From ff2570df89cc2e492183786600244cb9bc542049 Mon Sep 17 00:00:00 2001
From: Stavros Kois <47820033+stavros-k@users.noreply.github.com>
Date: Mon, 29 Aug 2022 02:41:44 +0300
Subject: [PATCH] feat(wireguard): add standalone wireguard (#3575)

* feat(wireguard): add standalone wireguard

* hmm

* try

* empty space

* configmap

* formatting

* mount

* full priv for testing

* lint

* see files

* lint

* actually mount it

* see content

* allow native helm users to pass conf file directly and update UI

* test secret mount

* disable /tmp

* default mode

* hmm

* lets see

* defaultMdoe

* root for testing

* configfilehostpath is required for scale

* fix def mode

* string

* render secret

* quote

* first encode then ident

* octal

* try hostpath

* rootless test

* fake config

* test normal run

* root

* rofs

* fake key

* fake key

* add keys for ci

* remvoe ci values
---
 charts/incubator/wireguard/.helmignore        |  30 ++++
 charts/incubator/wireguard/Chart.yaml         |  26 +++
 charts/incubator/wireguard/README.md          |   0
 charts/incubator/wireguard/icon.png           | Bin 0 -> 31488 bytes
 charts/incubator/wireguard/questions.yaml     | 151 ++++++++++++++++++
 .../wireguard/templates/_configfilemount.tpl  |  23 +++
 .../wireguard/templates/_configmap.tpl        |  28 ++++
 .../incubator/wireguard/templates/_secret.tpl |  16 ++
 .../incubator/wireguard/templates/common.yaml |  12 ++
 charts/incubator/wireguard/values.yaml        |  59 +++++++
 cspell.config.yaml                            |   2 +
 11 files changed, 347 insertions(+)
 create mode 100644 charts/incubator/wireguard/.helmignore
 create mode 100644 charts/incubator/wireguard/Chart.yaml
 create mode 100644 charts/incubator/wireguard/README.md
 create mode 100644 charts/incubator/wireguard/icon.png
 create mode 100644 charts/incubator/wireguard/questions.yaml
 create mode 100644 charts/incubator/wireguard/templates/_configfilemount.tpl
 create mode 100644 charts/incubator/wireguard/templates/_configmap.tpl
 create mode 100644 charts/incubator/wireguard/templates/_secret.tpl
 create mode 100644 charts/incubator/wireguard/templates/common.yaml
 create mode 100644 charts/incubator/wireguard/values.yaml

diff --git a/charts/incubator/wireguard/.helmignore b/charts/incubator/wireguard/.helmignore
new file mode 100644
index 00000000000..77ca5567b26
--- /dev/null
+++ b/charts/incubator/wireguard/.helmignore
@@ -0,0 +1,30 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
+# OWNERS file for Kubernetes
+OWNERS
+# helm-docs templates
+*.gotmpl
+# docs folder
+/docs
+# icon
+icon.png
diff --git a/charts/incubator/wireguard/Chart.yaml b/charts/incubator/wireguard/Chart.yaml
new file mode 100644
index 00000000000..26d56c7df70
--- /dev/null
+++ b/charts/incubator/wireguard/Chart.yaml
@@ -0,0 +1,26 @@
+apiVersion: v2
+appVersion: "10.6.2"
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 10.5.0
+description: WireGuard® is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography.
+home: https://truecharts.org/docs/charts/stable/wireguard
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/wireguard.png
+keywords:
+  - wireguard
+  - vpn
+kubeVersion: ">=1.16.0-0"
+maintainers:
+  - email: info@truecharts.org
+    name: TrueCharts
+    url: https://truecharts.org
+name: wireguard
+sources:
+  - https://github.com/k8s-at-home/container-images/tree/main/apps/wireguard
+version: 0.0.1
+annotations:
+  truecharts.org/catagories: |
+    - network
+  truecharts.org/SCALE-support: "true"
+  truecharts.org/grade: U
diff --git a/charts/incubator/wireguard/README.md b/charts/incubator/wireguard/README.md
new file mode 100644
index 00000000000..e69de29bb2d
diff --git a/charts/incubator/wireguard/icon.png b/charts/incubator/wireguard/icon.png
new file mode 100644
index 0000000000000000000000000000000000000000..7bc3b43223af62eb5a56c2a06e91f2a9a8b54dbd
GIT binary patch
literal 31488
zcmeFY`9IX}_dl+BMp|gGCaDzJL)I)Qlx#7^zGcmxEjyJKCX$30QMSpDeP7$gHkRx=
zH5gmb#8}4mJ&#`Rzv27Sr{@pdZap8@cCK^X&;8ubnaJBZH;x=Ud615d?uf=sRed_T
z{|f2o_MJIE5C0<h1G^XgqPNk!p-Q)l{P(U77e_}ISf-(>V&FggYs~L8k5P!sPVCfE
zal+rwnT}wxP=Gi_;2fU{<B!|6fv1O0w2Hl?W8BkoozeQtp87p5GadOy2VXL%?qy~^
z&vNX*e+TwFI~jOH>T)<^_Wr{h_rz%1XZO&T3jKB_R@7R~)arJ$c%E8noAF*7uaWe_
zAiMd0fBv5Z{(rFmhgf*J@r3($@UOXJSch}@6aCb3QK<@|z+!*)`tGnnS~8K$=*Ehh
zW^qeAw=3+1k*x0hMKkfjG%V@=s(1Esw)E@^b68R~TB@CIaP*kREpF~o-lWVwD@S{$
z4fT$eX?t##=T}VQhljI$zI23!O`aj$^<#pwS^xK26mw*(H~WpyCVyFu+y&fvMn2|-
zpS?nfHf1Y?gq9;*8D>dq6{t@_nZHK;;{3UFF_99TLQ?j|_}v${?}y(0BHf3p$O#BG
zl44HQZnto3B~OWx0<WCQUS%Q3$0P5k@Y--YHfC(|y#8ptHZ{kMH9SOD>1{m9`@W9n
zT!hEXkA|TyQNelIlx$I{nqfhDH@vPJYE;Rnum5vn^nigIatF(^+0treRF9EtTCX|5
z97~FpBZN(}un+s2_N5GDktO8_*bx@TDVCU|99r0SHFJ+b--Tm>tT2?rr3T~nY^Ha&
zJwI<(7DpShz!=R4D#fC<zBP8;ocfzWa*-o6_~i`6=lXjY^@qtCt?Cw6?T3+3DZ#%O
z2U_bYr|XS+J7)E3J9`Xl-x9r?JH|HyZKlknncL81zJ7YH-;co8pOUdo$&+4vTLtA9
z$KNBL);+l7i^bTdC6rQgX}i;csiUj&S2_*Qx&!brosa{JYettzCARNd<IdcvN+I3i
zk}7Tv&ILP^V^nlJE8cGJsE;B05N<KQW#kb=ee3O9K4Z|}a;-C0UKzLUphL+@A=&=B
zB9CACwZ)q4`R3{aS<T9tI_<0Fn4Z<deAm?RtmZ0wT8ZDj!T>cL3OS^}I8+q3-v2lh
zO~Is)yxlm(h-d|8KB~uka)QW>`Kz$rkAcJG?us_$MicmtHs2E{<Kp958(xX?6~98t
zK8ETf&g04jPLF0)28m9tIb<iF7=i1xcpg-UyV&2p8i*Ffa&;PPE8j&aoX6d*VX0Z;
z4h-ALtPLH^CXZEN8k|txt>Ay$NF+FM_cqIdBd>e6Atf^(Q$c1?e*2C;R0)gPPS4Nd
zxs=%Lt3Frni^8V=?(=icmHntmX${f!un;G&{dy%z*c|R{E3Kn-jP>?P`CNkOqH++A
z`GqHsBgYchX$sI%?v(My4EPA_q<>s+3s0AIeZA<SwEEcP_egJ`p$_E*<6u;+FpkV?
z!C7MA>^>8J9j4*%bVF-b<S3QFRiuz?uxN((wEF_%6>H|Xl_REg`jrMSQ69{<$#iRX
z@V`^#VQ^iBW&|fmwC{BbW|-l+yRKdyRsb94%{f*-Ky<w+(sV-EKDbufQ$0U<^F9h|
z^V->FvzOv)Ce7R_Fb<DPY0uh%rW_$j61~ful7`&+^~~Ibi57HQnLtO;&r-n+XPtJT
z;o^Yx)z|KqFJh<}xA{ki64S*2s-lyMC;r&=r>2n7%?S-<IZD2wS=~4Hz!bTz`M=U$
zqe>KU>#hHJoDT`QxpM{HT5Xjk73CO2{dj+M(}-)8mXzeI^Q-kuyFk6<*)p$<@#q>_
z5$=Yo#3PvE)4?PW84JIOA@#I17K2|c0`=YT)P2Kv+E~8x>DR>B)zr1Vl)6T%nVL*Z
z%0qaXI-W5}`1vC)+P?+MxyKWzb;A<lS5$nx?RBWnMg(=Rzo}tgn-N%ecK4{Kk0_Rb
zjCi!=rs=J5ad>&Otc7yVNvRQh*hsnSjs(shtwWiXst?_bN7ZJ2Ojdpidp*@?iq+W0
zP8Wy%ew-5T+ZQa4qdCdhlpJG#Y1!Uuwzqp@*k@Q~M&8L+8hxwAhyJ|g$gQ|G+%vGK
z?_HBZ5~y;vOeC&1p4?dr<;VGlh+_HMGI!eVvyL$FBn)HWyfTTDM<G`0*vymF>Duiz
zBP`4vO{w=pGLFImznaW%*^5p_)}Qgex#4Lft(&GfH_zbRUZKlv<tMP1irW5_LUP;e
zC^3D$yLf20xAqEPP8EJp;xN}mfW>Nw)Fjka=YRcOPXLHIv&s2iOREmRye<w)M*l7B
zCZfz;_c?Pi`-@?32-`2;DIeGcyxozL>TDMnPeYkkO6%?;a6Nmk#Bl6}A6midkut|0
zWe5olLG2!#A7P$17ZJRx5Lg_@T7S@<&8o#})rR(-P|?e?`b)2)cS?H1B{Vme)ak|Q
zZNcgRmtNn!``ZFD_SK-I=DE#vGpV(foQ>xH26~?j<2QQr*1ONcq{2h1#adNS0I(Cq
zpG&J5d@Jlj3KZ3f+^ZI+ttT5@?&nkmU`c1?)J6>3iEH)r99FFYqVm0xb;HFQ#5*4+
z%jYM`HK}HN>tFXOH|GRc8V$%?!h?%mlCG|<R}r1uC9@<BYMJ(IIT|%8CVKO_D1oWG
zhDIxq(3Q8;hi(stI5-UG54bigsI#EIr3UM{^^Niy^;uL`@4R()M*V_VmT`MPjv5Bh
zi&>6ff5KGPXmRt}EYA_ZvoANnJwDxaH%D({$t(q(0{Mjjmkl<i-q)Kpi<Jtz{f?#{
zO8nVUqSxU!B1nHIgz*HN`{^yCMs6>R-{8fQwBQ_V%2C};;h5j3rUALWEBwK{3+WKD
zAYvDsgKs(HkuZ*Kuk*&l3~`*SN*T!}QxI%2`1_uC47*k*5wrnjWrb){iry_3gh%k;
z{rBw3kbKe!=|}2H%8U9XF4=hZ4|rw^u+Oaiuhbu3$HOSC&O-|KjEa8WLxaIS&3l-~
zdp4yc#|*A>5^;{>qY0i(eX@T-MyHGGQ97Ra)tG|&0z0GXY_Ox;k~2#L5pT|=qBCg^
zUQ?c!OY05}EqNGhXjX*GuMeXz4TH_jD1~qTJ{Gc(Ch>tsl+mTNeXSb72W)6@R(xmF
zEa9~g#I2{8(gNxeP}{e8j={v%CMluj4NgS=p?V{ta4o-rg|ku|N+El!cEfnA=&|K3
z&lmDEwPBW-(j29}f3s^!M99h~Qle5wIJV*923#?)me>Vae@Cmlf0e6y9*!JR_9xVt
z5o{7(41uH!s7qbJy0I})B@-i7j!uzI)XxcL$`e{pUh(}Buv{c9h5K+EwnCOdN%PMb
zgbkiEO?abO%~De%v3LpaQQkS!jddTj_<Js%YF3W(;YGN}r_SHM)?~;mVM{qjO*)Le
zc;VB?F5a6Ju%NGiWsVM8+q4`(Q%5;};sXclgwaZMrZ~V_hoa0zEN<JllSo>ub`1@m
zo6GRRFz3YYBR?`HO#J$_R*>xsJK@tBS@38P7<cy+7P`mR&+kCg9_X`YkRDk;S4DYz
zz=q%CoM^URzKY%le!qvlr{_i)T0sa`IhbyoAZJu6kgEJ9Rp}OvyH-?6W+3MI6`tJR
z)QS(MU?1Y~#PvFJ0=vi~`~82r^7F%PB#L;R$aOwFb+}q>nv^o{$b9aFp(5<T*2b|R
ztSleHEk|HwtA{=7K!o90pa1dR!zPQCGw<Z-gi7g&_tfn}HbHU#wr1YQE`0yl!h_`$
z5_c7*%DkU>p|$cl;(*!G1Rx$06CtNu#{$0r>aly)CG|F#h%Q|5MK8aDvzMZm|3V!0
z!g%D9I{(b&W0bFW6BBrShyJz*q`pF#XWw88S~OkOEvd82dIZ~3Z?g`heaMd*3Q0?^
z_+&9+o{Xv$No+p>_mjaoMkfb>8CYo6N0Npd!Nm(xAUrX2oibs8ZYb1l7m#<IZhP(d
zT$+GeX;1e~y*>`lLH(xDKtmiVc>K}*_T|s8cZ7rW7oYxH#Bc6`5SUz2mmJ}F4GYg*
zR7xD6=clmEHE+z?42xL1y@Dr%$IKGL&eU|{#N2sNH|Oz>F>F;`rUWzZZw~1Hz(U`i
zkB8`vo7<eNai{{Cz?$LpZsXm+6$jC*1%Qluf#0(4FOzL+a&lZ|vwwCO_AQZF9LX#b
zmK4dXR(}(S_2mNNmr0J~?aEwIY!Jrg?LqKDj&ooSh-dBe-O1A!X@YW_mJ~l;-SEp|
z`r!90^8KnP_9>P$i}wX=<qaGtT0<<*p^$=4FC45AD5>T6Y&1}ePe<<}gb=edtZG^k
zoR>?JK}W{90PAo;dEe5ZmW=c&gi0~7OdJ#MOQ7y{<P4>vYL$#AgzHLl^%(wL+Isgy
zch;cdm+gR1(FJ9_EVvvOJA^YMWbvA=P4nkzk~HBu5)+ML<D7zS$+QY6tqS>4GRmD7
zOW16$nW1|m?Y+Gq+=JC!fSY|JnSlEM9<traUoh)jTk5b6!KEaZ+^96NqK>-gTA2~x
z?0M<jz9GRn6g{q+*W(I?o0Ao)oOg_LJi8R6Jb@zgG|tU%uLL$tvFyrz387Jk@YT_+
zz=n+XTl8(!8__@WdzgaS9{jwrq9^EEi%^VIREpmv-JK{i#VO>edVY>rosEZhNN-kg
z`aK3*#PAbxy{P2@Il{Cw=IIqTjJKDGa@)CpU|;PX<@Mwb6J;e66S6wWyRP4~)wklm
z#B^l&aK|5p#3hQJOU6>tsC~heDcZ1_W%qYvp7`&UbmKHs@SJsr1~DgKTnkNY{C%=5
z%Ye+1c4~Ux_(*YmqBBSu#xK-thLi<x>%~XjcZ~zehTtWO8#Rrn9?2+k`Oc6A1)RUr
zi$R5s0c*#G25}tiEAMEUQF%_%kOd2u!DYDM<J0(RO&!mA?RS)bvO-9lfOKm4#yo>?
z7?0ZeBe=GK5hW}pMJ(vHO1%LJB1bUc9ZR#Xbp&2nhC#NlLPjgd;VQp0c5-A#iTR+t
zmmp&6WX06GJI|k#BaC_VjaF#SJ=UnD50A*Wv89oxC`YL9vY0Sc18_LicJ1CmKd%=i
zad0*%!syThWLac<s%IfY4gm7#V@pJ$7oKOq9WGVaI@{@m3u@UNd*wvDPz_7Ls@mm7
z6|;d6FU+AvYwwMvU^Ny98p_oX3vziO>E0@dBr$rmB1@S|-B@D)dhvk1HAM*cqj~^#
zAqXg?kT#_~&nLDw+()4XzOzOZr;wJKGWi>-6|=aiGQc|Du#jvv{fy@_=@0hG#s^l1
z>q!k(Qj%@&o$l}aJDEaqUlfG*TQtnVJRWqnP@8Kb-hjf>@#D_7ri#sIJzdK#2+sdL
z@q{3dfHHR~Q77vzE4=;kVHm}-;DuLKu;e0Az3Dr0z!-d=-(Bpl5J>g#R%bew`1W*>
z#=s?fwZx*Fd&p3he-@5+58Z>J@|ug%0Ek{(lEo25j67N19B3c};48j|gO<6&qqz#^
zm|!m3s(^UZ@<FUbadWNe+ND-VVxnw4?&oZ14O|ZKgRsNF<>)@-Wv4@-$BGv}<}Xxw
zAI@PfX+LTc6|~|aiE58rlz@}{MaVnRez`!})-JN@Tfmj5V&qlG5iZz{W=xEyc1Mpo
zfz5r`-H+XvVezP7<bC#PC;~gnr*48JrHC)}@c5v2vlqeBE~R6Qs5P#ink9m%zdC(;
zr)KAA^l}8nVSH8R&Of$qkXHTL2dz;2kyP5JqeJ<~INQeqjIZh-c$vE6vh$LVq({ld
zIpQk`%XhhrVQsT`f7pJ2lydh5#T7lKj`-8phNENE)Cg$;R(Q&eGwl=YLB~leNcDk$
ze(Z1JV=uKI)w751uDc+Kv4Exh9)4oonQ?dxK7;<P$FLwc;Fl@1^)Fg|yZibe;Xb@T
z?o&3cY`JCUfS1!tj4l9%yQIHenL=us4+)k|t<wQkeK;Om9`fCwL((Qi27MMj!|NkT
zzQJ#a{x&)kJiMQf0^T(0^Io0~0i^^~u&@y&5+ExqR#pbL{<&aEf4ijI(Wd=%dy60!
zT+Bf?X9wY4JA0WzlAe6@bYbq`eg7KZA`J=n<WxvZQhxVUIHN`jwA&|Z@S%6|Ny=Ur
zp1H4CVQ&i|TNDJ?Hb%)2Y=ytuO{122-SQ~LYk?t^Q^8?K9KwL_mzjJ=w}*IRgoHcn
zSpU*<H<>!+l9dAgyj&gwQ3Vg|$as3c#csJAfxu>8d~2gL-&Vv&yQfp2qbHpBQlj27
z@Eac*;4-g+j1~*Mf|H$iq-7|sJO&=^!;|X-$+kCsB5OB6YBwoH@uw;N5KO2C@=vpU
z@Yi!%hF6d{z0ahNBHE|h7eq{xmRdTkrOT7`1-8a2K1+SkBB127htDN8Ny7d8Arlcd
zXPp)S(Y_#|IItv`-v~VJQ}Hm|nHMIk=+7&3$9@aUny<i)s8OHc+h*t4bNPv=t*g5q
z{W}m@=TmWO&bU+2h1}Pj73jmrv$r6WfAxip-uPyqL$MF3bY`eg*6RZhC#GvsX4p)N
zzigOdNl~NE&E{qMTk~y3euDZzoy3zt$~cV&`^tW6&n4dn>d$6Uythgrk?Qi+jc|#B
zg+MEJw#*kBIIo-pN>|P`co`b^d#MyT!kTctUD7hBUfhuMFBG4h=uJvh!n-7gBJhPC
zy8!x34NF)oN+C-#)|*odJaaf}@GYuV5hp8zqgluin!GSEWdcf|XRUtD)@*kST@9-d
z;~Cyus=b9L`$A#`attNL!uh^$&QM<hrJ~9;^%A6DE_%w2-?|_Z#mNl(B|i4-fCQ@=
zG&$qfp!@WBv8ELkzOrvyL-Hq;0>3CGvmhj`>s+NZbOA-MU=8ax6mPcQn)t`s#6USY
z{nNBY0!OZbF!Af^z<ca4%ceAOWp+3$>CZldvik7T(cSwFwEK?A1tK-@wi%%W32!LJ
zkN@HU63nrr&s9<R+LXo+E`zu~&VR0u^#y0@q#<ymkVXQ1KBRu5Jwrms3}8M(Q2<)G
z|JtpDvx!qIj-sUxKOOY2jQ4zYEbNuD+~1y*<e7HEJ~xC)x5aPARSWJ2<JRAurrIN>
zS4IAp7e-Sged?%pziYuRm%Q^4nRLV@<p_R#=~33AF1b5yzTyyrtq_$1vQGb3*P8<X
zFQ^B<A9b}xi{nn)KVBZoccRI2($TG7KvGv73e$5wllk|c@HLD;p3|%C;&Ie-W!z|{
zH#=(m{UX8$G61R57FzwY_s0ouXhcdZzI*-@pSF}EYOmGtHSpmJKr~GHMGRyYQ!I&Q
z!Y#-Db|C3q_1$LaLj4j=x7Kx6o4&C0+&y&GUqI}N?`$R>_X;p0SR*o^+E;$uI=hsh
z?dvpz(#^X<Hh%kG4A`n6#0pEy%oNwhF`cxuz~t%J=jjvpJ4TDAZ;k<&od8)?^$@R#
zUA-KLAl-^z-2l|Yah3XYt^Qd7sf+Y<4>U$<@%WE&1T{9*;)vjy+y$=L)MIlL77wEm
z33sb2?E;JMYhYK`4rk+H=Jl63pPw~R?eL~=zw1P#h2@%Yehpq)nWRNCF+g7P618mp
z{EUgJ=mMU+=G$=>Ast?rPP`RoQ$ZRN#->gbz7p@xuB<EZv=g6eebXnGkproh!B>eF
zPN-#nZg5oF`Kp1`deCt52{FRX`-BJ#!xB5viS4|@y(toA?$wLdKp%X1|BN8v6cdBD
z<@{<stEB`m3K*y<5@?s?MW}E8zS}0yF%RM;=*{_2j%2~pec6>0uFi|{X6TBf=t>Q2
zHzP0uBwL#M)+Yu3IONyR`!Q<7h*4SMBIc`)9LRn>WHfq=U~}W?dG=o;TQnbRvfm7n
z;ak2!mDC}UGpFCLbNP-XE^;yjZ-e+JX&CQiALI;^#r}$rb4*Lr-znnded96BvecOq
zswcYetQ`cQ+WJcWE1TQ7(=2HyU5TevrN0Rt3tn)5XGii_!aQPmZCC#rFp=xiby*0+
zGAYZtA&|SCLyHw}!@0Tcqx<v$UIg`Ru<z|g1uJ6C_z)-$^XvPf7=o-W)T_1wNdRYj
zFP_-lH^MSwJlgy%Gb(1rK-uT}0=MmdgAMsnSEg8$4aFoJs{Hv#G<nDb)o<t9bfl~E
zU7jgJA4YN<;>|w`NW}mY@Ojln0XNR2e^@UIM(HM_hel;_m2L37!h}n%e>Z}c>QAhs
z0m$d{YxSd>jolzAG(h|>qxg~thH8OfHg1d9Qm}#`Ha=T8(Z0w)W?{!4<BUrQqj_$t
zJHnX`Kyc4gi)t<itGfq+fqKMt6sPa@6*+=YUqn=si9glFR|?{8)jyF0Ji|sc|L>Dx
z79PNU$H#B1kZ|dSk-@Wb#w`~ven8$)#B^`%7n0i4%tojV)z*)lK%epT;co$quUubD
zyMQSAio|@uk+dp%Vr=zEP-MP?EYU2GUwZFY<ROq(5%uXLCz}T(dmvL}%fE`%Vb$$#
z2U=qX6jKSLT{aPkpH-!r?V`_Q#lAlEM^n8p6*&S>%J^msS<iL8MCw;zL%T=bYKb;}
zkim<e6y_;lY2`=>Tf6lZvViN5QUgI>PbFZqtn=IKw}<odJ*>|g%WYcf?o<cH>9rvg
zhaF6F6eRD7b838xLbd|qy{n{(Xu90X9j@cSuKCFWIf|TBuPGFWk^=;QwWq*^1L|(@
z{fd9LHeFp`wrIsw<$C%JYRf>R^=34e{Wjeg1ZS5I+7$KYCz4*)Hb4Sg9eO~zV}VBR
zhSAN@;C!EQB|_G8Z7<!Ylg+*%F3*p1ZW>Sskey{rJ|iM&wlsm$*+8A2+T$Y%jG(yA
zior$6M&+DsO4^ix@_j^5;#RI5F0MDyq3ojy^1fW2(HHa;K~gl(8`*dz8aJlQZw++K
zW!$-8!84KNpH>}z%s+j3cNWZMeBu8%s?_sioXf#tNHFwwg1plk(*&ANna~15DG+<u
zjU+a?rd+^%0(36W4Yq%UO=SDu#LlB?43zUhhOS|e!_m}02_>_5xD)-C#w8K{l>p46
zBPVoKtLK#CYm-_Py;J2&N*4L|?IXPBT&w1)<w4ytRMDYuJU<%CN(`{*8y&e>a@nn~
z!42R@{?#3AGbyow95C}2vVL`-4#f?=i`Py}w&<8JO`fp~q78$-&>MT$Ni;17&oyrV
z2U4+c-f1OWw~N<r3~~snYi%yM{O>}{-zC_scYJZ)(Rc=?J~*^y@HK#q=Ui^GH<Y^U
zc)xeI8T1|T#^~nqau%BpfdVjp8)n;sFhzOQ{_}~Dl|I(H>qHM~t-y{BcgwvxKJx}O
zKbT7btC`a#5bE4@w)p8Y<wQy`68NKTYK}fGNZy2(Z=flmz)&4@5d0tkEt*j>c$D*L
zi8twlw}3^{htgi{JZE_bsiv>aws84efFvv~DO(PxZqbvc&EKa0OoL9oO>nr)^2}EN
zvh*y|S7l0vTo9ru1aFRWs@Jum`6y@o6OY7m%mDa$&Q8@Vew_lLaNOu+!7<>@&+bkn
zGQ8#FmH5V>Qh}A>aVa$=(T99<fX8ui<}dKkYLEh%>^+SL6UOEdhePUL5y_3}d0BFZ
z1O!y+_Ko5Mp1a>8;TlxKEtfb71|p)gL}y!Rd(`u<4;6YWVo@mt33f-koFMVBfCV+b
zXVE;_SkGmw-nvubf`}37g;_~ZFyO_lXPUl3FO5k!_@052c7ssz66Ia4_N4hHIpfMa
z&7XIu8;N_)sFe3F?8+KMlMyZ<4{|-*or&DbY%J$8uuE+~I-(q&U1Cb0rcJT1f4E>$
z_PYIq&uN&@;b#KrI@^hJ8N0qENZ|}hml?zQGDXQ;Gb~nU&0={jV@mWtatdFcdOTzq
zB6Nr`)>EEc=st5`oo$r+|EZ*YW#@BWZ!X9K5j_AXXL>avYAlZ13hI1)2P!Tj93}DG
z42uz--{fcT&89tcpY|X;fy`oL3}4Qi?Xoc0eIM&SS6#dV8SJ^T^Fm4G_)wz?_;9Zm
z-pY=0Mxwu}Sljcd_kE^2CxoPAItA)866^@lg{}TcI{WAz1hg5T#c-A1Nh)^dECqr)
zT?>pjHxdxF3IrvTX7RNuf6**`9LyJ5iasoSQk73|21(?)Je;aQ!<u68FuYML!DICy
z4NrtRpb=tIDE_*1oskI84V)?teWQ0T($-P$R068jn7ifR)B>C-TohK$9rU|Yv_HK0
zTXp~es(TqfyGzk2*-!1NkoP|i08}|o%8gnx6^_sfRvOCod34Ov$%{4SFRPJB|JPAe
zt)3%nN=fqA0O<0i#z$jQNVS0IL(P@nwDVZjIw1_)fC9uXgu!&|rF)Qm(aSm2CHBlY
zqZU?+A%zeSz9g@S-qHGquR*Ss*Ch4pD7K*+O-H9y`;Sj!mW7Y2vhCWb>QJ@;VL+mX
zSl=wrL5r^qnb_U>F&>sJ2f;f~$Ma`IZT(92KafywB`iS2NUy3>Vr63<B!C6b6!?N-
z(f!PYvPXwH$p)NO%>v`!vt=_tvUJ02PFs$80az+Sgq7<Z$AT*3c8k9a(nkwS4JgT~
zMuZnBq%=T_85U*kS1y$4s^YL$U0wo{E~960l{b}J&MH4aH*))cS`t_H=@v!l`M#t-
z!IHT38Kjbnlorr#+=v)^d&RM5#Sy>5GsU9YB48PZ+5!!2<D_}UA@ChrUNWf+>Y~y`
zc5?N{@mOG?#v`ceSha^*KU~6=I?-*uK<RsUrK3$Jn81BO$atB%j!hxG%?<AFPD1hw
zE=6|73BD-;O_%AcGN<aPkH{o9p+3pBUt(2Y^3Xqta*e}v)W6+xVG?;6Na4SZ%e4K5
z7e>f%_3E6zl}wpH)Vt>(Hg`$|2I@5Ohh;)X&l_3Ln!GVQrbnA)Lsi6#C_EN;o{Eh8
zn6%RIRLz`UfDTA~o<-T@z01~b^MMNKSE7Go=+O$d!dlNxS@{6uoWMaHu#Dqn(QxT4
zN(ZznxTne2_y24d{NN7BGGtU0d#%3J<UtZ{F|Foq6W=vwWMU(l1i~;fI<D+te6pX}
z;bx9guEF<>q;+`+C3%KsGE%<LP;!1r^zW2t&|jaQUKgCq9Q;RJjpi&&hK0JQU;iyW
zxe}o*6r%H@`5^fV<doxv+ars>RpbLH2oFOS0am5iSM#SKg-RcL=8hz@@>6p$2a3N*
zZjWb#g8?|8lf&dd^8xaRoK#pHugxuXu?h8C(0GuNyZ%jLG;J9Q7<2g3Q+zf(rv|cR
zZ&(r2trA}h<{@Jb$PsWNd+qG>3GCi@o|=-0hU7(y&z|quD_l{v0=UY*M;8bFiJxko
zZ-fFbg=u{VmBCdSrxDLJedAvM?BcUt#_wX;=p;_&D5rqrU437>F=F5p$)(XTK!5QE
zh&-kRM4RsH_17H`CAQc#1&a4SIK06r#*+qmoA1I&54-sG=n)nVg~$BG^-7SdcwJz2
z==uJBvAEJzcTQa%@`fTQD8I-N2DEqVZ!XV49Fl(%(kxw<yQA%msSu-@=OGUpt?)@I
zHMv?{hho)8XY!5RxMBhLZDT)hsm4sJr<W#Nh~%IDz=hiqkt#7_B0qO5`?F~VM)&Ug
zBifa1{%07HIv0QwHU{jW*~Eo%rknR?IV6_6Qg8Yv4IuO}v~+NDEUP*H$HT^1hZ;{6
zCTT=LtA>24$Qx;RfW-OIT;kal6AO!ptBx<Shb#*q8wq4&SYBGe%<gG&DmdP%lFB})
zpaN|hm+r$;arz>5{Ur~S+57k!{of$nCRyuCYN=z(7~~mP)CDxo_l_#yDo2gaGVGkZ
zv+T|d)R03ILyG6yDsJ3JghJ(PBjptmpnyRttrxHwg1~IkUI4gGxyD46`UP=ZrwLY*
zMl|fA*OD%(2@5Y*ft1O6w#gK?(sUq6X4;vH^`HFbT&>&HRj>0?iR({`t~2?Uo0}+K
z{Wp5pGQ{yjhzVBGbbg>C%V7RXOJSWb%7|db?)kK{feE19YkF1E9p_&tuFB*P)d$os
z>WCH3YpG@eFz>#QI7dL$k+rNZ&zV<Gr6D4O&>HbRJK<>xsig6^+|^K$hC0~(3*e#{
zx$JbTeY24RuY39?pBbp!)e!?f#^oYphtZq%pe07}dmYuiGp11i$D$p2XF1yapOvAw
z$6Xl@CBqp#7PTUz$ml<#(%)fX$v@huZjD*vG_w1Q;~=h^y#=l`>tT(idTaf$m#Tl-
zXXrT$l0I&s5)Z_%KdYI+_lz&A2UWheAnNDNfwK%9RgIRAD}_<wl1sD~?XwyrWKoSG
zK3s?9@cupklY3-}^nW4BqIps7i%E*~WR&o01c-IO<$c%{?Y(VJ1ewe&=L1EblV<Yb
zC7+ffJYfjFfOoc30@uzTw1kB6a)0v|t_JF)&q2tZYG!k6tZl@EDq!F3m)kw%qX}<7
z3v3k#z4wFWd_O?MxuDMKev~ekpWRMDKqD3z#4Chb*M)`Nx91vNxre<FqYd3aIN7yN
zx;BIo^N)4a_<)y1H`tmt5ZxaKcJo5SlqnXY<X+-IS4(@{#(N)zEyFZLC%G7QzL+lG
zGs?Y)=n2g!q@cz#Nn#-A6eA~EVS6TU+Vz?ku|5DTtvg^LJR*xm_rUvPy6tCFY9As7
z<Gk>GC!g6p9B|*gl?W?6I`q~*nz3%M)<#RZNHiHvlDy&~b;2`5x4(670Pfg+x(Bhv
zpmtBO%p|oDCCCEu&sj&l%~LC&JwWd2kyIHJS|(-1B|dkZc`~-GqU#?}{Tn3?#ae9h
z^8tO13*Pp-nJJ`a4C~#)a^3>*C+Z$TSd|oQ**i)79mNN}7zKJjax<|wIJpkf<HM3G
zdw&dqq}@;LJn|S4qjcw`l5_BuI-W@s4YG#Ic{r=x6bsMg$i(Y9tlrg;QXCCC7jcy~
zKgCWoPUx&l1=fh)T1}&URfi~`j<mtq>UdUZ)Sj}jltk*qm@=rn6)>&)SmSly_Ac~f
z`$vf1BDYK<!o3p<Og=k}uPR`yJ=N_JZeQznNipQLyUoX6fc*@V3w@eM$BIU+5-6zC
zE{}^pnRr&nfTDY8i_2KR(q^yNvzMI+ht7>Nb^$K@MpP<I?rL3Vg-h~|>I<rU@TmWV
zP2J@IbzrPdEwQ9iaegK?^?inYrJ^>*Z3)<Xpvry^szaKr_geY6p+c&~HOVd5XaMxX
zYmc(=+1jJ_kySp~QD(E}o@zstnjzRCKZ;*x*teywGRqUbU0XvaEd$8#HQ#fS8ImfA
z`rSab<s<GOk|e{2pU=IAM*UyqxBO32-QOrSWQDYLMFS`w{+L3_;#(|!T>IH-fztue
z5}_wh{wjBvJ5p?pJh@EtkD+L;Zr+FlmyHE7cy|1gbBDBNq8eFqWAH?NRuBh`@)2JS
zTEgicf97Yj2j4V|aqw+Ue8OAZ?FBvXB2?mJoZ$0E$TM8LV^E4#n4^;lfi{~pK1Wo+
zhE=0@5`Wrd8!%|fp(K_ynLCMuOb~YDpXnhY5U8cbh2;=FAuqVZIAB{okQ-$$p)1M*
zl|&9uBRJ$ieoZPQp8G33V=0aqt{#ViPx%kB>ySdQe*O&|3io7En>SPc5|=o9T(73Z
zX?5vNVtCsIbU}4XMd3jlX81tyW&jaNyP3X!B+99HB6?IX)vgpa|G__6m2GX_T0wQ-
zQY(^fLV0Ch?XC3>k%MhQw*8fS%Td%_Yvjv8wo7Z5O%lUzvF?)lR2n}&?A&(gI1Spg
zX9JTP<{8I`U21SYG;Vz=6qzzT;Y*o66K4kyOw8H&^T?47v{m>HDT5YilUwZL{t5zM
zXOujo>YVVE`?GMqebV>Pq+PbFPKQ9g`MX6c$<@iQZw`~#wkwMRRB2wQ3S7T~6aX+h
z*bl@#mfTyUe*)cM+lq%MsRFZit71tx`0@X?m?{Tl`Il3|sn!`#0l!}CpIe@sNqi`Q
z@OZYyE@(e1{ed!u;`y&I=FIhEPaX2mC;6`zVcWMs{}?=P!Su3Xj-@ep-%Or{QggK?
zWzS?v+w%N+O*A<7Vd9tH1ircA?`P`~Myhisr5!q;4k<k}2Ep*n?rHzJA{}xIb4UOi
z-Ge(OmBHQrS+Mzs%<r#$>?t!C#MGO}CcAG@&vrZL9cI_IHZCCT3m)%;?9;_rG%I(8
zB{At8QK9Msh~M&0G+v@gLh3DN^|uo|cZNoK+c=iKaYi8i9Fq1@MkR5BX(^;$)Wj0U
zGvF}{uNN9-$-S;i`XwM`XzNhQQ|A4CUwJ;4mqN;e@&>3Was-qYwBkUoBqE`CvKpx;
zCS%3EGqW#33y5^Ra?rMcZED+Q%{$kf?gL<t<W~FT199F-{Oo?(Jp&gsWg=v&LB@eL
zDj#$$Kz$hJA`!ZQjJ!-5%ArpI7|5r1%k0gvHK{L4ZM!G$_$C&OeZrHv8Wl{=h)IKR
zURcg$oD&)wS@mlzJ_jHAp2?*4U!GExw`(`?evm!Cdz<EvNLm5~7J=u=L(e4m8a2rc
z9n_L0zkRs@FFkdGBaeb*E%QQ}r_5L5G`+q#a2H2d;up;P1nz_R@+ftihC1!b5c;Zw
zG>4iamCb$(*9Vw~!TGnNf{L%!yZL}8w<E1qa)kYS<l?lgIwrY7$qH9F2^{S`NK;3C
zDnctN)ohrhVgmT{=*RHU2w^Oj*gfq|?vb<_=S7#%xc%PHSSx{?h!6U|9%{gWo}=o>
z6+X>d^lF~QP=|o{bYm(t6lA;KqgDGx(5_d2Qr)e0kwc;DJh!TlGJBCOTj<ByFcdFx
z{Uz3v)`(xqO9R{t#<Pi(C$Y5^=q+q}%RVABv(-Ldho+zx%HGgi79CP--AdDq0`)hq
z{oKc>j!bi5eWs2V)k;b@|7DKRNuoEaH{>W|eH+pOllIGNH<lk4ZH4?`y(VYfxW)_h
zfy3MMhRX$fQ-6gv(vWlO`)wf{2x)@Wq4bE?3|P5C@nY=fc2soEkkYP;L6PmLF!H`r
zmSV-wZ5Z7JqOVj}wrta5^U!J3oTU6D`+Zd{Uv#Z+)Y3-01*R6cxsis_q~+#~pz}L-
z6l8vr#2c@g$hP13x9NXm4`qJmnyArO8x;QKt8EKFkjPCTjWSlP?J6be&*kq1OU|4=
zWRdH+l>|MPlJu>6{#s-}aW%I=Hl{MNrE;q~S5IIZCmCA)P*3?XuF|!*L+QE4RPU~~
zU&BSDxpRMhpJS8Hz6Fy;6}j&`a!9RN61grsl3vDnZp4>_oc<`ux1;fzhg@Ax%^diI
z;KC;<+K#dNup!kuD%|TGB5lw_;2q41c0<T&sWhh&eIPzcwJ3`J%MhOTT{G{6^e}S#
zM@;4T-hr7{MO#U^v?tD1O#V7HK(WI2(pjUY@d0mP?1iN_Q=$J7GQ3qLQ)sHDH>O70
zS+On4=k5OdcHPFme%G8W-!D#o;-N)6d!w?4uCVoa{CWzU^&Is&e>G3*Z11On=`YZT
zc>nmqdx*Px2c~N&TN&zG*yP0Ubqk8C<V6q_+sAR*q-!TUhZ2bn$>d6n-_Oc1{5cN;
zypeh!UjZL}ZhwA@Ow&rt$u#tm*C+l$JbBtd4}2*Z5xn_Gq=j&`SRz8vS?8^P7MuX$
ztz&3$Sthl#;3(u8`b)rrt?P)w2k9Q5%~J?VNsozW>5Hl2ks*bU1cRP~qi1rD^G3w4
zIDIZqG=J}XX58R68aj?NZOof9N$lFQ?FXB>S!Y!?XjE=(mCV|E|IMU+LUMs5RB-pU
zl~(eM&aDt1fyMeyW&U3Ww`+Yv_EAL`l6aEUz$_RpV``7qmubi6u|S`tA1eNFT?_51
zg6{F(d^Y=XG0NCAc>_vV<L?<aVr2#`A-o;L<cpF5U>qmPX)$TW#JcAcvhN9_-JnjH
z>fUWD{dxorId{d2hw48``L_<b4Q8!-mx(Z7q1C50i3QxQ>>>4j+`XZoRNdu28u)Ek
zm)!UHdT9KgfXRjylZN}_%b!|lF-=P|(T*Qn<YostP`eHe@DriDe)|4I?JpN_gC)@T
zp>6ORwEEGt>m96BQ4?G<@=mB==T~e?Zhf`p7Q}O2%>Ony3U3jR?9BrxyT*;F72UCM
zZWy@2hg&b-tQXe36M}?Pt{(Bfg(;*j8y$PN5DkMeG8i3`>m;`>HUJzHev4#HKq$!`
zIO<FPPSw6p&Q70+L@`itV(i}<Y-2_LNbat^+0mQ4CMEKG@Y9Y<31Xg6*Mj=^79hbv
z)q?l6ZjCWZyVp8E2hV1G-o})y(i8ZB!C&BmR5Qf3LE9qECTwez7@C{|3Qk%H>Vx%O
zQ8_}YG+|dp+&68$scJ^3h;eu{=ojdFWGi-mX9}n7+H!W~Gt&e$a@PMwfm*3mZ@)xu
zD1Ya;b12d}ks~*vXqAL3Y|Jr4s%FzH%BdBOfz-E69{X}bljUJ(T6;D~)Ek6bXyv9U
zGiXtWUN}42P=9spaSKN233{MGQnU>EK6pe|s05_Ft*KCXN00mY@`*jbq}(uJm-Zy4
zkTT**oJMLpwk=x*4lJ<0(EGU6v-kOGOw8QUW8EBE6FVh0X>ik4vG4k|?Z_fV+Sls*
zpqb~-ld|}*WTY<pVW71>d`B#K_s9Gju8N((wbrQ%&c<vT|MknXAsdW7lBb*eKojcJ
zeCgvvn(pWl+W%lK{48L;tlO|XO|<rI!O~^-Z6u}0wKBQZA%onTlyqUe(_fLv!k_nE
zQg=ER*YHzR+uK5i6yMS&5wP|erDcFJ)R!-OHW8~0&mkSe-s%*Rew;@V^y@d(jjx4<
zTne2HEw~jb3)E7*%n+&pf&h`@M<!Tmnta07q@0ZsULn0U4j?b)y+MAaaRT~2S3!IA
z7+t7?PLD+@KK1!>5N}N^s!@{Z&+=H<sUT>NpMZfYS2CSmNan&$r`c8n-ddAHpjiPL
z1IH={;O7*Pi&W?Ogp-}82=YV!LY}PO!?fQxBx5KVsZAbcnKw*GiD>_~@Q+9JRYj3V
z%9R=s=(p21AIkAAYVF0{x1(V{(>?|ejCWKr@|LpPr;nzR>fW2MBELBS<)!r-T!yYL
z&{(6<g+4_F7uAKS@VHg#=Md$!Bxl2f<RQytvwsUrJ(`Zus=a_)U-K-WA_@b_{HJBX
zUzf+o&ll#W9?WFMQ=ULQi>GITA<d|yc<M-A1ojOyDHnPjN+=F^6j|XTV5zuRHV$Ra
z>H(KOC+}cJVhrA9`cLl(obGHYQvTOxYb2LB!3&*8|CSu3Hw2&j2Hc^OXY)v2ap;4f
zI=+Cm553J==&?(<%HW4-(^#bPl(_@)E2lA}xc?58{V_Qa>#vDTPNGcYMf2ATxD?9;
zHa7R(1Z?@7hQsj3P<SMF(gNeJ-x70oG6cuO%;|5l!L^~c+Sfg-1BUNuOCwO8ahs<E
zcnD~i?CU1=J=)q9wyvAJgsOQo)7;@aXh!_ET-Du;cW}C#ja<eL)G(idf%6_5v9$HX
zC(Irmr^WN@ikA8`$^@U$&Myi4&ywlCHTlLRIttV+vic_$Eeq7<{f-2=o%-`&SE3&2
zB3iFpRfnI|;8Ai@%8y@rGL(SMZ0M!88*;(}%I)h#1yqUgNy~y3@+|+;Dp9Cw*29l2
zp2!r=Uy0sWddQrEE_w)Ox-B-!^oJmll%oCghW00i-<x9#QY|wupqeGD{+`F>-OC*z
zUD|G#eJR@)NQZ^#==%F13(nA}h}zsxY8d?FtVDvXCC41z;8?HQzq1*Z%qtz^ZB=T&
zd{0V{7@JfqH`I3U!ERdJmFVK!i)+gDJ$tTkNUr4I=5xm0N?(3gzVD>!G1a=gUdLD%
z{-i(hKlYzzwP1K)-^c9E{1AER<F_L}T+})0_-W72Fm5_ERn=pAJ~P@ST<X-I?WUXA
z-|Tc8{JK`szZ6YWqooAmtMP$Lf^>Hy)kVe=G-PtxgdQ7;WqrKzYM1DuZAUWF4z7Aw
zpRsqF^sM)y(=F#}AxR;q=9a2jkY*(2_*ko-yfiv+B~H@2DnKgm-exr;ll!jIaW#vq
z#S@1T-MLkH($zIkmS<TSnEyA<VUME^GvAoq3ZrmE?FyH%f>U=+@CA>u!s3Q7OF`NQ
zV<>sE+jP{5HnGQWLN(+Sxel{9{;3Ug9J-Gt-=Eh%(vabd<`UhuvG9@lJsR1rr+C(*
z>?I~u_UDO6!wJ*ai9IuV8IMaqN1%JTyT8t}z_D9fo&DEh536xrSVH-ts@t@S<i(Fw
zb$nI6OTS_-CZlMSu$5I6_xBgHgIUMwo+rTrrZX*l=l4u}j!(tseA!NE@j#GZy^fjR
z6l31lvi`pC#+yg$>>phpDd2iBsTR+%8(p7BJFng0*_H=GzaLMk^b`NdXIl^&+yGIC
z<}h5nZIVA6_iU9XGF|TT`jYOSl6<$`(L?xUhQoDHFfwE>arRk~32gbD8kh0TKCS8&
z<51MYz%a(&qpPFX!~x2qz8J0b5>v%&d8`qoCr7(`3nvot_W!mTK?z4jxQhnWF-Iyy
z-gjS1k_}W*k}lZVbK-4Kd}ONS6Yqi@#nqZS^Kth$q5emAkXLfp`ipjBv1nv^bgTJN
zZpK~rqjlJFcgHPj+=!yDyUEcyk4I_C#b;yNb0rq}@!0)cQoVdmv=hea$}RscL*&>u
zp3Y3{)<Rx7p-3#OeW9w<*NnY1=zeh>S6OnqY613#V{P4?!1A149#K{1ENPABe@z?=
zVez}|HsiAzT9qvgmKk2|P2B@qb~9&U9mqd34M);#xunL%%;+iXx__1xIZ{SG28LCB
z*ZiQ}oz8Wmq3!?N;76nt0hZpR7g)m=4+J~==nhxAZK&af<@CmcrD!FQmPy)bR%TV=
z6OC8&5;LDTj)%nm&sOImLQ^$l0($q<E{O%T$GqM3W_BA(I5iL}eVSwNJjd=fW0-Wt
z(nr#pw3FL=eKkzq6kICVOGkJ0xpd)H;+uPM_`03g$W)!6iXHt2(|E<VgSEHRI+HUy
zbn{65%6Fsw>tgtz{e>R+Nyx#<hgnv(U$jrhYvOOO<#-lke>6*7mM;om&D(7}Um*Lo
zULHd>Tw!Jl@4fId<_wIucs^D2Yz(oESMM_Jm#^~b$)97Teup~06zxR2aTBX+DpI~2
ziJP!w6&b0-*oG9}?J`tZVRDWu1Vo~HaE-(${C7R?p1X#W^8}A>P=&Bx+4AaV72ES1
z+thEmmQ_m^_U*$O_~z+;Jgsf<s=p~L^8YMyVq5Tp``_7Kw^~0|=ddT<nvZ6AO9M37
zio$<8H$9yj;)}4nLg}%lg=ZFc^x$7C3vF)B?C;|GpxOP`cunnpHyUZMLIfAIWj{kZ
zCVj6(*h_b8lkod)gZ0XW$_hEsgUiRN;BTA}=+7#ncX}^45p%z$<NnXGY|^9GZl=EU
z7DVm#GyP#P>|rl_uV|ZCuNa|pxutV?1AlsOM>jX!o=bQ2@yWB=SN0KS`TzG;F6b}l
z+IDN7PP`I#aUS2nm!F^6j`d^w^fJQ9KIllK>uJ>niH);=tJ4p%AJ;OSXynnbcqLu0
z6s+)nNaSfd#-4O9uF3KClvDiBx8J`lI8;3{#;|`@p7hz84H-t8*18?t9y_nxG~6~n
z!ZDU{SN6pWLstU|o9U`+4Q}xcD89O`eYbWhho5mgO+}D4QM%#Ep1<=K-BlcI)};hj
z$<MKta3-)5CK+>T|4nFCG8{0Bf!BbQDN?@G38~^$7wJM(<)%!m>+G+0^KRtof}Tam
z4qA1Wg=v>45gqhsRt~k!na_A!`K?|^FXa%8?Z2)OKmfAQf!)M$P#Pa3+>8!=#V8X%
zYIh3^VP)USnYD7--5OO$FbxBs^6thdsdmbTs!Z%vU%9dC`Gr{@o4HTdnp=D6-|B2~
z{UIqDGDG+9YnL_0*58KDhL>)a{%x}BO8=NV#Do~((#|Goy<%X01`nxlwaN77=&Lh<
zJY^cgyG_ht=M_P1q7#Y5m~~`g|0J&5aGS@}pNq)PqR)QKa1!6?-tVV;zBs^HDyfyv
zhA+^<d6Hcm<1x#8Vu!1jZ?26#A!y(K&A_><0&yW_%gSEnezfwV)wC~sxXQ0sN=S@q
zS4uB!Te52*d&R?SH~Ocn<+lU%@0D+@@4l1PXtLy&uI8yjcJa~lL&GzO5B$tBn|+1n
z7!8%L9ntb%>`lZ<($A%;tfUL<)VMsNFi3iN7#~;T+TS&SO3MtN{Ia;B3ZqM%V?$Zu
z+$DCbdd6}E>plzZggu%KbpA=vy*js{VKtFmvf(aC5o=KudqZoOYv}sWC!DdWI*}8^
zPSuc4s{YoQ#gF)e+M&~muQg<n&RFGa@fA=Q7`kqJcoH^tI{*!DLUNp?l=A#hSDMb`
zMD1Cr#lEQi6E3~Z(h=h-(XU>(Tbpbe1oFaOOiN_hL%3lxDvR3AWg>zNT`oQ`X9BsX
z?_>btovJ6SBrX-U%o<OI%0-7Qyl=b9yRbO^DmL(-Z54GQQ%R#KV_4Gz<eIC`*~p7%
zc$()6j@7589#{M4P-24Shg`CQCV#w);H<ewYILekU;nD*8-#an#TqeOGK@7(dDu5n
z^YSz!cvru0a8!^0Y~?3?Lgi8yN<CUhV=9I@eF0w{5HD9T`MN&i;`}YQt@K`6&!gG!
zo?u1FKvI|DhteFg_ru((9`<?X<eG=iW2$H4;b3<o!BFsG_-djH-QA+c|9*&`NM1at
zx_djmJ-4^YKJLYZvCx_`i?-mzj(<GNv6$1c$JM+)<U94J&kk^8+|=>nQbc}^CK8w9
z4)I6pXMBFftVm25LLZ!|87eF9k5_E}KH+95Vs&b>ZQe|>E3NZSLzw-goge2h(&_0A
zmqNM5VknVQbB`DTp__-!)ZshF9g=qT%Zcx1(s_E%D~_Z){?|pl;IiD{HmhD_{rl?C
zwVg9NB+f90+(h~X=9~UwciDW6N>o<Z8u?yjnBVL~>`cu2wUh>rSnEP`a?l<{hu|dd
zEA(C7M9;;fhTsj-;0-;N3uVJ>pNDr3_lGD%SW3cgR;$m@-u5<%rJFkNN2ceWq473e
zcvX_3v4qU0xxb6yjenfL)Zswl)XDz(OA)CiKf=ewTB8=(^Fq&`s5=v(q(IyqZ%^uD
zbrM;`$tPcSFjIU=iI}>ShJ&Ujx_5nC#xmj*K9pSBcAD<AwO7Uru_`Wnc3Z7RBad-6
z`q?Au#9^o*rg-#?Ru@xrv<D5&XR<n8VCuRKJmmZQkvyTK;JBRgWi-9Oww1$8lytzr
z#*Qe#&AqGLS}WW_1~pC_WKA}aVZjJXqOq!1^5kq5a=}#kelgg2PCZjO+{x)W2Z#B7
zC8-lfl4gA`;3Fp-)6a73YMEC0s;A%W7_{FLb^Ux=*pH(jl8OlL5{Wn2-V^5`LCx*n
zj$KLSb3J8t<)x|O{a-0L=f<onrQzIVfvy(RmQp)xqm$>7?bg|<`q}GSN-G91y7c~8
z5t<a=gx$PM@0_o~lRk6A-90^8R2xpJdbHiCnPB@CCSV+P)wt5f#Wb(3J9#8m!!hny
zcl8nBKF1z2<lv+u!n=%o6OVC)e>28^R~#ZS9U?WbL|OJd<T|qZ$~4SWaPd!dnJza_
zxzbyXmz^o)Dn3UhnOcJAqmKmw)u%J9eVElGzQL#PB;LxzZ!O_-)tH3m(m_%~?-cgP
z0ASAk4F0Ti28Z#c;7K`Wzb+vT@0)x6-UiCNVv3x>z<K+uRz0Kc9aig-p{lV*vrkG~
zYc};M${GX_=KdZ2g8#@p^B0q`n9#(crz}%+YYp8l$i`_$^17DMZyv`vDL;u{p}O5-
zcCJ%zUpgAKyVEAaMa5f>HKDr3;vPQKUROU<XyQagMM-8}t$Jw*ZEp`&g<rsJa}svN
z6hFjciJrTIpBH-+_qlA(#+fd@J<?NhWWw&Vbb<dzEXxw}$=tar*y-J`^oH#cd-x^W
zwpGd!Eql#<U0jmx9!O`_DN)S7`H>IYa>h(}Halzfp)J?TD6!0|o?lm>UQAay3i~Ir
z{<dS=I9T^V1Iu1lcPRYsN!2B6<64-bU?AyTbI&^cp@x96prauX;!jwXv{XaH6yX;;
zbZ*B~J#3EaIJ}|yX4HIt?jQ<;4;<pCg=F-Aj97;%GxzbK6pzCHutxn#{1M{>|7!;W
zBQ_td*dWWg>|2o0`U31k;|uG2k2Ju_quGT=T?@E%#ezfW6Zu>Xk`tDZ(gn`6yg4_^
z<F5+-+<>-Jx>9WiDg%tmW1^JNqyxJzON*qKB}7_YA}p<aK0_O-o{!rgx7s&<>pYOY
zYkl~vnofpc$%+FqQtjxrLfkzG;wTm)oF$`OeCMo<L>DUCzvRc)&-1thu@{OH=8R1i
zE)0)mKSpt9{-|<1k0F1D)_J<`Y)M_rl8pQ%$_#|v^FPsFj+_LKOPYPJvhpIQR`88!
z*h#KO(`cg*2}kBvuTsLOW`UPs#bG{<uuCUAyI&hIs!gcG1m>}Jh%lxrCzJgArDYB#
zj10PjyIRH;PnoSaBm48%N30qHm*JbPN3uUlDOxWY{QFGc8cThJ%SqDOPcxy4q7izz
zWz6fD7&djT71w_TA&0c7rd$>=?9@%an{mtIVD2itr*i6-HDABNKrM(&jJ$d+E?+7W
z>AQkBd2i-ep1r(tAW-Jt{s8HUupMt+#*x3>H5@u}Cu4Je*9h+3{Wd?jcXcQA7uJ~5
znZ>1F9#?u;#-IpAQ93u)Jj-^wl*{4^;j=>c-e-oZYn_MEg_@K$RVUirR91YW<XJh*
zqJuP#S`gn{Z4HRHlBf;C-feRkE89uvB&S?CneB)bTuBS8m=HCt^EvozG)?Ke4Too|
z80^K`H^TG5YguM~)-VfXHSU)tYfgNVnfqt%SR}(MGM%sIrTrB+)f)<qd4^Y84cwzl
z<k74j$G)2_-bd=VksY$<o&IW<QhG5>$Tp1=u1RI3@=Ue+tIn`H&Tc#zT53BSKSC7Z
zag+lBDjk_kz`EY;gEWs0ma(77G*&Fv+P1e3+pV=8W9Q!(b&>2U6f`Xt=haec)SFC8
zinP3u#@`pglR1D4{4FtaA5LW&@FB>=@;$LS=yJs7v>ij4BgyJZv;KSW-g)e!+3giy
z{rC4cAupgC_K<zSF3!m>(h+{d#maapRNpAX>*)5#<FuaH0wdXq$9h>OU)9%ZOM+Vt
zGAuHs8~xWM6~&M_%PB#T<N!yc`+iJig^zDKlVB1jxAywnYE19&3@}hWrPA>bPawpS
z$p&9vHpe~cveJFOxcdfEFU<+56h__S;;AcJyD?FWnT0Y(U-U^LQ$-%hTYmF8PI^j=
z$lg?cGlW;N`o_^Z$48x|qEb7GQRn))jy80%q-Iw08Y?>2dVhaq>h|1vbb#~3%{|`x
zGhhZf`KpIyuQcSGP&>x2weyM&F`Z8SQ8Jo#a?M%&r8CEi$qkj!dq*vlHKNnR2kX9R
zuTE&De-Mh;{m*u<fN_U4@<guAu+2BtJ<*W6b7EmaVv^}#`U0PPUY+|^N7U)QmyuzX
zmje6jbUFInYS&g|Zc*O|xMGgIdT!Sk_VO5Fj<+M9@N@ZEZH!oB+ijJVhDWo*jG?P8
zJ*K0b&3d8#OOAYA1^S<t9KLBFgWcdcw)I(M<xb=NS8JJ#b+2NPIk@9iS4Hh?bOyg+
z(t9h7fFbh9?_T)-+WXRQD!2G;rxQ*olqpmsQRX3pkc^p!ZI&VPoFuiiZE=)Bn#4A@
z&2vJgkjOmkGLI*e9oY`HA;aG9@7d@7;r;mk{9dmQU9PUR*0a|0to8fdzx%$Q#}dg@
zJMM67jC`0W>;Ar=+<j9i3a)p1Yf*k$Ia>8&&6TxO<dA}_1tV~11~}a^QhMgI{*M1J
zzAWkA3nz*ahf7MNZC~9NLoEY_F)*tRVJOl$XF534gAM)lC485gOV=pKvBC%340K7I
zv-|c!3)vdA;wLa+!b@s$bqj)w@2LV%1$F3}Iv{u#x5{?}zh!8`xD>f9Dd#OW@y?c=
z%BN0tfW@@fw<2FY2|wxU6v)f@(^KhAmSfhBkiYOD@u8mO#Qq8rNu2wfUR@xE7H<xo
zn)ZYe{DNm6(=yKW-tF=o|7w0T%iMuZ8%r4^GV?R?T9c$;HZ3+8wua+2Td+G+*&6&K
zGJd|Jfqm1ixS~=h0V0QrghTyAs*(kvn5_&pkl(qV-YQW0Brw2f9>%${pzv0kOW$DN
zngpdQLzAFgQu=$2i!7cr|BN(KX0q&l`}|Csh5KZY%xa>sWekqEXykBlfVGLGn(f60
zLG!8fV*tJAPAR-ka_kpOn-{R`5BT2J+(n_>Q=g0%t~(R>HuSNJ>-l)3x{E}Ry=blp
z*2+VBtD~hq?aApAnj_K@&zKjU0;|-b3m7ci{xAH9%r#-fF7c9a%??dt+&?o77pmUJ
zAA581_)u>I5dvS^5Y%X*Rp{IGj$Em?*}AvSo?y{^6eN)a*qiRwS*Xrm-hNS0+#MTs
z$!m6Kxqz4=yuC&0O`Uj7$lPYAPpko~tWF*-7_^Z>dy58erDCRbl;-~UX}`yxg^*^q
zDj$5G{tT<RsK#?q+r8nC(=w#J$hkdUAKuw5XTkID%jGG0tQgNHRl%n2b7^aoT0mw-
ztSXV^;kW1aM6-6K>tGmug+=WUXS~tceFlBV5ZoixTQQNujP~o9HW=QlE7GvdI5fA8
z;unmv()|rSpGv>D`m^yhwhux}Brz(MK6{zhdP=2B7h+iWp4e0E{wMeT?o{f$*OyAV
z;T_E03q9koDj(8Y|1$Y#xJ5ARoI?_`sTzwr{tT2h@1isA>9!suG)XZ(d;giZ5i1XK
z>PX|?;T8Io{g<(eo8`>Kjk-H6bNkh1S!#B`kt9t!o{SVQX2NG2!fzP|oFO$%OQ}q-
z@2}^{VTLQ!l+VcaSDy%mQJyK|wk-^XuQ}h?c(mc)G$oi~wUYWz)9Th`zR5T&gpVTs
zxrRt$d<1dF>+}^&VE)fiw;ffpB^Ku+{C-`5u~(3p%-}s|dB^|ibUAGl7q+&_Ym-&h
z`jk3v!HRh+u^RMq<F`E2z*3YBCvu@z#>83lb@$079k|WhO)2~&*Bv#lU>>=x1KI*G
z)_g#@=d6d6voL*c9Y5NJb^pE;X-S>Dc}PLwQl-jFifmy+vnQwKNKYmwsjn651R*%_
zx3cZnjGAQh?m0|GrPLNe^+*Z8@#GI_W3F#Zyrz6%SN&f%j7T1Fv2Ep~W`EMRsN+77
zM2|wUt!E3_mrZl!jqyv)@AleAK{RjaP4+MtzxFt&<?xU{8XYERT4^e>GtQ4Dh^05~
z>H+$;*rUi41>hZD4!1UB97DF*J%=MDPG5|=c9NY%>XaKU3%eKs_En!$HYYUoy;T{>
z!+Xeihdt`TCgStHHeIVQR|xaa7NK43Eo4Gcc5G*HY38F42a$Idqp6y#4WSSHe(SRC
zk0V%6Ugs#(AN)HZJBnU6NH(;m3&|~f(tFVR^<(7=*NYvlZ)!9IH3fd3d<SKy``t$5
zR4H?)I0K)xEuWDOkMQSG_G4a(TBa3pU$!EKif|uaewd8lXr*3=b~qkOxfq?kJGu><
z+EM6Uvd8r)q6GQZrX6xyPi#Fbzmq(6)s|f6L~d~Y_NC;vwlH_S4$DW6N&X5W?+t4-
zXs>j)B-vD=4qf(gIeiG9NWav0LNmS_sn$+`|9U3k!bovo86UN2MNPfTfBnRlsVw!$
z_6TBc#b`|(Ka?cEN36yf^=3*R*9`D5I8%W=AUgf{G_uM)N!2*zXc*Y}GyqIVwynm8
zRgx!<kKNx)IX5RhzMtW~JJUWGl}u9FWFKgeEskR}&vMjFvumqXY@vKC`P+4~HYUym
zCdlq`tZ=;hVERQx1;#*O#yN-NeE;D=G>1y)UPaknH<3^xcd~t5mY@+y3~)E)Q*dv?
z-qdaVH?FTwm%aCpWxq$ynTn1vvLG^)2b&Ms{*2I?t9<R*Xl2Dq)pk(8l;nSXoGyP&
zs~<01ZRG9eD3wf4z`|>B5_(!J1`G`H-+29QOkAoKi!OCJA|R_o?b_ZNh=I{evX2(`
zOFtKu?bzW*g9tE=P>q(u#9Kq@{OE<dWf$ZP`sK;<KM)99KqRS?mDO)AAMu%g1GHmm
z`PVh+y^2^JS0S&#J!UdLGCOU+YHasp;wE46?7RM$G#{_ILhai&cC7tQp8e4YRO%7S
z_``TB`8SsShqR4*W0gIjL|<Qi-!}Sy6e2DE-0R0fh~XM65W}xH50;dy9zKk_N;;}t
z!BIHnH)V2+`r=SnZj-`pYDw4AKMReGw2Xa!YDW`_WR_IZxToUp_>}UaPr9(<+*Nh@
zVY^*f<%HJ@!6?@@QPUMGzc@TRem#-Kx$jRMG<G~?w31c}*JFzf^?JM0Qf_s1!p3Tg
zo)C~X%xAV0CS4+}tRavR?~wU1Nh|kt&(6p|5OUK#K*9HCGH&o?yRVe1rPb}V_ccy?
z&*x^8@~wpJsj6pN0xzp^gxqCq5D>0<FCV=d=)TWuhe@|BXb%irah((}?`c8y@=rM!
z?0jku@w5T4Gb>=j4(L6j;rag|8r$}{OJ*|Cl~q9W01l5B+N)0LX)P<X+eO*>q7md6
zNm$};>6mx<Ks}@arX9M^*SBLEzqHIZj@Jr-%yO%|z&rT!LA8Z*Csi*8A06^wTy;E*
zXW_`_9HB2#JJQzhiZiut5VBr-M|L^-NCN^|VTkDT&#jH`?(tV8&wt-2DUYFVn=<i>
zo_TayIckM~kd*O<9W%7CwhDDj;!3p%`}^w=#JE^5*H7zZsOmg$KhtH_@LKPEZ!A=l
zEcv|ud)#1S<B&tZp1852;k&?dt3k3wYUiCx(x>u&pYr_nm_BgD!~QJWydD}!yNCU1
zy^R_D1<szj+^PVnd0IZQt*^1pCn94vm^^%x_m{)04B@N3Lp4;7=8xv?9useLZVCKw
zK6<+4gpT|+Il(g%+`V*}|3(nq4E_~;-ZU6DqnIe?N!DQ7o5UK`-23;?i}Q<z+xSju
z29%i`o#|1h%;{?xJEflG)dN}Wiw1Nyi8v~z)^V_DzS`IZYdbvE;3lDPgI0Q|wW%?6
z@?Dd}6ayTD=j!I>GhS21!gCh&X-?s-s~79__9UItiM&9H;~yc@*ant5qyJ!2Wv#F*
zDbs!=V<<~#`}c@oVG2Q?ui;xU6u%+n6X?*Xwovn9#zbSaZ21nCIip+;q%%7*Q@ny~
zr{sjW2pV&YxyeWit4yg{A<dBoOp!eXQExo#*O)bKo8{(5YSzw6&^jbK<|LX&)6x-$
z_~oxzBX_)Gq5XUND&du2tHkYEw)+n^AlII1kbSZ^Ey;}MG8>tb80bF?ilJeSrYVh^
z<t<>6d2Pqm$BNKlI9Kg0C%j|weIH%d^&7tMA*OchjviLGe{bQQ6<R!4#j8|T>$RD*
z>8r;Kiw|PsvNG^G$m~&;THW%cqkit+KZs0up1siF+|Y^FvZE)23e{}xf45jkbTQ7K
z((^Okud+!WkHG^83f&$4Io1@-4aPM(J>e5735T%G6{;0G!#9RfLc0%UEd0oxEo*R<
zpS}=1t>tG-ZL8|3%|nG<u0~&|y5gu?gF&chw?TlFY+>?c<L5Z2FIUxGsx@|D0)Zp=
z=W&P4_t$6G)UsxIt=ml)6V!M~2i*}kb3O;z#&>74?xt8Z*Hp8Y3|r>kVI)+|HL4OP
zpIR(G3iiq9@`*I;RFfH6F0$1TO|?6&IbzN@WC*N1ZVXv&Wkj%}>umo^tCH7`Pb)Pq
z?6|lolxYX>?#Wh7RqoaL`<1+#Q&h0BR2+%bB%E}oo&1%E_L@YQRgd+;qfAQ`!gn$M
zVv9z%v?a}Ms^z{<+2ctdWYDCe@?5hb9rHgE8V3H+=<$TBnRs7g_hZ)#aR1}k`UHd4
zjOic`qEa2fv&8O>K@hi+LLaZ1dUyZ*6FIp}C6Q&vX0@By0{S=tGE=e{fz6ukrc^+;
zymzsh(`3KL#-hk(ZBI>P{xWC#qG`h9366cHWye}uwG14>!W5P#aZ)dH{-KCj>sn-a
zaeh31l*v0}ttO-2Gs}D558^i?NR%PnL5>_5Bz+J>-j~@<I`_CD69qcrqA;+O0{kJh
zVhEZfZg6Opo!F99s<xxw9j_g{GqDykWO}h$PmZ$~%f0MSFp1rZXr%wI_ZzMFu)m|O
zl-`1Gj;7;BET+b7p~CF**wY!3=K>g%^?m{qmKy4q;4M}#^!_h={J^HgW9o5Pgs(#B
ziM+cV5y$Z5M^nB>-?H@+c&{aa?W6&9NMxg2yTm<`czrNrVtoKmP9e%ioh&fkAW$%B
zUJPA7s&T1M+avf{9=)$`={7g_PYSZ53^l3hV?usCTjH}U94=-ikT@Xg0A6RV;6kou
z1hCSE{q|)?(Xrg#vbNn~IAqr?b}Vhbde9Ss2SbD%&yghy2Hbx(R^Fqhj5_ayCLv5-
z=8K1Ocf(j4BBRvX`(%Ebb2Ix<^Wc6cM5{{mEi}B*!^GtA20hm=T&vU@2VLOk*R>`d
zyXyCCJxH`p;3y7z5~Z&5uGH59H(0-ahwc7!87jwE&YMI(7~<g2KlG<)rPmJQ_=g^2
z_Qjt)$jjg+UcisPyF}ESy!q3+lNdIaF*Q4FhKoBm*JO-Y_#swYB)ZQ2nwaRdzLx8}
z%!DgPX1NwIq;JDtDK`Ra^xhXgr^nQfH8GMy9#%KloXNjL{kM9CYSrsJ&UyC(u9(j0
zT}di{Zgi&XIrsqg2OlHQ!@O_sj@%2fYDq_q_?ksEzIq&%z|%kF^Y=`N=CTd-#&}AK
zHxjYT^ic{-cpvNYH<$hqQ+OLD+vh>C;MgJDJShpO%WST;dmMPR3!(dQr{?><V!wAM
zYX-}@BWU(xlRV#~6jRjeh3VpY9sLgvf_E=1VAAZPR9``zB$qxSY<<6hXRd}4w<$59
z=uevKF@av;I$ndbe!rJ6F<b=8m+yxAk&<(6Bwo4rcnYI7)-Y}1qIOx?CucxDI+Y={
z{zZmbuVoOLo-Vy+Tk#RSM)xfjvm!s!@p04TQ!5oCaU?TJBb!<pPycUme~ubm{u3&X
z-~ZS{f=nh^hLBj{={e-Xk4E8qgsV0c=P;XRj+s*$WhqBv1^GH-!)gw=Y%6;%9rvpn
zo@7eGK`%PqXPTx~tPL-sG}bd3d4Oi&nA-bLA&}Cfme&`Qq2J~32*gb-<-~KO#2!6p
zAAacIT)gYI0diD_vVPM|PR#m4wfd%-Um2Jv?-17O`e_TQONo+CF*u)cun4?K(_h=k
z3@mfi2EavUzz?Ku^mN++yw`7?vC=D!;GGzrbSN0g0$lqSKJg%7S7CenHPNbj+Cyf}
z!8ncUyHv>5Lz$7;*2D|X4m8{f3kEFOql--ATDGNHmjK?YI>Sw?B(e_7&%90NtyM$-
zvRbRCMNdoj=Jl&uZc>iJ7Pgh_`TDFSr%Z=n=e2<6n<g=P2+`)#{4Dwqp5^Vcq~PIF
z5ZM114_)tRQ+C5YVhC(eCr|RD&psM4zSr`P)gang{uS2t0ebJK-*w{TE8q{i3=m2o
zX-9x4D<<fkCc8dd8abtJ|8`R?k{F01{%j^%lw5AQ07{@6N!X>#S4FdgODN>rIjo#$
zbh@E37y9K!L(dgtDPA3@YEa#*P1r-$g~aUZf^CCB>5KRd;em~_Q+j(MG^}9vaa;&~
zI3@v@&eC~a>x`^4rWCtJn(`hDv~`38N}!dPo^UU0B8g^v%mIlG019PS5kh3a`A-=R
z8{0M2Tj#4Bie1|p3I}<uEgyL<L{JDVi{(9+kx6i$V86$sVB32s!z*~V*kqX*U#4H8
zCLTSV+P?C}S3yeELBwCN%Hi!%v7!Lct=z&;zGeFXULT(-@uYjupH7y&m@32+!~G%G
zb*>?0iW33Bi%_#Imb);PsJ&QU`S$JIR=feZXfX7fzkt|AZxUp}fwrjP?k(9lWB~Uw
zB|j_f9`+fpt+uJwg|cw3hZv^5ml#1zj=->lSUUZ=v@jUjoc{5+O3pm?_NDMU64Rm!
zNY0o3uYW!Nag~?!ZIx?jWA|sSmAwBvDnO3qM+ZD;dc-R-px~c5&2*>l8PVokStrKJ
zBfSy1b0Qbun21T`R$SSn%1*6Zf)pYnOWIH;PpFeAFYa@Vpy09&-i@BCT#4upoZ!)t
zK>5%9P=~IWwK4b#YfpnfVA|cxe;cs@?X$rcn<l$?<xo>hch{t_r4GT~p-g<9&ALfE
z==yLR>8di<qS=FLnHFTd$(}S_VafWYL2|v74q<Y&vHd@^E850PmDv5N%#~1U{CAXo
zb?)?-b#KbU#R{*vPxIplMTK)lM(A~T8-H4`5ATAvR-vxWOn~;n>s{v~6lTHNP;qsk
zZtq>szB8mx^Yy5nfG+z)7p{PTzRw*?Nj6CD66+H-6I_~nt_10C48wWw#U2C?%1y~}
zsGNzOHY2ReS-Fu|0E%4g<$4$I(8a*nsUDW7Y04!FvJzdUMa)?Oo6TK=q<)4hVR}N!
z*!lBY+Rd5LR~yU|eVv};vY{}?fvX#ozd_K`70Qk=cR$4=oLy!b6VCA!I`+qrVuAUS
z?rhNH3UBu8>k7Iv<{c~DlPr+3RQ>Eb?$`GO<Hqg^k6#+OCuptw(Exd1p6v$;>O;HX
zWHKF-89Qp{Mq<3i9vmp^5!hcKy29`pE4`dLCu|NV!3H^=1H)P`8XtfD3nxfDAFB2j
zUV+f36+@jd8_C{~%!&(2kpr<4hdfO>zgI{c#7Z+Amr);n3ciFF0Z#i*?nqe55H$1~
z9|Y4ar;dyVt=!l|8sEP02KDuNBoWOi<oZD{hSSet?P&4JK%Z7<)Id{lk6h>1a>Y18
z5du-&f6zL3mkXkmV%TK-QK9+`58TLt<F!s6tV6RDnGsj-4bO2!Y{A6c0CxlrU12PN
zSj5_pL4SDcUvowZE@xVdm8w=5^yXFwguipttgD%6L0jXHa5<rQ_+_!A*svrmX#7>e
zzszhzRiTk%nV}{lA?z}zO4R#43sO&A=qns@_n!Spqp^#uDooB8k4mwI+{O8*A-u5S
zO|3#5l{dfUq!-?Omk989jZAu87f9WA&xDO*cdhB=k5CMhx#le-mS(IUpg;WmzRys?
z=9E?t?hMkj*6z}8$#SPN@eQlJnDSr2{aOsEov$m77N>YE*}M9AF9#)YBkdF~3f_ny
zE{oZBWTk)H2^?Eet)j4w*Rs~0yYTxD5;D0}L9sIM_CjQh;3r9OO3s`94jS`mG%d1`
zKl<cfazeW8j_pO2iGksJ(bTWcI)3yZuD9@$h#0`u5Ke!DySq*^xMD3}@)pVDkG>|f
z;n<RtT%EAr)M{~mF;=?b4``lA2RIu9b1_$4)>ECS6Xj&N0CG!ZaOt`UV!q-S)x{|L
zP5lg_lFfUNse}uNXUAd{Vz`fM>Hs}>f#$}$5M7$p5R|fBC{0?tRvE0bo>*KTs*i|+
zbXOh-0%;mcc}0H|xUc-y9}kFBXlonUb_(^J=W^mEX|gD?fS~ew8TryVyGa&j0I%kX
zi?jJ}EAKGt=e?05gz4HIHKYa?HH%dEGJR@XkfZ6z%nogAx7q2>v$<=v<%g?Ofz^p5
zmQ*Sj)7|;O!XT#~8shts;_ZJ5+53mV0$7ULGq#>b?Vl8zu!=&n%uXAJE-Y1*B5CA!
zmB)U!=gQOh=iuA;UX6VE*5p7z#}|Gy7gL&EhB|pi&v#V9w$g(2x<<-^&;rUWwYL=;
zzDd%3I#-RP3=@G=me!%Qgo5BAzBj$=&+Ar|tvqA*nf<0oHGIORgP#NLLaR(yvn)ra
zX7e$7OPtcme@3ic<-PGjVn~r$5DmUhU#+i}^Lbsg`ELp$x}ARmc0qw?%JV4Wa~1M7
zm7Yb5zQa3bJ=dSQPa$a9EC9E-S$VI%e`9@j-Hz6y9D-vcQ9~?Tq~;&lIuAE_pDfUZ
zC{OOJSeIbl=*@Wxq0cW*59jR~%~vZTQ~#r2b;bD@sx#Z7aNUG<lE)jCYnAgi0er`%
z>(y6_Qf850ylsfoil~o3lXbRY;-gHyr`vA(eV6yqGR|I}*e55b;l1a)Sof9vW?oOG
z+fK9x1R`tJW7;J|mX^7xqpE^j3ahsDcXs4^TOExis#h#)fDbay;o*gJyFC56m<3<<
zPc<T-ny70Cg=w=k#7CJ%-Pn7cFi{No@X}U^cr8M6SQM2x?bUnjzW<<fsUyG-xyUD(
zrJ0UT`DTjsPlD5JRg&Ka_(9E5a>I|F5adaHy+B3sPngS}(3S(7B~R$h+-_m<bv9ZG
zJdIa(s~3k*Sle?x-ar)Ht1J8Nv9%uzlwb;c3xMv*D?ri5HL=Y%3V6JtXY!r||F_Y~
z@*m`8gl=>rB%a7H3aGf{nJ<%Uf?-NcImo%%)Bk}1;={ce^;npv(SB8_>4B1`t$){t
z_##_lb@CDKOgEeMH_OnHPX0p;7xe@G4joh8mxXD>ANnqZd6*gG$Nb2#5mTspp$>L2
zCQlijs{Ga2xV3JF#E*|PAS3hDm!{IAa4eJZq)d?!;NEfI)2NbKuNX92rJDZaIleEs
zn5i}QlDLSdH33MSNXOO{OXZKr|FV!;IC2jN;4F_{CM;ijA_3c4Z0sPsCZ}ys?)c4<
z{R;}x&_4WH9L<{c)mk@U_df1>jEm#%UfYE`NAT5VEarVJIAXVG)9;`AH~jg0uTd_0
z#{O%E6onsOm4I1@t2n(sqOet(GKE63yA@94;juYFLcQ0UYZ8ISVAq^6Qn{#7Ee8e@
z6jIxTdllK)G2utvy%q7Jd{mUp0`~w$WXI0?#^j#3?%r(?H{Y-3d*25&&4V0;DECmb
zpwF$Z^_qdeYvYt43xT9y%@mRK)XD3EpV@BN{J<DQ#quaC$JKel_Z~o->_VcLluump
z45aqXt3|IAQx0Q`!RrJ1rMHF-a0|dXrxtEk4-&cZ<J{p31ZVS+qKD3qEp-AgV1Go>
z{YSNVRW%uhvGxtTn6S@|84a==D$n%p7MG6{ax<oc%>C2;Uzc9T!59*+CZ99G;{CR<
z$&~R$8uiSoIbu;PB;lQu?w21f+yxnH6@Sgx;c>byyio;t9XGh60j4}or|)&wB@oNo
z;%SespLV#c=DmuQBUe`(AlG<p2=gePU3PDa850I>ib)WeVr3XeYg=#s5*_=>Y8jvV
zuD$v{!`LW4+KSup>`{CM-$iZDpNHgSv{>AVJ-c37IU3>fV`zV$Xn<3Fa@Qs{L8SVo
z_0~K?+;ao+EB?Cog3Dpfkg`0-9+y1D*ETN>#j;g2uz$qLf~PwFJaSRL1UPV7HaN~i
z^brdcISm10JuPD}$gq<+N|_>vjg|9*fV0!3Zw&t?ASE9PK{?^f;=lG7ZITj%s)fKY
zhT6EeIJ0{xnwJ?L!kLK~VOVN<u2dcSI;9RQbrD34SeA;34@gD!U+1TXwbfb=lw9<1
zJ_U^83~bf@SmpCTL4CM>>)GR`%fMz1Pi0jOl5_B7ZoWwteMS&;a$X>_oj)+rohVej
z%04WnaM?Q$%c>#~?J!zi@h;YZqj>i&sJoe3?*0~)zH|ILI&D!lsrTf->5+gW5q_(?
z$BV=Q`LdEzvi$wTD=2Zzb&?DOQM>Ki!@W47m26RfZRvQ6!c4Yw@1kieqpYgOa?v5i
z_ej*~D1se!FEr|jfig?>@TO^RZwSJ@z<!M!a)}_kG$T|%b;3xf7xH=;3`!?I+70w6
z(ClzTWtmk;?u**n?sihIgF^ziH3OV4ClT1f^Ge}?ppL=d;rAu?VExgmpRSg6Fqv!x
zi`4G(3V8*re5$MtaTa+;&L{|NN(#u^H(L#Ei{MsizIO}26AEGQ!moNp&wz)h|3>M@
zGCJ<5NImUy?UG+B3|TSZflkSZSEAFU5N9Gkw55wWPCEgepGx2U#(d(I&z~JVhnC;R
z+S;VpU_=v;b!NT=H|&p-xC3fYpYiNN6CcJC8`Vk>>w=yLxOhP%P$-APZm;DyI{CTe
zPX3ef$O)=;Q^qa-GTy1EE@b<g@X%Q1U1_Gqt3NLHRjG3v%n~Nd<fS&T;I_F@N1;jh
zmun!j92&+vk8(WYc<w$MN32<Z!_e&!{<^0W)dV}ejS-uWcr%3gqtg>-qdwrTOOJAT
zbBmG5@|6XIeJM1@{(U{gv!+wAg|tf^Dj@pQ<~H6`eA%USq5W)DMmE+sd83*5=x!Pk
z%dUKPoz36^Q<k%JYIYl+`ggnm_!UxwuL}1zAf|W3(ng00VJoWF0UcP3mFXp8#A<)`
zEmH;!0ioz=gQj#TtPkimD5P8n@6tymj~BH$&nakGW(0J1zCHUGQn6_E=NKE0j`YJR
z%|}8T-Q8Cx@<)EOBvbo=Nxk!EC61V@@d}n|dXA^5ABs@qzg?Z2*hCO|icUVWbZ4G_
zhmrGH)M%^Ht0!8=+-4ntIsFo^kW>$uA`c-f=$wwXOA_r^HTzx9;C3f7prR1r)cOLF
z@j(K10IQIsZ}vO~g@^-m1_VS7o1Nx{s>l?#G+Ak1^#}%ah4&WRXC?Dy{Qr4qx?~Km
zhW!4oea{s*I{zemnp{u-8OOY&qXJGY>}q0}amQ2v@c|0KrgS}bz7^Eju!hJm_1Z5?
zK(%68(ow|kpA@$9w|$3bB+_KS6-U^=R4+90sE)Cay>{}03}uQ;XrKRPu*ZmG@j_&q
z(b+l;oH*2m&7k)*>L*B3R8SYz1UWE%tk-p@dsd}AU>xW|nuT-Hz%T~<H;JD;N$(Jd
zUC4g#8Eo_ze#(?WB;n<yd;~Vpjr;1(UsESv=FA1&3+yW9Z;092y<k9{*1--w=SOQu
zk#bP9JAK>4d!M3CzQb8i+ociAyJ8rOKkIVUFoQ#LC6jM)2b5VT+KwTAT>~)w+xvmP
z%n23NZ-0nv$rWSH3_ZT1mu3gT_5hXK1>=W5L7IhMmH_`#TV29upD_7yFl@$jX@>4J
zVVI3w7F%$h)}YVE|JU#&@-j{V@sRp$abDfuchjUQC~_zv+Y2B~vNqIrVZ_<?@4dYf
z?oAu@05^uGW&g#|Z2S4=2<NO<d6jiaA$r>J8>LDJsD5}t`G}ZBcRmw-h2rjBi4>O&
zSFGBLLQPrvz(@21okH}Shx=6C(zIkQ;zy>-JowacpgMfy@cMJuet!#V4IC^Oaw(dK
z-!n#b{9#&~zj@@EG$4HW3I<;q#>&Ded(vuvSckb{(`^YsrKS2>j`|!((<}7Z_<BY{
z_o%_5r-WVUxQ5&fCC~%%X0c|?lv`LK9`Hsn6(TL^L|nl@VW>q_KGBfgo6QXN2rt77
zEx8*aUy@a!+$p`q#UGvi$z2j@i?RoM-Zj>(KK{CghB;5?AD||`p#+4E$Esb5p0;`u
zR<6pSA_{QAmJezDuOt#G4K4!ZHilaK_-1f81B?uc3DG(TRy|c8{zh;A+hkAeDK8At
z{9_Hk^K85@1A%eW+I#DdA<7y^BPLPN`14(;>atOr;3i$aJpo(9fJ7(dMkB&Vb6_Zv
zPaIDU1uqu<K#>nPAR&;LzOiBevUT^%8qzkL8@%LcwuTYJQ@#>as|i;L74Jx=a}E^c
zK(^u7_m@k*G{`hsgWwmsixxmp-}F5j(=t7gXeYbmsIg(8!Mb0@kM`kU_9z3Br#OPv
z0ZSlnI7C2>A<m3Cc~86)$pec}?oQW*B@zLg*)K*`!GEC*z_IcY(mvA<M2GWLVN`zf
znG^%R&fex41w=(DEW3!w7X_iU)3Lun!FnInFcF{=LpzE}g>QC#8SIJpOZe*SeZ~Pf
zx7an{L0&jl`c*B*GX4~7*h+b1Y<??Pj^StVvX6?YX?^2P<ZMV!XDqD5z*4JDmUSr`
zOd#Da0&ScXqXqfte>#mIrJwl{3nI-|6y(&3!^TCzUZKPcjn9YtJ#Eu9a`1E7$>LL)
zH0(_mg#!QITP2WfoLdUqeg}aq9*F+LC*6q%oCpj!|2+p7=TpU}gOMa$i5TWU1BB=@
ziMqXIa66b4^S5E%>-jFHz2-w@0m1e#8<)hBdv9Fj?&tueq_HtpDMRZsD6=xxv(3Ul
zP^<Vk7-8LTu__Fk-r?PZ5L4y^Dl>lMRetU;6d`7Wky1DSI-;~&CgKLqe=v@8T+@ny
zkTQDTn^F`7iJrFEOR5m>r+%Colzlmxyl<=+v-l1dHdIO>7o;N)MIYj}6J7CnP#%ok
z_x2t>NVo`|I+2oEGoM`<f(brFfqGK&Yh`XfKA0AQl0N?5Tv*J}{9HFbRuu(!#K<HI
zDsk7q{DWGk<!*pOac1!L2;vD~qD@oE5K%s5Nfyn-f^+Dub1b#e(Yf%djJSoo9FSoz
zY*pl=9qe9gI@*9honlFw;6>0iuQwCdBR!KJH>Dcp=elBq(CQ)-tR>hmMM8^da?k{1
zN%h;9=M#!2_JiN<JO{JoTQ6F0y^?YS-u&<l`lh2!J|mx%{K64R{KNu($Dz6|#0IJ?
z7M-rJIqqgUvDV0sb_bId)Fb`Tw3S|YbPnjJ1RH8{c~C{E^Vz}+wK5zk(z10kh|K@0
z>JIJ3YK8R2%9{~pI6w4KUfXQ_blUGmNVc=I71JqlqC#P_T|?+zN?LDz?nyeVDXUr%
z&s0SRuPrdCS~vZx2NwyrniY^&nI<I^7zt%Lv&;*Z5$h*HG?-7Rp1``&+)VQF*~u@!
z>H5{YNXKKi=@P<cPmg23%cKA<Ap`ONK<ski;wO8y|17JM?bON3&EtQdX=jD*T!N<Q
z$g{^8&v~$|qstGiIQPOy_A19-@$7?H%3g?s!EKZwRuBLfKy6r7E`V&)l^Uw&emmZ2
zBOgU><wqNd?2H_*TsjIvH*bf4Bh0d>QG+&16FM3={IRK5B7_^_J4jF-jrB$k$2F{N
z?(&n`)yY19JPU}Aah@HT8i0_i(7&=?#8Or$Y{>r;B(w1z^s8KqStE(R{-uDeJF2-Z
zo^grA8Ui@-o(TNR(Tv<d#&9DAD@b3n7SuR)iUnVkL5)9>jdx_m2lV@X_*&>W)<#D7
z6Qm*o#Ku6t=wvXj<<S#F+tS5um_Lk7tdAs~%i5To#yuf9fJ>x-22Q}Oj*wGta_br9
z;*ZQ4omT#HkyGAZBvB`V$QK#t*dI%Ea=+bl=D9GGt|w`32Y}!?NUaWUx<LAdoCSJ7
z1hH0~tSujUI1M}>^sqD+<Jsj5rD|VzLgpK^X=Ppn>AtU3O%gl>J;X=gCTnMor(#$e
zVhr&{0Vcn@BZ*_sv3XG%aNtSyd$wOjsxJ&7FprLoRm&97tEx8(0Omt+z%wzwV<1Ed
zbx9FbpeH;U^G)6qkFGvQ=mwai&9bmX<%RsjMtuQRdmzyBRcV8S3n6}isr=6q?f^lH
zu{I!OKnch^%Lr!X2x4`6-+Y|_$G#8ib@LZ-W%b~-0<lG%{0R;RnCjjty|PtNs@Taj
zAb*E<30w;&kmyf?tFTvHkunEj@VCPYuLmtMQkAO3IH-KhJBc~ND}1e|I9nTn$g#q3
z$U`9$pH3Sj3d2pK;GD>V2Ddk|*fiC)lBn^-F5$h9HcA|*8wE8jk%0laaiPH?b)i68
z@B$0~WmvaW5K6pCT0W$$>Hq)p|L?&6?ha6!R4(x&O<C8d!5TE=^S|r(|4yrqSK^X~
Uz8+XKqT%mrT1J|sSDhmM4+}lR(*OVf

literal 0
HcmV?d00001

diff --git a/charts/incubator/wireguard/questions.yaml b/charts/incubator/wireguard/questions.yaml
new file mode 100644
index 00000000000..3ab1cc0db7f
--- /dev/null
+++ b/charts/incubator/wireguard/questions.yaml
@@ -0,0 +1,151 @@
+# Include{groups}
+portals:
+  open:
+# Include{portalLink}
+questions:
+# Include{global}
+# Include{controller}
+# Include{controllerDeployment}
+# Include{replicas}
+# Include{replica1}
+# Include{strategy}
+# Include{recreate}
+# Include{controllerExpert}
+# Include{controllerExpertExtraArgs}
+  - variable: wg
+    group: Container Configuration
+    label: Wireguard Configuration
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: configFileHostPath
+          label: Config File Host Path
+          schema:
+            type: string
+            required: true
+            default: ""
+        - variable: killswitch
+          label: Killswitch
+          description: Enable a killswitch that kills all traffic when the VPN is not connected
+          schema:
+            type: boolean
+            default: false
+        - variable: excludedIP4networks
+          label: Killswitch Excluded IPv4 networks
+          description: List of Killswitch Excluded IPv4 Addresses
+          schema:
+            type: list
+            default: []
+            items:
+              - variable: networkv4
+                label: IPv4 Network
+                schema:
+                  type: string
+                  required: true
+        - variable: excludedIP6networks
+          label: Killswitch Excluded IPv6 networks
+          description: List of Killswitch Excluded IPv6 Addresses
+          schema:
+            type: list
+            default: []
+            items:
+              - variable: networkv6
+                label: IPv6 Network
+                schema:
+                  type: string
+                  required: true
+# Include{containerConfig}
+# Include{serviceRoot}
+        - variable: main
+          label: "Main Service"
+          description: "The Primary service on which the healthcheck runs, often the webUI"
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{serviceSelector}
+                    - variable: main
+                      label: "Main Service Port Configuration"
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: "Port"
+                            description: "This port exposes the container port on the service"
+                            schema:
+                              type: int
+                              default: 51820
+                              required: true
+# Include{advancedPortUDP}
+                                - variable: targetPort
+                                  label: "Target Port"
+                                  description: "The internal(!) port on the container the Application runs on"
+                                  schema:
+                                    type: int
+                                    default: 51820
+# Include{serviceExpertRoot}
+            default: false
+# Include{serviceExpert}
+# Include{serviceList}
+# Include{persistenceList}
+# Include{ingressRoot}
+        - variable: main
+          label: "Main Ingress"
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{ingressDefault}
+# Include{ingressTLS}
+# Include{ingressTraefik}
+# Include{ingressExpert}
+# Include{ingressList}
+# Include{security}
+# Include{securityContextAdvancedRoot}
+              - variable: privileged
+                label: "Privileged mode"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: readOnlyRootFilesystem
+                label: "ReadOnly Root Filesystem"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: allowPrivilegeEscalation
+                label: "Allow Privilege Escalation"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: runAsNonRoot
+                label: "runAsNonRoot"
+                schema:
+                  type: boolean
+                  default: false
+# Include{securityContextAdvanced}
+# Include{podSecurityContextRoot}
+        - variable: runAsUser
+          label: "runAsUser"
+          description: "The UserID of the user running the application"
+          schema:
+            type: int
+            default: 0
+        - variable: runAsGroup
+          label: "runAsGroup"
+          description: "The groupID this App of the user running the application"
+          schema:
+            type: int
+            default: 0
+        - variable: fsGroup
+          label: "fsGroup"
+          description: "The group that should own ALL storage."
+          schema:
+            type: int
+            default: 568
+# Include{podSecurityContextAdvanced}
+# Include{resources}
+# Include{advanced}
+# Include{addons}
+# Include{documentation}
diff --git a/charts/incubator/wireguard/templates/_configfilemount.tpl b/charts/incubator/wireguard/templates/_configfilemount.tpl
new file mode 100644
index 00000000000..bd325e64249
--- /dev/null
+++ b/charts/incubator/wireguard/templates/_configfilemount.tpl
@@ -0,0 +1,23 @@
+{{- define "wireguard.configfile" -}}
+{{- if and .Values.wg.configFileHostPath ( not .Values.wg.config.enable ) }}
+enabled: true
+type: hostPath
+readOnly: true
+hostPathType: File
+hostPath: {{ .Values.wg.configFileHostPath }}
+mountPath: /etc/wireguard/wg0.conf
+{{- end }}
+
+{{- if .Values.wg.config.enabled }}
+enabled: true
+type: secret
+readOnly: true
+defaultMode: "0600"
+objectName: '{{ printf "%s-wg-config-secret" (include "tc.common.names.fullname" .) }}'
+mountPath: /etc/wireguard
+items:
+  - key: wg0.conf
+    path: wg0.conf
+{{- end }}
+
+{{- end -}}
diff --git a/charts/incubator/wireguard/templates/_configmap.tpl b/charts/incubator/wireguard/templates/_configmap.tpl
new file mode 100644
index 00000000000..ec2e5a1c2a6
--- /dev/null
+++ b/charts/incubator/wireguard/templates/_configmap.tpl
@@ -0,0 +1,28 @@
+{{/* Define the secrets */}}
+{{- define "wg.env.configmap" -}}
+
+{{- $configName := printf "%s-wg-env-config" (include "tc.common.names.fullname" .) }}
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ $configName }}
+  labels:
+    {{- include "tc.common.labels" . | nindent 4 }}
+data:
+  SEPARATOR: ";"
+  IPTABLES_BACKEND: nft
+  KILLSWITCH: {{ .Values.wg.killswitch | quote }}
+  {{- if .Values.wg.killswitch }}
+    {{- $excludedIP4net := "172.16.0.0/12" }}
+    {{- range .Values.wg.excludedIP4networks }}
+      {{- $excludedIP4net = ( printf "%v;%v" $excludedIP4net . ) }}
+    {{- end }}
+  KILLSWITCH_EXCLUDEDNETWORKS_IPV4: {{ $excludedIP4net | quote }}
+    {{- $excludedIP6net := "" }}
+    {{- range .Values.wg.excludedIP6networks }}
+      {{- $excludedIP6net = ( printf "%v;%v" $excludedIP6net . ) }}
+    {{- end }}
+  KILLSWITCH_EXCLUDEDNETWORKS_IPV6: {{ $excludedIP4net | quote }}
+  {{- end }}
+{{- end -}}
diff --git a/charts/incubator/wireguard/templates/_secret.tpl b/charts/incubator/wireguard/templates/_secret.tpl
new file mode 100644
index 00000000000..43238aece7e
--- /dev/null
+++ b/charts/incubator/wireguard/templates/_secret.tpl
@@ -0,0 +1,16 @@
+{{/* Define the secrets */}}
+{{- define "wg.config-secret" -}}
+
+{{- $secretName := printf "%s-wg-config-secret" (include "tc.common.names.fullname" .) }}
+---
+apiVersion: v1
+kind: Secret
+type: Opaque
+metadata:
+  name: {{ $secretName }}
+  labels:
+    {{- include "tc.common.labels" . | nindent 4 }}
+data:
+  wg0.conf: |
+{{ .Values.wg.config.data | b64enc | indent 4 }}
+{{- end -}}
diff --git a/charts/incubator/wireguard/templates/common.yaml b/charts/incubator/wireguard/templates/common.yaml
new file mode 100644
index 00000000000..22f96e37a2f
--- /dev/null
+++ b/charts/incubator/wireguard/templates/common.yaml
@@ -0,0 +1,12 @@
+{{/* Make sure all variables are set properly */}}
+{{- include "tc.common.loader.init" . }}
+
+{{/* Render config */}}
+{{- include "wg.env.configmap" . }}
+{{/* Render secret */}}
+{{- include "wg.config-secret" . }}
+
+{{- $_ := set .Values.persistence "configfile" (include "wireguard.configfile" . | fromYaml) -}}
+
+{{/* Render the templates */}}
+{{ include "tc.common.loader.apply" . }}
diff --git a/charts/incubator/wireguard/values.yaml b/charts/incubator/wireguard/values.yaml
new file mode 100644
index 00000000000..e399b4d88e6
--- /dev/null
+++ b/charts/incubator/wireguard/values.yaml
@@ -0,0 +1,59 @@
+image:
+  repository: tccr.io/truecharts/wireguard
+  tag: v1.0.20210914@sha256:9f56e5660e8df8d4d38521ed73a4cc29fa24bf578007bfbe633e00184e2ebfbc
+  pullPolicy: IfNotPresent
+
+podSecurityContext:
+  runAsUser: 0
+  runAsGroup: 0
+
+securityContext:
+  runAsNonRoot: false
+  readOnlyRootFilesystem: false
+  capabilities:
+    add:
+      - NET_ADMIN
+      - SYS_MODULE
+
+wg:
+  killswitch: false
+  excludedIP4networks: []
+  excludedIP6networks: []
+  # Leave empty if you going to use the paste your config bellow
+  configFileHostPath: ""
+  config:
+    enabled: false
+    # Your wg config here eg:
+    data: |
+      [Interface]
+      Address = 10.0.0.1/24
+      ListenPort = 51820
+      PrivateKey = PRIVATE_KEY
+
+      [Peer]
+      PublicKey = PUBLIC_KEY
+      AllowedIPs = 10.0.0.0/24
+      Endpoint = wg.example:51820
+
+envFrom:
+  - configMapRef:
+      name: '{{ include "tc.common.names.fullname" . }}-wg-env-config'
+
+probes:
+  liveness:
+    enabled: false
+  readiness:
+    enabled: false
+  startup:
+    enabled: false
+
+service:
+  main:
+    ports:
+      main:
+        port: 51820
+        targetPort: 51820
+        protocol: UDP
+
+portal:
+  enabled: false
diff --git a/cspell.config.yaml b/cspell.config.yaml
index 68a4a8d27ea..c220bd7117e 100644
--- a/cspell.config.yaml
+++ b/cspell.config.yaml
@@ -1,5 +1,6 @@
 version: "0.2"
 words:
+  - airsonic
   - aliasgroup
   - allowtransparency
   - APITOKEN
@@ -89,6 +90,7 @@ words:
   - multihost
   - neko
   - netdata
+  - networkv
   - nextcloud
   - nobind
   - nodeport