From 6fa26b3ddbde4f59da04de41bf0efc343286165b Mon Sep 17 00:00:00 2001
From: 409 <409dev@protonmail.com>
Date: Sun, 7 Sep 2025 17:19:16 +0200
Subject: [PATCH] remove sqlite extensions to fix docker issue

UUIDs are now generated in the backend before insertion
---
 .dockerignore                                 |   1 +
 Dockerfile                                    |  12 -
 backend/.gitignore                            |   1 +
 backend/Cargo.lock                            |   1 +
 backend/Cargo.toml                            |   2 +-
 backend/migrations/20250906174941_init.sql    |  11 +-
 .../20250906184417_create_admin_user.sql      |  11 -
 backend/sqlite_extensions/uuid                | Bin 35944 -> 0 bytes
 backend/sqlite_extensions/uuid.c              | 231 ------------------
 backend/src/bin/backend/main.rs               |   7 +-
 backend/src/lib/domain/warren/models/mod.rs   |   1 +
 .../lib/domain/warren/models/option/mod.rs    |  74 ++++++
 .../warren/models/option/requests/delete.rs   |  47 ++++
 .../warren/models/option/requests/get.rs      |  57 +++++
 .../warren/models/option/requests/mod.rs      |   6 +
 .../warren/models/option/requests/set.rs      |  83 +++++++
 .../warren/models/user/requests/register.rs   |  29 ++-
 .../src/lib/domain/warren/ports/metrics.rs    |  11 +
 backend/src/lib/domain/warren/ports/mod.rs    |  20 ++
 .../src/lib/domain/warren/ports/notifier.rs   |  13 +
 .../src/lib/domain/warren/ports/repository.rs |  20 ++
 backend/src/lib/domain/warren/service/auth.rs |  73 +++++-
 backend/src/lib/domain/warren/service/mod.rs  |   1 +
 .../src/lib/domain/warren/service/option.rs   |  90 +++++++
 .../src/lib/outbound/metrics_debug_logger.rs  |  25 +-
 .../src/lib/outbound/notifier_debug_logger.rs |  25 +-
 backend/src/lib/outbound/sqlite/auth.rs       |  35 +--
 backend/src/lib/outbound/sqlite/mod.rs        |   5 +-
 backend/src/lib/outbound/sqlite/options.rs    | 134 ++++++++++
 backend/src/lib/outbound/sqlite/share.rs      |   5 +-
 backend/src/lib/outbound/sqlite/warrens.rs    |  27 +-
 backend/warren.db                             | Bin 69632 -> 0 bytes
 compose.yaml                                  |   4 +-
 33 files changed, 754 insertions(+), 308 deletions(-)
 delete mode 100644 backend/migrations/20250906184417_create_admin_user.sql
 delete mode 100755 backend/sqlite_extensions/uuid
 delete mode 100644 backend/sqlite_extensions/uuid.c
 create mode 100644 backend/src/lib/domain/warren/models/option/mod.rs
 create mode 100644 backend/src/lib/domain/warren/models/option/requests/delete.rs
 create mode 100644 backend/src/lib/domain/warren/models/option/requests/get.rs
 create mode 100644 backend/src/lib/domain/warren/models/option/requests/mod.rs
 create mode 100644 backend/src/lib/domain/warren/models/option/requests/set.rs
 create mode 100644 backend/src/lib/domain/warren/service/option.rs
 create mode 100644 backend/src/lib/outbound/sqlite/options.rs
 delete mode 100644 backend/warren.db

diff --git a/.dockerignore b/.dockerignore
index 8b346a2..a286678 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -12,3 +12,4 @@ frontend/node_modules
 
 backend/target
 backend/.gitignore
+backend/data
diff --git a/Dockerfile b/Dockerfile
index ad74d44..82f54ee 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -13,19 +13,9 @@ COPY frontend/ ./
 RUN npm run generate
 
 
-FROM alpine:3 AS sqlite-extension-compiler
-WORKDIR /var/lib/warren
-
-RUN apk add sqlite-libs sqlite-dev build-base
-COPY backend/sqlite_extensions sqlite_extensions
-RUN gcc -g -fPIC -shared sqlite_extensions/uuid.c -o sqlite_extensions/uuid
-
-
 FROM rust:alpine AS backend-builder
 WORKDIR /usr/src/warren
 
-RUN apk add sqlite sqlite-dev build-base
-
 COPY backend/Cargo.toml backend/Cargo.lock ./
 RUN mkdir -p src/bin/backend && mkdir src/lib && echo "fn main() {}" > src/bin/backend/main.rs  && echo "" > src/lib/lib.rs
 RUN apk add --no-cache pkgconfig openssl openssl-dev libc-dev openssl-libs-static
@@ -38,8 +28,6 @@ RUN cargo build --release
 FROM alpine:3
 WORKDIR /var/lib/warren
 
-COPY --from=sqlite-extension-compiler /var/lib/warren/sqlite_extensions/uuid /var/lib/warren/sqlite_extensions/uuid
-
 COPY --from=backend-builder /usr/src/warren/target/release/warren_backend /usr/bin/warren
 COPY --from=frontend-builder /usr/src/warren/dist ./frontend
 
diff --git a/backend/.gitignore b/backend/.gitignore
index 1fb42cc..afc3d77 100644
--- a/backend/.gitignore
+++ b/backend/.gitignore
@@ -1,3 +1,4 @@
 target
 serve
 .env
+data
diff --git a/backend/Cargo.lock b/backend/Cargo.lock
index 6471dd9..28c5ab0 100644
--- a/backend/Cargo.lock
+++ b/backend/Cargo.lock
@@ -2721,6 +2721,7 @@ version = "1.17.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3cf4199d1e5d15ddd86a694e4d0dffa9c323ce759fea589f00fef9d81cc1931d"
 dependencies = [
+ "getrandom 0.3.3",
  "js-sys",
  "serde",
  "wasm-bindgen",
diff --git a/backend/Cargo.toml b/backend/Cargo.toml
index d1c20af..be508b3 100644
--- a/backend/Cargo.toml
+++ b/backend/Cargo.toml
@@ -39,5 +39,5 @@ tower-http = { version = "0.6.6", features = ["cors", "fs", "trace"] }
 tracing = "0.1.41"
 tracing-subscriber = "0.3.19"
 url = "2.5.4"
-uuid = { version = "1.17.0", features = ["serde"] }
+uuid = { version = "1.17.0", features = ["serde", "v4"] }
 zip = "4.5.0"
diff --git a/backend/migrations/20250906174941_init.sql b/backend/migrations/20250906174941_init.sql
index 1a8d604..0138dd8 100644
--- a/backend/migrations/20250906174941_init.sql
+++ b/backend/migrations/20250906174941_init.sql
@@ -1,5 +1,5 @@
 CREATE TABLE users (
-	id BLOB NOT NULL PRIMARY KEY DEFAULT (uuid_blob(uuid())),
+	id BLOB NOT NULL PRIMARY KEY,
 	oidc_sub TEXT UNIQUE,
 	name TEXT NOT NULL,
 	email TEXT NOT NULL UNIQUE,
@@ -10,7 +10,7 @@ CREATE TABLE users (
 );
 
 CREATE TABLE warrens (
-	id BLOB NOT NULL PRIMARY KEY DEFAULT (uuid_blob(uuid())),
+	id BLOB NOT NULL PRIMARY KEY,
 	name TEXT NOT NULL,
 	path TEXT NOT NULL UNIQUE,
 	created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
@@ -31,7 +31,7 @@ CREATE TABLE user_warrens (
 );
 
 CREATE TABLE shares (
-	id BLOB NOT NULL PRIMARY KEY DEFAULT (uuid_blob(uuid())),
+	id BLOB NOT NULL PRIMARY KEY,
 	creator_id BLOB NOT NULL REFERENCES users(id) ON DELETE CASCADE,
 	warren_id BLOB NOT NULL REFERENCES warrens(id) ON DELETE CASCADE,
 	path TEXT NOT NULL,
@@ -48,3 +48,8 @@ CREATE TABLE auth_sessions (
 	expires_at DATETIME NOT NULL,
 	created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
 );
+
+CREATE TABLE application_options (
+	key TEXT NOT NULL PRIMARY KEY,
+	value TEXT NOT NULL
+);
diff --git a/backend/migrations/20250906184417_create_admin_user.sql b/backend/migrations/20250906184417_create_admin_user.sql
deleted file mode 100644
index c3b2983..0000000
--- a/backend/migrations/20250906184417_create_admin_user.sql
+++ /dev/null
@@ -1,11 +0,0 @@
-INSERT INTO users (
-	name,
-	email,
-	hash,
-	admin
-) VALUES (
-	'admin',
-	'admin@example.com',
-	'$argon2id$v=19$m=19456,t=2,p=1$H1WsElL4921/WD5oPkY7JQ$aHudNG8z0ns3pRULfuDpuEkxPUbGxq9AHC4QGyt5odc',
-	true
-);
diff --git a/backend/sqlite_extensions/uuid b/backend/sqlite_extensions/uuid
deleted file mode 100755
index f368b5f2212473c107f7901e24ad0a83b1d3d577..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 35944
zcmeHwdwf*Ywf{b6&OUR_OhOV8AP9j0L4ryM&!T_?AuymI^04tanIw~BWHK|(0|pdD
zu}Vs@VAYGyQmdBs)?V6+8XvV$S_yrL)(5>>8@0Ajtx_K~wbtD4+WYL8$%yy<?(d)9
z<HPxov-f)Jwbx#2?bq3dIoH&myGYkGrY;vdi{&83>Kww6EsBG1vzQn6v22XsHFBiS
z<?2j{QYkByFx9~+>%fI6cS}B%Dms-D_4y>76{K~##H%#F9I0|_lB6G-J20*Nf^viw
zO{kIlFps>PwA(S3N-c*>I?~@BM{Z$S>+q?xu-sv%TwyxSDW_7ZgRWI?rCR=X>RaKI
zyU!=Yu)=h;L^GAD`p!o=$F&Z}f1M~duXO7BB0rQm?N+H{USUfgs-T!zynGGfPU|LJ
z6kRWXiB^F>m&1SiSB8!cd~oxMwWoe}O3$j3D;n!YoCy-6>d5vahuUM+QAz0yy8q~d
zl@(i3<_2Vsdr`Z5$DwQjZt!vN!7sp5{l4SypZ*2-MZk|e4u1@|<JEhUz!$MU4UvUP
zs6t$8@K?r$vFbX4RLhYG1ll@c(Lgd4Or!z<7Fe=+S)e792(^WisZe6|vIUV?G_*R{
z6bVV%@hO4kOfb+Ijs_#)jUkr2A`(u8rUioWFysf5$q;0>2E!3R&8ZFXP@pLgi8TX4
zwase-&FyO?SrtsD!!3buG@N3Qa8q+lGFCH_Ek1Y2*$V<wYo=v$Q)^~q^V8834PJKP
zuHkNolyEM#8#EP{<>7EK_1Nz@xb#V3o1$l*16K&T&bk59rN$4{Z+&GF-{*`g3V+C{
zpt4TV6<)#J^CX^P&vA)B^yJ}HpCiJdJUsOUbsf&bL-Fj@n}?@5vR9qV(J<?DIf1b9
z@YHwIRaz%=#P1BvigY49VSy7CIAMVk7C2#n6BamOffE+^f5-wKl#KeszvUgvzl}dS
znKA!Yx>I`pA^(=2TKh#S`e*zc=>GA)#Jyy69dZP>6YXekKd$jl6HH6jqlX0i7{Rop
zJlYM|zkRNdyPf|Cc>fuFsUfIp5#>>p-QQa>dNX+0ekTQgClR;LxQ>#EpZPnF`JZ}s
zp8u&nmtT9v|J-M(3J4hD2(bElTT4bS%$2A1Y@S;WGD}Ze<KHs(6WX}@JKstb`?t+K
z1^E6UM}Rug4CS8TBZ1H^-QQYMGWvQ_gY>9ltvQ(F9c=^e8pwd5N;@}wx@FU+ldm>$
zKjZ4TxHpP?>(x_`uM_!2SC98^A5vB#+HuDqO8A|WbUydkGNI0aBl|z=@84Gc=~I2?
zmR_y%>CQt>^}4h}TK%U$Zs{#KxL;J*x#@_%Gu?Zj{!>!!Kz*M~K3##e|Jw<{s=<y$
z{%!TW&#+1UE%m+Hw)#GQ^C4i4__aeN53{ZHAD28_|8e&bqvYXk|1N0uFVLmrVWYJ3
zX)3q1l*p)4(5@7;ic+HZw{&Y;OG&7{rM^#lj+)+Aa`jeO8{2WIP;wQ_Qtj{DbQqda
zwTDsXoGa5D<qm5H>fa%ikN!JuiZ;oi9eMVj2#{@56_p|FH2gbM@(3$=q<cK=&Cs^=
zkv)P9#n&A6Z+TiPd3bQi!_WIQ{3~Exnv>Ld;K))~_^Do_b3b9JDY6bwYC-9IYFqs~
z(oTmUXnTcMwDd4q`i}OtyNe?F?TK49y;D+h(*g=)r(v5M<sJC??vh)(N%L)&_BlS=
z@{SMI5Pn0XCb5I}Z^OSGTd|))DG(0yKfk5VmGW%qGg6C>ZWX5COS6pa`HcQfxO3Z@
zUX<+fcfN$eM{b1rFpRqk1=-u@gVOu<IjG9YN|==|p|k$OEt@_pO^*c2Tc;^)YV%p%
zE|RjiNV4r{L_4}V)BF6LYxcDGw;AKBNmVE`r5mzt&&t}39jbqOeYd~!nV-;pxBq!W
z)H8^vE!}ln>z@J8v!!?5mhR14>wEm$*Bp|(qAf#(Z}~DQ>)dUd=|P!)y9lH%|AD7q
z`ToboiE0nb??1GI%+TULO{$XOM<V~|@6YNRhrW9{)AvE&U7yppeiyl6`x<B|YF+^=
zqAgwiEt|Sns!r&&4WOi6{VBPeKXj_F*Fe4Yd|t1&wa;nx{3m&ut$=1do#~%Kv#!r;
z)+IITb?SbYY|=?FyXi1XO@bOVSvBHho^9#FutSehgG`RNfO(Fi#yR<F)Mf*-bIoCA
zP=WYoCz4R~u1@qt{*-{&x!ZQou#Vy4UD9X!jBy^~sy}i$yPPfQd~Uvol}9z^V~;@r
zsloG@IZ8V*f^GVgr58h3s!-VZWcKYdUd2O-;|Q}LjC!7E&gX<pC=_;&6t?SsAPi&X
z!TpS7=e_JqM{PK9ov^?O3!JdP2@9OCzzGYSu)zQS7N8Tgnr6nT+kI!v^-ZXq;5+3M
zU%PJ(@@Gt#=)3AFpF;`eQCbI3=I2osVTnc}#SN!;37Kh%#G0fnos+yZ;PHntt7A)|
zsR2f=oicUW^cge1H0z9DQ*%qGm5AC1*X$KYvC3mtz1QC#LHd<r{r$Hf{Tos`qr3C3
z{rxW>{oeci{e4IiAN2QEVkJ5D!~XtRNS{F3fONq}{rwrF72u&u+qjZxnNn>;k=xn<
zJZ&{b;?F`obx7Hu(nW(RmzH?fTbtRulV+bfZQNKw6VF2Y9R=SNgqT05^ag!Fv8hKO
zNzz+@J`?)gKY+el(0#yNkH4RQF3w_A`T8v`7uT{f_JHSmXj>1`Tpjzfbi%JhoA(Z&
z|7(_h1o$^VzheOX)-2sZn=gT_ZX7_rE=#WleLv^}baZ*7f>h?jb;1HCEO5dCCoFKn
z0w*kR!U88OaKZv7EbxD=1=M?r>b*oP@5Qy-NsF9Ry%>p?BE{7=RHnlnSiS!^!htO(
zJ;_PcdyuqGqD#>~`m8@D5IBCKOTEKbX-HVTqgd_GapoYdpF647Nh_VyVPi*}_Z)FN
zA}+s^s(qe%XK|Q=?{g|v_*o9D^z3%{XwONPst*SaLjOKTUmQ;fSlJQVIRU@n(Eskh
zN>3^6|G-_nw_Z^7OgcQmwa7^?a8mVt>f!|p&h%B|jq8cNDKl!O)=cqDt(`ifcGi?>
z45y9GtE19r6P;IJf2DjX1m|vD)5zVLU>=#lOUhNQ#Y0_ehQo2Z;$F+`fwZc}aVTA>
zGqP;?k8l$vF2Aru=8W>cz}oA8x5}%aKjli9*Kn7h>?q5tnI8dLlmXhFh5#?sDt911
zi1POD5HXXq;okznYw=l#H@gSYYP7NRSOE%f2(cf6*0tKuTS-JSd^trMwukbcKyX+q
z`91RbA8>Q&2n71mNC{2kYy#=VMjJeg=N<YWViM}Sj{4rvt40G+OnK`~-8vHhza79I
z^l=MCJQr7&Gq!8F%bEv}zm7g~p36<L8J`NHuW;Fyf?)A_0Oz~x%>YXI6|nG1m;GG;
zmAngazRG1k4Zz2@pna=d_A3CY`4mW7<Ffw_pq96w)(a$M7Vkvte^~-`{7dL~4K8~a
z+V1DaV2ul1_6z_kcq`a0k{UGd*I=xRCD6z#Q0b*En~t;Fc_UnSnakb=AkOcF?g5wQ
zP5>ERihHB1XER?6wkDUoAGoc&8oD*R?AHP8U`1pXoh%@X+<=TmH>Q^pVTmG8>jfdt
z1&@P`=}n5|+gTQo6JC-mbo%VmzoHn)UQ(7M|3DGQc9J06pdV0#53>ZyF`dfky^1;*
zEs@12$8;*Jf2OEp&zw-9KGR16DH?p~K&nt$+=zh2;jXvgHby@acTt3lohL9`gy|ii
zxXJv2%=8_q$dd}Ek>)ah3CDB_XnnWhBcDjof{%zy?*Y<Yj5e8k)ceQ}qP#r=-L#aC
zw-9wj9|Jp<5E;wxStdf%8Vrw*DY|6@1Xw9Je5_{=@|N`my4J~_7m+WumSGql=lKBn
zN{h@j-cyE&#b;^YKgBZ{`D$wm@Dn_K<ZG=VsH@s@3G%b7Q<0zONh4opeTM1m)WJ6)
z@3%ffg{OHQMt+4g3}sIjbv0P+2;oVd-vZxg#S!Q=p3*7=utm``*)tLOxOEv~zSc7r
z`Ha;E{1lPjY;~b!Q#~7j-)h~6K0Dp>2=Y6ue?rd8!H1CFWjz5Mz9jVAZ9R|vHcRC9
zSf`?gogsAIYek{+nL^Jl>qn?-wkX?etwMX}2z-zARmhwx@P{l5hCHkIDC8fuUcw+S
zPsr@Gs-aI^xjqW-J6SgaKVOtRW;LPg*`jQpQ3f3r2t3n_Zd9;P5G>7Th1Kf?rBpK(
zfo+kXRBFa-v|;gx5s>TCjH_Tszo1lW20c$)B5JSIjID6((u(O|o23~)fIZGBS_z;|
zGhW2daIU8cs|CMiJPFauJguOt(2O6#{L4KL18C5UVX(;x&uai0HDfn`m7ejV>2)*X
z8U)e>o=X74HREPzeUW_)fQ)8bkGQ#5*m1LFWT5CJCEoyLt7bfn@%~c#`v7)mMhtGd
z%yS+7JIpT4h`>$(;ltgU@h;S99NZ1IJ(}?ccp^CX1ps?B<7`yg<oOgpmu3{9J<Xz?
zZq2w7#%&Qm4@5(qkas>rAJU9Fz}D(5^1(Hl5rjHzqMlyOZ~<r+fqw+jV8pQJEU+EZ
zjP20va?fCdd!J_Pheg+VmxID|!w2g`%9{XKx^W)ZItE7ol<GzrT1Q2hO5L~_TF1Oo
zpn*>}7NTUl=vuH<>&A63;uW560;tuEOJJ&mrwhO=h(=5#J#PW1(~Yk(#!{ZaW8fd%
zxCarKE?Np;g>H19J?p$-01dkF5t_Z;dlBks)Qv8vlMyy(*A0#aZSZadTU<A8fwwn$
z?*@?3jqiZ%O79~8HbZM@aFzEt09$oq7AoE3{Ud-Ky73&;x!U^=0K0VKDC)V!I|PQ`
zjY?sI&EAv7(toZq9?}@QR@AdsH@*eRbpq(pjoDCiivYTHV-uuZ@12Y?J-YEG-1wEE
zWdIK8#%0j$2G1@4hjrsUXuZ|@2!LMQxDBT2EP4sR5#4wVWxgsJcT6{yg0jss_+<D;
zH)iULZTB{!Hs&%KV5*yhgDsaa73zGws2*&kE@Kx&@9<m(pweah0@8LC?FQg;8E$y)
z8%6s7RJ)8{qRcIWdjQnBj8CE4t)5o_%yJpiVXE5%Q0Fo#(CmLHJ_d>(0OD<zpsa8i
z%i#Lk%Z+g~T^oM}<qkn<bQzbUo;ycWg3|6XzU5-<E>Tb1Wh}w)akl_6F5^Zt?j8Yb
zb{YSK;lC*aY;_q6(8S%|nGmqUWz0a|zSmw2V3*6d7mD6zzvTnnWsC%HzfG~T$7Nh-
zF!q2=Bk^9BaXlKh$G!?>x?ILQQ2y1XalG4Qd=H9#-@X-;9+&X}Ec&1T4!Mj?Q0E8s
zFF`r%GLE93?zP_o(CaeZ1LcSI;PLPe02t&)_B;T`Tt)(3c*t%7&<Be`+Qa4R05HQi
z6GPe~<(mOmhH*A5+EsBH%`k@H0^6gW*)+u%#ye=jV*>CQ#<?i@xB#jR<02UG3Hv;-
z)f&dju-lLAZ$sKF!*~td`AM4wlsdy00u6rRp@8)p#u(_<Er1n<@jY1dDZ$oY7(obl
z+Vk%a&}bMbv}ga|0|43$V<;;9soe`8ZW#3D)z9n?0b~s0BLL6XG&pQFj9)|a0S|SV
zt%hNsJv{>0VHj&bIcVFbz(0o32+=?Hi~_LRFyc`37lWn(*kc$;gyk=7n$`9i##*TJ
zD|-bfU54=&MD(xA!vMOC5jeJE&z5Zh&|?_%^64RaH-JN^2Z8jQ{V0ILhB4b@?D-+D
z0_cT7puukh<p|24(ia4940c1A7wwP0)@K;6pq`h?><MTvHyWYN%Qnpm7B_qV4%_vh
zlyc)5SoC*x06---_9Av(t4IRyabp?O`MrH7fNE|uBSLy@nwe|)h)ArBz3%xTD6_b6
zBkcA@`Og5<al`9o?9DP7I{n;uAG-ZPMB)l=oQ}AD%YGAV4cwRtgZ$ARS`Ghj<7t%n
zlQ2~~H#(u)5iys<xv>zV%Te!_!It618F28Q?KptV+}MgTZwsxra^nd!@g1St4sIMo
zd)^hmE{@hP_Fh>h%IxOG1E3reqW5s)73lU?!M2whix9o<3sZG*V>uN4K=iC`Zd?z;
ze<*++ZqWMgBl})RJH(B5(S*N=_8f-Y5C<QZcZ1T)jm2Q=EBh^gBi#4|l)rmF1#pZT
z<!Hhu_PB|lbE5;geQM7Fz)WKin*C3^5rAbHHWcl*w*x3O%~sGgP4HEk=I>FfuGxD*
z^O<Hd0@I~=e+sDDG~<X1L#sFpsMa)3LIb(x{VSkZrb*jyQ}fVhT4$R3P@7xxl%5JV
zndak=Vr!o1fL561I5gj@iB>k4=F=!wtX23yYc$O;tT9OQGyrNh&F_2gwzFnm0Vr;o
zx1wCBW`7+}#x!4pe+FxVzYS=!X`X{>%Qa6Ipsl9)6Ifx0X1@YxhiP7f@nNWD{~gdS
z)9e9lm?r$P+car`JX}J1Omi%}G(xlIorXSTnhDTGYTi|Vx=eE<^c<ym+5vT&=7Xr+
zr`fjx>M_lUfW~U}(|`_{=C7g4IL-bupu?v5ZCH1_=CMzQ=S*|Ig=Mei9Si7)X*Pg1
zL9=Pqe9Sce1gKiGY0~I3%`#YUqE<E=oXl-Lhqj-liLt|Sn;tI~y_$U?Xr*qm30|3`
z*$F_EZnGO9S)&c!2FT|&UoOJZSMz=oP_^5<8l1J7=OI9~Zu3I4c8cbC7SJrW8HZh_
zYM!Hj>fGjXcx;;H`3#WXZSDnay5^~z1pm3seX!>Y%~K7i!EOEu`pwkrIe;47=0ot`
zmn78gHm@s&XjyyQZF*7PnVP)`oEf*d9o>DtCI+U>Zu4YB-2zQ?gRO3}3|3kwEwRIG
zzEOnrt7hMZa=YB-C*bsJVl>$8HpfG=C0g0PfwsqOzJ_v3wX*$y_PWh)q7COrsLO4B
ztr+W833a>8li=IsTG`v+>~WhJXtqN0`~%P-xA}Y6`h2atqz3+To1@U8RhsD3y>9b-
z)VD?}KN++mZu1;K7f9%s+x!46YS8Q`Xnk&TDD=EUMizS9QqV5d?5}}lS?2X9cbR7I
z22^U9uLBBb_LG1rE%PEoPorkP3<%q-+o5$(Le-Y}yp4scX4{kDKg)apP)Msd9ndVx
z90$%et&INvM4e@xh8BgT1^t$JI%sR9E-Nha{y|uLYBue+8Z7fCs4u2@FGIOT%iMrS
zj%)U{fZ8o{B`lxN#I%C_l$}Hu7{`YUrV-*AxV?yS_KPskvwUPV^2L<j^BlKUL#TM#
z@jQ2)c1(f6e<J~d?}cYxkbuSe5wI`v(pD5H<ueeWFYyu*T*=oW%wOg<?NELE+a+)Z
zw{HSlHGdF}{ts?{A3!Z%hcd5l`&j_9_)-|<Rc^lzppO3o`u~o5De(M!F^upU_lzfB
z^P$k-_q=EUfChdwn0vXW0YD?~fCXMhr2yLb%V_Z%-2OU%IG+pAZ*qGdfDC^LTK_?^
zZRQ6d`Y5-51<F?bT`2l4x8DY^gWm$(-{Zp#tSxr&6e!1dSrvfY%>Ed)9^$1mVCo^<
zPS!`F)nfNgjnv2>8tt?5o&(5d4{JdYeAIr)M+OsHex`pzQOO_$R80!_p<*F36|&GH
zE~dXgEM$2yUXF$7q_&%kD3RjHge+1Dq>GwER+Ur|ppkA&KNUzfnK(ybx}S=W2r~EQ
z1YWABWd9tM=~pVko-BcKOn(q}uVt)6qThm>kWFrprR9U2M-_owBniTN6tql#o~V>1
zpXI1bKSl&%B>&|TY{0@)v}<#mFcw)i?IWFMK{FK(?YMG}x0t?&2xNh%A}~FmaI_?K
z1SXNScOn9>F0J|o@`EUEFGD}Le(<R80#US!u!OL8qOaXN*!P%VL*D)?ZW}90Ngul!
z9OqP3y^MS@<trZ;Wfft~%5OmXzB6k0$8-+B+hKq`qeS1exP{{19c7c3OPT#DdgZxQ
zCs(3OG36WIud<#c0kc8>u*&K0i!l;>Qe_?y>%kvk#QBG$l=29=UVoMO7f>qsm(jtD
zQRe#qeEd|@!)2w_{0ER`%1UebF!UU^q|D+!0GlO&Is9JqLwl5m9AC$u#LVO!RrWYq
z;OBL4Rk37S!JoxQP%>)p0Z<y4eGuZ7RgHUvnm~E$$x+tds0p{B(w~ef+gS-dJpO`t
zmRF5-<K&@;$i;-{X{@p?0$mJmLDk%YXkk;8eH#cCpNSzPB!N<X7j$Z`viE^f$!|q-
z!&P<<03Sc-!LtGhREyzlZI%5tD7E6zaHPua2QZ7zfTKIA>?t_EspEG+!I-4@c`Yb$
z39R5nF!&W!_G+*-@Vn5cM3vnEppiE~w`7&Q13){!7)?mYO5@^ja#{izUJYsMB(Ry^
z3*FXBU@QMMyqu}BUxt7k{BN+#l~wjJ0K52XnDy!^+lKpg^V8tiYb3CT{|*{#mcU+q
z4`#S6Rbq3{#Y-?)-cV)NqfEC9{p-+9P2AQ&xCnUdM#6oKZsPg7emyAqFt}7F=jgvc
z`0C^a(Rcoh_z162j_DN7`kjhO))rKzKdNxAE1X6-rvDLlouXL(m0}_5YlKJFSGWmi
zwZKUwv!kv?1g4*kyH5R3H;@ymotG^ka@5nA{sUr}saVKMQm7oCE>r~am~569WkuzZ
zC81cl2C@i+1WrEr{V~Y;)3~|Gd0JKlN8ek46k3uuWlbc3>8~mRc{Zm4(?3!K+UPkW
z`ygb66mn@!il9n6Nf(X<x%eQ0r0An6&({EOFXG~FRUToKaj`gaeOy&R1cN_{ZrvvV
z&TRmHmuwbx4%Ry)gZPTW2yN@rDo?kP_D@F|e+&cIXO1*hJP$q6(nfh`IO5+!(CVXX
zQ7fMW6<njrMXgL<3c9|FZX{9H(ev$pL%hB-s>;G5eGuh`Q9->Jpz9Re=+7CW|A>J}
z9|qV>4<j_9FufLc83{RD9kTXUA?C3$BO8$)M0xu|G-lhl(N_?H^7=PO2Xcs*UFbP`
z&Vx+f3|I)J?SmjN{dR>rL^yF1p_4l-p*eu*H&OsTsF>;Ld>%86rA+@1MWyFFc~oIG
zy-!i;34R{+RupCWP#}eBw8qR)nLb?+=&_O@FnyWA(Sv@;EQ2se1j^D=|9mMMRS7x*
z$Pw}aPPXzJitmMid;~K6KC;2%isfTs5o3_Z(LluXPZgEU5%Op4*A#&szsO?JE<*r|
zmeX?#L121~!d<LzQWSwqZ^YeA=MEAnR1iLsMmQT3A#fM5<OWFsnSM9!ZaSzaEKCl^
zA{`VLW$FAPXDFsWK?L$M9X#X{UL*oJkxm}+3GWhN9lTCQ2l)gyU>6O1bXbs2@DYLR
zNCyW}^Sm|A8APRa(&2$7)%~)<-IOgsMv!9&Nz#abexdm2tRd$XAw@Dvd21CP9YaVB
zi10aik1IZU>L>Yf^$K5z%4smw#EtlveiH6(I@EAF-<wJdooy6W_r+pP1-GySor2`m
zP75*7IHm`Qg?vxPA;QK?zg`uiQ;}RT3|~Yb{plP;5Sac$!cp7lIK;vIjBunDor>fH
zXulytiw4VK`?nywi+n&zSVLBnJA-f{B89aCNc#)1$#9sdh+YOp_j1L}^aUh=f~+Zr
zTZQZ}lB2f~mDZZq5|vPcnSKQ!N!dFTQllKxseb(iMeQQ0@Uf)crwF}7$muG)A#hhB
zq?t}5rT$~ZTs%fG=fXuW6M^Z3)c;J(WTo0Hv&a#O=`(<I)3J**q_EE(K^aCAI)jng
z2u1R`#d$>DN@Out=jxXuT9n9i8Y9Vaq~1<QI+c+~Q5nf)`n^P<Bbowf7yyVu51%DP
zvcE(~I=7KXIhMaoNIJ49kgiFM=%?)5bUGu+G!QU-G+<#II;oKjC2l90rxTTGT$`ne
zoHSirQR!eunok%>G;83E=_|qGrbC}xGh`8|+}$LLLWz!oWVa_s1=SNoCgF4*louVj
zS|~a+amxj^+(N%XWrhE<Wos$t_#as}9Un<;NFY`QfJJq5lq5$=iaV@2h(HCeB7%rg
zk(08n1=39iPRBKdbW*dDKxa|H7EHgNa1=mvB&A8mJW4ofF+F5-aK9oPMbfbx?sdYE
zXgZB@_&y>W%>Z-`<=|{&g@LCKPS}ldOh1!uRYaxQ=&UKvzJy}>Y(=G0r95hO+;bxA
zLdCa(_~?d-nN~*ED#8IG<T`iGeUF1zx}8{<PKEV5R53b?67up4D^+_=vCt8fWXbhJ
z$?~CMp@XZu%84rFiAhYx;V|$BL(sw2@tB#ukXT4xI_?rWV<bd&7~%9QiAtjB#7f%v
z4xhs(K&F2M6gQnmIfeI75qgG1$5IYY7vV?@oleO|7_v3LR0KMy5(K8drEqi-C4^!e
z{yUIvI*pQMl@U4!u$Z3cWXg%YlL<${=}byCnIK2GFA<f3pAM-cRd$6nL?8#!ft54U
zMF~fR>D)@zo9m5I|LYXXK4PI8o~c2+em@ZirjxBa%V(p7=}!_1iJ?<1QPxrNbs~^1
zbi(D}K2gkcwv{I@+cxR@flCD^kO!fNsECfjawdUQmlB1x3v@0fC`@lr+;lva<Cc@F
zXuoWF24puKlsT4>^W|<T{W#1(r)J`XAf`V|I4VR(WHN|ESCMjluBckIs!!yki%lTi
zbeg8o#?mpy5h_CT>DeM8CySf`q^OQg*Q8mpR(Ax9P%L!jCi@xb%=Al$K+4g<TF%T&
zPpcAiMwV*>({CaI6{aJy9KmV&cZf>z=*%ofW%|#EKyw0}pGga5X9!IWWv>wn*@#Zn
za=JL?CTqwUK?7Ov(Se&L-YU>1Djc1=<rc?siE;qiI-xOF@zIf79-r_}mQSNyDgs+E
z(-~c!LV{VY(QYOdaswUQX(WK@4-t;CbbKfL!SsWQj}Gyqk0kT&0K4h*PEM?1^vmkO
z^uH0Aj`Jk>xM~goS!@jGXit-St}~Ez)8U>oe=H*&vMn9)Nm;V~OBI1m`|=DTsq2Uu
zLsRJV&k=PCvTi#6lVXU<^gYB#^64m0dW;^RXyPX0{>O@i&Ifa$p-BO~iaPQ%P(}O_
zK@*^i^D&@^I_TI?6qAM|s$=HQND9Rjoh3S>+CpUAbebro%D8U;EM(EaVxDVBRVljH
zhn!rrb|_{#ca+SzSxRUrnB}7N4#iBzl6eLdS_=Qksp<g8ZaS=#W-KJXM`8#`Cz!(W
z!en?c7O?1HbYLkS!#RC?0ue}mI<1s0$S$auUZ<#ZdMT|h-EtWbZorNHMB|vgdIVg$
zo(N=1I@8pMig_J(H=Sw<Sct)>dLLowbTfx_y7Xg2p_9%$imdhpqR^>lj>7bJ2}y^a
z5-FUKLA^|O0qLfLP(i_p2U*crIu3PklN62)J_~&+WC<f@H<p^%g$hu*WWEwWC!kV*
z41nv1K)$2n&wS(EsR(ou>Nseh!qJ(hWEO50H=%|U+5@tiPC}h>^mE@XdRv#yLmeDL
zRt&au4(d3kf^Z~fk-}*rCmJUkat^UjVA2t(>?ERg5v$o7)2o#zIxfw{lJn3qsi<^(
z>OAn>sc>|NnpcAK!6HCW=}=V$t$bd)UlEMSAmnBz0aA~YuhNogOsBzDf0arQnND5v
zN{9hP@(lt-c!iE)C5u#J3K7U0bk>?Hi|L;T#6!ofIfAs1G+i?&y34?;1b12BIZL|%
z2-{U%N2=k_Lw7%nI4JrSuy|?yT|6N5>bxFa!<+GQJ$Op#He%r8leICmaOM427c#Bn
z&tPDB$u)zJ7$uq)iB+=OL{eIEJ1S$ok_U>B)RkOcf@E_=11ixf{s|7fq7w{8g#~pi
z478|t!f(OD&pUZ4YS5{g>Vsf67Zf)jpBHhYhzz8Oui3~R;?(v(VS`AQ`0wgSwYz?Z
zVwEjT?71THjJ~tM<Hl_Jyhl7!*tx>92UY)OG#NtQ=`Tw(vlmSgr0<Nd;V$U=bfY8k
zMj@C)4x7T5=XOYWdMfR&T|2w3@tAIa^Qfe2=e}z^9|PP!oZ`c^bI&!U&1maSOR1c`
zb46)8+WfO&v<X6$YzT$K1dxVKBgNV9lVQ(&&(PyjTzAL>wcf32-8V(nx=Yr&?<`sC
zEwa{!M#x&X%32>5wYqlhy{2>;Jorc{iP3k~2_?FO5~QKj;z6awI5zz2rHnl=)X`#Z
zR*Q<MPTL=-ky`ALT0AgYYH^>`;yaa6i(OKSJp;A)uF`^?bPT@RsgW&~Q#9e~kqKIS
zGwQ00FNw096U3PaeD@aw(#@6BbzsO-=@o0b&Xx&FqCnY3c3Y*iZ96;dpu@4q;V6r;
zyTsX|zO#j~lTHSDT@h(M4?#v(E^uC@mXgiZ&2(JlAvdmfYOgB`vkgwDT*6MjxD1hT
zY4IIM=(=AfXv7M5RTRAROHxdO5PI2grxB$kaCc)xBiL-$4xcOs*+EBkd)ZnR6vqq*
z$+8S<DiuS>&NepW8Zc8i5jdr+h^jj2G4#K4hZ2wa4>eb0b$I{`mF?`@8fr1bO{yrz
zyOBWJuDDaPlu9@uwVV}EA*OM*1iX3)^Nz77=Nf{6bV<2}tWk`q^vp5FZ0{M~CFS%6
z7nc~<Y%Va+$W%NM10FXCpyHMy$>LzPhYEpCahQ(_Sd$g#=*Hf0%<DbN>%x#zbc)cd
zxLk7$@_Nr4BTA9nLFFhl2R*Q)8X0==s&smxoHAgnGsomf9t`QMT&kqc9s}94pizYo
zfy@w1lZ_rqq{+Yx8^XvCFf6njC~J5Pbdu7?6i*mlrVV!2RbC|;eNv9(rQ-Rt5vU!4
z^6WXXOdCI_+`B{b?$k`z=n<ody%fhvRZgqDv%S>hQE(4b8tqsIBb)COG-u2V+{Ox4
zekNGY5X>i&;@FRf+PpbejTcrDY)i`L4JUJ-VrXZ1y>M=>^n@BVZ#Y^f_^1VB>FOFS
zA9<rTe2!@C#DVyM%{|qtQFBQD(_|L&qA-smTiRx$kTi*uTT(t<sD(Gs5o?$@7E^?3
z+CK&rQ-auL_(Nti==cv4_|uUuag!aGxGkaFYW!)J(QPf=l62!!n60ax<N5^<`hz%#
z)$o3!Zn)@X&`p4D%Gs^F+|<Vp;e%Sa-N20$A2FZXbGSB_yIgh+H=g8nnwO@yp5pdo
zZnpBGbGVh}MHg}2!-uu;ihH>C4<eJ|?jG*Fj$4!YSV-1gnFd}>nWcOL5^WCNq42bF
zElrZ=aF12NIm(>F?F&h|_d;%_xOEP9Ur5|$12;u#_3)8G3T`f7hl^AnJD69WLyAoz
zu6y{H3-Kz{qkLKqFP_6~ye&axTpJs>H_A(i#g$2MkIQ?HQ)%&qye!4FEu>5<_k6&0
zVzPGdk$>cF>!7UMs^Q*qxF^lMVSc*xIIkd{R%CaObhD;`d(0_ZyO@uf3Re9nFSlOi
z!<O>VbGUa7FQ1#s>vLfiO+T%ikFhQXujeS|)=sXk1KLGW^+}~%JDHERE+Og>hpK30
zTpP=Emu<l+)?BWqx%)8Z`r-<1wNW~ZQkzn3u8xn%Xe~|nZb>8*4R(ZBTPPJsiBFxZ
zYfT2!mrm5@Oz5|aR;3cFV`tN^93?`@bR>n3l%&|Yj(7rTE9*$7LYY7$6kHc#>mVo)
zjWxFiqirG99E>)HB7tB!6$^wisZcZ-jzw8>ERybs22dz9WhRR!Lh)cCgj{BED79(>
zzQ5A3AQ*|Ls^T$J5=yYPcp%o=nhc?0sv{N+G{>T?k#KX0;fI(4p+urN)`G9K4EWT_
zx?m(7%IT9?DO=nWj<$&Uv%28xEKD-D#M1QD7pI{R8%qRIu~<{Mjcr^`=87(eMNwmr
zY@oi}B22(ip=64*N+n_uwl=h3eJs&}ue^ks*RqZzeIX_@zqvV-ObUgA@pvfO(wY@P
zza|yG08L|=<**FPtZMH#JD5m>(e`jl1};!KIffHvNu=Ycj3R6dC1T>YsG9J3nRGl5
z54MGxV`=EwoCpO|A?Ox~1XJ)qVBJ*5Z6RUYjSItV;Z%}k4Fh-N{gxFfUzCnEvs63e
zph@s`G#zKj_E;k2BRk-GHS0nN;a#*N5?&i(P3h!@Kq}l3iltKwW`|J&$#!@e<%2Ma
ztSg#^r`r%&!3ZL+IR+^#b2jX_B-#?nHcWUySPgDL1b`myK!aLV#?~iUN2nu~*brzB
zx3#YaGT~@WK{|6fKHsw{5?c=}Sq7@dl1|m6cYI@gBC#ylCak?C+7XN^Q)PPxY`;9+
z!IB%#OD;l>AuYnq9dQ=Qgqm485r&l$2n(v$F*`m86i&7)`vuZck5DEaM4MUy^q&nJ
zf3(7=<c^%RMfi~WWiUFfMjV9_XK$duOLv4?SW@&7iuq`arQ<E++xA#&t<nH}D9#Xs
z5z<IfRHU}Rc8PRzilUl=KD;`V=r~VyEaClZbD#=^P5}}<2YwOAY`95XWiu%@5&@!z
zqisnR7o&#L<DqA;DVRiuq<)lHwE-ao_r%ExtOI?XK900xRWcrI4&{8jAeKxqj90Rc
zrITW$LL&mv(0b)+$Hp{*oEuE0;M7=x!8{$wHrSS;sue*H2qxO_7Yeet=wkTBQ=3oR
z(ioZAqM;TM%!sf+1X2({;uB7Z*n0fr8+tsn67g3!pg}o&(J7TqvS4m(Sd&EWlZF!Z
z$;LxAvYa63h_$5AH_#(93&TkaAJGuZ;fy~r0GcqA7W7~>TA>?C^NWt3SrrMv^_hjC
zb>ZgF0(7@vGa?fowF);U^JPlKq{}i3#DMI`p>C1Nh)-js;G{Lt)=;Xson<KaSJ5Em
zM7j7*RbG45P}&k|j)=$#3fD{JS`(oV3%0dka*^W@MOHG^kwT{rw#1^54XT0C8WaYZ
z78;Xew{6;hu~iHJn6uha?W(d^0z6R>PkDU^(-;e1;EYF7fhhV7`mKz42yez99bt%v
zW|oYl6U`xbm`2=X7y+^~68R(#n8si!=^fRZL~o!zi+H37A%O6N*C~Q9>0x+;!7!k$
zM9+_PM8(h#QgbAXVV8P?oXb$Y71N93a%Tc^D$dg(unromPN28IhHO1XOqy85{30ev
z7^Nc~!ARtIGMR1?j*#=SbU~tRor)J>QkWtbfpHvUYa-S`eOEO*8?-d%W&y`Xq=6W9
zlr?0WWB7(ol!vIR!!=?yz@nff0(&?OmF#M4aKa|fjr1M0_<Y<D&Z1eW9vQaMv1)nX
z$dn}2#R6)?k>LyPiK*GCQuG)xl2I?iRN=_LxPj3z8pFIo9`EQt6lUsUtwIQm^O*(d
zL;@aMjoA%IOkpd6sdh1_rD7>qMJ|7mh$wXBSVD9g(n*Z&v^c<s;W!-~48z{qtZk`N
z!1^&_C$?PwkgF!uA{FyuLZcwTz>WwX_$4~}txEYpImdLgm|GH!r&G>yE{!t6NXlJ#
z9g5LvFdfaV2RE)tC0K6Aq;bMABw_<?b384hEtS~7GUrmmq?^dXd8>o~LaqsxOvYMM
zf%Z@^9*BftX80h!EQEg30^6;0<}c+IHQj(o1v-KSv4Or9!}uZXBSwn6AQE<zGXcxU
z^-D6?N?-L`CC3-FP804c9AzQMkt-*|%mP}?tt3;g3$=*$$;LZeSO)|}zfR<OJVH3W
zQ1o@!6KjJOIi$s~{L3@Wl$r2%CK+|s)CCI!vCxpQo#)ByPmE%4j<(PWjTRHxP?CdF
zINBPMHLg$K^Mow3E?bEc@1h@wMKxL>*N18}RtppgFsEV!H5U4Ez!9B?io+)u^CD}r
z3qJA?A~+Tot4)Mi3l>b+0MG)+sg{=ONimG&4Ph8YqsdkTWp)LDF?!vS{KcSCAI&qE
z%L8I$g5qna4q6sC%deJ1EFO>}6=n`GAZLVYG7BT;k?m>Q6HGg}C0GWx!9E)hZDJvU
z7NPfvpa>^vDTx@uS{rpZt`-puS@mMA;Y^B&PzR;~tb82l7@p<$f!<C90+1<3L7}P~
z0kfkO22?pA(3D0U20<#~LD@baT;(Vr=fwQ62#t_xCoo>pI!msMu?S0JpFy*&vrG|w
z%PsUoEAwY(p(|-fD|1StV#!PEs7MSO02LM({KVow$fhA4>jkkI6?3WR9=S0a>&Ads
z$Tn@Dh6N+>_MkGRG=xwqubT_8ST{#tQx-i>E`qVcTNlJ|f%RD`h=uzCu`tSQx5T0~
zJ4%XCH`a7HEvb|$(pL(kA@OW9le!O!hC(f?V~em_St7Swj;#lDJ^H|BAc1X77&E$b
zSfV`%t+3Z*t=VmAHr^3AVrwe)b$J_H7@;i@jJLCBEP>T8mI`unfRT?DoEZ_Nm_qV5
z#n8vu!I7#I@y<s_W&cell34g=htAbb&!<U*(PCj;usNOX5F5knauDiax|13%jI7$w
zfiBP%NTQR=wK6u%BAW8o4Hy^YI4>9N)a~ScmNxD*vJr#oM?vMe{P`6O<RsK9mV&Ys
z<O|`4Y?rtki!*#)m33sYQ>-J!nX^^<<zR<y23^F~JUceA?BX8Nvf3O@!zNU2k63tt
zT>jE>CN~n%h)26SOb;w3Rsi@UENvZW7n#7oh7kmofn5ho`7{vb+Cp))I<^Y)X3jzk
z<CC1Fh09uKZBF|iC(=Y;#7Y#a;`PgEo0JqQ`doS02(jIeon7pvTO(;~Idjpf#t}7n
zihZ^-w5eH#wtr3uXU!=?!FkLgdS5uH`d?bCQ?M*bg<Ch!6NyEUAU1fp>3zyfY*P@^
zO_5*}>zRQwJIj1o%s%+3E#HEv(+YoW%QvYbm5zqywuPd!Oa~ZDG`G*q%$hlA=5*hr
zHs7Sy6-yR44;-@oM6bkXkpH1watnD*j8dWlif0n!$fj6~9$PTPK+C`-2U-}$V+n{_
zv9f;k>I(yl)+}GJddYdq@nPU>c*QW7%7sZ@{E121fz@hTcohS9YdC>@Yjh=k<QvO5
z?0k|*XXr-<T^Nzk1oIE*&gd1iPIn&1!I)`0B}%|cv<Q`pZA_ZYVs^>fMac2oc~CZR
z>cuRFQ4KQ>xii}wJV2oM55y6g&QfDNdJwkA*`ZzRcgdF0!=Wff2%6ZOr!8_yPoRx>
z?t!8KCxj?a*QsY)PITqghq865cVn?9_P%U#I~LoMFP~m}#$?!v2J7VH^?3FbicY4%
z8q0>s(h<3*h)MC&>ov`6ayprqj2;w8<LTd=rgS)xniP(nrJ7okeGmg901zKyMk=EQ
zng8;lhwTRYYkwgV&K{V~iavJ;h5zz^hx3D&I&X3g7#R-R1b^WHns~Gi{_M$^Q_=Yj
zf8n`ZtAj5*P2A+*3r{q+JNUx$*4+-i@bnkx<F<F7;4fzCcM^$@uE+4Fv7xN8j-cFi
z09lRU%;T&aj&g?tSi<h}iA?tPCUPXlSC>VJ%zFYqB>Ve^ih2c|@G+cT;utso;=udz
z5l)_dqr^D^9YCG)1^5fTKu$>TfBrk;>%V}1C-BGn{`lR%j~$?i1iFO$;}B>khhWc}
zTe6G);|yChQ}Q`;vyk(cx286qyej)}KTmr8CNU2!Cg(gDWeZW+wUk(hV^D2L#?+cO
zu<*j=^Os>D4+Jm~1nT{PMJwkos}J}Wt^^8ST@TbRUr3*0UwrO)XU{)3aNeRttLj$=
zR?k2C-1`6KBki=b&HJW$o%(J%9suXh5LrBZMZMr7@J_n|WNW!=7N3Pz8{h#Sg;%`t
zTkrXwfiI{b@5Ap|$~64?L~=t1JyNN`cq!9%mBS1hs%eX+YcLdI@W+;<CX1rstz{Ax
zhk~I!h&jKeWkVFgWQxI9P_R%J6JI_M01X?1AQf<O@kol*hzEH!VmnhqdneFhVxv?O
zY7ey1v+Y283(6`;mcZID5rk?~LggVi*b#1q3NgsVtwvNJg*D;aqlP9jJUD@}p{6uF
zi=|^C;3X)ws*2RqlnAX;ln9pEDi1rUETQ4}#Bn;z{|to}G#K7#!I&a1`k_R+R9Y*+
z?48E{{0nb94Jd!uDX-FT`OL`U6`29od_aH0Z>g&K8D75;my=dIpek2b|2d%JXgsUG
z`h8iI9&^g$H35vX^fr>b=yd?PR^gATQuV9ft5xaGi7D?Q8Tr@60O+@3ReAOMuqsva
zpweIQsk9yC>9=PUtbTu1rFBkah59>awjLRht;*AD8g!|&TR=Ix7q<Ue(5d{{4qu;B
zUZwuL^7O(~Vfk&qkxlRhjl9&n<fIf|`IoYT!rg#OetDl$PNj8<(Mb!$vz-Oy8yyCf
z-j-EN3Q*;h*ncS~ujYA`(hF|+SE2rQgGl--`!k=z?WEswK$R5Me?JKM<?nOKsg&Mj
z$iE8f|924c%lG*tw@Up)%)6BT6za#w&<lR5+o|7wrWZTuD&$wNN)LhuZ_{PVtKWz2
z`(G^oBFd7BRQ=g?6Adi5x*h$Uu*~YC?D!gZh((p}o=2rn4zH5YRV|b3UFogTH$llS
zuYPa(h*Q2cTT*6JIhDRsP+qMEE1iOhPl+jn-v@zkN`GIS<n%e^RXZj2^Zxi41k%4y
zPgTCK|2gIqWrR#16i(Ga>1;<}q1-}Vdate!N9ET#1)so_pMMqdj`)J|6Ix`c+p--?
z!iD80enI&kw@Us?{+sgjlR_l3u${xhviwbI0GD94txAu&FDU;V+L++FN+#L6Dwm%Y
zs3>@=ua-r2J47GAa{Q_IQS%pGv&_a0ve~O=v&<e+6*-gw5Nq_~m)~`rEU==WKmo}9
E6T6B%$N&HU

diff --git a/backend/sqlite_extensions/uuid.c b/backend/sqlite_extensions/uuid.c
deleted file mode 100644
index 9732e3c..0000000
--- a/backend/sqlite_extensions/uuid.c
+++ /dev/null
@@ -1,231 +0,0 @@
-/*
-** 2019-10-23
-**
-** The author disclaims copyright to this source code.  In place of
-** a legal notice, here is a blessing:
-**
-**    May you do good and not evil.
-**    May you find forgiveness for yourself and forgive others.
-**    May you share freely, never taking more than you give.
-**
-******************************************************************************
-**
-** This SQLite extension implements functions that handling RFC-4122 UUIDs
-** Three SQL functions are implemented:
-**
-**     uuid()        - generate a version 4 UUID as a string
-**     uuid_str(X)   - convert a UUID X into a well-formed UUID string
-**     uuid_blob(X)  - convert a UUID X into a 16-byte blob
-**
-** The output from uuid() and uuid_str(X) are always well-formed RFC-4122
-** UUID strings in this format:
-**
-**        xxxxxxxx-xxxx-Mxxx-Nxxx-xxxxxxxxxxxx
-**
-** All of the 'x', 'M', and 'N' values are lower-case hexadecimal digits.
-** The M digit indicates the "version".  For uuid()-generated UUIDs, the
-** version is always "4" (a random UUID).  The upper three bits of N digit
-** are the "variant".  This library only supports variant 1 (indicated
-** by values of N between '8' and 'b') as those are overwhelming the most
-** common.  Other variants are for legacy compatibility only.
-**
-** The output of uuid_blob(X) is always a 16-byte blob.  The UUID input
-** string is converted in network byte order (big-endian) in accordance
-** with RFC-4122 specifications for variant-1 UUIDs.  Note that network
-** byte order is *always* used, even if the input self-identifies as a
-** variant-2 UUID.
-**
-** The input X to the uuid_str() and uuid_blob() functions can be either
-** a string or a BLOB.  If it is a BLOB it must be exactly 16 bytes in
-** length or else a NULL is returned.  If the input is a string it must
-** consist of 32 hexadecimal digits, upper or lower case, optionally
-** surrounded by {...} and with optional "-" characters interposed in the
-** middle.  The flexibility of input is inspired by the PostgreSQL
-** implementation of UUID functions that accept in all of the following
-** formats:
-**
-**     A0EEBC99-9C0B-4EF8-BB6D-6BB9BD380A11
-**     {a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11}
-**     a0eebc999c0b4ef8bb6d6bb9bd380a11
-**     a0ee-bc99-9c0b-4ef8-bb6d-6bb9-bd38-0a11
-**     {a0eebc99-9c0b4ef8-bb6d6bb9-bd380a11}
-**
-** If any of the above inputs are passed into uuid_str(), the output will
-** always be in the canonical RFC-4122 format:
-**
-**     a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11
-**
-** If the X input string has too few or too many digits or contains
-** stray characters other than {, }, or -, then NULL is returned.
-*/
-#include "sqlite3ext.h"
-SQLITE_EXTENSION_INIT1
-#include <assert.h>
-#include <ctype.h>
-#include <string.h>
-
-#if !defined(SQLITE_ASCII) && !defined(SQLITE_EBCDIC)
-#define SQLITE_ASCII 1
-#endif
-
-/*
-** Translate a single byte of Hex into an integer.
-** This routine only works if h really is a valid hexadecimal
-** character:  0..9a..fA..F
-*/
-static unsigned char sqlite3UuidHexToInt(int h) {
-	assert((h >= '0' && h <= '9') || (h >= 'a' && h <= 'f') ||
-		   (h >= 'A' && h <= 'F'));
-#ifdef SQLITE_ASCII
-	h += 9 * (1 & (h >> 6));
-#endif
-#ifdef SQLITE_EBCDIC
-	h += 9 * (1 & ~(h >> 4));
-#endif
-	return (unsigned char)(h & 0xf);
-}
-
-/*
-** Convert a 16-byte BLOB into a well-formed RFC-4122 UUID.  The output
-** buffer zStr should be at least 37 bytes in length.   The output will
-** be zero-terminated.
-*/
-static void sqlite3UuidBlobToStr(const unsigned char *aBlob, /* Input blob */
-								 unsigned char *zStr /* Write the answer here */
-) {
-	static const char zDigits[] = "0123456789abcdef";
-	int i, k;
-	unsigned char x;
-	k = 0;
-	for (i = 0, k = 0x550; i < 16; i++, k = k >> 1) {
-		if (k & 1) {
-			zStr[0] = '-';
-			zStr++;
-		}
-		x = aBlob[i];
-		zStr[0] = zDigits[x >> 4];
-		zStr[1] = zDigits[x & 0xf];
-		zStr += 2;
-	}
-	*zStr = 0;
-}
-
-/*
-** Attempt to parse a zero-terminated input string zStr into a binary
-** UUID.  Return 0 on success, or non-zero if the input string is not
-** parsable.
-*/
-static int sqlite3UuidStrToBlob(const unsigned char *zStr, /* Input string */
-								unsigned char *aBlob /* Write results here */
-) {
-	int i;
-	if (zStr[0] == '{')
-		zStr++;
-	for (i = 0; i < 16; i++) {
-		if (zStr[0] == '-')
-			zStr++;
-		if (isxdigit(zStr[0]) && isxdigit(zStr[1])) {
-			aBlob[i] = (sqlite3UuidHexToInt(zStr[0]) << 4) +
-					   sqlite3UuidHexToInt(zStr[1]);
-			zStr += 2;
-		} else {
-			return 1;
-		}
-	}
-	if (zStr[0] == '}')
-		zStr++;
-	return zStr[0] != 0;
-}
-
-/*
-** Render sqlite3_value pIn as a 16-byte UUID blob.  Return a pointer
-** to the blob, or NULL if the input is not well-formed.
-*/
-static const unsigned char *
-sqlite3UuidInputToBlob(sqlite3_value *pIn, /* Input text */
-					   unsigned char *pBuf /* output buffer */
-) {
-	switch (sqlite3_value_type(pIn)) {
-	case SQLITE_TEXT: {
-		const unsigned char *z = sqlite3_value_text(pIn);
-		if (sqlite3UuidStrToBlob(z, pBuf))
-			return 0;
-		return pBuf;
-	}
-	case SQLITE_BLOB: {
-		int n = sqlite3_value_bytes(pIn);
-		return n == 16 ? sqlite3_value_blob(pIn) : 0;
-	}
-	default: {
-		return 0;
-	}
-	}
-}
-
-/* Implementation of uuid() */
-static void sqlite3UuidFunc(sqlite3_context *context, int argc,
-							sqlite3_value **argv) {
-	unsigned char aBlob[16];
-	unsigned char zStr[37];
-	(void)argc;
-	(void)argv;
-	sqlite3_randomness(16, aBlob);
-	aBlob[6] = (aBlob[6] & 0x0f) + 0x40;
-	aBlob[8] = (aBlob[8] & 0x3f) + 0x80;
-	sqlite3UuidBlobToStr(aBlob, zStr);
-	sqlite3_result_text(context, (char *)zStr, 36, SQLITE_TRANSIENT);
-}
-
-/* Implementation of uuid_str() */
-static void sqlite3UuidStrFunc(sqlite3_context *context, int argc,
-							   sqlite3_value **argv) {
-	unsigned char aBlob[16];
-	unsigned char zStr[37];
-	const unsigned char *pBlob;
-	(void)argc;
-	pBlob = sqlite3UuidInputToBlob(argv[0], aBlob);
-	if (pBlob == 0)
-		return;
-	sqlite3UuidBlobToStr(pBlob, zStr);
-	sqlite3_result_text(context, (char *)zStr, 36, SQLITE_TRANSIENT);
-}
-
-/* Implementation of uuid_blob() */
-static void sqlite3UuidBlobFunc(sqlite3_context *context, int argc,
-								sqlite3_value **argv) {
-	unsigned char aBlob[16];
-	const unsigned char *pBlob;
-	(void)argc;
-	pBlob = sqlite3UuidInputToBlob(argv[0], aBlob);
-	if (pBlob == 0)
-		return;
-	sqlite3_result_blob(context, pBlob, 16, SQLITE_TRANSIENT);
-}
-
-#ifdef _WIN32
-__declspec(dllexport)
-#endif
-int sqlite3_uuid_init(
-  sqlite3 *db,
-  char **pzErrMsg,
-  const sqlite3_api_routines *pApi
-){
-	int rc = SQLITE_OK;
-	SQLITE_EXTENSION_INIT2(pApi);
-	(void)pzErrMsg; /* Unused parameter */
-	rc = sqlite3_create_function(db, "uuid", 0, SQLITE_UTF8 | SQLITE_INNOCUOUS,
-								 0, sqlite3UuidFunc, 0, 0);
-	if (rc == SQLITE_OK) {
-		rc = sqlite3_create_function(db, "uuid_str", 1,
-									 SQLITE_UTF8 | SQLITE_INNOCUOUS |
-										 SQLITE_DETERMINISTIC,
-									 0, sqlite3UuidStrFunc, 0, 0);
-	}
-	if (rc == SQLITE_OK) {
-		rc = sqlite3_create_function(db, "uuid_blob", 1,
-									 SQLITE_UTF8 | SQLITE_INNOCUOUS |
-										 SQLITE_DETERMINISTIC,
-									 0, sqlite3UuidBlobFunc, 0, 0);
-	}
-	return rc;
-}
diff --git a/backend/src/bin/backend/main.rs b/backend/src/bin/backend/main.rs
index ac0324e..00d1a74 100644
--- a/backend/src/bin/backend/main.rs
+++ b/backend/src/bin/backend/main.rs
@@ -46,13 +46,18 @@ async fn main() -> anyhow::Result<()> {
         None
     };
 
+    let option_service =
+        domain::warren::service::option::Service::new(sqlite.clone(), metrics, notifier);
+
     let auth_service = domain::warren::service::auth::Service::new(
         sqlite,
         metrics,
         notifier,
         config.auth,
         oidc_service,
-    );
+        option_service,
+    )
+    .await?;
 
     let server_config = HttpServerConfig::new(
         &config.server_address,
diff --git a/backend/src/lib/domain/warren/models/mod.rs b/backend/src/lib/domain/warren/models/mod.rs
index 05951b6..0233e3a 100644
--- a/backend/src/lib/domain/warren/models/mod.rs
+++ b/backend/src/lib/domain/warren/models/mod.rs
@@ -1,5 +1,6 @@
 pub mod auth_session;
 pub mod file;
+pub mod option;
 pub mod share;
 pub mod user;
 pub mod user_warren;
diff --git a/backend/src/lib/domain/warren/models/option/mod.rs b/backend/src/lib/domain/warren/models/option/mod.rs
new file mode 100644
index 0000000..13e5731
--- /dev/null
+++ b/backend/src/lib/domain/warren/models/option/mod.rs
@@ -0,0 +1,74 @@
+mod requests;
+use derive_more::Display;
+pub use requests::*;
+use thiserror::Error;
+
+#[derive(Clone, Debug, PartialEq, Eq, PartialOrd, Ord, Hash, Display)]
+pub struct OptionKey(String);
+
+#[derive(Debug, Error)]
+pub enum OptionKeyError {
+    #[error("An OptionKey must not be empty")]
+    Empty,
+}
+
+impl OptionKey {
+    pub fn new(raw: &str) -> Result<Self, OptionKeyError> {
+        let raw = raw.trim();
+
+        if raw.is_empty() {
+            return Err(OptionKeyError::Empty);
+        }
+
+        Ok(Self(raw.to_string()))
+    }
+
+    pub fn as_str(&self) -> &str {
+        &self.0
+    }
+}
+
+#[derive(Clone, Debug)]
+pub struct OptionValue<T>(T)
+where
+    T: OptionType;
+
+impl<T> OptionValue<T>
+where
+    T: OptionType,
+{
+    pub fn new(value: T) -> Self {
+        Self(value)
+    }
+
+    pub fn inner(&self) -> &T {
+        &self.0
+    }
+
+    pub fn get_inner(self) -> T {
+        self.0
+    }
+}
+
+pub trait OptionType: std::fmt::Debug + Clone + Send + Sync {
+    type Error: std::fmt::Debug;
+
+    fn parse(raw: &str) -> Result<Self, Self::Error>;
+    fn to_string(&self) -> String;
+}
+
+impl OptionType for bool {
+    type Error = anyhow::Error;
+
+    fn parse(raw: &str) -> Result<Self, Self::Error> {
+        Ok(match raw.to_lowercase().as_str() {
+            "true" => true,
+            "false" => false,
+            _ => anyhow::bail!("Expected 'true' or 'false': {raw}"),
+        })
+    }
+
+    fn to_string(&self) -> String {
+        if *self { "true" } else { "false" }.to_string()
+    }
+}
diff --git a/backend/src/lib/domain/warren/models/option/requests/delete.rs b/backend/src/lib/domain/warren/models/option/requests/delete.rs
new file mode 100644
index 0000000..4ba7ce1
--- /dev/null
+++ b/backend/src/lib/domain/warren/models/option/requests/delete.rs
@@ -0,0 +1,47 @@
+use thiserror::Error;
+
+use crate::domain::warren::models::option::OptionKey;
+
+#[derive(Clone, Debug)]
+pub struct DeleteOptionRequest {
+    key: OptionKey,
+}
+
+impl DeleteOptionRequest {
+    pub fn new(key: OptionKey) -> Self {
+        Self { key }
+    }
+
+    pub fn key(&self) -> &OptionKey {
+        &self.key
+    }
+}
+
+impl From<DeleteOptionRequest> for OptionKey {
+    fn from(value: DeleteOptionRequest) -> Self {
+        value.key
+    }
+}
+
+#[derive(Clone, Debug, PartialEq, Eq, PartialOrd, Ord, Hash)]
+pub struct DeleteOptionResponse {
+    key: OptionKey,
+}
+
+impl DeleteOptionResponse {
+    pub fn new(key: OptionKey) -> Self {
+        Self { key }
+    }
+
+    pub fn key(&self) -> &OptionKey {
+        &self.key
+    }
+}
+
+#[derive(Debug, Error)]
+pub enum DeleteOptionError {
+    #[error("Could not find option with key: {0}")]
+    NotFound(OptionKey),
+    #[error(transparent)]
+    Unknown(#[from] anyhow::Error),
+}
diff --git a/backend/src/lib/domain/warren/models/option/requests/get.rs b/backend/src/lib/domain/warren/models/option/requests/get.rs
new file mode 100644
index 0000000..2281676
--- /dev/null
+++ b/backend/src/lib/domain/warren/models/option/requests/get.rs
@@ -0,0 +1,57 @@
+use thiserror::Error;
+
+use crate::domain::warren::models::option::{OptionKey, OptionType};
+
+#[derive(Clone, Debug, PartialEq, Eq, PartialOrd, Ord, Hash)]
+pub struct GetOptionRequest {
+    key: OptionKey,
+}
+
+impl GetOptionRequest {
+    pub fn new(key: OptionKey) -> Self {
+        Self { key }
+    }
+
+    pub fn key(&self) -> &OptionKey {
+        &self.key
+    }
+}
+
+impl From<GetOptionRequest> for OptionKey {
+    fn from(value: GetOptionRequest) -> Self {
+        value.key
+    }
+}
+
+#[derive(Clone, Debug)]
+pub struct GetOptionResponse<T: OptionType> {
+    key: OptionKey,
+    value: T,
+}
+
+impl<T> GetOptionResponse<T>
+where
+    T: OptionType,
+{
+    pub fn new(key: OptionKey, value: T) -> Self {
+        Self { key, value }
+    }
+
+    pub fn key(&self) -> &OptionKey {
+        &self.key
+    }
+
+    pub fn value(&self) -> &T {
+        &self.value
+    }
+}
+
+#[derive(Debug, Error)]
+pub enum GetOptionError {
+    #[error("Could not find option with key: {0}")]
+    NotFound(OptionKey),
+    #[error("Could not parse the option value with the specified type")]
+    Parse,
+    #[error(transparent)]
+    Unknown(#[from] anyhow::Error),
+}
diff --git a/backend/src/lib/domain/warren/models/option/requests/mod.rs b/backend/src/lib/domain/warren/models/option/requests/mod.rs
new file mode 100644
index 0000000..6d6c5d6
--- /dev/null
+++ b/backend/src/lib/domain/warren/models/option/requests/mod.rs
@@ -0,0 +1,6 @@
+mod delete;
+mod get;
+mod set;
+pub use delete::*;
+pub use get::*;
+pub use set::*;
diff --git a/backend/src/lib/domain/warren/models/option/requests/set.rs b/backend/src/lib/domain/warren/models/option/requests/set.rs
new file mode 100644
index 0000000..a733bb1
--- /dev/null
+++ b/backend/src/lib/domain/warren/models/option/requests/set.rs
@@ -0,0 +1,83 @@
+use thiserror::Error;
+
+use crate::domain::warren::models::option::{OptionKey, OptionType, OptionValue};
+
+#[derive(Clone, Debug)]
+pub struct SetOptionRequest<T>
+where
+    T: OptionType,
+{
+    key: OptionKey,
+    value: OptionValue<T>,
+}
+
+impl<T> SetOptionRequest<T>
+where
+    T: OptionType,
+{
+    pub fn new(key: OptionKey, value: T) -> Self {
+        Self {
+            key,
+            value: OptionValue::new(value),
+        }
+    }
+
+    pub fn key(&self) -> &OptionKey {
+        &self.key
+    }
+
+    pub fn value(&self) -> &OptionValue<T> {
+        &self.value
+    }
+
+    pub fn unpack(self) -> (OptionKey, OptionValue<T>) {
+        (self.key, self.value)
+    }
+}
+
+impl<T> From<SetOptionRequest<T>> for OptionKey
+where
+    T: OptionType,
+{
+    fn from(value: SetOptionRequest<T>) -> Self {
+        value.key
+    }
+}
+
+impl<T> From<SetOptionRequest<T>> for OptionValue<T>
+where
+    T: OptionType,
+{
+    fn from(value: SetOptionRequest<T>) -> Self {
+        value.value
+    }
+}
+
+#[derive(Clone, Debug)]
+pub struct SetOptionResponse<T: OptionType> {
+    key: OptionKey,
+    value: T,
+}
+
+impl<T> SetOptionResponse<T>
+where
+    T: OptionType,
+{
+    pub fn new(key: OptionKey, value: T) -> Self {
+        Self { key, value }
+    }
+
+    pub fn key(&self) -> &OptionKey {
+        &self.key
+    }
+
+    pub fn value(&self) -> &T {
+        &self.value
+    }
+}
+
+#[derive(Debug, Error)]
+pub enum SetOptionError {
+    #[error(transparent)]
+    Unknown(#[from] anyhow::Error),
+}
diff --git a/backend/src/lib/domain/warren/models/user/requests/register.rs b/backend/src/lib/domain/warren/models/user/requests/register.rs
index 7998aee..99901d1 100644
--- a/backend/src/lib/domain/warren/models/user/requests/register.rs
+++ b/backend/src/lib/domain/warren/models/user/requests/register.rs
@@ -9,6 +9,8 @@ pub struct RegisterUserRequest {
     name: UserName,
     email: UserEmail,
     password: UserPassword,
+    bypass_registration_flag: bool,
+    admin: bool,
 }
 
 impl RegisterUserRequest {
@@ -17,6 +19,23 @@ impl RegisterUserRequest {
             name,
             email,
             password,
+            bypass_registration_flag: false,
+            admin: false,
+        }
+    }
+
+    pub fn new_bypass_flag(
+        name: UserName,
+        email: UserEmail,
+        password: UserPassword,
+        admin: bool,
+    ) -> Self {
+        Self {
+            name,
+            email,
+            password,
+            bypass_registration_flag: true,
+            admin,
         }
     }
 
@@ -31,11 +50,19 @@ impl RegisterUserRequest {
     pub fn password(&self) -> &UserPassword {
         &self.password
     }
+
+    pub fn admin(&self) -> bool {
+        self.admin
+    }
+
+    pub fn bypass_registration_flag(&self) -> bool {
+        self.bypass_registration_flag
+    }
 }
 
 impl From<RegisterUserRequest> for CreateUserRequest {
     fn from(value: RegisterUserRequest) -> Self {
-        Self::new(value.name, value.email, value.password, false)
+        Self::new(value.name, value.email, value.password, value.admin)
     }
 }
 
diff --git a/backend/src/lib/domain/warren/ports/metrics.rs b/backend/src/lib/domain/warren/ports/metrics.rs
index c63567c..a17f9b0 100644
--- a/backend/src/lib/domain/warren/ports/metrics.rs
+++ b/backend/src/lib/domain/warren/ports/metrics.rs
@@ -185,3 +185,14 @@ pub trait AuthMetrics: Clone + Send + Sync + 'static {
     fn record_auth_share_deletion_success(&self) -> impl Future<Output = ()> + Send;
     fn record_auth_share_deletion_failure(&self) -> impl Future<Output = ()> + Send;
 }
+
+pub trait OptionMetrics: Clone + Send + Sync + 'static {
+    fn record_option_get_success(&self) -> impl Future<Output = ()> + Send;
+    fn record_option_get_failure(&self) -> impl Future<Output = ()> + Send;
+
+    fn record_option_set_success(&self) -> impl Future<Output = ()> + Send;
+    fn record_option_set_failure(&self) -> impl Future<Output = ()> + Send;
+
+    fn record_option_delete_success(&self) -> impl Future<Output = ()> + Send;
+    fn record_option_delete_failure(&self) -> impl Future<Output = ()> + Send;
+}
diff --git a/backend/src/lib/domain/warren/ports/mod.rs b/backend/src/lib/domain/warren/ports/mod.rs
index 1308d89..6e27ad5 100644
--- a/backend/src/lib/domain/warren/ports/mod.rs
+++ b/backend/src/lib/domain/warren/ports/mod.rs
@@ -20,6 +20,11 @@ use super::models::{
         RmRequest, SaveError, SaveRequest, SaveResponse, StatError, StatRequest, StatResponse,
         TouchError, TouchRequest,
     },
+    option::{
+        DeleteOptionError, DeleteOptionRequest, DeleteOptionResponse, GetOptionError,
+        GetOptionRequest, GetOptionResponse, OptionType, SetOptionError, SetOptionRequest,
+        SetOptionResponse,
+    },
     share::{
         CreateShareBaseRequest, CreateShareError, CreateShareRequest, CreateShareResponse,
         DeleteShareError, DeleteShareRequest, DeleteShareResponse, GetShareError, GetShareRequest,
@@ -337,3 +342,18 @@ pub trait AuthService: Clone + Send + Sync + 'static {
         warren_service: &WS,
     ) -> impl Future<Output = Result<DeleteShareResponse, AuthError<DeleteShareError>>> + Send;
 }
+
+pub trait OptionService: Clone + Send + Sync + 'static {
+    fn get_option<T: OptionType>(
+        &self,
+        request: GetOptionRequest,
+    ) -> impl Future<Output = Result<GetOptionResponse<T>, GetOptionError>> + Send;
+    fn set_option<T: OptionType>(
+        &self,
+        request: SetOptionRequest<T>,
+    ) -> impl Future<Output = Result<SetOptionResponse<T>, SetOptionError>> + Send;
+    fn delete_option(
+        &self,
+        request: DeleteOptionRequest,
+    ) -> impl Future<Output = Result<DeleteOptionResponse, DeleteOptionError>> + Send;
+}
diff --git a/backend/src/lib/domain/warren/ports/notifier.rs b/backend/src/lib/domain/warren/ports/notifier.rs
index 1951fc7..dd257e7 100644
--- a/backend/src/lib/domain/warren/ports/notifier.rs
+++ b/backend/src/lib/domain/warren/ports/notifier.rs
@@ -3,6 +3,7 @@ use uuid::Uuid;
 use crate::domain::warren::models::{
     auth_session::requests::FetchAuthSessionResponse,
     file::{AbsoluteFilePath, AbsoluteFilePathList, LsResponse},
+    option::{DeleteOptionResponse, GetOptionResponse, OptionType, SetOptionResponse},
     share::{
         CreateShareResponse, DeleteShareResponse, GetShareResponse, ListSharesResponse,
         ShareCatResponse, ShareLsResponse, VerifySharePasswordResponse,
@@ -219,3 +220,15 @@ pub trait AuthNotifier: Clone + Send + Sync + 'static {
         response: &DeleteShareResponse,
     ) -> impl Future<Output = ()> + Send;
 }
+
+pub trait OptionNotifier: Clone + Send + Sync + 'static {
+    fn got_option<T: OptionType>(
+        &self,
+        response: &GetOptionResponse<T>,
+    ) -> impl Future<Output = ()> + Send;
+    fn set_option<T: OptionType>(
+        &self,
+        response: &SetOptionResponse<T>,
+    ) -> impl Future<Output = ()> + Send;
+    fn deleted_option(&self, response: &DeleteOptionResponse) -> impl Future<Output = ()> + Send;
+}
diff --git a/backend/src/lib/domain/warren/ports/repository.rs b/backend/src/lib/domain/warren/ports/repository.rs
index 59b3c1c..a2c5ab6 100644
--- a/backend/src/lib/domain/warren/ports/repository.rs
+++ b/backend/src/lib/domain/warren/ports/repository.rs
@@ -12,6 +12,11 @@ use crate::domain::warren::models::{
         RmRequest, SaveError, SaveRequest, SaveResponse, StatError, StatRequest, StatResponse,
         TouchError, TouchRequest,
     },
+    option::{
+        DeleteOptionError, DeleteOptionRequest, DeleteOptionResponse, GetOptionError,
+        GetOptionRequest, GetOptionResponse, OptionType, SetOptionError, SetOptionRequest,
+        SetOptionResponse,
+    },
     share::{
         CreateShareError, CreateShareRequest, CreateShareResponse, DeleteShareError,
         DeleteShareRequest, DeleteShareResponse, GetShareError, GetShareRequest, ListSharesError,
@@ -188,3 +193,18 @@ pub trait AuthRepository: Clone + Send + Sync + 'static {
         request: FetchUserWarrenRequest,
     ) -> impl Future<Output = Result<UserWarren, FetchUserWarrenError>> + Send;
 }
+
+pub trait OptionRepository: Clone + Send + Sync + 'static {
+    fn get_option<T: OptionType>(
+        &self,
+        request: GetOptionRequest,
+    ) -> impl Future<Output = Result<GetOptionResponse<T>, GetOptionError>> + Send;
+    fn set_option<T: OptionType>(
+        &self,
+        request: SetOptionRequest<T>,
+    ) -> impl Future<Output = Result<SetOptionResponse<T>, SetOptionError>> + Send;
+    fn delete_option(
+        &self,
+        request: DeleteOptionRequest,
+    ) -> impl Future<Output = Result<DeleteOptionResponse, DeleteOptionError>> + Send;
+}
diff --git a/backend/src/lib/domain/warren/service/auth.rs b/backend/src/lib/domain/warren/service/auth.rs
index d2c8175..2f568aa 100644
--- a/backend/src/lib/domain/warren/service/auth.rs
+++ b/backend/src/lib/domain/warren/service/auth.rs
@@ -12,6 +12,7 @@ use crate::{
                     },
                 },
                 file::FileStream,
+                option::{GetOptionError, GetOptionRequest, OptionKey, SetOptionRequest},
                 share::{
                     CreateShareBaseRequest, CreateShareError, CreateShareResponse,
                     DeleteShareError, DeleteShareRequest, DeleteShareResponse, ListSharesError,
@@ -24,7 +25,7 @@ use crate::{
                     ListAllUsersAndWarrensRequest, ListAllUsersAndWarrensResponse, ListUsersError,
                     ListUsersRequest, LoginUserError, LoginUserOidcError, LoginUserOidcRequest,
                     LoginUserOidcResponse, LoginUserRequest, LoginUserResponse, RegisterUserError,
-                    RegisterUserRequest, User,
+                    RegisterUserRequest, User, UserEmail, UserName, UserPassword,
                 },
                 user_warren::{
                     UserWarren,
@@ -46,7 +47,10 @@ use crate::{
                     WarrenTouchResponse,
                 },
             },
-            ports::{AuthMetrics, AuthNotifier, AuthRepository, AuthService, WarrenService},
+            ports::{
+                AuthMetrics, AuthNotifier, AuthRepository, AuthService, OptionService,
+                WarrenService,
+            },
         },
     },
 };
@@ -97,54 +101,100 @@ impl AuthConfig {
 }
 
 #[derive(Debug, Clone)]
-pub struct Service<R, M, N, OIDC>
+pub struct Service<R, M, N, OIDC, O>
 where
     R: AuthRepository,
     M: AuthMetrics,
     N: AuthNotifier,
     OIDC: OidcService,
+    O: OptionService,
 {
     repository: R,
     metrics: M,
     notifier: N,
     oidc: Option<OIDC>,
+    option_service: O,
     config: AuthConfig,
 }
 
-impl<R, M, N, OIDC> Service<R, M, N, OIDC>
+impl<R, M, N, OIDC, O> Service<R, M, N, OIDC, O>
 where
     R: AuthRepository,
     M: AuthMetrics,
     N: AuthNotifier,
     OIDC: OidcService,
+    O: OptionService,
 {
-    pub fn new(
+    pub async fn new(
         repository: R,
         metrics: M,
         notifier: N,
         config: AuthConfig,
         oidc: Option<OIDC>,
-    ) -> Self {
-        Self {
+        option_service: O,
+    ) -> anyhow::Result<Self> {
+        let service = Self {
             repository,
             metrics,
             notifier,
             config,
             oidc,
-        }
+            option_service,
+        };
+
+        service.init().await?;
+
+        Ok(service)
     }
 
     pub fn oidc(&self) -> Option<&OIDC> {
         self.oidc.as_ref()
     }
+
+    async fn init(&self) -> anyhow::Result<()> {
+        self.create_admin_user_if_init().await?;
+
+        Ok(())
+    }
+
+    async fn create_admin_user_if_init(&self) -> anyhow::Result<()> {
+        const CREATED_ADMIN_USER_KEY: &str = "CREATED_ADMIN_USER";
+
+        let key = OptionKey::new(CREATED_ADMIN_USER_KEY)?;
+        let request = GetOptionRequest::new(key.clone());
+        match self.option_service.get_option::<bool>(request).await {
+            // If the option is already set and true we don't have to do anything anymore
+            Ok(opt) if *opt.value() => return Ok(()),
+            Err(e) => match e {
+                // The option is not yet set so we proceed with the admin user creation
+                GetOptionError::NotFound(_) => (),
+                _ => return Err(e.into()),
+            },
+            // The option was set but it was false so we proceed with the admin user creation
+            _ => (),
+        }
+
+        let name = UserName::new("admin")?;
+        let email = UserEmail::new("admin@example.com")?;
+        let password = UserPassword::new("admin1234567")?;
+        let request = RegisterUserRequest::new_bypass_flag(name, email, password, true);
+
+        self.register_user(request).await?;
+        self.option_service
+            .set_option(SetOptionRequest::new(key, true))
+            .await?;
+
+        Ok(())
+    }
 }
 
-impl<R, M, N, OIDC> AuthService for Service<R, M, N, OIDC>
+impl<R, M, N, OIDC, O> AuthService for Service<R, M, N, OIDC, O>
 where
     R: AuthRepository,
     M: AuthMetrics,
     N: AuthNotifier,
     OIDC: OidcService,
+    O: OptionService,
 {
     async fn create_warren<WS: WarrenService>(
         &self,
@@ -253,7 +303,7 @@ where
     }
 
     async fn register_user(&self, request: RegisterUserRequest) -> Result<User, RegisterUserError> {
-        if !self.config.allow_registration {
+        if !self.config.allow_registration && !request.bypass_registration_flag() {
             self.metrics.record_user_registration_failure().await;
             return Err(RegisterUserError::Disabled);
         }
@@ -972,12 +1022,13 @@ where
     }
 }
 
-impl<R, M, N, OIDC> Service<R, M, N, OIDC>
+impl<R, M, N, OIDC, O> Service<R, M, N, OIDC, O>
 where
     R: AuthRepository,
     M: AuthMetrics,
     N: AuthNotifier,
     OIDC: OidcService,
+    O: OptionService,
 {
     /// A helper to get a [UserWarren], [User] and the underlying request from an [AuthRequest]
     async fn get_session_data_and_user_warren<T, E>(
diff --git a/backend/src/lib/domain/warren/service/mod.rs b/backend/src/lib/domain/warren/service/mod.rs
index ae9858f..a926d28 100644
--- a/backend/src/lib/domain/warren/service/mod.rs
+++ b/backend/src/lib/domain/warren/service/mod.rs
@@ -1,3 +1,4 @@
 pub mod auth;
 pub mod file_system;
+pub mod option;
 pub mod warren;
diff --git a/backend/src/lib/domain/warren/service/option.rs b/backend/src/lib/domain/warren/service/option.rs
new file mode 100644
index 0000000..b30e8c5
--- /dev/null
+++ b/backend/src/lib/domain/warren/service/option.rs
@@ -0,0 +1,90 @@
+use crate::domain::warren::{
+    models::option::{
+        DeleteOptionError, DeleteOptionRequest, DeleteOptionResponse, GetOptionError,
+        GetOptionRequest, GetOptionResponse, OptionType, SetOptionError, SetOptionRequest,
+        SetOptionResponse,
+    },
+    ports::{OptionMetrics, OptionNotifier, OptionRepository, OptionService},
+};
+
+#[derive(Debug, Clone)]
+pub struct Service<R, M, N>
+where
+    R: OptionRepository,
+    M: OptionMetrics,
+    N: OptionNotifier,
+{
+    repository: R,
+    metrics: M,
+    notifier: N,
+}
+
+impl<R, M, N> Service<R, M, N>
+where
+    R: OptionRepository,
+    M: OptionMetrics,
+    N: OptionNotifier,
+{
+    pub fn new(repository: R, metrics: M, notifier: N) -> Self {
+        Self {
+            repository,
+            metrics,
+            notifier,
+        }
+    }
+}
+
+impl<R, M, N> OptionService for Service<R, M, N>
+where
+    R: OptionRepository,
+    M: OptionMetrics,
+    N: OptionNotifier,
+{
+    async fn get_option<T: OptionType>(
+        &self,
+        request: GetOptionRequest,
+    ) -> Result<GetOptionResponse<T>, GetOptionError> {
+        let result = self.repository.get_option(request).await;
+
+        if let Ok(response) = result.as_ref() {
+            self.metrics.record_option_get_success().await;
+            self.notifier.got_option(response).await;
+        } else {
+            self.metrics.record_option_get_failure().await;
+        }
+
+        result
+    }
+
+    async fn set_option<T: OptionType>(
+        &self,
+        request: SetOptionRequest<T>,
+    ) -> Result<SetOptionResponse<T>, SetOptionError> {
+        let result = self.repository.set_option(request).await;
+
+        if let Ok(response) = result.as_ref() {
+            self.metrics.record_option_set_success().await;
+            self.notifier.set_option(response).await;
+        } else {
+            self.metrics.record_option_set_failure().await;
+        }
+
+        result
+    }
+
+    async fn delete_option(
+        &self,
+        request: DeleteOptionRequest,
+    ) -> Result<DeleteOptionResponse, DeleteOptionError> {
+        let result = self.repository.delete_option(request).await;
+
+        if let Ok(response) = result.as_ref() {
+            self.metrics.record_option_delete_success().await;
+            self.notifier.deleted_option(response).await;
+        } else {
+            self.metrics.record_option_delete_failure().await;
+        }
+
+        result
+    }
+}
diff --git a/backend/src/lib/outbound/metrics_debug_logger.rs b/backend/src/lib/outbound/metrics_debug_logger.rs
index 1ed7b5f..a5b31b9 100644
--- a/backend/src/lib/outbound/metrics_debug_logger.rs
+++ b/backend/src/lib/outbound/metrics_debug_logger.rs
@@ -1,6 +1,6 @@
 use crate::domain::{
     oidc::ports::OidcMetrics,
-    warren::ports::{AuthMetrics, FileSystemMetrics, WarrenMetrics},
+    warren::ports::{AuthMetrics, FileSystemMetrics, OptionMetrics, WarrenMetrics},
 };
 
 #[derive(Debug, Clone, Copy)]
@@ -452,3 +452,26 @@ impl OidcMetrics for MetricsDebugLogger {
         tracing::debug!("[Metrics] OIDC get user info failed");
     }
 }
+
+impl OptionMetrics for MetricsDebugLogger {
+    async fn record_option_get_success(&self) {
+        tracing::debug!("[Metrics] Get option succeeded");
+    }
+    async fn record_option_get_failure(&self) {
+        tracing::debug!("[Metrics] Get option failed");
+    }
+
+    async fn record_option_set_success(&self) {
+        tracing::debug!("[Metrics] Set option succeeded");
+    }
+    async fn record_option_set_failure(&self) {
+        tracing::debug!("[Metrics] Set option failed");
+    }
+
+    async fn record_option_delete_success(&self) {
+        tracing::debug!("[Metrics] Delete option succeeded");
+    }
+    async fn record_option_delete_failure(&self) {
+        tracing::debug!("[Metrics] Delete option failed");
+    }
+}
diff --git a/backend/src/lib/outbound/notifier_debug_logger.rs b/backend/src/lib/outbound/notifier_debug_logger.rs
index aa49796..2612a99 100644
--- a/backend/src/lib/outbound/notifier_debug_logger.rs
+++ b/backend/src/lib/outbound/notifier_debug_logger.rs
@@ -9,6 +9,7 @@ use crate::domain::{
         models::{
             auth_session::requests::FetchAuthSessionResponse,
             file::{AbsoluteFilePath, AbsoluteFilePathList, LsResponse},
+            option::{DeleteOptionResponse, GetOptionResponse, OptionType, SetOptionResponse},
             share::{
                 CreateShareResponse, DeleteShareResponse, GetShareResponse, ListSharesResponse,
                 ShareCatResponse, ShareLsResponse, VerifySharePasswordResponse,
@@ -22,7 +23,7 @@ use crate::domain::{
                 WarrenRmResponse, WarrenSaveResponse, WarrenTouchResponse,
             },
         },
-        ports::{AuthNotifier, FileSystemNotifier, WarrenNotifier},
+        ports::{AuthNotifier, FileSystemNotifier, OptionNotifier, WarrenNotifier},
     },
 };
 
@@ -515,3 +516,25 @@ impl OidcNotifier for NotifierDebugLogger {
         );
     }
 }
+
+impl OptionNotifier for NotifierDebugLogger {
+    async fn got_option<T: OptionType>(&self, response: &GetOptionResponse<T>) {
+        tracing::debug!(
+            "[Notifier] Got option {}: {}",
+            response.key().to_string(),
+            response.value().to_string(),
+        );
+    }
+
+    async fn set_option<T: OptionType>(&self, response: &SetOptionResponse<T>) {
+        tracing::debug!(
+            "[Notifier] Set option {} to {}",
+            response.key().to_string(),
+            response.value().to_string(),
+        );
+    }
+
+    async fn deleted_option(&self, response: &DeleteOptionResponse) {
+        tracing::debug!("[Notifier] Deleted option {}", response.key().to_string());
+    }
+}
diff --git a/backend/src/lib/outbound/sqlite/auth.rs b/backend/src/lib/outbound/sqlite/auth.rs
index bae35cf..47fd427 100644
--- a/backend/src/lib/outbound/sqlite/auth.rs
+++ b/backend/src/lib/outbound/sqlite/auth.rs
@@ -48,7 +48,7 @@ impl AuthRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         let user = self
             .create_user(
@@ -72,7 +72,7 @@ impl AuthRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         let user = self
             .create_or_update_user(
@@ -93,7 +93,7 @@ impl AuthRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         let user = self
             .edit_user(
@@ -115,7 +115,7 @@ impl AuthRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         self.delete_user_from_database(&mut connection, request.user_id())
             .await
@@ -136,7 +136,7 @@ impl AuthRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         let user = self
             .get_user_from_email(&mut connection, request.email())
@@ -166,7 +166,7 @@ impl AuthRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         let session = self
             .create_session(&mut connection, request.user(), request.expiration())
@@ -184,7 +184,7 @@ impl AuthRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         let session = self
             .get_auth_session(&mut connection, request.session_id())
@@ -212,7 +212,7 @@ impl AuthRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         let user_warren = self
             .add_user_to_warren(&mut connection, request.user_warren())
@@ -230,7 +230,7 @@ impl AuthRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         let user_warren = self
             .update_user_warren(&mut connection, request.user_warren())
@@ -248,7 +248,7 @@ impl AuthRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         let user_warren = self
             .remove_user_from_warren(&mut connection, request.user_id(), request.warren_id())
@@ -272,7 +272,7 @@ impl AuthRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         let user_warrens = self
             .get_user_warrens(&mut connection, request.user_id())
@@ -290,7 +290,7 @@ impl AuthRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         let user_warrens = self
             .get_all_user_warrens(&mut connection)
@@ -308,7 +308,7 @@ impl AuthRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         self.get_user_warren(&mut connection, request.user_id(), request.warren_id())
             .await
@@ -326,7 +326,7 @@ impl AuthRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         let users = self
             .fetch_users(&mut connection)
@@ -345,7 +345,7 @@ impl AuthRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         let users = self
             .fetch_users(&mut connection)
@@ -402,6 +402,7 @@ impl Sqlite {
 
         let user: User = sqlx::query_as(
             "INSERT INTO users (
+                id,
                 name,
                 email,
                 hash,
@@ -411,12 +412,14 @@ impl Sqlite {
                 $1,
                 $2,
                 $3,
-                $4
+                $4,
+                $5
             )
             RETURNING
                 *
             ",
         )
+        .bind(Uuid::new_v4())
         .bind(name)
         .bind(email)
         .bind(password_hash)
diff --git a/backend/src/lib/outbound/sqlite/mod.rs b/backend/src/lib/outbound/sqlite/mod.rs
index 542f313..3584370 100644
--- a/backend/src/lib/outbound/sqlite/mod.rs
+++ b/backend/src/lib/outbound/sqlite/mod.rs
@@ -6,6 +6,7 @@ use sqlx::{
 };
 use tokio::task::JoinHandle;
 pub mod auth;
+pub mod options;
 pub mod share;
 pub mod warrens;
 
@@ -29,10 +30,6 @@ impl Sqlite {
     pub async fn new(config: SqliteConfig) -> anyhow::Result<Self> {
         let opts = SqliteConnectOptions::from_str(&config.database_url)?
             .create_if_missing(true)
-            .extension_with_entrypoint(
-                "/var/lib/warren/sqlite_extensions/uuid",
-                "sqlite3_uuid_init",
-            )
             .disable_statement_logging();
 
         let pool = SqlitePoolOptions::new().connect_with(opts).await?;
diff --git a/backend/src/lib/outbound/sqlite/options.rs b/backend/src/lib/outbound/sqlite/options.rs
new file mode 100644
index 0000000..ad05bd6
--- /dev/null
+++ b/backend/src/lib/outbound/sqlite/options.rs
@@ -0,0 +1,134 @@
+use anyhow::Context;
+use sqlx::FromRow;
+
+use crate::domain::warren::{
+    models::option::{
+        DeleteOptionError, DeleteOptionRequest, DeleteOptionResponse, GetOptionError,
+        GetOptionRequest, GetOptionResponse, OptionKey, OptionType, SetOptionError,
+        SetOptionRequest, SetOptionResponse,
+    },
+    ports::OptionRepository,
+};
+
+use super::{Sqlite, is_not_found_error};
+
+#[derive(Debug, FromRow)]
+struct OptionRow {
+    key: String,
+    value: String,
+}
+
+impl OptionRepository for Sqlite {
+    async fn get_option<T: OptionType>(
+        &self,
+        request: GetOptionRequest,
+    ) -> Result<GetOptionResponse<T>, GetOptionError> {
+        let mut connection = self
+            .pool
+            .acquire()
+            .await
+            .context("Failed to get a Sqlite connection")?;
+
+        let key: OptionKey = request.into();
+
+        let row: OptionRow = sqlx::query_as(
+            "
+            SELECT
+                key,
+                value
+            FROM
+                application_options
+            WHERE
+                key = $1",
+        )
+        .bind(key.as_str())
+        .fetch_one(&mut *connection)
+        .await
+        .map_err(|e| {
+            if is_not_found_error(&e) {
+                GetOptionError::NotFound(key)
+            } else {
+                GetOptionError::Unknown(e.into())
+            }
+        })?;
+
+        let parsed = T::parse(&row.value).map_err(|_| GetOptionError::Parse)?;
+
+        Ok(GetOptionResponse::new(
+            OptionKey::new(&row.key).unwrap(),
+            parsed,
+        ))
+    }
+
+    async fn set_option<T: OptionType>(
+        &self,
+        request: SetOptionRequest<T>,
+    ) -> Result<SetOptionResponse<T>, SetOptionError> {
+        let mut connection = self
+            .pool
+            .acquire()
+            .await
+            .context("Failed to get a Sqlite connection")?;
+
+        let (key, value) = request.unpack();
+
+        sqlx::query_as::<_, OptionRow>(
+            "
+            INSERT INTO application_options (
+                key,
+                value
+            ) VALUES (
+                $1,
+                $2
+            )
+            RETURNING
+                key,
+                value
+            ",
+        )
+        .bind(key.as_str())
+        .bind(value.inner().to_string())
+        .fetch_one(&mut *connection)
+        .await
+        .map_err(|e| SetOptionError::Unknown(e.into()))?;
+
+        Ok(SetOptionResponse::new(key, value.get_inner()))
+    }
+
+    async fn delete_option(
+        &self,
+        request: DeleteOptionRequest,
+    ) -> Result<DeleteOptionResponse, DeleteOptionError> {
+        let mut connection = self
+            .pool
+            .acquire()
+            .await
+            .context("Failed to get a Sqlite connection")?;
+
+        let key: OptionKey = request.into();
+
+        sqlx::query_as::<_, OptionRow>(
+            "
+            DELETE FROM
+                application_options
+            WHERE
+                key = $1
+            RETURNING
+                key,
+                value
+            ",
+        )
+        .bind(key.as_str())
+        .fetch_one(&mut *connection)
+        .await
+        .map_err(|e| {
+            if is_not_found_error(&e) {
+                DeleteOptionError::NotFound(key.clone())
+            } else {
+                DeleteOptionError::Unknown(e.into())
+            }
+        })?;
+
+        Ok(DeleteOptionResponse::new(key))
+    }
+}
diff --git a/backend/src/lib/outbound/sqlite/share.rs b/backend/src/lib/outbound/sqlite/share.rs
index ed30116..9e211ef 100644
--- a/backend/src/lib/outbound/sqlite/share.rs
+++ b/backend/src/lib/outbound/sqlite/share.rs
@@ -154,6 +154,7 @@ pub(super) async fn create_share(
     let share: ShareRow = sqlx::query_as(
         "
             INSERT INTO shares (
+                id,
                 creator_id,
                 warren_id,
                 path,
@@ -164,12 +165,14 @@ pub(super) async fn create_share(
                 $2,
                 $3,
                 $4,
-                datetime($5, 'unixepoch')
+                $5,
+                datetime($6, 'unixepoch')
             )
             RETURNING
                 *
             ",
     )
+    .bind(Uuid::new_v4())
     .bind(request.creator_id())
     .bind(request.warren_id())
     .bind(request.base().path())
diff --git a/backend/src/lib/outbound/sqlite/warrens.rs b/backend/src/lib/outbound/sqlite/warrens.rs
index 5001ce0..38b7cff 100644
--- a/backend/src/lib/outbound/sqlite/warrens.rs
+++ b/backend/src/lib/outbound/sqlite/warrens.rs
@@ -32,7 +32,7 @@ impl WarrenRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         let warren = self
             .create_warren(&mut connection, request.name(), request.path())
@@ -47,7 +47,7 @@ impl WarrenRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         let warren = self
             .edit_warren(
@@ -70,7 +70,7 @@ impl WarrenRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         let warren = self
             .delete_warren(&mut connection, request.id())
@@ -88,7 +88,7 @@ impl WarrenRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         let warrens = self
             .fetch_warrens(&mut connection, request.ids())
@@ -106,7 +106,7 @@ impl WarrenRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         let warrens = self
             .fetch_all_warrens(&mut connection)
@@ -121,7 +121,7 @@ impl WarrenRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         let warren = self
             .get_warren(&mut connection, request.id())
@@ -144,7 +144,7 @@ impl WarrenRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         super::share::get_share(&mut connection, request)
             .await
@@ -159,7 +159,7 @@ impl WarrenRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         super::share::create_share(&mut connection, request)
             .await
@@ -177,7 +177,7 @@ impl WarrenRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         let path = request.path().clone();
 
@@ -195,7 +195,7 @@ impl WarrenRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         super::share::delete_share(&mut connection, request)
             .await
@@ -211,7 +211,7 @@ impl WarrenRepository for Sqlite {
             .pool
             .acquire()
             .await
-            .context("Failed to get a PostgreSQL connection")?;
+            .context("Failed to get a Sqlite connection")?;
 
         super::share::verify_password(&mut connection, request)
             .await
@@ -232,16 +232,19 @@ impl Sqlite {
         let warren: Warren = sqlx::query_as(
             "
             INSERT INTO warrens (
+                id,
                 name,
                 path
             ) VALUES (
                 $1,
-                $2
+                $2,
+                $3
             )
             RETURNING
                 *
             ",
         )
+        .bind(Uuid::new_v4())
         .bind(name)
         .bind(path)
         .fetch_one(&mut *tx)
diff --git a/backend/warren.db b/backend/warren.db
deleted file mode 100644
index 4fd31339ee30f75970cffd5db2d1ef6c508e0a93..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 69632
zcmeI*eP|o!9S86`$&w=Z<(#HNGa1?aVb@kI#iu)+WSN;pv1P}LY$vvilf7^|-JR;2
z^;VtKC?T-fN!GyVM#o^;27_(1-Pp?B3V~%CgLP#u9V>K<fm>+VU=3Nv=tdbNf9yG(
ztVpuul(-D+eh=$(ch7To&-3{`k92p^S&OF=dP!r``C?Wsu>#dg(KL08Whsj4A&-OP
zu{pTNM91a~d8Qkt+fDXRM=un*ng3F~&O=ns=b7tWKkoTdkJ#hsywG*2E9oBVjJdw$
z?shFY54k?rZX;L@0SG_<0{<6*bsOXI4i3_nCQ5QDqsisciezYpq33f((@gKgLOhm?
zv&q=;M4W9(Vuw8L+B%Z1vdQ?FBs(`x9!rS?dum~3Hnwn<JsCgi_qfZ3Ry6Y*Ps|^`
zn`a?D6<>(YO~e;jGlMatt3Gyqj-8Ar;$)W-vBinlWSp$7RSJ4hGbHlvHAxDSoSBW+
zw?dMYq9&I#b=zdJv8mWnBFRoHEs%XBC3EG)WNh}7#~1B&dS?e|O3$fU#ds`3-XtYb
z!+dq#oVsfw1)F9M&h|LH!+o??&8n*v$ykxi5*FmriZ#j9;AZ9~<7e2GEM_gOY(wT6
zzV($Zm$$EvzA{`5hm~ZFyPE=FEi>h}Xf}w~D?L;$>#CH><WtqDA)n8;>6PD2K+eg<
zqL$k+qE?pnF*WPm+-6A03bJ9G%NJE?MK-L|?W4b0iTeopaJSR@NMF04TfS1zdhWU0
z;c<Bf2IwbFR^w7_#<hwyPIorNs4>NiRCRt!xZZW+e-Eq`IVWXwqa>yEjApRM=jRjg
z*j!T=A~{GeQfoQdWy$7MJ$-)X&8S*NBOPhST~!NHYs+m)V|D6Uzq&_xcHUC0K<zU%
z^qiquu>5SD-RJQ|I-TB=1MS*OW4xtc<6PI;vdiT?e3-uEsJ5S4)2TfjXlgaJg}dz9
zIXSCs)2mv$8oM+%b9%{qX}#aq&VbwLjU8@BQmc%_*CsrH1Men#u$JAuzGQcKy<Yl?
zyWZ~%6V~WxGOI4yrC45970D>4EVa7Jwvbv@)-%n#cO_*ttLL^f)cQ;DR4lP*f;Yah
zl?&>9ym9R!YCfmaJML{4wJN71RG(Zv$Gx-i)vQim$Gx*w`-S0H_t7qIAV6QXI)p^t
zbt_U<f3zr<%tMdXd0SJsTT@BoSu#9M+67seJw7u%GnZ^W@-Wj?%}|PZ!Q4S}?EKZ$
z^_)?XGa2$$Vy15%9n@bO>jB(y0Aa0elof>>IBf~Mm8z_0%BoS$HXr#|X<9{7%4Vsg
zl1_SUt@xWqP#)hSHm7$n&@Nc57*eoxiJcrt9x#t4yUD}G#3<%jGQt1>2tWV=5P$##
zAOHafKmY;|fWY<ws?FsX5!@O31FHuP{_YLyni*?d@G&oe@Ek7&xM+ZjupBqWg~meS
zjekAd_3MY<C_Verw--MBl}i^N`qTG%Z%ieh37z@b3*O5oe<gn8tDpPH7mOqHJ3p*E
zQF-B;(Ure0(=NvcHuv)MYkE#EZL{I${&Mcx)hio!UcdVM)UxZQ+Wq9;ls~_8<e^vJ
z{_c^Nq7LVa|M?A*{rETj{nVG<eEmCT-+FO;^<y4VD;sl*V%{Mm3=n_-1Rwwb2tWV=
z5P$##AOHaf>~#T;-9cLyDQs@L!);DJ{hImtKg~>0<PQS`AOHafKmY;|fB*y_009U<
z00KJ-tVL*#pYo2l*X9M`%~uCM^n5h_$)B(N@r%FxL2;(~U4ZK7m{yUqg^YGo$!GiJ
z;-mQ-udDr!j|ZduSuzTVVSj0y_ZP;4{U?IUMm&=UMfu>!@}!tQwR$%4(bN6%iLyF3
zJ$ix58A4%UDUmKu7RvF}%BiK)bmg&V?8HRq^z`|Xm{*l;z8|p7BJ=Zqn)wGs{xCoQ
z0uX=z1Rwwb2tWV=5P$##Ag~Vv4%z+g){7I?`Tre?xw8){h$=t;0uX=z1Rwwb2tWV=
z5P$##Ah1QiZl~PV`9Hb;A9w$6@xcNJKmY;|fB*y_009U<00Izzz#bHM&_3ecavOqm
z|NqMr^D=X757r4qh5!U0009U<00Izz00bZa0SN3pftbzV9~czUf4KeiFqvcqg%4kS
z^2?qx^L@{i|9<V}1ID*wBiZu-mHgnbQpy+4H{Z`MjE;%?QQG16GQzFzKQ;E5-%nrs
z+GiuFfr*Lh6DxAw7-`PWiR9-9?%w~8{{XP}8VpJd0SG_<0uX=z1Rwwb2tWV=?{k3%
z?S8uT+JViy|G)LZfOY<Vn__M=H{a)Gs6GTB009U<00Izz00bZa0SG`~?+YBX57JFv
z9<X)T8TW|w{r^`e<`w3dy<bVx00Izz00bZa0SG_<0uX=z1R$`N1%_>%e!sgmwEhc!
z^LBxaUmp9!FZk>9KX1MDqhWf7%-etdzd<n@%*I|8LfIhz0SG_<0uX=z1Rwwb2tWV=
z`%Yk>!|$i>bs50cPjYSfy}#D;fAjNys(0TBp+XRV00bZa0SG_<0uX=z1Rwwb2s8+o
z_y6PkzX1f35P$##AOHafKmY;|fB*y_0D*ldfb;)-7*tdV0uX=z1Rwwb2tWV=5P$##
zAkZRUe*fRbbWqGX8DW3`1Rwwb2tWV=5P$##AOHaf>|=q8Hs@NmUl7!2NR4ojkfw%|
zU^uL#MOhAqLLpv@h+$QTC{aO3aq?&=sHEkzEQC}cDst)3bSj+|#HiYOM?TN-Vt|VV
zxKTDJjB%r50#{!YsV}-nTYKk4Uekh6RZ+sx(Nu~TL?I<}!YI$nK_Q$TO^Kq)r8Q0n
z30hc?Qz0!BQbnE%Dtsgy<)b_7o#V#1(3lu$*!$)p^YecjQ>K_3WP||%5P$##AOHaf
iKmY;|fB*y_0D<>TAl|XoP4D(<gKd&*#l73B2LA)YLcr<(

diff --git a/compose.yaml b/compose.yaml
index 1aae5ed..0c9c5b6 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -11,7 +11,7 @@ services:
     environment:
       - 'SERVER_ADDRESS=0.0.0.0'
       - 'SERVER_PORT=8080'
-      - 'DATABASE_URL=sqlite:///var/lib/warren/warren.db'
+      - 'DATABASE_URL=sqlite:///var/lib/warren/data/warren.db'
       - 'SERVE_DIRECTORY=/serve'
       - 'CORS_ALLOW_ORIGIN=http://localhost:8081'
       - 'LOG_LEVEL=debug'
@@ -19,7 +19,7 @@ services:
       - 'ZIP_READ_BUFFER_BYTES=4096'
     volumes:
       - './backend/serve:/serve:rw'
-      - './backend/warren.db:/var/lib/warren/warren.db:rw'
+      - './backend/data:/var/lib/warren/data:rw'
 networks:
   warren-net:
     name: 'warren-net'