From 0661f5dd3feb096fa257359bdaf8dd6e4a53c55b Mon Sep 17 00:00:00 2001
From: lubiana <lubiana@hannover.ccc.de>
Date: Sat, 22 Jun 2024 22:20:51 +0200
Subject: [PATCH 1/4] more-deployment

---
 .forgejo/workflows/release.yml       |   7 +++++--
 deploy/prepare-deploy.sh             |  10 +---------
 public/static/img/slice-of-pizza.png | Bin 0 -> 22501 bytes
 templates/base.html.twig             |   2 +-
 4 files changed, 7 insertions(+), 12 deletions(-)
 create mode 100644 public/static/img/slice-of-pizza.png

diff --git a/.forgejo/workflows/release.yml b/.forgejo/workflows/release.yml
index 9602add..a1c6c78 100644
--- a/.forgejo/workflows/release.yml
+++ b/.forgejo/workflows/release.yml
@@ -16,5 +16,8 @@ jobs:
           git clone --branch $GITHUB_REF_NAME https://${TOKEN}@${GIT_SERVER}/${REPO}.git .
           git fetch
           git checkout ${{ github.head_ref }}
-      - name: list
-        run: ls
+      - name: prepare deploy
+        run: sh ./deploy/prepare-deploy.sh
+
+        
+
diff --git a/deploy/prepare-deploy.sh b/deploy/prepare-deploy.sh
index c0ad1ed..53f4e46 100644
--- a/deploy/prepare-deploy.sh
+++ b/deploy/prepare-deploy.sh
@@ -17,14 +17,6 @@ done
 
 rm ./bin/phpunit
 APP_ENV=prod composer install --no-dev -a
-mkdir -p ~/.ssh/
-# Print the SSH key, replacing newline characters with actual new lines
-echo "$SSH_PRIVATE_KEY" | tr -d '\r' > ~/.ssh/id_rsa
-# Set appropriate permissions for the SSH key
-chmod 600 ~/.ssh/id_rsa
-# Add the remote host's key to the known_hosts file to avoid authenticity confirmation
-ssh-keyscan -H $HOST >> ~/.ssh/known_hosts
-# SCP files to the remote host
-rsync -avz --delete public/ ${USERNAME}@${HOST}:${TARGETDIR}
+
 
 
diff --git a/public/static/img/slice-of-pizza.png b/public/static/img/slice-of-pizza.png
new file mode 100644
index 0000000000000000000000000000000000000000..300e7e73f58771df77ac33d9f349463cd4b095f7
GIT binary patch
literal 22501
zcmX`T1zgn6^FMxcNq2Wkqk<>hNOyOLfV2nF2$B*WDcvoKbR6A{fb`KNaCFD-#ryOB
ze|;z@w>vvCJM)~`*;yks)D&>BsjxvH5U!G<tQH7_4Ez-tgozG(JM*5p0luMnNGs`J
z0>At)Z6bhwW4S6CdVoN9-A{jzlDP4xfge(O${BcSyV!X`EZuEE5D0|V;e(@xwWX^q
zuZz2V`r#WY5QqV!BrB!kow2{<lVM_;i8vlZh!&T98p$G%MrJ`p&1V`{Wk4mlG@Npy
z%y6Sgar>daJ$fFipNOhqgof3?|6#r4^KA_CP7HQzJ`;nIhGL#OD>CEmp`>&_?95De
z`|gmQv@X6drR>wF=(%s38I0(4rnq_Yq!(;kbj*jYgJONDs<}v&i!9u@OT_6bhdTP-
z!wko1kq_E7g1jHdll0__Gy6$&=Lw87jgSaVN@~Qf(R3FG+%X<yB#Yi0xT583reS%4
z3a<8T+(E*xhx;z+?tE`GDG7`3f4y&uh{0^iHuz#?Lov%u6jw56v2rF!GKAUfuQ;yH
zTfN<ry|=)Vv;NRaY2B;phr!S0czF0-n1}b@u!z-{&%0&AAiLM8rJc`&vx50iY}oiw
zQa41aU3_KdD)W5X59H_a^L$Z1=I?jx(qS~em=P0bT-q$Ui;ZsncyWv8tTJzi#BY}v
z;P3O#t<YdQ3Y9%#M=6K>-M$*ZgpZME!WgIsC3m|7R}w>#4vkL17N>h*>eqCs6DfNf
zXJMtbd)ES)ms_ePuJtnmB!2Xu>6E&WZ~Wqn*ddK2SsY~^ny<)<+4C|$!-ayLA0}<V
zM<Qj$IvWC^eX_OTv(D1_hlPLf#kasY0x)1YuJva1fOc*TXc0LcP0gU-$Yfmmm*thb
zE@~ZUiOI9?m*?k?GK)NJLthI2BKA&c$5V}dAzKJ;{-t-yGIsBfmLiLaCg-Xquw~ql
z_MT@EwU*x&2>oESEAL4>D5G|c4^79Qt6soiJE#Dq>fCISj+~lokcqnSfwC}~6jwd7
zUNkSIe&@({>U3-4z-Oq4WA@K+ab4+<c%Wg1bx{gY>48-8DqEfQHW(=lBcO668O%o}
zD`@S{;d3#fF_^Q@Jh|_XlFsw)EE(QkA8<=F`nN+wtg}Y3gOozSO_-mp{&}F8aR`iQ
zCy;}p3k0u6Q){AiW*L4}boI1F>IOjhHUfRk{$`=TKBx8CqP2Vf+WXAoAxxgJE)0{@
zO-8o2?7A#Eb|UsPeO`^1;6?SXim$0Iuo$6HBmn5{#bx&Z-Lyx>o@i8t`lgSM_3&@8
ze3A`e*kwx`zSAY`piLYpNLv@e<C4zVZzTnmdMybKPJ?++Lfxq~8;vb%OMbv|8Xu8%
znJ#Dt3(`qJLX73&vw{kl%^=HC2J)b+ulLP@MKd=+zB&e9`<u4hz4iONd@pbDY$tn`
zOGZ*FOkVmR{b-qDBriD;v<OD1^inXbFcRwZ?CkN6E_ppf`M1Jk(rkVsTg2|f@^;?2
z4jJy*aP~(B;gmQzS;r{7IY2Y~I+&@s6L6eYetCJNX7jBFJILqT$5lNtW3wG$Z?v7a
zL8rkl;f*l@x)YU0IP8mR2@8BzHjjAl;23i~5S58-IJmK2)U0SQ8`;CpUa)sct{$_#
zN1#3_y))Z<vDPIUAz1{g012non$|qSt>-PxI9eKVn#>YFkB|&tCxVmpEzZ2+|2df~
zJSy(HJ|=R|xg@se9;<xhKAwW|HmC(*(woZi2g#Ki?H)_&XdUOra@zoeN!wo!B>3*h
zaKldMnNQxY*v{sGdsDGAR*@plXACy_G;;&bdrTAk?FEVL(HNKmYMllLZ1eO*BF!uN
zxqp`XS*xh-1hv!tYBC<wyvvW45IAZ;$lCc;fC^^IhUUo}+Owkvv*%m=tYa_;`w=>4
zdTUq7h1}?Y%sGHUCw>vjM=egsX@4l#WMw+6Eo-3?S%$D#$M{5D1l<|vxNz=MHsr4l
zCHk=oD%hbhto{cbbdhGbCsgD5AvHInHZcPEKNTkEv2R*S!#V(O);y!_e*+~ALM?k!
z_V<Ea?X2>n1e^kjbc@=^`f+g)l7q0nh_DniKvIlohAVhXO+E;cpKdGPeQKV3)oYWO
z6dd{!d1WH--Ua&rI&ZEiy8AC1=>R4~X{|zwi~Y&>`QjS`r`w1Bxkrw?6<W^d3?u=r
zpK<1{125Qd3|9JYEb_j>CK)Mgp`{s7{4)6GMFnU|%Jv1Uj=X#)UCInY<ur4E!kWk_
zoC6*i+2*wx)!_x}vPmKhqWYg-lfVpR;b_l~GW#g3C*{L1g3>!h?ryHRFV1g9p{#nK
zvi(@z@13i4`q4+cD}}R{vlP~4jOYP{T=3_wUfeJAn1XNpF_ghzQQd(-Tb^x^?d8Hj
zb1Ud|j6hNH7ukjvWY;rwxc-k`10%99l)?nkAgrq=Jn7`{F2{DkAiEj0juF7!(UfgF
znDX}+sP)Ic!Gp5tfqF{>yWuyl34OpxnHL$`ioF!pTzYvog<5~wFZm9wW+ABszmfTs
z%d0Z{u-&c$IZo6PDPgA+)-j@a{!ELgeup7(mv97FMavLL1pA<~lInwhq{j)bt{Fb+
zlh$G=aSV$GQ-)Oi;We7U_SML)6y<!*>7?N&cnMca4D7zK09$rzb<sP2*G2A5!niLW
zw|G!gJy6z`gV6OO)w_!)eW^_Mv>%lDHTtMO;#2wbbbR3hK|DvChH&v)(N@LUas0Lg
zdMUJD83$8GuJQ4-1{?{%E%z!daoU%L7S!V=+AtodjN{-G)>MXsN$FPPORf`r7=i0x
zl~!RBBm*zQTP>`!)|aJY6xPF*6?&UO3op+f6=ujO-bWzkm^SDZUPvSuq@ZlyKB<uH
zxJh?&XtQYLEji?1VH>Q%W77m$oOtn@hlVcTcLa=HWCTJ7j4Sn!T>VF+kZts7X&k_6
z9c?z8_9{LXu^*u=3W<+jom(BB<hGJ}e4Ekyao~kNAhtGc8W*UX&&AiQ;wBL7nwtRu
zjuYrjRWafj#5I0({>U(LiYllHI&5k=FH~D9%&B5we$0*$=w(?(m(nBoc<B%R`VXt%
z#-`ET@ZS*XHASZn>^HDc4hC^0JH?-KgZcOxgBjtL^4v*i7Ms;GDU2q}{f++(5x_Xm
zSdAXhJp2;-@8a;1cFRCZ8$@C=O?nW>B|wjSaQ3tbF`^+$Tz*+1SHr+AA<k*H6p741
zS)aaSmrITv|2KfLP&}-vw40mv=4$07+!8No7Wt^A$5$LVWAjN83L!OSCO>8l1$r>z
zCYJ}+^@h<6Z3Tc{*Mf6CxlQcQ?W-pZ_v#E_cK+>j_f#c{lC;7O0`T^0%|j9cJ^KHQ
zxOb|bpUXT(uBvrs{vi`4&5{SIFqyd#By6Ok-h0(c@rU12GIWgmw2@T&g8Ik^q{o|G
zV-TSa;=4%e0;D*87l)k<b^lYGY}Qs@WrlIC1qwLts1sU?k1IKmH>U&`NDZAU<;vcp
z-ns32inO)j2Bzw;wg-#TMUH3U1%u$=oUFc=fTL)w5$ZPDEfm419UK2jnqs#vnL>*k
z1a5N5?&xz$>H36$F_S7`7!i%{ccUH<Snq1v0#tF@)%nDJ)bh|=VUUW0RDNv!dRo!x
zTW#4*FpmBi+;F<eXoT+q70s}<<=#cI3f=DS8U;W|1w~Wm;f3dM;kLh@h3^ZP#WYU)
z-q1o;@t_0>xz4R4HK01&57`X#Ei3b|DwQ)F-AceN<tWG&nq;pT;>&0Lz5u8U3vu2x
z%c>&2_gjC~<pe?ea=bqBCL%1xPM_wV=f2s{dGs6bLTRHPGtYMYpL1jckf#bwRM|f9
zDIiMF<;dGq_n2aRAN_$z!PNh{K%!%J>?gDh*x>ap77Pi~+LnWJ;L~;9Cu6?FnZA+;
z-Z~DzecD<T1Ej0V>7j*Xk>obvAI6~a<k|;PCV0EvsSv>2H!F$_(zjIy#-iWV={%4O
z{0$f6_O2+CdM%%p-k4pF$4NF>xLo-q?xupaa=3X=+_&@IV!k0Cz!?AqUxtO<&24)f
zh`QFOQ=QWUft&2=O84Ua#~Re8I8h<$(X&FG$_uF<A3s1oOq)F!K<pR+uOoecQU9R{
zaZ8<gkRG3-?`Ldyxf&3%1bU}Bg0&2@J&xJY=_D5E={!&Y&l%93J|3GM`%fQK-xF~f
zE))a3hmltzen_WjE&*wVbxf&fLVcx)xWn=4!%hjB#dOlanC2?tJ#_GCy%%gu$L#pG
z7z($><;nH_^c1HjA-$<Kn9@>NCD+)N52f@zSfLEAvV|17{wM2Y(mJu($6jlgYl;HB
z1==ys0kelqt3Mie7pOmMCPCF$qaG_R03+fha7R<%<qJhqNF@%Dbj>9Q4Z)$6!V4KE
zL?zhR7=SnbJh=v~g|0+MOivRhF~(Zu3CeD!ij>`bYKU_r(dL!X(HiVY)zajQlTD0L
z)~VC7R1p)Izz2<SfD~we&G1<u*KxjrrydiqZ={Dxzm?=Q7i|m&R)cI{Yh9nO^m(9#
z<CIkkLH6ENBuQ(;aFXLc1h5q8#6(6ZyNMKukZ97xQc^}alXRvYM`LX?zO6d+-HF7f
zxiDHi{Gs$`E#d0GE812i>dpOz**m=cS6J6uL4I!~bFWtrI6tt{o$cYo@FBlHJIO4Z
z<VkC;-TfLWyB3@rxC$f~*79Ghqq>sfsI9Yl2zQNxxwEd?Epa5@R8%RvD>Z&@O~f{g
zGvbV-TFIyie07d3nu(W={tazbur$LwW#oaz-ic}&Qqo0a-NE}MyIliKuJ1KsdS6Ca
zP|cWgm~iH}7KnoKQl?&f6QJ9`jxEwt@Gw@)t#$tvxK{9ZHsH=?8lv$olV<Yu^_+`K
z*<gQ;;2RA)Zw9-9w&5em?)G41O^tu(Yzt%+Fsn(cAEHN&A}UA?jy?-2D{D=Cf<^M3
z8RLSY1-4p}rv>pdN&r9mEbs`~&?3Fu(ie{v64BPSJCfZN=4rVogfjlN=$8u5@Qnoc
zDf1>AgSyB;g!jxkd;D>;seA6h<BN3TuQ>~Rv=oOnf|8YzZqIsYqCKSlCC1Nij``gJ
zluG!lj@q?*asth}`z<y&O9hB?+$V_J#D*!-o>w|jSobnw=6Wf|)^Um&6{FXv4opmK
z5&SCuq-{D%`;aW%SaOEonP{sTZifk?_`ZFHKaVO4_0EK}#ci>^;y>F*W_aH7rCBAU
zzvI=)MJZ#Yw#<Cd7vcKw*~aB7lC3b#zRfiEMeTaxLAk;}^T=R-LV(B_qH0*+=cNvm
z;ksnJj^YO4Cy&&yet#e&d+upo8Y7istEG6G_?i9IA<6e*ZQse|8{aUFw%ul$AWjZt
zkb9}1)_8rf3jC1Bzxiz)=-cr@W4jQJB=3gjJ`%gO0#nlMkApul^TnH~g4{09Q<b97
zMs{T>+XBg?&!?D!X9!+53;oCr@pN^IJ%v#1)p1b}uXxYsV^OjRLyam{nlN*L^QWu<
zA$Qc=`*fkNGI+7>wJO+YURK1Qp4BT0Mh<ri{X&}AvhX519eiz2JeqiQ>OS^qXTh%M
zy!}S1u$cP7R6E-qrALGx)OvpZ%^y2`d8|Cavjg7hK!t?+W`G0kxi`q#VodBEjA)V*
zK32>iJLGPxgFn)2^fV_<>F=TEF_h&D8<fP)hU9D?N11LR$+K<w{Tgjcg8amc2d;`p
zu1wB#D`Ax7MS6XShCXZ~6)l!xzl1Ucie7iN@ZX0b|54`vB^je*d`uGg`MZDlfYlh<
z9`p4bH_ay;$=bOsP^$F+DGk(q3(stGo1<n{8r(aj4I2=!{t!&*!5wDtlh5k$g2}g@
zT=ZwT%_+w41m_qXl19O_Iu+Ej5-L+fn{B^$>@#1qQNd0HW#BnL;yD<hY5SR0QnA0F
zX#-!EyAU@kc-PGQ-9CDCjvHxS<Qo!~P}0KFjx@KQ5uXUx&*{Ph90)=?&qUFR#zaM4
zyXFjMIkR4fiFXEzy-XVijbnt9fh^nZ*Wa1&5)=&&3pjrWcIYGDH-iaK9(6N^du0Dn
zabU4STolV=I7#JwnZ_T>List?`;q!>u4u`#gR#;#P#5k)N~mdLi1kdQ>hSAdks^8*
z&V0Y@|6w-Qe<et&cqSZ=0;rO}>sDu<UTS7DomOazBvrgB@}e}?OWc|&-lMZ-{Zs`k
zJ{D5))gR1dYcW<wIH-qS{ev2h6C^P2ydC0%{WJzgCEeI!&rQ@grjO#3h5U^!y3WGx
zf~nP|HS_+wp!5J6p<UdLjO)&8&{57gY~Q<ADKHrqL2VtYipn<9FW?{_3(bbx*)n`a
ztw#bVCq&b`?%lBn>K<=ATWLfqnpJ{R2qBGepo}@%!efcR^ptjE)^cmJyySnlV)Nl$
zmWK~NjF#(YQ*|$8?e0(kWeJ@Y4CYJl{)EB=iazFjt9Bg11k=-QwSVxf;kUhzsQVRo
z!}^Mtwh0f^p4raog=f>7J5I#!VU}fhYW(i~uLNpq6@OIG)rM<TnpbU+3AquOaU^qd
z;O_At9#*Jl$d8tdt-<dSV_cxJ6CA=?<aiA!j$x79_F?GvRN*DP4WZsE-FJAYw;6U@
zSu?}IVyqv<1c!fAGABmAd>$|R%XOQ$El>~1HTO15erAnG&f+A7Mo9g=)lCLlNY~c|
zAYQ5?LyNWnN9r4}ulu$Ai|I*Z_ytqlfQi*R0t^YiH3>Z5`-b;E3y2`0e`EtRdawbv
z#XB~;tSKj%yWUhCD$1DI3Gnd6NEb=?J}2^6K<(N51FQO7pJf#*+I<mIc9}Wbsi(8H
z$FO)|WSR#~X+}@gXGucOjg=~yq`0?2@fe&mceRwwVU{Yrq(;bFV)aQr_BGWm_6fAD
zUHi+gt@4rSF#Z1RKKjoh6JS0X>HPptW~cArNLvDyMgvh6;yK`)^=AKar5Qnwv4nIS
z`?>9qj3e&EF?7W)Xjo_QdA#9@-RE?S*`RQNIVOHvy)4e(C(rP^_jhQmd=dPGgw&)Z
z&|HGX-CcT-we!DaLkj^xC-d|6@0|eWi!~k}9`->C;qOT4a@%B~zr;M2ArL#8O7frH
zWE7!X^k^T^4}k`ecrsZJ&%UeJU)Hnn9pk@+kR7;n&fhFfI^M!>&+uuEvEh-o-W9)q
z)2geK?XRr$tyh30jzTi>qv*rl;U)%hzcbIoGYWktvl+;sNF8d=ErroQ{4cSCLfd1F
zOZ~+Nu;Chk-4}<0B|!&T23~S&JJ9feqmq;iAj5e?J=3innlf-l>)S^g8P0;s{@`r1
zUYy6+^bLEbY8xS;wCIHSI`POPUJ3RGIQ8;yaWD9W&(^s`BuF)jY2fDFOylT1YdJNf
zmzXy<0<vO1Im8dsir(=lDt=!}q2KBsl+U>Qn=l63LMNAyS>X<`jG;$i1TbYcA-{0o
zIFZ?zbs$Fv7wLx4%E28bo%qLHC!WsTbT=4%Z>TGqS`H*M%=DoKl$RS$4?e0aKBr<!
zJc$S`<?=rMU_MToP(Bd@RJ&U|Agv2~@V9-UG|IzVav;Soe-m8z7w?VZ6}`MBD8NVV
zw1wd#eo&2`gaJC13Yd2ctGIq#oM-Oxl2dxOSffdX;egp0ud_$_@C61vpKz~@nw!Yh
zaTX&$QMS=W&VuC7Wqv8}V_yosL=m{`-=yx4F(2Bste1!FTY}CC=y%ZoOB~h8f!4Oi
z(05`aE@YnB2$pHqgLq%uP}=v7&nTdpnuc?~d{Uk9@dceuQDX}>GK`xxzN1{y?GnqM
zla-n_Ofx&Tfy_)QZ43#w!q(LtR<FWFLK`=--8}J0+L&eWZ`HJnJ4%%w_)yb6=wtQT
zB$ZX4P7v0K3-@be^H@Hr+`s^N@75>8t*7iObW>hrD-u-5{NmKtu{)y&5FenZc5!;E
zPP~NQ69^qt_Q#d{&Tz?wIaW<%p;E-TKX1f|jB@+uWkM<2!+Ho{dmMcRhL$S!Kc<J~
z&GI_c9acz@J<$3x{(MgpYhx8lKk3%E5lH+XF(VP~gbikRWD5&bAK>p*iSNwni+1vV
z7X%Z-HAW49lWg<uH+(=mSo^P~@|o)MI^Kc_Vf-+Y-6R+HVbRL4xl`yp2Rzrajo+QQ
zJMKztEhQZz48kSY10k|j5!;7r+6;YRym&Rk9GY$w$=9;8{&_+EbYT58w6dk8@@-;y
z?<wR@k>C`(Gb3#G^)X6!bI#S6bjuLrn@zluhIjqi)|Hx7OleB6zir(I3Y)((2^Dcc
z;$&zYljNqYZT2;RmW%c^x<f`)3L7Zv_qR&=@32HxYwYYY6Jf*>I>|@0*WYsPVNjOn
z8p#KjB%oBu(wq8;YF2+MLE_oZ%VU*TOs6R1O9j5BoA%Tqi2BZOox9<!EmM;flR2{k
z5aPF|^tLkQL*K6IwSXp2H13*o>egS3C5Lw|Bw8dO7yx4b7PL8$=NexyI2IHHe(GSq
zg~VLDsGW_Mr_{H}Oz<IxMF#L>hiIh!{+T9PTw7qL_qZxc9hMNt=FfdIZ43%)(+v^w
z!w~4b`sw1EpfH0!*~Yi~FN;16^A-8Yy$fQ;%4F=L?xqUl@5u!Y%_kvOzZWnwu}EUO
zF&C@DU7ii>0rU3lcWZqX8y;HC&Yym>;j0E>9Bw$lDTI4zf;$hLncp-81a;_CGUuR_
z+=dr&-#pkdnHRoKX@a!0`OEWGy+W=ko%vhA8Jy;ko_e`Bqf@a6dER79@u09*Z|fqj
z$W8JPw`O+@?831e=|}O`!^slQ3M_1;TEp90op-1G@m0^bb-gN#rSyP<9ye3A%1MZn
zcHEH1+NqI4W=1l`b(|W8#Rh$tcQJxxm*r2+u76a`?GrU6>&@e3%Q|rpMK=*QxfM4l
zUURLT+b^EF_Ls@u7x!WIKDTGzcBVNHEK);NHR?E`$3D&~SqZ6%#KrvX`2<S{uwoNh
zvDB(qU0{#^`kJCoi+yU}OO`y$eTB2^PCv^YA5&jEol~5@X9tIewotNOA_$U8=lWjo
zQ#=Cahn4<5g)vR3?2=3GlEFEv886wD4>w`jz*(6oHjy?i=4iI-^Rvspkl3J3GARjS
zGHml77m<%xUX9C!UWTWUOsl@ry9;|>j*_yeAN^wIifj0N?7sZC%4S=B)|E}F_-8SR
z1v<zf>H7W2Ok_1hel~aiPzax^^$K<WWk(!-8%!V7fFSuudo`C(cU+m=gy;PO!PMqk
za36=}4{a|GD&rmILO%H8t|F1!9^(@>HMS=~MH{mEuev_7%0<x7p{b(UB3_`EhATD^
zrTHz*tnOO-D3QPK(7QK>(i-U3m7U7u9{RbBi0yU%0+%-}OUEX+yzZa>EF@!^aB#gP
z@MpC4iy23g9x4dBa1fm@-UgC*^;DOb^oBwNR-rCT+eX_v_}ilgoHGVUAQc9I7zF%w
zeLCC7>gWx!vc_`tw4+I<5}PnINYc&MIUF$)?Q|8I{QC@4@6PJX9P>t#xl>fLs8BzZ
zC7)jncyy+ye>b}_r{azx+M=;sCJaq-vB`arQ#!}G|0w0(9oKnOOzmOc*5o>VX4aFr
z4~`IEv$l#9H72`U+y-N^+?`QYr3F$SX~9K_Sbr>D#`*eV47_}$@9;?i>k$h$zejSx
zF-H%4nh`YWif5|sk+zf{GjE@5n$Hci(XH`FJJcdbdQ+cqzK#^%19$&nZ3aC*G{f<O
zLt?u*WOnUgGQzPZ>S)!~<`DwD+;VLUnQ@-CqsN|+ydV(K5UIw30^?-fndA69Oj{W5
z;PYhF0bP)QUFVI7xZ>hy;{YEhy7?8yi7s5UB|68iIWuOj(hpqsJ5Rt)TDHM#bWwQg
z;FBZIF&d~{>5R~#9fFrV_z!hy9W1v#;jdw~4h|Dwt4*YRwk@#^?p-a&11a`xIdk0@
z!bSbK9y_<BZ?s@bbdAEjF>xZh-wN?r-Lq$ONI;<QX1v)0a5(<4T}1uDQ5)Z}TEr*+
zV*cI&4g8UjS2uWWETwb!`mdWV|IJ_jEjv+y8}9KKS+fVi^Ii}PUuJe*<;diKxfVV+
z5>gO(8su^iaBmb=dwNPGycvJ?fvm2zMoK4TDDOPdKbb?<o~(6!gUuNl9z^VKUz#rX
z%oOc)d|3*YM*-S*i89WzVY^|HHD>~663_HJaHzM!rbGO3yxmg*7BZ~2h>WR*98y;F
zQi*kuefunfC*<-zG>%2r#opZw@pHL3=dB#|R%y@<k`(o)8*9NGhQz-z-bDzOqVJyd
z8Ud0MU!`jZ&jxho*v%TeFg-ms$(Et!eE1!lD`e8H-`BQOulU(=Wv?Z_sXxS56M{gk
zk&@fle)RoJfWWy|Jh?5S5Ns5JtjZ1e9ylzGgEnLbBJGLjXr!fM_ii#I@Z_*$@7D<w
zRheGeeeKJ8LAz$4^#U2hkV3Fa)o8LB4*NYNQ!@cUJ`LTmM4Bd<u|rA9y?;lVh+r3R
z1b2fO9{6(4-~`V#LQWaqM3bnFy$sJ~Y8r+_Oeh{08@AXzaIGN2Mc;D<(0tJ^xL_SD
zC>kPpRis+})nx*m<6btx*N>f&HVu6>nz6onE2AI*`xP3kn9E6~wXoLh*jrh66;~Tm
z59^k}{+@(S9&QMDnG8+w^NGL4LmGk0d8Un%Cw}5Xe)WUw6%jWwr}oDkU6@Ra-g}Ji
z1^JhBD|*1nO0Vqd77FxQCe$93$Ppn4d{{kIg@}zu&!#FZ)Gt-Uc^H1h0{OZ9ZHfwr
z&oB>QG7cyxA|Sqdaim<_*pJO;&5YYNQa5xmE^L)_?zLqv7@zFB%e<Wh)~gLB$X5h`
zb;2R?_{42al-~j*)@YpY)>576pnRC=)c}!mNG_@L?zYXvx12j_%PXT?zc>WTmMh7J
z_|umkjx(*FYng&TCcnH{;~VR3mK^?#u_v*8P_IHS(zsG5y!iin0h-=YTo?DwK7SjY
zdqtaj<t(KDaIF6OFKOOXrB?b4GQ-<CC*7+&1kE%V;^*%`tsbyHJHLkEcgV(2((Q&U
z?9Y_G4^NDras>TpW;ZCJfBGau;o@dgK(CY!1o}Z>id%4)9w^+@b@+lksrBVUkFn*|
z&7gAHSFUBGu2-0w@N2cn71=ti=S3$>!o+BjW=H*IjK=AxyL8k@id@e9Vw_Osd5#!A
zv+?_{z9)fNSW$2iWo~~A2NR+`{lRZMr7gIbk;ov)QcsllGAs%OYvPe_LuS;0d2k$N
z^Xk7VlvW)6<{V2QBh+PW7?dKSwZs!b+8~>OWJW^OX=Vxq-J0_B?&<-3v&29&W^*)U
zAfeF);?^-6<J`iSO?11h`*CKe{~?PI8Yt*+xeAo#jcgDOXh0#4`D2={%O)JNC;ea`
z)td9MOpwZAZ;kHtrw_-pR!oArpba7>LapD=)-`b#z@}EX3)D_xa@09jF0)Ao97%dI
zyDx#zs6KAXwELp~xIzJC{5cg%G{21%&@`%ss%SY(Ktg&6C9r#_S${|0PATv9)mdnK
zU1G{?h1}o?Xr^(4m`dVfD=FgS-C@M3%++5F_oOd%liO?2TzaK)uS^-|SHOyFJw&IB
zaK<u54>XYE=)pbfkq}&zjRgS?5+!mt$;?6O*0}ouWO1Jh44(D4MDlQ&*_Qde{Vyyi
zys)VTffR=^l#Weh9F)&13srt2Yxou#GwvN{GTqlyRjWxhA#~W4CzQ@KfhAa*(Jb7?
z{G$SZu<ph^OB2-1HQVgKBZrS!2;PSW*2<>mTxkOmOHJ@8ZZj{zJapdL0lpA@j?Ivy
zU01LI4i+W)<*p|*kKf~BtzV(52l$}vR?Vhr_7DcQUwBE83OUHIrBPv(8*rm=m0ytd
zf^VfTVjKNkg(TGgm82exCMBv5e+u3cHK>g)CYH8J3O$)WfgkG5X{L3BO)>&?OVK7d
z>9<itQ*KMIy#9OE02*b;wOWGKAfEh5_Bn0-yr4N~WB)5ycLN<R+B=9X=|1PEjUtc;
zvxiQ<ue^iTMNWE0KzR*sH1>E|;#g0Ckn`eIAoA=XxX+-$@IvOh&M3CzbkbqxMO_sN
zZSW+1h3!|(|Ah-p99&J1&BRTBX6p<j_E)@~oY4Ws3x@*Af+a{)45!TXNA8w$t%pp5
zIVu!QQ{L#AVt2voU&69Tpq$$C=$v%FJ_?*yW6LDa-jP}@J?Fw^G_e)19Ev8#W9PE5
zyj(-v=yJM$UrEvzPEhqbe@&exzikSf`f;_FO6zL1uSUzFa{P)B1Ye8qs3RaZY6*UM
z?xl*K$P>ZIzyy%z#U1sLF<d~NTVxu7?7;ykOR9d)1;=UXgG8a*<b(3viakHte=_g+
z!UbaLmi7xn(ByA!%~k(aVnV}IJIiD;9&D?D#`A5~)@^lamMGr5N&*N2COz4B&0ew$
zsHa546~`}}U){AB6pSF5Ba|@mdAa1R^<xp6f2^o;WO5??8aIjh2ME9qcde6dx1&3q
zZYRtRCOB3#tI;|*IC5qlbJ#MG_EQpq;Cwt4E$8>P+4$obfa4+L$f9u0XR955J9QME
zZNldV`s%%fx=W213ol5n$#-}B$04zw-t_}9=a(^FqW`uCnZuXyA8%T5vZE`9G~^~w
zk}BVS4V-w*ZKW>sKgd0wYyeF85?vPtaQ+T8^W)kv&(2vUgK^&NK>?Ix;vPoK65d(7
z+49xcZ@VPr3l9jy``jGu+0Cfi^A5_on+)|y><&u3&N9w`*{8_no&L3#rUn31^=mv$
zbzD=x#uVtaH#}e-G|<mS(qN=(A~VcTAS(<%{Op~AAlXvF)-0P*ti&a3G<t$VxaeMK
zF5oIS>!gxvDNI;=Wy2W!=d5Vl=F?=(KUW_M9Igl{6Dmof&Ch7_m#JW&e#6#V)Yef*
ztaSn#X3CA)gm-6QR1L80Jje3fI!eS6Q?rFCYgfvK)wcbBavZM!{FKN>qdTWvH|QkS
z|DmXw8A<@_heYg0(mU@%Rf&3<CByxTkG7=H)gI~)1mXrrppCU<%iy>xK;+4?q}z!i
zUUza%!2!UQBb|xA7fho2o6272nE2VR(PLGiaf8%%cCTOWe1Z$avR-1#6#-u7FNoEd
za;ugg))Yrl0h>r&qlFQByWwYw)!*Q)Mw148euB>*XPN7%C-J_OOEQ(Ui~pwCOlKrp
zy1qO@m8pM%Fq>3ZXooughL8poC&Vt(2Q43f`+kMm&o`ablDxr?HomB5qdMafBBlBX
zTKpewt^)lSG7(T6C!{prOzCAv)U!dU!>_o$QX0Ou`@ZQqO;x$__EwSC@dyGK&>9e$
z@#i<u)h`51-<qA|!&hL7)E{u8(s#jfA9o|3@Pul&R&&$1x?x)!NGE>-Z2}neII)0@
zB_ElvzWMv3q>S~=Tdc9uOs4fO)O%b)x>P#??Rn6he3%SNFlkU%eC#2d`>q^tr-VS}
zhV=?mmBe(U##c|;`RbXJ_8RwOp2N@VHT~{ICNowAh$a~4iooG2p<m{KwoY<fRuSnW
zFkcahV8PAV0TBHgI;XuqFM_D;#Ie-?Nd#H6+5R_EsR8x;$d^0t^vep$IM9iU{vr)r
zit2N+9}vQH*w9{yv&*l%7WL3x7elxL4GgiJO5V7x?U2|BOtsIQ3!vtn*PoEDU+LBv
zzdUCYg<}m9ZVp^fO3igBKKzDRvnVB-A7VjcahqkY3IHic-<S`yc5I=<=pDXz8CiXZ
zeQ~c=RsokMVK=Ql%LR1wtsA@j*9N)-?wdn!@4L-p=|lBtdE{8eONIF6Sx8i`bvZYi
ze(!es+4!PgK7v5W8f}GQWB33i??eDVWTs2O{zuk}J-S#OvYUa{$se-*@hva@bPpcw
z#FX%+$o+H1-ecS+5up08r%yn4L2LcI(<7-93~JuKN&G3e%2z)HiAT3%21O>#5rS65
zU;DaT&@x9>fMP;CE4Y;^N{wF%dc(B5>zOKH&?|Nx4R44oJ=%Jl%Fv;%-Tc6rQ|xHO
zU?G!XAj}fzDvHswN2s>Hh70s^iJ*NK&q2lUV?XZ8#8ge;>W~IsU$OmuQt`Kmzgud%
z`>+v6L_sysk-}7xlL911bb@HufmNYZlf9pM(A@d7zAu;e3&Sm+1r2Q}u@MVi&6h+J
zS$VuNr`q-8x5TKARk2U^j1MFwdBEsrfm^;;pU*w2S3dNbMOMOMI=Enw)UtI(l?+QS
z1kzGK$-~&~6iUN|1>UU{E6)md-B}@;@(L)Z?&P`;66n!Dbuk=TORUN!;`&F(E4pHT
zyxcEbvFUjh@_S_<@)yVNQ5H_3HvZK=jBdV${n3d_$54ID*)Vg_Pg5exNGt_rHu%`Q
zFHq5KW1?-vzZp&N1R8QWdXC)%e^y4Oqo^WuPXa4Tmo>)$yE9HKy5u}$fjbQUYWM>v
zBph4qJTs^4i%Fv&klZ@N=Z@-2RC{}<dm;v2MfLmo*{AUbAJJfrec8cR-nEx*nS+!}
zxOp(NP;}xMU-PRja_X2>oqZe~b}P2q?$NlaF|M`++{eKJ%_75uac9!%jx1*hl3YfB
zNhbAEF_Mm85TYMYxDTFX1Wrleu8~A<$ic_O@xq_eagOt0PzsPVX0->mYZbR__6aQ$
z53sAyj7A3qPsH6=gli$<`7~KZE~<SH9>*qJvS#M7BnV6xf`>V#S1{s2Cgj%PpnO+S
zThD^2mRC(|f&PEFZvxo`u?SMrp6J1Mz7MkfcP(4q<g)l7;?HHNNoh+CBxoIwAW>^-
z<tE3?X)nYwN`GHzQamKK-m^#@o+q)}YpL6mlSCH-$*l}5zaZ=$RW1I9;gPtU!~s~r
zw1>du^Sk_<xX*_{-WWR~ujUgk2ANm{aW+I)4LBM^Dg9L@-Z*%N5fs~HkHlc-Tr<y6
z=n_vu`Wsu#FEg1{_sQC2YlQ=YJ387hsO*24VjQBnvcEYklM3gul?+Fv)uTYBMUuz6
z7;a%wMIMPFL3PlyvD<wAm?r4@!YY<?M`O+SfU3KA<(Z({2?m|b%7%+f6@sSJO2S_^
z$8oDoca<9EK>=lJGN;(<yvb6yuIFCG@h?sl(KKV;zF1rXE6mR_IKJ>a^P|4XL{I>g
z1r<GHW8!vd2i?x?Yc);M%kepna=<Wb&~mV4BUqECoXMSHTvp#6oWN6#m<GC4Eu>N+
zXGJEx4UkHR3>W>m`)U7Mu*1RTz35&|JR2t8aJT4b^5^uLG`F9~8ge1LU5D?egxEx>
z(Mp<+^14)Es+k5>P8(jx6(F4i&x=Kz6B)Q@j1ts>u%S^8d5;a>5<TlyKfz^iE$h~A
zTTzG`r2Em8guwx4hYD(f+$eEDo9DK{JKF8>C`T?we@@E;biwMRd0xCJ*m>o@&CjM9
zvMqgdcV?c%mZ|c2@$HlFVPivUBVsU*g3PCzio%odV5$F>yrY)H24afw1Mc@Qug6=H
zWz%i2EEymf5)hfoJIVc?$k||r^3`hw8DV8rp+@@w)PnzQ46B0uw)>H}K`+*%??rz0
zLGY|6SuWQG1^*N^6`-9|U1sKCC(_1jNc;oK>jCr#Mav=C5q_P(I4#zS=jz<5u+KIT
zl81aGX?x)Q?#QQ{c3h;MRw%q0S>tWbnthOhe;=^+;_x8WkdDG36RRJPw&_l&dYpcR
z$=E~!VtivY{vvywilFH&P`#4I9IGed*Ze@YVRitP^NOf8A*<vAfB|R_d|z3=UEYoY
zv!;N)ynYn~22zBxZyz~YWQ2Y#OLY2sUighcVk&+iYgoHuC0J0SQ3}~Hk}RWrs6#O9
zGNW<ajSYG{8ZvODL=oJMCcIb!OXf%X9d4r*fj`MCf7x+lkGk{^tfU;Oab?UZvIL1Q
zYy9JNVX_Y>at>26GopGJf^I#jSR}a`_@3-#RjC-pb-m5rMitY0MCJ>iX;N)tF{@cJ
zU=18D;ILsQvnuvfLj7iev;nUO<vXJ-_(byITkNtgpl&X1kQYm*t;OZ97)tzC_}?FL
zPf~M4W$CaHI-PiMsj{+t*=E1+e!-_<v`cOJtKcWg)Dtx2Y|(eVT`5jT9^6qpGJz|V
zz5PGrwABOc4JVx`TXa8(qYS`$8-qxfa!@*MSfED8H4Lh=6wjSfbxh0j4`|#>%YZMG
z52ies#YjQpNrc7Wx#SA?E4?KK$#QXnAuu|-v)FbZxf14KlPQM26Z}KW`OA9;V*UXL
zne`;^@-t>QL5*hJGB)Go_d%jI%36Kw2~Oa+zTYuM^_vicUtrzE`-C##0){JUAw`$m
zt8-~$jN${C&s0<1C#ydI0Qd2v3ZEM3NcJz^`#&8W;Yh~Y!>L@6FR=^Lle~TFmgfu5
zI`yRvrAIEB>-zOL$<&hoGx1Y!Ks9_QPV{cFdw_HMjRK+yvW85)&%LuAuTifj#T*M>
z%;ucj0;?QE?koT?48Ra!Y;F+U?!1S4Su;IIv<Kk7TK+bthAIz?MthNI7ej+uEOQt~
z@@fo{+T^2gqy7m7<eGDkczH{-b|KT|m65WWsweg9z6KR05iGIp<RFCm2qeA9LizL;
z-C$i)DI8S^9=<@CBtO9b=}3iiq84W+B<lbiEnrwAqw#<%>loVb7xLZSU5HTxqtoMs
z5culrgxKVS2MlvAb179)4@4ySH}g*U>t-9^^+lT9U`8XH%@+@J^oeAcqgo+&)eZ4u
zshFRBd0s5<f)(<AA;%LOf4{Cr;ycgmN|n!V4ts~vozC#dVB-G8C*xrmSHXT{Rs&E6
zr|>?LeE3zuzkQ!d;K0_8Eh)VthVy!Aw{_OhDn<hP_~p}mEM8N-pb-IrfFt(A5p|{L
zGmXAsp}Jj2I#1F)PUrU`^?U=X(c~Vn%WJ&Jh<zI<1F-Td6qmEiE{ap9*T^KLZ#4Oz
zy?&mg^kzhot^h>BHAIp=p_x#HLA!)F%FNd^L{cPZweN7)I}2dg22|2JWuUos<p~_W
z`v4W&zC~h>cz(E?)2|PR-kWNqebthAcVCSh&##sj2SNe#ZmoiQ-q_MS3W<;hdbKSJ
ztWRH(-d6x%L7~l!{C6NN{o~c>#7+f>CBDlPWB&r+%eqVrNGg|k-HF<<C6SdBE&~XE
z0Ga}Ru9{)S`j&q0G_wn6mHr`qk9-sXL=FmVxh3KHdD(5COFCZTsnl8Gc|8iW+)XnL
zx*OI6)V$?Nqxy{;Z_~O2M>R!&zW{A~sjl>yV(?Sit~Wi{k|6`EvLPmifU)<gB$k+P
zN$-QheWEH+Q;`8>l?MUcxqxVHP5%RvP#-p+9EC*aFEJ}V2i(qUxgBc38HaxZ5To4f
zxb=wXU5lXEO7leZEG9q%d53r6jo*imNnwyiC7Et`7F0jpLeqOUq>QABLWW;AI4-)a
z6j|0T+C+6iK96R#9c6aCNhb|T9Is{1{=wDO_mbpX`IccG^|*^b!bJ2~Ul-I7xuT}K
zD2=&gZ7h=}%&o){z0q<Q?vEib2K1uK<<;WA*veckGxI097Z{DWWiRzFBCGz5q!NT&
zM}dhuf8)n8Q9y~xZhBT0m)ihE(qxeakxVpiXXP|5b_E@Xm|4HZobZ?S<dbb>u|}82
z>~J8+C=VU$>J3qu#Es}KRt8Guu+OPofIbB$zF%h(U9|xaquW9}SdX>oB{>KA&J6vC
zY5r_gt8$o=pUqOI@wG_(whYW8mHBDP&7)dI8FL4lMH%9`A&~_7=0ezs3xldU*V|kz
z<jxe#$?u_-*w&y~RwkUneBU+%!&X1gwIBZ@EwHik1+Y-?Vb~;o=*c59W!K$03mT?5
za$`!_5*7b4)=6OD?^~c)Gduy9EMu$hhu>T7)ImUdaDg6b;k5L1Uy{OEb>~RXA~k~u
zbB}Xx!IE7X(HjM|rPSQ)3Mar~wVEzAAmxMP{@aTA?}!sWgn0XYe7p|l3tjw2lC}?y
zbP#5``MA4t{{`6I+3H)oRJTvW!K2xazAMk*hFUVYSK1tpDq3FIfh`5P18tNcaxiEr
zx_jH%S&IfQ;|Xmy4Y02ye`-%3O_I`qYy#!r^ICoAyUz#~FSht*#er6;bZU$DYKedQ
z8^!9cMlI$0uqC5PnE;?%!rZ<d{bn=qS^9Y4>6-OweM@H5IZEX?v)g8t>+hULE`q@B
z%xU_VgjfpAbPKHTEeSy?4_lmN4-9I+_#(m6ZS2o3V8|-s%co39jnp6HJ#v?gTy>Pm
z?4aC6pj`iLukW@@^*iHZy|QZ*f`!dGVB@u~**|b7B{eV_6nV{nD^Tg2NTMu3qFism
z{wT9U5aS1wn?@l-P{xFJu8qL*`xPLYpy!8;>Jtbc*kfY%1d=O5uJFED*m48_L97&y
z^g21C*{u~p^WV@=pw<T*RKr~gjh{-@B%C=KcXb3}8{i0~MoSF+Ydp(dKz#XrAXmaR
z2QZ;{vTV>lP)He|rW#Q{dpR5v$7K#2nH2!nT(?GJkO7K&BtUVmEBxd&hd*4+#=5YJ
z|AcjX>7rH0x(@DeYy`OIl_63;fvE4g8mU7AuE<&+*X6x)C;aLieasz>#z|&(L1g=R
zwfDadfDJtjrTDvehh+g=be-oh16R_s1CAkU&Kh^>a88vdCuWH&N`Pdy0Wi+624=29
zZD;Vq6G{MJCKL4_1ZT4rrkyHGFcCMHwtxXJNenO<ZDibr*)#x&G2*Tw8~o>2+@Cx-
z@^lN24Sm<y#eXjk7Z~ma7G?kla&Vc#Jf^-Kex8g2#?b*4M2M4kn5bZ6qt@%0Io0}S
z0MzMbiany=%>eW`1KQlH1*gfKJLUC;6DkUSZ`;8cRlES^I0&s6VV%HrK?GgU&gI3d
z5l>P82M_^C*nmLHYqc(8Xo<$qRp4=|uF<*#i7n%jI`#$9y6g+7>$VD;H2bSY&yVme
zaA+wVH;9s*X=q@ac4^YoDtcy0$>Bve?x|#{C_3qO@-3ca*$}p5uaf;(YtEc^XESgk
zc!M_~Nix`WMBB*{+^On5%9c*~O#paQ6x97eRO2GkI#0O``KfYg%~?gbmI+)5k16wh
z!w0s$Yz$ixCBA2gTIcFJf`*t#>Kc#wrV1Q(k_nTc$kw@v%J_T#6G2mS13Wy!+#WQQ
ze826L@)zr=MA@qYQ*hcSbi-{hka*%6mm7pDJsNN(ASb>J?(<Fx+yqOZaO;0SOYO}c
z#C89GSO<V<{wMOdqzOe8NDD$si+GClQN3hK>1h~B!#fA=YT~;9AzFZt?C9PS`;He-
zbJnd%ekRtRs&@R5aoH*#^i?)K?ky0e;G!xA21xIO@BPTUrywz!+D_q3p%F6%IF1bI
zX=@Jy5KL`jKmjo(i{R%+gm6)L?qw&OM;5v3S9MAn`2-W?8&hBF7UX*kk>1IQiJ4;n
zv8wl-EdI5cMOKbKfy-%T=TyhN=VibGK*$#$6mKHU(wPMCBY*eP)SXS~?B~~Bo6PQN
z698{AyQTnSM`xvNl>oH@_eJ?!GE<K187z^`qNx?etkKOb=d_(u;lL0!wdCtjS7FUp
zlm_i0#%rpxZ-Sl?o8-ZXRlER3EZo(`lvnzI0;STTv;Lz}z6^m&?O)dX0G7;jJz(4S
z06+Z<ZZLJ-2luU(R7xZ(9)F}p?$1#aZde4^e0oKe;pzEk#+V=!unyGqQoA&LO$8O?
zV6598RC=INMV~4_6ejKA!8T&2<phWm+D@8S(x73=kFG#{x99=*aAQAfB+73B5?lPo
zUvdJ1?ICiEmyQz8TIMJ9x{3Z65Hy<<gc1ZjqGAw8hxI<)Nhw%WsTS=+j9O+OnCszB
zpL#mYvPxThe3+DaDqNBN>Jt)@UioC$;#Ci1BKX{(EzZUcb(Dcr-|PxXtSy4qR`p1N
z7Sz`rV^?^VcfgCtEEf9@^aM$9*P}=|T^~b~Y6yKv_zz^y^4+&Ckbo1MgdS*EsIk;s
z>Zom{Jkx?m_32`WnCZ>4KQ3pqU01-{!#AJ*t1Qu<WPZ;33Svo{=lQNf+#vmWCJBIt
z0N};w*vy<S@y}65bnqkl_t}3?J4eytZNM2R9)Y)&_JmSsty7K>Axp@LHEeLCVQ;Kz
zlkPfCL10}%MSDbMyYn(KNek^<Ob9SlPa<XXL!iW8HcenE^S9Ku$2FSqBu+7+6F@Lc
zi1HZn59c2M(qo#0C&*s4<HK;NCLClTZbplLjs0psH2rS$Kp@fz7?2dbzUgg{WN!4&
zUslLyGNjd`Kz%@N?Qxe5%5h=s6st_;a;Q1oB*C|DH+>snSJQ2lKBc+J?QT~8crK=r
z2fU)}+rXA0AJ-qVR=(}vR)vauNM6cPN<$)dWYW759(Y>gsm>D4<z+5pVmAZO5OzXk
zFx6?48a+_$rKA5(1WmV|yK@fk-Y1pjNfj1uP-*p$sM0WRHk%<JpJqZK{&{47R1=+t
znpm8j{LsinW_wIB1AR*D;XUBqHr2=$@>PY`IFgW7Jn{^!D(19_Z%Qwvgydcd_1r@d
z1Z<5@RG@PIqLJxK{~j;CiQoD}I}#%g^pv35)u4($FaA*DoIXql?2+}KiBsnlh?i(`
zkg-MzbDE}m@q9~6VncRTRv_R{EKiR-*_gVC{<=sJf>&AIx|RVXgjtd|ffFr)hHVa5
zNC4WiR3Eaa8E1`VKef(bCk*sYIsm~!(?Iu{^2HXA38%UddQwgWyw!x5*zyJ)^X(h~
z@_bnVywqZ{13QS4e0RT*d?Wl^BstTYNRnay=Yjy|5%cb1%{&AXiU$}(11$|2$KM-~
zRZ(oI$~dc7HUo>UM^1uB^c28hC%XU=uXgu+6enC}?nImkGR*$vr{-h5KG>7kCAly9
zUzBDO1Ngvldn!<L7}2x0{G3tXS772H03JexiGHzU|1kut#S5$z+W(Emm=vb*ZymL`
zTowI{#g9<218`E||8viRXh12Jyi;)~zVH1rjy7LDGj*9nT@AbNS8upii~f59@YIJL
zl*a$R%0%8wA67R0;gu16&l^*3%T2N%CEnnFw#PF|z+RpKu2`0DaQE!!ooXE8OKc5w
zt)L@0ptRiJynz99b%ZLhbAyVwp6+xt#r6KJhuTa199L652YM+JfIHUV3CtTpQIFdo
zU@tNO0rz$fuDOmR0aEe4%yqnyUmNG*oBILobvnEH&#G=>EhmStgG#9yLlsNz<)uEl
zmkDqimNK}80j><3F#h|HYj^)a{HPpIl3x-N^gvIN2k2$2H~i+pvwa2>G%%qbfH%(5
zky@uCiUpwSHnMml`qE$hI{o)){@PHr_)Vr-c+8LuU^v=d?jOcX86-;2-9o~Y4@ocR
z3|=6SETd1phyMw^{r}>yk^~?hn{30g2uJ^nMQ%os${7WRXN~&Yhc@7A_Kg3z_M8P;
z`&8%?>V_ev?j-R}Tr>+>w-g3zR<4x~<p5i=*4$`zA1wkxS*p`dWQ+H`Pj!ca8Mnc{
zdJu?Q`RV@!=t}?^15@Tdov&|fNj{9s`bBMUi|XGNJE^Qc&5$2O9O!Po1#B=K;~K&h
zdM;x0v4K*<JC11tNPDfHAYioUD?oq$Y4l*@VqXx-xrm<Yd<VDTt-cu7B>FXE;Q*RQ
z;reUFuTb@m!G7iBR3d=Vg*(OnyjqT&STF5oT`vR_aY&X;DUtXGivKTMI{`NEezdkG
z0J~%%T^}e&J?g*bo}&#``O*pJ{_tbuN<GqabbuXzxH)S;4;jym;C!yCVsVroXS>_G
z+<xco(v!UEgAfTBg_tqZF5LnL*Z&5FtK1Up6n&x-^u{Auw!WQ{=oks_^d$w#Vv&@e
zM^v!dcEF(nY=HWC3#?6*y8RoL`@Gn>Rq21Cedxq{cLS~!OcX?>Pu6}lbEj$aC)KGe
zv6Na@_Ajpi&Zmz{_;fP6eHu-s?+Qq#3bEW%bl4QWPc@o<`eeqDLU4^|RXrdNQdx?~
zSz8-wrCF3ZoYuHX?`>pV*^*k-s)YtBD?J}N*l>CO->4qPE%?RbLh~a-^S_(r^|8xs
zzcIETY*eJTno5cV-^!8PKaw-+#G7;@t07{FGIy)Mt&pPob+hf!%GyXIY|;v&&>NIW
z?`XL~(h2O=dAwN4=#Xg};;J4K?ztro<j6a03ry;7OJeZLd+T+cj!+xOm?#2q>1!58
ziEbC<ku@Bj@i$=X62nz#>h_i{wW%+4S>;6>`ZLK3J$s86O#)gzOWEk@<njuNwGJS~
zvFpne;WyXvA&-xaaUD~p@@Bc^<&O4U?aiKf=5v(0$ka5x3{5g+swk4u8|h?lv=*VJ
z&o5P$>{VPq*%7g6&7Mu#ZOHH2h)kJiUDc_a9zJ=7>SUt_g&raJd@|V|2{qzAAXyL<
z!GH;_eh{Ak!-7AVPA_b@$E&v9zf1qCH#@#FvqMlSexJ-}IiH?<m$Vv4u;do+ka|N`
zgAh7l&$q^7mU5=FNfD|2E7zyUF8VMxZ}IOkA6y{u4x~sy?{mP{SnS;HHo+7AO#=CV
zFm>7LDr@I^TJu$*N5&1oY~BvlZiv6#$K)5i^s#se4>?E-x$}S^76cv+D-++pT*Q67
zh|6ikz1yX0tr{^I)HmLm8cn-)EaioWYf-<4u{X)wgah)NB(U~1-%_}0c@9mS6vte=
zWQW^rfEnRvDr1jc&Wy918pitth4MywvjV4qrkr6*$?91SUEu5}V9i`4hE+eCWBSJb
z*TR*@L%n|g8EfAnDP$YVs2e3~$gT`yDN0I_%#9+(ay6E+%pjS_7P?6jHDgP%6*XeG
z$~s1a>|<!bWX+PHS$@yl`<p-Kb6)2;=Y8Jq^PKZ}&1=q0mJ+^aS&Q;SzPUpB6r1~|
zZ?$cjpHj5yqNZ#?45c(Zr$%b-5=0^mNavJe>{hTTcl0lYCiO}oq8zYvNLCoH(ok-@
zXW>vw&~q<@kVT+y%-^G_9nP`pFLJX(M75_Ez6@F2Y&0g@9!Q)XX0`di0Y>_-+pWc4
z1r-)k<j1RXLegkiJQ7qb85I<ubYY<aiZG+1nv9HH?Z6TJrVuyHt&)#SA)VBvJ*))j
zpkpc2!&?rAwV*I))=B-fH|}c+ad2^cG{K5<@PQakCe_H3Dc&r{Q18FStZw}o3TTBL
zfMornzqZ+*?KO{=dEn(_#<cqfP;L4maU(S3SMuEM?2xbp7cbL#Q?e~W*k-5JX_qUa
z7OKF<pXanjKhve*ph%+EDk2v!vpIAaobavPAN_qK0F$x<q?1sbyr_ipe{PO2^Milq
z@#c197Ya_SHL>E{Kl>#`<lcLnxyk66`5JJL;K|j3$7F>OX@a_eYopthfk$~K0g@-{
z&YM3qSyKXTX4+Pi7C3Z&qB-J<gRo6%==%+YsSdgV{N`)IzFJp1B>w#)km=LPXTj}-
z_EC6ha;s528iU28bf$r{Okbko6=q|Aecigo<6iUU8i?I?!ZuE=5+<?1zy^IWWF9TK
z2!gStf5jEMubxg@7S%~#+GDzNv$S<48Kj#+)PT4hez<l;EfajbSA&JmlX)zL%T1Lu
z!OpP>00LxKreucY9+>*7+c5|U<F+)P&;>lU0R;^qk$B~Mz&b-RG}LTDk)i(a>+e>q
z*p_dWwZWP{wtHo^C1xG%*kSE&OZ19a3xVG(&4Co>#`g5*G%-|!uc$EKmbtb(QnvLE
z_P(i1rLBEau1U+HoE`jl$$ogX2aS{OVa7UdZ`M}hYv%U0k4md;XScy_8D;DAL$dk<
zGqvB*CaUf&Wi559CjF9U8xxx(W1sH|eW2E~Gte34CG@5krCY%5dHa`dC7tt?CZ39U
z3c`ID>diA?Hb%)DHzM1a9pP)eHfdXzYtvBK5q!pcSK#c4MM-2F2G#IA$A4^vR!Y8n
zs9#zU;udHX-rmSqB+_99*k<t(6NSa>eCQc@1wVh=;E{4d@1NM=V-1_5pV)<)uTT4_
z0JH{U=U1Uj^PkvO+WnC1cRx%2+_rkOz5fX34UFYi=DlO%{O-{c*!i<cBaPGx7L)0^
znh5eqP{2MD9bT}B72suEj`hv~=CKm24J%~P@6gFe=|NqL1B$H*I?({#8(s$lUOelv
zn*C9u<sJQKxL@=BlI7&`(DCfPG2QBQ&x>qp<-Ozg?RqL}ZXG5&`Wa(XAzGG(;Tpr~
z9;r0{=C906sPB*Fa4cJRunHm}F*M)i)9rwSkPKGS{n0H8m2}u@+G+=Cb+-og0GVVM
zSQRD5fkHHf0(R%;#nBwB`=ue}5{6z#7WUQ4r>xWM%>^&krZZ1)SMv)A)Zj`hPVq|s
zgaNwxoiwKcAlJ6p_H8!3%UqK)%B{;Lh_f)_?7Ncbq4*`~{3DW(a+#h1Gn5&b$o!t!
z%A@F&m>~bgT$HTsQEoX}ylFR!r-F{?o+_DX4U|bV-@Y`N$W=92^`;*rcwh&pO%UbA
zfeRVugC`vdfz-MkZ)|&_LNQ3|K<j{o#*gHi6kb3?=LPc?cc;h*Oh#ucP|^31TbZ1}
znoMNWdI3xPKDPlX+obl2Cs)0%W%`1bsj(tM!@viW-%+c_ddJ)|ZA$}7p&Xx*+F{g)
zepb_G=pPS$Z_q8_;D>T*d499?@z+<L&1J-Yn%tR#_2Mc0exHjr8mXD0oi-l4txZOf
z_5nD^PuDVq&%fJ#pS3EtKw&sV>GDUbJ(S<hS}!==T5O+F$#xM$Uz_IjTjEvPQrQd6
zU%vd(G`<LBt6L{R9?}+Cy@o7IUy^3Y0LbdEuZ6ZW*!#QF4xE~tVXx8E8Q0Q^;;kU#
zrs}`l!!jI@Aj{%W#j)#`Wf^CUa(tee3Z04AID(UqcvW+a_?sAmFmn{PIozjM+1N@^
zVw{y7@Vd`R|IA-;Ej<yLA#CA5+)5V21UgzXs%yyJ#Qg+M<P<}}o36BRM7f`8TS9#i
z`<S>6>c`quU%LgHny16AnM4dzZR20Oiu_}cCN>oxbbp?&RDJ-MD2c1=e_8l#CgAq2
z*A3_SpR8>nKT=Oi-Y01w-7YCY`b}Qy^NNz1dkATckG7fIpVK}uN$0#IS}cu^|FQw;
z41-qe<7o5>x;>>9>3^EBi+2iRCv~8V0>jnc3XTg)ckloS`_!yG9)}HVOw>)ewhhK{
ze-2<HC#j?S3}%Qek&M0L4%*y0!EaQuWoa&>_R%Ct59Uo59_8~{Sf5&wxr5Vp;DlMz
zZre!xWXZ@(TuvxYr^_~-#n$;AG7X9SNAar^aubg!0A5PBCkvpKpBHzOP=fVjz3FlF
zsF{1%mZia`92AJxRS<8jY^Lj@@!v%ARO)8iIv04#_Wm}~(>h`0C%CFXDMbM^KCBOY
zD0CW4^9Ad)JMT|xNaT|oZ;=+F_9OO1bh^Vb@WiZbpV8{!{+P>n9vHfmW61YNf(hUC
z@js$c2sFf!1ztjvDs`a+M8nkf!n^MU@kG8qM}go{z!kiUCe6|UCPCNVPA}hE(tON1
zibHx}e7K7?Fo_{A-<zsWmNZwF0Y{fdQS*ffq4rTSjxo*~QvA{!btNIx9s9K-t)_6x
zQmC5HMOw_Kq(q!>3LmQo4jKI}uCh5_KlD;HBMPs4O4vrEdU{3*wv@W0nfNO}m9x$d
z?7RS3kyKJ-?s=lI7xcMrxZK%!T-RJiz*aQo#OCKJjNXLXZ68dU1E6)bFgiMBfWbE-
zYj|2IdVlhMWBBZsSr{j+KKzsi&Vktv*>fx5by4Ke>O*9W)a8U&4~$(DaDgk&4ID-^
z;1L1?sF(h)JLanCOZW#K9O>huO6mmY?uN1MnpD;KJ-2QsLg2a&{t&mizlOjd@5Fi}
zyF!k2>WHJ@?|f7*YwUFaA=)h@7B1-5@nYc<1D~4|b(HR6UVIgZxj#p(c=-kduiRbJ
zF(I_xy0s!+u^^3;_z`*&=dD%6kSA!kiGTxAP(2MUikJ5@=s{QL`yliC6A3%+GEuXc
zR!WTjw-^YBhqA5d3QgZ+IRUSevnnHTi%+uR4ufu?c?^Qs-FAN>e7>SXG)6QuDc4&f
zQd$0TaF6{apr1^#7_QT~dirNoLfjED@z9t!uWV0@g5Q4AmZW2kqY%IX+|QlT^34ye
zqK}6h#BTF5QM+2GL-{Q58*yDQjD?FBk4)@{bj2Wt&!ZtD@G{CMbg7}8Jq)@+syzTe
zQ~CH#Js5-T{h2IM9j}m;kUeDIfS1VzZqHV?&bTV`FJq7<qxzq>9%>MFUTT9jj*E4u
z04i$1K@o|$B_&nRU-sZnZ6JADuxIh2Spfy56<~x+eF3LT*pd4#ERL|koCPlanM>Sq
zu1X%mhAC4RckLVOLG*dx7;O^O8e#!LFp`yrZ1lkH$91_e8C_@ni~%^;TWP^uDwPK(
z6TKE>>7r}rVk`%*i2o~4S?t@IPEG&>PaS&7(M>=;HzcbQ+`jCCO8zj+{LLVY<#4x-
zA+s-ig6zpZ*!cEM-;+&b6efwV*IO@Y^qq?tL%%_46bt~*0Th4>emb7L<2Y5MKgQGS
z4QW$IuX9rDKWT!Nqa`>d0Ss#H%O}A508@%k=j1oixz;I9ub*rLCeuMdV2~}DffZ%{
zJ(uC)RGPcu)?zluybh82GtEi~utg5AWew%>Cd9Bnji3P2H{bAyScvZUZ$#e2=L%|V
zF>+>Y9L1Mm&>e5wxYaCH?W@)(f|FM4trD5V=cWoQ@_!yWLqPTpJ<OX$v@GoH$Pm5h
z6?B1%G)}{SvANUYk}v0k2~USiJlB82Q1ykKzi!HQl@P7T_*k<#U>q8NYNmF2>wF7u
zE+fOiaI;^RykL+5op9qd&&g#Q09mmhG3P42(@KfvX2nBzo#-3&JASlHvG-Tj#5oHx
z1**U}IBjeS_kp^f4AvU?A6+)ZgEFD+d$@Sah<+4)tr)7-uRatV@b^~}yC@7IabaQ(
zZ|hvz``UCO@JNR};9j?runj4xzosKjBwCwH+!vVi(L$;y{+;brfjAj(x9b2cm|stW
zm4BEm26>1yP!xFq^RYG1xu{-w;$7EW&pdfg_*p?Ry>fAiWgnig&=Hu{*4iEz%A-5T
z1aLT)Ack{Dx#YW+`)A&9)5?0Pqrc483fx$D8R363@l6D4&wDvX?cjoJY<)RtsJyop
zmGO?yC5cBxyrA9Hgnf0CRGM_T5TLn^UIk4uFtCTPJ~nc9;j#loLd;{lmL50}=6C>1
z@D6{EbPqMzY=xdJKur-;HXH3EYa7h}m8i&hyn6<)*ncS`=ov?<+_CB|`uI%Ke1%%m
zUMiY!DME#OU@usKNonZlSdp?1zJc=|W|5aOnHWf|GwjLoMPJUmWqee&(*UT8K~J!y
zo-9M(CsKQmNgq#A*l3_yZ1gz<#ca33<7|MJ9&|KEy(1)TY3>eMzBaGvmae&6Z5ph)
zF&NB8O}9M$-5C3YyT*p0`{*#j8K1ADoJPLYXkfMP4WL^xKLpN20zcv}Yq)1qGC_S4
zkKz)T5uIeVN{201sN?5&Z~!J~bJCH71;DL482r{-aTnCb!<O5<)D+J(K;h!L`Xd-I
z`?Gl^fCd^v@=UPZ0O2`tkGgQb&?q6d5BjxbC>2(NS)YIvmxcm>C&#`vfCh4=g3{J?
z*DU6mO=Pm|7yok0t=5d@YP>So<wz<2ZlL@Dz*>EIwq#jTv!U+aE=ddNsOze=(}X-W
z89^!oe7IftdD|j7!UbK?+JcP?be_c?D2gw({c?6>vu1bhy-sJ)4p{nLw&T@K7MgRj
zXs9;Zwv(3sJ7|#h#Pk6wtkNi++;B4j9<B)(2t`+KNwrvm=-tJHDYJeRGm!_TTF#3K
zG(Fy>Ep2)X1h01e$~|#W*ay^<_ZiAyYX;A!qN&x<|G3zEWzD<whSPFd!UC(IfH+mQ
zCkEM}Fo>0u<9Kvrn5V}1o}nlU^zCGE+>s;!!WYWlib-J2WrUO+O-aT|yg8`L?Ym~1
zbwzXrT)kJ32*gfs^&ZGF^5oB4_rWjC$(cjtI3}g>_f)r|3Iw-P*wUM4KP4@tWLUl+
zf!6+S-_EzJ(P7>>*Iib;*w*Stt=OTTnF}NE3AZcd6>vm1;LU+Ym18vn1XoaRFEhp^
zc8LE}L(3Jbn=DklqB8%vQGMvWrF|@uy5p`M2=Yh%hS8yI-k5yYRgAMPdo8P>=-2HM
z?c%y%!6u#KK%q-RvW2PzOLJ>F9oBTUgF3O^F?}J9o%R7>ua#O}UXTEzD_E{y4yRa|
zoh11HCdu5X9Q*m6Zmo(BiOi9Fqml+*5_o|4?fTJNUBS+5S$*VmX(j@RUpE9`3e_0B
z?k%HzO_XYzsA~9kSl+|(C-1Z&p(ga1ui1_Av&aTaSETu~$cIOj7^*OMe;-B!Jf()U
z4TCJxT0d{E?7vs40fCF=g?h&7hTXs*Q!E40XH2huqpQQYE=UMsXLtDIuFu;=$Lb=0
zv6dJ(H?dYQ^H2=QMBo3k36^sMTfoki{}$&A7d^LYeL;J)Gz3A`O)s8K@gkbf^expt
zt68@9z;{xBj<w#pS8x@;T;r=UHp6-`w?o=g&_r5CZxLO|qrG(4&F}0*<6~qa@DgJ;
z(2$$Z4Ii$3_f}Dn|G?n75m@V2(*RSPT6EZ5Dm`ma$SCT=*4tiheEl&gc#hy&eo#HV
z=p))_PWF{ErlaEzo1H}L7Bm^eO9Ib)#ShbQ_K{xy^0?v{NHshFz<luPZ03?)KUOF;
zR+l@m%85dUEg%ICqXiFrlYFHf{a%KuFv2zORuycKPa;wQ3rTm-Wf7(MO(}`#kSMFG
zNtIH_D12u&>jn;faHc?xGBCZ?^3R-1+whMzACiS2Vw#E0yAQp~A}%|fqG?a~S8aQB
zMVlz#Vr>@Mqh$&vN0cxNy+V<S{w@A8cow{6BE<@-b~5(s17`S|lu&8ZR%N8ZWhC)d
z+NBzr?VfBR5x}G09I*w7+2oZdc}#21uk={6Mh@ltRcF*56~%sIM@j)FAMQq880so)
z);5{Ewz7MQZQ49|WlFX8UE2Tn;$SkUO3H`t6*L(sc75@#=szg9T$AvIo4pH?Z~1$}
zzNGQ!40+cnUQs?5(r{Gb)WpBj_?(=ybhge<)hB-?^5=tGFvC(JaKR_<7av0BGPfUp
Tuqy?B$qR9`b3wd1iAwxG$<2Zm

literal 0
HcmV?d00001

diff --git a/templates/base.html.twig b/templates/base.html.twig
index 93a64b7..1918768 100644
--- a/templates/base.html.twig
+++ b/templates/base.html.twig
@@ -3,7 +3,7 @@
     <head>
         <meta charset="UTF-8">
         <title>{% block title %}Welcome!{% endblock %}</title>
-        <link rel="icon" href="data:image/svg+xml,<svg xmlns=%22http://www.w3.org/2000/svg%22 viewBox=%220 0 128 128%22><text y=%221.2em%22 font-size=%2296%22>⚫️</text><text y=%221.3em%22 x=%220.2em%22 font-size=%2276%22 fill=%22%23fff%22>sf</text></svg>">
+        <link rel="icon" type="image/png" href="/static/img/slice-of-pizza.png" />
         <link rel="stylesheet" href="/static/css/simple.min.css">
         <script src="/static/js/htmx.min.js"></script>
     </head>
-- 
2.39.5


From 7f2eb7ec65beb9424129c4fbbd4b5c441888eea3 Mon Sep 17 00:00:00 2001
From: lubiana <lubiana@hannover.ccc.de>
Date: Sun, 23 Jun 2024 08:27:17 +0200
Subject: [PATCH 2/4] update fpm config

---
 deploy/Dockerfile                   | 2 --
 deploy/etc/php83/php-fpm.d/www.conf | 6 +++++-
 deploy/prepare-deploy.sh            | 4 ++--
 3 files changed, 7 insertions(+), 5 deletions(-)
 delete mode 100644 deploy/Dockerfile
 mode change 100644 => 100755 deploy/prepare-deploy.sh

diff --git a/deploy/Dockerfile b/deploy/Dockerfile
deleted file mode 100644
index 47bc55b..0000000
--- a/deploy/Dockerfile
+++ /dev/null
@@ -1,2 +0,0 @@
-FROM git.php.fail/lubiana/container/php:8.3 as phpbuild
-
diff --git a/deploy/etc/php83/php-fpm.d/www.conf b/deploy/etc/php83/php-fpm.d/www.conf
index 113b8c2..edf975a 100644
--- a/deploy/etc/php83/php-fpm.d/www.conf
+++ b/deploy/etc/php83/php-fpm.d/www.conf
@@ -7,4 +7,8 @@ pm = dynamic
 pm.max_children = 5
 pm.start_servers = 2
 pm.min_spare_servers = 1
-pm.max_spare_servers = 3
\ No newline at end of file
+pm.max_spare_servers = 3
+env[APP_ENV]=$APP_ENV
+env[APP_SECRET]=$APP_SECRET
+error_log = /var/log/php-fpm.log
+catch_workers_output = yes
\ No newline at end of file
diff --git a/deploy/prepare-deploy.sh b/deploy/prepare-deploy.sh
old mode 100644
new mode 100755
index 53f4e46..d8c92fa
--- a/deploy/prepare-deploy.sh
+++ b/deploy/prepare-deploy.sh
@@ -1,6 +1,6 @@
 #!/usr/bin/env sh
 
-TARGETDIR='futtern-app'
+TARGETDIR='deploy/futtern-app'
 
 if [ -d $TARGETDIR ]; then
   rm -rf $TARGETDIR
@@ -8,7 +8,7 @@ fi
 mkdir $TARGETDIR
 cd $TARGETDIR || return
 
-pathsToCopy="public bin config migrations src templates composer.json composer.lock symfony.lock .env etc"
+pathsToCopy="public bin config migrations src templates composer.json composer.lock symfony.lock .env"
 
 for path in $pathsToCopy
 do
-- 
2.39.5


From 38a2de58589ec00585166920a9a6ebc51b6f9be7 Mon Sep 17 00:00:00 2001
From: lubiana <lubiana@hannover.ccc.de>
Date: Sun, 23 Jun 2024 08:49:44 +0200
Subject: [PATCH 3/4] add unit files

---
 deploy/etc/php83/php-fpm.d/www.conf           |  7 ++-
 .../systemd/container-futtern-caddy.service   | 43 +++++++++++++++++
 deploy/systemd/container-futtern-php.service  | 46 +++++++++++++++++++
 deploy/systemd/pod-futtern.service            | 42 +++++++++++++++++
 deploy/update.sh                              |  8 ++++
 5 files changed, 142 insertions(+), 4 deletions(-)
 create mode 100644 deploy/systemd/container-futtern-caddy.service
 create mode 100644 deploy/systemd/container-futtern-php.service
 create mode 100644 deploy/systemd/pod-futtern.service
 create mode 100644 deploy/update.sh

diff --git a/deploy/etc/php83/php-fpm.d/www.conf b/deploy/etc/php83/php-fpm.d/www.conf
index edf975a..e5a895d 100644
--- a/deploy/etc/php83/php-fpm.d/www.conf
+++ b/deploy/etc/php83/php-fpm.d/www.conf
@@ -1,7 +1,7 @@
 [www]
 
-user = nobody
-group = nobody
+user = root
+group = root
 listen = 9001
 pm = dynamic
 pm.max_children = 5
@@ -10,5 +10,4 @@ pm.min_spare_servers = 1
 pm.max_spare_servers = 3
 env[APP_ENV]=$APP_ENV
 env[APP_SECRET]=$APP_SECRET
-error_log = /var/log/php-fpm.log
-catch_workers_output = yes
\ No newline at end of file
+catch_workers_output = yes
diff --git a/deploy/systemd/container-futtern-caddy.service b/deploy/systemd/container-futtern-caddy.service
new file mode 100644
index 0000000..2c7e3f6
--- /dev/null
+++ b/deploy/systemd/container-futtern-caddy.service
@@ -0,0 +1,43 @@
+# container-futtern-caddy.service
+# autogenerated by Podman 4.3.1
+# Sun Jun 23 05:33:51 UTC 2024
+
+[Unit]
+Description=Podman container-futtern-caddy.service
+Documentation=man:podman-generate-systemd(1)
+Wants=network-online.target
+After=network-online.target
+RequiresMountsFor=%t/containers
+BindsTo=pod-futtern.service
+After=pod-futtern.service
+
+[Service]
+Environment=PODMAN_SYSTEMD_UNIT=%n
+Restart=on-failure
+TimeoutStopSec=70
+ExecStartPre=/bin/rm \
+	-f %t/%n.ctr-id
+ExecStart=/usr/bin/podman run \
+	--cidfile=%t/%n.ctr-id \
+	--cgroups=no-conmon \
+	--rm \
+	--pod-id-file %t/pod-futtern.pod-id \
+	--sdnotify=conmon \
+	--replace \
+	-d \
+	--name futtern-caddy \
+	--volume /home/c3h-futtern/etc/caddy/Caddyfile:/etc/caddy/Caddyfile \
+	--volume /home/c3h-futtern/futtern-app:/var/www/html \
+	--volume caddy_data:/data docker.io/caddy/caddy:alpine
+ExecStop=/usr/bin/podman stop \
+	--ignore -t 10 \
+	--cidfile=%t/%n.ctr-id
+ExecStopPost=/usr/bin/podman rm \
+	-f \
+	--ignore -t 10 \
+	--cidfile=%t/%n.ctr-id
+Type=notify
+NotifyAccess=all
+
+[Install]
+WantedBy=default.target
diff --git a/deploy/systemd/container-futtern-php.service b/deploy/systemd/container-futtern-php.service
new file mode 100644
index 0000000..cec0498
--- /dev/null
+++ b/deploy/systemd/container-futtern-php.service
@@ -0,0 +1,46 @@
+# container-futtern-php.service
+# autogenerated by Podman 4.3.1
+# Sun Jun 23 05:33:51 UTC 2024
+
+[Unit]
+Description=Podman container-futtern-php.service
+Documentation=man:podman-generate-systemd(1)
+Wants=network-online.target
+After=network-online.target
+RequiresMountsFor=%t/containers
+BindsTo=pod-futtern.service
+After=pod-futtern.service
+
+[Service]
+Environment=PODMAN_SYSTEMD_UNIT=%n
+Restart=on-failure
+TimeoutStopSec=70
+ExecStartPre=/bin/rm \
+	-f %t/%n.ctr-id
+ExecStart=/usr/bin/podman run \
+	--cidfile=%t/%n.ctr-id \
+	--cgroups=no-conmon \
+	--rm \
+	--pod-id-file %t/pod-futtern.pod-id \
+	--sdnotify=conmon \
+	--replace \
+	-d \
+	--name futtern-php \
+	--volume /home/c3h-futtern/etc/php83/php-fpm.d/www.conf:/etc/php83/php-fpm.d/www.conf \
+	--volume /home/c3h-futtern/futtern-app:/var/www/html \
+	--volume /home/c3h-futtern/var:/var/www/html/var \
+	--env APP_ENV=prod \
+	--env APP_SECRET=UwUtHiSisNotSecurePlZcHanGeMe \
+	git.php.fail/lubiana/container/php:8.3-fpm
+ExecStop=/usr/bin/podman stop \
+	--ignore -t 10 \
+	--cidfile=%t/%n.ctr-id
+ExecStopPost=/usr/bin/podman rm \
+	-f \
+	--ignore -t 10 \
+	--cidfile=%t/%n.ctr-id
+Type=notify
+NotifyAccess=all
+
+[Install]
+WantedBy=default.target
diff --git a/deploy/systemd/pod-futtern.service b/deploy/systemd/pod-futtern.service
new file mode 100644
index 0000000..3189e8c
--- /dev/null
+++ b/deploy/systemd/pod-futtern.service
@@ -0,0 +1,42 @@
+# pod-futtern.service
+# autogenerated by Podman 4.3.1
+# Sun Jun 23 05:33:51 UTC 2024
+
+[Unit]
+Description=Podman pod-futtern.service
+Documentation=man:podman-generate-systemd(1)
+Wants=network-online.target
+After=network-online.target
+RequiresMountsFor=/run/user/1006/containers
+Wants=container-futtern-caddy.service container-futtern-php.service
+Before=container-futtern-caddy.service container-futtern-php.service
+
+[Service]
+Environment=PODMAN_SYSTEMD_UNIT=%n
+Restart=on-failure
+TimeoutStopSec=70
+ExecStartPre=/bin/rm \
+	-f %t/pod-futtern.pid %t/pod-futtern.pod-id
+ExecStartPre=/usr/bin/podman pod create \
+	--infra-conmon-pidfile %t/pod-futtern.pid \
+	--pod-id-file %t/pod-futtern.pod-id \
+	--exit-policy=stop \
+	--label io.containers.autoupdate=registry \
+	--name futtern \
+	-p 8087:8087 \
+	--replace
+ExecStart=/usr/bin/podman pod start \
+	--pod-id-file %t/pod-futtern.pod-id
+ExecStop=/usr/bin/podman pod stop \
+	--ignore \
+	--pod-id-file %t/pod-futtern.pod-id  \
+	-t 10
+ExecStopPost=/usr/bin/podman pod rm \
+	--ignore \
+	-f \
+	--pod-id-file %t/pod-futtern.pod-id
+PIDFile=%t/pod-futtern.pid
+Type=forking
+
+[Install]
+WantedBy=default.target
diff --git a/deploy/update.sh b/deploy/update.sh
new file mode 100644
index 0000000..4d7548a
--- /dev/null
+++ b/deploy/update.sh
@@ -0,0 +1,8 @@
+#!/usr/bin/env sh
+
+systemctl --user stop pod-futtern
+systemctl --user start pod-futtern
+sleep 2
+podman exec -it futtern-php /var/www/html/bin/console cache:clear
+podman exec -it futtern-php /var/www/html/bin/console cache:warmup
+echo 'yes' | podman exec -it futtern-php /var/www/html/bin/console doctrine:migrations:migrate
-- 
2.39.5


From 14bb4a15421fcac9c07c43a6ea6cc9468c389896 Mon Sep 17 00:00:00 2001
From: lubiana <lubiana@hannover.ccc.de>
Date: Sun, 23 Jun 2024 09:21:20 +0200
Subject: [PATCH 4/4] update deployment paths

---
 .gitignore                                    |  2 +-
 deploy/install.sh                             | 31 -------------------
 deploy/prepare-deploy.sh                      |  2 +-
 .../systemd/container-futtern-caddy.service   |  4 +--
 deploy/systemd/container-futtern-php.service  |  6 ++--
 deploy/systemd/pod-futtern.service            |  2 +-
 6 files changed, 8 insertions(+), 39 deletions(-)
 delete mode 100755 deploy/install.sh

diff --git a/.gitignore b/.gitignore
index 62752be..feabc44 100644
--- a/.gitignore
+++ b/.gitignore
@@ -20,5 +20,5 @@
 ###< phpunit/phpunit ###
 
 .idea/
-/deploy/futtern-app/
 /deploy/var/
+/deploy/app/
diff --git a/deploy/install.sh b/deploy/install.sh
deleted file mode 100755
index d4b64b7..0000000
--- a/deploy/install.sh
+++ /dev/null
@@ -1,31 +0,0 @@
-#!/usr/bin/env sh
-
-if [ ! -d "var" ]; then
-  mkdir var
-fi
-podman pod stop futtern
-podman pod rm futtern
-
-podman pod create \
-  --label "io.containers.autoupdate=registry" \
-  --name futtern \
-  -p 8087:8087
-
-podman run -d \
-  --pod futtern \
-  --name futtern-php \
-  --volume $(pwd)/etc/php83/php-fpm.d/www.conf:/etc/php83/php-fpm.d/www.conf \
-  --volume $(pwd)/futtern-app:/var/www/html \
-  --volume $(pwd)/var:/var/www/html/var \
-  --env 'APP_ENV=prod' \
-   git.php.fail/lubiana/container/php:8.3-fpm
-
-podman run -d \
-  --pod futtern \
-  --name futtern-caddy \
-  --volume $(pwd)/etc/caddy/Caddyfile:/etc/caddy/Caddyfile \
-  --volume $(pwd)/futtern-app:/var/www/html \
-  --volume caddy_data:/data \
-  docker.io/caddy/caddy:alpine
-
-echo 'yes' | podman exec -it futtern-php /var/www/html/bin/console doctrine:migrations:migrate
diff --git a/deploy/prepare-deploy.sh b/deploy/prepare-deploy.sh
index d8c92fa..5bb412a 100755
--- a/deploy/prepare-deploy.sh
+++ b/deploy/prepare-deploy.sh
@@ -1,6 +1,6 @@
 #!/usr/bin/env sh
 
-TARGETDIR='deploy/futtern-app'
+TARGETDIR='deploy/app'
 
 if [ -d $TARGETDIR ]; then
   rm -rf $TARGETDIR
diff --git a/deploy/systemd/container-futtern-caddy.service b/deploy/systemd/container-futtern-caddy.service
index 2c7e3f6..1067128 100644
--- a/deploy/systemd/container-futtern-caddy.service
+++ b/deploy/systemd/container-futtern-caddy.service
@@ -26,8 +26,8 @@ ExecStart=/usr/bin/podman run \
 	--replace \
 	-d \
 	--name futtern-caddy \
-	--volume /home/c3h-futtern/etc/caddy/Caddyfile:/etc/caddy/Caddyfile \
-	--volume /home/c3h-futtern/futtern-app:/var/www/html \
+	--volume %h/futtern/etc/caddy/Caddyfile:/etc/caddy/Caddyfile \
+	--volume %h/futtern/app:/var/www/html \
 	--volume caddy_data:/data docker.io/caddy/caddy:alpine
 ExecStop=/usr/bin/podman stop \
 	--ignore -t 10 \
diff --git a/deploy/systemd/container-futtern-php.service b/deploy/systemd/container-futtern-php.service
index cec0498..e6f139c 100644
--- a/deploy/systemd/container-futtern-php.service
+++ b/deploy/systemd/container-futtern-php.service
@@ -26,9 +26,9 @@ ExecStart=/usr/bin/podman run \
 	--replace \
 	-d \
 	--name futtern-php \
-	--volume /home/c3h-futtern/etc/php83/php-fpm.d/www.conf:/etc/php83/php-fpm.d/www.conf \
-	--volume /home/c3h-futtern/futtern-app:/var/www/html \
-	--volume /home/c3h-futtern/var:/var/www/html/var \
+	--volume %h/futtern/etc/php83/php-fpm.d/www.conf:/etc/php83/php-fpm.d/www.conf \
+	--volume %h/futtern/app:/var/www/html \
+	--volume %h/futtern/app/var:/var/www/html/var \
 	--env APP_ENV=prod \
 	--env APP_SECRET=UwUtHiSisNotSecurePlZcHanGeMe \
 	git.php.fail/lubiana/container/php:8.3-fpm
diff --git a/deploy/systemd/pod-futtern.service b/deploy/systemd/pod-futtern.service
index 3189e8c..10a8fb0 100644
--- a/deploy/systemd/pod-futtern.service
+++ b/deploy/systemd/pod-futtern.service
@@ -7,7 +7,7 @@ Description=Podman pod-futtern.service
 Documentation=man:podman-generate-systemd(1)
 Wants=network-online.target
 After=network-online.target
-RequiresMountsFor=/run/user/1006/containers
+RequiresMountsFor=/run/user/%U/containers
 Wants=container-futtern-caddy.service container-futtern-php.service
 Before=container-futtern-caddy.service container-futtern-php.service
 
-- 
2.39.5