From: vados-dev <vados@vados.ru>
Date: Fri, 3 Jul 2026 03:40:03 +0000 (+0300)
Subject: Backup for MikroNUC created successfully at Jul 03 06:40:03.
X-Git-Url: https://git.vados.ru/gitweb.cgi?a=commitdiff_plain;h=4ac3c4b340ccb9f38565a5195be38ee9729c61e8;p=Mikrotiks%2Fbackups.git

Backup for MikroNUC created successfully at Jul 03 06:40:03.
---

diff --git a/MikroNUC/20260703/20260703064001-Binary.backup b/MikroNUC/20260703/20260703064001-Binary.backup
new file mode 100644
index 0000000..f2aef50
Binary files /dev/null and b/MikroNUC/20260703/20260703064001-Binary.backup differ
diff --git a/MikroNUC/20260703/20260703064001-Config.rsc b/MikroNUC/20260703/20260703064001-Config.rsc
new file mode 100644
index 0000000..6b9b1e1
--- /dev/null
+++ b/MikroNUC/20260703/20260703064001-Config.rsc
@@ -0,0 +1,5446 @@
+# 2026-07-03 06:40:03 by RouterOS 7.23.1
+# system id = NmJcEM+8XAP
+#
+/caps-man channel
+add band=2ghz-g/n extension-channel=disabled frequency=2422 name=2G-3 \
+    reselect-interval=20m save-selected=yes
+add band=5ghz-a/n/ac extension-channel=XXXX frequency=5660 name=5G-5660 \
+    save-selected=yes
+add band=5ghz-a/n/ac extension-channel=XXXXXXXX frequency=5160,5200,5280 \
+    name=5G-5160-5280 reselect-interval=30m save-selected=yes
+add band=5ghz-n/ac extension-channel=XXXX frequency=5180 name=5G-36 \
+    reselect-interval=30m save-selected=yes
+add band=5ghz-n/ac extension-channel=XXXX frequency=5200 name=5G-40 \
+    reselect-interval=30m save-selected=yes
+add band=5ghz-n/ac extension-channel=XXXX frequency=5220 name=5G-44 \
+    reselect-interval=30m save-selected=yes
+add band=5ghz-n/ac extension-channel=XXXX frequency=5240 name=5G-48 \
+    reselect-interval=30m save-selected=yes
+add band=2ghz-g/n extension-channel=disabled frequency=2442 name=2G-7 \
+    reselect-interval=20m save-selected=yes
+add band=2ghz-g/n extension-channel=disabled frequency=2462 name=2G-11 \
+    reselect-interval=20m save-selected=yes
+/interface bridge
+add name=BridgeLAN
+add name=bridge1
+/interface ethernet
+set [ find default-name=ether1 ] disable-running-check=no
+/interface wireguard
+add comment="Interface for Master Connection" listen-port=22022 mtu=1360 \
+    name=MASTER
+/caps-man security
+add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
+    group-key-update=30m name=xs-Sec
+add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
+    group-key-update=30m name=WPA2
+/disk
+add slot=ram tmpfs-max-size=100000000 type=tmpfs
+/interface list
+add include=dynamic,static name=LAN
+add exclude=LAN name=WAN
+add exclude=LAN include=WAN name=Internet
+/interface wireless security-profiles
+set [ find default=yes ] supplicant-identity=MikroMIC
+/iot wiliot servers
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"
+/ip dhcp-server option
+add code=12 name=HostName
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
+/ip dhcp-server option sets
+add name=P1505n options=HostName
+add name=StartLife1 options=HostName
+add name=amsterDev options=HostName
+add name=MiTV options=HostName
+add name=miller options=HostName
+add name=amster options=HostName
+add name=garage options=HostName
+add name=domain-search-set options=domain-search-list
+/ip pool
+add name=dhcp ranges=10.30.30.150-10.30.30.200
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add dont-require-permissions=no name=test owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    \r\
+    \n#:local ScriptName [ :jobname ];\r\
+    \n:local expSrc;\r\
+    \n:local FileName;\r\
+    \n:local FilePath;\r\
+    \n:local DirPath \"tmpfs/\";\r\
+    \n:global WaitForFile;\r\
+    \n:global IfThenElse;\r\
+    \n\r\
+    \n:foreach Script in=([ /system/script find where name~\"Amster-GlobalConf\
+    *\" ]) do={\r\
+    \n:local ScriptVal [ /system/script/get \$Script ];\r\
+    \n\r\
+    \n:local expName [ (\$ScriptVal->\"name\") ];\r\
+    \n#[/system/script get \$expScript name];\r\
+    \n:delay 2s;\r\
+    \n\r\
+    \n:set expSrc [/system/script print where name=\$expName];\r\
+    \n/system/script print where name=\$expName;\r\
+    \n#[:put [/system/script get \$expScript source]];\r\
+    \n:put [\$expSrc];\r\
+    \n:delay 2s;\r\
+    \n:set FileName \$expName;\r\
+    \n:set FilePath (\$DirPath . \$FileName);\r\
+    \n\r\
+    \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\
+    ______________________________\";\r\
+    \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\
+    \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\
+    \n#:log warning {/system/script/get source=[/system/script/get \$expScript\
+    \_source];};\r\
+    \n\r\
+    \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\
+    \r\
+    \n\r\
+    \n#:local gettingScript \"\$FileName\";\r\
+    \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \
+    [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\
+    \n\r\
+    \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\
+    m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\
+    \n#     file=(\$FilePath . \".rsc\\00\");\r\
+    \n:do {\r\
+    \n:local fName (\$FilePath . \".rsc\");\r\
+    \n#:delay 3s;\r\
+    \n#/file add name=\$fName;\r\
+    \n:put [:tostr [\$expSrc]];\r\
+    \n/file set \$fName contents=[:put [\$expSrc]];\r\
+    \n:delay 3s;\r\
+    \n\$WaitForFile \$fName;\r\
+    \n(\$FilePath . \".rsc\");\r\
+    \n#:delay 2s;\r\
+    \n\r\
+    \n} on-error={\r\
+    \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\
+    \n}\r\
+    \n#\$WaitForFile (\$FilePath . \".rsc\");\r\
+    \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\
+    ;\r\
+    \n#/system/script export \$Sscript file=\$FilePath;\r\
+    \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\
+    le=\$FilePath;\r\
+    \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\
+    \n\r\
+    \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\
+    \n#  \\\r\
+    \n#       file=(\$FilePath . \".rsc\\00\");\r\
+    \n#script={:put [/system/script/get \$FileName source];}  file=(\$FilePath\
+    \_. \".rsc\\00\");\r\
+    \n#/system script export \$src file=(\$FilePath . \$FileName);\r\
+    \n}\r\
+    \n\r\
+    \n:log warning \"\\nComplete!\";\r\
+    \n\r\
+    \n #   :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\
+    rce ]; } \\\r\
+    \n #       file=(\$FilePath . \".conf\\00\");\r\
+    \n #   \$WaitForFile (\$FilePath . \".conf\");\r\
+    \n #   :onerror Err {\r\
+    \n #    /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\
+    \_. \".conf\") \\\r\
+    \n #        user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\
+    \$FilePath . \".conf\");\r\
+    \n #     :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\
+    \n #     :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\
+    \n "
+add dont-require-permissions=no name=test1 owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \r\
+    \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\
+    \n\r\
+    \n:local runningChannel;\r\
+    \n:local runningVersion;\r\
+    \n:local ParseCustom;\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n  \r\
+    \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\
+    \" \")\" 1];\r\
+    \n:log warning [\$runningChannel];\r\
+    \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \
+    \")\" 2];\r\
+    \n:log warning [\$runningVersion];\r\
+    \n\r\
+    \n\r\
+    \n\r\
+    \n#  :if ([:len \$open] = 0) do={\r\
+    \n#    :log error \"\$SMP Could not extract installed OS channel from vers\
+    ion string: `\$runningOsAndChannel`.\";\r\
+    \n#    :error \"\$SMP error, check logs\";\r\
+    \n#  }\r\
+    \n#  :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\
+    AndChannel]];\r\
+    \n#  :local close [:find \$rest \")\"];\r\
+    \n#  :local channel [:pick \$rest 0 \$close];\r\
+    \n#  :return \$channel;\r\
+    \n#}"
+add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="# Amster Initial Script\r\
+    \n#\r\
+    \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\
+    e; };\r\
+    \n#:delay 1s;\r\
+    \n:#global ReloadGlobal true; \r\
+    \n\r\
+    \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global defOwner \"vados\";\r\
+    \n:global AmFirstRun;\r\
+    \n\r\
+    \n:set AmFirstRun do={\r\
+    \n    :global AmScriptsUrl;\r\
+    \n    :global defOwner;\r\
+    \n    #:global ParseKeyValueStore;\r\
+    \n    #:local AmUpdCRLF true;\r\
+    \n    #:local IfThenElse;\r\
+    \n    #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\
+    \_] = true) do={:return \$2}; :return \$3}\r\
+    \n    #/certificate/settings/set builtin-trust-store=fetch;\r\
+    \n    #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\
+    em\";\r\
+    \n    #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\
+    \n    # For basic verification we rename the certificate and print it by f\
+    ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\
+    \r\
+    \n    #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\
+    E\" ];\r\
+    \n    #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\
+    4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\
+    \n    #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\
+    \n    :local Scripts {\r\
+    \n        \"Amster-GlobalConfig\"\r\
+    \n        \"Amster-GlobalFunc\";\r\
+    \n#        \"Amster-SFTP-backup\"\r\
+    \n#        \"Amster-BkpEmail-and-upd\";\r\
+    \n    };\r\
+    \n#    /system/script/set owner=(\$ScriptVal->\"name\") \\\r\
+    \n#    source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\
+    ourceNew ] \$Script;\r\
+    \n    :foreach Script in=\$Scripts do={\r\
+    \n        :put \"Installing \$Script...\";\r\
+    \n        /system/script/remove [ find where name=\$Script ];\r\
+    \n        /system/script/add name=\$Script owner=\$defOwner source=([ /too\
+    l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\
+    >\"data\");\r\
+    \n        /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\
+    Script;\r\
+    \n    };\r\
+    \n    /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\
+    \n}\r\
+    \n:global AmUpdRun;\r\
+    \n:set AmUpdRun do={\r\
+    \n    #:local UpdScript [ :tostr \$1 ];\r\
+    \n    #:global ParseKeyValueStore;\r\
+    \n    :global AmScriptsUrl;\r\
+    \n    :global defOwner;\r\
+    \n    :local Scripts {\r\
+    \n#        \"Amster-GlobalConfig\"\r\
+    \n#        \"Amster-GlobalFunc\"\r\
+    \n#        \"Amster-GlobalRemove\"\r\
+    \n        \"Amster-backup-SFTP\"\r\
+    \n        \"Amster-SFTP-backup\"\r\
+    \n        \"Amster-BkpEmail-and-upd\"\r\
+    \n        \"Amster-TG-Bot\"\r\
+    \n        \"Amster-TG-Notification\";\r\
+    \n        };\r\
+    \n    :foreach Script in=\$Scripts do={\r\
+    \n        :put \"updating \$Script...\";\r\
+    \n        /system/script/remove [ find where name=\$Script ];\r\
+    \n        /system/script/add name=\$Script owner=\$defOwner source=([ /too\
+    l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\
+    >\"data\");\r\
+    \n        /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\
+    Script;\r\
+    \n    };\r\
+    \n#    /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\
+    tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\
+    rsc\") output=user as-value ]->\"data\"); };\r\
+    \n}\r\
+    \n\r\
+    \n\$AmFirstRun;\r\
+    \n#\$AmUpdRun;\r\
+    \n\r\
+    \n#\$setUpdExist;\r\
+    \n#:global setUpdExist;\r\
+    \n#:global ParseKeyValueStore;\r\
+    \n#:set setUpdExist do={\r\
+    \n#:do {\r\
+    \n#:global ParseKeyValueStore;\r\
+    \n#  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\
+    os\\r\?\\n#comment=*\" ] do={\r\
+    \n#    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n#    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\
+    ) ];\r\
+    \n#    :local scriptName (\$ScriptVal->\"name\");\r\
+    \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\
+    \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\
+    \n#  }\r\
+    \n#} on-error={}\r\
+    \n#}\r\
+    \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\
+    -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\
+    \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \
+    / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\
+    cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\
+    \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\
+    criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\
+    log/errormessage=(. \r\
+    \n# \$ ScriptInfo =  \$ScriptInfo)));in=(evl (evl /system/script/findwhere\
+    =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\
+    ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\
+    urce (. ^#!rsc by Vados \r\
+    \n# \? \r\
+    \n#));5))));on-error=;(evl /)))\r\
+    \n"
+add dont-require-permissions=no name="Download cAP's Packages" owner=vados \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="# +------------------------------+\r\
+    \n# |                              |\r\
+    \n# |  Mikrotik RouterOS Scripts   |\r\
+    \n# |  _Download cAP's Packages_   |\r\
+    \n# |                              |\r\
+    \n# +------------------------------+\r\
+    \n#  https://github.com/sebastian13/mikrotik-routeros-scripts\r\
+    \n#\r\
+    \n\r\
+    \n# Set a directory path providing the required space\r\
+    \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\
+    \r\
+    \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\
+    ram'\r\
+    \n:local dir \"/tmpfs/capsman-packages\";\r\
+    \n\r\
+    \n\r\
+    \n# Set Package Path if required, set policy to none if using 'upgrade-cap\
+    s' script\r\
+    \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\
+    \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\
+    \n#require-same-version;\r\
+    \n\r\
+    \n:local installed [/system package get value-name=version [find where nam\
+    e=\"routeros\"]]\r\
+    \n\r\
+    \n# Delete old downloads\r\
+    \n# /file/remove [ find type=package name~\"capsman*\" ]\r\
+    \n\r\
+    \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\
+    GHz interfaces are\r\
+    \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \
+    package has been divided\r\
+    \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\
+    \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\
+    \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\
+    \n\r\
+    \n:foreach architecture in={ \"arm\";\r\
+    \n#                           \"arm64\";\r\
+    \n                          \"x86_64\";\r\
+    \n                           \"mipsbe\"} do={\r\
+    \n     :foreach package in={ \"routeros\";\r\
+    \n#                           \"wifi-qcom-ac\";\r\
+    \n#                           \"wifi-qcom\";\r\
+    \n                           \"container\";\r\
+    \n                           \"wireless\"} do={ :do {\r\
+    \n        :put \"\"\r\
+    \n        :put \"Download \$package \$installed for \$architecture\"\r\
+    \n        /tool fetch mode=https \\\r\
+    \n        url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\
+    ge-\$installed-\$architecture.npk\" \\\r\
+    \n        dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\
+    \n        } on-error={ :put \"Error downloading the file. On a 404, note t\
+    hat the package may not exist for the specified architecture!\" }\r\
+    \n     }\r\
+    \n}\r\
+    \n"
+add comment="Script for setup routeros script system" \
+    dont-require-permissions=no name=AM-setup owner=AM-setup policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-setup\r\
+    \n# Script comment: Script for setup routeros script system\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# :local ScriptName [ :jobname ];\r\
+    \n# Additional commands:\r\
+    \n#\r\
+    \n# For scripts:\r\
+    \n#:global NewScript \"script_name\"; \r\
+    \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\
+    tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \
+    \".rsc\") output=user as-value ]->\"data\");\r\
+    \n#:global NewScript (a);\r\
+    \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\
+    \n#\r\
+    \n# For run from terminal:\r\
+    \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\
+    eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\
+    ut=user as-value ]->\"data\");\r\
+    \n#\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF \"LF\";\r\
+    \n#:if (\$ScriptUpdatesCRLF != false) do={\r\
+    \n#  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\
+    os\" ] do={\r\
+    \n#    if (\$ScriptUpdatesCRLF = true) do={\r\
+    \n#      /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\
+    cript;\r\
+    \n#    } else={\r\
+    \n#      /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\
+    ipt;\r\
+    \n#    }\r\
+    \n#  }\r\
+    \n#}\r\
+    \n\r\
+    \n# /import verbose=no \$ScriptName\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global SetupScript [ :jobname ];\r\
+    \n:global RemoveMe true;\r\
+    \n:global RunOnce (a);\r\
+    \n:global InitSetup true;\r\
+    \n:global tmpfs false;\r\
+    \n\r\
+    \n{\r\
+    \n  :local RmMe [:tobool \$1];\r\
+    \n\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SetupScript;\r\
+    \n  :global RemoveMe;\r\
+    \n  :global InitSetup;\r\
+    \n  :global tmpfs;\r\
+    \n\r\
+    \n  :local UrlSuffix \$Identity;\r\
+    \n  :local UrlDir \"certs/\";\r\
+    \n  :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \
+    \r\
+    \n  :local CertCommonName \"Root YE\";\r\
+    \n  :local CertFileName \"Root-YE.pem\";\r\
+    \n  :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\
+    f852f02a708aa5d5666\";\r\
+    \n\r\
+    \n  :if (\$SetupScript = false) do={\r\
+    \n    :global SetupScript \"AM-setup\";\r\
+    \n  }\r\
+    \n  :if (\$RemoveMe != false) do={\r\
+    \n    :set RemoveMe true;\r\
+    \n  }\r\
+    \n\r\
+    \n  :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\
+    \n \r\
+    \n\r\
+    \n    :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\
+    \_\\\r\
+    \n          (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\
+    \n          (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n         [ :len [ /certificate/builtin/find where common-name=\$CertComm\
+    onName ] ] > 0)) do={\r\
+    \n        :put \"Importing certificate...\";\r\
+    \n        /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\
+    \_as-value;\r\
+    \n        :delay 1s;\r\
+    \n        /certificate/import file-name=\$CertFileName passphrase=\"\";\r\
+    \n        /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\
+    t YE\" ];\r\
+    \n        :delay 1s;\r\
+    \n      };\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \
+    ] != 1) do={\r\
+    \n      :error \"Something is wrong with your certificates!\";\r\
+    \n  };\r\
+    \n\r\
+    \n:local MkTmpfs do={\r\
+    \n  :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n  :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n    :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n      :log info (\"The tmpfs is disabled, enabling.\");\r\
+    \n      /disk/enable \$TmpFs;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log info (\"Try to removing directory 'tmpfs'.\");\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/remove tmpfs;\r\
+    \n      :return true;\r\
+    \n    } delay=100ms max=10;\r\
+    \n  } on-error={ }\r\
+    \n#  \$RmDir \"tmpfs\";\r\
+    \n  :onerror Err {\r\
+    \n    /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\
+    et total-memory ] / 3);\r\
+    \n    :do {\r\
+    \n      :retry {\r\
+    \n        /file/get tmpfs;\r\
+    \n        :return true;\r\
+    \n      } delay=222ms max=10;\r\
+    \n      } on-error={ }\r\
+    \n    } do={\r\
+    \n      :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n#    :return true;\r\
+    \n}\r\
+    \n:if (\$tmpfs = true) do={\r\
+    \n  :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\
+    \";\r\
+    \n  :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\
+    \n    :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\
+    \n    :return \$true;\r\
+    \n  } else={\r\
+    \n    :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :log error (\$0 . \"Directory tmpfs is not created!\");\r\
+    \n      :return false;\r\
+    \n    } else={\r\
+    \n      :onerror Err {\r\
+    \n        /file/add type=\"directory\" name=/tmpfs/scripts;\r\
+    \n        :do {\r\
+    \n          :retry {\r\
+    \n            /file/get /tmpfs/scripts;\r\
+    \n            :return true;\r\
+    \n          } delay=100ms max=10;\r\
+    \n      } on-error={ }\r\
+    \n      } do={\r\
+    \n        :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\
+    Err);\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n#      :return true;\r\
+    \n#      [ /file/get \$FileName ]\r\
+    \n    }\r\
+    \n#    :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\
+    \_global variable tmpfs!\");\r\
+    \n#    :global tmpfs (a);\r\
+    \n#    return false;\r\
+    \n  }\r\
+    \n}\r\
+    \n  :put \"Renaming AM-GlobalConfig, if exists...\";\r\
+    \n  :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \
+    . [ /system/clock/get time ] . \".rsc\");\r\
+    \n  /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\
+    fig\" ];\r\
+    \n  :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\
+    \n    :put \"Installing \$Script...\";\r\
+    \n    /system/script/remove [ find where name=\$Script ];\r\
+    \n    /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\
+    h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \
+    \".rsc\")  output=user as-value ]->\"data\");\r\
+    \n    \r\
+    \n    /system/script run \$Script;\r\
+    \n    :delay 2s;\r\
+    \n  };\r\
+    \n\r\
+    \n  :local Script \"mod/AM-Certs-By-Ident\";\r\
+    \n  \r\
+    \n  :put \"Installing \$Script...\";\r\
+    \n  /system/script/remove [ find where name=\$Script ];\r\
+    \n  /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \
+    check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\
+    rsc\")  output=user as-value ]->\"data\");\r\
+    \n  /system/script run \$Script;\r\
+    \n  :global tmpAddCerts;\r\
+    \n  :while ([ \$tmpAddCerts ] = true) do={\r\
+    \n    :delay 1s;\r\
+    \n  }\r\
+    \n  :delay 1s;\r\
+    \n  :put \"Removing \$Script...\";\r\
+    \n  /system/script/remove [ find where name=\$Script ];\r\
+    \n\r\
+    \n  :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \
+    ] > 0) do={\r\
+    \n    :put \"Renaming certificate by its common-name...\";\r\
+    \n    :global CertificateNameByCN;\r\
+    \n    \$CertificateNameByCN \$CertFingerprint;\r\
+    \n  };\r\
+    \n\r\
+    \n  :if (\$RemoveMe = true) do={\r\
+    \n    :put \"Add Scheduler for remove this script...\";\r\
+    \n    :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \
+    where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\
+    \n    \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\
+    \"_RemoveSetup\\\" ];\\n\" . \\\r\
+    \n    \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\
+    \n    :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\
+    \";\r\
+    \n    /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\
+    time=startup interval=30s on-event=\$OnEvent;\r\
+    \n      :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\
+    . I'm leaving.\\nThere will be an error below, this is normal.\");\r\
+    \n    }\r\
+    \n    :delay 1;\r\
+    \n    :put \"Loading configuration and functions...\";\r\
+    \n    :do {      \r\
+    \n      :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\
+    \n      :put \"Normal removing temporary global environment variables.\";\
+    \r\
+    \n      :global SetupScript (a);\r\
+    \n      :global InitSetup (a);\r\
+    \n      :global RemoveMe (a);\r\
+    \n    } on-error={\r\
+    \n      :local ErrorMsg \"Loading configuration and functions error!\";\r\
+    \n      :log error (\$0 . \$ErrorMsg . :error);\r\
+    \n      :error \$ErrorMsg;\r\
+    \n    }\r\
+    \n}\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/729/f42d43ae\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 00:05:03 01.07.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\
+    \n#\
+    \n#root.mnuc.backuper\
+    \n\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\
+    \n#:local Script AM-GlobalConfig;\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n#:local FetchFile AM-DOHCert.rsc\
+    \n\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\
+    \n:global MkDir;\
+    \n\
+    \n:local FetchFile Manager@id_rsa.pub\
+    \n:local localDir \"/\";\
+    \n\
+    \n\$MkDir \$localDir;\
+    \n\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\
+    \$localDir . \$FetchFile);\
+    \n"
+add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\
+    ftp,read,write,policy,test,sniff,sensitive source=\
+    ":global MkDir;\r\
+    \n\r\
+    \n\$MkDir /usb1/tmpfs;"
+add dont-require-permissions=no name=CreateContainer owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    local contIF \"veth1\";\r\
+    \n:local contIP \"10.10.10.10/24\";\r\
+    \n:local contGW \"10.10.10.1\";\r\
+    \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\
+    \n:local contBridgeIF \"Bridge-DOC\";\r\
+    \n:local contBridgeIP \"10.10.10.1/24\";\r\
+    \n/interface/bridge/add name=\$contBridgeIF;\r\
+    \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\
+    \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\
+    \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\
+    er.io tmpdir=sata1/tmp\r\
+    \n"
+add dont-require-permissions=no name=carkeeperbot owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\
+    container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\
+    onfigs/.profile dst=/root/.ashrc;\r\
+    \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\
+    /configs/php.ini dst=/etc/php82/php.ini;\r\
+    \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\
+    s dst=/configs;\r\
+    \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\
+    p;\r\
+    \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\
+    \_dst=/scripts;\r\
+    \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\
+    eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\
+    \n\r\
+    \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\
+    r/tmp;\r\
+    \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\
+    var/sync;\r\
+    \n"
+add comment="Enable or disable ip addresses based on bridge port state" \
+    dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: mod/AM-IPbridge\r\
+    \n# Script comment: Enable or disable ip addresses based on bridge port st\
+    ate\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n# Add this Script scheduler\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\
+    ={\r\
+    \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\
+    T SET! Fix It Now!\");\r\
+    \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\
+    \n:local Comment \"Every Day Check For Fake Bridges\";\r\
+    \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\
+    rtup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\
+    \n  :local BrName [ /interface/bridge/get \$Bridge name ];\r\
+    \n  :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \
+    0) do={\r\
+    \n    :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \
+    inactive=no ] ] = 0) do={\r\
+    \n      /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\
+    \n    } else={\r\
+    \n      /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n"
+add comment="Use Telegram to chat with your Router and send commands" \
+    dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: mod/AM-TG-Bot\r\
+    \n# Script comment: Use Telegram to chat with your Router and send command\
+    s\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n:local ExitOK false;\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady; :global GlobalFuncReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \
+    \\\r\
+    \n      do={ :error (\"Global config and/or functions not ready.\"); }; } \
+    delay=500ms max=50;\r\
+    \n  :local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n  :global Identity;\r\
+    \n  :global TelegramChatActive;\r\
+    \n  :global TelegramChatGroups;\r\
+    \n  :global TelegramChatId;\r\
+    \n  :global TelegramChatIdsTrusted;\r\
+    \n  :global TelegramChatOffset;\r\
+    \n  :global TelegramChatRunTime;\r\
+    \n  :global TelegramMessageIDs;\r\
+    \n  :global TelegramRandomDelay;\r\
+    \n  :global TelegramTokenId;\r\
+    \n\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global EitherOr;\r\
+    \n  :global EscapeForRegEx;\r\
+    \n  :global FileExists;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global LogPrintVerbose;\r\
+    \n  :global MAX;\r\
+    \n  :global MIN;\r\
+    \n  :global MkDir;\r\
+    \n  :global RandomDelay;\r\
+    \n  :global RmDir;\r\
+    \n  :global ScriptLock;\r\
+    \n  :global SendTelegram2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global WaitForFile;\r\
+    \n  :global WaitFullyConnected;\r\
+    \n\r\
+    \n  :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\
+    \n    :set ExitOK true;\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n\r\
+    \n  \$WaitFullyConnected;\r\
+    \n\r\
+    \n  :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \
+    do={\r\
+    \n    /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\
+    ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \
+    Bot\";\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\
+    \n    :set TelegramChatOffset { 0; 0; 0 };\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\
+    \n    :set TelegramRandomDelay 0;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \
+    G2\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$ScriptName (\"Downloading required certificate \
+    failed.\");\r\
+    \n    :set ExitOK true;\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n\r\
+    \n  \$RandomDelay \$TelegramRandomDelay;\r\
+    \n\r\
+    \n  :local Data false;\r\
+    \n  :for I from=1 to=4 do={\r\
+    \n    :if (\$Data = false) do={\r\
+    \n      :onerror Err {\r\
+    \n        :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\
+    t=user \\\r\
+    \n          (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\
+    Updates\?offset=\" . \\\r\
+    \n          \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\
+    5D\") as-value ]->\"data\");\r\
+    \n        :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\
+    ;\r\
+    \n      } do={\r\
+    \n        :if (\$I < 4) do={\r\
+    \n          \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \
+    try: \" . \$Err);\r\
+    \n          :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\
+    ) ];\r\
+    \n          :delay ((\$I * \$I) . \"s\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :if (\$Data = false) do={\r\
+    \n    \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\
+    \n    :set ExitOK true;\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local JSON [ :deserialize from=json value=\$Data ];\r\
+    \n  :local UpdateID 0;\r\
+    \n  :local Uptime [ /system/resource/get uptime ];\r\
+    \n  :foreach Update in=(\$JSON->\"result\") do={\r\
+    \n    :set UpdateID (\$Update->\"update_id\");\r\
+    \n    \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\
+    \_\" . [ :serialize to=json \$Update ]);\r\
+    \n\r\
+    \n    :local Message (\$Update->\"message\");\r\
+    \n    :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \
+    \"array\");\r\
+    \n    :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\
+    _to_message\"->\"message_id\") ]);\r\
+    \n    :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\
+    m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\
+    \n      :local Trusted false;\r\
+    \n      :local Chat (\$Message->\"chat\");\r\
+    \n      :local From (\$Message->\"from\");\r\
+    \n      :local Command (\$Message->\"text\");\r\
+    \n      :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\
+    \$Message->\"message_thread_id\") \"\" ];\r\
+    \n\r\
+    \n      :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\
+    ) do={\r\
+    \n        :if (\$From->\"id\" = \$IdsTrusted || \\\r\
+    \n             \$From->\"username\" = \$IdsTrusted || \\\r\
+    \n             \$Chat->\"id\" = \$IdsTrusted) do={\r\
+    \n          :set Trusted true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$Trusted = true) do={\r\
+    \n        :local Done false;\r\
+    \n        :if (\$Command = \"\?\") do={\r\
+    \n          \$LogPrint info \$ScriptName (\"Sending notice for update \" .\
+    \_\$UpdateID . \".\");\r\
+    \n          \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\
+    ); silent=true; \\\r\
+    \n            replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\
+    \r\
+    \n            subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\
+    Telegram Chat\"); \\\r\
+    \n            message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\
+    \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\
+    \n              \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\
+    ctive!)\" ] . \", awaiting your commands!\") });\r\
+    \n          :set Done true;\r\
+    \n        }\r\
+    \n        :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\
+    \n          :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \
+    . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\
+    \n            :set TelegramChatActive true;\r\
+    \n          } else={\r\
+    \n            :set TelegramChatActive false;\r\
+    \n          }\r\
+    \n          \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\
+    gramChatActive \"active\" \"passive\" ] . \\\r\
+    \n            \" from update \" . \$UpdateID . \"!\");\r\
+    \n          :set Done true;\r\
+    \n        }\r\
+    \n        :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\
+    \_&& \\\r\
+    \n             \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\
+    ={\r\
+    \n          :if ([ \$ValidateSyntax \$Command ] = true) do={\r\
+    \n            :local State \"\";\r\
+    \n            :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\
+    lNum 6 ]);\r\
+    \n            :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\
+    \n              \$LogPrint error \$ScriptName (\"Failed creating directory\
+    !\");\r\
+    \n              :set ExitOK true;\r\
+    \n              :error false;\r\
+    \n            }\r\
+    \n            \$LogPrint info \$ScriptName (\"Running command from update \
+    \" . \$UpdateID . \": \" . \$Command);\r\
+    \n            :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\
+    { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\
+    \n              \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\
+    File . \"\\00\");\r\
+    \n            :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\
+    egramChatRunTime 20s ] ] = false) do={\r\
+    \n              :set State ([ \$SymbolForNotification \"warning-sign\" ] .\
+    \_\"The command did not finish, still running in background.\\n\\n\");\r\
+    \n            }\r\
+    \n            :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\
+    \n              :set State ([ \$SymbolForNotification \"cross-mark\" ] . \
+    \"The command failed with an error!\\n\\n\");\r\
+    \n            }\r\
+    \n            :local Content ([ /file/read chunk-size=32768 file=\$File as\
+    -value ]->\"data\");\r\
+    \n            \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\
+    \"); silent=true; \\\r\
+    \n              replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \
+    \\\r\
+    \n              subject=([ \$SymbolForNotification \"speech-balloon\" ] . \
+    \"Telegram Chat\"); \\\r\
+    \n              message=([ \$SymbolForNotification \"gear\" ] . \"Command:\
+    \\n\" . \$Command . \"\\n\\n\" . \\\r\
+    \n                \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\
+    \n                ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\
+    \_\$Content) \\\r\
+    \n                ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \
+    ]) });\r\
+    \n            \$RmDir \"tmpfs/telegram-chat\";\r\
+    \n          } else={\r\
+    \n            \$LogPrint info \$ScriptName (\"The command from update \" .\
+    \_\$UpdateID . \" failed syntax validation!\");\r\
+    \n            \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\
+    \"); silent=false; \\\r\
+    \n              replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \
+    \\\r\
+    \n              subject=([ \$SymbolForNotification \"speech-balloon\" ] . \
+    \"Telegram Chat\"); \\\r\
+    \n              message=([ \$SymbolForNotification \"gear\" ] . \"Command:\
+    \\n\" . \$Command . \"\\n\\n\" . \\\r\
+    \n                [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\
+    nd failed syntax validation!\") });\r\
+    \n          }\r\
+    \n        }\r\
+    \n      } else={\r\
+    \n        :local MessageText (\"Received a message from untrusted contact \
+    \" . \\\r\
+    \n          [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\
+    \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\
+    \n          \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \
+    \"!\");\r\
+    \n        :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \
+    \"\\\$\")) do={\r\
+    \n          \$LogPrint warning \$ScriptName \$MessageText;\r\
+    \n          \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\
+    ); silent=false; \\\r\
+    \n            replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\
+    \r\
+    \n            subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\
+    Telegram Chat\"); \\\r\
+    \n            message=(\"You are not trusted.\") });\r\
+    \n        } else={\r\
+    \n          \$LogPrint info \$ScriptName \$MessageText;\r\
+    \n        }\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\
+    ateID . \".\");\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\
+    \n    [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\
+    \_1) (\$TelegramChatOffset->2) ]);\r\
+    \n} do={\r\
+    \n  :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\
+    \n}\r\
+    \n"
+add comment="Script send Notifications in Telegram" dont-require-permissions=\
+    no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: mod/AM-TG-Notifications\r\
+    \n# Script comment: Script send Notifications in Telegram\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:global FlushTelegramQueue;\r\
+    \n:global GetTelegramChatId;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global PurgeTelegramQueue;\r\
+    \n:global SendTelegram;\r\
+    \n:global SendTelegram2;\r\
+    \n# flush telegram queue\r\
+    \n:set FlushTelegramQueue do={ :onerror Err {\r\
+    \n  :global TelegramQueue;\r\
+    \n  :global TelegramMessageIDs;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global IsFullyConnected;\r\
+    \n  :global LogPrint;\r\
+    \n  :if ([ \$IsFullyConnected ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\
+    \");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \
+    G2\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\
+    );\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AllDone true;\r\
+    \n  :local QueueLen [ :len \$TelegramQueue ];\r\
+    \n  :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\
+    \" ] ] > 0 && \$QueueLen = 0) do={\r\
+    \n    \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\
+    \_but queue is empty.\");\r\
+    \n  }\r\
+    \n  :foreach Id,Message in=\$TelegramQueue do={\r\
+    \n    :if ([ :typeof \$Message ] = \"array\" ) do={\r\
+    \n      :onerror Err {\r\
+    \n        :local Data ([ /tool/fetch check-certificate=yes-without-crl out\
+    put=user http-method=post \\\r\
+    \n          (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\
+    \_\"/sendMessage\") \\\r\
+    \n          http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\
+    \n        :set (\$TelegramQueue->\$Id);\r\
+    \n        :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\
+    alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\
+    \n      } do={\r\
+    \n        \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \
+    \" . \$Err);\r\
+    \n        :set AllDone false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\
+    \n    /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\
+    ;\r\
+    \n    :set TelegramQueue;\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n# get the chat id\r\
+    \n:set GetTelegramChatId do={ :onerror Err {\r\
+    \n  :global TelegramTokenId;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global LogPrint;\r\
+    \n  :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \
+    G2\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\
+    );\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local Data;\r\
+    \n  :onerror Err {\r\
+    \n    :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\
+    er \\\r\
+    \n       (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\
+    ates\?offset=0\" . \\\r\
+    \n       \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\
+    \r\
+    \n  } do={\r\
+    \n    \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local JSON [ :deserialize from=json value=\$Data ];\r\
+    \n  :local Count [ :len (\$JSON->\"result\") ];\r\
+    \n  :if (\$Count = 0) do={\r\
+    \n    \$LogPrint info \$0 (\"No message received.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\
+    \n  \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\
+    \"));\r\
+    \n  :if ((\$Message->\"is_topic_message\") = true) do={\r\
+    \n    \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\
+    thread_id\"));\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n# send notification via telegram - expects one array argument\r\
+    \n:set (\$NotificationFunctions->\"telegram\") do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global Identity;\r\
+    \n  :global IdentityExtra;\r\
+    \n  :global TelegramChatId;\r\
+    \n  :global TelegramChatIdOverride;\r\
+    \n  :global TelegramMessageIDs;\r\
+    \n  :global TelegramQueue;\r\
+    \n  :global TelegramThreadId;\r\
+    \n  :global TelegramThreadIdOverride;\r\
+    \n  :global TelegramTokenId;\r\
+    \n  :global TelegramTokenIdOverride;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ProtocolStrip;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global UrlEncode;\r\
+    \n  :local EscapeMD do={\r\
+    \n    :local Text [ :tostr \$1 ];\r\
+    \n    :local Mode [ :tostr \$2 ];\r\
+    \n    :local Excl [ :tostr \$3 ];\r\
+    \n    :global CharacterReplace;\r\
+    \n    :global IfThenElse;\r\
+    \n    :local Chars {\r\
+    \n       \"body\"={ \"\\\\\"; \"`\" };\r\
+    \n      \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\
+    ; \">\";\r\
+    \n                \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \
+    \"!\" };\r\
+    \n    }\r\
+    \n    :foreach Char in=(\$Chars->\$Mode) do={\r\
+    \n      :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\
+    \n        :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\
+    \_];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\
+    \")}\r\
+    \n    :return \$Text;\r\
+    \n  }\r\
+    \n  :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\
+    \n    [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\
+    ) \$TelegramChatId ] ];\r\
+    \n  :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\
+    \n    [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\
+    \")) \\\r\
+    \n    [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\
+    \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\
+    \n  :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\
+    n->\"origin\")) \$TelegramTokenId ];\r\
+    \n  :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\
+    e}\r\
+    \n  :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\
+    MessageIDs ({})}\r\
+    \n  :local Truncated false;\r\
+    \n  :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\
+    ity . \"] \" . \\\r\
+    \n    (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\
+    \n  :local LenSubject [ :len \$Text ];\r\
+    \n  :local LenMessage [ :len (\$Notification->\"message\") ];\r\
+    \n  :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\
+    \n  :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\
+    \n  :if (\$LenSum > 3968) do={\r\
+    \n    :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\
+    \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\
+    \n    :set Truncated true;\r\
+    \n  } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\
+    \_\"body\" ])}\r\
+    \n  :if (\$LenLink > 0) do={\r\
+    \n    :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\
+    \_\\\r\
+    \n      \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \
+    ] \"plain\" ] . \"]\" . \\\r\
+    \n      \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\
+    \");\r\
+    \n  }\r\
+    \n  :if (\$Truncated = true) do={\r\
+    \n    :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\
+    \_] . \\\r\
+    \n      [ \$EscapeMD (\"The message was too long and has been truncated, c\
+    ut off _\" . \\\r\
+    \n      ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\
+    \" \"_\" ]);\r\
+    \n  }\r\
+    \n  :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \
+    . (\$Notification->\"silent\") . \\\r\
+    \n      \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\
+    sage_thread_id=\" . \$ThreadId . \\\r\
+    \n      \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\
+    \n  :onerror Err {\r\
+    \n    :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \
+    - G2\" \"fetch\" ] = false) do={\r\
+    \n      \$LogPrint warning \$0 (\"Downloading required certificate failed.\
+    \");\r\
+    \n      :error false;\r\
+    \n    }\r\
+    \n    :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\
+    user http-method=post \\\r\
+    \n      (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \
+    \\\r\
+    \n      http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\
+    lue ]->\"data\");\r\
+    \n    :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\
+    =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\
+    \n  } do={\r\
+    \n    \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\
+    Err . \" - Queuing...\");\r\
+    \n    :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\
+    ue ({})}\r\
+    \n    :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\
+    k\" ] . \\\r\
+    \n      [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\
+    k/get date ] . \\\r\
+    \n      \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \
+    \"plain\" \"_\" ]);\r\
+    \n    :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\
+    ;\r\
+    \n      http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\
+    \n    :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\
+    e\" ] ] = 0) do={\r\
+    \n      /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\
+    rt-time=startup \\\r\
+    \n        on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\
+    \");\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n# purge the Telegram queue\r\
+    \n:set PurgeTelegramQueue do={\r\
+    \n  :global TelegramQueue;\r\
+    \n  /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\
+    \r\
+    \n  :set TelegramQueue;\r\
+    \n}\r\
+    \n# send notification via telegram - expects at least two string arguments\
+    \r\
+    \n:set SendTelegram do={ :onerror Err {\r\
+    \n  :global SendTelegram2;\r\
+    \n  \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\
+    ent=\$4 });\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n# send notification via telegram - expects one array argument\r\
+    \n:set SendTelegram2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\
+    \\\"telegram\\\"\") \$Notification;\r\
+    \n}\r\
+    \n"
+add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source=":local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:local ExitError;\r\
+    \n#:local IfThenElse;\r\
+    \n#:local EitherOr;\r\
+    \n\r\
+    \n:local one 11;\r\
+    \n:local two 8;\r\
+    \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\
+    \n:local Test; # [ :totime \"22s\" ];\r\
+    \n\r\
+    \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \
+    = true) do={:return \$2}; :return \$3;}\r\
+    \n:local EitherOr do={\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\
+    n \$1} else={:return \$2};}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\
+    rn \$1} else={:return \$2};}\r\
+    \n  :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\
+    \r\
+    \n}\r\
+    \n\r\
+    \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\
+    \n\r\
+    \n:set Test [ \$EitherOr \$Test \"<unknown>\" ];\r\
+    \n:log warning (\"\\\$ Test = \" . \$Test);\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :local IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n\r\
+    \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\
+    \n\r\
+    \n:set ExitOK true;\r\
+    \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";"
+add comment="Update and Backup send notification to EMail" \
+    dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\
+    AM-Backup-UpdateEmail policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-Backup-UpdateEmail\r\
+    \n# Script comment: Update and Backup send notification to EMail\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version>=6.43.7\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# Updated: 15/04/2025\r\
+    \n# Website: https://github.com/beeyev\r\
+    \n# Notification e-mail (Make sure you have configured Email settings in T\
+    ools -> Email)\r\
+    \n:local ExitOK false;\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady; :global GlobalFuncReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \
+    \\\r\
+    \n      do={ :error (\"Global config and/or functions not ready.\"); }; } \
+    delay=500ms max=50;\r\
+    \n  :local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \
+    = true) do={:return \$2}; :return \$3;}\r\
+    \n:local EitherOr do={\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\
+    n \$1} else={:return \$2};}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\
+    rn \$1} else={:return \$2};}\r\
+    \n  :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\
+    \r\
+    \n}\r\
+    \n:local ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\
+    ick \$Name 0 1 ] = \"\\\$\") \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);}\r\
+    \n}\r\
+    \n\r\
+    \n:global LogPrint;\r\
+    \n:global EditSchedulers;\r\
+    \n:global DevInfoIncludeIP;\r\
+    \n\r\
+    \n:local SchedInterval \"7d\";\r\
+    \n:local SchedStartTime \"03:41:27\";\r\
+    \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\
+    ication to EMail.\";\r\
+    \n\r\
+    \n# Function to add or edit schedulers for scripts, to ensure they are set\
+    \_up correctly\r\
+    \n# How to use:\r\
+    \n# Call this function with the following parameters:\r\
+    \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\
+    \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\
+    \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\
+    \r\
+    \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: <name>\")\
+    \_[**]\r\
+    \n# 5. \$5 - On Event command (e.g. \"/system/script { run <name>; }\" (de\
+    fault is \"/system/script { run \$SchedName; }\")) [**]\r\
+    \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\
+    ff,sensitive,romon\" (default is the same)) [**]\r\
+    \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\
+    *]\r\
+    \n# Notes:\r\
+    \n# *  - Scheduler name is required, and is used to identify the scheduler\
+    \_to create or edit. It is usually the same as the script name (\$ScriptNa\
+    me).\r\
+    \n# ** - If optional parameters are not provided, default values will be u\
+    sed.\r\
+    \n#      This allows for quick setup with minimal parameters, while still \
+    providing flexibility for customization.\r\
+    \n# Example usage:\r\
+    \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\
+    ; :error true;}\r\
+    \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \
+    scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\
+    \_false; :error true;}\r\
+    \n\r\
+    \n:set EditSchedulers do={\r\
+    \n  :local SchedName [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\
+    \n  :local Interval [ :tostr \$2 ];\r\
+    \n  :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\
+    \n  :local StartTime [ :tostr \$3 ];\r\
+    \n  :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \
+    time]; }\r\
+    \n  :local Comment [ :tostr \$4 ];\r\
+    \n  :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\
+    \_\$SchedName\"; }\r\
+    \n  :local OnEvent [ :tostr \$5 ];\r\
+    \n  :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \
+    \$SchedName; }\"; }\r\
+    \n  :local Policy [ :tostr \$6 ];\r\
+    \n  :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\
+    olicy,test,password,sniff,sensitive,romon\"; }\r\
+    \n  :local StartDate [ :tostr \$7 ];\r\
+    \n  :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \
+    date]; }\r\
+    \n\r\
+    \n  :onerror Err {\r\
+    \n    # Check if scheduler exists, if not - create it\r\
+    \n    :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\
+    \_do={\r\
+    \n      :log warning (\$SchedName . \"System Scheduler for script: \" . \$\
+    SchedName . \" is NOT SET! Fix It Now!\");\r\
+    \n      /system/scheduler/add comment=\$Comment interval=\$Interval name=\
+    \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\
+    t-time=\$StartTime;\r\
+    \n    }\r\
+    \n    # Check if scheduler parameters are correct, if not - fix them\r\
+    \n    :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\
+    {\r\
+    \n      /system/scheduler/set \$SchedName comment=\$Comment;\r\
+    \n    }\r\
+    \n    :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\
+    o={\r\
+    \n      /system/scheduler/set \$SchedName interval=\$Interval;\r\
+    \n    }\r\
+    \n    :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\
+    ={\r\
+    \n      /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\
+    \n    }\r\
+    \n    :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\
+    \r\
+    \n      /system/scheduler/set \$SchedName policy=\$Policy;\r\
+    \n    }\r\
+    \n    :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\
+    ) do={\r\
+    \n      /system/scheduler/set \$SchedName start-date=\$StartDate;\r\
+    \n    }\r\
+    \n    :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\
+    ) do={\r\
+    \n      /system/scheduler/set \$SchedName start-time=\$StartTime;\r\
+    \n    }\r\
+    \n  } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\
+    \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\
+    \n    :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\
+    SchedComment ] = false) do={\r\
+    \n  :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \
+    \$ScriptName . \"!\");\r\
+    \n  :set ExitOK true;\r\
+    \n  :error true;\r\
+    \n}\r\
+    \n\r\
+    \n# Local Function CheckOSUpdateMode\r\
+    \n:local CheckOSUpdateMode;\r\
+    \n:set CheckOSUpdateMode do={\r\
+    \n  :local NewMode [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$NewMode ] = 0) do={\r\
+    \n    :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\
+    alue!\");\r\
+    \n    :return false;\r\
+    \n    :error true;\r\
+    \n  }\r\
+    \n\r\
+    \n  :global BackupAndUpdateMode;\r\
+    \n  :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\
+    \n  :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\
+    \_do={\r\
+    \n    :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\
+    \n    :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\
+    ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\
+    .\");\r\
+    \n    :delay 5;\r\
+    \n    /system/script { run \$ScriptName; };\r\
+    \n  } else={\r\
+    \n  :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \
+    '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\
+    \n  :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n  :error false;\r\
+    \n}\r\
+    \n\r\
+    \n#  :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\
+    -partition\" ] ] > 0) do={\r\
+    \n#    \$LogPrint warning \$ScriptName (\"Running from backup partition, r\
+    efusing to act.\");\r\
+    \n#    :set ExitOK true;\r\
+    \n#    :error false;\r\
+    \n#  }\r\
+    \n\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n:global forceBackup;\r\
+    \n:global BackupPassword;\r\
+    \n:global BackupSens;\r\
+    \n:global updateChannel;\r\
+    \n\r\
+    \n:global DevInfoIncludeIP;\r\
+    \n\r\
+    \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\
+    \n# Works for `stable` and `long-term` channels.\r\
+    \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\
+    1 skipped).\r\
+    \n# Sends info if a newer (non-patch) version is found.\r\
+    \n:local installOnlyPatchUpdates false;\r\
+    \n:local scriptVersion \"26.04.30\";\r\
+    \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\
+    \n#Script messages prefix\r\
+    \n:local SMP \"BkpAndUpdate:\";\r\
+    \n\r\
+    \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\
+    heck logs for more details.\";\r\
+    \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \
+    update\\\" v.\$scriptVersion started.\";\r\
+    \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \
+    `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\
+    es: `\$installOnlyPatchUpdates`\";\r\
+    \n\r\
+    \n## vv FUNCTIONS vv ##\r\
+    \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:local MDTSFix [\$MiniDateTimeStamp];\r\
+    \n:global Identity;\r\
+    \n:global IdentityShort;\r\
+    \n:global devBoardName;\r\
+    \n:global runningVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global devModel;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n\r\
+    \n# Checks if two RouterOS version strings differ only by the patch versio\
+    n\r\
+    \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"]  # Output: true\r\
+    \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"]  # Output: false\r\
+    \n:local FuncIsPatchUpdateOnly do={\r\
+    \n  :local ver1 \$1;\r\
+    \n  :local ver2 \$2;\r\
+    \n  # Extract the major and minor components from a version\r\
+    \n  :local extractMajorMinor do={\r\
+    \n    :local ver \$1;\r\
+    \n    :local dot1 [:find \$ver \".\"];\r\
+    \n    :if (\$dot1 = -1) do={:return \$ver}\r\
+    \n    :local major [:pick \$ver 0 \$dot1];\r\
+    \n    :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\
+    \n    :local dot2 [:find \$rest \".\"];\r\
+    \n    :local minor \$rest;\r\
+    \n    :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\
+    \n    :return (\$major . \".\" . \$minor);\r\
+    \n  }\r\
+    \n\r\
+    \n# Compare the major and minor components of both version strings\r\
+    \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\
+    eturn true}\r\
+    \n :return false;\r\
+    \n}\r\
+    \n# Creates backups and returns array of names\r\
+    \n# Possible arguments:\r\
+    \n#  \$1 - file name, without extension\r\
+    \n#  \$2 - password (optional)\r\
+    \n#  \$3 - sensitive data in config (optional, default: false)\r\
+    \n# Example:\r\
+    \n#:put [\$FuncCreateBackups \$backupName]\r\
+    \n:local FuncCreateBackups do={\r\
+    \n  :local backupName [ :tostr \$1 ];\r\
+    \n  :local BackPass \$2;\r\
+    \n  :local BackSens \$3;\r\
+    \n\r\
+    \n  #Script messages prefix\r\
+    \n  :local SMP \"BkpAndUpdate:\";\r\
+    \n  :local exitErrorMessage \"\$SMP script stopped due to an error. Please\
+    \_check logs for more details.\";\r\
+    \n  :log info (\"\$SMP global function `FuncCreateBackups` started, input:\
+    \_`\$backupName`\");\r\
+    \n\r\
+    \n  # validate required parameter: backupName\r\
+    \n  :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\
+    {\r\
+    \n    :log error \"\$SMP parameter 'backupName' is required and must be a \
+    non-empty string\";\r\
+    \n#    :log warning \"\$SMP parameter '\\\$backupName' is required and mus\
+    t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\
+    \n#    :set \$backupName \"default-backup\";\r\
+    \n    :error \$exitErrorMessage;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local backupFileSys \"\$backupName.backup\";\r\
+    \n  :local backupFileConfig \"\$backupName.rsc\";\r\
+    \n  :local backupNames {\$backupFileSys;\$backupFileConfig};\r\
+    \n\r\
+    \n  ## Perform system backup\r\
+    \n  :if ([:len \$BackPass] = 0) do={\r\
+    \n    :log info (\"\$SMP starting backup without password, backup name: `\
+    \$backupName`\");\r\
+    \n    /system backup save dont-encrypt=yes name=\$backupName;\r\
+    \n  } else={\r\
+    \n    :log info (\"\$SMP starting backup with password, backup name: `\$ba\
+    ckupName`\");\r\
+    \n    /system backup save password=\$BackPass name=\$backupName;\r\
+    \n  }\r\
+    \n  :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\
+    \n    ## Export config file\r\
+    \n  :if (\$BackSens = true) do={\r\
+    \n    :log info (\"\$SMP starting export config with sensitive data, backu\
+    p name: `\$backupName`\");\r\
+    \n    # Since RouterOS v7 it needs to be explicitly set that we want to ex\
+    port sensitive data\r\
+    \n    :if ([:pick [/system resource get version] 0 1] < 7) do={\r\
+    \n      :execute \"/export compact terse file=\$backupName\";\r\
+    \n    } else={\r\
+    \n      :execute \"/export compact show-sensitive terse file=\$backupName\
+    \";\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :log info (\"\$SMP starting export config without sensitive data, ba\
+    ckup name: `\$backupName`\");\r\
+    \n    /export compact hide-sensitive terse file=\$backupName;\r\
+    \n  }\r\
+    \n  :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\
+    \n  :log info (\"\$SMP Waiting a little to ensure backup files are written\
+    \");\r\
+    \n  :delay 20;\r\
+    \n  :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\
+    \n    :log info (\"\$SMP system backup file successfully saved to the file\
+    \_system: `\$backupFileSys`\");\r\
+    \n  } else={\r\
+    \n    :log error (\"\$SMP system backup was not created, file does not exi\
+    st: `\$backupFileSys`\");\r\
+    \n    :error \$exitErrorMessage;\r\
+    \n  }\r\
+    \n  :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\
+    \n    :log info (\"\$SMP config backup file successfully saved to the file\
+    \_system: `\$backupFileConfig`\");\r\
+    \n  } else={\r\
+    \n    :log error (\"\$SMP config backup was not created, file does not exi\
+    st: `\$backupFileConfig`\");\r\
+    \n    :error \$exitErrorMessage;\r\
+    \n  }\r\
+    \n  :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\
+    ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\
+    \n  :return \$backupNames;\r\
+    \n}\r\
+    \n# Sends an email\r\
+    \n# Parameters:\r\
+    \n#  \$1 - to (email address)\r\
+    \n#  \$2 - subject\r\
+    \n#  \$3 - body\r\
+    \n#  \$4 - file attachments (optional; pass \"\" if not needed)\r\
+    \n#\r\
+    \n# Example:\r\
+    \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\
+    lete.\" \"backup1.backup\"\r\
+    \n:local FuncSendEmailSafe do={\r\
+    \n  :global EmailGeneralTo;\r\
+    \n  :local emailSubject \$2;\r\
+    \n  :local emailBody \$3;\r\
+    \n  :local emailAttachments \$4;\r\
+    \n  :local SMP \"Bkp&Upd:\";\r\
+    \n  :local exitErrorMessage \"\$SMP script stopped due to an error. Please\
+    \_check logs for more details.\";\r\
+    \n  :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\
+    \n  # SAFETY: wait for any previously queued email to finish\r\
+    \n  :local waitTimeoutPre 60;\r\
+    \n  :local waitCounterPre 0;\r\
+    \n  :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \
+    e-mail get last-status] = \"in-progress\")) do={\r\
+    \n    :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\
+    \n      :log error \"\$SMP Email send aborted: previous send did not compl\
+    ete after \$waitTimeoutPre seconds\";\r\
+    \n      :error \$exitErrorMessage;\r\
+    \n    }\r\
+    \n    :log info \"\$SMP Waiting for previous email to finish (status: \$[/\
+    tool e-mail get last-status])...\";\r\
+    \n    :delay 1; \r\
+    \n    :set waitCounterPre (\$waitCounterPre + 1);\r\
+    \n  }\r\
+    \n  # Send the email\r\
+    \n  :do {\r\
+    \n    /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\
+    emailBody file=\$emailAttachments;\r\
+    \n  } on-error={\r\
+    \n    :log error \"\$SMP Email send command failed to execute. Check logs \
+    and verify email settings.\";\r\
+    \n    :error \$exitErrorMessage;\r\
+    \n  }\r\
+    \n  # Wait for send status to change from \"in-progress\" / \"resolving-dn\
+    s\"\r\
+    \n  :local waitTimeout 60;\r\
+    \n  :local waitCounter 0;\r\
+    \n  :local emailStatus \"\";\r\
+    \n  :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\
+    out` seconds...\";\r\
+    \n  :while (\$waitCounter < \$waitTimeout) do={\r\
+    \n    :set emailStatus [/tool e-mail get last-status];\r\
+    \n    :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\
+    ng-dns\") do={\r\
+    \n      :log info \"\$SMP Email send status received: \$emailStatus\";\r\
+    \n      # exit loop\r\
+    \n      :set waitCounter \$waitTimeout;\r\
+    \n    } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\
+    \n  }\r\
+    \n  # Final decision based on last status\r\
+    \n  :if (\$emailStatus = \"succeeded\") do={\r\
+    \n    :log info  \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\
+    \r\
+    \n  } else={\r\
+    \n    :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\
+    eck logs for more details and verify email settings.\";\r\
+    \n    :error \$exitErrorMessage;\r\
+    \n  }\r\
+    \n}\r\
+    \n# Global variable to track current update step\r\
+    \n# They need to be initialized here first to be available in the script\r\
+    \n:global buGlobalVarTargetOsVersion;\r\
+    \n:global buGlobalVarScriptStep;\r\
+    \n:local scriptStep \$buGlobalVarScriptStep;\r\
+    \n:do {\r\
+    \n  /system/script/environment remove buGlobalVarScriptStep;\r\
+    \n} on-error={}\r\
+    \n:if ([:len \$scriptStep] = 0) do={\r\
+    \n  :set scriptStep 1;\r\
+    \n}\r\
+    \n## ^^ FUNCTIONS ^^ ##\r\
+    \n#\r\
+    \n# Initial validation\r\
+    \n## Check email settings\r\
+    \n:if ([:len \$EmailGeneralTo] < 3) do={\r\
+    \n  :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\
+    ains invalid value. Script stopped.\");\r\
+    \n  :error \$exitErrorMessage;\r\
+    \n}\r\
+    \n# Values will be defined later in the script\r\
+    \n:local emailServer \"\";\r\
+    \n:local emailFromAddress [/tool e-mail get from];\r\
+    \n:log info \"\$SMP Validating email settings...\";\r\
+    \n:do {\r\
+    \n  :set emailServer [/tool e-mail get server];\r\
+    \n} on-error={\r\
+    \n  # This is a workaround for the RouterOS v7.12 and older versions\r\
+    \n  :set emailServer [/tool e-mail get address];\r\
+    \n}\r\
+    \n:if (\$emailServer = \"0.0.0.0\") do={\r\
+    \n  :log error (\"\$SMP Email server address is not correct: `\$emailServe\
+    r`, check `Tools -> Email`. Script stopped.\");\r\
+    \n  :error \$exitErrorMessage;\r\
+    \n}\r\
+    \n:if ([:len \$emailFromAddress] < 3) do={\r\
+    \n  :log error (\"\$SMP Email configuration FROM address is not correct: `\
+    \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\
+    \n  :error \$exitErrorMessage;\r\
+    \n}\r\
+    \n# Script mode validation\r\
+    \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\
+    osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\
+    teMode != \"osnotify\") do={\r\
+    \n  :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \
+    set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\
+    );\r\
+    \n  :error \$exitErrorMessage;\r\
+    \n}\r\
+    \n# Update channel validation\r\
+    \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \
+    and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\
+    \_do={\r\
+    \n  :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\
+    r contains invalid value: `\$updateChannel`. Script stopped.\");\r\
+    \n  :error \$exitErrorMessage;\r\
+    \n}\r\
+    \n# Verify if script is set to install patch updates and if the update cha\
+    nnel is valid\r\
+    \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\
+    updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\
+    \n  :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\
+    \") do={\r\
+    \n    :log error (\"\$SMP Patch-only updates enabled, but update channel `\
+    \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \
+    Script stopped\");\r\
+    \n    :error \$exitErrorMessage;\r\
+    \n  }\r\
+    \n  \r\
+    \n  :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\
+    m\") do={\r\
+    \n    :log error (\"\$SMP Script is set to install only patch updates, but\
+    \_the installed RouterOS version is not from `stable` or `long-term` chann\
+    el: `\$runningChannel`. Script stopped\");\r\
+    \n    :error \$exitErrorMessage;\r\
+    \n  }\r\
+    \n}\r\
+    \n#\r\
+    \n\r\
+    \n:local rawTime [/system clock get time];\r\
+    \n:local rawDate [/system clock get date];\r\
+    \n\r\
+    \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\
+    \n\r\
+    \n:local backupNameTemplate     (\"backup_v\" . \$runningVersion . \"_\" .\
+    \_\$runningChannel . \"_\" . \$MDTSFix);\r\
+    \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\
+    );\r\
+    \n:local backupNameAfterUpdate  (\$backupNameTemplate . \"_after_update\")\
+    ;\r\
+    \n\r\
+    \n## Email body template\r\
+    \n:local mailSubjectPrefix  \"\$SMP Device - `\$IdentityShort`\";\r\
+    \n:local mailBodyCopyright  \"Mikrotik RouterOS automatic backup & update \
+    (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\
+    \n:local changelogUrl     \"Check RouterOS changelog: https://mikrotik.com\
+    /download/changelogs/\";\r\
+    \n:local mailBodyDeviceInfo  \"\";\r\
+    \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\
+    ;\r\
+    \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\
+    --\");\r\
+    \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\
+    ;\r\
+    \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\
+    );\r\
+    \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\
+    me\");\r\
+    \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\
+    vRbSerialNumber\");\r\
+    \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\
+    \$deviceOsVerAndChannelRunning\");\r\
+    \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\
+    tem/resource/get build-time]\");\r\
+    \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\
+    lable: \$ROsVerAvail\");\r\
+    \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \
+    \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\
+    \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\
+    resource/get uptime]\");\r\
+    \n## IP address detection\r\
+    \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\
+    \n  :global GetPubIp;\r\
+    \n  :local PublicIpAddress [ \$GetPubIp ];\r\
+    \n  :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\
+    : \" . \$PublicIpAddress . \".\");\r\
+    \n  :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\
+    \n}  \r\
+    \n\r\
+    \n:local mailAttachments  [:toarray \"\"];\r\
+    \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\
+    \n  :if (\$scriptStep = 3) do={\r\
+    \n    :log info (\"\$SMP Waiting for one minute before continuing to the f\
+    inal step.\");\r\
+    \n    :delay 1m;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n## STEP 1: Create backups, check for new RouterOS, and send email\r\
+    \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\
+    s available\r\
+    \n:if (\$scriptStep = 1) do={\r\
+    \n  :global BackupPassword;\r\
+    \n  :global BackupSens;\r\
+    \n  :local isNewOsUpdateAvailable false;\r\
+    \n  :local isLatestOsAlreadyInstalled true;\r\
+    \n  :local isOsNeedsToBeUpdated false;\r\
+    \n  :local isUpdateCheckSucceeded false;\r\
+    \n  :local isEmailNeedsToBeSent false;\r\
+    \n  :local mailSubjectPartAction \"\";\r\
+    \n  :local mailPtBodyAction \"\";\r\
+    \n  :local mailPtSubjectBackup \"\";\r\
+    \n  :local mailPtBodyBackup \"\";\r\
+    \n  # Checking for new version\r\
+    \n  :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \
+    \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\
+    \n    :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\
+    \n     /system/package/update/set channel=\$updateChannel;\r\
+    \n    :log info (\"\$SMP Checking for new RouterOS version. Current instal\
+    led version is: `\$runningVersion`\");\r\
+    \n      \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\
+    \n      \r\
+    \n#     /system/package/update/check-for-updates without-paging as-value;\
+    \r\
+    \n#     /system/package/update check-for-updates;\r\
+    \n    :delay 5s;\r\
+    \n    :set PkgUpdStatus [ /system/package/update/get status ];\r\
+    \n    :if (\$PkgUpdStatus = \"New version is available\") do={\r\
+    \n    :set ROsVerAvail [/system/package/update/get latest-version];\r\
+    \n    }\r\
+    \n\r\
+    \n    :if (\$PkgUpdStatus = \"New version is available\") do={\r\
+    \n      :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\
+    il`\");\r\
+    \n      :set isNewOsUpdateAvailable true;\r\
+    \n      :set isLatestOsAlreadyInstalled false;\r\
+    \n      :set isUpdateCheckSucceeded true;\r\
+    \n      :set isEmailNeedsToBeSent true;\r\
+    \n      :set mailSubjectPartAction \"New RouterOS available\";\r\
+    \n      :set mailPtBodyAction  \"New RouterOS version is available, curren\
+    t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\
+    rl\";\r\
+    \n    } else={\r\
+    \n      :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\
+    \n        :log info (\"\$SMP No new RouterOS version is available, the lat\
+    est version is already installed: `v\$runningVersion`\");\r\
+    \n        :set isUpdateCheckSucceeded true;\r\
+    \n        :set mailSubjectPartAction \"No os update available\";\r\
+    \n        :set mailPtBodyAction  \"No new RouterOS version is available, t\
+    he latest version is already installed: `v\$runningVersion`\";\r\
+    \n      } else={\r\
+    \n        :log error (\"\$SMP Failed to check for new RouterOS version. Pa\
+    ckage check status: `\$PkgUpdStatus`\");\r\
+    \n        :set isEmailNeedsToBeSent true;\r\
+    \n        :set mailSubjectPartAction \"Error unable to check new os versio\
+    n\";\r\
+    \n        :set mailPtBodyAction  \"An error occurred while checking for a \
+    new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\
+    ew the logs on the device for more details and verify internet connectivit\
+    y.\";\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  # Checking if the script needs to install new os version\r\
+    \n  :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \
+    \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\
+    \n    :if (\$installOnlyPatchUpdates = true) do={\r\
+    \n      :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\
+    ue) do={\r\
+    \n        :log info \"\$SMP New RouterOS version is available, and it is a\
+    \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\
+    Avail\";\r\
+    \n        :set isOsNeedsToBeUpdated true;\r\
+    \n      } else={\r\
+    \n        :log info \"\$SMP The script will not install this update, becau\
+    se it is not a patch update. Current version: v\$runningVersion, new versi\
+    on: v\$ROsVerAvail\";\r\
+    \n        :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\
+    l not be installed, because the script is set to install only patch update\
+    s.\");\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set isOsNeedsToBeUpdated true;\r\
+    \n      }\r\
+    \n  }\r\
+    \n  # Checking If the script needs to create a backup\r\
+    \n  :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\
+    sOsNeedsToBeUpdated = true) do={\r\
+    \n    :log info (\"\$SMP Starting backup process.\");\r\
+    \n    :set isEmailNeedsToBeSent true;\r\
+    \n    :local backupName \$backupNameTemplate;\r\
+    \n    # This means it's the first step where we create a backup before the\
+    \_update process\r\
+    \n    :if (\$isOsNeedsToBeUpdated = true) do={\r\
+    \n      :set backupName \$backupNameBeforeUpdate;\r\
+    \n      #Email body if the purpose of the script is to update the device\r\
+    \n      :set mailSubjectPartAction \"Update preparation\";\r\
+    \n      :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\
+    s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\
+    \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\
+    el)\");\r\
+    \n      :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \
+    update will proceed only after a successful backup.\");\r\
+    \n      :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\
+    th detailed information will be sent once the update process is completed.\
+    \");\r\
+    \n      :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\
+    eive a second email within the next 10 minutes, there may be an issue. Ple\
+    ase check your device logs for further information.\");\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\
+    sword \$BackupSens];\r\
+    \n      :set mailPtSubjectBackup \"Backup created\";\r\
+    \n      :set mailPtBodyBackup \"System backups have been successfully crea\
+    ted and attached to this email.\";\r\
+    \n    } on-error={\r\
+    \n      :set isOsNeedsToBeUpdated false;\r\
+    \n      :set mailPtSubjectBackup \"Backup failed\";\r\
+    \n      :set mailPtBodyBackup \"The script failed to create backups. Pleas\
+    e check device logs for more details.\";\r\
+    \n      :log warning \"\$SMP Backup creation failed. Update process will b\
+    e canceled if automatic update is enabled\";\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if (\$isEmailNeedsToBeSent = true) do={\r\
+    \n    :log info \"\$SMP Preparing to send email...\";\r\
+    \n    :local mailStep1Subject \$mailSubjectPrefix;\r\
+    \n    :local mailStep1Body  \"\";\r\
+    \n    # subject\r\
+    \n    :if (\$mailSubjectPartAction != \"\")  do={:set mailStep1Subject (\$\
+    mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\
+    \n    :if (\$mailPtSubjectBackup != \"\")  do={:set mailStep1Subject (\$ma\
+    ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\
+    \n    # body\r\
+    \n    :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\
+    Body . \$mailPtBodyAction . \"\\n\\n\")}\r\
+    \n    :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\
+    Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\
+    \n    :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\
+    ________\\n\" . \$mailBodyCopyright);\r\
+    \n    :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\
+    \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\
+    \n    # Send email with backups\r\
+    \n    :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\
+    tep1Body \$mailAttachments} on-error={\r\
+    \n      :set isOsNeedsToBeUpdated false;\r\
+    \n      :log error \"\$SMP The script will not proceed with the update pro\
+    cess, because the email was not sent.\";\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([:len \$mailAttachments] > 0) do={\r\
+    \n    :log info \"\$SMP Cleaning up backup files from the file system...\"\
+    ;\r\
+    \n    /file remove \$mailAttachments;\r\
+    \n    :delay 2s;\r\
+    \n  }\r\
+    \n  :if (\$isOsNeedsToBeUpdated = true) do={\r\
+    \n    :global OldMode;\r\
+    \n    :log info \"\$SMP everything is ready to install new RouterOS, going\
+    \_to start the update process and reboot the device.\";\r\
+    \n    :do {\r\
+    \n      :local nextStep 2;\r\
+    \n      :if (\$isCloudHostedRouter = true) do={\r\
+    \n        :log info \"\$SMP The device is a cloud hosted router, the secon\
+    d step updating the Routerboard firmware will be skipped.\";\r\
+    \n        :set nextStep 3;\r\
+    \n      }\r\
+    \n      :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\
+    UPD-NEXT-BOOT-TASK; \\\r\
+    \n       :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\
+    etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\
+    \n      :delay 10s; /system/script { run \$ScriptName; }\");\r\
+    \n      /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\
+    ledCommand start-time=startup interval=0;\r\
+    \n      /system/package/update install;\r\
+    \n     } on-error={\r\
+    \n      # Failed to install new os version, remove the task and variables\
+    \r\
+    \n      :do {\r\
+    \n        /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\
+    \n        :set BackupAndUpdateMode \$OldMode;\r\
+    \n        :delay 2;\r\
+    \n        :do {\r\
+    \n          :global buGlobalVarTargetOsVersion (a);\r\
+    \n        } on-error={\r\
+    \n          :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\
+    \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\
+    \n        }\r\
+    \n#        :if ([ :len \$OldMode ] > 0) do={\r\
+    \n#          :do {\r\
+    \n#           :global OldMode (a);\r\
+    \n#          } on-error={\r\
+    \n#            :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\
+    move global variable \\\$OldMode failed!\");\r\
+    \n#          }\r\
+    \n#        }\r\
+    \n      } on-error={\r\
+    \n        :log error \"\$SMP Failed to install new RouterOS version. Pleas\
+    e check device logs for more details. \\\r\
+    \n        \\nAnd Failed to remove task and variables! Check it!\";\r\
+    \n        :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \
+    task and global variables!\");\r\
+    \n      }\r\
+    \n      :log error \"\$SMP Failed to install new RouterOS version. Please \
+    check device logs for more details.\";\r\
+    \n      :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\
+    ailed\");\r\
+    \n      :local mailUpdateErrorBody \"The script was unable to install new \
+    RouterOS version. Please check device logs for more details.\";\r\
+    \n      # Send email with error\r\
+    \n      \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\
+    ilUpdateErrorBody \"\";\r\
+    \n      :error \$exitErrorMessage;\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\
+    \n## Runs only if auto-update is enabled and a new RouterOS version was fo\
+    und\r\
+    \n:if (\$scriptStep = 2) do={\r\
+    \n  :log info \"\$SMP The script is in the second step, updating Routerboa\
+    rd firmware.\";\r\
+    \n  :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\
+    entFw to v.\$deviceRbUpgradeFw\";\r\
+    \n  /system routerboard upgrade;\r\
+    \n  :delay 2;\r\
+    \n  :log info \"\$SMP routerboard upgrade process was completed, going to \
+    reboot in a moment!\";\r\
+    \n  ## Set task to send final report on the next boot\r\
+    \n  /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \
+    :global buGlobalVarScriptStep 3; \\\r\
+    \n   :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\
+    \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\
+    \n   :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\
+    me=startup interval=0;\r\
+    \n   :delay 2;\r\
+    \n  /system reboot;\r\
+    \n}\r\
+    \n\r\
+    \n## STEP 3: Final report (after second reboot, with delay).\r\
+    \n## Runs only if auto-update is enabled and a new RouterOS version was fo\
+    und.\r\
+    \n:if (\$scriptStep = 3) do={\r\
+    \n  :log info (\"\$SMP The script is in the third step, sending final repo\
+    rt.\");\r\
+    \n  :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\
+    \n  :do {\r\
+    \n#    /system/script/environment remove [find name=\"buGlobalVarTargetOsV\
+    ersion\"];\r\
+    \n    :global buGlobalVarTargetOsVersion (a);\r\
+    \n  } on-error={\r\
+    \n    :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\
+    al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ :len \$OldMode ] != 0) do={\r\
+    \n    :do {\r\
+    \n#      /system/script/environment remove [find name=\"OldMode\"];\r\
+    \n      :global OldMode (a);\r\
+    \n      } on-error={\r\
+    \n        :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\
+    \_global variable \\\$OldMode failed!\");\r\
+    \n       }\r\
+    \n  }\r\
+    \n  :if ([:len \$targetOsVersion] = 0) do={\r\
+    \n    :log warning \"\$SMP Something is wrong, the script was unable to ge\
+    t the target updated OS version from the global variable.\";\r\
+    \n  }\r\
+    \n  :local mailStep3Subject \$mailSubjectPrefix;\r\
+    \n  :local mailStep3Body  \"\";\r\
+    \n  :if (\$targetOsVersion = \$runningVersion) do={\r\
+    \n    :log info \"\$SMP Successfully verified new RouterOS version: target\
+    : `\$targetOsVersion`, current: `\$runningVersion`\";\r\
+    \n    :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \
+    Backup created\");\r\
+    \n    :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\
+    rade process was completed\");\r\
+    \n    :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\
+    \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\
+    \n    :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \
+    of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\
+    yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\
+    \n    :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\
+    BackupPassword \$BackupSens];\r\
+    \n  } else={\r\
+    \n    :log error \"\$SMP Failed to verify new RouterOS version: target: `\
+    \$targetOsVersion`, current: `\$runningVersion`\";\r\
+    \n    :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\
+    \n    :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\
+    ify that the new RouterOS version was installed, target version: `\$target\
+    OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\
+    re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\
+    \n  }\r\
+    \n  \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\
+    y \$mailAttachments;\r\
+    \n  :if ([:len \$mailAttachments] > 0) do={\r\
+    \n    :log info \"\$SMP Cleaning up backup files from the file system...\"\
+    ;\r\
+    \n    /file remove \$mailAttachments;\r\
+    \n    :delay 2;\r\
+    \n  }\r\
+    \n  :log info (\"\$SMP Final report email sent successfully, and the scrip\
+    t has finished.\");\r\
+    \n}\r\
+    \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \
+    \\n\\n\");\r\
+    \n\r\
+    \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\
+    \n"
+add dont-require-permissions=no name=testGetPubIP owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global DevInfoIncludeIP;\r\
+    \n:global CharacterReplace;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global UrlEncode;\r\
+    \n\r\
+    \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\
+    \n  :global GetPubIp;\r\
+    \n  :local Char (\"\\n\\r\");\r\
+    \n  :local PublicIpAddress [\$GetPubIp];\r\
+    \n#  :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \
+    \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \
+    (\$PublicIpAddress . Char)};\r\
+    \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\
+    n\") do={\r\
+    \n#:log warning \"N is = //n\"; \r\
+    \n#  :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\
+    \" ];\r\
+    \n#}\r\
+    \n#  :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\
+    \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\
+    \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\
+    \n  :log warning \"Public IP address detected: \$PublicIpAddress , len = \
+    \$IpLen\";\r\
+    \n}\r\
+    \n"
+add comment="download, import and update firewall address-lists" \
+    dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: AM-FwAddrLists\r\
+    \n# Script comment: download, import and update firewall address-lists\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\
+    \n:local ExitOK false;\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady; :global GlobalFuncReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \
+    \\\r\
+    \n      do={ :error (\"Global config and/or functions not ready.\"); }; } \
+    delay=500ms max=50;\r\
+    \n  :local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\
+    e ] . \"/\");\r\
+    \n  :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\
+    \n  :local ListsIndex \"index.lst\";\r\
+    \n  :local AddrListsTimeOut 1d;\r\
+    \n  :local CheckCerts false;\r\
+    \n\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchHugeFiles;\r\
+    \n  :global HumanReadableNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global NetMask4;\r\
+    \n  :global NetMask6;\r\
+    \n  :global ScriptLock;\r\
+    \n  \r\
+    \n  :local FindDelim do={\r\
+    \n    :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\
+    jklmnopqrstuvwxyz-\";\r\
+    \n    :for I from=0 to=[ :len \$1 ] do={\r\
+    \n      :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \
+    ] != \"num\") do={\r\
+    \n        :return \$I;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local GetBranch do={\r\
+    \n    :global EitherOr;\r\
+    \n    :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\
+    therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\
+    \n  }\r\
+    \n    \r\
+    \n  :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\
+    \n    :set ExitOK true;\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local ListComment (\"managed by \" . \$ScriptName);\r\
+    \n  :local Url (\$ListsUrl . \$ListsIndex);\r\
+    \n  :local tmpIndex false;\r\
+    \n\r\
+    \n  :for I from=1 to=5 do={\r\
+    \n    :if (\$tmpIndex = false) do={\r\
+    \n      :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\
+    kCerts ] ];\r\
+    \n      :if (\$tmpIndex = false && \$I < 5) do={\r\
+    \n        :log warning (\$ScriptName . \" Failed downloading address-list \
+    index, \" . \$I . \". try from: \" . \$Url);\r\
+    \n        :delay ((\$I * \$I) . \"s\");\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if (\$tmpIndex = false) do={\r\
+    \n    :log warning (\$ScriptName . \" Failed downloading address-list inde\
+    x from: \" . \$Url);\r\
+    \n    :set tmpIndex \"\";\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \
+    options=dsv.plain ] do={\r\
+    \n#    :set List (\$List->0);\r\
+    \n    :local ListName;\r\
+    \n    :local Delim [ \$FindDelim \$List ];\r\
+    \n    :if (\$Delim = 0) do={ :set List \"\"; };\r\
+    \n    :log warning (\$ScriptName . \" Parsing address-list index entry: \"\
+    \_. \$List);\r\
+    \n    :if ([ :len \$List ] = 0) do={\r\
+    \n      :log error (\$ScriptName . \" Failed parsing address-list index en\
+    try: \" . \$List);\r\
+    \n      } else={\r\
+    \n        :set ListName [ :pick \$List 0 \$Delim ];\r\
+    \n      }\r\
+    \n    :log warning (\$ScriptName . \" Parsing address-list index entry: \"\
+    \_. \$ListName . \" - Ok.\");\r\
+    \n    :local ListUrl (\$ListsUrl . \$ListName);\r\
+    \n    :local CntAdd 0;\r\
+    \n    :local CntRenew 0;\r\
+    \n    :local CntRemove 0;\r\
+    \n    :local IPv4Addresses ({});\r\
+    \n    :local IPv6Addresses ({});\r\
+    \n    :local Failure false;\r\
+    \n    :local Data false;\r\
+    \n    :local TimeOut \$AddrListTimeOut;\r\
+    \n\r\
+    \n    :for I from=1 to=5 do={\r\
+    \n      :if (\$Data = false) do={\r\
+    \n        :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\
+    eckCerts ] ];\r\
+    \n        :if (\$Data = false && \$I < 5) do={\r\
+    \n          :log warning (\$ScriptName . \" Failed downloading for list '\
+    \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\
+    \n          :delay ((\$I * \$I) . \"s\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n    }\r\
+    \n\r\
+    \n    :if (\$Data = false) do={\r\
+    \n      :set Data \"\";\r\
+    \n      :set Failure true;\r\
+    \n      :log warning (\$ScriptName . \" Failed downloading for list '\" . \
+    \$ListName . \"' from: \" . \$ListUrl);\r\
+    \n    } else={\r\
+    \n      :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\
+    um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\
+    \_\$ListUrl);\r\
+    \n    }\r\
+    \n\r\
+    \n    :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\
+    tions=dsv.plain ] do={\r\
+    \n      :set Line (\$Line->0);\r\
+    \n      :local Address;\r\
+    \n      :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\
+    \_] - 1) ] = \"}\") do={\r\
+    \n        :do {\r\
+    \n          :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\
+    dr\") ];\r\
+    \n        } on-error={ }\r\
+    \n      } else={\r\
+    \n          :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\
+    ist->\"cidr\"));\r\
+    \n      }\r\
+    \n      :do {\r\
+    \n        :local Branch;\r\
+    \n        :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\
+    .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\
+    \n          :local Net \$Address;\r\
+    \n          :local CIDR 32;\r\
+    \n          :local Slash [ :find \$Address \"/\" ];\r\
+    \n          :if ([ :typeof \$Slash ] = \"num\") do={\r\
+    \n            :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\
+    \n            :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\
+    \_];\r\
+    \n            :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\
+    R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\
+    \n          }\r\
+    \n          :set Branch [ \$GetBranch \$Address ];\r\
+    \n          :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\
+    \n        }\r\
+    \n        :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\
+    \?\\\$\") do={\r\
+    \n          :local Net \$Address;\r\
+    \n          :local CIDR 128;\r\
+    \n          :local Slash [ :find \$Address \"/\" ];\r\
+    \n          :if ([ :typeof \$Slash ] = \"num\") do={\r\
+    \n            :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\
+    \n            :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\
+    \_];\r\
+    \n          }\r\
+    \n          :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\
+    \" . \$CIDR);\r\
+    \n          :set Branch [ \$GetBranch \$Address ];\r\
+    \n          :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\
+    \n        }\r\
+    \n        :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\
+    o={\r\
+    \n          :set Branch [ \$GetBranch \$Address ];\r\
+    \n          :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\
+    \n          :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\
+    \n        }\r\
+    \n      } on-error={ }\r\
+    \n    }\r\
+    \n  \r\
+    \n\r\
+    \n    :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\
+    \n        list=\$ListName comment=\$ListComment ] do={\r\
+    \n      :local Address [ /ip/firewall/address-list/get \$Entry address ];\
+    \r\
+    \n      :local Branch [ \$GetBranch \$Address ];\r\
+    \n      :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\
+    \n      :if ([ :typeof \$TimeOut ] = \"time\") do={\r\
+    \n        :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\
+    ress . \\\r\
+    \n            \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\
+    \");\r\
+    \n        /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\
+    \n        :set (\$IPv4Addresses->\$Branch->\$Address);\r\
+    \n        :set CntRenew (\$CntRenew + 1);\r\
+    \n      } else={\r\
+    \n        :if (\$Failure = false) do={\r\
+    \n          :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\
+    ddress . \\\r\
+    \n              \" from list '\" . \$ListName . \".\");\r\
+    \n          /ip/firewall/address-list/remove \$Entry;\r\
+    \n          :set CntRemove (\$CntRemove + 1);\r\
+    \n        }\r\
+    \n      }\r\
+    \n    }\r\
+    \n\r\
+    \n    :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\
+    \n        list=\$ListName comment=\$ListComment ] do={\r\
+    \n      :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\
+    ;\r\
+    \n      :local Branch [ \$GetBranch \$Address ];\r\
+    \n      :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\
+    \n      :if ([ :typeof \$TimeOut ] = \"time\") do={\r\
+    \n        :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\
+    ress . \\\r\
+    \n            \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\
+    \");\r\
+    \n        /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\
+    \n        :set (\$IPv6Addresses->\$Branch->\$Address);\r\
+    \n        :set CntRenew (\$CntRenew + 1);\r\
+    \n      } else={\r\
+    \n        :if (\$Failure = false) do={\r\
+    \n          :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\
+    ddress . \\\r\
+    \n              \" from list '\" . \$ListName . \".\");\r\
+    \n          /ipv6/firewall/address-list/remove \$Entry;\r\
+    \n          :set CntRemove (\$CntRemove + 1);\r\
+    \n        }\r\
+    \n      }\r\
+    \n    }\r\
+    \n\r\
+    \n    :foreach BranchName,Branch in=\$IPv4Addresses do={\r\
+    \n      :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\
+    );\r\
+    \n      :foreach Address,Timeout in=\$Branch do={\r\
+    \n        :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\
+    ss . \\\r\
+    \n            \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\
+    \");\r\
+    \n        :onerror Err {\r\
+    \n          /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\
+    mment \\\r\
+    \n              address=\$Address timeout=\$Timeout;\r\
+    \n          :set CntAdd (\$CntAdd + 1);\r\
+    \n        } do={\r\
+    \n          :log warning (\$ScriptName . \" Failed to add IPv4 address \" \
+    . \$Address . \\\r\
+    \n              \" to list '\" . \$ListName . \"': \" . \$Err);\r\
+    \n        }\r\
+    \n      }\r\
+    \n    }\r\
+    \n\r\
+    \n    :foreach BranchName,Branch in=\$IPv6Addresses do={\r\
+    \n      :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\
+    );\r\
+    \n      :foreach Address,Timeout in=\$Branch do={\r\
+    \n        :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\
+    ss . \\\r\
+    \n            \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\
+    \");\r\
+    \n        :onerror Err {\r\
+    \n          /ipv6/firewall/address-list/add list=\$ListName comment=\$List\
+    Comment \\\r\
+    \n              address=\$Address timeout=\$Timeout;\r\
+    \n          :set CntAdd (\$CntAdd + 1);\r\
+    \n        } do={\r\
+    \n          :log warning (\$ScriptName . \" Failed to add IPv6 address \" \
+    . \$Address . \\\r\
+    \n              \" to list '\" . \$ListName . \"': \" . \$Err);\r\
+    \n        }\r\
+    \n      }\r\
+    \n    }\r\
+    \n\r\
+    \n    :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\
+    \n        \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \
+    \")\" . \\\r\
+    \n        \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\
+    \n        \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\
+    \n        \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\
+    \n}\r\
+    \n"
+add dont-require-permissions=no name=awg-env owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\
+    container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\
+    \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\
+    7.79:55055\"\
+    \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\
+    \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\
+    \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\
+    \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\
+    \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\
+    \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\
+    \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\
+    \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\
+    38637\"\
+    \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\
+    09250\"\
+    \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\
+    9079495\"\
+    \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\
+    2329741\"\
+    \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"<b 0x000100142\
+    112a442><r 12><b 0x80220008636f7475726e2d3480280004><r 4>\"\
+    \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"<r 32><t>\"\
+    \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"<rd 16><r 24>\
+    \"\
+    \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"<t><rc 20>\"\
+    \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"<r 38>\"\
+    \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\
+    1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\
+    \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\
+    ace/wireguard/get [find name=wg-awg-proxy] public-key]"
+add dont-require-permissions=no name=awg-container-add owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\
+    container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\
+    xy envlist=awg-proxy-env \\\
+    \n    hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \
+    start-on-boot=yes\
+    \n/container/start [find where tag~\"awg-proxy\"]"
+add dont-require-permissions=yes name=awg2-webui owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    put \"Download image, and save him to usb1/tmp\"\
+    \n/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-chr.tar\" dst-p\
+    ath=sata1/tmp/awg2-webui.tar\
+    \n\
+    \n:put \"1. Create veth interface\"\
+    \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\
+    \n\
+    \n:put \"2. Create bridge and add veth\"\
+    \n/interface bridge add name=br-awg\
+    \n/interface bridge port add bridge=br-awg interface=veth-awg\
+    \n\
+    \n:put \"3. Assign IP to bridge\"\
+    \n/ip address add address=10.9.9.1/24 interface=br-awg\
+    \n\
+    \n:put \"4. NAT: masquerade container traffic\"\
+    \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\
+    ade\
+    \n\
+    \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\
+    \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 action=dst-n\
+    at to-addresses=10.9.9.2 to-ports=55055 in-interface=ether1\
+    \n\
+    \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\
+    \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 action=dst-\
+    nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether1\
+    \n\
+    \n:put \"Create environment list..\"\
+    \n/container envs add list=awgui-env key=WEB_USER value=vados\
+    \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\
+    \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\
+    mboLs2325272931q\
+    \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\
+    3\
+    \n\
+    \n:put \"Load and start container...\"\
+    \n/container add file=sata1/tmp/awg2-webui.tar interface=veth-awg hostname\
+    =awg2-webui \\\
+    \nroot-dir=sata1/awg2-webui layer-dir=sata1/docker/awg2-webu/ envlist=awgu\
+    i-env start-on-boot=yes logging=yes shm-size=4M\
+    \n\
+    \n:put \"Start...\"\
+    \n/container start 0\
+    \n\
+    \n:put \"Verify...\"\
+    \n/container print\
+    \n\
+    \n:put \"Should show: status=running\"\
+    \n\
+    \n/log print where topics~\"container\"\
+    \n\
+    \n:put \"Should show: AWG started, nginx running\"\
+    \n"
+add dont-require-permissions=no name=awg-proxy-go-Client owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \n:put \"[::::::::::::::: START :::::::::::::::]\"\
+    \n:put \"\"\
+    \n:put \"Add ram disk tmpfs\"\
+    \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\
+    \n\
+    \n:put \"veth and network:\"\
+    \n /interface/bridge add name=docker port-cost-mode=short\
+    \n /ip/address/add address=192.168.100.1/24 interface=docker\
+    \n\
+    \n /interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\
+    =awg-proxy-go-client\
+    \n /interface/bridge/port add bridge=docker interface=awg-proxy-go-client\
+    \n\
+    \n:put \"add config-client.json\"\
+    \n/file/add name=sata1/mounts/awg-proxy-go/config-client.json\
+    \n/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json d\
+    st=/app/config.json list=awgcfg-client\
+    \n\
+    \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\
+    d64.tar.gz\"\
+    \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\
+    4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\
+    \n\
+    \n:put \"Add container\"\
+    \n/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interface\
+    =awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-proxy\
+    -client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pro\
+    xy-go-client\" mountlists=awgcfg-client\
+    \n\
+    \n:put \"Start container\"\
+    \n#/container/start awg-proxy-go-client\
+    \n\
+    \n:put \"Add user:\"\
+    \n /user/add address=192.168.100.2 group=write name=awg-proxy-go password=\
+    peskar55\
+    \n\
+    \n:put \"Add forwarding port web-ui\"\
+    \n /ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\
+    face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\
+    \n\
+    \n:put \"Add native WireGuard-server wg-awg, add address.\"\
+    \n /interface/wireguard/add name=wg-awg-client\
+    \n /ip/address/add address=172.17.0.1/24 interface=wg-awg-client\
+    \n\
+    \n:put \"\"\
+    \n:put \"[::::::::::::::: END :::::::::::::::]\"\
+    \n"
+add comment=awg2wg dont-require-permissions=no name=awg2wg-uninstall owner=\
+    Manager policy=ftp,read,write,policy source="\r\
+    \n  :put \"Uninstalling AmneziaWG...\"\r\
+    \n  :log info \"Uninstalling AmneziaWG...\"\r\
+    \n  /ip/route/remove [find where comment=awg2wg-tunnel]\r\
+    \n  :do { /tool/netwatch/remove [find where comment=Monitor-AWG2WG] } on-e\
+    rror={}\r\
+    \n  :do { /ip/route/remove [find where comment=Monitor-AWG2WG] } on-error=\
+    {}\r\
+    \n  /container/stop [find where interface=veth-awg2wg]\r\
+    \n  :delay 7s\r\
+    \n  /interface/list/member/remove [find where interface=wg-awg2wg]\r\
+    \n  /container/remove [find where interface=veth-awg2wg]\r\
+    \n  /container/envs/remove [find where list=\"awg2wg-env\"]\r\
+    \n  /ip/firewall/nat/remove [find where out-interface=\"wg-awg2wg\"]\r\
+    \n  /ip/address/remove [find where address=\"172.20.0.1/30\"]\r\
+    \n  /interface/veth/remove [find where name=\"veth-awg2wg\"]\r\
+    \n  /interface/wireguard/peers/remove [find where interface=\"wg-awg2wg\"]\
+    \r\
+    \n  /ip/address/remove [find where interface=\"wg-awg2wg\"]\r\
+    \n  /interface/wireguard/remove [find where name=\"wg-awg2wg\"]\r\
+    \n  :do { /file/remove [find where name~\"awg2wg.+tar\"] } on-error={}\r\
+    \n  :do { /file/remove [find where name=\"disk1/awg2wg\"] } on-error={}\r\
+    \n  :put \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  :log info \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  /system/script/remove [find where name=awg2wg-uninstall]\r\
+    \n"
+add dont-require-permissions=no name=amneziawg-mikrotik-c owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\
+    \n:global imagesPath \"amneziawg/img/\";\
+    \n:local Image \"awg-proxy-amd64-7.20-Docker.tar.gz\";\
+    \n\
+    \n:global DstDir \"sata1/dst/\";\
+    \n\
+    \n:local Url=(\$GlobalScriptsUrl . \$ImagesPath . \$Image);\
+    \n\
+    \n\
+    \n\
+    \n\
+    \n\
+    \n\
+    \n\
+    \n\
+    \n\
+    \n\
+    \n\
+    \n\
+    \n\
+    \n\
+    \n\
+    \n\
+    \n\
+    \n\
+    \n\
+    \n\
+    \n"
+add comment=Generator dont-require-permissions=no name=awg-VDSina owner=vados \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="# ============================================================\
+    \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\
+    \n# 2026-06-30 22:08:12\
+    \n# ============================================================\
+    \n\
+    \n# 0. Check prerequisites\
+    \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \
+    = 0) do={\
+    \n  :put \"Container package is not installed or disabled. Install it and \
+    reboot.\"\
+    \n  :error \"Usage: /system/device-mode/update container=yes\"\
+    \n}\
+    \n\
+    \n# Auto-detect storage\
+    \n:global awgDisk \"disk1\"\
+    \n{\
+    \n  :local usbFree 0\
+    \n  :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \
+    } on-error={}\
+    \n  :if (\$usbFree > 0) do={\
+    \n    :set awgDisk \"usb1\"\
+    \n    :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\
+    \n  } else={\
+    \n    :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\
+    \n      :put \"USB found but not mounted. Format as ext4\?\"\
+    \n      :put \"Press 'y' to confirm:\"\
+    \n      :local key [/terminal/inkey timeout=30]\
+    \n      :if (\$key = 121 || \$key = 89) do={\
+    \n        /disk/format-drive usb1 file-system=ext4 label=usb1\
+    \n        :delay 3s\
+    \n        :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \
+    free] } on-error={}\
+    \n        :if (\$usbFree > 0) do={\
+    \n          :set awgDisk \"usb1\"\
+    \n        } else={ :put \"Format failed, using disk1\" }\
+    \n      } else={ :put \"Using disk1\" }\
+    \n    } else={ :put \"No USB, using disk1\" }\
+    \n  }\
+    \n}\
+    \n\
+    \n# 1. Uninstall script\
+    \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\
+    \n  :put \"Uninstallimg AmneziaWG...\"\
+    \n  :log info \"Uninstallimg AmneziaWG...\"\
+    \n  :local prevDNS \"\"\
+    \n  :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\
+    env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\
+    \n  :local storageDisk \"disk1\"\
+    \n  :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\
+    ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\
+    \n  :local prevTmpdir \"\"\
+    \n  :if (\$storageDisk != \"disk1\") do={\
+    \n    :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\
+    Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\
+    \n  }\
+    \n  /ip/route/remove [find where comment=awg-VDSina-tunnel]\
+    \n  /ip/route/remove [find where comment=awg-VDSina-dns]\
+    \n  /container/stop [find where interface=veth-awg-VDSina]\
+    \n  :delay 7s\
+    \n  /container/remove [find where interface=veth-awg-VDSina]\
+    \n  /container/envs/remove [find where list=\"awg-VDSina-env\"]\
+    \n  :if (\$prevDNS != \"\") do={\
+    \n    :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\
+    \n    :put (\"DNS restored to: \$prevDNS\")\
+    \n  }\
+    \n  :if (\$storageDisk != \"disk1\") do={\
+    \n    /container/config set tmpdir=\$prevTmpdir\
+    \n    :put (\"Container tmpdir restored to: \$prevTmpdir\")\
+    \n  }\
+    \n  /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\
+    \n  /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\
+    \n  /ip/address/remove [find where address=\"172.19.75.209/30\"]\
+    \n  /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\
+    \n  /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\
+    a\"]\
+    \n  /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\
+    \n  /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\
+    \n  :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\
+    \n  :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\
+    \_} on-error={}\
+    \n  :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\
+    out.rsc\")] } on-error={}\
+    \n  :if (\$storageDisk != \"disk1\") do={\
+    \n    :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\
+    n-error={}\
+    \n  }\
+    \n  :put \"Uninstall AmneziaWG Proxy complete!\"\
+    \n  :log info \"Uninstall AmneziaWG Proxy complete!\"\
+    \n  /system/script/remove [find where name=awg-VDSina-uninstall]\
+    \n}\
+    \n\
+    \n# 2. Network infrastructure\
+    \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\
+    y=172.19.75.209\
+    \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\
+    \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\
+    5.208/30\
+    \n\
+    \n# 3. WireGuard interface (MikroTik derives the public key automatically)\
+    \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"4CHyNhbOs923/E\
+    yNDguMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=14710 disabled=yes\
+    \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\
+    Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcY\
+    QnD9N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=172.19.75.210 endpoint-po\
+    rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\
+    \n/ip/address/add address=10.9.0.3/32 interface=wg-awg-VDSina\
+    \n\
+    \n# 4. Container environment variables\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":51820\"\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\
+    77.79:55055\"\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\
+    438637\"\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\
+    809250\"\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\
+    09079495\"\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\
+    12329741\"\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\
+    l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\
+    face/wireguard/get [find name=wg-awg-VDSina] public-key]\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"<b 0x00010014\
+    2112a442><r 12><b 0x80220008636f7475726e2d3480280004><r 4>\"\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"<r 32><t>\"\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"<rd 16><r 24>\
+    \"\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"<t><rc 20>\"\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"<r 38>\"\
+    \n\
+    \n# 5. DNS\
+    \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\
+    n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\
+    \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\
+    g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\
+    \n# NOTE: replaces existing DNS configuration\
+    \n/ip/dns/set servers=109.107.177.79\
+    \n/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina distan\
+    ce=1 comment=awg-VDSina-dns\
+    \n\
+    \n# 6. Download, create and start container\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\
+    \n:if (\$awgDisk != \"disk1\") do={\
+    \n  :local tmpPath (\$awgDisk . \"/pull\")\
+    \n  /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\
+    ntainer/config/get tmpdir]\
+    \n  /container/config set tmpdir=\$tmpPath memory-high=200M\
+    \n}\
+    \n{\
+    \n  :local arch [/system/resource/get architecture-name]\
+    \n  :local ver [/system/resource/get version]\
+    \n  :local dotPos [:find \$ver \".\"]\
+    \n  :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\
+    \n  :local endPos [:find \$rest \".\"]\
+    \n  :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \
+    \"] }\
+    \n  :local minor [:tonum [:pick \$rest 0 \$endPos]]\
+    \n  :local suffix \"\"\
+    \n  :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\
+    \n  :local file \"\"\
+    \n  :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\
+    x . \".tar.gz\") }\
+    \n  :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \
+    \".tar.gz\") }\
+    \n  :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \
+    . \".tar.gz\") }\
+    \n  :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\
+    \n  :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\
+    atest/download/\$file\"\
+    \n  :local filePath \$file\
+    \n  :if (\$awgDisk != \"disk1\") do={\
+    \n    :set filePath (\$awgDisk . \"/pull/\" . \$file)\
+    \n    :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\
+    \n  }\
+    \n  :if ([:len [/file/find where name=\$filePath]] = 0) do={\
+    \n    :local freeStorage 0\
+    \n    :if (\$awgDisk = \"disk1\") do={\
+    \n      :set freeStorage [/system/resource/get free-hdd-space]\
+    \n    } else={\
+    \n      :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\
+    k] free] } on-error={}\
+    \n    }\
+    \n    :if (\$freeStorage < 262144) do={\
+    \n      :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\
+    B free). Need at least 256KB.\")\
+    \n      :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\
+    cient-disk-space\"\
+    \n      :error \"Insufficient disk space\"\
+    \n    }\
+    \n    :put (\"Fetching: \$url -> \" . \$filePath)\
+    \n    /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\
+    \n  } else={\
+    \n    :put (\"File already exists: \" . \$filePath)\
+    \n  }\
+    \n  :local rootDir (\$awgDisk . \"/awg-VDSina\")\
+    \n  /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\
+    DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\
+    yes comment=awg-VDSina\
+    \n  :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\
+    =veth-awg-VDSina] shm-size=4M\"] }\
+    \n  /file/remove \$filePath\
+    \n  :local freeMem [/system/resource/get free-memory]\
+    \n  :if (\$freeMem < 16777216) do={\
+    \n    :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\
+    . 16MB+ recommended.\")\
+    \n  }\
+    \n  /container/start [find where interface=veth-awg-VDSina]\
+    \n  :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\
+    }\
+    \n  :put \"Waiting for container to start...\"\
+    \n  :delay 5s\
+    \n  /interface/wireguard/enable wg-awg-VDSina\
+    \n  :put \"WireGuard interface enabled\"\
+    \n  :put \"Installation complete!\"\
+    \n  :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\
+    \"\
+    \n  /ping 109.107.177.79 count=10 interval=1\
+    \n  :put \"\"\
+    \n  :put \"======= NEXT STEPS =======\"\
+    \n  :put \"\"\
+    \n  :put \"Route specific traffic through the AmneziaWG tunnel:\"\
+    \n  :put \"\"\
+    \n  :put \"  Route a single host:\"\
+    \n  :put \"    /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \
+    comment=awg-VDSina-tunnel\"\
+    \n  :put \"\"\
+    \n  :put \"  Route a subnet:\"\
+    \n  :put \"    /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\
+    \_comment=awg-VDSina-tunnel\"\
+    \n  :put \"\"\
+    \n  :put \"  Remove a route:\"\
+    \n  :put \"    /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\
+    address=8.8.8.8/32]\"\
+    \n  :put \"\"\
+    \n  :put \"  Show all tunnel routes:\"\
+    \n  :put \"    /ip/route/print where comment=awg-VDSina-tunnel\"\
+    \n  :put \"\"\
+    \n  :put \"  Uninstall:\"\
+    \n  :put \"    /system/script/run awg-VDSina-uninstall\"\
+    \n  :put \"=========================\"\
+    \n}\
+    \n\
+    \n# 7. Verification\
+    \n# /container/print\
+    \n# /interface/wireguard/print\
+    \n# /interface/wireguard/peers/print\
+    \n"
+add comment="wg2awg GH repo in client mode" dont-require-permissions=no name=\
+    "wg2awg client" owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \n:local Arch \"amd64\";\
+    \n:local Version \"v0.0.1\";\
+    \n:local WorkDisk \"sata1\";\
+    \n:local Name wg2awg;\
+    \n:local Bridge (\"Bridge-\" . \$Name);\
+    \n:local VetchMTU \"1280\";\
+    \n:local Vetch (\"vetch-\" . \$Name);\
+    \n:local VetchNet \"10.9.0.0\";\
+    \n:local VetchGate \"10.9.0.1\";\
+    \n:local VetchAddr \"10.9.0.3/32\";\
+    \n:local Env (\$Name . \"-env\");\
+    \n:local ConfDir (\"/etc/\" . \$Name . \"/\");\
+    \n:local ConfFile (\$Name . \".conf\");\
+    \n:local Mounts (\$WorkDisk . \"/mounts/\" . \$Name . \"/\");\
+    \n:local RootDir (\$WorkDisk . \"/\" . \$Name);\
+    \n:local Registry \"https://registry-1.docker.io\";\
+    \n:local FetchFile (\$Name . \"-\" . \$Arch . \"-oci.tar\");\
+    \n:local FetchUrl (\"https://github.com/vados-dev/wg2awg/releases/download\
+    /\" . \$Version . \"/\" . \$FetchFile);\
+    \n:local FetchDir  (\$WorkDisk . \"/dst/\");\
+    \n:local AwgListen \":44044\";\
+    \n:local AwgRemote \"109.107.177.79\";\
+    \n\
+    \n#:put \"\"\
+    \n#put \"Add ram disk tmpfs\"\
+    \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\
+    \n\
+    \n\
+    \n:log warning \"[::::::::::::::: START :::::::::::::::]\"\
+    \n:log warning \"Add veth and nat...\";\
+    \n:do {\
+    \n:log warning (\"Remove interface: name=\" . \$Vetch . \", address=\" . \
+    \$VetchAddr . \", gateway=\" . \$VetchGate);\
+    \n/interface/veth/remove [find name=\$Vetch];\
+    \n:log warning (\"Add interface: name=\" . \$Vetch . \", address=\" . \$Ve\
+    tchAddr . \", gateway=\" . \$VetchGate);\
+    \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\
+    ;\
+    \n:log warning (\"Remove ip address: address=\" . \$VetchGate . \", interf\
+    ace=\" . \$Vetch);\
+    \n/ip/address/remove [find address=\$VetchGate interface=\$Vetch];\
+    \n:log warning (\"Add ip address: address=\" . \$VetchGate . \", interface\
+    =\" . \$Vetch);\
+    \n/ip/address/add address=\$VetchGate interface=\$Vetch;\
+    \n:log warning (\"Remove firewall nat rule: chain=srcnat action=masquerade\
+    \_src-address=\" . \$VetchNet . \"/24\");\
+    \n/ip/firewall/nat/remove [find chain=srcnat action=masquerade src-address\
+    =(\$VetchNet . \"/24\")];\
+    \n:log warning (\"Add firewall nat rule: chain=srcnat action=masquerade sr\
+    c-address=\" . \$VetchNet . \"/24\");\
+    \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=(\$VethN\
+    et . \"/24\");\
+    \n} on-error={}\
+    \n\
+    \n#:do {\
+    \n#/file add type=directory name=\$Mounts\
+    \n#} on-error={}\
+    \n\
+    \n\
+    \n:do {\
+    \n:log warning (\"Remove config file \" . \$Mounts . \$ConfFile . \"...\")\
+    ;\
+    \n/file remove [find name=(\$Mounts . \$ConfFile)];\
+    \n:log warning (\"Add config file \" . \$Mounts . \$ConfFile . \"...\");\
+    \n/file add type=file name=(\$Mounts . \$ConfFile) contents=\"[Interface]\
+    \nPrivateKey = 4CHyNhbOs923/EyNDguMXJXdghL2I3UyzXPwrANVgHs=\
+    \nAddress = \$VetchAddr\
+    \nMTU = \$VetchMTU\
+    \nDNS = 109.107.177.79\
+    \nPreUp = ip route add 109.107.177.79/32 via \$VetchGate dev \$Vetch\
+    \nPostDown = ip route del 109.107.177.79/32 via \$VetchGate dev \$Vetch\
+    \nJc = 9\
+    \nJmin = 105\
+    \nJmax = 920\
+    \nS1 = 90\
+    \nS2 = 136\
+    \nS3 = 45\
+    \nS4 = 27\
+    \nH1 = 472437748-472438637\
+    \nH2 = 707808381-707809250\
+    \nH3 = 1609078552-1609079495\
+    \nH4 = 1012329484-1012329741\
+    \nI1 = <b 0x000100142112a442><r 12><b 0x80220008636f7475726e2d3480280004><\
+    r 4>\
+    \nI2 = <r 32><t>\
+    \nI3 = <rd 16><r 24>\
+    \nI4 = <t><rc 20>\
+    \nI5 = <r 38>\
+    \n\
+    \n[Peer]\
+    \nPublicKey = o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\
+    \nAllowedIPs = 0.0.0.0/0\
+    \nEndpoint = \$AwgRemote\
+    \nPersistentKeepalive = 10\
+    \nPresharedKey = RNvF7T1cg5tyXcYQnD9N5BEp6e20vVJQTv0GMjyvHU0=\";\
+    \n} on-error={}\
+    \n\
+    \n\
+    \n:do {\
+    \n:log warning (\"Remove mounts list \$Env...\");\
+    \n/container/mounts/remove [find list=\$Env];\
+    \n:log warning (\"Add mounts list \$Env...\");\
+    \n/container/mounts/add src=(\$Mounts . \$ConfFile) dst=(\$ConfDir . \$Con\
+    fFile) list=\$Env mode=ro;\
+    \n:log warning (\"Remove Environment keys.\");\
+    \n/container/envs/remove [find list=\$Env];\
+    \n:log warning (\"Add Environment keys.\");\
+    \n/container/envs/add list=\$Env key=AWG_CONFIG value=(\$ConfDir . \$ConfF\
+    ile);\
+    \n/container/envs/add list=\$Env key=AWG_LISTEN value=\$AwgListen\
+    \n/container/envs/add list=\$Env key=AWG_REMOTE value=\$AwgRemote\
+    \n/container/envs/add list=\$Env key=AWG_MODE value=client\
+    \n} on-error={}\
+    \n\
+    \n:do {\
+    \n:log warning (\"Remove \" . \$WorkDisk . \"/tmp\");\
+    \n/file remove [find name=(\$WorkDisk . \"/tmp\")];\
+    \n:log warning (\"Add \" . \$WorkDisk . \"/tmp\");\
+    \n/file add type=directory name=(\$WorkDisk . \"/tmp\");\
+    \n:log warning (\"Container add tmpdir \" . \$WorkDisk . \"/tmp\");\
+    \n/container config set tmpdir=(\$WorkDisk . \"/tmp\");\
+    \n} on-error={}\
+    \n\
+    \n:do {\
+    \n:log warning (\"Remove \" . \$FetchDir  . \$FetchFile . \".\");\
+    \n/file remove [find name=(\$FetchDir  . \$FetchFile)];\
+    \n:log warning (\"Download image from \" . \$FetchUrl . \" and save him to\
+    \_\" . \$FetchDir  . \$FetchFile . \".\");\
+    \n/tool/fetch url=\$FetchUrl dst-path=(\$FetchDir . \$FetchFile);\
+    \n} on-error={}\
+    \n\
+    \n#:log warning (\"Container set registry \" . \$Registry . \" tmpdir= \" \
+    . \$WorkDisk . \"/tmp\");\
+    \n#/container/config/set registry-url=\$Registry tmpdir=(\$WorkDisk . \"/t\
+    mp\");\
+    \n\
+    \n:do {\
+    \n:log warning (\"Container add width: hostname=\" . \$Name . \", mountlis\
+    ts=\" . \$Env . \", file=\" . \$FetchDir  . \$FetchFile . \", envlist=\" .\
+    \_\$Env . \", root-dir=\" . \$RootDir . \", logging=yes, start-on-boot=yes\
+    \");\
+    \n/container/add hostname=\$Name mountlists=\$Env file=(\$FetchDir . \$Fet\
+    chFile) interface=\$Vetch envlist=\$Env root-dir=\$RootDir logging=yes sta\
+    rt-on-boot=yes;\
+    \n} on-error={}\
+    \n\
+    \n\
+    \n#/container/start [find where interface=\$Vetch];\
+    \n\
+    \n#/interface/bridge add name=\$Bridge port-cost-mode=short;\
+    \n#/ip/address/add address=192.168.100.1/24 interface=\$Bridge;\
+    \n\
+    \n#/interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\
+    =awg-proxy-go-client\
+    \n#/interface/bridge/port add bridge=docker interface=awg-proxy-go-client\
+    \n\
+    \n#:put \"add config-client.json\"\
+    \n#/file/add name=sata1/mounts/awg-proxy-go/config-client.json\
+    \n#/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json \
+    dst=/app/config.json list=awgcfg-client\
+    \n\
+    \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\
+    d64.tar.gz\"\
+    \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\
+    4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\
+    \n\
+    \n#:put \"Add container\"\
+    \n#/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interfac\
+    e=awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-prox\
+    y-client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pr\
+    oxy-go-client\" mountlists=awgcfg-client\
+    \n\
+    \n#:put \"Start container\"\
+    \n#/container/start awg-proxy-go-client\
+    \n\
+    \n#:put \"Add user:\"\
+    \n#/user/add address=192.168.100.2 group=write name=awg-proxy-go password=\
+    peskar55\
+    \n\
+    \n#:put \"Add forwarding port web-ui\"\
+    \n#/ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\
+    face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\
+    \n\
+    \n#:put \"Add native WireGuard-server wg-awg, add address.\"\
+    \n#/interface/wireguard/add name=wg-awg-client\
+    \n#/ip/address/add address=172.17.0.1/24 interface=wg-awg-client\
+    \n\
+    \n:put \"\"\
+    \n:put \"[::::::::::::::: END :::::::::::::::]\"\
+    \n"
+/user group
+add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\
+    !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api"
+add name=manager policy="local,ssh,ftp,read,write,policy,api,rest-api,!telnet,\
+    !reboot,!test,!winbox,!password,!web,!sniff,!sensitive,!romon"
+/app
+set cinny firewall-redirects=8094:80:tcp:web
+set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest
+set home-assistant container-command-lines=\
+    home-assistant:none:lscr.io/linuxserver/homeassistant
+set n8n firewall-redirects=5678:5678:tcp:web
+set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\
+    e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\
+    ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\
+    ache"
+set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\
+    bserver_api_password=password"
+set redlib firewall-redirects=8087:8080:tcp:web
+set solr container-command-lines=solr:none:docker.io/solr:latest
+set uptime-kuma container-command-lines=\
+    uptime-kuma:none:docker.io/louislam/uptime-kuma:1
+/app settings
+set auto-update=yes disk=*7 lan-bridge=*3 registry-mirrors="https://reg.vados.\
+    ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io"
+/caps-man aaa
+set called-format=ssid
+/caps-man access-list
+add action=reject allow-signal-out-of-range=10s disabled=no interface=all \
+    signal-range=-120..-80 ssid-regexp=""
+add action=accept allow-signal-out-of-range=10s disabled=no interface=all \
+    signal-range=-79..120 ssid-regexp=""
+/caps-man configuration
+add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\
+    ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\
+    0,1,2,3
+add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \
+    installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \
+    ssid=vados5g tx-chains=0,1,2,3
+add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\
+    XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \
+    datapath=DataPath datapath.client-to-client-forwarding=yes \
+    .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \
+    rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3
+add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\
+    XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \
+    .skip-dfs-channels=yes country=belarus datapath=DataPath \
+    datapath.client-to-client-forwarding=yes .local-forwarding=yes \
+    hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\
+    vados5g
+/caps-man datapath
+add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\
+    xs-DataPath
+add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\
+    DataPath
+/caps-man manager
+set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \
+    enabled=yes require-peer-certificate=yes
+/caps-man manager interface
+set [ find default=yes ] forbid=yes
+add disabled=no interface=BridgeLAN
+/caps-man provisioning
+add action=create-dynamic-enabled hw-supported-modes=g,gn,b \
+    master-configuration=2G name-format=prefix-identity name-prefix=2G
+add action=create-dynamic-enabled hw-supported-modes=an,ac,a \
+    master-configuration=5G name-format=prefix-identity name-prefix=5G
+add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \
+    master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac
+add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \
+    master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an
+/certificate settings
+set crl-store=system
+/container config
+set layer-dir=/sata1/docker/layers memory-high=200.0MiB memory-max=4096.0MiB \
+    registry-url=https://registry-1.docker.io tmpdir=/sata1/tmp username=\
+    amsternl
+/container envs
+add key=AWG_CONFIG list=wg2awg-env value=/etc/wg2awg/wg2awg.conf
+add key=AWG_LISTEN list=wg2awg-env value=:44044
+add key=AWG_MODE list=wg2awg-env value=client
+add key=AWG_REMOTE list=wg2awg-env value=109.107.177.79
+/container mounts
+add dst=/etc/wg2awg/wg2awg.conf list=wg2awg-env mode=ro src=\
+    /sata1/mounts/wg2awg/wg2awg.conf
+/ip smb
+set enabled=no
+/interface bridge port
+add bridge=BridgeLAN interface=*136
+add bridge=BridgeLAN interface=*137
+add bridge=bridge1 interface=ether1
+/ipv6 settings
+set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes
+/interface detect-internet
+set detect-interface-list=WAN internet-interface-list=Internet \
+    lan-interface-list=LAN wan-interface-list=WAN
+/interface list member
+add interface=ether1 list=WAN
+add interface=BridgeLAN list=LAN
+/interface wifi cap
+set discovery-interfaces=*DF
+/interface wifi capsman
+set package-path=/tmpfs/capsman-packages upgrade-policy=none
+/interface wireguard peers
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 comment=\
+    "Peer for MikroMaster connection" endpoint-address=10.30.30.81 \
+    endpoint-port=33033 interface=MASTER name=MASTER persistent-keepalive=10s \
+    public-key="zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4="
+/ip address
+add address=10.30.30.10/24 interface=ether1 network=10.30.30.0
+add address=10.10.0.2 interface=MASTER network=10.10.0.0
+/ip dhcp-client
+add disabled=yes interface=ether1 name=client1
+/ip dhcp-server
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \
+    dhcp-option-set=domain-search-set disabled=yes interface=*3 lease-script=\
+    lease-script lease-time=10m name=nucDHCP server-address=10.30.30.10
+/ip dns
+set allow-remote-requests=yes doh-max-concurrent-queries=100 \
+    doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \
+    verify-doh-cert=yes
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+/ip route
+add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
+    10.30.30.81 routing-table=main scope=30 target-scope=10
+/ip service
+set ftp disabled=yes
+set reverse-proxy disabled=yes
+set ssh port=2222
+set www-ssl port=4443
+set api-ssl disabled=yes
+/ip service webserver
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\
+    no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \
+    webfig-secure=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required \
+    strong-crypto=yes
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=*3 type=external
+add interface=*B5 type=internal
+/ipv6 firewall address-list
+add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address
+add address=2606:4700::/32 list=CLOUDFLARE-IP-Address
+add address=2803:f800::/32 list=CLOUDFLARE-IP-Address
+add address=2405:b500::/32 list=CLOUDFLARE-IP-Address
+add address=2405:8100::/32 list=CLOUDFLARE-IP-Address
+add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address
+add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address
+/special-login
+add port=serial0
+/system clock
+set time-zone-autodetect=no time-zone-name=Europe/Moscow
+/system gps
+set set-system-time=yes
+/system identity
+set name=MikroNUC
+/system note
+set show-at-login=no
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes
+/system ntp client servers
+add address=10.30.30.81
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+/system scheduler
+add comment="Every Day Set Global Environment Variables" disabled=yes name=\
+    AM-SetGlobalEnv on-event=\
+    "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \
+    name=AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\
+    mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \
+    on-event="/system/script/run mod/AM-TG-Bot;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment=\
+    "Every 7 Day Check For Update and Backup send notification to EMail." \
+    disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\
+    "/system/script { run AM-Backup-UpdateEmail; }" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-date=2026-06-25 start-time=03:41:27
+/tool e-mail
+set certificate-verification=no from=MikroNUC<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/user aaa
+set accounting=no
diff --git a/MikroNUC/history/20260703/20260703064001-Diff-Config.rsc b/MikroNUC/history/20260703/20260703064001-Diff-Config.rsc
new file mode 100644
index 0000000..2ec3361
--- /dev/null
+++ b/MikroNUC/history/20260703/20260703064001-Diff-Config.rsc
@@ -0,0 +1,90 @@
+27a28,30
+> /interface veth
+> add address=172.18.0.2/30 container-mac-address=00:00:00:00:00:00 dhcp=no \
+>     gateway=172.18.0.1 gateway6="" name=vetch-wg2awg
+35a39,44
+> /container
+> # download/extract error: no manifest.json in archive
+> add envlists=wg2awg-env file=sata1/dst/wg2awg-amd64-oci.tar.gz hostname=\
+>     wg2awg interface=vetch-wg2awg layer-dir=/sata1/docker/layers logging=yes \
+>     mountlists=wg2awg-env name=wg2awg-amd64-oci root-dir=/sata1wg2awg \
+>     start-on-boot=yes
+5058d5066
+<     \n:local VetchMTU \"1280\";\
+5060,5062d5067
+<     \n:local VetchNet \"10.9.0.0\";\
+<     \n:local VetchGate \"10.9.0.1\";\
+<     \n:local VetchAddr \"10.9.0.3/32\";\
+5067c5072
+<     \n:local RootDir (\$WorkDisk . \"/\" . \$Name);\
+---
+>     \n:local RootDir (\$WorkDisk . \$Name);\
+5073,5074d5077
+<     \n:local AwgListen \":44044\";\
+<     \n:local AwgRemote \"109.107.177.79\";\
+5084,5104c5087,5091
+<     \n:log warning (\"Remove interface: name=\" . \$Vetch . \", address=\" . \
+<     \$VetchAddr . \", gateway=\" . \$VetchGate);\
+<     \n/interface/veth/remove [find name=\$Vetch];\
+<     \n:log warning (\"Add interface: name=\" . \$Vetch . \", address=\" . \$Ve\
+<     tchAddr . \", gateway=\" . \$VetchGate);\
+<     \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\
+<     ;\
+<     \n:log warning (\"Remove ip address: address=\" . \$VetchGate . \", interf\
+<     ace=\" . \$Vetch);\
+<     \n/ip/address/remove [find address=\$VetchGate interface=\$Vetch];\
+<     \n:log warning (\"Add ip address: address=\" . \$VetchGate . \", interface\
+<     =\" . \$Vetch);\
+<     \n/ip/address/add address=\$VetchGate interface=\$Vetch;\
+<     \n:log warning (\"Remove firewall nat rule: chain=srcnat action=masquerade\
+<     \_src-address=\" . \$VetchNet . \"/24\");\
+<     \n/ip/firewall/nat/remove [find chain=srcnat action=masquerade src-address\
+<     =(\$VetchNet . \"/24\")];\
+<     \n:log warning (\"Add firewall nat rule: chain=srcnat action=masquerade sr\
+<     c-address=\" . \$VetchNet . \"/24\");\
+<     \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=(\$VethN\
+<     et . \"/24\");\
+---
+>     \n/interface/veth/add name=\$Vetch address=172.18.0.2/30 gateway=172.18.0.\
+>     1;\
+>     \n/ip/address/add address=172.18.0.1/30 interface=\$Vetch;\
+>     \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.18.0\
+>     .0/30;\
+5111,5112d5097
+<     \n\
+<     \n:do {\
+5115a5101,5102
+>     \n\
+>     \n:do {\
+5119,5120c5106,5107
+<     \nAddress = \$VetchAddr\
+<     \nMTU = \$VetchMTU\
+---
+>     \nAddress = 10.9.0.3/32\
+>     \nMTU = 1280\
+5122,5123c5109,5110
+<     \nPreUp = ip route add 109.107.177.79/32 via \$VetchGate dev \$Vetch\
+<     \nPostDown = ip route del 109.107.177.79/32 via \$VetchGate dev \$Vetch\
+---
+>     \nPreUp = ip route add 109.107.177.79/32 via 172.18.20.1 dev \$Vetch\
+>     \nPostDown = ip route del 109.107.177.79/32 via 172.18.20.1 dev \$Vetch\
+5145c5132
+<     \nEndpoint = \$AwgRemote\
+---
+>     \nEndpoint = 109.107.177.79:55055\
+5150d5136
+<     \n\
+5157,5159c5143
+<     \n:log warning (\"Remove Environment keys.\");\
+<     \n/container/envs/remove [find list=\$Env];\
+<     \n:log warning (\"Add Environment keys.\");\
+---
+>     \n:log warning (\"Add mounts Environment key AWG_CONFIG.\");\
+5162,5164d5145
+<     \n/container/envs/add list=\$Env key=AWG_LISTEN value=\$AwgListen\
+<     \n/container/envs/add list=\$Env key=AWG_REMOTE value=\$AwgRemote\
+<     \n/container/envs/add list=\$Env key=AWG_MODE value=client\
+5320,5322d5300
+< add key=AWG_LISTEN list=wg2awg-env value=:44044
+< add key=AWG_MODE list=wg2awg-env value=client
+< add key=AWG_REMOTE list=wg2awg-env value=109.107.177.79