From 2f239d5bf7617102544f746f50e3da021bb3374b Mon Sep 17 00:00:00 2001 From: david Date: Wed, 5 Aug 2020 16:06:58 -0400 Subject: [PATCH] Check in 1.6.15 --- LSQUICCOMMIT | 2 +- build.sh | 6 +- configure | 20 +- configure.ac | 2 +- dist/VERSION | 2 +- dist/admin/html.open/index.php | 2 +- dist/admin/html.open/lib/CValidation.php | 72 +- dist/admin/html.open/lib/DMsg.php | 4 +- dist/admin/html.open/lib/DTblDefBase.php | 37 +- dist/admin/html.open/lib/PathTool.php | 13 +- .../html.open/lib/ows/ConfValidation.php | 3 +- dist/admin/html.open/lib/ows/DPageDef.php | 10 +- dist/admin/html.open/lib/ows/DTblDef.php | 37 +- .../lib/util/build_php/BuildConfig.php | 11 +- dist/admin/html.open/login.php | 2 +- dist/admin/html.open/res/css/googlefonts.css | 45 ++ .../res/fonts/open-sans-v17-latin-300.woff | Bin 0 -> 18668 bytes .../res/fonts/open-sans-v17-latin-300.woff2 | Bin 0 -> 14932 bytes .../res/fonts/open-sans-v17-latin-700.woff | Bin 0 -> 18900 bytes .../res/fonts/open-sans-v17-latin-700.woff2 | Bin 0 -> 15056 bytes .../fonts/open-sans-v17-latin-700italic.woff | Bin 0 -> 17452 bytes .../fonts/open-sans-v17-latin-700italic.woff2 | Bin 0 -> 13880 bytes .../res/fonts/open-sans-v17-latin-italic.woff | Bin 0 -> 17440 bytes .../fonts/open-sans-v17-latin-italic.woff2 | Bin 0 -> 13780 bytes .../fonts/open-sans-v17-latin-regular.woff | Bin 0 -> 18100 bytes .../fonts/open-sans-v17-latin-regular.woff2 | Bin 0 -> 14380 bytes dist/admin/html.open/res/lang/en-US_msg.php | 5 +- dist/admin/html.open/res/lang/en-US_tips.php | 34 +- dist/admin/html.open/res/lang/ja-JP_tips.php | 14 +- dist/admin/html.open/res/lang/zh-CN_tips.php | 24 +- dist/admin/html.open/view/inc/configui.php | 2 +- dist/admin/html.open/view/inc/header.php | 19 +- dist/admin/misc/lsup.sh | 3 +- dist/conf/httpd_config.conf.in | 2 +- dist/conf/vhosts/Example/vhconf.conf | 4 +- dist/docs/AdminGeneral_Help.html | 28 +- dist/docs/AdminListeners_General_Help.html | 22 +- dist/docs/AdminListeners_SSL_Help.html | 22 +- dist/docs/AdminSecurity_Help.html | 28 +- dist/docs/App_Server_Context.html | 24 +- dist/docs/App_Server_Help.html | 28 +- dist/docs/CGI_Context.html | 24 +- dist/docs/CompilePHP_Help.html | 22 +- dist/docs/Context_Help.html | 22 +- dist/docs/ExtApp_Help.html | 22 +- dist/docs/External_FCGI.html | 28 +- dist/docs/External_FCGI_Auth.html | 28 +- dist/docs/External_LB.html | 22 +- dist/docs/External_LSAPI.html | 28 +- dist/docs/External_PL.html | 22 +- dist/docs/External_Servlet.html | 22 +- dist/docs/External_WS.html | 22 +- dist/docs/FCGI_Context.html | 22 +- dist/docs/Java_Web_App_Context.html | 22 +- dist/docs/LB_Context.html | 22 +- dist/docs/LSAPI_Context.html | 22 +- dist/docs/Listeners_General_Help.html | 25 +- dist/docs/Listeners_SSL_Help.html | 22 +- dist/docs/Module_Context.html | 22 +- dist/docs/Module_Help.html | 24 +- dist/docs/Proxy_Context.html | 22 +- dist/docs/Redirect_Context.html | 22 +- dist/docs/Rewrite_Help.html | 24 +- dist/docs/ScriptHandler_Help.html | 22 +- dist/docs/ServGeneral_Help.html | 24 +- dist/docs/ServLog_Help.html | 30 +- dist/docs/ServSecurity_Help.html | 86 ++- dist/docs/ServTuning_Help.html | 44 +- dist/docs/ServerStat_Help.html | 24 +- dist/docs/Servlet_Context.html | 22 +- dist/docs/Static_Context.html | 24 +- dist/docs/Templates_Help.html | 22 +- dist/docs/VHGeneral_Help.html | 28 +- dist/docs/VHSSL_Help.html | 22 +- dist/docs/VHSecurity_Help.html | 51 +- dist/docs/VHWebSocket_Help.html | 22 +- dist/docs/VirtualHosts_Help.html | 45 +- dist/docs/admin.html | 22 +- dist/docs/config.html | 22 +- dist/docs/css/hdoc.css | 2 +- dist/docs/index.html | 67 +- dist/docs/install.html | 157 ++-- dist/docs/intro.html | 22 +- dist/docs/ja-JP/AdminGeneral_Help.html | 8 +- .../ja-JP/AdminListeners_General_Help.html | 2 +- dist/docs/ja-JP/AdminListeners_SSL_Help.html | 2 +- dist/docs/ja-JP/AdminSecurity_Help.html | 2 +- dist/docs/ja-JP/App_Server_Context.html | 2 +- dist/docs/ja-JP/App_Server_Help.html | 2 +- dist/docs/ja-JP/CGI_Context.html | 2 +- dist/docs/ja-JP/CompilePHP_Help.html | 2 +- dist/docs/ja-JP/Context_Help.html | 2 +- dist/docs/ja-JP/ExtApp_Help.html | 2 +- dist/docs/ja-JP/External_FCGI.html | 2 +- dist/docs/ja-JP/External_FCGI_Auth.html | 2 +- dist/docs/ja-JP/External_LB.html | 2 +- dist/docs/ja-JP/External_LSAPI.html | 2 +- dist/docs/ja-JP/External_PL.html | 2 +- dist/docs/ja-JP/External_Servlet.html | 2 +- dist/docs/ja-JP/External_WS.html | 2 +- dist/docs/ja-JP/FCGI_Context.html | 2 +- dist/docs/ja-JP/Java_Web_App_Context.html | 2 +- dist/docs/ja-JP/LB_Context.html | 2 +- dist/docs/ja-JP/LSAPI_Context.html | 2 +- dist/docs/ja-JP/Listeners_General_Help.html | 5 +- dist/docs/ja-JP/Listeners_SSL_Help.html | 2 +- dist/docs/ja-JP/Module_Context.html | 2 +- dist/docs/ja-JP/Module_Help.html | 2 +- dist/docs/ja-JP/Proxy_Context.html | 2 +- dist/docs/ja-JP/Redirect_Context.html | 2 +- dist/docs/ja-JP/Rewrite_Help.html | 2 +- dist/docs/ja-JP/ScriptHandler_Help.html | 2 +- dist/docs/ja-JP/ServGeneral_Help.html | 2 +- dist/docs/ja-JP/ServLog_Help.html | 8 +- dist/docs/ja-JP/ServSecurity_Help.html | 12 +- dist/docs/ja-JP/ServTuning_Help.html | 8 +- dist/docs/ja-JP/ServerStat_Help.html | 2 +- dist/docs/ja-JP/Servlet_Context.html | 2 +- dist/docs/ja-JP/Static_Context.html | 2 +- dist/docs/ja-JP/Templates_Help.html | 2 +- dist/docs/ja-JP/VHGeneral_Help.html | 8 +- dist/docs/ja-JP/VHSSL_Help.html | 2 +- dist/docs/ja-JP/VHSecurity_Help.html | 15 +- dist/docs/ja-JP/VHWebSocket_Help.html | 2 +- dist/docs/ja-JP/VirtualHosts_Help.html | 5 +- dist/docs/ja-JP/admin.html | 2 +- dist/docs/ja-JP/config.html | 2 +- dist/docs/ja-JP/index.html | 2 +- dist/docs/ja-JP/install.html | 2 +- dist/docs/ja-JP/intro.html | 2 +- dist/docs/ja-JP/license.html | 2 +- dist/docs/ja-JP/security.html | 2 +- dist/docs/ja-JP/webconsole.html | 2 +- dist/docs/license.html | 22 +- dist/docs/security.html | 22 +- dist/docs/webconsole.html | 22 +- dist/docs/zh-CN/AdminGeneral_Help.html | 28 +- .../zh-CN/AdminListeners_General_Help.html | 22 +- dist/docs/zh-CN/AdminListeners_SSL_Help.html | 22 +- dist/docs/zh-CN/AdminSecurity_Help.html | 22 +- dist/docs/zh-CN/App_Server_Context.html | 24 +- dist/docs/zh-CN/App_Server_Help.html | 22 +- dist/docs/zh-CN/CGI_Context.html | 24 +- dist/docs/zh-CN/CompilePHP_Help.html | 22 +- dist/docs/zh-CN/Context_Help.html | 22 +- dist/docs/zh-CN/ExtApp_Help.html | 22 +- dist/docs/zh-CN/External_FCGI.html | 22 +- dist/docs/zh-CN/External_FCGI_Auth.html | 22 +- dist/docs/zh-CN/External_LB.html | 22 +- dist/docs/zh-CN/External_LSAPI.html | 22 +- dist/docs/zh-CN/External_PL.html | 22 +- dist/docs/zh-CN/External_Servlet.html | 22 +- dist/docs/zh-CN/External_WS.html | 22 +- dist/docs/zh-CN/FCGI_Context.html | 22 +- dist/docs/zh-CN/Java_Web_App_Context.html | 22 +- dist/docs/zh-CN/LB_Context.html | 22 +- dist/docs/zh-CN/LSAPI_Context.html | 22 +- dist/docs/zh-CN/Listeners_General_Help.html | 25 +- dist/docs/zh-CN/Listeners_SSL_Help.html | 22 +- dist/docs/zh-CN/Module_Context.html | 22 +- dist/docs/zh-CN/Module_Help.html | 24 +- dist/docs/zh-CN/Proxy_Context.html | 22 +- dist/docs/zh-CN/Redirect_Context.html | 22 +- dist/docs/zh-CN/Rewrite_Help.html | 24 +- dist/docs/zh-CN/ScriptHandler_Help.html | 22 +- dist/docs/zh-CN/ServGeneral_Help.html | 22 +- dist/docs/zh-CN/ServLog_Help.html | 28 +- dist/docs/zh-CN/ServSecurity_Help.html | 36 +- dist/docs/zh-CN/ServTuning_Help.html | 34 +- dist/docs/zh-CN/ServerStat_Help.html | 24 +- dist/docs/zh-CN/Servlet_Context.html | 22 +- dist/docs/zh-CN/Static_Context.html | 24 +- dist/docs/zh-CN/Templates_Help.html | 22 +- dist/docs/zh-CN/VHGeneral_Help.html | 28 +- dist/docs/zh-CN/VHSSL_Help.html | 22 +- dist/docs/zh-CN/VHSecurity_Help.html | 35 +- dist/docs/zh-CN/VHWebSocket_Help.html | 22 +- dist/docs/zh-CN/VirtualHosts_Help.html | 27 +- dist/docs/zh-CN/admin.html | 22 +- dist/docs/zh-CN/config.html | 22 +- dist/docs/zh-CN/index.html | 67 +- dist/docs/zh-CN/install.html | 157 ++-- dist/docs/zh-CN/intro.html | 22 +- dist/docs/zh-CN/license.html | 22 +- dist/docs/zh-CN/security.html | 22 +- dist/docs/zh-CN/webconsole.html | 22 +- dist/install.sh | 2 +- dist/lsrecaptcha/_recaptcha.shtml | 7 +- doc/ModuleDeveloperGuide.odt | Bin 336909 -> 510311 bytes doc/ModuleDeveloperGuide.pdf | Bin 694400 -> 686189 bytes include/ls.h | 21 +- include/lsdef.h | 1 - include/lsr/ls_atomic.h | 104 ++- include/lsr/ls_evtcb.h | 121 +++- include/lsr/ls_lock.h | 88 +-- src/Makefile.am | 2 +- src/Makefile.in | 10 +- src/adns/adns.cpp | 40 +- src/adns/adns.h | 21 +- src/config.h.cmake | 2 +- src/edio/aiooutputstream.cpp | 133 +++- src/edio/aiooutputstream.h | 83 ++- src/edio/eventnotifier.h | 2 + src/edio/evtcbque.cpp | 671 +++++++----------- src/edio/evtcbque.h | 120 +++- src/extensions/Makefile.am | 1 + src/extensions/Makefile.in | 72 +- src/extensions/cgi/CMakeLists.txt | 1 + src/extensions/cgi/Makefile.am | 2 +- src/extensions/cgi/cgidconn.cpp | 28 + src/extensions/cgi/cgidworker.cpp | 1 + src/extensions/cgi/lscgid.cpp | 166 ++++- src/extensions/cgi/lscgid.h | 1 - src/extensions/cgi/suexec.cpp | 1 - src/extensions/cgi/use_bwrap.c | 646 +++++++++++++++++ src/extensions/cgi/use_bwrap.h | 114 +++ src/extensions/localworker.cpp | 42 +- src/extensions/lsapi/lsapiconn.cpp | 2 +- src/extensions/lsapi/lsapiconn.h | 2 +- src/extensions/registry/extappregistry.cpp | 38 +- src/http/accesslog.cpp | 35 +- src/http/chunkoutputstream.cpp | 5 +- src/http/httpdefs.h | 6 +- src/http/httpmime.cpp | 8 +- src/http/httpreq.cpp | 30 +- src/http/httpreq.h | 7 +- src/http/httpserverconfig.cpp | 2 + src/http/httpserverconfig.h | 20 +- src/http/httpsession.cpp | 103 ++- src/http/httpsession.h | 4 +- src/http/httpvhost.cpp | 25 +- src/http/httpvhost.h | 12 + src/http/ntwkiolink.cpp | 30 +- src/http/serverprocessconfig.h | 2 + src/log4cxx/appendermanager.cpp | 3 +- src/log4cxx/fileappender.cpp | 11 +- src/log4cxx/fileappender.h | 8 +- src/log4cxx/logrotate.cpp | 8 +- src/log4cxx/logsession.h | 4 +- src/log4cxx/patternlayout.cpp | 4 + src/lsiapi/internal.h | 2 +- src/lsiapi/lsiapihooks.h | 8 +- src/lsiapi/lsiapilib.cpp | 5 +- src/lsr/CMakeLists.txt | 1 - src/lsr/ls_lfqueue.c | 14 +- src/lsr/ls_lock.c | 2 +- src/lsr/ls_offload.h | 30 +- src/lsr/ls_xpool.c | 2 +- src/main/httpserver.cpp | 52 +- src/main/lshttpdmain.cpp | 9 +- src/main/plainconf.cpp | 3 + src/modules/pagespeed/pagespeed.cpp | 6 +- src/quic/quicengine.cpp | 2 +- src/shm/ls_shmhashstat.cpp | 23 + src/shm/lsshm.h | 1 + src/shm/lsshmhash.cpp | 51 +- src/shm/lsshmhash.h | 6 +- src/shm/lsshmpool.cpp | 14 + src/shm/lsshmtidmgr.cpp | 226 +++++- src/shm/lsshmtidmgr.h | 34 +- src/sslpp/ls_fdbuf_bio.c | 94 ++- src/sslpp/ls_fdbuf_bio.h | 18 +- src/sslpp/sslconnection.cpp | 17 +- src/sslpp/sslconnection.h | 6 +- src/sslpp/sslcontext.cpp | 17 +- src/sslpp/sslcontext.h | 5 +- src/sslpp/sslcontextconfig.h | 4 + src/sslpp/sslutil.cpp | 76 +- src/sslpp/sslutil.h | 3 + src/thread/CMakeLists.txt | 1 + src/{lsr => thread}/offloader.cpp | 54 +- src/thread/workcrew.cpp | 115 +-- src/thread/workcrew.h | 28 +- src/util/datetime.cpp | 3 +- src/util/datetime.h | 7 +- src/util/dlinkqueue.h | 16 + src/util/httpfetch.cpp | 66 +- src/util/httpfetch.h | 12 +- src/util/radixtree.cpp | 9 +- src/util/vmembuf.cpp | 26 +- test/util/poolalloctest.cpp | 2 + 281 files changed, 5131 insertions(+), 2183 deletions(-) create mode 100644 dist/admin/html.open/res/css/googlefonts.css create mode 100644 dist/admin/html.open/res/fonts/open-sans-v17-latin-300.woff create mode 100644 dist/admin/html.open/res/fonts/open-sans-v17-latin-300.woff2 create mode 100644 dist/admin/html.open/res/fonts/open-sans-v17-latin-700.woff create mode 100644 dist/admin/html.open/res/fonts/open-sans-v17-latin-700.woff2 create mode 100644 dist/admin/html.open/res/fonts/open-sans-v17-latin-700italic.woff create mode 100644 dist/admin/html.open/res/fonts/open-sans-v17-latin-700italic.woff2 create mode 100644 dist/admin/html.open/res/fonts/open-sans-v17-latin-italic.woff create mode 100644 dist/admin/html.open/res/fonts/open-sans-v17-latin-italic.woff2 create mode 100644 dist/admin/html.open/res/fonts/open-sans-v17-latin-regular.woff create mode 100644 dist/admin/html.open/res/fonts/open-sans-v17-latin-regular.woff2 create mode 100644 src/extensions/cgi/use_bwrap.c create mode 100644 src/extensions/cgi/use_bwrap.h rename src/{lsr => thread}/offloader.cpp (65%) diff --git a/LSQUICCOMMIT b/LSQUICCOMMIT index 457d88f55..3dd83a801 100644 --- a/LSQUICCOMMIT +++ b/LSQUICCOMMIT @@ -1 +1 @@ -583766be5fa2913463179d500f7e25583b273e07 +d91deca49872095c51adefdd1455b056262544ca diff --git a/build.sh b/build.sh index ec3c9b2e8..b2d73407e 100755 --- a/build.sh +++ b/build.sh @@ -264,7 +264,7 @@ prepareLinux() #other debian OS, we still can if [ "${OSTYPE}" = "unknowlinux" ] ; then - echo It seems you are not using ubuntu 14,16,18,20 and Debian 7/8/9/10. + echo It seems you are not using ubuntu 14,16,18 and Debian 7/8/9/10. echo But we still can try to go further. fi @@ -533,9 +533,7 @@ git clone https://github.com/litespeedtech/third-party.git mv third-party thirdparty mkdir thirdparty/lib64 cd thirdparty/script/ -git pull -#Only for 1.6.14 -git reset --hard 41eab3fb08ba59229382e3edf8e0cc5e26d1c03e + sed -i -e "s/unittest-cpp/ /g" ./build_ols.sh diff --git a/configure b/configure index a5a0b070a..0088c38f4 100755 --- a/configure +++ b/configure @@ -1,6 +1,6 @@ #! /bin/sh # Guess values for system-dependent variables and create Makefiles. -# Generated by GNU Autoconf 2.69 for openlitespeed 1.6.14. +# Generated by GNU Autoconf 2.69 for openlitespeed 1.6.15. # # Report bugs to . # @@ -590,8 +590,8 @@ MAKEFLAGS= # Identity of this package. PACKAGE_NAME='openlitespeed' PACKAGE_TARNAME='openlitespeed' -PACKAGE_VERSION='1.6.14' -PACKAGE_STRING='openlitespeed 1.6.14' +PACKAGE_VERSION='1.6.15' +PACKAGE_STRING='openlitespeed 1.6.15' PACKAGE_BUGREPORT='info@litespeedtech.com' PACKAGE_URL='http://www.litespeedtech.com/' @@ -1409,7 +1409,7 @@ if test "$ac_init_help" = "long"; then # Omit some internal or obsolete options to make the list less imposing. # This message is too long to be a string in the A/UX 3.1 sh. cat <<_ACEOF -\`configure' configures openlitespeed 1.6.14 to adapt to many kinds of systems. +\`configure' configures openlitespeed 1.6.15 to adapt to many kinds of systems. Usage: $0 [OPTION]... [VAR=VALUE]... @@ -1480,7 +1480,7 @@ fi if test -n "$ac_init_help"; then case $ac_init_help in - short | recursive ) echo "Configuration of openlitespeed 1.6.14:";; + short | recursive ) echo "Configuration of openlitespeed 1.6.15:";; esac cat <<\_ACEOF @@ -1641,7 +1641,7 @@ fi test -n "$ac_init_help" && exit $ac_status if $ac_init_version; then cat <<\_ACEOF -openlitespeed configure 1.6.14 +openlitespeed configure 1.6.15 generated by GNU Autoconf 2.69 Copyright (C) 2012 Free Software Foundation, Inc. @@ -2315,7 +2315,7 @@ cat >config.log <<_ACEOF This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. -It was created by openlitespeed $as_me 1.6.14, which was +It was created by openlitespeed $as_me 1.6.15, which was generated by GNU Autoconf 2.69. Invocation command line was $ $0 $@ @@ -3181,7 +3181,7 @@ fi # Define the identity of the package. PACKAGE='openlitespeed' - VERSION='1.6.14' + VERSION='1.6.15' # Some tools Automake needs. @@ -19624,7 +19624,7 @@ cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 # report actual input values of CONFIG_FILES etc. instead of their # values after options handling. ac_log=" -This file was extended by openlitespeed $as_me 1.6.14, which was +This file was extended by openlitespeed $as_me 1.6.15, which was generated by GNU Autoconf 2.69. Invocation command line was CONFIG_FILES = $CONFIG_FILES @@ -19691,7 +19691,7 @@ _ACEOF cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`" ac_cs_version="\\ -openlitespeed config.status 1.6.14 +openlitespeed config.status 1.6.15 configured by $0, generated by GNU Autoconf 2.69, with options \\"\$ac_cs_config\\" diff --git a/configure.ac b/configure.ac index 3b28af611..cef81d475 100644 --- a/configure.ac +++ b/configure.ac @@ -7,7 +7,7 @@ m4_include(ax_check_libudns.m4) m4_include(ax_check_ip2location.m4) dnl Process this file with autoconf to produce a configure script. -AC_INIT([openlitespeed],[1.6.14],[info@litespeedtech.com],[openlitespeed],[http://www.litespeedtech.com/]) +AC_INIT([openlitespeed],[1.6.15],[info@litespeedtech.com],[openlitespeed],[http://www.litespeedtech.com/]) AM_INIT_AUTOMAKE([1.0 foreign no-define subdir-objects]) diff --git a/dist/VERSION b/dist/VERSION index 5577648bd..7e84a7885 100644 --- a/dist/VERSION +++ b/dist/VERSION @@ -1 +1 @@ -1.6.14 +1.6.15 diff --git a/dist/admin/html.open/index.php b/dist/admin/html.open/index.php index e7bb9904c..4443d3b7e 100644 --- a/dist/admin/html.open/index.php +++ b/dist/admin/html.open/index.php @@ -44,7 +44,7 @@
- LiteSpeed WebAdmin Console © 2014-2019 + LiteSpeed WebAdmin Console © 2014-2020
-

Copyright © 2014-2019 LiteSpeed Technologies, Inc.

+

Copyright © 2014-2020 LiteSpeed Technologies, Inc.

%Qr zTxCT>06>7BBz6Hn{O@T)_rw3E{Kx+PBq}5<0ssK{{b*?a0|MYkR8Cg$M@#+T2>$~n z07g_%S>Q)2{o!gqaN4}s%9d56WdHzxe<(ob2YTKQ?{S9K`gT8>-Vbm5sSoq0hTdxE z;)D+XfS~+n+CL~qI!7)uu`{*)(VPGP&~yL*qR~gc8PQbV@y8bO|9t-E8y7%iYUOV7 zqy5;k^#A~>a#c9epJvATMgRcc&QDt`{{h%nWYFwK1OWIkemLF_h+%`k4b7~b+v~$*8vfK1l=_Kn@CW}S%a};5_1%8_3jgO9|33g11HIVjTO0pqbU*y; zr(P$aA+Lm;t>aI;BG^B?<)=-zJ>}MQI|t(*ThWCd4fO{cThaO20H7Z$m>>L?fd9u1 z|Cj%#|N1F``(FvbZ4GCH8JHgk;J167gloMT6P8vH*qg6 z0(0F0=+p1e8Q<|Wpa;hE@7oRw$geMM4jCQo|GX|MnHg0!+a+W|g^c7`PKM=nTQk%% zF*jY%*E81B%Nnwn?Cm9o&r73aD5US+)ic;LF)=hT);BOP*VB_T)ziBHH-H7lr*ndF zF|pH=d-+b0{>p(AgchY$3<3t(_lm`i;67);FY4`u0a(+*-UEK()|w!I0kX#kzJ2~e zA<{Q7d1}ukqL=3@BvVd&uP+$q7SnV&|$XS)>-NrZ=?B(DmXMNYM#rU>>O(rCH0&H{*Pja+Cv3&VGxm?4O*q zi;7~H-qko#xi#_7&2&^F&L_DvJ&JSM9v^ZY5{t5rYMC%3g+&^Zd!LFcGPDdi8*1CV z!=1qY0s!vUrFVb&1X&-!^u}-#oLJJokQn5bUY#j|aq3X-%{Odl2>y52$M;|_K;heT z{Co5J?VISRR_5Pe)cKw|LG>IM-N_y;57$1J5_&eo! z-O)d?7H;PkI5wH43}wMGZnIjOnw)O>c+w|A-#a!i&MPJ$?;F}iE!jf&RB5=+cR1e< zKU%8RXmvZ?_NUF4$RtaO#zdmP4`5xL54=M^NqXL`N^vkVvCV9o+N&Uq65+jv=OYa6 z2x`%$1o3W^CQ0&uB8IEsbH9n^>aZdVk`wy>3|dSdqK8r2Q)1C_^Mgn72HNtfa~3e@ zmkP-2UIb(O0iFfIuMOtApyaUua(4x-6fP;{c8y)b8+pN3#KqABtKwgai&AZa@lwfy zRN`(ZEJ!{Nq^tqX3q9#-R7oZHZ-qXc0rQM=HSE<`$&v-F5Ej7(%E(9%6>LTV;m+C| z>nP%<+3oZ7s|rqpEx?qwoJj8mcgo(~3fl&|ptym*ao;a;^f_MtBWzHcXpZSaFfJb4!jH?5~nC) z@ib*fOCAJmZ#vPnBIn~Uzbw`|KIpl?JWq8}&;9|=M?@CL(cIB-*$|jEc@t(TXx_=a zsy#nrv1;aO7W&0vYNUy7HMVN7RfbHU5odDcoCX4&Ztjwn?FmZLWFqtDf;PI^PZno8 zvaU^N{m~y6W~KGmcLc1d1;0A;S5#FmPrWue8(l!)+POW%8rEgLRaNYa&jm+#Xupm< z7QC|cn@_oX5$tY2@ncg`wqZAhyRx940uG6#n zk4JWMEe@O3o^UFSE4N*W?G4J^icv_DkP$tRt6E3+FR_2nrtjFC)BWizJZeSMShq=9 z>I2I}reMO2q=ozW=yO4Wu@wZkj5r)mA%@9BOdSlgBS(5xCh|Hgf1RLyiE=;X`~sOX z56J@?RH7#-Jbd_TWQL3njFjt;R`TKvBM>#VdQ**x=Qp^-QrUrLF&0|hmqP7&zWoHYtHA+z;rzmi+Ie;*g zdBUY?YF*oQ%tFthVfkVD(fHp5DhBT#jBT_Q`SqNH`!YLiDo0EXQ~sH9EbFigj~r1R zDj3vB0Dp9(4eoDGQIF$f(BE!$Zq&CbNBz-vNM&my!nlXAFi+$wfUG(ZYbY#?>}uGj zUt+TA0gCM2*qhWVqZwXxn6NN(;hYVX5sDO+^3AwyU-}FxT2q_XJ4&M4WT0i-De7!Y zX}C*Hu!FTmbVy-LKCw=1MyKlgXhA$W{{F3WfIjfZS76_D>-%s`0m`4qAJXaI=s zZved8TBHYrm(pVMmxkxH;*k{hJQ)FT0s#~~AHEd5@E@Slc~lUy%FCjtKpgN zf&Ko=uXj%|#4ffi8ugbUZc?~&=w@&!V)>ZhemcaT2z<5EYI2t3g@U7aj6C@@UX8tb z5r7tr>_xiS*5Zm85n1Z89ARmtEOY` zMG&AO7q3@c>SrS23)G+^t7OR7T*9~xezLMVtsZt8Em2)NzjR%7T~{yCshM6V({4Fe z=oMrZ?^VTgR#ielhsUGor=BDDed)!L1s7^M@9LT>pmnNBLQ-Z*lwB)3xKCd*SL-fZ z=Kd!}krnTiseZ4=An8obcb8dBgX zA6Gz=ZCX-qRTDLFE^DoM39pPfUFWx{yhu5bqKpOqcHs~=txCME&i9MYzAm&_&Fj?U zMp$^*@T>`uBHcgYT4_>8{Z?4w{vKN5^Q&|#B=L!sk~Zq?1Bj%D@A*CHYp<*lrt8a( zW}u()YsqXpIxE)mg;hbAi*g9c+2KVbb>mOJT*^ zDh5gF!J@70_33cST9YcN>e!NNzaOkcho_8;wsBjgnMF4v#m0nXB$68Ju_<(V5y=m;pVj$ZF>>d}}sI;l-@uc5DOlM>Bl`iMbatxF**a9357@4SvL8sr?b4-$*bGS%UxDAxGq8gCMN_b40i;<^ngE_ zqAaF4S`@IUY9y_$yV^~6dv@Y3vEYy+V7ZPI6V5a^|8+NS|1vmipswzlR-TL_dq zDKV)a@TJq|Pjf?MT3;GBiuH|N+x5u1B=D8HQv+cJ@WHMsO@%_ zE7f%Sck*2nHx?4^#zEng$p@5`yB36IP6 zukgAT!!4nG3sjoyEvQdtX&|CB< zFXS)cuYOXGI6g;{O#EirVGZA?90j1HGKq8`cnAB-x(kueWy#}|Lij=wo zjTOjg?2J*Skhf95AHTl9irQ|sA4TiFRN-bS<9oio*w6oZ8JE0e@tH1KQKGZP{s$5y zZWkcD5~26k(GU@uj#S(QOIfLi9!{o7tx8F>+_j8xF=e63BE&*I&&{p;Njh~CHQ0Uj z_#u?$Ed!TC(GIo7@&NY5fk?bC+a48PYcfV31uhWgjS@!rFAz$`OeokLFfghsJK9Qc zWOpu$*UCtYPf+$WkUj>Gg3NFK09w*s6hN=Beb8S1gRY0fK)3!2h5xV!pBk~+g@GF; z3gmEQzaKx7;C_AFc}YV)m$YgGOmR7**e?VDfKgnU_@)8NFR{>CAqsmzV`J5Te#m&? zv1of@QH_jp0pR5y&e?$$7jeKbXi;Uo@!g+hVBueZkjcemz z)KP(rPk((6@5kY84ZQcKq``W*Dof8z|If=S2GJA28|k_eEE!Pl46kOKY{`pe9ArRo^+V|39Ayw7_LHe%xl*E&Lm$yI)tXu5f`Q&u z;L1sz;-e62g3HgPom4X*+-i8SJ+AT6+nlR+#?j=>y65oqBAJFgavQ<__$be>&|bp z*w-kH(CpibBMQ!_X-8T#&%T3RR%2T(EJtea7M7T&buixT*yZy6eihZxneI6x<49(@ z#BBcF&biinnOy6le#TpD)7;ph@4sEs*tVU(kL=LlAAIaB+i%GpeEq=AuN=(6YV#k4MIN@YCA4wcS z=J?Zv8ZE6;{%rAr3xponJ z!<3h3qYr*QcEXix>k3kyZvrwF_HPcJW3x!Bm;WvoDOLFvpsN~HX@Rt|SEPrQs#t6| zIr+3lnjezWKWr8RJsc=l-FqTE<~gnXhVPSDxgRzLCWE|W44fOz~)i#2T#bfqQN@sP?N3j)Q9d2kbw&=EkR=J{t1PjU1UhL3nBaAuA*!e1-xxePh%lq|2gtysC1kKvjYBnip7(!dL_yOqgHWX-n`jMUvh6^?R3Qfh}$Eb!~QyvL!4+Tiv)7pNOv^bC_}Y;TqC}uu`VX%EL{>; ziG|BcFyJ(oWX*wHmIk&oql!LwqBo0lX>3Y*IyF?Q+#TVdMjL5gRWkbX*otbhf=yA$ zU1h!KVu_Pp3B|w~iCW?>!Dye>k?FG5XAqd!K;s0iI4tGRjRZ{=`)M8lnILC~*o2Sgw^|LNrf-(bmUtR(R20ZRTrs3nwN{A*r5CKO z_Ut?^0e0u%u(m&&if8~f_S!`gYtJS*hm$G$`c*K${qJ91(lU9^Lu20q{G4Te6o}hb zjwY9_SbE=T4&T$yM|hS4ZO$5>P2Y!By_L2)$@&_})9cQ4w83+TEiKpOg1CU-Zg$)1 z&eqTHydmS;W=b5d8uojHyg2Yt$-*SLU-V|-kN^C5+aN}_7(8w8YCF2P-$&7Pa?OrA zw1oY`f32xTn7djk%}d;cx2Ir?cc~o|rGmn?P)06m=d-Jq+F2|iV~+F z=0Nug2)-PM!JU}onAj)^yK|Ws>fDWgybwcEYB1?v<>%;n+Ex3`%+$@J-N~|g59Mq| zI%D8;KYqDxA5Y(E@(yE?@eC4F$aec)N|$U@zm?tVkb3s)gpk7YSWG^lyW*qWb#IPn ze_mG9=*N_79XZ0^Qh%)Ceu}d0P|0`s$$B-1_w?svzd|+}5IdIm$GjMD7D?y&fqbD% z=*LUPK^3tmQR7q6lteM0TJDwGE9J|vD!C}Qs8YdT2Yro@iwriH75vId^SbS#C_Dm2 z>Yyn@I$zHdGlA0|3u-(a95O<&&-T46<;bnoT*)Cx9faZ^Wg*R_s-PqqI5k!|Qc7i; zf^5^u`^_I|hT3=nY8vdeAFL;heeyjAGe5%5?xTB*f`WLANFe|dL6cF?(cb~aB*Wvo zCFy(IgR@)b(rLF`aecjuSCG2wmeA<(Ioy#9aTs|RbNLd4#!ct>v>ne%jMr;%0SoDi zsO{BN3dMUc(z&p!jANkVC>TW!T%m>2;)2F+s!E5%M=Z#J{+5whbucgS1>y@b&A*61Bpyc`o$l`u>c5&>`#2w9oe0yL^nuIqfn)Sl zZg|bEdR~eXwP-v!*SnUlXTJm#Flu$B4kipYm4=C-3B~jpDjGR-D)Y-F(xv1XC>N|W zdTigXch3=THLN(_jjarXJvps$C0)qg!x92BMnM2><>AwV3IpL~H_XEHOAtU*2gL#` zOH314;fMolkVxlk{R7|&+HaDaIcckV!pdtd`RUU^jnk5o_W^Tite{gCFVy}?E5sq2 z#Yp4rZ(c{Mk-PMNiboDHgqshd53ZKi*U{treWhtitc)GfZZx%p(i37_#-zp`v@nuU z3;BkY+I*iksQOER{B2!3;ta`DA|*bnu#tSv{qGGox%K2p#G5&=T{?t|b#gSxe#ce) za`v-wv*@Q(;kciiw8J3s$=Rh3x801*MJ$XOgHyKF6f;U2m5pvH8~dEgUH|rQ=&JP* zh?iArC_cC4tvhAX5uMaoAv+T6z@e(I{P|^Bs%&41f~wDB{W)3nxoPK9wz5TJhzzZ) zsma-;&>We(vAvO6ig@Is(GY3_YGCpfu-()t9Yi8XXLJi2ritMU7p6G9${8YNa$k3D zX%3`IrLkbsjUk$kQCIh9gbXe(f(jCxeL(h_V$}1Jb;~B(n7YdrA&a8*gr*xU&4%zD zB=|b6#A=vi64jCCOEmzLz5!J4*#5}cn67^&u8 z6Q|HKSGqrCQOoCq>{5KK45ulMiiYInPQeV(A(h}fky-v33jb9#`h zkKs`J`nsI%`vw2Y69pA~LhwvaJ8T99-9Va{Xfct`k)>;kk#FLV>3Ev2Hl-rR;2gPN zEH+{WMyWw5#5INIHumxURJn2(G8C7xab5*kn))YsQLFQ_;;paA(Tl`|7k}Z7y8x% zrUuDxjF)y*5F8B_pHj;nsdvkssT09lB|Hlcb#|(Yz7m+_ncZJf9>3^u6lt^+Kh=Re z7ASK|`HkTmcH>P5|8i{D^R73oN+@}b^Z`A|A*?I4(DnVf%vrWdHi)iimK~Ude6NrX zEHR0|%TgiXFK;M;oZ)%og*Fu08dOVdI+PIqu9<*?Z113$?82IX(=eJ8f~7}#FoLhNxzd5 zHqo7{7}*#jDVX`Tio2^C=wsf*=hE$GgOF7Xa3(9((^;^k9n7q=+IV!p`%{_f z`X`OBAOKBSB&_g3X8A)()}%0rbyuPrt>TsRbue_lCdWNl3W0p6A&bNlwAD3kbmgE& zQQhPKeLD!J#}C*cemn%TlTr(g$P}r*aaHe+nd# zn|dY&*^SwoL9WC(678IbPaz@#o*tf}GF%{70DZ(Hh8pv$P0(IsR#qUmNaTB<{A^LF z$5<)sZV00ZtO4G#E&0;BO*y@XTgFMWqgp|4eTW=S*GzH}>bUY^Y{=0u;>~J1d^D%^ zDvLo8O9s3bkE-&dx`t^2kH{YRXgrfV65(Ng|KbJZYZce?hPMRH$y>xuEXVzQGqJ>PzY5lF zH|txhlHdS)cO}3gFW4MszkO$T!o#&so5nc&>9|}C>v;Y9c*sj>#=q;m2?g)dWczkb zUmjqfX2jwj1yK)cRjFQY1$ELcJX1ae^vjIr=JyJlfU^C_YTfC@Cdro{`^qU|U0Ipt zA8-bmz?3M%@d#Tj_d2Q;Z3G3|@1vbvK?v2V;kt8G8dK@1{i{x}Yfc}tF%g)2SjL;o zCFBtIF$mFz!LP)ahg!ZN=rlX?N_-u%A z_PjIj@zZPn(O8?Gba7if5?Zv(hd-Y1i`#k+GH*hbX2^6ZomHQ;thIfdDVk>;#GldH zfbS>e0e?YE;VSNiRLke{jAvj0G{7pQX&^lKaQ&rDjQ}LrpD^k|o(gj4idpwAoyu^} zEK+S~Sp~CVZO0PHIXS*K1$j8*EKW+d&Nr0EtvbVhb4yEnf}fA7gfq6tKyR1s?$Y00 z%nj@hy$ObX0=8Gi^}Xc?`EpRMBQ#CMIU{e+C;RMVL6gYiR|L8UhF}scNTw_K$N3EZ82dDa-ak7I4S5(jwz9e zv5Zfa33AvE|7=A9kG!R=U+KEvI$Qyvpq>#SP?_kD`Z7tYNT;{7dfBdUIQQMfY9z&bsS|mX!1EqB;|P#By5!-6Y8CW zxS!o&PTTZ(o--XL&eo-CpCx>rdWFZ4V$UHQ&Y_)te?j4468uZGzvtLAL9`n@E9=!< zOr*;&O#&Tn|1(dh5xa%j==L!gTqc+M&Q4tcscVFf%0Rl54-(m%x{5l} zALiT&51CYrzFkPza850>l60u8@_*GiB0KP)sLUNc{KPxFumWc?zW#k{yC{JP?=m_i zawd8VucO^HzMso;&R%25%F~{#%*rh{ENy0A6P<#wFSZ~1$%Z&9b;ol5%4A_OgHl)= zO{LHtH7{H=(VAxMqJ<&U9oHBSVG;(p`$xXhgo_?}2to4?PX{p7-AYRkn6xTic4qRt zLu_I$f>|E)uF-SYy3x_MJdTr-Wf82uU&rclx<6QwI1fT^ zW{gjOI)?Ji2dmbZYdM&6Rw1=!PUV-om|jXO2@{$n&$!Xyv%4*v5{k7R*eo3)7vQVt z>yM%`YCwZX`xdGDWd>*FR7M>F58!G$af_4DFkZBjq)Vn&n;K8(vozXs;ZMi?bri*0 zKHj@zuXH+}R*RmwzBaaL*4n-f|GH0e*-Zy%>SQ}!3#YQbmqiS-M#r$q&|ulUzN~5D zb=N-jC$~?mQ%ch2=$-g0hKy3r;otQ6skxR+?aPOipHl6(vRTPQte;jRJ&^G$A77*s zo|@IZxCWy=A5Iq7_vwR+r-(|w?mq5sAqJL`#pab4Gg3Q3?qoszBMCU_q~-2n%X2cj9&^J9Ad?G(^uAOFJ($1<_aa%!4G$_nUdz zEm@wgrElCZ8`Ng@{Yj`By5Cxn)sV6Abprc`Z(EdzuT4RvAq?hOiLcHSKyJQZ(~ujg z%oG_veu633M$uPbe7J{+ey@Lt!O@bTr52Ru!Xt$-=JAsLUJ@Tj)&i0{>K3aK`pB3^ zs)FwkI8@ajbyF4|sE*wYlQ&3V7$AqZkbV!<}8fRW>{i8}Xa5* z(zWTJ?%?IxlBQRRLA^Cn4vue|2{CM#LFunJC^Ka)F{O%nu0Rz`R{7%dw%Kjt&#kd| z+v8`cp@`dnFfR@s2OQnL6lvn2!J!E|(YulZ+>dzEbc;;SC~ms%5VArIgn)En7XedD z0yL$*)0y?XV%xuINhfE8Nc9LX4Jrc9poCS z?rG9OU9rBKPw1cw7lmI3K@7SL71yb<1F>^gjY-Pc+8q&N!mNB zsIG+)OKh5=sC@^_F~r?gbLCKZ$i2Z~ZaL0RE`NV5Rw3JM1h%v^YGY1Y;R$|!oB(6D zCoso0&$0nW9H^Y8+j~9hUO$y>b=ZLLN!g_}j^-^`@sTHC04|q|S@`5tQ!!Yi;BY>H z5Xyy6V#3MWvE=2hziSS-cJeuz!F^1Qk}o}5>T01os3`G~K>bk>hnm3UD?=CVG^JmQdYK-AGJ-QRFT-YvnE0v+$alYj13 zFHBE;fmYzn%>+f=&*KlN-_<6N3+MkvI9=4wIG0AA9#U$Itnh?)m0BeTp@3F?)lj(| z&;)`$sj)m`>*L-RKVHPSykiTV%uIE+HRG%2W|3nDwhqBX(31blrn6qsScpUAMy3Lc zk3KCDB{8;Iv~V61t86RyJAo1PNQd^OpUSEKYeLtKz{_Y%28QfC?HHD<^z;Ab2o{~#brF#@)vD;ypNVe zUBI3^K7_}Ky+bl&aMreZ-L4qJ%)^1v|J!q%a6MvEi;m*LaU zdONp_;;?OE2ue)rxvd;jRZU)D=*jQ42op(P;9A6s}P#GJ7tHqorL8-95kW1XFxzaL$! zF0M%EPDHu(Jltu!_Ix1ucxvts13fP6;89oD-aLlH~9Z9H5Gg z77-;XlIU!ZJce+bqvmMr&AqDbqQdQx_Q-J}I`8yR;^0}wMQ7OFGKfXfZ)M`weApc* z2z#R6X2|wHd+pC-#hB}}^s|da?Fs!xlMCm(-jGAE>-e;tycJYR;i~r|;G%`c z*2cIWEWqU836*?GnX+l5H}+T}ca5F6FFz zcu7x{9FtyGy)G_+Ortb6W^Qv?&IpPUArEjq#bof`*{sDT^_XehYwy-!X0OG0hol?_ zYntMvFIw^+WK(xfQY4cHLIL%wP&XqtIrv?XAA`VYU&5A5=rQG4#8KV7LSDi&}75K>p&)iFd=$%FbsGop|qRSLFWR1Hhw8ZfPgBL(1>DFa268aGfi z<-Ju0$!);KXEc7JR(wQFl*u`8+l9^lLq&b69Z|z^SpSUS`sjVpG@16?-3ytf)s1EE z`pmvB-Bmt(PW0M|T0R6RIgiN;Xl6;=eya33O%Xj@UT@W><-YgQyc+DJ{eBrv+RL~* zu)dHz0IA7N%5mFwR&uSD_GyrQtr#eMwv8UE0SdN2>K%C5=0^fe4DALgDk5nE>q{2$ zF5wC6+Xcc$>Koj{#fkP||$7F%ZM-u^Qj|jFG}*w(9Ta zyQj{XU=)R^w9IUELLIBX;O(+G!p2GA^f1a9_wkK|z`fSwadb#U2L}#@tR!(ippffq zb>Af>#F$KFJbTPk-=R`z$B^ZRq@Y|%>#rV!bwCaYWmqhM{FOA}(B_3WCF~6`e#iH! zd?8xZb~kXhq~#Rzye64c+hB*b0mp^%cbC*jws-H!{EEv%Q;$38Ahd(UT<@I34$#=)J~Q%NleLzV}OysWtL$1wp3 z$U&N{jPk$Mh>7{nBGCMA}d7 zNra^nWQHCHv=#seK&bAYdg!sE#O2{|r(;>&z?PP*eX&Q9P&JPNZ@Z zSjHz|WhCJNi}WD_(iy$r&-_PUO;JsXPT$^1bK!8R0OHd?lgrQk_&`5P9^-B=sJ-KL zsXORMro!WEwS9#8yybI#cQ|p~T4Jv=u<|%@XY1Q&4DH(H;iIsH++zEiuFmT%D5HEt z7K7VK>oGJKRhvjDNHG%8ri+I_V2B}0D*zu{-tv%idKfq4D0-(G^L`yz^R^EP5c(QQ zHQD|f<%uyP-GZQ{FJVuNC9TXjON!dEMK!;c`p?F21IHe5HNI`PmwOtdWladPMb%EFp@ zO_`JDT6TAj+>7p#KO_9edWP1r$(G!X)_E810(t! z&cx5y3!y52p5k7VNbDqjDutz0u~2@rTUG3|M@uQEtE7u~TxyWUwL1IcK4ndGW@Qe? z0mW-zT0}NPuXGjJkP#?M0-)z%aUEP&P|C6xUT%uFp7ZhHBO70}diY?0Usr=xv zdFkxsdvmuB0_;rt7SBa901S~B;JT=N2$IHFM@$ciFE<-Qxq$8AD`!#$C1rd>vaXT0 z)AhSpn$y*`%{L};+spB&|1V?Pk!UvO%YuJF2ws6a-6jq-wO?LzDyZ-e?4 zB>(Yn>lF#%G$XjA4-nrt2^z4+a$mU`2@#>1^a>qRI;F8G;sh*so)d9X5sw*oo~((p zyI1pna4GS7_p2cOmG(_QVFa^%L4K>UYGz>dh<{IPiUx6D*XGL9qXqLURd8u=7^|x5 zKk8sD(SsN>aI3$jGPp&zQE{&(V$^-oET1>IOm^<*Et{X8qAA39pC?1X6f*=8ilrO! zwH664E|lDLZ&fnExYaI$ow7v{XShR1c%U5wm*dQWNtFrPIKz-*izNz4CES?96no2% zD8i6vr1KF!l=|&5^>~rnNE3?3GC_GSjJS7+X0uNcfnM-17?1t_?lSc4=IZc9fSvO3 z!^Vl%-_w-zNr}sYFeubxK_Ou(Q;Li2TzZ7;l$N7H)|(ZU2frmAxklO6UnyLQMQM}p z7v5G#SjBzk6^Q-&sD!d5hURqHu^WNnIzF>5wJsLm8HrViyoGOcX&ICGi(A|@0SrJ? zF#s}yFC!+h+{~WEK~S zGDIs#MY*yB@1UUw1Cg;)xK5WupxC!+2@f2kFi2<>-yrKI3>P5`&(yKSQm!C_N&18W zYz&bu=Ng$rTIxCUqQaA1Z|C@tDKdCw2b1rU{kGGLRJd|0&)aX+;Jo6s`al&L(QVN1 zm96}W^f#hj5VbZ|!@$bh6k{roQYM_q8iZmilQ8$r2Vp;-HeJJbBdm(O)#Z0Cm_VCUEh9|bNas#T7x0NZ;Gqr$nlHWL%y z$``&^z0XdV24(;kS;_23OoEFJ#>~${eRs7Rivd5Sg)THMA};*v!dABKd7 zyRNkIX2dU|*T*j~ROuQf>yw)eXYoAZn(Qq<-j4Hr=6t82@cQI?voHbi>J1*fk#iJL zD$l1g-eZc=La#6Ne{`BWE30J=?v*(b`QF;)(cq$$=F^O}cmWWp1sH zJ;S=!7xr&e_h*K$3B+!ou06$kkq+B3LnI@BurMEsP@xQc;Ey+JMHJL~L$bH&YpH82 z?zku1MPFsr)B4^d4A`oxca<8S?Ua}I^|U%p_+!@eJnWfgug{=VPj=_&iEWKy-iKWI zu*|daR_N_^W~fAE*5;e^PJR{5zb#L9)*PN8T&afWY|O2eDX0qgJ@w6;ytTvdr6s7d zEG1}@fSSn|9(Hw5^4@||(n^sZ)0!QYz}4M-4BpLaxbIi=ns|jmX>|!gis2auN*wt4-K`wa%2%vr&eS}__?Q0utpQ^YY*}K4yAlTpKlo& z>a37cD6L27kd&A{YA~;jmkoy=8tJ%1nz!2XSiwCknhU#8bQNmvsF45`2U=vu9m&pf z5{SdU;(nEF2+7*+e&30?L|19yX(YR!As7tFp!q(!j7CWJy1#@bMdniNS^0Y@) zC-S`-NN{CG+-Q2co#I?~l4rQQbUpO-p;w`i`ByO^UNw)vd`Ia%8_{!pp_D)R>r;5$ zv9;V%9(BGc($|37oyhW-Af_Q(BH~eL`R<58C3{u-HSD|oE;GpCt5IdkP5E*J%Yb|H zl>ks~s_G_=6LmLb#YD*C67>o=S!W9~c~w;I$4)xog7A~JM0qaZ4FHB@F=g1M9IErx6kGnD+$BHIe`PhKWGVKNTNJ4!*N>Q|zeJL>eYCPk(?k@6b zTowaq8A;`z?##HX_w;yR*kMW2ok$>ufJ0;2RuD1GsI@U7A*&P|{DQqp2UzIeLgJ1> zu}dr(P?|C3rKZ)P(=bUo5sLv}BrRa_w1U7=LTmnv{MQ1Hqk76e2HA|pG_>N7d$mFe zQ#-ZhHD(6pBOT>wc|3cjgoq0qh9dUYTR4&hv!nv&cR}`BF`HLJ2Koq4`2+}Cry>`r>3dd#;Bf*2*cvK|@;&ju z^wU-88qBWt@5qZQyq^T)gC7O?`w78QBh%$}lMf`Hsu!*KJM@mriH$rjHTM-aW9{EQ zZ+Cam1aTEvS$~v!-&_MYc(RT5MYC9zDQvT+#ub02l)nDqDb(SIc~$3Z{=bRbVraFX z3~l{*kC2#E)CEM0eK!o9u!|wD7NweedLkvz%xv8edimbI(ZJ)&|EH0qxlz3W9Zf}{YXw!Ge8l6)`ri{k8 zA4_Z75q+2IK&LNPqFI|{b=X?H5T&nQk&4937_*`iW<)Y9pfoNvc!^(Ay>xge@l;G_ zjAy5#OiS2N`!emqgzBL;t}b}QfdUCAs578ZC57nFTg#AWZ_xFKD990hR?*2Wkp%_Y z#FCJiz%x4nnGjdy-7rl?=e2uG2`O=+iTI5tKEf`nm~`WEV%i?pX9yDGW0%sI)#m%6 z2)UiX5FB8h_2JSjJYG)EkDHooUbhb>SG{F@%B`2w`)tmoZFIv~pE{s6)S2fATFjFO zK|I~h=M+5M*Xtx!8TlP_gz=)S2@(Ooqy(`nnZqC-PBeI&8udbi`4WFO(%&XH)>!R(K}?og)Q^6%RU4kfimid}HS+^UE9NXT zpHP(YG@lwR|LR(k@zW@ar8V2I02HyP$?+Q=f$KYu#A#)SEn7gbx}~?EYdGd1wYj+%MrH+?mtlnb_{F%3ho>O( z_uwm(u=m60k(Wt`GUwVhSR_;XTN5zu9&kA`3ks=m9)gF`lB)DHU?A)tjAYQlqed?E z2nlGuDjJdEC2QMwOyL-i(1j7gVxpnZc6i%x-Q$e*T`U7p7>6q!#SJ+Z*smtTH-)gI}ci$`R;KS z06=#4ldMQSF~SEC1LTq=*@g1|ek9qA(<4=mbOgJ1|5jCJr%{kc>`SpEV_w+cYU01G zQlwmk6(xYSnw+o@+^)rGi|VYp7&R=((g%X6du~ndI_5vDT*_~lT+jT?f(+ys5dVM- zE0P_?IYmhShJoh@TKG~qd%va(pcAbLP?BwOL7fth%I?XQ{S6o!0lMK!20Mhpg1Uh; zq=x!c2i8pIk-gOWv+zsJ5uK%M<_F5>ombn-d_XGXn3h(YI|>@W3nUrDyb%<#oT-r5~%NITOre-kFcc&M-(Y&y~C4XIY<7YeX3#u7y2eN#drE^R!LUAe){e(~=WUh=uQUHdKb z0psg`U0Qvm7Ez)dd%VZW3AYm*?d9}+juXQ`bAd?{y6(>>!=|i_Ow_b#Rkgn?-fpha zJmv&b0u(D9fLEUz5cL@6#=`e-pWHfKku(h?_^Y~K^98*Rz=DAW7cRm*JV=Vr$A|3# zjR=Od=gu7=v2G>w5cg1uE>`Ak&w? zErK>s?=Y6r#iQ6^T4-27_QmZv`XrhLAsoI}cyF;x3a&ZEwuWGPlg>@%5IQEt{cCvi ztDXPQ`_FKSyDc_-VZDLbkX_%Z&ODDlmp5~don6jod)V{E#d3wU)%VBDX!ih`YSP#? ze0eDqysCJwg!EAli5Ba}Xj~>SW00961009}>GmuovUk^O> z00{^H00000$wCy{00000)ho=^`_=u~2_Fbz0000900IC200000c-muNWMJUv{kwvJ zfm8nX)qguV<$)ro;1K|tnFjU%c-n1~L$DY@6h&`Ozm9El6WdtDwr$(CZQHhO=W87s z+ZdDkI!^vnow{wDu8~_f2LO@^2#9%&jX?}1xx6ST^RO|_AoOzwF~Us4q#!@)lk(CP zUD?;i97V-o0a}`8SRWimdbSN9S4cn7n&c&O$OO`h4D<6ip48OxPi$+Hj+>VAZUIgZ zA@4EHZDw{Sth;NhpF@QC7*-W+&xnXP&)9y6nHl3`_mAWlX~{JUBLT;smeoMqoG2=_ z0Vz#Z@(#1GThGfZ%DtP~>fvWuZKg?iw3iDwY;R!*bBJ`rkf1X%OF`t9qd06Lu+>C_ ztL;5sJ{&h04r{yY)$vTuv6(slI2s1K>EkH2+noTc-iMj$E_09fbOR4!vueApB^1VTNzpi{d1=zsn^YcIDB} zyWWVrY_AzSLS@dc>RzKPNl0?jdv$dl8*v7OU-cdI4gSO(N5P-o|AprmqN(ox#JlGk z$##08=h%pI0qwo}j(za^D=oQi!tbz_kW=WpLG8x>fXOC)4yFojElP%L+C0m z89*`$P(L0qxslm(0TuQA6$@0f0iN;h>;1nFLlU7rsfxE>4|3n??iLdG{fi^BLg(oP zfLV@TUp%0pt{rD3JaUWU1QFpmoC)v4eFJtr>PP?pc-l3=1CSd5006+)Jll>_+qP}n zw%v|u+qP}nwr%ToO(v7{e|b|^v(-Gx{KL}MGSRZv^2*9vt61Axhgs)ZciXJCh^?*d zj2*Q%vLCX)ax{0Gc6ywJoGqNwoV#7LYq{&WyOevRd!PHKC+!*FS?9Ux4SN&bPTqyy z*S@%KgzuU^;jiQ$=HC$T2Z{zd1r`Jj2Ob1n!BntBuvPF_h!52aEeo5%1;aN00w@X$ z0d@nIz$DlLTmpWF%0dI7(=Y&+f_uT|5I<4@8H}7n9-?Wq&F|CDPgpr@6At1z@g4Y6 zq6M*;ctE{qU4 zF)HR3ON+I|Hez3KoH$EdBhgY!$|IGL>PT&*zS3Dak6cEsBe#+J%46lb@;k+=bXGpA znp#htuC7y$s?Ri^meiVRQ?*^%eeJ#WUAOC+URrOVKQrE=g5%Agvg>__0NFX009610OkOS02TmP00jU701yB#09*h70W|>R00RI4c-noC zHBv-T5JeB}q&Q5D6GDQ!Th6$~j;R(42 zZ608iVw(q<<+H`+9lqK;+&44AJU?w7WtrbL&+X(Co9a#6RL58N+h+2X-oL<;c2hu@NP+ui?6M5?&s zL*Fi2YKH^!k@F`~+uwC>_PO7Q=qk1U73li^^C%C1K+gaGc-m~i1FR5G006*ypV_u;+qP}ncFT4R*|u$S znRCmoc{Q^;5y0PGdikHXga{ELMTr(8RvdA~6JG)eC6ZVYNhOn93Mr+MS{iAklU@cH zWs+GIS!I)54mstLTON7klV3rF6jnr0#S~XUNu`ulMp@;QS3yOUR8~b*)l^qQO|{fk zM_u*Q*FZy!G}c5@%{13SORcolMqBN)*Fi^}bk;>zyKOSv3}>wL&P)rtRNZ@>Jp(H=KkvsX9WE!M*=JzaOxd%Zk#-vj&f_RSJcJn~o{ zAAL4QKYjH#&;Wz1H`q`^3^UwFBaAZI2V;yg)_4<5aNGuyO)|w)pL}uBQ~Mq8%xljb zbjVT1Tz1$ISIn|2M28q>opU%yL&;Sqy!Z=P6(ZgIT2+*o~k-9Oo%dPAAvpMkN^Y>|r0PEiKN0Lt#>h75I zr7qLS>1q!ZE)jYdO*aHq$@-8)mNGg3XD+6%@qt)H+>7A+W+#(5HzE8P6pTy&c-j<8 z#X*Bn41VcvcyNc{?(RhUTr1LV?iWJC{| z2zT)r|4>D|#WX6q2?WEq;4QH$65?N|r2_Va3{H{7#oF3&#U-WMAW#wq T2JO_k$41ziv zQD8MPuO<9$2M|!zzhO}X8wY~D`IVCY|6>A`F7R)$ve}h+IKEv6O_NVq^w;n}NuDn>Vi`&lOTH~6_ zU{ja~cGhteGFHXW|5`sxCxt9B^ayr$ZSxiG$iBvNj?maAx$u1L$M0O*eeZunqe_CR z+8B~*BqS0)C5A*}NY*roHkagY@89Rt-jih6K`U5LTYdG{ZbO@FTml)SICUYU8L23R z#xAhCKwcoVynEs+(9>eN=tVm173oAb570KlLS0!HjU7xIjADX%v?2y57Do4UR?Mhb z!cZxMKOYt_z>~1c zMjb5BJ%6XOcgeYYy1&K@DOz$iPvx|jUfTzXs@B$ZSK=A4wT)qL$ zVt_XwWqBvVzevVKD&-agWpI2M+B4+8r;Kx%u{Lu-5V`2%~K zes5cvjld=8 z#P+6^pbpES!;!%tE|378J+K})P4|kzRURae1~F!=))yCnMrcO@S(G_|4f3Gb*ZVGU z2rIjv0z0^86eyfO51TY5>TvYN1EH4|O&o=Ng|D1+tU7AN!d3kophbY#332gTmgVcm ztw0E%`KJ^bgv_o;iL*g0j{*YU5==nMh7AA#k%KM?*(&R=FLqdjJq{$Z$u9p`MuO2B zx}uMDZ#FBmhmJz0LB*g_P+6!VR1azlwPum5PexXj|L?yXGQn&dK+?<>H$_JPgp;O1 zMW7N7RTpaXr>%U=l|0UQgmO9yGpNZ7KZp0j%NO?#ZyxR*4(ivZTZcMTick-C4~D+L zvc~}|pejl`!k~jG#Ha~G#p!$tg48N`!a;9?iUpM3?ye)l)Xa146lCW;iR3IrEmkUj-f)J6z15&_PJv0Ur*WE3`+FP` z{qg33Xa>RE)Y3y;JjeF+KU8|ooT1)=V^R+`$@S9j;1!^1J?U3Lytmv!wb;T`QU#sdZaZlDrhzBT|C7ESQ*K09+X3l`g!X~PW zI_Cmwp*{yje~(Lo=k2I=b=VyhI*09X{Z&>NcLI_U!_?X=k#WYS$|N!Wz{yE)Ma=ZC zTH--#3tQLk#s?UQ-V&oolH^P-$ss8@T0uL3FJ#F4*>YQGX=Us9srO@THo56R>FMHp zs!TF{kn%m1NWer&8oA4W;Wur_3*oEJuSIctl7k<57@DPhiqLR5uPiX|V5?fxDp!Hg$b-Zf538E*5P3%z9)`4P^6(5T%P) zNF7vlcMI@TXF`q17RN(+tg^AZTM$vg`kjPCmhh?1-}zq1RSaoT?ebG| z2)7+E1;H;wmBoBXY>I+kiWwQA~gw+ur5$ilAx{clTwyeZA)VA}_qQI3}CkEuI_Q zV&J)txMAodA#s)=A>Rxn&@3SeawFCAnG7}XjL)~lzr`mDQ52G$_!W^#aI+(XhoJRt zN9PK$g&(OXe>N-O_I%_6<;T8{S}kKx51kOL)pSsuKXE*M3QPVKP~-mq?biZ`j{yiH z080}ffHH(WBSM5GMu-bK5xST`Em}T6eIR!aEXD;a8R>Y{5DXZ2GDNzy8Xl3P0Cpe3 z2r8^|mbzY`#$8Va94TBmjP+n9K&`_Yc*#g&xfW<^hZRMvB6B+sfB`G)Rg*#NlPIO3 z!a(Nyp0=J>owF>fg@ppTvwxblu2VP0k}NW6$?%TV&(`OP9tKmyA}5@TIM&G{I7XDH zI1Ys)4y8Ly2Cg`d4Ym`+X1n4PcvbgF+fGwethO!4*(v629}LxPv?%1rjQ+c(tci$` z*_asTo?6KT;O1^lRXnXjDwc!|fUB`*+}ToyZHhYNpa?f{UhzdZP#^YeDZXlsa`7>tuFd$8lG4hXl(tO03AVR#A`6b3b2LDLT^%U53NnNXg=QV z4mBRLZR}Gv;$X#Ftm%5-Hpop5X;#zruE1d zFutl~q=@l(>kix&3{lMGU}g+TYorgKuFU3Jtk3@U!<>l^Bui^Ryn4@pUTMr$m%l1v&T2^_NN%rIM#St;`C!_YT zwB3SUOUlZ^QXB`8r;@{xqoUDNbIKZ1gl&o&(H!9m95L0#p6$$^QGE6uv|u_8w>EHl zi#E4uqxE(jblZ<9a&((j@3vThj1|XUaDGp*6e^YrSV=~4)9Yg+&o349X69Ab>&UeZ z8DooM%krQQQJcgz9*nH5P|YZA&9fCrgJxyTfwkEug| zn)-$dM|f0S#2|!swB1j2*{)zYh0`d^|1#S2wxAfaJ*Ia5(i4iRpCINb{$?8I z=easc)U{iep9RcdCpi0O?-<(N{zTDqvR>v4kuI(lOKQu;x^n z5niP{c2#ZK%-}KG6dgCO47P5fF3m+3)`do!XnTv+LfY8G^;MkR#F1!HY08fHBiiSB zR<$CyB+3w#my*nbelBvy7q`2M+*^S(h2&{KY4tEZ>iJm+MKQ=A)lyH>kre-adXwO| z?lJA$3g7f)(*EPj%5q& zif9e(YYt^8Np%hDXyG&svi{s%;y8ZQ#@J{Seru~FOzfvI%vx1My#&u3xmwG?VCKy+8jm8CI(abQqt$%>0VUVL0NDav;pD+!e(;!FdDCjBi z31c$RmFRpMT@+=&`{&WK(51Nra?m!|6w9}Y5l~36O%9>xm?z&@iO<_Ux z2jK|$3DS6#9UeBH?#JAlIIfsS?&Z_RN9C^y@~Z#mwNlc(&h+Gu`b+WQ`Q`I#fk+n% zTX+t#WTvyFZnUMuzhHnFu()PwhwGM(@HGEYHo|>2XKu-jR08ybxzUWrJ(i}&?C zex73&OS>55R5H=Rnh7{LWrYMZViPJnC<&1P;pq`BwL4OXi#B)dc3FQ|#r1|Q&@-)y zkn--DW$DM-oVCkkogrG{8H;s`SB!?057g{PD@8-(D=X=c^nAsym;~FI_>uTT+mDzm zMgH_sx?-hx=&xa5cn}yo(Pf#2itk2|T;2~X9QmQgd~W}MCxBoJ>eT&zP()RMDJ#hI zljUGaSezcD{TKHB#k<7lLG9JoaLCn0|)}1k8*5;bg+m<)hkqNVA)*Q?}-W(|_zp$_poyvYe*G!+1+cQxj z3ce;dHgaWK=n#Bx6`*3&Zt9SqJ{@i=JFeSn^lWC{?W>IMD=%b>n1(oLTVieh2NE`( z%(&ROME#DUM18Q*z=GpG{jRrap5Nlq_pM?(M95Tx{CDnXt){Tn}(7jyoS*CLg%{qoJu z;VJ9RJ_y+V*?xU{wrgan&Ub)BuSAD(F#}bCZ59%3d;;Nd7s_MMV3yfOLi>d=-y9x-1MI^K;13IzoM-avL$6kPb6Q=Rt&e?mc`vz|wAMEUX z=UFX%P!%b+=iNAUcVeJ_q}6ADb=Wy`>W{TF=8JgS&k^?L>?AFGgntfLWK z(RQY0G3bY3$x3??;yzf09 z6{sTx2Xc|wRjDnspvsoHfsGHKh5QO-!Cfgo8$TC%`s=BM208iq8!ssW0%D_pDMM(6cLrM?W7RhlY`sx4cRiB{Bc_YCN)NvGB{+wy=h$?7${lnEdh$ z3we$k5#Kz{u3RXRWr%r5qfF0zVV3dy8JkS0?Wz<84~VvRRd1Yq^mPtQRkPfg%q=g! zopDR4Ack0l)aY~3`w}8x;-PD#LJ}OW(R3}a8Ol^prAMWy_VJN; z-5nCQYiPFb0h5TGdiwt~LD`KLv?T-3w2&5#h8u;3tRu#!^j-XJ@ypZm^X|sNcrcd`#>`a68O$MuQMUTbe^>g5>zG`|Px&+2ZLI6xp0tj2@3uZZ z)h8`HRs5B@4|8$so9!)~tJTM+ z0Ng8X?A*PBbH&EK4VGUz6uOXD_F@7}K+W zR-+!{-e7d0z9StJ_$Qu{o=+5<6_~@n<-|GuN=W=02#4>y`S1R%7caMOC|G`BhRDL0 zuCjtmhA`VR%%Mc60MfWY6*mXMLLh!h`2s{9yzvn~Rsb)mzzpPN8+a}13BmHB>B2cE z2v1u~7(eEx?lr-{b9Txt{OsyH$w?Ag4BJ#sZ!x&2wFsaL8i_l=Hh%}hL zhEzpflsfXeBP{ETj_0H!?CO~?Ly}b=2>i2;f&>*aq%`LjrYwv}msMa&=suq|C?Wr{ zk|t)KED9S-}tq=v%k7K}V@7;|l8aANt+Lz{uMm7&0C&gW+qVpDw+LtT_1*yk^$ zAUvlEdyx|!Fao!Dn>h#!q2>_T99XfOW?lnsv81`HPyX1$-dDcgU3=z10`IuwINARhj^>`8ed)}@a6u&W16oaJaGS&P zq>$`}n+t=;djn<|Eq%0>`^?Z(abcg(B z%UFLqMD_7`XA!D~)qwHjEBUFprFj_zmHFA}m6fS|^X+++Ws9RrPl;5P-Y5UF=X08R zO%U?Ki&phSsc>qjh9_KFMpHvh8m=J!*4YnlEnr$b2;zWJLBXGsTn2hYy1q_*p*>Zv z*xucn!7=snLoFGoBj>=XhN8wVpO7a4bf+nyEVZ*~Y&ps2mB8=bx|JtHDja}Rg4La` z5@{^KEtAXbof^t z)&f3U`Z+qvxx=HCZ}O9F;j41Cz_0KrPF4(?1F?|`Dr#8%T5!mf5Vl<-`y8-kShj59Mnrc-t`uUga`CTnZDs?fQ{dXIUZEG-mSFzkLMDY6JaNI zHH5|=33r^+jOPirT1TuiB6&(QBXG|N&l!4f-xpqfBH~_Pl~l^V7vEPZ@_*wRr@#Q1 zqmc~+-(;nS(lVz3j|X*Kx!}r}EbBT^x!z^_1)FmmOQ08( zqDJR%&0|mS_tQxyqd zq5Az5GnTvNF)TLzA0IxBR7lekl3OxwUvH^SKnH-13mGLBr7&5#^r?-{Cr4}FM>BGa z$P9yqb6bE%T^lIUrU|8`;`t2AfW!~wu-*agsBA4h9lKU*C5x-K$S=xm>C>nKoXk$| zRFnMj3wv{m804y&0CHYYuQH0{UsXX0HW0@8k{jy$$hpuoxax8CjhVdM>G`Z|oms2m%nO7u|=nA&*p@aEI+lQDsM@_?7RL7D&Bs=NF8#+v);y8FiR zJjs3c=C1qB0*SmlJgBKPG(4<1IHWZ^(4(O{c70HLa7YggWz!I`!(gI4LcCmQO}@>X z6gD-~C8RYWNE>P&X%PPW!D8LWMH@3SS3fElL12&Ih%+^Ck~X zWBfhq1}s|xas2x|P>%ximL7+?(aEH~<>1;5C&ySjnUmbOTl6kJpU^uc4GHjh(_-6F z5x$Ufz&Sy#(dNv)j^t#oXX^h9(z~vbGTq{m2>AE}cXCW3$u&AfF46&k{&t2Gg zBLk?QAQx>!v~P7{L2`(eC#BN3}E!mz31>cD2@BD=V(=|I@~G>lRlA zHJQO+S3y@7+?I$xVI1!#rVpmD@jg=F=Hxb9QAk2JdSXdvdsDM$r^L4Ef}}u=pYrHn ztx9S1_|4@WTctopkIdlD)~=GCUObwrPunD%YhU3RZjV&ZHv5xfwh-leOa_Inf}kKG z=ys>9!{2F)pm3JlzGO!;rFpn25UVIvj+AoaYO1+>#~nXw;dX-EAt znLg_rVi;WOc`mC@XRxJ&-3J$_`Vd5z3bGgE2Rp-!?UmGb9V`&){zzAE^#H5-Ydwt~ zjq>jT5egkzHsP^B0T@&q1DTBXh{2m8s18OBh6qn%_X28WSxa8Z43*ixGc|oSI4E^F<y; z#-#}dsk^!_bFHZ2c4DJR-0o7cpGeFfBZoE*;CONpb?2q!oh1waBV`8uT2=Qw)5=Zw) zaJWd%4Jn5;e_lhyNzHkYDn}Q-empQ^7cDjI?ov9s^iu?v;j5?$oBkW;$K6H&J9nU! z9Pn3RJs|dj%GOeg^CO5eWrCL7zPjO~(q1-^;$3Zk)25SCfeBRJ~eYn9mTB!F-S4C(Dba7sHOrZCHwO zfr0CvUmi|;@4JwaEyBFq*rrYk)`A6TFS>_KZTY6i?^w09z#?id}1H(eew#vG= zL9dtyFGk-pl$c0a7Ue~@L?X@2QLsdykS4gLFG01Jp2(x*@BUbYYM5B_;T^bx{gbiU zPC8}cza%xy?0Er4o(TUqMVEg784yf%)Eo#)WUZJVkq+?|RCTqGq*)uBAqewwFh@Rd zmwUivdBcSDgs6322ALSI^D3^El3o_-7kq}Z)+f8$@SV_i7_zsrx3)9aTm})01V9lRA>RDx1&h>cYo_! z3I`-nzSe_b%p=|Cmd|%SY2b7u@%{&j*$QgNTTaX5ngF3?LPD!ZhQ1AZXbEZItxjqM zMS;HS6bzWkt4Kq#vSceOo4i19C4N(TO({y!nVNwiLd&8MT4g@;ZJN!J-!wpKG!mg@ zK7>{&lS`&aw4`EMZ7LfLNJL~b%(x1w-V1vBQc&q`*IN&wHf(hZQnVA~h6@l>UKv#V z)m8czou;BR9K8-Lx8u-itCLGnXL7!jT%Im-QwEjK1XV|Z-u~KE8j%P=nTtW?6G7Dp zQb}?PD!;Hw=dXs}N9muT^nH{^5x&E^kx$+n_oUsSL793@h~Or}-aECRz7}x@h;{D= z7GbYO@6WeA{dY(e$eBmXKG9GBOGr5{Vl-X{UuhhwOxalSuTSs4v*&|o7S5~oqu-|> zVT}TWz#`4_0a`UgtW6ISKyfUXoR#7YqKfl%Y^J>+{#lIxSzHzzElFB~`1q)>tJq&x z27H3k_`fwKEl;A}st+_KAjpi!S|2nDY@HLlUjVBpGUAw6Hy5EigO~=fEXM+ay>G2A zDq=DB0m)v+0wMgSX$S`2fdLXjaml%DZ2C+UBu;#UH zKV-st=+vJ`Yir98W{@oF5caqNor*rIBp|y`qw8@rIuF%qR+uP`;y&;K{Ay zZZIwPSOjC_rhB(KzPLR)JUqdqttY&z!b~*VHLUsr>TmV#JH^rfZ)@ADt1MsWBXIy= zb*b3$#jBJaN;2@5yCycf(3ZvB&bL>NyKomb!xv^Fi3Ctq3kh#4A<7>DIujci< z@z?wV|6ABQtd~#%Lm+pw?fecUZVa$?294!(1i9&j4@k${H7S6SIxqO->6n^Z2p9qg z6NM@HSA@2YJjAMSsAPVD6x784*1Y4+oz0OBh$UOZJ(Vgg^wf+5=uJ_=mqAdciZ*pn z5|bVnfxCy0s>L{n0BX&vL(2iAVk-tKJ9>D4WmTnusYpcG7pZo4#~17hHC&+TW=5*+ z>UK#uRRg;6QY4LW;v9iCDJPL8#-U?g4vFva^uMNh&%#L`!;NHvfquC?O5s8SJ!~kDj0HU1CPe#lD zZ?t4er`ypQ&a(4w@bDlhotvHj?j`?gd33Za+Y3rT(-Zn|)5>wk3^03TUKq8iNA;|( z>n8C=Nn@kX1l4@pEhN3jPL`k*yXtKHJbjS9R?k&QuwGKL>ks$jd`2JwaD`4cctwob z8vf5&!xj}l9G&IWKOn#Z4I(ijyfS1Z&*C-w0RKh`wqLNH-*1-}wGrr|kFX&6KMDKqi4sUr)>Y2|KbDQh4Xn}CkcfDVBmyTtF@L;T=) z*k4nL10Wkx%FSHsh6feA)qet?@zXLDRS?u8L5~N}+y{Vj9v%=;-ade)535Q-$`TPl zpj4+@T}a#|DWOP36>imp!+zMsWOh*k#HC@@hqi*2T>>e${)GwTP^8u3ftb)B$i1Bo zfYnf;yMCSsWQF+@q>E^7t=6ct$-N6y&}`H|S5UwOH6u3ALldGaL{&2wEk@Ry&_+4o zvTPs4d;$*pTITnWl)Bg-rowNl5=bJdut^oYr@U=8$*BTWV6+ygR+wj$bO$a1*34(a zq`6N*N!&O02zvsXHzuDvL~Gnvy5vbDh#^?6ye}0rxMz~{WR*NRX{6Sugb9lWpe?`z z$;U(h4A5^~JoFL3&NKSuZZyO^Zyu0S^xFvwz$s1p00@#&bese--C+iP1N0#Q$}hsV zM4932U5H$@aC{&0y%;#4uygg6>;z1X0ES)51*}1tz%CR+meQtGlH*XeY&f8DXKmP| z649lJBkto`fM=?f?P4+|hQOkpveQs-j*xl%%WsVUl45WRYLp@f8VQ@#aepN_6dnRw zW==nJ_6$Ms@mH%$;?rS03&TT-yE_3a@#rol zK97S;r7V!=c0+Dia}F!g-n#A>=nuOvL3J>u6uO=%&!IwDpg0FCA8z37Oj)o7Ch z$!9DJ9`&7@TX5%q)*19OhiJ%o+&L$w6B;)#NDp78B=rN4P$n1HsAUyJL~+F7po%t3 zHLil>un1h2P1kaArG5Mk1)XIg2qcju?F!5zyCDKW+hk-TGnRxr8H`rn^t^w&?Bnr| z=;`)xdRP-W*W+#e^N;R{!NN?Xu)ppC;?sE5u#(yKz$|`)F|us$r+3-22SMsRFvU@- zXxZdg<%X=z;@I-6<1JQ@g-plpaU+Xd%hAzu&MJVom=F1=B_2HppVK4u_URx+Idp7C z!TR$06n=7*S2~<5V_!l}3@vMydIxy}hP!>$e0jfJMxCgIVLHdGEOx1$ zl#4M;U-QBNSfN)XCDkUBaK)?MSnH&l;r3RWxyl=eV@~6Jd~Q@(SoLlW;*8JnPpS*h zGfaKuVUj-0V%a;tVXQJ-($u$!7BdJqG^%*?DvMS|KF-XkG>kZz`ObxIGQ|j5J7Dj` zO5?|nZIn;zh%2-i#o`L7YdOW3E+^6fPrV-V#$=Rqb5$(hIz`KvQka}pkb7DLV+0nN5$iy)q5HsT5$RZ1 z!qKTL)sasoT6jqB$A08VH zkaFDS3D)WdCk^-#cl5Fdw?towk~awjOTd%?VO!Sln2MAcyXR&3*-#?v6$6PQZE9MD z(A#`YVixf}C!x~1;YWBU8R6XnncoQ2D33(~U}TBTN3~Kpk4Pt%*28ZV>|tX%J|KD+ z06O_8t}u&Q6P}IAtZZ>IrdgJzaoa?3gH|T-h^zETG`#}P`gMP`L&g8f}E=S7t7>FZ=|+tVkyB- z#O#^eFtTQ zzHa*Sj=dLLc)W)d@*h6|fgikjCAx?J0}neFq_vCVsn0bx|*=rUg! zwz3tw%Imz5*W?5F8|!5mpyAU*Y^HgXu-5{EbtAUpHb#Me*N999n6xu)>;f@?w?1&* z`I0ctReZ$Uw_sxUE%rQ*LE%uDl_YUN3OD_yR~alN;I0UQGM2QiWO5!9WHLYFH1us$ zv#f^bJVOxuavQVkkzC0$!DwmoAkV|WbgaY6IVigdt_ep+c6SHh&k>;-g`jZw+oCL0 zQ>Rs|Yxcc~ma?_URq`oDG9`H=?Jf z^DYeM;nw_q%u5DriRUv^R6722v-ZFL@YN2ay|TR>kGm)-e6wzK7PkkWM}UYILY_`;>3S1Qwe=mREBsY2neU zH7B}o=(v&O66AL%eaZEHVRV)kP$Y%DbRY#!UY~}eK=1emLpwG zQ+)&Fe)6E~$(%V@7bb)pbM3lk?q@}zVk2+NVA*V{z{3c(4VrTT8|E9rg@)|g0pU~l zI&wXIhp9=^Qp2e`Z*A#xV*EXf!AyS=xfR?9advMh+2j=0E#$X;?toT*tP6{KCuO;J zyO=7q9q!SyQ;WR*Ty8KYHmv*Hc>~0a0Y{Q`xUNi+CC9XVjyr~7!#_A9daqAMv1WE6)5Z-H|)G&=E`tppt@<&vM7F`ih41q?D znrQY3nvR4?Op`C`9EvlX#5L%E&w_z@s2#4hjCSaljtJ&)#E$0sqb!+?lH_cL0l?b* z3jylXn4MqtU7&&lxm(q14KRrWvUD(sEeHqz;Neey7mwfF-Jkr=+(EeN`;SF`O8%fl zJYKeS@7KNIQ7_$j1EL2Zq?rJ8=Y}poy%v-<0ajiXU->rkpm;k|J_7lJcD+MZsA1q` zw3jHtVw42QTZU8v0K;bPho61$5E;i>DMi~X8Dm*&{vXW6$(3H=-f)xBp6>o8j$?Fm0O{U>0a?)fY+E zLc_;l$}U~(W}_XL2ukGzU&;q_bY@<{Bwd9~g4F>;(YnX_0L4d0+iwiaX^jB%4rY#( z-%_{VzQ#T4@aztYXfZ`si(8PFNb^Q#Vib_P*9Etf^KUDl4V>5#lW1{Y6I?GNMhE^m z0RU}sy$2@Ob)`}kRXG6-hGaMQAqKJ)Y=7%jL~&mefD6!pe@+5Gn?P6FH>^ckt!m9Q ziW-X%XApM~?CS0*Do8quSRVm^84U!RjFq2blGdjKyMw?v#%9j*_3vdb0~y<#q2R!f zgrW{2>W{_o5BzCheK&r()Jw&;-wDdj7dg*t9>M_#z&r90f(Qo)pr8dAkgVc4Y=8iC zFl!{Gp6+@U&?yK@2tP%DX1I8Y2m>@WN^z$|U_Lvi$fP*k%jrsV>N5W5UW`0rJRdaB zfS1Ubpr}HGiW7b<`emTH(WgtBPE^Cd#MBLDH^4$#13`S4l^+ZjssSeR&xV6(a$1-V zhM_RL5{p3GaSaC8eRNTRGU0SaU@c}Mn1y3jnTA1!{u&~lh3jO!7*t;AJot`NUnpZ* zQVi2v*+hBCZf);~{W=HTzowO<)Sh0bI5x@!4q!cS<=ek%IhTkD;jM@Lp z;6u!eS%^qVNm&ISegYr_2@xhjlo)XmBuSA5B}0}Rc?uLMQKmwb8V#DX+HyxqmmYmE z7a1^Q#FzTpnhjfa>^Zz5NS8Q5L385F1posJ2akY=#FZN|cN88xdFj(8 zQ~ZG-k=D>z3u1&nGd0GQ0tA!fP0Xv+%dXunz070UNOin=y_GwqPr^K`(s4 z7TfIjk@BHK(ejbfz(6`zcl7kkiGL6fmH%cyRQ|L1y7Zq}K;UL8GjO$T4L1Ic{qSFH z0EaR-pn<&3m$|29S{4dMZnf-SCOeavl1IK$n4LAMa>CNJ@v&N=S&lYh-LC0*W-}CR zEzgN1qNU{RN3di2n6}*-)t0A{b}~MwB~r`m1*!RVG}R``a|l~^YK5)WYFn-KT3f2s zjv$z1JDP~^SU)MB6-9a2aJ+KuQgbzC9HYXLY`V`FG{I)XR5<)!MLrY;&wc~ zGcIWHTjGz#zc5lfej#3qlPn@ryl}?P{99|43#(R1SbJ5zEr@E2d zg!fQlTq_u(yGV|62Yc6UCqz8&-g)jEWEK}_aNMDR#V(1{v$DluCuH1{CwqGKojg_U SQOQ&L6zBo!No)Q-00011zO4oT literal 0 HcmV?d00001 diff --git a/dist/admin/html.open/res/fonts/open-sans-v17-latin-700.woff b/dist/admin/html.open/res/fonts/open-sans-v17-latin-700.woff new file mode 100644 index 0000000000000000000000000000000000000000..b8b46d0b406e5a1351f2885608bbccb29e7d9cfe GIT binary patch literal 18900 zcmYg%b8sfl_w|!xqfIupZES2i+1NHWw!N{PJh5%twr$(SFW=Am&)ZdJX3pu;b8pYo z)KvAIagh}j1%Lp)o5VZ-@qc^U>Tmv^@;~DLs?T39( zLvJ>8b|e4*z)-$5?QfJK(_$r<*qT~>YmNZGk9+_Ca=XnT-^ohz`F%%93pG8v*|z8}LS zr!a71cM_toS51H({WhJ^Z65;$P)xs`tx*5m+QP=*;o;totCFJWVP&%&B4$*m2;QZn zUp%g>hI%FkrmKD3qut${;R`8#e)4#NOu9zmhVOkn{rwX?gX5#U{r$7u-Px1f-P^zV zv0(Z2jxo;1v%9mezvzMQe2774Q96ZC;1Gi^1RP21i&p%Setwt$mrXcAz<1tSV}!6E zb{Ii7PoF5n`X(lit=Ys3^8ESa$_WqrEI^_aOG`&k0exa<6HmiD)wLI#o8CI|4}jWr z3kcz}j}UYqzJ!vT2qYIyw#uSKO2JB6UCZ?EZi2i&zeRwUhw4VDRx)#qxSz$GrGVp8 zEYan?tzXIxZJ$?=G%Rcc zA>ijQ;oSG_bX|>95_4G-McDj@RR-323QiebPRTagp&Ix@kE+t*iZ%hFn1_m7cNW`0 z!Y|>AF@`QdmbdUT=w8#&v2t=8R7px3b<%U|K2_}KaBR*mEiD}bzs=|BGGnbt2g_>X zo~LQWb*9DcV|9T#nO?iy_H(@?o;+&lZ!mnM68tFo`BCtb%6O4;V)#E#Yct#IuBq*E zGT&gldu5S<=zQ`#l@7A@okq6wsNH|IGNZ!w!Oa6AtZRr>^s)GdcCFm199}EXANmh^#s}$#Pm4#}G z!GS$wuqQDFv67}zL?t|7$!%mn=;*}5eXaX2|4t~cJzn}KzJO5%b|P)|+s&%JvRajuwUPR`5sf^-d1PJB23d_A=+*;0RWRNgelq)cMa9)TDw`DWX#9tGXda8} zZhvUMyjo?dx{k({^7@lZXFmkJtOeYaxBien5Jpg)l^rAqDnAW=J0$Zk7M~WVlYM2O zu#pziG+4MWP=1`yZQBfQBZg5@&J2r3yCxG7L3d5ABtgre|R??6+c_j`lge!F9hV|HO0u_FVH zoXR*BuP0Bl4zU*JI?eY*qdXlc*hO)YFHah~=Og4fiwUDYp1dV0u-43dqA@taG8NE+ zIFVR^NaA4x|A-><;^rO~)B4oJ>OQchUoDfFA`jd#OzX6X2gaFaphyJ=`3w1s(=(m; z3|dgm%>Hx*&J3sb`o=rl%8XE8tMo!^2<#J@(oC&bgeJEnW-m1dwYA6Z<5D*qXa7Ua zN0qfI%uG`$BMq{C1)gr6N+ONd9Lg>yUR$+AbLvo<@yr>2_{EVK`T>NY470w7 z3=JeeIhz5XxkP=xxd+iPjc`;Ea3E0$DLYHoGGu~- zZ9bp9*_z%SI}%G3P5Fvsv+j%cByg;lQros;QX3uLy~F zrF*w^C1iOVM_N_Mkld{%k8;r~%O>zb68t_IHFf=SHuUoa5t0QXgk@>W zc?J=rj!YFHeQ9V6l2me~iXoD2M>%~1&ifnQa^qZu?WW$lb^qRAMzG(7Hdj7rYeE(8 z=V15^ZsEiOXv{)k7Yj^VNRxGJVh|KavS_H`$_6Mf(`Ay$nS>His+Nu%C?P1dQIZF&|Z2_Y~QMI*tF|u_1Q&IGg?%=ODORxJerQU48^Oy*x%eteo zrXfN7CrLsDAg>|_&|D1fdubhgGD=xOF4ez2`ZR;_i#g=)tULy}dR&gH>G_P}?IPLv z-ft;*2gpM2j+1pkH5_*wUbWL+ujg({OxjGD(KpDsUp$3ZEk)xn&*_`uJn z%Uqr!KmiVw8#eUEu^QV;N0fz*Hm@PYV`V88d9{M5^nC6uAftOs4Y+6|7y2%~tfbzm zZy|RP&e~e#8;E=?fl#e&C=0kyN9fBucvT$)e0=Lo`OG->9_>_J$rAgWFW{F*j&AMx zB3SP)vBv1m8@C_JXYiJ<_aDYt9gFwpgI>U(I>P`+zVSkMjCLsa50mJ-Yr+;dCmt#k z8i@)wr;|~>mP{S1;xA4Eef(b;pW7K5Z^j?{q&AN6}@A&AbFa*AvvaD zN{L(Ws#KGHu~xsVUnV5<@|$#{9pjE)#%5;iDz@`lsNhl+-Es{a9PBdjimj~;zwaFh7~6)S_mqpP(>rwg zV&eUF9hWf`khHMyOD%;$7*$#@sN!2N9G>_EVO3HRH?ipDI!`9?sV_eg3P)JIO^rTJ zdj~$S&pew1%`gWS8U2FTg$wN5((NWsrWU7y!cMkEm6H7UDS!6^PEuaJ+J;vwaP5GW zQr?#~<72UluG(i@lg05`^-YKGq0A|TH=iDEyrZh|;zDHa3VX`=z76lHoT|!q@`~%g5_%b;+m8{_>N8i^+6J!TBI+AQBlu&uOY=Kj+$4{3|y8ZT%;OBLr{R z2`uDSHWK3KZZ)nUmbfAk^asFKZpt~{t-S-YmKZIsho2N$X~AN=Krmp1fo?60x1K{% z=%-y9&L%%^iO*rE)EK_*!}WmjnKeLI)It)u799Fmbddg?l|qE|J7>cU$A$xFaG5V7&U01{Vats z1zj~i`|cceBx8Yzk}^=45km=e!bHRrgu9yFzMQ zGK^hRmKE2-N!{3FrV%~rcD>-h0AAMep&|L9J|-74I*cN{bbqSvZzSHt(fkj+eT}U` z#e4TK09lL>J%r5rS=pDZC!_-=2Yr=9Gr|xI-1skO>=On1P68 z5l{R{KhR56XmE9v64)Lvthh(}Us*-dzIpS}S5F;Jdjc)TTsL@J0YP=3W6l4V<9_k? zeCjGeK*xX~k~cA(yTB7rHXqEAcBc&VGQzcx8_2OwyRRZFaOJd%wY!!>l7>^%BO)cyhvS+h`w{^HF3NT__ESTk~#xph)Yfx+tw#5wFFCW%{`tM zPZWnXd5txY&5gsC_gv{G2M5>#Hm2|lzdlcCu%5c`vFA566O40N}7OS61xVat1EVz5jCW!wAza@1>Ie_Fq@Ru&s zPy33Sw1O*NXOlCH<(2kt|DG4drRs6~Qx$qEu!|-778Z?qhrn!wH0VcCP6^YXN3e5` z@MEX1?L)x|y9aZM?Ww)v^6;U_GWB&iDRk`9{wZdm%_Tkwnf>jb$lP1BWqAoFyNR0q zT~ymp*X?VgDh+|&UP{$=^+DgU`0t^yhFrMb8+55S zm%B7o=UVs`zNw4Wmw>~ftmWFjgXI-npAHMBGt`?RPesL&Oi3LXWv<>$x67%B#g7!J z>~E8UHo1yyPbWU_H`;(7pnzGL$S|4WhMVY7{>_p}T!#E1-y<2njJ!;kQeCrK-`rg0GvmkP$Dt9Tao5xXjAFVf`ZiwyXOsZ) z<1wpvIymmL@+y5rKu)S5`#7Owz@Rw1wM+-|z(MUXjgr_Lla@@!oDo>mBnn{Q;&DNE zBg_B`QCWdtWjnC`N+zg!h&F}{Qjmr)YWdt&w~N2XR@U4cI`w*K?415Q9Okd+dja&E z+TZ6-YZys$$v1d&KM=>e7UHeCaN_A@p7#TZrV@Y80lJ#GQgA3GyW+nG0owsu7$`T? zaPgGnkh8ek!(&Y*3!)V&Y)(ZHA+3tVQFS4!;Hxr}3p6>u;kM}?Tfz6JEGP=aeW{U% z9A1Yavx*n&S-i&6sy~G?)hxKaJ4-@1o_aCHFA+{&8*kw|NGN-(LC^)_xJpA z%jRPzuWIFmCFNr=4qOp!yb9Qc2*^>2ugA^izX}lpAqZiNRnGVWP0Au)>YLpJVGJ6J z1t&Cob1*0?q2nPZY0gL35iz?tCRkveQk(?uhi;$EwvIySNO75&@Ot0r*|e6HTGDhH z;Dr+0cSTRb>_=HaXCdjwuZEYZj5j$b~U(kJTPGKZCzhMu1-Z~a8|aQkcQm#AYIi^aF&Y`z9OmtO`IFC_ie-wp@Xd>N0NFV$M? zzAd)OoQdKiqC3sR@-u7F3@Uc_&?e56m&#C47E{OsR1jKJOZ;paznQW02sccknkrK_ zOJl~kY_wS9TxMA2uo<_AUySNu_Sy9+`2!)BO<)i&zigvSE?)`|z=SY^6QSr)U6sQS zWy@7sOcIf8VvDi5+M7guzG$+xq+KLW= z`_L-GpK#AfD=O6%AUXC2OszWJx_kXSvFYdY^C*BQ)8Lg@T|Mx5MPGh`JVGp6jbFsM zDwHyM`eA{%l2GbIwP>KqNOMdU0>SW=wpMGTo6ZZeK*x{eK^7ZXE~k?|A2vQt)_xgB zh^+-f{4(6td7J5Ny9!!JR%zWW?)=x*v*pEnSI^!==uv@6@>f9)VPc;7TE^rtOgP{h zR~yH~eAez&B4`Hz<8U4|Z6Yj~C4{%*6h)kUn@}~A)}o$FHZ>j|`F)3p1b98TpG?WE zg6f~#=Xa7_w9>}>`HJVdp3SA$v58VJk$_nR=?^@dI%ClXZOX7x$AhrA_hS-I5fK^@^?4ex#0pjh&-Vr|Dtj)~L zQWW8hN9t27AJ4-YKK}AJ9G;2kidc`1P4wVU&5M}U!wOtufE7=p?SRBy9Vj1wfIikG z;HOD5?=HDXsgRseUaWrzWig5RxRKhtWua&)=!H1Z55w97et&+Y@rT@ZemYptcDRT-IY4m@Qs)Tr1?>fhj562+4;JU_~ zW(@K#WE;1K$wq%~{vU7$95}(8)jxf-;q}<0;-p!Bg^wyR-o>oMmOBq1GQq5mnt-jo zgLqJAX7&x%d91K|;*)RZolCPi&mnmN-w0%D-VQR(2^*nh>y<$)P>4O5iPsTE79;>B z1A6?-l&|{o@x3J^N^m=OWGKJ-a*vzSB%vvGz3ZzVZWM{ExXhj2)VZh5`v-!JZ5SF+ z4Du8P#TJCN#7m$v2jLyx&XfRey{gTxG_fjczQ#X6*3QA)-vC74fRb$!IJ?Y@PoR z+|XH({8f;)8VHP4yJabRBCw;?qKa;bdIC z?PjLHp0}0ekfa2KU*IQ>1HzGl73>7~!t2HWq9XZKyOtN}=T_J-aa*=7$p*N4US@#R zPWf&uYE!^*sDV-mI0{H}&^yNTKt`cZcLYeVrejoE@|ZTBDZt#fVu`C|s0LGvk{yh# zPH{fpRH^{nvM>EH7RUdW!d!txZQilBqqYv#&>o?*O_HzzY_`~dB}BENy1WuFwiG9? zm`tIIfdYw=Ay{r%!WTh?;|1Z(_$>enL23kaAxx(vv!Stm>9$9=FG4pCm!FyAMQ{wZ z`CnlTn5%Ty?hIG3$OBRXT)4tf150EK$PFc9%!)HMeAqtyvc@AL-{LMw`QFg;*pRNz zFVi~IstYpm6$@5;{9f~Swf=_L_$}Rjo9lI1ggNI~73npOe{?bT?rdr_DrIA^y*lbv ztQ*zEks3ZK=p^-B<6wHUY2!)P>w&1z6WYz`=O*|yHp#YRoIwzdipGoc=Ez%I9wi^S z?RQKF7<$+&uxf<=9BiWmjU|Yb$T8Oe=BxpPiKXiRTYi#6Vi6S%UO19@-Q;^CB4AKD z(o*kKS=F{0D^UCTlO_(sqcdt^pfqbJL90N26ow_%vuKGLlLR=iZCB*$2a`Ef!sh4g ziqdVyXqTT_JVc>J=GRD)V#S-OdKobtM^n6o*HpRvK%Dtk=ixYvMHeqM?1**F&d@19I&erFH{Hm~)i=Op1p|T2E{Nh8XFDC3AiPWJ3AzVizLAD(d_2!Xb zpolgVZ2>u?D?!;2XgofuW57xyRMaHSAZh^J-{{l_?}B~jW(n)WhEFWC?+xo-HbzPO z>{*+bHao|}So=rR(49P$RMqk|QPTP$x5<$W%binai0J3P5FV+?;8keI2Yhn2gp8`} zoW{O_ui~xPs< z*o@!|Y1ypq;!&&fq1s)#wwec#C_rm1&{D8|A_LY;I3XeAOuL2K?w(a49y ziALe{0rJ6I_(OL`Ee;=~Gcy@h3r2Px;nxkT%hnnW1yqelBzeNj`A{LdWk~gf7o?+0 zK6v2#IAmVJ$<*G{b~G3Qk#aq#w;zC>`FI9iaW7dC@8(OGHy$0f6;*Hj->gYC@w}%k zUA;V?8_fE+SS_0u^b<2Gm}SH-aPgDE_V%8g>#!MgdXkt}EU8AxV;Y!Fc3Co$r4gfe zwnGi6R~BPfhCCBh6vx91HyCW|Y>4}7@;_cQEdP+-Fa7fIzOm7LJGtFV#(S;0@t92i zOv3#*h=a^bZ@0a;5OT5F_{`OzT-A8md3M>fdP0iYi_Jruz=!{_=#b(RMKhdyV5*^bQbNTP`N(6VMp9^^S%7Gpo0z)M;bySvk zf7R1+vyfE{l(4bp23hr)z|6Jb-1S}yt9PIe(e?y$BGN>nfK=+AFHl5ovjXTe{x4cbDEkb3VyQ{_+N9OtDd{p|&`}qZKzdr}3$oOKm z*%(SLn51C&0uwHPaO22XPRuFcC;iXTJQLt)Wke}7dzG`)Gh!dEeeH|earujUj)864 zM;e&i=^;kC-J2t>HL*)#_0@6~!@(|F@n87SXujXxL(QuhjvM~!b!hbqhA#DnKZBNC zjxs&BLoYj~oT)=JT{y)?K-sj=M;sAzM-$xJO#oF9bo!)SG@LHz*!6}ARdHpGnN_?CN-6HzZS=OWEq2WRiRN( z4&w^#JW&Oqg||P4^$bM^eL)oP+cHo}R}=uGB}5G#E>%s;2p9<#5KL*P4!R9n)5W}+ zyBc&|HiRWnXlRE=$?%bfYg!$pd6o71+_+so?Hdjj&>~y|@pRpGe4w4DJNI5!DlF7n z{Xq$*G)84^hko#O-6^tb9ZQze9#Bj^!)KxaAA@<5WfLENTDv(c;XPu#U7z7!0rAVr zD{|;8cFwtPU;}O?g-9FGc{Zt;;vsMJ(J4m!>scaB}Ufr^1dhy^n0Bs<6In zgZ?^F*gNQdCbj8!EzxNwjh2ZnBs^gX1V?9byWM;ER^#!n<~Dc#+7YJ$b**rZmnmBE zD39wS{1y6LTjcN1H2b3aY{{cRql#8v(AcAFHr`n&|juZIfA+%-JwCSh!g(}9NwSTSR14s|z7;D`M<$Z)eY-IA+G zdP6C%wYWP3TCYZc4G`S+E|djFG@mD?0frON4rgCk0wDbnvjW1|W=`5!pCaY4k1L3T zkNh(hW9`EJraU9u7y~9WmCS~G6CJRqY;bsgg!87C{2J4u+~UN>&aX&@X}Xdx3Yj5{ zn!vA5e8(mR30;#BEFl_W4ezmBJb{HML+sbi7!X7a0BRt2Lh~V~kp`^>=7=CR8;YS+ z?S7J~1re|4arfXhv!REdtPL+$EO*bYChvYqSmy0oRGBcCT~h=H`QIt?CqQLuI)Eb4 zvEreAO#=Hh%22iZL4R|{UD+Gn$(HrIS5?BUnk^htWWtq0d6WrU8{o#%JPI_3;g20;Ba z@(u*tu2v7EG}VMUQ~}8DhuR)H$RXY~Kz{kQ0;6!xr>FilD5s+!9#E4hVzFnG;C;jt z51AAQ<*H1vUJ0zgB1pQy*kJi z8v76cj8t(6uyh!2)lNGD;z5)DLLKn`n(d=e? zS_2>VX2Y&L{8^P!)%y5SZ`TKL+cR~mB-5iBev>KAtU6X_?LXDs9Lxmz`2782w^vS< ziN6!~DL8P-$JofQp=sWmr-LdncbpM4@F(qd*ylGvk`0#f=KL7-ZAGI@Xz3|LxX=4_ z0r6RFGRZ-KUS_Q5R%Y6@95zFB=LNLDDMQ57X+N*O*edV!$kFgA3QGuk6r9O@7RZQX zc4qHJ=oTY1W4*e&yv-2uf`Z{4^)Tr2Yu$o2I?tg;E3x$M>TjJy6N_~|7>hJkd=xAf z)@i@&u1vAUnksyJw|ncGY-l=5eB6h4AT}|5npE&$O~p_QC*>+dbJ@hs85?^n z?B!9T#VbY)qv?+JIP24ybcv`883a(Or;A#;`X^FC)?J#y2S(Nx<87>6uf52cqL+P) z&ewyAezHPU9ip>n((E3Wb&pdJzfgXc?=cQJcy9aehD0x4&?N^CeOd=^N*aY*&I~$} zGipfWxYbT&h=YZ|w3bb))Ehp2y3~k^bE8!hx4bNa+{(XM5?=S)yMguZjURYw5#L8N zM-Yq&+Xki*q}`h(4x|i(&TxXIslDSO>9g&sEQTETj4e>xHzBJ{VigoV4%`(+X$xu? z7&ZeEK0G5}<;N(bAS#6zyUz-~zu71#C^9Vxi#uV#D7I`Uq*RGviA1BGssHk%^PL4q z`x4#)QWJE|5hMyCUCQvQwJqr%)e{mc#MK*h^)C!YteNt1udH05JgV93C^P?h2wNCD zlIp^*IWpZe_?(!xe=OdYj`7@ZL*n!R2r6c5nP}q5hJD>7Lxtty6O4=CU$Cx@gQvLV8D`ehZH zkn#a+?mAO4_Hh)F-Gstwy?HpNJ(7W86y92=TPW1V(Z+}LN5BM(Ps7K-rz^DapQ+XN zbnofZh;?-DA)T?)0f=K4m`gwm+24gwVq%^OIN}-LLnFfG&AzSPZv$O9$i z_I}~W=oqROL3DFzJEcl4gaoP#=z8Gi2`vB1jzWtrVKe3U*%v$L$feht^~b|`8btb7 z5|0RP`};vgUz5$(AMdWuJMsHMo(k&5#p=dzo+}HTmDa0iF@8O?-y`%^2hTLy4E9kI z`}1R)O1WU+q~y4>b8V>Z8I4K?vtyhK7n2Hi>`yopi}fv{LTfq~!6CkqFp?d;t;y~p zfhFz>pgD>2{Be}{jVzQac?mKBBJGNuUFgDnHZ8^pVy>Y~I7H1~oSn^B( zI6&LAUS*iRf^Zd@FqtgILSthoih4ccu?pnisT3VWE-x~GKPbV?IlHT#%04<;@YoKk z!{*|c5*frlzIy_s-M!YHGWPVSR|>iO_Q3&zhIujNvV}nFf%yWR8B^rBS%YIEkJR6w zq2X%&jQeoS11IPq=;W^wsHfEtw5v~j@O;&Ce4o#IKuby;a)ri=%Zsj6?^}{D0#jcS za~xDqL~41I*ztKOrQFg&j~{(xp&@btkIh&}VZ|2|n#;~8zTHNbZ!}6jbI{*Gt)m>- zmOGr)FEhZvPfiHwUB_N$;*db!wo6}}VVy2i_3p>hDn)ceU&KcKX=|sda z`wiv=4tN5(vgOO=Lv4gU`gq#El#o@+XpO83oh#q@2yFG2S@N7U&0%H zqaAK}7P=n`C6Jeum|Z0Ff9^zSE*GoaZybKvm;}2&QI=k!y4kH#vpE5kKKAiNaVTkk ziqqr?iXUfUm08PeG@Q*P!;GL%?ginFT}0*$7AuH#eI)F?$p!`U6_C;`122k}YZ8^x zqf)J+SJUDH)A|8KLUzgyA!bWa&(FO-$OAolo|Mww5eUhB{|IgRNX`_}1Q!h}lnl z&64hI{OkPpHEX4Kp>(eMvc(H!MXK253U68PS(wQ6Sb%jAqU41IAmWoWI`VR8G*PK7 z24V^vW<+q5$KzCgB@SE@GSC%a^_2-l)Oju|GUsYf8o1CFd9>tjfLuuxCIKF%@X?z! zarM$y=&4L@tIQqDrropWyF+MoqkAtcY`;d8VL=z&&Egg%kSO$m7-I1t>LjMLxk?cv z1XIZerB&(>7yw`e{S*>p>Z0M92)KhBBFDZm)EU)bjbC(!@vD8Z-W^41G(TJsmB+)q z7WU3n9#P#jSM1vZUA$;2`Ani?L0n_1nCc=O?0hVa3RL!7Vl|KKV+dIc_yLJTR7(EY za)Qh9TNv9vH|P@^8ntta=y&H;n(Ye=uR!FxApi>g_|kS!=?Ii@6tTvr=gv$l4pxFr z9d}$Q@f2YzG%chVnpJy4Q`g0!NmgE@ZMpa zz8;7)QZZ zU|z_CEtpr&P2%OFi^YE!6lCV;Y5gNrI8eQ^+nIEp$?ZL_Km69y|_1{csXylX%1Vak*y^SiZK(d~>j*%6+}>k4pU4 zB&wyPk{!j80-Nu;gbUp|My85_rL8bJpn;P}#0lsS zm|fh38(P|hgMLFi1dgwV<=#39bFe;ka0|auTx{H2b_R!o$c;JOkgz=q5B3*RxOETRsHU)pyl@pDrMQz&Qb1E}{s(yr3HQz{{#p5G=j^CfGY9}@nr*isRRk{_8!dUl z#5py?9cGAB8hID{=b$s_CN?CSwc5TBdVV%@e+Sa~^}GX1z?^82l2zqOyb90l?1xKB zQ*n|XTR}PYHg=V9bMqf1r*oOOduXEP%u16j963r}d2_P5v@rXcldcOSdiK@@t{a+tX?~5~< z-^Hb+?d_!&G0cZ99*P`npZKmW7Tw@qjZv^r7vPmU5bgJB8)S zO~5EJ&f3fGFM0sDZG!DUI8}P~RAblAS3ZT^ZGU7qm--F6$i})8`1Xp{jAdcP8G96) zms-z|rgko=zY6Ze3T}M4J?BdfO0V)fn|ha*pTCjhlqU&M~<3*Q4Y4 zIz8XQ)_RvKm|83Fo|doEVh@ZLK3cQh2Yz|zq`$6{TzWqa4K_!Fv{)=`o?6Dix2)n& z^Y^$WLJ9LFq?C+6RqN1&bOu6Ue*W+Gaml(BG7XfqNE81V1a1+$f^J+GD5@w7U0vVve% zl;4RCQ>;>kRUGk461K7z6ZI>b&sND!S6f1e1EzaLRM5!tkx?bZQfshOT~HqC^gYI- z&Za%~_4k&!3MMnzehOCX^XLqWOKV4F4`>}Cq3(HlzZekxjyCdbu3Aw3`+R|xHWIy zo;K#x-j$n-8AD;6Y}@z%4gkjB%I=QaPe)Z%wThQa0f$z^lUYzRRL0LScw0Z)69ddz z=`p^EbEtUtOeOhvp`Y@(n=n|HI+I|k;`-_+<|qF(*2O)w$k0g33i%Q3mMb zZRS*pg%`H_&PzTRn##9i0H^X9jAqlx&D2l+4lrNBs-T>a!2|f&?YRJ;@hL72xKMx{b?YH;4v=`K-KtYqg%f`V*8R^yLFFXnuwMuCVeq3M=!T2LgS{^lH1 z_}DW+jj#E9-I3tw9NTc4yYFz`DsflzXTDvWH$GGnEii|0HsI*t9UL6cp-7uFyV;`` zO1e-bDBzbS>9rxW5iBf(;JD_sAn!5MYrdY@QYA1kDrFLw}!O7VQ4?&4{fcqV7q)tW3hWl=aVzE&l!Q?;SZ#wFY4+a?k5k% zZYzGa&Q8oYXu$lrS;2)FW?+jg1-jzieG zUYu>aPfzK>W>*8$m76Op2C8q_>Q9?*$Il+(+r(U*!eniOvT4X(hVjKOf17g*o;~)^ z#UN^II(J3Xh^NpTiA&-f$INs-g10g=+^VuUb*<1FoN$WR`p?Pf7SD@RlndoO#3QhE z=8F@{a$d2fj>bQ`vbrkfGSQvA=twhV?fcEt=LIgPrvTeS8t^v#_o&z)x$w+R_cchq z@1!LI>C|kFR(1!3o4bD$!kbngYtSB}(6VmPs8K2Zdq7Xh5-><`QE?>s?^Jy-Pv9y0 z&!m%`=Eb3Fii)r!|8Y2bG@)E0dMj2vy@U+)sUEwWN5`{{d!4U5 zhAQH#J@)5CTcLPnFN~WhXky2&BADUHG2$*+U{r?RjM%Vn9%;R`Og~8N9BG=R8%WN= zgdQdJ-*wa+rD|tMg&xKKVUYPrR^KbmPMIhH*`Qp_jAzKn4G|z6=Q|54E^C*j%um~K zFJot#qi^6-{m#Ty`jWZxIIw_<%BBL3#a!RI`$}~qou;Wd1&^)aU})_1D=`SJ3R^*4 z6)d5zSxAGrV!l0yU$u&m{*oo+6#En(sUY)QI(YB==A8(zC?GRIZfL&xeYv)oa+cb)|n5o6_|2+CyO# z^!D!-4JcS%))KQnQgU*hPLHtuvGq+gO;c#)^Guz*YDscup+rdNJp~>vshl_9i4N6I z04joMDg?xw;#Gjh=x?QU&7Dp_%MzKg1(UIw0NRQDMMbZ{nBq+#9-JXQ#nE)7vGGKQ z+;onl+nTacwvuk>Xf&G?$L)AU$Y|O6VvBO`n=;o(WF9S-Itp_%C>_@7(1#@upo^@s zv}uN-fsBHIOgwMYM60RgBCfKVf}*K%=EJJ8Tf4+}!B>MC9|Hb|o@ajlr8AI$OVddM zPR@K=YdEdb)uww4t>;|QPixV@( z4`79<)4T~WS}3)tj;v(>iuEKZAxuS)A`gOC~*->{iVFnVoR1lp{GXQUrGi4+}L-YWTeya+tCmhvz(+2T_v z1VONjk(stI_V5&$DrLu^y5QsK&x)qYG5NmuakEg=ZXRv(S97(pi z(4Wi|d4zh}o(4S0X0;yoNOTD1=ybe3f(H`MLXYIDJ&Su0Q?gP=iYL4({E?B%cu&#S zG$U?&Bh3W=++N%l;m(9>?9jxaj)Q^;_3)W>id6@IUN?{+%Ccd=D(01r3Ye=K?%T%f%&-mv?0Cocp zBPC)0Nm+5Jdkm5dY25{?lo~i`)GUHL3{B?E&SDr~V-GWOQvLj`im(I{yd9AzQBGb- zVh7i;6CcK~YO9+iY4=UTW;o8p{jqMUW=&t*yD3Rcf>3F3v$BByH^ci>mkvw_25@pA zyGc-|e-ODAjfygx!g)b5G8CP`0{5dqEr662)ko(Ydus5oA2*^rirSrsx1*n#OH84g zW^wBQVj;id=eR*OnL4Z^0jr!rI>xj;&ST{2I0Lxs5S{1kD+U~=oWKvVV+Sm<@fhS9 zM_dqpZAfuFkO( z7AzcXmoJgBRU7S?zF}+~6noWw;v0O6amVimRHhx~%9Ywr2d);wX>T>?CBYt@{HnDKS$XuOw4NDhyL->?@;J>SQ|iupiFBC8WP;alj|xz<)OhW0iB~IJ|Hiy2W80GVceZ`5HrX$OJo1Ic@ZC8O z?rpwYR#1p=OtMS0`d%wBsSn?(G1GbSwR6q84cAcRX(wA%w? zW)qZlEHz!-THxd*Ycy%%BunJ{4d6nZqJ^sibSgqdbdr?vu{6Q=N|h}yp2AkKim5VtXeM%#hy!{J#Ju3EB3ol89?H3FWEg3wsx0M#qZ)%y(ns0xh; zjQ{}v2>=2B000000C?JCU}Rw6=>5Bbfq|>{H_yLHu3n%BDtH6{mS6_U0C?JMlLM?6 zK@>&r&b*o3+O};QL2cW%ZCg=2b%P>mYTIU5E2!Q5?|o~NlRL(lEZx8v0HDl(5}IOy zzJvv)6w1&VboQ&Do(0;f0$899p)FH~x}%=-skW%6)}fAS%yU{IEw?pgrZ6p|Da7<= z8Z*_Rv!RTaxw1wK`VOpL1_R9k!1TsplLM2?M;xYUOnZ9rDtAq zdVr25Jsjmhch2r~6y0?Wl%NH$rXidfgLP_5ID@`J%FcfVC++kVGTt%W^>#S@n{x`v zao+}70oW(VOb#iftlyxTE{1$G*t^8pR_-3-oy)5jX&b}X$T2T4l+TvU?nQr{9_8p` z^c?msZG`Z*9)a%CrUR5?YRO&LgEMt7MqGP4!)M&yUFSj#neV4Y*=V}5_d4P{Is7ev zyo09HlK@d(K+~v<(>VIC2Q8J?iOI$RSV>E-Uo4k1#?0 z1^GwRXS5Z(l>g=44b6X~m;KEWln~f?Y69SGK*mtf<=R~gYQD+LR~^DL$|}(!#%@m!;d1qh!!al z=@1znSrzp~Yec6+pU3jX`p5Zr&G^vxp+q>LB>E(_Cw{@@;id3(Bt6m*S&Q69bE5;$ z^Oz4Sk2S-#VqdYZxP^Dc&k?DJ5yV zSO5h80ss&IF92Ks009623jhNE0eISU&4ETkaTI{@-`dK85J|S@56o3G|NUzX?^cX!uTz?mm!|`!G-$CEAu1;?s6_Gm*Rgrh}y+`g!d_?X! z@fCU3k?+WRj{QVF@Yw0Ql3U8va&IyV!9uE*3g!x>S5;%J)PhgJnUS%PL8P%$!Hq&; zX)O~>6)I)3)23h8NIWQIHiDVd#@406+QL}UR42wR%uG#MJGus~{kId^+mlRX8-Iqj z{C{nwRx6zw8hU9akt(I;Rx*h~Woc+FHW~1^`KLL5KhV z0C?JL!2_%iPyhhHd!O01ZQHhO+jh%#4cWGBbD49?u6Z@HI}yO&UV8bTw}c20B1MT7 zBUT)7#S>ow2_=$P5=kYKTnZ_rl3E&RrITI;8D)}L7FlJJT@E?rl3N~m<&$4Qg%nmq zQNo=>lT9+kRG)lt(o_2#@XTw^9dyW1$6R*U5m(HzD@2DFXPt98#G3DG zh!f(5cp-jB5E6z&A#q3&l7?g^w9BpQ`Lj9j_>R>}I1M3yo- z0B0_yuknFcMcj+v{AMSUIX5Bv85E360C?IIOSNGGQ4E!G6gD$s7=P+8n?c6*>R=yc z-sJvuo*_6uhVTX^u^y~G4}^Au6hwgny8`)zb|9Oy2Qn!&kWQ+B_>z%gEJ`j*JD`Z| zfZXL%Nq<01Vsd*VU}0vGx>k{O?E)Hv6+sgOIkEk<{l6_lSeU%bLw05(6B@|K45S(U z41MzkLh0?*tosstu~6YbUp2wi?qT%lc37{To=$bE7o8Qy6_Ixod{Pew8T0RR9106NeB5dZ)H0C9`}06K2~0RR9100000000000000000000 z0000Q78?*8bOvAmf(!_ODhZEZ5ey1}wLpQL1Pg;s00A}vBm;*K1Rw>2LI;F+41stX zTVfS#TxEuh0~nb6!!Q~d!NviAlK*k`|HlM6WY{tdz&G_qkg0SEbqzJBRZ9QuKJ8Oj z8U_H4GH%u$);CJ+4ALgrs>O+3aW}Sqj-#WumeGqIL$$P*dL~bf>hjKvn*bxKX43Ht z0AWX8MZNI9>IjW}l1uXN{Que4+DG>$<(BHTmXWNtuYQ|1;HWcd>wO zMVtdJN6H};l_aM`ho*8-&HS02!6rn}0u~D3Qt|;%0-*%r(hi~X19_2jN{N7U3RGH> zk`B^^luL(LrBLNi6rHaqeMMQhb?I#^YXV6SpD!|WD~i+x_n!OxR*y9=ylS@*kZ^z* z?cY1b-2Xq+>aEFJwM}v11#UpFKh`t?t1>gya=*p*sZUGFx~;ygLzv-v$h{ulC87$W z2F@e%Yp&%Um!XJ+(LD2Wa@DH6sMBHO839+Ldir^^yXW}zdmOpZU6e)m#Fho>M*0jP z>Z>Xe5Zk-ES^l1g_d}R8v0@FR{{RhLbw%enaTNZY1?n_im z7OuM)_N%WkeO}YEm(No3Tm`{M3B%q^={f|(qc$f8$pUO`${PtmxXKxEU?uWQ?XDm;jr?j*ZZ(_0C^58c>oe*hm*Yg>gH~= zdW1hdrcSy}o4!#F$N5;V^;}@b16l}6hq1Z;gRg65=OZt zeVw?zXeVT`P5F^bed$kw_T3bjCU#kBSx-q~AjcO@UcQQ_9qlrLa}}hfBe#*dHj`Iu zJm*RE+#m2{+LSt<9cgVdYjaP|8w>@N_1c1lkb%(BSaS>+7&W3G6)j+YrK_hTn6C^g zE;pzwMUdb^FboJs6H*>PHIl(|f2<2ZTq*NFU6g2qaMxX`D1wVdKn2Qjnr_<;(}Avh zvY}P1HlpCiD#xV&Vw~@z7$xd+qtByNAlVgWv+KLVo3dK~4T**Z1c{9n)4@A64ivBw z65ZNKIgnX2^Tt~!>pYb!0+XtgRe~2~*0v|vW?3ac#i$~|y36OY+P*=_@^EIly6OmX zJ)d);05S^TvFc?(YGaubrk(5??Il-X2eGKNQ^d=`S4h!k^l;PX^l*DmepCs8!yWmp zLY0zJwEdwnDoCL4fC4G}2>>Y3w;&MB+uBF|ozgOcdnE0>)TZQdN>rr~R4la>C5MW# z5)8&TryLAMl@@tQ`2?=9cs#_TJjRnsO3{3}uYZf9exiiL1oqAZTUJ& zyC}D2aogI4-F7p(d$L9*o zN>FiQ_*4leG0v_OF~N$b0&BswKv;?(O!m;)Xbas^6KV8Y?@OJj2m?PyJ&sbs&Tr^F z7V@t-z$Y0^dsjRezuQfXZ|?A40BiRI?7acV4*{fO0EfRG_%SnOFM3vG5l^4=)y$l% z#>9ZtW%T(;jd)TK3SOKsK~pYTL6f)a9T%c5vp=yjgQ%h!?-b{XSoL%Aj81oS0*gZ~TJjU6d z`8ILfj$53W-wiQNwJzQmNv>8dG4lNA)*4%g(U>h(PB9MFB=_kXUbe`!q@BJgq;oVG z`Yz1Y7%Pa8fd-cwzivAYmiLjZ65NT}rqyWr7*m+C37U=34kF3hM-J z3z4IvSyt|Dyrh9l&8~!AN=uZ9j<4_QmVe78DLp9xOj#OS814&3-cx+Vy3(E&Oseg&F9CS`dZ|B{>Z(|3KwDl=}#k30Jy_FUq|!iYKF`?51F< zNp+Rs3z1TbY=r%365WW*=y0n$>{w0jjvt5n{*W?IA(bWVl|Si&TT~N3s!`6S-Gz`_ z@Eb9}>(9CGFtH@(W2oisymwY{r-$%p{=OZ+eO;+Iz6LB=eZoV6Y&2@x_rySFEg4drk$`0%v7SS&L*C zUBIFD%FTQi_qAJ1u65hofhKb1wMhN;a;uVwkhsV?Er8OoY{jbDtSF{Rt4h6KLR*DN z(TWtqV_h&ljbyA@*Rnb>9*7Q;k(5uTswodJWL3Eb<3i?;cJKs2Ty3Y;c5tS0OY%^y zqMSvlkE`eE1HGEkD!Mo5(+;(IL)l$RaV>%4`2R$u z8Z{V$4l z8xDPhJIqEKzfX`Pz{7BB6HHZJQg2sF*iOfZc@wI!dp_41xXfVnTB*4Oz=+p#*T}Z z*<*YdhR}$n3x^I0-?hR6(bQrdiDEv4t9T2N#a@o47~AH%Xo9u_Z4@bL*im*m-n<8| zPP`9vnLHBYT#?Tc_J)iS(-a}3i}G!&4&t9FD5y*VfvQ+eid>Htm>L*3fzjPWizQn2>=g>-Vu+2o^{+oK$t+6J`rxqSx#< z@9iv8YKBvA>3IMkOIP8bN&JbU@t)O%=79_{O1l2jhUv{&-a|iHbBfJZvv1ED zd1IajXdCm|RJ#k3LW5?bz2c(lFPo*=4?CET$=TV)8C`)yjlOV8ZrjRJ+=ZsqdTkX` z6baSfzNntJ>FTSrzGXEER zfif?TuVZP=*tEGi^#*bKy)DLkyshJLWSOW^8!TjnQ(2|-aVr~N&RtgMtZIENHbW2k(2eeuGF&3{#gj|TB24hM zc+KCHijC*YF5xw{isUO4rhs>5d5Dnz_d^h7Idge$$KQ_jPi{Zo@E@MqK6@YWA9s&l zQMd9HE90zw|H!e7$+>+p6izlP){aDf7&_HG~G?$e;9VXUwt?~4J z&Bgj_-@Z3ps+{@NG~BrgVZ%haRvQO@RZKTu`thxd?kwQ3ilI*4hW}~{!S1)Pzo<6OEKRk#077OOND%ljSu>0 zM75;y9~NvUlkX2!w9MYi_-jJ@dp{wiXMkN~8gK6x;!XEHPVpfOuEhq{x(^yfRc*3U zC)2`R$699RPtA`>=R0E4607fVB zg4y$;qf%kRk5-<1fA~>E_G8apYl)W3d3JPJZfsZ%hgFtM&&=z^zS8j;+Z0q;(rNi( zq1V503;0}5Qtp{5=U(5s^C?p*kKXRdU761>TWlicQR63Lj|wdEp`3j(gQHTD!|3>= zv;yp%&=*%cLTJtoWEKY=YEB78yRbbN&b_W$yL-w7 z-nU0v;<9ghzO)xZWG{xqmgdET=5ko&Ike2YUUV2^)%AnuOh5WEUxWFbx4|FD;?adF zBYeXZCpm7tjJ~&b%HfoCiXb{T7ae6B-qii+>6$r$&!_LJp5z7!w1Y}|j$<{HSrKsn~XBFF6F-2kDyp?c2G z2TcvHg&zA)&bwpyd~S~h1Qm$YNj^5glmM?BxAI>5{L4kzq2XLXAB5M& z*$cv39}>GBkp(A7Pto*}nAiP2R@}|I_afMT=m!0^a9__4(OrdQ$AA#`NtAs8-oYNq0%_^|qsIJ~UWq%iEH132I`YL$ z|A?Q*Jx*_YmU_Lrv_BWhR)B-aJ|Tc*CO*>&s9Y;YyrZSH=ILk(nBPMI7vWn_34{Wy zfa(W)kXqgV5K<6X5+r_Ii=)}6s`va3DsVHkO>pUemad{;u9$pK`VctlKLGAy2`heM z4fKArr{MgB5(;8UE!lR=2Ea31@zm_2mp|sG(r}6(BCVb=rDVlQc@i60PNT^c8Xq53 zM5l8~apQ5{XMfJ7?(8Pd&i^vfd?g%FUz-#cpAlJDJHN4Q@LRTA)R5wBanNg2?bjMV zmpMiYK2$3~P*Nb_TAOp4t3#us>U`T+mGHZN&m$%p51tg)UMjXBZnNwCm@q0fxou7T z)!&bkzK~|@RZH)PI10rSieoy~;me)MQ$0E(mxQ0ZPq}WH1Y_@|K|AzGenE7cG1Jqg zi+DA(eZ^(lYO0o>#$RjT{f0Zy)9_WUcwW^S^5=|Y;c(^AqaBBijpXa2`?avfW6iSME`Hr*US0>D#s>#T=ML{(g zl{Bkl%!cXhoe^N*lIim94f_=QYoP7_bNe|^y`F2zgU947BI(&V{p|L+|3E=RMAX>a z2Fc{9|*t*lYXkT7Qe+I6w z-fYoqc=k~9Al>uA{Mj4Fax5s%0@bNlTe5?zsDtYrR`(e*C@E-a|I)Ltl~-oCq4P5r zk9MxO-bZ}=(bF8BUzx4`$|V4aA$qwO`RYdurcCdwKY

DrmI)kIo{*_s#lK(ecpK zV_r#A;jgto&uDKSkLbY514Bha@Y*j^Maid^rQrbGYL5EChlKrQ!+W2uUb($yDP~#N zIxx^m@T4*Z6kdOTv*3CzTj>ntJr{W*#nszu1b%qOSdk$n0bL0$8@6Hi&A+~v z6@pzUiDI%`#FaUyZoXex3RUphY+9CYdi1GPX*lbHQJtI_dDti6k6*8v8Rd+3!uh48 z`wtQO`y?eCKSLSPKDu`nt0;M7%`bvB;hD0$acdpk1RIDO&drG#8XSo2kA7nNV6;Iw zEhOK`?=__&WAYkM0s9M5T`FV*3jwVr*2&6LE3U$UM*3yaARW_xYwa0ab}~w2u}bQ8 zvqbp2=Go8b!zVmSi!BrE*Plx0&b{wBq)Z6x(to=!S^3w<^_Zg`_6$+gI)1<+A?`X# z#z?_vCmA@nV5-w0MGc~5Q%`H9Eu8hvY+eQ#G?t=ow@4n{o!rei1tDqu?`3$$l0Fck zw-9UNuU}-D6=;>=+xoWW&gJvIfjow8qdB>fXzXL(WLJX94z$fgXFR1P>by!u3``Hq z%&IjN4~F}0E$`aCu~oymIXcc5)ycvrlU}K->$lb(meRNoBdUEY^!+^DEYVnD!C=F( zdwJ;We^AY=y(?08L?oBf-4tH4U`4x{Wm+GE1>80JWW1`BXeCOPvfeTwl1vFIgYsnW#~g~cPZ0KW2JV0gv@iI^qPlNV5fFT?mqc!H^fPkKy>tmI2= zp?OnRBA(6vV(=V_mXhEk?v=wR|CC=s54FM`x6Z?Pzl(_LBo=9rw2G|4Ec4NR?>KSY zxJ(s)y%KBd!Juyf$QuFRH~Nak{T^|)*KS|vrrIsdfr(@NqGcHWj|BBxU8n5Sfm4JX z&r(gc+1~<(D$#`rXVcXy%S&|TnsxduHQGBlQN& zXw}AbDc#V+AK{_RB~~4IdKh0EnQBh4@pt9~mBA<|s<&KvK9=Ny!I6lL4(@JPj2*qn z$(4q2z>*1QM+%`qa9e>`fBg~~-CU}C#kN$V=0c`T+0|#ipFDp2ZN0UdLL5x8wSg;L zS`P}^xO^#SeIw}d>Y{(pjhi=ut}pr5uJ-k+s`d2rsrL5tUbs$ius@pd!?|cudR|&g zd|%v*XqZ5HA-&Q8TY=R&24`2b)RxZ8-!Zriq4;@X^}>W2#ISUSl(k10ih&CX%crdT zR!LstEg|?_YVryb-|&kUC(L`H>c*%VsdL({|2s~HdcJ89{cotcNJ1eS6}RMzS%#wKGxC~MNK-vWYCbd269L!L%)(!^R&$|vhZY~ z6KLh3+NpIXjt>~Qf7KPPe)DFwZx*W{d2~e@&U$CkDr4-G>E-7XY5qshOYjJ$g=_*x zyL}cs3500_@*V3zZhAeq{QHmK!-MxsXxgnBb6WwQ{9V+Re2j_*4GjcHskk{Y`jsi2 zi=#v(Uk-{u+&#~qD9GylO>u}TF#CAH!~(=T#l3jEb7p05cw(`)V|L|nKL^8cdlKc$ z38%2w8WW~P?9okGd6WST1fM`@O<4L96d)!db}5Jy=2sg_j-%N4qHTSM{vMOI!N%c_ zL#=-}$2{J@I2;#pv@VL}f+9NF8+vCp=_)$!p}1HI4TxrLwFcT7edo6QMPjA@rn8Y$ zct{SlFmY#z|Lay2M>{qds`6yKsxX+^_cwNL^+xRc-SH}2aua3YS2t3#mQLz%GJeE1@eknYjk1c9gp-aSzN@8=UlK({r#0; z7Ck%v>&>?*MB3L~cY~-@+gR5kO6ui*qyAI4Q(r&6^S_z+E3q@b%xSER%84zAJd|fe z1wF(VhoIeww*NX)H9Xd^F(4`wkxdUVZ!vz7LKW$~FE%w6u;@`t){}qoA6jm!GgrXMwC^_6VA}A!N|HdXK(0?pSxbBgX?aPO&JT|;$(|Hi8|#YN!U8Ta{8h&U!9~pk)xREB zTbh(qS(p%4QIwoeUwSmk+|$Iw)7<B@c$ zy=na*DEj1E=3BXtNxulVpAmoR;$3h6M;?{L!;0&CP*Dlz-i5E^tMHr+HLof;aNb;5 zbNPO#*HC^AUOGu%)#XH#s7jfC4pY{R;XE%C;rm%9bgQemr@E@Ox3is8;nT9g)wylC@6YqwciRiQiZI*A{MbGpq0lN+?AwC#IP_bP z-SS9#qYvBl4m*wgfg(&X7+3_|E#I$luCw1`*4ovWK7QOI0R0eZ2_q3K8F;%ylD(=t z+Lhpnb8~aT5Zv%?&ICUb8(UMZi~D&FY_kb)l$`Gq;Aop^0}z9sqb^N(=a zc6XKyC(TL8)LT07Qo?cTt_z!8clgY>d-{2?xn<$U2p%6WctX+uSVpYFeL7^+$b_yt z{rkT2{@aG7q};aQIc!WPT^Hfnb;t6IyF+uuy6dG(yDmby>yEC_+_ulLQY_<_HJ82_ zuAgS{&;xh=*$>=31)gT!I&L}Ea=|DZr51r3=;=$}=xO|&r_$E*?5vXMcPn$-H@6HRqB0QlZ8!xw<})SmX%-i# z^IxLSF=f`uY`P)x>epqJCHY3!yVsW^M{^^gURHx{nf^v)fb{GacsV)Yxuiin5C9r~ z2Z8w@_f^U8)c<~c_sLKGJs{kM&j7d}hLTU}VF75btXwL8L=N~``9R$OP@glT(ojgq zXJg_Xw*-~Vdc_Q&Bn=1oY<#a}q?KnL{oFGk-sbzCP9 zq_&r;eQlaF439P_{Xy*~rsgUg+@R^*gU`iD!CX^LX;G&E2SrP&xg=PuCLC#}KL;h4e?RSJ6y-fawaMx!!s=nPF z1Wm-ICG206tI%g%=}QjmTZ_}WvRUR?h}iOczBnAhhWP|xSw|i$c|SJ<`5vYL%K11d z#Rhs1dvx6ixQ zeUP}#faO zHJJ7%k}^K5Oi(nD0!pBN!H&|ygQND7?)WlesDwGRf-eQ03vM|E4q}Mb7-V*W3ry3% z+<_Ewf9V#Wfqk^;*rc{mzV|QmF^?N=1Py46=m!;}!wj-3e{s!7Yc_2gfSt^1uebHG zegG}A$Q}|GOtdWC-K6U4OZ*Cb^<-k=qk8uLmps_hD(#utoKk^EgCsKbAPsd~ z%PX!mRE&@_2vcfk?!k`5O`{4fv&oVq8Cr)pu$e4vhd6RutUw>I0$AfH?lX$SUJ?P5 z=D-l}TSifE*>@p*jMpoa9QbM-o?cPPNaN~}B#?E($*AE`0SgI&Cg=*#5w+6BYEqqVZY|ljt_A-jWDJIR2AT$xFCd{{oKDlQE50 zP^9_FkM1iA%s$Vh?;&+Ex<-b8!7`CRLJb!TCwwE&xyLX>{uHBr)qhjmkDNjM)t8u@ z&ZdIUP}c%YP!Vay0@y&+RZ*VvTmled`qV#mA%r8aSX58Bwa~v**d2mbC{;?v+eCyeYkMT&2o8U;pM7TdZ>qPP?#=4NxW5T%*3fdMirq7WLD^CzvItFw zKrp&(lbCZ-&!j{_6XYexQb2M+P)@`9%RM#2VDRqfhilFAuv~0isk}$5n5fneHg?Y_ zJ&3yig_`wCkJ9*Hlt16JCQwTA01WQx*l4f0+qZsA-gzUKtTyTZBg|FDXEbp#-P|*Q zCs|tx>pKGW#2|K9*Gw?E*(|a|g8%)E<72kId^(+U^Y%F$&fLLa&qb0YYXBMs1UI=xx z1dG`$R;8@Xq@ngna1j5f8g4h4MWuWQ2m(u5r&OY4Le^@jagH7;V)qEMM(Iu15U`LS zlLnz?0hsJ_05>>GI_H!oEn}}cB|$G`U?ihT8$P5e++Og&!vrNIz>pR(HIT`c&}@+? zKcCGJ0v)8TbB0AG*A8+_<(W}y9kO#H1i6$U0qygpRwurml}aebT?%PtMV9>tP*BhB z$fPvaX4o{&XwxwM8AIZVg9^9Zwk$I|*Xm891kZ=CG&jQJIRHOK>)c3FaE`SvD0z1( zK4K&HPrKabc?+#MMA!>9+qeaMiAOgd?=myFPP5sD7x6*DXr=&!Xq_QFLW8MXXWhGX zqtkE**0$ayouAQ4#i6(p7Afa61SZWKp^%$KJP>Mey&OvK%Fs-N{e)R4Zd+9~IE3RC znSqv4&|7F1Z%mNWg0BxQb{@2{);J^1i$_3+W3WnVc0$M~0e(&`(s7zng4I}KG%5uT z+oYO0Pa?oXLmFr_rqCda_gpqlEF&2M0n=cr4DNa|3hhGM5mBk3Gn)n5Pz2F3Otd1w zd)a_UiE>8N(AkLKE!)vm6mevXh2c)@S!hD6u@!19%;w2D02pkv63}6WX&<)Ypzf*_ zN!kob5)9uD|10XhQ2GBHJNb82w(TC6EZ;*hC!9rxZpm{dsf34_RHs_)TDz}(t7wH zG-=mbIt4dX6wt^Cp8Qe@QU3?j*j2dp!&Wo? ziis@NRG4cyC`$)j8T~|^=4oUm4wxTGsGSoa<3(!G0Bycj=dSx(I2``?!+5`A`WxoV zH)Q_ty}8S>^NYo$Fu@uoNgtap|HPe{jCuTctN-DRH`eRv4v#fHN`?)4H6yhLlPIk+ zy?E}k|G)HF09I&1HCfz~5J48YXsvTo;l4MX^wooKqwI-YT#PR!VX$*B^(hoTD)T!9 zsdMv)ETq15R@TlnxkUxH3{KKhY(LC1O^*g@#VxHO60K|YDNU+4CBT-`+nh=KNTsP_ z;X5ZWB=_z4#iI?!$><=idhvMaLiIN`pxPiF!{IBT&kFvBEgsGcvU3xzjB z*VJ6k#!$TYZDq0!7<5e>uK^DyeDa66y3SmY4Xs3#e2puE-)#$Stua72m~vPK=OG0BGz z`7;B}hLN!hTs*&mypi0uXu>eiG&L9-XlkkT6`!lPF^!ayzAvS{g^l9SM&*%RZ~f3< z?I{^H2z-m^do}6TgNm{!{W`OeH!phRBNMXk!@=YYK`po<&wmHin8ZThM-`M zwv1Y0O#mh(O3LJi?(k@PZ0meO8^b+nM{lKF^-=+d)PTuvvOQ+m%<8{c0Jw$bN>Wk@ox1 z91Nhp!ltDU%B8fMQhlj{b6PieS;ZsVxFact}dP{U^x5RRwDF&*B@kGUUsLg<$rTuoYe5s+%A)G{SW zX7!Cf1_-GYpG*EbQ%b~9qH`oAXv{F2hz*8GtJryVXFQQLBjpWJ6F4_eTr_~)!las@U7F!apeoH<*?ZTFnK0*URhD4(SS)e6B zoVVl5D7%*1mSYJR%jCqt=+6QWi6Bjueg- zWcwicpI(0_ct;bs0wt`q2~mh)cG6;+OJkQ-OiF75TZ~XL#*%&ak^iQ;NJ>1i9i3h3 zmjlbahz8$AKDe$qJ=6-YQMNtDOJ=AonD(DLUW^g%LqwzyYDZ#lh{6giE$Kn|ys%mW zp2&z%U`y*};pUSXN9_z59BQ&DUczMX)w%-AtaGRmIn#4l zpJH1nmYSr3`3J~>YgZ*VpJ3)YUL^x^%azauO39F#%g$tDkNB)XS-b7OV__2aS}b<9 z+!x}A=a^z0{;(m9?gZ|8+F-v6!8va%D@9PzMr*U=nk=z7)LDYh7(os73DcG@vfeK+ zojvun_WRYUdCEiS{7c=<$!24*7<`%+Db7)_AThKaDtgAJXQIbM)mM+woV92fagW)_ z1UClc0#C%&!~-f6t}#IF!V!C@C3Cf3(k{Om4s{aQ4LnUTdcTesR-fqsJmsfn_+E9- zP)<0Hv7zZCVk#r0nuZp!9FO2zCqGC+FmW+yE%T-7rz(i!CowmEjM&@2gTt3;-Ab}r zN=BrMTSDwOAP>QU)7Xq#<#n7XEOm&jJw3!}?H|tRd32NnJ6%URHdgUeF|3{r_!9l zL*DGdP1kODvg9`6x{Jb6>zn~C@aV`Lo^TUQ;jEAkxdnY6bV(sAvKWw-WSk`O$f z?N-1lx6Qqa?-Dyq)NP4WlYAmShl4!x;Uw;H?3~zBeRp`{V4-OL{NCw6jpKUly#Ia` z$7g1a{b)<1N^bMsdqC-_h??(DJ#z?eJP|6$>j3lZ36|QkIyzCftX}YgshL#-u2m`* z<^HNb_4%(>hmUr*sY%~U5f*oH%DIsybodx!6E&poBU)D6z;4Ti|9Ah_RsE~LEdRN7 zLkIX2{d$&l##C?R{0<^(gT^>0XOoGp4Z}4ueNe=(u=1I1$|=&*xsnKnZc`7@W@3RR zohcN4+<@*(|LcH7n)4=32bZ#^s4s(`xjz$iM40(CuN%P0QPQkj=GaG}EUU``&cLNE zqW^t(8A^9~@=1kG2At-U#Oyg({|Cs9|ru3#;h|DKvl++>FSYz(R9Mu1=6p zDRzf)jrO{E3E78-vRTTsaAVgkeXZ^NzRjx2+3z=ap4~+b$LcY3EXV(+D$sIVwjIq^ zFoy@OrskGkXlITG>XFTkQ^*RP3r3B^-~xGeMtKhwi&IPO&=6ySK$0}Hh!Cy2_GU{t zrNJWd+69>nxo&xz23jqo|1W%L)=F^3;qRi8(Y^b%OO;NLwtjT{)w_RI z|No9@?O2P?L;}J1l0pLD(2cr$0<4MmrC*h67C|k08R^OYwbJvt@@mSwH1ZoPp&Q`V zNqa~pZbYW!SeVe;)#RB-&BtVN(`TuqbDacwwuGp%uFR3$Y-?)Z!a_8N&YpbcO~S*8 zB5FCH-qTD~ky*E6vgCr!IZ9X5rqw46^r%Y9rSim34art)b(YQ+rjpxkl_;#z!?;O$ zUqu3j&j9M}0c8m&^@pbc^_fZ%#*ZvGqWRkXfB8j_%UwQI)`_Bl86VCpbE9Mx#-*Ha zz0~AWvSx96e);iTPK+`6mO0@}}j$_e71P4n+rXG2;g zD%OqR$v49sTfJUjT~7v6c>k7Pi7C8LYC||#7PM@K2h3sp2@25n^FuLvvZ$FD=kZZf z-JGb7l5y@6eVvy@!BJxyb>SfCq^HuI^Cm~U>w-GG4nzR>Ys5H9UsAV0F&~h)rBN{f z+yw#v;&JPk6ByU^)WHWlz+4~*lD*r?je3PKUSZ9=0SREB?Td90CIS!-P$IVChRor% zwlB|IITl`~&y51O^(cqL0+lC7UeLLoO0wwhmHh7A?n`e5&^+Aqg{S9)_>$)muKp#P zwp*(hlMQ82s|E2Y3wPwUY~Aq$W1=?rm6`_3^fiP1L_ffX-#JW?A0f#mC?+7piY$&d z?*E=F6Sx1P0LOKY^MB;?&c;lo~UWUl)Z^%P6fi$j>M86)5eyJ8YM z&_&7AEfji^^ks_@&cezmI@IaWxfvc=50~apWJGu_s2C0q(Jfq>-+iV>pt?}}9Uzh- zmj5Bfoy=%rYQ?HG>o#nXBToScm?9<0RH#y;PJ<>b5ZZL;(xcCSAtT02m@;PpDwGFv z5RgzTS+QormK}Qz963S5z{0_E=E4<$8zK^SWE4~$Xy`mKc=6`Lmmhxt0x<<)2^J#M zs9t5tozv#M3U#U-HLNcLyf6ekOS3P&s@3k0Wlw!}%!u#4`Ju;Y8`hl>hOGg|72z(q z?1Kom-L&bfNP8OHbH`m#w(O`9BU-F@aT1)6C|QyesnVs%km;i=IkM%-muJRFg$fiY zwr$s(`^JoW;E9JOOyZihV#GItkMtv=AsBY6{atXp{jdx{IY4Y$RzPr9|AHA2qbE25;aKxZSo}!21w^f7`D% zdbAp~%crRuGK#^px@#bZcKa1d2_p!q2yF8C#wo4K8l49E zd{5se7K%?q!v}X5c~h%h|99)_utB>EibEeT)J=iY_pnC(iT9oNr7!qidZ+TW4+M9x mJKn4$Ue>dnyx64O^V0}-r$>+SE6m(S7au()<0?qrflGQs4= zRbEUC00j6k5n2G!e^XXH$L0pS+N`KR&Sk10(>))XLrD zN23G)m>&TEISF?4K}<7aeIo#X=RZHT{{V9331s#o{%9&cocIT%h<@<;X4XzW%jfw4 zFx5|4af^KP%2u|9KYn~aWdaTVV5STzG0a-u?WbG;tDk&?{{h$ysMbc`+W1F{`r!{h ze$Q0&!nJm`j!po8px+Pg{8^^kfn?jJorCdDUSXaezrQ~^&_OK<7y#&p{kH}G8Swwu z@&CsE>CitZ@c&BzxNYE#vH}YN0sQuFlJTuKh)vbzuJz_+Y9`3#h*SAN$I35Y;3pp> z#b9q*0sZ=&eP4H$v3{QGyq0}2{ST0+Oh20m}fOXtRZo9z>`pg~6Qt){^7x@{Qh znQ%@uh59G^`#YmoGJ=2<@&uXmjKz%%_4V})P4|yXO$-bTE%f!}!K2=S8^D1RGC0Ay zm?#)2ynd(3e&s?6!-&%>2LXc|dd1;N<6g267WehR0-Ofn=6+V)Z9{vK2o}g5Gvw~& z3zbCQ#N@dnkAzWCporpk(vtvdCh@wJl@qX_J_(eGmtmpW<{R$aKqJK`K>fBIi0IW< z7%GTBQbj=&f*Utab;TmBcs--BeU71zuuz6UG!yGY!zkTaZm|XLtBk7xaCU($wsv@S z(IGC5X?kDlNbA};rG z_W^%~0R6KAH)Z#K>I6j}(e&1E8=O>HqqRQASOAFD9<~5>85Z_?*Ut^|J{K|!^aA;l z`S|QUEN-26%cFXN@A&|ScBl=M&f zW{RUrlIJV=3VGCWa;lk`0#=dML7VZ~eM}cWJ(*ne&&bHaBRTk{lWAWn*TS*E_pcMeY}h z|M**UIJStQP_>)9YrjRS)_nm%Pz3n4&{w2I6FUJZOrcLAXbD^<1zwZxs?JGC+H^1> z^MJZjimJ%(Mu)1y%R?srUoi~`(4}UNFq4N_aa4qLVQ5W61seXVZL=Z06XPExS{7r+ z9);TaA_bB9Fl5{m1Z1CAuGIkhwazR|TD1|vrE-kv{!hl^_7rP~rwz)hgqjj{<fj{BY3!L>J@rJ~Dz z#t08fFOu2n=_Fk6iW1a2!;rsYPrI!oiXpJ7)1y%$3>kf+$+ENe_AB;R()*+OxX!sw zCPfU!SxHiNAPA$=*ED-!{MrqDy6}CloBtf*ny+Jb19%PTX&5Sc%*4a?Zs5#yo3188 zrayfPuwuZ#%?Da!4b?BWtiaLEqRLe;tVT5TXTlAEFo_srJ*Il747hkr26>a%VoZdF z=XCM16Y=G|r~+nS!_MF|qgeD;2~vI?Zll?si{x2@J?8%{@bgE)B(1H6cVj<7&MeA{ z^QqEeL{8p5NEl*39Zmd`_Sv(HKLP-T*yc*XA1DGI73~jih;|#_ZZmSbjqeqb& zgQ!zuV{4%~YeA<-av9&!vqe$o$aL?Ank}9hh&*5Tx}oN7n~+Zld^VOL8C}BWemELE zs;X0+t!t#Uqq_Yf|8o?EQP~dW#@BQr5CkKn!Nvg;0$G%Suosqd5>N0e^H1K5h0=CL zT~BYgpfkM)gBJ6{$edlr zzUyQQN+^7c%L9s;(w0@2SfH}nr9p$wBn}*ocT2g ztllqPX5HfLE{$6MR*VY&NW-p3kbZm7+P|KnELuz($$0UVtHRo_42s3!ipW(%jo?OO z2O&#D5C#)R7bYw|uVf6Wi#L8^&%IlvGDjbKV461SkPJ_;%tMk1jR=(R8)xM>^Bc6I zUYg1D2F;IU4frKG-ph?s;;0TlX$l?@nbOX#TZE^!C+DrUg>-f$9^uh6pXCLk6rssm zm*ixqR+5F-yz`S=%ndqX*&H?`qvoU)3cnGWjq2|$Y`h#=+@^x0uG-7qbD=Y-2Lxo< z3MjHc_6oj6qY{vMLCPoHoSyCUZ|_3LVca$}6hj@H*H*7-m&$^@f}v*iE`NiPkTCWB zT!(-GkO1iKZvcYZMvx|idZOAU-yxnP;Kc;XIDiW~>E+QflA`%jnpk1v+{Coay zODatW=e-@RCX2r<=;GUrE7VVos-NYR)s@24m8#?W{HL-49W^%vw#d}(&yM_uxPEWX89NNu7vgDVzmy&cZyr`u1%Wc8yBE(%s`Qka!e^`Wz9#y6=U&^ zf@nCE2Q8&j zl1YIM1_1%u@1o|-zmIo4ihKncMqad6_Gx&J^PBbAyu`My>Kw)xVUI`u(r!lZsd@R| zW8krsFP-Lit`F7@4QFE8D;;6PJ8}CpTICY=?XW!McDX=O6H?b5PgZ^jI5)1&?!Ci+ zBLY_u0z0{Ak_05F$}xn1VS{+KIgKa~^iymObF+r9{OJpb|LQUW5Gp39TdrnBgv|j{ z*F07*4=b0$1yE|@>a$hnN)n)>Z?eto*G2k}GfssFBSu9=T1)do1s+Kd&`8S7tV76<+qi2AUBXi@Ny?nB6>{zgnt$Ty)A=Hg`G3+ARSHw`;Osau^9gH;>w|k))%Eu{d|8*uNjf^0a94>JhtG>|UrPK|P-~0v z7l)O<)27+TnIB+0^`Y|jpX}}7nURT>B)q52U9UiF(l)_VCJ zC`X~O#idEa3ko0N5><=Y3Sz|)h6sHY*7N@g0jk503gSDWc%d+&e~a)!Kuc2gW?T;x zQ^1Cn5)R=+fGZPRgKfgLTFpn2zZh43)tmY|+~#NHd_&<&$Xwy)f+>}wfVCq&t{tog zMonFw2mD8}y5KjxfmNd>UKf5W9$e|!Sm-4_25z;#M*}y)N!r_oku@{2AfH?)@3=fp zF6!4i5w7exS|CMM@<-Z*k@Ne9K#BEN$p9m%u6_X2%{EC?5s>mU)kH$ggGal7 zt7i9ArjcF7W!-I9PX(-jeRLM!-$1ZNxd2GgF6Xr2TlJ!-V67a!VpOb=fpCVLiSmCk zF^)P8;1%=MxUzOEc|ZcvIQ1wiw!i@X6rM@15GQ<3VdkOO%bCPTj;wu-Pgl@{OW*x_ zGno%RfSv<2+5|pbaM%;CHb);$-;`pX42Wu>rMc})D`FgKfjt*?o;Lnln3wm}68f4K zeU|ingXxoN(R0@CB`AJU`ZjrfFTmjb@@|fg?1IUG6qAww3?y%1}*RyxctwPkkfJb}mZETH^lXTz1# zbdc^I(98|dTD6_KSuK9LL!tZE)#!7K*E8jhi9M{!lID66y(o(*1KZn2rbkE8*Br*j z$46RqKCiawy!hteG0L0>q_67t8U;NY&Sx5ARxucunT0rY*7||ojf_NXl=kz^v@$h% zyzcXkPLgMl*|e&VNsHXB7a_gn`~5vT-OQG&KaJLtEHj+!9A#1kq6W~iWV2Zv3 zAc|SWj;|KYv&_1fvykVgJ=)zBgsZA8=8E3EOYEwOgYb@!N--Ly3XLe6xYb%AOPu!l z!1t&tv(4pj-_LCu)jW<}yqs+5JWPYNc`9g}(&0rWHtx66@1tU}(4X1&1?#foy}#-> z7{epIOr39ZUcUBwhcIgy1NGq*wIKVsK-`W}P6mU;%FH*ZE18Bd!00&6T7+5-Y-8Kt z9KrJ{1H6ZPYY0$el|M?*y;Xb*TS$`g@lzAowQgO^)q^KhP5ctrWr(U1n=JkUzQ8YVYyT znx?kL$8HEiYab@D#0LN6?Y84$jQ#!bioL=0UA?J=(%T}nX_!g_;Lk&C8F2)q6-Y5P zg_0$C?>{!~+1BR!2)aZ_C7Tw+f}N@2(IXmoB%?=nj9K2pe7>B(h{8wd?N77bzP|_- z%bvv}osba1(NXM#yHZZmBWr`Se|m!I0^!qPEGzp&ZkBO}c|3FZmO#_prF$I~62q23 zQ><=gpdNPIPFKZP;ix0lD@MD-?*C`&$Wc~uHz{Wr%)Gk-=N7Y9m!rWmwM%Vbn{T#L zQ7rE5_qq$De7*>S(y^N68+yoo;KcM~~q z`7XSJ1>i`?9dkJKLG87ZXHNovjIjyPRi>w^LcI2)P}5>bE3 zagHQN^*vuVGy!+mETS_?(XUe$a@}2kYb@m+Q%=a9a3aZX7dMtr=KWA{@LTr%UGdv==r_%oA&j;&5PNm2Dnf%SL93fYkg&dbm~nTlyo2E)-nuxe zqZb}o!B72Ns@hgu{_G?WSOcn5g0kY}K2RZzW;7wzjJa#N;t*A>Xt83|OiJad`&p-Q zr*Bp3^p|e1ROZb5KSErQVC-EuHQ!CRe@PKCXI(o zI}k%6WHA19_G^@atvAu~x|!*~MGZ6BgF1zz;tnN51B^wVQIz(N>tz;7(v_#(Ab|t8 z5I#qW`*S4*@`I49@Wk8jZw#`(vM4P13Sx^-#i65W50xSqVcRS#i zmq!-1E>TX9r3)J$O`HhUD@$~9MYfJcTJ5OcdO?b@BL8T9ZAQIGGkuUJigT>|YGNB? zC<~Q(9iI)%X|`w#&w4-leEMP-D8%YjZ1@wVOfr~WBZHMR?iTDvv|DE$cCRi?UkqMy zqYcH$n;j%?Nf_aQZ89 zXz?lnnKMzoe|L*&=e3{K$Bmk12%xOt zEX##0MVo?D1_3#Aw>-;q;s2sl;O`@i0GuU7kdAMehfc!*ml%#Uje3KnyXK^q&q52F z;0IPpjI$*pm!S1vxOsnlcw|B`Lt%sWmVB?C1T5~TlVg(ix0k@9C5~o>Vz=`+>G%}i z2l%iw-l8s6=GUmgN*iay1$O{b=p{5d`IH;e>vkL?|tj@SJC15=Ef zyWi3OE=tth+A$5V0$}BVX+3Ny_6h}b6cy|6?Lop zGIJu*SxEx>3^AF)q&VllTIJ4E70j`!?T`P)%1k`W*{j*F?B(h>fe7^^iU7AtNi8`` z>>Kc~&qcgC#Yj58KV&eDeDXaXhTF+eHNZ20N#wcBI{{mV++?lj=`dY29Xrtl(l6BSnEf)xng&GmM4CfLdh&BXO|p5h%R z)d&W-jzR_Ukpo)_Pa9-;whNReeT=__a3*98s&d@>fNx0IghwKh$&|wGr8#?n>)T7h zK}}oaLC|T*8kE?8XmVD-&e<8xKUK>LD-{s!anIueE<`YYk;_{BhqzsA96x&Wg%G-s za5vGB%6zq%LO&RZ6`KvXEhLj!RQZ5b9|G1=a_b<4n!;px#{xr2Z^#&o)faE|x1tGU z;|}G(w5I~5j{bOyk9`ERq`N$6+|WSm`Y#bfj{Dr{40tmm^6mHrY@d7Ctt8V zIkmFlf75g=^c;skqF+Xc0@@4AiVOE!tQ|2PfmyH06L|e7l;fXMzk@4_@u&CZNBzv^ zbX~X2c>p_wZ)hOZQdW9$?!+@nW0?y|5!c?0%7mBOki7$ta4m}rCU{K}V{(Z8rQZGe zhY{?0M3!rwBPTA@!?v12*#~xoaObvs{9cS6*L8^sN--omCz^U*uOQOHpH6qS75s#y z#^PJnw9`LKFzV*UXgAY7B4iAbsAnzxPt)vd8Xt#HGo^m>`XJ?q>>` z&(VjOqcZLqI>H!eU3DXewFWM)3%5{S)gXJSm>DXXjSyl|4&i0_u_f_|`C9kN(D57*yyKDg_FavtY~@F4a6 zJ!YZk5XXvc@R~E?1Cd71Pz2MbIiJFLOK=h+>#yDdd8Lp%dx)EkBXyhv3%2@Z0wfqh zhsg-zl%#{p&RADTf%j6yU8+l^is?z4NPdXGvj!Vi429v&6vB46>&!R;>Z3YCnV`&1 z;RcxuP#!Kmb3!QGD_5oinJzBXW>9#)Jnb+#yEcd0%*Y03fFsZ?&tS_yru~=8U*;>4 zEg0)6rI!HSY8bc5ID!U=$BfCzwpm`XE}?i@XAD-6;g${2e$wbY+&87`Ak@|kuUf7( zm2KzQoiY;_IcZFc-HrQO{)TpI^IKQ#vlS=34|?xUZ#t1DpG@TZx#I@Lo7ny)TnvGb zrMW_ta}j;10ptuyiYx{UXp;ymQi)~BCD;`PgQ`O&NE)IkN>Wx_DTiZVH$C2_JNdX8 zADIjwV&p;MV-4iuC0+5^@k?({HrnUG-XCKZwd_-9utye8YyRd4yB!+w+rB5ZhWy}h z>yW#rQoOt^XEa!&0%R6(!e!JQeJ?@1yh& zx)UA@hoe;MpXH8xHercI79dy*jW)QM9rM8O$-pBH(cngNco94t$$x{sccO*4V5QN( z+0-R7{AmpeSTM%Yyyhg}ZVR%9C=gYS7m#L@Bz7k>w*LYUdXs76}fjU=O_HSE>q=5M-hG zmeX3{Ax-S@=U!xB;p6<-3KMi_*Xo7g{+eU{wtnL{0SX5_A(7R9-c+y4CJ9Swyvp;J$wSwzhtT zD&^p^l(p6NwDIG_vGB>smo$P9yhsrnPk0Tu%C#WnDFc1qHjb96pou*P@wfC9z2i0X-^8Ina5)9-8h)=X9`M z%Tg&Av?!Uhn(Dehi67lbIqAA>D#9~g&?ImD^zFzSrU)J;2k%NkM^KD}84rD-Cfa$* z#cU;=O9Cq_7NkEN1p4j48MNEbW@$q+X6GT*<2Tz6-BCqnYZKPq=yKGLrvkA}dTsb;<){hTJke=KH&tJ1l&VUkO-&oHg|E?P`6| z=0=5jcBVn5@J}8f)yS|)$3g(6K(`Uqw8OU=z1x4ub}=KSn45!Ij0|rX(H(jM`M&`f z=oatAnDVA01&SM5X*r#h;Ut+}4a%VhQyY*(#;cRIv#hctrluC)=yX2y{EpWGv5vmo z`l#r3#r!cI)|U-a``1(np0zpTiqSqN?<@b-5S3N<_|cWA393^@l2i*-zCC3mf&cO5 zb@9xyM3apKf+b+gI#3bZXe2^8JI@=}MG=oWs)R=QyAqkO63#4y>8^3LZnoJ-cSPU7 z7E+HN;)UAI23O3+{0noz_x?<6&_S`J$R+FK|9rdUT=O2K2Q1&@moa2H7$!#_bcj{M zE1ik#Rhua}TW+K;mRTw-uf@cGfhjLOu2!%e&TRcT{L5r)hVAUI16S>3@{x3Zy;I@x zwdd2&LO$61Y<=GoSMU5i7-4DaS&7{YNH&i)I#1crBzgF48DP}3G1j$QVqR@s#wr{6 zbMG_!S-tYwAMvlXa}k`-R?~9>FsJckrLy_l(8QUYb$qT=FUkH`nKQKEXH(PetMa|O zt>ev1FxA7OL(TT~wxd3xRc>Xm^7KLNmZym6y+k`~*p!nuq%T`YUl_>BxxjcratRr` ziQ!Ppchq1q>M3#_O@mUse@QuvZbhxcHYjGOS20=Ef3Je^{Bfy5ip9IajV`G?uNzt* z=c|q1-ZFVnag~qdP4U?4bRn{ww_ZD3%Jo1I6Hxe)1zFESC1HUPzra>pV0U@?Idi%} zVueSHg2A}`t|Te-DzhhFU8821%?F;WYANAtzRYuWaex!7&rSvW$$GWM7P2Bi^;+a$ zoLUp0Ac-i2trcJ<13@=X*CD=3jfywGvgc z-gIL{2EmTTZV9>5nBSI5vRBb`7@`? ztNKAe3<{@UVyNu^OE6;AwHnOdYwjXVg}njm~AfUJ@>;^FqqO zTtv+4;Eh|XHW}qcG=-W{j&^(xP{kL6Z{z+OYOBk~m%n&j&T(_nCzy$ajBL!baE0@u z@x8G(f`s8+oKJm)Rxo5p{|!W6A|zQ21uV|6R;F^jZZ-n=~%Aj`UE0|5w1yK-hV z%IW_6n*JG^{Tt<+>_4G>l-_oRks>X2aiSRbB-^UT!|VDC?!+j53zE|aJV!MuWGog@ zuSNJxjmAN`#0+cRotW2CJ=_l*v4Ye|so?7VvR6Q(En@PHX415~OS>Hby*$koK|iic1TjgqQq&55bn@ul zm+VZ^(P?U|IfWmbg@bSEO_dcy?40W;!s^U?a51Rw`-P9 zx{N2w1!ErU4h9RktPs4)6w1T+11(7+G14A^$Pd@qPaMQu$Q)WTMs$_gYa%KhT5QN8Taa22=?%=_3~%ebWEi0 z5&-w<6lD(Rxx81h)YG6i`1)Fa_k_ZPaXF_*pMIA@h3H7=h1g^vOg)P0K>)#1XAKL+ zlfxtM|Jy&C_}YHQDbN!k}g(|JuT}YOQqpzKa_-_te@Gx-ta)-L~+FkWA83^VZo zM>YK`Qx{)NIcvMo$SJl8*~!JM_dfWzK4#pJqEjrImNrw@q*XpkSCys9bG)qTO0kxS z|3n$5-ZR~Yuzy{9?%bJ^&W}j-G9UMH89G@r`4D;8f{X=P$`@h7GwQUKQwSs!8t;ac z%qTlb)F?JxBaU}1>U~h@jBr3wOUEv|nJz**qQG|g!b%*z&yEMzxIKE)#HQ0JyeBUg z$RgpGcuv(2-jR6niSkCw@1%1j^MUsAawhJc3)&A7(~QSKh{FwNs3C@*OUO3DhKxmd zTtCvpXSQB@*J#Qh$J96%YkihGoz)yZkB}9t3Pf|k_6X*$57+(I2PX{8nfcdepuY8` zMQ_IY7ewGY=?fk=6nqOs7Yhd$ICyK-QNqdtJjrZ?ltqyQ@S%u@_cg8Is7BUIJZ zwzsCL9GG@oW^&R(p(z+Y3(ZIJV``c3X0xm>l%9g>ccj8tt`Uv}B18w5Az)50Z}IHU zvh2e2qR#U6VmOyhoPc+QY6$gYvSYGkvTO2_lwx_)T3{PwWX~O{d6N!Jw^ZCxT$xIQ z7>rQ4?TM3Ed9+P9E;ycPthpq{br~7A*$9qwNGfb>+JgQ>5=pA>m&Z(&&3C!y1I*gX z}kz&K06I?l$b~_N;W*ruIjjnu+?S_O;*}w~iid-%hb{GHGeCz7P0-u$B(x=wd~sLYZhX{OfCEzDg#^ z?hx)>6mPyC`)!A6p+P_Dlvz;qRL;6?()jc^n z+@7Y@izy_Ckz|D!^E^MAQzNTO2rf=xFEF4;040MMA8x7Dpm0toHK$O+$6-L= zpM~Ng3=DZ0M*Z?b3i#;_MJo-yFO=;7*vHu4R)SoSyE+rHb+L+&e&vo+0>MFE;Veiu z#0wUosuQ7h5qNQX%l6MLv}?LiMgOh(5aC;G zZEi#G#UV?l4V2-pXtM-dp&l`<|M4w}8%BhzYD3oTl|E@HDl7%&j@1wlNA8BCEaT4X zd7L@95Pu8>8{!SxI~jkYMmYv(*^o`BomjN!!`x z4xvdt1Kf(qFZky|4h=0SqH+*P{v>7aKvzM?Z^FUkO9X7TW_P63)ld@1ZRg!$^HK1f zqgr__MTX3sWVUB}QPG9ubYAto$3|-q##R-76X)n&gH<^#54d|c37v=H@;@(w`MK~PH&LeDF zohzfLGP5}AtcBbo1Ga#yNghH@rrd9;kGBp}M?&mQ+LcvkFkfDr|7NlAt0#-9-0EPm0k-&;TvuP1LDaBj#1-YzCM5?oPotFlQp& zK^{zveE(p)#F^~C)12SlUPI_vU4B={Oj{_*>3A3kTsE0awhK3L<0?Eu)POY+!M|b} znoU=uj^A>o?2eliY}N8(-M7ncx(Y<)C=K7Qn48Y>xq<+symfxC;K9qbsAWwC;9`Z( zf^Z;cz}#+N79VzWZLK!h*m0U19m|YaYgwdk;Qc;MBw1y0ReIn+NwNEQIFvAo$K$SX zr5D$U>>|3dT%^QX1k3rO1Ji_nTGxv`7$-PU8n|YGY6A+GfeVQmsmS=q$YghLlw|w62p#`s%H(Kroz8vw5BzGkvCcOZ z6lSIYGnf+Y=_=T%1a`ZvBFT>`m-T6_pn5Zxv)exOvBpwcTC~&7V6bu9vxWb4@F}Db z20cexlq43w8j$!M?r|rT>OB?-GvrKCw18||qs&@~UQwg^Dg4ADw!BmUaK%5EMrt6z zFQr)z+)F~=39VYomabn2@QhDxbF5Uc1F+_gHx>~e&MET{D+3L2bv$^acp?Ir^p?5( zmTsAH&${6TX796*PHS-C@f)8$M8uUjve( z!N^XsX8L%+URY-)VN~ov$Fv>&VEB3J+!ir9V4pnoH58Bwt97!z}M$wR`xYmr!B^1C|TfVL758m$kagH z_!t8sH|P_i{ck`l@KA@VP%6%Xn`QKS(hLAn=>wQmX9}p>aiYJb@{LUNGuZQ%u#fd_ zcj)EtLXc2t_VZcLt$1?lpl$IDZ_UD6n||J zv7{%OTEKxI&m`(mSMXC~hg@s8GluBoIXI%w9{T(ue)GlSfmC()JK#WsY_ZyJW8raV zM67r2r9~Jo`PwSC;!#aU*CT7A51wtOiq}5pqDhSqy(6wrupl5v8n z3qeUNkuyRFY{iU-B3KMy3nf~5z?Bo8h9fWPiXr1Ml*fZeEpyaqA7q!gJ)W<#--rl%LV^BmNi}MGQq!f$!DIAQAkpzU^dkF4KK%2i9OUrPIA+ zt4*32W+@&dC#gJ5LyS@d`*ujTqW)sV%p+p?>hA;?3H}pF!R|ESFCn8%m6NJCu*2hf?1ONi6R)|!~^D z!JrTVY^b98;`Idk=xsqBV^Zk>s4r&(>f|KRPC+Dn<-^b=+%PE?#4|O58B6;zezd6Q zjd6XhQDCVZl+XS8M1q(Lt1#4o_16uZ z*gUFO_Lxo&FTuBH?i-ISql*ky;)lh*|_ z7JuKVZ6}$^^|ag~!-SC$(xxtUcBd(9kO_#MqT}@bT#TQ0POfWVoJovi?mLW4A)aZu z@$f+9AmwF2RIe!j(c0Nz)Oep^hAJ~y1y~7PreN|q_)<#B2%B>)z=dfQ_;-e8;AV$t zlQ41)ubi3^GU?t}aatPX$T@9F6g9$5H`2XSs`l~xxcM*K?xb*WL#j#lLu>!w4)cyh zge)Srl{HzxMgPo1E}!)kb6qyrrVbZL{;h`zPaOVr@AVj@0{4s2Y?!S`ady>Zx^gom zvXYp#hlP^qkCUmV{vF+7O9G$6@?N6Pp8E)lQkx#1xt80R^JtWl$64!aKvn4gl}B=O zT_tU(CNY_v$VPd!=6cw!gg7l$wG@ik-)b8lAd0#vE78UcS`Pf8=VGR zx06}wYGQ=rN8Pm$PUCr)TcypM8m2375g!7Jp$;?re0KFxQ+hm(K|@fta6k0F(_^K9 zhGNqfuCa@tS|9iW+`5nb)g5Rac0LMZG3^#HfDNBEDNwo#0D&RWAI>Cv@2N)^IJ^DO zntk*4ERz%j#8k0{yPnd@(dnsSgON3v=7N#s_TUpintkgNV*obD|MBQ#o5E-9k@Yz) zvuA5b zLd2xOGkgh2Ni*Tst6MPP18(i*|yGHRp zg3X`evET~MBusCXYCa7%11zXd>Z?&h!joeOVR0zp{T(7WX7*qHv1^10h6fxv;!w(+ zWhLc`nZpKX9rzWm!Y}V?H1Cm$nZ_>pw-tq@jbtrNyE+bzaCTW5ZW?o8-j7Cw<7hR7 z`v1Zy$3aEi^cY{x!OlG=>a7V9m(nPMUjv-|(AY-<8ORyrL6FCg_ zh+}e96>g{-$uP`p={zg*=6R_(S$7>Kesx(iZi=B3g-+)v9VOwHmY#gPF>igvDL;UD zc>-O0pONTcKc&E!FL6ecgz}F@mr~f0%nX3%KxBarGjZEQkJZ9wIv;IAHNHBgyg=wC z?GU|ls_&9t-Yp0|%J28o4Ss6lef4?fa8_vDLF5QM`+j!<>^`#{dm4K9Us+Tgi&%wd zt9hZFTKzmgYWsHy5m+q~qj~L$k19*#9!emZ?!3=we5E-Tlmz837Y;gzgWxpdSDsYz z7yjUQV_LAkaFtJGw65#|{adU@WvzRt=*oN!oDx*Rxt1ofR_{>4iltHZ81Ba6`=q}a zL9I#ZH1$?akWwRIuRpMI3hDek79hdUHo%HD;E@HjFA0AniJqW_-nX7gaQ3JExkb2J ztBu*wCZof7dOFtX>1_;3XF0PBm8nmF#2CEBZ-)vy$ox@G@hch~x25Bo)tAD%dVou$ zL1>FF18u-6QlL@5LT(07f5v7rdV|cXZEhzAkr!f_&p58F)&{E-htlTA z)pHizi`L4dn6h9kE)r;@5Vc-lbC;>l*GGrt;uTyNI^sOUuKOtA|3`tL49fwmd_cG>+-^uGcC_2%E%-l3F+$cBOoX6vBEl~SzFzfQhVp-Rh)8Qb~Fu*P3 zBd*iv#pVViOFy3_-Ba}-?r2*0L)D|V1a{0RqwtVu-ni#X2PX&PYKplX=HU$zs9KYn z{E)FMpSdpQ15?1q*Rk(I_Q-pWFt&1#Go@29DjShNBG}R8-H5kzwel^A(is_Qv*D5C z5`U-b%@-vwagSSnQn{x=vNK`+QbN65n~P%t*?IieR;TAn&b~vpypOi2jT^d~S?Wx= zyaGO2BZ0zR18EqN>b!-V)WnnwYsU13%D+^Qu}Q}sq>32O<|^69(@vCC)`ko;LNcYCJh)lM;o6p!&t!x$8E)-#Cs z+a&%b>%SA7UXWJ-l5RMUCT|6)pw z^!Cm^I|KavAGU8weRUl~?HCwrOa#DV0fWwvZ~w(VS|F`#!|4s?x?#l&(v07gIOaYH zAa+cMB7~#nsU>!PI^pIt{w0R(ObjP!7sgqxbD~xQN1{I~c8ff@AV6{6YsSttegj&)LwHtAiXdhO?58HfY9wn@yk+^@g?ST&u6Z4+kL!b&9 znsc)0^BczN@Fnl(h;rLt?FX^L{fUU~`{3VXv)F90{=dOc;b+Rc4hHCxQHM5zzltsn zla29?ZM=iMgTBMR8@|)IL%E~4%hhwK1Lpwq0w)X96!OfYvEy=M=tAoW^^*uf6)nl5 z)~R=@Iph<0+bU5MO9JQgHU5dX9s4iMj*Q&x>oVoP7 zzBGOuf0y#k_34)|Fk+3sT8>5+qc?1_pLR3yVzXalP|nnu)<1D_3~pcKG1;k8sEk=& zxiF1xMc2%%Ds}nYS-!oDZz12Dy1tn`Am?7%v$%79BV&iom6qO<$-sS9!+z$mJf`#k`|)6R11Szuyb>FVA9*=L|~*Ruvo~K%5B01gbJfc7RPk z)lSomvJ3Y(;$4)vuy}stOz?mdEHO#Ofz>>^Xf$C*>YYo2Ha(8^9nOI;Sn0o(;lG&n z6F|hz-viVDU_Y$|B7h#C{UbvFvVPhRpr4rNI94T40Yp)P>zaMiw#5DG8pe+69vnw# zn?CP0`1`<-=8~_aOmo{jWCSwQWK|$22D*auAbZBYTbQW~KXCx(Kqzi_|68~QSI0MK0KwkJr;kc8=8D&fwG8$tL#~M)` zFCngREQu4u(2erp7eyFmj~Le?$C3UcBv~X%2vueS)fM|yc}%{l!IbU=`7Vhp_BC<{ zi~SJ!wSxPh#wph%NLp_WtNG75K5>c|lZ@zO(P3EDm?SILdPPa#WyB(`Q8uon5w_W2 zi4}G^(ydL(d-NI2a!UaKc-m~k1FR5Q0D$4|TxLFG+qP}nwrwoiHDuei&1KFlyXG*f zA0qhm?a$qG^EX}+B1DK3C0dMFal{o*d7-8Vn1wZj#c?9@qT^L24eSC?J&S~qvycE>K=eX_s<_uSXRTkp-# zOHaM^)ki<8^*7J}gA6v*5W@`j#t5T~G}>5W9Ja=I<4iEoJ0BeN&~AG?^4w#4?Q_r} z=k0gE1=DN`(ILi3ryLKlX8Rc8gt#GIh#wM!gdtH#9Fl~jAz4T+k6W(0;bv67p?&(q z{%&CoGysHwFpiT%^f1>70<`L0WZf9r<<|B5Sq}X8eEymfz`FPRl9a$g-IcOF)D;Sx z&-PH^dO{DQ>4wNEMQ@VCQbz~i%*FIoJP>~o_bNEQS!6QjCdLooc#b~+c-nH9#Hk3N zSSk)1hGM7`Q#s5aml=Q0We$UiSKqrqnRyd`-!emSfDVxjLSjAGG1)|gX-DCd(x5^n zMER^mxr{|4iyj^pLmc%t$WR-kxA<%(MOFqgTfO8LKGs@RRkZ91x|L_sm;<3~pB=GUcp@aB#bo=@WYss`+C?85Qd6bq`>+mF<5H#l$SzN5G b4Z=WDyEv}61jGUn2p|y$0Fg*RcmMzZ$c}s$ literal 0 HcmV?d00001 diff --git a/dist/admin/html.open/res/fonts/open-sans-v17-latin-700italic.woff2 b/dist/admin/html.open/res/fonts/open-sans-v17-latin-700italic.woff2 new file mode 100644 index 0000000000000000000000000000000000000000..5153813388dade92abf088e0db77711608ca12e0 GIT binary patch literal 13880 zcmV-8Hpj_#Pew8T0RR9105&)P5dZ)H0A?@%05#VD0RR9100000000000000000000 z0000Q78?*8bOvAmf(!_OED4Wb5ey1}o+N>Vdkce300A}vBm;*K1Rw>2b_axb41xh0 z5m!YAV%RtUVD8_zD1waxNO-~xFoOYR01$-$MNsMv<4_juyr(oGO->@&UFlBx?%rw>k6YSpk3JkN zZ7JQ!)>CV@Qm?B4uv>?7MqG|#$60sQanqQ$mU-;MnWN+E5z1I;TZL5UFNHE|8(Htw zwi=7-YxB^z7Wuondgc)1okd9j1Oip*sVEs} z%2b-%sqdYeY5#6{>#%g#acstRtRcRi%MiRKKRG}UvZM&NEL`V|sMEj+?w$01s+R2l zAa*IqiI=0cb1E8Z9aQSMs9dz}X8sHa%peE=6+m(WMRC`p=s@ujrR8~vm3&8DNV&Ch z$*_@f&`K91hnU(BQW?YRuPNM=ZpwSt-L(!yUHCB-9pK2+04|cYSN~+oerUsrwgrzv zRdyJI0lT}1dp6>`_%n563f0)UmkWY6?ph&8$CD_|SCU!OKJVvpUO znh1~v1n?lF7kfA=!~%4Z892s}v}xH~o+LR?TJ#usN&v*4h(<^v#mTdi*IPfVJez+u_w15>=k@4zOtTtc)_!;RNwG#xiTN@^?xD(MhzJs1 z#(412kKaLAcJ%mdsOtUy9-{s!UitsVdb1?e_Hv_M(OO1*5kUoR$iL$BBNp9i9ulcP zyS($%AOPOHc+01?{ouYQ&d*Lyj*kux_V;#o67g-9J9cc#+T2)QTU}XRT3nc)o|>E( z9~&Apje9tt-|g*;s%@<_3H+M;U-!L|;&Tcc5Oo9O7{qmX;Jtb0eo~IEPY?hVBPPb< zeRvY@$mgcFgD1m~tbwu-YpqqLsIbP?SmhDuoAW4qR_-4Q30)uQ0o^G3iHKQCEuO9` zsdON<0a)rj%}ee(SEW)38-vl#G};MPF-;tAf^BI7uPVyWhJrGoA-?iRvVi`1SaF^Q zX*xPexTER1cNG)Viq4n>vq_&w(xy5e3QO2;RvuNxzRK#)DogsK&1p;r4+VvTFPh6R zm-015M`;+HI(YfJ*vs$?jj<_CqtwTDPx#gCvi_zhBn%Zn{zd5H&7T1^KoTct3n*lF zQzt_IQmVP=`cjerTuJl6=c+ZC_pPF=G&kGdzw@gU()pG)C+Vpu8fhgsaDgzuB)R^{%o-%o1@aPI3sAIy=B(q zs7E1x!kVwWUFT~`I+?&nJy-0W3P}+o5!>?uS>=FANrIqgAQx5A>7S;fY>&e7q=yp& z3LAwzTVql!c4%gbBIePTs+BP8ki4nLfqb+bma!C*^tN#1epUK3-%F(=^wJa`RffyX zf@e9*s1;alf>)*{m0sX)iGpL)?PwCOs1svW2Jt3&;Z)4k=AV%|ZDM{3VQ2FFl>#mu z?i?|xWJRys{EA=FE*^_7Y_?QzpuL-Ab3BJZNw+O1Y=$>Yq_cF_*U|)j7KEmg<&hG2 zC^8-mYc)Fj9ln^Jd+p*(?4IK8@qMu*JRBL>>xvkh90p6PN~y-6dZT_~BBX`A1+F$c zaG3yOYYESwI$V=(q!z%AZ>%~*(O5vk-^(q)GtPAA4igtO5FEARRAHhB)5D##rhDsv z(7;1uHV8nJqTUcrd<-HSNbdk<*i8STSGyG;FoPcErId9f)(C2%meG_#?WEba@vKu< z8dL!>eGFQ4r6$Q8^|eQ3TSrnnR5^)pE_f#^mu`XxCj07>*XRW2E)+ZFlc>=lt zS0k;mvSL|I10czR#6-HrO0k9oAt(jvdz*LhEKOlo-@Ul+syt$F-^Vh(|B^b;-+#sJ z#}_=n=>1o3KFN^X|9syQM=LY9i$+Q(GeFQPkANaSvvQDmqWMC%qRdU+L($}m{|L`D zK@=gvEYDD0BNGyfaHqqPcqCBf^oxH4s_WJn(RrQU35!^Bgnj&z(DaK4pb<>rv51J49zgf(EV)DRTx4)bO1O@?^<6{oK^!$~FKThCY|CjiA4a$!L(4Gct z1kn2;Fo4NUNdnQ&8&S_RkWDda>KTAJ!Nk*x!z@oly}x8BCbaO57~j_MG2USmLG$=c zT!+j#9k9R9Ge-DXr}^a!K#)9lb+BuFmCzg*Iq*hMHp_@V8_9<4%?G?y(!|`x18wgQ z3!PQO+*{aegnFTlRAo&a+ac+n5L`8O+XjITg4!5shBl65FNxzIOky3c1bN(AZ2}%B zuCq9g>N3*(_JlQc$ZhEPdTEg_W53)tp18H8+2HFHcNYeIHJpz_6PDhmp;9u|-g9p) zuh(?rDy@EzQL3@4i(^~pAPVk08S6IY))qlf#JsR8k#=XAbM?gt(1=KLz8)kzl)SOq zJWSZF?%l~d)nl=aEo(i%w7HZg%N&H219m4?0gWg=IfgW(WIzdGh(<>!Ng25kXe1H9 zRt`ddoUEsVQ97N1QXU}^N_psHWsWP*UFBO#s~f7G<_If;?JmMfmbnF`jMc>qGs4Yz zR<0Rfi=E>}T_(@hDNM1QzyW@Mq#0YPywYcB7c7`} zu*tz4Y-^NJuf3-$$ObIa!gM)Q$XIPUN>dsr0qse8&;%t8w5>P@c%>4FAks&vnZnri zf)Y9irn?`L^Hc4di?z$ULszGW!aQ2WLDob{#3)J_B1Zj3cMP|cp8wP+_HvY{98)q1(-umta0&z*lxbNrQt<&L#3`qZ z0GOK&wt6}8;DG&^Clo{($eEf>M`3#YQ!^yUa=Ao|ArLIvI7tyrNwQo9i&Wez>O4Th zfcg@Yl$6p?DhksoT0_h1tU$fs2zV7w^r>M1>FGkUl@vitj-xa@0@)J4xh8oQDVJ`^ z!Fr11-5Od#o$aNc=D4km*Ef}IeL{h`UYTR(Id z93GP7ohFRKA)+v)l*mZd?0Q0(4%WvWSV)@qL1J5~gtn|FxVCr+W*%l(xsK#fz72K> zNa_QpBwLE^(oCvYO{W+jiVcR!wJxD0Vw5dJ5||;%$Q2NnNo=7?)?*l;yatmN0GWI- zf;6^sI#~hjVA7!6h9MDY1_*HMQQt5Q-bdvufB@67y>%%b!k&_1_H=GwGsg=tDYoH} zl0ILGL$$!W6*T9V$x-(k2Q4oE1?9R6P*J1VPOu{hf!T#2+`KJLKa?Y^*FzciWnPl~ zAPBRCnJqKYCKlVfHcBYXeuM2mE}INj^>8Yi?yn8ks&4$1d0>axr*fVf-Z6z z(oAWHCE9d0Ksshoow@w53yneSoS>oUkb@$b7_Ar};%7OpDMc(|bZejpVq*f4JYXRU z4oWu&%)$mblY{_%7ZeSs)>YG(^Z_3C)Rgk*tdStJ09ES@Btw===&uDHev_x5rKnyD zU)v5IJKDaCwrK{O_pl*|2WcaNtPKyn``C^Cokvl{G|V9gPFAN18Wb>98a<P^d=^^$@82AU{I%huYvMs11U<=J-Uv; zuVTT`6q9D4y#mQoe~Mx#+uS~~89c}UuGyu7-T_lstW4F8 zG@a%OG$1qOV&+3bh;_Iccv(HqBfA3vWjX)YVs{2XO%faOOxFV|c~9S15~TFV zP{e0htb!GNGGr-LVr?K<`xKa%P)Ib zhP0R$zMD=jUoR|R^b*G~Z=<*>o5@-1PF4Yo>s(967^e^R8_xaw20$IlK_IB-5q;Rf z_#pvvdQ@XvklcFQ^s1`PR7c?6D8}_iMdcvUr9=`4JHZgQ<`K!sa2BtX@>*}BaEdH) zj!uPkS#}LgDX&Crb6drZJAusr|5Fg^#JV5xaBA_za4;TXo5QPl1ilh))#X)Q_mso%W>O-}3qg;ZJg@E~%1?NK-2@d6& z1|{M88kknN$GJ!E+#v$RYYEk?oJn}s|6|bWEzc~}tS293>T6;5r@@LzhP05x=unhx zkVhs)b?(fFR*Ei#iT11zU5ymc<16Dro_qM;?qzCeEL?f9U?rco@}1;%v(W87koivk zH8&KlxN2I#n^wG+)co9@33+~L)c7+WDtvOG!TpS55PrB_FHet)?wL_El z|K*+tJFlqfxT33>m7Mi_`uOZ7V|&{$)A$pt|9iZM4Idi_0wklIA;F{LT{{HBbU(%g z0hXr@pAhK1DD|tcJGaA`x{|U5J67+`X?x-bp1W*gqdoX|`G*k6a?hn+J;IX$D$~-2 z^$Jf2ypopsMSIrJ^;Cmp(V}&W4rg^f(=d7NvULGT^MpD)?Lg6!+ItuOU%amBVrq1$ zwer=2tGh33ThP*2chRRJ!rIGdHpBYRm7sVuFf=x9f`SP*WsTG)=Z%C>qemPu3Sy`t z16wGqwDx)97uhoT^H_1<^H2G+3wdzifmh4?K=-Zw?Dz41e0)B^%CRQxm&<&?FlIN8 zZ)+?0>u$2q^=pJ*!lhA{j`)9(T zYE9W5)6ha%qP<=<^IY!e4AnzuGI&hql}5A5Gh=IQGn_+|-^F#4y}8DnM>otl3!@X` zLWAr<8F2B9>ACOKwzGFDHyaX9Z8=r3g1QTaw+{tQS$DdAM_Vsjt68TlGndv%3&-9s zjU$r>R1QozxqE85wOKd&zkWV742A~|(s`m9Y? zmJf2xdr&g<{Hv^W&M&umdn@y|P2X8;I_cIE)1yp%^RtzSS~ZhmoWw*%6t>yGk*gwS zl!R1-FAs@}?HEFS+4AyF=IeLX+zv!e&%(@oX$41m?F8nmuh@E|s(i=d=3gs1Zq|Lh zE;d1zJanNuijswlp2!$IH5i6v1yG;Q^KvGsLlR;_S))M_krZ+Ki|IGFu&w~)y4vj? zn^(~+$nEB+Qqe-+{No3ky-lr|PkoPuiUz*4)Lr3jW4xMimwy-{gC8nUYtJWitpCLL zr9}xiIf!vBx70TdG8^eRu17(Uz3{2Arr6UD8XsT%QReO7L*JP^>C`>)AI&l;I zzYs_nk%-iknZXaJ>}{3nsJJXFNr`H|(uKEfyjSw@Oup?uXDiM$*Wcg(Z*uPZX=S1a zni~$-c#%6{mS`vZo;9-4P}O6oMs4c2VD(p})Js$ihPT6TTN~F~vfCkHzm2{OU1AM z+&LF2_z~Ho!NTY0$L(`41Ltc`H**42i6;BtxtP+l)siv@GVE9Fy9BLW)*r;v_>H8T zu&fNtB1NxowBnbAgFb(IDiL}-bj_j0%V4!@89Q;m^@o#l4y{*L_|-0}M@&%;nL5cN>2TIu-{q?}!9WBMl`@nVC2HlN@dy zE^JeUb%3lFv{$BHo??%vGFt{2BFf$^MK6x>et(gI@l@8em1isNxz$+?~^ zQw@S@D6=v&X(G8W`|d_^)7nsI{LV3E2{*=%Vj(Ji zT_U-LBi1rRd2w#{(M1NBC`UeqmeXIUz{C!YWgltPX_3=k4plL6e)PMIM6$j4jL1dm zi>QYLHqYKyEYeZI@#T+zI!Y^f))kYcAs{Ywzt#Iw>&>toR&)9=zdD=X7W zjsEhZ`$cv1fDP{`U6NNtKIcgR-=FW!DKw|(eO(!+D%#SQC#DaFzq(oDk;cUNNo#s1 zD0;FZkkD?Ze6N+}-R2D24VqlRep&3s3ML*OwOm4&7Pt8xJEbZ>9y`zH1}iLHc)0z1 zcCOP?eQ47YgM=Vfm8CYq|YdugacfUBaP+|*3Rfm#t4 z!ZjM3yl|;F3g!BgqD`=&y6z*4t)n&`$(wd#3QSlAJiV@dqrITYPmgNsGPxR9y|J?u zkalQeUdE!;Q@#0}=90*Y`Z^1yxi{T6GQymIa>(_+_2Y$$>!G6285$!W??pLE$mZ!cyL47?0tZBkZ(H)|=d`&Fu6n z(tqX!i`7(_!T+arUQaC_=E#eVPrrPl>Ub+%nYdBGe>Z!Co6f}eO7GjyzMRfQDo3)m z6nbPT&)S&hoLa_tR#A;8Q}Qhj;`~zp^Ao&FST?>y`+Y&0uVLTY3`^4kYuNU?FcI{r=$paL9;)j+9;lkGdDG0Y)qrZ`PBxqlB1?Cw z5oSzKNxA~QnCCEHU%jJ6k-(|dCEiQy@ags9{$QT!Z>ciW4$HLpXvQ<<-2Z!z)inrW zNlLBt8*Y_l{|rVHIPb-#KSb^IrR8`@c?GF~!h;Z2lJb^55T;*+k*9=uxJk*ML(v%j zqL0B83g!jl!)w*vYU&L+j@Mvz-kaRQpTA;o+p&7VY$L1MLz!={W!Q7|(10iEnV*;& z0n8*Cnayr#Nqee$B)gb_Df$C(s+J^#?F;as^2SlyPC{r2fHZo%r{KU)=eQ?H;5le~Zs4tcMELN4H#?98pQD1vb zf2s-?dl-oiD#)v^&&%`2#m4ws<`py@E-1kHCdT0ca&qcw^KybP5h+|uPFAh-cER&z zqnzUt-P{usT-=fqTwM~A%;6Hz0%xo5uWrHzezmFm)s+N+kMt8fjkY{)PEFr0*`d_YYh$Yuqh1)c}>YYB{=i@$J&n>TwHFYC;!#`zR9vv5WV8dA3<<`mQ3)Dq%aJaguFj?LOlNP8^11{U zuB!`?Y=vXGc)OQ_ZG(4n^>sC6iIvf&McREgimZ#LAAfc}eEqX#K@FYNf6&HSSM~O- zz`#3qZ}DdC^6%W54hXn6I~O=R=~q3|*{-hD(Q#J2>$F;tGiRH^Ncz@`9svf zssdra*UnyVQ*kZ}{4(+S z{Vhn{?3gH(|E~4MeFu`;H@ETe`ml~Ox7gb!&kHsk^=EERvhh|du79{}2!ds}J2=?U zY~Ar4`-I)A4IvULXLe1l6`&jp z27yFkceBcWXWj}Q4ieTAaO=bCs*}tLy)K3S68*<+X_+AOy(8SiPB5)I>=LucfJgY0T;wecK!At%J%))3>EuY1bhlW%2XWQFvO zAi6iz1oRcPCL*+PyK(67iYsJwb==EgL3XFo-jRUvuU#@*3Rwz0OWA~61f@~e8W?c{GPf!x5b;Na&F5p z(nIf&i*)eOt8jWXN>f)-RK0Jj@oVxt)p+fYKYxl6B03c?jlBi@`Lofd9py&ocD_=BjvX}Mc!F4TF{il&h(&oS*5+)9PlXT8S>a| zf}qrw=Ro!Sou?7(`oq2BTHlNM&af|a| zjIVi52qtrD#;&K#7WT3bup-_~6yJq$kx9IyDJTLF_@H5$j;^YVawJ-q7FuzO?pVtE%pj^vhE$9o&}A{FkFE1R=)? zm<;13E!E41Vm(-8+}^KOog)eMAE(6@MFbM@MmVawLm-`+Lhw0zGdUzO-Hk5GZaFNKG+dzUG&=$pUsfHL)rcs*HO+QaQ+L zFJ;~}n%01TEsRzXrct_RH*_z&sF3kK-;ET^pr#kH-WK|@d=Ro8Io@lK4d(;CsiZ!y zQ!iFcQ8C8-CW7Bf_he5BzEmAK{beh$FIjIPiS-PcdWC}|JCe_GvPT}hy8Uk@LvrZI zLe#0Fr@rLKGJZ|OLjVssj4&>)qbFrhw(|lQAn0A8_cEw z*KTfv3Zi}TT-VfhhK8_253i_8XgZkCbt|r_M37jSmy}SEpOko{@OUgT)WpOCiQMaN z5~gHnu!d&AzHaKIBlU2=7WV|rff3=Sbo6%FeMFqD(GY6WvlP5J2!X8QKJ9+(_EL1_DLL%@ zbbfgrmxVoQ7ki$8&dMNyqxxe#FShYxGIC0D21K_`2un&K(dAm|t}6B07l{^%$TOl3 zj(8CP(pH$NSg6tZL-*rAc$SV;_=o@1J3< z7sF2=y{vPdc%yu@SSuUn>}Q&AO}Cuvx)h{s2e7vHQR&SAVB93p|QN$8*WHNh~`JMJF1aMq)4=33LXTL7}7HlY??J* zsZ@k+Ncz{cvSEmc0strwu|a{b5SIa9P1X+}Havc{w_9HcQu;xygL)z2_b4WAq$q75 zsfPgK+-u-PBs$H*94ho{=(v=jlS&VbkzSZg9Dlr-@SSEe18bd#QD1GSMoO+~WZN)H zR*Y@bs>(M7t&$iG6*lnDaic>gJ+NauwpE%!QLSu6FxZ`7apjzCw|ga9BEM)t`hqn` z`0SzM{vJBH3kJpLoj7e#>*{Oe7CpW0V;UqpHfa3c-k2Y(vCnjk<%H*;17&N}WH)fj>P%q@eVm<^gA>Yk3 zB+#YAAQ_sT$SPlw(_}cV$&PJPasfg&5wo9HvhhpvAVB>HhK?8W2{Gl~;7tWn{^HNQ z-&gl#e*jN;_Gq~$+PR30cEw@bHv1GI0P@Nq($d>f>EW-8J9PwqV@`>RE!0-OKX97w z+W6V*?QbP3dw~wC@c{mS-kuN1-c975nJ>HEj#ZcsRDR4`4PS$~L43zw0}$sS|J%w9 zlP*-43RZz=@c9e0?`9kYg)tm!_XjcrU>5;;=z7V(z6RDw-zfiN9UI2&Osz7*R*nHB zp(FD_DX>fnH0z+DJCJ&9j=ODyJAFqO4v~)bYi=3Rh9&9qBdoW`jsGm<79#}R*kF*CWAObe2=Gx00zjT^hlWxiJD z^##(r4P|%{(W%};wxm9(insOvW@Io-^Eb!i1OjcWHZ8YLZFa@M<`k#XM$BT2@0fN@cKBMU>TG5nGA4{8bV(bNsqKqV{FCdJZ@ma1=ORO@Luvr%~?0bD4uP6>M zf?}kS6ecacN@Z1*m#`H^R8`^PYI}iI6(;_YVSkRO%p0G5FH%nmMJ6sHb(WEm#CCKt zRX?C03)$Q^13;B!eV$UP=mLr|A5WJQqSE_O#*ZeY5at3xm9-tHWc;f?2NkjNkQ_xm zX|Adh5x~kNKt)5+5Y2bCxyXwNUeXT~*LM9p-wElf5cu4Y@x0J$Y3I{i7~ktNKA6<6 zVB61eA_)uy+&wX0YMM-?S`d)80w?0Y{+(Ef6xJ2r-3TQCNQrEDgWz~T39If)#z6~A z6Tpggd}Vl*6(OAIp8EN8r6Al+|KYLjtS1T(VwwV!OgZ_h~{3lp((r6!=bB3CF*KPx4JJu+^Ub?k-84X9TOcN6!%VQln|rXCq09 zWa>uL`|M~?U{QE+w;zIB}1hD`ya1SP@ z9->bB8No>6I?WmnNcyJ`Cs0$L7Qk5u_O`a!fB_aJ1oYe|7Udx$ z87N%t^qQHib>1W#lwD<4`-s`~*x~MAh)(rYSKRet5{Y>A1kVc`I6Ef~wR8@EEqSQv* zoLD=v%bMR{kFeqL+jhzEwC@`y)2Z8ai+tGY$+Psl1q^fDQo_uFPpTh=AaXXRD?Ki9 z`NK2>!mtU=wqhw54>W)yjGjo`Ap0o>NQQ)_=_)}PE#~O}23U~bm)wB01w)WbY@@^D zFiB7{pbMmAK2v%hkOr^*D(_rlQU!)%MhpR;9GaD;1(EYj5Y=E9PVtYKeq;oAlZStj zpqXr|=5~Sdyxt-Aq<73f#a=Tm>B3%|B)uIHC*V{CD@n3-L}iRc>$rr=4gC#6ylQ(31XH5%NNVi_+^cQFDpu$sBtZc)LyT^kbahR^(^;M%tH7=AvrSV6twbkVIg`&i2hPXj4XI>t zlX&l9dM*L*3D1ghN5!cV2#{}FdJ%2AKn<%4u;J&A$B(P*p*r?qc5}S7xO9DUt9bBj znZ1GOB?(Dye6!4a&8!xI%JWva)pm8Z`fTr@cVqR{)qku8t6^jG zyIWb~BAYVJ(#rrLxePUB&crTmR4eB!=F(QSVqB(G{@c$!bL|aln`hZ)i4#}4vnM{| z>xoW{v+~r2T!=L;Efkik{&Yl?1u&WB10RbuK#Gw1^bP4e{doHO^q;9p(?&Xr&bIbI zK4!1mf7r6h+U04($IDroOK+x01NLqU<5ZkNSgCd__w8R`zU|y^Q9Y896o4UOA?J2e zpb!{q#)47cWD$_IFca&!$})3Ej<USamY0<(>|{;oFPt!k6P)4e^#lC|{sU)u0MzZWHwZo}X!~3(Cw=YO)()+C}P`u-A-JvUvGa*+z_vdm6%1nqY9E@4@;-cocSbRbMjLRRd?qu z3$?GArn+`3MP=S;w**idUm!Ra60rv3b-QY+h0>q=G_mCxckrHAB?fyPm}n1cFd}16 zW_0hwWF|u?Qk~|4QH)h&!JQ?}8VUFq`!K>(?O7@7gBZ56yF#r3wMSXdxu!U?hD4KP z&biC+J9fPSd!ebWs7uc3$|94lT`+-XwFB*U5}-f127=6Bv|Ipv-BXwKFb}*Ug^FX? zh^}mqj*?`$gh!XFd*KCKb1e%frVI#Qiz}|_n#vP!;w%7ZxkFlPo{`RLGp@4;IF(Vdm*8)RC1px?A=tlH4TsEbZd%K`ZaM2b#h)cRoVnlhg6F0@il`V@{qa zQwV1VeKH~RVuhMamq%SzZ*ex{P|n~^FA73ciwskfUCOtZ`Va;pP;y~G)~+blb|?ZA zd9G_Y+ojBn-`z?IS$M|=5gv;pwTY`n9XZP)MNYn(x^Dk^hFJvaqWhft2A3;v*y0Rn zg4gkD_&Z$TzyRi5+bRJBv3hBUb`JA=xHDk!m@2W`CR$(>Q;a^LW0y6V0tayeMH#ui z1srM#j4@XtZSDDN@2xD07JD1Yv#u48X~-=Mr=pnGzlY1k6^|T2bh_HboklB9pN1$o z^$3ZNR?ZT6IrjZ!0Si08yr^j_@APR3=MrHut#A5Y(}nk>&dFLoR$ak^2%)NYefA*B zdUHL2YW7PEcKRN>^evaR8jUp#`(fEwfmfi>Yz4Ea2k(kt?(iNfBJ zYnGYu1M51cL_~8GlP9$?#S)sG{-*OKt4JW?j3FxSWnsEj@Pz-o@~e9&n?Z9Ka)Wlj zG!4owEXv|CL0M*_5nN!TviLk%KP*AUCw`n6u+y@;d|`}_qo@}k@_rJ>ToG}K8pDZ? zho5AJTy=g<3rVv(3Zb2EJ@a1CC{n}V9#7oBb>9OSma^;(hZ`G9X|ESARnKPtlZk~` zWlosVW4l4O|L_wX+>tNmFB--W^ZJ(C`?u#=cdlFNyDd@di<7mMt()ay2}6y7Yhbr|IC}+4!#i1v;p3y*d5| z_ofYK`O70ecKqC2pWEcSq2?(oLmUDGu<>vLK>z2GUfl{H_9>qFW8OBwQNBkoxza1C z_tWl-K8!OOc3P7%dQn2wohZjTOsj7BI@e0|I4c1w%n6|nlf5?My4jMnEKDZb2m zHimh?EJCz(#4@aZhnUD{g<6EqAVdHNsRh;NKgl1 zVLF2l17KF5=?n{a*)up+mej2BWK>;h*H;Sc-`Kp1VEWiuUwq|1m3Gik^C@ z|0dwKG7+mVWP1Sm{ZD2x9)HB{BRd#nh-qD#MFM<{Z(iO`TwMce%pjxV^7EnrzP+hp z0Pt6bsPG|4oB|6x0Gu5sLF`;2((rO)Kln`mCyP-eI9Z&El9MIaYC9Ro#L~%<)ciRa z1m09yfq6E26fvTtl)7$~2;pF{5UHJD!X!zSN#K^ElQ2Cv9s>n!BMscS*^tviJjox6 z7s1J#7D!f*%VUf}B6F_KJOTw6u8@{YL2{V!J207z$46pe(6AP_Q=CYgY-kyJbC3vO zu9YqbtaEQa7x>s79oX9E#ClK*PYon(SqLSao4XE77Q!P;D1k>23qm$eVV**rIhe?( zTyRkf<>tL04siTgx{=!Y0R8?7fWeWtlD+ zK${L2U3&BxFa(ES#Fzc4X^uyF7!S+QormK}Qz962E%A|a!oqM>78VqxQO z=E9X5cOJMrdGY4Mmmhxtcmf3p#uwte4kb#BX||)xVO37((b*&%YCy#r?AlYKMTIF( zd~#B+FFyOKUB5eSxgb=STH)@AaNAw4L|Qa&!9`I%sNo0M4(aYUk@g!8nfrA*ZZ94b?S;da+Vcmp$=YeZ-|IHHpFdG27? zzI1?l`%#-s(|!9KQEU1|&>(a)qZ>qWcmGH3uUuN5F6|#L;b7YA=coC8f^J_;-Ts?< z)y1YmhOnWgb=>g{j3j92N{OIg_Jl_3R$Cq~x^~JkGeE*?wMdhv2ClBRm z@ofM0smG5HKl;S$N3Pj@wcYovD>sLug(tf7QaitJRKR__`OV|8B#e9N@y&1P^hH1V G)iVGMQo=a^ literal 0 HcmV?d00001 diff --git a/dist/admin/html.open/res/fonts/open-sans-v17-latin-italic.woff b/dist/admin/html.open/res/fonts/open-sans-v17-latin-italic.woff new file mode 100644 index 0000000000000000000000000000000000000000..2bfa58261aff0f1fff172c52b4005304ce9261f8 GIT binary patch literal 17440 zcmYg&W0d7g8|`UZ)6=$X+qP}nwtL#PZJX2fv~An=?f1L)$9-0IYVDn;Qg!N_RFakK z<0dC63IGE9gfKn;>A%vL|A+ri`H%hoAto#$3IG84|7fWH10vu^OkPguM@#$Ri2nly z09H&%Mes)}`{C+8aNfMw%8^r|V*~(ze<(ob2l~F&Pdr982KGOi{ts{Z$%lPZM{6^3 zb;bt(Kz{#dYCp(>|BHrUYHw!qqgew0pcw!FM3b*U3zC_E(@$MU$e*15+b#-#$jsWq z^hZMn0GNMtnLs2v$~1Em17iSy`)8j3*8cz!=~-$1BmQXr^^Ncc#EAItc;+_F?mwFM zPk$(X+KS8I5eT-nGy2Kn{rMa~-9PvjukF2RW8nVNF2DItJ^cRw><5%*YhYvYqlN$Q zi=VtX5`F$0dpjp*06^deK%GDPbl;O`Teo*K`Kc>J|C4w1qeCeNq$C1>ei-Zz{tMv$ zvBUqZ|I?v=w!r^y3&4F1XM_b<00`i}d!3AHvqos9HglyvD_t{ADodEk2Rd4Q1_M8F zFChwh-3sV4=+qtG@iSxq#t7)!{u5ZxP|^}MI@(4F+)KvSaFK_`rrUQ3pnJTuDh>kPY}QYIiQE$ zK7aitGB7oL>c}HvP~a~jQ%QQ{XUQa7wYGK!7BC=!GW9kpR9k<=zU^-$`vj=pv;z^m z_z6J;<4GvXi$HK;=cz7PrWLPdG`7#s|HUtqrWeV?IMOgqw~?K1!TBoVtN@&xVT!Ko zpPY4wiJ_a_)jCnTH}lfZbk-ovC%ZO3N^sd7A95cOi*bx7Iut%sRMZ!+L5+L#GZrq& zVs7iAh+83;l^`8wU=)#26l`Gr_{>6Afg3HRTu zzkDA^*#cb_dNb6ilS}d6ihR2Q=b7eeIcl&{qzc<0EJF=dkbgl`vKtFVxae@M|CTt- z>6mX=Rdgn71*W>?`t@#jr{dG2xNW!#iW`K9`+kvY!1+ppgsKq?a-s)m>%L1Zl>PF2Fp6a5Rr35cPLKe)`+R=605S%uB6JaiF*~z=AJ3nK! zZsBebhGsQ0)m8HC(i>dLK!`Y6iZx>#F z48Vn5X*>2C0c&o>ugQXruKvs0po7Lv9~iWD?f|idby;9t9XI29!5IFt9u>16 zgy+JG#}Z26pC`I3*Mw%ETcAeN7s-WupEzGSN)%(Rf6l@r%?*athDX_bde-pq$YG() zY1`HtL9Kb^zDu#aLA6^s3TYZPqAz+?=Y;Sj{tw3N9h+;qKZBK5y_g2;Hd$L^V427a zOr(jlXukk$E?6k8k^q+phw~}SD20f*laX%ZNZ;C2L6WiA8b&W zfu!j0A;j1m86Wspo@2JJLs?ouZFG=LlB{rW+=hXU6(vY4lwb2wJ<;b_UeNQg6>O>TE$`8nGh4?}C+s_YWqv+KU4E&LVwTUA9#triZEj%s7{IS%*iCs16kk>m`9d zI@1UDx2I^vaWWZhH@h|(+Ek(`4II*sNnNp6dxkm0cBu1^4{?cqo&*jXwm?wmwwNUB0CwUqu*dC*|r|U^7&(dk8?t;T< z1>Our=qAziheinctgZ-P!uhZ}wn-QTW-5>B!!y-s_E9S{`%3M%uD#?9hnb7K3dml` zWPCC^b_3Z-p;`Z?`#vD|Qj?=B;zKd{*7Ajo4Vcp87@Oj{0O3#({kv)aX=dtt^BY0-58KGOk$$yLarlrfv@Z#~dndN>& zfkJHG-C#BqdLgvH<6MekaMvJcy@PKBF>zzR;vmL_Gl;k9i5I~bX7)+q-7H1Q9q0Mm z$Q|F%TzQF4;9g{(0&YG}xPti6>$pAz(p0hZ=T2d>1d9Xve0?P&fnX$gbZ9nZIhxil zIp118!L+t1HF>;d8l@1pQg8{2z7Lg2=m%r7YAb39&??VSpe6V-W zdXCIJh%D~2sw9q=rkX^_PpZeI!(3l*n)Nv7Y`SS#%ehk;%x~a~IKMwtW>L-gh{qVA ztRA*HOOKD*CmnP360f3&gCSt9U)@xHc=!i|=1{;tfW^!5pkYT5A^$=|jq_8-Q?P)J zE6V*xE&Qw7m=sZr{_5fn#oGaKBofqu<_W{Yq;uY}n8isv-mMsJ&c=AL21IhP9G-fH zMlP?3%WTzuiCIcS%;MZ9NG3(L6JleL8@iKKNK(D^r=*Grum@ zl!c+^^FjaKqXGUj%J8a+2W_Xo9bgrPx;#aB44Lo*iTVOmfu3OqXfgcf;HdbMBkYR6 z^2;D%fHoXltI1i|xzO6zz{g@O@!(OR^C)3DW%^W2tcTm)V=Z@U_2J)NjdL-6Cl}fM zq?CIzD%39%lYI`~n|=+LW0T|9Q?AL!nVj3--fr>|B3BO?=UBZtZ*Lu&X06MIbmSBl zvMG~qJO6kc{iY8Ji~x*!L9N7k_p7mKxjK21p4^lB+DR30*aF)MlzMsI2u3E%;&P?8 z0+nH|!OogNa41_r5o*4^?5!<8mb=KKP;du5o$*=tcF1hXz$>f)*a3WVC`ry>U`Gci zd8h(dGZyta2!0=I9xsetYPy|3a`<-be5B6`%oTxhg5qCr_-%nDPAr0m@*vyKpaO7Z zNDTFR;tX^6hUjoaI9)(!Gyz_}i|+pBI0_yO7%N`;-y6Q_iAR4WyDKJwvLz0S(7PYC zAnb5e*i%9+*3jDbD(MG2*X*sLDqgB)-F&_eD~db#?n7X0RljDMa#``|0bdG zT0pDEZXf_UBACc;GKg12I1cbRO3U9}zic62E`267}N z|Ka9>lH+v({;Eg^CD_L4rcgVTS1d_QwUt`mQFGE-b`HRmuvP&B{oPZ3eS>p&jmUBc zkA%5Nt19{x^O~xW7_x61ME!b5EQcKU$w z)^EiXuVVL7Z`ntT)OXeSL~F$v4IUVASn2AFxZ6sL9qA2n29JJQPUgg>8RG#Sv#p>U z1L(e8!Hv`E_Rps!IzNvP?k1mzOVBhn1O9RIoARnIQ!?7 zMHQ(~>5N=X_pKH;y$qk1NVhRCFn!5_Imx{DVgDRim?s3t8@xSe$eZX0XuQ3MUp_9% z?zr{!;#p^SbUb5yE5<3Vts*nwlY=8G4IBq(x?gR(vyVLD7H0BRjJjxu$u@ zK+Uq=KJbbPQk{wf*~a$1aE}r{>HWCAjI1v7^a(Fe8wdxxQ^rdC$3sOS5GRe1iGlO* zj)3`_)XOx>5M~xgzIv>QtL+oCIVA@EHrPT_TDCU?aJxUhjBk4JeK`r)Tqo>x&7YW5 zz8{|{w4LpJsrhL$dp|E2$xL8=d?+c*M-ngh8_SD%P?UH=C$StJPoGx}Xme)sO;d%n zxzF;MhfjRFwKEW(mM4>G3Xg;Refqs>j(E?^8-FOR75uyO9MuP02x019GhEIanWIl# z!8X@?D^A&aOa39OHdl?oU~^P4vL{_&G}`XO%#yx_9jPCw9vq%q$EnKQ{8?|ODK^bF ziOa`ELUKZ?QnN#3*#W4&E2RhM2Lt9=f8ZppQXGz^g|Yt>dK+^8O#(jKh!)!-UmGla z8o!*T@FyEUI1n`M1eOu9p7kHX10?p|+3WxUz*7TIfY&V7D>iL)8=+^-CVQHLzlo}N z&>2wmODNb`E{+!NMD>0wHC9VcyR6!_oXG1*&m7eZ{l&8|#6y-r=@r>ZEW@BScE+tu|Ye8wX!r za2jbjpMmAtZV}E&qq?iNh)Q8@-N+jz-}T&J_?!b&N!vKs8<=9m(ZOkptXgJT&d>H= zJA`cUXS0MIZpEwZW&l%>r_;nFhEQs!A)5U-vhnZs4oX8WZrEU+&?ruyhoP3{R?*MP z&En}2Sv_s-_k!ab7&*s8jV&_E+Z0NG&}8r@rHxy{tev#+9OF@z6d9-#uxvEKKWhsziO4dR?WFVTJR2bnw^=C_$+W&4AVh>BFZ_TPdjSwyoJM$o-UW;emNXFnrNy&Spq7Yx%I}Vr zY3GWS3}GUZ6_hE~2hOk-P+*tfSi=eroRJQ41)rxx*h}8#*NB;XcpPU;?(u_-l~5T_ z`&(XC&P?UN=)Y$lpXVPJ{{r`GSnmw5WZZD4itd-HYTapDUL5Bh-_3v9T0<^3o9X^D z4GDc}imbk*L)=*I^4a=zCxRv6KQ`Oj<=tj`SqvfXaWhz=;`V~tVE6b3(d31y@#}%_ zVXxD4pkdAe!K{0Y-VdtrZ0g~ww&>|(y1*alpd%_PH|_k6$$2BI>?tiH?Wrs<{q5i& zFf((kSC{8i_48eXZn{J6N;@#oE^8~{71)kXKvnns#`CPCP9GftDe*Nsa4{Xgz;Po= z34y1t{|@!Wo$Bu)loPq^)?ThrJ%b6aZ^+i|Ex7d}){w@H&tX-tUmSjuy9qB`Q);47JG8TTI$K$0<+cJs0@OSF${nFJD%fOk2Bz9?YO|W=TPKV>*8mutkt``)$FJhQCTY5^AprcLdz2g zfu-SjNC#hbNYn0Br!&LzGhK@ney$~c@GX>}qmHwUo}N$5MCv}UqfS;nRc-=QODB>O zGXv%LkxG1kBmA`8`yKadh_?@Jim#4CKC{tE=lnMDwq2*a`T7IY0VmKP4!$T0> z$M1O~E8#tlhTGxU+JarA*o_yDgbmmZxBSAH&GuW?V9 zbRn{3aQ=5)M_=}GcyoGHnuBLvbm=p0?fRZ5ya`fC*#{MU@^Ner+D!#=%_Q}LN{8_Q zj!eglN_07`nfS=7j3E2*_vWk5q}rYnWVh-rLfQhVyCkM?ARh9WRwvUi*NQg6H(N&t z60LGRzs~3}Q({0r!5c0Sqxc|*84%^z(2>bB7?dqn?UYB_vZe@^s8Blyv+Y6QxB-Ii&BZX=+$QtIWm5n-9uNo6AWj2CxBLZp%o&eS3JP-P2Q$hh~9@*!cp_ z3|twF`!B;h^pYV~O8`DTkt#*LyT6O?d&s8j{Vwy(rPcw&mjGd75@i532dZLHd>9Y@_ED_fH%Oe)_DA6Y8zBZ|ALilqt4`9hMYE&-z=RrOB zyuSf9EwmfTABsS`^iX3-pg;_@t|U~V4=Ogn#SKA^I6)wk# z#@A$`oDHt;f$Ks~o0u~Ny>v$F8~@ovG$2TLr9asE?Wrp8@^psqN?L>b6@H)dhxlju z1P`60=7jUrFP7vKhXXCv24-tA)$JKQ>!4Axc!|H9I^cy;FmoMObA>lSyd;6b0&079 z@Y(#n-t|8D*52zq2Hr|yy|j0k+3dt21@g>-Vyq(ikCt;3B=#ikNI7 zYyCy2>r8`{T}37PCPFX48=-XZ=)rWq+a9+eTracDxx24GxB57LSMSR%HmcNs;4jUn z2&!M~Fn_I(t>g{Ph`E}}UDWNC8DsJmq0orV%BGr0P0+Qidm;Z8`U-7|MY^$sXX6dBE@8p^$Lb)Q=krOBe zb|*K~O^9$dF_BtDjM(@3#MHm?hs7{=PplXMsTja}{S|Spg;dzC3ixX4# zpPgGJXQQrd#OH`r?xR%4a!t%?lZb&tQ01!whO7bdhsHf+QqT)ZR%_LE1};j|0w=e(oVSnJo*`>f zv(;y$%z#QhpH9djPg%r1@oN2Z$(nZ6(m^A3RwY2}vXllnbFnm$&mM!V0fsMmT(gG~ zh(b;t4JekyX%bPWZO)`|7diDu>4VspY_9}?e`e$P4lU)){u>SCi3neiElN@f+$CxN z9H2p)r-IR-P3a^S$)-c50anCo=eANmWngtJXT%}8b`bujVx%ha7Dw5qlUDwAi|lcI znL9k&-Fi2xRB}6$GX{&v!g_u{2+huC?g1>zyN2Zi1ijN@ZIASB(aLE;gZ4~}LlPzG zFDN0pSP%A8F+aVdu@E}B_#34TV7QyzLDFe{C1j* zFC+wSRc&35*v*Yr4;i_Mb+a%&@!^AcvHspjj|I^`77COpx=coc_VL4LSjsf0beajbk{);4V&wIbd6y zi7_Ios1%waS*an5(|xkK!%)FDxUZhmi^qk``d{Sy3g+M_$yoyvVv_Uzjncoo|8n5MRC zr{7Pkjex23 z+#94DhTwyvs>#VsDO>`l9(W_uA;OA)jufqeKzso4k1S5X?msi@uGIkZuN{+SFn$$utfi(M6$^HGkmM$++^80JGnh;)Uo<9 zJuD*oej>nQn9zoOvQ5^x!oUm!5QbzZKIsY6}(n=7BL<7 z?@@7(uMhj!xI|%}v!KIVAfl9D%!AojMwqg@L=0=W1{I)8PEH<|oFbhJTnmFsVD3UV zT)A>_>;P*rkPwIbLyu5CoxqO%x%;dI^W5Ln&Ee!#;QpK6v*SG85-ObreT?@x8*}=s zj7%r{kO`ESgPwx_JzA8#DgKLpDWxt@(+&aC1=cire5VvhHJL(_9#W%*KPbhKaJ%Os zVQuXZ^-v+J?@A$asFKI}T-YDpW}y@gqumH;@qq7qYFxoCmO}5MlAM#Fyko1&_FB}) zbSwNa*+7n|*z}OD>kInNf#W~56keuY%h~&B*qp;0fA}OcXg>ROKvldU6aYAIJ3 z6DXVPKEW4uuj}Q7_Ag#V-dk(Y2g_nncHLr1!LFlVf zeG{p4Gc%b&af9)ydsp>r5aMwA^?xc%H`c^^1yqc;b0~PbQT7p})tikz{R~I4G?^QX z$9oiQCzDDud_O@xN{)L(m}GnI$<#dySWXb5+{>+RGY`hC*mzO`q>8y@;^yTpVU#iT z5)WE5cT7ab(+$lU#f46EOS-ij=ajf8gK|?~3C%W`ZKFIJxBDli5lNauZsi_~&#BC5 zv89)AU|Mk3jFV#$%Of(+x zG3{@h+g*yEG8H>sJY1~G#a@Ep(Df#^cYD>2y_UZQIjPCG?@o0k1345jzW*+Irpo}u zC%5ek>N$c4;y-HD>{c?FJ9#XzPSqvyr%u(s^0tA0SZ(gisP<;{A?-Ptt#f3s51?G z`&c1b+AE(8%Jkg1T^!jhEKb2J&2NN@YiOkmz=w2>rdM^j%>Y~=8_HXr;8Z#-ibU2J zXOc^*q?Q++8JeW#Br~4wX36a#AFQ>vZF+_v>cJLj5rPqeP6t+e3iA)`-|6Yz#C!2< zc6&Gv>=ozcLAyEaw;f!G%s@n^yqH_%o8^0tE~WzFMlHPK$FzLLf^5p47*}>k8jguS z-mbPx)7%1!T3Gu(iSbB?K+<9LT(=$d3eF#iL?u|isKahBNoLHW7T^wzNvQhyr}>MM z5(tl}wBB7t73R`PnIT)|0Hlps^)wSs;H3z(RravO5N$aUUpnk(b`IuyAaf5{79qal zMaLN5Y^%&U6Q|nMCY|nZ%Ep~}rw)slYuB=Md8mePg6BdTh4J~oXe!l~Jn;CCgktoU zi9zNSXxsS3bIWYwWh4H(WGCcgx-G~*w4(BOCBD{%3OY%Yp2*x? zo{_VdV>+;UbxYjrd(o{`1|~*Pt9=uatta~|?Q(HMCdm>taJA`6H8?8JjjptM*<2Cc zUB>k>u{LL^PUUvej=-5Wd58rf(K(Y)0QdwdfzE%Sf@kMo`+l0~xE4CD+Iw81<Ow%>cAt7)?=ExzvZ2jmNUKk^1#eF%snx)Ec=Qy`vlqvkFGJ zU9@Hz|KbdtS(z**CgVo)c3?-2G?s4c{Zdk|5u|^Q(C$|8I4#6jESt%gd3JwdK z2C4B2lRmjZL*Z4pV?^LjvH~&)wf7D}BgDnVvCT}u@X@68O;{+oSl(VM2t zJ6uj!j#4A!Ej>wVVk+s5=4G%-P)AX1CLndU!5pc2X9aBh{OG10q5c8%B6~@;i*KHn zLH;(5H3}3i!@8V)9;PItyLLtuqOmSG7D0b9;(Xc z6bP`D28acq2B{tvB0heRlAxJJ{4P(BBk@fs`=nNYHVP#cYZ~Zhj2R$gd@oE7^XNvu z40lB5vWIE~UydrzVRgGo%3xs8&{!N|AwfwdSsYpnvRaa*+N{fWKI3#QFA#n+ka3W) zX#WtBROiWeT+|-o^~Zp<*G#sI_Dqvnfb;|jk=ECzw}3SOFJdrUtC2zej@xN0>V8Wxb1iH_0_5GI0S7ZG`hH8<1^Zfh;C5) zy~X~Vu^>z6!gW46EiaKv4_uZA5&83+$B^1F3(|j7JKgZ^L~k|U1-I1HcJmG9*6K5M zBl-nw`0pPPg)B1UA!_Xl*|RSpNa+>4(_(U^4%1!3o7TOr-x3j;_2QVk8m z9A4B|8{ZWEI~uytcK50NztYITRiojc5$Ql=xgt_WV^VLdb9G-o3v6!fMRQ*aF2MBW ztmFmycW@c*kOAlmt(!47)hKISzE@&n`^eC1`AHE7B68P^{c2`8Y<6|cl{Yr4&@_XFR6vo)F*u1 zE)%8p8}0LTFOiK0(J;A*I%E?W2Gb>`E1%h>jwX6culHP8)gJ4awZk;<5aMiA#f^$*)u5f*{M;Y@|dH%G2yd`_U#h_D4yjEst3B%aN@2D)1mACaCs;~OT8Wb$h z{YF3ll{@yo0!DctzcUrhVhknDS9j|7G2U&G16_`nN#t`e+^T9GdEVZeKkfI>FsSx$ z69}`{G<@#%9(^AXyCEnj011Z0ejBi+9z#_805+e~RJ`lbJrbC>fVtRy4h-{RrlLgZ zJ}rey%NK5qwhZOwfW?F@vOMkwrYR@X2pX$9S*3hdGl{Ah9L_ zqujUALIpo`#o^DD@6Vo+V7|I%ag}FhS_sgF&T8FaBpS@(G3+7%92XnUcb3oAWSJ(J zny%HZ{J!Q=)`E-X^~bM@dI-s*6(4UJj!pxCeNi4|R_d1{l$YhOFj{KL>^M1vBf$hN zH(382Sc^kVP@+XQ{7W#3-z($>G&KFY9%xk|pldaOdJapGa>8AZ2 z5f&1gpjCR83_HL2ghrA0eO&1eSIVibi$hOQ&^G_B`ApvYH62Th1E!4)RBPEqCJM*_1O-oxDKd5%BBVR^h?2;a z#AsZmF1#p?%+Tug?n7AsEB-w}E*udX;WLX!kiAeeDK|`O;nr6s#n`E9f1r1Y0rWib zc&HX+cXH1D$TgwX?M=-d!-EtFlnLJqO$KHsZ7{dHeJ`sDO4(^o+KX%!Io{W+4jyY0 zn6xmdTL%i)P>xT3e-XZ7GFQgy3v3R8sL&OI@T6ROit@>@dYQvk2`~*cP>|MCy^z+? z3_*6t8gXKfMPpY~>JXAY#;D1czW^_Sr(b?Z$pApX-#sTl#13@EnJ?Z;R~S+!87UbP zkFosPW>U(WHDHd*5U4OaEQ6xD4bK9Dq7Ykz;=3=mIO)DOp2834uA(|erE{VZcwtF$ ze3ov*JT%2P(S`t@->NYL)@`*(lXG-&t)uBE-Lgz^@M*SmC^FVq^&*}FnM2bqhuiKW z#sV3d)wBr3kFlcua201dhW;Dh;1hhPG;i34-eJ4aAd;m^JN?-Npo+}S4*YS3{I@yf$O{w&&6A*L#188GuWi;vIFnTJzhCs^ZA zW>O`zjAp~G)FaTeo6hsWKk>R5j21YH0#Ss7#s$W7%cD{**!c27m5OkpZlAj@e(dXb zmLK_iGttF<#yC}={B5KJOt5*qOxmZZ=Zcj1`gu84^!x$K?zBxRQ>6zP`8|Jd#R46~>r}r}fMu{3+6f z%ip1-3A4`eY=H&_xE>&&j>fR)=T(fv+IeM&6x2ZhQAtPKXfCVxbl6o^#fJi+80sdA zU^v6X$0Fg?E5Ca@9_{!I8x3-jo1~xlhi1m7%%vbSCpSCN$tj+Ht%)|2Z8eApgn0M+ z1FoS+E~1D-Ks7S*lv_ID;zs6_`75Q7F<#X(jCLBNh2R>gWd0k~w#PIV!fs}h9jDlk zk&#v@>_E{p|7(Zjzo}C!bpUVnB4vAV_{d+rn4I`c{NxRzFE|{!z}faQ#Ezh*(!_Z2 zM#wWH?DoGnz_XD@ksO_YofD9e0pQ6tGTxDYCDMk~F(Y9OT4rpulX{2wmWy}W%4&94 zT9D@RN(p72{w}LmTc*sip^6&}&&peBPLLPM_xV6Pw0r&G1(INg)H;Jkg@RA6Lo=HY?R4Fvw2``Lvhl?`}sG#b@B1)L}Ai=xCFyF#&8u?PTp znQ{ot!pG^AjB=UX-S7Ih;jbfNWke_Hpkrni(;x=4AWn8E2|Tt%z?Xv`SN%EvGZNh- zCLZ5_@8b-Y(IwT~crM%HIC?flI%^9)O~Itft2X^BL8y$?a>mH?9ue=Sv5d-DQR#RN z`UV-%-szpdb=KGxhE*;f32AjKk(288LBYi&?`aTWcDu?1-o{s1x};ve2&5|IrvQK- z$hZr}SZ`rW(>tlauugck``w5l=2NU7JmyNWPw!qaYv%h3^Miy=Bppk#?D6@Q9dq>WsEv;{qH z*F7>Xz96MoE04?wb9_ivG0^b+HO0%MkiCMj!Gg)WCPEp>Z^W@1o z<}pmZ+{`8iQh*|M=8tw3++b%S5M{o%9$$b7kC-zBfA+lFfnKaSA@rut|Oi_*vnBI>IWn4=#Vi9Qdq2eFkjwmV@0du_b zrtGb3itT|Hi<^48lgmQ(c7pqjNhv%b?2K*Wd}+gJa=~X)@lfSwVU&Q_ncaskiBBeBttae>_E4H>jUTG zXZXOY*CKKBkrA>FRxnXAXK@D}na>C3|Ak+J8?_}(< zAWyI&Hke4uDWl2RMmM!rdewx4zcq3vCpFPaE*(TB)PR8SF#0AH6et&jhr3e`F_6SL z`KUpEC8QQi?((K+loRChh1l_yj0!we(WSGyz*#aI)8IaIzWv_C29sRm4_gD6m zLtxdZm!p{5Aq=ez8$*w9-`Y3{E@;V~gRx&b>W~hATouMWZ|HN*mL~d%SOtChkQzET5JSmjHZ&IbRhfBOggAVA}tI_z~lq9kHLNv3QWfBn)*P@Zk17C%s5R$N- zjg7Zo%AKLwWmSIZU2;9)#r*9AmC&y3vy(?qQfA#=HNUE>-rB;xI=y7~qf3u{z4q8A z{ho&>hngd|_{5kD18wdRy`w$Hr7GF}2F$pfI&Fw~p-x}RDB%ZNwO78F^+7K*!36t& zt?0r<%?Y8++C zfO-}pWMuVZ(&W12IuM>143<DDQFTI}bNz@$dxG~~~k$c!J(joj|u zNvCqv7;6l#1`nE=4w8UC&~w2yRA_U0!KL}P`?0)Jt$=I}vL#`=p8hZko`kHh%$Bs0 zg%Xk~bM2JlAECJ^OTy+*~x};XeHx!`N7EVb`+M3-1_mk&++-9nDoAIae4e z{3&97UK%}?MTk~^^I|SolWGLT6N5gzuiFgky(WExpBBBDI>J& zk}j_#Z;numOv*r`V1Y?T4an{fU>BLpm}QwZxuZEMT|3i%zTf$Npzt1a?~@|d{V-R9 z3s*n=>?ULsQ+Y~_=%(pS4k zsIMhS)}tVI*aos#j?%XUlEz2mmfANe`0A8*VseV@yKv_HS=6|KylT-^>B9Lt;vS>7 z)>NhA*ggg30Al5v{yedt%bceN&byr3yN(z^s8r)VJ+y*hpOw}vT14hNQ*yX!i?6&o z+GjXf4*Xewd4>QCaFISgZw7R-B2)M2CX5e6zWyD{RP=qH1l`~Pdqy#3^gsjr7hO^b z{ThO&^Pi49xHf0t1z9uH4Zyz&59)enf6gnwp8>(+v^yIs?gn0i9d?*G`5R=5s5!(Q zy-Jc;2;fir<0HI&_I(EGc)l5o+yKx~;uOtyIg6ZO!#fPO$kl}G#OZT}z|95+hv4H~ z;O*fRv}*Rrr>ZQx&q}xgPN4a5_+tJYcT5@+6>+pY#HxO6n1U9dV}$X9z_mQ`gU|0} zSN7llKZ7S&C(>0x6KLsQBy^n7_;qx%nP>KQk(iGNr@gjY$*2l&cLXF_N^}?I z<2`&zsA$nQz`ynXZ3{-bOW&jsY<-zZ*aT~sJVDMIa4xb|)E_;q53dh3avdc_SyM_8 z4oyp5-+Q<+3R*E`t&flI(=U~iSV%XRC{POL3d+KR+6V-p8F{AN3!XngrKF;9u@jh; zNH0Rvan=*$*}SdeXl;G3U`7#ow5D7dx;~r+Zq!0QJMJ}}#tAs;DU zw0R93vyXs(>R$q;+;<&~H$5GjAJ0%r@&5iGDe@I_eLpB$bBr}j|MoLFJI(XJav0t} z+6|4YoRm1G20eLKRZ-i2d0En&+;o;WA=}>Qx$N}$_Nyl->u=86dNXXi9^&IW93G#e zy>m{E^I7d23$5Hg=DQtaeh<@M$X<$n-~b?f@^Qye;}g!DMsqSxwpH~rOuyBW0vLRf z8OE(si9`pm7GQmA;ooGgiuJYvRm_$pgFxxd*2nePVu$>-aC$+Y!gTujM>Db+@lEU% zc4U5u0_{#S{&inE*#?Rl=zV?OXr^lE(wfc((KZVFyaxZe(b=eUci*=`SYf9W0S1}Y z8h7)l^TtOe@T>w1@y$TE7WI*wnG+hR zF-AAtm<7)Wwr-q}|Bdko=Ui{(k6>h*Q?BKFcUu5re(w6JXcS5mC_85cBYy7n8dys= z79U#V6Tk8P_)z~pFDk}55_lZE9s>6x0P4qD`x9eE;(z}u7pW!}KR`d%p;jRc0l)yL zAN()=^OYLw@0@&g1_lH)-XTozVf@R)hK{6khPMyGPe_iyHL1ZW4C_Cd#Z4C(_s5J^jVA1R1a*0NnK^hx+nLo;P z6;6j}kHzAr#2EVb0rAD7oen>5XpG}pvO4y!YuzbZuw2Wi zs?o=Y&!D8G_NvdT1Q!{_B{X`ek(HEpoOyv0w|c9d4yJhr3MCh#GopV;H1gZo4#8^Q zU7c3#xDE$3#F>I3UX$n)w4P`!e~2s#O?VBZa?9PS)5Xv;fkUgBfgJmB(JXSbuIBVa zVyQK^%3;iRkh;Z`mPS7G$f2xUf#_tmHp}kA>cXz%kMo$)M2`~MAARvYUB`G__@X1W$IfuJ1gEjFd5j~?eI0y%Yr8mvfR8c)u0h>K zsO!qFbN;lq?M+K;{|a2cr`ub2`Eg*ouW|Q*RLTFiqW_w$ySCV@|F`fMuP?>v2({R} zZvz4JzqR1a;VwXw0+{~d#ep9BTk;3xh0K_qkUJxLLYM_q_9O3}hlenWxZkGd&Q#1APsu;Eyh(RkS-%cGmEu z?vCe`@-zNTN~08L(eG?D%y6s`Tm6sL@Y+eE4QIn^YlrF<M=Y-U6Pu1C^l5x?)M$3wU#paCa#d%UIsV0_=YO}fX^ZiGj zH#8v@OZ1?q*gZSdQtVpDwHMK^CFv-)5}0t zlg{$ZOwc%=0R=baP!|wOp z*SyydzO21%dINTc)3@8;=6PTif!+eI`o49nD`*wFZT2?qGzCO#e*QT?4FL8tOCSR10NOt?JRthVc?jgb781vz2+EHrf_H^!BP`R?LqOct zIkeKzIf(6VWe*qA&k+8?a;~e>d)~YZOD`8rL0W?5kIn2JDB}p1W1K$CIRWuvdBYr< z3qHNG)7sZ)eY?D)f=h;t{fmSer3h1im;V0*H3Q20(yQWE(K~4}RLR+{h_Z%nDS!{Z z69tfv7Rj z>UVcd^zSoW^=DOcaDU2+jwPVYaUfIlBxvp*q4RzHYS30OHlH1sa*#g zam|CgehCl0e?SjKAb8qr!vm}kS^$9I?_6d+WZSlF+qP{i+cjj{w#{YEExYD0s~;lx z_3h8ybn`b}5+X#16eU`WSaHM^Pkad^lt^MpB$Z5Z|M=H`{+B{Zsic-hTIr;hK}MNm zmPJpa1NYq5!&~po&`VFf z_0>l|tMxa~0D}xR)DXiA_r?gLj5OLIE{|KTyWwV3zoC8l#Qtt! z4m1FSfiRAfMD#G%3Ieq1US!=E+U3^u{8s-oqeayo?YjiZQ<=^*CFldqOFeD$~Ka{Xvem_xzWep8#p>5 zJSYR&EnV7%q=AqU<;i0DB#Wp{mS-U-3g`)(K@9)k1c2w==wcP$lS+AZHeL1WrL;*E zjtt(L@p227iigI#H=u_{`w8Of!OhDHtPG{iTzTI_LkDSd+!Vo3(hZF{MHUxpYsVFr Ylxl-OiFR>`HWGkvCE@^0x2QU`>141x(8 zMphMUR}bJkhys_}y%5Cz*9n{qvEU!j&Vx-R(r6UDd32c=1_womWa*UzK^R;T0kHRF z%J6MXF&swLQOCSLsjhHPV33tKu;jS*%JLXEh12`J&f;UR)$sFA`P~RfW`Ce<{=4Hq zu=9*8LNTJS0GqHe7M%eJ;}AjSiWtQLI$+22pf$ zu@WhjB%+O^U(Wj9sVVOaovkltjICJzmbxtDw40UX6#$$Kh+j~BsI)LD5!DJly* zhEeP)WYBvvPTxK$=#)_f(&Fj1Uqxq6do3TXe8N+E%>ZoEZ7z_Z69FT^N(_ufKrlcQ zZ43kjR18G0Kon3X7S^nul`PWQrb}IwZvDvZk@qgEx1=hmTFNbrI!x-B+0B3V&5sG) z-eve50X7baaYGYoz|BlEKLTWJq*ukIWJbt`{hz66JIe*gB`MwmFN9P{vfWD=&lR6L zz23dbnLj(&nVki(*rj*~7eJ6lgU9oE2`cPC346GE1{|q;p>m2{3JWM*NL0K~ImKM5 z=-jz!UAL;7%ieu$9m1?Zg^3ji;a<0)hLuOgZZHOIK>oX?8vp_TstQQ-oqqyJ3gwcj zo`kHEnR9_u?-A4j88CppgTTEU2q}GWVPJ|WMu#gV{X?Rb7QHbR zx8ly434A%e5?{iNadX@Xx5K^hAe@d1@Pnq6mG<9%^?wzBixF#wtEPUyWu>lKjT_>o z&(RAH{OeYIvY{T;D*e*BR7~!Q#qZ;X z_wUr}%kxvT6`S=+Z8n{ZN5etCTPpzzVsO@U|7H7Og#+L~fNs&e8#2MdT1$zF>2CFY zQNi2*Xh>l^Rb;hVuFb-Q0#Vdd_=ds?zpUK|@8D(Fpcm0aDkVnYhpHdz;Z8%Q=*A*N z;cs=tO%+#VC~cZelrdnK)8%zv?#3dhzWq2E=&!KKPQMJHq<JS3#x%S%>a(KW%i4CJXoC>pcT) z2KL}K+YTR-poi_@u`c5HW60ZZf>mAS_1~v(LF~Xno)cgr-sCk&)p=BZB^c6{!D##+ zzybUFugqwOGWZHx6`)lBH>LUU5|_C_90wWd##Rb@htcdfvcckHa4>#W1QgJ^1YA17 z-Hd>HU4apF@p&bEh}-mFtg#_M(=6?VAi3T23Nz0VGhgf_S}#$CAX|Zqk{#33#MreS zN347VqK3R8+JbzB_=C0rE!f$9uWQ0@j|>c%fSEU+*OD=$th%)p`@pY-5N!etAGgi1 zm;uB86O+ZGd3x?aRlJviUcOHuU4%@H%^Ne@+%D`P@N^NL9;wCMy#3;yypQy$gka zYy%B;sU#+F1vpep?kG5+B<;k{@R7=09;7Y37V{b%d6pMA>lhD~vIHhPEdpLhTadGI z#UYL8iYp8(P2IS}$`>J3Mp^7gA(8>##UI=-7Za3$6F;BZso1F&g{&Z6Gwo4>l^Q~k zK>!v09TwANpXeqELwE!q}3gtA;F|QTlPqMWffo9bKdGRnm znwul0^@cQ= z0d)2o5*vRT%T~6>nfnJN*8x_m4lD%V_a$8&_~+ay{?7kDwfI+UT5I@LlZVmzdm@8T z`p6IPV(*38x@4`uxh?7dk_BM9BA_L^6<3 zb0@GCcwz}YjcM;tTm}Nt+G+!a4FUlZFw%*Si4VPc0;Zj$JkgdGX7VW{?-ueddEkqg zLU7x=qS!HEyUzO%C`cEQ=-T4d>IAjM9cC*usL7Fsj29oAPz@={$1%_p54Gl9= z;Sq|0OvjjslTtg+Rr)Fu4HAu>1k_*bCF1?ntmoZ<$=`%<$$M zt35l+2n&|9O3@O{8^$2t0KYy6@)sU19Zqn3U}CWWtFm~Y1LxN+HE~6PIht)yv*RbT zJQMb8%bCOpN7)lFcUewQamWs_RzQHFERK)xj#&y#8`e~xZqb78WF3D)17-lNZsHEdD z{jF696@k`uv!fR+8&n)@>I+kCU7Xoe29~HDJH@Ii?S7bW_b#iibYcu^kgbBOAwW*$ zo9Y86++)eBe27**{E@L*Jn3Yta@c=ra;Z9=Za=!RWhCI?!tgh-0}$*(yIJ~$(Lk0b z47BSA*wVUOpdAMUD`^M7OBpexgJ*EN>H5y{Nu3?9uDN4>RZs zpuiTW4a^xNr=HyAv|!TG2^%74AI*wAC}ptF6n*1VKCyU$=Am1KFQ+%0Zb7>}rkakV z4a0Cu(|4sR5kciRYh4tD17dTXY|%5Jfp}1WN-F21^}+!Ag}NXbFD=OPoSc`EIIv4k zhu5LK0P+^Ly11w3cIXJ=LBrF1`%${{wm1YDr4Iu_0d}+TmgG!T*7S^hg%?yV;0PKH3DjQo+B)KqBQ}sG z9F@~xx*ZQj&s)Fh#|HjVCge?|CJ-TkX5(0X+aS!FHJN|PE6}m_4Byso9pqL|r{)oU zBi&|gET6k^{{SzLmVAxp5aj{FbSAXa1@U=M5za`MiD?HAr{tZiV3^RgM3_ z<{)T6u1WC(^yEV>O);B;RfJVMWS>3#ayDQL2c|C~r^0?Er$ZgIb%8&Dg(NX{csCrN z;5wLaTV=>*s$S?IXDNGL;?Jo`KCl^nJmo9;77aO!&fY*Sb#pHsT~TQ#Hu=~prz=OX z*LPNr_2tm;vy9P>e6!7%sIfhOO5?=qG^ja~dRxgFn4Gd=tY#Y0_?s{R>oF@jPVcIr zFQcK4E@4nxfq3R-(^g&eYCJclqW{QbOP(C5PkkLQ8*xZgK_AKg<_T2aG~5{^E)9b( zZF`<5?}LDI*Z&e66%D!#yfYuRK6lEeodWvycODyl{}1vd9kY|Zrit7_I)2jR#%yX= zFVBfahm;qi01wpXq~(9Nky>bXKL7{OlFjb8Z1u1=QbLYG`4g@k#nU}cwwrRibexS`su~k<)hRs&_ zC$)BqMN^;-h6HYIF}uX>>ixCt>OFsUxq45Dd-iHngzkTe)B>H97YU8(>;(~Izy5w- z_(LswM(_mQ*Q+Ln<@Q?!{_@k?f@RD-Sa_aC!6NAYIK0un_Wy!I_)+}lUZ~oM_!IR$ zfa8$sMhF#uOeB3h z=r@IgFPYv=kB|3PD(D7MJ3Um|L&o045|)$mA|47Y_Av0n^m5ZUUzi+0%n|SC^+5f zCX&}AWr9R)R5vt*YDw$-+Hdj<6884Jg^t{@fq386%2 zq`eD2roHv6+F!ALl>9@pn^l#KX{ph_1RPfD`O!icop)fi0;G&8|D!}S3O=@_#$hS^ z!g0xKJD9~Ua@FT$yLEEUS~VUg)XExU)%Dd?4ONnQb*nf0`fs-US|KzfJ|?^UZ_@i3 z(F<^jA(9jDwipyXJQ?di0r|_7&Zn4N|Gx}Kr~PKx^HKe;rTGj0{h~hn3G~Mdhu@fg zy+=2^l^Ll>77=%rOXe+%Ao0dT1JQq0OqN^rt8jTX8=6l2G)YiJxGKZ2- zx}bnbZ1#x5L~t*6zM8)^-FJ%K&9_Yqo6qJFv`m^Xu#5+|HO3qelsKD|*|oGWJtze# z>ROc7-Z#W0H)oMA<^S=L+UAjx?3kZ+vZ&X77J0;S(x|mmuhwzXR?8v!_TjbZwu!fxwf9U$#0=;5~V(1fRHZFIH z|NF44Y5CeaaZLNl{z6%{Bs;9!BaUrVoFFOeu(x^%NEjuCL+^^l3XY_r9ip^7#MASRWQc5 z3FY+gSbMr(QU)V6qQx0)z63~GHENHJ&q z8nwhhTpupk)HnmEJ-u8|*(FJ|v8Mh%WB#@;%pi$m!Jj(c{rmUvU738O z=&`zy190?Jbmz022SKbn^pW3Jk9}3U0%>o8tRyG*a}w8i1?Wihg(xrF!KXIPJ3Bvp znd)=;s+>JOS2-DyZDOOncvxZ<8#8me(hzB`oF~`Mto9lJc@`x-IS<@_`hT*GR$Ao$ z(Q{5AVo5U^@1GcH2A*0SXyLV%)O}~~_1}k?Qy}pFK zHtukvJ%56;JO7KaX=J%$|~9H>U^ixh0=68YcFjn^KBTp^p`Dr(zjnO~j@ui7(h z(Wk-?^G=x)(CyBw{R_9Ap6y~=q+CE)_?~Wr<$39D&8T$kmRF<3C+Luyax;Us)o3``;IB7oG0j-?tVppN+4-8t?dNZE@Di z@e8lC2|V9F@JB-Dm-w;v2MKv}`{H+&vL~-s=7qI6O~Zz6qo|4-^!Z;!1nYz;BpQ%m+`~A^Y>ENSIgh11&CMgPV^U7Wp`M3g2(Uc zeEOfe!ypJTIY?O?y3{TuvG@(-_9)&2@4~T{kLeQgWP5ZQ+I-j+S2a{Ca6^OzV^}`T zu^DvNBKXH?aI|qdy#1+Rdxuu+S0!lXn%hy+-@iS*dv`s;KyZ8}M{@jADU2OisHjp* zU!Jwy0^L6keYN4!$XGS|wf_q8p>i2$E1f*5vkS5=*Z4fCqBDA|y7{PKG=9Vo^UJKt z6XoQ=PqKqqEYI%iAMxji<#&e^&(YPx?x7Kq*aSqPKNVFgQB{8ad z3wi(gt-7{QskTtx#3{*tQuIGEErI2ywpiW}eTexsg4vo)04 z0s;h2*;nVCy8v6Usb-D=>_1bfjcJzDU?mfWbyKC~^&FOpf^gp-ImiM&& zvjVF&W^QpJYjG;we3+Y*X9C-q`>2urWfi3>3dhg!Oitxy z6)@AMM_4waZ!N!toZWf4da*U`>y_5dPN`ry^p-C|C24j^bA`XuG|jO&$+po%h4!%W zd4Emxfqe9GtPiZZHiqcMa-OuY7v5?tZ=2m1K?9`^Zx}2^*4#&zf$ju03zA zVmEdUpomsvTzXo9&5z;jl(o0NpC^SvY}1b?bjOR8w?qQJEPRF9wi8W;mF1N!G0`@#BT!J$N7EiCFJ`a0I;5q|a(bZ+waiT9s^u zq@hvjr^U3m%D!jzc3gcAVZ2D&!#~I+F2Ox8)Xoa2KJQyxdi|!C(B_tg^!b>^$Ty~w zJ$*2ISUEN3!)1Zg3U*L4y!2q#f_LGYXe zBz|4#zWQ{3ey+$daelZjFyl^#!A9iWoM6Bz6qWBPcw_FVmYE zZJ!3O<+;b{Rv6MDMnWl{9|)$1;-}S^XNYBQS$=WaYPL~x9~N4KScE1^vZj&p8o ziJK5qyhilWpY2l@@bMof5UqWImLgWvR`|gXim;_2Y0Vs)BD?Q9Cp-(IUWpGrE7yyNmiN6{YBW+MO)dS{GJt=n1F#+ z?_*PW47aqF41g?-cxWa76wQ>8(Y4kS-eA1b1GNAv6d6g^ zuhUPw;U~sIPSLUzxB`P{v%gaHo!!M~i*`Dvi6DgIjYEv%wKY|GIL9%>q=w8kjGP!` zhjGJ`sc2-R4h|x;c_cwJ-03x}vSPf{;|F zce{l&npm8eC=zGjxLgJ<UXz#g@9$ZD}MIdH}6>G{-$Zh~M#c^42`xr!{}T zHcVC@7mZ{@q}!kL$*rZ3BXrp%K|ze97XNVDWFgikEy3QPEzQ9_(1ApD^1@h}ew$?v z^f(efaUd_uS|pw6ny45MM~ZDq(E3Rb&#OB>ytw!L%jL>KZ*KwH)lEUTF`iVgb$K&> za58D?>W#SUE!lXq6GQRr%|kPGcGJ_d)-$tK^RqM7R3-!&QVdumBJg}bBvfE4K`my+`LL%7;KUJBB{BW*Tt#(Z` zRxi6ZNq>hvszaa)bis8J&@$knXRQ49%{vv4SSXA#c_VJSlhTk{p7(xtk8o6vy1q6n z**7D>-aiNmhD#s-HQs9R@|j9XQzWG+O1!)*kt{9em6Hn!A}RU2@JKE%l3d6G5h`W% zvYPsus`@HPz4ZU3x9bs2!A@H2V+w9*OqykkBkHwx0xR4rzKqevDa%Wyvj&>VUYwI_ znnZ!!#p5~^6)uF(^aoa5Eq)~sKd|FI*#s$N(~*;vP+7Yb!xj52t$4bh=d zxMbdZ)0moH_xqZBVuV%TR8^kSr^~f!bt|HAy3Af$p3@VBv8s}4(`i@*eV9v44(SuM zCS|0jl3Se7M!w>B$4!^m@s+WzGRfUOzJx~3hS9%2T2oxdFpiO?!0(3yq?;=~updrI z&F*b_jVdSM9Vq$(P5m}7SJzGapm{E8Va}&y)uG0FFt4V~xUIde{dnVka#UjRwh;DL zdm!>B|6$iJfR^U(ALyT!g2ABCsVRZ}{=O+GT5AhSbNUZ$sfd zDo67ZThILKbV0{22!Ay5tr8s|r{ZJp?d8K`?C&=w1UE$TAVd)a#97~Gh0n!>PP+a- z@Z`m%A1$gM@87Nn8BIyn;(%o)HrMwz*M^qrg`U=F6e4ewJk3W&e#e4Ed(M=>1Gd+EW?dzxw`iN*|SGdQ%X*5PTr|Y|M}*!NMWi)@^NYp z$4F5!x+7Rs%~OVLds(U^%`R(}xR=0r&h5h?o@9B-c_rVvotaQfq|Z&$5hL7St}i8~ z@WMrhQT0b(c)7kfbRa?a`bx85_@h0;-I95Q6dX=vr9bP(IWb()UrqluNRAFKD{tLB zH&6xnp|_RYkzhiK0M`)i#^kH5anDlGrDcugroZMjR-Vk~^mAkGbcwhXuD1IFh!!<; zGqV_0;<|L^WJB^n5AM$au9Mc1ZV?MqVrt^k-|y20fH?WA z<)9`;HCVp;De{QN0tJch1XvVtU>6ZWJ|G+Kh|=0L^5K|Ko5sVUP*-8N$P;A?LtzC+ za~~;B5)!JO@qo^~)zEhK@!Pf4Hsas&-Rjv7VykbpG|9Uwi_Z|YJgj5yFU(LmGTfwn zFvRigOU@xh%E8U`rHY(|tpJtwMp=!D=)y(YQO%D(77LL6SZ{yE)5_({IvGC;$I)++ z^2Hf_W@!o4)@V?ue4Z{Spr;pd(~?VhDdDFqpP7pK*To6#i*lRxaQO%3%6RS&ViIH% zXacvhif4EpJY+{Q4YIkfZ)e`eKp)ihdtlPVF0?L{y0wVBPCfVp z{0f@XtL!?Kq(?cWC+$xK(v9xMFSWrT!%yZBLs#Avb2iu*dpw+V(c-8#W0t>ja>eed z-Q-U3;b8xxBNmp9>jSu~hE~{Ym7iz8(P!*Y=N37a|A$3G2`=$@x4t0!KR~_KCof-h z6JEm;e)E4jI@<;WATuHe!no@5oulFB+=Hwm7W%^z{GU3akRf;!1>=<);;pCYAA}DI zBoO=p@B|D2i#LFOi%+lLbi+n-bxYNKg7y!rr1WU)xe1Cb&?#yC#vsdXV{mlHIuGV& zx2qJNn66)XJ^GJEq94?Gu{LW1r(Lt453j}QYYv6x_=Pk72e(U(EdmfPNyo(vF|hGB zkCt_USEi0oDt5H{`H-L_&;+0aS~`Qx-gK}4*lE27h!R|nivLe%xL0Af<7me$ejL6) z@Lu^2#nEpR(q>*qts5=1uh8ng1E_t66gP6_6@yUdMs^5Rw1hQCIuKERMIBU8)WM2^ zAX>|VWOpO0p8Hd=Gx`dfW#0kvK0}@mRVS1Fh}7(;ziJ)zPhFXys(LON%($Aa&|W|S z>Rs536K;*EIQcX1wDed6plmwWaVmPg-# zd14l4zF{RZ*S1zonL@oa#|byb4g823nz}gO)vP$`ojBp)xPcX29BN*i@V&#i;*`T$ zL55^!Y9kV9z=5hPi4HEAs@gv;W@jjgP)LrUPd-#f?lO`(GpJtxeFw@p#;J$~A0Gkeh&6`2>r-5ZG6N^e3GFWjxG*JHNS2BS!?tvyO-Z6LCu7huDP z^=f4CWC=avZgK`t_eQgBmt?-vPZlK_eHR@QeJ#*X_-hE}9`t2PH(V#y@3@6$|b z&i%en7&971XBO6;u&!6$vuc`vph*s)sL77jMj!|^M?SQ=1If3r}$JFQv|S6Wx?U)fxTlW&F!cx!VS zoJA{MTu#*}zYhcsX72qsFNF+$uNI17U3gaZMb zvrvPEu3ow@LeV_F3+&Gey6<&{_%Ehb=HC}ydU>%M5u(z95(=q=}4hX0S6!r-*^D! z2LK+&2Dvb5_Hua)@8w}q{n76G(5LJxil>cSf$4z~C1JAUYp9Dzut|7z?=I{B4~=gg z9)kVlFD77;Bi-duO-Hbg$3ZDdroI>R^|Q2kCuJKLYWC`wehh4ayKT;i#@pIL zNToC(Ah?(-l~Yc>DIh^)%{+>|`#*ppArQ1gT^etTKmVw@;U3@;Mx9?S2PnMI6Kf{F zG;gn$p7}i2K7O=KK5`!{vej6rYxg5cF#r8KisFSBk&v9NN>j98+WxgYtpFP!B-r;S!PFamY^$hSDyBP$vtWzzpP{|Uzj@iyaO(YcTDBjG< zitNpWw8Dz2cViZ;likbP z4q}9trYl)l(DS+xfwW;2Z?({dZM%mWp1ckt+-PronY7&!<{42(2{@~F@N2Wnm3Na2 z>-Nq%fugFLpo%>DxiW@wDYlHL5kSz|3?;dS0o@Em4lTPJ)#iZpNPjpAKR7WE$h@=d;A7##;Bvb}p zoz4*W8WJ37yK$?2W?k9P{cR9YNmfx1PdGJHWCT1iv7QB_;V{6S_XxTEso#D`u4%=p~vzAIJ@06s0)uF*?#YT-~ zL@ttwol`4b!)%sifD+ z)IAx^C5aAvMy-3HO9zWmW)ZO#`a%bN>|AfIc21XU| zT>liYc5seY&taxLl)x`uLSfwW#h1-;7-G|286$YHPPU~%;Oc?)YqB`UcJ@!E?d2GO ztp>EHI^mV*1pz@4qTJF^k^-3O|A}4A=k{m!3rZI^)6Ir%iB`T2gb)W9(W}vm?l@&T zAPU+`(9l!3V?3zf6*(3mQ&wBtY+B?n7zY>}WPJXCPniL@)2>_8M`{qcs^%BaRiTN; zWZTdTWRpzAZrxmWT~s3C3lYv2MYuwR$C;b}aQ@1Mvs~i=_GVnI>|8O}CC&kDmvYd^ z5YrOK6L{oKC>?9Z)6-GrB!SfX!|PhlGaC-uzg%RNe<2O_)IiE3b9Sx)<4?(qX}Z(a z-a9WSPp8%Yq)U|lni~H&(Qi;1nxNlrQVZMK@Pf5MR}8gUJ*t?ZOZrMQia0pp0L;aB zQI>N=2r0qA98tI&ovW`nRZ z&S!su8VpI>IZ!<7yM86@GVF}(>nWICNJQ7c8fF3Io^b@;*~X^rR-m4{yDBjYx;5?Y zF-CJB+Y*9~QmCekk<~x_ygaq`-hXA+>R~@h?1vy9AYc>*@9#J6?B*sLgdX_x(>rYT zTwb2GKDL^r$@bs&6W@O83`w=GB*^7m_iVf@eDK}|b{GNK16Veg0DKH)JUnc=yCdE6 z`R5~Nq0|Dt5bd{G+v{v_92xt=E$3j^lTHyX!z?ij!ICtJbZmTe$cF>`I$K;^fFpE3 z2L!SWNT{U@n&^FhFwKsOk5>XFZBE;EA4<7IgSJMOQKIA_zQqO%^sLuX5M!QUh?me# zb&)?~-BEx(58bA(CHhR3h#*iud5Uq!4%_DNi<}MbQ&{k5H+#M%96VS=5i0>K3|%m8 zTYoL1@*hw3#~+Wv`9x3V?S0SJwj}of-FAM#*!TQYfcGvm=cWJk@O@q^}*5>^_dF{w01P3WI2|wTP z&;Qr`C!=hO&dj|PQ*7N)Lm4t+B4%MYDYCRG1J){$Ppr$pIt!&t&KB?S@COFC=x2X^ zyB~B)eq2Sn+Y;a`s!Dw6?iS~l&mVuh{h^Gbj^L3z?#WnK-@Yr{+9zM!2CByR{?6jY zYS zhL|l7pbO|w9qJM);^;q5c9ady^h~umcLNWHv+!hNPT9mGAGP&* z7)+^dLKP?1_41KB+w1C)o&19Y&LOKIn763b+&ig4QqfeBmAT4crC746%qIQoadg5o zJJ+^pTwONQV!9+V4_i0VLvG--KAs+22-Qpo>v<3p!syC`>A3WK`kj zyG#=OSFy_p^4Ep_{v|vU806yg6N14>Q5Co3)wnZskzRw0Zjc+^(2rw{Ucx?8%9K|* zY-uUt3X^1qS*VqA0AKa<>tnJPB)eW%V%0ptFzX7zS=TO2VvFN2NxvX_h6%DuT^$sC z$m@`mDR#W6<%1BqDJl5~H6A38v^|v>vWB8ZiTecx|77|o?}VUGZ+AfXwm{=f_X zW`ZQ3nJ`_qZhFy@scXwi>98N(uL^0i5ki}T4;i%G5LRv-z+Clk)i0h&qE zpvw+AgQoh|Xlw}|e_cAav`oH+Lni-nQ0D{G=*hpg(o5KTZ5YWb3gMuo|SwjFXE7o9u8(KpILyy*wz}(Mf z>X6ZM^wlon7$2{#)< z0sehk}XHBJoyR~DpIV(LA%W{SD$sBn`fEDwmM)>Bfz4D!ECF2^vP1|Eimk! z54Mr`;! z9uJ?8K%*uvHEY$PjYzvQcIwojOSjkFI_J8hj=ABkn~pm{>a-Cjoib{^o<>ASa6!M` zrUXm8Yh;9iC?hI}Dx!v{BN~Wi(`wpHhl@#9$xLMJsp@Ja;Yp5%MfxDmyi|XOHSx>7kgs`pFo*`WQ5QuqqN4DWbYfe)s5CrD z@A(tugH{}j*hsP5ebcE=@w{KC>3(4zkIY}0zca6|c*Vl9=M+5GDijwD-*S%nGh>GZ zPB~5M_RD%%sW%yOM*TF_{gm?qkbb8675$E`FS#>?KV8i3a|%Zs;!ipgejbnbhNHfb zk+l)6F!Ixijf@tzp{9`vnm0R9B5 z)>`6?4rJEpBfqmD6O3=F4{zK+u@G! literal 0 HcmV?d00001 diff --git a/dist/admin/html.open/res/fonts/open-sans-v17-latin-regular.woff b/dist/admin/html.open/res/fonts/open-sans-v17-latin-regular.woff new file mode 100644 index 0000000000000000000000000000000000000000..39e88ed924601b969b06137854f24bf029b6cbb3 GIT binary patch literal 18100 zcmYg%V{|4>*Yy?Knb@}NWMbQ#*yhBxjR~&UwrwX9XJXs_azF2%uh!aKYwtRz>vVOm zuI}nS?h4}K01&`;5pM*b{8wAfe)In+|FQqSNQjDw0{|fY-x|jMfDAa4P*hO)*3!Q@ z^8bJhfR|8F6ZzIkzq#f&TsF_Q{wSz0vH$>}-xQ$#4MShO&oN_LBZqIz@S8V&+rvL- zVzwH)xex&WVCdhP);9`}5$pj8-Lpgvwg=l^o{8uvzi~aMjqe&ioAdO5&Z{HKTudZBU@7d z;ODm=;NshEjek~1ppBJjt`{ed!HV=YOU)IPNv_!VuRmy*WWtK&z96e0LVA{ z?ftV^ycXkoz%$8?6EzMlvzorkWwxAL5MwzWYxyT1ytCG6voWk7^t!Sf_Ky3K=}dC zylw*_e)jtb6HF+jswf7>Z!BOGsdu-_|(Oc{B+y&306yETp(KJxKA|A06-=kV$Zl>YA~nL`0iX`J70p zu(S-h8tXZ{As!>a0swdGay#E+f@Xwler>!7NhYJ!QuoJH2!xIRo&+8Z8|$+NW@*1(k~A#vTbw%O6a{m6eTU!!*5bc4l^jDJefFKOrGE9}XbL zPx$qHDm~U*RVCcl#gVr{a4NvsPa&wIqNzFOyEKBy3~5d;xq?7VM=Roznr{D~9UF^x!q)RCwdM)(r3|wHHui>u7O_c$*LRp3WQbR+9s^Bsa ziFDQDSx1*T`P05ozpCs)(gI3*!;AX%>sHODTY3A}4md#&4#C@bt`W}*O={lZ9t^&# zO>>(0xsr4&m>6zw`^+&{?b~*ehjpN_C(TYUwZ6NZ*S13fF7-pPG%GSZcIC5xcW2U6f5#j;^E5ZMm z3kx=H8I}(*sLD)UcyJ$LVu3~kikjz?_@ux~p_YuZiK~g%Oa(meWqF6l!`xY~sd*fhGz(>~slk8XmT@O7FcY18IBfAu+r zM-FKZlz-JpgT8lU4DM}D(U0S2G2d)Mm9*WdYX6z4*6!BSI5ynCA;c{w~G7ijA9W_K`t<~x5IWbSNo_&fPag?BK}E$G8F>lQqaA6-`00TD9xqrI%~SH%}QbW^;<>vO4AS zP+Eh1GUdg3)rg9Kl<_IjQ0@n?}_#=Q@Olb3Uf0T+zRV0123<4iuz7- zgPP`nd9{x3Ys7ma=_BP!A#Eh^h{l@cBqVa^;GRPIRKDjY_752vMfHPz=|Zb_NK>~W z%u&#GbAl?N-$h4!s@$0Dv-!zX4;fuB^06{4C!U=C zQJfVo92xpuc~|&kB5*(3^EH@=`AN4hwt0_bTVT%ncvm7>SG@|;Y%EjE{1z)9#?J2E z$Vo)g?a@R#C^^ZO(#{;7r^?FOxIJImd^-lHi(e-rG$)PH_)MI+rUH9Uws_g>Z^JeT zI??%_`d2ZJ@V9ar-1btZOdtA67()aIxhw}QTz=hbXMc6>O0AtwiH3EYYjql?9T>ogm*y}1DZ zEEkj)mdQ-sA_S;^&Jfr(1UEA?)W|eO%KlpcD(W-ns4u+s-;NB9`T6~F>+EqT+Spweds>^o6bQ>&3EUl)M~f9C{M{!($g|E_4G6~#pdZSnz}`>)}Z%` zogY?EPl8AM`xhv!T37LTcE(w)+vNtlxxGx&e?Pm#)L-#=c#UDK)_;p7+om(#MF20} z`26z~E(oRF+^_3FG`oE258jvbXO05cG!lO*?NEAm`_Vq1w{3Ob#L;-b8bO;ObcF>N(X+Om?(I!&V+heYMc^SjTK&N8{e%Y9QTX!EtFsvj0c4c&jAv+ zEJ1em!&JYLLZ;imkhY17zpVAwLOK3SwQhsS`e_UoT-n^)Z-v=&1K&c=n!mu7LM7fh zCD-xN?9doENMNW#_aTr34TIk^bp!AGj+aie#d4{c+*)0r<0nq)r||j}PvrFHGo07g z-~<~S^8JW2caR|%SR=w9%AcPF`oQJ#7z+8Id(Dys>+}z0Yyhl+`SwmaLbpqdb5~dv+uJ!qDt$xqsX_F2A5#EJ8(-L>~ye>3s7~7p`CVE+- z^XqT=-1&Ru*L5=yvyIbJxvACSX1h79{mxxgJd@XELE{B0SEMkfb`So6_o4{(cs)<+ z|BnhFFi|@v6y-04AQ{rgBTpYGNuP%mZ-dRck#MqlZWqT*X@D$Bc)QoYtNNH72bBjQ z!#(kS^2qVKxBy;=3Dy6O)He_p-2DLhgT?xL04+cO~~+pNe1Ql5D)Tif$qS=|`(TxWVYwP_#v-#~^{-NAxSmDKlX1BhYF=ejAwbI7AU0 zjOn=7Ed>y6xJNK7m#!5rc&o}k<=>|4-wm_5*oqCz_RsDmhM3&T7_y+iU4Ti6@79;u z$oCJ8fRJMN8@8|#tU(C>Wu@AXYp1F=b#}w`P&SEVR?gUPl*4=`Z%Ry+jszuZM;%#=bVxslciqyQZg7w=flC4Q z8rA^fumMl4l#wQ5zUV3Z%J=UH#g@n2DIuXjQBT2Ds=Zc|lc8;`H~XJJeesSeTHSjV zAM2Tzr|#kw#U6KkPfJt1)%OC4r?`ZD6#ogsdvqddLlHitbZqg!-w+W1RHPsE%=AK& zIBO`S>CqkI(yrs?oCGN9&4lbU0>{PlNrA4MPfSw7eEZNQe)M{cH< zw!ijE{B;f|l}2ZgU|FL;g=oC{v}*iZY&NUV!F5L)*TgA@K+JY<<=shY90b6K#~CXb z%k&yNq)o#R({iNdIsV|((6n-%q9SvGoz!`{WusT{btGMM7ltRwxv}SuvTRN^Gq0!H zIl)hjiU~okhyA}Tf||b%V61fNURIZo?6DN}A6@2FK7hhwj;#q!WJ5Ns5oHkm1D3Uq2spAvlm-9FJ-QFO2PaW;Iy%Sq8h}1< zp0;x&ZXk4T{Z<@luypbLWKuOpOIBHG)~C3OnI@vx}$=r)AoRS~0Z4w`IGT+HR zg)@t(&L{lLy5CWu4UtN@|DlWwrXb{E!=QIkVXmU=&f~z1MGWUg?3k-^;^}G0q|FVW z%9-V%Wk>0zIM?6%>kZ-=DpqiH^NkWyA>p8i&=DA_jzvG(B+7`Na|fMU;K{nh2e7l> z&t+x`8V!=d!;=QE8JUQ&NE?UO-B5-q6PF8%m0HoeB9(xVNAKDhkVD9J?-Koh1%%x1Bh8KLgnmZ*$E!8etS?i>or8Zq}$-eK~*y9?3q zwv2do{rYC_eSY?^SjzBrwO`|@c1BYoSA)ermepi2IJa4pBrba{=o+4-A5GSTWwynD zig>j<#q_=zhpOJ1zUTb(psX&M(@Xp@+kPnP18cn~MgcR9FM zPw zSacQVzP&J@_Hn()ejnDOmk;$+P)&6=P!szl@^@Y;x1b1`p`bg=?!)V}b4YRC{?p3a z^5yAngztLx+WBp(FBWR2`UU`?3f47LcvZ}v_ z4wxYTur){sfdU`x9I=w8My#Jm*B_BRX3<+DOmENRzy~tje_K=gQ*}^!EMrr7EAAZ{ z#cXm#Ba8qZ-)1GKqq;Z5MYU^vPjWqoVOI9@c{E zTNR5%DC+fV z=QDMU*X9i_SuW2J`Vy~#9NGGQA>HyVJ;AVo9nB?$u}=$}$F8sBKD>UmAllKxz9BS7 z8r7#@{^XH2U|2({hNEvaJRv%$q?KVUB9#)8gP_ZkROMQA1ND{kKx+` zVQ6EQ>-nTpgOhV1}`ttExGX+~?ix9T1^sgY7?CzowRkK0&p1B;( z=f&>j6bWy6eT`1oVr1SZc`;gZ>Zmc^FWeKh%tN-nBja3O^lV+cE)%~RyfQlh(;sM0 zD$+w?JIgF!a9-HGj)lI~q`eaLfw^-}{KqC97v71orhdIe;?SyiBVaXu%Oouoi*~=4 zTKRO^ZDI?ee=qD#MR%Pq%}_3J&cAvEp51gSa!)jA>_h;L9~F5pV-gy6gZ=d@l(D0& zK%)!eQT1yQV-sq_W+qGrR>3#_b?$DF5>yGw9}QPE@-v4NX@bS-g^xnG>kX%SlECN? zShJ%JYYtTa>*y_p$;rmUNd$MRd(d9(e){n1yHhOsZ|mam48>3N<_4DoO#;FS{R3*t zz)?^P8v!zC?JV8CmaC7f4~bNp?_S2w9iTtaD`jJUsq!(_KBuJ2+qe}nqY2ZZfOc3SR@#00$rwTyG6x+Zq< z#%{iI_e+#P{tDy(>CiUR#El^eTrD6kP!fyBl1n+HiETx}JT z?AWPrkIUg6KIwiY9y~^l)M@fLaLRynDUpRB9jwdH;yDNW3lFvAoQv|(uvDChP%mB~ zAsyCXVZW3Yl~b;Rk9aB`*SG=-_smtiJQYp0xL9gvM~z>9N#))}3-HwblvH?x0>Y6w&Fj|rz`zyEQ0j~J@-pW{qpMEWYW~j(G6|p`iaKG7z4RV)CTg^z407= zQ+me0ex>Q{VdiFbmgDo^+tCRo@MqHXtQxI)r8iD|HmRW*u8!oQOyeowS0&$(+!8rz zSkS5jl*Hm(!6MyU!potQdZH4>=i5FWr48Xhr@tB`9$xX+djbao{_{=xD}Ro9rPr0I z*UnX#6VkbUW4E5`R8vpEDO#@Udd8a7R-^s^jg$2D>gPP~fwh;MU*q3esCt@MP@-CZ z0~q#)sJcQOU>Aj$rb&{^46QX>L-AH|i0qKX-al<|fv!5(>_+O$M8P5WBswa_7}CDi zMg#{XLOn`LjEf(as$Sf$u|3^3QFio@$p+IC^CSLqnn2@poBQRI_q}gefb&Fysx9H% zmX62eb!uRri3k9=OxFF1K(Ih5Sty5g2xbx`f6$23@ZC33Nc}o+ZvUB|>lWf`DRgk5 zqTQHgt!1-+#Cf@b7%s&T-nC-EP?otrKRC380I82}yo_9kn1#Mt9E_4yB~^|dF9p;o znj=lp{CLmmI41v%=+szba8b~J+iiOmJ|QLoR^RNZ<6OfYAJ^V#`Zkd&E|}$gSQitf zPr-_NWXIF=&aX_bqyW*oG_JmlR_g#dBil`s;VsYdqU)T*2n<;9>$%UZ;1@QZ9YZ+A zxo|*_kw8P5Mf4E1K(rf_5UJU-%hyNFU$fyJmqNtiCb%O}vi6rC+4(U}jb|1ly&L!5 zil*(6K75{EP5R8zy}`xk0%@KortE|5pHx|=U7lWsj3T^`Trziy#|i~rR+xUU^@Fud z``;lfZk6Z{mIO{5Kgx)ujaP)FmSNC99xrr-M3V#~OJrn96!9rz5+XvNkn>H1D8C2l zl!W>5kNskakgN&2_M#=}gR~ja6uH35Y8!3ri&#Siz2mQt5aHL*TmrF}@k#J_K%g{2 zL7c<>Wk!z8vhL%319eSp*&WiYM(PK#B+$f&@MuTDAHWR4j;u6f{EunkHIrNQ zeDpVTU zAxamByJ*M{ovlvF7emCVUdB#}l(eWT*nm37QaACLYMxZmyvuNa$JqG96%VIb&YkGI zAtZI1&-G7E$r24sk0C0u)&kZVEh*;RV8 zm<;APVmhu~b#!nQ*1OZVh;ZTLs<>9NRGUbGF`S4`z7l1RgmQ`Bf^Rz|3L{@tz-d;X zd{O47zR$(*D?(G#hLBgp=OjVyeU&D~%5i@i(2arn;iARfpzZo3ERjvt7+t>~0oI&d zT;$vebr1a>o)t|K%Ph8|0Y@NlNs>2=4${m`Y1-lX8227S`K#q>dHM7GW!2^DZr$on zj>S*?!k_AkG(&BZ2|{l@Z(3nX5dKA4ZQkO9a6pB>{=C8tfqjM;lVf&Ko6!F8v87AV zd{$_67!VPAzWYj6ECj-3Tf83vgl`+9cPx~kj;3H;g@$LqNGZ+mapHQiTjpN~s-guXa^^ZgdaA)3d?l96*M7Gpo}hgQ(8lB=X#lk6WWw{Hsuo4^6TkP~|;mh^0Ra();mTn}E( zGO5i1cE!4>EPlj@&O^4vZlXgYA81l6eZrTu465`7&1O+6IdFz^|t5nW29c}$B7eBec z*x9_x1%~}3`ymE|8h&I@Cc0X?lBp{9{DPw+)8Vb(%W|4 zSKe2r$H&RZ2}A(F$FSd{`WL~XZpVFpM#S0npWDUWmxZr8>m?Q4u@$VDloV#@#@H?)FU^%^vl%;%>n9ldT7K1+V24wKFS+PHbIG3AT_P#bkN0h{8{Wv#ofS6#gv=_FUf z*9_L@sSrQzSIcAch08|Yi&ug7VW@mv06Z^X*5VTunTf^E){NB=I%CqSj;wS&=fN?v2&MyK1w?H$PVMam*YTvZU3#SaI~Chaci zgGkqO>A+b3HE7vaqW+~7vm{L*s;tVr4fao-`{U)3MoV!kXZrew-{IDsrUep163Jr& zY;uNd?7{?5PY5_M>J_M5`a>D?Jb)yrB9ek-`RJW+;-o2EER6g>XsrZ16e(uE;M!6a zV*t)4#YHSbZoc#3`9@j4R*rZccB88W3o9 zH0*3zY_;&q`+uPex%QQxuTq5_jtJPe2HOwscZ^;4{dcY_GJg4l{6W_S35ce%PbXDK zUyd(8xHK}_p18GE8qXy=DtNMv#%!wcL^>Lo$gqXLISWQu962i>4dQOrq<1j*6uNrz z{iHB&K{%18?bxCOx7C=`*(nCMTEJ_B-`A4@r`ytQ%)>;Beak}?)>^I`s*@E|>Vm?F zA6bc9H39e8$K!?d)t?T!xk#f-#yJ{PwRBWGGLB_aC-M&Cz3k!OLD8@+s~;H$oG1BI zrC$biD#fJEi7)Qig?F(~Q*ny|;2R}&{5>y4YFQkUFVDkqxxU;g_zijT6}cS7UlLo^ zSNi;ZpYy26v5k^(Ym0wBZwOvZOy;7DxJd*;OJL@~IJ&f}<_y)rm`{a`p}MKp>d@KF zMisN;Mff@!8oL^P%RijCva73=@NW=pitm}P|3uIoTfJEr$e_&_HnZ$I7xLzEKB#hM z`CE`TK!*H)|1#F8aXAjJpmKR?9rTsmo@i;%^Yx_VgQPlbz+?Fq>KWoE_}G%h(^-3c zL#Z97>l?{FWm9@qS7(|9^#(z3sXKdB_XmzMh3-^;xk&BEt!-!qG_Y`edr!|Bg=>E; zc&d20oIW_p(W;Wd+Hn?{30rKKin+gZ#aXGZyq~Z`)s;;qmS@{OtsW)|Oh;R7a4<%$ zgtEnk8YhxxAt|Whepj~(`(a3C;`e*hG~5&cGa{f*zE}@J7iMMUox$XXD^HA?vHS78 zSJJpya?@JA8i^V8=M!hmIF%M78Z@~T2T)(OEVrT}Lg@`j*6+x+noPA9ZXop=e}=jZ?@)Sw3khNV_`VYdTNqIynQnl-q~wz?YAJ4(gU99T=>RgN`Lyf9g$non zrl#YlV5{|_YG6lK>biDrH>0JlY!4MR2Qlc6gO~gdYokkX)41ut3APV9FA&CKhn)lB{5D+} zeBp`T70>q^1 zaQYH<$?rIN{^|rpN5>r!ju>w9!WQPoUdMbq(j8!+llOXtd+S<+Z@6nUOcYb8EE|!p`R0;vZejtr}XsPn$(KSOFT|JcD1jzPIYP z6Sy3gksSSe>{61AG#6TP>(=$}tQ98ab=mtmPIu{eEFX=ma7Jhsh`jB( z><24Q3jEA|ujWuSdTj-`{LqX;54cK)>Hk>xEU3n}8qFgd0`=RE7hV`ZML0`gX4Jho zQ?(Z*@r07EQl-0(hgni7K9-@OrH_@`!YGCNSEsG%FwO&m!GrpSk_O2-6o{0#By3@& zk6)e0pD2xTN%CpKQO@t`4#$@U2>Av4mQ{{o=sf1!g@A;HFHfE1@MWR$Qb7xIW@ zDvZyXEKt}A7DDnsQ)@or%*degY5eDU`fY5~8;#v< zt0Ad1N9Kc2@AcURs*F`WGT@mt`iwka5vxMGCeAgzZrSJnEy;zsI$c1xX~GnuqD*5J z2h4k>Lq|B19bxlgHT@;^k#dzh&9tO)H6jAMT2Ou4axZe#SrH$9r6_uEv)%Qws^yc= zueiSbDM{v}s4X{6cf)G0e$t?NQVjnoH_3w)7bZJteVFPfXy0FeKpEc9A|utL<+qrj zlChZ!`DkX+)r7mWFa0)ky`hdvq`(+Yc=!9_d+F?n!)ifa)bM03Z@bxOe|5G4Lq0irQ+Q@oJ^D9mlD16;&(MvQ*xdp z75(AfL*Xd&ru~MFX-SE>#801bnwcK%=Qg9Z0nCR?0iVZV(xxA#xStO<+qsv{^}lxN zo8#nkx@*tMdpgtA8eW$!KP0ukaO@|fKFk=TuIaCbT%lbmC$GBg-g`|gkt(&@^CxiZ z&-90E*IH&qvAJA5uIh3s50VJ7bq(=hunuk^Swg=gw|u1GYl}|l3?m$|BlHk5-0_ja zrSCeGu9WPmIoSmTm$IS`_r1DaUi9r51j$R}va-)BE6+!N`1eXKb8qo?-XVI@rQN<{ z52j}%o2cOCc>D4SLty|Jq{8}s)f?uBnMX`qYkoN5p^N9jGI273kqn8hWVLf*wIy_R zO=z7@?t3b0Gwo_~`MJSG&Cd!SPHM5a3x9FjO8m%q|98jv$G7vtIOc3iIA}ZN59LWL z()0p;$?&CE)zi7y3FB1}=F>${Zug|;quoXm@FA)BIai?L+InQ<Q&Ka0@2T)ltsg zR4`n15{V}utkoZp6cL7GCI!k9K4aXipq@T;qG*Y&`)783uHpl$!&~!wQ#1q<2*6#U zSQVwri|pSMcfi4McBWLSepLfk$h#X4S`ddO0!GS`g;c$vp(AgzCjIi8bowCRD_2Hc z`bVTWkIe(JX9er}jUNo|=W*Sw(FY-R*yGcgkMZ9ZF>7RlmXqa_FO`k!DJU@h4myV1 z9Lb7VhxU}oKMLFLJ>ZC&-P9{w!kRwY?E;h=uOSOC&29ch4A{Z;*X9SEoA^w}eKZ#W zBbjU?_@X2-=fCGDddo}s(T2_R%`XF9?vT_g%d`CqwU@vS7K&B*xMFnpzy1Y4q|nmf zVyMdI+!`Jvm!W3Hy za&@~eGcW-GxR|5PUU@|EzxF+eQbl8C`>j0(dHN!MYb7k>m=CE}&@AT^YP6Ax^o#B% z6w^zi+fE+T@8|x`y=jcRd_%m_7W8>IkL#|=yg3fPwbP?)Ia6wNx!$GUXgP@EVRh&0 zD%d=~QUUO|1WLGJ){>&c*s!BTpfnWf0$?=jn7Pfe&n{Y+oC^yD9OL4X0;$ofb@B7 zz%9iGByPi6fCIW>OWz=2f)OMeE61mRIqM-=5;qchzweK6xRd@BaV&oSm`?4)gxd&! zEQ{MP5Gi-J0fS zct=bq@)C|@Fv`$g0ZTr|STPIGUb-hZJ6`$4299tkJTlDQW%`&;3GfS;n}DKogz{HS zcg2l|#*`8{MlLlVUg-y&+|V_wwZ%F=fVMHhdZdMM!#No+9Qs%p6fzyv1oTbi8X+%y z0kA(|gC%m1vDr!aXbi6xunQA$;bCT#Pn*?OQTeI1u&(MHEl=Y8UC4+7ayn!#ab?*v znu>%QO0>3^Os+|%2GGWsupL_M(y!oIfvl-Grp~}y+KrN<+Ke1szYH~f-p+w6d;GUa zH0Z;a(|M+bpGVa%%Hs#QO~p>SGg}wp@=~@P7RL#%1$BLqlOPL(QX<$x=4r!g&s-1V|gTCqa(#6oR-M_sepHIHVpm{ zOnyb{Ta~oSxntRmnx(ZU;VxJr`cytgnRD_^Hq9O%nz3PS*xQClW>fU+N4zXbp$3%` zr|1v#P~!9NzX$(if|HE7LF@;nh-UMV}#I%!&xwm;udO>ZY zc6}U<)%F*jfSRc#dL9;I_%X!Fo=hMm9lGZo2zmyMb zITscFv9&o@BW7Qi z%fcO-D7wd6$aWx1o6LBJc8}_RZ=rGN!7YHD4kO;ZgmT0?3?@#@`uV?cctDxD5nCs< zYvz*<8|Bm5QKDm!EPS#zD}0K(P(5DaV@wwYgsIFhL;N}gYMd>JwDKy~iA-?@rd&!s zYOwrWB;roe&odyXuIUNa9i8)V#5ISN=Xp7Gf!@cZCzoDWs)|!4cLjBXA5mTetzj)t~_y6U_C#oT8tr89ggvW zR;&s2X_626kv4Olo~~nV5m2Gq$;Er;Ffj^AKAX2u!f~c|x9$F|-Ou~xGi_rgs`!Vi zGi3?pbC?ZwldXGPO!s6E{|KhqWHlXLnhq0FOXqfqPFL&4o56a&1%o>TjGg$M9YE5* zdO~}PuTITm;j(Lm(F%?h?rqeND^e+pq3hs~8XgH80|5mHta5Z%Tlt;^lZV!|32X=->j zfBVf3xqe2@Bvi1JMh0>O!6Yvudgk&v8Q$0pOn^(5(Xd;)JJo;Br9->wZW-QlCmE`E zLOT>GeLV{U3+8-p-tw#K14ljasU5#}Z~Q{r%M{Q?s~J}a{XMdoW2=Z8@WtU#x$ z*V{eQ3jf-Ksho=caydhJOfHptOm?D-ovhns8bKPxi_qY5dip3Axc$I*>hOE#eDT$8 zc#8&(f7E3%^{mn0b$z%4*hC0+9%_g3k^I>pcT<@4L3>w~kkwj}29RH&2QM_RM0=>h z_wI+7g2e)!{|J*Y^Pz{=-6Q+kIO>`WX(%MPO+vJIpO(|b?_jvx-1G)|hV|L7!&n)} zxGF0t%HWx$^^LACTJ1Ix&x@==Bf!BmZ21XnLH$7=odPLS&OY7qIVayH&T@epQ{w5m zZQZ$Fwl|nPlYAf1AXS4nI#ww93x#l5=XoEafAqJfw!(jgkMpL+C-mkj4`4!^JA%Rp;)A^DvRe?Cf}8|%Rro*QLtotUx22g*;L z@*pye{|^4cd_+Fv0uD6fIc*e|2!0*7;b5mUxcy{8shzZI%OUr!H@&6iGP0T#p2c2= zGVRIYA8Oq3`R>bV5G&=Y%Xvf5%^zBLZ0G z&qg|I#1K~Z?V8L2$?2{u!j{n|{;5mWX_}{z_JQ`)Y6~9^D0PCJooo0VltdFik-O;S zm9$ZZrqq~7_LK<=+#v=5T>731BD)f0J%c!uBg=>N^8QN+fp}qKlq5M?$xqAITk%YZ z#8m<+oY^MdjUht6*ZU|f9{HinXvMMWhe}Uy(`sUbzV3VDSA&S!brmnndEFng9Nb`g zh`Ca4kG73hyAY=AHeKUZ!vxSZoTQ!lMLiL;Z429j&MO`>pA?X!xk4!22QvW(iU0b9 zvatFrnkf9YvWc$8?0_LdN#e6sTCqjs2`bd*LLhbiO($eXzqj6c)wpg@lYgpD7oW>; ztC`FH=tk%}7QR<|#lr~(1wx_z3_o!_M!noz`9Si*&EKXFypKm%%5$`U*FJ`)G~K}P z`lFvHZ_(OTK6qWz94@sXBpK{78t5CaEJXw6#?_hO_PbMK$n=d>+e)YYINX)YXe-Zl zA(Ycvj+xq9S_#=hf|bxFq0*`mOudtl@l753?swbPF$RVG%F%7p{cZL%rd9QvvD zJqi=yKbxdEaTw_9ODF)+OzVJgs! z=8ZD`VUoP@6N!W^jLH_;Jka-@5FV^pBzm~cRT1*>#0V`qUg8dI$=Y0!k>`RW!QZ3W zc#tC~TkMofKT%hw&6RK22kM?kzE&2PeCGY+iHb!PFvd`O*~FytM*-BbVc5lwu!z_Q zjSzQbvStX2xw!it%1qyRSC$1MoX7qPv5L7co031zL(;S9za~+ZGj^4QSTF--70xYr z4LX}e{o#z5Kend^(sFeiSnH$Tu9$~oui44lX!tC!;2|v-n8%26$4QiTfr)vdnB&ymmN` z8ylA>;BxxXeEJ@$C`|uhwg<^ld9?-gWqgM(GlVRouo%X0GevXIH+)Jl5c$QnJnBc= zQ$ztks%I1aA)iPCjHbXrL<51NNiYvY&AHV1YLvj}VuX||uh|7RMF+)$-0)5=EufKa zb%*!?n9Bfoi0z}pUZ<ymn#Hlzvs#oOd-SUIWW%z(l`UFE|E5Wep^ZGO!Rp-4z`vno=b22o7m`?+L zJc}HIPQ#lPBmBCIesB0Njeo?y(W|% z#_%%7hOwWD`tnn9Qf>>0qHs=XNl_L&$Q;h*LI_YWD|JMzZ27pO^P;(3F82T7F*sX3 zGzbtP=Om_b@RF_zrSd~9$fkF>89y8Q^NyeL;ij%088e3 zwQ5>-XMFVws-3+sLuFArMJwFC71%} zU*8nw|5DKZ%fmG`G%@^l{Lv8@5a2v@rS(^LT5;aiZA|- z*Ei!ULs25MQ+|?26{3!AQ~`B^$!<#eRq2CfZpt(^^y<2tyH`2B=Ng}8L+jrVAkB5w zS_nHlz7+mG*v)WE?vs$|{5a-FGz+F>0-=kIFlw`9gurp#iJfjr248d!dKFh$Yvxqr zc8jNTZwjA!WI_j7p*KpAqv-$JP6=_DY9x!^^!+xqSICC>!f7Ge+$pwt;zh%ALwd``e)dG-6O7KMB{{`p;7y1@-@4pe#f4fc?8<@#;4p>R)t3T5fAjl)WYE=! z!aAou7MX8B=fhOhA3>z0mH6LC*@GHRIpp*AKY(loI!`MAtR;y0xj=|nJ1`X440d0R ztAewzvE4fj`#*Id*IanoJi!BC;{X5vz*@2GMsM4;ZQHhO+qP}nwr$(k?mQlk@_%Vh zN6$}hSMM`l6JKB73g2Zv<2K$s;9u!~9pD311DgY1g9Ul#7;+4vB7xMPiv_wPT}VD`L+81858^06v2Sz{%it@HNCj)u3U} zTIeS1hebFiTnp|1kB46)1(4pzIaEVyqwle_SZ!=3b{%_%7sChO2MLjAMa(7Mlj+Ge z;(76@R7k2UHIceX!=xF~66up1kSW=cGs=bK+435BuY69v zFMm)XN(N=NvPRjfoKqesAJxq2EOnK-OFgCDQeSI6ZMZgBTdZx?4r^Dmr`k6i(iMH6 zK2cw&Z`2R!7xhO*3S*ox&sb;dGtL|L@abEbL8d~W$H#ma8wx7u0r zt)13Q>!tP4`f2NS0lTJs-f^8=PBEvFGbQnR=erBJlIyxT++Xw8OwcUUYz6?n@Q!T& z000010002y0Ez$>09F7600ICI051Ss0003F0Qdj{00DT~g^;yTL;(~47k7;a|B&Jm zL4vzmjGennOa*j7Bh*3}?9Aah&-UpTpp!5yG_`gCd3fO_hRMHhGyU8(SU=DG3%4@L z;|sSj!qW@46EyL{{hT!gtPvxk6}37cZV9w2^DF6w3|VUAaf+zbfCp`sX=b#E1}WoK zH_0dwl7!4w<-FT^uJFE;W|Bi|At~ULD`SBZ^9Uu9=6PnE@ivS4WoK5U*PYjmi7z|f zZw6l`E(qxhFK-dNKIPxbezTHgfhnbe;^q}u?Z$4%%r7KjH|g~oE8fu;tn9JPD(f6@ zs`qa>J^c)RUPdzj004N}Y{3Jp5KsUBzQS3^y;)K*7b_0-ouLya`n zL{rT)*FsCJwAMyj?X=fHN1b%mMOV9RGTjVktn|)I3(d2}4x2-yxgp9l%lz=u0;|k+ z$s6CTwbO6E{ISsGtxSRWsKHb*~w^*7J} zgRD2$P(ute+(;vgGTH}Yj5F4F6HRd329r%P#Z;esane)!9q`O+&mDBgQO8_%*b!IE zvMWS~7-yYxI>egqYlsu#hIk=Tq_9Bs(X>TF|^CA>-n=e@Z9|AltC#Y&f$=opR+tQr{eHK~}NNsZ}D zTBMYKG(o?7hI)qe4DT6O1Q-|_#28r_cQ8)a7!s_l?Y)Eje~|YE&Vc9*j2#7zIacP>_xE-jD)h2*_>}V{nQrF4oqLD=sP3 V27wao;u38n0O3l+0RVA3K?b~*=|BJg literal 0 HcmV?d00001 diff --git a/dist/admin/html.open/res/fonts/open-sans-v17-latin-regular.woff2 b/dist/admin/html.open/res/fonts/open-sans-v17-latin-regular.woff2 new file mode 100644 index 0000000000000000000000000000000000000000..e9f58b775ec05aedecb58eaa34d0fd2a8d5d1aae GIT binary patch literal 14380 zcmV+{IMc^>Pew8T0RR9105~iF5dZ)H0BW2705{420RR9100000000000000000000 z0000Q78?*8bOvAmf(!_OA_2S_g!941x(8 z0$f!Gde}Gsz`uNSQPd5}Y02#WPYHC$uw@z;94{gO&nn$plvk?D3k`k?OG7`DM5w~e zJp1<6Vb{#pGnT;(SYdh6QH!@R4&gcuM_&v)w$|d!tt14}i2wSh%GcMYgZsb;NoHFf z`qm=iOiWe`?6L#w{aY~VV!e(x$oBe|Es3;Ndy8QB0&;lo)p#^NpzaMFuF88+4Ald zjo%g3)^&*O0%3piIVK0FUQtWEUpcyIY>`0+; z%IE@V@!G?w$9*b#_tb0oa78+`$7a6$`Oz5iN?I23VZ!TT%qsyEy7Pnt_x`xA&Auui z$)t*gu&zfv?a`&7nPmPjrYnZj1v2Z||NebN?Wzi7O?+Q9>w^FYMv0TeOVkH-nXI=UvFo0_&}%!(`Y;5 zv>sh1D~a@DDePYgL<7Rm4rBe^0n3VHOIC(?N;;hrHdEN zoA)&8tA<{yR?6DBvu949I(g#wv7<+pmlhZ1=ML;IsrL4S zu1->(=L}Ei!mH2QoIcjAEtl7Y;S%>aZ3q=ay$-mF2jq%^F}-_6BxzT-C!5w-0psJ3?& zMXD4{^4)$PFkI!q+^2qRUxp30nA#Fs-n}+SURz^d(tZCe$`$FLsFD5LkH<2nZ`0gI zR;MDxo6HuADzm$92~s#O3-14m&=r6E`6}R{2=3r{1hFb%%T}{e#Sn(;`_blxpVoT) zz21@;Ulx9lO8JlIE+@Eb6LN3k?nEKunnSYN#gopk8yGE<2Ak_PF`eOEuOMOPb3#3? zsJY#D=<-_*plFpM=q6QF2J5c&HQ4wVq+Zj$LcE3YK4^hOSaisOoFwNir*MHH4P2G86e^@i zU;lzUSd#gx)#lpV06!t_`XY^0y3k!HeX2V~y$xP2qk2&b)^%*sYLB$$DJ!oBON-)! z=k}@H+DN_%Es95INK_OHeJbj^ZM(W!XL}l|61bZY)`mW(vRwC#47vw8QDG;%1EoCy zf-4`C;4nC~iX|geo1}u9oxQa~Gp@2l+}+`}qLStidXBKS9Xg1Pa`0Qo4983!r(>IK zVK&$7#rlM}17=%eXDJg(JG}tajNJ3uHqPRwY64R@GG7DR4;v*aYexTysfg$S9i8sl3V~ zsqO;QVBq9_OqgxIWmCjXAeL_s=xSZaOy(1W;R)GODENVvM(ynu_+w@6U|O#ZWA!51One~1{%KIh6A`G1Ms&y_WKN3)vY+eJ{~iO%bJft z1Yh_#P!TQg#d3~vM>{6>jL-`j6*v0`_gygs`B_Zv#8)7!#QY&kBa}k^nB1dTG5~o^ zq$R>yOp9wNmS#$TFU9-V@Gb(x13pM$8n;kSZsq#e3uG~6r_>wJ9B!+uZf$GLJ|hAB z7zIK{ZbbD9V#C6;1_wKkID_g_GnHoKIyK_@}VN=v~-f^pKNF9k~s=Yex6I;kbi zos@!GsrZ^@X(PE{m?c;=X)c3Tc~Tse2v{oV@TyR#eO&pV z$t(^51)!Jv%gR7blLOc^8i);^tyX@K(raH1AlP8oPQUd^+p4^cn zK6vpo+50O)Xh|YwM)~osoNjUq*0H zkEpKf&}{na+HTlDT+`wc@70S%T!#JgFGom$0$DCx5E7#t<@&m|RKzMup7=f%AT~uD zAyy*drcn%ID0|&N{YQHI0^_fmqEKtrKb!i0<>#-NN|r`c8y-CLViL}`hHVrav8eq| zP(}P-3kT_llGSoJ&eM+ffsgfnnHDNM4THLs@y9(U5BeML{anoO{(mr#06fbF&+!$3 z=zoXd!h7wky;bI3(-@9gZK!q2zbHoR{Qax>J|tQ@)*xG9QA18l!8ID!+Us z>Q$IBp$+2o52=%T+#?WI{4Xwp93thzg>!QGfdPw#kHG}F-?a;?ifs)t*=bzgq^%|5 zRpo=)0>ZrP7PT--IMVM{opf^(NMLPgt{qiX#^`_%Yg z+S;J)E#BPbjg;1B4t0u2loZcQvcWCxp%S2lL!(c{_qe<8*0Z*YZLzLWo02eY1Jy(C#Qd=AtzzU&y z+V286ifqoQMYEEDR%fFG@S5uJx?m^Me#OM?QjgH!o-ea)Kndtq&DsdF#a49+Fc*xE zK58iQxhd!zwV&N)4Fnywh9dw9v0+ZGsL#Xd%sxVSAf0CQ>&-XMjAvU9VEbdU&MTX= zr7aTfmOw52(jwnv`yA3;@*wru2|pd4A=Gvf8pEK#bxJBum#dR!NLSXT zDtO;zI6tiu&JLb`i?hKTmEFI}rTm=ajqbN;<1(%K3Mxx|f{m*}Us6q`V2 zk#GCU_4e)!y zy-1pFlF|YivhM|{>#Zd>-CQO<=$|EM6f6aq{5L2WrpLkbOR;O zBM~r+HLV#vn2pesFOUN1`~?el$*K|~g#}+5!&tM-)WSF!t5}#l>#}`KyxOy|tu|IK zf3}4G1bpx>^RYEDSK8+JE0p3N((5-<%761E@88{jS|Y-vG4n&+m)O=)xzM@4Te2Rm ztm?I8*ijs^2bfN*hKnW9vos`&daB`;b+h^)JXrR75WDeuWDku8fFFBkB@&^Nc=Y0b z(v{KoU(d%=!%)}P()w6W3954lMn6iF>V0A7UY+xoEWgI8JxRyA)1qKlH%f|ie3NQf zTUGDyx|^&->uY9p;gg>7$-FFuZHDCd8okDk#TaQ`(zBOTzW5aj)uH8aeTR@cOJw2h z0FKry zzK+&2YvdlzBxWvgH#7PVv5xUcb55KVHrHUjTR!)-i?OSaz~2?lVpRjuxPhWcDcKNqtSZac+ng*KX6;t)Z(#<4LhN#?S9j6WN}q7TSmT?5h@ zg|_CSEbF&Z5n!k15UYx@=Az-c^9+8KhCnN#8qy3?yJG#w8{U8^z4UMbNe||+V|_B$ zWaPm)P(Y5FuCr4>{5^~$PmK6g&nvThf6!&B>TEPqt$-EwV?CHx;GF=+DscCrAkfeu zAs>e(rhfn1frHswav%g;TY zm)mQtDfvq~EE+8x@U%)qWZ5nNAHBU25^`VW$~rX@c@SD#VzTa)$F1$198pND6#{K< zApMoCBTm#6H$arwP~8q+>VQ`+f#WBuRC{Be$x5$D{t|UGUbfi4XTC=D!tnFue-1#! zuvtH22fT47YI(Wx>I_@%b;+ZQ9Zg5IZePf4qu|ABsG;%7(#>I}B)f!lns*EXr?y&m z3e9!Hy24%ZMq_b7LB$5N+p3yy0ry}+nr>;dcwA__ID~u5WfVW;=R1UV8Rm>Wr@wBk zWgI?w*7~Bksq0WF20HFC;^*hZoE-N$FvQPgXmjkDJH4KM_^?TR&szyCu;~K3#e7yf zDL!v;axMr6JmDH!g!hP#3(Ue#3e>(k zjfYJWdx_IwADxb?sVtPI=~tWR?#XvocaPPKF{&98HM(JkFBM~=K#0sjr34gAgdmB( zO@Bw1>>#3TF;>#b=MTePRK71>I zeN02PX$~=4wQX!#Ap90@RYjBBEo=8 zjAvj5XZXX7H@kB+UE=#&NK4R>f&KIF+V0r~RnWBT=zQ~z#$#dfl4giOPq@)7lgNBM zp@GJR=JECR^5o{+qR3HriW5FP82i?ny8mtkjqUfoY0%2##S(7uSJ;!jF zD5(Z_g_w8WA;MN7spB8ko*rI%{)6}CGeN(%>-F7pqfJexnnK!Kf=aLnUbD>!7**&C zRn^YxG-w=59YVXh@#f4>3T?I-H|y7SHlO|X_Jg;-ubux5tEuwHVP*8bJug5GInJbY zw4JKSi|T4$#Q-Y587lkVq5j^7GL*F72HgchOFBi!Mx!^+#n!Xw2%`hX1&% zlBsv<1K;(QBnD6tguFpI0j*K-?IYJ_uD$!Wgc(=B$SUm1&Cv*%w35NA-vPySyc7Daz|C?N4o_lGg_n8qEngYfonC7Ly9?8^_5e0WE= zDPrZ{$8{3qKWLA8W_9dyc0eHO)mx6gL)#kuw6KAlk}epgKyTDsakln30>);zXKEhA zSQ>ZQ7+m;7ct{gg+9M`DCv(d_05Wp%(zfcG4VhJXg&oOm`|US5Zh88gx5iPSG1R@) z`6NK1oi_(g+A9Lx7dA*0!Txt}Qv;$GKBzQY7!ERmwDTzYV zoO_K3Pai}?H`$`Ys}tiQDls-u4Y-|1y+5WOKYxem>wGi$^!eRF7h5Ls(CCBG1d{y^ z_k75g=bcYEP5n(5>Npn>gr^S_pOCIQ5QyJZT%u?c5LpqCjsHVy5(TbrX+q;_8#z%C zCQWZx!}SeKW5pL9;7}U0W%+|6-WtcDVCbGf;@J2JlDlnWy-ySTDsF1MfAsJA&Rw<_ zqJ`x)UeQ5HaJPso^R6^`;WKd#Q8NY*^{ozE#}>q=jXn44m?{VaR{t|KcJ}o8<&`t* ztBZ?J)EfIV_$zw^yvAn9^2}KcXmo1zTlFc0dIKX;q&*oFe2qu8)VN#n+4T_xe>O{u zRAGEUwo{3Xn39OeWl6$Ij2Yk+sXD|}u^1W)(!N|tZJ@GV{9ZkCKFKlFaba~{%l0nq z?xI?0vBiY38mZze78FV>31R*wUs8 zFO9ml{woDG(N@-C#Hj8u=%m*kuNAENZF)+3Bw>&{X(;&Yr6Sp@>X=LxOWGIQ1@eg> zz~v1t4tKdriJ#%al%(b5RZZYci@Xh%U{R~*CzsxTBzMh>cE+6IU*n%jA%&!bIqN?U zx&1*~OzcSiR`QIejgN?CZ4SUM!^|rdhy{@buU3z>t-N~Gd1b7#?cvU?wjE5I^aoyu zh&0IHtJg`5E2gz^B`T(#W19m9eN_$CEvc5;R(&mkSE$-j=PwXM_Gw;&k`pE2rOKTvs z8!UMFMOpW_Xoua&8m5ijvvv7(=K8AJWgENJs6eu&ep!SXCOo*H+F9NTErTO&%Fh{O zIQQSXv;-R_TKFGx(GOXfyV%yi*1D*0@Vd7-wz!F;*lg)#W{V8Q==o_T4X3aUR;~nK zq}9Fx!EJ=vosELz;8YBKJ+m;GZ_t)hLLq;C|NR@KurRG>tvt7sI@xpXmYop4oy-IO z93c}=RtTB1adG=9Jb;N~&g)u{^>y1UE!%bVv$gc!MT}Hnq|u%@zra7tBaE>}`b2Wk-TDwSkbq zqh4uu-|LBr9qEfbdp6Q`hHDe55eHS@_hR#U-(93fHnU@vcNhAyi!-Xyzg1iG+XdA( z5A}pa|2uZ;$?;J^`LSzXX2`)HbJ&Y<0O3x zm_g^WQ#bDBVi=w}tYd!E8ee}@T1cNA-SUK=eX?8m9md7k5ohc2A#{0mj*Elg^%#pf z#0s{u!CaDT=p&L{Jdr4&Z|_xm(z_eu^d|D3eTh9SCX9%XS;ehOrnl$ZKB~7$zFBZO zEPwLGl?yx95q(O$xVd*#Ue83)pdqsRRpYtUUt9&_4XQqT8>BO(8h+!%k`xO!MeI(S z7H|cPn6P9v$gIm`i*ac(2(H<7@!o{g7o6c~lLEO5;6e4la|LpZCg)AhnVmbY2|#dj z|7CdYONE10e80WOpHn42c3M2ksC0Lcpe19*ahGhnAgRik(3k*N$*U5`Gi;c_UEz2# zA%m;-0@v0k!#J@p=y+WT7l{yQ+I29_u6eCTjZhkfuY(+*2xLlyY@QE zPx)#VcPBedqbMOITy=R(AM`}y&TC^AxN6h5NQ8L3tkj$gX+xh4vm!_Tj+m52Oonn0 z)Im8)$=JLY8Ppz^T8}FPJFB~@2g^h5juUwh8ms@c6}h%HSp0Kp?`#EkLK@i493`4H z^KH;>Y^pCw{Q6U4H&HR<%3TNMH>oKzO`Yi9y>qi?bGWX~+Ft(@=i(^dwye{=A-^EM zR)<;4d=QJOa4}G3@YP*2`ts;X@fF*-N7rztck^75%4@<1Pj~W^q%iuzZp+ zQq*4>P+(Z_IaV3FvUPNO=l<7ACnz>nlw?!$Cfvq)SQuw>BW#@$wz;+(9JaN+6?S7K zIB{)q($H{XVoGmvN_S>zQcrhkCi+uWtOi;`9#4p@jYx}*kMB$z;v@6u&{|^?O!Xr& zEojur#N5^CbFmp57A%SrqHOPa0l_RDiuJ**zN5mgc0n$O2%lsHP-^t1CYRJ@Exv52I= zmli5(fl6IqmHPSAH{t!J2J=}|Uvj38cUFe_2c41Oi_gl`sC5ZVeD@;A-zO66W{&Z~ zAQ4ee49p>rnno{cF3Io?YHzNZ99q=ULA>(ziAT##8x5Q|T|Yu6S>!jP^Y;dtUQv>B z5~4jZc3x<-W4eA8Cis1gS$Ji4wv|Hbr@v{_>Znaw1JvY&&*{?s1^oZUd(PiPF>#fO z%|dC+7wv%rAwhf}iV08z(+tbSn+5RC>;rU$1mE$yz4`Mu@14J|kLh&mI@)0@tx*_9 zZ~W61&%1_C4dh*+)uY>3{J5*9hd{vc2y;e>+27VF~61YA=9cD z?Tn5&pZshV0cG`yH@`jq+r{WWQ1f!@ReD5pL{wNr91;~y2#<|^ZWj>~8yT(WU&i0H zWFu;GJd-McErB(Q+eCIrT$r7pgX|nLD(8s;JKjbh2>N0FPoV zJxpuDugeH_VI~-I7cS2Au*xmzMs`R2 zP~EV6%lv4!PvY!+X-_-kG0h_9C72zXA|xLv}B}X@Z?O7 zFzSg8zz=v=F-UIsY_eNqSy2bVf}RrZ2voX;_h|-bw+3o=sC#^}+UvMGJV?K} z^MG;l6tndJlX1JaaZvaqxTkc`Ut;yBs3NX7kr|v)R!}0J6KGyWt)ThBNeZU>bJ2O( z@o_oi=;-5Fv2pp?$zhfbws5$Et)=C8D+J0`4TiaA-~;hA#6dJo4em#a9M7sG82Ljy z44olh*ssGFk>eSa5TD!hP`YHaDN8^)EN=Yrf^2YqJs=CRN&v@1dk3Y#D|r>3(HfQrHdjDJ%_JFhhDa|0@wuK&fn%T!PGRu8wun9om~v zc4voXCLuaGI-6Z?4Ax-nj-4z8V0!Z=5N91U)!k`7()WFk z)I2w6BmV=G4?IGKQj4h#QaI0Xu7qzS1ub%kR^$raQ;95)zGYTQWbMA(+>5ec2+?5jK)yD{@KUNknwhhDe4< z=q>ylU-vnTazWVA*I_H~gb}~*S^g{LgwcY)#+)fuoesh%cZMzf)kEA9yCBAx)yF21 zGQp8c>+ng$^>oaeE8hXx=N^uqhhdZl!>( zdTPmWo)TLcz?1m|&ul^X7F00xfq{7r7(}Eizd!CI zGBYLO;yte}a|869&SsRPdq^o{Xmk$XW$6+NDPSCcj^tOk%G6fBid&-nka!0~DsfIg zF2?!!zF*Yd0pAsbIx8u917n@2e2v0ik9K`%1dI9ua}UaCNUKb%sZhX>C@G0|fTcs` zT|mT`XN>~VG%@G3Lm*jshXne#{~arS3M6liTz_zV z?gPd3C-=875q&=EQ$C?JW*|E|@6MSEs{%@8s7oRn729%P%9OE3!GF2CuOhyXs9#9t zm9*`i>xc;O!T-wW{z%q86jCQ_z!$?D_|3r5WO?5XQ#iOZxKu3tLU9wbp_73lQMRrv!vPQWj`d?pWp}^t_bl5 zDsE5{P$jC_oZ(W-cU`2ez&iU0b>Ti$=*L8AQjP?VgkqmAQ+7U|P9OfxW7-{zIV3|&(^K`fbpwbksE-GI8NT3){53|kiXXl{iHt}yS&Tu;gHjt zgOmjJQ>L zBUG2{dxUt0Y+z}xnWZz6a z$~ZPGsJc>WGVx&m9{+fDO4$?X(OQ5ds+P(Y>?arl1?(T>rXUWFv6 zfCAG#9wZNx8u@VRLj{J$PnVUiWl!}<1r4P4WXLjK+1Iv6et&| zhZsdqN01>7Y6S?}dsURo;B_RYtrhQBQReuBN9H%$B81M zaBP9ySIFZ+?EsRFhhR4ON2uqV{gfNJ-%_`q?PsoJzn4%>AtyIj#`^)2juvw^Q!QJ! z5CV`1ZMJ%NPkPYW9rEfOc@kS*Ck7ellI)zS>14L0v;b?+{!?_*D6Sog+|(daRbxE( z)K)Q3?W_cw@F}a(iboa;RpD|P#sYtp~aSm!{B!!{O^X0-bx)nO22NQcW5Ya(#_IhmyEUk^njCPcIG03Sk3OeLP?$Kli)jUxwFsTWV5_5>g!k=I*y9Z1<-^j3$FtRywtW)YI|9q9HnM6`@UVzpw zG}nMbRZjwfLmhj1&cr2#@^Z{B9qQ%57Sur;@TB?^7oa5MjHuER zeou1pzXJB=uXKN9X%;NK9O^n_=wTDZ`SJ~M&R7a_RanwoAuAMcSqi6GiV%z`7fAB; zTtQhfCmaQTdWEi#$9qFFfavtBf0-6d4B~~OW1y-b*dVLFy1j`t<5SC(hxccbl!$^s}O+tLwBJ@iyI!=vcKOTZrQ=GF|3C} zoZ&9MyTsm|EpG&LGe-gou@wq0+o(_$spk5ErvyccYPqXktSE zgs3@{e5Bk+g4F(Pzkh_TPtzL0)|B?wln=rPeFA*dX~^ajSuIk|!HWi&G6`swF}A!Q zGjYTTVwZl?lxcC0NNC60t=m=M-ZNwzcRX97)w(N-BCE05)YVv9Z#cS0#H#c8h_C%z zou)&KtPib&2yf{j_@%EZ~Yte`!)%NK$2|!DtGtZeczE! zWJ$9qN~vmNxxsr$nOYLCQgtSI??t3kszw?ykGKP$ADg%R5K66Bs)W;w8-&G)gA`OU zr;!j3(!-`lOCc{f8Z9~09f#L|6>7ht&KT@h-!F@mtvULDM)cvDmZNd%rbz?9Xa|HW z^TptgA^AE}OOt{-E`1F?1JLeyatb1P7T3`CT5kkhj>VRu#*i{-XCQN|Gx-_R4fRM* zMzJ5kR)5_7ILT_SF&2(-Yye!&ZM+l>EesC`B1WaSVo=c zmO0)ZppPV9^lr16eagnV^pRUSgcZN}|3H(arD@3qjxSQ6s_l!#Z(DpHPvOPGEc7r% z5DGOy7Ls#M{Ua7pLR9l4!ivbV_DHYBRg0E79_^5b0z{1E!cgfb@>s*_l#FiP+ovlE zhAS{*D#tpfiT}izWui0jG1jWciZnyCnZ@z)JJ`Cq)4Hle8F^JR_EG+XHPv>c1E(I62YOd9tFC<%G&ot{tXvB zK}ZTHlrc=rt%vWmX-?&N2XL%Q?YyP@`HqiQQeIuHjUG7XlRQHAejDQ|kp*ApIFn9} z!I@1SSk!Ebz?uJDiwD0HqTyI*Md0*4N@}IEdZeQg09Vc3fH|G-d{kqX=b|&Wr89>dEg39&f;msj|T!WDGH=}Krc_-#h7 zY0<-u8&Pp%=W9jH?0ZmCPs#P%WRI8;IS(nF^4S~dY-I<3A_?AmpYvjA=gY{nTg&yS zD7rPnzfZ?qy1Q~y>iLXy$nS25OKr6viz}e3xrxkHAMf~OiwD8bOe(()tS-zZCi9@& zsdVufzM$<2`$@8a*>w&`!Od6}HR~_mpyB5a`kW}}X1#EJA0$M`H(InCrAOUr{eR}+ z$%JZ@=74ee2AUB{*TzaJSwWGOK-Zu5_d|faulh0n&!zbzb7gZI)A73e#f$I1HF6K^ z-{6@<6vy8AU`p6e2`zmE7~JcBwj!9H5{eW{hIeT(YQIhlRAjTQtFiF-YZJ1TN6qy z(xkN*voyvID#ADQ$8(uiA0XzmTt^rypfXW4`47!9N0tyYyoZnKmfp| zZubIUJ5fMij~481Bqr*ic+GHM2fYE4D_6Q8ZDjj0+ZV%0Nog;izw{- zI7QMzLrZ(;RY+>h$a)h}Iyj3}Vt`0a* z5llOKog#EMJ14iHfkmGO@dky(na;P=JA~F}Y7vUV43u^DJk{VE%ylva0D|#nJ@xzP z78VNCK%>;;xCW!+J%;1($1#tzrp0Q?plXHX- zD>6vLR76|`!eKEoCX*3ENsx>nnP%=>pgHk`kARdg@+od0vu8Z(3B{iQ@dwnjKU4lG z27mxTKnM^9L;z7h3=jt-NRlE=hAcVq6ev=nOob{n>cBK;(gFdcO@}T$`V1Un#8_GX z%P|FqV8)yUOIEDeuw};{5{d&yXc$hgoZ+}|<;I-{PhPzF@P+5cUw}YCf`uRm6((GS zNKqyXDnoNYyVuIqt8vn(q2N&+yh^qB*DqZ%_M?J=T^~E;>CULBr5-mofSXaf_ zu<4C>d$#SEmf%Q}TW;Ey=$%7Vk`N_Jl_E`_beS?_A)z44mgBAC^5n`_sKBCr#fqFz z;=K>fIxu6_Z4cZrXCB*Wt5_DSsW2XVFLl*4&Wfn z!8gA2m9OieCm(nq`s72qOH1Wi{NbmzAN$kavB+-&k463log format.', 'Common Log Format (CLF)
"%h %l %u %t \"%r\" %>s %b"

Common Log Format with Virtual Host
"%v %h %l %u %t \"%r\" %>s %b"

NCSA extended/combined log format
"%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"

Log cookie value of Foobar
"%{Foobar}C"'); $_tipsdb['accessLog_logHeader'] = new DAttrHelp("Log Headers", 'Specifies whether to log HTTP request headers: Referer, UserAgent, and Host.', ' Turn this off if you do not need these headers in the access log.', 'Select from checkbox', ''); @@ -150,6 +148,10 @@ $_tipsdb['brStaticCompressLevel'] = new DAttrHelp("Brotli Compression Level (Static File)", 'Specifies the level of Brotli compression applied to static files. Ranges from 1 (lowest) to 11 (highest).

This setting will only take effect when "Enable Compression" and "Auto Update Static File" are enabled.

Default value: 5', ' Save network bandwidth. Text-based responses such as html, css, and javascript files benefit the most and on average can be compressed to half of their original size.', 'Number between 1 and 11.', ''); +$_tipsdb['bubbleWrap'] = new DAttrHelp("Bubblewrap Container", 'Set to On if you wish to start CGI processes (including PHP programs) in a bubblewrap sandbox. See https://wiki.archlinux.org/index.php/Bubblewrap for details on using bubblewrap. Bubblewrap must be installed on your system prior to using this setting.

This setting cannot be turned on at the Virtual Host level if set to "Disabled" at the Server level.

Default values:
Server level: Disabled
VH level: Inherit Server level setting', '', 'Select from drop down list', ''); + +$_tipsdb['bubbleWrapCmd'] = new DAttrHelp("Bubblewrap Command", 'The full bubblewrap use command, including the bubblewrap program itself. More on configuring this command can be found here: https://openlitespeed.org/kb/bubblewrap-in-openlitespeed/ . If not specified, the default command listed below will be used.

Default value: /bin/bwrap --ro-bind /usr /usr --ro-bind /lib /lib --ro-bind-try /lib64 /lib64 --ro-bind /bin /bin --ro-bind /sbin /sbin --dir /var --dir /tmp --proc /proc --symlink../tmp var/tmp --dev /dev --ro-bind-try /etc/localtime /etc/localtime --ro-bind-try /etc/ld.so.cache /etc/ld.so.cache --ro-bind-try /etc/resolv.conf /etc/resolv.conf --ro-bind-try /etc/ssl /etc/ssl --ro-bind-try /etc/pki /etc/pki --ro-bind-try /etc/man_db.conf /etc/man_db.conf --ro-bind-try /home/$USER /home/$USER --bind-try /var/lib/mysql/mysql.sock /var/lib/mysql/mysql.sock --bind-try /home/mysql/mysql.sock /home/mysql/mysql.sock --bind-try /tmp/mysql.sock /tmp/mysql.sock --unshare-all --share-net --die-with-parent --dir /run/user/$UID ‘$PASSWD 65534’ ‘$GROUP 65534’', '', '', ''); + $_tipsdb['certChain'] = new DAttrHelp("Chained Certificate", 'Specifies whether the certificate is a chained certificate or not. The file that stores a certificate chain must be in PEM format, and the certificates must be in the chained order, from the lowest level (the actual client or server certificate) to the highest level (root) CA.', '', 'Select from radio box', ''); $_tipsdb['certFile'] = new DAttrHelp("Certificate File", 'The filename of the SSL certificate file.', ' The certificate file should be placed in a secured directory, which allows read-only access to the user that the server runs as.', 'Filename which can be an absolute path or a relative path to $SERVER_ROOT.', ''); @@ -172,7 +174,7 @@ $_tipsdb['compilerflags'] = new DAttrHelp("Compiler Flags", 'Add additional compiler flags, like optimized compiler options.', '', 'Supported flags are CFLAGS, CXXFLAGS, CPPFLAGS, LDFLAGS. Use a space to separate different flags. Use single quotes (not double quotes) for flag values.', 'CFLAGS='-O3 -msse2 -msse3 -msse4.1 -msse4.2 -msse4 -mavx''); -$_tipsdb['compressibleTypes'] = new DAttrHelp("Compressible Types", 'Specifies what MIME types are allowed to be compressed.', ' Only allow types that will benefit from GZIP/Brotli compression. Binary files such as gif/png/jpeg images and flash files do not benefit from compression.', 'MIME type list separated by commas. Wild card "*" and negate sign "!" are allowed, such as text/*, !text/js.', 'If you want to compress text/* but not text/css, you can have a rule like text/*, !text/css. "!" will exclude that MIME type.'); +$_tipsdb['compressibleTypes'] = new DAttrHelp("Compressible Types", 'Specifies what MIME types are allowed to be compressed. Leave this setting unset or enter default to use the server built-in default list which should already cover most mime-types.

Default value: text/*,application/x-javascript,application/javascript,application/xml,image/svg+xml,application/rss+xml, application/json,application/vnd.ms-fontobject,application/x-font,application/x-font-opentype, application/x-font-truetype,application/x-font-ttf,font/eot,font/opentype,font/otf,font/ttf,image/x-icon, image/vnd.microsoft.icon,application/xhtml+xml', ' Only allow types that will benefit from GZIP/Brotli compression. Binary files such as gif/png/jpeg images and flash files do not benefit from compression.', 'MIME type list separated by commas. Wild card "*" and negate sign "!" are allowed, such as text/*, !text/js.', 'If you want to compress text/* but not text/css, you can have a rule like text/*, !text/css. "!" will exclude that MIME type.'); $_tipsdb['configFile'] = new DAttrHelp("Config File", 'The configuration filename and directory for this virtual host. The configuration file must be under the $SERVER_ROOT/conf/vhosts/ directory.', '$SERVER_ROOT/conf/vhosts/$VH_NAME/vhconf.conf is recommended', 'Filename which can be an absolute path or a relative path to $SERVER_ROOT.', ''); @@ -390,6 +392,8 @@ $_tipsdb['log_fileName'] = new DAttrHelp("File Name", 'Specifies the path for the log file.', ' Place the log file on a separate disk.', 'Filename which can be an absolute path or a relative path to $SERVER_ROOT.', ''); +$_tipsdb['log_keepDays'] = new DAttrHelp("Keep Days", 'Specifies how many days the access log file will be kept on disk. Only rotated log files older than the specified number of days will be deleted. The current log file will not be touched regardless how many days worth of data it contains. If you do not want to auto-delete stale and very old log files, set this to 0.', '', 'Integer number', ''); + $_tipsdb['log_logLevel'] = new DAttrHelp("Log Level", 'Specifies the level of logging to include in your log file. Available levels (from high to low) are: ERROR, WARNING, NOTICE, INFO and DEBUG. Only messages with level higher or equal to the current setting will be logged.', ' Using DEBUG log level does not have any performance impact, unless "Debug Level" is set to a level other than NONE. It's recommended to set Log Level to DEBUG and Debug Level to NONE. These settings mean that you will not fill up your hard disk with debug logging, but you will be able to use the "Toggle Debug Logging" action to control debug output. This action can turn debug logging on and off on the fly, and is useful for debugging busy production servers.', 'Select from drop down list', ''); $_tipsdb['log_rollingSize'] = new DAttrHelp("Rolling Size (bytes)", 'Specifies when the current log file needs to be rolled over, also known as log rotation. When the file size is over the rollover limit, the active log file will be renamed to log_name.mm_dd_yyyy(.sequence) in the same directory and a new active log file will be created. The actual size of the rotated log file once it is created will sometimes be a little bigger than this size limit. Set to 0 to disable log rotation.', 'Append "K", "M", "G" to the number for kilo-, mega- and giga- bytes.', 'Integer number', ''); @@ -412,7 +416,7 @@ $_tipsdb['maxConns'] = new DAttrHelp("Max Connections", 'Specifies the maximum number of concurrent connections that can be established between the server and an external application. This setting controls how many requests can be processed concurrently by an external application, however, the real limit also depends on the external application itself. Setting this value higher will not help if the external application is not fast enough or cannot scale to a large number of concurrent requests.', ' Setting a high value does not directly translate to higher performance. Setting the limit to a value that will not overload the external application will provide the best performance/throughput.', 'Integer number', ''); -$_tipsdb['maxDynRespHeaderSize'] = new DAttrHelp("Max Dynamic Response Header Size (bytes)", 'Specifies the maximum header size of a dynamically generated response. Hard limit is 64KB.

Default value: 16KB', ' Set it reasonably low to help recognize bad responses dynamically generated by external applications.', 'Integer number', ''); +$_tipsdb['maxDynRespHeaderSize'] = new DAttrHelp("Max Dynamic Response Header Size (bytes)", 'Specifies the maximum header size of a dynamically generated response. Hard limit is 131072 bytes or 128K.

Default value: 32768 or 32K', ' Set it reasonably low to help recognize bad responses dynamically generated by external applications.', 'Integer number', ''); $_tipsdb['maxDynRespSize'] = new DAttrHelp("Max Dynamic Response Body Size (bytes)", 'Specifies the maximum body size of a dynamically generated response. Hard limit is 2047MB.', ' Set the limit reasonably low to help identify bad responses. It is not uncommon to malformed scripts to contain an infinite loop which leads to infinity-sized responses.', 'Integer number', ''); @@ -424,9 +428,9 @@ $_tipsdb['maxReqBodySize'] = new DAttrHelp("Max Request Body Size (bytes)", 'Specifies the maximum size of an HTTP request body. For a 32Bit OS, 2GB is the hard limit. For a 64Bit OS, it is virtually unlimited.', ' To help prevent DoS attacks, try to constrain this limit to only what is really needed. Your swapping space must have enough free space to accommodate this limit.', 'Integer number', ''); -$_tipsdb['maxReqHeaderSize'] = new DAttrHelp("Max Request Header Size (bytes)", 'Specifies the maximum size of an HTTP request header including request URL. Hard limit is 16380 bytes.', ' Set it reasonably low to reduce memory usage and help identify bogus requests and DoS attacks.
4-8K is big enough for most web sites.', 'Integer number', ''); +$_tipsdb['maxReqHeaderSize'] = new DAttrHelp("Max Request Header Size (bytes)", 'Specifies the maximum size of an HTTP request header including request URL. Hard limit is 131072 bytes or 128K.

Default value: 32768 or 32K', ' Set it reasonably low to reduce memory usage and help identify bogus requests and DoS attacks.
4-8K is big enough for most web sites under normal circumstances.', 'Integer number', ''); -$_tipsdb['maxReqURLLen'] = new DAttrHelp("Max Request URL Length (bytes)", 'Specifies the maximum size of a request URL. URL is the full text address used to access a server resource including the query string. 64K bytes is the hard limit.', ' Set it reasonably low to reduce memory usage and help identify bogus requests and DoS attacks.
2-3K is big enough for most web sites unless the HTTP GET method is used with large query strings instead of POST.', 'Integer number', ''); +$_tipsdb['maxReqURLLen'] = new DAttrHelp("Max Request URL Length (bytes)", 'Specifies the maximum size of a request URL. URL is the full text address used to access a server resource including the query string. Hard limit is 65530 bytes. Values larger than this, such as 64K (6 bytes larger), will be treated as if 65530 was used.

Default value: 8192 or 8K.', ' Set it reasonably low to reduce memory usage and help identify bogus requests and DoS attacks.
2-3K is big enough for most web sites unless the HTTP GET method is used with large query strings instead of POST.', 'Integer number', ''); $_tipsdb['maxSSLConnections'] = new DAttrHelp("Max SSL Connections", 'Specifies the maximum number of concurrent SSL connections the server will accept. Since total concurrent SSL and non-SSL connections cannot exceed the limit specified by "Max Connections", the actual number of concurrent SSL connections allowed must be lower than this limit.', '', 'Integer number', ''); @@ -604,7 +608,7 @@ $_tipsdb['shType'] = new DAttrHelp("Handler Type", 'Specifies the type of external application that processes these script files. Available types are: CGI, FastCGI, Web Server, LSAPI app, Load balancer, or Servlet Engine. For FastCGI, Web Server and Servlet Engine, a "Handler Name" needs to be specified. This is an external application name as predefined in the "External Apps" section.', '', 'Select from drop down list', ''); -$_tipsdb['shmDefaultDir'] = new DAttrHelp("Default SHM Directory", 'Changes shared memory's default directory to the specified path. If the directory does not exist, it will be created. All SHM data will be stored in this directory unless otherwise specified.', '', 'Path', ''); +$_tipsdb['shmDefaultDir'] = new DAttrHelp("Default SHM Directory", 'Changes shared memory's default directory to the specified path. If the directory does not exist, it will be created. All SHM data will be stored in this directory unless otherwise specified.', '', 'path', ''); $_tipsdb['showVersionNumber'] = new DAttrHelp("Server Signature", 'Specifies whether to show the server signature and version number in the response header's "Server" value. There are three options: when set to Hide Version, only LiteSpeed is shown. When set to Show Version, LiteSpeed and the version number are shown. When set to Hide Full Header, the entire Server header will not be shown in the response header.', ' Set to Hide Version if you do not wish to expose the server version number.', 'Select from drop down list', ''); @@ -616,6 +620,8 @@ $_tipsdb['sslCert'] = new DAttrHelp("SSL Private Key & Certificate", 'Every SSL listener requires a paired SSL private key and SSL certificate. Multiple SSL listeners can share the same key and certificate.

You can generate SSL private keys yourself using an SSL software package, such as OpenSSL. SSL certificates can also be purchased from an authorized certificate issuer like VeriSign or Thawte. You can also sign the certificate yourself. Self-signed certificates will not be trusted by web browsers and should not be used on public websites containing critical data. However, a self-signed certificate is good enough for internal use, e.g. for encrypting traffic to LiteSpeed Web Server's WebAdmin Console.', '', '', ''); +$_tipsdb['sslDefaultCiphers'] = new DAttrHelp("Default Cipher Suite", 'Default cipher suite for SSL certificates.

Default value: Server Internal Default (Based on current best practices)', '', 'Colon-separated string of cipher specifications.', ''); + $_tipsdb['sslEnableMultiCerts'] = new DAttrHelp("Enable Multiple SSL Certificates", 'Allows listeners/vhosts to set multiple SSL certificates. If multiple certificates are enabled, the certificates/keys are expected to follow a naming scheme. If the cert is named server.crt, other possible cert names are server.crt.rsa, server.crt.dsa, server.crt.ecc. If "Not Set", defaults to "No".', '', 'Select from radio box', ''); $_tipsdb['sslOCSP'] = new DAttrHelp("OCSP Stapling", 'Online Certificate Status Protocol (OCSP) is a more efficient method of checking whether a digital certificate is valid. It works by communicating with another server — the OCSP responder — to get verification that the certificate is valid instead of checking through certificate revocation lists (CRL).

OCSP stapling is a further improvement on this protocol, allowing the server to check with the OCSP responder at regular intervals instead of every time a certificate is requested. See the OCSP Wikipedia page for more details.', '', '', ''); @@ -686,7 +692,7 @@ $_tipsdb['uri'] = new DAttrHelp("URI", 'Specifies the URI for this context. The URI should start with a "/". If a URI ends with a "/", then this context will include all sub-URIs under this URI.', '', 'URI', ''); -$_tipsdb['useIpInProxyHeader'] = new DAttrHelp("Use Client IP in Header", 'Specifies whether to use the IP address listed in the "X-Forwarded-For" HTTP request header for all IP address-related features, including connection/bandwidth throttling, access control, and IP geolocation.

This feature is useful if your web server is behind a load balancer or a proxy server. If you select "Trusted IP Only", then X-Forwarded-For IP will be used only when the request is coming from trusted IPs defined in the server-level "Allowed List".

"Keep Header from Trusted IP" is the same as "Trusted IP Only", but the X-Forwarded-For header used for the backend will not be modified to include the connecting peer address.', '', 'Select from drop down list', ''); +$_tipsdb['useIpInProxyHeader'] = new DAttrHelp("Use Client IP in Header", 'Specifies whether to use the first most valid IP IP address listed in the "X-Forwarded-For" HTTP request header for all IP address-related features, including connection/bandwidth throttling, access control, and IP geolocation.

This feature is useful if your web server is behind a load balancer or a proxy server. If you select Trusted IP Only, then X-Forwarded-For IP will be used only when the request is coming from trusted IPs defined in the server-level "Allowed List".

Keep Header from Trusted IP is the same as Trusted IP Only, but the X-Forwarded-For header used for the backend will not be modified to include the connecting peer address.

Use Last IP (for AWS ELB) will use the last IP address in the "X-Forwarded-For" list. Select this option if you are using AWS Elastic Load Balancer or expect the real IP to appended to the end of the "X-Forwarded-For" list.', '', 'Select from drop down list', ''); $_tipsdb['useSendfile'] = new DAttrHelp("Use sendfile()", 'Specifies whether to use the sendfile() system call to serve static files. Static files can be served in four different ways: memory buffer cache, memory-mapped cache, plain read/write, and sendfile(). Files smaller than the "Max Cached Small File Size (bytes)" are served from memory buffer cache. Files larger than the "Max Cached Small File Size (bytes)" but smaller than the "Max MMAP File Size (bytes)" will be served from memory-mapped cache. Files larger than the "Max MMAP File Size (bytes)" will be served via plain read/write or sendfile(). Sendfile() is a "zero copy" system call that can greatly reduce CPU utilization when serving very large static files. Sendfile() requires an optimized network card kernel driver and thus may not be suitable for some small-vendor network adapters.', '', 'Select from radio box', ''); @@ -726,7 +732,7 @@ $_tipsdb['vhlog_logLevel'] = new DAttrHelp("Log Level", 'Specifies the level of logging. Available levels (from high to low) are ERROR, WARNING, NOTICE, INFO, and DEBUG. Only messages with a level higher than or equal to the current setting will be logged. If you want to set it to DEBUG, you must set the server log level to DEBUG as well. The level of debugging is controlled solely at the server level by "Debug Level".', ' Unless "Debug Level" is set to a level other than NONE, DEBUG log level does not have any performance impact and is recommended.', 'Select from drop down list', ''); -$_tipsdb['viewlog'] = new DAttrHelp("Server Log Viewer", 'The Server Log Viewer is a convenient tool for browsing the current server log to check for errors or problems. The log viewer searches the server log file in blocks for the specified log level. The default block size is 20KB. You can use the Begin, End, Next, and Prev buttons to navigate a large log file.', 'The size of a dynamically generated page is limited by "Max Dynamic Response Body Size (bytes)". So if the block is too big, the page might be truncated.', '', ''); +$_tipsdb['viewlog'] = new DAttrHelp("Server Log Viewer", 'The Server Log Viewer is a convenient tool for browsing the current server log to check for errors or problems. The log viewer searches the server log file in blocks for the specified log level. The default block size is 20KB. You can use the Begin, End, Next, and Prev buttons to navigate a large log file.', 'The size of a dynamically generated page is limited by "Max Dynamic Response Body Size (bytes)". So if the block is too big, the page might be truncated.', '', ''); $_tipsdb['virtualHostMapping'] = new DAttrHelp("Virtual Host Mappings", 'Specifies the relationship between the listener and virtual hosts. Listeners and virtual hosts are associated by domain names. An HTTP request will be routed to a virtual host with a matching domain name. One listener can map to multiple virtual hosts for different domain names. One virtual host can also be mapped from different listeners. One listener can allow one catchall virtual host with the domain name value "*". When there is no explicitly matched domain name in the listener's mapping, the listener will forward the request to that catchall virtual host.', ' Only add necessary mappings. If the listener is mapped to only one virtual host, then only set up a catchall mapping "*".', '', ''); @@ -779,6 +785,10 @@ $_tipsdb['EDTP:binPath'] = array('',''); +$_tipsdb['EDTP:bubbleWrap'] = array(''); + +$_tipsdb['EDTP:bubbleWrapCmd'] = array(''); + $_tipsdb['EDTP:cgi_path'] = array('A CGI context can be used to specify a directory only contains CGI scripts. Path can be absolute path or relative to $SERVER_ROOT, $VH_ROOT or $DOC_ROOT(default). Path and URI must be ended with "/" for a cgi-bin directory.','If only a specific script is needed in that directory, it is recommended to create a CGI context for that script only. In this case, path and URI need not be a directory. For e.g., path can be ~/myapp/myscript.pl, URI can be /myapp/myscript.pl. All other files will not be served as CGI.'); $_tipsdb['EDTP:checkSymbolLink'] = array('Check-Symbolic-Link control will take effect only if Follow-Symbolic-Link is turned on. This controls whether symbolic links are checked against Access Denied Directories.'); @@ -787,7 +797,7 @@ $_tipsdb['EDTP:ctxType'] = array('Static context can be used to map a URI to a directory either outside document root or within it.','Java Web App context is used to automatically import a predefined Java Application in an AJPv13 compilant Java servlet engine.','Servlet context is used to import a specific servlet under a web application.','Fast CGI context is a mount point of Fast CGI application.','LiteSpeed SAPI context can be used to associate a URI with an LSAPI application.','Proxy context enables this virtual host to serve as a transparant reverse proxy server to an external web server or application server.','CGI context can be used to specify a directory only contains CGI scripts.','Load Balancer context can be used to assign a different cluster for that context.','Redirect context can set up an internal or external redirect URI.','App Server context is specifically used for Rack/Rails, WSGI, and Node.js applications.
','Module handler context is a mount point of hander type modules.'); -$_tipsdb['EDTP:docRoot'] = array('Set up your document root here, which can be absolute path or relative to $SERV_ROOT or $VH_ROOT','Document root is referred as $DOC_ROOT in this virtual host, which can be used in other path configuration.'); +$_tipsdb['EDTP:docRoot'] = array('Document root will not be created by the server automatically if it does not already exist. Please ensure that both the directory exists and it is owned by the correct user.','Set up your document root here, which can be absolute path or relative to $SERV_ROOT or $VH_ROOT','Document root is referred as $DOC_ROOT in this virtual host, which can be used in other path configuration.'); $_tipsdb['EDTP:domainName'] = array('Enter all the domains that you want this listener to respond to. Use comma "," to separate individual domain.','You can choose only one virtual host to handle all unspecified domains, put "*" in domains.'); @@ -849,7 +859,7 @@ $_tipsdb['EDTP:maxCGIInstances'] = array('Limits resources that a CGI program can use. This helps against DoS attacks.','Max CGI Instances controls how many CGI processes the web server can launch.'); -$_tipsdb['EDTP:maxReqHeaderSize'] = array('Numbers can be represented as 10240, 10K or 1M.'); +$_tipsdb['EDTP:maxReqHeaderSize'] = array('Numbers can be represented as 10240 or 10K.'); $_tipsdb['EDTP:mime'] = array('MIME settings can be edited from the previous page. You can specify the mime configuration file location which can be either be an absolute path or relative to $SERVER_ROOT.'); @@ -915,7 +925,7 @@ $_tipsdb['EDTP:userDBLocation'] = array('It is recommended that the database be stored under the $SERVER_ROOT/conf/vhosts/$VH_NAME/ directory.'); -$_tipsdb['EDTP:vhRoot'] = array('All directories must pre-exist. This web interface will not create the directory for you. If you are creating a new virtual host, you can create an empty root directory and set it up from the beginning; or you can copy the "Example" virtual root that shipped with the package to this virtual host root and modify it.','Virtual host root ($VH_ROOT) can be absolute path or relative to $SERVER_ROOT.'); +$_tipsdb['EDTP:vhRoot'] = array('All directories must pre-exist. This web interface will not create the directory for you. If you are creating a new virtual host, you can create an empty root directory and set it up from the beginning; or you can copy the "Example" virtual root that shipped with the package to this virtual host root and modify it to be user owned.','Virtual host root ($VH_ROOT) can be absolute path or relative to $SERVER_ROOT.'); $_tipsdb['EDTP:vhaccessLog_fileName'] = array('Log file path can be an absolute path or a relative path to $SERVER_ROOT, $VH_ROOT.'); diff --git a/dist/admin/html.open/res/lang/ja-JP_tips.php b/dist/admin/html.open/res/lang/ja-JP_tips.php index f41f184ad..11645da7a 100644 --- a/dist/admin/html.open/res/lang/ja-JP_tips.php +++ b/dist/admin/html.open/res/lang/ja-JP_tips.php @@ -90,8 +90,6 @@ $_tipsdb['accessLog_fileName'] = new DAttrHelp("ファイル名", 'アクセスログファイル名。', '[パフォーマンス]アクセスログファイルを別のディスクに入れます。', 'ファイル名への絶対パス又は$SERVER_ROOTからの相対パス', ''); -$_tipsdb['accessLog_keepDays'] = new DAttrHelp("保持日数", 'アクセスログファイルをディスクに保管する日数を指定します。 指定した日数より古いローテーションしたログファイルのみが削除されます。 現在のログファイルには、それに含まれるデータの日数にかかわらず、表示されません。 古いログファイルを自動削除しない場合は、 0 に設定します。', '', '整数', ''); - $_tipsdb['accessLog_logFormat'] = new DAttrHelp("Log Format", ' アクセスログのログ形式を指定します。 ログフォーマットが設定されると、"ログヘッダー"の設定より優先されます。', '', '文字列。ログフォーマットの構文はApache 2.0のカスタムと互換性があります log format。', '
共通ログフォーマット（CLF）
"%h %l %u %t \"%r\" %>s %b"

バーチャルホストによる共通ログフォーマット
"%v %h %l %u %t \"%r\" %>s %b"

NCSA拡張/結合ログフォーマット
"%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"

FoobarのログCookie値
"%{Foobar}C"'); $_tipsdb['accessLog_logHeader'] = new DAttrHelp("ログヘッダー", 'Referer、UserAgent、HostのいずれかをHTTPリクエストヘッダとして記録するかどうかを指定します。', '[パフォーマンス]これらのヘッダーがアクセスログに必要ない場合は、これをオフにします。', 'チェックボックス', ''); @@ -150,6 +148,10 @@ $_tipsdb['brStaticCompressLevel'] = new DAttrHelp("Brotli Compression Level (Static File)", 'Specifies the level of Brotli compression applied to static files. Ranges from 1 (lowest) to 11 (highest).

This setting will only take effect when "圧縮を有効にする" and "静的ファイルの自動更新" are enabled.

Default value: 5', ' Save network bandwidth. Text-based responses such as html, css, and javascript files benefit the most and on average can be compressed to half of their original size.', 'Number between 1 and 11.', ''); +$_tipsdb['bubbleWrap'] = new DAttrHelp("Bubblewrap Container", 'Set to On if you wish to start CGI processes (including PHP programs) in a bubblewrap sandbox. See https://wiki.archlinux.org/index.php/Bubblewrap for details on using bubblewrap. Bubblewrap must be installed on your system prior to using this setting.

This setting cannot be turned on at the Virtual Host level if set to "Disabled" at the Server level.

Default values:
Server level: Disabled
VH level: Inherit Server level setting', '', 'ドロップダウンリストから選択', ''); + +$_tipsdb['bubbleWrapCmd'] = new DAttrHelp("Bubblewrap Command", 'The full bubblewrap use command, including the bubblewrap program itself. More on configuring this command can be found here: https://openlitespeed.org/kb/bubblewrap-in-openlitespeed/ . If not specified, the default command listed below will be used.

Default value: /bin/bwrap --ro-bind /usr /usr --ro-bind /lib /lib --ro-bind-try /lib64 /lib64 --ro-bind /bin /bin --ro-bind /sbin /sbin --dir /var --dir /tmp --proc /proc --symlink../tmp var/tmp --dev /dev --ro-bind-try /etc/localtime /etc/localtime --ro-bind-try /etc/ld.so.cache /etc/ld.so.cache --ro-bind-try /etc/resolv.conf /etc/resolv.conf --ro-bind-try /etc/ssl /etc/ssl --ro-bind-try /etc/pki /etc/pki --ro-bind-try /etc/man_db.conf /etc/man_db.conf --ro-bind-try /home/$USER /home/$USER --bind-try /var/lib/mysql/mysql.sock /var/lib/mysql/mysql.sock --bind-try /home/mysql/mysql.sock /home/mysql/mysql.sock --bind-try /tmp/mysql.sock /tmp/mysql.sock --unshare-all --share-net --die-with-parent --dir /run/user/$UID ‘$PASSWD 65534’ ‘$GROUP 65534’', '', '', ''); + $_tipsdb['certChain'] = new DAttrHelp("チェーン証明書", '証明書がチェーン証明書であるかどうかを指定します。 チェーン証明を格納するファイルは、PEM形式でなければならず、証明書は最下位レベル（実際のクライアントまたはサーバー証明書）から最上位（ルート）CAまでの連鎖の順序でなければなりません。', '', 'ラジオボックスから選択', ''); $_tipsdb['certFile'] = new DAttrHelp("証明書ファイル", 'SSL証明書ファイルのファイル名。', '[セキュリティ]証明書ファイルは、サーバーが実行されるユーザーへの読み取り専用アクセスを可能にする安全なディレクトリに配置する必要があります。', 'ファイル名への絶対パス又は$SERVER_ROOTからの相対パス', ''); @@ -390,6 +392,8 @@ $_tipsdb['log_fileName'] = new DAttrHelp("ファイル名", 'ログファイルのパスを指定します。', '[パフォーマンス]ログファイルを別のディスクに配置します。', 'ファイル名への絶対パス又は$SERVER_ROOTからの相対パス', ''); +$_tipsdb['log_keepDays'] = new DAttrHelp("Keep Days", 'Specifies how many days the access log file will be kept on disk. Only rotated log files older than the specified number of days will be deleted. The current log file will not be touched regardless how many days worth of data it contains. If you do not want to auto-delete stale and very old log files, set this to 0.', '', '整数', ''); + $_tipsdb['log_logLevel'] = new DAttrHelp("ログレベル", 'ログファイルに含めるログのレベルを指定します。 使用可能なレベルは、エラー、警告、通知、情報および DEBUG です。 現在の設定以上のレベルのメッセージのみが記録されます。', '[パフォーマンス] "デバッグレベル"が NONE 以外のレベルに設定されていない限り、 DEBUG ログレベルを使用してもパフォーマンスに影響はありません。 ログレベルを DEBUG に設定し、デバッグレベルを NONE に設定することをお勧めします。 これらの設定は、ハードディスクにデバッグログを書き込まないことを意味しますが、"デバッグログを切り替える"アクションを使用してデバッグ出力を制御することができます。 これにより、デバッグログのオン/オフを切り替えることができ、多忙な運用サーバーのデバッグに役立ちます。', '選択', ''); $_tipsdb['log_rollingSize'] = new DAttrHelp("ローテーションサイズ（バイト）", '現在のログファイルをロールオーバーする必要があるとき、つまりログローテーションを指定します。 ファイルサイズがロールオーバー制限を超えると、アクティブなログファイルは同じディレクトリにlog_name.mm_dd_yyyy（.sequence）という名前に変更され、新しいアクティブなログファイルが作成されます。 回転ログファイルが実際に作成されると、そのサイズはこのサイズ制限より少し大きくなることがあります。 ログのローテーションを無効にするには、 0 に設定します。', 'キロ、メガ、ギガバイトの数字に「K」、「M」、「G」を追加します。', '整数', ''); @@ -616,6 +620,8 @@ $_tipsdb['sslCert'] = new DAttrHelp("SSL秘密鍵と証明書", 'すべてのSSLリスナーには、ペアのSSL秘密鍵とSSL証明書が必要です。 複数のSSLリスナーは、同じ鍵と証明書を共有できます。
OpenSSLなどのSSLソフトウェアパッケージを使用して、SSL秘密鍵を自分で生成することができます。 SSL証明書は、VeriSignやThawteのような認可された証明書の発行者から購入することもできます。 自分で証明書に署名することもできます。 自己署名証明書はWebブラウザから信頼されないため、重要なデータを含む公開Webサイトでは使用しないでください。 ただし、自己署名証明書は内部使用に十分適しており、 例えば LiteSpeed WebサーバーのWebAdminコンソールへのトラフィックを暗号化します。', '', '', ''); +$_tipsdb['sslDefaultCiphers'] = new DAttrHelp("Default Cipher Suite", 'Default cipher suite for SSL certificates.

Default value: Server Internal Default (Based on current best practices)', '', 'Colon-separated string of cipher specifications.', ''); + $_tipsdb['sslEnableMultiCerts'] = new DAttrHelp("複数のSSL証明書を有効にする", 'リスナー/バーチャルホストが複数のSSL証明書を設定できるようにします。 複数の証明書が有効な場合、証明書/キーは命名規則に従うことが想定されます。 証明書の名前がserver.crtの場合、その他の可能な証明書名はserver.crt.rsa、server.crt.dsa、server.crt.eccです。 「未設定」の場合、デフォルトは「いいえ」です。', '', 'ラジオボックスから選択', ''); $_tipsdb['sslOCSP'] = new DAttrHelp("OCSPステープリング", 'オンライン証明書ステータスプロトコル（OCSP）は、デジタル証明書が有効かどうかを確認するより効率的な方法です。 OCSP応答者である他のサーバーと通信して、証明書失効リスト（CRL）をチェックする代わりに証明書が有効であることを確認します。
OCSPステープリングは、このプロトコルのさらなる改良であり、証明書が要求されるたびにではなく、定期的な間隔でサーバーがOCSPレスポンダを確認できるようにします。 詳細については、OCSP Wikipediaのページをご覧ください。', '', '', ''); @@ -779,6 +785,10 @@ $_tipsdb['EDTP:binPath'] = array('',''); +$_tipsdb['EDTP:bubbleWrap'] = array(''); + +$_tipsdb['EDTP:bubbleWrapCmd'] = array(''); + $_tipsdb['EDTP:cgi_path'] = array('CGIコンテキストを使用して、ディレクトリにCGIスクリプトのみを指定することができます。 パスは絶対パスでも、$SERVER_ROOT、$VH_ROOT、$DOC_ROOT（デフォルト）でもかまいません。 パスとURIは、cgi-binディレクトリのために "/"で終わらなければなりません。','そのディレクトリに特定のスクリプトだけが必要な場合は、そのスクリプトのCGIコンテキストを作成することをお勧めします。 この場合、pathとURIはディレクトリである必要はありません。 たとえば、pathは〜/myapp/myscript.pl、URIは/myapp/myscript.plです。 その他のファイルはすべてCGIとして提供されません。'); $_tipsdb['EDTP:checkSymbolLink'] = array('Check-Symbolic-Link制御は、Follow-Symbolic-Linkがオンになっている場合にのみ有効です。 これは、シンボリックリンクがアクセス拒否ディレクトリに対してチェックされるかどうかを制御します。'); diff --git a/dist/admin/html.open/res/lang/zh-CN_tips.php b/dist/admin/html.open/res/lang/zh-CN_tips.php index bcf1daf0f..7677cabff 100644 --- a/dist/admin/html.open/res/lang/zh-CN_tips.php +++ b/dist/admin/html.open/res/lang/zh-CN_tips.php @@ -90,8 +90,6 @@ $_tipsdb['accessLog_fileName'] = new DAttrHelp("文件名", '指定访问日志文件的文件名。', '[性能建议] 将访问日志文件放置在一个单独的磁盘上。', '文件2', ''); -$_tipsdb['accessLog_keepDays'] = new DAttrHelp("保留天数", '指定访问日志文件将被保存在磁盘上多少天。 只有超出指定天数的回滚日志文件会被删除。 当前的日志文件不会被删除，无论它包含了多少天的数据。 如果你不想自动删除过时的、很旧的日志文件， 将该值设置为0。', '', '无符号整数', ''); - $_tipsdb['accessLog_logFormat'] = new DAttrHelp("日志格式", ' 指定访问日志的格式。 设置之后，它将覆盖"记录头部" 的设定。', '', '字符串。日志格式的语法与Apache 2.0自定义 日志格式兼容。', '一般日志格式（CLF）
"%h %l %u %t \"%r\" %>s %b"

支持虚拟主机的一般日志格式
"%v %h %l %u %t \"%r\" %>s %b"

NCSA扩展/组合日志格式
"%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"

记录Foobar的cookie值
"%{Foobar}C"'); $_tipsdb['accessLog_logHeader'] = new DAttrHelp("记录头部", '指定是否记录HTTP请求头: Referer、 UserAgent和Host。', '[性能建议] 如果你不需要在访问日志中记录这些头部信息，关闭这个功能。', '复选框', ''); @@ -150,6 +148,10 @@ $_tipsdb['brStaticCompressLevel'] = new DAttrHelp("Brotli Compression Level (Static File)", 'Specifies the level of Brotli compression applied to static files. Ranges from 1 (lowest) to 11 (highest).

This setting will only take effect when "启用压缩" and "自动更新静态文件" are enabled.

Default value: 5', ' Save network bandwidth. Text-based responses such as html, css, and javascript files benefit the most and on average can be compressed to half of their original size.', 'Number between 1 and 11.', ''); +$_tipsdb['bubbleWrap'] = new DAttrHelp("Bubblewrap Container", 'Set to On if you wish to start CGI processes (including PHP programs) in a bubblewrap sandbox. See https://wiki.archlinux.org/index.php/Bubblewrap for details on using bubblewrap. Bubblewrap must be installed on your system prior to using this setting.

This setting cannot be turned on at the Virtual Host level if set to "Disabled" at the Server level.

Default values:
Server level: Disabled
VH level: Inherit Server level setting', '', 'Select from drop down list', ''); + +$_tipsdb['bubbleWrapCmd'] = new DAttrHelp("Bubblewrap Command", 'The full bubblewrap use command, including the bubblewrap program itself. More on configuring this command can be found here: https://openlitespeed.org/kb/bubblewrap-in-openlitespeed/ . If not specified, the default command listed below will be used.

Default value: /bin/bwrap --ro-bind /usr /usr --ro-bind /lib /lib --ro-bind-try /lib64 /lib64 --ro-bind /bin /bin --ro-bind /sbin /sbin --dir /var --dir /tmp --proc /proc --symlink../tmp var/tmp --dev /dev --ro-bind-try /etc/localtime /etc/localtime --ro-bind-try /etc/ld.so.cache /etc/ld.so.cache --ro-bind-try /etc/resolv.conf /etc/resolv.conf --ro-bind-try /etc/ssl /etc/ssl --ro-bind-try /etc/pki /etc/pki --ro-bind-try /etc/man_db.conf /etc/man_db.conf --ro-bind-try /home/$USER /home/$USER --bind-try /var/lib/mysql/mysql.sock /var/lib/mysql/mysql.sock --bind-try /home/mysql/mysql.sock /home/mysql/mysql.sock --bind-try /tmp/mysql.sock /tmp/mysql.sock --unshare-all --share-net --die-with-parent --dir /run/user/$UID ‘$PASSWD 65534’ ‘$GROUP 65534’', '', '', ''); + $_tipsdb['certChain'] = new DAttrHelp("Chained Certificate", 'Specifies whether the certificate is a chained certificate or not. The file that stores a certificate chain must be in PEM format, and the certificates must be in the chained order, from the lowest level (the actual client or server certificate) to the highest level (root) CA.', '', 'Select from radio box', ''); $_tipsdb['certFile'] = new DAttrHelp("Certificate File", 'The filename of the SSL certificate file.', ' The certificate file should be placed in a secured directory, which allows read-only access to the user that the server runs as.', 'Filename which can be an absolute path or a relative path to $SERVER_ROOT.', ''); @@ -390,6 +392,8 @@ $_tipsdb['log_fileName'] = new DAttrHelp("文件名", '指定日志文件的路径。', '[性能建议] 将日志文件放置在一个单独的磁盘上。', '文件2', ''); +$_tipsdb['log_keepDays'] = new DAttrHelp("Keep Days", 'Specifies how many days the access log file will be kept on disk. Only rotated log files older than the specified number of days will be deleted. The current log file will not be touched regardless how many days worth of data it contains. If you do not want to auto-delete stale and very old log files, set this to 0.', '', '无符号整数', ''); + $_tipsdb['log_logLevel'] = new DAttrHelp("日志级别", '指定日志文件中记录的日志级别。 可用级别（由高到低）为: ERROR、 WARNING、NOTICE、INFO和DEBUG。 只有级别与当前设置相同或更高的消息将被记录（级别越低记录越详细）。', '[性能建议] 使用DEBUG日志级别对 性能没有任何影响，除非"调试级别"没有被设置为NONE.。我们推荐将日志级别设置为DEBUG，将 调试级别值设置为NONE。这样设置意味着你的磁盘不会被调试日志塞满，但是你可以使用"Toggle Debug Logging" 控制调试输出。这个操作可以实时启用或关闭调试记录， 对于调试繁忙的生产服务器非常有用。', '选项', ''); $_tipsdb['log_rollingSize'] = new DAttrHelp("回滚大小", '指定何时日志文件需要回滚，也称为日志循环。 当文件大小超过回滚限制后，在使用的日志文件将在同一目录中被重命名 为log_name.mm_dd_yyyy(.sequence)，一个新的日志文件将被创建。 回滚的日志文件的实际大小有时会比限制值稍微大一些。 将值设置为0将禁用日志循环。', '请用“K”，“M”，“G”代表千字节，兆字节和千兆字节。', '无符号整数', ''); @@ -604,7 +608,7 @@ $_tipsdb['shType'] = new DAttrHelp("类型", '指定处理这些脚本文件的外部程序类型。 可用类型有：CGI, FastCGI, Web服务器, LSAPI应用程序, 负载均衡器, 或 Servlet引擎。 对于FastCGI, Web服务器和Servlet引擎，需要指定"处理器名称"。 这是在"External Apps"部分预设定的外部程序名称。', '', '选项', ''); -$_tipsdb['shmDefaultDir'] = new DAttrHelp("Default SHM Directory", 'Changes shared memory's default directory to the specified path. If the directory does not exist, it will be created. All SHM data will be stored in this directory unless otherwise specified.', '', 'Path', ''); +$_tipsdb['shmDefaultDir'] = new DAttrHelp("Default SHM Directory", 'Changes shared memory's default directory to the specified path. If the directory does not exist, it will be created. All SHM data will be stored in this directory unless otherwise specified.', '', 'path', ''); $_tipsdb['showVersionNumber'] = new DAttrHelp("服务器签名", '指定是否在响应头的Server参数中显示服务器签名和版本号。 有三个选项: 当设置为Hide Version时、只显示LiteSpeed。当设置为 Show Version，显示LiteSpeed和版本号。 设置为Hide Full Header时，整个Server头都不会显示在响应报头中。', '[安全建议] 如果你不想暴露服务器的版本号，设置为Hide Version。', '布尔值', ''); @@ -616,6 +620,8 @@ $_tipsdb['sslCert'] = new DAttrHelp("SSL Private Key & Certificate", 'Every SSL listener requires a paired SSL private key and SSL certificate. Multiple SSL listeners can share the same key and certificate.

You can generate SSL private keys yourself using an SSL software package, such as OpenSSL. SSL certificates can also be purchased from an authorized certificate issuer like VeriSign or Thawte. You can also sign the certificate yourself. Self-signed certificates will not be trusted by web browsers and should not be used on public websites containing critical data. However, a self-signed certificate is good enough for internal use, e.g. for encrypting traffic to LiteSpeed Web Server's WebAdmin Console.', '', '', ''); +$_tipsdb['sslDefaultCiphers'] = new DAttrHelp("Default Cipher Suite", 'Default cipher suite for SSL certificates.

Default value: Server Internal Default (Based on current best practices)', '', 'Colon-separated string of cipher specifications.', ''); + $_tipsdb['sslEnableMultiCerts'] = new DAttrHelp("Enable Multiple SSL Certificates", 'Allows listeners/vhosts to set multiple SSL certificates. If multiple certificates are enabled, the certificates/keys are expected to follow a naming scheme. If the cert is named server.crt, other possible cert names are server.crt.rsa, server.crt.dsa, server.crt.ecc. If "Not Set", defaults to "No".', '', 'Select from radio box', ''); $_tipsdb['sslOCSP'] = new DAttrHelp("OCSP Stapling", 'Online Certificate Status Protocol (OCSP) is a more efficient method of checking whether a digital certificate is valid. It works by communicating with another server — the OCSP responder — to get verification that the certificate is valid instead of checking through certificate revocation lists (CRL).

OCSP stapling is a further improvement on this protocol, allowing the server to check with the OCSP responder at regular intervals instead of every time a certificate is requested. See the OCSP Wikipedia page for more details.', '', '', ''); @@ -726,7 +732,7 @@ $_tipsdb['vhlog_logLevel'] = new DAttrHelp("日志级别", '指定日志记录级别。可用级别（从高到低）为ERROR, WARNING, NOTICE, INFO, 和 DEBUG。 只有当消息等级高于或与当前设置相同时才被记录。 如果您希望将此设置为DEBUG，您也需要设置服务器日志级别为DEBUG。 调试的级别只能在服务器级别通过"调试级别"控制。', '[性能建议] 除非"调试级别"设置为NONE以外的日志级别, 否则DEBUG级别不会对性能产生任何影响，推荐采用。', '选项', ''); -$_tipsdb['viewlog'] = new DAttrHelp("Server Log Viewer", 'The Server Log Viewer is a convenient tool for browsing the current server log to check for errors or problems. The log viewer searches the server log file in blocks for the specified log level. The default block size is 20KB. You can use the Begin, End, Next, and Prev buttons to navigate a large log file.', 'The size of a dynamically generated page is limited by "动态回应主内容最大大小". So if the block is too big, the page might be truncated.', '', ''); +$_tipsdb['viewlog'] = new DAttrHelp("Server Log Viewer", 'The Server Log Viewer is a convenient tool for browsing the current server log to check for errors or problems. The log viewer searches the server log file in blocks for the specified log level. The default block size is 20KB. You can use the Begin, End, Next, and Prev buttons to navigate a large log file.', 'The size of a dynamically generated page is limited by "动态回应主内容最大大小". So if the block is too big, the page might be truncated.', '', ''); $_tipsdb['virtualHostMapping'] = new DAttrHelp("Virtual Host Mappings", 'Specifies the relationship between the listener and virtual hosts. Listeners and virtual hosts are associated by domain names. An HTTP request will be routed to a virtual host with a matching domain name. One listener can map to multiple virtual hosts for different domain names. One virtual host can also be mapped from different listeners. One listener can allow one catchall virtual host with the domain name value "*". When there is no explicitly matched domain name in the listener's mapping, the listener will forward the request to that catchall virtual host.', ' Only add necessary mappings. If the listener is mapped to only one virtual host, then only set up a catchall mapping "*".', '', ''); @@ -779,6 +785,10 @@ $_tipsdb['EDTP:binPath'] = array('',''); +$_tipsdb['EDTP:bubbleWrap'] = array(''); + +$_tipsdb['EDTP:bubbleWrapCmd'] = array(''); + $_tipsdb['EDTP:cgi_path'] = array('A CGI context can be used to specify a directory only contains CGI scripts. Path can be absolute path or relative to $SERVER_ROOT, $VH_ROOT or $DOC_ROOT(default). Path and URI must be ended with "/" for a cgi-bin directory.','If only a specific script is needed in that directory, it is recommended to create a CGI context for that script only. In this case, path and URI need not be a directory. For e.g., path can be ~/myapp/myscript.pl, URI can be /myapp/myscript.pl. All other files will not be served as CGI.'); $_tipsdb['EDTP:checkSymbolLink'] = array('Check-Symbolic-Link control will take effect only if Follow-Symbolic-Link is turned on. This controls whether symbolic links are checked against Access Denied Directories.'); @@ -787,7 +797,7 @@ $_tipsdb['EDTP:ctxType'] = array('Static context can be used to map a URI to a directory either outside document root or within it.','Java Web App context is used to automatically import a predefined Java Application in an AJPv13 compilant Java servlet engine.','Servlet context is used to import a specific servlet under a web application.','Fast CGI context is a mount point of Fast CGI application.','LiteSpeed SAPI context can be used to associate a URI with an LSAPI application.','Proxy context enables this virtual host to serve as a transparant reverse proxy server to an external web server or application server.','CGI context can be used to specify a directory only contains CGI scripts.','Load Balancer context can be used to assign a different cluster for that context.','Redirect context can set up an internal or external redirect URI.','App Server context is specifically used for Rack/Rails, WSGI, and Node.js applications.
','Module handler context is a mount point of hander type modules.'); -$_tipsdb['EDTP:docRoot'] = array('Set up your document root here, which can be absolute path or relative to $SERV_ROOT or $VH_ROOT','Document root is referred as $DOC_ROOT in this virtual host, which can be used in other path configuration.'); +$_tipsdb['EDTP:docRoot'] = array('Document root will not be created by the server automatically if it does not already exist. Please ensure that both the directory exists and it is owned by the correct user.','Set up your document root here, which can be absolute path or relative to $SERV_ROOT or $VH_ROOT','Document root is referred as $DOC_ROOT in this virtual host, which can be used in other path configuration.'); $_tipsdb['EDTP:domainName'] = array('Enter all the domains that you want this listener to respond to. Use comma "," to separate individual domain.','You can choose only one virtual host to handle all unspecified domains, put "*" in domains.'); @@ -849,7 +859,7 @@ $_tipsdb['EDTP:maxCGIInstances'] = array('Limits resources that a CGI program can use. This helps against DoS attacks.','Max CGI Instances controls how many CGI processes the web server can launch.'); -$_tipsdb['EDTP:maxReqHeaderSize'] = array('Numbers can be represented as 10240, 10K or 1M.'); +$_tipsdb['EDTP:maxReqHeaderSize'] = array('Numbers can be represented as 10240 or 10K.'); $_tipsdb['EDTP:mime'] = array('MIME settings can be edited from the previous page. You can specify the mime configuration file location which can be either be an absolute path or relative to $SERVER_ROOT.'); @@ -915,7 +925,7 @@ $_tipsdb['EDTP:userDBLocation'] = array('It is recommended that the database be stored under the $SERVER_ROOT/conf/vhosts/$VH_NAME/ directory.'); -$_tipsdb['EDTP:vhRoot'] = array('All directories must pre-exist. This web interface will not create the directory for you. If you are creating a new virtual host, you can create an empty root directory and set it up from the beginning; or you can copy the "Example" virtual root that shipped with the package to this virtual host root and modify it.','Virtual host root ($VH_ROOT) can be absolute path or relative to $SERVER_ROOT.'); +$_tipsdb['EDTP:vhRoot'] = array('All directories must pre-exist. This web interface will not create the directory for you. If you are creating a new virtual host, you can create an empty root directory and set it up from the beginning; or you can copy the "Example" virtual root that shipped with the package to this virtual host root and modify it to be user owned.','Virtual host root ($VH_ROOT) can be absolute path or relative to $SERVER_ROOT.'); $_tipsdb['EDTP:vhaccessLog_fileName'] = array('Log file path can be an absolute path or a relative path to $SERVER_ROOT, $VH_ROOT.'); diff --git a/dist/admin/html.open/view/inc/configui.php b/dist/admin/html.open/view/inc/configui.php index d57d8d633..55078d262 100644 --- a/dist/admin/html.open/view/inc/configui.php +++ b/dist/admin/html.open/view/inc/configui.php @@ -112,7 +112,7 @@ $footer_lic_info = ' Open LiteSpeed is an open source HTTP server. - Copyright (C) 2013-2019 Lite Speed Technologies, Inc. + Copyright (C) 2013-2020 Lite Speed Technologies, Inc. This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by diff --git a/dist/admin/html.open/view/inc/header.php b/dist/admin/html.open/view/inc/header.php index e091c81dc..a143659ba 100644 --- a/dist/admin/html.open/view/inc/header.php +++ b/dist/admin/html.open/view/inc/header.php @@ -25,27 +25,16 @@ - + + - - - - - - + + openlitespeed logo -

OpenLiteSpeed Web Server Users' Manual

-
Version 1.6  — Rev. 2
+

+ OpenLiteSpeed Web Server Users' Manual +

+

Version 1.7  — Rev. 17

Log Level⇑

Description

Specifies the level of logging. Available levels (from high to low) are ERROR, WARNING, NOTICE, INFO, and DEBUG. Only messages with a level higher than or equal to the current setting will be logged. If you want to set it to DEBUG, you must set the server log level to DEBUG as well. The level of debugging is controlled solely at the server level by Debug Level.

Syntax

Select from drop down list

Tips

Unless Debug Level is set to a level other than NONE, DEBUG log level does not have any performance impact and is recommended.

See Also

Debug Level

Rolling Size (bytes)⇑

Description

Specifies when the current log file needs to be rolled over, also known as log rotation. When the file size is over the rollover limit, the active log file will be renamed to log_name.mm_dd_yyyy(.sequence) in the same directory and a new active log file will be created. The actual size of the rotated log file once it is created will sometimes be a little bigger than this size limit. Set to 0 to disable log rotation.

Syntax

Integer number

Tips

Append "K", "M", "G" to the number for kilo-, mega- and giga- bytes.

+

Keep Days⇑

Description

Specifies how many days the access log file will be kept on disk. Only rotated log files older than the specified number of days will be deleted. The current log file will not be touched regardless how many days worth of data it contains. If you do not want to auto-delete stale and very old log files, set this to 0.

Syntax

Integer number

Log Control⇑

Description

Where the access log should be written. There are three options:

  1. Write to the server's access log
  2. Create an access log for this virtual host
  3. Disable access logging

Syntax

Select from drop down list

File Name⇑

Description

The access log filename.

Syntax

Filename which can be an absolute path or a relative path to $SERVER_ROOT, $VH_ROOT.

Tips

Put access log file on a separate disk.

Piped Logger⇑

Description

Specifies the external application that will receive the access log data sent by LiteSpeed through a pipe on its STDIN stream (file handle is 0). When this field is specified, the access log will be sent only to the logger application and not the access log file specified in previous entry.

The logger application must be defined in External Apps section first. Server-level access logging can only use an external logger application defined at the server level. Virtual host-level access logging can only use a logger application defined at the virtual host level.

The logger process is spawned in the same way as other external (CGI/FastCGI/LSAPI) processes. This means it will execute as the user ID specified in the virtual host's External App Set UID Mode settings and will never run on behalf of a privileged user.

LiteSpeed web server performs simple load balancing among multiple logger applications if more than one instance of a logger application is configured. LiteSpeed server always attempts to keep the number of logger applications as low as possible. Only when one logger application fails to process access log entries in time will the server attempt to spawn another instance of the logger application.

If a logger crashes, the web server will start another instance but the log data in the stream buffer will be lost. It is possible to lose log data if external loggers cannot keep up with the speed and volume of the log stream.

Syntax

Select from drop down list

Log Format⇑

Description

Specifies the log format for the access log. When log format is set, it will override the Log Headers setting.

Syntax

String. The syntax of log format is compatible with Apache 2.0's custom log format.

Example

Common Log Format (CLF)
"%h %l %u %t \"%r\" %>s %b"

Common Log Format with Virtual Host
"%v %h %l %u %t \"%r\" %>s %b"

NCSA extended/combined log format
"%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"

Log cookie value of Foobar
"%{Foobar}C"

See Also

Log Headers

Log Headers⇑

Description

Specifies whether to log HTTP request headers: Referer, UserAgent, and Host.

Syntax

Select from checkbox

Tips

Turn this off if you do not need these headers in the access log.

See Also

Log Format

-

Keep Days⇑

Description

Specifies how many days the access log file will be kept on disk. Only rotated log files older than the specified number of days will be deleted. The current log file will not be touched regardless how many days worth of data it contains. If you do not want to auto-delete stale and very old log files, set this to 0.

Syntax

Integer number

Bytes Log⇑

Description

Specifies the path to the bandwidth bytes log file. When specified, a cPanel compatible bandwidth log will be created. This will log the total bytes transferred for a request including both the request and reply bodies.

Syntax

Filename which can be an absolute path or a relative path to $SERVER_ROOT.

Tips

Put the log file on a separate disk.

Compress Archive⇑

Description

Specifies whether to compress rotated log files in order to save disk space.

Syntax

Select from radio box

Tips

Log files are highly compressible and this is recommended to reduce disk usage for old logs.

-
+
diff --git a/dist/docs/AdminListeners_General_Help.html b/dist/docs/AdminListeners_General_Help.html index 2f6cb322a..412667df7 100644 --- a/dist/docs/AdminListeners_General_Help.html +++ b/dist/docs/AdminListeners_General_Help.html @@ -14,8 +14,10 @@
openlitespeed logo
-

OpenLiteSpeed Web Server Users' Manual

-
Version 1.6  — Rev. 2
+

+ OpenLiteSpeed Web Server Users' Manual +

+

Version 1.7  — Rev. 17

Secure⇑

Description

Specifies whether this is a secure (SSL) listener. For secure listeners, additional SSL settings need to be set properly.

Syntax

Select from radio box

-
+
diff --git a/dist/docs/AdminListeners_SSL_Help.html b/dist/docs/AdminListeners_SSL_Help.html index a7153f397..f833026fc 100644 --- a/dist/docs/AdminListeners_SSL_Help.html +++ b/dist/docs/AdminListeners_SSL_Help.html @@ -14,8 +14,10 @@
openlitespeed logo
-

OpenLiteSpeed Web Server Users' Manual

-
Version 1.6  — Rev. 2
+

+ OpenLiteSpeed Web Server Users' Manual +

+

Version 1.7  — Rev. 17

Client Revocation File⇑

Description

Specifies the file containing PEM-encoded CA CRL files enumerating revoked client certificates. This can be used as an alternative or in addition to Client Revocation Path.

Syntax

Filename which can be an absolute path or a relative path to $SERVER_ROOT.

-
+
diff --git a/dist/docs/AdminSecurity_Help.html b/dist/docs/AdminSecurity_Help.html index 7faa111af..b614e17da 100644 --- a/dist/docs/AdminSecurity_Help.html +++ b/dist/docs/AdminSecurity_Help.html @@ -14,8 +14,10 @@
openlitespeed logo
-

OpenLiteSpeed Web Server Users' Manual

-
Version 1.6  — Rev. 2
+

+ OpenLiteSpeed Web Server Users' Manual +

+

Version 1.7  — Rev. 17

    @@ -60,7 +62,9 @@
    Version 1.6  — Rev. 2
  • Context
    • @@ -91,12 +101,12 @@

    Admin Console Security

    Table of Contents

    WebAdmin User

    -

    Access Control⇑

    Description

    Specifies what sub networks and/or IP addresses can access the server. At the server level, this setting will affect all virtual hosts. You can also set up access control unique to each virtual host at the virtual host level. Virtual host level settings will NOT override server level settings.

    Blocking/Allowing an IP is determined by the combination of the allowed list and the denied list. If you want to block only certain IPs or sub-networks, put * or ALL in the Allowed List and list the blocked IPs or sub-networks in the Denied List. If you want to allow only certain IPs or sub-networks, put * or ALL in the Denied List and list the allowed IPs or sub-networks in the Allowed List. The setting of the smallest scope that fits for an IP will be used to determine access.

    Server Level: Trusted IPs or sub-networks must be specified in the Allowed List by adding a trailing "T". Trusted IPs or sub-networks are not affected by connection/throttling limits. Only server level access control can set up trusted IPs/sub-networks.

    Tips

    Use this at the server level for general restrictions that apply to all virtual hosts.

    -

    Allowed List⇑

    Description

    Specifies the list of IPs or sub-networks allowed. * or ALL are accepted.

    Syntax

    Comma delimited list of IP addresses or sub-networks. A trailing "T" can be used to indicate a trusted IP or sub-network, such as 192.168.1.*T.

    Example

    Sub-networks: 192.168.1.0/255.255.255.0, 192.168.1.0/24, 192.168.1, or 192.168.1.*
    IPv6 addresses: ::1 or [::1]
    IPv6 subnets: 3ffe:302:11:2:20f:1fff:fe29:717c/64 or [3ffe:302:11:2:20f:1fff:fe29:717c]/64

    Tips

    Trusted IPs or sub-networks set at the server level access control will be excluded from connection/throttling limits.

    -

    Denied List⇑

    Description

    Specifies the list of IPs or sub-networks disallowed.

    Syntax

    Comma delimited list of IP addresses or sub-networks. * or ALL are accepted.

    Example

    Sub-networks: 192.168.1.0/255.255.255.0, 192.168.1.0/24, 192.168.1, or 192.168.1.*
    IPv6 addresses: ::1 or [::1]
    IPv6 subnets: 3ffe:302:11:2:20f:1fff:fe29:717c/64 or [3ffe:302:11:2:20f:1fff:fe29:717c]/64
    +

    Access Control⇑

    Description

    Specifies what sub networks and/or IP addresses can access the server. At the server level, this setting will affect all virtual hosts. You can also set up access control unique to each virtual host at the virtual host level. Virtual host level settings will NOT override server level settings.

    Blocking/Allowing an IP is determined by the combination of the allowed list and the denied list. If you want to block only certain IPs or sub-networks, put * or ALL in the Allowed List and list the blocked IPs or sub-networks in the Denied List. If you want to allow only certain IPs or sub-networks, put * or ALL in the Denied List and list the allowed IPs or sub-networks in the Allowed List. The setting of the smallest scope that fits for an IP will be used to determine access.

    Server Level: Trusted IPs or sub-networks must be specified in the Allowed List by adding a trailing "T". Trusted IPs or sub-networks are not affected by connection/throttling limits. Only server level access control can set up trusted IPs/sub-networks.

    Tips

    Use this at the server level for general restrictions that apply to all virtual hosts.

    +

    Allowed List⇑

    Description

    Specifies the list of IPs or sub-networks allowed. * or ALL are accepted.

    Syntax

    Comma delimited list of IP addresses or sub-networks. A trailing "T" can be used to indicate a trusted IP or sub-network, such as 192.168.1.*T.

    Example

    Sub-networks: 192.168.1.0/255.255.255.0, 192.168.1.0/24, 192.168.1, or 192.168.1.*
    IPv6 addresses: ::1 or [::1]
    IPv6 subnets: 3ffe:302:11:2:20f:1fff:fe29:717c/64 or [3ffe:302:11:2:20f:1fff:fe29:717c]/64

    Tips

    Trusted IPs or sub-networks set at the server level access control will be excluded from connection/throttling limits.

    +

    Denied List⇑

    Description

    Specifies the list of IPs or sub-networks disallowed.

    Syntax

    Comma delimited list of IP addresses or sub-networks. * or ALL are accepted.

    Example

    Sub-networks: 192.168.1.0/255.255.255.0, 192.168.1.0/24, 192.168.1, or 192.168.1.*
    IPv6 addresses: ::1 or [::1]
    IPv6 subnets: 3ffe:302:11:2:20f:1fff:fe29:717c/64 or [3ffe:302:11:2:20f:1fff:fe29:717c]/64

    WebAdmin User⇑

    Description

    Change the username and password for the WebAdmin Console. The old password must be entered and verified in order to save changes.

    -
    +
    diff --git a/dist/docs/App_Server_Context.html b/dist/docs/App_Server_Context.html index 8b81e0d63..42221a0b4 100644 --- a/dist/docs/App_Server_Context.html +++ b/dist/docs/App_Server_Context.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    Rewrite Inherit⇑

    Description

    Specifies whether to inherit rewrite rules from parent contexts. If rewrite is enabled and not inherited, rewrite base and rewrite rules defined in this context will be used.

    Syntax

    Select from radio box

    Rewrite Base⇑

    Description

    Specifies the base URL for rewrite rules.

    Syntax

    URL

    -

    Rewrite Rules⇑

    Description

    Specifies a list of rewrite rules at the virtual host level.

    Do NOT add any document root level rewrite rules here. If you have any document root level rewrite rules from .htaccess, you should instead create a static context with uri "/" and add the rewrite rules there.

    A rewrite rule is comprised of one RewriteRule directive and optionally preceded by multiple RewriteCond directives.

    • Each directive should take only one line.
    • RewriteCond and RewriteRule follow Apache's rewrite directive syntax. Just copy and paste rewrite directives from your Apache configuration files.
    • There are minor differences between LiteSpeed and Apache mod_rewrite implementation:
      • %\{LA-U:variable\} and %\{LA-F:variable\} are ignored by the LiteSpeed rewrite engine
      • two new server variables are added in the LiteSpeed rewrite engine: %\{CURRENT_URI\} represents the current URI being processed by the rewrite engine and %\{SCRIPT_NAME\} has the same meaning as the corresponding CGI environment variable.
    The implementation of LiteSpeed's rewrite engine follows the Apache's rewrite engine specifications. For more details about rewrite rules, please refer to Apache's mod_rewrite document and Apache's URL rewriting guide.

    Syntax

    string

    +

    Rewrite Rules⇑

    Description

    Specifies a list of rewrite rules at the virtual host level.

    Do NOT add any document root level rewrite rules here. If you have any document root level rewrite rules from .htaccess, you should instead create a static context with uri "/" and add the rewrite rules there.

    A rewrite rule is comprised of one RewriteRule directive and optionally preceded by multiple RewriteCond directives.

    • Each directive should take only one line.
    • RewriteCond and RewriteRule follow Apache's rewrite directive syntax. Just copy and paste rewrite directives from your Apache configuration files.
    • There are minor differences between LiteSpeed and Apache mod_rewrite implementation:
      • %\{LA-U:variable\} and %\{LA-F:variable\} are ignored by the LiteSpeed rewrite engine
      • Two new server variables are added in the LiteSpeed rewrite engine: %\{CURRENT_URI\} represents the current URI being processed by the rewrite engine and %\{SCRIPT_NAME\} has the same meaning as the corresponding CGI environment variable.
      • The LiteSpeed rewrite engine will stop processing rewrite rules after encountering an [L] flag to avoid looping while Apache mod_rewrite will stop processing rewrite rules for the current iteration only. This behavior is similar to that of the [END] flag in Apache mod_rewrite.

    The implementation of LiteSpeed's rewrite engine follows Apache's rewrite engine specifications. For more details about rewrite rules, please refer to Apache's mod_rewrite document and Apache's URL rewriting guide .

    Syntax

    string

    Add Default Charset⇑

    Description

    Specifies whether to add a character set tag to the "Content-Type" response header, when content type is either "text/html" or "text/plain" without any parameters. When set to Off, this function is disabled. When set to On, either the character set specified by Customized Default Charset or the default "iso-8859-1" will be added.

    Syntax

    Select from radio box

    Customized Default Charset⇑

    Description

    Specifies a character set to be used when Add Default Charset is On. This is optional. The default value is iso-8859-1. This entry has no effect when Add Default Charset is Off.

    Syntax

    Name of a character set.

    Example

    utf-8

    Enable GeoLocation Lookup⇑

    Description

    Specifies whether to enable/disable IP Geolocation lookup. Can be set at server, virtual host, or context level. IP Geolocation is disabled by default when using value "Not Set".

    Syntax

    Select from radio box

    See Also

    Use Client IP in Header, DB File Path,

    -
    +
    diff --git a/dist/docs/App_Server_Help.html b/dist/docs/App_Server_Help.html index 349f14a20..dbcbb709f 100644 --- a/dist/docs/App_Server_Help.html +++ b/dist/docs/App_Server_Help.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    Run On Start Up⇑

    Description

    Specifies whether to start the external application at server start up. Only applicable to external applications that can manage their own child processes and where Instances value is set to "1".

    If enabled, external processes will be created at server startup instead of run-time.

    When selecting "Yes (Detached mode)", all detached process can be restarted at the Server level or Virtual Host level by touching the '.lsphp_restart.txt' file under the $SERVER_ROOT/admin/tmp/ or $VH_ROOT/ directory respectively.

    Default value: Yes (Detached mode)

    Syntax

    Select from radio box

    Tips

    If the configured external process has significant startup overhead, like a Rails app, then this option should be enabled to decrease first page response time.

    Priority⇑

    Description

    Specifies priority of the external application process. Value ranges from -20 to 20. A lower number means a higher priority. An external application process cannot have a higher priority than the web server. If this priority is set to a lower number than the server's, the server's priority will be used for this value.

    Syntax

    int

    See Also

    Server Priority

    -

    Memory Soft Limit (bytes)⇑

    Description

    Specifies the memory consumption limit in bytes for an external application process or an external application started by the server.

    The main purpose of this limit is to prevent excessive memory usage because of software bugs or intentional attacks, not to impose a limit on normal usage. Make sure to leave enough head room, otherwise your application may fail and 503 error may be returned. It can be set at the server- level or at an individual external application level. The server-level limit will be used if it is not set at the individual application level.

    The operating system's default setting will be used if the value is absent at both levels or set to 0.

    Syntax

    Integer number

    Tips

    Do not over adjust this limit. This may result in 503 errors if your application needs more memory.

    -

    Memory Hard Limit (bytes)⇑

    Description

    Much the same as Memory Soft Limit (bytes), except the soft limit can be raised up to the hard limit from within a user process. The hard limit can be set at server level or at an individual external application level. The server-level limit will be used if it is not set at an individual application level.

    The operating system's default will be used if the value is absent at both levels or set to 0.

    Syntax

    Integer number

    Tips

    Do not over adjust this limit. This may result in 503 errors if your application need more memory.

    +

    Memory Soft Limit (bytes)⇑

    Description

    Specifies the memory consumption limit in bytes for an external application process or an external application started by the server.

    The main purpose of this limit is to prevent excessive memory usage because of software bugs or intentional attacks, not to impose a limit on normal usage. Make sure to leave enough head room, otherwise your application may fail and 503 error may be returned. It can be set at the server- level or at an individual external application level. The server-level limit will be used if it is not set at the individual application level.

    The operating system's default setting will be used if the value is absent at both levels or set to 0.

    Syntax

    Integer number

    Tips

    Do not over adjust this limit. This may result in 503 errors if your application needs more memory.

    +

    Memory Hard Limit (bytes)⇑

    Description

    Much the same as Memory Soft Limit (bytes), except the soft limit can be raised up to the hard limit from within a user process. The hard limit can be set at server level or at an individual external application level. The server-level limit will be used if it is not set at an individual application level.

    The operating system's default will be used if the value is absent at both levels or set to 0.

    Syntax

    Integer number

    Tips

    Do not over adjust this limit. This may result in 503 errors if your application need more memory.

    Process Soft Limit⇑

    Description

    Limits the total number of processes that can be created on behalf of a user. All existing processes will be counted against this limit, not just new processes to be started.

    The limit can be set at the server level or at an individual external application level. The server-level limit will be used if it is not set at an individual application level. The operating system's default setting will be used if this value is 0 or absent at both levels.

    Syntax

    Integer number

    Tips

    PHP scripts can call for forking processes. The main purpose of this limit is as a last line of defense to prevent fork bombs and other attacks caused by PHP processes creating other processes.

    Setting this setting too low can severely hurt functionality. The setting will thus be ignored below certain levels.

    When Run On Start Up is set to "Yes (Daemon mode)", the actual process limit will be higher than this setting to make sure parent processes are not limited.

    -

    Process Hard Limit⇑

    Description

    Much the same as Process Soft Limit, except the soft limit can be raised up to the hard limit from within a user process. The hard limit can be set at the server level or at an individual external application level. The server-level limit will be used if it is not set at an individual application level. The operating system's default value will be used if the value is absent at both levels or set to 0.

    Syntax

    Integer number

    +

    Process Hard Limit⇑

    Description

    Much the same as Process Soft Limit, except the soft limit can be raised up to the hard limit from within a user process. The hard limit can be set at the server level or at an individual external application level. The server-level limit will be used if it is not set at an individual application level. The operating system's default value will be used if the value is absent at both levels or set to 0.

    Syntax

    Integer number

    Python WSGI Default Settings⇑

    Description

    Default configurations for Python WSGI applications. These settings can be overriden at the context level.

    WSGI Path⇑

    Description

    Path to LiteSpeed Python Web Server Gateway Interface executable (lswsgi).

    This executable is created by compiling Python with LiteSpeed's WSGI LSAPI module.

    Syntax

    Absolute path

    Node.js App Default Settings⇑

    Description

    Default configurations for Node.js applications. These settings can be overriden at the context level.

    Node Path⇑

    Description

    Path to Node.js executable.

    Syntax

    Absolute path

    -
    +
    diff --git a/dist/docs/CGI_Context.html b/dist/docs/CGI_Context.html index 4d5313e2b..31ef06eb3 100644 --- a/dist/docs/CGI_Context.html +++ b/dist/docs/CGI_Context.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    Rewrite Inherit⇑

    Description

    Specifies whether to inherit rewrite rules from parent contexts. If rewrite is enabled and not inherited, rewrite base and rewrite rules defined in this context will be used.

    Syntax

    Select from radio box

    Rewrite Base⇑

    Description

    Specifies the base URL for rewrite rules.

    Syntax

    URL

    -

    Rewrite Rules⇑

    Description

    Specifies a list of rewrite rules at the virtual host level.

    Do NOT add any document root level rewrite rules here. If you have any document root level rewrite rules from .htaccess, you should instead create a static context with uri "/" and add the rewrite rules there.

    A rewrite rule is comprised of one RewriteRule directive and optionally preceded by multiple RewriteCond directives.

    • Each directive should take only one line.
    • RewriteCond and RewriteRule follow Apache's rewrite directive syntax. Just copy and paste rewrite directives from your Apache configuration files.
    • There are minor differences between LiteSpeed and Apache mod_rewrite implementation:
      • %\{LA-U:variable\} and %\{LA-F:variable\} are ignored by the LiteSpeed rewrite engine
      • two new server variables are added in the LiteSpeed rewrite engine: %\{CURRENT_URI\} represents the current URI being processed by the rewrite engine and %\{SCRIPT_NAME\} has the same meaning as the corresponding CGI environment variable.
    The implementation of LiteSpeed's rewrite engine follows the Apache's rewrite engine specifications. For more details about rewrite rules, please refer to Apache's mod_rewrite document and Apache's URL rewriting guide.

    Syntax

    string

    +

    Rewrite Rules⇑

    Description

    Specifies a list of rewrite rules at the virtual host level.

    Do NOT add any document root level rewrite rules here. If you have any document root level rewrite rules from .htaccess, you should instead create a static context with uri "/" and add the rewrite rules there.

    A rewrite rule is comprised of one RewriteRule directive and optionally preceded by multiple RewriteCond directives.

    • Each directive should take only one line.
    • RewriteCond and RewriteRule follow Apache's rewrite directive syntax. Just copy and paste rewrite directives from your Apache configuration files.
    • There are minor differences between LiteSpeed and Apache mod_rewrite implementation:
      • %\{LA-U:variable\} and %\{LA-F:variable\} are ignored by the LiteSpeed rewrite engine
      • Two new server variables are added in the LiteSpeed rewrite engine: %\{CURRENT_URI\} represents the current URI being processed by the rewrite engine and %\{SCRIPT_NAME\} has the same meaning as the corresponding CGI environment variable.
      • The LiteSpeed rewrite engine will stop processing rewrite rules after encountering an [L] flag to avoid looping while Apache mod_rewrite will stop processing rewrite rules for the current iteration only. This behavior is similar to that of the [END] flag in Apache mod_rewrite.

    The implementation of LiteSpeed's rewrite engine follows Apache's rewrite engine specifications. For more details about rewrite rules, please refer to Apache's mod_rewrite document and Apache's URL rewriting guide .

    Syntax

    string

    Enable GeoLocation Lookup⇑

    Description

    Specifies whether to enable/disable IP Geolocation lookup. Can be set at server, virtual host, or context level. IP Geolocation is disabled by default when using value "Not Set".

    Syntax

    Select from radio box

    See Also

    Use Client IP in Header, DB File Path,

    -
    +
    diff --git a/dist/docs/CompilePHP_Help.html b/dist/docs/CompilePHP_Help.html index a0d5c4a41..10e8efc64 100644 --- a/dist/docs/CompilePHP_Help.html +++ b/dist/docs/CompilePHP_Help.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    Add-on Modules⇑

    Description

    Select the add-on modules you wish to use. If you want to use a version not listed here, you can manually update the source code. (The location of the source code is shown in a prompt at this step of the PHP build.)

    Syntax

    Select from checkbox

    -
    +
    diff --git a/dist/docs/Context_Help.html b/dist/docs/Context_Help.html index 226bcf5de..79cf1b670 100644 --- a/dist/docs/Context_Help.html +++ b/dist/docs/Context_Help.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

      @@ -60,7 +62,9 @@
      Version 1.6  — Rev. 2
    • Context
      • @@ -105,7 +115,7 @@

      Table of Contents

      Context Type⇑

      Description

      The type of context created determines it's usage.

      Static context can be used to map a URI to a directory either outside document root or within it.
      Java Web App context is used to automatically import a predefined Java Application in an AJPv13 compilant Java servlet engine.
      Servlet context is used to import a specific servlet under a web application.
      Fast CGI context is a mount point of Fast CGI application.
      LiteSpeed SAPI context can be used to associate a URI with an LSAPI application.
      Proxy context enables this virtual host to serve as a transparant reverse proxy server to an external web server or application server.
      CGI context can be used to specify a directory only contains CGI scripts.
      Load Balancer context can be used to assign a different cluster for that context.
      Redirect context can set up an internal or external redirect URI.
      App Server context is specifically used for Rack/Rails, WSGI, and Node.js applications.
      Module handler context is a mount point of hander type modules.

      -
      +
      diff --git a/dist/docs/ExtApp_Help.html b/dist/docs/ExtApp_Help.html index 33faa570d..7b77b52fa 100644 --- a/dist/docs/ExtApp_Help.html +++ b/dist/docs/ExtApp_Help.html @@ -14,8 +14,10 @@
      openlitespeed logo
      -

      OpenLiteSpeed Web Server Users' Manual

      -
      Version 1.6  — Rev. 2
      +

      + OpenLiteSpeed Web Server Users' Manual +

      +

      Version 1.7  — Rev. 17

        @@ -60,7 +62,9 @@
        Version 1.6  — Rev. 2
      • Context
        • @@ -177,7 +187,7 @@

        Table of Contents

        Type⇑

        Description

        Specifies the type of external application. Application types are differentiated by the service they provide or the protocol they use to communicate with the server. Choose from

        • FastCGI: a FastCGI application with a Responder role.
        • FastCGI Authorizer: a FastCGI application with an Authorizer role
        • Servlet Engine: a servlet engine with an AJPv13 connector, such as Tomcat.
        • Web Server: a web server or application server that supports HTTP protocol.
        • LiteSpeed SAPI App: an application that communicates with the web server using LSAPI protocol.
        • Load Balancer: a virtual application that can balance load among worker applications.
        • Piped Logger: an application that can process access log entries received on its STDIN stream.

        Syntax

        Select from drop down list

        Tips

        Most applications will use either LSAPI or FastCGI protocol. LSAPI supports PHP, Ruby, and Python. Perl can be used with FastCGI. (PHP, Ruby, and Python can also be set up to run using FastCGI, but they run faster using LSAPI.) Java uses servlet engines.

        -
        +
        diff --git a/dist/docs/External_FCGI.html b/dist/docs/External_FCGI.html index 7cd13d739..266cc6594 100644 --- a/dist/docs/External_FCGI.html +++ b/dist/docs/External_FCGI.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

        Max Idle Time⇑

        Description

        Specifies the maximum idle time before an external application is stopped by the server, freeing idle resources. When set to "-1", the external application will not be stopped by the server unless running in ProcessGroup mode where idle external applications will be stopped after 30 seconds. The default value is "-1".

        Syntax

        Select from radio box

        Tips

        This feature is especially useful in the mass hosting environment where, in order to prevent files owned by one virtual host from being accessed by the external application scripts of another virtual host, many different applications are run at the same time in SetUID mode. Set this value low to prevent these external applications from idling unnecessarily.

        Priority⇑

        Description

        Specifies priority of the external application process. Value ranges from -20 to 20. A lower number means a higher priority. An external application process cannot have a higher priority than the web server. If this priority is set to a lower number than the server's, the server's priority will be used for this value.

        Syntax

        int

        See Also

        Server Priority

        -

        Memory Soft Limit (bytes)⇑

        Description

        Specifies the memory consumption limit in bytes for an external application process or an external application started by the server.

        The main purpose of this limit is to prevent excessive memory usage because of software bugs or intentional attacks, not to impose a limit on normal usage. Make sure to leave enough head room, otherwise your application may fail and 503 error may be returned. It can be set at the server- level or at an individual external application level. The server-level limit will be used if it is not set at the individual application level.

        The operating system's default setting will be used if the value is absent at both levels or set to 0.

        Syntax

        Integer number

        Tips

        Do not over adjust this limit. This may result in 503 errors if your application needs more memory.

        -

        Memory Hard Limit (bytes)⇑

        Description

        Much the same as Memory Soft Limit (bytes), except the soft limit can be raised up to the hard limit from within a user process. The hard limit can be set at server level or at an individual external application level. The server-level limit will be used if it is not set at an individual application level.

        The operating system's default will be used if the value is absent at both levels or set to 0.

        Syntax

        Integer number

        Tips

        Do not over adjust this limit. This may result in 503 errors if your application need more memory.

        +

        Memory Soft Limit (bytes)⇑

        Description

        Specifies the memory consumption limit in bytes for an external application process or an external application started by the server.

        The main purpose of this limit is to prevent excessive memory usage because of software bugs or intentional attacks, not to impose a limit on normal usage. Make sure to leave enough head room, otherwise your application may fail and 503 error may be returned. It can be set at the server- level or at an individual external application level. The server-level limit will be used if it is not set at the individual application level.

        The operating system's default setting will be used if the value is absent at both levels or set to 0.

        Syntax

        Integer number

        Tips

        Do not over adjust this limit. This may result in 503 errors if your application needs more memory.

        +

        Memory Hard Limit (bytes)⇑

        Description

        Much the same as Memory Soft Limit (bytes), except the soft limit can be raised up to the hard limit from within a user process. The hard limit can be set at server level or at an individual external application level. The server-level limit will be used if it is not set at an individual application level.

        The operating system's default will be used if the value is absent at both levels or set to 0.

        Syntax

        Integer number

        Tips

        Do not over adjust this limit. This may result in 503 errors if your application need more memory.

        Process Soft Limit⇑

        Description

        Limits the total number of processes that can be created on behalf of a user. All existing processes will be counted against this limit, not just new processes to be started.

        The limit can be set at the server level or at an individual external application level. The server-level limit will be used if it is not set at an individual application level. The operating system's default setting will be used if this value is 0 or absent at both levels.

        Syntax

        Integer number

        Tips

        PHP scripts can call for forking processes. The main purpose of this limit is as a last line of defense to prevent fork bombs and other attacks caused by PHP processes creating other processes.

        Setting this setting too low can severely hurt functionality. The setting will thus be ignored below certain levels.

        When Run On Start Up is set to "Yes (Daemon mode)", the actual process limit will be higher than this setting to make sure parent processes are not limited.

        -

        Process Hard Limit⇑

        Description

        Much the same as Process Soft Limit, except the soft limit can be raised up to the hard limit from within a user process. The hard limit can be set at the server level or at an individual external application level. The server-level limit will be used if it is not set at an individual application level. The operating system's default value will be used if the value is absent at both levels or set to 0.

        Syntax

        Integer number

        +

        Process Hard Limit⇑

        Description

        Much the same as Process Soft Limit, except the soft limit can be raised up to the hard limit from within a user process. The hard limit can be set at the server level or at an individual external application level. The server-level limit will be used if it is not set at an individual application level. The operating system's default value will be used if the value is absent at both levels or set to 0.

        Syntax

        Integer number

        -
        +
        diff --git a/dist/docs/External_FCGI_Auth.html b/dist/docs/External_FCGI_Auth.html index c3ef5e2ca..9f4bed6fd 100644 --- a/dist/docs/External_FCGI_Auth.html +++ b/dist/docs/External_FCGI_Auth.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

        Max Idle Time⇑

        Description

        Specifies the maximum idle time before an external application is stopped by the server, freeing idle resources. When set to "-1", the external application will not be stopped by the server unless running in ProcessGroup mode where idle external applications will be stopped after 30 seconds. The default value is "-1".

        Syntax

        Select from radio box

        Tips

        This feature is especially useful in the mass hosting environment where, in order to prevent files owned by one virtual host from being accessed by the external application scripts of another virtual host, many different applications are run at the same time in SetUID mode. Set this value low to prevent these external applications from idling unnecessarily.

        Priority⇑

        Description

        Specifies priority of the external application process. Value ranges from -20 to 20. A lower number means a higher priority. An external application process cannot have a higher priority than the web server. If this priority is set to a lower number than the server's, the server's priority will be used for this value.

        Syntax

        int

        See Also

        Server Priority

        -

        Memory Soft Limit (bytes)⇑

        Description

        Specifies the memory consumption limit in bytes for an external application process or an external application started by the server.

        The main purpose of this limit is to prevent excessive memory usage because of software bugs or intentional attacks, not to impose a limit on normal usage. Make sure to leave enough head room, otherwise your application may fail and 503 error may be returned. It can be set at the server- level or at an individual external application level. The server-level limit will be used if it is not set at the individual application level.

        The operating system's default setting will be used if the value is absent at both levels or set to 0.

        Syntax

        Integer number

        Tips

        Do not over adjust this limit. This may result in 503 errors if your application needs more memory.

        -

        Memory Hard Limit (bytes)⇑

        Description

        Much the same as Memory Soft Limit (bytes), except the soft limit can be raised up to the hard limit from within a user process. The hard limit can be set at server level or at an individual external application level. The server-level limit will be used if it is not set at an individual application level.

        The operating system's default will be used if the value is absent at both levels or set to 0.

        Syntax

        Integer number

        Tips

        Do not over adjust this limit. This may result in 503 errors if your application need more memory.

        +

        Memory Soft Limit (bytes)⇑

        Description

        Specifies the memory consumption limit in bytes for an external application process or an external application started by the server.

        The main purpose of this limit is to prevent excessive memory usage because of software bugs or intentional attacks, not to impose a limit on normal usage. Make sure to leave enough head room, otherwise your application may fail and 503 error may be returned. It can be set at the server- level or at an individual external application level. The server-level limit will be used if it is not set at the individual application level.

        The operating system's default setting will be used if the value is absent at both levels or set to 0.

        Syntax

        Integer number

        Tips

        Do not over adjust this limit. This may result in 503 errors if your application needs more memory.

        +

        Memory Hard Limit (bytes)⇑

        Description

        Much the same as Memory Soft Limit (bytes), except the soft limit can be raised up to the hard limit from within a user process. The hard limit can be set at server level or at an individual external application level. The server-level limit will be used if it is not set at an individual application level.

        The operating system's default will be used if the value is absent at both levels or set to 0.

        Syntax

        Integer number

        Tips

        Do not over adjust this limit. This may result in 503 errors if your application need more memory.

        Process Soft Limit⇑

        Description

        Limits the total number of processes that can be created on behalf of a user. All existing processes will be counted against this limit, not just new processes to be started.

        The limit can be set at the server level or at an individual external application level. The server-level limit will be used if it is not set at an individual application level. The operating system's default setting will be used if this value is 0 or absent at both levels.

        Syntax

        Integer number

        Tips

        PHP scripts can call for forking processes. The main purpose of this limit is as a last line of defense to prevent fork bombs and other attacks caused by PHP processes creating other processes.

        Setting this setting too low can severely hurt functionality. The setting will thus be ignored below certain levels.

        When Run On Start Up is set to "Yes (Daemon mode)", the actual process limit will be higher than this setting to make sure parent processes are not limited.

        -

        Process Hard Limit⇑

        Description

        Much the same as Process Soft Limit, except the soft limit can be raised up to the hard limit from within a user process. The hard limit can be set at the server level or at an individual external application level. The server-level limit will be used if it is not set at an individual application level. The operating system's default value will be used if the value is absent at both levels or set to 0.

        Syntax

        Integer number

        +

        Process Hard Limit⇑

        Description

        Much the same as Process Soft Limit, except the soft limit can be raised up to the hard limit from within a user process. The hard limit can be set at the server level or at an individual external application level. The server-level limit will be used if it is not set at an individual application level. The operating system's default value will be used if the value is absent at both levels or set to 0.

        Syntax

        Integer number

        -
        +
        diff --git a/dist/docs/External_LB.html b/dist/docs/External_LB.html index fd5531548..6c82f5351 100644 --- a/dist/docs/External_LB.html +++ b/dist/docs/External_LB.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

          @@ -60,7 +62,9 @@
          Version 1.6  — Rev. 2
        • Context
          • @@ -92,7 +102,7 @@

          Load Balancer

          Table of Contents

          Name⇑

          Description

          A unique name for this external application. You will refer to it by this name when you use it in other parts of the configuration.

          Workers⇑

          Description

          List of worker groups previously defined in the external load balancer.

          Syntax

          A comma-separated list in the form ExternalAppType::ExternalAppName

          Example

          fcgi::localPHP, proxy::backend1
          -
          +
          diff --git a/dist/docs/External_LSAPI.html b/dist/docs/External_LSAPI.html index 26e376430..e37a3042d 100644 --- a/dist/docs/External_LSAPI.html +++ b/dist/docs/External_LSAPI.html @@ -14,8 +14,10 @@
          openlitespeed logo
          -

          OpenLiteSpeed Web Server Users' Manual

          -
          Version 1.6  — Rev. 2
          +

          + OpenLiteSpeed Web Server Users' Manual +

          +

          Version 1.7  — Rev. 17

          Max Idle Time⇑

          Description

          Specifies the maximum idle time before an external application is stopped by the server, freeing idle resources. When set to "-1", the external application will not be stopped by the server unless running in ProcessGroup mode where idle external applications will be stopped after 30 seconds. The default value is "-1".

          Syntax

          Select from radio box

          Tips

          This feature is especially useful in the mass hosting environment where, in order to prevent files owned by one virtual host from being accessed by the external application scripts of another virtual host, many different applications are run at the same time in SetUID mode. Set this value low to prevent these external applications from idling unnecessarily.

          Priority⇑

          Description

          Specifies priority of the external application process. Value ranges from -20 to 20. A lower number means a higher priority. An external application process cannot have a higher priority than the web server. If this priority is set to a lower number than the server's, the server's priority will be used for this value.

          Syntax

          int

          See Also

          Server Priority

          -

          Memory Soft Limit (bytes)⇑

          Description

          Specifies the memory consumption limit in bytes for an external application process or an external application started by the server.

          The main purpose of this limit is to prevent excessive memory usage because of software bugs or intentional attacks, not to impose a limit on normal usage. Make sure to leave enough head room, otherwise your application may fail and 503 error may be returned. It can be set at the server- level or at an individual external application level. The server-level limit will be used if it is not set at the individual application level.

          The operating system's default setting will be used if the value is absent at both levels or set to 0.

          Syntax

          Integer number

          Tips

          Do not over adjust this limit. This may result in 503 errors if your application needs more memory.

          -

          Memory Hard Limit (bytes)⇑

          Description

          Much the same as Memory Soft Limit (bytes), except the soft limit can be raised up to the hard limit from within a user process. The hard limit can be set at server level or at an individual external application level. The server-level limit will be used if it is not set at an individual application level.

          The operating system's default will be used if the value is absent at both levels or set to 0.

          Syntax

          Integer number

          Tips

          Do not over adjust this limit. This may result in 503 errors if your application need more memory.

          +

          Memory Soft Limit (bytes)⇑

          Description

          Specifies the memory consumption limit in bytes for an external application process or an external application started by the server.

          The main purpose of this limit is to prevent excessive memory usage because of software bugs or intentional attacks, not to impose a limit on normal usage. Make sure to leave enough head room, otherwise your application may fail and 503 error may be returned. It can be set at the server- level or at an individual external application level. The server-level limit will be used if it is not set at the individual application level.

          The operating system's default setting will be used if the value is absent at both levels or set to 0.

          Syntax

          Integer number

          Tips

          Do not over adjust this limit. This may result in 503 errors if your application needs more memory.

          +

          Memory Hard Limit (bytes)⇑

          Description

          Much the same as Memory Soft Limit (bytes), except the soft limit can be raised up to the hard limit from within a user process. The hard limit can be set at server level or at an individual external application level. The server-level limit will be used if it is not set at an individual application level.

          The operating system's default will be used if the value is absent at both levels or set to 0.

          Syntax

          Integer number

          Tips

          Do not over adjust this limit. This may result in 503 errors if your application need more memory.

          Process Soft Limit⇑

          Description

          Limits the total number of processes that can be created on behalf of a user. All existing processes will be counted against this limit, not just new processes to be started.

          The limit can be set at the server level or at an individual external application level. The server-level limit will be used if it is not set at an individual application level. The operating system's default setting will be used if this value is 0 or absent at both levels.

          Syntax

          Integer number

          Tips

          PHP scripts can call for forking processes. The main purpose of this limit is as a last line of defense to prevent fork bombs and other attacks caused by PHP processes creating other processes.

          Setting this setting too low can severely hurt functionality. The setting will thus be ignored below certain levels.

          When Run On Start Up is set to "Yes (Daemon mode)", the actual process limit will be higher than this setting to make sure parent processes are not limited.

          -

          Process Hard Limit⇑

          Description

          Much the same as Process Soft Limit, except the soft limit can be raised up to the hard limit from within a user process. The hard limit can be set at the server level or at an individual external application level. The server-level limit will be used if it is not set at an individual application level. The operating system's default value will be used if the value is absent at both levels or set to 0.

          Syntax

          Integer number

          +

          Process Hard Limit⇑

          Description

          Much the same as Process Soft Limit, except the soft limit can be raised up to the hard limit from within a user process. The hard limit can be set at the server level or at an individual external application level. The server-level limit will be used if it is not set at an individual application level. The operating system's default value will be used if the value is absent at both levels or set to 0.

          Syntax

          Integer number

      -
      +
      diff --git a/dist/docs/External_PL.html b/dist/docs/External_PL.html index bb0540f4a..5085cfd42 100644 --- a/dist/docs/External_PL.html +++ b/dist/docs/External_PL.html @@ -14,8 +14,10 @@
      openlitespeed logo
      -

      OpenLiteSpeed Web Server Users' Manual

      -
      Version 1.6  — Rev. 2
      +

      + OpenLiteSpeed Web Server Users' Manual +

      +

      Version 1.7  — Rev. 17

      Priority⇑

      Description

      Specifies priority of the external application process. Value ranges from -20 to 20. A lower number means a higher priority. An external application process cannot have a higher priority than the web server. If this priority is set to a lower number than the server's, the server's priority will be used for this value.

      Syntax

      int

      See Also

      Server Priority

      -
      +
      diff --git a/dist/docs/External_Servlet.html b/dist/docs/External_Servlet.html index de0bdd568..3ce5e608d 100644 --- a/dist/docs/External_Servlet.html +++ b/dist/docs/External_Servlet.html @@ -14,8 +14,10 @@
      openlitespeed logo
      -

      OpenLiteSpeed Web Server Users' Manual

      -
      Version 1.6  — Rev. 2
      +

      + OpenLiteSpeed Web Server Users' Manual +

      +

      Version 1.7  — Rev. 17

        @@ -60,7 +62,9 @@
        Version 1.6  — Rev. 2
      • Context
        • @@ -98,7 +108,7 @@

        Servlet Engine

        Table of Contents

        <

        Retry Timeout (secs)⇑

        Description

        Specifies the period of time that the server waits before retrying an external application that had a prior communication problem.

        Syntax

        Integer number

        Response Buffering⇑

        Description

        Specifies whether to buffer responses received from external applications. If a "nph-" (Non-Parsed-Header) script is detected, buffering is turned off for responses with full HTTP headers.

        Syntax

        Select from drop down list

        -
        +
        diff --git a/dist/docs/External_WS.html b/dist/docs/External_WS.html index 8cb47994e..02b7da871 100644 --- a/dist/docs/External_WS.html +++ b/dist/docs/External_WS.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

        Response Buffering⇑

        Description

        Specifies whether to buffer responses received from external applications. If a "nph-" (Non-Parsed-Header) script is detected, buffering is turned off for responses with full HTTP headers.

        Syntax

        Select from drop down list

        -
        +
        diff --git a/dist/docs/FCGI_Context.html b/dist/docs/FCGI_Context.html index 410813ced..3578b283d 100644 --- a/dist/docs/FCGI_Context.html +++ b/dist/docs/FCGI_Context.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

        Enable GeoLocation Lookup⇑

        Description

        Specifies whether to enable/disable IP Geolocation lookup. Can be set at server, virtual host, or context level. IP Geolocation is disabled by default when using value "Not Set".

        Syntax

        Select from radio box

        See Also

        Use Client IP in Header, DB File Path,

        -
        +
        diff --git a/dist/docs/Java_Web_App_Context.html b/dist/docs/Java_Web_App_Context.html index 21e89bb99..afb9b9748 100644 --- a/dist/docs/Java_Web_App_Context.html +++ b/dist/docs/Java_Web_App_Context.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

        Enable GeoLocation Lookup⇑

        Description

        Specifies whether to enable/disable IP Geolocation lookup. Can be set at server, virtual host, or context level. IP Geolocation is disabled by default when using value "Not Set".

        Syntax

        Select from radio box

        See Also

        Use Client IP in Header, DB File Path,

        -
        +
        diff --git a/dist/docs/LB_Context.html b/dist/docs/LB_Context.html index 84aa63e77..9291f5845 100644 --- a/dist/docs/LB_Context.html +++ b/dist/docs/LB_Context.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

        Enable GeoLocation Lookup⇑

        Description

        Specifies whether to enable/disable IP Geolocation lookup. Can be set at server, virtual host, or context level. IP Geolocation is disabled by default when using value "Not Set".

        Syntax

        Select from radio box

        See Also

        Use Client IP in Header, DB File Path,

        -
        +
        diff --git a/dist/docs/LSAPI_Context.html b/dist/docs/LSAPI_Context.html index cff2a378c..094b3d3e1 100644 --- a/dist/docs/LSAPI_Context.html +++ b/dist/docs/LSAPI_Context.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

        Enable GeoLocation Lookup⇑

        Description

        Specifies whether to enable/disable IP Geolocation lookup. Can be set at server, virtual host, or context level. IP Geolocation is disabled by default when using value "Not Set".

        Syntax

        Select from radio box

        See Also

        Use Client IP in Header, DB File Path,

        -
        +
        diff --git a/dist/docs/Listeners_General_Help.html b/dist/docs/Listeners_General_Help.html index 463502621..91436b74f 100644 --- a/dist/docs/Listeners_General_Help.html +++ b/dist/docs/Listeners_General_Help.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

        Port⇑

        Description

        Specifies the TCP port of the listener. Only the super user ("root") can use ports lower than 1024. Port 80 is the default HTTP port. Port 443 is the default HTTPS port.

        Syntax

        Integer number

        Binding⇑

        Description

        Specifies which lshttpd child process the listener is assigned to. Different child processes can be used to handle requests to different listeners by manually associating a listener with a process. By default, a listener is assigned to all child processes.

        Syntax

        Select from checkbox

        +

        Enable REUSEPORT⇑

        Description

        Use SO_REUSEPORT socket option to distribute incoming traffic to multiple workers. This setting is only effective for multi-worker licenses. When enabled, all workers are automatically bound to this listener and "Binding" configuration is ignored.

        Default value: On

        Syntax

        Select from radio box

        Secure⇑

        Description

        Specifies whether this is a secure (SSL) listener. For secure listeners, additional SSL settings need to be set properly.

        Syntax

        Select from radio box

        Virtual Host Mappings⇑

        Description

        Specifies the relationship between the listener and virtual hosts. Listeners and virtual hosts are associated by domain names. An HTTP request will be routed to a virtual host with a matching domain name. One listener can map to multiple virtual hosts for different domain names. One virtual host can also be mapped from different listeners. One listener can allow one catchall virtual host with the domain name value "*". When there is no explicitly matched domain name in the listener's mapping, the listener will forward the request to that catchall virtual host.

        Tips

        Only add necessary mappings. If the listener is mapped to only one virtual host, then only set up a catchall mapping "*".

        Virtual Host⇑

        Description

        Specifies the name of a virtual host.

        Syntax

        Select from drop down list

        Domains⇑

        Description

        Specifies the mapping domain names. Domain names are case insensitive and the leading "www." will be removed. The wildcard characters "*" and "?" are allowed. "?" only represents one character. "*" represents any numbers of characters. Duplicated domain names are not allowed.

        Syntax

        Comma-separated list.

        Example

        www?.example.com
        "*.mydomain.com" will match all subdomains of mydomain.com.
        "*" by itself is the catchall domain and will match any unmatched domain names.

        Tips

        If a listener is dedicated to one virtual host, always use * for the domain name to avoid unnecessary checking. Domain names with wildcard characters (other than the catchall domain) should be avoided whenever possible.

        -
        +
        diff --git a/dist/docs/Listeners_SSL_Help.html b/dist/docs/Listeners_SSL_Help.html index d3af122e5..0f972ea42 100644 --- a/dist/docs/Listeners_SSL_Help.html +++ b/dist/docs/Listeners_SSL_Help.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

        Client Revocation File⇑

        Description

        Specifies the file containing PEM-encoded CA CRL files enumerating revoked client certificates. This can be used as an alternative or in addition to Client Revocation Path.

        Syntax

        Filename which can be an absolute path or a relative path to $SERVER_ROOT.

        -
        +
        diff --git a/dist/docs/Module_Context.html b/dist/docs/Module_Context.html index abd59534a..b69c19067 100644 --- a/dist/docs/Module_Context.html +++ b/dist/docs/Module_Context.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

        Enable GeoLocation Lookup⇑

        Description

        Specifies whether to enable/disable IP Geolocation lookup. Can be set at server, virtual host, or context level. IP Geolocation is disabled by default when using value "Not Set".

        Syntax

        Select from radio box

        See Also

        Use Client IP in Header, DB File Path,

        -
        +
        diff --git a/dist/docs/Module_Help.html b/dist/docs/Module_Help.html index 3b3d4b1f2..94b77233f 100644 --- a/dist/docs/Module_Help.html +++ b/dist/docs/Module_Help.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

          @@ -60,7 +62,9 @@
          Version 1.6  — Rev. 2
        • Context
          • @@ -104,7 +114,7 @@

          Table of Contents

          URI | Module Parameters

          Server Modules⇑

          Description

          The Server module configuration globally defines the module configuration data. Once defined, the Listeners and Virtual Hosts have access to the modules and module configurations.

          All modules that are to be processed must be registered in the Server configuration. The Server configuration also defines the default values for module parameter data. These values can be inherited or overridden by the Listener and Virtual Host configuration data.

          Module priority is only defined at server level and is inherited by the Listener and Virtual Host configurations.

          -

          Module⇑

          Description

          Name of the module. The module name will be the same as the module filename. The module file must be located under $SERVER_ROOT/modules/modulename.so in order to be loaded by the server application. The server will load the registered modules at start up. This requires that the server is restarted after new modules are registered.

          Syntax

          the library name of .so.

          +

          Module⇑

          Description

          The name of an external or internal module to be loaded at server startup.

          External
          The value used for external modules must match the name of the module's ".so" file under $SERVER_ROOT/modules/modulename.so in order to be loaded by the server application. This requires that the server is restarted after a new module is registered.

          Internal
          The value used for internal modules must match the module name used when the module was built. For example, this must be set to "cache" for the internal cache module included with the server.

          Syntax

          string

          Is Internal⇑

          Description

          Specify whether the module is an internal module, which is statically linked, instead of being an external .so library.

          Syntax

          Select from radio box

          Module Parameters⇑

          Description

          Set module parameters. The module parameters are defined by the module developer.

          Set the value in the Server configuration to globally assign the default value. The user can override this setting at the Listener, Virtual Host or Context levels. If the 'Not Set' radio button is selected, it will be inherited from the upper level.

          Syntax

          Specified by the module interface.

          Enable Module⇑

          Description

          Enables module hooks globally. This setting can be overridden at the Listener and Virtual Host levels.

          Default value: Yes

          Syntax

          Select from radio box

          @@ -138,7 +148,7 @@

          Table of Contents

          Virtual Host Module Context⇑

          Description

          It's a centralized place to customize module settings for virtual host contexts. Settings for a context URI will override the virtual host or the server level settings.

        URI⇑

        Description

        Specifies the URI for this context.

        Syntax

        The URI can be a plain URI (starting with "/") or a Perl compatible regular expression URI (starting with "exp:"). If a plain URI ends with a "/", then this context will include all sub-URIs under this URI. If the context maps to a directory on the file system, a trailing "/" must be added.

        See Also

        Location

        -
        +
        diff --git a/dist/docs/Proxy_Context.html b/dist/docs/Proxy_Context.html index ed7bbb2a4..0bd11f666 100644 --- a/dist/docs/Proxy_Context.html +++ b/dist/docs/Proxy_Context.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

        Enable GeoLocation Lookup⇑

        Description

        Specifies whether to enable/disable IP Geolocation lookup. Can be set at server, virtual host, or context level. IP Geolocation is disabled by default when using value "Not Set".

        Syntax

        Select from radio box

        See Also

        Use Client IP in Header, DB File Path,

        -
        +
        diff --git a/dist/docs/Redirect_Context.html b/dist/docs/Redirect_Context.html index bd39bc464..011a97d64 100644 --- a/dist/docs/Redirect_Context.html +++ b/dist/docs/Redirect_Context.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

        Authorizer⇑

        Description

        Specifies an external application that can be used to generate authorized/unauthorized decisions. Currently, only the FastCGI Authorizer is available. For more details about the FastCGI Authorizer role, please visit http://www.fastcgi.com.

        Syntax

        Select from drop down list

        -
        +
        diff --git a/dist/docs/Rewrite_Help.html b/dist/docs/Rewrite_Help.html index c0a163102..c0afe13cb 100644 --- a/dist/docs/Rewrite_Help.html +++ b/dist/docs/Rewrite_Help.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

        Name⇑

        Description

        Specifies a unique name for the rewrite map at the virtual host level. This name will be used by a mapping-reference in rewrite rules. When referencing this name, one of the following syntaxes should be used:

        $\{MapName:LookupKey\}
        $\{MapName:LookupKey|DefaultValue\}

        The implementation of LiteSpeed's rewrite engine follows the specifications of Apache's rewrite engine. For more details about rewrite maps, please refer to Apache's mod_rewrite document.

        Syntax

        string

        Location⇑

        Description

        Specifies the location of the rewrite map using the syntax MapType:MapSource.
        LiteSpeed's rewrite engine supports three types of rewrite maps:

        • Standard Plain Text
          MapType: txt;
          MapSource: file path to a valid plain ASCII file.
          Each line of this file should contain two elements separated by blank spaces. The first element is the key and the second element is the value. Comments can be added with a leading "#" sign.
        • Randomized Plain Text
          MapType: rnd;
          MapSource: file path of a valid plain ASCII file.
          File format is similar to the Standard Plain Text file, except that the second element can contain multiple choices separated by a "|" sign and chosen randomly by the rewrite engine.
        • Internal Function
          MapType: int;
          MapSource: Internal string function
          4 functions are available:
          • toupper: converts lookup key to upper cases.
          • tolower: converts lookup key to lower cases.
          • escape: perform URL encoding on lookup key.
          • unescape: perform URL decoding on lookup key.
          • The following map types available in Apache have not been implemented in LiteSpeed:
          Hash File and External Rewriting Program.
        The implementation of LiteSpeed's rewrite engine follows the specifications of Apache's rewrite engine. For more details about rewrite map, please refer to Apache's mod_rewrite document.

        Syntax

        String

        -

        Rewrite Rules⇑

        Description

        Specifies a list of rewrite rules at the virtual host level.

        Do NOT add any document root level rewrite rules here. If you have any document root level rewrite rules from .htaccess, you should instead create a static context with uri "/" and add the rewrite rules there.

        A rewrite rule is comprised of one RewriteRule directive and optionally preceded by multiple RewriteCond directives.

        • Each directive should take only one line.
        • RewriteCond and RewriteRule follow Apache's rewrite directive syntax. Just copy and paste rewrite directives from your Apache configuration files.
        • There are minor differences between LiteSpeed and Apache mod_rewrite implementation:
          • %\{LA-U:variable\} and %\{LA-F:variable\} are ignored by the LiteSpeed rewrite engine
          • two new server variables are added in the LiteSpeed rewrite engine: %\{CURRENT_URI\} represents the current URI being processed by the rewrite engine and %\{SCRIPT_NAME\} has the same meaning as the corresponding CGI environment variable.
        The implementation of LiteSpeed's rewrite engine follows the Apache's rewrite engine specifications. For more details about rewrite rules, please refer to Apache's mod_rewrite document and Apache's URL rewriting guide.

        Syntax

        string

        +

        Rewrite Rules⇑

        Description

        Specifies a list of rewrite rules at the virtual host level.

        Do NOT add any document root level rewrite rules here. If you have any document root level rewrite rules from .htaccess, you should instead create a static context with uri "/" and add the rewrite rules there.

        A rewrite rule is comprised of one RewriteRule directive and optionally preceded by multiple RewriteCond directives.

        • Each directive should take only one line.
        • RewriteCond and RewriteRule follow Apache's rewrite directive syntax. Just copy and paste rewrite directives from your Apache configuration files.
        • There are minor differences between LiteSpeed and Apache mod_rewrite implementation:
          • %\{LA-U:variable\} and %\{LA-F:variable\} are ignored by the LiteSpeed rewrite engine
          • Two new server variables are added in the LiteSpeed rewrite engine: %\{CURRENT_URI\} represents the current URI being processed by the rewrite engine and %\{SCRIPT_NAME\} has the same meaning as the corresponding CGI environment variable.
          • The LiteSpeed rewrite engine will stop processing rewrite rules after encountering an [L] flag to avoid looping while Apache mod_rewrite will stop processing rewrite rules for the current iteration only. This behavior is similar to that of the [END] flag in Apache mod_rewrite.

        The implementation of LiteSpeed's rewrite engine follows Apache's rewrite engine specifications. For more details about rewrite rules, please refer to Apache's mod_rewrite document and Apache's URL rewriting guide .

        Syntax

        string

        -
        +
        diff --git a/dist/docs/ScriptHandler_Help.html b/dist/docs/ScriptHandler_Help.html index f13370198..8d3c18dd5 100644 --- a/dist/docs/ScriptHandler_Help.html +++ b/dist/docs/ScriptHandler_Help.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

        Handler Name⇑

        Description

        Specifies the name of the external application that processes the script files when the handler type is FastCGI, Web Server, LSAPI, Load Balancer, or Servlet Engine.

        Syntax

        Select from drop down list

        -
        +
        diff --git a/dist/docs/ServGeneral_Help.html b/dist/docs/ServGeneral_Help.html index 264afc9f9..59ddc534a 100644 --- a/dist/docs/ServGeneral_Help.html +++ b/dist/docs/ServGeneral_Help.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

        Server Signature⇑

        Description

        Specifies whether to show the server signature and version number in the response header's "Server" value. There are three options: when set to Hide Version, only LiteSpeed is shown. When set to Show Version, LiteSpeed and the version number are shown. When set to Hide Full Header, the entire Server header will not be shown in the response header.

        Syntax

        Select from drop down list

        Tips

        Set to Hide Version if you do not wish to expose the server version number.

        Enable GeoLocation Lookup⇑

        Description

        Specifies whether to enable/disable IP Geolocation lookup. Can be set at server, virtual host, or context level. IP Geolocation is disabled by default when using value "Not Set".

        Syntax

        Select from radio box

        See Also

        Use Client IP in Header, DB File Path,

        -

        Use Client IP in Header⇑

        Description

        Specifies whether to use the IP address listed in the "X-Forwarded-For" HTTP request header for all IP address-related features, including connection/bandwidth throttling, access control, and IP geolocation.

        This feature is useful if your web server is behind a load balancer or a proxy server. If you select "Trusted IP Only", then X-Forwarded-For IP will be used only when the request is coming from trusted IPs defined in the server-level Allowed List.

        "Keep Header from Trusted IP" is the same as "Trusted IP Only", but the X-Forwarded-For header used for the backend will not be modified to include the connecting peer address.

        Syntax

        Select from drop down list

        +

        Use Client IP in Header⇑

        Description

        Specifies whether to use the first most valid IP IP address listed in the "X-Forwarded-For" HTTP request header for all IP address-related features, including connection/bandwidth throttling, access control, and IP geolocation.

        This feature is useful if your web server is behind a load balancer or a proxy server. If you select Trusted IP Only, then X-Forwarded-For IP will be used only when the request is coming from trusted IPs defined in the server-level Allowed List.

        Keep Header from Trusted IP is the same as Trusted IP Only, but the X-Forwarded-For header used for the backend will not be modified to include the connecting peer address.

        Use Last IP (for AWS ELB) will use the last IP address in the "X-Forwarded-For" list. Select this option if you are using AWS Elastic Load Balancer or expect the real IP to appended to the end of the "X-Forwarded-For" list.

        Syntax

        Select from drop down list

        Administrator Email⇑

        Description

        Specifies the server administrator's email address(es). If specified, administrators will be notified by email of important events (for example, when the LiteSpeed service is restarted automatically due to crash detection or when license is expiring).

        Syntax

        Comma delimited list of email address.

        Tips

        Email alert feature will only work if the server has an active MX server such as postfix, exim, or sendmail.

        Index Files⇑

        Description

        Specifies names of index files that will be searched sequentially when a URL is mapped to a directory. You can customize it at the server, virtual host, and context level.

        Syntax

        Comma-delimited list of index filenames.

        Tips

        Only set index files that you need.

        Auto Index⇑

        Description

        Specifies whether to generate a directory index on the fly when index files listed in Index Files are not available in a directory. This option is customizable at the virtual host and context level, and is inherited along the directory tree until it is explicitly overridden. You can customize the generated index page. Please check online wiki How-tos.

        Syntax

        Select from radio box

        Tips

        It is recommended to turn off Auto Index wherever possible to prevent revealing confidential data.

        See Also

        Index Files, Auto Index URI

        @@ -145,7 +155,7 @@

        Table of Contents

        IP2Location DB File Path⇑

        Description

        The location of a valid database file.

        Syntax

        Filename which can be an absolute path or a relative path to $SERVER_ROOT.

      DB Cache Type⇑

      Description

      The caching method used. The default value is Memory.

      Syntax

      Select from drop down list

      -
      +
      diff --git a/dist/docs/ServLog_Help.html b/dist/docs/ServLog_Help.html index cf8c23f65..45e81193d 100644 --- a/dist/docs/ServLog_Help.html +++ b/dist/docs/ServLog_Help.html @@ -14,8 +14,10 @@
      openlitespeed logo
      -

      OpenLiteSpeed Web Server Users' Manual

      -
      Version 1.6  — Rev. 2
      +

      + OpenLiteSpeed Web Server Users' Manual +

      +

      Version 1.7  — Rev. 17

        @@ -60,7 +62,9 @@
        Version 1.6  — Rev. 2
      • Context
        • @@ -87,23 +97,23 @@
        Version 1.6  — Rev. 2
        Configuration

        Server Log

        Table of Contents

        Server Log

        -File Name | Log Level | Debug Level | Rolling Size (bytes) | Enable stderr Log

        +File Name | Log Level | Debug Level | Rolling Size (bytes) | Keep Days | Enable stderr Log

        Access Log

        -File Name | Piped Logger | Log Format | Log Headers | Rolling Size (bytes) | Keep Days | Compress Archive

        +File Name | Piped Logger | Log Format | Log Headers | Rolling Size (bytes) | Keep Days | Compress Archive

        File Name⇑

        Description

        Specifies the path for the log file.

        Syntax

        Filename which can be an absolute path or a relative path to $SERVER_ROOT.

        Tips

        Place the log file on a separate disk.

        Log Level⇑

        Description

        Specifies the level of logging to include in your log file. Available levels (from high to low) are: ERROR, WARNING, NOTICE, INFO and DEBUG. Only messages with level higher or equal to the current setting will be logged.

        Syntax

        Select from drop down list

        Tips

        Using DEBUG log level does not have any performance impact, unless Debug Level is set to a level other than NONE. It's recommended to set Log Level to DEBUG and Debug Level to NONE. These settings mean that you will not fill up your hard disk with debug logging, but you will be able to use the Toggle Debug Logging action to control debug output. This action can turn debug logging on and off on the fly, and is useful for debugging busy production servers.

        See Also

        Debug Level

        Debug Level⇑

        Description

        Specifies the level of debug logging. Log Level must be set to DEBUG to use this feature. Debug logging is disabled when "Debug Level" is set to NONE even if Log Level is set to DEBUG. Toggle Debug Logging can be used to control debug level on a live server without restarting.

        Syntax

        Select from drop down list

        Tips

        Important! Always set this to NONE if you do not need detailed debug logging. Active debug logging will severely degrade service performance and potentially saturate disk space in a very short time. Debug logging includes detailed information for each request and response.

        It's recommended to set Log Level to DEBUG and Debug Level to NONE. These settings mean that you will not fill up your hard disk with debug logging, but you will be able to use the Toggle Debug Logging action to control debug output. This action can turn debug logging on and off on the fly, and is useful for debugging busy production servers.

        See Also

        Log Level, Toggle Debug Logging

        Rolling Size (bytes)⇑

        Description

        Specifies when the current log file needs to be rolled over, also known as log rotation. When the file size is over the rollover limit, the active log file will be renamed to log_name.mm_dd_yyyy(.sequence) in the same directory and a new active log file will be created. The actual size of the rotated log file once it is created will sometimes be a little bigger than this size limit. Set to 0 to disable log rotation.

        Syntax

        Integer number

        Tips

        Append "K", "M", "G" to the number for kilo-, mega- and giga- bytes.

        -

        Enable stderr Log⇑

        Description

        Specifies whether to write to log when receiving stderr output from any process started by the server. If enabled, stderr messages will be logged in the same directory as the server log with the fixed name "stderr.log". If disabled, all stderr output will be discarded.

        Syntax

        Select from radio box

        Tips

        Turn it on if you need to debug configured external applications: i.e. PHP, Ruby, Java, Python, Perl.

        +

        Keep Days⇑

        Description

        Specifies how many days the access log file will be kept on disk. Only rotated log files older than the specified number of days will be deleted. The current log file will not be touched regardless how many days worth of data it contains. If you do not want to auto-delete stale and very old log files, set this to 0.

        Syntax

        Integer number

        +

        Enable stderr Log⇑

        Description

        Specifies whether to write to log when receiving stderr output from processes started by the server.

        If enabled, stderr messages will be logged in the same directory as the server log with the fixed name "stderr.log". If disabled, all stderr output will be discarded.

        Functions like PHP's error_log() which do not write directly to stderr (file handle 2) are not affected by this setting and will write to the file set in PHP ini directive 'error_log' or the server's "error.log" file with tag '[STDERR]' if that directive is not set.

        Syntax

        Select from radio box

        Tips

        Turn it on if you need to debug configured external applications: i.e. PHP, Ruby, Java, Python, Perl.

        File Name⇑

        Description

        The access log filename.

        Syntax

        Filename which can be an absolute path or a relative path to $SERVER_ROOT.

        Tips

        Put access log file on a separate disk.

        Piped Logger⇑

        Description

        Specifies the external application that will receive the access log data sent by LiteSpeed through a pipe on its STDIN stream (file handle is 0). When this field is specified, the access log will be sent only to the logger application and not the access log file specified in previous entry.

        The logger application must be defined in External Apps section first. Server-level access logging can only use an external logger application defined at the server level. Virtual host-level access logging can only use a logger application defined at the virtual host level.

        The logger process is spawned in the same way as other external (CGI/FastCGI/LSAPI) processes. This means it will execute as the user ID specified in the virtual host's External App Set UID Mode settings and will never run on behalf of a privileged user.

        LiteSpeed web server performs simple load balancing among multiple logger applications if more than one instance of a logger application is configured. LiteSpeed server always attempts to keep the number of logger applications as low as possible. Only when one logger application fails to process access log entries in time will the server attempt to spawn another instance of the logger application.

        If a logger crashes, the web server will start another instance but the log data in the stream buffer will be lost. It is possible to lose log data if external loggers cannot keep up with the speed and volume of the log stream.

        Syntax

        Select from drop down list

        Log Format⇑

        Description

        Specifies the log format for the access log. When log format is set, it will override the Log Headers setting.

        Syntax

        String. The syntax of log format is compatible with Apache 2.0's custom log format.

        Example

        Common Log Format (CLF)
        "%h %l %u %t \"%r\" %>s %b"

        Common Log Format with Virtual Host
        "%v %h %l %u %t \"%r\" %>s %b"

        NCSA extended/combined log format
        "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"

        Log cookie value of Foobar
        "%{Foobar}C"

        See Also

        Log Headers

        Log Headers⇑

        Description

        Specifies whether to log HTTP request headers: Referer, UserAgent, and Host.

        Syntax

        Select from checkbox

        Tips

        Turn this off if you do not need these headers in the access log.

        See Also

        Log Format

        -

        Keep Days⇑

        Description

        Specifies how many days the access log file will be kept on disk. Only rotated log files older than the specified number of days will be deleted. The current log file will not be touched regardless how many days worth of data it contains. If you do not want to auto-delete stale and very old log files, set this to 0.

        Syntax

        Integer number

        Compress Archive⇑

        Description

        Specifies whether to compress rotated log files in order to save disk space.

        Syntax

        Select from radio box

        Tips

        Log files are highly compressible and this is recommended to reduce disk usage for old logs.

        -
        +
        diff --git a/dist/docs/ServSecurity_Help.html b/dist/docs/ServSecurity_Help.html index 4497753f6..a97f18bfc 100644 --- a/dist/docs/ServSecurity_Help.html +++ b/dist/docs/ServSecurity_Help.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

          @@ -60,7 +62,9 @@
          Version 1.6  — Rev. 2
        • Context
          • @@ -92,47 +102,49 @@

          Server Security

          Table of Contents

          Static Requests/Second | Dynamic Requests/Second | Outbound Bandwidth (bytes/sec) | Inbound Bandwidth (bytes/sec) | Connection Soft Limit | Connection Hard Limit | Block Bad Request | Grace Period (sec) | Banned Period (sec)

          CGI Settings

          CGI Daemon Socket | Max CGI Instances | Minimum UID | Minimum GID | Force GID | umask | CGI Priority | CPU Soft Limit (sec) | CPU Hard Limit | Memory Soft Limit (bytes) | Memory Hard Limit (bytes) | Process Soft Limit | Process Hard Limit | cgroups

          -
          reCaptcha Protection

          +

          reCAPTCHA Protection

          Enable reCAPTCHA | Site Key | Secret Key | reCAPTCHA Type | Max Tries | Allowed Robot Hits | Bot White List | Connection Limit | SSL Connection Limit

          +
          Bubblewrap Container

          +Bubblewrap Container | Bubblewrap Command

          Access Denied Directories

          Access Denied Directories

          Access Control

          Allowed List | Denied List

          -

          Description

          Specifies the server-level default setting of following symbolic links when serving static files.

          Choices are Yes, If Owner Match and No.

          Yes sets the server to always follow symbolic links. If Owner Match sets the server to follow a symbolic link only if the owner of the link and of the target are same. No means the server will never follow a symbolic link. This setting can be overridden in the virtual host configurations but cannot be overridden from an .htaccess file.

          Syntax

          Select from drop down list

          Tips

          For best security select No or If Owner Match. For best performance, select Yes.

          See Also

          Check Symbolic Link.

          -

          Description

          Specifies whether to check symbolic links against Access Denied Directories when Follow Symbolic Link is turned on. If enabled, the canonical real path of the resource referred by a URL will be checked against the configurable access denied directories. Access will be denied if it falls inside an access denied directory.

          Syntax

          Select from radio box

          Tips

          For best security, enable this option. For best performance, disable it.

          See Also

          Follow Symbolic Link, Access Denied Directories

          -

          Force Strict Ownership Checking⇑

          Description

          Specifies whether to enforce strict file ownership checking. If it is enabled, the web server will check if the owner of the file being served is the same as the owner of the virtual host. If it is different, a 403 Access Denied Error will be returned. This is turned off by default.

          Syntax

          Select from radio box

          Tips

          For shared hosting, enable this check for better security.

          +

          Description

          Specifies the server-level default setting of following symbolic links when serving static files.

          Choices are Yes, If Owner Match and No.

          Yes sets the server to always follow symbolic links. If Owner Match sets the server to follow a symbolic link only if the owner of the link and of the target are same. No means the server will never follow a symbolic link. This setting can be overridden in the virtual host configurations but cannot be overridden from an .htaccess file.

          Syntax

          Select from drop down list

          Tips

          For best security select No or If Owner Match. For best performance, select Yes.

          See Also

          Check Symbolic Link.

          +

          Description

          Specifies whether to check symbolic links against Access Denied Directories when Follow Symbolic Link is turned on. If enabled, the canonical real path of the resource referred by a URL will be checked against the configurable access denied directories. Access will be denied if it falls inside an access denied directory.

          Syntax

          Select from radio box

          Tips

          For best security, enable this option. For best performance, disable it.

          See Also

          Follow Symbolic Link, Access Denied Directories

          +

          Force Strict Ownership Checking⇑

          Description

          Specifies whether to enforce strict file ownership checking. If it is enabled, the web server will check if the owner of the file being served is the same as the owner of the virtual host. If it is different, a 403 Access Denied Error will be returned. This is turned off by default.

          Syntax

          Select from radio box

          Tips

          For shared hosting, enable this check for better security.

          Required Permission Mask⇑

          Description

          Specifies the required permission mask for static files that the server will serve. For example, if only files that are readable by everyone can be served, set the value to 0004. See man 2 stat for all values.

          Syntax

          octal numbers

          See Also

          Restricted Permission Mask.

          Restricted Permission Mask⇑

          Description

          Specifies the restricted permission mask for static files that the server will not serve. For example, to prohibit serving files that are executable, set the mask to 0111.

          See man 2 stat for all values.

          Syntax

          octal numbers

          See Also

          Required Permission Mask.

          Script Restricted Permission Mask⇑

          Description

          Specifies the restricted permission mask for script files that the server will not serve. For example, to prohibit serving PHP scripts that are group and world writable, set the mask to 022. Default value is 000.

          See man 2 stat for all values.

          Syntax

          octal numbers

          See Also

          Script Directory Restricted Permission Mask.

          -

          Script Directory Restricted Permission Mask⇑

          Description

          Specifies the restricted permission mask of parent directories of script files that the server will not serve. For example, to prohibit serving PHP scripts in a directory that is group and world writable, set the mask to 022. Default value is 000. This option can be used to prevent serving scripts under a directory of uploaded files.

          See man 2 stat for all values.

          Syntax

          octal numbers

          See Also

          Script Restricted Permission Mask.

          -

          Per Client Throttling⇑

          Description

          These are connection control settings are based on client IP. These settings help to mitigate DoS (Denial of Service) and DDoS (Distributed Denial of Service) attacks.

          -

          Static Requests/Second⇑

          Description

          Specifies the maximum number of requests to static content coming from a single IP address that can be processed in a single second regardless of the number of connections established.

          When this limit is reached, all future requests are tar-pitted until the next second. Request limits for dynamically generated content are independent of this limit. Per-client request limits can be set at server- or virtual host-level. Virtual host-level settings override server-level settings.

          Syntax

          Integer number

          Tips

          Trusted IPs or sub-networks are not affected.

          See Also

          Dynamic Requests/Second

          -

          Dynamic Requests/Second⇑

          Description

          Specifies the maximum number of requests to dynamically generated content coming from a single IP address that can be processed in each second regardless of the number of connections established. When this limit is reached, all future requests to dynamic content are tar-pitted until the next second.

          The request limit for static content is independent of this limit. This per client request limit can be set at server or virtual host level. Virtual host-level settings override server-level settings.

          Syntax

          Integer number

          Tips

          Trusted IPs or sub-networks are not restrained by this limit.

          See Also

          Static Requests/Second

          -

          Outbound Bandwidth (bytes/sec)⇑

          Description

          The maximum allowed outgoing throughput to a single IP address, regardless of the number of connections established. The real bandwidth may end up being slightly higher than this setting for efficiency reasons. Bandwidth is allocated in 4KB units. Set to 0 to disable throttling. Per-client bandwidth limits (bytes/sec) can be set at the server or virtual host level where virtual host level settings override server level settings.

          Syntax

          Integer number

          Tips

          Set the bandwidth in 8KB units for better performance.

          Trusted IPs or sub-networks are not affected.

          See Also

          Inbound Bandwidth (bytes/sec)

          -

          Inbound Bandwidth (bytes/sec)⇑

          Description

          The maximum allowed incoming throughput from a single IP address, regardless of the number of connections established. The real bandwidth may end up being slightly higher than this setting for efficiency reasons. Bandwidth is allocated in 1KB units. Set to 0 to disable throttling. Per-client bandwidth limits (bytes/sec) can be set at the server or virtual host level where virtual host level settings override server level settings.

          Syntax

          Integer number

          Tips

          Trusted IPs or sub-networks are not affected.

          See Also

          Outbound Bandwidth (bytes/sec)

          -

          Connection Soft Limit⇑

          Description

          Specifies the soft limit of concurrent connections allowed from one IP. This soft limit can be exceeded temporarily during Grace Period (sec) as long as the number is below the Connection Hard Limit, but Keep-Alive connections will be closed as soon as possible until the number of connections is lower than the limit. If number of connections is still over the limit after the Grace Period (sec), that IP will be blocked for the Banned Period (sec).

          For example, if a page contains many small graphs, the browser may try to set up many connections at same time, especially for HTTP/1.0 clients. You would want to allow those connections for a short period.

          HTTP/1.1 clients may also set up multiple connections to speed up downloading and SSL requires separate connections from non-SSL connections. Make sure the limit is set properly, as not to adversely affect normal service. The recommended limit is between 5 and 10.

          Syntax

          Integer number

          Tips

          A lower number will enable serving more distinct clients.
          Trusted IPs or sub-networks are not affected.
          Set to a high value when you are performing benchmark tests with a large number of concurrent client machines.

          -

          Connection Hard Limit⇑

          Description

          Specifies the maximum number of allowed concurrent connections from a single IP address. This limit is always enforced and a client will never be able to exceed this limit. HTTP/1.0 clients usually try to set up as many connections as they need to download embedded content at the same time. This limit should be set high enough so that HTTP/1.0 clients can still access the site. Use Connection Soft Limit to set the desired connection limit.

          The recommended limit is between 20 and 50 depending on the content of your web page and your traffic load.

          Syntax

          Integer number

          Tips

          A lower number will enable serving more distinct clients.
          Trusted IPs or sub-networks are not affected.
          Set to a high value when you are performing benchmark tests with a large number of concurrent client machines.

          -

          Block Bad Request⇑

          Description

          Block IPs that keep sending badly-formated HTTP requests for the Banned Period (sec). Default is Yes. This helps to block botnet attacks that repeatedly sending junk requests.

          Syntax

          Select from radio box

          -

          Grace Period (sec)⇑

          Description

          Specifies how long new connections can be accepted after the number of connections established from one IP is over the Connection Soft Limit. Within this period, new connections will be accepted if the total connections is still below the Connection Hard Limit. After this period has elapsed, if the number of connections still higher than the Connection Soft Limit, then the offending IP will be blocked for the Banned Period (sec).

          Syntax

          Integer number

          Tips

          Set to a proper number big enough for downloading a complete page but low enough to prevent deliberate attacks.

          -

          Banned Period (sec)⇑

          Description

          Specifies how long new connections will be rejected from an IP if, after the Grace Period (sec) has elapsed, the number of connections is still more than the Connection Soft Limit. If IPs are getting banned repeatedly, we suggest that you increase your banned period to stiffen the penalty for abuse.

          Syntax

          Integer number

          +

          Script Directory Restricted Permission Mask⇑

          Description

          Specifies the restricted permission mask of parent directories of script files that the server will not serve. For example, to prohibit serving PHP scripts in a directory that is group and world writable, set the mask to 022. Default value is 000. This option can be used to prevent serving scripts under a directory of uploaded files.

          See man 2 stat for all values.

          Syntax

          octal numbers

          See Also

          Script Restricted Permission Mask.

          +

          Per Client Throttling⇑

          Description

          These are connection control settings are based on client IP. These settings help to mitigate DoS (Denial of Service) and DDoS (Distributed Denial of Service) attacks.

          +

          Static Requests/Second⇑

          Description

          Specifies the maximum number of requests to static content coming from a single IP address that can be processed in a single second regardless of the number of connections established.

          When this limit is reached, all future requests are tar-pitted until the next second. Request limits for dynamically generated content are independent of this limit. Per-client request limits can be set at server- or virtual host-level. Virtual host-level settings override server-level settings.

          Syntax

          Integer number

          Tips

          Trusted IPs or sub-networks are not affected.

          See Also

          Dynamic Requests/Second

          +

          Dynamic Requests/Second⇑

          Description

          Specifies the maximum number of requests to dynamically generated content coming from a single IP address that can be processed in each second regardless of the number of connections established. When this limit is reached, all future requests to dynamic content are tar-pitted until the next second.

          The request limit for static content is independent of this limit. This per client request limit can be set at server or virtual host level. Virtual host-level settings override server-level settings.

          Syntax

          Integer number

          Tips

          Trusted IPs or sub-networks are not restrained by this limit.

          See Also

          Static Requests/Second

          +

          Outbound Bandwidth (bytes/sec)⇑

          Description

          The maximum allowed outgoing throughput to a single IP address, regardless of the number of connections established. The real bandwidth may end up being slightly higher than this setting for efficiency reasons. Bandwidth is allocated in 4KB units. Set to 0 to disable throttling. Per-client bandwidth limits (bytes/sec) can be set at the server or virtual host level where virtual host level settings override server level settings.

          Syntax

          Integer number

          Tips

          Set the bandwidth in 8KB units for better performance.

          Trusted IPs or sub-networks are not affected.

          See Also

          Inbound Bandwidth (bytes/sec)

          +

          Inbound Bandwidth (bytes/sec)⇑

          Description

          The maximum allowed incoming throughput from a single IP address, regardless of the number of connections established. The real bandwidth may end up being slightly higher than this setting for efficiency reasons. Bandwidth is allocated in 1KB units. Set to 0 to disable throttling. Per-client bandwidth limits (bytes/sec) can be set at the server or virtual host level where virtual host level settings override server level settings.

          Syntax

          Integer number

          Tips

          Trusted IPs or sub-networks are not affected.

          See Also

          Outbound Bandwidth (bytes/sec)

          +

          Connection Soft Limit⇑

          Description

          Specifies the soft limit of concurrent connections allowed from one IP. This soft limit can be exceeded temporarily during Grace Period (sec) as long as the number is below the Connection Hard Limit, but Keep-Alive connections will be closed as soon as possible until the number of connections is lower than the limit. If number of connections is still over the limit after the Grace Period (sec), that IP will be blocked for the Banned Period (sec).

          For example, if a page contains many small graphs, the browser may try to set up many connections at same time, especially for HTTP/1.0 clients. You would want to allow those connections for a short period.

          HTTP/1.1 clients may also set up multiple connections to speed up downloading and SSL requires separate connections from non-SSL connections. Make sure the limit is set properly, as not to adversely affect normal service. The recommended limit is between 5 and 10.

          Syntax

          Integer number

          Tips

          A lower number will enable serving more distinct clients.
          Trusted IPs or sub-networks are not affected.
          Set to a high value when you are performing benchmark tests with a large number of concurrent client machines.

          +

          Connection Hard Limit⇑

          Description

          Specifies the maximum number of allowed concurrent connections from a single IP address. This limit is always enforced and a client will never be able to exceed this limit. HTTP/1.0 clients usually try to set up as many connections as they need to download embedded content at the same time. This limit should be set high enough so that HTTP/1.0 clients can still access the site. Use Connection Soft Limit to set the desired connection limit.

          The recommended limit is between 20 and 50 depending on the content of your web page and your traffic load.

          Syntax

          Integer number

          Tips

          A lower number will enable serving more distinct clients.
          Trusted IPs or sub-networks are not affected.
          Set to a high value when you are performing benchmark tests with a large number of concurrent client machines.

          +

          Block Bad Request⇑

          Description

          Block IPs that keep sending badly-formated HTTP requests for the Banned Period (sec). Default is Yes. This helps to block botnet attacks that repeatedly sending junk requests.

          Syntax

          Select from radio box

          +

          Grace Period (sec)⇑

          Description

          Specifies how long new connections can be accepted after the number of connections established from one IP is over the Connection Soft Limit. Within this period, new connections will be accepted if the total connections is still below the Connection Hard Limit. After this period has elapsed, if the number of connections still higher than the Connection Soft Limit, then the offending IP will be blocked for the Banned Period (sec).

          Syntax

          Integer number

          Tips

          Set to a proper number big enough for downloading a complete page but low enough to prevent deliberate attacks.

          +

          Banned Period (sec)⇑

          Description

          Specifies how long new connections will be rejected from an IP if, after the Grace Period (sec) has elapsed, the number of connections is still more than the Connection Soft Limit. If IPs are getting banned repeatedly, we suggest that you increase your banned period to stiffen the penalty for abuse.

          Syntax

          Integer number

          CGI Settings⇑

          Description

          The following settings control CGI processes. Memory and process limits also serve as the default for other external applications if limits have not been set explicitly for those applications.

          -

          CGI Daemon Socket⇑

          Description

          A unique socket address used to communicate with the CGI daemon. LiteSpeed server uses a standalone CGI daemon to spawn CGI scripts for best performance and security. Default socket is "uds://$SERVER_ROOT/admin/conf/.cgid.sock". If you need to put in another location, specify a Unix domain socket here.

          Syntax

          UDS://path

          Example

          UDS://tmp/lshttpd/cgid.sock
          -

          Max CGI Instances⇑

          Description

          Specifies the maximum number of concurrent CGI processes the server can start. For each request to a CGI script, the server needs to start a standalone CGI process. On a Unix system, the number of concurrent processes is limited. Excessive concurrent processes will degrade the performance of the whole system and are one way to perform a DoS attack. LiteSpeed server pipelines requests to CGI scripts and limits concurrent CGI processes to ensure the optimal performance and reliability. The hard limit is 2000.

          Syntax

          Integer number

          Tips

          A higher limit does not necessarily translate to faster performance. In most cases, a lower limit gives better performance and security. A higher limit will only help when I/O latency is excessive during CGI processing.

          +

          CGI Daemon Socket⇑

          Description

          A unique socket address used to communicate with the CGI daemon. LiteSpeed server uses a standalone CGI daemon to spawn CGI scripts for best performance and security. Default socket is "uds://$SERVER_ROOT/admin/conf/.cgid.sock". If you need to put in another location, specify a Unix domain socket here.

          Syntax

          UDS://path

          Example

          UDS://tmp/lshttpd/cgid.sock
          +

          Max CGI Instances⇑

          Description

          Specifies the maximum number of concurrent CGI processes the server can start. For each request to a CGI script, the server needs to start a standalone CGI process. On a Unix system, the number of concurrent processes is limited. Excessive concurrent processes will degrade the performance of the whole system and are one way to perform a DoS attack. LiteSpeed server pipelines requests to CGI scripts and limits concurrent CGI processes to ensure the optimal performance and reliability. The hard limit is 2000.

          Syntax

          Integer number

          Tips

          A higher limit does not necessarily translate to faster performance. In most cases, a lower limit gives better performance and security. A higher limit will only help when I/O latency is excessive during CGI processing.

          Minimum UID⇑

          Description

          Specifies the minimum user ID allowed to run external applications when running as a specified user. Execution of an external script with a user ID lower than the value specified here will be denied.

          Syntax

          Integer number

          Tips

          Set it high enough to exclude all system/privileged users.

          Minimum GID⇑

          Description

          Specifies the minimum group ID allowed to run external applications when running as a specified group. Execution of an external script with a group ID lower than the value specified here will be denied.

          Syntax

          Integer number

          Tips

          Set it high enough to exclude all groups used by system users.

          -

          Force GID⇑

          Description

          Specifies a group ID to be used for all external applications started in suEXEC mode. When set to non-zero value, all suEXEC external applications (CGI/FastCGI/LSAPI) will use this group ID. This can be used to prevent an external application from accessing files owned by other users.

          For example, in a shared hosting environment, LiteSpeed runs as user "www-data", group "www-data". Each docroot is owned by a user account, with a group of "www-data" and permission mode 0750. If Force GID is set to "nogroup" (or any group other than 'www-data'), all suEXEC external applications will run as a particular user but in the group "nogroup". These external application processes will still be able to access files owned by that particular user (because of their user ID), but will not have group permission to access anyone else's files. The server, on the other hand, still can serve files under any user's docroot directory (because of its group ID).

          Syntax

          Integer number

          Tips

          Set it high enough to exclude all groups used by system users.

          -

          umask⇑

          Description

          Sets default umask for CGI processes. See man 2 umask for details. This also serves as the default value for external applications umask.

          Syntax

          value valid range [000]-[777].

          See Also

          ExtApp umask

          +

          Force GID⇑

          Description

          Specifies a group ID to be used for all external applications started in suEXEC mode. When set to non-zero value, all suEXEC external applications (CGI/FastCGI/LSAPI) will use this group ID. This can be used to prevent an external application from accessing files owned by other users.

          For example, in a shared hosting environment, LiteSpeed runs as user "www-data", group "www-data". Each docroot is owned by a user account, with a group of "www-data" and permission mode 0750. If Force GID is set to "nogroup" (or any group other than 'www-data'), all suEXEC external applications will run as a particular user but in the group "nogroup". These external application processes will still be able to access files owned by that particular user (because of their user ID), but will not have group permission to access anyone else's files. The server, on the other hand, still can serve files under any user's docroot directory (because of its group ID).

          Syntax

          Integer number

          Tips

          Set it high enough to exclude all groups used by system users.

          +

          umask⇑

          Description

          Sets default umask for CGI processes. See man 2 umask for details. This also serves as the default value for external applications umask.

          Syntax

          value valid range [000]-[777].

          See Also

          ExtApp umask

          CGI Priority⇑

          Description

          Specifies priority of the external application process. Value ranges from -20 to 20. A lower number means a higher priority.

          A CGI process cannot have a higher priority than the web server. If this priority is set to a lower number than the server's, the server's priority will be used for this value.

          Syntax

          int

          See Also

          Server Priority

          -

          CPU Soft Limit (sec)⇑

          Description

          Specifies CPU consumption time limit in seconds for a CGI process. When the process reaches the soft limit, it will be notified by a signal. The operating system's default setting will be used if the value is absent or set to 0.

          Syntax

          Integer number

          -

          CPU Hard Limit⇑

          Description

          Specifies maximum CPU consumption time limit in seconds for a CGI process. If the process continues to consume CPU time and reach the hard limit, the process will be force killed. The operating system's default setting will be used if the value is absent or set to 0.

          Syntax

          Integer number

          -

          Memory Soft Limit (bytes)⇑

          Description

          Specifies the memory consumption limit in bytes for an external application process or an external application started by the server.

          The main purpose of this limit is to prevent excessive memory usage because of software bugs or intentional attacks, not to impose a limit on normal usage. Make sure to leave enough head room, otherwise your application may fail and 503 error may be returned. It can be set at the server- level or at an individual external application level. The server-level limit will be used if it is not set at the individual application level.

          The operating system's default setting will be used if the value is absent at both levels or set to 0.

          Syntax

          Integer number

          Tips

          Do not over adjust this limit. This may result in 503 errors if your application needs more memory.

          -

          Memory Hard Limit (bytes)⇑

          Description

          Much the same as Memory Soft Limit (bytes), except the soft limit can be raised up to the hard limit from within a user process. The hard limit can be set at server level or at an individual external application level. The server-level limit will be used if it is not set at an individual application level.

          The operating system's default will be used if the value is absent at both levels or set to 0.

          Syntax

          Integer number

          Tips

          Do not over adjust this limit. This may result in 503 errors if your application need more memory.

          +

          CPU Soft Limit (sec)⇑

          Description

          Specifies CPU consumption time limit in seconds for a CGI process. When the process reaches the soft limit, it will be notified by a signal. The operating system's default setting will be used if the value is absent or set to 0.

          Syntax

          Integer number

          +

          CPU Hard Limit⇑

          Description

          Specifies maximum CPU consumption time limit in seconds for a CGI process. If the process continues to consume CPU time and reach the hard limit, the process will be force killed. The operating system's default setting will be used if the value is absent or set to 0.

          Syntax

          Integer number

          +

          Memory Soft Limit (bytes)⇑

          Description

          Specifies the memory consumption limit in bytes for an external application process or an external application started by the server.

          The main purpose of this limit is to prevent excessive memory usage because of software bugs or intentional attacks, not to impose a limit on normal usage. Make sure to leave enough head room, otherwise your application may fail and 503 error may be returned. It can be set at the server- level or at an individual external application level. The server-level limit will be used if it is not set at the individual application level.

          The operating system's default setting will be used if the value is absent at both levels or set to 0.

          Syntax

          Integer number

          Tips

          Do not over adjust this limit. This may result in 503 errors if your application needs more memory.

          +

          Memory Hard Limit (bytes)⇑

          Description

          Much the same as Memory Soft Limit (bytes), except the soft limit can be raised up to the hard limit from within a user process. The hard limit can be set at server level or at an individual external application level. The server-level limit will be used if it is not set at an individual application level.

          The operating system's default will be used if the value is absent at both levels or set to 0.

          Syntax

          Integer number

          Tips

          Do not over adjust this limit. This may result in 503 errors if your application need more memory.

          Process Soft Limit⇑

          Description

          Limits the total number of processes that can be created on behalf of a user. All existing processes will be counted against this limit, not just new processes to be started.

          The limit can be set at the server level or at an individual external application level. The server-level limit will be used if it is not set at an individual application level. The operating system's default setting will be used if this value is 0 or absent at both levels.

          Syntax

          Integer number

          Tips

          PHP scripts can call for forking processes. The main purpose of this limit is as a last line of defense to prevent fork bombs and other attacks caused by PHP processes creating other processes.

          Setting this setting too low can severely hurt functionality. The setting will thus be ignored below certain levels.

          When Run On Start Up is set to "Yes (Daemon mode)", the actual process limit will be higher than this setting to make sure parent processes are not limited.

          -

          Process Hard Limit⇑

          Description

          Much the same as Process Soft Limit, except the soft limit can be raised up to the hard limit from within a user process. The hard limit can be set at the server level or at an individual external application level. The server-level limit will be used if it is not set at an individual application level. The operating system's default value will be used if the value is absent at both levels or set to 0.

          Syntax

          Integer number

          +

          Process Hard Limit⇑

          Description

          Much the same as Process Soft Limit, except the soft limit can be raised up to the hard limit from within a user process. The hard limit can be set at the server level or at an individual external application level. The server-level limit will be used if it is not set at an individual application level. The operating system's default value will be used if the value is absent at both levels or set to 0.

          Syntax

          Integer number

          cgroups⇑

          Description

          Apply cgroup settings to this CGI process if supported by the current OS. At this time, RedHat/Centos Linux v7.5+ and Ubuntu 18.04+ are supported. The currently executing user will be used to determine which cgroup configuration to apply.

          Setting this to Disabled at the Server level will disable this setting server-wide. In all other cases, the Server level setting can be overridden at the Virtual Host level.

          Default values:
          Server level: Off
          VH level: Inherit Server level setting

          Syntax

          Select from drop down list

          -

          reCaptcha Protection⇑

          Description

          reCaptcha Protection is a service provided as a way to mitigate heavy server load. reCaptcha Protection will activate after one of the below situations is hit. Once active, all requests by NON TRUSTED(as configured) clients will be redirected to a reCAPTCHA validation page. After validation, the client will be redirected to their desired page.

          The following situations will activate reCaptcha Protection:
          1. The server or vhost concurrent requests count passes the configured connection limit.
          2. Anti-DDoS is enabled and a client is hitting a url in a suspicious manner. The client will redirect to reCAPTCHA first instead of getting denied when triggered.
          3. WP Brute Force protection is enabled and action is set to 'Captcha or Drop’. When a brute force attack is detected, the client will redirect to reCAPTCHA first. After max tries is reached, the connection will be dropped, as per the ‘drop’ option.
          4. A new rewrite rule environment is provided to activate reCAPTCHA via RewriteRules. 'verifycaptcha' can be set to redirect clients to reCAPTCHA. A special value ': deny' can be set to deny the client if it failed too many times. For example, [E=verifycaptcha] will always redirect to reCAPTCHA until verified. [E=verifycaptcha: deny] will redirect to reCAPTCHA until Max Tries is hit, after which the client will be denied.

          -

          Enable reCAPTCHA⇑

          Description

          Enable the reCaptcha Protection feature at the current level. This setting must be set to Yes at the Server level before the reCaptcha Protection feature can be used.

          Default values:
          Server-level: Yes
          VH-Level: Inherit Server level setting

          Syntax

          Select from radio box

          +

          reCAPTCHA Protection⇑

          Description

          reCAPTCHA Protection is a service provided as a way to mitigate heavy server load. reCAPTCHA Protection will activate after one of the below situations is hit. Once active, all requests by NON TRUSTED(as configured) clients will be redirected to a reCAPTCHA validation page. After validation, the client will be redirected to their desired page.

          The following situations will activate reCAPTCHA Protection:
          1. The server or vhost concurrent requests count passes the configured connection limit.
          2. Anti-DDoS is enabled and a client is hitting a url in a suspicious manner. The client will redirect to reCAPTCHA first instead of getting denied when triggered.
          3. A new rewrite rule environment is provided to activate reCAPTCHA via RewriteRules. 'verifycaptcha' can be set to redirect clients to reCAPTCHA. A special value ': deny' can be set to deny the client if it failed too many times. For example, [E=verifycaptcha] will always redirect to reCAPTCHA until verified. [E=verifycaptcha: deny] will redirect to reCAPTCHA until Max Tries is hit, after which the client will be denied.

          +

          Enable reCAPTCHA⇑

          Description

          Enable the reCAPTCHA Protection feature at the current level. This setting must be set to Yes at the Server level before the reCAPTCHA Protection feature can be used.

          Default values:
          Server-level: Yes
          VH-Level: Inherit Server level setting

          Syntax

          Select from radio box

          Site Key⇑

          Description

          The site key is the public key provided by Google via its reCAPTCHA service. A default Site Key will be used if not set.

          Secret Key⇑

          Description

          The secret key is the private key provided by Google via its reCAPTCHA service. A default Secret Key will be used if not set.

          reCAPTCHA Type⇑

          Description

          Specify the reCAPTCHA type to use with the key pairs. If a key pair has not been provided and this setting is set to Not Set, a default key pair of type Invisible will be used.
          Checkbox will display a checkbox reCAPTCHA for the visitor to validate.
          Invisible will attempt to validate the reCAPTCHA automatically and if successful, will redirect to the desired page.

          Default value is Invisible.

          Syntax

          Select from drop down list

          @@ -141,12 +153,14 @@

          Server Security

          Table of Contents

          Bot White List⇑

          Description

          List of custom user agents to allow access. Will be subject to the ‘good bots’ limitations, including allowedRobotHits.

          Syntax

          List of user agents, one per line. Regex is supported.

          Connection Limit⇑

          Description

          The number of concurrent connections (SSL & non-SSL) needed to activate reCAPTCHA. reCAPTCHA will be used until concurrent connections drop below this number.

          Default value is 15000.

          Syntax

          Integer number

          SSL Connection Limit⇑

          Description

          The number of concurrent SSL connections needed to activate reCAPTCHA. reCAPTCHA will be used until concurrent connections drop below this number.

          Default value is 10000.

          Syntax

          Integer number

          -

          Access Denied Directories⇑

          Description

          Specifies directories that should be blocked from access. Add directories that contain sensitive data to this list to prevent accidentally exposing sensitive files to clients. Append a "*" to the path to include all sub-directories. If both Follow Symbolic Link and Check Symbolic Link are enabled, symbolic links will be checked against the denied directories.

          Syntax

          Comma-delimited list of directories

          Tips

          Of critical importance: This setting only prevents serving static files from these directories. This does not prevent exposure by external scripts such as PHP/Ruby/CGI.

          -

          Access Control⇑

          Description

          Specifies what sub networks and/or IP addresses can access the server. At the server level, this setting will affect all virtual hosts. You can also set up access control unique to each virtual host at the virtual host level. Virtual host level settings will NOT override server level settings.

          Blocking/Allowing an IP is determined by the combination of the allowed list and the denied list. If you want to block only certain IPs or sub-networks, put * or ALL in the Allowed List and list the blocked IPs or sub-networks in the Denied List. If you want to allow only certain IPs or sub-networks, put * or ALL in the Denied List and list the allowed IPs or sub-networks in the Allowed List. The setting of the smallest scope that fits for an IP will be used to determine access.

          Server Level: Trusted IPs or sub-networks must be specified in the Allowed List by adding a trailing "T". Trusted IPs or sub-networks are not affected by connection/throttling limits. Only server level access control can set up trusted IPs/sub-networks.

          Tips

          Use this at the server level for general restrictions that apply to all virtual hosts.

          -

          Allowed List⇑

          Description

          Specifies the list of IPs or sub-networks allowed. * or ALL are accepted.

          Syntax

          Comma delimited list of IP addresses or sub-networks. A trailing "T" can be used to indicate a trusted IP or sub-network, such as 192.168.1.*T.

          Example

          Sub-networks: 192.168.1.0/255.255.255.0, 192.168.1.0/24, 192.168.1, or 192.168.1.*
          IPv6 addresses: ::1 or [::1]
          IPv6 subnets: 3ffe:302:11:2:20f:1fff:fe29:717c/64 or [3ffe:302:11:2:20f:1fff:fe29:717c]/64

          Tips

          Trusted IPs or sub-networks set at the server level access control will be excluded from connection/throttling limits.

          -

          Denied List⇑

          Description

          Specifies the list of IPs or sub-networks disallowed.

          Syntax

          Comma delimited list of IP addresses or sub-networks. * or ALL are accepted.

          Example

          Sub-networks: 192.168.1.0/255.255.255.0, 192.168.1.0/24, 192.168.1, or 192.168.1.*
          IPv6 addresses: ::1 or [::1]
          IPv6 subnets: 3ffe:302:11:2:20f:1fff:fe29:717c/64 or [3ffe:302:11:2:20f:1fff:fe29:717c]/64
          +

          Bubblewrap Container⇑

          Description

          Set to On if you wish to start CGI processes (including PHP programs) in a bubblewrap sandbox. See https://wiki.archlinux.org/index.php/Bubblewrap for details on using bubblewrap. Bubblewrap must be installed on your system prior to using this setting.

          This setting cannot be turned on at the Virtual Host level if set to "Disabled" at the Server level.

          Default values:
          Server level: Disabled
          VH level: Inherit Server level setting

          Syntax

          Select from drop down list

          +

          Bubblewrap Command⇑

          Description

          The full bubblewrap use command, including the bubblewrap program itself. More on configuring this command can be found here: https://openlitespeed.org/kb/bubblewrap-in-openlitespeed/ . If not specified, the default command listed below will be used.

          Default value: /bin/bwrap --ro-bind /usr /usr --ro-bind /lib /lib --ro-bind-try /lib64 /lib64 --ro-bind /bin /bin --ro-bind /sbin /sbin --dir /var --dir /tmp --proc /proc --symlink../tmp var/tmp --dev /dev --ro-bind-try /etc/localtime /etc/localtime --ro-bind-try /etc/ld.so.cache /etc/ld.so.cache --ro-bind-try /etc/resolv.conf /etc/resolv.conf --ro-bind-try /etc/ssl /etc/ssl --ro-bind-try /etc/pki /etc/pki --ro-bind-try /etc/man_db.conf /etc/man_db.conf --ro-bind-try /home/$USER /home/$USER --bind-try /var/lib/mysql/mysql.sock /var/lib/mysql/mysql.sock --bind-try /home/mysql/mysql.sock /home/mysql/mysql.sock --bind-try /tmp/mysql.sock /tmp/mysql.sock --unshare-all --share-net --die-with-parent --dir /run/user/$UID ‘$PASSWD 65534’ ‘$GROUP 65534’

          +

          Access Denied Directories⇑

          Description

          Specifies directories that should be blocked from access. Add directories that contain sensitive data to this list to prevent accidentally exposing sensitive files to clients. Append a "*" to the path to include all sub-directories. If both Follow Symbolic Link and Check Symbolic Link are enabled, symbolic links will be checked against the denied directories.

          Syntax

          Comma-delimited list of directories

          Tips

          Of critical importance: This setting only prevents serving static files from these directories. This does not prevent exposure by external scripts such as PHP/Ruby/CGI.

          +

          Access Control⇑

          Description

          Specifies what sub networks and/or IP addresses can access the server. At the server level, this setting will affect all virtual hosts. You can also set up access control unique to each virtual host at the virtual host level. Virtual host level settings will NOT override server level settings.

          Blocking/Allowing an IP is determined by the combination of the allowed list and the denied list. If you want to block only certain IPs or sub-networks, put * or ALL in the Allowed List and list the blocked IPs or sub-networks in the Denied List. If you want to allow only certain IPs or sub-networks, put * or ALL in the Denied List and list the allowed IPs or sub-networks in the Allowed List. The setting of the smallest scope that fits for an IP will be used to determine access.

          Server Level: Trusted IPs or sub-networks must be specified in the Allowed List by adding a trailing "T". Trusted IPs or sub-networks are not affected by connection/throttling limits. Only server level access control can set up trusted IPs/sub-networks.

          Tips

          Use this at the server level for general restrictions that apply to all virtual hosts.

          +

          Allowed List⇑

          Description

          Specifies the list of IPs or sub-networks allowed. * or ALL are accepted.

          Syntax

          Comma delimited list of IP addresses or sub-networks. A trailing "T" can be used to indicate a trusted IP or sub-network, such as 192.168.1.*T.

          Example

          Sub-networks: 192.168.1.0/255.255.255.0, 192.168.1.0/24, 192.168.1, or 192.168.1.*
          IPv6 addresses: ::1 or [::1]
          IPv6 subnets: 3ffe:302:11:2:20f:1fff:fe29:717c/64 or [3ffe:302:11:2:20f:1fff:fe29:717c]/64

          Tips

          Trusted IPs or sub-networks set at the server level access control will be excluded from connection/throttling limits.

          +

          Denied List⇑

          Description

          Specifies the list of IPs or sub-networks disallowed.

          Syntax

          Comma delimited list of IP addresses or sub-networks. * or ALL are accepted.

          Example

          Sub-networks: 192.168.1.0/255.255.255.0, 192.168.1.0/24, 192.168.1, or 192.168.1.*
          IPv6 addresses: ::1 or [::1]
          IPv6 subnets: 3ffe:302:11:2:20f:1fff:fe29:717c/64 or [3ffe:302:11:2:20f:1fff:fe29:717c]/64
          -
          +
          diff --git a/dist/docs/ServTuning_Help.html b/dist/docs/ServTuning_Help.html index 51dae5a79..a7616639b 100644 --- a/dist/docs/ServTuning_Help.html +++ b/dist/docs/ServTuning_Help.html @@ -14,8 +14,10 @@
          openlitespeed logo
          -

          OpenLiteSpeed Web Server Users' Manual

          -
          Version 1.6  — Rev. 2
          +

          + OpenLiteSpeed Web Server Users' Manual +

          +

          Version 1.7  — Rev. 17

            @@ -60,7 +62,9 @@
            Version 1.6  — Rev. 2
          • Context
            • @@ -88,32 +98,31 @@
            Version 1.6  — Rev. 2
            Configuration

            Server Tuning

            Table of Contents

            OS Optimization

            Default SHM Directory

            -
            Connection Tuning

            -Max Connections | Max SSL Connections | Connection Timeout (secs) | Max Keep-Alive Requests | Smart Keep-Alive | Keep-Alive Timeout (secs) | Send Buffer Size (bytes) | Receive Buffer Size (bytes)

            -
            Request/Response Tuning

            +

            Connection

            +Max Connections | Max SSL Connections | Connection Timeout (secs) | Max Keep-Alive Requests | Keep-Alive Timeout (secs) | Send Buffer Size (bytes) | Receive Buffer Size (bytes)

            +
            Request/Response

            Max Request URL Length (bytes) | Max Request Header Size (bytes) | Max Request Body Size (bytes) | Max Dynamic Response Header Size (bytes) | Max Dynamic Response Body Size (bytes)

            Static File Delivery Optimization

            Max Cached Small File Size (bytes) | Total Small File Cache Size (bytes) | Max MMAP File Size (bytes) | Total MMAP Cache Size (bytes) | Use sendfile() | File ETag

            GZIP/Brotli Compression

            Enable Compression | Compressible Types | Enable GZIP Dynamic Compression | GZIP Compression Level (Dynamic Content) | Brotli Compression Level (Dynamic Content) | Auto Update Static File | GZIP Compression Level (Static File) | Brotli Compression Level (Static File) | Static Cache Directory | Max Static File Size (bytes) | Min Static File Size (bytes)

            -
            SSL Global Setting

            -SSL Strong DH Key | Enable Multiple SSL Certificates | Enable Session Cache | Session Cache Size (bytes) | Session Cache Timeout (secs) | Enable Session Tickets | SSL Session Ticket Lifetime (secs) | SSL Session Ticket Key File

            +
            SSL Global Settings

            +Default Cipher Suite | SSL Strong DH Key | Enable Multiple SSL Certificates | Enable Session Cache | Session Cache Size (bytes) | Session Cache Timeout (secs) | Enable Session Tickets | SSL Session Ticket Lifetime (secs) | SSL Session Ticket Key File

            QUIC

            Enable QUIC | QUIC SHM Directory | QUIC Versions | Congestion Control | Connection Flow Control Window | Max Connection Flow Control Window | Stream Flow Control Window | Max Stream Flow Control Window | Max Concurrent Streams Per Connection | Handshake Timeout | Idle Timeout

            -

            Default SHM Directory⇑

            Description

            Changes shared memory's default directory to the specified path. If the directory does not exist, it will be created. All SHM data will be stored in this directory unless otherwise specified.

            Syntax

            Path

            +

            Default SHM Directory⇑

            Description

            Changes shared memory's default directory to the specified path. If the directory does not exist, it will be created. All SHM data will be stored in this directory unless otherwise specified.

            Syntax

            path

            Max Connections⇑

            Description

            Specifies the maximum number of concurrent connections that the server can accept. This includes both plain TCP connections and SSL connections. Once the maximum concurrent connections limit is reached, the server will close Keep-Alive connections when they complete active requests.

            Syntax

            Integer number

            Tips

            When the server is started by "root" user, the server will try to adjust the per-process file descriptor limits automatically, however, if this fails, you may need to increase this limit manually.

            Max SSL Connections⇑

            Description

            Specifies the maximum number of concurrent SSL connections the server will accept. Since total concurrent SSL and non-SSL connections cannot exceed the limit specified by Max Connections, the actual number of concurrent SSL connections allowed must be lower than this limit.

            Syntax

            Integer number

            Connection Timeout (secs)⇑

            Description

            Specifies the maximum connection idle time allowed during processing one request. The connection will be closed if it has been idle, i.e. no I/O activity, for this period of time.

            Syntax

            Integer number

            Tips

            Set this as low as you can to help recover dead connections during a potential DoS attack.

            See Also

            Keep-Alive Timeout (secs)

            Max Keep-Alive Requests⇑

            Description

            Specifies the maximum number of requests that can be served through a keep-alive (persistent) session. The connection will be closed once this limit is reached. You can set this limit for each virtual host as well.

            Syntax

            Integer number

            Tips

            Set this to a reasonably high value. A value of "1" or "0" will disable keep-alive.

            See Also

            Virtual Host Max Keep-Alive Requests

            -

            Smart Keep-Alive⇑

            Description

            Specifies whether to turn on Smart Keep-Alive. This option is effective only if Max Keep-Alive Requests is greater than 1. If enabled, you can also enable/disable it at the virtual host level. Smart keep-alive will only establish keep-alive connections for requests of JavaScript, CSS Style Sheet, and image files. For html pages, the connection will not be kept alive. This will help serve more users more efficiently. Normally a web page contains multiple images and scripts that will be cached by the browser after the initial request. It is more efficient to send those non-html static files through a single keep-alive connection and have the text/html file sent through another non-keep-alive connection. This method will reduce idle connections and in turn increase the capacity to handle more concurrent requests and users.

            Syntax

            Select from radio box

            Tips

            Enable this for high-load web sites.

            See Also

            Virtual Host Smart Keep-Alive

            Keep-Alive Timeout (secs)⇑

            Description

            Specifies the maximum idle time between requests from a keep-alive connection. If no new request is received during this period of time, the connection will be closed. This setting only applies to HTTP/1.1 connections. HTTP/2 connections have long keep-alive timeouts by design and are not affected by this setting.

            Syntax

            Integer number

            Tips

            We recommend that you set this value just long enough to wait for subsequent requests from a client when there are more assets referenced by a single page that need to be loaded. Do not set this too long hoping that the next page will be served over the keep-alive connection. Keeping many idle keep-alive connections is a waste of server resources and could be taken advantage of by (D)DoS attacks. 2-5 seconds is a reasonable range for most applications. LiteSpeed is highly efficient in a non-keep-alive environment.

            Send Buffer Size (bytes)⇑

            Description

            The sending buffer size of each TCP socket. 512K is the maximum allowed buffer size.

            Syntax

            Integer number

            Tips

            It is recommended to leave this value as "Not Set" or set to 0 to use the operating system's default buffer size.
            If your web site serves large static files, increase the send buffer size to improve performance.
            Setting this to a lower value will reduce throughput and memory usage per socket allowing the server to have more concurrent sockets when memory is a bottleneck.

            Receive Buffer Size (bytes)⇑

            Description

            The receiving buffer size of each TCP socket. 512K is the maximum allowed buffer size.

            Syntax

            Integer number

            Tips

            It is recommended to leave this value as "Not Set" or set to 0 to use the operating system's default buffer size.
            A large receive buffer will increase performance when processing incoming requests with large payloads, i.e. file uploads.
            Setting this to a lower value will reduce throughput and memory usage per socket allowing the server to have more concurrent sockets when memory is a bottleneck.

            -

            Max Request URL Length (bytes)⇑

            Description

            Specifies the maximum size of a request URL. URL is the full text address used to access a server resource including the query string. 64K bytes is the hard limit.

            Syntax

            Integer number

            Tips

            Set it reasonably low to reduce memory usage and help identify bogus requests and DoS attacks.
            2-3K is big enough for most web sites unless the HTTP GET method is used with large query strings instead of POST.

            -

            Max Request Header Size (bytes)⇑

            Description

            Specifies the maximum size of an HTTP request header including request URL. Hard limit is 16380 bytes.

            Syntax

            Integer number

            Tips

            Set it reasonably low to reduce memory usage and help identify bogus requests and DoS attacks.
            4-8K is big enough for most web sites.

            +

            Max Request URL Length (bytes)⇑

            Description

            Specifies the maximum size of a request URL. URL is the full text address used to access a server resource including the query string. Hard limit is 65530 bytes. Values larger than this, such as 64K (6 bytes larger), will be treated as if 65530 was used.

            Default value: 8192 or 8K.

            Syntax

            Integer number

            Tips

            Set it reasonably low to reduce memory usage and help identify bogus requests and DoS attacks.
            2-3K is big enough for most web sites unless the HTTP GET method is used with large query strings instead of POST.

            +

            Max Request Header Size (bytes)⇑

            Description

            Specifies the maximum size of an HTTP request header including request URL. Hard limit is 131072 bytes or 128K.

            Default value: 32768 or 32K

            Syntax

            Integer number

            Tips

            Set it reasonably low to reduce memory usage and help identify bogus requests and DoS attacks.
            4-8K is big enough for most web sites under normal circumstances.

            Max Request Body Size (bytes)⇑

            Description

            Specifies the maximum size of an HTTP request body. For a 32Bit OS, 2GB is the hard limit. For a 64Bit OS, it is virtually unlimited.

            Syntax

            Integer number

            Tips

            To help prevent DoS attacks, try to constrain this limit to only what is really needed. Your swapping space must have enough free space to accommodate this limit.

            -

            Max Dynamic Response Header Size (bytes)⇑

            Description

            Specifies the maximum header size of a dynamically generated response. Hard limit is 64KB.

            Default value: 16KB

            Syntax

            Integer number

            Tips

            Set it reasonably low to help recognize bad responses dynamically generated by external applications.

            +

            Max Dynamic Response Header Size (bytes)⇑

            Description

            Specifies the maximum header size of a dynamically generated response. Hard limit is 131072 bytes or 128K.

            Default value: 32768 or 32K

            Syntax

            Integer number

            Tips

            Set it reasonably low to help recognize bad responses dynamically generated by external applications.

            Max Dynamic Response Body Size (bytes)⇑

            Description

            Specifies the maximum body size of a dynamically generated response. Hard limit is 2047MB.

            Syntax

            Integer number

            Tips

            Set the limit reasonably low to help identify bad responses. It is not uncommon to malformed scripts to contain an infinite loop which leads to infinity-sized responses.

            Max Cached Small File Size (bytes)⇑

            Description

            Specifies the largest static file that will be cached in a pre-allocated memory buffer. Static files can be served in four different ways: memory buffer cache, memory-mapped cache, plain read/write, and sendfile(). Files whose size is smaller than this setting are served from memory buffer cache. Files whose size is larger than this setting, but smaller than the Max MMAP File Size (bytes) will be served from memory-mapped cache. Files whose size is larger than the Max MMAP File Size (bytes) will be served via plain read/write or sendfile(). It is optimal to serve static files smaller than 4K from the memory buffer cache.

            Syntax

            Integer number

            Total Small File Cache Size (bytes)⇑

            Description

            Specifies the total memory that can be allocated to the buffer cache in order to cache/serve small static files.

            Syntax

            Integer number

            @@ -122,7 +131,7 @@

            Server Tuning

            Table of Contents

            Use sendfile()⇑

            Description

            Specifies whether to use the sendfile() system call to serve static files. Static files can be served in four different ways: memory buffer cache, memory-mapped cache, plain read/write, and sendfile(). Files smaller than the Max Cached Small File Size (bytes) are served from memory buffer cache. Files larger than the Max Cached Small File Size (bytes) but smaller than the Max MMAP File Size (bytes) will be served from memory-mapped cache. Files larger than the Max MMAP File Size (bytes) will be served via plain read/write or sendfile(). Sendfile() is a "zero copy" system call that can greatly reduce CPU utilization when serving very large static files. Sendfile() requires an optimized network card kernel driver and thus may not be suitable for some small-vendor network adapters.

            Syntax

            Select from radio box

          File ETag⇑

          Description

          Specifies whether to use a file's inode, last-modified time, and size attributes to generate the ETag HTTP response header for static files. All three attributes are enabled by default. If you plan to serve the same file out of mirrored servers, you should not include inode; otherwise, the ETag generated for one file will be different on different servers.

          Syntax

          Select from checkbox

          Enable Compression⇑

          Description

          Enables GZIP/Brotli compression for both static and dynamic responses.

          Default value: Yes

          Syntax

          Select from radio box

          Tips

          Enable it to save network bandwidth. Text-based responses such as html, css, and javascript files benefit the most and on average can be compressed to half of their original size.

          -

          Compressible Types⇑

          Description

          Specifies what MIME types are allowed to be compressed.

          Syntax

          MIME type list separated by commas. Wild card "*" and negate sign "!" are allowed, such as text/*, !text/js.

          Example

          If you want to compress text/* but not text/css, you can have a rule like text/*, !text/css. "!" will exclude that MIME type.

          Tips

          Only allow types that will benefit from GZIP/Brotli compression. Binary files such as gif/png/jpeg images and flash files do not benefit from compression.

          +

          Compressible Types⇑

          Description

          Specifies what MIME types are allowed to be compressed. Leave this setting unset or enter default to use the server built-in default list which should already cover most mime-types.

          Default value: text/*,application/x-javascript,application/javascript,application/xml,image/svg+xml,application/rss+xml, application/json,application/vnd.ms-fontobject,application/x-font,application/x-font-opentype, application/x-font-truetype,application/x-font-ttf,font/eot,font/opentype,font/otf,font/ttf,image/x-icon, image/vnd.microsoft.icon,application/xhtml+xml

          Syntax

          MIME type list separated by commas. Wild card "*" and negate sign "!" are allowed, such as text/*, !text/js.

          Example

          If you want to compress text/* but not text/css, you can have a rule like text/*, !text/css. "!" will exclude that MIME type.

          Tips

          Only allow types that will benefit from GZIP/Brotli compression. Binary files such as gif/png/jpeg images and flash files do not benefit from compression.

          Enable GZIP Dynamic Compression⇑

          Description

          Controls GZIP compression for dynamically generated responses.

          For this setting to have an effect, Enable Compression must be set to Yes.

          Default value: Yes

          Syntax

          Select from radio box

          Tips

          Compressing dynamic responses increases CPU and memory utilization but saves network bandwidth.

          GZIP Compression Level (Dynamic Content)⇑

          Description

          Specifies the level of GZIP compression applied to dynamic content. Ranges from 1 (lowest) to 9 (highest).

          This setting will only take effect when Enable Compression and Enable GZIP Dynamic Compression are enabled.

          Default value: 6

          Syntax

          Number between 1 and 9.

          Tips

          Higher compression level will use more memory and CPU cycles. You can set it to a higher level if your machine has additional power. There is not much difference between 6 and 9, except that 9 uses many more CPU cycles.

          Brotli Compression Level (Dynamic Content)⇑

          Description

          Controls the level of Brotli compression applied to dynamic responses. Ranges from 0 (OFF) to 6 (highest).

          This setting will only take effect when Enable Compression is enabled.

          Default value: 2

          Syntax

          Number between 0 and 6.

          @@ -132,6 +141,7 @@

          Server Tuning

          Table of Contents

          Static Cache Directory⇑

          Description

          Specifies the path of the directory used to store compressed files for static content.

          Default value: Swapping Directory.

          Syntax

          Directory Path

        Max Static File Size (bytes)⇑

        Description

        Specifies the maximum size of a static file for which the server will create a compressed file automatically.

        Default value: 10M

        Syntax

        Number in bytes not less than 1K.

        Tips

        It is not recommended to have the server create/update compressed files for large files. Compressing blocks an entire server process and no further requests can be processed until the compression is completed.

        Min Static File Size (bytes)⇑

        Description

        Specifies the minimum size of a static file for which the server will create a corresponding compressed file.

        Default value: 200

        Syntax

        Number in bytes not less than 200.

        Tips

        It is not necessary to compress very small files as the bandwidth saving is negligible.

        +

        Default Cipher Suite⇑

        Description

        Default cipher suite for SSL certificates.

        Default value: Server Internal Default (Based on current best practices)

        Syntax

        Colon-separated string of cipher specifications.

        SSL Strong DH Key⇑

        Description

        Specifies whether to use 2048 or 1024 bit DH keys for SSL handshakes. If set to "Yes", 2048 bit DH keys will be used for 2048 bit SSL keys and certificates. 1024 bit DH keys will still be used in other situations. Default is "Yes".

        Earlier versions of Java do not support DH key size higher than 1024 bits. If Java client compatibility is required, this should be set to "No".

        Syntax

        radio

        Enable Multiple SSL Certificates⇑

        Description

        Allows listeners/vhosts to set multiple SSL certificates. If multiple certificates are enabled, the certificates/keys are expected to follow a naming scheme. If the cert is named server.crt, other possible cert names are server.crt.rsa, server.crt.dsa, server.crt.ecc. If "Not Set", defaults to "No".

        Syntax

        Select from radio box

        Enable Session Cache⇑

        Description

        Enables session ID caching using OpenSSL's default setting. Server-level setting must be set to "Yes" for Virtual Host setting to take effect.

        Default values:
        Server-level: Yes
        VH-Level: Yes

        Syntax

        Select from radio box

        @@ -152,7 +162,7 @@

        Server Tuning

        Table of Contents

        Handshake Timeout⇑

        Description

        The time in seconds a new QUIC connection is given to complete its handshake, after which the connection is aborted. Default value is 10.

        Syntax

        Integer number between 1 and 15

      Idle Timeout⇑

      Description

      The time in seconds after which an idle QUIC connection will be closed. Default value is 30.

      Syntax

      Integer number between 10 and 30

      -
      +
      diff --git a/dist/docs/ServerStat_Help.html b/dist/docs/ServerStat_Help.html index 5f7875b62..046326029 100644 --- a/dist/docs/ServerStat_Help.html +++ b/dist/docs/ServerStat_Help.html @@ -14,8 +14,10 @@
      openlitespeed logo
      -

      OpenLiteSpeed Web Server Users' Manual

      -
      Version 1.6  — Rev. 2
      +

      + OpenLiteSpeed Web Server Users' Manual +

      +

      Version 1.7  — Rev. 17

      Actions⇑

      Description

      Six actions are available from this menu: Graceful Restart, Toggle Debug Logging, Server Log Viewer, Real-Time Statistics, Version Manager, and Compile PHP.

      Tips

      The shell utility $SERVER_ROOT/bin/lswsctrl can be used to control the server processes as well, but requires a login shell.

      Apply Changes/Graceful Restart⇑

      Description

      By clicking Graceful Restart, a new server process will be started. For Graceful Restart, the old server process will only exit after all requests to it have been finished (or the Graceful Restart Timeout (secs) limit has been reached). Configuration changes are applied at the next restart. Graceful Restart will apply these changes without any server downtime.

      Tips

      Graceful restart takes less than 2 seconds to generate a new server process.

      -

      Server Log Viewer⇑

      Description

      The Server Log Viewer is a convenient tool for browsing the current server log to check for errors or problems. The log viewer searches the server log file in blocks for the specified log level. The default block size is 20KB. You can use the Begin, End, Next, and Prev buttons to navigate a large log file.

      Tips

      The size of a dynamically generated page is limited by Max Dynamic Response Body Size (bytes). So if the block is too big, the page might be truncated.

      +

      Server Log Viewer⇑

      Description

      The Server Log Viewer is a convenient tool for browsing the current server log to check for errors or problems. The log viewer searches the server log file in blocks for the specified log level. The default block size is 20KB. You can use the Begin, End, Next, and Prev buttons to navigate a large log file.

      Tips

      The size of a dynamically generated page is limited by Max Dynamic Response Body Size (bytes). So if the block is too big, the page might be truncated.

      Real-Time Statistics⇑

      Description

      The Real-Time Statistics link leads to a page with a real-time server status report. This is a convenient tool to monitor the system. The report shows a snapshot of your server statistics. The refresh rate for this snapshot is controlled by the Refresh Interval drop-down list in the upper righthand corner. The report contains the following sections:

      • Server Health shows the basic server statistics, uptime, load, and anti-DDoS blocked IPs.
      • Server lists current traffic throughput, connections, and requests statistics.
      • Virtual Host shows request processing statuses and external application statuses for each virtual host.
      • External Application lists the external applications currently running and their usage statistics. The CGI daemon process lscgid is always running as an external application.
      Many of the rows in the Real-Time Statistics feature a graph icon. Clicking on this icon will open a graph of that row's statistics updated in real-time. In the Server section, next to Requests, there is a link labeled (Details). This link takes you to the Requests Snapshot, where you can view detailed information on which clients are making certain kinds of requests or which aspects of your site are bottlenecking. The fields in the blue area allow you to filter the snapshot to isolate certain parts of your server or look for clients that are performing certain actions.

      Toggle Debug Logging⇑

      Description

      Toggle Debug Logging toggles the value of Debug Level between NONE and HIGH. As debug logging has an impact on performance and can fill up the hard drive quickly, so Debug Level should usually be set to NONE on a production server. This feature can be used instead to turn debug logging on and off quickly in order to debug a problem on a production server. Debug logging turned on or off in this way will not change anything shown in your server configurations.

      Tips

      Toggle Debug Logging will only work if Log Level is set to DEBUG. Important! Debug logging includes detailed information for each request and response. Active debug logging will severely degrade service performance and potentially saturate disk space in a very short time. This feature should only be used for a short period of time when trying to diagnose server issues.

      See Also

      Debug Level, Log Level

      Name - Listener⇑

      Description

      The unique name that identifies this listener. This is the Listener Name you specified when setting up the listener.

      @@ -120,7 +130,7 @@

      Table of Contents

      Disable⇑

      Description

      The Disable action stops a running virtual host. New requests will not be accepted, but requests being processed will finish as usual.

    Restart - Virtual Host⇑

    Description

    The Restart action causes the web server to load the newest configuration for this virtual host. Requests being processed will finish with the old configuration. The new configuration will only apply for new requests. All changes to a virtual host can be applied on the fly this way.

    -
    +
    diff --git a/dist/docs/Servlet_Context.html b/dist/docs/Servlet_Context.html index e504e5edf..5d692ca20 100644 --- a/dist/docs/Servlet_Context.html +++ b/dist/docs/Servlet_Context.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

      @@ -60,7 +62,9 @@
      Version 1.6  — Rev. 2
    • Context
      • @@ -103,7 +113,7 @@

      Servlet Context

      Table of Contents

      Customized Default Charset⇑

      Description

      Specifies a character set to be used when Add Default Charset is On. This is optional. The default value is iso-8859-1. This entry has no effect when Add Default Charset is Off.

      Syntax

      Name of a character set.

      Example

      utf-8

      Enable GeoLocation Lookup⇑

      Description

      Specifies whether to enable/disable IP Geolocation lookup. Can be set at server, virtual host, or context level. IP Geolocation is disabled by default when using value "Not Set".

      Syntax

      Select from radio box

      See Also

      Use Client IP in Header, DB File Path,

      -
      +
      diff --git a/dist/docs/Static_Context.html b/dist/docs/Static_Context.html index 86f7a5d95..ab4d3ba07 100644 --- a/dist/docs/Static_Context.html +++ b/dist/docs/Static_Context.html @@ -14,8 +14,10 @@
      openlitespeed logo
      -

      OpenLiteSpeed Web Server Users' Manual

      -
      Version 1.6  — Rev. 2
      +

      + OpenLiteSpeed Web Server Users' Manual +

      +

      Version 1.7  — Rev. 17

        @@ -60,7 +62,9 @@
        Version 1.6  — Rev. 2
      • Context
        • @@ -113,11 +123,11 @@

        Static Context

        Table of Contents

        <

        Enable Rewrite⇑

        Description

        Specifies whether to enable LiteSpeed's URL rewrite engine. This option can be customized at the virtual host or context level, and is inherited along the directory tree until it is explicitly overridden.

        Syntax

        Select from radio box

        Rewrite Inherit⇑

        Description

        Specifies whether to inherit rewrite rules from parent contexts. If rewrite is enabled and not inherited, rewrite base and rewrite rules defined in this context will be used.

        Syntax

        Select from radio box

        Rewrite Base⇑

        Description

        Specifies the base URL for rewrite rules.

        Syntax

        URL

        -

        Rewrite Rules⇑

        Description

        Specifies a list of rewrite rules at the virtual host level.

        Do NOT add any document root level rewrite rules here. If you have any document root level rewrite rules from .htaccess, you should instead create a static context with uri "/" and add the rewrite rules there.

        A rewrite rule is comprised of one RewriteRule directive and optionally preceded by multiple RewriteCond directives.

        • Each directive should take only one line.
        • RewriteCond and RewriteRule follow Apache's rewrite directive syntax. Just copy and paste rewrite directives from your Apache configuration files.
        • There are minor differences between LiteSpeed and Apache mod_rewrite implementation:
          • %\{LA-U:variable\} and %\{LA-F:variable\} are ignored by the LiteSpeed rewrite engine
          • two new server variables are added in the LiteSpeed rewrite engine: %\{CURRENT_URI\} represents the current URI being processed by the rewrite engine and %\{SCRIPT_NAME\} has the same meaning as the corresponding CGI environment variable.
        The implementation of LiteSpeed's rewrite engine follows the Apache's rewrite engine specifications. For more details about rewrite rules, please refer to Apache's mod_rewrite document and Apache's URL rewriting guide.

        Syntax

        string

        +

        Rewrite Rules⇑

        Description

        Specifies a list of rewrite rules at the virtual host level.

        Do NOT add any document root level rewrite rules here. If you have any document root level rewrite rules from .htaccess, you should instead create a static context with uri "/" and add the rewrite rules there.

        A rewrite rule is comprised of one RewriteRule directive and optionally preceded by multiple RewriteCond directives.

        • Each directive should take only one line.
        • RewriteCond and RewriteRule follow Apache's rewrite directive syntax. Just copy and paste rewrite directives from your Apache configuration files.
        • There are minor differences between LiteSpeed and Apache mod_rewrite implementation:
          • %\{LA-U:variable\} and %\{LA-F:variable\} are ignored by the LiteSpeed rewrite engine
          • Two new server variables are added in the LiteSpeed rewrite engine: %\{CURRENT_URI\} represents the current URI being processed by the rewrite engine and %\{SCRIPT_NAME\} has the same meaning as the corresponding CGI environment variable.
          • The LiteSpeed rewrite engine will stop processing rewrite rules after encountering an [L] flag to avoid looping while Apache mod_rewrite will stop processing rewrite rules for the current iteration only. This behavior is similar to that of the [END] flag in Apache mod_rewrite.

        The implementation of LiteSpeed's rewrite engine follows Apache's rewrite engine specifications. For more details about rewrite rules, please refer to Apache's mod_rewrite document and Apache's URL rewriting guide .

        Syntax

        string

        Enable GeoLocation Lookup⇑

        Description

        Specifies whether to enable/disable IP Geolocation lookup. Can be set at server, virtual host, or context level. IP Geolocation is disabled by default when using value "Not Set".

        Syntax

        Select from radio box

        See Also

        Use Client IP in Header, DB File Path,

        php.ini Override⇑

        Description

        Used to overwrite php.ini settings in the current context (Virtual Host level or Context level).

        Supported directives are:
        php_value
        php_flag
        php_admin_value
        php_admin_flag

        All other lines/directives will be ignored.

        Syntax

        Override syntax is similar to Apache, a newline separated list of directives and their values with each directive being prepended by php_value, php_flag, php_admin_value, or php_admin_flag appropriately.

        Example

        php_value include_path ".:/usr/local/lib/php"
        php_admin_flag engine on
        php_admin_value open_basedir "/home"
        -
        +
        diff --git a/dist/docs/Templates_Help.html b/dist/docs/Templates_Help.html index 37de1602c..0fde520fa 100644 --- a/dist/docs/Templates_Help.html +++ b/dist/docs/Templates_Help.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

        File Name Used In Template⇑

        Description

        Specifies a path for the file to be used for member virtual hosts. Variable $VH_NAME or $VH_ROOT must appear in the path so each member virtual host will have its own file.

        Syntax

        string

        -
        +
        diff --git a/dist/docs/VHGeneral_Help.html b/dist/docs/VHGeneral_Help.html index 499f5c758..2e406a608 100644 --- a/dist/docs/VHGeneral_Help.html +++ b/dist/docs/VHGeneral_Help.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

        Log Level⇑

        Description

        Specifies the level of logging. Available levels (from high to low) are ERROR, WARNING, NOTICE, INFO, and DEBUG. Only messages with a level higher than or equal to the current setting will be logged. If you want to set it to DEBUG, you must set the server log level to DEBUG as well. The level of debugging is controlled solely at the server level by Debug Level.

        Syntax

        Select from drop down list

        Tips

        Unless Debug Level is set to a level other than NONE, DEBUG log level does not have any performance impact and is recommended.

        See Also

        Debug Level

        Rolling Size (bytes)⇑

        Description

        Specifies when the current log file needs to be rolled over, also known as log rotation. When the file size is over the rollover limit, the active log file will be renamed to log_name.mm_dd_yyyy(.sequence) in the same directory and a new active log file will be created. The actual size of the rotated log file once it is created will sometimes be a little bigger than this size limit. Set to 0 to disable log rotation.

        Syntax

        Integer number

        Tips

        Append "K", "M", "G" to the number for kilo-, mega- and giga- bytes.

        +

        Keep Days⇑

        Description

        Specifies how many days the access log file will be kept on disk. Only rotated log files older than the specified number of days will be deleted. The current log file will not be touched regardless how many days worth of data it contains. If you do not want to auto-delete stale and very old log files, set this to 0.

        Syntax

        Integer number

        Log Control⇑

        Description

        Where the access log should be written. There are three options:

        1. Write to the server's access log
        2. Create an access log for this virtual host
        3. Disable access logging

        Syntax

        Select from drop down list

        File Name⇑

        Description

        The access log filename.

        Syntax

        Filename which can be an absolute path or a relative path to $SERVER_ROOT, $VH_ROOT.

        Tips

        Put access log file on a separate disk.

        Piped Logger⇑

        Description

        Specifies the external application that will receive the access log data sent by LiteSpeed through a pipe on its STDIN stream (file handle is 0). When this field is specified, the access log will be sent only to the logger application and not the access log file specified in previous entry.

        The logger application must be defined in External Apps section first. Server-level access logging can only use an external logger application defined at the server level. Virtual host-level access logging can only use a logger application defined at the virtual host level.

        The logger process is spawned in the same way as other external (CGI/FastCGI/LSAPI) processes. This means it will execute as the user ID specified in the virtual host's External App Set UID Mode settings and will never run on behalf of a privileged user.

        LiteSpeed web server performs simple load balancing among multiple logger applications if more than one instance of a logger application is configured. LiteSpeed server always attempts to keep the number of logger applications as low as possible. Only when one logger application fails to process access log entries in time will the server attempt to spawn another instance of the logger application.

        If a logger crashes, the web server will start another instance but the log data in the stream buffer will be lost. It is possible to lose log data if external loggers cannot keep up with the speed and volume of the log stream.

        Syntax

        Select from drop down list

        Log Format⇑

        Description

        Specifies the log format for the access log. When log format is set, it will override the Log Headers setting.

        Syntax

        String. The syntax of log format is compatible with Apache 2.0's custom log format.

        Example

        Common Log Format (CLF)
        "%h %l %u %t \"%r\" %>s %b"

        Common Log Format with Virtual Host
        "%v %h %l %u %t \"%r\" %>s %b"

        NCSA extended/combined log format
        "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"

        Log cookie value of Foobar
        "%{Foobar}C"

        See Also

        Log Headers

        Log Headers⇑

        Description

        Specifies whether to log HTTP request headers: Referer, UserAgent, and Host.

        Syntax

        Select from checkbox

        Tips

        Turn this off if you do not need these headers in the access log.

        See Also

        Log Format

        -

        Keep Days⇑

        Description

        Specifies how many days the access log file will be kept on disk. Only rotated log files older than the specified number of days will be deleted. The current log file will not be touched regardless how many days worth of data it contains. If you do not want to auto-delete stale and very old log files, set this to 0.

        Syntax

        Integer number

        Bytes Log⇑

        Description

        Specifies the path to the bandwidth bytes log file. When specified, a cPanel compatible bandwidth log will be created. This will log the total bytes transferred for a request including both the request and reply bodies.

        Syntax

        Filename which can be an absolute path or a relative path to $SERVER_ROOT.

        Tips

        Put the log file on a separate disk.

        Compress Archive⇑

        Description

        Specifies whether to compress rotated log files in order to save disk space.

        Syntax

        Select from radio box

        Tips

        Log files are highly compressible and this is recommended to reduce disk usage for old logs.

        Use Server Index Files⇑

        Description

        Specifies whether to use the server's index file settings. If set to Yes, only the server's settings will be used. If set to No, the server's settings will not be used. If set to Addition, additional index files can be added to server's index file list for this virtual host. If you want to disable index files for this virtual host, you can set the value to No and leave the index files field empty.

        Syntax

        Select from drop down list

        @@ -143,7 +153,7 @@

        Virtual Host General

        Table of Contents

        Handler Name⇑

        Description

        Specifies the name of the external application that processes the script files when the handler type is FastCGI, Web Server, LSAPI, Load Balancer, or Servlet Engine.

        Syntax

        Select from drop down list

      php.ini Override⇑

      Description

      Used to overwrite php.ini settings in the current context (Virtual Host level or Context level).

      Supported directives are:
      php_value
      php_flag
      php_admin_value
      php_admin_flag

      All other lines/directives will be ignored.

      Syntax

      Override syntax is similar to Apache, a newline separated list of directives and their values with each directive being prepended by php_value, php_flag, php_admin_value, or php_admin_flag appropriately.

      Example

      php_value include_path ".:/usr/local/lib/php"
      php_admin_flag engine on
      php_admin_value open_basedir "/home"
      -
      +
      diff --git a/dist/docs/VHSSL_Help.html b/dist/docs/VHSSL_Help.html index 175fe0cb1..97a2701da 100644 --- a/dist/docs/VHSSL_Help.html +++ b/dist/docs/VHSSL_Help.html @@ -14,8 +14,10 @@
      openlitespeed logo
      -

      OpenLiteSpeed Web Server Users' Manual

      -
      Version 1.6  — Rev. 2
      +

      + OpenLiteSpeed Web Server Users' Manual +

      +

      Version 1.7  — Rev. 17

      Client Revocation File⇑

      Description

      Specifies the file containing PEM-encoded CA CRL files enumerating revoked client certificates. This can be used as an alternative or in addition to Client Revocation Path.

      Syntax

      Filename which can be an absolute path or a relative path to $SERVER_ROOT.

      -
      +
      diff --git a/dist/docs/VHSecurity_Help.html b/dist/docs/VHSecurity_Help.html index b94eee076..7b6ae7e2c 100644 --- a/dist/docs/VHSecurity_Help.html +++ b/dist/docs/VHSecurity_Help.html @@ -14,8 +14,10 @@
      openlitespeed logo
      -

      OpenLiteSpeed Web Server Users' Manual

      -
      Version 1.6  — Rev. 2
      +

      + OpenLiteSpeed Web Server Users' Manual +

      +

      Version 1.7  — Rev. 17

      Configuration
      -

      Virtual Host Security

      Table of Contents

      reCaptcha Protection

      +

      Virtual Host Security

      Table of Contents

      reCAPTCHA Protection

      Enable reCAPTCHA | Site Key | Secret Key | reCAPTCHA Type | Max Tries | Concurrent Request Limit

      +
      Bubblewrap Container

      +Bubblewrap Container

      Access Control

      Allowed List | Denied List

      Authorization Realms

      Realm Name | User DB Location | User DB Max Cache Size | User DB Cache Timeout (secs) | Group DB Location | Group DB Max Cache Size | Group DB Cache Timeout (secs)

      -

      reCaptcha Protection⇑

      Description

      reCaptcha Protection is a service provided as a way to mitigate heavy server load. reCaptcha Protection will activate after one of the below situations is hit. Once active, all requests by NON TRUSTED(as configured) clients will be redirected to a reCAPTCHA validation page. After validation, the client will be redirected to their desired page.

      The following situations will activate reCaptcha Protection:
      1. The server or vhost concurrent requests count passes the configured connection limit.
      2. Anti-DDoS is enabled and a client is hitting a url in a suspicious manner. The client will redirect to reCAPTCHA first instead of getting denied when triggered.
      3. WP Brute Force protection is enabled and action is set to 'Captcha or Drop’. When a brute force attack is detected, the client will redirect to reCAPTCHA first. After max tries is reached, the connection will be dropped, as per the ‘drop’ option.
      4. A new rewrite rule environment is provided to activate reCAPTCHA via RewriteRules. 'verifycaptcha' can be set to redirect clients to reCAPTCHA. A special value ': deny' can be set to deny the client if it failed too many times. For example, [E=verifycaptcha] will always redirect to reCAPTCHA until verified. [E=verifycaptcha: deny] will redirect to reCAPTCHA until Max Tries is hit, after which the client will be denied.

      -

      Enable reCAPTCHA⇑

      Description

      Enable the reCaptcha Protection feature at the current level. This setting must be set to Yes at the Server level before the reCaptcha Protection feature can be used.

      Default values:
      Server-level: Yes
      VH-Level: Inherit Server level setting

      Syntax

      Select from radio box

      +

      reCAPTCHA Protection⇑

      Description

      reCAPTCHA Protection is a service provided as a way to mitigate heavy server load. reCAPTCHA Protection will activate after one of the below situations is hit. Once active, all requests by NON TRUSTED(as configured) clients will be redirected to a reCAPTCHA validation page. After validation, the client will be redirected to their desired page.

      The following situations will activate reCAPTCHA Protection:
      1. The server or vhost concurrent requests count passes the configured connection limit.
      2. Anti-DDoS is enabled and a client is hitting a url in a suspicious manner. The client will redirect to reCAPTCHA first instead of getting denied when triggered.
      3. A new rewrite rule environment is provided to activate reCAPTCHA via RewriteRules. 'verifycaptcha' can be set to redirect clients to reCAPTCHA. A special value ': deny' can be set to deny the client if it failed too many times. For example, [E=verifycaptcha] will always redirect to reCAPTCHA until verified. [E=verifycaptcha: deny] will redirect to reCAPTCHA until Max Tries is hit, after which the client will be denied.

      +

      Enable reCAPTCHA⇑

      Description

      Enable the reCAPTCHA Protection feature at the current level. This setting must be set to Yes at the Server level before the reCAPTCHA Protection feature can be used.

      Default values:
      Server-level: Yes
      VH-Level: Inherit Server level setting

      Syntax

      Select from radio box

      Site Key⇑

      Description

      The site key is the public key provided by Google via its reCAPTCHA service. A default Site Key will be used if not set.

      Secret Key⇑

      Description

      The secret key is the private key provided by Google via its reCAPTCHA service. A default Secret Key will be used if not set.

      reCAPTCHA Type⇑

      Description

      Specify the reCAPTCHA type to use with the key pairs. If a key pair has not been provided and this setting is set to Not Set, a default key pair of type Invisible will be used.
      Checkbox will display a checkbox reCAPTCHA for the visitor to validate.
      Invisible will attempt to validate the reCAPTCHA automatically and if successful, will redirect to the desired page.

      Default value is Invisible.

      Syntax

      Select from drop down list

      Max Tries⇑

      Description

      Max Tries specifies the maximum number of reCAPTCHA attempts permitted before denying the visitor.

      Default value is 3.

      Syntax

      Integer number

      Concurrent Request Limit⇑

      Description

      The number of concurrent requests needed to activate reCAPTCHA. reCAPTCHA will be used until concurrent requests drop below this number.

      Default value is 15000.

      Syntax

      Integer number

      -

      Access Control⇑

      Description

      Specifies what sub networks and/or IP addresses can access the server. At the server level, this setting will affect all virtual hosts. You can also set up access control unique to each virtual host at the virtual host level. Virtual host level settings will NOT override server level settings.

      Blocking/Allowing an IP is determined by the combination of the allowed list and the denied list. If you want to block only certain IPs or sub-networks, put * or ALL in the Allowed List and list the blocked IPs or sub-networks in the Denied List. If you want to allow only certain IPs or sub-networks, put * or ALL in the Denied List and list the allowed IPs or sub-networks in the Allowed List. The setting of the smallest scope that fits for an IP will be used to determine access.

      Server Level: Trusted IPs or sub-networks must be specified in the Allowed List by adding a trailing "T". Trusted IPs or sub-networks are not affected by connection/throttling limits. Only server level access control can set up trusted IPs/sub-networks.

      Tips

      Use this at the server level for general restrictions that apply to all virtual hosts.

      -

      Allowed List⇑

      Description

      Specifies the list of IPs or sub-networks allowed. * or ALL are accepted.

      Syntax

      Comma delimited list of IP addresses or sub-networks. A trailing "T" can be used to indicate a trusted IP or sub-network, such as 192.168.1.*T.

      Example

      Sub-networks: 192.168.1.0/255.255.255.0, 192.168.1.0/24, 192.168.1, or 192.168.1.*
      IPv6 addresses: ::1 or [::1]
      IPv6 subnets: 3ffe:302:11:2:20f:1fff:fe29:717c/64 or [3ffe:302:11:2:20f:1fff:fe29:717c]/64

      Tips

      Trusted IPs or sub-networks set at the server level access control will be excluded from connection/throttling limits.

      -

      Denied List⇑

      Description

      Specifies the list of IPs or sub-networks disallowed.

      Syntax

      Comma delimited list of IP addresses or sub-networks. * or ALL are accepted.

      Example

      Sub-networks: 192.168.1.0/255.255.255.0, 192.168.1.0/24, 192.168.1, or 192.168.1.*
      IPv6 addresses: ::1 or [::1]
      IPv6 subnets: 3ffe:302:11:2:20f:1fff:fe29:717c/64 or [3ffe:302:11:2:20f:1fff:fe29:717c]/64
      -

      Authorization Realms⇑

      Description

      Lists all authorization realms for this virtual host. Authorization realms are used to block unauthorized users from accessing protected web pages. A realm is a user directory containing usernames and passwords with optional group classifications. Authorization is performed at context level. Since different contexts can share the same realm (user database), so realms are defined separately from the contexts that use them. You can refer to a realm by these names in context configuration.

      +

      Bubblewrap Container⇑

      Description

      Set to On if you wish to start CGI processes (including PHP programs) in a bubblewrap sandbox. See https://wiki.archlinux.org/index.php/Bubblewrap for details on using bubblewrap. Bubblewrap must be installed on your system prior to using this setting.

      This setting cannot be turned on at the Virtual Host level if set to "Disabled" at the Server level.

      Default values:
      Server level: Disabled
      VH level: Inherit Server level setting

      Syntax

      Select from drop down list

      +

      Access Control⇑

      Description

      Specifies what sub networks and/or IP addresses can access the server. At the server level, this setting will affect all virtual hosts. You can also set up access control unique to each virtual host at the virtual host level. Virtual host level settings will NOT override server level settings.

      Blocking/Allowing an IP is determined by the combination of the allowed list and the denied list. If you want to block only certain IPs or sub-networks, put * or ALL in the Allowed List and list the blocked IPs or sub-networks in the Denied List. If you want to allow only certain IPs or sub-networks, put * or ALL in the Denied List and list the allowed IPs or sub-networks in the Allowed List. The setting of the smallest scope that fits for an IP will be used to determine access.

      Server Level: Trusted IPs or sub-networks must be specified in the Allowed List by adding a trailing "T". Trusted IPs or sub-networks are not affected by connection/throttling limits. Only server level access control can set up trusted IPs/sub-networks.

      Tips

      Use this at the server level for general restrictions that apply to all virtual hosts.

      +

      Allowed List⇑

      Description

      Specifies the list of IPs or sub-networks allowed. * or ALL are accepted.

      Syntax

      Comma delimited list of IP addresses or sub-networks. A trailing "T" can be used to indicate a trusted IP or sub-network, such as 192.168.1.*T.

      Example

      Sub-networks: 192.168.1.0/255.255.255.0, 192.168.1.0/24, 192.168.1, or 192.168.1.*
      IPv6 addresses: ::1 or [::1]
      IPv6 subnets: 3ffe:302:11:2:20f:1fff:fe29:717c/64 or [3ffe:302:11:2:20f:1fff:fe29:717c]/64

      Tips

      Trusted IPs or sub-networks set at the server level access control will be excluded from connection/throttling limits.

      +

      Denied List⇑

      Description

      Specifies the list of IPs or sub-networks disallowed.

      Syntax

      Comma delimited list of IP addresses or sub-networks. * or ALL are accepted.

      Example

      Sub-networks: 192.168.1.0/255.255.255.0, 192.168.1.0/24, 192.168.1, or 192.168.1.*
      IPv6 addresses: ::1 or [::1]
      IPv6 subnets: 3ffe:302:11:2:20f:1fff:fe29:717c/64 or [3ffe:302:11:2:20f:1fff:fe29:717c]/64
      +

      Authorization Realms⇑

      Description

      Lists all authorization realms for this virtual host. Authorization realms are used to block unauthorized users from accessing protected web pages. A realm is a user directory containing usernames and passwords with optional group classifications. Authorization is performed at context level. Since different contexts can share the same realm (user database), so realms are defined separately from the contexts that use them. You can refer to a realm by these names in context configuration.

      Realm Name⇑

      Description

      Specifies a unique name for the authorization realm.

      -

      User DB Location⇑

      Description

      Specifies the location of the user database. For DB type Password File, it is the path to the flat file containing user/password definitions. You can edit this file through the WebAdmin console by clicking on the filename.

      Each line of the user file contains a username followed by a colon, followed by a crypt() encrypted password, optionally followed by a colon and group names that user belongs to. Group names are delimitated by commas. If group information is specified in the user database, then the group database will not be checked.

      Example:

      john:HZ.U8kgjnMOHo:admin,user


      For DB type LDAP, it is the LDAP URL to query for the user information. For each valid user, the authentication data stored in the LDAP server should contain at least the user id and user password. One and only one record should be returned in the LDAP search request based on the this URL and username received in the HTTP Authentication header. "$k" must be specified in the filter part of the URL and it will be replaced with the username. The user password attribute must be returned in the query result. The attribute name of the user password is specified by Password Attribute. Group information can be optionally specified by the Member-of Attribute.

      Example: At minimum, a user can be defined in LDAP with object classes: uidObject, simpleSecurityObject and organizationalRole. The following URL could be used:

      ldap://localhost/ou=UserDB,dc=example,dc=com???(&(objectClass=*)(uid=$k))

      Syntax

      Path to user DB file or LDAP URL (RFC 2255).

      Tips

      It is recommended to store user password files outside of the document tree. If a user password file has to be placed inside document tree, simply name it with a leading ".ht" like .htuser to prevent it being served as a static file. LiteSpeed Web Server does not serve files prefixed with ".ht".

      See Also

      Group DB Location, Password Attribute, Member-of Attribute

      -

      User DB Max Cache Size⇑

      Description

      Specifies the maximum cache size of the user database. Recently accessed user authentication data will be cached in memory to provide maximum performance.

      Syntax

      Integer number

      Tips

      As a larger cache will consume more memory, a higher value may or may not provide better performance. Set it to an appropriate size according to your user database size and site usage.

      -

      User DB Cache Timeout (secs)⇑

      Description

      Specifies how often the backend user database will be checked for changes. Every entry in the cache has a timestamp. When cached data is older than the specified timeout, the backend database will be checked for changes. If there is no change, the timestamp will be reset to the current time, otherwise the new data will be loaded. Sevrer reload and graceful restart will clear the cache immediately.

      Syntax

      Integer number

      Tips

      If the backend database does not change very often, set a longer timeout for better performance.

      -

      Group DB Location⇑

      Description

      Specifies the location of the group database.
      Group information can be set either in the user database or in this standalone group DB. For user authentication, the user DB will be checked first. If the user DB also contains group information, then the group DB will not be checked.

      For the DB type Password File, the group DB location should be the path to the flat file containing group definitions. You can edit this file through the WebAdmin console by clicking on the filename.

      Each line of a group file should contain a groupname followed by a colon, followed by space delimited group of usernames. Example:

      testgroup: user1 user2 user3

      For the DB type LDAP, the group DB location should be the LDAP URL to query for group information. For each valid group, one and only one record should be returned in the LDAP search request based on this URL and the group name specified in Require (Authorized Users/Groups). "$k" must be specified in the filter part of the URL and it will be replaced with the group name. The name of the attribute that specifies members in this group is specified by the Group Member Attribute.

      Example: If objectClass posixGroup is being used to store group information. The following URL could be used:
      ldap://localhost/ou=GroupDB,dc=example,dc=com???(&(objectClass=*)(cn=$k))

      Syntax

      Filename which can be an absolute path or a relative path to $SERVER_ROOT, $VH_ROOT.

      Tips

      It is recommended to store a group file outside the document tree. If it has to be placed inside document tree, simply name it with a leading ".ht" like .htgroup, to prevent the file being served as a static file. LiteSpeed Web Server does not serve files prefixed with ".ht".

      See Also

      User DB Location, Context Require (Authorized Users/Groups), Group Member Attribute

      -

      Group DB Max Cache Size⇑

      Description

      Specifies the maximum cache size of the group database.

      Syntax

      Integer number

      Tips

      As a larger cache will consume more memory, a higher value may or may not provide better performance. Set it to an appropriate size according to your user database size and site usage.

      See Also

      User DB Max Cache Size

      -
      +

      User DB Location⇑

      Description

      Specifies the location of the user database. It is recommended that the database be stored under the $SERVER_ROOT/conf/vhosts/$VH_NAME/ directory.

      For DB type Password File, it is the path to the flat file containing user/password definitions. You can edit this file through the WebAdmin console by clicking on the filename.

      Each line of the user file contains a username followed by a colon, followed by a crypt() encrypted password, optionally followed by a colon and group names that user belongs to. Group names are delimitated by commas. If group information is specified in the user database, then the group database will not be checked.

      Example:

      john:HZ.U8kgjnMOHo:admin,user

      Syntax

      Path to user DB file.

      See Also

      Group DB Location, Password Attribute, Member-of Attribute

      +

      User DB Max Cache Size⇑

      Description

      Specifies the maximum cache size of the user database. Recently accessed user authentication data will be cached in memory to provide maximum performance.

      Syntax

      Integer number

      Tips

      As a larger cache will consume more memory, a higher value may or may not provide better performance. Set it to an appropriate size according to your user database size and site usage.

      +

      User DB Cache Timeout (secs)⇑

      Description

      Specifies how often the backend user database will be checked for changes. Every entry in the cache has a timestamp. When cached data is older than the specified timeout, the backend database will be checked for changes. If there is no change, the timestamp will be reset to the current time, otherwise the new data will be loaded. Sevrer reload and graceful restart will clear the cache immediately.

      Syntax

      Integer number

      Tips

      If the backend database does not change very often, set a longer timeout for better performance.

      +

      Group DB Location⇑

      Description

      Specifies the location of the group database. It is recommended that the database be stored under the $SERVER_ROOT/conf/vhosts/$VH_NAME/ directory.

      Group information can be set either in the user database or in this standalone group DB. For user authentication, the user DB will be checked first. If the user DB also contains group information, then the group DB will not be checked.

      For the DB type Password File, the group DB location should be the path to the flat file containing group definitions. You can edit this file through the WebAdmin console by clicking on the filename.

      Each line of a group file should contain a groupname followed by a colon, followed by space delimited group of usernames. Example:

      testgroup: user1 user2 user3

      Syntax

      Filename which can be an absolute path or a relative path to $SERVER_ROOT, $VH_ROOT.

      See Also

      User DB Location, Context Require (Authorized Users/Groups), Group Member Attribute

      +

      Group DB Max Cache Size⇑

      Description

      Specifies the maximum cache size of the group database.

      Syntax

      Integer number

      Tips

      As a larger cache will consume more memory, a higher value may or may not provide better performance. Set it to an appropriate size according to your user database size and site usage.

      See Also

      User DB Max Cache Size

      +
      -
      +
      diff --git a/dist/docs/VHWebSocket_Help.html b/dist/docs/VHWebSocket_Help.html index b0cfb0992..32e8f485e 100644 --- a/dist/docs/VHWebSocket_Help.html +++ b/dist/docs/VHWebSocket_Help.html @@ -14,8 +14,10 @@
      openlitespeed logo
      -

      OpenLiteSpeed Web Server Users' Manual

      -
      Version 1.6  — Rev. 2
      +

      + OpenLiteSpeed Web Server Users' Manual +

      +

      Version 1.7  — Rev. 17

        @@ -60,7 +62,9 @@
        Version 1.6  — Rev. 2
      • Context
        • @@ -97,7 +107,7 @@

        Table of Contents

        URI⇑

        Description

        Specifies the URI(s) that will use this WebSocket backend. Traffic to this URI will only be forwarded to the WebSocket backend when it contains a WebSocket upgrade request.

        Traffic without this upgrade request will automatically be forwarded to the Context that this URI belongs to. If no Context exists for this URI, LSWS will treat this traffic as though it is accessing a static context with the location $DOC_ROOT/URI.

        Syntax

        A plain URI (starting with "/"). If the URI ends with a "/", then this WebSocket backend will include all sub-URIs under this URI.

        Example

        Using the WebSocket proxy in conjunction with a Context allows you to serve different kinds of traffic in different ways on the same page, thus optimizing performance. You can send WebSocket traffic to the WebSocket backend, while setting up a static context so that LSWS can serve the page's static content, or an LSAPI context so LSWS will serve PHP content (both of which LSWS does more efficiently than the WebSocket backend).

        Address⇑

        Description

        A unique socket address used by the WebSocket backend. IPv4 sockets, IPv6 sockets, and Unix Domain Sockets (UDS) are supported. IPv4 and IPv6 sockets can be used for communication over the network. UDS can only be used when the WebSocket backend resides on the same machine as the server.

        Syntax

        IPv4 or IPV6 address:port or UDS://path

        Example

        127.0.0.1:5434
        UDS://tmp/lshttpd/php.sock.

        Tips

        If the WebSocket backend runs on the same machine, UDS is preferred. If you have to use an IPv4 or IPv6 socket, set the IP address to localhost or 127.0.0.1, so the WebSocket backend is inaccessible from other machines.
        Unix Domain Sockets generally provide higher performance than IPv4 or IPv6 sockets.

        -
        +
        diff --git a/dist/docs/VirtualHosts_Help.html b/dist/docs/VirtualHosts_Help.html index a0866844e..c534ba67b 100644 --- a/dist/docs/VirtualHosts_Help.html +++ b/dist/docs/VirtualHosts_Help.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

          @@ -60,7 +62,9 @@
          Version 1.6  — Rev. 2
        • Context
          • @@ -91,29 +101,28 @@

          Virtual Hosts Basic

          This page li

          Table of Contents

          Base

          Virtual Host Name | Virtual Host Root | Config File

          Connection

          -Max Keep-Alive Requests | Smart Keep-Alive

          +Max Keep-Alive Requests

          Security

          Follow Symbolic Link | Enable Script | Restrained | External App Set UID Mode | suEXEC User | suEXEC Group

          Virtual Host

          Static Requests/Second | Dynamic Requests/Second | Outbound Bandwidth (bytes/sec) | Inbound Bandwidth (bytes/sec)

          -

          Virtual Host Name⇑

          Description

          A unique name for a virtual host. It is recommended to use the virtual host's domain name as the Virtual Host Name. Virtual Host Name can be referred to using the variable $VH_NAME.

          +

          Virtual Host Name⇑

          Description

          A unique name for a virtual host. It is recommended to use the virtual host's domain name as the Virtual Host Name. Virtual Host Name can be referred to using the variable $VH_NAME.

          Virtual Host Root⇑

          Description

          Specifies the root directory of the virtual host. Note: This is NOT the document root. It is recommended to place all files related to the virtual host (like log files, html files, CGI scripts, etc.) under this directory. Virtual Host Root can be referred to using the variable $VH_ROOT.

          Syntax

          An absolute path or a relative path to $SERVER_ROOT.

          Tips

          Place different virtual hosts on different hard drives.

          Config File⇑

          Description

          The configuration filename and directory for this virtual host. The configuration file must be under the $SERVER_ROOT/conf/vhosts/ directory.

          Syntax

          Filename which can be an absolute path or a relative path to $SERVER_ROOT.

          Tips

          $SERVER_ROOT/conf/vhosts/$VH_NAME/vhconf.conf is recommended

          -

          Max Keep-Alive Requests⇑

          Description

          Specifies the maximum requests that can be served through a keep-alive (persistent) connection. Connections will be closed once this limit is reached. You can specify a different limit for each virtual hosts. This number cannot exceed the server-level Max Keep-Alive Requests limit.

          Syntax

          Integer number

          Tips

          Set to a reasonably high value. A value of "1" or less will disable keep-alive connections.

          See Also

          Max Keep-Alive Requests

          -

          Smart Keep-Alive⇑

          Description

          Specifies whether to turn on Smart Keep-Alive for this virtual host. This option is only effective if Smart Keep-Alive is enabled at the server level and Max Keep-Alive Requests is greater than 1.

          Syntax

          Select from radio box

          Tips

          Enable this for busy web sites.

          -

          Description

          Specifies whether to follow symbolic links in this virtual host. IF OWNER MATCH option will follow a symbolic link only if it has the same ownership. This setting overrides the default server-level setting.

          Syntax

          Select from drop down list

          Tips

          For better security, disable this feature. For better performance, enable it.

          -

          Enable Script⇑

          Description

          Specifies whether scripting (non-static pages) is allowed in this virtual host. If disabled, CGI, FastCGI, LSAPI, Servlet engines and other scripting languages will not be allowed in this virtual host. Therefore, if you want to use a script handler, you need to enable it here as well.

          Syntax

          Select from radio box

          -

          Restrained⇑

          Description

          Specifies whether files beyond this virtual host root($VH_ROOT) can be accessed though this web site. If set to Yes, only files under $VH_ROOT can be accessed and access to symbolic links or context pointing to files or directories beyond $VH_ROOT will be denied. This, however, does not limit the accessibility of CGI scripts. This is useful in the shared hosting environment. Follow Symbolic Link can be set to Yes to allow users to use symbolic links under $VH_ROOT, but not anything beyond $VH_ROOT.

          Syntax

          Select from radio box

          Tips

          Turn it on in the shared hosting environment.

          -

          External App Set UID Mode⇑

          Description

          Specifies how user ID is set for an external application process. Three choices are available:

          • Server UID: Set the user/group ID of external application processes to the same as the server's user/group ID.
          • CGI File UID: Set the user/group ID of external CGI processes based on the user/group ID of the executable. This option only applies to CGI, not FastCGI or LSPHP.
          • Doc Root UID: Set the user/group ID of external application processes based on the user/group ID of the document root of the current virtual host.


          Default value: Server UID

          Syntax

          Select from drop down list

          Tips

          In the shared hosting environment, it is recommended to use the CGI File UID or Doc Root UID modes to prevent files owned by one virtual host from being accessed by the external application scripts of another virtual host.

          +

          Max Keep-Alive Requests⇑

          Description

          Specifies the maximum requests that can be served through a keep-alive (persistent) connection. Connections will be closed once this limit is reached. You can specify a different limit for each virtual hosts. This number cannot exceed the server-level Max Keep-Alive Requests limit.

          Syntax

          Integer number

          Tips

          Set to a reasonably high value. A value of "1" or less will disable keep-alive connections.

          See Also

          Max Keep-Alive Requests

          +

          Description

          Specifies whether to follow symbolic links in this virtual host. IF OWNER MATCH option will follow a symbolic link only if it has the same ownership. This setting overrides the default server-level setting.

          Syntax

          Select from drop down list

          Tips

          For better security, disable this feature. For better performance, enable it.

          +

          Enable Script⇑

          Description

          Specifies whether scripting (non-static pages) is allowed in this virtual host. If disabled, CGI, FastCGI, LSAPI, Servlet engines and other scripting languages will not be allowed in this virtual host. Therefore, if you want to use a script handler, you need to enable it here as well.

          Syntax

          Select from radio box

          +

          Restrained⇑

          Description

          Specifies whether files beyond this virtual host root($VH_ROOT) can be accessed though this web site. If set to Yes, only files under $VH_ROOT can be accessed and access to symbolic links or context pointing to files or directories beyond $VH_ROOT will be denied. This, however, does not limit the accessibility of CGI scripts. This is useful in the shared hosting environment. Follow Symbolic Link can be set to Yes to allow users to use symbolic links under $VH_ROOT, but not anything beyond $VH_ROOT.

          Syntax

          Select from radio box

          Tips

          Turn it on in the shared hosting environment.

          +

          External App Set UID Mode⇑

          Description

          Specifies how user ID is set for an external application process. Three choices are available:

          • Server UID: Set the user/group ID of external application processes to the same as the server's user/group ID.
          • CGI File UID: Set the user/group ID of external CGI processes based on the user/group ID of the executable. This option only applies to CGI, not FastCGI or LSPHP.
          • Doc Root UID: Set the user/group ID of external application processes based on the user/group ID of the document root of the current virtual host.


          Default value: Server UID

          Syntax

          Select from drop down list

          Tips

          In the shared hosting environment, it is recommended to use the CGI File UID or Doc Root UID modes to prevent files owned by one virtual host from being accessed by the external application scripts of another virtual host.

          suEXEC User⇑

          Description

          At the current context level, run as this user. If set, this value will override the Virtual Host level ExtApp Set UID Mode setting.

          This configuration may be overridden at the External Application level using the Run As User setting.

          Default value: Not Set

          Syntax

          Valid user name or uid.

          suEXEC Group⇑

          Description

          At the current context level, run as this group. Either suEXEC User at the Virtual Host level, or Run As User at the External Application level, must be set for suEXEC Group to take effect.

          This configuration can be overridden at the External Application level using the Run As Group setting.

          Default value: suExec User setting value

          Syntax

          Valid group name or uid

          -

          Static Requests/Second⇑

          Description

          Specifies the maximum number of requests to static content coming from a single IP address that can be processed in a single second regardless of the number of connections established.

          When this limit is reached, all future requests are tar-pitted until the next second. Request limits for dynamically generated content are independent of this limit. Per-client request limits can be set at server- or virtual host-level. Virtual host-level settings override server-level settings.

          Syntax

          Integer number

          Tips

          Trusted IPs or sub-networks are not affected.

          See Also

          Dynamic Requests/Second

          -

          Dynamic Requests/Second⇑

          Description

          Specifies the maximum number of requests to dynamically generated content coming from a single IP address that can be processed in each second regardless of the number of connections established. When this limit is reached, all future requests to dynamic content are tar-pitted until the next second.

          The request limit for static content is independent of this limit. This per client request limit can be set at server or virtual host level. Virtual host-level settings override server-level settings.

          Syntax

          Integer number

          Tips

          Trusted IPs or sub-networks are not restrained by this limit.

          See Also

          Static Requests/Second

          -

          Outbound Bandwidth (bytes/sec)⇑

          Description

          The maximum allowed outgoing throughput to a single IP address, regardless of the number of connections established. The real bandwidth may end up being slightly higher than this setting for efficiency reasons. Bandwidth is allocated in 4KB units. Set to 0 to disable throttling. Per-client bandwidth limits (bytes/sec) can be set at the server or virtual host level where virtual host level settings override server level settings.

          Syntax

          Integer number

          Tips

          Set the bandwidth in 8KB units for better performance.

          Trusted IPs or sub-networks are not affected.

          See Also

          Inbound Bandwidth (bytes/sec)

          -

          Inbound Bandwidth (bytes/sec)⇑

          Description

          The maximum allowed incoming throughput from a single IP address, regardless of the number of connections established. The real bandwidth may end up being slightly higher than this setting for efficiency reasons. Bandwidth is allocated in 1KB units. Set to 0 to disable throttling. Per-client bandwidth limits (bytes/sec) can be set at the server or virtual host level where virtual host level settings override server level settings.

          Syntax

          Integer number

          Tips

          Trusted IPs or sub-networks are not affected.

          See Also

          Outbound Bandwidth (bytes/sec)

          +

          Static Requests/Second⇑

          Description

          Specifies the maximum number of requests to static content coming from a single IP address that can be processed in a single second regardless of the number of connections established.

          When this limit is reached, all future requests are tar-pitted until the next second. Request limits for dynamically generated content are independent of this limit. Per-client request limits can be set at server- or virtual host-level. Virtual host-level settings override server-level settings.

          Syntax

          Integer number

          Tips

          Trusted IPs or sub-networks are not affected.

          See Also

          Dynamic Requests/Second

          +

          Dynamic Requests/Second⇑

          Description

          Specifies the maximum number of requests to dynamically generated content coming from a single IP address that can be processed in each second regardless of the number of connections established. When this limit is reached, all future requests to dynamic content are tar-pitted until the next second.

          The request limit for static content is independent of this limit. This per client request limit can be set at server or virtual host level. Virtual host-level settings override server-level settings.

          Syntax

          Integer number

          Tips

          Trusted IPs or sub-networks are not restrained by this limit.

          See Also

          Static Requests/Second

          +

          Outbound Bandwidth (bytes/sec)⇑

          Description

          The maximum allowed outgoing throughput to a single IP address, regardless of the number of connections established. The real bandwidth may end up being slightly higher than this setting for efficiency reasons. Bandwidth is allocated in 4KB units. Set to 0 to disable throttling. Per-client bandwidth limits (bytes/sec) can be set at the server or virtual host level where virtual host level settings override server level settings.

          Syntax

          Integer number

          Tips

          Set the bandwidth in 8KB units for better performance.

          Trusted IPs or sub-networks are not affected.

          See Also

          Inbound Bandwidth (bytes/sec)

          +

          Inbound Bandwidth (bytes/sec)⇑

          Description

          The maximum allowed incoming throughput from a single IP address, regardless of the number of connections established. The real bandwidth may end up being slightly higher than this setting for efficiency reasons. Bandwidth is allocated in 1KB units. Set to 0 to disable throttling. Per-client bandwidth limits (bytes/sec) can be set at the server or virtual host level where virtual host level settings override server level settings.

          Syntax

          Integer number

          Tips

          Trusted IPs or sub-networks are not affected.

          See Also

          Outbound Bandwidth (bytes/sec)

          -
          +
          diff --git a/dist/docs/admin.html b/dist/docs/admin.html index 7b286fab6..c209437ee 100644 --- a/dist/docs/admin.html +++ b/dist/docs/admin.html @@ -14,8 +14,10 @@
          openlitespeed logo
          -

          OpenLiteSpeed Web Server Users' Manual

          -
          Version 1.6  — Rev. 2
          +

          + OpenLiteSpeed Web Server Users' Manual +

          +

          Version 1.7  — Rev. 17

          -
          +
          diff --git a/dist/docs/css/hdoc.css b/dist/docs/css/hdoc.css index f03468ece..b6545ce88 100644 --- a/dist/docs/css/hdoc.css +++ b/dist/docs/css/hdoc.css @@ -161,7 +161,7 @@ a:hover{ color: #4caf50; } color: #d14; background-color: #f7f7f9; border: 1px solid #e1e1e8; - white-space: nowrap; + white-space: pre-wrap; -webkit-border-radius: 3px; -moz-border-radius: 3px; border-radius: 3px; diff --git a/dist/docs/index.html b/dist/docs/index.html index ef633f54d..defbf021c 100644 --- a/dist/docs/index.html +++ b/dist/docs/index.html @@ -14,8 +14,10 @@
          openlitespeed logo
          -

          OpenLiteSpeed Web Server Users' Manual

          -
          Version 1.6  — Rev. 2
          +

          + OpenLiteSpeed Web Server Users' Manual +

          +

          Version 1.7  — Rev. 17

          -
          -

          OpenLiteSpeed Web Server 1.6

          -

          Users' Manual

          -

          — Rev. 2

          -
          -
          +
          +

          + OpenLiteSpeed Web Server 1.7 +

          + Users' Manual +

          + — Rev. 17 +

          +
          +
          +

          Table of Contents

          -
          -

          Table of Contents

          -
          - - -
            -
          1. License
            2. -
          2. Introduction
            3. -
          3. Installation/Uninstallation
            4. -
          4. Administration
            5. -
          5. Security
            6. -
          6. Configurations
            7. -
          -

          For more information, visit our OpenLiteSpeed Knowledge Base

          +
            +
          1. License
            2. +
          2. Introduction
            3. +
          3. + Installation/Uninstallation +
            4. +
          4. Administration
            5. +
          5. Security
            6. +
          6. Configurations
            7. +
          +

          + For more information, visit our + OpenLiteSpeed Knowledge Base +

          -
          +
          diff --git a/dist/docs/install.html b/dist/docs/install.html index 7c1719e4b..5bb7275ab 100644 --- a/dist/docs/install.html +++ b/dist/docs/install.html @@ -14,8 +14,10 @@
          openlitespeed logo
          -

          OpenLiteSpeed Web Server Users' Manual

          -
          Version 1.6  — Rev. 2
          +

          + OpenLiteSpeed Web Server Users' Manual +

          +

          Version 1.7  — Rev. 17

            @@ -60,7 +62,9 @@
            Version 1.6  — Rev. 2
          • Context
            • @@ -88,9 +98,10 @@
            Version 1.6  — Rev. 2
            Home

            Installation/Uninstallation

            -

            Minimum system requirements

            +

            Minimum system requirements

              -
            • Operating System: +
            • + Operating System:
              • Linux(i386): kernel 2.4 and up, glibc-2.2 and up
              • CentOS: 5 and up
                • @@ -100,14 +111,16 @@

                Minimum system requirements

              • MacOSX: 10.3 and up
              • -
            • CPU: +
            • + CPU:
              • Intel: 80486 and up
              • PowerPC: PowerPC G4
            • Memory: 32MB and up
              • -
            • Disk: +
            • + Disk:
              • Installation: 200MB
              • Runtime: 300MB and up, swapping space depends on usage.
                • @@ -115,106 +128,142 @@

                Minimum system requirements

              -

              Installation

              +

              Installation

              - Installation must be performed in a command line terminal. For testing purposes, LiteSpeed Web Server can be - installed into a home directory by a non-privileged user. For production use, it should be installed into a system directory. + Installation must be performed in a command line terminal. For testing + purposes, LiteSpeed Web Server can be installed into a home directory by a + non-privileged user. For production use, it should be installed into a system + directory.

              - In Mac OS X, the root user is disabled by default. It can be enabled using a series of actions detailed on the Apple - website. You can also use the sudo command to install LSWS into a system directory without enabling the root user, but - system folders will still only be manipulable by the root user. This means that every time you want to control LSWS from - the command line terminal (like when you want to start or stop LSWS), you will have to use the sudo command. + In Mac OS X, the root user is disabled by default. It can be enabled using a + series of actions detailed on the Apple website. You can also use the sudo + command to install LSWS into a system directory without enabling the root + user, but system folders will still only be manipulable by the root user. + This means that every time you want to control LSWS from the command line + terminal (like when you want to start or stop LSWS), you will have to use the + sudo command.

              -

              Installation Steps:

              +

              Installation Steps:

              - Visit the OpenLiteSpeed Knowledge Base + Visit the + + OpenLiteSpeed Knowledge Base + for a list of installation methods.

              -

              Getting Started

              +

              Getting Started

              1. -

                For detailed information on controlling the server processes, please see the Administration Guide.

                - To start the server, simply run [your_install_dir]/bin/lswsctrl start. (To stop it, run [your_install_dir]/bin/lswsctrl stop.) + For detailed information on controlling the server processes, please see + the Administration Guide. +

                +

                + To start the server, simply run [your_install_dir]/bin/lswsctrl start. + (To stop it, run [your_install_dir]/bin/lswsctrl stop.)

              2. A sample site should be running on the server.

                - To access your site, point your browser to http://[address]:8088/, [address] being the IP address or domain name of - your web server machine. Use "localhost" if the server is on the machine you are using. "8088" is the default - port. If you chose another port for LiteSpeed during installation, use the port you designated. + To access your site, point your browser to http://[address]:8088/, + [address] being the IP address or domain name of your web server machine. + Use "localhost" if the server is on the machine you are using. + "8088" is the default port. If you chose another port for LiteSpeed + during installation, use the port you designated.

                - A congratulations page linked to other testing pages should load into the browser when pointed to the above address. If - not, try testing the WebAdmin interface. + A congratulations page linked to other testing pages should load into the + browser when pointed to the above address. If not, try testing the + WebAdmin Console interface.

              3. The default port for the WebAdmin console is 7080.

                - Plug http://[address]:7080/, into your browser to go to the WebAdmin interface. (If you changed the port for WebAdmin - during installation, use that port instead.) + Plug http://[address]:7080/, into your browser to go to the WebAdmin + interface. (If you changed the port for WebAdmin during installation, + use that port instead.)

                - Remember that for [address] you can use "localhost" if you're currently using the machine the server is on. + Remember that for [address] you can use "localhost" if you're + currently using the machine the server is on.

                - The WebAdmin welcome page should load. Click the "Log on" link and use the administrator's username - and password specified during installation to log on. + The WebAdmin welcome page should load. Click the "Log on" link + and use the administrator's username and password specified during + installation to log on.

                - For detailed information regarding configuration, please refer to our Configuration Guide, or click the "Help" - link at the top of each page. + For detailed information regarding configuration, please refer to our + Configuration Guide, or click the "Help" link at the top of + each page.

              4. -

                If your server uses firewall, please make sure that localhost is trusted.

                -

                For instance, Linux with IPTables should include a rule ALLOW INPUT from LO.

                +

                + If your server uses firewall, please make sure that localhost is trusted. +

                +

                + For instance, Linux with IPTables should include a rule ALLOW INPUT from + LO. +

              5. - If your web site and the WebAdmin interface are inaccessible, please take a look at the error log - [your_install_dir]/logs/error.log. + If your web site and the WebAdmin Console are inaccessible, please take + a look at the error log [your_install_dir]/logs/error.log.

                - If there is a TCP port conflict with other server applications, the web server should be reinstalled with an available port. - The following command can be used to find an available port: + If there is a TCP port conflict with other server applications, the web + server should be reinstalled with an available port. The following + command can be used to find an available port: netstat -an | grep XXXX - XXXX is a port number. If the port is available, the command will produce no output. + XXXX is a port number. If the port is available, the command will produce + no output. +

                +

                + If the swapping directory is not writable, you can either grant writing + permission for the swapping directory to the user whom the web server is + running as, or change the swapping directory's configurations manually. + The swapping directory is configured in the server's XML configuration + file: [your_install_dir]/conf/httpd_config.xml. Search the XML file for + swappingDir. The default location for the swapping directory is + /tmp/lshttpd/swap.

                - If the swapping directory is not writable, you can either grant writing permission for the swapping directory to the user - whom the web server is running as, or change the swapping directory's configurations manually. The swapping directory - is configured in the server's XML configuration file: [your_install_dir]/conf/httpd_config.xml. Search the XML file for - swappingDir. The default location for the swapping directory is /tmp/lshttpd/swap. + If you still have problems with installation, please check out our wiki + or post your problem on our support forum.

                -

                If you still have problems with installation, please check out our wiki or post your problem on our support forum.

              -

              Notes

              +

              Notes

              • - OpenLiteSpeed supports both native LiteSpeed XML configuration files and plain text configuration files (for those used to - editing Apache's httpd.conf). Run [your_install_dir]/conf/switch_config.sh to switch between these formats. + OpenLiteSpeed supports both native LiteSpeed XML configuration files and + plain text configuration files (for those used to editing Apache's + httpd.conf). Run [your_install_dir]/conf/switch_config.sh to switch between + these formats.
              • - On FreeBSD, Mac OS X, Ubuntu, and Debian, the shipped PHP (for CentOS) will not run. You will need to build a new - PHP for OpenLiteSpeed in order to run PHP applications with OpenLiteSpeed. + On FreeBSD, Mac OS X, Ubuntu, and Debian, the shipped PHP (for CentOS) will + not run. You will need to build a new PHP for OpenLiteSpeed in order to run + PHP applications with OpenLiteSpeed.
              -

              Uninstallation Steps

              +

              Uninstallation Steps

                -
              1. Stop OpenLiteSpeed if it is running: [your_install_dir]/bin/lswsctrl stop
                2. +
              2. + Stop OpenLiteSpeed if it is running: [your_install_dir]/bin/lswsctrl stop +
              3. Remove the install directory: rm -rf [your_install_dir]
                4. -
              -
            +
            diff --git a/dist/docs/intro.html b/dist/docs/intro.html index 70aee4aba..0669d8015 100644 --- a/dist/docs/intro.html +++ b/dist/docs/intro.html @@ -14,8 +14,10 @@
            openlitespeed logo
            -

            OpenLiteSpeed Web Server Users' Manual

            -
            Version 1.6  — Rev. 2
            +

            + OpenLiteSpeed Web Server Users' Manual +

            +

            Version 1.7  — Rev. 17

            -
            +
            diff --git a/dist/docs/ja-JP/AdminGeneral_Help.html b/dist/docs/ja-JP/AdminGeneral_Help.html index c0cd11abf..5094a4269 100644 --- a/dist/docs/ja-JP/AdminGeneral_Help.html +++ b/dist/docs/ja-JP/AdminGeneral_Help.html @@ -86,9 +86,9 @@

            管理コンソールの一般

            目次

            一般

            コアダンプを有効にする | セッションタイムアウト（秒）

            バーチャルホストログ

            -サーバーのログを使用する | File Name | ログレベル | ローテーションサイズ（バイト）

            +サーバーのログを使用する | File Name | ログレベル | ローテーションサイズ（バイト） | Keep Days

            アクセスログ

            -ログ制御 | ファイル名 | パイプロガー | Log Format | ログヘッダー | ローテーションサイズ（バイト） | 保持日数 | バイトログ | アーカイブを圧縮する

            +ログ制御 | ファイル名 | パイプロガー | Log Format | ログヘッダー | ローテーションサイズ（バイト） | Keep Days | バイトログ | アーカイブを圧縮する

        コアダンプを有効にする⇑

        説明

        サーバーが「root」ユーザーによって開始されたときにコア・ダンプを使用可能にするかどうかを指定します。 最新のUnixシステムでは、セキュリティ上の理由から、ユーザーIDまたはグループIDを変更するプロセスはコアファイルをダンプできません。 ただし、コアダンプを持つ問題の根本原因を特定する方がはるかに簡単です。 このオプションは、Linuxカーネル2.4以上でのみ動作します。 Solarisユーザーは coreadm コマンドを使用してこの機能を制御する必要があります。

        構文

        ラジオボックスから選択

        ヒント

        [セキュリティ]サーバログファイルにコアファイルが作成されていないと表示されている場合にのみ有効にします。 コアファイルを生成した直後に無効にしてください。 コアダンプが作成されたときにバグレポートを提出してください。

        セッションタイムアウト（秒）⇑

        説明

        WebAdmin Consoleのセッションタイムアウトの長さをカスタマイズします。 デフォルトは60秒です。

        構文

        整数

        ヒント

        [セキュリティ]プロダクション使用に適切な値を設定します。通常は300秒未満です。

        @@ -96,16 +96,16 @@

        目次

        File Name⇑

        説明

        ログファイルのパスを指定します。

        構文

        ファイル名への絶対パス又は$SERVER_ROOT、$VH_ROOTからの相対パス。

        ヒント

        [パフォーマンス]ログファイルを別のディスクに配置します。

        ログレベル⇑

        説明

        ロギングのレベルを指定します。 使用可能なレベルは、ERROR、WARNING、NOTICE、INFO、DEBUGです。 現在の設定以上のレベルのメッセージのみが記録されます。 DEBUGに設定する場合は、サーバログレベルをDEBUGに設定する必要があります。 デバッグのレベルは、デバッグレベルによってサーバーレベルでのみ制御されます。

        構文

        選択

        ヒント

        [パフォーマンス] デバッグレベルがNONE以外のレベルに設定されていない限り、DEBUGログレベルはパフォーマンスに影響を及ぼさず、推奨されます。

        参照

        デバッグレベル

        ローテーションサイズ（バイト）⇑

        説明

        現在のログファイルをロールオーバーする必要があるとき、つまりログローテーションを指定します。 ファイルサイズがロールオーバー制限を超えると、アクティブなログファイルは同じディレクトリにlog_name.mm_dd_yyyy（.sequence）という名前に変更され、新しいアクティブなログファイルが作成されます。 回転ログファイルが実際に作成されると、そのサイズはこのサイズ制限より少し大きくなることがあります。 ログのローテーションを無効にするには、 0 に設定します。

        構文

        整数

        ヒント

        キロ、メガ、ギガバイトの数字に「K」、「M」、「G」を追加します。

        +

        Keep Days⇑

        説明

        Specifies how many days the access log file will be kept on disk. Only rotated log files older than the specified number of days will be deleted. The current log file will not be touched regardless how many days worth of data it contains. If you do not want to auto-delete stale and very old log files, set this to 0.

        構文

        整数

        ログ制御⇑

        説明

        アクセスログを書き込むべき場所。 3つのオプションがあります:

        1. サーバのアクセスログに書き込む
        2. このバーチャルホストのアクセスログを作成する
        3. アクセスログを無効にする

        構文

        選択

        ファイル名⇑

        説明

        アクセスログファイル名。

        構文

        ファイル名への絶対パス又は$SERVER_ROOT、$VH_ROOTからの相対パス。

        ヒント

        [パフォーマンス]アクセスログファイルを別のディスクに配置します。

        パイプロガー⇑

        説明

        LiteSpeedがSTDINストリーム上のパイプを通じて送信するアクセスログデータを受け取る外部アプリケーションを指定します（ファイルハンドルは0）。 このフィールドが指定されると、アクセスログはロガーアプリケーションにのみ送信され、前のエントリで指定されたアクセスログファイルには送信されません。

        ロガーアプリケーションは、最初に外部アプリケーションセクションで定義する必要があります。 サーバー・レベルのアクセス・ロギングは、サーバー・レベルで定義された外部ロガー・アプリケーションのみを使用できます。 バーチャルホストレベルのアクセスロギングでは、バーチャルホストレベルで定義されたロガーアプリケーションのみを使用できます。

        ロガープロセスは、他の外部（CGI/FastCGI/LSAPI）プロセスと同じ方法で生成されます。 つまり、バーチャルホストの外部アプリ Set UID モード設定で指定されたユーザーIDとして実行され、特権ユーザーのために実行されることはありません。.

        LiteSpeed Webサーバーは、複数のロガーアプリケーションのインスタンスが設定されている場合、複数のロガーアプリケーション間で簡単なロードバランシングを実行します。 LiteSpeedサーバーは、常にロガーアプリケーションの数を可能な限り低く抑えようとします。 1つのロガーアプリケーションがアクセスログエントリを時間内に処理できない場合にのみ、サーバーはロガーアプリケーションの別のインスタンスを生成しようとします。

        ロガーがクラッシュした場合、Webサーバーは別のインスタンスを開始しますが、ストリームバッファーのログデータは失われます。 外部ロガーがログ・ストリームの速度と量に追いつけない場合、ログ・データを失う可能性があります。

        構文

        選択

        Log Format⇑

        説明

        アクセスログのログ形式を指定します。 ログフォーマットが設定されると、ログヘッダーの設定より優先されます。

        構文

        文字列。ログフォーマットの構文はApache 2.0のカスタムと互換性があります log format。

        例


        共通ログフォーマット（CLF）
        "%h %l %u %t \"%r\" %>s %b"

        バーチャルホストによる共通ログフォーマット
        "%v %h %l %u %t \"%r\" %>s %b"

        NCSA拡張/結合ログフォーマット
        "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"

        FoobarのログCookie値
        "%{Foobar}C"

        参照

        ログヘッダー

        ログヘッダー⇑

        説明

        Referer、UserAgent、HostのいずれかをHTTPリクエストヘッダとして記録するかどうかを指定します。

        構文

        チェックボックス

        ヒント

        [パフォーマンス]これらのヘッダーがアクセスログに必要ない場合は、これをオフにします。

        参照

        Log Format

        -

        保持日数⇑

        説明

        アクセスログファイルをディスクに保管する日数を指定します。 指定した日数より古いローテーションしたログファイルのみが削除されます。 現在のログファイルには、それに含まれるデータの日数にかかわらず、表示されません。 古いログファイルを自動削除しない場合は、 0 に設定します。

        構文

        整数

        バイトログ⇑

        説明

        帯域幅バイトのログファイルへのパスを指定します。 指定すると、cPanel互換の帯域幅ログが作成されます。 これにより、要求と応答本体の両方を含む要求に対して転送された合計バイトが記録されます。

        構文

        ファイル名への絶対パス又は$SERVER_ROOTからの相対パス

        ヒント

        [パフォーマンス]ログファイルを別のディスクに配置します。

        アーカイブを圧縮する⇑

        説明

        ディスク領域を節約するためにローテーションしたログファイルを圧縮するかどうかを指定します。

        構文

        ラジオボックスから選択

        ヒント

        ログファイルは圧縮率が高く、古いログのディスク使用量を減らすために推奨されます。

        -
        +
        diff --git a/dist/docs/ja-JP/AdminListeners_General_Help.html b/dist/docs/ja-JP/AdminListeners_General_Help.html index a40d36889..a3c7ad7a6 100644 --- a/dist/docs/ja-JP/AdminListeners_General_Help.html +++ b/dist/docs/ja-JP/AdminListeners_General_Help.html @@ -90,7 +90,7 @@

        目次

        ポート⇑

        説明

        リスナーのTCPポートを指定します。 スーパーユーザー（"root"）のみが1024より小さいポートを使用できます。 ポート80はデフォルトのHTTPポートです。 ポート443はデフォルトのHTTPSポートです。

        構文

        65535までの整数

        セキュア⇑

        説明

        Sこれがセキュア（SSL）リスナーかどうかを指定します。 セキュアリスナーの場合は、追加のSSL設定を適切に設定する必要があります。

        構文

        ラジオボックスから選択

        -
        +
        diff --git a/dist/docs/ja-JP/AdminListeners_SSL_Help.html b/dist/docs/ja-JP/AdminListeners_SSL_Help.html index 21c63fe77..1139e8889 100644 --- a/dist/docs/ja-JP/AdminListeners_SSL_Help.html +++ b/dist/docs/ja-JP/AdminListeners_SSL_Help.html @@ -113,7 +113,7 @@

        目次

        説明

        取り消されたクライアント証明書のPEMエンコードされたCA CRLファイルを含むディレクトリを指定します。 このディレクトリのファイルはPEMでエンコードする必要があります。 これらのファイルは、ハッシュファイル名、hash-value.rNによってアクセスされます。 ハッシュファイル名の作成については、openSSLまたはApache mod_sslのドキュメントを参照してください。

        構文

        パス

      クライアント失効ファイル⇑

      説明

      取り消されたクライアント証明書を列挙するPEMエンコードCA CRLファイルを含むファイルを指定します。 これは、代わりに、またはクライアントの失効パスに加えて使用することができます。

      構文

      ファイル名への絶対パス又は$SERVER_ROOTからの相対パス

      -
      +
      diff --git a/dist/docs/ja-JP/AdminSecurity_Help.html b/dist/docs/ja-JP/AdminSecurity_Help.html index 95ebee9e0..d25773da9 100644 --- a/dist/docs/ja-JP/AdminSecurity_Help.html +++ b/dist/docs/ja-JP/AdminSecurity_Help.html @@ -91,7 +91,7 @@

      管理コンソールのセキュリティ

      目次

      拒否リスト⇑

      説明

      許可されていないIPまたはサブネットワークのリストを指定します。

      構文

      IPアドレスまたはサブネットワークのカンマ区切りリスト。 *またはALLが受け入れられます。

      例

      Sub-networks: 192.168.1.0/255.255.255.0, 192.168.1.0/24, 192.168.1, or 192.168.1.*
      IPv6 addresses: ::1 or [::1]
      IPv6 subnets: 3ffe:302:11:2:20f:1fff:fe29:717c/64 or [3ffe:302:11:2:20f:1fff:fe29:717c]/64

    WebAdminユーザー⇑

    説明

    WebAdmin Consoleのユーザー名とパスワードを変更します。 変更を保存するには、古いパスワードを入力して確認する必要があります。

    -
    +
    diff --git a/dist/docs/ja-JP/App_Server_Context.html b/dist/docs/ja-JP/App_Server_Context.html index 153b9073c..2f3531f68 100644 --- a/dist/docs/ja-JP/App_Server_Context.html +++ b/dist/docs/ja-JP/App_Server_Context.html @@ -113,7 +113,7 @@

    App Server Context

    目次

IPジオロケーションを有効にする⇑

説明

IPジオロケーション検索を有効/無効にするかどうかを指定します。 サーバ、バーチャルホスト、コンテキストレベルで設定できます。 値 「未設定」を使用すると、IPジオロケーションはデフォルトで無効になります。

構文

ラジオボックスから選択

参照

ヘッダーにクライアントIPを使用する, DBファイルのパス,

-
+
diff --git a/dist/docs/ja-JP/App_Server_Help.html b/dist/docs/ja-JP/App_Server_Help.html index b09487a9e..ea0274332 100644 --- a/dist/docs/ja-JP/App_Server_Help.html +++ b/dist/docs/ja-JP/App_Server_Help.html @@ -110,7 +110,7 @@

App Server Settings

目次

Node.js App Default Settings⇑

説明

Default configurations for Node.js applications. These settings can be overriden at the context level.

Node Path⇑

説明

Path to Node.js executable.

構文

絶対パス

-
+
diff --git a/dist/docs/ja-JP/CGI_Context.html b/dist/docs/ja-JP/CGI_Context.html index b02a330f5..9a6e6423e 100644 --- a/dist/docs/ja-JP/CGI_Context.html +++ b/dist/docs/ja-JP/CGI_Context.html @@ -103,7 +103,7 @@

CGIコンテキスト

目次

Rewriteルール⇑

説明

バーチャルホストまたはコンテキスト・レベルでの書き換えルールのリストを指定します。 書き換えルールは、RewriteRuleディレクティブから構成され、オプションとして複数のRewriteCondディレクティブが前に付いています。

  • 各ディレクティブは1行だけを取る必要があります。
  • RewriteCondとRewriteRuleは、Apacheのリライト命令構文に従います。 あなたのApache設定ファイルから書き換え命令文をコピー＆ペーストするだけです。
  • LiteSpeedとApache mod_rewriteには小さな違いがあります 実装:
      　
    • LiteSpeed書き換えエンジンでは、％\ {LA-U：変数\} と％\ {LA-F：変数\} は無視されます
    • LiteSpeed書き換えエンジンに2つの新しいサーバー変数が追加されました。: LiteSpeed書き換えエンジンに2つの新しいサーバー変数が追加されました。 ％\{CURRENT_URI\}は、書き換えエンジンによって処理されている現在のURIを表し、％\{SCRIPT_NAME\}は対応するCGI環境変数と同じ意味を持ちます。
LiteSpeedのリライトエンジンの実装は、Apacheのリライトエンジンの仕様に従います。 書き換えルールの詳細については、Apacheのmod_rewriteドキュメントとApacheのURL書き換えガイドを参照してください。

構文

文字列

IPジオロケーションを有効にする⇑

説明

IPジオロケーション検索を有効/無効にするかどうかを指定します。 サーバ、バーチャルホスト、コンテキストレベルで設定できます。 値 「未設定」を使用すると、IPジオロケーションはデフォルトで無効になります。

構文

ラジオボックスから選択

参照

ヘッダーにクライアントIPを使用する, DBファイルのパス,

-
+
diff --git a/dist/docs/ja-JP/CompilePHP_Help.html b/dist/docs/ja-JP/CompilePHP_Help.html index d646df278..b4a8eb729 100644 --- a/dist/docs/ja-JP/CompilePHP_Help.html +++ b/dist/docs/ja-JP/CompilePHP_Help.html @@ -90,7 +90,7 @@

PHPのコンパイル

目次

パラメータの設定⇑

説明

PHPビルド用のパラメータを設定します。 Apache固有のパラメータと " - prefix"の値は自動的に削除され、次のステップをクリックすると "--with-litespeed"が自動的に追加されます。 （前のフィールドにプレフィックスを設定することができます）このようにして、既存の動作中のPHPビルドのphpinfo（）出力からconfigureパラメータをコピーして貼り付けることができます。

構文

スペース区切りの一連のオプション（二重引用符を使用する場合と使用しない場合）

アドオンモジュール⇑

説明

使用するアドオンモジュールを選択します。 ここに記載されていないバージョンを使用する場合は、手動でソースコードを更新することができます。 （PHPビルドのこのステップでは、ソースコードの場所がプロンプトに表示されます）。

構文

チェックボックスから選択

-
+
diff --git a/dist/docs/ja-JP/Context_Help.html b/dist/docs/ja-JP/Context_Help.html index e2c821c7e..4c2d4f857 100644 --- a/dist/docs/ja-JP/Context_Help.html +++ b/dist/docs/ja-JP/Context_Help.html @@ -99,7 +99,7 @@

目次

コンテキストタイプ⇑

説明

静的コンテキストを使用して、URIをドキュメントルートの外部またはその内部のディレクトリにマップできます。
Java Webアプリコンテキストは、AJPv13コンパイラJavaサーブレットエンジンで定義済みのJavaアプリケーションを自動的にインポートするために使用されます。
サーブレットコンテキストは、Webアプリケーションの下にある特定のサーブレットをインポートするために使用されます。
Fast CGIコンテキストは、Fast CGIアプリケーションのマウントポイントです。
LiteSpeed SAPIコンテキストを使用して、URIをLSAPIアプリケーションに関連付けることができます。
プロキシーコンテキストにより、このバーチャルホストは、外部のWebサーバーまたはアプリケーションサーバーへのトランスペアレントリバースプロキシサーバーとして機能します。
CGIコンテキストを使用して、ディレクトリにCGIスクリプトのみを指定することができます。
ロードバランサーコンテキストを使用して、そのコンテキストに異なるクラスタを割り当てることができます。
リダイレクトコンテキストで内部リダイレクトURIまたは外部リダイレクトURIを設定できます。
Rack/Railsコンテキストは、特にRack/Railsアプリケーションに使用されます。
モジュールハンドラーコンテキストは、ハンドラー型モジュールのマウントポイントです。

-
+
diff --git a/dist/docs/ja-JP/ExtApp_Help.html b/dist/docs/ja-JP/ExtApp_Help.html index e8af75923..7ec66cac6 100644 --- a/dist/docs/ja-JP/ExtApp_Help.html +++ b/dist/docs/ja-JP/ExtApp_Help.html @@ -147,7 +147,7 @@

目次

タイプ⇑

説明

外部アプリケーションのタイプを指定します。 アプリケーションタイプは、提供するサービスまたはサーバーとの通信に使用するプロトコルによって区別されます。 以下から選んでください。

  • FastCGI: Responderロールを持つFastCGIアプリケーションです。
  • FastCGI Authorizer: Authorizerロールを持つFastCGIアプリケーション
  • Servlet Engine: tomcatなどのAJPv13コネクタを持つサーブレットエンジンです。
  • Web Server: HTTPプロトコルをサポートするWebサーバーまたはアプリケーションサーバー。
  • LiteSpeed SAPI App: LSAPIプロトコルを使用してWebサーバーと通信するアプリケーションです。
  • Load Balancer:ワーカーアプリケーション間の負荷を分散できるバーチャルアプリケーションです。
  • Piped Logger: STDINストリームで受け取ったアクセスログエントリを処理できるアプリケーションです。

構文

ドロップダウンリストから選択

ヒント

ほとんどのアプリケーションは、LSAPIまたはFastCGIプロトコルを使用します。 LSAPIはPHP、Ruby、Pythonをサポートしています。 PerlはFastCGIで使用できます。 （PHP、Ruby、およびPythonはFastCGIを使用して実行するように設定することもできますが、LSAPIを使用する方が高速です）。Javaはサーブレットエンジンを使用します。

-
+
diff --git a/dist/docs/ja-JP/External_FCGI.html b/dist/docs/ja-JP/External_FCGI.html index f29b9ff6b..ecf9aca51 100644 --- a/dist/docs/ja-JP/External_FCGI.html +++ b/dist/docs/ja-JP/External_FCGI.html @@ -108,7 +108,7 @@

Fast CGI アプリ

目次

プロセスソフトリミット⇑

説明

ユーザーに代わって作成できるプロセスの総数を制限します。 既存のすべてのプロセスは、開始される新しいプロセスだけでなく、この限度に対してカウントされます。 制限は、サーバーレベルまたは個々の外部アプリケーションレベルで設定できます。
サーバーレベルの制限は、個々のアプリケーションレベルで設定されていない場合に使用されます。 この値が0または両方のレベルにない場合、オペレーティングシステムのデフォルト設定が使用されます。

構文

整数

ヒント

PHPスクリプトはプロセスをフォークするために呼び出すことができます。 この制限の主な目的は、フォーク爆弾や他のプロセスを作成するPHPプロセスによって引き起こされる他の攻撃を防ぐための最終防衛線です。
この設定を低すぎると、機能が著しく損なわれる可能性があります。 この設定は特定のレベル以下では無視されます。
suEXECデーモンモードを使用する場合、親プロセスが制限されないように、実際のプロセス制限はこの設定よりも高くなります。

プロセスハードリミット⇑

説明

ソフトリミットをユーザープロセス内のハードリミットまで上げることができることを除けば、プロセスソフトリミットとほとんど同じです。 ハードリミットは、サーバー・レベルまたは個々の外部アプリケーションレベルで設定できます。 サーバーレベルの制限は、個々のアプリケーションレベルで設定されていない場合に使用されます。 オペレーティングシステムのデフォルト値は、値が両方のレベルにないか、0に設定されている場合に使用されます。

構文

整数

-
+
diff --git a/dist/docs/ja-JP/External_FCGI_Auth.html b/dist/docs/ja-JP/External_FCGI_Auth.html index e82f30377..86f2b2d2d 100644 --- a/dist/docs/ja-JP/External_FCGI_Auth.html +++ b/dist/docs/ja-JP/External_FCGI_Auth.html @@ -108,7 +108,7 @@

Fast CGI 認証

目次

プロセスソフトリミット⇑

説明

ユーザーに代わって作成できるプロセスの総数を制限します。 既存のすべてのプロセスは、開始される新しいプロセスだけでなく、この限度に対してカウントされます。 制限は、サーバーレベルまたは個々の外部アプリケーションレベルで設定できます。
サーバーレベルの制限は、個々のアプリケーションレベルで設定されていない場合に使用されます。 この値が0または両方のレベルにない場合、オペレーティングシステムのデフォルト設定が使用されます。

構文

整数

ヒント

PHPスクリプトはプロセスをフォークするために呼び出すことができます。 この制限の主な目的は、フォーク爆弾や他のプロセスを作成するPHPプロセスによって引き起こされる他の攻撃を防ぐための最終防衛線です。
この設定を低すぎると、機能が著しく損なわれる可能性があります。 この設定は特定のレベル以下では無視されます。
suEXECデーモンモードを使用する場合、親プロセスが制限されないように、実際のプロセス制限はこの設定よりも高くなります。

プロセスハードリミット⇑

説明

ソフトリミットをユーザープロセス内のハードリミットまで上げることができることを除けば、プロセスソフトリミットとほとんど同じです。 ハードリミットは、サーバー・レベルまたは個々の外部アプリケーションレベルで設定できます。 サーバーレベルの制限は、個々のアプリケーションレベルで設定されていない場合に使用されます。 オペレーティングシステムのデフォルト値は、値が両方のレベルにないか、0に設定されている場合に使用されます。

構文

整数

-
+
diff --git a/dist/docs/ja-JP/External_LB.html b/dist/docs/ja-JP/External_LB.html index 7b4f784f7..76ce1460d 100644 --- a/dist/docs/ja-JP/External_LB.html +++ b/dist/docs/ja-JP/External_LB.html @@ -87,7 +87,7 @@

ロードバランサー

目次

名前⇑

説明

この外部アプリケーションの一意の名前。 設定の他の部分でこの名前を使用するときは、この名前で参照します。

ワーカー⇑

説明

以前に外部ロードバランサで定義されたワーカーグループのリスト。

構文

ExternalAppType::ExternalAppNameという形式のカンマ区切りリスト

例

fcgi::localPHP, proxy::backend1
-
+
diff --git a/dist/docs/ja-JP/External_LSAPI.html b/dist/docs/ja-JP/External_LSAPI.html index 7d6dede06..823af41b6 100644 --- a/dist/docs/ja-JP/External_LSAPI.html +++ b/dist/docs/ja-JP/External_LSAPI.html @@ -108,7 +108,7 @@

LiteSpeed SAPI アプリ

目次

プロセスソフトリミット⇑

説明

ユーザーに代わって作成できるプロセスの総数を制限します。 既存のすべてのプロセスは、開始される新しいプロセスだけでなく、この限度に対してカウントされます。 制限は、サーバーレベルまたは個々の外部アプリケーションレベルで設定できます。
サーバーレベルの制限は、個々のアプリケーションレベルで設定されていない場合に使用されます。 この値が0または両方のレベルにない場合、オペレーティングシステムのデフォルト設定が使用されます。

構文

整数

ヒント

PHPスクリプトはプロセスをフォークするために呼び出すことができます。 この制限の主な目的は、フォーク爆弾や他のプロセスを作成するPHPプロセスによって引き起こされる他の攻撃を防ぐための最終防衛線です。
この設定を低すぎると、機能が著しく損なわれる可能性があります。 この設定は特定のレベル以下では無視されます。
suEXECデーモンモードを使用する場合、親プロセスが制限されないように、実際のプロセス制限はこの設定よりも高くなります。

プロセスハードリミット⇑

説明

ソフトリミットをユーザープロセス内のハードリミットまで上げることができることを除けば、プロセスソフトリミットとほとんど同じです。 ハードリミットは、サーバー・レベルまたは個々の外部アプリケーションレベルで設定できます。 サーバーレベルの制限は、個々のアプリケーションレベルで設定されていない場合に使用されます。 オペレーティングシステムのデフォルト値は、値が両方のレベルにないか、0に設定されている場合に使用されます。

構文

整数

-
+
diff --git a/dist/docs/ja-JP/External_PL.html b/dist/docs/ja-JP/External_PL.html index aee568268..23abb666c 100644 --- a/dist/docs/ja-JP/External_PL.html +++ b/dist/docs/ja-JP/External_PL.html @@ -95,7 +95,7 @@

パイプロガー

目次

umask⇑

説明

この外部アプリケーションのプロセスのデフォルトumaskを設定します。 詳細は、man 2 umaskを参照してください。 デフォルト値はサーバーレベルのumask設定から取得されます。

構文

有効範囲[000]〜[777]の値。

参照

CGI umask

優先度⇑

説明

外部アプリケーション・プロセスの優先度を指定します。 値の範囲は−20〜20です。 数字が小さいほど優先度が高くなります。 外部アプリケーションプロセスは、Webサーバーよりも高い優先度を持つことはできません。 この優先度がサーバーの数値より低い数値に設定されている場合は、サーバーの優先度がこの値に使用されます。

構文

整数

参照

Server プライオリティ

-
+
diff --git a/dist/docs/ja-JP/External_Servlet.html b/dist/docs/ja-JP/External_Servlet.html index f8e85b9f2..d041f7248 100644 --- a/dist/docs/ja-JP/External_Servlet.html +++ b/dist/docs/ja-JP/External_Servlet.html @@ -93,7 +93,7 @@

サーブレットエンジン

目次

リトライタイムアウト（秒）⇑

説明

以前の通信に問題があった外部アプリケーションを再試行する前に、サーバーが待機する時間を指定します。

構文

整数

応答バッファリング⇑

説明

外部から受信した応答をバッファリングするかどうかを指定します。 アプリケーション。 "nph-" (Non-Parsed-Header)スクリプトが検出された場合、完全なHTTPヘッダーを持つ応答ではバッファリングがオフになります。

構文

ドロップダウンリストから選択

-
+
diff --git a/dist/docs/ja-JP/External_WS.html b/dist/docs/ja-JP/External_WS.html index 94700f598..80c1cbccc 100644 --- a/dist/docs/ja-JP/External_WS.html +++ b/dist/docs/ja-JP/External_WS.html @@ -93,7 +93,7 @@

Webサーバ

目次

リトライタイムアウト（秒）⇑

説明

以前の通信に問題があった外部アプリケーションを再試行する前に、サーバーが待機する時間を指定します。

構文

整数

応答バッファリング⇑

説明

外部から受信した応答をバッファリングするかどうかを指定します。 アプリケーション。 "nph-" (Non-Parsed-Header)スクリプトが検出された場合、完全なHTTPヘッダーを持つ応答ではバッファリングがオフになります。

構文

ドロップダウンリストから選択

-
+
diff --git a/dist/docs/ja-JP/FCGI_Context.html b/dist/docs/ja-JP/FCGI_Context.html index 38a805056..35db3a4b1 100644 --- a/dist/docs/ja-JP/FCGI_Context.html +++ b/dist/docs/ja-JP/FCGI_Context.html @@ -98,7 +98,7 @@

Fast CGIコンテキスト

目次

IPジオロケーションを有効にする⇑

説明

IPジオロケーション検索を有効/無効にするかどうかを指定します。 サーバ、バーチャルホスト、コンテキストレベルで設定できます。 値 「未設定」を使用すると、IPジオロケーションはデフォルトで無効になります。

構文

ラジオボックスから選択

参照

ヘッダーにクライアントIPを使用する, DBファイルのパス,

-
+
diff --git a/dist/docs/ja-JP/Java_Web_App_Context.html b/dist/docs/ja-JP/Java_Web_App_Context.html index 5a6e5ec20..9a47b4085 100644 --- a/dist/docs/ja-JP/Java_Web_App_Context.html +++ b/dist/docs/ja-JP/Java_Web_App_Context.html @@ -104,7 +104,7 @@

Java Web アプリコンテキスト

目次

IPジオロケーションを有効にする⇑

説明

IPジオロケーション検索を有効/無効にするかどうかを指定します。 サーバ、バーチャルホスト、コンテキストレベルで設定できます。 値 「未設定」を使用すると、IPジオロケーションはデフォルトで無効になります。

構文

ラジオボックスから選択

参照

ヘッダーにクライアントIPを使用する, DBファイルのパス,

-
+
diff --git a/dist/docs/ja-JP/LB_Context.html b/dist/docs/ja-JP/LB_Context.html index d769219aa..287498624 100644 --- a/dist/docs/ja-JP/LB_Context.html +++ b/dist/docs/ja-JP/LB_Context.html @@ -98,7 +98,7 @@

ロードバランサコンテキスト

目次

IPジオロケーションを有効にする⇑

説明

IPジオロケーション検索を有効/無効にするかどうかを指定します。 サーバ、バーチャルホスト、コンテキストレベルで設定できます。 値 「未設定」を使用すると、IPジオロケーションはデフォルトで無効になります。

構文

ラジオボックスから選択

参照

ヘッダーにクライアントIPを使用する, DBファイルのパス,

-
+
diff --git a/dist/docs/ja-JP/LSAPI_Context.html b/dist/docs/ja-JP/LSAPI_Context.html index f1114f2ca..386b4eb04 100644 --- a/dist/docs/ja-JP/LSAPI_Context.html +++ b/dist/docs/ja-JP/LSAPI_Context.html @@ -98,7 +98,7 @@

LiteSpeed SAPIコンテキスト

目次

IPジオロケーションを有効にする⇑

説明

IPジオロケーション検索を有効/無効にするかどうかを指定します。 サーバ、バーチャルホスト、コンテキストレベルで設定できます。 値 「未設定」を使用すると、IPジオロケーションはデフォルトで無効になります。

構文

ラジオボックスから選択

参照

ヘッダーにクライアントIPを使用する, DBファイルのパス,

-
+
diff --git a/dist/docs/ja-JP/Listeners_General_Help.html b/dist/docs/ja-JP/Listeners_General_Help.html index 3fb0ee315..219a016e2 100644 --- a/dist/docs/ja-JP/Listeners_General_Help.html +++ b/dist/docs/ja-JP/Listeners_General_Help.html @@ -82,7 +82,7 @@
Version 1.4  — Rev. 3
@@ -90,12 +90,13 @@

リスナー全般

目次

IPアドレス⇑

説明

このリスナーのIPを指定します。 使用可能なすべてのIPアドレスがリストされます。 IPv6アドレスは "[]"で囲まれています。 すべてのIPv4 IPアドレスをリッスンするには、ANYを選択します。 すべてのIPv4とIPv6のIPアドレスをリッスンするには、[ANY]を選択します。 IPv4とIPv6の両方のクライアントにサービスを提供するには、プレーンなIPv4アドレスの代わりに、IPv4でマップされたIPv6アドレスを使用する必要があります。 IPv4でマップされたIPv6アドレスは[:: FFFF：x.x.x.x]と書かれています。

構文

ドロップダウンリストから選択

ヒント

[セキュリティ]お使いのマシンに異なるサブネットワーク上に複数のIPがある場合、特定のIPを選択して、対応するサブネットワークからのトラフィックのみを許可することができます。

ポート⇑

説明

リスナーのTCPポートを指定します。 スーパーユーザー（"root"）のみが1024より小さいポートを使用できます。 ポート80はデフォルトのHTTPポートです。 ポート443はデフォルトのHTTPSポートです。

構文

65535までの整数

バインディング⇑

説明

リスナーが割り当てられているlshttpd子プロセスを指定します。 リスナーをプロセスに手動で関連付けることによって、異なるリスナーへのリクエストを処理するために、異なる子プロセスを使用できます。 デフォルトでは、すべての子プロセスにリスナーが割り当てられます。

構文

チェックボックスから選択

+

Enable REUSEPORT⇑

説明

Use SO_REUSEPORT socket option to distribute incoming traffic to multiple workers. This setting is only effective for multi-worker licenses. When enabled, all workers are automatically bound to this listener and "Binding" configuration is ignored.

Default value: On

構文

ラジオボックスから選択

セキュア⇑

説明

Sこれがセキュア（SSL）リスナーかどうかを指定します。 セキュアリスナーの場合は、追加のSSL設定を適切に設定する必要があります。

構文

ラジオボックスから選択

バーチャルホストマッピング⇑

説明

リスナーとバーチャルホストの関係を指定します。 リスナーとバーチャルホストはドメイン名によって関連付けられています。 HTTP要求は、一致するドメイン名を持つバーチャルホストにルーティングされます。 1つのリスナーは、異なるドメイン名の複数のバーチャルホストにマップできます。 1つのバーチャルホストを異なるリスナーからマップすることもできます。 1人のリスナーは、ドメイン名の値「*」を持つ1つのキャッチオールバーチャルホストを許可できます。 リスナーのマッピングに明示的に一致するドメイン名がない場合、 リスナーはその要求をそのキャッチオールバーチャルホストに転送します。

ヒント

[パフォーマンス]必要なマッピングのみを追加します。 リスナーが1つのバーチャルホストにのみマッピングされている場合は、キャッチオールマッピング "*"のみを設定します。

バーチャルホスト⇑

説明

バーチャルホストの名前を指定します。

構文

ドロップダウンリストから選択

ドメイン⇑

説明

マッピングドメイン名を指定します。 ドメイン名は大文字と小文字を区別せず、先頭の "www." 削除されます。 ワイルドカード文字「*」と「？」 は許可されます。 「？」 1文字のみを表します。 「*」は任意の数の文字を表します。 重複したドメイン名は許可されません。

構文

カンマで区切られたリスト。

例

www?.example.com
"*.mydomain.com"はmydomain.comのすべてのサブドメインと一致します。
「*」はそれ自体がキャッチオールドメインであり、不一致のドメイン名と一致します。

ヒント

[パフォーマンス]リスナーが1つのバーチャルホスト専用の場合は、不要なチェックを避けるために、ドメイン名に常に*を使用します。 可能であれば、ワイルドカード文字（キャッチオールドメイン以外）を使用するドメイン名は避けてください。

-
+
diff --git a/dist/docs/ja-JP/Listeners_SSL_Help.html b/dist/docs/ja-JP/Listeners_SSL_Help.html index ea957e5e1..698439753 100644 --- a/dist/docs/ja-JP/Listeners_SSL_Help.html +++ b/dist/docs/ja-JP/Listeners_SSL_Help.html @@ -119,7 +119,7 @@

リスナーSSL

目次

クライアントの失効パス⇑

説明

取り消されたクライアント証明書のPEMエンコードされたCA CRLファイルを含むディレクトリを指定します。 このディレクトリのファイルはPEMでエンコードする必要があります。 これらのファイルは、ハッシュファイル名、hash-value.rNによってアクセスされます。 ハッシュファイル名の作成については、openSSLまたはApache mod_sslのドキュメントを参照してください。

構文

パス

クライアント失効ファイル⇑

説明

取り消されたクライアント証明書を列挙するPEMエンコードCA CRLファイルを含むファイルを指定します。 これは、代わりに、またはクライアントの失効パスに加えて使用することができます。

構文

ファイル名への絶対パス又は$SERVER_ROOTからの相対パス

-
+
diff --git a/dist/docs/ja-JP/Module_Context.html b/dist/docs/ja-JP/Module_Context.html index 54c8d2834..29a2c1d95 100644 --- a/dist/docs/ja-JP/Module_Context.html +++ b/dist/docs/ja-JP/Module_Context.html @@ -98,7 +98,7 @@

モジュールハンドラコンテキスト

目次

IPジオロケーションを有効にする⇑

説明

IPジオロケーション検索を有効/無効にするかどうかを指定します。 サーバ、バーチャルホスト、コンテキストレベルで設定できます。 値 「未設定」を使用すると、IPジオロケーションはデフォルトで無効になります。

構文

ラジオボックスから選択

参照

ヘッダーにクライアントIPを使用する, DBファイルのパス,

-
+
diff --git a/dist/docs/ja-JP/Module_Help.html b/dist/docs/ja-JP/Module_Help.html index 49c11ecee..925717d12 100644 --- a/dist/docs/ja-JP/Module_Help.html +++ b/dist/docs/ja-JP/Module_Help.html @@ -134,7 +134,7 @@

目次

説明

バーチャルホストコンテキストのモジュール設定をカスタマイズするための集中管理された場所です。 コンテキストURIの設定は、バーチャルホストまたはサーバーレベルの設定を上書きします。

URI⇑

説明

このコンテキストのURIを指定します。

構文

URIは、プレーンURI（ "/"で始まる）またはPerl互換の正規表現URI（ "exp："で始まる）にすることができます。 プレーンURIが "/"で終わる場合、このコンテキストはこのURIの下にすべてのサブURIを含みます。 コンテキストがファイルシステム上のディレクトリにマップされている場合は、末尾に「/」を追加する必要があります。

参照

ロケーション

-
+
diff --git a/dist/docs/ja-JP/Proxy_Context.html b/dist/docs/ja-JP/Proxy_Context.html index 596448a60..8609389b2 100644 --- a/dist/docs/ja-JP/Proxy_Context.html +++ b/dist/docs/ja-JP/Proxy_Context.html @@ -98,7 +98,7 @@

プロキシコンテキスト

目次

IPジオロケーションを有効にする⇑

説明

IPジオロケーション検索を有効/無効にするかどうかを指定します。 サーバ、バーチャルホスト、コンテキストレベルで設定できます。 値 「未設定」を使用すると、IPジオロケーションはデフォルトで無効になります。

構文

ラジオボックスから選択

参照

ヘッダーにクライアントIPを使用する, DBファイルのパス,

-
+
diff --git a/dist/docs/ja-JP/Redirect_Context.html b/dist/docs/ja-JP/Redirect_Context.html index f6774e1bc..900e1d958 100644 --- a/dist/docs/ja-JP/Redirect_Context.html +++ b/dist/docs/ja-JP/Redirect_Context.html @@ -97,7 +97,7 @@

リダイレクトコンテキスト

目次

アクセス拒否⇑

説明

このコンテキストでリソースにアクセスできないIPまたはサブネットワークを指定します。 アクセス許可とサーバー/バーチャルホストレベルのアクセス制御とともに、アクセシビリティはクライアントのIPアドレスが入る最小の範囲で決まります。

構文

IP/サブネットワークのカンマ区切りリスト。

例

サブネットワークは以下のように書くことができます 192.168.1.0/255.255.255.0, 192.168.1, 又は 192.168.1.*.

承認者⇑

説明

権限のある/権限のないかの決定を生成するために使用できる外部アプリケーションを指定します。 現在、FastCGI Authorizerのみが使用可能です。 FastCGI Authorizerの役割の詳細については、http://www.fastcgi.comを参照してください。 。

構文

ドロップダウンリストから選択

-
+
diff --git a/dist/docs/ja-JP/Rewrite_Help.html b/dist/docs/ja-JP/Rewrite_Help.html index 9e775a88d..d2a6b8a10 100644 --- a/dist/docs/ja-JP/Rewrite_Help.html +++ b/dist/docs/ja-JP/Rewrite_Help.html @@ -95,7 +95,7 @@

Rewrite

目次

ロケーション⇑

説明

MapType：MapSource構文を使用して、書き換えマップの場所を指定します。
LiteSpeedの書き換えエンジンは、次の3種類の書き換えマップをサポートしています:

  • 標準プレーンテキスト
    MapType: txt;
    MapSource: ファイルパスを有効なプレーンASCIIファイルに変換します。
    このファイルの各行には空白で区切られた2つの要素が含まれていなければなりません。 最初の要素はキーで、2番目の要素は値です。 コメントには先頭に「#」という記号を付けることができます。
  • ランダム化されたプレーンテキスト
    MapType: rnd;
    MapSource: 有効なプレーンASCIIファイルのファイルパス。
    ファイル形式は、標準のプレーンテキストファイルと似ていますが、2番目の要素には " | "記号で区切られた 複数の選択肢があり、書き換えエンジンによってランダムに選択できます。
  • 内部機能
    MapType: int;
    MapSource: 内部文字列関数
    4つの機能を利用できます：
    • toupper: 検索キーを大文字に変換します。
    • tolower: 検索キーを小文字に変換します。
    • escape: 検索キーでURLエンコーディングを実行します。
    • unescape: 検索キーでURLデコードを実行します。
    • Apacheで利用可能な次のマップタイプはLiteSpeedでは実装されていません：
    ハッシュファイルと外部書き換えプログラム。
LiteSpeedのリライトエンジンの実装は、Apacheのリライトエンジンの仕様に準拠しています。 書き直しマップの詳細については、Apacheのmod_rewrite文書を参照してください。

構文

文字列

Rewriteルール⇑

説明

バーチャルホストまたはコンテキスト・レベルでの書き換えルールのリストを指定します。 書き換えルールは、RewriteRuleディレクティブから構成され、オプションとして複数のRewriteCondディレクティブが前に付いています。

  • 各ディレクティブは1行だけを取る必要があります。
  • RewriteCondとRewriteRuleは、Apacheのリライト命令構文に従います。 あなたのApache設定ファイルから書き換え命令文をコピー＆ペーストするだけです。
  • LiteSpeedとApache mod_rewriteには小さな違いがあります 実装:
      　
    • LiteSpeed書き換えエンジンでは、％\ {LA-U：変数\} と％\ {LA-F：変数\} は無視されます
    • LiteSpeed書き換えエンジンに2つの新しいサーバー変数が追加されました。: LiteSpeed書き換えエンジンに2つの新しいサーバー変数が追加されました。 ％\{CURRENT_URI\}は、書き換えエンジンによって処理されている現在のURIを表し、％\{SCRIPT_NAME\}は対応するCGI環境変数と同じ意味を持ちます。
LiteSpeedのリライトエンジンの実装は、Apacheのリライトエンジンの仕様に従います。 書き換えルールの詳細については、Apacheのmod_rewriteドキュメントとApacheのURL書き換えガイドを参照してください。

構文

文字列

-
+
diff --git a/dist/docs/ja-JP/ScriptHandler_Help.html b/dist/docs/ja-JP/ScriptHandler_Help.html index 62ca027b5..9da2394b0 100644 --- a/dist/docs/ja-JP/ScriptHandler_Help.html +++ b/dist/docs/ja-JP/ScriptHandler_Help.html @@ -98,7 +98,7 @@

目次

ハンドラタイプ⇑

説明

これらのスクリプトファイルを処理する外部アプリケーションのタイプを指定します。 使用可能なタイプは以下のとおりです：CGI、FastCGI、Webサーバー、LSAPI app、ロードバランサ 又はサーブレットエンジン。 FastCGI、Webサーバー、およびServlet Engineの場合は、ハンドラ名を指定する必要があります。 これは、外部アプリケーションセクションで事前定義されている外部アプリケーション名です。

構文

ドロップダウンリストから選択

ハンドラ名⇑

説明

ハンドラタイプがFastCGI、Web Server、LSAPI、Load Balancer、またはServlet Engineの場合にスクリプトファイルを処理する外部アプリケーションの名前を指定します。

構文

ドロップダウンリストから選択

-
+
diff --git a/dist/docs/ja-JP/ServGeneral_Help.html b/dist/docs/ja-JP/ServGeneral_Help.html index 5a5d65ef5..6f95ab088 100644 --- a/dist/docs/ja-JP/ServGeneral_Help.html +++ b/dist/docs/ja-JP/ServGeneral_Help.html @@ -140,7 +140,7 @@

目次

IP2Location DB File Path⇑

説明

The location of a valid database file.

構文

ファイル名への絶対パス又は$SERVER_ROOTからの相対パス。

DB Cache Type⇑

説明

The caching method used. The default value is Memory.

構文

ドロップダウンリストから選択

-
+
diff --git a/dist/docs/ja-JP/ServLog_Help.html b/dist/docs/ja-JP/ServLog_Help.html index 6fe6b9a6b..f0a6cfc17 100644 --- a/dist/docs/ja-JP/ServLog_Help.html +++ b/dist/docs/ja-JP/ServLog_Help.html @@ -82,23 +82,23 @@
Version 1.4  — Rev. 3
設定

サーバーログ

目次

サーバーログ

-ファイル名 | ログレベル | デバッグレベル | ローテーションサイズ（バイト） | stderrログを有効にする

+ファイル名 | ログレベル | デバッグレベル | ローテーションサイズ（バイト） | Keep Days | stderrログを有効にする

アクセスログ

-ファイル名 | パイプロガー | Log Format | ログヘッダー | ローテーションサイズ（バイト） | 保持日数 | アーカイブを圧縮する

+ファイル名 | パイプロガー | Log Format | ログヘッダー | ローテーションサイズ（バイト） | Keep Days | アーカイブを圧縮する

ファイル名⇑

説明

ログファイルのパスを指定します。

構文

ファイル名への絶対パス又は$SERVER_ROOTからの相対パス

ヒント

[パフォーマンス]ログファイルを別のディスクに配置します。

ログレベル⇑

説明

ログファイルに含めるログのレベルを指定します。 使用可能なレベルは、エラー、警告、通知、情報および DEBUG です。 現在の設定以上のレベルのメッセージのみが記録されます。

構文

選択

ヒント

[パフォーマンス] デバッグレベルが NONE 以外のレベルに設定されていない限り、 DEBUG ログレベルを使用してもパフォーマンスに影響はありません。 ログレベルを DEBUG に設定し、デバッグレベルを NONE に設定することをお勧めします。 これらの設定は、ハードディスクにデバッグログを書き込まないことを意味しますが、デバッグログを切り替えるアクションを使用してデバッグ出力を制御することができます。 これにより、デバッグログのオン/オフを切り替えることができ、多忙な運用サーバーのデバッグに役立ちます。

参照

デバッグレベル

デバッグレベル⇑

説明

デバッグログのレベルを指定します。 この機能を使用するには、ログレベルを DEBUG に設定する必要があります。 ログレベルが DEBUG に設定されていても、「デバッグレベル」が NONE に設定されていると、デバッグロギングは無効になります。 デバッグログを切り替えるは、再起動せずにライブサーバー上のデバッグレベルを制御するために使用できます。.

構文

選択

ヒント

[パフォーマンス]重要！ 詳細なデバッグログが必要ない場合は、常にこれを NONE に設定してください。 アクティブデバッグロギングは、サービスのパフォーマンスを著しく低下させ、非常に短時間でディスクスペースを飽和させる可能性があります。 デバッグログには、各要求と応答の詳細情報が含まれています。
ログレベルを DEBUG に設定し、デバッグレベルを NONE に設定することをお勧めします。 これらの設定は、ハードディスクにデバッグログを書き込まないことを意味しますが、デバッグログを切り替えるアクションを使用してデバッグ出力を制御することができます。 これにより、デバッグログのオン/オフを切り替えることができ、多忙な運用サーバーのデバッグに役立ちます。

参照

ログレベル, デバッグログを切り替える

ローテーションサイズ（バイト）⇑

説明

現在のログファイルをロールオーバーする必要があるとき、つまりログローテーションを指定します。 ファイルサイズがロールオーバー制限を超えると、アクティブなログファイルは同じディレクトリにlog_name.mm_dd_yyyy（.sequence）という名前に変更され、新しいアクティブなログファイルが作成されます。 回転ログファイルが実際に作成されると、そのサイズはこのサイズ制限より少し大きくなることがあります。 ログのローテーションを無効にするには、 0 に設定します。

構文

整数

ヒント

キロ、メガ、ギガバイトの数字に「K」、「M」、「G」を追加します。

+

Keep Days⇑

説明

Specifies how many days the access log file will be kept on disk. Only rotated log files older than the specified number of days will be deleted. The current log file will not be touched regardless how many days worth of data it contains. If you do not want to auto-delete stale and very old log files, set this to 0.

構文

整数

stderrログを有効にする⇑

説明

サーバーが開始したプロセスからstderr出力を受け取ったときにログに書き込むかどうかを指定します。 有効にすると、stderrメッセージは固定名 "stderr.log"を持つサーバーログと同じディレクトリに記録されます。 無効にすると、すべてのstderr出力は破棄されます。

構文

ラジオボックスから選択

ヒント

設定された外部アプリケーション（PHP、Ruby、Java、Python、Perl）をデバッグする必要がある場合にオンにします。

ファイル名⇑

説明

アクセスログファイル名。

構文

ファイル名への絶対パス又は$SERVER_ROOTからの相対パス

ヒント

[パフォーマンス]アクセスログファイルを別のディスクに入れます。

パイプロガー⇑

説明

LiteSpeedがSTDINストリーム上のパイプを通じて送信するアクセスログデータを受け取る外部アプリケーションを指定します（ファイルハンドルは0）。 このフィールドが指定されると、アクセスログはロガーアプリケーションにのみ送信され、前のエントリで指定されたアクセスログファイルには送信されません。

ロガーアプリケーションは、最初に外部アプリケーションセクションで定義する必要があります。 サーバー・レベルのアクセス・ロギングは、サーバー・レベルで定義された外部ロガー・アプリケーションのみを使用できます。 バーチャルホストレベルのアクセスロギングでは、バーチャルホストレベルで定義されたロガーアプリケーションのみを使用できます。

ロガープロセスは、他の外部（CGI/FastCGI/LSAPI）プロセスと同じ方法で生成されます。 つまり、バーチャルホストの外部アプリ Set UID モード設定で指定されたユーザーIDとして実行され、特権ユーザーのために実行されることはありません。.

LiteSpeed Webサーバーは、複数のロガーアプリケーションのインスタンスが設定されている場合、複数のロガーアプリケーション間で簡単なロードバランシングを実行します。 LiteSpeedサーバーは、常にロガーアプリケーションの数を可能な限り低く抑えようとします。 1つのロガーアプリケーションがアクセスログエントリを時間内に処理できない場合にのみ、サーバーはロガーアプリケーションの別のインスタンスを生成しようとします。

ロガーがクラッシュした場合、Webサーバーは別のインスタンスを開始しますが、ストリームバッファーのログデータは失われます。 外部ロガーがログ・ストリームの速度と量に追いつけない場合、ログ・データを失う可能性があります。

構文

選択

Log Format⇑

説明

アクセスログのログ形式を指定します。 ログフォーマットが設定されると、ログヘッダーの設定より優先されます。

構文

文字列。ログフォーマットの構文はApache 2.0のカスタムと互換性があります log format。

例


共通ログフォーマット（CLF）
"%h %l %u %t \"%r\" %>s %b"

バーチャルホストによる共通ログフォーマット
"%v %h %l %u %t \"%r\" %>s %b"

NCSA拡張/結合ログフォーマット
"%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"

FoobarのログCookie値
"%{Foobar}C"

参照

ログヘッダー

ログヘッダー⇑

説明

Referer、UserAgent、HostのいずれかをHTTPリクエストヘッダとして記録するかどうかを指定します。

構文

チェックボックス

ヒント

[パフォーマンス]これらのヘッダーがアクセスログに必要ない場合は、これをオフにします。

参照

Log Format

-

保持日数⇑

説明

アクセスログファイルをディスクに保管する日数を指定します。 指定した日数より古いローテーションしたログファイルのみが削除されます。 現在のログファイルには、それに含まれるデータの日数にかかわらず、表示されません。 古いログファイルを自動削除しない場合は、 0 に設定します。

構文

整数

アーカイブを圧縮する⇑

説明

ディスク領域を節約するためにローテーションしたログファイルを圧縮するかどうかを指定します。

構文

ラジオボックスから選択

ヒント

ログファイルは圧縮率が高く、古いログのディスク使用量を減らすために推奨されます。

-
+
diff --git a/dist/docs/ja-JP/ServSecurity_Help.html b/dist/docs/ja-JP/ServSecurity_Help.html index 95cedeabf..26b326257 100644 --- a/dist/docs/ja-JP/ServSecurity_Help.html +++ b/dist/docs/ja-JP/ServSecurity_Help.html @@ -87,8 +87,10 @@

サーバーのセキュリティ

目次

静的リクエスト/秒 | 動的リクエスト/秒 | 送信帯域幅（バイト/秒） | 受信帯域幅（バイト/秒） | 接続ソフトリミット | 接続ハードリミット | 不良リクエストをブロックする | 猶予期間（秒） | 禁止期間（秒）

CGI設定

CGIデーモンソケット | 最大CGIインスタンス | 最小UID | 最小GID | 強制GID | umask | CGI プライオリティ | CPUソフトリミット(秒) | CPUハードリミット | メモリソフトリミット（バイト） | メモリハードリミット | プロセスソフトリミット | プロセスハードリミット | cgroups

-
reCaptcha Protection

+

reCAPTCHA Protection

Enable reCAPTCHA | Site Key | Secret Key | reCAPTCHA Type | Max Tries | Allowed Robot Hits | Bot White List | Connection Limit | SSL Connection Limit

+
Bubblewrap Container

+Bubblewrap Container | Bubblewrap Command

アクセスが拒否されたディレクトリ

アクセスが拒否されたディレクトリ

アクセス制御

@@ -126,8 +128,8 @@

サーバーのセキュリティ

目次

プロセスソフトリミット⇑

説明

ユーザーに代わって作成できるプロセスの総数を制限します。 既存のすべてのプロセスは、開始される新しいプロセスだけでなく、この限度に対してカウントされます。 制限は、サーバーレベルまたは個々の外部アプリケーションレベルで設定できます。
サーバーレベルの制限は、個々のアプリケーションレベルで設定されていない場合に使用されます。 この値が0または両方のレベルにない場合、オペレーティングシステムのデフォルト設定が使用されます。

構文

整数

ヒント

PHPスクリプトはプロセスをフォークするために呼び出すことができます。 この制限の主な目的は、フォーク爆弾や他のプロセスを作成するPHPプロセスによって引き起こされる他の攻撃を防ぐための最終防衛線です。
この設定を低すぎると、機能が著しく損なわれる可能性があります。 この設定は特定のレベル以下では無視されます。
suEXECデーモンモードを使用する場合、親プロセスが制限されないように、実際のプロセス制限はこの設定よりも高くなります。

プロセスハードリミット⇑

説明

ソフトリミットをユーザープロセス内のハードリミットまで上げることができることを除けば、プロセスソフトリミットとほとんど同じです。 ハードリミットは、サーバー・レベルまたは個々の外部アプリケーションレベルで設定できます。 サーバーレベルの制限は、個々のアプリケーションレベルで設定されていない場合に使用されます。 オペレーティングシステムのデフォルト値は、値が両方のレベルにないか、0に設定されている場合に使用されます。

構文

整数

cgroups⇑

説明

Apply cgroup settings to this CGI process if supported by the current OS. At this time, RedHat/Centos Linux v7.5+ and Ubuntu 18.04+ are supported. The currently executing user will be used to determine which cgroup configuration to apply.

Setting this to Disabled at the Server level will disable this setting server-wide. In all other cases, the Server level setting can be overridden at the Virtual Host level.

Default values:
Server level: Off
VH level: Inherit Server level setting

構文

ドロップダウンリストから選択

-

reCaptcha Protection⇑

説明

reCaptcha Protection is a service provided as a way to mitigate heavy server load. reCaptcha Protection will activate after one of the below situations is hit. Once active, all requests by NON TRUSTED(as configured) clients will be redirected to a reCAPTCHA validation page. After validation, the client will be redirected to their desired page.

The following situations will activate reCaptcha Protection:
1. The server or vhost concurrent requests count passes the configured connection limit.
2. Anti-DDoS is enabled and a client is hitting a url in a suspicious manner. The client will redirect to reCAPTCHA first instead of getting denied when triggered.
3. WP Brute Force protection is enabled and action is set to 'Captcha or Drop’. When a brute force attack is detected, the client will redirect to reCAPTCHA first. After max tries is reached, the connection will be dropped, as per the ‘drop’ option.
4. A new rewrite rule environment is provided to activate reCAPTCHA via RewriteRules. 'verifycaptcha' can be set to redirect clients to reCAPTCHA. A special value ': deny' can be set to deny the client if it failed too many times. For example, [E=verifycaptcha] will always redirect to reCAPTCHA until verified. [E=verifycaptcha: deny] will redirect to reCAPTCHA until Max Tries is hit, after which the client will be denied.

-

Enable reCAPTCHA⇑

説明

Enable the reCaptcha Protection feature at the current level. This setting must be set to Yes at the Server level before the reCaptcha Protection feature can be used.

Default values:
Server-level: Yes
VH-Level: Inherit Server level setting

構文

ラジオボックスから選択

+

reCAPTCHA Protection⇑

説明

reCAPTCHA Protection is a service provided as a way to mitigate heavy server load. reCAPTCHA Protection will activate after one of the below situations is hit. Once active, all requests by NON TRUSTED(as configured) clients will be redirected to a reCAPTCHA validation page. After validation, the client will be redirected to their desired page.

The following situations will activate reCAPTCHA Protection:
1. The server or vhost concurrent requests count passes the configured connection limit.
2. Anti-DDoS is enabled and a client is hitting a url in a suspicious manner. The client will redirect to reCAPTCHA first instead of getting denied when triggered.
3. A new rewrite rule environment is provided to activate reCAPTCHA via RewriteRules. 'verifycaptcha' can be set to redirect clients to reCAPTCHA. A special value ': deny' can be set to deny the client if it failed too many times. For example, [E=verifycaptcha] will always redirect to reCAPTCHA until verified. [E=verifycaptcha: deny] will redirect to reCAPTCHA until Max Tries is hit, after which the client will be denied.

+

Enable reCAPTCHA⇑

説明

Enable the reCAPTCHA Protection feature at the current level. This setting must be set to Yes at the Server level before the reCAPTCHA Protection feature can be used.

Default values:
Server-level: Yes
VH-Level: Inherit Server level setting

構文

ラジオボックスから選択

Site Key⇑

説明

The site key is the public key provided by Google via its reCAPTCHA service. A default Site Key will be used if not set.

Secret Key⇑

説明

The secret key is the private key provided by Google via its reCAPTCHA service. A default Secret Key will be used if not set.

reCAPTCHA Type⇑

説明

Specify the reCAPTCHA type to use with the key pairs. If a key pair has not been provided and this setting is set to Not Set, a default key pair of type Invisible will be used.
Checkbox will display a checkbox reCAPTCHA for the visitor to validate.
Invisible will attempt to validate the reCAPTCHA automatically and if successful, will redirect to the desired page.

Default value is Invisible.

構文

ドロップダウンリストから選択

@@ -136,12 +138,14 @@

サーバーのセキュリティ

目次

Bot White List⇑

説明

List of custom user agents to allow access. Will be subject to the ‘good bots’ limitations, including allowedRobotHits.

構文

List of user agents, one per line. Regex is supported.

Connection Limit⇑

説明

The number of concurrent connections (SSL & non-SSL) needed to activate reCAPTCHA. reCAPTCHA will be used until concurrent connections drop below this number.

Default value is 15000.

構文

整数

SSL Connection Limit⇑

説明

The number of concurrent SSL connections needed to activate reCAPTCHA. reCAPTCHA will be used until concurrent connections drop below this number.

Default value is 10000.

構文

整数

+

Bubblewrap Container⇑

説明

Set to On if you wish to start CGI processes (including PHP programs) in a bubblewrap sandbox. See https://wiki.archlinux.org/index.php/Bubblewrap for details on using bubblewrap. Bubblewrap must be installed on your system prior to using this setting.

This setting cannot be turned on at the Virtual Host level if set to "Disabled" at the Server level.

Default values:
Server level: Disabled
VH level: Inherit Server level setting

構文

ドロップダウンリストから選択

+

Bubblewrap Command⇑

説明

The full bubblewrap use command, including the bubblewrap program itself. More on configuring this command can be found here: https://openlitespeed.org/kb/bubblewrap-in-openlitespeed/ . If not specified, the default command listed below will be used.

Default value: /bin/bwrap --ro-bind /usr /usr --ro-bind /lib /lib --ro-bind-try /lib64 /lib64 --ro-bind /bin /bin --ro-bind /sbin /sbin --dir /var --dir /tmp --proc /proc --symlink../tmp var/tmp --dev /dev --ro-bind-try /etc/localtime /etc/localtime --ro-bind-try /etc/ld.so.cache /etc/ld.so.cache --ro-bind-try /etc/resolv.conf /etc/resolv.conf --ro-bind-try /etc/ssl /etc/ssl --ro-bind-try /etc/pki /etc/pki --ro-bind-try /etc/man_db.conf /etc/man_db.conf --ro-bind-try /home/$USER /home/$USER --bind-try /var/lib/mysql/mysql.sock /var/lib/mysql/mysql.sock --bind-try /home/mysql/mysql.sock /home/mysql/mysql.sock --bind-try /tmp/mysql.sock /tmp/mysql.sock --unshare-all --share-net --die-with-parent --dir /run/user/$UID ‘$PASSWD 65534’ ‘$GROUP 65534’

アクセスが拒否されたディレクトリ⇑

説明

アクセスをブロックするディレクトリを指定します。 重要なデータを含むディレクトリをこのリストに追加して、誤って機密ファイルをクライアントに公開しないようにします。 すべてのサブディレクトリを含めるためにパスに「*」を追加します。 シンボリックリンクに従うとシンボリックリンクを確認するの両方を有効にすると、拒否されたディレクトリに対してシンボリックリンクがチェックされます。

構文

ディレクトリのカンマ区切りリスト

ヒント

[セキュリティ]重要な点：この設定では、これらのディレクトリから静的ファイルを提供することができません。 これは、PHP/Ruby/CGIなどの外部スクリプトによるエクスポージャーを防ぐものではありません。

アクセス制御⇑

説明

どのサブネットワークおよび/またはIPアドレスがサーバーにアクセスできるかを指定します。 サーバレベルでは、この設定はすべてのバーチャルホストに影響します。 バーチャルホストレベルで各バーチャルホストに固有のアクセス制御を設定することもできます。 バーチャルホストレベルの設定はサーバーレベルの設定を上書きしません。

ブロック/ IPの許可は、許可リストと拒否リストの組み合わせによって決まります。 特定のIPまたはサブネットワークのみをブロックする場合は、許可リストに*またはALLを入れ、ブロックされたIPまたはサブネットワークを拒否リスト。
特定のIPまたはサブネットワークのみを許可する場合は、拒否リストに*またはALLを入れ、許可されたIPまたはサブネットワークを許可リスト。
IPに適合する最小スコープの設定は、アクセスを決定するために使用されます。

サーバーレベル：信頼できるIPまたはサブネットワークは、許可リストに、末尾の "T"を追加することで指定する必要があります。 信頼できるIPまたはサブネットワークは、接続/スロットリング制限の影響を受けません。 信頼できるIP/サブネットワークは、サーバーレベルのアクセス制御でのみ設定できます。

ヒント

[セキュリティ]すべてのバーチャルホストに適用される一般的な制限については、サーバーレベルでこれを使用してください。

許可リスト⇑

説明

許可されるIPまたはサブネットワークのリストを指定します。 *またはALLが受け入れられます。

構文

IPアドレスまたはサブネットワークのカンマ区切りリスト。 末尾の「T」は、192.168.1.*Tなどの信頼できるIPまたはサブネットワークを示すために使用できます。

例

Sub-networks: 192.168.1.0/255.255.255.0, 192.168.1.0/24, 192.168.1, or 192.168.1.*
IPv6 addresses: ::1 or [::1]
IPv6 subnets: 3ffe:302:11:2:20f:1fff:fe29:717c/64 or [3ffe:302:11:2:20f:1fff:fe29:717c]/64

ヒント

[セキュリティ]サーバーレベルのアクセス制御で設定された信頼されたIPまたはサブネットワークは、接続/スロットリングの制限から除外されます。

拒否リスト⇑

説明

許可されていないIPまたはサブネットワークのリストを指定します。

構文

IPアドレスまたはサブネットワークのカンマ区切りリスト。 *またはALLが受け入れられます。

例

Sub-networks: 192.168.1.0/255.255.255.0, 192.168.1.0/24, 192.168.1, or 192.168.1.*
IPv6 addresses: ::1 or [::1]
IPv6 subnets: 3ffe:302:11:2:20f:1fff:fe29:717c/64 or [3ffe:302:11:2:20f:1fff:fe29:717c]/64
-
+
diff --git a/dist/docs/ja-JP/ServTuning_Help.html b/dist/docs/ja-JP/ServTuning_Help.html index aafc63477..9f2f521d2 100644 --- a/dist/docs/ja-JP/ServTuning_Help.html +++ b/dist/docs/ja-JP/ServTuning_Help.html @@ -84,7 +84,7 @@
Version 1.4  — Rev. 3

サーバーのチューニング

目次

OSの最適化

デフォルトのSHMディレクトリ

接続のチューニング

-最大接続数 | 最大SSL接続数 | コネクションタイムアウト（秒） | 最大キープアライブ要求 | スマートキープアライブ | キープアライブタイムアウト（秒） | 送信バッファサイズ（バイト） | 受信バッファサイズ（バイト）

+最大接続数 | 最大SSL接続数 | コネクションタイムアウト（秒） | 最大キープアライブ要求 | キープアライブタイムアウト（秒） | 送信バッファサイズ（バイト） | 受信バッファサイズ（バイト）

要求/応答のチューニング

最大リクエストURLの長さ（バイト） | 最大要求ヘッダーサイズ（バイト） | 最大リクエストボディサイズ（バイト） | 最大動的応答ヘッダーサイズ（バイト） | 最大動的応答ボディサイズ（バイト）

静的ファイル配信の最適化

@@ -92,7 +92,7 @@

サーバーのチューニング

目次

GZIP圧縮チューニング

圧縮を有効にする | 圧縮可能なタイプ | 動的圧縮を有効にする | 圧縮レベル（動的コンテンツ） | Brotli Compression Level (Dynamic Content) | 静的ファイルの自動更新 | 圧縮レベル（静的コンテンツ） | Brotli Compression Level (Static File) | 静的GZIPキャッシュディレクトリ | 最大静的ファイルサイズ（バイト） | 最小静的ファイルサイズ（バイト）

SSLグローバル設定

-SSL Strong DH Key | 複数のSSL証明書を有効にする | セッションキャッシュを有効にする | セッションキャッシュサイズ（バイト） | セッションキャッシュタイムアウト（秒） | セッションチケットを有効にする | SSLセッションチケットの有効期間（秒） | SSLセッションチケットキーファイル

+Default Cipher Suite | SSL Strong DH Key | 複数のSSL証明書を有効にする | セッションキャッシュを有効にする | セッションキャッシュサイズ（バイト） | セッションキャッシュタイムアウト（秒） | セッションチケットを有効にする | SSLセッションチケットの有効期間（秒） | SSLセッションチケットキーファイル

QUIC

Enable QUIC | QUIC SHM Directory | QUIC Versions | Congestion Control | Connection Flow Control Window | Max Connection Flow Control Window | Stream Flow Control Window | Max Stream Flow Control Window | Max Concurrent Streams Per Connection | Handshake Timeout | Idle Timeout

@@ -101,7 +101,6 @@

サーバーのチューニング

目次

最大SSL接続数⇑

説明

サーバーが受け入れる同時SSL接続の最大数を指定します。 同時SSL接続と非SSL接続の合計が最大接続数で指定された制限を超えることはできないため、許可される同時SSL接続の実際の数はこの制限より小さくなければなりません。

構文

整数

コネクションタイムアウト（秒）⇑

説明

1つの要求の処理中に許容される最大接続アイドル時間を指定します。 この時間の間、接続がアイドル状態の場合、つまりI/Oアクティビティがない場合は、接続が閉じられます。

構文

整数

ヒント

[セキュリティ]潜在的なDoS攻撃の間に不在接続を回復するのに役立つように、この値を低く設定します。

参照

キープアライブタイムアウト（秒）

最大キープアライブ要求⇑

説明

キープアライブ（永続的）セッションを介して処理できる要求の最大数を指定します。 この制限に達すると接続は終了します。 バーチャルホストごとにこの制限を設定することもできます。

構文

整数

ヒント

[パフォーマンス]適度に高い値に設定します。 "1"または "0"の値はキープアライブを無効にします。

参照

Virtual Host 最大キープアライブ要求

-

スマートキープアライブ⇑

説明

バーチャルホストSmartキープアライブ DESCR：スマートキープアライブをオンにするかどうかを指定します。 このオプションは、最大キープアライブ要求が1より大きい場合にのみ有効です。 有効にすると、バーチャルホストレベルで有効/無効にすることもできます。 スマートキープアライブは、JavaScript、CSSスタイルシート、およびイメージファイルの要求に対してのみキープアライブ接続を確立します。 htmlページの場合、接続は維持されません。 これにより、より多くのユーザーに効率的にサービスを提供できます。 通常、Webページには、最初のリクエスト後にブラウザによってキャッシュされる複数のイメージとスクリプトが含まれています。
これらの非HTML静的ファイルを単一のキープアライブ接続で送信し、text/htmlファイルを別の非キープアライブ接続経由で送信する方が効率的です。 この方法は、アイドル状態の接続を減らし、より多くの同時要求およびユーザーを処理するための容量を増加させます。

構文

ラジオボックスから選択

ヒント

[パフォーマンス]高負荷のWebサイトでこれを有効にします。

参照

Virtual Host Smartキープアライブ

キープアライブタイムアウト（秒）⇑

説明

キープアライブ接続からの要求間の最大アイドル時間を指定します。 この期間中に新しい要求が受信されない場合、接続は閉じられます。 この設定は、HTTP/1.1接続にのみ適用されます。 HTTP/2接続は、設計によって長いキープアライブタイムアウトを持ち、この設定の影響を受けません。

構文

整数

ヒント

[セキュリティ & パフォーマンス]ロードする必要がある単一のページで参照されるアセットが多くある場合、クライアントからの後続のリクエストを待機するのに十分な時間だけこの値を設定することをお勧めします。 キープアライブ接続で次のページが配信されることを期待して、これを長く設定しないでください。 多くのアイドル状態のキープアライブ接続を維持することはサーバーリソースの浪費であり、（D）DoS攻撃によって活用される可能性があります。 2-5秒はほとんどのアプリケーションにとって妥当な範囲です。 LiteSpeedは非キープアライブ環境で非常に効率的です。

送信バッファサイズ（バイト）⇑

説明

各TCPソケットの送信バッファサイズ。 512Kは許容されるバッファの最大サイズです。

構文

整数

ヒント

[パフォーマンス]オペレーティングシステムのデフォルトのバッファサイズを使用するには、この値を "未設定"のままにするか、0に設定することをお勧めします。
[パフォーマンス] Webサイトで大きな静的ファイルが使用されている場合は、送信バッファサイズを大きくしてパフォーマンスを向上させてください。
[パフォーマンス]これを低い値に設定すると、ソケットあたりのスループットとメモリ使用量が減少し、メモリがボトルネックになった場合にサーバーがより多くの同時ソケットを持つことが可能になります。

受信バッファサイズ（バイト）⇑

説明

各TCPソケットの受信バッファーサイズ。 512Kは許容されるバッファの最大サイズです。

構文

整数

ヒント

[パフォーマンス]オペレーティングシステムのデフォルトのバッファサイズを使用するには、この値を "未設定"のままにするか、0に設定することをお勧めします。
[パフォーマンス]大きい受信バッファは、大きなペイロード、すなわちファイルアップロードで着信要求を処理するときのパフォーマンスを向上させます。
[パフォーマンス]これを低い値に設定すると、ソケットあたりのスループットとメモリ使用量が減少し、メモリがボトルネックになった場合にサーバーがより多くの同時ソケットを持つことが可能になります。

@@ -127,6 +126,7 @@

サーバーのチューニング

目次

静的GZIPキャッシュディレクトリ⇑

説明

静的コンテンツ用の圧縮ファイルの格納に使用されるディレクトリのパスを指定します。 デフォルトはスワップディレクトリです。

構文

ディレクトリパス

最大静的ファイルサイズ（バイト）⇑

説明

静的ファイルの最大サイズを指定します。 サーバーは自動的に圧縮ファイルを作成します。

構文

1K以上のバイト数

ヒント

[パフォーマンス]大規模なファイルに対してサーバーが圧縮ファイルを作成/更新することはお勧めできません。 圧縮は、サーバープロセス全体をブロックし、圧縮が完了するまで、それ以上の要求は処理できません。

最小静的ファイルサイズ（バイト）⇑

説明

静的ファイルの最小サイズを指定します。 サーバーは対応する圧縮ファイルを作成します。

構文

バイト数は200より小さくない。

ヒント

帯域幅の節約はごくわずかなため、非常に小さいファイルを圧縮する必要はありません。

+

Default Cipher Suite⇑

説明

Default cipher suite for SSL certificates.

Default value: Server Internal Default (Based on current best practices)

構文

Colon-separated string of cipher specifications.

SSL Strong DH Key⇑

説明

Specifies whether to use 2048 or 1024 bit DH keys for SSL handshakes. If set to "Yes", 2048 bit DH keys will be used for 2048 bit SSL keys and certificates. 1024 bit DH keys will still be used in other situations. Default is "Yes".

Earlier versions of Java do not support DH key size higher than 1024 bits. If Java client compatibility is required, this should be set to "No".

構文

radio

複数のSSL証明書を有効にする⇑

説明

リスナー/バーチャルホストが複数のSSL証明書を設定できるようにします。 複数の証明書が有効な場合、証明書/キーは命名規則に従うことが想定されます。 証明書の名前がserver.crtの場合、その他の可能な証明書名はserver.crt.rsa、server.crt.dsa、server.crt.eccです。 「未設定」の場合、デフォルトは「いいえ」です。

構文

ラジオボックスから選択

セッションキャッシュを有効にする⇑

説明

セッションIDキャッシングを有効にします。 「未設定」の場合、デフォルトは「いいえ」です。 （Opensslデフォルト）

構文

ラジオボックスから選択

@@ -147,7 +147,7 @@

サーバーのチューニング

目次

Handshake Timeout⇑

説明

The time in seconds a new QUIC connection is given to complete its handshake, after which the connection is aborted. Default value is 10.

構文

Integer number between 1 and 15

Idle Timeout⇑

説明

The time in seconds after which an idle QUIC connection will be closed. Default value is 30.

構文

Integer number between 10 and 30

-
+
diff --git a/dist/docs/ja-JP/ServerStat_Help.html b/dist/docs/ja-JP/ServerStat_Help.html index 738ff2bcc..93bdb4cfb 100644 --- a/dist/docs/ja-JP/ServerStat_Help.html +++ b/dist/docs/ja-JP/ServerStat_Help.html @@ -115,7 +115,7 @@

目次

無効⇑

説明

無効アクションは、実行中のバーチャルホストを停止します。 新しいリクエストは受け付けられませんが、処理中のリクエストは通常通り終了します。

再起動 - バーチャルホスト⇑

説明

Restartアクションにより、Webサーバーはこのバーチャルホストの最新の構成をロードします。 処理中のリクエストは古い設定で終了します。 新しい設定は新しいリクエストにのみ適用されます。 バーチャルホストへのすべてのハングは、この方法でオンザフライで適用できます。

-
+
diff --git a/dist/docs/ja-JP/Servlet_Context.html b/dist/docs/ja-JP/Servlet_Context.html index 0dae7a227..294795534 100644 --- a/dist/docs/ja-JP/Servlet_Context.html +++ b/dist/docs/ja-JP/Servlet_Context.html @@ -98,7 +98,7 @@

サーブレットコンテキスト

目次

IPジオロケーションを有効にする⇑

説明

IPジオロケーション検索を有効/無効にするかどうかを指定します。 サーバ、バーチャルホスト、コンテキストレベルで設定できます。 値 「未設定」を使用すると、IPジオロケーションはデフォルトで無効になります。

構文

ラジオボックスから選択

参照

ヘッダーにクライアントIPを使用する, DBファイルのパス,

-
+
diff --git a/dist/docs/ja-JP/Static_Context.html b/dist/docs/ja-JP/Static_Context.html index 9e2a4e843..f031805c9 100644 --- a/dist/docs/ja-JP/Static_Context.html +++ b/dist/docs/ja-JP/Static_Context.html @@ -112,7 +112,7 @@

静的コンテキスト

目次

IPジオロケーションを有効にする⇑

説明

IPジオロケーション検索を有効/無効にするかどうかを指定します。 サーバ、バーチャルホスト、コンテキストレベルで設定できます。 値 「未設定」を使用すると、IPジオロケーションはデフォルトで無効になります。

構文

ラジオボックスから選択

参照

ヘッダーにクライアントIPを使用する, DBファイルのパス,

php.ini Override⇑

説明

Used to overwrite php.ini settings in the current context (Virtual Host level or Context level).

Supported directives are:
php_value
php_flag
php_admin_value
php_admin_flag

All other lines/directives will be ignored.

構文

Override syntax is similar to Apache, a newline separated list of directives and their values with each directive being prepended by php_value, php_flag, php_admin_value, or php_admin_flag appropriately.

例

php_value include_path ".:/usr/local/lib/php"
php_admin_flag engine on
php_admin_value open_basedir "/home"
-
+
diff --git a/dist/docs/ja-JP/Templates_Help.html b/dist/docs/ja-JP/Templates_Help.html index ba9a06bf9..8f2d55749 100644 --- a/dist/docs/ja-JP/Templates_Help.html +++ b/dist/docs/ja-JP/Templates_Help.html @@ -112,7 +112,7 @@

目次

ドキュメントルート⇑

説明

各メンバーバーチャルホストのドキュメントルートの一意のパスを指定します。 変数$VH_NAMEまたは$VH_ROOTは、各メンババーチャルホストが独自のドキュメントルートを持つように、パスに現れなければなりません。

構文

$VH_NAME又は$VH_ROOT変数を含むパス

例

$VH_ROOT/public_html/ 又は $SERVER_ROOT/$VH_NAME/public_html.

テンプレートで使用されるファイル名⇑

説明

メンバーバーチャルホストに使用されるファイルのパスを指定します。 変数$VH_NAMEまたは$VH_ROOTは、各メンババーチャルホストが独自のファイルを持つように、パスに現れなければなりません。

構文

文字列

-
+
diff --git a/dist/docs/ja-JP/VHGeneral_Help.html b/dist/docs/ja-JP/VHGeneral_Help.html index 54eff1c39..b9b8f648c 100644 --- a/dist/docs/ja-JP/VHGeneral_Help.html +++ b/dist/docs/ja-JP/VHGeneral_Help.html @@ -84,9 +84,9 @@
Version 1.4  — Rev. 3

バーチャルホストの一般

目次

一般

ドキュメントルート | 管理者用電子メール | GZIPを有効にする | IPジオロケーションを有効にする | cgroups

バーチャルホストログ

-サーバーのログを使用する | File Name | ログレベル | ローテーションサイズ（バイト）

+サーバーのログを使用する | File Name | ログレベル | ローテーションサイズ（バイト） | Keep Days

アクセスログ

-ログ制御 | ファイル名 | パイプロガー | Log Format | ログヘッダー | ローテーションサイズ（バイト） | 保持日数 | バイトログ | アーカイブを圧縮する

+ログ制御 | ファイル名 | パイプロガー | Log Format | ログヘッダー | ローテーションサイズ（バイト） | Keep Days | バイトログ | アーカイブを圧縮する

インデックスファイル

サーバーインデックスファイルを使用する | インデックスファイル | 自動インデックス | 自動インデックス URI

カスタマイズされたエラーページ

@@ -111,12 +111,12 @@

バーチャルホストの一般

目次

File Name⇑

説明

ログファイルのパスを指定します。

構文

ファイル名への絶対パス又は$SERVER_ROOT、$VH_ROOTからの相対パス。

ヒント

[パフォーマンス]ログファイルを別のディスクに配置します。

ログレベル⇑

説明

ロギングのレベルを指定します。 使用可能なレベルは、ERROR、WARNING、NOTICE、INFO、DEBUGです。 現在の設定以上のレベルのメッセージのみが記録されます。 DEBUGに設定する場合は、サーバログレベルをDEBUGに設定する必要があります。 デバッグのレベルは、デバッグレベルによってサーバーレベルでのみ制御されます。

構文

選択

ヒント

[パフォーマンス] デバッグレベルがNONE以外のレベルに設定されていない限り、DEBUGログレベルはパフォーマンスに影響を及ぼさず、推奨されます。

参照

デバッグレベル

ローテーションサイズ（バイト）⇑

説明

現在のログファイルをロールオーバーする必要があるとき、つまりログローテーションを指定します。 ファイルサイズがロールオーバー制限を超えると、アクティブなログファイルは同じディレクトリにlog_name.mm_dd_yyyy（.sequence）という名前に変更され、新しいアクティブなログファイルが作成されます。 回転ログファイルが実際に作成されると、そのサイズはこのサイズ制限より少し大きくなることがあります。 ログのローテーションを無効にするには、 0 に設定します。

構文

整数

ヒント

キロ、メガ、ギガバイトの数字に「K」、「M」、「G」を追加します。

+

Keep Days⇑

説明

Specifies how many days the access log file will be kept on disk. Only rotated log files older than the specified number of days will be deleted. The current log file will not be touched regardless how many days worth of data it contains. If you do not want to auto-delete stale and very old log files, set this to 0.

構文

整数

ログ制御⇑

説明

アクセスログを書き込むべき場所。 3つのオプションがあります:

  1. サーバのアクセスログに書き込む
  2. このバーチャルホストのアクセスログを作成する
  3. アクセスログを無効にする

構文

選択

ファイル名⇑

説明

アクセスログファイル名。

構文

ファイル名への絶対パス又は$SERVER_ROOT、$VH_ROOTからの相対パス。

ヒント

[パフォーマンス]アクセスログファイルを別のディスクに配置します。

パイプロガー⇑

説明

LiteSpeedがSTDINストリーム上のパイプを通じて送信するアクセスログデータを受け取る外部アプリケーションを指定します（ファイルハンドルは0）。 このフィールドが指定されると、アクセスログはロガーアプリケーションにのみ送信され、前のエントリで指定されたアクセスログファイルには送信されません。

ロガーアプリケーションは、最初に外部アプリケーションセクションで定義する必要があります。 サーバー・レベルのアクセス・ロギングは、サーバー・レベルで定義された外部ロガー・アプリケーションのみを使用できます。 バーチャルホストレベルのアクセスロギングでは、バーチャルホストレベルで定義されたロガーアプリケーションのみを使用できます。

ロガープロセスは、他の外部（CGI/FastCGI/LSAPI）プロセスと同じ方法で生成されます。 つまり、バーチャルホストの外部アプリ Set UID モード設定で指定されたユーザーIDとして実行され、特権ユーザーのために実行されることはありません。.

LiteSpeed Webサーバーは、複数のロガーアプリケーションのインスタンスが設定されている場合、複数のロガーアプリケーション間で簡単なロードバランシングを実行します。 LiteSpeedサーバーは、常にロガーアプリケーションの数を可能な限り低く抑えようとします。 1つのロガーアプリケーションがアクセスログエントリを時間内に処理できない場合にのみ、サーバーはロガーアプリケーションの別のインスタンスを生成しようとします。

ロガーがクラッシュした場合、Webサーバーは別のインスタンスを開始しますが、ストリームバッファーのログデータは失われます。 外部ロガーがログ・ストリームの速度と量に追いつけない場合、ログ・データを失う可能性があります。

構文

選択

Log Format⇑

説明

アクセスログのログ形式を指定します。 ログフォーマットが設定されると、ログヘッダーの設定より優先されます。

構文

文字列。ログフォーマットの構文はApache 2.0のカスタムと互換性があります log format。

例


共通ログフォーマット（CLF）
"%h %l %u %t \"%r\" %>s %b"

バーチャルホストによる共通ログフォーマット
"%v %h %l %u %t \"%r\" %>s %b"

NCSA拡張/結合ログフォーマット
"%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"

FoobarのログCookie値
"%{Foobar}C"

参照

ログヘッダー

ログヘッダー⇑

説明

Referer、UserAgent、HostのいずれかをHTTPリクエストヘッダとして記録するかどうかを指定します。

構文

チェックボックス

ヒント

[パフォーマンス]これらのヘッダーがアクセスログに必要ない場合は、これをオフにします。

参照

Log Format

-

保持日数⇑

説明

アクセスログファイルをディスクに保管する日数を指定します。 指定した日数より古いローテーションしたログファイルのみが削除されます。 現在のログファイルには、それに含まれるデータの日数にかかわらず、表示されません。 古いログファイルを自動削除しない場合は、 0 に設定します。

構文

整数

バイトログ⇑

説明

帯域幅バイトのログファイルへのパスを指定します。 指定すると、cPanel互換の帯域幅ログが作成されます。 これにより、要求と応答本体の両方を含む要求に対して転送された合計バイトが記録されます。

構文

ファイル名への絶対パス又は$SERVER_ROOTからの相対パス

ヒント

[パフォーマンス]ログファイルを別のディスクに配置します。

アーカイブを圧縮する⇑

説明

ディスク領域を節約するためにローテーションしたログファイルを圧縮するかどうかを指定します。

構文

ラジオボックスから選択

ヒント

ログファイルは圧縮率が高く、古いログのディスク使用量を減らすために推奨されます。

サーバーインデックスファイルを使用する⇑

説明

サーバーのインデックスファイル設定を使用するかどうかを指定します。 はいに設定すると、サーバーの設定だけが使用されます。 いいえに設定すると、サーバーの設定は使用されません。 追加に設定すると、このバーチャルホストのインデックスファイルリストに追加のインデックスファイルを追加できます。 このバーチャルホストのインデックスファイルを無効にする場合は、値をいいえに設定して、インデックスファイルのフィールドを空のままにします。

構文

選択

@@ -138,7 +138,7 @@

バーチャルホストの一般

目次

ハンドラ名⇑

説明

ハンドラタイプがFastCGI、Web Server、LSAPI、Load Balancer、またはServlet Engineの場合にスクリプトファイルを処理する外部アプリケーションの名前を指定します。

構文

ドロップダウンリストから選択

php.ini Override⇑

説明

Used to overwrite php.ini settings in the current context (Virtual Host level or Context level).

Supported directives are:
php_value
php_flag
php_admin_value
php_admin_flag

All other lines/directives will be ignored.

構文

Override syntax is similar to Apache, a newline separated list of directives and their values with each directive being prepended by php_value, php_flag, php_admin_value, or php_admin_flag appropriately.

例

php_value include_path ".:/usr/local/lib/php"
php_admin_flag engine on
php_admin_value open_basedir "/home"
-
+
diff --git a/dist/docs/ja-JP/VHSSL_Help.html b/dist/docs/ja-JP/VHSSL_Help.html index 7ac0dae87..9a3aca16c 100644 --- a/dist/docs/ja-JP/VHSSL_Help.html +++ b/dist/docs/ja-JP/VHSSL_Help.html @@ -119,7 +119,7 @@

Virtual Host SSL

目次

クライアントの失効パス⇑

説明

取り消されたクライアント証明書のPEMエンコードされたCA CRLファイルを含むディレクトリを指定します。 このディレクトリのファイルはPEMでエンコードする必要があります。 これらのファイルは、ハッシュファイル名、hash-value.rNによってアクセスされます。 ハッシュファイル名の作成については、openSSLまたはApache mod_sslのドキュメントを参照してください。

構文

パス

クライアント失効ファイル⇑

説明

取り消されたクライアント証明書を列挙するPEMエンコードCA CRLファイルを含むファイルを指定します。 これは、代わりに、またはクライアントの失効パスに加えて使用することができます。

構文

ファイル名への絶対パス又は$SERVER_ROOTからの相対パス

-
+
diff --git a/dist/docs/ja-JP/VHSecurity_Help.html b/dist/docs/ja-JP/VHSecurity_Help.html index 14ef7daef..8a843415c 100644 --- a/dist/docs/ja-JP/VHSecurity_Help.html +++ b/dist/docs/ja-JP/VHSecurity_Help.html @@ -81,33 +81,36 @@
Version 1.4  — Rev. 3
設定
-

バーチャルホストのセキュリティ

目次

reCaptcha Protection

+

バーチャルホストのセキュリティ

目次

reCAPTCHA Protection

Enable reCAPTCHA | Site Key | Secret Key | reCAPTCHA Type | Max Tries | Concurrent Request Limit

+
Bubblewrap Container

+Bubblewrap Container

アクセス制御

許可リスト | 拒否リスト

認可レルム

レルム名 | ユーザーDBの場所 | ユーザーDB最大キャッシュサイズ | ユーザーDBキャッシュタイムアウト（秒） | グループDBの場所 | グループDB最大キャッシュサイズ | グループDBキャッシュタイムアウト（秒）

-

reCaptcha Protection⇑

説明

reCaptcha Protection is a service provided as a way to mitigate heavy server load. reCaptcha Protection will activate after one of the below situations is hit. Once active, all requests by NON TRUSTED(as configured) clients will be redirected to a reCAPTCHA validation page. After validation, the client will be redirected to their desired page.

The following situations will activate reCaptcha Protection:
1. The server or vhost concurrent requests count passes the configured connection limit.
2. Anti-DDoS is enabled and a client is hitting a url in a suspicious manner. The client will redirect to reCAPTCHA first instead of getting denied when triggered.
3. WP Brute Force protection is enabled and action is set to 'Captcha or Drop’. When a brute force attack is detected, the client will redirect to reCAPTCHA first. After max tries is reached, the connection will be dropped, as per the ‘drop’ option.
4. A new rewrite rule environment is provided to activate reCAPTCHA via RewriteRules. 'verifycaptcha' can be set to redirect clients to reCAPTCHA. A special value ': deny' can be set to deny the client if it failed too many times. For example, [E=verifycaptcha] will always redirect to reCAPTCHA until verified. [E=verifycaptcha: deny] will redirect to reCAPTCHA until Max Tries is hit, after which the client will be denied.

-

Enable reCAPTCHA⇑

説明

Enable the reCaptcha Protection feature at the current level. This setting must be set to Yes at the Server level before the reCaptcha Protection feature can be used.

Default values:
Server-level: Yes
VH-Level: Inherit Server level setting

構文

ラジオボックスから選択

+

reCAPTCHA Protection⇑

説明

reCAPTCHA Protection is a service provided as a way to mitigate heavy server load. reCAPTCHA Protection will activate after one of the below situations is hit. Once active, all requests by NON TRUSTED(as configured) clients will be redirected to a reCAPTCHA validation page. After validation, the client will be redirected to their desired page.

The following situations will activate reCAPTCHA Protection:
1. The server or vhost concurrent requests count passes the configured connection limit.
2. Anti-DDoS is enabled and a client is hitting a url in a suspicious manner. The client will redirect to reCAPTCHA first instead of getting denied when triggered.
3. A new rewrite rule environment is provided to activate reCAPTCHA via RewriteRules. 'verifycaptcha' can be set to redirect clients to reCAPTCHA. A special value ': deny' can be set to deny the client if it failed too many times. For example, [E=verifycaptcha] will always redirect to reCAPTCHA until verified. [E=verifycaptcha: deny] will redirect to reCAPTCHA until Max Tries is hit, after which the client will be denied.

+

Enable reCAPTCHA⇑

説明

Enable the reCAPTCHA Protection feature at the current level. This setting must be set to Yes at the Server level before the reCAPTCHA Protection feature can be used.

Default values:
Server-level: Yes
VH-Level: Inherit Server level setting

構文

ラジオボックスから選択

Site Key⇑

説明

The site key is the public key provided by Google via its reCAPTCHA service. A default Site Key will be used if not set.

Secret Key⇑

説明

The secret key is the private key provided by Google via its reCAPTCHA service. A default Secret Key will be used if not set.

reCAPTCHA Type⇑

説明

Specify the reCAPTCHA type to use with the key pairs. If a key pair has not been provided and this setting is set to Not Set, a default key pair of type Invisible will be used.
Checkbox will display a checkbox reCAPTCHA for the visitor to validate.
Invisible will attempt to validate the reCAPTCHA automatically and if successful, will redirect to the desired page.

Default value is Invisible.

構文

ドロップダウンリストから選択

Max Tries⇑

説明

Max Tries specifies the maximum number of reCAPTCHA attempts permitted before denying the visitor.

Default value is 3.

構文

整数

Concurrent Request Limit⇑

説明

The number of concurrent requests needed to activate reCAPTCHA. reCAPTCHA will be used until concurrent requests drop below this number.

Default value is 15000.

構文

整数

+

Bubblewrap Container⇑

説明

Set to On if you wish to start CGI processes (including PHP programs) in a bubblewrap sandbox. See https://wiki.archlinux.org/index.php/Bubblewrap for details on using bubblewrap. Bubblewrap must be installed on your system prior to using this setting.

This setting cannot be turned on at the Virtual Host level if set to "Disabled" at the Server level.

Default values:
Server level: Disabled
VH level: Inherit Server level setting

構文

ドロップダウンリストから選択

アクセス制御⇑

説明

どのサブネットワークおよび/またはIPアドレスがサーバーにアクセスできるかを指定します。 サーバレベルでは、この設定はすべてのバーチャルホストに影響します。 バーチャルホストレベルで各バーチャルホストに固有のアクセス制御を設定することもできます。 バーチャルホストレベルの設定はサーバーレベルの設定を上書きしません。

ブロック/ IPの許可は、許可リストと拒否リストの組み合わせによって決まります。 特定のIPまたはサブネットワークのみをブロックする場合は、許可リストに*またはALLを入れ、ブロックされたIPまたはサブネットワークを拒否リスト。
特定のIPまたはサブネットワークのみを許可する場合は、拒否リストに*またはALLを入れ、許可されたIPまたはサブネットワークを許可リスト。
IPに適合する最小スコープの設定は、アクセスを決定するために使用されます。

サーバーレベル：信頼できるIPまたはサブネットワークは、許可リストに、末尾の "T"を追加することで指定する必要があります。 信頼できるIPまたはサブネットワークは、接続/スロットリング制限の影響を受けません。 信頼できるIP/サブネットワークは、サーバーレベルのアクセス制御でのみ設定できます。

ヒント

[セキュリティ]すべてのバーチャルホストに適用される一般的な制限については、サーバーレベルでこれを使用してください。

許可リスト⇑

説明

許可されるIPまたはサブネットワークのリストを指定します。 *またはALLが受け入れられます。

構文

IPアドレスまたはサブネットワークのカンマ区切りリスト。 末尾の「T」は、192.168.1.*Tなどの信頼できるIPまたはサブネットワークを示すために使用できます。

例

Sub-networks: 192.168.1.0/255.255.255.0, 192.168.1.0/24, 192.168.1, or 192.168.1.*
IPv6 addresses: ::1 or [::1]
IPv6 subnets: 3ffe:302:11:2:20f:1fff:fe29:717c/64 or [3ffe:302:11:2:20f:1fff:fe29:717c]/64

ヒント

[セキュリティ]サーバーレベルのアクセス制御で設定された信頼されたIPまたはサブネットワークは、接続/スロットリングの制限から除外されます。

拒否リスト⇑

説明

許可されていないIPまたはサブネットワークのリストを指定します。

構文

IPアドレスまたはサブネットワークのカンマ区切りリスト。 *またはALLが受け入れられます。

例

Sub-networks: 192.168.1.0/255.255.255.0, 192.168.1.0/24, 192.168.1, or 192.168.1.*
IPv6 addresses: ::1 or [::1]
IPv6 subnets: 3ffe:302:11:2:20f:1fff:fe29:717c/64 or [3ffe:302:11:2:20f:1fff:fe29:717c]/64

認可レルム⇑

説明

このバーチャルホストのすべての許可レルムをリストします。 認可レルムは、権限のないユーザーが保護されたWebページにアクセスするのをブロックするために使用されます。 レルムは、オプションのグループ分類を持つユーザー名とパスワードを含むユーザーディレクトリです。 認可は、コンテキスト・レベルで実行されます。 異なるコンテキストは同じレルム（ユーザデータベース）を共有できるため、レルムはそれらを使用するコンテキストとは別に定義されます。 コンテキスト設定では、これらの名前でレルムを参照できます。

レルム名⇑

説明

認可レルムの一意の名前を指定します。

-

ユーザーDBの場所⇑

説明

ユーザーデータベースの場所を指定します。 DBタイプパスワードファイルの場合、ユーザ/パスワード定義を含むフラットファイルへのパスです。 ファイル名をクリックするとWebAdminコンソールからこのファイルを編集できます。

ユーザーファイルの各行には、ユーザー名の後にコロン、crypt()で暗号化されたパスワードが続き、オプションでコロンとユーザーが所属するグループ名が続きます。 グループ名はカンマで区切られます。 グループ情報がユーザーデータベースに指定されている場合、グループデータベースはチェックされません。
例：

john:HZ.U8kgjnMOHo:admin,user


DBタイプ LDAP の場合、ユーザー情報を照会するのはLDAP URLです。 有効なユーザーごとに、LDAPサーバーに格納されている認証データには、少なくともユーザーIDとユーザーパスワードが含まれている必要があります。 HTTP認証ヘッダーで受け取ったこのURLとユーザー名に基づいて、LDAP検索要求で1つだけのレコードを返す必要があります。 "$ k"はURLのフィルタ部分で指定する必要があり、ユーザー名で置き換えられます。 ユーザーのパスワード属性は、照会結果に戻されなければなりません。 ユーザーのパスワードの属性名は、パスワード属性で指定します。 グループ情報は、Member-of属性で任意に指定できます。

例: 少なくとも、オブジェクトクラス（uidObject、simpleSecurityObject、およびorganizationalRole）を使用してLDAPでユーザーを定義できます。 次のURLを使用できます:

ldap://localhost/ou=UserDB,dc=example,dc=com???(&(objectClass=*)(uid=$k))

構文

ユーザーDBファイルまたはLDAP URL（RFC 2255）へのパス。

ヒント

[セキュリティ]ユーザーのパスワードファイルをドキュメントツリーの外部に保存することをお勧めします。 ユーザーのパスワードファイルをドキュメントツリー内に配置する必要がある場合は、.htuserのような先頭の ".ht"という名前を付けて、静的ファイルとして扱わないようにします。 LiteSpeed Web Serverでは、接頭辞が ".ht"のファイルは提供されません。

参照

グループDBの場所, パスワード属性, Member-of属性

+

ユーザーDBの場所⇑

説明

ユーザーデータベースの場所を指定します。 DBタイプパスワードファイルの場合、ユーザ/パスワード定義を含むフラットファイルへのパスです。 ファイル名をクリックするとWebAdminコンソールからこのファイルを編集できます。

ユーザーファイルの各行には、ユーザー名の後にコロン、crypt()で暗号化されたパスワードが続き、オプションでコロンとユーザーが所属するグループ名が続きます。 グループ名はカンマで区切られます。 グループ情報がユーザーデータベースに指定されている場合、グループデータベースはチェックされません。
例：

john:HZ.U8kgjnMOHo:admin,user


DBタイプ LDAP の場合、ユーザー情報を照会するのはLDAP URLです。 有効なユーザーごとに、LDAPサーバーに格納されている認証データには、少なくともユーザーIDとユーザーパスワードが含まれている必要があります。 HTTP認証ヘッダーで受け取ったこのURLとユーザー名に基づいて、LDAP検索要求で1つだけのレコードを返す必要があります。 "$ k"はURLのフィルタ部分で指定する必要があり、ユーザー名で置き換えられます。 ユーザーのパスワード属性は、照会結果に戻されなければなりません。 ユーザーのパスワードの属性名は、パスワード属性で指定します。 グループ情報は、Member-of属性で任意に指定できます。

例: 少なくとも、オブジェクトクラス（uidObject、simpleSecurityObject、およびorganizationalRole）を使用してLDAPでユーザーを定義できます。 次のURLを使用できます:

ldap://localhost/ou=UserDB,dc=example,dc=com???(&(objectClass=*)(uid=$k))

構文

ユーザーDBファイルまたはLDAP URL（RFC 2255）へのパス。

参照

グループDBの場所, パスワード属性, Member-of属性

ユーザーDB最大キャッシュサイズ⇑

説明

ユーザーデータベースの最大キャッシュサイズを指定します。 最近アクセスされたユーザー認証データは、最大のパフォーマンスを提供するためにメモリにキャッシュされます。

構文

整数

ヒント

[パフォーマンス]キャッシュが大きくなるとメモリが消費されるため、値が高くなるほどパフォーマンスが向上する場合があります。 ユーザーのデータベースサイズとサイトの使用状況に応じて適切なサイズに設定します。

ユーザーDBキャッシュタイムアウト（秒）⇑

説明

バックエンドユーザーデータベースの変更の確認頻度を指定します。 キャッシュ内のすべてのエントリにタイムスタンプがあります。 キャッシュされたデータが指定されたタイムアウトよりも古い場合、バックエンドデータベースの変更がチェックされます。 変更がなければ、タイムスタンプは現在の時刻にリセットされ、そうでない場合は新しいデータがロードされます。 Sevrerのリロードと穏やかな再起動により、キャッシュは直ちにクリアされます。

構文

整数

ヒント

[パフォーマンス]バックエンドデータベースが頻繁に変更されない場合は、パフォーマンスを向上させるために、より長いタイムアウトを設定します。

-

グループDBの場所⇑

説明

グループデータベースの場所を指定します。
グループ情報は、ユーザデータベースまたはこのスタンドアロングループDBに設定することができます。ユーザ認証の場合、ユーザDBが最初にチェックされます。ユーザDBにグループ情報も含まれている場合、グループDBはチェックされません。

DBタイプのパスワードファイルの場合、グループDBロケーションは、グループ定義を含むフラットファイルへのパスでなければなりません。ファイル名をクリックするとWebAdminコンソールからこのファイルを編集できます。
グループファイルの各行には、コロンとそのあとにスペース区切りのユーザー名のグループが続くグループ名が含まれている必要があります。例：

testgroup: user1 user2 user3

DBタイプLDAPの場合、グループDBロケーションは、グループ情報を照会するLDAP URLでなければなりません。 有効なグループごとに、このURLと必要（許可ユーザー/グループ）で指定されたグループ名に基づいて、LDAP検索リクエストで1つのレコードしか返されません。 "$k"はURLのフィルタ部分に指定する必要があり、グループ名に置き換えられます。 このグループのメンバーを指定する属性の名前は、グループメンバ属性によって指定されます。

例: objectClass posixGroupがグループ情報の格納に使用されている場合 次のURLを使用できます:
ldap://localhost/ou=GroupDB,dc=example,dc=com???(&(objectClass=*)(cn=$k))

構文

ファイル名への絶対パス又は$SERVER_ROOT、$VH_ROOTからの相対パス。

ヒント

[セキュリティ]文書ツリーの外にグループファイルを保存することをお勧めします。 ドキュメントツリー内に配置する必要がある場合は、.htgroupのような先頭の 「.ht」という名前を付けるだけでファイルが静的ファイルとして提供されないようにします。 LiteSpeed Web Serverでは、接頭辞が 「.ht」のファイルは提供されません。

参照

ユーザーDBの場所, Context 必要（許可ユーザー/グループ）, グループメンバ属性

+

グループDBの場所⇑

説明

グループデータベースの場所を指定します。
グループ情報は、ユーザデータベースまたはこのスタンドアロングループDBに設定することができます。ユーザ認証の場合、ユーザDBが最初にチェックされます。ユーザDBにグループ情報も含まれている場合、グループDBはチェックされません。

DBタイプのパスワードファイルの場合、グループDBロケーションは、グループ定義を含むフラットファイルへのパスでなければなりません。ファイル名をクリックするとWebAdminコンソールからこのファイルを編集できます。
グループファイルの各行には、コロンとそのあとにスペース区切りのユーザー名のグループが続くグループ名が含まれている必要があります。例：

testgroup: user1 user2 user3

DBタイプLDAPの場合、グループDBロケーションは、グループ情報を照会するLDAP URLでなければなりません。 有効なグループごとに、このURLと必要（許可ユーザー/グループ）で指定されたグループ名に基づいて、LDAP検索リクエストで1つのレコードしか返されません。 "$k"はURLのフィルタ部分に指定する必要があり、グループ名に置き換えられます。 このグループのメンバーを指定する属性の名前は、グループメンバ属性によって指定されます。

例: objectClass posixGroupがグループ情報の格納に使用されている場合 次のURLを使用できます:
ldap://localhost/ou=GroupDB,dc=example,dc=com???(&(objectClass=*)(cn=$k))

構文

ファイル名への絶対パス又は$SERVER_ROOT、$VH_ROOTからの相対パス。

参照

ユーザーDBの場所, Context 必要（許可ユーザー/グループ）, グループメンバ属性

グループDB最大キャッシュサイズ⇑

説明

グループデータベースの最大キャッシュサイズを指定します。

構文

整数

ヒント

[パフォーマンス]キャッシュが大きくなるとメモリが消費されるため、値が高くなるほどパフォーマンスが向上する場合があります。 ユーザーのデータベースサイズとサイトの使用状況に応じて適切なサイズに設定します。

参照

ユーザーDB最大キャッシュサイズ

-
+
diff --git a/dist/docs/ja-JP/VHWebSocket_Help.html b/dist/docs/ja-JP/VHWebSocket_Help.html index 3b63d25d7..20be7bc5e 100644 --- a/dist/docs/ja-JP/VHWebSocket_Help.html +++ b/dist/docs/ja-JP/VHWebSocket_Help.html @@ -90,7 +90,7 @@

目次

We

URI⇑

説明

このWebSocketバックエンドを使用するURIを指定します。 このURIへのトラフィックは、WebSocketのアップグレード要求が含まれている場合にのみWebSocketバックエンドに転送されます。

このアップグレード要求のないトラフィックは、このURIが属するコンテキストに自動的に転送されます。 このURIに対してContextが存在しない場合、LSWSはこのトラフィックを、$DOC_ROOT/URIの場所で静的コンテキストにアクセスしているものとして扱います。

構文

URIは、プレーンURI（ "/"で始まる）またはPerlと互換性のある正規表現URI（ "exp："で始まる）にすることができます。 プレーンURIが "/"で終わる場合、このWebSocketバックエンドはこのURIの下にすべてのサブURIを含みます。

例

WebSocketプロキシをコンテキストとともに使用すると、同じページでさまざまな種類のトラフィックをさまざまな方法で処理できるため、パフォーマンスが最適化されます。 WebSocketトラフィックをWebSocketバックエンドに送信し、LSWSがページの静的コンテンツまたはLSAPIコンテキストを提供できるように静的コンテキストを設定し、LSWSがPHPコンテンツ（両方ともLSSがWebSocketバックエンドより効率的に機能する）を提供できるようにします。

アドレス⇑

説明

WebSocketバックエンドによって使用される一意のソケットアドレス。 IPv4ソケット、IPv6ソケット、Unixドメインソケット（UDS）がサポートされています。 IPv4およびIPv6ソケットは、ネットワークを介した通信に使用できます。 UDSは、WebSocketバックエンドがサーバーと同じマシンに存在する場合にのみ使用できます。

構文

IPv4またはIPV6アドレス：ポートまたはUDS：//パス

例

127.0.0.1:5434
UDS://tmp/lshttpd/php.sock.

ヒント

[セキュリティ] WebSocketバックエンドが同じマシン上で実行される場合、UDSが優先されます。 IPv4またはIPv6ソケットを使用する必要がある場合は、IPアドレスをlocalhostまたは127.0.0.1に設定して、WebSocketバックエンド 他のマシンからはアクセスできません。
[パフォーマンス] Unixドメインソケットは、一般にIPv4またはIPv6ソケットよりも高いパフォーマンスを提供します。

-
+
diff --git a/dist/docs/ja-JP/VirtualHosts_Help.html b/dist/docs/ja-JP/VirtualHosts_Help.html index b1b92a80e..2b40f9c4a 100644 --- a/dist/docs/ja-JP/VirtualHosts_Help.html +++ b/dist/docs/ja-JP/VirtualHosts_Help.html @@ -87,7 +87,7 @@

バーチャルホストの基本

目次
基本

バーチャルホスト名 | バーチャルホスト Root | 設定ファイル

コネクション

-最大キープアライブ要求 | Smartキープアライブ

+最大キープアライブ要求

セキュリティ

シンボリックリンク参照 | スクリプトを有効にする | 拘束された | 外部アプリ Set UID モード | suEXEC User | suEXEC Group

バーチャルホスト

@@ -97,7 +97,6 @@

目次

バーチャルホスト Root⇑

説明

バーチャルホストのルートディレクトリを指定します。 注：これはドキュメントのルートではありません NOT です。 このディレクトリの下に、バーチャルホストに関連するすべてのファイル（ログファイル、htmlファイル、CGIスクリプトなど）を置くことをお勧めします。 バーチャルホストルートは、変数$VH_ROOTを使用して参照できます。

構文

絶対パス又は$SERVER_ROOTからの相対パス。

ヒント

[パフォーマンス]さまざまなハードドライブに異なるバーチャルホストを配置します。

設定ファイル⇑

説明

このバーチャルホストの設定ファイル名とディレクトリ。 設定ファイルは、$SERVER_ROOT/conf/vhosts/ディレクトリの下になければなりません。

構文

ファイル名への絶対パス又は$SERVER_ROOTからの相対パス

ヒント

$SERVER_ROOT/conf/vhosts/$VH_NAME/vhconf.confをお勧めします。

最大キープアライブ要求⇑

説明

キープアライブ（永続的）接続を介して提供できる最大要求を特定します。 この制限に達すると接続が閉じられます。 バーチャルホストごとに異なる制限を指定できます。 この数値は、サーバーレベルの最大キープアライブ要求の制限を超えることはできません。

構文

整数

ヒント

[パフォーマンス]合理的に高い値に設定します。 「1」以下の値を指定すると、キープアライブ接続が無効になります。

参照

最大キープアライブ要求

-

Smartキープアライブ⇑

説明

このバーチャルホストに対してSmart Keep-Aliveを有効にするかどうかを指定します。 このオプションは、スマートキープアライブがサーバーレベルで有効で、最大キープアライブ要求が1より大きい場合にのみ有効です。

構文

ラジオボックスから選択

ヒント

[パフォーマンス]多忙なWebサイトでこれを有効にします。

説明

このバーチャルホスト内のシンボリックリンクをたどるかどうかを指定します。 IF OWNER MATCHオプションは、同じ所有権を持つ場合にのみシンボリックリンクに従います。 この設定は、デフォルトのサーバーレベルの設定よりも優先されます。

構文

ドロップダウンリストから選択

ヒント

[パフォーマンスとセキュリティ]セキュリティを強化するために、この機能を無効にしてください。 パフォーマンスを向上させるには、有効にします。

スクリプトを有効にする⇑

説明

このバーチャルホストでスクリプティング（非静的ページ）を許可するかどうかを指定します。 無効にすると、CGI、FastCGI、LSAPI、サーブレットエンジン、その他のスクリプト言語はこのバーチャルホストでは許可されません。 このため、スクリプトハンドラを使用する場合は、スクリプトハンドラもここで有効にする必要があります。

構文

ラジオボックスから選択

拘束された⇑

説明

このバーチャルホストのルート（$VH_ROOT）を超えるファイルにこのWebサイトからアクセスできるかどうかを指定します。 はいに設定すると、$VH_ROOT以下のファイルにしかアクセスできず、シンボリックリンクや$VH_ROOTを超えるファイルやディレクトリを指すコンテキストへのアクセスが拒否されます。 しかし、これはCGIスクリプトのアクセシビリティを制限しません。 これは共有ホスティング環境で便利です。 シンボリックリンク参照は、ユーザーが$VH_ROOTでシンボリックリンクを使用できるようにはいに設定できます。 $VH_ROOTを超えるものはありません。

構文

ラジオボックスから選択

ヒント

[セキュリティ]共有ホスティング環境で有効にします。

@@ -109,7 +108,7 @@

目次

送信帯域幅（バイト/秒）⇑

説明

確立された接続の数に関係なく、単一のIPアドレスへの最大の送信スループット。 実際の帯域幅は効率上の理由からこの設定よりわずかに高くなることがあります。 帯域幅は4KB単位で割り当てられます。 スロットルを無効にするには、0に設定します。 クライアント単位の帯域幅制限（バイト/秒）は、バーチャルホストレベルの設定がサーバーレベルの設定を上回るサーバーまたはバーチャルホストレベルで設定できます。

構文

整数

ヒント

[パフォーマンス]パフォーマンスを向上させるため、帯域幅を8KB単位で設定します。.

[セキュリティ]信頼できるIPまたはサブネットワークは影響を受けません。

参照

受信帯域幅（バイト/秒）

受信帯域幅（バイト/秒）⇑

説明

確立された接続の数に関係なく、単一のIPアドレスからの最大許容着信スループット。 実際の帯域幅は効率上の理由からこの設定よりわずかに高くなることがあります。 帯域幅は1KB単位で割り当てられます。 スロットルを無効にするには、0に設定します。 クライアント単位の帯域幅制限（バイト/秒）は、バーチャルホストレベルの設定がサーバーレベルの設定を上回るサーバーまたはバーチャルホストレベルで設定できます。

構文

整数

ヒント

[セキュリティ]信頼できるIPまたはサブネットワークは影響を受けません。

参照

送信帯域幅（バイト/秒）

-
+
diff --git a/dist/docs/ja-JP/admin.html b/dist/docs/ja-JP/admin.html index 1371f6503..8ad96650a 100644 --- a/dist/docs/ja-JP/admin.html +++ b/dist/docs/ja-JP/admin.html @@ -133,7 +133,7 @@

管理

kill -HUP XXXX

-
+
diff --git a/dist/docs/ja-JP/config.html b/dist/docs/ja-JP/config.html index 340f216da..6bc919ef3 100644 --- a/dist/docs/ja-JP/config.html +++ b/dist/docs/ja-JP/config.html @@ -156,7 +156,7 @@

設定

-
+
diff --git a/dist/docs/ja-JP/index.html b/dist/docs/ja-JP/index.html index 7b1ea15a8..dfe7b60f1 100644 --- a/dist/docs/ja-JP/index.html +++ b/dist/docs/ja-JP/index.html @@ -101,7 +101,7 @@

目次

詳細については、OpenLiteSpeed Wiki

-
+
diff --git a/dist/docs/ja-JP/install.html b/dist/docs/ja-JP/install.html index acff8f7b8..a068e071c 100644 --- a/dist/docs/ja-JP/install.html +++ b/dist/docs/ja-JP/install.html @@ -203,7 +203,7 @@

アンインストール手順

  • 実行中のOpenLiteSpeedを停止する： [your_install_dir]/bin/lswsctrl stop
  • インストールディレクトリを削除します： rm -rf [your_install_dir]
    • -
    +
    diff --git a/dist/docs/ja-JP/intro.html b/dist/docs/ja-JP/intro.html index 6ebc328d4..96484f3a6 100644 --- a/dist/docs/ja-JP/intro.html +++ b/dist/docs/ja-JP/intro.html @@ -164,7 +164,7 @@

    使いやすい

  • サーバーを再起動せずにほとんどの変更を適用します。
    • -
    +
    diff --git a/dist/docs/ja-JP/license.html b/dist/docs/ja-JP/license.html index 626c87fd2..7cbcbb080 100644 --- a/dist/docs/ja-JP/license.html +++ b/dist/docs/ja-JP/license.html @@ -434,7 +434,7 @@

    以上の条項をあなたの新しいプログラムに適用する方法<

    もしこれがあなたの望むことならば、この許諾書の代わりにGNU劣等一般公衆利用許諾書を適用してください。ただしその前に、ぜひこれをお読みください。

    -
    +
    diff --git a/dist/docs/ja-JP/security.html b/dist/docs/ja-JP/security.html index 25476bba9..c5bcc344a 100644 --- a/dist/docs/ja-JP/security.html +++ b/dist/docs/ja-JP/security.html @@ -135,7 +135,7 @@

    セキュリティ

    これにより、あるユーザーのCGIスクリプトが他のユーザーのファイルにアクセスするのを防ぐことで、共有ホスティング環境のセキュリティが大幅に向上します。

    -
    +
    diff --git a/dist/docs/ja-JP/webconsole.html b/dist/docs/ja-JP/webconsole.html index 24f570f73..8dcdcdf84 100644 --- a/dist/docs/ja-JP/webconsole.html +++ b/dist/docs/ja-JP/webconsole.html @@ -92,7 +92,7 @@

    Webコンソール

  • 管理者パスワードをリセット
  • WebAdminリスナー & SSL設定
    • -
    +
    diff --git a/dist/docs/license.html b/dist/docs/license.html index 3c0e9667e..eb40bbf67 100644 --- a/dist/docs/license.html +++ b/dist/docs/license.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    -
    +
    diff --git a/dist/docs/security.html b/dist/docs/security.html index 7606ecfcf..bc3241d83 100644 --- a/dist/docs/security.html +++ b/dist/docs/security.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    diff --git a/dist/docs/zh-CN/AdminGeneral_Help.html b/dist/docs/zh-CN/AdminGeneral_Help.html index 438194568..d74e940ae 100644 --- a/dist/docs/zh-CN/AdminGeneral_Help.html +++ b/dist/docs/zh-CN/AdminGeneral_Help.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    启用Core Dump⇑

    Description

    指定当服务由root用户启动时是否启用core dump。 对大多数现代的Unix系统，会更改用户ID或组ID的进程出于安全考虑不被允许产生core文件。但是core dump文件对于排查故障非常有用。 这个选项只能在Linux Kernel 2.4或更高版本中可用。 Solaris用户应当使用coreadm命令来控制这个功能。

    Syntax

    布尔值

    Tips

    [安全建议] 仅在当你在服务器日志中看到没有创建core文件时启用。当产生core文件后立即关闭。Core文件产生后请提交bug报告。

    会话超时时长（秒）⇑

    Description

    自定义WebAdmin控制台会话超时时间。 如果未设置任何值，则默认值60秒生效。

    Syntax

    无符号整数

    Tips

    [安全建议] 在生产环境中一般设置一个不超过300秒的合适值。

    @@ -102,16 +112,16 @@

    Table of Contents

    File Name⇑

    Description

    Specifies the path for the log file.

    Syntax

    Filename which can be an absolute path or a relative path to $SERVER_ROOT, $VH_ROOT.

    Tips

    Place the log file on a separate disk.

    日志级别⇑

    Description

    指定日志记录级别。可用级别（从高到低）为ERROR, WARNING, NOTICE, INFO, 和 DEBUG。 只有当消息等级高于或与当前设置相同时才被记录。 如果您希望将此设置为DEBUG，您也需要设置服务器日志级别为DEBUG。 调试的级别只能在服务器级别通过调试级别控制。

    Syntax

    选项

    Tips

    [性能建议] 除非调试级别设置为NONE以外的日志级别, 否则DEBUG级别不会对性能产生任何影响，推荐采用。

    See Also

    调试级别

    回滚大小⇑

    Description

    指定何时日志文件需要回滚，也称为日志循环。 当文件大小超过回滚限制后，在使用的日志文件将在同一目录中被重命名 为log_name.mm_dd_yyyy(.sequence)，一个新的日志文件将被创建。 回滚的日志文件的实际大小有时会比限制值稍微大一些。 将值设置为0将禁用日志循环。

    Syntax

    无符号整数

    Tips

    请用“K”，“M”，“G”代表千字节，兆字节和千兆字节。

    +

    Keep Days⇑

    Description

    Specifies how many days the access log file will be kept on disk. Only rotated log files older than the specified number of days will be deleted. The current log file will not be touched regardless how many days worth of data it contains. If you do not want to auto-delete stale and very old log files, set this to 0.

    Syntax

    无符号整数

    日志管理⇑

    Description

    指定写入访问日志的地点。这里有三个选项： 1. 写入到服务器的访问日志； 2. 为虚拟主机创建一个访问日志； 3. 禁用访问日志记录。

    Syntax

    选项

    File Name⇑

    Description

    The access log filename.

    Syntax

    Filename which can be an absolute path or a relative path to $SERVER_ROOT, $VH_ROOT.

    Tips

    Put access log file on a separate disk.

    Piped Logger⇑

    Description

    Specifies the external application that will receive the access log data sent by LiteSpeed through a pipe on its STDIN stream (file handle is 0). When this field is specified, the access log will be sent only to the logger application and not the access log file specified in previous entry.

    The logger application must be defined in External Apps section first. Server-level access logging can only use an external logger application defined at the server level. Virtual host-level access logging can only use a logger application defined at the virtual host level.

    The logger process is spawned in the same way as other external (CGI/FastCGI/LSAPI) processes. This means it will execute as the user ID specified in the virtual host's 外部应用程序设置UID模式 settings and will never run on behalf of a privileged user.

    LiteSpeed web server performs simple load balancing among multiple logger applications if more than one instance of a logger application is configured. LiteSpeed server always attempts to keep the number of logger applications as low as possible. Only when one logger application fails to process access log entries in time will the server attempt to spawn another instance of the logger application.

    If a logger crashes, the web server will start another instance but the log data in the stream buffer will be lost. It is possible to lose log data if external loggers cannot keep up with the speed and volume of the log stream.

    Syntax

    Select from drop down list

    日志格式⇑

    Description

    指定访问日志的格式。 设置之后，它将覆盖记录头部 的设定。

    Syntax

    字符串。日志格式的语法与Apache 2.0自定义 日志格式兼容。

    Example

    一般日志格式（CLF）
    "%h %l %u %t \"%r\" %>s %b"

    支持虚拟主机的一般日志格式
    "%v %h %l %u %t \"%r\" %>s %b"

    NCSA扩展/组合日志格式
    "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"

    记录Foobar的cookie值
    "%{Foobar}C"

    See Also

    记录头部

    记录头部⇑

    Description

    指定是否记录HTTP请求头: Referer、 UserAgent和Host。

    Syntax

    复选框

    Tips

    [性能建议] 如果你不需要在访问日志中记录这些头部信息，关闭这个功能。

    See Also

    日志格式

    -

    保留天数⇑

    Description

    指定访问日志文件将被保存在磁盘上多少天。 只有超出指定天数的回滚日志文件会被删除。 当前的日志文件不会被删除，无论它包含了多少天的数据。 如果你不想自动删除过时的、很旧的日志文件， 将该值设置为0。

    Syntax

    无符号整数

    字节记录⇑

    Description

    指定带宽字节日志文件的路径。设置后，将创建一份兼容cPanel面板的带宽日志。这将记录 一个请求传输的总字节数，包括请求内容和响应内容。

    Syntax

    文件2

    Tips

    [性能建议] 将日志文件放置在一个单独的磁盘上。

    压缩存档⇑

    Description

    指定是否压缩回滚日志以节省磁盘空间。

    Syntax

    布尔值

    Tips

    日志文件是高度可压缩的，建议采取压缩以减少旧日志的磁盘占用量。

    -
    +
    diff --git a/dist/docs/zh-CN/AdminListeners_General_Help.html b/dist/docs/zh-CN/AdminListeners_General_Help.html index 639a0638a..5031907d4 100644 --- a/dist/docs/zh-CN/AdminListeners_General_Help.html +++ b/dist/docs/zh-CN/AdminListeners_General_Help.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    Secure⇑

    Description

    Specifies whether this is a secure (SSL) listener. For secure listeners, additional SSL settings need to be set properly.

    Syntax

    Select from radio box

    -
    +
    diff --git a/dist/docs/zh-CN/AdminListeners_SSL_Help.html b/dist/docs/zh-CN/AdminListeners_SSL_Help.html index 46f8e9cc4..a97963fca 100644 --- a/dist/docs/zh-CN/AdminListeners_SSL_Help.html +++ b/dist/docs/zh-CN/AdminListeners_SSL_Help.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    Client Revocation File⇑

    Description

    Specifies the file containing PEM-encoded CA CRL files enumerating revoked client certificates. This can be used as an alternative or in addition to Client Revocation Path.

    Syntax

    Filename which can be an absolute path or a relative path to $SERVER_ROOT.

    -
    +
    diff --git a/dist/docs/zh-CN/AdminSecurity_Help.html b/dist/docs/zh-CN/AdminSecurity_Help.html index 4b3658759..698717558 100644 --- a/dist/docs/zh-CN/AdminSecurity_Help.html +++ b/dist/docs/zh-CN/AdminSecurity_Help.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    网络管理员用户⇑

    Description

    更改WebAdmin控制台的用户名和密码。 旧口令必须被输入以用来验证保存更新。

    -
    +
    diff --git a/dist/docs/zh-CN/App_Server_Context.html b/dist/docs/zh-CN/App_Server_Context.html index d904c8798..47d1afda9 100644 --- a/dist/docs/zh-CN/App_Server_Context.html +++ b/dist/docs/zh-CN/App_Server_Context.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    重写继承⇑

    Description

    指定是否从父级context继承重写规则。 如果启用重写但不继承，将启用本context的重写基准及重写规则。

    Syntax

    布尔值

    重写基准⇑

    Description

    指定重写规则的基准URL。

    Syntax

    URL

    -

    Rewrite Rules⇑

    Description

    Specifies a list of rewrite rules at the virtual host level.

    Do NOT add any document root level rewrite rules here. If you have any document root level rewrite rules from .htaccess, you should instead create a static context with uri "/" and add the rewrite rules there.

    A rewrite rule is comprised of one RewriteRule directive and optionally preceded by multiple RewriteCond directives.

    • Each directive should take only one line.
    • RewriteCond and RewriteRule follow Apache's rewrite directive syntax. Just copy and paste rewrite directives from your Apache configuration files.
    • There are minor differences between LiteSpeed and Apache mod_rewrite implementation:
      • %\{LA-U:variable\} and %\{LA-F:variable\} are ignored by the LiteSpeed rewrite engine
      • two new server variables are added in the LiteSpeed rewrite engine: %\{CURRENT_URI\} represents the current URI being processed by the rewrite engine and %\{SCRIPT_NAME\} has the same meaning as the corresponding CGI environment variable.
    The implementation of LiteSpeed's rewrite engine follows the Apache's rewrite engine specifications. For more details about rewrite rules, please refer to Apache's mod_rewrite document and Apache's URL rewriting guide.

    Syntax

    string

    +

    Rewrite Rules⇑

    Description

    Specifies a list of rewrite rules at the virtual host level.

    Do NOT add any document root level rewrite rules here. If you have any document root level rewrite rules from .htaccess, you should instead create a static context with uri "/" and add the rewrite rules there.

    A rewrite rule is comprised of one RewriteRule directive and optionally preceded by multiple RewriteCond directives.

    • Each directive should take only one line.
    • RewriteCond and RewriteRule follow Apache's rewrite directive syntax. Just copy and paste rewrite directives from your Apache configuration files.
    • There are minor differences between LiteSpeed and Apache mod_rewrite implementation:
      • %\{LA-U:variable\} and %\{LA-F:variable\} are ignored by the LiteSpeed rewrite engine
      • Two new server variables are added in the LiteSpeed rewrite engine: %\{CURRENT_URI\} represents the current URI being processed by the rewrite engine and %\{SCRIPT_NAME\} has the same meaning as the corresponding CGI environment variable.
      • The LiteSpeed rewrite engine will stop processing rewrite rules after encountering an [L] flag to avoid looping while Apache mod_rewrite will stop processing rewrite rules for the current iteration only. This behavior is similar to that of the [END] flag in Apache mod_rewrite.

    The implementation of LiteSpeed's rewrite engine follows Apache's rewrite engine specifications. For more details about rewrite rules, please refer to Apache's mod_rewrite document and Apache's URL rewriting guide .

    Syntax

    string

    添加默认的字符集⇑

    Description

    指定当内容类型是"text/html"或"text/plain"且没有参数时，是否添加字符集标记到"Content-Type"响应报头中。当设置为Off时，该功能禁用。当设置为On时，将添加自定义默认字符集中指定的字符集，如果没有指定，将添加默认的"iso-8859-1"字符集。

    Syntax

    布尔值

    自定义默认字符集⇑

    Description

    指定一个字符集当添加默认的字符集是On时使用。这是可选的。默认值是iso-8859-1。当添加默认的字符集是Off时本设置将不生效。

    Syntax

    字符集的名称，例如utf-8

    Example

    utf-8
    -
    +
    diff --git a/dist/docs/zh-CN/App_Server_Help.html b/dist/docs/zh-CN/App_Server_Help.html index 099af7fe9..8516562b9 100644 --- a/dist/docs/zh-CN/App_Server_Help.html +++ b/dist/docs/zh-CN/App_Server_Help.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    Node Path⇑

    Description

    Path to Node.js executable.

    Syntax

    绝对路径

    -
    +
    diff --git a/dist/docs/zh-CN/CGI_Context.html b/dist/docs/zh-CN/CGI_Context.html index afc32c6c0..ca6e597c6 100644 --- a/dist/docs/zh-CN/CGI_Context.html +++ b/dist/docs/zh-CN/CGI_Context.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    重写继承⇑

    Description

    指定是否从父级context继承重写规则。 如果启用重写但不继承，将启用本context的重写基准及重写规则。

    Syntax

    布尔值

    重写基准⇑

    Description

    指定重写规则的基准URL。

    Syntax

    URL

    -

    Rewrite Rules⇑

    Description

    Specifies a list of rewrite rules at the virtual host level.

    Do NOT add any document root level rewrite rules here. If you have any document root level rewrite rules from .htaccess, you should instead create a static context with uri "/" and add the rewrite rules there.

    A rewrite rule is comprised of one RewriteRule directive and optionally preceded by multiple RewriteCond directives.

    • Each directive should take only one line.
    • RewriteCond and RewriteRule follow Apache's rewrite directive syntax. Just copy and paste rewrite directives from your Apache configuration files.
    • There are minor differences between LiteSpeed and Apache mod_rewrite implementation:
      • %\{LA-U:variable\} and %\{LA-F:variable\} are ignored by the LiteSpeed rewrite engine
      • two new server variables are added in the LiteSpeed rewrite engine: %\{CURRENT_URI\} represents the current URI being processed by the rewrite engine and %\{SCRIPT_NAME\} has the same meaning as the corresponding CGI environment variable.
    The implementation of LiteSpeed's rewrite engine follows the Apache's rewrite engine specifications. For more details about rewrite rules, please refer to Apache's mod_rewrite document and Apache's URL rewriting guide.

    Syntax

    string

    +

    Rewrite Rules⇑

    Description

    Specifies a list of rewrite rules at the virtual host level.

    Do NOT add any document root level rewrite rules here. If you have any document root level rewrite rules from .htaccess, you should instead create a static context with uri "/" and add the rewrite rules there.

    A rewrite rule is comprised of one RewriteRule directive and optionally preceded by multiple RewriteCond directives.

    • Each directive should take only one line.
    • RewriteCond and RewriteRule follow Apache's rewrite directive syntax. Just copy and paste rewrite directives from your Apache configuration files.
    • There are minor differences between LiteSpeed and Apache mod_rewrite implementation:
      • %\{LA-U:variable\} and %\{LA-F:variable\} are ignored by the LiteSpeed rewrite engine
      • Two new server variables are added in the LiteSpeed rewrite engine: %\{CURRENT_URI\} represents the current URI being processed by the rewrite engine and %\{SCRIPT_NAME\} has the same meaning as the corresponding CGI environment variable.
      • The LiteSpeed rewrite engine will stop processing rewrite rules after encountering an [L] flag to avoid looping while Apache mod_rewrite will stop processing rewrite rules for the current iteration only. This behavior is similar to that of the [END] flag in Apache mod_rewrite.

    The implementation of LiteSpeed's rewrite engine follows Apache's rewrite engine specifications. For more details about rewrite rules, please refer to Apache's mod_rewrite document and Apache's URL rewriting guide .

    Syntax

    string

    -
    +
    diff --git a/dist/docs/zh-CN/CompilePHP_Help.html b/dist/docs/zh-CN/CompilePHP_Help.html index 18531bbbf..a6d301c01 100644 --- a/dist/docs/zh-CN/CompilePHP_Help.html +++ b/dist/docs/zh-CN/CompilePHP_Help.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    Add-on Modules⇑

    Description

    Select the add-on modules you wish to use. If you want to use a version not listed here, you can manually update the source code. (The location of the source code is shown in a prompt at this step of the PHP build.)

    Syntax

    Select from checkbox

    -
    +
    diff --git a/dist/docs/zh-CN/Context_Help.html b/dist/docs/zh-CN/Context_Help.html index 97d72ccdf..a0c116e1b 100644 --- a/dist/docs/zh-CN/Context_Help.html +++ b/dist/docs/zh-CN/Context_Help.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

      @@ -60,7 +62,9 @@
      Version 1.6  — Rev. 2
    • Context
      • @@ -105,7 +115,7 @@

      Table of Contents

      Context Type⇑

      Description

      The type of context created determines it's usage.

      Static context can be used to map a URI to a directory either outside document root or within it.
      Java Web App context is used to automatically import a predefined Java Application in an AJPv13 compilant Java servlet engine.
      Servlet context is used to import a specific servlet under a web application.
      Fast CGI context is a mount point of Fast CGI application.
      LiteSpeed SAPI context can be used to associate a URI with an LSAPI application.
      Proxy context enables this virtual host to serve as a transparant reverse proxy server to an external web server or application server.
      CGI context can be used to specify a directory only contains CGI scripts.
      Load Balancer context can be used to assign a different cluster for that context.
      Redirect context can set up an internal or external redirect URI.
      App Server context is specifically used for Rack/Rails, WSGI, and Node.js applications.
      Module handler context is a mount point of hander type modules.

      -
      +
      diff --git a/dist/docs/zh-CN/ExtApp_Help.html b/dist/docs/zh-CN/ExtApp_Help.html index a5bd495fa..df686291b 100644 --- a/dist/docs/zh-CN/ExtApp_Help.html +++ b/dist/docs/zh-CN/ExtApp_Help.html @@ -14,8 +14,10 @@
      openlitespeed logo
      -

      OpenLiteSpeed Web Server Users' Manual

      -
      Version 1.6  — Rev. 2
      +

      + OpenLiteSpeed Web Server Users' Manual +

      +

      Version 1.7  — Rev. 17

        @@ -60,7 +62,9 @@
        Version 1.6  — Rev. 2
      • Context
        • @@ -177,7 +187,7 @@

        Table of Contents

        Type⇑

        Description

        Specifies the type of external application. Application types are differentiated by the service they provide or the protocol they use to communicate with the server. Choose from

        • FastCGI: a FastCGI application with a Responder role.
        • FastCGI Authorizer: a FastCGI application with an Authorizer role
        • Servlet Engine: a servlet engine with an AJPv13 connector, such as Tomcat.
        • Web Server: a web server or application server that supports HTTP protocol.
        • LiteSpeed SAPI App: an application that communicates with the web server using LSAPI protocol.
        • Load Balancer: a virtual application that can balance load among worker applications.
        • Piped Logger: an application that can process access log entries received on its STDIN stream.

        Syntax

        Select from drop down list

        Tips

        Most applications will use either LSAPI or FastCGI protocol. LSAPI supports PHP, Ruby, and Python. Perl can be used with FastCGI. (PHP, Ruby, and Python can also be set up to run using FastCGI, but they run faster using LSAPI.) Java uses servlet engines.

        -
        +
        diff --git a/dist/docs/zh-CN/External_FCGI.html b/dist/docs/zh-CN/External_FCGI.html index f2bd9b21f..2d303fc30 100644 --- a/dist/docs/zh-CN/External_FCGI.html +++ b/dist/docs/zh-CN/External_FCGI.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

          @@ -60,7 +62,9 @@
          Version 1.6  — Rev. 2
        • Context
          • @@ -113,7 +123,7 @@

          Fast CGI App

          Table of Contents

          进程软限制⇑

          Description

          限制一个用户可以创建的进程总数。所有存在的进程都将被统计在内， 而不是只包括新启动的进程。如果限制被设置为10，并且一个用户下 有超过10个进程在运行，那么网站服务器将不会再为该用户（通过 suEXEC） 启动新进程。

          此限制的主要目的是为了防范“fork炸弹”攻击或过量使用，而不是限制正常使用 （如果该限制被设置的过低，它将被服务器忽略）。确保留有足够空余。 本项目可以在服务器级别或独立的外部应用程序级别设置。如果未在独立的外部应用程 序级别设定限制，将使用服务器级别的限制。如果在两个级别都没有设置该限制， 或者限制值设为0，将使用操作系统的默认设置。

          Syntax

          无符号整数

          Tips

          PHP scripts can call for forking processes. The main purpose of this limit is as a last line of defense to prevent fork bombs and other attacks caused by PHP processes creating other processes.

          Setting this setting too low can severely hurt functionality. The setting will thus be ignored below certain levels.

          When Run On Start Up is set to "Yes (Daemon mode)", the actual process limit will be higher than this setting to make sure parent processes are not limited.

        进程硬限制⇑

        Description

        与进程软限制非常相同，但是，在用户进程中软限制 可以被放宽到硬限制的数值。硬限制可以在服务器级别或独立的外部应用程序级别设 置。如果未在独立的外部应用程序级别设定限制，将使用服务器级别的限制。 如果在两个级别都没有设置该限制，或者限制值设为0，将使用操 作系统的默认设置。

        Syntax

        无符号整数

        -
        +
        diff --git a/dist/docs/zh-CN/External_FCGI_Auth.html b/dist/docs/zh-CN/External_FCGI_Auth.html index b70b8d60d..fa7f98e64 100644 --- a/dist/docs/zh-CN/External_FCGI_Auth.html +++ b/dist/docs/zh-CN/External_FCGI_Auth.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

          @@ -60,7 +62,9 @@
          Version 1.6  — Rev. 2
        • Context
          • @@ -113,7 +123,7 @@

          Fast CGI Authorizer

          Table of Contents

          进程软限制⇑

          Description

          限制一个用户可以创建的进程总数。所有存在的进程都将被统计在内， 而不是只包括新启动的进程。如果限制被设置为10，并且一个用户下 有超过10个进程在运行，那么网站服务器将不会再为该用户（通过 suEXEC） 启动新进程。

          此限制的主要目的是为了防范“fork炸弹”攻击或过量使用，而不是限制正常使用 （如果该限制被设置的过低，它将被服务器忽略）。确保留有足够空余。 本项目可以在服务器级别或独立的外部应用程序级别设置。如果未在独立的外部应用程 序级别设定限制，将使用服务器级别的限制。如果在两个级别都没有设置该限制， 或者限制值设为0，将使用操作系统的默认设置。

          Syntax

          无符号整数

          Tips

          PHP scripts can call for forking processes. The main purpose of this limit is as a last line of defense to prevent fork bombs and other attacks caused by PHP processes creating other processes.

          Setting this setting too low can severely hurt functionality. The setting will thus be ignored below certain levels.

          When Run On Start Up is set to "Yes (Daemon mode)", the actual process limit will be higher than this setting to make sure parent processes are not limited.

        进程硬限制⇑

        Description

        与进程软限制非常相同，但是，在用户进程中软限制 可以被放宽到硬限制的数值。硬限制可以在服务器级别或独立的外部应用程序级别设 置。如果未在独立的外部应用程序级别设定限制，将使用服务器级别的限制。 如果在两个级别都没有设置该限制，或者限制值设为0，将使用操 作系统的默认设置。

        Syntax

        无符号整数

        -
        +
        diff --git a/dist/docs/zh-CN/External_LB.html b/dist/docs/zh-CN/External_LB.html index eece37b58..9e264136e 100644 --- a/dist/docs/zh-CN/External_LB.html +++ b/dist/docs/zh-CN/External_LB.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

          @@ -60,7 +62,9 @@
          Version 1.6  — Rev. 2
        • Context
          • @@ -92,7 +102,7 @@

          Load Balancer

          Table of Contents

          Name⇑

          Description

          A unique name for this external application. You will refer to it by this name when you use it in other parts of the configuration.

          Workers⇑

          Description

          List of worker groups previously defined in the external load balancer.

          Syntax

          A comma-separated list in the form ExternalAppType::ExternalAppName

          Example

          fcgi::localPHP, proxy::backend1
          -
          +
          diff --git a/dist/docs/zh-CN/External_LSAPI.html b/dist/docs/zh-CN/External_LSAPI.html index 3bdda13cc..bec77a0b8 100644 --- a/dist/docs/zh-CN/External_LSAPI.html +++ b/dist/docs/zh-CN/External_LSAPI.html @@ -14,8 +14,10 @@
          openlitespeed logo
          -

          OpenLiteSpeed Web Server Users' Manual

          -
          Version 1.6  — Rev. 2
          +

          + OpenLiteSpeed Web Server Users' Manual +

          +

          Version 1.7  — Rev. 17

            @@ -60,7 +62,9 @@
            Version 1.6  — Rev. 2
          • Context
            • @@ -113,7 +123,7 @@

            LiteSpeed SAPI App

            Table of Contents

            进程软限制⇑

            Description

            限制一个用户可以创建的进程总数。所有存在的进程都将被统计在内， 而不是只包括新启动的进程。如果限制被设置为10，并且一个用户下 有超过10个进程在运行，那么网站服务器将不会再为该用户（通过 suEXEC） 启动新进程。

            此限制的主要目的是为了防范“fork炸弹”攻击或过量使用，而不是限制正常使用 （如果该限制被设置的过低，它将被服务器忽略）。确保留有足够空余。 本项目可以在服务器级别或独立的外部应用程序级别设置。如果未在独立的外部应用程 序级别设定限制，将使用服务器级别的限制。如果在两个级别都没有设置该限制， 或者限制值设为0，将使用操作系统的默认设置。

            Syntax

            无符号整数

            Tips

            PHP scripts can call for forking processes. The main purpose of this limit is as a last line of defense to prevent fork bombs and other attacks caused by PHP processes creating other processes.

            Setting this setting too low can severely hurt functionality. The setting will thus be ignored below certain levels.

            When Run On Start Up is set to "Yes (Daemon mode)", the actual process limit will be higher than this setting to make sure parent processes are not limited.

          进程硬限制⇑

          Description

          与进程软限制非常相同，但是，在用户进程中软限制 可以被放宽到硬限制的数值。硬限制可以在服务器级别或独立的外部应用程序级别设 置。如果未在独立的外部应用程序级别设定限制，将使用服务器级别的限制。 如果在两个级别都没有设置该限制，或者限制值设为0，将使用操 作系统的默认设置。

          Syntax

          无符号整数

      -
      +
      diff --git a/dist/docs/zh-CN/External_PL.html b/dist/docs/zh-CN/External_PL.html index 0da2cf111..71fd7df0a 100644 --- a/dist/docs/zh-CN/External_PL.html +++ b/dist/docs/zh-CN/External_PL.html @@ -14,8 +14,10 @@
      openlitespeed logo
      -

      OpenLiteSpeed Web Server Users' Manual

      -
      Version 1.6  — Rev. 2
      +

      + OpenLiteSpeed Web Server Users' Manual +

      +

      Version 1.7  — Rev. 17

      Priority⇑

      Description

      Specifies priority of the external application process. Value ranges from -20 to 20. A lower number means a higher priority. An external application process cannot have a higher priority than the web server. If this priority is set to a lower number than the server's, the server's priority will be used for this value.

      Syntax

      int

      See Also

      Server 优先级

      -
      +
      diff --git a/dist/docs/zh-CN/External_Servlet.html b/dist/docs/zh-CN/External_Servlet.html index b46d6c9c4..f2bec7a28 100644 --- a/dist/docs/zh-CN/External_Servlet.html +++ b/dist/docs/zh-CN/External_Servlet.html @@ -14,8 +14,10 @@
      openlitespeed logo
      -

      OpenLiteSpeed Web Server Users' Manual

      -
      Version 1.6  — Rev. 2
      +

      + OpenLiteSpeed Web Server Users' Manual +

      +

      Version 1.7  — Rev. 17

    -
    +
    diff --git a/dist/docs/zh-CN/FCGI_Context.html b/dist/docs/zh-CN/FCGI_Context.html index ff6a34db6..cc8c0c404 100644 --- a/dist/docs/zh-CN/FCGI_Context.html +++ b/dist/docs/zh-CN/FCGI_Context.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    -
    +
    diff --git a/dist/docs/zh-CN/Java_Web_App_Context.html b/dist/docs/zh-CN/Java_Web_App_Context.html index 1003c1c94..989ffd37a 100644 --- a/dist/docs/zh-CN/Java_Web_App_Context.html +++ b/dist/docs/zh-CN/Java_Web_App_Context.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    -
    +
    diff --git a/dist/docs/zh-CN/LB_Context.html b/dist/docs/zh-CN/LB_Context.html index 1597d3af1..7650cd5c8 100644 --- a/dist/docs/zh-CN/LB_Context.html +++ b/dist/docs/zh-CN/LB_Context.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    -
    +
    diff --git a/dist/docs/zh-CN/LSAPI_Context.html b/dist/docs/zh-CN/LSAPI_Context.html index 12561fc62..1375f7c01 100644 --- a/dist/docs/zh-CN/LSAPI_Context.html +++ b/dist/docs/zh-CN/LSAPI_Context.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    -
    +
    diff --git a/dist/docs/zh-CN/Listeners_General_Help.html b/dist/docs/zh-CN/Listeners_General_Help.html index 1cf5a84a9..c9dff4a29 100644 --- a/dist/docs/zh-CN/Listeners_General_Help.html +++ b/dist/docs/zh-CN/Listeners_General_Help.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    @@ -95,12 +105,13 @@

    Listeners General

    Table of Contents

    IP Address⇑

    Description

    Specifies the IP of this listener. All available IP addresses are listed. IPv6 addresses are enclosed in "[ ]". To listen on all IPv4 IP addresses, select ANY. To listen on all IPv4 and IPv6 IP addresses, select [ANY]. In order to serve both IPv4 and IPv6 clients, an IPv4-mapped IPv6 address should be used instead of a plain IPv4 address. An IPv4-mapped IPv6 address is written as [::FFFF:x.x.x.x].

    Syntax

    Select from drop down list

    Tips

    If your machine has multiple IPs on different sub-networks, you can select a specific IP to only allow traffic from the corresponding sub-network.

    Port⇑

    Description

    Specifies the TCP port of the listener. Only the super user ("root") can use ports lower than 1024. Port 80 is the default HTTP port. Port 443 is the default HTTPS port.

    Syntax

    无符号整数

    Binding⇑

    Description

    Specifies which lshttpd child process the listener is assigned to. Different child processes can be used to handle requests to different listeners by manually associating a listener with a process. By default, a listener is assigned to all child processes.

    Syntax

    Select from checkbox

    +

    Enable REUSEPORT⇑

    Description

    Use SO_REUSEPORT socket option to distribute incoming traffic to multiple workers. This setting is only effective for multi-worker licenses. When enabled, all workers are automatically bound to this listener and "Binding" configuration is ignored.

    Default value: On

    Syntax

    Select from radio box

    Secure⇑

    Description

    Specifies whether this is a secure (SSL) listener. For secure listeners, additional SSL settings need to be set properly.

    Syntax

    Select from radio box

    Virtual Host Mappings⇑

    Description

    Specifies the relationship between the listener and virtual hosts. Listeners and virtual hosts are associated by domain names. An HTTP request will be routed to a virtual host with a matching domain name. One listener can map to multiple virtual hosts for different domain names. One virtual host can also be mapped from different listeners. One listener can allow one catchall virtual host with the domain name value "*". When there is no explicitly matched domain name in the listener's mapping, the listener will forward the request to that catchall virtual host.

    Tips

    Only add necessary mappings. If the listener is mapped to only one virtual host, then only set up a catchall mapping "*".

    Virtual Host⇑

    Description

    Specifies the name of a virtual host.

    Syntax

    Select from drop down list

    Domains⇑

    Description

    Specifies the mapping domain names. Domain names are case insensitive and the leading "www." will be removed. The wildcard characters "*" and "?" are allowed. "?" only represents one character. "*" represents any numbers of characters. Duplicated domain names are not allowed.

    Syntax

    Comma-separated list.

    Example

    www?.example.com
    "*.mydomain.com" will match all subdomains of mydomain.com.
    "*" by itself is the catchall domain and will match any unmatched domain names.

    Tips

    If a listener is dedicated to one virtual host, always use * for the domain name to avoid unnecessary checking. Domain names with wildcard characters (other than the catchall domain) should be avoided whenever possible.

    -
    +
    diff --git a/dist/docs/zh-CN/Listeners_SSL_Help.html b/dist/docs/zh-CN/Listeners_SSL_Help.html index abb4d5cb3..0461304d2 100644 --- a/dist/docs/zh-CN/Listeners_SSL_Help.html +++ b/dist/docs/zh-CN/Listeners_SSL_Help.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    Client Revocation File⇑

    Description

    Specifies the file containing PEM-encoded CA CRL files enumerating revoked client certificates. This can be used as an alternative or in addition to Client Revocation Path.

    Syntax

    Filename which can be an absolute path or a relative path to $SERVER_ROOT.

    -
    +
    diff --git a/dist/docs/zh-CN/Module_Context.html b/dist/docs/zh-CN/Module_Context.html index fa8230f0c..5f62f29c7 100644 --- a/dist/docs/zh-CN/Module_Context.html +++ b/dist/docs/zh-CN/Module_Context.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    -
    +
    diff --git a/dist/docs/zh-CN/Module_Help.html b/dist/docs/zh-CN/Module_Help.html index 2a07c1c5a..2948548d2 100644 --- a/dist/docs/zh-CN/Module_Help.html +++ b/dist/docs/zh-CN/Module_Help.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

      @@ -60,7 +62,9 @@
      Version 1.6  — Rev. 2
    • Context
      • @@ -104,7 +114,7 @@

      Table of Contents

      URI | Module Parameters

      Server Modules⇑

      Description

      The Server module configuration globally defines the module configuration data. Once defined, the Listeners and Virtual Hosts have access to the modules and module configurations.

      All modules that are to be processed must be registered in the Server configuration. The Server configuration also defines the default values for module parameter data. These values can be inherited or overridden by the Listener and Virtual Host configuration data.

      Module priority is only defined at server level and is inherited by the Listener and Virtual Host configurations.

      -

      Module⇑

      Description

      Name of the module. The module name will be the same as the module filename. The module file must be located under $SERVER_ROOT/modules/modulename.so in order to be loaded by the server application. The server will load the registered modules at start up. This requires that the server is restarted after new modules are registered.

      Syntax

      the library name of .so.

      +

      Module⇑

      Description

      The name of an external or internal module to be loaded at server startup.

      External
      The value used for external modules must match the name of the module's ".so" file under $SERVER_ROOT/modules/modulename.so in order to be loaded by the server application. This requires that the server is restarted after a new module is registered.

      Internal
      The value used for internal modules must match the module name used when the module was built. For example, this must be set to "cache" for the internal cache module included with the server.

      Syntax

      string

      Is Internal⇑

      Description

      Specify whether the module is an internal module, which is statically linked, instead of being an external .so library.

      Syntax

      Select from radio box

      Module Parameters⇑

      Description

      Set module parameters. The module parameters are defined by the module developer.

      Set the value in the Server configuration to globally assign the default value. The user can override this setting at the Listener, Virtual Host or Context levels. If the 'Not Set' radio button is selected, it will be inherited from the upper level.

      Syntax

      Specified by the module interface.

      Enable Module⇑

      Description

      Enables module hooks globally. This setting can be overridden at the Listener and Virtual Host levels.

      Default value: Yes

      Syntax

      Select from radio box

      @@ -138,7 +148,7 @@

      Table of Contents

      Virtual Host Module Context⇑

      Description

      It's a centralized place to customize module settings for virtual host contexts. Settings for a context URI will override the virtual host or the server level settings.

    URI⇑

    Description

    Specifies the URI for this context.

    Syntax

    The URI can be a plain URI (starting with "/") or a Perl compatible regular expression URI (starting with "exp:"). If a plain URI ends with a "/", then this context will include all sub-URIs under this URI. If the context maps to a directory on the file system, a trailing "/" must be added.

    See Also

    Location

    -
    +
    diff --git a/dist/docs/zh-CN/Proxy_Context.html b/dist/docs/zh-CN/Proxy_Context.html index c42ab7406..26ad9426b 100644 --- a/dist/docs/zh-CN/Proxy_Context.html +++ b/dist/docs/zh-CN/Proxy_Context.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    -
    +
    diff --git a/dist/docs/zh-CN/Redirect_Context.html b/dist/docs/zh-CN/Redirect_Context.html index c00a71759..e7291f244 100644 --- a/dist/docs/zh-CN/Redirect_Context.html +++ b/dist/docs/zh-CN/Redirect_Context.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    Authorizer⇑

    Description

    Specifies an external application that can be used to generate authorized/unauthorized decisions. Currently, only the FastCGI Authorizer is available. For more details about the FastCGI Authorizer role, please visit http://www.fastcgi.com.

    Syntax

    Select from drop down list

    -
    +
    diff --git a/dist/docs/zh-CN/Rewrite_Help.html b/dist/docs/zh-CN/Rewrite_Help.html index 1de5b5ead..f0fb18ffd 100644 --- a/dist/docs/zh-CN/Rewrite_Help.html +++ b/dist/docs/zh-CN/Rewrite_Help.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    Name⇑

    Description

    Specifies a unique name for the rewrite map at the virtual host level. This name will be used by a mapping-reference in rewrite rules. When referencing this name, one of the following syntaxes should be used:

    $\{MapName:LookupKey\}
    $\{MapName:LookupKey|DefaultValue\}

    The implementation of LiteSpeed's rewrite engine follows the specifications of Apache's rewrite engine. For more details about rewrite maps, please refer to Apache's mod_rewrite document.

    Syntax

    string

    Location⇑

    Description

    Specifies the location of the rewrite map using the syntax MapType:MapSource.
    LiteSpeed's rewrite engine supports three types of rewrite maps:

    • Standard Plain Text
      MapType: txt;
      MapSource: file path to a valid plain ASCII file.
      Each line of this file should contain two elements separated by blank spaces. The first element is the key and the second element is the value. Comments can be added with a leading "#" sign.
    • Randomized Plain Text
      MapType: rnd;
      MapSource: file path of a valid plain ASCII file.
      File format is similar to the Standard Plain Text file, except that the second element can contain multiple choices separated by a "|" sign and chosen randomly by the rewrite engine.
    • Internal Function
      MapType: int;
      MapSource: Internal string function
      4 functions are available:
      • toupper: converts lookup key to upper cases.
      • tolower: converts lookup key to lower cases.
      • escape: perform URL encoding on lookup key.
      • unescape: perform URL decoding on lookup key.
      • The following map types available in Apache have not been implemented in LiteSpeed:
      Hash File and External Rewriting Program.
    The implementation of LiteSpeed's rewrite engine follows the specifications of Apache's rewrite engine. For more details about rewrite map, please refer to Apache's mod_rewrite document.

    Syntax

    String

    -

    Rewrite Rules⇑

    Description

    Specifies a list of rewrite rules at the virtual host level.

    Do NOT add any document root level rewrite rules here. If you have any document root level rewrite rules from .htaccess, you should instead create a static context with uri "/" and add the rewrite rules there.

    A rewrite rule is comprised of one RewriteRule directive and optionally preceded by multiple RewriteCond directives.

    • Each directive should take only one line.
    • RewriteCond and RewriteRule follow Apache's rewrite directive syntax. Just copy and paste rewrite directives from your Apache configuration files.
    • There are minor differences between LiteSpeed and Apache mod_rewrite implementation:
      • %\{LA-U:variable\} and %\{LA-F:variable\} are ignored by the LiteSpeed rewrite engine
      • two new server variables are added in the LiteSpeed rewrite engine: %\{CURRENT_URI\} represents the current URI being processed by the rewrite engine and %\{SCRIPT_NAME\} has the same meaning as the corresponding CGI environment variable.
    The implementation of LiteSpeed's rewrite engine follows the Apache's rewrite engine specifications. For more details about rewrite rules, please refer to Apache's mod_rewrite document and Apache's URL rewriting guide.

    Syntax

    string

    +

    Rewrite Rules⇑

    Description

    Specifies a list of rewrite rules at the virtual host level.

    Do NOT add any document root level rewrite rules here. If you have any document root level rewrite rules from .htaccess, you should instead create a static context with uri "/" and add the rewrite rules there.

    A rewrite rule is comprised of one RewriteRule directive and optionally preceded by multiple RewriteCond directives.

    • Each directive should take only one line.
    • RewriteCond and RewriteRule follow Apache's rewrite directive syntax. Just copy and paste rewrite directives from your Apache configuration files.
    • There are minor differences between LiteSpeed and Apache mod_rewrite implementation:
      • %\{LA-U:variable\} and %\{LA-F:variable\} are ignored by the LiteSpeed rewrite engine
      • Two new server variables are added in the LiteSpeed rewrite engine: %\{CURRENT_URI\} represents the current URI being processed by the rewrite engine and %\{SCRIPT_NAME\} has the same meaning as the corresponding CGI environment variable.
      • The LiteSpeed rewrite engine will stop processing rewrite rules after encountering an [L] flag to avoid looping while Apache mod_rewrite will stop processing rewrite rules for the current iteration only. This behavior is similar to that of the [END] flag in Apache mod_rewrite.

    The implementation of LiteSpeed's rewrite engine follows Apache's rewrite engine specifications. For more details about rewrite rules, please refer to Apache's mod_rewrite document and Apache's URL rewriting guide .

    Syntax

    string

    -
    +
    diff --git a/dist/docs/zh-CN/ScriptHandler_Help.html b/dist/docs/zh-CN/ScriptHandler_Help.html index d4e209e38..b47ebfa34 100644 --- a/dist/docs/zh-CN/ScriptHandler_Help.html +++ b/dist/docs/zh-CN/ScriptHandler_Help.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    处理器名称⇑

    Description

    当处理器类型为FastCGI，Web服务器，LSAPI，负载均衡器或Servlet引擎时， 指定处理脚本文件的外部程序名称。

    Syntax

    选项

    -
    +
    diff --git a/dist/docs/zh-CN/ServGeneral_Help.html b/dist/docs/zh-CN/ServGeneral_Help.html index 6365efc99..eb5437cf8 100644 --- a/dist/docs/zh-CN/ServGeneral_Help.html +++ b/dist/docs/zh-CN/ServGeneral_Help.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

    DB Cache Type⇑

    Description

    The caching method used. The default value is Memory.

    Syntax

    Select from drop down list

    -
    +
    diff --git a/dist/docs/zh-CN/ServLog_Help.html b/dist/docs/zh-CN/ServLog_Help.html index b4b8da4d1..154a4a71a 100644 --- a/dist/docs/zh-CN/ServLog_Help.html +++ b/dist/docs/zh-CN/ServLog_Help.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

      @@ -60,7 +62,9 @@
      Version 1.6  — Rev. 2
    • Context
      • @@ -87,23 +97,23 @@
      Version 1.6  — Rev. 2
      Configuration

      Server Log

      Table of Contents

      服务器日志

      -文件名 | 日志级别 | 调试级别 | 回滚大小 | 启用标准错误日志（stderr）

      +文件名 | 日志级别 | 调试级别 | 回滚大小 | Keep Days | 启用标准错误日志（stderr）

      访问日志

      -文件名 | Piped Logger | 日志格式 | 记录头部 | 回滚大小 | 保留天数 | 压缩存档

      +文件名 | Piped Logger | 日志格式 | 记录头部 | 回滚大小 | Keep Days | 压缩存档

      文件名⇑

      Description

      指定日志文件的路径。

      Syntax

      文件2

      Tips

      [性能建议] 将日志文件放置在一个单独的磁盘上。

      日志级别⇑

      Description

      指定日志文件中记录的日志级别。 可用级别（由高到低）为: ERROR、 WARNING、NOTICE、INFO和DEBUG。 只有级别与当前设置相同或更高的消息将被记录（级别越低记录越详细）。

      Syntax

      选项

      Tips

      [性能建议] 使用DEBUG日志级别对 性能没有任何影响，除非调试级别没有被设置为NONE.。我们推荐将日志级别设置为DEBUG，将 调试级别值设置为NONE。这样设置意味着你的磁盘不会被调试日志塞满，但是你可以使用Toggle Debug Logging 控制调试输出。这个操作可以实时启用或关闭调试记录， 对于调试繁忙的生产服务器非常有用。

      See Also

      调试级别

      调试级别⇑

      Description

      指定调试日志级别。 要使用此功能，日志级别必须设置为DEBUG。 在“调试级别”设置为NONE时，即使日志级别 设置为DEBUG，调试日志也是被禁用的。 在正在运行的服务器上，Toggle Debug Logging可以被用于 控制调试级别而无需重启。

      Syntax

      选项

      Tips

      [性能建议] 重要！如果你不需要详细的调试日志记录， 应始终将其设置为NONE。启用调试日志记录将严重降低服务性能 ，且可能在很短时间耗尽磁盘空间。 调试日志记录包括每个请求和响应的详细信息。

      我们推荐将日志级别设置为DEBUG，调试级别设置为NONE。 这些设置意味着你的磁盘不会被调试日志塞满， 但是你可以使用Toggle Debug Logging 控制调试输出。这个动作可以实时启用或关闭调试记录， 对于调试繁忙的生产服务器非常有用。

      See Also

      日志级别, Toggle Debug Logging

      回滚大小⇑

      Description

      指定何时日志文件需要回滚，也称为日志循环。 当文件大小超过回滚限制后，在使用的日志文件将在同一目录中被重命名 为log_name.mm_dd_yyyy(.sequence)，一个新的日志文件将被创建。 回滚的日志文件的实际大小有时会比限制值稍微大一些。 将值设置为0将禁用日志循环。

      Syntax

      无符号整数

      Tips

      请用“K”，“M”，“G”代表千字节，兆字节和千兆字节。

      +

      Keep Days⇑

      Description

      Specifies how many days the access log file will be kept on disk. Only rotated log files older than the specified number of days will be deleted. The current log file will not be touched regardless how many days worth of data it contains. If you do not want to auto-delete stale and very old log files, set this to 0.

      Syntax

      无符号整数

      启用标准错误日志（stderr）⇑

      Description

      指定在接受到服务器启动的进程输出的标准错误时，是否写入到日志。 如果启用，标准错误信息将记录到服务器日志所在目录内的固定名为“stderr.log”的文件。如果禁用，所有的标准错误输出都将被丢弃。

      Syntax

      布尔值

      Tips

      如果您需要调试配置的外部应用程序，如PHP、Ruby、Java、Python、Perl，请开启该功能。

      文件名⇑

      Description

      指定访问日志文件的文件名。

      Syntax

      文件2

      Tips

      [性能建议] 将访问日志文件放置在一个单独的磁盘上。

      Piped Logger⇑

      Description

      Specifies the external application that will receive the access log data sent by LiteSpeed through a pipe on its STDIN stream (file handle is 0). When this field is specified, the access log will be sent only to the logger application and not the access log file specified in previous entry.

      The logger application must be defined in External Apps section first. Server-level access logging can only use an external logger application defined at the server level. Virtual host-level access logging can only use a logger application defined at the virtual host level.

      The logger process is spawned in the same way as other external (CGI/FastCGI/LSAPI) processes. This means it will execute as the user ID specified in the virtual host's 外部应用程序设置UID模式 settings and will never run on behalf of a privileged user.

      LiteSpeed web server performs simple load balancing among multiple logger applications if more than one instance of a logger application is configured. LiteSpeed server always attempts to keep the number of logger applications as low as possible. Only when one logger application fails to process access log entries in time will the server attempt to spawn another instance of the logger application.

      If a logger crashes, the web server will start another instance but the log data in the stream buffer will be lost. It is possible to lose log data if external loggers cannot keep up with the speed and volume of the log stream.

      Syntax

      Select from drop down list

      日志格式⇑

      Description

      指定访问日志的格式。 设置之后，它将覆盖记录头部 的设定。

      Syntax

      字符串。日志格式的语法与Apache 2.0自定义 日志格式兼容。

      Example

      一般日志格式（CLF）
      "%h %l %u %t \"%r\" %>s %b"

      支持虚拟主机的一般日志格式
      "%v %h %l %u %t \"%r\" %>s %b"

      NCSA扩展/组合日志格式
      "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"

      记录Foobar的cookie值
      "%{Foobar}C"

      See Also

      记录头部

      记录头部⇑

      Description

      指定是否记录HTTP请求头: Referer、 UserAgent和Host。

      Syntax

      复选框

      Tips

      [性能建议] 如果你不需要在访问日志中记录这些头部信息，关闭这个功能。

      See Also

      日志格式

      -

      保留天数⇑

      Description

      指定访问日志文件将被保存在磁盘上多少天。 只有超出指定天数的回滚日志文件会被删除。 当前的日志文件不会被删除，无论它包含了多少天的数据。 如果你不想自动删除过时的、很旧的日志文件， 将该值设置为0。

      Syntax

      无符号整数

      压缩存档⇑

      Description

      指定是否压缩回滚日志以节省磁盘空间。

      Syntax

      布尔值

      Tips

      日志文件是高度可压缩的，建议采取压缩以减少旧日志的磁盘占用量。

      -
      +
      diff --git a/dist/docs/zh-CN/ServSecurity_Help.html b/dist/docs/zh-CN/ServSecurity_Help.html index 4b9f98e4a..5599ca3ef 100644 --- a/dist/docs/zh-CN/ServSecurity_Help.html +++ b/dist/docs/zh-CN/ServSecurity_Help.html @@ -14,8 +14,10 @@
      openlitespeed logo
      -

      OpenLiteSpeed Web Server Users' Manual

      -
      Version 1.6  — Rev. 2
      +

      + OpenLiteSpeed Web Server Users' Manual +

      +

      Version 1.7  — Rev. 17

        @@ -60,7 +62,9 @@
        Version 1.6  — Rev. 2
      • Context
        • @@ -92,8 +102,10 @@

        Server Security

        Table of Contents

        静态请求/秒 | Dynamic Requests/Second | 出口带宽 | 入口带宽 | 连接软限制 | 连接硬限制 | 封锁坏请求 | 宽限期（秒） | 禁止期（秒）

        CGI Settings

        CGI守护进程套接字 | 最大CGI实例数量 | 最小的UID | 最小的GID | 强制GID | umask | CGI优先级 | CPU软限制 | CPU硬限制 | 内存软限制 | 内存硬限制 | 进程软限制 | 进程硬限制 | cgroups

        -
        reCaptcha Protection

        +

        reCAPTCHA Protection

        Enable reCAPTCHA | Site Key | Secret Key | reCAPTCHA Type | Max Tries | Allowed Robot Hits | Bot White List | Connection Limit | SSL Connection Limit

        +
        Bubblewrap Container

        +Bubblewrap Container | Bubblewrap Command

        Access Denied Directories

        拒绝访问的目录

        登入限制

        @@ -106,9 +118,9 @@

        Server Security

        Table of Contents

        限制权限掩码⇑

        Description

        为不能输出的静态文件指定限制权限掩码。 例如，要禁止服务可执行文件，将掩码设置为0111。

        用man 2 stat命令了解所有可选值。

        Syntax

        八进制数

        See Also

        Required Permission Mask.

        脚本限制权限掩码⇑

        Description

        为不能服务的脚本文件指定限制权限掩码。 例如，要禁止服务属组可写和全局可写的PHP脚本， 设置掩码为022。默认值是000。

        用man 2 stat命令了解所有可选值。

        Syntax

        八进制数

        See Also

        脚本目录限制权限掩码.

        脚本目录限制权限掩码⇑

        Description

        为不能服务的脚本文件父目录指定限制权限掩码。 例如，要禁止服务属组可写和全局可写的文件夹内的PHP脚本， 设置掩码为022。默认值是000。 此选项可用于防止执行文件上传目录内的脚本。

        用man 2 stat命令了解所有可选值。

        Syntax

        八进制数

        See Also

        脚本限制权限掩码.

        -

        Per Client Throttling⇑

        Description

        These are connection control settings are based on client IP. These settings help to mitigate DoS (Denial of Service) and DDoS (Distributed Denial of Service) attacks.

        +

        Per Client Throttling⇑

        Description

        These are connection control settings are based on client IP. These settings help to mitigate DoS (Denial of Service) and DDoS (Distributed Denial of Service) attacks.

        静态请求/秒⇑

        Description

        指定每秒可处理的来自单个IP的静态内容请求数量（无论与该IP之间建立了多少个连接）。

        当达到此限制时，所有后来的请求将被延滞到下一秒。 对于动态内容请求的限制与本限制无关。 每个客户端的请求限制可以在服务器或虚拟主机级别设置。 虚拟主机级别的设置将覆盖服务器级别的设置。

        Syntax

        无符号整数

        Tips

        [安全] 受信任的IP或子网不受影响。

        See Also

        Dynamic Requests/Second

        -

        Dynamic Requests/Second⇑

        Description

        Specifies the maximum number of requests to dynamically generated content coming from a single IP address that can be processed in each second regardless of the number of connections established. When this limit is reached, all future requests to dynamic content are tar-pitted until the next second.

        The request limit for static content is independent of this limit. This per client request limit can be set at server or virtual host level. Virtual host-level settings override server-level settings.

        Syntax

        无符号整数

        Tips

        Trusted IPs or sub-networks are not restrained by this limit.

        See Also

        静态请求/秒

        +

        Dynamic Requests/Second⇑

        Description

        Specifies the maximum number of requests to dynamically generated content coming from a single IP address that can be processed in each second regardless of the number of connections established. When this limit is reached, all future requests to dynamic content are tar-pitted until the next second.

        The request limit for static content is independent of this limit. This per client request limit can be set at server or virtual host level. Virtual host-level settings override server-level settings.

        Syntax

        无符号整数

        Tips

        Trusted IPs or sub-networks are not restrained by this limit.

        See Also

        静态请求/秒

        出口带宽⇑

        Description

        指定对单个IP地址允许的最大传出吞吐量（无论与该IP之间建立了多少个连接）。 为提高效率，真正的带宽可能最终会略高于设定值。 带宽按4KB为单位分配。设定值为0可禁用限制。 每个客户端的带宽限制（字节/秒）可以在服务器或虚拟主机级别设置。 虚拟主机级别的设置将覆盖服务器级别的设置。

        Syntax

        无符号整数

        Tips

        [性能建议] 按8KB单位设置带宽可获得更好的性能。
        [安全建议] 受信任的IP或子网不受影响。

        See Also

        入口带宽

        入口带宽⇑

        Description

        指定对单个IP地址允许的最大传入吞吐量（无论与该IP之间建立了多少个连接）。 为提高效率，真正的带宽可能最终会略高于设定值。 带宽是按1KB单位分配。设定值为0可禁用限制。 每个客户端的带宽限制（字节/秒）可以在服务器或虚拟主机级别设置。 虚拟主机级别的设置将覆盖服务器级别的设置。

        Syntax

        无符号整数

        Tips

        [安全] 受信任的IP或子网不受影响。

        See Also

        出口带宽

        连接软限制⇑

        Description

        指定来自单个IP的并发连接的软限制。 并发连接数低于连接硬限制时，此软限制可以在宽限期（秒）期间临时超过， 但Keep-Alive连接将被尽快断开，直到连接数低于软限制。 如果宽限期（秒）之后，连接数仍然超过软限制，相应的IP将被封锁 禁止期（秒）所设置的时长。

        例如，如果页面包含许多小图像，浏览器可能会尝试同时建立许多连接，尤其是HTTP/1.0客户端。你应当在短时间内允许这些连接。

        HTTP/1.1客户端还可能建立多个连接，以加快下载，另外SSL需要为非SSL连接建立单独的连接。确保限制设置正确， 以免影响正常服务。建议限制在5与10之间。

        Syntax

        无符号整数

        Tips

        [安全建议] 一个较低的数字将使得服务器可以服务更多独立的客户。
        [安全建议] 受信任的IP或子网不受影响。
        [性能建议] 使用大量并发客户端进行性能评测时，请设置一个较高的值。

        @@ -131,8 +143,8 @@

        Server Security

        Table of Contents

        进程软限制⇑

        Description

        限制一个用户可以创建的进程总数。所有存在的进程都将被统计在内， 而不是只包括新启动的进程。如果限制被设置为10，并且一个用户下 有超过10个进程在运行，那么网站服务器将不会再为该用户（通过 suEXEC） 启动新进程。

        此限制的主要目的是为了防范“fork炸弹”攻击或过量使用，而不是限制正常使用 （如果该限制被设置的过低，它将被服务器忽略）。确保留有足够空余。 本项目可以在服务器级别或独立的外部应用程序级别设置。如果未在独立的外部应用程 序级别设定限制，将使用服务器级别的限制。如果在两个级别都没有设置该限制， 或者限制值设为0，将使用操作系统的默认设置。

        Syntax

        无符号整数

        Tips

        PHP scripts can call for forking processes. The main purpose of this limit is as a last line of defense to prevent fork bombs and other attacks caused by PHP processes creating other processes.

        Setting this setting too low can severely hurt functionality. The setting will thus be ignored below certain levels.

        When Run On Start Up is set to "Yes (Daemon mode)", the actual process limit will be higher than this setting to make sure parent processes are not limited.

        进程硬限制⇑

        Description

        与进程软限制非常相同，但是，在用户进程中软限制 可以被放宽到硬限制的数值。硬限制可以在服务器级别或独立的外部应用程序级别设 置。如果未在独立的外部应用程序级别设定限制，将使用服务器级别的限制。 如果在两个级别都没有设置该限制，或者限制值设为0，将使用操 作系统的默认设置。

        Syntax

        无符号整数

        cgroups⇑

        Description

        Apply cgroup settings to this CGI process if supported by the current OS. At this time, RedHat/Centos Linux v7.5+ and Ubuntu 18.04+ are supported. The currently executing user will be used to determine which cgroup configuration to apply.

        Setting this to Disabled at the Server level will disable this setting server-wide. In all other cases, the Server level setting can be overridden at the Virtual Host level.

        Default values:
        Server level: Off
        VH level: Inherit Server level setting

        Syntax

        Select from drop down list

        -

        reCaptcha Protection⇑

        Description

        reCaptcha Protection is a service provided as a way to mitigate heavy server load. reCaptcha Protection will activate after one of the below situations is hit. Once active, all requests by NON TRUSTED(as configured) clients will be redirected to a reCAPTCHA validation page. After validation, the client will be redirected to their desired page.

        The following situations will activate reCaptcha Protection:
        1. The server or vhost concurrent requests count passes the configured connection limit.
        2. Anti-DDoS is enabled and a client is hitting a url in a suspicious manner. The client will redirect to reCAPTCHA first instead of getting denied when triggered.
        3. WP Brute Force protection is enabled and action is set to 'Captcha or Drop’. When a brute force attack is detected, the client will redirect to reCAPTCHA first. After max tries is reached, the connection will be dropped, as per the ‘drop’ option.
        4. A new rewrite rule environment is provided to activate reCAPTCHA via RewriteRules. 'verifycaptcha' can be set to redirect clients to reCAPTCHA. A special value ': deny' can be set to deny the client if it failed too many times. For example, [E=verifycaptcha] will always redirect to reCAPTCHA until verified. [E=verifycaptcha: deny] will redirect to reCAPTCHA until Max Tries is hit, after which the client will be denied.

        -

        Enable reCAPTCHA⇑

        Description

        Enable the reCaptcha Protection feature at the current level. This setting must be set to Yes at the Server level before the reCaptcha Protection feature can be used.

        Default values:
        Server-level: Yes
        VH-Level: Inherit Server level setting

        Syntax

        Select from radio box

        +

        reCAPTCHA Protection⇑

        Description

        reCAPTCHA Protection is a service provided as a way to mitigate heavy server load. reCAPTCHA Protection will activate after one of the below situations is hit. Once active, all requests by NON TRUSTED(as configured) clients will be redirected to a reCAPTCHA validation page. After validation, the client will be redirected to their desired page.

        The following situations will activate reCAPTCHA Protection:
        1. The server or vhost concurrent requests count passes the configured connection limit.
        2. Anti-DDoS is enabled and a client is hitting a url in a suspicious manner. The client will redirect to reCAPTCHA first instead of getting denied when triggered.
        3. A new rewrite rule environment is provided to activate reCAPTCHA via RewriteRules. 'verifycaptcha' can be set to redirect clients to reCAPTCHA. A special value ': deny' can be set to deny the client if it failed too many times. For example, [E=verifycaptcha] will always redirect to reCAPTCHA until verified. [E=verifycaptcha: deny] will redirect to reCAPTCHA until Max Tries is hit, after which the client will be denied.

        +

        Enable reCAPTCHA⇑

        Description

        Enable the reCAPTCHA Protection feature at the current level. This setting must be set to Yes at the Server level before the reCAPTCHA Protection feature can be used.

        Default values:
        Server-level: Yes
        VH-Level: Inherit Server level setting

        Syntax

        Select from radio box

        Site Key⇑

        Description

        The site key is the public key provided by Google via its reCAPTCHA service. A default Site Key will be used if not set.

        Secret Key⇑

        Description

        The secret key is the private key provided by Google via its reCAPTCHA service. A default Secret Key will be used if not set.

        reCAPTCHA Type⇑

        Description

        Specify the reCAPTCHA type to use with the key pairs. If a key pair has not been provided and this setting is set to Not Set, a default key pair of type Invisible will be used.
        Checkbox will display a checkbox reCAPTCHA for the visitor to validate.
        Invisible will attempt to validate the reCAPTCHA automatically and if successful, will redirect to the desired page.

        Default value is Invisible.

        Syntax

        Select from drop down list

        @@ -141,12 +153,14 @@

        Server Security

        Table of Contents

        Bot White List⇑

        Description

        List of custom user agents to allow access. Will be subject to the ‘good bots’ limitations, including allowedRobotHits.

        Syntax

        List of user agents, one per line. Regex is supported.

        Connection Limit⇑

        Description

        The number of concurrent connections (SSL & non-SSL) needed to activate reCAPTCHA. reCAPTCHA will be used until concurrent connections drop below this number.

        Default value is 15000.

        Syntax

        无符号整数

        SSL Connection Limit⇑

        Description

        The number of concurrent SSL connections needed to activate reCAPTCHA. reCAPTCHA will be used until concurrent connections drop below this number.

        Default value is 10000.

        Syntax

        无符号整数

        +

        Bubblewrap Container⇑

        Description

        Set to On if you wish to start CGI processes (including PHP programs) in a bubblewrap sandbox. See https://wiki.archlinux.org/index.php/Bubblewrap for details on using bubblewrap. Bubblewrap must be installed on your system prior to using this setting.

        This setting cannot be turned on at the Virtual Host level if set to "Disabled" at the Server level.

        Default values:
        Server level: Disabled
        VH level: Inherit Server level setting

        Syntax

        Select from drop down list

        +

        Bubblewrap Command⇑

        Description

        The full bubblewrap use command, including the bubblewrap program itself. More on configuring this command can be found here: https://openlitespeed.org/kb/bubblewrap-in-openlitespeed/ . If not specified, the default command listed below will be used.

        Default value: /bin/bwrap --ro-bind /usr /usr --ro-bind /lib /lib --ro-bind-try /lib64 /lib64 --ro-bind /bin /bin --ro-bind /sbin /sbin --dir /var --dir /tmp --proc /proc --symlink../tmp var/tmp --dev /dev --ro-bind-try /etc/localtime /etc/localtime --ro-bind-try /etc/ld.so.cache /etc/ld.so.cache --ro-bind-try /etc/resolv.conf /etc/resolv.conf --ro-bind-try /etc/ssl /etc/ssl --ro-bind-try /etc/pki /etc/pki --ro-bind-try /etc/man_db.conf /etc/man_db.conf --ro-bind-try /home/$USER /home/$USER --bind-try /var/lib/mysql/mysql.sock /var/lib/mysql/mysql.sock --bind-try /home/mysql/mysql.sock /home/mysql/mysql.sock --bind-try /tmp/mysql.sock /tmp/mysql.sock --unshare-all --share-net --die-with-parent --dir /run/user/$UID ‘$PASSWD 65534’ ‘$GROUP 65534’

        拒绝访问的目录⇑

        Description

        指定应该拒绝访问的目录。 将包含敏感数据的目录加入到这个列表，以防止向客户端意外泄露敏感文件。 在路径后加一个“*”，可包含所有子目录。 如果跟随符号链接和检查符号链接都被启用， 符号链接也将被检查是否在被拒绝访问目录中。

        Syntax

        逗号分隔的目录列表

        Tips

        [安全建议] 至关重要: 此设置只能防止服务这些目录中的静态文件。 这不能防止外部脚本如PHP、Ruby、CGI造成的泄露。

        登入限制⇑

        Description

        指定哪些子网络和/或IP地址可以访问该服务器。 这是影响所有的虚拟主机的服务器级别设置。您还可以为每个虚拟主机设置登入限制。虚拟主机的设置不会覆盖服务器设置。

        是否阻止/允许一个IP是由允许列表与阻止列表共同决定。 如果你想阻止某个特定IP或子网，请在允许列表中写入* 或 ALL，并在拒绝列表中写入需要阻止的IP或子网。 如果你想允许某个特定的IP或子网，请在拒绝列表中写入* 或 ALL，并在允许列表中写入需要允许的IP或子网。 单个IP地址是被允许访问还是禁止访问取决于该IP符合的最小限制范围。

        信任的IP或子网络可以在允许列表列表中添加后缀“T”来指定。受信任的IP或子网不受连接数/流量限制。 只有服务器级别的登入限制才可以设置受信任的IP或子网。

        Tips

        [安全建议] 用此项设置适用于所有虚拟主机的常规限制。

        允许列表⇑

        Description

        指定允许的IP地址或子网的列表。 可以使用{VAL}*或{VAL}ALL。

        Syntax

        逗号分隔的IP地址或子网列表。 结尾加上“T”可以用来表示一个受信任的IP或子网，如{VAL}192.168.1.*T。

        Example

        子网: 192.168.1.0/255.255.255.0, 192.168.1.0/24, 192.168.1 或 192.168.1.*.
        IPv6 地址: ::1 或 [::1]
        IPv6 子网: 3ffe:302:11:2:20f:1fff:fe29:717c/64 或 [3ffe:302:11:2:20f:1fff:fe29:717c]/64.

        Tips

        [安全建议] 在服务器级别设置的受信任的IP或子网不受连接/节流限制。

        拒绝列表⇑

        Description

        指定不允许的IP地址或子网的列表。

        Syntax

        逗号分隔的IP地址或子网列表。 可以使用{VAL}*或{VAL}ALL。

        Example

        子网: 192.168.1.0/255.255.255.0, 192.168.1.0/24, 192.168.1 或 192.168.1.*.
        IPv6 地址: ::1 或 [::1]
        IPv6 子网: 3ffe:302:11:2:20f:1fff:fe29:717c/64 或 [3ffe:302:11:2:20f:1fff:fe29:717c]/64.
        -
        +
        diff --git a/dist/docs/zh-CN/ServTuning_Help.html b/dist/docs/zh-CN/ServTuning_Help.html index 5aaed28d6..ecca16966 100644 --- a/dist/docs/zh-CN/ServTuning_Help.html +++ b/dist/docs/zh-CN/ServTuning_Help.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

        静态文件最大尺寸⇑

        Description

        指定LiteSpeed可以自动创建压缩文件的静态文件最大尺寸。

        Syntax

        不小于1K的字节数。

        Tips

        [性能建议] 不建议使用LiteSpeed创建/更新较大文件的压缩文件。 压缩操作会占用整个服务器进程并且在压缩结束前新请求都无法被处理。

        静态文件最小尺寸⇑

        Description

        指定LiteSpeed创建相应压缩文件的静态文件最小尺寸。

        Syntax

        不小于200的字节数。

        Tips

        因为流量节省可以忽略不计，所以压缩非常小的文件是没有必要的。

        +

        Default Cipher Suite⇑

        Description

        Default cipher suite for SSL certificates.

        Default value: Server Internal Default (Based on current best practices)

        Syntax

        Colon-separated string of cipher specifications.

        SSL Strong DH Key⇑

        Description

        Specifies whether to use 2048 or 1024 bit DH keys for SSL handshakes. If set to "Yes", 2048 bit DH keys will be used for 2048 bit SSL keys and certificates. 1024 bit DH keys will still be used in other situations. Default is "Yes".

        Earlier versions of Java do not support DH key size higher than 1024 bits. If Java client compatibility is required, this should be set to "No".

        Syntax

        radio

        Enable Multiple SSL Certificates⇑

        Description

        Allows listeners/vhosts to set multiple SSL certificates. If multiple certificates are enabled, the certificates/keys are expected to follow a naming scheme. If the cert is named server.crt, other possible cert names are server.crt.rsa, server.crt.dsa, server.crt.ecc. If "Not Set", defaults to "No".

        Syntax

        Select from radio box

        Enable Session Cache⇑

        Description

        Enables session ID caching using OpenSSL's default setting. Server-level setting must be set to "Yes" for Virtual Host setting to take effect.

        Default values:
        Server-level: Yes
        VH-Level: Yes

        Syntax

        Select from radio box

        @@ -152,7 +162,7 @@

        Server Tuning

        Table of Contents

        Handshake Timeout⇑

        Description

        The time in seconds a new QUIC connection is given to complete its handshake, after which the connection is aborted. Default value is 10.

        Syntax

        Integer number between 1 and 15

      Idle Timeout⇑

      Description

      The time in seconds after which an idle QUIC connection will be closed. Default value is 30.

      Syntax

      Integer number between 10 and 30

      -
      +
      diff --git a/dist/docs/zh-CN/ServerStat_Help.html b/dist/docs/zh-CN/ServerStat_Help.html index faa7ad68e..33c187619 100644 --- a/dist/docs/zh-CN/ServerStat_Help.html +++ b/dist/docs/zh-CN/ServerStat_Help.html @@ -14,8 +14,10 @@
      openlitespeed logo
      -

      OpenLiteSpeed Web Server Users' Manual

      -
      Version 1.6  — Rev. 2
      +

      + OpenLiteSpeed Web Server Users' Manual +

      +

      Version 1.7  — Rev. 17

      Actions⇑

      Description

      Six actions are available from this menu: Graceful Restart, Toggle Debug Logging, Server Log Viewer, Real-Time Statistics, Version Manager, and Compile PHP.

      Tips

      The shell utility $SERVER_ROOT/bin/lswsctrl can be used to control the server processes as well, but requires a login shell.

      Apply Changes/Graceful Restart⇑

      Description

      By clicking Graceful Restart, a new server process will be started. For Graceful Restart, the old server process will only exit after all requests to it have been finished (or the 平滑重启超时时长 limit has been reached). Configuration changes are applied at the next restart. Graceful Restart will apply these changes without any server downtime.

      Tips

      Graceful restart takes less than 2 seconds to generate a new server process.

      -

      Server Log Viewer⇑

      Description

      The Server Log Viewer is a convenient tool for browsing the current server log to check for errors or problems. The log viewer searches the server log file in blocks for the specified log level. The default block size is 20KB. You can use the Begin, End, Next, and Prev buttons to navigate a large log file.

      Tips

      The size of a dynamically generated page is limited by 动态回应主内容最大大小. So if the block is too big, the page might be truncated.

      +

      Server Log Viewer⇑

      Description

      The Server Log Viewer is a convenient tool for browsing the current server log to check for errors or problems. The log viewer searches the server log file in blocks for the specified log level. The default block size is 20KB. You can use the Begin, End, Next, and Prev buttons to navigate a large log file.

      Tips

      The size of a dynamically generated page is limited by 动态回应主内容最大大小. So if the block is too big, the page might be truncated.

      Real-Time Statistics⇑

      Description

      The Real-Time Statistics link leads to a page with a real-time server status report. This is a convenient tool to monitor the system. The report shows a snapshot of your server statistics. The refresh rate for this snapshot is controlled by the Refresh Interval drop-down list in the upper righthand corner. The report contains the following sections:

      • Server Health shows the basic server statistics, uptime, load, and anti-DDoS blocked IPs.
      • Server lists current traffic throughput, connections, and requests statistics.
      • Virtual Host shows request processing statuses and external application statuses for each virtual host.
      • External Application lists the external applications currently running and their usage statistics. The CGI daemon process lscgid is always running as an external application.
      Many of the rows in the Real-Time Statistics feature a graph icon. Clicking on this icon will open a graph of that row's statistics updated in real-time. In the Server section, next to Requests, there is a link labeled (Details). This link takes you to the Requests Snapshot, where you can view detailed information on which clients are making certain kinds of requests or which aspects of your site are bottlenecking. The fields in the blue area allow you to filter the snapshot to isolate certain parts of your server or look for clients that are performing certain actions.

      Toggle Debug Logging⇑

      Description

      Toggle Debug Logging toggles the value of 调试级别 between NONE and HIGH. As debug logging has an impact on performance and can fill up the hard drive quickly, so 调试级别 should usually be set to NONE on a production server. This feature can be used instead to turn debug logging on and off quickly in order to debug a problem on a production server. Debug logging turned on or off in this way will not change anything shown in your server configurations.

      Tips

      Toggle Debug Logging will only work if 日志级别 is set to DEBUG. Important! Debug logging includes detailed information for each request and response. Active debug logging will severely degrade service performance and potentially saturate disk space in a very short time. This feature should only be used for a short period of time when trying to diagnose server issues.

      See Also

      调试级别, 日志级别

      Name - Listener⇑

      Description

      The unique name that identifies this listener. This is the Listener Name you specified when setting up the listener.

      @@ -120,7 +130,7 @@

      Table of Contents

      Disable⇑

      Description

      The Disable action stops a running virtual host. New requests will not be accepted, but requests being processed will finish as usual.

    Restart - Virtual Host⇑

    Description

    The Restart action causes the web server to load the newest configuration for this virtual host. Requests being processed will finish with the old configuration. The new configuration will only apply for new requests. All changes to a virtual host can be applied on the fly this way.

    -
    +
    diff --git a/dist/docs/zh-CN/Servlet_Context.html b/dist/docs/zh-CN/Servlet_Context.html index 067cb18ce..4425c13cb 100644 --- a/dist/docs/zh-CN/Servlet_Context.html +++ b/dist/docs/zh-CN/Servlet_Context.html @@ -14,8 +14,10 @@
    openlitespeed logo
    -

    OpenLiteSpeed Web Server Users' Manual

    -
    Version 1.6  — Rev. 2
    +

    + OpenLiteSpeed Web Server Users' Manual +

    +

    Version 1.7  — Rev. 17

      @@ -60,7 +62,9 @@
      Version 1.6  — Rev. 2
    • Context
      • @@ -103,7 +113,7 @@

      Servlet Context

      Table of Contents

      自定义默认字符集⇑

      Description

      指定一个字符集当添加默认的字符集是On时使用。这是可选的。默认值是iso-8859-1。当添加默认的字符集是Off时本设置将不生效。

      Syntax

      字符集的名称，例如utf-8

      Example

      utf-8
      -
      +
      diff --git a/dist/docs/zh-CN/Static_Context.html b/dist/docs/zh-CN/Static_Context.html index aa455c627..ca8f07b07 100644 --- a/dist/docs/zh-CN/Static_Context.html +++ b/dist/docs/zh-CN/Static_Context.html @@ -14,8 +14,10 @@
      openlitespeed logo
      -

      OpenLiteSpeed Web Server Users' Manual

      -
      Version 1.6  — Rev. 2
      +

      + OpenLiteSpeed Web Server Users' Manual +

      +

      Version 1.7  — Rev. 17

        @@ -60,7 +62,9 @@
        Version 1.6  — Rev. 2
      • Context
        • @@ -113,11 +123,11 @@

        Static Context

        Table of Contents

        <

        Enable Rewrite⇑

        Description

        Specifies whether to enable LiteSpeed's URL rewrite engine. This option can be customized at the virtual host or context level, and is inherited along the directory tree until it is explicitly overridden.

        Syntax

        Select from radio box

        重写继承⇑

        Description

        指定是否从父级context继承重写规则。 如果启用重写但不继承，将启用本context的重写基准及重写规则。

        Syntax

        布尔值

        重写基准⇑

        Description

        指定重写规则的基准URL。

        Syntax

        URL

        -

        Rewrite Rules⇑

        Description

        Specifies a list of rewrite rules at the virtual host level.

        Do NOT add any document root level rewrite rules here. If you have any document root level rewrite rules from .htaccess, you should instead create a static context with uri "/" and add the rewrite rules there.

        A rewrite rule is comprised of one RewriteRule directive and optionally preceded by multiple RewriteCond directives.

        • Each directive should take only one line.
        • RewriteCond and RewriteRule follow Apache's rewrite directive syntax. Just copy and paste rewrite directives from your Apache configuration files.
        • There are minor differences between LiteSpeed and Apache mod_rewrite implementation:
          • %\{LA-U:variable\} and %\{LA-F:variable\} are ignored by the LiteSpeed rewrite engine
          • two new server variables are added in the LiteSpeed rewrite engine: %\{CURRENT_URI\} represents the current URI being processed by the rewrite engine and %\{SCRIPT_NAME\} has the same meaning as the corresponding CGI environment variable.
        The implementation of LiteSpeed's rewrite engine follows the Apache's rewrite engine specifications. For more details about rewrite rules, please refer to Apache's mod_rewrite document and Apache's URL rewriting guide.

        Syntax

        string

        +

        Rewrite Rules⇑

        Description

        Specifies a list of rewrite rules at the virtual host level.

        Do NOT add any document root level rewrite rules here. If you have any document root level rewrite rules from .htaccess, you should instead create a static context with uri "/" and add the rewrite rules there.

        A rewrite rule is comprised of one RewriteRule directive and optionally preceded by multiple RewriteCond directives.

        • Each directive should take only one line.
        • RewriteCond and RewriteRule follow Apache's rewrite directive syntax. Just copy and paste rewrite directives from your Apache configuration files.
        • There are minor differences between LiteSpeed and Apache mod_rewrite implementation:
          • %\{LA-U:variable\} and %\{LA-F:variable\} are ignored by the LiteSpeed rewrite engine
          • Two new server variables are added in the LiteSpeed rewrite engine: %\{CURRENT_URI\} represents the current URI being processed by the rewrite engine and %\{SCRIPT_NAME\} has the same meaning as the corresponding CGI environment variable.
          • The LiteSpeed rewrite engine will stop processing rewrite rules after encountering an [L] flag to avoid looping while Apache mod_rewrite will stop processing rewrite rules for the current iteration only. This behavior is similar to that of the [END] flag in Apache mod_rewrite.

        The implementation of LiteSpeed's rewrite engine follows Apache's rewrite engine specifications. For more details about rewrite rules, please refer to Apache's mod_rewrite document and Apache's URL rewriting guide .

        Syntax

        string

        php.ini Override⇑

        Description

        Used to overwrite php.ini settings in the current context (Virtual Host level or Context level).

        Supported directives are:
        php_value
        php_flag
        php_admin_value
        php_admin_flag

        All other lines/directives will be ignored.

        Syntax

        Override syntax is similar to Apache, a newline separated list of directives and their values with each directive being prepended by php_value, php_flag, php_admin_value, or php_admin_flag appropriately.

        Example

        php_value include_path ".:/usr/local/lib/php"
        php_admin_flag engine on
        php_admin_value open_basedir "/home"
        -
        +
        diff --git a/dist/docs/zh-CN/Templates_Help.html b/dist/docs/zh-CN/Templates_Help.html index 02a6d4de1..2a8df6327 100644 --- a/dist/docs/zh-CN/Templates_Help.html +++ b/dist/docs/zh-CN/Templates_Help.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

        File Name Used In Template⇑

        Description

        Specifies a path for the file to be used for member virtual hosts. Variable $VH_NAME or $VH_ROOT must appear in the path so each member virtual host will have its own file.

        Syntax

        string

        -
        +
        diff --git a/dist/docs/zh-CN/VHGeneral_Help.html b/dist/docs/zh-CN/VHGeneral_Help.html index 2f26f1cbf..6b41b6eb5 100644 --- a/dist/docs/zh-CN/VHGeneral_Help.html +++ b/dist/docs/zh-CN/VHGeneral_Help.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

        日志级别⇑

        Description

        指定日志记录级别。可用级别（从高到低）为ERROR, WARNING, NOTICE, INFO, 和 DEBUG。 只有当消息等级高于或与当前设置相同时才被记录。 如果您希望将此设置为DEBUG，您也需要设置服务器日志级别为DEBUG。 调试的级别只能在服务器级别通过调试级别控制。

        Syntax

        选项

        Tips

        [性能建议] 除非调试级别设置为NONE以外的日志级别, 否则DEBUG级别不会对性能产生任何影响，推荐采用。

        See Also

        调试级别

        回滚大小⇑

        Description

        指定何时日志文件需要回滚，也称为日志循环。 当文件大小超过回滚限制后，在使用的日志文件将在同一目录中被重命名 为log_name.mm_dd_yyyy(.sequence)，一个新的日志文件将被创建。 回滚的日志文件的实际大小有时会比限制值稍微大一些。 将值设置为0将禁用日志循环。

        Syntax

        无符号整数

        Tips

        请用“K”，“M”，“G”代表千字节，兆字节和千兆字节。

        +

        Keep Days⇑

        Description

        Specifies how many days the access log file will be kept on disk. Only rotated log files older than the specified number of days will be deleted. The current log file will not be touched regardless how many days worth of data it contains. If you do not want to auto-delete stale and very old log files, set this to 0.

        Syntax

        无符号整数

        日志管理⇑

        Description

        指定写入访问日志的地点。这里有三个选项： 1. 写入到服务器的访问日志； 2. 为虚拟主机创建一个访问日志； 3. 禁用访问日志记录。

        Syntax

        选项

        File Name⇑

        Description

        The access log filename.

        Syntax

        Filename which can be an absolute path or a relative path to $SERVER_ROOT, $VH_ROOT.

        Tips

        Put access log file on a separate disk.

        Piped Logger⇑

        Description

        Specifies the external application that will receive the access log data sent by LiteSpeed through a pipe on its STDIN stream (file handle is 0). When this field is specified, the access log will be sent only to the logger application and not the access log file specified in previous entry.

        The logger application must be defined in External Apps section first. Server-level access logging can only use an external logger application defined at the server level. Virtual host-level access logging can only use a logger application defined at the virtual host level.

        The logger process is spawned in the same way as other external (CGI/FastCGI/LSAPI) processes. This means it will execute as the user ID specified in the virtual host's 外部应用程序设置UID模式 settings and will never run on behalf of a privileged user.

        LiteSpeed web server performs simple load balancing among multiple logger applications if more than one instance of a logger application is configured. LiteSpeed server always attempts to keep the number of logger applications as low as possible. Only when one logger application fails to process access log entries in time will the server attempt to spawn another instance of the logger application.

        If a logger crashes, the web server will start another instance but the log data in the stream buffer will be lost. It is possible to lose log data if external loggers cannot keep up with the speed and volume of the log stream.

        Syntax

        Select from drop down list

        日志格式⇑

        Description

        指定访问日志的格式。 设置之后，它将覆盖记录头部 的设定。

        Syntax

        字符串。日志格式的语法与Apache 2.0自定义 日志格式兼容。

        Example

        一般日志格式（CLF）
        "%h %l %u %t \"%r\" %>s %b"

        支持虚拟主机的一般日志格式
        "%v %h %l %u %t \"%r\" %>s %b"

        NCSA扩展/组合日志格式
        "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"

        记录Foobar的cookie值
        "%{Foobar}C"

        See Also

        记录头部

        记录头部⇑

        Description

        指定是否记录HTTP请求头: Referer、 UserAgent和Host。

        Syntax

        复选框

        Tips

        [性能建议] 如果你不需要在访问日志中记录这些头部信息，关闭这个功能。

        See Also

        日志格式

        -

        保留天数⇑

        Description

        指定访问日志文件将被保存在磁盘上多少天。 只有超出指定天数的回滚日志文件会被删除。 当前的日志文件不会被删除，无论它包含了多少天的数据。 如果你不想自动删除过时的、很旧的日志文件， 将该值设置为0。

        Syntax

        无符号整数

        字节记录⇑

        Description

        指定带宽字节日志文件的路径。设置后，将创建一份兼容cPanel面板的带宽日志。这将记录 一个请求传输的总字节数，包括请求内容和响应内容。

        Syntax

        文件2

        Tips

        [性能建议] 将日志文件放置在一个单独的磁盘上。

        压缩存档⇑

        Description

        指定是否压缩回滚日志以节省磁盘空间。

        Syntax

        布尔值

        Tips

        日志文件是高度可压缩的，建议采取压缩以减少旧日志的磁盘占用量。

        使用服务器索引文件⇑

        Description

        指定是否使用服务器的索引文件。 如果设置为Yes，那么只有服务器的设置将被使用。 如果设置为No，那么服务器的设置将不会被使用。 如果设置为Addition，那么附加的索引文件可以被添加到此虚拟主机服务器的索引文件列表中。 如果想要禁用此虚拟主机的索引文件，您可以将该值设置为No，并将索引文件栏留空。

        Syntax

        选项

        @@ -143,7 +153,7 @@

        Virtual Host General

        Table of Contents

        处理器名称⇑

        Description

        当处理器类型为FastCGI，Web服务器，LSAPI，负载均衡器或Servlet引擎时， 指定处理脚本文件的外部程序名称。

        Syntax

        选项

      php.ini Override⇑

      Description

      Used to overwrite php.ini settings in the current context (Virtual Host level or Context level).

      Supported directives are:
      php_value
      php_flag
      php_admin_value
      php_admin_flag

      All other lines/directives will be ignored.

      Syntax

      Override syntax is similar to Apache, a newline separated list of directives and their values with each directive being prepended by php_value, php_flag, php_admin_value, or php_admin_flag appropriately.

      Example

      php_value include_path ".:/usr/local/lib/php"
      php_admin_flag engine on
      php_admin_value open_basedir "/home"
      -
      +
      diff --git a/dist/docs/zh-CN/VHSSL_Help.html b/dist/docs/zh-CN/VHSSL_Help.html index 97ae008e1..4605c0fc5 100644 --- a/dist/docs/zh-CN/VHSSL_Help.html +++ b/dist/docs/zh-CN/VHSSL_Help.html @@ -14,8 +14,10 @@
      openlitespeed logo
      -

      OpenLiteSpeed Web Server Users' Manual

      -
      Version 1.6  — Rev. 2
      +

      + OpenLiteSpeed Web Server Users' Manual +

      +

      Version 1.7  — Rev. 17

      Client Revocation File⇑

      Description

      Specifies the file containing PEM-encoded CA CRL files enumerating revoked client certificates. This can be used as an alternative or in addition to Client Revocation Path.

      Syntax

      Filename which can be an absolute path or a relative path to $SERVER_ROOT.

      -
      +
      diff --git a/dist/docs/zh-CN/VHSecurity_Help.html b/dist/docs/zh-CN/VHSecurity_Help.html index 945fd613d..a8f0e89d7 100644 --- a/dist/docs/zh-CN/VHSecurity_Help.html +++ b/dist/docs/zh-CN/VHSecurity_Help.html @@ -14,8 +14,10 @@
      openlitespeed logo
      -

      OpenLiteSpeed Web Server Users' Manual

      -
      Version 1.6  — Rev. 2
      +

      + OpenLiteSpeed Web Server Users' Manual +

      +

      Version 1.7  — Rev. 17

      Configuration
      -

      Virtual Host Security

      Table of Contents

      reCaptcha Protection

      +

      Virtual Host Security

      Table of Contents

      reCAPTCHA Protection

      Enable reCAPTCHA | Site Key | Secret Key | reCAPTCHA Type | Max Tries | Concurrent Request Limit

      +
      Bubblewrap Container

      +Bubblewrap Container

      登入限制

      允许列表 | 拒绝列表

      Realms授权

      Realm名称 | 用户数据库地址 | 用户数据库最大缓存大小 | 用户数据库缓存超时 | Group DB Location | 组数据库最大缓存大小 | Group DB Cache Timeout (secs)

      -

      reCaptcha Protection⇑

      Description

      reCaptcha Protection is a service provided as a way to mitigate heavy server load. reCaptcha Protection will activate after one of the below situations is hit. Once active, all requests by NON TRUSTED(as configured) clients will be redirected to a reCAPTCHA validation page. After validation, the client will be redirected to their desired page.

      The following situations will activate reCaptcha Protection:
      1. The server or vhost concurrent requests count passes the configured connection limit.
      2. Anti-DDoS is enabled and a client is hitting a url in a suspicious manner. The client will redirect to reCAPTCHA first instead of getting denied when triggered.
      3. WP Brute Force protection is enabled and action is set to 'Captcha or Drop’. When a brute force attack is detected, the client will redirect to reCAPTCHA first. After max tries is reached, the connection will be dropped, as per the ‘drop’ option.
      4. A new rewrite rule environment is provided to activate reCAPTCHA via RewriteRules. 'verifycaptcha' can be set to redirect clients to reCAPTCHA. A special value ': deny' can be set to deny the client if it failed too many times. For example, [E=verifycaptcha] will always redirect to reCAPTCHA until verified. [E=verifycaptcha: deny] will redirect to reCAPTCHA until Max Tries is hit, after which the client will be denied.

      -

      Enable reCAPTCHA⇑

      Description

      Enable the reCaptcha Protection feature at the current level. This setting must be set to Yes at the Server level before the reCaptcha Protection feature can be used.

      Default values:
      Server-level: Yes
      VH-Level: Inherit Server level setting

      Syntax

      Select from radio box

      +

      reCAPTCHA Protection⇑

      Description

      reCAPTCHA Protection is a service provided as a way to mitigate heavy server load. reCAPTCHA Protection will activate after one of the below situations is hit. Once active, all requests by NON TRUSTED(as configured) clients will be redirected to a reCAPTCHA validation page. After validation, the client will be redirected to their desired page.

      The following situations will activate reCAPTCHA Protection:
      1. The server or vhost concurrent requests count passes the configured connection limit.
      2. Anti-DDoS is enabled and a client is hitting a url in a suspicious manner. The client will redirect to reCAPTCHA first instead of getting denied when triggered.
      3. A new rewrite rule environment is provided to activate reCAPTCHA via RewriteRules. 'verifycaptcha' can be set to redirect clients to reCAPTCHA. A special value ': deny' can be set to deny the client if it failed too many times. For example, [E=verifycaptcha] will always redirect to reCAPTCHA until verified. [E=verifycaptcha: deny] will redirect to reCAPTCHA until Max Tries is hit, after which the client will be denied.

      +

      Enable reCAPTCHA⇑

      Description

      Enable the reCAPTCHA Protection feature at the current level. This setting must be set to Yes at the Server level before the reCAPTCHA Protection feature can be used.

      Default values:
      Server-level: Yes
      VH-Level: Inherit Server level setting

      Syntax

      Select from radio box

      Site Key⇑

      Description

      The site key is the public key provided by Google via its reCAPTCHA service. A default Site Key will be used if not set.

      Secret Key⇑

      Description

      The secret key is the private key provided by Google via its reCAPTCHA service. A default Secret Key will be used if not set.

      reCAPTCHA Type⇑

      Description

      Specify the reCAPTCHA type to use with the key pairs. If a key pair has not been provided and this setting is set to Not Set, a default key pair of type Invisible will be used.
      Checkbox will display a checkbox reCAPTCHA for the visitor to validate.
      Invisible will attempt to validate the reCAPTCHA automatically and if successful, will redirect to the desired page.

      Default value is Invisible.

      Syntax

      Select from drop down list

      Max Tries⇑

      Description

      Max Tries specifies the maximum number of reCAPTCHA attempts permitted before denying the visitor.

      Default value is 3.

      Syntax

      无符号整数

      Concurrent Request Limit⇑

      Description

      The number of concurrent requests needed to activate reCAPTCHA. reCAPTCHA will be used until concurrent requests drop below this number.

      Default value is 15000.

      Syntax

      无符号整数

      +

      Bubblewrap Container⇑

      Description

      Set to On if you wish to start CGI processes (including PHP programs) in a bubblewrap sandbox. See https://wiki.archlinux.org/index.php/Bubblewrap for details on using bubblewrap. Bubblewrap must be installed on your system prior to using this setting.

      This setting cannot be turned on at the Virtual Host level if set to "Disabled" at the Server level.

      Default values:
      Server level: Disabled
      VH level: Inherit Server level setting

      Syntax

      Select from drop down list

      登入限制⇑

      Description

      指定哪些子网络和/或IP地址可以访问该服务器。 这是影响所有的虚拟主机的服务器级别设置。您还可以为每个虚拟主机设置登入限制。虚拟主机的设置不会覆盖服务器设置。

      是否阻止/允许一个IP是由允许列表与阻止列表共同决定。 如果你想阻止某个特定IP或子网，请在允许列表中写入* 或 ALL，并在拒绝列表中写入需要阻止的IP或子网。 如果你想允许某个特定的IP或子网，请在拒绝列表中写入* 或 ALL，并在允许列表中写入需要允许的IP或子网。 单个IP地址是被允许访问还是禁止访问取决于该IP符合的最小限制范围。

      信任的IP或子网络可以在允许列表列表中添加后缀“T”来指定。受信任的IP或子网不受连接数/流量限制。 只有服务器级别的登入限制才可以设置受信任的IP或子网。

      Tips

      [安全建议] 用此项设置适用于所有虚拟主机的常规限制。

      允许列表⇑

      Description

      指定允许的IP地址或子网的列表。 可以使用{VAL}*或{VAL}ALL。

      Syntax

      逗号分隔的IP地址或子网列表。 结尾加上“T”可以用来表示一个受信任的IP或子网，如{VAL}192.168.1.*T。

      Example

      子网: 192.168.1.0/255.255.255.0, 192.168.1.0/24, 192.168.1 或 192.168.1.*.
      IPv6 地址: ::1 或 [::1]
      IPv6 子网: 3ffe:302:11:2:20f:1fff:fe29:717c/64 或 [3ffe:302:11:2:20f:1fff:fe29:717c]/64.

      Tips

      [安全建议] 在服务器级别设置的受信任的IP或子网不受连接/节流限制。

      拒绝列表⇑

      Description

      指定不允许的IP地址或子网的列表。

      Syntax

      逗号分隔的IP地址或子网列表。 可以使用{VAL}*或{VAL}ALL。

      Example

      子网: 192.168.1.0/255.255.255.0, 192.168.1.0/24, 192.168.1 或 192.168.1.*.
      IPv6 地址: ::1 或 [::1]
      IPv6 子网: 3ffe:302:11:2:20f:1fff:fe29:717c/64 或 [3ffe:302:11:2:20f:1fff:fe29:717c]/64.

      Realms授权⇑

      Description

      列出这个虚拟主机的所有Realm。 Realm授权可以阻止未授权用户访问受保护的网页。 Realm是一个用户名录，其中包含了用户名、密码、分组（可选）。授权是在context级别执行的。不同的context可以共享相同的Realm（用户数据库），所以Realm是与调用它的context分开定义的。你可以通过context配置中的名称识别Realm。

      Realm名称⇑

      Description

      为Realm授权指定唯一的名称。

      Syntax

      文本

      -

      用户数据库地址⇑

      Description

      指定用户数据库的地址。 对于类型为Password File的数据库，应设置为包含用户名/密码的展平文件的路径。 您可以在WebAdmin控制台中点击文件名来进行修改。

      用户文件的每一行包含一个用户名，后面加上冒号，在跟上加密的密码，后面可选择添加冒号和用户所属组名。 多个组名通过逗号分隔。如果组信息在用户数据库中指定，那么组数据库将不被检查。

      例如:

      john:HZ.U8kgjnMOHo:admin,user


      对于类型为LDAP的数据库，应该设置用于查询用户信息的LDAP URL。对于每个有效的用户，存储在LDAP服务器中的认证数据 应至少包含用户ID和用户密码。当根据HTTP认证报头中的信息通过指定URL进行LDAP查询请求时，应当有且仅有一个记录被返回。"$k"必须在URL中的过滤部分指定并且将用用户名来替代。用户密码属性名必须在查询中返回。用户密码属性名由密码属性名指定。组信息可以使用Member-of 属性来指定（可选）。

      例如: 用户至少要在LDAP中通过以下对象类定义：uidObject, simpleSecurityObject和organizationalRole。可以使用如下URL：
      ldap://localhost/ou=UserDB,dc=example,dc=com???(&(objectClass=*)(uid=$k))

      Syntax

      到用户数据库文件的路径或LDAP URL（RFC 2255）。

      Tips

      [安全建议] 建议在文档树以外保存用户密码文件。 如果用户密码文件被放置在文档树以内，只需要使用".ht"作为文件名开头， 如.htuser，来防止被当做静态文件输出。LiteSpeed Web服务器不输出前缀为“.ht”的文件。

      See Also

      Group DB Location, 密码属性名, Member-of 属性

      +

      用户数据库地址⇑

      Description

      指定用户数据库的地址。 对于类型为Password File的数据库，应设置为包含用户名/密码的展平文件的路径。 您可以在WebAdmin控制台中点击文件名来进行修改。

      用户文件的每一行包含一个用户名，后面加上冒号，在跟上加密的密码，后面可选择添加冒号和用户所属组名。 多个组名通过逗号分隔。如果组信息在用户数据库中指定，那么组数据库将不被检查。

      例如:

      john:HZ.U8kgjnMOHo:admin,user


      对于类型为LDAP的数据库，应该设置用于查询用户信息的LDAP URL。对于每个有效的用户，存储在LDAP服务器中的认证数据 应至少包含用户ID和用户密码。当根据HTTP认证报头中的信息通过指定URL进行LDAP查询请求时，应当有且仅有一个记录被返回。"$k"必须在URL中的过滤部分指定并且将用用户名来替代。用户密码属性名必须在查询中返回。用户密码属性名由密码属性名指定。组信息可以使用Member-of 属性来指定（可选）。

      例如: 用户至少要在LDAP中通过以下对象类定义：uidObject, simpleSecurityObject和organizationalRole。可以使用如下URL：
      ldap://localhost/ou=UserDB,dc=example,dc=com???(&(objectClass=*)(uid=$k))

      Syntax

      到用户数据库文件的路径或LDAP URL（RFC 2255）。

      See Also

      Group DB Location, 密码属性名, Member-of 属性

      用户数据库最大缓存大小⇑

      Description

      指定用户数据库的最大缓存大小。 最近访问的用户认证信息会被缓存在内存中以提供最佳性能。

      Syntax

      无符号整数

      Tips

      [性能建议] 由于更大的缓存会消耗更多的内存，更高的值可能会也可能不会提供更好的性能。 请根据您的用户数据库大小和网站使用情况来设定一个合适的大小。

      用户数据库缓存超时⇑

      Description

      指定多久检查一次后端用户数据库变更。 在缓存中每个条目都有一个时间戳。 当缓存日期超过指定的超时时间时，将检查后端数据库是否有变化。 如果没有，时间戳将被重置为当前时间，否则会将新的数据载入。 服务器重载和平滑重启会立即清除缓存。

      Syntax

      单元

      Tips

      [性能建议] 如果后端数据库不经常发生变更，设置较长的缓存时间来获得更好的性能。

      -

      Group DB Location⇑

      Description

      指定组数据库的位置。
      组信息可以在用户数据库或在这个独立的组数据库中设置。 用于用户验证时，将首先检查用户数据库。 如果用户数据库同样包含组信息，组数据库将不被检查。
      对于类型为Password File的数据库， 组数据库地址应当是到达包含有组定义的平面文件的路径。 你可以在WebAmin控制台中点击文件名来修改这个设置。
      每一行组文件应当包含一个组名， 组名后面跟一个冒号，并在冒号后面使用空格来分割组中的用户名。 例如:

      testgroup: user1 user2 user3


      对于类型为LDAP的数据库， 组数据库地址应当是查询组信息的LDAP URL地址。 对于每一个有效的组， 基于同一URL地址和同一在Require（授权的用户/组）中指明的组名进行的LDAP查询请求，应当有且仅有一个记录返回。 "$k"中指定的组名称必须在URL的过滤部分指定并用组名称代替。在组中指定成员的属性名称需在组成员属性名中指定。


      例如: 如果objectClass posixGroup被用来存储组信息。可以使用以下的地址：
      ldap: //localhost/ou=GroupDB,dc=example,dc=com???(&(objectClass=*)(cn=$k))

      Syntax

      文件3

      Tips

      [安全建议] 建议把组文件保存到站点目录外。 如果必须将组文件放置在站点目录内，只需要用".ht"开头命名，如.htgroup，来防止文件被当做静态文件而输出。LiteSpeed网页服务器不会输出前缀是".ht"的文件。

      See Also

      用户数据库地址, Context Require（授权的用户/组）, 组成员属性名

      +

      Group DB Location⇑

      Description

      指定组数据库的位置。
      组信息可以在用户数据库或在这个独立的组数据库中设置。 用于用户验证时，将首先检查用户数据库。 如果用户数据库同样包含组信息，组数据库将不被检查。
      对于类型为Password File的数据库， 组数据库地址应当是到达包含有组定义的平面文件的路径。 你可以在WebAmin控制台中点击文件名来修改这个设置。
      每一行组文件应当包含一个组名， 组名后面跟一个冒号，并在冒号后面使用空格来分割组中的用户名。 例如:

      testgroup: user1 user2 user3


      对于类型为LDAP的数据库， 组数据库地址应当是查询组信息的LDAP URL地址。 对于每一个有效的组， 基于同一URL地址和同一在Require（授权的用户/组）中指明的组名进行的LDAP查询请求，应当有且仅有一个记录返回。 "$k"中指定的组名称必须在URL的过滤部分指定并用组名称代替。在组中指定成员的属性名称需在组成员属性名中指定。


      例如: 如果objectClass posixGroup被用来存储组信息。可以使用以下的地址：
      ldap: //localhost/ou=GroupDB,dc=example,dc=com???(&(objectClass=*)(cn=$k))

      Syntax

      文件3

      See Also

      用户数据库地址, Context Require（授权的用户/组）, 组成员属性名

      组数据库最大缓存大小⇑

      Description

      指定组数据库的最大缓存大小。

      Syntax

      无符号整数

      Tips

      [性能建议] 由于更大的缓存会消耗更多的内存， 更高的值可能会也可能不会提供更好的性能。 请根据你的用户数据库大小和网站使用情况来设置合适的大小。

      See Also

      用户数据库最大缓存大小

      -
      +
      diff --git a/dist/docs/zh-CN/VHWebSocket_Help.html b/dist/docs/zh-CN/VHWebSocket_Help.html index a1cf10939..9101a9eba 100644 --- a/dist/docs/zh-CN/VHWebSocket_Help.html +++ b/dist/docs/zh-CN/VHWebSocket_Help.html @@ -14,8 +14,10 @@
      openlitespeed logo
      -

      OpenLiteSpeed Web Server Users' Manual

      -
      Version 1.6  — Rev. 2
      +

      + OpenLiteSpeed Web Server Users' Manual +

      +

      Version 1.7  — Rev. 17

        @@ -60,7 +62,9 @@
        Version 1.6  — Rev. 2
      • Context
        • @@ -97,7 +107,7 @@

        Table of Contents

        URI⇑

        Description

        Specifies the URI(s) that will use this WebSocket backend. Traffic to this URI will only be forwarded to the WebSocket backend when it contains a WebSocket upgrade request.

        Traffic without this upgrade request will automatically be forwarded to the Context that this URI belongs to. If no Context exists for this URI, LSWS will treat this traffic as though it is accessing a static context with the location $DOC_ROOT/URI.

        Syntax

        A plain URI (starting with "/"). If the URI ends with a "/", then this WebSocket backend will include all sub-URIs under this URI.

        Example

        Using the WebSocket proxy in conjunction with a Context allows you to serve different kinds of traffic in different ways on the same page, thus optimizing performance. You can send WebSocket traffic to the WebSocket backend, while setting up a static context so that LSWS can serve the page's static content, or an LSAPI context so LSWS will serve PHP content (both of which LSWS does more efficiently than the WebSocket backend).

        Address⇑

        Description

        A unique socket address used by the WebSocket backend. IPv4 sockets, IPv6 sockets, and Unix Domain Sockets (UDS) are supported. IPv4 and IPv6 sockets can be used for communication over the network. UDS can only be used when the WebSocket backend resides on the same machine as the server.

        Syntax

        IPv4 or IPV6 address:port or UDS://path

        Example

        127.0.0.1:5434
        UDS://tmp/lshttpd/php.sock.

        Tips

        If the WebSocket backend runs on the same machine, UDS is preferred. If you have to use an IPv4 or IPv6 socket, set the IP address to localhost or 127.0.0.1, so the WebSocket backend is inaccessible from other machines.
        Unix Domain Sockets generally provide higher performance than IPv4 or IPv6 sockets.

        -
        +
        diff --git a/dist/docs/zh-CN/VirtualHosts_Help.html b/dist/docs/zh-CN/VirtualHosts_Help.html index ce784becf..1d78fd2fe 100644 --- a/dist/docs/zh-CN/VirtualHosts_Help.html +++ b/dist/docs/zh-CN/VirtualHosts_Help.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

        配置文件⇑

        Description

        指定虚拟主机的配置文件名称。 配置文件必须位于$SERVER_ROOT/conf/vhosts/目录下。 推荐使用$SERVER_ROOT/conf/vhosts/$VH_NAME/vhconf.conf。

        Syntax

        文件3

        Tips

        $SERVER_ROOT/conf/vhosts/$VH_NAME/vhconf.conf is recommended

        最大Keep-Alive请求数⇑

        Description

        指定通过keep-alive(永久)连接服务的最大请求数量。当该限制值达到时连接将被断开。你可以为不同虚拟主机设置不同的数值。这个数值不能超过服务器级别的最大持续连接请求数限制值。

        Syntax

        无符号整数

        Tips

        [性能建议] 设置为一个合理的高数值。设置为1或比1更小的值将禁用keep-alive连接。

        See Also

        最大持续连接请求数

        -

        智能Keep-Alive⇑

        Description

        指定是否为虚拟主机启用智能Keep-Alive。这个选项仅在当智能持续连接启用并且最大Keep-Alive请求数大于1的时候生效。

        Syntax

        布尔值

        Tips

        [性能建议] 为访问繁忙的网站启用此项。

        Description

        指定在这个虚拟主机内是否要跟随符号链接。 If Owner Match选项启用后，只有在链接和目标属主一致时才跟踪符号链接。 此设置将覆盖默认的服务器级设置。

        Syntax

        选项

        Tips

        [性能和安全性建议] 为了更好的安全性，请禁用此功能。为了获得更好的性能，启用它。

        启用脚本⇑

        Description

        指定在这个虚拟主机中是否允许运行脚本（非静态页面）。 如果禁用，CGI, FastCGI, LSAPI, Servlet引擎 和其他脚本语言都将在这个虚拟机中不被允许使用。 因此如果你希望使用一个脚本处理程序，你需要启用本项。

        Syntax

        布尔值

        访问管制⇑

        Description

        指定虚拟机根($VH_ROOT)以外的文件是否可以通过这个网站访问。 如果设置是Yes，只可以访问$VH_ROOT下的文件， 访问指向$VH_ROOT以外文件或目录的符号链接或context指向都将被阻止。 尽管如此，这里不会限制CGI脚本的访问。 这个选项在共享主机下非常有用。 跟随符号链接可以设置成Yes来允许用户使用在$VH_ROOT下的符号链接， $VH_ROOT以外的则不可以。

        Syntax

        布尔值

        Tips

        [安全建议] 在共享主机环境下打开该功能。

        @@ -109,11 +118,11 @@

        Table of Contents

        suEXEC User⇑

        Description

        At the current context level, run as this user. If set, this value will override the Virtual Host level ExtApp Set UID Mode setting.

        This configuration may be overridden at the External Application level using the Run As User setting.

        Default value: Not Set

        Syntax

        Valid user name or uid.

      suEXEC Group⇑

      Description

      At the current context level, run as this group. Either suEXEC User at the Virtual Host level, or Run As User at the External Application level, must be set for suEXEC Group to take effect.

      This configuration can be overridden at the External Application level using the Run As Group setting.

      Default value: suExec User setting value

      Syntax

      Valid group name or uid

      静态请求/秒⇑

      Description

      指定每秒可处理的来自单个IP的静态内容请求数量（无论与该IP之间建立了多少个连接）。

      当达到此限制时，所有后来的请求将被延滞到下一秒。 对于动态内容请求的限制与本限制无关。 每个客户端的请求限制可以在服务器或虚拟主机级别设置。 虚拟主机级别的设置将覆盖服务器级别的设置。

      Syntax

      无符号整数

      Tips

      [安全] 受信任的IP或子网不受影响。

      See Also

      Dynamic Requests/Second

      -

      Dynamic Requests/Second⇑

      Description

      Specifies the maximum number of requests to dynamically generated content coming from a single IP address that can be processed in each second regardless of the number of connections established. When this limit is reached, all future requests to dynamic content are tar-pitted until the next second.

      The request limit for static content is independent of this limit. This per client request limit can be set at server or virtual host level. Virtual host-level settings override server-level settings.

      Syntax

      无符号整数

      Tips

      Trusted IPs or sub-networks are not restrained by this limit.

      See Also

      静态请求/秒

      +

      Dynamic Requests/Second⇑

      Description

      Specifies the maximum number of requests to dynamically generated content coming from a single IP address that can be processed in each second regardless of the number of connections established. When this limit is reached, all future requests to dynamic content are tar-pitted until the next second.

      The request limit for static content is independent of this limit. This per client request limit can be set at server or virtual host level. Virtual host-level settings override server-level settings.

      Syntax

      无符号整数

      Tips

      Trusted IPs or sub-networks are not restrained by this limit.

      See Also

      静态请求/秒

      出口带宽⇑

      Description

      指定对单个IP地址允许的最大传出吞吐量（无论与该IP之间建立了多少个连接）。 为提高效率，真正的带宽可能最终会略高于设定值。 带宽按4KB为单位分配。设定值为0可禁用限制。 每个客户端的带宽限制（字节/秒）可以在服务器或虚拟主机级别设置。 虚拟主机级别的设置将覆盖服务器级别的设置。

      Syntax

      无符号整数

      Tips

      [性能建议] 按8KB单位设置带宽可获得更好的性能。
      [安全建议] 受信任的IP或子网不受影响。

      See Also

      入口带宽

      入口带宽⇑

      Description

      指定对单个IP地址允许的最大传入吞吐量（无论与该IP之间建立了多少个连接）。 为提高效率，真正的带宽可能最终会略高于设定值。 带宽是按1KB单位分配。设定值为0可禁用限制。 每个客户端的带宽限制（字节/秒）可以在服务器或虚拟主机级别设置。 虚拟主机级别的设置将覆盖服务器级别的设置。

      Syntax

      无符号整数

      Tips

      [安全] 受信任的IP或子网不受影响。

      See Also

      出口带宽

      -
      +
      diff --git a/dist/docs/zh-CN/admin.html b/dist/docs/zh-CN/admin.html index 90c5949ae..77d7b75c9 100644 --- a/dist/docs/zh-CN/admin.html +++ b/dist/docs/zh-CN/admin.html @@ -14,8 +14,10 @@
      openlitespeed logo
      -

      OpenLiteSpeed Web Server Users' Manual

      -
      Version 1.6  — Rev. 2
      +

      + OpenLiteSpeed Web Server Users' Manual +

      +

      Version 1.7  — Rev. 17

        @@ -60,7 +62,9 @@
        Version 1.6  — Rev. 2
      • Context
        • @@ -140,7 +150,7 @@

        Administration

        -
        +
        diff --git a/dist/docs/zh-CN/config.html b/dist/docs/zh-CN/config.html index c22aaade1..363a9827a 100644 --- a/dist/docs/zh-CN/config.html +++ b/dist/docs/zh-CN/config.html @@ -14,8 +14,10 @@
        openlitespeed logo
        -

        OpenLiteSpeed Web Server Users' Manual

        -
        Version 1.6  — Rev. 2
        +

        + OpenLiteSpeed Web Server Users' Manual +

        +

        Version 1.7  — Rev. 17

          @@ -60,7 +62,9 @@
          Version 1.6  — Rev. 2
        • Context
          • @@ -180,7 +190,7 @@

          Configuration

          -
          +
          diff --git a/dist/docs/zh-CN/index.html b/dist/docs/zh-CN/index.html index a2b75ae9e..d64dd5b0f 100644 --- a/dist/docs/zh-CN/index.html +++ b/dist/docs/zh-CN/index.html @@ -14,8 +14,10 @@
          openlitespeed logo
          -

          OpenLiteSpeed Web Server Users' Manual

          -
          Version 1.6  — Rev. 2
          +

          + OpenLiteSpeed Web Server Users' Manual +

          +

          Version 1.7  — Rev. 17

          -
          -

          OpenLiteSpeed Web Server 1.6

          -

          Users' Manual

          -

          — Rev. 2

          -
          -
          +
          +

          + OpenLiteSpeed Web Server 1.7 +

          + Users' Manual +

          + — Rev. 17 +

          +
          +
          +

          Table of Contents

          -
          -

          Table of Contents

          -
          - - -
            -
          1. License
            2. -
          2. Introduction
            3. -
          3. Installation/Uninstallation
            4. -
          4. Administration
            5. -
          5. Security
            6. -
          6. Configurations
            7. -
          -

          For more information, visit our OpenLiteSpeed Knowledge Base

          +
            +
          1. License
            2. +
          2. Introduction
            3. +
          3. + Installation/Uninstallation +
            4. +
          4. Administration
            5. +
          5. Security
            6. +
          6. Configurations
            7. +
          +

          + For more information, visit our + OpenLiteSpeed Knowledge Base +

          -
          +
          diff --git a/dist/docs/zh-CN/install.html b/dist/docs/zh-CN/install.html index f6f613079..7a0854e99 100644 --- a/dist/docs/zh-CN/install.html +++ b/dist/docs/zh-CN/install.html @@ -14,8 +14,10 @@
          openlitespeed logo
          -

          OpenLiteSpeed Web Server Users' Manual

          -
          Version 1.6  — Rev. 2
          +

          + OpenLiteSpeed Web Server Users' Manual +

          +

          Version 1.7  — Rev. 17

            @@ -60,7 +62,9 @@
            Version 1.6  — Rev. 2
          • Context
            • @@ -88,9 +98,10 @@
            Version 1.6  — Rev. 2
            Home

            Installation/Uninstallation

            -

            Minimum system requirements

            +

            Minimum system requirements

              -
            • Operating System: +
            • + Operating System:
              • Linux(i386): kernel 2.4 and up, glibc-2.2 and up
              • CentOS: 5 and up
                • @@ -100,14 +111,16 @@

                Minimum system requirements

              • MacOSX: 10.3 and up
              • -
            • CPU: +
            • + CPU:
              • Intel: 80486 and up
              • PowerPC: PowerPC G4
            • Memory: 32MB and up
              • -
            • Disk: +
            • + Disk:
              • Installation: 200MB
              • Runtime: 300MB and up, swapping space depends on usage.
                • @@ -115,106 +128,142 @@

                Minimum system requirements

              -

              Installation

              +

              Installation

              - Installation must be performed in a command line terminal. For testing purposes, LiteSpeed Web Server can be - installed into a home directory by a non-privileged user. For production use, it should be installed into a system directory. + Installation must be performed in a command line terminal. For testing + purposes, LiteSpeed Web Server can be installed into a home directory by a + non-privileged user. For production use, it should be installed into a system + directory.

              - In Mac OS X, the root user is disabled by default. It can be enabled using a series of actions detailed on the Apple - website. You can also use the sudo command to install LSWS into a system directory without enabling the root user, but - system folders will still only be manipulable by the root user. This means that every time you want to control LSWS from - the command line terminal (like when you want to start or stop LSWS), you will have to use the sudo command. + In Mac OS X, the root user is disabled by default. It can be enabled using a + series of actions detailed on the Apple website. You can also use the sudo + command to install LSWS into a system directory without enabling the root + user, but system folders will still only be manipulable by the root user. + This means that every time you want to control LSWS from the command line + terminal (like when you want to start or stop LSWS), you will have to use the + sudo command.

              -

              Installation Steps:

              +

              Installation Steps:

              - Visit the OpenLiteSpeed Knowledge Base + Visit the + + OpenLiteSpeed Knowledge Base + for a list of installation methods.

              -

              Getting Started

              +

              Getting Started

              1. -

                For detailed information on controlling the server processes, please see the Administration Guide.

                - To start the server, simply run [your_install_dir]/bin/lswsctrl start. (To stop it, run [your_install_dir]/bin/lswsctrl stop.) + For detailed information on controlling the server processes, please see + the Administration Guide. +

                +

                + To start the server, simply run [your_install_dir]/bin/lswsctrl start. + (To stop it, run [your_install_dir]/bin/lswsctrl stop.)

              2. A sample site should be running on the server.

                - To access your site, point your browser to http://[address]:8088/, [address] being the IP address or domain name of - your web server machine. Use "localhost" if the server is on the machine you are using. "8088" is the default - port. If you chose another port for LiteSpeed during installation, use the port you designated. + To access your site, point your browser to http://[address]:8088/, + [address] being the IP address or domain name of your web server machine. + Use "localhost" if the server is on the machine you are using. + "8088" is the default port. If you chose another port for LiteSpeed + during installation, use the port you designated.

                - A congratulations page linked to other testing pages should load into the browser when pointed to the above address. If - not, try testing the WebAdmin interface. + A congratulations page linked to other testing pages should load into the + browser when pointed to the above address. If not, try testing the + WebAdmin Console interface.

              3. The default port for the WebAdmin console is 7080.

                - Plug http://[address]:7080/, into your browser to go to the WebAdmin interface. (If you changed the port for WebAdmin - during installation, use that port instead.) + Plug http://[address]:7080/, into your browser to go to the WebAdmin + interface. (If you changed the port for WebAdmin during installation, + use that port instead.)

                - Remember that for [address] you can use "localhost" if you're currently using the machine the server is on. + Remember that for [address] you can use "localhost" if you're + currently using the machine the server is on.

                - The WebAdmin welcome page should load. Click the "Log on" link and use the administrator's username - and password specified during installation to log on. + The WebAdmin welcome page should load. Click the "Log on" link + and use the administrator's username and password specified during + installation to log on.

                - For detailed information regarding configuration, please refer to our Configuration Guide, or click the "Help" - link at the top of each page. + For detailed information regarding configuration, please refer to our + Configuration Guide, or click the "Help" link at the top of + each page.

              4. -

                If your server uses firewall, please make sure that localhost is trusted.

                -

                For instance, Linux with IPTables should include a rule ALLOW INPUT from LO.

                +

                + If your server uses firewall, please make sure that localhost is trusted. +

                +

                + For instance, Linux with IPTables should include a rule ALLOW INPUT from + LO. +

              5. - If your web site and the WebAdmin interface are inaccessible, please take a look at the error log - [your_install_dir]/logs/error.log. + If your web site and the WebAdmin Console are inaccessible, please take + a look at the error log [your_install_dir]/logs/error.log.

                - If there is a TCP port conflict with other server applications, the web server should be reinstalled with an available port. - The following command can be used to find an available port: + If there is a TCP port conflict with other server applications, the web + server should be reinstalled with an available port. The following + command can be used to find an available port: netstat -an | grep XXXX - XXXX is a port number. If the port is available, the command will produce no output. + XXXX is a port number. If the port is available, the command will produce + no output. +

                +

                + If the swapping directory is not writable, you can either grant writing + permission for the swapping directory to the user whom the web server is + running as, or change the swapping directory's configurations manually. + The swapping directory is configured in the server's XML configuration + file: [your_install_dir]/conf/httpd_config.xml. Search the XML file for + swappingDir. The default location for the swapping directory is + /tmp/lshttpd/swap.

                - If the swapping directory is not writable, you can either grant writing permission for the swapping directory to the user - whom the web server is running as, or change the swapping directory's configurations manually. The swapping directory - is configured in the server's XML configuration file: [your_install_dir]/conf/httpd_config.xml. Search the XML file for - swappingDir. The default location for the swapping directory is /tmp/lshttpd/swap. + If you still have problems with installation, please check out our wiki + or post your problem on our support forum.

                -

                If you still have problems with installation, please check out our wiki or post your problem on our support forum.

              -

              Notes

              +

              Notes

              • - OpenLiteSpeed supports both native LiteSpeed XML configuration files and plain text configuration files (for those used to - editing Apache's httpd.conf). Run [your_install_dir]/conf/switch_config.sh to switch between these formats. + OpenLiteSpeed supports both native LiteSpeed XML configuration files and + plain text configuration files (for those used to editing Apache's + httpd.conf). Run [your_install_dir]/conf/switch_config.sh to switch between + these formats.
              • - On FreeBSD, Mac OS X, Ubuntu, and Debian, the shipped PHP (for CentOS) will not run. You will need to build a new - PHP for OpenLiteSpeed in order to run PHP applications with OpenLiteSpeed. + On FreeBSD, Mac OS X, Ubuntu, and Debian, the shipped PHP (for CentOS) will + not run. You will need to build a new PHP for OpenLiteSpeed in order to run + PHP applications with OpenLiteSpeed.
              -

              Uninstallation Steps

              +

              Uninstallation Steps

                -
              1. Stop OpenLiteSpeed if it is running: [your_install_dir]/bin/lswsctrl stop
                2. +
              2. + Stop OpenLiteSpeed if it is running: [your_install_dir]/bin/lswsctrl stop +
              3. Remove the install directory: rm -rf [your_install_dir]
                4. -
              -
            +
            diff --git a/dist/docs/zh-CN/intro.html b/dist/docs/zh-CN/intro.html index 0e3e9d8db..b1b350dbf 100644 --- a/dist/docs/zh-CN/intro.html +++ b/dist/docs/zh-CN/intro.html @@ -14,8 +14,10 @@
            openlitespeed logo
            -

            OpenLiteSpeed Web Server Users' Manual

            -
            Version 1.6  — Rev. 2
            +

            + OpenLiteSpeed Web Server Users' Manual +

            +

            Version 1.7  — Rev. 17

            -
            +
            diff --git a/dist/docs/zh-CN/license.html b/dist/docs/zh-CN/license.html index 927419052..e55ecc9af 100644 --- a/dist/docs/zh-CN/license.html +++ b/dist/docs/zh-CN/license.html @@ -14,8 +14,10 @@
            openlitespeed logo
            -

            OpenLiteSpeed Web Server Users' Manual

            -
            Version 1.6  — Rev. 2
            +

            + OpenLiteSpeed Web Server Users' Manual +

            +

            Version 1.7  — Rev. 17

              @@ -60,7 +62,9 @@
              Version 1.6  — Rev. 2
            • Context
              • @@ -812,7 +822,7 @@

              How to Apply These Terms to Your New Programs

              .

              -
              +
              diff --git a/dist/docs/zh-CN/security.html b/dist/docs/zh-CN/security.html index 825929885..bd166c8b2 100644 --- a/dist/docs/zh-CN/security.html +++ b/dist/docs/zh-CN/security.html @@ -14,8 +14,10 @@
              openlitespeed logo
              -

              OpenLiteSpeed Web Server Users' Manual

              -
              Version 1.6  — Rev. 2
              +

              + OpenLiteSpeed Web Server Users' Manual +

              +

              Version 1.7  — Rev. 17

              diff --git a/dist/install.sh b/dist/install.sh index c05865daa..beef211e2 100755 --- a/dist/install.sh +++ b/dist/install.sh @@ -6,7 +6,7 @@ OSVER= OSTYPE=`getconf LONG_BIT` MARIADBCPUARCH= DLCMD= -LSPHPVER=73 +LSPHPVER=74 MYIP= testMyIP() diff --git a/dist/lsrecaptcha/_recaptcha.shtml b/dist/lsrecaptcha/_recaptcha.shtml index ac53e541d..3085e5a17 100644 --- a/dist/lsrecaptcha/_recaptcha.shtml +++ b/dist/lsrecaptcha/_recaptcha.shtml @@ -2,6 +2,7 @@ + Bot Verification