From 4824649b66c438f6529b0b50ac1b878e1ffd4974 Mon Sep 17 00:00:00 2001
From: Mikael Andersson <mikand@sunet.se>
Date: Mon, 28 Apr 2025 08:44:18 +0200
Subject: [PATCH] added artisanproxy and artisan-proxy-common

---
 artisan-proxy-common/README                   |   4 +
 .../overlay/etc/hiera/data/group.yaml         | 212 ++++++++++++++
 .../overlay/etc/satosa/backend.crt            |  30 ++
 .../overlay/etc/satosa/frontend.crt           |  30 ++
 .../overlay/etc/satosa/md-signer2.crt         |  33 +++
 .../overlay/etc/satosa/metadata.crt           |  30 ++
 .../overlay/etc/hiera/data/local.eyaml        | 273 ++++++++++++++++++
 .../overlay/etc/hiera/data/local.eyaml        | 273 ++++++++++++++++++
 global/overlay/etc/puppet/cosmos-rules.yaml   |  16 +
 9 files changed, 901 insertions(+)
 create mode 100644 artisan-proxy-common/README
 create mode 100644 artisan-proxy-common/overlay/etc/hiera/data/group.yaml
 create mode 100644 artisan-proxy-common/overlay/etc/satosa/backend.crt
 create mode 100644 artisan-proxy-common/overlay/etc/satosa/frontend.crt
 create mode 100644 artisan-proxy-common/overlay/etc/satosa/md-signer2.crt
 create mode 100644 artisan-proxy-common/overlay/etc/satosa/metadata.crt
 create mode 100644 artisanproxy-sto1-prod-1.sunet.se/overlay/etc/hiera/data/local.eyaml
 create mode 100644 artisanproxy-sto4-prod-2.sunet.se/overlay/etc/hiera/data/local.eyaml

diff --git a/artisan-proxy-common/README b/artisan-proxy-common/README
new file mode 100644
index 0000000..9a73bce
--- /dev/null
+++ b/artisan-proxy-common/README
@@ -0,0 +1,4 @@
+
+The system documentation is in the docs directory of the multiverse repository.
+
+- type make upgrade to run ubuntu/debian upgrade on all boxes
diff --git a/artisan-proxy-common/overlay/etc/hiera/data/group.yaml b/artisan-proxy-common/overlay/etc/hiera/data/group.yaml
new file mode 100644
index 0000000..9ffe203
--- /dev/null
+++ b/artisan-proxy-common/overlay/etc/hiera/data/group.yaml
@@ -0,0 +1,212 @@
+---
+satosa_config:
+   saml2_backend: "/etc/satosa/plugins/saml2_backend.yaml"
+   saml2_frontend: "/etc/satosa/plugins/saml2_frontend.yaml"
+   generated_attributes: "/etc/satosa/plugins/generated_attributes.yaml"
+   internal_attributes: "/etc/satosa/internal_attributes.yaml"
+   attribute_authorization: "/etc/satosa/plugins/attribute_authorization.yaml"
+   healthcheck: "/etc/satosa/plugins/healthcheck.yaml"
+healthcheck:
+   module: swamid_plugins.healthcheck.HealthCheck
+   name: HealthCheck
+generated_attributes:
+   module: satosa.micro_services.attribute_generation.AddSyntheticAttributes
+   plugin: AddSyntheticAttributes
+   name: AddSyntheticAttributes
+   config:
+      synthetic_attributes:
+         default:
+            default:
+               schachomeorganization: "{{edupersonprincipalname.scope}}"
+attribute_authorization:
+   module: satosa.micro_services.attribute_authorization.AttributeAuthorization
+   plugin: AttributeAuthorization
+   name: AttributeAuthorization
+   config:
+      attribute_allow:
+         default:
+            default:
+               edupersonscopedaffiliation:
+                  - "^(employee|member|student)@nordu.net$"
+                  - "^(member|employee)@sunet.se$"
+                  - "^(employee|member|student)@liu.se$"
+                  - "^(employee|member|student)@su.se$"
+                  - "^(employee|member|student)@oru.se$"
+                  - "^(employee|member|student)@lnu.se$"
+                  - "^(employee|member|student)@kau.se$"
+                  - "^(employee|member)@gu.se$"
+                  - "^(employee|member|student)@mah.se$"
+                  - "^(employee|member)@du.se$"
+                  - "^(employee|member)@uu.se$"
+                  - "^(employee|member|student)@suni.se$"
+                  - "^(employee|member|student)@hig.se$"
+                  - "^(employee|member)@ki.se$"
+                  - "^(employee|member)@mdh.se$"
+                  - "^(employee|member)@mdu.se$"
+                  - "^(employee|member|student)@hb.se$"
+                  - "^(employee|member)@konstfack.se$"
+                  - "^(employee|member)@vr.se$"
+                  - "^(employee|member)@user.uu.se$"
+                  - "^(employee|member)@gih.se$"
+                  - "^(employee|member)@hj.se$"
+                  - "^(employee|member)@hh.se$"
+                  - "^(employee|member|student)@fhs.se$"
+                  - "^(employee|member)@umu.se$"
+                  - "^(employee|member)@bth.se$"
+                  - "^(employee|member)@ltu.se$"
+                  - "^(employee|member)@kmh.se$"
+      attribute_deny:
+         default:
+            default:
+               edupersonscopedaffiliation:
+                  - "^student@du.se$"
+internal_attributes:
+   attributes:
+      displayname:
+         saml: [displayName]
+         adfs: [displayName]
+      commonname:
+         saml: [cn]
+         adfs: [displayName]
+      givenname:
+         saml: [givenName]
+         adfs: [givenName]
+      surname:
+        saml: [sn]
+        adfs: [sn]
+      mail:
+        saml: [mail]
+        adfs: [mail]
+      edupersonprincipalname:
+        saml: [eduPersonPrincipalName]
+        adfs: [eduPersonPrincipalName]
+      edupersonscopedaffiliation:
+        saml: [eduPersonScopedAffiliation]
+        adfs: [eduPersonScopedAffiliation]
+      noredupersonnin:
+        saml: [norEduPersonNIN]
+        adfs: [norEduPersonNIN]
+      edupersonentitlement:
+        saml: [eduPersonEntitlement]
+        adfs: [eduPersonEntitlement]
+      schachomeorganization:
+        saml: [schacHomeOrganization]
+      schachomeorganizationtype:
+        saml: [schacHomeOrganizationType]
+      organizationname:
+        saml: [ou]
+      noreduorgacronym:
+        saml: [norEduOrgAcronym]
+      countryname:
+        saml: [c]
+      friendlycountryname:
+        saml: [co]
+      edupersontargetedid:
+        saml: [eduPersonTargetedID]
+   user_id_to_attr: edupersontargetedid
+satosa_proxy_conf:
+   BASE: https://artisan-idp-proxy.sunet.se
+   INTERNAL_ATTRIBUTES: "internal_attributes.yaml"
+   BACKEND_MODULES:
+      - "plugins/saml2_backend.yaml"
+   FRONTEND_MODULES:
+      - "plugins/saml2_frontend.yaml"
+   MICRO_SERVICES:
+      - "plugins/generated_attributes.yaml"
+      - "plugins/attribute_authorization.yaml"
+      - "plugins/healthcheck.yaml"
+   LOGGING:
+     version: 1
+     formatters:
+        default:
+           format: "%(asctime)s [%(process)d] [%(levelname)s] %(message)s"
+     handlers:
+        console:
+           class: logging.StreamHandler
+           level: DEBUG
+           formatter: default
+           stream: ext://sys.stdout
+     loggers:
+        satosa:
+           level: DEBUG
+           handlers: [console]
+        saml2:
+           level: DEBUG
+           handlers: [console]
+saml2_backend:
+  config:
+    sp_config:
+      organization: {display_name: SUNET Survey, name: SUNET Survey, url: 'https://sunet.se'}
+      contact_person:
+        - {contact_type: technical, email_address: noc@sunet.se, given_name: Technical}
+        - {contact_type: support, email_address: noc@sunet.se, given_name: Support}
+      key_file: backend.key
+      cert_file: backend.crt
+      encryption_keypairs:
+        - { key_file: backend.key, cert_file: backend.crt }
+      allow_unknown_attributes: true
+      metadata:
+        mdq:
+         - url: https://mds.swamid.se
+           cert: "/etc/satosa/md-signer2.crt"
+      accepted_time_diff: 180
+      entityid: https://artisan-idp-proxy.sunet.se/sp
+      service:
+        sp:
+          name_id_format: ['urn:oasis:names:tc:SAML:2.0:nameid-format:transient']
+          allow_unsolicited: true
+          endpoints:
+            assertion_consumer_service:
+              - [<base_url>/<name>/acs/post, 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST']
+              - [<base_url>/<name>/acs/redirect, 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect']
+            discovery_response:
+              - [<base_url>/<name>/disco, 'urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol']
+          want_response_signed: False
+          want_assertions_signed: False
+          want_assertions_or_response_signed: True
+      xmlsec_binary: /usr/bin/xmlsec1
+      attribute_map_dir: attributemaps
+    disco_srv: https://service.seamlessaccess.org/ds
+    attribute_profile: saml
+  module: satosa.backends.saml2.SAMLBackend
+  name: Saml2SP
+  plugin: BackendModulePlugin
+saml2_frontend:
+  config:
+    custom_attribute_release:
+      default:
+        default:
+          exclude: ["eduPersonTargetedID","eduPersonAffiliation"]
+    idp_config:
+      organization: {display_name: SWAMID, name: SWAMID, url: 'https://sunet.se'}
+      contact_person:
+        - {contact_type: technical, email_address: noc@sunet.se, given_name: Technical}
+        - {contact_type: support, email_address: noc@sunet.se, given_name: Support}
+      key_file: frontend.key
+      cert_file: frontend.crt
+      metadata:
+        local: [metadata/artisan.xml]
+      accepted_time_diff: 180
+      entityid: https://artisan-idp-proxy.sunet.se/idp
+      service:
+        idp:
+          endpoints:
+            single_sign_on_service: []
+          name: SWAMID
+          name_id_format: ['urn:oasis:names:tc:SAML:2.0:nameid-format:transient']
+          policy:
+            default:
+              attribute_restrictions: null
+              fail_on_missing_requested: false
+              lifetime: {minutes: 15}
+              name_form: urn:oasis:names:tc:SAML:2.0:attrname-format:uri
+          want_authn_requests_signed: false
+          entity_categories: ['swamid']
+      xmlsec_binary: /usr/bin/xmlsec1
+    endpoints:
+      single_sign_on_service: {'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST': sso/post,
+        'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect': sso/redirect}
+    attribute_profile: saml
+  module: satosa.frontends.saml2.SAMLFrontend
+  plugin: FrontendModulePlugin
+  name: Saml2IDP
diff --git a/artisan-proxy-common/overlay/etc/satosa/backend.crt b/artisan-proxy-common/overlay/etc/satosa/backend.crt
new file mode 100644
index 0000000..2281c85
--- /dev/null
+++ b/artisan-proxy-common/overlay/etc/satosa/backend.crt
@@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----
+MIIFEzCCAvugAwIBAgIUBGH1vtek1NlSdBt0H5KzT7TQmOMwDQYJKoZIhvcNAQEL
+BQAwGTEXMBUGA1UEAwwOc2F0b3NhX2JhY2tlbmQwHhcNMjAwOTExMTA0MTIzWhcN
+MzAwOTA5MTA0MTIzWjAZMRcwFQYDVQQDDA5zYXRvc2FfYmFja2VuZDCCAiIwDQYJ
+KoZIhvcNAQEBBQADggIPADCCAgoCggIBAMGrD/R6GNn0kxan4EH78Ka8wAE6K+EF
++ymvCZUvnZe4OLm5Di5x0JS3QEmsG+JBupb2rBxZIff/I/x+96t0icR3cimm9r+I
+PAywFT8gSJqMWL1LFEVJKXq2nuaP8Pzh3nWrGGzmLDCh+w/Quqb4PZLuE2CSiHIh
+0T3mmDHV5bi1smxGdprsn6b2CN/+7BAcCZmW4d/5ICRISb/KPdj818mtad6IKoXy
+v8DFYUuEB6UVxVkSGj+ZlLRswwOOp0UQhCH78Iv3wm1t7B5az0eMnHuT2vF82FPv
+yBhD0YvZRV1w0cVKrLC4DnhQdg8NHSRDO0YvqHnkIlCVRu+PF8T9ZnCI3D5R1MWj
+nq82PZm6o7ifE7qdDgf6xIsVd+hIIc+JjvIv2QJNGMQhycMke7peEpOghMi8COwo
+/X5hJpD3NQqlLLFn0UzTEVlL43Ei+11ePf4TYI8R0XXnGVi61U0qMMZ630XOE/5W
+s7ZvMzxasq44Q1aSX1bChTn0dpZ0NeDSONORHPqhkM4OxBXqTj/mHItRcmbEFxpw
+8X2ufDWKmJlQW0GaZOcnPYdpXJ8kG4ts09aSK4M7q6yKnZt9bF8O2O/NI6dmqGfX
+sMQw7X/MRK2Tp+BbgxrkbaVmSiO43AN4gssKesZw4z45PA8Qb33Io/YLQbvGIx83
+sIfHSFz0otfVAgMBAAGjUzBRMB0GA1UdDgQWBBTWYdZV6JyUxZOb4jobweC8FePJ
+cDAfBgNVHSMEGDAWgBTWYdZV6JyUxZOb4jobweC8FePJcDAPBgNVHRMBAf8EBTAD
+AQH/MA0GCSqGSIb3DQEBCwUAA4ICAQCdUkZEBhPKmnSxKcPiV8JBH/+Uw8x4gr8+
+if8p4ugrOQvJAh9VAxLrhpub06WrPxWEcWDg7xPtsA0QrL8dNw6nNTdxYL0qmmzm
+sMlrL5fUaEGFUOYpcAy4RIGbtl60SaHWEAO8KAXXJioeQM1qTsRR8m6mBPJ88Yjq
+6HZeegqSJ1liTEHWtfIqkDc8p5yYZYxXQKOmnncvqAmL7xgWZqPTSs5rEICEDU9T
+Qn07hYyjHopEDqGNjOK1nnTxjyhwwhUjLW3kLOxPXI3bt1PH7tYl0CCA6Yd1vXuk
+UFGJ8+KeHeNVBKBCXMb4fAyO4Uu8jFb6Do52/r+aUjy7Rt7+APJiktKujor3C+0K
+ALb9MGZVHqoP4Au8e9583bb/gO3ASCBnE4J9yhVZHVz6ff0I+ZQhk6OlqW24oQ6k
+HTIJEd7NCaWBKRy8LwuTYrFObsbGb7WRo6rO4a1IgbcNcAxmKu8QQ7w2YRbtVtAh
+lEelRdbYl8IvJNSLwcAxwYTwKZT6fN/lXVdSFHk7ZRp134DyevJ2IjO8u1hwCyBy
+pIAKcO/5NatCLyQJvBwWy9glqABeu3Wg/YWAwR7IAmFH0Eav93pUSTbtTxdvA5Ts
+OviEv96zT8eXdIeBMUt+hAPSoJh/iy6nZheR00UfugrWd8QcEEPwS5VG1TvUFriS
+TXlRPha6EA==
+-----END CERTIFICATE-----
diff --git a/artisan-proxy-common/overlay/etc/satosa/frontend.crt b/artisan-proxy-common/overlay/etc/satosa/frontend.crt
new file mode 100644
index 0000000..a121eab
--- /dev/null
+++ b/artisan-proxy-common/overlay/etc/satosa/frontend.crt
@@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/artisan-proxy-common/overlay/etc/satosa/md-signer2.crt b/artisan-proxy-common/overlay/etc/satosa/md-signer2.crt
new file mode 100644
index 0000000..f182c7a
--- /dev/null
+++ b/artisan-proxy-common/overlay/etc/satosa/md-signer2.crt
@@ -0,0 +1,33 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
diff --git a/artisan-proxy-common/overlay/etc/satosa/metadata.crt b/artisan-proxy-common/overlay/etc/satosa/metadata.crt
new file mode 100644
index 0000000..3143366
--- /dev/null
+++ b/artisan-proxy-common/overlay/etc/satosa/metadata.crt
@@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/artisanproxy-sto1-prod-1.sunet.se/overlay/etc/hiera/data/local.eyaml b/artisanproxy-sto1-prod-1.sunet.se/overlay/etc/hiera/data/local.eyaml
new file mode 100644
index 0000000..72ef39a
--- /dev/null
+++ b/artisanproxy-sto1-prod-1.sunet.se/overlay/etc/hiera/data/local.eyaml
@@ -0,0 +1,273 @@
+---
+satosa_state_encryption_key: ENC[PKCS7,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]
+satosa_user_id_hash_salt: ENC[PKCS7,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]
+satosa_frontend_key: >
+   ENC[PKCS7,MIIPiQYJKoZIhvcNAQcDoIIPejCCD3YCAQAxggKNMIICiQIBAD
+   BxMFkxCzAJBgNVBAYTAlNFMQ4wDAYDVQQKDAVTVU5FVDEOMAwGA1UECwwFRV
+   lBTUwxKjAoBgNVBAMMIWFydGlzYW5wcm94eS1zdG8xLXByb2QtMS5zdW5ldC
+   5zZQIUCJyXbbb+rYtjNQEK/33ypd7f/48wDQYJKoZIhvcNAQEBBQAEggIAxQ
+   OokjCSRI8pxcV9aHBcyKcNQPyYzduoNihYTSV0NN5Di9p/JS1Sws0WPMM2z2
+   qVhjCshPlBafP5/367qChLL8RQH0QjcJckCGdMU6R2gHZzce8Eb99PJ0QzPr
+   PL6TpiayrOhV2MCDp3uR9lYvTxo+dX9CzKzIdPjmcq0q38nR3IFO9TfV41Vz
+   evpyOzp8d574Iyt6qKvIKRdnX/B80BPy93gaDaZNA4Kuh97k6HlRPbawytBS
+   fn2VhGh43SFHZW0Ep69vXEuHLfm85HxnDNLb500pRiqyN0WsUSdRePdvtkED
+   DeaKL4qvVo1/aAmIU/w7+LpIudMsdQMXtm4kU7M+OX5KOzsAz0jIRoB39Ie2
+   9ITlB/2MXNWKe+HscsKCuLOz/E2yefiBsOW6CRaQlQPkXrNrmadb6AhOMJry
+   P/kBGRopQAvELOkxuafEUalVMDKKsjVRh5+56rvFWi78bgYiquwalNDFxu4n
+   Bgod6EmYDYmJFOWFxn/4hNhQJGN3NdKDNVz6ztZ81pOJ2vpB1gSTWP/j2TOZ
+   omwZNgq3L2GgSlvMbBaQCNaIOAPQmyAKE8OCAhuPXsolCEd9wXV2C9uLOf7D
+   H2q9iys1yH9lE8h9UJiPdRd5zop9hal62IaHK5fA/aazplY7HYz8CD9NOTTt
+   X5otCPKam+jWqAx3JchbwwggzeBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBB
+   ClC6oYNV59GGbBaGOvfENZgIIMsE0XSYoHepGzJ47j/cQCsKcOst47uce9yS
+   S60jKbY0uuy54oo+ZhIpWNd/nr6zZo3ux8Uw5HZunQCV0uSYTRyDbRlpgkwm
+   JIV1guvDO8Gyz2FEAT1x1Yu4vflvOl9B4hCGGSa4A+1Bm7owJd2NvzByrYiP
+   d7BZZvapYQ2eTHQu00+Pp54szA7BfhyEMN6PsIOhiXm+iRqD2Dwyma7PZBOn
+   g6e+YVLjE30LK++p8pSz66dH1g3gMMuOdIJ4qQe243O7J2Qv1qiSfNLC+jBn
+   gBX1NYxTLuDE1cKDRhyMsk7dEVyCIapxW82JJGrF1/MR2KJgBaNKjeROJlug
+   f3cPV7+O7DazeHCVH7G0/krWIhVwZZ1Uy5NPaVqxUyBgK6yJsuEKnsqKaLMF
+   qO4XbNXW4ZDx+eq3lRnciYdSYKV1FKBqWgjs2aDG4cYBicOh5aSb0HbkSY5S
+   0yLXcEYd27GrjizErXYvrcNDyMJ5KqrOhsowsD9vEE/AieAvgXfCRZV/Q0Tu
+   VI/xDeCKz1lPooDeh1WJoLv8uhziKBrULgjovPIc+VrtR9nDhYDl1F0or3kS
+   EAMZvqG0ArbhIIA0Zfv4LyGuz5w7A4q/Y7rmz+gV8G/JJ/eq66kp+iZurUtd
+   CVbWe5ADurno23woJCTQkBGEbMACeo32NDuzoWx85WLAuYai7q6AKrfMo3EG
+   4a15LvCkgekNExwzUw1zoAfIgagCfMFCn4UPF+P/lcV+zZW5tM2PbAIy6afy
+   /zA8wxvoeXjxEGsI3vtJUb4iFdp3Xo7ZyeTRIuFDackcwF39FRaDcZ+QMS+I
+   q01nIXk9VQLPR31qM9e1S3dJoBPSfpZs9V6EZgIkJ6YxhL2nDM+oR3eciGpI
+   0nn58wUP+3uwS4bwm/xePy9cek1EOdcidGNwcLHZ6D2axTGKU4yilqerNVJi
+   Txg4MFAtMFdhldc7sU/+ri6uIcNIroaexsc1biDGBi8kbzXrbqKkPLPp4u0L
+   ntS89U/XVlbABgaSXJH012Hj11KjQ73jwo/SrGCJHp6UCVP+zGq+yShCOWz9
+   2/3DsNByd/98KUr9/9LyxMiI8VHTZe5fEsnTamx+gyaxiKoV8FUSsH9Hwdoj
+   RjznJTdTZzCJpQUaNTWWLaqjyPKfTOQ2VYnplbHSIvG4c7PpAXyq9tWi/29D
+   6pZkwcpZYMmZVvMdNLorn7sz836sN8ZEssZVn4DaaIO81jvzNd69dOGTyKbX
+   YPciDB9lBVfVjZoLYEwUg+88aygm3cOZyizyaWS+ZmBpAwn/Gs+0JlL6OdyJ
+   A8G+u4ugx+6qAVQv/fyOTvbzuADT09aeIw8JJwWdmuk09sBlZnHcakGUckrQ
+   PIlY9EU7VGLJRxKbchEXHxh9DNqKspHpQosq2JVCY1PxwuLf5Vv4+znI0aZ7
+   9DfToHLJUCHXvmw9lANNJooKA/v0WeEJcLUSm9T9KIQFaD4LxGawGOmILFn+
+   UyjbKPY97VwiPyLdzs6KHo/c8BhSNcRSQ0OMgTyVZvDuWJr1Qc1CEGTPOUn3
+   c4l0HXlI/2vstEkn4HDLpYZ8RUPwnOzj+FCdISZFaQmehnOTzapvhgwDo8wm
+   EHtuNKg+QxCp4pH3vhS1x35XnLZIMXwUV8dEhoQYzfxysS9hf0qF4cbJJ+j9
+   NDDEOaqABAHkEV4lg682JfWBYSt4nNp4fi6ixci6oeQ6U3Kjt3hKD1e4NaiJ
+   MMDF/AOg64KaiawbZw/o/MC8HPgkWyFfgViXKA2VCM7KhqyiQW+YYRLXOgF4
+   uBLp+OOjV3Ox12fPwWr24ieWNOsZHaqSVOG1lY6DaU3ZCzMr3ddzf72ZXRVQ
+   k2bAyAj5tuxoxBLw2+xxj4+6c8o2MP8hh+kXsW7OF9k9Bl8vbBfCqflHY1Kr
+   U3nJjxD2navHRBDmolVXfxh495U6JAreQjor76t281/bSFM7h3loCzQrNCzZ
+   63FjPheZQe9kKUfe5vMIMjOA/sVugqlCe5zQUCtLcxAh8oPA4FBL/I8OTEeD
+   wOCWfciEgcaHhnjFYwd4yRJjoEmLJ8aLtAq5QDnRsTpwonmOBuKWPtzqXM80
+   eh49O9ZA2wvD+Q1uc/vo6kkU8uhiQDRV56T7VLy9M+8tNEmzQsOS9m/neufV
+   0OdVB0UAGfRhSTb/diXLHFmGTGWXwljLJX8u7InnHX9/hH74d5ojxDqqAYUn
+   GfSPWOx9mUZdA8as2mxGC5H2w3rfazhZfmrIKJ83lP/dw/tGcXX44gjWwQKm
+   jbqoMzbNiRIz9XdnfJbxH3/3K5MPcigz6WI0l0oUyjd4BW2wVINC9v/nmmsP
+   PJCE5D8TbuxoVAtmmlqD5heBI9IjwKMS00Mf5Hz9dexYlKpSSZTf8SKPzVXc
+   cYJGJS9Bfd7PymJDqg0LKcqjK71atmTgTMXZ23nfmip8EwnneQ4j5d7E09mD
+   LFI1lxsjMjlQeOJfciN4QMZR7nnyRSdwmrVcZe10TdzI0IQRkDsE2Gv8oXQt
+   Jtv5+7AgE6SoEY9R4h00xYahDYkxhYjdx5bEcD5/0IXo4WilMcQQboq8nxlI
+   OLOs49g2ffdEycPxYz7nTRxVwtg0JTKFncj2YfW9HKhr8isV+i/d45gjJJyf
+   DIj8BJEwFoB/Wj3zajz92rV+GZahj1pqKULJZKuN712fzV0m1yJ+tBvXS+7i
+   AB/WW/OR/pTk4fmsxyb3cMBp38DqR9RNP43bCGwuwodl016jfIRxouCkp1Pl
+   3FxvAYAggYHAdmD/1psYbRIGt/aY7XV68XZmnik4nDvP43hYrVkIYHoswuGC
+   bVjNSkm/7rj+VvlZ768DGV5iT1MYuPSjeKJWwc4T+Ro2vnWYvPX8zWeZX5xo
+   UMBulpcg+qZKPnPdGcYcWRLaw7L3GDK6VuM3mA5EZFOea4hr96FM6eVQcRm5
+   IzkQ32VRVUiA4knWZN/hyDS0awGsVKeoEPIkqEquPePCoOvJpaab10rT9+Zk
+   v1R+XRLSz3hUERzYnAhU0Uh31waTF0WVtaAtrxnTDn91J3fHRlKaeixU59II
+   pcxN6rqomc8eBuvVDvJMVsNS8TKaFNZ2T/57qnxv3SP4YO0zi6iEkZuLi/e8
+   Z9jezNZ9iz2SX2sqipfHJ3bvQtRFGglAvlU5ZznsgLHZN+C9/GQR+MCieUzs
+   ptVnUKgJJ6jt5lFOYiztjFlVnTIEK14G1EDaqvjiKmuK5hp1BeiK6CY99T+8
+   y5unfQpywI1jRg9kcql/SrxN9VkcXLqN4Hmn2WIhPouZme2tcnIp1yvFQ+v6
+   Jq9fK+SssjExEYP8OnBglEz3N1HDw84BR63ed07Gx/i0jLFVZhZ8CvI8oRZ4
+   A/nP09iu3svbGpCmKOswGjy+Mdq8+yYyIOY7hMEgMzkBcoWaTJeTRlarO1pg
+   gibZ9LPHR4gwrZtuOo4gUxpmhd7+ZKMk3UzmMay/DXTvl9Sp0klgRzXY4o4V
+   hKCrpf7+qzVNxq8hIuKANc5U/hRVCEfeUo9hG6dXbJn77RgytxrgjNpIxy4b
+   DT+XIYsQPM/yO2M2t3Dn4VeVeymSU7LpWZdJonpGfMdCIpI9DX/RA7D1nI06
+   EnsS30eXFXOl8Ag1FQMZ7aLU7pDdizvFYCrdCyH5eogflSu15H0a9GBOSqi6
+   8ZmK0FysHlxOQ7fC/WBo76Zw86NWFyrJ1yoZOYPGWqUuw16SU9FBtqgrLH3X
+   eOWd8qespjZmhIkiqm3YEZfFsaKyKxcQe7vdyV25CNWcTO4Xj3L7/2SpNjGw
+   X+my8jSK8dqIei/saDrhvMiv+OKxHgimfq1Oxg3q8g8XAEw3wB644/TMkm05
+   nR9RJD3Cdk+xZxtcLHZNegOQWFpVUFr9RdZ52qjgmFdWFCKMvHgFfavvfAWB
+   81eeBrcyCWVt+yfmbhkk0PRsVdyzimojFIw/fq/uCspfsTWU1P3cAGK/WDrd
+   FMtJp0GGc6zKN/Llr9Mj4twivUMtNHfAfv3pwZX/8i7Fmf5zaFcKoBuNOZLQ
+   O8lbpKLvWxw1PPrGKxsQ/Id4fhqEmEQxHVE1dmHrtNdrwVOH41HDgx/GbnFz
+   Jg4vHRQ4K4mSdlImT5N+nJDtSI8Z+6Hskhw/TJxIOt3k1Akw4Mat3x52tFse
+   qQ+ZiavkAwZp66bJEZd7QrP4d2NoZUJSdDoeZO3PIWlHPmiA2+v00avkcD4a
+   epDGbyymRXcIdwf0z7VVqKdiwEyTcZl851rljMYnWWdBCELc2EQogP/PrDw4
+   ivc+izCz336te4lanUwdoUDma7T+4ZTnCHuaF8l2k9PgUSo2Gj/a5jCruF5l
+   v0klqxAOealPfqJduWB8SYqbB3gU2ClrzTW4gt]
+satosa_backend_key: >
+   ENC[PKCS7,MIIPiQYJKoZIhvcNAQcDoIIPejCCD3YCAQAxggKNMIICiQIBAD
+   BxMFkxCzAJBgNVBAYTAlNFMQ4wDAYDVQQKDAVTVU5FVDEOMAwGA1UECwwFRV
+   lBTUwxKjAoBgNVBAMMIWFydGlzYW5wcm94eS1zdG8xLXByb2QtMS5zdW5ldC
+   5zZQIUCJyXbbb+rYtjNQEK/33ypd7f/48wDQYJKoZIhvcNAQEBBQAEggIAdE
+   gCsnTDBkY7LRsTFHERKyhLPvN7NU1ggIyxFFgt3TnM1K9Ddo3Zywu87iORX4
+   0t5Z4qWI5d5LngzWgNGZ+zOw0ZKTdxlHztcHCkUEQI86xq+zkWKxPJg29BJr
+   FXMjsHyfoSWH+sMhpEJOYD/VfirYHlYXjU8tMzUhqVirMUQ3P83ObJccsVOf
+   W+LZ1jYYGs+K3BetUJlovXKe9U9gnA9DhdO1Qn3n009Huh1SvgcT0YCh/FSZ
+   NAHipf9fEUXOIff/lGuBsi0ONSWEaxmzVjl8EnvH1qz8QDhih4mA2Jz9p2vz
+   GTpkVhVNaaLXu53LfwyNNrCg3p/TVZX5FZJO75DK8cOvf1a7DvdWgkf55mCH
+   QU2Ksq21jvo3YXGBacmQwbE2+82FzK6uUL3p2yqLsH5LCTcKNiDHlud6IHWK
+   fo8W8sZjDaQx+jRUlnBJPbGmwoO/C76bs+LP0wqx+Iotai06zK3llhBiGRBG
+   EPH8JqPyJ1p9ONnQMfug+EfZO8/RlPRd3BHQz2etDB+dX577lSO8uWbI1ERi
+   3X6bwu6L9dMGDtbKJKZQyDBQjrkFBKUnnZqDogXMfpV28Q6AoBvaEF3NZVxq
+   +HvZi+5PcgsaBGEZ+pIjdvrXGzIV0hMqpbRoNDJvK3kIiUi7mwlbAOnj7KnH
+   5O4Mtc1QuiIsXwDA7J57gwggzeBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBB
+   DE6hE5fRplS8UQYtrBDJSzgIIMsB8WxBF2qBuyuBrGRxP9wjVnP/Y0FnbnGM
+   CwugojkheQ237xK3aKzH4opoafTJUmcbLZBEuzjj1/PpMASGvEk5NjVfP/Ds
+   jvpriRjD887jS1iuy+1RBqetjKwpl9RhNK/whKMeOID95SapOMutTyZwe0U7
+   iHul/FSwkOETN5DWZZgTWg4gFK+24DuFTQB+0iyMLc27rGKdaQQRPqRorhJU
+   khVWIuWFvsMCiiG4BmxzCw5Ok1JMcU125emFpcLzm1CjgGxwXsFURh8nwkFt
+   9vDmmv3GMfDSNqVT5SfsaAsA13f6XK3+Rt+6Pgr4IiAwQyQd4A7nT6ANHHyk
+   BEZ8E7AQLeGDCG29fQcAp6P4GGaJZ0IvyGmVA8YrvBld3GdZx7TzB5rT94vj
+   QrtblEZJ7xe1nrwjbxx7tMVQWlwbrCEecvm8lUXuQYPvLqwJM1rEL7aINiq6
+   4UrNZ7Ow9whs83e45be8ex9mjfrQeiZ8P+u+tGqGqpBPsMK/qANZcI/HAw34
+   9uM8VDlo/4vhjN3pZrYMLZCdXaLkVhI0tX3hZRWhturgrSI3Izaw3hPZnP2f
+   6GSXt0UFs+2emRpCD2pAxlQP8ySMCrlfVkLqu/c58C7xwY53M8l5Xc8xwMv+
+   Tu1ZiNjdaSqghYAi9ohxM0KYOmxtcyXm+o+wL/ZVwZqudx2ofjRgXRCD9CO5
+   KmF4Ca9cMFWWlknQU3Avj3+wXukB23ySHiFpJT+4Wrfz5y7oZHLswmjClnPT
+   aFZnIkYft1wC+KMRyG1Dr1+fQCli7FKLCJUfnv4hZGKxfEtSxTJuWlUmurMp
+   IElHlRh2De2xEu7qWW7MoQ4MPzQcyYglO8Er0E5eDh3F1EqU9TM0TqbjEkD7
+   e2Z7I7hM0EmfZ3F3Cdag21nxMI0/WFvve/itq8E+CFU7y5E6XsHhwC2fImc1
+   TVmem6w/s6GPT/IKWbWTrFPRlvLRYay/q1hPfw5nKW3FojNEWbYRwINoETkv
+   IHSWAleZJZaOIZUvM7q7IJ5C/NUb9M6DmVBOQgL2bWLvm6kbvtLp/xHK6igD
+   RZBl38KUdI7VTy/RVq9++rEQDJBnZK1SqojMgAafAYVfoku8HGHunei7bzOT
+   Vd4gSzF1uCz6wXLxEwqNzHlarZ4QavQOrfG88wtvfALRrixMburs5yvczkp3
+   PNHSpUL+fcBHPl6Llg5RZAuAgbzY6ZKRMiIQ78dqGmvP144QatMafPYv1m1c
+   fzmRDqdQO2Tkl+dKZtIbTSE2upWVrbyrTDj6AHfx7kTc4+TEa60zLqVOGGMD
+   xN8bIZCdEeKf+VtLDAbMCKP7yYe3gGztJOwk4MJisyKeMMl+3ulbesWEXuCd
+   olLKTxpxE5J4F0hVUaJYghzznC30DtsqKvxMkICVmCgwyxYw58HbUhVdYYii
+   i4jnYl+k0k5wSWtoMaSSlCl6kuPS9UzhKi99+GNO9gtzBO7KtM+t11s722N1
+   4J+jzsdFALu+Z5aY10t/uQc2J6dwd2eAn2kHO/ROtf1TSEmmAIFetC8AlsDf
+   Yy7xkkYz/r+9Fyu2b5bzVHqG0K0VzTCcOV3Eg9VgYmPELgpJvcUHpFfxI1w5
+   IZ2KqX39cdbrGhFhZJlJ2LVIWYyWifLwDGcpWaQ6Jd3Yok0L3Z/iBk1QbXXz
+   WlHTatEHOmUTCcSMKYa/ajuY+ldDXrO/nHpv6KHudbUIYnY3wBREgfd9VkQn
+   JSlJxQ+X07RCvfTRcBKgmEKBPBIwV8NOZdAqAq1tAJcCV3KclA2HjMuq26lf
+   FQYKwXLWq4VaDTWsBrbiFe1xPI5WVX5UL3EHJvFUzOKt1S8EXPWSC14SQszz
+   JlJrw6jNTa21sVvLt3H7+t65D0CMXLnJ56VUR5LhwNAyu1iGyrPkw1rv7pDD
+   2ZqRmKDyqPK64yKdz2Yrs3qble3tNimcUqBvomBtAEGj/UB4+nYcossD2+Lp
+   WXxhfnq3DdyDoE1dCaQ9YktU+OjwzD4+EhKxOv1suCHdI3snJjF6enFRehrM
+   h34jQcgODzIWeou/4WIU9jxaMeD5cMtH2s6zQHjWkm5fby99Hzyil9Eao73R
+   gOXNAVvB2M/HWMTsqIcjzP8CaIMtOmCkLH8ZiHDqTslbJCULq2V8WOqylCqu
+   a0zMS2aKS9JhXcmA/DylBqsXNwYX76wAwyUiru/Z3O3vivPOwsAxq2vSyG00
+   OqUoSjP17H6NFd7VATafgkb4Jsg5XqopT2qeCFqaVD9ybgptHT3trVGT3LrN
+   ZbFumR+Hp7XCrQnUlFohl/Rn4O/v+mo5b3/pJRIN/8Z01DLZdOU9HIm59kcU
+   os9j0RUzDzlcf6gxW+wiWs+Zre1JHcXS05k1uNXl0m4sTOciU66I52p7YRth
+   wVzIRFH3aheUi8sEI1PUdB/iDFKHSSO3LbQjZuUO+59przA4aNktPczfmuFs
+   CP5h1DCZhrOJZV5SDp88/qDSH39Zu8cIit0iva3eWbSOXb/SG6EumuulaSPN
+   K3/3Sd1MaD0uy7S256iq2eaQ5Biq7rwzV1iY1p4EBQQWXsm3ybDg3O6I6a3l
+   Dz9qZ4wd8EVtrmT1Pe3JDPqVZDRfMvAihbzGYZ+3tdy3v/YenvwMSMktrbM2
+   12xYVTFOZ5UhcQKBLv5FfawNP7pN1Q36SjYkIDuuX7kYKdg1AiJTr7dFhWFI
+   V1dhTk399WeMnyxiUfhzvlyzC/hIyRVvMwbToWq7IV+ve3hVm9d7aguRR1Wm
+   3KPryAuEdF7fdTqxDaDbMHqXqTtSKokTYcBgKaXJN0wSanjs7DMCDnYu7k+w
+   wpnUCuy20OayjfvdXP7DRj1euOHE1jDEZwSdCYDJte6HmyAqI1gPmfDR8Qo7
+   9h8HrmqhTUS3eDTVW2bAkqS0YC8jeiRFZgyeA78biPL66+Oqgpt5K3eXgtb0
+   7ipvYSmRTLN/FngFNml0DtqzQVN5t1q8lCsbg6YB6wLFVbkiMCDtzKFBxpSO
+   c6VJYCgJrMAbJGMCzcuTpbqr+pZOyVzNepFlksBqbfXWVm4Vd6le+OXbAkZK
+   lwZyk7OehxpPLdjfB9mGJjEhj8H1Y0cHJQWPY068wIqSpI13lfobOKiSFFis
+   NsB0hyPkwLUN5z3+1R0AgtUhBuvOPjP0Ru1n94cfGuYohx7ogUbY+fUC1lPZ
+   VAQfILs96XdV8hiDvNuY4iG6nXItOMlLdWGLwnH3DfVtwqBv9iChWEmyffwE
+   LJ9pxiHn6LkhFMEcfICPQ4OxJBssXQw7Bs2TC/gwMTQfXOE++2+cvNuJsgsY
+   LBXRM505fmw0uuT90jXlLiSk4w1+Ud65FY3Ve6D8m49TJN27nSgmv6RgJgSn
+   DmhYANhng+4+dHarh1eNbxR3PaQdyZKWhRGju+GBy/2bq5DVyp1+bItw9Rep
+   qYnp5jzfCziKAnbOQYxlOLDwfFut4/c5Dsbn5pA/bBFR4aORg5DI4E3G75nt
+   6ochp4E3ZEG/t38Ui5ZtmMjOjP9lbYu+ivMT7WtnEfVZwU8/9MocBqwhdMUN
+   2DNdS2NcLLCfWq1vxU9YR2J0F4i2dWTyOqbjt9+q2R4rDTBDLCk0r3eKXlNW
+   sinxUXti5T1lJi65BMnhG+aHr+FKiOb1aaIpfu4UIwcNeL9Yrfanlr2uhsJf
+   PFOiiKyqoiafr+yv+mdY8230joc8gP1AhgvBY/yinck2kqeJzE/QhmOPHdxy
+   XOAabljLPrfACT/hY37lQBwP4fXpv761+8xuJeO6CVIF+ZpabX8VLUPigaf8
+   vDIPmS1lnkVXHbJb+gwFX395t51109IkTjdPEFp0PxUrx8HA7JEOJ13ANaDF
+   UgOE7ZMGbVMzkZarr4zIcAn7N1GWiKTzCKrM1HIF4CKTQeNpgJYMijFouuvy
+   pCgxW3MDhHg1vTCqy8z3yTymu/evbQRH76X0CKiJt4XfNUn7zxgso5JX5H84
+   T7E2QKt6HIE14T8MCRsUrnKsPAaCJkafAcSfMIyK4tHK387H5QKgdVXFcJ4D
+   qbynGvV64oXslw/AjXhp8gapQLGiUOuGLlGcvu20Rj5Hn7CdykKYB++y3/IJ
+   jkmOVbAu6sBuZFxosdsPF3y7mPGVCzi1NAov76X7Z4b9ici8yIoVnyOuxmVh
+   LBUtQjjv3rAz2dAlpBEMQCEpyrZWzFCK84sfefYjpbpcq5WXo46AXIltJVYJ
+   8sbskH58FGr2aOJtG4PrGP/uJRlfMF3SAe7sPUA57p5L5p2sJhfkVXqpYJpr
+   rseVWxMJ/l82uE7ciH7B+lxPB729u+xhmWCdHz45vh2AVVRvlRiJuHtVHfNQ
+   czsjUPjjwTv6FBjkiYb9tVGezRD5T6t/Phz+AN]
+satosa_metadata_key: >
+   ENC[PKCS7,MIIPiQYJKoZIhvcNAQcDoIIPejCCD3YCAQAxggKNMIICiQIBAD
+   BxMFkxCzAJBgNVBAYTAlNFMQ4wDAYDVQQKDAVTVU5FVDEOMAwGA1UECwwFRV
+   lBTUwxKjAoBgNVBAMMIWFydGlzYW5wcm94eS1zdG8xLXByb2QtMS5zdW5ldC
+   5zZQIUCJyXbbb+rYtjNQEK/33ypd7f/48wDQYJKoZIhvcNAQEBBQAEggIAXq
+   AZJn2W+wgw8asYPGG62xnkxNzGpKdrpayDmOqjYsRcLe95CpUtYNpOCBdogX
+   9n+WJvNo4b9M4lziI6JNtux/r2J3YvmGVHDl/uV/sxuXXrPD/0biqCqbXYt6
+   T5LCDb2zFfyplP8cHibPd4tdN0DwtQb8XSXyV4S70LbrwzjWfEXhBHjbA02J
+   Vr0WICD9/MNM6i25klznWgJ14kXZrPvGZiQ9opHdkggDjay9kIF4Zz7wMTsz
+   S/JqIlHQkkCfahj6z+uEjD/JZacyPStPqALvqtSD86z4Nv638PMBr9QTybWp
+   NdgBHW/8qx4oiDsR8Pjs4M0pxJcmeT22AhJfAezDT0o2gkLeKozofit8K8Ll
+   vhZsKE0BxeEGtoBW28z87MCzMCwdA078ifhDGLdUNru3CuLqSvp9GE9Zqu3+
+   kjUgelF7bMtwOzm6/EA2nNsQ9LefwEOMVIlGB17L9td1K1Gb36Bwo2EvQ3HJ
+   x0Vp5ET7YwQR9hnnJLp9xIJlmHg3FU+LGAO1ZXQIwvLJRNQi5YVOgrXqAZCs
+   99Zm4NBF8uZhKw9vO00wAkHj9K9lXA1CqKuU/fRwI0VhmA3bNsH/nMM2LDb7
+   CJgw9Ghb1gwBjBloFuEhOINMUn7jRWoaa9OjYOsJ5BOzj5Mf+8zRLqbE/OQz
+   3aRTQJElh6RpPZCmCGXgcwggzeBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBB
+   AMvqcJKnC+p9+yYwTdNQNogIIMsP15cSaNsbrETINskZAB6h8l0AJ3hjkCIu
+   mc+NkoYoM2vTuxzt1tsbjw+xs5umu+YwoP5kr24CNXuNGalr74YWeZW+prU8
+   jYug8BagoGU+dyr/YtYnoNzY6Jzx2DiiZK0Wqsp3tnV5AJ2EvZEuR+ev/4ug
+   XiqJFukILz76Qu+5ZPB80nBxGQXklS+sVShuWUbqIyVn4HgCAdTnABNVYQ1Z
+   hzs2p5Tjt4nU/lbqKVdEGFbUFoO4JJkHZaHuGnM+a60zMP/bCmwoFaiHQDEq
+   15R37SBaBCibP6MCKei2NyOqIzmqryOsSSNP0lXSqQSP9BxHIgVJxVMiJu3Z
+   oDfSCAS1g5PEmkJBMI4PGuWc0r+NcrEqPeBqdW1OW1aV5vd84i2jhlRQyDhr
+   DKgaQO4NXh4h9RlL20OJxQ2hM9Gl9MEhMo0aPx0ad/3caOSR/W/HeVPhCBFc
+   ZvXILfEDO+MGgIsfP8HgzWiDXsaBYMCqoCm1DgeKD3OxXwIvHahkz5VmbR/q
+   gsMHfzwLSQV0DaS/2PKq5cn/PqkpKlAaLG2WGaKZ4WpQbUwGxFJaNuVm2NjT
+   lLrXEybw/PTerXh5IYFzXQlKiXARyKxmQoKcwocrzfTaeon5c7SSwdXj1Dvb
+   E1d9au/zHv1fMlzBNWnZPkXlxUsYQVrMtOLAKHc9UV6pa+U8stqnlAfkUPLp
+   YBoMYnY4zaEE2xlPIqS489cJe9mxwG+XBLkpiuXi6dosXjc7A7oG8w669S+D
+   XRwTQV9dta+CYajLhpmcMuTDnVgVhA37DAKpwHQQDrkzonNnTEg7T6HChkDJ
+   NZpoK2FakZEKM/U7/i4rPL2Q56zeukCN4BYUHQSNE6Xfo7e3dZv/WM3dsSBz
+   2c3PFS+i+A9/LOyy2vTv2WzZFwUXevHQeQLJsVzsbtEoFZ6X4LTr4Rv05MDM
+   L7x1ldfMXFGQFEpWP0YT4uvoYwVFBIJk2VZm33/xAJgUf2TDgIBXLWO3R5wu
+   etzWKwUtq+n1rooWFh5obUXUCwMkNNYNBWZozyk2PckFs2IFIQVmvxbaZss7
+   8nrQuLdV1+wlrWXmbzt0PXNS8Wwa8+1QtPUkSD56tCIChHUR2+J9zfuKawHk
+   IWeCsb6AMAxuywWJobJzZs2yY/dccicg0yfYJswpDo/Q6d16vqHuDj+ZClzy
+   Q4nrCO96LIkAqtpD2ryo3oqWHoiSrY2ypi+8zgoAnKQ51j9iITqvg7hfNqlO
+   vwIhWv1e/DmFh9Y22m/X5sBUuTmoQnoaAX2cOlXn+UmvM30zCnHcX7rleFph
+   mRiN5xTdvASgf9vf9VWeUprfmrZwZA6HmFgCNbYh1sK0xuIEYj4Ifk9hfydm
+   eiWYYnx4NHO3/VG1QbcGQ4niJsj0amxFhrEobQyasIfUTGx2Wi2XNPZWThDE
+   dG9VFfuHI78mSVKdOZx75Ljf2tXu3VXmK3utiHys5biliEeUZBQPnrhdZUt0
+   r9/XloPu09kjfMmt8Kq84LVdl91vGhBrMNp2ze8i1pCHSq0+FAFbQZbSpDZ+
+   KHJ17JMqqnR1FwhZs/Y3a7ou9N+szoYa8AHS3q8MR0UQ7+JxTNwplKf5rE7w
+   42dy/Kku1S0rVQkF8uXcAqnVNfKkFD65l4/cxTNmS+BRzUod1Oukbw52lZ6Z
+   rOMXdzZDTKY39fC8lc0aLQY98euxfxl9CVuSGQjtu+7/MYTOGiqDoNNs6bus
+   JwcE1Z01/jyrpGFl/xv5GDABsm0L+rUcElzcz3RMzLNS6iAYRtK6M8swtL9c
+   poW5hs8xbL28yL7S0q2AaGuVcw3ePmQsT3CxXayGPKSMjN8Igt3vSXpcGS04
+   yPSlR9g1gKDi4EdflEKDEJryIEWJAFOOnVG6NhjeZsgY/YUbKzwY1Wmkg6kb
+   a1ndvAIflVGKz3VcOEUSgFyIViqHWHVOaHxeAQuiOvjUWeTtJlC6IizolPTh
+   92tKgBbhlwZUR2Cb462sWqhbnskRFLXFXCgBpncF1Pstr7JxaE6/InPMaCK7
+   jq9qFqXticgGm8DmaZH436+xiLa5CXOEOtlLf8j20gqehsPN9hxX6wfQyhu4
+   rhERM35kDBC9Ad5H9rdnpZ4y+LF6FHHlrN/kj5jiaUBj67U5PPPVkQshxza9
+   Q2t8E7102bJkGeD14T716OutRdwIEoMO/E8np/d/cKZWvBtlK0d3c315Vo0w
+   MRDJ7jSFJF5TO2dXhomaPfd9qm9KuodeJL15Q9T1+a7ZKakr93n9k6G9SCJU
+   G0owQ9ma9yujPMz9KjCg2MZRZvxl4rRUAnLcyx1bsYqwY4/7KNq36CLXc7es
+   p4e4T8xxtdVHP5cDvwGfd5GKZQbbXyX4oPNjBAZXI0tY32eePs4nIJt5S7+0
+   /huU8L3HXC65Y4hYT3pfP6chao0C/sTA5/veipGps8Mt829ued6645KxYqte
+   9hcSrhbUJ0OwnbdJ+aIsyanPZqltjkhcVW7DneKO5J/Ck2FzLqB78+SjAw68
+   JZB9nX/rgD6uFgVa9uT3t96jd4U+HDNXZp4TjGba2o//glPK7IeFJvI9mQT+
+   raYV5mXcMxBMFhIURd9h3qnjKqL0ueU1rHrQD372n1pKuC7kGjStIOO4cVUD
+   rQ4jLUe414i2Bg7GPo9r5eHcB1pX6T6ZcZ4wMEZLD+cu1MSxYvEWXGVS4eIp
+   EPUmDYYUOpqQHqTt+mYDd1wypCf1TfbL/QAn/bqeEK7yW7EeAulnvRnEMn3k
+   +rZk/WOulrQn7C5bmVfgCxUghGcZiY/vNpu6CgRcVlenevvJm56fIXOvFy9F
+   TSrxJzSQfYYQBD2mAw8tVgYMAMyZalEP3xG/9qD8rMx8dY7HoM92F9brbtYM
+   rPLerQ2Sd/fTTvQJ3aa5uCI6vS0ZVQtQxswZ74qkiKhasQwEVScwgOikJKJp
+   tPA0P+DcJ+ffvxfTHYD014/mUvw96yQruNqHmDMa1WRiBcqsg+lGHUTSxbva
+   DoQ/nGz5Nz3Ap0w9T4yKtsPEoBnKVT0pVVyOkCytKyhTDdgCxI1RfDJUMGyG
+   Co4fGArYD/tNrjva5nsWDaE5i24zVWqItJP0We/HzDbl7Jpgj4COSL9dk78N
+   U/GKFqwlmMA3kNyy0p+jAnaIiU4WK8tauM7lql+G52da8t9SXvKWn0tpZH06
+   JLz1m3b7FjEd/BD40jUh6kZT32pBzNuv7e27+GjHi5Nsv+KiQxBrcKqzoHd+
+   jrakNebadCOplTR3Fa5OYf1qBpGQw8pJeduAN+hjHQUR7ac5C00pImvOgfON
+   t8nY1NVYGaRTyRqvUNcDdkLfp88xSzQOzRgmtVNCusAFnaoESmoGRiumZCpu
+   zacgyKORzmxSfuarJ9myHMeWcdsuQ3Ju5ydw/8M4pBj7H07v080IHF8Cdfhd
+   b/nWe9CiXET29xveYzfBM+PFdmIod1+cn7pOIxkyviK69SLJG9Giqqb2EGR8
+   0Mnjn0MQJ7b3O0xDFLlE0h2ANVvHL1cTPG4NkrMPhpgDngoH67AVuioQX85m
+   dx5vnLU+X/pLCqpWGJkm+FuM6mZD04CccblBI6Pah5NRJcqE6GV+Nd3BKakG
+   dtWfpnz1IrYor+Qrp7HQ88V1DkNyKgdqhrHMBwg6sQKEEwFPYEUCdDVCF0Xn
+   lbENWipqfj12S6e0cCVoC/xXsTY9jyfg1E2sndFSIGDQV8QtvSi6vjR3rL3u
+   jTnjhYLnpgVzHg9AHpzKFq/1uL9/vASfhNfSQe+T43b/fq8u9OGtcDGEG0Gy
+   0UqrvjMdEAx7eSfWF6jijXK8hSE2uzdObgT1ZBa0rLn73flMsKGJp0oJldK6
+   pAXcwpmRAHGADFsQ6V0LyMe5qD5tXIvGaroKF8om70HQXqcdJuZYsfZj2Du4
+   7g1S1q/DLjjA7NfIAr64wKSxTwzXrmTAroElIRJjW4oqbDJ86SS7FZtGgDJK
+   HHtRs7eqm+xB0tdSzJ8cl/HbGLMJtKEXjI+smTNx+olFq0yu9X/adPHfjxLE
+   bOd4wegqoIwlCbaC/yyuuYzfcdoNHATfxvZE+uK4Y7KRITuHcf0AZ5lQjdIe
+   LdpBVk1Mz4wJCtuNjFFmdDGQ3wrV+nsTAUs1vXjOPe3VSsK12LRxUxJq8FUO
+   MuwvLlQvm8n4Puqfn5I4+04VkifSepV2XEoKF+I+1dyptbXhVJUWKdLrouDI
+   qgqaa38W6nZJ8H0VkH2B/CtZH25O1eZPqFJ4gestbNLMu8TzN2Hnwq0sZhDY
+   5GGX4wSmDVAXjKCQZmw8a4ktwb8LcSv6MHHilkti3bqC1wp9SfFWikzOodWx
+   ZVZICmlscpB/ubAarbJFjqW2TkPYvLS+U2/Alg]
diff --git a/artisanproxy-sto4-prod-2.sunet.se/overlay/etc/hiera/data/local.eyaml b/artisanproxy-sto4-prod-2.sunet.se/overlay/etc/hiera/data/local.eyaml
new file mode 100644
index 0000000..02a823e
--- /dev/null
+++ b/artisanproxy-sto4-prod-2.sunet.se/overlay/etc/hiera/data/local.eyaml
@@ -0,0 +1,273 @@
+---
+satosa_state_encryption_key: ENC[PKCS7,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]
+satosa_user_id_hash_salt: ENC[PKCS7,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]
+satosa_frontend_key: >
+   ENC[PKCS7,MIIPiQYJKoZIhvcNAQcDoIIPejCCD3YCAQAxggKNMIICiQIBAD
+   BxMFkxCzAJBgNVBAYTAlNFMQ4wDAYDVQQKDAVTVU5FVDEOMAwGA1UECwwFRV
+   lBTUwxKjAoBgNVBAMMIWFydGlzYW5wcm94eS1zdG80LXByb2QtMi5zdW5ldC
+   5zZQIUGHR7rXW+gtadh3Mzde6fk/fLwRowDQYJKoZIhvcNAQEBBQAEggIAjm
+   BjqtOWl5YWl1v5m0NpHDzkcM/hV0DumJcX4oUehB1x5nU+u5QzR1bgUMkJ6G
+   nVnSvakYghJOOAoUU4oi+p9Vt3uJpfv0nVy5L9wLTNeYmTf7ohjKUHet6tod
+   +o9ItOaUA1g56DBMfqykEujUqLrvYDC93iSXsUsceJ00R/tcQxd4b+J9CoU7
+   7ybkkq/+RinvyfXuhue2BE6bUCs0VCfocCVUixWtAAcCbpxL+kZFrGFSIWbz
+   0d31BHf7vAA3tpOZjALe+kYk1UfSCCNGdBd2taQuWsHiCQbe3cmE0IvgUhaK
+   C4eWgJgJxkdIBFnZtKkZnJrU46CoSRD8h7GBzhehJAEMW40qBqEQS/2U9Z2N
+   ecX7IIriFKUSTrCVjmWR4Y0FeoR2ahvimuUkyAHqw5egtDwo0ESVZ8GkYTJg
+   JFXcxhOPHXFYhP87FPwyiGlOy5zpM7mXVkdnvoZPr65k9ea4nHXpMhWKEn/X
+   v/APu9PNRcCRWBDYQHp1E4gQHwP5I8zsjycE1e75DfSJO6DRFI5//xJGEV8F
+   w4iMSFNdIxL5d1+pcC/FqNdTnI7PFJLMSmepty7QBfyKp7nvW86SzdPvTiMe
+   wqZR9YwVYxQXx/FsrH3nfAXreBvhKwDzVhppMAgRj6I1mmgrVMNbl40EK6bW
+   v6Y6LwmSh0SF76tk+zll0wggzeBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBB
+   BK0vSbau2o9YhaYpFPfgIxgIIMsBsn/MOYS1jmmyqRLuY1oHvzM3m8cuC47X
+   yYJ7A/yQd6XaqybS0B+6OpjsxhQtf4bjz48LY64C9fUMRC/1jXZkRAVG4gr3
+   rP3Z0Xthc+PYhk1wG9I26QFbiQ34Lsjti/PjGRp5d2OmslpPL5Q9UoGkg9YR
+   9QaTi6bpaX532D26vfPPbc7S367KJcGCs+AJUDyLRF0Zesk6/NNevOCBz8E3
+   3JPies3+1t9jgykImybfDhg1eN8Syud95TpyUENjJNBhaGkpOZs4SzA073un
+   PGHoilkmDgBEzdqg6DaqsphJZQgz1BWSqXlwnEsY32539mcrM3y+BpQMPqGJ
+   6s5rclh57d3XxzY5/pGyH8kTUUo3ZmvhUelnTLv3ZG3NAVE173zg7PRbFvbR
+   OHSA85GtUJ5uYsUBRg2DcgTyWQS7TpXCSu1hwCKiCmWTH0cf2rhA0A6kFmfm
+   3vmQvnQVyYrmyNLNhRYy3cAIru1M332coup6B/vBSBQc+GsmYgq/kxK3D8Wx
+   lfnyS2YhUByqmytxRL9qRnU9XSqLd0BiiszzQCYUks4ch3nIL1elcBl+vvbB
+   pzxYVrrlb0jZf0ZFqE5kFqRS1ZiUZFZ/MZb3eAnIb2h3GNQhe1wjHItnjwny
+   BW21APEzh6TuGlGT/PBuU/Zfou7OjKCLcqh1A1LjWLWXTYDvjcQjDwgDepYS
+   Dhad1lhjAfkBDCY1JfhqmIozGN6fQAZcSzAJqSskVKF5+aWkUtpoNJX6n1zB
+   cXV/fYtHYEV8QgvEkUQx06BAMwBiPfxiCul5xpK+1KPye424UIn0s1JHapYv
+   TgCTR4WNXG8umNTNezor0OqHDTcaKA46wtYfrmeF+s1dW/nHTPunXaTvx1bg
+   CE9bdnGfR6N0yWVPd2OTPUn7HNiLNndbL/+6Xtm4kBuF6Nvqd1SDhJLQHAYS
+   DzC1AiucvF/E+l4Vs6byXcTAZBGrEasYMgaVL8zu7HH/jVEnxIn+H+g+JWl9
+   ENlq4Zjxhs123+k+L5r9C1y7KptNsWzu20ED9J2RExCrE/C5Nu42ZB0IzAX3
+   qykiVl1iYYC+dBphYFzhiOGe8u62V6gzfyF8SdSXx6UoRvSTpEx0Pi0doFlH
+   PisVSqxykKU3WtWt5EgdqaDtkezmn7QVEK40/vWU43aeQed/lp1Mo7sirkqe
+   rrX/8SdG/T9eh307thgFuYfIaTQwIXh5FKtMkc767PA7l5kZ89280TfeGSOm
+   G9w86LXGj8co3BmjVYzWHkvX8hls9ITG9+5HrgksNTr80KsLjMy2hXr6r4Fv
+   yBQLiVjGIR3OjS+Iwq/2cZ8hCjH6zYaegl80/nW86E3mX0NF3XOUN//UVHGu
+   lMd5FijadlZonLRRSDnYxYOKMLYkx1gyaMsxwm9dkS6U5CoHzHduVaKU17cR
+   XWVz+eBG1b9N1gVzABC2Dl1yOTJJizNd3u+7zIlM5UJA06P7wajGY95FogQ2
+   XENQJ533TYj7zYEbmtpwnvaHHJrWmYqXEJB0XtDP0TgjYIzTjtawY8HEcPPS
+   5IReY9XEGJK2Vfmvl//ScpfmhH2w4RaEOyyene/Ow9ajRNxTbymLBnHwFzJP
+   cxXbVRXX+ebkITBRJduUVB+4Nik2KwHHqcbonZZ3d5ZvRlEc8vIl9YYslSlG
+   FRqGqpbLDGXmVLDh5onEg1UDREBMGjejZr3jX//8tLQKokIRztBfxtdp+4q6
+   NzQ92DqZH6TgErSN+rY6kFJNnSclEiNGdZEdiC9U1Vi5A5Z9tfvFqEi8S7zh
+   qT0QCqEheJcAYn6XNtZdYhz8Wwh/5KUnSNERpIexFO11/q3oxifWyUj1Sdyy
+   EeE7bmp+WwXiR5Fe9LMaDuWMqDEvEoiUwnuhyD04Av+dPbEd4U7Y5mUnl/nG
+   g0Xoj2i+ImfEwhbB6c1RUCuQqsrIPhiNvL/YKCylqcWzUcOENbv8xKS9FWks
+   bLkzRlYKanRoK/kYl0M2iOH4Xi3AKsanMn5tlske8GfDctC+gL00Snjlfgqj
+   /k9lJ/TwwQqzBjuFFtSqE72A06qa769dYREHYUVpGDpQpwm5XwG6eVWSOORw
+   Sj6Gs70Ga4FyIDBSgix1JEEkG+3+l2YElOn+XhOkoqlQyX5JpfP/wVQi+Hyg
+   BA5Z3oiW9DofJmFoEWIrlN8wFmHrm0RacV6RAz2cERyWq2vdSHz/GLaiD7p8
+   7kG/K3VZcnk6dp+jFdm7iuSubypk5qeLL4KcVqrxW4rL5qhQkGMnz4dz56zB
+   w/mqwTbt3MHxuc7sHN4fZBDqHum1DmA/imL5sL34HsqO/npE0VAsYekHlaF9
+   rNlzp4i4j59bXJBraqHYe/ubfFbTft+RLhzpqTe38lJRm9Wp1UV6ZBF55Wb8
+   v33A8yNh0lqdeNVVxIPizLweQW+DerUUI4s12sl9rCGDl8BFuqkDGLqk1jMO
+   CpkqIkcdl36pWiW+kKjDN8m+MWOJ8rzyC76yrnkmz96Bi7z5Zm1NHwd/C8Bl
+   bLCkbuDkNgw7W6CTeafrblaUyHPUr4fALxUce9+iEMRCzPx8qkMgHQZQJPut
+   TyhRh9L9lcFKvxoHEFOzK+EZ/2cg5hko93Z6GhTJNZfVIruFnN0uj/mPeEPM
+   R8iPCHbIDH+Irg2etv8jaZEk+v8AoHcfxEum2X02q4ZtCFK6SE1UYwtDmlPn
+   AZ540UZ9r0mUoRH9osv7QMr4jF2l379edy2/rbzmCSSQ+9nQqctUIOMV9Vrm
+   9oy99kp+HoBi4Xjauu4TLuUnUJ5isvQgGQZ22jP7ZdoxmGtHNyIUWQlKjmRf
+   I6i3iJ3KODAODWqNX38l/quamfEnP0WdYb5BErgKMZmLm7vI3zSYozEjKk7h
+   Ok7UEjvdmuFN0jz+41MGv/itvv5puJwUUqRHHMa94j3wnlPKNP6A9uoJLfL5
+   sTSj1welPbHW5h0jpyMtsjpnHm5Dyk2tiOR7iU5mLERLVeV6MO+A2YMXjzQc
+   JojM1WLTV6zRbmiO8dvnszx6TASGpQoqy0N+hU/GuGVzgzX8R6tZp4GI7eDx
+   7UBFpqLg4/lqVG5qTQkEtu3f6zxYQKoSwDnmoGNANNQf9vvC3/fRtSwclKhP
+   /pLt6X1A/ZWi06uhnG5S2RlmzABZM6+tXx80fVrVwQO5uBBBsp5iuCaLr2GI
+   HTkaIzF1QOQ1GYLCqEPTvoUWG85PNM88EjzO5YE3Wq8ndBNGIKjq9FakZ6x5
+   7OCo2x1JFnHG8uHuQk0yQFPick1/pizsMHjiOqRKA8TEQF5SsrraK+sDiRUz
+   osJd6wslRcEeewtEfMTs6Qq4vT2xy9yFD0yPqXgsoiO0XHUqtZFJ20qTjPaP
+   nTtRGP7yb/W40OI2pgW8Msukad7CMjQb7IJuDvxdLIBsijgnOCGGKE/ivO94
+   Y4rv2pQ2DQqeKlAidEWfh6ofquwjvsy9C2uGFiZvhADE8yImh0KCk6ZwTiby
+   YrZAbRyGEWxhgcGeYWHBzhX6msjgPicufVWA/jXPWycvZ3LqUpaT9iTph9Ys
+   0MDcsW+cKzNCqsBe9GA70NUW3nUqIvr70/C1BiVu4Et7k8+ArRsJ80qGe7Oo
+   lloMnPjFI0BEy106nc80EHLUQ+TTeDaW/nZiONxH9TN3fujwovSZtYAsJjW8
+   K/8m3Yne30AVW8WbmhXWNgbHMQ5P+C9iMlHG6MkrKYGuZE/GfvyuahNqgee5
+   k89670ePMsnsCunwSFMS11q9o6gNNl7xVb9wSj3Sm2oZWnukYVSDogDQxiG2
+   J0M/x+T02Zh/Om6n+Me0XnlzsV55PLGE0uG+7GVEpi6bWBSnbXMkrmgI4X9O
+   y2oZDTykERg1lVkzPZ2IFUV6u9X6iyBUo9aM4xDt6AuEw4g2xb2y3XfJNDjl
+   c/wqwTIoJQke8O59cYQyDfzs6sTWCbM9C28hzVDfQhicigU0vw9gSR+b6gVm
+   OFjLXYexeUgUFTYJn26V4kQ6C6b0UzmMuQJfALqlUm40htyM9P7qJNrX0xri
+   RHnuHIj0/X4q8ZlDoO4U3jyoAdmotTtsc9y2F8Noal01g74tAzXpDvCgqenw
+   Wp8chKG/MHpxl88nrfp2OjjX+Jt9FVJYJnUtll7Ij0+oxhzuDNFhn4Ct4q2w
+   BkMFq8Pqjw1N38hgkscanj1ht4gTwaUS5VrVsxyuGKPoSpYGT6HZ2u7K3vH6
+   B+wbXsjvFn46PmVD5ekCiceVoPY0hjvACU/aiztHmU2ndMnXWfaH1p2iBvbc
+   QYsVa4iEBVmqd9+28g2QVtJ01LPN7uO+/le6FVHcHteBpn8C4MwBD0DJVGgE
+   cBoli9cv88jhQEnEhCIbLCeCQiLfrxiUWxuI/J]
+satosa_backend_key: >
+   ENC[PKCS7,MIIPiQYJKoZIhvcNAQcDoIIPejCCD3YCAQAxggKNMIICiQIBAD
+   BxMFkxCzAJBgNVBAYTAlNFMQ4wDAYDVQQKDAVTVU5FVDEOMAwGA1UECwwFRV
+   lBTUwxKjAoBgNVBAMMIWFydGlzYW5wcm94eS1zdG80LXByb2QtMi5zdW5ldC
+   5zZQIUGHR7rXW+gtadh3Mzde6fk/fLwRowDQYJKoZIhvcNAQEBBQAEggIAIh
+   6KAmb5IvU5Ye/7zVwJqCrmm/UZ/vSZHo/4qj8eAFzYcjWbk0+HdA/EF7h0iB
+   vS3K3n3bSdf6AScue+un1XqqNJgJEhpFDzM6fRbYUIVOlv7IpM/Gw1frrNe0
+   ohu/lFFkPwG/4KhV4M8K3RpXz/8PvCx0T4xqTFdymuXuHKam5TUqT5M9nmy6
+   1/rGPgUb1llmtRJ3iuOuqHWkeEYu8e7Kq1JisrqbbU9pQqq8QaJ48r/ZWoRv
+   eK7IY2Q5RFt7hV4lX6i3orhtvc6U2iN8HLlXRX6IrUaKylfYrkU5atKi1RGf
+   VLW+W7o6ONsWpi1iXZgGR8fCLcd/uU7Gsyy4uRQ51AGxRSyFeqTSMrpaJ2Oq
+   /xhIq+/xg3KRVym+fWLflCaTTn6YDz3a2sHgjLr6eMSWP2WwXXcKVu43QIOI
+   c9V7pmFmKlSqeyG3YbbIxC/quhWhnCOM1Mz4vuWO0bdlRz5FX79ylEXLdHfY
+   waAitx5DxlJoA/RymMhfqTWZaB3yG4pY8yRFlQIyNa91DzeX0NsrJnp/h3Zu
+   sNuUch3nqhE6X6nSxN3sMTDuaZNlj/Sw92iji8JZDxo++tQgs2MbP/f25I3U
+   eBV7pkCPNJh5soyPWIewhP1iXFzJmfiZCZNQILVgnoo+zOE7gL10H+hcVZNL
+   uxkT903VVcawtr7u1aKcIwggzeBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBB
+   CmOU1XRPn1svsaNUPkPmqJgIIMsIemBe6GQWwnDs+fpOf0m1pQ1sB8dPE1Dg
+   vbzSSHQaLHl4+SitSP+7mCpFzzzoStpahBUBO6laSHL148lsJxSKJKnTEQH0
+   MXsoyjfJyOmD5U37gxohxBR9Rjvw9frh+IzE1dM34hZUIjRDZh/jpGc/r9hn
+   yrfH46FbY0lLRrhI5uE5LT1cmuy/+1NPXyQtORBQL76xuz/L2Egh7rugdALV
+   AzGY2dhRFRWzEort5T+x2eE1OkB25yRiTu5ZHfU1YUnlKESq0QdP1f6ezJIl
+   y1WPWAMOiNWSRg5nGddvfOdmU19ZgkTDZ+NSpp3V2klTSYslXpTsPTB9QJMv
+   0L/Wxj2U6Dy3Sd/0sSxqZxcBiNmHqKBhPjVCh7e7OuxJ2RoRTB1SvgMyIqLZ
+   Gg2NhnrUW8qMGgYKSpShBYTkM/4g2rkSmlgNl/yj/Cj0ZNZCiIFyIiI4echK
+   CUF4BznKIagltsv7qcDZd/rULeFv6aXUJ9DlPS9TM+KSEkBdZFGomJ2pvlRE
+   JMETUeSqJOi2ZE9DGH2YlRRt+l4Agp/eVjO5orzTObPWbIxeLFQ87Ttg6JVz
+   58jYTBGVIaAWafuRtZz+YhH82jsEJQBhTzpQD+iFC1TZ3DY9he+OgBhOpH8s
+   d4yQFELuBRZOJfqwvCEecatj9BiMSh1CcGUjsnsxcOYNJmIL7CkMJjx+q4MU
+   m3IT3y/RcC9z+iZkWdmg/vWjwbEVA03rsfycmgsfean6BOwhwHHpeZIppenH
+   D5HaJuCLxqxT1f9zRxdW/dWkodRmNFkB04Wiu6K8qRQBLzNog8n+d1GXU2z8
+   MGunSpw0LN+g5V85IcNqY+Lt/rZmNobcFglpy4NWYfnkx1dL+at2F+Mn3+qR
+   9ohkxOQZQWTFEEvycKSGX2o8KTw4ZUjbi4lNam6pNiEKIdUi9RnZdxABW6EM
+   XtObc9NYhH5q5Du4Z54S+2t7171e4DN6MZkatRJt6QYBFuj2CWUSGI9tMcL+
+   z22WmwulOMZ0wFj58Of9Sp8pn3ZytWl9ESt4F2hq3TyltbU07yQkFKxNnhta
+   q3h3dlzKbKnb7uJl5gUB9X9NKov6KwQC3YMoOxhgzFQ9a1NDo52FTt5jhTVq
+   RjCaKbsvHikk1DEP3iJO+0PXIxJ35KybCZ7v3LBo4bixJRCFFulka+rIVJcF
+   7L1WoBpTH9CQFBPgacU724WLTDQwe6Go6eJvNFnPhYjZ4i5oX+ZvsT0PbiLu
+   SujOrXOBVv4dCLDziHOCINv0DGVog2htaEN1NBNDlZVw+69tL0yI11wkV7uw
+   0D/RXFE3nT2y2e+RRQ966u6TfnJhMjkvKvGK6fyd1aGJGYsveZK6CdAB1XiV
+   9lEoUVmCjAwU9aHPDtyvgrUhP/2i6fm6oVWTEHAFATv+fhS7G85T3UqbEkwG
+   tP4JT6s7shOD27/fzjVeoxX51y3HUYmsvLhUPnwNoWPHNZ3usHu6e1B8Bq0R
+   p5aXsnCwlkhU0Nuif6QZDersg6LlFPlEEQt0YQeWVEEZvb++LrFnr7in3Kcu
+   86sIRvyTlPEz33mPJwzNgoayAL0ccxvoEVEqEtlxKC6RmIo4oy1m27qTsv+Y
+   VWIvgqY4e5EURhprMoLQSnZa8r+i/1aYS++gUpe+3sSsrMbmxiaHUa2GMB5q
+   Vcs7zneYyZqtM0TPshszllWIoIqh4SD8y4Rhek/27Ggw/+/L6iGjH1enf9G7
+   A2TVfw25cUwWFeZBFsrDBgYbG+Cu+HYrB24l5yaBn7Eq9VWAAWC4aN9MsiG3
+   eaCCLSchIBH89ylCEKidnKk4yBUTNPvtA5HnH+PWUYhxdVS3I0znJ4cl+cXg
+   4IIcfsRUtpZHFQtliYMGw9gD3U+czFdgTGRzJ/gcOzcCs85LCDfMi4a7SoZs
+   k0mqMrN36t91uU08bhDS90DIWjWQYF7Wz+y408jyzSB8Eo+4Ncjxz+h7N+zL
+   wUJeIrbrCxesrC12u6kMe+a6cyktrLhfalfPH9X7yAzhh3VxArnv/HwsPLqy
+   Wujb6Q5DBQivIaZA/8GEAAqT7VNGbW+Cef47/u9c1n1fP4U9lS6zl87p/3g/
+   gpduoXZR71ljsP61TInZ4AStiWcT4NmEFIxUUu0R3wNNqu8sbNaatyqirdtg
+   amn1HQ84DFZ4VbDx/Xqjh9TruNCj4JAMghuhwRCKkUWq9/G9zLaJ1TM9t0L6
+   /CYPT9Yme9posT3/DHmhgJp1/gdYi4U69pdjeUQRzU0sK7MdGCD+hOp8EV3R
+   vG3uhB8sJofl5dkDGLqPwIP6vfX6VM0jImjq4ciOx9+0+MSfqmvtv0lpMzxy
+   XiuomwAtlftJX7r7XbhI3C8mAkDKtYwOGyCtjIkAhmBJ1p/xKLmki0KLgLQH
+   0IBC3NnGjvt1qjXgjaKhbhMc8jvgdcf+vtVLCNoDH+a+sZGYIxH9G+WYpt0j
+   uK54C7x3GIsRhzmBa2JruJEsOFcRXt53xPmJiyrRJyde+4gqHplfbV0r5ejg
+   mznFIPeDd5CzhZOCE+5WdpHkfjP0F0vlrKFZhtFB4Tcen1OiRQzZej7U2Rb5
+   Ok90v0E2X4v0A7f92C0KrD5MOYs3bptuQenp5XFSaZ+XHidysNWpEjm4MAip
+   J5rInXDUlKoJkzszkAretaXEHJwQVFxapZzjAY4fqWp9UWFmbjP9M+LiHlHL
+   3DmztbsHx+6oGDIai0r37fZdbeVZ4BFOyzST9Ek/E8O1npyCaBGdGz9menMn
+   TBDLwHmvUPEDcOIUIj0mFIcI/17LhpXNM629FYNMdq46IXy94BT/3Tee4zyB
+   oYFliTPRd6yvrlZ9lYbXo9U53p4DIn+eFyP5PnIe185b9AXPzDb63ZjpI98E
+   ZuJAE3Vrl0ZuGrbSlbP48a0ofm7IANY0texjDEZsO/sKAeqUZJMHvPaxTmj8
+   8QkBIHQaQ7w4o5JOgqsfOpAxkTUk7T9PmdCxawb7QGrPvFNKnB05rM1CeqRQ
+   A6/1vLkFJKBraHvyBtedd7zyXdzvSX0Ht1eqOoPUj7KVsolOpaWhCRtsQE82
+   QEwfoTNIXwJ3q1U75ASrKCfjiXNHHSICzmdmbuGqHC/wvNX+vaJRvejJxJwl
+   9kb63BswJt5cDFZHNu6jK0T41VEIg/DEKeDSCJN2rrEbNzVS/xC7dddXz/AI
+   n8jqnRy6TTpG9zxyGc9wYdaPQYgJizKke1PV/HQIO8Oqxb/d4/0QEdwQ2017
+   prCHDHFXJmViiPiO/92alY0Q/52L6wpqjZ5fKxuqeJo7alvMoUfAQ3MGW0y+
+   eqrojNOcntsbNGbDJXTeCo30uocH5VEWCGRFpmNMg6IxTtA97kbnvHgq8gA5
+   5VHA0/LqVIukzvfq1EFuMzxYriU86ueFScm1uEVlGTXhuGa17decTg2V/l86
+   JjsAK/1aUPRuMP0tKh3r4nFhvsZheV79gigiTkcwaIlSKcgHrJw+A67AmoAm
+   fWOQ6LFHmoWP9MBcxAGBHFhT8xVODxUNi6TWKG/7GTehC99WQygB2QFBFfnJ
+   U1r8zWOBnKWk0SUEpDxdL42zog62XOSakapFTPD3CEEnZ8zfDKuPbfjrWaD8
+   jzwk/qlzpHFjpGIdtWsbujwqWAIQrEkG17SI4KZQ65ASVxgNqBfYXhvExQ4e
+   pvUgT1vvyQCFN55EV1yGGJtTLwPa0XqfMaCZgIOr011Lh9T90+mdaQxW+rQ2
+   iAKvS0qGjyu2jvVz7uEQDwA6JgKXMiwjsNZ8cARDw0e6SGY4xNipseX6RP4t
+   43i0ND325arupdbkVMc4ljwcA1riOaIvhjcgj580LMVCLoGCVkDGi7gJfeY4
+   uxD47rOxMk3gHZhIAcaVSxp5fPK+HPm3fWQ+sU3Edpv5PPCQoV6MX9bs5hg3
+   s8wmuE20z9s03MN21RtMCL60FIUcLk3tU/x9jCpKc8SumQbaDOSVDbLMC3Lz
+   /tCj8Qbh7/tdrsqdZfB36VU+3VWk4Docyxoskk0b7tWq0lxpO7x4RBkd3EcV
+   SQjNzQkvObxAtXtBJG+I5U0AF1JyipmHu+gNdLiTIqdnUPZc6tUT2UUPj08H
+   aJke8GNKhRHPDyfTcMtlpJlmaHeu0KA/SsfiwGgcNtiyXp72GnaEkALgvEtr
+   Lphe0RJcsoN3r/982xisUBuVhhXdaBuiS1OgRBxIoxaNJ9GJ1sWXkdc2+KAF
+   Kh60LYbTKWwtt04enz+TzfaD69sc+d1IXkbGtrBmjSDvlHhm5SKhS3QUeGTC
+   ztJvSpSjZvR00lgyAI5XqEZTMitJbb110YGhC4kj7/zC/Hm4aKaeZq3HcKqR
+   Z8CR6cXWRkVe5D02zOt/31OkSkrA0oqTaoq88K]
+satosa_metadata_key: >
+   ENC[PKCS7,MIIPiQYJKoZIhvcNAQcDoIIPejCCD3YCAQAxggKNMIICiQIBAD
+   BxMFkxCzAJBgNVBAYTAlNFMQ4wDAYDVQQKDAVTVU5FVDEOMAwGA1UECwwFRV
+   lBTUwxKjAoBgNVBAMMIWFydGlzYW5wcm94eS1zdG80LXByb2QtMi5zdW5ldC
+   5zZQIUGHR7rXW+gtadh3Mzde6fk/fLwRowDQYJKoZIhvcNAQEBBQAEggIAbH
+   pvaSnDG3nLmXniF5QmyB20uoV3XxuUvdG+J7AgqG/RHCoTl5Gc1wpvw8BCPE
+   HX0ofHyha7E3we1cHf9yEdbKrW4RhP8FJV9WNeTO5sLXr7uyq+YNnfXagZOf
+   VQkKBjHGt7EcAVLYxflsUPrX1bwi85/jVK5WS8rEGOZEK1iOks3GlOFDee9w
+   hL3fY7bueUqOcIHAK8N+F+f9Ma6SzlFWSXjlrv6Oar8uWt+aSeKYCLr5vVec
+   3VrTBlZSK/qSqSGpX+S5dPTI4saTFnqhEqRx/1ZIrSkFbFdtrifvLPcsp6Gh
+   M4FDDw+CtGZayH3WVjcCC9pmCcNUkaLO9fA6c3YvNflFrcEOz8IUJKJM3+pL
+   9t7+SM5SpOo+r/TZR7+Ly6mrbTAbXaGCpG09tgLvdIyE2hW83R53810uEdOc
+   Kwtvr/BJvc4CAzeCMMmP2Oc/nxnPcPF0gzCmYgv9JNVDNzxR5e9qGdPW31LJ
+   MxEpN2J5g4yMawhrcyS7Hhw1GU7yX4apR8Ih571eTOeNoVAEi9Y8QzO92klL
+   KcNjl7q6lFF0qY8ZKRiNqKIEI7FxgGC6I2aQVZYtzVT4KYIrtz7/4eMJPbG7
+   XqePuZZbdA8swVz3FF2EfFOvK0L7k5YUV4xHqPEqFpGppc5Nv6+b70hLMoeS
+   p+MGQkclhtzJ/xtslg80owggzeBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBB
+   Bq2GpeFuA8VDkoeWyL3UhWgIIMsKgDQN0hB3neupeZ3l00sITp8m/UTe8HeX
+   Cq9XcRB02S41Zi6HF5DCqlKKXqDYQsR95l4Exzq6s9qhHrxyGmoIKtHotKJd
+   VBYkn27c6gn/zyUcw/IapNQ+NOjDJFsMWM4fuh1lf7m7hDacdlkmLCgrCfwf
+   1r04puc1tyfCtUPld+bLwTe+LjZ8+pAHlEmRW/bqEm9MXn2mNQ1KKgAEYmwE
+   iGbrU9Y/RIvjyiLh2bUzo8g2mIFe14osE9HIhxBKdMOvD+SHP8HE/4cMVLPi
+   n2PmytEabn4XF0+XFFItrVrfMtlUCylGZqiKg8mdRAUcBAlrWGLUTy8xMuY9
+   LGooBmJHedUh3kH6uRkLWLXeOQajpyp4j6dFLQ0rxX7sW386gL5OmvMkzm43
+   8q0z8KoSm+2WOmI0UqXQtSMq0Am6dqhNSnCsnrHw51KypbQEe+yfjoF/Yg64
+   YyrNn3WYmmRlnSPh7iJlbe0iROM5V3h06/agCdQrfZMEbgDVQVp3Ql7mKT8D
+   VmK00bQ3/S6igSwGxsVl0H7v+4JRi5/AeRSWVCU6g/yLpZVmW0iYbv1391mW
+   1+S2uY54Y2Fa0vRTK/xDVdDLj4yjhUbIIf/hNatTm+BJ0gxwFEBfjNti8o1a
+   baJrZMAHZ42fMH3QStr6hQxm589bD46r4r+GicKuHn0Aa1PkCzXRFU1Zwl/3
+   duYiVYihcbHlyRV/3iJj7wQdSxRNE3YWzk6Kbu26UbXzh+KdNl2w11iR/Wdz
+   GAnBzlcIOvt1FZxibr2kt7Z8AXN7k/MeOiTdDLQk9p3mE8HnJ7dVxtHLwErf
+   BiuiPNhQ1Xk98z7ryOEVjSGzXHJF59aepCjTHIi0ZPmX7bSv5zDqYk2lmVro
+   H4ojPPfI9klg6DF9mLqGrSty7fyF0h2pmEF0urbnYgbNk7hChCeOgan4wEat
+   /DYt4vfkoAunqQULBelPvndW5gB3gy62sxq6wR8rcgsiKrIgr47fVK2jrp2q
+   OgXIXTO3ebfE6oGtI19gI+/RvoIoQMkOA98zanXQhrAX6ixsmJh1oqDH4gwu
+   j2rj/e7zpqYaY4xdNn+RSZ5Zn4/tBw8Na0rGlXrw/tlH6yEfzpP2Ulu3qZUD
+   lFKqWVbm5H5Pxcv/pJEhT/evweoT5UlIhqVoyhBKfwIc1sDv/ucyGoXlX6t5
+   Gj0dRKcQQnHgrQfsXU0/TwguSbigjhJzwgTa+T2GcIlW2TgTI0Qz0OFTF7vk
+   4mDoWVZ0JvnVbEE7femr3FQnn2viG9OTrz6KEo/F1H6p6jEvfU/huAJSPyir
+   gZUe7PsqY8BCRGooJ+dkrDSQFI36PAr7RzG6e4djQe0E1n24wqybDuAsvpiT
+   FSU2sChi7WHZHRVHuPi4Bo/++Mks1BjrkWjD4iG+lpYAdw5YqSIAln3NYhw9
+   iZJGCjFG340hH2x3bvvqL8hTncHf47uxAw0sNMreQaNGkCvEIlB0yxdLjDEz
+   n5198EZdrVW2VU4I/RtcrvsXskDfganv9+ye3mpWEVA4EHEMPy6yGYALrl+Z
+   ld3YPGKGhQAWJa7Cwu4lo28d3a7Q0H1w450KLi5/lVN2U4f3+t3gwYMSKGpp
+   +YmW5s0DFEG/zVqp1u4zoWlWIfXFo22XzznwCp3XupNP3EsGyUp+jXGrgz9G
+   EYLIp3QVJf4AA9/kpOFD9LTL+Bw3OFRJpMNtGX3Qxam+OJdnfI23kBBNapqE
+   J6ZqGBIsU3+kgh6aNDzuPCD5jmdM9/Bkqf4wd6TZL3KfFK92/HznY+nMvAp9
+   r2ObcE5JTsREObi1aPN4wLUtKOUUFWssvPPUCLrruPwvw9rJQ+nmUpm97Sk3
+   UAdGFHOf39jdxvdokNsR6zyA/dlPzB79l2stLUULqS2bmmxg+SCPCqH6JLNQ
+   qMgMh2djuiwtZvJ/PRSII+vh24SyBzScAWNJXUHWV2dc1S1ZU8stzzdQh1he
+   gfTqZzRAGJw2c9aC9AvO0xa4e/MhPrcPfrSugvdvp63JGG5mbRGuGaaHmkNe
+   zB5bz1NA4gsVt2HKjEIql2yLCzf0vaR/u9/W2Yl6uwLdg56PTzOKiOThY6j/
+   v6yROVl8BuNyOpZH7YKtk7XKqLSrzAeii7AmShQOMva4ra8BDSqU5tZoX+ML
+   ZWb1O7MOd31GbvXr2Cgoe5KaQT2IEnrE+HXe+Z/qGlGhjO5Qh+UrO/n1jdnZ
+   NUdbALurC4n7emjxs70w58L0BkykQfiJrL3pPeKQfShe0EbKpEvBImiAqaXp
+   2G0VYiL4uA2SmmLtFIUVVBLqoojjLWETukR6oqujCqE02sxKnaxO64/Zf9lR
+   IquGXnEcckL4p9FYgqLo95yk4+VCZTFOiOQkKmo9sZnxoZVxMSe7FCTR/7a/
+   RQH5d/GUFkNIRWosw/tQbBpt5bkgYItihphkU9ZD5YBUxGxWpj6kIpJf8MCs
+   TnEFfK28rjhqes5JzkrwgCAzg/xE11AEA8SR1j+1RV0tKf0F5mEy0WF30/LP
+   IZ2uy0+sUTiFk0Z2OT+H9dMoZoV1q6kBUbtfL+PKowkf2KYKN1+olc6ndtQq
+   OAu5xcIsPv3RYTQ/5DnXH5/vDo7E4s905LV2t+1HS47qd+5MBxuNYv6lsD4M
+   mOgnkMCGnhTLHR3xEeYAczWLfGWBdxEaNzc63lasY4X2fQgIz1KFgNKump13
+   HFdj2sfkeZxichDs9otnQpEfLAcroabZjXTECluaNUAHr5c3R1TaZuIiOSVh
+   3xiweINeSVoVoYlx81/FSq1I0cSvOsvuvT6fkExFs+dmN4OMmal65E/WvDT+
+   6a7URUjhE5wAq7Dxzfd7Fiwr3XpSq1jHgVmUzTfQBqv+NMmMoz2iR5eD4DxC
+   L+cfkRqriOWq6FE+iDCy3Wk4/vaWQLxOrDDfxczQVUanI8kR5oBM8QdxZbbC
+   I+UbQ5imv+WYXRDkBNFcoclOR/peLypAw1gOU6cw7ovzjsgBulxF/7LuCJA/
+   4YxHLY+ZHYEWsB8tZtZapmhlY3I9xk5lssyF7kUa4JajuwncOaAs9T46X0nZ
+   nk2QxBFSr5RuSBAMGhcvdq53wLpzSZwkSSN9XKEgCm2mQGCDnjWWNUbHhrCD
+   LtlQL4aS+QsnEZBQmTGHO2QUbP4dMr1Oja5AkzLp49x5TZhAG49BdHt4XoaJ
+   NQ2OeOUo5VIgGlaXzCPO1JjVpXfKcH6mmT7gDuFXFmNwahYrHRu2zw2X7BxL
+   fa7Rgs20YG9Y/baprUayyi9DYmA21898E2S22ck5aw/m1EzeNYALl2KplkRy
+   Sjtcu/9pndmgL0HYize720ZQBlICDYj5eAS5xpbcoZikS0VerjCAnHHfCqrn
+   Jr2GUIenzSWnH1CPeF64zWfb2Zwr6mhvOJM11d/1xEGD68XWErEBEgLVDij5
+   gtONZNF8svh1cfF1o4FUJt3vhEtbKpRoakq367toBNuVONXRS2tFRhMXjrgl
+   XmugJSM7tvs4b1MDjyh8obGT+LqzRYzbLZpB5cTcx4F2Od8UcOc3Ch2+tmC5
+   5DUiA/4zZgumGmluMT4q5suX3oPBz4L0aws1RUVmSj03lYN14i4KXliHY/cc
+   E60X1bpMabK8pEysNiYlTSHMd9ub4t3rC+velVLBPw15l/AmFaLt9DphRHoX
+   LAhC1j8pakJth9viN3sftcR8ZpDoO5b46/7Qmcg/rhrJMvjTTMrBlUeyia19
+   waEDGxOuCaX/2fHg/VwTqFKtB37iJsvWrT4yD04OygYI5wKogYnzJHaEper8
+   1DAl4H2Lp33WQNvaEWHmmN4TSgGs3Oi9m1p1LENa+T8xYX8JAPu7s0sM7diw
+   zrdhE78dokAG6jbiabBqiM232XKVOBAd90GV9Wkra4LiVQ/WbbnWDsxT5hVy
+   1nkibQqBhrbVlyP8NYcGZI7qu/ppCNyUOPQR6be7b2yXg8fUt+LaNjFUBA0V
+   +QUo1VAOpoSTaIp96Z7zzzRPl7EH9Q53jMkQqh8Wy3c8ofGFIkwt3zytBKAz
+   1BYigpEETTz3lyp8hQKmh/7DcUow2KvGSTiF5FVOo+nUKNkOoEVy4Iiw4hZM
+   5aG8WiQVlv4KrzC/KSt5VYgVJgt0muWGNlpfsuynQk8bjicO3JhCPT9FwwXT
+   h9M3VwQAUKu8MKomSLzywy4QTt/4RxbwI5nME06+vMq3mn+oBJ8vb5HxkP6o
+   Yq/FedJYIy8GaEEZIbwS1ScsVfEN6AETlRSck+GZl+Z/EWneMi9HadteXFq3
+   Z2iw36Y0JyFvbO0TkK208TFupp3YExUwS53a4wNINKEVDfSAG5508XJA3iy7
+   tlVs94eOZFolODkygm5tOJ6c10RS3v+oGIi3nn]
diff --git a/global/overlay/etc/puppet/cosmos-rules.yaml b/global/overlay/etc/puppet/cosmos-rules.yaml
index 89ffd3e..d01e765 100644
--- a/global/overlay/etc/puppet/cosmos-rules.yaml
+++ b/global/overlay/etc/puppet/cosmos-rules.yaml
@@ -200,3 +200,19 @@ forum-sto3-prod-1.sunet.se:
             - 'sthb-lb-1.sunet.se'
             - 'tug-lb-1.sunet.se'
            port: '443'
+# '^artisanproxy-sto[1-4]-prod-[1-3]\.sunet\.se':
+#    autoupdate:
+#    sunet::dockerhost:
+#       storage_driver: 'aufs'
+#    sunet::satosa:
+#       tag: 8.4.0
+#    saml_metadata:
+#       filename: /etc/satosa/metadata/artisan.xml
+#       url: https://adfs.artologik.net/federationmetadata/2007-06/federationmetadata.xml
+#    sunet::frontend::register_sites:
+#       sites:
+#          'artisan-idp-proxy.sunet.se':
+#             frontends:
+#              - 'sthb-lb-1.sunet.se'
+#              - 'tug-lb-1.sunet.se'
+#             port: '443'
\ No newline at end of file