added kushals ssh key

forum-sto3-prod-1.sunet.se/overlay/etc/hiera/data/local.eyaml

@@ -0,0 +1,5 @@
+---
+document_db_password: ENC[PKCS7,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]
+document_jwt_key: ENC[PKCS7,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]
+baas_password: ENC[PKCS7,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]
+baas_encryption_password: ENC[PKCS7,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]

global/overlay/etc/hiera/data/common.yaml

@@ -93,6 +93,10 @@ sunet_ssh_keys:
     name  : 'bjorn+8E2DA8EB05F646D7'
     key   : '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 cardno:000610116759'
 
+  'kushal':
+    name  : 'kushal'
+    key   : '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'
+
 netops_ssh_keys:
   'root':
     - 'mariah+CA747E57'
@@ -113,4 +117,5 @@ netops_ssh_keys:
     - 'mikand-FF8440B9'
     - 'tobias-000610124578'
     - 'bjorn+8E2DA8EB05F646D7'
+    - 'kushal'
 

global/overlay/etc/puppet/cosmos-rules.yaml

@@ -127,13 +127,13 @@ tug-lb-1.sunet.se:
    sunet::lb::load_balancer:
       interface: 'enp67s0f0np0'
    sunet::fleetlock_client:
-   net::open_1022:
 
 sthb-lb-1.sunet.se:
    sunet::dockerhost2:
    sunet::lb::load_balancer:
       interface: 'enp67s0f0np0'
    sunet::fleetlock_client:
+   net::open_1022:
 
 nifrontend-sto1-prod-1.sunet.se:
   autoupdate:
@@ -181,4 +181,4 @@ ni-frontend-test.sunet.se:
 forum-sto3-prod-1.sunet.se:
    autoupdate:
    sunet::dockerhost2:
-
+   net::onlyoffice:

global/overlay/etc/puppet/modules/net/manifests/onlyoffice.pp

@@ -0,0 +1,14 @@
+# A Class using the sunet::onlyoffice::doc resurce
+class net::onlyoffice () {
+  $docserver = sunet::onlyoffice::docs { 'document_server': name => 'document_server' }
+
+  sunet::nftables::allow { 'allow-http':
+    from => any,
+    port => 80,
+  }
+
+  sunet::nftables::allow { 'allow-https':
+    from => any,
+    port => 443,
+  }
+}

humhub-sto1-prod-2.sunet.se/README

@@ -0,0 +1,3 @@
+
+The system documentation is in the docs directory of the multiverse repository.
+

humhub-sto3-prod-1.sunet.se/README

@@ -0,0 +1,3 @@
+
+The system documentation is in the docs directory of the multiverse repository.
+

lb-common/overlay/etc/hiera/data/group.yaml

@@ -711,3 +711,88 @@ sunet_frontend:
         letsencrypt_server: 'acme-c.sunet.se'
         haproxy_imagetag: '20230228-stable'
         frontendtools_imagetag: '20230228'
+
+      'auth':
+        haproxy_volumes:
+          - "/etc/ssl/certs/infra.crt:/etc/ssl/certs/infra.crt:ro"
+          - "/opt/frontend/config/ssl/infra_haproxy.crt:/opt/frontend/config/ssl/infra_haproxy.crt:ro"
+        site_name: 'auth.sunet.se'
+        frontends:
+          'tug-lb-1.sunet.se':
+            ips: ['37.156.192.66', '2001:6b0:60:c0::66']
+          'sthb-lb-1.sunet.se':
+            ips: ['37.156.192.67', '2001:6b0:60:c0::67']
+        backends:
+          default:
+            'auth-2.sunet.se':
+              ips: ['192.36.171.67']
+              server_args: 'ssl  alpn h2  crt /opt/frontend/config/ssl/infra_haproxy.crt  verify required  ca-file /etc/ssl/certs/infra.crt  check check-alpn http/1.1'
+        allow_ports:
+          - 443
+          - 80
+        letsencrypt_server: 'acme-c.sunet.se'
+        haproxy_imagetag: '20230228-stable'
+        frontendtools_imagetag: '20230228'
+
+      'nutidauthtst':
+        haproxy_volumes:
+          - "/etc/ssl/certs/infra.crt:/etc/ssl/certs/infra.crt:ro"
+          - "/opt/frontend/config/ssl/infra_haproxy.crt:/opt/frontend/config/ssl/infra_haproxy.crt:ro"
+        site_name: 'nutid-auth-test.sunet.se'
+        frontends:
+          'tug-lb-1.sunet.se':
+            ips: ['37.156.192.22', '2001:6b0:60:c0::22']
+          'sthb-lb-1.sunet.se':
+            ips: ['37.156.192.23', '2001:6b0:60:c0::23']
+        backends:
+          default:
+            'nutid-auth-test-2.sunet.se':
+              ips: ['89.47.185.33']
+              server_args: 'ssl  alpn h2  crt /opt/frontend/config/ssl/infra_haproxy.crt  verify required  ca-file /etc/ssl/certs/infra.crt  check check-alpn http/1.1'
+        allow_ports:
+          - 443
+          - 80
+        letsencrypt_server: 'acme-c.sunet.se'
+        haproxy_imagetag: '20230228-stable'
+        frontendtools_imagetag: '20230228'
+
+      'nutidauth':
+        haproxy_volumes:
+          - "/etc/ssl/certs/infra.crt:/etc/ssl/certs/infra.crt:ro"
+          - "/opt/frontend/config/ssl/infra_haproxy.crt:/opt/frontend/config/ssl/infra_haproxy.crt:ro"
+        site_name: 'nutid-auth.sunet.se'
+        frontends:
+          'tug-lb-1.sunet.se':
+            ips: ['37.156.192.62', '2001:6b0:60:c0::62']
+          'sthb-lb-1.sunet.se':
+            ips: ['37.156.192.63', '2001:6b0:60:c0::63']
+        backends:
+          default:
+            'nutid-auth-3.sunet.se':
+              ips: ['192.36.171.72']
+              server_args: 'ssl  alpn h2  crt /opt/frontend/config/ssl/infra_haproxy.crt  verify required  ca-file /etc/ssl/certs/infra.crt  check check-alpn http/1.1'
+        allow_ports:
+          - 443
+          - 80
+        letsencrypt_server: 'acme-c.sunet.se'
+        haproxy_imagetag: '20230228-stable'
+        frontendtools_imagetag: '20230228'
+
+      'fidustest':
+        site_name: 'fidustest.skolverket.se'
+        frontends:
+          'tug-lb-1.sunet.se':
+            ips: ['37.156.192.52', '2001:6b0:60:c0::52']
+          'sthb-lb-1.sunet.se':
+            ips: ['37.156.192.53', '2001:6b0:60:c0::53']
+        backends:
+          default:
+            'fidustest-1.fidus.sunet.se':
+              ips: ['89.45.236.185']
+              server_args: 'ssl check verify none'
+        allow_ports:
+          - 443
+          - 80
+        letsencrypt_server: 'acme-c.sunet.se'
+        haproxy_imagetag: '20230228-stable'
+        frontendtools_imagetag: '20230228'

lb-common/overlay/opt/frontend/config/auth/haproxy.j2

@@ -0,0 +1,39 @@
+{% extends 'common/haproxy_base.j2' %}
+
+{% from "common/haproxy_macros.j2" import bind_ip_tls, web_security_options, acme_challenge, csp %}
+
+{%- macro bind_ip_tls_extra(bind_ips, port, tls_cert, extra) -%}
+{%- for ip in bind_ips %}
+    bind {{ ip }}:{{ port }} ssl crt {{ tls_cert }}  {{ extra }}
+{%- endfor %}
+{%- endmacro %}
+
+{% block frontend %}
+frontend {{ site_name }}
+    {{ bind_ip_tls_extra(bind_ips, 443, tls_certificate_bundle, "verify optional  crt-ignore-err all  ca-file /etc/ssl/certs/ca-certificates.crt") }}
+
+
+    timeout http-request 10s
+    timeout http-keep-alive 4s
+    option forwardfor
+    http-request set-header X-Forwarded-Proto https
+    http-request set-header client-cert %{+Q}[ssl_c_der,base64]
+
+    {{ web_security_options(['no_frames', 'block_xss', 'hsts', 'no_sniff', 'no_cache']) }}
+
+
+    {{ acme_challenge(letsencrypt_server) }}
+
+    use_backend {{ site_name }}__default
+{% endblock frontend %}
+
+{% block backend %}
+{{ output_backends(backends,
+        config=['option httpchk GET /status/healthy HTTP/1.1',
+        'http-check expect string STATUS_OK',
+        'http-check send-state',
+        'http-check disable-on-404',
+        ],
+    )
+}}
+{% endblock backend %}

lb-common/overlay/opt/frontend/config/fidustest/haproxy.j2

@@ -0,0 +1 @@
+{% extends 'common/haproxy_fidus.j2' %}

lb-common/overlay/opt/frontend/config/nutidauth/haproxy.j2

@@ -0,0 +1,39 @@
+{% extends 'common/haproxy_base.j2' %}
+
+{% from "common/haproxy_macros.j2" import bind_ip_tls, web_security_options, acme_challenge, csp %}
+
+{%- macro bind_ip_tls_extra(bind_ips, port, tls_cert, extra) -%}
+{%- for ip in bind_ips %}
+    bind {{ ip }}:{{ port }} ssl crt {{ tls_cert }}  {{ extra }}
+{%- endfor %}
+{%- endmacro %}
+
+{% block frontend %}
+frontend {{ site_name }}
+    {{ bind_ip_tls_extra(bind_ips, 443, tls_certificate_bundle, "verify optional  crt-ignore-err all  ca-file /etc/ssl/certs/ca-certificates.crt") }}
+
+
+    timeout http-request 10s
+    timeout http-keep-alive 4s
+    option forwardfor
+    http-request set-header X-Forwarded-Proto https
+    http-request set-header client-cert %{+Q}[ssl_c_der,base64]
+
+    {{ web_security_options(['no_frames', 'block_xss', 'hsts', 'no_sniff', 'no_cache']) }}
+
+
+    {{ acme_challenge(letsencrypt_server) }}
+
+    use_backend {{ site_name }}__default
+{% endblock frontend %}
+
+{% block backend %}
+{{ output_backends(backends,
+        config=['option httpchk GET /status/healthy HTTP/1.1',
+        'http-check expect string STATUS_OK',
+        'http-check send-state',
+        'http-check disable-on-404',
+        ],
+    )
+}}
+{% endblock backend %}

lb-common/overlay/opt/frontend/config/nutidauthtst/haproxy.j2

@@ -0,0 +1,39 @@
+{% extends 'common/haproxy_base.j2' %}
+
+{% from "common/haproxy_macros.j2" import bind_ip_tls, web_security_options, acme_challenge, csp %}
+
+{%- macro bind_ip_tls_extra(bind_ips, port, tls_cert, extra) -%}
+{%- for ip in bind_ips %}
+    bind {{ ip }}:{{ port }} ssl crt {{ tls_cert }}  {{ extra }}
+{%- endfor %}
+{%- endmacro %}
+
+{% block frontend %}
+frontend {{ site_name }}
+    {{ bind_ip_tls_extra(bind_ips, 443, tls_certificate_bundle, "verify optional  crt-ignore-err all  ca-file /etc/ssl/certs/ca-certificates.crt") }}
+
+
+    timeout http-request 10s
+    timeout http-keep-alive 4s
+    option forwardfor
+    http-request set-header X-Forwarded-Proto https
+    http-request set-header client-cert %{+Q}[ssl_c_der,base64]
+
+    {{ web_security_options(['no_frames', 'block_xss', 'hsts', 'no_sniff', 'no_cache']) }}
+
+
+    {{ acme_challenge(letsencrypt_server) }}
+
+    use_backend {{ site_name }}__default
+{% endblock frontend %}
+
+{% block backend %}
+{{ output_backends(backends,
+        config=['option httpchk GET /status/healthy HTTP/1.1',
+        'http-check expect string STATUS_OK',
+        'http-check send-state',
+        'http-check disable-on-404',
+        ],
+    )
+}}
+{% endblock backend %}

zoomproxy-sto3-prod-1.sunet.se/README

@@ -0,0 +1,3 @@
+
+The system documentation is in the docs directory of the multiverse repository.
+

zoomproxy-sto3-prod-1.sunet.se/overlay/etc/hiera/data/local.eyaml

@@ -0,0 +1,274 @@
+---
+
+satosa_state_encryption_key: ENC[PKCS7,MIIDAgYJKoZIhvcNAQcDoIIC8zCCAu8CAQAxggKKMIIChgIBADBuMFYxCzAJBgNVBAYTAlNFMQ4wDAYDVQQKDAVTVU5FVDEOMAwGA1UECwwFRVlBTUwxJzAlBgNVBAMMHnpvb21wcm94eS1zdG8zLXByb2QtMS5zdW5ldC5zZQIUFJ8YxUis5+Ur805qKwoLZkEwD9UwDQYJKoZIhvcNAQEBBQAEggIArKL3c9McfSmtiU704Yy0RwJtW0Z6vU/uOisB4ucpsyP7IbW2icUuiyu6OWRIAyGxIiIy2E3n5LrLg4aeaMLzZoCmIFiJX9cckLagAmNHTRmWvRFA2tZTQqk3MwnI2YcXA6qM14/COhlvUMoMiNP1SzDDltVfK5h+yf1VjXt2xpkWp4JPqFxxMXvrdjm1s01AsEyltF4xlOStWGB4g4NJZvAhg5I/G1TzTYvksVv6hPfvPK9QSwmdE/0yIu8XBs701N+pXE7XopP5vPcKvzW8eGWdvXBmGLkiRWn+LSh4eAvm11tWx60+NSME041QOFejrk1FLVniVpZYPFIeA3geioiTp06umwhdYJnVE6tgZULcmTZlsmqSnh7dZsIx/TA7aIO3jVZD5uzq2EkN2uyVsaZvrDzX+hQWs+a2Q5cf934tbGjg249wNhEDIvqK62jR/zu6NGtyH9HNmCPe+KTTkrBBrn8ZuW6+BxpnW4TgiXfD2RqF0cCMQEnHJHsetyvI2KDhqKJ/LXcJkoohG8IblI49m9QYsYTC58j+ZmJpSUrQUOffaKtacW8zOzGT1ivPjnqqoq+d6xdt+oYca3d0/MTmk5lxru6zZ/uHGoYGo/kHnz3rP6+a8bp7gsfFcqsXOvYfoDspwmp6k+2m9hgobA6U9DViZEIm5RIZHElC7powXAYJKoZIhvcNAQcBMB0GCWCGSAFlAwQBKgQQJfr+hqM1pG73BIpAZkEeLIAw4RD3BdiY2ddGHKE5LMtUgkAQPWl+Zdhu3cXdQqlQCN/+RlXeO8ZpXi9+pSIvNVmO]
+satosa_user_id_hash_salt: ENC[PKCS7,MIIDAgYJKoZIhvcNAQcDoIIC8zCCAu8CAQAxggKKMIIChgIBADBuMFYxCzAJBgNVBAYTAlNFMQ4wDAYDVQQKDAVTVU5FVDEOMAwGA1UECwwFRVlBTUwxJzAlBgNVBAMMHnpvb21wcm94eS1zdG8zLXByb2QtMS5zdW5ldC5zZQIUFJ8YxUis5+Ur805qKwoLZkEwD9UwDQYJKoZIhvcNAQEBBQAEggIAe5MZwm2zKeZXoKFhFWFOUIe8HrqjHdECsXEYdcD2uyFK5KYVNc1zIYWR8Tm+mj1TNTsh9oE9393KDZ7hzA/LXkQDaU7gbU0NZjzDUb06qachlJZYOxSuhgxRMXUHKr031uDAuZErN2L65MsGF8PICst7sAmsff+IwcYkRkQBXuJ7cPET19NZfJ44dUyXNIy96Y92sLnM+9nefahit7QefJnucFNs+Q7URBffPFvT20IPQqYOa4QpFQHmuKu8Rcbak+flIjzVYmCD8kAW6A+reVQ2QfhnBVdiAuvFmkpBw49bV7Sw6ZoW0X62J4mFLRY4lYFnPA7VRDvPCg2uMXwIcu0FcC5Pm3JrPykhYPj1CkNuMiHJzfG0AMMtz2zMczges56C4uxCQq3cLPyfLcSOFru2GJBkAM4Z5xKQtXEGYxrthIMqoKPDX/D1vKFngAHlt1AEIKKA0vExBU5oLKlRp51bPgWMCi6F+o8f6n+IQVmv4SCbqUNINdZYKoKLj19fMdMX8t7MziDxo3O2+GLJa7dy/T69A9oKA4a2IDwmD55/r0rX7ZJFs/tP1xlUz+nksm+0b2MSRswJB9yAF9kQRfGLEyVFt/akmVeeWxIu5BimPoX+jyf8ljzGXDqM1/R8OJjxU8AWVqsNTPfXy3aokJOLeScq4lHolI6fF9b07Z4wXAYJKoZIhvcNAQcBMB0GCWCGSAFlAwQBKgQQjxMveHb48tfCB+p+eDKlp4Aw9ffxAERzKJkbNCE6jkok953D6YodqXyBQnsCSIiC2Nb3dkd/TK3GE3CgXA4ojeSI]
+satosa_frontend_key: >
+   ENC[PKCS7,MIIPhgYJKoZIhvcNAQcDoIIPdzCCD3MCAQAxggKKMIIChgIBAD
+   BuMFYxCzAJBgNVBAYTAlNFMQ4wDAYDVQQKDAVTVU5FVDEOMAwGA1UECwwFRV
+   lBTUwxJzAlBgNVBAMMHnpvb21wcm94eS1zdG8zLXByb2QtMS5zdW5ldC5zZQ
+   IUFJ8YxUis5+Ur805qKwoLZkEwD9UwDQYJKoZIhvcNAQEBBQAEggIAAZurZk
+   UYo3Yll2iPUPMHz/cEzctpG3vRzYDB3o99xnE2tiUB8KvXhK4V/+afLFiXbS
+   1TNj3rG+KrdL0wM+iOsDC++Fpdfnd7JuoiadmCpt5TkieiTmYai/Hh1RU+ix
+   hwwcr6e0xGZ8TVKDdusPWx/sQn354X3XOKASKZQy4mqNVr51ycvcWTmKpQNk
+   7U8DSmcvuNJVGftdkJmJza1YAir1wSpY+yFYKdX8C7rzLFYwLr5yvuJIQPnM
+   BrVmnEi8TF0gSjStS1b9iy3Q35cszWL6hWUEp0SeM8xdLOTfKPXzo4a7gi5G
+   kgFjAVVlPW5Pce+16JmEMWxGRfUU93VN+EmXZwoaMdF++OLZxdc4aZtX0unG
+   yghoIrhJhrC9RQi6ssslXJil0CASLaHID1dw2kM4+4SNPDS7JP1hDiLYaT6S
+   ttYr2NgakBHRIxEMpXFosuXAF+RlGtX7/NCac9NfSb6F+xVYeBUOedc4Y30p
+   6zPQM9O+DhgQW75uTlnDaXwLtlw3LStzwAfb4SmqmrSDBTqXS2cPYGI41rtg
+   NawxwdMTlsm1NiIlfaI3qnes75wIuGxznfUMnAK5dEDp1vQfL88w7o/qQNIg
+   YnHkdGB0GDMcjZWzrpcVPXDqh4ySFOY+wd0PylhCAZ5hfokBlLH+73tAvdDE
+   AHkDGzfcXjoU9rBCcwggzeBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDDkZ
+   XxSnoLnzX3uXLaEbg8gIIMsFxBSeiEZwO6mAJszUll4Yoc77hrKNCNUmDExU
+   VPC5sf/jSzzQOF4N3RI988x4CEoANL1mHQ1yeMXffh9JFWkfGjaPe4WsnZBW
+   0Gjrlaixxlsk6utsm91qaa0iPQ1rsFKo0p399ZUOSYb3fUA9javbY8oJj/M7
+   H/dvzVyQzEYBCBJjfMb+Zc+otKpDk82Vkn3RpGmnlYbxyNIzm6VAH79/QisO
+   C3lb3nzKONTN6V1VdzHQdeH0+3POLxrenfq5sovQ1/6UUY09FGy6OJezuaor
+   lLd3Y0m69pKI1Id7yKH3Sd6wLhPwIt+w74JpNprsQKA3lwCknpvV57WTjGmI
+   2FuijDM+P/RZY+VdnNdIOsfyVauaU4KuZd3jFj5KrTQL5B0jgHzoO+8Jj/wr
+   avbZMPrpDltPU6RLAoJtdX9R2zWGKejkliQpX9xQk18D+mvr8gSB7KCmJz9b
+   Gd8gcqjM+BRqFxZJVl49RFfV+c+RFYozY9OMKnqq08JmMOCs+pCsd0h4bAf1
+   Wo8x4Wysa40DJbRnQoa7BumgkWKiK1wAw2XD49O1Pi2eIIdgNXlZrf/NKY1f
+   KsYe4lgvLp91QnICxrR2eLmHkXZM9QIi8u8PFbusWUkS9OsImLxmLnPGdXdX
+   NrxruGv3MBSERUkwazv8LBs3jEtTLZzP3/6mvy0dqTRhCprR520eIyNwlYJD
+   byyqtSimhtmGuDQZcslCaiw94uojjFLnALBq6mpKu3GjoihH4vkC1n6xSDjo
+   BG5j04laJMSVNkqYksaAga4RCA0w79QKAfyZV10RPTJlcdokUNxmO8nU7edQ
+   3xifNIWPm3yk/HiZS9WQapspTuoNzrP/iTe2BZCoe4zKkIjJNq023el4tVJp
+   cU6MiS+3CdciB8kGSNWTTYJpo6pmm+Wumire8Q2a7vnMlAkacky2BHIAzMyz
+   90YLqQlROYHgEVL2cff4u2HFdlh2v6jFpWHJvis4x6nAuR2VUKZ5VGIg3Hdu
+   6H2tcRkbZJgkMVdRtds5ui6OOajGlzlcZMMdn2uH7/jrGRWzPsctv+bLDjsA
+   xzcUh4boUHaauQH1VP+z4m0IRMqQa8nng4Fz6SXkIfaQUlgu7qVZdjfwi6LT
+   LAyNBA5YbOOo0WVyuGuOJ8huCTl+O4vHL1KAloT6mTChwcA1UUE/+xQtTQTH
+   KfpIX5qMuyU+w7l54w4SKd7kvTeRhnwGsXhAEskgCl6cQRk35k1SbIjFDlr/
+   g9EhYnbJWPCku3MGIwe4FOIhSwXobfjpRb36LQc3WtMaVZztn1aAAzmTgUPR
+   2lqplYLlY51bZo4Wl5LRzRsfl6bN3W9mQ9hp2m7e0r9tahUdbaUCylnf0d2l
+   Z4DOixsrxRrOACiiU/sew8qukWKmKo/dQthSIevwq1lmVc+oput0l9XHRYWF
+   SyxxUtOtM+RKL26y4Mh5rcZbMH6mqg7Z64It9DDHIRc+PeoxawyOfpMx90AD
+   OaoxZ+UW6sIjOL2ZGybmUchTxAahs4j09E/GRH+1HkJ9ZO6IWN8JxVpYq1f4
+   vkOE6omP1x0jcloySaLYw7rVCMVOhBOfbl8VJKtEUC5cykiqmlL4/DwN1YCD
+   zk37s1Nhp9SDMXEMufrli6KGMTB1RhmuJGn7l5cUPWPg5ZOH7XaDdziM0mS5
+   q2r04v86memokcJQrLAsxNA4hzOr725yIXSe3vuVU6gPIJJgmpil7as+V69U
+   o9cJyaHaX08mmhmg4XYEkqHhQ5xNAIl0oqoOlWIHeBr+RgAz/m86RGicwt6l
+   D0SYbN+knoxrosyJ5SP4haKqZ+/TQUuQHU68wBO8jS1htJnU1e8zJ85aPkW/
+   cfga+K5ebsBWmqJmCYcM3WEX7+8+zA2HXXNh9FAO1bnCDVBDbOLzeBRRfH5I
+   8DbYvu/SWqcPYVG5k4ballyzJu1BgAhd0ieNoRYs65mw6aEIyflxQjxineiM
+   3Xbbi8KexNS+mSxglT5BcWOaiOaP0Ki7/4x9W08zkdbQEeNmWDWPTzWkSLla
+   qO9K7H4KvWUrd1OvYLpA2NmUEFgfY4nFl17KnoDDHgSQzNeTQtZFJkDEDxlP
+   doAjJM1cFtV/f8ZRvXkHV5UmCuTHm5O0l1OlxA2cMqNjKAAINOeh2Lxdw3sF
+   8YsVbthsQj0URE8Xil1ir2lf8pB468v/rq9lPyaag8ayf9RmNe3yuhzyI7jY
+   j04bg2vJKaz3WO8RT0OtVxxPkfeY3/jdl+F1fsjNm9hWiJWt6Sbnx6tdJHMz
+   OshDuO8oH11A1OkofqtiS3TnNqAup0+YJE/cSMwvE8v9GbO+85HeIj110wTs
+   Ki2zieHsybRL9YgO+4goh+LV0mgC1LWJp0zuVzl077L6B5GltzBlIhlaiD8/
+   QN5ICfw13KC7LBmiXm3cVev+HwDCInQeuojoCb4ue/DZEFJ0T3df3pY4glnl
+   GF8gOvyx0xy95GzM+PdGJWbqu++UQn6kRU9sJPDVuBSzIEHXCKillbt5pRbr
+   7J3HTpVV3xHkKuWSMOm33LS6ZEZvlCUs0w/ZTJ3CApML51mEAhNR5/ffDDhd
+   Xy+4HWI3HZU1ktVlNcw3chjo/Vfl6/q5mVgs4pDgoaWtyvXugolofNpWmvhJ
+   t0c9y3aOlPOXZL5+Mm0HloVFMHOMPQyvntjNx19srMeZIRgU68uCKfu4Eipu
+   GeLJg8nqnTeImPlbXxOXCQvEBwD3jLopkLPoRyxsP+Z88V5XEFC5N6xrdQJ+
+   Is3fhREaV8ac69t31thoBIvg/4W1CwiZjpJvuXplXkxmV3NtR7aAqxKzR2xq
+   gTBDK+aRJ/dOxImaLerHAxJKi6SzfK7AG7qHKXPTseDHBdIRSuXvPXVkcMlK
+   K7enMaC7XREgxHjfhQ/XXbg+O8JJ3zbdV11wDTRSMMyxx7fjs/FBXUDg8tBo
+   b2Rzej9PDpqVmWCozNvthWhUkmoqjeGr3wiYjZzFfRtwUzM0qes9niyTKzm7
+   ehseNRNaYnSHIpSiChntoxPHdNYkSBn173CIUiPi7Nf2vFBLT9Og9d5eVie9
+   dmIMC+JC/UFZA4Z1/6dynldBh08eXOdb4+P5Lr8O1r+WmghysbH/HiiGCsSO
+   xecfl6O2F0+2LpHPsA8WQJ/5ee1c0zi5iBxQ0wlERILu051yV1uSlDZ+YMDl
+   olORBY/DpPNY8JxltbgMyLUv8+JZzlB/+uXom8QzT7aG99g+RRzLsVUzCgFr
+   4GXm6erxmOeL00KwWGfmTLwm9ZsswNr077NG42pB50Pe7kjlOTNjhXyb9hzy
+   rtXAYwkIuCiIt8DNzf+NkFh6htkicZHq4LHqOZ4EzyrHcsVHwSywcp4Yf07z
+   2fjCrJAIgO483AvLMPuBLO74ZbhgbjRFq5Bkm1cufialm8OmZUV/Nap00Yig
+   qz6lLLMrZ/5t0Jgi+9JiK1yK0Tksg3JyH0BSz/6vQiemFHIIUgNVhrvoQbhm
+   x23af5uU3r8K0HD5j28eeNH3GLj6JzNWXJdBKzxbR+5sXLZtAIFL3cwNs2/0
+   LsGPZrro6wXB2/VoSwfxhEbaJKcGQ+189R5Ro+h+fDSI/bvf2fnPVW5H7LTW
+   64l3XWlhNQ+idhdzU0KSbkxr3y32aqEFMfD7Ld/jhLxTFSEnmXeSMY0s2IdB
+   eD71yqNNK9AjAyy//fMQBUxP67AQHmd+X2F/MLW9lyqx5bb7YmgfZ0byAFWM
+   Ge0lS2gObyLrKvnjmsR+KEMWv0S5otKcsMqD/PNkwVTB0my2kelA7gtBZQoV
+   AGe4rMaGPdQkYNZWNO0S+5Aom0XHqNIxZH+6bNuvN8FvzV/LVYyRfXMKLSpr
+   ImbUYQ2fiMNaEd4DE1ao22uGODpSOEQrOHXuRqJAnIQ6VNiUEm8Hymhscdtp
+   tx/xLKTWgk0nRSoMXy5XemR0tAsU5g2k2DHD0aoAknTw6nFT83aasfUZ12Ir
+   pbHUVb5914hPYPQPspxT3yoER80y2iNdRzBg/uqbfezSuUT8olqVC2d/cFUq
+   q9asAz0yBJwj32shAdGyym1+i9v9q/LeyxusXuLMaB9oChWejUkyrstYzoB5
+   3NTEShXljjEFx48nlUCjWNa7W2a2mqRrYORuAQG+biUeiky/A/oLxqhNpWO0
+   v4rFzzFOkNGYJFLirokSboiUnOJKsJmyDQNcYPE7ab7B+YmD+ADQ9rF4yozq
+   tl/2OFTiqb07hxfZMaPXEeUQ1CKQv2UJ6pqI2/2BBm9F0E0WaMfx7iNkEvqr
+   noOzkMjVkVnPcoRTQDoUTjX4JH6wrSc91Mf8I7Km3VHtCj00GfDMXTeIPqJY
+   Z8NA9UpqN2fyWX1hkQoPdJJjGMjmC1z5FR]
+satosa_backend_key: >
+   ENC[PKCS7,MIIPhgYJKoZIhvcNAQcDoIIPdzCCD3MCAQAxggKKMIIChgIBAD
+   BuMFYxCzAJBgNVBAYTAlNFMQ4wDAYDVQQKDAVTVU5FVDEOMAwGA1UECwwFRV
+   lBTUwxJzAlBgNVBAMMHnpvb21wcm94eS1zdG8zLXByb2QtMS5zdW5ldC5zZQ
+   IUFJ8YxUis5+Ur805qKwoLZkEwD9UwDQYJKoZIhvcNAQEBBQAEggIAQpr6tW
+   U3tzXwPVkhvNrI0QwNvbiPdYNsnh+zzVQFXT02Ju/iNjNCkbz+WQ6Gmq5KNg
+   cfqpGJcwt8fD8bgW8Ac17wdor1bqCuFt3oZT0q7ACXNEFFX3g11RJxqo7z+0
+   xxf+Upic68GJSa9IuWrVqcz4X/6Fin4iFOza18FvmJL30YeEpOoa4tnUnlOy
+   M5elvPjOCWRH+psarksuj1Y3PFl0waaLFmPT+BpMRXA6kw3PD40WwuXxEXoE
+   0PrUjFJ2h7lpIM6ToxtSOWjMQx6C/ojKJE7KqHVhPhvf29rGoCMQgTPzH9yA
+   aZWUib4x69zT3ETBMBNGyeXOUlhx6zYbocVeLUqi4ZL8kc7WT57LxBJKe+zy
+   tVlKEZduP/EQx9ngqEf1NqehiNK3wQnBUM/RU//fkBT2ASEqQNuDMYVHD25P
+   2AdybZdVy/DbWEK/Q076WTCoDwN/kH1jyZ8byCwxLqoVNCREh69fbQKlnTjX
+   3MNHiU/QNlBryfH8oT7zY4WbKTzUx6ld55vFgTo01nfYfcrXa3qYxDSGndV5
+   5CFNBBycNrWcLwe5nVmkCxrTjPc8jM+xN53P1/1L1Xn6S4wb00voN9X2A3Q5
+   gLEzpNJhfVAKezGrtvyVB5menHw05O01N2lnkOtleMMX4XHU5nwKG0F0W2oL
+   sLjnGz2CtoRlKRA5cwggzeBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDx+i
+   zX+ApW2IDjUFwHGzBDgIIMsC3zvbtnW5gU7O270HfJwl2UxdUz9N0J+eM3aL
+   8ytu6FKb5BeC4nlWiozBNavhT4tbOG3xXv691pQd1Ucw7VUC5pPgmPqjXrfp
+   5VdPPPoSx+5DPpWc0UDe1nCWJv7l1XABideAl6pVy8D76JhRAS3vjKZOiSAD
+   C6uL68lqfujNnSISZSkyVIKqEwao6snFVTOF+JpCqXYzv2Zaa3HFPiDil2Gf
+   +xPLbZAkvOwVuEtYXEe5h06hrld1eO6jyRnVSYQ3PZrceoLr80Rd5296rNEb
+   +gGmEVPe7jQPg3F7RB6f/Izb/MPTng39oT28X/XcpuAmUE3lnyIvizlypY3G
+   IEWveINCMqHAt0ppPf8WA7W5t1CS3v4ylcdhdeLQf7Ort/Eoy/8t1v0JEC6b
+   lw9NZZ10m+fYLgfGlxp6M0INBXL+iVJ0pE7Bted4Cwlq/OYbicXWykMcyNo1
+   esStC/Ji68xDORHdjHlEozdiQ2giv63Yw+my9sJyUGpbxg9tOGOG5jP+CYCQ
+   u5DCYcXxe0Arg/33M2C+q9LlPupM2EiBLJlSr50EEg9j7unRfYrzvohEl3fE
+   LPN/b1gt8Hv48LwYxjFtbO7J4DSnYOq7e2sGGwBlOjpRr7rTnS8BsrqiN6Aq
+   aaJa/rXQzQdoDba9ZhV46MZH7ccQd4U22U/R/DYW1P1F/sakKdCllBplRQiH
+   gdZH372c5hE499rPmkYQ7lu3vrKLq9s4fqsf3/iPkPo58/4kjjDf+YjuDbCf
+   SygZ835UOXE1xvSl/XkSe6x2NfqniJSJ/AD3PojAV1KEOieIIrTEedyw9AyT
+   vS/pepgJ4QrWaYZk/rsb+zHwoO+LfPwrnQylZHDTW/Yp2nm44Ig9o6dfiqoz
+   TfHZa48lQBoGd/hhwn+z+TNxcPSCkS6SPSk9D6qdLTVaQInr/BaQoUj1mHtx
+   24xcSQHJTuh73JDmtonA3IijTw7/rfmAebBkcFbYph0+LjZ+3ie76sz9CztB
+   jKJQC+X32PTiMeY7Mf4htPK/pnzOFmvVJeMac8aFrpaF+6zkNX+xeieWF+Wz
+   HI17JyirW0zPIEmhpkkBU9vXbyM0W+5KlXtXU68MinJSbvCZX39QdEFRt8ZA
+   aTlrhK1FOo25AWXadB9d5VPX/TD+kJHrnyRTwxtdLiwZYQjKI4hdrxgYN02u
+   TZ464V1/+k5PoKuGf+sE8Lim4elEil5ng91m8O+WqBJiHRjih6k2Wpf6tHIU
+   m4qCn1IANcyuhfBojl+kb8Ahc+mAveYEUFif8H3fex4YxDzw1wupZx762JBV
+   S1tjV6X43oyH7S56LDy1UDp3ScjNUguDaFYXWCX2P+F8EdMPUty38PyKLxUJ
+   biRk3Dk2skRYzWWYtOflXqYVroMapGF+xVx0CPrOKWRy+RCyLomQ1zLdnRIL
+   A06ONE75FfO40M9mKiASraAlVRUh6X/FmI2fu37hMy1GeJJxWq0wrJ+pK1w4
+   qYOHYXs0LcDoK8qHsrmftIfRX4PSbAeI5ohEicj1jSYQsYA4eB74cVs/omoW
+   VzhehnX46ZcQm6cOzt7YflrMDVjy/lRUm8Mu/L38cJFWMk1T0mRNFsE+PfnF
+   0s2+KGcrjLQn6yZ/YkrprK5j5JETL0KdUnC24MlYno0svo9PurYO21VCJew+
+   NAcOPyXAZSU5k3bBlTP2u4qAaWOhqBgEptw9kcnOF+1Orm04YURdGaQG0SC4
+   a/Hdo05dsoL3oE6hbYc1JsXrDfT1MwXKciTCpmCP/+1cBw3b8X6+AOT4XHrG
+   UelwoB0zefyJsV9NCcdWeOav0wyVXvCV9jAIIvaUnCUW+53S0iLMBkgyOKmg
+   4tOCvVyCL9rzSPeKliHWUTHLjWIBmaPSbLDNPUCQ5vtnMlSU8vKQV0yaHEcS
+   mKk41qG1Twl5FlmcfbkJHCcAxdGdAUpyJeNLNMnQXUo2+L6mmHrFkY5qOafC
+   MWosJsAulpVWyTIBP9ex6ZEcLMBZ4ObBLAYmt8FbbyknB7yiYW0wGqPFQDo6
+   SyB0ZJhHmiRF4AygSfNPGZi/lrrERjCiMytMuFmMFU9J7uK3siCumXNNxcqt
+   dN3mvdndu/pymV5nZDA5utuPzWcmQxdEB+8TteqA4stzLdmKw6f9IU8NJBn5
+   YIDOsaitWSYvLUFD2rYVvtNYWS1zwnCvnpwPDG7vgu0sUI8TGSh0afUiXbOR
+   YZvHNfHBsHQX/ZJy8VHtb2OyAWb+6h11L9EUtpulnlhrvuyjU/GUPMzHHU5R
+   w9QrjYqceFca7o/Hb8nqnncbXwzLZzzkvfLqzpzhLOupnDNlXd3EjHcwX4aj
+   rTBlDkZyzTrIYhC2NGn6jC2JFaT6LRsiigXxxhFJquBayl+b+M7Hq3mUq2ER
+   W4qUQCeE48ETRcdUWR+cECnwclqGKHZCTER0NhG5dS8CszzrxVvi4E0kswZR
+   r85q0KTK9MIVtixCnhhGOzd4mVVe3uWlcOHiUK3bYqdV54vFNeDR0gPe06+1
+   eIgirVlsavhOaCPcuSMiv/V8gzvIHfzPo4xr+MxwxvN8mztBSbFe9C2h0xIb
+   tXvJNZn73q7R5M2aLbeYNzT1JKC609uGk8UNXNWMmsEWSPxcB6rb5VHNYsx2
+   dO9gV8iH6JICM7z1Az54kz8Zk10QBb/ZhfXq6XSmee3KBnw2VNgw8RZPY6f5
+   2v7F6wRBUzP6Qcwp5X2JEf5w81Mtm9dwdHhb+NetHJ7V8/dFZkBz1GlwiXVM
+   kyNnS3z3n6qdeZElnMM5O8WRDNnW9qRaw6tcB13jcT0ZGQNWzly45ZpHM9da
+   q+8fbrB91G11oFiuSBnFE+1dvz3jl06u48RMu48PgoMgV9wf9Xe1IYDAG64H
+   xiavgBM7lneMaF/EAsTlY/SIjun2cEtONJA99A6ke72iQTNgBS3ATBq4FjZo
+   sSVVkuCR9Z5XPJR8DblthTJJYPWB6pFOPCIdWon3jIwL/fJFQSzuTkccw52f
+   08L2/CtIweOW6yeOspJReVdXYjGLNI/BMzI5NbKMnyvo/8qvWcL5c45CLAw2
+   JnPim6R+1aCR6npqV1dHiMH03fYPFdRL4aHjWxmg124n5fVykkO2Nl4Eaqos
+   bHPwUH32Mlld5trIV7QliTRmxcguTYltRQEjhGYo7hUwdlLesCnToihhxxie
+   BLK2vLRFz3A23/hy7N+6dxU2REnVgWPGAriWZlcYCkUjMyACOZcyF73AsTBu
+   7Z7hEgr0/Yyy9a2ey4fqyCZJUphxyr+wnjVzetEkIcdh3Ctj+seiw4xINfmC
+   N6wpoN223o9mWhHRn1g5Bz8RtbpKKUnLJsB0fjziroGMB8D3dHmhfcXWT5Zk
+   xltdfh0Sh8Oj6Pwh0nFO4IRCQ9UNuUYn8dmNTDh0uxMagrCDGnhU5YN+UE+h
+   9Yt5+u9VFc6d8TOGN/E10BoyfiB3PeTmuvz6BTdCQe69crkgvDpmwUGBIhJQ
+   VuBU+xvNn7lKGmyZAGCkdVj1KoEGTI5zgTEWl5uod7eWpfRblkJ0+LjLylSy
+   AmSD7mv9MOpKL6LH7xD576qeXXBACi+5FFzW151Q9DWINZtof3DPKdNDHoF5
+   ifmJkabzcT8KnL3UjoUFOP6hXhB+VT30xh963LwGktuc70hq78yDdA2k2wSO
+   cXSzQ+ZNxwLrO3PEKAbvCSZJ7k6j2lJ91/WxHMCuPYiL+EzACwMX+x2aDBfs
+   YiYlrHmbmJRdDX8ylIdeR8C4econ4qb3XycjOJ2p2oz7cjWbdfq1wBnItqVU
+   Cq0Ux3WrAjfURmYJwK7PcYEOE3svjTGQ2oiHGtbF+X0i0YeR4ziuBFSO+2e7
+   c+bUvIRhLsTHZfEsox0nvTXUK199t5JgT4fjssHZnpLaXgZNcpPXG07yW6Yy
+   rxw+bl4VFhVC6zPXRGY/a4dXaOeAU0LBS2viwyeYpSrO4gwhhLpVgOTpg/qk
+   xOKfFEUSBBe3743mB54m5GyFvX/uiKhhiLN1UUqlHKka2vP6VDEbQSZfsBiv
+   zMipBozfkVIXBaBcsY1pWhmdnxUMtPSS6MDJZJtEtiBHD7HRS2Zk70jPiuBP
+   Zl7LivXnCtvzq+IHxxoAq+AeKYmi0nYDxREgDV1ieSUB6jYBK93sXu2Xmdrv
+   P6ZTvwbXp9hWmKcdGc+yl1CWUfh3r3AF/3a31O1Ayidd1xA9jPMosZit8+Xk
+   Agi3cVpqB/G2UJq9t0nvTfeNJziMdok/rKoevaP5lHkQNeTyqH+Q4KYBwmle
+   5V45JEeTS49Au4xnBHFbD2JrGrzRZhiwbahb7xncbBducuIAja0VZvfvaY9t
+   aFzNccikjiYsAUNVaWu7NuMOByA+6VhUPO]
+satosa_metadata_key: >
+   ENC[PKCS7,MIIPhgYJKoZIhvcNAQcDoIIPdzCCD3MCAQAxggKKMIIChgIBAD
+   BuMFYxCzAJBgNVBAYTAlNFMQ4wDAYDVQQKDAVTVU5FVDEOMAwGA1UECwwFRV
+   lBTUwxJzAlBgNVBAMMHnpvb21wcm94eS1zdG8zLXByb2QtMS5zdW5ldC5zZQ
+   IUFJ8YxUis5+Ur805qKwoLZkEwD9UwDQYJKoZIhvcNAQEBBQAEggIAZyBerR
+   qLz/RCrfBUYgES9f+5aRcpbK1g64EiQ46AT3klZWqq3vEC3Zw3MGnLoyv+Z7
+   1ut1VrvtsPZZmlQbdIvGdoK77umDI8DJsxr8rExTKqKPOZUJvWcQ1Z5hfOSQ
+   R5+nPnLoDKaHuehrqCMRzqBLl8nYFI5zCrOIxW6pEhzHdnSZJStaf5IQ8mbG
+   llC5uqUtc2s7WNo0DyAtVVgTGiifuQIdB2Yz1UhXlRxceAwzfTFDQdsjT+P3
+   ycSvIt8V4jsch7gxZy+8ihUbLRsg7zelbDTZctW+Oy0bdqrvAiPEbQxNjLXH
+   Ff5QwaXP4zU5QI2PU8Xsyk19nVMWCVcTZO6P3Q8K0ISDJsCXEOLNxehc1y1N
+   xt25vr0TaddJFvISN9LHm84Ma9yQMPZAhBXBoNDKPjJTkLTGtAt2wYJTE5Qj
+   COCi3PHS4fREdMY/38Sq07XuKYnsIC/8fMc/uspHKAoGvHMarQMRex2Dkff+
+   T3CBlrPhktxmA7A7NaPGmYqtwaKiABvjFQbceWOuCS16gLZ8ttIVwXqfDoGL
+   KYtXeDyearktZsLsZ+Ff6O2hYuoYNg+789c/wdXZuttxGWdnwnNylgQctuQL
+   DvIJcQEdd074fbVtOj0HUyXnkgtSPldTQz/cHjw604ZY7Xpe4uqynD/Gup28
+   kXsu1UwC82QZrBkQswggzeBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCRbE
+   vmM/wdqdLj8l1KvT7PgIIMsHAqLLERf/AR12c8geKX19D4s3lVMeFomQFAUM
+   ZX8j3AjhN8UxeA1bRB9E0pTYnwnpGmsjWMvdQwEW3Ljo40v6Rdq4/WrBJH97
+   DSgz0+C+DYeDoR9QuNCUYa5BzyEFlNgbXtKoijj4lHo1VbEesqPPIVxgaVOC
+   VRH94suysTfimNSh+rEkKU3cXsr5hiRzCtXCBLBp+Hqv0fkdpK+xHBJg8hOa
+   W5FkZKUTNnJJJ/papoql49WQr5Jo/MLjSDdhDG0BZcFv74kZWGrvALbwFeYK
+   x5s9vClWgQjUfZIP/MwBkWYIl6ApVWicj/ZJ+ymT9d2y88Yzv5edoatr0lgP
+   8dxFKgHsFwGw1CRmpBAifRBr+sy7s7op6SkZ0E4oZATn9HbBOZuKPzTgkUp1
+   KHJZiIghFNQBHrl/M3acY0LaK/O3bqYC1MBZIN+4WzKeT0tGa8eKPYgvcm+I
+   eQtucmFG1iSs89DPehoZwjmiVo3Sl28R+kIDPINlnatyx5McsUjPEWhnHjqx
+   dInQRWu3xpeYsd1RghJEhKH0UdHBuC/UtDxqHbjPct6sIip4h0Dl4fyWl+OH
+   6nhIVpQHA9OQI0YrlcIdSMKmAQNg5NJcVN3PXMSOC0D6lLBWdzV0snYjApjx
+   nI9hmT2TgJwff9Odtq8iDRjk/X9xlark5yYBe7RTdBXK6j85wZ1gsHD4yf1n
+   CeuOnTD96egNBFHlm0Qdmo7sas0h9eYaE6fQcXcEQuZs6NFPNomxxTHNtRkG
+   z4KF1toFYYo7JOZaXkLaigOqccC0lNpYKa0zYYVdMM0tBXEGiaH9GAOUlp+w
+   I29zolm8Evav0J4g+jL0lLb8LhO0sQjN6tNG/X5L00SmiJiRc1zT4QmEwBaA
+   4C1APENg2Z2MunbywPgUrNjOOJb9Ecjda1GE8yZoQRPKPBWfozFjrVE396Xq
+   crzMRNIISj9F7YHu1VYyZVHSWEsIn9581K/GVV3nMNltNDaWGvBSjOaKz+e8
+   bx0oeLMuJaeZUAHUCi5dnjyZ3mNJ3YWDERJshok7I8cVbJDy3HdE7yy98lnd
+   9hx8z92f8s9EuamD2Zr7LlTirHRutvBYV0pV/6ZvHldEDR5xafRAPGDXRCHH
+   q5TGpCABLno0YjufF54S1wKIj8AIfBZYezx3WPuIJ1j4LbjXHtjbTCTqYrIc
+   KX6JFW+WoHF+nTTth0KmlobHTu0Xp8VW2Y3E6AMa9ArzSJGjSidviQhBiBMq
+   0lHzfRqZSH35GzRGLgtsi6WRGl98uLd7DoUsoTHtLvJAg0RJ2B7KvMHlnng/
+   K+MKae87b9GAFCNAAN5frLCDL0prSxgPR/uVV61Q6D673K3HctGm67RsX2H8
+   ro9JbBBfwpQFb6F33/GsCTb+7j8v7SgloLpaxsn2j7fiSa0B0/Sqttp21+M3
+   ZtqqbxvrYXEHrQxx8PYyKOmJeRisMq5FHdQsW4N2xJ1HQhUj+yPpjnzgkWHa
+   pDCCmfHUbY9WOBHGYR5uOhtGScN+GIro9+l9gAYBc7PR/WjXWwoYYe88yDTe
+   9+uCrsy6sZTnga4uq6PG4bFeeZJxwDbRVW5A2i7Gm7NrRjtkdjUvyi9bC/eR
+   n3DklVoIrudpbvtVxpeNbvXKMfBow5wHVArd+jxSbz3Y503Vo9Q24b0sRxQ/
+   EgNBsM75VmWbJsqEvQkJoU7hi9NYwFZ967VW4uSn+1NQboJUjTSFTu+gqEvy
+   PHf2AgxmqFC47VIdUG6V/tq2GtUjwMAW9ZcCjo/neBjkb3MC9sRAOUYH4S6F
+   KiDCkxB+yn1FcMoS8yX7/t11PUNWV6bHc8Kjuue4UbwpwkTw/jkl3vNAy6E4
+   sTAyEixLihE5tiXl0kKQ2EzPh87zmeuM/YIj3oM0fTcix3MbRC6unOHf/b1z
+   3bNpHo1N1UoNTmnmRpQJ1YrLxqJQiSnSCx68QHVTFXgMQPpr//aUvE/W0ulF
+   s12Si8XZYCVgE9stZhHzajiJbwc/wvxj57rShKx2blxp+lesL+tGcKhZZOG8
+   HUn32Seuvw/iJVAZs1TgLDlBvbo7Au8mUfL99lQ4ILoajXoGzefHy1Je6pIR
+   vYHttpZtSVW00Vr8e0HtDwQOTdxc6zOIz/+SQ9zAkFkFat633iji+9BaBG4k
+   +lu1q9ZlZfGrsgjoX9pdZHFq4SOf863L3D5QWkevPB/e4ZZYZq/be1XYizqo
+   nwF7jkufVDzqEO3bVNrnZGIrNSxmQBtVtX0Gy6YpI1KrPdv6AbkA7B7rhmOd
+   YNXb9bFZDjmU9K8GY0XNHpnbDyp2JiPVq0NFQeVNIOWjHZsfgP1F6ojckLMy
+   h5BkjmTIpWqzDthI7GNlGx5V3BSiEsvmSNCuEeXekD64vCa3Ohe6EaF1SgD3
+   NsrCdrOLVmLc60PN+AfqpGk51ajF9RgW88brqxnZl0ZUh4uR2A0nM71dqFBG
+   dahsaUVWaHP1NBsu7ncoom875BBpCXZy+Aue/WmBCLh6jHAo3Y/9KUxMWRrf
+   WfPXY9rKFpC26ruuiIhrsZvxrFjYGXuRbCUOTebth/l212AP6rG2SVjRQ3JH
+   6CRh5KUmPpsVf/R4iXXiIY5d1dqsHKWopGJJKzyzXxdp0cSBeVWZHEKnSqIz
+   gKd11VfMfN6hdqtS2CafHI08e9tBTeADCWkivm5FWFThegKGjdNofKjoegXo
+   PYYjQ7JeFk/i/1B2p1HyqD9MfdKr6kxkqHrbq+zYSvkIeSDq7qMW5pSiTqTx
+   m03XpQALn3en0CMn1KfbDQkoWNenOdvLUhnNche3OKGtlj0ZlF8fi58GwsIX
+   NTmYCpqSFRl/r82vUnHELLOoLO8k6vLB1SP7LGvoeavulObft77tRv7HSRhX
+   wyS5zuoH1NnDWdDUpJVHWFI22GMyNRxuLMcU3budTS7pYg9Rs3JFqtl5e6yh
+   fic8vv1vL9ru7J3/f00gXiK9qAZnyeXft/8PF6k1OuEIm/+1Xc59fm5TxkHd
+   uCHi/SYM1mpUkwwKnJqcY26UjdjEZfnPq4sH6eMMT9Ln4vVehUUsrqwvPT4y
+   UP5umrlgwkd4jkYuYB8gSkUbKToYR0kZRzI78qrwTxGpVfZmimDA7Jv4bOyl
+   UzzwuZLaHHo62GRNnsYwb4OGZ8qRC6U59oaY0QlZGko5GzfaNAuuWix8o+N0
+   jms840uZIOZqZEcgTbsrQ1/w5Leqi7P4kJRCRz1QBx/SK/2Vm70CL9M/3nv0
+   8Plz1GysJrEHu5zSHX5J+GeJqPmTb/V1rz+nJx8N4GYGhLgz1jECDgj5il+6
+   v1xQFN8IgZBZzb0UIbi06+YrBTEpda5Q6o5OMzXIuut/ydZEVI94LaJxaFna
+   CI2GE4fwm6byPIOca65hLlSSon/PZbkmHW4ZHuoovf9ZfRLhU//aI+CCzsVW
+   qD78Ybd54aOHzbLCblKBQS85oX7PShTSsaH9/6TxcSzuhb5qLv+IeFK2W2Xi
+   u+/cyjV/yjFHweWb8ysvFj0zQmvv8Sv0MszyLPlpuqT2SOAViky/+n1uri/r
+   AmmB0IqkhllWfRtZgaZ3mKxl2eBZ20Yb3wg1QRPt9HKzDUCrJx3FhQUICOAl
+   HWQpgfrpo1hRAQ9GwRX8syGzFfTfvhkAmSPnhkiH18PEHvBu35QHPPME2kgV
+   lQ2VTPCmSiuY5ViYQ+3WSG2zi8z0nPfUmR4o2oskhBcPqzxHkQzvY1/u0s2J
+   Rt3863j3kB5Lcm89112NxCga9tlGqgVh3BQpPJGA1HUlP8daN8Wqus7h7IBz
+   MS1PmANjUKV3io7Najngs9FABd1Z1IvL1xJoASsvpZdAOY5egHDtg2foYLV/
+   9fTM5VQxWeGoDhAtHOZUYkXLV0p3X8Wv7KovTGBQJX8NSgLQLRQcFoarWRLb
+   vINN44C9GNcbhZl4cCBT8TLM9Q+91Wm8c89H9jGa6r+8NI7H2neOmZbu5aJI
+   97qN5RXzYzZM02esGnSZPnmmVB8bCuc4AQrn4V4xi8L886FIGnaKe+lxK84Z
+   bV9xTKaq9XtO6H02AW3MLHPLHarDJ1hcv2uesSbit92LaKz96rt9Gj1XzXVO
+   u0n2lI24IFQ1Jzc6nG/AANfdZNm4WRZ39Dko7+uNth0ag5H7knWV6DfOLwXP
+   Yp7XAEog2yKa7J4wcIIWtBO3D1JDc/OTQWz4UReRXvN0NmKX7/zWRmRfUiy2
+   PXUFmaE0M1BsZQLNN7QjwEIFHJdVgOfPY9UHes/Oe0+Xu4rHPjG1PhKKmPzQ
+   BmUOMZq2rxzn9QXwNS6cot9r0vurlB6Pm2WC+phn0kJLs+Kfckai9ly61ass
+   altIxaLNmHWO7snpXinModpIYgqcs9Fbyl]

zoomproxy-sto3-prod-1.sunet.se/overlay/etc/hiera/data/local.yaml

@@ -0,0 +1,189 @@
+---
+satosa_config:
+   saml2_backend: "/etc/satosa/plugins/saml2_backend.yaml"
+   saml2_frontend: "/etc/satosa/plugins/saml2_frontend.yaml"
+   generated_attributes: "/etc/satosa/plugins/generated_attributes.yaml"
+   internal_attributes: "/etc/satosa/internal_attributes.yaml"
+   attribute_authorization: "/etc/satosa/plugins/attribute_authorization.yaml"
+   attribute_filter: "/etc/satosa/plugins/attribute_filter.yaml"
+   healthcheck: "/etc/satosa/plugins/healthcheck.yaml"
+generated_attributes:
+   module: satosa.micro_services.attribute_generation.AddSyntheticAttributes
+   plugin: AddSyntheticAttributes
+   name: AddSyntheticAttributes
+   config:
+      synthetic_attributes:
+         default:
+            default:
+               schachomeorganization: "{{edupersonprincipalname.scope}}"
+attribute_authorization:
+   module: satosa.micro_services.attribute_authorization.AttributeAuthorization
+   plugin: AttributeAuthorization
+   name: AttributeAuthorization
+   config:
+      force_attributes_presence_on_allow: true
+      attribute_allow:
+         default:
+            default:
+               edupersonscopedaffiliation:
+                  - "^(member|employee)@sunet.se$"
+attribute_filter:
+   module: satosa.micro_services.attribute_modifications.FilterAttributeValues
+   name: AttributeFilter
+   config:
+      attribute_filters:
+         default:
+            default:
+               edupersonscopedaffiliation: "^(member|employee|student)@"
+internal_attributes:
+   attributes:
+      displayname:
+         saml: [displayName]
+         adfs: [displayName]
+      commonname:
+         saml: [cn]
+         adfs: [displayName]
+      givenname:
+         saml: [givenName]
+         adfs: [givenName]
+      surname:
+        saml: [sn]
+        adfs: [sn]
+      mail:
+        saml: [mail]
+        adfs: [mail]
+      edupersonprincipalname:
+        saml: [eduPersonPrincipalName]
+        adfs: [eduPersonPrincipalName]
+      edupersonscopedaffiliation:
+        saml: [eduPersonScopedAffiliation]
+        adfs: [eduPersonScopedAffiliation]
+      noredupersonnin:
+        saml: [norEduPersonNIN]
+        adfs: [norEduPersonNIN]
+      edupersonentitlement:
+        saml: [eduPersonEntitlement]
+        adfs: [eduPersonEntitlement]
+      schachomeorganization:
+        saml: [schacHomeOrganization]
+      schachomeorganizationtype:
+        saml: [schacHomeOrganizationType]
+      organizationname:
+        saml: [ou]
+      noreduorgacronym:
+        saml: [norEduOrgAcronym]
+      countryname:
+        saml: [c]
+      friendlycountryname:
+        saml: [co]
+      edupersontargetedid:
+        saml: [eduPersonTargetedID]
+   user_id_to_attr: edupersontargetedid
+healthcheck:
+   module: swamid_plugins.healthcheck.HealthCheck
+   name: HealthCheck
+satosa_proxy_conf:
+   BASE: https://zoom-saas-idp-proxy.sunet.se
+   INTERNAL_ATTRIBUTES: "internal_attributes.yaml"
+   BACKEND_MODULES:
+      - "plugins/saml2_backend.yaml"
+   FRONTEND_MODULES:
+      - "plugins/saml2_frontend.yaml"
+   MICRO_SERVICES:
+      - "plugins/generated_attributes.yaml"
+      - "plugins/attribute_authorization.yaml"
+      - "plugins/attribute_filter.yaml"
+      - "plugins/healthcheck.yaml"
+   LOGGING:
+     version: 1
+     formatters:
+        default:
+           format: "%(asctime)s [%(process)d] [%(levelname)s] %(message)s"
+     handlers:
+        console:
+           class: logging.StreamHandler
+           level: DEBUG
+           formatter: default
+           stream: ext://sys.stdout
+     loggers:
+        satosa:
+           level: DEBUG
+           handlers: [console]
+        saml2:
+           level: DEBUG
+           handlers: [console]
+saml2_backend:
+  config:
+    sp_config:
+      organization: {display_name: SUNET Zoom, name: SUNET Zoom, url: 'https://sunet.se'}
+      contact_person:
+        - {contact_type: technical, email_address: noc@sunet.se, given_name: Technical}
+        - {contact_type: support, email_address: noc@sunet.se, given_name: Support}
+      key_file: backend.key
+      cert_file: backend.crt
+      encryption_keypairs:
+        - { key_file: backend.key, cert_file: backend.crt }
+      allow_unknown_attributes: true
+      metadata:
+        mdq:
+         - url: https://mds.swamid.se
+           cert: "/etc/satosa/md-signer2.crt"
+      entityid: https://zoom-saas-idp-proxy.sunet.se/sp
+      service:
+        sp:
+          name_id_format: ['urn:oasis:names:tc:SAML:2.0:nameid-format:transient']
+          allow_unsolicited: true
+          endpoints:
+            assertion_consumer_service:
+              - [<base_url>/<name>/acs/post, 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST']
+              - [<base_url>/<name>/acs/redirect, 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect']
+            discovery_response:
+              - [<base_url>/<name>/disco, 'urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol']
+          want_response_signed: False
+          want_assertions_signed: False
+          want_assertions_or_response_signed: True
+      xmlsec_binary: /usr/bin/xmlsec1
+      attribute_map_dir: attributemaps
+    disco_srv: https://service.seamlessaccess.org/ds
+    attribute_profile: saml
+  module: satosa.backends.saml2.SAMLBackend
+  name: Saml2SP
+  plugin: BackendModulePlugin
+saml2_frontend:
+  config:
+    custom_attribute_release:
+      default:
+        default:
+          exclude: ["eduPersonTargetedID","eduPersonAffiliation"]
+    idp_config:
+      organization: {display_name: SWAMID, name: SWAMID, url: 'https://sunet.se'}
+      contact_person:
+        - {contact_type: technical, email_address: noc@sunet.se, given_name: Technical}
+        - {contact_type: support, email_address: noc@sunet.se, given_name: Support}
+      key_file: frontend.key
+      cert_file: frontend.crt
+      metadata:
+        local: [metadata/zoom.xml]
+      entityid: https://zoom-saas-idp-proxy.sunet.se/idp
+      accepted_time_diff: 300
+      service:
+        idp:
+          endpoints:
+            single_sign_on_service: []
+          name: SWAMID
+          name_id_format: ['urn:oasis:names:tc:SAML:2.0:nameid-format:transient']
+          policy:
+            default:
+              attribute_restrictions: null
+              fail_on_missing_requested: false
+              lifetime: {minutes: 15}
+              name_form: urn:oasis:names:tc:SAML:2.0:attrname-format:uri
+          want_authn_requests_signed: false
+      xmlsec_binary: /usr/bin/xmlsec1
+    endpoints:
+      single_sign_on_service: {'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST': sso/post,
+        'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect': sso/redirect}
+    attribute_profile: saml
+  module: satosa.frontends.saml2.SAMLFrontend
+  plugin: FrontendModulePlugin
+  name: Saml2IDP

zoomproxy-sto3-prod-1.sunet.se/overlay/etc/satosa/backend.crt

@@ -0,0 +1,29 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

zoomproxy-sto3-prod-1.sunet.se/overlay/etc/satosa/frontend.crt

@@ -0,0 +1,29 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

zoomproxy-sto3-prod-1.sunet.se/overlay/etc/satosa/md-signer2.crt

@@ -0,0 +1,33 @@
+-----BEGIN CERTIFICATE-----
+MIIFyzCCA7OgAwIBAgIJAI9LJsUJXDMVMA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNV
+BAYTAlNFMRIwEAYDVQQIDAlTdG9ja2hvbG0xEjAQBgNVBAcMCVN0b2NraG9sbTEO
+MAwGA1UECgwFU1VORVQxDzANBgNVBAsMBlNXQU1JRDEkMCIGA1UEAwwbU1dBTUlE
+IG1ldGFkYXRhIHNpZ25lciB2Mi4wMB4XDTE2MTIwNjA5MjgyMFoXDTM2MTIwNjA5
+MjgyMFowfDELMAkGA1UEBhMCU0UxEjAQBgNVBAgMCVN0b2NraG9sbTESMBAGA1UE
+BwwJU3RvY2tob2xtMQ4wDAYDVQQKDAVTVU5FVDEPMA0GA1UECwwGU1dBTUlEMSQw
+IgYDVQQDDBtTV0FNSUQgbWV0YWRhdGEgc2lnbmVyIHYyLjAwggIiMA0GCSqGSIb3
+DQEBAQUAA4ICDwAwggIKAoICAQDQVw72PnIo9QIeV439kQnPcxZh/LddKw86eIU+
+nMfl4TpjSIyqTu4KJSnXbJyqXg+jQj3RzE9BUblpGrR7okmQwOh2nh+5A6SmyTOR
+p7VEVT/Zw0GNnQi9gAW7J8Cy+Gnok4LeILI5u43hPylNKAnvs1+bo0ZlbHM6U5jm
+6MlO+lrYA9dZzoPQqoCQbr3OweAaq5g8H54HuZacpYa3Q2GnUa4v+xywjntPdSQU
+RTAbWWyJl3cHctX5+8UnX8nGCaxoBZqNp9PcEopyYJX8O1nrLumBMqu9Uh6GW1nx
+OHfKDLvUoykG3Dm704ENVs88KaJXB1qQNsjdlm14UI9XCZbHfnFVnQ53ehsGFMha
+Bf/Abd6v2wnhBLH/RxEUlw347qSeokw+SdDTSdW8jOEBiSqP/8BUzpCcbGlgAsVO
+NKUS0K7IB2Bb79YYhyMvmJl24BGtkX+VM/mv47dxOtfzNFCMtUcJ2Dluv0xJG8xI
+ot7umx/kbMBLuq7WdWELZJrgpt2bb9sXtYBpuxtGCW5g7+U7MNN1aKCiCSfq09YH
+qu2DsU7HHAxEcGFXBiepBliCwZ24WLQh53bA3rihaln7SjdapT9VuSTpCvytb9RX
+rq39mVuHMXvWYOG20XTV0+8U2vnsjAwsy28xPAcrLWRWoZbRJ+RoGp6L3GACq+t+
+HPIukwIDAQABo1AwTjAdBgNVHQ4EFgQUQ2iqKQV/mMZDeJDtLXvy0Bsn/BQwHwYD
+VR0jBBgwFoAUQ2iqKQV/mMZDeJDtLXvy0Bsn/BQwDAYDVR0TBAUwAwEB/zANBgkq
+hkiG9w0BAQsFAAOCAgEAHviIAfS8viUN8Qk//U1p6Z1VK5718NeS7uqabug/SwhL
+Vxtg/0x9FPJYf05HXj4moAf2W1ZLnhr0pnEPGDbdHAgDC672fpaAV7DO95d7xubc
+rofR7Of2fehYSUZbXBWFiQ+xB5QfRsUFgB/qgHUolgn+4RXniiBYlWe6QJVncHx+
+FtxD+vh1l5rLNkJgJLw2Lt3pbemSxUvv0CJtnK4jt2y95GsWGu1uSsVLrs0PR1Lj
+kuxL6zZH4Pp9yjRDOUhbVYAnQ017mdcjvHYtp7c4GIWgyaBkDoMtU6fAt70QpeGj
+XhecXk7Llx+oYNdZn14ZdFPRGMyAESLrT4Zf9M7QS3ypnWn/Ux0SwKWbnPUeRVbO
+VZZ+M0jmdYK6o+UU5xH3peRWSJIjjRaKjbVlW5GgHwGFmQc/LN+va2jjThRsQWWt
+zEwObijedInQ6wfL/VzFAwlWWoDAzKK9qnK4Rf3ORKkvhKrUa//2OYnZD0kHtHiC
+OL+iFRLtJ/DQP5iZAF+M1Hta7acLmQ8v7Mn1ZR9lyDWzFx57VOKKtJ6RAmBvxOdP
+8cIgBNvLAEdXh2knOLqYU/CeaGkxTD7Y0SEKx6OxEEdafba//MBkVLt4bRoLXts6
+6JY25FqFh3eJZjR6h4W1NW8KnBWuy+ITGfXxoJSsX78/pwAY+v32jRxMZGUi1J4=
+-----END CERTIFICATE-----

zoomproxy-sto3-prod-1.sunet.se/overlay/etc/satosa/metadata.crt

@@ -0,0 +1,29 @@
+-----BEGIN CERTIFICATE-----
+MIIFBzCCAu+gAwIBAgIJAO2iLzrmv26eMA0GCSqGSIb3DQEBCwUAMBoxGDAWBgNV
+BAMMD3NhdG9zYV9tZXRhZGF0YTAeFw0xNzA4MjkwODAxMjlaFw0yNzA4MjcwODAx
+MjlaMBoxGDAWBgNVBAMMD3NhdG9zYV9tZXRhZGF0YTCCAiIwDQYJKoZIhvcNAQEB
+BQADggIPADCCAgoCggIBAK8z4ImxS6seGpMECgEuRjQxsEzCSahfvaKe6cfFvvof
+1yPKzuBeBoDneQJWhH8L/DePZigNqit33PUJARrkgKbCGsdrElIg8zo2aSPohr3Q
+3WXXBRUZyBExEXd/uC3nBWeE1XoccwEOwqRmaP5g9ubH3fmVozM9qWVP4vG+XFRL
+b/XVh1k83V7UePHgIaaB2cbjjXwZBneUeTwf9GymTxpa0eJQjGqA0EvfWRTvGoop
+nMX6WrMdX2RuxA2Eb1gBbzdXnsWchDcQD5Z2NyWFvzxPBuLnxgxKlBC+rPr/J10w
+c9MO/jgq4VimmKWhTz1JwvcBSRmB47xWDmWzjBMOBFpEh9E2YgB2ugKyjvVRnRRF
+qoEoNcQvnC/5rChnh8QxxYDMePB8NYL5iwqwYOFqxcjj+dX/ZF9CmBMIP4EFqXr8
+SCdnzz+QAAoLbV6MTQ/Fx1KBPGSO4E1b2/xtJDqyK/qcwWmmcIOWfW75GZeMFZNz
+BauPaCfwmlCRqLel2EcPPhjJxgi45fEE7aEGA0HfDxqwVJwsNjD/SVp/cV2pYbvu
+t9iip6jmIriw+KsSpCvRrDWCUeMi9YgvuvJaJd+ZG+Ej7d4WALQQDleBEGNybqDw
+X7bJEv+BTxDioYb9onXBIZQYNqL69V29FMh8rUMTvKSC5xlFxmmG/XfyhRJItl/p
+AgMBAAGjUDBOMB0GA1UdDgQWBBS0yk9TqlMkPqWQU/a+6MNZRaNm5DAfBgNVHSME
+GDAWgBS0yk9TqlMkPqWQU/a+6MNZRaNm5DAMBgNVHRMEBTADAQH/MA0GCSqGSIb3
+DQEBCwUAA4ICAQA5H+B9bq7oQVMHvhyheNk46LKzgNgtktU026dyOGvUET1qdizk
+HNFTzVfSXVYPLItFDHypGlS38PkmSXSkoAnDC1mNWP73NzNTyTcx6wamjrIPk7w8
+tzN4ZGL3G8irbiUqZg0SCdS/UdAZarsJTF/UpyF+jHsMYtXXJ6mKHftm75F480ip
+gSuPXa/hFN5cj9EbQM9lm+Xfy+NjV4pM2JCWTGlzSrIxStk91oBn0T3EmCDmI+mG
+mfV8j+AzRMdK/+rLbTPBA1qRnlEt5PXuqPh9zEd1Ipw+yY4SqaXBZCOOpaH0k3l1
+7bhmnhuQutTvEZlmrtYfrL2+MRqmvNfbXyZWPKCw4+H66NUcVD6jpX0/5qomGQt8
+sHHR4igdjyDbrBbiU0AS4spgATDfK05NG/bCIcUGfUlYDYFCViJVbvUUVp7cGlI3
+Ptjv1TXtKOLgehFrbwGHHvzpCrpMjfzttlShqKw/7V30EhgKzXymMvqEGVbTjehh
+WoRodEqXKt34iVBEvKWdhSWHTkqTJDGb7ZEgOuQV7r7HPe2UHsYLxRXdArbTAcZg
+Ffmq5eZTK7ZNOSTX3sCg/a8pZFN/z14DFiSsdxErgnJlVCsjQrI51iB4QhMWlDHW
+3dmaODsyIoA5iaLPRPiFLyq1S1rclzj5dgW29vuLeHDNzZqLTtcdIfNUVg==
+-----END CERTIFICATE-----