From 1071174c409c92927ee3f8d8f1a8ba4bb8b7511e Mon Sep 17 00:00:00 2001 From: vados-dev Date: Sun, 28 Jun 2026 04:40:03 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Jun 28 04:40:03. --- .../20260628/20260628044001-Binary.backup | Bin 0 -> 364448 bytes MikroNUC/20260628/20260628044001-Config.rsc | 4918 +++++++++++++++++ .../20260628/20260628044001-Diff-Config.rsc | 89 + 3 files changed, 5007 insertions(+) create mode 100644 MikroNUC/20260628/20260628044001-Binary.backup create mode 100644 MikroNUC/20260628/20260628044001-Config.rsc create mode 100644 MikroNUC/history/20260628/20260628044001-Diff-Config.rsc diff --git a/MikroNUC/20260628/20260628044001-Binary.backup b/MikroNUC/20260628/20260628044001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..31c30b1c7732ec8060acd279a1fc167765f869b9 GIT binary patch literal 364448 zcmeFa2Ut_f);~Nu36M~viwI(9f*u1qJyB6QqBLptk_wSPFbNb1;M$7~|&&D3hVk`)6yF^~mZ2$a{H3MTISy zjzI_oplA*ip`{oyN6{P_LUe=>1w#lkL*OScVvUg-D&9( zRfa7=LOC5OHGypQhAwI~S$b7Qihq_gCDUJ~OtB>U+Kg-%?#)m%#|o8W_D~Mmz#5?P z#!l59LNjJ^g;J8G)>ltkkiC;DvQ;vLt~FVCI$1ddA@q$*15+0Qmk~mZsy)Ai5ZX)T zxr`7hA=4vF5K2eUoK%Ei1Wg#i7*Q02F)S?+#z4*CVu~<#idsWQSmVHG4zNg$FglFp z6Dne0PBg^8>e3Jc)uSPXi8Bq+n_>vjXoziUXy!4sGWo4qV-#o%qaci~@t`3~gwelN zR8&+pX{yktDzt1Hgt^5JEi>3@gGk z2%$`bkQpi``U-vSgAnSE5E_6G%7?iRB9M=OCB(RyAjGhyBgAl!BgCMjAjB}W0kO4* zXK5gbYWSJ~LauK5Q zElJ+?g<}1nmVpQnLN^#8Mx!AJG4h8Z#4u4J#5Qnnhz&ySFo^Ehmv3-G1t1a0&y6O=i8YFoJhSaJ3K3vou+D&q)KVmNh;=dREGsTrXu&IypYzp zF{#p6otVS*56g`SP05Px(58btB{hl@$xX`b(;+TL8x)hA(pncl8ceBDZZslbXlSIa zhC2;KbHG?ibqZ~^(aL>ZeDkO4#ZDlA>ri?6OQ@xByj#i~tuxl$sg+k>OL_>^ftthk9YJs5u zL2)HzG$?RQMp!1g$INPFOr;W8T2>~YE456n*JR03VP3)~yxKh+MRPI`!g?WubjYA3 zz=EX#umYQ)K!{E^Lr4i;5h*$5#SwjgrErw zu$~=4z$?P$nE?rOgy=9bRv$x<;E@^dF%Jt4R^|OBB)MDqY%th8{{ydMLj}k3yEJ`Ol0P zwI)5(U!uoUt4P=A6?1Bi7$WBovO|O>_&4VettLgZS}3ZMEs<+n+5F=1B%vBIHh2W#|>!428bZS{WCLMiR7=9HV}92Noev z4DjEucEFGVsWP(#%nXGpB~_}?GG&?!r79&$D*-LYOqJ-EvQ$Y%ibCF$nWvWdZs>A!8EKrnW_w?Mk`lnnR*RVl9{Q_CH|P9$YJUfdRPMMx*&wf5dyspIvcY= zh?v6m2w@HgfldPjhSfs|t8Y;9=mbKTn*o$y9wbm{j1blYA&dno7&A;GF|mwBs5wFi z)HbZ~TOx#7A%p@E!h#UOz_%^Op%X%MJPV=DXX?xr9#l#0+;Dndn6gF5n}B5WKLVH2qcjl&SbWITrGPfQScham=fk0A!<1EfA; zh<@6P0MZQX6Fm70moFG%n196#xc(b?FUJrgzXC2DDTu)-p%|voP70#W9g3k{6htqy zM`#blP|Tf*=)h+Ws^RaRRKwo^s!eT%kT=zkuMy;;#hgebmL1EpY+D8shrFe+O@|YL<)+w)LOKUX%aM z^tH>B^04h~bQa~KfI|5*+@0Egw8oQ&!`mi-+(u8zluFxNki$7cVX zS!}P#Q0KBzC0cooM5|yCxLf_VvlsyOKaa(x{~Z>)re~@3Dg$d-|8cZNM8p4iy#8*5 zVg4UlVOWtMn59dXs0lAwrbespuGYxXjB%GdaybkONn^U4NJn#+#8w0s6wPsi)pJ9* z&=GPshiJdQUZ0zQyO3TJaE=*b0;Z4xe=>#eSPLHd6cqKY+$Ac8uu#RR-`CfRy6 zP6Y0Bs`TzgUz*XO*NLnU?wwFH2YeQ=rv<_b5O;&PAu&6^L1fsqf*8Ot1{DGgg#V{E z>1jj^!l4Mp$B?Z8bBt-oGmd-?J`ZC+q!k77M00Eq zT51S1x*`Ofu9~nw4-s2}v7j_Yh`!s0ftpnE1YDnnP@+3RZ1vzzl==8PDkGZFIU`&MAHu3c%U#xj;zj#^fq{G6I{oP@Hn@Hs8s*GBx z0h$T_YHidUNuX6y12LNF)U=lL^BB`@&aE`(@(a#Q#Wi`Gw_TAW%qX4e%j zOQ42sh}S2DK>Xu}!TOFp5Z9|5tQrKF070}Wg8FW@8R|0N+ihXTs4h?BC_wpn!pb4O zZ#OqrO?a1@6lMdiLblD7{zLRZj&}W)Bt#5uoUB>_1ToTK13`DGBn@0dF#Y@`5{Yr* z8>6Ifhk&JtF?K*qN@B_r?ojZU+thRRbO^X|bK~{i?YNAu#~xcFgp8}{Osz(#QWHuB zKDWpz4EI|onp2mEMu6nNMlk0}$uGyeNil-_vVaJjoTW>bvVg-zRa={$GDi33StEm8A?lcGO@tcD-Az)m6goX{ zwyH{9szh6{<6auQcT%BH#4jT#J<44}Xc?z)v_<#r1IAvmqJkcCdKawu*dca=rdxJ`Mw+hSB zYBCl6(HfmhljCU6s2CAvG0KM}ism#$h(51XU{45r5nCHzcY(1TPqJ;edm45ox?9Ag zw~>WK{~_uS6bCcb98nQQZ2cNy+{4#Pqx0AI?$v`VEhO*I8)F*utuYNY%9sY-YfOXg zHKu__9I_sW1{u?}Ms+U{nbt0h1l3gmJRLlrW|tlQ9kXV5T-ih|U_6t}><< zC<1#{rWXbFgsCG_XwzXY1Jvscm5{h6f!rhkQ*Am-Q)GzxOeCMftv8tlpz)jpN03!Q zZtw(pu9JD-&wI!a5a^z3WE#LqADEvA5n&NBJ5uR^o@mY(gyvEa4TS_GC77bvfXIaS z2y+w?6A-V_=$ReE1{2VtsiF56>|YvWz*q$0flwJ5vL)3FA$p!i@)+1DVgP)w7qQS4 zA=qZv!yD!~fMyCrtf)gk!Xe0l5d9bhp<(cl*m?_%vO0!YgWa(}2)~Zu1=wZ00P8WA zO2H@;TeOgpHvfgXAG4G;pqpaxgnZoGl-^`$>yrUADi!x*Ti^^+Y7))Vo|2Tnw!$so zi@7}wdd0TE>%dp4J<$xaV;Jt{WX0j*Vw{T;pH5CzJow7taQR}sxYNH}Up8)IYDQ2) z!Awp57)V1NR4Jmhu&Y>cd)0xSz1F6Fp*Qf%c{%4=U(2(R;<5Lmo=VSt!nfJ?dtNVe z2>ac$n2U!yTv+?wo%tniA9wiyVYa5s+3Q*fGe9J3YVs~d*K_yz!}8H~o1(Y0@@t)% zJCa{q*7A$G6FHL!>8CO8$tD)0vIpbo7r&0)deMxDmY zi#pAheVyTXxY_FDH?hgp`AAJcxSWFbj#{&?KkMwfB+AOSPDyV%eR+KUjM=hPWA4gM z#_XEtV$E+>mxaG^E@TBR*fgfwmaP=rx!Z&J{f6A!dF|sq{`^JJ8@fF!C_C`3VA@{F zgQP8EaKTZm*K^<9$1>a(P4sE{s=WDdglu5iz~n51=-`kosgNG{d+7iFKJ;Tj#780I z9;jgRluDUI&X?jihcD!^aa}~^np@#ilNeKxIgOa3?O0o`$4G2}Gs6rH4Ju@;xW{+Z%0&;S4{N$<>l}w@4`^hxv z^+AJH=88~jq!KlgXdoo$7c}aggfP&k`Rh9BQ$WKKyZ*}=6i})wJPk@!Qd6m7uyH#O zHf|H@6a#hYW~9JC0JI+x5?TkCYV+(tm@7cp<;%)|2 z>{MBzCX+xl;{rCDZP3i1nz`(1U;i5<6ks0JJC2zkY5``A@B+-7Qh;ITPV?Kg+8aw3 zo?Fm31`C<=E`{ioG9ld1ep; z9wSS;Z)`Sr*SzIzqWZTy7292%-ED4L;ken?JRYQJwL|%G!5tTueN)y4oJqnPf@$)k)x+!N*Pfx~ z{G$T*kIfV=Z*6a9{`q?7%-Hy~Z*Q)qz01v|FYv1Owe25+ceA#gKUDs9Ps0w!wx-YQ zqklNH@e12bcQfbCI}uelZNjK=nRixLyY8H@tU`AFo>`A`3wF)w%y@Nv%-w{yV`QIO zExEc;c~h#qa3&*Y^lR3pCpm5A%<6FGkB++oJ)g6D3&L9FCXR13^;UlCrNS34FXZ;9 zdt>FJIwvw#hB}G-Bd^>JYuRL*AmLQAIMWY)kM_5ZR7>3Jou{qp-J)r;{In%c*El*n zzBGK#Hj(rr#f384RAtD}^ zCz9X_F^|WS2}Lp~N5EI$e36{55Q%v_DNioqDa8T-M=IwCJiA>BFi`g zR01o_-4xz9Rnl0voZ4XL^Ak=rfK`k~BD3D42X`|bSbzS!&F;CW(^&Bj$c=Ck zc+=|Q4yN=!OfeG^Gb&b@qTt!aG=|Z7;;Fco@jH$Ut(U6TXEyWq*T{64H5Nm7U}Y}K zP#&2}CV{n*u13c1#0u6c5gd>rJQ%v(kk%X*_V>Mbe_m}EW;{i|ylP17< zxP>XB$I#Z;&~IuAhMSq1qztsgFr02`3JFS8ic~29C5Kz$gtPJ3w$pEJKC~{s{&D{{8|^>_t^27dv;8<( zV@^%)aJD^rfDjwFUYXvw{yHTi{Y*yD+ijoyF^2Csa!QmEf( zo!slLt9a7t=Cy)%Pv3SN?`h@LWRiE((Rt$@lx|r$Ouyk(`hsa!Kb&i}Wj`~QKatHS0o5zgT&#Y&lguaqlgV!o6slZa$8 zp-3QIB%omE;LY{!Dl!@3}IW84&_!2RJ&144eQzO}}dzztdpU~d|sVG&fZ093H5QN^mHiWR~6 z&M$fd{Gtc&0?H}_TF20LC;%Tgs3tfjLripgGm>j;d)yXqv6;Pj74z8j@p|yk+}^et z51WG1)Q`=^{S83c_g6Vd_)5jN7$=>j;42lfIb608!T&R;{44Lvu3l35tIr*IA6$;q zTks)2vcqGKLH3IeFhj8BgI_%u5;@1`$@{@BF>^Ow&769OgRL`ZX%pw`aFN<2*;jzH!SvTc6Km1`effy z+QjDJ{Ww-{kkaGuXjQsklx@8&=hnOS*eLo;8Flj9^>DKr<}IIg?RU7}m$iQ+EF3RY zwevQS)DImvs_C+j$(}b?HXAs-PU8cv%N}=i+dO+VZZ1Cgsxbdc+pfns&xS}tym^#l zA8g#l=9x`eWvqKNvk>b)r}Wd+g!CS>b~Sz2Va3+&;a^YgccHdmJdI>`QH5`~6=4AT z5X$=@bO&+E>ao45P+qg?L(FVad^f*%Ut$uJ!Q3_e9vH$6-oytz>N9i_-g0GnL{Yc5$`fbs=i>u#XykUPV z!DhgS@H10BZ}I!Xc16)zpZrgc=5%^2oU`KIP4$K$PO}0od&TCC<6r1bdzwFJ#dHd5 zlg-;pMTcm*z~@@;xy$A}o4q2{Zd&_;W9^zT7M6s5Gj$a1nQ@P^;JN70CHb4C1023m zp3FH>VV3H2)uTwn>NEOG;w#nN?%bn&0{WWYJ(|~DeE&|?_5<1VxF?&w^p9HgVco-% zu}k;QXp?AqAg}*TfasJC)IIG5;;*|1&YK!f8A{n}n`@h_Wc zz+6At`wZB1UIh)(Arehu2hv;GyG8&yF3JVP1|(&u`Y7}oW}-rtnxTQsO9~w`!7s?q z9iq_yZ?e*vRVW8uHBgCjTmhw#SrWBbI=w>9j8W)wG}^RZicSxAs%QPVR2Dx z51eVxY0f|86x#>)hCCMbZhy`%V`Wr(=bv(ofM6mv&f%~*xR5LCJl%TygEqTk{{Ey{*r3E@?8muVW(3A z9+>z(kIc1iyS?>Q|4-U;;-lpaFY&bRHU^$zWBZ=nuw^-QZMZe=OgHBxsvBlp-=lGp zJ}pT+mN+ynY}u#CKLKA=V2hr8;+R>5*ZTt}p6@6szB5=Dp7r4eY*tICdhya#9w)JY z#S1E=r(4e&*-g8)cj(<~u4@?IJX?P*X|jJ?5^a;sg3&%VEDB_&%WhZ-bAvj2tY14l zsLSHaTcxLSj(MI#x75l0w^deFmzVEy9~gJpbkWj^Ny5|1%kOM>H;olGc*Ol+#zj5F z|HJT0(;gT5ltzr+ZWZpDbIM_%>$ZjL{WE>_R9*$wxzVD>R{AY1ryR_FM_@Dr?P`>n`6}d8=Ev?O?J8^ zPAqPHF573;be8GjBhSQVS6rPl-NJ{$Z@eyW(!)=WW+oLnhhNyjdpF>uc=~10t9Bn^ zn*#U(ZDI5if(9{yuiwJ`r^@=5l+SPB{w>`9GvTg+TznZ{#1n|*e7=$|Qt-q=g^5$r!INn*t(1XXj0sWcf?F0t=`*c}tRz~lyAKs`uCud#3G_}2wT z+bwk|me=7^S=Ei7r3u0Z7FL60NeM=07~S5yijiywBCts_v$v?mPqrKGYCv#~wX&7% zhc|`4Q|-Mgd-7+@1%SrJaZYs~nFwdIMU_6Xe-5bylppsUQefX9#hg+=!BD=P!bwnP z-&OjC(<|FsWj{aRb1rIC+#t!F<;-XXOU}4F%0n47fKegxDt8?ov^cDKr{tYdEI#Ub};~DdF^X$A&s2wkqb94^Ypns5`4(NxL!p#Y>cjwJBHK zmFr4p^rr5PYxd~)%WK86qsrHqOy)Oi-)T$5$xi`Wnr?odc>VB0yJpd=qeg7$GJWF~ zX28)r58mnl%~O?F=tC?fJYfd6$A^hK6NE*&kT;xt2`{cLFW1MY4yBFiG2zDkLzXvh zb5(~$cXr?3%Ng_&LZWy#{D>hWl6*LTkV;U zh&$V_Jl9{i9>j zq<(MGOqO-4JLveT-w3YsS5?&`Gsk2a?g^KW08v3u6*^;G4tAE4cmD4zJ={_zauq`@CT@OgKOL zYeL-a!7~n~#cUtt9y@L+2>`PfYtj#jt*`8x6y7;8sUK{(ytPJ^;b{uvrK4{XD zw-Fc1E9s}BMN7XCj?%Lgm5x%dIYzAhTmS!8Ox17w|6Bk6*8jit z|Nlh)S1sohLNQk+mf{?xTqKdOxe5+j#$|IjB8f~U#YJqkSis{-g*>rLBo>JUJSl8; zkn;pGuAC>6$~nYxt~Oj!xtwF-Y^7Wv=i*A4ge#Nq*%A?3DwPR%xPr^axg0s{YWOvL z4=cLbR|?=@ufDPX4|}!c2kB&&nEt(6lDU7qn%f=yxgD(L0{LHHHD~zUtOc=@^Dr#s zzWa&S&wn@Dz_{m@W!R8x*yRwx{cimhLct3tt?&Zu0J(lMNlGq$-EASCzi*-S`4wT> z>OTVgkN?6df=evQxHzoCIPg0!*th^+_~h6B1_?j;$?o+fmv@ZVYVpM)&;9JnojY}J zxLxZP^Pb!|IHUOVr1vk6pSIX8>D(@Sz--o>vN1ACr)OrF?@kT&3mi1_QLCWz=Bv&v zbm%DPJ&PJrW@E3`-dJ6@WM0~)kdrCbJS(WK3+}Z1l{o*uwIJxY ztxP3tT-^3x_0giHB3waXqgBPP)vfH>oMDOgnKP#7-WCc*75eOWP&hhn$P(G7*_<27 z3D&QUuVak8u3qsuEpILb7b`pOm5<&!JMP-j^O5tPAG&rXGS3OydU)vAm{Em)ESGwPL+u-8_01>9F(U}X=*a#4RPcUuews+#!o)O&N6YO7|U{w}~%a+Im z0-i`IV&gnES0od1MM|z%A>na3IGfAmin$7|ge{WEa1KW-P$FRLke`Wn2jlSIYSkDUUDY{QNgB5!`?2H!s(Jb!S~Y6dRDB zmuQtLg<4)Cz-!oK*AyIzRT+qBR^?Ir`*zt`{_DH!Se0b`OWW*jLwxr-UO*wuQZ3u; z#@6&B{^B+}Z`{-1Lv*bqtOi5L9d{fYH@FfTS7rMPw*K{&yMG+Te-$JudA^7G_5Ikd zly#cUb6Q`Xm3wFY7OEt<-oA*<7mo(;{f38pn5UX?V?_OL_RN_ZBXc;7lfP|yHtM>^ zXYDl~$&|A9od!S4aNah&>9xU~&+EUWbw4nCkxl&Y@T9j}vs@qK-Ai2E_G6N^J;nK> zQ?HIs-F(gT2WGY2sowZ@;o3KHVea_d&%(Rq-A+%4lCC+?&_cGO*{m;LbJ0|Z{#2ua zK-ru1+Mdo<(~g$b$vQ6lGIIEyj<2M7-8Xbs;2)Q4iO%limfelF`_bg&X(Kkg%v*S( zC$;8SD1D7sqR&?AbvBBA={3hy<@4GiPM@- zZ&)xyT$*h%vD_U>MopqN@(Y>OhW)wlob!}JG3aHr{B`)zK~KHPepSGwH1BDjI@`NaG3j&{r((K${_(ZH<9y3eU&*Bv|A z@W8XrGY6a+u z=f6QVyuc7%981qzU0&mt3|4@#>PifUzfevgL_b&WxausNz6tNmN{1gK6EB-3-kbH4 z-!?df1jXs1gJM`AK`cHyn8Od_-W?*eb>qog>n1buQwRV=PuSxd~@PdeA=!(%LDe# zD9k_De}d=5u}|`%`%y-$u2|kgUYZ&!7T)aIqZj>2)3mYYxjWY{95Tda%23O>{4sS( zqKZ$f>aD!cxl!F2@A7xdrmeqJrf%16(W~*kt6r7Kp7r7 zT8!CZRqiOvUgB4r_P))m>qWzYyXnM{yY`hl_YT~%u$kiE&agp$>>0GGcN4#gxqk#M zDf53yi56}gs!ClQ`WJsnYwwKt(^QAdzEvc>#AN9 zMbXCMZXuTwH%`xSn;IB#^ipxJv7c5cE?CW6ll}1Qmkx&nuRB^csb5k4F>bMH=nL<+ zGNvSIX7a9a(++PnD+_<0G_w1$d5UjNyHE6cnxjUgCh;Dz9=Tz>J|h)p=PZ5QuRr(3 zg?{GO>F8v}5yAb@zF8YSVV_9g!@@@BXRb>$AP&nSBS&GCLGIy+Q7>^BXqo z3}_bmqCTgze*B}y9pA1kIXwGA`+h^NmXxVSE^51dMd7?}dpE0ryLHY&5*bC%22 z^Sez}u|p3kEe?mAFW9}aq@BycqC=n7#@pWtrj9B(fAif{RPTh&$`-N z^Y(I&xUcl*=R9uCE*i2nhOuPw3A&cw4_t z?v$(3uC3@h{zQv&18BmBSx?&Dot1WU$|ii$6BMd)8r1B|B;ETuv+gTSex3H>6n%|2 z{kU1d(3y!^K`z%JT)%nt0NT=g8_uxR@yhhpuPl$oNTd<&Tc2_Vok!n#Io6-dPd(ss zqSUoyWPlSb`O+3v&ubexsmE1J*j_f$KbbL*cQv!!o{~t$LdQk-L+)m+KX$0lFJr0C z*)wMwV&*P=iYtzIiavQo-=D`z4RUb0w*T?biOX~LcIg+B8|PS7$2wqL6H&@4s!#hV z3kJ{0Z5KUWQ1UeWh3)8E)+J9}lYRrgtcd-1`DWknVXbe*-fG+JQ=hv*)9jkES2vkw@C-&y>i=#fgUvvA-vQbZt&g$@Tw3BvnyN&jo zil($PW9M6>Sge`)etuW>v*nRZKDZ7V-mOXG@H8zm)plx%a`~Var@y+cOhW@xkDduW z+i~ym?B|?UQ}U0$NeU@*v_lN@1Q5POArrE4;-!SF)hhe#GVjbT(2a6V*-PFs)PLk~D~XBMVv~w4wl^Z* za2M9qSudcU-__gkbd+9O8sX)l`}q{dkTAZ-vFq$H zg(1hf(_H(s%3s*z-h(l#OFK6j+PY}{hap!!I9z`EEiL5atVg@Pbeoa6;o9|Pdp`9E zyWM6Yv%h##Vchh_lf(X~x9~o`s98{XNV_0y{k(_;*uA^=?fbq<4;=6IzUR1g-G+Q# z)hE%>tB2VyubDPib7lHWus@;bwD^7V^F<#tv$Dcyndnukh|Wl!AH}aZ(}bVOlaBlqGoUMGq2X3?|eq=u{rwKC1kg@c}tF$ zd;R?_x-WSbvGeG_#kwY5`-=OY^m%&k+3-C>>)G=nN-Ad0T3RM*aXN4t`ZoXDnc(7^ zt@f>byt4hIDXV4c>*%_-T{b~Han~-{)Z~GhFO8Qtls&gy(OUPdYa{xHsR?(z1%lPs z-p=fc)ut5=%u8k4@vHmqum}_noc*nT?~h`q$=iF{ z5^JW_<&}0S80E-7PwBi-Lf_czl0jdcH?K)S?BZ-qjMOs-Ul zMO>joDi?4?9Dz(Cl;Jool!&AvDO*CkmRh3Va{0JYDrAckVx>U9QLwo(v4m>~ZPkXP zD*YffYnFZ~Yu`IC;7AK)|UW__MF9!H5 ztiWeMuYA|{Pka^*Mmm0USlFK9+;yL4I%|#3)@v49y<>$__NDjWZcFRrKx?=t?%SH- zUB)c+=-s6INw>EHXUUE=*Sai zZzM`5UB5EOGX8dO_c!+f*5#&EY}-+ae7tuQD9_ZVOdh^5)79zpj+M*uPcC%E~XiwlV`d5ojUn^aH~4=E^PPTJ&IfW z>ZEIL&s_^U<7oNCq{Le#ls%bd75-xmj>ulI%4 zOT4?IG%_@K9q*RSixHh(z6-bz^X}d_tHAA@WEsue3Qx!Nb!*HvxpeA?fBTz3^=-=@ zMZLfJSt_`hx#@M$?f(5($ql_c8@U$g1LtjVJT2&Bt=XN8vwD0*t8l@!wZ(1=)4Mdh}Gy^7uymGI<;tHz198pOY^>cy5&Oc(?Z|ZV&mWer(7qMjKqgvS9~-( zBK90xev4+^F+692d?sZxe6DY{8ai zQwOhXx@+&v&CCaS<&uOpeYd`PJ91`p(yMl*e))Hg*+;x=w~5woikf zbKj(Am^YX;dos23?xC|4-+a5oyig>4*wLwR4x@9&DgKT7Io^45c5mdmc^~)8HgQv1 z33~MJg+FYY(xlCfu)?S&&Yv$`PBXjtA~gE(@R=cz9RnVFJ@ueU7qt)OtS^o9?R{v* z(=BN%>y)Ycir;!1x^Qy%jr~V697@`zehQUl%$PA{+CA5bwBfyEvkFGKws$FYIx9|k zvN6Bc`wM5~t+!o0{Ct56-c=LqxvC|7&O(Ph7dwE%!WkSEj(7p~jdWP_IfvIBIdW~# zck9_-ayI;x!=fR(0q#Nssx50(pMUACIIHP2?3*IZEI-_Ti~jjO1#@r@)tau9Wg%mW zHa0m_dOoYj<$*ZE%6aZLYrg6adg;NziRYK)CTZFZu^u3g$zMK6o+@<J=`60S@aZNIg@tN%e@!N{nBR@&MPq) zW%pvy+ne-Z+plMSPHeX$eskUUCG-9$a=bY+3k}}XcuJ=`yMuf@Z6Ck3&hf8zvrD~g zG5mS)P3q;gJT}a7;+R2CRl&i#7TK7`r{M#a`Ap0x3y}HuaP8;e(9dC&fc~^uufSdp zu8kP9QT;fFx6Ubl7^P%TaO^RQZHq3||2p*Gf@K5thZ(#T@pxR#fG%xqHRr_eu<_Pk zn5{3(INaBkw_fS9{>9o!HQu6Fo6Y@hv+2A+crM4DnE7n=0iIlPg`SFPqaL2_nP*nJSh(62X9?;#_jgeklB9Ut`x2u zntc7n(_xS8)^YG2T!)?KJhte>LG4%Y@9wr5k$rvHHqCaCtT^CegAJ_~U0Aembnm;j z6&cU#H9010Fs)x+cv!oRZ5!Ku{8IPT;rjMpZr*hgb{YI(c*7k9@f)}^+4n!qNEpX? zv_%>)_{6@=UG9!;@7ZC^uvYPPhP@SZPaDIYv-f>L%i;^R+jWokIQRP8T*K*fz`KiU z{q;|dj52*tp42|Zr=wS)Y1y@gtIl3-{P9j*>Z5^i=c1X#RQiM&qCfLq{1%(vV)GNH z-~V;7F}N~*W8mKy_%{arje-B^7?^Nn@Nq6rEKu^4Y`KIhmda!TA)n1*%jCFHDw2t~ zVy==cD_fNKhP$ClZD8gG6EMpx}_ob9NkIxnPSIV4uk4 zLJQM*DR-Ncf4^n$Z&@z57|-9KTK+)MUoI8O#E~;7N8$^=yeO}ib)nnxtVL}bO(|j@ zUp$~if_1+Ojk0&0Y1DXbn;G{?%LZ8S%iml+*nC*OkGDk+dKMfWvLx0kxG}Tu6PHzS z{hjp-2QOK@Otj(9CVt*E_L9%#!`xmr3qR5%Y3gP>HD_1htBw9$?F9Q&{@xW^AAP*@ z^7fWX%@uPTE*33Q1d2jk}Eft#DWz?N#7yorf`y7c;u3mwPF@9V3@$20Q z^Df@~G2ngkZFlZ;I(X0hX`6KGjh{6`ZLt}O^UfW zxdFXZamFP39aooEtQywlERq#14~p&9yX)p4?-}COU1sl`^6g&sh7i%$I&<=8%{gD* z`c-3!LqNabhj;dVG+^buVR+J`bME==RdeR$bB9->+W3bvKG% z2q}?^d|Z<99}csQNYZZAxQ{=(DEvNG`e#dp-y-u{WU9TTz__3K|GLOjZK&k)cycAq z6AC#>wi4%XI5N4E%@N~#g+Q#t1#Br#!4>kkV!j9$NjV%Dht1`2*mALwBUf-lN+q$O zvNl!r=hl}Sf(wG!0$~`J6BHiC5khd`2Q$M!(Qqm*!we2B&CJa7C(nb1v)|!!lHAe& z2MJ#$(@UuEJeuQ3oCs-8Ts;t)OPmgmDG@>`2%$8DPzFK>PQS{61E&!}xp2}cLMR^* zCyK&rUeR!b&V_?bU#QDXF0>^-ez)zQj(?C^WbD^ zE?lhPLY!dz2OP6WewtQG6K7o8K(@MY5hFOfx#mX%e_++}2jawR0sPgsmcL&9e|t3P zFgt%`KpAj?IWcB`?`YbQqsdZa$h5hc@P?*;#=ycn(q*J)vSga{^sEe(UZv0(k4QG2 zv<>$jD4OGf&{7P!plA*p%nozxhv{X7$}v-fV52l~`n5G=Bo1_UgjCh3>m~@fn`UN7 z)hZb=k6LrHen&vXKN|B-Oo-UEq{jMoPOWkz}J#-XQnDKyeI6K;hlpi?b zxe=L$GojtdG#m$Q%nwI88`Ho6W13#=@O57do=0;qgbG2^7~cM6IKv$XHH~BQaeju+ z4_PQxeSx32>7!Ii1-sD?*{GG-7?O0IUZD+DWV`>6i&mM77OhH5{*fS)$_%FIDz#dn z{V|JaRTe`_KV~tj%90|{N>UVlm6QN);lOlyWfohxCS9V+VCfVRtt^$LQ|RH`YvS~H za#9#Z3ML)!tuZ+QP*XUW))3F5IWR&{I|lQ@66S?LvjT_dtu;D*j3iwVZpes1Mhaxi zfsFQeZ=CDXJ~qB>M0{*goDbd`$17>Ht4X6;rPITpt1>e+8a2#SAgl>V4BVTbXpRL! zg%o7&<~G^f&FwHjmSv@`H;1EYp_5Qgj#?&>sf|aNi>r0emkI`My$QBJDP)4m z37tq3v?Yenpi-eakar+lrcA*}1_V|kJc3Mv{0tz|FggWfdKiXKAd2QtdLV`wW`h_Q z)dn$89UH{3wuXxhJR_K92Y-MOH0iBlaUy6o$lWAcBG>35$nx~6@-9EAgi@mtK2eDo zQ3*d~0E*_&d!RxpdimB1*@So_e4IC;R}*LB^fehikckEX4M9hRc$bdSMMW43}$ok zIVeM88m5IY4a(4%24!fh6ArRBKDVR5bHfN=#0Z#>eKm(}A|oq_sZgDjG)@GI%c?Bd zqib?yNjkwGC_#ZvoAD!9e1QOOQ#sIq#W4h{(YUypg>0cYx|u3G(J&VMad7BR6ec}z3kFA6)hGzm&r33@mo(u-u-I%^b>ygJ@=S?7 zRi;ca>VBgo2HkJ8vXO*^j^^My&u97bV+GGmfD%e1$Sm7tK(n8@8+jKiDl z;Y9_6+y$WMAB$6J7N@n33*yvP7>t2jqi6T_PfwGu$i{e zUZI6L!Egb{gAd#tYMK$kz5p22^8K}%EWIitg}5t7W0>ECENh8SeiE6sLRHVLFoe1Q zBQXQ=w8Rj@Ef%P>N97DSBZNUQ!wh3X#}LXl#}ETqV2ELEg`vjg(Hv$)Io;gNt(^&m z8e2wlyerBXhzS>Bkdja|r)EuHl;}VXl(&rLcvO@#E;pm%MLb@=+V{?k(4n`gZ(!jA6)yl4PePj(~FG1N$ zP}UyGu5^851!Y&dKC&dsekHhFy{tI{5$#@vvX`N(1JN!6QHgdL=;!U4V}`OqwNv5G?KC&o#>e({!>_g*;2G&;nDy;%y+A2BNTuO#35*W|3)NE;uOQ!$t^QBGV~U zC`&L9^TQ0wN;b^8bZ`y;F|1w)(O;%v;140O40OLqShhl&%M6v|G7}V)FQW;|$X01J z8R?1)Ju_LNRY|03g^q)xC zAr~Qk4AJv7Eqb!y-i$$v@x$w3#26FE5khjcP!wWdmynpFKa8>@L(UAA$kMVhnL0&= zoSC7i_O5Kbh8Y$uQK|i)53HJfsG7Ql;w-~-2uqi!)Z}b+42rJhj{rO+V5*Jg>-#kr zh7d+Y2z&+%E6_xBU@Np0-Du0|n86wm(1u|gGc{Vh4h}c~;a)}xGzhmb4Ng&Gnp-W+ zLkO)T^MlO;jRK#JRLCFA0qbau5C*mmY_}sqm=i)+J%qsbgn_9xL*>W?A>>MWQ5qma zypu`#9q6bWd6WJK=nxgO8xT);SQuaz8ORR&jrO2v2>%NREDq~6HsPA|fGpsbgcU0T z6gVTFiV$Nzp??2HLa~2`P&N?C`BOso{@sNBTO8#8q1-Oh;eWWxYp4cGxh81w`KIm7QW>O;yEE)B>G z?of>f5zHVEIzTpaM}*uh)e4DD!7|_j21FM!vSgvHL*fWFg7Q>=iZv=vqi+W8;FbVh zw51?Ir2sVs4MTy7>}86KOjfEoC!LjD%eDnjlJ z4DdH81afd*xK=jZ-JMpjk#4kZw9U@%=7aevM|_ndRjJ?GqWKW->+7v7DZEyvZQ z3vjyQ1l1rVRgq1~l8kOQpNVzirQjZ0GW{E-CjA?xCjA@Z)W2b!(7$1w(7*rE*YP*m z>_`m5wuad;Kjlxt2d&oo2d_uzPqbS9ZoBnA3k>{VXY~vBKYQ~0!K2SMcOG`Oo_02e zLqJZ*zOeDH`;Gs~PpJLut7#l7g@t_K8~=|q`_(l5p5J);o2n{*HI08WZ2Zqjv+vya zpYbR3C;Z00{S&|YKl!cyxD)!5e&b6&^UvtoBz-Pu{AaKuPRe`)pU8j|d1cbSFHPXz zzt29Izlg1G>-WCV`Z+eUzyD`jt*>DNihuRp2fzHwS7fVuMc<8&|Jx^chkv0Z{VCRz z-iNUc((vP-fM;|aTjAFG@EQGdtM&dr`bqNVzW=k=S|qWCaQ6H>)Q+Erj2QlWtM&e0 z{L`f2kh6$X4FW~Bi&w~184R(k;wl|rh?lV!fN@!-mH%(6)%puxYqkCXjF@l|f34N} zX)rt__cvOtKM;rMkFY1ha?xtF{)=z4TIU7|NT4f zwOW4%0tF7}_t*iA=P$q4YW)yG2YtQQYE7ifUwN<9>Px?W^}SZ>DeM<;RKM41JrhgS zfAn6f_1{RDzy4mU_51L4w_2^g@m{O-ccq>G_`O!^Pl=W5KY6d!I)K1xwOW7ky;kc8 zPKH*i^|#+^wSEscfMF6eQ@=|53a6{@`2s6!HHsCnDrm# z`x*Xxx$)r#QXqLX*)0a{_oH-_pm_KO#yI!pL0aI2iK_ABpj?jdMfQl_i__{+UZ554 z?bgAwqa=GcD)I8e57rOzB8dk_vZFL<)?avGYCDXBG#i@Jqoha-VE!`NBrln_SN?Wn zUM`wp-v7dmhBus_$0Jj3Z}~8(bhAq1w{?M#?;N&!Ye!bD;y_(1c%&{hiQnzj~Sq%ni;4$Wy?WNCJ2qP?us z`0QnS0)pvNKfA?XFZ;oT50M&rNV9_+&F|U%P2XIzKd#LwNZ|JwX#9<0A;@2Z$S1O4 z^!00V$Q0#>K#;ugh7r-$;zq1Jn3MWDB63hqKeDh#FSRM~iZb#cE5|}`UTGRZ@+uij zt3L(+JqEG{z!%h)?b|`2 z2v8H4j}(39kkSrDZ2{QezTcqps|L?OI!gKr1S(B&*F@c-9PIUa5$JM#m>VY~4v5`n zOHKm`|F>|ILRVTn+l3+hu)@ znV=eHl<+f4IU5GdQM1lLMCJvAvoH!xrk%^#3d>TVQS{B>%9jnTUT#2h8YC7_1`Q-0 zOEz8@M7Yrp;#A{k_Cl(?%J>jws^OWzQsJu-W8=-mt%`tCv8329i$Mb$*&e_~Z)owZ z3HbZ@crr?=NnDnvc`*z>J&nuKl*OO}cWPa*g@Z7L7H4)IfF7XwfQ1OVHD(sT zAbSKds=Uy4)t%DaWdhaY#6YFc0rAELGNz%0C2A0?S-Kc0?X zn!f3=rc7f&Ls2h!Lq!D_NeL(?>EM`QTxe79+DE9rXr!&(s(ATw!_>O~)b&0Xo}fuI zg~sEedilmAqcXv2CG<-p=jm+|Fld$Nlu5MK9u?_%h2DJl!FoYBFl~zq8ll^qgoI#T zwEaoFn5ay&7?~AXw|yD-q8+wN1wb+(eZ6IOhPzvx-`(dz?=@K05YV9@&~Mx<(6~NYu{7CGh{VGr4Z2G0uKzuFDrVO zo$Msz{3J0|F-tA}_mSTkaOqz=kkP4xXH5Nns-T3^H*oJxYtR+L^MXBR1Q#@2p@p##L}# zW6|?IX*crvs#YPP@ZIF>^LR8(cB{OA9*&B-726y?pA7HseD;Wk8h#8+9b5~tz`Z6Q zSwQ=1hUuFKQxciiuUX3P=lO`16Vs=TM1U(1uD;oD6uCx{&X}vq@UHNE$BA{Q;19Du zO-EIlbt+tq+$k}xJ}Egm0AKHk+G4JIUW};8av7I&bbjL@Zn=ugu&h`$i3+?vOX#(2 z$p<1GlXee{q{BO1zY6I;lcORolYV3yph$%MxJ(BSIqv%A)5H`B8Zp&TV!U3+lg)OL zv@-i=*h3yB1-gw=za_3gBcX0h+|IXmx_Knqp-fDcScRP-63~$`L zdDEgfu%rY`+Ba?gx7JXFhxRiism$`sTIbTkh;fG}{EV0uG|78+@AK}XXHPr(6p#=# ze7<))p$LOcoDDnE$xy+fO(oi?*={gTIV4HH(Xyx312ylMw#TJfg995%Vt3`k_AY6i z^iKZ9727Y>z9@XqVCED9W9dmMJZvqII2jnuq+GX4YblkP9bUnLJRm(HOQ~%suA#0o zY4BtUp4uuD6)CXGdi$Y;D5MMQe53&}xkQU5pH`D;)yIa%#AW9Ma@4%++>M5D74z;( zo`(6dld)dqgJN`GUa&D!dg0IJ@ zx8=Mh={rxvY>rvG6Hc#57}_3myrmt+m(FQg9p%%iGbl!1jSM0}A$wNa>5o{F+8)Q_ zXPICLc=#$UA=WJy&w1U*+*e6*cr`?LTotplZM34W5j+LegEo}q8vaQ z`W%OE_KNT9Wmln_Bw5vm^Gx9Y;{>wgQVz7)YFlv1yfD124m4=HoU&_8p-}gl2LS7x zVxebw>bv7;4*cEs0y%-aT746BjrW49V8dzMQe1}{Cz!d8dqH&!?M!{sI(DjLF2^dn z(I(Ymqdmz->ELXmJaHB1=v(fJ2S2s&uRrJR&iSaw$&!s!rK za<}RA;>JSfuId>eO~KM)W0#H;6rM7vcyR8MLesfxt~x3s?a3R);WF7Q#z|Smhe>~- zYp_PPZ6NePZu&+6!yp$I7dPO{#^f|14NOWd?f$=I5?c7u2=SSPuBizM8s&HJ|HZ|P z8^H30buS5lEiNv8_yL(d{=4_p^zqAT`go9^X0QjC!RFIzrFj|;j^o3m^o<|?dGxQy z`0@0Yeus=7i1vW-4naqedsQeLljpy(ax&?(~N+N08lene4}9mB!i1+VU7jRI2p2 zgOfN(k(UxVSd!@nBf_zS*bLJm8B}?3X5df2Zu2A^LfgSMT13{+l#_Unpwi}WXks%? z2SvX7zzpJIXaPA*kJGMpOYq>$@^+j}BPilXLGxQ_vR#x z&9&uWS{{>zP@PSZKE;t3`hRB}zv`6fkCOgsZ`+ikyy_S6_?k7^57WX#%N%$zh$rPZ z&N>sJFerj-2*t34?hH9S(*rxsCGyU))JBkd20K7{V5TK7a&0;}EaG9(LF3nCIr{K} zJbywDw%&5q(^kkZ5jk?jPYmi&N-x=bclI;U6m`f;7^R7swm?h9L zs9^I-v;G$*ii>eza%p%_=H_*OH#Pf2uWsM`!9|5kG)^bweiFU$w#iP5RT5#qEXnx> zp@t{K>!k~yKO7SwJR?rCq`0V{r6V4c5#?PWWfP9KS>+dYrD*G@+m25`-)(=cyy|3i zG3`6%dXR91*GHNbpjx|+2lC#J95Te2)9c%;I{L= z1}#{5NNyp8Sr;Ohh`Z)VW@2-_cYO(`kznYJE8=Ly-#9+Q7iM5WAr`T6k_^&=G#Li8 zeG`Pg{$nAtXM%u8| zB1}ns){X-$EaK z_K21S@~_Fp&i{U;Zw}&7DZVt&xm%Wm?$YdCj4L&33gRysx>pAR$1IcCqtR(0D1Iwb z9JS`cDlXUfkWTf-!)((25rrOTNj6A?RkSpm;?$_RYxM)~I*1-fkLF+$R;G8x z+Xxw`)Cx%qAfx36aa&) z%7nMN#j#E_usZ_p_4g3;6hJ|}0FWyS3kz+acUR6xcJ4-@LqE<2M|n|3ixNmsR>_cJ z2@r&6p9>nHsDNnEd}$)mJm0y2zKP<|C|WeX@+$!VFAN2xy)c14T}I;Duwmj;7dj2x zqdhqP?wa1Bp8e3#i5HdP4WLtcPK3H6)pu!9^Bl`be<}qpI>k45Z+)6H+x+-ZF$zvF z#F;3Fut`LL)}tWs1a16yVF!3-!DN4#$C*lC^*PeRxg@jMsY#UCJfogr!4F-KLEF#_ zn#wDEvl33FhK=p!D!0JdO*+okh2TyU6{NC3hSk`NNLvBEJyr&$&v z*d-W(w6yh>Op?X>hzjU>zH{z|z9a&YkfUsPG)~ADOCprCw}Q-HWWxcDossYw0dYaX-zWP0ZpNX0Owy)&lej2e|y zrXH>h2C;_3=J})Q&Zg)cGYevetGtRwopCaTjr65iHftnS~AqJasJaJJuDY|Imwdzew0=4J44|>ujPFbP%VbWVp@?%)_G4@i@R#@u6-= zxpUuyY7kUQ>mUuTroL*}3bWaXB)S3VqIQ?FjexMQlcfe^7Y5oEd$g6y%sqT~hM1D= zkwLZSC1gbu`3&T-PrHXL)&p(2)@AalOv_41+KsgB7{m)nt}ox`w>`|0@)|4>wJw0V z7pAR}2qGiceRz|~fwIm00Hv^a3^3iv@QNn}l*@y;48~zh6Wicn-o#QWNdd$kxg7 zAh8Y82?3%?FSD^&5&(h(le$5%nM_%G2f>zL;aZNWC2VlXf?hff=4}W8#?7)X& z&B`rDAa$Vby3mEeC?6aXg;36^mvcT=DUK{V`w5X^&1zwFBRa{V0L+HQ)gjWbOlvxK zR)8;PU*LluZFsLJW-6e#OGNS2pbq^f?y$4E>TLvHt)8{fh>byQSOUDY&;+r27hACS zh*Nzx;;dM13d|);HJ~ph^bmToLJ6oMRYWhP(~PRd*`22hDw6zI*aelHduJWm1hZy< zZZ5=r2*qV_U#s=U1oI)(GZ^>e!RByC7^Rt5KRv<$GAvrv*nXmg3vw-3c=@P1odX~_ zSl?ane9-n75=184ii;4!%gqK&GcT%5+elBDzi`um{iCN^DX=2$yqzP$r_!qQH>7q9 z&YA!eO4L0h-@UW@kA<{p%TxQL`%JqJqO#bE*%3O+LufMuQ!%hGDer0qMAETDnow*z zuW3G{ES{fa4^NPna3PWjTbermR^jZKvn$*|k)(vMLRgAKcT*)vM1ahi@sW*_G!MDy5BM)~Oy6A$T|#W)^0 zby;_n!u0|iQ{rcNOg=mu5KRxKMGTh@fpRd-2KeE$1W1Y8d;v1n)xmKQOZv+fQLwD7w()B~fV}egTRMJYmo@T% zZkLDVGWg?35;F&$8J!V(yqwzWiv7gf@v(Agizsju=?<6ZHCbaX@;Uy!Ur^8KFM6I+ zUq$jAsQ=}E{|6N0^}qN36$N=Abq^e=L8?k5HT4_NM5q2cxK;nXU$~rG)vpKrT1F-z zgX?0rm*dj%73F4JskbiYO8p+EI$1Xl@~kpdJ{=q}6OGa=x#D~iYO=qi7sL%?Cy9q= zRzrvT7U1%C82!nU%I6r=p^8WnvfrZQI4>)3`Y<_2vt(#e$~X&3mP3h%(ozGsw&39A zju?vQ zaNZRiJ*kdxDu$(^S%BeY$xu$eC6Zr=wJJiq8Y>)=5AUdu%R@k$!J93L0e{s zz_rR02~+k^!q<|)QEob@V1^zdC^#&Mhh{+oi;8m4O-}P-+#M#%xXxqw!NYscKj|J- zB+Tn9Ni|9~QgHe8Xh>YK4H9!nf+2$Fz4QYg-Df%+_DPZ@MLc?z%kfbg|A4aAukIJUKQMIk5c4ByYOn@T z>R>-LZl{tozpiUd{QE3FPO`0`iEgjm>D|70du{dl`sU^*Yd;vS936bVv$}nA^2z4m zgYVw_&6A@i$@O2mb1OT`C#U`(wJD?!MoXQQUT^K@+R9q*PVeSgv|+AB*Kb_E-dnqV z{RWN6JTDO^1H)TBo5z>l#u^|qFf?tD0*6IDonUemyV~)yqauli=z6WE9YBTGQFjK2 z$vMlX<|xKN;#_14s2*-7oEfi7IxNisNR;})&nt_-a9&U<46-qmUGoW`C`~*X<)>(h z>XMb815Zj*rsL_TinAo2mZP)oEY2BG7FrKQSa<74by?VQMi(jnt zZr{3d^Y-mk3W9?^eic=3tlqhP>&C6M>x7Nw{$&`^LOdER29%~)1(bfN*GKs{d7U2| zq=STNxQ6}1O%N!gLdm#DRxr3aALx#OeU={{jvOtB>%o*~`B^>iwu0#3WA0lxK$> z#J(&Uq#8-H!zGYeGRh}76yruf$H5XwXka3)4?Mdf*z)ZpS#mnpv#zdq7*Oo;PYGk7 znkm=WcAmk^wR+n0iPFJf6*X5mXochzi1TEvIO~*agJMnd3q{wnUUjrq_-{cSet%F} zsJoSVcUxsSO@U zl9|+}kk1+}p(0NXMS65}?sLR_#HESyl1TiFgK?RB+&e_EnT0g70Z?Qbp_To~E(5TQ zBCd-K)Aqk?EOxPPxoYx~%Qz6y0~4Rb=?J7oyC1gKmjXH>iV>f?93NB(Ld41DxsV=a zd6AUnw+`}RkZ^jT-y%U7K8R=!%0O6xIq`2iI*rdt=}`My!p<-wS(;BP>5#+n1xKdS z+-zfWCeL`Q36wcD-RN^U$NJH3QmHz7Vlc?f831oVhhNhW%l zl*e&#gO)!crAN=6Y9f1kb3N%*XwSQm1&ipAPW8fRsu3jq?rOzZvy50`ZTGG8M7ZKYco6ZT!J_yRazSv z+f|2VVcB%}}_*T8Hg; zo%|#zM)6r>UM|71`%Z0s8GXO8(Y?LyaJfsTf+$(B9$XQfpeZ5nEVz=q;n^qL#piK> zFx;g}47660U3oT_FoJ?>p(Z?d-31H&5KZm;SX@Ls(26bJPB+KUM*-Q4bDmKl*)Uz_5f{57 zXU?OGX=&&AV>+4cBB*E44?;c{`9kT6efb$6A4xkHg%lGr1MnQYo~Fa<$c*FSI4R6t zEJ)e6Vnu^Y<&h7f6ioHxNYy z%^nuqpBIB5``Lw${`@~xbM4R1m}^1vzOnYtp4|B%5{}<^a+^-QAh$YdANQY9%fv z9s`9w)FRidjfI@>JJamf@_p0Z#Vuec?pvk~(pN|87dH`tyuFP6|mbNwabtJ0mxGnCTy+ z#b!3tsA$s2mx+wa>A39vu*_+wu8uWz=rQE;&wFU`-6JG{*8Ge5*7VHEZ9aUV$Q&jo z_wu;l5F^`15YD-e?{wA~RlSO|?Abcr(KZtQunyEJ+@BVk#o)-*3HtHRZZ>sye_AMJ zZKpv4LT)_3t8VXF^VYbDN)K^T%8jYP9_NjC#!=#Z^DS*+q?_|q?Qq^_wqAG{by=8; zf!-_V+u5Jx-Ur?Z26h3WysKt6&0xf|k{`P#%Kl?A+;A~;Up!LYPP6nuTqUq-?N;#^ zr)dqNecUP^O-G}%`+1g; z-r&{SDjz)F-J#2$(hR{B+Td16;^-`+`*nnY+{^nh!iXBn?<8eXJ+4B|-#&hj`lzK7 z5?=M4F(%M^fuElwzF2>rrLR^WW69IiFVjZ{(GFlo#{r()W93&$ARm62jGCeU2nsah2?zWmW9cR4pXI z>(H&dkPe55KL+=0J3Zv6C$FZ6tY>*h+dG^fY^XUwyc*b4P!vz?-IGk;I?{TC>j^%c z9wwM$A1L|&%hKjyl2yBv-x$hLCOf}^XE-FG3F7wv@IGrUi{`JuwZuItzOB6RWRV-f zR)!#p>hstK(Y@RW2$zIsJtu#-rrK~$*^Q+ot;V%Oye`5LeX9b=gXMcS;UG>3Ajnc+EZwjB(e zPgCNgX1mt>m42jE7HG3TFhIgt1mJRC1 zTCNmPaE0**N^ROy`FagjiT~uoymCaEeQxJsO|T`088j=rX6jyOa~qwzkqk;w7|JaL zO$1`vPO)g3cY#U@$%!rP8A&5#Bx+rrA$FP))CHqlQ`02Z;H-foLQsa7U=9te z&mg%$aX&*frS=!>o+X@9-u-nB@&ZYi<0^rvobz)|VuT0T6S7G9i<<(cWwc1QHJQuI z`Rt7Ec~A*=STJQQWO=YJQ3@%UHLp}!I^V3?BWSojtFsl(=1^!Tz}^X=DHt$3euv3N z?t`+XjvC%zVjKZqmFDk)4Q0;U?X?5gWZ3>Yf8-)MuE+^9B#{rwHiePTFxF+ebkYPT z$MORtG4ggKhR^AdJ0>`+CrlC+hJ0qvP1p+KMUEECiW@@zLRbYUrjrxdVnvG=FuI;b zB|9peM)k!HVMh*SalWEx(TXHFHYHYDoZNJ`nYg23!35AObHuIKfa@DSw|-eov9>RC z>xoYWOg~bmNdN@}Jc?b;d*lr;(aaTp66$5~=irweVWDL5gbyapmI@Ea#bAh!@F!3?UBgQO*`jc$M+ zo15X`k>Dtd5Vof&WKum8Xy{OrMO)ijKta<>L3*?k270gcFLiR4C z>W+)gW2jJg@ttk}5)>O)k6c?ST^ejppk#MytX^OatA`8|NX3~J?0^&q&+vxMMeqd^ zLzuLme1q}K7no^S68h!E**Q~M%)vA715=p?Rg<+W{Op^syf2|a%$dLD770O;>W%f9 zxIe7zaX6WG&?zqlfw{}QhVcXUur*t`WhIv;E-$OJhKypDE}im4j&|F*8;PQ4rH$4V zJ(|*vqAHycY=FoUc*GGXU-62 zoC)4wqybATbDBURogp1EtJQ5Jry3q)py(h?`v@AvY@2*^GYy}(@1UB&hQDkr=oCm!}pkw@SampKrBby0s|vQe_Zl`2xa0-sFf> z@cq`6DZEw{qn_ZI->xu{HXWv%k;WSuB)%qm@bLKmDwL#a)AnGn%LZvPAp-qS79Eht zH(HDX*+zNINe*}JA_G9;3@!?3;HjElxe#BLlZ-ObnKgQT8zuR@I(+egYbf0QS;X*Y z0v=Ju(*ZlZ!9%k9==<4h0ZUszTGL|g!_TX2gSm=(@mBiAT8+9qO&ayS&~^#|GSXSM zd$iaz?xs3Ts~%7mYFZd-turMC6!w+4hN9loqqIZ1x8&7Yug^5s^XFrJUEwlHnJb78 z)|g)>Sh>-eUFzr8(SF1dsWv5aDW7BskfrP5mYf!)EnK>)Glyzb>HM5tiMdq(hf-pG zEur|%L0XJY;{q7Ac7eKxZz!wEXakvO*8a=1+)(zMmcPhONFGyMu3n#C}BgPGSVxG~hbE3v~ln-#Ai( z_Twnuk13wgCuseu!A3!qz!2t=6ew{nnN~;&TE}Yp1V*xdkh{fh8Mdlg5KO6+1qH}6@5zb8QbhVKSI;VX91G;(Y zg1+zLW`IHEb?w(}=sEf{E`|_E>ve4SLxSEy3Jn^@EY%lI%5-&63kXW{8faQYFVzmM zoL)n^s-m*Y$~=S$?B3!!gHhaK-F3rsMKSY?!Atj3Uy)}ztC0@y%7zKf4Mx5<#6=B=`#Hj4i`7u5)ioQ8oSPlG7=wTm)mbvH)+sytTQ@MkSy2 zrHs>)x-bd&_?#;RK}D|H`MoLz0`i$h%>w(33P5~S%iC=GY{L7MzWZKpZSnj;*?<#o zYU@p0YE%}$P^aXr=Dfi)Xovn-W>vfkM)OEDQjatm`T%Wo?uL@FsjtS_w8B7=x0EwN zq0T<6nc#+M%0-oO*d7J%H%Q=mZBdsZO;V2YCGyU^ge!}6vzj@}kIu5uUk%y_Y2nR< z7ruD2==44t^ydW(&S-#M^r6#aUYPYF8{W`ag+@75RAHaR12o7#odmg zy`p-s_<6h_L{9t2q$elh5S*xg*L_c_+mh1DzBxU1h|@St_kR2^-}jFl^6@d7bd&E- zr4gY4XLgg5dZ5aiQGS?0k)|F!4M!!(0eNIo9#^RWlv%w=K36Xs_}TH;&SVh76Ee5{T8~Ilie^M{GaxZj=q3`f)*< z!M&f9#)IhR)!!o9Q#Cmu8`7KJrA=DmUxx zIW^SVg>$=)PB#p9wX>5Vo~>+{WYtbWxtJA1yNi8VB)E9QZuBi%+7h4BE$?25RY&sv zpu7RCxe`J$c0^vlD3l*N1z5y%)LO=1m$A@hoP8TE8(KLj*Kk_^@0v)K+%^HqK^QCq z7`kU?ljI3*n^(4M^TY(Z@XwMA;HXQep@bk1N|%pN<}}lmUIbWan@Ci?;NlD%V-Lww z<rTH2{y3v&gi+o19rxB38vJA#R&yYisl_ zXqvI=RmCi5qzj=rw2{}xTvjlrzuQn|kv&SFuwb$j(F%$>x$G=kmoU%eLbOMAednVL zp%N5xVV@X<1(j-~oyc?fF&gm5lBI+;3j$j-tefnp(e4o$xt0A@KP(>IgXW!ER>1V|mqS+`h8!~a3$#j2|4$Rh5$r3n}q+DfE z;24?290M}M8`}V3dLVm?GZ*Jg)Zj*l8#TP!bdX-KgIinjVLu|@Eh&2)FQan*EGau0 zFgyS@&@m?)>`#$JCoVfgIR^2=!?=oF^e{aXKGeUVmx#;@+k}!sNW_lo5#5LJ&Nzv% z8KKS_{IQt#S_c0gzdunyMB>a)4QLN%C|$94po0U=u=dBA5LO${4+L}aR+Ml7RxByl zaA47(CRlOQ+TC_6^3rr%)F&hvYu7~ULM)9nVYDJhJ7!fbGb8wIBX#}FMlA{0m}zbS8gHQ4N zdVk4EptOGB;_4mLs?*bM<%L$%iAf^#IB@C(g0lcsho@C2`$^HZ&9UA|5eUE+}?PbQ3^GLFGmD5$Z1*X=}GC zUcU6L6WoOcclmt?j{PRl6vd_&)k~d5OWHJU2`(dG(5h@BK>D@zs7TK%1Z$AGSh;K< z3pBKLX6BG%p04oJGcNV%qjffv7Pl?wr$a;usz zSgGsZxw%2-1p9YxZJ1NeHr~Ipw!w!}`gc}z9n#hoqP>-SFR){4Q%jw@?G?zPF}nO>6YA*i7ysM-!wP8L!(iqpYd$!e&wRrCEr+zrcCPUXynE znhw*v#*xRxy>=Ab-dL;LHxX5leTb*ov_H!a8CMN;r~|)_q`g0{4#0^F@35#JI+E%7 zQ4XYUf_?hB!2;h7IFgSdFKC&!AF;RM5z)acrp|y8U;_f`LxOWHG~qpnoA=J?TCa*D zSmp}YsB*r)buJ@6FOgNCk(EgbsinqUc;X!kcIKzXWCzrMzlKU@p5#Rl(We#Lva3OI zn>4GEY?vU~IbAeo4?wy*(MSwRyY&N-OzRAQCO!(%u^bdh(m5IqJ0(;T^U{25Zm-?G zeY1Bv^dZ&mFAeU-92BFD-fT}Jqa#njJ*XE|r)yYw|Ic^52OIK$6fJVnQtpK}M{#M8 zOdEqS2cx(=GCZ99DW^WOe#R)py*7MlN5Xrf{4}E+gWi74+~4_(Q;VOKRWepo`^e-4 z&Lgi&&FJIYr^v(fB+0aKXYva|RP6c>@_XBxO23L5bT55>u9Eia*ACt0velb!&lSC_ zMm!hZo$GjB@6EMh!C~13HP6gytvm0IC7k?rSM-M6SWU{~XaBIfCq6jYyI233EL~Ps zbxm}QGI!ea%6fv?+S2@6mQ)_Gzf8b@TY~ce3xY@jb>TRt#G~Z11Gqz!DCoW4G=OEuBw~z=u zAK$DlVMUbEsFMZ_nv3Wp>>B1+*z#Un;*t@j%%%eNviqQj2Mcsxdy$(q;pang+D=o_ z75CNV<#DfY*78waNWLD@i|V35#TeyN$cBb*5XUcnZKj(tAUoWm?%}GD=9G{GwSa-t zd~&X7x~H1(gjsl!@Qxv{Kl`@di!Hr~F6`3{G;An7O5$NsbPm#FH0&>YfeqUXDoq<< z8E-rX!GbvZ!RyE~t7=J#J;!A_Et#85NFbLA`1)c9cuu9_kuZKvs|O0y1K zRl|yQv}nFG5#5(X+cS%1eJ2t%~Azc%6_$sw64B$bdRnF>UO+#=ne zL{TduoqbKnt_kMf3ZLUT+DPxKa>Tr>`B9f6mLl*F^>vq{&_qIo~VdBy!-stFfUM$Wf<2Y$LUmD3;ce8nC+P((4B#b{KHIppukyxZJFbvf#q&ghr^)hjedr{W{otFd7PUu zhE!kr5Ata?RIRLu;TV$*HoRbv=gmb>5Sl%MP2)oti()bmm$I#!JA*TUShe{(*WVL5 zX{@gR0+l=<)`Fn@M}a3s93AQ@M1Hd^j#XWO^rt2Oj_(!mLRa9Ux!9KlVb1vy>qE0* zzJWS9_u{mYe1e&>eaU4cp&L(8ThMyQ z%a;BKs*gvx7gnbrHLgK+YyqNkSHj!+T!Ix8+Zx%HLTRAuo7)2-cWWKV9Q*@jR!83o z+rjPS&VuWwaaARSclO(%S_UtferlmsZLO&BUMUWN5ZMUPzhEc2r!z~JNN9`Z!Z4*; z`*e!SWr~;w47D`_%T%qt3JaAZQBaFQ3xEK&IQaylPhg;6J{4K~MFD$b$Z*rQ5=}ot z*<{gbu@QI+>-ln<=Z|JjW9)rNjUBol4q9iA(61*v~* zl?2wa{ai-jufYT}hOp4a|GzCw)7aGo#=S1{C-nX_KMnT?+=>n1Wtx@W?JcXtSSj>u zJXxWL0C=UoZB}|cG>>MbW5498S!h#*Wfb&Ekeqrpo~$Bs2|fj!MU_^uI~PE@rhPBX zY?zf5AGToB4eT6vECUh%O5W7xOX36^iQ|tiO{ZSK2DsWS0iGH>GGdy!(BXzP6A};^ zv+JZ!?*h5S83ZQvUVnNhguFqk5gD`ItMdD z1Lk>Ep073#C)%N?2&A!S7nbTVeGXw<*5jiYIZyKV$39a;k?*rh6`P#ID5qT$-OFIT z6<)TNSdle&4Ug91NtJ3A7q%HUu^n9|+3djWF)h^DLFvG!8IQ^-5T@arLPkq6&DLGs~+` zroLx%SkilV5#SVfu(@t;{<>M|fw61N(-c&BRwe@;Muh<_aNFH*6{FEaxc>|)-Afk6 zc=#v6KT3`FkW*OU6#{kS&1ED{owRH+GthIDb=k-q#YKrIk?xC^d+mkA*Wdo=J72un z+tcL4o=X2mz?-ZhF$}_3vObaD0}Q?p?d{R-pD9sHyZAhhT8SQbdR1~YQ0zlZ^Ik_e zK0NvEeBnh_dOv>3(kx??vc&t}>+w}}<%w2k=@nT}<57t%K_Ks3Tr+iFQ;F=VK_7bt z3VPo}WE}BU)kqJ4MkZn}jYJZOhk|O8n>Trt;))k?Yj8Y|@7uuO0+sB_LYqhZrHQ`3 z@EU^XH4Q^Tj21LjiApV!4k3p@g2kMWz-jjF@CBnzLXy7Xulmw+n4*qH}k3 z(fz%)Sg%RTDl%Ks#%FumekYdWroN=37Rz1yha(prerU9iG&AttT3T6IT3K3Ky1sPN z!fT6jzY7u}8ohcIXUTqCOp5qynoUR3!(=k3@{?q+`S{_z&7G$^o4@h=@$=7~fAa9@ z{bx@;e|SH-cKYjcxnx%Bm+xx6ML(8=Awa)9hu<574`SO~yy2y}f8w z%$lN0g)UG0+1c6IJotLvbga~;V>p~YkJr75H|iBX{nW2Wl+`n4RlyUu#^ae%YsTED zl`6}bQa6pEyUhrDJVv`-IE*rv_|bw^H_a`3c1}Yf8y3PB)GM_QVn@&I;gJ9R^i%$KJm!DPQd{KNT|Z~3^xWi@I|NbI zDrR+kCqASIYC9c}W^YC~2fMgHpKDYAt&#`Kdmyj{)$RsoY<4`keD}EOe1R3h!n%q) z2`hA>1sryVIm|ae@p&vu1P#t78V3=O;Fe5qJa3xyzRkdl<5&F^-1!&gf)p*rCU&L` z#S7`ni@IS0xkUstPfFf zt_DY>h#`MJ79vE=xZ$>H{2-lCg&w4ZD1n|qmIp2f5mfTK*#l{Gt32EvL%sTa-9%l} zmWGAag;~;~ZVA`^rB7OKq*xPLXZ!DVyD)YRV6RC^iYZK9rDZkie6bwE`((c_Ywo6~ zZXHOlepA<>OWs{}&p|ml7SejvHSh2;3z3_D0jYLHHTa$9U)-761x<#3GjaoTvlG(< z<^i3dl<5D5MWL&I0|7GygyP5PhT;K#dxpC#eSr^{v{W_)w1t;-;?jZvb!ovrI`V=D zVCs^-EP3I~fTgZE{+4K%md6*79vYVEw1W)E4(K|U;t0wM2~JyoD~dzkjnK_fTN9xX zWb^2ZZp^Eb8JQ`q)-WT}=W7HQp7qy>z|%YUE(q;|Ct~~f*?4l`T!}WOu)d0@XxIt>Q~el99#0I2zptAtm*p^uR1Hi{z3|I%j7ub&W34;``_Hbg`gHe zb{NFE(w)N$N?O|LOD4(U{ZX17I;w(rqJhw-gv|1f`1B_pnn*mg$@IRF-0}l$&HW;Y zDI^jNoBV*#!Qi-#+q{-V1f^znX(DC?Fdh!)pqQHIjN?}wcu!$2ZahX(aIk`Bm(B0~Mte(>p! z5LBnW`do?FrZLlkGApu~1Qm0R056c+o4-y{n+a^i+%;`ADu}4(Ba`+Q?g-UPXWLtk zgUTOYva*=PVeJhr(5`XIoOg?UVT95CLAq0(Kb4p2WY?Ox(CjA`lJiw$J zI(8bka|O8B7eVHdJ&*`1rU_}Eq%m1DZD5bGld~G?{q41&PqnDH9_Lud6%e_eOPmU` z5ivERb$bQ#+gk*|!qCGAX>JVGAQ8+8{cLM@O|SG@yJ{+&vpmg<W}8FPl*C*@;==TpT? zIUQA$C6rYW4TRMbTpSGR?v|7WgWwv$3i|?W#i&nSR7EK1q}(Y|epp_$<>9(*Y{MeO zYV@2jWwr?rKob;U*p}@vXc>dx6iRdoCY$!`GEIJ@~7IhitR=w3*k1lA^Yda4z2lwOAD8c#kfHar}lr(;O zn&LdOD`8!7T;h9iL3#YV5*N8jMN&!XTfNj;0sPUl)VddwbnQynj8L0|6>&Xft}8L$ahpxi9I-uHH&1O0srp*A&5OUCm-T*Bh(| zc&teRG33mP+E=%+X}H36CJ8hMaz@E*6PBR_V+HX)&)M5NgKRy|4=Pj7F-!~OWL`AU zf!r=1nTYeQvTND*K8v0z^+{7*h$}Nn;<7SGW0)SK1EUSaqqI6(GzH_QbjYV*0E;#p zi8D{pMj}@$yJ&skoq6*y&s-7SPd`KX`Ov%f%_(I2ihO? z#5WGKsTax^`Nke_@HYm?ra?(6BgSN2vd|{#=B}E=> zn21CG{(uy~zr`R5kb1e^+FND;y>;#DWk^J-hs$+ z;YRt#at0Of$bpfvRX$3KvXWjLAeWdRZh&rz_gKiPyw1%~qe~H@cGY-C94Th{SS6Fe zG0Q(4?(EhBL?-+CMx5e2xPH0P+^D}jsiC*7`7&}ghr@Tr>?TDIdCZ}ki3>3+<|*KS zv7*bAfF%|uzP6_}J04l;IxI`#dpAwr|_CWCtyu89oZ~? zP%!mluVez1x?nZ8wUs5zTfW#+A}HlUfq|~uut(pNHIM2JWv3}E&`vXqG;w=GIXh98 zSPUr=7V}b~ZDE)JEN&ylMg!W2J%DKxT6kkE}^;vdWK(BKDM(rnCNatz~9;-aZp1 z@egTuil))D!VtYuRB_+d%G9ceO3>$4RwczrJTfqqFfA{eRXuXaD;GXc2%{F^Mnq!K zOZt4*go#uTV;JfbGvE+K5%mR0>Ru>2*QfpCIkO&2yYe0Z<-ynC0qBr*2dBY&J~}+) z3ol$|AXsFBR5EkNaS7@bF@NqvB0mCb|4uXuh6#SBI0G;@q|3DI7@M>D6JrY_&vJEH z#RX1GjETL#R(Uo^U?dO=Sk2YoXy#)}RJbJqDWbI{O+JUhdOFMmt(>8qMW5e(%7&!paM#ki#2o8wM z!lFvLaB47Kb-Ty{?0?gfFp~FN7h!#k_{yaRX*r0CA@(bCu2R#^ky5g;_0HY4-{d0M zOXrl_i^!(rmnRD#B07RPO2^KPxO+C<&qw#po@ePGA95Zsg-sD7*H}2WA~mD9QKw+= zlAA3bzN(6tKd?BI_hvy<=_uZh2h%d@M|+QYdv_k~ZQk13l=I&PcAdBwcjyQSiacE1 zyZvbIUQc6y;C0GRDOsz0-n_qe`&RAqbmD!yX+I9)QIZYg!u5S;ZSVFC?|U)qAhxZu zpTF`7-P*go<_aCf1ycMEiX=wfKd;={-t9ZJa%t9F?zSs8%BMpC_s;FT+bix%k(Y>E zDijlU9_-z|Z$Bq-Q60J7Z{Od${lI=aNQ=aMyK{YS(+%@rlussS9STFVvv6m1@1C25 z!-TQ)aCPs_=H4AQsw4EO(BAP|JxULcIw$$4iVu@cnI7u=+}YgQbYr5#iD`D&NwSk< zluvvh*Y-9YS`afGF-GshO_0a z@7=p@aRwRWA>{hr9YIl*K=OQS^9w@7|{Ck=r~?Gem?@lZ>S*&km?bo0U99XHz&097YJufS1SB}ijvPI3_I8Q{*9hSMf*> zgZPBr>0R&iR=oM!+`D(r;<|z2>lJQ4*t_i}r>Vk9ue0X$aQmSz+Uktb(EOd%NMqT( z{n>(Is-xNYXSO~~!D-m}&|>5g+>!QzEuE-Mv=U)Y=4~cqdnyq~yjhfY(4lp80#uCa z&fNuVs7*7shy!FYxgN-Hp*?)GckebB8uMLWG#}-KzaG0~vq5Pn5jiA%G%S?C`Wt+A zVLtpCcn+3yzh&6loUuyLP}3hZ$;PV2r;tU@hJaz*2G@>78h^u-T8s2jwTH(9MTd;f z6b3@pe?kXsC#0qq(1hDT8uSi%X27%%JYLIpaa9ztF4Y(5{FRKb+gnYrk)CW_~Z*E6kO>=;~hkTfcH`Ve#7^Ev;{S z+`s#sUwyH+_wxI{^~LKqU+Ot}krdPY(tKf}Z}m3efc#eP0sXVu<9}B8pH=>6jsLmM z|J>kzZt_2N8KWoq*6MA3e~16!)>rTGulw}R8oylQmuvEp0a$y;MeL#{&0c4~Zg8C& zT;~SYxxsaAa*qdw%xbRWV*N~$km4nJ^$0_rRfU`@#fw#o;OcXyI9AMrUXy^9nX<5DTK1eQVgmOM=`Qt)EZGiR*No;1-T4f1SrZu5U%9a8lrvn**+`(qXl5Svb^t@p868#mD!_ZMg;QM*USW3p;uc!pqubr)_d(TyC#bVvsgf%2{@ zXf-6;-b1JxCK8h)B+$?J3S{d8T6I343u>OpwQSCeMGQsAYNEkWI!LmTQ{W;${s{LM z)A0*jLQ>1BJZIKXZ$HPb87do9es%k%#6o!3Wuq8y`#ASe>*KXZMsx#ao|&Cz_el@D z|LG3jh$66(!RyuSn-1k6%L`2?%cNkkd^#i^n@*sScZh}|#6kRl8C29+adf^gVRgQZ zvl9=8MN)#{Xdy@^!C1vV;wVr=!(|!G7t-FmxpOaqK^jEK(Y6kSS48c?S>3}T9wY~l zH?zkDFLyZrs|Lw{M_p6N+3`;J@Ur+s zSst0FcGoJ0su7YH-Fggpfsdk5?))$ztT$1N!^U3lQ597)TAy9oSXOq~h%Pi8JBFgGNN#H@gtpM+f2F*j|V527KnI1U1E zT&!FkY&!hYI~^|PFLj=XAI_U#7M}CQ#0m;6N505y1Q=I_(eYwUhMo)?AhrweQGRNs z6L)Y_rChM~)o5@RY2Gz41|6iel*t+3nf-OQK;fr)+=*X)9v9Sz1f{BLPhTSj22G-j zKj1lg0USxike6|U(c}jQWm5HRV}qkS6A2_duJA~!dqtWY1n=vX7^MhVdgm!c+=eW-3(@m3DLR{nNmi|!ZDh}? z(qq2w1bez^F-SUhqm!g4(>#O3_$n4ce3M&{aU%$ZGEg%PF;ckHqdlbwhA3tnDbj^`qMbai%x^r5?ENuN<!z$d;DmCt=p1_m0y=8%92wFp^Lv^rf0?M*7j!D@8dl`)B6!c$k+so`S0z$f56;o~Bp!YKj>V<0Oc;hW8Q}oB3jc z)N(qPnPFuuJoACch->X6xFVB_c*=o%eUO}_gJhcz>*zjvNH06M|BAE(h%gdEWN@f) ze}lrNW5N~yEbj+7`T3xaP`BYz%~q6B_)`(6e3ZYaqIe^%`m$@luTwL5_wVoGWveV4LIZGaXHf^wQ^f^1Se-9bO%1EHB9RRyS#dBl9+eTc`pdaEZYznYg5Ll}TA8 z-i!=cK&+6OWDf}8!gOghs7 zH-uo3r+7=*)@Z9za$1Z!B`I2dSx-vQ^TMnT^6UinHdRHOl?YMkkB2vKea%rKXPrjy z*ZLr{JfL;~g&kX+3Vk~CW{Xf!PRExfKf168sSSuU>It3Z%$p@U?~ijZ>*+o;uv!L5 z>g7BwOfe+r51Z4A{TdZBe&%rOyQydVSjx43G#Quh2)W92r4YfYkk`lM5#Y>v?a46P zq`m0!yha0BooSZ03v(Jbd?5-OegY!3;;UPf0}|mD7N=796dEj`R;}dMi-?$ze^e5V0GMohNCQmPa!lII0ATuw8O_gG|E0 zwu4&{!A@RJZzvH59^Z(FXATR9#g7!ROUiiB{5<;~9v&l9BV^!Vs{$vB;#BYAd%WJe zKC_7>%b1_GHk6PF*9UA)d+^aKUX>yalozLJ%T>@k#>NP**aXE8gMur`OV#a2g&GWj^p zrtxTW_8qf(oKD2UCbynnW3{9Y-Qb!@Gu;O|OYICn__V=}hmd+?tBA*6m?TTgBP~g?VsP)) z?msv}+;7)B%wRCb>4Bs)5U*8k0980y#&~M8XCiE}`{=Wdd$h=gId8`J`3eTbu4$9_ zW2tg8JBo`q#8cfGn8i;d1#an?mFsf;?*eh_#uy0O&+`1ZG^6x5@ytnfs{>)`t^B<3 zOVVV{kh3sOOGMC{@+jGlvqRH2*V^*;wMC=5lyGx&A>+|h&sYZMY&=wzlk##yV4H3> z^mt(*+FM;ytDWqo*AX)5__r>V{1!=q&+>zZS5Gv-0ahk3`9o|vI~^mok-J%^$_oVz z6-5!-&xdDAigvoR6zB7hhN~I9^H;grT>|p>k~oCT8Xb83di@&Qtp#&r+!lS?0{EJ6cckB0fvI`<@GQ=T#0oSC?2$Pvq zRZApK;KdbRpxbr{li560>SuvP-`{+?0#9~L)a&+OawH{+M9_?n1CJw#K(><bF6NUC~wj+C0W2+)Y?v-4mZNNO;W zUOYFR3qYsGvXs!kHm_k1wgdCNOVRNtiQ%?gvI(9nDjsYHhES)~N(dUR#Zb2djs|i= zl41r~EGh5CyiyG=Ex`_Cj|X+z{=H;uCw7z`J6P?*m-()?o-Oc=yI&=F*)-=+C2Hgq zc@t$07*V*Vj^c+jvfqwVoZW9rT<`?oQEm(!lRk&fwOh?$Hg;{YRwOCeE-htwM}Fm< z7{!hV5r&+kJtFnk*$vn<5UvQ0`)5@m)2$V@>pN&lJFIQFL6PiFZ0tyysC~2zhs3}e z1zeEs9NZS9Q1@qhxkzT(%Xm`y<%|V@<~=Z2u+41FJ}e~B3+mC9EI89oPeZLQasA?g z-T0y6-d=b3dYlgzm%9zyIv_Xjem0rw11A|VI{lA_9Mql-Omjr-yv$q$WF%n)8m7wR zjf3l&y3tS8-Vn^^LPOo&ctH;1;R#8}d{Im@W3hvPkMwW@Su5O2plpNB8K_as4Z(|e ze48;?HUtBZA+3%?w@;S{6meVMRST{coZ@d49B4D^bBI&X8jPGw_QU2ZDb9rgQAbtI z(9b~X%iE}HBpxUk8YC_l4UOx1X7cF%fC{_;z$ zoks-(JtVjoXR93a?%8x@I@}KKZCWcS?8aN0u0-0PKg}8}=w{2#Mk7YO6J8qg;4y%Z z2wnDF<$bSJVV*jQ+1lp1^xL#=J9k}t;Fbmu^Ak8(@hE|4-ZR^XSWL>QXs}BA`i{53 zbd~7@BJI>^)|lZaF{rA-@kyMHaG%TUo~2Ri#bYPfgM5Zq9T0QX6FhTh!__`#2tt5O zB;!#u0qGfd1L$4%ZZX-MO!#QXSQ)$-g+lTc)Uea}Z0IwhtsI(m#QEZ&3xu(&bTM+~ zb0<2Py*tm&u5ufbx_=CLoAaoc1=_VWuL^l4v?igBB=IFVMKYvsc9k&Ec}qdGWCqis zK=5YR)i^#gSwd-Th8#GV<{1_iUtNzR`*M+-q{%5M0%HDTMWMrOcJh;?7{zBx@Hb?p zNIF=;gCdSU+^krd3C>Fkev}-PwaFXe7r` zI|^i;^nIShdxtUA=8_(Ju)7w+X>2A76MdW0d&?@P^MI#e>LM8qX;LH_g|GR&t1S!> zUU4e6wYQ$E$H{3))X0LlG;xv85x<%|)*XyB23?+-*y=Y!a2s|64JwVyBWb)k;5j`y zA>`fXS?|*pI=5F_%Ig=ImF%jky4S;t@-gA$KI7`DK>(&1=Ljk*Km6b=W9qQg;tRt? z2-xj|zx(kb>_kpl|FRdY&vq@1D1)CuguP(4zI2A0KI;d=GFsR7nirXHkFpF=7P^-m zW<#d%b|c$_xbwX$^Atc?e2HN~c5(doZe7hR^-HEaPA3yD=txs?U8St7wDU_}>9){D z$bI+$Io#l6HhHnE#h6=MF*(gBllvrlh_FKwg$OoZgd4v3yFl{>XCtLGH8MvJPm$@OfOMP|@gSI-ecgi4Z$5KTZ-v+=tV4H>r4J53>^xExAbC z=En_3qaSVf^=xgmj;Q;?Mq~EdiXX~1M@L`#^e3IDz|~v43!3c?!IpD-VhvckI}d6s zF>{--0CRSaw}eGQP6Zel>DvRN?O0?nG)$~)E>a_xozgk9I;S*I7%-u;5vlZK*%TbF z*)V$|8N%1Lkp?2AfDZF0FG2|3oj6G(2K~>_=q$;E6x!6p457}FrAZ~fW`AWkZ)!gL zU{=T~M&07NgWCW}?%^O-ab~_?>Fz0fR7B$}m~wQBwGfHmVQrLe9i|Hgp>>)!SUo96 zbDwYh#*N%J$i5jQ6M#aVA`F<;7@1f)O8r?LBbdh1jq3(WOf-%@P@Km!JI?acELtQt z6Mv%PYHZ48&yiKLBUSc?$;myO&etSLdzpHUM5P)gC-0iX094!e~U-vG$AdD@Fo}aF$uf=|0m7AOh>KO`};rl*VC`H{_y?Zd9T$Pw^~2-wcl>F-v1}ZUuzwO6KK?;b z#=pAK>#os%E4}VyiYR+~tU0=%=*EX10E!~dtL`|P4!ZmC;CMPo3YhD^THtQ4TpBnj z3g7}w&Y5v#RR@gWxd|(YgyEWxD!uiImAUhw-C$-AJG*EuI-5d3Ps{z4aB6@YH(m<3 z!~sDJ`N5M=NB|i|KMTo-ES}BF1>labQ&+*Vnx? zi;FX%0sEb74!B%CdI7LsiV9s)s~>)#Sp~EhNy4`!>$U~LBi;quChY32#0Il&>o2#I zRsW>2s@&2lZ2C2@=|B9Fze{ZTE)3^42mtgwK0@K%neKO|;U3T%iA!ks-{^D=L2SJ-+~P+%hf0$Pc-UCOwXl zo+J%QpMO6!hjEph#%KKdlkbHc+$+-IVFLL0ug-%fl*Z8mQi=qi3Zxz^`_xbk8f|^! z!w-0hG22J2r+ks1NOfhAmx9@}i=q_;*;N-qIGq01VM&R{!X6B(FIT$5d~lo;-89GD)x)&tmvI%ZfYgNQCw77Q(@JTB zxHwLdNmA_Rl}~2>$CJNJr2n7&BPO%|P{{1PW-|L}za7xnAAa2%(HIw{Fm6X_S@mt< zABdi`+?^CTWp5~pfq-ob2|~O=!?NlxW8qou#^q6gq+xH>+vI4{O|$ge&a@2ml~e<~ zxV@^cNfNs$yKsQ#b;Vr>CN4Xacrs~h6YmM+c!Fcwmx7UXm1Y?A8?`AvF59k7Zdo1; z^3kIRk*IlCIcrw_J8{L)pX|IHc6KF){B zo7BUujYbf2P&|)WiBa@ZW#%UKpGE;RjdU<%Xi1 zLTmJaK^fKwbkDVJ9%e9Dn7q(98k0^`KqjTZaRcnQM9>)sK04q*jor^DXGMB=RGEdr zqFL?rZgf_At2gzh;H9KQh z@}d3eHtKqAnqiQW#51cb#rC?h(K51og-rKs1v(2XZCXNbK3hqgFw+mM=HAUQx~NM} znC{v!#v1j!ZHusCrdd3w(vzg0<#mE0V=v{IQ>{f}+{_E(fq7+kmc`?A;OiR-vRZa) zv9!J>#F+)(zDamG*meu;_Rc#Ckf&`GoT>%`fR#Pp2Ry!CHJY6|~|IYrMFDN=9t`o z(&fBxMj3L(HJac!Wg3~_f{SB4`TN4u)(kJItSR@8&iMVKxY{K4<-yDT+5h}Wk^g_} zy$O6IM|Ch>+I!dc1vX$)8jaV|S~Hp%UAwcZ#oCp2SN7_#r1iCuwXK;$bV>zG=|~B=ln{mC^L>sF9ux}Nk?MmC zB9mpIs32{MCc_;1p?ETcbWHi%d1g2MPq#3jn6B54hO5+3khxq0GK9L(iwjOl>qza_ z$)|PD;eAH2xWqBBmc}A@Z`Gf3T+3hLDSj}w`h;5=2X79gb|Ax|7?Xl42n$**vg*@U zOQk)ObR!h+KEpSZa24l0_yFco>d8XPVuuQrAW}7_?nxO191KK0G>DWw0JWWJgB}%wH~E9PQ4yl26I=jj^WuG7Q}$hin|`= z>Hjs8ACcA7W5YwBt`$wsbSN7Pb#n6Sz6hCo{4N8eK)o zdS$B8F1}^=G$&y&sl5qtV78V$t4^Df;%jPeLSXomRaC2>;7IyMEGkj2NPeo>G^fzF zqk#Mp8onc7LFGgoGjVepILs5ZSok=_ZxtH}~fZMgj zz^en!1HGhg9*=2od=6})fnrVkK(K_CH|0AOtDr5R-YzZdl#eY5ki$(tB<^sI(vK6E zEP_CEzz-B#!_W*0hruc3A;1FimlYx7OEM^3dkl(mSs1eYfkL>FDzGGR?MFu=d9tv@ zWc&e6Jm8ziKn0b_@yiOeQGf_DQWG2-l7p7W?hqfrc;zDZ@Wiu1%td?@-=L`G5c35i z0!~-ij&Bu25)%reu3;eoN2Yc|28ez=XVAlL^mACn9!SI{q1d7>=ftRuuv)>n3!K7t zdg5>k*&!DgW)*vq5^HN3k=KL5Y3kV2usnJ_oQQyth=^J^j5MV4aCOxvUMe#)K4;qf zCC@~rCsGm+GR|18=T9Mq0i#2AU~}S-St^OcQO&Uh(>&1#5#Lxxh2aFB#IOw+N?>Wi zVLl-O5{?F*;LSk#!fV*rLKAG|hP>Yu9Z%BH)R<@y7o`Th39S+Ej-qSiE0q1>L!uuF zkwyxfF_d`#29e=e!S11(@Tn$A1rm$#Tw){NL5FUWVWS`DTjW?4>vhLfh^KPd0Lg?S z1z_1Sk*qz(2%nG&2z3Z#k$DCOog~51q#+7V?~lir-kCZ;3p+$t2VzHK(APQJ{7EGc>ja!|T zLu}1Nqph`S@thSt#9haH!#8Da{@_DzF?dE^k|D3gN`YXOS7yZdnc!Y8%LOmtQ{#^bJ{k{zPcSNRbS5;Y z(W;G?$q=tu9y7__p*61opn2RZRDGE`tfx7FC+;9YbUIjZ3_uJWf)e*4sE96k>oG({ zLAaF&c%OiKK7f`#4D2_W}&AUFKxh4WHOpkCO#4eG)EhV1346EDgn7@ zf?SXx_C~&1p3BJFgJRQhP+!2Q1adDU3CS)KH=U9koHNyO$rLCeBVjA|e5+J~$aq{- z%jOX1H|si8yOys?(%a@h45O3aeIiR5rX#S}Y{-hkP96 zi)S@N47bW7pO0!!>d>)VQ4%yUEi6Mtcww^`+%TpT55|Ug63H(iJ}YZ)$RR&m8t9@% zQNtU3Fsc%x2qOX|gkjMQUh!F$d+V$~qQ&k6Y z3EP0B-l>b>S~Ol(y{!Z5fGULT7;QCJz_=ZO-V#PA@HxXSf^)nc%ME-o*bV-vu}*1+ z5XeQO?$k|JdYR?ze6m$iTZGP5pJdk zo>bq(*Wqix6jZ@_m={MJuY-u9?lp$ij5o=6qRVRIiS%>d@(2K))EW4^h$wmq1!IQ7 ziJlsS6NMUpz@mEZAjIf(k;JJGKqOCCMT0ZP4~E;03pNtgmxv?^4FourTz#nc-xFHY z8VanWSeOH)sy8Rcc5T(HLIi+(dC>IbE5Ig;3BrLe$QA)nAoBf4)txnE?P$Zg z9-`IJA46Zpu!x7`HHp@U_dnFIs|;_Z$W@te25*T4*)6X7ZpA<=1e|tdQ0d+6fEf^)G z1W~Zt(@OXZyFHO<2i{;gbs6O%>wrUy_6d2|dt6Il;zIy`;t>ycZ)@4~=bU0s#qoS8 zAjRj@ArSf=h7XZ&uz>-(V;e+y(gYI`%Md$-8yrGgAnNJL0vrPIi|e1-n;Zx^(@;wY z3I+T|-(6kV{&}#oUAyDTvxpDy2}Hj5#IqFIk3zI6*5DwSnDH?YI3-DZVPCvd!UEjH zkOf&-IGUo=BHhoD5Qt256s(OGbIr1|5Q&n;$g?_xO5h18ZP<~dqX2AD2%yK-)^#QN z1!;UCP(&t6X@Z~%yl4TVjjf_QJROy$E0tG4FlQjK;utoLT@E)^>crLhzl_ZTcM%h< zk@Mu9eB%5kuzpX?YZRU?A8wTiJGh@{OjUrM^(Bhw7f_-APpeD8%gfX?hV$%)gNBlj zYvXVz^apu?C|XxWs*GUZjH6Ho?vg7bFvFIgg_LN~k-*(#qJIc73%Drl9R!>*7zKLe zAXdaGa?2A8QI|FtHX@=H=#n#>rd}i_o}<>|UaxPl2VbxEm{<^DVn4C$Pffz4fnWu^ zP}hP`F3Ski@)S3ZSImO%aoCZ@XjpEzvsK8pL(DInYE2mosl5rQ+-qCZq)6x{22To+ zCfS?Zj}GxX`LO@E?-G-U3He_(rhj~=cq(>(gx7AcPgh{Y8}xGq8A9a^;%c**u7{QB#B;=k)cgM91;{cc z-?sY>x17YzwY&49pJrkot8TWCa%15fLQoai1E2 zn@Po9^PJ)8akRRMDPvl2rF#g_qE9IxniI#49iz=FY##Tlj~zRvvf|2;_!`#*yC5VJ zZV(u*B#j7XOYKD&fCdMt5#hp;XhlnsW@Kx8;keeUWkV!Qqz*t-Cke?vA{|AV zlhIp&*%Lo5+1iRm7R)ffer}EyU)6peND4!U+{zC$~aQHNGh1f?)~C#U}~- zBp49z(UaE#cVXvI0wE#TZv9PCTq2yAvcCk90;9q+h=YCbJ)~3Af>Et>2q`B+_E#bt z<_PojcXB6ItWCbXj&G&Xn5Rr9A0v4 zJarq~+vLlkLB?mFJ2NvJ*?@v>Ga-GMrzE`*QMT|MJe$ezHbTHMde1JOf;dtMk;Ifj zI$c5@8Xq4K7B~vRDXWM_jU=B;^Tc*KCO@Sc6j-Qc5j?A8+HiD314Uvx?s{s68e|_e z)oFWF`2MyN#DYk9F)$@zLVd_FE}GL*6=T+%s)&@=7(BhbVz{0;h1uQ)4R^liEZW!Q z2svW?5<&nxx&D{Bo`6+5+G9fyagmi)`^23r^_{#cak`K=UdE@ZJhwf~NrjYvesB^4 zm;NY+OOl0+5n#UIrSP0m?J+i_=ii(2Hr~Y(xFYBP7kIQo`vy8y1s+?NIZxqc2Gy)vWY273jta2r%momdrryp;Z}z@21wHma09`DK7CA6 zFBLw5X$!xd)4oJcl2DmegYLYheTdcItu!L#dQuvdQ=ZMP;~|%txNfo4Hl{**<6FUu zD+@-cCtHp?&aEU756*5ktNgmPJ8Y0%H|D8AWn@tz=}8l>zy>tB;U)A#+sC#0(`u^H z;FtAq)o^`k0kEcx2T}}5=B#U|*6)P;o8j}4X?Q;O7ai{TF0cUUa)b2j z7=f%s`{CqbWRsk$URI1ZP~v)cB_72R3=HU6lR`J=NJIp2*j8@#{o%%}Xh|W?WC!6Xd_Wq;8`S zO>@~sf+w!*HEJu6o@z%E^r#{{rl?gE`)ffO)nE?VLpc|{GOT?Te8kik(8W%wGpqL6 zA=V*ik~b%zS|e^h;MXKn!%!(|X594r-Mk6L>^mqN61f~`=X&2-i@+`=2lgG$cR6?> zL5PAOhIhnaQ*Z&Kd8VI&m2pTR7BGOo%7GCtRZM3_jyM63kZuYX0JOiCXS|lRwlAcW4l?c7ks4L( zIL`vsi2z#5Iuoyibw+JN!Z(Re5_>3j_g=B&ktA{xNl~#!1gb(6P^+j-AOytcV6kWs zf%jo_U4SCUROmfsaKUSh=)H7S%lZ(or@xoZYI+~wqi7W^b?UT-C(tn!a>nAc#KETK zB;{=j(TNIT#Fy$^AwhCr$DgdkbMqw3-#aF z3_I+OEA9}v11RPWoCX~>Y?cR@uv7~;x1~o!USJ`3$`e2l0w6h5VxlGW<5!7(*X6)3 zc>&XoCq$Cr_di=kKR!cp>fXWBK1|u25(nG+%Z63bx%B9!pJP_FZ+~BK>6a0g-mG)! zi(;FB2*~(1z_EXR_X<+1#kLz4{YW_w;M}R0PmD6-JG_6;u(1B=4}#p=)0OUMPj|!U zRPM?;i7A_Cyv01vcD7|Y+H#p(Cse%Noc1i=%%lAXnSEz1f37;6E;!}3Y13RX7oe1` z7jQELOU9cAAz!0cbxkv}6g;KR>4vgrkD^?hwYg>4ty9m30Uh2lXmujxHS&?8!L)*Y$r6K_$1Dp(w%gv(Y z2XU~Tma*4sg<__Syw{&IA^OAwR?DjuUT|F3Ecm4*X!ek^2t})&nTMbIjZ#UZ9+tO< z2#v&_gQOgg^$P6jis2e%(>GlYD`nH52B!pgswLAENo<>|Uezd-mbeFZof+!h7zjgb z;YW8&LWj9DPv&@vD~LCn>De?-WQz&jTr_8lYRQMNUU<*~wM4b{G*7lem#`QdSA!~M zGI{(z(aN>z@`guH(}Pwz(mdJ0Q!43jvr~as9;2k{=0Rk3S8S2o@{L4B#s0$MyQ|xqbtpmT|C7{oRU>o zk{!;n*&CIlVrtMjf+PBqp%8nf# z5+DGqqt+}fVYg+nZP{Jjb(R4fkOAn19N!d}w1d~8k>yF2gwRuk^HpkRQlJD4D-#xk zw~VS#af=U!jZYkl=4BpopJrjVm1BB7b{`0;TaQm4La_M>zGQ_^h?j5I9Co2 z3YQI8Z!oUzxN!vqYlarQidlN#)MDu|QZpvRyood$Yepks6LTQ9!b98fc}ntQ%NK!t zI+6stPKtxa<;$Hj1!=}^#Dv{Y0rr4zMO6rLvsFE=!=e zq2MA-P+KOr%G94T%b``Ooi1Kj5I~J)Uhg7J_|&!m+GuSX`YoDJPj0dcrc&EVWF&Hb zjfNtbrXG&8g0aX}f`tpicBP|{t4pIH-m}WV$VL>3tZgg;uV^HK8?AC6Va#0HC<1h* zktpV~%E1H;X>{>K#)MlLldvZcP}G{n1P#@pO0nq|vd9A>N^=>(AS}GLGF&^qq%l?C zTOw&hsMZxRXIa9!h}sFK%?$F`id_OhSy5F`cioEaBrVZTTsSnm#A_+gLA(e@w60yv zDrdU3?X|KQ6Nd(?NqWm=QVU%vr8%ic9es{X{4kz~RW>x*;=^OYLkrQ-%EYgE1J*yV zs+t%2^x(MdkhvI%sE<`0Wid?*6SFO8P{K6RZEAazwR!7Tzy&Evz8@|XBQuPtp(`J1vOraFWw&qVs!R{3WW&RDA+i|*@Q zOUr~ka7CGyjH)e8lz|ONxiKu8cXH1xICfD_9*wu_a=24BEDbehfJPc{B`=heyO6j_ zfFJURw3?Md>18nlZPB<1io??oL_}ddc4>)EXbUkB5L=zY=3$VZiO z47dPEt}x|-3}zzhmlz9n7)eanL?k5%26s3Pnzrd0rEy2g>kxy?+S?h&EtsN+_EbC= zA)igni!n2lZ9-t<{yD?8P0(I~JQT6c&n8ayV|%<}_=P#D59ik)mv+o}fnFU?bdwN% zlItCJUbr)kc|Kgvb`1SB#~>0n<(qE#7#skG0eR?`5Nw9}ux9vR@72Sj>A``a;Za`3 zQ3!t$Zer#5Uh$<%_)Wmo(v|M$NN2e>Z&fO0Q49hiTVOM3#(^dcZkvmy%bRV-PT|a2 z=>S3U|pDOd1Qk*9h!btHgYP>LKihvUPCc82RO!_`(7|aAauz_`vYc z82o5z3TO>-Yog#LOxi83kO@5sN)KAL1-3kBRb#$^S3uJ84)%?Y!6kb~lQo4vzf&?%EdtN6{LB^#LZMJsO=J!wmmJ)$+6naY^#s=&*O4 z>0;Ix?diz;?2!uSlztU9YH%w8aMA-Jh7cr`hG@ZbJveVGLi{{lv}R^ZS1jJNa0H7r zq=L{?zEbu1(Im*q0Z*fBAatJSO6Stqg!s23G0Axor^JcK>sQl2dpa9#06B-E;rIbW zoRABqn^jSFB0OfnbaOl@q7a)n9_B5GgbHQj7DrsyR<>*hU8fbtHf^7>q!^U$k4Wst7D6MQFcMuE1s-sEo_3 zo-@Oz9e++PpG5bwwh4PJS-Xe;i7Z$Z^@+#h?dJ*Cgd?k3m`E$#&#)oYxioiXP*Izk2=T3V-ZomaHium&ssM zd&I|pvxNY5Ov?3EZrPQp527>x+A&nE!K!Hj+r+{H2`c54@>1qCIHL)Kz6uq38MKFf zn}p}P3E1%?&Y-_m1P#s5ghY6sn2_p{UlCNh0#rmbD%h?sS3Ms#^9&C9B&M1o$^>;l zm;}0+R@3-|HmcP$pPsM>&`yoC;5+;Z+HfQr>55<^z`L~mcp_X93L-EBAd*om5*8>3 zV})n}HjprTY{}yZt?{&YCE5%T36zG2ENeDg!SxC;rGXATemk{HJ?++hil)FkhH*7D z@e$LVaojQ&=Q?PJIA(z@U~r=52(%dQbrFsNu~?{%f)OYtq*#{ZPp$F=aI`qA29T1U zS{C&n@~!CDe#*29?o!3?Su*8yeF3@&c!zGj4fO71M)$;rCg;|p;6xi0(ZLZagqcAI z@U+oW3?M^mC`cZF(*!CEUdSzi0Z~Ax1;ZgAf7GM6;B^ciQj2AV8pI&lu*_J|vNiEB zJUA67o88>6gX(;?t+?j zyg6qv6^#89&BC<8ZP!OvHDKfeG8=Nx6&&wc(Go?cK4%rpQw~{jvKR~^&ZNc%ff5kx zDy3Dxy(9wHOcIPdU>F83S-xLF3!6f(h=+g%BzD{&2*)>VI-o^f!5m%l8}O^6c+Z2l zG+S&Lik66$CPS{Tc*?-r-1Px)uUaUWo+t8S0!zXW8qh;gLlZT^Gap-0bQ`nM6dzA~ zGt?m*!iJ4s5r$K26-p^6=@5$7I=y7 zB&M7SWZ^zn53+D?%JW)RkjJ3^N)$P9--cOClTlD4D0!`Qai*2#7RDwuUS#%UGHDD8 zEPpgUgbxqAR1ilFiq%Ls;!qeCzQdcb1O!C7rst8x0P%#Biz6^0Ajy#U1rdLU@rLgk zg*n)>_X0y=H%ddeF^*yvfcu+8Xd0?(CIv@_0*n>?yko|U$rDDgY}r>8ow8xs5F(%8 z31Mk)$i*7`DiEhhCwM|2T~?}4AuA-@ys|=Q-D(`nN>f9)$V3_BIv}+SU+r^>OTq#P zSLxMYlI%dnN!6qcvi(SW{c4?+V?`4lglt zp6S9%dM5(*nwyWd`Ea_8jzxf|FBzVn^3dG{Dk)sa>68{Mdp1?HJz>P0vW{h^Dy}mN zh!4@A5;tVhr^t}tZpiQy^eO~o-6TRd3g{Zsj_ZR?C*dU?%L{oVE^}kX2ggyk8@U-K z)sa*1sUYM73@Oyi#i~m&3%lTI9FgVX%>t%*o?IS&EpXr;v0L3bo88SxQ3J&;0=?!a zIKc%Ks1;4fvQU=dh!Aaxj!beET1v!M-|2}Us^nNbNo+xqF0d_ngd_`$i+*dQDn^2# zB5)|IN7t9@tf>r7rrU>5cf~8M(iG2yy8&SIE|@OFAqY^*<2nKKMElDKohDp5TsNG% zSR&{VT=uhc?M4Wld0Uhu;t8=n6-p8mv@1Z0){Dhib24Kpb;PkF&_d(NP~tG9`z-ToE7w3m%9eU z2b7V9P)xsy+fEuv91Bq-us?l&?lh1n>RjT88(%P73$|`yX0S~#uZ~Voe1qqk6;Oo6 z;ZzCeMnor;ZTaGU>mr{sT`($K$i{$Hvmq}D00IJwLu>&CyF$}d(f@UZJ8rnMrjNTs zu$J#n zg!X{Y5wQiwCc8~(*8JE+r0y~Be}cK@nSLucR`Eh4%ZBZB^xBHJlC<0krd?*4NoN_! zfEafjTz(!LkSLlnmTeY!$p9rHiYGcBH(lI*0>-01hg*?)g&`2bMIq(`*k?f6Lan$? zxSv6p3`3PTy22QZQ;PxAa%vA>KrcFy2quLmJ}i$Le9>{|4ZNlhi5bX2b2z25IV5SP zR5V@b5)%9ic&XqE^#(w85RQPbf;fq&(Zds&H2$ZtyIP!(tRLY_ZAx6Am|?K&w6TE2 zhcN`l!e@AotqnPJqQYLZwLK+9i_y!2#&`^d9~d1TJk?CJK2Gy=nk0olg0v7t3z-xb zUIPMM7={TU%j*?VK{(476YLvf>y|I*c$jWyX;}=R;E!P2q09VLC0GVQ@w?^cV zC)s60NDRP30U`)$5wJv{seP?NnCg~*6LpZPQ~!UCgJR_1~E+-UaAL{ zfz*jZ4Jahqrf5-Ack9IJ)a)b(stZA9bx05_U`Vx7BGoU7jFm*COq;QYFII}KzG4- zN}-at#v(?+t1TToHYaX8!DDkuNpX!uaZ*d}4hAK~DJ!j2k)%U}O4&tP4S9dHY@ki< z9^ok%xqGBHBLoQSsg9fF3TRenl{J%OnOeXgm2k`#1g~IPRQX)uf_hHDXyE@KAO!vF zGvT%+5$?vDHRrAx05mg=rKSWSAmnQr>IGjCwNt+#^f>A5pi(U~0C1gf@D#$l)lk8s zOwN@NjIfj@UZ1&O6-=Ju$5hH^jG03ZA`K5JgBvDD)xuX3{>YmbOgAm<1d6e1;S+XJ z4;a<-THzomIkON)3ZDc<#RasW3Iyp{$`p=?30fc#YsoQ+ZK|M$(Wa64h`B>f1TOp| zsB6mEYHuOHNq|6mnC1xr9=PjVi2QWyyjWHc6fsrmwKHL-;y!C^3lKjaWbj^ND;V9F z=gFce0v*@b%s$6(!F8esUaqkz5n9P@jI9(+hT|>Q*lu8k2o{^?3ou-(P=^z(v73EW zt5ign8v1F)&S99DO+yhpN;SF0PQ+ZM0qFd|^;}(3nCD3?1a*y#6S@Q2#zE$JQgV0r zf&!sAsrYpGBz5XG$2L>2t;;7x0`1jP$&m^Om%8Aq;%foArY1fxqHLd{>6>^prF0tb zWb{A)9!-Maz(AbK{icJaKT@3@po>d{034}Km#o4-MVa0_DT~RoK&xf~qD^hwl(#q9 z7sgo%KYY}#uW5p&4%-;fc7WsF$+;$ffn{m_bN_dY zaN#;eq4=VHj)yU%o&qnGTTuEcLg1k=V$@ATC)BhvFu`pz!hWPvFbGZvTDH6)b8*-c zdW7NuD%4dgch~?6ZrGzMkLfrJxHnzA0#++J>|8FCJ}?= zLtr+SUw!gzL&(m}uv?*gBk|0yWL|S6vsDIIwF1b4IgLNH^35soj7UcT;z$YcT=zU<&34 z9}Iq|KU<{y)Qsa2@q%L(@2pQ%j9HkIOam_iU6l(x3^u_+^oAs~=m@0x4N^fr_n{?% z2ser54eddJc>}W$>@-xphbM;2c>WT$Orc{<2MFw`m~O##@cfi!TtV*?75jvSfy5n- zq=ex|Q6|JE0YkKr>*#^As>ALS3q#1k^sV~*E?_=dX~94v%q*_i7;aWutPVR1O<&1| zV1E%uUc=_ZsxJ#RxbH)dou=4^t=?7?c-m_X%xSdHaIadJVsc2~J-&L_K>0^N-jyH| z*AgUQ^BvS4Lx_p+j`EZtCnSpH5JPCuimnoYs-XhZpJFz7erzE!aUF*!YkwWt67QJ0!9=+-j+79--ODO~fZQU1A{7*i{Am(C!%BDS@#Ha70oHz$m(< z`G^o6q(R9rlw%-p0I5bK}O~tJ-0%762sUtRog_())t+%_4Sy^n; z2i+I$cDEKRxam7sPazrf$N(i3$sH~9%OIee2qOY7rPiEw|8%@I8WZS_#sZD5<~VX~ zd15{FjyOh0K4byIPBl<=VC;!cz=*^?X^1%oI!i#^l$;Oq>=_|H)0)RT7<&+L0doNP54jV?VfPsCdtg7RV7w?mNr{NDgu?3pq(o6V ziWUdN)=-odDPyBS#;77f{j@gW>T-sH+%tuZqgX_#MfU*Jr4a#HMSH&xWtrz;(^B53hw2DW>WcXR$yeKf<14`4bl!kCfl+a#B?{9uv;z*b z+Dj1k`tIeF-WPF<3c zz96z<1aI&}GXH7Qv^6X$Ey>n|yAO{N$Wun(3j|zN3R^TpO2HwPS;bhTf->S~B?2o? zIVnvG2tqMQ5YbE{>rK2uEw!$!s;QB>A(J%;jYEewB(M-2re*pP;@XNp3Wi-Uk$Qwr zRpe74nhqSRa*BbZl^j1tIMs6eK=g@0jv$i-(dRpw!&gN&hdq+MS;-RoIc^L}?u{F( z#H6*YMy!Bg?9%lJ;k)Xn4q^amzOb~it-#+2AyJ7Ij_yCj8$*K->?!m}T=OTAF~qeh zB8jE#9*0w>quY@%p2|*}=vY#C<{^$ty@Sg$JZFTXHevjo7V8jd0ky>mJGjtWfmjqH z#C!rBQ42L4N%xecfZ9plh_lZN8)B-y>kChA5~S}RXYEH3{D6?;vS@gLDX@~ zX|YJWEzwXdRlyTnUW9=rBc2cs1y7THI7DNH$|RC{0}Aw7NgXyZX!>;Y6C}Lih!OTg z85&?kwb?9ls#S2O{Uy_|fjLzx1YkT5L%D8Xc-l!;jc17iq7>I1?NzcV;hxUXS(?E7 zh!saMoRqexC`qDhRk`!T49o@7UBWxffrkrkpk|BduCG=;>qth7w;a@hAH}T5@sDqX za8f`Is~BRp7L**oCoZxH1&qh?_LrP$@sQ*BW>L6!VrGfuBXa`0A+d<@%>`(O&tXH{ zb*jGU3XdHrUTDvtAj9dY@Mp1CKV!M&MTl#YiSsGDo0=640XU1A3gl72$5OXaQcCIY zkew7l1e+7VHiX*1kfmISBKxixIWp3h8tT7cJhg9lcsw=UJ9f=(?Ordr*s*5>cv6lm zxPM417&+g-Clb1SFp<#uktbp@o<7*RDI*m-3if7#si})eV<)F&8J1NP%n7EpJR-h4szOW_cDvPy zJAFiQLZ?_>i9@6_3z-&5hRTy+;)ai88+!HdFoG@WWssoRkirZ;aZtj}0PT@~N##gH zu#r@)PTyh{WK>(4C;CT6he!FS03ER>2{b;TpOJ~;q|i-+WU@FYxq%2X0u@5uSs>HG zhS)de!Vw>WhxSC#kE|-DuayWxKzl)}vvMHtQ$RruL7%eLpFV4{-0H1QjX(`H4|KGy zai52iFfMCgXe@|N*u8d9>qC-A4S6)uflkYBl-2^S;p&hn3`f;V1g$(BXB51C50D9F zrr8_9)q-0jL>%=On5er+uC-F_G6p0_ zOWJcWwV>x^!^cVH(jC(jSd`22<`Kv9Q$jas;YUL5vwg$8qkT%yV=&QZ)eiE&o-%|e zNT!Rge#HnFioMA zqtg@jz*JL zwprw7AoLb>L{3JI#t$Y?ZaQtW2ziy!)gTBASEwfx5~&Oc+IP_`(105KIm<1g(a?$> zDIhBy*`#Nc__QBBJ{&p<9Kivi8dMrlEiYb{A_0_o`FDi-0`bCxI z7uI;5uz-%p<<+QrGUZ>qjwkL0*COyV_$eY^Ap}YHQsAnm7z#bI7D8)=Qe%CsI8GlF z{R@32@C=X>BZ6>|li#tf;4!CcDks3A>)5koAPd_rtV%$-7%-AWKjZ-}^5Gyh2KS<% zNMzATI*Abr^B-NHzFBFP`cSPREvO<=9CZTev=vkxnK$o=h8YA>mw=!pbHRvMnTre) zj96wdk*7kAd&m3Wp0Fo3JsQWO-{jgeEJ*9%Pm)HKt-XDezW=BciQ_fP$@}Ocg0<|0g=Xagb78 zgkzIMk{!|{g{L3)@b#QHA_NRDfh5_S;ZY(rxseZPDWYm$oeHh86>t~>hY$3~V;t5N z2_8=F;N}1S4nu`U1n z$j__>c4EsbHZWFZY-`J{jBWYxd;^-*?ti1^2HIi)NdD@A{0JtN5Nnqycw!>;+29XNd?Le3vH+noPa5YBTndB+3?lFZP;Df*f!HXdf?M})iC7xgm0p#r# zInt2%MO$pH=>xJa8Ey+?oNkgj@fwDirD3+oVM2322`Wlp2#lT{-qvO(AQc@z1zdE| z5gz5q=z`Zm42wV#ON6g*V%BR-p+aplSetagfy!aiUUn%kBVJQ{H+4Xk;Yn;)1gwPN zAttUJ0$k<o1M2^QtL&MT6+gm2NvPH;$h44J)K_P`N7{Jz4qjP zj`aE`M6VlkdObT_9|$+{2uSzXk=d3dywH=g@4m- zb+5>63iT-4y{AUnDur-QcRITZip=?b#ml#~xsI2XEwmM#Lfgz@3dSJ@kuHNTPFNAZ zhKH|FAw0F0$V#Rpa)3da*ikqq5x9HA3%F!Jya0a^B#?EN`0ZqlMCyW_3LJpnaR;Y& zs=9pF61dYrf=EYab3(L5DTDyvZH}uhI}jSb?HVAJ~*XYu%=>8I#jwI{S zJkdr9vfd=*6=){-1U*9-iQc0ydGvY%cF{Zz83&8z@pQ@ag|$T`6lK9V=;5l*vv6IR z5(cQb?KfSxqsAzCLIMS*KfJL}<^~5gMRh6REeNg~hD(KlS_e$OFn6drYeFt*Qnsl4 zp=#N%0dF7$%TQIEg_SP{X2$1CyI%|=Xzs8xJK|clNKq)u4w?R-;muQ4Txy*jc7;YG zKzZ0H%;RHi@&_!t*k_ikvhG3=WP+K{b=Ti;<4wkNp=i#`&RMt2m&&$Nxz+Xj>cZmjrQ1@<{)Hne1Lz~@ z$w1ywxowx_liC=9Jw1P^VmdQ`sN$+0ZCFRSVB^inESk%S7M>iyoA|^99Co!_d!R|? zc^*Jezy}q~z@4H&=b-8Da}B#Nr;SVkI<)M;{g!e}M|r;B*bAoXL*7E$gG3ZP((x~g8xJV|v?Mew4|5+GGFOsFA{fhGc)i&-G{FsY7v%J@9h zB6W&4hz{^Qyi*4=d_uYe+z1X~6Sy+q=phqb3Rmzc>oSxhV`~)v9)KEY4#EaJZIp`O zh+C4LAnZdO@2lx)29B6?`o^nalAbq_F>C-q3Q>Zgy#6ty3+Ut{kUr69%6y^}^ zxMc&wD4HJL=4Rby@?Z^$z{f1#bbCPg7A&UdEpVp-0j?f=PghEYWh+jDUUuvp5R*3} zex~+jBqTKv14~65gPsbu2`Hp^DArd4f~XLS`)$9sSfqT;s)_x!KWc)%Nk$+Ar77Sg@?v0Q zp@UMCm>zGw{mw`?10xGv%e@DVQH8X&q_QB$EnhAv zUm{2M>q8eQ2w&^55I|NE6*LKcnjxXH?a0K#zUNc*+ei7o%p%INqdXbahLyU5Q=R15 zOs+%3Jnvg}v6dSmxRj7S0#Ravv%f}^V4tfOBeeK}#o3T&?yzN>njBGVf+$+4o{~!o z2M*MN%a()#>GlL*y2dJ@WvL8eQE)d&KhB-Cnr=m@AEgF9g$DB!a9mn{IDadYN0-?!9n(*bbsi8J$%dNvO5%P( zVOJ2A97GP_E}ppgXePC5^7d?N`<)XL>6QFwZj+^QceXrhB3T1#wZKCV5gA=BN8 z1AU{sT@TMxRmVz(HwWt?)PFf(Gy=5g(1d`&3d<-dDx%Xd&f>w|Vd-IP$d|23fL5}b zOwi7xpceVTx;SpNcCu14^(`(yB|AmF)U{>tse^zx7Z_9$MmWg<>ESCHw>*hmPl5t_ zlqUoGm^X_zdw6@Ug*OA3(xPw+ln#ST;S79m7-ZLp>|pdG7GuAs6>Y#*<#6u%>TW{*7$sKvXF!3WlF_E6UGQhd^(}8o@+|KZ%1U~*g zk*=#2fu4M;TjR&4|b7|@oiS6O}eJrbQ7u#IjuO# zJ`pfI&vI=G@~IjS8!Yvk0FCn$W1zhl(S~3Ua8yuHw%XiZUDRd}-j$PE zxGRs3n%N`+!p@cfVaDQY%Cr~sNU&Gjc-1WsvH41h0AqRtSP-$fnW{p>*QQNvbVHu$ z!r>t=pgAa2ah>B!&<&qAmwI}yKR9)GU~Ig9NZg{=lgM{=W;#0)+g91gX#e2wc)x5U zo7t7lX1dea?(TH=t~EA!^?uphu2m1`>cIguqikmN)46)E_XgE_F0<bq{2wL4Zn@39V9IoG}Fo)4)>cXa1E+Pk|ucBb&#&aU<~w5FiYo$210+1b7` zo5F9qa-FM(=^+J`Y*%Jirh8{+XD%ha?&{dJdO#ggfXYIYRBl(t&W;p)?e55~8g>H; zc6+9I=6EKP$!0Ryj$AgIGdenQd-u3Jo7;=;c4l(9OeV9ltG#QcyQ90aJJ)6AitQac zGr66aOr`_McI;jK2o${cxV$~LcaOh@HWZZixJ91rf}!NrG8P5hJ^tQ3Zh_}AYZy$Y z#ATS!&eb z52V)wZni*vA3O)EUUJuQ{8Z6$smI_&$(e;K1bUWCk9%|FlxN*$_H+!=ac9R)!5MLQ ztIIx-^hm&4xQu;c_O66#H6h@9|7Hp2OLaI8!Yx=s)k3Oj)8Qi>*zd6fkl(btaDNJP zR@)ND`pY&$2v?=*^TZL^gH@j8y=B|H%`&b(2hQ@dT>%xYz z*gccak7^5y8V2~tbQs}!A&}I#O?x4MDn|lzj*-#+>!$jK#uAf)v?fD7{yW8xcP?i zi2zdW+*X8E2a~-9E6o1y6ROFQb2+reWh=>i5Na6(0jRtdJ;l7 z>YU?=wd7W(T*ICS*NG^4q6%sT3TFO#FiEp7YCzbf|=DH(}s17ZF%<=#)8H?Zw?#tyt%1pV`73E zp~cP1HMPA#gyljplSKNW~|G@Z!&WyqyRIG>y0vfD^@ogI2M%Yh-qn5Za9?@maL%7QK5Fio z&$JI##(H};FxGgk>lrWzJXM#;X0z+nIo<}wvM`p+Q(-KdVYIGiFviw50NOV+usU1Mzw9kH|KYD+^oj4hed0}5 zU;D4;-?ja$eSh-vbH3Vm`|LZO+j`UX*NyLf?;pHsW>dqzeds6WeW&g2SHI%O;kQn` z_v*#3SF#Up`LiGW*AMP|*_Uqk*p?d}c=g*}`q0P9*1zuPe*G`5;?Hh* z!=W#H@l}6(!QcGxV(TCM>Vq%7bN$Y*{^ErfwkQ7i;nu-TC%Aphd)*(rqvPUh-;?WV ze$T6mEnOW~{>9PEob~a4dC?=EIXv`@i(WAEr^exRcl_jy`?lWuVz&JSH@)jO@0|bn zvG?6~=e4hTf7kqHeslLHsz=`VcgY8Tl6Emn?q% z$6vFzz5k<`d)XQ9y#6zvc*n-d_dht${>7VL^k<(>J^tnOXFu;f8@9alA9HW}Vdb~? zk1U!KyKZ=F;WeM$w{UYRwf+mg-2ES~|621$w|{!+F{kOs;zPG=Ubx^Z-~H=nz2QUG zBrp4i_iWs8N1}25>)-kKy0<(y_06mP{q`RZz488C-T&vB-5+Tw{+|avd+h^%@TOP( z=3nog8_Ztvo_DAAz4p)@&w0l`ZvFMMzO(L}XP!-DHsiR9h6`JBXA&d+A#iBM@ZTS9 z7|fl)*u8@0fQ_$b444N}8}Q%tu&C@z_;VHzACTkvZH#5!3(dsQ#={@~{^!`9jn8=I z`lXM3+I_~(|8vRK-gBGIDn9V?k;gy3y*>5Q@85La;{#v#@G~-_>93gQPgy-L`tohR zocYbQzxY_S zyrsAmI(s1Yx z|Ni3KgD?Ke%fEO1Ef=l(%o~jKJukob@7N4~RzN4G-S&mc#GOzq#|h zZ~p6lf5!feCm-`poVEVd4}Sj2pS|Y8zy9lmUhDn2&wP4h&!)FO^iSXV#DD(ot+PWf z`^5Iyw|(hHzdQCPpTG3M-NjG7`;QAv4?VAP{6+pBeeauh{NQ8%_4PZR|DEB*orN9$ z>!XJ|=03Z<`>)PfKb(8ZeeXE0{N|BwUp01F_OI@mIrPKNRF9nX@SorJjyHF|<~bjG z+m9yx>BGCeyZF94Cf_+W;53`>JNBC2?y(+x-?pWv|NPL|U-{o(`0fwBc+PkBUHl2{NR$$eRfMr=VcEZZ2j@2)%(8hy<~JUd*q%Cmmd7)<`c#TA8LPe zYM}dfiCv%g+k5Ul_WUDv{_K$}bDQ6O+jk1%H~+@F<(u1f^fJcoVc%)b_ErCB_A@`- z_~rY|H#}>5XW`4))^B{}Cm;O4>#yy;a$VZ~v38{@bT6_)T`xe|+VfM`!-M z`=;9#8{WC+>~z;FKYqvDmoC5Ucl-bT(7)Za_#5Y=Eq`{yqnW3D<4<4x!s>J1z~6M~ z&_jKrSM6{6=gQ@m_5G;h)31E+n{R#KMNL2J8ae-)>t6MXPyVlu{RRi|*sk8Ey}N7n z?U(&q``2F7{L{y8Ha|Oi-Ot~;aPztR(cQOy^hb~VZR6;!$A5fR^Dlq#fy&E&eb-BG z|4HwwFPy&b5o6z2+<$KS%J+)T{pNpOa{P6d zy!bCa``Cf*nf6y)^iMB($vyx2FCYKPwOhx=jFI<0_wM~0-uaII{H19!#-4pq?mfFc z{;9ps9Lui1vhliamjCMoUwGR`-#GO17c{?o;rQF$f5|WY@e9R|-*=z8`4!LGdE=|M zJ=FHShaURYf4qD5pFj4lzxvqGb3b?GBcD5bWyA9y{-OQg!R+XXyJs73eDpv6@Hd&> zyS%@7-hb}j`UfxB{lHuAe&EgBU+e51yzC`kzv&e>f9}s_p8L~p_^)dIdU+1Ct!FPi z{K!3j`=ZBhJbCMXJ$>|rpO|~#SC70d_xE48^<8tff8mDXcfIWHZ@lv_@A%~Ntk&0_ z`I@s^JMXz_7>xevxr z{J>XddvDA5ul?gszI(&O7x+hdwj`ZLzVy{CZ+Ucb@sW?*@ekksz=j=X-tn3K>ARl( zvMsOr-j2nWobi*l+@*8vA=ltL~ zkAC(m9o3J%^W(?trxdSw__8aluk37p)y?bAzT;CLy!PswpY_8_Kbg3?<7?d?|L8Wx z*kY+rn3;8}C36ocAIFF<0{4^O*E7ao>EHu=PCh?z^5n_$==m!f;Q3(g{1J99V`q=B zd)Kq`8DkeR#-PlZ_>#Fb9Q+2^_?D9Z>JWUWeLLFzd2BET`+TrC0M-UjF&7sX(Pbf}-b1u% z@b5!d;pDxbaGtz(1Frn0b3}oA7-NtbW*s|&En4=pb3E0a?r3jhexZ^od$Y~rVM|^l zU{D&$uAKlglAwq)083a)FnnM{K!$*UXW$y1Y}m|BZaJHsU}vzCTTYzZ%AU?nZf!W1 zo!q)^6Fa$e>jms2sK@j+q8v@ zF2c+Te%UEjOQtlVSlI@45#pRMrIF_} zke!@V%hDey0*l(X!JqLf01wg38BYV$4Vqbx%~)=sorjGyv0tGMllC>w6UdhwWD+HD6B*RYkb1|aV97;8X-`)tOxTzEcX=Q6f+Briz1>i0NSWjehjmM37jQn0TVrw z3lw_NX0TD*LGX1&py*(sN)VU!(FsG_R$;p28UWFM9q| z#@I)wF0kZ}(f3OjV|P$HK$1%|cVI`4Q<-Nl#-0z%nlW}MW2~FX1Dm>=zCV*O_ILE1 zGsZqjb8KXcy$fD4#u7m4R0h~W6MYBre+5Vv#@OXr``ZB*Xbe{{#(qoX0p-3$-&+`C zkH91tV>@6iXq;Cv#$G~mZ)J>C>3d3pXPPlKOzpHW#y(Ep0q1@~aL6&n?x*j-z9if_ z7-L<~FbX5ax(Vi8jIn>FF?TaySfb2M#u%qD?1Hh;a}a9ZBK+LV7`v0&0mbfT)J_k; z4i=U%wwEzBLhU?@F_xxwu40V+0euI{WtP70gSk*U`vEWMdmpq(Wq^zRh}t~B7<(Ok zKgbw+n92Z~|1fHp&=#6O|cbjP=m>aZrz_uOp1H_tE!X{j!0vvj%flq9?W)|6YNA zFJSEcbJ%m(U=BF*I>s8uA%|4Ht?j5$fO|CuMkez+Guf`z*vFmnFQDV#WO~R$Hoti_K!{V?Sl&E63AO+gS}eK zGeoM`vYE}bLr3SS$~shPn%J#1vDGLpn6_VavG=o70|1`b{&g5VB^K4XU?|&0j_f-; zus;eTkcAR|qodz8*1vzWe|+ki{u^~rb!b(#4A?W4ZTU;k#X0+i`)-^X8@Q=|>hQqe z0K#{RT&`VOt@vSf;?fB0hW=F55ZclV1F8{l7L%g@8^QzC!1+k9=P`EwI+kXGxkngl zJfjWLM7EX9qGf!Jfyv2EG@h@3Uvg$s_--$izqoC|aNA1ObemlGTT5+#D5~;Bp~|w< zrP%8;NW&R2++la&ne=v8yxsEQGf;z~0*mJKxs2Vvo?XiZbL&xW0doXw zL701HcCO&2EvL;h4ZG~PC37j;*%lg$1Xjs_M4b9sj>R^aJ#~|ES+zC;a5so?Hn3aR zG#o}x6?lRh6+Z=G9hBs6`*!t2-YSw>;u31NmQvX+0Yl46wL|HmQqL04KiX_t`CLyhw}<7C}xRpY1{%mcLVsfd=0Ix(sNYjf^!U7;6As1#}d! z3^tPDiCcV4YD4EKjBWYd$&)9aO0Tyv#?RXXJI#5nFY~sd=@r~O@0ASXFyy-RxB;2N z7R(Z#hM*nDvsjsPe23rSR9(2-cF~;XMx|1se6ZUp#;loF`4IIU(nh7Stzh`(tOLn{ zDy~zk(uMWgisp<_E%~W}YZgu0w~Uep!z){M9{+BGAPlQudiiZ!EgO92+$v*_u|UKE z5D8=0#XR4OKRH*+OTTMyEAo6r7)EuL#WN}+`ZetZ%XMtHK}1Z1bH%Rv_T{-0BUDMf z16HmrUG%jS6?wc&c~(dhEVSU1s$~H|_&~Tk$%>LQ8=zi2PK9lFbLA-rRLk>3uCuE= zEv5niDTeFkdDSkNo|l5apo&@C2A~$|309_+IyHNcwFJk(x?qjbg2T{3Gs^GGeCe$1CJ_3I1fb)nRmFH5+S`G~0 zsd&~CH@+)&T{S;w|(YTX7n4+AR6hLM8V>O**$rH*`$+D}*MVw%p z8nmX|1T$H?BwrUN$$!}(B)RHTiE)mA!)#U4#Vs(8F$xaO<{R}Fw`Rl9Y@)91<#B-0P;o97ohLd=x61Zm3D)=~zD?DzS zW)Uv!_UE8Lv*Gb_wJ_JhXRD^?@kPg-kEjW=mOodW1~W1MU-0d;C=CiiAu3=m4)waKT+^SMH63@>L=gsyr7=SV%(e5v z^>Ms#Y@OtV0zV`xyxyEnfj_1wugCVBQWcW1ietrIwSp<+F$p6E`2$B2_ccQxw=ru< zHP)-owqhr(F)nH;-p~OX$}|0HC1mDEJP$Ffm4O*qM~teG;)))CoO+PVh&gHR1g-SM z(3C10rjZ^&J?gC>h#nvid{)Eh0QK|X-eZ^_X!?lf`AGYIxsq3nLn(pB`8Z_90YupM zuARGf=JAiz%j#)|pch?p8ZjuuB#Fh-%|v47wi%U5Tfrz< z)2^9XG^Z8CZiYvOyA+nqZz410KhJxL%cy!inYIwzIKDisNVUtP^=VoEf;fbT6X-ukg(tvncZ93~JK831V;wkU2a*Vsi zVp^bK)iYfhG8(|Q7`9osZN92gXj|Fvd=od2fG30onR1q$gj$)xoU;fvdm(R37gk!O z>=b!dSI5eV$Ad=$i6UOJDBK37Tedt8?nMCoS2_XBk|$NkdN9`;HA*Or1@(Kfkr@kR zgz=>F7LX7++eA6BtFBVFo?WWhkPTV%ciHLY|njK%|4?t{~%7S zb{p|2fyRa>N_=a+tuW`x0j*t>Y>HFb{!}V$bFLI2`%6x>$PYQ5Zx-pEE}l{scJb>h z*RL8SK4=u?EZdC8136@*KhK%*7Y*0cc)zBDEwfRz$1GR;C0;Q+Z_#m!d&3f7&JA(? zcz7YPMws6fUERB+@+25$4QE%&m=6{io2n5CoCB)md6wA1VE$L5{|Av&$xESa;0E&R2fS%7Ohl)e?A2kawl*=-sPz%FXlmb<+A zcC45_B2Z-S1m8puVc%DDSzm6K@5;qtTUqR*>(AS z1Jh$y&bo2<$mrDm15@L}*YpnoXFqfN$k0&#VetT3Jp)}&GbO_{wa^ocb-W)VZ0~Pi z&nC=lU{7Nrrvp!=Y$pXaCq+oORa=i~c-nHsSfj>|g6_4i#puY^j@?`0u=`qx-N44h z+$E0hm&ol3CXa9VIA*eF>S>z zi`+@HVisr3w1(swqYq(tFscxq2TVLDp?!r7a9*pp2aVzT7#^*oM4pFGhMJ^^hWd-T zO=v$)I`E=+fzKz%8frR?|K&Lvjb>B$B=?wIkM54qt;`Vgdtp6<+E;9I6xyS-R zv>LNMfSV?f^ogvUa<|4&?h<+3wT>0#24ewN+I3?bo&aaE!B%o?Zg5DUK!j?#tz5*u zTGJ&nM6&1#Fx?ujnNu{Q{<5OEV3wQ;gw<@b3XUx{%kgg3x+YhQ6Tmmi72MYkOfR*? z3z1q@8TOhKj;2b^tdp+T5JnXf$+X9Irohev(|vDVVtts$1dWAwOstDQE2{+`)VK(O zV#qdN1bLpwYiavWP~F#3Xu_65s^Tl)kCgHqHOsiE-Bu&OOs5L+3KL_Lo$iGS{cceL`fzy{j8Zj zbgW4q{E$8`I;8mWhh++uwWs-t%{?*VbyyYP-IJjD_eL z{Kzsj-%ZwR);8*`cDAl+6b;@icW#P$@_tqHquM234t#4rw7XCx9wb~rtyEjJ4qQsr zwwcX0U!S@%NNGGfKzuG+H}AZftkL|T+hV46WB@6=NPQ6HDnE@%> z@sldZsHaN83^EBcR_L3>L|8#dC66tZp~g9-Qg0@*4t!=vyo<;uF_g_26`#IbfAEAj-AyGy&Y?Z<{j5{JYaJm z|MrW-=*~~suIVV-e=4MB-j_n!pzlvPZKLj92_lqIoA{m!Ne&?l9I%a0iUuhfrreUH zC!-Lxlg;?`)-7VJ37VI;cnIhzUU05lUOLgXRzinC&J151y;SJsx6gTuE$%eGCI`J2 zz#0}lMkO_~%GUq1yOaPVM94qLwW=FO(NSR7T~wce6O!w62hPBBUEeA(UEp-+PjBxu zYKT*tYY-82bEnG8a4mm$G&FJyWpA7k*C%}7AQ(E!Qubx;r% zaK1D!JrjIGJYa(~0xNU9VW5#Cu5y@2;P0_Jphe>4**OEhglR}dUgUxy{$LXtE=B^Z zK~4eW*bE_e3H5NX1ul^85eewfH7(Fj6agQKY-5VEMYKsUi3j@^4k@)EKr`fPKXhCd zWNQ)~!aHv5OagQ8(N*448cXB_42&Th1vG?s(4_$lL$gOiVg{6WegtWN%_C})54)p? zSf)n;YLCPKz&FeBj!4&ucu&gJIDAUU>w0UiCzucAqW%lKmXF_o?@p%|m=^5}Y2f&_ zK`IL&ELPMX4Z5D`xD?enKs^pI$}K7$9B%~YiRXlUSiI2?*Q-(viMba+?AkshVSf|> zK$Fnvd8V7W$%jEOc*@-2f6f2^;`g$T0ub;qEi1NCfKPBZunqD)0ED&%>iI9T-?Og4`<-$h_k967gEubYprPHp(<91h->|blOn>*VZowb$N zi3n=xeTv8JE*K1pgF@{l>q9(lcflP(6u#4}H8!iOwa$}z`$1lhJ5#ES zhQgBQ2izb))hJtCoV&LS^(UIO zwR$UES)PvJKIV73Z%XYT|oCQDz)Oa=KH6SE67%az!t5};nqfZ<#HkRal z|EuG8-wSyAn&o}JE6KkYx=~pyneNc>@WO1|?t*?ITT?kW_+E)$<@6SFf%~*<6Yt8- z*)H6ho>jWOgb&Yu?BCEG`+t)k`+Use(BA^JG+3AKJ80%&`_>4KS`&@VL9M*!2LsX_ zIWAn<1|*{9AZ=UD+e}%5o|oIUlXhovt+E@1BvW(7#tx|HoXRjt9B(4X0rO4Gc`5bB zSvPAD0;f9yeGA)IJPl0GbdO-K2?c{Cs+c-}L(0w7Kn|H)o-LOR{1UK{XUm43 zLDJ4A(XmvhXlQC0v5XV(5obVPqZE`fh=Oug3E^OcWiy9~3Uf?)_@+T1ix^0w{$Z}& z9CNY}O!md4@-i}{w`-fVEx7V}Qd^PNP}D`GfFvU6E1-XyJ0QSsjPKG?VO@))?@NB; zfLf6sID;A96Zkx+Jf3)bZZDr(I;5>~1u1V`psU6h40WSq6q;Sfb)q9_ks$u**`Rwd zZA>L$Mh<(C(!=n6rX3YA^RIt+@f;XCX2}pJwWyHXTZ6#1>kt;68~7y@FvlFIpS-*U z127hwjR5@BF#xPO>RuHrFmv#|vc0ob>(sU%LxWf83vk}B1M^Tq@EArJU~-Z_jAq~@ z?SOLD97>nj_~;vpEkplnCIY3L+L+rKh^^VPNb!M{15y4|;9ME$`9b}*4%96H>hV$t zXcsonhkYlaUEd6B6h6Xz8i7%CkMvE?F2Uk?#C7&5!~y69S;<7Ue4KEi+Rw=vIUp_z zD1WLfbn2LyD_6k%K89Hh3Y3U|jQbK|5CgIdCLTFy*ub*KAj9&x*E0pG2>xO2rJCvm zI*#V|jHQEsVi1xU^tnAV@`IUx4*k%H{6IQ}GUYlLs6eH6HI=xjq|_Mj2T6UvU*Tl` zH}zy+A6sl%l6^VI_%FV_rNPLJ9AJB4StjDw=SPcIb!hSLbF_%t7g(_uP|6%ROU$=v zil`T5sqj{aF{nHTgn`CF?MmR8ywi$>L^n&?$Z||H`a( z61+|K&^%%xl2WKvTq-YtZ8pO;Cc|Ygi0kN&14--;SV0b7OsG!+Fn@)N)b`8Wm?Ur^ z%B|#zbr;ZUCT5vrU>a^udU?+Y=$`)qgdj~R9==ADg4-%l>KzC`2pYn}!^7!>+XP!>)$|y&jn8f)J`ZXOwf5_!9-l2-lh>^gDbBtCm%!GX?v)+MAi7o#N$8}Az?vFeh zRdgw4j`sjYREn6Tn2PIe&=TjLSQNwoE<>EWcvw1Z(@9yz-%z z0&kQVF{pp9{?STKsx}&$tMbQ-p_?&te+te!hb_C`b^Q8 zIf&>60lwlx9R@L1u2kS@1)egHWK)-M=qkMvqR_#m&KgjYuL~C{N+JdMYq^K^c;edT zBFq490nnBpHu~Fx5Gl`mHK@#m*;&BLJ6Bq*2bqE@9XKwiOp*owYJ=5Y0>wdO`woxY z@JA54;g4czj)!K@U$XxIjEcK7=m9#+@Ck@tqk@4N#JtXr@vrMJ{@)TuI9oM=@$2lL zSsNGE>Gh*S3g1LH^}+ewqtm2jhDQ*{N`!UL) zq2!t0ohE7Oz`9RS2h|E)M;>xCF}$$^p*Uf|^H5sAk3nWhj0MK-HcGiGy0M-0I<_%$3$#wy;@_)*eBvn>g4G=dNg>*ECS>RXLzmpvB ztx1MOIUKOwS5UbTi%hRay$AqtX3q~p2h$C{!u~uzro5rU6fedU=tm%mux;%-y?%+= zwQ{9~s;O+PZjldL+y|DdVkELrz^<;gVylslNO%-RbdW&?=&%%8gA_gp5$wQ;z&0k= z;^bGYKDGA279vDen-`5e4t{iX6u70K8TAb^<9IfGkvwRz{{;F-86>*{dIVs*Z*Zv4 zAwh9@8MP*YCkC)@e-q0Ku+2dPLHoCIExnR%h6%^2H`kl>jcU8rX|`L9#I?iay};?2 z5tZl4$-YexiV~7;}Wktq1|SCHLuL85K5buVH~eM-s192qUm3Vibuj?fEhLO&wGk+>jJe+PrZ5|+mD<4R>2H_tAzk6 zZV7Vl!i9q0eMT)XEsCfGY~eJix{zeuhqMDA);b{>(g5zLDV&Oy=`v4ZFbgMOzSB1Y z8(ies9R)tN%mEEd3?d2fA0Y~oOU(ny-uC?g&B(@V3eyLUO;t51`?sn-;w2ecYwVNe z$|1SS?2!odn4c%iHS*Eo2%}CQtAAhyjz5A}6D*iC;&#es`S`8H8Vd6XuJhd@xhvw5 z!)?B@9wEem@acTKp z#lWwal@@om@OEKg-oP(JCTy8iTUc0t7Yj3yH8eOL>0XcQ{KJ+W4!`QiU`CeA? zo#j0BtP%3CMH!)*aq0;uiV;)L5r`GYRu8Qra{{#k1M|bvudCc|g#6#lRiup-K2wxm zzues2d2smLX*4VSM@K7%?k7)ck7;}Ev*kw6Yi=K|l$RIp%{_mz*67ti27Y6s-rlUP zbecOm?F8TQO3#U0vn$z_3k5jZ0jsWw8M~&8rN%Kvgu=PS*39q0%BbZo0^gY|1-Am} zQn2n!I1o`pR*s1xqPKXvBl%L+JpUIUiqmIxQx`xdA`=h{;|x%cU;|i}I;3;_yhTK)PwUY5yb}naD8MxbmktmO za+ZnQWmd<$p`ESm`pRxA_SpJTyazk$stwVxj)))iX}||N9dtQL3t6mBf&ZeW)dxp< zCkl}>1Fs(0mWY|yf#_qCLS@IdPRZTGOfgcD{^U}*Jj*ZHCPkYiGRfmMs*h0m&#~v2 zOi?1&RLw#F;kbEUjE=%ay+kG@g_C&5UP~Tq5)x4`kGCJ30K-7HI7%Vm`u$wOHICs{ zh1Pz20rN3kS=(;KI=NSRzIkXKsb66I3YhkCBmIm@^jUkW05cmGfuMfw@l5K{4G_rYw1uWIWmk5}Qb|Kg!?fUYVy9d>PR3_SccVitqFm{{u_EVmsPncvwIYynd& z*TDC{;sYqxF=|zoJV>ZLfU5A;atKWRN+QB(@HGn_0=AObjk4uLKC6Ml%ySYntVAa9 zPEcG7GL*|;t>hEHyH#ujpy29D*a#JR5ciI9qd;FSsQC?J5BRrNx7K*H0ZiA#gA=fv zj2Fz|@Uen)^TIsen3?HAgfiQ=;+R2chb2(}ZQ!TC|Nz=IEXC;O?!`!@PxX*1&qAv3XV15X)<;k8|afivfqyO?a z!Zu#GujR4G^O1Q3r+qw3@rO~Fu9Tewq}DhR=M-q_=+u>H&J% z9AX%wqq2N?WH99kB?ijbl=!Wrje`42mjEZLL~Sk2!%@datQaUyEs9M_IY}n$Gl#>( zR8Io5yva&(BeU$Cg=X3v4q&rlaMhT5`iuxD?36s(g3+a+1vd0B&;3#gyFqI+( z*mUYhnk!dk;}Z!B9K!<|=ZAVg@R-8k!Slc53aoio+j_w=NuK^QZrlmK8W9jeab-oo zJ30d|8PO$QW&?&Mk>A5u_H%94{wV7cUz6WyfduY>o=rOND_fnTvxPlg-` zH4pp6X4s#xTfP#FfW6_WEFoVhF$s7p{D+t8c=T}k$Q-z=LM-2jw5~i=Fm??eYe-5S zIld|VYwU%5Aac4ALSIme43DC|?~&2~S2^A%Qo_7DPEWMO2T;74h;NXbGTWI3o zYBf5!>X06)Xu5WMPB$SE?(POS$Mx|x8R%&=^Ef&=0?Mz2ccA5`sEJ`4s z6!5HKu`X0*F&^R%a_V*3^{v{@t~%7aN_EA)np;luK5`0iBWzws6$g^re3Q8(Yj#=< zsllRHvZ9(zR*PN~!5psg;>mqhW1p$}c8$l@gMlc!rH0bH2=?^|YP@W!Y1IMhLaT+5 zJZ`P6bXx75W_6?1X+Lcs1YH$iTbWk{GQL#ULCk}$t-xTE8frw*1pMm-GNq;pLW!DL zkxZ#2g)*7kER%BV219mEV!>JnB(cjgn1o!4YN8l>ERr8y1$97R1`d@aZ}SG@H^MpQ zWa(~#SGBuI{s~M1L2sos4ZM(d0Vr&VP`lfso-+z(SO=;WojvJlS+F0;CV(K8Krbl( zz^KfZnB$<;_XE2;JvUu04SVcSSe~ApE~mDCMcYSFvJD5OyHAh!kFf;dkM*GY%4Z@F+K& zHvuJ4tJZ`AP>OEyouGrdcX22QR#_P);V~ct!PRyPgv}suTJr8BDK!Yt*W_ana+*I? zD5)Wsl;kVcK9E!XJaZ<&@Y0ntg;+CihUPWHk3<>CE7JxmAr3!S4K}6>>&(`WGpdQ~ zzrc&}w~VqG{Fjd^ej8IWL;i_nQlcyRaS3NGERZ9*UL}N~bOMx5CI;AMe9Ogim9dtt z5+bNmWj@jD*P~@9{n(waN zJ+&GK{arw{{orL0LWLi(0Pae{j`Ge#+``7q63%?pYh28{Ti3`Ou-NpUFyswBsod4+hp6=-SbKG)G zG#?*cxI$|yaD0LH85*jF6j&70L(1?_Hiam8EWjRkX1kP~c92JuxiUQ;(clQvsbj3j z^m)ei!i>&(Wt4NU@vTiDuA~R)wM8UJ5ueGW^3ozupT%SJ2+6A)(JKQej(H`*!9(JV zEXQ9VhJ5}Fu66==5N-ZkF4|luB+NuaT;yxj-S!TT?GMdeer8(xG>T4eD?PrHa8c!@ zB$IuzX+OwYfX`QD)Y14Za_F&%iGc(L;CmVV;lU_(ugc70pqGcj1~U&b-73Dxk%XpoH&o zxD7bYrq8wmD#9T8{r9=(HA95+H*V=vxK?!F$sT!EmuauRm{1iDa60Yk2?6(;FaDg>$_Tj;lo9GCH`@K zl=^{A4=-Y3iRJ}Pt?Qg_5e>MBR_e$S^;7qHObGjillh3g&!u)3l}|=rz8i=P8DzqV zvUr1u@U|r#nx)Wwa;dxwhwHL(xM~pp80eO_ZyMAnehp3VofF|80i1}RV*wmTisM>PMtUPLE~T0frDZkMHsm^3W{cTCt=Cy+8Pj{#qdLHe zcuk<*RaQ^fhOy$3R9+~+HUN|HI-2xiT@)XH?~A#OtN0vqGQeg-`R}C4r$q)f@e+Rw z%2lX!GZsy7rQ!~*u@3NIlA~GUl((v*yyH1Sh7!w=%?Q6|4RdH(edaEKPY$_`4G4Xy zB-BdWxvRwE0Xm-NL#CvkU-{~*uf7_Gyig~WE!=rs^5P6wmzaf!*s#Lb)xyumNTE=; zQTX}TokC%(SSXCWS11(TFBA$l3x%;ug#z|?rBIkC+$|I)#>NUipCCFO>ObHYuQ(|| z?H>XTGPN8=TlgSh1P6i+=bof!1MYHA)&<>N5Ka-ZM?DKGtGMAYYov&BCf%g4e#3cJ7xrj69ej!cqcHI z*ArNpD3icb$gCr=8Ovpk8tjTgN)kt~e0;fj0_0)g9HtIqCk{*}XVusU@LM1Xww5~A zmdcnKmPG);0-6Pm$vrnVRJR%H5LN`1(tuP>g81{7u~KulxoPmdo?&BqIm90O$=L)Z z@q&W`TM|&Fz%xF!65p#>=1rCq@-9GA&PD)t{nowJK@lbtUe8<7)vk}dV^sUm_vIiJPKXE=k?UocgY(~xLg*uh^K1mfwB;Z z89++p7<1%?`#Itm8zl%3^9VK6%T%!BsS;8o-}X*8Qe{e0KBzguS&{Uuo91 zw_2Un_Ew{_y0f*lyIpTTJ@ryS#CD^KM?KGcuHtSpU)5GzmGOi1i*(GS{_D+LQ zm95%VoNV$`1JgsJP#B)7i5+D?S9ub;8D{u$y;-Yn!osgNceYNw@~YkYtxrqq!e9yh zg4x~_tv;w#*Umsg)s;)qP;R?%CNkPnrcJh2TXb__-C6Ogv%^mxwkt>0#wU-h+REed zZFDYGcDpgkEda*J`WPW=GOM z*mH&UsW^3^!m!}hZUd5vVamf+{j<{}yoyt&+JIY+tD6sNPZK8)TL&;95x73iVhB&P zwje*@E=wDGDI7#YTQ#4#vFH0A_Xeipg7Xc4C95GIoz+lnbZ$Z$)0!#*>{u1m1n5H7 zM2NqEgHcaTR#vq(yRfi?X=K?jgsl)Or!p;keyqt>yV`8GH<^Y5=cwK@@S<0+_e3dG zZ^BExCQ7lSn5#9G#8xxVJ>Qq>B~D&ePF-OJRIdu4g0rmMtTymGorpOkbtF9fTwLR6 zYjbB~djo**ieRLq+F=Zhm_Z>hkE}Jscm;(F)3r^JxQqA!=f&8+W3_?CX>FbB3qIEA z3oaM#jWOftvBIwxP=>Tgsl+7w5{7{t(x8M&Aiz1i z@t`rYb<}#aSz=L~xTm+`bE%JlC)!P^s7`X#)Ze@3W^R%ggR+0DvH3+KHjYN4qd88@ zHvsjxz9X$H6RVkc&Gcp3SK{b2P83tGg2n_Awqeu!(lr+eu~59qFAw#xUCnx>D35U> z-*Xir0^_NspO09r_zx_WRky({k`jhjGc;A0F$l;w*c2g2kqJ{+Gw38F#rhef64y#g zG+-*nmK#h8rBo4H?ae6GgX}dE4-AqLA^5PQNN5m6T;y+6B@Mi{9RX`eb~*Vj7G#rx zw-Ey+10*p5A*M@tI_bNnDGJ9DFxq%%T@#K~s(i*FGrb)us6OzbcGxFs=)2tCXx5k%a5 zeTyM@f5G?vTZU9&JhhVEpJogZy3Ny|h;qK*$%0nx%jecppmtOoJ9t_D-Z4hAsvq+0 zBWJC)zdoYD$^&cpvrjibt9wPTmZ*8db}@sgs&_q|*{g`7`ui+UjyC6>J`BbCI-6HH z6vdoe8Q}T#NkyGL>4005%Wj26DK>oE8B&k5Saj9akW!npX&6nDZJ(^WX4s#CzdkV! zO#I^s?S?+M0^q+^My?z7ohThZU3QnRXaa?RV=?!BSw2B-PqlzZnbK}uvO#>U5t9Uf z7$glpSVIAC_?*Vfb&i<>p=~?ZwQRrKB~C#y;>g`x97(!E0T9C#!z;{oH@-ArIrvV8 z2qG%yKjB#n;8$b+ZD=*Q@9MYGHUl)UeZ|E;&ky`}b-@4c#=sB#2*BUOe=%dg!6M+3C}+YPBlBQ*D0aiTVNvjC&3Ofo$-{AqJ!C(^3^u~>)mr8`eZ7FP8X zD2M9@c#u-bO)f2h+Z24|hhO2Q<7_byo3iKx_)>c*I|FFK!3k01uUyHq`FaH{X2pf; z4`Ne8;Y`V6Rm}{0aKOQ-@=9X^%<-U$al5PD`CZ?lwqvp+GRG<+c)k0RyY2O*Nw{INN*G!!qW33P#REvC4*!Jy--sPU>)ZAA+DfO|+`voIal5Np zo@Yj*50fx%ch#HDOs#B)gj9`dN+?no-__Nf?e+RbXRVG`?)+{?p1Bv%$_@z8$q@~1 zh;2Yq>*G?2$@uCrFltQUxC@K$AG?l z{6^&-2bf(gX#^M<8gY z3gtjS2fj@M8NP}{KBu6}N3H!Bspr5ya3~(hW^go3>Jd~`eMq~Mm=M(6H7(5XjpVoG zdu9+!k){dMXNv3`&>*BVm?FF05MA8@Z2c4PTY(qYa>)GTLehS`wu0~5TWc%W;DAOZ zVDgkKv{PSO#X>vPQPd~1(`77aj-o#GBFEx6Q9N5#X$1bEYl^;^M_rozQGD(ao2o9~ zao%^r`rZnt4dXD~P*@Kuq0xEhR3+=wA?-5z@R&zmJkkPPJU%Ieq2{9NTo{gnOP#k% ziaff8Ei68upBL2XyhCSDtOZ-3{TORd8XqI)Q zqzz-8o&T_TUw7F2Mb4t*M8qjm<>$&Vxv%#<|Imd1#QeO$i0(kAJwF2bB#fXxbj=7- zg~_u9oO&>mvvmYvn?eh7ZXrvLwf&%HdOYTJhRGj=6o;7#bA7UVk4*=@0bdEKjBO=& z?-Mowu`n&@vV{Z0&CoH{0TR?0bg*QKs4UFRl@0tlq+MXdf8$Te1_1UjutT&N%MCF) zUQi>1U0Z!n-QK8e)wm1g>s$5h`cBq+@B4loLg)(P(^aI zV`oTq`ymfV0KXD5&7mVC>mTw0A0-ML(k@H<_vbnLI9B+ezz!LL+$@Xo82TR zJki7H_DhGI%V6+=U*?b*Fu@tU3<+>xk5SvCMgP>vu2F%d;M<62jtvs^z2yGXMS*^E z9J^4W|M=_fql7vn0RQ}y>MoflYv6~^M@|&^h$*pDh{m!)ZoH|Ka(yW}UT}S$vRM-%o@B}t-`vMzlY&2v`EGF4{)NYdj4MVd>NjLEKX*ym)+(=phjFliKgsT6I zODC{Oo`-qsp+lI;($buPU$8M8lo4YpF~%?zHaiV7=O#m(cu2xD2R75QKq9c9sNk4yy{+h3j|C&V4jXY<1KmY8}C`XSR)0RnfD4f86*WW9ECIRs+xZ0P{t(iAzCk=d%pxoA(H=h@8s#~X9^GlRv`Hq zb@g%FUlnOz@o3cbUjU<@*44-5A-1jP^CfHS<33b}QPO_2vDJtUpWCx9tn#+~Y_Rrp z?fKTzm4~~}%=Nh%iY0noe%zj_(O2e})#b-EUZMwEVlvO>o-Bl6I6SnY?cMdcBj=0O z<7ZB@+vq*tT3>#|$X?2n9Khi!+BsVgoC1_E=dj)eD`MTvtk-YNyhE<|p?k#7tgNb(mvbWjEGVI!~(g zc4w`&vWqTdyr>#z=QacFk1^&DBuK@(8J2iNI0kBZVByADF~RS{e(<7`%Jj!)7nC-I zmme>vLf}MV4A)uXEL5)2v>HPJNAVgj*xKxX2Opf;N^v#)6Bd6}7JpcKnkt=GL>%@F zR$LAJ&g3(d3s7KzuL*392u#2$r~{W=0B?V{RqM1`Dqx;ioO?I&)>U#9GbOh+n$^aG zN1G}`!po~LaA|3AzKl@{-h8mL+p0aR)fy0&zrNkBH6K^iQK|9r-$qptgCFsO>Py`2 zt=d|>ih2}fH`GOwYjA6;)^65U6MPdNrV1Yns^4G+_T0Fv+ODotTk3|ZWFU#qx7C`$ zgO&HQrU0xQ*n4V?`Zj0QS`X_DG-`ibYu48>Mgea{^(#LWNlQ#dgGcImU0j@F!SxgK zNa2%OLC)irI*%lnslK~o2m{>dTeGw(j3t*g<&Dml1N6t@NR)&5J{!y_mh;SqjmBS{ z4@E`nJdbouQ90@fHtOW!Im!g@i@e0<(1G;nBHt?JpXTUM0>7(~=R`*WUjphebc_WMTcYIV->FVS5U_E-=SevbV5jk5sezR-NFFvns^`Cq;x3V(3v1hJ% zTdOp^C%KZq)Ob9+z}Q7EP#ey!|d{$ax<+!EEjSk z2ml0Td;#|X8X_N8V0K|LEOxd$pg<5w6N=0H!Etp$D{zKt9sVFGvHoRlccD#LaS=^F zvl45*-9^mi{_nB+{PD3)*Dx;(_y4sVupb}ih52>5D8$ma<0qZ50d1Ho_CGn>RF}Yq z|NOq@rrZcX{^KJXq2(B>U-`u8#dvs?M8aNZz?53|FPjcZ#;;G5DE6f^lG_UdN%2`ZA zPLgA}_90<5!q*Cwqw)=$O-Ab7|7T1^PVM52t8yv_@AH!u>_elQN=fMFb#ukJa+4a+ zunP}&l=E|dFA;0v%xiECnse$kI7zpG4Q2FasiT|O(Of;rIbKh^um?PY+2Xd9fKQl=0eg?o_5s>I}W=5n4+=cLwW z+XEsmAEf#+Pj<{7js${JVPkT%tyXF)*jVHglVdz?a$;Jk1W{+1ketd%A>0xxrIs2WSu_26L_1+ND+SI> zJF&=WoG9$_x@plcftv{ht-zGbNx%d&BP+A7*Lv?d{s9?bXel-L(!zwT@9x5v0_i%bIVbYo=6As#ftTPl8f!VA7L! zWYuTnSL~oxe1gYgTgQNZ!mR@#xM55d3uR0^E~M5dpk#04p>t)3dJl*!Ny5GfVeF>R_0sJ6ff+dm6!XPRp&|Cb4`|wy zLy-EE{WXTFWPVDZLeZObsM-(3VJ4eQ;U)XZoOBxS!#Sl0;b&UUVp0&$&aA< zr%4^c=zNYUB!+(Okx^p#TM$IDT7V^EiTR;}Hcg`g_*(Fm^$0sFlpiNeo%AkG+)A9Y zr&LlABAE-u(J&NK1&VYDDXQs9rI-|%xvJjy2{Z7{2m{RE6mn~b0~Zv4Z3wMqz+nWH7<_Zb{)GgyX~CIqu45EXQZ*`^rJ-TfW_$VLytg z^egPi`47uq)*Y5V6y}Q9t2imQ{Sw47mIq_hHzN{_0uKxnk8qPARx5G5$S0=e-OsM(f5#uxQyx7a+0%=J{rCd%b5OaW4-C1lX$37Wsem7py(l8Md z7X;yPbV_&>zTc^f)Ei)b+X<-Mf%Qz@L4L{&{oz+*HLK4@e@6vKn+DWI6Wvlk)mSf= zq1%9djX*C`I-vZ143yZqfXYq(kb`C5_X2Y;fEy;bexe7|i%NFj98eFeXkG5?oVjme z?WL^v6)Rd{cngrn3+Do%c2RV2SXo*sgAKnt#4>Q0*gdXEhtuvDK%71MY5>fM9YdfC zbM4SoA~+uBlDma;9WOa%ylC$zCWAK*Oo*m#^=S#73!*u}R6=UWD>SmO41-Z2c>U+c z1SEnC2XIL~R=C7m#Z*tQOUP(|i27X#v0cYIbf`^(zC!~XDNOw$4CMUev!sL6zabzs z+B*_p3V#!qMj^xvAR+Z^G8~0{@aA;(1Y|;V0Ze^6?E4-iJ|=71kNhDya7>}yB71>9 zK!OV?+C~w?3mAm}^`SEux|BRYu(D7SM;loNFR*c{Pki*@wp-(}tt@T)loawK?NtRwG>ZjVOn2*W?mk5%Bx zaphlp_0?Bz@vMjwg#!5lfmPVJz^iTi7mIZ?V&RNL`ePpCNcQ|t*-P=CWYarq)1AN7b8G9udRe&H?NTUt&cE)G6%Smp1W4jCt* zNdv#~qaTR{PN$m&Bowy*>=*Ix(M#Vl1?CW){(dexT|iD-nCe{-*&N}dczdT&+kR48 zX@06v{Z9Bp>K)Q<@IsBtr)YoEm4)_KR!o?zVhXcst;G%)Eq7|$k6{Y3tki^#6~HK+ zS-*k!$Z={m0XPY4i^rQlxYI7F4*izO_aGR`y}9E&t8}2pF9rEom@Xj&{CFPBCP@Lv z+8=~Ub8>gt27+IG9Mw)12g zGF`Fjlc5O&D*>)wP|XuIv5 zt@=i@+Gef;Yz(TA_&7!D;p=O)_3G|syR%tkS($iI_0sD`Z4~%JIMW;=@tbbu4y`9Mj0_>}dzjZb4MvNLIw;uid!H zxZO<(B!4USCTOg%s`WFytDt{33VhG8!WmehlHIK+#FVea`6+2dM@biWrf9Y$f{gO* zV?2{2rLprV4-o_W5>%AwpnZ>eQ3!074J;FdkdinhVmW~|axxNzLT`De;+JQDQfThU zL1x$u$FEv_YVAu21N_z5y^A1bKT_{MXev?|TZ%jiowr3uAJak&U)3B1w6L>bS&h#^ z8#poMq{-kX2!EO+14+9K1?de!1@#w?1y&m*f%&}M1cft5ZMVr^BoN#Xz$3<(OM8vj zyhufR@iZgUafD{VTpI6rXC(%>H98K6OJYr-S3Oq z5Yqrt7In;_(-GLi28T^Z$}Cmh*HElx?_)yAy)S@RUMRf70)lK7aKX6048wrD)07u=r1cy5fA!PhDqq)b$T|7)jQ+psw3AI`o76(xGEh zQnks7>st`3D|Od9bV{&G(;kf!BFIhRp}00e;;(u>#_|H&`yWXzRJreES2n8lh7B)= z;^|f_iyn8$+IEXHzzi$Kt>VI*u`o9iSwqA2LXj7#B%Y7##PhpkjqaHvH{#kUKVaQ} zj96SMFA0^8XeU`d#J;D=dV7-`I<8B45Z(hX;YkSh_o34R=HH?L*QU{{cNt4tBE|Xn zIb(hvhbo)j^*|Lxy@*78O1cyxF*ti%k=9_FLrm1x1!V2PYJ;>8SNQzzmPm2&p0Rij zCYsl(>v&4jp!Wkwh3V?jU2L}-{CZUBp)xyXRA%R7ADWBKyQBpnoa56Ebcm*9L5wVz z8AN+gd$J=-71*18n<05fDO%*S>-1u@8^ zASNOh%w19!Yr6)q)q_b0kIDezr`^D@d-SIQ_~Y@x@NF;TfmvV};5b6UzCUtph^QLU z2xdEJx~}L*j4VSLjYP4#WX%c9u1iDWMMGi%j*{@mvzT%ZW zUfvJnlkIjRwKiTf>_CehT>S&nHOOR{4KsE6-6iV~w2ua%6XM2j*nlJ zQyGCp33%E#uCQt^kx8L%p^?RLn{}CUXMjiD+j%5QISTNc`u*JKbYq2~A_;Bvd|bFF zVs^Qf<&V5*dg#&@)6v0<<(kd_3iN2i)ZOCAKHSuRX50)TN}P!FX@F|{tBuXtr=8W! zY8|s%UxcRQ=`{XQqrd;=pJf_R_?4$u9HS1x++@A;-qz{WV3e?iINb9eK67yR{PUDH z^sn+zR?vqydKxZ$A-H!M5-?Ztr+5T-T-LrH`TYI>z|Hqem+3Nj=wgQhS{Mb?93TO~ zjS2^55RvxdaEiYIWbFDcc=3VX1(PS6Vzz_yLC1DoIpmo3R5`N_Y4@8}rot#rP^IeQ z;y}g3*_pS|i2f<2a&m5VzFaogcfJA@7sN=JJqt|cn$sL9L*j)&UMkjI72bI;c}}X? zI`H(ZCX*cKi--muP&bUI1+4SG_9p`lW6VR^wK$chRJv4vyuLywEOol?ZmhFFSM~N& zjY{}(FEIB^&(te~zmu&jRKlX7st|rqnM;kyf1otc2|uDqLh`UzoKz0tq$pi z8Bo(j1RfruqFZm8jTKdrDpWDIQD_2PAD?i{^o@bVQ#k>M98G71fsJsLs$EQlO>p`cG#t%wGEtm4rcYDIoP4xOk^>@FS`p^4YYeC3F3 zhW)N@1~xfx!jb9nAi`;KkAR#n*7!reGQaJ?w?gW7ajN zrEJkK@`s&XU|O^@q=DnxOsfK*l(#q>r){Xr*mzMuvv&MqttP$=Y3m@`2gc4Jei19`4oUN+`V zNU)qG-D0fCYn5y{n6O$VAC&lj(Oa0oS2%q%$b|(lKQuxQ9Ur72v^nH;)xXtt6p)iW zax_j9Oaos|hob6CObimOXu9K=Rf;Q2KMQ?Nh-+u=mdT9ZFbsrC+iC{B`CRbikwDI$ zCc=v*5S)QpCb;Mw4(E5s1}Y(3vCHDQ_$4;&j(Q0Vt!+{;u>r{5Gu=?gZL-QXjn-ZN zaHif^uYbym=d{nq+5reRkeu<3#f!)p(2hqB6C;paHQZ6p@lXtRJO_w!dIm#Q!XQYd z#I(dOS>v)Pj1PlV`X0N5)ixGBcRL_S8%U>kBk<7f8vIaF9zwi&&0|z6*aoOkBu^s- zB!2nK__A>^S-j-GX0I2}o*7YtL}qWwa?LQD3InS%Fs&&&jPUosH9dT2hWN~6MNl6A zW$+KE1Y3Yl@Q=tE?zv_!oWkI-Q;{D|0j!GEg*iu{dgws57d#7>`KaJkK=%R~_Hp-= z+}*f*4g~c+GDtR&ej#eSrhM6m|I5_0!{{6}0cOa_ zlQBaa*{LROhB%f}m34;Lt^--!VD%HrIa!{@{}NMmhS>TUY5o$l$#Q$#Qv~BABx10!!iEiQwD!i9IB>bSmA$(GK@09mViP@U5Jl3#((rH{15(f z3~6Cdpwbj?G{{1QI#ru8cW^keketkxKT_W(mckni@$W`r^uu;ocw5td{}`$tpWSTEc~O#|1md3CVM^hVje3{&obG+7pBN$7){3G z{cv%LOhy)axim#4DX+MUEwbm8dsAd`Wb=POsln(44q_JG1o%b_aTaTaekmHxW0^S^ zGPm=ioJ1)xR8cIMgK4i-y$f!Sk^ zU^YQ`z#D>&dI2lFz?SY{v1A2DLv;lfM1LhnYliJCz%nttB>Ok6k{hyi7hnZ&F!A~? z;549h&-Y%atuMy?`ok#1)|T*5=$H6TF2Upu9FOwXxD8G(V7)Ct(|$PIQXvKU{nq6T3WUIrwSjIMED5#VHV1}OOD2-OiP^jJjyKroxQei9eqU3mD ztd$DXJP7#UDiv5Mcb0EmWfpr49hiv#h{_yP2`y1(4hFhsO$xNw*~W}qoAuQ;L3AN& zJ3zG_)VDWMc)Zc9ZnsIRwpm+kPjUR2BD;;XYP&W?)@qxzb`9E7`4s}#g<`d6?6j>g z(vYaG$U%{io={@S;c3jF^H}g{A}avg%5cGp)q+onD@KLzEF>Skh{)?44XGi-k&-C* z+*PDNr8K+5Ghh-ggjG9y{GeC2g?S$Pi~={oSHnkK9i`Z4_-MFm_%LVYPeR`V)?UsG zKH@^pAjJgpEv`P{1A<+)W*E9~ZD)|8&92TkJ}@$^pjjX zl+vXi^g2#rvG#n|2H9d#7Gm3?+@le~v{cIO5?K+|JSWP>Oi+bR;>qL)tvP`AFU6ox zG(FFc@U|~38p;boieUXwG|1<1Vfe_Z>{INH95v!8e3Thv5mcg3x+<5Fd_bx$4WckxTFg0CS|n%lGi9}Z6928tut;qO1+UEP zihB+~`%`KLt;h_bE#Hg!MMD*JV5Nusw(q-6| z(lC!L1L1*PkNO}}`>q|^smM=iG+56Xg^@qd3oJ)amsBXp7+>v)IKw-;XFz^Xz67(RQTiA41az@#%R8 z3IYX+nYIam{T*4@yh;znrx=a~S?p8DsrVGbz7H#@L%Y-x0V?$U!w1x~v0o+G6#Jyg z7n!P+Gnz1u%ItJyx{{hrkzF;xMAI|TEZhkPJ2@|vhtDY~J$zDA#oBN@`T-cM!dxM! zKx(E~ih1cl33irhHa;*9AB|`LFbiv}FVTALLL*G*h*cCqjg?YXpo$`?lOPbTll-{& z9ttHmmLKN;+Fl(wp{j1IAr2$EQ3O`N9S!iPNbf8A=qlk74b8wD(1->)n2?{m`q+jz zw3+TkGjjQfk1P@Js3H2#VvzWxX`lFLFpPaNo#@-vz!iM*rutHsO2E#yi^ca$^HJf- z4x?|EO0!1%6EBs}mw&rhVrjCUc(Ia1`cKc2Y38P-g~eXrkA^F7ww?7<0LQ){f|_~c zP&xg>2m;mViLCbcW}lc$i(zW!MYPmkKU>!sIB?i6WV!qFk|qD0YOWYL5vmo6EwtMq zr5}+s3Wn9FK}o?$JPXERD07gVC><1s0R>k?!3Ii(qsT5yB?~vNis_M=5x$BM9YFea zSo`EYol>cT9?y8!u5dRvjSd{?jB8P19q?=3X)F?wAA3(8)S5M3gN>ftCzH&PYLZm9 z*VNWF>kn&WGFHn@{@B}TuGN}k<*8CCwYVs)TJFfERTo$=E&E<{%`Qa-t&RF1xuhJ< z1b-sAuWT79eW;2M-oSItAqo!gPud#sD}SwaE}%UMa$1((j3JjzPl4Pd)=6Pf;h2hW z-Ozm@EJ5`^=sdel;Ej zdN;T4Y7Nf=|Ijr9^rF8a{&9X!g9V*E>E9Ec2D~p}N!sB5W`4wuXVVunAS_I20G4Vm zjtDBAiSMB=&(I%^Tr(hM5D+jBoe8LEMbARqN07O!eeenaf0-USccC#V#zQ(V0|&A; zHy$@JA?~#7Jsb^zZ3;=(kNTwT2LU*BwF48Nk@?N+vbZpHHpFn6)WO+__Y#tjngf@H zp?k!7Z26uU1XHAG+W5QauwQVYXi|Jg{JlL2$0o*La%n{Q#L=V7-(#cZYZ9_%Js+Gd zVEAGr;J`E*Vt6Jepf>sNkP_PmzZcVWKblTk*7EiKMZ}^JeV@;Tf)AWsba2bv~@`K@O*~d2-zKOcnGe}-)mM^R_g7oMrH!gA+ij)pR@M9RmMDJPefgeck0Wn)+UWo{uScmhI|3w}7{|`C& z7aa@ozcZvBH)tn=ksCQByluC9a48Ezvxh!nfxl0=S3z~_Q3Gk{)}wY?knI$W6P=`K zobQ3cFxM@*2jT4u{7$$&i{=uP=Y+M?5ub&{d$W+?eAWP<;k-zRRPYh|1|K%YZ3fYkPfM52+N7R5nDN*27K0v6A4xhtX0xZrL2Q#^l;61mVU!=`S{8m zAD2(>Ov!o*B+UigTe`Po;8#8ubQ*V3@Y7s-85^Sj6CwyXRmfs?LXX8R zfPek?@Yuhq^{M;r^O1Q3xi151gWD4OQNw<)C+7$9B@K|@`4^y&Fd);N>&Tc&fpY-y zDE0#1i%JmP6+#dMEl*5rE zpz64l(ZSVHrJPEumqW+_Zl=yMSq2|CLWGasJQV>QE4<77NmC)MHIWWK=CA|5l02G2 zhjCP&XkkZ*%LOxaEd1e7sT2^p!QS#0=ZBj}Qq@^dVfEu`&m_3MSgAqDPRzPh?-D4EQMiX#I#e z59!z%=w)U)Spo)Xf@jsp1KmIgoGypdPB1cYjT{DsFV%aqNAHyv-rMhuK3iW|JKDat z`t*zXXW`LucQD#<9@HN;>9Vu9`e4c0SbVhF`0Ux1U3t;nny0kqa6|2psdvTdn_iC&urs~G zx>^;^2hrsv^i~7e@y+JW?)KX1?g~p!xwg`2KW(7Qcq1O}z;s-QbuVhGt?Ju=EF5et z!Ql!P1lmwT2wYs4p98s5GXRnCDmeg1?kon7T(RsFgrk451qePUT1c$jJDD{QzO30f zoMjjyDSdJn>MC5Ot_k!27UH$!C|VEe+u81$${fBEhORL);|$ElmwQb>GHir=o&4b0#ub~iUF_h7YD6#Ptkc+bf;;&IEr03G=WUfLTDN~Sw> zJPgs01lDzJ+e*j?F+R2=vYDH4r}*alOo5?e3MQ^_{!)+^!4N!&gC5tnsttnkOz;6b zt$G~oE3I1*4W@!KBpFNXnGeCQSbsd06H!=#Bo81u$&E!IR#n&tACq=n2_>+$azAbw zPx@@2fn(kans;9uD|&7t9#S4YVKrTJg50DWkor0v7(yntk>!iTx}5~aSY4wTDv=}! z;iuhw)puJ{2FRvdIa}(mGOYnQx(_ECjsTWFQv~BZ#52h+r{4~3lW@+Q*d&}M_xW*? z*DH^Wiu2VUE+^E)`7bZCuoBs^DkPt`pFSsY+K*}d{rN@a!f(?d_3W_Ydkk2hvv^hc z7G*f)!^6WQ)yD4fxL6e`8F|Cv8L$+{s**q~nc~Ff%9VQ}dMYs9$4&vz085=b2_x{a zWIkVyBkRC>9cK>_S+E3#(VDhrIC)dzvg9q1(xuu-4y(@vHPzgP1!g5nW#P33A0BWO z4KzCHi@^6ImfA!d%IaIZNo3#C!~XDBU<1Vmvc97#Z6?t@e4^l}1Aa{*d2bXr_%%aj zurX-n*WNROUa0o-Gi}3vmi!oszn5u$&kQ50$707y5JfV#TrMXj4j)lGGaGyxe?&1f zZY8bNX1&qwtk*YdKn%!xwr`E#nzaK<_MRxr9C~qK)d|7JVKykqc26_yACezWfB0ndtVN{-j`Mwe)%l?(y{z6UkuzY5Bg73R+uXA5ppt7Duw0&C39s`AtlfxyYzs% zdFJvQ4(p;~i^GZ!eRd`_oNk*31 z4mUr@oQnE|uc!jz-MNX1Aj^oztxa(rf)zW6h&0KAhZ!&VYPz$Y*r z%jGO9P~hpa!5@&W%e+e@zW;ZwF~r4!nr!6aOf(n*Nt{@%u0E)B*6OG{m^V^)yklPGmu8)^2{t!k@XYYJ*D+x|dl`(mYBF2g`BHa6<0Cpxj*Zn~VL+T#Vt zy#iGBGLK~%lh)hu;Q0Q%r>E~XWjRTNMZoyqIwoMeKB(h+x;wYH3x&$bX`f%l|5Y8K zTNi{*Y^@-5EqKrX%LykWCb6kIdO?Y6M%1&8$bg#RC}1{bkgWp^*(}o&FCdtTA5gqN zwViP2nn$AUl=uT)M1j*CAtaSw2DnHG;|68(;xuPoEiW`CmzJOW)Q$XUQD9N87NykJ5J*= z6kQfz?1!NS_eDx2-~qLF%EiYq-(vvDnV6qi_`+^`6^dSmq9WgoIzbhZCQo^U#-rpSju@r7SeHl9 z-qN5ukK4tT$IEC+`THFq{QtL^#@UXX~o(@Nb- zgQM^{icUAM`1W>f^|Vr}Q+WyW~wZ4hT;ySghmD*ZotJZ$7!>Ax% z74@$5){#H@ICaT(6Pp0P=T3EP4f#+}byiu>D=i>PrFt8>RqCW?rSAP@P!IL}9#omY zZp77{=t0Hki=ait1;e87RZ9#<#lm>oZeU>@I3%{NQl7=zH#UqkK&UIMTccO8lV+{4 z`Lw;0S*C@&WlB~{uatT$#CY`v_SD{NbspE6_4TKnM(xy#paU}XNVu@Tc>QZz)lWOk zT5ET+jd>HrW~eCxFM+BNNzYr2X8m!sT|>28>uIZ9+v=>688s4<)%G*h;tNJvfHY!(65XSD3(iuM3H6eFNv-W7W-mI+|kfX4^ z3V9KUP#VRB&d{)E8F<8pwWr{hcy`uR>?$;}+dPAms8+0PKgRHW_Q(QhoKFUtM9w@J zYUVDa_c23Cz$KJtKZ6Wed>WuG98uCeB9`g8ph5U4BT?v~=0m-aM@pq&fF5YW{*ahK z`Qc$D|BXu-FEf+-+WSIF^yeS6={o4Vt%E zk*5HQO9)Va2H!{kNWV!j!ijaqsT92c$1 zMW`WdoXSl`1{RpWK11IPVo65h3h~xm<|zih(iI|3T{x!|W!{vc479IEAs6A_=NCbK zq!U5D%U#5vX;uCxv4F~iLax$b;DodUmuOa>K#&v&1(%jYd^eajho;r1(|({{Nw9j! ziwBq(0!K#3z*lg?5@s(MAUEwYIBmk$A?4X=GhiVv7I9W^8iG+J+yirf1V;onC=CN@ z1=NfL4^@H`m~f$uz6O+~s>Ez`Akirc@c$z+yTg}V$OZ*;(Hu%**+Zp^4ArmDF zV(|+5^ZY>fYdWC&yD`u~KLYGnoCkK(7N^5RmqHRy%MWZCkjQjgA7V3rJJ)gkiQll( zAzzl*>2PTFs6j-ARrYo|%4XR-gDlP(NnnZgW{#~P0C`FToLpK4(*gMU`p$`)FLQSQ zS2$!Lw*1Sd!j>@%AOLEoYcn2wF$z(|bR7NtH@HF2UrM;5#q?L7q);`u@jVlw0<-Ss z6jFSN4WLjMyIT197%3DAHwr%=yHhBP6$^#2_X>r=`-MW`W}z^4sZhA`)mLAAb)`_4 zDBLX+CdS4JKcDzmhZg^rf)>zi2|E$!5jtMar9v;{??HsksE>$Xx~_(D>9-J2O?h~g7E>8kM)T2|k zb^I*wBGd7x&{?rn1_Y8CEBP#iR7+(zf67ah_?kQC_`wzsLb2(b8)IZup8fG{EnwbF zv6&3M5CeN>#K0@yGB|RhFh;-2{6W$r?*vEUe=j!4n<f|a_S==|KsUezJ{ZwO>p=9fA~6kEBT z89CvQI*B0)%FrBna9}#V?O4p+1oBN`!vy#!Zig}z8=>%JWbUdM6UyzG73ZBhQNZj(4JIm?)>-*PIj&4Z`Zc!FqKD zjJRi7N1hcU_9cv80BC(NwzT~Rgb6nAn_xBJDhopV{L@`l0Dj{FH(_k0$QrWHG;pt| zD~subZ(-TzBgbNe;Yu6|-)*vn;TIal!f)74XhF#Kqf$5UP1`cVhzIaFi^-W-Ipv(6 zh##IG{Z|0})A{0`3zIX^sX%79QE|KxL|4O;5eoDJ$WqC?3WkB-3(Nu9n#p&Rl@3Xl zMu(JoBs%m#4j+L18RQ=tK~U-xeTn-{d7weRN;D(=v8}&AiknOv%UZrwOk5TAG?zmq zG#b0F*o>9XYD_-K9Kb>?zmrMabf1HaS&LbJ2r*^b{cku@}6 z>=KUS4%A{Jn-`NHEX!5Ov-b@A#&SC7#lm?^!})W;|M;5(FQ9o6VUXZm%O!Yfd>$5f z1PIU-bQ7>W$yX>B#1~@vbMZ|^1>iR(FTmKp!^p(M!g!%Du@Do83$_<#U%hg%P{3C# zG6gtoXK$93>*0u6eTeWn8o&s-^8ifxs(f>PGO?=T65ilsLUthNL^~b~S=(-r7M|QF zJbTFtYEXouy!eUnKC&$r0yQ_#&C^g zs>MMHA3~@V>xg{75>`3UQQB-(4j#n^+Y4tD0f7T^ZZI)Dp^3D_Tj+Xe_|^Ut#|^Kdjeuu>P-eSZ9q3D6f*x0SZ74 z&3y{-iy^Hu&}fL>E5dnU@TJxPbtC%FiKfVgk7})k5B?M@W_YYCT0F(wVaqdzU;BLG zD~0gJ<>F)3GY60{+LE%zSS;^Q&}e{{%FCdvT4p{O=K^3jYSv%Q@+&}t;QrgE1b0E= zCvYiXQI3Q4-(w+AuKeybEs3vbVO`-HTz}+*t~r<)4IwCdX@4{@jS7tYn)2lQP{02F zw)gc>a%5M1uV6q-6OA8yP%%#uI`@h9!u*TNh4`?H6yJ?pKF_Obysyy zX}Y^=tEy)-Ya4Gc5GOH#Kn@THc(DyOU;_uoWDOk05F3ZJ55@=MgW-@6=O5>rBsPWv zNIAdzKI&C<_2_FiIVYi|Q&sam?z`{4d*8=>_uZE^&AY6)UX`h_zTIi%pqjKTO&>!i zjuM?cM{o)#PkDBzF|nq{xrHqVt->)*j%Hb@)G~5G$KiYXgPpVDX?zVb?HjX)PP##u z#kuAuXAT{ex>_DU>7fED6$-{o2{vwWoi&~AQr$xAhhq5T%)AzZrxE%Ktryt4QD}eAA*i6DEHv)C^)coAyxuKwrX_mbc z0k$;5ReJ*r1a6G~jae0AeA09}RiYk?c%%>Q zMLtn|O~;Z% zescF)IPcRZJTj?Zg(0%F8Qn+_Qne+j#WnsrtTCw)A(c?$E}1Z5#G%OrCmmM&Mkxp6 zo%73#;3G=2nWRoDIt!1AH`g2x;UpW87{5GJjCK73SH5D=v5V|FWcw(#A4g{evs9@l z9Tydf^c358O=SXa$whKIep7OLGj3_+x%5vDb&Z!9 zA}^Xx+BLJ^3D-^EvU^w#t=YP;?9gIwUtZ?Zd&Q5hkNpCP7_x%m{7G0vyd54iuA8M%Eu?X)rbN``hGFwjEwLEcq0Mr zw~YlGLC06w6r|*AMKoj#O*D_{xGoP7vno zR?BWekhv+2Z3Y{;(9OZoBRo>cQ3B^lE(lNyyk1jEIdU-Tx$Cyy>UUt>NDd_u(^QFt zAW2di7~SfD-bC*8%S@bZBx(a2{W8sFw5FT`Q`UhABdR*107hI)*%LBcFB`QPdc?*( zjE2Rs*n$J2Qr^fu;5M0*x{1bX-)QIv;!H_h!GF9-bqQvcn9AN45m7YD4ejOri`dr3 zJJuU;Nq=kVw6b^;A}0{gr0y=sGBWP=1@DRVeA#n1C4lM}~UG)7NZU8Ej3!=o9(CZez|9EynIza{}9UdpQ{+HO8_A6$cHQaZlh;9oe1{bGI<=&N|Qu+U!j05 z1#l_SY98dr_p)xUvyolIm4e(F^{B90$zE`<&6W+^7Ur?`RQ93+%U9bB`|#!%^qVW# z(RLeG>}Hs?>=0wA+dG);y5v?#3u&269NBETZGKlPl?5xAgSh9f?X1}WOlidhiR&;q zceAUu?Pbkg*507a2f6}r#qHV$`TW?1rH$F!$hzT*?c;z%(q3zbZ%j7DqA$Y3mM+_Vswlf#md&gu7c)axmYmD-C^f0L>?uMGwO@L zU`?u$NKu=K1acrzBw#bz_dqgDtY-8-1`^(Q&#zXi)o>+PO?7qO{Qr?p(KpN9fV$+* z3|)?A*xNPj^R4*sd2s3S!tv9KmzQzwdU^TS>4n+(MWy2&UpG4)vth=}7`3U5>62q# znJQ&l2sPg^7gyjg|sgB55(k07MarLW_{bVa!#1T%z2c&37)R-KuWGT|Q<6@lqAa?fo+uP3!7JD7v4#1?l!B^S z*A**hugWBkJ;yQBuV#5bUSg2rTOm2PK89lkl)imw?&#UMbJC+)gqn`STGpCo%oj5zUq!>ugr+e;-vyjTBvyh%O+Hf6V zZxVymE`I2#?~&b`+JD+60&tfT#PN zw4)TFBg8H+rS64}&2KLkBVX3(;S@B#{x3dcYP#@2dTDC#n;1jw2EUX%F?NbhIyQLT zTocg6v-_Fc5FdF2Ph96CGKBs8?6zC3}CBHmz4b zY)JPbZ_Lhm-VidW9{sT76y=mCCnBi>KTQ5gRe^e!e0b9yTxHQa-An|Ap~vgL=&dEmN2OB&<%&H52SXn=`je?whj`uibFs^Zi6Oj~3dm1()g9zqw)1>bUqomPC1rD@`y4_)SsGF+N2jh+UNr;V-K zjnMUmBoc1RMIzm|`PfCuhjDi6x%qS4m8?h?jgPuP67Nye$fz9;iFUPK5jKD?Cv5;R z%)*f3x6_OSC)Vvoj*jqib$9ysHJN6V%xkZ$>_io`@hc+^h_jnJAbvV+{Q3`aT}MQd zgV!uwsFsC!iiMtpA8wXk7{M+bKRTDS>|ix?J)O0)YmP~ZD{)mBhMR`(t_Svju1Xuz zI!>>DmG3v_xe(?ALQONY+pfP6c~PU~q1ne)mS>rvEnU*+8%%4r3>#Hy~s z`Jli8opieVo}br_jbUs6XGRCf5JF6Nm~$mT8t6rCtVJpniZvJ~My}8Sxl||?l*uCJ zGb%t6{9?PYpA_sDUYjfxyBXQ^hH2C+r6>UbQ0WRiE@=Jvgv)J+)LQR8EeWS;3qd(1pK0yxo22~ z<#JNHgOg;qc9>spmGe6Nw$nRIKIfKuWQDRU-8AU?`IXy*!1TKxmFv;M)bvz2*Mj3) z!AL{=+C#aMd(%=<5`f4)Tr9%s_}=f4rB^;C(ni-s99?uU-7)TB8Z>>JnZM&N{E zdC`E~Mq)vs;N7|sE_DGh^fJgaGK;QO+@o{gwpx>)(I4naEzX$HR4j5}IAr28taDHG zHW=$wC}(!S*Q_FKEFRJ}GbBz5aXg;$Q*00$&Vf``Vi8uuX(R3Sj9Vl?te@dd|J0%? z7MEVNSd#P_;ulNC-RngJ#H6%vtDMefp>lYkS?DXfhmA@TEOwc7%xnFg=Z;*GHqWwG zpD^2YFFd$zH*_!QTZ@H4g*@Hsd8E7XD35;EaMnLwt2HVos~z`+O8tE0Sl?)tkGAZi zr-Nr3s~zsQ{N9Dxv-7jZj>NqRqlVH0^>Fle!(S))gjCqmB+2%HzOMIEUh}mq5_v5P zoXg2!a_j}O(QvK~8N9Vj3tFb^qS;;bpI$FsdG1;3bm`>6V$*H3r)RGm_fK{TFI*B% z=INFY$uX#_22Q_1`lcv2Y}nUe;*PkKdL_nwEkiU^?k4tu{_G(-X3MD}UdzNQ)|91| z7TYO=HsUcaK)(Bxt3i>s>stMewtuvX=MllsTq4^&$!xafUxPDT&h9m(5^&f+K4vvw z9R=kxpzb3NsPKCzkTE;9AM%SABh}$OVx-d}an2PG-jIY~U*-Ozl0fbgKoap%9eIBe zPLeFUMSc;Exgw_ve7I^g(CH$Y5QLFic@HMj2SF#_M5R@u-6cv2f=-TN;4mL$J&=}n z)!vA*?$NR$LgsvZTFxNoEH|TrXuGt$O||tnh;Og!g}$j7hbVkyjI!yG|JN5acFlA3!m8eHX_xY67t*Kas= zz1vOSq}2>#;uuKU;$jzo5w%G-uX#MeBn}1I1l|xi1qqh5w?F56Hf_#%VH?+J^TOqX zb1rh*d9-5&LH0E66j*Zme$&n_+TptEuVxn_gU`4Eo5LDz!6sJ(+O6X=*;%XW^kxJa zAfYrMl?_9)9STE5mS( z5A8EqHE*E|+*LOp`ngkPc=#4ke0Y^k#%E+Jb3Jr??47ycfE~-m=YgWRba;s?5pFc` zp}dK?EF5%UG8=c$mCGK$%&RcNpCsqfd6$SQQe1I{Q+3FyL6BS@&}NdIr5-72hl?k1 zaw9p24dhJ>a>?vs3>(NM!js7{d?m57d(pk<0x30K4J1}$ToN*}V4OYahXc?oK!|iU-19FTxGL~Rn1`Mp(T(m-3t}o zvkdfiAS_J-#Ko-9RAGBIOY(SAeIBJ8)+ic2d>NYT?X(0pM3_pV892u{#wTjVu6U3q zR{|=#b&)G6pgc9nXCfu!6RX+$Ee@kJS>UD7O7??8_fvFB=8V$d?ajlgG=Ifi+c103 z`mCxcT#8qZPi<}u{QF9YcZ88Y>s-$b?S|{FPI(*ITy9bPHS2j(p}T7L4j(v>2$t%+ z!v_xN8oeX01~@kP=<|JZ17^ur`rZailCguKkkpiQ+eCufpE;dPn>qcs*iDhpC3)l= zD!S>Nj+&ZuK1cUwtM^Hy$deGr&8{WR@?eUQm|uw!6WTo8Q!YjYIe!wVW1@L8q$9CV zr(W*7%?RE=pTcKQNxr4DiCICd26xobxE526VLC3z-ZQTv`5~8gC7YQf^zcv#&5*-% zscG0rM;2{v;RQX)-c$1z=8l{`{Y*^vG2U_3NW>zg17lcoMSGJk4O?@`L*73l62zQV z@6@je=G&9$&Z-`jW*`!ioMo@6KQy6IsNTL*Eu~4-4-2W1;S{Sbpp;Wki(8tfhp8+L{(D?V;`|rsFU;CBK$_GtD|oyPfy)x z13-ur(~$72-_(gTE&$xcBXkP)J4DrOkf?I>7(JzhvinaRm^bCK> z1D2b0*_U1`!hrRtaf$6daZ_w}W8VN#pZvIR3y62blBVapLFmDr5DD;(5~zy=u$Mi^ zv-d|z4!<9Stw6kJmdHbHpIOhRG3yb*tQ@#x*ON|rCFj{bnJe~iT8W>N5}s+q3UuJ; z|7_QM!R=+2O2gSwloOeKNM|>xT`x~f{`_aO?-<|m@FASbBW0yj{a8X2N7YsGF;{l*Mef#;o9fUcYmAgkl^=#W;_I%fK1G59z+ZkhT7qIch zAsxWp##m+xE}_7+6fZuTVPm+K0(Vo4PcSyIWxKeoVh4hE;sGSKXBeB<375Jfql}Gj zc?!Otu1#(e&5Xi$?SKc0zjpol_1B5w@qQi2(Y0}eZ)Ml$LX5kkTyDo{ZY;Nbx9=hM z2xII)ksEJ#?gjEdWkfF+iABK#;sM6k_3PJJLuA&`SYwPe*n+W-pKfFip*GtXo45{I zqnf~q-G@IOz(e8*hG6$I1jc{&ri7(b6l4@w1}2P#@i%@)wKseZql%bsqJ2iTGB)ud z8m9&vi4{myKfaCkK#b7BOjNeQ1Y-=Nff+Ve43q)>`m87e@6WOY<1l0I19x1@P_6G~ zZ2TLeNP2A|W24pt_93v_>lvFoG()EU*>2Fz?kB%&3(l(VUbZ_OcOA}#kDb1_xc|+& zwm*9A#FE{!7VID}+jjQRZqR=7gN#i+HPi064YQMt#Sdmk1%Cd_{x@%D?1}9QM)vx( z@$HX1asjf@3q7HB4GxKFmPIweIY-3zsP?@@``)U3AIdO>^8#B0Q-Ic-7-04>boJCB zfR-8>&tg+zAP-z*B=bD5U_5sH+T`BCl;5B7T(>jT3&}%RDumHZAQW#3!j?@S7&irB z>n0FNNeJVNvA);#O^eGteh&-!=jFr{Ccv#ZXtY@Y z050?2EWZEd`t|EiiSOT}Gz-R;7<-Aa-=pX65?_CrvCJ13%Y2csiBa(MDD)>=anx-C z{l@kqzGJoR+^N|`_&nVd0QFJm6@Z3P!;E&!9`;{TvocY($_lJi)^YC5%j`f#mv1WgH{rX>DA7|HSY}`RT)($aR5j&yh zI$XdE0RL-Kh3wr$;W+jg>HhJ%Y)AU^&anBxgeb41bCU!G6`5=(g z95cb})pt7`n~o>#)T_K-kxdecdb5!MLd~jN)pSDDj8e5Ydn7-1B)@PZduD$AQaL-n zB#Bkz#JY1Rf?(BRu^P` z^bSR#LOO-Y<-(Cm`R6X>k6ps5+$fhz>Ten0uHysMzZ{sM znaZz{?0|PL($D3g6dzh}?n#OdtOiX9UOVVp(bi%r0%AU(qpP=5jF3CAIs=<*rD|ho z4_eZqKPdwfI;}<_15md(W~XLU3N$5-{#0a`m54VcSOq_ ze@9E5>F6|pMz-2l2?xxW9f zSTN)LVYXmwW$dF{*?nxmfJzqoVvMnI7~|ry;Jd}X17o|kiLh<)w8oeSACqavTSXq$ zDvrstTLe64ZNL1NH46&Gt~F)R6c0h-g47irfY{_ z0^&xF^*Ed5uXtvri zbPq!L@vMBX5x@oo<>R+kd+%in#$RL@`*w!0Z)MmdMXG$B-R!t+rzbKHP|FT`c9;w7 z5Es7%66g~m4cefor3tx6UqPvO*4{Gr;n+o>rj=7;ytFkFrCI-V24Bia+hSRg0o}wytC-i83>Q`n4 zVfEOKZ3c?hlaM*~3Z45Cd3p45U`O>&Lf|MW2ua+6exqkADkNjq?4IQ+HUm>(;;ST( zh~@;V!r>%#InaIWgCD&C()59bPS4~qB0 z;{6D^;St8NNHmGZei8FV@qSdiuZs7(k?5V`kH?XH3uEsRe}5+;KSL@^{`*(j_op$7 z--Zh)1FP|)_~Xa$_;EF_|6csLfk%(By+kl94aCnO?V4%1!H1FTLwI};VYJ8k5?rGy zd*XpZcP0v-ghNqHM6+ zlnr(x+1UQ7%ErXlBjDu!qf)`*A~EWl-Ax4I-+v4J+G{2d`-TdHZ+3599QF+r2jA@8 zhA?1DdJ;R^*68d2S_cvTFkqT}IXAcbQFB||ZJ5<5{%x7V|qDh8v1h{2w|%mDBr z7^WU-$kW1U!&s)r3`wN-$>+a}(BS+1jtT~xX4h|adSTw_#b<@hu0Iflo2qdcvjmH| zkPOTDh*6U#ULsv=9fZjmb?jU~XQR}xh)F}+3_RZjJP99TYuh(H+`~>&0`h()V=-*U zV;k<(2qb1T@#v=4@7i6NeK3B-Hap?U@OTH_j1|g*`JeCG{V4uky?koE1Olu4qUZK@(F)HKZPuXdXQ(@YfJ40fMt6Kz(fi zq-8k#a@rQIF0pLYsCvfrwxj0wD2wW!TX%fB-8X%OA!dh8yX$$rdvzn0q#fJJC$XUHb{N>b zroZ7S#zXD9X4BJV=fI(BHbc9kmM5|>RKIHnD`Xlb0|BCEhF;fG(ncVtg$6)inbxzz zyfD$s;UW?V3H^eMixwmVA31!*A81Sj*^Mw4TUw&!WJJrs6+RL+>Mvt@k>CMS1Up_h zoyZZ3>YBZF)K!7VDwhT=7VewtvT%v7;|;+V5xfY1&`qn*@uV0&!H7(v01RN?0aiFB ziUcW7h;M+Ct5qxnaAKD)Gd`GMnSVozl54cRV=y-UvAg-w;A3~Q(Z?B^xEIy{TeiYd z4fDsbz;E`<5S~m^VPpu#zHjWr^5SFrzOhHa*e;E}G%#2=!wy8)uF+Pds+LAT$u%8w z!}hD5?}o18KN-hwv5ohNlJFE7`nD3Z`vm!dbti1DirX5WZmi`6&BnhV5hv#+$BRn_yWy#@P${*#c1Lk8umy|1ruY51w6IJ6=6kY_==m#---vXM4x$ioI3!7yB6)@e(eEVppm_IRnwb7Zr zQVq_SXUfklUOqc#Uq0P^{<$m9G`iopR%q0(oIm`xqwI;11%qZ;NtPG~VPTerQj^YZ9Ug=4=G1`>r# z{78We1#({K#b$m~BEll26{OWeSX?g!sq`!PuGb0jez4}{Ju{k;K$qcH^1j>0aFXZU zSw7IGbm$zkByQlf@}?hY+Asho<71;D*li#|F9>1EEUTE7re{0tl}4obNGr%Udu;_I zfoZ?d_Gnrx3wbDxh^Q=7X#Jix{=OkKnSB-K7!ye+Qyd)PH@ z?~Fv$&7N~}vlmZL*Ooxlcf44`C76t&6U~+a0iNRoGHDQ!k}BvyT~4Fzt$7{Q!-*!P zsE);P)7eur0ma99kz__LK2h5VW>bK9yxUj3sNN4!$vVR)BV&u;WF%Erl0z_>DmT7N zMpMep7k;+Wa#5!o!v?brnTuk>zRHO;m~UE6Uy+okO(A)w*L1tuG@FVytu-s}`F6{> zDvKv7Q@A(*AS0lK@!hVgio-Y)^qf{J8ti~UVEbWHO_j+ywc7|*Oh202VAKk_4J
G;_5_I4G1sAIn5kj9fq!-$iF`|4NV)uTxfSay75bv2L1XV zMBiK=nnU6cLm>!#+w3Z+5cWZ+v4xeQfYZzgr%@6oFi+?grt4zw1b^dqL3>|d3&yuH zxJ&$-8QOQi0f@}FIGZvd^yuFhWpoZ^0#l#ycRozr;Us!taWV$BGtk@fU2Q74-*cLs zgc1xG@Nn)5Kp;Zx-S+})O3;te1&x8`1`B~7^V;qkwno;}q7o_S0EXo%P5}2{7T&?x zh>p`%vH{x3h=h#jd4itnDp7&(tcRY40LCH-rP)-2C#HfbSoJo9pTI@dmclwsXI%qI z<#Y9g*=*W@N(|D7h^E?k8OC2<1vB9c06|AfkQRuFvc&9Fi?@+(sp4l z819>+5Q>Q{ug5xRoUs>?v`&&@@CY8=t821_y#2Lj>;74B&p@sja<{z*#vzog?7d1GyIY>1PI^O zmqD$U;p;B!daWSeG`*l}_NXVpT}cv>4M>uSFpNpY%A=eh)YQh{(EtYcL2UmV6?EJ% z-+ev|^9|o!)w+5ta$L{u(dlqn0L!AlSu#dfW@EXmpauN~?~e5SdQ9NcQ{;WSsVp3T zRwMLVK`!Vw#8E+6I7Xm$w8};^5JcB%^aE-mnUWNAs2q<9Y&C6_F^y1eWyw64DIiZH z%zL))cq_W%5F{3nrnP4KA+9)7Suwv+vCBc|_nUM%o&+s1ZNQ|#?De#)8a{m16U$_J z@K}dypkvhomvvm<%!jTQjcjNe3gv4^1qcj4;XONa5{f_o!7SSDtAz+=4HVv1>M1me z^7k!n?Lujo1AH9=ws?Pi%Yu<*?4=QQf(0w4QJJ18w2We*+A7sc^}1zDw+dFNYFCTZ zqR}jw)neVU3r5{46k5|(sn%-M3#F=U+J$P%EE9gjY8dM)oayqxzH@Ms^v&hD+f ziTc|=VzgiX5@VMM@+ErW^f9;!2dnO7EQ6DCP|jf&{v;0PFvc+F!+Z%lmDqKBC*RG_ z9AGT-F2>lq8DkfDJ4~RNC-yvvLvv8^Y{fQvq0gAd*!W!s7<(SwrO(*-`|e>Zz!|N5 z2sw?%vv{1v1N**D)ysC(nl2X_<>|UvFPF=us%_Ux#YU-QS=D;eXcVf`&2ph-R2tPr zrCO;s%dJY;D3{IYQmIjUgt6>5Gw{`?1{Ra`n`_%n2 zStQJ6_s{i0f5UT~UbufI`&My)cz+%=rNNM2j`DWorPOPBvNN;iP9El-zTllYA2ghv z@PtKwt3RU%3gUk@oL(IIMc2ov{$q|0r1OY;H%HpH&Cs?GY7~s=Tmk>j8ODrJo-vA3 zm8wygE*W*>IbKIMKuYr2&jWnd4O<8lmA0H#YuT|7qN*$;r_r$M4Z~l4BG6TEnN!r}cd;Lx)YWp1V%~WXm zQ|%Y-0WcVEY^BgKd=ZJU8H>JllIEm4*NRicDT8M{2+ee!K<_1=u)Gw#a4g36C~o7~ zuquyXi0(S-3GLomFrMKuC=X6vVhln>zsroVn)rsr4o=MC_g3xuZH)RO`r**t4F6=` z#Ta@Q`YmhUu=YXUfFBf=@*4}YRS}NSPJUy3Ru|!zG0Ja@mESGGF_Vx7JTcVEO#+Mw zvR+phV~0h0z@8J|nDolL2gi_}y9h=nbg>Px&s2&vqtL>IY_k_nET5WRIybinYTu=k zAN?gMK~8G`E&;&niiP@Au~3~VR;yFh`b?!#s8kfVvvUil&&>@72S>6v*bRIx16-z# zykkJ+>7&E*!Evh0_Z;$#77JABIOSZJ-=qq9-nUZTIwye0J9}w(x$-&#;QKb@9jO!T z2;rsT@Qm=&D-nJ>N4PYts=8zh&-t{L^ShAqo^sVFm#WorEk|Fq=~7ieI=KlBI;3TS zR4r6%g<7dr%+Xifs6@3nxd~3EG@RZ6NcR?}3-v;^R;d^{{#h^AsX>S`C&}$YI!EcS zOb)A1G)hLjTr20qXSH06YFHjlt5prJ24LONJ_d@|4gQfXN6*v!dFg2DMK!6Y#aXwv za(1bIeBM9qEk1KDs9Y);^I>!Cc>i>9)p`27(|-23M!j;mGZz(g^wj*^;<@Ebi_)3S zLQx~-h_p+akXFxVQ${1=l%-AR_}v;Ev67iQaj20kTrCs|#X_N2Hi|{VESHTZ5Bb@m z@g&973I^=rYSX3ZR<&HMRE=rduuA1x!KlIH3~9?xs#cuegiqxak`S^sN}o97XG_MD zhe9p?Cftb~QYmXI$iM55Z)JD*Lc+ru5?26V z43(&9nJdHj82*%H4OWqPyjYm3PZg#}40eJ?&zzmRuzYNhZoy3FP@Rk&0Kup-xkqI_ zw{YgzJl!vvo=(_!0w3>;>#q}CLEyfrvtGVhgduF(7 z)-N}&oHgrCrE%hNXSOo?bgvhl_ z#v`;B+#tiDX@~nWKB-WRcS5gj0y{a(lMn_LQdg z^@C8z)+G){HXnx*te9T30TjmrEt_)!w?kKirsF|rI<^V@qf8Mmf%|`wabWzYrlH^O z$)$+mRmnRYrx{@uuRWDYfTI-gb`y~~a8e2rJ@0arAcj`{lZYWEVY>(w8E{6F21`~` z1e1_RXp$vmTx6VxUPJ;5uXZE8(@XIp14Ee}C)T>lW?${}p(6;oK|-dX1?_h$5)b~T z^ua{HaDK@S4G$BT?*RvF8@m$A&d8H3ZaXWzr$+pl0IfgP!B9Vkj)z><_t7HLwD zx7_s}-5Y)t^I#7*o@>!P1UgtQ%Bq;27pSv6IOvnN&0qtedEfTjsSUHsr_`V-%#9s;$qq2N9Q3725`E3VqBM;mBS5(s!mI<1po=+?xh6QnD!W1E_MOS$J-_M_yu zjy4kMhphmNE%>2Bliz?RzrmjvF7ZQOF2C`XX<(Hlzp)K3zYl2Xv2!NF^V)Yo`-a+0 zrhy+b`3)7E{DwM9enZVAzhM_EzcIa(-}Bn{Guk&)a5BxJ_We`Z_XikbkBGW|NDIf2 zWSRHpwC|5--#@Q?|AIz`k7?f@*S>#A`~DT}`&Z#pOyKYdEgXjkW%#dY;V*07pVGd6 zL;L;=V`OxP-*0Jk{B3QD4*!R;j-O+62`~MAM=SU9jN!Z){eD-2kAsZh1N^?ArT-#h z#1r`ao|gVgTKeDD(tlYTgv9R;wDe!m(*L2B{;OJgY~V;R!C(oDgLN{?Q!XJ|92`hN5o4Aj{W2GNJ5!n%5y2?UDJb^4f z7Au0n^9cV5gg+sRpzs31KQI_xLpc1hM5t2wHzWKY!fP=&@H9D591Mr)^~5g^!kI<* zClG!(2ImCAe{(SWB*H&C7(S2iZw$hJ2I2o1;qx*0aL6|?J(zwG;WdPxilzT4gf}Vu zBRV5}0O2;me`*Uf-o;q14+ z{39{O_ysV=9>II@sE;A)ZV~khv0NWV)ISnYnOM{>A?l3aw2#N4eg#qQ7r8!;8`a>` zm6+sL5%rHn)UObIO0m43K!QI>&HG72{i%rh1m!hid4CNF#zcZRwl5Ohen_PF94{UhEUMx^j|Bfj zPq5YLdHpa(mfuC9ACZY-D7-R=f)PjI3pxs~a1;*cD11>zff8&Jx|kRezo#SdN(_lF z4I)vBBk}t>5?|s-;Kpc0hcD|$P=YbHA0`R$2RaU4isA4TMEzSqqfe%_#UCQYzY{6G zl7homk>Jnt1mX-&j1GTPxPh56et1uil95epAtPA2dyGt0u)x3;Dt>ssgQugOfkx#|>?d90WEO@| zQ~e-kn?aZ}raa%Zrq-Q~Mg_^$5ADH9L-}^afB8`1YFZ x2R1kEAiH}N4H9|Ypvf\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/700/f14f095d\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 13:30:03 22.06.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\r\ + \n#\r\ + \n#root.mnuc.backuper\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n#:local Script AM-GlobalConfig;\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n#/usb1/mikro_bak_rsa.pub\r\ + \n#:local FetchFile AM-DOHCert.rsc\r\ + \n\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\r\ + \n:global MkDir;\r\ + \n\r\ + \n:local FetchFile Binary.backup\r\ + \n:local localDir \"[usb1]/scripts/\";\r\ + \n\r\ + \n\$MkDir \$localDir;\r\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +add comment=awg-MikroNuc dont-require-permissions=no name=\ + awg-MikroNuc-uninstall owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n :put \"Uninstallimg AmneziaWG...\"\ + \n :log info \"Uninstallimg AmneziaWG...\"\ + \n :local prevDNS \"\"\ + \n :do { :set prevDNS [/container/envs/get [find where list=\"awg-MikroNu\ + c-env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\ + \n :local prevTmpdir \"\"\ + \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-Mikr\ + oNuc-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\ + \n /ip/route/remove [find where comment=awg-MikroNuc-tunnel]\ + \n /ip/route/remove [find where comment=awg-MikroNuc-dns]\ + \n /container/stop [find where interface=veth-awg-MikroNuc]\ + \n :delay 7s\ + \n /container/remove [find where interface=veth-awg-MikroNuc]\ + \n /container/envs/remove [find where list=\"awg-MikroNuc-env\"]\ + \n :if (\$prevDNS != \"\") do={\ + \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\ + \n :put (\"DNS restored to: \$prevDNS\")\ + \n }\ + \n /container/config set tmpdir=\$prevTmpdir\ + \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg-MikroNuc\"]\ + \n /ip/firewall/nat/remove [find where src-address=\"172.28.232.12/30\"]\ + \n /ip/address/remove [find where address=\"172.28.232.13/30\"]\ + \n /interface/veth/remove [find where name=\"veth-awg-MikroNuc\"]\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg-Mikro\ + Nuc\"]\ + \n /ip/address/remove [find where interface=\"wg-awg-MikroNuc\"]\ + \n /interface/wireguard/remove [find where name=\"wg-awg-MikroNuc\"]\ + \n :do { /file/remove [find where name~\"awg-MikroNuc.+tar\"] } on-error=\ + {}\ + \n :do { /file/remove [find where name=\"sata1/awg-MikroNuc\"] } on-error\ + ={}\ + \n :do { /file/remove [find where name=\"sata1/ru_ranges_timeout.rsc\"] }\ + \_on-error={}\ + \n :do { /file/remove [find where name~\"sata1/pull\"] } on-error={}\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\ + \n /system/script/remove [find where name=awg-MikroNuc-uninstall]\ + \n" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=Bridge-LAN registry-mirrors="https://re\ + g.vados.ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/caps-man datapath +add bridge=Bridge-LAN client-to-client-forwarding=yes local-forwarding=yes \ + name=xs-DataPath +add bridge=Bridge-LAN client-to-client-forwarding=yes local-forwarding=yes \ + name=DataPath +/interface bridge +add admin-mac=F0:75:5D:1E:5F:85 auto-mac=no mlag-peer-port=ether2 name=\ + Bridge-LAN port-cost-mode=short +/caps-man manager +set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \ + enabled=yes require-peer-certificate=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=Bridge-LAN +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set crl-store=system +/container config +set layer-dir=/sata1 memory-high=200.0MiB memory-max=4096.0MiB registry-url=\ + https://registry-1.docker.io tmpdir=/sata1/pull username=amsternl +/container envs +add key=AWG_CLIENT_PUB list=awg-MikroNuc-env value=\ + "NAonhRSuFIrFpNKTs5X32ItcvFuO1kiJUigQZb95YlE=" +add key=AWG_H1 list=awg-MikroNuc-env value=472437748-472438637 +add key=AWG_H2 list=awg-MikroNuc-env value=707808381-707809250 +add key=AWG_H3 list=awg-MikroNuc-env value=1609078552-1609079495 +add key=AWG_H4 list=awg-MikroNuc-env value=1012329484-1012329741 +add key=AWG_I1 list=awg-MikroNuc-env value=\ + "" +add key=AWG_I2 list=awg-MikroNuc-env value="" +add key=AWG_I3 list=awg-MikroNuc-env value="" +add key=AWG_I4 list=awg-MikroNuc-env value="" +add key=AWG_I5 list=awg-MikroNuc-env value="" +add key=AWG_JC list=awg-MikroNuc-env value=9 +add key=AWG_JMAX list=awg-MikroNuc-env value=920 +add key=AWG_JMIN list=awg-MikroNuc-env value=105 +add key=AWG_LISTEN list=awg-MikroNuc-env value=:51820 +add key=AWG_PREV_DNS list=awg-MikroNuc-env value=10.9.0.1 +add key=AWG_PREV_TMPDIR list=awg-MikroNuc-env value="" +add key=AWG_REMOTE list=awg-MikroNuc-env value=109.107.177.79:55055 +add key=AWG_S1 list=awg-MikroNuc-env value=90 +add key=AWG_S2 list=awg-MikroNuc-env value=136 +add key=AWG_S3 list=awg-MikroNuc-env value=45 +add key=AWG_S4 list=awg-MikroNuc-env value=27 +add key=AWG_SERVER_PUB list=awg-MikroNuc-env value=\ + "o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +/interface bridge port +add bridge=Bridge-LAN interface=*C4 +add bridge=Bridge-LAN interface=*C2 +add bridge=Bridge-LAN interface=*C5 +add bridge=Bridge-LAN interface=*C1 +add bridge=Bridge-LAN interface=*C9 +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes \ + forward=no +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=lo list=LAN +add interface=wg-awg-MikroNuc list=Internet +add interface=ether2 list=WAN +add interface=Bridge-LAN list=LAN +/interface wifi capsman +set package-path=/tmpfs/capsman-packages upgrade-policy=none +/interface wireguard peers +add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\ + 172.28.232.14 endpoint-port=51820 interface=wg-awg-MikroNuc name=docker \ + persistent-keepalive=10s public-key=\ + "o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +/ip address +add address=10.30.30.10/24 interface=ether2 network=10.30.30.0 +add address=172.28.232.13/30 interface=veth-awg-MikroNuc network=\ + 172.28.232.12 +add address=10.9.0.3/24 interface=wg-awg-MikroNuc network=10.9.0.0 +add address=10.1.0.1/24 interface=*DA network=10.1.0.0 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=Bridge-LAN \ + lease-script=lease-script lease-time=10m name=nucDHCP server-address=\ + 10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=\ + 127.0.0.1,10.30.30.33,109.107.177.79 verify-doh-cert=yes +/ip firewall nat +add action=masquerade chain=srcnat src-address=172.18.0.0/30 +add action=masquerade chain=srcnat src-address=172.28.232.12/30 +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=none disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +add comment=awg-MikroNuc-dns distance=1 dst-address=10.9.0.1/32 gateway=\ + wg-awg-MikroNuc +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + wg-awg-MikroNuc routing-table=To-AWG scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set www disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api disabled=yes +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both password-authentication=no \ + publickey-authentication-options=verify-required strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool netwatch +add disabled=yes down-script=\ + ":local msg \"Host MikroYellow is DOWN\";\r\ + \n\$TGSendMessage \$msg;" host=10.30.30.86 http-codes="" interval=10s \ + test-script="" type=simple up-script=\ + ":global TGSendMessage;\r\ + \n\$TGSendMessage \"Host MikroYellow is UP\";" +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260628/20260628044001-Diff-Config.rsc b/MikroNUC/history/20260628/20260628044001-Diff-Config.rsc new file mode 100644 index 0000000..a914c36 --- /dev/null +++ b/MikroNUC/history/20260628/20260628044001-Diff-Config.rsc @@ -0,0 +1,89 @@ +22a23,24 +> /interface bridge +> add name=Bridge-LAN port-cost-mode=short +30c32,38 +< add listen-port=14587 mtu=1280 name=wg-awg-MikroNuc +--- +> add listen-port=14587 mtu=1420 name=wg-awg-MikroNuc +> add listen-port=22022 mtu=1360 name=wg-wg-Master +> /caps-man datapath +> add bridge=Bridge-LAN client-to-client-forwarding=yes local-forwarding=yes \ +> name=xs-DataPath +> add bridge=Bridge-LAN client-to-client-forwarding=yes local-forwarding=yes \ +> name=DataPath +35a44,61 +> /caps-man configuration +> add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ +> ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ +> 0,1,2,3 +> add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ +> installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ +> ssid=vados5g tx-chains=0,1,2,3 +> add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ +> XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ +> datapath=DataPath datapath.client-to-client-forwarding=yes \ +> .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ +> rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +> add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ +> XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ +> .skip-dfs-channels=yes country=belarus datapath=DataPath \ +> datapath.client-to-client-forwarding=yes .local-forwarding=yes \ +> hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ +> vados5g +4712,4737d4737 +< /caps-man configuration +< add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ +< ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ +< 0,1,2,3 +< add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ +< installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ +< ssid=vados5g tx-chains=0,1,2,3 +< add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ +< XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ +< datapath=DataPath datapath.client-to-client-forwarding=yes \ +< .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ +< rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +< add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ +< XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ +< .skip-dfs-channels=yes country=belarus datapath=DataPath \ +< datapath.client-to-client-forwarding=yes .local-forwarding=yes \ +< hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ +< vados5g +< /caps-man datapath +< add bridge=Bridge-LAN client-to-client-forwarding=yes local-forwarding=yes \ +< name=xs-DataPath +< add bridge=Bridge-LAN client-to-client-forwarding=yes local-forwarding=yes \ +< name=DataPath +< /interface bridge +< add admin-mac=F0:75:5D:1E:5F:85 auto-mac=no mlag-peer-port=ether2 name=\ +< Bridge-LAN port-cost-mode=short +4804,4807c4804,4812 +< add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\ +< 172.28.232.14 endpoint-port=51820 interface=wg-awg-MikroNuc name=docker \ +< persistent-keepalive=10s public-key=\ +< "o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +--- +> add allowed-address=0.0.0.0/0 endpoint-address=172.28.232.14 endpoint-port=\ +> 51820 interface=wg-awg-MikroNuc name=peer8 persistent-keepalive=10s \ +> public-key="o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +> add allowed-address=0.0.0.0/0 client-address=10.1.0.1/24 \ +> client-allowed-address=10.1.0.2/32 client-dns=10.1.0.1 client-endpoint=\ +> 10.30.30.10 client-keepalive=15s endpoint-address=10.30.30.10 \ +> endpoint-port=22022 interface=wg-wg-Master name=MasterPeer \ +> persistent-keepalive=15s public-key=\ +> "64Y25EUZQQt8EIeAJYD8qWt+te8qvGEepnswdBgmzlY=" responder=yes +4813c4818 +< add address=10.1.0.1/24 interface=*DA network=10.1.0.0 +--- +> add address=10.1.0.1/24 interface=wg-wg-Master network=10.1.0.0 +4821,4822c4826 +< doh-max-server-connections=20 servers=\ +< 127.0.0.1,10.30.30.33,109.107.177.79 verify-doh-cert=yes +--- +> doh-max-server-connections=20 servers=10.9.0.1 verify-doh-cert=yes +4833,4834c4837,4838 +< add check-gateway=none disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\ +< 10.30.30.81 routing-table=main scope=30 target-scope=10 +--- +> add check-gateway=bfd disabled=no distance=4 dst-address=0.0.0.0/0 gateway=\ +> 10.30.30.81 routing-table=main scope=30 target-scope=20 -- 2.52.0