From 16d37e6ecd29e9d6efea5b7794c540d7d558cc94 Mon Sep 17 00:00:00 2001 From: vcerenu Date: Wed, 16 Feb 2022 16:42:21 -0300 Subject: [PATCH] fix in wazuh-indexer demo certificates --- docker-compose.yml | 2 +- .../config/unattended_installer.tar.gz | Bin 5699 -> 9234 bytes .../wazuh-indexer/opensearch.yml | 6 ----- .../wazuh-indexer/wazuh1.indexer.yml | 16 +++++-------- .../wazuh-indexer/wazuh2.indexer.yml | 16 +++++-------- .../wazuh-indexer/wazuh3.indexer.yml | 16 +++++-------- .../wazuh_indexer_ssl_certs/certs.yml | 6 ++--- wazuh-dashboard/config/wazuh_app_config.sh | 4 ++-- wazuh-indexer/Dockerfile | 8 ++++++- wazuh-indexer/config/config.sh | 17 ++++++++------ wazuh-indexer/config/config.yml | 5 +++++ wazuh-indexer/config/opensearch.yml | 21 ++++++------------ .../config/unattended_installer.tar.gz | Bin 8865 -> 9234 bytes 13 files changed, 50 insertions(+), 67 deletions(-) create mode 100644 wazuh-indexer/config/config.yml diff --git a/docker-compose.yml b/docker-compose.yml index c4a212f0..5ed424b6 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -3,7 +3,7 @@ version: '3.7' services: wazuh.manager: - image: wazuh/wazuh-odfe:4.3.0 + image: wazuh/wazuh-manager:4.3.0 hostname: wazuh.manager restart: always ports: diff --git a/indexer_certs_creator/config/unattended_installer.tar.gz b/indexer_certs_creator/config/unattended_installer.tar.gz index 04d24f9e211d67946787a9846b239eba0b9493f3..0a2de7fdb283502c7b8f2917f9cb068a7a03ad05 100644 GIT binary patch literal 9234 zcmV+tB<OjSQRQ+tSRMxo_~FCNS@N&f>YEw)H@0gVcS!B#hns)?pUdC%Y#Qv82)Rps zH@`%E;(#uEralR%KZZZ79;!t#wj{(ghjfQkmFuj)8SRi?M3XWrcScWG&0V!|Llm** zbYKRdV+GXot^S-&8wENk^k?Y4OU?tzezn8P5hb2GxFi!N?31DAQxf(~7s{yUJTzUi zM}6ow!QX8TEKoy7XJ-?w>+%b)$*9-5<(<1Xh2F7W>vjm<_z{+kbL_3!@Qw|L6sa_KHPbiosH0@8H` zltke51P@5Zv@Sp~nAnNw+NAFVVL&W!m^zf89#ETv9yuOSm+Uz~=zHXhT9NOBmxT4I z0OS+u51k-zJQtvQK5K3B#sV^UVO-xL9{@V8=nD!~Dz%3+G|`da?vKH$gbEr^%saNx zM*|Eyq)`Htd$j9-M|bH(zQ7@RkUoeIT40l*m#!<7K=s?EWzm4Sdp>2ppS?r6<{&`F zO7Nr2x?z(tF-&{txJU>%o0jj4LPmx0${fMKunrlN05(b`Z{oJuywW3KycfXl=K;3{ z18+jQ(O^J0L`d+w%>}3~d9l};3 zVHDpqqydF~loc;;%^O2!!4`)zLfgCV*fw=%QAOT=#5Ood#e1IXvA*W;6P)7hJj8^q zy!>yBEU64y68>%r`R{&;um6r4qCFWfX$8wT01MXtjg6fDx4FIjJ^u4e9=`s+#>F50 zkIROXGn=QxHbb)mR)RI6qz_918JmNMVsn#pEdO#8@?!K6gm=)RF7?e2RwEW_84aSI z<5ok@8w6EsTM7F4#a$w1`c-IkPmvmAmUmVL%epkDh!?P|G|ZKHW95ytyVvVCj`l8U z+b^CU)%;J-JFhA&d$a!Mo73vsXD_VY!Kilr+zqx~>|GAWmCEbm=Z4PwE#Vh1y0~8; zRxZ^D=ZV~GS-n=c@p*FmyJ@$!g00Tr7-cf&eOoM&T+t{G*LjTXkQSGgN zzHv~|5~-m>MV%(c_wuB?cyac}QTMes`LcZ;ZH3_qfewAuAf0iVaz@ zF+(_#0g@rAO?eEXEo+aZyS2_Tk@Bh{7 z8xOPbpN-n~_xR5@d9)Fhna5l?YYMw9xU~d-?_*nL*>!+L1+EFcEES;duZmwLj+dgIhDle^ z2>Lq~9uuf^rRxN3zzo=YDB7rPC8D#UnPhgtYn(8o<$6OCtj`_|DWeG{8oqfxpJl+= zXn?xG+uhPEv#Sy-ESz1hfJl@cQrnm4Q*l+&u!au2pV{$-bJm{DwPc02yHhGE>@SpI}sM*xp5YPqlHy*#}x z-{*%6_5gqw{JlGn00}1lUVuot4jtG@sa8@VppGy?>Y8q-p)eEwn{68?Tf6dFN{Pe;N0GkT&(5B~qVf!BIukTO?`Iz1Vj=KKspNFY z`}d^$g%~Se2VM_TW~T=E`0+6UaM`ki%NIKj5%o=@IyU_({K`xuK98W>D0Q8ZO*>Jq zjde}q$rF-*CyggR)(wW4lwCl)W_d&0J&^L4Tt>rnz^|YWE(3O7sA)i*QKAEV$1j&7 zSS)Au<<+yho1?G{4%p28qMnVcBrSEKVpk6F{)AESA#wXUC2qEfa1w@G}5HN z3X?o1$sP3Tm36 zDw&JD|D779N<+$?4|kzj=~OBab)rftxW#&;(V=OMTKRV##pJKQ=9)vDy5UOEp|DD+ z+NL3raoHQ#&6TyDPe;U%r0y7`N<*tE0mUy&!0Ra>zS%TL>>9w1Pmcn~lJC{(if>NS z?J&mx+N_}luQL5ih#{5x#sh^o0=gVaZMtf#Pf<~4(z~9vcQQ5`N8tAiE`*9>jds=^FaN9K;Mkgm*yFjr?XJ+-PcO}R+a zx;T`wMpr50CIM~I%@TG4{k)v$^Xm@?A6gO&%96McoXe_B$5j_^75zn+cBCxvx>)6A z;1+&jG4#AK7!K>g?9o7rPZl~qEx;^2%wnjaH6MAoyzJPsCc6mtbLO}(^JUK~@?D2` z2HR!R>vLR(RLk(i1HKBg^CoghRgVE&k?C3j<|=#g;f8B7UyHmj_q7a234!l*=eo0B z7A{m@iux$9>Fr@u8tfh^gZbPwUDpeNBG`7OK2h=@_X!Nx96pmO?YTV9?=lGKu#y;E z`q>Fd{qYq%cg@ObnIk$(mQ;4lC8)@p!AcMeDxq(>0UlIUplRr1$lbQgppC2;nIR@# zs|$?uewEctv;K0tS4OBA1Fm=Yg6lGS$*j$4)PuWW*o1uK{!FUof?j3=A}QjjX}7SQ z#S-?^DzP9cuiCZo)bqmJlDL048ki*e&k|A$OqUnv_(tH zIXHF+EvfJX--cpn;;|Z&n6XPuHUc`v0UbdYH0xRZuuW)ort-!GrWPjG_M90sk4#LQ;kqN0iA& z%6<5Gcrw*7OQ_#}8{~&(p{YWJtiU~w1~$_Vm@ZuI_Dm(wX~9Wa_z8@ZM#;N_2VmBh zjt^#0@<4D}^>{E&ndDapD!K>+3_r%rucImAG9>DTkqJB*a)B<7$?vVxqr;=;>p7E5 z6j9C$ZDnPOoRw^5DVruN4R*!IbyQ`VF+B3&%>1djh6W6OOpSGgX)c{9nv=9Vk~^c) zD5#6G+Igl>lL6ekbd-qBJh>E-$(7`hm4zaQxtz`MHEY3T{oI)RthH&*d;>Sc_J*;9 zl;OxCkkBuL`J<6&9QpvoBCYZ}v;3u2egv%UV{`J8nOZuZ8#B$%45tB~lh)bUO|VQAfta}nTAjEtXJ;=IH_2Nae-$3%6Ppq! zo2R|#|0f#ExY=A2cdk=6p5vRo@l{%RTQz$DRJr*{l8ckVCC}n7><02E6S|K(26^%X zn*yvhKTgcFlArODP9yA4rno>X?3M(^)Wv0PckWT9SsWhFf#TgU=qPI={qv~xYClsX z31YUG;wTVh4Rno^$t#x0qZ}~H4+Mz=W*+f3=Hfhidvttqc6e4C@B8DE*N4YPXCLPS z-rGOhJw0SiXTUC-58$6NcSp+N7PO|Fe0EvGfMp`$)>J)9XBw3-0*_cnzT<}MlMF-L z%))jBrqBXz#H2-xGzRq-{P)QM+72-}5Y(7|0)p{N9H%oFlfD-y(|Y2-5YP!^BZApX z7C`TU4M@6+`+4}ar;x*vvxu0|P=Xc~9qWjVHHQ9+d|PtNbP`keAl?49=P51ySBF-ZYoqbMwjz00t(@1MmA#LOaw zUly@L&g^u$3|ccR0aXsfHrwGrDF$}|%ze}1Uw1$+4jJ4x$5ec!&GUz5SWpkuhp#q^ z+u_4koI=J!KFMk`a}Lg8e-HRyE=x0TRXIGDW+XNS3=o^YSqF@X2h+`Mj2y<_oGCzS zpQ%b8mc&9@s%a>GGLI*>)*jIiKl6Lw1w6=wO%G3Gkg?qNiQ)1l75u8!PJ!?tcU6uK zn(3Y*5D35x3>Q?ZD@O<51+c=qEHxMPjs;$w5$7WN)?7&au4&PDkMLeZ8=C)1+Lin5 zeCRLkA`!I}Uxkeg;Fp0nn_xn0pU15+3@f_fmWv+>vPF@sY))692qrrCzEzmKbxqV- z(9|SGt-}77-@V|-2cBgPkR9>vNR@};-NwRjy$Mi^S3k&4tM}~cyw#Jptin!LaX%+7!wfZHjHlpR-Hv)h{VQJpg_GP?u|{2hXo z!1bJyZIo%o%a@O!cmMSC_;e@lo#PYqoh~Y@uI}+;4X(+2Tw?QlQ`qeO40LHe>me?W zZ5A>`$~S`Q{tO<{AOPpN$@Sp6h-hG1+O3wNmHdb&8QxSRGpr?P2$@PXLjkMyU6cbq z6k5-k2qoV^mDj9zxHzL1Y+%8%kW%o;m9)uZJEU&X)$TBrF-Xc3lD!lHmz+(grebJ1 zt~Pd3a3(AK&rfL4C^Myv^4R#xNSvm;s)!oOIj_;kSxS;o5Tk4|Ov+{_k1P(%UI$Oa z@UZlmJO&nqYOZ{3O!Wu~mgbO-7*gpQXb>kMs~g8{amIqvtidaT{I`JjBF2kO`V7=i zbqlDw3^h(F9jlqUcMDj19BsW__ZU?-U^qb(xEV{1= zTdP$$gf|EJ%Z#z)6*;cBajnvTz-an8yBMUF#yJzqNSd?1htmEwyH=qIhOnkpo{Ry$R6aftds)Wf-U|+=**S=(iG(^LWNKH) z$$+9yj~PcSMU6);S$u`X3q_>a!U$N{FNa<#W;`c5X$eMPly?p@(C=Ho3<*Ipq^JZi z_Izce*!!vyK*Y;S;UbX&04OSntjfl-P01C5BFpoAYK3ud@8pX`RzI}XSfKVpaGwQX z;qQmZPw;OXUxoMg@qusqL-`}tuK)Dm-KskE*OQH?NWB#3raVusUMTq|9ZJO%F?TiO z!Dy2RfHERoDjkZ1x@@p|r*tkp&cNf!OgbesWE|h^VD=*2T0OW;by6$h-CL>jUx`Rk zb0fep@H1h-aSmU#mon1G&)-N8b%M}eBP)#ur2c>msM`zsYb%X)vQDNV))(;9N)cF= zpp{z@R|g+!ia5z$`I?Mjx*pdi$YqPTWV)UUNG$Z;Q`t65ZPk+tJWP&>cz<8bl1gnGC{_CZGfr2DM<>@);zWRW0nh{CAlxEH7dlR~)s@6YSv*KSl zWlHH$rWIn8QbGA^dx=J=9MYs=Ha@Cz6f#aikXo(EPhrvKUu(ZoR-=50zwe#9#+#%z zax}?rqda@@s-+gM+IqRJtd5d@d?@SLA**-ga!LJni+U=VJ9jdD!{XOom{V6Lrr(Q( z)cwEquJyTX8;O6u{uQXI8%eGyzmiPrT5WuaGv~Qn;;AQJ&T=%2MA^Jblp;!Y+}Qv7 z?Jht7BmqA3NZUCgGZ~q9Ef%}L0$BWz_U}(lKQk&cYWo>;KC#+|9@{zSvGxwXQ8KL8 z5+rdibRIicjM>ojCey%~djvXY@WeJ{678S^ymlyBW68Uc>mwBW;VJIQO*N)`^2EVz zlU~hr7U*aJ%|R&sF|PkwG^|Dam@%Fu^4T;~b%xsROdZ=K{VRE61pTRdm9!+u>`DZ; zv-Be^LomKQ+@sS})iYIRtlAkc6MPn|oezMq8h>#g#NH9f)Kzb++Z&0CZ|gS4))bqU zx`Ew9Yn#E+JsS7KQ`lgDErVg93w@~>HL=}fzoGO725I!u*4+R@F=L0ZYf6KB%!-|j zOwabKPJhT1rs($4V7Qsqt#Q4HZd2vmamrHv)E!ePg)~`{V_~f84T7e+V?JTde3UB{ zNlNwYy7-zS2xvyo zJb5RBW z+rm;d(ul>W=Wi&r2jN_rM))me>Sp8%=i`;~A=g&OC=WdySbxmu>@-nG8XW?!cwJt; zk*?!PV00u+vX;Yf%X$z)CNbKnqCB!xAAzHCXTJ@?A7HT`pbG)JIQutMq5eQ4x=?j6 zoy~rOl7cCJt=zdgU>E;5b1wgRdf*(rI=jrL-89^%DV}?u@Vw$a+Oo(gFSAyf7M+jo zVsOixaQX4Stg+YayuaLg)9JcnAJ`E1?%ul&Syg-Q-isgIw;jsf$fx%6^Zg%T<>Ees z?C8bwedZAP8C>Ngbx%zR5I4ygxV&B6Q%n1!R2U7ZxH}mvwtS$=32)uQ=Pz=&lGzV~ zTQCXPvuDq&`FC>X?MV8&O7OXvwdCj=N(&&0{mg2Hs_66vbJf_%iNns`y_PC>MM9!3 zdw>Bv0g>#$WUR(5Z{#k=i~dJ{5kd@VODb+Mgc!~-73bqqoi|G|WBX)acCfmBIzr|_ zA?SObVF^f2Wykqkm>!U{PPX`sU%c>eg~gPMAet~sZZUv@M%B< zY8>MfX-spMi`yygCH~8MI3Iceb`(rgAXWZw*AK&`=3fe(;}5#fw8h+|3-v(V>GA8+ zHe$hTaM)PqCp0vp3FUL?k|NHvO;qFuG`+AMF(wl|Y3X>~_fzzr-kkjI? z2GUrD*Q@ZG@{HqT1D^`gZIF0hy$C$%Llk=qB{} z1zlIh$EBxp<}z%G)wRGh$D9j~7;SSU;Q~?r@}1bB?FZAL#|H}ZDq+se!VcfY+oJ>T z;f_WOJu|kY)2_wcrlh-*x$?B{Q{JqpZ8hskdK5e$nbC@aa*Bow4^9Ax%A;r(4U^Vr(mKY5Jh6Gz5 z3bKeQFd$@Q&mR`Db8m5Q$S3>j4-uI(@Og_dWJ8&hV5dR<7L zZ3L{Q%f`|oJx)Y!U59PN6wqH=)_mQy=iH*+W|RB%b=FExzP{%0Z>v*#uE4B17$7h? zFweAQnyJyqeO-+sEjDNgmy#8ACDzM1X{Zb1+mCXSG1_&EZACURx@hBgl4*Ygi6<#= z;fTKo12>8vUW=n)K8PZE9CT{1SQBQ_K+dLNCQ~?lNw_kW2wkqjW?;U&_R7i!E&{U& zp;)zgk$ois%D@8hbD1zgy+H?o!YGpWL#im@G_-1qbLQw`6!{uOVmY!NJ(i_^F=|4M z8g6H;M@+_Q#Dt7zfLAK?=!3SkQ|{4+*vX-OnjhOp92&+@tCyjq<@Iztq+3j>tnL^+ zG#v~qBT|ld8TeQ$@s?bd4LzG^QEdB*Ke=GoG_!gdZWGLkLrfV4 zIs?=crCJAPYQSqVjBLj0)~RX}us``wU;4@PI@I0|siMq*(7+*?a;>_3t#0FxXQ)}E zTdUqstJgHR8LH*UR->nhYlacB<@?c^S&M{N@p6+ON!`%rLW; zAuQ&5o<*B+?xm-nL7t#;K7}Y_2ugT zmZGz{H}XF#U_Aac>@=>fj>DNd@Q$yqcN$vMJw(Za*?v536h>#gFCQ0k_L4Pv`$x|r zNDXgDW?e0O{LpLG!(Qw7v3KxTW4&1aI(iED|Gw9%hsX8ss#j}V_nPgUUWT|N~{BPPGB8*HTs~ncc^B8JKTA=;)$*y zRb7k2&ATS;-cc&(2+$Gu@UtisJ`6nqJ{P52KRxN{)QqY;YC)d;$mLU2-Ko`n618;p ze`5X#FBg7&|2?FJ1kJmk)r?ASHEaD^D-KOTx4=iu+TTO`*XhBJUac44scxgrWu;Nu zy$f~;-UKL7&Eo|8PO}H+(V`z-Q|k0NQ>V!?i-?>eX#b}#^P`K&BPmWJ+)KxG_VyYr zma5*iZ(fdwL@5SR(kUzinKtLj5u=r0AS50uiOA{|f3{+u_%mCN__N~uQM&qg8EGPt z@x^+gG#M&?ngl)0)&~YwpnL0jq8XKvBcD;SG;Pbk|Fo2Hsl1geo)TzL&shWi^#TN~ z4-tFSS&HxY4gR$f4_ZNa-{}?cqG&?2dW6Vfj%AK>ua>hhhd`4SB$h)+SYbPFq)W1a zgu=oEJowoN3uHk?2FTd8nh&LvZhT4xG7rtSAqm+PmSsrHdf%K-SkCpgBN|zit(lVpE1!aJ)A7A)yH^>k!Y zak>C~eo>+^x^sbTqBi>%02{uI95;RC;p+@J~vnbHsB5SvFD+A9P(yLhr;v=7%L!rgj_flGr zBlyLeG~QH`=$ z48y%?&Mr6BXL`%OowB%V82S4UTvI!-my+oi|7QZks6rL0P=zW~p$b)~LKUh|g(_5` o3RS2=6{=8$Dpa8gRj5K0s!)Y0RG|u0_=|=A0R*>>xB&0~0D~nz1ONa4 literal 5699 zcmV-J7QE>niwFP!000001MNL|f7>?C{rB~!;M8=EyZFx0ruE*rIok9{vbgEiHhKJ$ zCEDg9ORf&PZkzA^f~0Oyw(J~xwpYxW*dz#m00@AGG)I?h8|x}oyF|BaS<|pteQ>*_ z24$yKqkro=TamwBc~IZ1@9Z=hjqOdSuW!}2>krV@E%PBP4h-5v=)pw6Cf1!)xJB*% z(Bg>nuNZot3~tQ~me>FGW@9_o|9zBs`ZvZ{x3Fv~!<(7H()w@Iwzjr%{ohB)sDBu| zP5MNUZM?iKEU*7&t+|uy|31nJ`sb}(nHZJXNXtNDk^UQ-TQU7_ZErUppxT{}{=xry z{p*H`t=$4bSd%TAC|uvP0wG-<;oWEht0&`KRB!B5YVcEsnyLKF8FnpfPOxc(yY`8O zdsw!Gy{<@4*5xobuMq(M-9q{omyGk@G&F3jnguNH|LZ%oJpaF!vXuVW@9sz*kBL6W z==>in)PJL~*@*l9#`bpZ|L>!e%jLpDbfhDDNG#^CkprIG+CV*7xdOvrI!CguqM>2g z7E)v#^)RAFfK_B0=me|;?Gwv34b;JkV-kCYSg#6TKE>vUSQasKz;2ifTIIklW)mZB zZ;lBFiSG6V>naqwBW$w}Vb8`8ASBl0+Mfi~ZYo0K4p7)djRKI|$9G&3C2rQ!BK zLr@_=P>_)kZ7USO^t-a6V2gz?6SH`xLJ*TR3qy@7k1p#*LCQ#y)e+GtBM?LtlZ|NxKlZe}zW=v7v(KN&{GWCll{o=e5dWLaME4na+ygJcfG`?DNI(-= zb1(&$QBN^vW1Cmg9Kp>F23W_YY(q4f5_^conlm7J)iw;xs#4gBHB1I~k1#W?Owm2U zsuc_GtPaAu=T0eIpt9DG*XoV656a&DVAwd`zpCxLetBFo|9aVbS81!8^)DaJsvi$u zD}z_#+WAY}+Iqb|8%-*e_a`qUk^5UBFJOG}yugiIVJDnqa&T@&GY7~ijYYGA7Ro_c1$D5%InviKaczG zjp?_Yb7#x8|Lo(BWBl=;CY$ZOi89qrUv%sj^~1`$qn&>3{OPC7{g-=E=3p947s3%5 zqJnLkr03Y!-COX#*MU7|i*+g5(C``>v4*DC&`eQ|Cjd_%;lwE_5U1W5o^5KI&Wld- ze6scQRBp_+Ds|^~=hF-GlRY}_e|ga)@2Zu*-q!v!K0LJs!%ic+K!W^B$fwtgk{M8x zO&M>_l-5u;#@UD*IQom;(J5(dH3}LIqW;aiJB#u3QY*~{TeC^e^CX=Ctra@I)JIz zL5;ehL3yQVC@{lzqGZb=107jotkAP6m&stGL>bEZfbWg?I4x}3L?6)9 z*EF2LkhOY*DuuuW!N|MvmckX zuC$hr?_&zfwhKjw-3A&GOt02O{kZ6Ulj(RdwNpFj>Hr1XI(H)*nzC+gh6fH7|Gy#_OXo_PcYHwC&T2k3?%Dl)HXQW9nCVe>QSu{y>Dbt zNvMZs?Mw8@I+4{XAOA8mU}bS-&6|RrjVDDPGj>8xgMD&aa<#5 zCc<(pW2$Qgd^y8ogN8(t|K;huPVM$iti~l%^~hv2orRCf5L|A&p?)ih_rF6c)FF6!h`Iw${CDCE1Y*qU6$D+gx(7j5L+`41 z1Qxhb@2p-Xx3*YDZq0NBmU+72SY@8w#PgL9M3+O{jU@^Q-A~f8OAmCa)VaC&op=$$ z+$P)qRE1*mb83OW?k2w$2#lv2%O6mS7~q?WLg|ZT?;T#3AM-N?RRbgv|J>I+gb0lw zmj;#e3D(r0R;Vd=Kb_*Ru`cVjfWz4KCoe1A9{2}HfqmiL&i~3UZ1`UpQ_D!~@7{3x zFDt_RU-whjbB-(D{NyFu{m(|N*4Wu@HX8K#kDYogzyEn3C8PfNB&SaSl<6sc#TqU_ zgXw>3%hPx4?`Eyutb6*e*K3<}|G!?p@B9CzVc7HF7PbFF%fp|lJ&3eDncm2Fh)zvo zV9Fz!0(f^g*p7JU`40=}n8tS5oUt37e^ApvuF0^CV!*R!jAtep3~jW&S3-?ieQU!7 zJkpg);h}fuWbD#omr432#>g`I_Ea|UGkV2?oh(2OLURCiN{EOJT_JI<0_BmRlKu>; zkOKy6GDaabjVxsJ*_W5c=jbIHhK5d^o<k=2m$7h^3-v8g5HM)&|;&k6bht|KBMwCB&~g?cVuX699~Q4@)<>-vk>Lix1_ao zm9Pt$0KZN{oJRC3RPMvqnpA=x*1P_2;@&D0t2Q5(g~nhtOoLm(ceDBZMa) zV#yrQ;Y69{JLMI{GNBtrRs6S4jiN!zg}K2IFw?A>FXOX@%8_4o zZX!p={FdQs@d{$eJq^DCyY;I0Ky_+=_3PxgrbBw0JO-f}emk>vPynKhFw#f^Em9dv zr9^Fr--ENWle1k(2x1LM-xE{3JbNafHJwlEkM`N|(ecaMqNWa0$VKHW#<)DSG-4qw z-wLV6DKez-V!#|){rbid#Fni16{?|QZ!XY3u_^dHG(>8F=*JJV?i*#i@#mkTO$R#F zh05AWG4l>te?(`3nZTGt&u za~EEOZ&Rliitur_?z%1tZ(1@c8;+gPcQ$I9Ptv`xhj)CXSWi%y9-DzS(hYtswLGb#(-#Nj&Z~C4+}uCtEaqM0@{=5!_zO_MQ$)Kg#y6KL3ytNT zY%4=lww&Hys94==op-8lTYIubKnyyOt0yg%K2=Z7TloTI(A2!N)+Wku%0+H0o_--Dvf0L3?1Eo>6tt85MB#@6-%p)88L zp6%`hX6rpg#Im!%hM@`liX;Ig>Wo;TAfe~a%jn?b(4R1$nTjv{?~tdCz@SAXd9`}!Ur6*5qhO!;IM47%M!vCCD%`28r)f>beuo0qe5X*9~>BEAqh_VMGwN07mOul>V-NW|V&VdgD9nY!ngEo~6 z2;@l}GJxf*W8w|alYWNBj!Kv{Y*63>T_NKktPgEdIRarWVB7 zKkm%KDwn^t%b#e!;A5HM*sfoP8rT1K7tr(Xm){#3*QH<9BvdN+aor2LbQJORPKu-h zjZjIu--?vSWn{gIyjdSD$~MR;Bi{lGxj(iu$r8qL-@*(fM)8#sy)8H(6HFh7r0D~{ zfv6gE&jJ=xBNk)X6DhI|(-g_7YSO!bhKXcEhmy9)5{90G@QV?`8ze#OVL9U3_lJ>p zD0JyN7r4{-{M+RR3| zC=rTVxF{9+jzjm&DD&M$F>el@R=iqZ2L0)RXB8uOUS;5FuT zU+gvJ_r61~v6$`q_Zo9~TI@A4$Z{30v2ZfKVUIE-rn2u5yy@&d@^Hg>%&CQEaOwmW z5?pQOCQ*4)Hr#UOb5+PjhDj>yw|I7@bi2c8Ifv2vpO0c@7Ei=^V!PA0J>NWT60pxe zfFL)~CTaRqrBWA7RKbkkrm^C@h-h~K4AWk8x6#{E^!6Ad8;`{~`iV)(eucGhX!DpZ z@945jihezAzdMLkd1^>rGeBkZj@|g-FDGDzOQ{+C=$W*8;>(j9#Tbo2p}K8Vq`9ng zJ|3T(c8)sP+4+2O`u^zTxN|ul@%}+)@9cP4$OicMkul*{X=9%J% zjHSl)W%%MAVG(1=-I8>+1WDB#h9a>sG~KeB)I#geuKP@S$RLy8wxw`=I+jfc{WE!_ zg%_j>tS`qV?vt-AdN3ENwOYl`pLeY>5Zk@Hbe|mJO;c#{&tbdKw!Y;Z?f&+|HqmdW zcu{L^y0-`E>o;g3Cs{xKbFsc=U6gizT-1L^=pv%oau@=BPcKSq*6y11`9dmQUaVIh zUzFHKXkLTulGJL4hJ*UO>gKE>fuAPqBDdF0Ze{Q)t~I*(^by znzwlvkZwuRGnY!M_6(8d94~zO(V2O{0Av@y{)U}W&GSqg^75nUIfmKRL0SZ>d5G=C4>V-|!n2KW;yTZ=)t z5yld5zV#IDNUxCN(b%5FwvB?+*_}Rq3)_TQTMuSXf|u}FHG@t&7iz7exrn@*5NvCw z8^c0xnfzdrsAyHwAX?RGv4j!~rEPgH$50H5fT1Kr3PXt(%c&oG|@Iuk^WrhMM~SCj>vKAX&wBON>TR)SRaPTaa1f&F1QlnJ3%zp3+_8( zjb#gJY!8fLV{ZcwZz71jVO%iGK<0{tp7Gp@P<%vlMB>BTf-H=neky!7rXZwpld&(Q zeV@JgbM*G?mh}7dA!Hlr&Zq|lYxL75G<&@^x(`f zGt+!VF3t4X`g+PmNMHP@3_~lGGL0_eKzt9%Ia|f;r^Mb{2u=b=pNP=Qx%j#F=8p{& zz3|1Z_VlU6R$|*Msb{V958WT4hrMX+xBUOvmzTWcB`dC5y&@{*Ul $kibana_config_file +cat << EOF > $dashboard_config_file hosts: - 1513629884013: url: $wazuh_url diff --git a/wazuh-indexer/Dockerfile b/wazuh-indexer/Dockerfile index cdb843b9..6014512b 100644 --- a/wazuh-indexer/Dockerfile +++ b/wazuh-indexer/Dockerfile @@ -3,7 +3,7 @@ FROM ubuntu:focal AS builder ENV tini_bin="tini-amd64" -RUN apt-get update -y && apt-get install curl -y +RUN apt-get update -y && apt-get install curl openssl xz-utils -y RUN curl --retry 8 -S -L -O https://github.com/krallin/tini/releases/download/v0.19.0/${tini_bin} RUN curl --retry 8 -S -L -O https://github.com/krallin/tini/releases/download/v0.19.0/${tini_bin}.sha256sum @@ -17,8 +17,14 @@ COPY config/unattended_installer.tar.gz / COPY config/config.sh . +COPY config/config.yml / + RUN tar -xzvf /unattended_installer.tar.gz +RUN mv /config.yml /unattended_installer/install_functions/ + +RUN chmod 755 /unattended_installer/install_functions/wazuh-cert-tool.sh && bash /unattended_installer/install_functions/wazuh-cert-tool.sh + RUN bash config.sh ################################################################################ diff --git a/wazuh-indexer/config/config.sh b/wazuh-indexer/config/config.sh index 59f8c1d4..5fa3715e 100644 --- a/wazuh-indexer/config/config.sh +++ b/wazuh-indexer/config/config.sh @@ -14,14 +14,15 @@ export LIB_DIR=/var/lib/${NAME} export PID_DIR=/run/${NAME} export INSTALLATION_DIR=/usr/share/${NAME} export BASE_DIR=${NAME}-* -export INDEXER_FILE=wazuh-indexer-base-linux-x64.tar.gz +export INDEXER_FILE=wazuh-indexer-base.tar.xz +export BASE_FILE=wazuh-indexer-base-4.3.0-linux-x64.tar.xz export REPO_DIR=/unattended_installer rm -rf ${INSTALLATION_DIR}/ -curl -o ${INDEXER_FILE} https://s3.amazonaws.com/warehouse.wazuh.com/indexer/${INDEXER_FILE} -tar -zvxf ${INDEXER_FILE} +curl -o ${INDEXER_FILE} https://packages-dev.wazuh.com/stack/indexer/base/${BASE_FILE} +tar -xf ${INDEXER_FILE} # copy to target mkdir -p ${TARGET_DIR}${INSTALLATION_DIR} @@ -47,8 +48,10 @@ cp -pr ${BASE_DIR}/* ${TARGET_DIR}${INSTALLATION_DIR} # Copy the security tools cp ${REPO_DIR}/install_functions/wazuh-cert-tool.sh ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/tools/ cp ${REPO_DIR}/install_functions/wazuh-passwords-tool.sh ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/tools/ -cp ${REPO_DIR}/config/opensearch/certificate/config_aio.yml ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/tools/config.yml +#cp ${REPO_DIR}/config/indexer/certificate/config_aio.yml ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/tools/config.yml # Copy Wazuh's config files for the security plugin -cp -pr ${REPO_DIR}/config/opensearch/roles/roles_mapping.yml ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/securityconfig/ -cp -pr ${REPO_DIR}/config/opensearch/roles/roles.yml ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/securityconfig/ -cp -pr ${REPO_DIR}/config/opensearch/roles/internal_users.yml ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/securityconfig/ +cp -pr ${REPO_DIR}/config/indexer/roles/roles_mapping.yml ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/securityconfig/ +cp -pr ${REPO_DIR}/config/indexer/roles/roles.yml ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/securityconfig/ +cp -pr ${REPO_DIR}/config/indexer/roles/internal_users.yml ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/securityconfig/ +# Copy Wazuh indexer certificates +cp -R ${REPO_DIR}/install_functions/certs ${TARGET_DIR}${CONFIG_DIR} diff --git a/wazuh-indexer/config/config.yml b/wazuh-indexer/config/config.yml new file mode 100644 index 00000000..b3f56cea --- /dev/null +++ b/wazuh-indexer/config/config.yml @@ -0,0 +1,5 @@ +nodes: + # Wazuh indexer server nodes + indexer: + name: demo.indexer + ip: demo.indexer \ No newline at end of file diff --git a/wazuh-indexer/config/opensearch.yml b/wazuh-indexer/config/opensearch.yml index 9793012d..1ef919cc 100644 --- a/wazuh-indexer/config/opensearch.yml +++ b/wazuh-indexer/config/opensearch.yml @@ -6,31 +6,24 @@ path.data: /var/lib/wazuh-indexer path.logs: /var/log/wazuh-indexer discovery.type: single-node compatibility.override_main_response_version: true -############################################################################### -# # -# WARNING: Insecure demo certificates set up in this file. # -# Please change on production cluster! # -# # -############################################################################### -plugins.security.ssl.http.pemcert_filepath: /etc/wazuh-indexer/certs/demo-indexer.pem -plugins.security.ssl.http.pemkey_filepath: /etc/wazuh-indexer/certs/demo-indexer-key.pem +plugins.security.ssl.http.pemcert_filepath: /etc/wazuh-indexer/certs/demo.indexer.pem +plugins.security.ssl.http.pemkey_filepath: /etc/wazuh-indexer/certs/demo.indexer-key.pem plugins.security.ssl.http.pemtrustedcas_filepath: /etc/wazuh-indexer/certs/root-ca.pem -plugins.security.ssl.transport.pemcert_filepath: /etc/wazuh-indexer/certs/demo-indexer.pem -plugins.security.ssl.transport.pemkey_filepath: /etc/wazuh-indexer/certs/demo-indexer-key.pem +plugins.security.ssl.transport.pemcert_filepath: /etc/wazuh-indexer/certs/demo.indexer.pem +plugins.security.ssl.transport.pemkey_filepath: /etc/wazuh-indexer/certs/demo.indexer-key.pem plugins.security.ssl.transport.pemtrustedcas_filepath: /etc/wazuh-indexer/certs/root-ca.pem plugins.security.ssl.http.enabled: true plugins.security.ssl.transport.enforce_hostname_verification: false plugins.security.ssl.transport.resolve_hostname: false plugins.security.audit.type: internal_opensearch plugins.security.authcz.admin_dn: -- "CN=admin,OU=Demo,O=Wazuh,L=California,C=US" +- "CN=admin,OU=Wazuh,O=Wazuh,L=California,C=US" plugins.security.check_snapshot_restore_write_privileges: true plugins.security.enable_snapshot_restore_privilege: true plugins.security.nodes_dn: -- "CN=demo-indexer,OU=Demo,O=Wazuh,L=California,C=US" +- "CN=demo.indexer,OU=Wazuh,O=Wazuh,L=California,C=US" plugins.security.restapi.roles_enabled: - "all_access" - "security_rest_api_access" plugins.security.system_indices.enabled: true -plugins.security.system_indices.indices: [".opendistro-alerting-config", ".opendistro-alerting-alert*", ".opendistro-anomaly-results*", ".opendistro-anomaly-detector*", ".opendistro-anomaly-checkpoints", ".opendistro-anomaly-detection-state", ".opendistro-reports-*", ".opendistro-notifications-*", ".opendistro-notebooks", ".opensearch-observability", ".opendistro-asynchronous-search-response*", ".replication-metadata-store"] - +plugins.security.system_indices.indices: [".opendistro-alerting-config", ".opendistro-alerting-alert*", ".opendistro-anomaly-results*", ".opendistro-anomaly-detector*", ".opendistro-anomaly-checkpoints", ".opendistro-anomaly-detection-state", ".opendistro-reports-*", ".opendistro-notifications-*", ".opendistro-notebooks", ".opensearch-observability", ".opendistro-asynchronous-search-response*", ".replication-metadata-store"] \ No newline at end of file diff --git a/wazuh-indexer/config/unattended_installer.tar.gz b/wazuh-indexer/config/unattended_installer.tar.gz index e3b05292cc06a0d9c7a55602dc9e47e5fceb71dc..0a2de7fdb283502c7b8f2917f9cb068a7a03ad05 100644 GIT binary patch literal 9234 zcmV+tB<OjSQRQ+tSRMxo_~FCNS@N&f>YEw)H@0gVcS!B#hns)?pUdC%Y#Qv82)Rps zH@`%E;(#uEralR%KZZZ79;!t#wj{(ghjfQkmFuj)8SRi?M3XWrcScWG&0V!|Llm** zbYKRdV+GXot^S-&8wENk^k?Y4OU?tzezn8P5hb2GxFi!N?31DAQxf(~7s{yUJTzUi zM}6ow!QX8TEKoy7XJ-?w>+%b)$*9-5<(<1Xh2F7W>vjm<_z{+kbL_3!@Qw|L6sa_KHPbiosH0@8H` zltke51P@5Zv@Sp~nAnNw+NAFVVL&W!m^zf89#ETv9yuOSm+Uz~=zHXhT9NOBmxT4I z0OS+u51k-zJQtvQK5K3B#sV^UVO-xL9{@V8=nD!~Dz%3+G|`da?vKH$gbEr^%saNx zM*|Eyq)`Htd$j9-M|bH(zQ7@RkUoeIT40l*m#!<7K=s?EWzm4Sdp>2ppS?r6<{&`F zO7Nr2x?z(tF-&{txJU>%o0jj4LPmx0${fMKunrlN05(b`Z{oJuywW3KycfXl=K;3{ z18+jQ(O^J0L`d+w%>}3~d9l};3 zVHDpqqydF~loc;;%^O2!!4`)zLfgCV*fw=%QAOT=#5Ood#e1IXvA*W;6P)7hJj8^q zy!>yBEU64y68>%r`R{&;um6r4qCFWfX$8wT01MXtjg6fDx4FIjJ^u4e9=`s+#>F50 zkIROXGn=QxHbb)mR)RI6qz_918JmNMVsn#pEdO#8@?!K6gm=)RF7?e2RwEW_84aSI z<5ok@8w6EsTM7F4#a$w1`c-IkPmvmAmUmVL%epkDh!?P|G|ZKHW95ytyVvVCj`l8U z+b^CU)%;J-JFhA&d$a!Mo73vsXD_VY!Kilr+zqx~>|GAWmCEbm=Z4PwE#Vh1y0~8; zRxZ^D=ZV~GS-n=c@p*FmyJ@$!g00Tr7-cf&eOoM&T+t{G*LjTXkQSGgN zzHv~|5~-m>MV%(c_wuB?cyac}QTMes`LcZ;ZH3_qfewAuAf0iVaz@ zF+(_#0g@rAO?eEXEo+aZyS2_Tk@Bh{7 z8xOPbpN-n~_xR5@d9)Fhna5l?YYMw9xU~d-?_*nL*>!+L1+EFcEES;duZmwLj+dgIhDle^ z2>Lq~9uuf^rRxN3zzo=YDB7rPC8D#UnPhgtYn(8o<$6OCtj`_|DWeG{8oqfxpJl+= zXn?xG+uhPEv#Sy-ESz1hfJl@cQrnm4Q*l+&u!au2pV{$-bJm{DwPc02yHhGE>@SpI}sM*xp5YPqlHy*#}x z-{*%6_5gqw{JlGn00}1lUVuot4jtG@sa8@VppGy?>Y8q-p)eEwn{68?Tf6dFN{Pe;N0GkT&(5B~qVf!BIukTO?`Iz1Vj=KKspNFY z`}d^$g%~Se2VM_TW~T=E`0+6UaM`ki%NIKj5%o=@IyU_({K`xuK98W>D0Q8ZO*>Jq zjde}q$rF-*CyggR)(wW4lwCl)W_d&0J&^L4Tt>rnz^|YWE(3O7sA)i*QKAEV$1j&7 zSS)Au<<+yho1?G{4%p28qMnVcBrSEKVpk6F{)AESA#wXUC2qEfa1w@G}5HN z3X?o1$sP3Tm36 zDw&JD|D779N<+$?4|kzj=~OBab)rftxW#&;(V=OMTKRV##pJKQ=9)vDy5UOEp|DD+ z+NL3raoHQ#&6TyDPe;U%r0y7`N<*tE0mUy&!0Ra>zS%TL>>9w1Pmcn~lJC{(if>NS z?J&mx+N_}luQL5ih#{5x#sh^o0=gVaZMtf#Pf<~4(z~9vcQQ5`N8tAiE`*9>jds=^FaN9K;Mkgm*yFjr?XJ+-PcO}R+a zx;T`wMpr50CIM~I%@TG4{k)v$^Xm@?A6gO&%96McoXe_B$5j_^75zn+cBCxvx>)6A z;1+&jG4#AK7!K>g?9o7rPZl~qEx;^2%wnjaH6MAoyzJPsCc6mtbLO}(^JUK~@?D2` z2HR!R>vLR(RLk(i1HKBg^CoghRgVE&k?C3j<|=#g;f8B7UyHmj_q7a234!l*=eo0B z7A{m@iux$9>Fr@u8tfh^gZbPwUDpeNBG`7OK2h=@_X!Nx96pmO?YTV9?=lGKu#y;E z`q>Fd{qYq%cg@ObnIk$(mQ;4lC8)@p!AcMeDxq(>0UlIUplRr1$lbQgppC2;nIR@# zs|$?uewEctv;K0tS4OBA1Fm=Yg6lGS$*j$4)PuWW*o1uK{!FUof?j3=A}QjjX}7SQ z#S-?^DzP9cuiCZo)bqmJlDL048ki*e&k|A$OqUnv_(tH zIXHF+EvfJX--cpn;;|Z&n6XPuHUc`v0UbdYH0xRZuuW)ort-!GrWPjG_M90sk4#LQ;kqN0iA& z%6<5Gcrw*7OQ_#}8{~&(p{YWJtiU~w1~$_Vm@ZuI_Dm(wX~9Wa_z8@ZM#;N_2VmBh zjt^#0@<4D}^>{E&ndDapD!K>+3_r%rucImAG9>DTkqJB*a)B<7$?vVxqr;=;>p7E5 z6j9C$ZDnPOoRw^5DVruN4R*!IbyQ`VF+B3&%>1djh6W6OOpSGgX)c{9nv=9Vk~^c) zD5#6G+Igl>lL6ekbd-qBJh>E-$(7`hm4zaQxtz`MHEY3T{oI)RthH&*d;>Sc_J*;9 zl;OxCkkBuL`J<6&9QpvoBCYZ}v;3u2egv%UV{`J8nOZuZ8#B$%45tB~lh)bUO|VQAfta}nTAjEtXJ;=IH_2Nae-$3%6Ppq! zo2R|#|0f#ExY=A2cdk=6p5vRo@l{%RTQz$DRJr*{l8ckVCC}n7><02E6S|K(26^%X zn*yvhKTgcFlArODP9yA4rno>X?3M(^)Wv0PckWT9SsWhFf#TgU=qPI={qv~xYClsX z31YUG;wTVh4Rno^$t#x0qZ}~H4+Mz=W*+f3=Hfhidvttqc6e4C@B8DE*N4YPXCLPS z-rGOhJw0SiXTUC-58$6NcSp+N7PO|Fe0EvGfMp`$)>J)9XBw3-0*_cnzT<}MlMF-L z%))jBrqBXz#H2-xGzRq-{P)QM+72-}5Y(7|0)p{N9H%oFlfD-y(|Y2-5YP!^BZApX z7C`TU4M@6+`+4}ar;x*vvxu0|P=Xc~9qWjVHHQ9+d|PtNbP`keAl?49=P51ySBF-ZYoqbMwjz00t(@1MmA#LOaw zUly@L&g^u$3|ccR0aXsfHrwGrDF$}|%ze}1Uw1$+4jJ4x$5ec!&GUz5SWpkuhp#q^ z+u_4koI=J!KFMk`a}Lg8e-HRyE=x0TRXIGDW+XNS3=o^YSqF@X2h+`Mj2y<_oGCzS zpQ%b8mc&9@s%a>GGLI*>)*jIiKl6Lw1w6=wO%G3Gkg?qNiQ)1l75u8!PJ!?tcU6uK zn(3Y*5D35x3>Q?ZD@O<51+c=qEHxMPjs;$w5$7WN)?7&au4&PDkMLeZ8=C)1+Lin5 zeCRLkA`!I}Uxkeg;Fp0nn_xn0pU15+3@f_fmWv+>vPF@sY))692qrrCzEzmKbxqV- z(9|SGt-}77-@V|-2cBgPkR9>vNR@};-NwRjy$Mi^S3k&4tM}~cyw#Jptin!LaX%+7!wfZHjHlpR-Hv)h{VQJpg_GP?u|{2hXo z!1bJyZIo%o%a@O!cmMSC_;e@lo#PYqoh~Y@uI}+;4X(+2Tw?QlQ`qeO40LHe>me?W zZ5A>`$~S`Q{tO<{AOPpN$@Sp6h-hG1+O3wNmHdb&8QxSRGpr?P2$@PXLjkMyU6cbq z6k5-k2qoV^mDj9zxHzL1Y+%8%kW%o;m9)uZJEU&X)$TBrF-Xc3lD!lHmz+(grebJ1 zt~Pd3a3(AK&rfL4C^Myv^4R#xNSvm;s)!oOIj_;kSxS;o5Tk4|Ov+{_k1P(%UI$Oa z@UZlmJO&nqYOZ{3O!Wu~mgbO-7*gpQXb>kMs~g8{amIqvtidaT{I`JjBF2kO`V7=i zbqlDw3^h(F9jlqUcMDj19BsW__ZU?-U^qb(xEV{1= zTdP$$gf|EJ%Z#z)6*;cBajnvTz-an8yBMUF#yJzqNSd?1htmEwyH=qIhOnkpo{Ry$R6aftds)Wf-U|+=**S=(iG(^LWNKH) z$$+9yj~PcSMU6);S$u`X3q_>a!U$N{FNa<#W;`c5X$eMPly?p@(C=Ho3<*Ipq^JZi z_Izce*!!vyK*Y;S;UbX&04OSntjfl-P01C5BFpoAYK3ud@8pX`RzI}XSfKVpaGwQX z;qQmZPw;OXUxoMg@qusqL-`}tuK)Dm-KskE*OQH?NWB#3raVusUMTq|9ZJO%F?TiO z!Dy2RfHERoDjkZ1x@@p|r*tkp&cNf!OgbesWE|h^VD=*2T0OW;by6$h-CL>jUx`Rk zb0fep@H1h-aSmU#mon1G&)-N8b%M}eBP)#ur2c>msM`zsYb%X)vQDNV))(;9N)cF= zpp{z@R|g+!ia5z$`I?Mjx*pdi$YqPTWV)UUNG$Z;Q`t65ZPk+tJWP&>cz<8bl1gnGC{_CZGfr2DM<>@);zWRW0nh{CAlxEH7dlR~)s@6YSv*KSl zWlHH$rWIn8QbGA^dx=J=9MYs=Ha@Cz6f#aikXo(EPhrvKUu(ZoR-=50zwe#9#+#%z zax}?rqda@@s-+gM+IqRJtd5d@d?@SLA**-ga!LJni+U=VJ9jdD!{XOom{V6Lrr(Q( z)cwEquJyTX8;O6u{uQXI8%eGyzmiPrT5WuaGv~Qn;;AQJ&T=%2MA^Jblp;!Y+}Qv7 z?Jht7BmqA3NZUCgGZ~q9Ef%}L0$BWz_U}(lKQk&cYWo>;KC#+|9@{zSvGxwXQ8KL8 z5+rdibRIicjM>ojCey%~djvXY@WeJ{678S^ymlyBW68Uc>mwBW;VJIQO*N)`^2EVz zlU~hr7U*aJ%|R&sF|PkwG^|Dam@%Fu^4T;~b%xsROdZ=K{VRE61pTRdm9!+u>`DZ; zv-Be^LomKQ+@sS})iYIRtlAkc6MPn|oezMq8h>#g#NH9f)Kzb++Z&0CZ|gS4))bqU zx`Ew9Yn#E+JsS7KQ`lgDErVg93w@~>HL=}fzoGO725I!u*4+R@F=L0ZYf6KB%!-|j zOwabKPJhT1rs($4V7Qsqt#Q4HZd2vmamrHv)E!ePg)~`{V_~f84T7e+V?JTde3UB{ zNlNwYy7-zS2xvyo zJb5RBW z+rm;d(ul>W=Wi&r2jN_rM))me>Sp8%=i`;~A=g&OC=WdySbxmu>@-nG8XW?!cwJt; zk*?!PV00u+vX;Yf%X$z)CNbKnqCB!xAAzHCXTJ@?A7HT`pbG)JIQutMq5eQ4x=?j6 zoy~rOl7cCJt=zdgU>E;5b1wgRdf*(rI=jrL-89^%DV}?u@Vw$a+Oo(gFSAyf7M+jo zVsOixaQX4Stg+YayuaLg)9JcnAJ`E1?%ul&Syg-Q-isgIw;jsf$fx%6^Zg%T<>Ees z?C8bwedZAP8C>Ngbx%zR5I4ygxV&B6Q%n1!R2U7ZxH}mvwtS$=32)uQ=Pz=&lGzV~ zTQCXPvuDq&`FC>X?MV8&O7OXvwdCj=N(&&0{mg2Hs_66vbJf_%iNns`y_PC>MM9!3 zdw>Bv0g>#$WUR(5Z{#k=i~dJ{5kd@VODb+Mgc!~-73bqqoi|G|WBX)acCfmBIzr|_ zA?SObVF^f2Wykqkm>!U{PPX`sU%c>eg~gPMAet~sZZUv@M%B< zY8>MfX-spMi`yygCH~8MI3Iceb`(rgAXWZw*AK&`=3fe(;}5#fw8h+|3-v(V>GA8+ zHe$hTaM)PqCp0vp3FUL?k|NHvO;qFuG`+AMF(wl|Y3X>~_fzzr-kkjI? z2GUrD*Q@ZG@{HqT1D^`gZIF0hy$C$%Llk=qB{} z1zlIh$EBxp<}z%G)wRGh$D9j~7;SSU;Q~?r@}1bB?FZAL#|H}ZDq+se!VcfY+oJ>T z;f_WOJu|kY)2_wcrlh-*x$?B{Q{JqpZ8hskdK5e$nbC@aa*Bow4^9Ax%A;r(4U^Vr(mKY5Jh6Gz5 z3bKeQFd$@Q&mR`Db8m5Q$S3>j4-uI(@Og_dWJ8&hV5dR<7L zZ3L{Q%f`|oJx)Y!U59PN6wqH=)_mQy=iH*+W|RB%b=FExzP{%0Z>v*#uE4B17$7h? zFweAQnyJyqeO-+sEjDNgmy#8ACDzM1X{Zb1+mCXSG1_&EZACURx@hBgl4*Ygi6<#= z;fTKo12>8vUW=n)K8PZE9CT{1SQBQ_K+dLNCQ~?lNw_kW2wkqjW?;U&_R7i!E&{U& zp;)zgk$ois%D@8hbD1zgy+H?o!YGpWL#im@G_-1qbLQw`6!{uOVmY!NJ(i_^F=|4M z8g6H;M@+_Q#Dt7zfLAK?=!3SkQ|{4+*vX-OnjhOp92&+@tCyjq<@Iztq+3j>tnL^+ zG#v~qBT|ld8TeQ$@s?bd4LzG^QEdB*Ke=GoG_!gdZWGLkLrfV4 zIs?=crCJAPYQSqVjBLj0)~RX}us``wU;4@PI@I0|siMq*(7+*?a;>_3t#0FxXQ)}E zTdUqstJgHR8LH*UR->nhYlacB<@?c^S&M{N@p6+ON!`%rLW; zAuQ&5o<*B+?xm-nL7t#;K7}Y_2ugT zmZGz{H}XF#U_Aac>@=>fj>DNd@Q$yqcN$vMJw(Za*?v536h>#gFCQ0k_L4Pv`$x|r zNDXgDW?e0O{LpLG!(Qw7v3KxTW4&1aI(iED|Gw9%hsX8ss#j}V_nPgUUWT|N~{BPPGB8*HTs~ncc^B8JKTA=;)$*y zRb7k2&ATS;-cc&(2+$Gu@UtisJ`6nqJ{P52KRxN{)QqY;YC)d;$mLU2-Ko`n618;p ze`5X#FBg7&|2?FJ1kJmk)r?ASHEaD^D-KOTx4=iu+TTO`*XhBJUac44scxgrWu;Nu zy$f~;-UKL7&Eo|8PO}H+(V`z-Q|k0NQ>V!?i-?>eX#b}#^P`K&BPmWJ+)KxG_VyYr zma5*iZ(fdwL@5SR(kUzinKtLj5u=r0AS50uiOA{|f3{+u_%mCN__N~uQM&qg8EGPt z@x^+gG#M&?ngl)0)&~YwpnL0jq8XKvBcD;SG;Pbk|Fo2Hsl1geo)TzL&shWi^#TN~ z4-tFSS&HxY4gR$f4_ZNa-{}?cqG&?2dW6Vfj%AK>ua>hhhd`4SB$h)+SYbPFq)W1a zgu=oEJowoN3uHk?2FTd8nh&LvZhT4xG7rtSAqm+PmSsrHdf%K-SkCpgBN|zit(lVpE1!aJ)A7A)yH^>k!Y zak>C~eo>+^x^sbTqBi>%02{uI95;RC;p+@J~vnbHsB5SvFD+A9P(yLhr;v=7%L!rgj_flGr zBlyLeG~QH`=$ z48y%?&Mr6BXL`%OowB%V82S4UTvI!-my+oi|7QZks6rL0P=zW~p$b)~LKUh|g(_5` o3RS2=6{=8$Dpa8gRj5K0s!)Y0RG|u0_=|=A0R*>>xB&0~0D~nz1ONa4 literal 8865 zcmV;SB3|7eiwFP!000001MEF}U)#pA`Sr zZl4A`>+5Uyx4FL7NdA@2gXU^;eZAFcJzjkTV#wPWs6Bf3c zRsRotLY4eY*Xi25J5z)C<^OnfwRJE5Z}Ci%zdNFiPYuuPf0-)GE&o zls^nUu)DTt1ay8~m|y-YjkT3~`G1S&7V_t{ZNqkJm%~8`94O$&k5>!j-&$SE$baqe z`sxGH`0As7@c&-^j%!hWqe2KB7=B=zT;5nfh+_=tM!JHP+oKKAY^~QC@Lv;3CdO6R zZ~N36Q_oL!?b-v{p+=zWbzyf5$4EBkC5py>HIx3uPs#c3xdZCo)(e>5{x{c~_x}Gk zdFGNo`?ozbMkCwll{EejX4?N&3!MFo{co+W-`oFh@#wl<`JNm&BjyqD4Tp3nK_#FT30!gnT0(YgKk!^~O3l!-gG<7C)d2D_^@g_Z z+pYu9U5~Z4cw+(CqlD{Q=m9|65q&|sDwXz-25gB4E=RCHXsk-;p9aOk6~T1}Fl>-k z1yJtLuI*5A>4u)bA$pKLh!9#}lcAfgt5iVs+lFaUpDke?W$T#*iYEfVTz%cS5@1 zU_dxT2HznJB3nf*GO#ZwNR!JEiva7u?SY#6{qiG|J)kpRmfHxfe1F~v`)HYAac@D^ zLc7fJ`>(Q7|+!0Cx z3cN5YUf!BFhR%X5HfMygci*-w>J(8$-hae4I7!8Op6ijm=I|4o;_W=dn6AA1?~E*| z3`!FIY76=Ae&$;LZ6`pJGGGGpOFIBF*8i22od37Bit(TO_5bTXeEolei$DAimklXo zHcyFV1V#s}1ZzY|AC?3%HU=TZ<_77Q-sLFZ#pojl@1RE=>KOs7MiV>elhGjT*-kxh z-GN`nwl%+>U)&{Prd*{~_Y|pqW_f32u&hgSig*D_wPjSBt?FBId#BfL9qwE-)?e-& zHoQ-Jo!7N3Yqj~u+mrgc7cb4;{-|-b=lE+ccP@wHTJ6ozo~AN?bNB^}F76kIl`Cn4 z^F*$0nZ2!G<@4m|H^bUm^Vd3qSC8p<<;l_SJBR(@5%qUncV&g12i_m8!^S)BY-PWu zBvL^~5_Os!&&`wa^5yC8hut^sd)r#+#Wd|MBv)uy6@tLCJ7GXYY$5vH1oD_JHnns`OIEZp6)Uo0r9e26 z0g@p}$0^N_uzA`)Ssko~&res*#%oWGjn?H_tr`9row4|etH$r{ z+b4dnf7&X~kl6oH(kZJ+-UCXLY0%Y6b8;b6S~jcL8JHX_~mZT+G}okzr5XT9KHVh)_&0ql@qm$ zGnJSSzP`rXTK4 z?6)V*sUI|JgX4qN>qc$w_!bpkfgv&}#_T)vAQ<0bR@TxW1e#x|Y6KYnNo>?;GUD)S00 zFfbk0@GNL0qx@pCj7vlt`zp4U!snD`fSl}}z9C!32Qv17w4xgd#IQ(|;rn*aA^wP( zcvdBdi~}WR-*9?7HWI<~X%N^>4_#l+4SRi7D-qQyu?d2aw~djl3=v6cS$M`5cmW|} z$Ix|bSV;UwxYz(L#ugq?Ghng>eue!3A~-V&5r9mB+$GYpDBc$eyDhji2Y;8bEejW_0E-G-5XYuh4QoqvnThKs&B`;a42__H|S_0$(3M!EAoV?ThF~Rf)*Ys7O4RJ5Z8o#F@aX zfX*|VaAeKd!=eK^Uyo9gI4hAN6=A-XJ8=ds{5YW_7nekj|K;wzgL?Z_v__z*OEe{w zC)ceMLu9WZc;t0C;`#W(3i-QkVNB6x6Fp+rS7lO+aK7;-`rVSfe-EjkL6CAtn*+)I zuVM@oY%FUP6kW@j2Sr!cX#rnQw0VoK zqlpSc-^OX#zyqB+8aLtJsW&mqY_j;LrDR*=Q!5zub^L1u!??RK{{gj%03KXaa$n7R zd3dca^D_o(06;YU-W^DQgbcx#29b1aIGS^*?3|-6aUP2KGL3KSwClE7aG~$oF!!xqS zl28WZIP45;6FR>F2grdnU{M@ukk%47H)MqMejhxY&L!*o;`9Y9EiaI!Q$Z8-e>x z76`Agya3FV-PG!1!>hxu%nacZ1j@CFMLS`yjTM{PvuC7wE&AS&*0Ud)TE*^?_e6Jy zR$VmRA#MtYJ|>spa7iN{pCUmHTkQNxzm119n;O(<6*^FNyt*908d%tuS7V-KAp~O- z=-^rvf)Mo#M%S)XxUL+FkuNThYu17N6JxmM&A_bOqyaNm0c2`p?k}|aE>gJn|NHSq zi`rPOfGM8@?9?3ONS#xa$BBG`52Q64Wy&kkO@dhY#)%elCANtfY;t0dKmVL+Fjd+o zZ`q|3uZRooz}l=X_B=Wwnk0KeBXt^>bqOeXVX|II0r8AYF#J(ZqNz~;S@OMJuX@H! zx*aALK$}HW<^`szF)^gJtUXE)M-~JuEV)_GmTpjI3+Y`-W1?o?Wy}POz?Wy!Mw&KZ zc;at(!6|3}_zgspO|_(urErsiWpY(2Q9`2o2YVqS}R+3rXF`jjNPi&*{pqrPIt9q#c@j`2Y;Z_nAf`3`J=(z6Sb)i2AlYbmh1D7iW zOSXWug%4{X^n*&)?t^JZZwp`Zy5^9v!jl7N{<8{4S)l`^vu-GRl?zsSzy>6zQW=yzpS z^0bsz*^=y0>9WE%_;O9=Ky%ub#WklE-x6w}1}9i?RcZrvHQkxIDr*}CZm)-DCa{JR z9Xx#)wBx1l5IOcQL8}-Hx@P!-z9W0d_>agcDLA%y zVok_L?qjEFF6bqzDToK)Vbd12Gg$^{vMLeb5U)v(?!F(LVjs`NMq%l)@ zSR9n!KOsZl3*MabLI-1#9>6Zp7-kA24QH^oh-pZL(RgqKLugNl<)(Ek5jsJOz_%<) z)dI|Z;BPjwj9@X5+%#m3OH3O~>+acO>WE8*F6DEF0VoemQfl23SC|&-8cOHt>Vimbo^W(tsOjuo0xIsBGRd; z;vf*P!g!WaEXdi)Auh-g9d$1iqfG2Ee%m@ZJUHA-n_@nSA2%1P*Nm8(r39@GRkPzb z&4c*vuAD2$6{-{?V-9^yj!fmoOl4LnG^&>zKFeh`V2QG7TGk*&%FGoyQpV}5%`sM3 zG+CTFK*=h%j1`tuY*=$GcNmE!9)c_Zsr*csHyVnzfk$-9BwPBqp7R#N zuXi&=k_u+SC=yPpjU}R!*DMVwaX2nNZX`AX{QN?jitqH@;nDHw!D%_1?~jh(92^~< zew+?;XZLjbYTS0V#|!I<=2KQSREHVgqh6gDE5 ziDU-!F3jJ!ySP}0U#SW>EID0>A#EKfUD>gY*jOXzKg+i{$4n;?g^!|b1iKQ+zP;hH z%k99~vSgWDJJ6y0*>l4HR0K_hp7;c4c?uZ-OejH8xyebuDM`^qL=if*MMR;;dsl=J zfTh*SQ8#APfeG$_uFb%I+Q%$gL}|Li5#}|@{U7}dE)SCw5H<>fve>%}JNs^1q(ICF z;!b@QJLJqxr}>~I!xB(sU+mIs9?4*EXTaPwO#W30w)_Eu`^K1xugkgK&Y9bf3rRm6A$LeTX>&3`c_T} zTKh~@`mhw1(o#i3@soKia%nxJ0nl}^@A`>g$icCUM(KTzXbx{v!>@pClnXL(cjRz? zGu>IliU7Wb8`*ljdblrkWRc7KUhHu()Y)KPkZmZ!KL}#rn#KU(rX2EwPZy8KaVIb& zyzoJOTzF{J9}epe-;sy=8xLP^JUkU)N)y&=Qf=aNiSTGT)zWV0kf%}Yo}3(=Y@|0A zL+bnBR>0s|>58XM696Y_fMOGL3y{l7cn60sjtYS_mB6TPn6b)KfoY`5pur#B6+HET zQt&|%iExbTL&J8E-Gt;K-OXstZTM!5W4T<<$fn^FhrLfvTd{Enq#Cd-vfNGn1vD3l4yC6lsd4KxqC zfN&Y;yaV|1z4RdFaf6;wT0Es$g7s6^|ASoKKDknJ%TxOM;nQRF1d9^(`&B>j{!59N$io|LZrpAt9< zK%tGzf=j|m@3Uefm^chgw2cqT66P{_MM+Zz};rJiin! zVkrQCa+2U$E3`G5X^E@}C^B8oqh=6AEsn2DvhZPRkwu<9_{%J+1b;tFeuRIcfDydE zj}D>QAM}q{yY%CS^92&k`lWa`E0T-^vKyW!(wy&5iA9DmVZvDmcx=re0-y}ARVoJ} zp(Go7+o+t0OY%HS#*Tj~$p~1KY0vCLx^?orDb*=i5g$2L{u9e0H7R@?13$_V{FWy| zf@M)27(YxPe%SE?Z;@16k4WZguVnX)DWup1)zGd_q@cRY?FhKkOLjD}REa=9yepX8xn znx5Ptt{;wYqeQJu`SF4HDSHqcThnavQi23!h{<#b%ZjpE9?=^5lz8DWspw zJ-Ae+MZ{3d!jxbz4O4uMAmy~qmGhUCw<4`7%bB7ytIQzO*WJ3d{51RK;!?Uaq5Mmg zzk!0}Zw6*KF(n%?Jyez`km{O`8RXdz^-8Ihy60W!R#LV8{+bp2$|;jHu-CBwP}FgQ zq?Nr+^E}-!8%IsJtC_{$Ppw1xb6Ae~=df>;t|VW?2b2{zC*zzYjwb%C>005^)JQE& zjU~OASoxxLiLXhKvy;55q)IAU95LDcNhl-XzaPkQ^8=|Z^L%Bix|CNBp7_Wcn883^ zh$7Wy%@>!V6q$t)+IbVQs@Ki`-lUTY8NQiGS-AxC)XK=g3P|bOTM6%ZI+O6jSj8M- zZZkHiS@mi&X45~KHzdQJ&tjaO38Rb#iyP@;o}}CUdl)01*_)v(c?@EWz#d7?ApV6T z4;H@ADR+rLnzzhueoB7yE7!0vLob;<;tR9sr;?=2*_XDL@5ESsqeN@dx*KZ$PMO%- zkv6d}T(bO=}Q-49j_V;Av3g>#-9N_F9bliusP z{QsGT#9ubRTQ&=cfaJo0nk$n;_N`3!A}9aX-u3^cu_N)HuYZM)$7!Jn1VUQ9mxjCM zDA7f)mqZsuCtb)xTUeUC2MfnS(zMC{elugQ*WUGhg;dp3sFcF4zs%U<@z^u|*qJ%A zPy7Zsj^3z+zMzqray%S^+Y(L*Llbxo0^ZrnhX8Y$6dT8yr*Z8!mRGRvuCk5 zzXqKrBQsd_{mU)Pf5cBA{5PE2ib228CmsK-^QO~^-v4{h>Ac+k@?Aa={I?5% z$_83Y#x|2V5pJ~miax>#nuEIuk)eY#iBNF+e?%xa#aWE;`UsGE8=2SSb3{BDyGtI^ zU&HN)DHw(5rh!GhKqwIx?{IiIwM=m>6G1}}@S1uCR)&A*wn7q4T{w~nqYg{sh8?~z zuYEmRF5UA z2@-Mf5=UZ08eVLW;#Yp=AKzK8UIiMCji!$6p>s&t8`4Z;y(jqnFU^s^lqNAg)0Qo1 z8U5w7Tt<|EGC8G_umQ`+1^F5yrQlQ_HU|a{;6abe%a75$qpuOXK)NQ(pBgqpgy}&` zqTsYV6sRAQk1bI`%TcFEDeWaL_q)aA%H|K|1L^M<^MSt0z~xYg1m;=#Hfzk+tDHi) z-#Yj?S-yjE7r&4EpJ5^Gp<9z(^#4g!gg?+=%~c)fz{T%Sk~ilU**5Ol?BehJ#^pbb z+l|hL{$)1prm+;KcSdp9BJ3oylw(D&g??Dcdt{N%2Dc!P2tdp8@y8_sO_ z&czGZKCj6v8ItAD#p;If7cvj_-_ZF2c0B>1Lx#J~5c25jJEGiNQpidVGGATFpC938 zC}Z;RIXwQih$RqDuHX^MU0Bi?JQ-@#QC1^IBt zyRPrAm7q50D0kEYPFG8t4j%%M$A>4!A20hd4P?9`Mc0KU{p`ZrbLoDD#m{=_>_R_z z|8f@Vu}hM$i;4T*$X(omAqiFQ(lyxX6Im<{KWDT$p03V#*Sxo(Bautrz@~f`@_BmE zY-7W?i&uX_nUXeO1RXDIK19Q#Uskm(An%f8wXPiDQQ_`Vq?^ed8=ubch`jq1>8!e7 zmEW#gjbCoQwRbyDgJ$;ks+byG|HIj(1OVFCOSBtbj~oBNJmJ>{=6~CMQeM{nb_hlD z-#6d(cc1Dz)e5V}ch!)7ldsp%x?wM1>xy4ibw6+WmT6&uIRn2s2n;o?b9}JYM2Wp|Gg58E{Z(DlBu;RDn=4 zPcGUbMO`$9vx`b*h*N`$O?`!<=57XC?Oh%m9~^wbd|DJNM#v@WCXINO7Pct}+T{7GVOxaa;!&UO%S} zNTVi)4oJ(Mtpn0?Ka&o~Ci(m8fK-~YbwG}GETaRGhbMn;9;AFTu;>sKTZl@wTw_z* zc)szVjF-blqx$?ghoQ0l9OKWJFMHr6WP7F&mqO(CA8KY|vd36jlReu6n=TexoLLcf z6Phrx1DP>qF_US;8U_ZJl9Izi>*$O$)RFo&Ua(mgY~E=*dR9tTMOtce#H+Z+SE61C z1RH8z1gx3p?m^*q)U*^3YY?0WL)yL*hY^mGp|Ng4vymli z1ILD=%NTT+0cD0#Z31O8;{=qt$UTnP9RYlHGY>IYgv4y^6iNbzU1@4!vAt=OCGNB*Q6roav6Q@yU+Wku= zEO9C?LRT34oJLrD$0M06gB_JZkTxeO!!5r^WlDekzR%SUIoc!)3zM_CYECWeCCvE` z_H3%IK}WEpTr8c5`z1iW;?Ml9b$xy4FQBT!o151byN3tTuQ|jg6F+c{zJFXT*?VRU zTAhR7h`Tc;E3M)`{x+yp{XzZkanOFOuz}Wx4K)S)y&u%8{$bU>9#pKGL9O|EP^Yi( zx(fNL6MwLee>#tgyhZU+j0Iqv)gu)`H&vd%3ub)_Mb<-KKI_WEjP3f~eyHs4aOdEf zC%S=DRplK9o7U(gFr|V9$Fl-1T}FxN;Q_xZJ}Bkp=}8?bwV=vQ9rCn-u%)o-Zl&^0 z)Y5IeW9|_z7ryQ6Kx#-(yYuR`p!9mJGOX0~Bja>#b5g7P#m9f$0el%$1|IrEttyuZ ztFn9N?GoGoP!h7o3wpA22@3~OGz@PNcuGaEsA1aTn;X?yD5gx$qWWGbZIYLyTVpB3 zgjau!9e)@p1H&R7Np>xNFDXTLZ_lc;7&%Fs#YM=8lwlwzo+5#q*cMk2I)cmw0+d&> z=IoAf7aMeoyGZX8cagtK3KF815GN%1K1XL1q(EeiS1n&8b%TL>45QpcAcHb8q%uer zr;K9&)VS(l7HAyLiXD}Tx*Z-VcH_^rY6}%AqLI|U;os|O>*n2PXXlCa&pt455!dJm zs>GQmBg#O+v?kgVv>~@%OgZe2A*P$4V0`0A-9!^8C-dkN**5E<%xy3ZMQzS@s{gk% z<7uT9W<3_7zpXA$@J4T&^RitY=X)zXZuTmcX4qIe znH{V_mVT-TR&vtpP9}JEZN>djICysq^Ih-r)Cp?#LU&4Dnh_wg1kJGG z{<2u+5kl6kr-G1322Z^JlP~NhPF%7mRAii-Cay6q=w|4&6ys}LNN>k jbkdC2%!!^P{O{#h`pf6#^YVH5Z2I{>Z6H%z0LTCUs=+KJ