92F6x2R73psW6lKKI3%eYL$C{ocSV!$G;t#meS~h9v&afea!59vpz7$fO#T& z7u-zG786y~Fzv+#ZEP?~Zg|2@FRWAobm!C`qL-A?={;ulEbWq)wN>?M+PYlKOf5Vj zvzEW%W#bS_W2lWZt9}O~dwl}$yR}Y048^FHBWmuz3DhtfB z*5KGc?>x-(OpW$TS0TT4tiSPrK*Ua_1r(M}BUAUto0>i&I@O)Qd`3=OnW;f9X;z`U zjpnx2+^sp(Fq&kb#vWt`Xn4BBOueLqD|3Eq0^u4mDgP~#+&6Do3cEVn3$|Mwk%>_) zx)Mn=Gv_l^Uqiy(>p`nXA@1^PaFjyZFTb;H{$dO@2Cm9A_-Xx38!P=u{U_c*;>c%< zFBg5n1tCE^8~Ds>)3xMN7?^Yd5P*i`9`0EF7V6eiRw;@Otna$~yMQ_=w#5^-+FdJ= zI5uq?2TMb#7#C3GVC3b(YZTXWq-3s7p!fXY=m*3ZOG<{9VVo{nrw-$zD<2xNZM)dOwg9KMHTmrRfSq-RwluXc;w3^?Nys1;5u38yii z>6200_%rcdrrumWxoC(sqXpEcESiztRP5*xG(V8G6&h{(2Td%wX|1MaV|7187nZAk ze!|#I(8J0Fzl8pE6-}l}OITDd95R*$5D{Ljy1aH);@pZ7*1YJYdL!8&R2=e!lw*0_ zHB>3xE*QjC>^1`;7A!>y#&c6oWfiU}3}?2WSBoRl3gpH8NbOwkenuG08U) zf>^fEYbXy=Xw_1OMUmOc5S#Y*7shzwWPUa>BVOa|r76;cU$r+uO2RO}c&92zX`(pT+vcGQq*l7%e?D9S3r$z0_<@TAD@! z6zot3-h^IQ-2_n#R8QqTeuCkaI259Xgwi|(cdTv0nFeX)kY|7`oHbPIy53@4#D!^DW}AZQ_T}_2Ub1jXPh-)& z1a1vp>io;G^*?Kvj0j(Q0iJ;gL(w@HE4XzsJwmhrmxt$Xvyx$vX_d1X+CI;_3fHDw zN;~Qn2HxjAO~mEQAv+g<|FQ+o)vpvRY#;9Cy<*u=p92zdUJNw5DWg;D^m&K$U>rJ>%$GPLf(9cd!^;_w3TvK|?K zEqr3ec14|8v!$qT3{xYCt+Anio{FX8dvIVtN9#=5LNAd|9ains;o>P`=@nyv%*>G~ z(@E{NO56~!JM*l^Om%J(VZ{_mSdhv(>#ymoq=1*Lx!RA(M6}Y5a)NKsz#P*=bH{x9 z=Sshh-77T@RxT9o8W%$s9iCuXg!XN&mYVdWz{0qjDBo@@F05OZmnPenI(OCGReNH4 z>9BEXJ3YNfU&}|^Fne!VQK1z%)Sa5Kj(XP={6YI0ozFg5wrr-SU!+Nk9>+9?{9|en z;E;K)2xxa%V}%56|8)OTAx2SiAHZ6>RU6J|t#g`V+sriPZqeJ-9B;uxoN&EXe&wm{ zrh#m_?6<Od%FU@+BWO<=rk0VNx}m@O?(}@;vt1d_ z6xI(x&G0YNUJ&TG1&p6@tkh)d4_b(5M{6)-k4MmkDTp7UWtCIHM2>*q447AcT>kwd znELzUin|*qlw@_3ewc~2MTg_^=Vr6<3e81VvjGo1lzSe!*d)+r30ZD#X4;S$WTd5E z&}Y;ywnYHpHv>ONkhW-es1-cmJ#ZAVU+%5;Q zrHuz4XD0j9v^rh?hGru6kVcHr&`7_XRy+E97DAAvrj_kAHEx~w%&{k^X{B~y8S)`H zBTG-s`>JJcQAo(eBTAZ~s+hUFykg&Jbl^m3e~fH5&IaWJR&qiD_Di>x73V_Xnxfk% zYzv>wHG{A%C3|7a!lo%`PMQCn!uZ#&6whLhcn*_(zjEN6mZK&i>&vk zuQ&ZZPUwf7;@bfN^5u2RM`)8^Y~qo;QdHJ$S~l@p@_yoQfm5v_SyfPeTjAs_h1RqR zSK=0xSD8w%HyAX1sxeZs67?{O@?9r9Zi6krwT(^7w$isVv8@aLp>y4Jfc3r{ln53G zW~*r^riL;25h3qCfTxeMAHHij4kU_Oj{99E8!Ea=H!Y|)*3-sK{iCzzd3$@dQP=H) zjZp7xc#RLC#rHD*IhyFZDA4nn@g`$g3q(_ob>qQ9gNb>x<2wzS>AwuD)&86|#Qepx zKNk`>5!l#TKt8))jha$cwB*Bbqs_sw{4_e0sApkCjX#ivH-i|wH35_{w0Tg;eN_K3 z4d|d?Z9Skii+aUWe$Uf(?LNQu(0g6_dy;8hPtu)Ik5YXa8U^`K#TK`8ZO}aAgZ`~i zhBUDyq+C{NA#P1M{YM;P#Pp}G%PnSQT$us*1*BK18;5*@KW9kZ+DOVfqAr zUM>>Lk2r;OMECZmvaQ3|pPv%)%vq3+xh9P+`9mluEhWZ<2r|}%ac&*%a<9DZ*E%Mn zv|3x_oA`xfIXA@=i$))20-{`~c&^w5kH4ITp;Ui$r|?}=uXQqrmtvrUrIcxbY$4DR zo^1{5X&NTp5cHkY=0l*Ek(E{Ez@o}J2So;p&)VVB_dk4Y5}poU1@;FAWvkc3xfdq7 zq@wi0za~M6&777uJ=Bjl_XFPE-UV8@R!i>29+&j(Pd0n1 zZKsAvB$9BL1g-*mO(2#zr~b%Mardfbeu4{;fHqF?hO z%>T^=*tDkzGHkY<6Ba`Ry%jFm?{;$sMXA1wJP5>IoA+NmmR7LyMt+NQ-w@R}N|LPm zPTB8YM&Y@Y?boU4lL@FIG@T_BQu;$CwH8}`44vhGzm3g1I?r&i6YRFS&1g}fxqntp zk_7j^Se|WayUZYSs7k}xQd(KfZ4LNcS1#TdCQ$pLm*+T#UP(T4^Tq1Vm`y_!<#|v0 zFXMGcjUsLPUyhLwmikiwkE5{osEnLrZbE2%D351@Zwd1zO-D`l+wTewkG}op^pWAt zFQ#+^N`z^0D3?F4Wk$XwX>aWM?I&h3%?7UlS`;;O&aa{vwu$yXf0`&p9VNAbuy|g6!TjgR?o9R_@OD3*gVOVR1nb= zK5MW9`jwBBu+g2#LzH#zCDYQeAi#7qr~2J%NM^Q?G{VfJq1jW>rR@}{g|!wq8f+U@ z75ym^j^ZX5xFwiP`4#2qOAkBNnH>vUqY7N_Wj8c#I={&Gh^MAC6dM|Bf7=^5rH(Bx zpo|dK$&RI2q_x_&^Ejt9byBXT@iYV#4O!Nrel{y56A)4r&{Y+3D62o(#sUW}h@h@# zAd6bsN%pk@->S{6y6141o?!sHyxCx(v3VxJZ+m2^)|qw-9b(ghNgH*lSNx43wfn1c z9q%>?YY6Wxiei|zHR~^o^>PAQ_W3C_ERDDYy_;TVrWQ8vR=?XXnCioA1fRa&P!VS0 z2eVP%q|st?6<@8-pOja7tJlDPu=(Gy%Hv=jna2D|R8>i0{FR!?)OzZgFO|-3G0GQZ z(U{ZiplWMYAFt!ZM@YkN9*Bf42ure-}6*V@`{;?L+%#leyuQ=Hk`{82{_{d3{n2Z1J9v9uu@KBaS5mKsXM;oQv{Anm;EtwwgNycHh%HjI0vPY+8ui~HFg zl0s)OBoLH0>dAG5@)>`~X|#!8Yss2yYU`I?(CMl4h+Md{7R}uG=iSKJ^M_`APpI+f zaQ5L>mh$!dON{{x^JIRbaGAI3jN7Lf;64iv(M=l1Wvy))rhbiPh<+?F<}v$Q`$w(q z#e3`bcn2K1(yT^2$Apo-%UM?e4v&3KOt3h z_%gkcMd@O2bSL|hU%OIy_CjapYaJAv8xuoAC9dgZ|9f$b=@;t9ulBV{t=n@hyu6Bw zcs_=2c6J>m@-60n@6UFPvYAb-_+ItKy4KKOB!|Q=#J>2+qrvAph+@FSlr zs7wgtrf;-oXgjL}Alpnm`4AI`Sjg5pi(aH+2q`{p4eI&px&xmoirbB_-HdhG5t9s^Cr?spo#p8ZD5mzV6-D>E3aokp(oq2p~MKfVl{qFf2 zT>V_GbDZV(F*_wu$bbP28eJyOF2{~_6>qDZJ(Xus(STT_RU+|4TBxr5LShBAjM|4v zWruRE_=BIz2?DL^Lpv7K_s>)KJ00;ye_jH1W+edRr_l^nYu?*KWJMZVn0$$EPzO-lUUWWsM7i{0~z zKd93@Jh=f7o^J7e?8d3N4dnWXdL~v_yMvcxPO;JlZimOu{QECCxLewY?5p|n)5=R! zkPSq=jKYR%7A{I!)Dugb)i_6)l*la1jp~MWfC7W5f`1Z9R4Yn$8Xx z^VnqL7(ChKOORHQTnQ_Zk@o8U?#E7;o%ufhuQ+4mnVs zlkd6}`{O6$;#b-!0<~T%Z<7-?l1!~e6V)xEUZ`sX?WkUWXFQQWa(i|bbA=Hi-Hf-WtV1CV!MYG~Lqix@$39gQGaH#$^uzerZOcx~|B)&-8 z(zO#&XI|8Hofb$KkVEN5HAU6Nm_5&ObD^EsrZajRw%N+)Gg@=PyoZ9ak$*aIkKzEl-Y@V(D#X z^2Ex^B@^&;sYCKC>S|nW2~Y_&Y(6jJYmQv+L`<=!!FqW=Evv6mIE9THyjO%{>)SgxBspDEUw3{z9lj}3ivPk;ldau(t< z=QHY_ryAC3_Sj9{rsoq}#OGbq!sh>BU$0zQ;xI(^-Iy8g7tUGffEMO7g=mYC`#{<8 zZ<}m2XJ7h=h*l<`92FcG(MaShGM%zcuIU7a6s8;Tywu9889ip81EYbCyvxVb1jHBX z8@H7+crWzyxXZQ@>@pPSX<<8iK%q{(E(z1qP~7r@{wv>*P+xfv(={J-!mUB(F~4^+ z(T;`=<)wujCaqs-8N`PFiNeU5(f>;sxy7A}kSl|uXs%cBGTwM>1?RysNm~OSTRp6P zcQ`_BzL$GO`Al1UJ@WWS=6>Of&J+jYsxYm`Ly=yVwavExMsIs`US#WD5;?5heq{GF znxRhYJSZcl&_dCA5elcQ_Gm|2`2v$XS4BQJ;E;{Uj~H`z(H|$3sT9-_=XO&yqCCA^ zAa*h{X~GEsBadl$Kt(s?6cp8pRL}rw7BZ8rM608#S7RemSIYlOkGM>pphml9JM%kR zeHj`-8BxkucQLf!z!bgsPt0IApKd&fw5jCzJR7CrWe_7Z879FV1Tx3hR}i_SBn#7F zsF^jb3x2Sn5iW4#nWv8&j$m=my)hV$(9LotrY7^;H7jOpahAdkUJxReAw_#}y82z0 zayvt9hL|TFHyw^|NXYuWjsi2rOXVD(vbj6nwK1Z0Q>7xzDXGQoWe87`{uGP*}S>z z2<>!xO{so5(uH!nkh0&v1=t#0@o8rAuSg8m>TZdclrc!J1Y@})p5mFpT%$4{Aif8zniQhwSM)^#NC0~)JHzMFIl&1WqOM0bf|tgK7OZ~H?ANl z(H^!DyHW>Ao@Q#_L$SN)zNBVbwCfPuAB`4|9W0iCz-Y&&ek|dRFs;bgV$NI=Q^$d*I34`!VP#wAyWmbK%BZb1jNY_P& zc2_1KnRjfy@%6_tU08!$V_OUOFf5mm}6LSnB!JKTnNQV{wuE+XTHrJ9Ha-`*fykM zvh)DDZ1E^{JAoaN1kzPe&*0@DjM*BIQHk0)%C>fi#^}XUHe;Cj>EXl`az4}$Gg-zb zI0U~ssK%nkd`j4-weyCqy^a`#ob3e!1=?&DllUjv+C2WB9hmXndc~P<8*TPJass6h zL*Q}q4Cf4f-Mb$vsim#=>(F7>YmW;SZ2a|BEB-`4v~;iT_j~^fE?i)*U7K4K7+87l z#{*X`?%&Sq9{rY^xyRl$JV3m3-=FGjwiDKzULH03*B;lUs+I4*xP|rc`0DH5{FhM| zA)oQR{n2v`lN;9~wr^XKa{D=OqM^$nw)FL%wz&3LTKC0{s;ZXX{qC|P@3@szdHD5{ z^CNnH{rmIjx11-xWL5oQeS!JGL1iVMju-y?{UmzpxoR)@ABRs|e+}HL^@;nt&SZsG zv8B2L{HOKS>g<@Os{J-wUH=u_{r2v5?yeKFt8=rJ8um?^^jrR3O3STZY)zkY*SE}C z^?l`0*VOO!vmOK;K6n7Qzb$&|we|Z>KF>dNKPvRK&gA#YmaUnxJLaa8vYAmnd~89&-QR@)xQv5 zxZvU5?+f+SLf+hrzZ(#?>*>TpFAlEE+_mO+_PJxgRpXTl*8JJG+-&uyCAZ=)TBXD- zIDNiG|NPAsw!dx4&Tl2V{A`oYnrGU+naZ#K)o7;8%6(s6xV3w8mS1`Et@YVlX}u?t zc(%P+9khMQ$@0rpD(7eZyt^Re{i;~tfxT1;OXk;vd$@?2>_=hS2O?s literal 0 HcmV?d00001 diff --git a/mkdocs/docs/assets/images/screenshots/admin/events/ticketed-events-list.png b/mkdocs/docs/assets/images/screenshots/admin/events/ticketed-events-list.png new file mode 100644 index 0000000000000000000000000000000000000000..daa2b1d94cc753f54b5085e261765c4b56e3e200 GIT binary patch literal 79656 zcmdqJ_g7O}7d33T!j-Dh6bPsY2vS4@qzg#zUAl;L2-16E14INwdJQcELhl_^dhZ<) zdI&9)BoH9s%YB~veB=ES-tnHFcFs6;ot?GToNKNfsi&h#OT|ic<;oRWb+uOpSFYU1 zzH;UIm%p!(_sj}k4ZCvX))n8+5(%^BzUGh!I+pqN8!T*k~Tw!FtM)&VnFW~PN{|;ZSJXrqU z5n&M@uKzn`Tczo#sHx|gd%J4m(#(BteE9U~PxdcL8W)8^*p6(7 zUPpHfoeu4m?QF-_AIlZ3&Ghf=zs)vBiQi)}MQK2SA|x`-e*NkHPKu6Fe?tXaRt;^- zl4$(Xd(HWGMo|>-6zOmfGd?=`{(V(57-OrifBSQCE*$RS?y7J-HgC0}x-{XAs7vQI z^GLpNY@D_1S&g6j{@VwPQFrVVhY5RD%>-;MBi~wj>}(@g)n8%tV|iLEPV+71O4iPL zCh6E}ssrzbd+kFKWAZpP;gACr%S3aNq9Xi=lCO?-tDE*vr{{G3%c{Gd_{9sc7+i!A*e-hj(v#WxxL&T7zvCTcPKylp4+RN6k^g zk`gL1El6kHJ@UJm(mw0*&M%i$ zL2RGrbBKd&cJ2PaFCr98!j@bZaS8F+ENZ2O+ID*^b~xZHX0idvTcU`3w*hfp7xV80*Roa zqPp86N1<{yFbz`GXQh>I;S~2C|1|hrprAsI^Tav6fcEl~=s`%iZ9@nBkf*%kKE9T*M%y3cgW@r+Q@Yd0m8pM%B#H<0T+A*8pD5il^kGfg z7Bm+t^{lGq6|QPhKzGA!k~5_I_RFmXtx#hd#Qv$>#b zF+iwAor2sue7mpE}0w#W~m-k@zcDoRNO9$`l$*~z388<{Qx+H*;9@3xH z7glUhW7Okr$Idk?YHN#$$f4swHb$aDZFvjDnANNAD*P{TO!k{<@?vpqX!wSb@A4BL}#*3J;o$bNEn)cvuc zR?Tb?>9TR=5o;E4DdDzV%S`F)p!LUsq|HN3urBAh_AlH^ym&s$eiZ)@{NjKsR{H7* zp6L0$5ANZ-(C9M^X?^mT`NDI^zq=s3-Q!FYtMCG9G~pQgL`Z1vY@iHaLCRNJe^XA9 zFU!1~IwfGuOoZ6+@o{HVyOr5mg2!ngwxvn1?VvPBz``sI z_?2__b(KS@jaq@HsBZa+w@OoLQ-B~=ZnK>`@%NJfDuhH0MvkBqKP}s2E{abpMtIOp zJt_E}+JVSQJ?4eTfvnqPk@P`ozAb{m(|Y>O)9YcoxE!Cg^sWiMrRA6t!}g5x{DW2tQ^NA0?L*3Y3_iZwBgrYBM+x*+UiGn)gqxMJg+`OrpFs5A|JWwv=!q*lpOgNJcg zAI?E*N-EMB{WftLoUEa59Pjr`J57@9?l!C-{|16;zHtf#*pjr-Oc>Y6l=LIy`l@Q4 z>sF3;t4D;>*1655W~C|A0wZ6a;V$}S$`SBwOD1nkQAmewv)S0YNr85|0h^KJzl)JV zRn=APnU$xWMgqZHPMkXOCx7M!8vZ&6#7>^M4;UHoxA(J^ic{+Bn%6mH$_(R4ZlhoB z-+El90s3qo0s-A7ur$p>;IVh07Z%$#?1=Jbr-(LjsK>m@uhIXvYKwyMCG+hzPZ z?QWj>p7JBsv48T)tmq04YZ(e+&$4xsW6!=nzFad9Oru+LO};z}8bJfcC+B7-w|0w~ zTqHu7I^-@pG0R{JiQQF>ak`KF!5u20RqG3B!S*J)*~Q10$jmu2Nhao_fxr$`C~69= ztP)taCwqQ(;=|VIMR|{VBjeq8R=|6QrINlZQTkJk*&POJxta;jOE2`?0Ey5?q7P9y zsay55Bd83il+1=mZ~3Vo5ihdA^aA+zOugOdJ{Gr9L)ss?9nS(e9y}%(Kh|KwUrQy9;OmZ*JX`o-QQrqs(Zb6a` z{!L|1L_9cGBC&O?WuG>Bw}sgQbjz>#(QdB|SDI`fwY5_07u`$MHF4l9lZP~T{}8m>25g3Ro}LHJ9TuOped|N?l_~EOFp;*Fhql8Lqr-|C z`|#Reqq~>qoAO21ir{DS5C2f1DQz}zUziAF3 zDgsY?YLRo&V$0#qpIodFzkYARqLGeKRp3(~&hc}%zQx~r25o144~xN_Z*OjNVWUAL z_r|0;lXwR)$Sd%U%6)e^tZE?kcYAE8lvnS;m`CCDWoqYz99(1`tkLJQ5+(A;G&DCP zo;6^;&cm1(;s+!~wYedMtTi`@uY7w2n`eB`V;@`Pe1kf3%F9dhhBTV###m4HR?EL@ z(>M-hRyYL?m8MW$N;0;(kJ-C1-q1W3C;} zc+Kujw5x`=J*4&7M`X2DNrV^$S!d#xmlx_>?&n|fB4<5$$`*_6%+2_Lq@8#rA|)j> zW?cqj6vDUPwn^CyFFEd}u%P6+gwrrGz=5P%z+bC9AA5v%8vLEsCH)dbHGLsqC4so! zpN>{DlJe3~oDp9-)taQ5Vk{e>EGqF*EO?CT~Zm^hH@1v&oNqlj=a`^0fuGI#4Ke@MsqGezg%ZsuWy}GpO zNiU?u53FTQbVid0u2*TxY@Y37y&Q6X46rD%OE>!8t(oq6I$?J-d~ihl61MmChAX96 zMNdz+Hen-#YNXryBPOY>4qDz{N!TXclw$D-1X@9=CQn$A1Jro#mYai`q6f_-$7 zYdZ@r4KOYUH{}_7Ge|}z(HIx{89DEAa;FfX%&q2940&NUd8|DVb|Z|5pSPTvDe~RW zwJ}eoZbR>Scp5zBz( zy0WEv0)aAO8tP80F0DxL+Zi|~D2LwJ#X&L5!(71fVA1hq?A6af(qevU8fqj|dB-9l zcSBb{$D#7U<#|P6;nuIVJU{%jQHjlS{~LhD8`m-y7iHKiG#NzK@+ftQ)@gBMc!=i0 zT%GLJoJy3I!03yd8S6CcjWtIpDFw4;8!Xp8xw?2oS?&2tjK$i3v%106ofF;_0D!CL z0XMpjo44)mB_9)@@Q&t?0NH}8@UuymSAxZRQjPj_m(VB4|KkF17@LT~n{nv@vn&vr zyNl^*hjtu2#5VK@wPRVu_>+~;YNsGF#*DnFZfT=|&u{f1r-h7n#+3LY@!K=*v)P^{ zi@JlpU8w1iE@TOoecaR{Tbo-_qmv^{)wFhSZXh?d6|_^e&HHAGUx=^ZI^lTDxhv1c z3_%7;C6z|*c`DB4&uYS-`#Gy|e_%89nE0kzte_iPR)as=MIc)pd8v%isMjRonIFJH z__cU?qTe}$49obb+q!YE77Qqb@KJS!B`~Z+Hro8NDt#uuM=k+Xu7m}!H9r6TcT{c! zS3A2#JC9&%!|WF;i%=a%!!MUgk!i1XBQ$^g8pfu~x@8RaneOJHdJQT+2*8xdChn>A zU6-_W(%zV<0;PtuCXf@mdiTX4S_zlcN5jeNXQ+m6-=2jE)6)9xul`+wEEq9N_kQe@ zp1UU^EO9wwRcu}Z^h0NW3FY3~vyucp{t>WnpyTpZZ;C|4)M&Gliwh0sn$^@_*X6eJ z@`?dwzRAw;1kfn#iG&uUv(|Wm43!KlZp;AP>>QPcCTE0@`H8mkyNA)~QfM@_$5KP{ z3as?dGqQvykptsoYasQqnTuaj2K=qR;rpH|hzWblbtjq(Lyt|p>5JHv6=K^yW`$gn4o)ws?jd6{xxcB1 z&S;ALMGNy*RqeYD_U;NcAH@-Z@|b*MpZ#3tw6wGuX8kI4{WuJ=2ZY3G*pz;vEw0OY zVc_@v5_|kW_{czol5hTo{(BYG$NRHJ&Ve6BP@%FOcc$WtEbCpcH?n)c@5Wr znmIc@o6*s6nwxZ1#10jpWQZIdoEcmL<6% zYyRxco=^jpoRXDGgCMjVs^@)zY<_#Q^&icTbU0)Uhg{d*-g&H7FfzEeCnR(D2<;LHuu@P2sko+4CD?RC_njkx3=rb{8jS(Z_?Nna zaeFG9pYezq`V2`=1;Ujb-yHW;ITwP6!zK@*k+7RMCKsJlniF?baQzr2JkVn(>0V(9 z_NB!g0o)suRnb4a8F&GJJ*32?!uhYH(sZ-e>6f)@HdH4AkX*%{(D@ESLd3L6+DM&^ zU-ISc9W^U*%sLKhf-W&st=_42X*hy5RXRnO>gL#?93RSeNDBUxouZiC){>nXBrz)Zd_UAIHpn15QZzbaYw`9Y|787#ZPM{=t%1lx!l z$ZX*X-D-B#8BaT8xvFmi9E#w<_SJ1O?m zDa72R`x`kYl+rhPByE?WF(S$fItiP3cc!9gI+VBj=2W%nSn*Qg$j-zZK(xh$@aJ7( zIz$%4_wQlVFHN0SE`9g#e0H0op3w0pBfi^+7=9Ed9ok}u-Mr3Og}a(+2A!?Kw(pY0 z$cZIZpho1~?~%p=;D%$KX%>!!+oR3k*hFMGr?``wL(nu_Ta!q4c|zcg7s@1i!V+xY z+{c5CSQ%#UIm1+|x3`yLlJ$HhRmcQN=S9us3#Ny$XIW_?jv>{|+Wqadnxc+ohfX6O zh2_(AB6PnYoW}YbURx^4KS_Mb0}^q?Cxk)3k~Qjvb9)q9Ki+Sw(qgXWnFyHA^mg^_ zR4eS-17ri9ovC;I9H;#j4YZ=1IwEFh>SFA# zU8o*kPbqOi1?>k|&?BT!6rzn2Qe{D%rjvg;F8ul?uFGm>X{lvQ2X`KoQc6$vX6T8H zpv(R=k4eAGUyj6k8EFJW@95qzDoB-b81@$h?=BD+fUvZ?HXX+8>9tN;wfj^6J-#7H zub0!tDJD6Wp`=5Pc9KXw5_L()v^ZE3fT>hHE$fc16hDW;O&Wi$t`09PjBz-0<>G2g zgh^<&`6c~$+{aK=hat!xB6Fh9MY7VN|Et$?d`x6sGChqgHcO2yEbkKf;R~-OMq#uA zMb9~vee^JXD(rPwITs`wj_C>%wa~76j5_x)@d60(``E2>7?{_;#~&?b@W=vOh1$RuMiGe%c7|oDOrjd>-CFFxcWzHH#ZaF`iRa_x_OQ29enF`%6QWaTLXtt-Cc7ZcC)JIKj*i+Yz1fjcRItodL@>85NV$ zA)l39Qqo!av}PRC{Vm22y4UGdo_yH0=j8=k3GxAvMmP)Wy*_EgE zo5}bXKSq7+yN67BX&_5!NSzpb+F)3*r}+T~m%kg~cw$5zgeLuAyj8O^8BSGWto?F9 zCz%7_r2EJEuP~TVyxZ>TD+r#7OT0SD681%Nk_L`g$G>3J1El z)ZFF!2#~hVzu2(X(2$A1=4B2hcNB1*^?2Yv@s&3`oKmr(V83JH7X*1_KrY9mUJaJ8 zQcqMfz+})SY#d)xGQ1l9RV=T4nI?kOlcT&2q zisP1|-A5^gS-;17l6Sn<0#Zui6%9t6!GTJjewFD`nyEh)5qS2^`oZlm%gDUB`8u!K z&}R#S*_xz2gEU9A?*d0^G*Y1v!LRYmQriOO^CR&VK3hoOH=CL->Qx2|_6$c;1EJ3x zrb74n6^6A|+etn4RU;#(CS_Itr%wrm*)QfClR62M(5DWQEv=a{uD2)&dkshC<(dXj z7>mn3VFZ4&tA~e7q~4RngUP6(5L{D0^-fUGQtq78dW&m~Usog7NBk6_#6M{w54mj@ z?$v7CC{OUc>LfqjYKoHgCn;T}5);xdo%*F0OLwqX4T{h)OiX0`5`V`4h-}eh7**o0 zHB9H1T^On6rNzv(2}|-NQf2eTWE|cd{X9j>ZE{Q+o*Z1)cV2rBEwgTt^d7%!GGTM!cHNr}!EhjZ zzxH6G*aPOCKsn{!e{wM_d5*5GiYtwu5;#s)QWh%XD}l=w<%fUB8bKu^v0EMv&V5JN zLuzblQEO&m633vRwzE}kxV`3+;|*jvjN6;oFUYSwzS%dV8V$o+ILBTAD%aLk^Ir;; z`xA>86Mv!wT_h_bi#%UXp+G15s_qJ=&Ry9M=M#_f+=q5D6d}K4jnktm!-)p=#q1}4 zD1Y0U3R%L?7WM8rrGZAdxhq6D)#=jNg!D|)p+Df8jFWKLB7|YsBDow8uR0>`vWh*a z+&j|yEa$hU>1E^qZK8BHJ8IVGYmW&@(`YvhBeZ-h4aeU!63+Elsv(H--qv$SOXSN{ z)+Y)+EwqidUT8C9Gnr5P4mYrD(-n4v#`P>M{H{?t4;_F!Nxsn9xfyyJ?(rhA*~7>f zE{|ya;esH#10*g<$JrtF*;j*Jr<*Rd_&E~44b`Y~$Q`4SWL>+p0nUydR-kKC+-9v6XS?D&~SXKcr0N4O3}E^J@#O+MBshK+6tCe zzHoB*%3q8Yzh~kb_^Z{9O+(q4n17=IbrNd1r3CqC(3rUp;$$`^-1hb`$c}*v?!}gR zcifOqy{M*XJnNfFi|`VUZlbrLsGZQY;>iOM>!345bBo!iY@5=T=5Ho`!E1x5=S53M zwsyN~0rT0U#Y5emvVEWXn>@iFh@RbH0o?wNby8an!b48pFh!B`*+ZE$KfqA~Ou5)$ zig9oKu>tJw*BmUMQ%@W7>qWCBL)+$gs3?~WNa^+u{ULE3WmR*e(;hspT9j^AR*}}+ zRs8Y*^;_^f253|3S$Wx&ZrS{&IQz<~-v>8H;M#U6nOt`{SnKvjk7fN#YYnCwty(%d z9zLq%N=$0hT-Os+x3XGtJOQy5)TkM2PnCW24I`Y}wDsZGs9FFeT%$Qbw8eJ5LEpYT z5={kJaXGlzYIJS7c%(ek86IAz=p6TQ{;Fe9evcaFgV}b37KuWDKFQf{wnqx%C}&wTSNlQ{ggH-|I*Z;_sU+BwnD z)n{@I)dn1b+y2J|uxP@PA(t4m8AnZm6K3R{dNrSM#yTbayt@6ncVlY%IUyd(VZH=f z)K-AHnZOfT#;x?E_S(OUfpY`fQ{}<&4$(*6$9RnF!_a-K8^6fRtg|+#K1##c#aVAn zE6PNBLjr3Y?8P@a$jd^=E9VP(CXlGnSl$;`uk4K+8~pPKtMDZlHtpRGQBi%dG2YEt z>sT(Ru@`)Vf6gD1T#m8NmtRV-ABgW^Kt=g`ASG6|5@-5lfdP+)ls(F#=^+0n{cwA9mQI$}FhDN3C@E%-y4r<`cXTOua+rw{l zN_KpbV2NAJNA)|3IJ4-=+`8FBMZ_@FC=mYTTk*NQNO`YsS zwMR!fw$F9tVogD5GtDHUmx)QfP!u{K_OwuZ!f>wsEV$%uIxFG;9OV0w-+LfzI4^@SxTRQw0Qr#d!Yc@UF*Vh4o-PAyV@{Z#;4Fn2S)oyL=U}dg z_sF=u)PQYh;q%WATvT z#!DZ!RxoBo6IuMJ&WvA6$eKXAR}axufBfREqyxEN6J_wzrXf0h`@#k8QuA{nOCbw9 zrVv3T$QaTom$V1YLh_EPn1}x3<_yxQKbdUrc<=%w-)BhE?qLs)FWCrVa2pn6YbX-& zJKPUl>wJTcpFj6|o+Gl15m{JRNT!uZCqq>U?P*iBDkCgY{qmaU3mWwIrrg%Z+^Da= zf1uQnPKw+&I1P)AP0ZsVYW9rX!s(}=ZB%>NIT7lpsc@G`zwmjlZ2tUT+^?kTF1j>= z{gW`m_l{4|H_y$?bm=#0wi?E%6ZfK`zV)BHTF!?iS&e-!)+~0N3}g$=q+p+WV0taD zTf9OHxVF@P5ukMu|3d+`w+`{6d5iJ`S_EV-LTUM}eRHwjnB-5ynBj!zm=YocR zSdHZ7qJ&Hy#C=n)qL47l{v{lmCHyo|SY2H_Ip|TAnXEf14`!=ja*^rgU;!$d5(rVK z4oe4TO{75r17~_OXG96Wi6k0~`2+MV`Ps^&pXdaUQ1;fOK+c`xV=GS+Kb}@d)7Ijq zy=%G5P;h4~#z7+ss4pChi{>{v4rSWrX!RLgrI;2v#}TAi^{k?%?(xIuE(0!V%+|y) z=0kuhkI#{fxbjGw=p;30If%gnt~=hI+0^7s&kH7U&&0O+Wbby8ido8M0;0FRG;|)Z zTpKON|G8T0wg*dMf^QAqm56Pv0+Xb)N*SJyIxbUYL9mxA%~Kng`-RZbx$f4D#!Ht5 z8cKj7t5K*Rw7f0V$<9%IkLF}wW^~j@{=Jt(@NKvYlgD?(t~^~iTt4Fm4RIqqg!dc6 zu$zU%oDluCZfMh9@{*4a>~5}Mz28~^s13NmOtm&QAQieQa}q_)<-Gj$Z?>I(aGio( zNBp>)+NO{)dYgTXohWEg;Wze8Qc0d|u=GbFe4E;!S|tqe*EE#nDj&bl+o_;P;5Xr> zLF5N`*>44*tYd%7=r?8^GXK57qL`Ov0EuDJ6|N60>skvWXI6X|GEg*WP^T25H5Qc> z#7`#p^o$$QAikkYC3T|xUzhl-w6jayBIkj;{%-vPLpIH3epQvP1#((P_jy^C?mlgx zua__HF7R#lh8_>n+@8vIicgToH39FMsagyTm&&E3u}b5Kief53)Gi`;=?fb{VS|^1 znf&thd=r0-TP8wtzcilI?*q*1y}Y3+zUEFf-mjY+5M;X2yFh@dkyAzCa?;FhPP6Fn zydQjxP7K)I-`w84wz-45|2TmpUb?U%8}igR9<3**HO6>av~n&(CLY?PEfgLuxEEG@)~ zhHzcSnGD&WB)#m0X+SMLeOvGCJKxh%vIUxx;bc5ANgJZhy$Lv4xMk>U1~b!h){ltdB{y zi&Bm(4lzD|Uw5ZBZEtpmdqwWMKm-_othZhXYB4=6-dPZsc;Nke*PbIYJVesXyj{rJ z8y2d|{TcT}d?ZDBB`@dt><<2flX3uJQEc?Bwd8d6RlkY*o_j;Yp%@OA603sM&57~~3#B!GO0#YT9Y_g-NQ#9xyRjq5 z4GYOab7gxQAroBEqWPbi1Bo5lV+s$kx^z86(diAf2)QI>vm_Qf`! zwq1kQM=`|kDQmWJ1L2xMWYguvu$bHWXo)gIGsUzeOX+FKU;OI5YcwCrbOg)C^vb6> zP3G5X{M+|wvo5MK?01;8GDOn)_M;N|tyn(Wxx2>cMGYuT8$gRK!Gv zoH+EELQk^wY2tkQi5gdO_~QQ8c^cJA5B}1O+!8nVo%ezP2ncO1^CVF$OwTB)AdQ}= zKLI58NGj>%d1?sebYRjms!9H_`vnax5AjiR|~gi#8NEW`+4i4HOgHSw1vg}Ovn|%2$HPM z4q>f#mdgJyKtDk!^F>I|RCkxGrtr3w$Kgs3hkRKo_zm(lzi}0ds;Z-l5zOgBn<7E> zdMGjXPi~K~4MR=$s>@PDy2`;zZ6-XHkHVgsIlQ+T3}PNLdGCP*0QcpL_oGr>sgTqwR-@Zo^SYxtWXM|;! ztL<});UyvOmONK3bj_)Y19P6Q4h-Xg3-bB!cN9SoH z!qR{4PV7B*)Sze6U!E6aK|gtZ>6M7tgwU~{?wpQ@CJi0Ckgl=au;-RXHioQ!yub{` zh%NDB=@Z^{zZ+l<+!+yfw?4D;C(W6X+B{hHs5V%#;hQ7axnioB8$~tuAHDc49UGU3 zCs;OL%oJ63)8fmDtL?0*`9Eh#2HI|Y{aq$#4Wi{lj$-0cD%96QXQzxbuZqzaqBkMkr*F0A)A8oI23OvUuD7gV6SilLQqyY zgH-rdg^xz?FLR*L_ghpqHf$7qWmslZ{?T*dF3D0q-@m4;+J8+Wg4QtdzS}%I@I0@J77A1b5x@8m!6@TKw`NJp_@Qqw&_S+gyf(IJ)bebl%m1MOX8&ARuxB)P|1^KiV6S!b8F=Sy?%E#?IaUeWv2^{X2I(<9k%!x3cINOJ zH}n&&bXnl!sqNI@$8T%bKGG!?7k=EqmC2WH)!UqmQXK7+O-(Xth54F;lSE;-%+1c85#8F`J%=uh(}-jeBQed!MAxUiaR0AGx>gBKjYX~)Wb(S&2~nP{R3oC&M{Hq zNkHP7Rp39KsObf;jcPt3L5TF z{YYa+JMl1oYlOA7ccCGvv;@QgHgwml!nKW|KkF#5~_{x7S+2mXm8$02b2E@DpHx< z(>!^%DqT!Xb+CCoF|>P)^zuP}94+fJUEbM$#bU$4yD4gf;n*LCCUu7(PJHgQr~dL) zR6<#eL1gmgs<5w!9skwwFSnaKH*sfoJCOn;%T5SO$!%f|)r&@8Oq z#xgRc=09wfd&n=$)$PnQ|Mvsf zg$>!`pXg-y5&(J|ffzc|@-;P0`f?r={Ec}y{Y9BaUfGiGh5zmm=4tmrT%@MQ=1*UH zZO)M&o_4J&ewY=(AFsk}7Hf`^C8fEzFU;%L^A}%>+vmJLe1(}VvrDNL>``cAfuQS2wn;;Aew$GX3sr!a%_X zx9*vuJ&PT4nc#DVj$3vdm#JS(SXb)@dV;6aRJl&t0HPznfurKp^Jf9Z=b)TAh}4%iMH~} z%pVM#=}-O7PSy%S29JX@K~4rlwNk{F)4KGvYiV>ACoUnJjgQb?EYy+T?SCum1X zQR+?QnJ3JbgV8yxr;!7f?^$My){6AA3_#&C<%?t`K9Z}46x$7v^^KHMxmkRaoIAcw z*2mnFTD9Y!D=aRa;6)njOb?^N!e7+@7ZgDQ@8EWNonyJihGpf#Pg+ZraNe&Q-*uci zLr%7Nn~U#-0V-qHPWI(0>T3o)*MHr#Gwe8=Xv;RBW1?gkwzeJ$(P5Xgb9#4xMnUwT zPj(eLN1oK{o%2T99IusQy)WAQm2`B3YDe@K9?yJH+@sIq1*s_CVq#)~e{0#=`)KWy zI#ZaPT_Ii{SxS2JV*gm0^gV-MLnXGK% z-cdCO$jMwHm&>k==+gHDVN=mUE)yO(K?qBOod0Opj*-zdPqMp}_S^i0YYtpr-PpO1 zIUFR!Q-n-9l9}*^-oAp5IC3d%bbqz@=COxmYnOHLKkT*Zdl?K4D8@c7c@esMa>T^3 z4}V-!&pv)~Jl`o*@3DyEIK1tDtfTYhrCz;tW&`!jF?Rg^A=E<>hwpWqB!wh;bq z=e@D64axnQoS6RN?WI=A?`4Oz<-`Uvqt|2yWo*n=Qk%H}f^nzmi4#4IdkL{RFAluv-gWFqdbxlZUEzd63oaYiI0>fN{Qt1ToRs2*8-YDZ@{Pqb z(@MsPlz2C!D(w|U+R^6=U}7FwAN`E#NDV7?J@|Z$Qy`;SMpy!aY^P&m zV-vEJTbLeBi>ZKJ4EO0KgP5>wHAjZH6qotM(C4m~^W}@cCB*N)KMD0{huFHinyn05 zjz|Y$cRTOpHM$mg*}=`MB-<`eCB?jEYh0O_6v=vEH64wjO+WEY%mKK1Q#XhC#Yh&! zm<;Edt31Wh>YOZxx?YVC{Ue+A5mC9OW2S}gofFCNcI+r$>|>f27>Vs6_YP>OE>OdS z4Nb}l%u!>%U2{6WvsU`k*(~oOep^1)Y4zR!)_gex$Q|M=W>qDCJzsN#gU^ivL^cC` zL6q5NpA8VEEnn`|s*p+T{g_y}<`Zug3h)WJx@zJr@mnJAg4i_oDUj3Uk{e_gc+slFITrIfi`L5K#cH&2= zBXhiwk$w)vg$9JGjqT{dK7R$OU+kR66EmfCaQ}r?hRxa@mCf~UG&D50$HH&QJATEU zg;)it;^7xH>!_L8KG zZKiC)`p3z74B^m^DgLod{7jkCx#Yriqx`^H=2d9gwal$i+6duWOlP&w!$ zb^ujw3^r`_pS94HunxL``(hy8uS zjbO}!&l1oyB1MeGRIyx3cGdIo=p)3?2c;bX~|=-WVzl6 z?bQ!KLIRIInJXk;U`yd}4WoC1!o_v1SiodWe+vYWB^n;1NtF0y}`8r6&kzyp~>nk$c0ns?*^9}nwj1^VoNKt>+8 zQT%(EgI88J*dg?Q$-dU9kp;YE>peC4g&HS~OAaYdeDWT6sqN$qwjvg7Tl$PH^7-Ll zSy)@#owk_BMCD^TSs9p?4}Pw0UxWXD&7F^pd9Ox9Ljy;I_GUbm*2eM}AU)Fl8x+cH zi-ws?7AIS~ZSEuT@hYJ~r2e6;+0*%9qo0|K99|DE^b-PB+382>Y!}L)PurAw;yz1> z*N^M7I7a-%zOWK3p{^Le-4GNMROj-hcwj&)hNdxO9_9APKj>?d9dZs)HvC+UXLP3L zB!tGli3&MqSL6RgI;ZKm$QCvxGnpf4I6nu5>NOcIXwu4H0;2{i0ghbudC?iI6u9^P zPm{IT{g!4>Y`s=UdZdRM=E<2JTmgnR5!f%8ZPDD8VYc@T9qm-oE z!AmW2yYa%zmyMTB@6}#ggFpp^yWf8@3q>1@j|-n6L+;+5D)CfO3SB7;riZ7;!L4`b z%KohX@_vx2Y@hed>lIvRFO$~pdO1|$uB`nB_raCgc7P>DGjkrz zIu5j7eyP}83a*)sZeh%Do&}v|WCcA?B`q#{%e`8v1lveV^vqm0z|Pa1Ltwz(x@hnj zg+q$?-h7Xlc)X?HPFbdvb|S}Rbtp3KSH2=Dc9W)3O{V1>1}@`eZN~YF2x!sCvHZYV zL)oQnX#6`Vm$i%H7dpk=*M0VnXj#?N2flve+sRv*&MiuYsVW+1xCHUY%78b*HMvyr ztB=fbU){8MJZk&%2Ve(mw&N`!#VswhJbt+BmXnzCL&Vn#;48=A2z5|*YC+}_T-RBc zqovlGC0>X<+1PJPFVdRP>qV)+&dxL2l76N!hRjR6SeP7}OY)d)`5gA*qGlwq_mRF! zHWKaKCpBEkc3`$$o4LRYlmn!YXB?>G#4BTVcG%?C(5tk75FEq9-MX6$JemSkpM(hYC)=X-;oh@(KR*1BwtYZv z*zkc%TEq-g&KQ|8Vu+%suF9)wxS1arTirz`r3e6g6MWWT&}Bd2!0TXNO#Ke6UXWM~ zQ|;M|k+Lsmis*GrF%$Q0(@VB@=(5-7w`NNe@OAj#6ph$^w0z4RrS@nX9Gjt`KCs-K z(dx5zgtKT2Bs^z_q-g0L2Fg^f+w06PvswJ@%boi0CNc-paJy`EfHKLw;P21101>-K zGpUMq8c$I6ZP&a}WF?O@P1;&!PzZ6l)lAsu0S#y)@5Ycy%)xt|wi>&QXlaom#W_I- zh)h_q+rN*|BJ1n*O~X?0XKLgaarEn_KZ-!DUrXnUdq!$)uN8IY7R+R0G~Wn+^O&9L zm=c#<570y3IbTZj9bLAVHJ3&A{GJiHeefvv^j9@#XWB!S!)|u5>yyopjIXbo zZy;1jCPySzy-F0Ct96@!l?^VRnp0X9^Ex5T!_Br|w{^|`%v=lp&`{uu_@Ye!(=-gY{*!T8Q zLKjgfyDGd7c{bVlRvu|_5f&~a*z2Aw+5~~6}~^((cGFD`KzT=)y98qQd)vDva0GHLyGymBXmd2 z_Cikz;^qC4luWg}PaKh@miFahxik3p)As-Svas!S#zaw;avU1r{D(y;xfE%F{tH5T z?{WXIq&M1p=y>&5t2q`iN$l$=>0L`d*{4mmdd9`KRRca*p&?}d{XZ@sv_N31M%oFLF0CwtJ&6Tjfo?YfvfHb7B1SfNR>4d4I&BifJuw4{G1s$99aw}$(Yh@#?iMn{eB^3ioJ;&ons?~ZDiKugde#eZ^` z0JCefvJ^Ni*$e$!?|+>G=XX6nw^A~)FbQTqPO*UB?59r7K=1FWn7 zyULoG{9~ts+`%-biT0bnC20^=fB%2XeN|9gO&ews0t62pJPGc>EkJM`+%>qnyF+ky zcZc9E!GgQP;O;WG?cw|We`|MZFZOcJ4OKH!)J&iEbie&rv#)uONV8FCIQjW=hXDrQ z%P~K7nsQp?Q{K^VNr{mtX#Bvgl6MiV(p?ETqSisxPYz zkEEm6%DiKky!7^`^MNoqgxndBUK&{?Rdk1D$)Tk&wpm^BtKeC(*r(YZ$l?O#$ zTTb_g6;H8y%{lmQi@On3*u>(I5nrN_2Db5Kx2WM%n1BQvKsGDal{H|A#jm6W{B zyNz)-BT#2|DkP7zF1hj88sSjM7oIq_`(o7UmtiH;$agN)6x7@^Xyy0#XDi8^W;BVG zG$}0`fRY9?fqqO^}g$YFT0}x3=F>X&~J;MnokbG+M3jCa|;Lsa!9H?eS>|r zd;O7IH^#hxQ8!pIvz2)f9#20Q&&h1TXhkZ4XrPbyq`aFM{JgX!o1xz$)%{cxU z5+a>%vwk+Z6CmTsK`2hlj&)~p+*rB~kF1Gc7)|E#u(6d}(6ZY571?M{ zd~LG~*h!F@h-Pb~=jh2J$5Ho&(|GT8>Xw=~T$Vf+EG*m{N4rdxC1xw<)8dlSlA`## z)fTJAh^J$>F}#j%cLBFz97b3wV@wwUynHJU9^`>cwJ!7Ex>mHwo|ui?X_aubalYp| zeG&04le`oPdsO4qT)?}{w@s^Hz(GCj0kO4BM_-U7(#@SUNi$15Mz;R;_CtGH1 zwjw{Knlb!wOMVQH@G>%0m#8X1@m{Y@hR5Yi3%uO-_LA%!z^OG@Ok_)_i;ESE5OSGa z@WZ?ob4cIJR8nEKt?72|(N^{0pMZ2DS{}xUhKVfi-1x-gl)&odABuC5PixCTi-D%J zybQVT^NO-a_H`^fSN!>dkHpr3z^RIdxMk7)UJLI_A*L}gQxR@H{F?;gt5MYNrI14c&2Uw8L8NKyT?fjG+pK!6&*pbvf!l zxYHG@>63z-ojl2akgj;ZTqnHu_brtj__5cyyUwESN+<1Px@V)gAx}W4L`Da(ISU0? zTE*%*V%4gSgFAHAkmJ}BWoR9Wb_vQ86>3GTkqrW*YX5=Or!j) zgbb8!G@2^O;3xR?&ap2BkSsQy1HmyE*4Eu-iB=nzY!pDUl=X{JjD4w&BZ z`Jey<{(+z`$9)mrs+J19p^_}MwFswdY<7c6WorgTy zmc-%Mv{3;hX^rt+nq?bj74|ydd*1<sw5rJAx7o+g1aK&atpd9@yh z@_gKIktpQSbO+>SU_dG2O1-uKKRgWQe=yw}CVU64EkCmb<55u3Wy5vR7p&eAXAnAm z(i1BFyFVj~%RgfX6{hZK?)ntzObb<)ATVrsEFp?GP-Q`!7tIVh$Zf4T%xwWxaj>%~ zq$ul83C|U${z>;jH)#doWj}}xq4NsMP|2oBf5N7qy6+jzN&bA0QkEy~A|lIYv#cqr zc$vpo>><*I(7}U6DvIB-*Fb1W=ybYXj2TH`4L6^7duxa#Zw>4$fQ3g%nu3dOFZa2v zmYK!&@|iOg9#hz%gt0HT=a9`7vC{2ES4C&T;bkSM`2%F2cI zdfOYBs+tGWZAS<3&xuxp)GK1al-i)A!hG68BGdDh^ij23H7#kqY6K%91c zJ>qsz$Z2mebXAg7IHFkT_$>Ahr~A8``r>eTWy5Nmf1^_N?VtFMNK@0hH*p5>Ls*(k~#xNnahqs zs#gC2(wrrRQxEo3ONNLJ)Xl~_K;Of*^cZz}$8Lftq~*0~nJSuVSVKa^`K9tFyu}1) zEr_4@6{7-iD>QnD z+BTwYJIK?yyhc*7ZJnPlZ<+w3Q`3_(cg`y~nty~Js&F9TWeG&bmRD9zXLmb5yKw>H z9j=!8xS7XGwb@RJ0Z$AdC}><)^L)PG_wC;5&M7+z3!||-2YQL$rgzUCWq_P1j(Hy* zS__aMbpVz+yypf=HO_4(R$|R{zgHO7`z9JqUP-CMGv+a@+W5y%RAE^cOu0SXOIZa6 zFEyX;tl-kIyqyJcM$FNBNw!*s9GZs>b z8cJqWMxNe%Qe`7-m#v8=et5+)jTVA+zA!(lh0r7=T^gkJc(YF_Rn#|+Nzxll_ULVW zW;4v74dd^rna6u8uVECmSyO+=d%$1aR=`p$OZ#Cy8 zxXMGf!*Ao*AFs#tctR#tf~&gUuz4TJ{Cj5GfJ`J%gXh?em9g|9n#Fi_-efe6L6*Tr zV$OV&wrw;gp#Y5zA?v?bKwrbu-$gZ58r8OaPviG)4gLXwG)Zml>(#1Ius2O^)VFb~ zO$UXES3riEih%s)+4H8=XYlysY~BF_TUuXKKwBAn6QH3DX}D95*tE4-Q%$t52-{md$kMb%J(M{RkAx z8|T=KQ-j3QtUq(n@hE;zrr=wRt_z_6euOJiGDn<3XEXr~R<*DMZ{@OJJ7lXgAayz&o zMG(zetiuQ{aA?fkr!9XMXPYf8WKDwdjfakTdP z?2}VdTz82CG2+6O$Q9X^Sa_KV3JQWYFafx6Hbo^x!x@YzgyQ+o=cl?T$YiBYT59Y; zvV9Cz1Im!!DPew-;Vh|%w)?`GnaN!PBLhQN28SQ?xuI(vYDw|2H$PtcRts@J_~}}2JuWk6(uTiw5S7KbJ-8VdH0{U+DGnJ*66k$hfAcwDs>tAl@veRA!f z5UA~N>8Gcjb{=p9U?UQyIq6=T25;A|=bjNDJn(OX{bde%lSl`8*i~jM5U04$>afS6jbZi_EG6nZ;FV!=1-EB(z-Lw#hup%%w@&m2MyF zC6|2~MmyO}Vw+HsSB^j!HYBao$p|?F*^A&@pL@3x*%OYpEd7OYty1o)FfvvZM9 zNa^a6AAVimb^7|9g_2DF)MrZe5$1%B(>;iF1p55By%0*iI=0K|_FgEYTq8BnAtw=d zhV6L1vrv=v+zb*|MVDSq;lW*+t8=6lyuZH%hf9fhIBzFOd-vDZ)xfJKNceEg{phTl3y}Gx?`?oPjj|_PZHO^r1<24w0t>bsIm^#n)@3qsU{DImiOiG>df=D!osa1^=fn6 zM-OXQO*k2W`iXC7l@IH6hQJUSufj0Vl8wZ1tRTWwZ$M+WpEcthoa|BM;waP2Jj@Gf z$`KSB`eOKwsXZh`E;MpP<9<-;S3%<8r%MGFad+ByrOYItY@F4qBS@BAzN*2PrreuG zKPMZ~aXKFR1G@nzu5dbZ3;VD;dH^PQClq*{0{NqB8SfzGIpHF18_N8?1frAV>xSMC z%)-FP4sanUDJ7vb#BQ?g874Oqsm((~MnU-VEySNwPk&NO&oB@$?B1YC7lxyq1-$cV z7Q~2GRO%iZ4nb#9me(ZA?E%pYNP5~<#+8{f)I^2T6Mw`-m@em}(^xp)KdK%EnSea* zlZ>V;Zfj2-qr89Y=*E4*K%>25HL+6CQNp=?6i1PtWSr+JzxTx7o(iuUVyj}?o8<5+6h>wquh7FA zq^uUIt}x)|)(oL-%=mDqr11ECxsKLr_0g!(6HM9r?b{>~5VgoM$0L4v1PA@R$x30=KHqjB^qY;U>kX%?x4kxBnS z{QhUC(s1;z{2Ut8nJr3TIK&V4XPfO1j5g)J6&CavSG!tt9dyE)><&jqyLvAoPyn1D zJ4dl3pXq7)5{G^Ncod*eUpCD${or<8U0*lNHl2DiBX{@SNLmvgBGv)e-6y|A7M=yY zqRiemAA3I<%?Z`r_D@%pzOCEd&ch@L*ivu^jU7_gQ}fiF^+=%&z%52~dFw?!*?)$x zzXNi3ZEE5$V2?mDN{XgD{c(Y(1X7;(pL6!M{uEEI=~3b~mxR0G)_*cjL8Wf5;bmZ| zk174~-79(`M)!IQ0?Yi7C=O_DTzmkbU)fRZ`5vBXU2>sDPkvaR2O3-)51?yTrU1(W;&2=Qaw0^<)1vcBv*DWH^rOHA^Yt(7ZPfBI9NIB8xWht+sLGy zKS|^9;*O`9T0#!<3|g_31-2L?gocdd`($NgC^~lb)Fs(|jh#TnVaSN`iT$}R=Oui+ zadtHgyfO0o7YB)cBB%2BBJ`!D{$BFl6%h&Lv43;?c@s4|I?nR(VJ>^@uZK7>0Muc9 zu&0>#UCa8ix=VCC}Lqg-@4APs(BwuthqdldhP5_HF5aOB%C`x6z za;P!P=i32!R8?#1BcVrgttEAfh4`MIH61~giVo12go#UwCbt+jr$0S!aJiXzd3zw#P0zk_KeX``^-Yy4&TCsuidQPx+mxF9r;hn}r`Z89NAJhNF5SEqkF z4@+bIws9ksOf1qJTgmg41aGRRj(Bcdk9wKhi&QLs1hjK>y6tvUTF<$YE*Wa)qC9Eo zG*4~^P?opr`^@)xA(f+0$m-OWvm>ctnN6Z%VkRqLHqUHO+DBvrXvORtCsNk>0pt8J z@hJnh1%2)hbi5ZAoc3RTdNH(K z*o<(LRA1s5Tzt<8hQhOtm0m?VUy;3DT&$y%d4Zk+Q!&1BM{2EtRXjM@ z0?O<}s~m8aqUmgHEeb!n=x|?=3UF2K@f+BWTbO9z~wK8o8lq)xN z#ltbPOqTFHB82wktSgy%*=UE3%=KymNzHqkyl8vZ>x&|7DL`n@-0kD3xlk-*cNl5O z%T)ue@MY0gj$o}Eq2o5PXu3N3Km+_%?PEK){4GoUS+NBl@k#3-SK#Ew25ldD-e}SiIEA+$yGmL z#3!S(tf#qHuELx16?iA{QlZ&o|6N0OX>maq!-Y{;?F3|+Q$~$$)D$fcaf&;ayT2$eH%)VSzkU~)YN@0!KK3ECFk3BGLIN8h zivUh53(BbWPTHG)XTk@->{$6UO-7tKcL^3rVaIQqSRZX>;U0QiPR(;(?D`FOwvczUZANJD%2{S(PR z7=mW`4oDljZchL1n9$M%z1y+5o0(aVkogjz&|J1h9Z7UP0|XPFth$LxWc|*HS~;{) zKzwr43j}f5Y$5(bS9v!VzKRRyj>kaMk(o{XVE0-owG>>BW~ckr#^jliUsi06JJw5C zng|}$hmmIx;gZRoB-mZ#+l&uhuBj?c)C7Iix$o%iZZ%@Se|kzbeFq4bpa|jAn-)uW z+s;eG9wzL*lkiYGX`{!tfXtQLMLT;5+MTE~Ds;DwSc-yLBo@lmBQxPp>ra>d%91nu zys1vlzlqyUbpzpSX1M=cA8pxIH+M*NueSD&en}{I)1w(Y`7l&1Kt~kYCUm#d!^2cP zX=OA&J5?i1jj%LX8bktfTXEGCO;T)6;?^>JsnvKhr#>;2d)P{&UbVXyplw7>>A_Dzc zJlRA6GfWPiNXXvzDEt2a)IU5DlJe&p=sn11x`~7WOmM1heD==oYMy=eg%DRhq`wQ` z_>ZXXfP-|#w?OF_XPTV+^p`kx}W`AH~Ahx_p&P7e*X>1 zKVS)N-0K1J!owqcnubC%$mu>Gf6P(#ElMGHtsm7HSQdCqG!x8(NswAf&r=p_qnU;!z!te?W zU}FEdWDphVDjMp{oDZ#|W&eHY&Hp!N0+b-GdE}ITnO4F+yHhizGDZA>ih+SCO47uk zD=Xz`NUQC8^~imLcKAxXcXIs*#$nNYQ<>_LfmUjy5H}+Up;3ruCeam>m1TgE!Kb1c zJivYQ-FVCkYs}g3Jt*jLMb0Gf-#q5*85mP~IO$y&OMoSfXqprrJ~d&I1?gE<`F zZEq*I|K8UB{T|MUb)I+pdBQ)k*5;H^00u$|bd*wWZoK-j^j}Ghx2}wV!;h@or>CQV zKVR0}Q0@ancnlpPPuHrf1^u|x>rcY}q%*F?Gdr0vZ!bj$k{LKDh9QQkK0G1cC(fYE zA`Q>5+-CoYMqG2KscKj|pXoXg!TEHkx{$Kc^z7aCPLV}%F@^AbAYjG%=ZAPVE0e$d z>o@+vOri$Q=>$Z?_4Ny-!OMjFjR5gH^|-~=Ko@GofsPyYvpZYx+iA>_NRJNB`zG`` z1x5v-^IRfA zLJQ-9yp%lgK3~litG{UbDSJwaiHUW_XKnQ`8<6J1qo=BUA|=nm#O`=Xt(m?RtF2|B z$QlrJgJt7>9rU7bP7WbblJAqVgBwTrhv>UB$c=d4T_A;*Mqy@0`eRx#{|mN@>NnTh zHQks%yh?<=i`-#-aen~aAr#mv+A}%6*6$Ll#OsOi(!2F#rZvR&W68Dr%;8FT&;+WD zg0lJexSFQl*b2wH?E35~La5%vgfyJz&uY)us9z6F6EmqR#+Ue2RTsMY1XWdo+brtt zNbZICePn{#LWj%4W}M@hMaM;5L;m4giaGcHM90M>B$Jx%{lvpSJ8`<-*hhG7Yp&0{ z-!`&=6MG@#zwg1`9PWv(kdI)Ca6HzJ8)gx&hswS&UPd}BumNSESbpy>hBoND6xl4XlwkP}%} z^bRPlihdxxZI9hnMr5I9<0#5okIVg(Y{2j@lgW%zUSVks9X%7-+3nj^bXCh5BS(x= za6MgCEnlkD35!9P+rk8C0mOm>>3v+XF zBo#$Mczf=u>-#R{!5p)a(AanO^l730^r%#8)#l@4~ zbBTJfu`sG9`yAC_C9>P4#NcuV&~#&|-7~~jYpY5H>M7XB7=2Rv21g}DvK)B7rB#mR zdIvs`v!7ra0K?f@Zko2aw!Svl47kgvl7DJ&|24 zA+r=*X^=qd%cCl-+G2`hgwl5hEl*2NeH9uD!4Wksk$~R3LPHyLb~cNsO!90@>1Q-c z=z=SGMGz@D7dDTO}a0N1C!5AUOLcEAR>yd$1IxU(^JWN6-CyVW5f!05V{I`{r+l}kW`E6;8jb@SV}mHp;$Y8I zeU{F0e#R||>t&)K-fZUxQNe1PMxoFtqys&Hs@9beX|)R+B5fm#QFBRnxJ`q+TP{ihyt)sZ)P^EZOM9WVuEY<-hEn_c6Y8{x&Zs=W7TP z#dMajfU-!c1Y6#u?`@C%wN}ocx~#0t@@9w;A9uvB!e4w6A~hx0;yrRu#9tJ1w)Bc- z1szzGQizR>i+SP0U98#C4*ZcvS(o3>USnavz6T?R28YctjkDCm)%}r^>+}c<;)|r9 zV_=?OVqnV?_0^I%uDzhnn8cIqLv<&oVdb1yUR05n$nDxKhJcD$OVulE)Qia14jLdd zGxz)_LV|(4MP?Vp3H_kYrIn_|LCbFT^lM){obE{!h{L_o1j8TM=vQ->{Y{gE0)$Xb zgvSf>rRluBv@%f~z&BA3ah__lNGHED&_ND2H(_bS{>YySmk+m`Z)$8Yjb$tgbF*ei z`lrYzn9#uP=G1@Ucex*Qxp_{Qxre})8=CU@T1QzWxo1*lBeemd0GzHg7UW-=E(}zmI~#) zDY+2ARGqtMj65o8YVMAqSCNym)r?|i)!f|a%G3CtCs#}L8t3U3p6Z4=G>JUe$js#L zPGT~m^KlH_SR*M4rCjA_w9U<*$Y7v_#qwm|MxuqMfy>3E3D~O5EPMG!)0(hiQ!qRS zb|v#vSe0-wAr!Jdqz4Mt)tfjkz=v zD@Lct9f!d&(_G3MNmbNN8)3zMrBS{~*1e5`Ca#9FWkS69dHM21d>y?vc4Sj;xYJtn z9SSH?+Y*a75=%ag-Q3jIvyBa5$_tg2U<(KQmFt`MUChk_l1J2$IUzyDmHH)CuwzgW zp0Zd)*^zY~oz1|ULFEQ1U^b#nFZ?3pYDxwI8bao8letEefooc+(Mq!$AWB5;Jh&n? z6&0Dh;&QF^ONILa1^WC)-^F>8cY}h?2d2dXIGoLk?ns^r&iEj)cmdb=c3IUCc_o{W z1WiZ(l1dEI?_PaKq@PJitF42cjp5ds3s1ib=(RmAyThLvgC(Q~@~%WY+tJENm@{Vm zceRDgD9b}Ic1e2+<&c3hk75#HzKl<0za=}g_!1X_U|W4T*x}EG?KeBn)s?g5U%Lwx zIt)1)e~4bl(J0RQd}5PBwH>*LTXzTly&d;SqL^qTS;;xYE})@etVBFI4O*xHgC7YQ2}$qFLa#3oq0!QylqSYTCJiR%hiTHBqO$5PCqt#Qq^6XE3;(|A z^JIg~d=x0lIOH?QaxPalb}l?#lN01vhqaHmm%XaR$r?9^Vvlvy=lRm$4?0>Wbb-4S z-*#s?ldC@mQik|%O#`diNGd}`yjkoY4lAI5T;{E&+EBY z^!A0INn-?|SW9FE(ZIkUyB(Q@M&7R`zT9N~iK0YMR&s5;zu>V4fZ#^N<<gu~na2Kohs% z4$x*A>sDNL;A8s&%E}?>0ZNa=5Op(M^J)jE(7p;})npEioMqE@pNoQq%fdzm4O}+9 zi;W+TA82=NUe?+(t2-G}5fN)+4pqit_RlRnPBJAKlVL2WVq?k139kppXh%JhG{s7Q z#OF|rn`-TI;zPPn)f}kP2!z$ci<_b&DzLCseor#7tI+Bjj4xNGr!G#VnY4|JjLK(S zmQX0?v`%JcgRD)QKH+8=#|ZzcI>@Pb7ZG`XQ_akFw|f>$&30m~H+|QtrO5?3onZl* z&Ep--8$$mXT~^K!F6NIVhmho^tVs8?=+v4CFqdK*KbjLc%@TNGL7_86{gTNFMpz;V zE*DKz z_udFQ^;*20@LrjI_i!2=Yl5SC^i+TSa7!pU0SW_{oq zUYU>anVTi_xrlpVA>XGeS;sxB?9jO%{0qLkCq)ex!Ss@bJ-^(s5(*n>pc) z{&`pGPIkm*z5Pw4@lp!jr{}2)`9@ja95i=%GAcAR5i6ndLrC4T=}57wpRudkKN+wv zE~ru^m*X}zY;Yk|KXn@@C!vSR^|%wOYp$@MvQ-5{8IT)_G2P_=XXLRSyRl1HE~9>e zuOU1-Yk80%X%P)7Kf2F_d=)dS_HX(Ge<$hqN48yO>Dof&cHfL)GHU2cFfp$Eai^qE zq`NN0=40Fi#q@l&8Ihly!d)h$BS3rf?0LVTNrU&!3>)gkl9$o+fP7l`xZ&mTl73=* zOMN~`PM*pMT81A=x60r2Gg?(`W266p$wiq@U@>ccd9JF83<!9LttgXujLa}o1Up0%oB^P!#LAN3Yktm-LL2=%uZVsUERPvezT?u=&F)F;e2p_ zM(NIVHZ>)(w`9w5n!D}Ua!_~d*lXjE)L1rG%^L$S#tf}pp7`q6=<;-n3jbxX9XF>N z<5YLDkkg}uMgH`BTX|94cLIVHCj@D#7x`TI!2(JuqQ81(z%?Sj#_|O?ur{5@ z1H=T`PJRiuxHW^%;dJQ0ZQQu}C;1GL39g?mE5zPc5E7&(D`;wp^cOCZkW{s$HvG*6 zCDvH9+*~ z6L!Q&(4>1`5J}WKfn8G#F4=T#wF9zZ=sm^izw^&#(I6K`D>0 znN;*X#p_N-?K8%&?_S;5MZ1lA;ni>k@m&fFt_J!BMhPEN`45BrYQi6P_-3+LenV0i zp?7A31e0}9;)t&C0e?+1zriA#7nJ>9erYsVKG75aHp-pwVA{@`pb+PHET(wZ% zsF`H)2Q6Lg&ve%)b4}e&rAqax*B`GhXt?fA=ciJ>OFYqRbE~tF3E?^c4w9OmjIoh* zMDCDPZaLa)Pb3Tp`4l%vSu{g=ZWY$vxfLK)Pfr(D3l=guWCeXe3Q#TSX=Y-k_qM#?1-L6H2IcY_8+8+qBqQVd8ldQB$!+TvoA#I&VZ zS>Ao}n29mbkT^*X;_SL~91m1@;~e6ReLXW{)A1V0;C%&XT3$&ewr>fVc0PZobBWlv zTQ2a7rfs>|7?|>=!)9aQH~0VMzX|nJ70hoJBC09zPk8CZW>$Q`c;$q(jstG)GE&0y0M(<%lj`5m-7!mZ}BL4Ds@usE6{aA2tkN+ zA6~KHv=EVmV5MnYUn0d3Z4X}_D0i;^oH&{pQ$Br=os*U4y>nkHyO?_q?c7Zf_#v`I zeP6!PfZL17oPdTByBqXlCCqg8UzkoTJuN3DHSq>~k-6$;?6=2!w6hHsv^A3WJQ?n^ zQsp&vr`_mh54DDglZvy42S>ExRuzl&`k1^adBx2tJc8yQysdUw?Cgm)kD{Pj+`BMO zFLKV%CNmF%P~OnziP?#?!|<{)W_J|>>jH397FC?&TxdlJo@ibiYXNv;UBHsp>l;4^ zWDQ^czFzRi-0W*@GAat4Z&u)D%7#_OvgK4>@xe82A3^|kjKbIgvemx5ffgxcC?8hj z4!y$9P=5MfAkKiYW#)Fy$hQ>iYT^Ham*N1T^=2^p{{T5%Hq1?I+5^cBJhM8Dp%XB+ z|AkI5K;BpQTgC<-v3Hbe{)J^FUR}GuF}C*baVp%zbp3PKpU!W;_W{hW#3ygxR|s^o z*wn`>1EHZI}BtYH&R9cpYA8j2uLk_rg+H&-> z46;Y31S|e2t~X~9uShjQdq_chL_i3m)IU3HU~-0i^$`WsH}gy){WA*QPMGhIo#~B> z;HO6*r1K0q9l=LPfzl$8dZl5xuPwyI#Z5h{04uTK9RI2)+*Fmx%*0ep?#+jUMt$up{~3wz zOV`}@MGtqdg|kyADiHz2HX6FN7Q*dN)}H@b6FXbVrQRV!af2%emQ?@??D0}%1siKAcXpdC& z{i2$qp5Gs}iB`=ht0R8`_(6*sl#w1m0_LgL&U{2oboHK()ymS+P)&SxGayQ1-`Y<- zJ9drSTl(9pA-Y)!`0bt8f(uw}uW_fl!GAQ0=s<`qCx>?TY9Vn2z=3xR)h(qp@#dpn z_~tx3pk~^PB+c@>=Z#YF`B}@CJwQDN<%Z$uJCZo)nCK1mBRk8j?zp-6#plP6s(K|X z2_>s$BHTa!4(b~Wk#xus8v`R`Zz35c4;s4T>F#vPDgm%aXb0GD8k~)!HZWrR_4n_O zL4YT;Hz#;6+YaD$trog9J?pyAEsDH ztR_<$A5S|j?SF>ETF^Dxe|>~3#{g!PFEO$BfYnGbTV(em8i9GmH$LcB4?vi-)N7UUG+or zYsg?sLK_LS)UXD~!9|k9`ebdPFh2b_mO5T|;CUSZnue*YEHr?GgN`Y*cuK_q!J(ak zs>$44?iPtoY+aqh&DGxgq$qck`wJa+J}K$hE#_RbUje-tf$gs0TKZXkRMOGC7dZR^ zEk-`EY=zmXuTiN26e1z+OXxq@9aoF^%8UV5mN8(B2WI=p$?3-;FKJv)49p=-#oEaM z(+uqVPXjhiz7q6lsO~r4S1pf**E0x?PHy7^;iS=_J?~(p&&(Iy!jDE4x}4BId%)f zBl*So+u>N1Ql0|C$o*xiFA@e~NJKU09@6<0W`lcBa;Ze3R+NY9qA%A+C z-i{?;x0B3?3$LoNFX>Ds{5Tvp9rQMl5JsbeNw=?Y7Rld8ASnkZi=hgS|N4}pX9k3X z<)@flxNQ%lWJKL{FS_FKfY=0X&bp=F<|}jPJXR+g!&+FY{S~1`fbsn(D%A#)Q(HeE zz+ZG2%g2F2LkI<0GRBphMsYr`(ui6B zo!Cek#Yo+fjxu^zmt+*o?aK8jg?XRdRxomB_OYzY+_kDW{!1oWxRM8O1ncg{4-)j+ zoR))o(dCE+nmo5yqkZl+)uJ>*+9Z-$#29C{h-F%EQ(UVm3N;W6!<4s)GnxclkrpU!$ zV8od&G*1C)VfXP_1$=kIrBR6qA)(~`;cSb)&mL~hj!wf(XOYs4oo&jI5x&-|#5x?a zpnJ%{M4<%nOjPGb2Z5_3^~7ApP2Y_kM>-D}$ieC&Gt=5xftPQMAWrgq#FN|A-swbL zF5gxJ!83=HWd=8a{Mc=V1e+;1e@@g21vrn5R;c0n(SzqJy|jk@T$S73=VJ?9(rM_0 z|6&2B%OOL0r?lz5_jSr>#uS}b+I9BK2zk(mE9AEmtK7Gs)vq+}&O#~yE8l4@)m&Gx zFqFbvC5jPaUs9vxJ1qYczqZ0`qUsVge(IqpoDDVKm{c2e1@>}{VNSnZw%%h}s~oWD zUlAS;+SROXDjc=>6Fq_bRw1-qT|vtJihCp7jFtH}7JNFrMGYA+_=AIx%IX+f!7gs4 z%+~#uqOGkRz=)FkTt+)g_?PtCf1V?6N+2NM5z~?lghl*9;I`49TW2@1i0n8$gt@gX zSv5C$xP9^9;DdbQQ`knd)%BAm9M$_HYZ7Ln%o0t)R;0mkKq;$mcQ70G~!RauFi{zP?E6uIsxftbd46T69?`cg%`VbD+olHu%puTp2; zO(ksaSFpF*M|Pwa9dll{y0l+1FH6baCAbp%K<2o3mvTxLkg?L4^P4vC8*Qnp)Z^~G zy%v_`99di&kJFSxmR5uzM4rbye8qNBF$^cuhZS;^g9jfL^*A)#?0kV)9f#?@LV?~;KXk-4BIwjS6=$gP2GR$&y=yQL%8a#UgYt4?QUUq;f8>YS$;-FYF?eQkwb;gdWX zdhuX5@-EXSw63<~*gR?d8`OI>Q)I*BLsm zg|dC88^YNxA*|p6{|w$5v(0Ve+-C_^NX!)x!$DnFWp8n1f z4q4(gxmx-4?zoR2F!Erfr0QsUqCp_?vHqpYZDF9Od1SVz`>|Y$F6YpU>^R#)D_=sg zV`!HeyY^>(hvgq3bn!DiMn$O|=NM`tnE1g^Pj5T@5Ey z2&8jySFTa~udpGi(JqMdqc9VTZECwi64wjJv8Pn<{;n-_YzU^d1yQ}KbL6ux*3jD% z6?!hA?E!vK3NRlM(PYnn95p#B)!OOqgTER?on^Avn`bV_9^<1@~|a1BJ-iJnL>clgnex5K9SZk2>S&5$YQy`p4t3STiA2j$EEJ z0b&BYg=eebAL=3!1_s-IqtD&ExX|pm;`$<=T!GkOF7sO*Wxv2#0=L@H!Qp4U%RkWgQrICVwr9Gln@v)}_mM(@NthVL4NlTHyd<;<)A9I3FERCTCe8}2EeQk3P z#aQy|+1OwDn7=)9o7qsuA(q{{5Zi`Cm?uz2ONu;wyI_M}Pl>nXn{Kv$7 ziEfHq`ei<6IhdAz@F>s;wct)3f}YYH<~o|p+?+_;;^i`zvBV)v8~Ac2#G9LD6pDlP zm%crTeK-Kj(_%65T>4cf5iT>*#gD74K3$VCo4xhM-d0yFv>xRASUvPhCW-+dYIcy&l$uZM|Gh-fINblmxvhs$%PkWYqB2~AML^WEvzfTN=Y&+ zaY`OqZlU0R@b;eZZ2o=tcej?J!zhZj_EvkVDvH{B7q$0{owkaisJ+FGy?2n-CidR3 zV(%R!`JcbvbzT40{p5adKe_WXFNvHv&u_lx@i~t7vCUruZ>*Kqx6O|)ok=wDE-qlU z+p-=+yQCEcjqEGoMPl8`qKn&W4kWA&Ewk|O{=gz^;fXh}rp6bQo6>UU8AIa-Z@>y; zh4rz7O3v0pb$c%AIgb~ExtjPKP1znQ%gO28k4=1%mNtg?X;qllZZ%V12EmUM$91E) z$!vzb?8y}g407UfLdszmj;4$sTi=DsmRKT$FSj79EG(g+MR-u>M`_JE1N&SDa?gGJ zceaNU?xq*$@wg8Kcb+Q7r+Y8vhQp$94xGz9kEa{Fb9UzgY8msm`dVASGufgyx6Knj zIb{z-o#@q|@9c2<2I?p(61dTkvG)>+ND*e#N4+E(I3gEu*t9fvvU(-rysc`TXiO%+ z^7mR0*dd7==iW;X@3R@{sLU(H_KK?elFu5fUm}UZYBzqIXCuc%%I7Pd~^hg+gXI%4vn7pE^G*rr*0|D zLx-FpuVA<2#!E9#n9A|GwZ*VJil!U_?@TvX7v<)92K#?*_y2_|8%HJ>5($A5xD=GV zRHCM|?CYKmr75dVJS(Ojh-zuQDsK7vrj~Kc%1`i5TV8r;D_9`{vOLL)r_J9z=_0-t zVbDlL+W;}08yx(KdXP>KVR;7NHr(;Fp43>LthBq#MqI1pwub};-DXn^clRNt8ABwH zyZFzgAgb>EXwldp(`QFD4W+bTS!|{Hy?VI`F31#4AbOOt;&P9?*?G6O^E7JKA&d-A6}8TR$DfhE>!>Edy-&)S%qME}f)q1Xq2-YA$Lxil z(D#tJ z4jB#a7>N38b4k8Rv6Q{*_Yc*Gib_nrq#nbizLcHLLAtRb_aoT0w4&zUz*y z_4hw*@9GXCe9H7EH6#k7-$r$lUhzJE^98f)s%|z$-~TByf51xX!OJ_QsOptO$Lh>O z{A^;U3=g<>qA{VvuLyeszODBxYZZ%FJAraxc7Mw@ow-|XW`Xa`Mcr-0tb>r5X+MX* zKA##wDl2G)IA$f*iZ^2lDK`k=qkh+Y(uqTf%_YnjnxLFL5U8 z>-qCLnBruYU+7l~s1VB#W4Oi3|7B)|p^8c{j&QASdk9seB5=2vk;pBEzr&$9-C=EA zJnOzAImdGEsjtqKJ4phJDn2E3v5dm>sF@yJW^F3JFuL2Jk~t@K(`K+U=XhUT`-{f zwY_fr;CY;@h)43$I7419mkB0d88h#p(>fzj9L7L)I^S=Mi1?fLv|eT5K%mJ5xOm?) zDe6VVd;0yZ#?O5lA9hZk;t**t?4gy-z z?IV6D8#RrX48e7VuK5-EwiCjN6pGI|`M6Ebxvy4bo9b+UaU3W7t%AHuFTsFDoR+85 zGwN^JK~MnJ1$i8|;2F^tiH_9)?V~J_!?TsqdseG>{+IBK*kH~M2faml!@#>sEozm? z%nvQUW&KYJ5af`VJV%%(OJV=k-_Tjq+yCZf>6;Ieg}HzZj5R3`k71N~_BN(}pk|Y` z8X*VsO%Sz7fy-0qMm*6f6f6t)Ihz=fP2aqOBq@6rIn@-Je{Q$G=e-_%-iG#xOwg}_ za0y)G_5DnFp!AF7p<;v2`3-t$IBo-RYP%~QPvOJK7eOIRxVvdKG`f!@%C-$<)|fmA zN(g1%CUaoC;H|bum6zgIG-i#)aEi#j*AsmCtul5bHv2Gq2%jV*W#DV29Y(t}oeoZ< z=&1jzL{22C{LCH6Mpb}%z#QLK=fiQAjw9u()fcO4zFh6Gjg1GTGh*QW<3||?&;r+I z*#ypnlwEPH8A}5-hr|~gR=iSMr+KCKXIQF~ool;%kEOfsrxOe;8`My4e(4%|+;p{G zR)|*kf=77;N$}p{47Wl$Tush|Z@5>m7)WUha?PD0kS?EwzYPCgzluYJnpyaAf7AE5 z7f<^=(9DgYB-1?)6~{qHV{!Ybm0&=v-{fKAD!CD~?hY?rxZsmQn1?;%@I<6i` zp&PH(f-)XP>|1;pvpeiyH~sA>S40m@pT}bS=jAnDKb%v7*t1>pBOITlt%J>Q=>D3n zWKDM7YNrvmTd_4e){Jac57Xz<`>})ZeS;bmdxEwv4u+$F20RFpx zI%TP|$j=AC1DpD7MqJ0q$5K1wf9=llYnwk!JclGM7<_A~Xs-EE^o?L()?+s&W>;uf zIiz=AWu`1h#@#;ugQulO`0^NmGRD6RhkMKi=SN`*MeDY_E&QG>ar9PfU5sGM;AY<5^tm)mZ`@_bE` zvHG?Nd-CFs1^Dg>NVV?IVCP3A&-%-Yy`n!T%_?AN=wq-%&*#c2FS-RchS#Ju_2?6P zFOx-am!?R5+f2T@qlW9hclD7)X`afUB5p^=$%-fF9bSs`-kcSJNqNikRcCfou(@_Vq_T(AmFlh-c9ZT`gtCr7J3Utf#j$@5ln zW$LE2=^oE%U6rf)Z?W+aEu8~wRmEXpJQn_ZKv;@%oIFj$PhO&a6_4}ue0TmRa8f;V zylu9|#SJf1*Jl^$HsN>62gZVoZ1Ck>>-ZZk)|!%4X)Go68W=DK|Fg9f<>ERW)+?$! z+)b^CU69)=Oq=ta@^d@Z{*i)s!gWBlyWK^I8Tu<{{EIAUvmzYfU6Bv-f$s! z$#cbkj3k;WpI6Ik87KrNUg!@FU*L=>NpQxl9n0Xg8K0}Oj4-JfMr1x{BFce+#)KSCu=X#i7ac`;%Sbu)!(L)ZZQP zk`>1alD!kxRZ|I!)SuMoUoN)T6YgcQH=Vk=RrV8#H~S8pA8*8vRK$tO;fMya9x=Mt zFGJJx0f2XJfxTk=^4P*-GcFv@)<#Z^CW4Ew`;-oGo)Jabr1C=GI)qF1f=3zV?>Utr z!eyzNIh^ef3-oO%LLK|$790Eoxpd|Wk^?io?dwV6kdu3ekBIGg#6ZXV;gSjT{6OOG zmv23J1&6xbU3C$L0Je#nfyIBh#sdfprTa9^2*Hpy zu(;CElNWxoOjE1^LE4j8L{NI+}+R69$M7}1=t zSbsl=^sX_bvf6(p`Tu`86*5?h6(9ICEr`_B*4Ns8HrFyVd`bG8{G9n}9!0g4{D0~9 zOZ;l4`m!aCe#4Cm0Jx~Auy96S@7{wDdML08dXA3|U)uNlIsL_sFRDw;Ya{8?o2bNd zcfU*iMYAb@D=(3FYW?D0TQ6{g^#CKo4f0po7a&JE!NN*CS9h}l4ir3?Pfbm%#|(jK zWx7X^2jIP--hsKM>w~utLK|ehcLeWI3NYM$XoZap@xzOvo#HYY-m_7PfAh;k=hLo{ z&eQ)m8*bfV4ii6HVXkbzd%K0({qxx2)M^ZE6@Tk)GAIyEqT(3lgREZ zf()f6*=Ge-@5TOTAJ6+%xN9OBTlG|=jx(4YrS|jZU&RV;{xa0Ze+Cx7>Eu%eWLHNn z0ta84M&n*eB&Q^dG#c$ttjY>FTC1!Y2spf?f_Uv8M-X5IIR=!(ecTs)hs#sY^bf@Q z?9E2z!!EcD`;xM%H>BnlTN#{Ris|Kp59P!?L|BT_6(|G?JtQ?jTDT0W^Z(6H9 z8Evl`Q@$lE01O7128~-icgp0Vluw5bPCJPlIerlmT3=q3`uh90mq;x2 z;1h(#@VVCUd|5u~?`dv)8!qxZd$EO3hGyz}o*$d2K`T8#)Oq7fBWm&6t$#}?T>4+g z5-?zWt>1v+9FQ`aDr-DqfB=DlE{Cp&!xvi=_0CT8Z-|~zKZh{%Q} zWJ#=aQ&NSd^~SuE2tA(DNmHtXORMO7Hv6L5{_DdLC?>gH@osGOk(r&91{sKx`NQVu z$im2X+Lu<_qwko#-I?@?cBcE2JE;-0o=wzhxzA*M=!HsF*Qir|Wy~{ky1>(4C7s1!Qq)=%NLkKhtz*C{H;e`jh=F3e1B`s4@R zS8RP6|3*EkcYoFT^_rEa0Y#WOr)+3a)1Qw8cKhPsLQo?)5KQ=TTTa_kGoi-)7vGUf z-L#ZkkJaPba)r5ZH3vElX@cg40Q8c9f#EN4J1~ilOH29JLIs?(Buf8`wOO_Wg%V8!GG}Ex$+)HFTbd{AV!y5~1`gM87_ls6Ub&T*?MZIVD+ffYX=%lu=r|5LUno1EKstrN^uqKX)+Xok zl68MmKa1^)2#xXLb3)nosYiwMcKwuLF*71CFkj?Xv#}y#VYpEtinl8isbV^(fp@3-Py{>_i3T&JGM=l#MS7@L}uM)~qt zz}74WGhgVt>lr1L*0NzM@mATbCJa!K3|MJ}N z=lWqq`c~dC+M(EUpHNeyou->~%Y)*rqkD0-=(nh3Z$ud)MV5)~k+Z@~*bC54na`tvE-f@=f{q zYqM9(fJ}%3$3P~YDXot?&f*#Zu;gl!^rCeq=35#Ig^rsK&T>ch$-RU02Wj~x6bVJV ze<-ri7fMMLzTZ&B;GJDHREKkmJ9pDsWuGL~X(@t=KjA(~;Y?{T2B~4v%KOs>l+o`N z{#WpF$XSTH9r7;`z6&pX&L0RIABFZd-ASLjpc%e!8mV!yOz4>(_qv8$<6zG5e_;r* z@&Et`Omd73T%rv*%SH@#24@pB0%OKPzykoi~ujg3#{cuKc= zE9e8iL*=T!{u=ngIR~4Cyf_<#4~qNivZdYFN5)f|u+i%w+X{M~x(03XV6QbMLD+`6m!NqtqQ$R>PjG2A_Hcq*5R ztvB(blG%(w_7g<21be|nL{-%@UyF(UdnaHc-a@<0zqb#0*d3JO`; z3P;6TF$xXPtGoVjAoE}dI8hGUG&SQQlnAX~VO`YKMtpTjyoJre*Y!ABJ`oLB93+@& zMSK}TT`_?*2M}uyyxw#eADY=V?*{|Q{^6s*6c~U0^4!#Skb~G0s`Q@4*JtN_bXUPm zqLC$O7}PNyh;G`BA3gW<>OoVuWl1?Vc8>J<@d-mQ`Ayg2YmfRDkf|J#Yp#4Ebj_4I z`c|>I!gkPsJTl^VlMUV(4z#QM^9hR1t$mMP%%gVHB&#mI0(WSm5hg}L-u?(y+Wd#g zG)*LaqPys$K*^m_C+08ZpHX$fghrIZK;*VJWUs5QoAwylMmP^UJDht|oRkeXIuF}E zar|o7*-1*G>guMit}lHzr#tTF99`yJnUbL3nJwF|G*A)V$8fguwJ70PKFEVgkX^t- ztyf+RAzy@Lxc?qeLu{$VQ@q9#bcXQyP*&a~U?l#7h>j zJqz0_I;cyR^fr=+d0#((6kjt5TxOJs;+(h5-Z&V7COBvLc`R-=wwtac-VEK3f<-AOD z05arv${t{v-I)k0>TNT1q9g)g_9hn>S9zjauj6G}jf9U5TgSSw!relznl65aXDfRV`p*YiP-wJG>b<4})B-&StD|Hyh$$w>>%eUvBlOzIR><0@( z3m4aKXIpjs)dSvoZlTC7gjmGro4RyHvOE!R#SJBW{|n2Xe)M~of-R5zhWN*~Y@tPT zPTmozqQUdUNs`(g^rZujcR1KYs~M;)ho`pY5dddx^+s!sD_%MZc3AFvfJ9MYzgD!0LwQ% z;XPjRC{z50fC3zzl_1NC9|Da36%>dDCm&U^Xuh&^iu!B5wQzQ0h0Fcl?w$=0k;5@9z_BZGYTA+CDrq7BVy*FIptY?>Xy~U*A1^Jg+?3_~ zc<|yeaajP?R%}92r3@7ujvt;)+qs8yTbT`dcb+i=!}QP^5RH5V+)WNlQ&GVeSz2~S zI#l?%K~tRbrXEXb){lKHYUImijyQtcyDuP7kE13?ZAArZp&qMqp~XOmL$^gO;4RV1 ztG}-yW3`WjNHSdIi}SYUKf9R98^3qCDO}mDFw^2#7l{JfW#z8*63q=O=^?d*-R-h6 zvtm|zs*2UZ#=_ik!gGkp;y+SE)KeBvHdkfd?Cv#dbryC$!jZbUaa(6)oA%|-uwS^i ztjxTT*JmiNqRmR7)=TrtYFPHtazmr604nuux)o4$tS>_HVtWGAmVdKaH%u)u!&FA!eTp`9zg!S7g`e z6-V1T>#?6$W8#J{$sj2&Ayj$+SO+*CLOEtpGD)_*uc!pA`usULM{Av{C9n@RR_+jiGxUvQ0P(KjwF zN!yfuYA$l8tn4Qs7>s{1kc%xM(|oR~vvD%+-8kc|*^+yN_Ff^|SIRXj)Md}QV`!^> zl?r!L_e5kB={lCl0nURcV#+QAJy8sHW~86`xlPm~z+X zh7UoBe49)Q#d9aS^8{xl6Fg@3LFX3ywCW`mnK7wlzUGNx^m60ws&7p+3RU0mTdTH> zjXx66%*|rrcj0`JWR1KS3v2FExE8ezN}mX8{?vZIY28MA;{|nEj-erQDjLOsjx-7% z=d;oNK6kC@rh$SM10u5UO=&SEXS}k#g zI4Uwy(t>q*1ns(z=Roz2ZV8KKukz$0iK2`bX)nTguahkcI2IoikIWK1%gxV}-RyCmcGGwk89+Ku&i( zv^Hs6)UzktdbN=!ih$DJ5l?UTRT)dVnB36tSpE<0`7s?}xi4&wNpm+({D$G}lCT@V=Z9VJzv)3*S>KdJ;5D7OK>NS< z-4n-i7jxTX6%>zv!Z(m?ED|1wB6x!1P1DUsJgd3gl9y#s@;xnbQlK_Uez&DC3xX+S z>Vq>QL-&={o=YP*&61D9?wpG|I$=h0fBDE;DMeKI3fTq#O0MSM*OyRp$@$7{vWAWcT#}a~?7ueJzyxKdUIYb8 zL;*H5d?9Nm?)@Fy$b*km*Ez%82HNOhe3g)DNtIF~_!lc3VvwjDqC09u5O+G2L}4t; zcxA(qY)9q@jd4sgc7!Osa0hg8$8-Q65U{*?r7B$YuCibNj~CR>0fel7%&IH>xVO&aC><*vos!7l=9 zjZ5CQx!tK1p)+P7LKx@ppr|XIy}zOOBL#4jMc;6>{Dzj=BaNm5(q<|f`Nz54)bmKb z4D(FAMZqEj9Htd<*yS2ZWT$`geHkh&ylW%>BZs~X%!_iQ$0x}}(_@W8lF%V*+#PhW z&P)CFpY_lZSPzr)-o}#+QeQyb+uOR_cc-N5%Vw^(w;oUvSgU*tN)VtRGzKU}~*F{>3$C>u)=jmshPFYi|idEIA{<;Bo+Ifq0rCRq&BeJZBSDgShJDp&(ou&SK&K=?o3kt^f~(ZWQxr;^oX*j%inUirIoI zKvgRu!;B2M)W>KpC?7J5t1XWT0B(>@Ww)7cDNzaOS>%Qm^mPwx1bl9Ir!%)%TKAdH z+S*@m>9yAKz4s1%zczKBbq6P$v<-DuAK0N>jJDtFZOVA}9yy zJtLy4PPb9=7V&{%23eN$v7D7XX79H_13%WXO$D$hUfHKH{;UAgRELg=4uC2cLD zkl}R$rmJGaH!f!1FF=o6SmNTHS8aCAZ%l^7Q~kQZJdihm<>XOWepziBxl$$ z1XcD%dv4pq43safCsb_%F*exAUYtQvbjsO6kvz#5z|^QqJYUe~OlftTwF+l}Us|Fs zJ&*@Lxv%ZlRTB!b*3dpnvae z1A&7H$%7G2>rugW1XoufgkuoVYf`%;sNl&gXfsutccWKCWhlJYbbhlKQ73Y_8@NaBKQi5WfqBnwgEG%i8^sPLE2x%JSLJD$ajapK_TwM)!9m&Jr?Oa-*~T z6*Sr9hpYL?zyd4kbbMx+b#ZF*Y!+4E5I zaX2Wk#7`f#mo*}~GzxHM0g=6%D?U%^3=v~4n-`KDL@QnE)Jwcn#iU+@k8gwgTWK%Jzrh?PocKsx+_T6G=j zwDE_v;r#blSHjX+-BJj1;a0Mw@$n=c7_bg!j}9kEF}=8|N`u^qRUTrEgL%M`6AQ{2 z!*gih3F;@l;1)s>9sSskla4Ks?adkkt-_GV2E%fq-Df5HvE(SR~ z?Jt?G)NVGnj5QUKmd=cf9S72L0fgFxy+nic0v|xFG_kWS6Fxr>)}}-{V-(iTUz#XE z!k$I^v%{7O9e($Y;`hzWFFrl42Y2a~!vl7viaxwa7*)>qGl)p2vz%Yeoo#K+O~Nlk zDjAzQI#hXXh#@6a*0p@Q6SCjW=zoCEp5D*V_JavuDo+EJ&tEAbUpngz!otH|Qq7DO zk&>s^1PpyQ(b)y?Ty3LWr>n~}BxQsU?uOikA4Rn_9}^uiWE8J~@i*7i{@HE+3*r`E z^#HYioy?FemgE}r%bOj^qF4?8&qJ0bl$)clJr$(GY9D6&Oa0EY3INj(YoHob;C;%; zo-@tK#1v%^KFP7Dw!Ft|_cQWm&dexxEt}_-Q35)EJM(U7li^YWpi~G@r>gPV1WBxE zegTu{qsx*csP<^bB69^{!q*vY>6N&(XZeTWfNqhOZ~22uUw|AWUq(ORzJNX z|BVO!q1#ya$Z!C*IlpNZ7FzP4&~lM2CO6?DZ}KU>(N|u{43@(9f>h>E((~CFh9Iut zLOCs?-X6WxER%s2?q5`PjL4x_$l-gQ9EQ{GZOH6PZ=(fDaq#WPqR8CZWK(}>n1Tqa z%T_S39m%8WCQieFrd-Z#nU`8Umw{gpzIk8OjR?fKbIW0_8B0*xsj(m@GS74P?UgHk}|Neu#wwR6aaU{i>xbEM{y6CC6i?vb1OdN?KXiFMwyTW z1;1I*nw5zWxs;z=TtZo+v~Z0X_wW=t?=$pi1$;DKxtsT0tkQ#Epr`m*`1*F#U0n_m z+wGI*5YIL30cF-~E`~usdt@H2&igFGAR3)W89ni?ZYtsa%U%nnI%dS`uhGN24|y?8 zSx;SpXs>HXEB{QhT*$wZ9#L^@Ck}JxPyo)enl*-dmG#@ZmBpIknX*QXb+D8U^_bG8gGkt@RJ8Y&(Cfj}n@(2;gF#LeihqlA=C!Wl@?LaSWOa-L6d zV$*wPZ&8(-yn#Jt-Q#dFBCG<{nc{IxVi%B{YAA;EVtL-`z3z)jaXtfsz#C0a1s!)4%BcZY#ce&dk-7YX6~b>!#nR!0il#h~Y{p3r1x?6uGCch;W=A**^;$(66d^Dx-L&ug= zOw$(z;o3Ovnfp8nVcvyN<5kZIY6-*Rweo_A^ofVY17ukn3y<0Sf17#S7F5kNkC}0- z+4Z5F0u`?3S@GiQj_*# zV!Xg}Y9kIbA28!S4tp|zYBdl~wnbETvu}+4&dxR~Vp2RtP`w+V` zszo+g9@IbAsXbs6E$+d!QR@qh>$(pP!4r6+LB2o-XMSBnREX~>)tm6WNUZ;PW>g8@ zaFfxA-WCt|hS{+_3TB<2)m*5?8v-A4_&xLkHuMo2izP>_-)y7d#z^+mcN44raN4}4 zJfQYyQ+`kpo*2bx7l?cHcFLbA#e?kLcH70>GN=I62#>b)7#(=I1ge=>-VaC}_ED`#<^tn)+vk z+?=_O0;7yk$>jEa+TJ$XZ!PpePkcF9M0Tglx7|YNM7DIs8!2}*tiXM9q_5yq;(la= zgN-Q`b}fXmo99<*I66}ro2lZFc2Scz_H*f=m67rORO`-FP-3V~FX_lCX@u8c2h{E5 z2gTTcNUu$8mql&MK91SbVx)EqqMt?Sc^3%zgjo%G0Kduy@eyKQ9iOWTtt4?S27zXodg)0esgpG5#DsjN`!_cCEN5Drdc^qCrP zNA5Z`lDXWH2Q5>bupX>(i8ie)CdX>G-XVK-`m>7EF{w_d=uyvxh`h_OQ6Ta%zcXI%4V!WktufxM#11~RZ|aT15Vo=Y=0;3V6!|x{E_Pri zz{h0PKvJkO`aaR;_o8-dddSs&LKE395;4g zVoQS81J^j#ih3dVrDOW_IWh`WFXyc%1IOO>xE<2GlOVVjL751q9n+}(a*u@;?*b}* z4!)Q~8t8tG(^Fs2z)AS57H)SKVz()tczJUFyn($^nX>-%b?n-&r^lH8~G=#WYaNc|1J}4ZO3{l;_TRE-$-NEaVV-v8dltwAK#_OD!+j)m(j& z#W$CLR+71lrHs#y|JpA8jv>wdeA3?H%}HwCzH~a@!rYSds-sTdri_+fNfEW=OB=j@ zUMevzUbFXNz8ZSwUDXa|>%w zYVt1Um9^_~Fm?(oR%MM*oPGjU24JczFQxu6)mDeis zeb+vsW z1eWQaGi)4>X{9Ji+KsCioc9jl2S*Ui)i_#VTq)R2w^!#nmFOfxz?(y$UKn+wDYDjL zLFHKbFxz8}7%*w`!LxT?nyjKLVR*XrHw`pG?TNs9# zegC$640R!8e}q2PaCrOo+!T z86j5IwY4FL16=fKJ4!BpmNVs>beR`+pnEX=%jp;hN9V?nJc+@M%%PBRTcA%qu1C^3 z5tQ`s2vjYm!DZ+dtc*&GuS4=37moTja?uyGOYT6=w)*3SXiNRX>>$N0d=-({119si z^qSG3jU#U~A6pc)TsS=0H|g&>p;~8|bJ>}d>5As$9IVDU8`vCeHGxqgFxH8}yIR;- zLru;J+=|CmUX1sL}ZHLU4pu5!;22Ahbm8eibYV@4KB7kJaBCaJmIMABVxsQBi$s9EyhlY&rwc=DOaVo2KoQ`HlP7 z2Quz@a{ShErJ~7Ii*STY-%)Nt7+z{1O-%Ghji=`~cnGx+bW?x4nYHb`uvQxF$4Y?W z^42pg?`*3-Q-MQnkPXP<9E(eks z#xwKxf2EU{3dGxAnFM;tx+NA=f<0hgbWYuOzQ-Y*<;CjP#$w&)#W!yS*#M=he8 zilNsIAQk_kA%rsJY`saS*j6f+ztDyXoQ0#-ny>6FE#KwWefL5XvUpPb(yImrHK^au zI0gxMgJC{1iNqKbs2saf?t`Q81-<+Y_Isb~TJ@MmDCw-H)E7i!eJX)~xu6{waq4k; zc9Pfekii9!{}Ae%LXrCSaQbnXE(JLhFxID#l%eHQyZ)bvZ6glqf;2 zfAbGn+ghXDxf?YQ2TorFD^wA$MK9}vXv^mgl36u`(HPvK-CH>#{tT6xia#~Z`_CwP zd!6i)>ozPmaLqf3a(0u#3BEcvC%kATX55=%{_Sy-Q4`&Y5<(rdg~KyqoyVJO)udKd zR%n$lzZ^|vA`A`t0p9)%CW7ag&lPd`tVw?JB`sVOzE73SxETL!Fcl)kW->lIB!~bT zkhO||j>078bbfEGRbe&CXm?(U=#=hfu?`mW-Q;I)Iy*EQ2-?YZ+8B(C6pe%91zGFo zF8XJ{j}>|BgQ?^FbJ7-k3fENN**SI62MLc1*uXC%)|Z$?^t~?^!md!Hd3CEhtjhaZ zi@Q`xSLo{I-z*D^H+fO8sGVLqC>Tr6#Z@S-Rx&8I$VS}D0xEQ zbij&=m}&a>Ker6Lf@aZ>?P{dR=$yrJnbhEc-mzy#F%inZ(`u z!;?3PqB=_(3k<4;eBMKouyV*vXC+n=b)2Y=E=;*$FW$c}O5+;S0%Ln48b&+0^bCXhO&RSZ|HuyCTj0F!AF=7^1IFr}?78trZ*SirVs=p2uF!HBK2iz~w;XbIVPW18hyQRIM|Bm$tT6IN zS3mDMeI$cHCB9Rih~&JNXJowWF(*2=7bwd48hMDepO8QH`Y3$5+x;g=bW>* zDEJ18F@h3UcvIz{Go2q86~jFygF-xB?CEtPCI1_+dF90`HLY@}vG|t#d0~4tFOYCr zVx}jh*AdpWHq^V8dSUlsE|A3u-J2xz+GFOzA!v)A7~hFK*n zPl@Q{!g}i&cnH~^ESKEkd>+N#e0^1LlsbhWx!$_Cb8A*#{%FgSI&IYS6EutlJy3mz zh;HeYbMK{n_Nr_*3r`}mcnq$#X=&>{nBNPJQ~G$dTL69UIHp?9Fm0Sv%VMQ!CATbK zdF7efuy243vH+o^Wl-{C;XPdqQahqXP#egfEU6b26u7&z_<`>xlpD3)y`##gm8HDr zGJ_E*-7iv4KPE~1`F-(3@mki%(Oyf79Nn%-<7g-0482p$2v>nM+89kF z8g*r<7p@im?}ci!67_eo_sU`*6DCA!h&V3og-)&XDFeedVO~R`?NlC((Rz)k*Y~m9 zr5NwEGKbgyebreIX}k;pjrUo)*7{1!4pU_9j6Kp}q3~q$svGYBJ12>Jy7$+u$F7nM zy6?qzoGiW}+1czfo>MINfi@!YYNsBpqvPRl#)D6YO#W(Uru0?ultA0IHS_bh-*pIAek_$Ws(;J+raAtr^mD%Jfp|pwXd?V*{APe9;kSz$t>2gBFr5#lyG$Um zP{n+9E^n2Le+|}#|A)M{3X7|0+J)l=gb*xvaEAZ^f(;1-2s&7BnBW%Nbt1SETnD$o zU1t*9-EDAp85nd=;Ca4%@a=v3A5JfUe(>zRd?T2<%%xZV>oJSOo)=K z9eQ{qALiRtcS1ndkmccazUub1&AbQ)K7f72NX=}#NVtozLFi}8tni&oGa?9yjE~l` z&cC(@7u6kJ{l0U3bQ)YxzCiSrQjI3x#bv(pazs>a5CAr5yDH%FQ8R0Wn7E5~gG#Nh zGQN9`ZWWm8B-I&sY>T`<>yRF6cque3VX&if+-P^G53O@sdnCc?IUl}O(ooNWdYT{{ z51(tYKyiW{d$ajSGvh75qy+HV{>%d>wHmns|U(7YcIgE8pTX=>26(2qa-B_0+1cjTrkG`k*kG z%faxO2jH)0QhGikz%dp2g!d;^y^zG4=AaKoo!ciJ_M(>gr+ap8#=#NUGMqCx(Eew3 zaz8$Ji3`1P3xa1=($E?muOes&p9X`6f5i~^WUvRoIBaM6ITk0lF99Olq=0<3q*}QA_ex7 zbHWZStD4pXYb`;B*|T>pg)my`oezbv!vaO~PMRk}aysT)Df z&Dezqnu(5vS@e`%B-!KvD&UxLgjzLUMc>TPa$EidRLrEDxI*sJq zH-zes$TgHc_@ri4Rxr>O{IG= zs}}n&7U0>_sem&-L4RP2g|Za|;NN@@gS=bMAIbs^TxJRfAVmE_yfL~6n;cL&SEJhO zQW`&0)dHiZDEpaRpm8|3rM?KzW((}opZ0AjHr*)~F6hk@mT2G?%&)bu*(a{D>9v(l zDt+8$%&b%6dbF2Lq^^o^uL=z8S}D4sg?JwH3h%hC_5H2!bLWnjX&X5yI7v7=tF4)x z`5KkzezwyFa<4$13+#fs_X+HAoUY7A%F2H9tvnpfk1SAEDd-iA9kMGRPo*U1ru41d zZLR}(T5BP)a6>uuRVrJ!OiX^q%_Lvlzqj<=P+T-zY;}88T`6b(2^Mm6RJlaWP%m|0 z((YNXL`v`Bg}9{}hHXzH^Y0<(N}LJ>aSmZpf7pjh?99y21W#4R!uj$2#C_h&oxSj& zy+5h9JOQ+jl;@6@+6008TRUr{!+ZY%VlRGBaAj{?n%pB$y3G=%McZGfUjp z&u5iCTTFv4fQ8qQ_0IhC;vrYj)91BxXW=zX+X@oumPR28gl{Rw%W7lV%H7f$w}w2Q zNW=~CZZSMb+;49*{Qv`q8VS3Knq((VQrVgv_4{+lwe!}9%jtMFM@~uTfU|F8|K4=c z+^DoFAHp>NvY^ z_R_QFCPWuXKP6>0Akdve?OcppNyoTH>j?d9-6;?_pnqZmAQDrUCh22+=HfWNaot0R z(o`)##Pi8A^Uu625u?ovmI~-&ya|GRkE7gZoMK{*J?r5M2W_Tv+S+0vEA+uLZ~rKi zl!OvNu6nHW?3xXm;KSjDw)`PZG4F4ltCr8x5LsTLf%Eh68AAA3_#+(G|Jd*~6R@I* z?DmFR`DtQy$r|Aq{z1t^jEV$V1h-nOA24b2YoJSQqHrXTu;nqUHoPnP_%dGdVHY8b zPLvkituW6`VknvJh${d6-`rTnA+`eAqP+P@UhtpdjVaFC6*4USx%S7_xPO27hB0E| z7a+AvBj+#Y{q25?H)a$2%_Q5~YoQU2{L}a|4$6kw*{Pk@|U-u?Yo;RK;oY$ zDZJ2s!lxL>@BX*8|NDz-{D!>mnYal(xOoeiH<~*0_xe9IWoK$B0V({01He7fcJ1)3 zn^d}E92pshm0h+>4FH=P*~I^Sa*ufs-nRGsY+%;%Y9}58j>}RKk0DhWfhiD*w}aa` zToI_MT97TixU;dv^!lTVVag|<7gHi{1LoV5+%+O9T`k{Aodv=?4s@Euh_Qk`w zSX|mRy}{_^Xrobfnz_HBbUwTzjE9(zui7RWF)!aRl34TQT%~bXDK!?F=s5;%%dVyUL^Y1DDP3u3#!jk0crv$6T5TWDm(bu;h4x5E_wrj8TQzgrV>3indugb)`>_zS0 z4lxcz&EKy(Uc>A|p6mP^3R6WV z#U|!wXzm{o+ElBo&PdcwgkP96O@ghWrzl{T$IZFnoOACY?T^lKpibAZ)i&GD)nRAb zMXj<#0K>C!c7PV>dVFV=9|YdLbR#+13LEh}|J}0*pJYnMttzxcqpRS}Wo%%K#&V$~ zZxC!JdLNCVL_jo85q-P`*JcSU%H~=WS6#bQMda~GQ70()Xh-?7usKhsw)XT}Y(a7% z7S8;@1fJtBtp~Ia(!O?!ozFSSc`0GvnmX2lJI{}ImA>xyS!MHN7n74x>NgZYgx~uR z@5~I}Z$-((<6caGbuxF`7TEue4;y=LZ}0u4vrT()|MOo0bTeTrE60c|4~VCKtA8Y3 zOeY~T=pd!|E*o3S!O+=t>sO7#D~pQQOlR|8r<^nXr& zl$~uf(G5nedT zI~TKrp7m5TwdtTX(oU|gmIBNRDMq$sgu~BQ`!F$gE+_3ME>PcFR+PlRmu=LXEhamk z4UAX#1Oz&ihS`rcmlu~Ze${#1W6XW*E5n<0?J~Ctq%*qKD`a+Gix?mWXfzEFTmzgo zJ)1T~3y;jT+z+5$q0uA-3kx-CMFUQKTp1bm!>2bzbYn``EVUm!f6k|Fy`knBz4ocH zlgWnhv$8VHHgKH;@6A%)hsP00z?fu$m`PDEjCuKY_>3@Jrv2p zfAiDVCswv4TRKk^%C@5c*O~2jnky2AhimPnv(2@=-_M>r%RUtR0r!|!h|dH8E`@`c zD>90^8|o&%KgyF4;H>lnX{Z-9|N1;lu$MU|__K-&b2X|%~I`Ia2Kawz+Z$g0@ zdiN#`6FGL*C$8?EiGkf43i~^9|Ge|h%WL)Tk5WAbU3D6-qN|(gg%9|6oGYi+)K#hW z%va9qH(s3{Z6)7zHD29_-Yzq;KN)SYIG@l#wWoIfTG&Ww8$)Oo*m!L0Vvkr=I)UH> z_d*Uz1N0?Ie?C5{@FljTre@V7cxI?5{+q-4hv&w{U65cI0x;8>A_+q@xHwl&pz#=MI` zF7T%eTH9&g|KdbWLqy8k4n7Na>45LmiJVxoClyW7_Psjko%dp?k}Sd|8IaIfZbyw} zdYpzXcw!&b**cGrZ{$Tt1m%LrW?%)8!+#^A-;?lbyYkzBY_GqodSN{kvfumU;!;yB zSdA`6_WW6N)#bsms$b`LjojAoHzkxkx)5;0pkwXesHvpk#5)fWi1JvVo}ECiAs&5l`p zxg$ODcPg3aA0#8c4C4=;ZS{}5-%ZR~g$ZE^ieS%&Ruq7uXyIvGw zUzc6QqEl~jiJC_%m0%Raxs+dh7xnQ?7P#x11ce655N%D(o>_W76tBS{ojmys6D1kj z30wD3bppa?0mx@rjZ|)g*b2B6=-L3C!D#RgJ*_-1?{7?E65*|VQjN(!!X;1M(Vi}k zld$vp<$xq7)m3sYx?cR&2a(E$D|d!#(=Ur!VpdPmZ)w2CS0gm7K5Y*!j;0=36{sp2 z&GNJBj{W)3z0e3Y<)tB-1Q)}KAVA3PSySK8WTyI~ zE)#JC?@WVvOx5*Oc#jbj1X~9S3!P8aGY+-w%(%=|)@9e4X;oQ{e}*@v?9I{9&xLh% zF?(LGZSTUbYA{*oX5O6DU0*O@7`k$1fZr4H216&0Q-u+3u|Xrm(Cc|lJXwG076sr@e|tq(dU7ytCqUV0Hv>yMa@Ew5grab-ELNi zb#qmG>Nh7=Mbn!11z+M?d zOu+`Ep$>Aox+)3c+erXtXAYn3j%=PEZ5}Um*%>DF&7SXmEA~XPk*IbvZNnGa z>)F=09^pZmSnlpxT}j*3B_<}JjYa`f4k$LtGi`tpy-JI%>i3#8kyu4L$$t-vbv+%b z?!+n8qZZ6;YBq+4MDa+OFHcK6u2Pe$0E8-Vtt^r%0Er{{x_F?}bAlzjI&Yah@>fil z0>N3f3O0G=AFJ)L<;NaH6xwQT&IwWwgQ|9BK6VWJ@WS>)ZRMu(nH7aGN0t-Zm^&#E zb?d#7yDhM3Xb}X&4sjz-R?t#*WkBUrZ#f`Q>=>bttF_Sc3lYH$&X7u3-n=Bv>@4Lq z`lILaG33)$xsfFXh5K`Vm=Hvlt--nE8+g{6DFTpf!r?)!)X!0da`AU6+^lB4)rfi? zDt~#;t3Hw0_MSbdHZ3D;hvcv5zVRHQZM?tK1G#R*?3sNy_}eZtaF&-Ou*DE~HwizBn^RFaQBbk^B)B{>pJ~-own|&w1W*lM7+p)nMi-Jes%VldyJzJN zPAr6WzhjX=04EaChPl0Nd~~ueL)VU-Z7yU7XNS-w(G>EiwGGV^gZ(w`w6cv!QI9cb zQ@yJhJI%~{U$s*u`vQ?z)y?K4D zTbAK2VUoXImM;T99XUX;cqt+nvcq_jtLq!jXAPAM2b(hG$bd?^1Xe~R83TC*b+);0 za;M@BNWOO)%-qotXb>H}!@4mrbRaj<2)9!-2|*Lp@=wfBri6sX-w8UZKEV{yA`}#F zU2zk7NtY=%7c>?6!#B32_dAZMFS33`OtL*MOmji~<9^*F@IbFbQ*U8S=D?yO66VR_ zu;j(SE+Cmu)N8!7VMT)imhA=c)&UmOiW-yD5(zCo(JhqlzM^2ALqs`b&BFp1`nn)6 zq58>z^+bF7w@s!z7GZ-6O$I60x)*eEM0D(Pfz9V!<$K&qn)7*%;Z}hc8eg`8^h5Bt zI?!o7&~j_AkObil3h5OiURhOb&J2?;h(tx><3}1%yeqkE&xLpoDl4mnCV$$PY=J^Y zhkAx)MkYSL_dDpcg;vlYl;zzg8Td0F-IY*?8xY;5{dPzXce%k6mZe#PVz6x{BC7V2 zkaFa*W^X<&f9&8u`-w1@zYX7sk^lLPI-5rH4xyJ7`QJbMrX7AgHy#1cOv@9wv)Z9y zIuQX^|NFxoYyWo`4r8_S*~|gZuTg(=RG-bce|?ASpw$0q2oY=+ldZW)HS^oWv|eVb zGV$6VCIjQQE*~wCfGzJWhQpThNa)=blE~BgWv_>zh%yuXKj=a)SYI*bvwx>}9XdD3 z-?r91F%67Vb&z?~K9V?<>33SErPwh8-c3|cG~!9@jSf9U=TK-dl^xx$I)3r@{yX-O zM)#l3>D}atyK{&CF{mFH*XV12f$7JbFo$LbDaop)vlRoDx z*w7)b!n1^KDO&8ro2LHKNG9vH#^AT!0`z_v+S?$!{mIou%q7C@@$)r^>ypVv_>sy~ z9BK(c&B_r7nu<{^>UV0skFh)0(oo?#a;_eYl;m(n6WjJJC|iY?2|dHykq_eM)cb_^ zKg86oOjN9A`ZQ>#(cBzdvi(FJy zRci)@RKZk5nK@rJlk=YrwPB9zLJ1j8y+SZX$)}3BS%ra1fsXn(jZkp2y!HW`l7)ZP zb!;j>B^yg>zprc(;NAQlOmsCV=%%SX^U;a>&(~`^a9!Yi>t&wrzqW54kv7a?FuoL>n;`b#Lbs8v{h|#&SPsGHK15cGyrpY5z zG&NPDB@p=d6QFGTtf2dvqxJBX+3$@`&8%hFp-)H5y+$+%IQi@L(J3*@Og zf4)D7qpO4Lto>6)0pT02HAI!Mv$#7*7w!(%oL~)g(49?lo)mISHgNq=DHlB@#aS_y(m8B_>C+vS2$hta%YGMq^q42gI%7++ z^7J`Lp72mSE$dEqBt_5L*{^86BlJ zUgE3i_$xtzWtX`eeP2sdLKOx!j&y3jt*z>W0yM|wvJcBo&Ad3e)TX?+d56BP7o809 zaMbuLtGWMJPfitehs`jENIZCj4UW|fD&95AvXQl0zC9RtD>iYr4HxWwS|_VXhAwM3 zRZ9 zO9WU|g;`wBiedbayVOQYgErEvSszI!KC1#0OF48j2Nx~ z0$B6aZG`EJ*N#M5pJXk4E-DOxF`FUnB33kHiF_Ahz{Q!hClY4egV-!(RtYsG0V=VW zPlaJM8(rlqj~kYbVjjmX|ih^Ni`Ya*7c$PTgVR zuVTb)y>|HHu1Yxe8_=KAuJ7-gx7Vc3H!pc?fhEy2)_q0Dtgn)eg%F9 z?B~GHLJSJ<5quM#z;BoqT6MAk1YmFBzU~4~l7Yv%r+ySYnJ!;$o3gC2*$fpZFf?T4 z%_Onu!@veUBT#=j1=gx_P*n{1JjJWGG5me9X}`leDveb+8ZY^+`a?5x-tWIn^@sBx zlalgk@zO3^PZE}xW5^Nc2=N^3ORQo(BYWNDi`8)8EEm$v?KzG!R;Su$Iwlu_+DM2d z9(*8yAefJ;aoL9=Nb`bUBQ4HtK&{*QO90Bez^zLGALM{(K~|(t2^2OSV;oh|PC+nZ z6g)*Oa=zJMPprQZ&An@tYx;-lqS7s`&G*!lrRK3?A!;e%V}#Lg12}lpLj7VgT5z6k zt}?Dn!V9(T)e;$1%;7lF`t}$0jff_J**kx1POK~u)yKa1i+nh$SSUV@^)fJ68@+nK zgX|RU<>UZue>S1_BHC0uB^Y& z-eo9)AQrVe7zMKI8ODV0>sRxz?tDp=F51gYZ>pCo1aJ2A!Kd|~BzbBYjEUMj?wM60 zcV5u2Xr$j|Lxk;c>uC)8b!G^uYx`=EW%Z1c#|$`3-^a*4{^Wl-R{(?q2YlopfL3-p zw{=XirzC+lK^$%mDsFvxEw{p6)70VT_5egVnJvj2vu zfB{A-44|P)#836RRG7{Y7%gc~;DU%B7&GIWitg**zZ>1eVP2UX=hd!Rr@I*@K`rsX z{5j2#|IOt1<~W#p|9L`BmSXPKlmm%_K`kX*<@0C%!we#uz6Cex`YoW$ejwy>FYNQ; zn3Lks(VusU;Qz`Okm{;!k=YbKi51wQmY}1?IvS6|O01ot@=6wk)PqvGB&61k{GJ?j z_|C5@mOPw3L*+E~_hEz43m}?;e_#ZF+Cj-rh}xB_oVhy0S+vH)G&rMfk*UoS`(c=ObPp zdm5Z#4c)pI3_E-=_0aPysQ~J9fpTc*|L0(~gx}$}&1=+L&U}->Z_0>}O*&vK=l({m zq`0=0R;9(Yq$RM{NUQOCM)XvP5gq+2I@u&nqu*EYlHvs@-{;EoWa0?PG`hLHjmwfBws(Sb;ly+5lO-d;z7j1i~t>%hzoFz-qrK45d>Y`*;cE zqsu6wulE8Q!_XWx78Ug1HTk$e9W5Bo5cmSGX&`O1XEMJJK23W*(zy6-vWi{e|>SMe3Kb zX%m?zpOK%H2TMcgGHV{A+ff=m;?UK`($oiBEE$(ocNhOn){S;jsdGQ7f(B}2K%)kX2*l&q#4k?g&sm$wJyDb$SAbKe&Jb>bAWlmE%%{Tt_h_&%K-`;EFB zY<-#iQ{)`u?_k{dM%?-2UA>$AHQXDV2Rb-{P(*mAY5#R27vR0m2K)k3Nd%4e5m%fo z61Vp|E>iKA%w7py?>AnL2wfiiblTYU(C-LD1`7*cRxR?;YgowQa@rubaedL-kauxx zsUq^LPMISp`PKowlevj@3bV5%JU{%QxW14%vDC4;JX}W1p3Bd$5jhH8jDv#c4mYoz zbyRQ*9+KALoUqjLHg-j#sYucySshT|r?s%Sz%ySK5AKy0M7Kunv#}dhX@p=9G|Y!s zemaJXem0M$duQhArMj}xQsk*bV!SnRvfY{yS0(lUIY25^k-R;v%bmI9uYD}Gm`sLt z{?_W!sLnUb8zXJLbj6=kwL98VUlp(Mm`{`AOoDbZhhA}+cX`vzoz?C56Q>qgT7VBG zRE~Zc&jMIW!QWz9f4MmuZ_$%D66GIE8UZ|kCOYw%;E!K)w$jEbm!95;&e{{L;m|x; z_xc71s!N}BI2_-Adw@z7@+Z|*sqwKUvHj>9+BSFj2!P3>KA4r++`qrvBS=JA-N zm+~Nr0&&dkUH$26-K}JIXnUwO3B}oIY`oEdQ^U29&uF4?>9eNZaSC5=Iqc`d79C~n zo4BprNhHXnTMX}xwJ!hpi>T6rQjp^FDtQSN69>P5mcfI!B*bu7L|QiX^N~$6jOV;+ zd}7ccxAl8z5I3Q-uW^5X*(JOd<>S)%BlNj!L(c17`^7bt!(oPRJ07I3y!B{I%L0;W z2=%tW*mHNzSm?^cZYMv+@PwOnIaXjt+SBL9#}_5|UtZ;`~r9^YaL9h-pWpVaDfRgGYR!60zMEuG_z#bW7` zcV67Aju!PLeHq?;LL94={^{bFo(< zmGd|T?{??7L6VtRh^CxcUBr}~M&C5I?fA!nr*ONhaHG3>q!FP+t_Yz4;N_o#PTqgI zM2ZHbnfakte=Z4xD(2==qv?pq-lbfp#YB_J2{84?old#lS}6Qd+0Wm7lx>|~7*ynq z2ncvK7%b=auT#kH_WQ0k)!fZAvCrtz|D|yA&poL4{~Mj_KkxO~;b_-lr1V7HY{GZ= zG5;}u|33t6YJGG&*xK-1tQdQ6ygtMG8wBWS?*zo#xX-j&pgDuLE>90e_u&}v<&VW znn5mOP22D9mHy%Fk>zUpn|pRvszE{Rm*Kh%Z}%BhApLP%bP|uw-Aub|m7LlNC(65~%~$H( zsIWLNRI`Vdo^RacqKHG#8?GCR4cLhBIJGhT-_^;^%84TO}31L`hC+aA$m6$d}(^i^D+v+WV0FQ=j0~;9%4NP-6H(Qi%Kd zPYR#`QXjG!wv=ge@8m>EHGzwaE$g6lc zsNBP|tIt!dZ;JK7E8p>G3mC0T z`_Ce|T)e%`Gh5j_bxXQs%k|UJeuyn>oQ!5f6DF)*mJ2V(O;n zWT1KU;d`=S+pm{gAK_0a$#OK;Q}nbGww4RopbQ%| z!oIxFXsC*je=P2GwoG5B4!>6O{F9orIoh0X-`DqS^5-+rPM_0_REE*~BQ5A2#@<(J z1!5q3uz2jVpixex(JOpu0%29Il&lCYe0+9|()_*1T&r)_fxsTH=e%GIC8Sft&c^>n zE528lH1z8<4Q!d{n1E?(De~{;#u!b%p=Eh{x(ydTtOCO#%yW`s%j)Z=Q!C$^!6i@F zA<8H949lCbpSf|Z+b^ihCack$agB3wX{qC}i^z9P)j1p=VEc?Zx|iiE%>_Q3l(SGHube~Nz|0RzP6t2`;A(8|6!7Lj^Ul@ z(aE8ttT0_w(G$$QgQNBi?j_=b$JkHEUk&z=TOT1$xbPC~Gr08!&$tDiv2cG7wN&|F z@phii0GV%^>az`v-jZx*+9S5RZZxf+2ad;);d67oO=)LurgpNDN>11PIr6L4bRc2s zkQgtoNmIC(fx~e^f3xASm$!IGoS>7BaqHMF+l=k{n2U{95EsFv{zN6^zT>~VfNfro zRoQ0`6k-=6nC^Bl-K&uPjRT1l)ZJ>g5Z;cOA_zPVZ(AV+{8CU++1bqw)rNQI7!RH* zxZ(cNuil&gxK2!MY-A>BT;Z$q}a>v-nBd zS`(@Mg{XZ{=cZmlF9w`l-PAEiF(igz0AhXgggV{!U2vlBc6Hy`^VHF_J@Ddem;b9o zZ{3l|eC?IFQ_IbeyMI1JvWf(n3&iYFQ=HT2=Ryw=Yy3Bca~SrXGW72 zMAT))M4ZnaI-487Uf47#H+ZlG#e1xzYewX!;>>&cG<&%}o?`Cu19tR#ONfQ8ZRU=i zVxj}bu4-6&@y&2l=GW(!bCH8%s9I?yyEeXn zJ+gc4;fZE+eHAMx3xB;vUnqEgJ;W)!II92z6X{O2X-XqZ%Tsj=236I&7RoztjbJD` z8U?B=1VWyJU`tJ(H@OEQc0d5AtC5oQX!7SxB-h|AJ`|FHj`kEg_X~RRcOUE)YeD2A zwB((oqK`Im;ixl7bnN_YzDC(~OjFv-sS2<|SEp?0P}}IcbR%4u_U7Z(7`9(oe@fP# z$p-OK<^XqLcdw$NqKMQdBsfd2PA)5lqLB$dl(q$&54P6ACwq3;RN7@AaH(4#`di2_ z?5>2b(qGMw*76(x$NhLAmu8Zf=l?q4m!0>X+Y|iP-E7dDn^y1G)BG2O{(q)BZeH|l zv2uOPalq{3D$bjoiB*aO{Cvx<8`k}u6gw06w?%%ZDz>!XHL4x=?O;NLi@jfw3B4J@ z4=4SenFyBXLf%LTNonUT)nDGvku)t$F*ly&WPP9qF(#4tcsEu5?5Svon6T}d3)$+s z;1e&&2|;Td({;d?eN*D3r@(RKku$wO^#vH^u)Eb$!CISpp7Lhrdzj_OSlg zx?u<%>U@hnOp*YGVD7!hN~}Hx6-_b%w{ghv@$m=P<+FK+2bCPZYLwB=&_o)yr(9vI z3WX)RTx4c4OG^Q}UZQ1%-elgOXD}g1Gu)j)_U5}%NXa-l)_#Y17Qs)^*-JKH`c3x> z7&Rjl7k&j?h&0|eH%1ntLx;Yone3c7LEMe@7ka2T%_bRuL{?tC$=rPX#g_Yr=ok?i zGisyWBm#R!wy@H~>V}7tbCjvv9^778ss?_>mYqN=I6=f0CMosH$z8;BvZ|^&E}qb) zk9-%h1#K=km+`&bNS?qUkDu!pz)2=5+3f`tJFlO8g-a?7{KV(eY%9qpji~w5N(2<< zQ57d4-?2o8aYcEnPtf0vZonXpsPYDnK{pODDNQ^@!{7tiqNlpEHIn{BqoqNo={11V z@VmzMAL>sc3rt5M3}2O%1~+oaXA_J@ezs!KtTnnWxk%IBpW>wte|&8}Jg#5pz(*ssKT328KjLkI5?p z6iL`tenDOuzar$OYv%>DFy})?6RSt$>EbnZTcmf<7<@3Do2P;!gD3D9j5W2`+MUS1 zyWc;Y&bZI`G?&r$Ac~*NROhM#etEc^O#u-wkOwF9M7uL=d#lEfJbQMF^-2xF?5wBl zFPncfD#1zl72)!4g@xMq1bsrbS2K@eYv(3%9Si}~q8`XyPF|01bf-QwWsR%?Fr9i4 zacsTe{5E4Zo;<~{VlDwDGXs2qwCreWTL!af4ke1+hK`*~auy7~mI>_*P_7{Y8v&|8z(2 zqcX8Y+#ID{&X~`@hnz;XISzeQk}9BJ?!Lr`YFc_5*`UU!8w|I5aWhhVRXi&9Y>gFqs&B-WXb`MTRK^OGN#7-0Gvy`@ zVEajHc-z5YbO&R3T5Taq^ErA5g zE>XHjCM?j+a5?B4heZdGadeGk^d)m!%-5%RgGP!zN8><}1xANnL3BvmV}}+8^AFL5 zKi(Q#PQ;HMaYOYh1|kRnTm?pPD)fQ(J1*4|ib0)$t{T)t;W^?}1C8jXjZDPJ>oCa^sK9)26`D9FNDq zWTAo>o5R`%gSTNep7{JHH0c&VGQj3O3WvP)bi75tE>_@n&j zKPFi`G1h!I=`T?ub<^8^g`0>&UhSEgmEL&1uk9&`T0hIm%8G!Y9_L^e!IQ@= z*(+!TBaB*rPt-h8AM65x$F_No*H(_Z7kE26yU0wM&f_I0;tJTuYh8v$Grk4_>^Cwx za76-m>h~>WG~#}@go8%b1!*me9Gkpj+@j>xOBm-=JPmR(G^ zfW_n_-o{v!CEn^7+I8cY;tvlwx^zO>OUEF5yWc;FcAMuek|!8xmo24h8>K#d#UbEo zYw*qY&2n?Wwd+Xl2Ck{Q&qoQw3!;Tod@&-)sj>W7&z#z~YiDaDbePDKq3C5JvVxsY zFTplsl5DwXw~0ORxl@jf)8@hO#p9o6N1po?_#M83xBFb@0Gpll>Df_O zRVTHNPR&6Rc$Jtq`wl%ua9MhK<73~Q>*an^>AN7Qq^9YH}vN728M4NC%&4Zw1!05?o;gX;%kZ zX;(f!#=BZfqjNRR2gT%LQ4lJ|mD_>>FT*l!p|w- zLiyHHZp@>tbkRt1ZWpum-0D*$PhPQWHk#|e5$No>9;nc6{K)h}YsTe7rbsFa!RBfE z6X6EnY06!jeSeLLv!c)*tgWFg1GY2UZKqLAiLTvr6o}9(n^1iUxMqR;(_-X?{!ev&zD=N#--3H5ZI@Rxu)V2_?s!i5C!^ zneR>X42tZEdSl=O6&h%Zdjq5O>{9!i&}NyMA{M9J6>asAKT;x!$YIIU@9~%ZDixrQ z!oqf)@#UO23RAUo&du_DKd_)q6rJq2ntIU*O%0eT+U;TT;SKYf+x{q#B`Z+bELdT< zJr%%M!;j4#ZpDG8ULfYLIqUW{Q2y<$Wq>x#QqjHyJAfNB{?!#i?wu{u2R{p`ss4Dg z{!$pWUs@l*sjT-mcRSAwc6W48^caxKbIn zcPE_dzn#6`C_*no%mfu5Yj>_bem0Leu{`iIR!WKZuKNYp}XVGS)=2 ziamnj4hf2i3I^r+6RFHQWWi!)mCU(GWRdHFozGi#!>{+Tko$uu3E@M%qX{333wtWd zL!_7b(2DR3Gc6x2r6geR5Dy^ve_=_m-SzFz+R8rRb3cle%2ceY_3`y~JQ?i3s*(1L z^0rNv;4L~-lWx(lX7H?Y&)*~BG@k8lmrT{)*hOcdlh1;~I zfm!MX!P%Y4U+{>98?tk> zIaRhd(>YcMlOjNPG&J}!WCD6QBW+!YFJnetV{s6769fZO-_;aml z+Be)gMvA!Lki&@0lWSxa*S8H>+q-}h1PP@U61||6;6O}ydOBuL4niWc{EI!iTfE{I zpTA?V#~3V%;>xXaB;A5X^Qxl}Tll&!nyd~2cBpZ0&n~rIs8&EPj<;-pl4ZyIEUHur z4yWE3F6tldLL;!dsbhUX0nZdxjmWrHvfB*R@6(I*kZu*=Y~01&RextZ*`Ku{T|l0h zw$97lI29ZJYv9dwan`ovn{x^AVA8oop)Y#FTRD63lrp*JN;0#!Ml$5f=>){P=0-xL z)}x<5!6*G|=Y)WF7VnQ=zpAkM6b8v^&)K^r>EF39D<9)55vC`L#D7?$jh1lCw;qEh{m zaky7Ya?@CNH|Kn~xygijd*0)scKZ_qJnOy6@fW)bk$$ah3+lT^T zs5Ic57-Uk)c#JZ_id&KbdWpiKMZyWvzULh7@9NvKim}g zFPp{=XL~nwVqlS)da1QC$xX%mwB}|--Z4?yCPzndR(pB-xF79azsprtq7NpFk@{V2 zOhFo6;ySTW&UrKM?|5n_de?=TJQi&dv1-_#WYgHDptwjv4~vuV*~xxl{rZ?Tm(5nr z;NZ|uQNkBi=B_T`30G0#YXx4h8Sq%p1Xp2TJP#-5yY@O7dOmnL>i#ecr>RlvS!quc zR%Jmp=OC9-sa&-3Gy6NCwox~oOGz)6{yjf2av3Kq2pygT%K#E5yDO03_O>I-oP5Rj|uUy zTH`YEsryOfLe#@y^_w3}e{OejDy4?or#Jme(fB2Giiu~j9i1EDgSl~i0qxpGyVdKp zPxZw+gINU}J!+6{Zu4mmL$^?<-`6}>{feUT{d~Z_qd>5e&DW5M%4Rp^k72aj92{^N zlZzt%WE}kYU0N>=W)4T$EuNnz-48=$M#hE(YtOR_sU@bWl*ZVD@a?umm1U?QNxW2l z9n1_!Ot$Z+d->V#d``;Y`*gEhZW>__ZhFeAHoQwLrIuPT<`d0(;@u&{gv1NmhK!w` zq^I|ev$Ro|wx&s7#(zw;#d2xvkkZmpM%7Ro#azWu@;alVJ%uJ8mh-tX2=YqM;$VaT zdh9GWixp7>vz5O_i}veV!ir(}%sp~|t(JV%LjDo8H+PAMp{b*aoQ|oX>}tsW!KUf0 zmfe5&9mgY>!;1a%Z1vQOYpR5iwibX(c_92g)^yVc8r zWAeXwa@ur6vVGlGXl$1G-g)~r+V%1%^E@nBG|cB^*K2~$67V`m!kjXDQdWKJK1ay)dbX|PbK%xw)OMjmw)bv05G#i7?bP)gDv1y=&g{4XSaP||4Jp6J3wP48_v!Qz$4V0jE> z{zcO3H^097{(rT1<>64b?_TvrCDS6r43eToC=6p6DoN@^V(d#~nb0tdbwa(p8CfeN z`@YTCvhPb?WSb0w7-L_D8Cl1gGwA%T^Y^*Vb)9prbH4vS&-c0S`&sVwb31%JQWCj5 zuHq-5+$RS`&;Iy8T*-Ks_PI%nF>{z%()AAd&i$r!*Q<{od)80h<6xdVrR^|IuTA+1 z|Ks0lT$c6R*iKa7(^k=jhzIR71alvI-L%)+)wsLt`sB2Y@xLDRnP`4{3&AsN+fFh~ z_Qj`i`%D~|#>H4BBddm0&?)3v`y=umjmqH8)jD@X_!!y7%zwP%5KQ{=w|-q3 z@T~W4M^@HZH)NmAGhc7hPY~xPq>cuuS6SvPHe+$mRUJ~;g1QjLl+X#(`($x&I|V~J ze^vk{@*s2R;>{P!kIgi{*v&4;GbH19jaNE^Wjah8#Bav@-W7U-He6f|MqXNZ4I|oh zFIo~thTSLlinkiV8>;>lmAFA6dh=(n#pc$aOjK>Yj!(`U1Ox2^IL9GyDHEyXGJ2L#mtMdTtSZs}&60YmJ+ANjqmBbB zqJAn<^H^wKDhJt1ker=B`FCGH@1=q)e75}@-?zhStGuJwte*I=(o!+8t&^k_Yx;v7 zF3x}V_aru{AxA?$9c4Fh?PcPx?^doalGg%}RC+=l1#K^>9fd3$(zBF_ikFH?RDkPy z=4^Z;jyH0Z2C`!N{dsbmK-PzNWTpc9&e!q>of$w)b)bSEP@n3Iq>?eP zHHiOrW@1Fs7er&S>LFE3Fvt8YcXX4cjhJ?30FX)G>O=T=} zKZ6`!lLoNjOn*oDlP=|^14~)=at`S5k9NYh@4jRk&khR_F5a z1X5BjMDf%_FaMRjqt_|Tbqp>cFT#7E>Zui!l-{TkglO2+_f8N*%B=QFDoql?^^6!hISrkS2+$+E~YDPA^a zcEhF7eF|O?@~6a;>&%Hbz$TGutk;Dx%Yf?cmf9eVuGzoK=zL zYL!s+_6g#cQg0>Lq?gGWyOA%`A`_P;5PltpRq64j>~r^b5zo-|ow};FjPAEkdHJA~ zD`%D%3p{j>kme>>9keI~mt)>RZ02oIBd`p5QaR4>d`E4yj-ThnCk{0YXv(-*?k|lc zNlSXpKi9W%EX{>?V7u9}MkLXxCFK6(*twdFd+QZOvWEFi0lBTf^%bMc(lH}KDiR+a z`oodaTdSwC{N2jf0`-D-iFVgd`j)SmTdnctLndUz5GiGKLl;{%V*pQRVV@r#XJ*!t zIOHu#q*@WQ8)?7)`^NIRF%Kh_O?hF_>n%cf43@u+T3kzfIg3|== zEBWqV@ruV5J(LqA#2P-pY->TjQ*ORel-cnyZz(*<_{kWhpORmP{S(Hjy(|vZ2d@BH zfD2Q79*eE~Hj$rVPNZ(W2LAz~1v5bznP1m)NdKepKU+>QiB7oXX%5U_!g<8dVX(Xh zts^#^aL94obTiJh{&u9Skx1#f5AUQ~B)$kgfi>IR_D%KcQAb{JYE%4ahO`~OZbD8+@WseZ0ZyJBjwxvJ1#YTdS`OYp|(2l>Pjx$_|`r{d44(~UTuU#JH99(_c4mB)Yb&$pO6W_1L;4srgYaqqON}D5{Od?r_LBQbNBl&HM)>2TJ+FwYvD&Z=ID0FtS?$SSs1&D zTJ$KtHs`qaY0yUZ^T$JXOh)r1-W>S?5SW`w<%JR%fgfP22IcLUUeBA<-4m6{ zn;z>ub({Qob7ToqSSKzn-CG5(%ObDK0#nAvsB=#{UvuJS=6*0VOPvkBR)RJmt9_`~w$s1MWI_ec_F6~UwTMd9|~)5 z7j6aM&-dF1C(5ZnzQM`fgQL`((9@rXpW1(4DIXOvodknRCUhtL_}ebnuYyLsz}v;w z7nQjE#IN5FQ}Q(yn0>lS4f-;p-0LIv2fy6G&VyoeiSF8A_4;8bB9u~s{!B2~9*OeX zv@grT@0^1e1!bs1QGP`flx@C7nLuKb0bYQ)2u|b4}K{}<^ zZSMZJi;J5UAwZ>p{$J?z!m*;^zyhasIW>BvmEH^F6Vs<_v&rs1FF<%2e`}J(Y0Q=f zDJDE4bR^6KHo2t&_(^gwP$?{vp!{53yezm*J2o=qyV~Njm6XRxpYONVT}CgbiF=GY z54~loH*x)qy~J0I`Zlia@~*=%5|=pc@94$DRB0q$JMbw{b=^1-3I8M4_bGkV{yDdG z4l@6O&79=4E6*4k1wP^Kn$ zuXbISQk2ow2>NVyh#q6VR^{~VQgWvHV?6fnky$^b0kn0$#&(Z`;K}PMW}DPbl{Omr z7q{$lt%45aN%!$e&JWVt{$}$$Wg^& zlcQgQyNNK-?GS`dp_aN9HK~*x3I=sv03h)K>B4V7V+D95^=e(luHNWVpBBjj+=f@} zCbZiea%}qQZi{)>m5uZn=v_RP$tbnXuE?dLzW}?Q?gZl3oF_&(ikr?N!GEn#P<^=8-^zo<+D%{`p5ti7Ff!y6nFRi#7rf4tyR_ist3r`E@PB`JsXvvi(cP$PQE zI8*+dMNZOMS^nt~r^Ghp8piy@Cht`@OfQn~Msz#0O7WZK40t3PW?_92+uHu%7VQxB zB+36+Q10NvwoZ!L_fKN9k@wQn&{wZHSJ}$q;*k?=^SjpOE~8aLTUVFeefPFNL_V)> zeI6xPRola$!5gCmdhyEk%A^sojt_0TDv76R21TC+MD1n|U6jhrEGhr`+2OiauCt3f zm6tj;ne(xsMNaaH9bGPPMM$#I*v3-+AU?waG8nH%e|p=Zy|}mj&zc|TJ*ND@a8Z9G z8Ao8frhJF4D{yLU@ZG`Ww|&l zqyo-WS}A|kR7Pt|7h~=^!gZYYs)@dWjK|+f*$82#1FK-oxHQ9dJ4>RtcaJ(pU7LK* zY(nOgw)?}eH0r#d81AM)T`^TGdk-!{?@LaJQpYSwPSxzIdanrMaYEqI%52yRh}_!p z9;I?)S9#n^-MFV*UfTkC4O)mz&$8Mp6D}gzi%fZ=7 zQn-Y8!3T&u&3EdNHrm6%h7ZtcY`i(O$KSPS&!*YU#<6(L_l+N1EpiO86o&87E#(Vj zZ~yxlvuloqNsX6BfpC)=D+sa__%cjyUH*<9d8L+rO1h!(b%`rk6;(0UQtbq^hJmdP zL1Osu6=4PtW6i6LpBEm~TiUf1?W`JQybNHEbe9^7D`Xe6ANwKo1yJUctyCk<@Ebor z;63iw*VYr-XZ!M?&}UStcQ&+q9k4kQr#TflwXdkt+Bbi7q|4L_pnieap?pP&X1xVz z>r3I5u9fm?=v?0UF6ZP@A5!3?0ZqLxLm*4KTRWF zEDY;)5^-bi&+0tK?@WFp-+%Oa_V)ex*0Ap3kD1(Ssi&JW4`%2JWTo)93tHHTOLEaV zj8WeGOKu@r;u3@=Hjo>^J^otWHC!kV2fl~BmVaaW=32!2r-QMt`hH+^BH#(b z=*ee9Lap|8LA7n*NjRDERgszWg9YPa_|E7W{3zhW>gieD$iBum3(+gC`A4OfcwoW&k~j0?Q%yvtWt67B%CxpE$f~x z`#-0!20AF{D57=1BiXn4gISEZ9`e)@Xd%soo0gh_+nEpURpFsK#vxA-omI~|qi-Gt zLTB}igHP(M$xZG_YhFK6c_hKuiP+c8e&%IVDeg{+j*pF$lMaM>dW4?gQRZ^&iPH#KJSWE7YBkEO$&JCs|q9YnwsrWLs zAU#pxWtU@u8@ z*J8G?Ma@pVY=6hP3*qA^J{~d3!g735;OR@7Wbw$WHI(fN zh3uxL>$%r9e{J+z*zUAHajSfXRxOr=sxevh$8T0S#++uSx{W`M*Oa&aWziG%%ugd) zKFj3uL$@(}gx&zS?$P#5iFuX625z>@0CswD8Q9tY(nzY!PQLiWWxjr69|hgbARQ(K4TwgR$aHN^Yf7zzVbI56_FuHIJ_h zZZywySIwmR+LWE!bu(b~`nyu0>{nle!KX}~%rw3;SGei2QHi*IiwtB3LEcREft&>7 zH??tuR;azx;CEXPWbZ`;>f4?h+ylt#tonJ;vxPn-{!X;C$=Njs2Rg+C%s6`K|1ae^n(K_%>n5A1GbHpUZIg~3(LnO3#CxOydLFGN)2 z{L~w0eWsSJ9t42@XmiLfl^r~rd-{Q;b6fiFLd1C8m3ZhqG2WKwH@mRE*gVfLR!(;- zR5_Rp^+Gs5e1b<9gCB`=H4RJ`lXf;Zo7CsSyq*hD&aU~ll034H0>%uRQMLweX#V0P zGsD#R987CxGbkkzy?+Qm|4yr8=MYIQ9Cdu_8!S3?wOj%<&CJDu+zeSu?7XUA5+Oqj|}2 z1SiK9C{9sJtv88KaWzEpPt*57^9{rWYmg>~!Sf5QCt9BI!QV*Bg0C=re#~!l2O{@) zssjzQ!{TKEasCu(LWu0W*i2vwhkq9IBPzf<*&ksK0H_nXH=efmr|Jo1( zxz`bLIMgtR7Ypr)R1NTN4}iX`qdhJbl2D+WeIeV5U}tYh0J;Xaegw39@4nX#&_9G8 z(?lpwoLzecK)H9dMcZ`>c6;KROg!NxLto1%U@*rPLgq`=G(Pu^O_l8#`Apl1KEnK= zI?`3lEe#MNAv?93Rgb+>)r}KMGL9 zS}}XaG^t%aWN?x=v@0@|W6;T!#_jwg-l7AQOgl7DW#K%k#qjQA`x%oBcK~#OPcos~ zo#VjzezlJNpn=7uBF7Z3jAl)2j9(WQJS>J%=&R6as`!AVc2lZ79P4!iUmpfEA7)Vh zEL+z)7|n8f>^~RdsorBcL-+P{UyKSdMZ~)Q2pnTE{DXgW3t2n8FEkA`t$TTQpZ@i4 D0&$xk literal 0 HcmV?d00001 diff --git a/mkdocs/docs/assets/repo-data/admin-changemaker.lite.json b/mkdocs/docs/assets/repo-data/admin-changemaker.lite.json index 753510bf..2e17825d 100644 --- a/mkdocs/docs/assets/repo-data/admin-changemaker.lite.json +++ b/mkdocs/docs/assets/repo-data/admin-changemaker.lite.json @@ -7,10 +7,10 @@ "stars_count": 0, "forks_count": 0, "open_issues_count": 0, - "updated_at": "2026-04-07T17:26:04-06:00", + "updated_at": "2026-04-16T20:55:22-06:00", "created_at": "2025-05-28T14:54:59-06:00", "clone_url": "https://gitea.bnkops.com/admin/changemaker.lite.git", "ssh_url": "git@gitea.bnkops.com:admin/changemaker.lite.git", "default_branch": "main", - "last_build_update": "2026-04-07T17:26:04-06:00" + "last_build_update": "2026-04-16T20:55:22-06:00" } \ No newline at end of file diff --git a/mkdocs/docs/assets/repo-data/anthropics-claude-code.json b/mkdocs/docs/assets/repo-data/anthropics-claude-code.json index 08cdcbf4..d3d46ae3 100644 --- a/mkdocs/docs/assets/repo-data/anthropics-claude-code.json +++ b/mkdocs/docs/assets/repo-data/anthropics-claude-code.json @@ -4,13 +4,13 @@ "description": "Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.", "html_url": "https://github.com/anthropics/claude-code", "language": "Shell", - "stars_count": 110600, - "forks_count": 18415, - "open_issues_count": 9302, - "updated_at": "2026-04-07T23:27:04Z", + "stars_count": 115550, + "forks_count": 19277, + "open_issues_count": 10258, + "updated_at": "2026-04-18T20:36:34Z", "created_at": "2025-02-22T17:41:21Z", "clone_url": "https://github.com/anthropics/claude-code.git", "ssh_url": "git@github.com:anthropics/claude-code.git", "default_branch": "main", - "last_build_update": "2026-04-07T21:18:51Z" + "last_build_update": "2026-04-18T01:34:30Z" } \ No newline at end of file diff --git a/mkdocs/docs/assets/repo-data/coder-code-server.json b/mkdocs/docs/assets/repo-data/coder-code-server.json index 3b4d5703..c991accd 100644 --- a/mkdocs/docs/assets/repo-data/coder-code-server.json +++ b/mkdocs/docs/assets/repo-data/coder-code-server.json @@ -4,13 +4,13 @@ "description": "VS Code in the browser", "html_url": "https://github.com/coder/code-server", "language": "TypeScript", - "stars_count": 76998, - "forks_count": 6596, - "open_issues_count": 143, - "updated_at": "2026-04-07T23:08:42Z", + "stars_count": 77176, + "forks_count": 6620, + "open_issues_count": 138, + "updated_at": "2026-04-18T19:11:47Z", "created_at": "2019-02-27T16:50:41Z", "clone_url": "https://github.com/coder/code-server.git", "ssh_url": "git@github.com:coder/code-server.git", "default_branch": "main", - "last_build_update": "2026-04-06T23:31:43Z" + "last_build_update": "2026-04-17T19:14:57Z" } \ No newline at end of file diff --git a/mkdocs/docs/assets/repo-data/gethomepage-homepage.json b/mkdocs/docs/assets/repo-data/gethomepage-homepage.json index 7540e1f6..cd00ee16 100644 --- a/mkdocs/docs/assets/repo-data/gethomepage-homepage.json +++ b/mkdocs/docs/assets/repo-data/gethomepage-homepage.json @@ -4,13 +4,13 @@ "description": "A highly customizable homepage (or startpage / application dashboard) with Docker and service API integrations.", "html_url": "https://github.com/gethomepage/homepage", "language": "JavaScript", - "stars_count": 29403, - "forks_count": 1853, - "open_issues_count": 2, - "updated_at": "2026-04-07T23:17:05Z", + "stars_count": 29626, + "forks_count": 1889, + "open_issues_count": 1, + "updated_at": "2026-04-18T20:32:38Z", "created_at": "2022-08-24T07:29:42Z", "clone_url": "https://github.com/gethomepage/homepage.git", "ssh_url": "git@github.com:gethomepage/homepage.git", "default_branch": "dev", - "last_build_update": "2026-04-07T15:04:38Z" + "last_build_update": "2026-04-18T12:22:41Z" } \ No newline at end of file diff --git a/mkdocs/docs/assets/repo-data/go-gitea-gitea.json b/mkdocs/docs/assets/repo-data/go-gitea-gitea.json index 15639a62..f843c370 100644 --- a/mkdocs/docs/assets/repo-data/go-gitea-gitea.json +++ b/mkdocs/docs/assets/repo-data/go-gitea-gitea.json @@ -4,13 +4,13 @@ "description": "Git with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD", "html_url": "https://github.com/go-gitea/gitea", "language": "Go", - "stars_count": 54776, - "forks_count": 6537, - "open_issues_count": 2822, - "updated_at": "2026-04-07T22:34:41Z", + "stars_count": 54976, + "forks_count": 6589, + "open_issues_count": 2824, + "updated_at": "2026-04-18T20:39:30Z", "created_at": "2016-11-01T02:13:26Z", "clone_url": "https://github.com/go-gitea/gitea.git", "ssh_url": "git@github.com:go-gitea/gitea.git", "default_branch": "main", - "last_build_update": "2026-04-07T17:49:08Z" + "last_build_update": "2026-04-18T20:40:15Z" } \ No newline at end of file diff --git a/mkdocs/docs/assets/repo-data/knadh-listmonk.json b/mkdocs/docs/assets/repo-data/knadh-listmonk.json index 506b8d99..6a9a0f93 100644 --- a/mkdocs/docs/assets/repo-data/knadh-listmonk.json +++ b/mkdocs/docs/assets/repo-data/knadh-listmonk.json @@ -4,13 +4,13 @@ "description": "High performance, self-hosted, newsletter and mailing list manager with a modern dashboard. Single binary app.", "html_url": "https://github.com/knadh/listmonk", "language": "Go", - "stars_count": 19474, - "forks_count": 1986, - "open_issues_count": 97, - "updated_at": "2026-04-07T22:55:19Z", + "stars_count": 19565, + "forks_count": 2002, + "open_issues_count": 101, + "updated_at": "2026-04-18T19:55:06Z", "created_at": "2019-06-26T05:08:39Z", "clone_url": "https://github.com/knadh/listmonk.git", "ssh_url": "git@github.com:knadh/listmonk.git", "default_branch": "master", - "last_build_update": "2026-04-04T03:05:00Z" + "last_build_update": "2026-04-18T04:46:18Z" } \ No newline at end of file diff --git a/mkdocs/docs/assets/repo-data/lyqht-mini-qr.json b/mkdocs/docs/assets/repo-data/lyqht-mini-qr.json index 21dc4b8d..c211a390 100644 --- a/mkdocs/docs/assets/repo-data/lyqht-mini-qr.json +++ b/mkdocs/docs/assets/repo-data/lyqht-mini-qr.json @@ -4,10 +4,10 @@ "description": "Create & scan cute qr codes easily \ud83d\udc7e", "html_url": "https://github.com/lyqht/mini-qr", "language": "Vue", - "stars_count": 1946, + "stars_count": 1972, "forks_count": 246, "open_issues_count": 22, - "updated_at": "2026-04-07T19:45:59Z", + "updated_at": "2026-04-17T18:24:10Z", "created_at": "2023-04-21T14:20:14Z", "clone_url": "https://github.com/lyqht/mini-qr.git", "ssh_url": "git@github.com:lyqht/mini-qr.git", diff --git a/mkdocs/docs/assets/repo-data/n8n-io-n8n.json b/mkdocs/docs/assets/repo-data/n8n-io-n8n.json index 83ba8a62..281cd31c 100644 --- a/mkdocs/docs/assets/repo-data/n8n-io-n8n.json +++ b/mkdocs/docs/assets/repo-data/n8n-io-n8n.json @@ -4,13 +4,13 @@ "description": "Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.", "html_url": "https://github.com/n8n-io/n8n", "language": "TypeScript", - "stars_count": 182875, - "forks_count": 56576, - "open_issues_count": 1502, - "updated_at": "2026-04-07T23:16:46Z", + "stars_count": 184582, + "forks_count": 56921, + "open_issues_count": 1514, + "updated_at": "2026-04-18T20:37:25Z", "created_at": "2019-06-22T09:24:21Z", "clone_url": "https://github.com/n8n-io/n8n.git", "ssh_url": "git@github.com:n8n-io/n8n.git", "default_branch": "master", - "last_build_update": "2026-04-07T23:30:49Z" + "last_build_update": "2026-04-18T18:20:27Z" } \ No newline at end of file diff --git a/mkdocs/docs/assets/repo-data/nocodb-nocodb.json b/mkdocs/docs/assets/repo-data/nocodb-nocodb.json index ce3f8e49..dd1c4794 100644 --- a/mkdocs/docs/assets/repo-data/nocodb-nocodb.json +++ b/mkdocs/docs/assets/repo-data/nocodb-nocodb.json @@ -4,13 +4,13 @@ "description": "\ud83d\udd25 \ud83d\udd25 \ud83d\udd25 A Free & Self-hostable Airtable Alternative", "html_url": "https://github.com/nocodb/nocodb", "language": "TypeScript", - "stars_count": 62628, - "forks_count": 4714, - "open_issues_count": 669, - "updated_at": "2026-04-07T21:46:28Z", + "stars_count": 62762, + "forks_count": 4728, + "open_issues_count": 670, + "updated_at": "2026-04-18T18:15:04Z", "created_at": "2017-10-29T18:51:48Z", "clone_url": "https://github.com/nocodb/nocodb.git", "ssh_url": "git@github.com:nocodb/nocodb.git", "default_branch": "develop", - "last_build_update": "2026-04-07T14:16:44Z" + "last_build_update": "2026-04-18T18:27:20Z" } \ No newline at end of file diff --git a/mkdocs/docs/assets/repo-data/ollama-ollama.json b/mkdocs/docs/assets/repo-data/ollama-ollama.json index 84a774aa..64e324dc 100644 --- a/mkdocs/docs/assets/repo-data/ollama-ollama.json +++ b/mkdocs/docs/assets/repo-data/ollama-ollama.json @@ -4,13 +4,13 @@ "description": "Get up and running with Kimi-K2.5, GLM-5, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.", "html_url": "https://github.com/ollama/ollama", "language": "Go", - "stars_count": 168040, - "forks_count": 15419, - "open_issues_count": 2871, - "updated_at": "2026-04-07T23:28:46Z", + "stars_count": 169357, + "forks_count": 15664, + "open_issues_count": 2984, + "updated_at": "2026-04-18T20:28:17Z", "created_at": "2023-06-26T19:39:32Z", "clone_url": "https://github.com/ollama/ollama.git", "ssh_url": "git@github.com:ollama/ollama.git", "default_branch": "main", - "last_build_update": "2026-04-07T23:28:36Z" + "last_build_update": "2026-04-18T18:56:35Z" } \ No newline at end of file diff --git a/mkdocs/docs/assets/repo-data/squidfunk-mkdocs-material.json b/mkdocs/docs/assets/repo-data/squidfunk-mkdocs-material.json index acbf1aa4..fb1f351a 100644 --- a/mkdocs/docs/assets/repo-data/squidfunk-mkdocs-material.json +++ b/mkdocs/docs/assets/repo-data/squidfunk-mkdocs-material.json @@ -4,13 +4,13 @@ "description": "Documentation that simply works", "html_url": "https://github.com/squidfunk/mkdocs-material", "language": "Python", - "stars_count": 26468, - "forks_count": 4069, + "stars_count": 26571, + "forks_count": 4070, "open_issues_count": 1, - "updated_at": "2026-04-07T22:53:37Z", + "updated_at": "2026-04-18T17:06:20Z", "created_at": "2016-01-28T22:09:23Z", "clone_url": "https://github.com/squidfunk/mkdocs-material.git", "ssh_url": "git@github.com:squidfunk/mkdocs-material.git", "default_branch": "master", - "last_build_update": "2026-04-03T22:40:45Z" + "last_build_update": "2026-04-16T14:42:25Z" } \ No newline at end of file diff --git a/mkdocs/docs/docs/admin/advocacy/campaigns.md b/mkdocs/docs/docs/admin/advocacy/campaigns.md index b4198f0a..f8cb34d7 100644 --- a/mkdocs/docs/docs/admin/advocacy/campaigns.md +++ b/mkdocs/docs/docs/admin/advocacy/campaigns.md @@ -40,7 +40,7 @@ Help supporters contact their elected representatives through email campaigns. ## User-Submitted Campaigns -Registered (non-temporary) users can create their own advocacy campaigns and submit them for admin review. +Registered (non-temporary) users can create their own advocacy campaigns and submit them for admin review. See the [user-facing submission guide](../../user-guide/campaigns.md#submit-your-own-campaign) for the supporter's perspective. - **Public submission route** — users visit `/campaigns/create` to draft a campaign through a guided wizard - **3-step wizard** — the submission flow walks users through campaign details (title, description, government levels), email template (subject and body), and a final review step before submitting diff --git a/mkdocs/docs/docs/admin/advocacy/representatives.md b/mkdocs/docs/docs/admin/advocacy/representatives.md index cf4fe136..ce3bf20a 100644 --- a/mkdocs/docs/docs/admin/advocacy/representatives.md +++ b/mkdocs/docs/docs/admin/advocacy/representatives.md @@ -22,7 +22,7 @@ The platform uses the [Represent API](https://represent.opennorth.ca/) to look u - **Postal code lookup** — enter a Canadian postal code to retrieve federal, provincial, municipal, and school board representatives - **Redis cache** — lookup results are cached to reduce API calls and improve response times - **Cache management** — view cache status and clear entries from `/app/representatives` -- **Government levels** — campaigns can target specific levels (federal, provincial, municipal, school board) +- **Government levels** — [campaigns](campaigns.md) can target specific levels (federal, provincial, municipal, school board) --- diff --git a/mkdocs/docs/docs/admin/broadcast/newsletter.md b/mkdocs/docs/docs/admin/broadcast/newsletter.md index 384643d7..e8ff49aa 100644 --- a/mkdocs/docs/docs/admin/broadcast/newsletter.md +++ b/mkdocs/docs/docs/admin/broadcast/newsletter.md @@ -44,7 +44,7 @@ The admin panel provides a manual "Sync All" action that synchronizes four data 1. **Campaign participants** -- distinct email senders from advocacy campaigns 2. **Location contacts** -- address occupants with email, mapped to support level and sign lists 3. **Users** -- active platform accounts (excludes TEMP users) -4. **CRM tags** -- contacts tagged in the People module, synced to tag-linked Listmonk lists +4. **CRM tags** -- contacts tagged in the [People module](../people-access.md#people-crm), synced to tag-linked Listmonk lists Each source upserts subscribers (creates new or merges into existing), preserving existing list memberships and merging metadata attributes. diff --git a/mkdocs/docs/docs/admin/dashboard.md b/mkdocs/docs/docs/admin/dashboard.md index f283e83d..c1e4baed 100644 --- a/mkdocs/docs/docs/admin/dashboard.md +++ b/mkdocs/docs/docs/admin/dashboard.md @@ -18,11 +18,11 @@ The admin dashboard (`/app`) provides a real-time overview of platform activity. ## Dashboard Cards -- **Platform Stats** — active campaigns, total emails sent, registered users, and location count +- **Platform Stats** — active [campaigns](advocacy/campaigns.md), total emails sent, registered users, and [locations](map/locations.md) - **Activity Feed** — recent events across all modules (signups, emails, visits, responses) -- **Upcoming Shifts** — next scheduled volunteer shifts with signup counts -- **Newsletter Stats** — Listmonk subscriber counts and recent campaign performance +- **Upcoming Shifts** — next scheduled [volunteer shifts](map/shifts.md) with signup counts +- **Newsletter Stats** — [Listmonk](broadcast/newsletter.md) subscriber counts and recent campaign performance - **Chat Activity** — Rocket.Chat channel activity and online users (when chat is enabled) -- **Service Health** — connectivity status for integrated services (Gitea, Gancio, Vaultwarden, etc.) +- **Service Health** — connectivity status for [integrated services](services/integrations.md) (Gitea, Gancio, Vaultwarden, etc.) All cards auto-refresh and gracefully degrade when their associated module is disabled. diff --git a/mkdocs/docs/docs/admin/events/check-in.md b/mkdocs/docs/docs/admin/events/check-in.md new file mode 100644 index 00000000..9b35b109 --- /dev/null +++ b/mkdocs/docs/docs/admin/events/check-in.md @@ -0,0 +1,81 @@ +--- +title: Check-in Scanner +description: QR and manual ticket check-in for ticketed events at the door. +icon: material/qrcode-scan +status: new +tags: + - guide + - admin + - events +--- + +# Check-in Scanner + +Check attendees in at the door via QR code scan or manual lookup. The scanner runs full-screen at `/app/events/:id/checkin` — ideal for a tablet or phone held at the entrance. + +![Check-in scanner — manual mode](../../../assets/images/screenshots/admin/events/checkin-scanner.png){ loading=lazy } + +--- + +## Opening the Scanner + +From an event's detail page at `/app/events/:id`, click the **Check-in Scanner** button in the Actions row. The scanner opens full-screen (no sidebar or header) so it's usable on small mobile screens. + +The scanner shows three live counters at the top: + +- **Checked In** — tickets already scanned in +- **Remaining** — tickets issued but not yet checked in +- **Total** — all tickets issued for this event + +--- + +## Scan Modes + +Switch between modes using the toggle at the top: + +### Camera (QR) + +Uses the device's camera to scan ticket QR codes. Each ticket email includes a QR that encodes the ticket code. On first use, the browser will request camera permission — grant it and the live preview appears. + +Valid scans auto-check the ticket in and flash a success banner. Duplicate scans of the same ticket show "Already checked in" with the original check-in timestamp. + +!!! tip "HTTPS required for camera access" + Browsers only expose the camera API on HTTPS origins (or `localhost`). In production, the scanner must be loaded via your `app.` subdomain over HTTPS — not an IP address. + +### Manual + +Two input modes for situations where QR scanning fails (damaged code, no camera, printed ticket list): + +- **Enter Ticket Code** — type the alphanumeric code from the ticket (format `ABCD-1234`) +- **Look up by Email** — enter the attendee's email; if a single ticket matches, it's checked in directly. If multiple tickets match, a picker appears so the organizer can pick the right one. + +--- + +## Permissions + +The check-in scanner requires one of: + +- `SUPER_ADMIN` +- `EVENTS_ADMIN` +- Ownership of the event (the user who created it) + +Non-admin event owners can check in attendees for their own events but not others'. + +--- + +## Audit Trail + +Every check-in action is recorded with the ticket code, the user who performed the check-in, and a timestamp. The full log appears on the event detail page under the **Check-ins** tab, and is included in event exports. + +Tickets marked as cancelled (after refund) cannot be checked in — the scanner rejects them with a red banner. + +--- + +## Admin Routes + +- `/app/events/:id/checkin` — full-screen scanner for a specific event + +## Related + +- [Ticketed Events](ticketed-events.md) — creating events and tiers +- [Payments Settings](../payments/settings.md) — Stripe configuration diff --git a/mkdocs/docs/docs/admin/events/index.md b/mkdocs/docs/docs/admin/events/index.md new file mode 100644 index 00000000..ec8a6b9d --- /dev/null +++ b/mkdocs/docs/docs/admin/events/index.md @@ -0,0 +1,87 @@ +--- +title: Events +description: Ticketed events with Stripe checkout, multiple tier types, QR check-in, and attendee management. +icon: material/calendar-star +status: new +tags: + - guide + - admin + - events + - payments +--- + +# Events + +Run paid, free, or donation-based events end-to-end — from creating an event with multiple ticket tiers, to Stripe-backed checkout for attendees, through QR-code check-in at the door. + +Ticketed Events is a separate feature from the [Gancio event calendar integration](../services/integrations.md) — Gancio publishes shift-based community events, while Ticketed Events handles commerce, capacity, and attendance tracking for in-person or online gatherings. + +!!! info "Feature flag" + Enable in **Settings → Feature Toggles**, or set `enableTicketedEvents=true` in the site settings. [Payments](../payments/index.md) must also be enabled for paid tiers to work. + +--- + +## In This Section + +

+ +- :material-ticket:{ .lg .middle } **[Ticketed Events](ticketed-events.md)** + + --- + + Create events, configure tier types (paid, free, donation), publish, and manage attendees. + +- :material-qrcode-scan:{ .lg .middle } **[Check-in Scanner](check-in.md)** + + --- + + QR scan or manual lookup to check attendees in at the door. + +
+ +--- + +## How It Works + +1. **Create an event** in the admin at `/app/events` — title, date, venue, format (in-person / online / hybrid). +2. **Add ticket tiers** — at least one tier is required. Each tier has a type (`PAID`, `FREE`, `DONATION`), price, and capacity. +3. **Publish** — the event transitions from `DRAFT` → `PUBLISHED` and becomes available at `/event/:slug` on your public site. +4. **Attendees register** — the public event page uses [Stripe Checkout](../payments/settings.md) for paid tiers, a simple email form for free tiers, and a suggested-amount flow for donation tiers. +5. **Tickets are emailed** — each buyer receives an email with a unique ticket code (QR-scannable). +6. **Check-in at the door** — organizers use the [Check-in Scanner](check-in.md) on a phone or tablet to mark tickets as checked in. + +--- + +## Event Lifecycle + +Events move through the following statuses: + +| Status | Meaning | +|--------|---------| +| `DRAFT` | Work in progress — not visible publicly | +| `PENDING_APPROVAL` | Submitted for review (if organizer is a non-admin) | +| `PUBLISHED` | Live on the public site; tickets can be purchased | +| `CANCELLED` | Event cancelled — tickets marked for refund | +| `COMPLETED` | Event has ended | + +Visibility controls who can see a published event: + +| Visibility | Behavior | +|------------|----------| +| `PUBLIC` | Listed on `/events` and indexable | +| `UNLISTED` | Only reachable by direct link (slug URL) | +| `PRIVATE` | Requires an invite code to access | + +--- + +## Admin Routes + +- `/app/events` — event list, create, edit, publish +- `/app/events/:id` — event detail with tickets and check-ins +- `/app/events/:id/checkin` — full-screen check-in scanner + +## Public Routes + +- `/events` — browse public events (if `enableEvents` is on) +- `/event/:slug` — event detail with ticket purchase +- `/event/:slug/ticket/:ticketCode` — ticket confirmation with QR code diff --git a/mkdocs/docs/docs/admin/events/ticketed-events.md b/mkdocs/docs/docs/admin/events/ticketed-events.md new file mode 100644 index 00000000..1d8f61d6 --- /dev/null +++ b/mkdocs/docs/docs/admin/events/ticketed-events.md @@ -0,0 +1,125 @@ +--- +title: Ticketed Events +description: Create events, configure tiers, publish, and manage attendees with Stripe-backed checkout. +icon: material/ticket +status: new +tags: + - guide + - admin + - events + - payments +--- + +# Ticketed Events + +Create and manage events with paid, free, or donation-based tickets at `/app/events`. + +![Ticketed Events list](../../../assets/images/screenshots/admin/events/ticketed-events-list.png){ loading=lazy } + +--- + +## Creating an Event + +Click **Create Event** to open the event drawer. Required fields are marked with an asterisk. + +![Create Event drawer](../../../assets/images/screenshots/admin/events/create-event-drawer.png){ loading=lazy } + +| Field | Purpose | +|-------|---------| +| **Title** | Event name (also used to generate the public slug) | +| **Description** | Shown on the public event page | +| **Date / Start Time / End Time** | Required — used for timezone-aware display and calendar exports | +| **Doors Open Time** | Optional — shown to attendees separately from start time | +| **Event Format** | `In-Person`, `Online`, or `Hybrid`. Online/Hybrid prompts for a [Jitsi Meet](../services/integrations.md) link | +| **Venue Name / Address** | In-Person or Hybrid events only | +| **Visibility** | `PUBLIC` (listed), `UNLISTED` (direct link only), `PRIVATE` (invite-code gated) | +| **Max Attendees** | Hard cap across all tiers — leave blank for unlimited | +| **Organizer Name** | Shown on the public page under "Organized by…" | + +Events start in `DRAFT` status and are not publicly visible until you publish them. + +--- + +## Ticket Tiers + +Every event needs at least one ticket tier before it can be published. Tiers support three types: + +| Type | Behavior | +|------|----------| +| `PAID` | Fixed price, Stripe checkout required. Payments module must be enabled. | +| `FREE` | No payment, email-only registration | +| `DONATION` | Suggested price, but attendees can enter any amount ≥ $1 | + +Each tier has a **name** (e.g. "General Admission", "Student", "VIP"), **price in CAD** (stored in cents at the API — the admin UI accepts dollars), **max quantity**, and **max per order**. Tiers are sorted by `sortOrder` on the public page. + +![Event detail with tiers](../../../assets/images/screenshots/admin/events/event-detail.png){ loading=lazy } + +The **Tier Breakdown** panel on the event detail page shows sold/remaining counts per tier in real time. + +!!! warning "Paid tiers require Stripe" + Paid tiers only work when the [Payments module](../payments/index.md) is enabled *and* Stripe API keys are configured in **Admin → Payments → Settings**. If Stripe isn't configured, the public checkout button won't work. + +--- + +## Publishing + +From the event detail page, click **Publish** to move the event from `DRAFT` to `PUBLISHED`: + +- A public URL is generated at `/event/{slug}` (the slug is auto-derived from the title) +- The event appears on `/events` if visibility is `PUBLIC` +- Tickets become purchasable +- Attendees can start registering + +Use the **Copy Link** button in the Actions row to grab the public URL for social media or email campaigns. + +--- + +## Event Statuses and Actions + +| Status | Available Actions | +|--------|-------------------| +| `DRAFT` | Edit, Publish, Delete | +| `PENDING_APPROVAL` | Approve, Reject (admin only) | +| `PUBLISHED` | Edit (restricted), Cancel, Mark Completed, Check-in Scanner | +| `CANCELLED` | View only | +| `COMPLETED` | View stats, export | + +Cancelling a published event marks all existing tickets as cancelled and triggers refund processing for paid tickets (if Stripe is configured). + +--- + +## Attendee Management + +The event detail page includes two tabs: + +- **Tickets** — all issued tickets with holder name, email, tier, status, and purchase timestamp. You can resend the ticket email or cancel an individual ticket from the Actions column. +- **Check-ins** — chronological record of check-in events recorded by the [Check-in Scanner](check-in.md). + +Admins and event owners can filter, search, and export ticket lists for at-the-door lookup or post-event reporting. + +--- + +## Public Event Page + +The public-facing page at `/event/:slug` shows the event details and lets attendees pick a tier and register: + +![Public event page](../../../assets/images/screenshots/admin/events/public-event-page.png){ loading=lazy } + +- Paid tiers link to Stripe Checkout +- Free tiers use a simple email-only form +- Donation tiers prompt for a custom amount +- After purchase, attendees receive an email with their ticket code and QR + +--- + +## Admin Routes + +- `/app/events` — event list, search, filter by status +- `/app/events/:id` — event detail, tier management, ticket list, check-ins +- `/app/events/:id/checkin` — full-screen [Check-in Scanner](check-in.md) + +## Related + +- [Check-in Scanner](check-in.md) — QR and manual check-in at the door +- [Payments Settings](../payments/settings.md) — Stripe configuration required for paid tiers +- [Video Meet (Jitsi)](../services/integrations.md) — used for Online and Hybrid event formats diff --git a/mkdocs/docs/docs/admin/index.md b/mkdocs/docs/docs/admin/index.md index e95ac6da..ad3b54dc 100644 --- a/mkdocs/docs/docs/admin/index.md +++ b/mkdocs/docs/docs/admin/index.md @@ -65,6 +65,12 @@ The admin panel at `/app` is your command center for managing the entire platfor Products, donations, subscription plans, and Stripe configuration. +- :material-calendar-star:{ .lg .middle } **[Events](events/index.md)** + + --- + + Ticketed events with paid, free, and donation tiers; QR check-in scanner. + - :material-server-network:{ .lg .middle } **[Services](services/index.md)** --- diff --git a/mkdocs/docs/docs/admin/people-access.md b/mkdocs/docs/docs/admin/people-access.md index 32851b19..0da01baf 100644 --- a/mkdocs/docs/docs/admin/people-access.md +++ b/mkdocs/docs/docs/admin/people-access.md @@ -34,6 +34,8 @@ Navigate to **Users** (`/app/users`) and click **Add User**. Fill in name, email | `USER` | Volunteer portal only | Active volunteers | | `TEMP` | Limited volunteer access | Shift signups (auto-created) | +This table shows the most common roles. See the [full role list](index.md#roles-reference) for module-specific admin roles (`BROADCAST_ADMIN`, `CONTENT_ADMIN`, `MEDIA_ADMIN`, `PAYMENTS_ADMIN`, `EVENTS_ADMIN`, `SOCIAL_ADMIN`). + ### Password Policy Passwords must be at least 12 characters with uppercase, lowercase, and a digit. This is enforced at the API schema level. diff --git a/mkdocs/docs/docs/admin/services/monitoring.md b/mkdocs/docs/docs/admin/services/monitoring.md index 3bc6d862..21f264d6 100644 --- a/mkdocs/docs/docs/admin/services/monitoring.md +++ b/mkdocs/docs/docs/admin/services/monitoring.md @@ -24,7 +24,7 @@ The monitoring stack runs as a Docker Compose profile and provides metrics colle docker compose --profile monitoring up -d ``` -This starts Prometheus, Grafana, Alertmanager, cAdvisor, Node Exporter, and Redis Exporter. +This starts Prometheus, Grafana, Alertmanager, cAdvisor, Node Exporter, Redis Exporter, and Gotify (for push notifications). --- @@ -66,6 +66,6 @@ Alert rules in `configs/prometheus/alerts.yml` cover: ## Direct Access -- Grafana: `localhost:3001` or `grafana.DOMAIN` +- Grafana: `localhost:3005` or `grafana.DOMAIN` - Prometheus: `localhost:9090` - Alertmanager: `localhost:9093` diff --git a/mkdocs/docs/docs/admin/services/tunnel.md b/mkdocs/docs/docs/admin/services/tunnel.md index 006d0687..5f4583c3 100644 --- a/mkdocs/docs/docs/admin/services/tunnel.md +++ b/mkdocs/docs/docs/admin/services/tunnel.md @@ -29,7 +29,7 @@ From `/app/pangolin`: ## Resource Management -The platform defines 12+ service resources in `configs/pangolin/resources.yml`: +The platform defines 18 service resources in `configs/pangolin/resources.yml`: - Each resource maps a subdomain (e.g., `api.DOMAIN`, `app.DOMAIN`) to an internal service - **Hourly sync** — nginx cron job pushes resource definitions to Pangolin automatically diff --git a/mkdocs/docs/docs/admin/web/landing-pages.md b/mkdocs/docs/docs/admin/web/landing-pages.md index 15c4f2fc..b3fa0f01 100644 --- a/mkdocs/docs/docs/admin/web/landing-pages.md +++ b/mkdocs/docs/docs/admin/web/landing-pages.md @@ -23,7 +23,7 @@ Build campaign microsites with a drag-and-drop visual editor. 1. Create a new page from the admin panel 2. Open the GrapesJS visual editor — drag blocks, edit text, adjust styles 3. Save and publish — the page goes live at `/p/:slug` -4. Optionally export to MkDocs for inclusion in the documentation site +4. Optionally export to MkDocs for inclusion in the [documentation site](documentation.md) --- diff --git a/mkdocs/docs/docs/architecture/index.md b/mkdocs/docs/docs/architecture/index.md index f7c9de17..2573ad00 100644 --- a/mkdocs/docs/docs/architecture/index.md +++ b/mkdocs/docs/docs/architecture/index.md @@ -25,7 +25,7 @@ graph LR Nginx --> MkDocs["MkDocs
port 4003/4004"] Nginx --> Services["Other Services
(Gitea, NocoDB, etc.)"] - API --> PostgreSQL[("PostgreSQL 16
30+ tables")] + API --> PostgreSQL[("PostgreSQL 16
190+ tables")] MediaAPI --> PostgreSQL API --> Redis[("Redis
cache + queues")] API --> BullMQ["BullMQ
(email, video jobs)"] @@ -46,7 +46,7 @@ graph LR | **Main API** | Express.js + TypeScript + Prisma | Auth, campaigns, map, shifts, pages, canvassing, email | | **Media API** | Fastify + TypeScript + Prisma | Video library, analytics, uploads, scheduling | | **Admin GUI** | React 19 + Vite + Ant Design + Zustand | Admin dashboard, public pages, volunteer portal, media gallery | -| **Database** | PostgreSQL 16 | Shared by both APIs (30+ models via Prisma) | +| **Database** | PostgreSQL 16 | Shared by both APIs (190+ models via Prisma) | | **Cache** | Redis 7 | Rate limiting, BullMQ job queues, geocoding cache | | **Proxy** | Nginx | Subdomain routing, security headers, WebSocket upgrade | | **Tunnel** | Pangolin + Newt | Expose services without port forwarding | @@ -65,7 +65,7 @@ The platform runs two independent API servers sharing one PostgreSQL database: - **Authentication** — JWT access/refresh tokens, RBAC middleware - **Modules** — Influence (campaigns, responses), Map (locations, cuts, shifts, canvassing), Pages, Email Templates, Settings, Users, Payments, Social, Calendar - **Services** — Email queue (BullMQ), geocoding queue, Listmonk sync, Pangolin client, user provisioning - - **ORM** — Prisma with 30+ models and migration history + - **ORM** — Prisma with 190+ models and migration history === "Fastify Media API (port 4100)" @@ -143,7 +143,7 @@ graph TD ## Database Schema -The database contains **30+ Prisma models** organized by module: +The database contains **190+ Prisma models** organized by module (key ones shown): | Module | Key Models | |--------|-----------| diff --git a/mkdocs/docs/docs/deployment/index.md b/mkdocs/docs/docs/deployment/index.md index aaa83f4b..5ec8bcbe 100644 --- a/mkdocs/docs/docs/deployment/index.md +++ b/mkdocs/docs/docs/deployment/index.md @@ -497,9 +497,9 @@ This starts: Grafana includes 3 auto-provisioned dashboards: -1. **API Overview** — HTTP request rates, latency, error rates, active sessions -2. **Infrastructure** — Container CPU/memory, PostgreSQL connections, Redis memory -3. **Campaign Activity** — Email queue size, campaign sends, response submissions +1. **API Performance** — HTTP request rates, latencies, error rates +2. **Application Overview** — queue sizes, active sessions, service health +3. **System Health** — container resources, host metrics, Redis stats ### Custom Metrics diff --git a/mkdocs/docs/docs/deployment/security.md b/mkdocs/docs/docs/deployment/security.md new file mode 100644 index 00000000..301c2336 --- /dev/null +++ b/mkdocs/docs/docs/deployment/security.md @@ -0,0 +1,201 @@ +--- +title: Security Reference +description: Password policy, rate limits, token model, encryption, RBAC, and audit history. +icon: material/lock-check +tags: + - reference + - operator + - security +search: + boost: 2 +--- + +# Security Reference + +Consolidated reference for how Changemaker Lite handles authentication, authorization, secrets, and rate limiting — plus a summary of the security audits the platform has been through. + +!!! info "Scope" + This page is a reference, not a setup guide. For deploy-time security checklist items, see the [Production Checklist](index.md#production-checklist). For per-variable secret generation, see [Environment Variables → Generating Secrets](../getting-started/environment-variables.md#generating-secrets). + +--- + +## Authentication + +### Token Model + +| Token | Lifetime | Storage | Purpose | +|-------|----------|---------|---------| +| Access token (JWT) | 15 min | Memory / Zustand store | Sent as `Authorization: Bearer` on every request | +| Refresh token (JWT) | 7 days | DB row + httpOnly cookie | Used at `/api/auth/refresh` to mint a new access token | +| Invite token (JWT) | Configurable | Signed with separate secret | Volunteer invitations, single-use | + +Refresh tokens are **rotated atomically** on every refresh call — the Prisma transaction deletes the old token and creates a new one in one step, preventing replay attacks if a refresh token leaks. + +### JWT Secrets + +Three separate secrets are required — sharing one across purposes defeats the separation: + +| Variable | Algorithm | Generate with | +|----------|-----------|---------------| +| `JWT_ACCESS_SECRET` | HS256 | `openssl rand -hex 32` | +| `JWT_REFRESH_SECRET` | HS256 | `openssl rand -hex 32` (must differ) | +| `JWT_INVITE_SECRET` | HS256 | `openssl rand -hex 32` (must differ) | + +The JWT algorithm is **locked to HS256** at verification time — tokens signed with any other algorithm (including `none`) are rejected. This mitigates the classic `alg: none` bypass. + +### Password Policy + +Schema-enforced at the API level: + +- Minimum **12 characters** +- At least one **uppercase** letter +- At least one **lowercase** letter +- At least one **digit** + +Applies to initial admin creation, registration, password resets, and any user-modifies-password path. Passwords are hashed with **bcrypt** (cost factor 12) before storage. + +### User Enumeration Prevention + +Auth endpoints (`/login`, `/register`, `/forgot-password`) return **generic success or 401 responses** that don't reveal whether an account exists. A 401 from `/api/auth/me` does not confirm the user exists. + +--- + +## Authorization (RBAC) + +11 roles, with `SUPER_ADMIN` implicitly bypassing all role checks: + +| Role | Scope | +|------|-------| +| `SUPER_ADMIN` | Full platform access | +| `INFLUENCE_ADMIN` | Campaigns, responses, representatives, email queue | +| `MAP_ADMIN` | Locations, areas, shifts, canvassing | +| `BROADCAST_ADMIN` | Newsletter sync, email templates | +| `CONTENT_ADMIN` | Landing pages, homepage, navigation, documentation | +| `MEDIA_ADMIN` | Video library, analytics, gallery, moderation, ads | +| `PAYMENTS_ADMIN` | Products, donations, plans, Stripe configuration | +| `EVENTS_ADMIN` | Ticketed events, check-in, Gancio sync | +| `SOCIAL_ADMIN` | Social connections, achievements, spotlights, referrals | +| `USER` | Volunteer portal only | +| `TEMP` | Auto-created on public shift signup; blocked from writes by `requireNonTemp` | + +Middleware primitives: + +- `authenticate` — requires a valid JWT +- `requireRole(...roles)` — checks `req.user.role` against an allow-list +- `requireNonTemp` — blocks `TEMP` users from non-signup endpoints +- `optionalAuth` — identifies the user if a token is present, but doesn't require one + +User-management writes additionally require `permissions.canManageUsers: true` unless the actor is `SUPER_ADMIN`. + +--- + +## Encryption at Rest + +`ENCRYPTION_KEY` (a 64-char hex string — `openssl rand -hex 32`) is used to AES-encrypt secrets stored in the database: SMTP passwords, third-party API keys (Stripe, MaxMind, etc.), and OAuth tokens. + +**Key separation is required** — `ENCRYPTION_KEY` must differ from all three JWT secrets. The API refuses to start if any JWT secret equals the encryption key. + +Two additional separation-of-concerns secrets (fall back to `JWT_ACCESS_SECRET` with a loud warning if empty): + +| Variable | Purpose | +|----------|---------| +| `GITEA_SSO_SECRET` | Signs Gitea SSO session cookies | +| `SERVICE_PASSWORD_SALT` | Derives per-user passwords for provisioned services (Gitea, Rocket.Chat) | + +See [Environment Variables → Security Extras](../getting-started/environment-variables.md#security-extras) for details. + +--- + +## Rate Limiting + +Redis-backed, keyed by IP address. Auth endpoints are the strictest: + +| Endpoint group | Limit | Redis prefix | +|----------------|-------|--------------| +| Auth (`/login`, `/register`, `/refresh`) | 10 / 15 min | `rl:auth:` | +| Email sending | 30 / hour | `rl:email:` | +| Response submission | 10 / hour | `rl:response:` | +| Shift signup | 10 / hour | `rl:shift-signup:` | +| Canvass visits | 30 / min | `rl:canvass-visit:` | +| Canvass bulk visits | 5 / min | `rl:canvass-visit-bulk:` | +| GPS tracking ingest | 6 / min | `rl:gps-tracking:` | +| Global (everything else) | `RATE_LIMIT_MAX` / window | `rl:global:` | + +Defaults are tunable via `RATE_LIMIT_WINDOW_MS` (default 15 min) and `RATE_LIMIT_MAX` (default 500). + +Nginx applies a second layer of rate limiting on `/api/auth/*` in front of the API — see [Security Audits](#security-audits) for the relevant audit that added this. + +See the [API Reference → Rate Limits](../api/index.md#rate-limits) for the full table. + +--- + +## Cookies & Session + +- **Refresh tokens** are stored as `httpOnly`, `Secure` (when `NODE_ENV=production`), `SameSite=Lax` cookies — unreachable from JavaScript. +- **Access tokens** are not persisted; Zustand holds them in memory. Page refresh triggers a silent refresh-token exchange. +- **Ban enforcement**: banned users have all refresh tokens invalidated immediately at the DB level — their next refresh fails and they're logged out globally. + +--- + +## Input Validation & Injection Defenses + +| Vector | Defense | +|--------|---------| +| SQL injection | Prisma parameterizes every query; no raw SQL in route handlers | +| XSS (stored) | `escape-html` on user-supplied text before DB insert; DOMPurify on rich content | +| SSTI | Handlebars templates run with `noEscape: false` (default escaping on) | +| Path traversal | `path.resolve` + `startsWith` check against the allowed root for all file-serving routes | +| Open redirect | Redirect `?next=` params validated against an allow-list of same-origin paths | +| CSV injection | Leading `=`, `+`, `-`, `@` characters in exported cells are prefixed with `'` | +| QR payload DoS | `/api/qr` enforces a hard cap on input text length | + +Request bodies are validated with **Zod** schemas before reaching the service layer. Invalid requests return `400 VALIDATION_ERROR` with the failing path. + +--- + +## Nginx & Transport + +Nginx adds the following security headers to all responses: + +- `Strict-Transport-Security` (HSTS) with long max-age +- `Permissions-Policy` restricting browser feature access +- `Content-Security-Policy` with `frame-ancestors` configured for legit embed targets +- `X-Forwarded-For` / `X-Real-IP` set so the API sees the original client IP (important for rate limiting) +- Hides the nginx version banner + +SSL/TLS termination is handled by the tunnel provider (Pangolin or Cloudflare) — nginx itself listens on plain HTTP inside the Docker network. + +--- + +## Redis & Database + +- **Redis authentication** is mandatory — `REDIS_PASSWORD` has no default and the API refuses to connect without it. +- **MongoDB** (used by Rocket.Chat) runs with `--auth` and a keyfile mounted read-only; replica-set auth is required for every connection. +- The PostgreSQL instance accepts connections only from the Docker bridge network — no host port is exposed for the container's internal `5432` (host maps to `5433` for developer tooling only). + +--- + +## Security Audits + +Four external/internal security audits have been performed on the platform. + +| Date | Scope | Findings | Full Report | +|------|-------|----------|-------------| +| Feb 11 2025 | Initial audit — auth, sessions, tokens, XSS | 13 | `SECURITY_AUDIT_2025-02-11.md` (repo root) | +| Mar 22 2026 | JWT hardening, webhook auth, CSV injection, QR DoS | — | *Internal* | +| Mar 27 2026 | IDOR, XSS, path traversal, MongoDB auth, SSTI, open redirect | 33 (30 fixed) | *Internal* | +| Mar 30 2026 | IDOR in action items/ticketed events, nginx rate limit, JWT secret reuse | 19 | *Internal* | + +Audit-driven changes already in the codebase include: JWT algorithm lockdown, separate invite/refresh secrets, refresh-token rotation, user enumeration prevention, the encryption-key separation requirement, nginx auth rate limiting, MongoDB keyfile auth, and the input-validation defenses listed above. + +!!! note "Reporting a vulnerability" + Security-sensitive reports should go to `admin@bnkops.ca` directly rather than a public Gitea issue. Please include a minimal reproduction and the affected version. + +--- + +## Related + +- [Production Checklist](index.md#production-checklist) — pre-launch hardening items +- [Environment Variables](../getting-started/environment-variables.md) — every secret-bearing variable with generation commands +- [API Reference → Authentication](../api/index.md#authentication) — token flow diagram and role table +- [Admin → People & Access](../admin/people-access.md) — operational user management diff --git a/mkdocs/docs/docs/getting-started/index.md b/mkdocs/docs/docs/getting-started/index.md index fcf45166..0a35da68 100644 --- a/mkdocs/docs/docs/getting-started/index.md +++ b/mkdocs/docs/docs/getting-started/index.md @@ -117,7 +117,7 @@ The fastest path — no source code, no compilation: curl -fsSL https://gitea.bnkops.com/admin/changemaker.lite/raw/branch/main/scripts/install.sh | bash ``` -This downloads a lightweight release package (~2 MB), runs the **14-step configuration wizard**, and pulls pre-built Docker images. First startup takes ~2 minutes. +This downloads a release tarball (~15 MB — config, compose files, and MkDocs content), runs the **14-step configuration wizard**, and pulls pre-built Docker images. First startup takes ~2 minutes. ### From Source (Development) diff --git a/mkdocs/docs/docs/getting-started/installation.md b/mkdocs/docs/docs/getting-started/installation.md index b360d34e..6e1d3f86 100644 --- a/mkdocs/docs/docs/getting-started/installation.md +++ b/mkdocs/docs/docs/getting-started/installation.md @@ -88,6 +88,21 @@ This script: After the wizard completes, start everything with `docker compose up -d`, then verify with `bash scripts/test-deployment.sh --wait 60`. +#### Installer Flags + +The installer accepts a few options for non-default setups. Download the script first, inspect it, then run with flags: + +```bash +curl -fsSLO https://gitea.bnkops.com/admin/changemaker.lite/raw/branch/main/scripts/install.sh +bash install.sh --help +``` + +| Flag | Purpose | +|------|---------| +| `--dir DIR` | Install into a directory other than `~/changemaker.lite` | +| `--version TAG` | Pin a specific release (e.g. `v2.9.10`) instead of latest | +| `--tarball FILE` | Use a local tarball — skip the Gitea download entirely | + ### Manual Download If you prefer not to pipe to bash: @@ -105,7 +120,7 @@ docker compose up -d | | Source Install | Pre-built Install | |---|---|---| -| **Download size** | ~200 MB (full repo) | ~2 MB (config + scripts) | +| **Download size** | ~200 MB (full repo) | ~15 MB (config, compose, MkDocs content) | | **First startup** | 10+ min (TypeScript compile + Docker build) | ~2 min (image pull only) | | **Requires** | Git, full repo | Docker only | | **Upgrades** | `git pull` + rebuild | Download new release tarball | @@ -164,7 +179,7 @@ Prompts for the initial super-admin email and password. The password is validate - Requires password confirmation !!! info "Non-interactive password" - If you run with `-y` and omit `--admin-password`, the wizard generates a strong password and **also writes it to `data/admin-credentials.txt` with mode 0600**. Delete the file after saving the password elsewhere. Explicit `--admin-password` is never persisted to disk by `config.sh`. + If you run with `-y` and omit `--admin-password`, the wizard generates a strong password and **also writes it to `data/admin-credentials.txt` with mode 0600**. Retrieve it with `cat ~/changemaker.lite/data/admin-credentials.txt`, then delete the file once saved elsewhere (e.g. Vaultwarden). Explicit `--admin-password` is never persisted to disk by `config.sh`. ### Step 5: Secret Generation @@ -344,6 +359,17 @@ docker compose logs -f api --tail 20 Once you see `Starting server on port 4000`, open **http://localhost:3000** and log in. +!!! success "Quick sanity check" + Three commands confirm a healthy install — run them in order: + + ```bash + docker compose ps # all core containers healthy? + curl -s http://localhost:4000/api/health # should return {"status":"healthy",...} + bash scripts/test-deployment.sh --wait 60 # end-to-end verifier + ``` + + If all three pass, you're done. See [Verifying Installation](#verifying-installation) below for manual checks if anything fails. + ### Include Monitoring The monitoring stack (Prometheus, Grafana, Alertmanager) uses a Docker Compose profile and isn't included by default: diff --git a/mkdocs/docs/docs/index.md b/mkdocs/docs/docs/index.md index 9c211106..d5b97f8d 100644 --- a/mkdocs/docs/docs/index.md +++ b/mkdocs/docs/docs/index.md @@ -117,7 +117,7 @@ Welcome to the Changemaker Lite documentation. Whether you're a campaign volunte Password policy, rate limiting, token rotation, encryption, and audit report. - [:octicons-arrow-right-24: Security](deployment/index.md){ .md-button .md-button--secondary } *See Deployment* + [:octicons-arrow-right-24: Security](deployment/security.md) - :material-source-pull:{ .lg .middle } **Contributing** diff --git a/mkdocs/docs/docs/services/index.md b/mkdocs/docs/docs/services/index.md index a2e050cb..ea26481c 100644 --- a/mkdocs/docs/docs/services/index.md +++ b/mkdocs/docs/docs/services/index.md @@ -11,7 +11,7 @@ tags: # Services -Changemaker Lite orchestrates 20+ services via Docker Compose. This page is your map to every service: what it does, how to reach it, and where to find its upstream documentation. +Changemaker Lite orchestrates 30+ services via Docker Compose. This page is your map to every service: what it does, how to reach it, and where to find its upstream documentation. --- @@ -55,7 +55,7 @@ The essential services that power the application. --- - Primary database shared by both APIs. Managed by Prisma migrations. Contains 30+ tables covering users, campaigns, locations, shifts, media, and more. + Primary database shared by both APIs. Managed by Prisma migrations. Contains 190+ tables covering users, campaigns, locations, shifts, media, and more. **Port:** `5433` (host) / `5432` (container) · **Container:** `changemaker-v2-postgres` diff --git a/mkdocs/docs/docs/user-guide/campaigns.md b/mkdocs/docs/docs/user-guide/campaigns.md index 87ca7a4a..b98ec87c 100644 --- a/mkdocs/docs/docs/user-guide/campaigns.md +++ b/mkdocs/docs/docs/user-guide/campaigns.md @@ -33,7 +33,7 @@ Each campaign has a public response wall where supporters share how their repres ## Submit Your Own Campaign -Registered users can draft and submit their own advocacy campaigns at `/campaigns/create`. Submissions go through admin review before being published. +Registered users can draft and submit their own advocacy campaigns at `/campaigns/create`. Submissions go through [admin review](../admin/advocacy/campaigns.md#campaign-moderation) before being published. --- diff --git a/mkdocs/docs/docs/user-guide/donations.md b/mkdocs/docs/docs/user-guide/donations.md index 2e33a107..b4bcd223 100644 --- a/mkdocs/docs/docs/user-guide/donations.md +++ b/mkdocs/docs/docs/user-guide/donations.md @@ -40,3 +40,9 @@ Each donation page has: - `/donate` — browse donation pages - `/donate/:slug` — donate on a specific campaign page + +--- + +## For Admins + +Donation pages are configured in [Admin → Payments → Donations](../admin/payments/donations.md), including goals, suggested amounts, and thank-you messages. diff --git a/mkdocs/docs/docs/user-guide/events.md b/mkdocs/docs/docs/user-guide/events.md index 66e96ffb..ccd6449c 100644 --- a/mkdocs/docs/docs/user-guide/events.md +++ b/mkdocs/docs/docs/user-guide/events.md @@ -10,7 +10,10 @@ tags: # Events (Gancio) -Integrated with [Gancio](https://gancio.org/) for self-hosted event management. When enabled, volunteer shifts are automatically published as public events. +Integrated with [Gancio](https://gancio.org/) for self-hosted event management. When enabled, volunteer shifts are automatically published as public events. See [Integrations](../admin/services/integrations.md) for admin setup. + +!!! tip "Looking for ticketed events?" + If you're running events with paid, free, or donation-based tickets and need QR check-in, see [Ticketed Events](../admin/events/ticketed-events.md) — that's a separate module from the Gancio calendar. --- diff --git a/mkdocs/docs/docs/user-guide/shop.md b/mkdocs/docs/docs/user-guide/shop.md index 9a4341bc..b3bdd0dc 100644 --- a/mkdocs/docs/docs/user-guide/shop.md +++ b/mkdocs/docs/docs/user-guide/shop.md @@ -39,3 +39,11 @@ View subscription options at `/pricing`: - `/shop` — browse products - `/pricing` — view subscription plans + +--- + +## For Admins + +- [Products](../admin/payments/products.md) — manage merchandise and inventory +- [Plans](../admin/payments/plans.md) — configure subscription tiers and pricing +- [Payment settings](../admin/payments/settings.md) — Stripe API key configuration diff --git a/mkdocs/docs/docs/volunteer/shifts.md b/mkdocs/docs/docs/volunteer/shifts.md index eed9fbec..962df2e3 100644 --- a/mkdocs/docs/docs/volunteer/shifts.md +++ b/mkdocs/docs/docs/volunteer/shifts.md @@ -38,3 +38,11 @@ The **Activity** tab shows your complete visit history: - `/volunteer/shifts` — view assigned shifts - `/volunteer/activity` — visit history and outcome breakdown + +--- + +## Related + +- [Sign up for shifts](../user-guide/shifts.md) — browse and sign up for public shifts +- [Canvassing](canvassing.md) — using the GPS canvass map once a shift starts +- [Admin → Shifts](../admin/map/shifts.md) — how organizers schedule and manage shifts diff --git a/mkdocs/docs/overrides/main.html b/mkdocs/docs/overrides/main.html index 3bafc1fb..9810fa80 100644 --- a/mkdocs/docs/overrides/main.html +++ b/mkdocs/docs/overrides/main.html @@ -11,38 +11,12 @@
- homeHome + homeHome sendCampaigns - placeMap -
- - apps - Scheduling - expand_more - -
- scheduleShifts - eventCalendar - bar_chartPolls -
-
- play_circleGallery -
- - account_balance_wallet - Commerce - expand_more - -
- attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
-
- emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -93,38 +67,12 @@ Docs Navigation
- homeHome + homeHome sendCampaigns - placeMap -
- - apps - Scheduling - expand_more - -
- scheduleShifts - eventCalendar - bar_chartPolls -
-
- play_circleGallery -
- - account_balance_wallet - Commerce - expand_more - -
- attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
-
- emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
login diff --git a/mkdocs/mkdocs.yml b/mkdocs/mkdocs.yml index 7d776719..0f93ee8b 100644 --- a/mkdocs/mkdocs.yml +++ b/mkdocs/mkdocs.yml @@ -222,6 +222,10 @@ nav: - Donations: docs/admin/payments/donations.md - Plans: docs/admin/payments/plans.md - Settings: docs/admin/payments/settings.md + - Events: + - docs/admin/events/index.md + - Ticketed Events: docs/admin/events/ticketed-events.md + - Check-in Scanner: docs/admin/events/check-in.md - Services: - docs/admin/services/index.md - Tunnel: docs/admin/services/tunnel.md @@ -248,6 +252,7 @@ nav: - Achievements: docs/volunteer/achievements.md - Deployment: - docs/deployment/index.md + - Security Reference: docs/deployment/security.md - Architecture: - docs/architecture/index.md - Services: diff --git a/mkdocs/site/404.html b/mkdocs/site/404.html index 04197b0f..bc998fad 100644 --- a/mkdocs/site/404.html +++ b/mkdocs/site/404.html @@ -107,38 +107,12 @@
- homeHome + homeHome sendCampaigns - placeMap -
- - apps - Scheduling - expand_more - -
- scheduleShifts - eventCalendar - bar_chartPolls -
-
- play_circleGallery -
- - account_balance_wallet - Commerce - expand_more - -
- attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
-
- emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -189,38 +163,12 @@ Docs Navigation
- homeHome + homeHome sendCampaigns - placeMap -
- - apps - Scheduling - expand_more - -
- scheduleShifts - eventCalendar - bar_chartPolls -
-
- play_circleGallery -
- - account_balance_wallet - Commerce - expand_more - -
- attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
-
- emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
login diff --git a/mkdocs/site/404/index.html b/mkdocs/site/404/index.html index c7323259..8d207b5c 100644 --- a/mkdocs/site/404/index.html +++ b/mkdocs/site/404/index.html @@ -127,38 +127,12 @@
- homeHome + homeHome sendCampaigns - placeMap -
- - apps - Scheduling - expand_more - -
- scheduleShifts - eventCalendar - bar_chartPolls -
-
- play_circleGallery -
- - account_balance_wallet - Commerce - expand_more - -
- attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
-
- emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -209,38 +183,12 @@ Docs Navigation
- homeHome + homeHome sendCampaigns - placeMap -
- - apps - Scheduling - expand_more - -
- scheduleShifts - eventCalendar - bar_chartPolls -
-
- play_circleGallery -
- - account_balance_wallet - Commerce - expand_more - -
- attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
-
- emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
login diff --git a/mkdocs/site/assets/images/social/blog/2026/04/16/a-smoother-fresh-install-v298-and-v299.png b/mkdocs/site/assets/images/social/blog/2026/04/16/a-smoother-fresh-install-v298-and-v299.png new file mode 100644 index 0000000000000000000000000000000000000000..8e2884febb7bd6d71af4b031955797dee2eb163d GIT binary patch literal 41524 zcmeFZXH-*N8!d_z5djsI4k97~(wlS(2C1Qj-bA{9^cqlU(tB@e=%M!-L==!JfzXRc z4ZS2FLEx9$-7j4PpFkh^7?O~DJW`N*tmT=pKJAfVr~^MeJ!tT-^qEa`#~^vWC;245DnFxn zMPQ5-7YDKa7({z1CeZfM`AdQ4cgeRYLRp9JK77OJ{+UT^JSn~LB_3nzGn?r%uoca% z$L+N|Gd|AgVQDhZ*-jPV;jz@8Dk*f(yzC;=+3YtIcoVDu{JW~DT0!;CA<3nuZ!Y{j ze51?u`Rw1LN5$7n&-^{QJ#q;wo%rvn-Fe-Aj^2x$eeloGSNb!z{yBOPNkab5Q3d3` zr~B{T{k4Vv{|rU{(-`Shk3IziMIU61fsv;)ZuL53L@|I9nJ-_G#aP*h>>O3&s+w%V zHZKUBo-E1VTO5~Sdbm{F;2pKN>XbccisMi+Qb3FCdwaW@MqRm0T<=%fGcfwZC|prc zY1Zu0eKXa=kFomP5#XoaF~PXy2Zk@|H=(RO>)!DvM&37!hw-_kY4L60C(z_Z@6q|8 z{Gn04*V%^$r!otnDSw?|H-yBFevdm+ro3BQelc{RTXB`KPC|mU0g|S}TBChl7D|sj zm|)7BHpO{JYS4F;)001H4hqs3^~lhDdmP_BlTqk;4lL}=i`$!Okuljah*hiM<|!5Qp1z}V zS{oh8rxwOcS8kI`@i#Vv1sGk*_jEuahU@~iZF`etn%Ll;BAEC9n2A3@&eTmCiSW9a zFWUcaAQ3J2EYWd)#oTR*iqc!+VUm|-dI$k7Ewf?`Z;7?b;Wl78-d3~J*5$T+m-~Kg zHG-ZR@{|+%vmPTYjoMt_N$mc~9|vhH|33Ik1p>Y^DF9i`ET52mfp3yQk{I`zWtw%`egR#Bd!QzT6~H*JgcEF=Hd&QL?$Uhez_7u+e2)Zt$iQs;Qm;4~v|OlpULF zggP4cDdK(*WtHtJ=C}3+5LXI!oeCo>BJJD|}L{ha)jV3o&sBSf;5hf!Q z3I%McOZzd2B~hqq$y`*-mE{O;MBM|o{1QT%3Eg?FWML)A5T@gH2WU%tDm2DWW_*3$ODE$Fz7>SaQf(X5%PW#(X{q{eQst3$w`WODYUcTooV z_SMxB7;Uh$@}8lY7+aLDOvsQ;34fzm;!&@_?CA1ZUd%QZi@D+4^DX1pA9{F>S!?l8 z-la7|Vsd)p+?v7<;9x|eZ#Q&|cbkk3lf8CQWlelHflzFKr z#{G(cO5Z&g=HlG*Mup>X3J8mC;zQ2gD^LZ4;CGYh6P|wB_E+^Y=x^t`m?03OylK-r zOb4XohR1Vp)CU`rA40}}sgQOQOEGAn{$Q``*sTdh^UpMoVUV}7E}if2wHbYn(R{j} z6Jw=f^dqBHpuKB9F7I}8W!yevQ_Be_6q_c2&~dHTS2xF@5+8etY${ELl+;q{QK%eF zk6cC^6u;I^T*4#`EWefzDRpfxqHdX~y`l$)M<>^=a+sL=!b6UfJ>6bTt%g2E@;rr| z6XL{jm&;#V7dln0@#^-M#aneQ+A$Kdj47{am}_r0=S@v0#ZAkz$BoaTBsxn_6{C_^ znKeVKijtwdHRbhaH#Z24sJQost%dF!E_v_C%CACZkkLR)-GP@kE`j~|vY3Q-=kD!C zdiwUbDHsRha@8nb7TAC+v-RBA;CM(0eOPZlc_( zh@76uNSg2WGj42Wh}7|~_hl94A!c_ohfHxv7Gxs#a%#hV&I*yyn6&&DM4W@oPI!E} z-f>@-o{;ygG%gDFM^xU5#X!)z=bDME%!0JbY-w!P=+X*4{9Sor3wk9CCf~ZrweI3s z6c{_xB>3^0b{o?sOBLZ)X#)DD>!M49iQw$u%%Ew6$CXa8>NMNc`LxE2ZSp3Kj~_i` zIt+gw6{Gu}6M~DaCKI^zxb%HR#5r>q zD$$#xL4RXHii*&O$d ziKX?VI^V?Yut;e|PpMcnksqC&oZ-oMx?7!pD(-vdYRtP2KV#1zp$yBPZY5vF%0+v0Kh0d0hDI8dT?r#u>Q#%dq99B;~IdJy!)ld_6^|hILq)6CD z;gm3Uu|A|N@kzb8Rj8SQ#j)%4edk~v_?$9`gp>n*jT56t1Es#3xylhT#K(4QwDtYK zO-YAvgeu$m8rhp}Ikk7psEP+kRg{?=1(CwKNPg**m^J@{c$z9w$LDs)EKht!DdZ_k zOqv1~ckfxD1i87>3GD%CMr<5@GYQHjp#m`)3sIr-C!yJ5FUKBn(sX+G&4-@)`5b)L z<`_!d&Yf&RoGT8`Q(iyi3&`7|Qq`OBgurq0v*H;iq9LkeMqjx03HO8;4t%9UI;C6t zyeyOZ6d1IUH=^rXeWQ0Y11@-fys3x!kFj{0G6`X`FIB`vC2&2mc&?Q@xSe3$mBTTt zRZ2!s1bMq>ShV&b$8oV*XWa`$i;<90c&_)o{NDj3)AwH3FvEB46EDRIePx=`?sAMm2thTZBI*om%9P8c4-=K ztBWVB_1u;^wbm{kfA}@x#mO=-*G-R*HSv3~++@(?JDr_3ep1-&6cPT`={(r=H{)!d zC6>19hn-((Ry@;Q(o^Y}w^dIZWZ`qF$>W8i1=bayR|wCr`I_R3ydgr$Uj+|a8uc<7 zO3Bi`(%eS$K9|XEZ2~q%@*mgzg);!OmqL3D&*aGAe7Pd z;dj17Ks#2v+(F4C4qQ-XVOLR>Gu`|P^M9;<|5ACB*Q?K? zO3S2kpDp?zv$7BOib8tQm|Es^%RWl8!LnylyYXgO3xo^(LT#OG0?4xU{W}aUH2VJC zGF1`fxnHbr2QV?W(~q!>O4?wI>HZj-zfJO8dWya z%Aa3KfiqcvSG41Atg(zXx)km8g1^8$HfJekQ2SbBQvTi)Og@sVP=IxVsqgeIzPFLO z^EaPQdq6bd&a=d$PSrn0sjNy1dEGCUYx46Wwy<oQ!=BvX z89; z{!(wh{r!H;*}S1tB{d+{cFcKwr#7dRHPB)abPYFpItiiqs)gj zA8&uiS2^a$ik3B4wbgSY4Br3WE^QYEV%CKCb!Abc5w;B0q;GgrI>^w#3b${;5%+%9 z{pfZ(KHZ_FOIX`CLVO6?^$zVEz&@{#D6SA85Klb>X%KiY&Stw#Gr~L2Sh0 z4m1c%%yp|-mx}H#>8zwKEp%=$)exGPI3sDS`wy#BO_D_07TO0W7!Z08F6CDNvMm&>b z_Nk?vqUHhjeat^GsQ&inw2qHX$mmxJSP}ARD}pGU0y$UYEiIX&1CA0LD65HeL6u?Y z)y8|pCw^9nTY9mcc@p_8=z`+}^XA3(Wd>2dpOKdr=lG8;VnxDny{gfrvA4A8c#0%; ze6kWxW@VrTA%fY}r$>HJBWhTg-b%Mf+Xio@CE2g{G+J#_(+p){NiU>B(n*U^{y&E7 zXfD)w;HBiD(Gxa4b&0=dp&q_iVaxKhMOQ!fucLbSs1ZiHUQ~Uz^-jf}mqp}Y?Ogo8 zyawanJocXaY_TxNat23I$2miz!IlU-KI)bZ9p>IUu8(aAm>G5KcUBXRgNzj?O>0mU z%4`qkfNpc;3q&5YDcTONeJ6uU95#0G!!ePsva%duXn*EyS7>zEa*epYj+OA1?gaz? z?$tt8B)I7bNr^r47O(-NN5!SKF0QZ^b)Q`ITs8_H^hW_?2&wP!QbF0=m*Vw|3UGU} zlE3V1Y6d&ZBfp)#4n+dmXG_d6_qE4j(;e0Zs3#rtw9@Roz;M_$6uWbLNc zdKFZp7GWghUSefmRz%2|v>PENGl?3y_bl$VG|zvHauC9X{6(vBiyS+t8#nCvlEh^6 z*Po^etmV4??9WCzcFuca4_GuRODo1g0tFNNwmfc=axr1e?XEZGj1M+|Ucey!2Z0dp zVIb*XlsQPM!;v*!@`KAd>MtI)xLJ7m`-MWVjwS`m1ky;hrEo0dt>Ci@w{~r(l2NrB zxvjdXYC&u~NKwL%)j;r^Kc`?)_%IC`20`k_oL2K5RGt&!Pc9Hqu{XP;t!srZSe~dR z^vpl{bJdh}iSJCZvSCV5=zeH@QIp!9C63R&eQZjws?zQ_DT zlQ;U@&eJzR@5Y2);A43>Gcl&F>hTDS2&C^O1f!~!D-u&V0e&_10kh=|kKD^5CH^f* z6zk_FZMq7;mPM&NzscPA`=Q#Ce__1$6)rP}PCWiQc42VZ0nY`be@VXoVZaNPi%Ycs zqIxfiD+^WJ!eKX#__Jb*?eFiino>H4!T+9zgyhkGzDDw2@bAA!=l>Oymx{Ex7tew3+)Oj zR*vpPr`vx2{`vjNeex{L^`~8-&R&e~S<>pyk-Vv#r?-K(431MoCFwA@Y0+UG#+m0h znb7YPQ${QK0N{}phhO-B$>G^oKS#1u>E=iv-#F@n4*v}UiX*p74t?}}7i++J5;*q= zD%6IhXTV9-7N7H_ZmnF{GZg9nY1i0-fU(TPb0hf_`Qc-=*;aT zRyz)_l>M%yA$g!#qlc`xl6IZ#>zg zzgOH8fsi8wPbod0hO;H#0qjEMZpXLMJNl}MaZ=pU(ze7P2cQGVkdlt568e{ix54H9 z44&ieEKMQY{*7W(}h7N%WS z`MRtP+)m}@_>~*RidcS-#ZAY@ufsUE+?o&{dQJ487 z<03DGouAZ@cqj^gw5VsZc6AQWD33Tz$;>DLb~_w%@A@B$5Hg{D%YzdBp))anl5&A#7vV$>ljBK zqBU9jUhrklQ3eAT$s4gA37(f4?76b@hng?e_G$LbB{}kWIFxt2?6G%nPkLlQ+gTFR z{eo8TwflVMb;ZjC?s@_w79-~M>(ucwHbA5my@C^dO#9b0KN~)KlX%Wd=~OgR!wDl| zRwMgTX^UGI@{bd~j+3jP`Y>ElETFHOh_YS%Xv0;?yjrC{C2%}zIJK}cc_gjUUy&Ja zYiRR0msrvmfui25G2dYeClm6CPjBhUpMiMG=}TO$c=6$em#U|k|9T>G&Q z?)*-TS0bg=pE?ReY_!rZ8H>%MgyZ5UBMq2ntLQ^*WD#8Q`o`wN8N#64?tF0*C$*j$ z6Qz8K{lm-d_(>_XJ5+b`!bDKHzFA2__{W^Bqi0C2 zlAhPCx&edVJWn=sUiTPfJOgeTQ;)t78Ra)>a6&c`Mh{qxsQzNAv)RhGpzcszX#s0D zkFqijQu}_Nj44-R!HoewzptYnRLcGq*6LgW?R zw6$!q2~KfC{Dz^ix$CoVMAd5KEjh-fyDGoYQD($abb8coPhyZ#k`GnRjqlC7qgex^ zZTZkQnA->0<3h`(fp&31O09m}t#7?3M@jtBgxm(ZwNneXeI_QxD#DJL z$-zyhVp~IE2Pa+kEjGTb-3H0uh-xR22XL3{1hsgDekT*OdA#rBhemjT99orA}dm5-``Gva-MIil0N>#HEv7AfeAk zJ?g!U)7iw@+l1p_82XYTH#c|)l8Erlv6lU8>NOf$SV<&jn7v6xcI(y@mv8j58ZyuxEa5}K>>3EI+-HmR9yYZV zu)aLcqFgoqLAyL+d(~^mWH3Y9aX2M`uxCJ`{+cNfg#D$}>WL}C?|j9A-lMy>r3j-f z#%;;H089eis>8%>LFGv97P|%{yEa5tBH^UFT7a_!uJ>eZt%^mc^Z9^{ldB&BQMRdy z-D&$1rD+#5m`+1_kWB7Y>Uw-uM`yqVKmRn#L0Z3_Oaa{e!-rKfD@NSci^2<-uf)6N z5L*hf_(9pNoob8wr)5X%7>IxMR}5C%bIVy-&B6zq+Q%Dy+$jTn`Ya`b7tl^yiaJa} zm%ha|yohk*%+6nQhpQEBxdD2PiK*RcZZ~EXd6H1gv+!d6Eec1i(|P`;*y2K^r96oH z3+umJi>eqRWGXr^=m)5Zz7c@Kx61IuY6FIfTY|C0dImRuN82KxC80Nq1g|y*MhycOKi(F*mS-Gu6obIom4JA=B<+kqBjfMJg5EjGCAJ0?{ z;bp$6NJMmYR+qwk{>0eoit$0KQTCeJ&rJioAjPfNkbOZ)ad!Mp+V#?R7$wam7?XmG z@pFh@2~+xnqn2v_@Z&K}?Ul(Ni-wEU40GfYj4kF3$S^4xB4}h%q8cbVJdg0hi%-<~ z{2*Aw4$tCV^;9X9BEE%^4Fx*(oQuB2Ijt-9a!rjX$Twwp1Aw31y1$x(~tR zm-K(>miy|R;c`4ReakTMoUuxC<^Q$XFCOK36STWL3u=nqTmi-x4)BD=B9Y?_!@*xG zk~Z!w+!rDhu=YKIO%F4-bLB7kZZOtLJY;^wCXFREQ#D6hgJyo5;+}Kdtg#J_@U0Zp zASOG%|HZ4n>fJMLo1PfV(ixK@NXbP_jW4mQ)DZ5XfO%teYQHHZWF)WsW$(ylhuHMm zJNX`hV|uSg%e4W)lESAgsiBEpsn$ohFtmF#NR*1(;8uf5Pi9f$(L?0R7gRii1bz`g zR)B+2zbLD8# z(C7G$e9e$@y#~zt#Shz_n6hJY*wezFHN!Fdwk4Oi==zI21dCi>DJzy4uB^^Fzm`#& zQ}Tgg#2ttg6(}TT$dG1yD@L00isampAW~&c{*;5I&|cU|mggw0rCQD(?F*xq*Qr(U zzYWl?u{UM*?XZxJcb#*SKb?l_Au0-mWuGNKSvY5PU=8_jf6YA#nEP*{xfcqQ%?dx( z>7oO1m=GdFZNt~>H@UIKKxcSc970$nyqth+gU+`pD<#3?)4-3(lk50`p<4*HSMzD4tQ04_|}^;pQArN_S)|Mh8?+ufAV;cQH?&zO3|8qAWE)l z#DF^+uFpFt%XxfY2KCtgO+R2N(@@m0VzHqLk(Om9;UCdW`GUO*N83qc7JX4-6BL? z`-VYCv7c*K&q_}imwaPo-yoi8FfkhJvrIF4ZtR2XPvy(z66ZLv{**qAYyk&9A95`; zFuVB=eINauMEEC+{M}d17i4C)L`BnoI8q2r*N)fCDN!)QqsPTNrVzx65T6? z+Qzx>3dfb)RpdV0HhYg=4>pS|yqLPLdojsQvmGg5LO}CEO(y3pT(31)bgj-CXf{@H z9G^4Nw8G_m8#sXw0Kh~gors=pnVU;=eHGHT{ zsCv0*>SXUtK0{r;@Qt0LsMxIJJOaC>NGUFA(ZTvYKUQgWYz-SfsYw@fR%6?5C!7s+ zvitpeS1ZWa7Yx35`)8LiWMvGO3HnlX^e))>DjiGlbgl(x_>`R^`JlB!mJ(EcFE4-- z`C-y8StRnJ z;a6Fs@A3TRdYy@X!R#nUUGAN_NB&+R$h_2>kc^xRW+lT7+FHWGegdVHx=1;Y7-&vv zroH$4ZZ!C-w6X2W5ngRDIZ_kDx&xK^@B_{D8@xVt>gr*m&IqggBi1yH`S^(ad1 z*i7Fj$3l=7J>mS?oXw!3R4Y;xV&eRiC~^VNX;pkOwZd0_Bd{q z8b_1(ha@mohNdVC?1vX*!cz~vQpgEED`iAE7*|N7O; zY9ccWu@Xp~m9=!!{OVjDEcaT~3Q_YVaGyGDJGXT*7G3%viCJY)51YO3`LS-E9&2%J zdEwR6>~gZJ|F`;{<=;u|Ui$qYifsQ)nrxrbJ{E*$`3M=xcxEKJLLCX*H92fX8IQLz z>h<(9Ppl?`iz%b}P##Y~yoFL``^Juf@a8WcpqOgV=q&qoOwtyQEFCYofXz;D82FjK zW5R;Ri1gfYYl#=dWeCUJvZ$C`6xnM}KL)fi9sX_4@QDD@KeE21Cq1)^s|cF_GAR;l zMO9JWLyTh-A$E(&YS==|fiIl}Rkhx_MU~w<@bzoOs^gb^7ipnziGcPn?Q*iMR(ukT{#t|YOX%nnWot9ZTQ|MT9e zG2zpfP#KO>`)rzq^Dpu?*YNn2M}*E_v{)~pb*whn|QjaNi%6EsWfm0p_r}V5y{+Uzb&C{oDgB0uB=fc6gHastwDi6zBdH0y@k>IcLS2 z+H$4^)Z+X`?W!(|QAX%VGoj1oa1w|^ul3Ows=P-blJ4sazd$YjQAxms)#BzvtL;6? zh@jIy+x30pluv!`pd!oC=jxV|MMC)OriZuel#-MlAbbxV{T4)VPiAyM)-{Qh3({nu z^2LspI^64%`)o!(yUN^hoBxuH_}D;nAfNbv8@?p*iCEm{^#vc_o<*YPpDPre0Y&kB zxAVF}uf4w3MF<(mJk-{`nFL5K7aOC3E4gTs2T7}S!AG6z#RPq2k*k6-aZk?mrC#>o zy<5m-%d)R&NIUrZm_~kA?5!lfC0_UWqK5eseWUclc}@`c zTdjrxWj+biR?}50l1`3tc-UCw+lQ+Z4ew=3My%DdJjS|1o{AezT*a*T-wuiYP_X#G z>{v^6k>17#PFOCr`_gYs)Bj2iPbG$qZb8IOZf~^u^+po)JT~5^@_Z zxO`Od%goi2_snkGE@K7aucr8Y4jE^iC7?Y!gbz3VZWd{-v?SLDrL->$`7;dY_tMlY z@i1txZ~M5hO?6%%y?ZcElVIFTZLhX=XeK;pok1v_DMj_Bo2HOB5;mIlV|k+u^#>Zm z!nFO=!%~X-ZbDiSG0ZJ~qT6$YJTVRzf}7~+nQJj=Nbjzg`USi#U{Z0RGhIXgg1!ql z`OrUG^ViA6f6ntgRlliLr6=P#HGQovw#+_zZ*K6t1_2;L{x056l$5L+9+fh9C4XAH zHZW@Ll_jU}*d%_V9m_$kgj9iiG$aO}Zuw{LZZO{n#D!$R#=ahP)oc4_B~Q7j1nM|E z=rt2j{A&B6S3{<=E~9_Qxmo6Z5Wv7lx*ucj-g!2xZ&oduL$KMhcBqB>ec)@RXDhn= zKsAdoVzaXXXt{>$s6kCzIx>>DF9$Exy(*|s5$7HlD9}*N_OihN9XrAGX&}$p`+<{4 zQhw1lLr6FiYh(;n)be)JlR*2i9~xfx68I&Ibcao7ZnXLky`vjP>h2}+YG%a zQ$nw=Xu1?rjl#tnTYZ7Edj1$PDZMQFE#e(dJ)gb%u#ioS*XPw8qAW<+t~yE+P&}dd+C?!m8vpBT$6p^F_C;qS*{jf*IN`7~4G=RQ@9RJ9Kc~=m`$c}Y zFEUSENXu`Ta})r#w;9gsUW1LK{FtGX3@(X+C_l3L6??|yX%@0k*d#BD*u2INlyc~{ z03~Ak{N-pX5)ger2qa$8cDj|Gkj1!*UwK2U!~@s`FD~XxD4goAe4kspt>___d{l1P zIq*l7PWskMzICbh0b$qmM5F$2b?zms0U;&7Cb;q^-eOf`9~|q~xUG1(7CrOh*Gdvw zu6od-0d@`QBO&ZS?9|6^Pz$r?0vJYASP52|MPE(8tD8{ak9H4tYi@Hr?eD8Nn-w>I zt>=hKD1{0HtjGJmWKh+g-)Uw2bC0HZm&%{i-&<+Dn)@U7C^=c}joTEI^2objV6{)l z5cuc&Y)&>TQ0ED)8o5Cq5@sIDTD5e=7?0g8ifIyt+mo+yn=?Rf zwwUktDNO+BnL)6W$X%(-p`Rk^ zqSH%Judo{0j+f453jZTs}1r4J7oPA1F znLdrDSycAd4n$(wG);()g+VdbA7y2LKeNznC={rS4Bu^BeY47;xWvE-Z8Y2eVj~B0PfBOcwZ|#~P=#3>EdUjiTAhlqaG8MhRqJx??$hQyx;xmdCk>O zUt4<%F7Y}F*gR!Z@Gh7g@bP3u?3r+diIJU_yj;5G z(Ve2V&J`EDZ?M^@7!mePw(Bu3FA6pMwU(0#oGjAy-EHdoqWwd?uL0Zm$Sd6kD}PZG zvM%H4=s4HNH9Jl1XOf)!S)(>MNRY&8@AJn z*I(hy@1Ihc;>1UCU)FFZ1UCH&Vd=&M;v6bi!(k#A0fYWD3E75@{$w2gSP^qk1APvT;#H#Fhdl%W$$G+3 zX2bNHjb2UYl-}w{X)3!62u*ou+liu#NcSq#cqO0?h|#`*VyHDc17_!{osKw_Ogoa> zxycm8#fZ(gh;X4dw21|I5&!!Q#yp_bG(GtCiQ@4;{@)9eQt}8}*nPi>JR*E)J?^C$ zxOl*Hk5^llOdjB~@wL%oZcGiC((=-q$B1uK`0l}hsKC}+{r3Fc*gsR5@ouHK&6^G@ zg7F*|OZH#x_$CjTi#yzZndyQ$@=h$uW+BV&LpjAF6UAq+8>?RZ)ql0I02c(B>%*81 z1;xXEmvL*fqf@Ktaj0*KPguDx|IiVtdOY+QOClTrYhiUeT3b_jIlrn5LiPBtuAazR5}y*O(!0jcRF4~kDxCq z&szNc7^%W~d@()>_ZAbH5p)j7>1WFC{|WtVWa5_;`^hzN*Q*;32&NPspfTjNaZb2G z7g-HcZznM; zeRYPqq(4!{S^voZc`B{duiabnV#SJqu(?B6;~~GJsb?*~w*Q)0)wSraY{2ak(qLx9#mxD8yzX6?2B(^u=A>d%oBuRj8vrqn~dSSrJbXEc?$aH=_+u8n)3k zZ{2JcI{+mmZD!)*#qQ?I2)m`_(lc{F<$Pqs+>?H_Q0w1XsPw;Iy_ zM%ys?33WMcyHBkb{usp`nW(rqmdV=F9Xs_PBX7w|WjzrGP3kxkC&kT`7Zo1pRq9EN ziJpt3`!QA$q5DjG{>A)WKHF#E~HgEK|Ds-}Ye&r@YIQiTIg|uq4?7Av; zssB$lsYW@&Qm5zXmn(^@|3rwcjtr{uPh3gvQMzs&E0fzOg=ebn^XOiq%e?NgjUu^5 zUNfbHj{p*!jtl#yG0@OmhmNN5BH;G5jE#k0ZIp2E3v`wg^hx((#g*Kg*6B2K-bt!X zLZ3TFx${pwEGenMDl%1iJW|35*4!t(7xgE zSf9yPuiSCR0a<@i43S{S169$|*f;1#ZirdTvyaL7X)p!oef*;{$-b;pNdUW)N<@QU zlhU=_q!0VGM(b6rbljZUOS~d>Foqw%6(Cav_;V97&REb5k+aznXywGETwPc{; z7_AO5S)6ts*7Uz3b`AMDXSw=e<0s5uciQ&SA=VQHx~b8PX&BW3jpg|H%6NXXI7O6b zHErhT&)x!)?{5W=z{{s68KSwmoV^|(?IQaNgd|$}0gbJ-Mvtj~9Q5sVw=F+A6K&mu z#0|zhYq{*SgA(OaW1LzxhRJKJ4KL0U#cQp2y1A2UbZCcOr^ohsBb3q^GiMiit-oyO z5ocBaR=bJCn;$Y8*@iitB)-#-g3kNF`A3Opzvebfkdh&ybi6 z9%o%XY5CC`@e+~2OkQbqw+|@{Cex}56pJKpU4%8Y$$5WCCTKoR{0#v&mvPZQ!>DLdr%7ozqDh;GxE`QCCP5XF0epQzWdfW}&sFs9l=Ck4~Y9m>wh}3Rpo4hlk!edJn3at3f1oVc}^R zRzW(N$Hq;FOg0$RzItfTuG^5;_iEXr!)qq9()@c@#aQY>(N2&|AUufbw-dHiO^Z0) z?5fA)`5~LU;Tv?Rl5@&Fxr6K~5E?N_edEkSPkerk$}wtl1CL+$IYn1C4+au}lJuJj z#A-ycDC2Q_AecF2-mGhEnbaBmI>i9QKW{W1y%G5qzWmH&1NAbCXwr1`#p8oL6HGkm zk1q*f{wN}72E@E~eC456^p6M3piqiL$NF+mYBf^I(};+7TYjad{u{q+-N0t8=4YZd zH+QsAY_|$t=MW_ccqttUJ!8xRq$qGKSNkR~U4a7B(&$NrGmCga)hLg%Ti+ktXpN(1 zO660MM_AU+X)m6s;1bNdF1DT{aT))`g^)G;WovJ=Im0(lEGAJU^Rda>7ry)^zfG&( zp>YKWW{Dz+R-UGxwi4mU2mk_N07nf(68Uh%B3*|e&@V)WGuFTsEEgE5r@+iX6j4`l zL@FJ*mq`>yJpjE*?Ds{um+Bdk+hV+qPGH{FkbSSZb7PSQXj{Yxzj&cdJ*IlZ=@buM z4~%hYHlI9flpg*E7kFadnlIVd!x8GFqGq=H=?YhVRm(9^M*wLV)N%KbcrF5*;nCot zO_+L`VCt2=T$u+X{M2ALan-(Om&TZBG((t>K6G88wW3<~3#jD*8z0&nq|>SW5S`8A zh9@PTYMz09yc+>#^N62of>~F>7&bJ5s~VV5jER=1iW8Vcvs?SZx9#tjKx^fD*Ie)2xR#;nS#g@!1P+_%~F}xp`@4XyW#1KEiMh*b#EHFdL$XynG$h% zWRSK!KZmDt7fU-5WvV4ULhYf68yd?0F_5R=p*fGOEZW>NlNDdL)0BNIz3mh-;X z^y!ReE%Ai5W|kOfA4ou^VI7qL6Ma0f)}tUis?nwes|G_iu3&yK?R~m3Jr>S=ov@vx zrLe(RS9EU$nyBCj7?ujq5*(x4BX!-Nx{;obwY8t#v6e!W_ODdllD{_F`aG@_C=Y@0 zm&hyaRjn^FMe%l(?>Y<=V4lKJwW{Ky&78{i~sI7!vfhIvXI3xip=<|7KM7Zfv zlqY&d9SKB^2ROykCC|np3`pWrKTPu`5@%3TnEcxOh2%%U+SxHDFD&i|@>j%duIvMW z3CjCk_VH%`k`7ma8S2JXD53uhlrLo&IE+rsHE1UgHB1QE)|l6yzxXN)V8){!a@lrG zkYZH)T!Xt#wAQk>w@ni=xz{7%64^~KG7aWjF=G2k4i^}JDRBadsUy!1u$o<88E7P9 z-+n)3BwlnTLbNSqJJ-bhkYJQuCTo)QqcMhw0$L{G4XT9Mq(||)K$w6@xpJC0qkt^i z*ulL_Be9g=)>{t)z2 zjb#I)N3i;jlJqilm_a}zZdh=#f@QTOx|13LLw`^v+E~u{$9zGORO;9|cn+flSo7J9 z=h)b{+XnTe?dnrH=gI)I^@CByIHa>grqS$S!H zV6bx>E+8PwkH3A}wum?oHL+Rfkrq}rACa?0KDI^y;ycIdn-@vCx_VMCpWyHo|oK>5r~VcfV3pJTq?(FbcV!91N(eAM0kjKCntS>xm4!| zz>Qkrb9HqU>?jr+P+r4E^P-Q6bIR5gR3^8$7+~np?0wh!cX3D;Fs=~3mBO@4i~SVy z8eN69n23d_M_2gTcZCa^8jco@5>tkC9UOpM(}p#B#2RV_d8okvuUd*n9-hp zioK~PEdmGZ$WQBAHVU$9v7WUZzSwl1c4TPQ>@DMGG^F80%GSAK0dT*5kB@(z$u0g| zO{jXG$%X5VmwdF_Nc5dL?50YsFsvk~NTj;w=H_ zm;CxreFt}wuTgKSYJm4|*MpZF;5wb$Ti6im9$P(i^kTk$2)j5sw2)b@F!=+!?)B9| zM%fU>okoSrT%yTZKtfHAX>6M>zZ}&f%g)4HCBbi*7`8@!i{y;*sBSA=EFZB6BoTF~?flG^9S7pfsMY^QeElJYZb7c3q$Y#=uS^L3ZErX!ntqto% zecysAOa}W(Pq9c1un9D8L%bc0*H>3#g2zuihDYn}q$MnOTaDbSzMG>#Z1ZA2D(V)* z3>;)vyf4ld4Nep=(>60lRf~KodO#zJH!u?NC(IWpo!^>n+65@Kf!|lN#rk86&=*y6 zhJlaWx>K?tOK7+F8(MS@*6yx0@dyhMh`OUWXvn{QCAFRAIu8N{=B(9i6&2HG#Z_=*1Of?0p41XHDrs+fXS0~ z7W?^*4fs5JA^;+Zw?Y#_DJ`QbdK&6Rs*IY|8g^7Jy<%1m;dM)-v{@n>g!tI zN*7DBCV#D%9C$x#z26@M#B+AHBqn~uHBF;H4YTS+eBHtdaVq`KdzQ&X*+WqvQU-4_ z0JF3rcOwXzFfb;m({~2^5{`4=V7JKiL2MF_EJaZlmL* zNRoc%dhsCbMe-U}q1FDgnF#fR_`YPSAhhJQlfA>ldx9T&AUC7HAk7%b1-PiQ^5gkDlDC_AxCD)Q(or z(76&2v>J1O8$7%CM!m)FQ%6mTJ0wt3UAm((R(MX50>Y%3k+8R{R%j%qprNTj*j^1Z z9uzp*UaikzJH~40w2sP<@_}h$m&@6%0#3k{vL85EX%Vu>MxXoF4r2&}shRD61di#W z;h2B*jl8X)Rd$n1EmlDWF?nb}Xu(aj?;zP(bBh4gH_d(BCizfH9NnaIS6DVD?9-3U zP5jg3OIedE1^1$tdm0HJ6kH^H;@*>E5O!%}6Y4Kbu1reJ~nh)eT zUaeTN(1~4?a^Gt1tL!!RU&|L5{!iK!K2c>^xU-`9b70sJG|snX;RO z&HpU_G6C+lAgoj3<(GMky)FhbnF6(|67F-@+fhDeEy+IoOb(y4jCGAg*XY{{(m<+??VOYcwzY&ddUQ^Y>q2VQHvo zh7<#i#zujjr&Ls;X(o`@N_?{jCQpUyi!=%qG-9T$vk3HXJ^IMn+i{D753U@iTApw} zGl7EZ>#ud7=cQoH){n+@R?$oqSPkvB+4f-QKV4#?Q?_QHM#t`)WmLZ9u(gk`+{Y>X zJn;-gM%ycK((wE+{;_0j(RH+8B#pW^f2_fIH1JWQ(IM^~9|w^1rtdgJgZa;B3f&Dx zGIx1K)eEdH_D}S6ZK{h#Rx&QiCk{zP+3I*73F=5*E^p!_Aqj%K(SB*S)?0NiaUO*m zQiTF>&Jd1=j91ZbnjKT0Wh^m^QCgCW?KuQ51R%_+`ool7fnAL>{3X1uaO&1Iv@z}X zeDN)2TDq+=sfs=Vs9}*_tTgUAwGxC@1j;?+f#YR6F8GiamUI~q?eK#~4)lYI~!gam3!K*VIJOyv|g!=M|ysTHv6|h|U zBuaIWI&Mk0?He#e@RpIy(Eq{STZToszHQ%_CUlsz%5sZUy-D;s((go1{z`R{OisZYOfqrq@#`lIcpt8x?0K#63){MwRTZt3 zEBX-TXLA4{^pJt`ODzqO`T<}?krP9*^k2Uo%XAFxX&tzyR7SDZk;PW6D5*eUkq7%; z!d{yUY9U$7+LUMK@6FiniWH3b*@}axB6$A=ShY{1WcnpH1g;cU@*FC7R?`Gf^>3|#&FH5mT!GXj|;@sw)o`lK;2 zsMaqlo)+xB1}nD6Q{?P0I+BVYkvqY9;NxiUv?^vYeAjm?n_H0m`(i%DEkB-!?!{xg zwkkv-O;2i2I)R7zD!hdLyN73Q%x(BvIFTUD21ON=J2NWKQ)-x6119bX|*A}tAhl9)62X-}2-r63tjU`3r8oA0B&F}e9(mRh=+OaI zg(z)f4OdbRklEqLb=%Ez$p{t=$>{9ysm-`?ZY4*;kDT4r20*qhTE?4tK&H?RBhz92 zrx4(&UOmj#CAbZ6CdpD)`Pz8LMFSVTXW!m`ZQ#F`j~*3CIiU?k@a1n4(z8 zBUV>xh?_h$t&EcMN82|B>+a72SIv3UP1tsj-?`z7;&@#-M0T^lm{eyJF#hRHqSo2f zYcY$YpE?JkMbgwS>KV@E%GMBTN{qUEdNZ5mYA@%DFD7=7a4j~UqXKj=Y%XEl=O)g# z>8H;^KG|*K8<2(P0Mmos@V2=}=dzn#VwWZUZpJ7GuWdR}hJ>ycsJLQGm(fmoVgwKm zBs~;98c_0L$Z13#VSPYOWE6Tc_gRv^O+7slBXk#t<(6);bv;I7YMB(ozG?G)Yh76s z_=FYd6oCRiI7)|kmnjc2uz%=u7w-5OLSv1o1=0xh!%`j*h)aq<&n(BVS8 zFwbO?X&gnoCsW{bol+{Lxyz#ZSvxu^SS~&>2)ZM!f{2tv!9aNgq@X&{HK|S5I$w<2 z!v?SD`B59H8*^5iS`Q4Yosdr1_Y33oDN3Ao0oS35s;}?U%5;kO-oeJ#@Vb!8K(qSm z;}_qofcN%KG;9SHH@12ZkRTE@6F!-o+l&kRVJ-M00Hy;XJm4CcAZCouxYWkEAa@&m z0!@L)l0nQU<6i;;j(0@bmysnZWEEEAKhPuc8}yRV66n(0WMl)L&t=@@QkB+Jff)|p3}vn3*SP9L6jm=#470J$@%4zN$TwM zhLwd2=6Gd;q`J0|ec}?E#;V#?^0#l9OiwBOYO}`2K^KmX#gPlO6BX%kahVC4>IZ6U4Yvv5iX!aPz4)7Ac&a)SP9*1rHFLP<30d8qQs!g+hs2zOm2F z$9rp309974AlHVysj-|pdrGys0XX2HON+ZQnm`PzAdsulQw7q9+R9nA+FN-D08m1V zc2xD*%8ZOmdk%E3>ltT#UW*OWU#lJ^am@gPE^~>pG?HE?#Pw#b5|Gn@t&3{?Kq96y z>b>I`1(W|qrt{8L2k3EV>{w&i(j9=!a)X55vTMBdEe_7-?5l$Mk$eNP@wiT&G`!1< zX!3!~x6xJPrSa2?mu;?v5@Bdv$MY8PCnoAdzT2seAR6WUc>Ji3c{b*lPl~I%v2kB& zaD)i+*#Q+KEhF5(qBX*sQu(YjUvPbvd)gEQ=o_?I^x`ou6&Os(T}{)$QK1eS*ii5;egXLB zT5{LBQ+FuQ<*@4Vdol61J;UX`g90jMWB6WNvPs4!C}%c`h@?i{g|%cxe0HKOQSB|_ zhORkk7>IJEjE2MQk-|OkA5(fe(*qva3#oIloi`Fw^-lQ>V8YtV55cc7VT`vrYFc488BtT zpT^X;gJ0=Ae^tSej$uNhsxkYR^g?R|F^f4- z>%$Da1!{hyWO4^!861eNg&w?dlk8y$RC!^L*MVCAsD@C>PSlTYiOPmmpe7n&MMS!@ z&QEfGxg_1NF^dYeVP$=p$b07*+@&);21^{xe3M90s*nj4ep5 zBAom>)xcQz^-1TTICnd)+e~>gu5t6{x-^gm;%{sOlSyDIXYLO9 zL?;QwUb+;>DQ*M9@bPgSW5X9rbhJYdcN0b?!a+pMamXMhA(*U)L1 zkt%%cN{xMeHy=x+NWain_3tK8a80noEDzm~o0t#)Ujr`8h)Tz;>UQIXHqir4Y zinf)1F0Gkq_zBFy;8K6G9rE={AS8EDY(Yoex=E`C zq^uW@$=)S1S)ZgtIh(n8&B3to@0Z8TK&=Mq|Lp8_uEcR_gYV`H9@J~BssbFPncLN+ z2M^3;5r#qIch1k>ukUsuy<~q8kT-D*dv-(JvCB*rv3dR`lTfP7v~) z$-9Bn-+1_6LKW|?KE!hYC4>9-E3jgLs<-N&0mlkYy z6sZkKWys@#ZMS`~zH%n!+} z*5$^&GS~zP7a$Qp=2*nN4BYze=KRJ~p%350_)A)w8Zxv_j2>nh7!v_1=D@?7D<@r~ z|LwfX{ZL#A7&%My5$$VA4t_A-up%n`wpt+7!~2ATuXWmG1SG>+4IVPi2P^UqWz0s% z6P0&zJ)1$~fvK&k;x76DxIkxJDjHd%t9H%BK-ay=9o(o4JqpnVMt1Ea(+Iy{Rz=CW zaUQz&*SC=~(@S|1dAI|%&!8KnySZdCpvz)#5#MCYh6{G|`9RoNX%FBHVZGpj4Qyph zu{4k=;XA*#`orj*S&5N$OP#-ZLu>9J{A)X4HV`H|*boTQ$4L)E`ehHGU@HaT|4`<+ zds3PgAu)t=xt#U25=F;zGQfy?`~x6_0CEw16bWp0db5C5^n`&ygd5Zt=W2x4gAX8{ zvUytD^nD?7wa%u~^=5A#5pOb~M^cKUuD`eWX$R6UW-i(8tyy?OUw%)*eFMNjx6a+8>SGZ=NCAWgy5d~5o^mI3LElx^AUjb(u8Q;1c zZzP_0Uee7xkRF~&a!qf!$aE5xo^~wqP3!3r3m-Z29-czIo;7xyQJ;#O&DOr0dbC$l zAQ_K2fZotraLTTJ0?VL0Ew*QlaXgy=#YSMp@BH-t);T9=vHFL<|C}FMAhW*Xc3nhf zar^rdsU6)_Nn4HN{$diA74Y(+C~n6+qb92oSX%vVb;UxoK4iWj{5BJ}%_}AcBMEhUWtShzlPJ*nxe0}u$ zJM)FnCeTH6i05LB`?6$3>uSNOAfWLw2FIg`@B0k#YbJko07uJ5^s|#o8~s#Wox`9@ z$K%p*p5rnS*+x^8NIzeO;K#43L%d+kQK5EpSfH;CbSVG^N=SxPO}n9)%d$;(3Bswp^-od4PJ^7Jtu+AiU!TYHbWZ7M-3_T~|@jiA!=iV8VC0WkafO z0E~39H;R>%0CErf=jM!i;R7gx?GL0hDg-Qp_{l*r4!k1k3+KP|Y}pHV!-K5@RS+?5 zS(&qxxA?b9F6AZ3#Pe>}fHQOH!*GnW?$rG`cJu5TCw5V^z-E3|`;7Kl54l()SH>sz zqZT#~qnYz16r~-|z8RSw->7l&eyoRcLVfrtM&!PPe@s(t*-u}vnr#n50)A;uz z!Pk?{50g@+B&)&<(Li>5-l#NorzCe(Y?WE(Mlq1^`8P&_llt70JmUJxvaj2liatr{ z(@%{YqHY#w)}-C&!6lM}?sUIgFO_6mFF63xv1qoHPvOqq#+bFAL%!~Cc7L^d!Nj|| zq+i^TuUFozeWm#6^i)((!u8Nup?H&f{`;KUC7h?PI8Ns7IL-c1cS}9V2MSY|bVco0 zHe2fV*I)g#C`%Mhs*a$7Uzg|w)mjHkHbA;L?#e&xs+8lDad^0@l`2td5~woh?&0K% zxkhOQqS)BH!^4H5V1QQ~*xcp5Q#S6*R#3>JtwBP?wp!LW53~hw!>_qK)WL2xP+AqK zHZ{wXhxbcQ(xugN>#aOlC0K0KxU{^9S{gAICRs)z%b@G0c2)CZlmUP}!$l|B>;)we zQ-WZxZnJ8xC}uhv0NqHcE(w1L<}=oA5OQK;fC>xoP`P+Y5kY&$o89y@J-9oYCD-ge zpMydh8^O)d^b|<1nX5Z0MDx2ED(T)NDtF>LRWW0woYu2$$=oovuGt)*zJ?dL*Cm1 z6?%7fE|EyGoW%u4@hrf?L1kk+=8~!lRuv2~5pkPRS7@uJ&GAd45L&!siM=5aBZ<6O z^>I`9Ck5W`(GmaT;eIXo%V~#FuK|DfR#gDuw64uF$S8qsN_5rf>F@FeH`F~uHzQF; z@w+!0VXWrTXrNggXTM=E&$A#0V48@zq5a!M=_$ub6JNh`Z3I8?zZzDyhk3PKE~iYN z2EsZW!X^_NB6`5d*32HOz|*$K7M-2Bhgy zx4IMo_l-+9k&KsFUTP~@05GI3%vMkQ!b@FcM{5D~>VSf^h*0(?MlQi1z^PPqd z&Lp3R7t-cA4c>B}kP{o~mNIGE5YJ^&5^avYo8*))07XcfrF#&BoFZT}G@5MKB>r@N z_W)6a5CgITO<(fvjwVpjZl*fKs+RC48SOKp)yW$y958%UMvz+8P*|1Y!q6qLa!0Hl zuV?DOjZ`%zY>t96K*hoJSUwP3!X&S?%hPmB1tS=Jo6qvePn6SMFu43jSdOOQ~z7u@iij!$)QO1!LI)79;U#DuE<@ zPU0~^eLMhhUufgztoT7$qB&d41nW>+RTNtjvL&86GA2s7Hk^>gY!!^sweSd5eiawf z3!~||<75GHYfp_Q;-2@kWUyXu--qm45&LeU0Cov%Qn$C<4x=+}!n|~36U&6{NM4i8 z0*F56ase6?n}b)2PuxY@Sxr9RHOB<7RA4?_D-4le7R@ej1bL&hA8&I~`5s;|*hiBA z^R|J5?rKAI*U-VVwPN#IT4X`byNRxptZ0?To-Dfcg|Fqj$x#T!>X)EZ0 zLE8;<-(G6T7b6tHg44M+C<}@pKDPd9_A9dBXaxy>?q~isyQv*wX8~j0eV8a94v0DP zbq4sMo7A@RT_<$(tN;sxC{-@vC}h>N*-KZnW6MWKgdp&$O-T5;R}E0x4a_<=g931) zsL0*g-zs0d$B=nqPkM0aK?!#KA_OByR?>rte^6Ie2iN2;P)B%wu6_3caljfaYfd24mZuJP3%O2tne0aBcWV*sY>P zAW{Ho2TL{SvU!qn0nj``C*z82^%sBcmBuy*nMwGy?{TEYS%Ej=ah`W>!p~!P37_r+1T^g zRrf!EeWJFmV?1DWmp-QOCj5qQ|OpxEWNbBs|)_yct^y@|JApg@E&buJJ(+w?fDm3CZ* z9V*mX%4S|90%aEZyGO`TsMaAReqP+yCdaQF2G9;;nw!z-JJe|O!sr5f4i_pI%K`>b zY$(B1qI@_2qL}bld|>*V`Sw|jo{kyd6v<2vFHfH~bY5>+VHq}&SpiI>BU^(tUg6Uk zMZU?(uiKxq;}QxQb)yCsZ;?r8@B{3Yf6~i7;irrvC)}&Jm!=uU=pM(g6=ib(NdC_l z5GVj~J`E)I*^3W**bcvN9BM2LZrkUubR-@;eNi<&TrZmzMYGWB0929ygYXcPKSd(c zMTnX*uQOVyA+Pqd1J2fH-!4;U6{1lX@E0C5JjC|}0YS;v^A%*IXc-%+Rsj@%dk)Ab zLBIA;+Q+_cn9GP~`P#UqOW{y+?jz^fL2HD*(3xFU(S-nDYG1PCn4w zYHP#xeTwYU0cHrd0|C)aqA15c{PvGe(2|H+!88|_NdvSPry&?M;-d(mAZr#3fDClx4v5njX5h&0naWP-X5W=T+uW*`f+b&{uJ5xDBF0yR7O@}9+MgrC9Y zW|uamPaO?DX=Xc+A7=pS2l`y?6Dg~PTVIZG%$b9{HZreHL}Y}z43WnO_U)|mNc0Mz z65Fdi-k<7_#^U|*F`Ml!#~(*8DA;Cmjd5_AcSmn=@@~r+%xzhiUmt&^rl|DF{=b_t zSnA34(%HB7xu5lz)_`(_*(i}YNQE-(whqe0=$5VpiQsiiLFvrr%_$b1EgP=72NIcA5Sx?@184`MB6 zVMiEkBwv!^`rS}nC(?pr)rrqk z`HZWLKN;IJd@ILfx3(TeB5!(e@Z7tZIcIl?7b$m9IWSD(<`G_3xANXD0}CC?%Tk$2 zTDf;5zU1^2{)cGuTHm!uUJJ=wR^5IHC*}SfL!q-kU@Sps)bQ3TEFHq9=g&){A^o|HPMp!Ntzbd*I?t@HALUe8RDyPEa*{2v=e}!6_AierK-})=>zLp2|b%mr89jwLDce@O0%;YsK7zv zABh4XDXTrt7hbXfN5fvwkM2heqI(qO29 zyHKO}TvjT{{UDuLF3tkHOsxmcUV(%_!!-+g##xYSg`PB34Xtnw0d@EI=Z~2(Zot3C z+$Nd~+9DM|+~}_mQfTW`p4s19tuw5|G_koD&DLnR2IJ_kLC7}pFK&PiO23Ug7^;!R zwZSzl^9+mH03%Fl(>ikNaESF!TGy1ku#h54PgzjWh8~JD*hKu67X~{)k!QnKF_4vZ z0>{Y{(YVH zlLGF9QZjiN+;%X1^-u5QfO;1b$dWEjj%p<8!cftf*$1IIm^9Ypu0CZKw-<^5JI7k&%w;0zOX4 zFR&pMrPHz&@oH-s15yMSu3(^>Zmo1}T*S!5P=1PYdHBOEoM#OG&P+331dR~z^S^=3 z;{4xy_H%%88`i&S!gYfP;qhh=1$bXj%WN-58ek)iyYSa$cMVxfSp%d4L|JvIwQbndn*YbPVRLk;HwO$s`s>#?-Zuv7 zFz{0&`Hn|QcWx1=@~dT6OKg00(nrBbF{O9C2Tx<{A+Rsx9d*wH!a4x8vvKR#S*j|z z>hvl1p9=`PeO1%x2N>Z1eI;eYn~;Fc@R?b%Q1w9u;IHvMYykRF;%ifB2cSIzG(8&M zgnDTI{vP|aILq&vARfkh0Co?Me^xY)k{+Jq{piZVS{&?57Q`RQKs^G}fIJ@GEzsld z#qNL7yU{ZNysRLsD!X}}qzn|kSjVd%_Y(q7bw+YDmu22Fkp7p$o3QkJp1XXp+=x?k zI`jf7qf3;M?>z8DSFt*+n1(fYs6(v>Ex|(p?JfW(rcHXifFE&L!=2c^h5-kkQgzjm}_u(j+x8Zf18=r)T{I_Ro9>jjdZ=z`-OP{3So#r$|j z+4ASP;`!p_$pa~5-j}%MaVKC1!cIJ3j3-LrU_3k7_Zxe)Y5ps?A<0|ka$n_q$;>E- z&-bvTttl!9#Ps2j!f0gVTx^p&w$aiV9jQXUpZoUD1NVP^JD(F&+t-^v?xL{vfu}vY zvR^?+i^Xu!URkKJ*9%O0+dFLpDh}Z^y?{#;YSY8!7oHB6L4v@iHj7WVSLd~fbKh@- zyB4P{_NKfOH)_`i&>!1=%EE;mv&SlBYCs%SiqLS&a&{Mn@egU=rOYIrW+w3~Qr-Z> zt(ol{&*-+#@F;j?$M6T(g0YW6U0$yH?O3`$%R`A@{cUXU^{y(-UYxC5q+&^SuxL`_HDWd4WMa{nF%yvF!zZEn5)`7q7iqwZc{ ztYi{T8U-02S+|}yy$lwO=qY_=s|=-J9dlQ-i1jzU{j{>!()Ht5U^oVLaRd0t@5)`K z+BbjS6aSa*)J&Um-_RkqlYVo*Zsbds0>kRsM)$rD-;)$%PuI3-j`8+-+F>!zp%Y-e z{P`d|Y9|F)bW_p9t2m_j#-Di=G}O;@1f%17Or&M(pdJ^nz5`?={oe5*0fqMYcl= zbMd|j%j2?ag;sWz8+mx-2N?x-)l6!N!Cn@3GE6O{Ck~v=5=rZ`zuz_f;L_M%skNHSU#WEnkXpk{T)iK4o{WUH8=C) zRjZLN2H%v(RSL#POXxT?zHggp-SQ0l&qb%F(vX$ zqdB*OF30Nob6n0VqcpG@N&Ltwgi+!^foAn*rDP- z!d`;W_SN0#klZ`WynJuG0)&xD;At1P9~h}g*1RSu`8dv_BKNBP>%;#%=&PC?Gj}V3 zo_&{6s{|x)W$9lLr7!$76ZFP5vuWs*+|%bZelOFL^rI|8D6@=HOfWQU~Zq*gF$Cn@$O?<6zdiebdHpuU)_is0e)B;vAwQ zB6z0*lb2GZDR_7@V>XskBPjiVOs?qb$A7=dedV4Td@s?taXEq-f^{@!Hb;uuHdH}o zzi6?OTnaaC*g>70%!FeAOzuTcpM@S@j?v|H3au^RXQ%c8zdvJmf2Hw1tbB{dm96fnut=a1wIh zU&UB@94p&)u=z6|07X7K#_#$f7n+8w;HO(mflK(9K$3FzyfOw0VQ@~D!tROG` ztk)e#x9&U`M}aPgq@6AW)njJ`%~|Ik%!7CP`fa3O!2uMO8MF;(UVC_92SPTMNA%3h4gxu)aP$y3{(FD572j z2(uQP@xiQ;$H#rYT`6hx9^5l@3DL3nqqF>T{Vu6PoQ3dmIEKve7Y@XZbNy1?Xn=7SFmbm{kJ4TdF-zvqdfL4StR)y z-SBz8eNbT3-#6ki7$ggDNTCGUiNnv%STI0aUQx)mB(sl!rnRG;Y-j%!{*X_W!vVel zzfM@8b#1V0zvV-cAXCPd`0qV_fK(284H}iEK0beBKjkz?2Z@}`owPd-`LLV7b9jm0 zvzHT!?||CoUderXL8Bhrf^?y}B~{p=l$@^K{kyV3rw9<>p%Q}z9L#!{%%5M>UFII# zi7m(W^1+nDuXnSC4133$|L&9_iKg?bpO6jUNk>G->D25l%5()@OW2ILVsp|+XIma zU&PfU2SeYCO2|(z0lj=b3=B zb93~JE%a~jH*UU2Wwet$3Ifj+3)h9|iN*ER{`E&$Gsme_^`&t)~gp5{``w8aMYVQYVK@`a%?oxWbL;uB9%o`u?l2Eo^fTiOJ;~O; zse~^M^A&L7VyFBf)mdz;9m*LVkKEJ|b+7Nv(*(n_fCkKu>G6X|(ZRJ1^3(cy9wZyF zgnqI7_FmIWP-|(}BU26OYbrTLe>Td=@3`vMzhhLv>E*{34AdmrS`p`bpS5740Po#2 zT8Mf)r7yy3ehBdtK3Tpj0A{!0GYuz`3-y=>cIf_je+_ME03UOL&{shQ*&BAQPA;BX z^xajkHw)v3P93#1=dxxrPe04hV~l&V)`WpdDaI{O%gZD#-NHEkc^$s#0G8oDx-99K zL%I0j+bbCg$SdE00XjgXOt3s3$PPgZCRL3^rMP|%l%(Rmk&8^@Zzlwxmo9##h^@s~ zW&VlBf6R!#i=tsh_HUzy7xCjW?GV^uUm&LGI--1~Df;ah0^7KX;gLmvfEkcmEZ%M( zTC?AvMgDF_4>YA+X?-^Q=e8Jbr+zxUH8ZrdF%^P5)dRsQ26~X+bwE!Or3Lnfc&Cv; zK~+h_baah2b?LJ5*IEXECT9Zi$gg25AKZ>6-t)ck8Ggg(T$4seke&{D>mwq{b5Se` zGHDv@^79SeBM|`F-1uzy-|n@rT%U^BDyW|jx#VotnR%(L{clnejAIo5<|6Y%n}+DdgsG1u zebWt8C{2&7GXj-lNsHzHs0j7!Ff#l9HhdW!|3||&vQp~xcx3$PDMC!27FioI)A+Iw02Q93 z2ad4nC5iLa2VML3(9^o1BkA5>vbruqn;33dDzYti?C)n-Qw}EJZuJan6i9!y`)98! zxy%_31v1N01V_#C_gy)Jl2 z?;FNdu;c@*4IoO6egja{yaeuoY2l>8P?3q7wwGSdk=l zs)FAUSx>7E^^t_z2Wx3*YTXsfb8cUgOf0McjrNO+K-wAaWcOJR-~Ag~lU&u*0ukle z^4UL)!DiooaG@u9xmYg4prr=E-9wkZok5X3JD`p}{)~R18$}B$2yfJBx&WB5G33T` za0g(P3gRSv_JIwuQrHgf`D(cznM6{k4D*?fXT#ug^Cy2#K>?$iM$v%#)%QVtO_As| z*n-maM8EBz^0YNDKP@$Eh!>h#{n%OaIH2?0yQ|wZ=nOqBgC!T6IwGxC>MK_pkAoW~ zi)c>&G}{L9{%5nzd{jtb+^p4*Y<6xY|f`vHINF%cNWQ4I>j zH3S1mCK{PH3G>tIp!-6T=RImSSqX0vg#a25J{i8=JHCSyx?vOBGCe}Rzs;uCM0XQ_ z*XsY#ZBo&DoGthnFEq3EFuO>{ss8HUus;&}FHHbF>LcQY*E`i6*Yly7Il^5T!T5d67nUwh74NVq1*V$A6EG?wgm!SZ0%q-hn0+vCg;H zzALe9_d`v8dB#qF!R+CzISF&CuO*VuV6Q)0^Zo7r>~Hi3#t-!&;L3Tkq}<`~tPYJ! zpH;j2!Ln|D?AVCy9q58eHC9m)+B<1n>IY|z70HJo}LHfrhlV)>{q71-s{gF zSH=D*#)H1I!DJ%VDw=7tE3ztw{X_WP@AMDAEiyH-v(fxSN~20ZTh)wvxKLSw5jh9^ zD9$GyLj9_LqaMdM`i+cICik2)|5Ubdtgw~syO;AP&5O8!bpnipkOb8t-$($R%>%qD zmj};gvLVuDqe56#T5)%FgG#PzaBiYuOc%D`tp$e7Oz}Mt5m>j{D2_5n*C74-VgRin zHfjT?B_8PiFN4#_F8v>*2+;z86ZYqM{=aqczq8eF?pXbMEB;O${J-M_Oa70H6C?&e zF`$~J1f5yzaLDI(moZK$_eC}KU4mq2v15sVJ01*xHTO30>cBoet{7}m)uymUpLMol z3c36%N!V*+dK_r|+ z#&mY@czRryty;1cu#&j<=kIRI`rp1q4Ix3z_EiZxh=&!|YXouR`P z%;5!F4YNw5jI!>hd-N*8R9d%^pQV58{Q6j^)GO5Up$KQFf3QWCW-Ktj>ve`Z&YO@N)@r=a$?EE zCCF=eC>H7uHF@;~I#;HCys5a6ao+Va zimpN6t;_sex%U`JE+WF)DUm%nQgkgbd*@2e0{os7Y1#40cFFo25qSJvj!Cz&mfX0@ zygHyyczJpjSTsgqQi_0Z4tf6<$FH^)CHeeANnX>MFn%XAh;S*UAaA{ zRJdSQ^;YD@D*-WSQdQ>(<4%r~tz>^hRtw{YNLdJ``-n4&6p3Gl5PT+FF*jZT#Y|Wl zd_^P2hf(Co7>txg9laWR!p*~7-<+PYZV_bM1Bg%@AYYTIJAmfxx%Ua{&nq5T6Wh8uf16J6qkFu;fBGDEeaH=we0C zV8`MJUB;CPPf(3MsXYC?KX9m>aB-kgbS*%>-<~QkW6r>ZyR$^MVm6il-TnfQ2n6One$QAlD`1o5HY^`kb zC-a*fS{r0%;V;iIXUsUDn^d-0ad3YAevV@mQtBJO@EiqU?`s*#l}#J4*=KOIC6ks@ zM~n%k;ajOfH#NOHK3?Y>$gIf8@%?;+r;*wJxrhg0KPlZ~E^nE6Og1aa`T zyYMX6B)hD|vGUVH?K_8uHEGT3g$e1)A1ubNvlsByX7gqQ9u0{65FM}l9SV@4)h!X> z%$_^nqRi4=)Y#r(3ZJBTx@9r+ztUZuI=VjWI(O!rd7xu?rUBB3^Y>sg+1|l)%cFd&B(x6s>`(Int-K;?yeFpq1^Lcgp4*zpj-!(T z;_VAFNBE>XDUyqP=E`nTnQiP!iF_<}-)z@5h_?(9Eo&Oz*_35Iy@he~$=*7ISB`sN z`agAD%Ck!^aIqa!S&^GY1t%f<7$s_y&HUp>!{QUh2O^F2qK5iu@}vkM(P=ro>mh1M zg|_?7YXOm>RZhBR*RC7zmDhrF`B45WQ<$j;T}Qc6XpTmg@W5RO{ZYv+bV(|qdwN1y z-a0}4dqP)j~$7Eq#Q&=N4AmVftN*QH=;)i3LLxob$Wtr4OTXM8zOw}Yv?Tr z2k2F7S2w88xkv6qohwy2yVn+vML4RUq-J9r`_?FWmyt?=7cgh$+oN4 z6cewS3U}lDCS5wGWrRi&u-#s^VTQq$lj?<|t8n+xBC%D@?9{_H|*?uE924ccxj3!Qx2>Qm6Ckq=j% z(ZRv_u`jt8C+udofB183q}9h@Rz35gS|B50E&cQ;^Du2YLxyEP$rO@EEGc5FetS~^ zaw~)mIgvg3;S^D#7~g2?PwsX0#&Dm@mAh_*5(d(dnV2N^ut?qKOTMt}cvOX&ZB=dl zW>9D!kL0L;aV;y4WK!~zUTYWDI^1t-tg~mvA&VUIWh;a4eFS7aaNhR_BV&Yi*q1#h~~Sj=`qDL)9bhC zQxO|jg>M;TYvDHkgUz3rOD@EFM2~-`M>D(ggH=>g-mw`UW=h|Vo2=IN)tFi=Cs-bq z=|4#J!5-x9_H4zC{y4?MexjSt)-bW6VD8LwO(~o2y2NN!x{JV-xh{H$>V}7!Db6V$ zg9I@dt+q_4*=3ft>jvy>&D-zJEJ#|vrdRQ~Lysx0&t*_8Jr!|Rwv<&mUihMlnL6Tx zc?B0mh9~h;D$?b~d>5ehceR?~S@vEf&k?Ptr`4R?=$;f%eA{)_P@7PTeNSGw5C&X9 zw)L(p%rbb%57#Ux4Go9P{w4Gu|EBF(;S-rxs*>P9z{X@DrjTQ68RYR%x{E#klwG4)S?L?c_Lm%BC`8ow*z)hy72E z%YI+N^mz0Xs+-N7s&2q$5nArgro#oinY;1DM%cze^ac+7YrhZCFP*Pj8Wi20vgoRC zVqJbH)y5Se0NI~y zB!{_h+j9xK0=8K>U&4`swd(_!)Fw&wBRkYSyuusw+{gO6UJh5l$+E_u{K-L|k{?_qH-xHySQdX2nlWRSKUDH1)s8+vdm{ zb4;^wkt{Nae!OEImsGDOD_NHunq4$7DcHw-YLaQJibosciMmoS*LqK*YnDVYSnKS} zFuRBR0fS@x{WBk$L!TV6k)7>I>@BMlgz#08&OYtx9zQqA+ex@_xPPmRl4M#Jqj8V5 z$`hzxKT=)F_xJ^_YrNbYmCKX6JHr`L^YM*4Ph>P%PkJqBzvk9u>WS6(Fdm)ESkWrm z#TOo^Q#j9?Q7+R_726SIqw>n`PH8A>gc1h*ZL~x=4{V`~U<8~DRL{I!x{|_RA}Xnp zNar3wdIkvnF>d5Dh+fJ*{h>$g;vo*Y-c#hLOkT)FZV)({HyW4e5Ac|vU-4R*_d5KNNR7kyAqFX2#e zS}m@pY>*syCB`!w8qoL&`YvhK*N(+mrq_)yK#&u~yL}^ny27^PvZkC->Y*5j=A}-r zM0xu1z9zTH<*hBB8y*v^x^=M;sH<4p_By{|Aj7B4ga#Jo2~d#yKFN~CVRcswT=XAI zT9*!q%e^-x8|hVZJw@SLeGxmiiCw7Re@m3zkFL?<*{)bh8#d@6OsN_pwdw1n>QcCO zG4)QZhQTJExAtk-a*k4elC=OH{YS;zO0W{`a|p8 zu?qW1Ry13p+g1)V;AYfu?YO;A*lV18=x_m@#~WvZyLQrZ_}KioCRtXuowUQH{XO?W zbNzB3_F#fHSe&V?YM-PYxl>iiTI@I>4e+%xNj0dKu{-|_!@icW-XC@>V1_aLaA1`K z#RR6MgtYrpuO^#ZFB~s=O0oI$IDJE%WgF=w%4M~PQHMlb6Rkx=6k55k3u_quOw>~u zQZp{kXkYKGcDAQ;8%&&Z$?Z3Hs!;aPp3*SPRB=`Ek;v0Pr=GU+LXveiAo!Im8B!rv zQINXW2Ygk;Y`?@q9gfUjHCWBF<8Hm&&YRZ2sKV6@au4o;ILLh-)}js~s}w}m*vTv0 z4!DDmI&V}>Vig{JRrL1_IR`-z)5G?ZX`0RN+G%dw_w_}evgXfrz*yPnP#XvMXAy_& zBY|E^u9p&vVy7IBoIdw8!v-F2JJ#NpE%5R59})vG*ZBB@?bgW|Gyi)7QVuqZ84Uwt zjk#c+Lrf$Rj<0IT7$#>~>DV!f8?(_sg@f~Q?YH;i;E&m#9!KAOBCCFlhn#3TtV>!bOM zuNwlDpnO<~%{5N?av10PqdgEHpU1v&FxIjGSH|U|C^-DQvQ)a?xG=RGJx^F;w^qbb z8ZiZKwX5850Y`8D>FUsP_3i0hX2)*oCPS> z_~>6aYZM51Yw&uI5o8qA6K79Y)_@f{Q`(ekrQr^OJm{uKqD0&j}PsjQDIVfIwysTQxHJDjQFd?^*} zs}9+**+Yk`seTx;$_o-r^01u{xIb`M6M2+0-{?3!4l=omV#W+I1F(N5l_1ZY{&^}S zj&`3mL>;}~w z^v|(K%rM(ejbsb0j{h~cwQ_a>B6mJnb3NaU%=ORJ&go9utbSt3<8!_H z%&trPtqb=`XU;U)032Hpc5GDlZ?Agw<ER2`=Y0W{v_R`GUAsQBaP_Y#GiM}T0A`Z*-^{XdnsP;5 ztMre)ZT%M@&s`IHF{0+%)GZszL$lPeR+i>aHt#0wBuGnu0>rHh7 z#!Wmw>#r}re#X8}&pO>N%lqZF_>vOOxfkW*ANAedu{G-q%e{S-CKuep=I(F)AN2Y@ zup9DXq62Vb=k+r)fAcL>ucWuH`f}E#Z{_6YYvgQ=_O5j=Jgc>I@AL2L^+jLA14oSZ z)odu3_WkB5*>L%o6MI$9{kC9Wh_GSV@aai?ws^$$+V72t+iRYmy!_C`uO|lB>fgWH zdMz*zVq=~!dn#|A{`LBCr@uSYXE|O5c6k49(O%2H?H91=^EP4HHofa-xA(D2#WkgG z0$L6{B5m#W^&h^RQ}ciO)Gh4N!9?*p6`x8h9*aHDpTBX}ri-%Aud^@z|7i8!u<7PI z7?T!W-&_Se#0)s}wR^U0?A<3T7hhVj@l1w-?pxc}rzYO*&D~dbL-rMLh_9|fYu+5k zemTx9ThFanx#q+6o7|SiK*euNTAM@k&cKAbJkwT8>#uzsu|iwQ7BbrC%Omy31{#6o zifU8GTU}~v?^R!Wwf(-&YhXE>pKp+*X)Lup?a^N^&NJt(Oylp1sQq_# zi`|`vnbC7!uV1|IqCVT&eZ@)_9HM@mSoO31S<%J`zwAq`u0$(`0V539*^E7XzV#BY zjUj%%FNcP*+&RwLl&-g@!duSYv4>YaKbrZufZ2B^s5{)QF-27%Q%63@b| zfx~GMbAbauw-_3yCtVAdynFj;-ue4>axXeBKRg25(RTiAN4dM2{N-R4Cg7052Ywbt z9R`P-Q$1gn-#+z38kqN-v~7zlA|}NOOz&=1)_Z@+{?(V#-(K?bq5@^8GleVl2pTp`o{&lmsO3BH=jxcYUpZSKm# zlYdiVn%)4btn*)5E|<*)?$~2Em#$I>3=$x4STym7ESSa6=>|HA8U#jJqhTtON6Z+9YdXgv5USLYZ7KAv73 z9AW9dB5js-cK9-7_~)Y+t_o=%KB}G6E;AHZ<;30Zz~{|??^Ogp_P74?NAPj2`UrSzA)z-~-<=kGHeKlY z9(=r>{=rG`pOabt`N#kNT(D^kqVP?)a#W&$muZT*>ZOKOV~Mqkx9tbI3zXQh)u9sw zN(Xgi=_V#8kR5P?HufamgPGo~St+6Sa0Id%AeUXU8p9ixH|{7&Ifo#{5TbXx5aWM> zkkPu(C28V;jvnnb%WG(}vJIKmNqjK%SibV~NyKnHWkpJgL(Hw-?_qf#hJ=N-bZK&y zE}^Q{f;_$$*O#OaV?Dow@0CbNmhpMXV%le^AR1rkeqVK~il)qH$keXK(ZfUS&(DT* z44NpUnx#}Z|5N4ufgcM^iRQMc6E9t2WavK&z5BSK?$4;rlQ%lUdF!WU=nIPmQ13Pn z{=+|hH|^~3!3J920Jv;XMbbaGn*nwy+t)O4S_ zqZAh#r;$%04sNP$54<(2Z^iesgZ(L^be+#ngTJI7ntC;K7(C4@DcG;lOV8}RYMkap zF-c9SSsEfTf;c%I3vTU&UEi$6y(&k@4KH`l$8C z%TbAxkf9-iSVT&qc#~Y2Vrr*C#e7WhpbyKQ^Ap+a+qC$~=ulf_5B;0g>#ZKTA7Zy1MPE8kUYFIowPJ^?+@DC& z5Mim&EWjqDY-XNz)_2tpTHR3+EMz>aDfGejZuipy!qp@WlDpjk=TD>02_ z6i)p1!2)vn^lW`?ichr?Qy;Ds<`F*|t$`3VZ}9&uh3GMNHDWk_fjFqI_m`u_Sg*(+ z1@Ate7Lb|4dCf#@f3n)O2R8+0J^OXW_~m@)8(!pDkx`Gf z78#cung2qqgbWRKgif@|kS)|mANs{yAMQc16|iGt08Dr1VmKfE(ax>ky ztxT6%m5=sc&a8pv{0jq<#V`m@?1OdhtaLpn{X(e6NWZb+>5LQ2qIp~NTunRLPeMWu zjV}Ko2^;uZ!cIpnEBCuE>|mva<;ZmG0?}X@Dyo@E$G=V~tMXNlbrd^^m}jWxli}3i zV!k@3P6TQ5RHEJH4kwYD&Dn6a{71H-YS`9wQuJoCib`ltMd@i~i`8 zPVNj)^t4{f8qkjIo>OPb1Yvh%;y0ySP?`(`%GKtpKKxk3(N3Rw8IZ+Bgh3L65aD}d zh{7%IhU=FM)7V{BLHv*2@mT|Mixb0_&f@sRD`NSf4K`+9iopc+~GCFaF# z<5f#81VNmh80yJuynnwerdwCmV_Y;eHgagaDI$MnV(`3#xV>>)0R>K% z)bo^ZOs9CZgJ1VBrnJP6CUGl&eqzuA8kDz#&9-MOxzTQJ7Astei)fMII%3&A*Sg{D}NG*Gfg(Q%~R}XzRUHd36WeDr-bB%|i5v~N7 z+gtDved`bIHD##aF5$=6-Oo>9>9Bu4 zc2Uti5wpg3A1RLB)&rR=xTycOUg#co2-%nSJmjw8^7gC9j)*<3rGnEnKfNUSl_8rr zUhjg>h@J%DxkKpk_RgWIzT`7A2c#boaB=tEF?s_sUL5Sx4GdVGvUzbZW^2c{` zF{L9*7NgE?d2?Q2wf>{3$h$dsor$1mX180 z?08Gc$c7v}QGP`0c9AbJ-KFz&rxmSSc}N4N1L=eB{Ec?@(7#;Q^+`$?f*9BvvHey_79!5meStuy&JD0=Usg-`sQ-0*)Hm^XiXF!5>qYP<#V^gKvGHZr5LL&kl# z%e1$>|Ggey8%+pG%JCvtDdm5$IFTJGaqeSjrahKP73bK}<)PdqCALg; z{pKI(w7#?jg$e*Wju1y<|J0iFR~xXJ8#-!hb(b;v_K381gI?#0ZF9W#t0K2H>7eG( zrDr&KA`&**%rluP_xej&{G{&XM>4Ydr>czo z=y%g2VrcmgZA(idpSK{s!DE7J(p%NViP9vFJ@~L|nJ9p#d>CZ)oENTf$93Y{(Hv3z zs|SauH6)$401y!|ef4REd00<{`VhFh4F_V(ePaLF`}@&E-`75Ngs4%*@U1(XuDXeX z*gxXWhn}^5u-b$)Z=|0(5k0S$wI24hl$0evsXpu`22Q4|3?BpVsjbUcYx3y->%|3! z|DDhQfW^*aotBY?iqtr=VcqYutM|wLzUH}k_0jCEf;w?%-#>N{QCE%?)A7~5JZy~e}ANed^7NjIKVhxHwnyI#nz-Y6?1xKoH=WUZ$-_4cc(e0p>uFwA> z0Q6}9C(O9Ds-!vw`BU1pH5tl|EO2j)SVLZTYmeSbr-;#myh)!`Fh6=R+AJkKN4B!m zf(+~qo4bBW)HiVZcE@i2;B>aJf)Ynw80If^Q!9RaU;Y~<;ns$FHC>r;NL-WAJ7goi zv=~(dGIMUO62ZebGU^9jK2|ey-TAxgDXigI9k;Q5#-g)salEeP%Z`9Qs!PN%YD^Px zgAT(?);Y}lWWTbG)`dos#X1LuI6I%;O()Ou7fO7dUI7&gXWcR?l=F~u)L{VCa9KaN z(3>kQ8*~AWbY$LyLUX5cH29gCekxd zxMvyZRk- zA3Tb&zVUzK zf&q_4fDQGul(#|rA~puqxzD&vwFSMGDcn=x0s5eJn|vx1a8eAwDJJ&l$|)(SvJLH1 z7TRA<&3<5i&X=o76{GooLmMutI#RIQHw+S7bfrvnTUSfp$IT-p!bfIV7}m^qlv}MU zQd@BjALponnR#iaZ>XK{0Hi)^URhj?^Z5fZk1!wQ`{@Y_AN?Bb22T5Z&$FmPUJJy` z`Eg|NY~GK|fzI8mF?Gk)&jG>}`?O|n_ttV=v+k zWad`8wigel_dK1|VT;ci%;&2)-=Q@3_^_6P0|mLV?dQ9wrRy31LuDiANe%#~_n*yt zIXmz1AjB4#@j*~R%UB2NO%5usb812~NCFt@1C<>PbI3%@*Q&+RSppY6GyF;P_NY)cBj~T}m=gJ}Q zi2ZFi`53Rz7PLWR)nKMrBcm?fMb|)ISzjTjW@HJ!73ekeR^C=dRfP|ZO8u@=I!Vmf z;Mx{TJMYMoY6<~6Dmu-*Kz6uEd6v6vm z^%#^q6hO*c^>X~F zOyjukzlf@2Z<^efl|<6vuMWp}F-nz@jCZHJYCK#h)*$($SdPpG(Tc&^b}ZHB*|nc? z@DuM72Jb=-=2wzwgP`{A5nIe`=W}GjV$KZPdEdQKl!Q$+?(k7Gj(;;oclNZzu-f<(Ugz_owez z;9#!@iK3dTdpE(){#2D0aC(1AA}4M6p{h}QW$NB#8_wVX=lwjl8$P;w?_u6?0XKLJ zwR_1U_mQ5Lrj{{e^w~epVMxX3` z3!*M*2z$n7c=uPUL=MB?joi2I8m_CvACxt0rB;IP8X2Ja#3Hqgnff4BUzG_G(H~kw zVF3-c+TPtG96Cha|4nvp!)M%Il(4&Gr1tn5Lcku=Q$his?fyNGAq#dRBwpEf+AY;uSob4;V?pG*w0R*awTU&D~-t zIF?byCM-m7JF_JbOLKJ!XYqSOPZ}Zt@z>?_M^RDaR{gA-GlD#(1lX(Enq?4AzIRSeVxTeNXU~5m@kw5&ZOwyEbR$QB5i4`qbad*^* z;{3O;B7#a8+^gO@z92!%9jR^WvU7YX5qKV&-ILoU(TP;OETVl z)oWT|qC$V76}qyD+4R5_XtRy#b*0oV85SOBz%kZ0WBN0m4xG(+*?K=DrT2$Lt})=q zs{54kLk}_MEQvY{PK-TFTIU#0BCc9LDsjGfUU%$n^q z2S+#z>)MAAQss537z_YybG-k$c>;O(8>otog07Z35!Ei~P0N3`c6j;H@%=?>luARt z%(r}5k>Z^$AO+@QTbNzj5aQLKYjEx-zLJiNG}j&5k`j$C`3r3NWsB>CqxJ)U1TLNZ zwI^zy5&HX6@^>3s7_9ch#hSQJ4E1DZsuz%he!e?3eyFb^`rg5ehMROQo_wSR8I z=wnK9TY9&=xOJ@FpCTq`JnsuzQdWF~xdyrO-qt@GfX9vYw^hcX?Br@mTHnwYpvzBd z%@O^I&frwD2l(CJbc2V!HOY;!ZJfCcDpFFYEASWaj(3#-vp4uY(M+sDdw10J&xo-? zd0P)>0g0^rMO=cemg{>SE?vV|IaD1DgK9y^58z?#D*oq^ou`dh$^ZztU#{af#3{DY zZYp~$lHI4H9wdEVohW_^F_@s9>~x#*_~|k>CUwi`)=IW8pqQb`IxR?>icS6IbzH>kY85_a=YrXJ2X{ZH78E0e{)v?+wX(N*Jct~6vG5gG{#$CPc^ZjBF z6#%iy{3-2!L2hn#7%Y#T>iZnq|JgHF5SLD6v#Puar(dX#pPI&ge%#x5@|jv9rEX|W zKR(7EsvH*)*N`#v;X+|H$;%X);uxsHe3`ydEZpb0uAH`7b5T$>#~s{7b{W|9;6R)R z(weK0b@r*iEj7kmqGanmFSKzdMz`oYSMcnuU)DRT4WQPuJ2`QnILe| zz3vatwk2;T970imCWP3|GUM~Ry^RP)Et9JXUk;De!~Q~zvIW9@|FIM*6H73UP^ERVD|{U`_-jNq>>O4wg4Ye{+JJkv;P14KS+JkL+WE{y_l$mBdv^lqj(0>!FzD5^drYqLKh z3}2quo_vSH4uRe63=9EP-8ydd;M1;`JA7c+BRkpIfl9<|4Yc7nCw#-1O;ZH6Ca74} zaksh<51iv|$CC3rrxxj?`F`xk_fzM26r$^8 z!#L&@z}QnC&!XKLiWNBYOwDm)>$0|NuJu9(5~2~`=RCMuk3wA$!4b#cLB8ShULkGO zE;lLSs?Y~L20zvP&o;>rdY&F;nwQzy!Sj2(ZPeU7Y$C7K0>&I8R~1T3Q9|0@(Ve%7 z8e-MJq__#LZ7uz~mO~-NZmOyKGvEos3kPZOo6eO**`$>tLqi?mzZ{|fVkg@3>sNU0 z8vw{PD`B~nAhxyDR6-Y0<;78T&%3Sz1&zw&&b1dhQG`yrztdw12#l@yxGhXliM49j{Z! zxG>+-$$|cP*iyGfq&y%^0qwTJ>H#;Lt*BPz(Wcb*h6Cey@|mjsba}m$mHR+t-Jf5f zh{^$nLDyftrT z0m?|h#X8^8J`o&XZ`4|5_){m$ul*x4OH?BQ5T(O-L(N^c{KQ9Q0q`O#{v5 zgt*piSmeiU2SzhDi!()v*AxB8OmF%IKf*`ZIBeo$3%()hw=0#FeisT!q!s&YNoRu* zOrG!gxF`<|eB{tg+}xE8y$M5ezzDJm_J>ABe(m1F$tUOCzqfG;6}g(-G-KG*`#$wg~f?=+u|YFgK7C7e=urVhXZwsK{Ney$5So;Mttej zq18k#1g!TnAjdG%dAT6?7WJF(SH#`n;4r9lCkW4mpgZZ)!sp@ltX0&COvM{-wV_bmX~ zq^UphGlG&@zx?8PovYSmR#;8y{!%C5g@zG*&8f0e)4$47E!BcvhIpTh-YOV~+t?2Z82SRcN&;HC-+Y4DT%bwZ_7S^(;J^7r=AfV;yh^7LK(pi8&XChdyiSs+{VZ&2J~@u~ zT#3FAOV!Mj>8so)nb0II%gt!DUc9`p2yJ`+jeJaw!*dHRp}tJ5O>I35&=(hp1L_*q z+OvQroMg|L2$7}xDG%1nw1ybDLKY&y`B*#5eAqwHDcf4yAE36qe)VVlajW1QO8s-d zG){`<_r@;Y)mkYz<2ehf8Z?JBF&fFARs!*-S><-EJiBQZLS5>X(Cvqy^-a&uFIKxW5E`_sF= zemLiIB~R01&l>yn6W_rIi|Ie1cT&Ye!xgiJDQo@b>m3!vw6bIk?#d_~3d_;eJ(a&e zQjI=%Q&Qw%>y=`Fv`6ES54TCaD$JF+jb=e8Vc(4TOs`@9>n`T@ph?M6t?Ey`$9RD%k9f#VMB+0NKCSw zCI`|w&h4Nphe8quM@u-NK@lXwV?wVX!{p<(1i=jl^ra5gC$q)9{zbspt-1-Pu}16; z^hSao7J)=pC&$S!vER;poAm5N9gr}IVoAIi$D=2ggEfrO8iyz}xsCY?JiDvgCNi>N z%(r`}=H2XBY+S9(Ncip31Id9BaYQ_t)e-_*&KWd}E^L;qWbBGcMXPLDs6t%v0UO2t z`$SH^U$szkg?PJ>DRG!G#roG)8DAPR+pU`2hxi4s?%4rc4D{r{l+3>dW23V&J#%Pb zNJwk!`Wk&d@m!{g5(6cAC>~wtR_dLzuM}hV<`WKn+4)MZs9&ahE~8 zzQ7m(-r3dgGE9zCU)!HJoq-@HwL0IJRZOkaKlzdzQ8;L=p~>A4l+U3HXJXD-)VSTI zPL~HGuRftpG)-9xQeN==!_y}XV9vVh2eM6#z)xYS&9*h_&}$81jV!0d^&kfdL~ks|hC`bmz6i6E0! zpM-YRh^UE9W@I|=iJf8n^I7m7j|%GW_`105@2l!^Mrq>~ap;by92xbpPnE)YVpeMI zcPN=PYXcdQDxG6c>NIQFo*#l-oi*w7V)Q^HmsJPyj)O9nd zxKAw(>ea}vsSa)fr9-#?A@ch290VStFc<$1eiz<0FWbe=Sj>*yqs|QK&P}_uzrbLx z1HK#tlsaa1zMpPbs6#~6^~|=mtbhF46a>DLvFW%=!MjfO+aC(k5h6mVi-7n=wWGVh z(&jZqu{;*F!++API0p~^DWh~kM#kv#+NHE9tt|!S`rJmT;JE4BI#l^ASl@L8iq#6+ z)SSGruKBtx)-Q$Vrp~m_SEJw5jGQ_X@w;~x%#WDk-0&KdjjV&3b!DJwARo4as-(ma zo&KABI)&b>#ni}z;bczvL46L2PkFJ9I&kJ5v8H!Grtl&k9UZx9fkz_=N&?4N$9h6u zxKb-C0fmb8JJ{MqotvHc^)JNQA6nZs2@@+I7jFfx*}`&P<$9vu{O{KNRO?S&g-T>i z=VmxuTHELKB{g_XTS2axL!RYAY3d&)+zZ2Y3gyMsR0I_;Fxlvm>uANmz`+0{Psc+V z(3riTDLyqyjA46=@&2S``(VR6D;Yhs1Da;qC)XS(ue4@c@Ak?QAg}xu&#!-zvfo8D zi#^z$Rd&MFn;b;?o<3CMrl7|@09aFf{nBsV)6wnCZ7YI{#QF!PhT_4m4bCo8U)wvZ zr{7-O`j<}j>EW?glxW{fk<+IUTlMnE?k?2S_q!g2jG7>V3UE6$hcawq1!@PdpVd|H z4%o*o=*al5R0>xB=%y^JKiQ0a!7Lz$C$bG@hL2K$+R6h5=c-p+Wgx8Nbda z=cbN$rgq*)JJ15CYQqlVd{wYNTJ`Zuu?<{}{Ggz>N;f zB=Bgt)$VbAqc5I10v(@uwuBuFT>(KL35Rf>E2X+N6!+V@fy3c8k*0uowKtHT%qz`~ zpVDoBHL*dZ5?|Cp#iOJJrK;T=X<(;N}U|og5y|^9DI~80@-h zd*g6n*l;Aq`Sv#@1WOMD3gC0&KF%bRn)t+o_VZ?+nsmF}NsHLE$KVZyJ~aL)T%- zUgAtqG#k|p;Y@I;+||XRY_)HIHQ8FeL+|p-Xdw1ur7IX+bxM$A`-a<6Yp%f2Vg&4_ zwp$hnnhjp}fT7{p0mRjtbFR6?*pKj7{$RP@EOsfQU@QOQyL!$zl$ve3?FVk7L04?} zmdHJz1p;xC`6yQdn?a8Z*rMrWutpY7R;?^sb!QQxTu(&c+#nIH|DANFrDs5fH<$BY zfe>Htu5bX5(Wz2l)-9}Rk6+b%Sta3#WQ6hFVY3ODFb{%3-7Mv2p|i{D~WC?IKnndJ?* zVrKoL%wRvDgAj&yKjV^~rQBCk@jKFzm2>fCd)}G`$+#!k= zka0;z2~@=A$aKrTHzwF-%yru<`nzS?EckY!*!08a=zvYDhKO(HHlbxS#l&R5n6_r{ zx8R*QGTwgHf0R8MY{T7u@uL)z404`=3VmKja0`@>sBw{6S;EQKo)-svLU*(;@#~S# z@T%;YlgXS9P-;Wm!t7wKxgMJ><&fU$`{FglHE8pLG4QIsmDp?d*=$6cRQkuCjaZ)B z2rS(e9GE};)QUH1sZ2LqJ~_Z=MWBx6^cb`XC!u(qxKP&NI}sXkb1U^BFzNjUZq}?W z;m{OcwcS%X;5>lz8uXbtT@_ql$d!W4KqIh0RW}&G*DE8^ByNGj_NY{cg&bVf$gatI zn)`F&IY-eKF$KZK?p{f3?=$HE0ryL}-;#Y>;8i_*j_-LoqL!&p4*U~|qf2R%5YZ;R zX@e+ADl_cnWw|*o&x08<3B;SDsMUdD#MBR)wUY$=c3?zcviyL(%we7aAwE`vyZ~<; z#J{k6!=wCCxejA?S9nIUzItgKq#}W-u|(!^B2>2OUeqb#^aE?+engL%^%8o<`^6TIuB^{KVFBe=#t}PG!p=Qwe1%zMk zkdC%@)wONUjC9WOW)ySJ63N(a^3p~%=uZc3uwc5=_oVes9I7MmOlxF(h&|;lb7_K% zDqzDfZc}MwT&d3-DYm1{xZ3~zZ)R9_HuF7D-vK2O=ENM|U1=QYx{;bp5004k`~1w_ zF8`K(9^IAL|5y~W0ZPq{Nb;+S^(gKC!ByCspBgR*3UZIu&@G)7(^SVmf667eRjfau z=7c>i>h<8R=U-v~WizU#y!f<&b-CG&$QU#z-rkg$g2bH?=ub~#qYix&dBxe-(ECXj zeh5dlO9wkRYxef-X&euXrkAeE7zD2=Gafg2)krGVhrC?wy#KntdZOjYr%0gs!18`V z+z`CT068#-x>w?rkzDuEfA_Jxt*p<$!UI9x#bdOn%c_cLMAr}fP_l04#5pxrCkkSD zczdt^2N*_b=($7h(Z16*cGmmB_~y1*~p>g$wH~}Y%YOA0bYwlVZHoHk z3ta0SbH=c1(~t|sNaxYUV@ClG!Pp3Ct~eORp`Az6B>BA(KZ! zm1Y7{%veZIzr9L9-1dI+ z?_^9PMZ=uD_IcVepvfcb{D zVd1jRhj)Qfs}&ISWl0)|n}d%8SSAlhZD5Bgfao~LGq04Et_Tfmc}2fg)W7i~EkEX6 zYUta1C8)l`%7WN*Wm_P&c?j$R6_pu*dm%t@jx}2Ymw+n>;3yrrihAf}-K%%JYW>B2 z$Yh_M)$Fk5d1jpQ+)iZy9*vph=W5f!{UaSXts<&~Clx^w3jC%luotSMV?EM?`YLV( z98EW^ufy~&XNUt+dFby=2%}DHI;nRyDOTlMFdVRMD%(2Wq7H`T@YE#){Q#!`K85Fe z+7MU;r<9SQt0_tz^F%<=S8iQhTzqry&5hGKsU?P{s=zr_ao#kqw!`Y+2cuZv$zP0u zucGgs*xh|ny(Ja+!ue-o3-{XQVZg&MyXshm7c4T^%>jao$arU0bo1xY@oJ(2R&X9R ztp2n&k(-|y3?sgjF}}wG0@r*C(q9WIDE}>y39kB&Y^#Yt)O*`Bq4QDy^2>de8^J|2 zXss94x_%eb0st^BpJZMduh|XV?V9W<6BLC@ZqCjRGj2Y-1hsW*0Gk$HC&P5`7nH2XdwHPwmn*s{VF1Kqz#;xm%*!z~3&+)?~KEG-Rp+?i?ROyorO|jpFtSK=ZVTUEFZx z1zm161ZbdmfT<_bg(^#pt~@GiS95~cRMhle2TU9nF18Y*uLortxozv-Ua`g=Tft>P zHy2Q}(2jHg`7R++#{!K`1pRE?t52R3R`*rx_sW>)YFZw`fI}MVCCT*^tnQRC&6g1Q z5!no6`g~*-r;nyVHkLJ5+$NEw%e<%VfaVwWwro~tXVbu8CkwVaWFZ!ygg0lubFjAe zBkF7vW2|riyvfXL@D~?ISqLW0WcG?l!_~u;lo)*%0Rsg19{oipxM#ccnH#Yy%>~i0 zEFXlRAu2mKU}R7wU*N%d3W*OT9)DXz>Apph48gbpC25S$HS#BzN{VrhoaF7R^EIoij*x`P(Z3+ixP1){>A=m~`_gAD=?gGsbRbDv1QmUQjytrA z$`u{HZfKFd*&{o}Kq{GLowD2RS%?fG#0!W9x09H?)Z`uA>Raaoio6AAF!M&}mg|rR zO0ApM(?@9mpv4O^YrJ!;%pXIVD^W=`SGxpcV)Q(0=7|^TMc;Gj+Xk(6#kHG+S8kvy zr{4n;}r2dB5&Ib;xU)eLhi2U|nd)5*4%8 zz4|iH&>ciI&C^Klm{)(>&Rmw50O+=!>$-1cnyM9Js_NRy8bq+BX|xk*b-P!KizyQBBwC(-|}4eLLh zz5nTE22t^!_V54GpZK4H@t=e7pM&wASrGqs%)iizpJtx|PDXXmYY`TsC^YWcEhxj4oJ7R(eQ7&vS(<=V2{_KtO2a++?#8%iY5!3T~aV zb-zUw5PpCP`DDhOLw@xAhATmnuI^aYl*#?WFCtLMyLy-HCwP%3uFP)wTu2HD@<`Ef zo$GHqUND7g&z{vCB5DW;X_)^Rk&)Y1`C?ciTgSGkPFc^MK zEe%wUf>{-f>0XQYhIIU_9(R-$sB!9d!h@EkLTvx0svq#0(SBp!Oy82Js&6doPd{W@ zBkfCp5MOc@+OrTJUp@L7t+{|Xlq(BWeKMEg{i%sAtmYf<2ztgiT_X+&=R9<8(utLA zImrVX)60j2+VX`qRiLd6oLZd++1$kacc!R7Fd+f_8w!@5lLudb;$jpXMNhVJ?iwx% zC9&o+cLBji6v+1ibwi+H0ApQ9#{y+Qc`!QIBYl)!$^O${vuHQb6h)b>9Eu)&X6D|~ zJiK6D0ld^~Lu_kfqXH*gS;~0~@&G{Kxc2IFU~etanx6!0z&E3*wBoncn;}s2#WwsG z5Jh5T-jFs2eZ4=O!MM(gK04Uvd*f~`uZjwFO_o2>`cB{jFJm|Pyb?6e{x~t|4@#R% zwxh1Ya>xO{fCAJxLAT*cQ^4l74L<;yIqL|&TSU@X&sKgJRI&N+M#iWN9w4r` zDU{N$d?)lK6QQ1yhk(Rq(ob3(mNaEGj_m&h@3^>I6ceX3@mW}M0PqipPYJN^<{i=n zWukE~)O+-3hRxpBJO=@leJWAT=&}3E^}NoC;WWn#Fvj8~e07KQA}85sQqS|BagPge zk#10+Y=}c;1{cgnq89~?Xj<7)7O7zTi6T;Xbf3=-3RWxM+s8R9MzPUD)1dR{SmmHW zkSRKXXS$d00C)NasVVB#CQUWDOZsyaN>=ELkXnjo&XYFzup)YRjpfY=K-Xfl+~(W@}{GzqWX-# z2i9ZGW95*3-*#o%m6Wi{DLD4{F;qu5552^38VxF3g;$Km`Pl+u2nF;nuDi$iS)+MJ zV;~-NACHMBT=kUiGnnG%HDWN}OWBwRkvUoiAS!J^D{Jp9f4cQbi_a&?oWTGQq07cU z)m~V8@Gz_xy(O2Gtz!-^S)VE zgNd<{+Ov_fOBEz9Q-J{*%n)ha{PIhqXElZT#9m-HZYz1;b9jNMdU50{yN{j2;caF# z;}72R06PTc=YR&Zv*M}-G1Boa_S#>>XTfY0!Mqp#f=R32i<0xB?rv1m0MetkiznkOa*GB_wO z5lGz;J>r>H(SX75Of1gQgy{9}Q3e5E4?4mWxn`8?hTXRDbxz(U*y0ZhKRBKE{P%f* zX`O~X3e-I`Rk}kBun-5dRMy8eVDw#tc`zrdYEe8I+7L4{^9p!{N-;b<*DShz*6y5f zLaF~)b9v>>JDX5F<^+dG zHqdwv!+1=~{_#TPvXRW{GKrWDOwYjoTh>_>JoFY;#{}k?j%d5H(AMQIYJ|zK+yU*5 z(ANvW9p_w2La$yGhP(xs1;H%GS zIIV07&(W?-#Tv_$hN`{V<}wFX@iiD3EB-q8o$xQ=k)O{(BoVatC*nAH*F9nZ5>b=Q zBYaWQhj7Yd2zI8^I=}@*dr#B*M~yVoPoihfT1#D+V;gmR8{mZE&YMYY?&l3L5BN(f zO9FR+0y}q+^UyOcilNEUyfu@^`9{c+`{afC=$v;fosb3fLX`R zUkUer`0^YHm^7>Pp!X6&_V784xkQWlsw+OmF5vw1{by6+#KSU1Y(rhcR zDuHwd`1pW?T;?U!df#`iwiDi)?hR4MaBO{?BIxX9yg(Z&_`Co>NY9g90Xi9gO;H}q zUI6yp9E3DdxN?8YkO1cE48Ao3*J6>FJQ=&ZG-Oap@|Y(N7kDGlV`3hc>$XWI-2~XS*%&uQs}GI^5s`Uy6A2q??C`zZaByWGn0A*3&dg z`f06Dvtzh*T!vXzP1xu4PFl%zDQ==`$J!D;yq+9;AD-_2j!3N_+pf4@USO}5RR^jK z83NuN@VI4fD~k<9s5*eFuABa{NQVN)c>X+T7}#-#L7VgFnz*1Vyk<$_0Z}cNlL)M$ByC=?a?7%7EnOk_xj>_S34+cChcYzZfIe;pBQm( zh{fcuTS~SD`=xkRv${SND~QQW#KW6H!(WO~KxPB;!18t)EVw8tu!(CXu)6k&12UTr zVkQb4f{kVd$MYy}j~`l`u*@5Y&a;)3?cxt5IhaYEb+9lpkgk29^>y#9%9dzL+#8wu z=LdiijoAC)@S+wW&i~lt&vD+Uk;9bgK-w{9n;)v|)xb-S8$Lx4H zZl9Vz<-L@d+;ELtFn&tJEY40Jq7RFSf+~aCMYWd~lPv{wx{Z79o6PmVgbh{DhC&^f zja^PEh!1i$2Knuy;*(O7vxi+Knog{_>S|8bY&JwbPWu6@Zg<1qh6lz z<&}|X=^{3xdCES&ioY7zjO$?Pr>}z9UDblQQvzXMp+=FB&a)Rx18DB4*6_bhn7m>; z{YMR^wd%jLrkS}(#M45r+mF=t0;ZoWSIsa7LYT(_C_30+fQDn4Uwqqh7lTISY6(eIh{M?G? zw9_zR@$!J5r{=>NLuWsyz5#+j{M7sz&Wz`emlQ5lbyqw-p!2qa+Nb7v z>U?Z%+zHp!pNs($9*m7#PXsp_>By{l;xfq#8ctr$(3Ghjt+d{-(95u5bUf{-b}n)J z`UFBWSkK7|098z&{EqBgaDdGQV=S<(4 zJhM0qMa#^z%8XT%BG8dhEEHTK0zwE?iA5ue5)eZG2Z%rfWGf(>%2X>fbP$0FHMmt& zghZAQSpv3HL)cQ*5Ws{zEQUY=2?>zQdF?fG&A%|$%%^hU|VlA9IWSHpZ?@JCq#T&`l4WGH?V-Zr5Jw#BQ zxhcr0irmHbHAxsEqjmPLZ#b8?-~lIKIA=kEa4BCBy7Q9*Ce6v&xP3|V#mg; zrWlx}tSH?#-$%yNMWX_9^Xy+TmR<580|`~j*I-}rr{yFbcYH^=OFS_xD$oir$8;M} z{j&p8F3bKyNqYd|W-`&Vi9emna*E|rIsFuIa7|joOJPrNVZNVZC+<32MsMIH_f);Y zF8xiE2ZN7>tYM zQOaygEra;W+H?KEpQgFQMDgl(1v6JP5U#ziT6ZKQ%T11{=0;N{S&Sd3EW+6t=_j>~ zouSkz95EAWjE-*qU;I%{3yxhU75A2(X}L$RzB#fR3o&gxHWlOObU95p+tr){^v-Z! z6#y0}C-NBRHI}}YJpr<=mOLn0S=y^7%{ygD_xGQGVz1b=N4e9)VcJxf5aE{FX1GlN zzC4Fk+~d4VwV3faC$(oCpq})kQ{xvdwE3&$`b98xDh^+K$b4kBQd_gg?Jt@qu7UvK z2!3@I1S}U*OPzhi!6n6WIH!3UT-K8_9KF?x9~lR4&M|gP;k0gJOK2>tRTK>;Vjjvv z*uSYviOJ6h_wq9I(LOU=XSs;C#7;T{r*qAkriYhNO@8WCov2GIb5B!Eh>XaF^C(hG zVNdP;KIHJ$f{0i_fcSo9t~{oM)i0fMXLpcRhqX5F`GSdAQX=Q5_4+E%Lv`%3_o=O=6w5 zoo+1$Cf$kLw^BvK%4HNvgT#y76Ki_n$e}xHf;5ST_@4b6_XzRe8w*x^6X`>em`x_5 z@PqemU@rW!$XinFXv3lTi>8UC>*JBiO`+hU0^UhAX>~<55ISkJ@gZYp7)$ht?;VJ4 zYZip0H|MSGi2QDxqmd69%rD>$ONQK!;|ae%#M`W=mq=efqQYY5m`1>p>PZ7U|G~J@ z{Ry|r{5&TT3YS7Uwq|)J&bC?TbreQly6dGEasSCWGw<4Hs%@VbGjOso^fVP{cX{jS zi#NJJ4yn2}s@!B}Qbb*qd#hIke140D34H@zz+m2M%0w7SkTy2T7bkJhXZa(w4K?k( zbM`v>>wDpNWo#1}5>o#5Ah%LD*8Aj+a%Z`__3wAg!1kLA@ps6<+64&XO6_NF7b}#F zaqG2g6{hQCx|U7?blbep#!?1J+=*A7XYi7@?Z86}Nu#GYHh0-}7vIwYtnX)ljcH0a z?V&JW>NP!XMw6kp6wR)8m@VKR!^@bNlCMwQhIzTEVmfqz)T zx_Lf%vILtxavj^4Mx+*3w(y1z+0XXR~E97yvCFNvDBQ0alpi&;DYZ#H`*&3YUVZJ@qR)=2n6C5At#}D$bBnyT%JsfikuSf zlXA@qx2i6(HE4MCAq&KFjdrL2}9{M{=J&o)%i z)G{=vzZMG~q>9xC`8MH!49@00Oj+dfUYOsy^$og+)G?<%hr%^@lTvy`W{Q&`(^6D2Mn^K4oq zb%r0K6ZAFU8r^&4&ALG!HpHh<3!}m&nqXhimt7*fKH!5TEbX3T5JEk1_3;p=M zA%GzTqCZPALSzSPvV2LQ7>Tf)FpZ#{Klt+gCF!@ytkEkt?VjIl&>3<1^Q#Yn-YgkH zKD5S;vI{%{5I<3^cQ^<(RuG2cs)>m+yNy2u&;=V%^B@-pp{!kg!nnF~%NELNvIcSa zx?J7(>N`Qh3tG(`SA<8C3i{jaN@}laQe$s?Sd%6css(|kU-u~G`b-0^yX z!BFHD9i1tZ>o8)Md20Kw-~Wwy(EsOt|7GuaU8}1>doC9!^xk{^-CW&|(~kyS|0ll( Bad-d# literal 0 HcmV?d00001 diff --git a/mkdocs/site/assets/repo-data/admin-changemaker.lite.json b/mkdocs/site/assets/repo-data/admin-changemaker.lite.json index 753510bf..2e17825d 100644 --- a/mkdocs/site/assets/repo-data/admin-changemaker.lite.json +++ b/mkdocs/site/assets/repo-data/admin-changemaker.lite.json @@ -7,10 +7,10 @@ "stars_count": 0, "forks_count": 0, "open_issues_count": 0, - "updated_at": "2026-04-07T17:26:04-06:00", + "updated_at": "2026-04-16T20:55:22-06:00", "created_at": "2025-05-28T14:54:59-06:00", "clone_url": "https://gitea.bnkops.com/admin/changemaker.lite.git", "ssh_url": "git@gitea.bnkops.com:admin/changemaker.lite.git", "default_branch": "main", - "last_build_update": "2026-04-07T17:26:04-06:00" + "last_build_update": "2026-04-16T20:55:22-06:00" } \ No newline at end of file diff --git a/mkdocs/site/assets/repo-data/anthropics-claude-code.json b/mkdocs/site/assets/repo-data/anthropics-claude-code.json index 08cdcbf4..d3d46ae3 100644 --- a/mkdocs/site/assets/repo-data/anthropics-claude-code.json +++ b/mkdocs/site/assets/repo-data/anthropics-claude-code.json @@ -4,13 +4,13 @@ "description": "Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.", "html_url": "https://github.com/anthropics/claude-code", "language": "Shell", - "stars_count": 110600, - "forks_count": 18415, - "open_issues_count": 9302, - "updated_at": "2026-04-07T23:27:04Z", + "stars_count": 115550, + "forks_count": 19277, + "open_issues_count": 10258, + "updated_at": "2026-04-18T20:36:34Z", "created_at": "2025-02-22T17:41:21Z", "clone_url": "https://github.com/anthropics/claude-code.git", "ssh_url": "git@github.com:anthropics/claude-code.git", "default_branch": "main", - "last_build_update": "2026-04-07T21:18:51Z" + "last_build_update": "2026-04-18T01:34:30Z" } \ No newline at end of file diff --git a/mkdocs/site/assets/repo-data/coder-code-server.json b/mkdocs/site/assets/repo-data/coder-code-server.json index 3b4d5703..c991accd 100644 --- a/mkdocs/site/assets/repo-data/coder-code-server.json +++ b/mkdocs/site/assets/repo-data/coder-code-server.json @@ -4,13 +4,13 @@ "description": "VS Code in the browser", "html_url": "https://github.com/coder/code-server", "language": "TypeScript", - "stars_count": 76998, - "forks_count": 6596, - "open_issues_count": 143, - "updated_at": "2026-04-07T23:08:42Z", + "stars_count": 77176, + "forks_count": 6620, + "open_issues_count": 138, + "updated_at": "2026-04-18T19:11:47Z", "created_at": "2019-02-27T16:50:41Z", "clone_url": "https://github.com/coder/code-server.git", "ssh_url": "git@github.com:coder/code-server.git", "default_branch": "main", - "last_build_update": "2026-04-06T23:31:43Z" + "last_build_update": "2026-04-17T19:14:57Z" } \ No newline at end of file diff --git a/mkdocs/site/assets/repo-data/gethomepage-homepage.json b/mkdocs/site/assets/repo-data/gethomepage-homepage.json index 7540e1f6..cd00ee16 100644 --- a/mkdocs/site/assets/repo-data/gethomepage-homepage.json +++ b/mkdocs/site/assets/repo-data/gethomepage-homepage.json @@ -4,13 +4,13 @@ "description": "A highly customizable homepage (or startpage / application dashboard) with Docker and service API integrations.", "html_url": "https://github.com/gethomepage/homepage", "language": "JavaScript", - "stars_count": 29403, - "forks_count": 1853, - "open_issues_count": 2, - "updated_at": "2026-04-07T23:17:05Z", + "stars_count": 29626, + "forks_count": 1889, + "open_issues_count": 1, + "updated_at": "2026-04-18T20:32:38Z", "created_at": "2022-08-24T07:29:42Z", "clone_url": "https://github.com/gethomepage/homepage.git", "ssh_url": "git@github.com:gethomepage/homepage.git", "default_branch": "dev", - "last_build_update": "2026-04-07T15:04:38Z" + "last_build_update": "2026-04-18T12:22:41Z" } \ No newline at end of file diff --git a/mkdocs/site/assets/repo-data/go-gitea-gitea.json b/mkdocs/site/assets/repo-data/go-gitea-gitea.json index 15639a62..f843c370 100644 --- a/mkdocs/site/assets/repo-data/go-gitea-gitea.json +++ b/mkdocs/site/assets/repo-data/go-gitea-gitea.json @@ -4,13 +4,13 @@ "description": "Git with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD", "html_url": "https://github.com/go-gitea/gitea", "language": "Go", - "stars_count": 54776, - "forks_count": 6537, - "open_issues_count": 2822, - "updated_at": "2026-04-07T22:34:41Z", + "stars_count": 54976, + "forks_count": 6589, + "open_issues_count": 2824, + "updated_at": "2026-04-18T20:39:30Z", "created_at": "2016-11-01T02:13:26Z", "clone_url": "https://github.com/go-gitea/gitea.git", "ssh_url": "git@github.com:go-gitea/gitea.git", "default_branch": "main", - "last_build_update": "2026-04-07T17:49:08Z" + "last_build_update": "2026-04-18T20:40:15Z" } \ No newline at end of file diff --git a/mkdocs/site/assets/repo-data/knadh-listmonk.json b/mkdocs/site/assets/repo-data/knadh-listmonk.json index 506b8d99..6a9a0f93 100644 --- a/mkdocs/site/assets/repo-data/knadh-listmonk.json +++ b/mkdocs/site/assets/repo-data/knadh-listmonk.json @@ -4,13 +4,13 @@ "description": "High performance, self-hosted, newsletter and mailing list manager with a modern dashboard. Single binary app.", "html_url": "https://github.com/knadh/listmonk", "language": "Go", - "stars_count": 19474, - "forks_count": 1986, - "open_issues_count": 97, - "updated_at": "2026-04-07T22:55:19Z", + "stars_count": 19565, + "forks_count": 2002, + "open_issues_count": 101, + "updated_at": "2026-04-18T19:55:06Z", "created_at": "2019-06-26T05:08:39Z", "clone_url": "https://github.com/knadh/listmonk.git", "ssh_url": "git@github.com:knadh/listmonk.git", "default_branch": "master", - "last_build_update": "2026-04-04T03:05:00Z" + "last_build_update": "2026-04-18T04:46:18Z" } \ No newline at end of file diff --git a/mkdocs/site/assets/repo-data/lyqht-mini-qr.json b/mkdocs/site/assets/repo-data/lyqht-mini-qr.json index 21dc4b8d..c211a390 100644 --- a/mkdocs/site/assets/repo-data/lyqht-mini-qr.json +++ b/mkdocs/site/assets/repo-data/lyqht-mini-qr.json @@ -4,10 +4,10 @@ "description": "Create & scan cute qr codes easily \ud83d\udc7e", "html_url": "https://github.com/lyqht/mini-qr", "language": "Vue", - "stars_count": 1946, + "stars_count": 1972, "forks_count": 246, "open_issues_count": 22, - "updated_at": "2026-04-07T19:45:59Z", + "updated_at": "2026-04-17T18:24:10Z", "created_at": "2023-04-21T14:20:14Z", "clone_url": "https://github.com/lyqht/mini-qr.git", "ssh_url": "git@github.com:lyqht/mini-qr.git", diff --git a/mkdocs/site/assets/repo-data/n8n-io-n8n.json b/mkdocs/site/assets/repo-data/n8n-io-n8n.json index 83ba8a62..281cd31c 100644 --- a/mkdocs/site/assets/repo-data/n8n-io-n8n.json +++ b/mkdocs/site/assets/repo-data/n8n-io-n8n.json @@ -4,13 +4,13 @@ "description": "Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.", "html_url": "https://github.com/n8n-io/n8n", "language": "TypeScript", - "stars_count": 182875, - "forks_count": 56576, - "open_issues_count": 1502, - "updated_at": "2026-04-07T23:16:46Z", + "stars_count": 184582, + "forks_count": 56921, + "open_issues_count": 1514, + "updated_at": "2026-04-18T20:37:25Z", "created_at": "2019-06-22T09:24:21Z", "clone_url": "https://github.com/n8n-io/n8n.git", "ssh_url": "git@github.com:n8n-io/n8n.git", "default_branch": "master", - "last_build_update": "2026-04-07T23:30:49Z" + "last_build_update": "2026-04-18T18:20:27Z" } \ No newline at end of file diff --git a/mkdocs/site/assets/repo-data/nocodb-nocodb.json b/mkdocs/site/assets/repo-data/nocodb-nocodb.json index ce3f8e49..dd1c4794 100644 --- a/mkdocs/site/assets/repo-data/nocodb-nocodb.json +++ b/mkdocs/site/assets/repo-data/nocodb-nocodb.json @@ -4,13 +4,13 @@ "description": "\ud83d\udd25 \ud83d\udd25 \ud83d\udd25 A Free & Self-hostable Airtable Alternative", "html_url": "https://github.com/nocodb/nocodb", "language": "TypeScript", - "stars_count": 62628, - "forks_count": 4714, - "open_issues_count": 669, - "updated_at": "2026-04-07T21:46:28Z", + "stars_count": 62762, + "forks_count": 4728, + "open_issues_count": 670, + "updated_at": "2026-04-18T18:15:04Z", "created_at": "2017-10-29T18:51:48Z", "clone_url": "https://github.com/nocodb/nocodb.git", "ssh_url": "git@github.com:nocodb/nocodb.git", "default_branch": "develop", - "last_build_update": "2026-04-07T14:16:44Z" + "last_build_update": "2026-04-18T18:27:20Z" } \ No newline at end of file diff --git a/mkdocs/site/assets/repo-data/ollama-ollama.json b/mkdocs/site/assets/repo-data/ollama-ollama.json index 84a774aa..64e324dc 100644 --- a/mkdocs/site/assets/repo-data/ollama-ollama.json +++ b/mkdocs/site/assets/repo-data/ollama-ollama.json @@ -4,13 +4,13 @@ "description": "Get up and running with Kimi-K2.5, GLM-5, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.", "html_url": "https://github.com/ollama/ollama", "language": "Go", - "stars_count": 168040, - "forks_count": 15419, - "open_issues_count": 2871, - "updated_at": "2026-04-07T23:28:46Z", + "stars_count": 169357, + "forks_count": 15664, + "open_issues_count": 2984, + "updated_at": "2026-04-18T20:28:17Z", "created_at": "2023-06-26T19:39:32Z", "clone_url": "https://github.com/ollama/ollama.git", "ssh_url": "git@github.com:ollama/ollama.git", "default_branch": "main", - "last_build_update": "2026-04-07T23:28:36Z" + "last_build_update": "2026-04-18T18:56:35Z" } \ No newline at end of file diff --git a/mkdocs/site/assets/repo-data/squidfunk-mkdocs-material.json b/mkdocs/site/assets/repo-data/squidfunk-mkdocs-material.json index acbf1aa4..fb1f351a 100644 --- a/mkdocs/site/assets/repo-data/squidfunk-mkdocs-material.json +++ b/mkdocs/site/assets/repo-data/squidfunk-mkdocs-material.json @@ -4,13 +4,13 @@ "description": "Documentation that simply works", "html_url": "https://github.com/squidfunk/mkdocs-material", "language": "Python", - "stars_count": 26468, - "forks_count": 4069, + "stars_count": 26571, + "forks_count": 4070, "open_issues_count": 1, - "updated_at": "2026-04-07T22:53:37Z", + "updated_at": "2026-04-18T17:06:20Z", "created_at": "2016-01-28T22:09:23Z", "clone_url": "https://github.com/squidfunk/mkdocs-material.git", "ssh_url": "git@github.com:squidfunk/mkdocs-material.git", "default_branch": "master", - "last_build_update": "2026-04-03T22:40:45Z" + "last_build_update": "2026-04-16T14:42:25Z" } \ No newline at end of file diff --git a/mkdocs/site/blog/2026/03/22/introducing-changemaker-lite-v2/index.html b/mkdocs/site/blog/2026/03/22/introducing-changemaker-lite-v2/index.html index 41e8699e..ba3646fa 100644 --- a/mkdocs/site/blog/2026/03/22/introducing-changemaker-lite-v2/index.html +++ b/mkdocs/site/blog/2026/03/22/introducing-changemaker-lite-v2/index.html @@ -129,38 +129,12 @@
- homeHome + homeHome sendCampaigns - placeMap -
- - apps - Scheduling - expand_more - -
- scheduleShifts - eventCalendar - bar_chartPolls -
-
- play_circleGallery -
- - account_balance_wallet - Commerce - expand_more - -
- attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
-
- emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -211,38 +185,12 @@ Docs Navigation
- homeHome + homeHome sendCampaigns - placeMap -
- - apps - Scheduling - expand_more - -
- scheduleShifts - eventCalendar - bar_chartPolls -
-
- play_circleGallery -
- - account_balance_wallet - Commerce - expand_more - -
- attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
-
- emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
login @@ -1374,6 +1322,8 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { + + diff --git a/mkdocs/site/blog/2026/03/27/test-blog-post---version-7/index.html b/mkdocs/site/blog/2026/03/27/test-blog-post---version-7/index.html index 14c58c74..d1a0c988 100644 --- a/mkdocs/site/blog/2026/03/27/test-blog-post---version-7/index.html +++ b/mkdocs/site/blog/2026/03/27/test-blog-post---version-7/index.html @@ -19,6 +19,8 @@ + + @@ -129,38 +131,12 @@
- homeHome + homeHome sendCampaigns - placeMap -
- - apps - Scheduling - expand_more - -
- scheduleShifts - eventCalendar - bar_chartPolls -
-
- play_circleGallery -
- - account_balance_wallet - Commerce - expand_more - -
- attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
-
- emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -211,38 +187,12 @@ Docs Navigation
- homeHome + homeHome sendCampaigns - placeMap -
- - apps - Scheduling - expand_more - -
- scheduleShifts - eventCalendar - bar_chartPolls -
-
- play_circleGallery -
- - account_balance_wallet - Commerce - expand_more - -
- attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
-
- emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
login @@ -1374,6 +1324,8 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { + + @@ -1629,6 +1581,22 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { + + +
+ + Next + +
+ A smoother fresh install: v2.9.8 and v2.9.9 +
+
+
+ + +
+ + diff --git a/mkdocs/site/blog/2026/04/16/a-smoother-fresh-install-v298-and-v299/index.html b/mkdocs/site/blog/2026/04/16/a-smoother-fresh-install-v298-and-v299/index.html new file mode 100644 index 00000000..f96ee2ca --- /dev/null +++ b/mkdocs/site/blog/2026/04/16/a-smoother-fresh-install-v298-and-v299/index.html @@ -0,0 +1,1816 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + A smoother fresh install: v2.9.8 and v2.9.9 - Changemaker Lite + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ + + +
+ + +
+
+ + +
+ + + + + + + + + + + + + + + + + +
+ + +
+ + + +
+ +
+ + + + + + + +
+
+ + + + + + + + + + + +
+
+
+ + + + + +
+
+
+ + + +
+
+
+
+ + +
+
+
+
+ + + + + + + + + + + + + + + + + + + + + + + + + +

A smoother fresh install: v2.9.8 and v2.9.9

+

Installing Changemaker Lite from scratch on a clean server should be fast, quiet, and recoverable. Over the last few days we sat with a clean Ubuntu server and ran the install flow three times — once straight, once to fix what we found, and once to register the result with a Control Panel. Every round surfaced paper cuts. Both releases that landed this week are the result.

+ + +

The setup

+

Three fresh installs on a remote test bench (marcelle), each starting from sudo rm -rf ~/changemaker.lite and ending at a working deployment reachable through a Pangolin tunnel at cursedknowledge.org. In between, we captured every place the install asked us to think harder than it should have, every command that ran silently where a status line would have helped, and every failure mode where the cleanup left the user worse off than before.

+

Ten distinct friction points came out of the three runs. Every one is addressed in v2.9.8 or v2.9.9.

+

Install-day improvements (v2.9.8)

+

The installer now checks your host before it downloads anything. scripts/install.sh runs ss -Htln against the ~14 ports the stack binds (3000, 4000, 9090, 3030, …) before pulling the 15 MB tarball. If something else on the host is already listening — the canonical example being cockpit.socket on Ubuntu Server, which claims :9090 — the install aborts with a culprit-specific hint (sudo systemctl disable --now cockpit.socket) instead of starting a partial-stack deployment and failing mid-compose up.

+

config.sh smoke-tests Pangolin credentials before committing them to .env. In non-interactive mode, a typo in --pangolin-api-key used to fail much later, when Newt couldn't connect and the symptoms looked like a tunnel outage. A single round-trip to /org/:id/resources now catches the typo in seconds with a clear message. Skip with --skip-pangolin-check if you're bootstrapping offline.

+

Auto-generated admin passwords are saved to a file. When you run config.sh -y without --admin-password, the wizard generates a strong password. It prints it once — which used to mean users piping through tee or scrolling past it lost it forever. The password is now also written to data/admin-credentials.txt (mode 0600). Delete the file once you've stored the password elsewhere. Explicit --admin-password is never persisted.

+

--enable-all now actually installs everything. Previously config.sh -y --enable-all silently skipped the systemd upgrade watcher and the daily backup timer — even though --enable-all strongly suggests they'd be installed. Automation-driven installs missed the self-healing infrastructure we'd worked hard to stabilize. They now install by default, with --no-install-watcher / --no-install-backup-timer for deliberate opt-out.

+

Next Steps now points at verification. After config completes, the installer tells you to run bash scripts/test-deployment.sh --wait 60. It's a 37-check verifier that exists in the repo but wasn't surfaced anywhere. It confirms all containers are healthy, the API is responding, the tunnel is reachable, and the database is seeded. Run it after every install — it'll save hours of "is it actually working?"

+

Teardown that actually tears down

+

Fresh installs used to leave two classes of orphans:

+
    +
  • Pangolin resources and sites in your tunnel org that nobody cleans up when you docker compose down -v
    • +
  • CCP Instance rows from phone-home registrations that outlive the underlying stack
    • +
+

Both now have proper scripts. scripts/pangolin-teardown.sh --yes wipes an org's resources + sites (dry-run by default, --keep-site-ids for safety). scripts/ccp-deregister.sh --yes removes this host's Instance from a connected Control Panel. The full teardown sequence is documented and fits on one card.

+

We also wired tunnel cleanup into CCP's own deleteInstance — previously, clicking "Delete Instance" in CCP admin stopped Docker but orphaned the Pangolin site. That was a bug in our plumbing; it's fixed.

+

CCP registration, less fragile

+

Registering an existing install with a Control Panel used to hit two avoidable failures. Both are addressed:

+

Slug collisions return a clean 409. If you tore down the target stack without running ccp-deregister.sh first, CCP's stale Instance row blocked re-registration. The error was a raw Prisma stack trace. It's now a 409 SLUG_CONFLICT with a message pointing at the fix: "Delete the stale instance first or run scripts/ccp-deregister.sh from the target host."

+

The agent doesn't wedge on rate limits. The old poll loop sent a /poll request every 30 seconds at a fixed cadence. If admin approval took longer than 5 minutes, CCP's rate limiter returned HTTP 429 and the agent got stuck — recovery required an operator to manually restart the container. We split the rate limiters (strict on /register, looser on /poll to accommodate the normal polling pattern), and taught the agent to back off exponentially on 429 (30s → 60s → 120s → 300s cap) with reset on success.

+

Release hygiene (v2.9.9)

+

Two small guards against future drift:

+

build-release.sh --upload refuses to overwrite an existing tag unless you pass --replace. Silently pushing new tarball contents under an existing version breaks upgrade checks for users on that version — they see "no update available" even though the bytes changed. Version tags should be immutable once published.

+

A parity check on the shipping whitelist. Adding a new script to scripts/ now requires deliberately classifying it as ship (RUNTIME_SCRIPTS) or don't-ship (DEV_ONLY_SCRIPTS). An unclassified script aborts the build. No more "added a script three months ago, forgot to add it to the release, nobody noticed."

+

install.sh preserves your extracted tarball on config-wizard failure. The classic curl | ssh bash over non-interactive SSH fails because /dev/tty is unavailable. The cleanup trap used to remove the install directory, forcing a 15 MB re-download. It now distinguishes "extract OK, wizard didn't run" from "extraction itself failed" and preserves the dir with a resumption hint: "cd /path && bash config.sh on an interactive console".

+

What's next

+

Both releases are out. The install flow is meaningfully more resilient — a test that hit two classes of failure now recovers gracefully from both, on a run that took twelve minutes end-to-end including a full stack up and verifier pass. Documentation (prerequisites, installation, first-steps, control-panel) has been swept to match.

+

A few items we noted but deliberately deferred: the agent doesn't yet detect when its mTLS cert points at a CCP-deleted instance and re-enter registration mode (real concern past 5+ fleet instances, not now); the CCP's default admin credentials in .env.example deserve a security pass of their own; the Gitea tarball download speed is a network-layer issue outside the install script's scope.

+

If you're running on a pre-v2.9.8 install, ./scripts/upgrade.sh is a safe path forward. If you're coming fresh, the one-liner — curl -fsSL https://gitea.bnkops.com/admin/changemaker.lite/raw/branch/main/scripts/install.sh | bash — should get you further without asking you to think.

+

As always, issues and feedback via Gitea. Thanks for following along.

+ + + + + + + + + + + + + + + + + + +
+
+ + + + + +
+ + + +
+ + + +
+
+
+
+ +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/mkdocs/site/blog/archive/2026/index.html b/mkdocs/site/blog/archive/2026/index.html index 8e9c510b..5d131cf1 100644 --- a/mkdocs/site/blog/archive/2026/index.html +++ b/mkdocs/site/blog/archive/2026/index.html @@ -129,38 +129,12 @@
- homeHome + homeHome sendCampaigns - placeMap -
- - apps - Scheduling - expand_more - -
- scheduleShifts - eventCalendar - bar_chartPolls -
-
- play_circleGallery -
- - account_balance_wallet - Commerce - expand_more - -
- attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
-
- emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -211,38 +185,12 @@ Docs Navigation
- homeHome + homeHome sendCampaigns - placeMap -
- - apps - Scheduling - expand_more - -
- scheduleShifts - eventCalendar - bar_chartPolls -
-
- play_circleGallery -
- - account_balance_wallet - Commerce - expand_more - -
- attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
-
- emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
login @@ -1424,6 +1372,8 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { + + @@ -1523,6 +1473,56 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { +
+ + +
+ +
+

A smoother fresh install: v2.9.8 and v2.9.9

+

Installing Changemaker Lite from scratch on a clean server should be fast, quiet, and recoverable. Over the last few days we sat with a clean Ubuntu server and ran the install flow three times — once straight, once to fix what we found, and once to register the result with a Control Panel. Every round surfaced paper cuts. Both releases that landed this week are the result.

+ + + + + +
+ + +
+
+ + +
  • diff --git a/mkdocs/site/blog/category/announcements/index.html b/mkdocs/site/blog/category/announcements/index.html index c4db5de2..f71c7de0 100644 --- a/mkdocs/site/blog/category/announcements/index.html +++ b/mkdocs/site/blog/category/announcements/index.html @@ -131,38 +131,12 @@
- homeHome + homeHome sendCampaigns - placeMap -
- - apps - Scheduling - expand_more - -
- scheduleShifts - eventCalendar - bar_chartPolls -
-
- play_circleGallery -
- - account_balance_wallet - Commerce - expand_more - -
- attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
-
- emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
- homeHome + homeHome sendCampaigns - placeMap -
- - apps - Scheduling - expand_more - -
- scheduleShifts - eventCalendar - bar_chartPolls -
-
- play_circleGallery -
- - account_balance_wallet - Commerce - expand_more - -
- attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
-
- emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
login @@ -1374,6 +1322,8 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { + + @@ -1502,6 +1452,36 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { +
  • + + + + + + + + Release Notes + + + + + + + + +
    • + + + + + + + + + + + +
  • diff --git a/mkdocs/site/blog/category/platform/index.html b/mkdocs/site/blog/category/platform/index.html index 134ff711..291b2b59 100644 --- a/mkdocs/site/blog/category/platform/index.html +++ b/mkdocs/site/blog/category/platform/index.html @@ -19,7 +19,7 @@ - + @@ -131,38 +131,12 @@
    • - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login @@ -1374,6 +1322,8 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { + + @@ -1502,6 +1452,36 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { +
  • + + + + + + + + Release Notes + + + + + + + + +
    • + + + + + + + + + + + +
  • @@ -1585,6 +1565,56 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { +
    + + +
    +
    • +
    +

    A smoother fresh install: v2.9.8 and v2.9.9

    +

    Installing Changemaker Lite from scratch on a clean server should be fast, quiet, and recoverable. Over the last few days we sat with a clean Ubuntu server and ran the install flow three times — once straight, once to fix what we found, and once to register the result with a Control Panel. Every round surfaced paper cuts. Both releases that landed this week are the result.

    + + + + + +
    +
    + +
    +
    + + +
    • @@ -1676,13 +1706,13 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { - +
      Next
      - Testing + Release Notes
      diff --git a/mkdocs/site/blog/category/release-notes/index.html b/mkdocs/site/blog/category/release-notes/index.html new file mode 100644 index 00000000..5a6808b9 --- /dev/null +++ b/mkdocs/site/blog/category/release-notes/index.html @@ -0,0 +1,1761 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Release Notes - Changemaker Lite + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
      + + + +
      + + +
      +
      + + +
      + + + + + + + + + + + + + + + + + +
      + + +
      + + + +
      + +
      + + + + + + + +
      +
      + + + +
      +
      +
      + + + + + + + +
      +
      +
      + + + +
      +
      +
      + + + + + +
      +
      +
      + + + +
      +
      +
      +

      Release Notes

      +
      + +
      +
      + + + +
      + + +
      +
      +
      +

      A smoother fresh install: v2.9.8 and v2.9.9

      +

      Installing Changemaker Lite from scratch on a clean server should be fast, quiet, and recoverable. Over the last few days we sat with a clean Ubuntu server and ran the install flow three times — once straight, once to fix what we found, and once to register the result with a Control Panel. Every round surfaced paper cuts. Both releases that landed this week are the result.

      + + + + + +
      +
      + + + + + + + + + + +
      +
      + + + + + +
      + + + +
      + + + +
      +
      +
      +
      + +
      + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/mkdocs/site/blog/category/testing/index.html b/mkdocs/site/blog/category/testing/index.html index 1815f4e2..d87ffa72 100644 --- a/mkdocs/site/blog/category/testing/index.html +++ b/mkdocs/site/blog/category/testing/index.html @@ -16,7 +16,7 @@ - + @@ -131,38 +131,12 @@
      - homeHome + homeHome sendCampaigns - placeMap -
      - - apps - Scheduling - expand_more - -
      - scheduleShifts - eventCalendar - bar_chartPolls -
      -
      - play_circleGallery -
      - - account_balance_wallet - Commerce - expand_more - -
      - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
      -
      - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
      - homeHome + homeHome sendCampaigns - placeMap -
      - - apps - Scheduling - expand_more - -
      - scheduleShifts - eventCalendar - bar_chartPolls -
      -
      - play_circleGallery -
      - - account_balance_wallet - Commerce - expand_more - -
      - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
      -
      - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
      login @@ -1374,6 +1322,8 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { + + @@ -1486,6 +1436,36 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { + + + + +
    • + + + + + + + + Release Notes + + + + + + + + +
      • + + + + + + + + @@ -1651,7 +1631,7 @@ body.cm-search-active .md-header--cm-hidden .md-search__output {
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login @@ -1374,6 +1322,8 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { + + @@ -1473,6 +1423,56 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { +
    + + +
    +
    +
    +

    A smoother fresh install: v2.9.8 and v2.9.9

    +

    Installing Changemaker Lite from scratch on a clean server should be fast, quiet, and recoverable. Over the last few days we sat with a clean Ubuntu server and ran the install flow three times — once straight, once to fix what we found, and once to register the result with a Control Panel. Every round surfaced paper cuts. Both releases that landed this week are the result.

    + + + + + +
    +
    + +
    +
    + + +
    • diff --git a/mkdocs/site/comments/callback/index.html b/mkdocs/site/comments/callback/index.html index b4bb6a5d..deb2e626 100644 --- a/mkdocs/site/comments/callback/index.html +++ b/mkdocs/site/comments/callback/index.html @@ -122,38 +122,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -204,38 +178,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/advocacy/campaigns/index.html b/mkdocs/site/docs/admin/advocacy/campaigns/index.html index 581da4f1..c556cb16 100644 --- a/mkdocs/site/docs/admin/advocacy/campaigns/index.html +++ b/mkdocs/site/docs/admin/advocacy/campaigns/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login @@ -3056,7 +3004,7 @@ body.cm-search-active .md-header--cm-hidden .md-search__output {

    User-Submitted Campaigns

    -

    Registered (non-temporary) users can create their own advocacy campaigns and submit them for admin review.

    +

    Registered (non-temporary) users can create their own advocacy campaigns and submit them for admin review. See the user-facing submission guide for the supporter's perspective.

    • Public submission route — users visit /campaigns/create to draft a campaign through a guided wizard
    • 3-step wizard — the submission flow walks users through campaign details (title, description, government levels), email template (subject and body), and a final review step before submitting
      • diff --git a/mkdocs/site/docs/admin/advocacy/email-queue/index.html b/mkdocs/site/docs/admin/advocacy/email-queue/index.html index 276e0cd6..a3a8164d 100644 --- a/mkdocs/site/docs/admin/advocacy/email-queue/index.html +++ b/mkdocs/site/docs/admin/advocacy/email-queue/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/advocacy/index.html b/mkdocs/site/docs/admin/advocacy/index.html index 5d340c46..ba43522a 100644 --- a/mkdocs/site/docs/admin/advocacy/index.html +++ b/mkdocs/site/docs/admin/advocacy/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/advocacy/representatives/index.html b/mkdocs/site/docs/admin/advocacy/representatives/index.html index 313ed846..963ad2b4 100644 --- a/mkdocs/site/docs/admin/advocacy/representatives/index.html +++ b/mkdocs/site/docs/admin/advocacy/representatives/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login @@ -2925,7 +2873,7 @@ body.cm-search-active .md-header--cm-hidden .md-search__output {
  • Postal code lookup — enter a Canadian postal code to retrieve federal, provincial, municipal, and school board representatives
  • Redis cache — lookup results are cached to reduce API calls and improve response times
  • Cache management — view cache status and clear entries from /app/representatives
    • -
  • Government levels — campaigns can target specific levels (federal, provincial, municipal, school board)
    • +
  • Government levels — campaigns can target specific levels (federal, provincial, municipal, school board)

    • Admin Routes

    diff --git a/mkdocs/site/docs/admin/advocacy/responses/index.html b/mkdocs/site/docs/admin/advocacy/responses/index.html index ba8d5931..3e1a77c2 100644 --- a/mkdocs/site/docs/admin/advocacy/responses/index.html +++ b/mkdocs/site/docs/admin/advocacy/responses/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/broadcast/email-templates/index.html b/mkdocs/site/docs/admin/broadcast/email-templates/index.html index 10305a09..b2a8e80f 100644 --- a/mkdocs/site/docs/admin/broadcast/email-templates/index.html +++ b/mkdocs/site/docs/admin/broadcast/email-templates/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/broadcast/index.html b/mkdocs/site/docs/admin/broadcast/index.html index 77094565..e117b35a 100644 --- a/mkdocs/site/docs/admin/broadcast/index.html +++ b/mkdocs/site/docs/admin/broadcast/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/broadcast/newsletter/index.html b/mkdocs/site/docs/admin/broadcast/newsletter/index.html index 0e99dd38..fbc8df88 100644 --- a/mkdocs/site/docs/admin/broadcast/newsletter/index.html +++ b/mkdocs/site/docs/admin/broadcast/newsletter/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login @@ -3019,7 +2967,7 @@ body.cm-search-active .md-header--cm-hidden .md-search__output {
  • Campaign participants -- distinct email senders from advocacy campaigns
  • Location contacts -- address occupants with email, mapped to support level and sign lists
  • Users -- active platform accounts (excludes TEMP users)
    • -
  • CRM tags -- contacts tagged in the People module, synced to tag-linked Listmonk lists
    • +
  • CRM tags -- contacts tagged in the People module, synced to tag-linked Listmonk lists

    • Each source upserts subscribers (creates new or merges into existing), preserving existing list memberships and merging metadata attributes.

    diff --git a/mkdocs/site/docs/admin/broadcast/sms/index.html b/mkdocs/site/docs/admin/broadcast/sms/index.html index f5991ef4..49cc9d27 100644 --- a/mkdocs/site/docs/admin/broadcast/sms/index.html +++ b/mkdocs/site/docs/admin/broadcast/sms/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/dashboard/index.html b/mkdocs/site/docs/admin/dashboard/index.html index a2d66c74..b687530d 100644 --- a/mkdocs/site/docs/admin/dashboard/index.html +++ b/mkdocs/site/docs/admin/dashboard/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login @@ -2734,12 +2682,12 @@ body.cm-search-active .md-header--cm-hidden .md-search__output {

    Dashboard Cards

      -
    • Platform Stats — active campaigns, total emails sent, registered users, and location count
      • +
    • Platform Stats — active campaigns, total emails sent, registered users, and locations
    • Activity Feed — recent events across all modules (signups, emails, visits, responses)
      • -
    • Upcoming Shifts — next scheduled volunteer shifts with signup counts
      • -
    • Newsletter Stats — Listmonk subscriber counts and recent campaign performance
      • +
    • Upcoming Shifts — next scheduled volunteer shifts with signup counts
      • +
    • Newsletter Stats — Listmonk subscriber counts and recent campaign performance
    • Chat Activity — Rocket.Chat channel activity and online users (when chat is enabled)
      • -
    • Service Health — connectivity status for integrated services (Gitea, Gancio, Vaultwarden, etc.)
      • +
    • Service Health — connectivity status for integrated services (Gitea, Gancio, Vaultwarden, etc.)

    All cards auto-refresh and gracefully degrade when their associated module is disabled.

    diff --git a/mkdocs/site/docs/admin/index.html b/mkdocs/site/docs/admin/index.html index 46c81c3c..90b00900 100644 --- a/mkdocs/site/docs/admin/index.html +++ b/mkdocs/site/docs/admin/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/map/areas/index.html b/mkdocs/site/docs/admin/map/areas/index.html index bcd9ba18..da3485be 100644 --- a/mkdocs/site/docs/admin/map/areas/index.html +++ b/mkdocs/site/docs/admin/map/areas/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/map/canvassing/index.html b/mkdocs/site/docs/admin/map/canvassing/index.html index 8d1ed83b..c928374e 100644 --- a/mkdocs/site/docs/admin/map/canvassing/index.html +++ b/mkdocs/site/docs/admin/map/canvassing/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/map/data-quality/index.html b/mkdocs/site/docs/admin/map/data-quality/index.html index 1fb44b47..7a7853ab 100644 --- a/mkdocs/site/docs/admin/map/data-quality/index.html +++ b/mkdocs/site/docs/admin/map/data-quality/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/map/index.html b/mkdocs/site/docs/admin/map/index.html index 1c84660c..ccff4b12 100644 --- a/mkdocs/site/docs/admin/map/index.html +++ b/mkdocs/site/docs/admin/map/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/map/locations/index.html b/mkdocs/site/docs/admin/map/locations/index.html index 4ab4448e..af97c159 100644 --- a/mkdocs/site/docs/admin/map/locations/index.html +++ b/mkdocs/site/docs/admin/map/locations/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/map/settings/index.html b/mkdocs/site/docs/admin/map/settings/index.html index 5d6fbce2..3753da6b 100644 --- a/mkdocs/site/docs/admin/map/settings/index.html +++ b/mkdocs/site/docs/admin/map/settings/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/map/shifts/index.html b/mkdocs/site/docs/admin/map/shifts/index.html index a6f0f3aa..7c3ddb28 100644 --- a/mkdocs/site/docs/admin/map/shifts/index.html +++ b/mkdocs/site/docs/admin/map/shifts/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/media/ads/index.html b/mkdocs/site/docs/admin/media/ads/index.html index 21d81706..d415f8b1 100644 --- a/mkdocs/site/docs/admin/media/ads/index.html +++ b/mkdocs/site/docs/admin/media/ads/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/media/analytics/index.html b/mkdocs/site/docs/admin/media/analytics/index.html index 2ef13026..5cedcd8b 100644 --- a/mkdocs/site/docs/admin/media/analytics/index.html +++ b/mkdocs/site/docs/admin/media/analytics/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/media/curated/index.html b/mkdocs/site/docs/admin/media/curated/index.html index 719fd05b..9bf85da9 100644 --- a/mkdocs/site/docs/admin/media/curated/index.html +++ b/mkdocs/site/docs/admin/media/curated/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/media/index.html b/mkdocs/site/docs/admin/media/index.html index c9bda4a8..11fa30f7 100644 --- a/mkdocs/site/docs/admin/media/index.html +++ b/mkdocs/site/docs/admin/media/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/media/library/index.html b/mkdocs/site/docs/admin/media/library/index.html index 60d62540..09d5ab89 100644 --- a/mkdocs/site/docs/admin/media/library/index.html +++ b/mkdocs/site/docs/admin/media/library/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/media/moderation/index.html b/mkdocs/site/docs/admin/media/moderation/index.html index e9af1c13..ac03c57d 100644 --- a/mkdocs/site/docs/admin/media/moderation/index.html +++ b/mkdocs/site/docs/admin/media/moderation/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/payments/donations/index.html b/mkdocs/site/docs/admin/payments/donations/index.html index caba1373..a406143f 100644 --- a/mkdocs/site/docs/admin/payments/donations/index.html +++ b/mkdocs/site/docs/admin/payments/donations/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/payments/index.html b/mkdocs/site/docs/admin/payments/index.html index 1d51a6ab..befb4544 100644 --- a/mkdocs/site/docs/admin/payments/index.html +++ b/mkdocs/site/docs/admin/payments/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/payments/plans/index.html b/mkdocs/site/docs/admin/payments/plans/index.html index 2a6ef099..84a78fb7 100644 --- a/mkdocs/site/docs/admin/payments/plans/index.html +++ b/mkdocs/site/docs/admin/payments/plans/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/payments/products/index.html b/mkdocs/site/docs/admin/payments/products/index.html index bc1214b3..2e254684 100644 --- a/mkdocs/site/docs/admin/payments/products/index.html +++ b/mkdocs/site/docs/admin/payments/products/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/payments/settings/index.html b/mkdocs/site/docs/admin/payments/settings/index.html index 1d27b86c..54ed28f3 100644 --- a/mkdocs/site/docs/admin/payments/settings/index.html +++ b/mkdocs/site/docs/admin/payments/settings/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/people-access/index.html b/mkdocs/site/docs/admin/people-access/index.html index f4bb56aa..a9713f4f 100644 --- a/mkdocs/site/docs/admin/people-access/index.html +++ b/mkdocs/site/docs/admin/people-access/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login @@ -3163,6 +3111,7 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { +

    This table shows the most common roles. See the full role list for module-specific admin roles (BROADCAST_ADMIN, CONTENT_ADMIN, MEDIA_ADMIN, PAYMENTS_ADMIN, EVENTS_ADMIN, SOCIAL_ADMIN).

    Password Policy

    Passwords must be at least 12 characters with uppercase, lowercase, and a digit. This is enforced at the API schema level.

    Deactivating Users

    diff --git a/mkdocs/site/docs/admin/services/crowdsec/index.html b/mkdocs/site/docs/admin/services/crowdsec/index.html index 8acc78af..dcf7eb95 100644 --- a/mkdocs/site/docs/admin/services/crowdsec/index.html +++ b/mkdocs/site/docs/admin/services/crowdsec/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/services/index.html b/mkdocs/site/docs/admin/services/index.html index 8faff6e9..6396e26e 100644 --- a/mkdocs/site/docs/admin/services/index.html +++ b/mkdocs/site/docs/admin/services/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/services/integrations/index.html b/mkdocs/site/docs/admin/services/integrations/index.html index fb4cd8af..9f5ffd17 100644 --- a/mkdocs/site/docs/admin/services/integrations/index.html +++ b/mkdocs/site/docs/admin/services/integrations/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/services/monitoring/index.html b/mkdocs/site/docs/admin/services/monitoring/index.html index 116862fb..3880986f 100644 --- a/mkdocs/site/docs/admin/services/monitoring/index.html +++ b/mkdocs/site/docs/admin/services/monitoring/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login @@ -3064,7 +3012,7 @@ body.cm-search-active .md-header--cm-hidden .md-search__output {

    Starting the Stack

    docker compose --profile monitoring up -d
    -

    This starts Prometheus, Grafana, Alertmanager, cAdvisor, Node Exporter, and Redis Exporter.

    +

    This starts Prometheus, Grafana, Alertmanager, cAdvisor, Node Exporter, Redis Exporter, and Gotify (for push notifications).

    Custom Metrics

    The platform exposes 12 custom cm_* Prometheus metrics:

    @@ -3098,7 +3046,7 @@ body.cm-search-active .md-header--cm-hidden .md-search__output {

    Direct Access

      -
    • Grafana: localhost:3001 or grafana.DOMAIN
      • +
    • Grafana: localhost:3005 or grafana.DOMAIN
    • Prometheus: localhost:9090
    • Alertmanager: localhost:9093
    diff --git a/mkdocs/site/docs/admin/services/tunnel/index.html b/mkdocs/site/docs/admin/services/tunnel/index.html index 1cabd94c..dc8e3d09 100644 --- a/mkdocs/site/docs/admin/services/tunnel/index.html +++ b/mkdocs/site/docs/admin/services/tunnel/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login @@ -3047,7 +2995,7 @@ body.cm-search-active .md-header--cm-hidden .md-search__output {

    Resource Management

    -

    The platform defines 12+ service resources in configs/pangolin/resources.yml:

    +

    The platform defines 18 service resources in configs/pangolin/resources.yml:

    • Each resource maps a subdomain (e.g., api.DOMAIN, app.DOMAIN) to an internal service
    • Hourly sync — nginx cron job pushes resource definitions to Pangolin automatically
      • diff --git a/mkdocs/site/docs/admin/services/user-provisioning/index.html b/mkdocs/site/docs/admin/services/user-provisioning/index.html index 46cb0e7f..ff9df5c6 100644 --- a/mkdocs/site/docs/admin/services/user-provisioning/index.html +++ b/mkdocs/site/docs/admin/services/user-provisioning/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/settings/index.html b/mkdocs/site/docs/admin/settings/index.html index eea27abf..31b154d0 100644 --- a/mkdocs/site/docs/admin/settings/index.html +++ b/mkdocs/site/docs/admin/settings/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/web/documentation/index.html b/mkdocs/site/docs/admin/web/documentation/index.html index b7199c19..57ea8fe9 100644 --- a/mkdocs/site/docs/admin/web/documentation/index.html +++ b/mkdocs/site/docs/admin/web/documentation/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/web/homepage/index.html b/mkdocs/site/docs/admin/web/homepage/index.html index 1b9ab5c4..9981d755 100644 --- a/mkdocs/site/docs/admin/web/homepage/index.html +++ b/mkdocs/site/docs/admin/web/homepage/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/web/index.html b/mkdocs/site/docs/admin/web/index.html index c43f4e42..7cfc9dec 100644 --- a/mkdocs/site/docs/admin/web/index.html +++ b/mkdocs/site/docs/admin/web/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/admin/web/landing-pages/index.html b/mkdocs/site/docs/admin/web/landing-pages/index.html index dd5f718a..4c08cb57 100644 --- a/mkdocs/site/docs/admin/web/landing-pages/index.html +++ b/mkdocs/site/docs/admin/web/landing-pages/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login @@ -2954,7 +2902,7 @@ body.cm-search-active .md-header--cm-hidden .md-search__output {
  • Create a new page from the admin panel
  • Open the GrapesJS visual editor — drag blocks, edit text, adjust styles
  • Save and publish — the page goes live at /p/:slug
    • -
  • Optionally export to MkDocs for inclusion in the documentation site
    • +
  • Optionally export to MkDocs for inclusion in the documentation site

    • Admin Routes

    diff --git a/mkdocs/site/docs/admin/web/navigation/index.html b/mkdocs/site/docs/admin/web/navigation/index.html index 0e5ec93a..8e38ba2b 100644 --- a/mkdocs/site/docs/admin/web/navigation/index.html +++ b/mkdocs/site/docs/admin/web/navigation/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/api/index.html b/mkdocs/site/docs/api/index.html index c88e813b..319bf16a 100644 --- a/mkdocs/site/docs/api/index.html +++ b/mkdocs/site/docs/api/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/architecture/index.html b/mkdocs/site/docs/architecture/index.html index e24fa8a4..7f271b82 100644 --- a/mkdocs/site/docs/architecture/index.html +++ b/mkdocs/site/docs/architecture/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login @@ -2208,7 +2156,7 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { Nginx --> MkDocs["MkDocs<br/>port 4003/4004"] Nginx --> Services["Other Services<br/>(Gitea, NocoDB, etc.)"] - API --> PostgreSQL[("PostgreSQL 16<br/>30+ tables")] + API --> PostgreSQL[("PostgreSQL 16<br/>190+ tables")] MediaAPI --> PostgreSQL API --> Redis[("Redis<br/>cache + queues")] API --> BullMQ["BullMQ<br/>(email, video jobs)"] @@ -2247,7 +2195,7 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { Database PostgreSQL 16 -Shared by both APIs (30+ models via Prisma) +Shared by both APIs (190+ models via Prisma) Cache @@ -2282,7 +2230,7 @@ body.cm-search-active .md-header--cm-hidden .md-search__output {
  • Authentication — JWT access/refresh tokens, RBAC middleware
  • Modules — Influence (campaigns, responses), Map (locations, cuts, shifts, canvassing), Pages, Email Templates, Settings, Users, Payments, Social, Calendar
  • Services — Email queue (BullMQ), geocoding queue, Listmonk sync, Pangolin client, user provisioning
    • -
  • ORM — Prisma with 30+ models and migration history
    • +
  • ORM — Prisma with 190+ models and migration history
    • @@ -2350,7 +2298,7 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { J --> N["Response + Metrics"]

    Database Schema

    -

    The database contains 30+ Prisma models organized by module:

    +

    The database contains 190+ Prisma models organized by module (key ones shown):

    diff --git a/mkdocs/site/docs/deployment/index.html b/mkdocs/site/docs/deployment/index.html index de4300c3..ce5c4203 100644 --- a/mkdocs/site/docs/deployment/index.html +++ b/mkdocs/site/docs/deployment/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login @@ -3209,9 +3157,9 @@ body.cm-search-active .md-header--cm-hidden .md-search__output {

    Pre-configured Dashboards

    Grafana includes 3 auto-provisioned dashboards:

      -
    1. API Overview — HTTP request rates, latency, error rates, active sessions
      2. -
    2. Infrastructure — Container CPU/memory, PostgreSQL connections, Redis memory
      3. -
    3. Campaign Activity — Email queue size, campaign sends, response submissions
      4. +
    4. API Performance — HTTP request rates, latencies, error rates
      5. +
    5. Application Overview — queue sizes, active sessions, service health
      6. +
    6. System Health — container resources, host metrics, Redis stats

    Custom Metrics

    The API exposes 12 custom Prometheus metrics with the cm_ prefix:

    diff --git a/mkdocs/site/docs/getting-started/control-panel/index.html b/mkdocs/site/docs/getting-started/control-panel/index.html index 30436a48..037de4f1 100644 --- a/mkdocs/site/docs/getting-started/control-panel/index.html +++ b/mkdocs/site/docs/getting-started/control-panel/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login @@ -1880,6 +1828,67 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { + + +
  • + + + + Registering an Existing Install (Phone-Home) + + + + + +
  • @@ -2852,6 +2861,67 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { +
    • + +
  • + + + + Registering an Existing Install (Phone-Home) + + + + + +
  • @@ -3391,6 +3461,61 @@ body.cm-search-active .md-header--cm-hidden .md-search__output {
  • Docker socket access restricted to the CCP API container only
    • +

    Registering an Existing Install (Phone-Home)

    +

    Instead of provisioning from scratch, CCP can adopt a Changemaker Lite install that already runs elsewhere. The target host's ccp-agent container phones home with an invite code, you approve the registration in CCP, and CCP issues an mTLS cert bundle for ongoing management.

    +

    1. Generate an invite code in CCP

    +
    curl -s -X POST $CCP_URL/api/invite-codes \
+  -H "Authorization: Bearer $ADMIN_TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{"expiryHours":48}'
+
    +

    The response contains a code like KNZH-B6WW. Invite codes are single-use and expire.

    +

    2. Install the target with --ccp-* flags

    +

    On the host that will be registered:

    +
    bash config.sh -y --enable-all \
+  --domain yourdomain.org \
+  --admin-password 'StrongPassword1' \
+  --ccp-url https://ccp.example.com \
+  --ccp-invite-code KNZH-B6WW \
+  --ccp-agent-url https://100.90.78.47:7443 \
+  # ... tunnel, SMTP, and other flags
+
    +

    All three CCP flags are required together. The wizard:

    +
      +
    • Sets ENABLE_CCP_AGENT=true in .env
      • +
    • Appends ccp-agent to COMPOSE_PROFILES (without clobbering monitoring)
      • +
    • On docker compose up -d, the ccp-agent container starts and phones home
      • +
    +

    3. Approve in CCP

    +
    # List pending registrations
+curl -s $CCP_URL/api/agents/registrations -H "Authorization: Bearer $ADMIN_TOKEN"
+
+# Approve one
+curl -s -X POST $CCP_URL/api/agents/registrations/$REG_ID/approve \
+  -H "Authorization: Bearer $ADMIN_TOKEN" -d '{}'
+
    +

    On approval, CCP issues a mTLS cert bundle. The agent picks it up on its next poll, writes certs to disk, and restarts into mTLS mode. The instance then shows as RUNNING in CCP with live container status via docker compose ps proxied through the agent.

    +
    +

    Approval SLA and rate limits

    +

    The agent polls /api/agents/poll every 30s while waiting. The endpoint accepts up to 180 polls per 15 minutes (one every ~5s upper bound), so the agent comfortably handles human-paced approval times. If the agent does hit HTTP 429, it backs off exponentially (30s → 60s → 120s → 300s cap) and resets on the next successful poll — no manual restart required.

    +
    +

    4. Deregister on teardown

    +

    When you wipe the target host (docker compose down -v + sudo rm -rf), also deregister the instance from CCP. Otherwise the stale Instance row blocks re-registration of the same slug, and CCP will return HTTP 409 SLUG_CONFLICT on the next approval.

    +
    # From the target host (or anywhere with network access to CCP):
+bash scripts/ccp-deregister.sh \
+  --ccp-url https://ccp.example.com \
+  --token $ADMIN_TOKEN \
+  --yes
+
    +

    Defaults: matches by CCP_AGENT_URL from .env. Use --slug or --instance-id for explicit targeting. Dry-run by default.

    +

    The teardown sequence for a registered instance is therefore:

    +
    cd ~/changemaker.lite
+bash scripts/ccp-deregister.sh --token $ADMIN_TOKEN --yes     # CCP-side
+bash scripts/pangolin-teardown.sh --yes                        # Pangolin-side
+docker compose --profile monitoring down -v --remove-orphans  # Docker
+sudo rm -rf ~/changemaker.lite                                 # Filesystem
+
    +

    Next Steps

    • Services Overview — learn about the services CCP provisions for each instance
      • diff --git a/mkdocs/site/docs/getting-started/environment-variables/index.html b/mkdocs/site/docs/getting-started/environment-variables/index.html index da00171f..6372e592 100644 --- a/mkdocs/site/docs/getting-started/environment-variables/index.html +++ b/mkdocs/site/docs/getting-started/environment-variables/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/getting-started/features/index.html b/mkdocs/site/docs/getting-started/features/index.html index 3f6cf5f4..f006f207 100644 --- a/mkdocs/site/docs/getting-started/features/index.html +++ b/mkdocs/site/docs/getting-started/features/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/getting-started/first-steps/index.html b/mkdocs/site/docs/getting-started/first-steps/index.html index d86fca61..968397f6 100644 --- a/mkdocs/site/docs/getting-started/first-steps/index.html +++ b/mkdocs/site/docs/getting-started/first-steps/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login @@ -2581,9 +2529,16 @@ body.cm-search-active .md-header--cm-hidden .md-search__output {

    1. Log In

    Open the admin panel at http://localhost:3000 (or app.DOMAIN in production) and sign in with the admin email and password you configured during setup.

    Login Page

    +
    +

    Where's the password if I let the wizard generate one?

    +

    If you ran config.sh -y without --admin-password, the generated password was printed once to stdout and saved to data/admin-credentials.txt (mode 0600). Retrieve it with:

    +
    cat ~/changemaker.lite/data/admin-credentials.txt
+
    +

    Delete the file once you've saved the password elsewhere (e.g. in Vaultwarden).

    +

    Change your password

    -

    If you used the wizard's generated password, change it immediately from Settings > Organization.

    +

    Whatever password you're logging in with first, change it immediately from Settings > Organization.

    2. Explore the Dashboard

    diff --git a/mkdocs/site/docs/getting-started/index.html b/mkdocs/site/docs/getting-started/index.html index c9eb9bed..40f8cfb0 100644 --- a/mkdocs/site/docs/getting-started/index.html +++ b/mkdocs/site/docs/getting-started/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login @@ -2583,7 +2531,7 @@ body.cm-search-active .md-header--cm-hidden .md-search__output {

    The fastest path — no source code, no compilation:

    curl -fsSL https://gitea.bnkops.com/admin/changemaker.lite/raw/branch/main/scripts/install.sh | bash
    -

    This downloads a lightweight release package (~2 MB), runs the 14-step configuration wizard, and pulls pre-built Docker images. First startup takes ~2 minutes.

    +

    This downloads a release tarball (~15 MB — config, compose files, and MkDocs content), runs the 14-step configuration wizard, and pulls pre-built Docker images. First startup takes ~2 minutes.

    From Source (Development)

    For development or customization:

    git clone https://gitea.bnkops.com/admin/changemaker.lite
diff --git a/mkdocs/site/docs/getting-started/installation/index.html b/mkdocs/site/docs/getting-started/installation/index.html
index 2bafc2ef..f57f970b 100644
--- a/mkdocs/site/docs/getting-started/installation/index.html
+++ b/mkdocs/site/docs/getting-started/installation/index.html
@@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login @@ -1477,6 +1425,23 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { + +
  • @@ -1747,6 +1712,34 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { + +
  • @@ -2640,6 +2633,23 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { + +
  • @@ -2910,6 +2920,34 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { + +
  • @@ -3103,19 +3141,48 @@ body.cm-search-active .md-header--cm-hidden .md-search__output {

    This script:

    1. Checks prerequisites (Docker, Docker Compose, OpenSSL)
      2. +
    2. Checks host port availability — aborts early if any of the ~14 required ports (3000, 4000, 9090, 3030, etc.) are already in use. Prints culprit-specific hints (e.g. cockpit.socket on :9090)
      3. +
    3. Verifies at least 10 GB free disk
    4. Downloads the latest release package from Gitea
    5. Extracts to ~/changemaker.lite/
    6. Launches the configuration wizard (config.sh)
    -

    After the wizard completes, start everything with docker compose up -d.

    +

    After the wizard completes, start everything with docker compose up -d, then verify with bash scripts/test-deployment.sh --wait 60.

    +

    Installer Flags

    +

    The installer accepts a few options for non-default setups. Download the script first, inspect it, then run with flags:

    +
    curl -fsSLO https://gitea.bnkops.com/admin/changemaker.lite/raw/branch/main/scripts/install.sh
+bash install.sh --help
+
    +
    • + + + + + + + + + + + + + + + + + + + + +
    FlagPurpose
    --dir DIRInstall into a directory other than ~/changemaker.lite
    --version TAGPin a specific release (e.g. v2.9.10) instead of latest
    --tarball FILEUse a local tarball — skip the Gitea download entirely

    Manual Download

    If you prefer not to pipe to bash:

    -
    # Download latest release
-curl -LO https://gitea.bnkops.com/admin/changemaker.lite/releases/latest/download/changemaker-lite-latest.tar.gz
-tar xzf changemaker-lite-latest.tar.gz
-cd changemaker-lite
-bash config.sh
-docker compose up -d
+
    # Download latest release
+curl -LO https://gitea.bnkops.com/admin/changemaker.lite/releases/latest/download/changemaker-lite-latest.tar.gz
+tar xzf changemaker-lite-latest.tar.gz
+cd changemaker-lite
+bash config.sh
+docker compose up -d
 
    
 
    What's Different from Source Install
    
 
@@ -3130,7 +3197,7 @@ body.cm-search-active .md-header--cm-hidden .md-search__output {
 
-
+
@@ -3247,6 +3314,10 @@ Use source install when you want to modify the platform code or
 
  • At least one digit
  • Requires password confirmation
    • 
+
    
+
    Non-interactive password
    
+
    If you run with -y and omit --admin-password, the wizard generates a strong password and also writes it to data/admin-credentials.txt with mode 0600. Retrieve it with cat ~/changemaker.lite/data/admin-credentials.txt, then delete the file once saved elsewhere (e.g. Vaultwarden). Explicit --admin-password is never persisted to disk by config.sh.
    
+
    Step 5: Secret Generation
    Auto-generates 21 unique secrets — no placeholder passwords remain after this step:
    
 Download size
 ~200 MB (full repo)~2 MB (config + scripts)~15 MB (config, compose, MkDocs content)
 
    
 
    
 First startup
 
 
 
 
 
    
@@ -3389,7 +3460,7 @@ Use source install when you want to modify the platform code or
 
    Complete tunnel setup is done from the admin GUI at Settings > Tunnel after services are running.
    Step 9: CORS Origins
    Automatically calculates allowed origins from your domain:
    
-
    http://app.DOMAIN,https://app.DOMAIN,http://DOMAIN,https://DOMAIN,http://localhost:3000,http://localhost,http://localhost:4003
+
    http://app.DOMAIN,https://app.DOMAIN,http://DOMAIN,https://DOMAIN,http://localhost:3000,http://localhost,http://localhost:4003
 
    
 
    Step 10: Nginx Config Generation
    
 
    Renders all .conf.template files in nginx/conf.d/ by substituting ${DOMAIN} with your configured domain. This produces the nginx configuration files that handle subdomain routing.
    
@@ -3504,20 +3575,20 @@ Use source install when you want to modify the platform code or
 
    
 
    Manual Setup (Alternative)
    
 
    If you prefer to configure by hand instead of using the wizard:
    
-
    cp .env.example .env
+
    cp .env.example .env
 
    
 
    At minimum, set these required secrets:
    
-
    # Generate cryptographic secrets
-V2_POSTGRES_PASSWORD=$(openssl rand -base64 48 | tr -dc 'a-zA-Z0-9' | head -c 24)
-REDIS_PASSWORD=$(openssl rand -base64 48 | tr -dc 'a-zA-Z0-9' | head -c 24)
-JWT_ACCESS_SECRET=$(openssl rand -hex 32)
-JWT_REFRESH_SECRET=$(openssl rand -hex 32)
-JWT_INVITE_SECRET=$(openssl rand -hex 32)
-ENCRYPTION_KEY=$(openssl rand -hex 32)   # must differ from all JWT secrets
+
    # Generate cryptographic secrets
+V2_POSTGRES_PASSWORD=$(openssl rand -base64 48 | tr -dc 'a-zA-Z0-9' | head -c 24)
+REDIS_PASSWORD=$(openssl rand -base64 48 | tr -dc 'a-zA-Z0-9' | head -c 24)
+JWT_ACCESS_SECRET=$(openssl rand -hex 32)
+JWT_REFRESH_SECRET=$(openssl rand -hex 32)
+JWT_INVITE_SECRET=$(openssl rand -hex 32)
+ENCRYPTION_KEY=$(openssl rand -hex 32)   # must differ from all JWT secrets
 
    
 
    Set your admin credentials (password must meet the 12+ char complexity requirement):
    
-
    INITIAL_ADMIN_EMAIL=admin@yourdomain.org
-INITIAL_ADMIN_PASSWORD=YourStrongPassword1
+
    INITIAL_ADMIN_EMAIL=admin@yourdomain.org
+INITIAL_ADMIN_PASSWORD=YourStrongPassword1
 
    
 
    Then configure optional sections:
    
 
      
@@ -3530,7 +3601,7 @@ Use source install when you want to modify the platform code or
 
      
 
      Full Stack Startup
      
 
      After configuration, start the entire platform:
      
-
      docker compose up -d
+
      docker compose up -d
 
      
 
      That's it. Docker handles the startup order automatically:
      
 
        
@@ -3541,42 +3612,61 @@ Use source install when you want to modify the platform code or
 
      1. Init containers (nocodb-init, listmonk-init, etc.) run once and exit
        2. 
 
      
 
      Watch the startup progress:
      
-
      docker compose logs -f api --tail 20
+
      docker compose logs -f api --tail 20
 
      
 
      Once you see Starting server on port 4000, open http://localhost:3000 and log in.
      
+
      
+
      Quick sanity check
      
+
      Three commands confirm a healthy install — run them in order:
      
+
      docker compose ps                              # all core containers healthy?
+curl -s http://localhost:4000/api/health       # should return {"status":"healthy",...}
+bash scripts/test-deployment.sh --wait 60      # end-to-end verifier
+
      
+
      If all three pass, you're done. See Verifying Installation below for manual checks if anything fails.
      
+
      
 
      Include Monitoring
      
 
      The monitoring stack (Prometheus, Grafana, Alertmanager) uses a Docker Compose profile and isn't included by default:
      
-
      docker compose --profile monitoring up -d
+
      docker compose --profile monitoring up -d
 
      
 
      Start Only Core Services
      
 
      If you prefer a minimal startup (lower resource usage):
      
-
      docker compose up -d v2-postgres redis api admin nginx
+
      docker compose up -d v2-postgres redis api admin nginx
 
      
 
      
 
      Manual migrations
      
 
      The API container runs migrations and seeding automatically on startup via its
 entrypoint script. You only need to run them manually if you're developing
 locally without Docker:
      
-
      cd api && npx prisma migrate deploy && npx prisma db seed
+
      cd api && npx prisma migrate deploy && npx prisma db seed
 
      
 
      
 
      See Services Overview for the complete service catalog.
      
 
      
 
      Verifying Installation
      
-
      After starting services, verify everything is healthy:
      
-
      # Check running containers
-docker compose ps
-
-# API health check
-curl -s http://localhost:4000/api/health | python3 -m json.tool
-
-# View API logs
-docker compose logs api --tail 20
-
-# Check for containers in restart loops
-docker compose ps | grep -i restarting
+
      Changemaker Lite ships a one-shot deployment verifier. Run it after docker compose up -d:
      
+
      bash scripts/test-deployment.sh --wait 60
 
      
-
      You should see the API return {"status":"ok"} and all started containers in a "running" state.
      
+
      --wait 60 gives services time to pass their healthchecks on a cold start (first-run image pulls take ~3 min and health stabilization ~90s — brief unhealthy states during this window are expected). The script checks:
      
+
        
+
      • All containers running with healthy healthchecks
        • 
+
      • API /api/health returns "healthy" with database + Redis OK
        • 
+
      • Admin and media API endpoints respond
        • 
+
      • (If --domain yourdomain.org passed) tunnel subdomains return 200/302/403
        • 
+
      
+
      Any failure is printed with the failing component. If everything passes, your install is ready.
      
+
      Manual checks
      
+
      docker compose ps                                         # container status
+curl -s http://localhost:4000/api/health | python3 -m json.tool  # API health
+docker compose logs api --tail 20                         # API startup logs
+bash scripts/validate-env.sh                              # re-check .env + host ports
+
      
+
      Clean reset before reinstall
      
+
      If you need to wipe and start over:
      
+
      docker compose --profile monitoring down -v --remove-orphans
+bash scripts/pangolin-teardown.sh --yes   # wipes the tunnel org (dry-run by default)
+sudo rm -rf ~/changemaker.lite
+
      
+
      For CCP-registered instances, also run bash scripts/ccp-deregister.sh --yes before removing the project directory — otherwise the CCP retains a stale Instance row that blocks re-registration of the same slug.
      
 
      
 
      Next Steps
      
 
        
diff --git a/mkdocs/site/docs/getting-started/prerequisites/index.html b/mkdocs/site/docs/getting-started/prerequisites/index.html
index f594dbe5..2dd71c87 100644
--- a/mkdocs/site/docs/getting-started/prerequisites/index.html
+++ b/mkdocs/site/docs/getting-started/prerequisites/index.html
@@ -131,38 +131,12 @@
   
      
   
      
     
      
-      homeHome
+      homeHome
       sendCampaigns
-      placeMap
-      
      
-        
-          apps
-          Scheduling
-          expand_more
-        
-        
      
-      scheduleShifts
-      eventCalendar
-      bar_chartPolls
-        
      
-      
      
-      play_circleGallery
-      
      
-        
-          account_balance_wallet
-          Commerce
-          expand_more
-        
-        
      
-      attach_moneyPricing
-      shopping_bagShop
-      favorite_borderDonate
-        
      
-      
      
-      emoji_eventsWall of Fame
-      descriptionPages
-      languageWebsite
-      menu_bookDocs
+      eventEvents
+      attach_moneyPricing
+      shopping_bagShop
+      favorite_borderDonate
       
@@ -213,38 +187,12 @@
       Docs Navigation
     
     
      
-    homeHome
+    homeHome
     sendCampaigns
-    placeMap
-    
      
-      
-        apps
-        Scheduling
-        expand_more
-      
-      
      
-      scheduleShifts
-      eventCalendar
-      bar_chartPolls
-      
      
-    
      
-    play_circleGallery
-    
      
-      
-        account_balance_wallet
-        Commerce
-        expand_more
-      
-      
      
-      attach_moneyPricing
-      shopping_bagShop
-      favorite_borderDonate
-      
      
-    
      
-    emoji_eventsWall of Fame
-    descriptionPages
-    languageWebsite
-    menu_bookDocs
+    eventEvents
+    attach_moneyPricing
+    shopping_bagShop
+    favorite_borderDonate
     
      
     
       login
@@ -2901,6 +2849,12 @@ body.cm-search-active .md-header--cm-hidden .md-search__output {
 
 
    
 
 
    
 
    Options: A VPS from DigitalOcean, Hetzner, Linode, or a spare machine on your network. If using a tunnel (Pangolin), the server doesn't need a public IP.
    
+
    
+
    Watch out for host-level services on our ports
    
+
    Changemaker Lite binds ~14 host ports including 9090 (Prometheus), 3000 (admin), 4000 (API), 3030 (Gitea), and 8091 (NocoDB). If another service on your host already uses any of these, docker compose up -d will partially succeed and leave the stack in a broken state.
    
+
    Common culprit: cockpit.socket — Ubuntu Server's web admin UI — binds :9090 by default. Disable it with sudo systemctl disable --now cockpit.socket before installing, or reconfigure cockpit to a different port.
    
+
    The installer runs ss -Htln against the required ports before downloading the tarball and aborts with specific remediation hints if any are bound. You can also run the check manually after install with bash scripts/validate-env.sh.
    
+
    
 
    
 
    Optional (Enhance Your Deployment)
    
 
    These are not required but unlock additional platform features:
    
@@ -2931,7 +2885,8 @@ body.cm-search-active .md-header--cm-hidden .md-search__output {
 
  •  Tunnel or public IP — Pangolin credentials (API key + Org ID), or server with public IP + SSL
    • 
 
  •  SMTP credentials — host, port, username, password from your email provider
    • 
 
  •  Linux server with Docker 24+ and Docker Compose v2 installed
    • 
-
  •  OpenSSL installed (for generating secrets during setup)
    • 
+
  •  OpenSSL + ss (from iproute2) installed (for secret generation + host port check)
    • 
+
  •  Host ports free — if cockpit is enabled, sudo systemctl disable --now cockpit.socket
    • 
 
  •  (Optional) Stripe account for payments
    • 
 
  •  (Optional) Mapbox or Google Maps API key for geocoding
    • 
 
  •  (Optional) MaxMind account for geographic analytics
    • 
diff --git a/mkdocs/site/docs/getting-started/services/index.html b/mkdocs/site/docs/getting-started/services/index.html
index 90965f55..52bbb163 100644
--- a/mkdocs/site/docs/getting-started/services/index.html
+++ b/mkdocs/site/docs/getting-started/services/index.html
@@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/getting-started/upgrades/index.html b/mkdocs/site/docs/getting-started/upgrades/index.html index b03f70bb..8ed4aae1 100644 --- a/mkdocs/site/docs/getting-started/upgrades/index.html +++ b/mkdocs/site/docs/getting-started/upgrades/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/index.html b/mkdocs/site/docs/index.html index 7af2ee09..e2b0ee3e 100644 --- a/mkdocs/site/docs/index.html +++ b/mkdocs/site/docs/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/phil/index.html b/mkdocs/site/docs/phil/index.html index 1de5b5d6..7ddbee9a 100644 --- a/mkdocs/site/docs/phil/index.html +++ b/mkdocs/site/docs/phil/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/services/index.html b/mkdocs/site/docs/services/index.html index 1a51a8ec..e5fc2ab9 100644 --- a/mkdocs/site/docs/services/index.html +++ b/mkdocs/site/docs/services/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login @@ -2198,7 +2146,7 @@ body.cm-search-active .md-header--cm-hidden .md-search__output {

    Services

    -

    Changemaker Lite orchestrates 20+ services via Docker Compose. This page is your map to every service: what it does, how to reach it, and where to find its upstream documentation.

    +

    Changemaker Lite orchestrates 30+ services via Docker Compose. This page is your map to every service: what it does, how to reach it, and where to find its upstream documentation.

    Core Platform

    The essential services that power the application.

    @@ -2228,7 +2176,7 @@ body.cm-search-active .md-header--cm-hidden .md-search__output {

  • PostgreSQL 16

    -

    Primary database shared by both APIs. Managed by Prisma migrations. Contains 30+ tables covering users, campaigns, locations, shifts, media, and more.

    +

    Primary database shared by both APIs. Managed by Prisma migrations. Contains 190+ tables covering users, campaigns, locations, shifts, media, and more.

    Port: 5433 (host) / 5432 (container) · Container: changemaker-v2-postgres

    PostgreSQL Docs

    • diff --git a/mkdocs/site/docs/troubleshooting/index.html b/mkdocs/site/docs/troubleshooting/index.html index 91e1c14d..5b87424d 100644 --- a/mkdocs/site/docs/troubleshooting/index.html +++ b/mkdocs/site/docs/troubleshooting/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/user-guide/campaigns/index.html b/mkdocs/site/docs/user-guide/campaigns/index.html index 76725329..4fa99f17 100644 --- a/mkdocs/site/docs/user-guide/campaigns/index.html +++ b/mkdocs/site/docs/user-guide/campaigns/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login @@ -2522,7 +2470,7 @@ body.cm-search-active .md-header--cm-hidden .md-search__output {

    Each campaign has a public response wall where supporters share how their representatives responded. Responses can be upvoted and are moderated by admins. Verified responses display a trust badge.

    Submit Your Own Campaign

    -

    Registered users can draft and submit their own advocacy campaigns at /campaigns/create. Submissions go through admin review before being published.

    +

    Registered users can draft and submit their own advocacy campaigns at /campaigns/create. Submissions go through admin review before being published.

    Public Routes

      diff --git a/mkdocs/site/docs/user-guide/donations/index.html b/mkdocs/site/docs/user-guide/donations/index.html index bb5670c9..62b5661f 100644 --- a/mkdocs/site/docs/user-guide/donations/index.html +++ b/mkdocs/site/docs/user-guide/donations/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login @@ -1791,6 +1739,17 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { + + +
  • + + + + For Admins + + + +
    • @@ -2359,6 +2318,17 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { + + +
  • + + + + For Admins + + + +
    • @@ -2511,6 +2481,9 @@ body.cm-search-active .md-header--cm-hidden .md-search__output {
  • /donate — browse donation pages
  • /donate/:slug — donate on a specific campaign page
    • +
    +

    For Admins

    +

    Donation pages are configured in Admin → Payments → Donations, including goals, suggested amounts, and thank-you messages.

    diff --git a/mkdocs/site/docs/user-guide/events/index.html b/mkdocs/site/docs/user-guide/events/index.html index 2ebe4f83..ef350bc9 100644 --- a/mkdocs/site/docs/user-guide/events/index.html +++ b/mkdocs/site/docs/user-guide/events/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login @@ -2500,7 +2448,7 @@ body.cm-search-active .md-header--cm-hidden .md-search__output {

    Events (Gancio)

    -

    Integrated with Gancio for self-hosted event management. When enabled, volunteer shifts are automatically published as public events.

    +

    Integrated with Gancio for self-hosted event management. When enabled, volunteer shifts are automatically published as public events. See Integrations for admin setup.

    Shift-to-Event Sync

    When GANCIO_SYNC_ENABLED=true, the platform:

    diff --git a/mkdocs/site/docs/user-guide/gallery/index.html b/mkdocs/site/docs/user-guide/gallery/index.html index 7ef1fdc7..86feb8bb 100644 --- a/mkdocs/site/docs/user-guide/gallery/index.html +++ b/mkdocs/site/docs/user-guide/gallery/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/user-guide/index.html b/mkdocs/site/docs/user-guide/index.html index cf93d0b6..d6fa4aa0 100644 --- a/mkdocs/site/docs/user-guide/index.html +++ b/mkdocs/site/docs/user-guide/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/user-guide/map/index.html b/mkdocs/site/docs/user-guide/map/index.html index 1f053c36..4e95e336 100644 --- a/mkdocs/site/docs/user-guide/map/index.html +++ b/mkdocs/site/docs/user-guide/map/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/user-guide/profile/index.html b/mkdocs/site/docs/user-guide/profile/index.html index d5551bd6..01bade15 100644 --- a/mkdocs/site/docs/user-guide/profile/index.html +++ b/mkdocs/site/docs/user-guide/profile/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/user-guide/shifts/index.html b/mkdocs/site/docs/user-guide/shifts/index.html index a0c8fd35..0c35cb6c 100644 --- a/mkdocs/site/docs/user-guide/shifts/index.html +++ b/mkdocs/site/docs/user-guide/shifts/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/user-guide/shop/index.html b/mkdocs/site/docs/user-guide/shop/index.html index 313e6345..964596a3 100644 --- a/mkdocs/site/docs/user-guide/shop/index.html +++ b/mkdocs/site/docs/user-guide/shop/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login @@ -1753,6 +1701,17 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { + + +
  • + + + + For Admins + + + +
    • @@ -2359,6 +2318,17 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { + + +
  • + + + + For Admins + + + +
    • @@ -2509,6 +2479,13 @@ body.cm-search-active .md-header--cm-hidden .md-search__output {
  • /shop — browse products
  • /pricing — view subscription plans
    • +
    +

    For Admins

    +
      +
    • Products — manage merchandise and inventory
      • +
    • Plans — configure subscription tiers and pricing
      • +
    • Payment settings — Stripe API key configuration
      • +
    diff --git a/mkdocs/site/docs/volunteer/achievements/index.html b/mkdocs/site/docs/volunteer/achievements/index.html index 7162f585..5ceff774 100644 --- a/mkdocs/site/docs/volunteer/achievements/index.html +++ b/mkdocs/site/docs/volunteer/achievements/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/volunteer/canvassing/index.html b/mkdocs/site/docs/volunteer/canvassing/index.html index ddc3458d..9b6a1fdb 100644 --- a/mkdocs/site/docs/volunteer/canvassing/index.html +++ b/mkdocs/site/docs/volunteer/canvassing/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/volunteer/index.html b/mkdocs/site/docs/volunteer/index.html index dfb0f6f9..83b5c077 100644 --- a/mkdocs/site/docs/volunteer/index.html +++ b/mkdocs/site/docs/volunteer/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/docs/volunteer/shifts/index.html b/mkdocs/site/docs/volunteer/shifts/index.html index 2592ad22..8f110d6e 100644 --- a/mkdocs/site/docs/volunteer/shifts/index.html +++ b/mkdocs/site/docs/volunteer/shifts/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login @@ -1683,6 +1631,17 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { + + +
  • + + + + Related + + + +
    • @@ -2223,6 +2182,17 @@ body.cm-search-active .md-header--cm-hidden .md-search__output { + + +
  • + + + + Related + + + +
    • @@ -2373,6 +2343,13 @@ body.cm-search-active .md-header--cm-hidden .md-search__output {
  • /volunteer/shifts — view assigned shifts
  • /volunteer/activity — visit history and outcome breakdown
    • +
    + + diff --git a/mkdocs/site/docs/volunteer/social/index.html b/mkdocs/site/docs/volunteer/social/index.html index 3287197f..efead4a8 100644 --- a/mkdocs/site/docs/volunteer/social/index.html +++ b/mkdocs/site/docs/volunteer/social/index.html @@ -131,38 +131,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -213,38 +187,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/includes/abbreviations/index.html b/mkdocs/site/includes/abbreviations/index.html index 1cecbb5a..31f537f0 100644 --- a/mkdocs/site/includes/abbreviations/index.html +++ b/mkdocs/site/includes/abbreviations/index.html @@ -122,38 +122,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -204,38 +178,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/main/index.html b/mkdocs/site/main/index.html index 23236743..9b47ea17 100644 --- a/mkdocs/site/main/index.html +++ b/mkdocs/site/main/index.html @@ -122,38 +122,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -204,38 +178,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/overrides/main.html b/mkdocs/site/overrides/main.html index 3bafc1fb..9810fa80 100644 --- a/mkdocs/site/overrides/main.html +++ b/mkdocs/site/overrides/main.html @@ -11,38 +11,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -93,38 +67,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/search/search_index.json b/mkdocs/site/search/search_index.json index 565af328..a2bdc43f 100644 --- a/mkdocs/site/search/search_index.json +++ b/mkdocs/site/search/search_index.json @@ -1 +1 @@ -{"config":{"lang":["en"],"separator":"[\\s\\u200b\\-_,:!=\\[\\]()\"`/]+|\\.(?!\\d)|&[lg]t;|(?!\\b)(?=[A-Z][a-z])","pipeline":["stopWordFilter"],"fields":{"title":{"boost":1000.0},"text":{"boost":1.0},"tags":{"boost":1000000.0}}},"docs":[{"location":"test-page/","title":"Test Page","text":"

    Testing

    testing testing one two

    hello is this content going to show?

    "},{"location":"test/","title":"test","text":"

    Hello!

    Testing this editing system.

    "},{"location":"blog/","title":"Blog","text":""},{"location":"blog/2026/03/27/test-blog-post---version-7/","title":"Test Blog Post - Version 7","text":"

    This version uses the auto-setup token.

    "},{"location":"blog/2026/03/22/introducing-changemaker-lite-v2/","title":"Introducing Changemaker Lite v2","text":"

    Changemaker Lite v2 is a ground-up rebuild of the platform \u2014 same mission, entirely new architecture. After 14 phases of development, the platform is ready for production use.

    ","tags":["v2","release","self-hosted","FOSS"]},{"location":"blog/2026/03/22/introducing-changemaker-lite-v2/#what-changed","title":"What Changed","text":"

    V1 was two independent Express apps stitched together with NocoDB as a data layer. It worked, but scaling features meant fighting the architecture at every turn.

    V2 is a unified TypeScript stack:

    • Dual API architecture \u2014 Express.js for the main platform, Fastify for the media library, sharing a single PostgreSQL 16 database via Prisma ORM
    • React admin GUI \u2014 Vite + Ant Design + Zustand, serving admin, public, and volunteer interfaces from one build
    • 30+ Docker services \u2014 from core infrastructure to monitoring, communication, and developer tools
    • JWT authentication with refresh token rotation, role-based access control (11 roles), and a comprehensive security audit
    ","tags":["v2","release","self-hosted","FOSS"]},{"location":"blog/2026/03/22/introducing-changemaker-lite-v2/#whats-new","title":"What's New","text":"

    The feature set has grown substantially:

    • Advocacy campaigns with postal code \u2192 representative lookup, email sending, response walls, and moderation
    • Map & canvassing with multi-provider geocoding, polygon territories, GPS-tracked volunteer sessions, and walking route generation
    • Media manager with video upload, FFprobe metadata extraction, scheduled publishing, analytics, and a public gallery
    • Landing page builder powered by GrapesJS with drag-and-drop editing
    • Payments via encrypted Stripe integration \u2014 products, donations, and subscription plans
    • SMS campaigns via a Termux Android bridge
    • Team communication with self-hosted Rocket.Chat and Jitsi Meet
    • People CRM aggregating contacts across all modules with duplicate detection and merge
    • Volunteer social features \u2014 friend system, achievements, leaderboards, and a personal calendar
    • One-command install \u2014 curl | bash pulls a release tarball and runs the config wizard
    ","tags":["v2","release","self-hosted","FOSS"]},{"location":"blog/2026/03/22/introducing-changemaker-lite-v2/#why-self-hosted","title":"Why Self-Hosted","text":"

    Every subscription to corporate campaign software funds infrastructure you don't control. Your voter lists, canvassing outcomes, and communication patterns become assets on someone else's balance sheet.

    Changemaker Lite costs roughly the price of a VPS \u2014 often under $50/month for the full stack. But the real value isn't cost savings. It's control. No vendor can cut off your access. No acquisition can change your terms.

    Read more in our Philosophy page.

    ","tags":["v2","release","self-hosted","FOSS"]},{"location":"blog/2026/03/22/introducing-changemaker-lite-v2/#get-started","title":"Get Started","text":"
    curl -fsSL https://gitea.bnkops.com/admin/changemaker.lite/raw/branch/main/scripts/install.sh | bash\n

    Or follow the Getting Started guide for a walkthrough.

    ","tags":["v2","release","self-hosted","FOSS"]},{"location":"blog/2026/03/22/introducing-changemaker-lite-v2/#whats-next","title":"What's Next","text":"

    Phase 15 (Testing & Polish) is underway. We're also working on:

    • Social Calendar Phase B (shared views, availability finder)
    • Expanded test coverage
    • Performance optimization for large location datasets

    Follow this blog for updates, or subscribe to the newsletter.

    ","tags":["v2","release","self-hosted","FOSS"]},{"location":"comments/callback/","title":"Signing in...","text":"

    Completing sign in...

    You will be redirected back to the page you were on.

    "},{"location":"docs/","title":"Documentation","text":"

    Welcome to the Changemaker Lite documentation. Whether you're a campaign volunteer, an admin managing operations, or a sysadmin deploying the platform \u2014 start here.

    ","tags":["guide","getting-started"],"boost":2},{"location":"docs/#use-the-platform","title":"Use the Platform","text":"

    • Getting Started

      Install Changemaker Lite, create your first admin account, and explore the dashboard.

      Getting Started

    • Feature Guides

      Campaigns, email advocacy, response walls, map locations, landing pages, and media.

      Feature Guides

    • Administration

      User management, roles and permissions, site settings, email templates, and newsletters.

      Administration

    • Volunteer Guide

      Sign up for shifts, use the canvassing map, record visits, and track your activity.

      Volunteer Guide

    ","tags":["guide","getting-started"],"boost":2},{"location":"docs/#deploy-operate","title":"Deploy & Operate","text":"

    • Deployment

      Docker Compose setup, environment variables, SSL/TLS, backups, and production checklist.

      Deployment

    • Architecture

      Dual API design, database schema, authentication flow, and system diagram.

      Architecture

    • Services

      Nginx routing, Redis, PostgreSQL, Listmonk, MkDocs, Gitea, NocoDB, and more.

      Services

    • Monitoring

      Prometheus metrics, Grafana dashboards, Alertmanager rules, and health checks.

      Monitoring

    ","tags":["guide","getting-started"],"boost":2},{"location":"docs/#reference","title":"Reference","text":"

    • API Reference

      REST endpoints for auth, campaigns, locations, shifts, media, and more.

      API Reference

    • Troubleshooting

      Common errors, CORS issues, database problems, tunnel debugging, and FAQ.

      Troubleshooting

    • Security

      Password policy, rate limiting, token rotation, encryption, and audit report.

      Security See Deployment

    • Contributing

      Development setup, code style, git workflow, and pull request guidelines.

      Contributing

    ","tags":["guide","getting-started"],"boost":2},{"location":"docs/#platform-at-a-glance","title":"Platform at a Glance","text":"Component Technology Purpose Main API Express.js + Prisma Auth, campaigns, map, shifts, pages, email Media API Fastify + Prisma Video library, analytics, upload, scheduling Admin GUI React + Ant Design + Zustand Dashboard for admins and organizers Database PostgreSQL 16 Single shared database for both APIs Cache Redis Rate limiting, BullMQ jobs, geocoding queue Proxy Nginx Subdomain routing, security headers, SSL Tunnel Pangolin + Newt Expose services without port forwarding Monitoring Prometheus + Grafana Metrics, dashboards, alerts

    New here?

    Start with the Getting Started guide to have the platform running in under 30 minutes.

    Looking for the source?

    Changemaker Lite is 100% open source. Browse the code on Gitea.

    ","tags":["guide","getting-started"],"boost":2},{"location":"docs/phil/","title":"Philosophy","text":"","tags":["concept","philosophy","FOSS"]},{"location":"docs/phil/#software-is-political","title":"Software Is Political","text":"

    Every tool your movement adopts shapes how you organize. Proprietary platforms reinforce hierarchy \u2014 the vendor decides what features you get, what data you can export, and what happens when you stop paying. Community-controlled tools support democratic autonomy because the people using them decide how they work.

    If you do politics, who is reading your secrets? Corporate platforms harvest political intelligence systematically. Facebook chat data has been used in criminal prosecutions. Social media platforms are leveraged for political coordination and surveillance. When you organize on corporate infrastructure, you hand your strategies, your voter data, and your movement's internal conversations to entities that may have every reason to work against you.

    Changemaker Lite exists because we believe organizational independence requires technological independence.

    ","tags":["concept","philosophy","FOSS"]},{"location":"docs/phil/#the-extractive-model","title":"The Extractive Model","text":"

    Most campaign and political software is extractive by design. The pattern is familiar:

    1. Free trial hooks you in
    2. Paid features gate the tools you actually need
    3. Data export becomes difficult or impossible
    4. Pricing escalates as you grow and become dependent
    5. Your usage patterns are monetized through data partnerships, behavioral analytics, and enterprise contracts

    This isn't a side effect \u2014 it's the business model. You pay with money and with data. Your voter lists, canvassing outcomes, donor records, and communication patterns become assets on someone else's balance sheet.

    Every subscription to corporate software funds the machine you're fighting.

    ","tags":["concept","philosophy","FOSS"]},{"location":"docs/phil/#the-alternative-grow-power-dont-rent-it","title":"The Alternative: Grow Power, Don't Rent It","text":"

    Changemaker asks a different question than most political tech: instead of \"how do we extract more data from a community?\" we ask \"what tools are needed to grow change in a community?\"

    Growing change means:

    • Making real connections between organizers, volunteers, and community members \u2014 not just collecting their contact info
    • Providing access to the same caliber of tools that well-funded campaigns use \u2014 without the price tag or the surveillance
    • Deeply understanding the wants and needs of your movement \u2014 on infrastructure you control, with data you own
    ","tags":["concept","philosophy","FOSS"]},{"location":"docs/phil/#distributed-organizing-is-the-way-out","title":"Distributed Organizing Is The Way Out","text":"

    Socialist movements will never outspend capital. Progressive organizations cannot compete financially with well-funded conservative movements, and chasing big-donor dollars leads to mission drift and organizational capture \u2014 what some call the Political Industrial Complex.

    A thousand neighborhood mailing lists has more potential impact than any single organization. When organizing knowledge and digital tools are widely distributed \u2014 not gatekept by leadership or locked behind vendor paywalls \u2014 movements become genuinely resilient.

    The historical pattern is clear: worker victories occurred when organizing knowledge was widely distributed, not concentrated at the top. Changemaker Lite is built on this premise \u2014 provide the tools freely, train people to use them, and get out of the way.

    Workers, with the right tools, will build the future.

    ","tags":["concept","philosophy","FOSS"]},{"location":"docs/phil/#de-corp-your-stack","title":"De-Corp Your Stack","text":"

    The practical work of digital sovereignty starts with replacing corporate services one at a time:

    Corporate Tool Changemaker Alternative What You Gain Mailchimp Listmonk Unlimited subscribers, no per-send charges, your data stays local NationBuilder Changemaker Lite Full campaign platform without the $50-500/month ransom Google Docs Gitea + Code Server Version control, collaboration, no algorithmic scanning Slack Rocket.Chat Team chat with SSO, no message limits, no corporate eavesdropping SurveyMonkey Response Wall Supporter voices on your terms, with moderation you control Google Maps Self-hosted Leaflet No API fees, no tracking, offline-capable canvassing

    The cost reduction is dramatic. Organizations spending thousands monthly on SaaS tools can replace them with a single self-hosted server running Changemaker Lite for roughly the cost of hosting \u2014 often under $50/month.

    But the real value isn't cost savings. It's control. No vendor can cut off your access. No acquisition can change your terms. No government can compel a foreign company to hand over your data. Your movement's digital infrastructure belongs to your movement.

    ","tags":["concept","philosophy","FOSS"]},{"location":"docs/phil/#security-culture-starts-with-infrastructure","title":"Security Culture Starts With Infrastructure","text":"

    Security culture isn't just about who knows what \u2014 it's about who can know what. When your communications run through corporate servers, you've made a structural decision about who has access before you've even thought about operational security.

    Key principles:

    • Compartmentalization by design \u2014 Self-hosted systems let you control exactly who has access to what, at the infrastructure level
    • No third-party access \u2014 No corporate subpoenas for your data, no partnership agreements sharing your information
    • Audit everything \u2014 When you run the servers, you can verify that your security promises are real, not just marketing
    • Consent and autonomy \u2014 Your community sets its own security boundaries rather than accepting whatever a vendor's privacy policy allows

    You wouldn't hold a sensitive strategy meeting in a room wired by someone else. Why would you plan your campaign on someone else's servers?

    ","tags":["concept","philosophy","FOSS"]},{"location":"docs/phil/#our-principles","title":"Our Principles","text":"

    Liberation First Technology should center marginalized voices. The tools we build reflect the values we hold, and they shape the movements that use them.

    Community Over Profit Changemaker Lite is free and open source software, built by a cooperative \u2014 not a startup looking for an exit. There are no shareholders to satisfy, no venture capitalists to answer to. The software serves the community because that's the only thing it's designed to do.

    Data Sovereignty Communities should own their complete digital infrastructure. Not just the content \u2014 the servers, the databases, the encryption keys, and the ability to pack up and leave at any time.

    Radical Accessibility Self-hosted doesn't have to mean self-excluding. Changemaker Lite is designed for organizers, not sysadmins. If you can follow a guide to set up a WordPress site, you can run this platform.

    ","tags":["concept","philosophy","FOSS"]},{"location":"docs/phil/#further-reading","title":"Further Reading","text":"

    These articles explore the ideas behind Changemaker Lite in depth:

    • If You Do Politics, Who Is Reading Your Secrets? \u2014 Why you should de-corp your software stack
    • Distributed Digital Organizing Is The Way Out \u2014 Why decentralized power structures outperform centralized ones
    • How Not To Get Got Making Content \u2014 Platform independence for political content creators
    • What Is Security Culture? \u2014 The foundations of security culture for movements
    ","tags":["concept","philosophy","FOSS"]},{"location":"docs/admin/","title":"Admin Guide","text":"

    The admin panel at /app is your command center for managing the entire platform. Use the sidebar to navigate between modules, or press Ctrl+K to open the command palette for quick access to any page, setting, or action.

    ","tags":["guide","admin"]},{"location":"docs/admin/#sections","title":"Sections","text":"

    • Dashboard

      Live overview of platform activity, upcoming shifts, email stats, and service health.

    • People & Access

      User management, roles, the People CRM, and contact merging.

    • Advocacy

      Campaigns, response moderation, representative lookup, and email queue monitoring.

    • Broadcast

      Newsletter sync, email templates, and SMS campaigns.

    • Web Content

      Landing pages, homepage, navigation menu, and documentation management.

    • Map & Canvassing

      Locations, areas, shifts, canvassing dashboard, data quality, and map settings.

    • Media

      Video/photo library, analytics, playlists, comment moderation, and gallery ads.

    • Payments

      Products, donations, subscription plans, and Stripe configuration.

    • Services

      Tunnel management, monitoring, and third-party integrations.

    • Settings

      Organization branding, theme colors, email config, feature toggles, and notifications.

    ","tags":["guide","admin"]},{"location":"docs/admin/#roles-reference","title":"Roles Reference","text":"Role Access Level SUPER_ADMIN Full platform access \u2014 implicitly bypasses all role checks INFLUENCE_ADMIN Campaigns, responses, representatives, email queue MAP_ADMIN Locations, areas, shifts, canvassing, data quality BROADCAST_ADMIN Newsletter sync, email templates CONTENT_ADMIN Landing pages, homepage, navigation, documentation MEDIA_ADMIN Video library, analytics, gallery, moderation, ads PAYMENTS_ADMIN Products, donations, plans, Stripe configuration EVENTS_ADMIN Gancio event sync and calendar management SOCIAL_ADMIN Social connections, achievements, calendar layers USER Volunteer portal only TEMP Limited volunteer access (auto-created on shift signup)","tags":["guide","admin"]},{"location":"docs/admin/dashboard/","title":"Dashboard","text":"

    The admin dashboard (/app) provides a real-time overview of platform activity.

    ","tags":["guide","admin"]},{"location":"docs/admin/dashboard/#dashboard-cards","title":"Dashboard Cards","text":"
    • Platform Stats \u2014 active campaigns, total emails sent, registered users, and location count
    • Activity Feed \u2014 recent events across all modules (signups, emails, visits, responses)
    • Upcoming Shifts \u2014 next scheduled volunteer shifts with signup counts
    • Newsletter Stats \u2014 Listmonk subscriber counts and recent campaign performance
    • Chat Activity \u2014 Rocket.Chat channel activity and online users (when chat is enabled)
    • Service Health \u2014 connectivity status for integrated services (Gitea, Gancio, Vaultwarden, etc.)

    All cards auto-refresh and gracefully degrade when their associated module is disabled.

    ","tags":["guide","admin"]},{"location":"docs/admin/people-access/","title":"People & Access","text":"

    Manage platform user accounts and roles, and use the People CRM to get a unified view of every supporter, donor, and volunteer across all modules.

    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#user-management","title":"User Management","text":"","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#creating-users","title":"Creating Users","text":"

    Navigate to Users (/app/users) and click Add User. Fill in name, email, and role. The user will receive a welcome email with login instructions.

    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#roles","title":"Roles","text":"Role Access Use Case SUPER_ADMIN Full platform access Campaign managers INFLUENCE_ADMIN Campaigns, responses, email queue Advocacy coordinators MAP_ADMIN Locations, areas, shifts, canvassing Field organizers USER Volunteer portal only Active volunteers TEMP Limited volunteer access Shift signups (auto-created)","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#password-policy","title":"Password Policy","text":"

    Passwords must be at least 12 characters with uppercase, lowercase, and a digit. This is enforced at the API schema level.

    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#deactivating-users","title":"Deactivating Users","text":"

    Edit a user from the Users page and toggle their active status. Deactivated users cannot log in but their data is preserved. Banned users have their sessions invalidated immediately.

    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#service-accounts-panel","title":"Service Accounts Panel","text":"

    When editing a user, the Service Accounts panel shows provisioning status for each integrated service (Rocket.Chat, Gitea, Vaultwarden, Listmonk). You can provision, deprovision, or re-sync individual services per user.

    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#people-crm","title":"People CRM","text":"

    Enable with enablePeople in Settings. The People module serves as the platform's CRM, aggregating data from all other modules into a unified view.

    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#virtual-aggregation","title":"Virtual Aggregation","text":"

    The People page does not store a separate \"people\" table. Instead, it aggregates records in real time from seven data sources:

    Source Data Users Platform accounts (name, email, phone, last login) Address Occupants Named residents from the map/canvassing module Campaign Senders People who sent advocacy emails Shift Signups Volunteer shift registrants SMS Contacts Contacts from SMS campaign lists Donations/Orders Buyers from the payments module Manual Contacts created directly in the CRM

    Records are deduplicated by normalized email or phone number, with Users taking highest priority.

    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#managed-contacts","title":"Managed Contacts","text":"

    Any virtual person can be \"promoted\" to a managed Contact record. This creates a persistent Contact entity in the database with:

    • Display name, first/last name \u2014 editable independently of the source
    • Tags \u2014 custom CRM tags for segmentation and filtering
    • Notes \u2014 free-text notes field
    • Support level \u2014 LEVEL_1 (Strong) through LEVEL_4 (Opposition)
    • Opt-out flags \u2014 email opt-out, SMS opt-out, and do-not-contact
    • Sign requested \u2014 track yard sign status
    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#contact-details","title":"Contact Details","text":"

    Each managed contact supports multiple structured data entries:

    • Addresses \u2014 link to map locations with optional unit numbers and primary flag; new addresses can be auto-added to the map for geocoding
    • Emails \u2014 multiple email addresses with labels (e.g., Personal, Work) and primary designation
    • Phones \u2014 multiple phone numbers with labels and primary designation
    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#activity-timeline","title":"Activity Timeline","text":"

    View a chronological timeline of all interactions for a person, across every module:

    • Advocacy emails sent and responses submitted
    • Shift signups and canvass visits
    • Donations and product purchases
    • SMS messages sent and received
    • Video views
    • Notes added and contact merges
    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#duplicate-detection-and-merge","title":"Duplicate Detection and Merge","text":"

    The platform identifies potential duplicates by matching normalized email addresses and phone numbers across sources. The merge workflow lets you:

    • Select which fields to keep from the source vs. target contact
    • Merge tags, addresses, emails, and phones
    • Preserve the full audit trail (merged contacts are soft-linked, not deleted)
    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#connection-graph","title":"Connection Graph","text":"

    Build a relationship graph between contacts using typed connections:

    • Connection types \u2014 Household, Family, Colleague, Referred By, and Custom
    • Bidirectional \u2014 connections can be one-way or mutual
    • Visual graph \u2014 interactive force-directed graph visualization showing contacts as nodes and connections as edges
    • Configurable depth \u2014 explore up to 3 degrees of separation
    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#profile-links","title":"Profile Links","text":"

    Generate shareable public profile pages for contacts:

    • Unique token URLs at /profile/:token
    • Configurable expiration \u2014 24 hours, 7 days, 30 days, 90 days, 1 year, or never
    • Optional password protection \u2014 require a PIN or password to view
    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#household-detection","title":"Household Detection","text":"

    The Household panel groups contacts who share the same physical address, making it easy to see all members of a household and their combined engagement.

    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#create-user-from-contact","title":"Create User from Contact","text":"

    Promote a CRM contact to a full platform user account directly from the People interface, with role assignment and optional welcome email.

    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#admin-routes","title":"Admin Routes","text":"
    • /app/users \u2014 user CRUD, role assignment, service accounts
    • /app/people \u2014 contact list with search, filters, source/tag filtering, and bulk actions
    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/settings/","title":"Platform Settings","text":"

    Centralized configuration for organization identity, theming, email delivery, feature modules, and automated notifications.

    ","tags":["guide","admin","configuration"]},{"location":"docs/admin/settings/#settings-tabs","title":"Settings Tabs","text":"","tags":["guide","admin","configuration"]},{"location":"docs/admin/settings/#organization","title":"Organization","text":"

    Configure your organization's public identity:

    • Organization Name \u2014 displayed in the admin sidebar, public pages, and emails
    • Short Name \u2014 shown when the admin sidebar is collapsed (max 10 characters)
    • Logo URL \u2014 displayed on the login page, homepage hero, and public navigation
    • Favicon URL \u2014 browser tab icon
    • Footer Text \u2014 shown in public page footers
    • Login Subtitle \u2014 displayed below the organization name on the login page
    ","tags":["guide","admin","configuration"]},{"location":"docs/admin/settings/#theme-colors","title":"Theme Colors","text":"

    Customize the look of admin and public interfaces:

    Admin theme:

    • Primary color (accent color for buttons, links, active states)
    • Background color (page background)

    Public theme:

    • Primary color
    • Background color
    • Container color (card and section backgrounds)
    • Header gradient (CSS gradient string for the public navigation bar)

    A live preview panel shows color swatches and a gradient preview as you configure.

    ","tags":["guide","admin","configuration"]},{"location":"docs/admin/settings/#email","title":"Email","text":"

    Configure how the platform sends emails:

    • Sender \u2014 from name and from address for all outgoing emails
    • Active SMTP provider \u2014 toggle between MailHog (testing) and Production SMTP with a single click
    • Production SMTP \u2014 host, port, username, and password (collapsible panel, disabled when MailHog is active)
    • Test mode \u2014 when enabled, all emails redirect to a single test recipient address
    • Test actions \u2014 \"Test Connection\" verifies SMTP connectivity; \"Send Test Email\" delivers a test message through the active provider

    A configuration summary card at the top displays the current provider, server, authentication status, and test mode state.

    ","tags":["guide","admin","configuration"]},{"location":"docs/admin/settings/#feature-toggles","title":"Feature Toggles","text":"

    Enable or disable platform modules. Disabling a module hides it from navigation but does not delete data.

    Category Flag Description Core Platform enableInfluence Advocacy campaigns, email sending, response wall enableMap Map, locations, canvassing, volunteer shifts enableNewsletter Listmonk newsletter sync enableLandingPages GrapesJS landing page builder Media & Content enableMediaFeatures Video library, public gallery, analytics enableGalleryAds Promotional cards in the video gallery enableEvents Gancio event calendar integration Communication enableChat Rocket.Chat team coordination enableMeet Jitsi video meetings (integrates with Rocket.Chat) enableSms Termux Android SMS campaigns People & Engagement enablePeople Unified contacts CRM enableSocial Volunteer social connections and activity feeds autoSyncPeopleToMap Auto-create map locations from contact addresses Commerce enablePayments Stripe subscriptions, products, and donations","tags":["guide","admin","configuration"]},{"location":"docs/admin/settings/#notifications","title":"Notifications","text":"

    Control which automated email notifications the platform sends. Disabling a notification stops future emails but does not affect already-queued jobs.

    Admin alerts:

    • New shift signup
    • Response wall submission
    • Yard sign request (from canvassing)
    • Shift cancellation

    Volunteer emails:

    • Canvass session summary (sent after completing a session)
    • Signup cancellation confirmation
    • 24-hour pre-shift reminder
    • Post-shift thank-you (sent 2 hours after shift ends)

    Re-engagement:

    • Re-engagement emails for inactive volunteers
    • Configurable inactivity threshold (days without activity)
    • Configurable cooldown period (minimum days between re-engagement emails)
    ","tags":["guide","admin","configuration"]},{"location":"docs/admin/settings/#admin-routes","title":"Admin Routes","text":"
    • /app/settings \u2014 multi-tab settings page (supports deep-linking to a specific tab via router state)
    ","tags":["guide","admin","configuration"]},{"location":"docs/admin/advocacy/","title":"Advocacy","text":"

    The advocacy module helps supporters contact their elected representatives through email campaigns.

    ","tags":["guide","admin","influence"]},{"location":"docs/admin/advocacy/#in-this-section","title":"In This Section","text":"
    • Campaigns \u2014 create and publish advocacy campaigns with postal code lookup and response tracking
    • Responses \u2014 moderate the public response wall where supporters share representative replies
    • Representatives \u2014 manage the representative lookup cache powered by the Represent API
    • Email Queue \u2014 monitor outgoing advocacy emails, retry failures, and view delivery stats
    ","tags":["guide","admin","influence"]},{"location":"docs/admin/advocacy/campaigns/","title":"Advocacy Campaigns","text":"

    Help supporters contact their elected representatives through email campaigns.

    ","tags":["guide","admin","influence","campaigns"]},{"location":"docs/admin/advocacy/campaigns/#how-it-works","title":"How It Works","text":"
    1. An admin creates a campaign \u2014 writes the email subject and body, selects which government levels to target (federal, provincial, municipal, school board), and publishes it.
    2. A supporter visits the campaign page \u2014 enters their postal code to look up their representatives.
    3. The supporter sends the email \u2014 either directly through the platform (\"Send Now\") or by opening it in their own email app (Gmail, Outlook, etc.).
    4. Responses get tracked \u2014 supporters and admins can share representative responses on the Response Wall, with upvoting and moderation.
    ","tags":["guide","admin","influence","campaigns"]},{"location":"docs/admin/advocacy/campaigns/#key-features","title":"Key Features","text":"
    • Postal code lookup \u2014 powered by the Represent API, returns representatives at all government levels
    • Two send methods \u2014 server-sent SMTP (tracked) or mailto link (opens user's email app)
    • Email editing \u2014 optionally let supporters personalize the email before sending
    • Response Wall \u2014 public wall where people share how their representatives responded, with moderation and verification
    • Campaign stats \u2014 track emails sent, responses received, and upvotes
    • Featured campaigns \u2014 highlight important campaigns on the public listing page
    ","tags":["guide","admin","influence","campaigns"]},{"location":"docs/admin/advocacy/campaigns/#user-submitted-campaigns","title":"User-Submitted Campaigns","text":"

    Registered (non-temporary) users can create their own advocacy campaigns and submit them for admin review.

    • Public submission route \u2014 users visit /campaigns/create to draft a campaign through a guided wizard
    • 3-step wizard \u2014 the submission flow walks users through campaign details (title, description, government levels), email template (subject and body), and a final review step before submitting
    • My campaigns dashboard \u2014 users can view and manage their submitted campaigns at /campaigns/mine, including checking moderation status and editing campaigns that have been sent back for changes
    • Restricted fields \u2014 user-submitted campaigns have limited options compared to admin-created ones (no SMTP sending, no highlight, no custom recipients); only the mailto link fallback is enabled by default
    • Auto-moderation status \u2014 newly submitted campaigns start in PENDING_REVIEW status and remain in DRAFT until an admin approves them
    • Edit restrictions \u2014 users can only edit their own campaigns, and only when the moderation status is PENDING_REVIEW or CHANGES_REQUESTED; editing automatically resets the status back to PENDING_REVIEW
    • Rate limiting \u2014 campaign submissions are rate-limited to 5 per hour per IP to prevent abuse
    • XSS protection \u2014 all user-supplied text (title, description, email subject, email body) is HTML-escaped before storage
    ","tags":["guide","admin","influence","campaigns"]},{"location":"docs/admin/advocacy/campaigns/#campaign-moderation","title":"Campaign Moderation","text":"

    Admins review user-submitted campaigns before they go live.

    • Moderation queue \u2014 accessible at /app/campaign-moderation, showing all user-generated campaigns filtered by moderation status (pending, approved, rejected, changes requested)
    • Moderation actions \u2014 for each campaign in the queue, admins can:
      • Approve \u2014 sets the moderation status to APPROVED and the campaign status to ACTIVE, making it publicly visible
      • Reject \u2014 marks the campaign as REJECTED with an optional reason visible to the submitter
      • Request changes \u2014 sets the status to CHANGES_REQUESTED with feedback, allowing the user to revise and resubmit
    • Moderation stats \u2014 the queue page displays counters for total user-generated campaigns, pending reviews, approved, rejected, and changes-requested counts
    • Reviewer tracking \u2014 each moderation action records the reviewer's user ID and timestamp
    • Search and filter \u2014 the moderation queue supports searching by campaign title, submitter name, or email, and filtering by moderation status
    ","tags":["guide","admin","influence","campaigns"]},{"location":"docs/admin/advocacy/campaigns/#campaign-analytics","title":"Campaign Analytics","text":"

    The Campaign Effectiveness dashboard provides cross-campaign performance analytics at /app/influence/effectiveness.

    • Performance tab \u2014 per-campaign KPIs including total emails sent, email delivery status breakdown, response counts, response rates, and call counts; top campaigns visualized as a horizontal bar chart
    • Representatives tab \u2014 tracks individual representative responsiveness across all campaigns; shows emails received, responses given, verified response count, and response rate per representative; sortable by response count, response rate, or name; includes government level distribution
    • Geography tab \u2014 engagement breakdown by geographic area; group results by postal code, city, or province; enriched with city/province data from the postal code cache
    • Funnel tab \u2014 conversion funnel visualization showing progression from emails sent to unique participants to responses received to verified responses, plus calls made; includes percentage-of-first and stage-to-stage dropoff rates
    • Trends tab \u2014 time-series activity chart showing daily or weekly email and response volumes; default view covers the last 30 days; merged email and response series for side-by-side comparison
    • Global filters \u2014 all tabs share campaign and date range filters; select a specific campaign or view aggregate data across all campaigns
    ","tags":["guide","admin","influence","campaigns"]},{"location":"docs/admin/advocacy/campaigns/#admin-routes","title":"Admin Routes","text":"
    • /app/campaigns \u2014 create, edit, and manage campaigns
    • /app/campaign-moderation \u2014 review and moderate user-submitted campaigns
    • /app/influence/effectiveness \u2014 campaign effectiveness analytics dashboard
    • /app/responses \u2014 moderate submitted responses
    • /app/email-queue \u2014 monitor outgoing email delivery
    ","tags":["guide","admin","influence","campaigns"]},{"location":"docs/admin/advocacy/campaigns/#public-routes","title":"Public Routes","text":"
    • /campaigns \u2014 browse active campaigns
    • /campaigns/create \u2014 submit a new user-generated campaign (requires login)
    • /campaigns/mine \u2014 view and manage your submitted campaigns (requires login)
    • /campaign/:slug \u2014 take action on a specific campaign
    • /campaign/:slug/responses \u2014 view the response wall
    ","tags":["guide","admin","influence","campaigns"]},{"location":"docs/admin/advocacy/email-queue/","title":"Email Queue","text":"

    Monitor outgoing advocacy emails processed through the BullMQ queue.

    ","tags":["guide","admin","influence","email"]},{"location":"docs/admin/advocacy/email-queue/#key-features","title":"Key Features","text":"
    • Queue dashboard \u2014 view pending, active, completed, and failed jobs at /app/email-queue
    • Job details \u2014 inspect individual email jobs with recipient, subject, status, and timestamps
    • Retry failed jobs \u2014 re-queue emails that failed due to SMTP errors or timeouts
    • Clear completed \u2014 bulk-remove completed jobs to keep the queue clean
    • Stats \u2014 total sent, delivery rate, and average processing time
    ","tags":["guide","admin","influence","email"]},{"location":"docs/admin/advocacy/email-queue/#admin-routes","title":"Admin Routes","text":"
    • /app/email-queue \u2014 email queue monitoring and management
    ","tags":["guide","admin","influence","email"]},{"location":"docs/admin/advocacy/representatives/","title":"Representatives","text":"

    The platform uses the Represent API to look up elected representatives by postal code across all government levels.

    ","tags":["guide","admin","influence"]},{"location":"docs/admin/advocacy/representatives/#how-it-works","title":"How It Works","text":"
    • Postal code lookup \u2014 enter a Canadian postal code to retrieve federal, provincial, municipal, and school board representatives
    • Redis cache \u2014 lookup results are cached to reduce API calls and improve response times
    • Cache management \u2014 view cache status and clear entries from /app/representatives
    • Government levels \u2014 campaigns can target specific levels (federal, provincial, municipal, school board)
    ","tags":["guide","admin","influence"]},{"location":"docs/admin/advocacy/representatives/#admin-routes","title":"Admin Routes","text":"
    • /app/representatives \u2014 representative cache management and lookup testing
    ","tags":["guide","admin","influence"]},{"location":"docs/admin/advocacy/responses/","title":"Response Moderation","text":"

    Review and moderate representative responses submitted by supporters on the public response wall.

    ","tags":["guide","admin","influence","moderation"]},{"location":"docs/admin/advocacy/responses/#key-features","title":"Key Features","text":"
    • Moderation queue \u2014 review submissions at /app/responses with filtering by campaign and status
    • Verification \u2014 mark responses as verified to display a trust badge on the public wall
    • Upvoting \u2014 supporters can upvote responses; counts are visible on the public wall
    • Approve / reject \u2014 control which responses appear publicly
    • Response stats \u2014 track response counts per campaign and per representative
    ","tags":["guide","admin","influence","moderation"]},{"location":"docs/admin/advocacy/responses/#admin-routes","title":"Admin Routes","text":"
    • /app/responses \u2014 response moderation dashboard
    ","tags":["guide","admin","influence","moderation"]},{"location":"docs/admin/broadcast/","title":"Broadcast","text":"

    Reach supporters through multiple channels \u2014 email newsletters, templated campaigns, and SMS text messages.

    ","tags":["guide","admin","broadcast"]},{"location":"docs/admin/broadcast/#in-this-section","title":"In This Section","text":"
    • Newsletter \u2014 Listmonk integration with automatic subscriber sync from shifts, campaigns, and contacts
    • Email Templates \u2014 reusable templates with variable substitution, version history, and test sending
    • SMS \u2014 text message campaigns via a Termux Android bridge with contact lists and response tracking
    ","tags":["guide","admin","broadcast"]},{"location":"docs/admin/broadcast/email-templates/","title":"Email Templates","text":"

    Create reusable email templates with variable substitution for campaign communications. Templates are used by advocacy campaigns, shift confirmations, volunteer re-engagement emails, and other automated communications.

    ","tags":["guide","admin","broadcast","email"]},{"location":"docs/admin/broadcast/email-templates/#template-categories","title":"Template Categories","text":"

    Each template belongs to a category that determines where it can be used:

    • INFLUENCE -- advocacy campaign emails sent to representatives
    • MAP -- shift confirmation, volunteer thank-you, and canvassing-related emails
    • SYSTEM -- account verification, password reset, and platform notifications
    • PAYMENT -- donation receipts, subscription confirmations, and purchase orders
    ","tags":["guide","admin","broadcast","email"]},{"location":"docs/admin/broadcast/email-templates/#variable-system","title":"Variable System","text":"

    Templates use Handlebars-style {{VARIABLE_NAME}} placeholders that are replaced at send time. Variables must use uppercase letters and underscores (e.g., {{RECIPIENT_NAME}}, {{CAMPAIGN_TITLE}}).

    • Text variables -- simple string substitution for names, dates, URLs, and other text
    • Video variables -- embed a media library video by referencing its ID
    • Conditional blocks -- show or hide content with {{#if VARIABLE}}...{{/if}} syntax
    • Required vs optional -- each variable can be marked as required, with sample values for test emails

    The template validator automatically extracts all variables from the HTML, text, and subject line content and checks for unmatched conditional blocks.

    ","tags":["guide","admin","broadcast","email"]},{"location":"docs/admin/broadcast/email-templates/#version-history","title":"Version History","text":"

    Every change to a template's subject line, HTML content, or text content creates a new version. The full version history is preserved, and any previous version can be restored:

    • Version browsing -- view the subject, HTML, and text content of any past version
    • Rollback -- restore a previous version (creates a new version entry, preserving the audit trail)
    • Change notes -- each version includes a description of what changed
    • Author tracking -- versions record which admin made each change
    ","tags":["guide","admin","broadcast","email"]},{"location":"docs/admin/broadcast/email-templates/#test-emails","title":"Test Emails","text":"

    Before activating a template, send a test email to verify rendering:

    • Variable substitution -- provide test data for each variable to preview the final output
    • Recipient selection -- send the test to any email address
    • Test log -- all test sends are logged with success/failure status and message IDs
    • Rate limited -- 10 test emails per 15 minutes per user to prevent abuse
    ","tags":["guide","admin","broadcast","email"]},{"location":"docs/admin/broadcast/email-templates/#template-caching","title":"Template Caching","text":"

    Rendered templates are cached in memory for performance. The cache is automatically cleared when a template is created, updated, or deleted. Admins can also manually clear the cache from the admin interface.

    ","tags":["guide","admin","broadcast","email"]},{"location":"docs/admin/broadcast/email-templates/#admin-routes","title":"Admin Routes","text":"
    • /app/email-templates -- create and manage email templates with a visual editor
    ","tags":["guide","admin","broadcast","email"]},{"location":"docs/admin/broadcast/newsletter/","title":"Newsletter (Listmonk)","text":"

    Integrated with Listmonk for opt-in mailing lists and newsletter campaigns. Enable with LISTMONK_SYNC_ENABLED=true.

    ","tags":["guide","admin","broadcast","email"]},{"location":"docs/admin/broadcast/newsletter/#managed-lists","title":"Managed Lists","text":"

    The platform automatically creates and maintains 13 subscriber lists in Listmonk:

    List Name Source Tags All Contacts All synced records v2 Campaign Participants Users who sent advocacy emails v2, influence Locations - All Address occupants with email v2, map Support Level 1-4 Addresses by canvass support level v2, map, support Has Campaign Sign Addresses with a yard sign v2, map, signs Users Active non-temp platform accounts v2, users Volunteers Shift signups v2, map, shifts Canvassers Users who completed canvass sessions v2, map, canvass Subscribers Active paid subscribers v2, payments Donors Users who completed a donation v2, payments","tags":["guide","admin","broadcast","email"]},{"location":"docs/admin/broadcast/newsletter/#bulk-sync","title":"Bulk Sync","text":"

    The admin panel provides a manual \"Sync All\" action that synchronizes four data sources to Listmonk:

    1. Campaign participants -- distinct email senders from advocacy campaigns
    2. Location contacts -- address occupants with email, mapped to support level and sign lists
    3. Users -- active platform accounts (excludes TEMP users)
    4. CRM tags -- contacts tagged in the People module, synced to tag-linked Listmonk lists

    Each source upserts subscribers (creates new or merges into existing), preserving existing list memberships and merging metadata attributes.

    ","tags":["guide","admin","broadcast","email"]},{"location":"docs/admin/broadcast/newsletter/#event-driven-sync","title":"Event-Driven Sync","text":"

    In addition to bulk sync, the platform fires real-time subscriber upserts on application events:

    • Shift signup -- adds to Volunteers list
    • Canvass session completed -- adds to Canvassers list
    • Campaign email sent -- adds to Campaign Participants list
    • Subscription activated -- adds to Subscribers list
    • Donation completed -- adds to Donors list
    • Product purchased -- adds to Donors list
    • Address updated (canvass visit) -- updates support level list membership
    • Re-engagement email sent -- updates Volunteers list metadata
    • CRM tag changed -- adds/removes from tag-linked Listmonk lists

    All event-driven syncs are fire-and-forget and silently fail if Listmonk is unreachable.

    ","tags":["guide","admin","broadcast","email"]},{"location":"docs/admin/broadcast/newsletter/#admin-routes","title":"Admin Routes","text":"
    • /app/listmonk (sidebar: \"Newsletter\") -- sync status, subscriber counts, campaign stats, and manual sync trigger
    ","tags":["guide","admin","broadcast","email"]},{"location":"docs/admin/broadcast/sms/","title":"SMS Campaigns","text":"

    Text message outreach via a Termux Android bridge. Uses a real Android phone to send and receive SMS \u2014 no third-party SMS gateway or Twilio account needed.

    Enable with ENABLE_SMS=true or via the setup wizard.

    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#architecture-overview","title":"Architecture Overview","text":"

    The SMS system uses a three-tier architecture where your server communicates with a lightweight Python Flask API running on an Android phone:

    graph LR\n    A[Admin Dashboard<br/>Campaign UI] -->|API calls| B[Express API<br/>BullMQ Queue]\n    B -->|HTTP + API Key| C[Android Phone<br/>Flask on Termux]\n    C -->|termux-sms-send| D[Android SMS]\n    D -->|Carrier Network| E[Recipients]\n    E -->|Reply SMS| D\n    D -->|termux-sms-list| C\n    C -->|HTTP response| B

    Why this approach?

    • No SaaS dependency \u2014 your phone is the SMS gateway, no Twilio/MessageBird/etc.
    • Real phone number \u2014 recipients see a real number, not a short code
    • Two-way messaging \u2014 incoming replies sync automatically
    • Low cost \u2014 just your phone plan's SMS allowance
    • Full control \u2014 FOSS stack end-to-end
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#prerequisites","title":"Prerequisites","text":"

    Before starting setup, you'll need:

    Item Details Android phone Any Android 7+ device with an active SIM card and SMS plan Termux Terminal emulator \u2014 install from F-Droid (not Play Store) Termux:API Termux plugin for SMS/contacts/battery \u2014 install from F-Droid Tailscale (recommended) VPN mesh for stable IP \u2014 install from Play Store Network access Phone must be reachable from the server (Tailscale, LAN, or port forwarding)

    Both Apps MUST Come from F-Droid

    The Play Store version of Termux is abandoned and incompatible with the API plugin. If you install Termux from the Play Store and Termux:API from F-Droid (or vice versa), SMS commands will fail with:

    Termux:API is not yet available on Google Play

    Fix: Uninstall both apps, then reinstall both from F-Droid. They must come from the same source because Android verifies matching app signatures for inter-process communication.

    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#phone-setup","title":"Phone Setup","text":"","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#step-1-install-apps-from-f-droid","title":"Step 1: Install Apps from F-Droid","text":"

    On your Android phone:

    1. Install F-Droid \u2014 download from f-droid.org if you don't have it
    2. Install Termux \u2014 search in F-Droid and install
    3. Install Termux:API \u2014 search in F-Droid and install
    4. Install Termux:Boot (optional) \u2014 for auto-start on phone reboot. Open once after install to register.
    5. Install Tailscale (recommended) \u2014 from Play Store, connect to your tailnet for a stable IP

    termux-api package

    You need two things called \"termux-api\": the F-Droid app (Termux:API) and the Termux package (pkg install termux-api). The setup script installs the package automatically, but the F-Droid app must be installed manually.

    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#step-2-generate-api-key","title":"Step 2: Generate API Key","text":"

    Go to the admin dashboard SMS Setup page (/app/sms/setup) and click Generate API Key. Copy the key \u2014 you'll paste it into the setup command.

    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#step-3-run-the-setup-script","title":"Step 3: Run the Setup Script","text":"

    Open Termux on the phone and run:

    # Clone the SMS server (first time only)\npkg install -y git && git clone --depth 1 --filter=blob:none --sparse \\\n  https://gitea.bnkops.com/admin/changemaker.lite.git ~/sms-server \\\n  && cd ~/sms-server && git sparse-checkout set termux-sms\n\n# Run the setup script \u2014 paste your API key at the end\nbash ~/sms-server/termux-sms/setup.sh YOUR_API_KEY_HERE\n

    The setup script automatically:

    • Installs Python, Flask, termux-api, and openssh
    • Saves the API key to ~/.bashrc
    • Requests SMS and Contacts permissions (tap Allow when prompted)
    • Creates a Termux:Boot auto-start script (if Termux:Boot is installed)
    • Starts the SMS server

    When done, note the Phone URL displayed (e.g. http://100.64.0.5:5001).

    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#recommended-install-service-supervisor","title":"Recommended: Install Service Supervisor","text":"

    After initial setup, install termux-services for reliable process management. This uses runit, a proper UNIX service supervisor that automatically restarts the server if it crashes:

    cd ~/sms-server && bash termux-sms/setup-services.sh\n

    This registers two supervised services:

    • sms-api \u2014 Flask SMS API server (port 5001)
    • sshd-custom \u2014 SSH daemon for remote management (port 8022)
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#step-4-prevent-android-from-killing-termux","title":"Step 4: Prevent Android from Killing Termux","text":"

    This is required for the server to run reliably in the background:

    1. Open Android Settings \u2192 Apps \u2192 Termux \u2192 Battery \u2192 set to Unrestricted
    2. Lock Termux in the recent apps view (long-press the app card \u2192 Lock/Pin)
    3. Samsung phones: also add Termux to Settings \u2192 Device Care \u2192 Battery \u2192 Never Sleeping Apps
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#updating","title":"Updating","text":"

    To pull the latest server code and re-run setup:

    cd ~/sms-server && git pull && bash android/setup.sh YOUR_API_KEY_HERE\n
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#service-management","title":"Service Management","text":"

    If you installed termux-services (recommended):

    # Check status\nsv status sms-api\n\n# Restart\nsv restart sms-api\n\n# Stop\nsv down sms-api\n\n# Start\nsv up sms-api\n\n# View logs\ntail -f ~/logs/sms-api.log\n\n# Health check\ncurl http://127.0.0.1:5001/health\n

    Without termux-services (legacy watchdog):

    # Check if the server is running\ncurl http://127.0.0.1:5001/health\n\n# Restart manually\ncd ~/sms-server/android && bash sms-watchdog.sh\n
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#accessing-the-phone","title":"Accessing the Phone","text":"

    There are several ways to run commands on the phone:

    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#direct-on-phone","title":"Direct (on phone)","text":"

    Simply open the Termux app and type commands. Best for initial setup.

    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#ssh-remote-access","title":"SSH (remote access)","text":"

    Start the SSH server in Termux, then connect from your computer:

    # On the phone (first time only):\npkg install openssh\npasswd  # Set a password\nsshd    # Start SSH server on port 8022\n\n# From your computer:\nssh -p 8022 your-phone-ip\n# Or with Tailscale:\nssh -p 8022 100.x.x.x\n
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#scrcpy-screen-mirror","title":"scrcpy (screen mirror)","text":"

    Mirror the phone screen to your computer \u2014 great for setup:

    # Install scrcpy on your computer (Ubuntu)\nsudo apt install scrcpy\n\n# Connect via USB\nscrcpy\n\n# Or wireless (phone must be on same network)\nscrcpy --tcpip=phone-ip:5555\n
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#setup-wizard","title":"Setup Wizard","text":"

    The admin panel provides a guided three-step wizard at /app/sms/setup:

    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#step-1-prepare-phone","title":"Step 1: Prepare Phone","text":"

    Walks you through installing apps, cloning the server, setting the API key, and starting the Flask server. Generates a shared API key that both the server and phone use for authentication.

    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#step-2-connect","title":"Step 2: Connect","text":"

    Choose how to find your phone's IP address:

    Tailscale Auto-Discovery (Recommended)Manual URL Entry
    1. Enter your Tailscale API key (tskey-api-...)
    2. Click Discover Devices
    3. The wizard queries the Tailscale API and lists all devices on your tailnet
    4. Select your Android phone \u2014 the URL auto-fills with its stable 100.x.x.x IP

    Getting a Tailscale API Key

    Go to Tailscale Admin Console \u2192 Settings \u2192 Keys \u2192 Generate auth key or API access token.

    Enter the phone's URL directly:

    • With Tailscale: http://100.x.x.x:5001 (stable IP, works across networks)
    • On same LAN: http://192.168.x.x:5001 (changes if phone reconnects)
    • Via port forward: http://your-public-ip:5001 (requires router config)
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#step-3-test-save","title":"Step 3: Test & Save","text":"
    1. Click Test Connection \u2014 the wizard calls the phone's /health endpoint
    2. On success, you'll see device uptime and message count
    3. Click Save Configuration \u2014 stores the URL and key encrypted in the database
    4. The enableSms feature flag is automatically enabled
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#how-it-works","title":"How It Works","text":"","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#sending-messages","title":"Sending Messages","text":"
    1. Admin creates an SMS campaign with a message template and contact list
    2. Campaign is started \u2192 messages are queued in BullMQ (one at a time, serial delivery)
    3. For each message, the Express API calls POST /api/sms/send on the phone
    4. The Flask server on the phone executes termux-sms-send to send via Android's native SMS
    5. A notification appears on the phone for each sent message
    6. Results are tracked in the database (success/failure per recipient)
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#receiving-responses","title":"Receiving Responses","text":"

    A background service (sms-response-sync.service.ts) polls the phone's inbox at a configurable interval:

    1. Calls GET /api/sms/inbox?since=<last_sync_timestamp> on the phone
    2. The Flask server runs termux-sms-list to get new messages
    3. Incoming messages are matched to contacts and classified by keyword
    4. Threaded conversations are maintained per contact
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#device-monitoring","title":"Device Monitoring","text":"

    A background service (sms-device-monitor.service.ts) checks phone health periodically:

    • Battery level, charging status, temperature
    • Server uptime and total messages sent
    • Connection status (available/unreachable)
    • Results displayed on the SMS Dashboard
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#key-features","title":"Key Features","text":"
    • Contact lists \u2014 import, tag, and segment contacts for targeted outreach
    • Message templates \u2014 reusable templates with {name} variable placeholders
    • BullMQ queue \u2014 serial delivery with configurable delays between messages
    • Response sync \u2014 incoming SMS replies synced and classified automatically
    • Device monitoring \u2014 battery, uptime, and connectivity reported in real-time
    • Conversation view \u2014 threaded message history per contact
    • Retry logic \u2014 configurable retry attempts for failed deliveries
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#admin-routes","title":"Admin Routes","text":"Route Description /app/sms/setup Guided setup wizard with Tailscale auto-discovery /app/sms SMS dashboard \u2014 campaign overview and device status /app/sms/contacts Manage contact lists and entries /app/sms/campaigns Create and monitor SMS campaigns /app/sms/conversations View threaded conversations with contacts","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#configuration","title":"Configuration","text":"","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#environment-variables","title":"Environment Variables","text":"Variable Default Description ENABLE_SMS false Feature flag (also set via setup wizard) TERMUX_API_URL \u2014 Phone URL, e.g. http://100.x.x.x:5001 TERMUX_API_KEY \u2014 Shared API key for authentication SMS_DELAY_BETWEEN_MS 1000 Delay between messages in a campaign (ms) SMS_MAX_RETRIES 3 Retry attempts for failed sends SMS_RESPONSE_SYNC_INTERVAL_MS 10000 How often to check for incoming replies (ms) SMS_DEVICE_MONITOR_INTERVAL_MS 30000 How often to check device health (ms) TAILSCALE_API_KEY \u2014 Tailscale API key for auto-discovery TAILSCALE_TAILNET \u2014 Tailscale tailnet name (optional)

    Note

    When you use the setup wizard, configuration is stored in the database and takes priority over environment variables. You don't need to set env vars if you use the wizard.

    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#phone-side-configuration","title":"Phone-Side Configuration","text":"

    On the phone, only one environment variable is needed:

    export SMS_API_SECRET='your-64-char-hex-key'\n

    The Flask server also accepts TERMUX_API_KEY as an alias for backwards compatibility.

    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#phone-api-endpoints","title":"Phone API Endpoints","text":"

    The Flask server running on the phone exposes these endpoints on port 5001:

    Method Endpoint Auth Description GET /health No Server status, uptime, messages sent GET / No Web dashboard with endpoint documentation POST /api/sms/send Yes Send an SMS message POST /api/sms/send-reply Yes Send a reply with conversation tracking GET /api/sms/inbox No Get incoming messages (with since filter) GET /api/sms/list No List messages with pagination GET /api/sms/history No Get SMS history for a phone number GET /api/device/battery No Battery level, health, temperature GET /api/device/location No GPS coordinates (requires permission) GET /api/device/info No Device info + battery + uptime GET /api/contacts/list No Phone address book (with search) POST /api/campaign/notify No Push notification to device

    Authentication uses the X-API-Key header with the shared secret.

    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#troubleshooting","title":"Troubleshooting","text":"","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#phone-cant-be-reached","title":"Phone can't be reached","text":"

    Symptoms: Test connection fails, \"Connection refused\" or timeout.

    Checks:

    1. Is the Flask server running? Check Termux \u2014 you should see the startup banner
    2. Is the IP correct? Run ifconfig in Termux to find the current IP
    3. Are they on the same network? If not using Tailscale, both must be on the same LAN
    4. Is Tailscale connected? Check the Tailscale app on the phone \u2014 it should show \"Connected\"
    5. Firewall? Android rarely blocks incoming connections on Termux, but check if any firewall app is installed
    # Quick test from your server\ncurl http://PHONE_IP:5001/health\n
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#authentication-required-errors","title":"\"Authentication required\" errors","text":"

    Symptoms: API calls return 401 with \"Authentication required\".

    Fix: The API key on the phone doesn't match the one in the admin panel.

    # On the phone, check the current key\necho $SMS_API_SECRET\n\n# If it doesn't match, update it\nexport SMS_API_SECRET='correct-key-from-admin-panel'\necho 'export SMS_API_SECRET=\"correct-key-from-admin-panel\"' >> ~/.bashrc\n\n# Restart the server\nsv restart sms-api\n# Or without termux-services: pkill -f termux-sms-api-server.py && cd ~/sms-server/android && python termux-sms-api-server.py\n
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#sms-not-sending","title":"SMS not sending","text":"

    Symptoms: Server responds successfully but messages don't arrive.

    Checks:

    1. SMS permissions granted? Go to Android Settings \u2192 Apps \u2192 Termux:API \u2192 Permissions \u2192 SMS
    2. Active SIM card? The phone needs a working SIM with SMS capability
    3. Message too long? Maximum 1600 characters per message
    4. Rate limited? Minimum 1 second between messages (carrier may enforce longer delays)
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#termux-keeps-getting-killed","title":"Termux keeps getting killed","text":"

    Symptoms: Server stops after some time, especially when phone screen is off.

    Fix:

    1. Install termux-services (if not already): bash ~/sms-server/android/setup-services.sh \u2014 this uses runit, a proper service supervisor that auto-restarts the server immediately if it crashes
    2. Disable battery optimization: Android Settings \u2192 Apps \u2192 Termux \u2192 Battery \u2192 Unrestricted
    3. Lock Termux in recent apps \u2014 long-press the app card \u2192 Lock/Pin
    4. Samsung: also add Termux, Termux:API, and Termux:Boot to Settings \u2192 Device Care \u2192 Battery \u2192 Never Sleeping Apps
    5. Acquire wake lock: Run termux-wake-lock in Termux (included in boot script)
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#server-wont-start-missing-sms_api_secret","title":"Server won't start \u2014 \"Missing SMS_API_SECRET\"","text":"

    Symptoms: Server exits immediately with a security error.

    Fix: Set the API key environment variable:

    # Generate a new key if you don't have one\npython -c \"import secrets; print(secrets.token_hex(32))\"\n\n# Set it\nexport SMS_API_SECRET='your-generated-key'\necho 'export SMS_API_SECRET=\"your-key\"' >> ~/.bashrc\n
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#rcs-chat-features-interfering-with-replies","title":"RCS / Chat Features interfering with replies","text":"

    Symptoms: You send SMS messages successfully but some or all replies never appear in the system. Recipients say they replied, but the conversation shows no inbound messages.

    Cause: Google Messages enables RCS (Rich Communication Services) by default. When RCS is active, replies from recipients who also have RCS may be sent over data/Wi-Fi instead of the carrier SMS channel. The Termux server only reads the SMS inbox via termux-sms-list, so RCS messages are invisible to it.

    Fix: Disable RCS on the SMS phone:

    1. Open Google Messages on the phone
    2. Tap the profile icon (top right) \u2192 Messages settings
    3. Tap RCS chats (or \"Chat features\")
    4. Turn off \"Turn on RCS chats\"

    This must be done on the phone running the SMS server

    Disabling RCS on the server phone forces all outgoing messages to use plain SMS, and ensures replies also come back as SMS. You do not need recipients to change anything on their end \u2014 when the server phone sends a plain SMS, the reply will be plain SMS as well (unless the recipient's carrier forces RCS-only, which is rare).

    Additional checks:

    • Some carriers (e.g. Google Fi, Jio) enable RCS at the carrier level. If disabling in the app doesn't help, contact the carrier to disable RCS on the SIM.
    • If the phone has Samsung Messages instead of Google Messages, go to Samsung Messages \u2192 Settings \u2192 Chat settings \u2192 turn off.
    • After disabling RCS, restart the phone and verify by sending a test message \u2014 the send button should show an SMS label, not \"Chat\".
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#updating-the-sms-server","title":"Updating the SMS server","text":"

    To pull the latest version of the server code:

    cd ~/sms-server\ngit pull\n\n# Restart the server\nsv restart sms-api\n# Or without termux-services: pkill -f termux-sms-api-server.py && cd android && python termux-sms-api-server.py\n
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/map/","title":"Map & Canvassing","text":"

    Manage locations, organize canvassing territories, schedule volunteer shifts, and coordinate door-to-door outreach.

    ","tags":["guide","admin","map"]},{"location":"docs/admin/map/#in-this-section","title":"In This Section","text":"
    • Locations \u2014 import addresses via CSV or NAR, geocode with multiple providers, and manage the location database
    • Areas \u2014 draw polygon territories on the map to organize canvassing regions
    • Shifts \u2014 schedule volunteer time slots with recurring patterns and calendar views
    • Canvassing \u2014 canvass dashboard, walk sheets, contact export, and session management
    • Data Quality \u2014 geocoding quality metrics, provider distribution, and confidence analysis
    • Map Settings \u2014 configure map center, zoom level, and QR code links
    ","tags":["guide","admin","map"]},{"location":"docs/admin/map/areas/","title":"Areas (Cuts)","text":"

    Draw polygon regions on the map to define canvassing territories. Areas organize locations into manageable chunks for volunteers.

    ","tags":["guide","admin","map","canvassing"]},{"location":"docs/admin/map/areas/#key-features","title":"Key Features","text":"
    • Polygon drawing \u2014 use the map editor at /app/map/cuts to draw, edit, and delete area boundaries
    • Automatic association \u2014 locations within an area's polygon boundary are automatically linked
    • Area stats \u2014 total addresses, visited count, coverage percentage per area
    • Color coding \u2014 assign colors to visually distinguish areas on the map
    ","tags":["guide","admin","map","canvassing"]},{"location":"docs/admin/map/areas/#area-import-wizard","title":"Area Import Wizard","text":"

    Bulk-import addresses into an area from multiple data sources:

    • OpenStreetMap (OSM) \u2014 pull building addresses from Nominatim within the area
    • NAR (National Address Register) \u2014 import from the Canadian federal address dataset
    • Reverse geocode grid \u2014 generate a grid of points and reverse-geocode to discover addresses
    • Deduplication \u2014 imported addresses are checked against existing locations to avoid duplicates
    • Progress tracking \u2014 real-time status per source during import
    ","tags":["guide","admin","map","canvassing"]},{"location":"docs/admin/map/areas/#admin-routes","title":"Admin Routes","text":"
    • /app/map/cuts \u2014 draw and manage canvassing areas
    • /app/map/cuts/:id/export \u2014 printable location report for a cut
    ","tags":["guide","admin","map","canvassing"]},{"location":"docs/admin/map/canvassing/","title":"Canvassing","text":"

    Coordinate and monitor volunteer door-to-door outreach with the canvass dashboard, walk sheets, and contact export tools.

    ","tags":["guide","admin","map","canvassing"]},{"location":"docs/admin/map/canvassing/#canvass-dashboard","title":"Canvass Dashboard","text":"

    From /app/map/canvass:

    • Active sessions \u2014 see which volunteers are currently canvassing and their real-time positions
    • Leaderboard \u2014 volunteer rankings by visit count
    • Activity feed \u2014 recent visit outcomes across all areas
    • Stats \u2014 total sessions, visits recorded, and outcome breakdowns
    ","tags":["guide","admin","map","canvassing"]},{"location":"docs/admin/map/canvassing/#walk-sheets-exports","title":"Walk Sheets & Exports","text":"
    • Walk sheet \u2014 printable form at /app/map/walk-sheet with space for recording visit outcomes; includes up to 3 configurable QR codes
    • Cut export \u2014 printable location report at /app/map/cuts/:id/export for a specific canvassing area
    ","tags":["guide","admin","map","canvassing"]},{"location":"docs/admin/map/canvassing/#canvass-contact-export","title":"Canvass Contact Export","text":"

    Bridge canvassing data with advocacy campaigns:

    • Filter by outcome \u2014 include specific visit outcomes (spoke with, left literature, come back later)
    • Support level range \u2014 filter by recorded support level
    • Area selection \u2014 limit export to specific areas
    • Campaign targeting \u2014 export contacts as recipients for an advocacy campaign
    ","tags":["guide","admin","map","canvassing"]},{"location":"docs/admin/map/canvassing/#admin-routes","title":"Admin Routes","text":"
    • /app/map/canvass \u2014 canvass dashboard
    • /app/map/walk-sheet \u2014 printable walk sheet
    ","tags":["guide","admin","map","canvassing"]},{"location":"docs/admin/map/data-quality/","title":"Data Quality","text":"

    Monitor geocoding accuracy and coverage from /app/map/data-quality.

    ","tags":["guide","admin","map","analytics"]},{"location":"docs/admin/map/data-quality/#key-metrics","title":"Key Metrics","text":"
    • Geocoding success rate \u2014 percentage of locations with valid coordinates
    • Provider distribution \u2014 breakdown of which geocoding provider was used per location
    • Confidence scores \u2014 distribution of geocoding confidence levels across the dataset
    • Missing data \u2014 locations without coordinates, postal codes, or province assignments
    • Bulk re-geocode \u2014 re-process failed or low-confidence locations with a different provider
    ","tags":["guide","admin","map","analytics"]},{"location":"docs/admin/map/data-quality/#admin-routes","title":"Admin Routes","text":"
    • /app/map/data-quality \u2014 geocoding quality dashboard
    ","tags":["guide","admin","map","analytics"]},{"location":"docs/admin/map/locations/","title":"Locations","text":"

    Import addresses via CSV or the Canadian National Address Register (NAR), geocode them with multiple providers, and manage the location database.

    ","tags":["guide","admin","map","locations"]},{"location":"docs/admin/map/locations/#adding-locations","title":"Adding Locations","text":"
    • Click-to-add \u2014 click on the admin map to drop a new location marker
    • Form entry \u2014 manually enter address details
    • CSV import \u2014 upload a CSV with address columns; the system geocodes each row
    • NAR import \u2014 import Canadian National Address Register data with province, city, postal code, and residential-only filters
    ","tags":["guide","admin","map","locations"]},{"location":"docs/admin/map/locations/#geocoding","title":"Geocoding","text":"

    Locations are geocoded automatically using a multi-provider system supporting Nominatim, ArcGIS, Photon, Mapbox, Google, and LocationIQ. Failed entries can be re-geocoded individually or in bulk.

    ","tags":["guide","admin","map","locations"]},{"location":"docs/admin/map/locations/#bulk-operations","title":"Bulk Operations","text":"

    Select multiple locations for:

    • Re-geocoding with a different provider
    • Tagging or re-tagging
    • Deletion
    • CSV export
    ","tags":["guide","admin","map","locations"]},{"location":"docs/admin/map/locations/#admin-routes","title":"Admin Routes","text":"
    • /app/map \u2014 location CRUD, CSV import/export, geocoding, area import wizard
    ","tags":["guide","admin","map","locations"]},{"location":"docs/admin/map/settings/","title":"Map Settings","text":"

    Configure the default map view and QR code links from /app/map/settings.

    ","tags":["guide","admin","map","configuration"]},{"location":"docs/admin/map/settings/#settings","title":"Settings","text":"
    • Map center \u2014 latitude and longitude for the default map center point
    • Default zoom \u2014 initial zoom level when maps load (1-18)
    • QR code links \u2014 up to 3 configurable URLs that appear as QR codes on printed walk sheets (e.g., campaign page, shift signup, volunteer portal)
    ","tags":["guide","admin","map","configuration"]},{"location":"docs/admin/map/settings/#admin-routes","title":"Admin Routes","text":"
    • /app/map/settings \u2014 map configuration
    ","tags":["guide","admin","map","configuration"]},{"location":"docs/admin/map/shifts/","title":"Shifts","text":"

    Schedule volunteer time slots and let people sign up through a public page. Shifts can be linked to specific areas so volunteers know where they'll be canvassing.

    ","tags":["guide","admin","map","shifts"]},{"location":"docs/admin/map/shifts/#creating-shifts","title":"Creating Shifts","text":"
    • Single shifts \u2014 set date, time, location description, and optional area assignment
    • Recurring shifts \u2014 create series with daily, weekly, or monthly frequency; weekly allows specific day selection
    • Calendar view \u2014 dedicated calendar tab showing shifts by date; click any date to create a new shift pre-filled
    ","tags":["guide","admin","map","shifts"]},{"location":"docs/admin/map/shifts/#series-management","title":"Series Management","text":"
    • Edit modes \u2014 when editing a recurring shift, choose: this shift only, this and future, or all in series
    • Date range \u2014 define start and optional end date; generates up to 12 weeks (capped at 100 shifts)
    • Detach \u2014 remove a shift from its series to edit independently
    ","tags":["guide","admin","map","shifts"]},{"location":"docs/admin/map/shifts/#signups","title":"Signups","text":"
    • Signup drawer \u2014 view all signups for a shift in the admin panel
    • Capacity \u2014 optionally set maximum volunteer count per shift
    • Confirmation emails \u2014 automatic email sent when a volunteer signs up or cancels
    ","tags":["guide","admin","map","shifts"]},{"location":"docs/admin/map/shifts/#admin-routes","title":"Admin Routes","text":"
    • /app/map/shifts \u2014 shift CRUD, calendar view, signup management
    ","tags":["guide","admin","map","shifts"]},{"location":"docs/admin/media/","title":"Media","text":"

    Upload, organize, and share campaign videos and photos with built-in analytics and engagement features. Enable with enableMediaFeatures in Settings.

    ","tags":["guide","admin","media"]},{"location":"docs/admin/media/#in-this-section","title":"In This Section","text":"
    • Library \u2014 upload videos and photos, manage metadata, schedule publishing, and generate preview links
    • Analytics \u2014 view counts, watch time, completion rates, traffic sources, and viewer activity
    • Curated Gallery \u2014 playlists, shorts feed, and featured content for the public gallery
    • Moderation \u2014 comment review, word filters, and content moderation tools
    • Gallery Ads \u2014 promotional cards with audience targeting, scheduling, and click-through analytics
    ","tags":["guide","admin","media"]},{"location":"docs/admin/media/ads/","title":"Gallery Ads","text":"

    Create promotional cards that appear in the public media gallery and documentation site. Manage from /app/media/ads.

    ","tags":["guide","admin","media"]},{"location":"docs/admin/media/ads/#key-features","title":"Key Features","text":"
    • Ad CRUD \u2014 create ads with title, description, image, and click-through URL
    • Placement targeting \u2014 assign ads to specific placements (gallery sidebar, gallery feed, docs sidebar)
    • Scheduling \u2014 set start and end dates for time-limited promotions
    • Click tracking \u2014 view impressions and click-through rates per ad
    • Priority ordering \u2014 control which ads appear first when multiple are active
    ","tags":["guide","admin","media"]},{"location":"docs/admin/media/ads/#admin-routes","title":"Admin Routes","text":"
    • /app/media/ads \u2014 gallery ad management and analytics
    ","tags":["guide","admin","media"]},{"location":"docs/admin/media/analytics/","title":"Analytics","text":"

    Track video engagement with GDPR-compliant analytics (IP hashing, 90-day retention).

    ","tags":["guide","admin","media","analytics"]},{"location":"docs/admin/media/analytics/#per-video-metrics","title":"Per-Video Metrics","text":"

    Each video tracks:

    • View count and unique viewers
    • Average watch time and completion rate
    • Traffic sources \u2014 direct, embedded, shared
    • Registered viewer activity (when logged in)
    ","tags":["guide","admin","media","analytics"]},{"location":"docs/admin/media/analytics/#global-dashboard","title":"Global Dashboard","text":"

    The analytics dashboard at /app/media/analytics provides:

    • Aggregate view counts across all videos
    • Top-performing content by views and completion rate
    • Viewer trends over time
    • Traffic source breakdown
    ","tags":["guide","admin","media","analytics"]},{"location":"docs/admin/media/analytics/#tracking","title":"Tracking","text":"

    Public endpoints record engagement:

    • View initiation
    • 10-second heartbeat intervals
    • navigator.sendBeacon for reliable end-of-session reporting
    ","tags":["guide","admin","media","analytics"]},{"location":"docs/admin/media/analytics/#admin-routes","title":"Admin Routes","text":"
    • /app/media/analytics \u2014 global analytics dashboard
    ","tags":["guide","admin","media","analytics"]},{"location":"docs/admin/media/curated/","title":"Curated Gallery","text":"

    Curate the public gallery experience with playlists, a shorts feed, and featured content.

    ","tags":["guide","admin","media","gallery"]},{"location":"docs/admin/media/curated/#playlists","title":"Playlists","text":"

    From /app/media/curated:

    • Three types \u2014 admin playlists (managed), user playlists (personal), and public playlists (community)
    • Drag-reorder \u2014 arrange videos within a playlist
    • Featured carousel \u2014 feature playlists on the gallery homepage
    • Dedicated viewer \u2014 full playlist playback page with up-next queue
    ","tags":["guide","admin","media","gallery"]},{"location":"docs/admin/media/curated/#shorts-feed","title":"Shorts Feed","text":"

    TikTok-style vertical video feed for clips under 60 seconds:

    • Automatic classification \u2014 videos under 60 seconds are flagged as shorts
    • Vertical feed \u2014 mobile-optimized swipeable interface at /gallery/shorts
    • Autoplay \u2014 continuous playback as viewers scroll
    ","tags":["guide","admin","media","gallery"]},{"location":"docs/admin/media/curated/#admin-routes","title":"Admin Routes","text":"
    • /app/media/curated \u2014 playlist management
    ","tags":["guide","admin","media","gallery"]},{"location":"docs/admin/media/library/","title":"Library","text":"

    The media library at /app/media/library is where you upload, organize, and publish video and photo content.

    ","tags":["guide","admin","media","videos"]},{"location":"docs/admin/media/library/#video-upload","title":"Video Upload","text":"
    • Drag-and-drop \u2014 single or batch upload (up to 10GB per file)
    • Supported formats \u2014 MP4, MOV, AVI, MKV, WebM, M4V, FLV
    • Automatic metadata \u2014 FFprobe extracts duration, dimensions, orientation, quality, and audio info
    • Quick actions \u2014 hover a video card for Edit (E), Preview (P), Analytics (A), Schedule (S) keyboard shortcuts
    ","tags":["guide","admin","media","videos"]},{"location":"docs/admin/media/library/#photo-management","title":"Photo Management","text":"
    • Albums \u2014 organize photos into named collections with cover images
    • Bulk uploads \u2014 drag-and-drop multiple photos with automatic metadata extraction
    • Photo picker \u2014 insert photos into landing pages and email templates via a modal picker
    ","tags":["guide","admin","media","videos"]},{"location":"docs/admin/media/library/#scheduled-publishing","title":"Scheduled Publishing","text":"
    • Publish/unpublish dates \u2014 set future dates for automatic state changes
    • Timezone support \u2014 11 supported timezones
    • Calendar view \u2014 visualize scheduled items on the Calendar tab
    • BullMQ automation \u2014 jobs fire at scheduled times
    ","tags":["guide","admin","media","videos"]},{"location":"docs/admin/media/library/#preview-links","title":"Preview Links","text":"

    Generate 24-hour JWT-authenticated preview links for unpublished videos \u2014 useful for stakeholder review before publishing.

    ","tags":["guide","admin","media","videos"]},{"location":"docs/admin/media/library/#admin-routes","title":"Admin Routes","text":"
    • /app/media/library \u2014 video and photo management
    • /app/media/jobs \u2014 processing job queue monitoring
    ","tags":["guide","admin","media","videos"]},{"location":"docs/admin/media/moderation/","title":"Moderation","text":"

    Admin tools for reviewing and managing comments across all media content at /app/media/moderation.

    ","tags":["guide","admin","media","moderation"]},{"location":"docs/admin/media/moderation/#moderation-dashboard","title":"Moderation Dashboard","text":"
    • Filter by status \u2014 pending, safe, flagged, hidden
    • Status counts \u2014 summary stats showing total, pending, flagged, hidden, and safe comments
    • Search \u2014 filter by video, date range, or text content
    ","tags":["guide","admin","media","moderation"]},{"location":"docs/admin/media/moderation/#moderation-actions","title":"Moderation Actions","text":"

    For each comment, admins can:

    • Approve \u2014 mark as safe and unhide if previously hidden
    • Hide \u2014 remove from public view with a reason (manual, word filter, spam, or link)
    • Unhide \u2014 restore a previously hidden comment
    • Delete \u2014 permanently remove
    • Add notes \u2014 internal moderation notes (not visible to users)
    ","tags":["guide","admin","media","moderation"]},{"location":"docs/admin/media/moderation/#word-filter","title":"Word Filter","text":"

    A configurable list of words with severity levels:

    Severity Action High Auto-blocks the comment Medium Auto-hides for review Low Flags for moderator attention Custom User-defined severity

    The filter list is cached with a 1-minute TTL and invalidated on changes.

    ","tags":["guide","admin","media","moderation"]},{"location":"docs/admin/media/moderation/#admin-routes","title":"Admin Routes","text":"
    • /app/media/moderation \u2014 comment moderation and word filter management
    ","tags":["guide","admin","media","moderation"]},{"location":"docs/admin/payments/","title":"Payments","text":"

    Accept memberships, product sales, and donations through Stripe. Enable with enablePayments in Settings.

    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/#in-this-section","title":"In This Section","text":"
    • Products \u2014 manage merchandise and one-time purchase items with inventory tracking
    • Donations \u2014 donation pages with goals, suggested amounts, and branded thank-you messages
    • Plans \u2014 recurring subscription plans with monthly and yearly billing
    • Settings \u2014 Stripe API key configuration with encrypted storage
    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/#how-it-works","title":"How It Works","text":"
    1. Enable payments in Settings or .env (ENABLE_PAYMENTS=true)
    2. Configure Stripe API keys in Settings > Payments (stored encrypted with ENCRYPTION_KEY)
    3. Payment widgets become available on landing pages and MkDocs pages
    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/donations/","title":"Donations","text":"

    Create custom branded donation landing pages with independent branding and goals.

    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/donations/#donation-pages","title":"Donation Pages","text":"

    From /app/donation-pages:

    • Custom branding \u2014 each page has its own title, description, and cover image
    • Configurable amounts \u2014 set suggested donation amounts per page
    • Thank-you messages \u2014 customizable post-donation confirmation
    • Public slugs \u2014 shareable URL at /donate/:slug
    • Goal tracking \u2014 fundraising goals with progress indicators
    • Multiple campaigns \u2014 run several pages simultaneously with independent tracking
    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/donations/#donation-management","title":"Donation Management","text":"

    From /app/donations:

    • View all donations with date, amount, donor info, and status
    • Filter by donation page, date range, or amount
    • Export to CSV for accounting and tax receipts
    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/donations/#admin-routes","title":"Admin Routes","text":"
    • /app/donations \u2014 donation management
    • /app/donation-pages \u2014 donation page CRUD
    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/plans/","title":"Plans","text":"

    Create and manage recurring subscription plans for campaign supporters at /app/plans.

    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/plans/#key-features","title":"Key Features","text":"
    • Tiered plans \u2014 multiple subscription tiers with different pricing and benefits
    • Billing cycles \u2014 monthly and yearly billing options
    • Stripe integration \u2014 subscriptions managed through Stripe for reliable recurring payments
    • Subscriber tracking \u2014 view active subscribers, MRR, and churn metrics
    • Public pricing page \u2014 plans displayed at /pricing
    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/plans/#admin-routes","title":"Admin Routes","text":"
    • /app/plans \u2014 subscription plan management
    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/products/","title":"Products","text":"

    Manage campaign merchandise and one-time purchase items at /app/products.

    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/products/#key-features","title":"Key Features","text":"
    • Product CRUD \u2014 create products with title, description, price, and images
    • Inventory management \u2014 track stock levels and set low-stock alerts
    • Stripe checkout \u2014 seamless payment flow via Stripe
    • Public shop \u2014 products displayed at /shop for public browsing and purchase
    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/products/#admin-routes","title":"Admin Routes","text":"
    • /app/products \u2014 product management
    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/settings/","title":"Payment Settings","text":"

    Configure Stripe integration from Settings > Payments.

    ","tags":["guide","admin","payments","configuration"]},{"location":"docs/admin/payments/settings/#stripe-configuration","title":"Stripe Configuration","text":"
    • Publishable key \u2014 used by the frontend for Stripe Elements and Checkout
    • Secret key \u2014 used by the API for creating charges and managing subscriptions
    • Encrypted storage \u2014 both keys are stored encrypted in the database using the ENCRYPTION_KEY environment variable (AES encryption)
    ","tags":["guide","admin","payments","configuration"]},{"location":"docs/admin/payments/settings/#webhook","title":"Webhook","text":"

    Stripe webhooks are automatically configured to handle:

    • Successful payments and subscription renewals
    • Failed payments and subscription cancellations
    • Refunds and disputes
    ","tags":["guide","admin","payments","configuration"]},{"location":"docs/admin/payments/settings/#admin-routes","title":"Admin Routes","text":"
    • /app/settings (Payments tab) \u2014 Stripe key configuration
    ","tags":["guide","admin","payments","configuration"]},{"location":"docs/admin/services/","title":"Services","text":"

    Manage the platform's infrastructure services, monitoring stack, and third-party integrations.

    ","tags":["guide","admin","services"]},{"location":"docs/admin/services/#in-this-section","title":"In This Section","text":"
    • Tunnel \u2014 Pangolin tunnel management for public access without port forwarding
    • CrowdSec & Security \u2014 CrowdSec Manager, Tinyauth forward-auth, ISP whitelisting, and Turnstile captcha on the Pangolin server
    • Monitoring \u2014 Prometheus metrics, Grafana dashboards, and Alertmanager
    • Integrations \u2014 Chat, video conferencing, password manager, whiteboard, Git hosting, automation, and QR codes
    • User Provisioning \u2014 automatic account sync across integrated services
    ","tags":["guide","admin","services"]},{"location":"docs/admin/services/crowdsec/","title":"CrowdSec Manager & Security Configuration","text":"

    This page covers the CrowdSec Manager web UI on the Pangolin server, protected behind Tinyauth authentication, along with tuning of CrowdSec security rules and enabling Cloudflare Turnstile captcha for the CrowdSec bouncer.

    ","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#architecture","title":"Architecture","text":"
    graph LR\n    User -->|HTTPS| Traefik\n    Traefik -->|forwardAuth| Tinyauth\n    Tinyauth -->|authenticated| Traefik\n    Traefik -->|proxy| CrowdSec-Manager\n    CrowdSec-Manager -->|API| CrowdSec\n    Traefik -->|bouncer plugin| CrowdSec\n    CrowdSec -->|captcha decision| Turnstile[Cloudflare Turnstile]

    All services run on the same Docker Compose stack and share the pangolin network. Traefik reaches them through Gerbil's network namespace.

    ","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#components-added","title":"Components Added","text":"","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#crowdsec-manager","title":"CrowdSec Manager","text":"

    Image: hhftechnology/crowdsec-manager:1.1.0

    A web UI for managing CrowdSec operations \u2014 viewing alerts, decisions, managing bouncers, and configuring scenarios. It has read-only access to Traefik and CrowdSec configs and read-write access to its own data and backups.

    Accessible at: https://crowdsec.bnkserve.org

    ","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#tinyauth","title":"Tinyauth","text":"

    Image: ghcr.io/steveiliop56/tinyauth:v4

    A lightweight forward-auth middleware that protects the CrowdSec Manager dashboard with a login screen. Traefik's forwardAuth middleware checks every request to the manager against Tinyauth before allowing access.

    Login page at: https://auth.bnkserve.org

    User credentials are stored in a users file (/data/users) mounted from the host, using bcrypt-hashed passwords.

    Special Characters in Passwords

    Tinyauth v4 has a known issue where special characters (@, !, etc.) in passwords can cause login failures through the browser, even though the bcrypt hash verifies correctly via the CLI. Use alphanumeric passwords to avoid this.

    ","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#traefik-routing","title":"Traefik Routing","text":"","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#routers","title":"Routers","text":"Router Domain Middleware Purpose crowdsec-manager-router crowdsec.bnkserve.org security-headers, tinyauth Dashboard (HTTPS) crowdsec-manager-redirect crowdsec.bnkserve.org redirect-to-https HTTP \u2192 HTTPS redirect tinyauth-router auth.bnkserve.org security-headers Auth login page (HTTPS) tinyauth-redirect auth.bnkserve.org redirect-to-https HTTP \u2192 HTTPS redirect

    No tinyauth middleware on the tinyauth router

    The tinyauth-router must not have the tinyauth forwardAuth middleware applied \u2014 this would create an infinite redirect loop.

    ","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#middleware","title":"Middleware","text":"

    The tinyauth forwardAuth middleware forwards every request to http://tinyauth:3000/api/auth/traefik. If the user has a valid session cookie (scoped to .bnkserve.org), the request passes through. Otherwise, the user is redirected to the Tinyauth login page.

    tinyauth:\n  forwardAuth:\n    address: http://tinyauth:3000/api/auth/traefik\n    trustForwardHeader: true\n    authResponseHeaders:\n      - X-Forwarded-User\n
    ","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#crowdsec-tuning","title":"CrowdSec Tuning","text":"","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#relaxed-crawl-detection","title":"Relaxed Crawl Detection","text":"

    The crowdsecurity/http-crawl-non_statics scenario was triggering on legitimate Canadian users browsing the site. The local override at /etc/crowdsec/scenarios/http-crawl-non_statics.yaml (replacing the hub symlink) has relaxed thresholds:

    Parameter Before After Effect capacity 40 80 Twice as many distinct pages before triggering leakspeed 0.5s 0.25s Bucket drains twice as fast

    Combined effect: 4x more lenient \u2014 a user must hit 80+ distinct non-static pages faster than 1 every 0.25 seconds to trigger a captcha.

    ","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#canadian-isp-whitelist","title":"Canadian ISP Whitelist","text":"

    A whitelist expression in /etc/crowdsec/parsers/s02-enrich/mywhitelists.yaml exempts traffic from major Canadian ISPs from all CrowdSec scenarios:

    expression:\n  - evt.Meta.ASNNumber in ['812', '852', '6327', '5645', '20365', '25668', '577']\n
    AS Number ISP 812 Rogers Communications 852 TELUS Communications 6327 Shaw Communications 5645 TekSavvy 20365 Freedom Mobile 25668 CipherKey 577 Bell Canada

    Field name

    The GeoIP enricher populates evt.Meta.ASNNumber (not ASNumber). This can be verified by inspecting /etc/crowdsec/parsers/s02-enrich/geoip-enrich.yaml.

    ","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#cloudflare-turnstile-captcha","title":"Cloudflare Turnstile Captcha","text":"

    Previously, CrowdSec captcha decisions resulted in a hard 403 block because no captcha provider was configured. Now, users with a captcha decision see a Cloudflare Turnstile challenge page and can proceed after solving it.

    Configuration added to the CrowdSec bouncer plugin in dynamic_config.yml:

    captchaProvider: turnstile\ncaptchaSiteKey: <site-key>\ncaptchaSecretKey: <secret-key>\ncaptchaHTMLFilePath: /etc/traefik/captcha.html\n

    Captcha HTML template path

    The captcha.html template is copied from the plugin source to /etc/traefik/captcha.html (the mounted config volume). Do not reference the /plugins-storage/ path directly \u2014 the hash in that path changes on every Traefik restart.

    ","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#dns-records","title":"DNS Records","text":"

    Two A records pointing to 72.11.155.21:

    Record Purpose crowdsec.bnkserve.org CrowdSec Manager dashboard auth.bnkserve.org Tinyauth login page","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#verification","title":"Verification","text":"
    # Check containers are running and healthy\ndocker ps --filter name=crowdsec-manager --filter name=tinyauth\n\n# Check both are on the pangolin network\ndocker network inspect pangolin --format '{{range .Containers}}{{.Name}} {{end}}'\n\n# Verify no Canadian ISPs in active decisions\ndocker exec crowdsec cscli decisions list | grep \"CA\"\n\n# Check CrowdSec whitelist is loaded\ndocker exec crowdsec cscli parsers inspect mywhitelists\n\n# Check Traefik logs for captcha errors\ndocker logs traefik 2>&1 | grep -i captcha\n
    ","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/integrations/","title":"Integrations","text":"

    Changemaker Lite integrates with several self-hosted services. Each runs as a Docker container and can be enabled independently.

    ","tags":["guide","admin","services","integrations"]},{"location":"docs/admin/services/integrations/#team-chat-rocketchat","title":"Team Chat (Rocket.Chat)","text":"

    Self-hosted team chat for volunteer coordination. Enable with enableChat in Settings.

    • Channels & DMs \u2014 organize conversations by topic, team, or campaign
    • Iframe integration \u2014 embedded in the admin dashboard and volunteer portal
    • Floating widget \u2014 minimizable chat FAB on admin pages (toggleable in Settings)
    • SSO-ready \u2014 iframe authentication for seamless login
    • Mobile apps \u2014 native Rocket.Chat apps work with your instance
    • Routes: /app/services/rocketchat, /volunteer/chat
    ","tags":["guide","admin","services","integrations"]},{"location":"docs/admin/services/integrations/#video-conferencing-jitsi-meet","title":"Video Conferencing (Jitsi Meet)","text":"

    Self-hosted video calls integrated with Rocket.Chat via JWT authentication. Enable with enableMeet in Settings.

    • One-click calls \u2014 start a call from any Rocket.Chat channel or DM
    • JWT auth \u2014 participants join automatically with no separate login
    • 4 containers \u2014 jitsi-web, jitsi-prosody (XMPP/JWT), jitsi-jicofo (conference focus), jitsi-jvb (video bridge)
    • Setup: Generate secrets, start containers, configure the Jitsi marketplace app in Rocket.Chat, set token expiration to now + 1hour

    Token Expiration

    Set the Jitsi app's Token Expiration to now + 1hour. A raw number like 120 is interpreted as Unix timestamp 120 (Jan 1970), causing all tokens to appear expired.

    ","tags":["guide","admin","services","integrations"]},{"location":"docs/admin/services/integrations/#password-manager-vaultwarden","title":"Password Manager (Vaultwarden)","text":"

    Bitwarden-compatible password vault for secure team credential sharing.

    • Bitwarden client compatible \u2014 use official browser extensions, desktop apps, and mobile apps
    • Auto-invite \u2014 initial admin user invited on first startup
    • User provisioning \u2014 new platform users can be auto-invited when provisioning is enabled
    • Client setup: Point Bitwarden clients to https://vault.DOMAIN
    ","tags":["guide","admin","services","integrations"]},{"location":"docs/admin/services/integrations/#whiteboard-excalidraw","title":"Whiteboard (Excalidraw)","text":"

    Collaborative whiteboard for brainstorming and campaign planning.

    • Real-time collaboration \u2014 multi-user drawing with WebSocket support
    • Embedded in admin \u2014 full-screen iframe at /app/services/excalidraw
    • Desktop only \u2014 requires a desktop browser for the drawing experience
    • Route: /app/services/excalidraw
    ","tags":["guide","admin","services","integrations"]},{"location":"docs/admin/services/integrations/#git-hosting-gitea","title":"Git Hosting (Gitea)","text":"

    Self-hosted Git repository hosting for campaign code and configuration.

    • Lightweight Git forge \u2014 repositories, issues, pull requests, and wikis
    • User provisioning \u2014 platform users can be auto-provisioned as Gitea accounts
    • Embedded \u2014 accessible at git.DOMAIN or embedded in admin at /app/services/gitea
    ","tags":["guide","admin","services","integrations"]},{"location":"docs/admin/services/integrations/#workflow-automation-n8n","title":"Workflow Automation (n8n)","text":"

    Self-hosted workflow automation for connecting platform events to external services.

    • Visual workflow editor \u2014 drag-and-drop automation builder
    • Webhook triggers \u2014 respond to platform events
    • Embedded \u2014 accessible at n8n.DOMAIN or embedded in admin at /app/services/n8n
    ","tags":["guide","admin","services","integrations"]},{"location":"docs/admin/services/integrations/#qr-code-generator-mini-qr","title":"QR Code Generator (Mini QR)","text":"

    Built-in QR code generation for walk sheets, volunteer invites, and campaign links.

    • Public API \u2014 QR code PNG generation at /api/qr
    • Walk sheet integration \u2014 QR codes embedded in printable walk sheets
    • Volunteer quick join \u2014 QR codes for instant volunteer onboarding
    • Embedded \u2014 admin interface at /app/services/qr
    ","tags":["guide","admin","services","integrations"]},{"location":"docs/admin/services/monitoring/","title":"Monitoring","text":"

    The monitoring stack runs as a Docker Compose profile and provides metrics collection, visualization, and alerting.

    ","tags":["guide","admin","services","monitoring"]},{"location":"docs/admin/services/monitoring/#starting-the-stack","title":"Starting the Stack","text":"
    docker compose --profile monitoring up -d\n

    This starts Prometheus, Grafana, Alertmanager, cAdvisor, Node Exporter, and Redis Exporter.

    ","tags":["guide","admin","services","monitoring"]},{"location":"docs/admin/services/monitoring/#custom-metrics","title":"Custom Metrics","text":"

    The platform exposes 12 custom cm_* Prometheus metrics:

    • API request rates and latencies
    • BullMQ queue sizes (email, SMS, video scheduling)
    • Active canvass sessions
    • External service health gauges
    ","tags":["guide","admin","services","monitoring"]},{"location":"docs/admin/services/monitoring/#grafana-dashboards","title":"Grafana Dashboards","text":"

    Three pre-configured dashboards auto-provisioned from configs/grafana/:

    • API Performance \u2014 request rates, latencies, error rates
    • Application Overview \u2014 queue sizes, active sessions, service health
    • System Health \u2014 container resources, host metrics, Redis stats
    ","tags":["guide","admin","services","monitoring"]},{"location":"docs/admin/services/monitoring/#alertmanager","title":"Alertmanager","text":"

    Alert rules in configs/prometheus/alerts.yml cover:

    • API downtime and high error rates
    • Queue backlogs
    • Service connectivity failures
    • Resource utilization thresholds
    ","tags":["guide","admin","services","monitoring"]},{"location":"docs/admin/services/monitoring/#admin-routes","title":"Admin Routes","text":"
    • /app/observability \u2014 embedded Grafana dashboards, alert status, and service health (3 tabs)
    ","tags":["guide","admin","services","monitoring"]},{"location":"docs/admin/services/monitoring/#direct-access","title":"Direct Access","text":"
    • Grafana: localhost:3001 or grafana.DOMAIN
    • Prometheus: localhost:9090
    • Alertmanager: localhost:9093
    ","tags":["guide","admin","services","monitoring"]},{"location":"docs/admin/services/tunnel/","title":"Tunnel (Pangolin)","text":"

    Pangolin provides secure tunneling to expose your self-hosted services to the internet without port forwarding or a static IP.

    ","tags":["guide","admin","services","networking"]},{"location":"docs/admin/services/tunnel/#setup","title":"Setup","text":"

    From /app/pangolin:

    • Automated setup \u2014 one-command deployment that creates the Pangolin site, updates .env with credentials, and restarts the Newt tunnel container
    • Manual setup \u2014 step-by-step instructions for connecting to an existing Pangolin instance
    ","tags":["guide","admin","services","networking"]},{"location":"docs/admin/services/tunnel/#resource-management","title":"Resource Management","text":"

    The platform defines 12+ service resources in configs/pangolin/resources.yml:

    • Each resource maps a subdomain (e.g., api.DOMAIN, app.DOMAIN) to an internal service
    • Hourly sync \u2014 nginx cron job pushes resource definitions to Pangolin automatically
    • Status dashboard \u2014 view tunnel connection status and resource health
    ","tags":["guide","admin","services","networking"]},{"location":"docs/admin/services/tunnel/#newt-container","title":"Newt Container","text":"

    The Newt container runs alongside nginx and tunnels traffic to your services:

    • Configured via PANGOLIN_NEWT_ID and PANGOLIN_NEWT_SECRET environment variables
    • Depends on nginx (all resources route through nginx:80)
    • Auto-restarts on failure
    ","tags":["guide","admin","services","networking"]},{"location":"docs/admin/services/tunnel/#security","title":"Security","text":"

    The Pangolin server runs CrowdSec for intrusion detection with a web management UI protected by Tinyauth forward-auth. See CrowdSec & Security for details on:

    • CrowdSec Manager dashboard (crowdsec.bnkserve.org)
    • Tinyauth authentication (auth.bnkserve.org)
    • Canadian ISP whitelisting and crawl detection tuning
    • Cloudflare Turnstile captcha integration
    ","tags":["guide","admin","services","networking"]},{"location":"docs/admin/services/tunnel/#admin-routes","title":"Admin Routes","text":"
    • /app/pangolin \u2014 tunnel status, setup wizard, and resource management
    ","tags":["guide","admin","services","networking"]},{"location":"docs/admin/services/user-provisioning/","title":"User Provisioning","text":"

    Automatically create and sync user accounts across integrated services when new platform users are registered. Enable with enableUserProvisioning in Settings.

    ","tags":["guide","admin","services"]},{"location":"docs/admin/services/user-provisioning/#supported-services","title":"Supported Services","text":"Service Mode Notes Rocket.Chat Always lazy SSO on first access Gitea Eager or lazy Admin API provisioning Vaultwarden Eager or lazy Invite-based (no password management) Listmonk Eager or lazy Subscriber sync","tags":["guide","admin","services"]},{"location":"docs/admin/services/user-provisioning/#configuration","title":"Configuration","text":"

    From Settings > User Provisioning:

    • Toggle provisioning per service
    • Choose eager (create immediately on user registration) or lazy (create on first access)
    • View provisioning status per user in the Service Accounts panel on the Users page
    ","tags":["guide","admin","services"]},{"location":"docs/admin/services/user-provisioning/#bulk-sync","title":"Bulk Sync","text":"

    Trigger a bulk sync from /api/users/provisioning/sync to provision all existing users across enabled services. Useful after enabling a new service.

    ","tags":["guide","admin","services"]},{"location":"docs/admin/services/user-provisioning/#admin-routes","title":"Admin Routes","text":"
    • /app/users (edit drawer) \u2014 per-user service account status and actions
    • /app/settings (User Provisioning tab) \u2014 per-service toggle and timing
    ","tags":["guide","admin","services"]},{"location":"docs/admin/web/","title":"Web Content","text":"

    Manage the public-facing web presence \u2014 landing pages, the dynamic homepage, navigation menu, and documentation site.

    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/#in-this-section","title":"In This Section","text":"
    • Landing Pages \u2014 build campaign microsites with the GrapesJS drag-and-drop editor
    • Homepage \u2014 dynamic public landing page aggregating campaigns, shifts, media, and events
    • Navigation \u2014 customize the public navigation menu with toggles, custom links, and reordering
    • Documentation \u2014 MkDocs site management, page analytics, and comment moderation
    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/#social-sharing","title":"Social Sharing","text":"

    All public content (campaigns, landing pages, gallery videos) automatically generates Open Graph and Twitter Card meta tags for rich link previews when shared on social media, messaging apps, and search engines. OG responses are cached in Redis for 10 minutes.

    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/documentation/","title":"Documentation","text":"

    Manage the MkDocs documentation site, track page engagement, and moderate visitor comments.

    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/documentation/#mkdocs-management","title":"MkDocs Management","text":"

    From Docs (/app/docs):

    • View MkDocs build status and health
    • Browse the documentation file tree
    • Export landing pages to MkDocs as Jinja2 Material theme overrides
    • Configure documentation settings from MkDocs Settings (/app/docs/settings)
    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/documentation/#documentation-analytics","title":"Documentation Analytics","text":"

    Track how visitors interact with documentation pages using the MkDocs Material theme's custom analytics provider and navigation.tracking.

    • Navigation tracking \u2014 updates the browser URL as users scroll through sections, enabling section-level engagement tracking
    • Custom provider \u2014 integrates with any third-party analytics tool (Plausible, Umami, Google Analytics) via template overrides in docs/overrides/
    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/documentation/#comments","title":"Comments","text":"

    Visitors can leave comments on documentation pages using a Gitea-backed comment system.

    • Anonymous posting \u2014 visitors can comment without creating an account
    • Gitea-backed \u2014 comments stored as Gitea issues (one issue per page) for version control and searchability
    • Moderation \u2014 admin panel at /app/docs-comments for approving, hiding, or deleting comments
    • OAuth login \u2014 optional Gitea OAuth for authenticated commenting
    • Per-page threads \u2014 each documentation page gets its own comment thread
    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/documentation/#admin-routes","title":"Admin Routes","text":"
    • /app/docs \u2014 MkDocs management (file tree, config, build triggers)
    • /app/docs/settings \u2014 documentation configuration
    • /app/docs-comments \u2014 moderate documentation comments
    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/homepage/","title":"Public Homepage","text":"

    A dynamic public landing page that showcases your organization and aggregates content from across the platform.

    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/homepage/#sections","title":"Sections","text":"

    The homepage assembles its content from enabled modules. Sections are only displayed when their corresponding module is active and has data to show.

    • Hero banner \u2014 organization name, logo, tagline (configurable via Settings), and call-to-action buttons for campaigns and volunteer signups
    • Stats counters \u2014 active campaigns, total emails sent, and volunteer signups (shown only when counts are greater than zero)
    • Featured campaigns \u2014 up to 3 active campaigns, sorted by highlight status then creation date, with email counts and descriptions
    • Upcoming shifts \u2014 up to 3 open shifts with date, time, location, and spots remaining
    • Latest videos \u2014 up to 4 recently published videos from the media library, displayed in a horizontal scroll strip with thumbnails and durations
    • Upcoming events \u2014 up to 3 future events from Gancio with date, location, and tags
    • Recent activity \u2014 a compact activity feed showing the latest platform actions
    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/homepage/#data-caching","title":"Data & Caching","text":"

    All homepage data is fetched from a single API endpoint (/api/homepage) and cached in Redis for 2 minutes. Individual section queries use Promise.allSettled so that a failure in one module (e.g., Gancio being offline) does not prevent the rest of the page from loading.

    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/homepage/#configuration","title":"Configuration","text":"
    • Organization name and logo \u2014 set via Settings > Organization
    • Homepage tagline \u2014 set via the homepageTagline field in site settings
    • Module visibility \u2014 controlled by feature flags (enableInfluence, enableMap, enableMediaFeatures, enableEvents, enablePayments, enableLandingPages)
    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/homepage/#public-routes","title":"Public Routes","text":"
    • /home \u2014 public homepage
    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/landing-pages/","title":"Landing Pages","text":"

    Build campaign microsites with a drag-and-drop visual editor.

    ","tags":["guide","admin","content","landing-pages"]},{"location":"docs/admin/web/landing-pages/#how-it-works","title":"How It Works","text":"
    1. Create a new page from the admin panel
    2. Open the GrapesJS visual editor \u2014 drag blocks, edit text, adjust styles
    3. Save and publish \u2014 the page goes live at /p/:slug
    4. Optionally export to MkDocs for inclusion in the documentation site
    ","tags":["guide","admin","content","landing-pages"]},{"location":"docs/admin/web/landing-pages/#admin-routes","title":"Admin Routes","text":"
    • /app/pages \u2014 list and manage landing pages
    • /app/pages/:id/edit \u2014 full-screen GrapesJS editor
    ","tags":["guide","admin","content","landing-pages"]},{"location":"docs/admin/web/landing-pages/#public-routes","title":"Public Routes","text":"
    • /p/:slug \u2014 view a published landing page
    ","tags":["guide","admin","content","landing-pages"]},{"location":"docs/admin/web/navigation/","title":"Navigation Settings","text":"

    Customize the public-facing navigation menu from the admin panel. The navigation bar appears on all public pages, the admin header, the Gancio events page, and the MkDocs documentation site.

    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/navigation/#key-features","title":"Key Features","text":"
    • Per-item toggle -- enable or disable each navigation item with a switch
    • Custom links -- add external links or internal paths to the navigation
    • Reorder -- move items up and down to arrange them in any order
    • Editable labels and paths -- rename any item or change its destination
    • Feature flag awareness -- builtin items tied to a feature flag (e.g., Campaigns requires enableInfluence) are automatically hidden when that feature is disabled
    • Visitor control -- determine exactly what public visitors can access
    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/navigation/#builtin-items","title":"Builtin Items","text":"

    The platform ships with 11 builtin navigation items that cover the main public routes:

    Home, Campaigns, Map, Shifts, Events, Gallery, Pricing, Shop, Donate, Website (landing page), and Docs (documentation site).

    Each builtin item has a default icon and path. Some paths use special $ tokens (e.g., $landing, $docs) that are automatically resolved to the correct external URL based on the deployment environment.

    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/navigation/#custom-links","title":"Custom Links","text":"

    Add any number of custom links via the \"Add Custom Link\" button. Custom links support:

    • Internal paths (e.g., /blog)
    • External URLs (e.g., https://example.com) -- automatically detected and opened in a new tab

    Custom links can be deleted from the navigation; builtin items can only be toggled off.

    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/navigation/#mobile-handling","title":"Mobile Handling","text":"

    On mobile devices, the navigation collapses into a hamburger menu that opens a full-height drawer. On desktop, the nav bar also supports a collapse mode that hides labels and shows only icons, toggled via a fold/unfold button. The collapse state is persisted in local storage.

    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/navigation/#admin-routes","title":"Admin Routes","text":"
    • /app/navigation -- navigation editor with per-item toggle, reorder, label editing, and custom link management
    ","tags":["guide","admin","content"]},{"location":"docs/api/","title":"API Reference","text":"

    Changemaker Lite exposes two REST APIs sharing a single PostgreSQL database.

    Server Framework Port Purpose Main API Express.js 4000 Auth, campaigns, map, shifts, canvassing, pages, email, settings Media API Fastify 4100 Video library, analytics, playlists, reactions, comments

    Both APIs use JWT Bearer authentication and return JSON. All request/response bodies are application/json unless noted otherwise.

    ","tags":["reference","developer","API"]},{"location":"docs/api/#authentication","title":"Authentication","text":"","tags":["reference","developer","API"]},{"location":"docs/api/#token-flow","title":"Token Flow","text":"
    sequenceDiagram\n    participant Client\n    participant API\n    participant DB\n\n    Client->>API: POST /api/auth/login {email, password}\n    API->>DB: Verify credentials\n    DB-->>API: User record\n    API-->>Client: {accessToken, refreshToken}\n    Note over Client: Store tokens\n\n    Client->>API: GET /api/campaigns (Authorization: Bearer <accessToken>)\n    API-->>Client: 200 OK\n\n    Note over Client: Access token expires (15 min)\n\n    Client->>API: POST /api/auth/refresh {refreshToken}\n    API->>DB: Rotate token (atomic transaction)\n    DB-->>API: New token pair\n    API-->>Client: {accessToken, refreshToken}
    ","tags":["reference","developer","API"]},{"location":"docs/api/#headers","title":"Headers","text":"

    All authenticated requests require:

    Authorization: Bearer <accessToken>\n

    The Media API also accepts tokens via query parameter for SSE streams:

    GET /api/public/:id/chat-stream?token=<accessToken>\n
    ","tags":["reference","developer","API"]},{"location":"docs/api/#roles","title":"Roles","text":"Role Access Level SUPER_ADMIN Full platform access INFLUENCE_ADMIN Campaign and advocacy management MAP_ADMIN Map, locations, shifts, canvassing USER Volunteer portal, public features TEMP Limited access (auto-created on public shift signup)","tags":["reference","developer","API"]},{"location":"docs/api/#middleware-reference","title":"Middleware Reference","text":"Middleware Effect authenticate Requires valid JWT. Sets req.user with id, email, role. Returns 401 if missing or invalid. optionalAuth Same as authenticate but continues without user if token is absent. requireRole(...roles) Checks user role against allowed list. Returns 403 if not authorized. requireNonTemp Blocks TEMP users. Returns 403. validate(schema, source) Validates request body/query/params against a Zod schema. Returns 400 on failure.","tags":["reference","developer","API"]},{"location":"docs/api/#error-responses","title":"Error Responses","text":"

    All errors follow a consistent format:

    {\n  \"error\": {\n    \"message\": \"Human-readable error description\",\n    \"code\": \"ERROR_CODE\",\n    \"statusCode\": 400\n  }\n}\n
    Status Code Meaning 400 VALIDATION_ERROR Request body/query failed schema validation 401 UNAUTHORIZED Missing or invalid access token 403 FORBIDDEN Valid token but insufficient role 404 NOT_FOUND Resource does not exist 429 RATE_LIMITED Too many requests (see Rate Limits) 500 INTERNAL_ERROR Unexpected server error

    Enumeration Prevention

    Auth endpoints (/login, /register, /forgot-password) return generic success messages to prevent user enumeration. A 401 from /api/auth/me does not reveal whether the user exists.

    ","tags":["reference","developer","API"]},{"location":"docs/api/#rate-limits","title":"Rate Limits","text":"

    Rate limits are Redis-backed and keyed by IP address.

    Endpoint Group Window Max Requests Redis Prefix Auth (login, register, refresh) 15 min 10 rl:auth: Email sending 1 hour 30 rl:email: Response submission 1 hour 10 rl:response: Shift signup 1 hour 10 rl:shift-signup: Canvass visits 1 min 30 rl:canvass-visit: Canvass bulk visits 1 min 5 rl:canvass-visit-bulk: GPS tracking 1 min 6 rl:gps-tracking: Canvass geocode 1 min 10 rl:canvass-geocode: Observability 1 min 20 rl:observability: Health/metrics 1 min 30 rl:health-metrics: Global (all other) Configurable Configurable rl:global:

    When rate-limited, the API returns:

    {\n  \"error\": {\n    \"message\": \"Too many requests, please try again later\",\n    \"code\": \"RATE_LIMITED\",\n    \"statusCode\": 429\n  }\n}\n
    ","tags":["reference","developer","API"]},{"location":"docs/api/#main-api-express-port-4000","title":"Main API (Express \u2014 Port 4000)","text":"","tags":["reference","developer","API"]},{"location":"docs/api/#health-metrics","title":"Health & Metrics","text":"Method Path Auth Description GET /api/health Health check \u2014 PostgreSQL + Redis ping GET /api/metrics Prometheus metrics (text/plain) Health response 
    {\n  \"status\": \"healthy\",\n  \"checks\": {\n    \"database\": \"ok\",\n    \"redis\": \"ok\"\n  }\n}\n
    ","tags":["reference","developer","API"]},{"location":"docs/api/#auth","title":"Auth","text":"

    Prefix: /api/auth

    Method Path Auth Rate Limited Description POST /api/auth/login Email + password login POST /api/auth/register Create account (always USER role) POST /api/auth/verify-email Verify email with token POST /api/auth/resend-verification Resend verification email POST /api/auth/forgot-password Send password reset email POST /api/auth/reset-password Set new password with reset token POST /api/auth/refresh Rotate refresh token \u2192 new token pair POST /api/auth/logout Invalidate refresh token GET /api/auth/me Current user profile Login request & response

    Request: 

    {\n  \"email\": \"admin@example.com\",\n  \"password\": \"SecurePass123!\"\n}\n
    Response: 
    {\n  \"accessToken\": \"eyJhbG...\",\n  \"refreshToken\": \"eyJhbG...\",\n  \"user\": {\n    \"id\": \"uuid\",\n    \"email\": \"admin@example.com\",\n    \"name\": \"Admin\",\n    \"role\": \"SUPER_ADMIN\"\n  }\n}\n

    Password Policy

    Passwords must be at least 12 characters with at least one uppercase letter, one lowercase letter, and one digit.

    ","tags":["reference","developer","API"]},{"location":"docs/api/#users","title":"Users","text":"

    Prefix: /api/users \u00b7 Auth: All routes require authentication

    Method Path Role Description GET /api/users Admin Paginated user list with search, role, and status filters GET /api/users/:id Admin or self Single user profile POST /api/users Admin Create user PUT /api/users/:id Admin or self Update user (non-admins cannot change role/status) POST /api/users/:id/approve Admin Approve pending user; sends approval email POST /api/users/:id/reject Admin Reject pending user DELETE /api/users/:id Admin Delete user

    Query parameters for GET /api/users:

    Param Type Description page number Page number (default 1) limit number Items per page (default 20) search string Search by name or email role string Filter by role status string Filter by status","tags":["reference","developer","API"]},{"location":"docs/api/#dashboard","title":"Dashboard","text":"

    Prefix: /api/dashboard \u00b7 Auth: Admin roles required

    Method Path Role Description GET /api/dashboard/summary Any admin Platform-wide counts (users, campaigns, locations, shifts) GET /api/dashboard/system SUPER_ADMIN Hardware + OS info (CPU, memory, disk) GET /api/dashboard/containers SUPER_ADMIN Docker container statuses GET /api/dashboard/weather Any admin Current weather at map center coordinates GET /api/dashboard/api-metrics SUPER_ADMIN Prometheus API performance metrics GET /api/dashboard/time-series SUPER_ADMIN Prometheus time-series data GET /api/dashboard/container-resources SUPER_ADMIN cAdvisor CPU/memory/network per container

    Query parameters for GET /api/dashboard/time-series:

    Param Type Description metrics string Comma-separated metric keys (whitelist-validated) range string Time range (e.g., 1h, 24h, 7d) step string Sample interval (e.g., 5m, 1h)","tags":["reference","developer","API"]},{"location":"docs/api/#campaigns","title":"Campaigns","text":"","tags":["reference","developer","API"]},{"location":"docs/api/#admin-crud","title":"Admin CRUD","text":"

    Prefix: /api/campaigns \u00b7 Auth: Admin roles

    Method Path Description GET /api/campaigns Paginated campaign list GET /api/campaigns/:id Single campaign detail POST /api/campaigns Create campaign PUT /api/campaigns/:id Update campaign DELETE /api/campaigns/:id Delete campaign","tags":["reference","developer","API"]},{"location":"docs/api/#public","title":"Public","text":"Method Path Auth Description GET /api/campaigns/public List all active campaigns GET /api/campaigns/:slug/details Campaign detail by slug (ACTIVE only)","tags":["reference","developer","API"]},{"location":"docs/api/#user-submissions","title":"User Submissions","text":"

    Auth: Authenticated, non-TEMP users

    Method Path Description POST /api/campaigns/user/submit Submit campaign for moderation (5/hour limit) GET /api/campaigns/user/my-campaigns List own submitted campaigns PUT /api/campaigns/user/:id Edit own pending campaign","tags":["reference","developer","API"]},{"location":"docs/api/#moderation","title":"Moderation","text":"

    Auth: Admin roles

    Method Path Description GET /api/campaigns/moderation/queue Campaigns pending moderation GET /api/campaigns/moderation/stats Moderation queue statistics PATCH /api/campaigns/moderation/:id Approve or reject campaign","tags":["reference","developer","API"]},{"location":"docs/api/#campaign-emails","title":"Campaign Emails","text":"Method Path Auth Description POST /api/campaigns/:slug/send-email Send advocacy email to representatives (rate limited: 30/hour) POST /api/campaigns/:slug/track-mailto Track mailto link click GET /api/campaigns/:id/emails Admin Paginated emails for campaign GET /api/campaigns/:id/email-stats Admin Email statistics","tags":["reference","developer","API"]},{"location":"docs/api/#responses","title":"Responses","text":"

    Prefix: /api/campaigns (public) and /api/responses (admin + actions)

    ","tags":["reference","developer","API"]},{"location":"docs/api/#public_1","title":"Public","text":"Method Path Auth Description GET /api/campaigns/:slug/responses List approved public responses GET /api/campaigns/:slug/response-stats Response statistics POST /api/campaigns/:slug/responses Submit response (rate limited: 10/hour) POST /api/responses/:id/upvote Optional Upvote a response DELETE /api/responses/:id/upvote Optional Remove upvote GET /api/responses/:id/verify/:token Verify response via email link","tags":["reference","developer","API"]},{"location":"docs/api/#admin","title":"Admin","text":"

    Auth: Admin roles

    Method Path Description GET /api/responses All responses with filters PATCH /api/responses/:id/status Approve or reject response POST /api/responses/:id/resend-verification Resend verification email DELETE /api/responses/:id Delete response","tags":["reference","developer","API"]},{"location":"docs/api/#representatives","title":"Representatives","text":"

    Prefix: /api/representatives

    Method Path Auth Description GET /api/representatives/by-postal/:postalCode Lookup representatives by postal code (cache-first) GET /api/representatives/test-connection Represent API health check GET /api/representatives/cache-stats Admin Cache statistics GET /api/representatives Admin Paginated cached representatives GET /api/representatives/:id Admin Single cached representative DELETE /api/representatives/by-postal/:postalCode Admin Clear cache for postal code DELETE /api/representatives/:id Admin Delete cached representative

    Query parameters for postal code lookup:

    Param Type Description refresh boolean Force API call, bypass cache","tags":["reference","developer","API"]},{"location":"docs/api/#email-queue","title":"Email Queue","text":"

    Prefix: /api/email-queue \u00b7 Auth: Admin roles

    Method Path Description GET /api/email-queue/stats BullMQ queue statistics (waiting, active, completed, failed) POST /api/email-queue/pause Pause email processing POST /api/email-queue/resume Resume email processing POST /api/email-queue/clean Clean completed jobs","tags":["reference","developer","API"]},{"location":"docs/api/#locations","title":"Locations","text":"

    Prefix: /api/map/locations

    ","tags":["reference","developer","API"]},{"location":"docs/api/#public_2","title":"Public","text":"Method Path Description GET /api/map/locations/public All geocoded locations for map (no PII); optional ?bounds=","tags":["reference","developer","API"]},{"location":"docs/api/#admin_1","title":"Admin","text":"

    Auth: SUPER_ADMIN or MAP_ADMIN

    Method Path Description GET /api/map/locations Paginated locations with filters GET /api/map/locations/stats Location statistics GET /api/map/locations/all All geocoded locations for admin map GET /api/map/locations/export-csv CSV export GET /api/map/locations/:id Single location GET /api/map/locations/:id/history Edit history POST /api/map/locations Create location PUT /api/map/locations/:id Update location DELETE /api/map/locations/:id Delete location POST /api/map/locations/bulk-delete Bulk delete POST /api/map/locations/geocode Geocode single address POST /api/map/locations/geocode-missing Batch geocode all ungeocoded POST /api/map/locations/reverse-geocode Reverse geocode lat/lng to address POST /api/map/locations/import-csv Import from CSV (10 MB limit) POST /api/map/locations/import-bulk Bulk NAR or standard CSV import (100 MB limit)","tags":["reference","developer","API"]},{"location":"docs/api/#bulk-geocode","title":"Bulk Geocode","text":"

    Prefix: /api/map/locations/bulk-geocode \u00b7 Auth: Map admins

    Method Path Description POST /api/map/locations/bulk-geocode Start BullMQ bulk geocoding job GET /api/map/locations/bulk-geocode/:jobId Poll job status GET /api/map/locations/bulk-geocode/stats Queue statistics","tags":["reference","developer","API"]},{"location":"docs/api/#nar-import","title":"NAR Import","text":"

    Prefix: /api/map/nar-import \u00b7 Auth: Map admins

    Method Path Description GET /api/map/nar-import/datasets Available NAR datasets by province POST /api/map/nar-import Start province import (fire-and-forget) GET /api/map/nar-import/status/:importId Poll import progress NAR Import body 
    {\n  \"provinceCode\": \"24\",\n  \"filterType\": \"city\",\n  \"filterCity\": \"Edmonton\",\n  \"residentialOnly\": true,\n  \"deduplicateRadius\": 10,\n  \"batchSize\": 500\n}\n
    ","tags":["reference","developer","API"]},{"location":"docs/api/#area-import","title":"Area Import","text":"

    Prefix: /api/map/area-import \u00b7 Auth: Map admins

    Method Path Description POST /api/map/area-import/preview Preview bounds + estimated record counts POST /api/map/area-import Start area import (fire-and-forget) GET /api/map/area-import/status/:importId Poll import progress","tags":["reference","developer","API"]},{"location":"docs/api/#cuts-polygons","title":"Cuts (Polygons)","text":"

    Prefix: /api/map/cuts

    Method Path Auth Description GET /api/map/cuts/public All public cuts as GeoJSON GET /api/map/cuts Map admin Paginated cuts list GET /api/map/cuts/:id Map admin Single cut POST /api/map/cuts Map admin Create cut (polygon GeoJSON) PUT /api/map/cuts/:id Map admin Update cut DELETE /api/map/cuts/:id Map admin Delete cut GET /api/map/cuts/:id/locations Map admin All locations within cut polygon GET /api/map/cuts/:id/statistics Map admin Support level breakdown GET /api/map/cuts/export-geojson Map admin All cuts as GeoJSON FeatureCollection GET /api/map/cuts/:id/export-geojson Map admin Single cut as GeoJSON Feature POST /api/map/cuts/import-geojson Map admin Import cuts from GeoJSON file","tags":["reference","developer","API"]},{"location":"docs/api/#shifts","title":"Shifts","text":"

    Prefix: /api/map/shifts

    ","tags":["reference","developer","API"]},{"location":"docs/api/#public_3","title":"Public","text":"Method Path Description GET /api/map/shifts/public List upcoming public shifts POST /api/map/shifts/public/:id/signup Public signup (creates TEMP user if needed; rate limited: 10/hour)","tags":["reference","developer","API"]},{"location":"docs/api/#volunteer","title":"Volunteer","text":"

    Auth: Any authenticated user

    Method Path Description GET /api/map/shifts/volunteer/upcoming Upcoming shifts with signup status GET /api/map/shifts/volunteer/my-signups Own confirmed signups POST /api/map/shifts/volunteer/:id/signup Sign up for shift DELETE /api/map/shifts/volunteer/:id/signup Cancel signup","tags":["reference","developer","API"]},{"location":"docs/api/#admin_2","title":"Admin","text":"

    Auth: Map admins

    Method Path Description GET /api/map/shifts Paginated shifts with filters GET /api/map/shifts/stats Statistics GET /api/map/shifts/calendar Calendar data (?startDate=&endDate=) GET /api/map/shifts/:id Single shift with signups POST /api/map/shifts Create shift PUT /api/map/shifts/:id Update shift DELETE /api/map/shifts/:id Delete shift POST /api/map/shifts/:id/signups Admin-add volunteer DELETE /api/map/shifts/:id/signups/:signupId Remove volunteer POST /api/map/shifts/:id/email-details Email details to all volunteers","tags":["reference","developer","API"]},{"location":"docs/api/#shift-series","title":"Shift Series","text":"

    Auth: Map admins

    Method Path Description POST /api/map/shifts/series Create recurring shift series GET /api/map/shifts/series/:id Get series PUT /api/map/shifts/series/:id Update series DELETE /api/map/shifts/series/:id Delete series","tags":["reference","developer","API"]},{"location":"docs/api/#canvassing","title":"Canvassing","text":"

    Prefix: /api/map/canvass

    ","tags":["reference","developer","API"]},{"location":"docs/api/#volunteer_1","title":"Volunteer","text":"

    Auth: Any authenticated user

    Method Path Description GET /api/map/canvass/my/assignments Shift assignments GET /api/map/canvass/my/stats Personal canvass statistics GET /api/map/canvass/my/visits Visit history GET /api/map/canvass/my/session Active canvass session POST /api/map/canvass/sessions Start canvass session POST /api/map/canvass/sessions/:id/end End session GET /api/map/canvass/cuts/:cutId/locations Locations in cut with visit annotations GET /api/map/canvass/cuts/:cutId/route Walking route algorithm for cut GET /api/map/canvass/locations All locations with visit annotations PUT /api/map/canvass/locations/:id Edit address (role-gated fields) POST /api/map/canvass/locations Create location POST /api/map/canvass/reverse-geocode Reverse geocode lat/lng POST /api/map/canvass/geocode-search Geocode address for map (rate limited: 10/min) POST /api/map/canvass/visits Record door knock (rate limited: 30/min) POST /api/map/canvass/visits/bulk Record visit for all unvisited units (rate limited: 5/min)","tags":["reference","developer","API"]},{"location":"docs/api/#admin_3","title":"Admin","text":"

    Auth: SUPER_ADMIN or MAP_ADMIN

    Method Path Description GET /api/map/canvass/stats Platform-wide canvass statistics GET /api/map/canvass/stats/cuts/:cutId Statistics for specific cut GET /api/map/canvass/activity Recent activity feed GET /api/map/canvass/volunteers All volunteers with canvass activity GET /api/map/canvass/volunteers/:userId Individual volunteer statistics GET /api/map/canvass/visits All visits with filters","tags":["reference","developer","API"]},{"location":"docs/api/#gps-tracking","title":"GPS Tracking","text":"

    Prefix: /api/map/tracking

    ","tags":["reference","developer","API"]},{"location":"docs/api/#volunteer_2","title":"Volunteer","text":"

    Auth: Any authenticated user

    Method Path Description POST /api/map/tracking/sessions Start GPS tracking session POST /api/map/tracking/sessions/:id/end End tracking session POST /api/map/tracking/sessions/:id/points Submit GPS point batch (rate limited: 6/min) POST /api/map/tracking/sessions/:id/link-canvass Link to canvass session GET /api/map/tracking/my/session Active tracking session GET /api/map/tracking/my/sessions Own historical sessions GET /api/map/tracking/my/sessions/:id/route Full route for own session","tags":["reference","developer","API"]},{"location":"docs/api/#admin_4","title":"Admin","text":"

    Auth: Map admins

    Method Path Description GET /api/map/tracking/live Live volunteer positions + trails GET /api/map/tracking/sessions All historical tracking sessions GET /api/map/tracking/sessions/:id/route Full route for any session","tags":["reference","developer","API"]},{"location":"docs/api/#map-settings","title":"Map Settings","text":"

    Prefix: /api/map/settings

    Method Path Auth Description GET /api/map/settings Public map settings (center, zoom, walk sheet config) PUT /api/map/settings Map admin Update map settings","tags":["reference","developer","API"]},{"location":"docs/api/#geocoding","title":"Geocoding","text":"

    Prefix: /api/map/geocoding \u00b7 Auth: Map admins

    Method Path Description GET /api/map/geocoding/search Geocode address search (?q=&limit=1-10)","tags":["reference","developer","API"]},{"location":"docs/api/#landing-pages","title":"Landing Pages","text":"

    Prefix: /api/pages and /api/page-blocks

    ","tags":["reference","developer","API"]},{"location":"docs/api/#public_4","title":"Public","text":"Method Path Auth Description GET /api/pages/:slug/view Get published page by slug","tags":["reference","developer","API"]},{"location":"docs/api/#admin_5","title":"Admin","text":"

    Auth: Admin roles

    Method Path Description GET /api/pages Paginated landing pages GET /api/pages/:id Single page POST /api/pages Create page PUT /api/pages/:id Update page DELETE /api/pages/:id Delete page POST /api/pages/sync Sync MkDocs overrides from filesystem POST /api/pages/validate Validate and repair MkDocs exports","tags":["reference","developer","API"]},{"location":"docs/api/#block-library","title":"Block Library","text":"

    Auth: Admin roles

    Method Path Description GET /api/page-blocks List blocks GET /api/page-blocks/:id Single block POST /api/page-blocks Create block PUT /api/page-blocks/:id Update block DELETE /api/page-blocks/:id Delete block","tags":["reference","developer","API"]},{"location":"docs/api/#email-templates","title":"Email Templates","text":"

    Prefix: /api/email-templates \u00b7 Auth: Admin roles (seed/cache require SUPER_ADMIN)

    Method Path Description GET /api/email-templates List templates GET /api/email-templates/:id Single template POST /api/email-templates Create template PUT /api/email-templates/:id Update template DELETE /api/email-templates/:id Delete template GET /api/email-templates/:id/versions Version history GET /api/email-templates/:id/versions/:versionNumber Specific version POST /api/email-templates/:id/rollback Rollback to prior version POST /api/email-templates/validate Validate Handlebars syntax POST /api/email-templates/:id/test Send test email (rate limited: 10/15min) GET /api/email-templates/:id/test-logs Test send logs POST /api/email-templates/seed Seed templates from filesystem POST /api/email-templates/clear-cache Clear template cache","tags":["reference","developer","API"]},{"location":"docs/api/#qr-codes","title":"QR Codes","text":"Method Path Auth Description GET /api/qr Generate QR code PNG (?text=&size=50-500)

    Cached for 1 hour. Returns image/png.

    ","tags":["reference","developer","API"]},{"location":"docs/api/#site-settings","title":"Site Settings","text":"

    Prefix: /api/settings

    Method Path Auth Description GET /api/settings Public site settings (SMTP credentials stripped) GET /api/settings/admin SUPER_ADMIN Full settings including SMTP credentials PUT /api/settings SUPER_ADMIN Update settings POST /api/settings/email/test-connection SUPER_ADMIN Test SMTP connection POST /api/settings/email/test-send SUPER_ADMIN Send test email","tags":["reference","developer","API"]},{"location":"docs/api/#listmonk-newsletter-sync","title":"Listmonk (Newsletter Sync)","text":"

    Prefix: /api/listmonk \u00b7 Auth: SUPER_ADMIN

    Method Path Description GET /api/listmonk Sync status + connection check GET /api/listmonk/stats Subscriber counts from Listmonk POST /api/listmonk/test-connection Health check POST /api/listmonk/sync/participants Sync campaign participants POST /api/listmonk/sync/locations Sync locations POST /api/listmonk/sync/users Sync users POST /api/listmonk/sync/all Run all sync operations POST /api/listmonk/reinitialize Reinitialize Listmonk lists GET /api/listmonk/proxy-url Proxy port + JWT for iframe","tags":["reference","developer","API"]},{"location":"docs/api/#documentation-management","title":"Documentation Management","text":"

    Prefix: /api/docs \u00b7 Auth: Authenticated, non-TEMP (write operations require SUPER_ADMIN)

    Method Path Description GET /api/docs/status MkDocs + Code Server availability GET /api/docs/config Port numbers for iframe URLs GET /api/docs/mkdocs-config Read raw mkdocs.yml PUT /api/docs/mkdocs-config Write mkdocs.yml POST /api/docs/build Trigger MkDocs build POST /api/docs/upload Upload asset (20 MB, whitelisted extensions) GET /api/docs/files File tree (?force=true bypasses cache) POST /api/docs/files/rename Rename or move file GET /api/docs/files/* Read file content PUT /api/docs/files/* Write file content POST /api/docs/files/* Create file or folder DELETE /api/docs/files/* Delete file or empty folder","tags":["reference","developer","API"]},{"location":"docs/api/#services","title":"Services","text":"

    Prefix: /api/services \u00b7 Auth: SUPER_ADMIN

    Method Path Description GET /api/services/status Health check all managed services (NocoDB, n8n, Gitea, MailHog, Mini QR, Excalidraw, Homepage) GET /api/services/config Port numbers + subdomain info","tags":["reference","developer","API"]},{"location":"docs/api/#pangolin-tunnel-management","title":"Pangolin (Tunnel Management)","text":"

    Prefix: /api/pangolin \u00b7 Auth: SUPER_ADMIN

    Method Path Description GET /api/pangolin/status Tunnel health + connection info GET /api/pangolin/config Current env configuration GET /api/pangolin/newt-status Newt container status POST /api/pangolin/newt-restart Restart Newt container GET /api/pangolin/sites List Pangolin sites GET /api/pangolin/exit-nodes Available exit nodes GET /api/pangolin/resource-definitions Resource definitions from YAML GET /api/pangolin/resources List resources POST /api/pangolin/setup Create site + all resources (rate limited: \u2157min) POST /api/pangolin/sync Sync resources (create missing, update changed) PUT /api/pangolin/resource/:id Update resource DELETE /api/pangolin/resource/:id Delete resource GET /api/pangolin/resource/:id/clients Connected clients GET /api/pangolin/certificate/:domainId/:domain Certificate info POST /api/pangolin/certificate/:certId Update certificate","tags":["reference","developer","API"]},{"location":"docs/api/#observability","title":"Observability","text":"

    Prefix: /api/observability \u00b7 Auth: SUPER_ADMIN \u00b7 Rate limited: 20/min

    Method Path Description GET /api/observability/status Check 7 monitoring services GET /api/observability/metrics-summary Key metrics from Prometheus GET /api/observability/alerts Active alerts from Alertmanager","tags":["reference","developer","API"]},{"location":"docs/api/#payments","title":"Payments","text":"

    Prefix: /api/payments

    ","tags":["reference","developer","API"]},{"location":"docs/api/#public_5","title":"Public","text":"Method Path Auth Description GET /api/payments/config Stripe publishable key + donation settings GET /api/payments/plans Active subscription plans GET /api/payments/products Active products (?type=) POST /api/payments/subscribe Create subscription checkout POST /api/payments/purchase Optional Product checkout (guest or logged-in) POST /api/payments/donate Donation checkout GET /api/payments/my-subscription Current subscription POST /api/payments/my-subscription/cancel Cancel subscription POST /api/payments/webhook Stripe webhook (raw body)","tags":["reference","developer","API"]},{"location":"docs/api/#admin_6","title":"Admin","text":"

    Auth: SUPER_ADMIN

    Method Path Description GET /api/payments/admin/settings Payment settings (secrets masked) PUT /api/payments/admin/settings Update payment settings POST /api/payments/admin/settings/test-connection Test Stripe connection GET /api/payments/admin/dashboard Subscription + donation statistics GET /api/payments/admin/plans All subscription plans POST /api/payments/admin/plans Create plan PUT /api/payments/admin/plans/:id Update plan DELETE /api/payments/admin/plans/:id Delete plan POST /api/payments/admin/plans/:id/sync-stripe Sync plan to Stripe GET /api/payments/admin/subscriptions All subscriptions with filters POST /api/payments/admin/subscriptions/:id/cancel Cancel subscription GET /api/payments/admin/products All products POST /api/payments/admin/products Create product PUT /api/payments/admin/products/:id Update product DELETE /api/payments/admin/products/:id Delete product POST /api/payments/admin/products/:id/sync-stripe Sync product to Stripe GET /api/payments/admin/orders List orders POST /api/payments/admin/orders/:id/refund Refund order GET /api/payments/admin/donations List donations GET /api/payments/admin/export CSV export of completed orders","tags":["reference","developer","API"]},{"location":"docs/api/#media-api-fastify-port-4100","title":"Media API (Fastify \u2014 Port 4100)","text":"

    The Media API is a separate Fastify server sharing the same PostgreSQL database. It handles all video-related functionality.

    ","tags":["reference","developer","API"]},{"location":"docs/api/#health","title":"Health","text":"Method Path Auth Description GET /health Media API health check","tags":["reference","developer","API"]},{"location":"docs/api/#videos-admin","title":"Videos (Admin)","text":"

    Prefix: /api/videos \u00b7 Auth: Admin roles

    ","tags":["reference","developer","API"]},{"location":"docs/api/#crud-publishing","title":"CRUD & Publishing","text":"Method Path Description GET /api/videos List videos (?limit=&offset=&search=&orientation=&producers=&isShort=) GET /api/videos/producers Distinct producer list GET /api/videos/health Video count health check GET /api/videos/:id Single video detail PATCH /api/videos/:id Update metadata (title, producer, tags, quality, etc.) POST /api/videos/:id/publish Publish to category POST /api/videos/:id/unpublish Unpublish POST /api/videos/bulk-publish Bulk publish POST /api/videos/bulk-unpublish Bulk unpublish POST /api/videos/:id/lock Lock published video POST /api/videos/:id/unlock Unlock video POST /api/videos/:id/generate-thumbnail Generate thumbnail via FFmpeg POST /api/videos/bulk-generate-thumbnails Bulk thumbnail generation","tags":["reference","developer","API"]},{"location":"docs/api/#upload","title":"Upload","text":"Method Path Description POST /api/videos/upload Single video upload (multipart, 10 GB limit, streams to disk) POST /api/videos/upload/batch Batch upload (returns 207 multi-status)","tags":["reference","developer","API"]},{"location":"docs/api/#actions","title":"Actions","text":"Method Path Description POST /api/videos/:id/duplicate Duplicate video record POST /api/videos/:id/replace Replace video file, keep metadata GET /api/videos/:id/analytics Detailed analytics (?startDate=&endDate=) POST /api/videos/:id/reset-analytics Reset all analytics GET /api/videos/:id/preview-link Generate 24-hour JWT preview link GET /api/videos/analytics/top Top videos (?metric=views|watchTime&limit=) GET /api/videos/analytics/overview Global analytics overview","tags":["reference","developer","API"]},{"location":"docs/api/#scheduling","title":"Scheduling","text":"Method Path Description POST /api/videos/:id/schedule-publish Schedule future publish ({publishAt, timezone?}) POST /api/videos/:id/schedule-unpublish Schedule future unpublish DELETE /api/videos/:id/schedule/:action Cancel scheduled operation GET /api/videos/schedules/upcoming Upcoming scheduled operations GET /api/videos/:id/schedule-history Schedule history for video GET /api/videos/schedules/stats Schedule queue statistics POST /api/videos/schedules/pause Pause schedule queue POST /api/videos/schedules/resume Resume schedule queue POST /api/videos/schedules/cleanup Clean old completed jobs","tags":["reference","developer","API"]},{"location":"docs/api/#video-fetch","title":"Video Fetch","text":"Method Path Description POST /api/videos/fetch Submit fetch job ({urls: string[]}, 1\u201320 URLs) GET /api/videos/fetch/jobs List recent fetch jobs GET /api/videos/fetch/jobs/:jobId Job detail + log GET /api/videos/fetch/jobs/:jobId/log SSE log stream (Redis pub/sub) DELETE /api/videos/fetch/jobs/:jobId Cancel fetch job","tags":["reference","developer","API"]},{"location":"docs/api/#streaming-public","title":"Streaming (Public)","text":"

    Prefix: /api/videos

    Method Path Auth Description GET /api/videos/stream/health Streaming health check GET /api/videos/:id/stream Optional HTTP range-supporting video stream GET /api/videos/:id/thumbnail Optional Serve thumbnail image GET /api/videos/:id/metadata Public video metadata for embedding

    Note

    Admins can stream unpublished videos by providing a valid JWT.

    ","tags":["reference","developer","API"]},{"location":"docs/api/#public-gallery","title":"Public Gallery","text":"

    Prefix: /api/public

    Method Path Auth Description GET /api/public Optional Published videos (?limit=&offset=&search=&sort=recent|popular|oldest&category=) GET /api/public/categories Optional Categories with video counts GET /api/public/producers Optional Published producers GET /api/public/:id Optional Single published video GET /api/public/:id/thumbnail Optional Published thumbnail GET /api/public/:id/stream Optional Published video stream","tags":["reference","developer","API"]},{"location":"docs/api/#tracking","title":"Tracking","text":"

    Prefix: /api/track \u00b7 Auth: None required

    Method Path Description GET /api/track/health Tracking health check POST /api/track/view Record video view (returns {viewId}) POST /api/track/event Record play/pause/seek/complete event POST /api/track/heartbeat Update watch time (10s interval, sendBeacon) POST /api/track/batch Batch up to 50 tracking events Tracking is GDPR-compliant

    IP addresses are hashed with a daily-rotating salt. Raw IPs are never stored. Tracking data is retained for 90 days.

    ","tags":["reference","developer","API"]},{"location":"docs/api/#reactions","title":"Reactions","text":"

    Prefix: /api/reactions

    Method Path Auth Description GET /api/reactions/config Available reaction types + emoji mappings GET /api/reactions List reactions (?mediaId=&userId=&limit=) GET /api/reactions/:mediaId/chat Reactions in chat timeline format POST /api/reactions Add reaction (30s cooldown per type)

    Available types: like, love, laugh, wow, sad, angry

    ","tags":["reference","developer","API"]},{"location":"docs/api/#comments-chat","title":"Comments & Chat","text":"","tags":["reference","developer","API"]},{"location":"docs/api/#public-comments","title":"Public Comments","text":"Method Path Auth Description GET /api/public/:id/comments List comments (?limit=&offset=) POST /api/public/:id/comments Optional Create comment (word-filtered; rate limited: 5/min) GET /api/public/:id/chat-stream SSE stream for real-time chat (30s keepalive)","tags":["reference","developer","API"]},{"location":"docs/api/#comment-admin","title":"Comment Admin","text":"

    Prefix: /api/media/admin/comments \u00b7 Auth: Admin roles

    Method Path Description GET /api/media/admin/comments/stats Counts by status GET /api/media/admin/comments All comments with filters PATCH /api/media/admin/comments/:id/approve Approve comment PATCH /api/media/admin/comments/:id/hide Hide comment PATCH /api/media/admin/comments/:id/unhide Unhide comment PUT /api/media/admin/comments/:id/notes Update moderation notes DELETE /api/media/admin/comments/:id Delete comment","tags":["reference","developer","API"]},{"location":"docs/api/#word-filters","title":"Word Filters","text":"

    Prefix: /api/media/admin/word-filters \u00b7 Auth: Admin roles

    Method Path Description GET /api/media/admin/word-filters List filter entries grouped by level POST /api/media/admin/word-filters Add word ({word, level: low|medium|high|custom}) DELETE /api/media/admin/word-filters/:id Remove word","tags":["reference","developer","API"]},{"location":"docs/api/#chat-threads-notifications","title":"Chat Threads & Notifications","text":"

    Auth: Authenticated

    Method Path Description GET /api/media/chat/threads Videos with user's comments + unread counts POST /api/media/chat/threads/:mediaId/read Mark thread as read GET /api/media/notifications/stream Per-user SSE notification stream (?token=)","tags":["reference","developer","API"]},{"location":"docs/api/#shorts","title":"Shorts","text":"Method Path Auth Description GET /api/shorts Optional Shorts feed (?sort=recent|popular|random) POST /api/shorts/scan Admin Auto-classify short videos by duration","tags":["reference","developer","API"]},{"location":"docs/api/#upvotes","title":"Upvotes","text":"Method Path Auth Description POST /api/public/:id/upvote Toggle upvote (session-based via X-Session-ID header) GET /api/public/:id/upvote-status Check upvote status for current session","tags":["reference","developer","API"]},{"location":"docs/api/#playlists","title":"Playlists","text":"","tags":["reference","developer","API"]},{"location":"docs/api/#public_6","title":"Public","text":"

    Prefix: /api/playlists

    Method Path Auth Description GET /api/playlists/featured Optional Featured playlists GET /api/playlists/popular Optional Popular public playlists (?search=) GET /api/playlists/share/:token Optional Playlist by share token GET /api/playlists/:id Optional Playlist detail (public, owner, or share token) POST /api/playlists/:id/view Optional Record playlist view","tags":["reference","developer","API"]},{"location":"docs/api/#user-playlists","title":"User Playlists","text":"

    Auth: Authenticated

    Method Path Description GET /api/playlists/my Own playlists POST /api/playlists Create playlist PUT /api/playlists/:id Update playlist (ownership check) DELETE /api/playlists/:id Delete playlist POST /api/playlists/:id/videos Add video ({mediaId}) DELETE /api/playlists/:id/videos/:mediaId Remove video PUT /api/playlists/:id/videos/reorder Reorder videos POST /api/playlists/:id/share Generate share token DELETE /api/playlists/:id/share Revoke share token","tags":["reference","developer","API"]},{"location":"docs/api/#playlist-admin","title":"Playlist Admin","text":"

    Prefix: /api/media/playlists \u00b7 Auth: Admin roles

    Method Path Description GET /api/media/playlists All playlists GET /api/media/playlists/featured Featured playlists with admin info POST /api/media/playlists/:id/feature Feature a playlist DELETE /api/media/playlists/:id/feature Unfeature a playlist PUT /api/media/playlists/featured/reorder Reorder featured playlists PUT /api/media/playlists/:id Admin update any playlist POST /api/media/playlists/:id/duplicate Duplicate playlist DELETE /api/media/playlists/:id Admin delete any playlist","tags":["reference","developer","API"]},{"location":"docs/api/#user-profile","title":"User Profile","text":"

    Prefix: /api/media/me \u00b7 Auth: Authenticated

    Method Path Description GET /api/media/me/stats User stats + 30-day activity + achievements GET /api/media/me/watch-history Paginated watch history POST /api/media/me/stats/recalculate Recompute stats from raw data GET /api/media/me/settings Privacy settings PUT /api/media/me/settings Update privacy settings PUT /api/media/me/profile Update display name PUT /api/media/me/password Change password","tags":["reference","developer","API"]},{"location":"docs/api/#route-summary","title":"Route Summary","text":"API Module Endpoint Count Express Auth 9 Users 7 Dashboard 7 Campaigns (CRUD + public + user + moderation + emails) 16 Responses 10 Email Queue 4 Representatives 7 Locations (CRUD + geocode + import) 21 Cuts 11 Shifts (CRUD + series) 19 Canvassing 20 GPS Tracking 10 Map Settings + Geocoding 3 Pages + Blocks 12 Email Templates 13 QR Codes 1 Site Settings 5 Listmonk 9 Docs Management 11 Services 2 Pangolin 16 Observability 3 Payments (public + admin) 29 Health + Metrics 3 Express Total ~248 Fastify Videos (CRUD + upload + actions + schedule + fetch) 39 Streaming 4 Public Gallery 6 Tracking 5 Reactions 4 Comments + Chat 13 Shorts + Upvotes 4 Playlists (public + user + admin) 18 User Profile 7 Health 1 Fastify Total ~101 Grand Total ~349","tags":["reference","developer","API"]},{"location":"docs/architecture/","title":"Architecture","text":"

    Changemaker Lite uses a dual-API architecture with a shared PostgreSQL database, a React single-page application, and Nginx for subdomain routing across 30+ services.

    ","tags":["reference","developer","architecture"]},{"location":"docs/architecture/#system-diagram","title":"System Diagram","text":"
    graph LR\n    Browser[\"Browser\"] --> Nginx[\"Nginx<br/>(reverse proxy)\"]\n    Nginx --> Admin[\"React Admin GUI<br/>port 3000\"]\n    Nginx --> API[\"Express API<br/>port 4000\"]\n    Nginx --> MediaAPI[\"Fastify Media API<br/>port 4100\"]\n    Nginx --> MkDocs[\"MkDocs<br/>port 4003/4004\"]\n    Nginx --> Services[\"Other Services<br/>(Gitea, NocoDB, etc.)\"]\n\n    API --> PostgreSQL[(\"PostgreSQL 16<br/>30+ tables\")]\n    MediaAPI --> PostgreSQL\n    API --> Redis[(\"Redis<br/>cache + queues\")]\n    API --> BullMQ[\"BullMQ<br/>(email, video jobs)\"]\n    BullMQ --> Redis\n\n    subgraph Tunnel [\"Public Access\"]\n        Newt[\"Newt Client\"] --> Pangolin[\"Pangolin Server\"]\n    end\n    Newt --> Nginx
    ","tags":["reference","developer","architecture"]},{"location":"docs/architecture/#key-components","title":"Key Components","text":"Component Technology Role Main API Express.js + TypeScript + Prisma Auth, campaigns, map, shifts, pages, canvassing, email Media API Fastify + TypeScript + Prisma Video library, analytics, uploads, scheduling Admin GUI React 19 + Vite + Ant Design + Zustand Admin dashboard, public pages, volunteer portal, media gallery Database PostgreSQL 16 Shared by both APIs (30+ models via Prisma) Cache Redis 7 Rate limiting, BullMQ job queues, geocoding cache Proxy Nginx Subdomain routing, security headers, WebSocket upgrade Tunnel Pangolin + Newt Expose services without port forwarding Monitoring Prometheus + Grafana + Alertmanager Metrics collection, dashboards, alerting","tags":["reference","developer","architecture"]},{"location":"docs/architecture/#dual-api-design","title":"Dual API Design","text":"

    The platform runs two independent API servers sharing one PostgreSQL database:

    Express API (port 4000)Fastify Media API (port 4100)

    The main API handles all core platform logic:

    • Authentication \u2014 JWT access/refresh tokens, RBAC middleware
    • Modules \u2014 Influence (campaigns, responses), Map (locations, cuts, shifts, canvassing), Pages, Email Templates, Settings, Users, Payments, Social, Calendar
    • Services \u2014 Email queue (BullMQ), geocoding queue, Listmonk sync, Pangolin client, user provisioning
    • ORM \u2014 Prisma with 30+ models and migration history

    A separate server optimized for media handling:

    • Video CRUD \u2014 Upload with FFprobe metadata extraction
    • Scheduled Publishing \u2014 BullMQ queue with timezone support
    • Analytics \u2014 View tracking, watch time, completion rates (GDPR-compliant)
    • Public Gallery \u2014 Playlists, reactions, comments, SSE chat
    • ORM \u2014 Prisma (migrated from Drizzle, Feb 2026)

    Both servers connect to the same database and share the same Prisma schema. This separation allows the media API to handle large file uploads and streaming independently from the main API's request/response cycle.

    ","tags":["reference","developer","architecture"]},{"location":"docs/architecture/#authentication-flow","title":"Authentication Flow","text":"
    sequenceDiagram\n    participant Client\n    participant API\n    participant DB\n    participant Redis\n\n    Client->>API: POST /api/auth/login {email, password}\n    API->>Redis: Check rate limit (10/min per IP)\n    Redis-->>API: OK\n    API->>DB: Verify bcrypt password\n    DB-->>API: User record\n    API->>DB: Create refresh token\n    API-->>Client: {accessToken (15min), refreshToken (7d)}\n\n    Note over Client: Authenticated requests\n    Client->>API: GET /api/campaigns<br/>Authorization: Bearer <accessToken>\n    API->>API: Verify JWT + check role (RBAC)\n    API-->>Client: 200 OK\n\n    Note over Client: Token expired\n    Client->>API: POST /api/auth/refresh {refreshToken}\n    API->>DB: Atomic rotation (delete old, create new)\n    API-->>Client: {new accessToken, new refreshToken}
    ","tags":["reference","developer","architecture"]},{"location":"docs/architecture/#security-features","title":"Security Features","text":"
    • Password policy \u2014 12+ characters, uppercase, lowercase, digit (schema-enforced)
    • Refresh token rotation \u2014 Atomic Prisma transaction prevents race conditions
    • User enumeration prevention \u2014 Returns 401 (not 404) for missing users
    • Rate limiting \u2014 10 requests/minute on auth endpoints via Redis
    • 11 roles \u2014 SUPER_ADMIN (implicit bypass), 8 module-specific admin roles, USER, TEMP
    • Encryption \u2014 AES-256-GCM for sensitive DB fields (ENCRYPTION_KEY env var)
    ","tags":["reference","developer","architecture"]},{"location":"docs/architecture/#request-lifecycle","title":"Request Lifecycle","text":"
    graph TD\n    A[\"Incoming Request\"] --> B[\"Nginx\"]\n    B -->|\"Host: api.domain\"| C[\"Express API\"]\n    B -->|\"Host: media.domain\"| D[\"Fastify Media API\"]\n    B -->|\"Host: app.domain\"| E[\"React Admin GUI\"]\n    C --> F[\"Rate Limiter (Redis)\"]\n    F --> G[\"Auth Middleware (JWT)\"]\n    G --> H[\"Role Check (RBAC)\"]\n    H --> I[\"Validation (Zod)\"]\n    I --> J[\"Route Handler\"]\n    J --> K[\"Service Layer\"]\n    K --> L[\"Prisma ORM\"]\n    L --> M[(\"PostgreSQL\")]\n    J --> N[\"Response + Metrics\"]
    ","tags":["reference","developer","architecture"]},{"location":"docs/architecture/#database-schema","title":"Database Schema","text":"

    The database contains 30+ Prisma models organized by module:

    Module Key Models Auth User, RefreshToken Influence Campaign, CampaignEmail, CampaignResponse, Representative, PostalCode Map Location, Address, Cut, Shift, ShiftSignup Canvass CanvassSession, CanvassVisit, TrackingSession, TrackingPoint Pages Page, PageBlock, EmailTemplate Media Video, VideoReaction, VideoComment, VideoView, Playlist, PlaylistVideo Payments StripeProduct, StripePrice, StripeDonationPage, StripeOrder Social Friendship, SocialNotification, CalendarLayer, CalendarItem SMS SmsContactList, SmsCampaign, SmsMessage, SmsConversation People Contact, ContactAddress, ContactEmail, ContactPhone, ContactConnection Settings SiteSettings, MapSettings","tags":["reference","developer","architecture"]},{"location":"docs/architecture/#docker-compose-architecture","title":"Docker Compose Architecture","text":"

    Services are organized into categories with dependency management:

    graph TD\n    subgraph Core [\"Core (always started)\"]\n        PG[\"PostgreSQL\"] --> API[\"Express API\"]\n        Redis --> API\n        PG --> Media[\"Fastify Media API\"]\n        API --> Admin[\"React Admin\"]\n        Admin --> Nginx\n        API --> Nginx\n        Media --> Nginx\n    end\n\n    subgraph Communication [\"Communication (optional)\"]\n        RC[\"Rocket.Chat\"] --> MongoDB\n        Jitsi[\"Jitsi Meet (4 containers)\"]\n        Gancio[\"Gancio Events\"]\n    end\n\n    subgraph Monitoring [\"Monitoring (profile)\"]\n        Prometheus --> Grafana\n        Prometheus --> Alertmanager\n        cAdvisor --> Prometheus\n        NodeExporter --> Prometheus\n    end\n\n    subgraph Tunnel [\"Tunnel\"]\n        Newt --> Nginx\n    end

    Docker healthchecks ensure proper startup order: PostgreSQL and Redis must be healthy before the API starts. The API runs migrations and seeding automatically via its entrypoint script.

    ","tags":["reference","developer","architecture"]},{"location":"docs/architecture/#subdomain-routing","title":"Subdomain Routing","text":"

    Nginx routes requests based on the Host header. All services run on the changemaker-lite Docker bridge network.

    Pattern Target app.DOMAIN Admin GUI (admin + public + volunteer + gallery) api.DOMAIN Express API media.DOMAIN Fastify Media API DOMAIN (root) MkDocs static site *.DOMAIN 15+ additional service subdomains

    See Services for the complete subdomain table.

    ","tags":["reference","developer","architecture"]},{"location":"docs/deployment/","title":"Deployment","text":"

    This guide covers how to take Changemaker Lite from a local development setup to a publicly accessible production deployment. The main decision is how to expose your services to the internet.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#architecture-overview","title":"Architecture Overview","text":"

    Regardless of which exposure method you choose, the internal architecture is the same:

    Internet \u2192 [Your exposure method] \u2192 Nginx (port 80) \u2192 Backend Services\n

    Nginx handles all subdomain routing internally. Every service is accessed through nginx on port 80, which proxies to the correct container based on the Host header.

    Subdomain Service Container Port app.DOMAIN Admin GUI + public pages 3000 api.DOMAIN Express API 4000 media.DOMAIN Fastify Media API 4100 DOMAIN (root) MkDocs documentation site 4004 db.DOMAIN NocoDB 8091 docs.DOMAIN MkDocs live preview 4003 code.DOMAIN Code Server 8888 git.DOMAIN Gitea 3030 n8n.DOMAIN Workflow automation 5678 home.DOMAIN Homepage dashboard 3010 listmonk.DOMAIN Newsletter manager 9001 mail.DOMAIN MailHog (dev email) 8025 qr.DOMAIN Mini QR generator 8089 draw.DOMAIN Excalidraw whiteboard 8090 vault.DOMAIN Vaultwarden password manager 8445 chat.DOMAIN Rocket.Chat team chat \u2014 events.DOMAIN Gancio event management 8092 grafana.DOMAIN Monitoring dashboards 3005","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#exposure-methods","title":"Exposure Methods","text":"","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#pangolin","title":"Option 1: Pangolin + Newt Tunnel (Recommended)","text":"

    Admin GUI: Tunnel Management Page

    The admin dashboard includes a dedicated Tunnel Management page at Admin \u2192 Settings \u2192 Tunnel. This page provides:

    • Live status of the Pangolin connection and Newt container health
    • Step-by-step setup instructions if credentials aren't configured yet
    • Full resource table listing every service, its domain, and target \u2014 useful as a reference when creating resources in the Pangolin dashboard
    • API-based site creation as an alternative to the Pangolin dashboard UI
    • Restart Newt button for quick container restarts without the terminal

    If you're unsure about any step above, the Tunnel page walks you through the same process interactively.

    Pangolin is a self-hosted tunnel server. The Newt client container runs alongside your stack and establishes an outbound connection to your Pangolin server, which then routes public traffic back through the tunnel. No port forwarding or static IP required.

    Advantages:

    • No port forwarding needed on your router/firewall
    • Works behind CGNAT, double NAT, or restrictive networks
    • SSL/TLS handled by the Pangolin server
    • Self-hosted \u2014 you control the tunnel infrastructure
    • Built-in access control (optional per-resource authentication)

    Requirements:

    • A Pangolin server (self-hosted on a VPS with a public IP)
    • A domain with DNS pointing to the Pangolin server
    • Pangolin API key and organization ID
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#step-1-configure-pangolin-credentials","title":"Step 1: Configure Pangolin Credentials","text":"

    If you used config.sh, you may have already set these. Otherwise, add to your .env:

    PANGOLIN_API_URL=https://api.your-pangolin-server.org/v1\nPANGOLIN_API_KEY=your_api_key_here\nPANGOLIN_ORG_ID=your_org_id\n
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#step-2-create-a-site-in-pangolin","title":"Step 2: Create a Site in Pangolin","text":"

    Log in to your Pangolin dashboard and create a new site:

    1. Navigate to Sites \u2192 Create New Site
    2. Choose type: Newt
    3. Enter a name (e.g., changemaker-yourdomain.org)
    4. Choose a subnet (e.g., 100.90.128.3/24)
    5. Select an exit node (if applicable)
    6. Click Create Site
    7. Copy the credentials \u2014 you'll need the Site ID, Newt ID, and Newt Secret

    Save the credentials

    The Newt Secret is only shown once during site creation. Copy it immediately.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#step-3-update-env-with-site-credentials","title":"Step 3: Update .env with Site Credentials","text":"
    PANGOLIN_SITE_ID=your_site_id\nPANGOLIN_ENDPOINT=https://your-pangolin-server.org\nPANGOLIN_NEWT_ID=your_newt_id\nPANGOLIN_NEWT_SECRET=your_newt_secret\n
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#step-4-start-the-newt-container","title":"Step 4: Start the Newt Container","text":"
    docker compose up -d newt\n

    The Newt container connects to nginx (its only dependency) and establishes the tunnel:

    # From docker-compose.yml\nnewt:\n  image: fosrl/newt\n  container_name: newt-changemaker\n  restart: unless-stopped\n  environment:\n    - PANGOLIN_ENDPOINT=${PANGOLIN_ENDPOINT}\n    - NEWT_ID=${PANGOLIN_NEWT_ID}\n    - NEWT_SECRET=${PANGOLIN_NEWT_SECRET}\n  depends_on:\n    - nginx\n

    Verify the connection:

    docker compose logs newt --tail 20\n

    You should see a successful connection message.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#step-5-create-public-http-resources","title":"Step 5: Create Public HTTP Resources","text":"

    In the Pangolin dashboard, create an HTTP resource for each service you want exposed. All resources point to nginx:80 \u2014 nginx handles the routing internally.

    Required resources (minimum for a working deployment):

    Resource Name Domain Target Auth Admin GUI app.yourdomain.org nginx:80 Not Protected API Server api.yourdomain.org nginx:80 Not Protected Public Site yourdomain.org nginx:80 Not Protected

    Optional resources (add as needed):

    Resource Name Domain Target Media API media.yourdomain.org nginx:80 NocoDB db.yourdomain.org nginx:80 Documentation docs.yourdomain.org nginx:80 Code Server code.yourdomain.org nginx:80 Gitea git.yourdomain.org nginx:80 Grafana grafana.yourdomain.org nginx:80

    Set resources to Not Protected

    By default, Pangolin may enable authentication on new resources. This causes 302 redirects to the Pangolin login page instead of reaching your services. Set each resource to Not Protected (public access) unless you intentionally want Pangolin SSO in front of it.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#step-6-update-cors-for-production","title":"Step 6: Update CORS for Production","text":"

    Add your production domain to CORS_ORIGINS in .env:

    CORS_ORIGINS=https://app.yourdomain.org,http://localhost:3000,http://localhost\n

    Then restart the API:

    docker compose restart api\n
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#step-7-verify","title":"Step 7: Verify","text":"
    # Should return JSON (not a 302 redirect)\ncurl https://api.yourdomain.org/api/health\n\n# Admin GUI should load\ncurl -I https://app.yourdomain.org\n
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#cloudflare","title":"Option 2: Cloudflare Tunnel","text":"

    Cloudflare Tunnel (cloudflared) provides a similar zero-trust tunnel approach using Cloudflare's network. No port forwarding needed, and you get Cloudflare's CDN and DDoS protection.

    Advantages:

    • Free tier available
    • Built-in CDN and DDoS protection
    • No port forwarding needed
    • Managed SSL certificates

    Disadvantages:

    • Proprietary service (not self-hosted)
    • Cloudflare sees all traffic (no end-to-end encryption to your origin)
    • Subject to Cloudflare's Terms of Service
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#setup","title":"Setup","text":"

    1. Create a Cloudflare Tunnel in the Zero Trust dashboard

    2. Add a cloudflared service to your docker-compose.yml:

      cloudflared:\n  image: cloudflare/cloudflared:latest\n  container_name: cloudflared-changemaker\n  restart: unless-stopped\n  command: tunnel run\n  environment:\n    - TUNNEL_TOKEN=${CLOUDFLARE_TUNNEL_TOKEN}\n  depends_on:\n    - nginx\n  networks:\n    - changemaker-lite\n

    3. Add your tunnel token to .env:

      CLOUDFLARE_TUNNEL_TOKEN=your_tunnel_token_here\n

    4. Configure public hostnames in the Cloudflare dashboard, all pointing to http://nginx:80:

      Hostname Service app.yourdomain.org http://nginx:80 api.yourdomain.org http://nginx:80 yourdomain.org http://nginx:80 (add more as needed) http://nginx:80

    5. Start the tunnel:

      docker compose up -d cloudflared\n

    Note

    The cloudflared service is not included in the default docker-compose.yml. Add it manually if you choose this method. The Newt service can be removed or left stopped.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#direct","title":"Option 3: Direct DNS + Reverse Proxy","text":"

    If your server has a public IP address (e.g., a VPS or dedicated server), you can point DNS directly to it and use nginx with SSL certificates.

    Advantages:

    • No tunnel overhead or third-party dependency
    • Full control over the network path
    • Lowest latency

    Disadvantages:

    • Requires a public IP and open ports (80, 443)
    • You manage SSL certificates yourself
    • Server IP is exposed
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#setup_1","title":"Setup","text":"

    1. Point DNS for your domain and all subdomains to your server's IP:

      A     yourdomain.org        \u2192 YOUR_SERVER_IP\nA     *.yourdomain.org      \u2192 YOUR_SERVER_IP\n

      Or use individual A records for each subdomain if your DNS provider doesn't support wildcards.

    2. Open ports 80 and 443 on your server's firewall.

    3. Install Certbot (or another ACME client) for SSL certificates:

      # Ubuntu/Debian\nsudo apt install certbot\n\n# Get a wildcard certificate with DNS challenge\nsudo certbot certonly --manual --preferred-challenges dns \\\n  -d yourdomain.org -d '*.yourdomain.org'\n

      Alternatively, use the Certbot Docker image or a Let's Encrypt companion container.

    4. Update nginx to listen on 443 with your certificates. Add an SSL server block to nginx/conf.d/ssl.conf:

      server {\n    listen 443 ssl;\n    server_name app.yourdomain.org;\n\n    ssl_certificate /etc/nginx/ssl/fullchain.pem;\n    ssl_certificate_key /etc/nginx/ssl/privkey.pem;\n\n    location / {\n        proxy_pass http://changemaker-v2-admin:3000;\n        proxy_set_header Host $host;\n        proxy_set_header X-Real-IP $remote_addr;\n        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n        proxy_set_header X-Forwarded-Proto $scheme;\n        proxy_set_header Upgrade $http_upgrade;\n        proxy_set_header Connection \"upgrade\";\n    }\n}\n\n# Repeat for api.yourdomain.org, media.yourdomain.org, etc.\n# Or use a single server block with $host matching\n

    5. Mount certificates into the nginx container via docker-compose.yml:

      nginx:\n  volumes:\n    - /etc/letsencrypt/live/yourdomain.org:/etc/nginx/ssl:ro\n

    6. Set up auto-renewal with a cron job or systemd timer:

      0 3 * * * certbot renew --quiet && docker compose restart nginx\n

    Traefik alternative

    If you prefer automatic SSL and don't want to manage nginx SSL config manually, consider replacing nginx with Traefik. Traefik can auto-discover Docker containers and provision Let's Encrypt certificates automatically. This would require adapting the container labels and removing the nginx service.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#tailscale","title":"Option 4: Tailscale / WireGuard (Private Access)","text":"

    For deployments that should only be accessible to specific people (not the general public), a mesh VPN like Tailscale or plain WireGuard gives you private networking without exposing anything to the internet.

    Use cases:

    • Internal team deployments
    • Development/staging servers
    • Access from mobile devices without public exposure
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#tailscale-setup","title":"Tailscale Setup","text":"
    1. Install Tailscale on your server and client devices
    2. Access services via Tailscale IP (e.g., http://100.x.x.x:3000)
    3. Optionally use Tailscale Funnel to selectively expose specific services publicly
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#wireguard-setup","title":"WireGuard Setup","text":"
    1. Set up a WireGuard server on your host
    2. Connect client devices via WireGuard config
    3. Access services via the WireGuard interface IP

    Note

    With private access methods, you may not need subdomain routing at all. Access services directly by port: http://server-ip:3000 (admin), http://server-ip:4000 (API), etc.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#production-checklist","title":"Production Checklist","text":"

    Before going live, verify each item:

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#security","title":"Security","text":"
    • All placeholder passwords changed (grep -c \"REQUIRED_STRONG\" .env should return 0)
    • NODE_ENV=production set in .env
    • ENCRYPTION_KEY set and differs from JWT secrets
    • EMAIL_TEST_MODE=false (unless you want MailHog in production)
    • CORS_ORIGINS includes your production domain
    • Admin password changed after first login
    • Redis password set (REDIS_PASSWORD)
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#networking","title":"Networking","text":"
    • DNS records configured for your domain and subdomains
    • SSL/TLS working (tunnel handles this, or manual certs)
    • All Pangolin resources set to \"Not Protected\" (if using Pangolin)
    • curl https://api.yourdomain.org/api/health returns JSON
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#services","title":"Services","text":"
    • Core services running: docker compose ps shows api, admin, v2-postgres, redis, nginx healthy
    • Database migrated: docker compose exec api npx prisma migrate deploy
    • Database seeded: docker compose exec api npx prisma db seed
    • Admin GUI accessible at https://app.yourdomain.org
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#backups","title":"Backups","text":"
    • Backup script tested: ./scripts/backup.sh
    • Backup cron job configured (see Backups below)
    • Restore procedure tested at least once
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#monitoring-optional","title":"Monitoring (Optional)","text":"
    • Monitoring stack started: docker compose --profile monitoring up -d
    • Grafana accessible and dashboards loading
    • Alert rules configured in Alertmanager
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#backups_1","title":"Backups","text":"

    The included backup script dumps PostgreSQL databases, archives uploads, and optionally uploads to S3.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#running-a-backup","title":"Running a Backup","text":"
    ./scripts/backup.sh\n

    This creates a timestamped directory under ./backups/ containing:

    • changemaker_v2.sql.gz \u2014 Main PostgreSQL dump (compressed)
    • listmonk.sql.gz \u2014 Listmonk database dump (if running)
    • uploads.tar.gz \u2014 Media uploads archive
    • manifest.json \u2014 Backup metadata
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#options","title":"Options","text":"
    # Upload to S3 (requires AWS CLI + S3_BUCKET env var)\n./scripts/backup.sh --s3\n\n# Custom retention (delete local backups older than N days)\n./scripts/backup.sh --retention 14\n
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#automated-backups","title":"Automated Backups","text":"

    Add a cron job for daily backups:

    # Edit crontab\ncrontab -e\n\n# Add daily backup at 3 AM\n0 3 * * * /path/to/changemaker.lite/scripts/backup.sh >> /var/log/changemaker-backup.log 2>&1\n\n# With S3 upload\n0 3 * * * /path/to/changemaker.lite/scripts/backup.sh --s3 >> /var/log/changemaker-backup.log 2>&1\n
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#restore","title":"Restore","text":"
    # Restore main database\ngunzip -c backups/changemaker-v2-backup-TIMESTAMP/changemaker_v2.sql.gz | \\\n  docker compose exec -T v2-postgres psql -U changemaker changemaker_v2\n\n# Restore Listmonk database\ngunzip -c backups/changemaker-v2-backup-TIMESTAMP/listmonk.sql.gz | \\\n  docker compose exec -T listmonk-db psql -U listmonk listmonk\n\n# Restore uploads\ntar xzf backups/changemaker-v2-backup-TIMESTAMP/uploads.tar.gz -C ./\n
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#monitoring","title":"Monitoring","text":"

    The monitoring stack runs behind a Docker Compose profile and is not started by default.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#starting-the-monitoring-stack","title":"Starting the Monitoring Stack","text":"
    docker compose --profile monitoring up -d\n

    This starts:

    Service Port Purpose Prometheus 9090 Metrics collection and queries Grafana 3005 Dashboards and visualization Alertmanager 9093 Alert routing and notifications cAdvisor 8086 Container resource metrics Node Exporter 9100 Host system metrics Redis Exporter 9121 Redis metrics Gotify 8889 Push notifications","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#pre-configured-dashboards","title":"Pre-configured Dashboards","text":"

    Grafana includes 3 auto-provisioned dashboards:

    1. API Overview \u2014 HTTP request rates, latency, error rates, active sessions
    2. Infrastructure \u2014 Container CPU/memory, PostgreSQL connections, Redis memory
    3. Campaign Activity \u2014 Email queue size, campaign sends, response submissions
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#custom-metrics","title":"Custom Metrics","text":"

    The API exposes 12 custom Prometheus metrics with the cm_ prefix:

    • cm_api_uptime_seconds \u2014 API uptime
    • cm_email_queue_size \u2014 BullMQ pending emails
    • cm_active_canvass_sessions \u2014 Active canvassing sessions
    • cm_locations_total \u2014 Total locations in database
    • And more \u2014 see api/src/utils/metrics.ts
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#alert-rules","title":"Alert Rules","text":"

    Pre-configured alerts in configs/prometheus/alerts.yml:

    • API down for more than 5 minutes
    • High error rate (>5% of requests returning 5xx)
    • Database connection failures
    • Redis connection failures
    • Email queue backlog
    • Disk space warnings
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#upgrading","title":"Upgrading","text":"","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#pulling-updates","title":"Pulling Updates","text":"
    # Pull latest code\ngit pull origin main\n\n# Rebuild and restart containers\ndocker compose build api admin\ndocker compose up -d api admin\n\n# Run any new migrations\ndocker compose exec api npx prisma migrate deploy\n
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#database-migrations","title":"Database Migrations","text":"

    Always run migrations after pulling updates:

    docker compose exec api npx prisma migrate deploy\n

    Back up first

    Always run ./scripts/backup.sh before applying migrations in production. Migrations may alter table structures and are not easily reversible.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#troubleshooting-production-issues","title":"Troubleshooting Production Issues","text":"","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#pangolin-302-redirects-instead-of-content","title":"Pangolin: 302 Redirects Instead of Content","text":"

    Symptom: API returns 302 redirects to the Pangolin authentication page.

    Fix: In the Pangolin dashboard, edit each resource and set Authentication to Not Protected.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#cors-errors","title":"CORS Errors","text":"

    Symptom: Browser console shows CORS errors when accessing the production domain.

    Fix: Add your production app. subdomain to CORS_ORIGINS in .env, then docker compose restart api.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#newt-wont-connect","title":"Newt Won't Connect","text":"

    Check in order:

    1. Credentials: Verify PANGOLIN_NEWT_ID and PANGOLIN_NEWT_SECRET in .env
    2. Endpoint: Confirm PANGOLIN_ENDPOINT matches your Pangolin server URL
    3. Logs: docker compose logs newt --tail 50
    4. Nginx running: Newt depends on nginx \u2014 docker compose ps nginx
    5. Network: Ensure outbound HTTPS is not blocked by your firewall
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#services-unreachable-via-tunnel","title":"Services Unreachable via Tunnel","text":"
    1. Verify nginx is running: docker compose ps nginx
    2. Test locally first: curl http://localhost:4000/api/health
    3. Check nginx logs: docker compose logs nginx --tail 50
    4. Verify DNS: dig app.yourdomain.org should point to your Pangolin server

    See Troubleshooting for more common issues.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/getting-started/","title":"Getting Started","text":"

    Changemaker Lite is a self-hosted campaign platform that runs entirely on Docker. This guide takes you from zero to a working deployment \u2014 whether you're evaluating locally or launching for a live campaign.

    Need help getting set up?

    Bunker Operations provides managed infrastructure and hands-on setup assistance for organizations running Changemaker Lite. We handle domains, tunnels, SMTP, and servers so you can focus on your campaign. Get in touch: bnkops.com | admin@bnkops.ca

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/#what-youll-need","title":"What You'll Need","text":"

    Before deploying, gather the essentials. The requirements differ depending on whether you're running a quick local test or a production deployment serving real users.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/#development-local-testing","title":"Development (Local Testing)","text":"

    All you need is Docker \u2014 no domain, tunnel, or SMTP required:

    • Docker 24+ & Compose v2

      The only hard requirement. All 30+ services run as containers.

    • OpenSSL

      Used by the config wizard to auto-generate 21 secrets (JWT, encryption keys, passwords).

    • 2 GB RAM / 10 GB Disk

      Minimum for core services. 4 GB recommended if enabling media, chat, or monitoring.

    MailHog captures all emails locally

    In dev mode, every outbound email is caught by MailHog at http://localhost:8025 \u2014 no SMTP provider needed.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/#production-deployment","title":"Production Deployment","text":"

    For a deployment that serves real users, you'll also need:

    • A Domain Name

      Changemaker Lite uses subdomain routing \u2014 app., api., docs., git., and 10+ more subdomains are created automatically. Wildcard DNS (*.yourdomain.org) is the simplest approach.

      Budget ~$10\u201315/year from any registrar.

    • A Reverse Tunnel or Public IP

      Your server needs to be reachable from the internet. Built-in support for Pangolin \u2014 a self-hosted tunnel with SSL, subdomain routing, and access control. The admin dashboard includes a one-click setup wizard.

      Alternatives: Cloudflare Tunnel, a VPS with public IP, or any reverse proxy with SSL.

    • SMTP Email Provider

      Campaign messages, password resets, volunteer invitations, and newsletters all need real email delivery.

      Recommended: Proton Mail (privacy-focused), Mailgun (100/day free), Amazon SES (cheapest at scale), or Brevo (300/day free).

    • A Linux Server

      Any Linux with Docker. Ubuntu 22.04+ LTS recommended. A VPS from DigitalOcean, Hetzner, or Linode works great \u2014 or a spare machine on your network if using a tunnel.

    Optional services that enhance your deployment

    These aren't required but unlock additional features:

    Service Purpose Free Tier Stripe Donations, merchandise, membership plans Free account, pay-as-you-go Mapbox or Google Maps Better geocoding accuracy for mapping 100K req/mo (Mapbox) or $200/mo credit (Google) MaxMind GeoLite2 Geographic analytics (visitor locations) Free account Android phone + Termux SMS campaigns via physical phone gateway Free \u2014 no third-party SMS costs Public IP + UDP 10000 Jitsi self-hosted video conferencing Free (requires open firewall port)

    See Prerequisites & External Services for setup details on each.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/#quick-install","title":"Quick Install","text":"","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/#pre-built-images-recommended","title":"Pre-built Images (Recommended)","text":"

    The fastest path \u2014 no source code, no compilation:

    curl -fsSL https://gitea.bnkops.com/admin/changemaker.lite/raw/branch/main/scripts/install.sh | bash\n

    This downloads a lightweight release package (~2 MB), runs the 14-step configuration wizard, and pulls pre-built Docker images. First startup takes ~2 minutes.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/#from-source-development","title":"From Source (Development)","text":"

    For development or customization:

    git clone https://gitea.bnkops.com/admin/changemaker.lite\ncd changemaker.lite\n
    bash config.sh\n
    docker compose up -d\n

    Open http://localhost:3000 and sign in with the admin credentials you configured. The API container automatically runs database migrations and seeding on first startup.

    Change your password

    If you used the wizard's generated password, change it immediately from the admin dashboard.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/#configuration-wizard","title":"Configuration Wizard","text":"

    The config.sh wizard produces a fully populated .env file in 14 steps:

    Step What It Does 1. Prerequisites Verifies Docker, Docker Compose, and OpenSSL 2. Environment file Creates .env from .env.example (backs up existing) 3. Domain Sets root domain + 14 derived variables, updates mkdocs.yml 4. Admin credentials Email + password (enforces 12+ chars, mixed case, digit) 5. Secrets Auto-generates 21 unique secrets (JWT, encryption, database, service passwords) 6. Email MailHog (dev) or production SMTP, optionally shared with Listmonk 7. Feature flags 9 toggles: Media, Listmonk, Payments, Chat, Events, Meet, SMS, Docs Comments, Bunker Ops 8. Tunnel Pangolin credentials for secure public access 9. CORS Auto-calculated allowed origins from domain 10. Nginx Renders .conf.template files with domain substitution 11. Homepage Generates services.yaml with 27 service entries 12. Permissions Creates 12 directories with container-friendly permissions 13. Upgrade watcher Installs systemd units for GUI-triggered upgrades (optional, requires sudo) 14. Summary Displays configuration summary + next steps

    See Installation for detailed documentation of each step.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/#pre-installation-checklist","title":"Pre-Installation Checklist","text":"

    Use this to make sure you're ready before running the installer:

    • Docker 24+ and Docker Compose v2 installed
    • OpenSSL installed (for secret generation)
    • Domain name registered and DNS accessible
    • DNS configured \u2014 wildcard *.yourdomain.org or individual subdomains pointing to your tunnel/server
    • Tunnel or public IP \u2014 Pangolin credentials (API key + Org ID), or server with public IP + SSL
    • SMTP credentials \u2014 host, port, username, password from your email provider
    • (Optional) Stripe account for payments
    • (Optional) Mapbox or Google Maps API key for geocoding
    • (Optional) MaxMind account for geographic analytics
    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/#services-at-a-glance","title":"Services at a Glance","text":"

    Changemaker Lite includes 30+ Docker services organized into 8 categories:

    Category Services Startup Core API, Admin, PostgreSQL, Redis, Nginx docker compose up -d v2-postgres redis api admin nginx Media Fastify media API docker compose up -d media-api Communication Rocket.Chat, Gancio, Jitsi Meet Individual docker compose up -d commands Newsletter & Email Listmonk, MailHog docker compose up -d listmonk-app Developer Tools Code Server, MkDocs, Gitea, NocoDB, n8n Individual docker compose up -d commands Utilities Mini QR, Excalidraw, Vaultwarden, Homepage docker compose up -d mini-qr excalidraw vaultwarden homepage Monitoring Prometheus, Grafana, Alertmanager, exporters docker compose --profile monitoring up -d Infrastructure Newt tunnel, Docker socket proxy Auto-starts with tunnel configuration

    See Services Overview for the complete catalog with ports, feature flags, and detailed descriptions.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/#next-steps","title":"Next Steps","text":"

    • Prerequisites

      Full details on every external service \u2014 domain setup, SMTP providers, tunnel options, and optional integrations.

    • Installation

      Detailed setup walkthrough, manual configuration, and the full config wizard reference.

    • Services Overview

      Complete catalog of 30+ containers with ports, feature flags, and descriptions.

    • Environment Variables

      Complete .env reference for every setting.

    • First Steps

      Create your first campaign, add locations to the map, and invite volunteers.

    • Updates & Upgrades

      Keep your installation current with zero-downtime upgrades.

    • Control Panel

      Manage multiple Changemaker Lite instances from a single dashboard.

    • Features at a Glance

      Visual overview of every module \u2014 advocacy, mapping, media, payments, and more.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/control-panel/","title":"Changemaker Control Panel (CCP)","text":"

    Need help getting set up?

    Bunker Operations provides managed infrastructure and hands-on setup assistance for organizations running Changemaker Lite. We handle domains, tunnels, SMTP, and servers so you can focus on your campaign. Get in touch: bnkops.com | admin@bnkops.ca

    The Changemaker Control Panel is a multi-tenant management layer for operators who run multiple Changemaker Lite instances from a single server. It provides a web UI to provision, monitor, and maintain a fleet of instances without manual configuration.

    Single instance?

    If you're running a single Changemaker Lite instance, you don't need CCP. Skip this page and continue with First Steps.

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#when-to-use-ccp","title":"When to Use CCP","text":"

    CCP is designed for:

    • Campaign organizations managing instances for multiple chapters or regions
    • Hosting providers offering Changemaker Lite as a managed service
    • Development teams spinning up isolated test instances

    CCP handles the entire instance lifecycle: provisioning, configuration, health monitoring, backups, and upgrades \u2014 all from a single dashboard.

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#architecture","title":"Architecture","text":"

    CCP runs as 4 Docker containers alongside (but independent from) your CML instances:

    \u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510\n\u2502   CCP Admin GUI (5100)   \u2502  React + Vite + Ant Design\n\u2502   Dark theme, SPA        \u2502  Zustand auth store\n\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u252c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518\n             \u2502\n\u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u25bc\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510\n\u2502   CCP API (5000)         \u2502  Express + TypeScript\n\u2502   JWT auth, RBAC         \u2502  Prisma ORM \u2192 PostgreSQL\n\u2502   Docker socket access   \u2502  Winston logger\n\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u252c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518\n             \u2502\n    \u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u253c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510\n    \u25bc        \u25bc        \u25bc\nccp-postgres ccp-redis  Docker Socket\n(port 5480)  (port 6399)\n
    Service Container Port Description CCP API ccp-api 5000 Express API with Docker CLI access CCP Admin ccp-admin 5100 React admin GUI CCP PostgreSQL ccp-postgres 5480 CCP metadata database CCP Redis ccp-redis 6399 Rate limiting, caching

    Each managed CML instance gets its own isolated set of containers and PostgreSQL database, with ports allocated from non-overlapping ranges.

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#setup","title":"Setup","text":"","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#1-run-the-setup-script","title":"1. Run the Setup Script","text":"
    cd changemaker-control-panel\nchmod +x setup.sh\n./setup.sh\n

    The setup script:

    • Detects the installation directory and resolves absolute paths
    • Creates instances/ and backups/ directories
    • Copies .env.example to .env if not present
    • Sets INSTANCES_BASE_PATH, BACKUP_STORAGE_PATH, and CML_SOURCE_PATH
    • Generates random secrets for any placeholder values
    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#2-review-environment","title":"2. Review Environment","text":"

    Edit .env and verify the key settings:

    Variable Default Description JWT_ACCESS_SECRET Auto-generated JWT signing key JWT_REFRESH_SECRET Auto-generated Refresh token signing key ENCRYPTION_KEY Auto-generated AES-256 key for instance secrets at rest INITIAL_ADMIN_EMAIL admin@example.com Bootstrap admin email INITIAL_ADMIN_PASSWORD ChangeMe2025!! Bootstrap admin password INSTANCES_BASE_PATH ./instances Where instance directories are created CML_SOURCE_PATH Auto-detected Path to CML source repo for provisioning BACKUP_STORAGE_PATH ./backups Backup archive storage PANGOLIN_API_URL \u2014 Pangolin API for tunnel management PANGOLIN_API_KEY \u2014 Pangolin authentication PANGOLIN_ORG_ID \u2014 Pangolin organization","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#3-start-ccp","title":"3. Start CCP","text":"
    docker compose up -d\n\n# Run database migrations and seed the admin user\ndocker compose exec ccp-api npx prisma migrate deploy\ndocker compose exec ccp-api npx prisma db seed\n
    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#4-log-in","title":"4. Log In","text":"

    Open http://localhost:5100 and sign in with the admin credentials from .env.

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#creating-an-instance","title":"Creating an Instance","text":"

    The Create Instance wizard walks through 5 steps:

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#step-1-basic-information","title":"Step 1: Basic Information","text":"
    • Instance name \u2014 human-readable label (e.g., \"Edmonton Chapter\")
    • Slug \u2014 URL-safe identifier (e.g., edmonton), used for directory names and compose project
    • Domain \u2014 the domain this instance will serve (e.g., edmonton.example.org)
    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#step-2-features","title":"Step 2: Features","text":"

    Toggle which platform features to enable for this instance:

    • Media Manager
    • Listmonk newsletter sync
    • Payments
    • Rocket.Chat
    • Gancio events
    • Jitsi Meet
    • SMS Campaigns
    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#step-3-email","title":"Step 3: Email","text":"

    Configure SMTP for the instance, or use MailHog for testing.

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#step-4-tunnel","title":"Step 4: Tunnel","text":"

    Optionally configure Pangolin tunnel credentials for public access.

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#step-5-review","title":"Step 5: Review","text":"

    Review all settings, then click Create to start provisioning.

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#provisioning-flow","title":"Provisioning Flow","text":"

    When you create an instance, CCP runs a 13-step async provisioning process:

    Step What Happens 1 Validate uniqueness (slug + domain) 2 Allocate 4 ports from ranges 3 Generate 14 secrets (passwords, JWT keys, encryption keys) 4 Create Instance record (status: PROVISIONING) 5 Create instance directory 6 Copy CML source code (rsync, excluding node_modules/.git/.env) 7 Decrypt secrets and build template context 8 Render 7 config files from Handlebars templates (docker-compose.yml, .env, nginx configs, Pangolin, Prometheus) 9 Copy static files (nginx.conf) 10 docker compose pull (non-fatal if images are cached) 11 docker compose build 12 Start infrastructure (PostgreSQL + Redis), wait for healthy 13 Start API (runs migrations + seed), then start all remaining services

    The admin GUI polls every 3 seconds during provisioning to show progress. When complete, the instance status changes to RUNNING.

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#port-allocation","title":"Port Allocation","text":"

    CCP allocates ports from 4 non-overlapping ranges to prevent conflicts between instances:

    Range Start End Purpose API 14000 14999 Express API server Admin 13000 13999 React admin GUI PostgreSQL 15400 15499 Database Nginx 10000 10999 Reverse proxy

    Each new instance receives one port from each range. Ports are tracked in the database and released when instances are deleted.

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#pages-overview","title":"Pages Overview","text":"","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#dashboard","title":"Dashboard","text":"

    At-a-glance fleet status:

    • Total instances, running, healthy, degraded, stopped, error counts
    • Instance cards with status indicators and quick actions
    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#instance-list","title":"Instance List","text":"

    Searchable, filterable table of all instances with status, domain, health, and creation date.

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#instance-detail","title":"Instance Detail","text":"

    5-tab view for each instance:

    Tab Content Overview Status, domain, ports, features, health summary Services Per-container status grid with restart and log-view actions Logs Real-time log viewer with service filter, tail count, and time range Backups Backup list with create, download, and delete actions Tunnel Pangolin tunnel status and configuration","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#backups","title":"Backups","text":"

    Cross-instance backup management:

    • All backups in one table with instance filter
    • Stats: total count, total size, last backup time
    • \"Backup All Running\" bulk action
    • Download and delete individual archives
    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#audit-log","title":"Audit Log","text":"

    Filterable activity trail with 18 action types:

    • Instance lifecycle: CREATE, UPDATE, DELETE, START, STOP, RESTART, UPGRADE
    • Backups: CREATE, DELETE
    • Tunnel: PANGOLIN_SETUP, PANGOLIN_SYNC
    • Users: LOGIN, CREATE, UPDATE, DELETE
    • Settings: UPDATE

    Each entry includes timestamp, user, action, instance, IP address, and details (expandable JSON).

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#settings","title":"Settings","text":"

    CCP-level configuration:

    • Port ranges
    • Pangolin credentials
    • Default feature flags for new instances
    • Health check interval
    • Backup retention period
    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#roles","title":"Roles","text":"Role Capabilities SUPER_ADMIN Full access: create/delete instances, manage users, view secrets, delete backups OPERATOR Manage instances: create, start/stop/restart, backups, health checks VIEWER Read-only: view instances, logs, health, backups, audit log","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#security","title":"Security","text":"
    • JWT authentication with 15-minute access tokens and 7-day refresh tokens (atomic rotation)
    • AES-256-GCM encryption for instance secrets stored in the database
    • Audit logging on all operations with IP address capture
    • Role-based access control on all API endpoints
    • Docker socket access restricted to the CCP API container only
    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#next-steps","title":"Next Steps","text":"
    • Services Overview \u2014 learn about the services CCP provisions for each instance
    • Updates & Upgrades \u2014 upgrading CML instances
    • Deployment \u2014 production setup with tunneling and SSL
    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/environment-variables/","title":"Environment Variables","text":"

    Need help getting set up?

    Bunker Operations provides managed infrastructure and hands-on setup assistance for organizations running Changemaker Lite. We handle domains, tunnels, SMTP, and servers so you can focus on your campaign. Get in touch: bnkops.com | admin@bnkops.ca

    Changemaker Lite uses a single .env file at the project root to configure all services. Copy the example file to get started:

    cp .env.example .env\n

    Security Essentials

    • Change every REQUIRED_STRONG_PASSWORD_CHANGE_THIS value before starting services
    • Generate secrets with openssl rand -hex 32 (or -hex 16 where noted)
    • Never commit .env to version control
    • Use unique values for each secret \u2014 do not reuse JWT secrets as encryption keys
    ","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#quick-reference","title":"Quick Reference","text":"

    Variables are grouped by service. Each table marks whether a variable is required for a basic deployment or optional (has a sensible default or only needed for specific features).

    Symbol Meaning Must be set before first run Has a working default; change for production Feature flag \u2014 opt-in","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#general","title":"General","text":"Variable Default Description NODE_ENV development Set to production for production deployments. Controls logging, error detail, and security checks. DOMAIN cmlite.org Root domain. Used for nginx subdomain routing (app.DOMAIN, api.DOMAIN, etc.). The root domain serves the MkDocs documentation site; all application routes live under app.DOMAIN. USER_ID 1000 UID for container file ownership. Match your host user's UID (id -u). GROUP_ID 1000 GID for container file ownership. Match your host user's GID (id -g). DOCKER_GROUP_ID 984 GID of the docker group on the host. Needed for containers that access the Docker socket. Find with getent group docker.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#postgresql-main-database","title":"PostgreSQL (Main Database)","text":"

    The primary database for both the Express API and the Fastify Media API (shared).

    Variable Default Description V2_POSTGRES_USER changemaker Database username. V2_POSTGRES_PASSWORD \u2014 Must change. Database password. V2_POSTGRES_DB changemaker_v2 Database name. V2_POSTGRES_PORT 5433 Host port mapping. The container listens on 5432 internally.

    Connection string

    The DATABASE_URL is constructed automatically inside Docker. If running locally, set: 

    DATABASE_URL=postgresql://changemaker:YOUR_PASSWORD@localhost:5433/changemaker_v2\n

    ","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#jwt-authentication","title":"JWT Authentication","text":"Variable Default Description JWT_ACCESS_SECRET \u2014 Secret for signing access tokens. Generate with openssl rand -hex 32. JWT_REFRESH_SECRET \u2014 Secret for signing refresh tokens. Must differ from the access secret. JWT_INVITE_SECRET \u2014 Secret for signing volunteer invite tokens. Must differ from access and refresh secrets. Generate with openssl rand -hex 32. JWT_ACCESS_EXPIRY 15m Access token lifetime. Short-lived by design. JWT_REFRESH_EXPIRY 7d Refresh token lifetime. Tokens are rotated atomically on each refresh.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#encryption-key","title":"Encryption Key","text":"Variable Default Description ENCRYPTION_KEY \u2014 AES key for encrypting secrets stored in the database (SMTP passwords, API keys, etc.). Generate with openssl rand -hex 32. Must not reuse a JWT secret. Required in all environments (no longer falls back to JWT secret in development).","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#security-extras","title":"Security Extras","text":"

    Additional secrets for key separation. These fall back to JWT_ACCESS_SECRET if empty, but setting unique values is strongly recommended for production.

    Variable Default Description GITEA_SSO_SECRET (empty) Cookie signing secret for Gitea SSO integration. Falls back to JWT_ACCESS_SECRET if empty. Generate with openssl rand -hex 32. SERVICE_PASSWORD_SALT (empty) Salt for deriving deterministic service passwords (Gitea, Rocket.Chat user provisioning). Falls back to JWT_ACCESS_SECRET if empty \u2014 rotating JWT_ACCESS_SECRET would then invalidate all provisioned service passwords. Generate with openssl rand -hex 32. CSP_ENABLED false Enable Content Security Policy headers in API responses.

    Key separation

    If GITEA_SSO_SECRET and SERVICE_PASSWORD_SALT are left empty, the API logs security warnings on every startup. Set unique values to isolate secret rotation and prevent one compromised key from affecting other subsystems.

    ","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#initial-admin-account","title":"Initial Admin Account","text":"

    These credentials create the first super-admin user during database seeding (npx prisma db seed).

    Variable Default Description INITIAL_ADMIN_EMAIL admin@cmlite.org Email address for the initial admin. INITIAL_ADMIN_PASSWORD \u2014 Must change. Must be 12+ characters with uppercase, lowercase, and a digit. Change this password after first login.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#api-server","title":"API Server","text":"Variable Default Description API_PORT 4000 Host port for the Express API. API_URL http://localhost:4000 Public URL of the API. Used for generating links in emails and QR codes. CORS_ORIGINS http://localhost:3000,http://localhost Comma-separated list of allowed CORS origins. Add your production domain (e.g., https://app.yourdomain.org) for production.

    Production CORS

    If you deploy behind a tunnel (Pangolin, Cloudflare) and API requests fail with CORS errors, add your production app. subdomain here: 

    CORS_ORIGINS=https://app.betteredmonton.org,http://localhost:3000,http://localhost\n
    Then restart the API: docker compose restart api

    ","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#admin-gui","title":"Admin GUI","text":"Variable Default Description ADMIN_PORT 3000 Host port for the React admin dashboard. ADMIN_URL http://localhost:3000 Public URL of the admin GUI.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#rate-limiting","title":"Rate Limiting","text":"Variable Default Description RATE_LIMIT_WINDOW_MS 900000 Rate limit window in milliseconds (default: 15 minutes). RATE_LIMIT_MAX 500 Maximum requests per window per IP. Auth endpoints have a stricter limit (10/min).","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#nginx-reverse-proxy","title":"Nginx Reverse Proxy","text":"Variable Default Description NGINX_HTTP_PORT 80 HTTP port. All subdomains route through nginx. NGINX_HTTPS_PORT 443 HTTPS port. SSL is typically handled by the tunnel provider (Pangolin/Cloudflare).","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#redis","title":"Redis","text":"

    Shared by rate limiting, BullMQ job queues, geocoding cache, and session data.

    Variable Default Description REDIS_PASSWORD \u2014 Must change. Redis requires authentication. REDIS_URL redis://:${REDIS_PASSWORD}@redis-changemaker:6379 Full connection URL. Uses the password variable automatically.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#payments-stripe","title":"Payments (Stripe)","text":"Variable Default Description ENABLE_PAYMENTS false Set to true to enable the payments feature (memberships, products, donations). Stripe API keys are stored encrypted in the database via the admin settings page.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#email-smtp","title":"Email / SMTP","text":"Variable Default Description SMTP_HOST mailhog-changemaker SMTP server. Default points to the MailHog dev container. SMTP_PORT 1025 SMTP port. 1025 for MailHog, 587 for most production SMTP. SMTP_USER (empty) SMTP username. Not needed for MailHog. SMTP_PASS (empty) SMTP password. SMTP_FROM noreply@cmlite.org \"From\" address on outgoing emails. SMTP_FROM_NAME Changemaker Lite Display name for the \"From\" header. EMAIL_TEST_MODE true When true, all emails go to MailHog instead of real SMTP. Set to false in production. TEST_EMAIL_RECIPIENT admin@cmlite.org Catch-all recipient when test mode is on.

    Development email

    With EMAIL_TEST_MODE=true, all outgoing email is captured in MailHog at http://localhost:8025. No real emails are sent.

    ","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#listmonk-newsletters","title":"Listmonk (Newsletters)","text":"

    Listmonk handles newsletter/marketing campaigns. Sync with the main platform is opt-in.

    Variable Default Description LISTMONK_PORT 9001 Listmonk web UI port. LISTMONK_DB_PORT 5434 Listmonk's own PostgreSQL port (separate from the main DB). Uses 5434 to avoid conflict with the main PostgreSQL (5432 internal / 5433 host). LISTMONK_DB_USER listmonk Listmonk database user. LISTMONK_DB_PASSWORD \u2014 Listmonk database password. LISTMONK_DB_NAME listmonk Listmonk database name. LISTMONK_WEB_ADMIN_USER admin Login for the Listmonk web dashboard. LISTMONK_WEB_ADMIN_PASSWORD \u2014 Password for the Listmonk web dashboard. LISTMONK_API_USER v2-api API user for programmatic access (auto-created by init container). LISTMONK_API_TOKEN \u2014 Token for API user. Generate with openssl rand -hex 16. LISTMONK_ADMIN_USER v2-api Same as LISTMONK_API_USER (used by the sync service). LISTMONK_ADMIN_PASSWORD \u2014 Same as LISTMONK_API_TOKEN. LISTMONK_SYNC_ENABLED false Set to true to sync participants/locations/users to Listmonk lists. LISTMONK_WEBHOOK_SECRET (empty) Shared secret for Listmonk webhook callbacks. LISTMONK_PROXY_PORT 9002 Nginx proxy port for Listmonk. Listmonk SMTP settings

    Listmonk has its own SMTP configuration, separate from the main platform's:

    Variable Default Description LISTMONK_SMTP_HOST mailhog-changemaker SMTP host for Listmonk. LISTMONK_SMTP_PORT 1025 SMTP port. LISTMONK_SMTP_USER (empty) SMTP username. LISTMONK_SMTP_PASSWORD (empty) SMTP password. LISTMONK_SMTP_TLS_TYPE none TLS mode: none, STARTTLS, or TLS. LISTMONK_SMTP_FROM Changemaker Lite <noreply@cmlite.org> From address for newsletters.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#represent-api-canadian-electoral-data","title":"Represent API (Canadian Electoral Data)","text":"Variable Default Description REPRESENT_API_URL https://represent.opennorth.ca OpenNorth Represent API endpoint. Used for postal code \u2192 representative lookups. No API key required.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#nocodb-data-browser","title":"NocoDB (Data Browser)","text":"

    Read-only database browser. Useful for inspecting data without SQL.

    Variable Default Description NOCODB_V2_PORT / NOCODB_PORT 8091 Host port for the NocoDB web UI. NOCODB_URL http://changemaker-v2-nocodb:8080 Internal Docker URL. NC_ADMIN_EMAIL admin@cmlite.org NocoDB admin email. NC_ADMIN_PASSWORD \u2014 NocoDB admin password.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#media-manager","title":"Media Manager","text":"

    Video library with upload, analytics, scheduling, and a public gallery.

    Variable Default Description ENABLE_MEDIA_FEATURES false Set to true to enable the media system. MEDIA_API_PORT 4100 Fastify media API port. MEDIA_API_PUBLIC_URL http://media-api:4100 Internal URL for the media API container. MEDIA_ROOT /media/library Path to the video library inside the container. MEDIA_UPLOADS /media/uploads Path for upload processing. MAX_UPLOAD_SIZE_GB 10 Maximum single-file upload size in gigabytes. PUBLIC_MEDIA_PORT 3100 Public media gallery server port. VIDEO_PLAYER_DEBUG false Enable verbose video player logging. Analytics & scheduling settings Variable Default Description VIDEO_ANALYTICS_RETENTION_DAYS 90 Days to retain analytics data. GDPR-compliant with IP hashing. VIDEO_ANALYTICS_IP_HASHING_ENABLED true Hash viewer IPs for privacy. VIDEO_SCHEDULE_DEFAULT_TIMEZONE UTC Default timezone for scheduled publishing. VIDEO_SCHEDULE_NOTIFICATION_ENABLED true Notify on scheduled publish/unpublish. VIDEO_PREVIEW_LINK_EXPIRY_HOURS 24 Preview link JWT expiry (hours).","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#gitea-git-hosting","title":"Gitea (Git Hosting)","text":"

    Self-hosted Git repository. Optional service.

    Variable Default Description GITEA_URL http://gitea-changemaker:3000 Internal container URL for Gitea. GITEA_PORT / GITEA_WEB_PORT 3030 Gitea web UI port. GITEA_SSH_PORT 2222 Gitea SSH port for git operations. GITEA_DB_TYPE mysql Database type (Gitea uses its own MySQL). GITEA_DB_HOST gitea-db:3306 Internal database host. GITEA_DB_NAME gitea Database name. GITEA_DB_USER gitea Database user. GITEA_DB_PASSWD \u2014 Gitea database password. GITEA_DB_ROOT_PASSWORD \u2014 MySQL root password for Gitea. GITEA_ROOT_URL https://git.cmlite.org Public-facing URL for Gitea. GITEA_DOMAIN git.cmlite.org Domain used in git clone URLs. Gitea Docs Comments

    Enable comments on MkDocs documentation pages, backed by Gitea Issues.

    Variable Default Description GITEA_COMMENTS_ENABLED false Enable comments on MkDocs pages. GITEA_API_TOKEN (empty) Personal access token with repo write scope. Create in Gitea \u2192 Settings \u2192 Applications. GITEA_COMMENTS_REPO_OWNER (empty) Gitea username that owns the docs-comments repo. GITEA_COMMENTS_REPO_NAME docs-comments Repository name (auto-created via admin setup). GITEA_OAUTH_CLIENT_ID (empty) OAuth2 application client ID (create in Gitea \u2192 Settings \u2192 Applications \u2192 OAuth2). GITEA_OAUTH_CLIENT_SECRET (empty) OAuth2 application client secret.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#n8n-workflow-automation","title":"n8n (Workflow Automation)","text":"Variable Default Description N8N_PORT 5678 n8n web UI port. N8N_HOST n8n.cmlite.org Public hostname for n8n. N8N_ENCRYPTION_KEY \u2014 Encryption key for n8n credentials storage. N8N_USER_EMAIL admin@example.com Initial n8n admin email. N8N_USER_PASSWORD \u2014 Initial n8n admin password. GENERIC_TIMEZONE UTC Timezone for n8n cron triggers.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#mkdocs-documentation","title":"MkDocs (Documentation)","text":"Variable Default Description MKDOCS_PORT 4003 MkDocs dev server port (live preview). MKDOCS_SITE_SERVER_PORT 4004 MkDocs static site server port. BASE_DOMAIN https://cmlite.org Base URL for generated documentation links. MKDOCS_PREVIEW_URL http://mkdocs:8000 Internal container URL. MKDOCS_DOCS_PATH /mkdocs/docs Documentation source directory inside the container.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#code-server-web-ide","title":"Code Server (Web IDE)","text":"Variable Default Description CODE_SERVER_PORT 8888 Code Server web UI port. CODE_SERVER_URL http://code-server-changemaker:8443 Internal container URL.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#homepage-service-dashboard","title":"Homepage (Service Dashboard)","text":"Variable Default Description HOMEPAGE_PORT 3010 Homepage web UI port. HOMEPAGE_EMBED_PORT 8887 Port for iframe embedding in admin. HOMEPAGE_VAR_BASE_URL http://localhost Base URL used in Homepage service links.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#mini-qr-qr-code-generator","title":"Mini QR (QR Code Generator)","text":"Variable Default Description MINI_QR_PORT 8089 Mini QR direct access port. MINI_QR_URL http://mini-qr:8080 Internal container URL. MINI_QR_EMBED_PORT 8885 Port for iframe embedding (walk sheets, cut exports).","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#excalidraw-whiteboard","title":"Excalidraw (Whiteboard)","text":"Variable Default Description EXCALIDRAW_PORT 8090 Excalidraw web UI port. EXCALIDRAW_URL http://excalidraw-changemaker:80 Internal container URL. EXCALIDRAW_EMBED_PORT 8886 Port for iframe embedding. EXCALIDRAW_WS_URL wss://draw.cmlite.org WebSocket URL for real-time collaboration.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#vaultwarden-password-manager","title":"Vaultwarden (Password Manager)","text":"

    Self-hosted Bitwarden-compatible password manager. Optional service.

    Variable Default Description VAULTWARDEN_PORT 8445 Vaultwarden web UI port. VAULTWARDEN_URL http://vaultwarden-changemaker:80 Internal container URL. VAULTWARDEN_EMBED_PORT 8890 Port for iframe embedding in admin. VAULTWARDEN_ADMIN_TOKEN (empty) Admin panel token (access at /admin). Generate with openssl rand -hex 32. VAULTWARDEN_DOMAIN https://vault.cmlite.org Public-facing URL. Must use HTTPS \u2014 Bitwarden web vault enforces HTTPS for account creation. Set to your Pangolin tunnel URL. VAULTWARDEN_SIGNUPS_ALLOWED false Allow new user self-registration. Keep false and use admin panel invites. VAULTWARDEN_WEBSOCKET_ENABLED true Enable WebSocket notifications for real-time sync. VAULTWARDEN_SMTP_SECURITY off SMTP security mode: off for MailHog, starttls or force_tls for production. Uses the main SMTP_* variables for host/credentials.

    Initial setup

    The vaultwarden-init container automatically invites the INITIAL_ADMIN_EMAIL user when starting. Check MailHog (or your SMTP) for the invitation email.

    ","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#rocketchat-team-chat","title":"Rocket.Chat (Team Chat)","text":"

    Self-hosted team chat for volunteer coordination. Requires MongoDB (auto-configured).

    Variable Default Description ENABLE_CHAT false Set to true to enable the Rocket.Chat integration. The initial default; once saved in admin Settings, the DB value is authoritative. ROCKETCHAT_ADMIN_USER rcadmin Rocket.Chat admin username. ROCKETCHAT_ADMIN_PASSWORD \u2014 Rocket.Chat admin password. ROCKETCHAT_URL http://rocketchat-changemaker:3000 Internal container URL. ROCKETCHAT_EMBED_PORT 8891 Port for iframe embedding in admin. MONGO_ROOT_USER rocketchat MongoDB admin username. MONGO_ROOT_PASSWORD \u2014 MongoDB admin password. MongoDB runs with --auth enabled.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#gancio-event-management","title":"Gancio (Event Management)","text":"

    Self-hosted event management platform. Uses the shared PostgreSQL database (auto-created by init-gancio-db.sh).

    Variable Default Description GANCIO_PORT 8092 Gancio web UI port. GANCIO_URL http://gancio-changemaker:13120 Internal container URL. GANCIO_EMBED_PORT 8892 Port for iframe embedding in admin. GANCIO_BASE_URL https://events.cmlite.org Public-facing URL for Gancio. Used in event links. GANCIO_ADMIN_USER admin Gancio admin username for shift-to-event sync (OAuth login). GANCIO_ADMIN_PASSWORD \u2014 Gancio admin password. GANCIO_SYNC_ENABLED false Set to true to enable automatic shift \u2192 Gancio event synchronization.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#jitsi-meet-video-conferencing","title":"Jitsi Meet (Video Conferencing)","text":"

    Self-hosted video conferencing with JWT authentication. Integrates with Rocket.Chat for in-channel video calls.

    Variable Default Description ENABLE_MEET false Set to true to enable the Jitsi Meet integration. The initial default; once saved in admin Settings, the DB value is authoritative. JITSI_APP_ID changemaker JWT application ID. Must match across Jitsi Prosody, Rocket.Chat app settings, and JWT_ACCEPTED_ISSUERS/JWT_ACCEPTED_AUDIENCES. JITSI_APP_SECRET \u2014 JWT secret for signing Jitsi tokens. Generate with openssl rand -hex 32. Shared between Jitsi Prosody, Rocket.Chat, and the API. JITSI_JICOFO_AUTH_PASSWORD \u2014 Internal XMPP password for Jicofo (conference focus). Generate with openssl rand -hex 16. JITSI_JVB_AUTH_PASSWORD \u2014 Internal XMPP password for JVB (video bridge). Generate with openssl rand -hex 16. JITSI_EMBED_PORT 8893 Port for iframe embedding in admin. JITSI_URL http://jitsi-web-changemaker:80 Internal container URL. JVB_ADVERTISE_IP (empty) Server's public IP address. Required in production for NAT traversal so remote participants can connect. JVB_PORT 10000 UDP port for media traffic. Must be open in your firewall.

    Production requirements

    • JVB_ADVERTISE_IP must be set to your server's public IP for calls to work outside the local network.
    • Port 10000/udp must be open in your firewall for media traffic.
    • Calls must go through the production domain (not localhost) for SSL/JWT to work.
    ","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#sms-campaigns-termux-android-bridge","title":"SMS Campaigns (Termux Android Bridge)","text":"

    Send SMS messages via an Android phone running the Termux API server. The phone acts as an SMS gateway.

    Variable Default Description ENABLE_SMS false Set to true to enable SMS campaigns. The initial default; once saved in admin Settings, the DB value is authoritative. TERMUX_API_URL http://10.0.0.193:5001 URL of the Termux API server running on the Android phone. TERMUX_API_KEY (empty) API key for authenticating with the Termux server (HMAC auth via X-API-Key header). SMS_DELAY_BETWEEN_MS 3000 Delay between sending individual SMS messages (ms). Prevents carrier throttling. SMS_MAX_RETRIES 3 Maximum retry attempts for failed SMS sends. SMS_RESPONSE_SYNC_INTERVAL_MS 30000 How often to poll the phone's inbox for responses (ms). SMS_DEVICE_MONITOR_INTERVAL_MS 30000 How often to check device health \u2014 battery, connectivity (ms).

    GUI configuration

    The Termux API URL and API key can also be configured from Admin \u2192 Settings \u2192 SMS. Database values override these env vars when set.

    ","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#mailhog-development-email","title":"MailHog (Development Email)","text":"Variable Default Description MAILHOG_SMTP_PORT 1025 SMTP port for capturing emails. MAILHOG_WEB_PORT 8025 Web UI to view captured emails.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#nar-national-address-register","title":"NAR (National Address Register)","text":"

    Canadian address data import for geographic canvassing.

    Variable Default Description NAR_DATA_DIR /data Path to extracted NAR data inside the container. Expects YYYYMM/Addresses/ and YYYYMM/Locations/ subdirectories. Mount via ./data:/data:ro in Docker Compose.

    Download NAR data from Statistics Canada.

    ","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#geocoding","title":"Geocoding","text":"

    Multi-provider geocoding for address resolution. Works out of the box with free providers; optional paid providers improve accuracy.

    Variable Default Description MAPBOX_API_KEY (empty) Mapbox API key for improved geocoding accuracy. Free tier: 100k requests/month. Sign up. GEOCODING_RATE_LIMIT_MS 1100 Delay between requests to free providers (ms). Respects rate limits. GEOCODING_CACHE_ENABLED true Enable Redis-backed geocoding cache. GEOCODING_CACHE_TTL_HOURS 24 Cache lifetime in hours. GOOGLE_MAPS_API_KEY (empty) Google Maps API key. Most accurate but $0.005/request after free tier. GOOGLE_MAPS_ENABLED false Enable Google Maps as a geocoding provider. GEOCODING_PARALLEL_ENABLED true Enable parallel geocoding for bulk imports (~10x speedup). GEOCODING_BATCH_SIZE 10 Number of concurrent geocoding requests during bulk operations. BULK_GEOCODE_ENABLED true Enable bulk re-geocoding from the admin UI. BULK_GEOCODE_MAX_BATCH 5000 Maximum locations per bulk geocoding run.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#overpass-area-import","title":"Overpass / Area Import","text":"

    OpenStreetMap data import for map enrichment.

    Variable Default Description OVERPASS_API_URL https://overpass-api.de/api/interpreter Overpass API endpoint. Use a private instance for heavy usage. OVERPASS_MIN_DELAY_MS 30000 Minimum delay between requests (ms). The public API requires 30 seconds. AREA_IMPORT_MAX_GRID_POINTS 500 Maximum reverse-geocode grid points per area import.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#pangolin-tunnel","title":"Pangolin Tunnel","text":"

    Expose services to the internet without port forwarding, using a self-hosted Pangolin instance.

    Variable Default Description PANGOLIN_API_URL https://api.bnkserve.org/v1 Pangolin server API endpoint. PANGOLIN_API_KEY (empty) API key for Pangolin management. PANGOLIN_ORG_ID (empty) Organization ID in Pangolin. PANGOLIN_SITE_ID (empty) Site ID (populated after setup via admin GUI). PANGOLIN_ENDPOINT https://pangolin.bnkserve.org Pangolin tunnel endpoint. PANGOLIN_NEWT_ID (empty) Newt client ID (populated after setup). PANGOLIN_NEWT_SECRET (empty) Newt client secret (populated after setup).

    Setup flow

    Configure the tunnel from Admin \u2192 Settings \u2192 Pangolin. The setup wizard walks you through creating a site, copying credentials, and connecting the Newt container. See Deployment for the full guide.

    ","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#monitoring","title":"Monitoring","text":"

    These services are behind the monitoring Docker Compose profile. Start them with:

    docker compose --profile monitoring up -d\n
    Variable Default Description PROMETHEUS_PORT 9090 Prometheus web UI / query port. GRAFANA_PORT 3005 Grafana dashboard port. GRAFANA_ADMIN_PASSWORD admin Change in production. GRAFANA_ROOT_URL http://localhost:3005 Public URL for Grafana (used in links). CADVISOR_PORT 8086 cAdvisor container metrics port. NODE_EXPORTER_PORT 9100 Prometheus node exporter port. REDIS_EXPORTER_PORT 9121 Redis metrics exporter port. ALERTMANAGER_PORT 9093 Alertmanager web UI port. GOTIFY_PORT 8889 Gotify push notification port. GOTIFY_ADMIN_USER admin Gotify admin username. GOTIFY_ADMIN_PASSWORD admin Change in production. GRAFANA_EMBED_PORT 8894 Port for iframe embedding Grafana in admin. ALERTMANAGER_EMBED_PORT 8895 Port for iframe embedding Alertmanager in admin.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#bunker-ops-fleet-management","title":"Bunker Ops (Fleet Management)","text":"

    Remote metrics push for managing multiple Changemaker Lite instances from a central monitoring server.

    Variable Default Description INSTANCE_LABEL (empty) Unique label for this instance (used as a Prometheus metric label). Falls back to DOMAIN if empty. BUNKER_OPS_ENABLED false Enable remote metrics push to a central VictoriaMetrics server. BUNKER_OPS_REMOTE_WRITE_URL (empty) VictoriaMetrics remote_write endpoint (e.g., https://ops.example.com/api/v1/write).","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#social-people-analytics","title":"Social, People & Analytics","text":"

    Feature flags for the social graph, CRM people module, and analytics dashboard.

    Variable Default Description ENABLE_SOCIAL false Enable the social module (friendships, challenges, spotlights, referrals). The initial default; once saved in admin Settings, the DB value is authoritative. ENABLE_PEOPLE false Enable the CRM people module. The initial default; once saved in admin Settings, the DB value is authoritative. ENABLE_ANALYTICS false Enable the analytics dashboard with visitor tracking and geographic insights. The initial default; once saved in admin Settings, the DB value is authoritative.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#geoip-maxmind-geolite2","title":"GeoIP (MaxMind GeoLite2)","text":"

    Geographic IP lookup for analytics visitor location tracking. Requires a free MaxMind account.

    Variable Default Description MAXMIND_ACCOUNT_ID (empty) MaxMind account ID. Sign up free. MAXMIND_LICENSE_KEY (empty) MaxMind license key. When set, the GeoLite2-City database auto-downloads at startup. GEOIP_DB_PATH /data/geoip/GeoLite2-City.mmdb Path to the GeoLite2 database file inside the container.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#control-panel-agent-ccp","title":"Control Panel Agent (CCP)","text":"

    Remote management agent for the Changemaker Control Panel \u2014 enables centralized multi-instance management.

    Variable Default Description ENABLE_CCP_AGENT false Enable the CCP remote management agent. CCP_URL (empty) URL of the Changemaker Control Panel server. CCP_INVITE_CODE (empty) One-time invite code for agent registration with the control panel. CCP_AGENT_URL (empty) How the CCP can reach this agent (must be externally accessible). CCP_AGENT_PORT 7443 Agent listener port.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#container-registry","title":"Container Registry","text":"

    Settings for pulling pre-built production images from the Gitea container registry.

    Variable Default Description GITEA_REGISTRY gitea.bnkops.com/admin Registry hostname and namespace for pulling images. IMAGE_TAG (empty) Image tag to pull. Set to a commit SHA or latest for pre-built images. Leave empty (defaults to local) to build from source. COMPOSE_PROFILES (empty) Docker Compose profiles to activate. Set to monitoring to include Prometheus/Grafana/Alertmanager in every docker compose up -d. GITEA_REGISTRY_USER admin Registry username for docker login and the registry status API endpoint. GITEA_REGISTRY_PASS (empty) Registry password for the status API endpoint. For docker push/pull, use docker login gitea.bnkops.com. GITEA_REGISTRY_API_TOKEN (empty) API token for the remote registry (gitea.bnkops.com). Used by build-release.sh --upload to publish release tarballs. Create at Gitea \u2192 User Settings \u2192 Applications. Not the same as GITEA_API_TOKEN.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#docker-container-management","title":"Docker / Container Management","text":"

    Internal settings for the admin dashboard's service status panel and container management.

    Variable Default Description DOCKER_NETWORK_NAME changemaker-lite Docker bridge network name. Used by the dashboard to auto-discover containers. DOCKER_PROXY_URL http://docker-socket-proxy:2375 Read-only Docker socket proxy URL for container inspection. NEWT_CONTAINER_NAME newt-changemaker Newt tunnel container name (for restart/status checks). NEWT_COMPOSE_SERVICE newt Docker Compose service name for the Newt container.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#embed-proxy-ports","title":"Embed Proxy Ports","text":"

    Dedicated nginx ports for iframe embedding services in the admin dashboard without requiring DNS/subdomains. Change these to avoid port conflicts when running multiple instances on one host.

    Variable Default Description NOCODB_EMBED_PORT 8881 NocoDB iframe port. N8N_EMBED_PORT 8882 n8n iframe port. GITEA_EMBED_PORT 8883 Gitea iframe port. MAILHOG_EMBED_PORT 8884 MailHog iframe port. MINI_QR_EMBED_PORT 8885 Mini QR iframe port. EXCALIDRAW_EMBED_PORT 8886 Excalidraw iframe port. HOMEPAGE_EMBED_PORT 8887 Homepage iframe port. VAULTWARDEN_EMBED_PORT 8890 Vaultwarden iframe port. ROCKETCHAT_EMBED_PORT 8891 Rocket.Chat iframe port. GANCIO_EMBED_PORT 8892 Gancio iframe port. JITSI_EMBED_PORT 8893 Jitsi iframe port. GRAFANA_EMBED_PORT 8894 Grafana iframe port. ALERTMANAGER_EMBED_PORT 8895 Alertmanager iframe port.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#gitea-docs-version-history","title":"Gitea Docs Version History","text":"

    Settings for the documentation version history feature (backed by Gitea repository commits).

    Variable Default Description GITEA_DOCS_REPO admin/changemaker.lite Gitea repository path for docs version history. GITEA_DOCS_PREFIX mkdocs/docs Path prefix within the repository where documentation files live. GITEA_DOCS_BRANCH v2 Git branch to query for version history. GITEA_ADMIN_PASSWORD (empty) Gitea admin password. Used once during initial setup to create an API token, then can be cleared.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#prisma-cli-host-side","title":"Prisma CLI (Host-Side)","text":"Variable Default Description DATABASE_URL postgresql://changemaker:YOUR_POSTGRES_PASSWORD@localhost:5433/changemaker_v2 Full PostgreSQL connection string. Only used when running Prisma CLI on the host (npx prisma migrate dev). Docker containers resolve the database hostname internally via Docker Compose environment variables.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#generating-secrets","title":"Generating Secrets","text":"

    Use these commands to generate all required secrets at once:

    # JWT secrets (three separate values)\necho \"JWT_ACCESS_SECRET=$(openssl rand -hex 32)\"\necho \"JWT_REFRESH_SECRET=$(openssl rand -hex 32)\"\necho \"JWT_INVITE_SECRET=$(openssl rand -hex 32)\"\n\n# Encryption key (must differ from JWT secrets)\necho \"ENCRYPTION_KEY=$(openssl rand -hex 32)\"\n\n# Security extras (key separation)\necho \"GITEA_SSO_SECRET=$(openssl rand -hex 32)\"\necho \"SERVICE_PASSWORD_SALT=$(openssl rand -hex 32)\"\n\n# Database and Redis passwords\necho \"V2_POSTGRES_PASSWORD=$(openssl rand -hex 24)\"\necho \"REDIS_PASSWORD=$(openssl rand -hex 24)\"\n\n# Listmonk\necho \"LISTMONK_DB_PASSWORD=$(openssl rand -hex 24)\"\necho \"LISTMONK_WEB_ADMIN_PASSWORD=$(openssl rand -hex 16)\"\nLISTMONK_TOKEN=$(openssl rand -hex 16)\necho \"LISTMONK_API_TOKEN=$LISTMONK_TOKEN\"\necho \"LISTMONK_ADMIN_PASSWORD=$LISTMONK_TOKEN\"\n\n# Supporting services\necho \"GITEA_DB_PASSWD=$(openssl rand -hex 24)\"\necho \"GITEA_DB_ROOT_PASSWORD=$(openssl rand -hex 24)\"\necho \"N8N_ENCRYPTION_KEY=$(openssl rand -hex 32)\"\necho \"N8N_USER_PASSWORD=$(openssl rand -hex 16)\"\necho \"NC_ADMIN_PASSWORD=$(openssl rand -hex 16)\"\necho \"INITIAL_ADMIN_PASSWORD=$(openssl rand -base64 18)\"\n\n# Vaultwarden\necho \"VAULTWARDEN_ADMIN_TOKEN=$(openssl rand -hex 32)\"\n\n# Rocket.Chat + MongoDB\necho \"ROCKETCHAT_ADMIN_PASSWORD=$(openssl rand -hex 16)\"\necho \"MONGO_ROOT_PASSWORD=$(openssl rand -hex 24)\"\n\n# Gancio\necho \"GANCIO_ADMIN_PASSWORD=$(openssl rand -hex 16)\"\n\n# Jitsi Meet\necho \"JITSI_APP_SECRET=$(openssl rand -hex 32)\"\necho \"JITSI_JICOFO_AUTH_PASSWORD=$(openssl rand -hex 16)\"\necho \"JITSI_JVB_AUTH_PASSWORD=$(openssl rand -hex 16)\"\n

    Tip

    Copy the output and paste the values into your .env file. The INITIAL_ADMIN_PASSWORD uses base64 encoding to ensure it contains uppercase, lowercase, and digits (meeting the password policy).

    ","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#minimal-vs-full-deployment","title":"Minimal vs Full Deployment","text":"Minimal (Core Only)Full Stack

    For a basic deployment with campaigns, map, and admin:

    Required variables
    V2_POSTGRES_PASSWORD=...\nREDIS_PASSWORD=...\nJWT_ACCESS_SECRET=...\nJWT_REFRESH_SECRET=...\nJWT_INVITE_SECRET=...\nENCRYPTION_KEY=...\nINITIAL_ADMIN_PASSWORD=...\n
    Start services
    docker compose up -d v2-postgres redis api admin\n

    For the complete platform including media, newsletters, monitoring, and all services:

    Additional variables needed
    # Everything above, plus:\nENABLE_MEDIA_FEATURES=true\nENABLE_PAYMENTS=true\nENABLE_CHAT=true\nENABLE_MEET=true\nENABLE_SMS=true\nLISTMONK_SYNC_ENABLED=true\nGANCIO_SYNC_ENABLED=true\nLISTMONK_DB_PASSWORD=...\nLISTMONK_WEB_ADMIN_PASSWORD=...\nLISTMONK_API_TOKEN=...\nNC_ADMIN_PASSWORD=...\nGITEA_DB_PASSWD=...\nGITEA_DB_ROOT_PASSWORD=...\nN8N_ENCRYPTION_KEY=...\nN8N_USER_PASSWORD=...\nVAULTWARDEN_ADMIN_TOKEN=...\nROCKETCHAT_ADMIN_PASSWORD=...\nMONGO_ROOT_PASSWORD=...\nGANCIO_ADMIN_PASSWORD=...\nJITSI_APP_SECRET=...\nJITSI_JICOFO_AUTH_PASSWORD=...\nJITSI_JVB_AUTH_PASSWORD=...\nJVB_ADVERTISE_IP=your.public.ip.here\nEMAIL_TEST_MODE=false\nSMTP_HOST=smtp.your-provider.com\nSMTP_PORT=587\nSMTP_USER=you@example.com\nSMTP_PASS=your-smtp-password\n
    Start services
    docker compose up -d\ndocker compose --profile monitoring up -d\n
    ","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/features/","title":"Features at a Glance","text":"

    Need help getting set up?

    Bunker Operations provides managed infrastructure and hands-on setup assistance for organizations running Changemaker Lite. We handle domains, tunnels, SMTP, and servers so you can focus on your campaign. Get in touch: bnkops.com | admin@bnkops.ca

    Changemaker Lite bundles advocacy campaigns, geographic mapping, volunteer management, media hosting, and landing pages into a single self-hosted platform. Every feature can be toggled on or off from Settings in the admin panel.

    ","tags":["reference","getting-started"],"boost":2},{"location":"docs/getting-started/features/#core-features","title":"Core Features","text":"

    • Advocacy Campaigns

      Help supporters contact elected representatives through email campaigns with postal code lookup and a public response wall.

      Campaign guide

    • Map & Canvassing

      Manage locations, draw canvassing territories, schedule volunteer shifts, and run GPS-tracked door-to-door outreach.

      Map guide

    • Media Manager

      Upload videos and photos, curate playlists, publish a shorts feed, and track engagement with built-in analytics.

      Media guide

    • Landing Pages

      Build campaign microsites with a drag-and-drop GrapesJS visual editor and publish at custom slugs.

      Landing pages guide

    • Payments (Stripe)

      Accept memberships, product sales, and donations with encrypted Stripe integration and branded donation pages.

      Payments guide

    • SMS Campaigns

      Text message outreach via a Termux Android bridge with contact lists, templates, and response tracking.

      SMS guide

    • Public Homepage

      Customizable landing page with hero section, live stats, featured campaigns, upcoming shifts, and activity feed.

      Homepage guide

    ","tags":["reference","getting-started"],"boost":2},{"location":"docs/getting-started/features/#communication-collaboration","title":"Communication & Collaboration","text":"

    • Newsletter (Listmonk)

      Opt-in mailing lists and newsletter campaigns with automatic subscriber sync from shifts and contacts.

      Newsletter guide

    • Email Templates

      Reusable email templates with variable substitution for campaign communications.

      Email templates guide

    • Team Chat (Rocket.Chat)

      Self-hosted team chat with iframe integration, floating widget, and native mobile app support.

      Chat guide

    • Video Conferencing (Jitsi)

      Self-hosted video calls integrated with Rocket.Chat via JWT authentication \u2014 no separate login required.

      Video conferencing guide

    ","tags":["reference","getting-started"],"boost":2},{"location":"docs/getting-started/features/#integrations-services","title":"Integrations & Services","text":"

    • Events (Gancio)

      Self-hosted event management with automatic shift-to-event sync and an embeddable calendar widget.

      Events guide

    • Password Manager (Vaultwarden)

      Bitwarden-compatible password vault for secure team credential sharing.

      Password manager guide

    • User Provisioning

      Automatic account creation and sync across Rocket.Chat, Gitea, Vaultwarden, and Listmonk.

      User provisioning guide

    • People / Contacts

      Centralized contact management for supporters, donors, and community members with cross-module linking.

      People guide

    • Whiteboard (Excalidraw)

      Self-hosted collaborative whiteboard for brainstorming, planning, and visual collaboration.

      Whiteboard guide

    ","tags":["reference","getting-started"],"boost":2},{"location":"docs/getting-started/features/#volunteer-portal","title":"Volunteer Portal","text":"

    • Social Connections

      Friend system, activity feed, groups, profiles, pokes, and privacy controls for volunteer community building.

      Social guide

    • Achievements & Leaderboard

      Badge system with 11 achievements across 4 categories, progress tracking, and competitive leaderboards.

      Achievements guide

    • Volunteer Quick Join

      QR code invite links for instant volunteer onboarding \u2014 scan, fill a short form, and start canvassing.

      Quick join guide

    ","tags":["reference","getting-started"],"boost":2},{"location":"docs/getting-started/features/#automation-analytics","title":"Automation & Analytics","text":"

    • Email Automation

      Automated volunteer lifecycle emails \u2014 thank-you notes, shift reminders, weekly summaries, and re-engagement campaigns.

      Automation guide

    • Data Quality Dashboard

      Geocoding quality metrics with per-provider stats, confidence tiers, and coverage analysis.

      Data quality guide

    • Documentation Analytics

      Page view tracking and engagement metrics for MkDocs documentation pages.

      Docs analytics guide

    ","tags":["reference","getting-started"],"boost":2},{"location":"docs/getting-started/features/#admin-tools","title":"Admin Tools","text":"

    • Docs Comments

      Gitea-backed comment system for documentation pages with anonymous posting and moderation.

      Docs comments guide

    • Command Palette

      Global Ctrl+K search across pages, campaigns, locations, users, settings, and media.

      Command palette guide

    • Navigation Settings

      Customize the public navigation menu with feature toggles, custom links, and drag-and-drop reordering.

      Navigation guide

    • Platform Settings

      Five-tab settings page covering organization details, theme colors, email configuration, feature flags, and notifications.

      Settings guide

    • Social Sharing (OG Tags)

      Open Graph meta tags for campaigns, landing pages, and gallery videos \u2014 rich link previews on social media.

      OG sharing guide

    • Gallery Ads

      Internal ad system with 5 ad types, audience targeting, scheduling, frequency caps, and CTR analytics.

      Gallery ads guide

    • Self-Service Contact Profile

      Token-based public profile pages where contacts can view and update their information and preferences.

      Contact profile guide

    ","tags":["reference","getting-started"],"boost":2},{"location":"docs/getting-started/first-steps/","title":"First Steps","text":"

    Need help getting set up?

    Bunker Operations provides managed infrastructure and hands-on setup assistance for organizations running Changemaker Lite. We handle domains, tunnels, SMTP, and servers so you can focus on your campaign. Get in touch: bnkops.com | admin@bnkops.ca

    You've installed Changemaker Lite \u2014 here's what to do next.

    ","tags":["tutorial","getting-started","admin"],"boost":2},{"location":"docs/getting-started/first-steps/#1-log-in","title":"1. Log In","text":"

    Open the admin panel at http://localhost:3000 (or app.DOMAIN in production) and sign in with the admin email and password you configured during setup.

    Change your password

    If you used the wizard's generated password, change it immediately from Settings > Organization.

    ","tags":["tutorial","getting-started","admin"],"boost":2},{"location":"docs/getting-started/first-steps/#2-explore-the-dashboard","title":"2. Explore the Dashboard","text":"

    The dashboard gives you an at-a-glance view of platform activity. Initially it will be empty \u2014 that's normal.

    ","tags":["tutorial","getting-started","admin"],"boost":2},{"location":"docs/getting-started/first-steps/#3-configure-settings","title":"3. Configure Settings","text":"

    Visit Settings (/app/settings) to:

    • Set your organization name, logo, and tagline
    • Choose theme colors for admin and public interfaces
    • Enable feature modules (campaigns, map, media, payments, etc.)
    • Configure email delivery (MailHog for testing, production SMTP for live use)
    • Check the System tab to verify your installation and check for updates

    ","tags":["tutorial","getting-started","admin"],"boost":2},{"location":"docs/getting-started/first-steps/#4-create-your-first-campaign","title":"4. Create Your First Campaign","text":"

    Go to Campaigns (/app/campaigns) and click Create Campaign:

    1. Write a title and description
    2. Compose the email template supporters will send
    3. Select government levels to target
    4. Publish \u2014 the campaign appears at /campaigns

    ","tags":["tutorial","getting-started","admin"],"boost":2},{"location":"docs/getting-started/first-steps/#5-add-locations","title":"5. Add Locations","text":"

    Go to Locations (/app/map) and add addresses:

    • Click on the map to drop a marker
    • Import a CSV of addresses
    • Use the NAR (National Address Register) import for Canadian data

    ","tags":["tutorial","getting-started","admin"],"boost":2},{"location":"docs/getting-started/first-steps/#6-schedule-a-shift","title":"6. Schedule a Shift","text":"

    Go to Shifts (/app/map/shifts) and create your first volunteer shift:

    1. Set a date, time, and location description
    2. Optionally link it to a canvassing area
    3. Share the public shifts page (/shifts) with volunteers

    ","tags":["tutorial","getting-started","admin"],"boost":2},{"location":"docs/getting-started/first-steps/#7-invite-volunteers","title":"7. Invite Volunteers","text":"

    Share the shifts page link or generate QR codes for in-person events. Volunteers sign up with just an email address.

    ","tags":["tutorial","getting-started","admin"],"boost":2},{"location":"docs/getting-started/first-steps/#next-steps","title":"Next Steps","text":"
    • Services Overview \u2014 complete catalog of all 30+ Docker services
    • Updates & Upgrades \u2014 keep your installation current
    • Features at a Glance \u2014 visual overview of every module
    • Admin Guide \u2014 full administration reference
    • Deployment \u2014 production setup with tunneling and SSL
    ","tags":["tutorial","getting-started","admin"],"boost":2},{"location":"docs/getting-started/installation/","title":"Installation","text":"

    Need help getting set up?

    Bunker Operations provides managed infrastructure and hands-on setup assistance for organizations running Changemaker Lite. We handle domains, tunnels, SMTP, and servers so you can focus on your campaign. Get in touch: bnkops.com | admin@bnkops.ca

    Changemaker Lite runs as a set of Docker containers orchestrated by Docker Compose. The config.sh wizard handles all configuration \u2014 or you can set things up manually.

    Have your external services ready?

    For a production deployment, you'll need a domain name, SMTP email provider, and a reverse tunnel (like Pangolin) or public IP with SSL. Gather these before running the wizard \u2014 it makes the process much smoother.

    Prerequisites & External Services \u2014 full checklist with provider recommendations

    For local development/evaluation, you can skip this \u2014 Docker and MailHog handle everything out of the box.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#prerequisites","title":"Prerequisites","text":"
    • Docker 24+ and Docker Compose v2
    • OpenSSL (for secret generation)
    • A Linux server (Ubuntu 22.04+ recommended) or macOS for development
    • At least 2 GB RAM for core services, 4 GB for the full stack
    • A domain name (optional for development, recommended for production)
    • An SMTP provider for production email delivery (see Prerequisites)
    • A reverse tunnel or public IP for internet access (see Prerequisites)
    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#quick-start","title":"Quick Start","text":"

    Clone the repository:

    git clone https://gitea.bnkops.com/admin/changemaker.lite\ncd changemaker.lite\n

    Run the configuration wizard:

    bash config.sh\n

    Start all services:

    docker compose up -d\n

    Open http://localhost:3000 and sign in with the admin credentials you configured. Database migrations and seeding run automatically on first startup.

    Change your password

    If you used the wizard's generated password, change it immediately from the admin dashboard.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#pre-built-image-installation","title":"Pre-built Image Installation","text":"

    For production deployments, you can skip cloning the source repository entirely. Pre-built Docker images are pulled from the Gitea container registry.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#one-line-install","title":"One-Line Install","text":"
    curl -fsSL https://gitea.bnkops.com/admin/changemaker.lite/raw/branch/main/scripts/install.sh | bash\n

    This script:

    1. Checks prerequisites (Docker, Docker Compose, OpenSSL)
    2. Downloads the latest release package from Gitea
    3. Extracts to ~/changemaker.lite/
    4. Launches the configuration wizard (config.sh)

    After the wizard completes, start everything with docker compose up -d.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#manual-download","title":"Manual Download","text":"

    If you prefer not to pipe to bash:

    # Download latest release\ncurl -LO https://gitea.bnkops.com/admin/changemaker.lite/releases/latest/download/changemaker-lite-latest.tar.gz\ntar xzf changemaker-lite-latest.tar.gz\ncd changemaker-lite\nbash config.sh\ndocker compose up -d\n
    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#whats-different-from-source-install","title":"What's Different from Source Install","text":"Source Install Pre-built Install Download size ~200 MB (full repo) ~2 MB (config + scripts) First startup 10+ min (TypeScript compile + Docker build) ~2 min (image pull only) Requires Git, full repo Docker only Upgrades git pull + rebuild Download new release tarball Development Edit source, hot-reload Not for development

    When to use which

    Use pre-built install for production deployments and quick evaluation. Use source install when you want to modify the platform code or contribute to development.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#configuration-wizard-configsh","title":"Configuration Wizard (config.sh)","text":"

    The wizard performs 14 steps to produce a fully configured .env file and prepare the system for startup. Each step is interactive with sensible defaults.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-1-prerequisites-check","title":"Step 1: Prerequisites Check","text":"

    Verifies that Docker, Docker Compose v2, and OpenSSL are installed. Exits immediately if any are missing, with links to installation guides.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-2-environment-file-setup","title":"Step 2: Environment File Setup","text":"
    • If no .env exists, copies .env.example as the starting point
    • If .env already exists, offers to back it up (timestamped copy) and create a fresh one, or update values in place
    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-3-domain-configuration","title":"Step 3: Domain Configuration","text":"

    Prompts for your root domain (default: cmlite.org) and derives 14 environment variables from it:

    Variable Example Value DOMAIN example.org BASE_DOMAIN https://example.org GITEA_ROOT_URL https://git.example.org GITEA_DOMAIN git.example.org N8N_HOST n8n.example.org SMTP_FROM noreply@example.org INITIAL_ADMIN_EMAIL admin@example.org NC_ADMIN_EMAIL admin@example.org EXCALIDRAW_WS_URL wss://draw.example.org LISTMONK_SMTP_FROM Changemaker Lite <noreply@example.org> HOMEPAGE_VAR_BASE_URL https://example.org VAULTWARDEN_DOMAIN https://vault.example.org GANCIO_BASE_URL https://events.example.org TEST_EMAIL_RECIPIENT admin@example.org

    Also updates mkdocs/mkdocs.yml with the new site_url and repo_url, and asks whether this is a production deployment (sets NODE_ENV=production).

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-4-admin-credentials","title":"Step 4: Admin Credentials","text":"

    Prompts for the initial super-admin email and password. The password is validated against the security policy:

    • Minimum 12 characters
    • At least one uppercase letter
    • At least one lowercase letter
    • At least one digit
    • Requires password confirmation
    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-5-secret-generation","title":"Step 5: Secret Generation","text":"

    Auto-generates 21 unique secrets \u2014 no placeholder passwords remain after this step:

    Category Count Secrets JWT & Encryption 4 JWT_ACCESS_SECRET, JWT_REFRESH_SECRET, JWT_INVITE_SECRET (each 64-char hex), ENCRYPTION_KEY (64-char hex, must differ from JWT secrets) Database 2 V2_POSTGRES_PASSWORD, REDIS_PASSWORD (24-char alphanumeric) Listmonk 3 LISTMONK_DB_PASSWORD, LISTMONK_WEB_ADMIN_PASSWORD, LISTMONK_API_TOKEN NocoDB 1 NC_ADMIN_PASSWORD Gitea 2 GITEA_DB_PASSWD, GITEA_DB_ROOT_PASSWORD n8n 2 N8N_ENCRYPTION_KEY, N8N_USER_PASSWORD Monitoring 2 GRAFANA_ADMIN_PASSWORD, GOTIFY_ADMIN_PASSWORD Vaultwarden 1 VAULTWARDEN_ADMIN_TOKEN (64-char hex) Rocket.Chat 1 ROCKETCHAT_ADMIN_PASSWORD Gancio 1 GANCIO_ADMIN_PASSWORD Jitsi Meet 3 JITSI_APP_SECRET (64-char hex), JITSI_JICOFO_AUTH_PASSWORD, JITSI_JVB_AUTH_PASSWORD","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-6-email-configuration","title":"Step 6: Email Configuration","text":"

    Choose between:

    • MailHog (default) \u2014 captures all outgoing emails at http://localhost:8025 for development
    • Production SMTP \u2014 configures host, port, user, and password. Optionally shares credentials with Listmonk for newsletter delivery
    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-7-feature-flags","title":"Step 7: Feature Flags","text":"

    Enable or disable 9 optional platform features:

    Flag Environment Variable What It Enables Media Manager ENABLE_MEDIA_FEATURES=true Video library, analytics, scheduled publishing Listmonk Sync LISTMONK_SYNC_ENABLED=true Newsletter subscriber sync from platform participants Payments ENABLE_PAYMENTS=true Stripe-based products, donations, and plans Rocket.Chat ENABLE_CHAT=true Team communication platform Gancio Events GANCIO_SYNC_ENABLED=true Shift-to-event sync with Gancio Jitsi Meet ENABLE_MEET=true Video conferencing (also prompts for server public IP) SMS Campaigns ENABLE_SMS=true Termux Android bridge for SMS (also prompts for API URL) Docs Comments GITEA_COMMENTS_ENABLED=true Gitea-backed page comments on documentation Bunker Ops BUNKER_OPS_ENABLED=true Fleet metrics push to central server (also prompts for remote write URL)","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-8-tunnel-configuration-pangolin","title":"Step 8: Tunnel Configuration (Pangolin)","text":"

    Optionally configures Pangolin tunnel credentials for secure public access:

    • PANGOLIN_API_URL \u2014 API endpoint (default: https://api.bnkserve.org/v1)
    • PANGOLIN_API_KEY \u2014 Authentication key
    • PANGOLIN_ORG_ID \u2014 Organization identifier

    Complete tunnel setup is done from the admin GUI at Settings > Tunnel after services are running.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-9-cors-origins","title":"Step 9: CORS Origins","text":"

    Automatically calculates allowed origins from your domain:

    http://app.DOMAIN,https://app.DOMAIN,http://DOMAIN,https://DOMAIN,http://localhost:3000,http://localhost,http://localhost:4003\n
    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-10-nginx-config-generation","title":"Step 10: Nginx Config Generation","text":"

    Renders all .conf.template files in nginx/conf.d/ by substituting ${DOMAIN} with your configured domain. This produces the nginx configuration files that handle subdomain routing.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-11-homepage-services-yaml","title":"Step 11: Homepage Services YAML","text":"

    Generates configs/homepage/services.yaml with 27 service entries (both production and local development URLs) for the Homepage service dashboard.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-12-container-directory-permissions","title":"Step 12: Container Directory Permissions","text":"

    Creates and sets permissions (775) on 12 directories needed by containers:

    Directory Purpose configs/code-server/.config Code Server configuration configs/code-server/.local Code Server local data mkdocs/.cache MkDocs build cache mkdocs/site MkDocs built site output assets/uploads Listmonk uploads assets/images Shared images assets/icons Homepage icons media/local/inbox Media upload inbox media/local/thumbnails Video thumbnails media/public Public media files local-files n8n local files data NAR import data","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-13-upgrade-watcher-optional","title":"Step 13: Upgrade Watcher (Optional)","text":"

    Installs a systemd path watcher that enables the admin GUI's \"Check for Updates\" and \"Start Upgrade\" buttons. This step requires sudo and is optional \u2014 you can install it later or use the CLI upgrade script directly.

    The watcher installs two systemd units:

    • changemaker-upgrade.path \u2014 watches for data/upgrade/trigger.json
    • changemaker-upgrade.service \u2014 runs scripts/upgrade-watcher.sh when triggered
    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-14-summary-next-steps","title":"Step 14: Summary & Next Steps","text":"

    Displays a configuration summary showing all choices made, then prints startup commands.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#what-gets-modified","title":"What Gets Modified","text":"

    After the wizard completes, the following files have been created or modified:

    File Action .env Created (or updated) with all configuration values mkdocs/mkdocs.yml Updated site_url and repo_url with domain nginx/conf.d/*.conf Generated from .conf.template files configs/homepage/services.yaml Generated with all service URLs 12 directories Created with container-friendly permissions systemd units (optional) Installed to /etc/systemd/system/","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#manual-setup-alternative","title":"Manual Setup (Alternative)","text":"

    If you prefer to configure by hand instead of using the wizard:

    cp .env.example .env\n

    At minimum, set these required secrets:

    # Generate cryptographic secrets\nV2_POSTGRES_PASSWORD=$(openssl rand -base64 48 | tr -dc 'a-zA-Z0-9' | head -c 24)\nREDIS_PASSWORD=$(openssl rand -base64 48 | tr -dc 'a-zA-Z0-9' | head -c 24)\nJWT_ACCESS_SECRET=$(openssl rand -hex 32)\nJWT_REFRESH_SECRET=$(openssl rand -hex 32)\nJWT_INVITE_SECRET=$(openssl rand -hex 32)\nENCRYPTION_KEY=$(openssl rand -hex 32)   # must differ from all JWT secrets\n

    Set your admin credentials (password must meet the 12+ char complexity requirement):

    INITIAL_ADMIN_EMAIL=admin@yourdomain.org\nINITIAL_ADMIN_PASSWORD=YourStrongPassword1\n

    Then configure optional sections:

    • Domain: Set DOMAIN and all derived variables (see Step 3 table above)
    • SMTP: Set SMTP_HOST, SMTP_PORT, SMTP_USER, SMTP_PASS, EMAIL_TEST_MODE=false
    • Feature flags: Enable features as needed (see Step 7 table above)
    • Tunnel: Set PANGOLIN_API_URL, PANGOLIN_API_KEY, PANGOLIN_ORG_ID

    See Environment Variables for every available option.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#full-stack-startup","title":"Full Stack Startup","text":"

    After configuration, start the entire platform:

    docker compose up -d\n

    That's it. Docker handles the startup order automatically:

    1. PostgreSQL and Redis start first (with healthchecks)
    2. API waits for both to be healthy, then auto-runs database migrations and seeding
    3. Admin GUI waits for the API
    4. Nginx, media, communication, and all other services start in parallel
    5. Init containers (nocodb-init, listmonk-init, etc.) run once and exit

    Watch the startup progress:

    docker compose logs -f api --tail 20\n

    Once you see Starting server on port 4000, open http://localhost:3000 and log in.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#include-monitoring","title":"Include Monitoring","text":"

    The monitoring stack (Prometheus, Grafana, Alertmanager) uses a Docker Compose profile and isn't included by default:

    docker compose --profile monitoring up -d\n
    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#start-only-core-services","title":"Start Only Core Services","text":"

    If you prefer a minimal startup (lower resource usage):

    docker compose up -d v2-postgres redis api admin nginx\n

    Manual migrations

    The API container runs migrations and seeding automatically on startup via its entrypoint script. You only need to run them manually if you're developing locally without Docker:

    cd api && npx prisma migrate deploy && npx prisma db seed\n

    See Services Overview for the complete service catalog.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#verifying-installation","title":"Verifying Installation","text":"

    After starting services, verify everything is healthy:

    # Check running containers\ndocker compose ps\n\n# API health check\ncurl -s http://localhost:4000/api/health | python3 -m json.tool\n\n# View API logs\ndocker compose logs api --tail 20\n\n# Check for containers in restart loops\ndocker compose ps | grep -i restarting\n

    You should see the API return {\"status\":\"ok\"} and all started containers in a \"running\" state.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#next-steps","title":"Next Steps","text":"
    • Services Overview \u2014 complete service catalog with ports and startup commands
    • Environment Variables \u2014 complete .env reference
    • First Steps \u2014 create your first campaign and add locations
    • Updates & Upgrades \u2014 keep your installation up to date
    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/prerequisites/","title":"Prerequisites & External Services","text":"

    Need help getting set up?

    Bunker Operations provides managed infrastructure and hands-on setup assistance for organizations running Changemaker Lite. We handle domains, tunnels, SMTP, and servers so you can focus on your campaign. Get in touch: bnkops.com | admin@bnkops.ca

    Before running the installer, gather the external services and accounts listed below. Having these ready makes the configuration wizard a smooth, uninterrupted process.

    Don't have these yet?

    You can still install Changemaker Lite in development mode with just Docker \u2014 no domain, tunnel, or SMTP required. MailHog captures all emails locally. But for a production deployment serving real users, you'll need the items on this page.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#required-for-production","title":"Required for Production","text":"","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#1-a-domain-name","title":"1. A Domain Name","text":"

    You need a domain (e.g., betteredmonton.org) that you control. Changemaker Lite uses subdomain routing \u2014 the platform creates subdomains like:

    Subdomain Purpose app.yourdomain.org Admin dashboard + all public pages api.yourdomain.org Backend API docs.yourdomain.org Documentation site git.yourdomain.org Git hosting (Gitea) events.yourdomain.org Event calendar (Gancio) ... and 10+ more See Services Overview

    You'll point your domain's DNS to wherever your tunnel or server is hosted. Wildcard DNS (*.yourdomain.org) is the simplest approach.

    Where to get one: Any registrar \u2014 Namecheap, Cloudflare Registrar, Porkbun, etc. Budget ~$10\u201315/year.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#2-a-reverse-tunnel-or-public-ip","title":"2. A Reverse Tunnel or Public IP","text":"

    Your server needs to be reachable from the internet. Most home/office networks don't have a static public IP, so you need a reverse tunnel service that gives your server a stable public address with SSL.

    Changemaker Lite has built-in support for Pangolin \u2014 a self-hosted, open-source tunnel that handles SSL certificates, subdomain routing, and access control automatically. The admin dashboard includes a one-click Pangolin setup wizard.

    What you need:

    • A Pangolin server (or access to a shared one)
    • An API key and Organization ID
    • Your domain's DNS pointed at the Pangolin server

    Alternatives: Cloudflare Tunnel (free tier available), a VPS with a public IP, or any reverse proxy with SSL termination.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#3-smtp-email-provider","title":"3. SMTP Email Provider","text":"

    Production deployments need a real SMTP server to send emails \u2014 campaign messages, password resets, volunteer invitations, and newsletter delivery all depend on it.

    What you need:

    Setting Example SMTP Host smtp.protonmail.ch SMTP Port 587 (STARTTLS) or 465 (TLS) SMTP Username your-account@provider.com SMTP Password Your SMTP password or app-specific password

    Popular SMTP providers:

    Provider Free Tier Notes Proton Mail Included with paid plan Privacy-focused, recommended for advocacy Mailgun 100 emails/day (FLEX) Good deliverability, easy setup Amazon SES 62,000/month (from EC2) Cheapest at scale, requires verification Brevo (Sendinblue) 300 emails/day Simple setup, good free tier Resend 100 emails/day Developer-friendly, modern API

    Shared hosting SMTP

    Avoid using shared hosting SMTP (GoDaddy, Bluehost, etc.) for campaign emails \u2014 they have low sending limits and poor deliverability. Use a dedicated transactional email provider.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#4-a-linux-server","title":"4. A Linux Server","text":"

    Changemaker Lite runs on any Linux server with Docker. Minimum specs:

    Component Minimum Recommended RAM 2 GB (core only) 4 GB (full stack) Disk 10 GB 20+ GB (with media uploads) CPU 1 vCPU 2+ vCPU OS Any Linux with Docker Ubuntu 22.04+ LTS

    Options: A VPS from DigitalOcean, Hetzner, Linode, or a spare machine on your network. If using a tunnel (Pangolin), the server doesn't need a public IP.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#optional-enhance-your-deployment","title":"Optional (Enhance Your Deployment)","text":"

    These are not required but unlock additional platform features:

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#stripe-account-payments","title":"Stripe Account (Payments)","text":"

    For accepting donations, selling merchandise, or managing membership plans. Create a free account at stripe.com. You'll enter your Stripe API keys in the admin settings page (they're stored encrypted in the database).

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#mapbox-or-google-maps-api-key-geocoding","title":"Mapbox or Google Maps API Key (Geocoding)","text":"

    Improves address geocoding accuracy for the mapping module. The platform works without these (using free OpenStreetMap providers), but paid providers are more reliable for bulk operations.

    • Mapbox: Free tier includes 100,000 requests/month. Sign up.
    • Google Maps: Free tier includes $200/month credit (~40,000 requests). Sign up.
    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#maxmind-geolite2-analytics","title":"MaxMind GeoLite2 (Analytics)","text":"

    For geographic analytics (visitor location tracking). Free account at maxmind.com. The database auto-downloads at startup when credentials are configured.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#android-phone-with-termux-sms-campaigns","title":"Android Phone with Termux (SMS Campaigns)","text":"

    The SMS module uses a physical Android phone as an SMS gateway via the Termux app. This is a unique feature for grassroots campaigns that want to send SMS without expensive third-party services.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#jitsi-meet-requirements-video-conferencing","title":"Jitsi Meet Requirements (Video Conferencing)","text":"

    If enabling the self-hosted video conferencing feature:

    • Server's public IP address (for NAT traversal)
    • UDP port 10000 open in your firewall (for media traffic)
    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#pre-installation-checklist","title":"Pre-Installation Checklist","text":"

    Use this checklist to make sure you're ready:

    • Domain name registered and DNS accessible
    • DNS configured \u2014 wildcard *.yourdomain.org or individual subdomain records pointing to your tunnel/server
    • Tunnel or public IP \u2014 Pangolin credentials (API key + Org ID), or server with public IP + SSL
    • SMTP credentials \u2014 host, port, username, password from your email provider
    • Linux server with Docker 24+ and Docker Compose v2 installed
    • OpenSSL installed (for generating secrets during setup)
    • (Optional) Stripe account for payments
    • (Optional) Mapbox or Google Maps API key for geocoding
    • (Optional) MaxMind account for geographic analytics
    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#managed-services","title":"Bunker Operations Can Help","text":"

    Setting up infrastructure \u2014 domains, tunnels, SMTP, servers \u2014 can be the hardest part of self-hosting. Bunker Operations offers managed infrastructure for organizations running Changemaker Lite:

    • Managed Pangolin Tunnel

      Pre-configured tunnel with SSL, wildcard DNS, and automatic subdomain routing. Just plug in your API key and go.

    • SMTP Relay

      High-deliverability transactional email with SPF/DKIM/DMARC already configured for your domain.

    • Hosted Servers

      Pre-provisioned Linux servers with Docker, monitoring, and automatic backups \u2014 ready for a one-command install.

    • Setup Assistance

      We'll walk you through the full deployment \u2014 from domain registration to your first campaign launch.

    Built by organizers, for organizers

    Bunker Operations exists so campaign teams can focus on building power \u2014 not wrestling with infrastructure. We provide the plumbing so you can focus on the mission.

    Get in touch: bnkops.com | admin@bnkops.ca

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#next-steps","title":"Next Steps","text":"

    Once you have your prerequisites ready:

    • Installation \u2014 run the configuration wizard and start services
    • Environment Variables \u2014 complete reference for every .env setting
    • Deployment Guide \u2014 production setup with SSL and tunneling
    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/services/","title":"Services Overview","text":"

    Need help getting set up?

    Bunker Operations provides managed infrastructure and hands-on setup assistance for organizations running Changemaker Lite. We handle domains, tunnels, SMTP, and servers so you can focus on your campaign. Get in touch: bnkops.com | admin@bnkops.ca

    Changemaker Lite runs as 30+ Docker containers orchestrated by Docker Compose. This page catalogs every service, organized by category.

    Quick reference

    Use docker compose ps to see which services are currently running, or docker compose ps -a to include stopped containers.

    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#core-required","title":"Core (Required)","text":"

    These services form the minimum viable platform. Start them first.

    Container Port Description changemaker-v2-api 4000 Express.js REST API (Prisma ORM) changemaker-v2-admin 3000 React admin GUI (Vite + Ant Design) changemaker-v2-postgres 5433 PostgreSQL 16 \u2014 primary database redis-changemaker 6379 Redis 7 \u2014 cache, rate limiting, job queues changemaker-v2-nginx 80 Nginx reverse proxy \u2014 subdomain routing 
    # Start core services only (minimal)\ndocker compose up -d v2-postgres redis api admin nginx\n\n# Or start everything at once\ndocker compose up -d\n

    The API container automatically runs database migrations and seeding on startup via its entrypoint script.

    Note

    Nginx is technically optional for local development (you can access services directly by port), but required for production subdomain routing.

    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#media","title":"Media","text":"Container Port Description Feature Flag changemaker-media-api 4100 Fastify media API \u2014 video library, analytics, scheduling ENABLE_MEDIA_FEATURES=true 
    docker compose up -d media-api\n

    The media API runs as a separate Fastify server sharing the same PostgreSQL database. It handles video upload (FFprobe metadata extraction), scheduled publishing via BullMQ, and GDPR-compliant view analytics.

    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#communication","title":"Communication","text":"","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#rocketchat-team-chat","title":"Rocket.Chat (Team Chat)","text":"Container Port Description Feature Flag rocketchat-changemaker 8891 Rocket.Chat server ENABLE_CHAT=true mongodb-changemaker \u2014 MongoDB (Rocket.Chat data store) \u2014 nats-changemaker \u2014 NATS (Rocket.Chat message bus) \u2014 
    docker compose up -d rocketchat mongodb nats\n
    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#gancio-events","title":"Gancio (Events)","text":"Container Port Description Feature Flag gancio-changemaker 8092 Gancio event platform GANCIO_SYNC_ENABLED=true gancio-init \u2014 Init container \u2014 creates Gancio database \u2014 
    docker compose up -d gancio\n

    Init containers

    gancio-init runs once on first start to create the Gancio database in PostgreSQL, then exits. This is normal \u2014 don't worry about seeing it in a \"stopped\" state.

    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#jitsi-meet-video-conferencing","title":"Jitsi Meet (Video Conferencing)","text":"Container Port Description Feature Flag jitsi-web-changemaker 8893 Jitsi web interface ENABLE_MEET=true jitsi-prosody-changemaker \u2014 XMPP server (Prosody) \u2014 jitsi-jicofo-changemaker \u2014 Jitsi conference focus \u2014 jitsi-jvb-changemaker 10000/udp Jitsi video bridge \u2014 
    docker compose up -d jitsi-web jitsi-prosody jitsi-jicofo jitsi-jvb\n

    Firewall requirement

    Jitsi requires UDP port 10000 open in your firewall for video/audio media traffic. Set JVB_ADVERTISE_IP in .env to your server's public IP address.

    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#newsletter-email","title":"Newsletter & Email","text":"Container Port Description Feature Flag listmonk-app 9001 Listmonk newsletter platform LISTMONK_SYNC_ENABLED=true listmonk-db 5432 PostgreSQL (Listmonk's own database) \u2014 listmonk-init \u2014 Init container \u2014 creates API user \u2014 mailhog-changemaker 8025 MailHog email capture (development) EMAIL_TEST_MODE=true 
    # Newsletter platform\ndocker compose up -d listmonk-app\n\n# Email testing (captures all outgoing emails)\ndocker compose up -d mailhog\n

    Listmonk has its own PostgreSQL instance separate from the main database. The listmonk-init container auto-creates the API user for platform integration.

    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#developer-tools","title":"Developer Tools","text":"Container Port Description code-server-changemaker 8888 VS Code in the browser mkdocs-changemaker 4003 MkDocs live preview (hot reload) mkdocs-site-server-changemaker 4004 MkDocs static site server gitea-changemaker 3030 Gitea \u2014 self-hosted Git repository gitea-db \u2014 PostgreSQL (Gitea's database) changemaker-v2-nocodb 8091 NocoDB \u2014 read-only database browser nocodb-init \u2014 Init container \u2014 registers database n8n-changemaker 5678 n8n \u2014 workflow automation 
    # Start individual tools\ndocker compose up -d code-server\ndocker compose up -d mkdocs mkdocs-site-server\ndocker compose up -d gitea\ndocker compose up -d nocodb\ndocker compose up -d n8n\n

    Tip

    mkdocs (port 4003) provides live editing with hot reload for documentation authors. mkdocs-site-server (port 4004) serves the built static site for production visitors.

    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#utilities","title":"Utilities","text":"Container Port Description mini-qr 8089 QR code PNG generator excalidraw-changemaker 8090 Collaborative whiteboard vaultwarden-changemaker 8445 Vaultwarden \u2014 Bitwarden-compatible password manager vaultwarden-init \u2014 Init container \u2014 configures admin settings homepage-changemaker 3010 Homepage \u2014 service dashboard 
    docker compose up -d mini-qr excalidraw vaultwarden homepage\n

    Mini QR is used internally by walk sheets and cut export pages to generate printable QR codes.

    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#monitoring-docker-profile","title":"Monitoring (Docker Profile)","text":"

    Monitoring services are behind a Docker Compose profile and are not started by default.

    Container Port Description prometheus-changemaker 9090 Prometheus \u2014 metrics collection grafana-changemaker 3005 Grafana \u2014 monitoring dashboards alertmanager-changemaker 9093 Alertmanager \u2014 alert routing cadvisor-changemaker 8086 cAdvisor \u2014 container metrics node-exporter-changemaker 9100 Node Exporter \u2014 host system metrics redis-exporter-changemaker 9121 Redis Exporter \u2014 Redis metrics gotify-changemaker 8889 Gotify \u2014 push notifications 
    # Start the entire monitoring stack\ndocker compose --profile monitoring up -d\n

    The monitoring stack includes 3 pre-configured Grafana dashboards and 12 custom cm_* Prometheus metrics. See Monitoring for details.

    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#infrastructure","title":"Infrastructure","text":"Container Port Description newt \u2014 Pangolin tunnel connector (Newt) docker-socket-proxy \u2014 Docker socket proxy for secure container access 
    # Newt starts automatically if PANGOLIN_NEWT_ID and PANGOLIN_NEWT_SECRET are set\ndocker compose up -d newt\n

    The Newt container connects to a Pangolin tunnel server for secure public access without opening inbound ports. See Tunnel for setup.

    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#subdomain-routing","title":"Subdomain Routing","text":"

    When Nginx is running, services are accessible via subdomains. The root domain serves documentation only; all application routes are at app.DOMAIN.

    Subdomain Target Purpose app.DOMAIN Admin (3000) All application routes (admin, public pages, campaigns, map, shifts, media gallery) api.DOMAIN Express API (4000) REST API media.DOMAIN Fastify Media API (4100) Media API DOMAIN MkDocs Static (4004) Documentation / marketing site db.DOMAIN NocoDB (8091) Database browser docs.DOMAIN MkDocs Live (4003) Live documentation preview code.DOMAIN Code Server (8888) Web IDE n8n.DOMAIN n8n (5678) Workflow automation git.DOMAIN Gitea (3030) Git hosting home.DOMAIN Homepage (3010) Service dashboard grafana.DOMAIN Grafana (3005) Metrics visualization listmonk.DOMAIN Listmonk (9001) Newsletter platform qr.DOMAIN Mini QR (8089) QR code generator draw.DOMAIN Excalidraw (8090) Collaborative whiteboard vault.DOMAIN Vaultwarden (8445) Password manager events.DOMAIN Gancio (8092) Event platform chat.DOMAIN Rocket.Chat (8891) Team chat meet.DOMAIN Jitsi Meet (8893) Video conferencing mail.DOMAIN MailHog (8025) Email capture (dev)","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#init-containers","title":"Init Containers","text":"

    Several services use init containers \u2014 lightweight containers that run once on first startup to bootstrap databases or configuration, then exit with code 0. This pattern is borrowed from Kubernetes.

    Init Container Purpose listmonk-init Creates the Listmonk API user for platform integration gancio-init Creates the Gancio database in the shared PostgreSQL instance vaultwarden-init Configures Vaultwarden admin settings nocodb-init Registers the main database with NocoDB for browsing

    Seeing these containers in a \"stopped\" or \"exited (0)\" state is completely normal.

    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#starting-everything","title":"Starting Everything","text":"

    To start all services at once (excluding monitoring):

    docker compose up -d\n

    To start everything including monitoring:

    docker compose up -d && docker compose --profile monitoring up -d\n

    To see what's running:

    docker compose ps\n

    Warning

    Starting all services at once requires at least 4 GB RAM. For resource-constrained environments, start only the services you need.

    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#next-steps","title":"Next Steps","text":"
    • Installation \u2014 setup walkthrough and configuration wizard details
    • Environment Variables \u2014 complete .env reference
    • First Steps \u2014 create your first campaign and volunteer shift
    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/upgrades/","title":"Updates & Upgrades","text":"

    Need help getting set up?

    Bunker Operations provides managed infrastructure and hands-on setup assistance for organizations running Changemaker Lite. We handle domains, tunnels, SMTP, and servers so you can focus on your campaign. Get in touch: bnkops.com | admin@bnkops.ca

    Changemaker Lite includes a built-in upgrade system that pulls code updates, rebuilds containers, runs database migrations, and restarts services \u2014 all while preserving your customizations.

    There are two ways to upgrade:

    1. Admin GUI \u2014 Check for updates and run upgrades from Settings > System
    2. CLI \u2014 Run ./scripts/upgrade.sh directly from the command line

    Both methods execute the same 6-phase upgrade process.

    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#prerequisites","title":"Prerequisites","text":"","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#upgrade-watcher-required-for-gui-method","title":"Upgrade Watcher (Required for GUI Method)","text":"

    The admin GUI triggers upgrades via a systemd path watcher that monitors for trigger files. This must be installed on the host system.

    Install during initial setup:

    The config.sh wizard offers to install the watcher automatically (Step 13). If you skipped it, install manually:

    # Edit the systemd units to set your project path and user\nsed -e \"s|__PROJECT_DIR__|$(pwd)|g\" scripts/systemd/changemaker-upgrade.path > /tmp/changemaker-upgrade.path\nsed -e \"s|__PROJECT_DIR__|$(pwd)|g\" -e \"s|__USER__|$(whoami)|g\" scripts/systemd/changemaker-upgrade.service > /tmp/changemaker-upgrade.service\n\n# Install and enable\nsudo cp /tmp/changemaker-upgrade.path /tmp/changemaker-upgrade.service /etc/systemd/system/\nsudo systemctl daemon-reload\nsudo systemctl enable --now changemaker-upgrade.path\n

    Verify it's running:

    sudo systemctl status changemaker-upgrade.path\n

    How the watcher works

    The API container writes a trigger.json file to a shared data/upgrade/ volume. The systemd path watcher detects the file and runs scripts/upgrade-watcher.sh on the host, which dispatches to the appropriate script (check or upgrade). Progress and results are communicated back via JSON files that the API reads.

    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#method-1-admin-gui","title":"Method 1: Admin GUI","text":"","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#checking-for-updates","title":"Checking for Updates","text":"
    1. Navigate to Settings (/app/settings)
    2. Click the System tab
    3. Click Check for Updates

    The System tab shows your current version, last commit message, and auto-upgrade settings:

    The system fetches from the git remote and shows:

    • Current commit hash and message
    • Remote commit hash (if different)
    • Number of commits behind
    • Changelog of incoming changes

    When updates are available, the panel highlights how many commits are behind and lists the incoming changes:

    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#starting-an-upgrade","title":"Starting an Upgrade","text":"
    1. Review the changelog to understand what's changing
    2. Click Start Upgrade
    3. Optionally configure:
      • Skip backup \u2014 skip the database backup phase (not recommended)
      • Pull images \u2014 also update third-party Docker images (PostgreSQL, Redis, etc.)
      • Use registry images \u2014 pull pre-built images from Gitea instead of compiling from source (faster \u2014 requires scripts/build-and-push.sh to have been run first)
      • Dry run \u2014 preview what would happen without making changes
    4. Monitor the 6-phase progress indicator

    The GUI polls for progress updates and displays the current phase, percentage, and status message in real time.

    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#upgrade-results","title":"Upgrade Results","text":"

    After the upgrade completes, the System tab shows the result \u2014 including the new version, health check status, and any warnings:

    Tip

    If health checks show warnings immediately after an upgrade, wait 1-2 minutes for services to fully start before investigating.

    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#the-6-upgrade-phases","title":"The 6 Upgrade Phases","text":"

    Both the GUI and CLI methods execute the same 6-phase process:

    Phase % Name What Happens 1 5% Pre-flight Checks Verifies Docker, git, disk space (2 GB minimum), remote reachability, and clean working directory 2 15% Backup Runs scripts/backup.sh (pg_dump + archive), backs up user-modifiable content, saves pre-upgrade commit hash 3 30% Code Update Saves user paths, stashes local changes, git pull, pops stash with auto-conflict resolution, detects new .env variables 4 50% Container Rebuild Rebuilds api, admin, media-api from source (default) or pulls pre-built images from the Gitea registry (--use-registry); conditionally rebuilds nginx and code-server if their configs changed; optionally pulls third-party images 5 70% Service Restart Stops app containers, force-recreates LSIO containers, verifies Gancio config, starts infrastructure, waits for PostgreSQL, starts API (runs migrations), starts everything else, restarts Newt tunnel and monitoring if they were running 6 90% Verification Health checks for API, Admin, Media API, Gancio, MkDocs; detects containers in restart loops","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#what-gets-preserved","title":"What Gets Preserved","text":"

    The upgrade script automatically preserves user-modifiable paths that you may have customized:

    Path What It Contains mkdocs/docs/ Your documentation content mkdocs/mkdocs.yml MkDocs configuration mkdocs/site/ Built documentation site configs/ Prometheus, Grafana, Alertmanager, Homepage configs nginx/conf.d/services.conf Custom nginx service proxies

    These files are saved before git pull and unconditionally restored afterward, even if the pull introduces changes to them. Your versions always win.

    Tip

    The .env file is never touched by git pull (it's in .gitignore). However, if new environment variables are added in .env.example, the upgrade script automatically appends them to your .env with their default values and warns you to review them.

    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#method-2-cli","title":"Method 2: CLI","text":"

    Run the upgrade script directly:

    ./scripts/upgrade.sh\n
    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#options","title":"Options","text":"Flag Description --skip-backup Skip the backup phase (requires --force) --pull-services Also pull new third-party Docker images --use-registry Pull pre-built images from Gitea instead of compiling from source --dry-run Show what would happen without executing --force Continue past non-critical warnings --branch BRANCH Git branch to pull (default: current branch) --rollback Rollback to pre-upgrade commit --api-mode Write progress/result JSON for admin GUI (used internally)","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#examples","title":"Examples","text":"
    # Standard upgrade\n./scripts/upgrade.sh\n\n# Preview changes without executing\n./scripts/upgrade.sh --dry-run\n\n# Full upgrade including third-party image updates\n./scripts/upgrade.sh --pull-services\n\n# Upgrade using pre-built images from Gitea registry (faster, no TypeScript compile)\n./scripts/upgrade.sh --use-registry --force --skip-backup\n\n# Rollback to the last pre-upgrade state\n./scripts/upgrade.sh --rollback\n
    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#registry-mode-fast-upgrades","title":"Registry Mode (Fast Upgrades)","text":"

    By default, the upgrade script compiles TypeScript from source (npm run build) and rebuilds Docker images on the deployment server. Registry mode skips this by pulling pre-built production images from the Gitea container registry \u2014 faster and requires no build tooling on the server.

    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#how-it-works","title":"How It Works","text":"
    1. Run scripts/build-and-push.sh on a machine with Docker (usually your dev machine) to build and push production images tagged with the current commit SHA
    2. During the next upgrade, pass --use-registry (CLI) or enable the checkbox (GUI)
    3. The upgrade script pulls gitea.bnkops.com/admin/changemaker-{service}:{sha} instead of rebuilding from source
    4. If a registry image is unavailable (e.g., the SHA wasn't pushed), it automatically falls back to a source build
    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#building-and-pushing-images","title":"Building and Pushing Images","text":"
    # Build and push all core services (api, admin, media-api, nginx)\n./scripts/build-and-push.sh\n\n# Skip code-server (9 GB \u2014 push only when Dockerfile changes)\n./scripts/build-and-push.sh --services api,admin,media-api,nginx\n\n# Build only, no push (verify locally first)\n./scripts/build-and-push.sh --no-push\n\n# Also mirror third-party images (postgres, redis, etc.) to Gitea\n./scripts/mirror-images.sh\n

    Registry prerequisites

    • Run docker login gitea.bnkops.com once per machine before pushing
    • Set GITEA_REGISTRY_USER and GITEA_REGISTRY_PASS in .env for the admin GUI's Registry status endpoint
    • gitea.bnkops.com must be reachable without proxies that limit upload size (Cloudflare free plan blocks blobs >100 MB)

    Release installs upgrade automatically via registry

    If you installed from a release tarball (not git clone), the upgrade script automatically uses registry mode. It downloads the latest release package from Gitea instead of running git pull. No additional configuration needed.

    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#rollback","title":"Rollback","text":"","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#automatic-rollback","title":"Automatic Rollback","text":"

    If the upgrade fails at any phase, the script prints detailed rollback instructions including the pre-upgrade commit hash. Use the --rollback flag:

    ./scripts/upgrade.sh --rollback\n

    This:

    1. Finds the latest backup archive
    2. Extracts the pre-upgrade commit hash from git-commit.txt inside the archive
    3. Checks out that commit
    4. Rebuilds and restarts all containers

    Warning

    --rollback restores the code to the pre-upgrade state but does not automatically restore the database. If database migrations were applied during the failed upgrade, you may need to manually restore from the backup archive.

    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#manual-rollback","title":"Manual Rollback","text":"
    # 1. Restore code\ncd /path/to/changemaker.lite\ngit checkout <pre-upgrade-commit-hash>\n\n# 2. Rebuild and restart\ndocker compose build api admin media-api\ndocker compose up -d\n\n# 3. Database restore (if needed \u2014 destructive!)\nls -lt backups/changemaker-v2-backup-*.tar.gz | head -5\ntar xzf backups/<backup>.tar.gz -C /tmp\ngunzip -c /tmp/<backup>/v2-postgres.sql.gz | \\\n  docker exec -i changemaker-v2-postgres psql -U changemaker -d changemaker_v2\n
    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#new-environment-variables","title":"New Environment Variables","text":"

    When upstream code adds new environment variables to .env.example, the upgrade script automatically:

    1. Compares .env.example against your .env
    2. Appends any missing variables with their default values
    3. Warns you to review the new additions
    [WARN] New env vars added to .env (review defaults):\n    NEW_FEATURE_FLAG\n    NEW_API_KEY\n

    Always review new variables after an upgrade \u2014 some may need manual configuration.

    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#update-checker","title":"Update Checker","text":"

    A separate lightweight script checks for available updates without performing any changes:

    ./scripts/upgrade-check.sh\n

    This writes data/upgrade/status.json with:

    • Current and remote commit hashes
    • Number of commits behind
    • Changelog (last 30 commits)
    • Timestamp of last check

    The admin GUI reads this file to display update availability.

    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#troubleshooting","title":"Troubleshooting","text":"","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#stale-progress-indicator","title":"Stale Progress Indicator","text":"

    If the GUI shows an upgrade \"in progress\" but nothing is happening, the upgrade script may have crashed. The system automatically detects stale progress (no update for 10+ minutes) and treats it as not running.

    To manually clear:

    rm -f data/upgrade/progress.json\n
    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#merge-conflicts","title":"Merge Conflicts","text":"

    If git pull encounters merge conflicts in user-modifiable paths (docs, configs), the upgrade script auto-resolves by keeping your version. If conflicts occur in project-owned files (api/, admin/), the upgrade fails and asks you to resolve manually.

    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#lock-file","title":"Lock File","text":"

    The upgrade script uses .upgrade.lock to prevent concurrent upgrades. If a previous upgrade crashed without cleaning up:

    # Verify no upgrade is actually running\nps aux | grep upgrade.sh\n\n# Remove stale lock\nrm -f .upgrade.lock\n
    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#health-check-failures","title":"Health Check Failures","text":"

    If Phase 6 health checks fail, services may still be starting. Wait 1-2 minutes and check manually:

    # API health\ncurl -s http://localhost:4000/api/health\n\n# Container status\ndocker compose ps\n\n# Recent logs\ndocker compose logs api --tail 50\ndocker compose logs admin --tail 50\n
    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#systemd-watcher-not-triggering","title":"Systemd Watcher Not Triggering","text":"
    # Check watcher status\nsudo systemctl status changemaker-upgrade.path\n\n# Check service logs\nsudo journalctl -u changemaker-upgrade.service --tail 20\n\n# Re-enable if stopped\nsudo systemctl enable --now changemaker-upgrade.path\n
    ","tags":["guide","operator","upgrades"]},{"location":"docs/services/","title":"Services","text":"

    Changemaker Lite orchestrates 20+ services via Docker Compose. This page is your map to every service: what it does, how to reach it, and where to find its upstream documentation.

    ","tags":["reference","operator","services","docker"]},{"location":"docs/services/#core-platform","title":"Core Platform","text":"

    The essential services that power the application.

    • Express API

      Main V2 API server. Handles authentication, campaigns, map, shifts, pages, email, and all business logic. Prisma ORM with PostgreSQL.

      Port: 4000 \u00b7 Container: changemaker-v2-api

      API Reference

    • Fastify Media API

      Video library server. Upload, metadata extraction (FFprobe), analytics, scheduled publishing, and public gallery. Shares the same PostgreSQL database.

      Port: 4100 \u00b7 Container: changemaker-media-api

      Media Guide

    • Admin GUI

      React single-page application (Vite + Ant Design + Zustand). Serves the admin dashboard, public campaign pages, volunteer portal, and media gallery \u2014 all from one build.

      Port: 3000 \u00b7 Container: changemaker-v2-admin

      Feature Guides

    • PostgreSQL 16

      Primary database shared by both APIs. Managed by Prisma migrations. Contains 30+ tables covering users, campaigns, locations, shifts, media, and more.

      Port: 5433 (host) / 5432 (container) \u00b7 Container: changemaker-v2-postgres

      PostgreSQL Docs

    • Redis

      In-memory store for rate limiting, BullMQ job queues (email, video scheduling), geocoding cache, and session data. Requires authentication.

      Port: 6379 \u00b7 Container: redis-changemaker

      Redis Docs

    • Nginx

      Reverse proxy handling all subdomain routing (app., api., media., docs., etc.). Includes security headers (HSTS, CSP, Permissions-Policy) and WebSocket support.

      Port: 80 / 443 \u00b7 Container: changemaker-v2-nginx

      Nginx Docs

    ","tags":["reference","operator","services","docker"]},{"location":"docs/services/#communication-email","title":"Communication & Email","text":"

    • Listmonk

      Self-hosted newsletter and mailing list manager. Drop-in replacement for Mailchimp. Opt-in sync with the main platform imports participants, locations, and users as subscriber lists.

      Port: 9001 \u00b7 Container: listmonk-app \u00b7 Subdomain: listmonk.DOMAIN

      Listmonk Docs

    • MailHog

      Email capture for development. All outgoing email is intercepted and displayed in a web UI when EMAIL_TEST_MODE=true. No real emails are sent.

      Port: 8025 (web) / 1025 (SMTP) \u00b7 Container: mailhog-changemaker \u00b7 Subdomain: mail.DOMAIN

      MailHog GitHub

    ","tags":["reference","operator","services","docker"]},{"location":"docs/services/#content-editing","title":"Content & Editing","text":"

    • MkDocs

      Material-themed documentation site with full-text search, blog, social cards, and Jinja2 template overrides. Two containers: live preview (dev) and static site (production).

      Port: 4003 (dev) / 4004 (static) \u00b7 Container: mkdocs-changemaker \u00b7 Subdomain: docs.DOMAIN

      MkDocs Material

    • Code Server

      Full VS Code in the browser. Edit configuration files, templates, and documentation from anywhere without SSH. Supports extensions.

      Port: 8888 \u00b7 Container: code-server-changemaker \u00b7 Subdomain: code.DOMAIN

      Code Server Docs

    ","tags":["reference","operator","services","docker"]},{"location":"docs/services/#data-automation","title":"Data & Automation","text":"

    • NocoDB

      Airtable-alternative database browser. Provides a spreadsheet-like interface to browse, filter, sort, and export campaign data. Read-only access to the main database.

      Port: 8091 \u00b7 Container: changemaker-v2-nocodb \u00b7 Subdomain: db.DOMAIN

      NocoDB Docs

    • n8n

      Visual workflow automation platform. Connect APIs, trigger actions on events, schedule tasks, and build custom integrations \u2014 all without code. 400+ built-in integrations.

      Port: 5678 \u00b7 Container: n8n-changemaker \u00b7 Subdomain: n8n.DOMAIN

      n8n Docs

    • Gitea

      Self-hosted Git repository hosting. Version control for campaign code, configuration, templates, and documentation. Includes issues, pull requests, and CI/CD.

      Port: 3030 (web) / 2222 (SSH) \u00b7 Container: gitea-changemaker \u00b7 Subdomain: git.DOMAIN

      Gitea Docs

    ","tags":["reference","operator","services","docker"]},{"location":"docs/services/#utilities","title":"Utilities","text":"

    • Mini QR

      Lightweight QR code generator. Produces PNG images for walk sheets, campaign materials, and event signage. Embedded in the admin dashboard via iframe.

      Port: 8089 \u00b7 Container: mini-qr \u00b7 Subdomain: qr.DOMAIN

    • Homepage

      Service dashboard showing the status of all containers at a glance. Auto-generated services.yaml from config.sh provides both production and local links.

      Port: 3010 \u00b7 Container: homepage-changemaker \u00b7 Subdomain: home.DOMAIN

      Homepage Docs

    • Excalidraw

      Collaborative whiteboard for brainstorming, diagramming, and visual planning. Real-time collaboration via WebSocket.

      Port: 8090 \u00b7 Container: excalidraw-changemaker \u00b7 Subdomain: draw.DOMAIN

      Excalidraw

    • Vaultwarden

      Self-hosted Bitwarden-compatible password manager. Secure credential sharing for campaign teams. Requires HTTPS for account creation; local browsing works on HTTP.

      Port: 8445 \u00b7 Container: vaultwarden-changemaker \u00b7 Subdomain: vault.DOMAIN

      Vaultwarden Wiki

    ","tags":["reference","operator","services","docker"]},{"location":"docs/services/#team-communication","title":"Team Communication","text":"

    • Rocket.Chat

      Self-hosted team chat for volunteer coordination. Supports channels, direct messaging, threads, and file sharing. Embeddable in the admin dashboard via iframe. Enable with ENABLE_CHAT=true.

      Port: 3000 (internal) \u00b7 Container: rocketchat-changemaker \u00b7 Subdomain: chat.DOMAIN

      Rocket.Chat Docs

    • Jitsi Meet

      Self-hosted video conferencing with JWT authentication. Four containers (web, Prosody, Jicofo, JVB) provide the full video call stack. Integrated with Rocket.Chat for one-click calls from channels and DMs. Enable with ENABLE_MEET=true.

      Containers: jitsi-web, jitsi-prosody, jitsi-jicofo, jitsi-jvb \u00b7 Subdomain: meet.DOMAIN

      Setup Guide \u00b7 Jitsi Docs

    • Gancio

      Self-hosted event management platform. Automatic shift-to-event sync (when GANCIO_SYNC_ENABLED=true) publishes shifts as public events. Uses the shared PostgreSQL database. Embeddable calendar widget available for MkDocs pages.

      Port: 8092 \u00b7 Container: gancio-changemaker \u00b7 Subdomain: events.DOMAIN

      Gancio Docs

    ","tags":["reference","operator","services","docker"]},{"location":"docs/services/#networking-tunneling","title":"Networking & Tunneling","text":"

    • Pangolin + Newt

      Self-hosted tunnel server with the Newt client container. Exposes your services to the internet without port forwarding. Handles SSL/TLS, works behind CGNAT and double NAT.

      Container: newt-changemaker \u00b7 Managed from Admin \u2192 Settings \u2192 Tunnel

      Deployment Guide \u00b7 Pangolin GitHub

    ","tags":["reference","operator","services","docker"]},{"location":"docs/services/#monitoring-stack","title":"Monitoring Stack","text":"

    These services run behind the monitoring Docker Compose profile. Start them with:

    docker compose --profile monitoring up -d\n

    • Prometheus

      Metrics collection and time-series database. Scrapes 12 custom cm_* application metrics plus container, host, and Redis metrics. Pre-configured alert rules.

      Port: 9090 \u00b7 Container: prometheus-changemaker

      Prometheus Docs

    • Grafana

      Metrics visualization with 3 auto-provisioned dashboards: API Overview, Infrastructure, and Campaign Activity. Supports custom dashboards and alerting.

      Port: 3005 \u00b7 Container: grafana-changemaker \u00b7 Subdomain: grafana.DOMAIN

      Grafana Docs

    • Alertmanager

      Alert routing and notification delivery. Receives alerts from Prometheus and dispatches to Gotify, email, or webhooks based on configurable rules.

      Port: 9093 \u00b7 Container: alertmanager-changemaker

      Alertmanager Docs

    • cAdvisor

      Container resource metrics. Exposes CPU, memory, network, and filesystem usage per container for Prometheus to scrape.

      Port: 8086 \u00b7 Container: cadvisor-changemaker

      cAdvisor GitHub

    • Node Exporter

      Host system metrics. Reports CPU, memory, disk, and network stats for the underlying server.

      Port: 9100 \u00b7 Container: node-exporter-changemaker

      Node Exporter

    • Redis Exporter

      Redis metrics for Prometheus. Exposes connection counts, memory usage, command stats, and keyspace info.

      Port: 9121 \u00b7 Container: redis-exporter-changemaker

      Redis Exporter GitHub

    • Gotify

      Self-hosted push notification server. Receives alerts from Alertmanager and delivers them to mobile/desktop clients.

      Port: 8889 \u00b7 Container: gotify-changemaker

      Gotify Docs

    ","tags":["reference","operator","services","docker"]},{"location":"docs/services/#quick-reference","title":"Quick Reference","text":"

    All services at a glance with their default ports and subdomains.

    Service Port Subdomain Docker Profile Express API 4000 api. default Media API 4100 media. default Admin GUI 3000 app. default PostgreSQL 5433 \u2014 default Redis 6379 \u2014 default Nginx 80/443 (all) default Listmonk 9001 listmonk. default MailHog 8025 mail. default MkDocs (dev) 4003 docs. default MkDocs (static) 4004 (root) default Code Server 8888 code. default NocoDB 8091 db. default n8n 5678 n8n. default Gitea 3030 git. default Mini QR 8089 qr. default Homepage 3010 home. default Excalidraw 8090 draw. default Vaultwarden 8445 vault. default Rocket.Chat \u2014 chat. default Jitsi Meet \u2014 meet. default Gancio 8092 events. default Newt (tunnel) \u2014 \u2014 default Prometheus 9090 \u2014 monitoring Grafana 3005 grafana. monitoring Alertmanager 9093 \u2014 monitoring cAdvisor 8086 \u2014 monitoring Node Exporter 9100 \u2014 monitoring Redis Exporter 9121 \u2014 monitoring Gotify 8889 \u2014 monitoring

    Starting services selectively

    You don't need to run everything. Start only what you need:

    # Core only\ndocker compose up -d v2-postgres redis api admin\n\n# Add nginx for subdomain routing\ndocker compose up -d nginx\n\n# Add monitoring\ndocker compose --profile monitoring up -d\n

    See Getting Started for the recommended startup order.

    ","tags":["reference","operator","services","docker"]},{"location":"docs/troubleshooting/","title":"Troubleshooting","text":"

    Common issues and their solutions when running Changemaker Lite.

    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#cors-errors-in-production","title":"CORS Errors in Production","text":"

    Symptom: Browser console shows CORS errors when accessing production domain.

    Fix: Add your production domain to CORS_ORIGINS in .env:

    CORS_ORIGINS=https://app.yourdomain.org,http://localhost:3000\n

    Then restart the API: docker compose restart api

    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#pangolin-tunnel-403302-errors","title":"Pangolin Tunnel \u2014 403/302 Errors","text":"

    Symptom: All API endpoints return 302 redirects to Pangolin auth page, or 403 Forbidden.

    Fix: In the Pangolin dashboard, set each resource to Not Protected (public access). Critical resources to fix first:

    1. api.yourdomain.org \u2014 Main API
    2. app.yourdomain.org \u2014 Admin GUI + public pages
    3. media.yourdomain.org \u2014 Media API

    Verify:

    # Should return JSON, NOT a 302 redirect\ncurl -I https://api.yourdomain.org/api/health\n
    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#database-connection-failures","title":"Database Connection Failures","text":"

    Symptom: API logs show database connection errors.

    Checklist:

    1. Check PostgreSQL: docker compose ps v2-postgres
    2. Verify DATABASE_URL in .env matches container name and port
    3. View logs: docker compose logs v2-postgres --tail 50
    4. Test connection: docker compose exec api npx prisma db execute --stdin <<< \"SELECT 1\"
    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#redis-connection-failures","title":"Redis Connection Failures","text":"

    Symptom: API logs show Redis connection errors, rate limiting doesn't work.

    Checklist:

    1. Check Redis: docker compose ps redis-changemaker
    2. Verify REDIS_PASSWORD and REDIS_URL format (redis://:password@host:port)
    3. View logs: docker compose logs redis-changemaker --tail 50
    4. Test: docker compose exec redis-changemaker redis-cli -a $REDIS_PASSWORD ping
    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#api-not-starting","title":"API Not Starting","text":"

    Symptom: API container keeps restarting or won't start.

    Checklist:

    1. Check logs: docker compose logs api --tail 100
    2. Verify all required env vars are set (compare with .env.example)
    3. Check database is ready: docker compose ps v2-postgres (should show \"healthy\")
    4. Run migrations manually: docker compose exec api npx prisma migrate deploy
    5. Check for port conflicts: ss -tlnp | grep 4000
    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#containers-in-restart-loops","title":"Containers in Restart Loops","text":"

    Symptom: docker compose ps shows containers with \"restarting\" status.

    Diagnosis:

    # Find restarting containers\ndocker compose ps | grep -i restarting\n\n# Check recent logs for the problem container\ndocker compose logs <service-name> --tail 50\n\n# Check container exit code\ndocker inspect <container-name> --format='{{.State.ExitCode}}'\n

    Common causes:

    • Missing environment variables (check .env)
    • Database not ready (healthcheck dependencies)
    • Port already in use by another process
    • Insufficient memory (check with free -h)
    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#newt-tunnel-wont-connect","title":"Newt Tunnel Won't Connect","text":"

    Checklist (in order):

    1. Credentials: Verify PANGOLIN_NEWT_ID and PANGOLIN_NEWT_SECRET in .env
    2. Endpoint: Confirm PANGOLIN_ENDPOINT matches your Pangolin server URL
    3. Logs: docker compose logs newt --tail 50
    4. Nginx running: Newt depends on nginx \u2014 docker compose ps nginx
    5. Network: Ensure outbound HTTPS is not blocked by your firewall
    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#migration-errors","title":"Migration Errors","text":"

    Symptom: prisma migrate deploy fails.

    Common fixes:

    # Check migration status\ndocker compose exec api npx prisma migrate status\n\n# If migrations are out of sync, reset (DESTRUCTIVE \u2014 dev only)\ndocker compose exec api npx prisma migrate reset\n\n# If shadow database errors, create one\ndocker compose exec -T v2-postgres createdb -U changemaker prisma_shadow_diff\n

    Never use prisma db push in production

    Always use prisma migrate dev (development) or prisma migrate deploy (production) to keep migration history in sync.

    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#media-api-upload-failures","title":"Media API Upload Failures","text":"

    Symptom: Video uploads fail with permission errors or 500 status.

    Checklist:

    1. Verify inbox volume is writable: check media/local/inbox has :rw mount
    2. Check disk space: df -h
    3. Verify FFmpeg is installed in container: docker compose exec media-api ffprobe -version
    4. Check upload size limit: default is 10 GB in Fastify multipart config
    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#email-not-sending","title":"Email Not Sending","text":"

    Symptom: Advocacy emails or notifications aren't delivered.

    Checklist:

    1. Check EMAIL_TEST_MODE \u2014 if true, all emails go to MailHog (http://localhost:8025)
    2. Verify SMTP credentials in .env (SMTP_HOST, SMTP_PORT, SMTP_USER, SMTP_PASS)
    3. Check BullMQ queue: visit Admin > Email Queue or check logs
    4. Test SMTP from Settings: Admin > Settings > Email > Test Connection
    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#services-unreachable-via-tunnel","title":"Services Unreachable via Tunnel","text":"

    Checklist:

    1. Verify nginx is running: docker compose ps nginx
    2. Test locally first: curl http://localhost:4000/api/health
    3. Check nginx logs: docker compose logs nginx --tail 50
    4. Verify DNS: dig app.yourdomain.org should point to your Pangolin server
    5. Check Pangolin resources are all set to \"Not Protected\"
    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#slow-map-performance","title":"Slow Map Performance","text":"

    Symptom: Map page is slow or returns 500 errors with many locations.

    Causes and fixes:

    • Too many locations loaded at once \u2014 the API limits by address count with debounced bounds queries
    • Missing indexes \u2014 verify database has the 5 performance indexes on Location/Address tables
    • Browser memory \u2014 marker clustering activates above zoom level 18; below that, addresses are grouped
    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#docker-disk-space","title":"Docker Disk Space","text":"

    Symptom: Builds fail, containers can't start, or images won't pull.

    # Check disk usage\ndf -h\n\n# Clean unused Docker resources\ndocker system prune -f\n\n# Clean old images (keep only last 2 days)\ndocker image prune -a --filter \"until=48h\"\n\n# Check what's using space\ndocker system df\n
    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#getting-help","title":"Getting Help","text":"

    If your issue isn't listed here:

    1. Check the API logs: docker compose logs api --tail 200
    2. Search the Gitea issues
    3. Review the Deployment guide for production-specific issues
    4. File a new issue with your logs and .env (redact passwords)
    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/user-guide/","title":"User Guide","text":"

    This guide covers everything you can do as a visitor or registered supporter \u2014 from contacting representatives to signing up for volunteer shifts.

    ","tags":["guide","user"]},{"location":"docs/user-guide/#what-you-can-do","title":"What You Can Do","text":"

    • Campaigns

      Find active advocacy campaigns, look up your representatives, and send emails.

    • Map

      Explore the interactive map showing locations across your community.

    • Shifts

      Sign up for volunteer shifts and join canvassing teams.

    • Events

      Browse upcoming events and RSVP through the event calendar.

    • Gallery

      Watch campaign videos, browse photos, and explore playlists.

    • Shop & Pricing

      Purchase campaign merchandise or subscribe to a membership plan.

    • Donations

      Support the cause with one-time donations on branded pages.

    • Your Profile

      View and manage your contact profile, preferences, and activity history.

    ","tags":["guide","user"]},{"location":"docs/user-guide/campaigns/","title":"Campaigns","text":"

    Browse active advocacy campaigns and contact your elected representatives.

    ","tags":["guide","user","influence","campaigns"]},{"location":"docs/user-guide/campaigns/#how-it-works","title":"How It Works","text":"
    1. Browse campaigns at /campaigns \u2014 see active campaigns with descriptions and email counts
    2. Pick a campaign \u2014 read about the issue and who it targets
    3. Enter your postal code \u2014 the system looks up your federal, provincial, municipal, and school board representatives
    4. Send the email \u2014 use \"Send Now\" to send through the platform, or open it in your own email app (Gmail, Outlook, etc.)
    5. Share the response \u2014 if a representative replies, submit it to the public Response Wall
    ","tags":["guide","user","influence","campaigns"]},{"location":"docs/user-guide/campaigns/#response-wall","title":"Response Wall","text":"

    Each campaign has a public response wall where supporters share how their representatives responded. Responses can be upvoted and are moderated by admins. Verified responses display a trust badge.

    ","tags":["guide","user","influence","campaigns"]},{"location":"docs/user-guide/campaigns/#submit-your-own-campaign","title":"Submit Your Own Campaign","text":"

    Registered users can draft and submit their own advocacy campaigns at /campaigns/create. Submissions go through admin review before being published.

    ","tags":["guide","user","influence","campaigns"]},{"location":"docs/user-guide/campaigns/#public-routes","title":"Public Routes","text":"
    • /campaigns \u2014 browse active campaigns
    • /campaign/:slug \u2014 take action on a specific campaign
    • /campaign/:slug/responses \u2014 view the response wall
    • /campaigns/create \u2014 submit a user-generated campaign (requires login)
    • /campaigns/mine \u2014 manage your submitted campaigns (requires login)
    ","tags":["guide","user","influence","campaigns"]},{"location":"docs/user-guide/donations/","title":"Donations","text":"

    Make one-time contributions on branded donation pages.

    ","tags":["guide","user","payments"]},{"location":"docs/user-guide/donations/#how-it-works","title":"How It Works","text":"
    1. Browse donation pages at /donate
    2. Choose a campaign to support
    3. Select a suggested amount or enter a custom amount
    4. Complete payment securely through Stripe
    5. Receive a confirmation with a thank-you message
    ","tags":["guide","user","payments"]},{"location":"docs/user-guide/donations/#donation-pages","title":"Donation Pages","text":"

    Each donation page has:

    • Custom branding \u2014 unique title, description, and cover image
    • Suggested amounts \u2014 pre-set donation tiers for quick selection
    • Goal tracking \u2014 progress bar showing how close the campaign is to its fundraising goal
    • Anonymous giving \u2014 option to donate without displaying your name
    ","tags":["guide","user","payments"]},{"location":"docs/user-guide/donations/#public-routes","title":"Public Routes","text":"
    • /donate \u2014 browse donation pages
    • /donate/:slug \u2014 donate on a specific campaign page
    ","tags":["guide","user","payments"]},{"location":"docs/user-guide/events/","title":"Events (Gancio)","text":"

    Integrated with Gancio for self-hosted event management. When enabled, volunteer shifts are automatically published as public events.

    ","tags":["guide","user","events"]},{"location":"docs/user-guide/events/#shift-to-event-sync","title":"Shift-to-Event Sync","text":"

    When GANCIO_SYNC_ENABLED=true, the platform:

    1. Creates a Gancio event whenever a new shift is published
    2. Updates the event if the shift time, location, or details change
    3. Deletes the event if the shift is cancelled

    Sync uses OAuth authentication with the Gancio admin account.

    ","tags":["guide","user","events"]},{"location":"docs/user-guide/events/#key-features","title":"Key Features","text":"
    • Automatic sync \u2014 shifts appear as public events without manual entry
    • Embeddable calendar \u2014 GrapesJS block and MkDocs widget for embedding the event calendar on pages
    • Public events page \u2014 linked from the public navigation when enableEvents is enabled in settings
    ","tags":["guide","user","events"]},{"location":"docs/user-guide/events/#admin-routes","title":"Admin Routes","text":"
    • /app/gancio \u2014 Gancio service status and iframe embed
    ","tags":["guide","user","events"]},{"location":"docs/user-guide/events/#public-routes","title":"Public Routes","text":"
    • /events \u2014 public events navigation link (when enabled)
    • events.DOMAIN \u2014 Gancio web interface for browsing and RSVPs
    ","tags":["guide","user","events"]},{"location":"docs/user-guide/gallery/","title":"Gallery","text":"

    The public gallery at /gallery showcases campaign videos, photos, and curated playlists.

    ","tags":["guide","user","media","gallery"]},{"location":"docs/user-guide/gallery/#videos","title":"Videos","text":"
    • Browse by category \u2014 videos organized into categories with thumbnails and durations
    • Video player \u2014 full playback with engagement features (reactions, comments)
    • Shorts feed \u2014 TikTok-style vertical video feed for clips under 60 seconds at /gallery/shorts
    ","tags":["guide","user","media","gallery"]},{"location":"docs/user-guide/gallery/#photos","title":"Photos","text":"
    • Photo albums \u2014 browse photos organized into named collections
    • Reactions and comments \u2014 engage with individual photos
    ","tags":["guide","user","media","gallery"]},{"location":"docs/user-guide/gallery/#playlists","title":"Playlists","text":"
    • Curated playlists \u2014 admin and community-created video collections
    • Featured carousel \u2014 highlighted playlists on the gallery homepage
    • Playlist viewer \u2014 continuous playback with up-next queue at /gallery/playlist/:id
    ","tags":["guide","user","media","gallery"]},{"location":"docs/user-guide/gallery/#public-routes","title":"Public Routes","text":"
    • /gallery \u2014 public video and photo gallery
    • /gallery/watch/:id \u2014 watch a specific video
    • /gallery/playlist/:id \u2014 view a playlist
    • /gallery/shorts \u2014 browse the shorts feed
    ","tags":["guide","user","media","gallery"]},{"location":"docs/user-guide/map/","title":"Map","text":"

    The public map at /map shows locations across your community on an interactive Leaflet map.

    ","tags":["guide","user","map"]},{"location":"docs/user-guide/map/#features","title":"Features","text":"
    • Interactive map \u2014 zoom, pan, and click markers to see address details
    • Color-coded markers \u2014 locations are color-coded based on their status
    • Cluster groups \u2014 markers group together when zoomed out for better performance
    • Fullscreen mode \u2014 expand the map to fill your screen
    ","tags":["guide","user","map"]},{"location":"docs/user-guide/map/#public-routes","title":"Public Routes","text":"
    • /map \u2014 public interactive map
    ","tags":["guide","user","map"]},{"location":"docs/user-guide/profile/","title":"Self-Service Contact Profile","text":"

    Give supporters a private, token-based link to view and manage their own contact profile -- no login required.

    ","tags":["guide","user","CRM"]},{"location":"docs/user-guide/profile/#how-it-works","title":"How It Works","text":"
    1. An admin generates a profile link from the People CRM -- each link contains a unique 64-character hex token with a configurable expiration (24 hours to 1 year).
    2. The supporter opens the link -- if the link is password-protected, they enter the password first. If expired, they see a branded expiration notice.
    3. The supporter views and edits their profile -- they can update their name, email, phone, address, and cover photo.
    4. Communication preferences -- supporters can opt out of email and/or SMS communications with simple toggle switches.
    ","tags":["guide","user","CRM"]},{"location":"docs/user-guide/profile/#profile-tabs","title":"Profile Tabs","text":"
    • Profile -- edit display name, first/last name, email, phone, and address
    • Preferences -- toggle email and SMS opt-out switches
    • Activity -- paginated timeline of all engagement: emails sent, responses submitted, shift signups, canvass visits, donations, video views, and profile edits
    • Social tabs -- if the viewer is a logged-in user viewing their own profile and the social feature is enabled, additional tabs appear: Friends, Feed, Achievements, Notifications, and Discover
    ","tags":["guide","user","CRM"]},{"location":"docs/user-guide/profile/#security","title":"Security","text":"
    • Token-based access -- no account or login needed; the URL token grants access
    • Password protection -- admins can optionally set a password on the profile link
    • Expiration -- links expire after a configurable duration, showing a branded message with the expiration date
    • Rate limiting -- separate rate limits on profile views, edits, photo uploads, and password attempts
    • Cover photo -- supporters can upload a JPEG, PNG, or WebP cover photo (max 5 MB), automatically resized to 800x400
    ","tags":["guide","user","CRM"]},{"location":"docs/user-guide/profile/#engagement-score","title":"Engagement Score","text":"

    Each profile shows a circular engagement score (0-100) calculated from the contact's activity across the platform -- emails, shifts, canvass visits, donations, and video views.

    ","tags":["guide","user","CRM"]},{"location":"docs/user-guide/profile/#public-routes","title":"Public Routes","text":"
    • /profile/:token -- self-service contact profile page
    ","tags":["guide","user","CRM"]},{"location":"docs/user-guide/shifts/","title":"Shifts","text":"

    Browse available volunteer shifts and sign up to participate in canvassing and other campaign activities.

    ","tags":["guide","user","shifts"]},{"location":"docs/user-guide/shifts/#signing-up","title":"Signing Up","text":"
    1. Visit /shifts to see available time slots
    2. Pick a shift that works for your schedule
    3. Fill in your name and email
    4. You'll receive a confirmation email with login credentials
    ","tags":["guide","user","shifts"]},{"location":"docs/user-guide/shifts/#quick-join","title":"Quick Join","text":"

    Organizers may share a QR code at events for instant onboarding:

    1. Scan the QR code \u2014 it opens a Quick Join page
    2. Enter your email (and optionally your name and phone)
    3. Start immediately \u2014 you're logged in and redirected to the volunteer portal with your area pre-loaded

    Quick Join creates a temporary 24-hour account. Your organizer can upgrade it to a permanent account afterward.

    ","tags":["guide","user","shifts"]},{"location":"docs/user-guide/shifts/#after-signing-up","title":"After Signing Up","text":"

    Once you have an account, log in to access the Volunteer Portal where you can:

    • View your assigned shifts and canvassing areas
    • Open the canvass map for GPS-guided door-to-door outreach
    • Track your activity and visit history

    See the Volunteer Guide for the full volunteer experience.

    ","tags":["guide","user","shifts"]},{"location":"docs/user-guide/shifts/#public-routes","title":"Public Routes","text":"
    • /shifts \u2014 browse and sign up for volunteer shifts
    • /join?token=... \u2014 quick join via invite link or QR code
    ","tags":["guide","user","shifts"]},{"location":"docs/user-guide/shop/","title":"Shop & Pricing","text":"

    Support the campaign by purchasing merchandise or subscribing to a membership plan.

    ","tags":["guide","user","payments"]},{"location":"docs/user-guide/shop/#shop","title":"Shop","text":"

    Browse available products at /shop:

    • Campaign merchandise and branded items
    • One-time purchases with Stripe checkout
    • Product details with images and descriptions
    ","tags":["guide","user","payments"]},{"location":"docs/user-guide/shop/#membership-plans","title":"Membership Plans","text":"

    View subscription options at /pricing:

    • Tiered membership plans with different benefits
    • Monthly and yearly billing options
    • Secure recurring payments through Stripe
    ","tags":["guide","user","payments"]},{"location":"docs/user-guide/shop/#public-routes","title":"Public Routes","text":"
    • /shop \u2014 browse products
    • /pricing \u2014 view subscription plans
    ","tags":["guide","user","payments"]},{"location":"docs/volunteer/","title":"Volunteer Guide","text":"

    Welcome! This guide walks you through everything you need as a campaign volunteer.

    ","tags":["guide","volunteer"]},{"location":"docs/volunteer/#getting-started","title":"Getting Started","text":"","tags":["guide","volunteer"]},{"location":"docs/volunteer/#1-sign-up-for-a-shift","title":"1. Sign Up for a Shift","text":"

    Visit the Shifts page (your organizer will share the link, or find it at /shifts). Browse available time slots, pick one that works, and fill in your name and email. You'll receive a confirmation email with login credentials.

    ","tags":["guide","volunteer"]},{"location":"docs/volunteer/#2-log-in","title":"2. Log In","text":"

    Sign in with the email and password from your confirmation at the login page.

    ","tags":["guide","volunteer"]},{"location":"docs/volunteer/#3-explore-the-volunteer-portal","title":"3. Explore the Volunteer Portal","text":"

    After logging in, you'll land on the volunteer portal. Use the bottom navigation to access:

    • Map \u2014 your canvassing area with GPS tracking
    • Shifts \u2014 your upcoming and past shifts
    • Friends \u2014 social connections with other volunteers
    • Achievements \u2014 badges and leaderboards
    ","tags":["guide","volunteer"]},{"location":"docs/volunteer/#in-this-section","title":"In This Section","text":"
    • Canvassing \u2014 the GPS-guided canvass map, recording visits, and walking routes
    • Shifts \u2014 viewing your assigned shifts, activity log, and route history
    • Social \u2014 friend connections, activity feed, groups, profiles, and privacy settings
    • Achievements \u2014 unlockable badges, progress tracking, and competitive leaderboards
    ","tags":["guide","volunteer"]},{"location":"docs/volunteer/#browsing-public-pages","title":"Browsing Public Pages","text":"

    Tap your name/avatar in the header and select Browse Site to visit the public pages \u2014 campaigns, the public map, and shift signups.

    ","tags":["guide","volunteer"]},{"location":"docs/volunteer/#faq","title":"FAQ","text":"

    Q: I can't find my assigned area on the map. A: Make sure your shift has an area assigned. Check with your organizer.

    Q: My GPS isn't working. A: Allow location access in your browser. Try moving near a window for better signal.

    Q: I recorded the wrong outcome. A: Visit the same address again and record the correct outcome. The most recent visit counts.

    Q: How do I sign up for more shifts? A: Visit the public shifts page at /shifts.

    ","tags":["guide","volunteer"]},{"location":"docs/volunteer/achievements/","title":"Achievements & Leaderboard","text":"

    Recognize volunteer contributions with unlockable achievement badges and competitive leaderboards.

    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/achievements/#how-it-works","title":"How It Works","text":"

    Achievements are checked automatically when relevant actions occur (e.g., signing up for a shift, completing a canvass session, accepting a friend request). When a user's progress meets the threshold, the badge is unlocked and an in-app notification is sent.

    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/achievements/#badge-categories","title":"Badge Categories","text":"","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/achievements/#shifts","title":"Shifts","text":"Badge Name Threshold Description FIRST_SHIFT First Steps 1 confirmed signup Sign up for your first volunteer shift SHIFT_STREAK_3 Reliable Volunteer 3 confirmed signups Sign up for 3 volunteer shifts SHIFT_STREAK_10 Shift Champion 10 confirmed signups Sign up for 10 volunteer shifts","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/achievements/#canvassing","title":"Canvassing","text":"Badge Name Threshold Description FIRST_CANVASS Door Knocker 1 completed session Complete your first canvass session CANVASS_50_DOORS Neighbourhood Explorer 50 visits Record 50 canvass visits CANVASS_100_DOORS Community Connector 100 visits Record 100 canvass visits CANVASS_500_DOORS Door-to-Door Legend 500 visits Record 500 canvass visits","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/achievements/#campaigns","title":"Campaigns","text":"Badge Name Threshold Description FIRST_CAMPAIGN_EMAIL Voice Heard 1 email sent Send your first advocacy email CAMPAIGN_CHAMPION Campaign Champion 5 distinct campaigns Participate in 5 different campaigns","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/achievements/#social","title":"Social","text":"Badge Name Threshold Description SOCIAL_BUTTERFLY Social Butterfly 10 accepted friends Make 10 friends on the platform TEAM_PLAYER Team Player 3 group memberships Be a member of 3 groups","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/achievements/#progress-tracking","title":"Progress Tracking","text":"

    Each badge displays a progress bar showing current progress toward the threshold. Already-unlocked badges show the unlock date and the progress value at unlock time or the current count (whichever is higher).

    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/achievements/#leaderboards","title":"Leaderboards","text":"

    The Achievements page includes a leaderboard tab with three ranking types:

    • Canvass \u2014 ranked by total canvass visits recorded
    • Shifts \u2014 ranked by total confirmed shift signups
    • Campaigns \u2014 ranked by number of distinct campaigns participated in

    Leaderboard entries show rank, user name, and score. Users who have disabled \"Show in Friend Activity\" in their privacy settings are excluded from leaderboard rankings to respect their privacy choices.

    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/achievements/#volunteer-stats","title":"Volunteer Stats","text":"

    The Achievements page also displays aggregate stats for the current user:

    • Confirmed shift signups
    • Completed canvass sessions
    • Total canvass visits
    • Advocacy emails sent
    • Campaigns participated in
    • Friend count
    • Group memberships
    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/achievements/#volunteer-routes","title":"Volunteer Routes","text":"
    • /volunteer/achievements \u2014 badge gallery, progress bars, leaderboard tabs, and personal stats
    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/canvassing/","title":"Canvassing","text":"

    The volunteer canvass map is your main tool for door-to-door outreach \u2014 a full-screen GPS-tracked experience.

    ","tags":["guide","volunteer","map","canvassing"]},{"location":"docs/volunteer/canvassing/#the-volunteer-map","title":"The Volunteer Map","text":"","tags":["guide","volunteer","map","canvassing"]},{"location":"docs/volunteer/canvassing/#what-you-see","title":"What You See","text":"
    • Colored markers \u2014 each marker is an address. Colors indicate the outcome of the last visit (green = supportive, red = opposed, grey = not yet visited)
    • Clusters \u2014 when zoomed out, markers group together showing the address count. Tap a cluster to zoom in.
    • Blue dot \u2014 your current GPS position
    • Walking route \u2014 a suggested path through the addresses (dotted line)
    ","tags":["guide","volunteer","map","canvassing"]},{"location":"docs/volunteer/canvassing/#recording-a-visit","title":"Recording a Visit","text":"
    1. Tap a marker to select an address
    2. A bottom panel slides up showing address details
    3. Tap Record Visit to log what happened:
      • Not Home \u2014 nobody answered
      • Supportive \u2014 positive interaction
      • Opposed \u2014 not supportive
      • Undecided \u2014 hasn't made up their mind
      • Moved \u2014 no longer lives there
      • Refused \u2014 declined to talk
    4. Optionally add a note about the visit
    5. Tap Save \u2014 the marker color updates immediately
    ","tags":["guide","volunteer","map","canvassing"]},{"location":"docs/volunteer/canvassing/#sessions","title":"Sessions","text":"
    • Start a session before you begin knocking on doors \u2014 this tracks your route and time
    • End your session when you're done for the day
    • The map works offline for basic viewing, but you need a connection to save visits
    • If GPS is inaccurate, manually tap the correct marker on the map
    ","tags":["guide","volunteer","map","canvassing"]},{"location":"docs/volunteer/canvassing/#routes","title":"Routes","text":"

    The Routes tab shows your past canvassing routes on a map, helping you see which areas you've covered and plan your next outing.

    ","tags":["guide","volunteer","map","canvassing"]},{"location":"docs/volunteer/canvassing/#volunteer-routes","title":"Volunteer Routes","text":"
    • /volunteer \u2014 full-screen canvass map with GPS and visit recording
    • /volunteer/activity \u2014 visit history and outcome breakdown
    • /volunteer/routes \u2014 past canvassing routes
    ","tags":["guide","volunteer","map","canvassing"]},{"location":"docs/volunteer/shifts/","title":"Your Shifts","text":"

    View your upcoming and past volunteer shifts from the Shifts tab in the bottom navigation.

    ","tags":["guide","volunteer","shifts"]},{"location":"docs/volunteer/shifts/#shift-details","title":"Shift Details","text":"

    Each shift shows:

    • Date and time
    • Assigned area (if linked to a canvassing territory)
    • A button to open the canvass map for that area
    ","tags":["guide","volunteer","shifts"]},{"location":"docs/volunteer/shifts/#activity-log","title":"Activity Log","text":"

    The Activity tab shows your complete visit history:

    • Outcome breakdown \u2014 pie chart of your visit outcomes
    • Visit list \u2014 each visit with address, outcome, time, and notes
    • Stats \u2014 total visits, addresses covered, and sessions completed
    ","tags":["guide","volunteer","shifts"]},{"location":"docs/volunteer/shifts/#volunteer-routes","title":"Volunteer Routes","text":"
    • /volunteer/shifts \u2014 view assigned shifts
    • /volunteer/activity \u2014 visit history and outcome breakdown
    ","tags":["guide","volunteer","shifts"]},{"location":"docs/volunteer/social/","title":"Social Connections","text":"

    Connect with fellow volunteers through friend requests, activity feeds, team groups, and real-time notifications. Enable via Settings > Feature Toggles > Social Connections.

    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/social/#friends","title":"Friends","text":"
    • Send requests \u2014 search for other volunteers and send friend requests
    • Accept / decline / cancel \u2014 manage requests from the Friends page
    • Mutual friends \u2014 view shared connections between users
    • Block / unblock \u2014 blocked users cannot send requests or appear in suggestions
    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/social/#discover","title":"Discover","text":"

    The Discover page suggests potential friends using a ranked scoring algorithm based on:

    • Household/family connections (highest priority)
    • Mutual friends
    • Shared shifts (co-volunteers from the last 90 days)
    • Shared campaigns (co-participants from the last 90 days)
    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/social/#activity-feed","title":"Activity Feed","text":"

    The Social Feed at /volunteer/feed shows recent activity from your friends:

    • Shift signups, campaign emails, canvass sessions, and response submissions
    • Limited to the last 30 days (max 50 items)
    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/social/#groups","title":"Groups","text":"

    Groups are automatically created based on platform activity:

    • Shift teams \u2014 created when 2+ volunteers share a shift
    • Campaign teams \u2014 created when 2+ users participate in the same campaign
    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/social/#profiles","title":"Profiles","text":"

    Each volunteer has a social profile showing volunteer stats, achievement badges, friendship status, and recent activity.

    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/social/#pokes","title":"Pokes","text":"

    Send a friendly nudge to any accepted friend (24-hour cooldown per pair).

    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/social/#privacy-settings","title":"Privacy Settings","text":"Setting Default Description Show online status On Whether friends see you as online Show in friend activity On Whether your actions appear in feeds Allow friend requests On Whether others can send you requests","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/social/#digest-emails","title":"Digest Emails","text":"

    Opt into periodic social digest emails with friend activity, unread notifications, and pending requests. Choose daily or weekly frequency.

    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/social/#volunteer-routes","title":"Volunteer Routes","text":"
    • /volunteer/feed \u2014 social activity feed
    • /volunteer/friends \u2014 friends, requests, blocked, and groups
    • /volunteer/discover \u2014 ranked friend suggestions
    • /volunteer/profile \u2014 your social profile
    • /volunteer/profile/:userId \u2014 another volunteer's profile
    • /volunteer/notifications \u2014 notification center and preferences
    • /volunteer/groups/:id \u2014 group detail with member list
    ","tags":["guide","volunteer","social"]},{"location":"blog/archive/2026/","title":"2026","text":""},{"location":"blog/category/testing/","title":"Testing","text":""},{"location":"blog/category/announcements/","title":"Announcements","text":""},{"location":"blog/category/platform/","title":"Platform","text":""}]} \ No newline at end of file +{"config":{"lang":["en"],"separator":"[\\s\\u200b\\-_,:!=\\[\\]()\"`/]+|\\.(?!\\d)|&[lg]t;|(?!\\b)(?=[A-Z][a-z])","pipeline":["stopWordFilter"],"fields":{"title":{"boost":1000.0},"text":{"boost":1.0},"tags":{"boost":1000000.0}}},"docs":[{"location":"test-page/","title":"Test Page","text":"

    Testing

    testing testing one two

    hello is this content going to show?

    "},{"location":"test/","title":"test","text":"

    Hello!

    Testing this editing system.

    "},{"location":"blog/","title":"Blog","text":""},{"location":"blog/2026/03/27/test-blog-post---version-7/","title":"Test Blog Post - Version 7","text":"

    This version uses the auto-setup token.

    "},{"location":"blog/2026/04/16/a-smoother-fresh-install-v298-and-v299/","title":"A smoother fresh install: v2.9.8 and v2.9.9","text":"

    Installing Changemaker Lite from scratch on a clean server should be fast, quiet, and recoverable. Over the last few days we sat with a clean Ubuntu server and ran the install flow three times \u2014 once straight, once to fix what we found, and once to register the result with a Control Panel. Every round surfaced paper cuts. Both releases that landed this week are the result.

    ","tags":["v2.9.8","v2.9.9","install","ccp","operator-experience"]},{"location":"blog/2026/04/16/a-smoother-fresh-install-v298-and-v299/#the-setup","title":"The setup","text":"

    Three fresh installs on a remote test bench (marcelle), each starting from sudo rm -rf ~/changemaker.lite and ending at a working deployment reachable through a Pangolin tunnel at cursedknowledge.org. In between, we captured every place the install asked us to think harder than it should have, every command that ran silently where a status line would have helped, and every failure mode where the cleanup left the user worse off than before.

    Ten distinct friction points came out of the three runs. Every one is addressed in v2.9.8 or v2.9.9.

    ","tags":["v2.9.8","v2.9.9","install","ccp","operator-experience"]},{"location":"blog/2026/04/16/a-smoother-fresh-install-v298-and-v299/#install-day-improvements-v298","title":"Install-day improvements (v2.9.8)","text":"

    The installer now checks your host before it downloads anything. scripts/install.sh runs ss -Htln against the ~14 ports the stack binds (3000, 4000, 9090, 3030, \u2026) before pulling the 15 MB tarball. If something else on the host is already listening \u2014 the canonical example being cockpit.socket on Ubuntu Server, which claims :9090 \u2014 the install aborts with a culprit-specific hint (sudo systemctl disable --now cockpit.socket) instead of starting a partial-stack deployment and failing mid-compose up.

    config.sh smoke-tests Pangolin credentials before committing them to .env. In non-interactive mode, a typo in --pangolin-api-key used to fail much later, when Newt couldn't connect and the symptoms looked like a tunnel outage. A single round-trip to /org/:id/resources now catches the typo in seconds with a clear message. Skip with --skip-pangolin-check if you're bootstrapping offline.

    Auto-generated admin passwords are saved to a file. When you run config.sh -y without --admin-password, the wizard generates a strong password. It prints it once \u2014 which used to mean users piping through tee or scrolling past it lost it forever. The password is now also written to data/admin-credentials.txt (mode 0600). Delete the file once you've stored the password elsewhere. Explicit --admin-password is never persisted.

    --enable-all now actually installs everything. Previously config.sh -y --enable-all silently skipped the systemd upgrade watcher and the daily backup timer \u2014 even though --enable-all strongly suggests they'd be installed. Automation-driven installs missed the self-healing infrastructure we'd worked hard to stabilize. They now install by default, with --no-install-watcher / --no-install-backup-timer for deliberate opt-out.

    Next Steps now points at verification. After config completes, the installer tells you to run bash scripts/test-deployment.sh --wait 60. It's a 37-check verifier that exists in the repo but wasn't surfaced anywhere. It confirms all containers are healthy, the API is responding, the tunnel is reachable, and the database is seeded. Run it after every install \u2014 it'll save hours of \"is it actually working?\"

    ","tags":["v2.9.8","v2.9.9","install","ccp","operator-experience"]},{"location":"blog/2026/04/16/a-smoother-fresh-install-v298-and-v299/#teardown-that-actually-tears-down","title":"Teardown that actually tears down","text":"

    Fresh installs used to leave two classes of orphans:

    • Pangolin resources and sites in your tunnel org that nobody cleans up when you docker compose down -v
    • CCP Instance rows from phone-home registrations that outlive the underlying stack

    Both now have proper scripts. scripts/pangolin-teardown.sh --yes wipes an org's resources + sites (dry-run by default, --keep-site-ids for safety). scripts/ccp-deregister.sh --yes removes this host's Instance from a connected Control Panel. The full teardown sequence is documented and fits on one card.

    We also wired tunnel cleanup into CCP's own deleteInstance \u2014 previously, clicking \"Delete Instance\" in CCP admin stopped Docker but orphaned the Pangolin site. That was a bug in our plumbing; it's fixed.

    ","tags":["v2.9.8","v2.9.9","install","ccp","operator-experience"]},{"location":"blog/2026/04/16/a-smoother-fresh-install-v298-and-v299/#ccp-registration-less-fragile","title":"CCP registration, less fragile","text":"

    Registering an existing install with a Control Panel used to hit two avoidable failures. Both are addressed:

    Slug collisions return a clean 409. If you tore down the target stack without running ccp-deregister.sh first, CCP's stale Instance row blocked re-registration. The error was a raw Prisma stack trace. It's now a 409 SLUG_CONFLICT with a message pointing at the fix: \"Delete the stale instance first or run scripts/ccp-deregister.sh from the target host.\"

    The agent doesn't wedge on rate limits. The old poll loop sent a /poll request every 30 seconds at a fixed cadence. If admin approval took longer than 5 minutes, CCP's rate limiter returned HTTP 429 and the agent got stuck \u2014 recovery required an operator to manually restart the container. We split the rate limiters (strict on /register, looser on /poll to accommodate the normal polling pattern), and taught the agent to back off exponentially on 429 (30s \u2192 60s \u2192 120s \u2192 300s cap) with reset on success.

    ","tags":["v2.9.8","v2.9.9","install","ccp","operator-experience"]},{"location":"blog/2026/04/16/a-smoother-fresh-install-v298-and-v299/#release-hygiene-v299","title":"Release hygiene (v2.9.9)","text":"

    Two small guards against future drift:

    build-release.sh --upload refuses to overwrite an existing tag unless you pass --replace. Silently pushing new tarball contents under an existing version breaks upgrade checks for users on that version \u2014 they see \"no update available\" even though the bytes changed. Version tags should be immutable once published.

    A parity check on the shipping whitelist. Adding a new script to scripts/ now requires deliberately classifying it as ship (RUNTIME_SCRIPTS) or don't-ship (DEV_ONLY_SCRIPTS). An unclassified script aborts the build. No more \"added a script three months ago, forgot to add it to the release, nobody noticed.\"

    install.sh preserves your extracted tarball on config-wizard failure. The classic curl | ssh bash over non-interactive SSH fails because /dev/tty is unavailable. The cleanup trap used to remove the install directory, forcing a 15 MB re-download. It now distinguishes \"extract OK, wizard didn't run\" from \"extraction itself failed\" and preserves the dir with a resumption hint: \"cd /path && bash config.sh on an interactive console\".

    ","tags":["v2.9.8","v2.9.9","install","ccp","operator-experience"]},{"location":"blog/2026/04/16/a-smoother-fresh-install-v298-and-v299/#whats-next","title":"What's next","text":"

    Both releases are out. The install flow is meaningfully more resilient \u2014 a test that hit two classes of failure now recovers gracefully from both, on a run that took twelve minutes end-to-end including a full stack up and verifier pass. Documentation (prerequisites, installation, first-steps, control-panel) has been swept to match.

    A few items we noted but deliberately deferred: the agent doesn't yet detect when its mTLS cert points at a CCP-deleted instance and re-enter registration mode (real concern past 5+ fleet instances, not now); the CCP's default admin credentials in .env.example deserve a security pass of their own; the Gitea tarball download speed is a network-layer issue outside the install script's scope.

    If you're running on a pre-v2.9.8 install, ./scripts/upgrade.sh is a safe path forward. If you're coming fresh, the one-liner \u2014 curl -fsSL https://gitea.bnkops.com/admin/changemaker.lite/raw/branch/main/scripts/install.sh | bash \u2014 should get you further without asking you to think.

    As always, issues and feedback via Gitea. Thanks for following along.

    ","tags":["v2.9.8","v2.9.9","install","ccp","operator-experience"]},{"location":"blog/2026/03/22/introducing-changemaker-lite-v2/","title":"Introducing Changemaker Lite v2","text":"

    Changemaker Lite v2 is a ground-up rebuild of the platform \u2014 same mission, entirely new architecture. After 14 phases of development, the platform is ready for production use.

    ","tags":["v2","release","self-hosted","FOSS"]},{"location":"blog/2026/03/22/introducing-changemaker-lite-v2/#what-changed","title":"What Changed","text":"

    V1 was two independent Express apps stitched together with NocoDB as a data layer. It worked, but scaling features meant fighting the architecture at every turn.

    V2 is a unified TypeScript stack:

    • Dual API architecture \u2014 Express.js for the main platform, Fastify for the media library, sharing a single PostgreSQL 16 database via Prisma ORM
    • React admin GUI \u2014 Vite + Ant Design + Zustand, serving admin, public, and volunteer interfaces from one build
    • 30+ Docker services \u2014 from core infrastructure to monitoring, communication, and developer tools
    • JWT authentication with refresh token rotation, role-based access control (11 roles), and a comprehensive security audit
    ","tags":["v2","release","self-hosted","FOSS"]},{"location":"blog/2026/03/22/introducing-changemaker-lite-v2/#whats-new","title":"What's New","text":"

    The feature set has grown substantially:

    • Advocacy campaigns with postal code \u2192 representative lookup, email sending, response walls, and moderation
    • Map & canvassing with multi-provider geocoding, polygon territories, GPS-tracked volunteer sessions, and walking route generation
    • Media manager with video upload, FFprobe metadata extraction, scheduled publishing, analytics, and a public gallery
    • Landing page builder powered by GrapesJS with drag-and-drop editing
    • Payments via encrypted Stripe integration \u2014 products, donations, and subscription plans
    • SMS campaigns via a Termux Android bridge
    • Team communication with self-hosted Rocket.Chat and Jitsi Meet
    • People CRM aggregating contacts across all modules with duplicate detection and merge
    • Volunteer social features \u2014 friend system, achievements, leaderboards, and a personal calendar
    • One-command install \u2014 curl | bash pulls a release tarball and runs the config wizard
    ","tags":["v2","release","self-hosted","FOSS"]},{"location":"blog/2026/03/22/introducing-changemaker-lite-v2/#why-self-hosted","title":"Why Self-Hosted","text":"

    Every subscription to corporate campaign software funds infrastructure you don't control. Your voter lists, canvassing outcomes, and communication patterns become assets on someone else's balance sheet.

    Changemaker Lite costs roughly the price of a VPS \u2014 often under $50/month for the full stack. But the real value isn't cost savings. It's control. No vendor can cut off your access. No acquisition can change your terms.

    Read more in our Philosophy page.

    ","tags":["v2","release","self-hosted","FOSS"]},{"location":"blog/2026/03/22/introducing-changemaker-lite-v2/#get-started","title":"Get Started","text":"
    curl -fsSL https://gitea.bnkops.com/admin/changemaker.lite/raw/branch/main/scripts/install.sh | bash\n

    Or follow the Getting Started guide for a walkthrough.

    ","tags":["v2","release","self-hosted","FOSS"]},{"location":"blog/2026/03/22/introducing-changemaker-lite-v2/#whats-next","title":"What's Next","text":"

    Phase 15 (Testing & Polish) is underway. We're also working on:

    • Social Calendar Phase B (shared views, availability finder)
    • Expanded test coverage
    • Performance optimization for large location datasets

    Follow this blog for updates, or subscribe to the newsletter.

    ","tags":["v2","release","self-hosted","FOSS"]},{"location":"comments/callback/","title":"Signing in...","text":"

    Completing sign in...

    You will be redirected back to the page you were on.

    "},{"location":"docs/","title":"Documentation","text":"

    Welcome to the Changemaker Lite documentation. Whether you're a campaign volunteer, an admin managing operations, or a sysadmin deploying the platform \u2014 start here.

    ","tags":["guide","getting-started"],"boost":2},{"location":"docs/#use-the-platform","title":"Use the Platform","text":"

    • Getting Started

      Install Changemaker Lite, create your first admin account, and explore the dashboard.

      Getting Started

    • Feature Guides

      Campaigns, email advocacy, response walls, map locations, landing pages, and media.

      Feature Guides

    • Administration

      User management, roles and permissions, site settings, email templates, and newsletters.

      Administration

    • Volunteer Guide

      Sign up for shifts, use the canvassing map, record visits, and track your activity.

      Volunteer Guide

    ","tags":["guide","getting-started"],"boost":2},{"location":"docs/#deploy-operate","title":"Deploy & Operate","text":"

    • Deployment

      Docker Compose setup, environment variables, SSL/TLS, backups, and production checklist.

      Deployment

    • Architecture

      Dual API design, database schema, authentication flow, and system diagram.

      Architecture

    • Services

      Nginx routing, Redis, PostgreSQL, Listmonk, MkDocs, Gitea, NocoDB, and more.

      Services

    • Monitoring

      Prometheus metrics, Grafana dashboards, Alertmanager rules, and health checks.

      Monitoring

    ","tags":["guide","getting-started"],"boost":2},{"location":"docs/#reference","title":"Reference","text":"

    • API Reference

      REST endpoints for auth, campaigns, locations, shifts, media, and more.

      API Reference

    • Troubleshooting

      Common errors, CORS issues, database problems, tunnel debugging, and FAQ.

      Troubleshooting

    • Security

      Password policy, rate limiting, token rotation, encryption, and audit report.

      Security See Deployment

    • Contributing

      Development setup, code style, git workflow, and pull request guidelines.

      Contributing

    ","tags":["guide","getting-started"],"boost":2},{"location":"docs/#platform-at-a-glance","title":"Platform at a Glance","text":"Component Technology Purpose Main API Express.js + Prisma Auth, campaigns, map, shifts, pages, email Media API Fastify + Prisma Video library, analytics, upload, scheduling Admin GUI React + Ant Design + Zustand Dashboard for admins and organizers Database PostgreSQL 16 Single shared database for both APIs Cache Redis Rate limiting, BullMQ jobs, geocoding queue Proxy Nginx Subdomain routing, security headers, SSL Tunnel Pangolin + Newt Expose services without port forwarding Monitoring Prometheus + Grafana Metrics, dashboards, alerts

    New here?

    Start with the Getting Started guide to have the platform running in under 30 minutes.

    Looking for the source?

    Changemaker Lite is 100% open source. Browse the code on Gitea.

    ","tags":["guide","getting-started"],"boost":2},{"location":"docs/phil/","title":"Philosophy","text":"","tags":["concept","philosophy","FOSS"]},{"location":"docs/phil/#software-is-political","title":"Software Is Political","text":"

    Every tool your movement adopts shapes how you organize. Proprietary platforms reinforce hierarchy \u2014 the vendor decides what features you get, what data you can export, and what happens when you stop paying. Community-controlled tools support democratic autonomy because the people using them decide how they work.

    If you do politics, who is reading your secrets? Corporate platforms harvest political intelligence systematically. Facebook chat data has been used in criminal prosecutions. Social media platforms are leveraged for political coordination and surveillance. When you organize on corporate infrastructure, you hand your strategies, your voter data, and your movement's internal conversations to entities that may have every reason to work against you.

    Changemaker Lite exists because we believe organizational independence requires technological independence.

    ","tags":["concept","philosophy","FOSS"]},{"location":"docs/phil/#the-extractive-model","title":"The Extractive Model","text":"

    Most campaign and political software is extractive by design. The pattern is familiar:

    1. Free trial hooks you in
    2. Paid features gate the tools you actually need
    3. Data export becomes difficult or impossible
    4. Pricing escalates as you grow and become dependent
    5. Your usage patterns are monetized through data partnerships, behavioral analytics, and enterprise contracts

    This isn't a side effect \u2014 it's the business model. You pay with money and with data. Your voter lists, canvassing outcomes, donor records, and communication patterns become assets on someone else's balance sheet.

    Every subscription to corporate software funds the machine you're fighting.

    ","tags":["concept","philosophy","FOSS"]},{"location":"docs/phil/#the-alternative-grow-power-dont-rent-it","title":"The Alternative: Grow Power, Don't Rent It","text":"

    Changemaker asks a different question than most political tech: instead of \"how do we extract more data from a community?\" we ask \"what tools are needed to grow change in a community?\"

    Growing change means:

    • Making real connections between organizers, volunteers, and community members \u2014 not just collecting their contact info
    • Providing access to the same caliber of tools that well-funded campaigns use \u2014 without the price tag or the surveillance
    • Deeply understanding the wants and needs of your movement \u2014 on infrastructure you control, with data you own
    ","tags":["concept","philosophy","FOSS"]},{"location":"docs/phil/#distributed-organizing-is-the-way-out","title":"Distributed Organizing Is The Way Out","text":"

    Socialist movements will never outspend capital. Progressive organizations cannot compete financially with well-funded conservative movements, and chasing big-donor dollars leads to mission drift and organizational capture \u2014 what some call the Political Industrial Complex.

    A thousand neighborhood mailing lists has more potential impact than any single organization. When organizing knowledge and digital tools are widely distributed \u2014 not gatekept by leadership or locked behind vendor paywalls \u2014 movements become genuinely resilient.

    The historical pattern is clear: worker victories occurred when organizing knowledge was widely distributed, not concentrated at the top. Changemaker Lite is built on this premise \u2014 provide the tools freely, train people to use them, and get out of the way.

    Workers, with the right tools, will build the future.

    ","tags":["concept","philosophy","FOSS"]},{"location":"docs/phil/#de-corp-your-stack","title":"De-Corp Your Stack","text":"

    The practical work of digital sovereignty starts with replacing corporate services one at a time:

    Corporate Tool Changemaker Alternative What You Gain Mailchimp Listmonk Unlimited subscribers, no per-send charges, your data stays local NationBuilder Changemaker Lite Full campaign platform without the $50-500/month ransom Google Docs Gitea + Code Server Version control, collaboration, no algorithmic scanning Slack Rocket.Chat Team chat with SSO, no message limits, no corporate eavesdropping SurveyMonkey Response Wall Supporter voices on your terms, with moderation you control Google Maps Self-hosted Leaflet No API fees, no tracking, offline-capable canvassing

    The cost reduction is dramatic. Organizations spending thousands monthly on SaaS tools can replace them with a single self-hosted server running Changemaker Lite for roughly the cost of hosting \u2014 often under $50/month.

    But the real value isn't cost savings. It's control. No vendor can cut off your access. No acquisition can change your terms. No government can compel a foreign company to hand over your data. Your movement's digital infrastructure belongs to your movement.

    ","tags":["concept","philosophy","FOSS"]},{"location":"docs/phil/#security-culture-starts-with-infrastructure","title":"Security Culture Starts With Infrastructure","text":"

    Security culture isn't just about who knows what \u2014 it's about who can know what. When your communications run through corporate servers, you've made a structural decision about who has access before you've even thought about operational security.

    Key principles:

    • Compartmentalization by design \u2014 Self-hosted systems let you control exactly who has access to what, at the infrastructure level
    • No third-party access \u2014 No corporate subpoenas for your data, no partnership agreements sharing your information
    • Audit everything \u2014 When you run the servers, you can verify that your security promises are real, not just marketing
    • Consent and autonomy \u2014 Your community sets its own security boundaries rather than accepting whatever a vendor's privacy policy allows

    You wouldn't hold a sensitive strategy meeting in a room wired by someone else. Why would you plan your campaign on someone else's servers?

    ","tags":["concept","philosophy","FOSS"]},{"location":"docs/phil/#our-principles","title":"Our Principles","text":"

    Liberation First Technology should center marginalized voices. The tools we build reflect the values we hold, and they shape the movements that use them.

    Community Over Profit Changemaker Lite is free and open source software, built by a cooperative \u2014 not a startup looking for an exit. There are no shareholders to satisfy, no venture capitalists to answer to. The software serves the community because that's the only thing it's designed to do.

    Data Sovereignty Communities should own their complete digital infrastructure. Not just the content \u2014 the servers, the databases, the encryption keys, and the ability to pack up and leave at any time.

    Radical Accessibility Self-hosted doesn't have to mean self-excluding. Changemaker Lite is designed for organizers, not sysadmins. If you can follow a guide to set up a WordPress site, you can run this platform.

    ","tags":["concept","philosophy","FOSS"]},{"location":"docs/phil/#further-reading","title":"Further Reading","text":"

    These articles explore the ideas behind Changemaker Lite in depth:

    • If You Do Politics, Who Is Reading Your Secrets? \u2014 Why you should de-corp your software stack
    • Distributed Digital Organizing Is The Way Out \u2014 Why decentralized power structures outperform centralized ones
    • How Not To Get Got Making Content \u2014 Platform independence for political content creators
    • What Is Security Culture? \u2014 The foundations of security culture for movements
    ","tags":["concept","philosophy","FOSS"]},{"location":"docs/admin/","title":"Admin Guide","text":"

    The admin panel at /app is your command center for managing the entire platform. Use the sidebar to navigate between modules, or press Ctrl+K to open the command palette for quick access to any page, setting, or action.

    ","tags":["guide","admin"]},{"location":"docs/admin/#sections","title":"Sections","text":"

    • Dashboard

      Live overview of platform activity, upcoming shifts, email stats, and service health.

    • People & Access

      User management, roles, the People CRM, and contact merging.

    • Advocacy

      Campaigns, response moderation, representative lookup, and email queue monitoring.

    • Broadcast

      Newsletter sync, email templates, and SMS campaigns.

    • Web Content

      Landing pages, homepage, navigation menu, and documentation management.

    • Map & Canvassing

      Locations, areas, shifts, canvassing dashboard, data quality, and map settings.

    • Media

      Video/photo library, analytics, playlists, comment moderation, and gallery ads.

    • Payments

      Products, donations, subscription plans, and Stripe configuration.

    • Services

      Tunnel management, monitoring, and third-party integrations.

    • Settings

      Organization branding, theme colors, email config, feature toggles, and notifications.

    ","tags":["guide","admin"]},{"location":"docs/admin/#roles-reference","title":"Roles Reference","text":"Role Access Level SUPER_ADMIN Full platform access \u2014 implicitly bypasses all role checks INFLUENCE_ADMIN Campaigns, responses, representatives, email queue MAP_ADMIN Locations, areas, shifts, canvassing, data quality BROADCAST_ADMIN Newsletter sync, email templates CONTENT_ADMIN Landing pages, homepage, navigation, documentation MEDIA_ADMIN Video library, analytics, gallery, moderation, ads PAYMENTS_ADMIN Products, donations, plans, Stripe configuration EVENTS_ADMIN Gancio event sync and calendar management SOCIAL_ADMIN Social connections, achievements, calendar layers USER Volunteer portal only TEMP Limited volunteer access (auto-created on shift signup)","tags":["guide","admin"]},{"location":"docs/admin/dashboard/","title":"Dashboard","text":"

    The admin dashboard (/app) provides a real-time overview of platform activity.

    ","tags":["guide","admin"]},{"location":"docs/admin/dashboard/#dashboard-cards","title":"Dashboard Cards","text":"
    • Platform Stats \u2014 active campaigns, total emails sent, registered users, and locations
    • Activity Feed \u2014 recent events across all modules (signups, emails, visits, responses)
    • Upcoming Shifts \u2014 next scheduled volunteer shifts with signup counts
    • Newsletter Stats \u2014 Listmonk subscriber counts and recent campaign performance
    • Chat Activity \u2014 Rocket.Chat channel activity and online users (when chat is enabled)
    • Service Health \u2014 connectivity status for integrated services (Gitea, Gancio, Vaultwarden, etc.)

    All cards auto-refresh and gracefully degrade when their associated module is disabled.

    ","tags":["guide","admin"]},{"location":"docs/admin/people-access/","title":"People & Access","text":"

    Manage platform user accounts and roles, and use the People CRM to get a unified view of every supporter, donor, and volunteer across all modules.

    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#user-management","title":"User Management","text":"","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#creating-users","title":"Creating Users","text":"

    Navigate to Users (/app/users) and click Add User. Fill in name, email, and role. The user will receive a welcome email with login instructions.

    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#roles","title":"Roles","text":"Role Access Use Case SUPER_ADMIN Full platform access Campaign managers INFLUENCE_ADMIN Campaigns, responses, email queue Advocacy coordinators MAP_ADMIN Locations, areas, shifts, canvassing Field organizers USER Volunteer portal only Active volunteers TEMP Limited volunteer access Shift signups (auto-created)

    This table shows the most common roles. See the full role list for module-specific admin roles (BROADCAST_ADMIN, CONTENT_ADMIN, MEDIA_ADMIN, PAYMENTS_ADMIN, EVENTS_ADMIN, SOCIAL_ADMIN).

    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#password-policy","title":"Password Policy","text":"

    Passwords must be at least 12 characters with uppercase, lowercase, and a digit. This is enforced at the API schema level.

    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#deactivating-users","title":"Deactivating Users","text":"

    Edit a user from the Users page and toggle their active status. Deactivated users cannot log in but their data is preserved. Banned users have their sessions invalidated immediately.

    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#service-accounts-panel","title":"Service Accounts Panel","text":"

    When editing a user, the Service Accounts panel shows provisioning status for each integrated service (Rocket.Chat, Gitea, Vaultwarden, Listmonk). You can provision, deprovision, or re-sync individual services per user.

    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#people-crm","title":"People CRM","text":"

    Enable with enablePeople in Settings. The People module serves as the platform's CRM, aggregating data from all other modules into a unified view.

    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#virtual-aggregation","title":"Virtual Aggregation","text":"

    The People page does not store a separate \"people\" table. Instead, it aggregates records in real time from seven data sources:

    Source Data Users Platform accounts (name, email, phone, last login) Address Occupants Named residents from the map/canvassing module Campaign Senders People who sent advocacy emails Shift Signups Volunteer shift registrants SMS Contacts Contacts from SMS campaign lists Donations/Orders Buyers from the payments module Manual Contacts created directly in the CRM

    Records are deduplicated by normalized email or phone number, with Users taking highest priority.

    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#managed-contacts","title":"Managed Contacts","text":"

    Any virtual person can be \"promoted\" to a managed Contact record. This creates a persistent Contact entity in the database with:

    • Display name, first/last name \u2014 editable independently of the source
    • Tags \u2014 custom CRM tags for segmentation and filtering
    • Notes \u2014 free-text notes field
    • Support level \u2014 LEVEL_1 (Strong) through LEVEL_4 (Opposition)
    • Opt-out flags \u2014 email opt-out, SMS opt-out, and do-not-contact
    • Sign requested \u2014 track yard sign status
    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#contact-details","title":"Contact Details","text":"

    Each managed contact supports multiple structured data entries:

    • Addresses \u2014 link to map locations with optional unit numbers and primary flag; new addresses can be auto-added to the map for geocoding
    • Emails \u2014 multiple email addresses with labels (e.g., Personal, Work) and primary designation
    • Phones \u2014 multiple phone numbers with labels and primary designation
    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#activity-timeline","title":"Activity Timeline","text":"

    View a chronological timeline of all interactions for a person, across every module:

    • Advocacy emails sent and responses submitted
    • Shift signups and canvass visits
    • Donations and product purchases
    • SMS messages sent and received
    • Video views
    • Notes added and contact merges
    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#duplicate-detection-and-merge","title":"Duplicate Detection and Merge","text":"

    The platform identifies potential duplicates by matching normalized email addresses and phone numbers across sources. The merge workflow lets you:

    • Select which fields to keep from the source vs. target contact
    • Merge tags, addresses, emails, and phones
    • Preserve the full audit trail (merged contacts are soft-linked, not deleted)
    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#connection-graph","title":"Connection Graph","text":"

    Build a relationship graph between contacts using typed connections:

    • Connection types \u2014 Household, Family, Colleague, Referred By, and Custom
    • Bidirectional \u2014 connections can be one-way or mutual
    • Visual graph \u2014 interactive force-directed graph visualization showing contacts as nodes and connections as edges
    • Configurable depth \u2014 explore up to 3 degrees of separation
    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#profile-links","title":"Profile Links","text":"

    Generate shareable public profile pages for contacts:

    • Unique token URLs at /profile/:token
    • Configurable expiration \u2014 24 hours, 7 days, 30 days, 90 days, 1 year, or never
    • Optional password protection \u2014 require a PIN or password to view
    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#household-detection","title":"Household Detection","text":"

    The Household panel groups contacts who share the same physical address, making it easy to see all members of a household and their combined engagement.

    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#create-user-from-contact","title":"Create User from Contact","text":"

    Promote a CRM contact to a full platform user account directly from the People interface, with role assignment and optional welcome email.

    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/people-access/#admin-routes","title":"Admin Routes","text":"
    • /app/users \u2014 user CRUD, role assignment, service accounts
    • /app/people \u2014 contact list with search, filters, source/tag filtering, and bulk actions
    ","tags":["guide","admin","CRM"]},{"location":"docs/admin/settings/","title":"Platform Settings","text":"

    Centralized configuration for organization identity, theming, email delivery, feature modules, and automated notifications.

    ","tags":["guide","admin","configuration"]},{"location":"docs/admin/settings/#settings-tabs","title":"Settings Tabs","text":"","tags":["guide","admin","configuration"]},{"location":"docs/admin/settings/#organization","title":"Organization","text":"

    Configure your organization's public identity:

    • Organization Name \u2014 displayed in the admin sidebar, public pages, and emails
    • Short Name \u2014 shown when the admin sidebar is collapsed (max 10 characters)
    • Logo URL \u2014 displayed on the login page, homepage hero, and public navigation
    • Favicon URL \u2014 browser tab icon
    • Footer Text \u2014 shown in public page footers
    • Login Subtitle \u2014 displayed below the organization name on the login page
    ","tags":["guide","admin","configuration"]},{"location":"docs/admin/settings/#theme-colors","title":"Theme Colors","text":"

    Customize the look of admin and public interfaces:

    Admin theme:

    • Primary color (accent color for buttons, links, active states)
    • Background color (page background)

    Public theme:

    • Primary color
    • Background color
    • Container color (card and section backgrounds)
    • Header gradient (CSS gradient string for the public navigation bar)

    A live preview panel shows color swatches and a gradient preview as you configure.

    ","tags":["guide","admin","configuration"]},{"location":"docs/admin/settings/#email","title":"Email","text":"

    Configure how the platform sends emails:

    • Sender \u2014 from name and from address for all outgoing emails
    • Active SMTP provider \u2014 toggle between MailHog (testing) and Production SMTP with a single click
    • Production SMTP \u2014 host, port, username, and password (collapsible panel, disabled when MailHog is active)
    • Test mode \u2014 when enabled, all emails redirect to a single test recipient address
    • Test actions \u2014 \"Test Connection\" verifies SMTP connectivity; \"Send Test Email\" delivers a test message through the active provider

    A configuration summary card at the top displays the current provider, server, authentication status, and test mode state.

    ","tags":["guide","admin","configuration"]},{"location":"docs/admin/settings/#feature-toggles","title":"Feature Toggles","text":"

    Enable or disable platform modules. Disabling a module hides it from navigation but does not delete data.

    Category Flag Description Core Platform enableInfluence Advocacy campaigns, email sending, response wall enableMap Map, locations, canvassing, volunteer shifts enableNewsletter Listmonk newsletter sync enableLandingPages GrapesJS landing page builder Media & Content enableMediaFeatures Video library, public gallery, analytics enableGalleryAds Promotional cards in the video gallery enableEvents Gancio event calendar integration Communication enableChat Rocket.Chat team coordination enableMeet Jitsi video meetings (integrates with Rocket.Chat) enableSms Termux Android SMS campaigns People & Engagement enablePeople Unified contacts CRM enableSocial Volunteer social connections and activity feeds autoSyncPeopleToMap Auto-create map locations from contact addresses Commerce enablePayments Stripe subscriptions, products, and donations","tags":["guide","admin","configuration"]},{"location":"docs/admin/settings/#notifications","title":"Notifications","text":"

    Control which automated email notifications the platform sends. Disabling a notification stops future emails but does not affect already-queued jobs.

    Admin alerts:

    • New shift signup
    • Response wall submission
    • Yard sign request (from canvassing)
    • Shift cancellation

    Volunteer emails:

    • Canvass session summary (sent after completing a session)
    • Signup cancellation confirmation
    • 24-hour pre-shift reminder
    • Post-shift thank-you (sent 2 hours after shift ends)

    Re-engagement:

    • Re-engagement emails for inactive volunteers
    • Configurable inactivity threshold (days without activity)
    • Configurable cooldown period (minimum days between re-engagement emails)
    ","tags":["guide","admin","configuration"]},{"location":"docs/admin/settings/#admin-routes","title":"Admin Routes","text":"
    • /app/settings \u2014 multi-tab settings page (supports deep-linking to a specific tab via router state)
    ","tags":["guide","admin","configuration"]},{"location":"docs/admin/advocacy/","title":"Advocacy","text":"

    The advocacy module helps supporters contact their elected representatives through email campaigns.

    ","tags":["guide","admin","influence"]},{"location":"docs/admin/advocacy/#in-this-section","title":"In This Section","text":"
    • Campaigns \u2014 create and publish advocacy campaigns with postal code lookup and response tracking
    • Responses \u2014 moderate the public response wall where supporters share representative replies
    • Representatives \u2014 manage the representative lookup cache powered by the Represent API
    • Email Queue \u2014 monitor outgoing advocacy emails, retry failures, and view delivery stats
    ","tags":["guide","admin","influence"]},{"location":"docs/admin/advocacy/campaigns/","title":"Advocacy Campaigns","text":"

    Help supporters contact their elected representatives through email campaigns.

    ","tags":["guide","admin","influence","campaigns"]},{"location":"docs/admin/advocacy/campaigns/#how-it-works","title":"How It Works","text":"
    1. An admin creates a campaign \u2014 writes the email subject and body, selects which government levels to target (federal, provincial, municipal, school board), and publishes it.
    2. A supporter visits the campaign page \u2014 enters their postal code to look up their representatives.
    3. The supporter sends the email \u2014 either directly through the platform (\"Send Now\") or by opening it in their own email app (Gmail, Outlook, etc.).
    4. Responses get tracked \u2014 supporters and admins can share representative responses on the Response Wall, with upvoting and moderation.
    ","tags":["guide","admin","influence","campaigns"]},{"location":"docs/admin/advocacy/campaigns/#key-features","title":"Key Features","text":"
    • Postal code lookup \u2014 powered by the Represent API, returns representatives at all government levels
    • Two send methods \u2014 server-sent SMTP (tracked) or mailto link (opens user's email app)
    • Email editing \u2014 optionally let supporters personalize the email before sending
    • Response Wall \u2014 public wall where people share how their representatives responded, with moderation and verification
    • Campaign stats \u2014 track emails sent, responses received, and upvotes
    • Featured campaigns \u2014 highlight important campaigns on the public listing page
    ","tags":["guide","admin","influence","campaigns"]},{"location":"docs/admin/advocacy/campaigns/#user-submitted-campaigns","title":"User-Submitted Campaigns","text":"

    Registered (non-temporary) users can create their own advocacy campaigns and submit them for admin review. See the user-facing submission guide for the supporter's perspective.

    • Public submission route \u2014 users visit /campaigns/create to draft a campaign through a guided wizard
    • 3-step wizard \u2014 the submission flow walks users through campaign details (title, description, government levels), email template (subject and body), and a final review step before submitting
    • My campaigns dashboard \u2014 users can view and manage their submitted campaigns at /campaigns/mine, including checking moderation status and editing campaigns that have been sent back for changes
    • Restricted fields \u2014 user-submitted campaigns have limited options compared to admin-created ones (no SMTP sending, no highlight, no custom recipients); only the mailto link fallback is enabled by default
    • Auto-moderation status \u2014 newly submitted campaigns start in PENDING_REVIEW status and remain in DRAFT until an admin approves them
    • Edit restrictions \u2014 users can only edit their own campaigns, and only when the moderation status is PENDING_REVIEW or CHANGES_REQUESTED; editing automatically resets the status back to PENDING_REVIEW
    • Rate limiting \u2014 campaign submissions are rate-limited to 5 per hour per IP to prevent abuse
    • XSS protection \u2014 all user-supplied text (title, description, email subject, email body) is HTML-escaped before storage
    ","tags":["guide","admin","influence","campaigns"]},{"location":"docs/admin/advocacy/campaigns/#campaign-moderation","title":"Campaign Moderation","text":"

    Admins review user-submitted campaigns before they go live.

    • Moderation queue \u2014 accessible at /app/campaign-moderation, showing all user-generated campaigns filtered by moderation status (pending, approved, rejected, changes requested)
    • Moderation actions \u2014 for each campaign in the queue, admins can:
      • Approve \u2014 sets the moderation status to APPROVED and the campaign status to ACTIVE, making it publicly visible
      • Reject \u2014 marks the campaign as REJECTED with an optional reason visible to the submitter
      • Request changes \u2014 sets the status to CHANGES_REQUESTED with feedback, allowing the user to revise and resubmit
    • Moderation stats \u2014 the queue page displays counters for total user-generated campaigns, pending reviews, approved, rejected, and changes-requested counts
    • Reviewer tracking \u2014 each moderation action records the reviewer's user ID and timestamp
    • Search and filter \u2014 the moderation queue supports searching by campaign title, submitter name, or email, and filtering by moderation status
    ","tags":["guide","admin","influence","campaigns"]},{"location":"docs/admin/advocacy/campaigns/#campaign-analytics","title":"Campaign Analytics","text":"

    The Campaign Effectiveness dashboard provides cross-campaign performance analytics at /app/influence/effectiveness.

    • Performance tab \u2014 per-campaign KPIs including total emails sent, email delivery status breakdown, response counts, response rates, and call counts; top campaigns visualized as a horizontal bar chart
    • Representatives tab \u2014 tracks individual representative responsiveness across all campaigns; shows emails received, responses given, verified response count, and response rate per representative; sortable by response count, response rate, or name; includes government level distribution
    • Geography tab \u2014 engagement breakdown by geographic area; group results by postal code, city, or province; enriched with city/province data from the postal code cache
    • Funnel tab \u2014 conversion funnel visualization showing progression from emails sent to unique participants to responses received to verified responses, plus calls made; includes percentage-of-first and stage-to-stage dropoff rates
    • Trends tab \u2014 time-series activity chart showing daily or weekly email and response volumes; default view covers the last 30 days; merged email and response series for side-by-side comparison
    • Global filters \u2014 all tabs share campaign and date range filters; select a specific campaign or view aggregate data across all campaigns
    ","tags":["guide","admin","influence","campaigns"]},{"location":"docs/admin/advocacy/campaigns/#admin-routes","title":"Admin Routes","text":"
    • /app/campaigns \u2014 create, edit, and manage campaigns
    • /app/campaign-moderation \u2014 review and moderate user-submitted campaigns
    • /app/influence/effectiveness \u2014 campaign effectiveness analytics dashboard
    • /app/responses \u2014 moderate submitted responses
    • /app/email-queue \u2014 monitor outgoing email delivery
    ","tags":["guide","admin","influence","campaigns"]},{"location":"docs/admin/advocacy/campaigns/#public-routes","title":"Public Routes","text":"
    • /campaigns \u2014 browse active campaigns
    • /campaigns/create \u2014 submit a new user-generated campaign (requires login)
    • /campaigns/mine \u2014 view and manage your submitted campaigns (requires login)
    • /campaign/:slug \u2014 take action on a specific campaign
    • /campaign/:slug/responses \u2014 view the response wall
    ","tags":["guide","admin","influence","campaigns"]},{"location":"docs/admin/advocacy/email-queue/","title":"Email Queue","text":"

    Monitor outgoing advocacy emails processed through the BullMQ queue.

    ","tags":["guide","admin","influence","email"]},{"location":"docs/admin/advocacy/email-queue/#key-features","title":"Key Features","text":"
    • Queue dashboard \u2014 view pending, active, completed, and failed jobs at /app/email-queue
    • Job details \u2014 inspect individual email jobs with recipient, subject, status, and timestamps
    • Retry failed jobs \u2014 re-queue emails that failed due to SMTP errors or timeouts
    • Clear completed \u2014 bulk-remove completed jobs to keep the queue clean
    • Stats \u2014 total sent, delivery rate, and average processing time
    ","tags":["guide","admin","influence","email"]},{"location":"docs/admin/advocacy/email-queue/#admin-routes","title":"Admin Routes","text":"
    • /app/email-queue \u2014 email queue monitoring and management
    ","tags":["guide","admin","influence","email"]},{"location":"docs/admin/advocacy/representatives/","title":"Representatives","text":"

    The platform uses the Represent API to look up elected representatives by postal code across all government levels.

    ","tags":["guide","admin","influence"]},{"location":"docs/admin/advocacy/representatives/#how-it-works","title":"How It Works","text":"
    • Postal code lookup \u2014 enter a Canadian postal code to retrieve federal, provincial, municipal, and school board representatives
    • Redis cache \u2014 lookup results are cached to reduce API calls and improve response times
    • Cache management \u2014 view cache status and clear entries from /app/representatives
    • Government levels \u2014 campaigns can target specific levels (federal, provincial, municipal, school board)
    ","tags":["guide","admin","influence"]},{"location":"docs/admin/advocacy/representatives/#admin-routes","title":"Admin Routes","text":"
    • /app/representatives \u2014 representative cache management and lookup testing
    ","tags":["guide","admin","influence"]},{"location":"docs/admin/advocacy/responses/","title":"Response Moderation","text":"

    Review and moderate representative responses submitted by supporters on the public response wall.

    ","tags":["guide","admin","influence","moderation"]},{"location":"docs/admin/advocacy/responses/#key-features","title":"Key Features","text":"
    • Moderation queue \u2014 review submissions at /app/responses with filtering by campaign and status
    • Verification \u2014 mark responses as verified to display a trust badge on the public wall
    • Upvoting \u2014 supporters can upvote responses; counts are visible on the public wall
    • Approve / reject \u2014 control which responses appear publicly
    • Response stats \u2014 track response counts per campaign and per representative
    ","tags":["guide","admin","influence","moderation"]},{"location":"docs/admin/advocacy/responses/#admin-routes","title":"Admin Routes","text":"
    • /app/responses \u2014 response moderation dashboard
    ","tags":["guide","admin","influence","moderation"]},{"location":"docs/admin/broadcast/","title":"Broadcast","text":"

    Reach supporters through multiple channels \u2014 email newsletters, templated campaigns, and SMS text messages.

    ","tags":["guide","admin","broadcast"]},{"location":"docs/admin/broadcast/#in-this-section","title":"In This Section","text":"
    • Newsletter \u2014 Listmonk integration with automatic subscriber sync from shifts, campaigns, and contacts
    • Email Templates \u2014 reusable templates with variable substitution, version history, and test sending
    • SMS \u2014 text message campaigns via a Termux Android bridge with contact lists and response tracking
    ","tags":["guide","admin","broadcast"]},{"location":"docs/admin/broadcast/email-templates/","title":"Email Templates","text":"

    Create reusable email templates with variable substitution for campaign communications. Templates are used by advocacy campaigns, shift confirmations, volunteer re-engagement emails, and other automated communications.

    ","tags":["guide","admin","broadcast","email"]},{"location":"docs/admin/broadcast/email-templates/#template-categories","title":"Template Categories","text":"

    Each template belongs to a category that determines where it can be used:

    • INFLUENCE -- advocacy campaign emails sent to representatives
    • MAP -- shift confirmation, volunteer thank-you, and canvassing-related emails
    • SYSTEM -- account verification, password reset, and platform notifications
    • PAYMENT -- donation receipts, subscription confirmations, and purchase orders
    ","tags":["guide","admin","broadcast","email"]},{"location":"docs/admin/broadcast/email-templates/#variable-system","title":"Variable System","text":"

    Templates use Handlebars-style {{VARIABLE_NAME}} placeholders that are replaced at send time. Variables must use uppercase letters and underscores (e.g., {{RECIPIENT_NAME}}, {{CAMPAIGN_TITLE}}).

    • Text variables -- simple string substitution for names, dates, URLs, and other text
    • Video variables -- embed a media library video by referencing its ID
    • Conditional blocks -- show or hide content with {{#if VARIABLE}}...{{/if}} syntax
    • Required vs optional -- each variable can be marked as required, with sample values for test emails

    The template validator automatically extracts all variables from the HTML, text, and subject line content and checks for unmatched conditional blocks.

    ","tags":["guide","admin","broadcast","email"]},{"location":"docs/admin/broadcast/email-templates/#version-history","title":"Version History","text":"

    Every change to a template's subject line, HTML content, or text content creates a new version. The full version history is preserved, and any previous version can be restored:

    • Version browsing -- view the subject, HTML, and text content of any past version
    • Rollback -- restore a previous version (creates a new version entry, preserving the audit trail)
    • Change notes -- each version includes a description of what changed
    • Author tracking -- versions record which admin made each change
    ","tags":["guide","admin","broadcast","email"]},{"location":"docs/admin/broadcast/email-templates/#test-emails","title":"Test Emails","text":"

    Before activating a template, send a test email to verify rendering:

    • Variable substitution -- provide test data for each variable to preview the final output
    • Recipient selection -- send the test to any email address
    • Test log -- all test sends are logged with success/failure status and message IDs
    • Rate limited -- 10 test emails per 15 minutes per user to prevent abuse
    ","tags":["guide","admin","broadcast","email"]},{"location":"docs/admin/broadcast/email-templates/#template-caching","title":"Template Caching","text":"

    Rendered templates are cached in memory for performance. The cache is automatically cleared when a template is created, updated, or deleted. Admins can also manually clear the cache from the admin interface.

    ","tags":["guide","admin","broadcast","email"]},{"location":"docs/admin/broadcast/email-templates/#admin-routes","title":"Admin Routes","text":"
    • /app/email-templates -- create and manage email templates with a visual editor
    ","tags":["guide","admin","broadcast","email"]},{"location":"docs/admin/broadcast/newsletter/","title":"Newsletter (Listmonk)","text":"

    Integrated with Listmonk for opt-in mailing lists and newsletter campaigns. Enable with LISTMONK_SYNC_ENABLED=true.

    ","tags":["guide","admin","broadcast","email"]},{"location":"docs/admin/broadcast/newsletter/#managed-lists","title":"Managed Lists","text":"

    The platform automatically creates and maintains 13 subscriber lists in Listmonk:

    List Name Source Tags All Contacts All synced records v2 Campaign Participants Users who sent advocacy emails v2, influence Locations - All Address occupants with email v2, map Support Level 1-4 Addresses by canvass support level v2, map, support Has Campaign Sign Addresses with a yard sign v2, map, signs Users Active non-temp platform accounts v2, users Volunteers Shift signups v2, map, shifts Canvassers Users who completed canvass sessions v2, map, canvass Subscribers Active paid subscribers v2, payments Donors Users who completed a donation v2, payments","tags":["guide","admin","broadcast","email"]},{"location":"docs/admin/broadcast/newsletter/#bulk-sync","title":"Bulk Sync","text":"

    The admin panel provides a manual \"Sync All\" action that synchronizes four data sources to Listmonk:

    1. Campaign participants -- distinct email senders from advocacy campaigns
    2. Location contacts -- address occupants with email, mapped to support level and sign lists
    3. Users -- active platform accounts (excludes TEMP users)
    4. CRM tags -- contacts tagged in the People module, synced to tag-linked Listmonk lists

    Each source upserts subscribers (creates new or merges into existing), preserving existing list memberships and merging metadata attributes.

    ","tags":["guide","admin","broadcast","email"]},{"location":"docs/admin/broadcast/newsletter/#event-driven-sync","title":"Event-Driven Sync","text":"

    In addition to bulk sync, the platform fires real-time subscriber upserts on application events:

    • Shift signup -- adds to Volunteers list
    • Canvass session completed -- adds to Canvassers list
    • Campaign email sent -- adds to Campaign Participants list
    • Subscription activated -- adds to Subscribers list
    • Donation completed -- adds to Donors list
    • Product purchased -- adds to Donors list
    • Address updated (canvass visit) -- updates support level list membership
    • Re-engagement email sent -- updates Volunteers list metadata
    • CRM tag changed -- adds/removes from tag-linked Listmonk lists

    All event-driven syncs are fire-and-forget and silently fail if Listmonk is unreachable.

    ","tags":["guide","admin","broadcast","email"]},{"location":"docs/admin/broadcast/newsletter/#admin-routes","title":"Admin Routes","text":"
    • /app/listmonk (sidebar: \"Newsletter\") -- sync status, subscriber counts, campaign stats, and manual sync trigger
    ","tags":["guide","admin","broadcast","email"]},{"location":"docs/admin/broadcast/sms/","title":"SMS Campaigns","text":"

    Text message outreach via a Termux Android bridge. Uses a real Android phone to send and receive SMS \u2014 no third-party SMS gateway or Twilio account needed.

    Enable with ENABLE_SMS=true or via the setup wizard.

    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#architecture-overview","title":"Architecture Overview","text":"

    The SMS system uses a three-tier architecture where your server communicates with a lightweight Python Flask API running on an Android phone:

    graph LR\n    A[Admin Dashboard<br/>Campaign UI] -->|API calls| B[Express API<br/>BullMQ Queue]\n    B -->|HTTP + API Key| C[Android Phone<br/>Flask on Termux]\n    C -->|termux-sms-send| D[Android SMS]\n    D -->|Carrier Network| E[Recipients]\n    E -->|Reply SMS| D\n    D -->|termux-sms-list| C\n    C -->|HTTP response| B

    Why this approach?

    • No SaaS dependency \u2014 your phone is the SMS gateway, no Twilio/MessageBird/etc.
    • Real phone number \u2014 recipients see a real number, not a short code
    • Two-way messaging \u2014 incoming replies sync automatically
    • Low cost \u2014 just your phone plan's SMS allowance
    • Full control \u2014 FOSS stack end-to-end
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#prerequisites","title":"Prerequisites","text":"

    Before starting setup, you'll need:

    Item Details Android phone Any Android 7+ device with an active SIM card and SMS plan Termux Terminal emulator \u2014 install from F-Droid (not Play Store) Termux:API Termux plugin for SMS/contacts/battery \u2014 install from F-Droid Tailscale (recommended) VPN mesh for stable IP \u2014 install from Play Store Network access Phone must be reachable from the server (Tailscale, LAN, or port forwarding)

    Both Apps MUST Come from F-Droid

    The Play Store version of Termux is abandoned and incompatible with the API plugin. If you install Termux from the Play Store and Termux:API from F-Droid (or vice versa), SMS commands will fail with:

    Termux:API is not yet available on Google Play

    Fix: Uninstall both apps, then reinstall both from F-Droid. They must come from the same source because Android verifies matching app signatures for inter-process communication.

    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#phone-setup","title":"Phone Setup","text":"","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#step-1-install-apps-from-f-droid","title":"Step 1: Install Apps from F-Droid","text":"

    On your Android phone:

    1. Install F-Droid \u2014 download from f-droid.org if you don't have it
    2. Install Termux \u2014 search in F-Droid and install
    3. Install Termux:API \u2014 search in F-Droid and install
    4. Install Termux:Boot (optional) \u2014 for auto-start on phone reboot. Open once after install to register.
    5. Install Tailscale (recommended) \u2014 from Play Store, connect to your tailnet for a stable IP

    termux-api package

    You need two things called \"termux-api\": the F-Droid app (Termux:API) and the Termux package (pkg install termux-api). The setup script installs the package automatically, but the F-Droid app must be installed manually.

    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#step-2-generate-api-key","title":"Step 2: Generate API Key","text":"

    Go to the admin dashboard SMS Setup page (/app/sms/setup) and click Generate API Key. Copy the key \u2014 you'll paste it into the setup command.

    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#step-3-run-the-setup-script","title":"Step 3: Run the Setup Script","text":"

    Open Termux on the phone and run:

    # Clone the SMS server (first time only)\npkg install -y git && git clone --depth 1 --filter=blob:none --sparse \\\n  https://gitea.bnkops.com/admin/changemaker.lite.git ~/sms-server \\\n  && cd ~/sms-server && git sparse-checkout set termux-sms\n\n# Run the setup script \u2014 paste your API key at the end\nbash ~/sms-server/termux-sms/setup.sh YOUR_API_KEY_HERE\n

    The setup script automatically:

    • Installs Python, Flask, termux-api, and openssh
    • Saves the API key to ~/.bashrc
    • Requests SMS and Contacts permissions (tap Allow when prompted)
    • Creates a Termux:Boot auto-start script (if Termux:Boot is installed)
    • Starts the SMS server

    When done, note the Phone URL displayed (e.g. http://100.64.0.5:5001).

    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#recommended-install-service-supervisor","title":"Recommended: Install Service Supervisor","text":"

    After initial setup, install termux-services for reliable process management. This uses runit, a proper UNIX service supervisor that automatically restarts the server if it crashes:

    cd ~/sms-server && bash termux-sms/setup-services.sh\n

    This registers two supervised services:

    • sms-api \u2014 Flask SMS API server (port 5001)
    • sshd-custom \u2014 SSH daemon for remote management (port 8022)
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#step-4-prevent-android-from-killing-termux","title":"Step 4: Prevent Android from Killing Termux","text":"

    This is required for the server to run reliably in the background:

    1. Open Android Settings \u2192 Apps \u2192 Termux \u2192 Battery \u2192 set to Unrestricted
    2. Lock Termux in the recent apps view (long-press the app card \u2192 Lock/Pin)
    3. Samsung phones: also add Termux to Settings \u2192 Device Care \u2192 Battery \u2192 Never Sleeping Apps
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#updating","title":"Updating","text":"

    To pull the latest server code and re-run setup:

    cd ~/sms-server && git pull && bash android/setup.sh YOUR_API_KEY_HERE\n
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#service-management","title":"Service Management","text":"

    If you installed termux-services (recommended):

    # Check status\nsv status sms-api\n\n# Restart\nsv restart sms-api\n\n# Stop\nsv down sms-api\n\n# Start\nsv up sms-api\n\n# View logs\ntail -f ~/logs/sms-api.log\n\n# Health check\ncurl http://127.0.0.1:5001/health\n

    Without termux-services (legacy watchdog):

    # Check if the server is running\ncurl http://127.0.0.1:5001/health\n\n# Restart manually\ncd ~/sms-server/android && bash sms-watchdog.sh\n
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#accessing-the-phone","title":"Accessing the Phone","text":"

    There are several ways to run commands on the phone:

    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#direct-on-phone","title":"Direct (on phone)","text":"

    Simply open the Termux app and type commands. Best for initial setup.

    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#ssh-remote-access","title":"SSH (remote access)","text":"

    Start the SSH server in Termux, then connect from your computer:

    # On the phone (first time only):\npkg install openssh\npasswd  # Set a password\nsshd    # Start SSH server on port 8022\n\n# From your computer:\nssh -p 8022 your-phone-ip\n# Or with Tailscale:\nssh -p 8022 100.x.x.x\n
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#scrcpy-screen-mirror","title":"scrcpy (screen mirror)","text":"

    Mirror the phone screen to your computer \u2014 great for setup:

    # Install scrcpy on your computer (Ubuntu)\nsudo apt install scrcpy\n\n# Connect via USB\nscrcpy\n\n# Or wireless (phone must be on same network)\nscrcpy --tcpip=phone-ip:5555\n
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#setup-wizard","title":"Setup Wizard","text":"

    The admin panel provides a guided three-step wizard at /app/sms/setup:

    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#step-1-prepare-phone","title":"Step 1: Prepare Phone","text":"

    Walks you through installing apps, cloning the server, setting the API key, and starting the Flask server. Generates a shared API key that both the server and phone use for authentication.

    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#step-2-connect","title":"Step 2: Connect","text":"

    Choose how to find your phone's IP address:

    Tailscale Auto-Discovery (Recommended)Manual URL Entry
    1. Enter your Tailscale API key (tskey-api-...)
    2. Click Discover Devices
    3. The wizard queries the Tailscale API and lists all devices on your tailnet
    4. Select your Android phone \u2014 the URL auto-fills with its stable 100.x.x.x IP

    Getting a Tailscale API Key

    Go to Tailscale Admin Console \u2192 Settings \u2192 Keys \u2192 Generate auth key or API access token.

    Enter the phone's URL directly:

    • With Tailscale: http://100.x.x.x:5001 (stable IP, works across networks)
    • On same LAN: http://192.168.x.x:5001 (changes if phone reconnects)
    • Via port forward: http://your-public-ip:5001 (requires router config)
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#step-3-test-save","title":"Step 3: Test & Save","text":"
    1. Click Test Connection \u2014 the wizard calls the phone's /health endpoint
    2. On success, you'll see device uptime and message count
    3. Click Save Configuration \u2014 stores the URL and key encrypted in the database
    4. The enableSms feature flag is automatically enabled
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#how-it-works","title":"How It Works","text":"","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#sending-messages","title":"Sending Messages","text":"
    1. Admin creates an SMS campaign with a message template and contact list
    2. Campaign is started \u2192 messages are queued in BullMQ (one at a time, serial delivery)
    3. For each message, the Express API calls POST /api/sms/send on the phone
    4. The Flask server on the phone executes termux-sms-send to send via Android's native SMS
    5. A notification appears on the phone for each sent message
    6. Results are tracked in the database (success/failure per recipient)
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#receiving-responses","title":"Receiving Responses","text":"

    A background service (sms-response-sync.service.ts) polls the phone's inbox at a configurable interval:

    1. Calls GET /api/sms/inbox?since=<last_sync_timestamp> on the phone
    2. The Flask server runs termux-sms-list to get new messages
    3. Incoming messages are matched to contacts and classified by keyword
    4. Threaded conversations are maintained per contact
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#device-monitoring","title":"Device Monitoring","text":"

    A background service (sms-device-monitor.service.ts) checks phone health periodically:

    • Battery level, charging status, temperature
    • Server uptime and total messages sent
    • Connection status (available/unreachable)
    • Results displayed on the SMS Dashboard
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#key-features","title":"Key Features","text":"
    • Contact lists \u2014 import, tag, and segment contacts for targeted outreach
    • Message templates \u2014 reusable templates with {name} variable placeholders
    • BullMQ queue \u2014 serial delivery with configurable delays between messages
    • Response sync \u2014 incoming SMS replies synced and classified automatically
    • Device monitoring \u2014 battery, uptime, and connectivity reported in real-time
    • Conversation view \u2014 threaded message history per contact
    • Retry logic \u2014 configurable retry attempts for failed deliveries
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#admin-routes","title":"Admin Routes","text":"Route Description /app/sms/setup Guided setup wizard with Tailscale auto-discovery /app/sms SMS dashboard \u2014 campaign overview and device status /app/sms/contacts Manage contact lists and entries /app/sms/campaigns Create and monitor SMS campaigns /app/sms/conversations View threaded conversations with contacts","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#configuration","title":"Configuration","text":"","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#environment-variables","title":"Environment Variables","text":"Variable Default Description ENABLE_SMS false Feature flag (also set via setup wizard) TERMUX_API_URL \u2014 Phone URL, e.g. http://100.x.x.x:5001 TERMUX_API_KEY \u2014 Shared API key for authentication SMS_DELAY_BETWEEN_MS 1000 Delay between messages in a campaign (ms) SMS_MAX_RETRIES 3 Retry attempts for failed sends SMS_RESPONSE_SYNC_INTERVAL_MS 10000 How often to check for incoming replies (ms) SMS_DEVICE_MONITOR_INTERVAL_MS 30000 How often to check device health (ms) TAILSCALE_API_KEY \u2014 Tailscale API key for auto-discovery TAILSCALE_TAILNET \u2014 Tailscale tailnet name (optional)

    Note

    When you use the setup wizard, configuration is stored in the database and takes priority over environment variables. You don't need to set env vars if you use the wizard.

    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#phone-side-configuration","title":"Phone-Side Configuration","text":"

    On the phone, only one environment variable is needed:

    export SMS_API_SECRET='your-64-char-hex-key'\n

    The Flask server also accepts TERMUX_API_KEY as an alias for backwards compatibility.

    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#phone-api-endpoints","title":"Phone API Endpoints","text":"

    The Flask server running on the phone exposes these endpoints on port 5001:

    Method Endpoint Auth Description GET /health No Server status, uptime, messages sent GET / No Web dashboard with endpoint documentation POST /api/sms/send Yes Send an SMS message POST /api/sms/send-reply Yes Send a reply with conversation tracking GET /api/sms/inbox No Get incoming messages (with since filter) GET /api/sms/list No List messages with pagination GET /api/sms/history No Get SMS history for a phone number GET /api/device/battery No Battery level, health, temperature GET /api/device/location No GPS coordinates (requires permission) GET /api/device/info No Device info + battery + uptime GET /api/contacts/list No Phone address book (with search) POST /api/campaign/notify No Push notification to device

    Authentication uses the X-API-Key header with the shared secret.

    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#troubleshooting","title":"Troubleshooting","text":"","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#phone-cant-be-reached","title":"Phone can't be reached","text":"

    Symptoms: Test connection fails, \"Connection refused\" or timeout.

    Checks:

    1. Is the Flask server running? Check Termux \u2014 you should see the startup banner
    2. Is the IP correct? Run ifconfig in Termux to find the current IP
    3. Are they on the same network? If not using Tailscale, both must be on the same LAN
    4. Is Tailscale connected? Check the Tailscale app on the phone \u2014 it should show \"Connected\"
    5. Firewall? Android rarely blocks incoming connections on Termux, but check if any firewall app is installed
    # Quick test from your server\ncurl http://PHONE_IP:5001/health\n
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#authentication-required-errors","title":"\"Authentication required\" errors","text":"

    Symptoms: API calls return 401 with \"Authentication required\".

    Fix: The API key on the phone doesn't match the one in the admin panel.

    # On the phone, check the current key\necho $SMS_API_SECRET\n\n# If it doesn't match, update it\nexport SMS_API_SECRET='correct-key-from-admin-panel'\necho 'export SMS_API_SECRET=\"correct-key-from-admin-panel\"' >> ~/.bashrc\n\n# Restart the server\nsv restart sms-api\n# Or without termux-services: pkill -f termux-sms-api-server.py && cd ~/sms-server/android && python termux-sms-api-server.py\n
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#sms-not-sending","title":"SMS not sending","text":"

    Symptoms: Server responds successfully but messages don't arrive.

    Checks:

    1. SMS permissions granted? Go to Android Settings \u2192 Apps \u2192 Termux:API \u2192 Permissions \u2192 SMS
    2. Active SIM card? The phone needs a working SIM with SMS capability
    3. Message too long? Maximum 1600 characters per message
    4. Rate limited? Minimum 1 second between messages (carrier may enforce longer delays)
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#termux-keeps-getting-killed","title":"Termux keeps getting killed","text":"

    Symptoms: Server stops after some time, especially when phone screen is off.

    Fix:

    1. Install termux-services (if not already): bash ~/sms-server/android/setup-services.sh \u2014 this uses runit, a proper service supervisor that auto-restarts the server immediately if it crashes
    2. Disable battery optimization: Android Settings \u2192 Apps \u2192 Termux \u2192 Battery \u2192 Unrestricted
    3. Lock Termux in recent apps \u2014 long-press the app card \u2192 Lock/Pin
    4. Samsung: also add Termux, Termux:API, and Termux:Boot to Settings \u2192 Device Care \u2192 Battery \u2192 Never Sleeping Apps
    5. Acquire wake lock: Run termux-wake-lock in Termux (included in boot script)
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#server-wont-start-missing-sms_api_secret","title":"Server won't start \u2014 \"Missing SMS_API_SECRET\"","text":"

    Symptoms: Server exits immediately with a security error.

    Fix: Set the API key environment variable:

    # Generate a new key if you don't have one\npython -c \"import secrets; print(secrets.token_hex(32))\"\n\n# Set it\nexport SMS_API_SECRET='your-generated-key'\necho 'export SMS_API_SECRET=\"your-key\"' >> ~/.bashrc\n
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#rcs-chat-features-interfering-with-replies","title":"RCS / Chat Features interfering with replies","text":"

    Symptoms: You send SMS messages successfully but some or all replies never appear in the system. Recipients say they replied, but the conversation shows no inbound messages.

    Cause: Google Messages enables RCS (Rich Communication Services) by default. When RCS is active, replies from recipients who also have RCS may be sent over data/Wi-Fi instead of the carrier SMS channel. The Termux server only reads the SMS inbox via termux-sms-list, so RCS messages are invisible to it.

    Fix: Disable RCS on the SMS phone:

    1. Open Google Messages on the phone
    2. Tap the profile icon (top right) \u2192 Messages settings
    3. Tap RCS chats (or \"Chat features\")
    4. Turn off \"Turn on RCS chats\"

    This must be done on the phone running the SMS server

    Disabling RCS on the server phone forces all outgoing messages to use plain SMS, and ensures replies also come back as SMS. You do not need recipients to change anything on their end \u2014 when the server phone sends a plain SMS, the reply will be plain SMS as well (unless the recipient's carrier forces RCS-only, which is rare).

    Additional checks:

    • Some carriers (e.g. Google Fi, Jio) enable RCS at the carrier level. If disabling in the app doesn't help, contact the carrier to disable RCS on the SIM.
    • If the phone has Samsung Messages instead of Google Messages, go to Samsung Messages \u2192 Settings \u2192 Chat settings \u2192 turn off.
    • After disabling RCS, restart the phone and verify by sending a test message \u2014 the send button should show an SMS label, not \"Chat\".
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/broadcast/sms/#updating-the-sms-server","title":"Updating the SMS server","text":"

    To pull the latest version of the server code:

    cd ~/sms-server\ngit pull\n\n# Restart the server\nsv restart sms-api\n# Or without termux-services: pkill -f termux-sms-api-server.py && cd android && python termux-sms-api-server.py\n
    ","tags":["guide","admin","broadcast","sms"]},{"location":"docs/admin/map/","title":"Map & Canvassing","text":"

    Manage locations, organize canvassing territories, schedule volunteer shifts, and coordinate door-to-door outreach.

    ","tags":["guide","admin","map"]},{"location":"docs/admin/map/#in-this-section","title":"In This Section","text":"
    • Locations \u2014 import addresses via CSV or NAR, geocode with multiple providers, and manage the location database
    • Areas \u2014 draw polygon territories on the map to organize canvassing regions
    • Shifts \u2014 schedule volunteer time slots with recurring patterns and calendar views
    • Canvassing \u2014 canvass dashboard, walk sheets, contact export, and session management
    • Data Quality \u2014 geocoding quality metrics, provider distribution, and confidence analysis
    • Map Settings \u2014 configure map center, zoom level, and QR code links
    ","tags":["guide","admin","map"]},{"location":"docs/admin/map/areas/","title":"Areas (Cuts)","text":"

    Draw polygon regions on the map to define canvassing territories. Areas organize locations into manageable chunks for volunteers.

    ","tags":["guide","admin","map","canvassing"]},{"location":"docs/admin/map/areas/#key-features","title":"Key Features","text":"
    • Polygon drawing \u2014 use the map editor at /app/map/cuts to draw, edit, and delete area boundaries
    • Automatic association \u2014 locations within an area's polygon boundary are automatically linked
    • Area stats \u2014 total addresses, visited count, coverage percentage per area
    • Color coding \u2014 assign colors to visually distinguish areas on the map
    ","tags":["guide","admin","map","canvassing"]},{"location":"docs/admin/map/areas/#area-import-wizard","title":"Area Import Wizard","text":"

    Bulk-import addresses into an area from multiple data sources:

    • OpenStreetMap (OSM) \u2014 pull building addresses from Nominatim within the area
    • NAR (National Address Register) \u2014 import from the Canadian federal address dataset
    • Reverse geocode grid \u2014 generate a grid of points and reverse-geocode to discover addresses
    • Deduplication \u2014 imported addresses are checked against existing locations to avoid duplicates
    • Progress tracking \u2014 real-time status per source during import
    ","tags":["guide","admin","map","canvassing"]},{"location":"docs/admin/map/areas/#admin-routes","title":"Admin Routes","text":"
    • /app/map/cuts \u2014 draw and manage canvassing areas
    • /app/map/cuts/:id/export \u2014 printable location report for a cut
    ","tags":["guide","admin","map","canvassing"]},{"location":"docs/admin/map/canvassing/","title":"Canvassing","text":"

    Coordinate and monitor volunteer door-to-door outreach with the canvass dashboard, walk sheets, and contact export tools.

    ","tags":["guide","admin","map","canvassing"]},{"location":"docs/admin/map/canvassing/#canvass-dashboard","title":"Canvass Dashboard","text":"

    From /app/map/canvass:

    • Active sessions \u2014 see which volunteers are currently canvassing and their real-time positions
    • Leaderboard \u2014 volunteer rankings by visit count
    • Activity feed \u2014 recent visit outcomes across all areas
    • Stats \u2014 total sessions, visits recorded, and outcome breakdowns
    ","tags":["guide","admin","map","canvassing"]},{"location":"docs/admin/map/canvassing/#walk-sheets-exports","title":"Walk Sheets & Exports","text":"
    • Walk sheet \u2014 printable form at /app/map/walk-sheet with space for recording visit outcomes; includes up to 3 configurable QR codes
    • Cut export \u2014 printable location report at /app/map/cuts/:id/export for a specific canvassing area
    ","tags":["guide","admin","map","canvassing"]},{"location":"docs/admin/map/canvassing/#canvass-contact-export","title":"Canvass Contact Export","text":"

    Bridge canvassing data with advocacy campaigns:

    • Filter by outcome \u2014 include specific visit outcomes (spoke with, left literature, come back later)
    • Support level range \u2014 filter by recorded support level
    • Area selection \u2014 limit export to specific areas
    • Campaign targeting \u2014 export contacts as recipients for an advocacy campaign
    ","tags":["guide","admin","map","canvassing"]},{"location":"docs/admin/map/canvassing/#admin-routes","title":"Admin Routes","text":"
    • /app/map/canvass \u2014 canvass dashboard
    • /app/map/walk-sheet \u2014 printable walk sheet
    ","tags":["guide","admin","map","canvassing"]},{"location":"docs/admin/map/data-quality/","title":"Data Quality","text":"

    Monitor geocoding accuracy and coverage from /app/map/data-quality.

    ","tags":["guide","admin","map","analytics"]},{"location":"docs/admin/map/data-quality/#key-metrics","title":"Key Metrics","text":"
    • Geocoding success rate \u2014 percentage of locations with valid coordinates
    • Provider distribution \u2014 breakdown of which geocoding provider was used per location
    • Confidence scores \u2014 distribution of geocoding confidence levels across the dataset
    • Missing data \u2014 locations without coordinates, postal codes, or province assignments
    • Bulk re-geocode \u2014 re-process failed or low-confidence locations with a different provider
    ","tags":["guide","admin","map","analytics"]},{"location":"docs/admin/map/data-quality/#admin-routes","title":"Admin Routes","text":"
    • /app/map/data-quality \u2014 geocoding quality dashboard
    ","tags":["guide","admin","map","analytics"]},{"location":"docs/admin/map/locations/","title":"Locations","text":"

    Import addresses via CSV or the Canadian National Address Register (NAR), geocode them with multiple providers, and manage the location database.

    ","tags":["guide","admin","map","locations"]},{"location":"docs/admin/map/locations/#adding-locations","title":"Adding Locations","text":"
    • Click-to-add \u2014 click on the admin map to drop a new location marker
    • Form entry \u2014 manually enter address details
    • CSV import \u2014 upload a CSV with address columns; the system geocodes each row
    • NAR import \u2014 import Canadian National Address Register data with province, city, postal code, and residential-only filters
    ","tags":["guide","admin","map","locations"]},{"location":"docs/admin/map/locations/#geocoding","title":"Geocoding","text":"

    Locations are geocoded automatically using a multi-provider system supporting Nominatim, ArcGIS, Photon, Mapbox, Google, and LocationIQ. Failed entries can be re-geocoded individually or in bulk.

    ","tags":["guide","admin","map","locations"]},{"location":"docs/admin/map/locations/#bulk-operations","title":"Bulk Operations","text":"

    Select multiple locations for:

    • Re-geocoding with a different provider
    • Tagging or re-tagging
    • Deletion
    • CSV export
    ","tags":["guide","admin","map","locations"]},{"location":"docs/admin/map/locations/#admin-routes","title":"Admin Routes","text":"
    • /app/map \u2014 location CRUD, CSV import/export, geocoding, area import wizard
    ","tags":["guide","admin","map","locations"]},{"location":"docs/admin/map/settings/","title":"Map Settings","text":"

    Configure the default map view and QR code links from /app/map/settings.

    ","tags":["guide","admin","map","configuration"]},{"location":"docs/admin/map/settings/#settings","title":"Settings","text":"
    • Map center \u2014 latitude and longitude for the default map center point
    • Default zoom \u2014 initial zoom level when maps load (1-18)
    • QR code links \u2014 up to 3 configurable URLs that appear as QR codes on printed walk sheets (e.g., campaign page, shift signup, volunteer portal)
    ","tags":["guide","admin","map","configuration"]},{"location":"docs/admin/map/settings/#admin-routes","title":"Admin Routes","text":"
    • /app/map/settings \u2014 map configuration
    ","tags":["guide","admin","map","configuration"]},{"location":"docs/admin/map/shifts/","title":"Shifts","text":"

    Schedule volunteer time slots and let people sign up through a public page. Shifts can be linked to specific areas so volunteers know where they'll be canvassing.

    ","tags":["guide","admin","map","shifts"]},{"location":"docs/admin/map/shifts/#creating-shifts","title":"Creating Shifts","text":"
    • Single shifts \u2014 set date, time, location description, and optional area assignment
    • Recurring shifts \u2014 create series with daily, weekly, or monthly frequency; weekly allows specific day selection
    • Calendar view \u2014 dedicated calendar tab showing shifts by date; click any date to create a new shift pre-filled
    ","tags":["guide","admin","map","shifts"]},{"location":"docs/admin/map/shifts/#series-management","title":"Series Management","text":"
    • Edit modes \u2014 when editing a recurring shift, choose: this shift only, this and future, or all in series
    • Date range \u2014 define start and optional end date; generates up to 12 weeks (capped at 100 shifts)
    • Detach \u2014 remove a shift from its series to edit independently
    ","tags":["guide","admin","map","shifts"]},{"location":"docs/admin/map/shifts/#signups","title":"Signups","text":"
    • Signup drawer \u2014 view all signups for a shift in the admin panel
    • Capacity \u2014 optionally set maximum volunteer count per shift
    • Confirmation emails \u2014 automatic email sent when a volunteer signs up or cancels
    ","tags":["guide","admin","map","shifts"]},{"location":"docs/admin/map/shifts/#admin-routes","title":"Admin Routes","text":"
    • /app/map/shifts \u2014 shift CRUD, calendar view, signup management
    ","tags":["guide","admin","map","shifts"]},{"location":"docs/admin/media/","title":"Media","text":"

    Upload, organize, and share campaign videos and photos with built-in analytics and engagement features. Enable with enableMediaFeatures in Settings.

    ","tags":["guide","admin","media"]},{"location":"docs/admin/media/#in-this-section","title":"In This Section","text":"
    • Library \u2014 upload videos and photos, manage metadata, schedule publishing, and generate preview links
    • Analytics \u2014 view counts, watch time, completion rates, traffic sources, and viewer activity
    • Curated Gallery \u2014 playlists, shorts feed, and featured content for the public gallery
    • Moderation \u2014 comment review, word filters, and content moderation tools
    • Gallery Ads \u2014 promotional cards with audience targeting, scheduling, and click-through analytics
    ","tags":["guide","admin","media"]},{"location":"docs/admin/media/ads/","title":"Gallery Ads","text":"

    Create promotional cards that appear in the public media gallery and documentation site. Manage from /app/media/ads.

    ","tags":["guide","admin","media"]},{"location":"docs/admin/media/ads/#key-features","title":"Key Features","text":"
    • Ad CRUD \u2014 create ads with title, description, image, and click-through URL
    • Placement targeting \u2014 assign ads to specific placements (gallery sidebar, gallery feed, docs sidebar)
    • Scheduling \u2014 set start and end dates for time-limited promotions
    • Click tracking \u2014 view impressions and click-through rates per ad
    • Priority ordering \u2014 control which ads appear first when multiple are active
    ","tags":["guide","admin","media"]},{"location":"docs/admin/media/ads/#admin-routes","title":"Admin Routes","text":"
    • /app/media/ads \u2014 gallery ad management and analytics
    ","tags":["guide","admin","media"]},{"location":"docs/admin/media/analytics/","title":"Analytics","text":"

    Track video engagement with GDPR-compliant analytics (IP hashing, 90-day retention).

    ","tags":["guide","admin","media","analytics"]},{"location":"docs/admin/media/analytics/#per-video-metrics","title":"Per-Video Metrics","text":"

    Each video tracks:

    • View count and unique viewers
    • Average watch time and completion rate
    • Traffic sources \u2014 direct, embedded, shared
    • Registered viewer activity (when logged in)
    ","tags":["guide","admin","media","analytics"]},{"location":"docs/admin/media/analytics/#global-dashboard","title":"Global Dashboard","text":"

    The analytics dashboard at /app/media/analytics provides:

    • Aggregate view counts across all videos
    • Top-performing content by views and completion rate
    • Viewer trends over time
    • Traffic source breakdown
    ","tags":["guide","admin","media","analytics"]},{"location":"docs/admin/media/analytics/#tracking","title":"Tracking","text":"

    Public endpoints record engagement:

    • View initiation
    • 10-second heartbeat intervals
    • navigator.sendBeacon for reliable end-of-session reporting
    ","tags":["guide","admin","media","analytics"]},{"location":"docs/admin/media/analytics/#admin-routes","title":"Admin Routes","text":"
    • /app/media/analytics \u2014 global analytics dashboard
    ","tags":["guide","admin","media","analytics"]},{"location":"docs/admin/media/curated/","title":"Curated Gallery","text":"

    Curate the public gallery experience with playlists, a shorts feed, and featured content.

    ","tags":["guide","admin","media","gallery"]},{"location":"docs/admin/media/curated/#playlists","title":"Playlists","text":"

    From /app/media/curated:

    • Three types \u2014 admin playlists (managed), user playlists (personal), and public playlists (community)
    • Drag-reorder \u2014 arrange videos within a playlist
    • Featured carousel \u2014 feature playlists on the gallery homepage
    • Dedicated viewer \u2014 full playlist playback page with up-next queue
    ","tags":["guide","admin","media","gallery"]},{"location":"docs/admin/media/curated/#shorts-feed","title":"Shorts Feed","text":"

    TikTok-style vertical video feed for clips under 60 seconds:

    • Automatic classification \u2014 videos under 60 seconds are flagged as shorts
    • Vertical feed \u2014 mobile-optimized swipeable interface at /gallery/shorts
    • Autoplay \u2014 continuous playback as viewers scroll
    ","tags":["guide","admin","media","gallery"]},{"location":"docs/admin/media/curated/#admin-routes","title":"Admin Routes","text":"
    • /app/media/curated \u2014 playlist management
    ","tags":["guide","admin","media","gallery"]},{"location":"docs/admin/media/library/","title":"Library","text":"

    The media library at /app/media/library is where you upload, organize, and publish video and photo content.

    ","tags":["guide","admin","media","videos"]},{"location":"docs/admin/media/library/#video-upload","title":"Video Upload","text":"
    • Drag-and-drop \u2014 single or batch upload (up to 10GB per file)
    • Supported formats \u2014 MP4, MOV, AVI, MKV, WebM, M4V, FLV
    • Automatic metadata \u2014 FFprobe extracts duration, dimensions, orientation, quality, and audio info
    • Quick actions \u2014 hover a video card for Edit (E), Preview (P), Analytics (A), Schedule (S) keyboard shortcuts
    ","tags":["guide","admin","media","videos"]},{"location":"docs/admin/media/library/#photo-management","title":"Photo Management","text":"
    • Albums \u2014 organize photos into named collections with cover images
    • Bulk uploads \u2014 drag-and-drop multiple photos with automatic metadata extraction
    • Photo picker \u2014 insert photos into landing pages and email templates via a modal picker
    ","tags":["guide","admin","media","videos"]},{"location":"docs/admin/media/library/#scheduled-publishing","title":"Scheduled Publishing","text":"
    • Publish/unpublish dates \u2014 set future dates for automatic state changes
    • Timezone support \u2014 11 supported timezones
    • Calendar view \u2014 visualize scheduled items on the Calendar tab
    • BullMQ automation \u2014 jobs fire at scheduled times
    ","tags":["guide","admin","media","videos"]},{"location":"docs/admin/media/library/#preview-links","title":"Preview Links","text":"

    Generate 24-hour JWT-authenticated preview links for unpublished videos \u2014 useful for stakeholder review before publishing.

    ","tags":["guide","admin","media","videos"]},{"location":"docs/admin/media/library/#admin-routes","title":"Admin Routes","text":"
    • /app/media/library \u2014 video and photo management
    • /app/media/jobs \u2014 processing job queue monitoring
    ","tags":["guide","admin","media","videos"]},{"location":"docs/admin/media/moderation/","title":"Moderation","text":"

    Admin tools for reviewing and managing comments across all media content at /app/media/moderation.

    ","tags":["guide","admin","media","moderation"]},{"location":"docs/admin/media/moderation/#moderation-dashboard","title":"Moderation Dashboard","text":"
    • Filter by status \u2014 pending, safe, flagged, hidden
    • Status counts \u2014 summary stats showing total, pending, flagged, hidden, and safe comments
    • Search \u2014 filter by video, date range, or text content
    ","tags":["guide","admin","media","moderation"]},{"location":"docs/admin/media/moderation/#moderation-actions","title":"Moderation Actions","text":"

    For each comment, admins can:

    • Approve \u2014 mark as safe and unhide if previously hidden
    • Hide \u2014 remove from public view with a reason (manual, word filter, spam, or link)
    • Unhide \u2014 restore a previously hidden comment
    • Delete \u2014 permanently remove
    • Add notes \u2014 internal moderation notes (not visible to users)
    ","tags":["guide","admin","media","moderation"]},{"location":"docs/admin/media/moderation/#word-filter","title":"Word Filter","text":"

    A configurable list of words with severity levels:

    Severity Action High Auto-blocks the comment Medium Auto-hides for review Low Flags for moderator attention Custom User-defined severity

    The filter list is cached with a 1-minute TTL and invalidated on changes.

    ","tags":["guide","admin","media","moderation"]},{"location":"docs/admin/media/moderation/#admin-routes","title":"Admin Routes","text":"
    • /app/media/moderation \u2014 comment moderation and word filter management
    ","tags":["guide","admin","media","moderation"]},{"location":"docs/admin/payments/","title":"Payments","text":"

    Accept memberships, product sales, and donations through Stripe. Enable with enablePayments in Settings.

    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/#in-this-section","title":"In This Section","text":"
    • Products \u2014 manage merchandise and one-time purchase items with inventory tracking
    • Donations \u2014 donation pages with goals, suggested amounts, and branded thank-you messages
    • Plans \u2014 recurring subscription plans with monthly and yearly billing
    • Settings \u2014 Stripe API key configuration with encrypted storage
    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/#how-it-works","title":"How It Works","text":"
    1. Enable payments in Settings or .env (ENABLE_PAYMENTS=true)
    2. Configure Stripe API keys in Settings > Payments (stored encrypted with ENCRYPTION_KEY)
    3. Payment widgets become available on landing pages and MkDocs pages
    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/donations/","title":"Donations","text":"

    Create custom branded donation landing pages with independent branding and goals.

    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/donations/#donation-pages","title":"Donation Pages","text":"

    From /app/donation-pages:

    • Custom branding \u2014 each page has its own title, description, and cover image
    • Configurable amounts \u2014 set suggested donation amounts per page
    • Thank-you messages \u2014 customizable post-donation confirmation
    • Public slugs \u2014 shareable URL at /donate/:slug
    • Goal tracking \u2014 fundraising goals with progress indicators
    • Multiple campaigns \u2014 run several pages simultaneously with independent tracking
    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/donations/#donation-management","title":"Donation Management","text":"

    From /app/donations:

    • View all donations with date, amount, donor info, and status
    • Filter by donation page, date range, or amount
    • Export to CSV for accounting and tax receipts
    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/donations/#admin-routes","title":"Admin Routes","text":"
    • /app/donations \u2014 donation management
    • /app/donation-pages \u2014 donation page CRUD
    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/plans/","title":"Plans","text":"

    Create and manage recurring subscription plans for campaign supporters at /app/plans.

    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/plans/#key-features","title":"Key Features","text":"
    • Tiered plans \u2014 multiple subscription tiers with different pricing and benefits
    • Billing cycles \u2014 monthly and yearly billing options
    • Stripe integration \u2014 subscriptions managed through Stripe for reliable recurring payments
    • Subscriber tracking \u2014 view active subscribers, MRR, and churn metrics
    • Public pricing page \u2014 plans displayed at /pricing
    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/plans/#admin-routes","title":"Admin Routes","text":"
    • /app/plans \u2014 subscription plan management
    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/products/","title":"Products","text":"

    Manage campaign merchandise and one-time purchase items at /app/products.

    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/products/#key-features","title":"Key Features","text":"
    • Product CRUD \u2014 create products with title, description, price, and images
    • Inventory management \u2014 track stock levels and set low-stock alerts
    • Stripe checkout \u2014 seamless payment flow via Stripe
    • Public shop \u2014 products displayed at /shop for public browsing and purchase
    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/products/#admin-routes","title":"Admin Routes","text":"
    • /app/products \u2014 product management
    ","tags":["guide","admin","payments"]},{"location":"docs/admin/payments/settings/","title":"Payment Settings","text":"

    Configure Stripe integration from Settings > Payments.

    ","tags":["guide","admin","payments","configuration"]},{"location":"docs/admin/payments/settings/#stripe-configuration","title":"Stripe Configuration","text":"
    • Publishable key \u2014 used by the frontend for Stripe Elements and Checkout
    • Secret key \u2014 used by the API for creating charges and managing subscriptions
    • Encrypted storage \u2014 both keys are stored encrypted in the database using the ENCRYPTION_KEY environment variable (AES encryption)
    ","tags":["guide","admin","payments","configuration"]},{"location":"docs/admin/payments/settings/#webhook","title":"Webhook","text":"

    Stripe webhooks are automatically configured to handle:

    • Successful payments and subscription renewals
    • Failed payments and subscription cancellations
    • Refunds and disputes
    ","tags":["guide","admin","payments","configuration"]},{"location":"docs/admin/payments/settings/#admin-routes","title":"Admin Routes","text":"
    • /app/settings (Payments tab) \u2014 Stripe key configuration
    ","tags":["guide","admin","payments","configuration"]},{"location":"docs/admin/services/","title":"Services","text":"

    Manage the platform's infrastructure services, monitoring stack, and third-party integrations.

    ","tags":["guide","admin","services"]},{"location":"docs/admin/services/#in-this-section","title":"In This Section","text":"
    • Tunnel \u2014 Pangolin tunnel management for public access without port forwarding
    • CrowdSec & Security \u2014 CrowdSec Manager, Tinyauth forward-auth, ISP whitelisting, and Turnstile captcha on the Pangolin server
    • Monitoring \u2014 Prometheus metrics, Grafana dashboards, and Alertmanager
    • Integrations \u2014 Chat, video conferencing, password manager, whiteboard, Git hosting, automation, and QR codes
    • User Provisioning \u2014 automatic account sync across integrated services
    ","tags":["guide","admin","services"]},{"location":"docs/admin/services/crowdsec/","title":"CrowdSec Manager & Security Configuration","text":"

    This page covers the CrowdSec Manager web UI on the Pangolin server, protected behind Tinyauth authentication, along with tuning of CrowdSec security rules and enabling Cloudflare Turnstile captcha for the CrowdSec bouncer.

    ","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#architecture","title":"Architecture","text":"
    graph LR\n    User -->|HTTPS| Traefik\n    Traefik -->|forwardAuth| Tinyauth\n    Tinyauth -->|authenticated| Traefik\n    Traefik -->|proxy| CrowdSec-Manager\n    CrowdSec-Manager -->|API| CrowdSec\n    Traefik -->|bouncer plugin| CrowdSec\n    CrowdSec -->|captcha decision| Turnstile[Cloudflare Turnstile]

    All services run on the same Docker Compose stack and share the pangolin network. Traefik reaches them through Gerbil's network namespace.

    ","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#components-added","title":"Components Added","text":"","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#crowdsec-manager","title":"CrowdSec Manager","text":"

    Image: hhftechnology/crowdsec-manager:1.1.0

    A web UI for managing CrowdSec operations \u2014 viewing alerts, decisions, managing bouncers, and configuring scenarios. It has read-only access to Traefik and CrowdSec configs and read-write access to its own data and backups.

    Accessible at: https://crowdsec.bnkserve.org

    ","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#tinyauth","title":"Tinyauth","text":"

    Image: ghcr.io/steveiliop56/tinyauth:v4

    A lightweight forward-auth middleware that protects the CrowdSec Manager dashboard with a login screen. Traefik's forwardAuth middleware checks every request to the manager against Tinyauth before allowing access.

    Login page at: https://auth.bnkserve.org

    User credentials are stored in a users file (/data/users) mounted from the host, using bcrypt-hashed passwords.

    Special Characters in Passwords

    Tinyauth v4 has a known issue where special characters (@, !, etc.) in passwords can cause login failures through the browser, even though the bcrypt hash verifies correctly via the CLI. Use alphanumeric passwords to avoid this.

    ","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#traefik-routing","title":"Traefik Routing","text":"","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#routers","title":"Routers","text":"Router Domain Middleware Purpose crowdsec-manager-router crowdsec.bnkserve.org security-headers, tinyauth Dashboard (HTTPS) crowdsec-manager-redirect crowdsec.bnkserve.org redirect-to-https HTTP \u2192 HTTPS redirect tinyauth-router auth.bnkserve.org security-headers Auth login page (HTTPS) tinyauth-redirect auth.bnkserve.org redirect-to-https HTTP \u2192 HTTPS redirect

    No tinyauth middleware on the tinyauth router

    The tinyauth-router must not have the tinyauth forwardAuth middleware applied \u2014 this would create an infinite redirect loop.

    ","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#middleware","title":"Middleware","text":"

    The tinyauth forwardAuth middleware forwards every request to http://tinyauth:3000/api/auth/traefik. If the user has a valid session cookie (scoped to .bnkserve.org), the request passes through. Otherwise, the user is redirected to the Tinyauth login page.

    tinyauth:\n  forwardAuth:\n    address: http://tinyauth:3000/api/auth/traefik\n    trustForwardHeader: true\n    authResponseHeaders:\n      - X-Forwarded-User\n
    ","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#crowdsec-tuning","title":"CrowdSec Tuning","text":"","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#relaxed-crawl-detection","title":"Relaxed Crawl Detection","text":"

    The crowdsecurity/http-crawl-non_statics scenario was triggering on legitimate Canadian users browsing the site. The local override at /etc/crowdsec/scenarios/http-crawl-non_statics.yaml (replacing the hub symlink) has relaxed thresholds:

    Parameter Before After Effect capacity 40 80 Twice as many distinct pages before triggering leakspeed 0.5s 0.25s Bucket drains twice as fast

    Combined effect: 4x more lenient \u2014 a user must hit 80+ distinct non-static pages faster than 1 every 0.25 seconds to trigger a captcha.

    ","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#canadian-isp-whitelist","title":"Canadian ISP Whitelist","text":"

    A whitelist expression in /etc/crowdsec/parsers/s02-enrich/mywhitelists.yaml exempts traffic from major Canadian ISPs from all CrowdSec scenarios:

    expression:\n  - evt.Meta.ASNNumber in ['812', '852', '6327', '5645', '20365', '25668', '577']\n
    AS Number ISP 812 Rogers Communications 852 TELUS Communications 6327 Shaw Communications 5645 TekSavvy 20365 Freedom Mobile 25668 CipherKey 577 Bell Canada

    Field name

    The GeoIP enricher populates evt.Meta.ASNNumber (not ASNumber). This can be verified by inspecting /etc/crowdsec/parsers/s02-enrich/geoip-enrich.yaml.

    ","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#cloudflare-turnstile-captcha","title":"Cloudflare Turnstile Captcha","text":"

    Previously, CrowdSec captcha decisions resulted in a hard 403 block because no captcha provider was configured. Now, users with a captcha decision see a Cloudflare Turnstile challenge page and can proceed after solving it.

    Configuration added to the CrowdSec bouncer plugin in dynamic_config.yml:

    captchaProvider: turnstile\ncaptchaSiteKey: <site-key>\ncaptchaSecretKey: <secret-key>\ncaptchaHTMLFilePath: /etc/traefik/captcha.html\n

    Captcha HTML template path

    The captcha.html template is copied from the plugin source to /etc/traefik/captcha.html (the mounted config volume). Do not reference the /plugins-storage/ path directly \u2014 the hash in that path changes on every Traefik restart.

    ","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#dns-records","title":"DNS Records","text":"

    Two A records pointing to 72.11.155.21:

    Record Purpose crowdsec.bnkserve.org CrowdSec Manager dashboard auth.bnkserve.org Tinyauth login page","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/crowdsec/#verification","title":"Verification","text":"
    # Check containers are running and healthy\ndocker ps --filter name=crowdsec-manager --filter name=tinyauth\n\n# Check both are on the pangolin network\ndocker network inspect pangolin --format '{{range .Containers}}{{.Name}} {{end}}'\n\n# Verify no Canadian ISPs in active decisions\ndocker exec crowdsec cscli decisions list | grep \"CA\"\n\n# Check CrowdSec whitelist is loaded\ndocker exec crowdsec cscli parsers inspect mywhitelists\n\n# Check Traefik logs for captcha errors\ndocker logs traefik 2>&1 | grep -i captcha\n
    ","tags":["guide","admin","services","security"]},{"location":"docs/admin/services/integrations/","title":"Integrations","text":"

    Changemaker Lite integrates with several self-hosted services. Each runs as a Docker container and can be enabled independently.

    ","tags":["guide","admin","services","integrations"]},{"location":"docs/admin/services/integrations/#team-chat-rocketchat","title":"Team Chat (Rocket.Chat)","text":"

    Self-hosted team chat for volunteer coordination. Enable with enableChat in Settings.

    • Channels & DMs \u2014 organize conversations by topic, team, or campaign
    • Iframe integration \u2014 embedded in the admin dashboard and volunteer portal
    • Floating widget \u2014 minimizable chat FAB on admin pages (toggleable in Settings)
    • SSO-ready \u2014 iframe authentication for seamless login
    • Mobile apps \u2014 native Rocket.Chat apps work with your instance
    • Routes: /app/services/rocketchat, /volunteer/chat
    ","tags":["guide","admin","services","integrations"]},{"location":"docs/admin/services/integrations/#video-conferencing-jitsi-meet","title":"Video Conferencing (Jitsi Meet)","text":"

    Self-hosted video calls integrated with Rocket.Chat via JWT authentication. Enable with enableMeet in Settings.

    • One-click calls \u2014 start a call from any Rocket.Chat channel or DM
    • JWT auth \u2014 participants join automatically with no separate login
    • 4 containers \u2014 jitsi-web, jitsi-prosody (XMPP/JWT), jitsi-jicofo (conference focus), jitsi-jvb (video bridge)
    • Setup: Generate secrets, start containers, configure the Jitsi marketplace app in Rocket.Chat, set token expiration to now + 1hour

    Token Expiration

    Set the Jitsi app's Token Expiration to now + 1hour. A raw number like 120 is interpreted as Unix timestamp 120 (Jan 1970), causing all tokens to appear expired.

    ","tags":["guide","admin","services","integrations"]},{"location":"docs/admin/services/integrations/#password-manager-vaultwarden","title":"Password Manager (Vaultwarden)","text":"

    Bitwarden-compatible password vault for secure team credential sharing.

    • Bitwarden client compatible \u2014 use official browser extensions, desktop apps, and mobile apps
    • Auto-invite \u2014 initial admin user invited on first startup
    • User provisioning \u2014 new platform users can be auto-invited when provisioning is enabled
    • Client setup: Point Bitwarden clients to https://vault.DOMAIN
    ","tags":["guide","admin","services","integrations"]},{"location":"docs/admin/services/integrations/#whiteboard-excalidraw","title":"Whiteboard (Excalidraw)","text":"

    Collaborative whiteboard for brainstorming and campaign planning.

    • Real-time collaboration \u2014 multi-user drawing with WebSocket support
    • Embedded in admin \u2014 full-screen iframe at /app/services/excalidraw
    • Desktop only \u2014 requires a desktop browser for the drawing experience
    • Route: /app/services/excalidraw
    ","tags":["guide","admin","services","integrations"]},{"location":"docs/admin/services/integrations/#git-hosting-gitea","title":"Git Hosting (Gitea)","text":"

    Self-hosted Git repository hosting for campaign code and configuration.

    • Lightweight Git forge \u2014 repositories, issues, pull requests, and wikis
    • User provisioning \u2014 platform users can be auto-provisioned as Gitea accounts
    • Embedded \u2014 accessible at git.DOMAIN or embedded in admin at /app/services/gitea
    ","tags":["guide","admin","services","integrations"]},{"location":"docs/admin/services/integrations/#workflow-automation-n8n","title":"Workflow Automation (n8n)","text":"

    Self-hosted workflow automation for connecting platform events to external services.

    • Visual workflow editor \u2014 drag-and-drop automation builder
    • Webhook triggers \u2014 respond to platform events
    • Embedded \u2014 accessible at n8n.DOMAIN or embedded in admin at /app/services/n8n
    ","tags":["guide","admin","services","integrations"]},{"location":"docs/admin/services/integrations/#qr-code-generator-mini-qr","title":"QR Code Generator (Mini QR)","text":"

    Built-in QR code generation for walk sheets, volunteer invites, and campaign links.

    • Public API \u2014 QR code PNG generation at /api/qr
    • Walk sheet integration \u2014 QR codes embedded in printable walk sheets
    • Volunteer quick join \u2014 QR codes for instant volunteer onboarding
    • Embedded \u2014 admin interface at /app/services/qr
    ","tags":["guide","admin","services","integrations"]},{"location":"docs/admin/services/monitoring/","title":"Monitoring","text":"

    The monitoring stack runs as a Docker Compose profile and provides metrics collection, visualization, and alerting.

    ","tags":["guide","admin","services","monitoring"]},{"location":"docs/admin/services/monitoring/#starting-the-stack","title":"Starting the Stack","text":"
    docker compose --profile monitoring up -d\n

    This starts Prometheus, Grafana, Alertmanager, cAdvisor, Node Exporter, Redis Exporter, and Gotify (for push notifications).

    ","tags":["guide","admin","services","monitoring"]},{"location":"docs/admin/services/monitoring/#custom-metrics","title":"Custom Metrics","text":"

    The platform exposes 12 custom cm_* Prometheus metrics:

    • API request rates and latencies
    • BullMQ queue sizes (email, SMS, video scheduling)
    • Active canvass sessions
    • External service health gauges
    ","tags":["guide","admin","services","monitoring"]},{"location":"docs/admin/services/monitoring/#grafana-dashboards","title":"Grafana Dashboards","text":"

    Three pre-configured dashboards auto-provisioned from configs/grafana/:

    • API Performance \u2014 request rates, latencies, error rates
    • Application Overview \u2014 queue sizes, active sessions, service health
    • System Health \u2014 container resources, host metrics, Redis stats
    ","tags":["guide","admin","services","monitoring"]},{"location":"docs/admin/services/monitoring/#alertmanager","title":"Alertmanager","text":"

    Alert rules in configs/prometheus/alerts.yml cover:

    • API downtime and high error rates
    • Queue backlogs
    • Service connectivity failures
    • Resource utilization thresholds
    ","tags":["guide","admin","services","monitoring"]},{"location":"docs/admin/services/monitoring/#admin-routes","title":"Admin Routes","text":"
    • /app/observability \u2014 embedded Grafana dashboards, alert status, and service health (3 tabs)
    ","tags":["guide","admin","services","monitoring"]},{"location":"docs/admin/services/monitoring/#direct-access","title":"Direct Access","text":"
    • Grafana: localhost:3005 or grafana.DOMAIN
    • Prometheus: localhost:9090
    • Alertmanager: localhost:9093
    ","tags":["guide","admin","services","monitoring"]},{"location":"docs/admin/services/tunnel/","title":"Tunnel (Pangolin)","text":"

    Pangolin provides secure tunneling to expose your self-hosted services to the internet without port forwarding or a static IP.

    ","tags":["guide","admin","services","networking"]},{"location":"docs/admin/services/tunnel/#setup","title":"Setup","text":"

    From /app/pangolin:

    • Automated setup \u2014 one-command deployment that creates the Pangolin site, updates .env with credentials, and restarts the Newt tunnel container
    • Manual setup \u2014 step-by-step instructions for connecting to an existing Pangolin instance
    ","tags":["guide","admin","services","networking"]},{"location":"docs/admin/services/tunnel/#resource-management","title":"Resource Management","text":"

    The platform defines 18 service resources in configs/pangolin/resources.yml:

    • Each resource maps a subdomain (e.g., api.DOMAIN, app.DOMAIN) to an internal service
    • Hourly sync \u2014 nginx cron job pushes resource definitions to Pangolin automatically
    • Status dashboard \u2014 view tunnel connection status and resource health
    ","tags":["guide","admin","services","networking"]},{"location":"docs/admin/services/tunnel/#newt-container","title":"Newt Container","text":"

    The Newt container runs alongside nginx and tunnels traffic to your services:

    • Configured via PANGOLIN_NEWT_ID and PANGOLIN_NEWT_SECRET environment variables
    • Depends on nginx (all resources route through nginx:80)
    • Auto-restarts on failure
    ","tags":["guide","admin","services","networking"]},{"location":"docs/admin/services/tunnel/#security","title":"Security","text":"

    The Pangolin server runs CrowdSec for intrusion detection with a web management UI protected by Tinyauth forward-auth. See CrowdSec & Security for details on:

    • CrowdSec Manager dashboard (crowdsec.bnkserve.org)
    • Tinyauth authentication (auth.bnkserve.org)
    • Canadian ISP whitelisting and crawl detection tuning
    • Cloudflare Turnstile captcha integration
    ","tags":["guide","admin","services","networking"]},{"location":"docs/admin/services/tunnel/#admin-routes","title":"Admin Routes","text":"
    • /app/pangolin \u2014 tunnel status, setup wizard, and resource management
    ","tags":["guide","admin","services","networking"]},{"location":"docs/admin/services/user-provisioning/","title":"User Provisioning","text":"

    Automatically create and sync user accounts across integrated services when new platform users are registered. Enable with enableUserProvisioning in Settings.

    ","tags":["guide","admin","services"]},{"location":"docs/admin/services/user-provisioning/#supported-services","title":"Supported Services","text":"Service Mode Notes Rocket.Chat Always lazy SSO on first access Gitea Eager or lazy Admin API provisioning Vaultwarden Eager or lazy Invite-based (no password management) Listmonk Eager or lazy Subscriber sync","tags":["guide","admin","services"]},{"location":"docs/admin/services/user-provisioning/#configuration","title":"Configuration","text":"

    From Settings > User Provisioning:

    • Toggle provisioning per service
    • Choose eager (create immediately on user registration) or lazy (create on first access)
    • View provisioning status per user in the Service Accounts panel on the Users page
    ","tags":["guide","admin","services"]},{"location":"docs/admin/services/user-provisioning/#bulk-sync","title":"Bulk Sync","text":"

    Trigger a bulk sync from /api/users/provisioning/sync to provision all existing users across enabled services. Useful after enabling a new service.

    ","tags":["guide","admin","services"]},{"location":"docs/admin/services/user-provisioning/#admin-routes","title":"Admin Routes","text":"
    • /app/users (edit drawer) \u2014 per-user service account status and actions
    • /app/settings (User Provisioning tab) \u2014 per-service toggle and timing
    ","tags":["guide","admin","services"]},{"location":"docs/admin/web/","title":"Web Content","text":"

    Manage the public-facing web presence \u2014 landing pages, the dynamic homepage, navigation menu, and documentation site.

    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/#in-this-section","title":"In This Section","text":"
    • Landing Pages \u2014 build campaign microsites with the GrapesJS drag-and-drop editor
    • Homepage \u2014 dynamic public landing page aggregating campaigns, shifts, media, and events
    • Navigation \u2014 customize the public navigation menu with toggles, custom links, and reordering
    • Documentation \u2014 MkDocs site management, page analytics, and comment moderation
    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/#social-sharing","title":"Social Sharing","text":"

    All public content (campaigns, landing pages, gallery videos) automatically generates Open Graph and Twitter Card meta tags for rich link previews when shared on social media, messaging apps, and search engines. OG responses are cached in Redis for 10 minutes.

    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/documentation/","title":"Documentation","text":"

    Manage the MkDocs documentation site, track page engagement, and moderate visitor comments.

    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/documentation/#mkdocs-management","title":"MkDocs Management","text":"

    From Docs (/app/docs):

    • View MkDocs build status and health
    • Browse the documentation file tree
    • Export landing pages to MkDocs as Jinja2 Material theme overrides
    • Configure documentation settings from MkDocs Settings (/app/docs/settings)
    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/documentation/#documentation-analytics","title":"Documentation Analytics","text":"

    Track how visitors interact with documentation pages using the MkDocs Material theme's custom analytics provider and navigation.tracking.

    • Navigation tracking \u2014 updates the browser URL as users scroll through sections, enabling section-level engagement tracking
    • Custom provider \u2014 integrates with any third-party analytics tool (Plausible, Umami, Google Analytics) via template overrides in docs/overrides/
    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/documentation/#comments","title":"Comments","text":"

    Visitors can leave comments on documentation pages using a Gitea-backed comment system.

    • Anonymous posting \u2014 visitors can comment without creating an account
    • Gitea-backed \u2014 comments stored as Gitea issues (one issue per page) for version control and searchability
    • Moderation \u2014 admin panel at /app/docs-comments for approving, hiding, or deleting comments
    • OAuth login \u2014 optional Gitea OAuth for authenticated commenting
    • Per-page threads \u2014 each documentation page gets its own comment thread
    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/documentation/#admin-routes","title":"Admin Routes","text":"
    • /app/docs \u2014 MkDocs management (file tree, config, build triggers)
    • /app/docs/settings \u2014 documentation configuration
    • /app/docs-comments \u2014 moderate documentation comments
    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/homepage/","title":"Public Homepage","text":"

    A dynamic public landing page that showcases your organization and aggregates content from across the platform.

    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/homepage/#sections","title":"Sections","text":"

    The homepage assembles its content from enabled modules. Sections are only displayed when their corresponding module is active and has data to show.

    • Hero banner \u2014 organization name, logo, tagline (configurable via Settings), and call-to-action buttons for campaigns and volunteer signups
    • Stats counters \u2014 active campaigns, total emails sent, and volunteer signups (shown only when counts are greater than zero)
    • Featured campaigns \u2014 up to 3 active campaigns, sorted by highlight status then creation date, with email counts and descriptions
    • Upcoming shifts \u2014 up to 3 open shifts with date, time, location, and spots remaining
    • Latest videos \u2014 up to 4 recently published videos from the media library, displayed in a horizontal scroll strip with thumbnails and durations
    • Upcoming events \u2014 up to 3 future events from Gancio with date, location, and tags
    • Recent activity \u2014 a compact activity feed showing the latest platform actions
    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/homepage/#data-caching","title":"Data & Caching","text":"

    All homepage data is fetched from a single API endpoint (/api/homepage) and cached in Redis for 2 minutes. Individual section queries use Promise.allSettled so that a failure in one module (e.g., Gancio being offline) does not prevent the rest of the page from loading.

    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/homepage/#configuration","title":"Configuration","text":"
    • Organization name and logo \u2014 set via Settings > Organization
    • Homepage tagline \u2014 set via the homepageTagline field in site settings
    • Module visibility \u2014 controlled by feature flags (enableInfluence, enableMap, enableMediaFeatures, enableEvents, enablePayments, enableLandingPages)
    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/homepage/#public-routes","title":"Public Routes","text":"
    • /home \u2014 public homepage
    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/landing-pages/","title":"Landing Pages","text":"

    Build campaign microsites with a drag-and-drop visual editor.

    ","tags":["guide","admin","content","landing-pages"]},{"location":"docs/admin/web/landing-pages/#how-it-works","title":"How It Works","text":"
    1. Create a new page from the admin panel
    2. Open the GrapesJS visual editor \u2014 drag blocks, edit text, adjust styles
    3. Save and publish \u2014 the page goes live at /p/:slug
    4. Optionally export to MkDocs for inclusion in the documentation site
    ","tags":["guide","admin","content","landing-pages"]},{"location":"docs/admin/web/landing-pages/#admin-routes","title":"Admin Routes","text":"
    • /app/pages \u2014 list and manage landing pages
    • /app/pages/:id/edit \u2014 full-screen GrapesJS editor
    ","tags":["guide","admin","content","landing-pages"]},{"location":"docs/admin/web/landing-pages/#public-routes","title":"Public Routes","text":"
    • /p/:slug \u2014 view a published landing page
    ","tags":["guide","admin","content","landing-pages"]},{"location":"docs/admin/web/navigation/","title":"Navigation Settings","text":"

    Customize the public-facing navigation menu from the admin panel. The navigation bar appears on all public pages, the admin header, the Gancio events page, and the MkDocs documentation site.

    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/navigation/#key-features","title":"Key Features","text":"
    • Per-item toggle -- enable or disable each navigation item with a switch
    • Custom links -- add external links or internal paths to the navigation
    • Reorder -- move items up and down to arrange them in any order
    • Editable labels and paths -- rename any item or change its destination
    • Feature flag awareness -- builtin items tied to a feature flag (e.g., Campaigns requires enableInfluence) are automatically hidden when that feature is disabled
    • Visitor control -- determine exactly what public visitors can access
    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/navigation/#builtin-items","title":"Builtin Items","text":"

    The platform ships with 11 builtin navigation items that cover the main public routes:

    Home, Campaigns, Map, Shifts, Events, Gallery, Pricing, Shop, Donate, Website (landing page), and Docs (documentation site).

    Each builtin item has a default icon and path. Some paths use special $ tokens (e.g., $landing, $docs) that are automatically resolved to the correct external URL based on the deployment environment.

    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/navigation/#custom-links","title":"Custom Links","text":"

    Add any number of custom links via the \"Add Custom Link\" button. Custom links support:

    • Internal paths (e.g., /blog)
    • External URLs (e.g., https://example.com) -- automatically detected and opened in a new tab

    Custom links can be deleted from the navigation; builtin items can only be toggled off.

    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/navigation/#mobile-handling","title":"Mobile Handling","text":"

    On mobile devices, the navigation collapses into a hamburger menu that opens a full-height drawer. On desktop, the nav bar also supports a collapse mode that hides labels and shows only icons, toggled via a fold/unfold button. The collapse state is persisted in local storage.

    ","tags":["guide","admin","content"]},{"location":"docs/admin/web/navigation/#admin-routes","title":"Admin Routes","text":"
    • /app/navigation -- navigation editor with per-item toggle, reorder, label editing, and custom link management
    ","tags":["guide","admin","content"]},{"location":"docs/api/","title":"API Reference","text":"

    Changemaker Lite exposes two REST APIs sharing a single PostgreSQL database.

    Server Framework Port Purpose Main API Express.js 4000 Auth, campaigns, map, shifts, canvassing, pages, email, settings Media API Fastify 4100 Video library, analytics, playlists, reactions, comments

    Both APIs use JWT Bearer authentication and return JSON. All request/response bodies are application/json unless noted otherwise.

    ","tags":["reference","developer","API"]},{"location":"docs/api/#authentication","title":"Authentication","text":"","tags":["reference","developer","API"]},{"location":"docs/api/#token-flow","title":"Token Flow","text":"
    sequenceDiagram\n    participant Client\n    participant API\n    participant DB\n\n    Client->>API: POST /api/auth/login {email, password}\n    API->>DB: Verify credentials\n    DB-->>API: User record\n    API-->>Client: {accessToken, refreshToken}\n    Note over Client: Store tokens\n\n    Client->>API: GET /api/campaigns (Authorization: Bearer <accessToken>)\n    API-->>Client: 200 OK\n\n    Note over Client: Access token expires (15 min)\n\n    Client->>API: POST /api/auth/refresh {refreshToken}\n    API->>DB: Rotate token (atomic transaction)\n    DB-->>API: New token pair\n    API-->>Client: {accessToken, refreshToken}
    ","tags":["reference","developer","API"]},{"location":"docs/api/#headers","title":"Headers","text":"

    All authenticated requests require:

    Authorization: Bearer <accessToken>\n

    The Media API also accepts tokens via query parameter for SSE streams:

    GET /api/public/:id/chat-stream?token=<accessToken>\n
    ","tags":["reference","developer","API"]},{"location":"docs/api/#roles","title":"Roles","text":"Role Access Level SUPER_ADMIN Full platform access INFLUENCE_ADMIN Campaign and advocacy management MAP_ADMIN Map, locations, shifts, canvassing USER Volunteer portal, public features TEMP Limited access (auto-created on public shift signup)","tags":["reference","developer","API"]},{"location":"docs/api/#middleware-reference","title":"Middleware Reference","text":"Middleware Effect authenticate Requires valid JWT. Sets req.user with id, email, role. Returns 401 if missing or invalid. optionalAuth Same as authenticate but continues without user if token is absent. requireRole(...roles) Checks user role against allowed list. Returns 403 if not authorized. requireNonTemp Blocks TEMP users. Returns 403. validate(schema, source) Validates request body/query/params against a Zod schema. Returns 400 on failure.","tags":["reference","developer","API"]},{"location":"docs/api/#error-responses","title":"Error Responses","text":"

    All errors follow a consistent format:

    {\n  \"error\": {\n    \"message\": \"Human-readable error description\",\n    \"code\": \"ERROR_CODE\",\n    \"statusCode\": 400\n  }\n}\n
    Status Code Meaning 400 VALIDATION_ERROR Request body/query failed schema validation 401 UNAUTHORIZED Missing or invalid access token 403 FORBIDDEN Valid token but insufficient role 404 NOT_FOUND Resource does not exist 429 RATE_LIMITED Too many requests (see Rate Limits) 500 INTERNAL_ERROR Unexpected server error

    Enumeration Prevention

    Auth endpoints (/login, /register, /forgot-password) return generic success messages to prevent user enumeration. A 401 from /api/auth/me does not reveal whether the user exists.

    ","tags":["reference","developer","API"]},{"location":"docs/api/#rate-limits","title":"Rate Limits","text":"

    Rate limits are Redis-backed and keyed by IP address.

    Endpoint Group Window Max Requests Redis Prefix Auth (login, register, refresh) 15 min 10 rl:auth: Email sending 1 hour 30 rl:email: Response submission 1 hour 10 rl:response: Shift signup 1 hour 10 rl:shift-signup: Canvass visits 1 min 30 rl:canvass-visit: Canvass bulk visits 1 min 5 rl:canvass-visit-bulk: GPS tracking 1 min 6 rl:gps-tracking: Canvass geocode 1 min 10 rl:canvass-geocode: Observability 1 min 20 rl:observability: Health/metrics 1 min 30 rl:health-metrics: Global (all other) Configurable Configurable rl:global:

    When rate-limited, the API returns:

    {\n  \"error\": {\n    \"message\": \"Too many requests, please try again later\",\n    \"code\": \"RATE_LIMITED\",\n    \"statusCode\": 429\n  }\n}\n
    ","tags":["reference","developer","API"]},{"location":"docs/api/#main-api-express-port-4000","title":"Main API (Express \u2014 Port 4000)","text":"","tags":["reference","developer","API"]},{"location":"docs/api/#health-metrics","title":"Health & Metrics","text":"Method Path Auth Description GET /api/health Health check \u2014 PostgreSQL + Redis ping GET /api/metrics Prometheus metrics (text/plain) Health response 
    {\n  \"status\": \"healthy\",\n  \"checks\": {\n    \"database\": \"ok\",\n    \"redis\": \"ok\"\n  }\n}\n
    ","tags":["reference","developer","API"]},{"location":"docs/api/#auth","title":"Auth","text":"

    Prefix: /api/auth

    Method Path Auth Rate Limited Description POST /api/auth/login Email + password login POST /api/auth/register Create account (always USER role) POST /api/auth/verify-email Verify email with token POST /api/auth/resend-verification Resend verification email POST /api/auth/forgot-password Send password reset email POST /api/auth/reset-password Set new password with reset token POST /api/auth/refresh Rotate refresh token \u2192 new token pair POST /api/auth/logout Invalidate refresh token GET /api/auth/me Current user profile Login request & response

    Request: 

    {\n  \"email\": \"admin@example.com\",\n  \"password\": \"SecurePass123!\"\n}\n
    Response: 
    {\n  \"accessToken\": \"eyJhbG...\",\n  \"refreshToken\": \"eyJhbG...\",\n  \"user\": {\n    \"id\": \"uuid\",\n    \"email\": \"admin@example.com\",\n    \"name\": \"Admin\",\n    \"role\": \"SUPER_ADMIN\"\n  }\n}\n

    Password Policy

    Passwords must be at least 12 characters with at least one uppercase letter, one lowercase letter, and one digit.

    ","tags":["reference","developer","API"]},{"location":"docs/api/#users","title":"Users","text":"

    Prefix: /api/users \u00b7 Auth: All routes require authentication

    Method Path Role Description GET /api/users Admin Paginated user list with search, role, and status filters GET /api/users/:id Admin or self Single user profile POST /api/users Admin Create user PUT /api/users/:id Admin or self Update user (non-admins cannot change role/status) POST /api/users/:id/approve Admin Approve pending user; sends approval email POST /api/users/:id/reject Admin Reject pending user DELETE /api/users/:id Admin Delete user

    Query parameters for GET /api/users:

    Param Type Description page number Page number (default 1) limit number Items per page (default 20) search string Search by name or email role string Filter by role status string Filter by status","tags":["reference","developer","API"]},{"location":"docs/api/#dashboard","title":"Dashboard","text":"

    Prefix: /api/dashboard \u00b7 Auth: Admin roles required

    Method Path Role Description GET /api/dashboard/summary Any admin Platform-wide counts (users, campaigns, locations, shifts) GET /api/dashboard/system SUPER_ADMIN Hardware + OS info (CPU, memory, disk) GET /api/dashboard/containers SUPER_ADMIN Docker container statuses GET /api/dashboard/weather Any admin Current weather at map center coordinates GET /api/dashboard/api-metrics SUPER_ADMIN Prometheus API performance metrics GET /api/dashboard/time-series SUPER_ADMIN Prometheus time-series data GET /api/dashboard/container-resources SUPER_ADMIN cAdvisor CPU/memory/network per container

    Query parameters for GET /api/dashboard/time-series:

    Param Type Description metrics string Comma-separated metric keys (whitelist-validated) range string Time range (e.g., 1h, 24h, 7d) step string Sample interval (e.g., 5m, 1h)","tags":["reference","developer","API"]},{"location":"docs/api/#campaigns","title":"Campaigns","text":"","tags":["reference","developer","API"]},{"location":"docs/api/#admin-crud","title":"Admin CRUD","text":"

    Prefix: /api/campaigns \u00b7 Auth: Admin roles

    Method Path Description GET /api/campaigns Paginated campaign list GET /api/campaigns/:id Single campaign detail POST /api/campaigns Create campaign PUT /api/campaigns/:id Update campaign DELETE /api/campaigns/:id Delete campaign","tags":["reference","developer","API"]},{"location":"docs/api/#public","title":"Public","text":"Method Path Auth Description GET /api/campaigns/public List all active campaigns GET /api/campaigns/:slug/details Campaign detail by slug (ACTIVE only)","tags":["reference","developer","API"]},{"location":"docs/api/#user-submissions","title":"User Submissions","text":"

    Auth: Authenticated, non-TEMP users

    Method Path Description POST /api/campaigns/user/submit Submit campaign for moderation (5/hour limit) GET /api/campaigns/user/my-campaigns List own submitted campaigns PUT /api/campaigns/user/:id Edit own pending campaign","tags":["reference","developer","API"]},{"location":"docs/api/#moderation","title":"Moderation","text":"

    Auth: Admin roles

    Method Path Description GET /api/campaigns/moderation/queue Campaigns pending moderation GET /api/campaigns/moderation/stats Moderation queue statistics PATCH /api/campaigns/moderation/:id Approve or reject campaign","tags":["reference","developer","API"]},{"location":"docs/api/#campaign-emails","title":"Campaign Emails","text":"Method Path Auth Description POST /api/campaigns/:slug/send-email Send advocacy email to representatives (rate limited: 30/hour) POST /api/campaigns/:slug/track-mailto Track mailto link click GET /api/campaigns/:id/emails Admin Paginated emails for campaign GET /api/campaigns/:id/email-stats Admin Email statistics","tags":["reference","developer","API"]},{"location":"docs/api/#responses","title":"Responses","text":"

    Prefix: /api/campaigns (public) and /api/responses (admin + actions)

    ","tags":["reference","developer","API"]},{"location":"docs/api/#public_1","title":"Public","text":"Method Path Auth Description GET /api/campaigns/:slug/responses List approved public responses GET /api/campaigns/:slug/response-stats Response statistics POST /api/campaigns/:slug/responses Submit response (rate limited: 10/hour) POST /api/responses/:id/upvote Optional Upvote a response DELETE /api/responses/:id/upvote Optional Remove upvote GET /api/responses/:id/verify/:token Verify response via email link","tags":["reference","developer","API"]},{"location":"docs/api/#admin","title":"Admin","text":"

    Auth: Admin roles

    Method Path Description GET /api/responses All responses with filters PATCH /api/responses/:id/status Approve or reject response POST /api/responses/:id/resend-verification Resend verification email DELETE /api/responses/:id Delete response","tags":["reference","developer","API"]},{"location":"docs/api/#representatives","title":"Representatives","text":"

    Prefix: /api/representatives

    Method Path Auth Description GET /api/representatives/by-postal/:postalCode Lookup representatives by postal code (cache-first) GET /api/representatives/test-connection Represent API health check GET /api/representatives/cache-stats Admin Cache statistics GET /api/representatives Admin Paginated cached representatives GET /api/representatives/:id Admin Single cached representative DELETE /api/representatives/by-postal/:postalCode Admin Clear cache for postal code DELETE /api/representatives/:id Admin Delete cached representative

    Query parameters for postal code lookup:

    Param Type Description refresh boolean Force API call, bypass cache","tags":["reference","developer","API"]},{"location":"docs/api/#email-queue","title":"Email Queue","text":"

    Prefix: /api/email-queue \u00b7 Auth: Admin roles

    Method Path Description GET /api/email-queue/stats BullMQ queue statistics (waiting, active, completed, failed) POST /api/email-queue/pause Pause email processing POST /api/email-queue/resume Resume email processing POST /api/email-queue/clean Clean completed jobs","tags":["reference","developer","API"]},{"location":"docs/api/#locations","title":"Locations","text":"

    Prefix: /api/map/locations

    ","tags":["reference","developer","API"]},{"location":"docs/api/#public_2","title":"Public","text":"Method Path Description GET /api/map/locations/public All geocoded locations for map (no PII); optional ?bounds=","tags":["reference","developer","API"]},{"location":"docs/api/#admin_1","title":"Admin","text":"

    Auth: SUPER_ADMIN or MAP_ADMIN

    Method Path Description GET /api/map/locations Paginated locations with filters GET /api/map/locations/stats Location statistics GET /api/map/locations/all All geocoded locations for admin map GET /api/map/locations/export-csv CSV export GET /api/map/locations/:id Single location GET /api/map/locations/:id/history Edit history POST /api/map/locations Create location PUT /api/map/locations/:id Update location DELETE /api/map/locations/:id Delete location POST /api/map/locations/bulk-delete Bulk delete POST /api/map/locations/geocode Geocode single address POST /api/map/locations/geocode-missing Batch geocode all ungeocoded POST /api/map/locations/reverse-geocode Reverse geocode lat/lng to address POST /api/map/locations/import-csv Import from CSV (10 MB limit) POST /api/map/locations/import-bulk Bulk NAR or standard CSV import (100 MB limit)","tags":["reference","developer","API"]},{"location":"docs/api/#bulk-geocode","title":"Bulk Geocode","text":"

    Prefix: /api/map/locations/bulk-geocode \u00b7 Auth: Map admins

    Method Path Description POST /api/map/locations/bulk-geocode Start BullMQ bulk geocoding job GET /api/map/locations/bulk-geocode/:jobId Poll job status GET /api/map/locations/bulk-geocode/stats Queue statistics","tags":["reference","developer","API"]},{"location":"docs/api/#nar-import","title":"NAR Import","text":"

    Prefix: /api/map/nar-import \u00b7 Auth: Map admins

    Method Path Description GET /api/map/nar-import/datasets Available NAR datasets by province POST /api/map/nar-import Start province import (fire-and-forget) GET /api/map/nar-import/status/:importId Poll import progress NAR Import body 
    {\n  \"provinceCode\": \"24\",\n  \"filterType\": \"city\",\n  \"filterCity\": \"Edmonton\",\n  \"residentialOnly\": true,\n  \"deduplicateRadius\": 10,\n  \"batchSize\": 500\n}\n
    ","tags":["reference","developer","API"]},{"location":"docs/api/#area-import","title":"Area Import","text":"

    Prefix: /api/map/area-import \u00b7 Auth: Map admins

    Method Path Description POST /api/map/area-import/preview Preview bounds + estimated record counts POST /api/map/area-import Start area import (fire-and-forget) GET /api/map/area-import/status/:importId Poll import progress","tags":["reference","developer","API"]},{"location":"docs/api/#cuts-polygons","title":"Cuts (Polygons)","text":"

    Prefix: /api/map/cuts

    Method Path Auth Description GET /api/map/cuts/public All public cuts as GeoJSON GET /api/map/cuts Map admin Paginated cuts list GET /api/map/cuts/:id Map admin Single cut POST /api/map/cuts Map admin Create cut (polygon GeoJSON) PUT /api/map/cuts/:id Map admin Update cut DELETE /api/map/cuts/:id Map admin Delete cut GET /api/map/cuts/:id/locations Map admin All locations within cut polygon GET /api/map/cuts/:id/statistics Map admin Support level breakdown GET /api/map/cuts/export-geojson Map admin All cuts as GeoJSON FeatureCollection GET /api/map/cuts/:id/export-geojson Map admin Single cut as GeoJSON Feature POST /api/map/cuts/import-geojson Map admin Import cuts from GeoJSON file","tags":["reference","developer","API"]},{"location":"docs/api/#shifts","title":"Shifts","text":"

    Prefix: /api/map/shifts

    ","tags":["reference","developer","API"]},{"location":"docs/api/#public_3","title":"Public","text":"Method Path Description GET /api/map/shifts/public List upcoming public shifts POST /api/map/shifts/public/:id/signup Public signup (creates TEMP user if needed; rate limited: 10/hour)","tags":["reference","developer","API"]},{"location":"docs/api/#volunteer","title":"Volunteer","text":"

    Auth: Any authenticated user

    Method Path Description GET /api/map/shifts/volunteer/upcoming Upcoming shifts with signup status GET /api/map/shifts/volunteer/my-signups Own confirmed signups POST /api/map/shifts/volunteer/:id/signup Sign up for shift DELETE /api/map/shifts/volunteer/:id/signup Cancel signup","tags":["reference","developer","API"]},{"location":"docs/api/#admin_2","title":"Admin","text":"

    Auth: Map admins

    Method Path Description GET /api/map/shifts Paginated shifts with filters GET /api/map/shifts/stats Statistics GET /api/map/shifts/calendar Calendar data (?startDate=&endDate=) GET /api/map/shifts/:id Single shift with signups POST /api/map/shifts Create shift PUT /api/map/shifts/:id Update shift DELETE /api/map/shifts/:id Delete shift POST /api/map/shifts/:id/signups Admin-add volunteer DELETE /api/map/shifts/:id/signups/:signupId Remove volunteer POST /api/map/shifts/:id/email-details Email details to all volunteers","tags":["reference","developer","API"]},{"location":"docs/api/#shift-series","title":"Shift Series","text":"

    Auth: Map admins

    Method Path Description POST /api/map/shifts/series Create recurring shift series GET /api/map/shifts/series/:id Get series PUT /api/map/shifts/series/:id Update series DELETE /api/map/shifts/series/:id Delete series","tags":["reference","developer","API"]},{"location":"docs/api/#canvassing","title":"Canvassing","text":"

    Prefix: /api/map/canvass

    ","tags":["reference","developer","API"]},{"location":"docs/api/#volunteer_1","title":"Volunteer","text":"

    Auth: Any authenticated user

    Method Path Description GET /api/map/canvass/my/assignments Shift assignments GET /api/map/canvass/my/stats Personal canvass statistics GET /api/map/canvass/my/visits Visit history GET /api/map/canvass/my/session Active canvass session POST /api/map/canvass/sessions Start canvass session POST /api/map/canvass/sessions/:id/end End session GET /api/map/canvass/cuts/:cutId/locations Locations in cut with visit annotations GET /api/map/canvass/cuts/:cutId/route Walking route algorithm for cut GET /api/map/canvass/locations All locations with visit annotations PUT /api/map/canvass/locations/:id Edit address (role-gated fields) POST /api/map/canvass/locations Create location POST /api/map/canvass/reverse-geocode Reverse geocode lat/lng POST /api/map/canvass/geocode-search Geocode address for map (rate limited: 10/min) POST /api/map/canvass/visits Record door knock (rate limited: 30/min) POST /api/map/canvass/visits/bulk Record visit for all unvisited units (rate limited: 5/min)","tags":["reference","developer","API"]},{"location":"docs/api/#admin_3","title":"Admin","text":"

    Auth: SUPER_ADMIN or MAP_ADMIN

    Method Path Description GET /api/map/canvass/stats Platform-wide canvass statistics GET /api/map/canvass/stats/cuts/:cutId Statistics for specific cut GET /api/map/canvass/activity Recent activity feed GET /api/map/canvass/volunteers All volunteers with canvass activity GET /api/map/canvass/volunteers/:userId Individual volunteer statistics GET /api/map/canvass/visits All visits with filters","tags":["reference","developer","API"]},{"location":"docs/api/#gps-tracking","title":"GPS Tracking","text":"

    Prefix: /api/map/tracking

    ","tags":["reference","developer","API"]},{"location":"docs/api/#volunteer_2","title":"Volunteer","text":"

    Auth: Any authenticated user

    Method Path Description POST /api/map/tracking/sessions Start GPS tracking session POST /api/map/tracking/sessions/:id/end End tracking session POST /api/map/tracking/sessions/:id/points Submit GPS point batch (rate limited: 6/min) POST /api/map/tracking/sessions/:id/link-canvass Link to canvass session GET /api/map/tracking/my/session Active tracking session GET /api/map/tracking/my/sessions Own historical sessions GET /api/map/tracking/my/sessions/:id/route Full route for own session","tags":["reference","developer","API"]},{"location":"docs/api/#admin_4","title":"Admin","text":"

    Auth: Map admins

    Method Path Description GET /api/map/tracking/live Live volunteer positions + trails GET /api/map/tracking/sessions All historical tracking sessions GET /api/map/tracking/sessions/:id/route Full route for any session","tags":["reference","developer","API"]},{"location":"docs/api/#map-settings","title":"Map Settings","text":"

    Prefix: /api/map/settings

    Method Path Auth Description GET /api/map/settings Public map settings (center, zoom, walk sheet config) PUT /api/map/settings Map admin Update map settings","tags":["reference","developer","API"]},{"location":"docs/api/#geocoding","title":"Geocoding","text":"

    Prefix: /api/map/geocoding \u00b7 Auth: Map admins

    Method Path Description GET /api/map/geocoding/search Geocode address search (?q=&limit=1-10)","tags":["reference","developer","API"]},{"location":"docs/api/#landing-pages","title":"Landing Pages","text":"

    Prefix: /api/pages and /api/page-blocks

    ","tags":["reference","developer","API"]},{"location":"docs/api/#public_4","title":"Public","text":"Method Path Auth Description GET /api/pages/:slug/view Get published page by slug","tags":["reference","developer","API"]},{"location":"docs/api/#admin_5","title":"Admin","text":"

    Auth: Admin roles

    Method Path Description GET /api/pages Paginated landing pages GET /api/pages/:id Single page POST /api/pages Create page PUT /api/pages/:id Update page DELETE /api/pages/:id Delete page POST /api/pages/sync Sync MkDocs overrides from filesystem POST /api/pages/validate Validate and repair MkDocs exports","tags":["reference","developer","API"]},{"location":"docs/api/#block-library","title":"Block Library","text":"

    Auth: Admin roles

    Method Path Description GET /api/page-blocks List blocks GET /api/page-blocks/:id Single block POST /api/page-blocks Create block PUT /api/page-blocks/:id Update block DELETE /api/page-blocks/:id Delete block","tags":["reference","developer","API"]},{"location":"docs/api/#email-templates","title":"Email Templates","text":"

    Prefix: /api/email-templates \u00b7 Auth: Admin roles (seed/cache require SUPER_ADMIN)

    Method Path Description GET /api/email-templates List templates GET /api/email-templates/:id Single template POST /api/email-templates Create template PUT /api/email-templates/:id Update template DELETE /api/email-templates/:id Delete template GET /api/email-templates/:id/versions Version history GET /api/email-templates/:id/versions/:versionNumber Specific version POST /api/email-templates/:id/rollback Rollback to prior version POST /api/email-templates/validate Validate Handlebars syntax POST /api/email-templates/:id/test Send test email (rate limited: 10/15min) GET /api/email-templates/:id/test-logs Test send logs POST /api/email-templates/seed Seed templates from filesystem POST /api/email-templates/clear-cache Clear template cache","tags":["reference","developer","API"]},{"location":"docs/api/#qr-codes","title":"QR Codes","text":"Method Path Auth Description GET /api/qr Generate QR code PNG (?text=&size=50-500)

    Cached for 1 hour. Returns image/png.

    ","tags":["reference","developer","API"]},{"location":"docs/api/#site-settings","title":"Site Settings","text":"

    Prefix: /api/settings

    Method Path Auth Description GET /api/settings Public site settings (SMTP credentials stripped) GET /api/settings/admin SUPER_ADMIN Full settings including SMTP credentials PUT /api/settings SUPER_ADMIN Update settings POST /api/settings/email/test-connection SUPER_ADMIN Test SMTP connection POST /api/settings/email/test-send SUPER_ADMIN Send test email","tags":["reference","developer","API"]},{"location":"docs/api/#listmonk-newsletter-sync","title":"Listmonk (Newsletter Sync)","text":"

    Prefix: /api/listmonk \u00b7 Auth: SUPER_ADMIN

    Method Path Description GET /api/listmonk Sync status + connection check GET /api/listmonk/stats Subscriber counts from Listmonk POST /api/listmonk/test-connection Health check POST /api/listmonk/sync/participants Sync campaign participants POST /api/listmonk/sync/locations Sync locations POST /api/listmonk/sync/users Sync users POST /api/listmonk/sync/all Run all sync operations POST /api/listmonk/reinitialize Reinitialize Listmonk lists GET /api/listmonk/proxy-url Proxy port + JWT for iframe","tags":["reference","developer","API"]},{"location":"docs/api/#documentation-management","title":"Documentation Management","text":"

    Prefix: /api/docs \u00b7 Auth: Authenticated, non-TEMP (write operations require SUPER_ADMIN)

    Method Path Description GET /api/docs/status MkDocs + Code Server availability GET /api/docs/config Port numbers for iframe URLs GET /api/docs/mkdocs-config Read raw mkdocs.yml PUT /api/docs/mkdocs-config Write mkdocs.yml POST /api/docs/build Trigger MkDocs build POST /api/docs/upload Upload asset (20 MB, whitelisted extensions) GET /api/docs/files File tree (?force=true bypasses cache) POST /api/docs/files/rename Rename or move file GET /api/docs/files/* Read file content PUT /api/docs/files/* Write file content POST /api/docs/files/* Create file or folder DELETE /api/docs/files/* Delete file or empty folder","tags":["reference","developer","API"]},{"location":"docs/api/#services","title":"Services","text":"

    Prefix: /api/services \u00b7 Auth: SUPER_ADMIN

    Method Path Description GET /api/services/status Health check all managed services (NocoDB, n8n, Gitea, MailHog, Mini QR, Excalidraw, Homepage) GET /api/services/config Port numbers + subdomain info","tags":["reference","developer","API"]},{"location":"docs/api/#pangolin-tunnel-management","title":"Pangolin (Tunnel Management)","text":"

    Prefix: /api/pangolin \u00b7 Auth: SUPER_ADMIN

    Method Path Description GET /api/pangolin/status Tunnel health + connection info GET /api/pangolin/config Current env configuration GET /api/pangolin/newt-status Newt container status POST /api/pangolin/newt-restart Restart Newt container GET /api/pangolin/sites List Pangolin sites GET /api/pangolin/exit-nodes Available exit nodes GET /api/pangolin/resource-definitions Resource definitions from YAML GET /api/pangolin/resources List resources POST /api/pangolin/setup Create site + all resources (rate limited: \u2157min) POST /api/pangolin/sync Sync resources (create missing, update changed) PUT /api/pangolin/resource/:id Update resource DELETE /api/pangolin/resource/:id Delete resource GET /api/pangolin/resource/:id/clients Connected clients GET /api/pangolin/certificate/:domainId/:domain Certificate info POST /api/pangolin/certificate/:certId Update certificate","tags":["reference","developer","API"]},{"location":"docs/api/#observability","title":"Observability","text":"

    Prefix: /api/observability \u00b7 Auth: SUPER_ADMIN \u00b7 Rate limited: 20/min

    Method Path Description GET /api/observability/status Check 7 monitoring services GET /api/observability/metrics-summary Key metrics from Prometheus GET /api/observability/alerts Active alerts from Alertmanager","tags":["reference","developer","API"]},{"location":"docs/api/#payments","title":"Payments","text":"

    Prefix: /api/payments

    ","tags":["reference","developer","API"]},{"location":"docs/api/#public_5","title":"Public","text":"Method Path Auth Description GET /api/payments/config Stripe publishable key + donation settings GET /api/payments/plans Active subscription plans GET /api/payments/products Active products (?type=) POST /api/payments/subscribe Create subscription checkout POST /api/payments/purchase Optional Product checkout (guest or logged-in) POST /api/payments/donate Donation checkout GET /api/payments/my-subscription Current subscription POST /api/payments/my-subscription/cancel Cancel subscription POST /api/payments/webhook Stripe webhook (raw body)","tags":["reference","developer","API"]},{"location":"docs/api/#admin_6","title":"Admin","text":"

    Auth: SUPER_ADMIN

    Method Path Description GET /api/payments/admin/settings Payment settings (secrets masked) PUT /api/payments/admin/settings Update payment settings POST /api/payments/admin/settings/test-connection Test Stripe connection GET /api/payments/admin/dashboard Subscription + donation statistics GET /api/payments/admin/plans All subscription plans POST /api/payments/admin/plans Create plan PUT /api/payments/admin/plans/:id Update plan DELETE /api/payments/admin/plans/:id Delete plan POST /api/payments/admin/plans/:id/sync-stripe Sync plan to Stripe GET /api/payments/admin/subscriptions All subscriptions with filters POST /api/payments/admin/subscriptions/:id/cancel Cancel subscription GET /api/payments/admin/products All products POST /api/payments/admin/products Create product PUT /api/payments/admin/products/:id Update product DELETE /api/payments/admin/products/:id Delete product POST /api/payments/admin/products/:id/sync-stripe Sync product to Stripe GET /api/payments/admin/orders List orders POST /api/payments/admin/orders/:id/refund Refund order GET /api/payments/admin/donations List donations GET /api/payments/admin/export CSV export of completed orders","tags":["reference","developer","API"]},{"location":"docs/api/#media-api-fastify-port-4100","title":"Media API (Fastify \u2014 Port 4100)","text":"

    The Media API is a separate Fastify server sharing the same PostgreSQL database. It handles all video-related functionality.

    ","tags":["reference","developer","API"]},{"location":"docs/api/#health","title":"Health","text":"Method Path Auth Description GET /health Media API health check","tags":["reference","developer","API"]},{"location":"docs/api/#videos-admin","title":"Videos (Admin)","text":"

    Prefix: /api/videos \u00b7 Auth: Admin roles

    ","tags":["reference","developer","API"]},{"location":"docs/api/#crud-publishing","title":"CRUD & Publishing","text":"Method Path Description GET /api/videos List videos (?limit=&offset=&search=&orientation=&producers=&isShort=) GET /api/videos/producers Distinct producer list GET /api/videos/health Video count health check GET /api/videos/:id Single video detail PATCH /api/videos/:id Update metadata (title, producer, tags, quality, etc.) POST /api/videos/:id/publish Publish to category POST /api/videos/:id/unpublish Unpublish POST /api/videos/bulk-publish Bulk publish POST /api/videos/bulk-unpublish Bulk unpublish POST /api/videos/:id/lock Lock published video POST /api/videos/:id/unlock Unlock video POST /api/videos/:id/generate-thumbnail Generate thumbnail via FFmpeg POST /api/videos/bulk-generate-thumbnails Bulk thumbnail generation","tags":["reference","developer","API"]},{"location":"docs/api/#upload","title":"Upload","text":"Method Path Description POST /api/videos/upload Single video upload (multipart, 10 GB limit, streams to disk) POST /api/videos/upload/batch Batch upload (returns 207 multi-status)","tags":["reference","developer","API"]},{"location":"docs/api/#actions","title":"Actions","text":"Method Path Description POST /api/videos/:id/duplicate Duplicate video record POST /api/videos/:id/replace Replace video file, keep metadata GET /api/videos/:id/analytics Detailed analytics (?startDate=&endDate=) POST /api/videos/:id/reset-analytics Reset all analytics GET /api/videos/:id/preview-link Generate 24-hour JWT preview link GET /api/videos/analytics/top Top videos (?metric=views|watchTime&limit=) GET /api/videos/analytics/overview Global analytics overview","tags":["reference","developer","API"]},{"location":"docs/api/#scheduling","title":"Scheduling","text":"Method Path Description POST /api/videos/:id/schedule-publish Schedule future publish ({publishAt, timezone?}) POST /api/videos/:id/schedule-unpublish Schedule future unpublish DELETE /api/videos/:id/schedule/:action Cancel scheduled operation GET /api/videos/schedules/upcoming Upcoming scheduled operations GET /api/videos/:id/schedule-history Schedule history for video GET /api/videos/schedules/stats Schedule queue statistics POST /api/videos/schedules/pause Pause schedule queue POST /api/videos/schedules/resume Resume schedule queue POST /api/videos/schedules/cleanup Clean old completed jobs","tags":["reference","developer","API"]},{"location":"docs/api/#video-fetch","title":"Video Fetch","text":"Method Path Description POST /api/videos/fetch Submit fetch job ({urls: string[]}, 1\u201320 URLs) GET /api/videos/fetch/jobs List recent fetch jobs GET /api/videos/fetch/jobs/:jobId Job detail + log GET /api/videos/fetch/jobs/:jobId/log SSE log stream (Redis pub/sub) DELETE /api/videos/fetch/jobs/:jobId Cancel fetch job","tags":["reference","developer","API"]},{"location":"docs/api/#streaming-public","title":"Streaming (Public)","text":"

    Prefix: /api/videos

    Method Path Auth Description GET /api/videos/stream/health Streaming health check GET /api/videos/:id/stream Optional HTTP range-supporting video stream GET /api/videos/:id/thumbnail Optional Serve thumbnail image GET /api/videos/:id/metadata Public video metadata for embedding

    Note

    Admins can stream unpublished videos by providing a valid JWT.

    ","tags":["reference","developer","API"]},{"location":"docs/api/#public-gallery","title":"Public Gallery","text":"

    Prefix: /api/public

    Method Path Auth Description GET /api/public Optional Published videos (?limit=&offset=&search=&sort=recent|popular|oldest&category=) GET /api/public/categories Optional Categories with video counts GET /api/public/producers Optional Published producers GET /api/public/:id Optional Single published video GET /api/public/:id/thumbnail Optional Published thumbnail GET /api/public/:id/stream Optional Published video stream","tags":["reference","developer","API"]},{"location":"docs/api/#tracking","title":"Tracking","text":"

    Prefix: /api/track \u00b7 Auth: None required

    Method Path Description GET /api/track/health Tracking health check POST /api/track/view Record video view (returns {viewId}) POST /api/track/event Record play/pause/seek/complete event POST /api/track/heartbeat Update watch time (10s interval, sendBeacon) POST /api/track/batch Batch up to 50 tracking events Tracking is GDPR-compliant

    IP addresses are hashed with a daily-rotating salt. Raw IPs are never stored. Tracking data is retained for 90 days.

    ","tags":["reference","developer","API"]},{"location":"docs/api/#reactions","title":"Reactions","text":"

    Prefix: /api/reactions

    Method Path Auth Description GET /api/reactions/config Available reaction types + emoji mappings GET /api/reactions List reactions (?mediaId=&userId=&limit=) GET /api/reactions/:mediaId/chat Reactions in chat timeline format POST /api/reactions Add reaction (30s cooldown per type)

    Available types: like, love, laugh, wow, sad, angry

    ","tags":["reference","developer","API"]},{"location":"docs/api/#comments-chat","title":"Comments & Chat","text":"","tags":["reference","developer","API"]},{"location":"docs/api/#public-comments","title":"Public Comments","text":"Method Path Auth Description GET /api/public/:id/comments List comments (?limit=&offset=) POST /api/public/:id/comments Optional Create comment (word-filtered; rate limited: 5/min) GET /api/public/:id/chat-stream SSE stream for real-time chat (30s keepalive)","tags":["reference","developer","API"]},{"location":"docs/api/#comment-admin","title":"Comment Admin","text":"

    Prefix: /api/media/admin/comments \u00b7 Auth: Admin roles

    Method Path Description GET /api/media/admin/comments/stats Counts by status GET /api/media/admin/comments All comments with filters PATCH /api/media/admin/comments/:id/approve Approve comment PATCH /api/media/admin/comments/:id/hide Hide comment PATCH /api/media/admin/comments/:id/unhide Unhide comment PUT /api/media/admin/comments/:id/notes Update moderation notes DELETE /api/media/admin/comments/:id Delete comment","tags":["reference","developer","API"]},{"location":"docs/api/#word-filters","title":"Word Filters","text":"

    Prefix: /api/media/admin/word-filters \u00b7 Auth: Admin roles

    Method Path Description GET /api/media/admin/word-filters List filter entries grouped by level POST /api/media/admin/word-filters Add word ({word, level: low|medium|high|custom}) DELETE /api/media/admin/word-filters/:id Remove word","tags":["reference","developer","API"]},{"location":"docs/api/#chat-threads-notifications","title":"Chat Threads & Notifications","text":"

    Auth: Authenticated

    Method Path Description GET /api/media/chat/threads Videos with user's comments + unread counts POST /api/media/chat/threads/:mediaId/read Mark thread as read GET /api/media/notifications/stream Per-user SSE notification stream (?token=)","tags":["reference","developer","API"]},{"location":"docs/api/#shorts","title":"Shorts","text":"Method Path Auth Description GET /api/shorts Optional Shorts feed (?sort=recent|popular|random) POST /api/shorts/scan Admin Auto-classify short videos by duration","tags":["reference","developer","API"]},{"location":"docs/api/#upvotes","title":"Upvotes","text":"Method Path Auth Description POST /api/public/:id/upvote Toggle upvote (session-based via X-Session-ID header) GET /api/public/:id/upvote-status Check upvote status for current session","tags":["reference","developer","API"]},{"location":"docs/api/#playlists","title":"Playlists","text":"","tags":["reference","developer","API"]},{"location":"docs/api/#public_6","title":"Public","text":"

    Prefix: /api/playlists

    Method Path Auth Description GET /api/playlists/featured Optional Featured playlists GET /api/playlists/popular Optional Popular public playlists (?search=) GET /api/playlists/share/:token Optional Playlist by share token GET /api/playlists/:id Optional Playlist detail (public, owner, or share token) POST /api/playlists/:id/view Optional Record playlist view","tags":["reference","developer","API"]},{"location":"docs/api/#user-playlists","title":"User Playlists","text":"

    Auth: Authenticated

    Method Path Description GET /api/playlists/my Own playlists POST /api/playlists Create playlist PUT /api/playlists/:id Update playlist (ownership check) DELETE /api/playlists/:id Delete playlist POST /api/playlists/:id/videos Add video ({mediaId}) DELETE /api/playlists/:id/videos/:mediaId Remove video PUT /api/playlists/:id/videos/reorder Reorder videos POST /api/playlists/:id/share Generate share token DELETE /api/playlists/:id/share Revoke share token","tags":["reference","developer","API"]},{"location":"docs/api/#playlist-admin","title":"Playlist Admin","text":"

    Prefix: /api/media/playlists \u00b7 Auth: Admin roles

    Method Path Description GET /api/media/playlists All playlists GET /api/media/playlists/featured Featured playlists with admin info POST /api/media/playlists/:id/feature Feature a playlist DELETE /api/media/playlists/:id/feature Unfeature a playlist PUT /api/media/playlists/featured/reorder Reorder featured playlists PUT /api/media/playlists/:id Admin update any playlist POST /api/media/playlists/:id/duplicate Duplicate playlist DELETE /api/media/playlists/:id Admin delete any playlist","tags":["reference","developer","API"]},{"location":"docs/api/#user-profile","title":"User Profile","text":"

    Prefix: /api/media/me \u00b7 Auth: Authenticated

    Method Path Description GET /api/media/me/stats User stats + 30-day activity + achievements GET /api/media/me/watch-history Paginated watch history POST /api/media/me/stats/recalculate Recompute stats from raw data GET /api/media/me/settings Privacy settings PUT /api/media/me/settings Update privacy settings PUT /api/media/me/profile Update display name PUT /api/media/me/password Change password","tags":["reference","developer","API"]},{"location":"docs/api/#route-summary","title":"Route Summary","text":"API Module Endpoint Count Express Auth 9 Users 7 Dashboard 7 Campaigns (CRUD + public + user + moderation + emails) 16 Responses 10 Email Queue 4 Representatives 7 Locations (CRUD + geocode + import) 21 Cuts 11 Shifts (CRUD + series) 19 Canvassing 20 GPS Tracking 10 Map Settings + Geocoding 3 Pages + Blocks 12 Email Templates 13 QR Codes 1 Site Settings 5 Listmonk 9 Docs Management 11 Services 2 Pangolin 16 Observability 3 Payments (public + admin) 29 Health + Metrics 3 Express Total ~248 Fastify Videos (CRUD + upload + actions + schedule + fetch) 39 Streaming 4 Public Gallery 6 Tracking 5 Reactions 4 Comments + Chat 13 Shorts + Upvotes 4 Playlists (public + user + admin) 18 User Profile 7 Health 1 Fastify Total ~101 Grand Total ~349","tags":["reference","developer","API"]},{"location":"docs/architecture/","title":"Architecture","text":"

    Changemaker Lite uses a dual-API architecture with a shared PostgreSQL database, a React single-page application, and Nginx for subdomain routing across 30+ services.

    ","tags":["reference","developer","architecture"]},{"location":"docs/architecture/#system-diagram","title":"System Diagram","text":"
    graph LR\n    Browser[\"Browser\"] --> Nginx[\"Nginx<br/>(reverse proxy)\"]\n    Nginx --> Admin[\"React Admin GUI<br/>port 3000\"]\n    Nginx --> API[\"Express API<br/>port 4000\"]\n    Nginx --> MediaAPI[\"Fastify Media API<br/>port 4100\"]\n    Nginx --> MkDocs[\"MkDocs<br/>port 4003/4004\"]\n    Nginx --> Services[\"Other Services<br/>(Gitea, NocoDB, etc.)\"]\n\n    API --> PostgreSQL[(\"PostgreSQL 16<br/>190+ tables\")]\n    MediaAPI --> PostgreSQL\n    API --> Redis[(\"Redis<br/>cache + queues\")]\n    API --> BullMQ[\"BullMQ<br/>(email, video jobs)\"]\n    BullMQ --> Redis\n\n    subgraph Tunnel [\"Public Access\"]\n        Newt[\"Newt Client\"] --> Pangolin[\"Pangolin Server\"]\n    end\n    Newt --> Nginx
    ","tags":["reference","developer","architecture"]},{"location":"docs/architecture/#key-components","title":"Key Components","text":"Component Technology Role Main API Express.js + TypeScript + Prisma Auth, campaigns, map, shifts, pages, canvassing, email Media API Fastify + TypeScript + Prisma Video library, analytics, uploads, scheduling Admin GUI React 19 + Vite + Ant Design + Zustand Admin dashboard, public pages, volunteer portal, media gallery Database PostgreSQL 16 Shared by both APIs (190+ models via Prisma) Cache Redis 7 Rate limiting, BullMQ job queues, geocoding cache Proxy Nginx Subdomain routing, security headers, WebSocket upgrade Tunnel Pangolin + Newt Expose services without port forwarding Monitoring Prometheus + Grafana + Alertmanager Metrics collection, dashboards, alerting","tags":["reference","developer","architecture"]},{"location":"docs/architecture/#dual-api-design","title":"Dual API Design","text":"

    The platform runs two independent API servers sharing one PostgreSQL database:

    Express API (port 4000)Fastify Media API (port 4100)

    The main API handles all core platform logic:

    • Authentication \u2014 JWT access/refresh tokens, RBAC middleware
    • Modules \u2014 Influence (campaigns, responses), Map (locations, cuts, shifts, canvassing), Pages, Email Templates, Settings, Users, Payments, Social, Calendar
    • Services \u2014 Email queue (BullMQ), geocoding queue, Listmonk sync, Pangolin client, user provisioning
    • ORM \u2014 Prisma with 190+ models and migration history

    A separate server optimized for media handling:

    • Video CRUD \u2014 Upload with FFprobe metadata extraction
    • Scheduled Publishing \u2014 BullMQ queue with timezone support
    • Analytics \u2014 View tracking, watch time, completion rates (GDPR-compliant)
    • Public Gallery \u2014 Playlists, reactions, comments, SSE chat
    • ORM \u2014 Prisma (migrated from Drizzle, Feb 2026)

    Both servers connect to the same database and share the same Prisma schema. This separation allows the media API to handle large file uploads and streaming independently from the main API's request/response cycle.

    ","tags":["reference","developer","architecture"]},{"location":"docs/architecture/#authentication-flow","title":"Authentication Flow","text":"
    sequenceDiagram\n    participant Client\n    participant API\n    participant DB\n    participant Redis\n\n    Client->>API: POST /api/auth/login {email, password}\n    API->>Redis: Check rate limit (10/min per IP)\n    Redis-->>API: OK\n    API->>DB: Verify bcrypt password\n    DB-->>API: User record\n    API->>DB: Create refresh token\n    API-->>Client: {accessToken (15min), refreshToken (7d)}\n\n    Note over Client: Authenticated requests\n    Client->>API: GET /api/campaigns<br/>Authorization: Bearer <accessToken>\n    API->>API: Verify JWT + check role (RBAC)\n    API-->>Client: 200 OK\n\n    Note over Client: Token expired\n    Client->>API: POST /api/auth/refresh {refreshToken}\n    API->>DB: Atomic rotation (delete old, create new)\n    API-->>Client: {new accessToken, new refreshToken}
    ","tags":["reference","developer","architecture"]},{"location":"docs/architecture/#security-features","title":"Security Features","text":"
    • Password policy \u2014 12+ characters, uppercase, lowercase, digit (schema-enforced)
    • Refresh token rotation \u2014 Atomic Prisma transaction prevents race conditions
    • User enumeration prevention \u2014 Returns 401 (not 404) for missing users
    • Rate limiting \u2014 10 requests/minute on auth endpoints via Redis
    • 11 roles \u2014 SUPER_ADMIN (implicit bypass), 8 module-specific admin roles, USER, TEMP
    • Encryption \u2014 AES-256-GCM for sensitive DB fields (ENCRYPTION_KEY env var)
    ","tags":["reference","developer","architecture"]},{"location":"docs/architecture/#request-lifecycle","title":"Request Lifecycle","text":"
    graph TD\n    A[\"Incoming Request\"] --> B[\"Nginx\"]\n    B -->|\"Host: api.domain\"| C[\"Express API\"]\n    B -->|\"Host: media.domain\"| D[\"Fastify Media API\"]\n    B -->|\"Host: app.domain\"| E[\"React Admin GUI\"]\n    C --> F[\"Rate Limiter (Redis)\"]\n    F --> G[\"Auth Middleware (JWT)\"]\n    G --> H[\"Role Check (RBAC)\"]\n    H --> I[\"Validation (Zod)\"]\n    I --> J[\"Route Handler\"]\n    J --> K[\"Service Layer\"]\n    K --> L[\"Prisma ORM\"]\n    L --> M[(\"PostgreSQL\")]\n    J --> N[\"Response + Metrics\"]
    ","tags":["reference","developer","architecture"]},{"location":"docs/architecture/#database-schema","title":"Database Schema","text":"

    The database contains 190+ Prisma models organized by module (key ones shown):

    Module Key Models Auth User, RefreshToken Influence Campaign, CampaignEmail, CampaignResponse, Representative, PostalCode Map Location, Address, Cut, Shift, ShiftSignup Canvass CanvassSession, CanvassVisit, TrackingSession, TrackingPoint Pages Page, PageBlock, EmailTemplate Media Video, VideoReaction, VideoComment, VideoView, Playlist, PlaylistVideo Payments StripeProduct, StripePrice, StripeDonationPage, StripeOrder Social Friendship, SocialNotification, CalendarLayer, CalendarItem SMS SmsContactList, SmsCampaign, SmsMessage, SmsConversation People Contact, ContactAddress, ContactEmail, ContactPhone, ContactConnection Settings SiteSettings, MapSettings","tags":["reference","developer","architecture"]},{"location":"docs/architecture/#docker-compose-architecture","title":"Docker Compose Architecture","text":"

    Services are organized into categories with dependency management:

    graph TD\n    subgraph Core [\"Core (always started)\"]\n        PG[\"PostgreSQL\"] --> API[\"Express API\"]\n        Redis --> API\n        PG --> Media[\"Fastify Media API\"]\n        API --> Admin[\"React Admin\"]\n        Admin --> Nginx\n        API --> Nginx\n        Media --> Nginx\n    end\n\n    subgraph Communication [\"Communication (optional)\"]\n        RC[\"Rocket.Chat\"] --> MongoDB\n        Jitsi[\"Jitsi Meet (4 containers)\"]\n        Gancio[\"Gancio Events\"]\n    end\n\n    subgraph Monitoring [\"Monitoring (profile)\"]\n        Prometheus --> Grafana\n        Prometheus --> Alertmanager\n        cAdvisor --> Prometheus\n        NodeExporter --> Prometheus\n    end\n\n    subgraph Tunnel [\"Tunnel\"]\n        Newt --> Nginx\n    end

    Docker healthchecks ensure proper startup order: PostgreSQL and Redis must be healthy before the API starts. The API runs migrations and seeding automatically via its entrypoint script.

    ","tags":["reference","developer","architecture"]},{"location":"docs/architecture/#subdomain-routing","title":"Subdomain Routing","text":"

    Nginx routes requests based on the Host header. All services run on the changemaker-lite Docker bridge network.

    Pattern Target app.DOMAIN Admin GUI (admin + public + volunteer + gallery) api.DOMAIN Express API media.DOMAIN Fastify Media API DOMAIN (root) MkDocs static site *.DOMAIN 15+ additional service subdomains

    See Services for the complete subdomain table.

    ","tags":["reference","developer","architecture"]},{"location":"docs/deployment/","title":"Deployment","text":"

    This guide covers how to take Changemaker Lite from a local development setup to a publicly accessible production deployment. The main decision is how to expose your services to the internet.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#architecture-overview","title":"Architecture Overview","text":"

    Regardless of which exposure method you choose, the internal architecture is the same:

    Internet \u2192 [Your exposure method] \u2192 Nginx (port 80) \u2192 Backend Services\n

    Nginx handles all subdomain routing internally. Every service is accessed through nginx on port 80, which proxies to the correct container based on the Host header.

    Subdomain Service Container Port app.DOMAIN Admin GUI + public pages 3000 api.DOMAIN Express API 4000 media.DOMAIN Fastify Media API 4100 DOMAIN (root) MkDocs documentation site 4004 db.DOMAIN NocoDB 8091 docs.DOMAIN MkDocs live preview 4003 code.DOMAIN Code Server 8888 git.DOMAIN Gitea 3030 n8n.DOMAIN Workflow automation 5678 home.DOMAIN Homepage dashboard 3010 listmonk.DOMAIN Newsletter manager 9001 mail.DOMAIN MailHog (dev email) 8025 qr.DOMAIN Mini QR generator 8089 draw.DOMAIN Excalidraw whiteboard 8090 vault.DOMAIN Vaultwarden password manager 8445 chat.DOMAIN Rocket.Chat team chat \u2014 events.DOMAIN Gancio event management 8092 grafana.DOMAIN Monitoring dashboards 3005","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#exposure-methods","title":"Exposure Methods","text":"","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#pangolin","title":"Option 1: Pangolin + Newt Tunnel (Recommended)","text":"

    Admin GUI: Tunnel Management Page

    The admin dashboard includes a dedicated Tunnel Management page at Admin \u2192 Settings \u2192 Tunnel. This page provides:

    • Live status of the Pangolin connection and Newt container health
    • Step-by-step setup instructions if credentials aren't configured yet
    • Full resource table listing every service, its domain, and target \u2014 useful as a reference when creating resources in the Pangolin dashboard
    • API-based site creation as an alternative to the Pangolin dashboard UI
    • Restart Newt button for quick container restarts without the terminal

    If you're unsure about any step above, the Tunnel page walks you through the same process interactively.

    Pangolin is a self-hosted tunnel server. The Newt client container runs alongside your stack and establishes an outbound connection to your Pangolin server, which then routes public traffic back through the tunnel. No port forwarding or static IP required.

    Advantages:

    • No port forwarding needed on your router/firewall
    • Works behind CGNAT, double NAT, or restrictive networks
    • SSL/TLS handled by the Pangolin server
    • Self-hosted \u2014 you control the tunnel infrastructure
    • Built-in access control (optional per-resource authentication)

    Requirements:

    • A Pangolin server (self-hosted on a VPS with a public IP)
    • A domain with DNS pointing to the Pangolin server
    • Pangolin API key and organization ID
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#step-1-configure-pangolin-credentials","title":"Step 1: Configure Pangolin Credentials","text":"

    If you used config.sh, you may have already set these. Otherwise, add to your .env:

    PANGOLIN_API_URL=https://api.your-pangolin-server.org/v1\nPANGOLIN_API_KEY=your_api_key_here\nPANGOLIN_ORG_ID=your_org_id\n
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#step-2-create-a-site-in-pangolin","title":"Step 2: Create a Site in Pangolin","text":"

    Log in to your Pangolin dashboard and create a new site:

    1. Navigate to Sites \u2192 Create New Site
    2. Choose type: Newt
    3. Enter a name (e.g., changemaker-yourdomain.org)
    4. Choose a subnet (e.g., 100.90.128.3/24)
    5. Select an exit node (if applicable)
    6. Click Create Site
    7. Copy the credentials \u2014 you'll need the Site ID, Newt ID, and Newt Secret

    Save the credentials

    The Newt Secret is only shown once during site creation. Copy it immediately.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#step-3-update-env-with-site-credentials","title":"Step 3: Update .env with Site Credentials","text":"
    PANGOLIN_SITE_ID=your_site_id\nPANGOLIN_ENDPOINT=https://your-pangolin-server.org\nPANGOLIN_NEWT_ID=your_newt_id\nPANGOLIN_NEWT_SECRET=your_newt_secret\n
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#step-4-start-the-newt-container","title":"Step 4: Start the Newt Container","text":"
    docker compose up -d newt\n

    The Newt container connects to nginx (its only dependency) and establishes the tunnel:

    # From docker-compose.yml\nnewt:\n  image: fosrl/newt\n  container_name: newt-changemaker\n  restart: unless-stopped\n  environment:\n    - PANGOLIN_ENDPOINT=${PANGOLIN_ENDPOINT}\n    - NEWT_ID=${PANGOLIN_NEWT_ID}\n    - NEWT_SECRET=${PANGOLIN_NEWT_SECRET}\n  depends_on:\n    - nginx\n

    Verify the connection:

    docker compose logs newt --tail 20\n

    You should see a successful connection message.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#step-5-create-public-http-resources","title":"Step 5: Create Public HTTP Resources","text":"

    In the Pangolin dashboard, create an HTTP resource for each service you want exposed. All resources point to nginx:80 \u2014 nginx handles the routing internally.

    Required resources (minimum for a working deployment):

    Resource Name Domain Target Auth Admin GUI app.yourdomain.org nginx:80 Not Protected API Server api.yourdomain.org nginx:80 Not Protected Public Site yourdomain.org nginx:80 Not Protected

    Optional resources (add as needed):

    Resource Name Domain Target Media API media.yourdomain.org nginx:80 NocoDB db.yourdomain.org nginx:80 Documentation docs.yourdomain.org nginx:80 Code Server code.yourdomain.org nginx:80 Gitea git.yourdomain.org nginx:80 Grafana grafana.yourdomain.org nginx:80

    Set resources to Not Protected

    By default, Pangolin may enable authentication on new resources. This causes 302 redirects to the Pangolin login page instead of reaching your services. Set each resource to Not Protected (public access) unless you intentionally want Pangolin SSO in front of it.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#step-6-update-cors-for-production","title":"Step 6: Update CORS for Production","text":"

    Add your production domain to CORS_ORIGINS in .env:

    CORS_ORIGINS=https://app.yourdomain.org,http://localhost:3000,http://localhost\n

    Then restart the API:

    docker compose restart api\n
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#step-7-verify","title":"Step 7: Verify","text":"
    # Should return JSON (not a 302 redirect)\ncurl https://api.yourdomain.org/api/health\n\n# Admin GUI should load\ncurl -I https://app.yourdomain.org\n
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#cloudflare","title":"Option 2: Cloudflare Tunnel","text":"

    Cloudflare Tunnel (cloudflared) provides a similar zero-trust tunnel approach using Cloudflare's network. No port forwarding needed, and you get Cloudflare's CDN and DDoS protection.

    Advantages:

    • Free tier available
    • Built-in CDN and DDoS protection
    • No port forwarding needed
    • Managed SSL certificates

    Disadvantages:

    • Proprietary service (not self-hosted)
    • Cloudflare sees all traffic (no end-to-end encryption to your origin)
    • Subject to Cloudflare's Terms of Service
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#setup","title":"Setup","text":"

    1. Create a Cloudflare Tunnel in the Zero Trust dashboard

    2. Add a cloudflared service to your docker-compose.yml:

      cloudflared:\n  image: cloudflare/cloudflared:latest\n  container_name: cloudflared-changemaker\n  restart: unless-stopped\n  command: tunnel run\n  environment:\n    - TUNNEL_TOKEN=${CLOUDFLARE_TUNNEL_TOKEN}\n  depends_on:\n    - nginx\n  networks:\n    - changemaker-lite\n

    3. Add your tunnel token to .env:

      CLOUDFLARE_TUNNEL_TOKEN=your_tunnel_token_here\n

    4. Configure public hostnames in the Cloudflare dashboard, all pointing to http://nginx:80:

      Hostname Service app.yourdomain.org http://nginx:80 api.yourdomain.org http://nginx:80 yourdomain.org http://nginx:80 (add more as needed) http://nginx:80

    5. Start the tunnel:

      docker compose up -d cloudflared\n

    Note

    The cloudflared service is not included in the default docker-compose.yml. Add it manually if you choose this method. The Newt service can be removed or left stopped.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#direct","title":"Option 3: Direct DNS + Reverse Proxy","text":"

    If your server has a public IP address (e.g., a VPS or dedicated server), you can point DNS directly to it and use nginx with SSL certificates.

    Advantages:

    • No tunnel overhead or third-party dependency
    • Full control over the network path
    • Lowest latency

    Disadvantages:

    • Requires a public IP and open ports (80, 443)
    • You manage SSL certificates yourself
    • Server IP is exposed
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#setup_1","title":"Setup","text":"

    1. Point DNS for your domain and all subdomains to your server's IP:

      A     yourdomain.org        \u2192 YOUR_SERVER_IP\nA     *.yourdomain.org      \u2192 YOUR_SERVER_IP\n

      Or use individual A records for each subdomain if your DNS provider doesn't support wildcards.

    2. Open ports 80 and 443 on your server's firewall.

    3. Install Certbot (or another ACME client) for SSL certificates:

      # Ubuntu/Debian\nsudo apt install certbot\n\n# Get a wildcard certificate with DNS challenge\nsudo certbot certonly --manual --preferred-challenges dns \\\n  -d yourdomain.org -d '*.yourdomain.org'\n

      Alternatively, use the Certbot Docker image or a Let's Encrypt companion container.

    4. Update nginx to listen on 443 with your certificates. Add an SSL server block to nginx/conf.d/ssl.conf:

      server {\n    listen 443 ssl;\n    server_name app.yourdomain.org;\n\n    ssl_certificate /etc/nginx/ssl/fullchain.pem;\n    ssl_certificate_key /etc/nginx/ssl/privkey.pem;\n\n    location / {\n        proxy_pass http://changemaker-v2-admin:3000;\n        proxy_set_header Host $host;\n        proxy_set_header X-Real-IP $remote_addr;\n        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n        proxy_set_header X-Forwarded-Proto $scheme;\n        proxy_set_header Upgrade $http_upgrade;\n        proxy_set_header Connection \"upgrade\";\n    }\n}\n\n# Repeat for api.yourdomain.org, media.yourdomain.org, etc.\n# Or use a single server block with $host matching\n

    5. Mount certificates into the nginx container via docker-compose.yml:

      nginx:\n  volumes:\n    - /etc/letsencrypt/live/yourdomain.org:/etc/nginx/ssl:ro\n

    6. Set up auto-renewal with a cron job or systemd timer:

      0 3 * * * certbot renew --quiet && docker compose restart nginx\n

    Traefik alternative

    If you prefer automatic SSL and don't want to manage nginx SSL config manually, consider replacing nginx with Traefik. Traefik can auto-discover Docker containers and provision Let's Encrypt certificates automatically. This would require adapting the container labels and removing the nginx service.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#tailscale","title":"Option 4: Tailscale / WireGuard (Private Access)","text":"

    For deployments that should only be accessible to specific people (not the general public), a mesh VPN like Tailscale or plain WireGuard gives you private networking without exposing anything to the internet.

    Use cases:

    • Internal team deployments
    • Development/staging servers
    • Access from mobile devices without public exposure
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#tailscale-setup","title":"Tailscale Setup","text":"
    1. Install Tailscale on your server and client devices
    2. Access services via Tailscale IP (e.g., http://100.x.x.x:3000)
    3. Optionally use Tailscale Funnel to selectively expose specific services publicly
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#wireguard-setup","title":"WireGuard Setup","text":"
    1. Set up a WireGuard server on your host
    2. Connect client devices via WireGuard config
    3. Access services via the WireGuard interface IP

    Note

    With private access methods, you may not need subdomain routing at all. Access services directly by port: http://server-ip:3000 (admin), http://server-ip:4000 (API), etc.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#production-checklist","title":"Production Checklist","text":"

    Before going live, verify each item:

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#security","title":"Security","text":"
    • All placeholder passwords changed (grep -c \"REQUIRED_STRONG\" .env should return 0)
    • NODE_ENV=production set in .env
    • ENCRYPTION_KEY set and differs from JWT secrets
    • EMAIL_TEST_MODE=false (unless you want MailHog in production)
    • CORS_ORIGINS includes your production domain
    • Admin password changed after first login
    • Redis password set (REDIS_PASSWORD)
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#networking","title":"Networking","text":"
    • DNS records configured for your domain and subdomains
    • SSL/TLS working (tunnel handles this, or manual certs)
    • All Pangolin resources set to \"Not Protected\" (if using Pangolin)
    • curl https://api.yourdomain.org/api/health returns JSON
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#services","title":"Services","text":"
    • Core services running: docker compose ps shows api, admin, v2-postgres, redis, nginx healthy
    • Database migrated: docker compose exec api npx prisma migrate deploy
    • Database seeded: docker compose exec api npx prisma db seed
    • Admin GUI accessible at https://app.yourdomain.org
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#backups","title":"Backups","text":"
    • Backup script tested: ./scripts/backup.sh
    • Backup cron job configured (see Backups below)
    • Restore procedure tested at least once
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#monitoring-optional","title":"Monitoring (Optional)","text":"
    • Monitoring stack started: docker compose --profile monitoring up -d
    • Grafana accessible and dashboards loading
    • Alert rules configured in Alertmanager
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#backups_1","title":"Backups","text":"

    The included backup script dumps PostgreSQL databases, archives uploads, and optionally uploads to S3.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#running-a-backup","title":"Running a Backup","text":"
    ./scripts/backup.sh\n

    This creates a timestamped directory under ./backups/ containing:

    • changemaker_v2.sql.gz \u2014 Main PostgreSQL dump (compressed)
    • listmonk.sql.gz \u2014 Listmonk database dump (if running)
    • uploads.tar.gz \u2014 Media uploads archive
    • manifest.json \u2014 Backup metadata
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#options","title":"Options","text":"
    # Upload to S3 (requires AWS CLI + S3_BUCKET env var)\n./scripts/backup.sh --s3\n\n# Custom retention (delete local backups older than N days)\n./scripts/backup.sh --retention 14\n
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#automated-backups","title":"Automated Backups","text":"

    Add a cron job for daily backups:

    # Edit crontab\ncrontab -e\n\n# Add daily backup at 3 AM\n0 3 * * * /path/to/changemaker.lite/scripts/backup.sh >> /var/log/changemaker-backup.log 2>&1\n\n# With S3 upload\n0 3 * * * /path/to/changemaker.lite/scripts/backup.sh --s3 >> /var/log/changemaker-backup.log 2>&1\n
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#restore","title":"Restore","text":"
    # Restore main database\ngunzip -c backups/changemaker-v2-backup-TIMESTAMP/changemaker_v2.sql.gz | \\\n  docker compose exec -T v2-postgres psql -U changemaker changemaker_v2\n\n# Restore Listmonk database\ngunzip -c backups/changemaker-v2-backup-TIMESTAMP/listmonk.sql.gz | \\\n  docker compose exec -T listmonk-db psql -U listmonk listmonk\n\n# Restore uploads\ntar xzf backups/changemaker-v2-backup-TIMESTAMP/uploads.tar.gz -C ./\n
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#monitoring","title":"Monitoring","text":"

    The monitoring stack runs behind a Docker Compose profile and is not started by default.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#starting-the-monitoring-stack","title":"Starting the Monitoring Stack","text":"
    docker compose --profile monitoring up -d\n

    This starts:

    Service Port Purpose Prometheus 9090 Metrics collection and queries Grafana 3005 Dashboards and visualization Alertmanager 9093 Alert routing and notifications cAdvisor 8086 Container resource metrics Node Exporter 9100 Host system metrics Redis Exporter 9121 Redis metrics Gotify 8889 Push notifications","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#pre-configured-dashboards","title":"Pre-configured Dashboards","text":"

    Grafana includes 3 auto-provisioned dashboards:

    1. API Performance \u2014 HTTP request rates, latencies, error rates
    2. Application Overview \u2014 queue sizes, active sessions, service health
    3. System Health \u2014 container resources, host metrics, Redis stats
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#custom-metrics","title":"Custom Metrics","text":"

    The API exposes 12 custom Prometheus metrics with the cm_ prefix:

    • cm_api_uptime_seconds \u2014 API uptime
    • cm_email_queue_size \u2014 BullMQ pending emails
    • cm_active_canvass_sessions \u2014 Active canvassing sessions
    • cm_locations_total \u2014 Total locations in database
    • And more \u2014 see api/src/utils/metrics.ts
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#alert-rules","title":"Alert Rules","text":"

    Pre-configured alerts in configs/prometheus/alerts.yml:

    • API down for more than 5 minutes
    • High error rate (>5% of requests returning 5xx)
    • Database connection failures
    • Redis connection failures
    • Email queue backlog
    • Disk space warnings
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#upgrading","title":"Upgrading","text":"","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#pulling-updates","title":"Pulling Updates","text":"
    # Pull latest code\ngit pull origin main\n\n# Rebuild and restart containers\ndocker compose build api admin\ndocker compose up -d api admin\n\n# Run any new migrations\ndocker compose exec api npx prisma migrate deploy\n
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#database-migrations","title":"Database Migrations","text":"

    Always run migrations after pulling updates:

    docker compose exec api npx prisma migrate deploy\n

    Back up first

    Always run ./scripts/backup.sh before applying migrations in production. Migrations may alter table structures and are not easily reversible.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#troubleshooting-production-issues","title":"Troubleshooting Production Issues","text":"","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#pangolin-302-redirects-instead-of-content","title":"Pangolin: 302 Redirects Instead of Content","text":"

    Symptom: API returns 302 redirects to the Pangolin authentication page.

    Fix: In the Pangolin dashboard, edit each resource and set Authentication to Not Protected.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#cors-errors","title":"CORS Errors","text":"

    Symptom: Browser console shows CORS errors when accessing the production domain.

    Fix: Add your production app. subdomain to CORS_ORIGINS in .env, then docker compose restart api.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#newt-wont-connect","title":"Newt Won't Connect","text":"

    Check in order:

    1. Credentials: Verify PANGOLIN_NEWT_ID and PANGOLIN_NEWT_SECRET in .env
    2. Endpoint: Confirm PANGOLIN_ENDPOINT matches your Pangolin server URL
    3. Logs: docker compose logs newt --tail 50
    4. Nginx running: Newt depends on nginx \u2014 docker compose ps nginx
    5. Network: Ensure outbound HTTPS is not blocked by your firewall
    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/deployment/#services-unreachable-via-tunnel","title":"Services Unreachable via Tunnel","text":"
    1. Verify nginx is running: docker compose ps nginx
    2. Test locally first: curl http://localhost:4000/api/health
    3. Check nginx logs: docker compose logs nginx --tail 50
    4. Verify DNS: dig app.yourdomain.org should point to your Pangolin server

    See Troubleshooting for more common issues.

    ","tags":["guide","operator","deployment","docker"]},{"location":"docs/getting-started/","title":"Getting Started","text":"

    Changemaker Lite is a self-hosted campaign platform that runs entirely on Docker. This guide takes you from zero to a working deployment \u2014 whether you're evaluating locally or launching for a live campaign.

    Need help getting set up?

    Bunker Operations provides managed infrastructure and hands-on setup assistance for organizations running Changemaker Lite. We handle domains, tunnels, SMTP, and servers so you can focus on your campaign. Get in touch: bnkops.com | admin@bnkops.ca

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/#what-youll-need","title":"What You'll Need","text":"

    Before deploying, gather the essentials. The requirements differ depending on whether you're running a quick local test or a production deployment serving real users.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/#development-local-testing","title":"Development (Local Testing)","text":"

    All you need is Docker \u2014 no domain, tunnel, or SMTP required:

    • Docker 24+ & Compose v2

      The only hard requirement. All 30+ services run as containers.

    • OpenSSL

      Used by the config wizard to auto-generate 21 secrets (JWT, encryption keys, passwords).

    • 2 GB RAM / 10 GB Disk

      Minimum for core services. 4 GB recommended if enabling media, chat, or monitoring.

    MailHog captures all emails locally

    In dev mode, every outbound email is caught by MailHog at http://localhost:8025 \u2014 no SMTP provider needed.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/#production-deployment","title":"Production Deployment","text":"

    For a deployment that serves real users, you'll also need:

    • A Domain Name

      Changemaker Lite uses subdomain routing \u2014 app., api., docs., git., and 10+ more subdomains are created automatically. Wildcard DNS (*.yourdomain.org) is the simplest approach.

      Budget ~$10\u201315/year from any registrar.

    • A Reverse Tunnel or Public IP

      Your server needs to be reachable from the internet. Built-in support for Pangolin \u2014 a self-hosted tunnel with SSL, subdomain routing, and access control. The admin dashboard includes a one-click setup wizard.

      Alternatives: Cloudflare Tunnel, a VPS with public IP, or any reverse proxy with SSL.

    • SMTP Email Provider

      Campaign messages, password resets, volunteer invitations, and newsletters all need real email delivery.

      Recommended: Proton Mail (privacy-focused), Mailgun (100/day free), Amazon SES (cheapest at scale), or Brevo (300/day free).

    • A Linux Server

      Any Linux with Docker. Ubuntu 22.04+ LTS recommended. A VPS from DigitalOcean, Hetzner, or Linode works great \u2014 or a spare machine on your network if using a tunnel.

    Optional services that enhance your deployment

    These aren't required but unlock additional features:

    Service Purpose Free Tier Stripe Donations, merchandise, membership plans Free account, pay-as-you-go Mapbox or Google Maps Better geocoding accuracy for mapping 100K req/mo (Mapbox) or $200/mo credit (Google) MaxMind GeoLite2 Geographic analytics (visitor locations) Free account Android phone + Termux SMS campaigns via physical phone gateway Free \u2014 no third-party SMS costs Public IP + UDP 10000 Jitsi self-hosted video conferencing Free (requires open firewall port)

    See Prerequisites & External Services for setup details on each.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/#quick-install","title":"Quick Install","text":"","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/#pre-built-images-recommended","title":"Pre-built Images (Recommended)","text":"

    The fastest path \u2014 no source code, no compilation:

    curl -fsSL https://gitea.bnkops.com/admin/changemaker.lite/raw/branch/main/scripts/install.sh | bash\n

    This downloads a release tarball (~15 MB \u2014 config, compose files, and MkDocs content), runs the 14-step configuration wizard, and pulls pre-built Docker images. First startup takes ~2 minutes.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/#from-source-development","title":"From Source (Development)","text":"

    For development or customization:

    git clone https://gitea.bnkops.com/admin/changemaker.lite\ncd changemaker.lite\n
    bash config.sh\n
    docker compose up -d\n

    Open http://localhost:3000 and sign in with the admin credentials you configured. The API container automatically runs database migrations and seeding on first startup.

    Change your password

    If you used the wizard's generated password, change it immediately from the admin dashboard.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/#configuration-wizard","title":"Configuration Wizard","text":"

    The config.sh wizard produces a fully populated .env file in 14 steps:

    Step What It Does 1. Prerequisites Verifies Docker, Docker Compose, and OpenSSL 2. Environment file Creates .env from .env.example (backs up existing) 3. Domain Sets root domain + 14 derived variables, updates mkdocs.yml 4. Admin credentials Email + password (enforces 12+ chars, mixed case, digit) 5. Secrets Auto-generates 21 unique secrets (JWT, encryption, database, service passwords) 6. Email MailHog (dev) or production SMTP, optionally shared with Listmonk 7. Feature flags 9 toggles: Media, Listmonk, Payments, Chat, Events, Meet, SMS, Docs Comments, Bunker Ops 8. Tunnel Pangolin credentials for secure public access 9. CORS Auto-calculated allowed origins from domain 10. Nginx Renders .conf.template files with domain substitution 11. Homepage Generates services.yaml with 27 service entries 12. Permissions Creates 12 directories with container-friendly permissions 13. Upgrade watcher Installs systemd units for GUI-triggered upgrades (optional, requires sudo) 14. Summary Displays configuration summary + next steps

    See Installation for detailed documentation of each step.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/#pre-installation-checklist","title":"Pre-Installation Checklist","text":"

    Use this to make sure you're ready before running the installer:

    • Docker 24+ and Docker Compose v2 installed
    • OpenSSL installed (for secret generation)
    • Domain name registered and DNS accessible
    • DNS configured \u2014 wildcard *.yourdomain.org or individual subdomains pointing to your tunnel/server
    • Tunnel or public IP \u2014 Pangolin credentials (API key + Org ID), or server with public IP + SSL
    • SMTP credentials \u2014 host, port, username, password from your email provider
    • (Optional) Stripe account for payments
    • (Optional) Mapbox or Google Maps API key for geocoding
    • (Optional) MaxMind account for geographic analytics
    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/#services-at-a-glance","title":"Services at a Glance","text":"

    Changemaker Lite includes 30+ Docker services organized into 8 categories:

    Category Services Startup Core API, Admin, PostgreSQL, Redis, Nginx docker compose up -d v2-postgres redis api admin nginx Media Fastify media API docker compose up -d media-api Communication Rocket.Chat, Gancio, Jitsi Meet Individual docker compose up -d commands Newsletter & Email Listmonk, MailHog docker compose up -d listmonk-app Developer Tools Code Server, MkDocs, Gitea, NocoDB, n8n Individual docker compose up -d commands Utilities Mini QR, Excalidraw, Vaultwarden, Homepage docker compose up -d mini-qr excalidraw vaultwarden homepage Monitoring Prometheus, Grafana, Alertmanager, exporters docker compose --profile monitoring up -d Infrastructure Newt tunnel, Docker socket proxy Auto-starts with tunnel configuration

    See Services Overview for the complete catalog with ports, feature flags, and detailed descriptions.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/#next-steps","title":"Next Steps","text":"

    • Prerequisites

      Full details on every external service \u2014 domain setup, SMTP providers, tunnel options, and optional integrations.

    • Installation

      Detailed setup walkthrough, manual configuration, and the full config wizard reference.

    • Services Overview

      Complete catalog of 30+ containers with ports, feature flags, and descriptions.

    • Environment Variables

      Complete .env reference for every setting.

    • First Steps

      Create your first campaign, add locations to the map, and invite volunteers.

    • Updates & Upgrades

      Keep your installation current with zero-downtime upgrades.

    • Control Panel

      Manage multiple Changemaker Lite instances from a single dashboard.

    • Features at a Glance

      Visual overview of every module \u2014 advocacy, mapping, media, payments, and more.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/control-panel/","title":"Changemaker Control Panel (CCP)","text":"

    Need help getting set up?

    Bunker Operations provides managed infrastructure and hands-on setup assistance for organizations running Changemaker Lite. We handle domains, tunnels, SMTP, and servers so you can focus on your campaign. Get in touch: bnkops.com | admin@bnkops.ca

    The Changemaker Control Panel is a multi-tenant management layer for operators who run multiple Changemaker Lite instances from a single server. It provides a web UI to provision, monitor, and maintain a fleet of instances without manual configuration.

    Single instance?

    If you're running a single Changemaker Lite instance, you don't need CCP. Skip this page and continue with First Steps.

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#when-to-use-ccp","title":"When to Use CCP","text":"

    CCP is designed for:

    • Campaign organizations managing instances for multiple chapters or regions
    • Hosting providers offering Changemaker Lite as a managed service
    • Development teams spinning up isolated test instances

    CCP handles the entire instance lifecycle: provisioning, configuration, health monitoring, backups, and upgrades \u2014 all from a single dashboard.

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#architecture","title":"Architecture","text":"

    CCP runs as 4 Docker containers alongside (but independent from) your CML instances:

    \u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510\n\u2502   CCP Admin GUI (5100)   \u2502  React + Vite + Ant Design\n\u2502   Dark theme, SPA        \u2502  Zustand auth store\n\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u252c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518\n             \u2502\n\u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u25bc\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510\n\u2502   CCP API (5000)         \u2502  Express + TypeScript\n\u2502   JWT auth, RBAC         \u2502  Prisma ORM \u2192 PostgreSQL\n\u2502   Docker socket access   \u2502  Winston logger\n\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u252c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518\n             \u2502\n    \u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u253c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510\n    \u25bc        \u25bc        \u25bc\nccp-postgres ccp-redis  Docker Socket\n(port 5480)  (port 6399)\n
    Service Container Port Description CCP API ccp-api 5000 Express API with Docker CLI access CCP Admin ccp-admin 5100 React admin GUI CCP PostgreSQL ccp-postgres 5480 CCP metadata database CCP Redis ccp-redis 6399 Rate limiting, caching

    Each managed CML instance gets its own isolated set of containers and PostgreSQL database, with ports allocated from non-overlapping ranges.

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#setup","title":"Setup","text":"","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#1-run-the-setup-script","title":"1. Run the Setup Script","text":"
    cd changemaker-control-panel\nchmod +x setup.sh\n./setup.sh\n

    The setup script:

    • Detects the installation directory and resolves absolute paths
    • Creates instances/ and backups/ directories
    • Copies .env.example to .env if not present
    • Sets INSTANCES_BASE_PATH, BACKUP_STORAGE_PATH, and CML_SOURCE_PATH
    • Generates random secrets for any placeholder values
    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#2-review-environment","title":"2. Review Environment","text":"

    Edit .env and verify the key settings:

    Variable Default Description JWT_ACCESS_SECRET Auto-generated JWT signing key JWT_REFRESH_SECRET Auto-generated Refresh token signing key ENCRYPTION_KEY Auto-generated AES-256 key for instance secrets at rest INITIAL_ADMIN_EMAIL admin@example.com Bootstrap admin email INITIAL_ADMIN_PASSWORD ChangeMe2025!! Bootstrap admin password INSTANCES_BASE_PATH ./instances Where instance directories are created CML_SOURCE_PATH Auto-detected Path to CML source repo for provisioning BACKUP_STORAGE_PATH ./backups Backup archive storage PANGOLIN_API_URL \u2014 Pangolin API for tunnel management PANGOLIN_API_KEY \u2014 Pangolin authentication PANGOLIN_ORG_ID \u2014 Pangolin organization","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#3-start-ccp","title":"3. Start CCP","text":"
    docker compose up -d\n\n# Run database migrations and seed the admin user\ndocker compose exec ccp-api npx prisma migrate deploy\ndocker compose exec ccp-api npx prisma db seed\n
    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#4-log-in","title":"4. Log In","text":"

    Open http://localhost:5100 and sign in with the admin credentials from .env.

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#creating-an-instance","title":"Creating an Instance","text":"

    The Create Instance wizard walks through 5 steps:

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#step-1-basic-information","title":"Step 1: Basic Information","text":"
    • Instance name \u2014 human-readable label (e.g., \"Edmonton Chapter\")
    • Slug \u2014 URL-safe identifier (e.g., edmonton), used for directory names and compose project
    • Domain \u2014 the domain this instance will serve (e.g., edmonton.example.org)
    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#step-2-features","title":"Step 2: Features","text":"

    Toggle which platform features to enable for this instance:

    • Media Manager
    • Listmonk newsletter sync
    • Payments
    • Rocket.Chat
    • Gancio events
    • Jitsi Meet
    • SMS Campaigns
    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#step-3-email","title":"Step 3: Email","text":"

    Configure SMTP for the instance, or use MailHog for testing.

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#step-4-tunnel","title":"Step 4: Tunnel","text":"

    Optionally configure Pangolin tunnel credentials for public access.

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#step-5-review","title":"Step 5: Review","text":"

    Review all settings, then click Create to start provisioning.

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#provisioning-flow","title":"Provisioning Flow","text":"

    When you create an instance, CCP runs a 13-step async provisioning process:

    Step What Happens 1 Validate uniqueness (slug + domain) 2 Allocate 4 ports from ranges 3 Generate 14 secrets (passwords, JWT keys, encryption keys) 4 Create Instance record (status: PROVISIONING) 5 Create instance directory 6 Copy CML source code (rsync, excluding node_modules/.git/.env) 7 Decrypt secrets and build template context 8 Render 7 config files from Handlebars templates (docker-compose.yml, .env, nginx configs, Pangolin, Prometheus) 9 Copy static files (nginx.conf) 10 docker compose pull (non-fatal if images are cached) 11 docker compose build 12 Start infrastructure (PostgreSQL + Redis), wait for healthy 13 Start API (runs migrations + seed), then start all remaining services

    The admin GUI polls every 3 seconds during provisioning to show progress. When complete, the instance status changes to RUNNING.

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#port-allocation","title":"Port Allocation","text":"

    CCP allocates ports from 4 non-overlapping ranges to prevent conflicts between instances:

    Range Start End Purpose API 14000 14999 Express API server Admin 13000 13999 React admin GUI PostgreSQL 15400 15499 Database Nginx 10000 10999 Reverse proxy

    Each new instance receives one port from each range. Ports are tracked in the database and released when instances are deleted.

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#pages-overview","title":"Pages Overview","text":"","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#dashboard","title":"Dashboard","text":"

    At-a-glance fleet status:

    • Total instances, running, healthy, degraded, stopped, error counts
    • Instance cards with status indicators and quick actions
    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#instance-list","title":"Instance List","text":"

    Searchable, filterable table of all instances with status, domain, health, and creation date.

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#instance-detail","title":"Instance Detail","text":"

    5-tab view for each instance:

    Tab Content Overview Status, domain, ports, features, health summary Services Per-container status grid with restart and log-view actions Logs Real-time log viewer with service filter, tail count, and time range Backups Backup list with create, download, and delete actions Tunnel Pangolin tunnel status and configuration","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#backups","title":"Backups","text":"

    Cross-instance backup management:

    • All backups in one table with instance filter
    • Stats: total count, total size, last backup time
    • \"Backup All Running\" bulk action
    • Download and delete individual archives
    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#audit-log","title":"Audit Log","text":"

    Filterable activity trail with 18 action types:

    • Instance lifecycle: CREATE, UPDATE, DELETE, START, STOP, RESTART, UPGRADE
    • Backups: CREATE, DELETE
    • Tunnel: PANGOLIN_SETUP, PANGOLIN_SYNC
    • Users: LOGIN, CREATE, UPDATE, DELETE
    • Settings: UPDATE

    Each entry includes timestamp, user, action, instance, IP address, and details (expandable JSON).

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#settings","title":"Settings","text":"

    CCP-level configuration:

    • Port ranges
    • Pangolin credentials
    • Default feature flags for new instances
    • Health check interval
    • Backup retention period
    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#roles","title":"Roles","text":"Role Capabilities SUPER_ADMIN Full access: create/delete instances, manage users, view secrets, delete backups OPERATOR Manage instances: create, start/stop/restart, backups, health checks VIEWER Read-only: view instances, logs, health, backups, audit log","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#security","title":"Security","text":"
    • JWT authentication with 15-minute access tokens and 7-day refresh tokens (atomic rotation)
    • AES-256-GCM encryption for instance secrets stored in the database
    • Audit logging on all operations with IP address capture
    • Role-based access control on all API endpoints
    • Docker socket access restricted to the CCP API container only
    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#registering-an-existing-install-phone-home","title":"Registering an Existing Install (Phone-Home)","text":"

    Instead of provisioning from scratch, CCP can adopt a Changemaker Lite install that already runs elsewhere. The target host's ccp-agent container phones home with an invite code, you approve the registration in CCP, and CCP issues an mTLS cert bundle for ongoing management.

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#1-generate-an-invite-code-in-ccp","title":"1. Generate an invite code in CCP","text":"
    curl -s -X POST $CCP_URL/api/invite-codes \\\n  -H \"Authorization: Bearer $ADMIN_TOKEN\" \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\"expiryHours\":48}'\n

    The response contains a code like KNZH-B6WW. Invite codes are single-use and expire.

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#2-install-the-target-with-ccp-flags","title":"2. Install the target with --ccp-* flags","text":"

    On the host that will be registered:

    bash config.sh -y --enable-all \\\n  --domain yourdomain.org \\\n  --admin-password 'StrongPassword1' \\\n  --ccp-url https://ccp.example.com \\\n  --ccp-invite-code KNZH-B6WW \\\n  --ccp-agent-url https://100.90.78.47:7443 \\\n  # ... tunnel, SMTP, and other flags\n

    All three CCP flags are required together. The wizard:

    • Sets ENABLE_CCP_AGENT=true in .env
    • Appends ccp-agent to COMPOSE_PROFILES (without clobbering monitoring)
    • On docker compose up -d, the ccp-agent container starts and phones home
    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#3-approve-in-ccp","title":"3. Approve in CCP","text":"
    # List pending registrations\ncurl -s $CCP_URL/api/agents/registrations -H \"Authorization: Bearer $ADMIN_TOKEN\"\n\n# Approve one\ncurl -s -X POST $CCP_URL/api/agents/registrations/$REG_ID/approve \\\n  -H \"Authorization: Bearer $ADMIN_TOKEN\" -d '{}'\n

    On approval, CCP issues a mTLS cert bundle. The agent picks it up on its next poll, writes certs to disk, and restarts into mTLS mode. The instance then shows as RUNNING in CCP with live container status via docker compose ps proxied through the agent.

    Approval SLA and rate limits

    The agent polls /api/agents/poll every 30s while waiting. The endpoint accepts up to 180 polls per 15 minutes (one every ~5s upper bound), so the agent comfortably handles human-paced approval times. If the agent does hit HTTP 429, it backs off exponentially (30s \u2192 60s \u2192 120s \u2192 300s cap) and resets on the next successful poll \u2014 no manual restart required.

    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#4-deregister-on-teardown","title":"4. Deregister on teardown","text":"

    When you wipe the target host (docker compose down -v + sudo rm -rf), also deregister the instance from CCP. Otherwise the stale Instance row blocks re-registration of the same slug, and CCP will return HTTP 409 SLUG_CONFLICT on the next approval.

    # From the target host (or anywhere with network access to CCP):\nbash scripts/ccp-deregister.sh \\\n  --ccp-url https://ccp.example.com \\\n  --token $ADMIN_TOKEN \\\n  --yes\n

    Defaults: matches by CCP_AGENT_URL from .env. Use --slug or --instance-id for explicit targeting. Dry-run by default.

    The teardown sequence for a registered instance is therefore:

    cd ~/changemaker.lite\nbash scripts/ccp-deregister.sh --token $ADMIN_TOKEN --yes     # CCP-side\nbash scripts/pangolin-teardown.sh --yes                        # Pangolin-side\ndocker compose --profile monitoring down -v --remove-orphans  # Docker\nsudo rm -rf ~/changemaker.lite                                 # Filesystem\n
    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/control-panel/#next-steps","title":"Next Steps","text":"
    • Services Overview \u2014 learn about the services CCP provisions for each instance
    • Updates & Upgrades \u2014 upgrading CML instances
    • Deployment \u2014 production setup with tunneling and SSL
    ","tags":["guide","operator","multi-tenant"]},{"location":"docs/getting-started/environment-variables/","title":"Environment Variables","text":"

    Need help getting set up?

    Bunker Operations provides managed infrastructure and hands-on setup assistance for organizations running Changemaker Lite. We handle domains, tunnels, SMTP, and servers so you can focus on your campaign. Get in touch: bnkops.com | admin@bnkops.ca

    Changemaker Lite uses a single .env file at the project root to configure all services. Copy the example file to get started:

    cp .env.example .env\n

    Security Essentials

    • Change every REQUIRED_STRONG_PASSWORD_CHANGE_THIS value before starting services
    • Generate secrets with openssl rand -hex 32 (or -hex 16 where noted)
    • Never commit .env to version control
    • Use unique values for each secret \u2014 do not reuse JWT secrets as encryption keys
    ","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#quick-reference","title":"Quick Reference","text":"

    Variables are grouped by service. Each table marks whether a variable is required for a basic deployment or optional (has a sensible default or only needed for specific features).

    Symbol Meaning Must be set before first run Has a working default; change for production Feature flag \u2014 opt-in","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#general","title":"General","text":"Variable Default Description NODE_ENV development Set to production for production deployments. Controls logging, error detail, and security checks. DOMAIN cmlite.org Root domain. Used for nginx subdomain routing (app.DOMAIN, api.DOMAIN, etc.). The root domain serves the MkDocs documentation site; all application routes live under app.DOMAIN. USER_ID 1000 UID for container file ownership. Match your host user's UID (id -u). GROUP_ID 1000 GID for container file ownership. Match your host user's GID (id -g). DOCKER_GROUP_ID 984 GID of the docker group on the host. Needed for containers that access the Docker socket. Find with getent group docker.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#postgresql-main-database","title":"PostgreSQL (Main Database)","text":"

    The primary database for both the Express API and the Fastify Media API (shared).

    Variable Default Description V2_POSTGRES_USER changemaker Database username. V2_POSTGRES_PASSWORD \u2014 Must change. Database password. V2_POSTGRES_DB changemaker_v2 Database name. V2_POSTGRES_PORT 5433 Host port mapping. The container listens on 5432 internally.

    Connection string

    The DATABASE_URL is constructed automatically inside Docker. If running locally, set: 

    DATABASE_URL=postgresql://changemaker:YOUR_PASSWORD@localhost:5433/changemaker_v2\n

    ","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#jwt-authentication","title":"JWT Authentication","text":"Variable Default Description JWT_ACCESS_SECRET \u2014 Secret for signing access tokens. Generate with openssl rand -hex 32. JWT_REFRESH_SECRET \u2014 Secret for signing refresh tokens. Must differ from the access secret. JWT_INVITE_SECRET \u2014 Secret for signing volunteer invite tokens. Must differ from access and refresh secrets. Generate with openssl rand -hex 32. JWT_ACCESS_EXPIRY 15m Access token lifetime. Short-lived by design. JWT_REFRESH_EXPIRY 7d Refresh token lifetime. Tokens are rotated atomically on each refresh.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#encryption-key","title":"Encryption Key","text":"Variable Default Description ENCRYPTION_KEY \u2014 AES key for encrypting secrets stored in the database (SMTP passwords, API keys, etc.). Generate with openssl rand -hex 32. Must not reuse a JWT secret. Required in all environments (no longer falls back to JWT secret in development).","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#security-extras","title":"Security Extras","text":"

    Additional secrets for key separation. These fall back to JWT_ACCESS_SECRET if empty, but setting unique values is strongly recommended for production.

    Variable Default Description GITEA_SSO_SECRET (empty) Cookie signing secret for Gitea SSO integration. Falls back to JWT_ACCESS_SECRET if empty. Generate with openssl rand -hex 32. SERVICE_PASSWORD_SALT (empty) Salt for deriving deterministic service passwords (Gitea, Rocket.Chat user provisioning). Falls back to JWT_ACCESS_SECRET if empty \u2014 rotating JWT_ACCESS_SECRET would then invalidate all provisioned service passwords. Generate with openssl rand -hex 32. CSP_ENABLED false Enable Content Security Policy headers in API responses.

    Key separation

    If GITEA_SSO_SECRET and SERVICE_PASSWORD_SALT are left empty, the API logs security warnings on every startup. Set unique values to isolate secret rotation and prevent one compromised key from affecting other subsystems.

    ","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#initial-admin-account","title":"Initial Admin Account","text":"

    These credentials create the first super-admin user during database seeding (npx prisma db seed).

    Variable Default Description INITIAL_ADMIN_EMAIL admin@cmlite.org Email address for the initial admin. INITIAL_ADMIN_PASSWORD \u2014 Must change. Must be 12+ characters with uppercase, lowercase, and a digit. Change this password after first login.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#api-server","title":"API Server","text":"Variable Default Description API_PORT 4000 Host port for the Express API. API_URL http://localhost:4000 Public URL of the API. Used for generating links in emails and QR codes. CORS_ORIGINS http://localhost:3000,http://localhost Comma-separated list of allowed CORS origins. Add your production domain (e.g., https://app.yourdomain.org) for production.

    Production CORS

    If you deploy behind a tunnel (Pangolin, Cloudflare) and API requests fail with CORS errors, add your production app. subdomain here: 

    CORS_ORIGINS=https://app.betteredmonton.org,http://localhost:3000,http://localhost\n
    Then restart the API: docker compose restart api

    ","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#admin-gui","title":"Admin GUI","text":"Variable Default Description ADMIN_PORT 3000 Host port for the React admin dashboard. ADMIN_URL http://localhost:3000 Public URL of the admin GUI.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#rate-limiting","title":"Rate Limiting","text":"Variable Default Description RATE_LIMIT_WINDOW_MS 900000 Rate limit window in milliseconds (default: 15 minutes). RATE_LIMIT_MAX 500 Maximum requests per window per IP. Auth endpoints have a stricter limit (10/min).","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#nginx-reverse-proxy","title":"Nginx Reverse Proxy","text":"Variable Default Description NGINX_HTTP_PORT 80 HTTP port. All subdomains route through nginx. NGINX_HTTPS_PORT 443 HTTPS port. SSL is typically handled by the tunnel provider (Pangolin/Cloudflare).","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#redis","title":"Redis","text":"

    Shared by rate limiting, BullMQ job queues, geocoding cache, and session data.

    Variable Default Description REDIS_PASSWORD \u2014 Must change. Redis requires authentication. REDIS_URL redis://:${REDIS_PASSWORD}@redis-changemaker:6379 Full connection URL. Uses the password variable automatically.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#payments-stripe","title":"Payments (Stripe)","text":"Variable Default Description ENABLE_PAYMENTS false Set to true to enable the payments feature (memberships, products, donations). Stripe API keys are stored encrypted in the database via the admin settings page.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#email-smtp","title":"Email / SMTP","text":"Variable Default Description SMTP_HOST mailhog-changemaker SMTP server. Default points to the MailHog dev container. SMTP_PORT 1025 SMTP port. 1025 for MailHog, 587 for most production SMTP. SMTP_USER (empty) SMTP username. Not needed for MailHog. SMTP_PASS (empty) SMTP password. SMTP_FROM noreply@cmlite.org \"From\" address on outgoing emails. SMTP_FROM_NAME Changemaker Lite Display name for the \"From\" header. EMAIL_TEST_MODE true When true, all emails go to MailHog instead of real SMTP. Set to false in production. TEST_EMAIL_RECIPIENT admin@cmlite.org Catch-all recipient when test mode is on.

    Development email

    With EMAIL_TEST_MODE=true, all outgoing email is captured in MailHog at http://localhost:8025. No real emails are sent.

    ","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#listmonk-newsletters","title":"Listmonk (Newsletters)","text":"

    Listmonk handles newsletter/marketing campaigns. Sync with the main platform is opt-in.

    Variable Default Description LISTMONK_PORT 9001 Listmonk web UI port. LISTMONK_DB_PORT 5434 Listmonk's own PostgreSQL port (separate from the main DB). Uses 5434 to avoid conflict with the main PostgreSQL (5432 internal / 5433 host). LISTMONK_DB_USER listmonk Listmonk database user. LISTMONK_DB_PASSWORD \u2014 Listmonk database password. LISTMONK_DB_NAME listmonk Listmonk database name. LISTMONK_WEB_ADMIN_USER admin Login for the Listmonk web dashboard. LISTMONK_WEB_ADMIN_PASSWORD \u2014 Password for the Listmonk web dashboard. LISTMONK_API_USER v2-api API user for programmatic access (auto-created by init container). LISTMONK_API_TOKEN \u2014 Token for API user. Generate with openssl rand -hex 16. LISTMONK_ADMIN_USER v2-api Same as LISTMONK_API_USER (used by the sync service). LISTMONK_ADMIN_PASSWORD \u2014 Same as LISTMONK_API_TOKEN. LISTMONK_SYNC_ENABLED false Set to true to sync participants/locations/users to Listmonk lists. LISTMONK_WEBHOOK_SECRET (empty) Shared secret for Listmonk webhook callbacks. LISTMONK_PROXY_PORT 9002 Nginx proxy port for Listmonk. Listmonk SMTP settings

    Listmonk has its own SMTP configuration, separate from the main platform's:

    Variable Default Description LISTMONK_SMTP_HOST mailhog-changemaker SMTP host for Listmonk. LISTMONK_SMTP_PORT 1025 SMTP port. LISTMONK_SMTP_USER (empty) SMTP username. LISTMONK_SMTP_PASSWORD (empty) SMTP password. LISTMONK_SMTP_TLS_TYPE none TLS mode: none, STARTTLS, or TLS. LISTMONK_SMTP_FROM Changemaker Lite <noreply@cmlite.org> From address for newsletters.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#represent-api-canadian-electoral-data","title":"Represent API (Canadian Electoral Data)","text":"Variable Default Description REPRESENT_API_URL https://represent.opennorth.ca OpenNorth Represent API endpoint. Used for postal code \u2192 representative lookups. No API key required.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#nocodb-data-browser","title":"NocoDB (Data Browser)","text":"

    Read-only database browser. Useful for inspecting data without SQL.

    Variable Default Description NOCODB_V2_PORT / NOCODB_PORT 8091 Host port for the NocoDB web UI. NOCODB_URL http://changemaker-v2-nocodb:8080 Internal Docker URL. NC_ADMIN_EMAIL admin@cmlite.org NocoDB admin email. NC_ADMIN_PASSWORD \u2014 NocoDB admin password.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#media-manager","title":"Media Manager","text":"

    Video library with upload, analytics, scheduling, and a public gallery.

    Variable Default Description ENABLE_MEDIA_FEATURES false Set to true to enable the media system. MEDIA_API_PORT 4100 Fastify media API port. MEDIA_API_PUBLIC_URL http://media-api:4100 Internal URL for the media API container. MEDIA_ROOT /media/library Path to the video library inside the container. MEDIA_UPLOADS /media/uploads Path for upload processing. MAX_UPLOAD_SIZE_GB 10 Maximum single-file upload size in gigabytes. PUBLIC_MEDIA_PORT 3100 Public media gallery server port. VIDEO_PLAYER_DEBUG false Enable verbose video player logging. Analytics & scheduling settings Variable Default Description VIDEO_ANALYTICS_RETENTION_DAYS 90 Days to retain analytics data. GDPR-compliant with IP hashing. VIDEO_ANALYTICS_IP_HASHING_ENABLED true Hash viewer IPs for privacy. VIDEO_SCHEDULE_DEFAULT_TIMEZONE UTC Default timezone for scheduled publishing. VIDEO_SCHEDULE_NOTIFICATION_ENABLED true Notify on scheduled publish/unpublish. VIDEO_PREVIEW_LINK_EXPIRY_HOURS 24 Preview link JWT expiry (hours).","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#gitea-git-hosting","title":"Gitea (Git Hosting)","text":"

    Self-hosted Git repository. Optional service.

    Variable Default Description GITEA_URL http://gitea-changemaker:3000 Internal container URL for Gitea. GITEA_PORT / GITEA_WEB_PORT 3030 Gitea web UI port. GITEA_SSH_PORT 2222 Gitea SSH port for git operations. GITEA_DB_TYPE mysql Database type (Gitea uses its own MySQL). GITEA_DB_HOST gitea-db:3306 Internal database host. GITEA_DB_NAME gitea Database name. GITEA_DB_USER gitea Database user. GITEA_DB_PASSWD \u2014 Gitea database password. GITEA_DB_ROOT_PASSWORD \u2014 MySQL root password for Gitea. GITEA_ROOT_URL https://git.cmlite.org Public-facing URL for Gitea. GITEA_DOMAIN git.cmlite.org Domain used in git clone URLs. Gitea Docs Comments

    Enable comments on MkDocs documentation pages, backed by Gitea Issues.

    Variable Default Description GITEA_COMMENTS_ENABLED false Enable comments on MkDocs pages. GITEA_API_TOKEN (empty) Personal access token with repo write scope. Create in Gitea \u2192 Settings \u2192 Applications. GITEA_COMMENTS_REPO_OWNER (empty) Gitea username that owns the docs-comments repo. GITEA_COMMENTS_REPO_NAME docs-comments Repository name (auto-created via admin setup). GITEA_OAUTH_CLIENT_ID (empty) OAuth2 application client ID (create in Gitea \u2192 Settings \u2192 Applications \u2192 OAuth2). GITEA_OAUTH_CLIENT_SECRET (empty) OAuth2 application client secret.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#n8n-workflow-automation","title":"n8n (Workflow Automation)","text":"Variable Default Description N8N_PORT 5678 n8n web UI port. N8N_HOST n8n.cmlite.org Public hostname for n8n. N8N_ENCRYPTION_KEY \u2014 Encryption key for n8n credentials storage. N8N_USER_EMAIL admin@example.com Initial n8n admin email. N8N_USER_PASSWORD \u2014 Initial n8n admin password. GENERIC_TIMEZONE UTC Timezone for n8n cron triggers.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#mkdocs-documentation","title":"MkDocs (Documentation)","text":"Variable Default Description MKDOCS_PORT 4003 MkDocs dev server port (live preview). MKDOCS_SITE_SERVER_PORT 4004 MkDocs static site server port. BASE_DOMAIN https://cmlite.org Base URL for generated documentation links. MKDOCS_PREVIEW_URL http://mkdocs:8000 Internal container URL. MKDOCS_DOCS_PATH /mkdocs/docs Documentation source directory inside the container.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#code-server-web-ide","title":"Code Server (Web IDE)","text":"Variable Default Description CODE_SERVER_PORT 8888 Code Server web UI port. CODE_SERVER_URL http://code-server-changemaker:8443 Internal container URL.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#homepage-service-dashboard","title":"Homepage (Service Dashboard)","text":"Variable Default Description HOMEPAGE_PORT 3010 Homepage web UI port. HOMEPAGE_EMBED_PORT 8887 Port for iframe embedding in admin. HOMEPAGE_VAR_BASE_URL http://localhost Base URL used in Homepage service links.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#mini-qr-qr-code-generator","title":"Mini QR (QR Code Generator)","text":"Variable Default Description MINI_QR_PORT 8089 Mini QR direct access port. MINI_QR_URL http://mini-qr:8080 Internal container URL. MINI_QR_EMBED_PORT 8885 Port for iframe embedding (walk sheets, cut exports).","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#excalidraw-whiteboard","title":"Excalidraw (Whiteboard)","text":"Variable Default Description EXCALIDRAW_PORT 8090 Excalidraw web UI port. EXCALIDRAW_URL http://excalidraw-changemaker:80 Internal container URL. EXCALIDRAW_EMBED_PORT 8886 Port for iframe embedding. EXCALIDRAW_WS_URL wss://draw.cmlite.org WebSocket URL for real-time collaboration.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#vaultwarden-password-manager","title":"Vaultwarden (Password Manager)","text":"

    Self-hosted Bitwarden-compatible password manager. Optional service.

    Variable Default Description VAULTWARDEN_PORT 8445 Vaultwarden web UI port. VAULTWARDEN_URL http://vaultwarden-changemaker:80 Internal container URL. VAULTWARDEN_EMBED_PORT 8890 Port for iframe embedding in admin. VAULTWARDEN_ADMIN_TOKEN (empty) Admin panel token (access at /admin). Generate with openssl rand -hex 32. VAULTWARDEN_DOMAIN https://vault.cmlite.org Public-facing URL. Must use HTTPS \u2014 Bitwarden web vault enforces HTTPS for account creation. Set to your Pangolin tunnel URL. VAULTWARDEN_SIGNUPS_ALLOWED false Allow new user self-registration. Keep false and use admin panel invites. VAULTWARDEN_WEBSOCKET_ENABLED true Enable WebSocket notifications for real-time sync. VAULTWARDEN_SMTP_SECURITY off SMTP security mode: off for MailHog, starttls or force_tls for production. Uses the main SMTP_* variables for host/credentials.

    Initial setup

    The vaultwarden-init container automatically invites the INITIAL_ADMIN_EMAIL user when starting. Check MailHog (or your SMTP) for the invitation email.

    ","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#rocketchat-team-chat","title":"Rocket.Chat (Team Chat)","text":"

    Self-hosted team chat for volunteer coordination. Requires MongoDB (auto-configured).

    Variable Default Description ENABLE_CHAT false Set to true to enable the Rocket.Chat integration. The initial default; once saved in admin Settings, the DB value is authoritative. ROCKETCHAT_ADMIN_USER rcadmin Rocket.Chat admin username. ROCKETCHAT_ADMIN_PASSWORD \u2014 Rocket.Chat admin password. ROCKETCHAT_URL http://rocketchat-changemaker:3000 Internal container URL. ROCKETCHAT_EMBED_PORT 8891 Port for iframe embedding in admin. MONGO_ROOT_USER rocketchat MongoDB admin username. MONGO_ROOT_PASSWORD \u2014 MongoDB admin password. MongoDB runs with --auth enabled.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#gancio-event-management","title":"Gancio (Event Management)","text":"

    Self-hosted event management platform. Uses the shared PostgreSQL database (auto-created by init-gancio-db.sh).

    Variable Default Description GANCIO_PORT 8092 Gancio web UI port. GANCIO_URL http://gancio-changemaker:13120 Internal container URL. GANCIO_EMBED_PORT 8892 Port for iframe embedding in admin. GANCIO_BASE_URL https://events.cmlite.org Public-facing URL for Gancio. Used in event links. GANCIO_ADMIN_USER admin Gancio admin username for shift-to-event sync (OAuth login). GANCIO_ADMIN_PASSWORD \u2014 Gancio admin password. GANCIO_SYNC_ENABLED false Set to true to enable automatic shift \u2192 Gancio event synchronization.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#jitsi-meet-video-conferencing","title":"Jitsi Meet (Video Conferencing)","text":"

    Self-hosted video conferencing with JWT authentication. Integrates with Rocket.Chat for in-channel video calls.

    Variable Default Description ENABLE_MEET false Set to true to enable the Jitsi Meet integration. The initial default; once saved in admin Settings, the DB value is authoritative. JITSI_APP_ID changemaker JWT application ID. Must match across Jitsi Prosody, Rocket.Chat app settings, and JWT_ACCEPTED_ISSUERS/JWT_ACCEPTED_AUDIENCES. JITSI_APP_SECRET \u2014 JWT secret for signing Jitsi tokens. Generate with openssl rand -hex 32. Shared between Jitsi Prosody, Rocket.Chat, and the API. JITSI_JICOFO_AUTH_PASSWORD \u2014 Internal XMPP password for Jicofo (conference focus). Generate with openssl rand -hex 16. JITSI_JVB_AUTH_PASSWORD \u2014 Internal XMPP password for JVB (video bridge). Generate with openssl rand -hex 16. JITSI_EMBED_PORT 8893 Port for iframe embedding in admin. JITSI_URL http://jitsi-web-changemaker:80 Internal container URL. JVB_ADVERTISE_IP (empty) Server's public IP address. Required in production for NAT traversal so remote participants can connect. JVB_PORT 10000 UDP port for media traffic. Must be open in your firewall.

    Production requirements

    • JVB_ADVERTISE_IP must be set to your server's public IP for calls to work outside the local network.
    • Port 10000/udp must be open in your firewall for media traffic.
    • Calls must go through the production domain (not localhost) for SSL/JWT to work.
    ","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#sms-campaigns-termux-android-bridge","title":"SMS Campaigns (Termux Android Bridge)","text":"

    Send SMS messages via an Android phone running the Termux API server. The phone acts as an SMS gateway.

    Variable Default Description ENABLE_SMS false Set to true to enable SMS campaigns. The initial default; once saved in admin Settings, the DB value is authoritative. TERMUX_API_URL http://10.0.0.193:5001 URL of the Termux API server running on the Android phone. TERMUX_API_KEY (empty) API key for authenticating with the Termux server (HMAC auth via X-API-Key header). SMS_DELAY_BETWEEN_MS 3000 Delay between sending individual SMS messages (ms). Prevents carrier throttling. SMS_MAX_RETRIES 3 Maximum retry attempts for failed SMS sends. SMS_RESPONSE_SYNC_INTERVAL_MS 30000 How often to poll the phone's inbox for responses (ms). SMS_DEVICE_MONITOR_INTERVAL_MS 30000 How often to check device health \u2014 battery, connectivity (ms).

    GUI configuration

    The Termux API URL and API key can also be configured from Admin \u2192 Settings \u2192 SMS. Database values override these env vars when set.

    ","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#mailhog-development-email","title":"MailHog (Development Email)","text":"Variable Default Description MAILHOG_SMTP_PORT 1025 SMTP port for capturing emails. MAILHOG_WEB_PORT 8025 Web UI to view captured emails.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#nar-national-address-register","title":"NAR (National Address Register)","text":"

    Canadian address data import for geographic canvassing.

    Variable Default Description NAR_DATA_DIR /data Path to extracted NAR data inside the container. Expects YYYYMM/Addresses/ and YYYYMM/Locations/ subdirectories. Mount via ./data:/data:ro in Docker Compose.

    Download NAR data from Statistics Canada.

    ","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#geocoding","title":"Geocoding","text":"

    Multi-provider geocoding for address resolution. Works out of the box with free providers; optional paid providers improve accuracy.

    Variable Default Description MAPBOX_API_KEY (empty) Mapbox API key for improved geocoding accuracy. Free tier: 100k requests/month. Sign up. GEOCODING_RATE_LIMIT_MS 1100 Delay between requests to free providers (ms). Respects rate limits. GEOCODING_CACHE_ENABLED true Enable Redis-backed geocoding cache. GEOCODING_CACHE_TTL_HOURS 24 Cache lifetime in hours. GOOGLE_MAPS_API_KEY (empty) Google Maps API key. Most accurate but $0.005/request after free tier. GOOGLE_MAPS_ENABLED false Enable Google Maps as a geocoding provider. GEOCODING_PARALLEL_ENABLED true Enable parallel geocoding for bulk imports (~10x speedup). GEOCODING_BATCH_SIZE 10 Number of concurrent geocoding requests during bulk operations. BULK_GEOCODE_ENABLED true Enable bulk re-geocoding from the admin UI. BULK_GEOCODE_MAX_BATCH 5000 Maximum locations per bulk geocoding run.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#overpass-area-import","title":"Overpass / Area Import","text":"

    OpenStreetMap data import for map enrichment.

    Variable Default Description OVERPASS_API_URL https://overpass-api.de/api/interpreter Overpass API endpoint. Use a private instance for heavy usage. OVERPASS_MIN_DELAY_MS 30000 Minimum delay between requests (ms). The public API requires 30 seconds. AREA_IMPORT_MAX_GRID_POINTS 500 Maximum reverse-geocode grid points per area import.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#pangolin-tunnel","title":"Pangolin Tunnel","text":"

    Expose services to the internet without port forwarding, using a self-hosted Pangolin instance.

    Variable Default Description PANGOLIN_API_URL https://api.bnkserve.org/v1 Pangolin server API endpoint. PANGOLIN_API_KEY (empty) API key for Pangolin management. PANGOLIN_ORG_ID (empty) Organization ID in Pangolin. PANGOLIN_SITE_ID (empty) Site ID (populated after setup via admin GUI). PANGOLIN_ENDPOINT https://pangolin.bnkserve.org Pangolin tunnel endpoint. PANGOLIN_NEWT_ID (empty) Newt client ID (populated after setup). PANGOLIN_NEWT_SECRET (empty) Newt client secret (populated after setup).

    Setup flow

    Configure the tunnel from Admin \u2192 Settings \u2192 Pangolin. The setup wizard walks you through creating a site, copying credentials, and connecting the Newt container. See Deployment for the full guide.

    ","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#monitoring","title":"Monitoring","text":"

    These services are behind the monitoring Docker Compose profile. Start them with:

    docker compose --profile monitoring up -d\n
    Variable Default Description PROMETHEUS_PORT 9090 Prometheus web UI / query port. GRAFANA_PORT 3005 Grafana dashboard port. GRAFANA_ADMIN_PASSWORD admin Change in production. GRAFANA_ROOT_URL http://localhost:3005 Public URL for Grafana (used in links). CADVISOR_PORT 8086 cAdvisor container metrics port. NODE_EXPORTER_PORT 9100 Prometheus node exporter port. REDIS_EXPORTER_PORT 9121 Redis metrics exporter port. ALERTMANAGER_PORT 9093 Alertmanager web UI port. GOTIFY_PORT 8889 Gotify push notification port. GOTIFY_ADMIN_USER admin Gotify admin username. GOTIFY_ADMIN_PASSWORD admin Change in production. GRAFANA_EMBED_PORT 8894 Port for iframe embedding Grafana in admin. ALERTMANAGER_EMBED_PORT 8895 Port for iframe embedding Alertmanager in admin.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#bunker-ops-fleet-management","title":"Bunker Ops (Fleet Management)","text":"

    Remote metrics push for managing multiple Changemaker Lite instances from a central monitoring server.

    Variable Default Description INSTANCE_LABEL (empty) Unique label for this instance (used as a Prometheus metric label). Falls back to DOMAIN if empty. BUNKER_OPS_ENABLED false Enable remote metrics push to a central VictoriaMetrics server. BUNKER_OPS_REMOTE_WRITE_URL (empty) VictoriaMetrics remote_write endpoint (e.g., https://ops.example.com/api/v1/write).","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#social-people-analytics","title":"Social, People & Analytics","text":"

    Feature flags for the social graph, CRM people module, and analytics dashboard.

    Variable Default Description ENABLE_SOCIAL false Enable the social module (friendships, challenges, spotlights, referrals). The initial default; once saved in admin Settings, the DB value is authoritative. ENABLE_PEOPLE false Enable the CRM people module. The initial default; once saved in admin Settings, the DB value is authoritative. ENABLE_ANALYTICS false Enable the analytics dashboard with visitor tracking and geographic insights. The initial default; once saved in admin Settings, the DB value is authoritative.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#geoip-maxmind-geolite2","title":"GeoIP (MaxMind GeoLite2)","text":"

    Geographic IP lookup for analytics visitor location tracking. Requires a free MaxMind account.

    Variable Default Description MAXMIND_ACCOUNT_ID (empty) MaxMind account ID. Sign up free. MAXMIND_LICENSE_KEY (empty) MaxMind license key. When set, the GeoLite2-City database auto-downloads at startup. GEOIP_DB_PATH /data/geoip/GeoLite2-City.mmdb Path to the GeoLite2 database file inside the container.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#control-panel-agent-ccp","title":"Control Panel Agent (CCP)","text":"

    Remote management agent for the Changemaker Control Panel \u2014 enables centralized multi-instance management.

    Variable Default Description ENABLE_CCP_AGENT false Enable the CCP remote management agent. CCP_URL (empty) URL of the Changemaker Control Panel server. CCP_INVITE_CODE (empty) One-time invite code for agent registration with the control panel. CCP_AGENT_URL (empty) How the CCP can reach this agent (must be externally accessible). CCP_AGENT_PORT 7443 Agent listener port.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#container-registry","title":"Container Registry","text":"

    Settings for pulling pre-built production images from the Gitea container registry.

    Variable Default Description GITEA_REGISTRY gitea.bnkops.com/admin Registry hostname and namespace for pulling images. IMAGE_TAG (empty) Image tag to pull. Set to a commit SHA or latest for pre-built images. Leave empty (defaults to local) to build from source. COMPOSE_PROFILES (empty) Docker Compose profiles to activate. Set to monitoring to include Prometheus/Grafana/Alertmanager in every docker compose up -d. GITEA_REGISTRY_USER admin Registry username for docker login and the registry status API endpoint. GITEA_REGISTRY_PASS (empty) Registry password for the status API endpoint. For docker push/pull, use docker login gitea.bnkops.com. GITEA_REGISTRY_API_TOKEN (empty) API token for the remote registry (gitea.bnkops.com). Used by build-release.sh --upload to publish release tarballs. Create at Gitea \u2192 User Settings \u2192 Applications. Not the same as GITEA_API_TOKEN.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#docker-container-management","title":"Docker / Container Management","text":"

    Internal settings for the admin dashboard's service status panel and container management.

    Variable Default Description DOCKER_NETWORK_NAME changemaker-lite Docker bridge network name. Used by the dashboard to auto-discover containers. DOCKER_PROXY_URL http://docker-socket-proxy:2375 Read-only Docker socket proxy URL for container inspection. NEWT_CONTAINER_NAME newt-changemaker Newt tunnel container name (for restart/status checks). NEWT_COMPOSE_SERVICE newt Docker Compose service name for the Newt container.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#embed-proxy-ports","title":"Embed Proxy Ports","text":"

    Dedicated nginx ports for iframe embedding services in the admin dashboard without requiring DNS/subdomains. Change these to avoid port conflicts when running multiple instances on one host.

    Variable Default Description NOCODB_EMBED_PORT 8881 NocoDB iframe port. N8N_EMBED_PORT 8882 n8n iframe port. GITEA_EMBED_PORT 8883 Gitea iframe port. MAILHOG_EMBED_PORT 8884 MailHog iframe port. MINI_QR_EMBED_PORT 8885 Mini QR iframe port. EXCALIDRAW_EMBED_PORT 8886 Excalidraw iframe port. HOMEPAGE_EMBED_PORT 8887 Homepage iframe port. VAULTWARDEN_EMBED_PORT 8890 Vaultwarden iframe port. ROCKETCHAT_EMBED_PORT 8891 Rocket.Chat iframe port. GANCIO_EMBED_PORT 8892 Gancio iframe port. JITSI_EMBED_PORT 8893 Jitsi iframe port. GRAFANA_EMBED_PORT 8894 Grafana iframe port. ALERTMANAGER_EMBED_PORT 8895 Alertmanager iframe port.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#gitea-docs-version-history","title":"Gitea Docs Version History","text":"

    Settings for the documentation version history feature (backed by Gitea repository commits).

    Variable Default Description GITEA_DOCS_REPO admin/changemaker.lite Gitea repository path for docs version history. GITEA_DOCS_PREFIX mkdocs/docs Path prefix within the repository where documentation files live. GITEA_DOCS_BRANCH v2 Git branch to query for version history. GITEA_ADMIN_PASSWORD (empty) Gitea admin password. Used once during initial setup to create an API token, then can be cleared.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#prisma-cli-host-side","title":"Prisma CLI (Host-Side)","text":"Variable Default Description DATABASE_URL postgresql://changemaker:YOUR_POSTGRES_PASSWORD@localhost:5433/changemaker_v2 Full PostgreSQL connection string. Only used when running Prisma CLI on the host (npx prisma migrate dev). Docker containers resolve the database hostname internally via Docker Compose environment variables.","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#generating-secrets","title":"Generating Secrets","text":"

    Use these commands to generate all required secrets at once:

    # JWT secrets (three separate values)\necho \"JWT_ACCESS_SECRET=$(openssl rand -hex 32)\"\necho \"JWT_REFRESH_SECRET=$(openssl rand -hex 32)\"\necho \"JWT_INVITE_SECRET=$(openssl rand -hex 32)\"\n\n# Encryption key (must differ from JWT secrets)\necho \"ENCRYPTION_KEY=$(openssl rand -hex 32)\"\n\n# Security extras (key separation)\necho \"GITEA_SSO_SECRET=$(openssl rand -hex 32)\"\necho \"SERVICE_PASSWORD_SALT=$(openssl rand -hex 32)\"\n\n# Database and Redis passwords\necho \"V2_POSTGRES_PASSWORD=$(openssl rand -hex 24)\"\necho \"REDIS_PASSWORD=$(openssl rand -hex 24)\"\n\n# Listmonk\necho \"LISTMONK_DB_PASSWORD=$(openssl rand -hex 24)\"\necho \"LISTMONK_WEB_ADMIN_PASSWORD=$(openssl rand -hex 16)\"\nLISTMONK_TOKEN=$(openssl rand -hex 16)\necho \"LISTMONK_API_TOKEN=$LISTMONK_TOKEN\"\necho \"LISTMONK_ADMIN_PASSWORD=$LISTMONK_TOKEN\"\n\n# Supporting services\necho \"GITEA_DB_PASSWD=$(openssl rand -hex 24)\"\necho \"GITEA_DB_ROOT_PASSWORD=$(openssl rand -hex 24)\"\necho \"N8N_ENCRYPTION_KEY=$(openssl rand -hex 32)\"\necho \"N8N_USER_PASSWORD=$(openssl rand -hex 16)\"\necho \"NC_ADMIN_PASSWORD=$(openssl rand -hex 16)\"\necho \"INITIAL_ADMIN_PASSWORD=$(openssl rand -base64 18)\"\n\n# Vaultwarden\necho \"VAULTWARDEN_ADMIN_TOKEN=$(openssl rand -hex 32)\"\n\n# Rocket.Chat + MongoDB\necho \"ROCKETCHAT_ADMIN_PASSWORD=$(openssl rand -hex 16)\"\necho \"MONGO_ROOT_PASSWORD=$(openssl rand -hex 24)\"\n\n# Gancio\necho \"GANCIO_ADMIN_PASSWORD=$(openssl rand -hex 16)\"\n\n# Jitsi Meet\necho \"JITSI_APP_SECRET=$(openssl rand -hex 32)\"\necho \"JITSI_JICOFO_AUTH_PASSWORD=$(openssl rand -hex 16)\"\necho \"JITSI_JVB_AUTH_PASSWORD=$(openssl rand -hex 16)\"\n

    Tip

    Copy the output and paste the values into your .env file. The INITIAL_ADMIN_PASSWORD uses base64 encoding to ensure it contains uppercase, lowercase, and digits (meeting the password policy).

    ","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/environment-variables/#minimal-vs-full-deployment","title":"Minimal vs Full Deployment","text":"Minimal (Core Only)Full Stack

    For a basic deployment with campaigns, map, and admin:

    Required variables
    V2_POSTGRES_PASSWORD=...\nREDIS_PASSWORD=...\nJWT_ACCESS_SECRET=...\nJWT_REFRESH_SECRET=...\nJWT_INVITE_SECRET=...\nENCRYPTION_KEY=...\nINITIAL_ADMIN_PASSWORD=...\n
    Start services
    docker compose up -d v2-postgres redis api admin\n

    For the complete platform including media, newsletters, monitoring, and all services:

    Additional variables needed
    # Everything above, plus:\nENABLE_MEDIA_FEATURES=true\nENABLE_PAYMENTS=true\nENABLE_CHAT=true\nENABLE_MEET=true\nENABLE_SMS=true\nLISTMONK_SYNC_ENABLED=true\nGANCIO_SYNC_ENABLED=true\nLISTMONK_DB_PASSWORD=...\nLISTMONK_WEB_ADMIN_PASSWORD=...\nLISTMONK_API_TOKEN=...\nNC_ADMIN_PASSWORD=...\nGITEA_DB_PASSWD=...\nGITEA_DB_ROOT_PASSWORD=...\nN8N_ENCRYPTION_KEY=...\nN8N_USER_PASSWORD=...\nVAULTWARDEN_ADMIN_TOKEN=...\nROCKETCHAT_ADMIN_PASSWORD=...\nMONGO_ROOT_PASSWORD=...\nGANCIO_ADMIN_PASSWORD=...\nJITSI_APP_SECRET=...\nJITSI_JICOFO_AUTH_PASSWORD=...\nJITSI_JVB_AUTH_PASSWORD=...\nJVB_ADVERTISE_IP=your.public.ip.here\nEMAIL_TEST_MODE=false\nSMTP_HOST=smtp.your-provider.com\nSMTP_PORT=587\nSMTP_USER=you@example.com\nSMTP_PASS=your-smtp-password\n
    Start services
    docker compose up -d\ndocker compose --profile monitoring up -d\n
    ","tags":["reference","getting-started","operator","configuration"]},{"location":"docs/getting-started/features/","title":"Features at a Glance","text":"

    Need help getting set up?

    Bunker Operations provides managed infrastructure and hands-on setup assistance for organizations running Changemaker Lite. We handle domains, tunnels, SMTP, and servers so you can focus on your campaign. Get in touch: bnkops.com | admin@bnkops.ca

    Changemaker Lite bundles advocacy campaigns, geographic mapping, volunteer management, media hosting, and landing pages into a single self-hosted platform. Every feature can be toggled on or off from Settings in the admin panel.

    ","tags":["reference","getting-started"],"boost":2},{"location":"docs/getting-started/features/#core-features","title":"Core Features","text":"

    • Advocacy Campaigns

      Help supporters contact elected representatives through email campaigns with postal code lookup and a public response wall.

      Campaign guide

    • Map & Canvassing

      Manage locations, draw canvassing territories, schedule volunteer shifts, and run GPS-tracked door-to-door outreach.

      Map guide

    • Media Manager

      Upload videos and photos, curate playlists, publish a shorts feed, and track engagement with built-in analytics.

      Media guide

    • Landing Pages

      Build campaign microsites with a drag-and-drop GrapesJS visual editor and publish at custom slugs.

      Landing pages guide

    • Payments (Stripe)

      Accept memberships, product sales, and donations with encrypted Stripe integration and branded donation pages.

      Payments guide

    • SMS Campaigns

      Text message outreach via a Termux Android bridge with contact lists, templates, and response tracking.

      SMS guide

    • Public Homepage

      Customizable landing page with hero section, live stats, featured campaigns, upcoming shifts, and activity feed.

      Homepage guide

    ","tags":["reference","getting-started"],"boost":2},{"location":"docs/getting-started/features/#communication-collaboration","title":"Communication & Collaboration","text":"

    • Newsletter (Listmonk)

      Opt-in mailing lists and newsletter campaigns with automatic subscriber sync from shifts and contacts.

      Newsletter guide

    • Email Templates

      Reusable email templates with variable substitution for campaign communications.

      Email templates guide

    • Team Chat (Rocket.Chat)

      Self-hosted team chat with iframe integration, floating widget, and native mobile app support.

      Chat guide

    • Video Conferencing (Jitsi)

      Self-hosted video calls integrated with Rocket.Chat via JWT authentication \u2014 no separate login required.

      Video conferencing guide

    ","tags":["reference","getting-started"],"boost":2},{"location":"docs/getting-started/features/#integrations-services","title":"Integrations & Services","text":"

    • Events (Gancio)

      Self-hosted event management with automatic shift-to-event sync and an embeddable calendar widget.

      Events guide

    • Password Manager (Vaultwarden)

      Bitwarden-compatible password vault for secure team credential sharing.

      Password manager guide

    • User Provisioning

      Automatic account creation and sync across Rocket.Chat, Gitea, Vaultwarden, and Listmonk.

      User provisioning guide

    • People / Contacts

      Centralized contact management for supporters, donors, and community members with cross-module linking.

      People guide

    • Whiteboard (Excalidraw)

      Self-hosted collaborative whiteboard for brainstorming, planning, and visual collaboration.

      Whiteboard guide

    ","tags":["reference","getting-started"],"boost":2},{"location":"docs/getting-started/features/#volunteer-portal","title":"Volunteer Portal","text":"

    • Social Connections

      Friend system, activity feed, groups, profiles, pokes, and privacy controls for volunteer community building.

      Social guide

    • Achievements & Leaderboard

      Badge system with 11 achievements across 4 categories, progress tracking, and competitive leaderboards.

      Achievements guide

    • Volunteer Quick Join

      QR code invite links for instant volunteer onboarding \u2014 scan, fill a short form, and start canvassing.

      Quick join guide

    ","tags":["reference","getting-started"],"boost":2},{"location":"docs/getting-started/features/#automation-analytics","title":"Automation & Analytics","text":"

    • Email Automation

      Automated volunteer lifecycle emails \u2014 thank-you notes, shift reminders, weekly summaries, and re-engagement campaigns.

      Automation guide

    • Data Quality Dashboard

      Geocoding quality metrics with per-provider stats, confidence tiers, and coverage analysis.

      Data quality guide

    • Documentation Analytics

      Page view tracking and engagement metrics for MkDocs documentation pages.

      Docs analytics guide

    ","tags":["reference","getting-started"],"boost":2},{"location":"docs/getting-started/features/#admin-tools","title":"Admin Tools","text":"

    • Docs Comments

      Gitea-backed comment system for documentation pages with anonymous posting and moderation.

      Docs comments guide

    • Command Palette

      Global Ctrl+K search across pages, campaigns, locations, users, settings, and media.

      Command palette guide

    • Navigation Settings

      Customize the public navigation menu with feature toggles, custom links, and drag-and-drop reordering.

      Navigation guide

    • Platform Settings

      Five-tab settings page covering organization details, theme colors, email configuration, feature flags, and notifications.

      Settings guide

    • Social Sharing (OG Tags)

      Open Graph meta tags for campaigns, landing pages, and gallery videos \u2014 rich link previews on social media.

      OG sharing guide

    • Gallery Ads

      Internal ad system with 5 ad types, audience targeting, scheduling, frequency caps, and CTR analytics.

      Gallery ads guide

    • Self-Service Contact Profile

      Token-based public profile pages where contacts can view and update their information and preferences.

      Contact profile guide

    ","tags":["reference","getting-started"],"boost":2},{"location":"docs/getting-started/first-steps/","title":"First Steps","text":"

    Need help getting set up?

    Bunker Operations provides managed infrastructure and hands-on setup assistance for organizations running Changemaker Lite. We handle domains, tunnels, SMTP, and servers so you can focus on your campaign. Get in touch: bnkops.com | admin@bnkops.ca

    You've installed Changemaker Lite \u2014 here's what to do next.

    ","tags":["tutorial","getting-started","admin"],"boost":2},{"location":"docs/getting-started/first-steps/#1-log-in","title":"1. Log In","text":"

    Open the admin panel at http://localhost:3000 (or app.DOMAIN in production) and sign in with the admin email and password you configured during setup.

    Where's the password if I let the wizard generate one?

    If you ran config.sh -y without --admin-password, the generated password was printed once to stdout and saved to data/admin-credentials.txt (mode 0600). Retrieve it with:

    cat ~/changemaker.lite/data/admin-credentials.txt\n

    Delete the file once you've saved the password elsewhere (e.g. in Vaultwarden).

    Change your password

    Whatever password you're logging in with first, change it immediately from Settings > Organization.

    ","tags":["tutorial","getting-started","admin"],"boost":2},{"location":"docs/getting-started/first-steps/#2-explore-the-dashboard","title":"2. Explore the Dashboard","text":"

    The dashboard gives you an at-a-glance view of platform activity. Initially it will be empty \u2014 that's normal.

    ","tags":["tutorial","getting-started","admin"],"boost":2},{"location":"docs/getting-started/first-steps/#3-configure-settings","title":"3. Configure Settings","text":"

    Visit Settings (/app/settings) to:

    • Set your organization name, logo, and tagline
    • Choose theme colors for admin and public interfaces
    • Enable feature modules (campaigns, map, media, payments, etc.)
    • Configure email delivery (MailHog for testing, production SMTP for live use)
    • Check the System tab to verify your installation and check for updates

    ","tags":["tutorial","getting-started","admin"],"boost":2},{"location":"docs/getting-started/first-steps/#4-create-your-first-campaign","title":"4. Create Your First Campaign","text":"

    Go to Campaigns (/app/campaigns) and click Create Campaign:

    1. Write a title and description
    2. Compose the email template supporters will send
    3. Select government levels to target
    4. Publish \u2014 the campaign appears at /campaigns

    ","tags":["tutorial","getting-started","admin"],"boost":2},{"location":"docs/getting-started/first-steps/#5-add-locations","title":"5. Add Locations","text":"

    Go to Locations (/app/map) and add addresses:

    • Click on the map to drop a marker
    • Import a CSV of addresses
    • Use the NAR (National Address Register) import for Canadian data

    ","tags":["tutorial","getting-started","admin"],"boost":2},{"location":"docs/getting-started/first-steps/#6-schedule-a-shift","title":"6. Schedule a Shift","text":"

    Go to Shifts (/app/map/shifts) and create your first volunteer shift:

    1. Set a date, time, and location description
    2. Optionally link it to a canvassing area
    3. Share the public shifts page (/shifts) with volunteers

    ","tags":["tutorial","getting-started","admin"],"boost":2},{"location":"docs/getting-started/first-steps/#7-invite-volunteers","title":"7. Invite Volunteers","text":"

    Share the shifts page link or generate QR codes for in-person events. Volunteers sign up with just an email address.

    ","tags":["tutorial","getting-started","admin"],"boost":2},{"location":"docs/getting-started/first-steps/#next-steps","title":"Next Steps","text":"
    • Services Overview \u2014 complete catalog of all 30+ Docker services
    • Updates & Upgrades \u2014 keep your installation current
    • Features at a Glance \u2014 visual overview of every module
    • Admin Guide \u2014 full administration reference
    • Deployment \u2014 production setup with tunneling and SSL
    ","tags":["tutorial","getting-started","admin"],"boost":2},{"location":"docs/getting-started/installation/","title":"Installation","text":"

    Need help getting set up?

    Bunker Operations provides managed infrastructure and hands-on setup assistance for organizations running Changemaker Lite. We handle domains, tunnels, SMTP, and servers so you can focus on your campaign. Get in touch: bnkops.com | admin@bnkops.ca

    Changemaker Lite runs as a set of Docker containers orchestrated by Docker Compose. The config.sh wizard handles all configuration \u2014 or you can set things up manually.

    Have your external services ready?

    For a production deployment, you'll need a domain name, SMTP email provider, and a reverse tunnel (like Pangolin) or public IP with SSL. Gather these before running the wizard \u2014 it makes the process much smoother.

    Prerequisites & External Services \u2014 full checklist with provider recommendations

    For local development/evaluation, you can skip this \u2014 Docker and MailHog handle everything out of the box.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#prerequisites","title":"Prerequisites","text":"
    • Docker 24+ and Docker Compose v2
    • OpenSSL (for secret generation)
    • A Linux server (Ubuntu 22.04+ recommended) or macOS for development
    • At least 2 GB RAM for core services, 4 GB for the full stack
    • A domain name (optional for development, recommended for production)
    • An SMTP provider for production email delivery (see Prerequisites)
    • A reverse tunnel or public IP for internet access (see Prerequisites)
    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#quick-start","title":"Quick Start","text":"

    Clone the repository:

    git clone https://gitea.bnkops.com/admin/changemaker.lite\ncd changemaker.lite\n

    Run the configuration wizard:

    bash config.sh\n

    Start all services:

    docker compose up -d\n

    Open http://localhost:3000 and sign in with the admin credentials you configured. Database migrations and seeding run automatically on first startup.

    Change your password

    If you used the wizard's generated password, change it immediately from the admin dashboard.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#pre-built-image-installation","title":"Pre-built Image Installation","text":"

    For production deployments, you can skip cloning the source repository entirely. Pre-built Docker images are pulled from the Gitea container registry.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#one-line-install","title":"One-Line Install","text":"
    curl -fsSL https://gitea.bnkops.com/admin/changemaker.lite/raw/branch/main/scripts/install.sh | bash\n

    This script:

    1. Checks prerequisites (Docker, Docker Compose, OpenSSL)
    2. Checks host port availability \u2014 aborts early if any of the ~14 required ports (3000, 4000, 9090, 3030, etc.) are already in use. Prints culprit-specific hints (e.g. cockpit.socket on :9090)
    3. Verifies at least 10 GB free disk
    4. Downloads the latest release package from Gitea
    5. Extracts to ~/changemaker.lite/
    6. Launches the configuration wizard (config.sh)

    After the wizard completes, start everything with docker compose up -d, then verify with bash scripts/test-deployment.sh --wait 60.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#installer-flags","title":"Installer Flags","text":"

    The installer accepts a few options for non-default setups. Download the script first, inspect it, then run with flags:

    curl -fsSLO https://gitea.bnkops.com/admin/changemaker.lite/raw/branch/main/scripts/install.sh\nbash install.sh --help\n
    Flag Purpose --dir DIR Install into a directory other than ~/changemaker.lite --version TAG Pin a specific release (e.g. v2.9.10) instead of latest --tarball FILE Use a local tarball \u2014 skip the Gitea download entirely","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#manual-download","title":"Manual Download","text":"

    If you prefer not to pipe to bash:

    # Download latest release\ncurl -LO https://gitea.bnkops.com/admin/changemaker.lite/releases/latest/download/changemaker-lite-latest.tar.gz\ntar xzf changemaker-lite-latest.tar.gz\ncd changemaker-lite\nbash config.sh\ndocker compose up -d\n
    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#whats-different-from-source-install","title":"What's Different from Source Install","text":"Source Install Pre-built Install Download size ~200 MB (full repo) ~15 MB (config, compose, MkDocs content) First startup 10+ min (TypeScript compile + Docker build) ~2 min (image pull only) Requires Git, full repo Docker only Upgrades git pull + rebuild Download new release tarball Development Edit source, hot-reload Not for development

    When to use which

    Use pre-built install for production deployments and quick evaluation. Use source install when you want to modify the platform code or contribute to development.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#configuration-wizard-configsh","title":"Configuration Wizard (config.sh)","text":"

    The wizard performs 14 steps to produce a fully configured .env file and prepare the system for startup. Each step is interactive with sensible defaults.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-1-prerequisites-check","title":"Step 1: Prerequisites Check","text":"

    Verifies that Docker, Docker Compose v2, and OpenSSL are installed. Exits immediately if any are missing, with links to installation guides.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-2-environment-file-setup","title":"Step 2: Environment File Setup","text":"
    • If no .env exists, copies .env.example as the starting point
    • If .env already exists, offers to back it up (timestamped copy) and create a fresh one, or update values in place
    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-3-domain-configuration","title":"Step 3: Domain Configuration","text":"

    Prompts for your root domain (default: cmlite.org) and derives 14 environment variables from it:

    Variable Example Value DOMAIN example.org BASE_DOMAIN https://example.org GITEA_ROOT_URL https://git.example.org GITEA_DOMAIN git.example.org N8N_HOST n8n.example.org SMTP_FROM noreply@example.org INITIAL_ADMIN_EMAIL admin@example.org NC_ADMIN_EMAIL admin@example.org EXCALIDRAW_WS_URL wss://draw.example.org LISTMONK_SMTP_FROM Changemaker Lite <noreply@example.org> HOMEPAGE_VAR_BASE_URL https://example.org VAULTWARDEN_DOMAIN https://vault.example.org GANCIO_BASE_URL https://events.example.org TEST_EMAIL_RECIPIENT admin@example.org

    Also updates mkdocs/mkdocs.yml with the new site_url and repo_url, and asks whether this is a production deployment (sets NODE_ENV=production).

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-4-admin-credentials","title":"Step 4: Admin Credentials","text":"

    Prompts for the initial super-admin email and password. The password is validated against the security policy:

    • Minimum 12 characters
    • At least one uppercase letter
    • At least one lowercase letter
    • At least one digit
    • Requires password confirmation

    Non-interactive password

    If you run with -y and omit --admin-password, the wizard generates a strong password and also writes it to data/admin-credentials.txt with mode 0600. Retrieve it with cat ~/changemaker.lite/data/admin-credentials.txt, then delete the file once saved elsewhere (e.g. Vaultwarden). Explicit --admin-password is never persisted to disk by config.sh.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-5-secret-generation","title":"Step 5: Secret Generation","text":"

    Auto-generates 21 unique secrets \u2014 no placeholder passwords remain after this step:

    Category Count Secrets JWT & Encryption 4 JWT_ACCESS_SECRET, JWT_REFRESH_SECRET, JWT_INVITE_SECRET (each 64-char hex), ENCRYPTION_KEY (64-char hex, must differ from JWT secrets) Database 2 V2_POSTGRES_PASSWORD, REDIS_PASSWORD (24-char alphanumeric) Listmonk 3 LISTMONK_DB_PASSWORD, LISTMONK_WEB_ADMIN_PASSWORD, LISTMONK_API_TOKEN NocoDB 1 NC_ADMIN_PASSWORD Gitea 2 GITEA_DB_PASSWD, GITEA_DB_ROOT_PASSWORD n8n 2 N8N_ENCRYPTION_KEY, N8N_USER_PASSWORD Monitoring 2 GRAFANA_ADMIN_PASSWORD, GOTIFY_ADMIN_PASSWORD Vaultwarden 1 VAULTWARDEN_ADMIN_TOKEN (64-char hex) Rocket.Chat 1 ROCKETCHAT_ADMIN_PASSWORD Gancio 1 GANCIO_ADMIN_PASSWORD Jitsi Meet 3 JITSI_APP_SECRET (64-char hex), JITSI_JICOFO_AUTH_PASSWORD, JITSI_JVB_AUTH_PASSWORD","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-6-email-configuration","title":"Step 6: Email Configuration","text":"

    Choose between:

    • MailHog (default) \u2014 captures all outgoing emails at http://localhost:8025 for development
    • Production SMTP \u2014 configures host, port, user, and password. Optionally shares credentials with Listmonk for newsletter delivery
    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-7-feature-flags","title":"Step 7: Feature Flags","text":"

    Enable or disable 9 optional platform features:

    Flag Environment Variable What It Enables Media Manager ENABLE_MEDIA_FEATURES=true Video library, analytics, scheduled publishing Listmonk Sync LISTMONK_SYNC_ENABLED=true Newsletter subscriber sync from platform participants Payments ENABLE_PAYMENTS=true Stripe-based products, donations, and plans Rocket.Chat ENABLE_CHAT=true Team communication platform Gancio Events GANCIO_SYNC_ENABLED=true Shift-to-event sync with Gancio Jitsi Meet ENABLE_MEET=true Video conferencing (also prompts for server public IP) SMS Campaigns ENABLE_SMS=true Termux Android bridge for SMS (also prompts for API URL) Docs Comments GITEA_COMMENTS_ENABLED=true Gitea-backed page comments on documentation Bunker Ops BUNKER_OPS_ENABLED=true Fleet metrics push to central server (also prompts for remote write URL)","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-8-tunnel-configuration-pangolin","title":"Step 8: Tunnel Configuration (Pangolin)","text":"

    Optionally configures Pangolin tunnel credentials for secure public access:

    • PANGOLIN_API_URL \u2014 API endpoint (default: https://api.bnkserve.org/v1)
    • PANGOLIN_API_KEY \u2014 Authentication key
    • PANGOLIN_ORG_ID \u2014 Organization identifier

    Complete tunnel setup is done from the admin GUI at Settings > Tunnel after services are running.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-9-cors-origins","title":"Step 9: CORS Origins","text":"

    Automatically calculates allowed origins from your domain:

    http://app.DOMAIN,https://app.DOMAIN,http://DOMAIN,https://DOMAIN,http://localhost:3000,http://localhost,http://localhost:4003\n
    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-10-nginx-config-generation","title":"Step 10: Nginx Config Generation","text":"

    Renders all .conf.template files in nginx/conf.d/ by substituting ${DOMAIN} with your configured domain. This produces the nginx configuration files that handle subdomain routing.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-11-homepage-services-yaml","title":"Step 11: Homepage Services YAML","text":"

    Generates configs/homepage/services.yaml with 27 service entries (both production and local development URLs) for the Homepage service dashboard.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-12-container-directory-permissions","title":"Step 12: Container Directory Permissions","text":"

    Creates and sets permissions (775) on 12 directories needed by containers:

    Directory Purpose configs/code-server/.config Code Server configuration configs/code-server/.local Code Server local data mkdocs/.cache MkDocs build cache mkdocs/site MkDocs built site output assets/uploads Listmonk uploads assets/images Shared images assets/icons Homepage icons media/local/inbox Media upload inbox media/local/thumbnails Video thumbnails media/public Public media files local-files n8n local files data NAR import data","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-13-upgrade-watcher-optional","title":"Step 13: Upgrade Watcher (Optional)","text":"

    Installs a systemd path watcher that enables the admin GUI's \"Check for Updates\" and \"Start Upgrade\" buttons. This step requires sudo and is optional \u2014 you can install it later or use the CLI upgrade script directly.

    The watcher installs two systemd units:

    • changemaker-upgrade.path \u2014 watches for data/upgrade/trigger.json
    • changemaker-upgrade.service \u2014 runs scripts/upgrade-watcher.sh when triggered
    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#step-14-summary-next-steps","title":"Step 14: Summary & Next Steps","text":"

    Displays a configuration summary showing all choices made, then prints startup commands.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#what-gets-modified","title":"What Gets Modified","text":"

    After the wizard completes, the following files have been created or modified:

    File Action .env Created (or updated) with all configuration values mkdocs/mkdocs.yml Updated site_url and repo_url with domain nginx/conf.d/*.conf Generated from .conf.template files configs/homepage/services.yaml Generated with all service URLs 12 directories Created with container-friendly permissions systemd units (optional) Installed to /etc/systemd/system/","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#manual-setup-alternative","title":"Manual Setup (Alternative)","text":"

    If you prefer to configure by hand instead of using the wizard:

    cp .env.example .env\n

    At minimum, set these required secrets:

    # Generate cryptographic secrets\nV2_POSTGRES_PASSWORD=$(openssl rand -base64 48 | tr -dc 'a-zA-Z0-9' | head -c 24)\nREDIS_PASSWORD=$(openssl rand -base64 48 | tr -dc 'a-zA-Z0-9' | head -c 24)\nJWT_ACCESS_SECRET=$(openssl rand -hex 32)\nJWT_REFRESH_SECRET=$(openssl rand -hex 32)\nJWT_INVITE_SECRET=$(openssl rand -hex 32)\nENCRYPTION_KEY=$(openssl rand -hex 32)   # must differ from all JWT secrets\n

    Set your admin credentials (password must meet the 12+ char complexity requirement):

    INITIAL_ADMIN_EMAIL=admin@yourdomain.org\nINITIAL_ADMIN_PASSWORD=YourStrongPassword1\n

    Then configure optional sections:

    • Domain: Set DOMAIN and all derived variables (see Step 3 table above)
    • SMTP: Set SMTP_HOST, SMTP_PORT, SMTP_USER, SMTP_PASS, EMAIL_TEST_MODE=false
    • Feature flags: Enable features as needed (see Step 7 table above)
    • Tunnel: Set PANGOLIN_API_URL, PANGOLIN_API_KEY, PANGOLIN_ORG_ID

    See Environment Variables for every available option.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#full-stack-startup","title":"Full Stack Startup","text":"

    After configuration, start the entire platform:

    docker compose up -d\n

    That's it. Docker handles the startup order automatically:

    1. PostgreSQL and Redis start first (with healthchecks)
    2. API waits for both to be healthy, then auto-runs database migrations and seeding
    3. Admin GUI waits for the API
    4. Nginx, media, communication, and all other services start in parallel
    5. Init containers (nocodb-init, listmonk-init, etc.) run once and exit

    Watch the startup progress:

    docker compose logs -f api --tail 20\n

    Once you see Starting server on port 4000, open http://localhost:3000 and log in.

    Quick sanity check

    Three commands confirm a healthy install \u2014 run them in order:

    docker compose ps                              # all core containers healthy?\ncurl -s http://localhost:4000/api/health       # should return {\"status\":\"healthy\",...}\nbash scripts/test-deployment.sh --wait 60      # end-to-end verifier\n

    If all three pass, you're done. See Verifying Installation below for manual checks if anything fails.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#include-monitoring","title":"Include Monitoring","text":"

    The monitoring stack (Prometheus, Grafana, Alertmanager) uses a Docker Compose profile and isn't included by default:

    docker compose --profile monitoring up -d\n
    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#start-only-core-services","title":"Start Only Core Services","text":"

    If you prefer a minimal startup (lower resource usage):

    docker compose up -d v2-postgres redis api admin nginx\n

    Manual migrations

    The API container runs migrations and seeding automatically on startup via its entrypoint script. You only need to run them manually if you're developing locally without Docker:

    cd api && npx prisma migrate deploy && npx prisma db seed\n

    See Services Overview for the complete service catalog.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#verifying-installation","title":"Verifying Installation","text":"

    Changemaker Lite ships a one-shot deployment verifier. Run it after docker compose up -d:

    bash scripts/test-deployment.sh --wait 60\n

    --wait 60 gives services time to pass their healthchecks on a cold start (first-run image pulls take ~3 min and health stabilization ~90s \u2014 brief unhealthy states during this window are expected). The script checks:

    • All containers running with healthy healthchecks
    • API /api/health returns \"healthy\" with database + Redis OK
    • Admin and media API endpoints respond
    • (If --domain yourdomain.org passed) tunnel subdomains return 200/302/403

    Any failure is printed with the failing component. If everything passes, your install is ready.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#manual-checks","title":"Manual checks","text":"
    docker compose ps                                         # container status\ncurl -s http://localhost:4000/api/health | python3 -m json.tool  # API health\ndocker compose logs api --tail 20                         # API startup logs\nbash scripts/validate-env.sh                              # re-check .env + host ports\n
    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#clean-reset-before-reinstall","title":"Clean reset before reinstall","text":"

    If you need to wipe and start over:

    docker compose --profile monitoring down -v --remove-orphans\nbash scripts/pangolin-teardown.sh --yes   # wipes the tunnel org (dry-run by default)\nsudo rm -rf ~/changemaker.lite\n

    For CCP-registered instances, also run bash scripts/ccp-deregister.sh --yes before removing the project directory \u2014 otherwise the CCP retains a stale Instance row that blocks re-registration of the same slug.

    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/installation/#next-steps","title":"Next Steps","text":"
    • Services Overview \u2014 complete service catalog with ports and startup commands
    • Environment Variables \u2014 complete .env reference
    • First Steps \u2014 create your first campaign and add locations
    • Updates & Upgrades \u2014 keep your installation up to date
    ","tags":["guide","getting-started","operator","docker"],"boost":2},{"location":"docs/getting-started/prerequisites/","title":"Prerequisites & External Services","text":"

    Need help getting set up?

    Bunker Operations provides managed infrastructure and hands-on setup assistance for organizations running Changemaker Lite. We handle domains, tunnels, SMTP, and servers so you can focus on your campaign. Get in touch: bnkops.com | admin@bnkops.ca

    Before running the installer, gather the external services and accounts listed below. Having these ready makes the configuration wizard a smooth, uninterrupted process.

    Don't have these yet?

    You can still install Changemaker Lite in development mode with just Docker \u2014 no domain, tunnel, or SMTP required. MailHog captures all emails locally. But for a production deployment serving real users, you'll need the items on this page.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#required-for-production","title":"Required for Production","text":"","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#1-a-domain-name","title":"1. A Domain Name","text":"

    You need a domain (e.g., betteredmonton.org) that you control. Changemaker Lite uses subdomain routing \u2014 the platform creates subdomains like:

    Subdomain Purpose app.yourdomain.org Admin dashboard + all public pages api.yourdomain.org Backend API docs.yourdomain.org Documentation site git.yourdomain.org Git hosting (Gitea) events.yourdomain.org Event calendar (Gancio) ... and 10+ more See Services Overview

    You'll point your domain's DNS to wherever your tunnel or server is hosted. Wildcard DNS (*.yourdomain.org) is the simplest approach.

    Where to get one: Any registrar \u2014 Namecheap, Cloudflare Registrar, Porkbun, etc. Budget ~$10\u201315/year.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#2-a-reverse-tunnel-or-public-ip","title":"2. A Reverse Tunnel or Public IP","text":"

    Your server needs to be reachable from the internet. Most home/office networks don't have a static public IP, so you need a reverse tunnel service that gives your server a stable public address with SSL.

    Changemaker Lite has built-in support for Pangolin \u2014 a self-hosted, open-source tunnel that handles SSL certificates, subdomain routing, and access control automatically. The admin dashboard includes a one-click Pangolin setup wizard.

    What you need:

    • A Pangolin server (or access to a shared one)
    • An API key and Organization ID
    • Your domain's DNS pointed at the Pangolin server

    Alternatives: Cloudflare Tunnel (free tier available), a VPS with a public IP, or any reverse proxy with SSL termination.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#3-smtp-email-provider","title":"3. SMTP Email Provider","text":"

    Production deployments need a real SMTP server to send emails \u2014 campaign messages, password resets, volunteer invitations, and newsletter delivery all depend on it.

    What you need:

    Setting Example SMTP Host smtp.protonmail.ch SMTP Port 587 (STARTTLS) or 465 (TLS) SMTP Username your-account@provider.com SMTP Password Your SMTP password or app-specific password

    Popular SMTP providers:

    Provider Free Tier Notes Proton Mail Included with paid plan Privacy-focused, recommended for advocacy Mailgun 100 emails/day (FLEX) Good deliverability, easy setup Amazon SES 62,000/month (from EC2) Cheapest at scale, requires verification Brevo (Sendinblue) 300 emails/day Simple setup, good free tier Resend 100 emails/day Developer-friendly, modern API

    Shared hosting SMTP

    Avoid using shared hosting SMTP (GoDaddy, Bluehost, etc.) for campaign emails \u2014 they have low sending limits and poor deliverability. Use a dedicated transactional email provider.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#4-a-linux-server","title":"4. A Linux Server","text":"

    Changemaker Lite runs on any Linux server with Docker. Minimum specs:

    Component Minimum Recommended RAM 2 GB (core only) 4 GB (full stack) Disk 10 GB 20+ GB (with media uploads) CPU 1 vCPU 2+ vCPU OS Any Linux with Docker Ubuntu 22.04+ LTS

    Options: A VPS from DigitalOcean, Hetzner, Linode, or a spare machine on your network. If using a tunnel (Pangolin), the server doesn't need a public IP.

    Watch out for host-level services on our ports

    Changemaker Lite binds ~14 host ports including 9090 (Prometheus), 3000 (admin), 4000 (API), 3030 (Gitea), and 8091 (NocoDB). If another service on your host already uses any of these, docker compose up -d will partially succeed and leave the stack in a broken state.

    Common culprit: cockpit.socket \u2014 Ubuntu Server's web admin UI \u2014 binds :9090 by default. Disable it with sudo systemctl disable --now cockpit.socket before installing, or reconfigure cockpit to a different port.

    The installer runs ss -Htln against the required ports before downloading the tarball and aborts with specific remediation hints if any are bound. You can also run the check manually after install with bash scripts/validate-env.sh.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#optional-enhance-your-deployment","title":"Optional (Enhance Your Deployment)","text":"

    These are not required but unlock additional platform features:

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#stripe-account-payments","title":"Stripe Account (Payments)","text":"

    For accepting donations, selling merchandise, or managing membership plans. Create a free account at stripe.com. You'll enter your Stripe API keys in the admin settings page (they're stored encrypted in the database).

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#mapbox-or-google-maps-api-key-geocoding","title":"Mapbox or Google Maps API Key (Geocoding)","text":"

    Improves address geocoding accuracy for the mapping module. The platform works without these (using free OpenStreetMap providers), but paid providers are more reliable for bulk operations.

    • Mapbox: Free tier includes 100,000 requests/month. Sign up.
    • Google Maps: Free tier includes $200/month credit (~40,000 requests). Sign up.
    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#maxmind-geolite2-analytics","title":"MaxMind GeoLite2 (Analytics)","text":"

    For geographic analytics (visitor location tracking). Free account at maxmind.com. The database auto-downloads at startup when credentials are configured.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#android-phone-with-termux-sms-campaigns","title":"Android Phone with Termux (SMS Campaigns)","text":"

    The SMS module uses a physical Android phone as an SMS gateway via the Termux app. This is a unique feature for grassroots campaigns that want to send SMS without expensive third-party services.

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#jitsi-meet-requirements-video-conferencing","title":"Jitsi Meet Requirements (Video Conferencing)","text":"

    If enabling the self-hosted video conferencing feature:

    • Server's public IP address (for NAT traversal)
    • UDP port 10000 open in your firewall (for media traffic)
    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#pre-installation-checklist","title":"Pre-Installation Checklist","text":"

    Use this checklist to make sure you're ready:

    • Domain name registered and DNS accessible
    • DNS configured \u2014 wildcard *.yourdomain.org or individual subdomain records pointing to your tunnel/server
    • Tunnel or public IP \u2014 Pangolin credentials (API key + Org ID), or server with public IP + SSL
    • SMTP credentials \u2014 host, port, username, password from your email provider
    • Linux server with Docker 24+ and Docker Compose v2 installed
    • OpenSSL + ss (from iproute2) installed (for secret generation + host port check)
    • Host ports free \u2014 if cockpit is enabled, sudo systemctl disable --now cockpit.socket
    • (Optional) Stripe account for payments
    • (Optional) Mapbox or Google Maps API key for geocoding
    • (Optional) MaxMind account for geographic analytics
    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#managed-services","title":"Bunker Operations Can Help","text":"

    Setting up infrastructure \u2014 domains, tunnels, SMTP, servers \u2014 can be the hardest part of self-hosting. Bunker Operations offers managed infrastructure for organizations running Changemaker Lite:

    • Managed Pangolin Tunnel

      Pre-configured tunnel with SSL, wildcard DNS, and automatic subdomain routing. Just plug in your API key and go.

    • SMTP Relay

      High-deliverability transactional email with SPF/DKIM/DMARC already configured for your domain.

    • Hosted Servers

      Pre-provisioned Linux servers with Docker, monitoring, and automatic backups \u2014 ready for a one-command install.

    • Setup Assistance

      We'll walk you through the full deployment \u2014 from domain registration to your first campaign launch.

    Built by organizers, for organizers

    Bunker Operations exists so campaign teams can focus on building power \u2014 not wrestling with infrastructure. We provide the plumbing so you can focus on the mission.

    Get in touch: bnkops.com | admin@bnkops.ca

    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/prerequisites/#next-steps","title":"Next Steps","text":"

    Once you have your prerequisites ready:

    • Installation \u2014 run the configuration wizard and start services
    • Environment Variables \u2014 complete reference for every .env setting
    • Deployment Guide \u2014 production setup with SSL and tunneling
    ","tags":["guide","getting-started","operator","planning"],"boost":2},{"location":"docs/getting-started/services/","title":"Services Overview","text":"

    Need help getting set up?

    Bunker Operations provides managed infrastructure and hands-on setup assistance for organizations running Changemaker Lite. We handle domains, tunnels, SMTP, and servers so you can focus on your campaign. Get in touch: bnkops.com | admin@bnkops.ca

    Changemaker Lite runs as 30+ Docker containers orchestrated by Docker Compose. This page catalogs every service, organized by category.

    Quick reference

    Use docker compose ps to see which services are currently running, or docker compose ps -a to include stopped containers.

    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#core-required","title":"Core (Required)","text":"

    These services form the minimum viable platform. Start them first.

    Container Port Description changemaker-v2-api 4000 Express.js REST API (Prisma ORM) changemaker-v2-admin 3000 React admin GUI (Vite + Ant Design) changemaker-v2-postgres 5433 PostgreSQL 16 \u2014 primary database redis-changemaker 6379 Redis 7 \u2014 cache, rate limiting, job queues changemaker-v2-nginx 80 Nginx reverse proxy \u2014 subdomain routing 
    # Start core services only (minimal)\ndocker compose up -d v2-postgres redis api admin nginx\n\n# Or start everything at once\ndocker compose up -d\n

    The API container automatically runs database migrations and seeding on startup via its entrypoint script.

    Note

    Nginx is technically optional for local development (you can access services directly by port), but required for production subdomain routing.

    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#media","title":"Media","text":"Container Port Description Feature Flag changemaker-media-api 4100 Fastify media API \u2014 video library, analytics, scheduling ENABLE_MEDIA_FEATURES=true 
    docker compose up -d media-api\n

    The media API runs as a separate Fastify server sharing the same PostgreSQL database. It handles video upload (FFprobe metadata extraction), scheduled publishing via BullMQ, and GDPR-compliant view analytics.

    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#communication","title":"Communication","text":"","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#rocketchat-team-chat","title":"Rocket.Chat (Team Chat)","text":"Container Port Description Feature Flag rocketchat-changemaker 8891 Rocket.Chat server ENABLE_CHAT=true mongodb-changemaker \u2014 MongoDB (Rocket.Chat data store) \u2014 nats-changemaker \u2014 NATS (Rocket.Chat message bus) \u2014 
    docker compose up -d rocketchat mongodb nats\n
    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#gancio-events","title":"Gancio (Events)","text":"Container Port Description Feature Flag gancio-changemaker 8092 Gancio event platform GANCIO_SYNC_ENABLED=true gancio-init \u2014 Init container \u2014 creates Gancio database \u2014 
    docker compose up -d gancio\n

    Init containers

    gancio-init runs once on first start to create the Gancio database in PostgreSQL, then exits. This is normal \u2014 don't worry about seeing it in a \"stopped\" state.

    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#jitsi-meet-video-conferencing","title":"Jitsi Meet (Video Conferencing)","text":"Container Port Description Feature Flag jitsi-web-changemaker 8893 Jitsi web interface ENABLE_MEET=true jitsi-prosody-changemaker \u2014 XMPP server (Prosody) \u2014 jitsi-jicofo-changemaker \u2014 Jitsi conference focus \u2014 jitsi-jvb-changemaker 10000/udp Jitsi video bridge \u2014 
    docker compose up -d jitsi-web jitsi-prosody jitsi-jicofo jitsi-jvb\n

    Firewall requirement

    Jitsi requires UDP port 10000 open in your firewall for video/audio media traffic. Set JVB_ADVERTISE_IP in .env to your server's public IP address.

    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#newsletter-email","title":"Newsletter & Email","text":"Container Port Description Feature Flag listmonk-app 9001 Listmonk newsletter platform LISTMONK_SYNC_ENABLED=true listmonk-db 5432 PostgreSQL (Listmonk's own database) \u2014 listmonk-init \u2014 Init container \u2014 creates API user \u2014 mailhog-changemaker 8025 MailHog email capture (development) EMAIL_TEST_MODE=true 
    # Newsletter platform\ndocker compose up -d listmonk-app\n\n# Email testing (captures all outgoing emails)\ndocker compose up -d mailhog\n

    Listmonk has its own PostgreSQL instance separate from the main database. The listmonk-init container auto-creates the API user for platform integration.

    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#developer-tools","title":"Developer Tools","text":"Container Port Description code-server-changemaker 8888 VS Code in the browser mkdocs-changemaker 4003 MkDocs live preview (hot reload) mkdocs-site-server-changemaker 4004 MkDocs static site server gitea-changemaker 3030 Gitea \u2014 self-hosted Git repository gitea-db \u2014 PostgreSQL (Gitea's database) changemaker-v2-nocodb 8091 NocoDB \u2014 read-only database browser nocodb-init \u2014 Init container \u2014 registers database n8n-changemaker 5678 n8n \u2014 workflow automation 
    # Start individual tools\ndocker compose up -d code-server\ndocker compose up -d mkdocs mkdocs-site-server\ndocker compose up -d gitea\ndocker compose up -d nocodb\ndocker compose up -d n8n\n

    Tip

    mkdocs (port 4003) provides live editing with hot reload for documentation authors. mkdocs-site-server (port 4004) serves the built static site for production visitors.

    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#utilities","title":"Utilities","text":"Container Port Description mini-qr 8089 QR code PNG generator excalidraw-changemaker 8090 Collaborative whiteboard vaultwarden-changemaker 8445 Vaultwarden \u2014 Bitwarden-compatible password manager vaultwarden-init \u2014 Init container \u2014 configures admin settings homepage-changemaker 3010 Homepage \u2014 service dashboard 
    docker compose up -d mini-qr excalidraw vaultwarden homepage\n

    Mini QR is used internally by walk sheets and cut export pages to generate printable QR codes.

    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#monitoring-docker-profile","title":"Monitoring (Docker Profile)","text":"

    Monitoring services are behind a Docker Compose profile and are not started by default.

    Container Port Description prometheus-changemaker 9090 Prometheus \u2014 metrics collection grafana-changemaker 3005 Grafana \u2014 monitoring dashboards alertmanager-changemaker 9093 Alertmanager \u2014 alert routing cadvisor-changemaker 8086 cAdvisor \u2014 container metrics node-exporter-changemaker 9100 Node Exporter \u2014 host system metrics redis-exporter-changemaker 9121 Redis Exporter \u2014 Redis metrics gotify-changemaker 8889 Gotify \u2014 push notifications 
    # Start the entire monitoring stack\ndocker compose --profile monitoring up -d\n

    The monitoring stack includes 3 pre-configured Grafana dashboards and 12 custom cm_* Prometheus metrics. See Monitoring for details.

    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#infrastructure","title":"Infrastructure","text":"Container Port Description newt \u2014 Pangolin tunnel connector (Newt) docker-socket-proxy \u2014 Docker socket proxy for secure container access 
    # Newt starts automatically if PANGOLIN_NEWT_ID and PANGOLIN_NEWT_SECRET are set\ndocker compose up -d newt\n

    The Newt container connects to a Pangolin tunnel server for secure public access without opening inbound ports. See Tunnel for setup.

    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#subdomain-routing","title":"Subdomain Routing","text":"

    When Nginx is running, services are accessible via subdomains. The root domain serves documentation only; all application routes are at app.DOMAIN.

    Subdomain Target Purpose app.DOMAIN Admin (3000) All application routes (admin, public pages, campaigns, map, shifts, media gallery) api.DOMAIN Express API (4000) REST API media.DOMAIN Fastify Media API (4100) Media API DOMAIN MkDocs Static (4004) Documentation / marketing site db.DOMAIN NocoDB (8091) Database browser docs.DOMAIN MkDocs Live (4003) Live documentation preview code.DOMAIN Code Server (8888) Web IDE n8n.DOMAIN n8n (5678) Workflow automation git.DOMAIN Gitea (3030) Git hosting home.DOMAIN Homepage (3010) Service dashboard grafana.DOMAIN Grafana (3005) Metrics visualization listmonk.DOMAIN Listmonk (9001) Newsletter platform qr.DOMAIN Mini QR (8089) QR code generator draw.DOMAIN Excalidraw (8090) Collaborative whiteboard vault.DOMAIN Vaultwarden (8445) Password manager events.DOMAIN Gancio (8092) Event platform chat.DOMAIN Rocket.Chat (8891) Team chat meet.DOMAIN Jitsi Meet (8893) Video conferencing mail.DOMAIN MailHog (8025) Email capture (dev)","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#init-containers","title":"Init Containers","text":"

    Several services use init containers \u2014 lightweight containers that run once on first startup to bootstrap databases or configuration, then exit with code 0. This pattern is borrowed from Kubernetes.

    Init Container Purpose listmonk-init Creates the Listmonk API user for platform integration gancio-init Creates the Gancio database in the shared PostgreSQL instance vaultwarden-init Configures Vaultwarden admin settings nocodb-init Registers the main database with NocoDB for browsing

    Seeing these containers in a \"stopped\" or \"exited (0)\" state is completely normal.

    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#starting-everything","title":"Starting Everything","text":"

    To start all services at once (excluding monitoring):

    docker compose up -d\n

    To start everything including monitoring:

    docker compose up -d && docker compose --profile monitoring up -d\n

    To see what's running:

    docker compose ps\n

    Warning

    Starting all services at once requires at least 4 GB RAM. For resource-constrained environments, start only the services you need.

    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/services/#next-steps","title":"Next Steps","text":"
    • Installation \u2014 setup walkthrough and configuration wizard details
    • Environment Variables \u2014 complete .env reference
    • First Steps \u2014 create your first campaign and volunteer shift
    ","tags":["reference","getting-started","operator","docker"]},{"location":"docs/getting-started/upgrades/","title":"Updates & Upgrades","text":"

    Need help getting set up?

    Bunker Operations provides managed infrastructure and hands-on setup assistance for organizations running Changemaker Lite. We handle domains, tunnels, SMTP, and servers so you can focus on your campaign. Get in touch: bnkops.com | admin@bnkops.ca

    Changemaker Lite includes a built-in upgrade system that pulls code updates, rebuilds containers, runs database migrations, and restarts services \u2014 all while preserving your customizations.

    There are two ways to upgrade:

    1. Admin GUI \u2014 Check for updates and run upgrades from Settings > System
    2. CLI \u2014 Run ./scripts/upgrade.sh directly from the command line

    Both methods execute the same 6-phase upgrade process.

    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#prerequisites","title":"Prerequisites","text":"","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#upgrade-watcher-required-for-gui-method","title":"Upgrade Watcher (Required for GUI Method)","text":"

    The admin GUI triggers upgrades via a systemd path watcher that monitors for trigger files. This must be installed on the host system.

    Install during initial setup:

    The config.sh wizard offers to install the watcher automatically (Step 13). If you skipped it, install manually:

    # Edit the systemd units to set your project path and user\nsed -e \"s|__PROJECT_DIR__|$(pwd)|g\" scripts/systemd/changemaker-upgrade.path > /tmp/changemaker-upgrade.path\nsed -e \"s|__PROJECT_DIR__|$(pwd)|g\" -e \"s|__USER__|$(whoami)|g\" scripts/systemd/changemaker-upgrade.service > /tmp/changemaker-upgrade.service\n\n# Install and enable\nsudo cp /tmp/changemaker-upgrade.path /tmp/changemaker-upgrade.service /etc/systemd/system/\nsudo systemctl daemon-reload\nsudo systemctl enable --now changemaker-upgrade.path\n

    Verify it's running:

    sudo systemctl status changemaker-upgrade.path\n

    How the watcher works

    The API container writes a trigger.json file to a shared data/upgrade/ volume. The systemd path watcher detects the file and runs scripts/upgrade-watcher.sh on the host, which dispatches to the appropriate script (check or upgrade). Progress and results are communicated back via JSON files that the API reads.

    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#method-1-admin-gui","title":"Method 1: Admin GUI","text":"","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#checking-for-updates","title":"Checking for Updates","text":"
    1. Navigate to Settings (/app/settings)
    2. Click the System tab
    3. Click Check for Updates

    The System tab shows your current version, last commit message, and auto-upgrade settings:

    The system fetches from the git remote and shows:

    • Current commit hash and message
    • Remote commit hash (if different)
    • Number of commits behind
    • Changelog of incoming changes

    When updates are available, the panel highlights how many commits are behind and lists the incoming changes:

    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#starting-an-upgrade","title":"Starting an Upgrade","text":"
    1. Review the changelog to understand what's changing
    2. Click Start Upgrade
    3. Optionally configure:
      • Skip backup \u2014 skip the database backup phase (not recommended)
      • Pull images \u2014 also update third-party Docker images (PostgreSQL, Redis, etc.)
      • Use registry images \u2014 pull pre-built images from Gitea instead of compiling from source (faster \u2014 requires scripts/build-and-push.sh to have been run first)
      • Dry run \u2014 preview what would happen without making changes
    4. Monitor the 6-phase progress indicator

    The GUI polls for progress updates and displays the current phase, percentage, and status message in real time.

    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#upgrade-results","title":"Upgrade Results","text":"

    After the upgrade completes, the System tab shows the result \u2014 including the new version, health check status, and any warnings:

    Tip

    If health checks show warnings immediately after an upgrade, wait 1-2 minutes for services to fully start before investigating.

    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#the-6-upgrade-phases","title":"The 6 Upgrade Phases","text":"

    Both the GUI and CLI methods execute the same 6-phase process:

    Phase % Name What Happens 1 5% Pre-flight Checks Verifies Docker, git, disk space (2 GB minimum), remote reachability, and clean working directory 2 15% Backup Runs scripts/backup.sh (pg_dump + archive), backs up user-modifiable content, saves pre-upgrade commit hash 3 30% Code Update Saves user paths, stashes local changes, git pull, pops stash with auto-conflict resolution, detects new .env variables 4 50% Container Rebuild Rebuilds api, admin, media-api from source (default) or pulls pre-built images from the Gitea registry (--use-registry); conditionally rebuilds nginx and code-server if their configs changed; optionally pulls third-party images 5 70% Service Restart Stops app containers, force-recreates LSIO containers, verifies Gancio config, starts infrastructure, waits for PostgreSQL, starts API (runs migrations), starts everything else, restarts Newt tunnel and monitoring if they were running 6 90% Verification Health checks for API, Admin, Media API, Gancio, MkDocs; detects containers in restart loops","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#what-gets-preserved","title":"What Gets Preserved","text":"

    The upgrade script automatically preserves user-modifiable paths that you may have customized:

    Path What It Contains mkdocs/docs/ Your documentation content mkdocs/mkdocs.yml MkDocs configuration mkdocs/site/ Built documentation site configs/ Prometheus, Grafana, Alertmanager, Homepage configs nginx/conf.d/services.conf Custom nginx service proxies

    These files are saved before git pull and unconditionally restored afterward, even if the pull introduces changes to them. Your versions always win.

    Tip

    The .env file is never touched by git pull (it's in .gitignore). However, if new environment variables are added in .env.example, the upgrade script automatically appends them to your .env with their default values and warns you to review them.

    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#method-2-cli","title":"Method 2: CLI","text":"

    Run the upgrade script directly:

    ./scripts/upgrade.sh\n
    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#options","title":"Options","text":"Flag Description --skip-backup Skip the backup phase (requires --force) --pull-services Also pull new third-party Docker images --use-registry Pull pre-built images from Gitea instead of compiling from source --dry-run Show what would happen without executing --force Continue past non-critical warnings --branch BRANCH Git branch to pull (default: current branch) --rollback Rollback to pre-upgrade commit --api-mode Write progress/result JSON for admin GUI (used internally)","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#examples","title":"Examples","text":"
    # Standard upgrade\n./scripts/upgrade.sh\n\n# Preview changes without executing\n./scripts/upgrade.sh --dry-run\n\n# Full upgrade including third-party image updates\n./scripts/upgrade.sh --pull-services\n\n# Upgrade using pre-built images from Gitea registry (faster, no TypeScript compile)\n./scripts/upgrade.sh --use-registry --force --skip-backup\n\n# Rollback to the last pre-upgrade state\n./scripts/upgrade.sh --rollback\n
    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#registry-mode-fast-upgrades","title":"Registry Mode (Fast Upgrades)","text":"

    By default, the upgrade script compiles TypeScript from source (npm run build) and rebuilds Docker images on the deployment server. Registry mode skips this by pulling pre-built production images from the Gitea container registry \u2014 faster and requires no build tooling on the server.

    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#how-it-works","title":"How It Works","text":"
    1. Run scripts/build-and-push.sh on a machine with Docker (usually your dev machine) to build and push production images tagged with the current commit SHA
    2. During the next upgrade, pass --use-registry (CLI) or enable the checkbox (GUI)
    3. The upgrade script pulls gitea.bnkops.com/admin/changemaker-{service}:{sha} instead of rebuilding from source
    4. If a registry image is unavailable (e.g., the SHA wasn't pushed), it automatically falls back to a source build
    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#building-and-pushing-images","title":"Building and Pushing Images","text":"
    # Build and push all core services (api, admin, media-api, nginx)\n./scripts/build-and-push.sh\n\n# Skip code-server (9 GB \u2014 push only when Dockerfile changes)\n./scripts/build-and-push.sh --services api,admin,media-api,nginx\n\n# Build only, no push (verify locally first)\n./scripts/build-and-push.sh --no-push\n\n# Also mirror third-party images (postgres, redis, etc.) to Gitea\n./scripts/mirror-images.sh\n

    Registry prerequisites

    • Run docker login gitea.bnkops.com once per machine before pushing
    • Set GITEA_REGISTRY_USER and GITEA_REGISTRY_PASS in .env for the admin GUI's Registry status endpoint
    • gitea.bnkops.com must be reachable without proxies that limit upload size (Cloudflare free plan blocks blobs >100 MB)

    Release installs upgrade automatically via registry

    If you installed from a release tarball (not git clone), the upgrade script automatically uses registry mode. It downloads the latest release package from Gitea instead of running git pull. No additional configuration needed.

    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#rollback","title":"Rollback","text":"","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#automatic-rollback","title":"Automatic Rollback","text":"

    If the upgrade fails at any phase, the script prints detailed rollback instructions including the pre-upgrade commit hash. Use the --rollback flag:

    ./scripts/upgrade.sh --rollback\n

    This:

    1. Finds the latest backup archive
    2. Extracts the pre-upgrade commit hash from git-commit.txt inside the archive
    3. Checks out that commit
    4. Rebuilds and restarts all containers

    Warning

    --rollback restores the code to the pre-upgrade state but does not automatically restore the database. If database migrations were applied during the failed upgrade, you may need to manually restore from the backup archive.

    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#manual-rollback","title":"Manual Rollback","text":"
    # 1. Restore code\ncd /path/to/changemaker.lite\ngit checkout <pre-upgrade-commit-hash>\n\n# 2. Rebuild and restart\ndocker compose build api admin media-api\ndocker compose up -d\n\n# 3. Database restore (if needed \u2014 destructive!)\nls -lt backups/changemaker-v2-backup-*.tar.gz | head -5\ntar xzf backups/<backup>.tar.gz -C /tmp\ngunzip -c /tmp/<backup>/v2-postgres.sql.gz | \\\n  docker exec -i changemaker-v2-postgres psql -U changemaker -d changemaker_v2\n
    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#new-environment-variables","title":"New Environment Variables","text":"

    When upstream code adds new environment variables to .env.example, the upgrade script automatically:

    1. Compares .env.example against your .env
    2. Appends any missing variables with their default values
    3. Warns you to review the new additions
    [WARN] New env vars added to .env (review defaults):\n    NEW_FEATURE_FLAG\n    NEW_API_KEY\n

    Always review new variables after an upgrade \u2014 some may need manual configuration.

    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#update-checker","title":"Update Checker","text":"

    A separate lightweight script checks for available updates without performing any changes:

    ./scripts/upgrade-check.sh\n

    This writes data/upgrade/status.json with:

    • Current and remote commit hashes
    • Number of commits behind
    • Changelog (last 30 commits)
    • Timestamp of last check

    The admin GUI reads this file to display update availability.

    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#troubleshooting","title":"Troubleshooting","text":"","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#stale-progress-indicator","title":"Stale Progress Indicator","text":"

    If the GUI shows an upgrade \"in progress\" but nothing is happening, the upgrade script may have crashed. The system automatically detects stale progress (no update for 10+ minutes) and treats it as not running.

    To manually clear:

    rm -f data/upgrade/progress.json\n
    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#merge-conflicts","title":"Merge Conflicts","text":"

    If git pull encounters merge conflicts in user-modifiable paths (docs, configs), the upgrade script auto-resolves by keeping your version. If conflicts occur in project-owned files (api/, admin/), the upgrade fails and asks you to resolve manually.

    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#lock-file","title":"Lock File","text":"

    The upgrade script uses .upgrade.lock to prevent concurrent upgrades. If a previous upgrade crashed without cleaning up:

    # Verify no upgrade is actually running\nps aux | grep upgrade.sh\n\n# Remove stale lock\nrm -f .upgrade.lock\n
    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#health-check-failures","title":"Health Check Failures","text":"

    If Phase 6 health checks fail, services may still be starting. Wait 1-2 minutes and check manually:

    # API health\ncurl -s http://localhost:4000/api/health\n\n# Container status\ndocker compose ps\n\n# Recent logs\ndocker compose logs api --tail 50\ndocker compose logs admin --tail 50\n
    ","tags":["guide","operator","upgrades"]},{"location":"docs/getting-started/upgrades/#systemd-watcher-not-triggering","title":"Systemd Watcher Not Triggering","text":"
    # Check watcher status\nsudo systemctl status changemaker-upgrade.path\n\n# Check service logs\nsudo journalctl -u changemaker-upgrade.service --tail 20\n\n# Re-enable if stopped\nsudo systemctl enable --now changemaker-upgrade.path\n
    ","tags":["guide","operator","upgrades"]},{"location":"docs/services/","title":"Services","text":"

    Changemaker Lite orchestrates 30+ services via Docker Compose. This page is your map to every service: what it does, how to reach it, and where to find its upstream documentation.

    ","tags":["reference","operator","services","docker"]},{"location":"docs/services/#core-platform","title":"Core Platform","text":"

    The essential services that power the application.

    • Express API

      Main V2 API server. Handles authentication, campaigns, map, shifts, pages, email, and all business logic. Prisma ORM with PostgreSQL.

      Port: 4000 \u00b7 Container: changemaker-v2-api

      API Reference

    • Fastify Media API

      Video library server. Upload, metadata extraction (FFprobe), analytics, scheduled publishing, and public gallery. Shares the same PostgreSQL database.

      Port: 4100 \u00b7 Container: changemaker-media-api

      Media Guide

    • Admin GUI

      React single-page application (Vite + Ant Design + Zustand). Serves the admin dashboard, public campaign pages, volunteer portal, and media gallery \u2014 all from one build.

      Port: 3000 \u00b7 Container: changemaker-v2-admin

      Feature Guides

    • PostgreSQL 16

      Primary database shared by both APIs. Managed by Prisma migrations. Contains 190+ tables covering users, campaigns, locations, shifts, media, and more.

      Port: 5433 (host) / 5432 (container) \u00b7 Container: changemaker-v2-postgres

      PostgreSQL Docs

    • Redis

      In-memory store for rate limiting, BullMQ job queues (email, video scheduling), geocoding cache, and session data. Requires authentication.

      Port: 6379 \u00b7 Container: redis-changemaker

      Redis Docs

    • Nginx

      Reverse proxy handling all subdomain routing (app., api., media., docs., etc.). Includes security headers (HSTS, CSP, Permissions-Policy) and WebSocket support.

      Port: 80 / 443 \u00b7 Container: changemaker-v2-nginx

      Nginx Docs

    ","tags":["reference","operator","services","docker"]},{"location":"docs/services/#communication-email","title":"Communication & Email","text":"

    • Listmonk

      Self-hosted newsletter and mailing list manager. Drop-in replacement for Mailchimp. Opt-in sync with the main platform imports participants, locations, and users as subscriber lists.

      Port: 9001 \u00b7 Container: listmonk-app \u00b7 Subdomain: listmonk.DOMAIN

      Listmonk Docs

    • MailHog

      Email capture for development. All outgoing email is intercepted and displayed in a web UI when EMAIL_TEST_MODE=true. No real emails are sent.

      Port: 8025 (web) / 1025 (SMTP) \u00b7 Container: mailhog-changemaker \u00b7 Subdomain: mail.DOMAIN

      MailHog GitHub

    ","tags":["reference","operator","services","docker"]},{"location":"docs/services/#content-editing","title":"Content & Editing","text":"

    • MkDocs

      Material-themed documentation site with full-text search, blog, social cards, and Jinja2 template overrides. Two containers: live preview (dev) and static site (production).

      Port: 4003 (dev) / 4004 (static) \u00b7 Container: mkdocs-changemaker \u00b7 Subdomain: docs.DOMAIN

      MkDocs Material

    • Code Server

      Full VS Code in the browser. Edit configuration files, templates, and documentation from anywhere without SSH. Supports extensions.

      Port: 8888 \u00b7 Container: code-server-changemaker \u00b7 Subdomain: code.DOMAIN

      Code Server Docs

    ","tags":["reference","operator","services","docker"]},{"location":"docs/services/#data-automation","title":"Data & Automation","text":"

    • NocoDB

      Airtable-alternative database browser. Provides a spreadsheet-like interface to browse, filter, sort, and export campaign data. Read-only access to the main database.

      Port: 8091 \u00b7 Container: changemaker-v2-nocodb \u00b7 Subdomain: db.DOMAIN

      NocoDB Docs

    • n8n

      Visual workflow automation platform. Connect APIs, trigger actions on events, schedule tasks, and build custom integrations \u2014 all without code. 400+ built-in integrations.

      Port: 5678 \u00b7 Container: n8n-changemaker \u00b7 Subdomain: n8n.DOMAIN

      n8n Docs

    • Gitea

      Self-hosted Git repository hosting. Version control for campaign code, configuration, templates, and documentation. Includes issues, pull requests, and CI/CD.

      Port: 3030 (web) / 2222 (SSH) \u00b7 Container: gitea-changemaker \u00b7 Subdomain: git.DOMAIN

      Gitea Docs

    ","tags":["reference","operator","services","docker"]},{"location":"docs/services/#utilities","title":"Utilities","text":"

    • Mini QR

      Lightweight QR code generator. Produces PNG images for walk sheets, campaign materials, and event signage. Embedded in the admin dashboard via iframe.

      Port: 8089 \u00b7 Container: mini-qr \u00b7 Subdomain: qr.DOMAIN

    • Homepage

      Service dashboard showing the status of all containers at a glance. Auto-generated services.yaml from config.sh provides both production and local links.

      Port: 3010 \u00b7 Container: homepage-changemaker \u00b7 Subdomain: home.DOMAIN

      Homepage Docs

    • Excalidraw

      Collaborative whiteboard for brainstorming, diagramming, and visual planning. Real-time collaboration via WebSocket.

      Port: 8090 \u00b7 Container: excalidraw-changemaker \u00b7 Subdomain: draw.DOMAIN

      Excalidraw

    • Vaultwarden

      Self-hosted Bitwarden-compatible password manager. Secure credential sharing for campaign teams. Requires HTTPS for account creation; local browsing works on HTTP.

      Port: 8445 \u00b7 Container: vaultwarden-changemaker \u00b7 Subdomain: vault.DOMAIN

      Vaultwarden Wiki

    ","tags":["reference","operator","services","docker"]},{"location":"docs/services/#team-communication","title":"Team Communication","text":"

    • Rocket.Chat

      Self-hosted team chat for volunteer coordination. Supports channels, direct messaging, threads, and file sharing. Embeddable in the admin dashboard via iframe. Enable with ENABLE_CHAT=true.

      Port: 3000 (internal) \u00b7 Container: rocketchat-changemaker \u00b7 Subdomain: chat.DOMAIN

      Rocket.Chat Docs

    • Jitsi Meet

      Self-hosted video conferencing with JWT authentication. Four containers (web, Prosody, Jicofo, JVB) provide the full video call stack. Integrated with Rocket.Chat for one-click calls from channels and DMs. Enable with ENABLE_MEET=true.

      Containers: jitsi-web, jitsi-prosody, jitsi-jicofo, jitsi-jvb \u00b7 Subdomain: meet.DOMAIN

      Setup Guide \u00b7 Jitsi Docs

    • Gancio

      Self-hosted event management platform. Automatic shift-to-event sync (when GANCIO_SYNC_ENABLED=true) publishes shifts as public events. Uses the shared PostgreSQL database. Embeddable calendar widget available for MkDocs pages.

      Port: 8092 \u00b7 Container: gancio-changemaker \u00b7 Subdomain: events.DOMAIN

      Gancio Docs

    ","tags":["reference","operator","services","docker"]},{"location":"docs/services/#networking-tunneling","title":"Networking & Tunneling","text":"

    • Pangolin + Newt

      Self-hosted tunnel server with the Newt client container. Exposes your services to the internet without port forwarding. Handles SSL/TLS, works behind CGNAT and double NAT.

      Container: newt-changemaker \u00b7 Managed from Admin \u2192 Settings \u2192 Tunnel

      Deployment Guide \u00b7 Pangolin GitHub

    ","tags":["reference","operator","services","docker"]},{"location":"docs/services/#monitoring-stack","title":"Monitoring Stack","text":"

    These services run behind the monitoring Docker Compose profile. Start them with:

    docker compose --profile monitoring up -d\n

    • Prometheus

      Metrics collection and time-series database. Scrapes 12 custom cm_* application metrics plus container, host, and Redis metrics. Pre-configured alert rules.

      Port: 9090 \u00b7 Container: prometheus-changemaker

      Prometheus Docs

    • Grafana

      Metrics visualization with 3 auto-provisioned dashboards: API Overview, Infrastructure, and Campaign Activity. Supports custom dashboards and alerting.

      Port: 3005 \u00b7 Container: grafana-changemaker \u00b7 Subdomain: grafana.DOMAIN

      Grafana Docs

    • Alertmanager

      Alert routing and notification delivery. Receives alerts from Prometheus and dispatches to Gotify, email, or webhooks based on configurable rules.

      Port: 9093 \u00b7 Container: alertmanager-changemaker

      Alertmanager Docs

    • cAdvisor

      Container resource metrics. Exposes CPU, memory, network, and filesystem usage per container for Prometheus to scrape.

      Port: 8086 \u00b7 Container: cadvisor-changemaker

      cAdvisor GitHub

    • Node Exporter

      Host system metrics. Reports CPU, memory, disk, and network stats for the underlying server.

      Port: 9100 \u00b7 Container: node-exporter-changemaker

      Node Exporter

    • Redis Exporter

      Redis metrics for Prometheus. Exposes connection counts, memory usage, command stats, and keyspace info.

      Port: 9121 \u00b7 Container: redis-exporter-changemaker

      Redis Exporter GitHub

    • Gotify

      Self-hosted push notification server. Receives alerts from Alertmanager and delivers them to mobile/desktop clients.

      Port: 8889 \u00b7 Container: gotify-changemaker

      Gotify Docs

    ","tags":["reference","operator","services","docker"]},{"location":"docs/services/#quick-reference","title":"Quick Reference","text":"

    All services at a glance with their default ports and subdomains.

    Service Port Subdomain Docker Profile Express API 4000 api. default Media API 4100 media. default Admin GUI 3000 app. default PostgreSQL 5433 \u2014 default Redis 6379 \u2014 default Nginx 80/443 (all) default Listmonk 9001 listmonk. default MailHog 8025 mail. default MkDocs (dev) 4003 docs. default MkDocs (static) 4004 (root) default Code Server 8888 code. default NocoDB 8091 db. default n8n 5678 n8n. default Gitea 3030 git. default Mini QR 8089 qr. default Homepage 3010 home. default Excalidraw 8090 draw. default Vaultwarden 8445 vault. default Rocket.Chat \u2014 chat. default Jitsi Meet \u2014 meet. default Gancio 8092 events. default Newt (tunnel) \u2014 \u2014 default Prometheus 9090 \u2014 monitoring Grafana 3005 grafana. monitoring Alertmanager 9093 \u2014 monitoring cAdvisor 8086 \u2014 monitoring Node Exporter 9100 \u2014 monitoring Redis Exporter 9121 \u2014 monitoring Gotify 8889 \u2014 monitoring

    Starting services selectively

    You don't need to run everything. Start only what you need:

    # Core only\ndocker compose up -d v2-postgres redis api admin\n\n# Add nginx for subdomain routing\ndocker compose up -d nginx\n\n# Add monitoring\ndocker compose --profile monitoring up -d\n

    See Getting Started for the recommended startup order.

    ","tags":["reference","operator","services","docker"]},{"location":"docs/troubleshooting/","title":"Troubleshooting","text":"

    Common issues and their solutions when running Changemaker Lite.

    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#cors-errors-in-production","title":"CORS Errors in Production","text":"

    Symptom: Browser console shows CORS errors when accessing production domain.

    Fix: Add your production domain to CORS_ORIGINS in .env:

    CORS_ORIGINS=https://app.yourdomain.org,http://localhost:3000\n

    Then restart the API: docker compose restart api

    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#pangolin-tunnel-403302-errors","title":"Pangolin Tunnel \u2014 403/302 Errors","text":"

    Symptom: All API endpoints return 302 redirects to Pangolin auth page, or 403 Forbidden.

    Fix: In the Pangolin dashboard, set each resource to Not Protected (public access). Critical resources to fix first:

    1. api.yourdomain.org \u2014 Main API
    2. app.yourdomain.org \u2014 Admin GUI + public pages
    3. media.yourdomain.org \u2014 Media API

    Verify:

    # Should return JSON, NOT a 302 redirect\ncurl -I https://api.yourdomain.org/api/health\n
    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#database-connection-failures","title":"Database Connection Failures","text":"

    Symptom: API logs show database connection errors.

    Checklist:

    1. Check PostgreSQL: docker compose ps v2-postgres
    2. Verify DATABASE_URL in .env matches container name and port
    3. View logs: docker compose logs v2-postgres --tail 50
    4. Test connection: docker compose exec api npx prisma db execute --stdin <<< \"SELECT 1\"
    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#redis-connection-failures","title":"Redis Connection Failures","text":"

    Symptom: API logs show Redis connection errors, rate limiting doesn't work.

    Checklist:

    1. Check Redis: docker compose ps redis-changemaker
    2. Verify REDIS_PASSWORD and REDIS_URL format (redis://:password@host:port)
    3. View logs: docker compose logs redis-changemaker --tail 50
    4. Test: docker compose exec redis-changemaker redis-cli -a $REDIS_PASSWORD ping
    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#api-not-starting","title":"API Not Starting","text":"

    Symptom: API container keeps restarting or won't start.

    Checklist:

    1. Check logs: docker compose logs api --tail 100
    2. Verify all required env vars are set (compare with .env.example)
    3. Check database is ready: docker compose ps v2-postgres (should show \"healthy\")
    4. Run migrations manually: docker compose exec api npx prisma migrate deploy
    5. Check for port conflicts: ss -tlnp | grep 4000
    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#containers-in-restart-loops","title":"Containers in Restart Loops","text":"

    Symptom: docker compose ps shows containers with \"restarting\" status.

    Diagnosis:

    # Find restarting containers\ndocker compose ps | grep -i restarting\n\n# Check recent logs for the problem container\ndocker compose logs <service-name> --tail 50\n\n# Check container exit code\ndocker inspect <container-name> --format='{{.State.ExitCode}}'\n

    Common causes:

    • Missing environment variables (check .env)
    • Database not ready (healthcheck dependencies)
    • Port already in use by another process
    • Insufficient memory (check with free -h)
    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#newt-tunnel-wont-connect","title":"Newt Tunnel Won't Connect","text":"

    Checklist (in order):

    1. Credentials: Verify PANGOLIN_NEWT_ID and PANGOLIN_NEWT_SECRET in .env
    2. Endpoint: Confirm PANGOLIN_ENDPOINT matches your Pangolin server URL
    3. Logs: docker compose logs newt --tail 50
    4. Nginx running: Newt depends on nginx \u2014 docker compose ps nginx
    5. Network: Ensure outbound HTTPS is not blocked by your firewall
    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#migration-errors","title":"Migration Errors","text":"

    Symptom: prisma migrate deploy fails.

    Common fixes:

    # Check migration status\ndocker compose exec api npx prisma migrate status\n\n# If migrations are out of sync, reset (DESTRUCTIVE \u2014 dev only)\ndocker compose exec api npx prisma migrate reset\n\n# If shadow database errors, create one\ndocker compose exec -T v2-postgres createdb -U changemaker prisma_shadow_diff\n

    Never use prisma db push in production

    Always use prisma migrate dev (development) or prisma migrate deploy (production) to keep migration history in sync.

    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#media-api-upload-failures","title":"Media API Upload Failures","text":"

    Symptom: Video uploads fail with permission errors or 500 status.

    Checklist:

    1. Verify inbox volume is writable: check media/local/inbox has :rw mount
    2. Check disk space: df -h
    3. Verify FFmpeg is installed in container: docker compose exec media-api ffprobe -version
    4. Check upload size limit: default is 10 GB in Fastify multipart config
    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#email-not-sending","title":"Email Not Sending","text":"

    Symptom: Advocacy emails or notifications aren't delivered.

    Checklist:

    1. Check EMAIL_TEST_MODE \u2014 if true, all emails go to MailHog (http://localhost:8025)
    2. Verify SMTP credentials in .env (SMTP_HOST, SMTP_PORT, SMTP_USER, SMTP_PASS)
    3. Check BullMQ queue: visit Admin > Email Queue or check logs
    4. Test SMTP from Settings: Admin > Settings > Email > Test Connection
    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#services-unreachable-via-tunnel","title":"Services Unreachable via Tunnel","text":"

    Checklist:

    1. Verify nginx is running: docker compose ps nginx
    2. Test locally first: curl http://localhost:4000/api/health
    3. Check nginx logs: docker compose logs nginx --tail 50
    4. Verify DNS: dig app.yourdomain.org should point to your Pangolin server
    5. Check Pangolin resources are all set to \"Not Protected\"
    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#slow-map-performance","title":"Slow Map Performance","text":"

    Symptom: Map page is slow or returns 500 errors with many locations.

    Causes and fixes:

    • Too many locations loaded at once \u2014 the API limits by address count with debounced bounds queries
    • Missing indexes \u2014 verify database has the 5 performance indexes on Location/Address tables
    • Browser memory \u2014 marker clustering activates above zoom level 18; below that, addresses are grouped
    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#docker-disk-space","title":"Docker Disk Space","text":"

    Symptom: Builds fail, containers can't start, or images won't pull.

    # Check disk usage\ndf -h\n\n# Clean unused Docker resources\ndocker system prune -f\n\n# Clean old images (keep only last 2 days)\ndocker image prune -a --filter \"until=48h\"\n\n# Check what's using space\ndocker system df\n
    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/troubleshooting/#getting-help","title":"Getting Help","text":"

    If your issue isn't listed here:

    1. Check the API logs: docker compose logs api --tail 200
    2. Search the Gitea issues
    3. Review the Deployment guide for production-specific issues
    4. File a new issue with your logs and .env (redact passwords)
    ","tags":["troubleshooting","operator"],"boost":2},{"location":"docs/user-guide/","title":"User Guide","text":"

    This guide covers everything you can do as a visitor or registered supporter \u2014 from contacting representatives to signing up for volunteer shifts.

    ","tags":["guide","user"]},{"location":"docs/user-guide/#what-you-can-do","title":"What You Can Do","text":"

    • Campaigns

      Find active advocacy campaigns, look up your representatives, and send emails.

    • Map

      Explore the interactive map showing locations across your community.

    • Shifts

      Sign up for volunteer shifts and join canvassing teams.

    • Events

      Browse upcoming events and RSVP through the event calendar.

    • Gallery

      Watch campaign videos, browse photos, and explore playlists.

    • Shop & Pricing

      Purchase campaign merchandise or subscribe to a membership plan.

    • Donations

      Support the cause with one-time donations on branded pages.

    • Your Profile

      View and manage your contact profile, preferences, and activity history.

    ","tags":["guide","user"]},{"location":"docs/user-guide/campaigns/","title":"Campaigns","text":"

    Browse active advocacy campaigns and contact your elected representatives.

    ","tags":["guide","user","influence","campaigns"]},{"location":"docs/user-guide/campaigns/#how-it-works","title":"How It Works","text":"
    1. Browse campaigns at /campaigns \u2014 see active campaigns with descriptions and email counts
    2. Pick a campaign \u2014 read about the issue and who it targets
    3. Enter your postal code \u2014 the system looks up your federal, provincial, municipal, and school board representatives
    4. Send the email \u2014 use \"Send Now\" to send through the platform, or open it in your own email app (Gmail, Outlook, etc.)
    5. Share the response \u2014 if a representative replies, submit it to the public Response Wall
    ","tags":["guide","user","influence","campaigns"]},{"location":"docs/user-guide/campaigns/#response-wall","title":"Response Wall","text":"

    Each campaign has a public response wall where supporters share how their representatives responded. Responses can be upvoted and are moderated by admins. Verified responses display a trust badge.

    ","tags":["guide","user","influence","campaigns"]},{"location":"docs/user-guide/campaigns/#submit-your-own-campaign","title":"Submit Your Own Campaign","text":"

    Registered users can draft and submit their own advocacy campaigns at /campaigns/create. Submissions go through admin review before being published.

    ","tags":["guide","user","influence","campaigns"]},{"location":"docs/user-guide/campaigns/#public-routes","title":"Public Routes","text":"
    • /campaigns \u2014 browse active campaigns
    • /campaign/:slug \u2014 take action on a specific campaign
    • /campaign/:slug/responses \u2014 view the response wall
    • /campaigns/create \u2014 submit a user-generated campaign (requires login)
    • /campaigns/mine \u2014 manage your submitted campaigns (requires login)
    ","tags":["guide","user","influence","campaigns"]},{"location":"docs/user-guide/donations/","title":"Donations","text":"

    Make one-time contributions on branded donation pages.

    ","tags":["guide","user","payments"]},{"location":"docs/user-guide/donations/#how-it-works","title":"How It Works","text":"
    1. Browse donation pages at /donate
    2. Choose a campaign to support
    3. Select a suggested amount or enter a custom amount
    4. Complete payment securely through Stripe
    5. Receive a confirmation with a thank-you message
    ","tags":["guide","user","payments"]},{"location":"docs/user-guide/donations/#donation-pages","title":"Donation Pages","text":"

    Each donation page has:

    • Custom branding \u2014 unique title, description, and cover image
    • Suggested amounts \u2014 pre-set donation tiers for quick selection
    • Goal tracking \u2014 progress bar showing how close the campaign is to its fundraising goal
    • Anonymous giving \u2014 option to donate without displaying your name
    ","tags":["guide","user","payments"]},{"location":"docs/user-guide/donations/#public-routes","title":"Public Routes","text":"
    • /donate \u2014 browse donation pages
    • /donate/:slug \u2014 donate on a specific campaign page
    ","tags":["guide","user","payments"]},{"location":"docs/user-guide/donations/#for-admins","title":"For Admins","text":"

    Donation pages are configured in Admin \u2192 Payments \u2192 Donations, including goals, suggested amounts, and thank-you messages.

    ","tags":["guide","user","payments"]},{"location":"docs/user-guide/events/","title":"Events (Gancio)","text":"

    Integrated with Gancio for self-hosted event management. When enabled, volunteer shifts are automatically published as public events. See Integrations for admin setup.

    ","tags":["guide","user","events"]},{"location":"docs/user-guide/events/#shift-to-event-sync","title":"Shift-to-Event Sync","text":"

    When GANCIO_SYNC_ENABLED=true, the platform:

    1. Creates a Gancio event whenever a new shift is published
    2. Updates the event if the shift time, location, or details change
    3. Deletes the event if the shift is cancelled

    Sync uses OAuth authentication with the Gancio admin account.

    ","tags":["guide","user","events"]},{"location":"docs/user-guide/events/#key-features","title":"Key Features","text":"
    • Automatic sync \u2014 shifts appear as public events without manual entry
    • Embeddable calendar \u2014 GrapesJS block and MkDocs widget for embedding the event calendar on pages
    • Public events page \u2014 linked from the public navigation when enableEvents is enabled in settings
    ","tags":["guide","user","events"]},{"location":"docs/user-guide/events/#admin-routes","title":"Admin Routes","text":"
    • /app/gancio \u2014 Gancio service status and iframe embed
    ","tags":["guide","user","events"]},{"location":"docs/user-guide/events/#public-routes","title":"Public Routes","text":"
    • /events \u2014 public events navigation link (when enabled)
    • events.DOMAIN \u2014 Gancio web interface for browsing and RSVPs
    ","tags":["guide","user","events"]},{"location":"docs/user-guide/gallery/","title":"Gallery","text":"

    The public gallery at /gallery showcases campaign videos, photos, and curated playlists.

    ","tags":["guide","user","media","gallery"]},{"location":"docs/user-guide/gallery/#videos","title":"Videos","text":"
    • Browse by category \u2014 videos organized into categories with thumbnails and durations
    • Video player \u2014 full playback with engagement features (reactions, comments)
    • Shorts feed \u2014 TikTok-style vertical video feed for clips under 60 seconds at /gallery/shorts
    ","tags":["guide","user","media","gallery"]},{"location":"docs/user-guide/gallery/#photos","title":"Photos","text":"
    • Photo albums \u2014 browse photos organized into named collections
    • Reactions and comments \u2014 engage with individual photos
    ","tags":["guide","user","media","gallery"]},{"location":"docs/user-guide/gallery/#playlists","title":"Playlists","text":"
    • Curated playlists \u2014 admin and community-created video collections
    • Featured carousel \u2014 highlighted playlists on the gallery homepage
    • Playlist viewer \u2014 continuous playback with up-next queue at /gallery/playlist/:id
    ","tags":["guide","user","media","gallery"]},{"location":"docs/user-guide/gallery/#public-routes","title":"Public Routes","text":"
    • /gallery \u2014 public video and photo gallery
    • /gallery/watch/:id \u2014 watch a specific video
    • /gallery/playlist/:id \u2014 view a playlist
    • /gallery/shorts \u2014 browse the shorts feed
    ","tags":["guide","user","media","gallery"]},{"location":"docs/user-guide/map/","title":"Map","text":"

    The public map at /map shows locations across your community on an interactive Leaflet map.

    ","tags":["guide","user","map"]},{"location":"docs/user-guide/map/#features","title":"Features","text":"
    • Interactive map \u2014 zoom, pan, and click markers to see address details
    • Color-coded markers \u2014 locations are color-coded based on their status
    • Cluster groups \u2014 markers group together when zoomed out for better performance
    • Fullscreen mode \u2014 expand the map to fill your screen
    ","tags":["guide","user","map"]},{"location":"docs/user-guide/map/#public-routes","title":"Public Routes","text":"
    • /map \u2014 public interactive map
    ","tags":["guide","user","map"]},{"location":"docs/user-guide/profile/","title":"Self-Service Contact Profile","text":"

    Give supporters a private, token-based link to view and manage their own contact profile -- no login required.

    ","tags":["guide","user","CRM"]},{"location":"docs/user-guide/profile/#how-it-works","title":"How It Works","text":"
    1. An admin generates a profile link from the People CRM -- each link contains a unique 64-character hex token with a configurable expiration (24 hours to 1 year).
    2. The supporter opens the link -- if the link is password-protected, they enter the password first. If expired, they see a branded expiration notice.
    3. The supporter views and edits their profile -- they can update their name, email, phone, address, and cover photo.
    4. Communication preferences -- supporters can opt out of email and/or SMS communications with simple toggle switches.
    ","tags":["guide","user","CRM"]},{"location":"docs/user-guide/profile/#profile-tabs","title":"Profile Tabs","text":"
    • Profile -- edit display name, first/last name, email, phone, and address
    • Preferences -- toggle email and SMS opt-out switches
    • Activity -- paginated timeline of all engagement: emails sent, responses submitted, shift signups, canvass visits, donations, video views, and profile edits
    • Social tabs -- if the viewer is a logged-in user viewing their own profile and the social feature is enabled, additional tabs appear: Friends, Feed, Achievements, Notifications, and Discover
    ","tags":["guide","user","CRM"]},{"location":"docs/user-guide/profile/#security","title":"Security","text":"
    • Token-based access -- no account or login needed; the URL token grants access
    • Password protection -- admins can optionally set a password on the profile link
    • Expiration -- links expire after a configurable duration, showing a branded message with the expiration date
    • Rate limiting -- separate rate limits on profile views, edits, photo uploads, and password attempts
    • Cover photo -- supporters can upload a JPEG, PNG, or WebP cover photo (max 5 MB), automatically resized to 800x400
    ","tags":["guide","user","CRM"]},{"location":"docs/user-guide/profile/#engagement-score","title":"Engagement Score","text":"

    Each profile shows a circular engagement score (0-100) calculated from the contact's activity across the platform -- emails, shifts, canvass visits, donations, and video views.

    ","tags":["guide","user","CRM"]},{"location":"docs/user-guide/profile/#public-routes","title":"Public Routes","text":"
    • /profile/:token -- self-service contact profile page
    ","tags":["guide","user","CRM"]},{"location":"docs/user-guide/shifts/","title":"Shifts","text":"

    Browse available volunteer shifts and sign up to participate in canvassing and other campaign activities.

    ","tags":["guide","user","shifts"]},{"location":"docs/user-guide/shifts/#signing-up","title":"Signing Up","text":"
    1. Visit /shifts to see available time slots
    2. Pick a shift that works for your schedule
    3. Fill in your name and email
    4. You'll receive a confirmation email with login credentials
    ","tags":["guide","user","shifts"]},{"location":"docs/user-guide/shifts/#quick-join","title":"Quick Join","text":"

    Organizers may share a QR code at events for instant onboarding:

    1. Scan the QR code \u2014 it opens a Quick Join page
    2. Enter your email (and optionally your name and phone)
    3. Start immediately \u2014 you're logged in and redirected to the volunteer portal with your area pre-loaded

    Quick Join creates a temporary 24-hour account. Your organizer can upgrade it to a permanent account afterward.

    ","tags":["guide","user","shifts"]},{"location":"docs/user-guide/shifts/#after-signing-up","title":"After Signing Up","text":"

    Once you have an account, log in to access the Volunteer Portal where you can:

    • View your assigned shifts and canvassing areas
    • Open the canvass map for GPS-guided door-to-door outreach
    • Track your activity and visit history

    See the Volunteer Guide for the full volunteer experience.

    ","tags":["guide","user","shifts"]},{"location":"docs/user-guide/shifts/#public-routes","title":"Public Routes","text":"
    • /shifts \u2014 browse and sign up for volunteer shifts
    • /join?token=... \u2014 quick join via invite link or QR code
    ","tags":["guide","user","shifts"]},{"location":"docs/user-guide/shop/","title":"Shop & Pricing","text":"

    Support the campaign by purchasing merchandise or subscribing to a membership plan.

    ","tags":["guide","user","payments"]},{"location":"docs/user-guide/shop/#shop","title":"Shop","text":"

    Browse available products at /shop:

    • Campaign merchandise and branded items
    • One-time purchases with Stripe checkout
    • Product details with images and descriptions
    ","tags":["guide","user","payments"]},{"location":"docs/user-guide/shop/#membership-plans","title":"Membership Plans","text":"

    View subscription options at /pricing:

    • Tiered membership plans with different benefits
    • Monthly and yearly billing options
    • Secure recurring payments through Stripe
    ","tags":["guide","user","payments"]},{"location":"docs/user-guide/shop/#public-routes","title":"Public Routes","text":"
    • /shop \u2014 browse products
    • /pricing \u2014 view subscription plans
    ","tags":["guide","user","payments"]},{"location":"docs/user-guide/shop/#for-admins","title":"For Admins","text":"
    • Products \u2014 manage merchandise and inventory
    • Plans \u2014 configure subscription tiers and pricing
    • Payment settings \u2014 Stripe API key configuration
    ","tags":["guide","user","payments"]},{"location":"docs/volunteer/","title":"Volunteer Guide","text":"

    Welcome! This guide walks you through everything you need as a campaign volunteer.

    ","tags":["guide","volunteer"]},{"location":"docs/volunteer/#getting-started","title":"Getting Started","text":"","tags":["guide","volunteer"]},{"location":"docs/volunteer/#1-sign-up-for-a-shift","title":"1. Sign Up for a Shift","text":"

    Visit the Shifts page (your organizer will share the link, or find it at /shifts). Browse available time slots, pick one that works, and fill in your name and email. You'll receive a confirmation email with login credentials.

    ","tags":["guide","volunteer"]},{"location":"docs/volunteer/#2-log-in","title":"2. Log In","text":"

    Sign in with the email and password from your confirmation at the login page.

    ","tags":["guide","volunteer"]},{"location":"docs/volunteer/#3-explore-the-volunteer-portal","title":"3. Explore the Volunteer Portal","text":"

    After logging in, you'll land on the volunteer portal. Use the bottom navigation to access:

    • Map \u2014 your canvassing area with GPS tracking
    • Shifts \u2014 your upcoming and past shifts
    • Friends \u2014 social connections with other volunteers
    • Achievements \u2014 badges and leaderboards
    ","tags":["guide","volunteer"]},{"location":"docs/volunteer/#in-this-section","title":"In This Section","text":"
    • Canvassing \u2014 the GPS-guided canvass map, recording visits, and walking routes
    • Shifts \u2014 viewing your assigned shifts, activity log, and route history
    • Social \u2014 friend connections, activity feed, groups, profiles, and privacy settings
    • Achievements \u2014 unlockable badges, progress tracking, and competitive leaderboards
    ","tags":["guide","volunteer"]},{"location":"docs/volunteer/#browsing-public-pages","title":"Browsing Public Pages","text":"

    Tap your name/avatar in the header and select Browse Site to visit the public pages \u2014 campaigns, the public map, and shift signups.

    ","tags":["guide","volunteer"]},{"location":"docs/volunteer/#faq","title":"FAQ","text":"

    Q: I can't find my assigned area on the map. A: Make sure your shift has an area assigned. Check with your organizer.

    Q: My GPS isn't working. A: Allow location access in your browser. Try moving near a window for better signal.

    Q: I recorded the wrong outcome. A: Visit the same address again and record the correct outcome. The most recent visit counts.

    Q: How do I sign up for more shifts? A: Visit the public shifts page at /shifts.

    ","tags":["guide","volunteer"]},{"location":"docs/volunteer/achievements/","title":"Achievements & Leaderboard","text":"

    Recognize volunteer contributions with unlockable achievement badges and competitive leaderboards.

    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/achievements/#how-it-works","title":"How It Works","text":"

    Achievements are checked automatically when relevant actions occur (e.g., signing up for a shift, completing a canvass session, accepting a friend request). When a user's progress meets the threshold, the badge is unlocked and an in-app notification is sent.

    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/achievements/#badge-categories","title":"Badge Categories","text":"","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/achievements/#shifts","title":"Shifts","text":"Badge Name Threshold Description FIRST_SHIFT First Steps 1 confirmed signup Sign up for your first volunteer shift SHIFT_STREAK_3 Reliable Volunteer 3 confirmed signups Sign up for 3 volunteer shifts SHIFT_STREAK_10 Shift Champion 10 confirmed signups Sign up for 10 volunteer shifts","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/achievements/#canvassing","title":"Canvassing","text":"Badge Name Threshold Description FIRST_CANVASS Door Knocker 1 completed session Complete your first canvass session CANVASS_50_DOORS Neighbourhood Explorer 50 visits Record 50 canvass visits CANVASS_100_DOORS Community Connector 100 visits Record 100 canvass visits CANVASS_500_DOORS Door-to-Door Legend 500 visits Record 500 canvass visits","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/achievements/#campaigns","title":"Campaigns","text":"Badge Name Threshold Description FIRST_CAMPAIGN_EMAIL Voice Heard 1 email sent Send your first advocacy email CAMPAIGN_CHAMPION Campaign Champion 5 distinct campaigns Participate in 5 different campaigns","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/achievements/#social","title":"Social","text":"Badge Name Threshold Description SOCIAL_BUTTERFLY Social Butterfly 10 accepted friends Make 10 friends on the platform TEAM_PLAYER Team Player 3 group memberships Be a member of 3 groups","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/achievements/#progress-tracking","title":"Progress Tracking","text":"

    Each badge displays a progress bar showing current progress toward the threshold. Already-unlocked badges show the unlock date and the progress value at unlock time or the current count (whichever is higher).

    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/achievements/#leaderboards","title":"Leaderboards","text":"

    The Achievements page includes a leaderboard tab with three ranking types:

    • Canvass \u2014 ranked by total canvass visits recorded
    • Shifts \u2014 ranked by total confirmed shift signups
    • Campaigns \u2014 ranked by number of distinct campaigns participated in

    Leaderboard entries show rank, user name, and score. Users who have disabled \"Show in Friend Activity\" in their privacy settings are excluded from leaderboard rankings to respect their privacy choices.

    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/achievements/#volunteer-stats","title":"Volunteer Stats","text":"

    The Achievements page also displays aggregate stats for the current user:

    • Confirmed shift signups
    • Completed canvass sessions
    • Total canvass visits
    • Advocacy emails sent
    • Campaigns participated in
    • Friend count
    • Group memberships
    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/achievements/#volunteer-routes","title":"Volunteer Routes","text":"
    • /volunteer/achievements \u2014 badge gallery, progress bars, leaderboard tabs, and personal stats
    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/canvassing/","title":"Canvassing","text":"

    The volunteer canvass map is your main tool for door-to-door outreach \u2014 a full-screen GPS-tracked experience.

    ","tags":["guide","volunteer","map","canvassing"]},{"location":"docs/volunteer/canvassing/#the-volunteer-map","title":"The Volunteer Map","text":"","tags":["guide","volunteer","map","canvassing"]},{"location":"docs/volunteer/canvassing/#what-you-see","title":"What You See","text":"
    • Colored markers \u2014 each marker is an address. Colors indicate the outcome of the last visit (green = supportive, red = opposed, grey = not yet visited)
    • Clusters \u2014 when zoomed out, markers group together showing the address count. Tap a cluster to zoom in.
    • Blue dot \u2014 your current GPS position
    • Walking route \u2014 a suggested path through the addresses (dotted line)
    ","tags":["guide","volunteer","map","canvassing"]},{"location":"docs/volunteer/canvassing/#recording-a-visit","title":"Recording a Visit","text":"
    1. Tap a marker to select an address
    2. A bottom panel slides up showing address details
    3. Tap Record Visit to log what happened:
      • Not Home \u2014 nobody answered
      • Supportive \u2014 positive interaction
      • Opposed \u2014 not supportive
      • Undecided \u2014 hasn't made up their mind
      • Moved \u2014 no longer lives there
      • Refused \u2014 declined to talk
    4. Optionally add a note about the visit
    5. Tap Save \u2014 the marker color updates immediately
    ","tags":["guide","volunteer","map","canvassing"]},{"location":"docs/volunteer/canvassing/#sessions","title":"Sessions","text":"
    • Start a session before you begin knocking on doors \u2014 this tracks your route and time
    • End your session when you're done for the day
    • The map works offline for basic viewing, but you need a connection to save visits
    • If GPS is inaccurate, manually tap the correct marker on the map
    ","tags":["guide","volunteer","map","canvassing"]},{"location":"docs/volunteer/canvassing/#routes","title":"Routes","text":"

    The Routes tab shows your past canvassing routes on a map, helping you see which areas you've covered and plan your next outing.

    ","tags":["guide","volunteer","map","canvassing"]},{"location":"docs/volunteer/canvassing/#volunteer-routes","title":"Volunteer Routes","text":"
    • /volunteer \u2014 full-screen canvass map with GPS and visit recording
    • /volunteer/activity \u2014 visit history and outcome breakdown
    • /volunteer/routes \u2014 past canvassing routes
    ","tags":["guide","volunteer","map","canvassing"]},{"location":"docs/volunteer/shifts/","title":"Your Shifts","text":"

    View your upcoming and past volunteer shifts from the Shifts tab in the bottom navigation.

    ","tags":["guide","volunteer","shifts"]},{"location":"docs/volunteer/shifts/#shift-details","title":"Shift Details","text":"

    Each shift shows:

    • Date and time
    • Assigned area (if linked to a canvassing territory)
    • A button to open the canvass map for that area
    ","tags":["guide","volunteer","shifts"]},{"location":"docs/volunteer/shifts/#activity-log","title":"Activity Log","text":"

    The Activity tab shows your complete visit history:

    • Outcome breakdown \u2014 pie chart of your visit outcomes
    • Visit list \u2014 each visit with address, outcome, time, and notes
    • Stats \u2014 total visits, addresses covered, and sessions completed
    ","tags":["guide","volunteer","shifts"]},{"location":"docs/volunteer/shifts/#volunteer-routes","title":"Volunteer Routes","text":"
    • /volunteer/shifts \u2014 view assigned shifts
    • /volunteer/activity \u2014 visit history and outcome breakdown
    ","tags":["guide","volunteer","shifts"]},{"location":"docs/volunteer/shifts/#related","title":"Related","text":"
    • Sign up for shifts \u2014 browse and sign up for public shifts
    • Canvassing \u2014 using the GPS canvass map once a shift starts
    • Admin \u2192 Shifts \u2014 how organizers schedule and manage shifts
    ","tags":["guide","volunteer","shifts"]},{"location":"docs/volunteer/social/","title":"Social Connections","text":"

    Connect with fellow volunteers through friend requests, activity feeds, team groups, and real-time notifications. Enable via Settings > Feature Toggles > Social Connections.

    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/social/#friends","title":"Friends","text":"
    • Send requests \u2014 search for other volunteers and send friend requests
    • Accept / decline / cancel \u2014 manage requests from the Friends page
    • Mutual friends \u2014 view shared connections between users
    • Block / unblock \u2014 blocked users cannot send requests or appear in suggestions
    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/social/#discover","title":"Discover","text":"

    The Discover page suggests potential friends using a ranked scoring algorithm based on:

    • Household/family connections (highest priority)
    • Mutual friends
    • Shared shifts (co-volunteers from the last 90 days)
    • Shared campaigns (co-participants from the last 90 days)
    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/social/#activity-feed","title":"Activity Feed","text":"

    The Social Feed at /volunteer/feed shows recent activity from your friends:

    • Shift signups, campaign emails, canvass sessions, and response submissions
    • Limited to the last 30 days (max 50 items)
    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/social/#groups","title":"Groups","text":"

    Groups are automatically created based on platform activity:

    • Shift teams \u2014 created when 2+ volunteers share a shift
    • Campaign teams \u2014 created when 2+ users participate in the same campaign
    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/social/#profiles","title":"Profiles","text":"

    Each volunteer has a social profile showing volunteer stats, achievement badges, friendship status, and recent activity.

    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/social/#pokes","title":"Pokes","text":"

    Send a friendly nudge to any accepted friend (24-hour cooldown per pair).

    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/social/#privacy-settings","title":"Privacy Settings","text":"Setting Default Description Show online status On Whether friends see you as online Show in friend activity On Whether your actions appear in feeds Allow friend requests On Whether others can send you requests","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/social/#digest-emails","title":"Digest Emails","text":"

    Opt into periodic social digest emails with friend activity, unread notifications, and pending requests. Choose daily or weekly frequency.

    ","tags":["guide","volunteer","social"]},{"location":"docs/volunteer/social/#volunteer-routes","title":"Volunteer Routes","text":"
    • /volunteer/feed \u2014 social activity feed
    • /volunteer/friends \u2014 friends, requests, blocked, and groups
    • /volunteer/discover \u2014 ranked friend suggestions
    • /volunteer/profile \u2014 your social profile
    • /volunteer/profile/:userId \u2014 another volunteer's profile
    • /volunteer/notifications \u2014 notification center and preferences
    • /volunteer/groups/:id \u2014 group detail with member list
    ","tags":["guide","volunteer","social"]},{"location":"blog/archive/2026/","title":"2026","text":""},{"location":"blog/category/platform/","title":"Platform","text":""},{"location":"blog/category/release-notes/","title":"Release Notes","text":""},{"location":"blog/category/testing/","title":"Testing","text":""},{"location":"blog/category/announcements/","title":"Announcements","text":""}]} \ No newline at end of file diff --git a/mkdocs/site/sitemap.xml b/mkdocs/site/sitemap.xml index 676c3cac..cef71f3c 100644 --- a/mkdocs/site/sitemap.xml +++ b/mkdocs/site/sitemap.xml @@ -2,354 +2,362 @@ https://cmlite.org/ - 2026-04-07 + 2026-04-18 https://cmlite.org/404/ - 2026-04-07 + 2026-04-18 https://cmlite.org/lander/ - 2026-04-07 + 2026-04-18 https://cmlite.org/main/ - 2026-04-07 + 2026-04-18 https://cmlite.org/test-page/ - 2026-04-07 + 2026-04-18 https://cmlite.org/test/ - 2026-04-07 + 2026-04-18 https://cmlite.org/blog/ - 2026-04-07 + 2026-04-18 https://cmlite.org/blog/2026/03/27/test-blog-post---version-7/ - 2026-04-07 + 2026-04-18 + + + https://cmlite.org/blog/2026/04/16/a-smoother-fresh-install-v298-and-v299/ + 2026-04-18 https://cmlite.org/blog/2026/03/22/introducing-changemaker-lite-v2/ - 2026-04-07 + 2026-04-18 https://cmlite.org/comments/callback/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/phil/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/dashboard/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/people-access/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/settings/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/advocacy/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/advocacy/campaigns/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/advocacy/email-queue/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/advocacy/representatives/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/advocacy/responses/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/broadcast/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/broadcast/email-templates/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/broadcast/newsletter/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/broadcast/sms/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/map/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/map/areas/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/map/canvassing/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/map/data-quality/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/map/locations/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/map/settings/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/map/shifts/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/media/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/media/ads/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/media/analytics/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/media/curated/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/media/library/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/media/moderation/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/payments/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/payments/donations/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/payments/plans/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/payments/products/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/payments/settings/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/services/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/services/crowdsec/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/services/integrations/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/services/monitoring/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/services/tunnel/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/services/user-provisioning/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/web/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/web/documentation/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/web/homepage/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/web/landing-pages/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/admin/web/navigation/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/api/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/architecture/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/deployment/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/getting-started/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/getting-started/control-panel/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/getting-started/environment-variables/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/getting-started/features/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/getting-started/first-steps/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/getting-started/installation/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/getting-started/prerequisites/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/getting-started/services/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/getting-started/upgrades/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/services/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/troubleshooting/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/user-guide/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/user-guide/campaigns/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/user-guide/donations/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/user-guide/events/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/user-guide/gallery/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/user-guide/map/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/user-guide/profile/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/user-guide/shifts/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/user-guide/shop/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/volunteer/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/volunteer/achievements/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/volunteer/canvassing/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/volunteer/shifts/ - 2026-04-07 + 2026-04-18 https://cmlite.org/docs/volunteer/social/ - 2026-04-07 + 2026-04-18 https://cmlite.org/includes/abbreviations/ - 2026-04-07 + 2026-04-18 https://cmlite.org/partials/integrations/analytics/custom/ - 2026-04-07 + 2026-04-18 https://cmlite.org/blog/archive/2026/ - 2026-04-07 - - - https://cmlite.org/blog/category/testing/ - 2026-04-07 - - - https://cmlite.org/blog/category/announcements/ - 2026-04-07 + 2026-04-18 https://cmlite.org/blog/category/platform/ - 2026-04-07 + 2026-04-18 + + + https://cmlite.org/blog/category/release-notes/ + 2026-04-18 + + + https://cmlite.org/blog/category/testing/ + 2026-04-18 + + + https://cmlite.org/blog/category/announcements/ + 2026-04-18 \ No newline at end of file diff --git a/mkdocs/site/sitemap.xml.gz b/mkdocs/site/sitemap.xml.gz index cf274652956424245d0c90a7b5ccda6f8075f40a..cd24e21321eba019ab0de39ea51240b0bf501990 100644 GIT binary patch literal 910 zcmV;919AKxiwFpS$>M1O|8r?{Wo=<_E_iKh0L7ZkZrd;n$M1WJB6rnkR&4FiX16`T z_5ifR*urE{lVoRk`%zBOroj#a29UnQABui|(Go>be){@*3O5Vp;we6F?ryi68;q8m zkHhok$M|aTGN-VJ06d>#aEmlm0QX~SM10arF*&AZEqhp z`wusKv+uxG?prN|tFcqy@@oZ8U3+j@4oaQK?RVSVC$qgbcMn|T<=(mC?zQHB zWZZA>MK}SX!z_ZDz()~K#Zpaz0mWz{pgzzb2Ws_o+mGGu^Vy#5rb)zS#=ML~^I2NX zeRub%15+lVI$}15jAb-FmI@)5W%u}CxIed(M+HmmIv;B$H(T~g#*PpNb}&C#XZr)I z647L7nlRSVS++?J_NNHdku7qdH2NS%12+kIt_z%lGWG=7NrMwo3TVJuEJYg5(|6^; zBhCf4kOg~E<64*!_#x`GoL!X<=GTlfs%glW*rT)eg6bD6iaJW7SmYJ-nZQ{PiYWdH zKKBC-jZ=WCX@Q8x64)OIg{ObjP$qE$v?YlG5;B5HTP?%|N@1_BL3dDrogVP>lLntl zv9F`3VtTFFc4d$LQ02+!Jm^5dDYX_Ngj4la32*1j^N7=d2j6GNCmlG~g?Sy_;xRm& z&TBv|uA`{q)?O8G^rA^$(*TMuK+Clk%!{|E$F-S`uAo&D;A6!h>-7Ft5fepUDJuk3 zuM+AUBL+46%x8v&;o@7WQo#^M>@|>lIZx*mwEVo&1dKGHSn~af-F7ot?zQoYhJXl* zAEZs6ydW&wk#E>KXTdk@Fa=s?HaX^Sov ze9-CU(uvu3XcDydLSg2$y5#oK8xlB-=0PQ#rF-LR?7F_f)>Y$z=TD`?s1~^K#8XGx$v#k?6wnz1LO~Nr kDl&f0Z{O}o4f6M7h>_-K|JTK>KLzXl4?Imds0Azl0D=d~Y5)KL literal 870 zcmV-s1DX6EiwFn+Nz`cq|8r?{Wo=<_E_iKh0L7ZkZrd;n$M1WJB6rtWR;=65rnf!8 z_5ifR+CpVf)rYgZ{V1ns)1Zd|14v)u4@JMfWRapM-#z@9{ndggI|}!k&)3_{6$V4r zh4Fs#``6Fz+vZ{a>8>W9v0QQCkncBBDe*_&9}b7>>v8AF>{~6Ft1+|Z@@oZmeS2_T4sw~v?swbW*KT{$ZEv~A%e_;@{cFwt z$hg_wh;Tdvi%A4Eg9{>{g1K}NMiirofCf*a9H`aTZ@=`r+f#qGn_VP6>$(?9>~0n0 z?0OeUB3lg`e`h8LBU|wkrmp>=TXrIv49zo!l6wQ*4`7}|sFqBY1I5XCIU3km$UU6l zEaYh*NLCsgk)p>AjKQ3x;XFqcHXd;<*o6$3qZ-%19Knr2ujTBjobR41R#elFFec3G zy`Z=Sv!ae1DP(yCLn5#Sgr@Be!KZP+@n`f~RJvYkwq4nido1!~v<`HjV3k@60sOHzql7m# z@jPO6;NA@h(oqM_bzxeqTRet`<7o}3#kCZ4+}f)Gj$SnBYZ^fD1!%eUjA?NO^|&U{ z!DcjS0$eCKCY{m$Dq^PK3MGZ0>QzFiA)r^oS3c|53>Vk(feIaQz(E7amvug^pylVC zCSal&#WLI%?6zgla<7e_H3S4$+$i1k(FwwmnfQh&H3`09i_z0Mv&k{X(+t|>0!cJ} zy#yO-y9%BMwWvS6l!0M!i9&k`-2%zM;3aMBQqChn8-tn(T*`&7Fe-|0fzP}bb~%?S zV#0*a)wO+V#m_RZ!c^FzIioAAsL$xQ z$fgs{&?CDyluY5Au|;$7XIx&lJUXv4%%u~v@6aUJ-wXN5Yjw%(r8gvS7|li{oTYo? zYwWtb(WS@O8JUa&nJC%?<7FiEPSAZvjz+kd7s;r%jQ~?~p;_(|sdd%3;OSE- wF{%M>Jn_`gz7mrf>F>!90@Yvy?fgBz?cqOC`j1z={$woszwX+*`RXbF0QMBQ5&!@I diff --git a/mkdocs/site/tags.json b/mkdocs/site/tags.json index 2efbbfc4..8cdde094 100644 --- a/mkdocs/site/tags.json +++ b/mkdocs/site/tags.json @@ -1 +1 @@ -{"mappings": [{"item": {"url": "blog/2026/03/22/introducing-changemaker-lite-v2/", "title": "Introducing Changemaker Lite v2"}, "tags": ["FOSS", "release", "self-hosted", "v2"]}, {"item": {"url": "docs/", "title": "Documentation"}, "tags": ["getting-started", "guide"]}, {"item": {"url": "docs/phil/", "title": "Philosophy"}, "tags": ["FOSS", "concept", "philosophy"]}, {"item": {"url": "docs/admin/", "title": "Admin Guide"}, "tags": ["admin", "guide"]}, {"item": {"url": "docs/admin/dashboard/", "title": "Dashboard"}, "tags": ["admin", "guide"]}, {"item": {"url": "docs/admin/people-access/", "title": "People & Access"}, "tags": ["CRM", "admin", "guide"]}, {"item": {"url": "docs/admin/settings/", "title": "Settings"}, "tags": ["admin", "configuration", "guide"]}, {"item": {"url": "docs/admin/advocacy/", "title": "Advocacy"}, "tags": ["admin", "guide", "influence"]}, {"item": {"url": "docs/admin/advocacy/campaigns/", "title": "Campaigns"}, "tags": ["admin", "campaigns", "guide", "influence"]}, {"item": {"url": "docs/admin/advocacy/email-queue/", "title": "Email Queue"}, "tags": ["admin", "email", "guide", "influence"]}, {"item": {"url": "docs/admin/advocacy/representatives/", "title": "Representatives"}, "tags": ["admin", "guide", "influence"]}, {"item": {"url": "docs/admin/advocacy/responses/", "title": "Responses"}, "tags": ["admin", "guide", "influence", "moderation"]}, {"item": {"url": "docs/admin/broadcast/", "title": "Broadcast"}, "tags": ["admin", "broadcast", "guide"]}, {"item": {"url": "docs/admin/broadcast/email-templates/", "title": "Email Templates"}, "tags": ["admin", "broadcast", "email", "guide"]}, {"item": {"url": "docs/admin/broadcast/newsletter/", "title": "Newsletter"}, "tags": ["admin", "broadcast", "email", "guide"]}, {"item": {"url": "docs/admin/broadcast/sms/", "title": "SMS"}, "tags": ["admin", "broadcast", "guide", "sms"]}, {"item": {"url": "docs/admin/map/", "title": "Map & Canvassing"}, "tags": ["admin", "guide", "map"]}, {"item": {"url": "docs/admin/map/areas/", "title": "Areas"}, "tags": ["admin", "canvassing", "guide", "map"]}, {"item": {"url": "docs/admin/map/canvassing/", "title": "Canvassing"}, "tags": ["admin", "canvassing", "guide", "map"]}, {"item": {"url": "docs/admin/map/data-quality/", "title": "Data Quality"}, "tags": ["admin", "analytics", "guide", "map"]}, {"item": {"url": "docs/admin/map/locations/", "title": "Locations"}, "tags": ["admin", "guide", "locations", "map"]}, {"item": {"url": "docs/admin/map/settings/", "title": "Map Settings"}, "tags": ["admin", "configuration", "guide", "map"]}, {"item": {"url": "docs/admin/map/shifts/", "title": "Shifts"}, "tags": ["admin", "guide", "map", "shifts"]}, {"item": {"url": "docs/admin/media/", "title": "Media"}, "tags": ["admin", "guide", "media"]}, {"item": {"url": "docs/admin/media/ads/", "title": "Gallery Ads"}, "tags": ["admin", "guide", "media"]}, {"item": {"url": "docs/admin/media/analytics/", "title": "Analytics"}, "tags": ["admin", "analytics", "guide", "media"]}, {"item": {"url": "docs/admin/media/curated/", "title": "Curated Gallery"}, "tags": ["admin", "gallery", "guide", "media"]}, {"item": {"url": "docs/admin/media/library/", "title": "Library"}, "tags": ["admin", "guide", "media", "videos"]}, {"item": {"url": "docs/admin/media/moderation/", "title": "Moderation"}, "tags": ["admin", "guide", "media", "moderation"]}, {"item": {"url": "docs/admin/payments/", "title": "Payments"}, "tags": ["admin", "guide", "payments"]}, {"item": {"url": "docs/admin/payments/donations/", "title": "Donations"}, "tags": ["admin", "guide", "payments"]}, {"item": {"url": "docs/admin/payments/plans/", "title": "Plans"}, "tags": ["admin", "guide", "payments"]}, {"item": {"url": "docs/admin/payments/products/", "title": "Products"}, "tags": ["admin", "guide", "payments"]}, {"item": {"url": "docs/admin/payments/settings/", "title": "Settings"}, "tags": ["admin", "configuration", "guide", "payments"]}, {"item": {"url": "docs/admin/services/", "title": "Services"}, "tags": ["admin", "guide", "services"]}, {"item": {"url": "docs/admin/services/crowdsec/", "title": "CrowdSec & Security"}, "tags": ["admin", "guide", "security", "services"]}, {"item": {"url": "docs/admin/services/integrations/", "title": "Integrations"}, "tags": ["admin", "guide", "integrations", "services"]}, {"item": {"url": "docs/admin/services/monitoring/", "title": "Monitoring"}, "tags": ["admin", "guide", "monitoring", "services"]}, {"item": {"url": "docs/admin/services/tunnel/", "title": "Tunnel"}, "tags": ["admin", "guide", "networking", "services"]}, {"item": {"url": "docs/admin/services/user-provisioning/", "title": "User Provisioning"}, "tags": ["admin", "guide", "services"]}, {"item": {"url": "docs/admin/web/", "title": "Web Content"}, "tags": ["admin", "content", "guide"]}, {"item": {"url": "docs/admin/web/documentation/", "title": "Documentation"}, "tags": ["admin", "content", "guide"]}, {"item": {"url": "docs/admin/web/homepage/", "title": "Homepage"}, "tags": ["admin", "content", "guide"]}, {"item": {"url": "docs/admin/web/landing-pages/", "title": "Landing Pages"}, "tags": ["admin", "content", "guide", "landing-pages"]}, {"item": {"url": "docs/admin/web/navigation/", "title": "Navigation"}, "tags": ["admin", "content", "guide"]}, {"item": {"url": "docs/api/", "title": "API Reference"}, "tags": ["API", "developer", "reference"]}, {"item": {"url": "docs/architecture/", "title": "Architecture"}, "tags": ["architecture", "developer", "reference"]}, {"item": {"url": "docs/deployment/", "title": "Deployment"}, "tags": ["deployment", "docker", "guide", "operator"]}, {"item": {"url": "docs/getting-started/", "title": "Getting Started"}, "tags": ["getting-started", "guide", "operator", "planning"]}, {"item": {"url": "docs/getting-started/control-panel/", "title": "Control Panel (CCP)"}, "tags": ["guide", "multi-tenant", "operator"]}, {"item": {"url": "docs/getting-started/environment-variables/", "title": "Environment Variables"}, "tags": ["configuration", "getting-started", "operator", "reference"]}, {"item": {"url": "docs/getting-started/features/", "title": "Features at a Glance"}, "tags": ["getting-started", "reference"]}, {"item": {"url": "docs/getting-started/first-steps/", "title": "First Steps"}, "tags": ["admin", "getting-started", "tutorial"]}, {"item": {"url": "docs/getting-started/installation/", "title": "Installation"}, "tags": ["docker", "getting-started", "guide", "operator"]}, {"item": {"url": "docs/getting-started/prerequisites/", "title": "Prerequisites"}, "tags": ["getting-started", "guide", "operator", "planning"]}, {"item": {"url": "docs/getting-started/services/", "title": "Services Overview"}, "tags": ["docker", "getting-started", "operator", "reference"]}, {"item": {"url": "docs/getting-started/upgrades/", "title": "Updates & Upgrades"}, "tags": ["guide", "operator", "upgrades"]}, {"item": {"url": "docs/services/", "title": "Services"}, "tags": ["docker", "operator", "reference", "services"]}, {"item": {"url": "docs/troubleshooting/", "title": "Troubleshooting"}, "tags": ["operator", "troubleshooting"]}, {"item": {"url": "docs/user-guide/", "title": "User Guide"}, "tags": ["guide", "user"]}, {"item": {"url": "docs/user-guide/campaigns/", "title": "Campaigns"}, "tags": ["campaigns", "guide", "influence", "user"]}, {"item": {"url": "docs/user-guide/donations/", "title": "Donations"}, "tags": ["guide", "payments", "user"]}, {"item": {"url": "docs/user-guide/events/", "title": "Events"}, "tags": ["events", "guide", "user"]}, {"item": {"url": "docs/user-guide/gallery/", "title": "Gallery"}, "tags": ["gallery", "guide", "media", "user"]}, {"item": {"url": "docs/user-guide/map/", "title": "Map"}, "tags": ["guide", "map", "user"]}, {"item": {"url": "docs/user-guide/profile/", "title": "Your Profile"}, "tags": ["CRM", "guide", "user"]}, {"item": {"url": "docs/user-guide/shifts/", "title": "Shifts"}, "tags": ["guide", "shifts", "user"]}, {"item": {"url": "docs/user-guide/shop/", "title": "Shop & Pricing"}, "tags": ["guide", "payments", "user"]}, {"item": {"url": "docs/volunteer/", "title": "Volunteer Guide"}, "tags": ["guide", "volunteer"]}, {"item": {"url": "docs/volunteer/achievements/", "title": "Achievements"}, "tags": ["guide", "social", "volunteer"]}, {"item": {"url": "docs/volunteer/canvassing/", "title": "Canvassing"}, "tags": ["canvassing", "guide", "map", "volunteer"]}, {"item": {"url": "docs/volunteer/shifts/", "title": "Shifts"}, "tags": ["guide", "shifts", "volunteer"]}, {"item": {"url": "docs/volunteer/social/", "title": "Social"}, "tags": ["guide", "social", "volunteer"]}]} \ No newline at end of file +{"mappings": [{"item": {"url": "blog/2026/04/16/a-smoother-fresh-install-v298-and-v299/", "title": "A smoother fresh install: v2.9.8 and v2.9.9"}, "tags": ["ccp", "install", "operator-experience", "v2.9.8", "v2.9.9"]}, {"item": {"url": "blog/2026/03/22/introducing-changemaker-lite-v2/", "title": "Introducing Changemaker Lite v2"}, "tags": ["FOSS", "release", "self-hosted", "v2"]}, {"item": {"url": "docs/", "title": "Documentation"}, "tags": ["getting-started", "guide"]}, {"item": {"url": "docs/phil/", "title": "Philosophy"}, "tags": ["FOSS", "concept", "philosophy"]}, {"item": {"url": "docs/admin/", "title": "Admin Guide"}, "tags": ["admin", "guide"]}, {"item": {"url": "docs/admin/dashboard/", "title": "Dashboard"}, "tags": ["admin", "guide"]}, {"item": {"url": "docs/admin/people-access/", "title": "People & Access"}, "tags": ["CRM", "admin", "guide"]}, {"item": {"url": "docs/admin/settings/", "title": "Settings"}, "tags": ["admin", "configuration", "guide"]}, {"item": {"url": "docs/admin/advocacy/", "title": "Advocacy"}, "tags": ["admin", "guide", "influence"]}, {"item": {"url": "docs/admin/advocacy/campaigns/", "title": "Campaigns"}, "tags": ["admin", "campaigns", "guide", "influence"]}, {"item": {"url": "docs/admin/advocacy/email-queue/", "title": "Email Queue"}, "tags": ["admin", "email", "guide", "influence"]}, {"item": {"url": "docs/admin/advocacy/representatives/", "title": "Representatives"}, "tags": ["admin", "guide", "influence"]}, {"item": {"url": "docs/admin/advocacy/responses/", "title": "Responses"}, "tags": ["admin", "guide", "influence", "moderation"]}, {"item": {"url": "docs/admin/broadcast/", "title": "Broadcast"}, "tags": ["admin", "broadcast", "guide"]}, {"item": {"url": "docs/admin/broadcast/email-templates/", "title": "Email Templates"}, "tags": ["admin", "broadcast", "email", "guide"]}, {"item": {"url": "docs/admin/broadcast/newsletter/", "title": "Newsletter"}, "tags": ["admin", "broadcast", "email", "guide"]}, {"item": {"url": "docs/admin/broadcast/sms/", "title": "SMS"}, "tags": ["admin", "broadcast", "guide", "sms"]}, {"item": {"url": "docs/admin/map/", "title": "Map & Canvassing"}, "tags": ["admin", "guide", "map"]}, {"item": {"url": "docs/admin/map/areas/", "title": "Areas"}, "tags": ["admin", "canvassing", "guide", "map"]}, {"item": {"url": "docs/admin/map/canvassing/", "title": "Canvassing"}, "tags": ["admin", "canvassing", "guide", "map"]}, {"item": {"url": "docs/admin/map/data-quality/", "title": "Data Quality"}, "tags": ["admin", "analytics", "guide", "map"]}, {"item": {"url": "docs/admin/map/locations/", "title": "Locations"}, "tags": ["admin", "guide", "locations", "map"]}, {"item": {"url": "docs/admin/map/settings/", "title": "Map Settings"}, "tags": ["admin", "configuration", "guide", "map"]}, {"item": {"url": "docs/admin/map/shifts/", "title": "Shifts"}, "tags": ["admin", "guide", "map", "shifts"]}, {"item": {"url": "docs/admin/media/", "title": "Media"}, "tags": ["admin", "guide", "media"]}, {"item": {"url": "docs/admin/media/ads/", "title": "Gallery Ads"}, "tags": ["admin", "guide", "media"]}, {"item": {"url": "docs/admin/media/analytics/", "title": "Analytics"}, "tags": ["admin", "analytics", "guide", "media"]}, {"item": {"url": "docs/admin/media/curated/", "title": "Curated Gallery"}, "tags": ["admin", "gallery", "guide", "media"]}, {"item": {"url": "docs/admin/media/library/", "title": "Library"}, "tags": ["admin", "guide", "media", "videos"]}, {"item": {"url": "docs/admin/media/moderation/", "title": "Moderation"}, "tags": ["admin", "guide", "media", "moderation"]}, {"item": {"url": "docs/admin/payments/", "title": "Payments"}, "tags": ["admin", "guide", "payments"]}, {"item": {"url": "docs/admin/payments/donations/", "title": "Donations"}, "tags": ["admin", "guide", "payments"]}, {"item": {"url": "docs/admin/payments/plans/", "title": "Plans"}, "tags": ["admin", "guide", "payments"]}, {"item": {"url": "docs/admin/payments/products/", "title": "Products"}, "tags": ["admin", "guide", "payments"]}, {"item": {"url": "docs/admin/payments/settings/", "title": "Settings"}, "tags": ["admin", "configuration", "guide", "payments"]}, {"item": {"url": "docs/admin/services/", "title": "Services"}, "tags": ["admin", "guide", "services"]}, {"item": {"url": "docs/admin/services/crowdsec/", "title": "CrowdSec & Security"}, "tags": ["admin", "guide", "security", "services"]}, {"item": {"url": "docs/admin/services/integrations/", "title": "Integrations"}, "tags": ["admin", "guide", "integrations", "services"]}, {"item": {"url": "docs/admin/services/monitoring/", "title": "Monitoring"}, "tags": ["admin", "guide", "monitoring", "services"]}, {"item": {"url": "docs/admin/services/tunnel/", "title": "Tunnel"}, "tags": ["admin", "guide", "networking", "services"]}, {"item": {"url": "docs/admin/services/user-provisioning/", "title": "User Provisioning"}, "tags": ["admin", "guide", "services"]}, {"item": {"url": "docs/admin/web/", "title": "Web Content"}, "tags": ["admin", "content", "guide"]}, {"item": {"url": "docs/admin/web/documentation/", "title": "Documentation"}, "tags": ["admin", "content", "guide"]}, {"item": {"url": "docs/admin/web/homepage/", "title": "Homepage"}, "tags": ["admin", "content", "guide"]}, {"item": {"url": "docs/admin/web/landing-pages/", "title": "Landing Pages"}, "tags": ["admin", "content", "guide", "landing-pages"]}, {"item": {"url": "docs/admin/web/navigation/", "title": "Navigation"}, "tags": ["admin", "content", "guide"]}, {"item": {"url": "docs/api/", "title": "API Reference"}, "tags": ["API", "developer", "reference"]}, {"item": {"url": "docs/architecture/", "title": "Architecture"}, "tags": ["architecture", "developer", "reference"]}, {"item": {"url": "docs/deployment/", "title": "Deployment"}, "tags": ["deployment", "docker", "guide", "operator"]}, {"item": {"url": "docs/getting-started/", "title": "Getting Started"}, "tags": ["getting-started", "guide", "operator", "planning"]}, {"item": {"url": "docs/getting-started/control-panel/", "title": "Control Panel (CCP)"}, "tags": ["guide", "multi-tenant", "operator"]}, {"item": {"url": "docs/getting-started/environment-variables/", "title": "Environment Variables"}, "tags": ["configuration", "getting-started", "operator", "reference"]}, {"item": {"url": "docs/getting-started/features/", "title": "Features at a Glance"}, "tags": ["getting-started", "reference"]}, {"item": {"url": "docs/getting-started/first-steps/", "title": "First Steps"}, "tags": ["admin", "getting-started", "tutorial"]}, {"item": {"url": "docs/getting-started/installation/", "title": "Installation"}, "tags": ["docker", "getting-started", "guide", "operator"]}, {"item": {"url": "docs/getting-started/prerequisites/", "title": "Prerequisites"}, "tags": ["getting-started", "guide", "operator", "planning"]}, {"item": {"url": "docs/getting-started/services/", "title": "Services Overview"}, "tags": ["docker", "getting-started", "operator", "reference"]}, {"item": {"url": "docs/getting-started/upgrades/", "title": "Updates & Upgrades"}, "tags": ["guide", "operator", "upgrades"]}, {"item": {"url": "docs/services/", "title": "Services"}, "tags": ["docker", "operator", "reference", "services"]}, {"item": {"url": "docs/troubleshooting/", "title": "Troubleshooting"}, "tags": ["operator", "troubleshooting"]}, {"item": {"url": "docs/user-guide/", "title": "User Guide"}, "tags": ["guide", "user"]}, {"item": {"url": "docs/user-guide/campaigns/", "title": "Campaigns"}, "tags": ["campaigns", "guide", "influence", "user"]}, {"item": {"url": "docs/user-guide/donations/", "title": "Donations"}, "tags": ["guide", "payments", "user"]}, {"item": {"url": "docs/user-guide/events/", "title": "Events"}, "tags": ["events", "guide", "user"]}, {"item": {"url": "docs/user-guide/gallery/", "title": "Gallery"}, "tags": ["gallery", "guide", "media", "user"]}, {"item": {"url": "docs/user-guide/map/", "title": "Map"}, "tags": ["guide", "map", "user"]}, {"item": {"url": "docs/user-guide/profile/", "title": "Your Profile"}, "tags": ["CRM", "guide", "user"]}, {"item": {"url": "docs/user-guide/shifts/", "title": "Shifts"}, "tags": ["guide", "shifts", "user"]}, {"item": {"url": "docs/user-guide/shop/", "title": "Shop & Pricing"}, "tags": ["guide", "payments", "user"]}, {"item": {"url": "docs/volunteer/", "title": "Volunteer Guide"}, "tags": ["guide", "volunteer"]}, {"item": {"url": "docs/volunteer/achievements/", "title": "Achievements"}, "tags": ["guide", "social", "volunteer"]}, {"item": {"url": "docs/volunteer/canvassing/", "title": "Canvassing"}, "tags": ["canvassing", "guide", "map", "volunteer"]}, {"item": {"url": "docs/volunteer/shifts/", "title": "Shifts"}, "tags": ["guide", "shifts", "volunteer"]}, {"item": {"url": "docs/volunteer/social/", "title": "Social"}, "tags": ["guide", "social", "volunteer"]}]} \ No newline at end of file diff --git a/mkdocs/site/test-page/index.html b/mkdocs/site/test-page/index.html index 7602190b..2d0d7f97 100644 --- a/mkdocs/site/test-page/index.html +++ b/mkdocs/site/test-page/index.html @@ -122,38 +122,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -204,38 +178,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login diff --git a/mkdocs/site/test/index.html b/mkdocs/site/test/index.html index f5b680d0..bb652458 100644 --- a/mkdocs/site/test/index.html +++ b/mkdocs/site/test/index.html @@ -127,38 +127,12 @@
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate @@ -209,38 +183,12 @@ Docs Navigation
    - homeHome + homeHome sendCampaigns - placeMap -
    - - apps - Scheduling - expand_more - -
    - scheduleShifts - eventCalendar - bar_chartPolls -
    -
    - play_circleGallery -
    - - account_balance_wallet - Commerce - expand_more - -
    - attach_moneyPricing - shopping_bagShop - favorite_borderDonate -
    -
    - emoji_eventsWall of Fame - descriptionPages - languageWebsite - menu_bookDocs + eventEvents + attach_moneyPricing + shopping_bagShop + favorite_borderDonate
    login