From 0884cce98047e8207b7e6b617e3d36aeb9084340 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Sun, 16 Aug 2026 17:00:03 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Aug 16 17:00:03. --- .../20260816/20260816170001-Binary.backup | Bin 0 -> 390807 bytes MikroNUC/20260816/20260816170001-Config.rsc | 5536 +++++++++++++++++ .../20260816/20260816170001-Diff-Config.rsc | 3 + 3 files changed, 5539 insertions(+) create mode 100644 MikroNUC/20260816/20260816170001-Binary.backup create mode 100644 MikroNUC/20260816/20260816170001-Config.rsc create mode 100644 MikroNUC/history/20260816/20260816170001-Diff-Config.rsc diff --git a/MikroNUC/20260816/20260816170001-Binary.backup b/MikroNUC/20260816/20260816170001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..13d581fd225fe844023771c521c19594c437bc72 GIT binary patch literal 390807 zcmeEvcU%)q*Y<1@Affjnh*T*GY27-hy}#nuz-MF zET9551iK=F1rSAn?>9+6^w#_KdEfgf-}{(9c271tyEA9zoO8`}W;dC83J&Ie5Cf6` zfM}{kJTE#XBr*a803ZMW0uX+%Lu9cbvcwSCKp?x25C8}W;pYM@6TyqMh>zy0i!N^^ z+V}PM_bZ5GR{($&a3NsPR3?V*miXB6;Kx*#rUL zB-A(nKo>YA547?eF0SG=)4+o?Hg8$Or z-#>Uuab9dNFPbP15M4zMjmu(E=~Od1jmb8nP*@BUAi4^C)RIoMq;f5ZJWDFyl0hN- z@F=YL0vD1r4rBt*i3JG20U!flSNDMqEI>YD0Reo1n;y6^hxLMOY!m~+HhyiMptS>S zRD^w|i30@ed#DL*sDv&oAYcTIe;eno9k@`?c%eA7@gsk|@k~CIOhb8OGd7pPGo$b+ ztRFU>`oqRk|DBD`_}ci4lgQvO!^0s6+b<0}-y$7>oj+u-N!mn*aD#Ye&epDYfEdq5 zTu54=Z!3Vl0a*+HSPB4G1^`$N0LTUaWbtnLd0N`I@0Z0M>Pn8ypt+}vR zGQ3I}00QT-03KN=`jP0qA)pTr%fZ-Vg#kcU5l!Ut4UBD_o$Otw2HJT!*_jMR z2N~f#L%4z5xDc-Ocb9>;9K4JInurnyF9W-6@GAI$tBm>X0y63Zk0s1Ozw>gyNW zh%n?X{J5|%ny`SN_JcLU!2*pO!4SjiZ5mQWoXz5d#zoP8R7wn%x|fC*w8vmR^7T#< z;j9Q&5HA`+gfI>_HZqPA3`aNoI1Jf402fjO0LW|rKnwta5e(f^C`1R);CTSx@e%;= z;TPy>pvNL0QE)R0Dvn4ZQ{a`uc-+9)=#ZcwUUUrn4h?VsFu^^D8-7-a_R!v-vxFbm@dGmK_6 z4jUF3G&qpN!+GJ6(MdV~lo}!5)(H8f8sWGhF`@sQ`e44T59ZhE!{Y=;{&RW^`)z%& zzf>RbXkK_^EN{!VJqAQ$2q*%91Nk40A>6k$!u_B|vhgf#WXuG?);v1y494mcjhI47B4PmcjnK46OV2WiZezabL>}OrBU#5zys8*TEIJ1-R#mTr=!S zIRNpSC>B8M1RVtdBY;fhQLUUUR6b}--#%ytH<5Y0*$ z@UI79a{&%hfNlo*6hs{WWSG$Jf@=UE+5jLU z06_ErKp+A!0RS-t05OAJQ4rz)U;=>t|0Kr_+4FCj%KAZ>uL7NHy9t!}529MAIAV@HvA_VSwIskYy4uBb=eK7nb1R_gB zfMN-$q3{b10Ejuc;UXsqu_v6HL;`?+YAC?Cgb5IcYC{Z)t&tPXUTXz=9JnC|gh8_t z5yn8c7ff**77V&@@vp92V2;q6Lx)Td?Ii)gAD0rCF5b-nz@8KQE&~95<|_c8!v{bf z3_5(E1`BJzT3v=4O#ldzS^(hH)d3g|&z=Clb$Ct<+|&xn1B?z-Q#AmDu~*;`c>u1$ zy$&2Q!ZM@a>7(Js1Kv>daUUYv50UML$hJddn<4TPL7-tpxC}YwJVbUHB2OG58xN6< zhR6m(Wc?wstZ2qQJB}B}i%p8+#UzR>YpQ5M4oA1YNQTZ}K!yf8Q*<1nF+Y*q)8F6E z7RjIc`}?^f8P23RBDuG}zduYQL*OuQ%`zDPrXnt+rC8{IDlq^o!UB+u1t142bPont zfULv!ITKp>T4gv01G2H>|YLO=xu;4_r~sKN+~>0$vM>RAsf{9PX_{2fB4 z^_Bn_Vuk08gy-P^FoJskFveJ6O<{<@EQYiCOt^s~k+cL#%S0Dk4!^8`n=C9KNUVa= zYPc~&0AZ{-Y@-Ei2Z{iKG7%Bhb}c+11N(LKLD(|jwfz5fonroLbt*3)fg*UZW+DRY z?^iDNKTo;1f6aiEPY8+Th4Ery29!JVZy&k1|2*Yl|24{0ib;y#1V=|kM8*y3*Y9uF zuh@T{e*Z;-S1vd*HYO@^&@r(84&5R{A{idW*8e>9iv4SbuVNHuwpm=6EVAnPa=A4^09>A0AX z@W2>eEL@`?NGrh4bir1*pAK9|kh6dbB_Q1oQ)w_8C>R}(AQCQx00gKp0u~bg0{$ma z#QXt*fZ&6b(S@{yE}kC}9S&VFhUfc+N`EamaZLBq(4aVjyu* zgMsI}kmLa<5~dQh01zlZko^(#m6Rx51p5VJ0sy|!hyY9nI|;Yn^KKc^-NQO{IYKJs+wQW%&Bdh(L$~{h3Ei4l=m3s^k)BirJco7)?T77o2LuM zx)_Ta9uo17*XFV(Zm>2me=@W-6Isc6Spi!fhHCURXqc{?yz`SpOPcZgha=XvYlIcu zeI~5U9?8Ym^oLIppB!`Q?DR6*1VL>CocGEf>E^3p3v>f>c7ibrbu%GBQ=l7xp~J)( zTwv3uE7Z-@4RUMal|N@V<}BVp$-29FvYp=egU_U^syEbjDK)>z7S<*)U_|TKiLGj5 zYqn=q+%u4dwZXfDghofYdfCF<#9wt5Ow|o`);AS`IXMFEYlY?>lV7AczxNT{*V*qC z7g+IoR`1C$?mRXoWOY}tm%Tis4Tgg0!z+Ant~OdJ^&%~*k1FH}+V%2&^4 z1sPso1laBHkJ^_CYb4?FHLD0s!-BN8TtKUaD>O6)y;2`y zC~^VNtnkpRVBS&?KEAp@q45iypps}g#n*%%^x7D8k<)-=Ff>&HWP(MZ2r|DI1Nc?Y z7C|5p#1&oWKC}l%k&Bb90z4uMH!^Sovj}h~>q5Fu7wSV7DrS(86AT#W$Y8dPYZepE zHiH@-2m?Rzp#$p)3gmz=<_WH`RZftW?9&wsisQw^Ld|}?WK1wCdN8!uiZl!Nw!no{ zCIv~>Q-UqLwkXsfC!_#4DJ7&^1@2mKpW{+M7iSR_$A;^@uu*Yr=<{NdVq$sWaNPp@ zn2Yw1*o8?B_<`*1z>t|DILC#g002zYis*QCC_zphh8tZO`?%=HD4vB&WDF-VK}G28 z5kXF7z+R<+3u!a}_#2gJvtXJ`u#y5UW*E4SzUba?uP8jxYv56G|#9JM0=z)R}b&l->~TuU32 z7c_m9O%~YAf_8rDF`?#YI@nQ?$?m4#5p@_yS?3YK`bP+$D-+2#(rBfDWF@ zf)x|h?SbeV_;ZygZ3TT&qezBBa)Ri5n7Q;3$41@StGL zD!i$gue}_MUs3>|4-hmRxr?SFGq++f2nM47wqruKy$MU!sl&|=;O$(Uib{&(O&3kP zZiT~QQFEdcN)X3-;l!0NUY=?_!X-pxQ&jlJ*urHL!zQgl#B{K z)74}s@GFT#rZTC_>HqNc;!$~V2|;Zzh`89OG#t>wvH@h_z2|4mJ`nsFKU_cI z?Uu&5(l?!$+0UF?**8C-CzO)g)a^2eU9VklUz*l%;DfHt=ajSL-RJ4?k?k4=jpaI4 z49;k=F4ve@mGzgnD-@5ql#Vx_7@V|>TGl@9vqqr}IziC3;c^JlkHcXxh&U=Ij`bR@ z1iy=+SOn=uhr#h}RH07w4s%B`1MyA<>!lPLMrN=R-M!@rJ$r;V3 z8$X_a%4xs5{{MQ{XG0TT4uI|i9+AT5b68v|8%0S}I+=)~G!BbJA+v}iB8x=gGI&fn zit;IZHj~3=P)U50#G<1N7K_TI(rC1$01$sTq?f^4Bm$tT!=j)h8k z93?Qt%PJuu!JHcs6vE*}$C`5@!-qi+I(U|2SR|VjrX#q4t@ST>)GAMV=uuM-`o;!9 z4=Y$k-$%eer&^*fbgHaxohkxX08fA`fCcUpf$mg$pa#MU!28=;n{%RL&7*kXf#{%@ zJ&Z-uvHQ_$&%Hzj8^v$304i<3|paf0chiHo{r5JXH2psa8GtO}|m z^s~|fH-w5IYM^THu#}Sg_v#_)pxQ!LtTtHUTO~o)jM9iiqR=x#*Gwi3`TDP@LOP;1 zwBd*tz@{T|08K|EG3f{b9*=pX5ZzR?{Z^sRZntgOQVBVix9wxd*Y9C8Zw;SJ%O_`IJ=bI56;ipfUT;W>za(eiasEP#niZ95AjJrj4 z^3zDgaq9Iqww-o-Y&5HL1Noy9e&({ez$2CmD++c`a-KJ?W=ddKe8ASp^p%?%^`3`c zS00u%>q_6X!^&K>i!)3%lPcb~_uP`QsVgb9Cf$>+d-E}^{?v+T$}*q=+9ygw#kj^eZ%<_|83!8P0h2p zhpcXRp(9{u(#NTzs;NId;oI?th1$QeiN1THlA>hK1G`OAJPvd=@56N^CE*JV)W1v~ zwXo9cME%9S&Z-g9t{e~FG$;1OdXo}`qfer?7F=`A%v-&DWz^#mIjz&Hi~BkCPbFsF zDy+z#L3mf6^~AF?i_W;Va!Muhc>_hv_5B~03qKke}--^vO4ZDz*l_T!SK zt{S=iVd}&p`kS{6Ni$WO_Pmt67O}@pjbY(*?~(mD(-Sn$8cR3vZu6Jte4N5qy6W|~ zy@_K-Tc(EYYTd7*+;V40)d@z}6bgsV;IK(FDi5VHxKtj4NujVQTn2^Dq|r!hE{Vovlc;n) zgGr{aC=@b>juL4^0V4X5qlJj*hd&5V63QU6c_@{}L@6W+jZI_`=~Nnv!=y5qL=K(8 zf+*={@j40s-9LnR2&KM(1R_YaLF#XXRF0%yfK;>CGa;nvmm|gug;ZDwscdBhkP6QN zpz@EX3cpo2RUHDXECx`E(7`y8raF6icv^c-v?ft$B$R~OS`*EPKR{YnacDa35}J-Z zAVONwUFG7VyfK|~j=PQ4zxtLxG}1}^3y_v0NiYc}qGZt=SctSxGKo1b3HJRZut!FT zLPTdepql~j>qyd>>g=iG;c2ZSRFDqTkdCc2@h=_n)oywAl%1zIk!?91-si)O=FU;{ zUiz-{Q^Si#+2w0X-p{mFiMp={dWk9JLJB4_FCCl)@x=^HGAgvoH~En0PXXB zbFO1v?i1xMWtS_vnmm-h6(@t0icYx`)= zAxpWAiC=Dq(yKU)O%4tB?fd5G_vXBGm(X@E3~Y09n3^&=^L(e$rd*Y=*p~&&#t>;z z)qYhU=QWNt$=fb%n)kfUW$J#LyrL@HnS@OZ6Q5pJcxalM_trM5W_*0;4QHnkgMc$K z>Aem`C1It9;+EJ$$-DG(y8bR->3N9Lo7gEM+O zDvlui7z7NN)W>F|R`M@4)0=9_P3XI^!%w$eQ~L&3x#~^TQD6J~NyKxxo}LqmZQ^R# z%s(JE0ZCwpQ$>}<@uS2MF);}&GALot_yHL~aI?^0)L`H{iY!tOj*X47w6KWe#6*2F z8A2xvo`qRN5uL?h!MRe*Hz$5)R&c)JNP<>`+Q6odz>PtfD19q+D|r!d;4;x++d#~|&Pi_+5wDk6L+r@1z&fbB0tIi)4(=qqG(LbqctLdEsYxiC@ zpETz7t`Cu!CSTC;1`AJ}EuFhsV)XvSq4DH4;N@}1ck|N|wH?hbP*BcKWW;moYG1Yv^2Eu=06b>7K>0hu?)4=H35PU%qg{7K!x` zf%<5|z*7b7)jPm(O8R*<=oj z!Qs#uG&-BfqB7`gDv3^K(#cFJok^rqXk$}!T8#pNbJz7q$WA~@!wAnWNEsUtWnqC0ufu_62r4l9|HE32J2qL510n zTA2;j%FL1U9WQzr@}lR_bj)5MT1UWlC;&}c@GUqNrI_$a5+bb;l~4tUizSpKzbcP7 z3{{5*C6yG0=x{V7P0fi!)ItcPjek{>0DIigUf7-LG_6H%fzr((Rpqt;&}AqU0ANw~Im z_Dr$xMfF~kXn2P{PL=r5p&FOUbf5d|6ZKfEYw?P7rKiWn7h@OnY&*SFWmZa))Y)Si z%3{^8&KBX;jB!XN$#ej|-lY{G;k4xn>ZP|1Y0W&s=)o+%e(QmQM3dyWR{!Kn$)695 z^4z|P9pY{%#u{dqwtRH4?K=JDJ(g)3WKGU%6}R|nAKSbcm1JIjmznx`vj0`m>kPK7 zAqC@YgseO=Cdzbt#KD)FGLd;(>OS4~44;`_G5W={lH-96U#_3i#EvDjIuZRs91cHp z6oP%2%KJm=4(2U~=Jvj(@+>!GNXQ2nAA9qmT+BK`r)teTxu)+1sQ{|x-S58ZP{G|>za(hb6M=6x#9571#^m5De7W$Twr_Eu9Gt}~}?ix%d_DA|B9 zJ1XCKC+8wAW z)s}1h62WTs^>P?yb5`7#`Yz;2Ah~*u)m+IZ)hU6@XOH7fo{v{2UmyL}!g+7^!57!3 z6rI~RX{z}7lzH`dxyM?4^VN>;3HVT_ddQX_?ebw)=#jjIyy`ibk00Be_UnG7)g{O@ zs=XAfbrob9xtrj#xB{s9+syw?XY||5f1CNg&CI{zGzyhSLD^&yh0bF$IUELu%BJv9 zE}cy!qf8>74hb%l!Q|0+R2GfQBhe{LE|<*Wu$V+9gU4kFaN3W&>tI$Hg9`G-zZ|9^ z=K5p2kAN%dze0m>n28o)2N7GE_)P-Z%~=ynvGR%tnZt{X)S1fT1V==|MNqsL9Zz#> zb6uE?hVUjXT<0sw35ksOioUcUN)w$jH99UPmdDj`<;5mMMu+}Vc6y0g|3nDOmJshp z4TWU{2+PK5{}h&epPe2dtb>`T4rZb{nAuu?2g52L3_FFUV+w^Z42!d?92(E93!#qs!PoMj(t-ude=|iwQfmI zM@ev<{vuza8iG;To`~oLT4;3h!)+}$AH~LLl$&mzt1=a*dE1t`*UR|)<6);dE1< zIFYZ$XKZ2G-`u|Wz2b8BkI7HXQo8m8wyJJ9Xm;b|)s;30&W4wB7?JniUj3Y4p_H~njnVSEI<8C(sG#e0>F5`1osAB>D|LoWIs~DyQu6Lb^j-_aCs?4^q`Ti}vbW zN33=h_Oojz<}V9~K9Felq)}@>p;v!mPr2#26JEHZ@`WpmnxxV>we3yP^d##UdWQ~d zu=d*-^{}os;fnq(@G#8V;!%i<%-!7;x@m5A#dj3-ucg=S?t6T=E6>b+;nHU|gxj$g zi|!?N@>Ks>`lyT5Xs8Qaobz(d5+$Q5#ETx~UF>*(XOl;}6+zat9jn)QBM~QyGgV@X>r<2X?lF5>r2-(+3_>5dRrAw^QS3Hx`I7-#MIPmo!Ud@ z)Ut`U;*Ih*n2GPa{F-^QDY$ECaHlb zR#Ss{I$oak9#cKMJf{voDr1PY1V%>M*v)<+Ato<; znT{kxUeAnvio6CETMx-#j~c9!nTMzK5JD^@GU6*G_8ky=EQY3wHKFO)3!>~b(i@I` zDXexc(k$c3Qn6-3gP*h*K+`gZz%nn-0Wu7)B>7d5L}fu@6DOf0HAJ68ZB$E$;8cF7 zR-!pN8vc$|G8}BlpD7mtG$M+UhH_*Klt^R@a%BHGRZYkIaor&Xt~`l z-__M)+!NOZEo-;(?vt(!k<*mxFdP|54)2a|?1`~`HeYrJ|DZ`SX(7jJ$vK&-)l*Ro zr9HRi(Ra1_TZU2n?pxnhyjScb)qE#)DPc7`>nOj*F!S2N;|IrYXUg5hY;IL_UYpzz zDpnkzy5Q>ZpvNzj@~_TFzvX+;*7rk++79zCAeY z)pa8sCb^{@YC4@*`Xxx^(Pf{7+H#zR7WT=8Kri!Geiw}KI78-f*-^#sopZG$#>;qg zwY{-Om-~uUzd}>bq>AagM@_1kn)>L@#>)Knhp_xBe}JZc;1!2pRcW}o6@vi3x@4J} zZe*Ty9#1;vyvLR+A8Yc&Q#9|{s%+Ve@$y-x{LW*n(c(46Z6hoZ`nLElo^F*3H(m&J zJ-J+W%C;;o_R5YBl{;mbPtNU@>U~qxGTF;iTqoQs(L|#?5cQjEpy1VSupuJAbX2>P z%a)XGgt10>t*r#%^UUIQtrErMTQ>ykT0hG-eA#&X=Sw&2_p7ULa}?!bjLpwKHgNqi z?e*JE`#!zHtrl4~@7lA(s&XTX;-j;dEvN0TkP*8+d&Tpekt4!(&Ssy#Q@bEq`dyI1 z66sA!&e4?SvijN0yJtUmbRul|SVe!{y>cJLW459F&zfBL3hp&|`(CRZdpUdM@+POg z2h`cyRE*YW)v%t7JQZ0OWT@-^{K0T3^I**}>HA+V2+F8i?;d;bL|*EW{**)wzobbs z%~ws>=S(*pefc8$lB|C>ZASG&Lqp`qgJBYz62SP{#`@P*bv>uXU(INUOer>NK7r}( z%H433dhcw|fyI-GjW_FO_4^rxJ~}X^L!up+*ZD5K;$gk^Rj1?acCNKo@(N$f+6V0X zGbh@o8^V{K;*-=*F(&r0WfUN#-!wD2dNy zuvkPgk3{5{3cIHUXVOaT(?LuVF{VIMO6 z5RvRG@xOOTGWoA(bCoVV?r=6Yf%+NF=7i79N(rWNdcvvPcaM1e{JGiT18Z*0gbR{| zs~jB3-_74_F=#qwJerQ27tPi0>C-VCWdC7hlvhm`HkQ?{{qXi` zt<*`@40nh5o6WYgXK|#}UQ0xE)hslhuwc{6@z&vE_TJjA>`P0`$J(~bD}_Zj?aSO% z5PH=1dQhW&KUS;o@wi{f^Di2L?+@RfxcyVX`8)e))>jocA#9Vf$rpz97B(25JPZ-+ zEqfm}UUAY5Gv--ILT*fFCT)49(W&Q|E8H@6aXxJ(HSt%=y}Nplko_R6q$f0GD+Xoq zXPn`#IKJ7fv8di@TieCP8%`-|$ni^yvR#*Fjw;$vy!8AHQ2uf1;|)-$|(MQtL&uz@l|$agVp+nmf1am`P~O-Iz|+hez43g`&%CI7nj)?qWVG(QERYb z-zZeH;*Nx(LMqYZ>uGkjbmAla0Gd|GaET zmG3)tO5ou@9{O=tsZ0EH?f3vn<;!*6c}ow!P1$~}ypcpqURm=nP~l_fZYRGRd24QL zd%~GPh(GGhel$6D_`150b$Fa_?Rr_+=S^SEz8;bD?klVI2b%2X%kPqXOP&tTTYi>(QGWV||@?N2zfwW#hu z9OE5jR{qm1OBaoFe?I!g1+$2?I+Io*ua7ScnoE2fWWIbYcBHv&{v_fD*`v~@N*~ix z^iG08*|{E{Lr;x4cPq)=^;%A6kc7siu?}-&ka_2)y$FAvfvRmVI4A!Q*ZuH)O5JYB zew*R+wl&YVzKS{tj9a8}jI_9QF+IWA2d`WoasGABrujAV55AKyJNBibdV57}uGplq zSL()?obsuO1l`%UZp<5gSM@+K%c@oq=zY03_X>e)FEwUDTKBwUQrG(GX<743+jD$l zxSwdT0fq%#d@=JBrb@BtXSZcp86lm2w*2n5`423r{%1O@-{$|@{Qqs{{}s}aI6NYU zjk5VnE{V_N5m6G8N#?V8BqEhaC2`1X5|@i|SZpqj$e}TKR5FptW{{agDuv5t)A>{Z zr2CQA9fWkEWqH3I%OQ2}rvTxvm*`c=yZrnaWZ{bt;mdLHDf{}qd6Gc}Vk}jb@DFY< zH2~mmsb3Ab3E!It-=YG!L~MkU&isPdy?}!;=EHtxU$cigw=_OZGSYdly?qQCVk6a<0Hh*c4jw0njtJu3GJFiVpdw2PI zy3%J_X;@h6h-=R0oeZdHUfw;TbYI?>}HW<{sco zrMsQgeK33xmAo^0O~y3-!!?!M#QD&xKH z+BvW18GL!;awCuK&7EMNwalt;LF3r0Qkgy#di*Z)vd|Bc@*m_Zwh4$~I#rx4Z!?@w zwcV0;;k5mNQB@1}CYqY}ZyhyZSGz@5`!MOZ?KKxCJ#A8Y&@py?5+GKz`Sl(3^slqZ zJxFX6*EW>cv#tesm(bw9cQ%HXbEGW5_U_ap8xpkFPjIZhQ#L#M(_UVK%%=VEFK&LG zc9HhpSK4$~f8R&9ogs_f7tt{={3?tPI^LW|f+j*e;(&lcTqXSKqXOE@G>_L;itQ!ZUEoVyvaL_AJYDXtxjpCNrvn~J4{fl^%j=uF?t`57 zA?<2LO=54p+!puljjSH4VNtNk-koc5_><>`{pYgRp0G>VdYXL0p!ue9FC+#J<69NZq(m zp)GEPCHt-OULbcY7iDPPI=o- zYcIld@k`SVncW`~*?D)S+ZTM>ExqQ=IT;6B3A@%^Q(XL3dR>>^v1NTJ`_0pE8v>Q~ zpQ)VkiKs2rIZQSw_kLbu$=p@f#@?EbqrZrIHTg+?Xm##UbnPo(7oxVn^7Go553>2s zc-Oz=y{W z9lCNc(>$Wc=;n=^BM?c=Ic5Eq^%&^IV6;6Pu?zoE-3J&J*iA zMa$E72&WqQHEFyq=KF0)=80=|W@tN}p4;gyZ8dR@7xvAC;>T=6B|p{Xc*CMC3#^MB zH-&49m&}xlD|M-Vdo_vn=y>D)$&YP{hffH>#9lj-KrM6b{;>a1NAdDk)%nxju273! z=YB+q)IS<`BYT@vkktP5AGY}uU+;D@?bcebB*4^ZNocfAu)_Kv{_X{DYQJdh2?c4v z)i-Qz`kvVx-$r_un|igw%eGJL##R4yd$hyFZo8^z+MfZ_Z2WABo(99W{Yk@#ARbLe z-U|6iyvh?dw@kA!T1zXDCi zJ=~^^KK80~Sr_5qW8@0)^%aRKwa&58b&dv_F}>b1Tjf!&g?ngM;`@}$b{!w}xnkmVn&+ySR~`_v zGHtH};o0obN4KJ zYmr_PfiIwmV@guAk$t5fr|oFW*WXi#>(}e*DnDq8EL@7wE4I^kduLiFQ&RH7#wulP z-0SMtt_9uJy0MDGKZ+;xX5YEsInMuf5bIc5ZCo zt}e&Z)oD9pObyPK&AV>Y`t%G$=Kb!1QZf{d4nHbaSKN8=)-t&nejkXUtGlO_rF5~8T za@YN_&CO-TiTe(8YcifD%9P%C%b&bz-@H>&6PRh6d*>y7WU8$@IZHt>XWG{{NVJOn zn@#Y@(r-)oZ7IkgyYSy`DcQe~?r)^~8|nT=y8mAwUBOFl>2wx{%jYv0WIBt@rI8sV z8iz&apeRabG1v??ktKL7HH$|kQ&B#fPGsW0!Ba%5x7Fn3u`Vo>E)pS^FRMr|(KPV7 zc4ykAjr-b%w-Ni!Zy6u?!uVCbhSU?r$d@1I)#p{WvPVxkKs{t!n)EJd*Xd_VI$tfV zPuP{}8RNe^uJgnF)%zmR5x31HpKHlpJYJ*XfIZ=FcdF{exD`&hGX;HbHT=wp|R-%5z_8BPHecNm5 z!*WbjltjNp)`e_^)8`iD*19kIA}#)+Lu>J6sg2PS#=Splr#|(`sX8Y+?}LW2A+L^U(bG1!~Vs~mTTlh3v4^wD=>HOh-51ZB;b@YACqj||@ z-Xje3M{4E7PADi zEVHHYLj6FX;Y>|CiM3+LBptu0@MW+3;BB2PJ1UD^E*C+F*suv+D1{+M3Q*k{HuHM1T} zc$57|G45P)Ny&xVbLM%wI(1Hc=vs>Gj>j(CGrHnT^D&+0vHV@0lja_O*STzyi`P5% zI`h;gSCkyzx*sK5a`TK|x8J?nuh44KM(zlYkQ|=Bc^$Uy$;F%fy~cj7Z+Kqar>2`E z5N7!1T9_oOJnp!8#_3?e$EwX@+F>%Zne%3&FD3_>PC8|u>1?XebLVcTMDrUvmzE`) zY@K|qS`1qCuzRcd_C6lBRRj5z6J0gFo4^BQ|c# z&3mfVAG%~VCqI3emXBtg+D)d{t0SqiKQ!FrPCRk{Qd^-W>K|#Nzjqvd%Xa0e+tVOn zp#cdC6*L{`6%iJ5ZlS8nmL0JEZa(`i)VZY`ImJUe}1{lR4#|*X1caes*M9 zTEQ(b_YHl9JGtiJ`I!afV#^iZ?C5O9FFyGos%NVEDUV~S9=i%g<)}1oiUSLen&eJ@ zTxo5juh8;dF2O>**-!n1E49GGR6S|jmBrF)vKF+4*w|F;keBobMbnCn)haV%zP zCF?0CEAOS@TP4GC+EeVu^YN?AclYs1 zaYOr2we4o}-g}vQ7I{BtYF*r-c#wq7BrBi3rB@omwDu{XKB<&h8vmg9MC3^Zr_Ad1 z@WbPGH0;>EBJs&1UPPO^=@riKyyO%Idw1W-CJG-vtG>H5OzCs;6E(Wu!tNy_PNjPs zCT}7>`?S$>CFx};+iKypv&a0NWc%n(+rN0chwS1`T3~1vam$$x>Ep^86i&vpRB6oa z852pGe%{beYuKSzmzRq_@AL9;HS#sc6mM@FvG?X(laG&8u`koyZn@}`VezXsGX9Lc z_-!`7&E_Yh-+#N=2&s(U82C2^{*8fuW8nXE3@o5Bs3@7jr12?yB9}#GvN;?Yok}DT zIb4*_W^fo}CYeuUlUQUf%0qb^7LCp2(^y0zi_Ae;Y%WRo*#D1k7o;+Nh_~PyG3Dvj zc4RV2q%mw5HZ~|lKyUmI7f%rXpDoT%8lW|i!%=JeP+SM8ORS7XZ-x(3@x7! zhY+&?!o$|ujBaN`BHNP4woEz={s+%4x#HAp!j?co3*wEbKB1hJ%W|e2inw(~4 zU?q-?WOv)%oZ(yWP+x_!PVZ#>;{B<-8Ci_+Yp%B4t9%OTof$8s4%l^QEKptTv;Rc* zsEO&gi*v`$vfCP2+cW9%g#~fDr!_`7rzRJ8=Z-h4Ka%EY8m+po?xx;FiNloqOYZ&;n&FJ+BK$+PvuHZv zG?1djrI?oYJ^beX!%(Avm26n)KW+VA&Ut?MLO*$o!#DPxI?{S@Yx^Y3oRy~!^<_A$ zz!r|_M~2OM`uw2Dc2n8#&+OOVh z^Jr(}k~Gyn!{@&{`Ts~K!*zH6zjznXf59>6ObW{7Gf6BOg-<4uDSRS@M<=l=pl$c-!glp9wb2qHh=#(y3%G`u&z9I5LC5_hm`{T!%jk7FCaD#mt{!wOt%juYl<~ z)TbeFW2ybtx7^$-1Sb=Nn8ds{2WuV`o9$SCf3o|FFB^EY-K%DN^4yd8GN#b-fXS^2 z1-TRUiTaUsiR;}MSoTYbo-McMjL6iDD zoT}YtEcje4UNAyaUAyis294SH=8jsT#;l^2;W*3c8=CJAz4Ve$Jn~L0S!-;|8tY4; zthQ=j%eau2T|S>UmRm3XS?u`T;r|CaTo6b8Kk+)kIKrc`XnZb*$z;<}HitsxkhwG# zlSU=6=u|eDO5szu6f%*@<@0zvCY?v*P>4hxjl$qi`E)9mD~KaMGDyLkBuLMkM<$lbl)C|3FpHTug8M)P^ERVP);4V||4 z%ncyy?94UsO(DNAa0=%uh1C|MhWQtG%ZAn8Yu}1dOAMIzYQ1@spX=n?UrwyecV=%s zLX1x@t$OAh&RZOI*T~7KD(hp_14MS7!hU9l!qP|=&n^UW@GvcLrLnc8HJ*>P3NXR?ch+Jz>s10IL-rbPJ2uS)kgalJC|Wq$0#b(`wlk2e_5mVT6rycty- zP_G5C*M@mrGF1Okg8+JxmVkb)Al=2MXYfdWr z@2_DRrt7_Z{aJT8dvBgNCpP=dXt1^WZt4@P0gIOD`-wI}ka%^Jhg zKY0hd+~GIrreW$9EX(Y&QOV^DQj}uatAi7UIeb!2slgpBwvm=SSY>CZ_-nEtuCt$T2z+NeS1FP~&R z$1>Y5>Pyej{!kFQu4ZD#A8t>b}Q&gH>Zfzl{+7F_xy z2*5vbWq(czQt2qujzlFg9ViSt3Y8AmJpCce{I4Rf>i;nEQWy*esx=L@CZg6qkGv!2 zIDRgE^QGgv!SzpxyhCgBmy!3Gw61^kY}c_byH&2cA3xpJG^Ta+_WTXY4(>a*bZ&r# zm%8o6W7gIO-@LfCJ^SoRJ=3~#K_8`i$E(~PmA0gLS*;RdL$JZb*nGv;eQ%FHB)-79 z%FB<)S&g=jZR%Z=-a6UuOx&xjs~>KNzO#B!NK0;^)o9<-0ZqC4s7+L8$fTGq<3gnc2A9S?vHIw#c48Q4;ZKRm z+389=xAW?k+7VxtOTOqgl8m=oWqD&pBIZby|HDG6>>M!{_lzx>dfqv^S}MD^$xF>w zUsm2^(yr9NT~@yz8Eb!cl#g>*uaR4}%CAJ;@S-5c{3+Y2r79lLgMDk=pHy00{vSnN zj{+-)ZFVXIhlaPlHHMW%WUjZD!{na5+KM|0#;(erhSBUdSuK{2H42{QwIN?}!TwUb zVX;`**6tT^`wG(Y%oVz4?N=GItLx=6yVl0d?3_o^TlQ$o+T&2AH@RA78r?F@>t@1= zF^9Gl>iXY4s(ztE9p&ymKW?rEn%K0GA2Gf7?8~ZQdtQt%G+RY&Fu68Sd)uxK7x|Eh z4fSqajd_ZfjyS)cz_nGsVqc@g+}_t1eEIDIRVPq#NJPqce8u6SDB{NX7DM~a-695&4x zm1VR1ABw!cP3E`BApi9y^EL8vm~1weOsCUPI)lMxvuG3&hmF$ND4j&4k{JvVl}#ek zP!fkpVNu953d-dYxkMhHMj?{uBtA_Ld4J@}{yg%MXmo1|-NDA1Y46}*>p&iiyhFpx z|0?pT{jVY~!=7kuWBc>SYqgP(ykpcXw|`ya71ro4BkxUl%O!`aPRQNL)Ee)hzdxuT zB4AzQy4N=zWKP@`WK_7BOS?3(=FPMa&t)?2u2S~RiVQrMW!aLQcCRPhHusZ*;Vb5i z{n}q1H@!3BY`W7os`i?rrr(^CQd{VZk{!&3s8P_^@@$lYbpV(744fvzvG{@}$pSsPA3p4k=HfjV0YPsHP-OTIKw;Y@P z?C^mSNe?Gk)Z}pWi%Qws+QdVh4xnelqIYiO``A4?x5A6@mvc9YKfWY$z?cvsi=fy~ zdeba@<51g+U6%QDg)5dj4=hZUGYgP-ADWRHqnDR^?($Vm+OI@jU)!f~X1gC3OiWX4 zo-?O;Dz9uq?*AzAS`>*rTM@P4C1GOGu)up!D%ajO-f&jlv>`ZZ(zJDZ*cq*F>udIb z8DdB3HG0I_cxt>8rxs0|RdTgr+PH@&1I9F!@)jmFoR9I_dHjsdxa0aCTduRKFLcZ_ zxw@_=@Ws4`9x7E)_Op)#supy(1QJJdmxfsx->vdKfLU<3Q!02;6FXm$-7dyZ>)AD} zi79dGVUNjuB;R2v1vkgUqEUgpCVqd3GZAz5TDIx%v2=Br8KY9bTH2WYwgbK~z7KX4 zT=JoG@5XgGhNLNaRB7zacFm1eN_chaw6FZ)I{(zxXASfN)DSl z+b8mM`O`p)(B>~i84I^b{6mrVx5@lA8RWm-WWGjT5|vG1l4vNMiqfbIB9B6$kWol0 zbI4pihfO6?{~vqr8yiWMYuF9;-%p#jR)1y6|0qvds?Fq8%FM`j2ZJh<^B>C=Se=uNu z5n#Z8VZ&b}0|pHEgT6|(AX_+K#`s0V`ht?LGVAw>Ee$+`Q(#-F2DcoOL)G~ z{#t-56MupJ4};+Mg5dQanA#13U@r)Qr$G>;K@gNd5R8H#I1GZ|Cxae1f3uVR)Zk85ul%s zr`kbq=95o8`Q);EUzP7=q)dGq|6LD)Gl2U$^8MW)IP;S~KNU;`AD<0y5^3rbioJyY zUd4as@ZT>=JHI5~zbxOsf&iay$RFRtAOD{GaUlrK{-hBEXU~00o_re(P2;~A{P!mQ zo5O!+gOAS#Q@G2m7w<-+et9Vf&IgP5?@Rdai}>%Y02g@hXV&@sWxRX?|9u_*T?+y| zOXjnL7tNX%=kekS{+q6O`_KPu&nC_CNhb8{)Su35enn=p8K>R+Xo$;F{=YG?praxk z44d6-Fc_stnZ(6wLM`t*-|q(-?OzFk-=7M8CD>^HB1rY?HFSb?_eu~TXHjr2_!u;M zHux(3`x^dx4fOQ|{P%JYoPT9F+UX}As0WAL~FH!n@ zCkTS?1RHI1bUFy8rh<>p;Qdq(oV|A{2+qIWm|lB#{np(F?`^EE%~0EK1RtM2*X<{9 zTD~`kx?it!#XY@O#3cp{7Ir}fekurpi}L%WAPBxKzfT7k0)Jk1%D>|L1_pFHXMzB$ zn?BQ1c)rn|3WA@4)9^(+QwGpi?k`+!T~05K6**;!oI|$B^4(-NUikJ{v6oD-v(ca^ zCNY!D@BvxuX-yWcG0@+-A71)c`H%?L)((rx*j(esTqW(ciMfi7MHT`*?_DV%vH zE6TgkAim87K|^Oxq2M73{zB_nYw_au?`?kX&gQ*`_b;}dwOR(oulO+blcL0=C&OWu z^+Bru>`eg%-){yR?JoquPfrEszWL3+eeRpz{O<^?*RUF>)pJ2`{xm2b?Hu;IQMcca zcCI-C)W0FFzAVpwD+q#X!A2Vk?JGYE&YnBI6L(+hI-~_BpfDG{6}2z>@z|OY6UL`ACn}dieIKFWR{BNu-*Z9cXzKPfPdEk z{Eqy_`uRwHV|MRLGayRqkZcA;OwhYZv%=^JlUkd)^ zzitF?tbHqJ{qDDd(?1EOUj9iig|<)mV4VV3FQLWZ)ce61bvFoT7%yQgUkBW;ydRwT zho=Ju=bZe3A)IpICqnp3()-K7`{(WjKl#DE;P?LXd%-{X*Y|?|?Z$lr#jEcJQ|N<+ zdI}w#c|k`288DvqV5I*2p=(m4iQJFU?(SY+CUe=D%%(G$bPIM6&}6R2b1*~w8)Tt> zgBj}IV1~NQv(EFcoWgUSfhn4Smu0NyFw8)sl1RZt<>~gF=3>*-eE-QKQ}YZV2sKV& z(63&;)4Y7;O6%9mM1S|cxl5=He)qm#>C5Qu%&W{rUP5>H1C6|fMi#ELnwQ&4trgqt zxqGICFHpB`3#Z){UcP*%xp>7^#a!#Lj#quTTJ@6CD@bH=)mO%Xa#UMi&8P9`?IM48Ep&h4O(9 zdc|%7pASVLIje+Tl&ra_Qwq#X3D0`vS<&2zyQfuf{@k?|E}2Hoa9VerU}L=cDZl#Z z@84f-*Hwlv=w;=?v-!c(s41H>Es6e|0EzEE$9$XjH0NkJh*BzJjiRW#yQh^ut*_u4 zQu{O{*2_pM2}ubQ(8lQemw)hsW&ht7v9F8E`D9o&cawe@=V%jx3rZe7`2MOdMo7Lu z8O<-x=h>)C(mndtL;1BzhG{1md+iwEGSEpEHoS6!OpPZWt z&IVtY3eKJ*WWPKW%)GYI{?;cSpA8iLdwnXHIk(YPpL~4g+&91Z=Yb4BAN6`UX~K}` z*izzy?;9dGPX_@ieDZP-oS7kD_?yUXieH{P#ov&A7$J*%bWwEoS+5-u&uDbN&7f zl_MCxRC)M2{x$qYUQ6SS|LiooCUUc7VPcpPr%#0 z90a^Sg}D&Bf;XY&b>qC8@8-}X>GQgNR>UPZys`RzA-m85PWB#(n5p0?yv549K5+46DvKRe1{Q3s|`&B7$9?gVgUnHRkk#X*8L2&-H zejF8Xley_x82r*v_vSlm_gP8>K@fu=HL2a7Z~^hW#?;a@7{ZO^Y*)|o41=z^`Cb_Uv(Rw{nG#O&ZlVnOHfkdBJ0CU*(J3{FVf$aX7K&{Y$p9F zwAA4DPX%9L%NN%FdC@h`>t}@HScb(YI0KXI zYe8`4e|(kPDQDie7!Y^r!Pfd!aPY5!AN0N&1ZRHw3nVMZR!c0Kx`$GVuEZN&-=7MCe|nBl@Ykk-;5966>`q<^f>N2h}zmGb}P z=^*&+X)gcAr-R`8kk&yE{NvL>@S5Q5@Bg=_f`58$qy3HGli!;Pz98sbF5{v+6MRgr zvZq0C=HL9+|5MTrf-_(2{bm9SI8YB2@9R@RFs@5Mqdko#;vi7(pS$q-xeLqvtZTGl z*h1A~wfv)OC&kYvE3coE0`arqR^GLL-%k25iu+Hnr?yXSCOICcupA6`i}?_5L<|3Z zl$5u#9IZG{*LNT6$LXzpfrqc3Ti(s`IO^_;&aRTQGyPaqbhzCl?Wx24IFA)z{wQ1} zW4E&#c{5Z`W>hchd|*byD*dCVud40M@5QCw4$$~bo%q>M@G~vjg-21pc|An0;S80% z@VEjTH3ro2RtZH3r@goz9jSJ~!z|)b@T;l~4D%!{o#A!R8o)p^mCh!XU3vZ7g~!Xo zQ90Ip1->F1<=yxRfk?#(_Pkq#nIP5_pfpIBNDKupXx^tAngZrjLl>W+F@x^*)M1pT zNxG-P?X+3@*-p0w1l6H_w({s02DDasOoAbI6EBch>;E7?zDPO8s{$U!}w(7+x((M@5k=!Lw;3bhcN zQ<_E)Ka0DgGM277;p4~4!zeFewH@kTA1Ipo>F`qmX5cblg)=Max!Mk&JPB9SHUn7! z-~;N*^lhQg2+&3b7b*IgMM}dPwE>E-m-*(p2<qh;S2LujUvl&yR0a7@THH8v8}w ztyxB<2P~uKB)lsOek~ge`*9hc$M{}9r?4O=VYVXUX$)gxJ=v4dD2-%lbJ8-0g09y& z6?_pfqcAOV1~W@}ncT{A@CWW^zRa@z{BB%!_tj|F&!S%EC@$0}?{}sfY*2bgk00iJ zFq-+$6@$cjxEoBh0bPxXIPduNi#S)qs3;Dzyyw5V9~Ffv@@^Aekt$>J2cZ-RXEx7* z9-#VQ2@!THi&+2z?-9tT@^r&ix0(;vC1weJYP+R9^=mI{CH6H}iCu8D*xrBfGty!| z_@949S}ZmVu>1b4dKLC%sIUvrVSoR$m3;Xqg);Fd&eh{(k_~1lV3!8XhK70&=S7mG zPgFP^Vt_`$lLprIqcn~C;NGko+lEokKEDsixi%`wY{1Qcn>!Ch{ z@!2p=omml8i9i?Sps}@aU#(@MKH1h){H)BQF1BOjLy3Fp-j+hFKpOYeZk`SF5>rK) zC+Xg@dS4IyUa^|?WP!auCz1|w06K}{j_CKS>XI|3pY0V=3<`)@03IC*0^P>dG>z-6 z1w)fHg=kILHoN_-i1iX=$_ZzPML1<-n0g6l`l7l(F^X#XlEQfUoOt1%yrFsFH#9G7 zEi^^4t*1#Tz9yG9{@wrmcZfIst$*`d#2aBmA&*`?Z~R(qgW#2iZ(I-|s?b$pcKxrj zAwYKK#xb`U53++;mH8-MsR(5C0lEC#jrOfnDv0hT>hS{9VP$%0unRaFUw)EJU^dj#T?nA=kk$fL+Hi3_YTuIS0TLynb?+YCwWnBj+oQYGFvsz z3}aTxR3LHCfE#+Uw@8-Qm8ET+n5ezjNyz* z3RUc9hv}Tmt~Vs0lZT=!sK>6o3X!&1Dx;Dv zwWF)8r6{`GyL{!!6@zBalHx7Wj%v7n>l#|&q5VujDzkjXt#ip<$hgDDe~qXCG|78+ z=k?a@2ltyh(dJ^`v<{>_uh7yD$0F%$J#r4fvYGFXUp2dv_n}IT7k8al5X}bg z(PZ#x*WL($MgRZG>&6`--cP&o>bUPD7PC5F?M_yDg~QPHpy`Nq7+;!)Nx7em%4Rq3 ze?B~j2!-rf4XZywBsH8Bk3WkTBH-4uqySqtt9ZiW+Qof=IEPb1n8yV%OPfaPYpXh9 z9y6sm?lMN~N8t}IoX?9cw4q0cq2JEGvz=amZW5GO zu45li9Ys4+*R+nEDw)e6Wmg)cTC6mNSwHC>tu%UBS~m0eH%3VwH-~XPNDzvX7AuW@ zL>hOLmvL_e8`fqw8>Qt+gJ)``k)#JvKk2PBWOh~>bNFj6jh~hDqZdc`JKD)cM20KV z@j+kBEB@+bs28QZj{jWTtkfBdk37JYUREhbV#L)P9!32X65Ac>fP3+xLt$}CM}r;P z?99xJ6dY>~IQH6m`&-|tr;_V+k7rh1hOswKHj6=A6wzMXnVwUSkqr}Sx|^wv(tu%*Gcz+QaAsq2>X3#-N-pirzhe@b z{zwV&sp&aYVH7mV@8JKLnU%}H@``aU34zVb%)HLg)_-_Ln?Am&O&>S2!xZ)a)m^=R zu~7G;?$c;5E?ncs-wFRM89(lS<9EpTfv6D}KhD-0KYnpSlQ4h0b>@P4tJcYEK5t># zJ|z8M;^#vtL!okI@>FeRqcYC#ZOLpGN|`e6O#tUTr_75!)YnO1R@zpwmz4XX9R%jh z7x7M1lu48>EY1%Q*HE_wiP1TL^o&n@Ad78}WZV4Vdncs-gQPf}F;sElSN%0gQ zs4R!r8x2*YHdi;Ac&-kTNL`%oCB;+H5Xz%r+@UxUMgKPk(X(ce{5bBkTN|qAXJsdk z1{aOdzL(@GoaexkZZs?gQQ8~|g+UQyLnwwVbf?Jane3Wz&XRYQxi-RxQ`iBLT{S9z zk&C0@ULN)0CK|se;^_5r^GRC9`EJyW=MR(JM0ZVFOzEBtA`Jkj+u%+*=mB9JXtFto z()mG@MtgDoscK))qNRuiaZ{Wf?4RImfHm7{Q?`bTc2LC6*(M>C)ni9#APyO7Itrg~ z@PWD+!?&lheoyseS<}q2hsoc8(o_mEsJ)LunIR|}GBJ>Xz%$vC%^K4XU7cH4oK?L% z!2`9M<>)!i)nSsy{kSN|&U2-8=baxbGa-eFaw6LyJT2KS5p@v{qZ~&CLR}T6CSpW$ z>cKuNK}kV?gqY96=pb&J5^6sx)J`0ys+Sxjy|@QjPSP?{J*w0#bz8+U*KhttHyeZm z9koY)H=}MihpJ|n*E?6|7TPc_nMGG-np*G^|_NDeB*;{p76^_>?W!x=c^Gedr2P%y6foF25`Jl{|OYUxJ{1ZM~y7Jy}g;Y35 zhQ&@CK6kdsR*Tgn!hji)a}7c@A0MwLF8t!*s1V^9QIf{_aRm(>@t~9_?;27z;W(RB zeqba;Lyx*)*D2_`;m(y)ovbd3z0iZK7k7vv$fYbFIHZj+T`x|bR5WhqZKv}Zkfwds z^njR4hfhPdBWvshb30)Jc02EC(1Mj)IP1ukA|*}a`%s3 z{SiVh5ycAK#EZK;qiZ1a()PE}EVc*$D1R%(~^-yjYao_ZE_ z#0D$ksJfO7kMd-1zf{xR8P#sJE;rk)_7&dmDUSC4uJ*B9XMYgt3HK=sXPVU<7!2x~ zSELsoB;B|P8k}W%6!5vHU_Brx2I&K{+`Vp(eAG#6uo9%&2L-S|-O5%Syj zAechdMcNRQ@V6jr7;2O9_(D76=sqb#gnxw_QJBCi{EhTuKdaC;98c-~Wj zji557xrcdwYqYzYJW~ygQm(=fKg|0#u{VP0lwO~?DX%(*ek!XSia^aAsZetv z9u3DuQDb_>#ux`R1^=QcLGcs-gRIJgx2nalN;I%L0`Jx5VDuC~LA?Nw^V8GQ4WM^R z&Q&(AhrUBUO1t}6UW79eNKlkMt%F+ z9srLO1*JV!omxLyu0ps1$Diozih4R2`|VOOu-C zSWfz>DR{;zzTR`=)1=wvj~f-E!SRMT76suqi73!&6a+qA8$Vyz0Y2kkvcJq(nVP_= zbEFUS63=F*CQ)Ynj5>w|H*`S;Z9+3>D$jS+fHekYb3l#KwQ-QIXhjnnjhJ~56=vwWfqazH~>mLS9CtAv(Rb{ z3N?tHbrxF8GM)1aq+%%5*c^~Jqeex_RKvBgK#U==e*UPswJAEs%)Hp)GApBga}W<; zBYmRg)gtj=S~7HW#E!`wzH%b1{n6Ks-(sNMZu=O(r-}uB#=4^P?|ZS<@|d00Kmu95 zj)t0ocB7;p_m)|}+{$x39t)UOe5e~z?(93E8U)pn9HhZj)K?w0!prPHQi*_cQG1T_ zIe@URlcfe^7Y5oEd$i%pyn6WX3@u8wM|#!5C*T!f=q?~<`7~PCV%^kDSGtU!6-iNQ zlC~pl*ahN*Bv-}vi`(vHad8nAiAonh-DB0zoCqw#+kH5b%7L=={Q#w~cyuw{aqqmt z2J|ZT=F%I7QgzD)A6~oI?h(HW&7_2kd@-`iCfyTu&XT~V$`$y-?Sm6eY)Mxh<*6n) zsqCzkF>b*xjZ2C+23Pa!jT0tuBO;&89H7mCqfz*V$YeN^h{jB?xD1@^5Jelya zOmJk`+E0iSD^?4m8_`J?4ZwJ4Tooc6mT64q)(Y?e?F(G+!xiTd#Y}k=cY-Ls3e>*; z#2$9mu6h%}SE*-gG-6}WHY@?&SZKW1z2hxde8j1`8?ja_I|b?lrW()}6S@yQS)l|} z;VPn+(rHGm#+jX`3@VfiMA!ut%^OEe+61#^fNqY(z7NGoabKzRX9V*;)MFTT_`zzg zM;N78%4~ewz+u0vB7w%61CA z9G-Maw!?;FWZ4D_sr=V-_t?1QM^S#04j zLNmt9bQ&^6LO=DI=ytk(@c>6j(pbgF@<-d`S#m(9*`Zp$I8bGh$Gy3^Ir^g?M_7h) z+vx*Jsd1R}`)UX0CPeetiTl~%EE5muoB1H>TXk9QDrMCRa7>BsW)b=Da6mNK8|4w5 z)j;;P-BH@bA682Mm&nuyAY&~Z>?&eTe=?s2x4;10C1CANwv1r|it;0^7{yM`L#-qg zW>y^l9NQslNz#odSjJXc`_>~smVEA(j-ME@Mn2GuVo#j}e>_QI=D=r6XT%;aqxR;+ ze&X!-Sh+MsG;kE@4wvXfk+H}59RI=BwCD8ej_1@>kz5DrfBKLAgo3>Om(IVXATOi< zf+N*S28gtgZUZ`%r27nR)nESF$=s@LJ?PgmG6@-67Q?+9mzK9EH|9#cdNNn)_c_(c zvbve2r7E*gcb^wgKS|^B);FO|_9yg$*kNqOQSZoT=y2ZxTz(IuKY3F59D{bKB9esc zwc^W(VnQM%eK+`NVvoAs5Ny#Z+fbg zcolFwL01q0KPj2}ryI7Rdk1lzCq0~)H$+Ukf|+r6aNZRi-7EKTDu%hDnug(KR#6_n zS>j)awaQg78sgC0jOs=y=5ACVu%S?galcRDLF=lAz_n84F;jL=!q?*Nex{nJpn47> zC^#&RdTLq+7Ue~EEU-$5c4ByswaaeIjfs|v{_0bRok^rt@efA`U5d*jOR&g$OH?_K!|2mANpOTTvQYI>9n58XlP zrjVo+Ej1Tft;H*g3yZC5tt*S+inVCo zqGXMb815XN7B!f}EjM6w875$^R zahx-viU-m=30en5kh@hR^0Uhe?Ms)I+Domg{9vKAboJVmrKL6n!9gFtfU1|<*DhVX ze0A{>VWYl(8AdoA_4_j(rD?1JO1IR9``IA=Fx%Ztx-r$T4ZDY%z)(nql5r8QU~u(( zpgRWkLAJNox3nOx2UQ#mcCvnfNq5P(aB%5%S$sb!_qU`@h4ns=z>&4ApXK-Hpr0;c z;lCLp_HZ2=$owW>a%96llHtK6yVA3ReedkITlIF-@8gJ>ts4!Kxn!8^9?fO>9@TsO z+=UA|E3_QTpHug1m#n=(h zaj;kt8mN%#1JAYywtSm$8Xr#dtZP?13@AqYQ^FXiW_s0`b{@dY)jq6yMd@H5Mb!lk zS|NS~;yhT)kDA3|H(%8Gg~Cf|tK47A-KU@qw?8N?)ZIe0yY-?N#l2gUk;&;5#E0&f z9q`B&n%y+))IoslbDQ5z00ynG?3N7At7(q~J_S3@s$q2s`K;kAD)Qt|q(@WFeTKM? zs8C^65Q!ggFfNmieTFDDHJzj;0E$c_B-!t6F#sDVV!K#T4foB;%pCSD7gSbo84E(P ztD=J_>4Vg0_rv!3LO@4EG2(OQqunw_h&b6ir<1)j%i}`5znkUVn9~crPmI$4AfnwX z17?ZEiSMX?7#$VTq3&-MJHwQCX*MdQLk`Oq9I0k~v$f5sEaj~xP-e;LW_*B?FY9Ty zKkCKn_cb@rRicOyx$jjb?Y?iTNPp-z5pw-L$S~@nI=ybi zX_1u40ixh{VI?5bM3QPis!gE0Tc0MCkz6fGubi&lO}cSf#8R47AMB^s-r1aGb4!u* z;}qE^il@nNrrMsa?`})Bw%$?Si;u>^EcWr(?cT9KP5>AsCRWjFs|poWqL)3ZBxC5! z4L-v%p)(ZOh*EDf2yeJK>P>==Ub&+u3?mwcR9MbaH%mMDsHx9)^duJ%)XFH&qa(P% zIXw}vI;V{YnPh3pg#0%>@H1Y1psdyO$Z-kclvH7CWNcUMsp)yuysqAxK}|d>V_F%g zem6^pd0fDygj7BBoNj56y@?>|``7`VH@Q7893yO}_ z8LJvenJ7I{T}oDFH}B$o^gq_`##=VmUe4Zj-l{d(j@Qf%;=CUnh3d&HEW4kn&5yz# z);7AmJ=dF`qfjW3p+$lxOdESfYkk-H2s8G0 zCd??@PJ8hI$>EM_$WPMis%17g@tzcuzfiJfx?V(F?2a5ek1nRA&4+jCWV(%@9!Eb2 z`Gv?AO4rzzKRx6lX$PZ_Vq(Sso`BcGq*v~%L6kp@bG02hK-c4(d|?y9KDsXmfa%2qD3c~1*?@xO@=7EW`1f8O;1i4p!XqNt$R!-D%&F$l7sUDnZW{VQ#* z{py&x7Bue~YyY#$H-ChL<4@naNvB?rqaDWDE%!w3>z5lMiCi}}7IMOGj?!Pt zc2r{v_bj2fYnj?jo*}UiJ)+nvc>o&V4z=U*f?0>V$+J(vIX?<*=Jd*{LKwxQ!w0q# zF2PB7%v0hrV*uko2E$ujz&}q{lw%vI7_>lT>IW_P=5kQYorDipC9p}UZ<8iC3w0vy zlCjG3TFF6F+cIp;3EAPuNP4w>ZGQJsyLV|ZBBrSU;9?I}@2GH;K25Vj%1YzErBoB) z>Zqi24FCsv#4uY{?va>TwMQ0Az_xS5ksTe9$dQGS zLcucbE#W!cIDxXmr^Mj;bBsQg3rQ|XwQvbLBRhJS>2D_aYTDCL(WH^j6B!qyK{5BE zBBP<&I>ywYk0HPKyoWBnwT~pwI{%`6s#_{T3+LRydphfk zs!l}`d!~+aw2jz5tOJz_YomNM@9x_=UO(>H&ART^M!CkU>C|gL$c+bh!R}ov-Woem z$sSHh*)i4FFE^MZGRo?U<_ z?}FM&QW!A}=g01evj3)ufh!GwdQBYl{Mki^xu!aur)m3Z;X!2IkF!t#+^98^dUAb|(#=W1MovawjhN#Tcq@72RkU z-_G*Qc<XWnhb!+z9tv9{KaqZB+I*)rVb@LW_BJ3N+l zH}WLj^{{a(fqV0wOB1)r>hf+v88Gx{&A8evz_bcdayqTNekXPZXkL!tNLxRPT%iQ40M57F>qNzFaSEkNW+iwJc3ZZ*c0Z7dP*2ZPJBNNs8bK z-Qapb?C2<^`*mai*@tTp!iZ|iZ^lJj-Yxx=zwz{D;-Z#LNI2Cu2be(T0sg!byKMbo znmlXY%-kjLFz??=yS)50jLuaQPIJ5#-p#tMB!CrCySSXPu0IKC8M&~W_o(KUdBLl; z`;NR)x3hdwU3!1x=wX^*NJ6-JSdWloD=OoyqqK}%nyQ2(I2~Ha3+}KNyJN8LHj+J# zdU9$C%X*Ocw7tm*!g@Ll*aeDSz_PTu7pLV` z={AP4l*!Jm;1~{xX@dA20G!u4mqqYXR- zD{|-q8+K%#GdoEi63VqCkaYZhpDQ^IwrGxnU3N}&z_LO87|WGL6kK6EflB7+eH#1XGfy=oF2Jj zyu*63Nc_U!&+NJJTVcG&(SmVyL+GFOt02X6d>~t_aORkWu1}+q9hFX_y6lIrBZsm$ zUr{(?Sdtu@600pvZra;S>`^gq0%(>w;#O?H)s3H(Uq(}`>WY7O#5)QjL~e^u zJ5}FO3%qKj)Xy_8hYg7cc_HHwJ_B^t5s5|aaWc-KpxR14hqLk#9NKAH%Y_rLYEc9L zx=Z*I*WXydDop_t5YwmPUev6&Opf7Qta<>LWB8OP6}+4rLH1cl)gBk0w4i+E#do>^ zNKmY2J+f_S?owlW0wvp1W7Pr^mb$-SJgzv_f*Fto!ZEy|b76em#1JOUE7xE=_6BAe z=7er}adwWC7IW~}bI(-fKvicg^Iy9rEa#1H5VPj5iA8*nq8d)Vr&+#<=PiIejxT|-8(MVC&wEJt_SydH|8XSj{7D|$4g9Ys|-BiQg; z4Arzg2CS>`?ws5Vf*KzGdf~ir*ovvgE^~4-NK84fgyq$XHT6sw!k9C`8H_Ywh-E?( zNTk!FLuQq_wd7R6gA5d1`Q&qKIlWnNMqJ^r-Zao%N9kw~@}86TSUf}5%|&(0^BHv& za2_kUr_P_omf2`=TUvqCb0ZyX(oJ{uO-%cMzNOkwBKaOYzca13+chA~%ME@^XKt6c zJkEktj~{)J-WYc9VhlGvcBC(h9k+9f8|s3mTI<%5uu9(=$aes`OjEVgBJ1>P?`(z$ zwbE|7`clu9uDE)?lRrj4b{ElO%mv+5Y!0Au!b@`EVb2sQeW6=zeY4xDRI}LTkxe(8 zZkyL7@htU1S+k&;x&{u@o4@Fd(r@wSS}mAv4N9F<8MLxo24Nwub3|(J-PZM@a9Y(E zbr{d&c4Z;yru~#N(s)gSw5|ysJUsqiGbQO-H5?d>*dT4jN1z+Zq6Z}WjfAns+bFL& z@!{rmWB`b*!9_#rd8#H?&c&ByIirkpOh!*`qaeRmlP^B74f)$YgBTu-w?_2B(*w48 zgM(!I()F{M0*1DLv^rt#!q3vS#$3g{IFi1$R;?~ilSaKyH>^T{jC98B9?sN_yRJ^1 z)C0`gRZC~cAMh`dVc)tTmc?tDzHE31rB<_aQYX-ux;Np5sz zME&GCx*xGbYMT&7r!gbpC=~X>n@?>~o39wS?lEyGcGc zjB;Su*afOAzNV~JMr+7KXYD^p%Qa?AJUs_PW=~lk80VC*%#^!V0Gh24VstzY$u|4 zN|&JZTODlVRq@=%c5~?Yv+d)mN8D(gI;`K=())Z)0E!LIjJC6-gCU9TbTA}KvGmjyM@CQSHDoVs+a+D(TjN2a$f>6;3wdWAdOzq6+Mvm#6^8I(|=BZ=)Uc=1* z-O}mWty|M`_)e7fz>=1$*l>pgy@eDSG>loQ3Qo#&bzBPwN^=^hlcFbTha{)dkd~^b zEVD8Rp#r-jT*okqTde2oFl|xHJY(?0{Zu9LSZ5W|0iIc2JHs1qq-Gu`4Oo_P^Lm)} zacJ}e^a~)Q8mtUdO>i>anneo#(&=AMpl+ZkvS9By-z#sey%`DV-sMk!M%uo z2l?Ytu$Bm_i$#L3kj~gFm|8jaX(_6rKb>$oMU@L-%+^bQH(!oyo@1kuOZ!sB>Pd4j z3Ap&2$OS<~w%f_QY7BVfGl`l7_AwQJ)>S2Mv+1)A@8>)AeYLfj7Z1t=oH$ckZQ?|u zG64EIC2ut+4W>prbjLET;vF-Z+gc-aNTa3?&_?sR&l&6bs+~>43?z9=F~$_C%ZD`+ z+)z!qs1gp_qu~7-4qUA*>Qbnal;eDfJX25L%3|HDV$O1-vrP0?jW$ABczxmN51!9h zz0U;wIRS%X8lV$>Xf>I~YB^7PMVYI9obHwToyV%73$o&xjs|?qdb_2b&}pnrxO!vl z=B?Xz-dX>(@4dTm_ulW;Me~`wA1ayyLe4kf^i72Ro%k8SuGLQsj=j(QvjJ@ZU?2eotObN+gFz0PJP`oE3{IzY zTB^)mfVfNTYnQHFx!S&Vne3u$q0pmqPP`y+jEolhaaSLL(e53s1=H2yc1O`z(0Z`= zd7L0bPW#BDCnw?%oTz_SeNS4qC8d{rbNbjJPUF+&-M~1($u5lA;eJ|vn$~3g3^l~Q)%P%>`dzL1ry)Lp?s3KkT#2Qzi`7V z!>bU8vP;L=SB-VR@7CE?pnH{vxN(#=G-QC(C4pFdJjXTl>Jgilyc=ahr+zuDo58)G zl*WVd)r!5`bkR~vE@$+SvxSy0>#BHrSsKwA6z$|Pvus?#JeSkqHre&9kJ5)q zP|Ss0Vw5GQsYcof9hV=Y0Ur@rn$X5UV2g%vlYV9p&<+-dmOTar5eD8YAhmv)Q6AAs zkHo_?F};YY#;Bg|93|D$vLmxq)yqd+S4%BNwN_Muy^xIPmb!YCDUrjmOwH=_GNrkO zECJh-Df(EILvNY^)gOwZNfQ?3mT(Tnk%d#UbUL(!GKGeCaFAf3k*m1K*D>&|jT7Xsx=|~LQWJ@&&6s_`W z<;fQDxS_M-*YZ~e1Z9A=9gb@^N}s%+sPbuqkOl-6R`MoWD}3^P3-^sn_%fqV6c&j$ z&@6XMV>3R7?Pop7i8n*~wh+0@G33b&8-DSYp> zUgZ3cCyEn2yBwfCadQK3&$tKueQKeu&FBq(6nN{CFK7+FQS%yFwv970Q?bCxg#b^v zRn-Tq)OD_1S)p@+ooiQD)FEdZ?_674;lnANYYSQq>DH#h?S&hUv14mcOU>(z1@NK) zJ))l|&>GM&FqgdF&GsO_9JWc*8on(ylk3RQ1g=KL>xRrIYbq?*45~g-)8P-NIWO6V zq@8|9hiN{}rtQCP~XU?ZrrTP8ZFY1CaJkG-89&ZuNj9(>ep76CZi$Sa$O`ZtnMb%>t^4dZOM| zON&cOS6WNH521E)^z*nu_r&+-YSRAjLyK;8((3iM z=ZaodA)aIJ&b4b^-yiGbDA{?wc9$hD&LDg*KB8UiR+;56XWNk^NQ_Rl;pX*l?XDc5H^OQXad-El zB&Fl`^<>_2dQp`%Xf{Uq6w;pJ8^rOKE1T)24Db#s)E!*a(wrtF zK`me)HJ_YoI^9!+dBQ9_jCsf4*`Hn8@9~yiL>G4G1{yXL@5fOu&YQbQ-0yX!Kfs1< z43(;Zu#D%9gJ4>m{r*e?Mqs9xCst~PHK*eNq_~-Pr^Q}THj(qWW2I+ zP5R#9A-%jlojOHa&(Y&2b7fa%gzH;h?aI`BR<4ABvXZ?64FVg zJXRsMNY^M))QWItR}(TaLH#>f=eUkG)b~|cVxHIeQRhSEBJdD(9%JW+tc1yraV16v zc}dmu2Ob}L4pXL?-s2bj3zt11P4<$=`Ocv}hV2x9V{99QPlM$_g^TbXijjAL&0&Wn>XW8Sp6^s>4o)QBe%{^QeeBVdyhgKN~s>BKRI7NwDIY+5kqIMp} zmnW<6Ix+;ENeG*x9=HlJe8|TS$S7XQ+f!*>sLJXoyp8&HIK7~S0X%`yXBs#5Ro<9v zL?trsj+>md4N5C3tijpc3{;s(Xqa{Y?KHTHEcY)AHc#nV1padd&ghn7>(p)%8vPi3 zjT>n~bvIK345=#mce7F2(^^^Gf@4h9*zmkTzGyDIg3#<4Y#JZJSTrU*b}8Gsi8DAB zh*g=t7y5gACyntHfT5BH#8?n?|DorJ5l4si6e7RbI>)LmfcsMu0LS%;IH4=>(H!r~ z0yF1)iPfPQHeW-XJWq({BA#wbm_Z8tq7hEdX?CP|#Cvg)BzG`VrZ1TfLXj@$Sv4wL zLg>a()TVVk++(X#kQ&z@JGKDPye{Ew9WKENifN5(OFlQy^3Co6k-N2u zWDfqpV%Cnn1-65m%bf++_oK3mbLZ^0MYRlGGW}FSts1(bj`vD%2!zN+i2gA<(H)&x zxZ@U)a>NQMQD`0zz!oQ;VDt$L6wIet7QfMe zJy&G7=@^ctUqjhs)@rcfc?+xga_i@hW>3f1yPO(3bT=Hdx;%Wpo~#)gN9HyqQJ&$` zjXMwS-!j<{k*Vx{cBmw_7JQF7^;}%^WTDlr_=#^MpeHYGjf-}u@QezR(8l-iqGZIq zt*D?+Nc_&oY|X4Bu%7MbG747)6U-RGbOZmtDNWPZwF``Uo#$8R{eE`n?-95a6T-_h zD}OiEjTU3L(1XEnfg%Fnm3mVxv|4B$%}U2^$+ntqP=$FEbV?APdN3Hak+}q~yp=_j z+Sr{7Aakm5BS}q|m0=&IU^wU5Iq)$HkO0u+O?^J0m4G90{PKxvRtuN_SF`_ET_zeQZhR=Y<>b1oHFRpi`=W@+zFy zr#_68P|r77g(;7Bj07B-I?$m zYT08wR$-~=9K0B6FwatXvf4l^(F{eiKpKng!caY?&mxS=I_qeR&l5lXxz7|)TCLt5>o_ zYo$-+5S6#4IkUWG%GCFm4oi9u3jt1n2b=50>JQXH3k$o_JWWBFrA6H3VU!rqG`BtH zOEDTvi2Ki=(mi2jj1T{b@Q*^rd&ns){|bRB@+K}MN1ZgwWNe@>RMur9vmfOJqD1B% zKiO_f&wTjiTi^NM`S!L>PVA`ke+p}pRV0Q%7M92-@_S%`PlwyvwEJgD6w@wVPoh?$ z2cBNdxoRl(mQM3tMLAyF``%>cMOJz@e#+1+W0bPQyYH*y0552MrzQ@mV$!bQ6U*e9H|=WL!hAw*-ImlMB<^K+T`YqpC!2Bh1?n(&*SIX_FZ~+S~rR zeZFpj#1td^fG$pc408v5v1Vo3JRl}XZ}F@8wwLYhI%!+O*6gL(%d=N!mu44QVWsfK z271-8ncVGkgPLewZ_n7@i!;@lBvz5xnl?Tg8|FPNId1ABI%+XLhkrP7;oyfx3r;fz z@739bh1rGK#o0@FD()&*LSh;^k_^ciwR;5@ofN zYHRQWuEAie)S^!J{b(uqF<{h)D?BroSoC5kTrtvG4)FAgV@n?qu1l_ci!Re!GOPuLbu4X zyZi!C>A1JUU3tC-RCE&GrnsBLvXn!PdR?Cs(_eXdpkG)f*Y?|{G-RI?i#v)S?F z^4;TF=ku%(2G%z6BrMR07Ob#qyuw@q6raa3L{Q^=qHz!b32w;*$MdGM-ZvPSLG-M% zfII*ET#%y0n8ePsp?EBPIZ-!kAUBAB=1B>i92LUNRr#r5&C(`m0Udz|+Z?*Uoxzte z(QF8EWn6EnMa!Q&m2BMh2=HNP)j&_AFe~~+v^(@kponr@A1t6+m|D+ZD@#dcNkb-X zR|gE3gzZ}grG^eAfUCw4DQw8ykNF7EW?X+;HMp6KsX{lCT$Dh^Aj<<6ga|76+4zAp zx>X+TkDk8zeOZNbsv!*vt;=Fb@~S0V_b+{typdvcXdUl=Zf*|7&MxdVaX~SK@w22T z$DJ=`#qd7a?aP?EDXLo!#FO9DweOO*m)&zvjvfnXz1lTz@iGpPoqqwTaz!=PJI}wk zGj$g<8Sc%XN<;dEv}}p{@!3mavx;Pmd!#G%V9;2I-R>(Dg!!BPfq0 zINkcEqB!(j3*9)i)e#y&Hi^#Y#=I(-k(ttH4P!igvPOX68GoHHJbee>F`<3%L~J~L zFc|JySE7k2tV$8h`5z31w{bRc9+T`!-J+kBost@ZV@rMtqZb)uOy9Rz>MVHs3n|1c zljE2>>m>#5f3pV{yjld=o)_y%cMdZsNnxtbsyK~y`boNHsS50g212i5GRxoQ)1Uaz zMB-DKOy?c(EjQ3st>tk z_Y~&h+G8YTR!05iARc5n&WO&dMa?NI5k)>sE{_&ekHwTs9&pWiVfDhI)QS*;?=fui zf`WQ0>!hmMvX!6tJ4s-AfJ=2;TA9%9xJcfJ=z=oC=|sAqQIBQgL6v3Kg2KV&l-bB< zp&oeSfLPri>gRFPJ7U$qA*2ao0uqd^hCpg5B*NGeA1(hbcFY8Ap4%-AuU7^F)q z!4(~>qysXc2wy)nFI@T~1XZc8I#JNx(Gl4Cr>#CuR z3c~97$fWrTcZBLpXB+Exy~=N&u(FuNVeR!U(5=dkKl5QNW`sIvO+^o@UbJFGq_$De z?ZLP6OwL*R4ivA@_Y?Ll)}PcCL%NRQA$B4_QR|kgn3-nan0)N^v>M+bL+~2I=9H4$ zm?#e+P6qgX23aePf!g|-m|d%jbyyh|Aaz^tm_zo?88CnhEeWUMe z5&p#9NFudO9EYn4Iek6>5FO1A4dmt8;k7Ck3NnNSm8JT`7AN)FkBhi)r>D}F2@iLXFQyb3jEBjZ zvr5%9%=aJwZX3~TR}lm@-v8o>(t0!_uRLta#k zP|``cQ>6SbYt@v8>$bKHgA}9DbH5#2N*Mw4n#Pjy#TYOEWt2if#6xxVw_ubq_;l0pp#yk zd5}3+i~9W-=hHpXU>eY*@f)KA=b3E@bnIOTA_5ejeD7 zPT`2$-tN7%y*-Do>FKCH+>buoiOcB2y!+wy_S_7fe>k240V=6)GrF6Bvm`yaFX`Tv zzLipxWZkKeDT39in#FXkZ?GcZA(I4R@R`Szw{~MwbA|0#5@-q@Jv|#=4qDZ*%xHhmQ3L6y~W~ z1Txo8QVM4?mn-vNp3M4Zp#?F1G(I<=MLJ6i#%hQ0T3O8^N436&#z=Rx8XIfcB!B9( z=eJbr+3v0zJ*s`gqkfsdg-qY`()*a$ahkW{4ZMeDfT7ikvLXagiswg)O$2a}0DM6+ zG`q*Oa{0Jc^6s&1T&=Vr>_&5)U!okjx=_dn-gt%*Rr4o{= zrIE>=AYl~wZR@klNL)?;G_Ol{d^DprB`bCFqMDU18HvA^?eGQNREVuVJwRl#udl@^&V%bW=j$7FwJS(3^>4F)QXN;DE8B#gu?07AL;8r!qSZS!y{fB5^VWH?PBPG@}}; zJ-I&*b>yz?*1-B&hzA|tPKR2WIH81k`cK9~PUQHrW18!K7EEi+XT3N38OT`X>4gYc z@8P2Q27~C&=1Jyd-R#jO&50257*fd{IU4e?9Ot1%`ipq?i#eu7+GoI+FT?b5t!0kx zmed{Nu~?g_O0i0(@R~v=U`;dWn=F1%F!jq;!2~LGvDEC=Rz#R1zSvVDDCI+eo~~Q7 zM_(10M|FF$)07ryr|CzU*gc}0ov3mwh7<{lS(NCuFiZ~?yAflf0d2(YW*QuhGI0S( z3Vr|YNr7O>sKRl*19QPRfbOcOLDU8^DwQPs3svq%sfI=%F2+HgMZ(p%gooDwnaxo= zvO2ZNC_gre*ilyM&iYrimND_XaU_exJ*43%no6e?2J4lg8utxdnOYTA3Hn@5%Q!!X z`U<8Jrsa9n)<-T`a^VGqFzO=Qh;S@=NUyIeKamPz41Jwq3>=~;qCPK4-DAC+tJD7W zgjx5dU9UX?%7L%R1JFa(J2)N8=c2XL94DY&Ve>DXNaRO=?ccIy z!7#yZ6=wiuhjfyb?ZW1){qKtB!m>AIV!m`TJZVV%VSimZ-21_$<8=}H3 z5lAtGomCH+_|;*QP+SEL;UEH^kGhi0%iIp&v37r}7pFb@N?e_NS)$LU||E*xxiSj{{j*y_pt@ifP?d=;a9RmcfQ+7znTIKcX+V;}b%Ine4 zd3nXW>_+`K?M1om``Y66(q-p;-fJSZt+|sua|&JEURtz;_M;pr{=0b`A@844ZgG3* zTBTf))|Xqd<@(vEC*WRN+Fn|)Z}O}_qb7wRnpwEk-o9aHVJ~JZ-D+=NTiw29N41Y$HMG~0A~YsTq8+|PzCkc-=^7A=Sw%Ljasu+YJ!?Hd-5ew6RU z%`A`7y|~#;@^0U4>h|`kB^fT7$G!1#m$q+QGB^Vdau9N9`8?`N5di1zlXGn&#+ z=<3bwYj(CJ0IEuYPJ#WTjFHCh;Hb&z58WlU28IAp_Iy?~T%N}Ik1(~3XfL4yzT};^ z+Y{nj6r4#1-kzvSI3_IIQ}`i#S5aRd25||!*}BwhEjaVHx_#q@!F3JAS1T;t++MPi zQ&(Z3)m(IXSi0r1w(3HuY5rO})UoW&{%l%fs;RT{k8OSGg43|`Az@?_+>!QzEuE-M zB#E#mb2byQJ(UO~-Ym*9=+Ig^0V>9I^ZK-Is6jI~g9BtTxemy1q20Q@ePam=8uMKh znzysumB&_W)+h}HB8Q}p8bRsFU+=vQ^Wn$9vnSHsmSJzR#wv}5ivFmRY_xTJ3R(0_ z2pGn#aP3&A<8PQ!E0JDW?cp&&(IMkAg@KUupU^?u390D>G~srT8ofgvswaM8C#NDH z^Jd~wZ7Q znfdK>J6Gqo!wcJuZ+-jX^vs)Y%`UIJ-MRjq?>^q%e)7ZjKlt$ZNBSJSaEj4Rp*~RI zw_2-kKz^%rlfK$5{#xL#Hh(Sh*CqbC%wJdd%ZM@hgx_i}@$+l^#jUq*@Ly~6wa5<_ z`Qf5GWB?X#aSi(KU*SGma5TZXm#DdiE+WKEHI zuvv2a4xGt_&L}{WKkiG=PGq)R**s6!JflAN$!G`6L`rI3!i4p}2@0q)kAc-CA6PGL z-rd@ai>%M*u=HJ|2>M#aT?qYyScTCrnJeRdyq8A<u zjE_aXT8p~-v41V?x_P+?lh)mGXh+qsFS%xIa3w%-jhWgJmzKl%Za<0Bl5_<=T~U94 zL&WTannf9vBR(t=7Ds7!KhM(S$FaVL*f=jhrehEbqImgMu!n~PxiMNl9Fh~)>N?&n z93y@^Y5CZ`H7aE#d0x2*;F>B8hJj|mf=BXEplgEI^pu)z;Y9j$SHo@Np@T68=n zEr*I{2sT)I;l?c8$k9uBbPy3JpVJCj1<9s&AL^Qk#N-GGbW*+o+4z9k)(3P<%_F&% z&6=@jK@qa*Xt1Aj19wXhJWU1dA*i^=OTa zhS12HM8ja>Ab!sbD(b8_Iv*>)I^V|GjC#F1F0kN85F|rytl}TB6ez6Wqzlbu($2iu zb1#BH8bra-wibowMeV{_-Mu{O#=GF-u>CRH@^NJuK4ouzXS5gNteo{$X(fa%cb{Ys zVu^~2F6Cq65wy!y%8;X(@~%2%ID!*|q9q8~XVDwOEOKQm!MykOvxbrAs5q}NI)3Oq z89y#~vdaNjHHf=B>WWIvj(5U`lf@@YvrvVVyH+_=jgZ9X*2j>i`6wFY&i50-I+G@e z8-%1N!MU3lQ497)T)y9nH1Og$6upNw5j zpe{=miE#!sISIMQF*|LJ527ZsI1U1ET&!FkteX6%b2?nkU+Q_H_3)wzX689*Ost@g zIC5ETEx@=kjE)!UWax3P24W+C_p?Ja8rp-Sn#*~zuR?=cNb{}}W6(ibLz$cbo|nJg zEl~KWKJLU1A4NGeB0;IzwWl8=1_n){j62{7djT9t#gON5gi&R?yG2}fOk>^sQTmk6 zt}eE(URfgSI9b{?p*a^X^S(l)kp|@W5laO<3cdN2&Ag}D8R)LpkJRWdlodtDhv=04 zt0ONxb9FnQG5&8Ad7cmn6SvYwN5g3ea;Kl|M15YQxK705@VLSwDR1OSyz4!$T4FRs zi0GZ96mc6OZl}YCMVvQR_u{l%RvXBkRVGjQz7y=}MtL`GUJnoAyhySX9FG%=xi6!< z3!7!P9Oay(-*FX6X&Wa$Psmc!iRZ`QbHxi4mI z^WEFtOfnwUvUFF1)V;UsxY0K${X2>wn{mbuTMt(e7^I-*}`=oL;@LMdH0hvTpA|mAD1DwMx}%^QjeluR^WIF zu5KWQzFqV*y|P!+m=QKkjCj3wBZje=FE&WbO6M|TOIa5ld%s51Y9EinIiQ8ih@d30nXxc{j+(%?G6mLK~Z|xihTM z1S%)ikTqzI9vPD31GabLLm_RCMeWDE5sqz=qsPJ~kKGVVWPCe_)AA#v-`ycJy4|yF z2+psyY%`SX8ojl6p|Y5w%fd}U%5&-J`>2|J{n43 z6G?V=@*3Ha3-b`On@?C0dmKif^bhmnivZ(a|R zy)?_o_Et4%`6F{Sh3lvSCUAnm%&MrMbCq#X#?Fm5_((XcXWkO1^}HC~!AepMo1})A ztaV|W$j<+vdPLZ0F+Wm}_Lm6D^p-z-Sca?3hg ziaw9kayLs4aBowYM`?i&mCm4d8Q0hB$8y%G4}Yx-GV=p!7f_h7RjJUWLua-K6~$<9 zV)CO4i;&uYNTZt2X~Mi2vU7gC0JDznLj$X1kfdH-q=jh=3Htr!^u>O)iWz?&6>hnXhLMVBvX)T7n0W_i0Xp>f3*qOjq| zBT~b@=JKLTEZo3iRSK6vJppRe3YVkkId-_+48(xkggHUwFu33}1K4GMR?Xsb)-6PD zB?=%utkWxm?1p3KNs=bT{+I`jD#0RbL@sZTiCLI-a4RB~lhf04O2mPWYed9n!V(aR zA1Pud44mWyb@F+?80}3bnjxkvC$Er4YGA#9B1A)w$iIWe?2(K3kJwZXe zJaQPv=OVet9z%(VG;rMRIA$jj)@l#7*m6JCi+m8Jqp06M`i|OqnheFmCbynnWVNIN z-Qc21QoRqfmfA6baA|`b4?gwCRuLapFiDn}yYXTDi0m?PWa`~az#S8+6PcC|`LPg+ zqE7Zbn4@^Pck}+P2eF|qUTwzYrQ^Ej0`^*%uqanIns(Ql?2*&<_`(Pp54|%W2B!`( zJC&CHANJlZHj*qm6JxJtMm>~TD_L6au2x>$3g%2Fdzi`0B&%4(>MRYbidD_&W))Rr zbr&UU3+_?ALbI(2h_gtgJ{P@Ru1~ji}?ItO! zawV7nu!39~kwlV63?AM1{d-5q`)#WA1P*hY9*A-U_FAM0Q2C3cl%qB~F2X9mkN&LU z9xd`=PFpelyn#t^Xj(VTO#lAi^?6iwy|IrU+jBZFS$N6~(m9ICE*waZpR!14$# zf3QvKr(?uc?rzqp(oBPf7ex`|oPIk69$aXPU4 z`tgsko7{8LOdL+L8#v}AWa^?1B2qH-*qKPn6s!iQwbik;^_-`r;zs6UDcQmJ`szA`xhUP?k4W> zbQ?rk<%mQ20Dd{irU>Fq$8l0tLxEm?lNUC~s z3YVHD1ZYO()p@uHBvm*`FJ2ob1fZA4Y$>6EO_pH~H$C^hEz$8P3K6zlFa@3rDjsfn zj!>)BN(vgT#n53191Y}-q{IxWSW?}MX{{;Q~g#` zHXDaFSu2u~Y?tP;Y?0r%)bb7 zHz<71 z7raL%nRlk2J{52M1lKRtjp2tEcXylp9}m<1{9?1htOIhr=x3F?-V2h^MyG#x%HG?P ziD{OoZIqc`0U1eJflgCp^2Wh+UAoaN)?Sg!XH!G1ZCsbbc=-6Fq(0Bai89zh!bf~~ z7ga0lk3iX7K4+kvYIX`v#^Y7yV74JP06EgiNVImkWS~gc`kwaSI>{-nsbE2ykk39& zMQc!UGTBX=Go&~b3S=D>DMLR2smpJJrjmT1sIO4CV9<{;J+}6&iKJlandnX?{(c2C z?!H_j)F- z&n(3kfz?!vkE!li?#UIu)Z2MfK+uDOi*vR}LGO-FSC+$Ca98Oqr?eYKHr)txhwd`# zWI?-HW;H4?>YVV>IS*rB18H8;%NtYE?Kq3F86obD6YRDz#pG%mO=* zPY|mGVyb$A&lK9QZ=W*-A;2nW#Au$(#OA!|+Tc5tX&+bK+#2CJ-#Hx*kaNUx{?7?YFTs^fe3YS3c*=;D2|4$9md7-W&K=dXa>hkvB_nmU?zMhVJtmyoXI#xG zBw(sxilnmqo!Kkq)WOu^3&Vv881uokew++D;gcr5>}2b+UrT3{AxK<2wMW>t!Ff!At1Ec#f$YN-iSlL~qom^%~ zr_kz@)C$U6t{0SPJBpIJV ztGbvV)Jd{bvDDY>w)@kT=AGF|CaW=Oh3hli21tAl2eGm<^*M8QN8zI;I?sYBN1Isn zKo}2eqkQWyT`&l(Q+)yHNi~|geCs!E!S zJ1nu#IQl?&9^>RVNl%ktp2AH0h>okVE1M%nM$HbivfqzR?&Ea6E~2!X=*W?%RQ>4W z!8p@4HR-Ku&RH|B6&`RCZ9~Xo{ihZ)a|+ep!ht%CNQ)x8$whsPR(RkT`{IkF{Xxpa zhx#XC%i1elYhmQlnoz$SR6f-k3$1^i;|MY+P;irR{nYaJux9)%X*33`e{@1@YGc%l- z`R334XlCZ^e|-Gb%;C(;jjx~JEX={o%#B}gx`}3H)T5u9n|)_?&dqPcX_GFF9p}i8 zG`s+D2TV)mj+Rq3W%OgXC1mC-!TEpmnfIdFeTZ0)u)!O ze0XK*%IIORMo6QbR~H>q!OZ3s$N7HSUnO7&%QCAcP5GBNFNk?ReEI>-wqXojAWim6 z$_}*zL`$oSi&>gCi4dFFc(E9c79mp1dtCJZ;|Y%KaGPNg9!A-B<30!taOpPWiNKZf z0d@Ay?Ch+rFQ6aYW$>;_J~cDEL&tT~D}3y>#a-IPGk<+X@7iC|yH+l2l^y#QcI-d+ zrN13x$NuE^|5l70`){~A_78hAr5*e8(nT~gbK_eY$+|?uJ9@gjest0BU2v3{Pyd{T zjKlCtL7qqzSI>s$^Y|~tXnTlij7Aq zIEjiQDk|yzzNLb83mk&}TST!iqy6H=$Dghtu zh)%;Z{`>JK{s8y0xPKS{KK|Bt_>?L-IzUPj4^)BFfn}dMDnX-rzx&QCinj=4)X0O< z3}NQR(0cDf5us_zP@^;}s4M>4f1}*f2EhOf(PHDxpjL}Wzk`r z7ugvOsW98eR@FbYoBgzR9A(Wo#WmLbIP2zN5w<~UEW2h#Mppf*rnFv|9Y@h9%J$R3 zCA0ti>F*Kg|D8W%GW$1$%)VAlX20n60~-73pL1q3#GNUO+d-TcUDNobs7#B^QI=96 zhdk>E*rt&n#A(#ei|!)C&tfyok22H`yV7W*qfs+X;&TVnZD_2h=;4Rk9sM&=yIryi zCwSgaJcMB4vQr61qsl(CKm#RWYo_5PqlLPr?j;Ty{1n-&F}dJup4uue-9}x?i8*?8CIbxVG8Y*kaD$ zZn^*bAN_Z<<^IoK{_lyi|68)<-g39xpD%R)O|kqN_TRtqH9t-Fo!L2i&!On4&>vl3 z(1x`EZGNq)^#r~Pm1a7nM#Uq|AfsI2V48MzN__&d!$y*0f>n#u>~D8?yfZ3cf2M}GS32^W1)UTNbq!YL8?#F zeR2&VWQtDUKcWkNW!A3I?!zT?3E8<4Cc9BgcU4cEZKvLi^@y zc724JVUR<`6H=DaeC;u5LB{<|mV5FAIu684JtBV2Z`0 z@ZbY_W>vLyywUZMX#dB&7mlJwY4$8ST=$Flz_+pfI?f9p$~RivQ5QG*7{*cV!@Ifm zeGk;ljVJ!!#}8wFGSd(@Sum364;No~U7|FS#_}61i{w-m^oFC~z1q%_k}I-J1V6yk z-%0LP<_lH0Y$3$l#2y-40_9v9@SMT5s5UiFv|i$fKZ>8Z>Pbm00|1j9zzKL>s9~v< zPxfr$LKiAvMn?+tQX(OvQ1{aU%9-TvX!Swolj*i-%3E6!%cz{bms&=cu4wRrXjKNXMa(&;!5hYH&YV=%QIks5_E*81wwyL|aAaOI;PYJDk9p6McjF$#aK4ROT~4F^OV0YryWhHb|684oTm|;6P6rnT*y^cHQA^rO z{FzFsFH~)F?fa^w>IMR5)l@^Z-6NYeY9!s#(a{a{zFM|{Wc{(35|Y^IQ6zbzCI4c< zNnL89Ae>(K5{ExyzU(kUWmM3^Ln3@*30T#zS44mG|fss@EG+RRa2P(yiA3Oygd_XJ;qbvl+BrY+hY5SROn@Y0aUV!*DHj0#SA?-M&S-3e*+oXnCuw<(lprqwS zzLuQf?us)yZ)?t=Ne?vl(ctW5k-juNkY=DImh4Z{-KOr%Y(=YwI(dop^G0ag)8G;s zZO%5)D=uNsqjXi9EDgP#e8z*THc_@fsNkNuIh?0Us||whb*q_H$L9nxJ5kmhrcZm2 zaZb|TofZs5gKl#?@e#@}yUjq`lg;4Of%Cv^SwycZI@~#eO|;RUNF}gK80RmGbQJfT zC3O3hg?(92PmFS03MAr==BWKR)@0!g;v#;dzu;rjHulk}DMzr+?zV>2zSZP5%;^O z$)>S5Z|>=&1P))VP$~nbDAH~fZ4ovwIqY07r zAt3d19%XJFrTb+Lc8;QCeUL}Q^td{K5aU6d<;6>)FfclD2iAiRqQQXAN!2SGHdSx~ z$=~#j$;h#v;Aw(lC0H6i}XJds$=W3*YL)?OmIPk`l?rQJZVSMjbNVdOtqu2 z)(Ev8xWIumI^rMkzq~MHR5dr|wQf+4U7{))~q<4X)VmhLDL%k>GZ)?8MkNwT% zmU+E?{9U3`y=)*dcBBB8^SialBaQfYDj?nwl$GXb&phc3E0ab-o;#$xUf!NYS>n&R z8}UhcN?Yy{>&hz{s9+T4d3-|obrZxANM%;KxMXrOmkTOff2}LzD1I{ffI}9gy;MoH z!URdc>SJM=G$!2YvK$)SJ` z{7kqaT!%7m(d3*PUiNkq3NBWIyor~4ZSidM@}%J`#cz;U!e z9B5F`Re-WIwk)K_-o#g{IxT&XP-SHf84H|>iTfN$D0UfNdMa}8C^E~XtD$gl!UdHV z@nC=?d0NysQAqbY%+hhvZ?g1qtZjTsw4xDUeYWoWc_~N&PT#h|!Y`bea|!a~yyU>c zXlLK6dVA1Uj`g-Rwv;jIrC|5G3c%dcaiPp3RS&qFx)^Hq0qWpY8D4>^Z#-lT z+VM0{IkPyKYAyRTPa;q2G{(dcJMMf7r`m?GJGRQHs+~5#xVQbkvVHePcHLKQvqsT^2bV>m1ko7D} zv%9KhzVp|oAHozg$$C^GhfmreqiE%tsWm%uI-lsTPUaK2N5J(F06Mg@@eetp=--iK zOfQ}2FWPh>uLC3&O?!qEqrY3Kp^5||eb}m;oVoMZ@4G75h^;TqB=P_O$I`2h7yoop zix#}ZO38(JG#KYc8n)jWM`L6F=!cJ^LO%jEQ9g-&=1vf2!%#Q^Ss?oP);K$i^xNf* zT|LBk$Nd?(6?5tU;3;jYs~-VCIhHmFxg;b_6r|E1m7%eTG5U#(b`by8FFHZ-HC^h( zYf!#_+k2=JSolZrnv~zD_CHLptCp%u=BlneLl?$EcJs~O3zTR@XmieUPq_wCoPfB8 zwBq8luQD|N^KkEdxLiiS)Vp?j;Xtho2ENx+)F7h0kD|o*we(`s109FtWw~@hOYm}% z{9uKU2}4mTGi+Bmr^H>EW>g3ugStaVKtrdsG`Z`^?VH^gD2fNt{sm-s8y~#veiWm(O^hD_nXoZ8`++WxT-eM13p&d^QW4nNIZ(jsy{)4Vq#Y3M9`G<=JS2=S_!kXNhu4uF*};d zyG6U7^+u3w>XP7OzE~Cw)00w`G-aMm*{FgZPidop^ggm^(?Wnewu!4N$zQ1Gi$oD! zH)Re<6?EqUWgEwReU7>;O)o32Y%-^nSXB(0VAtSQN}Z~={wZVg;4VDT2{|wB$uG}; zto3^_uQ7Cbe!5l5cW{5%oGMG6(_&K|{TfC-ZP5^@n%? zH=QaYO>rNku-#q{n^Q*c^kOHhM)a2%Fent`O85n>0vPpu2Trq;kcfRm&SH zdOeDIMXnH$rfgUhW`|=G-Vx^KS6wp(L*rhcm3t>dEsBI|VyGI6G|k?0Jlf-V`p5Ox zMJ7z5BIW@i05$=`>&O>4g7>W~Ez({(*e#ut#IHsR3+2=BsN=(`1ETP5p zi`Q~xa~T3$?-6uA$JLs+*ZUR1pX{wtDi{sIIH9L6@$fzT^8)|u;h#GGna4jr!9TC? z&pkiXz@K0akG_L{8u+J+e}0UAKF2>_;GZV`xnV~aZOzyZ0G#v0XbO#cHK5Sd!;Jl? zjR$k-2O*Q*lYIXmiE*Q&H9PPT_3Jfc1vPdF5t8+FA)VloQjRqrg_)a2>#CSKr-fF! zD~RSXwScGxuU@^9;1zXGG3!^aUYP>9x+OiPb)g}I$k+`6aP`(Gakj=ik^y9Jh#KKH z)|-}l(t8%7$YpnpdqJAThjD^Tn$kPKsJkUJ|0oSq>P}~GS+l1aF5TOuAhR>H)b9ic zt}$1ss%Bo*;1C)4)8->i)26{sFEtB0m~`nVD8?GmkLXHLdod0r*ln=;M(lh|L1YUt z@rZXpo7fsJR-Ul6oumacHchi`zLV3m{`nVN%~>M*a)k z%ZsGAQuCp@rszGpQyzyTI2O}DV z73YP`*`y~P-_V3fuG68Ai{L9`&Vt2~OYI5uX*3Yx%O|gyb`g2hNC=qiP7jjO64A_z z{l!EIMnz{3Hy`4=r&CO#(X6yblzX2275Hh6*bn7tOE+F8^I{p;O^qyK*?f~q{B@9! z_u@QHGrD-($%t}Mz$K$)S=4Emt0GO+AWi7ht-Zpj(4e9CbD`3M14V4WV7D$rKU599 z-(*wHtM^p9)l!Q>fJ5@0ed{IiNHs=+mxkzE3Hia!&K6tXBnV%|eL8BS`D9ZC-iZ)1mC8pr*o)5k1_GOgh$!;_ie$L&6H=rjD+#V&@i4x`!7e~ zVf1pu)vqae`rD&0%cGZ6_iZ!Gj{E6p@^MFqqtY+I0^qClzfAQ6T-niHnSw}*Y_!@h z?_`RKR`>*`^XhXYafxnCNLf}xuD_Nz#8v248ANjT`XhgHY9jU-a`>~`Ih+MSHBq0(-}uZEO~ zMRC!SIW3N^I4y}3d}YHt z^BtP?VAsCRLz?srHHAR#c)+S#|`r2RNmOA^(IoIp? zOMjQMYyMryuGw*m_1IFle|c)B$fo(LUl)AR%6@1y*Zp%A|Cf1Hz2iv8p*YMg63O~@-8eXGRDd}b>%8R>d4loxf z35TH5fp+eW?eqwCsX1_w=0&F9iG&b^Ax785QCGMNQa{2I-%VBPd~w%$qL%KW?z{Lu z zw_D>EyPT+sSD;o&pV$aQ&vvn75yAT?yUvmbF%@}E6&{=ZvLk@xi8gP3pFJ`@|$M(nE8u5LvRW6c03m3zS?EFFql;1B2eC zo3EqSF+5gu3WNss>~qY`8~;Wf5%x6W>qLHx9rI(Fh8#Am>jO;GY97vQ?Ge#;Sujtz z4l8h$)7Cn#$d+`EUj^$~rob;%k1CJ{Tx9t7|C-Kz{0+^i*ESpXsc?6L54Nul!+79w z>1W^gW2&n5kNz*_(tks^^v}Co`Y%*=gAB;(C*atB{4Zak#9C#)RoRbH0|Dnwc|H}& zOp&Vf%`m3--+U6}z3#2%@=|jJ(3#qmQwmeg3B3JP)xNpdT3+n5Iydp+C((W$7tt!& zkErZ>7#Bz5{bny6F78LsS#*L{u3n&`29`|KH&L%KA7>HH_^PAu1c$j$M0lJ%~l1xi6z4e`FyZ&jt9~Y*ct(%JdFgn>t4$_UJHyHP$ zjV)Jor585j1{W2q^qu0g^lZBbvjSxbRnS^mU2d;-R?1CqD3Gpn;!BuT=o+Sp8*VNo z7@FuC3|1==5E*bXq?wBPabfddbEjf&zJO*?LcF&)ijaL0fz_(_2Ruf4A^O^T1PdM!FWAt9yV3b?gy&gj}F4|pg>wLewfEw z{Mu4e)s`?M7DLf$$cwGkD*YEMDCc#3*(20++skrO)s|Jm6dkUoBjoag1M}`G)HW&N z=iql$y^mSk!vSf5=w?&ZZmNcQnkc@{OP?|qxU8py?$P1fy|@?L;N?%YvT=r2c$*aleCDK zlHOC3WEAIGcj+(Co{4jiYae7AQxT4XGX~Er6zbY$5de~1(nNJ?dXFhm&jwUU-+586 zrskqNAbP$D8h!6Q5a@x@)Zx&-ImI=~(v!Fk5H;12&pcPBIHbNG5y;dVedtOhsv^hR z_DAEmcZ>}>9`S}7#z{O3-JurL=@Aa+^Ragx51a8|5WSA~;{nPN(xtqlUdNx&CFL~Y z`s;8w8UTdwkheJr47id#4yl6SS%XmlE5$4SK>jmN57Si{D4t5bx=Zv*``YqN6>Oe~ zJzyCb?Hok8SmBd@J)*igblPO`C#-$BBDu{5W0!<>R#=-+CqLMRl>WfJ3ge$(J(ZoW zT07GM#pY8P6Bfc-cWl~u{ep3uCqSX!xs^z^cVhs%z1xNp-P=bmH1o0X0&vYee@rdn z?1;-cb-^7`H=7twKbXQ^Erv^T)g|TaxHqfD)y*cx)ekPiV*MElceMlGsv1~YO^hqQ ze|fI#14YY5tk=S|QU#Z7I02e{RI&8n)V%bRsacU?J|~(@eBf;1h-x4&;Kw8_R73OQ zxZuP-mq={X$#C$hdbvjtUjbJci1FP}mU`e@;foC%?F3v>Uo}BFKXyA`bg=<*Z@oh- zywJ!X@T0_D32B2pc3aaC3}-x3q1R9>3+S#UB(C|3Rp>fv=u`r>o0`~^sd7@eELL$N z!6llYvrM?vv^a`}-YQK_mo6-@Sd*DgyHgXN$v(i;Ci`$N)Wmx_$j(eGhI=&{L zXr}3=BV7U(-HTl~AGeod-jTov_#C zW-J^UR+ILY>!KE}QYv#YnL6$q=hR1ZBG%Z@WQ#xDW)Cg0qm8R^;t2w1U{wY1&u&>Ddi6Kfjx7 zygO8baGdaoGT4w(8zWBCO_fKzH0is=qv@huh3j>FY3MiuoUMV|dC^iwA!(IBA10i4 zH3}hHv}%HUcp6DWlGc+9&eX265W9A>O*w4t^Atm5+F4Jb$T@p3;?h|-QrNA5T2BqW z$+a;Gvm%Cz1{RRmY(~b257g$`_ntm$Zf-nz`b-T83ic;a5UZo^@t0fd zH-W3=R&#l|*;e^+JQ_uP1_GHa2qqn*=rUAEbQ)!Y>%VNy4?VvB54m!7*t>xxY%kcvD^aXRc>)2dSaC&;$bb@De!Ca#s zozTUzbCTF1Nx8WiWzj+W+Q7EGxut^p$Cf>>vS(OeLim_My*f!hsNoH9Y~@7?45|J& zBI1@RgH5%CoT*6lj-uYN8l;E3e8V(DS@$B02RS*QEjtZxl7YGwcz1(M+~Hir$F@{V zI4;s*Sj0WO$-XW0v>T|CX3fVRX>w7&JdQgCq|T~(RmHqtE$BF_kQUl`#Q$mm*UI-I zfd$W<4fbk5Q$CZrNBw9!g(hB!Uw%%VoTx|7pFG&vc=}`;f6UFG=j*}3`d_;srYI8D9vCx=%((q>dw!? zb%nSmA6Sm!bcFQ*lW~4}w!cjk{-2D8`w{Yz^s{GA^N*v9s>V3KZXF*!A3>)q#t76< zC;~K@V-q6<$&?{FiLxB$Z8^m+SN-_lAj)|0_Sq54YbXuT)#_+ms24S;e;c{8v$4@t zaI4vAwgdkE%fX&fb4m&)60g5X2TRSi-vMzBvxlnzC^;cdqO5JQ?l?W>B+5Ff##xAS ziVpMkxS+x?{50k3+J>AO->@DX<1zg z`fWcg+UmtB-DFflgP<80bqhvBjaqb7qs^+n)(p^CoAEp!hWdq+0YhIcMQ@w_xLrm$ zNKP{ug9>}SAXNfy@0DKbr$xs=N`1JX3J5fDda9?X=g`4D3i{|8bVF{d;h+u~-p-z$ zmncE?8cz+ie93O1S2?j<6rl&{aD-qSRK{~wFFjEEX>p{NPm}vQvusS%CKnNyXv30FR+Di{ zfk6%n(*4P3xQ)87TS2dm?Ov^oQqx#MC77_BXFF8htvGp$Pp{%Le5^*}E zriy;EAFGAGdHmH1e;VdctSOeuVlbK*@hfmP4`HvgTwhReG8z{Ur50(gNVSGlGY8uw zrUMD4rjZBEs`*=cTNcFCL?Omvd z1}cQ>hvU3JFfUZlC#lqw>`bTwY!bL;+C=BO4pdj^zPX!hkeyoUp-9!c5^xk7>0Jv6 zc$YJt3jCI6NXTGB)XG%E7AS*amxjD5JWd~_CRD7;OKqQ!%T3~RJ=7_ym?R8;C0WTJ*qc8$_ zLWX5&{r)R_{Isx-So! zo?F-8NdgsR;Di)>X5b-S0zG|;8CgT#@<7fUR2aIDo09=aK$rz15QsmzSzLHr!H3LZ zMP7%LMC;3pOD)@++NOh3R@q!paiNkZ>f=l)c7F7FG>Cg~fwUGXYK7}_ap*LG4@tw} zk1fD6Ia29U9cY7wla67WAdVp#>mJgH_tg7p#kx>w_WI6&V9`u>I3i6j%JPV7{yR&i z_qR_{aL~xz1rz<`N9k$9!hS)wn3mu7baFKS6CcpkknK=7-gT)ZDo_0=?nf7btT|Z) z1qo*|@F7tG$*x*jS?;9?cw&+;^1v`cHHeF1Ko+*7UI`C@2E-9JB;gcMA_ug@E7*~1 zel5RxLH9iHrP&-ZYYKixw`^5cbXdIRDRHUht#hSOi*A^IuUUJCs$&K;Ftf<;^;lC(RKy@}@_i(cm{&)cKbrBpP8H-8TMAmJ>!E7`&!iz4HA+7^a%jnVlw137H zi2ur(gOl1aF;00++aTY5KI)V2(Z2YV`W{`XWmdCR6i~gzQ%@&EnGA|ly{h>*AwM0= zjP12Y>pMSKRk(GGBB^0=1|RE5oR0IsnLasfI%29PN@a5nFTyjIj*G1*btJhyF7C7A|$08u=2Vq_`a&mV;CB>DT>EI+z4jcU>XCvmqcjBZm%F;s+ zKC(eIZRny;C6I78q(24s6+yCV5)mF5yWxJC70~H4zW8T-A&;hI6&@6D9QniOV3<}% zF5pu(AF8SNpstgIGir`RK z*VUJ&tf@{nv%~&(Eu2|CsBqx1V*(!u4A#s{huRr=4k0?-DvK-L>Lh+ z`$M^Q!y{+4Sl$xV8*%zB)LW4EE~AvTo4#G`Jo4hHvcjK7NwGi~kZ@eZiF)PI_bW}^ zhMx4McL_$l?`;Zq;}NmB;GIvmnq;9W3Zd|Wg zI@a3=Ocs(r4bqhCZ_-Okd&$FtOh&6oq7Aq2GE$r!=x;yTdu)AxD(2LqIDvmU>ctcp z*bk8%o+iX(1$H8z38ZyZKuR$LyoU`-9Kw7A8J-4>6CTqgj-C}pp2}VA=EKftA{Db3 zQ`pHNiC5l^1p9O2b8ldalFr3P+|)^!#R%PEW(X4;o1+tw-;fv42#U}SPL)76l6?{< zal!Xn_tjC9!Klbkje)G@P+t;&4FrpWLx46av_IzYKMu2SP9`d9e?Kum8Z0uw*wn5jJydvD=Jh ztzPYx-hBoCC(N}xDi+{ar3;bb1mSh^+Hzh=Q-^{j%B(BtoFf^C;y%XZ=k|a^KRSq$ zsILYgl!!8&xO_ayDEtJ*LB+R7f#7CT~P@SgPaY)w`(q_hXa2!s}c89ifI_O84b_p^60xxC0Fbx2) zg9rkl3gIODMpp%`CjHN0cat=sSwG=f`qZ=_Im58*99UrSQ4YZ?{|xV|>k)^$sb~~u zZ7-x~hF%{ureiSb(X*$U7tO>O;|)(|PVW#DNb`0y%cQFG8VGbY3>?N$MJNe%*Hs+it2iASGg*BK!d2=@|12-TdhB&eBu zY*Lt}w!n!xlqzN9PWI4`PNG3NqJvH6@#8AYdc9o%r~Z4_+lq7QW7hxad)0pP^u6-!X z-th>*6!_-FDq!abVzIWZdMx=rlIAmsm5S$fZ=8=7fo_s|2vc6-72^q#QI<67 zJ2Fx-fJ8Z=WKM&jG^@%t1cUJ*pV$qT#ujuJ%BN(NBnwX|3*Llu=-3?JctXeKjFOUt zr+iXNM+a?7K4ssyoqe1kH-9vbso? zmnW2@;^%xJd4fbdjnBOHC4gL>7f*t36gxi)l-A&aU=dJ+&-Rx7Vm%I@O^AjDd z!IvccOz((1PHsP>RI>&E*NK9s5c4*m!lNwCl`YD!)F$4;=p^n%s-a$)lFyVgM;=50 z4==+FV@tKDtE4}w`bm^EwVfb2cJpdCsksTGj$X?Sl0kZiJW_lD%8Ijl!8EYtS%#91 zNd;O^h;@*L{YBF-r)<;Ge0c7tiJ;g&Lb|4&t@9KKPK*NQ$EFGdd2rWd$ox!`RbEyI zii%gJ^|PBasy^533xvOFD|lbC7s_s2RkeP^iH_Io=6)JxaGkh`m)GoyQ!7o9v9HQ`Yw4sf^eCN zzA-&!)XmMQjV)vQ^rIr8t0}e9K-J0z0_bQGk^`+c*YT#uQL#1N-;j$-SO9K~_Xlxr zV`NNkRnyJ%S)eO30q)a*Tk7_f$D%w-_QRL$`iU-N>Ih?$`vJ%OLMcc7f@L}Wb){ac z7AfaF29)*6Dx~Am>8dsTwe4oZ8-5-%{;WiRjvZE*tUiF(%Qe5i?wO!v@+&$imH) ztImJYKRe0!;G-A?Cy%TEA85n!p z4BL-#3Wm^$q~$n&5}iKHS&uM0z@)l5?LG=&!9C68%40bW1NUY|SHL<=pXN`H5ww%u z7e%MyqKR0>Bze6JzcHN5RRfcR z>4cFrwFCdLI2}Q1nlMB@ShJzRdcU+CXB-ZfHujuQrwJ0uuG!{ta%CHf{PawfqR#3h z4V$gEI0}2m;bFAM?dX8I*l1n5 zfL3)=w>LCTfIOJY9Py##hv~DWo!>Y}Gugaw%+j6pjZt`rIq5R+I?>g*(0#Nq3voNr z*pefV=5I&^_uPk52*U4@%o~Y8!MwpNn4NmBcUABts^%}gWr~3v9l+XC6~n@I$cu(! zTw!#{iv3bx(B}3tDFJ?&WIR3z3UMHJ$%AG!h20qzMwr9&ZXq9mzhRhnxaT(OeQ+n&f$xYg3tJiOWHAmW#st}u{t?y5n)7afy3B`8+` zMyz*F7C9W^pF%GUOQ~)jlJSHv6f(aC+xkjFyveQ=y?`v`- zRHZ%ID}AXpMq)vWG*;jy=DwRq5(206aq_pznqT42s2nxrTVt4Dao#lLfH0exgx_h= zZK}$WL*d+6 zU11^LxJm=}xKo)iyRw$2gL`X*8mK}a!rYn~3f!u~I@E&Nk9y%ak8ln^9L`_uXdS7PNOoKv_Ak#EW{wtGB*@X zQngZ(h>-ndz4g$2%_E!-_2~{}W;ybO-HRb8edmgTDQO-p^F9;qYPsh8#lB43jf$5+7KT;4!5L0NHwGfC48odXWC^l;C#8c1s*>D4|SyPAcPsP`UGQRH~VAmX0$`K&F1i!8pUa z?!+x>MNKhzMc%|*pCe0i?^Lb3A9Y+@d&BhKaDizn*;~ev??;?Gazbb7meRf;v0|7v zSkY1SdBHBIdQ{{RpvZt+M zRZr1MTFvn*gwrI)x1x`M+#)6m(O0C7!`Eat`yR<68np%giUNb0dsARln6wjWq!%cS zUArEUzH5%^5CxFti>1|lS$`)|qJnuv?mxpDJs_Apc|Y+re_V{As#ne=*0y^UO}&X> zw|qL)gU-pZB!A`}$Cc6H^7Q9ScyuOAe>Zs@ydFqf+)eC--Uh|oObGK!3?w~F45a0k zUH2*Q0(L*3yqmlMqv$t>nK&jUKk?1N?#t^>9?Gl6yDH~Dh{3V&6Ye2O7_yElPK%ZDZDkKl?kfC3 z%S$+LWW<-^q3|@hheI4@XiOrlH;_P|l+?b7A=8(mpOEl|BbL~cRA|78Ikwo3A zap&<2qLU~)qdU#P!`U0?*kZ2hYe5~Rni1122b1V0G0Qdn=_v~*gLGfT;AkzB9MF^E zYC@Lr#QB3kI_`gv=0((J7f;13seNfqpc@g3l;7M#KkA4&Qdv4KqKrLuqIi)#LxPN^ zXVRZJR(}v@!&Bt7>B9L^-ObF3KmcbkQ$ZaS`dRB%MoJkS9@R;aB3KV>7{UZFbgN90 z$o&tuo^L&DJX!z#PUHU5r#p?Ewe1h@I`?|%#jZRfplTX2d;gHruynpb?FO!Wup2nz z=o2xm+y!=O$wz#=XDg~K1ghx3csKl)XkzSF|T zfb&3B=kiEU7hpky;7-{Y&z-ecZqwFhLZI5$2Kq1xjcyIluGN?8xV)kBiKeJEkSEsI#i- zTWMZ2ST~th&pr3q{ikcs9vVSU$wbe_iLC>BVG2=s3lZ|EmTP4qQOCwMs&p4|L{rv1 zsZoxevS1Yz9@JM-WPQrL@^qoyu=?Y_B)-F@q*gxLmz}i9I*g1H;518< zLotxqw)0g9l#79p%;Sg$xUZht+!%^Qp-E}cMLIFWZ2prAw1`GaS|6HJqIUa+-max`G6!mRMz}U?h(Ep8G?`&sJsPNPQ~}iBr0q*Hx7{DHfUM z95mCmen|5ZJBoF5PRcX&Rl{@KqfSI+$AloKSNglD0;8(H`*3L?e8oX_ld9~DRp=5W zlr4BLXkQDpWW&SJMy?D*&CQY9P1u6Ybs$(&mAtb|wRn2_ouTMWjvF=aPeLj1oYU>#a z(|>d3r#BXa?}JNAG>eYAP$`7C$3-NHRIP7@@!;?M+-B!DX8z=N-k?jC%j)^t{Tav~c)Vru^V2L_z;3dlrobVGq`zezczV z!cp`n&7MVv>k#ew!Sigep7hc_8o#llU;sqbaYYE9Ks0{%^0}=S=7< zc$RfFmiyUL4OsV7LJ#!7l)$_giD+L)Eh+wmatKhjn`@*I^DFmQpBMwxm%?lw6{qL4 zPJ9h8+XCjI1{2+3CzvdOCop=tYH=|MP>K#%fs3vT;R{tOFZd+Js0oT#5`Ni}eLGX-TWRil16Va3M>Puw{Kc+LqvwV+VvyDQy6`IDVJ z^DE!hyY(;V-MY5fcyx;MiXX*!k-Pi#Kl+1zLi@G5`p2|i|2^5SUvu~CFZu6dDI zCt=+^`~a5>@B{dhP(U_2Q=f}DQhFD5DmZ}p@sE`}Gq3As^VXdX38EdH^?>`55<)=u zVw#!D4!9&1g>K<`P+#1|y^hf!JnPNd{CUPP zGeIE{>ccprKI(yw>i#0qTg)}Oaw~dqMy8|4x~2*iML~AEL|uWp;Kz=PG!l12HhJ9l zHj;ky8Wjio(d*_QFWB0W7G`JR9Q4z1q1w2v%m@S0+#W<3?x+a|IZGgG`r}DVGS?p1 zBWSzmV z-F=iEZe?-8B?@)hCsDB(=EqVMS9+HpZ+Xx#DnCkl$Mmx^`A2cme;5toq3c57Z9rQd7^EfK*XJOJiav;-) z_Lkk=Z>eE=p;mioauQ_)>J}zB3Q=^2{hOHbQS{ohtF=`NGE{em2RzX>wusup4|Hb) z5XAp$DScVHfKDK@e@t!|#9Hg`v`L|p5P5rU5D0W(hfborXe@d+5NaH(U@PkDRqMep zOu|DH;XW&0jp}Vv-r2N^@m23=+PGfBVmRX6tcRzO9ja*qg*V+5A+N4^uVS8}x|k+( zQRe_eRr5Ehhcaj)&|IRPu!lW!+*9Z0nI2_Ox?Sc0ttH{5^k8G_WLZj-M7gSe{zYk+jjfYg=RF6<7^AGMs4TSU8N!EQ z5mx=K)t{PHh~x*+`;zJKmwod+UZO0++$C`sV#pAaQ9=GDcBEIzZi z1a;;eNngSd@=u< zyR`{in+1M?jL7mT6YYug*m(F%ExGBL=GE;%m>*$XSpC-klM&!dMK;^CWiTUX5RB+|zH(tC|(4GGljORtGh9G#!SG&(<2hz4zWKD2)GD-Q8{OeaF(= z(wm^UcIUP~DW=DtCDGlQB%rUJ>LyoSuYjSuTUCU2%OyOQxO^;vG_FNTR=ImKq_n%+ zWa?=(?lktk1I8w#^?7IEi)xm2ZQ!ludRgFQ*U>Ke5>t0`ZuHX93Qvgmb=XBL;}_%6 zqIOL$x+c^jaaumgzH6Bt^uexG1;zEvzi7Wl$yddjNmJH~bB09vOpSpPP#jj}iLeWK zleE@q{Utb*pR6~NVk}#d-Dk| z>OjNh6j$WW^mPSc3z9LJbX;_GHwFbRMV?R3xbP7k!pW^1dESj&ed8cCaXS01-6@u4n zLA0Vc>H3J_TXK%W21OHifqAMcOPtXz>U3tM9_o9*4`s9PZ zk~AyQX-u{(%>dYhG@A@V>(6vKhZ75z(N-MghCiZubd7ZO#AG^l#iZRh@O#p>!Iv^? zFX8th42v(WNCC@L5RFZ74yuJn*0an~$7KYMrK%F;TK3}2@O*vf&jRIMmdl)r&XOK> zb;_N}kp5Ys-OHl-4b!eoTr9^E!4#aJkc2-RHV~*fCuvMNV4WRq^xJvWZnawMhn>fZ zURR9{aG6YO_>@ZC?5vH3S818m040J9mJKQFH$WGnl<%C(qV5 zpYE*dPTH+I&30?0*VP@2BU41&=+g$s;8NJiG^7z|r z^Y%4f?&z1>OSi5*^pbvi`ReoDUe+&nR<1nq2WHaCE1l(~m6he&4f=Nb*3vb4Ggw$@ zt=w+iUb@|G(6>9Cn^(u_2L>zcTdg~-mD@LOb{hQk&hnkBBkBW#s5Y{sI(L?DFE`}t z%5wY4xZ5zedw*ZGUbkAUcB|E1?zG#TaCy0N@BK`*JNM|>?N+DLYPD|PTDor05t=2NyF5kO41P0&lXKJZ)@BQK$eHbjipY>Jy7C`A-2Nr|f_ltY) zXFb(vT?3e#nwBx4+gI;kd;QtR>(5?pJ-@FzN^fo)J{YtYAK!YtKe+YjO1>3tE&ukD zA3R%+e(-eoqu>7Y!~NlRPFnkSK7HQ3@&Y{gXk-1!jx*egMJhIY5cZRL`$6?kd ze}r=Y^z^V{*!rFt(KRTI0eyvF|~8?NYD>^?m3Zta+%iG%XtaIFk|WgF$+TD+Ib{QLgf%VIz+} zi@M93a@;vh8aN}4r>^YdqDPExb{QAp;ZFk7YruHE_469fzvAGz(>RUx$FU&zEgZ%8 z5B@$Q_;>ziM(}?u2>yCCf@i~1-3w&Q^<2*cx)KNTynKaJ# z3D?0aUHZOwfV@;S&Ia9JTH^F^lmS-)a-(;YVPOK*&vExcapW(cG((fwS%#_I)c3ex z{p@lEvzCnc5om%IO)s=DOxvyIo#vfpXR))a4#Ofk4bSv%Z9PuMjI*D`{lkb-(a|M( z^9Iw;^>F(csLBOLT5v{tzb}7FLpucnsD@#wsn+s5K1^^f0GCS>Bp7_8=RzQ9gIng+ z#=Oj)*6;}amYeFy+RmyPhWU@i5!HD$I}6FA2M2MFN6=9Xm4pQi(>n^|q?>0w{E%lo z%7BmZT#wtrxFKEF(zV^|fp0d|R+<&avpA*8!Ja?dQp?Lr>Ngz#>TAO!`YaAVd8~fx z`Njh^jE8YAJDWcjqCPfffeH^r+DixBaeu`0lx9U2BM3~OF*Gbv4S8f>@8DOwkatNl zRdLd=D2$MVZAjx*c_tt1>}+kTJLSoI678$!8&?9o=sBQMhgX9gAe;j^*H;CrGZ%n^ z=QW$I6v1PrE6oqbvC-r|S-=1C`S$uV5mj_1!eL|=zPq)yy)Ey4mZn4eUp5{@pM7@O zPPW${JX_y+`QiExq?>19@-Q84N4+d6mO9&K!~OK5ytCA~*;(n_S!)02vK_-lS%30y z>*>am9qGE=YA(@#?bhn@@{*?HkJ6BfzB1P~+XqGX+|jVrCxw#3)0|Cec$6z@q^a7S zos>5E*&sZNGDi^gQ=i8!x`Is>l8c-|44G-<(@+G{V6G-DLYH z9S`~{KT1zm@p>`NyK>ewn4MjO$AQ{w5txqRUjCE7AULS(Xzi273=2-&CWmqI8h3P| zbYeiq9cO;SNX=h&q^6jthiT)%AdZs4)lc62+5^&0{+q@FvWx$oh|gcB7N5UrSvXYv7`11Hqk}w{om-^8KwF5fcIjt+*cgVd zS>0&2TAL~#q(wIihZ<=lFL9tMi3(iHz8cIbD>E0%VvGrigjS=6`bNXFA9eGiG%N7l z2s#(IKj~gZ0^R8}+qZ5v+pShv3~_(6-k1zhzhC+Ok|&n?_)kqkkA8HU|E&|}Wd&RtHI^Auh1t*^E;$_Z34D;@a zDY`fv=TSyX0$-+X^Nu>q(($N!n#Dylxii%$%=6PU>vu;{ejH{uZ@NQ>GKer7?bFj} zzcG%9F`?Y8ocPoVXh|1heN?nRG9aMv-EQ5!Q>6o0{SZo)uLC;FWl1Z7=;*c!YZ4am zNu)lBv*Is=xG1XZ_;V4 z3}=LY8AhJl3*_PNe~pe?k!|^0caOC z4JZMX(w7ypF^EH4Vt-x_n`sgkY1UZ#uo&#Nsd-?nhbG3~h%@Q@T3`2#M~yn6+<}!EoNAs6fTbWLAKw zfk2|`Ky(roRd1%_!m-K%1F`KvDR?O3tlOeyPJlfGTYkYk}2Qd-xK5K{40iA zY9*(k@1k$?T#gwoGspbvncAOuSL~vE#JPma*NJetIhia!F(`}L-Z;d8ewG)}unS<-Al#1zT|ARPOiBBt-1+6r(*%EbO4XDhEvC>1 zK6-^^iDVtP#@&J%6X}qY4HU?*;uR(@uT81bCn>0}qPH)2%e9-z=G ztu-ZFja)df%F}VyW6CWl0r9Y88DMu+83xtua8LXwi%uRs*;WC)YgbnP{-Ug|A`RPB zbd9bm;F7*dIV}Mk##_(UKYsb}$#$^EF5?Pzz+6Wdl*g1j{^K_IvQTaBJbkwIc>O}4 zfQ6mms1H$22%dT+A=F$AnPuqMX=X0dsLWsn9)*4sYx!ryJ+h3r#AQObG;9Qcdp8wO7O>dp;0n6+jp8PH=CW-ZL&9o5HD+~>X+}>myN*( zrX&$Br>dxDLHO54@&-*da^ z);;<~X)()Ng82%DPg3TpeP-jAS(qF~`AboSnpxhf?EWe|`dlb}GC8x+crd6MlyG%v z3mu595Yy)v=-3jhsOe(r(`dos-f9(ltekY3ID`&AI*M;+VP0h8UNO!hCl!NtjL}iF z^Ge9XxQNK@%A2;`T3l+`ED`u)WjEhJ9){V*=u>-`yjFPKPO%Xu$?JuFyhMwM zgbI(pxI=-xz%W{BS|_y~TGfq#+K-?l^R>&I%0*f^t|FnEH^af;Y~ID1WfcZ>;(_M< zg|O{OSVYJO>jujYJ~(@FwEr}}(^*2b?|r|2c=SBA2FPTnb+49A2c;-K3bUxslX>>! z12nr zrdD%laj7#6FCdTQrn17*O$E`{Ww{9*6{+34V3^Z5Iw65yTBmrM1)w-%flMQ^G zTyygcj>D4Owx(CzVxgA9WMyxt-=>zUFHphQ zF*h$o*4oJ&#_e6YIx$f!ox(?FwfbJQ`TQTTN3eZ9!iF58pheg&23o)foUg zo&-@f@pQ}0SlaJh;ZqVPSuq?@u&Qp_!rWq`#CM@we%;ukBoMhiDqb6+RrVm1Ts;+@ z2o2vb8m8G<<0w8n>ULVK&Dk&907IDdj%>swi`c)+QFQl3mUJaV;@8QnimQlJ6Js#I<@(x$i;!SlDWqVGqQPOvNr9O1G zusUCuiZ0xei-N@i@eT53tL#J};Pyjn)m1^54R0-b^PrY>H!ey|5V(|4aLAqyl?3xV zJ2K6kE-&oxvfcee1+Q=4x}ZCpa=Ao@G_kGupiHR>}(I5)*C|?|excFmHpJiPnh{S0C>HvVm2IztD zBA&xOq=oPr zh(t)xXrQQ*-yeMb6R{9C2C6}v76oM#>G`;wzppyCI_>3UC!k;gpr5Qgd$RH5@v8bL zJ*7aEBG`2x)a?er(9SYNLO+y1DEvPl-a>)W3e~xJ>%;p^^8eDBlLKozidN0F4woa{ zxj3OM-$R;s1E^t?f@Y~>*+CmlGY5KZ28uEBq`Kg7a=5B$*h-CiT#QN+Fwmxvxup<(L*LOJO!l%7r#Aj4N&2LZgpUNC70v;E&vX{#_0p(d-(gxy5b1M zj#dTT1zkBnT0c$M=jNWfa}-eb9EALCGi+-bBArv4q^!GmDYZ`epY&ju3CoXrR(!lz zMJ?(`1F3JgF=!Z7%Ct*ywH3};mEfu*21QneIe=6DaI1oJ_L&p!!p~)t!hbSymyG4l* zIXYS#p^wtrdSf$eC*h!rOa_L@jxIS(>dE@|cN8wi-PUZuiiZF<12Rkjn{$LV+c^uOtL&E#g5z^-gMo7^?0&sH#lE^K99*gnylY%UQ_)co?wC4|XBJw#?b+$uZ%S<+rKj*Q z%hE9%`BXsM^H)IR_%4UX?J1<3c#t9uf5MFQ6%xzawbMhqdYo)2^u$f#{H#_I@ zCq8gC=Vn0L=*9UDDQTCRAph{2kE0~Y!XnK+`71gR@z-?P=jmZ5JUvvLzwhQEZY({f zqhr6Y_n0!}|1-%+{Eh0PWAAt!AuaL0`gNU}xduZrV7=btYkrKNK$@uF1a#WA52y?e z_huS@l4i%8azdG!wlP0|L^n<7(j=HSd@X?n;y#@@R`r0tG%A{WjAP%MJI__n?%ZzK zLFji?N6vKbXzGh7%N$7PqWtpXu!zh<2Yl)o)!58K1U>A?>&c0#(?l>W%GsGWGs2Zy zq|F42QPE?|Kx!D#wNZNJXh*7&?WqZ;fYa3`9r-F_k@VzzddJUcAPQb zh$J*!8Zt7lSj^K;Kz$iwltFCUt(_j?B7i7S!RqpIYkAquaP9OEES1T^t^R`qWI5^< z%+8UNepAOMK@iT>g%ihXws+Q^?Nl7F@m~Wp(0%y`W=Pt~-B~xvO4%GHz*^(&qy2yU zC(*oi{P9oNBS_7LqU8@+4@CMHC1_O=DzMGD`=$!$6*Co*3BZ()Ld9Ki{c}N5oTuQJSBA5TmcVN{sI%nvt68v z!Z!yH5OoPSCRS4DOD8bUK|LJjU%g5SgGC}l0r*E}8O-4PRI4lGNYojNZtvAZ`7@da zuzgkVJ?QVw`u?cdIo|zqWOQOB`E0m#YVm$#aWy+vdiz}7A)10X2(;b+-)9r$o%txV z@+g`Ilcv>}zFeP6_L}p!a)o5i)T=;cx?*dTxUQtIRcY#RyiUW zx=~W(-QdNB&YIhs-QtX!4=F+ZDj7GkQpFbc#~M9q7V4Y+VRPsCETUK4lKDBil||1- zs;lA=n-Mez-$aE02OF2WCT`Y`PUO$otu!xCRLJe49}TY5$M<@wtM1HxZy2MScI)Qs z_lDtX{MKpBZnyEJHM`xxv!z?J+e@memT%5(FRQNVtjvCZ1{HPVW)Zi_GbBt zVJ4XL3Khm?*EmCIV+%B+?c>($y5u^6Zj4$syJeD=KGZo&gd`9T=T$KTSIVoJV0h=U zEY`m%u?&U!Pc)}89wV)xdt8e${n5OdV_mva>}ynWsNT#d+fXMi1U=YcNb?o|MU^(P zbQ*hGcgpu1M`t{z`q`T{cj<&vtq4;%c39Dy$%?)3{$8t#T~L$D)e?z`o!Z zJ=D@MPfaL@9%xt10<&bWB%~2HiPdvgI;7A{!lo_1GjW-;nJa@R^ckQnEm7nZtCVJTUtQe`O@ z#lS7?>;GSsmJ+;Nx3-jnRw*tu_r{A$Ib%$#E(KQOJ9~&*aOG0SYZRRNnN*i@fW2CI zDVHVL_!g!?oI`R#MVFnhu9kveN&gI-KIkBC@qtRi>QYQ`>Nn>ejU7i{F$TjrLlxEtV=^l6YSXKxL z+2sg-b|Kuyazh~8%W{)s0|ZDQu)A5#Zwc%I%P#k|z{0}c{(kRORd;nyk0dM3vip6= zzu(NbyY71L)qAhr(a!J3#a%oEshmkpA3ma_;_2C$MK9#}1t|u4dA1+<;O7AqyqfuITg>)Hw3sGd~N z*zrv5q`a%4pot%t3b9yzC1^gvY$;vS1x4|?RTbq7&9ly^+ptc-aPldfE81ncbM=1p zb}1?9gnMAINGVlA+8cTj_$B}(E-CN1xl=_?tDB`prBX~H-g9$knv6Pi_KobhxpS!A z%gF?E+S6UP_GIiZ)bFh~q*M>QuKTtZTJIaE)BQM94pH6JD-NxNDD>(T?}N_6k~Y+< zunX5BBr8Lm3Z6UAo}16eCsAr|hrGd_zYi3F6vm;X&I@TFjs`~Xe7-&)?cCgnhJ1{U zNPv`rrP)<)9a69kz4dk>0h@M~^q|r@$iqv(M!VY4dWB#PKAma3f-oIVlUlD-KkswU zSHeT?T(NBCm1|B)F*X_LyBhMYchykD>%eUMdau6stFKGhF3Hv+DzZ(c4`}prhLP(PTZYG3G z^50N9!+*CBLT35zHtBgg^uV7#(n!c*GTFPDkoyQ}A*V(6Y<_vOZ-K_QbV`jkX%!vEtX1?CkGTz+ zy-;qpMXTuUnE7uzIOgRni40xs(9Qh~(&*P&6#Ty^Dpu*u-dgZlc#Io=noAW8Hm|l~im`GX(s#Yz+nxff$F~Jv}{5 zgz(gH4TSW-Sh_EOv9!QwEn6dmG&R6*8yd))lCQm@^XF-`qs!4Qeem%w-+S`X$oky; zr=R`eCoccc3ocpJ@uHW!_0~WC?F&Eg{de5_=6whLdGj6H)(yY>R~x?G@r=SdpS$zM zZLdpT`~E+B<=pCqfBDESHhn*O=c`^eJMp&6`}fU%yVCPW>tFrsA0K(k(dT{OpFceK zk}n^Ap!M+muX_87AAX>$|MS(mU;pbHlxJP_hVd_c>6L$Z&Zquze&=)k^TRKCX4Bx; zfBhHd_I3W#BReNopHhtd@3(&P&Rts$ysvj)$NOHDziMFDHSfBqyQn|(trtG_=)}}_ z&U?Y!tF?*7+kf%K;kLV9M7F))#`pa0-N%0Q^bg$o%mc6d;J~p*e|P66s4x2DbKfkzL$7`Q zcfNDt>kr;?)%p#`uPE$zEA&0oLp?~h${=a-)K5C8d}PrRsY__lvL_g%wp{mDyzd+S${?|;FcU$?vG z)GOB%pVReMzxa6hH6u-r|J%Fnng7DizhSh0@Z;TglQr)?^ynwvxvKKx4=4J*bn6TM z>I;!?ex+&s^WN9o`nG@Uefv) zXBM6?x6aN#e6;1nIbZw1-#+aPAK8D!W&iNLRaf8M*>UXK-+!p_tq*3td&9pz$F9o%-}^sz;Ql{*^DBP$&vzCldoFz6dn3cI9l!nA@BGKM-#+d8jT2?`19ntRhL}ewD7=ZtV;&}?}cr#ja%2{?|IkN z-`Ko0pLDKj82|IX-_rZwi~jn`A00Y+UgM*0(7Nt=>6X7Ek6qky$43+QJhlf&n)ZeV zZ-48=`_;GfzyB?N`>&UbtUCRKeQI6Ps~-HqHUIINkN);=PsH>O_CETVnd?@+o`N7=P|L5ZqyNaLNw)<~3G)?!u_1<@GD!*ms-)=}<*7G-a%#Hu_(dz8FN8WVr zJKwVVHP3$F?LWKus~;Wu!TbkqzvbPjgt>!$;OVdV{dM|-A822=_*diWzxMxp@drQo z(uVI3U-`|uPJQXtYoEUA!4r>u>L(X|{&THY^rxzI5!n zEvK{(Kiv0tCb9buokO4a>|J+0{rR)c{Ex@3>1}z(ZQswOZ~dKp^t#|R;Jk?;5Q zj8?x|c=VU6zH%>p!_&6)=f2Xj^E+Sr#fLxi`UAU<{`wU!j_rQ@9WVd-zkK?f-}S8i z_pfbueC}U&-+0@6!@I9r-!<@xhi)%^`O4e=F!J}~|8mFt@63;1^;d@<@4o0euYT2E zRG<3><;|B)Jv^GcVI=xbl`AhB{n@V1yyC&{zU}@OZvBsena$sAeC4k{`F|ex9S-7& zq1Z+59VooxvVZCO#tV1+@|(BP&lL{->TM@(-Kac%?K3|9vnM{=ksSKw&+pjrn_qvZ z^3vbl@#1IvBKE3tv-dux4Zmsauj4nI{>Aa$p}RjnbtrS>m@|06b2t7|^lLxLKli&o zyzu1fE_~5nf9{FByXX2|cHUQCc+Xw`{H=$+cAzbl(q=yR+&f2_-~G-X{)SRQ$g|Gt zec#YSpT7R`R8P}29S6T#{;wB&@$Daf3Bv0L0=s5ED5C8mk z-LX6DPd)F4BW-_n&$aiz?auq(vilqTyC*NZ=i4{F?AFi!)!cJ``5ot#JHA~m0#o^{ zg-0H{>$5NX=8@CK|Lfx9Uwoo?|9?LAy57J4;_>$spYg@RC+~R4o!@!)U*G=8=jl6N zyY@BfclO_P!_3i7-@L8i{%Ft3UirksFP^MEh1w`bWj}` zQHS@!V)3IBfdv*3HnD{e917qcfZiJ1yweRW}ebbEQz-pbkWvhRgLU7??Ho^NDRHq_KzpK8KJ- zmH&PtA*7#7_BIj#(*{EBZiLY`HWAXej+{ba5>{^$A&n??OvI)T_Ih}w27u;9s7Q!h z0XoDAhj<0Gra}XbO0EPWgG#Mv8EQ}my8^V4rUs6rS!#iF&`Ai{%4f2h5VDQ`PT=#& zULgtt;CD6<(zXo*5*Qjbye&{u z2iPH=!$$Y<=dj@y@!ufPi}KBK;pAm+u3bD(1XjMI*_m@H zTir5iF7h|igw5zyu8$XKB%eNqkk6dM_&L!d@O2y40}z~QTZL6@y>bzm>=gyz#cJ%Y zQjy1WH7qJQ)d0i{%Cuk^%dso49EMX7Sayi70DK=Jlf7#Rz+XGUPBS4O$2Gv}v=Y+L zMo7a32E+|0gRdu~^|R{;*+@v+s?9(F&xMck-~+Z6_Mr_Iy;?CUWzpwG-Y0x-M9e0j zqkx@4^gCYFbH{AzKzZ1)JTDL5c{16n6LMc8X=gQC+b_GUL;Nlud;jzfMBY2 zrdlC$?EeRfVswr7G?0!~3|TleJ8~`|J*$6Sz2&mZa{&DL22`LfC>!r^5+mjUcsNkf%*+z9uVlYysz^KA^*jnUqA@?7_SR-;{pErLPE&x zyd6N#1wQwS;e_SCFCm0HAE+xK)AyJnda?82_X;h-vD#J;B)UKgxtq}11S^hwu=xl01e~mLC9{t z<^zO~f8t{XdfdU=93+G&d<;V{HvSw=q3?0{yp|C1Ox_MKU;n||*#m0_8%qeeo)9v_ z+j$xxq>Hz610m$k_-~Ld3jFsl%!Riz0&vNHk3yTg3{cdc@izAoLSDyzj}by1;bnm2 zf0X}*v!#{)21TxDb3Y;E2fXeCA>^feE}+!?1TQ}YdkKgFYflIP9EHCbfM>qW2M8gb z2jt+&;WzU#DMH8|{yPmU4DSn+!yn+kxBj+)kad&2*PtSJ2YznH&vOX5Zv%NYnd}8B z-AG7B8gd$|(dbQDE=O%UF>{ML*xfU*GxTx4c%0R8$EcB42fM|SImumrZzi3bO{L?bndxL=EHRaWQ@w>(zET=RbK0s>sI_V|K0G@n7kipiY?GER>&6ZA zq*kt!Cp{}k zsn}#(u6Lc(-?@AlYgT9N-sJRDIzBa;nN9jed$m-%wPM;%!J?pR>{vZBHa?w7%RLRs zW%HV&Wi=aDam~zhDm|8rr!u3%P+=oq@|~i=m{fC3t_U%j%e1Gr4?5c9R+d+#rip8% zCfc<832H!8VrXEU+W;(2X#esWogWHn1JF|Y%)h?+@ zYr>e*4c%FQE;bBLj~>aS5;w*(6N$+Lu5YW@t|6&b_%QpSjnxdgp+C2(4{Z4iJ*TsmCN-%hi)tsh;3 z+!QY`PqP~dxvz;FAd|gK$hUy}!0ww!M|Yu^11ImOO*NxzS|z&B(;xMXMJyJxx{>!X z720Ia(oKqOmD=={yMc|ffgB}S%`PgD92m`4oCsJNR4aLK+TXU#eZtcSDv9X|pfvMlk5I$07BGZzmtAzrE1m6PO@I;~{qO9Sbe!jU+PlD^_6#5liwQ*t z0dBqlcp2b2I|ym$B%}d&72r`oN?64iPrMe}>R!5>Pe|(@PML{p4n>D2S{C7rP7|$99l4~1r_pT=BqhJKcPDd?Rh$OB+qqf?vxZ4K56_$le8}}iRk@xA)N;3%|Gx&d0?(HP zVZ6?waK_89ex=aZY$A%{lIzi7RT0MsujIZ1QZ8*>@U=K9&_`OFCRpf%S*n)V3c_E+ zxBcF#)uU9{hFvUYZ2dN>DxJOk1LZ863WQeFEJszUMv2;X1k#vPXue%h1nt1em@iIM zmL?CP7Na;=7o;)1;V^XIjMTwyRjcUuI&3lVlvZ76!E#Ua8Y_x->ecRmqWE|n!Lz__ zmUV*<&{xFU&ALU9&EieS44Ig(dvG%w#99uM7YySP>s1lFrk__`E>kKd3Jj*IbOOgI zP*G;a+|J$80ytW%yf`T1$*W2yG}fsPq;C6IZrM=kR$CNI`*GCjJk4V3VSvhZ$m2fT zi3>a!6idd~8~1%+`LP2<3Gh*>BDk!@mH{*sPkWNIAC9cG@|m&?IHR@A_2i#MRQL)0 zvAKuKE6p=w3FQCVvRZZ_Tg~SeKrt9nZZ=rXW7QhSWt{bD;jU;dr?r~-#sF*8Km_v? z=giX$mxnM<4P-2o)48H#Gv*0x?^sCcs5@whx$$PQ@{_zV>?Hq913SsxPTgZ%!G%M+ zy{wkisokNB(^AD&avJ#Kfzbz??73r#U81zIQ<<8mWX{21Y_}DI(!8zA>rN30?9gnbT+J1)QVLbb-v=IK z0X9Jj2;|Ph`*l{B2De=wmM>=m5p8PDpYDEju)BK+#7>Mtgg#ER6a@fVdQd~f7+?bB zGUoKcQt0}I|KWQKa*E)B97 zJgZUaWI@1vZF`hx6#<<+2#su3E*)wH4sR(c1)?9+<>PZJufpMO;csy$?z<+ZT)Bq7 zIX4O}oKcJ{rWc}Cu4EcsE34W6{iN`n+t`H*e1jI737TAvY#`&Iq;Q)j#1u4(I>iDt ztpdd(3^q$5hVEjnoEA2P(ZW=tpoI)R1Svd3vk}n8yxd}NlS!_w-heufDC0*r&{reIRego1Z#QAjHDxk)rcrA zJ^(uHK{Ug{z*M{M7_RII!6~<_A4m2u>~Y^RgxCWJg3oFw9e}>-?>&V0!JrV%)j<1B zxuUv_Ln#KwY8bHN00QKDXmDsy#Sg)k)#DCkDApXctrNilkhxjm1p?HFHvt<1x0}#J4d=Ah z>qbZZsgYdBluvDN3n1&I=4n=Ft-#(?wmU_70@q6SHIVL5VzSADa_mvV`6Ab_FO2cF!0{P^L?S!(ch*bfe%S4s2ZzwzRmHKY6!9|m->^>};32Z^SiKx%ZCq0L*uhb3V^phDqB*Uk zXDu3;r&$+cTi}sqE%?voH*+!NrQu@A{!nz<7RKdDeM)EZ8tL)MF>O`Y@my(U8!Gi6 z@J&;4C8_~xIMkZcxVur-GUp-I^G*e@4Z>B!!7Rdp!vE>8X&$qAa%#=+lH-i91@&}j zeyyY=Zpe}w!=Q*fz!j=1dwTl<*y?Vu4`-LRF^Gk3$d63zGJ-m<=CrRlb3>36@Q}lq z8iYjA>zrPY6mKlsjH+yhdz(y|IvNm#?VM03ilbQt>Zr>0Xs&8IW*N>TCjy1L@=^GT zh&o+%(W?d_sZ^zVcRy2N)DVxML3OZuun!3cn+J|5FbcM|&?7Y*Rk@vyYHLR{s~b^J z`|>CHoN|-Wp+x4C;H;zW@bX#ZmTSSYSuj0{LUTn^>AcA|ja%GQM*xvhZ5}S3{pBzZ zgFWFY#w~5Wi-93TD&RxLBqv8TgXV5KR+TX{TGnib;sp}W1m7Sd=Ax5ucP3Ya$aq>d zr)t^Ua;t!s;lRMIIMy*2V%&Gf3`X2%xe~vXurgREpkzH9W7U!1*M|d_PlB3ulJt-MaxI| z!`BO;K0y4o59}Ti%o8J+HI&`mM%CM7Y^vr^P!s?)Re`(?@HZKsR22Xr{(k^7RRO4b z5`0Z7YhAAEQP=H%>;2PPrtjfm~?!>3s#LzrOZL z-34{9ji?3nOU3>`kGpZ0vrt1td19BdS?$@gV>ismvYs^PuLRAD(S;_dIMn&KiL$ZM}@s!SPwVMe^ zA(RI&M&-F8#eJnPJ`nh+x-2fXswfiHs6IFV@>lmLXGc13BBF4k4bUbqguypKJ^_@5 z_yL+kIM9=4AIO6A2T9tRmU?{YTGA`YV=X*@IgpbLBhyo(vx#&jHaeP&r z-FJD}3>rZB8I7gmz6O8+7If5YV2i(jz46g_GL}wE zBV!@D2FI_Oniu(NCgWp?RJyjVY!nUNEFJ4bJ@0;1^ds9Pw^(NGn4Ql;6?c$u1vMN? z#WQg66rW-?-+X-%(jYzK*)sCGpi_c1j6!SYi2=B+&BW58(-kS${2EeDSW33qU z%yg0&l81oBMhK(V#VBJJP!6bhj;P7ag~U-M8j$VD*Wc917Ocy(3Z1t=^$SFG;SRu> z@y*ve=@`@L8OebE4BX^guqE`EnhKSdA|98-Mk995znRi$CFZj7ld3)Jr23(IQX%ws zrxgB|UG@lJX$}&+f{MzbB^}c_=77Iso58Mx;68alxrxo6T3sfs|xKtV=5WfG<;+kwUkeY2PdE9g&r* zc0$34v2#QfSuz5z83|UE?c4Ea+&gksAX_G8coe?4uB_WgA~LlT$J$!B0A-6EM|YV7Lm z+XV!zecz#UhS}W0K;4!-A_lJE>^{2wDySba3F-r^yk2YA80?(V@QZEHQ~P?a-=FOFU^^zz&1 zdW6tj<)Wm3JCK;cYjxjUboLO0@XqK}eo9MBdi;Xi!(&N)pvs1&fd-ukZ z486SyG8TH4Y{=@nC>SOWr#3LugYOV|_=ZqM<5KU$^hT`ZB*wxU*vb)bZ5RT6wuxWL zij@)==v2W@wp2Eeomddjm36~06^)@E=PA%;#G-b!jO<3WQZlu??PkIBZn+l_p}0g` zA7zKSyL-HKkPsH4%16qYp@FBN0c=o+z>3}mDg%u=;wpy;AO0@71EEMf)Z3@xhcFGP zkr%mOh+o)52p8i4tg0*n$gvqk*~&9-D*_jQp|fbEq~$yCN7R07#rapvJ2w{})6t$bBG?+DxPtw&m{6+lN^|`r%U_PXa`rGhY z-hBtYJDGx|9HHi{%un<*cFUC5q}CpdRxy59Z*Yc+ib1oF|5E7h&KB3%N?-ky`R*4rmEb>7Z+I zV?HZO_M21bG8}2^y&FPWya%4cBaH;W+XmM^Z?OJMMK-UJIjn^I_52YKPBcRUTcA1Nu+106 zk=mLNPJqWtY7`86VAa&xCAp!e7xEKyclD_KyZU-X$*0-5A}wosD%EUB&%wH_b%mZl zudc)YfC}A}HCaUSjuJ4%Ny*+j8D!z#4R=+;-k?cjm2C?M5NV3^`+62UK)U zWf&!nHxcB3`KH!+>FJMa@emuTIr=%ApSepag8*!_#yU0#9pPPLDMSp{Or1}wPP6>2 z_?GqZA&be$m#TCM%C-d26J|{w8C8|eB`L3{B@-`I=@grOHi)C>!liGj(#e)MNCsKS z8Y!-)&o9N*LIJ1VHB=6FZV}09U}cC1=d++Scsjqe?saA(fgsxA08@^S_2g!Tie>v) z%sFuUV7#z*YTxvs8wU=LRd$~^JdAgY8{-qPR5~%@q62idj+Qjr(Q`J1IQ{aGvIYz~ zN;G1adFGsy*X^8nf?5k*&O!yLs=u;#q%`2g1RM~TN_G>zp8V$uIwZk4(CE5Fe)~Ko zh{3l{5CgL^2zB-It*iiiy9HWdQxuGg4ULV45^PCa^NmRz>gwz2sa+MgxUD7olHu7g zJ*yd-SA8{muyUHeK8)sH$hFA6F$>Bs`2&C(rR`XHwhHUEyqdr;JZjL$G2pZKq*gb>{>Bjg(d=jp_4#kJPYbaVm zrGQ67f>%Iq;SLD!?c%#%iC| zONKxhiVFU{RTbFwFocEYDt-tB%pwQszO%Prc*yd3BLJUX1b}5n-FCqOo9N)%IyF5S z&%~z=LWAw}Bsg#6Ep6U|;0BB`z~m&e;zZ#j&46-Nt9UN6?$OuaT82KtM4*6E8*^I& zv9h4kqXcson^F`gESyQv}sG_ltQ3s5o3rbNl z@)1}(Ln-OUD8vCMShbRg*YaY*38*ziz#gwg9T4{lNIzv3I&jSNb@zb#y$iD;C=gKu zWbE-E1~H(P!Nemc2pd>-5o8!z@p=Y86~W)Gd#NUSfi|M~J!9!0pcsTr27PWpb4)7= zIS_5#F)hzAlquK2Km{sY6jG^T=_fQt(irduetp2pIN84^oa~3k7VGlJzBfqs7vJ7U zxmt2`V0&R%+T7PGM~h8iXz?zN7H<0jE9NXpnImU}`8MrTEnmW51;|DH8x#7BET@!lExGa+wn1MXx=;j0o1dTW^0}R$N_TG}8Q(j77*g-SfJF=PVYXDj z2*3RHXgxh17}bLO_AoE-F*#^p+dR!iaHQSs8`N~K~otVVR5qfhNLhs;m z81GOfa@D5QvU_Q^n*HC;0dLsOu&53P9PTS9-H17wQJ{tc zfEb-KZCl4|gsa)lm1D}eVVGjLm;(I>L=m>FMZHjrFuPW+)Q~lmsgX%#M~eHvDkB() ztZK2Vt4Y^t3BG^*FUa!j)Y3>-8E0O0k%1aAZWj~ zuBDgX&Cusqb>7}&Vl0-9XOijEjPKf^WzNzInnS&FWoh3g2*n7p#|$kW2F zpaFYUx%UWnLnawQ@Y_9T;0zLc=o)^H0N-u_j}L|WYhYK8atn0$c8fK`#5#G2W4r`> zyCqg1qS<76q+Xd#5K5buVH|IGyvJ?AJ~3O;j?rvM%N?_eRI|h)sI~*fTZ|&HrCm8@ zpBIMN-x6FeYh9qWX2@3$%GALmzg5sI;A$a&N-5&#WeOJxX7(t}foYLLb8sWwrNl}l zz)(m#0Aj6fLu7_I(<)Oq6?0mNc@l#^f&%6{Ma{~Ci#)rdz{feQOf3zANJ9Kah=Nq2 z+6l_u7R@rPk&W3Dx=!eMDyvD^|7GE;*#hme#|DSkp|UoYP9VYKhTN zEo+{rbMG9&C?iwP0@0~{qzk1@{lG)x$2{enF|^P*IJCP*#SfR27I(Msw!eRuiXVtf z*fOiu-`@`}`lC*+qH;V6dtJ@@Ux$bpp@azTqj|`LPNbyw{;z;$8Of10|JSnEjz+T8 zC7>cDKtXq?XAg_2XyHN1g1z|*NO26ji`s|k3HlP0)?#>S*cXOPP!L|jlOG$R@V>)xn0mDnQ zpap%M8%8R?ow&1*#P}65>TDSh4g7b4ZXe+*6^5~W-QBxuCEs4oQ}?Pi4_j0tR5MQ9 z2SqMo3OYia92*I~siV$Dw7Yuw>+0<{LjK3|iPB4V#w+RY3jnv{&Ny`Q< zfR;oiAQZiV=|Xw-0uA_wq}&?V`#^G}$Z! z5RRMox#%ct)FaAvkHUF)$X zwT@1uT%FwNf~n1G3$ocX*jAuZ+S)_$;Z!0W4;Jb+vee%`PJU%&$(;kPRY)r4&k$%4k^#{CRlJFkNC5vpQW#XNyvD$2S(wwIto0( zbTYkXke7!cVA`LXIwO(1W*5=qp>wCw34W=a%oC)Br*g@ahm|$-NO<@ta_uzp0d_m66X>yFT4Oa+JcBu$Kf_yM7hEvMZ62~4avTEyk>cR zE2l^ohEXIDi;#CNNRng*C|P{MH3Lc~8YI4=$_d@BY9;+PrWOd;8U#rZTfhLzRW=Q< z_yEckde6Yzobc1nOtIGL5SaQai3k^hueIPIV9TG~sJ5KQXC*Qq`Dj=~*^YOD;$o1Y zTn*NGd;+A{6I%f&IC2&?LWUm1y@k3_pj(KX-_Z4d-!d{e%A*Znx+Wf+faPRt(khjM z64LDw=J{$gT7(E?c{At63<^3di2@)mwL>qX!@|i3+LdF^UBF!pAhW3OIuQO;tm^b+ zEP1acSbQmZ_upqrYT9#am)<Fe4h`9!&+T{%g-D2ybwaJMKi zUO^K_%u-3qnsAwPf+}UrI)=`mG!GO^I6w3=^fWp=$+5qYSdfGa~ z&_zdS`Rb9ufG3m~C}&gLw;pX2++VN+I9d5>htfP8wR^;hf%4R%*rX>Xc?tWpO2s$T zr2wtoWIb}@W!XCun#Jdg%^>OV+@XRrN@$z|)JIj2Fi8!ukS=~AyI9Z$j^e5dQvqUt zO$UyozV4o0_e8=1i|~Nz%Ap<*+@)}M@U+!Ec-0($kV|CJNuIX z_$&JjHQBqWW0sj=*i#%(5W4f$YVnYQ;iSwz86TE=e6p{b!2HADefwZfZ=Z@Eu2WA9 zITC6f_KnT3pRQZJ6petr;i@blUr8|ucq{yim&+J*zH31%mskZ?z7uI(d8%OS8vb$> zC1NOxHx>RGdr`KDoUV$TFMtg_YUijyZB{UtCV(djxak(@K>!~Uox{)hY^D{jQ zUsEp}<+(m@nbmr^tmld#9c&yO_9C~5uz~!&9N4GL4PF4X){G8kAlrSQ0^~t=*?qxx zi1LEFfx+_*df1E{B@3!lN@3KK4Wq-ERC+oY8;fVsM`jR$ z+6CD5?2?67zEs$O%dd|P!(gNua`aUn{D%v#QcW3zd^KyuSE-gKzJs7@@+(y3Q+BX7`sBOHmAmW11Q)qK{^Yl8VC==eg- zD4XhCmI}Ko)PxtPp;zrF>p;G7U{A84?CSMi6F?9npu-gap!V#FFel4g(X{g2U432M zkxGF*vb(!_ySfA0KOEXer^jNQ&`QVX0{>D6Aym|{dDCJBeeC7RdEraKgzhb?SO_w< z2!aPr;B1*~G}wI#!!9sz_W3y>Fra=C?XQBVG6Os_>!eGoRHTa#7NILt3mML=@*PC3 zBVdJ9ccZbedyB$zVevTw2N0r~WHGHJ--bXMUPY14I7oiNBLZ=52o!3mcoGgkPt5h+ z2|5_|&JDZ4Doevuc)Scja6`KV!lo*4TJr8ZQmQIIU;U3`snntAt&EJ*!hf9DcAGY^*h623teUh5Irk1NX<@ zGRmg%Z$2vbtxL^R?!_3ZLB z`{d|YXqR43_&N-Q`~iMM1uU+FsG0s_|Mr_@N*WvLv%Xf?g~;2EuIz7?HA_VDh9FgqwCVJqw7v?rpTyokcV!^0V`9Djuv za??||+CJbxw7Ih`+B6ZLNsWjhy(TuBp5}QFpt+W#TJ9KioF!av7cV8;d3h<1$zIwG zLRj&(dl6dQd!ts7qtuU*uj4Kb@EwAZXW(SZ$1Cx^VhStA%*(1aQ zRjmNXdKT|<+6fcU%`q(tY(E?ew#W+NniN)gAKOFm9poit7kOc_4=5$3k08z&$1rWQ zC?};z31Hb!PtR@@KScDCu)_~?qAbQgO0X&Es%m%_t{dabi;JKFT2v2|@Le5l1CFz< zGur_fVG#ZPt}gmD_#&EJB<_i8qtk(aeDS{c#Ke)kiK)yC1j@9FG@rr@*s~UTx3wOn zrP9KjZpfG=OxqVpjwI~fY9w6A^xZQXc_TmS;5!7b!Y$Y?2?ZEFT%=dxKPyM6%fs$0 zMEo$(yuhiwVGhbDQgL&(z>y{D2ktZNZb}1olHzk#u5|I@+$ULQaP^46~T42OnZ7!Ny^HDwCR;!kjkgZ3oNiC zwuCvS@Rzvh_AFRfiKpd?nq^aGPt}rozHo4Y1Z zubtHsc66+`M=F~LYy$`l=b-sB)l^5+N22So-p@d$qm%2lYf z-W5%7rQ8nIunzE{pQ9P&ls6Vec^m5p8B*LwHY5D(RkeziD>By-d@|20kMz#{t*3dvswJBjd)VsMg3{FZ=`~84}Of83zDYp3x z20_r_+>)aaF!-c)Q2nF@r&z7*H4AJAt{pp1@LH86TcP79tOu zv0TkjgI#e*@#6@VcQ2xsfIKW*hpEFjlVwe>vubPv_$d$tTML|PgWZ@$mqkm#0wD|R zl6!8LDQ`2@QCJaJN)^&x3F6ORx=PL2l>ds?DURIJh|U?D9qg-(;t&-nqFW4osU=-vuf&Lp!xLg*uh|6kfTv`a<44@@({k^P~ z@={C7T2i=Vm)CPyy~rEaIDjlt`{=Mxp~JQ;tC>ZoEm)IfwIt_BT;pvXnh|UsO{8XG z>5=hxGJ|m$69_o%UNJdwp?AwY##J=S8o;g6x~~_I&yF5|unQ&!17VWwFv>uY!C8lO( z)6f;V7BW;tK;$5 z=o!#ZdFA{xl-q8c5g9E=(^jTNQgot!uRd(XdMk(br+XH1WBU%~;=>2K55|wrOz~ku zW|T9ge{v3*de$b(+9-Mc-g&e>6;GuS(^F@9BFQ#3%tUB&Dlr-#i6t{04TL?HXrGKz zO+5??Hq6dI0yaz!nM&Nae1w;AYFQhw;b3fHfBcAV2iQ7*35meu@kK zFq`+)Oe?EkLXAjH9MFV`2`5T-9^A-fxx zp?L#&7C{*@uS6nD!jE9c+zPcK7-4Boj}nPM`Y|h#(`?EfM!*2Z-qQ_ctwjx7?5Gv7 zsS{!27y2c%dM&X?Jb_o4s-Z);y-ZG*RSM7g;}3>(oGZ!Dnx$*`tlEQSNsamJ(?ZRW zF7|2&X2|^!AV6PobuIfyG^-m?W=p-DTPm>yR3czCMUA{^lopf)YAcb5MUPi?3sVFt zR|M$Dc6kl=oy}%R$A#Y9*ce??E0`IhUf=~=>$kAfs;p*{1p~j@%2KyEOS^5MteuRO zkv?Fz_$&OrVX1CC%nkPjTdKZ`$Sc3D=m^tZeQYB$D-#eT6j)$aE%Ii7BmK;hO}~n>iAwmj?i@n@s8m8xJne%S6Wzo*WBp%>5LE}ak4f1#h(x@8__aVPxR zr=8I7$03@vO>hOk{|#45CA+9Q!C>=Vcl8xbpb!ul3%&9_a=WYrM9LI&>+%}J*CAq( z01#CP!VlJvz#IOSW9Hh&%z@Ch9qd}B&h8QiAQ^FFYh4`iyF&pG!xh77X1nWN8nAqY z%R>Ya!Sts*;{$w$*ng{`n%s-Rw=%C;Xkfd#gg;jf{9D6-{~a#yLq7uWC-8sF7_eNm z^&G~&qL`b3M~Fc*AMU@ppx4@H~?-_@KHZh4L2QUi-Fiwi%x(q@w2isfF>NA5Jg_rTF>TdHCoJy z3)jnCQ$yiQ$>VxOD+M^<;8a;XGX~~(&_!cDE8qF8ouqkPV+nikt~40TpfR7lS-Rfs ziA1Q8GxNGp*t2~$y?1as+_2>$7>3QEd$x~=2at9i{tNw|>pF%erV{DV;Y=(!hL@&| z`K)YtUNf5TFbR$MtbEg1Q>!*aLZHSPDQqi@uYF{CYHwmJGn&9FcYe3yow?0uWe0?4 z>4*mF#5SO*^U#kj1U%$t^>8wF}HY{AT@f&WNs17F{jQ_U;FsAhym`9gf< zBM`JxhH{{wWiwALFVvUfn4E&LtSsq+NIlEu37z7RtXT_PO2UDvvJYvNDjEd9FKIc< zhmPboWg41g?NpK)P@kR3^a*O&lv+ELS)+okZWgw_5Byf(1-5K6KRH`T9~>RV_vy*e zVQjEW9Styfr&nk?F*<^Urejs7sPuMqV@a**6sh6pIi5ep$a__0EOWl3iN2XfU6B2e zeC~XkDlgw+-gm^*ad}=dy@D@EyXQhnq`W z?j2hOHEn2?btR=(W1X%1u(>kquz3+@(QzW;l!@_kWsyAL#|(461i_m5d4tjKfleEy z1NKRnZJ<)p97wC?oi*UpgITY03lO%+&S8EsWa+WCX%#es#|N)r@~bw*VFp5iFYVrw zr)5)x4yv-uw;O!^!N64tN1Zbv%rYo{Xb;` z0DBnNA=)%7l0QU_5VmGyJT^5JpNw-C%5x?YQ;F$X?~PSu-Ox?hII z!ccvf8?s;=TX|B9zKY3B0-#U(6DAC{WWcSg7IwSzUU#7at%PCei?c-J5aZJP%S1LqfSs^#Bmr9jP zPjqZ5nHagbk%)AtH?^>{6~0{zZZ02p958`~gsFhK5O2?i!tL`yX=*b}4o|Hi#j~Ti zl3uZC#2vmQ^|iSVSB{C>!!Yqyp6thMUtnXLjYgRii>XW=NT-!DwQa3Hm8@kRqrrFy zZX-bjFjj*68M6M@E$zc9?>wxx9$^U6GdS3%;sVX>Fpb}&{i6FK0|(X0Y>RAsx=8f(RS&;<`zm3n9Yl`HW_m#zGk~wn7*n{wi1thz@^NfiNXGvjpa$ z@`@_q?E!0X<+5N2(B1=cME&p8Mg3-sVky*kZUmz%rv|4o@u|Jj$&q*_6;G!VQ)8*j z-o!*aGZRlvCeYgim1j-Hpdm-(b(=T`nn=!0O~sR`OnfRfJQ2tHB&Z-O|2*fkO;7`q z{=_pQ)6@GC=tlzOW%tqz7z8|On0XrQG6vDja|6@_E+eyddV;$XK|Pt(@W>j36!+@; z$(mmr=sKSfB=~komd8_o*05HKbpgjbn5S+=jX{Hb!oI+uR!(?!gb|(xI16A5y5U(4 znbxtnk~uF0lvW(mEFlM&(OJ`%yA3vqe z`XF8ex$A-5Lu&uP?m_pY4mpXJ1*=l5BL!;&K(pq(1Wu|FfEkX$HSj8%e%7Ike&9p2 z9$N8!36Mf0f9%3~y80-A7_b7#&rnzI#{HF%cC|sBta%a`{h+SiEf2A6MW1I`WAFAM zJB%vn17njj&iwIw@5x;ERQ_mr^vLM($s@!2XOC)o`{F2;gzNI%_GFE|G{;(9zFXrg zda(H>bF}YJzir!<`MfhVySHyazb$p}sGiKu6pl~s9Xi0sUci(bz@Z)OoO2MKM84E$ zPFqz9+jZW^bTXBhPA0|@Q#=7lYyzX{aD})W(a!H-DSN5&!aJlrmex!5Lgyv-N+p-I zQ$auTrF#@&CNC*F%rURBb)&QA%OVT17 z14DXX;l^1p!SBO<@S@wL={NTFOKl1-KVDFVz&76)*0RP~JY1=1Ifep`Vlyw8n#h0$ zADr4!aXD2M7T@F*-yc5`DD7KB9QHa^Tn_!t9CiCS-<$mzQB+)!@LcZj4fJ-uU!vD!xA+pMkji ziK%ovc`zoAN{*Mm1yw~1e#955FLApkQSWKkQdEcgAJ4MbTTpG?HevY>7`DoYUC$#uq^LLQHa2Si;_1=^_lO+MT1AIc z^CCAb=IZ9?5dpues-Zgz0$(gzqMFSj$ZSf+C*rYGoOvUQRDpa{RO;%6ba}6HaAveO zew(9DPMgWBwrk*cY_fRh#=ha<-my7t)R-KZE)5($NuA=Z*w~HJhfZ`Sj*Tsh4wQ1* z@LojFRD2{EPXiH@5LDh`Z}RIAi5Vl@eU-tnw?S81I8O zk0PN&pu`4`JHlds1<=suD0OlI1esRAl?%BM1ONgvzJU9H5F+nZV0K|%SnS&JfC84| znNYOw2aDC=`F-48TKEIM#QG9$cM+Phq8Uv;YbDnDb{8(2`vX^fesEEzYnT^?`+rgn z*asK$!hAAa5LY_aO}{fXpbc}y{^^-bbr5{`SMF=RoT;v;i^ZoZi3#B;IfaxCx(k%` zf|OdKGb`6Kewsj9^Ewx z4V+0y%LcC@mvZ4o;u(^eSeP}`(Y(5^d(Ol}WGOk8Yae`OBYdq;IqJQEvq=rS`~Qro z$g*9$aaES(;JtFvf_;SOrUDZBO5I#>uH2*sH0;8|9p(Hwz~_rKamH(~0-CezHCRfw zfeqE@&jLp`v!iKW$~iuqcwrBC2D8P3%Zb76!Crp~m5}`m)t;ydXjiaJH$P9UA2g55 z7r;lK$ICJ?-*xBqVLg+}ne#7u;ps5=*jN$4#i`NYS-+}Cuh92e&aN8}^L@(QP>EhuP~_*c^F(!3 z31Q!4W9)#W?jNBnWeV|8xCe=>N=$BNF6Y5?PI7&=Js|S(LCP=d$&U4h;{n04u+cx- zR4T9)Y%Jas{bO8ga$;J61W{))A#W;6g>dt&T*xE>(x!^(J|Ru?ibPo6nB)s&)pT+;m5z^QSoV6nyXPt< z*@n-r#q<^|pdFUAV*V=OicgguI5SLY?`ZDRGF(9 z=v--|-UA{_Dt1wWFm^l9^-{~4mgeXuDCUdXiH6u^)1pCB4ngVz_SYDylKClt3MJgE zL)Lys4l}jM6wb1*%u=TTKb!-K5PqfwUkY7F;Ps!>A@w6@{%=x;FgjmH72-la_sEE_ z{4EF~wOW8db&&a?gElQh2k@let=1##Ord-+X=f*0au%gAFtg zkB6w*7J8Av1l?O7iH8u54{u%U%BP`@&(dYmL22g9d^XCyBva|t?8(Xx%WJ|8%d3UC zBK9gy$|*Afv5dWg(J5+<;#4gI3=|h|lOa~Cq8pB>Xdx$`UD0wihaUD3IPqXPp(&pU zHJ?0Ud`&zr_R_yVp`@dyyW6iotOKm_&SFD#?32OfckC=J4HGeOK@c9R%Y;Ya`yIGQ zT?h8J8H?sKu%7-q$iv*wAHGAZX2bK*cgO&lrxwkliEhNAa;%pY=+>f7BGAjuFrd85 z1xjpPK;?uv&%x3%3zk+c!wnN$KhYD^a3Xn2KS2$!qAhV}=bHN_)?UDhU$UZwQ%i(# z;f3o0Vd$cS!C}wfU^m$CdxuyJ9Qt;TYtrGgTLch$&wMoi=ERO6(AjnE&}Aan=;o5! zfOH)%IiiL$x8Rb&^(Qolrk*R(2s{@=vyG{Q$s5Qj z<|-z8f~`VE14PtIJc!Ne#=K7R)GF%K!jZz%n_(a;C!dipNPU%nRA+8MfGPY|O4P9- zZh&G_Bd=7db`iWe^*I5V5M5xwtXfK?Xc|;8Fmw7r)QLz*)-G#Rz`uC>eO~>0N9};m>H~Ubu3jek+C@bW z4f=56N&xJ-H+;B5VTjS!-Q6$qb~R`b05|6T>46`%30Flfm~kB>Yz7ePXTz^Q_Exx{ zhbT9_Oq3IJe$gD!XBO+|ITtbS3HS~<2kJ=hVX=;k+p-1fupz$$E9;MElVkHtEwvT#Ns{V@-6B>s!%0-%m=fXg%sd{MyDK{piRwk*oo zHAsT(2iOy)pni&T;_^jYJn9iEq&l>az0DZdJvih?TpYabu&TdvVaT{0npE+le)J=; zz`=CWfP~@}fPEwW9XRV-Cczw{(?fO9sR=o4VXD_EvN^&@v1NKDK6NNQoID(&`fW2S z)R?DP>!ci)PtyJdD+}$fSJ7v(iYd(2qy{ozw48}g9fT=(Wj#%30|BFSX8i`@Q%TQ8 z-LbeQZHU0}d@gXncL-jKt{x0lgaqh2s1op&88&7-<|gHlI~D7 z8jW6gj9LaQbyY0$D9t&Uyl!2I=$p@iwxA0V42R^O=8eie6t1=IdWeNKo1UIbj3r}f z<~qQ}ARCD{QnVgkI~v~`o1I8!CSoir6E7-Xdaa9BEwe(S!_+G2SZkxG1;!sYPEX05 z$QJr7Gn(Z@Mu%}_5>u&kY-%L#nJL#UINPYTU>`D;j2(=nS$05P(j#_F1f~we?mS#A zp(~13DN=nD5HY|nK}9bev}sVov4PFX1It7qq$EyB$>~0?l+;j3Cl0WIuoSXSdRp$(iE zbJC>p6NEqYlL5b7hJ^I0LIw2~j|En%iVyR7yFLo1D)HGQf8j%LRRE6|V_n*-y5>bP z+KZ<(LLEnFCd>u#o_7{eWE2h*m2uuJpU(zLF$Bl=HCGBlpcll07No?Ro?LW**|7MRkGkS~R!&`e!>H@0co<36xS+06)R{M}W0841PnB3+ z87`SQh}9Li>#gV!*rhImIua4&Ch<@_G(zHahKaGf!1n%nj|-LVd)bwZti55wt3&a^ zR;(61wko4jDP;!Cuw2~g?C(?i`=U;+qUH@-!?jbU#kv6* zv2(C{P^f%FJO1)E_T8oIO;0HEda0xoAiM`&!Yel1-`jctnExELxHgTpZ)GfPMCshM zt54mv3y118KWl(0iW-jM6seM>5Q#ybfM&B5=3`r& zf~d-NK}x7>;)sol&kJZ56y#Z2xwTT zk~BfvI-TO>P0M>Sm7WQ#jp0->&|(Hx|AbajmF?YZn1R!8tFjk@_EF2$ZQK|R8?Z+F z9?a#z%BI0}Dpjy30Z$vfB&^ya%66e|0Z%!G+pNnvcLsRWZK+4Hq@w`OsR!ytr)wY; zNfMeYn7D9`!|ZZ%IkRdwU6m3&+2x#w=1Q7gh5`lZFm<%uTI#-j*=E8jKRw5Qn?+ z!>11ppWg?xp)cp5te_8Z^vsm#Nx{8STLE(=b0?1gkIPy#9h2W50JxckR${tL9=cfP zfMz=u)yhafaHH(9W;sgwpuLm70%XjZCwcL*nFW)lJjH9W;6cZBT{`5L_Eb8v=4tk+ zR;I!zmQbaJ$Hjq)zO%F5MkD$Mn9A*ay}P=*RrXn5fr<;F2F#uXCUebc9Vx@Z3spI* zSl2GR^I-CvRI_#9>031>Ina|1wG5zc7*PvY=jZ;ayg7*5;XB{HsL0z{e`S)t=rijJ+s!V=R=cZ}ZeQY=@%89Bfox&6X&IE2Rj8=mk(~;cp=JNA3Br zS!&3%oq|RA72sU{Nhp1Gg^49k>|hwm1{~qbB+dx-RB>}EV+b0 zz5w(9eV~t-!I0c$y?WKJ3tg|OP*txRJsR3vQSx$kC0oaaWy|7{Hfc$gOiLlIv_sjU zrDPo;iWbF?tPth!O6!e{@E#GX-IZ)_SOzw}Kaa{fUSGgiUYiBPtLi-d%>48J|NQgM z%s(Mzxxm%V97c3=P|fHUHPCz(;z`^blF~)(mt>MkT1p^A)`s0O2ZLsGN2#tIAmx)r zu^+58L({U?0y}j42Dhq!lsX|tkQ}uyqkWbP!Ia!o0!Ej~@3@qqVA4_2_g7x#ZKkxC z&#CQ`5K0{*H^U=eo{sLX&oT&axLhWEH& zIWM|pUDL}d`E+Qoo~AP?i3-zcVNPGs;7+R}Ey(uKCiKYhF&m;iha#{3t;5ksE-6v4 zaVlY!_&O9QvzC=GNI@wmPHMUI6t(EKn~q1*aL02Xl(Q`ec#4`qVoEkk zzKv-yH%0x(S*7psRoFsc(H(aUGwB-1DFFn5je1QCN?IWN)fWVlS)oyb870waWQF8g zv`nB)Op|4#c$>{;XgAH+t{Jh}9I#w7iUy+4T5FlsKqHFjz2%x71)33snLG*E1CWM3 zkO^HtA@mVj!MbZUqXBXrI}rQP0BBWW7j2GVdRW74FEkd8i&`NnwAVvB+MwRk?(Qb^ zIdJN|Q!}dah^H317W!?k;jgdPjMjz*kBX|nA{4J}jjw&6^?_U2*fl=H)cB4mF@WjA z&Pl^ak60a8V`^z;Vr9lyfg4$4_KGpTuwu--F}u97oGRaVS=4}!o=syCehybC`TXjQ z8*;_Ms0?TcsgKs22HbNmyeWi5*g6rT`H()=7&i=|E{Yy2~2?+WDa)8LGl)altNrA|{lg3uC zMr>m&&rRI8v3CY1SR)48Z+cih_J&H=F2(7TI!)DgVmr$Ag`R*|eIEryvDpgN951p% zoIHcDrXbS5{dP6G*X$8H#AgkfETLU`$3-B(p zIReV}4{>KphXo^3E2aNt^lShnD2HUet{`csB(I3VAs=hB@ z95DK0i${(P82z@$I8G3Gc=ghN(cf-}Kai@`zDt!DLQF_8vWi2LGxAGuFhXgDQE8lf zcTukK@-Xr=1hipF-3Y>x)rxrmBh<2B>!Mc65wro;njud;%2BstyYn9D-@Nh zR)HyZNOWCwh)Rtdv_uj_br@M9OQsn{Mc1u<$rcOqbR*Y|*{KzS*u|J$fYiD+JAXC9 z$5)po=2wj6nHw`xD+7Xm28`9k>4}w@0b_dR#>~nL;OY8`0q&w{wFI_bC|oq8vTO68 zSk9hk#?(QlF$3o{si(m!N!ela~vW|w~0 zTys*$TKC-s<`(@)BHk_9I+|f{E0xx}Mv{@tJbTWM`9u|ksK#`dw00o8?^2}DXL_C= z(`sMTSJNU4qYt}3`fA2URbo6zR{r$W+m0L0dVMvcDw$e7eF-sVV2ixKPG8OF6D{t` z0x*oew$nh0Qpvc=ZQ@3$lAi@27m%4^e8^teY5B zhal^QAor^ma+U0ZNffCk5>y&5856D@#!)`CY_l?2q+9bz4ci}A-&za%?1n=VuUzZ; z)*Vp$E!zy2V>68Bd@tVUtLal6U^>`X@qIUTf=m=4TI<6;*YP$%6d(O~g2BGP^lX@==&H>*PBr-}iX> zqSy|ybeB9uT}0VrANDmv+x7}EO6j&tw~hXkj?2zh#FZ+=~z|r-&hwxUU&HjYYqRuKFNJhKJJZWf*DFea$u-RIYZ}6n`@5 z`?#r9D4J+Tb!f0USk1Jik1sW$q1l!cAa0L=-8ih2$FomKk0;Yq%8lXC53yktZG}^T zOiL*hKc$Bhd@L>K_|V+G*|tN_EO1<$V)>2>AbirHOcc_Ll`&S3i6U*2FyOA!_*mb0 znv_soKGuQI)@Ml*nkcGkMAgW5lmQI5?G_Cc*?#3uQ6@rBV1{PPj_t6BCX%O9eu5zf zZEm|MsCn|JAxkTP*(aX@4&zU*kYd;cbcLr=Qy(g-B<*|~S)$Jh9-Xcl zQT%OG72rrb3RTix{%vGQ)Z`z9thA8+{}0Lv+EyqF`{$lbmE!T+BNNlnz4oUV6XN-PjmhJzTx3Dxlvt&%((o$uROS4tWZ8z)*7b;kx`rhZ7b(<8l6|x5< zC>3-j^^-*V%BM+YAG#q#0JtMGM5zJ(hlV4uo=3+<+jd0JlIRFun`r%`U2>ypW& zrZM$ly)jF6aE^hZJb$}%aU+G~zStKrNkLg~frEn`0Gf@#DkiemLw`H6Lk)7mtn++F zj~*xXM*uG)qIsXB4aPV5YQRI>#E1=?XE{`9v!Y$YmyUJXHLUwW>S71;x$?&!;QLwe zE;wOOe9Z0n!j0#lzwMeKoucoNe;od#!D!Kb(s$%Z15uXTNxCTh=I4kVuVLS{Lxa01 z4Y5=0?v6o*XT$gCEKlGEZPyG9GYk!E5G{wcX~nlA>PO7EtWBH>!Fib`9qyvdsN@f6 z%M2ad+PwJM5?zQpn3Nv11E@`rQTO8wW5o|c9O_yLO;960H?zw9!p!n2MuWyI4m*ib zA|tZRmTO0myTeOd_B}HU2aF}NLGK$5f8z+nl1+hzzrJo`*d!lJt{vN=;dG+RU+1+J zIEgq|&&Qz)RA1Hv2bkIcxo2`hyJ5V%Z5s_A=UzxfAHO($u|_|g4^m{#O!TsQhS~LPI(?Vv6v9&p9}=5?xXVGY z*R{hIFVI?AXx8ga+`3cdD?*JmvGEW`onKg*n4FwlnY$@316^CZv3hlOp5Jp$CClu| z;RVKU68RXz4Rl?M_25eGZt+&~_Ndvq6G-=*W0!dfyj2RE`H~<$D%>UFtr8q<-HGFK zqL455aS(W`6vvPvlIIvcC`!RwB{_j4rR@mk7`o`9_x$OB_a~uU)4 z_#kPBR~`;^rud2^+qsUe#dL+R`=K64{q^^8$%3~M8_9vx1Gwl5NqIr5j`PpM%Zf`y zvf?L&=PnLhN(!z=aW%2!Z#md8PUnrV{Z8nM0>pA`VYU;{}vt^hwoVcgygk>b-mTA#*mlzq zg8CuQ0vIt(&BTxY%b89VuCq+P>8h8`7g_B(`QykQQa`0)8+ACykf-U>x$?)=^?c)6 zz8-7C^qO{y3M)Rau4l#gAd5Ukr`0fbd}?W7b$)tkb&_9CIX$_ya%++1jAvAJTc+c} z*S*ZGLoJ4ZTR1o_ao`FF0Sw)Rz|ql>Vaz)VDj;vXN>>1vJIe~BF_v$FJm{Z>0Ox}e zLJD`!C@HFv2en6O~?Zv;_-AXmaosw=Zjy`+VFG~xwUfHX_>*G zeV5LmV@e2E?@7aw-tCIJ1#ST(UXF~95AOn?xNB}|07RvtR-CI;2F=TJD~sY*)_gm4 zVm&f)aTIlWCfz8?UtFQY%F#`ikHP1{vjsjE(l?T*E8>9=Wcg0YA|34w7>by^rsLgB zd(Bf0AC7EqZ>Jq%{$@uH{YN@nA@M>o{dS#tXofrLxOuI53E0wE@Xf-(dpLoi>YaRn z9mNPdM0U?JXW$_Q*-?A0Ov#CGvIEM81HZ9Va@#SF--{$VGmHzhMWq z*NE19j}r?DQ&<&Ul+%>Ax3|+$n~LkC#p+ba#TzBhk)>o-T?A6fj3z!@sa}%aQ=xe8 z+61rxrP{j@wa}-Oo%MRE*&5=DG<$etp%mmsYp_uk;!X3*(g{Uck$NE=RDCf~)3@7j z$E?O!MV?y2BOI>M28}g6BJ};3Uu_}>Wj&Tw68Z07un~L^9Vj2%`c9^_a;kVdak#UF zb4`(Pz8yOBQ#Q&33}8NT-VB?OUd|^A0skfAV@Q5J2Y=m+Vynr0$0j67Vs5-rNi`gg zOrC2E#i~apqs^_x^3>Ao;>y~U*&8zu2FCe@Z?&<^x(1Y;mx=j-UP7$iAUqD=gOY~3 zpJsoD@v*^|ZwJk{ZwGes?WVK-cHlMNwxa0m+tJ&O<-dKm<-Wb`udmb3(1kpL?7M*z z+L19_X=H1~kN2&)eiMtydaT@e^hp?7ss|qSp+hCJ2%6-5vg0;}Zl=4ie_32iycqhi z|M6P6oLp2~lTm&cf4mHx_0i>-iKRE@udb2n=+&hgC|F$Hs$bOn9C2Y}o8eurSr*Pm z={z5xJSCwl&#bJ>&R<<#Tbx+Arh!Tn-XjcaZO~pbMxj$%rn_nH&@oEshwQXos?uQ3 zifWWNcf+ea;5|+QKEFdqq)=H-%Pg=GaP3#F8vf1Qtd`yEzZD8*7aL%rhC)n~N|Cu` z8^aZ&YLs9}cI_?OHMY$Vj(y~f9Nmna8#q`-c1~N~;#tM3Hl``U{0eN$_ws9v8i1tF zsP8nh*aP3u`@tgB_XmVMOq44XUotmZJEhR3lTUQ3?uKb?V!N2pvSSnJtqp@lvaHst z*}O8%(G6Y%Ag##S4M%K0$c>7{h!q1>t7UqPnsJbRqnx?HP(a9-z&Z_Aa%kx=kZ0O1 zx{?ac4CP~$vGMc;i3QrGWLnAk$sM43iVnGfOoB-9y;#CbYD=DqNmvvkNu(6~%y0S< zVUz*7lT5=g2^a7wPN#Go&aB;ou2blePalYGUfz z%-ZxU84r4+mcMD^_#P(1(wH$M#qnN}TID90eR6JMd1YovO6vsnOB(E>)k>v;iX2_M zI!kthF z?QqcANN}WyPHk(3=FwL*teg_6DmW#j_R}53l4=}_R%+`-ft&(i)(p_IkOrXWRDj~O zngRY3$r3g>fMipx6EZF*(USyR{ix~AeMwSDdLZkaw(zlwc>2^|G|iB{scKFlukWc& ziwgZ@w3JfpMC3Vv?U3KwvvaqWZ{Apw*QSsdZJD8CHtJZylUa=L`dd?XMrPjhr$$zT z@yfzTFu(4M4L7c>)@Lp*RJS3x1T1N1&|&G@&x|YamOu1*`&IYNMR$9A`s$sDJC(*; zW9xTcz4VrUbM_8kJ;Cd>w6L&}0{Doi+<<61!*;Xk$DT#xGQv zoS3@4y12&Oq3{8PBdV%lBFXhA&jr-2Ev_zIO=Z#D3@2H7al6d)%;f4-9lYL#lk!3y zpDu^eZ_1L*drhm&Fg(g$9I0(iO%8ph+nNg7EB@8_(J|}J)~kN&((U0*yRrVpZ0Oy& z9*noPR)^-S%V;sdy*@*iYDu{IsCdlwN~_CAc@kB=u`o4pBh@}V@sZV)DI`6Or1HKS zy@5I<_3v{CRkajT99c^pStr`@`dF(zLiL=UT!T}oC3(0xgipyn|ZaW38R&4o#iTQ1bctnW^2(Q`ghIuJ@d*lI#hH1i6kT@4=o5<2j#mJ>QS%S{dM`1-Jgi%ub%%rNLbD`?CGnBZ9 z98z6ZtqjrX8?Q!|Aao2D;pj0cWNBvc#;uiw9GXTup(&j$iz$6rP<-_ym9%nWdF{2C zrP(XD))r^>jf5g1(}#p3qg>ZNH8=6b+S1JO>Wvk;H&J$mer4b>m>Nm+JhQko``X0H z44LJYZ!NFP%&kq&E??Iv6vtR3=bfgUYy4~((dgpp-SX>G2ux2fg*dBLW=IOE znZ$`kou&rzUcba?y&!m%QoE|EOU)rBI?f@w8CWH6C3!Ykf)si{ty&!%8Kf0VImQdB^3VdB?_R>Ik?%Yg5kbAOFN$db45N}Bbgi>sl-U{(5;AHTs zhvv*imFgaou@{Zf0Uj#aFkUp4W^S&|F3n8Wa7W?n6z)Ydq|rzvIsjk^89L(inOiuQ zcyQHK_9}p^E*)T&sArs+e~sMxHQE+ts5@ zup=&FLNOdX?qkxbDOK#6(Z9MfB^TgOBd(|87Ru79>?Li4!7=ZOTx)t@x>#Mrb-y#y z1{R5o<&}k{iK{aYg+@9Ib2VCY<0eVNC?3j08ZqWQw6@Cm@k42zP`t_CkWk1aeF_b^ zX7oX6)9v`qhe9=^jp7HFT|hsVJ%DKklz9xxq~q%mP_JQm84V?+QsK+zlA+?oLg|a3P_Zw)H=> zUWa@z7MB)QxK%(j_)sFYz!sGrlCowe8T%lG>f=34e2p8klS>mz^45YEjg<{2(k_8) zHgFLmbVtY9e2|jWG`nUr`K1y$wM&|9v4(^bCsH56GSTz9Y0>(;h%BUw`#L6*I2P!o zG9%v&)l8<~D8w@_@{?kCCr2UF)rG@_Q<!^T~uLFhzw35#gfh5;uja0Qp0iTG|fXa=UWVGsJDz9hl(r57I1Fd~lJB!i-` z!V={d8E`l4I1X*%XWJIH)8@z`Sy-f2VKl_1N~{A5g2X`tH!KCAZH2ZOOC73&D=@L3 zO=k^kejVpaAf&y~0g|E)B6=F!*Rh(1doJ+>L2Y;!P}>2{CE_MZ?!@9a|2#a=eWZx! zzNCl_~p5!8m`*<^ks797u{w3RmVh4ngFZDPaHDIJOSp=fMvr-gub316~o7Mcne;`{I@^ zav%V+)2Xs&-)%=^V%kmq{;=2(^n5hy>=8L$)3v2t$X|zt&3JtqM`^wYDw zI2xeaRm>(rvG6=GOIz06>@l_N?d?H{30RrneFRhFi0C}2XeqPD4Ri$g~!i<(Zz#<(%*e*6e0Aa7(^dBi@HvX1zv1Ao-J)w9Lr#!#A20% zWteKLg7K#^R#nT~9flu*Kom-#JFFO!s&f0^U)O^3&dSc@^hF%lJRk@5;K*RxjU&Z= zCqzJcOWqy_iGNCM$t$yxX^0DvjMBOx;g_Spwi}yvY;CjyY&k=rgI2Vq@5(D5I4{%9 zzNQ!ZUetE9qFaU^u!WI? z?N<#xvB5i~YGNr1E`I)Gl_$VkB{++^m0~O4u4%BYSd^Bo6Mlr!-f24)PmCpTBz|#; z1I8PGDe;pHC$iwOeWz3peY0ViQ7jzz9AwLx#GE$H_o~3dv;QR6KYL&N9l7O97Alz; zD=LoHhIcg@8IfQk#4VNlR6!8>&CqPoUb7_5=BXp2ZpYiU?HTd5k9l|t`_FLyP#aFE zGx9~1ojHMqay4&8#lv>-0+Irm8kP(7R@rcUvRAM;RH98|m$f}(CE7KXgyaTbX%^sb zAw^2k4~L>~ibx5Uk})-GR{15Kgw!Z#lMt8tR_Vu_{1M)^3Po2?;0Zs+FNj zHTtD=Mbt})J1Gr^zYG3j?|}? zpW;#gZzW!!*gwa`MDJ)fW4)tFKpbg!Q9kPUQN}2Wd#1pl?flBJwmcl$)&@Mhwp*y7 zI6QzxpG;y7FD9mnw1g*xm`Dnca$-eQ#+aU8HkN7RrpdFHUO;Zg8-D2EzM?JLFe78z zc3r$f+iHgq0+C;wgoroHn6|LiZJaXY^X$lW*GV_VGM1?)$1FU6s}*a#U5@?-O#PWTk!(){i{lKJTya;rlP|Nos z-?fdGudS>s%DdG{NM9Qr=8Wq_BE3+K6pM>Q5EjLWItncuk!y&%e>?F%?3+LKA2I=C zn1Vz>-@c|8-3*(PAPSx+H~ei6-kqZ|Mlg8wR7y#YjN41INl!;UElgy1r{o5g0L4ep z3x}^bG`* zZBv)MK!VdPM#da{b3CRz9?`>{aA>4UIm|C`@ z*2vv*JBU0psEwlj$N3+Jr}dd4TK}tp);VxVRvCw}YMh_RI1~Y6sJZfR(612@jrWC?o871qV^(!N86+BG&9U2Uvp88l0l!M9V6~)=(*O9lo}o7tV^N@s%gq7mW{H z^P||nx#kboJ~Sn5wLE~*!vr*3sSMSIvByo$(>k#Q2>68w(qTIwG26F9oWIdgTRB1# z1!<`{mD#ENDB<4EpfYy@X1z#oO6QvB} zVTnY-&#rz8=Y6`uBa;eJ=)haM;f)xf&|0E;T%*6s8j&g%QVBKck_i(+?3i3o(q%<& zlrqQfoL*{zjwsD;oO)5=S$I_3Uw43ovt&eU{7y$U*6k16_=-u#8QRw&`$v&|4}=xA zrAk9-k7!V0r#Qh|O6wnqp=;puNCp)uV#5saFg({$!9QSVapKuigd9V?L@KN z;#wY5Kjl}8Xr$u~`F*hFK}JL&ME1wBDZCc*ha@b%bzFj1TqlT1@((u)W+p15qa)Rk z8vm7}A;w6A3{&`UEkjTWKGKX*no*gC=x9$yop~sImF8QHF5=sseevyn+|tT(>A%#` zHC|T-e$jl=ZkcU2-ZsOA?O{5!W$VmxN{c-_zswf#i!Jy?D?#$gglCv8t@e{)kJrke zSrXRT`CxQ`OjiTJNh!OQ zpsiIlOwTDb&Cqg89dVjAN;lg(@lI+`)Y{mAyR;PPUg*qP+L`SP*9=!G7v%v7=!l>C zi$*A^p;{A(5B6(6mp&byC~r9yu4XV{YU#8?rdt`(fA2gWpYT>A3JmFeV#w+4<_Yjd z0$Oi79_>V~-{gbM*TrDd#l~2PM+|abTN8~&IM{9kmusWd5ktncBYTOwBF`>TBrb~8 z7xTwt!h-{0=LQqCQzD{e$Dw0I>Tg1fHrAby2|30Ny~_V;5d;60WMI8lBn!h=7B=KW zamij^w=FO---=_K(M~D$OK|iEk5qD$zpsmT&@7?KKAj*@bjzOm<^B(` ztdDm}8gNekXrWqJ-3QBw3TRySs3aK~cX-CTUc`8>XBkgaLGqs2f%_uMbjgv`%JTFi zhDP7B6+1TU!1cvuy4)(4Y>+7EfXpQ^bU^-+*|ZJQ2WBw=BiXB#;j%Gs8U29EFjh`I z1nhyzb3{Od{=*%;gP-omPa=3%*785(JII(H%RD0Zx=F9L%( zsY)VQt(GukE>Xf@HSIf>Ok=B>{zoq1-fMniV`F2u5^PL~xUU9)bcwlQj|jTw?-UYV+3 zSqSG{Ae3JulODYIs>IuNy-bc3B3x_?haA?lWAejz}v3L}91tN)b6K`NL@{aR;6> zE=z}$rGtGOiq{7;Y1Fv~!M=*Lh=2P}c5(psDAS!yo!T}-ep7FQu3OPvLG`LQ-HB2X ziuER>mo9XYnBCLk$T4c1q}RQwrEX8jI+aSY=ze;VP*e$CxhAIPX6FkEx}=G&R6&oa zO!C-sx`z7IEYHeI3`%?{qy*Q;aLjyhhT~!_ViNCp1Jhk#TmlUCU`g#Ee+G^!8 znS`+do$@-3_MN`6v@pLiGe0f8u^k!^yi`c{wdoemCfCfq$oObOOgsF0$N;HUb(t7v#bb6&!>CtN|TVvrjwAKHCb@&W*-oP)fs;1 zsU6V1H?{tBLImJ0CyZ%(-!OAVUY={a}H3Pt6X z>FBeF1bGvMpq@{LMp?yLbyRbPt)uAhU(!W+3#dAM`;n@ZYP*v69f(xL z7t@(G$sQWLDCgK6@B&@%BM&IF(t|9iiGR{@nswlK>IzpNpye8;EH3QpI z8jvLXaI^fv2=>O6sTreTN1L%9=%j6IIVKsd#8qV&Zt9`G9oacsl{Tiij@Q1+*PF|n z2}`0vmKobkKio;YsL}M$Y-1@aXqd4rUDD_aOaghtNMdDaPaIQX)mGtrP}BlKx|n}g zXSHKv7#l#D$w4xN5D{MHR7sF>Qe1XZoDg{xxVj0)onM!r@DeYsgFDy+jF3l`2<4!i|>sDN#qI-!=!%ku`K42&sc#n?yZO zgr&=8F26MSd_V^ti$(JJ&&6pyRiYHp*v5?ep_5%|ayuLLH*VYY$ce@DqKy+2}N8X%#L+*K&QoYw~+Fm@cZP#@# z>Bp*-$|!ld*Yiks<4GR`j<-x?iX9i46uStC>H_S8ajv%cwazvWNO zO)Sk$Oi!l03ZsS619j)>pM}3p@(HPGPfC&Rkw4wJ{E;t_=Fhg^hlg@1%&r!A=r1h|EMgGrv;EqyfjBXlZBH-%UO|MghN;4 zc!3XBtpz$>L>B@vaw+e*Z2Bm2%N81~I_*(WQWUu*ih;v?l=W;;-c5Ta$@++v6%jJ$ zdx~;Kk-KIk2hq-Gc`dc{n6Izb3gXbzHixMC${4wqmm5TUsg>xox+d1W$QDiLO zPJv~=9a^?AZ^zqyxM|EK8$QzpY!0jQ4mLR>&~6>C8550`d|5A8KW=`ECjyXxjc zKX=Lu58on+53kb6cun>)w?n7L-rAl6b}Ad!14Vb~@G@5-?4|fn-i$5_2VGER(+;{y zMn5#KN{#;#pG)UmBCbkt)f&fYhgpL_xjvxPvcgi26s^O>lQ_AN9mH~ZGlN_ zE;RyS$+tUM@Y6h%m7G*Yfh_ospRWufGpor94=sUo>0TM-k|ihafLKxk#Ko+Ms&LXU zh#&VQ^C)GfPSNVar=eMCrzP04!c-Dz;Jn5uI#C+CqCuWqF{l*lB3G6{d1~U%OiJ)4 zX0zo34x^+j@X}}|`*%97r|3JGyOag*u`+g*mT&u8JEjM#&!$r03cPxJW%u2{zoU$J zlZ^aXmpnhV>%PA^80;9O(!BU79<6nsh!#_h+liBr@bl z2;^qBAIP`Ky4(%d`>C)10nvN{me1{k8D39HkeQjoP zVc~kp_R-@yTf}0C(Sb3{xstWX&v%-0$wS_MTO>$1tv;<^6U>(iRcE#!_9Tq-xjWDbv~PMox4t$ zuvCVHB>2IGt$SJ5d8lxf@*&S(Ye#m7Nz;dGdatH|v6!2CCgTyI2t|`o03$zL2Z8P${QLi~XRBr7!fkx6t@%Q1$d8LS)UlQaD(2|sA z7xm3wiMWFjLz)_Nk5?WP zWm*>#$(~`1IYDGwn1tBYdh;}6tcx*LW&FV#i#*sQbc!+d2xGn7xG19Q3^r<<#1DX; z4(&T_JBmv2_!jG|gbRov$NiN@Ytev%H=(hvp?q-ZVCvxKr&%LNTs?x0&jKrc~ z0`V+k?Ed}xtS&O^)!1T;)!E$8^ZaxpdoNmZg0bHFz%`nQTCu0`$Fum6^#nn%XBYz0 z&r=0q1q}rnMJ*!}n}+c>o+<4O-@|Ak^iA|n_c6wLKZVX2Lmi0}$W-5Rf=eJq)q*A} zd!d&xhS9)`t&Jf8nt_(QI1pya=tF|+MnpU?Jt@AAXx~S*?_=8chq@TU{`#W=iKrV< zNEe9XI7A~c5Gr=zcL%+g zJZcp}II;_b>b@Wx-37wXz91ai1;TI^LJwoC9W+C;!TAKw3j+Umzrf~(&VoHp@{3|5 z6P^JLfNsnnD2X9Is({fLW0wVh3tfy|72j|-|3UHn=lAd5e?@%Xr}T3}-(c+XjQuwK z{w8CeVeFfXb^R7&U0-Lc_Z~Ry9&8WCa7=86#92KoncGbq57{+y52^uf!aEJ(|3I`C$w+S)(w#c1xoP`=`6z` z4&*nQF26B8Es4Cpbe6G8U07rXi9E{KXCNimzqx<^-`?+G_h@K3MMKjmF<5{)yC9D) zS1mO}k-S+X?Kj^qR5dgmK$+jn}SD7%zwRR?VnfxBx19 zFbKVjojYE+J32f%+`~VsBh`^3SS#PHh#*`lhK0mQ=ma%isp^}X@^yK{(|P`NG@BWi4D_)>LZvOF_co|`llXJ_9SF=m$~ zvZ@?e4-Q2j>{7K_5eOTrj9mo6_N)Pr_Smc!+in(NCsENlu{y@51VfhwE1xRH(2*R5 zKA|vFDaO#qNM-Vk@|$mzr{BP&cxYr~Sp7{NM0pL2mnW_+;^G@P^=MoW)Hci!_^ubC z@H;+~!S6>Nu>PIVe@bh88vm8S%DH0vAI;%^QsMv7;BXNu7g6ZM)Z(nb@DRuFLja?2 zSd~mIY4qHlb?A(x<9sYiBk0oL@UTMAVbGb|76yxy)H|*tsT;$?*l?|ae?|CtO^gUr z)8(awIm3{M8LSwbk`A4j#Q$#K(eR$RXg$V^60JKS>e-=TC-M!WX6@dvX(!sGWp+N^ zX$?DU=2XLqz~>t#in`G?H}p7TpYLMNv4#_EmU(!!B+yg>G>rdU>^VHq&at%2YPi}9RUx(+Tob)*wAPN`i}Oef~$o+P)D8A3nvDA_fUzpynE0eN=H2q zE>C?Mmpaiu5H3%D8<#pRmmWkIpUL6!qe7PNHpo7RIDR+bKOmor;jM~Uap*@dwaWSZ z7sZ4b?=P~sp<|5w8BAs^VxClQk)Ap=a zdDwdOxJ-Lgz=P5BoBw940ejvtn8u8`p+^~GutmPWSl9a)>v}(#)X1FnSnr20A?Fhq zY*%a8uwK%G8N7&SMX@7;VG2%yOSlU$bQ-pd1{y^4mTP*E42NBzjw?cC0MJm6H_BKd zm0_r<$P9bC<;9^Z|b{=_Gew}97U>pfo-{d)A1y^J}+|O z4KGwM3&Su+Ch)F50-1ahY6uE%*s*8FrAXXdFAKjQK;V6Wn_qjLV2ljQI0@48IAgHD z_B_TIS@rQZn%LN|0=|DzKp=clD0lsQQHH~^uZ6Gq0riiH2d!%HvT;8s^5gx3TzmRV zH~Uxj@8AEk`}glZ#n?}Fv6F0W=o!I1?_rFcVD}hq+CIZr7jD&ll5!^X8mdbU6|PCUPT2V zTeqlP_iWYU+1M@HYxs&+z!}iql^7wUInkzYT8Whs$l&K;&J>GLpC%(BW1l;Qa4f^z z`#fWBGRFQp#@Np@#y-JQc3J%5bi&WqgphoTG4>K;?7JCbpJt4GFJlaA9N)(n`zRIxvF{h;^dZK2{xS*ud%Y(nMC4V*dj8RA#%4w2 z-)5}$>FXl!rU?9~c>fY;$QR(A6Ym$q`+XQox|yQMUL5$RQRPMPJ}=&P#ru;0_g&(T zmy!J_V{ePUzY~#PB|9vC{s-;*mq4~BaEWEqsQ-2R@gw;88)|a$J@|76KOSZKJi%ya zAbuQax6FngeG$pNfSz7Jn>-MNMbaAA*UboBelvOFmX4tf2 z(#GWcx?FdCYZEiuXMr)o#MA1FVXMl`9=>1?`sIlG*d|8@B1j z8=d1FctloJ&gZ|=w%bYkQ+oN-eVGcRTE`PKOhpm}+0*40BuG~PdV0D^pbz--4*Zw{ zlWj#u$_Ub~9o3O~RHl3Ms3_b*tON+kk^uDy5-Kgj;oH-0;QEt>tvXfDxZQNrLr9&}p`UAoTC8g0kCjWP4V)6DYz%>szK3XxcgI&@!#qcGcWT z7KY}x>}Z3wm&rhY@XR=91&Z4U1oco31m>Ea9hb#6&k`;(k&qx4WLz>^BKXJ=D*8ZY zBFL`CrPTZwJtrg99b5w>VWa&r#!DCvHAS!!#1}I;Qc*3_YbK%!NLINtXsPhf+?IvQ z`Z_^}`XYiC0TBB3EC`;0%~RNjCaZuN944DqLD?&=xnqZyg3ynB)xR>1-!z++I7zgBNK4{J!Ft&Y6U!20bv8aFKrwmECGescJ7;ARi_&hljNd;Lepz1AeoxB z>&<{PC|SsR(-jeog~_PxX`=f5g~{x@I5w9_daf|3i+M^uai)5r_{92F+!yP5Utqw{ zP>BYH!KSiVX0Yf)PDIL?j%gSIH4q|AY=_WVB&IT`4xCohN~w7nC?dhSRf=1I8dM9R z)T2<1pc#yCC{`k^3*)0C9z3SC#qt9+v_fmrqSj3>HX{`aRtZPT%~nvl?K_G!TFAY_?NG>xQ3y%}r;t`b(FcPPqj@Ve=gCa_8IDS?p9$T=bD20=FpFpu}!N+9YY zjY`&OHyfFn`eY-ixe^_MW>mT9$q{-`%29Y|F3LsnHB}pofif4x#%+}ons;b6oVG$K zVVgqAj%WETO}V1t&Bj)v9EA3|b5|BmSf+5XcU(qb?j8CqUloTTBl4W}^<>;a4I(>? zEu|pQ#>!Sb+Azap#Kiy=DEdtsse_(vnxk3WuG1E3 z+o{2us_a{vk+YuS`Y6f`kWhr<^<*3cM)7w}A4l)Rp}CIpb;2+!k&UXTC~l`xm;$R) zoMV;vv?KPzO#Z&YG^Aw2rPyu-bRCr}4Tjr1#L(RCm_ybfRfQ-HZL_7ILK@_urZjei z0mmu{k4CaiAcQ!qTpSlhc}WNy)PRTcbLz6D=41i>C;`+1_0zSZ$aI~iVn5(cMr7Df&l7pRuecHXxg7^u z1u$|+D3+y$S}2YxSP3+$pQwv$J%zcJv#kN8^7*{jv@APPiGdmsVVTy3LZOy{FTu#( z{&%7ny#F1W8|r2d1Mr6QURs61I&RU)4~Pl?#qu1)Fa|Exg|%D!bmQj;evabj7=Di9 z=LCLw@Y9Q*llVD>ADsAr1nhaEo1_lC<;wnJAhru%LJLoegF>f;7#l4zkq)DBfgN+1yM|ST3VLtA`9Nv+1$|acaQ~V z4vxG7Q{_F@{SNDW^4L2-^gFEgiBtHq3tvayfg`uL6|6^P%M7BH>5(MDML@DF8)b2y*k7aREpYlaSl!vjzO}SOi$5`1krEQ+Y$A# zOi7j_G>%6_wo;O1Og)xsEHV$28RV(Q<-iV|U_-ZPq31=U+1Rqf829(7tWd#J>{=9u zZHsPxlb~fy>)0@0dY+b5s}EPqQkl#E?$~h0ajJQsQr8d7a_k4m$cVn7P(EW-fIt8g z?%A=Eu}}dBbauO~rajOuD7>lcCg>F9%vxMYCEJDuByqO4MdyBQ;_!w@f-@`ftk1G` zu55)dtf0|zqzmc!MgpAOxY;CchIVX~x0^%ec2m3t!O82mxMt$@t7}sW^H*lC(mq9= zs$_dxv_^pQJ76-vS^})&wULp^$cV~%V|ICEX1*vZj=IUL%gB1RS{Wa#RxS-zFI^hE zG_F7_&CD&V%oKr;{+3bt3YE?m^O3a&6`xy}F3gxlbjxphF>ROt^GJ5byD94UPvqu- z_ritXGac}SGe$<4R`UeR0;CqTBVC>J*!0t)=kSI<=HV{ZHPpqV(TP{1x#0F2V?&p2R=U`^9UYTXa%s`ZfQYCjfE2pbq#X>zA* z^FS1xyL25-aXl!FYnxDqWQueN{H(Q%17jq0jKj9KDWfEo!sUigHz9K{tqhLBAUmnfMmK!ej+79A>H_^&n+G6AS~s?>-Bjn)Ob#M9mARo$ z9zi~-SX{Ix+lRhNMQV!~xj3ytP$kiXR@;r85*(Zb8=kZoVzi+~!c&7YZdRFoC%L_?)UJy{N>dGK~R3>-vZK~SpuejLHG za0wm;B$9IY4RrH7EGP4jy5@%7X6*Cb>?x)xA%nCxZ7^(?8TQD1zMH+LFuFEcsZ`3(>v1{#1$cqn z`b$`^$4P6(x;7c>`ZQx*pJa?Y75ruXK6x9O1}4}iT+E~2!VzJi;X!FAH~ejn?&!OV z8Fm0Wpcd^R&|&P{fNY8x1d-YUhYfLM+l+P)S`O{NAKWopE;L!fDz>SR2UCeYFdhQ6 zjo_d@1PONn<=ej6WQ{)1q9hQ|kaQ3s!ywkg92ndc*(n$!#;n6t85tl@W8r> zu>}tVn*0Vl`3?G%=^@MIH{LQ0mZao2tcvoxUrUc2%rd;JeZ&8O3?I|JF&C2IaCjlV z;U__UPiWupnIOZVe#-Az?HgtW8IF0E{GQjoKdXIzjxqK=fuApE;W&RF^ZvN@{S(^v z-_yQ-O2fn7*S^1`eg6aP`)9T9pMwJdQHL*U;n-{|!+${we@FZNiuU~vwePPoMk|hZ zepzeduV^a#uWI%GHAWX+(evwCxxc{}_GQxZn;Lv<_yrx{`7JH|*BK+4!1LQ$`fq6I ze@9FIO|fAZ&+lsKe@{#QPqp;FuciM3Ej=79$ol-Dmj0h<>HoQw{`C`}b2?ulHtSrOi#6fi;CW-DLhqrKZ-EAdFd((6#;8p?~kO4pzt!n ze-z;tWDyjOt6h6Pmk%F9I1XVZRi*SFMEC&0$5L?MrKY!<55J7?pUK0SK=_vtemMo_ zD#HI!KKvTOe>ERIi|~J$hkqU6|2x8GQ}E$^qxWJy{XD|Q5Pl<-{<8?TDE<3%Li!xS zZG?aJD13%gQ@Or?*!Sm4`69y6alKzirT=k+pGWu?Q{g{>@c$|g=kFo>`w;#UDZ=**A5o8ssGmyZ`Vyl4YZ29ziuwnLS`?J_rBu|U?D+fiv1PDZm8H3 zGamWFNOkb9BF$||gUcOM!M{dz5-s^TQMSY}LH~86_yLjP*Ld-`%tRIc8%XejdV*t) z7qsIPT7DCWepn_-RpD#-Dh#Eo@LPHnzQ(K2uUFygdKDARpPhxN_;IhODr`X2?3e!i$L{wY%Ykx21- z1$Fp+B=}=J!SN`xJTu)He}Gi~LZ(X9;amASWIE#y^*Vg3pblU+RR>CNyb;COI)L+3 z9liyX(|oHPs^fK-f8fEpm!H_|Jqk@(*ymwF!vq5di}2w637(E51C7dG#&w*q-(sC+ zupO0bGm1+?gSc^baNBVmKOUr0fG~TXeVqb~)n#MGjOdb*Oc3;6tW@xvSc@eKDP!z5 zuLQksbMrE-CF8uQ++!e@{LpTMgBRfnj4$C~7H|$){5e=e;n0e^q{dS78F{>>wCVXV zEjgoAG)vIxqc3O3DJ7-^qHd(hV@ioIni0x~%nmBrR!2KW*0kM~m-zvCvC5xDv9YX4<%dNdWp7c$|n4O DHRh}A literal 0 HcmV?d00001 diff --git a/MikroNUC/20260816/20260816170001-Config.rsc b/MikroNUC/20260816/20260816170001-Config.rsc new file mode 100644 index 0000000..55c035b --- /dev/null +++ b/MikroNUC/20260816/20260816170001-Config.rsc @@ -0,0 +1,5536 @@ +# 2026-08-16 16:00:01 by RouterOS 7.23.3 +# system id = NmJcEM+8XAP +# +/caps-man channel +add band=2ghz-g/n extension-channel=disabled frequency=2422 name=2G-3 \ + reselect-interval=20m save-selected=yes +add band=5ghz-a/n/ac extension-channel=XXXX frequency=5660 name=5G-5660 \ + save-selected=yes +add band=5ghz-a/n/ac extension-channel=XXXXXXXX frequency=5160,5200,5280 \ + name=5G-5160-5280 reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5180 name=5G-36 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5200 name=5G-40 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5220 name=5G-44 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5240 name=5G-48 \ + reselect-interval=30m save-selected=yes +add band=2ghz-g/n extension-channel=disabled frequency=2442 name=2G-7 \ + reselect-interval=20m save-selected=yes +add band=2ghz-g/n extension-channel=disabled frequency=2462 name=2G-11 \ + reselect-interval=20m save-selected=yes +/interface bridge +add name=Bridge-LAN +/interface ethernet +set [ find default-name=ether1 ] disable-running-check=no +/caps-man security +add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \ + group-key-update=30m name=xs-Sec +add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \ + group-key-update=30m name=WPA2 +/disk +add slot=ram tmpfs-max-size=100000000 type=tmpfs +/interface list +add include=dynamic,static name=LAN +add exclude=LAN name=WAN +add exclude=LAN include=WAN name=Internet +/interface wireless security-profiles +set [ find default=yes ] supplicant-identity=MikroMIC +/iot wiliot servers +set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=P1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +/ip pool +add name=dhcp ranges=10.30.30.150-10.30.30.200 +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=test owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \r\ + \n#:local ScriptName [ :jobname ];\r\ + \n:local expSrc;\r\ + \n:local FileName;\r\ + \n:local FilePath;\r\ + \n:local DirPath \"tmpfs/\";\r\ + \n:global WaitForFile;\r\ + \n:global IfThenElse;\r\ + \n\r\ + \n:foreach Script in=([ /system/script find where name~\"Amster-GlobalConf\ + *\" ]) do={\r\ + \n:local ScriptVal [ /system/script/get \$Script ];\r\ + \n\r\ + \n:local expName [ (\$ScriptVal->\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/729/f42d43ae\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 00:05:03 01.07.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ + \n\r\ + \n\r\ + \n#:local Script AM-GlobalConfig;\r\ + \n\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\ + \n\r\ + \n#/usb1/mikro_bak_rsa.pub\r\ + \n\r\ + \n\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\r\ + \n\ + \n:global MkDir;\ + \n\r\ + \n\ + \n:local FetchFile Manager@id_rsa.pub\ + \n:local localDir \"/\";\r\ + \n\r\ + \n\ + \n\ + \n\$MkDir \$localDir;\ + \n\ + \n\r\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +add dont-require-permissions=yes name=awg2-webui owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + put \"Download image, and save him to usb1/tmp\"\ + \n/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-chr.tar\" dst-p\ + ath=sata1/tmp/awg2-webui.tar\ + \n\ + \n:put \"1. Create veth interface\"\ + \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\ + \n\ + \n:put \"2. Create bridge and add veth\"\ + \n/interface bridge add name=br-awg\ + \n/interface bridge port add bridge=br-awg interface=veth-awg\ + \n\ + \n:put \"3. Assign IP to bridge\"\ + \n/ip address add address=10.9.9.1/24 interface=br-awg\ + \n\ + \n:put \"4. NAT: masquerade container traffic\"\ + \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\ + ade\ + \n\ + \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\ + \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 action=dst-n\ + at to-addresses=10.9.9.2 to-ports=55055 in-interface=ether1\ + \n\ + \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\ + \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 action=dst-\ + nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether1\ + \n\ + \n:put \"Create environment list..\"\ + \n/container envs add list=awgui-env key=WEB_USER value=vados\ + \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\ + \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\ + mboLs2325272931q\ + \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\ + 3\ + \n\ + \n:put \"Load and start container...\"\ + \n/container add file=sata1/tmp/awg2-webui.tar interface=veth-awg hostname\ + =awg2-webui \\\ + \nroot-dir=sata1/awg2-webui layer-dir=sata1/docker/awg2-webu/ envlist=awgu\ + i-env start-on-boot=yes logging=yes shm-size=4M\ + \n\ + \n:put \"Start...\"\ + \n/container start 0\ + \n\ + \n:put \"Verify...\"\ + \n/container print\ + \n\ + \n:put \"Should show: status=running\"\ + \n\ + \n/log print where topics~\"container\"\ + \n\ + \n:put \"Should show: AWG started, nginx running\"\ + \n" +add dont-require-permissions=no name=awg-proxy-go-Client owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:put \"[::::::::::::::: START :::::::::::::::]\"\ + \n:put \"\"\ + \n:put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n:put \"veth and network:\"\ + \n /interface/bridge add name=docker port-cost-mode=short\ + \n /ip/address/add address=192.168.100.1/24 interface=docker\ + \n\ + \n /interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n /interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n:put \"add config-client.json\"\ + \n/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json d\ + st=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n:put \"Add container\"\ + \n/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interface\ + =awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-proxy\ + -client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pro\ + xy-go-client\" mountlists=awgcfg-client\ + \n\ + \n:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n:put \"Add user:\"\ + \n /user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n:put \"Add forwarding port web-ui\"\ + \n /ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n /interface/wireguard/add name=wg-awg-client\ + \n /ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add comment=awg2wg dont-require-permissions=no name=awg2wg-uninstall owner=\ + Manager policy=ftp,read,write,policy source="\r\ + \n :put \"Uninstalling AmneziaWG...\"\r\ + \n :log info \"Uninstalling AmneziaWG...\"\r\ + \n /ip/route/remove [find where comment=awg2wg-tunnel]\r\ + \n :do { /tool/netwatch/remove [find where comment=Monitor-AWG2WG] } on-e\ + rror={}\r\ + \n :do { /ip/route/remove [find where comment=Monitor-AWG2WG] } on-error=\ + {}\r\ + \n /container/stop [find where interface=veth-awg2wg]\r\ + \n :delay 7s\r\ + \n /interface/list/member/remove [find where interface=wg-awg2wg]\r\ + \n /container/remove [find where interface=veth-awg2wg]\r\ + \n /container/envs/remove [find where list=\"awg2wg-env\"]\r\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg2wg\"]\r\ + \n /ip/address/remove [find where address=\"172.20.0.1/30\"]\r\ + \n /interface/veth/remove [find where name=\"veth-awg2wg\"]\r\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg2wg\"]\ + \r\ + \n /ip/address/remove [find where interface=\"wg-awg2wg\"]\r\ + \n /interface/wireguard/remove [find where name=\"wg-awg2wg\"]\r\ + \n :do { /file/remove [find where name~\"awg2wg.+tar\"] } on-error={}\r\ + \n :do { /file/remove [find where name=\"disk1/awg2wg\"] } on-error={}\r\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n /system/script/remove [find where name=awg2wg-uninstall]\r\ + \n" +add dont-require-permissions=no name=amneziawg-mikrotik-c owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\ + \n:global imagesPath \"amneziawg/img/\";\ + \n:local Image \"awg-proxy-amd64-7.20-Docker.tar.gz\";\ + \n\ + \n:global DstDir \"sata1/dst/\";\ + \n\ + \n:local Url=(\$GlobalScriptsUrl . \$ImagesPath . \$Image);\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n" +add comment=Generator dont-require-permissions=no name=awg-VDSina owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# ============================================================\ + \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\ + \n# 2026-06-30 22:08:12\ + \n# ============================================================\ + \n\ + \n# 0. Check prerequisites\ + \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \ + = 0) do={\ + \n :put \"Container package is not installed or disabled. Install it and \ + reboot.\"\ + \n :error \"Usage: /system/device-mode/update container=yes\"\ + \n}\ + \n\ + \n# Auto-detect storage\ + \n:global awgDisk \"disk1\"\ + \n{\ + \n :local usbFree 0\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \ + } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\ + \n } else={\ + \n :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\ + \n :put \"USB found but not mounted. Format as ext4\?\"\ + \n :put \"Press 'y' to confirm:\"\ + \n :local key [/terminal/inkey timeout=30]\ + \n :if (\$key = 121 || \$key = 89) do={\ + \n /disk/format-drive usb1 file-system=ext4 label=usb1\ + \n :delay 3s\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \ + free] } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n } else={ :put \"Format failed, using disk1\" }\ + \n } else={ :put \"Using disk1\" }\ + \n } else={ :put \"No USB, using disk1\" }\ + \n }\ + \n}\ + \n\ + \n# 1. Uninstall script\ + \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\ + \n :put \"Uninstallimg AmneziaWG...\"\ + \n :log info \"Uninstallimg AmneziaWG...\"\ + \n :local prevDNS \"\"\ + \n :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\ + env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\ + \n :local storageDisk \"disk1\"\ + \n :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\ + ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\ + \n :local prevTmpdir \"\"\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\ + Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\ + \n }\ + \n /ip/route/remove [find where comment=awg-VDSina-tunnel]\ + \n /ip/route/remove [find where comment=awg-VDSina-dns]\ + \n /container/stop [find where interface=veth-awg-VDSina]\ + \n :delay 7s\ + \n /container/remove [find where interface=veth-awg-VDSina]\ + \n /container/envs/remove [find where list=\"awg-VDSina-env\"]\ + \n :if (\$prevDNS != \"\") do={\ + \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\ + \n :put (\"DNS restored to: \$prevDNS\")\ + \n }\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n /container/config set tmpdir=\$prevTmpdir\ + \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\ + \n }\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\ + \n /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\ + \n /ip/address/remove [find where address=\"172.19.75.209/30\"]\ + \n /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\ + a\"]\ + \n /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\ + \n /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\ + \n :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\ + \_} on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\ + out.rsc\")] } on-error={}\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\ + n-error={}\ + \n }\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\ + \n /system/script/remove [find where name=awg-VDSina-uninstall]\ + \n}\ + \n\ + \n# 2. Network infrastructure\ + \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\ + y=172.19.75.209\ + \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\ + 5.208/30\ + \n\ + \n# 3. WireGuard interface (MikroTik derives the public key automatically)\ + \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"4CHyNhbOs923/E\ + yNDguMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=14710 disabled=yes\ + \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\ + Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcY\ + QnD9N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=172.19.75.210 endpoint-po\ + rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\ + \n/ip/address/add address=10.9.0.3/32 interface=wg-awg-VDSina\ + \n\ + \n# 4. Container environment variables\ + \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":51820\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\ + 77.79:55055\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\ + 438637\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\ + 809250\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\ + 09079495\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\ + 12329741\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\ + l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\ + face/wireguard/get [find name=wg-awg-VDSina] public-key]\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"\"\ + \n\ + \n# 5. DNS\ + \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\ + n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\ + \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\ + g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\ + \n# NOTE: replaces existing DNS configuration\ + \n/ip/dns/set servers=109.107.177.79\ + \n/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina distan\ + ce=1 comment=awg-VDSina-dns\ + \n\ + \n# 6. Download, create and start container\ + \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\ + \n:if (\$awgDisk != \"disk1\") do={\ + \n :local tmpPath (\$awgDisk . \"/pull\")\ + \n /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\ + ntainer/config/get tmpdir]\ + \n /container/config set tmpdir=\$tmpPath memory-high=200M\ + \n}\ + \n{\ + \n :local arch [/system/resource/get architecture-name]\ + \n :local ver [/system/resource/get version]\ + \n :local dotPos [:find \$ver \".\"]\ + \n :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\ + \n :local endPos [:find \$rest \".\"]\ + \n :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \ + \"] }\ + \n :local minor [:tonum [:pick \$rest 0 \$endPos]]\ + \n :local suffix \"\"\ + \n :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\ + \n :local file \"\"\ + \n :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\ + x . \".tar.gz\") }\ + \n :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \ + \".tar.gz\") }\ + \n :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \ + . \".tar.gz\") }\ + \n :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\ + \n :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\ + atest/download/\$file\"\ + \n :local filePath \$file\ + \n :if (\$awgDisk != \"disk1\") do={\ + \n :set filePath (\$awgDisk . \"/pull/\" . \$file)\ + \n :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\ + \n }\ + \n :if ([:len [/file/find where name=\$filePath]] = 0) do={\ + \n :local freeStorage 0\ + \n :if (\$awgDisk = \"disk1\") do={\ + \n :set freeStorage [/system/resource/get free-hdd-space]\ + \n } else={\ + \n :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\ + k] free] } on-error={}\ + \n }\ + \n :if (\$freeStorage < 262144) do={\ + \n :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\ + B free). Need at least 256KB.\")\ + \n :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\ + cient-disk-space\"\ + \n :error \"Insufficient disk space\"\ + \n }\ + \n :put (\"Fetching: \$url -> \" . \$filePath)\ + \n /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\ + \n } else={\ + \n :put (\"File already exists: \" . \$filePath)\ + \n }\ + \n :local rootDir (\$awgDisk . \"/awg-VDSina\")\ + \n /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\ + DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\ + yes comment=awg-VDSina\ + \n :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\ + =veth-awg-VDSina] shm-size=4M\"] }\ + \n /file/remove \$filePath\ + \n :local freeMem [/system/resource/get free-memory]\ + \n :if (\$freeMem < 16777216) do={\ + \n :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\ + . 16MB+ recommended.\")\ + \n }\ + \n /container/start [find where interface=veth-awg-VDSina]\ + \n :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\ + }\ + \n :put \"Waiting for container to start...\"\ + \n :delay 5s\ + \n /interface/wireguard/enable wg-awg-VDSina\ + \n :put \"WireGuard interface enabled\"\ + \n :put \"Installation complete!\"\ + \n :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\ + \"\ + \n /ping 109.107.177.79 count=10 interval=1\ + \n :put \"\"\ + \n :put \"======= NEXT STEPS =======\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \ + comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\ + \_comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\ + address=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run awg-VDSina-uninstall\"\ + \n :put \"=========================\"\ + \n}\ + \n\ + \n# 7. Verification\ + \n# /container/print\ + \n# /interface/wireguard/print\ + \n# /interface/wireguard/peers/print\ + \n" +add comment="wg2awg GH repo in client mode" dont-require-permissions=no name=\ + "wg2awg client" owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:local Arch \"amd64\";\ + \n:local Version \"v0.0.1\";\ + \n:local Name wg2awg;\ + \n:local WorkDisk \"sata1\";\ + \n:local WorkDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Bridge (\"Bridge-\" . \$Name);\ + \n:local VetchMTU \"1280\";\ + \n:local Vetch (\"vetch-\" . \$Name);\ + \n:local VetchNet \"10.9.0.0\";\ + \n:local VetchGate \"10.9.0.1\";\ + \n:local VetchAddr \"10.9.0.3/32\";\ + \n:local Env (\$Name . \"-env\");\ + \n:local ConfDir (\"/etc/\" . \$Name . \"/\");\ + \n:local ConfFile (\$Name . \".conf\");\ + \n:local Mounts (\$WorkDisk . \"/mounts/\" . \$Name . \"/\");\ + \n:local RootDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Registry \"https://registry-1.docker.io\";\ + \n:local FetchFile (\$Name . \"-\" . \$Arch . \"-oci.tar\");\ + \n:local FetchUrl (\"https://github.com/vados-dev/wg2awg/releases/download\ + /\" . \$Version . \"/\" . \$FetchFile);\ + \n:local FetchDir (\$WorkDisk . \"/dst/\");\ + \n:local AwgListen \":44044\";\ + \n:local AwgRemote \"109.107.177.79\";\ + \n\ + \n#:put \"\"\ + \n#put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n\ + \n:log warning \"[::::::::::::::: START :::::::::::::::]\"\ + \n:log warning \"Add veth and nat...\";\ + \n\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n\ + \n:do {\ + \n:log warning (\"Remove interface: name=\" . \$Vetch . \", address=\" . \ + \$VetchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/remove [find name=\$Vetch];\ + \n:log warning (\"Add interface: name=\" . \$Vetch . \", address=\" . \$Ve\ + tchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n:log warning (\"Remove ip address: address=\" . \$VetchGate . \", interf\ + ace=\" . \$Vetch);\ + \n/ip/address/remove [find address=\$VetchGate interface=\$Vetch];\ + \n:log warning (\"Add ip address: address=\" . \$VetchGate . \", interface\ + =\" . \$Vetch);\ + \n/ip/address/add address=\$VetchGate interface=\$Vetch;\ + \n:log warning (\"Remove firewall nat rule: chain=srcnat action=masquerade\ + \_src-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/remove [find chain=srcnat action=masquerade src-address\ + =(\$VetchNet . \"/24\")];\ + \n:log warning (\"Add firewall nat rule: chain=srcnat action=masquerade sr\ + c-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=(\$VethN\ + et . \"/24\");\ + \n} on-error={}\ + \n\ + \n#:do {\ + \n#/file add type=directory name=\$Mounts\ + \n#} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove WorkDir: \" . \$WorkDir . \"...\");\ + \n/file remove [find name=\$WorkDir];\ + \n:log warning (\"Add WorkDir: \" . \$WorkDir . \"...\");\ + \n/file add type=directory name=\$WorkDir;\ + \n:log warning (\"Remove config file \" . \$Mounts . \$ConfFile . \"...\")\ + ;\ + \n/file remove [find name=(\$Mounts . \$ConfFile)];\ + \n:log warning (\"Add config file \" . \$Mounts . \$ConfFile . \"...\");\ + \n/file add type=file name=(\$Mounts . \$ConfFile) contents=\"[Interface]\ + \nPrivateKey = 4CHyNhbOs923/EyNDguMXJXdghL2I3UyzXPwrANVgHs=\ + \nAddress = \$VetchAddr\ + \nMTU = \$VetchMTU\ + \nDNS = 109.107.177.79\ + \nPreUp = ip route add 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nPostDown = ip route del 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nJc = 9\ + \nJmin = 105\ + \nJmax = 920\ + \nS1 = 90\ + \nS2 = 136\ + \nS3 = 45\ + \nS4 = 27\ + \nH1 = 472437748-472438637\ + \nH2 = 707808381-707809250\ + \nH3 = 1609078552-1609079495\ + \nH4 = 1012329484-1012329741\ + \nI1 = <\ + r 4>\ + \nI2 = \ + \nI3 = \ + \nI4 = \ + \nI5 = \ + \n\ + \n[Peer]\ + \nPublicKey = o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\ + \nAllowedIPs = 0.0.0.0/0\ + \nEndpoint = \$AwgRemote\ + \nPersistentKeepalive = 10\ + \nPresharedKey = RNvF7T1cg5tyXcYQnD9N5BEp6e20vVJQTv0GMjyvHU0=\";\ + \n} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove mounts list \$Env...\");\ + \n/container/mounts/remove [find list=\$Env];\ + \n:log warning (\"Add mounts list \$Env...\");\ + \n/container/mounts/add src=(\$Mounts . \$ConfFile) dst=(\$ConfDir . \$Con\ + fFile) list=\$Env mode=ro;\ + \n:log warning (\"Remove Environment keys.\");\ + \n/container/envs/remove [find list=\$Env];\ + \n:log warning (\"Add Environment keys.\");\ + \n/container/envs/add list=\$Env key=AWG_CONFIG value=(\$ConfDir . \$ConfF\ + ile);\ + \n/container/envs/add list=\$Env key=AWG_LISTEN value=\$AwgListen\ + \n/container/envs/add list=\$Env key=AWG_REMOTE value=\$AwgRemote\ + \n/container/envs/add list=\$Env key=AWG_MODE value=client\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$WorkDisk . \"/tmp\");\ + \n/file remove [find name=(\$WorkDisk . \"/tmp\")];\ + \n:log warning (\"Add \" . \$WorkDisk . \"/tmp\");\ + \n/file add type=directory name=(\$WorkDisk . \"/tmp\");\ + \n:log warning (\"Container add tmpdir \" . \$WorkDisk . \"/tmp\");\ + \n/container config set tmpdir=(\$WorkDisk . \"/tmp\");\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$FetchDir . \$FetchFile . \".\");\ + \n/file remove [find name=(\$FetchDir . \$FetchFile)];\ + \n:log warning (\"Download image from \" . \$FetchUrl . \" and save him to\ + \_\" . \$FetchDir . \$FetchFile . \".\");\ + \n/tool/fetch url=\$FetchUrl dst-path=(\$FetchDir . \$FetchFile);\ + \n} on-error={}\ + \n\ + \n#:log warning (\"Container set registry \" . \$Registry . \" tmpdir= \" \ + . \$WorkDisk . \"/tmp\");\ + \n#/container/config/set registry-url=\$Registry tmpdir=(\$WorkDisk . \"/t\ + mp\");\ + \n\ + \n#:do {\ + \n:log warning (\"Container add width: file=\" . \$FetchDir . \$FetchFile \ + . \", interface=\" . \$Vetch . \", hostname=\" . \$Name . \", mountlists=\ + \" . \$Env . \", envlist=\" . \$Env . \", root-dir=\" . \$RootDir . \", wo\ + rkdir=\" . \$WorkDir . \", name=\" . \$Name . \", logging=yes, start-on-bo\ + ot=yes\");\ + \n/container/add file=(\$FetchDir . \$FetchFile) interface=\$Vetch hostnam\ + e=\$Name mountlists=\$Env envlist=\$Env root-dir=\$RootDir workdir=\$WorkD\ + ir name=\$Name logging=yes start-on-boot=yes;\ + \n#} on-error={}\ + \n\ + \n\ + \n#/container/start [find where interface=\$Vetch];\ + \n\ + \n#/interface/bridge add name=\$Bridge port-cost-mode=short;\ + \n#/ip/address/add address=192.168.100.1/24 interface=\$Bridge;\ + \n\ + \n#/interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n#/interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n#:put \"add config-client.json\"\ + \n#/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n#/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json \ + dst=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n#:put \"Add container\"\ + \n#/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interfac\ + e=awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-prox\ + y-client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pr\ + oxy-go-client\" mountlists=awgcfg-client\ + \n\ + \n#:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n#:put \"Add user:\"\ + \n#/user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n#:put \"Add forwarding port web-ui\"\ + \n#/ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n#:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n#/interface/wireguard/add name=wg-awg-client\ + \n#/ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add dont-require-permissions=no name=tmp_print owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDguMX\ + JXdghL2I3UyzXPwrANVgHs=\" listen-port=21641 \ + \n :put \"======= AWG PROXY SETUP =======\"\ + \n :put \"\"\ + \n :put \"Run awg-proxy on your external device (10.30.30.33).\"\ + \n :put \"\"\ + \n :put \"1. Download the binary for your platform:\"\ + \n :put \" Linux arm64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm64\"\ + \n :put \" Linux arm: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm\"\ + \n :put \" Linux amd64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-amd64\"\ + \n :put \"\"\ + \n :put \"2. Set environment variables and run:\"\ + \n :put \"export AWG_LISTEN=\\\":51820\\\"\"\ + \n :put \"export AWG_REMOTE=\\\"109.107.177.79:55055\\\"\"\ + \n :put \"export AWG_JC=\\\"9\\\"\"\ + \n :put \"export AWG_JMIN=\\\"105\\\"\"\ + \n :put \"export AWG_JMAX=\\\"920\\\"\"\ + \n :put \"export AWG_S1=\\\"90\\\"\"\ + \n :put \"export AWG_S2=\\\"136\\\"\"\ + \n :put \"export AWG_H1=\\\"472437748-472438637\\\"\"\ + \n :put \"export AWG_H2=\\\"707808381-707809250\\\"\"\ + \n :put \"export AWG_H3=\\\"1609078552-1609079495\\\"\"\ + \n :put \"export AWG_H4=\\\"1012329484-1012329741\\\"\"\ + \n :put \"export AWG_SERVER_PUB=\\\"o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+\ + v0b9jU=\\\"\"\ + \n :put (\"export AWG_CLIENT_PUB=\\\"\" . [/interface/wireguard/get [find\ + \_name=wg-VDSina] public-key] . \"\\\"\")\ + \n :put \"export AWG_S3=\\\"45\\\"\"\ + \n :put \"export AWG_S4=\\\"27\\\"\"\ + \n :put \"export AWG_I1=\\\"\\\"\"\ + \n :put \"export AWG_I2=\\\"\\\"\"\ + \n :put \"export AWG_I3=\\\"\\\"\"\ + \n :put \"export AWG_I4=\\\"\\\"\"\ + \n :put \"export AWG_I5=\\\"\\\"\"\ + \n :put \"\"\ + \n :put \"chmod +x awg-proxy-linux-* && ./awg-proxy-linux-\"\ + \n :put \"\"\ + \n :put \"3. (Optional) Create a systemd service for auto-start.\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-VDSina comm\ + ent=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-VDSina com\ + ment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=VDSina-tunnel dst-addr\ + ess=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run VDSina-uninstall\"\ + \n :put \"================================\"" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +add name=manager policy="local,ssh,ftp,read,write,policy,api,rest-api,!telnet,\ + !reboot,!test,!winbox,!password,!web,!sniff,!sensitive,!romon" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=*3 registry-mirrors="https://reg.vados.\ + ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/caps-man datapath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + xs-DataPath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + DataPath +/caps-man manager +set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \ + enabled=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=Bridge-LAN +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set crl-store=system +/container config +set layer-dir=/sata1/docker/layers memory-high=200.0MiB memory-max=4096.0MiB \ + registry-url=https://registry-1.docker.io tmpdir=/sata1/tmp username=\ + amsternl +/container envs +add key=AWG_CONFIG list=wg2awg-env value=/etc/wg2awg/wg2awg.conf +add key=AWG_LISTEN list=wg2awg-env value=:44044 +add key=AWG_MODE list=wg2awg-env value=client +add key=AWG_REMOTE list=wg2awg-env value=109.107.177.79 +/container mounts +add dst=/etc/wg2awg/wg2awg.conf list=wg2awg-env mode=ro src=\ + /sata1/mounts/wg2awg/wg2awg.conf +/ip smb +set enabled=no +/interface bridge port +add bridge=Bridge-LAN interface=LAN +/ip neighbor discovery-settings +set lldp-mac-phy-config=yes lldp-max-frame-size=yes lldp-med-net-policy-vlan=\ + 1 lldp-vlan-info=yes +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=ether1 list=WAN +add interface=Bridge-LAN list=LAN +/interface wifi cap +set discovery-interfaces=*DF +/interface wifi capsman +set ca-certificate=WiFi-CAPsMAN-CA-7DB23C23C976 certificate=\ + WiFi-CAPsMAN-7DB23C23C976 enabled=yes interfaces=Bridge-LAN package-path=\ + /tmpfs/capsman-packages require-peer-certificate=no upgrade-policy=none +/ip address +add address=10.30.30.10/24 interface=Bridge-LAN network=10.30.30.0 +/ip dhcp-client +add disabled=yes interface=ether1 name=client1 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=*3 lease-script=\ + lease-script lease-time=10m name=nucDHCP server-address=10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \ + verify-doh-cert=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set reverse-proxy disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \ + webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=*3 type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/special-login +add port=serial0 +/system clock +set time-zone-name=Europe/Amsterdam +/system gps +set set-system-time=yes +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system package update +set check-certificate=yes-without-crl ip-version=ipv4 +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260816/20260816170001-Diff-Config.rsc b/MikroNUC/history/20260816/20260816170001-Diff-Config.rsc new file mode 100644 index 0000000..3e9c5fc --- /dev/null +++ b/MikroNUC/history/20260816/20260816170001-Diff-Config.rsc @@ -0,0 +1,3 @@ +5489,5490d5488 +< /system gps +< set set-system-time=yes -- 2.52.0