From 0bb3114869dca750d772639464524e879e347426 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Sun, 28 Jun 2026 04:20:03 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Jun 28 04:20:03. --- .../20260628/20260628042001-Binary.backup | Bin 0 -> 370136 bytes MikroNUC/20260628/20260628042001-Config.rsc | 4922 +++++++++++++++++ .../20260628/20260628042001-Diff-Config.rsc | 32 + 3 files changed, 4954 insertions(+) create mode 100644 MikroNUC/20260628/20260628042001-Binary.backup create mode 100644 MikroNUC/20260628/20260628042001-Config.rsc create mode 100644 MikroNUC/history/20260628/20260628042001-Diff-Config.rsc diff --git a/MikroNUC/20260628/20260628042001-Binary.backup b/MikroNUC/20260628/20260628042001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..363a0df0188ff4ab13ea97772310b7d8c4b320a9 GIT binary patch literal 370136 zcmeFa2Ut_f);~Nu36M~viv=+>0X4AG6BVT+N|Rqn^a4iRZDvi=_n3{5CdcUJOMQ63cX*JR#}fM-k-deS5#Ek zlIduKkUxszP!U>&A#)VPp&>*^2vIPEFf&w+nWJ)qp>hT?LFM#{ii!#bDtARTsN9v7 zCQ+r^5-gO{p->aZW^ZVsR+Fh$r6>DkN|Q7EWXfbqvaK!1is9Y@MRBZ9Ic5)ZPzTls zmHRkVdkEE-$rVaTrdnS;Z9%q9uEsDw;kK?v<2(;ZC_N<&ec6og>}e;C3Tkrae6EG-enKrP{7iZEA-T0=*ePe2q0 z#3e@<9eVZ&6)`X;8e(8|X^4U9(GbI=J`K^EV+he`h;3@9<}tN0`K?-I6sQcNAdIeY zqajO#(Z5zyR8&@Js?et>v}_xMx!TDDa*3EPZKLRJWdLpgdwMc79wVxUiO`3x6d;0xM#%>)_R zSk*kDwZ=BuLBBSnAqMp|NWuk#@Q#WY6r%AjGrPO=96~hSklcz@Ntz0cw}i&~6=2Z# zYQi=T(yHXi3RYxbG#z2y1FY;Su%vO5u%sk2=zsX z{)mcD4nlOkB`MqfK$Z)o3_^&QfP>-55c11Vgc$k55Mr1pQROhQLC6(4)79R?J0dzE zG%hSKIMk>z zvtlKmE5H?8mQ>DDuy{(Iq}DOZuXW7w|CeKSXw{e<`bV`1dkGpJZkVv>yD@8Ca zB-zQVC{?Of6P+m|Tkw<$iq{%NaXc%^87|Cm>q3` z&{Ha+e-RPm*R^?cpe8*fElwko#e?Wk(>x_VotwKvDw9re14w+p3BlC=_;i}rjRL< z!PbMZ14{=Vu!N1tbSUxMU|lH&>rV6?Y1s_Qg|P08Q4|L#jfxR+03cvci9dshm#4@w z{A6mCB3<88lc85>(sck$-d0ppgp>8XtEi|5B-8H+(`ESVLkNYFd_a3JR89vvsKB3s zkgFZuSE=;y4vvfnjZWwpk{A){7ydEj@&K$Vrn*y4S0c4aZ3=_*U1 z8%t^VT>-!+6krK_Sa^81jfqc)4vY$|Mw+70>C+`?3h0|;ttKE#Tdq!$4z0JkuNTxnW`M9!~`h5|HYB#ljV8k20T zO0QtoMnnao@(Q9NMzva$nQFDbKtOO@$r%j@uE_{9OLv=9jmA_ek)>v40Blstc~8Aom7J{5>fk#}9V3W_JK$mf9~j_7wI-P*kr5-b70Jy6@(wcvzyW-q*NkcC zHDey=wYg-TyA*g%U}OZ~%^V@90s|0hhY-k$FyLmu0v#bb^o$kEn>yt5vWCCdf&mA- zfE?fgvkN&w$`vjYxIpg%6sU`kE5*v30R|ncI#sPnt{f4jX^J$BHmB%6!Vy-JBkY$r zqRCad)c*`Wl$!idevKc6EJgF5=`m_eeyG31kEvFXrqL_r*6cAvjv-`+2u<*Bjv-o2 zj%c-TR3}R!*XRO>tFJcmhY@9>NRz14Foj^&XfxFcU2WRUsOeyy7}GFMjA^5GqaZ+` z7(#^@G1p+8&`GdOGY);weXdZHE1?mq(?I#P(olX*1M|368tTt!fcNidC@?K)RW!y0 zwIm}QR1T;PIjI)lE+=&?bfq>N5qEeNdZ_QlNB`g}%~S8CSqY7POLVqkeS-5g||v@ZYcy!jJ-~GO`5BbcHH8MXJ#TmWpeLkP7;h;U}a zB81^!FxUt&T=)plsR&U7r1}*i#4rELSVplazD!mvrwqpCfNtd@?bmTp@u?OiSHRW0pNE$v<{ zU5E4<^~qFZD)c!S3SD1vCMS>%B2XUP$u!I?V;U4hFY-CyzHVgtb45jkluUoAsHl*W zY4Fs@$n>|0iV8KE2B2arv)Bru1T2a(k_t+44+WuNRD{M+5h|h@)R6}jVdJR?n?yxu zJcbx16EH-7VuH{+3^CAq3^6z#AoUSL^wVYpkY-??;K^sWe8CXI{3~X__20;QIffYd z6>#ZHK@3g_#W0L^Q4oFJFbwUcAbO!aLVGC&GFK|1gPh%{hQGU04SxryHmwCho>W7= zCXkPYkQdw$qIgpcoPtTB3Yp=^mm!)Vm>6*++`F8u;*DgcWhn1P3)=1<=?I8a?a z5|(SS)2qu^_IJp*IvyipcKvQ7qhNRa7oMVQVfGMQFpG+Y< z7KHl#T_oN90C`HtC>!rRY}x%-Y-?p{-x?E|8n(gaKmdQ z@+`R@5vMZx&w7x;f_o1X#WA`DjV^U7MEErbUr8ql;a+D@K_Hb5b_hZk+-pSOfbg){ z!IMfi8!Y1)hhZ(R&Co$F8T^BW4@AkJ68M0F$_g1aZ~!%>`j;lavO$(CwI*3r=>i0o z6@1{%B3*z)JhTQAL{JCz&VZNBBumf6iNKvsmDbbfOEWt3x{w9Jy$g!sfX@Op>p*w` z;%*Q(Bt{1~hz#3t5CbH}phBR5@c;BBJ&lM#I21uzuHd$Cr7Kn1G*HFh&&bp%v_|Ld zSh7|Sjxh~+#*@#%=V1(pw4p$rD2@$6%M5`=XM~{9RRb3IA!19=7Ze|a=zF{vsA;84 z!1ZYeCAuQScFkTtG0dm<>+u`;-gVuY<|TIJ}ewHz!k=~iA0{JO0Sh0;F<8R*2c||cv>Yl5TmKiO+t?m+Z>82R zzfiyF`1VUanLQrlJ@8iJX=U}*%P!wHaI?yM_zCw$?M&P2cJAv^9Gp#XL-^Il|AK5F zz(}KwPh~vuZG80u0fr z80x>pW>~|4-);*#M|OK6NB+vs6ITuOe!HcmYT~<;#84Y>6|!xv3>c~pbhOJ|8XrEy zCrPyu7-FQs)`y-_Nh-LAVEFk-BogDmH%3X}4gpIOW9)z!l*EuH+@atxx2ad(-NFCL z%}v+)cHlC;9(!z!5HhZ&Gqf6|N=+yk_}n6gFx+pUC{A4>8UZs0cDU8AocZOLCppbv z;Lt(MKrE6_(N${3Fu@Fp#-7{~R29Sn%}A+7PE2sP!qi}Zx0O`);9aG7z*nLzgt8`d zw<}Chm&#s?iU_uaCw1Ur1s8}6z_fA&mzpcc!xaQm>GdKy2$Tgx;N&b_nv?|+Hmcg% z^pr8WKi?V|>QW@yO7$H~N*3v1RRhP%6A%cZMDbXq%EXjC&%r@&YkvF3=1Fk)}iP~+yrJ{p~$ zzHgsiB(;#dLu-s_(6`1k*eGKfbgwZDy4RQn8F9#RAR1&$ufZS>Z0$f`0f=oKU@eFN z3}^$wGFl}W?Pp{rwUC)ql9_M}lKi1AkaP6$TWbJelR`}BElkM zcBIk+KT({q2+gA+8VdGLj5kFw{t@wU;pQkf+CNUC(K9=T4k4gLb3^Mf*uON`fUyX~ z1EDfBbZd$kLi9Yhq_MD5!~pnUV`ZT;La=ADmnV#K0L>JLSW$<<42K{KLiA%4goeXI zVoxzt%IX|y4R*%@A^bXq7hsq10<70ODg~oZY|$c0>Vg;QTxKb4U=PKTiTSv>DZS~i zwkQ2*R4VSvw!j&t)I^%8JtZ-oZG~IF7jt_Ww2Ezm*MYB8d!ia<=TO|m$%@0r#W)uy zK3$xwc<`0O;qt|NahHF&ye!P2m^u@!SF06a+%KVbIkGtZ4FiTTb-{V>d z(_bWOZt^Z#*L%ioPRp5=_K^D23$oWzn=kSGGHjWEq5($qhVRP6L z4o5Chh=n+=Ii=zML-*2u32ru60O{f-3qV znNY^TcG6t;eTX73}N#~*5kTbVMN4r@E?gB6CEm>^tIQ_ni$ z_69v`X{-*4z!D9=1oA1TLX5uaeRqRwrQBz2unsEV}%{FLeP|aL+wXgpT778%8 z>J7(C5VZiaMtA{cPAR}Jbf@KQTkVZyi_R_VxFUAJIE(C}BMTOn*`1uy6=N`uV-uG~ z<6GlD1n*a&jMxLK!ak&h`xZGuuPG5z9|H6S-6Q za^anZ4fjpm;D06&Zw#i%omLO8n_qi|n&XcO(mys!xT3ASo%!eMA+uuQ*1f&ChW0Ke zhrZCG-q-fchU{T&KYytF?cTwWr(t%h4;LPs#_Ku8yw$rSBQB$o=hl`NjU<(0_Th5e1%BN<4JjP z5l<-=2slzXM0TI>u2LdJGBCb?{^95p@$KeU2 zYzbS)7f57czF5qb33(DgNk6mK83?)lVCDfz)qn&fq?%#zw?e9L&M!c!-qKzGsVc15 zy6TXM3Xm$e4gsm?5`^~rh^pxG3`^B&z{<~vS_}#%oRbh49~U1O-!_oL7jSS69vsMK zv1>tE$7y&0?J!a1OBuX5(CP4QxPK zIF}M7Yy+ZeYLtyp`-XFv36b&4xcES(K|oB95HmQC{g(>)_y-$l%#xil z&GVwTqyuSQ{rlM^jePa?(}jn($CXT8`MOu2W5!iG^x4aNb4O9v0UJ6@>@&Ge@4!i2 z`3*n!|Ge|SE)Tps>Basx1E$_}c;^sxY^lxbx=&WRy=1%DN>oKncJ#eGwej5n%9WWR zlXZtzRlMkKKC*N0?Nu9ESifoe^ZAGMYbs05-nDf*MotP3%3W}H)_@14Q3-2Zt0*s_)CiN~dJL75Xi&iLG;$A)#1`;8lK&tpt`>y4-2 z9>(uDHmqKXUZ2sz&rc)MWz<*<;Q^JoD8qPUE|~<@O1c^uznfODUJ2*GEW(4J>5XYE zaWO8O$DhX?#x@qCRdau-3^nc#WiV+1oQGSOGI|Ybiw*mxreL_4sY&u6OAN#5rlydf zRHZ1D!`Oag)yy~;S|JykU|SO0C#=O+E*SFS#x__kw~>8z0#y95t^9u=9?bM@W> zn@yO$ozGOXdpED?rFD~6AMtJ1^5W9>nnIticpHx)JNIqvKhdoD+Tp2L+~+7UZbRoe z_qLyYbMv8f`Sp+cx7%n3F=#zcO`YS*$sBuXMyInK*#m{xpbg42p9brdjI=Z9MQ^u% z_QMaMO3@|XDxQq9ULzEQ7#QR&fBFOsR>XkA?EuCI8~=H|76cTeATp5Sif(R8wBQzdWOrlpX12gq08m&s7!({y$W|z-uM+BCf9_3ZX>~z5FYVTTO zOW+2r1+X^{*RTk#SO6+m)wp6+a>WYgeCHQE0)Ej0cmZX#0j*=`I~0Hq8e9_`lOZO$ zy%{MrwmohOxY*3zyh?cN26#PqXl`#?O@__EY3j>n<9-Gp?ft8gBz&b}T#S>>Qt*`u z*&Ht0h~WPjT>h2!Wp^Jb{nh8rybleJ)LZx=KcdrPx54&H4lskUmP1}W7#cCx>&g2e z4Ws96x|%WV5C>at(%LM#?Cs|mzs|VZ!H>eF)|K5W0i7W%bxzRVc5;jG<;W$=+LDye}~c zOlR($bjA9{cY~CGs?)D_&pH2TYUgCC0fWZ0RhpSSupvt3!V&MW`Zqq$uk3+Jx9 zcT>G_sMBo!%N{W~fE`9O!SlqYjfRG6hWU3DuGvHFcUlkiG)w^PTo^E}|xqP70wpBgem)6}7 z%&?4lzch8z^dX9){R;2g3E9={!xQIsM5NK_5wQ=Hh&0M)!B15QsQP=F|DDR{_cZ@K z&Hrc9yb7oB_-r07<#KpJg;Xq)iDY~!Pl?NgQa%?Kvz0<{aN#1cLZIMF1Y8A2$P>%u zT!~B~W{X7%xrD%JwQ1MNs4@j7;>N#hrU7&PXz$Zu*Lf8*NP|c;i5*C9Y2O+F=-9}H zD8@fAUDZ#a*Dwe}AQw?|vDuP`l%gmq#3ize~lUZ>I;C?MUT9{t*xgX%zETCWufx=?KQ6hyB?jEG+38$Z&-t~?7$s9Hf2q5x+P91ZhJ1vYxWG5>5?PQ#AjDtojb$Ai^BI= zA29jhr$@6A3+snn*vfl1@T7RgWznk+A7YvV_yTQV^b>*xF@mq(llxDV^)D%(-;?|I z;hnAgg786w)nHj-ywMp( zw>Pg6B-?=qY|_l^Evm_r?SeZS5S(MJVrBc{&EfA)xs*YA!&rf)ri(DN$SaN3tGm62I zGp?N+G55It@@MZ)?Y;Ku-1-ash2FN!!mo%A7PqLssppcC0kap%g0^J6Uf#0V_>Xrq zr=Qhj7BO1id89v5Z`1fvsr+i*Lep1;^?Db%wJI*Re>vQt|NDE5$ClpfaL_h6jNakc zFo%RT#oY3N>RAiASh?OOmor3`IAXum-iZl#efw4C1_+lv?cPGo?{+otqTQ9{5f(Qu z<&R`cl#bo3JmpzYo@va5uA~!zo zT5;pPZk2mW7TV2E)H5P3MRaPAH$m{A!-P6-nhbD`awh^{Y@|PTOX@nJm?hU8{8mr(@W3r&Yx*66HA+fwTm6J;l{4MTfZhd-agWC zh>NxC!ei-<3q2EkpL9FuO{aN^x7BI3{B`71XR|g|aqphL@GG#c!m3r!G(Kl{mle(0 zol3~ReQD;N*{?THmB)U7ra$-Fcv3rKhJeV52W3+3`g0YFx@o!X)mx>GT z?q6Z??ZvXk?Gu}tGSd?K`qVG$iFa%7VVhXtF(bW4(`IEBQFHS?V4_J5lY`9|UwSPs zb6#mTdftp4OQ-ejoHnWr{mbDqp=;|o%8Tr*b>6-Q?s!Ch?ey&B+t6~ijZgi?p1m9@ zG1)s+vn)$HZq#VO+TB(rC;NKb8|(X z>$kV7N4K);uDDXt(QZp{YQ_B3uY=CtKepYfw_M3i6W_gUcRHOcvuvaDh=z8>)rzf`QdIPgr*{IFwYv-T&mww*a=J?PHn!M$#o7*WL-c6mcnSW(p^19*e zmV3`}A6wDQEA{rem^Wr+$hWlf@MCd-lb^f|zgQ*@Ow1kAnKJphboL+H%er{$hb*4C zwdjzg+0Az&1bWT|@4f5RS=^cxxzG8+*So6C;bDXP78I;JCkx5gKc<4k-LZOH|IHbN zYg*So72tj8>*1oE-KV>~i+j-NK;uGoa9LraiwDQH3hv!#X}uc*{Oi7wemYvT>>J@I zJzG)fCb7f*F&QZ!m5(%5D;IL&} zHisjU$YfGn#Ab^HJg!v86U#(mkyyZ!!e$3KPaxyUc`~V-LoDZN!zGo=IVR3l$^~*R zu9Qi*G6|n85wWFGnSh5YxO|+;k;ATrU&HsXqN{zS01o!*D+}cahTqLv5KB2X!&2_MpLqTJce9O*du~~V4atUG4&mJI)^EWS zynxaMFTf6v>o=3cq~g~-7V-J}7FnNP8LF-RBhdf&FRa43#G;Ig!#a!uzw?5P3-EAm;yXe#W1DDna0*~9uR8pVf_6Mu?7BvOo3JM#oE`F_UW7qBs zOT5pVF;(}rP%ygCYv+T)F|k9J%0A8E+)z%mesz33W88K1%Fn5J^C-Aj+4T?km~C@n zuPr+tvEcckYiAR(xw3XZ5iC=q$bAJ!8e|3OWSs*T3A{PjFBBh9p^VnRGOvn`}xnhNc$K~K`E|)9j zD!3B1NG8KM9I-&56boe>iA=0e3WQv?949PLZ8N8u1>*Dhe1TM^*}Ex|9HJbt5hk}@)`kN!zR1t;83i}Kn$}gkK*6A z%g*v&-(|d*Hb z5&U7kYUYiR4ZhhkXKjke=J+Ii+x~3yb+^yjYhIG6W$(KTd6r&(`-tY(hIBoz|B~AC zz=*{*aU;SK-)_rvevo%BVNLswiQ0~o`X8P8bbjjMZKgjkyX`LZrnigMy^#xZChU0@ z)+6tBT70B*?TN+~vYjnvfBBk&rb+atniK@c-fYnJu5UH{Xlb3y%{Yc^JAd|!p=u^gZ#koJ!BBB&mdT_Zx4kE(NxL)tn76ESU8d+2 zulMYGb4Lzq(&0h#GY47elbP)%V9&OVOzzLVlk7WsGPQ|s@a%T%_jNW~?%aAunCG?w zEv(Z&?n~;#kca@jq>j+`b;_e~cjywP+bI=)-_q&bw(xJB=OCw5+JJ zPX0-t@8LQBozlcNPwcq7>6h41V~48V{@M1s-_zf?sro;uuzpYf-_!qpHvOw09Y>~M z%cQteDVB4TVg(!Lh{ar`RKa2M*?f+SE9J=LxJ)9IE7&rDNWtf_#ZnPh%;xjtQmIhM zCm>yITDKC?k=ycq-Ijyv;7tqSS*nO_o8x7-gmuM%wIdLj3b@$#C{(sCY%s)6_qWi^hPx7L2DI?cZtY|7PO^Fc; zZ+7q1hyJ8_>bUdVT^kk+9cnXmnB_eF*g7SV#V1zxRbJ@Yr0&dj`8(&(He4!Gcj&PA z)dcU=ugYZ426%jZ5p`y|Fi9TZ;XKNJ;oxhn#%{GLcNAtV^({_)-){ExqTxY3bmEBJ z`%0dB2JBtbLUC|c=-_612e0ni)VE?@vw)>#e(%Z}SiUSfb*SCF8}`@Vv>KR$*t?&1 zE8iU7z0`l|diFI_7f-WQQyyclvM+RB-G`zm+Em;l_;SLg8QCt=0>Y18D(*Ax(`v;9 zt66Ka9-jTu>5$-cXUnDyD#|~`E>R78;rUj^ltj)-+C6^y;caGRVeb=1^;|w*@y%(^ ziQK2zYE)_x=N99Z6Uys1N^y4Xve&r-xHm53nqQCWSUk4L&6v}UEl<_m=ia4V`#aDj2_Qf4Y!@&W3rkZa!_e;IQV?Qo?Rs!8ZIh2^l4q3 z{jDJC=#uj{-(5vTuT^DEUN=l$e7$Iz^i6ZLReitt6GA)4eKvlIpRsoTxXIf?^5*U0 zo{2iLao^2Jo^M7kwLLNDYLAHNi`-9)wMo9wykh0CymgL4uNE>UO$}aD+DSV@pE=X^d1hDh@t5?C4t)GLZSR1Hbd`;-P0*EtXqdz|JJGk#QcJDn zoMrYSTQ9xmq1Lr_Sg<58kmHj82XmxHNP53bLN&CCAQ;$yF zj8A@oLR3zJTYQ=A#-y&L`@KsJWYFHJ0^#9$z9hpchHxW zF&{7A>>oC~?ai25?R$LccQkaaQPi6<~Tb)XxoKha|Z`551*ChV!E=Ib>`Nn^DmF*2ySn?wzmD9pyiDMR22P* zKeGA7kssc#z5QnS=qE>KcX~O-Njs&(CVNgrbK0443oMc?)=qoBpga57iioBkoClBS z(KKR2s+O5zJ1tqcV(^R8U!7N_qCqJ~&jg+A{Ktx{=bTql^N+tt3@&#%bG-YMRW4~J z7o!~;hW>#%1$7Hrb}t3q_GbwTK{{T5y)^hI>5g|}V++IEjQ&_@=q-*NmmD&f}Krr^WilKdtZlrgx)-DNhd% zJ-lOM56U@ZA9?E#zfmKsBqkn9Oe(tB-iUa^T~t?Ry^wx>cVEZTk$P=uxJN_Xx1?TA zZSce)s|3fg%I#T8w>A5+yX{Fq{DfY|uCvD$1|RE5bMDtBe^JwW55}%3?b>8m+oBC0 zhFcCr$mXgNdIkd5xG>lC}G8yF>j~je6--0R>%dv;X+Zt#adSG`@MkEYq*#$7rX z-@5xn%^yk6JleXy^BTF==IG;w!F#kVTXQ^I8|-h@bLqSAT}KBk(KYqhS3KaP*VB8? zM(iC{&z=`vQZZ-tvNBPt(*fJjw*}wM1Qp+Gvv1wwRUIc!T_f92N7u9c@`>U}yLZc` zB@NPi@mcCn_S|-5Tiv(rP3Rw{#ozT52-aYKbY)+(9(wiw_ubW2H*Xeu_g%B@LqpNM zzE)e$yi~TIux7wcivaPUIo}5K{U~;tvZJ>xv1VFRUg>CsH;5V?t-oi=@0o&CdKdn$ z&y;b$k?wD#`y1*0M!Nq`AYJ06w?d&rCRZxOBCb#(l?%8cjzA_6%5WSPN<>nTlr14% zOD$1wxqMtH6|zMNu~H!5DA-(?Si&`gwrWFCm3|N#Hb0ch$N9KO#1nGE#B3sz^%Gyg zweKAma3qfLP2UVUoOo(wJpSefFGd}s7Xy42R^YRsSHA1}Cq4@YBOgCHENstl?z+x5 zoxRp;+ck@Ao-x9y`_g)Gx2JY-pfz3``)%!rZey3Z^=;boq|4huvu3U-YxJC5eqe4J z%|q`ev+G;j6*YPEalrZMN1sZYw_C^G;Jr2HRnF2~_eZ>aGV*-(()@T`_tBYe-(Q`$ zMuRuL=xhGKxz3?&ryRqm+q;MC-21Tgn1~Z+ZzM=3U%xWgGVXRz&o}q{*XN{GY~NXm zygYXnD9<#YOc}8$!`bQd&Q;6vPcEvD$IUp?(4+X^Q^g_ixQZ(y8N=|*)oZ$29`E4d zHbAkAad?Brjb#_+_}q$k;Gj+m5f)?}y_uik7Gm$@UedwtZc7{XAFXz-(_Ff69b0wb z+}kDk(8oQxPMPiOd+Ox#A#Li+zp%q^&uDJ(tCP-s-FGkQilY@56BBNgQ1)h+RrrlP zIL>z0{$W#3cNq26()8gQ=ix^zW@-akzup&8FX8Ua(uk0x^}Jg)FGhBG`Og1B^t*fG ztpav*k)^kADLft9-^GV*a_Q6&zm7Kp8`zdTihO_dvs7?1WAp2x+XHf0NsT?+n>ZKg z1LkjaJT}|?5-zoduCqW756gqX}3?ur{o`c*zMZr9sYwJkKD7a zMAoYgpMKuitIMGmT|120+Ohk`#RKo%D496DM6&0>!mhzKi#oeseCqUh?A{4uaK*mO zdzwV-8yb+RQ+;}~w9Y{*jkTlyw}_1o6fx=6%@?^$$T=T0NtiTeKlg5f=U-w!sn+b# zoMARd-V<_r>%gM@{jzQOsf7_6m{vVDZF=h!x~@+94R%LU(QEf{pUD+ zUXMPUGJQ^kXXAM%i<%5p=Nz*z={n|K{XHT68?N>;Z#f~EIV130`|PmA!!k>^-9G*J zd=O*ci32G+d)B+@J$rvY-`iYepKcp7cJ&Gjs_Xw@oO;gvOY^7p{P_9GT@z}@TZId+ ztt&2E{(*n{&{b28=Z9Mw#w@S=_&;JUKaC%EWEX3Mm(HVbr&x{7b+aw8pi_%B)mxLh zUz+#r)2)Woey#NVEjA4qc*=Ql$tZj%cEwAxGkou{6}M>Cox`#xIzF1+@|&#HeQ({V z-q!WPc$;u5dMmafi#lXg^WA^k+`@dIS1yfj*MHlqx1(l7 zCBEuV>YIP}n0@%m4x70x>m;9=YQNg$HYZ#CFnJv5B{)ya?^G@LklCD*8hCza;n+Q z7a>uPN6ZS2=edf%m)9*P~q>kt#n_V!{PdNPSl<91) ztmMm->GpT-Z|XE?{yCElGs-=e$bHjh7tSv+8EyAs@!Om9;XAHpd`{@FGj2=WxTW)( z6*=CVm5GLI_Lhf_)h2gMw-*uMBu zgRjF5E?hovf2hG*5r@at4CvCE_Ia7pXim=mTMq4dJbkTM zJ<*ELJ!?Cja;G?)AF^%n8JF8fgXj2uyHdDnSkmjW)Jfd|~mTF@5jeR-`|#*YudI(e&KBu+R>j+xysl{8IPT z;Rg0!Zr*hgb{q0xMB|+WaT~d_*!Mrpj33W=v{mXq5Q!OAV*X0ncvE4K_SEGTQV(d1A+Cug)HYre)U}uReR( z=i{Ba)JKD2&qXndsq~36MSteK_&sfYPn(}O{r;~{8-pw3HwONVfq!G*-x&Cxj)4hR z1|R40!~!Kx$(BpFVyR3f5c1g^woHyIr6QS#E9NTMQjUZx#}&9jCJ{*GN`ZvUmT+ab zL@MVPe)eA*?gCdvt#}LGh-o7X4B>Kdwm=jl3JSt`gnOe_T-?v>yUiK@if_a2U-xa; z1P8{lcp_04KTs6P4h#yeJZHxdmJ7Cc0rrVpF0?Y8pM1Az`S)7}|CZ%KL*w~7RLdVY z`pcz4nK)u5AMWz9 zMc9$1iPN^&sX4m~Uv2X1ZYS8M^7E|N_UPlCm$$cGYN?p(aIt8)B7f($_E!G$#|pZ} z54@9r$LuOPFQxgZ2lx!aMo{M&)~WRrjI_Yu6M~4+1}H(viA0GEEw)R z-f6i!$mL$9|E3|mU$_n1_&%>gLHKsjv%7VlJzd4{ew>*UyyVHs^KEu?zkX!0Itca5 zzprSyqKCtjBiZ(0x%Gc#sjw({dfdd^)b6io`{;))KE3O9<-O^@wNz+smtJ?iUEJ55 z9i!(vjy|$t=cs^5Z8ybnyL$vE#`klTM>AJe9<1=@Y553calN!<66sJ$N-+6UK#p>bh&LUaSiolp2 zeYaoByX z^v{+Gzo*RaDO2q&1;+i<|JSEX)rLwwk0)2+JfV=IWGitFha;0q*&H#>R|v#PT)>v{ z6kH*nE9Q%Ek(9%caoAiQhbQr~5*RILjGM_coI&l#)!fo(CsWbKznQ7vco#W^l|V`DtD)O`LIU1KH}r zMU3F^=9(W7{DD==ABYpP1@KqzTK; zs2npz2sTO+r(at`M&dwsM@Utjx^9Ayt7%52RIQQ`L*Bu7P`FN^%~ELnv>HN40^sG1 zVTux;HVC0M#Cg)?7!45zt<&M}7($E~IKbV?!#g-KA~ZUoXH;OY4^cK8qiHTvs}$+_ zo@o+U-S4V0)YMa_&_hE(g&7YhhqI%-$oT_jJU1cJa3-`XnTF$_jrrk7XJZ;9U`*4i z9lq|3!Sg5%hEO4B8pGSa3}?6lqo%QJKF&|~`XLLYsx9ynH+`f^sbDwxAse+a8$*(& z(<`(giY(V3a?vVt(V|odNk1}VQklUtO{G>Vv_EDst;%Ak>BlT)RaufHT1m3Pw~`Z( zEgYCmugqdA*Q7~Q=`5W>qLrnvbP7G3drh1kPYw!0Pr;xAx%rSi040TyX$|o_iUU0a zrDHHIEMZ(2G%HA$-d3a2M@!NaVTOztWTZgGY{+Pj_ralDd8 zyP7qfx_H1;(0^%)q@VisD!xR7gSQE-q8dU0e5n^B_&{TR6VH|!!xZXg>=u3zNsE`RNCv+k~XiIdVL8U@*FyDc3nKBtC1rSh; z@o+K?^JgHLhTbV4)59@@0#Fo((hD)nFdM|cs5Xd!>ewKLwKZI9;29w_JNN_iph;gH zixW<>L9QlQ61hefPSVq>=o|i|5K4_g_(UOQL?Qg-fhdYY?}ZAf=;d1vWE1R(@bR9A zmX9!#e1t*Sl$vZ&fGsMNn1S^|bY?U{L^G(+mb$>VX)i=yM?(g7%*ij%1WI-OiQ!d1 z)^37&na7~~PBCcSk{Gn-Z49~<6kExKSucb^9Yj+pP!au4Dgu^)M_LUYiTZ0co!|hD zsE3YBk)+F%$!fAQTU6^zR<+I~UcHYH(U~pD=b#LYX&4s9G$=!38kC{2OgPBi_}q>H z&ka3*5j|i+w$&V(iHxEohC+2w(m3HPE~}EVSNEh!N;)ARprAmb&G_LgzCeJttL*52 z;%GwDXnbr<3a&Rp-FeFp~b*IdmX}K@ZY` z&Jk8s3KQz*l#J?>CY*2auY_&|DAQ2{aU{87}8d48(+s6^4Awqd3fpa=N*TONT@h#i>~m7$rKe z134|DIBpf?jLVHH${7qO%i2&Dlb~lH0^r$5vXfa+s#L8eI#b4yr|W8Cm`R2zWM!I?c#Be_)+x5cDc^gG4UZ>Wr4T6)8D;geud}8^-63)zUACv;ig15CSPw zzyN3htKcTY?7|F>%_)XE7=SNmRyUO{IB}x00 zV7@x7IRg>(UIyCBKA@fW_NL3Js>hW-{%E5SmS;n9X;m3|W`CwOGo2Y2MZQQXSd*?)CAX~kFf21&){;3uiIA&xU=%A}K^}t} znx3`!N0te%2nR#-6(a(B1NWA|y>IQ@yH#-?oT8AWGQ%`lW@3gMjt`3`I3&2{v`AKK zq!KmxEFxW}m#Ec-d@Y$ChMYB@0=IR6TcVU2f1CZQO#9W&G_y9Q!z8H+W{_4TPc{hJ zy{4f3K+I_xxnE!uDDAbB% ztt5>ZoFdUPgEV^RcGsVClMv1d(&!0ZtVmuAk1kc?x}2G=srIgHy@nYYB~ht;p$)8> zZKxW$26C2RIE1E2RBCdxItE77@<#xk5-`<9^Y#523_}Q`A_P7Ih81X{ISsVI#VHk6bG!M zH9{EJIjv8RDHx((gb=<;autM?iz9pxuCZ z!o$Jeo0udGC+Yd@~H?h_7m#&Z)6nvcNk>@ zqntlw^pC%r(SJ*#9AK3Dr;Hx>yBYnrB+3Owd4J02UV_n8f8QAWw;1Iaoeh7=>k)!i zh)qDda9C5qQPh4iEi7A!kCpM6PN4@lS?Sg^di3BX-)5+ zc4f=hHEu=aY?0H{9pLU<++u_`>(HiLg*mH;lk|MeD$6hOlg=Idza&kmAo(m5KPjysd1V!tyS zoc!MVcuzK!GR=Q09gOnn5EqPoqt&|d8?635zyEPVfxGZ-{8BltCS8Ej9Ve&;DXEHV zQkGxBLd>xBOOSH6zF$!14l7`8Rcj`@~9 z2_Ljt?;pG#r9and{hRI9|0poU@d((G5$_HY$Ym8*=>Q;KX8#XHWEoZdKdn~l-}_pt z^$%c_gwywHt=6}}z>vh>Xtn-@I6!}jJr=}&tJV6?zR_x}Lsx3GT7UVyR_pI$Hwy>y zd#%>*|6~6958i9F{w@Rr9Ln!8_VE1Sd#%<_AVkpDd#%<)%KX*$TCKkH`yag5YCVNL z0*>eRTCHbddHN6EYqkC>Df8FgYqkCu-s@JY^*7#Ywf>&8^B=v}YW=cUt^VWpTCD>J zpjNB(H{WZuj^H$CwOW7sy;ke*00;2255L~}2On&&{(9?Q{;jXI{*0hyy-Lao+8=!8 z$F0`;|Mb88U(!*l_5Lpm|6&Sr1W<+z#h?3Ht2L{+WB>FXnn+qL^WzV$e)z%F^-(^s zdoVaf%nP&rlYBqJpD#B){6GpMuO_?2!2N!djuI3P-@v%$-aJSPyf9HUo*b0R5x&Tt z?+0;OJ<1ET;=SEEcy^Rz4@V_le)z%qL0%;B;7E3eCe8W_FHCL6aFAw0b9$5%i2=-C zMw{gI^7g*pjm*nMGtB#6*wOF?^7D9P>g_EbCY5eJY5cZM@@gXZS&+@?=kcg>H$tz` zB9*=Rq6Qo_2GsG!97PGI!(*VG%B6lqp@!|S6pfPrReoy{$~@!_{w}*43d`wA{8gti$NV`f>gh)o_UNTH1zu4`K4fKA z2+k`_BS>B)gK3pWSN-V4i}gudl!@7k^sg@rP5najmVjBfELhRvhIwQ5qL(kD4YS8U z)&Tf|`m%jHC=>x|((;j_?;KLv!Kf_&8{GFBbbi&~IY>uIe}O=yDeju6Ta<&nUM~V& zt`BqLgv0@{`)p|{dR2IM4Lp2x84a6wIOIucQ&lubT(n;0WmOosKbl@JX3$}0&#?a!-&H&H@ zR3ESqVYkN20vKeEKt`1p+OE3Oe7G(NOUP5#E$w%|{Y_P3zwIlrE4~&x{4f6+X|Z4Y zuYZlSSSb7OGW?BZ751A@VOOBT{+;*S%2!M?C=;J2g?X_~YlCG4?4Y38&`?j3qD=Gb zrHK|I4A3fg(!l+rILnd|q&Mrvu3^-3@1J7jygx0ge9X;2ntLxr9S+9>?e=+e<%rFFoTewYotrq;ry9#6;oF`JG}`+E3sC#j|d2JsoR z3qW1(gW(C9L{n%yE~=MrOfo7HtX4w5G;*HaHUWcHiB6eBYwb~yo>%D2haapLgagyI zxS$cb%}GcI=0)3|)QgGAM2nGGp>^ArfiK!&yHo%q6VlgPc4xS|)%o3hF7!@wj(NWt zPJBK|GH+HyRU*(uIcV>0KQ;IB>4-czCV5pA@c`Q~^4KLq^JLc`XediY=Ag*O%3`Lh ziZnZ1H$T>)KPfk}p)lBwyRy<@9e_?^xFh;|$qdMKILZ%8DFy|^GC)9wf#JIYgu?fev(MwvG}*240(v+q>Q-!X{CqOJzw_B69%}e8 zFm-S($O8A8fMfyfuNkIqB1}nSUcY83zn|wLT24%#IuZe{M7a89!%^fKNjhV$F2h^G z_ZKJDL4rTb{xls`Y1XN5)p4i9xca2z=m31ZCu)ni?s+kyCd*}9y3zUFhq$#WGQ+ZB z)g&tL`YfT>wk02kbWGYkG?EVQbp0x%|4fdGxJ>$yZGa*R_Tw@gK;*dVm`@W^BxuA` zM~U%zA5WEGRA1pq@^j3 z^3$vWy1#E4|*$K^$LSi&s`x;?>pR?c~m_Uhm-g!Tz1W!R;HX2ffw! zR_}Hk-x%JwdGn@4b6`mcn6z)&{%@_J3J>jPN>Z8SnYGTPhY{lrPxu)zDrl1T?%wC! zN6(&i_9?(1YWRHbctQ~aoj4nIrjwz9MVm^rQ?uP*o^nW%exqeitp{q}F>Q}awFU<& zl*I1JhwWX`I_aJKjVrTXs(n%Tpux;32FB8pRCw50B5^M;oJqNEm)24$GdsM31$jVv zM3z$9Qd~n_XVT!w6g;(6C@NB5m-Y5T3sFcH*!f5UVseQVO+KwA)2fdRkBQ693FN4G z*|{4H<0|Iempl#gWhZ03$_K^hz`S5%ru4#}&C3~Ng9c{Dsc|R%iWY=T`5z>7iuSp> z7?7;zbW#Evr@#cMJT zxrwFtJ27Mf!|_*E7#g^lIhDA!;cLjuI^`+}W_Wp4Sa4)h^M}V?iXlzCxzTODZ7b~$C& znnI!OH4gyRJHKg9_SHXtUx}~@dH%>5f9ruFj7}}Zo zrgiL8$y|3H8YySTV01!tNA zj)V3-{?2!rspM|c>&1%*gWU9u0){~@E-r4snT^S5LK>KqT-yDA#U!-wr4iyY3tdwa z6g0~3;s1+^8#jRE4eMSK0$W^M{O|)Zef-z&tLfw4R@29W{4|3-zzjB@UMtPhcyJsa zCZ%uu_)nvMPR5U?zy1eg{6Mq^j33`>Hh%mYbDD(tVlnvWWt%=Y;R)ApM5gSpRZ zDMMjwReEf8@@bV6Pj+RtOJi)AAI$;hM_!rp9_s5dFdMa%9H!OLbRR);%Vn}3msJ{P zD{ISR9671d;|@;NBt>3IBw$IVAB+gc3}Q1(i)2vc#hHOW0lUqUbO>z++h`G4LsL%T zL4rz~!=Z`II2{!E?gKN3i=hSNG(Aqc+AYC@H_O{`HjPK?yL?>XL0TRI1d|t7_NEgP zo1M+=4&IxSG&a|khiQ3C8bWn8N%|B=V(9;!ar~-Nraw*ktG#Vgj`FHs#N%t$Xg^E~ z6D@P#$snGT<2dU~guR!^h^)zIG4yf%TgOb>ly3->4BM+z{s`fVTTJPm4I*s-sBLg3ee{5^4m8;r$Jz2Y&f>$Q zc&pl1b!jQ%anccI2m2>@8{o{gYRXo~Xa_~|oNW?P*}U+S29l7G(oyu1gAdGu1in3! zkA`L_Y)v!E9;R>yN>eGwp!U9uWQL$@$i!e31fI#BYvw){kdGsRj@qN&op=y+ zQPmFfZvR$yWfjIH%XC$))Pg@TeyXC3e~=f`ama8dX>wZSlXTFX98JDg^;dhV*H_ob z-l}m`IA@<$$)JMGE6w^}m?$pBfyt%eL7AJ^{oT~;6TP~9^G6pIGSN7ll>15a#@i-4 zEmlc{0kb6M8-yC35U-ameEx7ugz$_w&647xf|ibWP)3w@g_KP=-e#3w*p;HKqi#Ds z1%0>ux$>%$)y1$EdYliFK2Zd@l;wd#+8Wc9IYUxW+%CILmlcqXd)Eno=w_4S$nVG* zdm-E|*?`;5`x>-hEu22msbV*KvlA`ol-o%2lad*WVxxUOaUcHDZGmaa6sZPtJ<; z@Tf8igGIC2>)q(A_EvB5e$Q|u{%@&|!X(iK=N?-`6J3*0Qa*_^`4rp+R z>5wjh+AfO5YsBqf&fnpmVn@3EidHyBJq$))d5FG<2^H1ddrI zvqz)TLQwoxrZ{TNg;iXx@yprQxoN_dm_YEidiG9|Vm~jFewOQ27{b8$Y`2C22|0yPkHY*^_LL2&-smIK`<^b=T?#-gOW? zkRHv!D6CBHjJFXoP^lM|qb!_Xxz6fjk=KU3Aq4Lg?%<^bFL+C^5meSR_q-VGP7e;! zSEj8fdn1@mIVRuMyq^>mT<^^iN-A~@{*oTL(K4cZv35%HXyZQlHA&Q4 zx26vQ%GiiR^^H2uu-DQf=bklRi9eGdWv=t+r^fA21RCbZL@I@NG#nR2jp>Zd2o7or z{zY4Y;wb4Aq~ z&u}`)?m%UX&&HESG&r(Ad2o`ciI)V=CN(?KHn)JNoB(XW2DeM+Z@AzvEs@ZJBP1at zYGZ|Cf=;t6M6gRR1ZipOEtw>X_YoD)^?c{t4Sh)jBq2xH@MxTnFP20oX>SFYzsQCI z96KZ7H3H(A_UG+%(Q0w#0zU#Xkgi!oYO??s^TyEmsQyZ?H!jUMe$`*;vB>n!FOZ61 zOnYZc%NaE)t4uvy8w_F%iOusz)tybzJ7yNd4p(^RI3>)c7vuxH#1{2HB(GfQ$ zfB43Wv<^q#IDUtL)z#Gy19<9K;CHMmO8=o3>wb~2(;7%1%h%aNDd-?hN6B!V7np}d zq2qCYsp3Q3kaFj~3DqE|mexTUTupt|uoY&r6G>bH(nakqXAc2kVJAxs$Sw@DE%s0^Pl>=p)`vFQ}@fcvbli?Ll3@Dcea~X`om?pNt!@P^_ z9?84NPD;ec7bClD(u2j$V+lNUslX4n4@o$;C9OOyG9@{w?D5KswBV1{B}Ed0s|EJP zIg_{@6H(gHnrkw`Yv=HcqZc33>>=i^btZ(I~=4cUPY#hR5{jzH=_-F2Z0gHb*>CJLb(QZMIxtWq3VcJ>n@#hTT^>PB>uMFE%% zjjKbXVVTx+?yLY`(7wP2KicqKQOs08ahHhVt3e(5PuyW=b=BJlzFIwNqY)c}+OPz8 zYoQ5Z_b#?z@e!x`Zp2x!+!UBgm})>@Oz0u>WQ7t?MXHEiN~alBjk7yX8B`?suCNO# zJNM2yvkg|Awl07^@p23AkCUC7+ZtP`{%h6@0WG`xaMwUH@P;Nm?4chc- zL(7tZasGVoML%Mb3UzUr#+8_@B?jx;US_oAxH*-{4p~c*ZbZSdw%W$80Ri&L z=Wprwja}Br2fAGzn#V@^pbk|;l92rtCC7PLfzyY{L7F8)lTrp*P_i6K zM3j~qz_kSjH+RHXyujJ2T;d9gH-TA6KT}rG-RZde97ns(bjRenp1e`Vrbw8whZ4S)432WsK?O7P5JACVNjx+Q8dy}6gKlz~7vt_QS;qAo z%MTvjd;UrHs2Y#1Qq>Nh<5@(9sv3;)!$V~7CaVErkjg$UkxSeg53J9IG!9M^(W!Bj z&pEsjF_~<^<;jmAVEGgpAvs{jk+V}^QwSINK=>37A zqlcIuQB#98h*AOjsct)!r0sQGYa-ug`EinM4NY`=?N0CZ&D(3M*Vi{UKUw?HaOLRW z^PSc0o0CsA4#N?^3qS?TrGZmzAY_3rd;u0 zYIOa^_3OR0>(_74n9TDMaWXKx<+FKt>20h5G6O@?1}Sh@1rNST^Q`t42 z0E*JYqfvf}rl>Ai`8n{UG-W!Tj;c6I@@Y9b>(1hw5mi2u-f5xrP=s~2jzoTUV`cUF z_1mkrd$;(-O7HfqJ2!9NUZo&7=;K#W^~UO*>$h&)TDwlzXzpKz5iP`{(PBVpid8`A zmwJ7akCWH=!9hAmsD^9UKimX?LMoJui)00ZtMh^G7}#g|;o->9g18<`c{bk9Ml*2YlO^3;#$bC)XXP z=O;(O*>Atel0mAGG&@`ZnI)rqfg%sdu+kmeXYTkTNoPy@L4A9g71V*-B@SMg1lSuzg*xfB(g3o4LSK{hBHceZ>!r+s26N`TNEXVXEKshWe2>k#cG+3;SPVH;Z$!rU#s zGo#M`?zR!>;rvn!S~Txv4I7ORm}``5ak2;6Kzd-ZocE=(s2+bt*+&I#OcB3e$Pss% zS4bl&r&8)er@~am`G3*KL%w8DnyJ^)uU@aaNmiy+dV(nU16T>jG?8WsNWBS^_v_Q7 zGLq{>>66#hXXzlx%0x=D>Vy6C{ZDt6*xXX4qa;K2iSjs|EY{o8`u?_LclT5C{p4&G z%<>4Y{q8*r}Im zEG;V&#nTGwNj|N*MS8I0{me&0ykgbks-a_b)~ZIUOq`vW0VOMQn|JX(hL7{R@s`cE zm$SE>w`v`><8|_rq!`6#k$JfU%kDe1`DOIO#zyz{y2IrzoeH94#d>f>bb_XYz_Z{= z@`h)ha2KD)1;TKbE-}zrO?KtkT*3$nu7#TL;B^-)_(L?c^J8%l^*}4Od^_D7LmvfX zGtPNN?fiz`Qt6dKiv&-YHuj7*`mXf|Gxm5k%qZH+hRF%7!+q11KS{5vm)YUOds0k( zp=85!okv{kj+{A$GfAcF)@3&D=>jkQH}S#3Y0lrT z_+B6}!rwp?6*PNTaDP<{g6wA(KKlKCtmfKZoiW#f=6z%Bzk71$CrCJcD0^@7~$ zFxKw)Cvraw>|8L_hHqe~{b&E^l7?F5TEGF}A{1S>(^_6YnHd}H|0l;?mYjpg1{Xej zl~zx_Z&xdEG4U8E^r05HZfz{&gx{HFzn$-!_AYMqLUG?Rb&$S7Vj+4(u~+f}G{7CI zkRy}bVWI~k%~bV zRHlB=QfMv*)qIlj;i?oiDf6482`)jMNCsrA3cOZw5Y@E|TXRZwI5Lvn>h+cnR<0lP z?%bgCQwjhVd$#$BiKf|cmY-5qn(!;7nus>16{TwcIM5>|`MU9s#4MRZvS0$X{WFg2 zK#9CsLWPyJ^|ju5Z_TW(c6&FwIPOJ`EQ}NimUVB5%o!vplpQ`L2G^fw^l?&1a!Hz% z>)08&(ZfvtAT2htp+-fMM!rmBTu#Sj_a|jeLv?kmsY8z;pMTy%i|-yG3AE;4)VHQ* zR&Mj*3q|HIIk}g|1&0{fK7w%0eSD|0&Zz2Dq-D?6@s75U_=k0%R^k4%*enJ|u1?U8 ze|EE}yZh5ZF>5;w8W3{h0bX@`*P6G+O;mb_lTvO>4fZ&1#50Z(@0)LF6C>T6uWE<$ zKC|`0%c#r3TnzMHLEp~)EcZU}PB5?w5anGpyJ-d^rj`8IJyG@_li`Moq5I;I@^+e~ z58^6;Rcp73$2d)+Ky4$DLH#56MT{2WB`%HU+acB3`>nnn*Xn2aA-RGC>IZa8l2{zK zgjZU3uAE&eUen01ulP22h?4ysrolpQB*w~RZ`3h z6IJWL7(qAqw7-*_q?#L9W|-dZCPf;L9#j68T66oKC&ebrU_onPhFswZuV(mt_JgYt z0Do_qj)s_Wug1<3I2IKI1^emoA@Z|TaW(akKbRIpl8LX;k+bWBm({=>6bvkw2UqRM zXgGt>#_UcCpJ$x%#_~y0@rM~yKP(6FBzcq?=9Fd#uFwXzN)ktB8QrfV4CG$kj}b=HSbirdlj?C5 za{l)5gVaYYosjUV?~E~l-V6NvB=N=i^DKR}`XKjN;CV56m<^cy6-MtW3a>flh0pSV zzY@R-sV*+BtnW{PT1GA`?>nmbWzPAu>VG4z)T6wZSC_uuJA0m`7?KdK4(oFy*@~-V z_bjVopQdUd30{Y8<%M)OO#CspZ`GUwc9Q#1g2UwOi50k9gt^CGNmNMD-6+FWs2~7~c2Y~lkb6GTh1+FFT zQSoi%jVFuT5VkS|SyZ3LK8Wt+PC&RMJnK36!!^~0bINWkEon8b9pZJtUUePDeW@)L z?!%nr!W9S?ANM}4t=JO4#V4`&aEaM#3&e6Nlz-Ju;qrQ=j!9?4kn9-CJSfs;HKjR} zOU(?=akK4U=zN+ICpFu(=CAZ?MRn&1`-&X;z=j=}=j={0goJV}2_*fn-#12%gRR-) zU^l!|9k6UrKh|=kh=MDOM^I|hrpniAuuA+VALf-K((H3P7i)qoIn1D0;WbnDLYv#@ z+>K;VlEP4KDQF@P({_qQ)4U5*Qbr#Oy!)Pa}pyw$exfz(qG&Z zI4z?^x~<7vX3l44e9wbQxWj@eVK;BQbnVkK8fAVLf4zurTB^dv3y37%y_PU{>4^`WM0~NHLw9 z$QCPFynxa5G%DFq=`^Y@eh52qD2wwIMT=G>$+0Q1+T!GVSW|<>y#Rgp8 z___7VYKpaep<7RUGGO|VI!yv7DBw|S@IIIn{=zbld5WEXBx7)`B;(jGMx#MiQ}V4_ z3TfBYXrQe5AfzHyJ%Dt-+Q%%7M5#==yX@TE3IRd$bI0D`^{Mg(K503;#VT8zC@ddByM`ne&R!aRW1M|d?EFtF#9+5LZXA_Y)DOjf|fC6HAE9phe25fSH>|)gez+51w zM5$nQ@)ojpAys!=d>%uE!i(>81CXHDz9yO{p1^rXTHEp!;;W1FV4=H(qaytc^{a{JgAziW#MPvgynq+4Pwsx zHMd9zl2mW3*Tnr{ZI8pryn{}8F$m0E?lp`bxQDIT$}KCoG;w)Zr8Q&}yL9Q4FLJco z&fQ29Ju7XruISN}b`(|Vj9@!#F)|B!3|Oo2?ws5Vf*KzGR_T55#EPxQE^~4-NK84f z1oj#xN=)P>X7vl}gLOBG0+8|i3=Zn|r3Vj%?dBeM!6 zlJC(AJ5#;g@qjchH~2A~`Ca1jI0sTQe)J-}8SLQ03~oZ~NM8;+e&-H1)CEtq>eiC5 zN^cG1I{x9JYC63vI94&Rt17OTAFmEU2cwfy4F|GQCy$9sYc)1=FoXsh28) zILj9h4)P{Pq=N6au1w*zsu=YI&-`|Uk+kVB<%~4m&>-5u;H`Z#@2C z^Xm$iQOaCFgs{f^I>E|~&g@b@zmE1JmPoZJp-cHBOMon07q{fJC~e`=Rh>Cht4inR z^h(UF0yvZs^J@vkcMj5Gd>R+Pu(b=+MSMe9RYn`gM6>o^rsamR=d>(#Kp#m>j5~kO zHfOjuMc$|_mp7F=2d)|RZhHb@J~V9g?bscB6D0N{x_1&I*rpjzd`NGyISoI!J*pEo zc3-F)!1~6K8nhor`F>3Cls-Z0R}D4_ss!$1w>b>_+3t1SBW|@$4ePhI^bwyEfMUZl zqjt7zJfWpK8&Akm9DHS0mTA~v3wrAsB~_Sbh*dNPb`eaHept|49xqJWjo3t=<|W;w z6Sr!a8$;~ejj)x1KNt(Bp+qb;M=3JT`2FD^2o;@EyNhsUYNxA> zT+lh?`ybHFQy27oA2$OGDz9t5ZbQ$}r*ScaNLsIB!ygj#7E)-?FlMQ~a8jnLi&{WX zn%6+nDtf7QXyx=8(p43eWme`PRABcO*BOlB7VEAXrYnk>XAEAtpZbbC(^-vlfM;H> zz2VI^(lC$n1}v=Hxf^9892&g@{Q?N71}g(q6P(Pp=8(dFX*wNNf}iZpkd+frWX{BO z?+aeLUn!8%*c=!ea4*Zhhy2-9u#pJr%p$>8NM~#rrg5EnTZ*dbPnVodQRN~Svy}yS z^X0A0T{bHDv@d0xp45d&z{lrYDF`ZZ-Ole-F%Xc?JZcu$XH)>+h-Hruk_vb zdTWd456T9dcvD+%;!>ls0ERjxZ#Cx)ra?RO$19F6>;!811swtGagaeds3>f8yDHLhy(en`EsEyqf@OHr{(_<=Kyq=p$4PUVF zeH_Xsi3@47DEAAugEGv8K$K%0Z(lXj0e{f}FLC22ZD_~Dv{NohPNU#-~7Z5KUr+n0I{40ag{ZN}Mm;j*EXlX4BW1@Nwk zWXWw4pd5t3LV%%rb~Z_#;I?^X%QjC;unYez$pDVJgc?c+0-<#I2xU$)ZRtgTm9~jQ z2-$`C3+F&FlUQCLu^M%sxymmi}6k1SbAXtN-&MZ>yD-x&n71Ln}R$HE|s zK`;wQt)JzTN3_->$uK3R^QdZu>gmo=QaznGvRhSUA9L5-?s=-Up%UzcWJLGOty@fq z9FApc)~A;#%{OET*uk2j$ErMfQvuX`D2^sgM3i5`I~Ye6P8I2NXbZ`&JOi8kh;&hH zzZG}*j{0G7^xOG90_s5=Kgsv`oWB}UYYtU}adP%O4Um3ToFSTx60;!_mzhlWN9n+9 zJ(VnhLrKb2CIya>Nz5@IL%gvK5T*yRw>Wcg-b4*KRk@9*hLT1L*YaH8+wVzys%9uIfO*) zxE|4c81Iae2%8b=yulxfd9P*g|JnN!6+|S?4Ap@4aE8(qdj~o=&O3d30>Cc>hW~!5#4p2JfFmvSZF$VHXl#N(6=P6o6v@4qF%%!=E?=dj)`sp2q~z% zs6ImdMI&wPR>jMgzIB4T(BLk=55ckDB$}ew^rCvH(`ZSX#x22R1Pof0Z3IZa)*cn< zd4*sNQWqAZ#fhGM3DBIlxed4%{e%7?wNTe~^j1C!yv@lMRKssKe1?|o;>_$+ ztgvz+z*BBj^93t){W~`|=$v5x&aDk|%Gt*Ich)xea7zEqimpT2+CsFqa_K6*O9dM=hXo? zk>MQ{^+QK8T|df!^i8l&UpH9b+W|-NQRD?J^Y$b5Ry-m)n8nl?Py%c~Kz&GXu7xJN z2XXV>IbG{jaRkd;0UK4$_qWbv9bW5Le+)R^pm8t~Up>CBV7 zC?fi_Vq11KNN$s6Rgw)8Bs-^z=IjATcPAQ&L20*sK$2;l0no%pK{}R$B1t+&!(pd{ zYGPiRkIn71+qZA_Zihak+Wn=$-I#-7)X|&mX=HTdDYysqqUv-FEARjLuJ>R=9+09% zPFl*n@a8Bk4U%bNFy>$smq&(&vp?n3XV%XcrMTCIFYQQpZAlw;7_ubKNhpK)sO zv$9IYifSL3yuf+nb*UMBock1cn4Tn=HttM*L5PZ7|3Q9ldsFFGaf9xq@6T1ze*M~^ z+g!GK^X<8!m(_^p!n<=F&+EOpRxCIy+o0x|S*>;F-LZs|-|mXuup6sMdHn1jcK5^w zCwuqmUz4TF%Brr3u2JSrn_gK@Fk4%if6J1}BldTSyaPcJDfy#!<9AdhHnOh>4|i*K z#MY18@?|{8Ov;0%OSW-{5+(}|NqoZkLM(O7?omD+4RL2ge(Yh%^XQP8#KV(SAt|cQ zW5oXkw++K{6?m4;nQvCT>_JOuv2!6%Ts!Ff$9MJU;MasM%|yf}mK{p5^xwYybbz?|(yk|HrW*@ioJqx+BL2)$jb z<`MVcC{8mve&0;iDYEhp^6_MpRLPPVrzKsrz=bV*-~cz97f`*eHHYS#seZ;bjP1l_ zN#h*kd*l`pq37e9)g`QmQW|yAph0sHorGP(91C0Ci%VQG!j#!mz+QGA6!Bnz?rSe{ z(&PZHiS1omg&_It6V7tw`%x`Bob#YagzOp4Aynv911 zg)gvSn?a>%BP`>M=O9=RXMZ@;fDxD}mr0b`VRbbgK#JRW_gWm5RR=kr`>vYWpouz+ zp)=evW9}wbCT{QekGI^_)K@hKtA^D$k>^jHo8oJnG#JSv%e2aivny)zx3>kh0g?sZ%8NJUxECRQA`5Xlr-p6VCkpJ1f{pl9Cu|#(1uLC7K#PEWuS% zM5OIB9aU-8p{r_G(T*0)mnNe7vS@o|(X7uU8)??s_<1MYtpQ<(miE_1JR~_JQ-!1w z(j-%XsE}Kv8P;u9-{sW?EH|GF#Rd6 z#ONb0sag0UkYjIP%CysaG1H&R_JlOqOCskxhx%BtQv!~eZ4jO|uLm_L!jIh4*Ek8Y za;9?zepp{jq948Jb?&_U2qrAC70NW!1-_?BTyl?7R=AaOnpqZg z^DxVvtio$#2s)DxHcvh96=e93FCLIpyiBmCQeCJn>M6X9`t~HfpoIavgwkglxAs-u zm~6)tGVjisoYe-U$_i_6ZZ`u}W*!R+3LJQ?@Ue4?>X^46GV8 zDIs*@DQXK^4|&}ia>FR8IZ_rpQ!>=F9)glAkFnctK|c}BtFV&5dbXd-DEu{;V8##@+W7x>rD+8fFp7I@ulh13)lcxyCuL=gGWY8 zGZ#ACux3I6B4c))^yyt7x0qa2bJ3+Uh};(YDI~!Wwxr9;B8_+g`F&&1Db+xE6D{kh z4{IgV`9`ZSrSwsVCqpO$Uo0x=*NVjz{e-9pR}-Nj)U!AqQPCrVW?T&OyC`FWnD5}U>WMyg&3i#D!4 zwL??^PjhB@70T52j1EhB4=)0o0uMIV?akjYD?KoFt$CV)D$mMfz{998papKb8?ItB znh5uwL8W`i!Wa+#MEFOk@g8ytE4)IWj=Z^yo@XP#M*UqoE{fB)BAp&k6cipyX|i<;_D`8 znPP;W(8b9wVD7+QtXbJMPe@48SNv7~I?N9aytJ)RZ|VBdjip;lx0hCWQLXUyHhR_A zOzw7}O-*#}t}eR2*B0wFX<0>PYufm1Z`<$0a@^FHbkt(Gi~n%s!ov@Z7LsNL-djs6 zD@!X&YfIOcZd!P4aqf3PB1EHCui`A(kBdnWpG~vrXnL4T233BN3^pG>ytldYbZ7H- zpFe*7+4D~xKE40!$>$I6N0%I~>8xOlSylCzAfT~r-(6YtBXVUNdX*9(VH<`O?z(5ig?Vx)9RSXwpL5izLmhC|3^ z|IMeL*58cBW-Y8$mgc6pWzWuOC}hJz_=0++_Cf6Exjh{6zn^}}|BlD}Z&_-KJiF`X zER~*{+;WE?%38&&uJ6Q$6hUpL1Jdlx21}Hv{Wr?7{`9$L&0utPk36AGYv);EEm~s57zk)me z!d#G|#n{Bow4rz*eR)wgY#_IYfaXaFojeu7&sF)>u;y8Zw1B=qgl!I8;LhO7m}oWx zxiYTrnl&e%0+npm_6YD{X;q--QkYx%Woh^5lRy#WxH(wB^f0x7!B$vFW=SCvx2p#R zOv3J~hf+(262R5qh!ip8@5e%fs2MlhR*fH|Gpf*ov=AlGGsyD51tEe;em8p{jc%2P z`(vnAzptC9YueJV(7G^7TGTD!+Q0Nk>x~p^LhEe*-EJ4g&H?N-Nl7t<$*Z)iW}PpV zV|btJ_hrr96xFQ*3D$4wI&{gq%kDWSN5?{1ue#rhvBavQAuD zFrY3i_@_r+5CKeG(w8MKoEfmxHOJo)4b$@YBGN;{GM#piA=v?4=TaO&c_G1R>u*JI z=(`cRS!!z{G=gj%ozabXbuuF}rPUf{WcqxK0K>EXIuUq!2j2yueegtVA3qyU4xB5| z#uV095taPU#*;@lo4AZg_E+6m`A#Rx*$K2U4 zEph*wJGc-j3;lGArq1bwQ(n$i|Dh$ZiCMgUcziQ7A$K@MZyV zxv2%|<4aZ+vpB51!3DbY_2XaruogQ)ODD;DreT&T}wZ)LGQ9LA01So3VNfkTO3>=e>+n(0rJ7fq!W7wQhk{cW4A;if5 zKh3e$iesR$z7n%BDTj`o2JTz|ZuUixxnvI{!is4^+9zpD)=V4NqwM6YhI)T{E$CA%Dz3*l z7IFnduICb`!fZrL&1l_T!Tk0XL9j6NFhZIegEdG5vqC@H+FjEt{noCU3g;|O^WwOq zGd(~@5@&|8)s#zSlvYU*k4&EFi7ig*ca)S#=}%9sFB=~2BVSA@GME694QG|=Jk0ko zX<9i!0y}u+oAuUw5w1|a!N%cceVDlTYDx-85!Tw6GRLf$;f*nVqDEy^TakFu&w0k2 zA@@o77~%O;@lsAl6=ex!RYU_}^#m6O!@9dArNJP$MzF%ZKwB~DlNVJHN;)Zbij*Ig zS8aK?ZX4UMNU<6{XH1!G0tCcn)KSvgUrGGcr;3I zK0P1}rU505-5e0y&u%O>`i)%SR^SysPY5_Px)dr%HX&R2SmPjFPyl4AK~;2kF3QL-8oB&K6C< z_$eLoDHy<_4M*b4Q?!xD)yghfUwCKUe9SXfg!j|WP<}r2?tODgnUJRDZednvu+>29 z&^=oVk??``M?LY418wSsGDg0!2ORv30kUaOk_yQ=*Y25x=<|3qqP+3e-Y zJeZeD;aO-wOc;&N4d{~2D+Xh=&v>nIv#g`4uc0y09i7I;nl`OJP1^HEruXXLz>gkP zAMtclrEnqBzsu75%(CM(@0K^n9-0A$R++N42%;3vj})5=;2HsVPBS#S7qxQZqE?E* zg>BrbwISk0rOw6EF>jEfNFdIbFuu5G$4h8AXF8Y!-Leiw3v^bOxVz5J{KZ?1J>jMc zc3N%6l7G0_k!xe;ybSTo$#XUt^4fv*q!=a=(pSS^t&9+NL#|XpQoS@X*%Ks;qOff} z%Z$Y31VHDmbjL?C8dI`TH|N!?b;(Hl?R=jv=ysZ|e31!o`jUn?IYX4)p{T*r%W>}c zgJ&|Nvk>8tGZ@d(!EsW(10?56m{qX-8_10l$lNE1#QJ1<_;z@4A+ajcqy@1c1XEA5 z!5t$-II?#jvRt@P{;`}v1w3+Kq->Rs(xR-S7YE2CCWsrLo8mndvMR50Gt}r(gs5FL z-VsNNnLbv@WN^&#Plr3Z^#GB{zP=HsI1jF0t~595Z%=CIt!uuFoXz3z-7&jK(L)|{ z=w{+V%!+vmIAE;kG9_S%#fh)&sm+c@mbwnhk~p7&J9l9>S~Ts=q1>N`I&#-`Z|r<6 zB!ez)r%x@-olrtO{ZGb2PUPg>G0pYg1=FheYz>#*fsAFI&PB-95Es?A8N_flFEcM& zc8@l1PK1zWkV@{z>4b;nIS&=-=gIE#C8i?n9WWNIVal$J!qMN7`eVEhYm4<&tkx;K zrqBsk(@aM;iystB{n#s+K&38N&24RE3G>o)AsH)YMEx+-=ZXeIZ6l*nMT>uFs-rklXawSN7UU%)Tumx?cs-EW9K|DRQk$&ux3x00Dxwnfxs_E(aT1RVOeIXq%Vt%NT=L3= z4-~?vMYs`>SoD%U-!)+(6~q{ZI>ih)L{UV2L6W)`%Fgv^|9H-<2h*;+M?iV-b$9?e zWZl7OFrSYO5Bb6iml+5a*&vn7+;LojdPU5iJCVqb0NcM4&4OWq-zm-j%nj)>Ejz~M ztp3EBA-iMq=&ftq_<(p z>HbfWLDg@sY?v`;7w)%LH_Rx_j{EJk4O6D0B&+)E>xOnCHEq-Df#8e0*Hu?ppMe9b0hAajra4>y|d?8I>?8dM@(T;#K<)k z&aFtzC~nj#7`)_W%ZIP3BIXY)4&}XB5LG&g_v68|jQY{uqu$<~M|+#M_BQ4Gw}D+J zF2)@?LV_X>SNCo|+Pl}&7$A6^@>5FIDxWv+@7=yt`#ha^A8*=^gLsr=!?+I*Ryh6A3Zm+pQM{$7^|AQilk@wFlx3+itPOV&;HJ7{X%8l~rP{6%& zd++v&`%>g3B9{uq#GMCwx9{7}NnBJ%uJ_yb_ijJ19}m(Zao_G--`jM3zmX5lblEInM^yR*4>$BpU;y(+YK{8o?B!=uhgKC0rwq*JDcIzM+d_cq;_ zC~;z%9d?rJBpKxsAIP=6O@|i5j1^fYM2`Qd$(6@-{qjlN29QJ zM=#|#9VKU-NnBL8YNm4#4?HL~Z|vQ3L@s6Vk6#o$-rl>n>3ZZgPtyz$VbmmJsmim% zsn`6S+j~AJlejn@CEh5!nJ*_vGC1n&$D>i6`-oWG+w?|LSqj~Juy@DJwgf=cNzf~B zlvWAS7@nMUIQ^l|V)r2su#~-7GHqX`vHl}MZ96_p>3}bJ=iT;%^<~oiE zi}VzE2;Wsa(!(G=p?7-MJG~We{x>G zqck*sXEoATc5i>SpqT1tcK(^IPg8Ijc0RNixdeBlyi*B8x4dEu|eZrN;58cIYC zNgoXhWw8DR-(8pwzXqOzCEafs_BLm%QZ&@`M@_P^s_`jg(X%077`MT-W0A(+Fs0Ta zy;SYtF+tHG<1>YUkoBL?LE8zb=>;_5c8~_WLtdJfVPYq*A|MN9;(3<7T78hSS;Y-_ zz0wORJ*|btLl8YLMh`QnJ8sT+km@h=YB{tk;=~W^MBiDx&F}B2>bA#*L;5s+B&P^_Ii;LXiBDc86t%p{${3+!TP_m}TJlHHbeh1FvQZowB zg}E1C~*$TB;pW?9A6ln;wU z!2|00{t`pqCG3BrG*vIv)s1!~L zymE8EwN=^-1I>a1kJd+lt^;DzDYf-JHf!T1TI2o#%_M5~=y*(4O$^TvY_RUajU~E~ zW0(%8DD{HeL$18yJZK5Biu7RiWi zz|1qV^Xxw9f%iY%;Tur|Rx)_Kx_#53JY;#H31yiSOqNfF#ADM5H1ZD7FoZaWKQM!e zIxCLO7bdLEw{dpj;jlTmvMKDN%C^_2Jq40{R zT{x?ISj2)hojhoFEikLC8Lf-WXC6V>ioAusSzG|HVHCWQ4SO%gW3*7lHJc|i)c~Y{tXl7JnxN;t08Fe z{QC_&%+n>d4JpNK94g(6d$|h_e3T<;d2knjAB?Fp0sqO& zb?xbE#K53Ql<@~VXD@&wsTlGyjxd`1;Gj&ZzHMx9G|i6r?CRR;t(&(AJ6@J{B{c8i zW!_iFYNUW%JYuP!qtMN-Y~};i&O&#$d8Af*<#r)@UM59n z^DxP(b+e7^Syg(>_nlx*H!TK9=WcY86lI!cka(O}%>Nh{1K2DF)wJLw{hq5(O1n7u zWkQx&ApcN(*l2!31NOaPv%p=fnOYcKTUlAfqY+=lLWpm23o>p5!B7Tj#vw)umwKF> zqHn(NR}3%4g}>>XZDlF00hwakMJz1Z0K>f%Zq~SGxi9Aa&S#H;nPfcN&$9ywQV+gv z;YQ!I3hyY!+Ke*>apf*&3~G@^vpXG^pC?6n5LT|^J*bE}57J^Y8>-w1KG*B+P7e;! z@WvxGaR&8fm?Zd$WZl7wI&lkf8{{$arys+U{G78r0szC`o@UVN9 zRdI+0A)<0C6S`AEk>#jq3Qe?==au>0hmpNM2CDoyi<6$HCZE24!;^PugPfsQGF3sF z8013Cr#43oDcfFbD}zhEV&xdMOgPii&l>o|H=^>n56Zwm1K1qWHAY!-Dj_s-E{WmL zm18Ch2Zz*yNUQubONzc!lg&s!x_YH32WJ1wd>#+;630_;bptu{9n;hF%3e(|BVwEc z@z(HO0%J2@Y>-+`=Q1;_tc7PjFd1>Jodj28auH8CkgpGtlXQ@5^I;v`XAkLR2lro* zmH-h(Vu%b5HSTXv*mO+T0)XZHASXW`loo_Gw$LQ8+p_`#=SiC7gqy)e^@@Z9U1kBW zN`OWB;ItSCAv`Z^sE;TFZUisp9VvwhQ|0++nXY8I#I0gh#WruFWXr8$q`2nOYBH_* z(=sWVbRes*1gBdaP6DoeSQOZX0js10vz9_6N;7UR(1b47mYk z+&nI4y5trm6Bu9Csx6XcDm_}|%dfSS9Uv2DdsaHb8cm>bVh!Ozd-TYX93QZKoSX`2 z2O{by8BTF*lN>z`HhJxbU?St&Ns?7xBK__@q0#T2Z9{Ob?d{X;6%Gpy5^cAR3hhp? zp+G4@L|g{_P4ZDXIEzRP_uK8<)la@sj%N;8JViq(Y$EBwK~j)Sil;jW>S83@QC=f6 zRa%v%wBTwCn1Ele;r7sYWIreWglD@+_AqiW{hhl}dYI(}+1~0Vt#D-Crf>^YAOtQk zm?aaJbgnWftHitU29Jcp2Ieh+TIa>e4px#H#3VJuWUYm9CPSqre77^iWOq1JnOFND zCSP!~AD2mITHuBdEbx0hWR?fiE}*but5cy*hu&-vD$42j(&R@M79q6(kw!hC)0}y;Was^H z4rV>whXz*5AW6NPr-dno1pQ%ida+-lV#d!Lj(s=vj2}z6_Kzmx5*{H}xvmrAq*i=&i*i6B+`{5i3ZFuQ1=Ok) zzC_VE_N3h+mI1j5bB@YkalvT@u*-f|&EhN8Ekti63LrVG=@lY&!?E)u&C>E{#sf!{ zU=g-UE^m-YSlD)OD*)<8;=tn@5%J7n0kQazB6dj`FPfic|HH#$gldEgJZx3q zWKo>zU3`z%d)H^yQ@b=cGaNsbwY2#LISEayra7G_DFZrmIWec>@mUu)dgbsaN%{i{ zC;Xl@So7mlnKZOudz#7k){a%o%bP#%YNNdQ%=H`*C(?`sP|&{=T+obe9rtjxJ<8n(7(L;GB(z zs&Z0ZZU}7C&4wN?EJS;&YihNV-Sj#_CLRCQrIOzwN$^>I@bK!1COE*#1SWroO=qWL z#5Qs_>r{E6prN8DV*B~aj7ArYTyFkZWtz<<|4Q){-09$5FC}@rSQUJ~<_@Tz*Xe zVrgqXXXrFDby)-yLsZSH^A+O2t}gO44j-~WM^0X&d4P36@gTFyDfvfnY4(#OGcgp0 zkc&y3O-5zXw?SX$fhaTk7M-huSQd(!%6ATxdoq-OkjlK?WLL6VgIvL1|+3QmKwd8rbGF?7?06fZ#p<~kL@VR!YIn2hcP1cGe zCEKN?Ebqv#yc46?5h22mle9;q9y_}Mn+C!a!EyhrN@TjV!ghTJO=*XC&Dn>ABzi$T+L8rl z`srz?^(C%fT(BEIRNUL^4quP+;o@?)VOs~}2HwvmbA8|>BSxqH@sNYsvw>-jsGXOY ztALCotU$w5nY?juT~jyu$=Vx&`CMqI+Z!*)VLUt`DVZ;dX=W^T5b%*6ZXj!gdkK_n z@HqoDs<|O}5sz;(2Fr$E05YW2k?8j65`iLa>$_^f^@3CUt%3t>W_=EEDq4e)lgWPA zoF&D%P$254${G3@NPT%5b&bRWB}0S61*2h7Xy0mCla+$0XQnwB_{R;<_ygB~6j%Q~ zZTdBuZ1($hddT!8tCy_MT`5NR^?6ZVNskQT{fS`v27vpS|gWf%xu1ts9!M#muC57F1YtxlT8}z4Hg9Y7e+1Y5s zsCU9kV;(#P5E7xwzN@_NwJOY0M=@L5T$g^E_HE~`ix1q=0AhXuCo3K$5Y2mL8xf01 zSrrXdXu1bdLr5UT@Xu6lxJ z4sE#F=L|szu!&?miY6dE18)Gm>)tIUo0AD24H+wgH=|HU-hvu-I-d=FMzobf(~dY_ z9CU#&c9kwh&V24fC$o3w+1XWYV^a5zA#ZaY6|+FQw&qnK&xF<_)R82?OwK* zNrUU2?cq;H>~Tkd%#*&)lX&kirrKQ6V-I%MVmOV>WMQK3a(ZuB<#ZnKG)!G2!y!$I zM5FLEzjw8TA;K$8#kTg=ll3?`Er}XgFqbAS5<22nlgGM)vBsdwQxjYLW(aP>j-WxM zk$EJIR|h<&M<;~5`#kG?+Ct~{YD;unWcWol*j30;sqUPO0KJv zm6djW=_}n9+6cK1KOl!2oXjRKmbDmjiz_Cl8D(;xWDgN`Xrd6o=8JH{H-8ss-r#Jc zw5CSp=;29HoS6slnb}P$1>s?Kk`{SJhZa7Mixesv-Aw1RqdO5|2j<5~f{6QY+U_P5 zkL+P~0-_}siQD|R;b`=u4ZohPt=18Bf7ocuep~TF`R3^8YoGq46BW36i+4e@-67a= zZcnTMYj@{CjU{GoGZtXZ?(vqeXvnDmBO`r#V6+{JEQW@OmCZ$JnUF%8nwTNfS+X># z3tj`v%!JgJc3w$Ww#?(;6caOGl|c%VPx7c)D@jV2O#w(Fcn2 zm}bXWewsy#8+dI zS+k%NK5!A;L&#_Ssmsh&gY0kd$ebpmMG@ZQqCQ3|EO3l{u|*PpkTUUoeMMqftF!U< zDj&b!`jb}GYPF7At@nT4{Ihh_YQ4YzD}O!xTI)~V|AY5ht#PaMt*`xFtM&drI{sSg zu+_Tq%@dr3IcT-6{28yAq}4JT-?;kW2Uq>@MjSTjkA0ID| zagy*y`|up|j|a!oNm9UE z|J4F_d*#x=Nl^e7XmZYsE2}zS49`tiNhA!{d{pVJPpr(H5A6msgV@?Kn;SGq9)=$2!u>3iNg|7Zh?&nz*r&&_?qT?^zVVJ(N|3?JV9|}xg zZx$WDSZfO6yYKQ+-x4|0M2TSkU3JFlqt$q)Pj#Bs~C z3?o0}GMe-_N_vtsD1H9@)EvfDavGoU?@xXZc5tsqhldH^~HOY&Ln&RJKje1L41OqTcla0R) z(nC^$i+J2Ye$@W0o42=3ksPLFRh;2u3JZHMtiD|74)eirQgqWCcUKS7qF=^UyaG}a zs-M^e>dz{r4dUWBNhV3LpI1Ja{qIlyHj(~+@(-EJ{(T{{_nOJ<+kQKsu|N5`H=;2v zN@3iN(z5E?!aou{X}LQoa?0LN76Sp>77~Pbg@$F-U&g|-+>Ohl0!hQ(s<+9}q?=~x zxt(bl>MN-RcyW7GUy~$uQ+DA1&+Cf25KLTlDDh;{*e2c+$ngZnwl4)E>nhDK>Njdr zeq6R)o!qiK8p@AGn48L3w3p?P-vBQWm%)5BZpIMaQ|l*jfghJ04RUrhf=?f8i}F|{h$96vE2XlOaC)T_P^Ss6#inZ0jP)dci_Lj^j;X7 z`{4&y-Q|X&oI-2#fk7G833Si3ZXRYZSeU%fI2w~qR6r)B!EpoZxJ1wy2tGRCL53N)){}3R;dwg#{t=v;fiqxd*6 zyugt)z%@H#SMs6#>Ne_nZkl0`lf*NtEXDS^v(YlLdxcE*Yy~)g%F}kQrPnho7F~%D8ylsoHVy0O<4#rD+@A|&L25d^B z@mgAIPF=gRtHs)tyeoTkSkn4h$=cRTOKR^-_qe-9TKU8Y0rNq)1B7q|Fc`uS!i{l& z7-GPX!~p_du#*6RK)7!Re7pbOd-bZix~E4g$u`ON{r+SBv@_jxzIu1PdL^0X`BGUS zel>9*wJ)r#ocGAjkahO__GidCUo2SXmd|mj&C0J zOg=$bRblV8IB)pk_!|bR3V#YNvJR&o+sIs`+ zKXS$Q&l`RplCPLN+0Xjx1Flo6ikPIh*O4qmddNM4sgObX4*J--~)1IaS3%oy~}gZ;fG$)sG3(g?wC0@ z5YFHO{*8g-mgk2@`GjV4lo^e#1>?vIk9Vl=`p{5^28YAHkM&#O$ut67eU?ape{kDX zs7c6&B%%BS=0eia35L4E=b?nos5B{QNrE4SDZiuKjSUit@za73)1!H?bJ`sj`2d&c zT#9Ptz>|83CjM~KOjl1LY8ecmz5#FoF1NqXk@f0ZR+~YmRKS#ul#ojaQ5Zho=lI}3 zp`ab9KFA<4Sr&>4(xzxK%%LBOCqqcbl)sHPjM*V2GN*x86%S9kVs2jbw z;H0#U)P93}S_d57ZVv^3c6_5;+4{n1&)lsNKOR`Pm&PU#|hII z9Ok*M2J^U_cj@zh4_(FA+L|1M>%Rx_yrHMXo2lSI^+l@nDAjT5jnFcfyNY!T&)%>g z27FH3^(asOubKRatgad#83uK&WO}A+8D&V-3JJ=3Z}uD;qL6E5uNbnheW;qi&B1<| zkyX&>DpJ-fQ6s1S_K71(m!HRiF!ry zQ_ZG1g}xmD` zd1=~rrd1258Aypm^r@N~lC3FH4D?Vf7_oJ^9#VVda1o3_pf=(w+`J%r>E$`JG$c8N z84ujA3AqXg3-L-N6Na!^pOV14+GL)pB5O33f$^U;+2ql zSuX~-U0)2mI^aCeOZw*VmA=@7)ge$26OA^<9 zbTpDD3tLRaAK=6TzKIM}P?;RRtWX~Xh%h5H!LcDZXqoH|@ezzyE^;qVJS)Up#7FTB zifRrqUoaxzbd~M+R#7A|p)l$?77}n|YBywn=+|=wJ?ut5hgIr@L~Ig@ZR&DPjM@mR z6`Z@kDSW3l4!4jUa)Du1sW&OHwyqI*Jt&-}j!g~Aqu0ZU2pEZosD;BwLpl#vSB>JO zGP4u&rae&hOk{c@B>^GhtmS(CG-4PqI&=rNCJvhAvN#;o8e1^U6U`9ujdfHQPVh;L z*pQ(FmL?qL6CxntXy6In3ZyT*hRtm>!FF!Q`(4rTBppr7i8gUjYS5d|8UgPpx<sYXK>I-5-d#`qVV)Csd|(=m9iv0%M#+Svxp?O zf^`)un&645;d#~q2G!LeOM=p|;%z1M#2n3{u=cf%k)!ZP=>r;CL})1%Yl#V>fR$&# zBx=;T)oD4z)=V_oTB{b%S>Z$6b=)_6Q|9ImKJ*rYXXGUr@@lLU2xfU@Mx37s?gf{6 zjr_==irX{j+Ko_)K&G*_o%{q?M3L43x8U$IW8Rm#M>gTN8NV4iZGCgB8aB#LyuqaW8_3 z=#sY{LsS%mTZw@8Nw_x-8j2z+Pn@ED$+1nmG8tkPdRy_*1{_5;t0`sTBXK};w1GH~ zLxH9ekc%eB1sP&*@soFDapZkQ!STFfg&;zwsX(7 z%4LX*$3?Yl4uO7iu2Zv1X(7EdYa2chT#*0>e75@h#ZsUIY)rPq!cRFf?dIe9dC@6{ zMa!Ru6UazTBz{jZ0aDc++lNyF;cGXRxn?6Sy>z6fCrhb%g48Phq$yTm)vAHYhPO$J zg(Ut^h@*V*td5A`R(a&}QSC_`I+iO+f+nVgWvB=*Y!-tX!Ia{`*bq-5`6a|>W$g_+ z=zoe=4rqjW|rO1S`Onpiae>)C=-Y5xaBRJcpE05*f^)EblL#KL*)OY(cKe5bx*p{ zp18rOsROx$ZNO6R(8X{)8ZWEfHh^_N6~cCmwi+y8+>StB86y<ZU8b%<&FB)h?+mLT4*-bZVtA-A3TK1p`}jlLC(@8b!hGi3|w< zJ7mCh9d|cRs_)|K$kkv9s$f0LizANLK}1o{8bfO)T4X%YCH3({`nhj;1OQL!41Qij z6upFkF+<@*PYuF}LJdG*QKNSdV)VL5;#3GAk|(U9!I={W!fnR|8wu-6L=uGt0vt=O zK2-eg2`y?51y)il%$4PuH!sI_P0g%91b}>b!1U!Sz$T0*k?-^g!htZz76DNp^8IMd zoikOj9ZZ00WzYEde2BJJ^f{BP_h@HX>4xud&^>k$c4uSZ^^-t|h z4u+g*s3io20)C_KuC8qVJlNT;-*M$R#0U5UB42#sSqkk(AzGE{aF9&Q_?QTsk|e&c zFJ3BP0d8W*f-Ec?O;Ku*?q^8|M5a0l*2jyvX2n^EL`h@hSpz~P@Pw2$>`2m405&NE z&|_=sx)S|@G`(KThZ`$(;%fb0 z#^!;$h>6z8d2&xae*P0!zo+Ik3Qw00x5|bc+>bY=DnQT162W$GHk zdG^CWLrKW>aX1wEgS z0!|r>0=;q&D`J(n_}rYEH~V_8f4oc<`+)2rVNJE-h@={wJmB= zBy`m@Rhj^ZRIB?u|iAltS{4X2RKeAxDu0@GPqqPHZ9qKkDsbb%#fC-R< z(N^WlWxI}(0kU6u7h6A$YT2-C zd^-&KA(%rx0Lqxs_k!vWl=ck( zLy2vPZP@AQ9a=mBjpUGNkJn~yHj7Fx6!aHb(nF?9_8KUU5j57~m~|RBWZH);`Fd*QgC$9zW!p@@vLPD_J#+#(LL^v~Le+eW7Mule(hx*}rNT;X=qgv?@ zQci{JuS7V^5$GX0ZE7aeNE=xO0Z~H~F%e(A62BH8cty+e92ajJ*CL{H5Qsd{v@Cql z@VM_dyzJO`>NdEy$(KWejL$xIW@kCF0R`PwLi!3%NqQrqY~wq4E}P{ULcj`o&n}&Y zI8q6b#I!;>T|yq5m>3lnI10jPtAt05B%e(4#CAF+Kdl=SSg39hJgaQlaCAchMPfVd zdTNInWFK|aX?s-o{zFJiWbYxSlzU+1`c> z_gKkUw6Dz*a>V*2gaCMQ{VxqY0jqYj$A%!{A}g)-@jF=>J9$^)bRluPj89j2ZhKpk z3Mm2o;3Nhv{SgkABnulOzIm2-ZhY`B$FvFsF&MFc>U?^#}m@sYpU zv+SZNm|Kt}2AjiNBPED3o(j=7DmHOteXAnMCZ;hh1Z2gZF}XA2Ic3v_TOHyUAWb{K z4Fn7N^f67nRQL#{ZTvP)`x3oLLS`ut9p=n5PPrkwuB5CoQ}R8_?*6m(UMw zAJ^|stEozZU)IA_!}X~Lz?wE5NHHjzbFQIUzXSHWF$;-K!HpbkhR@5U;rZNObhzic zzyhSp4brn?1hN+Ghm(tuO>(Y!S&`PDanMqBw~84`=5|Yh>`mr(!%e=&dXpXMs8O<0 zMEL~FOm;Z1(%kc_07^seV`z54It#~Jo zu<&Cp9lIgfJNZ8?f8KOQ+yIFqz6I(n z$P|GET9Y}Nrf#N4Pen4Pj6({sfB^(n4vcuIYC5xW#0h|ebW^|pp#8l(>$R=5eIc!M zkZH$`)Tm;|c?Pgf1khU6nRq3vGinVQ=fsUz= zGZv>M4mPzWDQ{bdPE-&hzEtN5Axc)4;t9#%5}a;^C!Y{qe1Wy`x@+^e1s*Fr1%e%i z>~ok~sQ>0x*kN~Eafit5Kry%DH0ZElt31GjrP{!`Ej=Rg0t>-Y9tVmL0Lh^e6D_G9 zze)_aE(dw;$!GIjQ1Lo*#;ARSzjJFO!zDBR+nsCOK&l?MHm||BEgV`wt>M)MFK^oa?qme;Dh=(w&~^vg@o>_KM{iq<@{06+H| z<+4aUEN>4H8i_v-NjV_v71-5P!!;_VZ@L~<%B4XKP6_bT%BCxl*tXWZno%wA3vJYXs@SqK9iE15bp6q}w zVKF$a235>v3;2Jcoom(Q4UeFv2d#9bd9stIRMO#ArwXw=Mp@M@fZ9e${51F$_#T+W zUN|64BkD@?WEW5I5u1xkyyPi!8du;c!OL^Rm0qG1xV9@i+1SEK90_QQP(cGmcbX@= zd5VuZWvjR(JDl~a?XEfFIDR`E;%Q%WE#GXfVwrYO#M&Wm!=mGs+CAHvoo)9_+p{3G zZ@cSM96LNDKmb@rt=pb7Pxh!a=m(!7&Glx(&SZ0$+^(Jm%K#3@0CdBSZwgG>!Ryh; z@}%xkYDb!}JV4hHpsj^TIA)i`@YF&fcRRzISEZeFWdROgyaUKrmi(~JiKOn~0vU%K^vC5E^5O3l|_1d}>Zzjhc2aX$+ zY8i%L%n33_fdQ`M5QpT6%2G;z0<4r!`Umu%h4e6)l>ya%^wq7PRix{HZ}P;@64?U* zBSXr8T`r;U(cchKt$uXU0u4`C`f_#tjwV?U_9VlmXmY}Rtte4<3M>DF&{Ku;RcdEa zpacyo6BdNGjH*!OFswrOK!kTxy#Wx08xJH>(7G~!_11%eb=yvnoC^0T zMO@Hhrwm=tdz8iM`jamju-5>>k-5s0@ii5}H%bhm`X~u5Egxyd9_JD6iTx_6eC%`4;RTCKV6Oc1(3NClC zf#BYfLW1#vMg{`kw1ayfgUz0Rtnmnj)}PAIt1wmw=w69PBIhrxLa(-lS|;FtsL{2h zvYf;&OQ5)+;37>>TPC>5)Sovip;fA%E?!s=K#gYJ=ps${)VBfJXnh;{Et*hIZn6ue zQr}8sByxX^h9a4!9*(qvvB*|}g$u)WrK6FnOQRv)v&zB9Mih#yZ7c$>Xe5Fgt#Tk? z%v{?j0(7R4DCV=u!2}Iybn$q`gj*R?uqO~u)SAWw4K<)jvFR7G$O9rua~Z)PEWAtw zuAN`fm@4osku)My>#~@$EMZ+l?S#{226=47E`gw|s4A$tZbf&Jmgpxg92#EYwG`+e zUW6lB*RJN2GhN&ETG@<=Lxa^Mz2!2gg|3v+oK&QaKF1b*2v5W+8yao#k#XUnh3IHy z;@7mOKE-3xtsaNKs-T#Q82$EuF9m?nma*_JgZVVdcT+8*VZWPShg)Q>pwD(npj znYi=KQP3cBMX65l{K8A!XO{xFAVtadBjr+LhA}mCE)Dcc*HJ7 zHe&$(an%EzM?sZX00I+3gXpf+j6HHJ%`>s1faZOtAh%>_9bs1{J!#+I)Gl*PZtywB zDe)O+shPL6P1=K(Re0H`+2TYQ*pQSP!?Jl7_spVWm-OV(c)Ko#J9Wd-P;&-oqybm* zLP@y`iK_(oA&*F_St*oW7DLb$jhmo2JPkoa6xL&xm-wW%5R(D1H8^Y@<|zuvq_ZBG zOiOSuV#QH7l-Ml=xt>zu4%bxGaD5A0G++U0`=MZ^$A|lA?50&E0L1iBqDfGRM3e2@ zHD_xcnAE_4i;(0BQ!dD0CbE8sv0#Uh#DpzGQj%bBhvR^0o32rwaJ0M*G03dFops!z zDT-)M#e-4u+0?xlH$&Mb1UBxUH*DJk?Ip-V5$pVH;dDQ?$E${4oTvJ5ehqSI$BY-~ z)$v3(3E?NX&T)?kcg9iAhwIsnqQB-SMB=7=)2$qZ1HdpK5B(B?%}^iKEFbE-YGf=u zG&npm#w$1q;ZMR%tUTWtII}i+WgB4qEG7$7%-^y--zb+y?DEnm^e+b}ahZ&HVLQlMrW5(@bhb0yk=4Aw zMR~y-+;FTeC|F!vOlzBGc)?t%WG>*Xvn>?ZLP5D6ue#=}bzF^Yd}x#>_8kk@b3u59 zX-u$vj9a}jNI#K;8symWd;<%93-8ZbV zhYsj~ohINU12#?LolFeD&CR}bEJzh&)O@F6_*PL8*>=LG$pl|WC&TbVP0lPu`_cOV zsZ-!bG!}TT5!lgoiTMK6L)Z^x8{ouI^2@jIg#~`) z;ot6&MMQaGw2bhfZXl!O2GyD(NDl;a; zCCPVVBi^;9i&=;V}!Qo99Uph1kOJFmF*LRHzs?JL0;wie)?KI;}dkY5SBV z#R$NlBGpYe3|#bwpz09Tk|R(>7EB1!3Un#ZZ%dA!<3|d3lTi{1B+?0`Zh;Yz#1g$c zl@qGJ)C{1oG~>m5#Hf!@8Zc-p%dxgIIB|R{rzz)FQ3Obv4RqTPa3MPNB8Li?Rc z6*l8QWn5hE5{wYMS(x~1)bTtE?qgLEx41DVwgvJ2WGLE>TN{uD(LCl~V*M?dhZu6_AS(c|*~!=rLaStJhDi@W*cE z$eI#znG8m?M|>1GTL@rBrCe|4mR+s+AW8$E9Yxg|teO_EO)NZ+pi*8bFJ(c4Gnzo? zt5BhrL3`-8NqD}SfE_>L4Ek$D(9jG`NQC!^38^mmWkI#eKt)ueg6;ZB>V1&)}d> zVyY>kOi%}eNuZl)b&XGIqgqY#=}CJK?bJvMzQZr04M(z(E(=Biyi4nkC&DG6AOb@G zA{oUZVS$1$R){8G0|~Rompq=(8c&N?qRkMIKxv4`vgX1ST(1~Y8tBmDw^7T~({Amj zXbQ|@7*|URA2r=s$E|R2u7ie%V;0x~1}AEcK#TES7vU%ni-qba7=dC!ie*Xu)Gl8D zM~lO104e#YWl;|z-%5_{r%b!(E>->BB~xD47oeMfcj)HZK<{2=bdP^%a&El}PP9=G z9UP%Tm>GlsPa8d@05Y_Og5&`>Eug~Sh1?<-5Cw!!xIPySo!a0-lH&;XO@kNc zh^bHIMjL22P7RC`*vBA^bqd0Xr}!S;6Sz=u_VUhwL`F@wQbkSBbUjn#{MVLD(svl8 zz(GTI7u2=m%{z;!VC<)87N!+$yD_?|0V5xf*^q;-;CR=HmMA*)d8=fea>$aC#b6L| zCN(|?lz?DYDXjwTB@wu8l3?Tk!!UT+^8GSe*c5t2JOnf#vEv3oIKFAq0WI zfL|TKdmhB4*<#C3v_!Nt6>@#WQwHAVt`C5FwPMlqJdqz0SQ3WNfF6n(ny3+;`S_Be z+nAN6_;})*p$_2?Hf;QgFq~4m=%VBR+jBtwvph{DsACbQ5=qjXD7=Zw081?I3gAVo zNL#SAz)N%|G38Vs3-`HtkcE3wp4WzgJO=$&qR5H+Hq26*jDiwD$!l+jGwn3DFgB_2 zBC{uxNn==G`J?e6e0bocf;e(etVY8Thr+P%9o~v1ARy8;J&!B~h$p069DxY|NruEP zi1q_AxS_z|)-l{kHS8tuu`XCn%_}d-lhdjpf%S-~!kmMO;F)u3{-|s6 z?$F)r@DelUnJ&DfcOqb~we?8Ghtq9zECNJ*+3@_7hwd&=N#ROPr@UaxFM51MTP`-Lx!iIS0NzlCK19>K-ZXYTpx5g2`}+jUdSVHnH#e{ zIF7>I$jvaRj+}x|1tA|`NTFsfR$Yo&*acVPh%6Ux6)-LEa z8Yp%V=(R?{2`;EWt!P1(g|ZY!glJQ8WRkPcQX;AmV32GSJ2cTPpzd7Jk!B+V0^^H{tFfDw=}=p3*%keC0BzQ!psW zi^GEm>p$Q}=m-cM5nFIK+CECzxxV>9>Pp6)!}xY}j5$udRqHNz1KZ z+GUoRbe53}h;i4#<>$cxiIO>M*=C8C4NxMYc%t)h)5Yy4U_APBxD}~S7y>a|6kr}pp#^r9n)U{ZME!}7Sn7ajMQf!7owF#|bh z4ySZ3k0kAsOQtJbLV|w*FBN>D(E!K}!VwTw5GN5edU+z7#{V>SSC12t^&_0AO^FK> zGYpoUHWsk>Foxi0_zdsSwIPR2RM?BQwx`5sF?xB>7>~j5E5}BLPBjy)k0*FKEs{bY zL0X8Sg-nVIuK|HB48w$w<&6rdAe`lk3HFV#b;}oYJWRKP=W)K3_EHXAR0<{vBCl-TvlW_Le zf|w=@FVzFfK>UI(Y)rFw5IwS}dFr?Zkk?I%cQy4iX`tZ1E zgHi>XM{o(CxVVx6mg?e_07@ia(;P!o8iv#1soq)@HdDYqN4P_BSY-iQMi7&=9jM0? z|3hIu^-zghw!7G>+RX&%vpq^7O z8u&j52thylOt@`HguC%p&AF=v0L{!`scAt72>H5(`oNb&?KEx(Jx+Q%s8kCL09+>= zJcTfCHB|5@lXGPhBP^wf*KaOZMU$uaQI+x;W9HC2?JWd22@q%x(>y`I19zPZk)MuT5X%aJBBn~Cb|&pq+-Hq#0pb^e z4Bl&O1*01aJXtbDpyL{w+2+&g)KzsF6a<~e@r6Krg_*#IjrG*cUD%+=I z`X*jYDV+v989fkyN0T5pFc9Z*zv+PKkJe@e>EaS007q*xWve(?Ri-yj%3|^?(5jh$ zXj2ja`4zbgc!!|~=9pJckaIVQ;U|E`fo%16F-w|<-35E$_8Rzr_;&kK4V8@<)tucSrl`yG&!v0~XZ-{eAcqASL-A$2i&>TnYuyrAHolMa|* zYXj~SMO9A(p|k<5O^qz7%84?oAi3fYpkQc*778G~w(cMJMK>35)tf zc|8t(V{kIZb&Sf2YH%F9$}$pH^$F-Gl@`PG`;daQoeY>Nlo|CwJ6Yy6H6no3uz~Pv zaykO4NyH%e5SR@y*87U>IOT9yv9YIZb*fE5qMC7$PA+O=p`Tu0C8@JANF#{W%T$fx zF=Nimh;n#9oouw;a9z0z6YU%qTZdCrpr-l$n(M+62X;+h&S+K&>4w@MwHwglZt4zo zEhc~-Ou-!CgTW7tXN#1dnsr|%p*<)tZ(tUJorbFS^2D$i&tJlpDRivq0D(Of(=FHzo}bc;E9jk~ zVjtHqkhsHxzSWrD1@VWT>)4!F^<}{Z_k9Sm(-hmV)!U8&PkXI_IgJ(??o|s@Ob#i$$JYoO zDE|n^yE0_rT7o2OzJuCh2r&`fQJymFgha6%VhAnT(N!W)HB^B5Q_QBok1j+euHz78 z?QbBvLhDFH8?B_n9Z&M$n3dFOheQ^KTP=0XBQzViiTL=YOAI6$yQ+X6+8v`iB`{V2 zjz~%Y7)7@<9~HubG$gGOaQxJj(=@Y@qz?$&|@H+=`|DI|j)8K9&hxub=C83c3_VMO4i)S4&UKOL`)#ss>f zu|T7%JC0mmo>)(#BaRW04_UylQw@|I7<=LqFe0%}8e-0Y&Js{JCFjFDdq&8e8)!Wm ze_c8I4OW=Y*NW4?L)q%GhX-F{+4AKdnu;x}2dP_e^2qC>Bxb(LF$QX+%I)QDAza zF-W!uk@EpuX!^^u?mCyY9_uXK;l#Zlo(8Y-F(A6azf7d16d^QV((^@(saZ6mV3Pg- zSYkp38m-`l#7W{-svZzTUx7DYAF=M)S3I``K_Fc1#AB;9x9WH%oDU7-9i*8RJ74fz zFnlpcO)SNTINAiLx+ZKlWA+c#f4oZAm}H_rLV-iF=Q8E@$CG(7xf=#J)v9x@QPKi6 zaMww)!G&~$oxxnSmzplgTWLCESr&NMw3IjMp*jMTx?+An^3`_W_zJK$oi`v(U{qXr ziNbUZ?SKO+I26{F`IxTUHdbAd_8 zm|_)8w0eLH&SKj6l7q~hf)`=hn4E{AePE;%Yh=UijJYg1+8~88(i~;RF+k<^YGx#7 z#*$NWB?77Z8M8GP>gp2@Kuc2BnL^RXLdK0fuORX!bYHFlz$Yf1Ix+xV9pY zqG1SoMIqpCC85uPW2o=5Pf2hqsU}I^!bkF@Kw>xVUMJ5R&xY@ zjvIrLd*j9`F==h95i4LAyL3H5_^vvtgBXCCFD$KWEAV$hNK~SYqx(E2Ihk4F5#W#z{7<%P_xB!*H=5Ab0j0iTMp{M zk78Ej_{X)!``^!$PbkOm9vm{(RF|)+-kvRe0kXXd{ z<|4Gi=dmH~IyK*Pg~yH*FSKV+km2-H__NrnpS9e|BE+@H#QBunP0b320Gvfl1@fri zW2svyDW!CH$W96&f~|>Q8$xYh$WpFEk$qQ>9v$P+PHPakZi9@6_3z-&5hRTy+;)ai88+!HdFoG@WWssoNkirZ;aZtj} z0PT@~N##gHu#r@)&D?AjWmH?5CkDpGM#lJ<03ER>2{b;bpOJ~;q|i-+WU@FYxq%2X z0u@5uSs>HGhS)de!Vw>WhxSC#kE|-DuayWxKzl)}vvMHtQ$RruL7%eLpFV4{+#0P< zoj?sX4|KGybDxKkFfMCgXe@|N+I@CO>qC-A9eFg!Gsg{Pz)Ch$OGrSa{dI;Pu?p!NjYFi+Hi2h*xoF;RDu zTx+G;WeiA=mbB+$YC+G-hL4lXr8}l6uqa>Pt)q_Tr-W|O#t(c9Ldk z+1%h22TraK1A%phO$1;y(oYcb|Iwx%deq*b^WdtB-VXIWWcJoP*KY;3Wg>*J~g%~mESRHJ4VkN3pXq6>Q#Y%}or6M>F z;`=%ZbTpd0vaKRN1EII5BXTlwG=4CFa?2A&i;!0tT@8Z3aD{q9A(6_EpnVt30u89q zpSRo+8V&8}kpi;PkxhD5iBJ3CY+O`neqoL0aSP~(Twaa3CsY2#>v-aBa4iB)gP$Vu6+)17F9ohfilNXW>mjse zC^a|MisSS_(ZA4V0?zTIr$yy3LbYVrg8!-x{f_Z2C}g2!m0$Mivc59^g|xt z5+4a-V{k7DibNKjq>~u2F#pj7>YLRLsSnjF(t;`?#Zf1aPFq3Mk$LmpXqZ7DbqNSs zG8c@9mAS|;!H8v+LhcW_e^#K0L+D$iOE{$~;=1A@C&?lUIS19W13#pCBpk(ZcaG9C zm3S)TxQ9Fuu?-`Dv{vzVnkSU10^Wxe3*l9EGHJ&}XB0q}h=8m;GzRHw!IHx8(6o_N z4+y< zAvgd_Y)nN0Eko6Mp>Vj+(McP_NtU;kLuj%>>_KL^Qe!HHlLBu=I3n6=2q@Sp%2bh( z_J5-D8wV-nML0HDB-tTNQh54t4`0uTBSOFc6G)QH8y+Q6lNKIv4sMQ-@EefH=yvm@`YyhXTn)*(Z+2$H*(;tLa3L}MR(7Jfo%lX* zY1+-g<1UyA!77R*628L+h77Cx?)5|YXRwoRY+~mzF{T0piPNd4(Jkx*^BH5u7~ArV zH~q{iGq&ZQAO4xu#7=B^#RkSIjBRbZg|RI^KGwwM7;D~$H-XGD)_l6&j>#C`vtG_C zdP)lp-_n%#&l`}?-*m^!YS}1)H7H*VctxXXUg@}F=G*{?cKPD4TOP2BP6-M>VMoDW zAiNc>2oWa`l^;HOZtI9TA_kEP+U-D?9XEPBD{wVN+nM4iuIA78C~#th+z>(Vu|n-PRvHFDO9L$25XZpI9NSo+RH8lX2ffW@1_CB zvOJ0Hihz|cJjBGcLx9Vi;N$Ha@_hGFbD;bYWwUd(OKQD9QfuE(>dHkpuXxDvd{3v> zcYg4lNWrl535UgZCsTZIIXo54Qx1 zPFWJ@O3eb7C%D_WRl(RQU{MqXGHbc!BHY+cIeJoMm=Cm~lp@|*Y~%TCwkMU(=DWp6 z_#R|9SK!~YTiYvgn?gOxcJHZ?wo4)0+mp`if+F+2U-b%^jO%!5*+Qn|6f?7nDHw+s zM7jdLIAKKq8y>k@h49p0A}g7a$N>gvV#nZ|MBwfbFW`~^@dErwkU-X5;;npp<9{3%*;a*3xY%KM5 zWwRByO6_=WS13EESW`HS9uh#5!#+HFQPw-`iaj#|AtGwO383=Dt*XYu% z=>8I#jwI{SJdq&J&2?NyJ_M0x;QDc-nA%OzZAKq9fbAtn$qPmpu76jLgz@<*1afbx)2Jcf_8$zN&NrGB$)Rdg4MAQQ|)2CUuViEJ+4(b?7AvvXIvkm=jE zzklG$0|y7My86)2@W|*jW8)Ktuf6X28*VgaiY0S)Zr-~2Sh-?5)mvQ8uPrPdU%EA= z>|Z#tGKfBc-Yn!DmD_eXKBbKz*wgcus-`mwh$^o7(S~(|3pU=G%%QoQXyeI2yopa- zz+u-a^#__{p65XX1$E`3GNtE=k8%#&0XRRk~UECW&{!-N_F8E7J)xtK*_ z4^!&6r;N{2EmEg=gXkdN!@G1a!zZLmz>VM#Hi0Vxjvg}6rEmqGvMxh8GPZUB;6bR7 z<{)gq(?+QX4!dRP3Bv9~_)u$Wa**%f$-y?LMO&+X43HX@hn{F>C--5-Iyan!5A;8sx@9ApUux!O? z(94dU17h-4#Lv{;tc0W{VqmF=W6)EO8^Jt1w0yp=5RSUB@0}1Wp6PK$MqEQVc8$IX^%I z39TDG#MhR`xK%(!5n76m9FsdVN&|p##q%eqrywfC;(pujE0rjpvua|$?T?w@Z;}y6 zL1_wjiM$vbUFf6~C8oz)Z@VMX&EV)l_j2!nW7Ht6EvYO>^kRhlhHu0@m+DVaDn#^v z^ghm)<+74PVC%6wmbfeySRsd%kZ;6g<2r53V^2j!F+^&Vc+wq`t7IuUuFqq*%6+M zYQsw1!KqI1TsGe+VxIRcyI9K&5nM`0AAu;b!P#FYO0dt>ixFCU!QyPlGk3_cO-+s{ zHbE4vR8PsJg#!m_!DUOrfpl8}FkNGn(6Uqpu_(Bkq#x&wdQG=3?hgh?BM=1Y`7So8 z%Tv%PdT;g|8@RJ=@~PC`MA0g_i8hTthhxqpyN+Z0#1v$=FoDoyqw*7a#PycKm^u## zjbuYzd?j%|p|C3mOAaCja3@dPbR?VFHFaCAz2lC_$@EHov}RxjJIy50*u);D*ii+rTjI(&KcUXED z8}enV8laWzCL6RfC8$Myur7{Ut(~mYN_~q9P{~e_FLiBMd>SAi&IJaQgb_}0KzjI! z#w|}`*HfUt9^uKrKIX0B%^u#7Z{w{1rnD&B2BpIwQ#b=390u8SB0CuU2!K#&q$Tm=jKq|*N3Ael{hPDrQEr3a?i6KXpKnVql!zTgZ7L9aoal#85 zkYm%5D~eC!bp^yGAj4#wn%^s%Q6SJUa(R4?R#CQIYf^nx_bXDL88W8;N(NU|s|9HiYW$hkS)91YWat z(uyp*H>^2pj{8$Fyn}{aDg(ot!A%(Qat3{9L?JDEk~ZxiG{gmIy;LF8@2Pt3E1?g5 zRnp9N8Zp_ZG=qWFNwfNGX!&U@=itP`O0*SCxe*^yJ$jXN4v9&pri;mdaKP`0WCLHK ztUUtXQ$d(~alQj%Sq-3pD3$>=A<2O22H3F@!4qIr1akxS5}M)i`q2Lb%v~v$Sr(iT zJ#6)u+mIpszl6Ih1@#k*yFuV$bUzW8g0?9{+aDSmNbpt>q*3pH)hJx)w{1L^&1Quk zwhbzVno6aBh#}8nqc))-U>d5GaDDEANIq2qVuPh|6QFUPVhpqwBiaxQ0*(qQ%2u2E ztBcwU!n^Wv3wP!5QL~$5K-ifwAk0{tOPTh99trk}8?Lw+A~s)15nxP@01F~EH&a!J z_}a87LpS7^E*u{60-A$TRo6Mb1l{ms=2CCpbqA&o4USI?42xUzdJ~1Nu54FVV%sVk z85CT>fXGc#@=gt&<+u7Z*hSn4m zda^w`vpYL>=2G}=SH5fYFg>WClIzay%J%H+>dL3Y*Ik{vRu8Cy3Q#$SlFIMu+}W9; zuRWc)Rl{yj!EVnC&mPZav$c6W5o_H_1i z_2j$Fe5s>zXEwhxo6UAY+0MPIAAy4R9+!9I_wMo6(1wEY9=F7E-7u8=TE?QFyT{+V z$1U=Fb`68+lDG^L+PV4$#s|i(9T=M)J-kmg4@kWi&&Krks z7#lEe7^&QH`Pf#C_QyCWG)Hau$-&CH_ZnsYV7EulX` zI{>;kmr`tfidXR(l+-bEX$lS$u=yq_WiHgEj1mwKE33Z{U`X1gE?is$3%lMUQMh!P*R7%~QY2R?ubGM3YE-=^L1=F7o zCdEyA0j-^&9!RfA+-!mTK6nmRz2vUr_^FcRQjfulvNH!)2=p$Q9{1)eDbKpq?Cl() z5+i9a2fl?+?@&4YC^#IzReQO7wd2yf?KeLYsFN}ro%@%u-{_| zAirsO;r0#|j~Ac8eKad8{3 zNIi`>)r+MC5&^t`l3Ek{9osi7+jJo~5iqa515pM02>EGj!;b@wQ}a^+h!e!K{;7V&U{>3O}0Tu(lo-dW+*X8E2a~-9E6o1x*Am!Qb2+reYtPAi5Na6 z(0jRtdJ{r8>YU^8wdB^OUBjL;y=n6BrCo20P2Nd^tJccpxIu-5Pat{tC>WY5gK~2t zF|>S*NG^;4q6%wT3TFO#FiEp7l)!_f|)fQ(}s17ZF%<=#)8H?Zyp=- zy!q*9V`73Ep~cP1HMPA#gyljp=tTOZmi40Z!jZZ@ix8Y_L@0$AkDgPQGKNO<(8fJ}@b9=(aa?_ST?pEeEU&xHlw#Ml-< z2Y}VOt&DALLOj^USaZkt!M=P~cVTJ1`|!-wyRI4>zNLTHbq9@IS02hhJ=XjeK%fVQ(Pld5;hS9p7!5CZL z1ZdyX#QuEjwaLVfCkoAJ-?;dJN4|9L@rzSu78gJDoR>cO%n!Wa85^5l{Ia*)^oPHG z(I>w1_Q^M0b$u{_Cf_;`?uX zaqjv%?tN3-!faFvvrb=_?s8wTdwhJh>z19zXD>f+`M#Oq#mwcG_uE6)?;pK(ap8Ee zuWxpCY1A+}abYgN>u;xLjAK{ivgr=|KbM8o*{a^0dWBy5{BL|?;j0f!wVip^Ey=mo zH@1BJx$PI;^pn3d_I~R#kG$=te|y_&?tWj#zx=Z2LwjCmo%xM(Geb|?xZ$f8{r$10 z-Sx$1|HH3-_2`SY?z{Ed=l{jNxBTGczrN|qWAA;zAMWYNop{x0^M927v!8sl@|ykY zANlrQykzn7KmMA%?foCk-os9N=XIa?#5*=tzyHC(jxXNyqCfk5>aj1cKl6F-*|6oU z|CoQ<539euZ*kS{eI(f-Iyl3N%+Y`;lzW$w$uY1b_)8D+}-*5Zz@Eh;j)$@O@-u;ob(*L>t zv)A1J2XA`iZ~pbJ`JvoJ?|FA>-)j%v{+xIGpSbtdghr#X0wjFXt=O7cRDfR z9|DJF4FCP%hN1jvjNKz>4%qm5#(;SswE_QK4~xo9hd*Zk@c}um-^N(>z0gb?Z9Mex z?|+W%+4ziSu3!4tr`>1l{680M?K`{WjMDutAARie+dEP}{r-*jJ~sG;4?iP2mi~%) z?zGkWqA%b2%h}&t^NWwwI=_3YD_30iPk(sqv8z%|-~QFxKYRX#@6B}o#roYZ8$NvP zL*@-nf5W!74gUDxv)BLa=$9Va`TTcW_u}=xJAVJJ?|cmp%RD^cyyg%-sLj3;!Yc?8E6-KjQR!?jv6*Uhu8THFK|g^Lt;L-t-^2yIx|v zA@k_BUw&ZApMURloA{HJB(C^MH{_ZdLe`t8)h0|9*{X6S6 zw3NpDwx)xB`1cp)A9(R!Ui!W3ZoXjMXWn3>?|%7(f5#qv`sO=7Jou7_dqFfBZ+PJL zw;XzJ;muv|ee+-c`!n`$Jo%`1;*9mLe&F+$|Lip%{`Frk^jYuEf9BJpdp5oO!GHSJ zC;szyZ=D-{*(bKoz3ods`rXk#`TWHX>@I!s-G5wcdGLAF<1h06=zHJ1{RbcWudmLp`uHE~6?_6JvZLE*!0dlXQsPf`SIK5zjW!XzuW)!2mkHP#oss|ZTqw9AIU!L8-M!h z7uKHp2L7gthac=8yJCOlpR1Q%(*L8*PrvekZ@%^Z7q$GXd-U9Iu6xxlKKZ{s_8T0; zqr3W^_U`Vvw_oya9bbD<>rWrM$^7ixwLgFB!cAxMM|R)#(H}kfx6Na_9{cf~t-t)m z2dXds^_?%h?I(S&K7Z!khmC!Ie)=y4t~mLVTk^Z^`P}ez(>EORcRuyGXa95NE8iL`k6$Q#{N8)r z&98Xg&Kq96?ZM3V9(?dy|MBkKfBxvZ{_0~#&i>rx4}b2^mR&i_x*3Z>;5y>%Xww}H8(8G8C?Ta3};p8p<_4Kh9eq#RqUp@S~{NI1!mUqqH_J!+@-}$n;zVXh# zy#15Uv)W&K`fJW?@4EYn(VIUtxxMNBOzsu0di24U4%KeE>1f9b1R-tx%Q;=>=g{U5&nfekxO zzx^`rU%4Vkdd2;5J8U(XnWrGpRfIr;p=$&)9~q35q`g6Bi| zb4S@djGZ~k?pe>yWsIHA7=tpWraC}sI{C0-!`%nTi2a4%9`2P@aK$C z*1Rr%fQ_;oD9sG`?TO~P_F-HbY1}dGZ-DmKsrJ`L+V84s-;9hO+J-(r9;o)4!sB1B z+TRdve{dJod7!M_h;g_HMy!g=zZ4Y=}~&JqRgW{g2*n04$lwrJTi&hb=7y0fF1`Ne9g z;?1>+hiwIsfI(>}yLJN1NP;5H04!lG!SI0*0T}`Yo`!39vS~9rx#diDf}O@rZaHys zD|^wP3+{>t>>|mpdQob))nac8yRC=Y$(5u0nRotcF#H(^SbqntviFAK=TVgc@AUi&>lF{H;jmw zqe@MH+UuYqV|oSX5G!0q6$*6~ns8KlB^Vi0+A;_p2ix?qE1)55YN?7@nK9igL9T^n z0#qiyKVAENiT3@4_n9CN+Zu{B0D*$mSrGP1QxYXo3Y$t2NhYzK6M^rpFU6M zjj|}{k7u6=_;q6IMy%pl)u*wcyet4OHer9&s;`Y{2Y`#6Xac4QWj13O*Y~Ob4%@Fv zYQByj0RLXchVrK~K<#aamKzuYd$Eb=u4yY{O+eh|FxG?y_nEM==Q4ISV_P?#3xs(- z{J8-Bz@ouAY(=2gs&=&^`#hWagn!RQ4#EJBV5N}b+)}fO$2`-A@~~ppQ+fFJdN!1| z7`v~DZ4))OY`f%=Yg&;boM0t}zqgr;0o!A<;`cT4azyK1(!`p#2yfZp{pT~5+w|kw z)Fsn@1U$ucDvk|#WuRkVLXz;|U!dC!2%Iz62^_9Y41gBMXu)YwLNo?I8`bKMVOB7K zGsG-lqNkJL07cG+8Io{(7d)Uzx03XNe|FJxScnfn1H=f=q~|dBFH)Px7@;7M`Aew` z%;|5aFBr<}sSKDmZ=t%dxSyoq0O`UQyHsm`JKzG1;WEb9Z>c<> z+_&g^8)NKYm;_^N2do8+^K!=6OK9%xjIkPhPigQ>GsZ@!oeX2_!e7#lqYq4q7p&)tl%JE$E{ z?0!b=^aAW)VHsn48Dpc=&a)U}X=>*R#@HXwcd%UM==(mH3$?Q!@RGjwLz`3vxag0l z%_|vWucPk=7-J7n8DR4trtgD51N0rdr?Snf8Drn2x`!BJFQ>VHC-oClewZJjyIm@)P~`u?k5HZgX_Q2uiC z#J1w!%kb}cjNNw@dk!1Q17}{xSn~wrkSb&{M~ouet2sD2RoI!$b+^Yp?vjt;N+r`S z6?SIjlUdiXeR$N7&1QkypTB>6?8@nhvBTpN1O3w@V}l0bJgf*-Sa)98VNBjXc#PdoLpCBrvn3=g4r+UUsm#DTGa@#+43P~mI> zdAn?|Ppf&FNEKT#bNLSF=p0p9he}-&yR{~^8l?r(_G>QoeuioQz!TfQ4x^{UqFOf$ zW!vcCeTN43M_~lAP~vZN^xMV<_KyurOkX{4gAS@rt;&``d)Bfoe+jxcYu`x!4b$U; zHx5i68XOu#_->KQwM(lNKg=#%8iC!=pQ;){Tbf}&H3H6Jaui@gc%T|M7YX(p#_n6k z(rhUIFk{W9Wgtytrec;X<8us5PIjXCTm}5HGnc}5d#U_|nFYhml&zVJT=-kc89)?O z`GQboS?Xf!^%CUd85QZB33W&rLc zG0rA-Gn;|K=&2%4aHHy{AgqIu{B7T^p2%B8QcGMy?Ur&X*DYXZd8rO4U2=-YOgDvz zYO0Q9`)O}pmFJ0V5+=ZjZ~lFD%bG6`V}nJI6DZ`m5r^gP6l0*lH-Rn#T4yt3O$o-D zKvw}B1uTP&qMUyIt%c?x4&es}WZ$*0omt&H(=Ho;DFf$Ph>tz>#dx4`=(133h_ zZar>5=CB2`%x55I2l6ad=N;eSH#;>KF1KAYXSh+VmMI_XwyH5_7F0e&y@#|>t!^tC zzB%VWvY@K#lxlQg{kD=hYt+hqs_2>})AlW+?7{FVmR-QV+aL(TDweHE7;8QO zF2x8{QtyD3YfBe>Ek#8EFH@cq(gX`FIOSSJKoC9E(e?92tI*N9VL8{T|n8Uob{ zJdy9}uFQz3KtPJ&`UPII%cke0ATX$EmbL+?g?fUOX{Aoh9%L=Saj-5}W3=EfbkK|n zJF^9&YT@fRV4{>RC~U!UPd1D>52RlG3UD6Mb)?Qhm`(!>6$w^TkbyWj6)J*i7B!(O zWOBYra0{xe*D$GIoR-+Aiqtj3y6Q@mQaKAyFbg~Z8mA;hT^UoID`^25EmmG0l~M8* zGzpD$8Y8J{AIq&6OI5XH(XI6$ z+Hnylm{Eh)l$&5CYnSBf;w1Smn}j4+ohmWT5pbBTYQ~tcOs|3Mw7agRmRggMKfug!oN8GtYN_Jk-63PK?& zU&#U@+0@COY*zt}H!M%sgZ%|O=0%hVh^;-S<6;6afpgij*4(Mc^$q{S*BIDAfcVG@ z&fnOG7i?e|jTdZ0+X$G!8Tpm-=DJ~b9>I+MNki%|sD75J zzJFx+%0cvJs0MWFbyKEj6z9=uKJ)ti1JnEa_8%OWJ~$#g3aZLw+8{T;@d4;$lL*uf z4KCnB8yWcN!Dtk-QhaCwXn3dMQegT)T^gUNyb*_cA-%<+sCVoAO7(JjbAAR6AY{@4 zr7~`@?ASpoo5b%hD}2Xxv@-Eu@L~%?lkCVQb}*I|ZV&YDIm0#m`8m^Z=S&n~uvi*1 zRKQ$2FI*qT3&+<Pj2!&(`bk#)qV8Y!;m0m!Kr$&8qj z_D;}BZwyVTvSAwO71X2N3WDeb0>Ni>oDNXG5biyO`GKa7cwUIK?^mh?)i{(AcwC4> zb{s&2eec@2Yi9xfNWH9)b_jaW)lVP>g_s2L#CNT4#1k3pvD}B-Z1-(o;H3pluq|Wy z#Z1vCm6jC6Z^NH(^l26p8Ys3Q^Ed=F807+Hm_@oQ{vOsTKs+SY)=euR)^(>eK3a*y&dwOs zYNlwEtr^!$Et)fmVmHGh!(9r?<~Na<^742ygoOrHo z5DTjHAnDEE#jNV z{Q{tY4=wDK)XWXtawFfJKEO4)D|7jd2(_vO4$ZE<0%#9&Z zphLp5LKG8aud~*i=6Dm#uD~yYeVgfu=^MZlE+a<4)xDILWr{V=cPe-sHwA^$r40O& zl6BJFd{C|8l*|Ip_H+p+Mji9mwX*lLo}oYSUR)@hR5aGEaGj zlw;gA7SjR^Yo6)SkkJ6X*|5#xt;cFQg=Q*-=bN~J1Uw-$$dt3}B-F|j=bc5c*^32Z zrnu576{p0zyE|7_JRUq6NEGp!CE+$O-HPRTa4!PrztRb4mOZITHiEg{s8L2~EU4d; zjm%moBaA1Vw}6Du*(S<~T@97G_3UEJhHT2A$7}!SVcd~lUz~SAKa+c^8*=%bLs+7J zaQtfM2}*#9r%H6?^0@cDerRAw76{bFCMK1+ZJCng9Yb9~$(XI`k&rS{V|(t?>h>9x z`3G@o_1lO~2{bl5QQ}+2GR1jU4ruM7WK*2d_NP*5n|GxM*^gh{dvx;zi7Co#``rLY?+O!J!YlqFY&73d5ex)+8dSt z^KOXq$HNPWHNyNZ>+abll_$Y4>o~hw#zL^j*i@ZR;2cn`z;nbFh6aWT98idU1DX{e zP4m#>(96=RTMUULNH`x_w-N=biR~l>syS2h+>AGGxMs$lv+U!UdB0ND-9QT4Lw;Y0 z>aVZgQdg)Bu@UvCezDxYDq6O^gz6i7(Uho-_+afgzd25QxyYn7L{V{^}f5S?~zmd!cC7XDh#EW))NO5cjm1NM=&?2JYOu!~x= z(Ws>Q~}8`$z-${&29AO=V)))~?E z%!d5FiRrN`XWTGycx-zAmD3X=R}TyWXFq-7@bK`!A@KlOJq=w?vt`3Iwa^ocb-WKF zZ0~Dg&nC=lVozftrvp!=Y$pXaCq+oOHCvBqc-nHsShL2Dg6_4irRd1kj@?`0u=^T` z-N44h+$E0hm&ol3CXa9V1ZJ{m=LRnsX2r3^eaq(YsslIKR9$Pq@J&qJ08sB?F=`{41M54qt;`Vgdtp6<+E;9I6 zxyS-Rv>LNMfSV?f^ogvUa<|4&?h<+3wT>0#24ewN+O^{xo&aaE!B%o?Zg5DUK!j?# z?OepZS~F!cM6&1#Fx@(@nNu>O{<4y}V3wUKgw<@bijFNd%kgg3h9*~x6TmksRovGP zOfR*?3z1q@1@@X0j;6}aoRhBF5JnXf$+X9Iroqkw(|vD2Vtts$1dWAwOstDQE2{+` z)VT0{^cLUngm&n7Z~yeczx zYo?J2WEQ&eKm*9CuI?FP0ui1-R0SeX5rNFgRu8!*iL&L7xTJX7k|vobv(-VckiXocoE_=Bi4x&P8=y^K2!n6Zd;%y9@e4GGaGxDT*9=lYY!T*4q+*;e&uI)BD-D<7Ys<)ZVwdH&E*hySoo`;-S zP~iu0h0V>K$KACD^|goH^_^CCw^^%p>WKz`0Ty&LZs6@?1MBr#y;bcrc95|UU4tK4 zrsliJnyvaqqut5YRgI#-o8|URQBU5lihfkP`D0DCB!0vlX0-*XjaV-m0QR`pXD`r2-* z1<~$W^-p%|?M`B)RTJsU5b6*E^YbEGuo*w-7k>)X-xAe@I{<4YF<*JoF{V=* z$$;Z$w)U9X*2+sI$tAJTh}}zWrgB<|xt#r^x~e;={*U;iLg6Y)@B>`I7boBf>4;-_f|iZwbDgbH_ggb2loCkX$kmMw=^E*k)G z@wJPF;0t(Az{wzKz~e+(lucloL1Kf^1vFOZo5e&}K}jW#ES90hIi*vWWss>P8m0%4LxIpvC_OQDju?a=GO5>$ z1RG>(3XjJ1wU+|fDlx;O@Gs=bx|4;HO6|n4b{#H2*<#m`$Y173sb7E-ry$K0bJO?w zRnKlyE1*$33LLM$8&bRDx1GM%8PJd0JKK+Guj4G;UcE zv55j0?ZAEZ6;$>EhY{<9ZitcK#dne^{|DC?wbS}jOrSe3puc}Bj9x%0{)|O{8Cn|l)%7f40f{a&_{OS z5TsMbLdC03Ooo1p!DBWf0S(7PWH-hm*Ej8ORz&ibx7>$_P+TI;N7PwDb5wqCcz{g>|Z#d)P?}fkgxr~ab1wD zNpt}3xV1A0%;ASuc~5C9kryy9hHxCv5aL0XhBOS#J`IT(P~!O!qyaV$sZH+o#u2eh zj|9{nivfUdmg60go)ht&l&f+0l#eSOMptJU5h8}o+{bD*6y@+wl})9)!2y$ zYUzE7C+!{>42y$8?I!C(JZbm99YPeo-KsY?t84Y{<3{H}cN6-QK2Y5U^%gr*s?Dat zr->dQxTt7oio3Hk13&VAn)Fi=ulyiFIrb7XCmgo{7v|?g$sdQ-fDX<3EPg$#+x1xJN%g8~IlcpK5TI(5tuD>qTY>slTJ>6^ zovtj;$8)F{2QF1=JLDXaOzS1P*9Fc3AOmW=8uJ~O`g#w4j3Ct^1lDo zQM~UtynW5`zTcJPUku%-ER{@m-&Kjm|->yypi)(i=N2 zT-pXCqUJDdTh7}|S%aRH+qRQ-XL7Bw8-*lObH>IFsOX%^FiIS6BFF*rP0e{J^~YH} z#D+3QKZog6?y$;p>Nih{BoL-d4M zlO&@CDIQCCMJ<(h8KfvS{bdkG(M3$(3{qrEoF;>;WJZds%qOL|EEI6+ouP8Lb4N&4 zOJ_qwIG+Wr!PEI~=U!({7Fx=oL!NI`tmevK7(S~;pFDq5@2_uvyz}_8rB63T_x3+s z#XH7V>YLSer?D2J19W$Tx@H(TR!Ggj8mLFgHLz`UY02|#=A2|Zq2=$>;BW@gCTABu(hD{+D z02>;sX$iI>t|i7~tjx^MRI(F;i`y*OR}9adIX%-eW%Y~f!P#m4O&!gDhij1&V-}QO z@dp4m$}kF?-Wc>PY-8~>Fg?>fguNyd43?;J4xm^uO+w2AgB`GTt~S)*3h6U~k7360 z75R>Jr5Ee;s+h!7a>!e<3~mvkUkaV47MIEu1HTR^H&+8WWNKxuTsH7az($@e8+ryw zJD)_yQlX-uscFPAj>Siu0fCKDP|6?*%3URdgB6y|940EvG3nu(27xSMAdUKmxps5R z$wn~Q=ah%JmDl6?s=S7xE-D2i5lLSG{oC9D0e)kAmzE0aS|oj6@*Dfq ziu}MC&hnnX=RxK1#N#u2`P|YWZIvrXdFujQHO6458ztk=>^ZIz9ZHJ?@lVeN-HT~s zDhV@k*o%}NhW9h$sEC<={lkmrz}OK>hCr!Bh2-8E1h!p=u<+c#FQI@r;z0fQZz8q~{jZq_lyYigZfhX6X3rwU2UZS5`BQ;&Wu#{Z^;dMDZV6D2mqI|h zuz@}pI1%mnW?-Z65k8|47)AHV!1U}AES^VP=NW}K0R128b6IawnI#AN~H zPnCsE9W(Rg3b^0LFsng<5)qJbUqTFGK$gM8BPR_TSoR2HSUK~0ra%?JKg_*UQ@ubZ z(fppVbP!MsLNbFsw{J#%FdNX3A3BjANXJm7Tn7UcsPwL;5;v8U8Uy|ysSo%|ob3OW zp6u&mi_J)~F9#X_#kaRK9J`SNY%eU!mH749(c)DdTKxMQE#meCR_q0oGDpr5^KF_Y z>P1;9ycJ>$D$fC7ps^77v_0RoX%MCj)Z*TfCjmS@p$Z<=lxcUexY-q>GOL{g zZ__<64_Sz$6si@M%gbP!&9IHha2X8ZI{KqP68i&Iki!=f>XQJ>Um+v4{c<-Z30#PB ztGQy`IrN%|Stc2nhTD@~+H(TB=f40UNK=Z3uMwr-wn~(G2Lcd+hVbCvU?$;qf-2qh zMytNQ^C{%sgaL~d)Wht!fDuXg?Z3&>7sB=F%Jqty#DVIRt@ci>WD%m2c0U6ZW)W6wqv zU5c6GJ%ACFB4#P3;<_8O#Q7%{1#y7O5XUbbmQLGris`~7242rO(P7sgao!QHe5hsl z!;vxe@HWV!Ho4=EK=o+4SWSCa0%+d{K*u7`4uEm;i2|MXbKw~4X9$Gw-%yM`Q*>q? zBDz6J0qcDQl^e0h^!n6`01#*Q{4jJd-QY#`=h-pk4IQR%i#`O3bd6 zD>YP2WqWOl+--9oSh9wZ$i@M?y4s4ZMm{9rVHnY21{t8kQfLiR_#i~EeJ29jm|TmK zU$+L-dIq)-A+p-MXzX$DqpRb({3iN9WLz!PT!2E zJXenQZGupYAWPn41{kxvi5Ph<@hfP+o(u6k!f!&}mqG!5^w}Y$V)uqCEzzMaq%(jwK{8gWnP6)+PnglC1lXb^yd$CnO^pz#TP(Q_(VA=1B}@;RMWg24-M` zi#)rdz{i$3q=AV+Bq9DIL_uo7L|k&X z%~#eVgjmx|rEHn5HFg;tHGBSk&b_mSQAVbo*>xC6q|?%-Mc|?F>wt337+NSUuiUE` z_!YC#;_epSE-o$@_=U)XEwgHii;M7LaW=9>2FD}a>#?1Dtr0V{gb41VdB}t!Qqq6t zPXsipNRG7m|2YxcF^Rdc7y%V20s2lvr9CXFqJ;-33-*>Qpu{nd7qx#sPtX?uZXuB} zP+*ZznMHNPgv#JiUe}8FLZgiXz~~tGmr#rZp;cr~pmtzjet7bAmHUm5|GT-0w28uJit_7M zTe~|C4xT&BR%P(X;p&0=@ss)^+L`}sr5W^F+Xt)Vm8E<0&mY&C{RYUuZ)`L=o7L5B zYiFmE;9D;CoyawNl5IIxfTJC->YA9bYsy$^9AiW%oLg+o{64IVTJAjXoyk&gE08V) z>&}D&5k+M6h$td@i?`d7FJ;a1pOQrt-5H*mjM1=aZ4vo({fe?xUTyt>g0MQ_) znaCYxb<7*u+1hTb?zUr(tuMuUu(Ph(5FP7~_|bp{e6TY?kE67Z#Re4kFKSu?aHMyl z5IHmO>XB`Un2BA8J~ky(c6{rU+)d0BBPHoiEtku4{E}@-v{@okJZ_`<2&MlVdyc6T zC2~#GECdjaoA<@&C~VYAWJ*#viHGd9HfZ? zUL$`vq;!_8MuK$V`kb9~y{#i%zavN&HZDllrlRSqZMPFHHE@9!GX%(=n>OUKu^^-> z>iwX`p5sOo91gQ&P6Vb;OjO|@j=2cnjs{$@5tAaR;tx>xb) zK8!-PS_2+or`5T?%*(?NFzwIh#Zt*O!vUH+6sJiM{8Ed|lO)4a#pFt2WriLJ&p!4d zho=IT>fuWSOh&s9?2&eTdBoj=YCtLz?Y+CP4jvf0tw!ewPthk#vZ3)y{lMHaJ@cNz zvB}Ec$yOFQwLKc~6oe-i7#uWM4d9 zvpT=CQ>1rv6iLJ)qycxsrXrmVa_r)uUYPM8QrK4^#YMRAwsWnRx(9SbF_MZGuH($xDsO{LF&l6BUp4>?HAB9Z9^z z-J-;J1x;M@UDxdSaGA7E$Us3&E~$t18`^2v#AQuEir`_yt}Zr;GJ*r_K&j)aRmLLOu{VT?wHts6|GH(ZKgeX^5*F?-MCu-W{he+TsH!UQNU|NKTpUOeV?!XW_f7 zFe^k-`6)@Vdr=6qd*W{b;V8N>!Y2yG5DBO|3j7z2%nA#il87%g zTmBkRz~9cpKOk!soEK3mM!~6(F~F%)*MZRFoGdHVmG3kVr}i(F36DC5X4cgZlAuN46_+z$)#k0=ODZ z^3AR4+JnY+y}MbjwzeDF8#oE2VnXzoFPBkinXQ!?o?43q^?5tf(c_)g!#ax+$R`Cn zt5~dal{t)u_=B8!-A-exzO$b_m$vGrge%5JHlG|z*5J%So9n`&BhfI8Q1V)VrN0O@yGU0&FV_szAn<3Ok5-(Ap{tMya7j6ivXtULaFysvwl8nH9;D zT2d&J$;~n;$8IoW=Oh-ag+LO!G>b{drKl!~vBx6$;Z;xv1ZLn+S@IR$VEjfn#~d%+ zUEx*jUXp(TlR(g0X-xyq15(?6#8K-NhrNj-}? zrPZwI88E(s$OEJ-i*h$wFiVl?cvR$f;&X=cSfg%Zaher-{ZwjMLXXD%#|Bf4HCgrRf-l#eF{*k*jo#dDRhmaY;a zs8eMj(d^fwW7;ldPxxAgLdl>tq5>8tT2&2KqoqrLswRO3se{=dQ|)#wM{~`0*Y2HI zjf4I!pxS=$vIwEVlprI1FZXIm)iO*LKtl|t@msUP2FdaE-0=&$H?IjSBF8ka zvAr;((_R_n9Bh1R6NoG6L3(WwNm9gTYPr0;1k`8g2t7jbDo6Cn0E%N?iE!|cI3vsP zSBN2>e}k)?03Jk}Ka-0#=L!ik5fK;pT6MRx!(;nHbC;f))-xJK$GDXqT}rs9@=}t? zKHjt+3+A1R_nM0WSGkJ#s zF{{l6X)CF~(TaP|-1iaPB0mVgo*@cgi-I(+DWQ@-W_u`p6+;o^B~`a?^*&ZiA3>Zm zjyesiD5s?TNMYGZrE<@}FA>p0clcqRkE8fU1vVAUQHFQnnkvq`#0V;&#gL$c?{c^e zIL>BHw*xA|Ao~6Hx#%~Mh|=}0xckgTTmu35S3a(9Za!IWYoigLJW5dR41mbY&j)F^%pP4Mkw;UEE=h|PcRh={nVy6IIk zZTScin>sV-s{}}VrCQr+Y;RQ?o6zzF_Eu3jUb6<^jya^2IaHFe@*r)>@`pb+F79vw>Q#v(7T6_pC>CfLG!* zfqGY2Jz*Qhic3;?t^nHrOvdYI(u;Lbd;q>L<~FY4bIi#An+@f^lPaGU8Q8>2{4pq3 zq1Me_sRa2*>E`cg@# zmAG?PiN^zUJkN(rNx!)K)mLAAH3@m4jxAfb{kr7E8L%!h3lXtlg^8<$Urdlfp>U({ zi;3HX!bGu9n0T*HD7;@N6mAv@6Bh~v?D2A;aHVjkP`ENNQTW9bqT`|d1Ag&}lM>Ya zA>bfW%VD&I4-!UjAn0)JNs2b$E(c{@(A@>$G%@?svp^OCtsR81Fg=H+xh?E9bw-@f z!B`~}hC&2Xw_@tex_;mB68srkQa5Zxr=8hqLCu8qHAMsPSWpe~7b0&{si zfu)Hu2|R_&Iue_)T;{03t~jJ5aRkf9m#fD>9v04F>M(ZV&~$QEjg0`m1)^YUsdH_) zjHzK+1Q0BsS>Tx5b7Mnwo3RdIMPMlnNaZAmKYtl3HFsN^2H)#hHnx{T?6IGmO<)o) zI5@B+0c8q2<6|rFy^3YtWJw|K0yO1p1aQ}%eRJ3;k4!wd|IQEcu5s@cRGYtZhZJvD zzq?g!HLA7MZmYUo+u2HjGPFHu_tf*|GN>A;H^j=CGjY=Hfu*pxoFp%{s_Wt57h`|X zAMQNvn2#S;4fKta z@rapvzGpk($c(H34W=1OFdcfsQ52XXdpbM}UBB=3)zo*%8%?-e7Pp8eYU+Wq5Q!N; zOXB+bL@n7$OD9@VxMUZU3wH5Dy{H>Exr8jz)!M31p`W;!Bd0A`lM@X{&HZ;xZXTKu zyjE+po7K+RgL8 zx4pg9?5^!>ZS8J1I!{i#R1mpOpo+BeeLZgWalP7kP;YHjnPg@VC}2B)I$`MJfVEu;in^{t)OlkR3?t8sET-c-hQt}?d_ExoeSWK?CV zz7;2%Jkh}P&?pp!Cu(9x8PHXpgl?7@zFcqBtDCU!>#d!w6R*5#_kQcs(z-BMg1=z4 zH$|%t>ebpQXsEh!NgB#+H%>)H`^vP*_F9{6F0MPPesym2>BCOt(AxO;kyT%PRDM){ z-o&Kt8herxt*@F_CC}RAL=CC)m*>&VcD>zh>};R*L{e>Rn2FG9?MAJ>R&8}94TL>c zXrGEx=PC>fZtXT9sTig_Y&SkTIl`+rb)pTp^{Be}u>K@*0zlPretmG&0o zC){OeV=simXk@GAGdK2p|D*oUbX;)00kC8>1f;VXs*TP~Xk$iGMSvZvqM87m>zN4g zH*hfO$;ry9)@J7xmobej8-}nIV&zn(h0l*Q+3r+Zoz5oHaNr!(dj?+gGWMP*rRq(1 zsnQ2rM9L4KZFpA;WZS(A(cH zF&dOY8kN}ig?v9)f9dZVj_X!puHM7xxcV_7pZ&VxwoZHXyRR^_G66wCfdz*CA{PWWhc_QI zXSWX9pKO*`6esTKt@vE(qu_~lQ!1+CTs8Ig?zx$pB*viZA8TxW*@%s!(dcN767vl} zJ+ALaE6c=cCSEgrnf8@9I*nt+)T^K|frM??G{1DsMM5kTuky=7eQZ~=UMb3B9Lx7y zg^0j-s_Ew=RxADki)GbqaEqjb;nfUH6=n6ro?aU>wV z7*JZuHdiqj64y}XtdM}2_>a6b`j$!%iPqmziKNz@L+CG+N)RHo7ea$;Krm#E0K!^c z2${09u=>v2=p^Zk5F&B18UEs1L`og0-yXN@N?5r$IS~{4OFwQ&j3Po0b3z0WcVFLP z2;N`t{r{FBRTxjLr1vKoLxgVgBq*YsFL<(`Rr|`B^%STb6~_)<*1vaz(X8r+{K}zI zt3O*G(_r<1wes1g8=%#_ELcm_ykWbT!Bo||p3Ll3#8Le{7AQxXb59?J;(eXXs~n1A zPOc2_?E0jlPM@^TEy`uLLZcKLKJJXDN7^j9YI{VfO*%A;X2`Zr)?G6kOv7IvoBJmI z@tF2PA6xU+;p5R24Yhdod93zFJ)%{O*l9qiu|R^c{X1c(PCCyxc(qE zH5AU2JXY20s1FAmoGKTa8(@wHT};|N_0I457PTFdC85E)(sVF`NxSzG<$AYLDpAk! zZO7~1pW5xLFHgY@n^nTlViCPRwI&`wDs}iL^#4Ze7~0rwbZV>JYHI^8O(*T1YI&X+ zjXq4mq}@|*Iy1GhArewGt|_5NVSHEDcDC0W8{Jw1uiW|Fjy!YEqm>;HqT?eP+z{J< zrq)NL6qE7QWnk2p!f_WC;XigA6>ZGlU3!pRL;*PE(z$lj?dc?jeaYTfy(x9{V*Ezs z9tW6REood7F2+Oih3yBP*L#sn}YE(-W(LghyJSi^s=>Fw|Uhoe9HnaH;clxm=z< z_6kfAVS^|nQ9s#)RuDdt)0NbeuR4TuF#9y*ZeZ*mR|>x%Z%?Q@`YmCwi69I>`LC;# z6nT=9MKPGbRKLY3TLyE&pg}FZ7y~n0Q-+-?KRmQdwy!SDi zfLNFoblJiI;%4X=>i`LA3_4gcMN}5&=F0|t9nc;y;=lRFWdi_v7}z1&Oyq_boh+yk z!mh17sBUl6x9Z%5^7XC8c4H^&y>Vgac#f|cM_vYJCAfbEZuXW^4bCk#8mJ;U+KE#n zyS>W;62Py-OmpN2$@+)9z=w$f2eii$|NU9cK28)qD6m6@AUDgRJchnYOJHeE!;ln> zm2$aKR4u}|pXc#a3b$VuQFn2&>|0L$>=fVw9R>Iw1Oqw#K0m+2 z&Q|!1G5GxOc@%*OG$a89)P;C^2^7A1Ae5#&X}vyOgc8q=TCOt+X(=AQBK2K~AD$f( zr*xS3r+5OJxP5_*bv7EZB^HxxebVWWAq_*bPf0KEpV4%@gt(Ek0vIbnP6$>18<$RC zl{^pg)KP-nl+wj#;b` zT|D8q9gLjIL=N~wX3(dRL8g?}SS#|u3_M^}^3Y7_INcRn%S<3&*9jx)(Et~UFOTWE z{z2FDeD81wSx6xa5P!vg;#xp-__Gm&DY1MP%tO@`CHnS&wRrzTumor?!5mTlALpX} zd5mHy)Oc|OqxZL$x4ZT2^_|vQz1yyLI*sj(c6Yt8S?@OMt*r)no1pUSoVV<$5qaY# zUWX=HyW89KR=Zo@uC8v@@jeMEsLDU-oc1czz(h9n?%K}I!v^}1KzY@@^cDuTp7ng2 z&dzwt=;nC~Y66$hUEkT{?nF>eWi=#OgD}~$ev+&u#etdcFoFcXG0BoV1!xVkTCBG? z=D|E2f7V;}*f;D84C?HJ=dOjZ>_I#uT>e&9$9YySvkBY&5ocQjO{+M$_R6 zaW$e{(!)~qQs;&5DtoM~m+FPiORg&=Pqb5MKl9^z6k;YXsXELtud*Ap)$ZeJqtmU` zS9j5+j2Be{?YzQ3`y-4w1PM~{ZiXcu5srbH9$2_>R!s2wuphkWlrsIvxkaT-;pN8* zst|Z3F^21`aTY39Xd!6%z4 zL&D3eFmPdcX`zf!3f_FMv)isetk;_mm%p*yska_g)lsSO^4~^P5rZG`gX&A%?yY*Q zQAIt9vK#86$u+pORqwPKYYD!I4^xE?2Gwsc1AA^SZqroF}z0NPqv*7xPd8F`3 ztsv)dOPxm&%v9gq34{Ue^sQN16~>ZFoAO5I%K`dhaU{yYe4h>G1j~8q!$#w;&WEBR zcAiJNrl=hC6*lVR;yKC$?~A;|=E#Bc=_21M=AY*1Q3AiKvFAjG0$&2^QZr-`WL|C6 zH|y1Qop~dR^mlwzRO#xY&Tu_?)U3_bzlfZz9lzBx7nYt^w+4?tn_pd>+t@Q}-qzZV zyY%S`8Vwez8=vhw-Y++vZ5-B?T+3WtM+9xx*IM-s5J3e&)h(8jzlk8<-fh-fsZ%F$ zhzFn6ti{8Jn@#)R!0gPKbC1H$+U@z_%HgApgQb-n==Sxvm2S1!=yrA<)-hEdpC(uY z36Ob(#l*Ayq3L+SW&M_{kCZuY>{u5%yeTWB2(lUuK$d?^mOl<5MF8Aa9@keN?Cd<$ z5ilu}T{^Qt1E`eXYUe^yF~xWvym=G}B~m4BN$v=X0Tw_*uVHq1PPv&@AeIZc5d;7N zGroZP01c6kD=@n-85TQR9#9~NqzT0({@|!Op%pkIwGMxflvw{Fx4Y1$tT>ORpIM1D z-|ix2bN}~Peg5c3r)!uOhWr0o4%m;5^1}Q&T@+&J-0_pn*nl?775kr@ZmP@R!+&;P z^OH>VOkEs3RYgqDr%cBBFD+G zT>FqP8{un(%2D|S&L$)E?*B8UA}4n7##K3ygZJ4<3-+PWO{FCCv%0zBT)9aNXxN2^ zJIeVvz?X}akY=NzvmUf2Vk!EEv1a$>o>JeN$N zqS;Ta_QW8dUBNcv{5)AdXdam_g^vl3mlI-s?9QFQdM1}M=U?_h>M;1&SP{X+8RB|^ zKSrKbWipen^H90Y@RD!6}Oh``UxDalMmD5ZjC2bm* zd=pY1pGkz}y-BgsAYWHb6-|P|B^Jw)n;bvpp&*cT5%q+?s;rs*J))g3o0S4*rkz-1 zHI5Z_dEK;Vn83}1f>vNk<|JSOnvs>+co!w%HIbFPRMahj)ilUqhNd8Y6}QNxEnQLm z3h#0j&%~x8FU@E+Ugi8jZpPFbU(@YE74ffl^hIR3{ul$pr|)sD*gYP~_M3IRNT>+I zwTDZGgJ&NPwjMVgJltL0SPGrF#m&X$lffrX7v?bduKo%~4mY9iOiVF*jU#KFTD7LT zd|?8lYE38AC~t4qKkck-?(EjO7}YvPK}C>Khc0Wrk*=9iIjLI3t2_xxqlrmR-jP*1 zt=)E~UhA@q?09$2RZOZ4Us8)H7c8Y6R<&ZuDtg6dLMwJ0l}4=?J5iup-9oAT$J$G- z)Ma%<3RiYFA(c+&zCopvu!*{XW}^oO2eX4{D034iK?a3i>|bN*8jWATdOyeGf%A!r(y%Jm@QafSjEN!a~297m=caX?5 zWY*O@30z36aX`u5*hA;a5cM7qS(1bU6T;X{qwA&F^8+(-_9^Czn?^(Ip&!t+DTg5S zDf?>-RmuF6K!u_=>rk~Hio;AcnZirWc5yH>3^h==&NxlA79g-hG^G}jG zgwgpNRY(l|+#{pJ^0y#}WVHax#xnCm2W^^02k^DvE$b0>S|~qCnmX=Xp174bXHTf4 zB1AG5jH6*FrV1445>iytmr5}yGILd<`BP@#oe>6@!71d{5C<+Y;$QwUi7&8plJ!KE z{PSKM}J!dNSg-KMibpqK-E|;m!R8# zevLpc(>kF1ehie@x`4_}|A2#K;P(S_ID{J}xPGGh)Qd`X;OtWmtY}^C?3}r8V(q1@ z_!TQ!VR#FW#|!5Ip>|Ppa9CMhE`trfJj60^nAkn8Nr%(!2tb@W{b~Tri5)|r3v=zz zRU$YU=aRdHbR91_X1!?dFeZaH_f3eVZVhM&o(rORg{g$pl9y>@VHpOaLh$;}j|fNv z84lo*e4=oHxr(WtU>A_l01@@O5@LIfci>Q)1_Or%I8vDUc^Jsq$!AFiseesCYP5GK zz!d%_E{#Hn8$d$p*<>^h2jI==>E7~65^-_xiNh*?=XA(81x*_G zl^^{`EO0vAG$5h41z^93f1kYcEmL3)(dqB!qSHC#w1uhOWs%JhPKvj8n)U6+_0`s= z8rAO=e?+|l+6!K&arqSOZ@RM3{>q98lT}P%cCEeC1*7F|eftqiL6()8(1`*Vr8Da{ z5T9J9Hye*7K4~=q$DiW@2mEUAS{$E+f;cx}4erX*^64`gMKo|_Z>7Dl>nfs$9PZf> zeO8C)|1n4Oc%A~+O>x2<&>qhU5&C=4ff-O@(>=$dHVI7I@ku}}>g;D+HWdTc?EI8- z5F0s4%_aaRfo<`469{+GCDozda`_$vL%BD9lxLL=^!TM9KMT_(q<|mKgV`i00GWHQ zCq?-LEFx;poqmUsfRE_=&o1Uk;a3tlEScf=yVcFjoyXm3r&C>fuvOpgbZa}0w;|IN zyFMA2L1gz5J}_)c0N^iGn=$(FlB#RXx%zGkiroNf{qEXst5x4#V}{49*|uW%I~_iE zoroH9no#1^$U%Lm|f*D9KtjRyk8&!QMVr$)-5DRU$v$NIM zXjMDRb%2dQH4>ksXgz$rR$s5~Zg#qxRhE^B7gaC4Zq&ztKccg%G;kfP^@^wk#vh;U zY^$B97W$W(W)PKXtGF_a?RKZSy;hfI%Gm{H8+9G*LpEB~N7W9?4#-PNVt1|pQwL)A zCa#vy70r%Eu5a3kDK38i#2AXdn=C#W_gu$f*T^xAyw09>@$42v^^IgjO#a%7t4!Lx zq(JgFa&Lkr3Ts+F(>n_K_oBe}94nlK6)M@iib72JTAZDdR&@@=L-961BurE0>_1f%g!HsT7O|D6&kF5NSh?!iR! zT6G;yX&Ur?AgM52UAl|yPLp4cDm_%@=8ekSyzE1B(RqioA%t^$`hgD7v@D2`1v7(a z4~`enV9&HDgglQ(NF#K^02L#yWh9J^0{CV)R49}M62LLQg}h5?QvBpmo-*M^9yA&p?R zQ>N>Rj>O0^l+j2OyF+SDX!cwh5-%DN3viT#hn~fhtMN$>&4XfX*HS;|p>=hW}zMyH!7j1);|tMB8&MG>>h zwJd+^MKdFpzL<&jXD!!shESkSBc|>aPoBX|4QR&AFrvhX$bbf@#=qL!tbf{F+pIP) zyY+c!N}f)WFE#r6Z~bYe5rtoQdc`s7Ak0nHJMV3sUJXVGYly==`{6SWhtEGxX+!@q z4`l^?h@+?J(iehzry&7zC4ZVnfX8JW_>s@=4*=YJ&vcnClZP&LIG}}5K+Pc%5ZtJ6 zXa*7KJPN1zD?rAc|AH4E`aLjtvMFXeNFQ`;*Ofz#X-}0i>wxyYX=N&m;uuw`J}wSa zOq`v08;$6nVk)QR=N8IkgMH^KP;o(wl-aYuWUe{QkuoG+804j5-Bsb82b1Tdnymv* z-)b_+fxd`n-~n~Rh+4op|7(9d;4sEKq+LtXc}k@V1<30wbiz`n`|id%3v|`!Jkh9x zFZBa+&-6^aLijt`%0eY9DyjA$l2oCJc?E?g(Dm^N$6Wt){s65DKy3!9nAhXt!mskVG_Jj5_hM6o z$=EjLAF^xS%YXM;is0ViAqOvAW)vBIfg+>OaLJ<)#Lt4rq2~(vgw={@z{e_njmq2% z#$FV=v7sgFA4v5L+o4%+4>rm+dM>4KrBs3ty#Q*L_#24*kv$(?QyTKas2@;%1-NH_ z4W-Y5PAvJK?=lQ!11|Ap5@!T^O5&W#7=jFPGEgh>19IR*17i2^xCl+WPUb5|Y%?76 zd^51gz7vj3mj@9}lY0c@e6hwK0oTH*g;vI4YM!hdBUT*r|IW1+2 zhLJz&_5;(R-4P8O-)34B0HwUe;UI_eOL3ni!jY1xN&wMC@#ij9&aZJ|N*&1aH%fW=zGWnpy2aMjr48Fpd!(lEgi20!rdg%Bd4WZ2;udDv8wxfWY?2)5! zqF@^Mayk@MXJcZJXhqW<$E;FZVdiP*dqP}0b+=4r1czZDT-sJM@XhCfCyxYj{xlI@ zG=bm@)H1Z(5XlQMdf{6`4_MYj6LT-~)wrRBP`UkU( z=6d5(UOcCLKGrTkxPj!1cPw5+&X9IJdXN}_?5gRG`;LcVxZ^oMl+!a9u@VMBG9{)Z zeo2kXrZ7GXR_S}}7FOF>_}uM+ByAv_;*G#VyJzr2NqGqI>NSs1tza9VMv**?7?Ako zGvmv~#boi4|C;@NK>KDy4HB9CY0EXka5@aE?$ETR?J&aMeb@Bxp&8;clNCXI0F=Q$ zpb~5WKEXdCYqaN@{cswC$4*CnI1R8WRu|?Rf$E_P*0xE zxk^a##L7X9wN|~_sgn+bktL0Fvc1zG^-mk^PCL;*xywhuPR~ABg*b;DEWW+FxhZZe zNO@W*hxl8Z64FMI`U?#u~lt7ArI?M$X%d{ zG0IH~RAPVFpbtgj$l(}&@hOA9X%1D>F|6>vL>WdIVM{=vq%OpV9OFOyHU0 zC{SsNHy&o8LY=BjnL9WfSx8Ri${(ul6HDQZhk2ud00^xP?DmcrhBqEgtL=XX(Peh) zZ9b2?RBfH_u@2}3ZtobymyzT z$y8*qm&?;+it>sp*dlvgxi?Lw#y0;4lp2m-;2`GUO@MF25a+OF=$E3=0+yMFL4)VJ z3;mM2^H9g;t<7U;dlZzcVZ=IEz?qHqmy}U1z?|S&DF7`xwzI(Iw!c)`3(P)y1hWak zecljs)DKwcMYeSNOC>8f9H}d?DEccwS~F~C5tfPRCE34mmE4fEy9g_QgNfIF5vKvI zd%pKVZG9>3*B?b8wziCqLchd!av3JK?|78I#%*x=0qboUn)budp0XS(&_Xy0oQRf! zk%g_UKr7~p(%d5ZCtDrf#R|3=LqVks05kGDM`^TDhC+=d*o9*gl?q##7bV9NW35!6 z=6=8jSE;~CxpRE$Ds$Lt=)g<_Kvd?TN@$5P^DxjoYf7NS&NgP`+H9Skh{)?4j;JBTk&-C*+*PDN zr8K+5Ghh-ggjG9y{Gi{kg?S$Pi~~2pSHnkK9i`Z4_-MFm_%LVYk3-)B)?UsGKH@^p zAjJgpEv`P{1A<+)W*E9~ZD)|8&92TkJ=-#^iy0sl+vXi z^t(=CvG#n|2H9dt7Gm3?+@le~v{cIO5?K+|Jjcq%Oi+bR;>qL)tvP`AFU6oxG(FFc z@U|~38p;boieUXwG|1<1Vfe_Z>{ING9XD!tMT1lXQj1Sf0&}WuUKduUXpkbGaWUNh zA;qy{Ly1y}Y%rZTDV37DOvumE^@`L3DX7TA)6Cm}W9PmD!}~Sg^#kZN==V%GRp)@# z%>mu7e3%(z5mcg3x+<5Fd_bx$4WckxTFg0CS|n%lb7i%E8vm`#ut;qO1+UEPihB+~ z`x9yg?Z^zGE#HdardvO3EF_=| zn^AU3d^95?r096zh+2U3f?6g&np(x7IT|@$KMg42qpnYqzKBn}l4cKMCuR2@KE*Ji zqcq&fk8X>wn%Ki)KcLjpt|*qzC`=E3ymSG(?&}Oqo(LTi$UU(rhVe0!7%p8bfRxt16T0Lo9atlDgis+E*9T2%}0eRJB+?v zD$N@4PrOt@U;gc4iKWSY;>Ai5=|4G3rkR_T78d(~KOU{Z*>>7f0UY~+2x{h$L*?`j zBM4NdC$ie(n|)$3ErzL?7tvCG{cK%l=)hsWnC0%%OP2h1s<~q1M5tCMw$W~flzv2N z6b!3TgOY-icovMsQ05>zQ93A&0t&8(f(?`mN0D8aN)~QG71JX#BYYJjI)wD?u=dG) zI-ybrJ)ZHdUEywU8eKTj8P}r3I^fs5Ggu@fKk*(vsJH681{*!OPo|h7)fB02*VNWF z8xQMbDpt!*{lwd8)#@#>`a~&}T3nP?Eq83wstYWbmVGa}W{)C+)!dKLa7;zGZ%l(7 z1jm4`JpZ7yG)OFRG4lBv*-^T=kpqq$&}jM%++srYUf>^uG*DWW$hyredenE^J_6Qd zflu$}Xkh#ayA61WMvP#E9Ke2D~p}N!sN9W`4wuXVVunAS_I20G4Vm4hbrr ziSMB=&&VH*T{9qN5D+jBoeijIMNdQAN07O!XW$hA{xW@Z?m}Z!jEA&u1`cFxZa!*Z zLfjeIdpI5e+Z2+X9}P&y4+3!N>I5c0BlDZtWpQB|Y>43uX@Ij6?vW-R-7%qhj(d#+3Pvc z@cAse5wg47@DN;`zt^g+t~NSbpNM3j-R9=*Mq``hImezwb?LlND1ayOg#u)tn%!&c_;r-ku?Foafu61 zA{2fMzs7rk-?+#nC{j8I!H;1A6TN4>2Yw*E2gGcR1tlVMVja#-{+D#*|3Bp9Uvw_{|c;cASUU zj`IfWZTxr{p5PZkMf@BZSj1))@lA=_ifZickHiLUz$qr3Mknkq-y&U96WFKRkDEcC zMh0Ow-=bW)c~(Bp&s6C*+f&XB_~)Xlu8e&?EuTG)lz$!2UKgJHbOt%Z^_K&k3A{qe zb~`t;n92}NzEp?QfAoDuS>QJ&8`2^56e0QoWL{ua7ula@rxo{fwBmPo=b9Q}>J{EqXB7_pV}X~1W#I+0-Iz*;5kRLVM-K@ZoAXX!T_myfU9(Q*0o z&ZMkrf*R@gAijJ+PSRY^z2$q$27cvpK__u11wYN&%h(tNm=Hn8i9!~$6M7k2N3j?9 zUQ~kUt`LH_MQz)O$U)#l5%nOzLTenR&paha5+AQ0^!c9(Z1dEf7HYAQryPzX0aZt> zj1I1rE9F#Ly&OUga5H_H$ujuB5h8s2)`kdd>#%*^X|igX#m3?p*DbiiRw7@gsNpg=^5K^`aMk2Z*y^N^0M zfnH{3k|kiECU{njJC?F1te*T`XD_)@($clcg;@x5pL@n`F+wZrXuYfrvt zd=?(A^oHXd=RxCPi>^3JYY&#Kjipc4nx8%0vMVooTMLx-9ZslU0xSR`CZQSe@gLvF z({SA^sF|*=pns7y?qNKRw3GU^_^sW802#uYK3Oa4uCCTwQR-c`2Bz1iL+niNu&!2x z^FefZ0ln2gc6_t7v%6he+g)YpDQm0U&XXp}j5p%p4o$~}Sofl~+N!<{$il(a5*)5z zL7)vaguwa5g?W%WH3JYCuaX0RY6|gU?E;hj-vgrv7PO{rOe?wVdxsOv(C^Q&CnOC3vX*;E+jLO#3|xoL7>X7Vigf+Z<@rw?DZY*MKWq$9Pr`X!NEZ?Am)FY z8=?PPP6~jSyd88WK-PCurOhU~hffq7cEPVHB=3y_2ft>?EH(zs z{P;aH=!a@QKi4+=r^!#C_%%K+-R-F)h9A<-(Z1*J7{vr9v%-yG>{+CZj zwEtz_+52+j^}n>j@XM#+myYFs`C{mPdEoEu;n&=U*#)96MovIOGGDgSqhjuTUDxl! zWwQEKSRVZxlr5E0AN#;VNhtz_yr1WqF-#WJ5cYR@V&Z1tNB&QZ*;$#W*buM$Ao}Sn z@T{-2>($n$+Z$aB9lhJygpPUgRy9%cJBWoLHG>ykf0hRyMSnhMZis3R?Y)KvKFcA* zOT<;Kiz=WcVBD{`HT>&GX)PxUe~UAi6NTvlA0a0brBZ0_Q!-yB6;c9CvP<`=OAgEc z0{e)J9Fv8@?dj81EZkPEw^&vFV=OC-FiU|A@?Q3?QE5Q#8Sb5;7W>*cdVfvF`u-Nz zhw**|>#!71^nAjsx&zaC2IgX9NFx)7DJ4o%NC$Z7TsYi15Z-a<+RmUmobw6A8TMSD13N7^xVEg?^EENsiAf(-(h+6@YgVW!OqW2>1l1W4WAV z1qwWKI`{+9b%}S0#P|QsHHJ7}P?L?EpN)niAcQ=Sgska2RmTiBaw0*u(E|*~-=bIZ1)DsygsPod%8QfxC@2K$!VWm#{YF4p<5S( zPHe3pb!~Xi1j`90Bqp(`JAOflYev+w4#|+3;W%J6W{|A|4cRQy6E7f`iXTwCK((E4 zF)ubsMJZeLrnNM%)3;WLZzjkVwXbC8Bqu0-rn4L z(*9(#E7GPQ86BE|W7<8q!V^_U@bHVZ=L_}E{I!MM(Mow|VYI#HEYI5yc6;@uoyq|a zF5Z^VGpKE;=4WI*+V|%kk3V)lYq|$3wTnf`+^!8#->fOo(G>pg2SVEQ6>e|EIW|xISVFwCZsEV=@veqlC z7A#%2x!c-ER8hkW%PLnOyG*UVy1St^ug>ABNXX-3aws)ZmYCinWi;~;QFdv;c(%4W z_p9!3Ef{zFjqSx{>-ql2{_x(@`DfJL`?L{w&mWFfhWop7Th@J;F}C}#j!CsdyXvWU zfqJFgHk7;yL*Cq3t8OOdrxrf9+gXF6*P*D$ccV^Fg`}wy9-;9lxrif1sV>%~akRHQ z>@DCpYpY!dD%GyzJ&`C5W;z0hU*pBQW6uHa*RJK@u%YJ8=4Q3i*ue`DQFlhEdtrDO zK1b2%1{UAmuCEkTX_b?V6=0UtvTaB-8L}@s=#fVOX@-VdozVoR;rZ3UZ`T6;#YmagQe6sl%P@ zW4!JwjjifNy}Q|1RmY&-B3(73$g~Ea6oIzCvsGu%LM4|W(83E)@sOyimG$Uf?jR|St>O;(5+G@Ju7wZFM)b!;P;`*73@Y_ z-H9Glj6M%qR9rAD3Safaa8xXex9tWN)`3G}>ni0rynSQCNCSkr!n!qj6+3Cwo10HM zJDFu#%v+{pwe(7<$3l!(Z(vWI&35-uz13KM(rwmHya+lVQ;&pmi;UO5wpIPK+p4#B zH#?X&QEY~qGVlVZ8jq>`#?B9tYF*W*8MRTla*Qx`hm=n7!LA9pLt6Dub{nmF&43(*jWx)N zNQBZTE_8~9Ma#e=KCC|hzr@qCu3}fAk=@oQq(rr1eftrH_p`?qNaK7m&?Iu^$xt(Q zAia+nQUWfaJo_1B$l}ugb>Wzj-XXC}*98s2&lrh94>cd^jXhE-1w-^e8x2Op3?e5q zJ@Skm8gY}Q5=5@~*$i3pM~6HS6LiCxhkQ)RFa?Wkkg46ynz(?25ivd;vQUDoH~0M;R}}&%Bp5S0Nw2 zl<9HC8{-XehFriW=a3Cj1g2Sex)w_u1`$*TKDAZO{u%_hXAUKbz+oiF2UZZwiRP80 zu*VTt-jha5H;xtX@{fK=0u(X zEG{8H0UCTG0U-S*#RwnVx$d*LGqZ)(U z-3f6F5)#H@+tf?jb)XNV+1lwatpK0!nMkZg7nMAc(rPF1_Um-2p7$vDlFi0ytJ)G- z3+|B4zzLNkkbN5xF#_-CSkJyr&#{-J`f@RW3pe zY4b#GGBU8h73?$g-5{1^G_DYD-C>?$@GD&*;?#xnT2barDat_miWG7l{(W{413Kde>Xihmm%Mm@ zi6L-ggbaKIH!NZHk^yqlu7J}fd>v4poi+m&@?sHZ1*ahxRl+?m2S{*4aD&n)pjJT5 zNbpc4NP!6#+URRQSvt-S0FaJf4ge|KAcUux6S>vAT))KcacF~I4YZxYFA*|PvLF^0 z*`H?zx*zL+?(f7v2mJ`JV{snXO=aeau*0Pb8z`6qtEPKSJ1 zVyDBA*{22(8CKcbnJAlO^Axf;Yb1ds+M7AHh5+O#5pZgG1xyFv>+3rwZobUj0bJpb zh1l{hp9otfFn|E4ovzJ#^u;(t71L4l_ut?KL4P6PiWbvfeUd`e;Kuh%hziWQn^#Ej z1vY>}Vd84x7ZapVDBLLgV&Zn8Fi|WNCf+L)3hx&Rg`0)K#DzlP@>gGd_0{D<;Y#67 zp>SnlqVS6=AL-EI|5DHbx-DTR0zE><>$_Cwh5S8;uo(>y5lq(=5l&e4PrOKu22Nm? zAg}!)={cSW>13yw_~}tE3a2rb8!b z1zu!29u+z(w#tA&Qe!2brI2d54ChaIxe{M<=Nv!S0zxP@opWQ1tjg0rx~&DwyD2u4 z!53m+|CAVb8C(X(ZWPAocZokpn&chhNc```CV8`kl1X?%BvRTVqW#%$M5+CZM%G|F z0+Tc7bjAwzRja(&Q`ar1YG2cfd@meEiN0W^t|vM_GqP88$o`uG*_HXFjuFLHu5U(8 zIHFEsh=MY-#vUA)j&C~_b2ou}Q`j&8K8o9+Ovgqjd>NU$D#nCzJgyNA_NnT6s+g02 zt)yd7j&SO*1y_~f<+KZn=s?nFgGTjicMY-kykr6cq1@DRc^S;xnXQSC5e17!P6-T% zg3Xt`h8gfdH2Y_{wr7)gry}lW6qB#mlCRR>4=dZ*M z&yN19fd1)x@y~_Hndnp?Gu)^+-WZ~*;mHUE1_5NLWL^cM!0!j<5N*xmJIYFjq(`Fz zN<9)C_#lT5!Tt>L4~-!xb&9^keWyIopkF1Lk^b1$Um(RzCXQt--zp}q3VWK%p%NO6 z-B)bJN@z7EpJWbTp%!4joQjl09F7>m@kN5Tl*sb@@`8b1Y5<|RIq+=9@7c&288CJU z$8iU0v9ZmINf4IhD&@I*27Y5X9rR-1Jf`97x!`~DO@bHDJc%$!@UG<&JT*QK3p@e@ z=rXzq*q-Dolndf>G5tCJCZhuI8zM=p>Sm}CJ^UrFU-EWc)n1;S1d9G zIBjQdmX+(_h*|@P@H!sC2)XkBO!}&Pb9OSZrsERc;ABE}Am~IV9t^2%w@DjMZWNxq zYK?;s9zuQY2@ws<2u)af6ueBCoE=hk4|!v_#xm97 zAcc=0)QWXTK41x}oaiuZwkijY;)CslvxVVzECdF0v9=( z=l;#Zf6#CK_8(^eNFfE1g5rrpjL8BRCjlvVeb)95Jc#Zb&cX=>Q9Wa(5Bw|>Mk3U9%x_v%rj9@=%v5PYEs?-x9p9i9Ms&+yk^l`u13)o?YIuYcD=@WE zUa1)Ph3d1jAG)t*HYo!!h#~*y2`?dp+ue20n#_)Rm`OcG4b45o-{g9*zoFNIL70&2 z!S^fuffYbFuMkAbaX4IfF*_cGo;flWVf+`_Kh6&8bsen#>m1fu;{wX7By@lRkOTAo zZSU)&BgwA%UQ06?N%OU{>;3Y6xHY@p*~Qc9?&@xJw>(;}W=1okosmW(&F3zQT-{wQ z)u_9xrm9*Rt?jVEK%B$`0y#h+#*1yR0UJ0tCTrk0h8P^yKG;4OA8ZbUIR7}`B-j`N z%;fy;`>0pd)tax}>j_KZU|0EMO)xihhepGnkp zZQRguy0+gk+u5!Qr|g-vZrhy9gZG_U$n9(Wv7}+%C8hN$O-=Q!Rx^X8Nvol)$IywR zSYyu_90$wet`%rXtgYkR!WM*<;fN-OqpU<}85zH2^S%Av##!k!zIv7RvGk!6jvu6P zuKDT7Lr3IVEe{}gECCgAIb*T_8#g&m>sKwHz>iGR7`BfP<7G?A`Psgsl|h;)$d#I% zF-z??oLdy9MYx5BvMAo$^|-IN4EGhMAIaV)i0~NLOu{BNBz5G}?9BYxzNC(7mc1iB zwlsq^YZD~ySKJ5^)922f5T`rh42A1O;Wqbz_<+aF!EbCTO{<40Z^A1N`_+d(eOk%Fnb!jgdUhowdpD4vD9=1p% z{rK*;aNeg6cqFJ$g+6s_E4ficNL(#ZC9dh;l%}Mr3MoKMyCh(!h<(9@CQT`QBgmfm z&h=$d=n=teRZ}OFoP|fln=1}f;kX)6HGZXUHP+W3_~I)j9lOb{Lza(H`(ZRzFiVvS zrNbga;X1_*o>SWY2p1~W|Bx?K;2oK8$i>gD0Ki)T?B$uykn5<972w1!7C$!xFy0Dy zmjEV{eqJR{++vmFI;~a7VJU&zuZt&=>f&eOby3tN;bW7}V6tK@LyT9Xi%oyi53DvH z{{LuSr=&>n#@-)!X5ls<$`emR6oi|5RVs zc&R@1Me|9!ZgyM2hUqn|4yHrvmR?zQYO%LpUuKi)izVudmV&G+)19>0qTPO4*yCKK zX_kb&cD`8vD}hxDiv*l`QNz;H3$q8+yh*r0rpXc(TFk(PCl8uVInAbBx6PJDf~!(| zFG1U@Y?vK8vtoL6+tdZ8jYjEadpp>Sbc$LY`_wKCB3cUltCn_VJ63B7x!i<2Ab~OB zOaHe8O2besi&PJ8cKuxXbhszGZr5=&gNdb0({DK|ytDbd=xkD~!ZJK!ocr3EZZy2{Zo{3LEai)78Q1l#Me>R~yFih+ zC|2LhuSmdKC&I?Y!(pcsMB55HyY8#MNibSpw_5^oiQV=t|FcOI_;a!X>!l*AFnndf zAjc0fR0VA?HsR)KzOz5#XTrC=v zNqR*3J@kh8qS%6iq7rUsA8?yWO3g&=^)ECu1W~1=rr^|Y zvr9)0qib|Jma2{o%WXNrn677+OJ+zUbc>ZsO6V5rmqgPHrf<252^yiTTCA2;P|N6n zT86&z$ZH@yXnBtkkfQ%cU+;MOoNYUUtqBx;BDm>1Ky{AWfZ&wfb!04u-a|cI;PzUY2Piu!#EhH0Df22T8AgZddt>khWAJWEm9t! z?(xC2M*{N=is<&$E8epf4{1uL0@xaV)hUblRh z(uxZbH(+w^q}MFVO`DyxwMm-~bOqw7)3y%s@v#L<8?&>Sc7j#Q!vTr9MMO5tP5^w- zv&Q$ug+yR|)3TeJ0kDucZ?dv%F@EFg63g4pEHW>e&;R( zj;fB6>Wj!=PO3m;RhtYeWDihS!6vou9x$z1P3nL20N!}duTrU0a3xqpHFe+o|4~oT zHp|w4n&eOSosOs23)<@Qt@!YHaOu+AvD5RHmT~TSdHLw+x#`(?wZ=WXVYXUk&5W2a zYC{{-BgecFDq&j)=Uvb!KSoP>@Zzh0H>_Hg94q*^(qP338}}jpH*a?3(!uX+v2=j7 z_ujqJ{b8FMCMq(dwYVyix8LN>B{jLfF9ts{$%HmH?OA3cV+R?G9OxF*mb}X-dX`1f zh%IYNZ&d4;#wRyYGQaX8GOLh*eOfCStv$2W zw?Wsf=&qnfRGjWaDGbGa6X2x_oiJu=cpNzf$05A#RV{LRO5CYbh@$)H2}8jWymCz+ zotvFcNT{qeU6F+LDI|I9Im)4aHOm9?5`zri3dz9rF&r}>_0gr7Ba1Ut|&n=SgpAbuzOw1wN$gxw?ODEBmMp@N`ANrfy$)T0U zxiAUc)7K+7&^DRP(vmQCpd((Vk-uHX7EjNgotZx>y|LXkA$X~f?rWnt&|OLm7~~0c zH+)xcHxtWqhm9Q<{+n+t5 zY*$R*H#_##tP)YSZQA-QA{5?qBB_VNu2Hf$nJ;P1uyqmLe!n=M)GvN^8}~<~n3o;n z1#U_tyFl7e3eXT@7nqHmL#-OWlswjV zibgupdEQ(RQ4bUAmD{C!$ldk0n9ze_ z79jkbOsR6vE;UoD4fquKD^&^VP4d*1Ex1C_8{eBkc`SVl z$2NspC_0g5dCK5kev>XAiI;qzF%MiMxUhI*7(wl~xyhQ7LF@D+YZ7vUyo zb@cWl#g)ptYVZ3fsfth5Gi{P>lqTdHyN_Hj7JSv*3n1OM`OpQzLqEIy?Ce?YN>;#y{iAM>#9I{AGit{}!d{< zaT`E%voNIitt2DCkqxVsp(Ff!xjVW48cQ-t=DF8qb|MQ}|CJI4#M#Xq5I>#NfBgqJ zuOp$!&TE=3R7=A=rGb`&A8wXk=)o=?J2I1QSpHhzxVmbm*KLy)uEbSk=x%DBv*BAk zYgJmG*0MX@t9-vX%PV0lr1WRs8%)Z9grrpMQPI6jfeTLN>;Jbg197aG2@yhLH`&Yq*}}`>3c1p1}ti zwHw0AW)DmZG-~?XYq#&TtwIaqG+6_63b-d>JCnl;o4z-y;a6-byw`p6#1N6?vNGAvUJm+@8_3plLFK4epIeUbK?`^ z#Y_{9Z-pZD@oN(f50ql*?K5w`wD$QH9e6Axwad8S&M)q=McXL79g+`&T?&;Snjj+gN))BAud!IXe zQQADqR(-@=u{y!Q4XdVmN#CB&2zh($TI_ zFCJ-HM^5`^YHKa-xBT9@>BZUUqlcqjg^@$)fx18Yd*H8=d_pSjX^>=jU|(PNQ(p5m z6v@1X0_SqFn;d%4tkvwReL8OqX--2*&ztQv@7ay~<>$^cP8Uwh&DWjU%Ea{LW8R5Y z?!}A3$voW>A~gni)yU~rNZ*tM`*r&oP23Tekgr(ZuOWn8siV zv>r&pU9&br)V&%iA|&P;lQ4b1wOkJmqV3jj>uT$uLhIp!N zyB6}gQwr3s`O*&NE`G(L-^y|~jD`{l&1^{;SO^YJC%`Y-0As^H6h9Y=6Q-CaA3neV z@Ky#V+eyczf#?wdg0}(@!z;|Aw=rDY(7U9pT|6GChZ&-dhJ>ecI1zg+>|EuYxZ&6( z)2-Q6z1dCPq}2>#q8v!s;$jz&5xGe=uX!@$BuWLV3A`XOiV`eqZ-2~rCTYxheg|LE z=84Mz=S=9f^GM6|{q$+vDX`>py}Fg2w}K7FTT9P{2A|OdY)-4c1)H1^Xt$0}rl%Wi zyE7@+fC!}lsVo>8^@s_6D6~GsN5BcQ_{1)D@`jxYkxLkV3Tsp0KUNMuxdQZII9kfO zuJq$M+Oe4p@bE37c=sxuj8Do^=IhYWzIXD59d-nbj{`+<>GWb( zBHU=;L%6ZAEF5%UFdKEyl}R7K$SXI=pH$DK^DYsWr?~timujC`gAlpip-sjcOFdHL z4i``2%on6a&dIghxMR|@HjZSuQ+#BC%hM3Fs1sd9$?kS#VG>?{Zt|bB9aj5 zW+FK6&Uz4Jr__rhW8x_2kb0mIh?RV+-wJ-TPQ_bJN+Y2y_g6&0Z5nb zxe{+#dfGb(mWBc1V%Bh|Fq%$NeY~kQk0ARMipCG0hQ?bv4d8|hQ%W=f=Nw1$M2*;$ z4svi+L1nWpu;LYzLsR{XL85+QHk-Z0Zj=TKJT;ohexUDuif+lAQY(1-val-6UUt?u z%??(5*3=L#!K=q7x3&iUqFTf|%*da0rsD)w&2iSo-OY3+GcW#{cHQy7S+hD*2M)x7 z<#OKCfdl%A-r?7R92|iJ+wZ*y}0^s&XPK!w+rym!)DU!Mr zj~qjVH@(wQQBZ=Hi;JUBn5J_+Yo1YFvN(BuSANm)jZu(E_wwyeiG1;s(CY_ zqiUf}z1(@35xt%^g^!@(dP}geQ9-2wchu6j7DJAHYh0*%CtpMHqh8(>FJ`KtQ+;b_ ziX5iPm4;n(WYOXlURX!jcWUCvyYy><`SxV8v#Q6X8HnU0)3DanA6lhStloaDT1u)_KP+mMOkdWf>2Bb(%>dpg z8&>)W(i2<(7KO2oSjkn%`E4G4Bh}T> zH>^+3+-U)z5-Fvj%Cm7(C(?KY;4U7qrf}c0d`$swwO|lBWydvzy{iSWJJDpNz zrC?;+o3^W|^fvr``|5l)Nu8e%>I~9Sm1h@p<1cc=!yPBOo`X{xJ`S9icFSr+;LMuS z4fx@a*@d*(XkbH?&YuWR2Qd}bw%oNm&uz{wXdCSU72Xr|K7%AfI?*%X)@W(+OVYo5 zr8+S&$)ECoDq4+>tIg_0K7v0 zb&&w}vU_#*{&11Q>-s^{7cUwm@{rqC)^kb9dRQncCoa|XguSwwaV?L`6+1Ys#Lr0y z&op8N+H>@Ox^2Gbbka+O{%R@G3C%vFvzx@GmqU|3|4HpTqPIM}kLL17nJNYlu@OcU zHW&0TU7G;VU{>KKiXKvl`wU`eq=vD_Gj}R7t%ylwcQeLp*SG4Jgjn_F$}YxOiZPaF z{D(I-d0-^8lQFiJv5^5>6p`8uLyb{9Ky;U9UFlkWkil8GdlXgIvb<&2b6m$aTcAD4 z7<)m`#v6xpKzj#cscpD~0@qT!bSA}ya4iMyrWhV!Y-HQ0xUFI*f_LEoCPq_?jqHL; z-GM>IhPOQf-%r=Zc8Fp|Vmx=?1Ib^ze*O9zMDlpQf$GtC zS3IZd0(*cl_MpJV8=iZ?JXjgf69%wIm`FUp7`uM`I;#m}osD(ISdGmY5A)NF>>=c4 z2V*1GA!}q4T(SG`#{+msKA{loeulv4@7{#4gp5Lrf=l0o(J=nT?}+w>?_p#S<4u&$ zz;?z)UP9qiz$2*wE!7Y2;4Kg%wlETvr7*%6LvLUP^;H9DK)*gC(!l#OY|fZs>^;zq zYbnb0-HZ)?V-TR%Mp71XO=KT}y1kLHu|tz&`k!w5E9w2@mu=2o^PEdotL1FK+3?ZR z7v}fBb@%AwXOAygoyMHy`{s(3e!T6ky!AoG#-5p6X*o5sm5#*sA|w(&x3K@Mql`T@ zI%lM>UmG5M^wIOE8=b%v%dY+*kn@|eKnhOKU zK7^*88U)BvW8(}qC3y~pnnA%DCdVRObF$aIund?Oo`-S`taYPxPl3}JlS znu9`{76jlj|E=QtZ?0dz{*3tk4T707zQEYajQt)xf0y+7ON^yH$5`s~jExLJrw6fq zvK>d=Hqma39`@|Uij_GvJrAF!TN0o)3atXzP|GlbEwh9D*F;n%(pIS8TA>beZ(e2# z6}4%vw9QV|ZpezdC^CmPw#{XGmrC8o^3SZF{(S3)?VtJNzuI=NB-0I|J5^{OGkG6>4Sg$z*j!eiGMo}H zNKp1a=pJM^>aYAp*5x-k$VGwssXdI9Q`qH4`QF9Ydr+;}UtYid*Vl*HHR>C8Qj4`y z^j4%!Xt}0x7y;m4WjvRDvflMPs}r;~(=b+Bu^QM5wmolzKJY-}iZwNxk-hWTf{m@f`uvwo|T2N)Z>ch0VR4vx5|k2s#|@FNp@ z7#n*KOlppqVD{=ct(HZ{lXmG@-mkC#?uOf}7gtis9 z0AKe+lzgj3OulcsL;m}Vf2WrFsQh!|xv^yVZ|jl&VI}|acp<4OCu!*Pk%d_yVS`Kf zH6Wv8n3t7W>gd=FdFU^tA>J271ymj{6qJDWQOo!8b;f?_I*V55?LFest786U#Wj0$ zMo256Lf;;hP+0kx!X*}%&Ov`!?FN|g_ZSyh{;OmXhR!0=>J8~a8bJ3@DNN?@Uy^*z ziyq;~(d^>sxpZ0zW;~bXnsnR9)ckKn9vL5=^P2&tw8-5K!DpY0?dZ)IWozq<9ku;6 z+UMu}otClNMUG@FiF|LyL{g_xbH?3_y_{kXvWD%iWqEi$BgB*eHT3@}Hpu)&EmE$- zJ=wqHn}M0AuTt!wcQ9O^%VJTyZ^D_UDc*0?Xh`t-QQwZT7DEvT^8uY*y__O~+=ba0 z)MPtl8&iA8k|zD}IxwQkY7lh*%PqFqsu-ml4T-})6nBR&<@KZf zniSL>$#Uo4$x>JPJCfzDzmugd%f&lsjCc3Q@_EsgZ`H}(Npt*q(!axcF1oioX2qW4 zW35-t?>{6a%y@r@%^BMn`^a{7ADc6JeAql%p(8H?jm;SQSz=Gm-tYxL=jJp_PSPXrHvDBlCrQSqqV6^_VZ{!dr z%a&bq27Vc9`oH5+n8SPyN7p|a6A&k49x@7noWPaX$ZZ(mDXPdw7|t#KBo0

Z?tsqcT8DwVZB4f*?or zwr2*GUvI9+(7g!d$Fs8jrVkqwq>tY|?Y)o98Gn&t?As~EzLjEQ6shoBtKM=}?2bSn zq75tPSV6|O0$lv&OQKH+7`&h2>!8E;Fh(oZIAStt$Z%{KXyMC_OLAB7&_OL;qN!ldYMGk~TBS|F5*P|gG88BsAM!6AmY_%Yo+WVXOp-jih(e`Ws{K-;Qu>p|$(IME*2mBln#YfoDYE^Wyy} zv~Z3f_n>$`BHoXp86IFP4WKbR_KTRu#QSmazAE1D0?<3eA5Q{(8)NSjf4>EhpQa^D z{`=S3_opz5-+>D#{YLFa@yCzh@#AV-|GoHg6ORs|y-YM38i}6;?7G=-{0{-_gLr%Z zVYJ8kGF+o7fZVr!U@OT>@Ptz0@U}x>MDTGu(sIw)Z3gF6kOyE(%;{YDtfyYyLyjjcc{fv#h zdwd*oGnmF@Pt9Lky0mn5ZZenS--pjF;TwxUxm>P@@42O8XK{5bzMEFDTrHIfnR32T z%M|N|m8le(u;%$f;?z)^h4=m=rz$iIF7kQ(v@g z_U?gOtQ+h$>jt|~-57mM>&D2?qtN94qqTxXtHhvZwzsGd|NdKO*Iu^@@o?V?;hF85 zuMQ9Qtqz{qzKzO&E$K1rSd(~21*u1Mg8Ws{rHY1!_kk3S5tIzY;7RO6)tyeqs;e0E z3L*x3`Vs-;MKDY~RF|iP(}uBx#|TNld*t(9MricCZc7D&PQC5bTb&?lccP=hdfV#> z!%fw=j9HS!SV)FtJjAHM6Hk#Yw)TT~j#^g6r?XM2Tg0GY#q?dz0X<0{ed~&6y10j( zh6LpOOva+yj>guUt075@YNF9~x7)Vb61_Km)iPVbYX5i}-i#H?z4%wURyT~lS5Kdc zFUCM5cO0N$DwRk;kEWjh5M=;E+-R1dAMnNPIsqpp^NNC$5i~HhRYB@evEtFAd~Y4G zk{~oo64d7wU|NR5FQ?VO)g=u}6{?Q7v0|$+KGLH6XEtolTIrge;t-=ld!_BVo^y3G zyJB@L&s0@{@KhvGkUT;fVN|=R)EWaa+lBdn8Uv#0a?=;P0jC^+8rWj%mB*}EDiEs4 z1Cel^EDaZdnbL8bsQ% z8re7(gl+}C)v0@%u2MYYzHQcBZFCME+GahlT55VC6GQgfmcL4-VKNXTI%eRuT~*tN z1eH(^2~5*ER*)4Yni*U~A}OI=ka6LJgy;jqQ~H6zM37YrGLfkzN=`;JZCv3aX(RtK zrV~~?aEf5t4JKk3k*K!WSqYme2w7oi)FR=Yxgism{Mv3Gei6Zw014f+3Jp(!;S-F= zBn#jG_8m}#qasO&^0@d0IXPR!L;xpt`84ALDVF-TG%2}8+dBqh!ymnyPYphLHyeDC zv5|XW4X|xHEY&c69P+(-#|+@fG?7M%XgvIlU6@{c^x<#pRWwGW(U(RB6KB|g2-`K< zs#Mw11SqwpWo}wt+4Y>jQTiw2_${{4R#6I`LIclI741GDK7Ydw>Z=*E-pW{=z_Y^^ zT^9fP)t1@Gt_PN@Qj}Cx;{@r`8k1(B@nN)nqA;cOKMlju)SU5WgX|+Iwu{XfZ@zwQ zgr)Hq-iB)*cd%=0Xd79PvA-N-!>v~t`_>>Exw35=%;xa;?}KdQtN(M5!E*50$nc*J zvf(cdGWN|uHVoskzYtg`u@S7?Z^s~`@;?UI*ulm5^<(9;`T9yJ*t}T3bf$B(I$t_G z<4#ycZvFhTXU?wYj?Z1*Tt9IxH}&m7WtH{OhrhAszeWFK+t?WUub}CaW>=21^4a4P zS8J__%VmGTTqr&_e`#^Xx^%jI<+;lzYwfqJ=W5l<=cfL4kUcdpXV7Ts!}s==LyGMc zvPqM1T8a()4T)@&33Ig+OZ_#4NWcdKU`j}ktofNmK|>MO$#U_KbSZ$KIX&^o z)1wqP_kxND5}5=|(mF~)W<>r$A3R&~oBv6p=Wy&v)BXW3(gk>T^x(ZSe6cmXD;SqX~jISNmKvmug07zg2Ob5=!&&^m$4lcH3F9C!q!DLGQ?NO}ZBC9RU= zX%G#8CkTo>izvyu%)O!_5=7xBM(9)KiMZfwi!hOp%#q+$rbH=79_TO5i6S9VQYi~w zI9Z-F&oBs+h@?CO2&XPVMN+(sBqk9csc~SLrXLV?nc1LMW(5l11m1t3pOhRb{j(n2OGR`9}8BuovTf_aL>u6*(j0_UZ` zr7OdEk~+x{fk+4rDcd4|sF7SmD9=677a8L$&>vh@JTrm~g-3D`Jn(!8LGn`ITt;HJ zY(m1sdB_XL=ZO(1dJ+Xehw>l@NFfq}4s{qAhbIe=IYT5b1cZz# z8k{Kcq8L{Mh!p)LGb=O212`a$12A$VlBc94!<;b!=ZScnPJ*c^5CrD$grXq3lYYc{ry+>2q+NZ4Me{MkXs$ z=gdF`oG^IdKOR8v3W?B=F#_fym4c-(t`wm18vI@(Dudft`q|X;IQHXV^XrAtQ??&i zodw4W(o^YDzGCD?7d(6246KvZW_l`pd?A0_n%Hm(e(vOji>K?|g<1R3d};Ag*_~}) z_3}r8OV8TIbEn?2Haj(n8_VI8VJe-^jpxU6SFVxHv$K1w?YxA9r;?(FgPS0A6 z*##{jBU>;=XF3hnu{+2~J~v*VfBD>`QK%M*qYIwpubQ6K;3?K?(}#oZ#WU5;*;4uH z{L#v>%ZsNs&mBK={=)R>)=c$8t$qB+(M#^BGiRno7c9>wIRz&z%QfNM1Zk8;Y033g zNNG#1qmMp1sx7(VPb|3}ycLPl^6W(Ml2MvD_uQE?L1kvvntt}u(aMzz!CL~Wa%KJa zjOBLxjmF`X_KU4cv^*Q02j+)!<16&TSm(wmVK~7P8w|AX;jFv3ofKXGRXDb8T-U@E zxe}BIxmnXxmU~!fcU?D&-7Rs`kA%j4j_bM(ZUEv=n`8_&IDo`GyvR^6=LT+MBc4)3 zSZG6t%@Y@4oL`BJWqPlaZM!W$>-p<$)-}T&VwjeBrL5<4vAdV$yGvPL-(kmIjRxZQ zZZm6oq2VKT1mf|LO-dMu^#FAI0G=fzlSwcg%U)Tng@$NJ33+B`MG=W{+O4g)WThYz zc__+=$Sf=xyB%#i^i7Fi)>XKbi-C?Mg0^4_)C(MAPb422hbEUrQ!fi_%4(uS20eF8 znbgLlX#2KL1`xWWVW+B*5HO-~l#+^x+O^w$J7P)^qapyB^-R!q)y8!qm74FVUFw)b zIF)+1BbpfRhw-RmT3+gotG2IUnV>~A%}!wYDi&46D`i*OZsxKR+OT2^OhXDS2x4-N zZ$roUK#9p6PrUKN8(U*?Cni=@q5@_DocRRoz&6;*@}IPu9S}YT?qS!s`w0MHOK0e; zlbOD7oOYmMta`Q^DY%%DQFN@>5-8vz55Y_lg?LRB@}MTCw&Je4E!Dz_BBiKSgY%}V zrzir7kF+9jL|%QuvJ=Xt2=jQSt6EXL9i)^o8jzWaM@DRt;*peHi76CKr5m+cLQ%@b z7uOypVNs(T;Rc((5{qJkuEK;#jAu6Nt`aFpn?ka7r|z^hs|QNnY^*o3u4gsvt1@|# zGKC9=EHVN{ah}t5RC4HN{EpphhMgTa@GUQ>E6W9P7SOKIU_-HmUdwOSVC|v8U^U{m zm1#XvgI`!>2ZN0J{%XeMTPf`Ee=|j9 z;Mk!~4GUL6Bf_lt8-tA85{+Q!GyIN6s5u-%D=Zup;V2`_sQDoyO1ayy>#dkgA~@jT z+%v0Sgvz_?`mhnFAHn&xp5lfIK_9c)VF*~NuPYlLK#)J2hNCnA+5@AA7F^Y|>=jiv zAUhcmt0Ov&-*FsORZw|00#{=IeUYS6udB`zLqQd+S{vd|@FH_dVXeBop%JC@xiy(t zuUozXhG;}Y-K?)F5o!qh;DRjezZJ>g{kLomozQzy4F3NgVzBqX!J#ByM=%-z(T5p% zuBBdurEpjXj{!Ue@z{pPc07jg*n!6|9wT^+;;|DC_&7p?F??}=L5lR2N6Gd<;l4SD zN-?tSjWAmoX6z+k{CzyW2ak8-@x6F_A0FS2$3MUW9y6e-bm>8xj3e$#aMYwps9}4W z#jq6rBjqUS+KcN9{jk))E}Ffw&hR}-|c6xtTf!0?NY5K#HHzXEB! zf~!Y@w%hcxb<_3RW`|l5TwO0IS)e492;G=etSr*;1I>yTI_kq8iXS=7gbdnFkZoTH zf^5xm*0iP`lN`sjI^?XA?2%+r&@36F+ZMxmNm28=HQpTQ$EPrWPlm{PR$U!916#Gg zYx)_#TN9q!Wa8+7RzjmE6a!Io8nv!ZWh5cVUJ{w(QNE>ytum$-$dd&U2O|aG)Pk&Q zdA7T%+i^m~BGPQETV7!6T_eUfDt6fqyly>!uTM!@a$3U)Gqcl)iCUoYQBMTPba8=5 zvuW2O*@Kp~9M8-KjvMxDC>sim&3T~!6yC7{J7$*&A{a$mT{RKGsDZ*)l(irVMP0v` zu!&k;_*qicre%|qi$BK6Go-kC{GldhS{vv&52^ZkuQ`g4Q?Aa&(Pmh$$wObj?urB zLXOe1M9& z08FR%&vXKBlNQAGPo|$2{v7vbAyeuM`CZj70GFWGb+Co$vnQtb#S6GBFzeUsj<}eB z{#Jj65fsG#tl6C?^$U&%C#y$o4@_qf`7X}1XPJT3K&X*3CNeqvJ8Kw|Msd=}kC)0u zZlYjRjpukC9UqW%g(?s594BZZP-MDcH=E0L10gEQqUO|UR<&jr&2njCB5&rKMKfQm zHyf3SvQewlnzcfqVpU7^e6BiC&Kr5lny6LHV!co+7mLk_(gY<)vJwQ##gbK?$X6%K zQYBZi46B+inE7HcXBKj%VVMP^m^X}SzLGB%nwC}0*Gh#(u`yv-WvenVQH+Wx*mS8x z$pF?T35~vMNjt#xM(z8(=%yDafctf$ejCm%cj-D4ZqI`{;@;o{FA0CgXdRwsADf z$|D@2`v_Y?tF!LI!WMN<`mwvn7%CP0E-}U`;u{Aj;lL2T=e6(eWYiwf4?ff;`6v4> z#?ZRZZ&~}s;Y+j)_+i0Peq&;`Cc@F%$#2Zhsv;aCM){4t^6!aoj3lJLJ#_WbW*dEi z%-3bc*pz?=?HTcnL9fI;I0SfpV;dTw3o8)&B(2jo85jgiX;O7#^rK-Rk z0xQoR>5qqdtR&uZz#GixDAi%YoSWSu3p(!egj+R800MXVV*hmI?XuwaJApe;B~)T~ zDc>Iv*QQB^U*HTECRA3JjQ*Iz%zKJuqgW`Hixam9BxL28y9* zm$neCj%X305o*fP7IOT1njA5c89RQcmd;(x<#PF4E?+eAdBZFgji(QJ>AdkY#Z__! zjwx3r3KPw8v0N$}6PD2^6e~HSf)l`iEk3PEadrzmg;P&iS5}bv$RRIXFrGdXX!u)b zCl0Jg{8ixZKIAph`3bOK=sav8I=!K^L1Xk#@bn?Co;GqC6I+OIN@LpY`Y5%NHv~`Ajaw#)i!{PKb6|*%TYwDaHjDeT=8r*u$$q;QEu$4WSxgLMb=sQ6(_A-^$G{0KHf!{sRM2t5z!65?q=Gif{2ptYJPm8G3~xFUf&qxPjZ3{(2!BYWULiff@A^= z5BLvjpD`f2BcMFZrxDh*VsMg}4h9vDfwj$g2A5!|9Ta&4kV}a8aypjbbks`k8+)nH z(ZeVmS$v$1ziPVS22hj_lx)WKotBBUI+^t-9|Y5~Osqdjh-eDj9lwl&;)gj6ylzKM zMU<{e-D%nNkh6qTiEs!JEjJOFfhHv=(G`a;38HJ|Kgk$kVn@lbLX9E=fN4pVB2h z5rao9@{0fiA_<4YrOU2XsOG4>8Ur_%2jDy5V3aR5c=4E5w4cwr~!N=wh^0-)gNo zvh~rklHJgk(b3dJNY__G;i9Y}k(xbEPn^aO)^3r7cDEJS8Qg*Au6mk(ClmrUh@`1sD)k!Xya%j8ipD~ zVXm90IZoi?^63mNp^!?@BVSjyP{Ed?5+Qb_ot};mML@2wxYI4_#z+D?Qaf5$D18xAQoe{pgMw_s z+32(!v*BOGIM`)uY^N68L7}5yo)uRlwC`kl5B<~QBVQALGrW0zHZ$&mW`Id6WX;_cb zJtDM`NIz@^pl`ts4VwH0J^2m&M0bfF+H(1gw}gRJmi)#xy!<|(!DHu4hG(_!oc4`n zHwlAlCFD1j;N&-!v*b6Hx#Tz86v%H3FXi{F_I*=a~k~T z86%y*@AowLFKF;z)Zo7){L25V*^L(Dz3ti{CrJ=|050lk2UxU zJAg|bKrtH;QxaS_L#{s`(4*k1li%r*lHuEcvRhrqv^^5O2jROhbJ-qA;y$#VxbLGk z>On+J$|y;V7<&lR_5ektP8Sj3Qjn2*5&n>bC$4ab$jE&Z9!dQGl1LBm)D;RP@f1*g zERqC;XA%Ar2!Bc@LE$-szrQ!Uf^fLW4p}Amw<7!?!YdIvxcFxz-y1%K@L%esGmY?% zBYY}C=QzTDqc{8n!avg+K8x^g^wK|x@c)eP*$92yk1{gR3qOzW3c^oC;NOSvI>A4x zE7JQBZXx`A+pyxDk6?Wev2W^41q%x!D7cXiM&N%I;g2KyLy_Zm`j}mb|fv7(gQ6DE!wCZbmm{b{ZQSOEbt#r_szS5@qe znGW4p5-H%%0Om5m?AH_iZQ@DfzN9lj07FhUhzsKPbsoMD;o-}O`V%3ePb8Ja9{}Rt35YKz@bDD?{HYEg zTq;H6@P~lSBtnhlI@=ZGvMIKZX@gTsg*XEr)I9Zt2A}v(|9}veCruI?WO^esuex z*tq~YEJCKu%bMRSIq$^0flHB(_c8B87)=}X2sx`YTehjz4X{YySvZ(uapMlMyI0W= nk?Z!F{6d)A^f^99#&nWTPP(0jN*~i*9!hI*%?x?nlHC1o4dg`K literal 0 HcmV?d00001 diff --git a/MikroNUC/20260628/20260628042001-Config.rsc b/MikroNUC/20260628/20260628042001-Config.rsc new file mode 100644 index 0000000..31601ff --- /dev/null +++ b/MikroNUC/20260628/20260628042001-Config.rsc @@ -0,0 +1,4922 @@ +# 2026-06-28 04:20:03 by RouterOS 7.23.1 +# system id = NmJcEM+8XAP +# +/caps-man channel +add band=2ghz-g/n extension-channel=disabled frequency=2422 name=2G-3 \ + reselect-interval=20m save-selected=yes +add band=5ghz-a/n/ac extension-channel=XXXX frequency=5660 name=5G-5660 \ + save-selected=yes +add band=5ghz-a/n/ac extension-channel=XXXXXXXX frequency=5160,5200,5280 \ + name=5G-5160-5280 reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5180 name=5G-36 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5200 name=5G-40 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5220 name=5G-44 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5240 name=5G-48 \ + reselect-interval=30m save-selected=yes +add band=2ghz-g/n extension-channel=disabled frequency=2442 name=2G-7 \ + reselect-interval=20m save-selected=yes +add band=2ghz-g/n extension-channel=disabled frequency=2462 name=2G-11 \ + reselect-interval=20m save-selected=yes +/interface bridge +add name=Bridge-LAN port-cost-mode=short +/interface ethernet +set [ find default-name=ether1 ] disable-running-check=no name=ether2 +/interface veth +add address=172.28.232.14/30 container-mac-address=22:A6:30:44:4A:A0 dhcp=no \ + gateway=172.28.232.13 gateway6="" mac-address=22:A6:30:44:4A:9F name=\ + veth-awg-MikroNuc +/interface wireguard +add listen-port=14587 mtu=1420 name=wg-awg-MikroNuc +add listen-port=22022 mtu=1360 name=wg-wg-Master +/caps-man datapath +add bridge=Bridge-LAN client-to-client-forwarding=yes local-forwarding=yes \ + name=xs-DataPath +add bridge=Bridge-LAN client-to-client-forwarding=yes local-forwarding=yes \ + name=DataPath +/caps-man security +add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \ + group-key-update=30m name=xs-Sec +add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \ + group-key-update=30m name=WPA2 +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/container +add comment=awg-MikroNuc envlists=awg-MikroNuc-env file=\ + sata1/pull/awg-proxy-amd64.tar.gz hostname=awg-MikroNuc interface=\ + veth-awg-MikroNuc layer-dir=/sata1 name=awg-proxy-amd64 root-dir=\ + /sata1/awg-MikroNuc shm-size=4096.0KiB start-on-boot=yes +/disk +add slot=ram tmpfs-max-size=100000000 type=tmpfs +/interface list +add include=dynamic,static name=LAN +add exclude=LAN name=WAN +add exclude=LAN include=WAN name=Internet +/interface wireless security-profiles +set [ find default=yes ] supplicant-identity=MikroMIC +/iot wiliot servers +set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=P1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +/ip pool +add name=dhcp ranges=10.30.30.150-10.30.30.200 +/routing table +add disabled=no fib name=To-AWG +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=test owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \r\ + \n#:local ScriptName [ :jobname ];\r\ + \n:local expSrc;\r\ + \n:local FileName;\r\ + \n:local FilePath;\r\ + \n:local DirPath \"tmpfs/\";\r\ + \n:global WaitForFile;\r\ + \n:global IfThenElse;\r\ + \n\r\ + \n:foreach Script in=([ /system/script find where name~\"Amster-GlobalConf\ + *\" ]) do={\r\ + \n:local ScriptVal [ /system/script/get \$Script ];\r\ + \n\r\ + \n:local expName [ (\$ScriptVal->\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/700/f14f095d\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 13:30:03 22.06.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\r\ + \n#\r\ + \n#root.mnuc.backuper\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n#:local Script AM-GlobalConfig;\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n#/usb1/mikro_bak_rsa.pub\r\ + \n#:local FetchFile AM-DOHCert.rsc\r\ + \n\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\r\ + \n:global MkDir;\r\ + \n\r\ + \n:local FetchFile Binary.backup\r\ + \n:local localDir \"[usb1]/scripts/\";\r\ + \n\r\ + \n\$MkDir \$localDir;\r\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +add comment=awg-MikroNuc dont-require-permissions=no name=\ + awg-MikroNuc-uninstall owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n :put \"Uninstallimg AmneziaWG...\"\ + \n :log info \"Uninstallimg AmneziaWG...\"\ + \n :local prevDNS \"\"\ + \n :do { :set prevDNS [/container/envs/get [find where list=\"awg-MikroNu\ + c-env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\ + \n :local prevTmpdir \"\"\ + \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-Mikr\ + oNuc-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\ + \n /ip/route/remove [find where comment=awg-MikroNuc-tunnel]\ + \n /ip/route/remove [find where comment=awg-MikroNuc-dns]\ + \n /container/stop [find where interface=veth-awg-MikroNuc]\ + \n :delay 7s\ + \n /container/remove [find where interface=veth-awg-MikroNuc]\ + \n /container/envs/remove [find where list=\"awg-MikroNuc-env\"]\ + \n :if (\$prevDNS != \"\") do={\ + \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\ + \n :put (\"DNS restored to: \$prevDNS\")\ + \n }\ + \n /container/config set tmpdir=\$prevTmpdir\ + \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg-MikroNuc\"]\ + \n /ip/firewall/nat/remove [find where src-address=\"172.28.232.12/30\"]\ + \n /ip/address/remove [find where address=\"172.28.232.13/30\"]\ + \n /interface/veth/remove [find where name=\"veth-awg-MikroNuc\"]\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg-Mikro\ + Nuc\"]\ + \n /ip/address/remove [find where interface=\"wg-awg-MikroNuc\"]\ + \n /interface/wireguard/remove [find where name=\"wg-awg-MikroNuc\"]\ + \n :do { /file/remove [find where name~\"awg-MikroNuc.+tar\"] } on-error=\ + {}\ + \n :do { /file/remove [find where name=\"sata1/awg-MikroNuc\"] } on-error\ + ={}\ + \n :do { /file/remove [find where name=\"sata1/ru_ranges_timeout.rsc\"] }\ + \_on-error={}\ + \n :do { /file/remove [find where name~\"sata1/pull\"] } on-error={}\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\ + \n /system/script/remove [find where name=awg-MikroNuc-uninstall]\ + \n" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=Bridge-LAN registry-mirrors="https://re\ + g.vados.ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man manager +set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \ + enabled=yes require-peer-certificate=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=Bridge-LAN +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set crl-store=system +/container config +set layer-dir=/sata1 memory-high=200.0MiB memory-max=4096.0MiB registry-url=\ + https://registry-1.docker.io tmpdir=/sata1/pull username=amsternl +/container envs +add key=AWG_CLIENT_PUB list=awg-MikroNuc-env value=\ + "NAonhRSuFIrFpNKTs5X32ItcvFuO1kiJUigQZb95YlE=" +add key=AWG_H1 list=awg-MikroNuc-env value=472437748-472438637 +add key=AWG_H2 list=awg-MikroNuc-env value=707808381-707809250 +add key=AWG_H3 list=awg-MikroNuc-env value=1609078552-1609079495 +add key=AWG_H4 list=awg-MikroNuc-env value=1012329484-1012329741 +add key=AWG_I1 list=awg-MikroNuc-env value=\ + "" +add key=AWG_I2 list=awg-MikroNuc-env value="" +add key=AWG_I3 list=awg-MikroNuc-env value="" +add key=AWG_I4 list=awg-MikroNuc-env value="" +add key=AWG_I5 list=awg-MikroNuc-env value="" +add key=AWG_JC list=awg-MikroNuc-env value=9 +add key=AWG_JMAX list=awg-MikroNuc-env value=920 +add key=AWG_JMIN list=awg-MikroNuc-env value=105 +add key=AWG_LISTEN list=awg-MikroNuc-env value=:51820 +add key=AWG_PREV_DNS list=awg-MikroNuc-env value=10.9.0.1 +add key=AWG_PREV_TMPDIR list=awg-MikroNuc-env value="" +add key=AWG_REMOTE list=awg-MikroNuc-env value=109.107.177.79:55055 +add key=AWG_S1 list=awg-MikroNuc-env value=90 +add key=AWG_S2 list=awg-MikroNuc-env value=136 +add key=AWG_S3 list=awg-MikroNuc-env value=45 +add key=AWG_S4 list=awg-MikroNuc-env value=27 +add key=AWG_SERVER_PUB list=awg-MikroNuc-env value=\ + "o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +/interface bridge port +add bridge=Bridge-LAN interface=*C4 +add bridge=Bridge-LAN interface=*C2 +add bridge=Bridge-LAN interface=*C5 +add bridge=Bridge-LAN interface=*C1 +add bridge=Bridge-LAN interface=*C9 +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes \ + forward=no +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=lo list=LAN +add interface=wg-awg-MikroNuc list=Internet +add interface=ether2 list=WAN +add interface=Bridge-LAN list=LAN +/interface wifi capsman +set package-path=/tmpfs/capsman-packages upgrade-policy=none +/interface wireguard peers +add allowed-address=0.0.0.0/0 endpoint-address=172.28.232.14 endpoint-port=\ + 51820 interface=wg-awg-MikroNuc name=peer8 persistent-keepalive=10s \ + public-key="o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +add allowed-address=0.0.0.0/0 client-address=10.1.0.1/24 \ + client-allowed-address=10.1.0.2/32 client-dns=10.1.0.1 client-endpoint=\ + 10.30.30.10 client-keepalive=15s endpoint-address=10.30.30.10 \ + endpoint-port=22022 interface=wg-wg-Master name=MasterPeer \ + persistent-keepalive=15s public-key=\ + "64Y25EUZQQt8EIeAJYD8qWt+te8qvGEepnswdBgmzlY=" responder=yes +/ip address +add address=10.30.30.10/24 interface=ether2 network=10.30.30.0 +add address=172.28.232.13/30 interface=veth-awg-MikroNuc network=\ + 172.28.232.12 +add address=10.9.0.3/24 interface=wg-awg-MikroNuc network=10.9.0.0 +add address=10.1.0.1/24 interface=wg-wg-Master network=10.1.0.0 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=Bridge-LAN \ + lease-script=lease-script lease-time=10m name=nucDHCP server-address=\ + 10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.9.0.1 verify-doh-cert=yes +/ip firewall nat +add action=masquerade chain=srcnat src-address=172.18.0.0/30 +add action=masquerade chain=srcnat src-address=172.28.232.12/30 +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=bfd disabled=no distance=4 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=20 +add comment=awg-MikroNuc-dns distance=1 dst-address=10.9.0.1/32 gateway=\ + wg-awg-MikroNuc +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + wg-awg-MikroNuc routing-table=To-AWG scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set www disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api disabled=yes +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both password-authentication=no \ + publickey-authentication-options=verify-required strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool netwatch +add disabled=yes down-script=\ + ":local msg \"Host MikroYellow is DOWN\";\r\ + \n\$TGSendMessage \$msg;" host=10.30.30.86 http-codes="" interval=10s \ + test-script="" type=simple up-script=\ + ":global TGSendMessage;\r\ + \n\$TGSendMessage \"Host MikroYellow is UP\";" +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260628/20260628042001-Diff-Config.rsc b/MikroNUC/history/20260628/20260628042001-Diff-Config.rsc new file mode 100644 index 0000000..81acb59 --- /dev/null +++ b/MikroNUC/history/20260628/20260628042001-Diff-Config.rsc @@ -0,0 +1,32 @@ +91,92d90 +< /routing table +< add disabled=no fib name=To-AWG +4784a4783 +> add bridge=Bridge-LAN interface=ether2 +4789d4787 +< add bridge=Bridge-LAN interface=*C9 +4794c4792 +< set detect-interface-list=WAN internet-interface-list=Internet \ +--- +> set detect-interface-list=Internet internet-interface-list=Internet \ +4798c4796,4797 +< add interface=wg-awg-MikroNuc list=Internet +--- +> add interface=ether2 list=Internet +> add interface=*C6 list=WAN +4800d4798 +< add interface=Bridge-LAN list=LAN +4817,4818c4815 +< add address=10.9.0.3/24 interface=wg-awg-MikroNuc network=10.9.0.0 +< add address=10.1.0.1/24 interface=wg-wg-Master network=10.1.0.0 +--- +> add address=10.9.0.3 interface=wg-awg-MikroNuc network=10.9.0.3 +4837,4838c4834,4835 +< add check-gateway=bfd disabled=no distance=4 dst-address=0.0.0.0/0 gateway=\ +< 10.30.30.81 routing-table=main scope=30 target-scope=20 +--- +> add check-gateway=bfd disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\ +> 10.30.30.81 routing-table=main scope=30 target-scope=10 +4841,4842d4837 +< add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ +< wg-awg-MikroNuc routing-table=To-AWG scope=30 target-scope=10 -- 2.52.0