From 10cf0affba7c2d6983b71ffcf4cd3a14b677836c Mon Sep 17 00:00:00 2001 From: vados-dev Date: Tue, 21 Jul 2026 18:20:03 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Jul 21 18:20:03. --- .../20260721/20260721182001-Binary.backup | Bin 0 -> 390591 bytes MikroNUC/20260721/20260721182001-Config.rsc | 5545 +++++++++++++++++ .../20260721/20260721182001-Diff-Config.rsc | 3 + 3 files changed, 5548 insertions(+) create mode 100644 MikroNUC/20260721/20260721182001-Binary.backup create mode 100644 MikroNUC/20260721/20260721182001-Config.rsc create mode 100644 MikroNUC/history/20260721/20260721182001-Diff-Config.rsc diff --git a/MikroNUC/20260721/20260721182001-Binary.backup b/MikroNUC/20260721/20260721182001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..fd28b306f7d1de82a56811e26771e5d884e12d67 GIT binary patch literal 390591 zcmeFa2Urx#wl-WnGr$Zv2SFuDP@pHzpeQ*gAQ@2sCjt@%hao8nq6j9$h^VNTF=q@Q zVip4iFrt_h6-*$C0{>GJ5Z$=9=ll0LXWx6B=b^j0>FTatwQ8-m-nF_re|zbksx~>G z2mlaL?NfQe3IIR=00bcUVSAP3dX*J=mCeOvUlIZU0U`Xn0P7_3ME0pdzP|MI zj?#5kcXzjjwCo1}a0I?2EC5>&pa^_PH~{bf01N^Eq5!%OMbHHh&_w`ppbOvK-Q7(9 zT_!*sbeZ51Sh0y3;wE(A;YsD-VOo+~6be#Av5C?4DeUMZdk#NZS$eMy(hI}21MnrO zfG$J})`QnT`hzZOyDekf;t26HN|{%VJXLR9iZY$+o3XSPT>( zCK`OyflhUxavg{~2P)rzK_T?H7q)zcFG(2(@&RbY0tDayPytXKy1)l4Kt5ps0epsw z4!E#`?Sl8%AO|G(`0e(@cPqO`P1vu7I6%O@hmsfoh0ult1dRCR-=;(ih?*(Bc}cPN z%@6wZn`iQ=WE#pN+p@V7o-Kt>VfA_Q)IM*X`ro|y+;2CZdj#oGGdxsNc>l_<^X+pG z*!jJbP0>Xd%Z=vQ`Z)XH0b(@`@g*67uC)N#4u+Jw00Hy+fOalO9LpuP?K{kLYA=XtsWfM3M{APoR~ z9ST4?0QeVJ05Sl;QXe!=d69?q`r)(+-Yq26xRvjH$sHn(yK^mg-f_jPu)p8t~r3w}H>2VOy}tG#>f z?zb_EheieVoJSuvLf+RoDA+wvs&JAXQv_Xz0vr}_IQh!~@Cpm?@}c5eHyI*`<%OpE zxw^3^o>ZR@Qb4HJ;AD#Pm^4;WPy#pBEj2VW#wEz!!=D@M?AU|_CPRF^=z#$=Z-I+F zKY-%n9ZHHt#{_am2cR5*2Rkk*3v|7F<&4w_GKlD zctT@WL1H40BZ?IymiJOhXe0kbDHYgar6m5J)kx&OrjalA_E#vmA+{xw;*nk&3EkPx zG?I`OZ5!$q6r0HUQ7J)>QqGeq?p-YY(7_p86d8}N!>AAly~O(^m;)ohJYr)g_4g8!BgQ}_Z^AD$im+U!>2AYl%drkvQ zV9#0bva<~R;RLXq@C3@R9ZKd_UZaD8{hWQ>dsU4QB#RPR2|U<6(LzB=(lDvmDbo9c z!lO#dunUONGQ3xsv$$Kq1^ zs)K=bTBLQ#W$WJU9Y5R%7pxFSIcCkARa{CV_RdjMZj zA^^xF06;PTVhx6_J`SRB=sbA<;PDCo@ZkpZ+R*zGkR-U62n9zZkty)Z@jPynNEjO( z%@ZcWZ8!jB6BM|Ha}EgX5QxF!1<|%Fv8zaioeh7Bq-!|dAn<@c*zvM5?0DHRu;bTA zk9mxN`^EDQ0D-Y00PqqBoFHfd07WbY2MVwWcmVLQLsbAEU{$4qR1N+|1A+sHMSwP3 zz%dGRV95k7FmM5t2Eq(o08B6{iUbH2AY#DA3!-}zNj`y>AP{C0{##mveBUDEms*75 z#wN%8d)kBfzCD;@KPX;lc_#5nI`a5CSpU10pIGt^Y>W?^Yc1z9QRoV`|~=m?LXGR zz+s8|R!2rwu#ys?$$_SWD>Vyn&6S#F*p+Gk&V{7D0M0|8p&($yQxKWUhO=e>C+2_% zFE15VNCu0|6O%SruWcJkriU>f%0RJSDECldCY*H%CIFT0{9m5s~ zjX8ouer$A#kOf`6aSSWjm=nWFjOKBN7$?Q^SjjwNAun0P5{isPF+5`lVPPDbXe`4R$(mw5N!aUO@jsu(FXwO zCo%Hi5&*~m0FZ$IAQ0X_xMK|fVgmqT3r(=tp8~)Xb1wi41pq*^4T+)Q0Duty04D$t zX8;iBTp(T<2>=)cfS4%q2LM5#!yp1c7(fL8j|BijlbT;T00adF6uj6yj0FIXrT{Qb zx{iVWiG{O5L_7l}WXHh`8~|{>$W4$MWjJqyyn+A#{1XfD{FLAXCy@i-{1IELCSj+p zh}Sr9RSig-bSon9xo|C}ux`xgaT)U8T!(o0L+=3{071G|1OR_XNo*?c{vH5oiunI3 z0N^LQ1OPf10Mr3=FdERo06n-cfUP+1v1A0F)lz-4%JEj;jwxIVxb zL)p~;Kp1ub?okKeB3v6o6_wN(3=bay7lH7C(qBNYvU{(xTd%Tfud++8@@TPRV4W#lHM@KSi9j3i!ix^yH5ONljTJR+oJII?7A zXdos?_e1nIURv(x?(Sww%U`;?ySdUbWWhMna%XpUcf7O=fr{*$6)FG(Bfg|LSZMH$ zV*r?i1z-UdfI_Uq9GPPQvJeZ9C0GC!B7h*b2m$z)asaeJ^z{(|1X4RJeL?{Kih>x6 z6OhkvPX}ClK>$JVDUTtAPlpE_h=9A14RHqn}|qSyA&Rfi~Xj35GKj2WW?Vt zQ_TNanW~Ek+(e$pR!VUH{ldlm^Ms50&nT>VTC9*4&r43033tNZuDQ5>o^Y}M8R2Rr zXC!iBgn~ptN{@WU|LyXX`{&8`Kcu{BF#=I?lAy;hu>TI(BE38r9{SdQo_OW{GwQ3E z#F=E9k`ymsab?zl`*%nf(_6w2vHYKvur`!1SCE$2TgIHfL&m-Fm^dE#&y%sje@2V7 z1c~t(wlORrH;pCa*@|&@{NFBO2(bToB9{Nph}bA0C0-OO5v}dN9j%E|DE@h}{$Ylp z_-~qFs7OJuZE^xDUd)mu3524kcmXF)7QM-mPKV({QdaH~mwidb;`|ju;7b|+XU_xS z0uO+RB1{pn7l|^0P(vwe0?9E+C_x^UAfJp8GZtd{2+r)qd~CLbn71~8fg%%N1Q%v- z0jEQd!Z1-t<_Tk2@o3gBU7q+$m&g3emnT9RUdZC6a_z;@E*XCoDHRr6M*?4xj2e_t z>MB6YYlyj$F&HtuPQXHe^bqVYb|InH#DN1b!=?%M^w4Z@8c#R}=kmg&WY|j*eo*p* z`PN-02?k|K@(^fW>o3xat` zkfoDL6%kQ!_%As&Axg%j$q2o%(i6hB`1kx5Jcz&!f0h(gSXQU+agtF*Yf%K|SII=Q4W}$RH%l7^>XzhJBZz#q3H0Gpmpf;1>rOm&(7 zKr~6)v)IGB;_Jox*;cxyHd)c*3$AwR+MO{hywWhPiClXWF$RFB9@x+O&93)ao61Hn zJx8BA)dcFg9E+O}oA|G{=6n#Yr!_EM)4MfZtW48_$Tbh*47zR@*eo2i>9a!9bgO9( z1}<+gh~IMisiZaA74t5c^&creD*5Qiu@$aq;?{^c_Jw`P=G(v)%Lc{>#X1XRD&+R{|*FS(wDc^fGOw^xsHGaa$#sd9DAiYskejc*o6T9Y0* z@YOJ{S9-&0HxyLeF;|AI!TZL>2?c&3t}qtzSDghzgFT(~U4vi@kbwKvpeYB{XBkfG zd`J)X8UKN&RDjqDo{s1XmD#2Zfv;Nt+qE_9_c4!%*QO3 zh)B5b<+F*=7H1fdZW|+#c4osCDfoViV#1+e&tkD;gHjd*hHDsum6OFN!~;e=9K}>E zWb@Va4a~G1?=F|Q<2f&x43t*%Kj%t_@ zVbEihx)2Mg34p^24~G?ulZxHPHxnos{1PLmB~69;7GQ){8>25Z8juWzLzMuTV5uvD z%rC|qZi??k>`26Z#RQs<0X+Pxm_o%{!3S7Xb1yp4dNcWjQd6+=K^e}Q_g@J|) zMhCgJ$q8&*C}Ei!=*x!6@)t_gfW+sC&#_ib90u(&k&8~@C5xbBznwBUh9&HAEv{0@ z!nG^#B~>UvlJ%%~3C}HcHOOHl0FEe0=vJ}07GLL(5-`EpC#A4qJ|{LQg$-?9az?U< zmjLr5;LlFFhQuz6bHE>DcV#LwT6~NzNou>Lbi6(kFXZH*yD?F5PZ0`|c=o=6WR4(B zM`G;}aSTW{UX_6_X$S!L17VR9VOUO_xdD?WWY;m1UK_5>B&oJ0N`46=IqtrL8DpIN zp~fl#EI=eVVX~yuNrGg1QTn6_(%Q0Y26#8JGV}$qGW4IaGV}|wa_>wCC?k^ed@xca zEAK?$@i2J>K<^|D`$JDAR$z#PVCY^FB7@O00-_2xVQ0vy!GPL#)nEka$7-0KYKZh| zf2fA(qZ*9NORk3bSvBnU)i7db+fxnuvue0Ls^NO7;eJ+4u8(SRJ=Nq$5=s8y-sHcp z28WyEw&Z_SL*ZvN6kxB4QI0J3D^oV860$NpNLGejFDt`3P-_PQfLAnjpC~JrtdHs` z2Oj!Xww~cO5vml2CrsEc4aZo(lS{E$kTkIas^AK!zCaSGS|Z&KSLxC+1V_zMKnD+H z!G=lOc29Z?{CBl9Yz1vngR~3*)?}!+QlRA|tqTL0VbU@j=(1xVc_KX}n4AxQg`6*` z0D!evfCH|MAwlwBw4--Wpr;~m^>Yjq2t>x=?lZ+OX^5mnFa!!_NU)UE?0)Q`t!6N|h7ccThOWN?Pa zwfQAaJYIi}J74pFZ}|v2ub7Ov)QXnjUkui}pibg@>#v3&-8dW;gUF+5^4O66T5wwq z#Ue;I+8^#v#p&X-*Pk0SwxHDK3YGJ9rP(=$ouMB_hxV2uHX5K@44Uq<>*Q41Yi%Kz z?X7wtAI5%ZdU{o%Y)8Rk&Sk%!Uls6phjb(y)1#~MDJ zq^{fOyD#!}PRr@GoZ=IhXCdVUD6IyW)NFP9LZZpWC6+_pbq$>jfI3tgsKEI!>X};} z1IyEYcm4nNu3rF$_&fkioOnbEpU+`&scaM_QR!qNiqbeN7KO|rl87u4iOb+I=_tyl z@YzfbpFt(@Q4))eGFU7smrA42<^VwKQ>Ev^OQZu}V$7nTBpRDV;_+!5I){XEDJX@` zqw;7}7L7?}ppzi-lNvk$%-VzYA|B?kg#-l=Bt{Y^HIk}ew4+;WbgU~+C^Gg= zA&zNjX?EP$=vWR0!ipbz z=^|jDQQc-HF{-TZjVb~&_MKqHzSx{1(3}pCwLsDUczsuAJC0Cfm&8kmLVK+2J}jDp z-G%00iX>K69Y6FzXrYV8p3;<*9i?Iohld96xtG*&1b8l~PQy)Vr zOVO{ty6%|gBg=`cE6AU`@e}6OMeTQ(Syj4qq|emhwWFirQzO@oqAy(CVEQcKvUb0M zi5I#q?bGJ!ogHVrnpE|^rQ^DiOWn3|XVM+zx;LMu*B_lfX2b!*7v5IulI{?3_uBXB zzV}h|Q`pix(lPQt*80MeyDTwS1R(1e@7VUMs z8iEdluE`9ikLqUkeZcqnhlSF=u!_FbOG{I+#n4Gur1a3Inq7UE5&vjm{G4v?;WUdd^thq<`iBiojh>kY_M7A7(ATz=N>%Pv z{)fvxyjqTE?l_l!W;rElzT&VmP4!EcCftX<6B>vf-&q~xF7utg2eiaI|6o&o59r?m z`kyB8@0UM12`rh=}_9hZrTH3^JRCQfW+-LZZ;vL>7@wrLj0nDw9d%&?zj4 zl78l|lK?RJgPVs?>N`jvg;Xn){#HokN%{pyHIY35LaJ^xVsdXtg@usHRaFeB@GJn1 z{}EN;*Gi_Uy?~Xy47ErMj3+7BCnzw;ImpYIM5U2X66)$qv?ca|v@YV%9NalH2fJH} zw3OQ_|0S?TMu`$c zXCsr1%=&tgjDvlGj01z5jU@syh7vM%bte9$LB80o&K|w#C`Zs-7#Mmw!E(xE&CogT zT0h@-{%}F%(rxc2IO`O|)y%QD(`j%*_!HO*$bR_+D(ZI)3`P)+5mL{Lu-u)&*aZb4F!|i(= z)INB9y%|TZ<}}>*xN+CLYpPji;fnx;0Riiyn!P=OvxelKZq-^LQjI&2w(5r0lgk*>IOhqDOFUpRKm$nuOWl_0DfBnQnwrlFcWGkQEK zk09L`1oWEJi*mD%^UpTY@7GpZ)3;*#A8Wp(_Z_hEGYvM@U;6BE;xo05j>DSG@_GxH ze?V?xlE4C|i)zc`2g@UJatc_ar-VUMWn~1xO+;f*bJ;eE%+ik$iIN=b?FF3Vr0*s} zs8i2Tm{}C*Q5+VWD4H^J zY*D7D^LWRgDM8zIT;g>eStY+}&dsr|dCk5)p;0@kPalvowhO=7J+f`B&8^)_cbvBy zIrQe{kAi&bujmN#nMY5SPg$%mWLI8XD!Cbi1nv!A{p9eK4~@^&y6$~Cby!_Eoq&s~ zEn00yN-3yaG3HtraT*<&zL%e1-ER+{kZ?7zu=Q|A}ubk<$MqxRG zpwOW9K+uV7F*^_Go8Oj>MEz~)ep@>G- za5!`Zjm~DWs0=!rN}|)5bTX4lXADf<;QYZBA&5x ziYP`Pj1^@V+x{A6=dKzl4lL=t$m)&R@es4eTlE=Rf;4C!fPILkz*gKUTL>y_d$r28 zr&YF|q#tNYFY0en0`}^cmlSV`+#9ucaWB8c_??fVfyeOYxiVi2YD~ zxKmL}qn8YaK+@EXNJQ-=K-%h8B`M}gnJ5#LlBJL`T=oHvU~l zIHle2y#D(3Z0|8mrZcoQoi=twhR%HVEZ2LD<;#yV4gJ>cznirDED6~oH(bH5rL|+U zeK>0Re49aN+@oxTuOD<%vY7!>o_?kt6#13S&(V5va6}n)M#s8ib95$V-B&t!&_G+R z=HwAqR>}Paf=3Tyi&qLw9;_z1ynddUU>>eDn zVG%nvz(S7I&u#j=A!V-1%o?{lOkbgDecGt3DPq9E)vHlO=H++!*;&Y(^yRd9f-VnYyO#^WC6?2_;oSo{!mfD9YpO0zG+p(ttR^`cgMEWismKnXSm#voAL>ha;S6To|`*A-n_4M zAxM4N9FMC-9p!d|HMSM*w#@$gV$Ikl`kHM|8sqon>XkU&HXog_ka{Bu_bPkFwiOuL z1M01}3eVz_otlLfYs=QWUcD_wvpDR`0!;_PhDx_ic^!K7$|t1t&5RefxF3d0)BcKi zx#m*0LX6&B(?W*rF-^D(TBG*iIoTB)+CM$~h^ij%@)2aI8%R}DU`|N1n^ZfGY zEvHtF43P(IdBGQ={cNKgDR}58u5A(m%82ujRzlZsMZJ2+T9sKF)UE*s}pq+cuCkvGNWks?EBF zVv0W9j14Q*XGToqW}HF7w+|zZWMp2$T^nWf!Z>QE!n%vT$#*~O9DO#le(dIDvpYU) zi>Wi46>eEeu&mggD4b!03L77+Yr6JOlwwe6vwDh7FwXF%D|1JP)#*q5j8EIA6#R+UTh;h4 z{k%E&Lhvkq_p;C4e*(U~fh~OMr3(t(<{wXAYCc+6@n|O9Bc=Th*sPCG^`Z8IwLvh$*g|Yh|WjskJ)OCO%?dP@SCnWVjR|Vt>!WQ7>$t^u&4Ih*w`-9d%z5? z@VcIAS+c@be$)Ba%xl~3u34dEiJ@BWaa#KP^NUp>`34?0$|-HrE;Co$X1oh%A3X$u zFK8`fJR!6oGVt|#aQ~^X{w3q{dvO0A-2b(~{S9(aIaCIP#^6$^d@6%SVbXbY3Yp0u zaY<|{iV{&ajZ36a$#e>f!)K6LbS{NOCUMzx8iPZjpbVZEa`k0ndmxuQ3Pa*z*!6Q? z3`5a>;nE=#`#CZY<1T-nW)(@4T29J^DT5$KKVF*gNS-j6m!SfD93>@V*H}@89vJNy z9K$mX333k%4h#tjmO&~jh_=LgA=DB_LE(s(aAM!#vcC>uXB+TGi3zc5-4a4fUGf4Q zMToqfTK*Jy$&#&mMX(3=G|4tF$hj9G7Ar{nMv46Z#2(3^Idb>W9PAls^cv|*K)9n;?nW;=m?OK})HZJc$EPBME}j=~Jvk zJ9G&AKUT}4=T81ixDcQbQIyo1BV(XMBBO^R`{y(@2lL0gLk!G2#3*8NFbK%jusL)l#fpa7SufnIHM8mfe*MaOFMW(1-WZl{Hku<68*}60_vvC{By$SyC(cS zbt}`c$Ne2%TzuP5vD&9=m)tVyz_799-IqT*mJd1jG5FrO=b8?_JALMqk6*FB+}N=u z%apQn+Rzw2;`SWz^9Wi=p3uJJSP;E1+4TeIWYC+tTf0Plv1jAvO;~*Y)LG@mhoqes z7Y_|cUm88P#WA!?`AV#sq1p$FL2=}S_C(K)WY?$DR5$YXSZ9)EazbXGQmI}Xj2dWd zzdn_|`Bj8NJaznC=bM^$%Dj~tZ)MLREM^xR;MZE@Uz&Mn&xj37wcD80uQYv@W`2m1 zD~r^faq&>}qZe8w7susX_u1DxuKWJex@;^$#`tNjOt1#cPNDdO1g@#hhqjd8Ja?dP-qt%YZJ2X4UP zxsjC9v%Y?EPqive=)~<-$ynJGK!rT$~FXyhh@6y-d7HX;`TiKm{WbXHM z%z)UfCC1yY0@Bt1c33Nfj=bJCC-jN=5GSr1{S_2?oY*n#4YR>>F^1En_ z*~+W5e1w$7iuy^7TPNLncsPFEFwF?woysuHgRXJiPw)HkH3DjjcfQs;_+rw+dH21$ z?olVL)3ID)RLgoi=%`?Qw1r8;vwQuO>|zXu=InYsBRaQkd4Ooo;o|Js-C5}d<1YbC(yYohtS*<4+<^7t}Z<9LZI`~m#v;RTe!|4ne)RjOYgBu zP8@C-YbBbwab4sJH?%hfcR{5MXy7BdK>;X@Y>Gtb#wq57AC7qhz zZA(6~W5JXIN%=d68`L^k-THd2@MuJ_XJ$>=8=dTGLb}Lus9qx${-S%Gzytbr!YATCWA?%uwk+TmqO!^xfBkYOA=4#`obkW z(>Y_5$mi0yWR%ZgkvS|Xk;Ndg*&G@L<&miHJMDB(&mvIizj7d6wbp) z@HsD-xBxe((#`)w6Mpi@?!C>okIp%y^hGJlm*tV~y578vZMB{#m{7{l2?i8$OqwzO|F)d{KiF%eJlwWu8RV=ksdPeg0y#cNg~%7Tk;9))AMr7K1YR z<4$nrA6o6-u%+I6UGv$7tKM09$f0wy7WmD}AG~En*__i?LFK35M=PF=%iL$F2LU2f zSs9rN)mR1)e=C@moy z2_=%rWG0zMW)T@24oV_1X*@oY&LOclOdg*`Clk4-*aP)7a(a0nDwRs5u{nGa6`qz# zrgF$E3d-kFS!@cGPWt&XFP`Lo>6w>%znWR64@Nr%iC98@EH9q>U4U1TWH$s7ir)?p ztJyb3@$bvBQ~uYp>}-3Q^)IE_J%sVyduR?u>X!OQvs>^zkNAseb{43aghMpyY1nrH zm1f+LP*g%CT7Nt2FU0!SDR=+47XMX{sIs{l`}O03ub4f8acjJ8mt;IzSB_YwyH zc(cZlYB$@py)<^^{W<+QwTxHo_f8{Ohjt!*J@1}rhp@qtRn+ov?9A7R28U-4X_z^# zUi2j{>h$c5>VdO8LRt@{7(L5+61;QNrx0Nn#^96Qr0`b*tQ172OT3Q7?{D3(`vaGr zvFP|~kI1Zt2|+&WU6%$bagI8aeEFIIma{~)gL0fWANC3-8mJW4)TyRiq<@(^yE^hR=H8o~E zdrRr%Z3^Qod$Vdv;%CMYpb_3-F&ZmaQap6Uz?@uWU8>xY$cI*o6W9@i6Kl8B?M`95 zqf9J$vS!Y#K>^Q(Ts>o(xYT&$BINa1aBi5#WEEuU=`qg}p5>x?E6h)+Kftv=c%N0bRk7Qp zKfQU$Q*OAXaT?<~X*gqg%Ch8+m<4+-TpoD(b;qh{wbS;zQ?NbwwW?-A)s-T-krglX ztuTd^!RZ8(N!PDV?SET$cNxp^iXt%mdUnbM0@qz>sMGZJshOm<7L=GEe z^O;-{pUESlBqo#0XY)uzDv?U!kl7?I7v-?nTpp1_WALbCB9qM^Gl^6Rm(8a0sbWai zm(}fobkelEU-#vZI`~t7@YgAN)#|=Ke+F6d@^U`z9yksu;iji2X2SHz%0x zf70Y$|5;S>CgG9~muds!s;aj-o>-ZmeP-%nvzrTEX8C4f=Ird=YQwFI8O@|OMogH5 ze>o&>K|T4{-VM3A>P54Z*HQ~qD}5?1?MUa}7&l0FWn1>q)wsR4TH*r&HojYAwc}k2 z=k-+cuWx*>7SltyPUc2)9oNrj7*)yc|c3#aN0 z4!kqR+-D4~p0Oj{#;$wqV5iM3_H8Zwl;5`0o*nt*zSg}D!=_~bVpa3_t^+|4b&f@Q zhz;@sEEKjcYeL?o-H6yR3BxPgUlHkgJ9z(!v;oVVJZo-MOj_`H2k(Z;s$HqiuYDPF zmi9he*`{B2*C+o?v9sP-v~rADKC42j78aj7q|oB=F=TF3St+km@A#$6S84H}PA<@N zv}uMrW%69!wKZGbXHF&GzmchUFEFg4U{K@eD>_4Kbx)d&9Xaa6BL*kU?rH7py{YEh zq$$%&6wZ!b(LbZCe&4=hjt*{b`jP7T1-@tsZ{1yaZgqQDX71g}miW0FM;+OgU)s5F zsQlqN&W6|Xk|LXJ4G+~Hm)k*fJHuBx=USh0{8(jx;fBJqpLYjpJ#fL!tE_Kqy9)~6 z$F}HM-j{px^`?Air=Vt-fqm&B_W-W-zRy7`cAZ+V^srmj+GFIazUTLyY+PdTVcuqq zOVjU0dKYgnyHubaeSb*zwhLLib#m|K6P6UYZm1h0EDas@HFc2N)v(Ht*`hbt71=9S zYBZ;eQ(SmU)c^FSPs^*PdMC!J+o`+UIRj>~?9xK)CT&(0DzDz6HD~zdC+6|V!?o9K zat%{TVpNRvMTKlPH6x}Uu*fwR+rD4~n;pop(UXFTP5?51n0A2bLxW($taQLz``J-yd zQ{LsT#cyiyyO;?V6>?^+3Kr5b$l4yFgR7_Ewq&c5@^%LD6TIFj*Z8s6o+gK0k!RF{ z&Ph7`mQiC)TVAR&s+{YnhYP(`ZacAI-`Mzt-HVU3%(V|COsCvU3aGC1CT!5z_|)}r z%H9iS^X(G1SYEq&Z6Km(IJu(xycy%Ox$o0bN{q9%Uc;%Tnk8G)PK?j=%kbA}QB`x? zW5bBvfwc@PT0e75Mu6`kTIH*RHyZOZY;Tz*+hk7vvTgLI+l^B^^1K>HKNuDHdGcfD zVoir*w+KgXbQ{umZOr%UGVIcqY|0(rd2C8+sIsHiy*357& z^IVlMKz`c>BmRrL4bGEJk$cL>jfir~Tuuhabx3y{su2^LDo^l%kb(E&sSKg7|u?w@tgzjM0P}Tv26Q*1i71jI)?5iz!;bDE?b_&z_xC$s(c}@?8*H9DE7(~#ZqO{R!oBUeciOdYzv_&0yPzIxqiSbnCfqefJ*2~-n>u-39Zgg<&at&}6_RI2Ik34z&RBK9Gg43b_A15x{6Peqw zV{)*L`2>Yuo--ZnMP*tp*1E(SyXoW5`oeZWNs2q}z>=aLI#~S3lI85>m8n&aN1mOs zeePTPoZ3WuDNP=;Eo%U>v;5PTjSVGc+mGYAP21Wk_qZZ6=U`0B+zj5{8q>;DRQ$NI zT6+NQb&aTPM!U0#NVESZ`Lxajx6T9&kGLr~5&GKP%dE|EPPKYXlcDQz;n3kEbCZ6j zhDB{|^E_5FeN(cH`N@i@mn~mCc|E&&mcACnv$A`2$(9zzuq#f7LFc;8t1cCdBTnva z+8(yFXeVc{YI4-5vc=3LRaKnjq0QN;p=JeH_Q`0{&^_Cr(s3D#+?d<9y zTBYA(6F;)_d!+mxDM$~y@PB=zEclIdeQEFPImMfq$xk-=l~X*3d#NaiqEWJzeNFC^8&gQyd! z?qn)TMHvhVo$SFRibGjH;R+glBrxEoeq?X@Cg9@{QxY56J*X;2HTTIh! zqAm|;oxW=2&X)eo#IDn8MhKo;y(}?MddwK~;?van;+j|NAtQHF_ga-_yvx{p?CI>* zmvidVHfIMVN6brU{djlrP60abrk&z5Bh|BqYIQuYha=pMRzDv;-}}@&*GmaK%+a^NKUCcxRal zy6?;(%tBLk?2J&p7%;$eDsKzn++OqhTW+kje&GE~J3hgUo|9VBn4M(mrln_A8KC)i zs5r|qR7-Chu|GbKT=DL*QMy^xhH)s^ zdNU;WK_#X-Nuk@m;LHMzW2a^nT?v@`RayS|2cx|6N-KpA?HK zhf_0cLkF6h4KgYeIhB^{)GnXY9+Q#s=zM#_y7UY6x)-lsyg28p9Oh&EiCsF_tQ`Di zdi%;dUqo`#~nM>GWoHr-7jy~R^(d8cdE4_|_ z>P7QW-pK>U2YH{&b&5-l{rq9G>KPS*nvP?q_r7Pm(TQq9HVjylQSY*Z9=iGz`EkGI zFaDoncODm9HSQOE-0flcw8B%9(=@1Y`QCetRU-HAZ?$yatvYJ2W=&ioYkSS7v8zJY zjJ|g2I%(4TdFNt^S9eT^Vm2m zrS8zfD^2w-glU&f#~h8)Z?q~oHQDYVnLla#zNBLloLzJs+ZV*IetN64DC$$koyT(6 zum}0;8+KRZm$g$Lp1mtivS@!GAgr>?4mvUV_N$-;=a1RWwoEq9Kgx^;*T-vAD&et( z`}KEbo?>Tpetuwxojgo5MQQ)cX|+a6E9auQ$Q?_;QP1iNTOZ)m!adR!>%1r#+Q}LA z)GE1l;ytG~3m$5woXXs`?aa-|Q$zi{TZ13?l_OhIu`{<1sXEbk(D<2%zd2~+ltb@Y z=dSV%c^6P;m;LyHmgn1m17rtovDNFA+qb(lUb!@rKO`h7_Agnz3|sg3?6vMrtMPts zcp>da$6BWm#)TKzTW9J#`f%-p_ny*E)vM(O#H-LIOr3;29~Esg@~C^hkBvdct=n-5 zjc?q1n`Wa6wn{&{@>O}9ty=W*lNGI|XK!4deg9NVqITt| zn9pwP#FZ!|MBxx1Zzn9u$a+3;6{#Xw?z)KDC#R_@b${v}&+ zO)xgElNYCu?O|UoYCg#`o;e|QR|KZabwS~No3nNGDTRj5n29O|Ydh7bv4in-XJ!W1 zmt}+qM&+ta)fSz5T`ONg=2U)J zR;=~t>Haa(ORviXtmv}X#I;K($uF&xo2U6^V{0Qm@5sHRj^Kc!fd_R1Hz>G<*HV@%o4TsHK56`WeG7bNzWSQ%-A2_lt$U3mz{^HoZ&M1g3{rQxB7jZb!L6p zv{UX9wjvPq|309L+ue(tnC-qu?TfM3t(E7dXi)a@E%(0Jz4W`cDE8%Zf9P#7dof@{ z=Hsf>uTRZ&v%D3?E?r}GWUc0uBdOW5w%;7FBUHos>W=J~MF-CwYbxHQpwHOqetcJ0 ztr_>X;>;`$_ki$G)*7F_=)ODGPwPwLV?Fx# zneDR&9?c2dM_xsI`gvv0Leh(Jw&To8Cl8K)ydcbM%&xodFll@WpU7pA znQRV+MyC=_#S|L>j||;o^c)#Pmj=xOlR{56Kz-3buX7vfuFn3p6b8eC>dbH_ zI=i^`d}l`oP8T%L9OScfx-d+>H2Sek*N-WKf6H{iQ1<;DtnwdP^p{hG7N++~%=y6l zFK@c^Q*K0VP1!hVP*EZA;-+cCg48l^3`(uKI>>tM$dym(TBfN`yFT1LGc+&r(?iCy zi8<$TH;*=Vu{NIa(r}0WR0Gk5nVWZ(G4`E3K+S3(Ztm#H8}Qb_pq&V)MIq{9@ ztbHG|0&+YLGhRQ|ef?@X!Kx`G)OFL#ZS^CLMBF>SG~NY7Wk2N&-5ROA?0lM*N2bBA zOcgdn7Y8oRjEi`WJBdH1^to;PosaVWPg8{(Ga{M^-@S{g#&pa`CH8MeMe}`a}2C|Y@Z!o6QVC%6xXQHo; z+hL>g+Dxu}VxntkfBcAw#HCtC?{4khkvH-h;1q6k9vzt;anRXfCDUvC>SINnPg3`} zGQO&=$u3z_-{tkr8l&x)Is4qP^cT~%9~+^vlb?O@@dCe!Lysu}vd?urrR!B@GdVk7 z%FXgsTwe3OskP(O+o{GIGH&`lzo(}|@?;S2Hau)@lo$=So5M2EqJKe!nu`5!!Q@9&5HNm`_q%;{c+ z-wlOnk-Pa}6Jc5;(nnh4&mW643XAoKwUvb$T%B#{ZZ0IUD~asNq|=~R-mF%Zy@0SL z%EF#_H8?De({x_V=7T0~ndNZ(D{rt02M4j+U9XJ`FMVL9!&zo}q&{y~Hg8-3W5kk+ z&3BGJ0rftN7fQR`J{Zid#JxtyHJ*i^LOqG*Al|a%C|s6JW!Ho6zTAmg%5uoD%71$If5|rf@`--( z0A;x7jz02g&)Sxen8^!|?d{6-n2%jQv>WL+@yWA2)*Ea>=WgDbY}7sX{^1gat;_SU z4XF$GZ699Uq;MRx%G39aWLaEzG=;d@hqSb=@=M4e{ykX3f9y z0A=s2BZC|A>UBpohemCFeo%2&bN`N(HiJJtK#5KW*&1pzAjPR9Vc4j9NjV9_i?&x# zQX3ba_dGiB>h_DLBAO16YPBY~Bu@D}z^u3`5kmyUc{#pv^6{S^bl-CwXMe7v;0$K_EdJR*lhL8%lD8~PV2i9|+;ObU-K@gsc= zvfcq{ltT9)IlH)dxVxiN@iz=s*5AbJO~1R9ai+MEZzI|J-F5eCIO$;4c&# zW{~sLznrNSS(p2*S#7;OT-ABz%+{#EUD5B#rzBjsvufA_TA<#Q%KrLTUDpkdo@C~p zu)3eR zuVjJU$TpvAOK3~7ChuWhQw{Q+*1i3)dh^3T!mus(&?x6CUF=sp%8u!~Pp@t(8>gmb zK$~rMa)aF6rw%upoR5d(K!0%^`iojL2MLw>3-E$s)nWLO-`nc_x|#p0=#+WSn<|xm zF2kQWi|R)clc$Yy+#rvs*TA&x?J`ifI>&wOTW-+>g15DKa(eNbJ+%+ZY&R~yJ1XG$ z*A+b4)1Kku^yU7Hf@gPc-&|I>VD>eYsV&~3u1k)W zYW^bV^X9Cze@WAk5jFB#-&`E4<$QCDZp(KwxxVzew-}`#%*MQBrH?zIIAToAlZRUV zVfO21E|@*vj%B)U*}FBi(IdM9y=wx-&G=FyUpmlGe?Z-B44S<1%`LrjgNa+3`r{mG zt{T4I`yxa^bN@TNOrv2Rbv#iJ9$)EDIh9=?1$>P3m@!Ln8L0f%mw)8>3q6I@Fwi>%j9ysI&s zl>Mq`u&2Sc{T8~eAKMV~kTdJHT^^)BVf$Wh*1WMP(E;nFfYT~APpv(o9kHvHX^~_4 z_VpK&dF&m<@*L5EH$%YM_S@NyaVrVN<2X|uoOmv$SH(DO_A7*-LroKgvELUBbPSwn zwb)p0lC=<>_$ zM~Chozh>Q#>u&=@&!QWO7t57}m-_=D_ zrK3zY5|zmGpfKDh)Nh1fZ#P2#z9awuK|u)skd%~UpClCUW8-=H@C8x;fXmWnoVvQZ zyKhU&o3U`eFG&Z$4>xIvm!<%$1waJ=gbx6S1^~nX01^QJA^<=N03ZzjkO2Ug3;@Um z0OSF2MKBuxFb4oI7XUC105Bf_Pyhf}001Zi04xLmECK*H0sx!=04@Mtrwbv$Z%21` zcT=Tnx^(RTU)(kfE`|euhwUCAT{{7Q&kjHU0=ftQ=0hVGco-Hg6yQP;F7%}5(U-0b zq-#S+b{a`H2EdJh(hV~J2-)TU5ELz>dj`Q1S;2+%|Ht0D#zvB5>0!a@>h7wV?wOw1 znOR9YJGd2~p?z#Byd-!h-|D6v$y%bv-w%S|`@u#V9i0t=sj1-8b9g@$1m_=|34)7n zH>TGZZ^16rOLir-I-Y;52+4z?1>>jfV?YT36D` zV@1xGA{UVJs{A0?jTgQkvDCTy(o|N;yD8ea0@~X zv~*W~XY_odjTu7gQ=p5tKo`teK?>*I&x-PXG>GqVLD10oGbnh7g1^yv(OSIxqX(Nm zytnz_@x#ll7p<0o@oPSe{iG-{>B(@IWqr^p0Q;T*gYWMJ8|^Oz!7t7P7ry=NzjEQ* z-~R6jthcZlsMQNWaPcfCAMG6WyHU5_kali31Ju7EuD&YIe?JI<8^J~!3+-#a49;IT z^GhPNGq3$JIQNTR{pwd|e;J(n+q5`7JwJ8fm%;g|*D=&{za-%>q2k}+isxStT2L!^ zJ@}L)DOLO`O(C;XG>7#Lz`MJ9Edl%o4&e9XH`dQ5@*A`B7v%T9H5CLu2sYYhJ_^pi zIrUC(e(JS%g7d+b-wDot&s*=JCoUTCX?>s3<8?W6?qP3sDFbj^lvaj{Ts|sw|U-q{nOyaav8qe9S5VgEs&9@}y>2H5OG8&3pPX~33Ze(LFge$3r&v&vYo2#& zzTUpqTv))a0Y6H;DcVV+ra0gC?w~V(2J5aH+4pVnJM8}Z@eg) zTXFZS3NBu_(ZW@i$XrV6t`lsGS3l!dKl`JHtL?hV5C*-hTzD}*cpf!nbEYNHpAjJO z{b!hO^Pc7cEeBCbWvo#Yb$9o)@~8C`d_!uVg~WOt$*mwMfdbkXUHs~gf4uDf`!e=* zaXFt1%jRyHI9$QL$ev>AfKYyOKnk+=m1_3Jn>h&NvH$#B& zH<92Jzr1jUzaa@RS{DD%Wg)*cde1FOb$p}xZ&LLO!5ON4A<)%-MWX?N0%`AXv z{$3EA`zOz*uzwfX3oyQS=OE6H)a~d;DkBjD1aB+FQ zI4a6`Fkf`@WLTV{-OU(3?nWN*cPcz2X`SJbQBAh`II)s5y>Tyomi4~L zes!a{{&0uN5sY7{Jp6-k;Ld*===^T-1EBNVfBFk1PF(9&Ll0kl6!+u3JQ}FA{isy8 zvJ%sNaWXWI?lo^^CBgExz`~FIkpsy;UJQcyso>ntv-f_wfbZq=G{^t=f4f6-Oqvd2 z%4;B6V{~038XcSEDDA0RQTO?1sERo4sWfvgdn+?_XCq4ba~MO@AA==buHIyFxHE{7 zzEJBoRyS&1LQ#q!S~R<@?isN9p)!LnybZSdWkgN9eNOY44{PnB`@GjRPd( z-;xE59g_YH{tIq_&)yWCZ?wUwzY+vf;Jc6`-w1-K-wcAOKNSS9gG@neycv8N{8kVI z-;y2uZwDOGp=1wyF8FlnJJK)Mps>I5*yhuQ|2&L-FsB9QFZ>1=37G@19>0t2!wgx< zLKK0S3>&EPV3p^84nBF6gw3ZH|8)R&MsI_TgZTV+g)eWkF}m+U+wI1AIp58pP}Apa z{j7*f2s&eM(Y6MBivfUi4H!BoJp%~g9b~2a)vtc_Z;)BCx~#-*?;M`fZm&qP zA0*v=HtNlFv%zaYaPhY{lIMAL|MA*;H3e?M?)pwKD2Hm7*`E@z?#vp%>cE=fL@IyA%3`+xYk1_>cdAZJIY&zs`id z={7$5mH(4&c-Eg2ApZ(<^|;9Tu-0}-Wz&oF52Xow{~=q8e*tAZ_`@^7*Vq7v^?y-R z?u+`_;Q8NqfM@uAEeNK*8U(QMo`cB%oNwg~_-B@3I1A3fa{X2iockZ&B(KuBcP);2yuLr@oU;GBiHZob0grV-CP@^kyn0Uh}%BW1b7|v;SEm)+?zlz&a zLGW)*1;IbOz$o~4r-I-uEN*PlUJHVMDQ=seLDPn42!h~0c`XQ*Aywh-IvWIk>l^(0 zFP;s8-~Xrl`wz|r!QTh-fE(;AyTS1Jcg_aEPr+c|7CRdRLn-s`oehGH^!x9h4T6Wz z4B#$18w8JJzx`20`#Q&IZ9%;2;Qszj-zYz9qk50hp8a|IXPUNTvLLeKrXG;xw24duM~- zN6;>UAo%-dgWxT}+u!)_&IJGP!bbaB!LR<>RPZH1?{XOz<+MjTZNe*))b&LNSH_r1utmcryH6A=2Sx$pP?~>?)KDSl&49$r^4;DS^L>e zw*>^%p?x8JgcV{i}|;Z2q`Bp&)_ZVW9CF#e9%I_K{Cy!|3Z& z=8!4M5`iFjR%r#n)>PRGXiGdGGK)>E9#Zn4xc>>SJXBGSpnc<>dW+Pq0k7> z1`-!3`k6&a!yB~$V1@gBh0ZT2d=R$LnI=$aisw`~mlxgbRx1QuF84BJnZzzF_wmwH z^pdRMMXcdV^JrK_y&g|egQ}uIT1CrcR+PCitBKYw)xdJ$!m694Wt^5pM^>s{dd}LT zz8Vhel)5W#UpN6u;WV#QmNw%&&vM~~dy4+T3c0hn`CwD=I;kW7S8rdq{~RL0STOfqEQ| zIU5TGVQ%yXtyE=c_C%_^#Q2cKRKYWYrJ1kh7%Q(%ZdDkZW=k6TMc%DhMy3ZWqgN!n zD-3=u8w~q#8DGTs-oBu)ASYqABI9WcV`4qolhG)RWNLHLGKYe$*EtnDj+jxHmN|o& zrMyh;~Q_cLE+S$}>vF1!0`H0)M+maD`rxLR!QzxpLza%Xdn+Djd z|8l(w`#MzE1?aGUc-Bh3e3U|&coOI8=`zU%vlOsPgJwfRJ&5xn$9mz!}p$}xzy(OR;rrk^hN<5V^7j|R_F zN3~c}rm>)*uob?dqJoRK0F=X|`v`Tc!BwA^YinN?Uuin0}oD&XI!{CBOXg4Q5A*iPf zcT!I#DizLzYJudo%LAV_{C24TNXDnH&)A*f?%I>Pdm{8sbB=kxMi3n!cnkp1vYp_%GklyzpC^7q%9fBH7l{q!d4y z%Nzg8|KkscH~!^+{`EMs0)Om51+K5+SP4RbqDiZ?hplcIL*ZxET+! zgIJaMC|;=uWc4w*E8UIuom47_?k4K-0@UN>OVajc3^B<)NW;W`<@M@-HJ}0#Gu$uB zVX-_vpJ&A!*`w$3k!M5b#k&s<(>PZly#|@smhL8bQErZy)6p_pHO~xVR?1eeT|?+O zuXH!^_>!(dOyP&|(UYh@inq!vhaQfKdMma%cs%T_ZGLcF`5{a87@ke`$7 zBuS}uj>sIeKPgm}`fW^yGRAO5C50;Xv%_>wX4e}M z(8)v571UGLUWI_;ES1sH-L1cSClqmAog)T%m}f&oTz1gxtOLB5h@2;#FkV>N-R(xb zD?6=L`^vS&g;wioH;R@PqlNZD)Nc2#$2YFETDwcTJ2$$!*RQm9TkYst>v|Mj>0P;c z^{PR$XG!rEX-75OzjY0*@X&syAeC7@Kg3!E@-*yb=cS< zt&^U~@B8tgdZz7*vJPs@oMK=s98QG~TT3L00){gwH#bMJl*)_`FK0&Xksgty)HW1X zQ`ed_crpb~4b2oaQec;L_CwR5PZ!wvNCRSW31?I`Du<)8gAI?0isk|MsCw4C8TO(w z;@y{gYUayK#&Vf;^Zu@S%EnCTg@W5@;#jE_@CF}M=V3&L?VSLkB3of`OGkqp+w9EDj1(Me4mkGO zd+$5nsi%^gb&qFOrkgjlo&nMnEX~w*X-PrDQ^X|?&c4#nG;gX)mdZ$ba)z-tPd1A| zToln>+?k$JkdX}&CcB%dj?#c(kTWwgD{y9Ga_W$VMM^I1&c9+3n*Kxy@u}%KRbdn~ z%J1XoHl)YTbn*^XNM{50jj(D@N%IZM&0MpUR=1w zkG~rJ3o?E@{MH|k@dHsKFn*k`H-7x)geGDBc=y~T^=_?`*?iu`w7n$#VB+Vcl%Y_$ zGI_2xvr!r654L2s3#Ck%4<~^0p;P9#5A}5#n3cAb>?P&?Xa|9L^F_Q96=f2o3ybpu z#PyZQ^Cr#}#CcXov|&M}AB+e=>yhdudE70t{7Au{fZgUn(u1~xZM3kgo+^e>H%6t^ zUQb18kaY8G>$d7fdCvfHm^@GBbhiW#p3HAV=_u+iZ*lPZ?WA}P5LA{!?2U#hQk$zA zO*~fzNu(~%_mbi{X$a-fFz!$siK73TgXl%GNPZS~+N}*$^s};)M}y18Xx~e670z?u zNjDl6gD7ndg~Ff+vLO`17P?d9^h|cmIA_T_%Ul~F&?)Qy$*vj|z{us%a4(N~aTASS z7IF0Uh4~~c<9s*j#`A~CZlb%UEv9tO29X8;)NODl9rS>(4m8;uMCtq>N~66v|4g+n zY0*+dgSaWq4)#y*Ho%%~wJBReMms3t=WLUZ%Ic}3G!TajH64Y|IQT%_j^W!=S-+=x zvaD%l*~8@TKxrxk8Pwh2ArQ`Jijl3v^cEhlN2sUB78mb$HCnd>)yubT}*f{xmwznf7voI_PJ z%$uESa|>-4m&~FoGfge{iSbhvz3_Lld^GSE+(8l_mf0}r&JFj6-!D7uR(q+vNcL78 zSA|o?Nf~!b*u0Xo^RWt}eBhZ}YCb4)b;;dLjeo)y*ROtfQXv%%l3}qEhp(J%vejZW zi7;S>^cQ~ zH{7{$s*}}4u@`!f_2Ldu1i6&u1BbLRrt8J&lZwXeyzO*e1Jbn5njR2y>F{~zc4Upc zU~Z>uz;5SV4O*~rhulIMW-W+dBA!zZQWdGC*3vA_s=&}2m9(NY{sz$z-tYn@6hep< z!?>I5CUMWB{fi-Vc)}N(b;w(@{M%Y(`HEIqRyS}ce>8M;l>2}5=1&oNi6~a+CSKg- zIb8#xm*x-XBY*Q-{q@iTYG393p5kc#A7~%TP4)+&o^YSSaHd(!fx)0|ctv{gLDG$zput(D zM{dX8G17*u5@AY;L;}OT=&>>4H0onEDjPdvw$U^y2;!rOI7ddt@6PmRM2}%rp5IS*f@r<)6qe&l zB0Ub!IA)p5 z9<@#jLGfoY#ZhZEtm1TypU%F{O%t}n1cKk%vv&~ZJ6RET(oAoK!3?a=cD)y;Wl|m) zwRAp_Clt1W^-VzzdQ!oMWiBcVMHgX%^oIDbZBLt{^g-HkqR{z;?Zzi6g8%2Y>aVG zQ}8dE5)@AXFvzM*c&l0*t3(64Bk*2*4n|J_6x0gU5XViDU>jCgoQBc}b<@wWP zB(4n`CO+*#r-3`P2j|~S)tb>~KlJFti%RhZ&?y}!Le-J#x-_YIj^(7Enu2Gn;_E#( zK24f!{=Fz?QkZ(PDo&#vL*tTETbrVD%*=}&F0(S~HwWr~;VUQ7+8=%G_$>z7?Y55re5zRBXRIqq|GpP%Esxo04J44|>u9JcXg5mwac`Lg z%$+>fYl2G=0so_-tNPhR1TD_?*}M_#iNVqj(Zm!HlSCzH<#Wxl&V`c z`0(1rc8~a7XeK3Op+6X?NYN$sH6Os1FiCW0-ogew`0X0gE~ z3wmK!FmFQ;YV@GrV+TGIYgTSK0;vgg*M=^1`&sunQ3z!udN$!@nc&E>wVx0vR;(6A zH=>g)8i4W8xGF?CEYq0Itrg&7+84Oshbzt_ikb2#?i5jc6{vmxi9PJBUG*k{uTsz0 zXvD^#ZCC=lvCw$2dna44_=r<=H)5?=b_&!fOf{e{CUhTqvO)={!c{~srPGXBjWat> z8B{3QlduaanzxRcvRIaTtE!H5+Pg4#W|6Tfp(%gedFK&(V-Q*auO+v)IC6gl3GH=`>`DgnsHZ z(d~5o@&S&Lq_K*Tp^&!8v*dtIvqQChd7#Q9k9%`-bM!|)j<5{pw$n$HQsXe`_tg&0 zO^D{P6Zf;jStcIRH}gT%x9YOqRm!Rt;FuCW$RhIL;ecqeH_9VAtAWgOyQ8#=KdhDj zE|IB^LB?7-*j2=w{&YSKZh--~Pr%xpY#GA_6y--+F^Zjhjao@6%&a;9IJQI9lB63^ zu#By?_N_;NEcx6m9X~N*jeMXR#hyA1{&&URsZxiPUlv2>p{Pkkx9tlvKa2=xU{@QxiMGjwbQv$f5fRymeuVnEmfI~y8FC{ z`bipJw7v;#vOlF4#13OKj(SH%Lx=ko;PQJI{mGNc=NPm@6_F%lzeUMGR+L!jy?8fC zhyyF?XW^fenQ^jQf2G4_a3}1g@1TkD0Q2622C9_cPT*1=Vv9LBU~h)Kk+suqZFO zbMax859WIDJT51gzkTP{<9l=a<)D9wsy6u?&kQ=$szE>7+e7|hvKk-;spznXoaNql zU>!E3ad4WjP90bIn8WM5lb{kVS0B3q*{d75P1h)>&|G1Fm-aOs4!akpaUS&_WpaGf z#6O^{@vFN<*Sd<19%6n(P4#3DC6;v)r#4GT0&Bb0X<;8_&*OBxr^4%tH(J-PUSDi4 zEw8TLTl}!Mu)q6cv%PV3cyD#@_7AWAxr6-&@zU?yxRxGe!$WtFx+x@>MN7?vR%`L< z;=*F!G2c8tFNCu;R8KrSHD*8ur<2YwT6_2EM60{DA zAa|=s&4ApXCqepr0;c;lCXt_HZ2=$ow|n z^<=|8lHtLUUFq4uzIXQ9t$H`=_i@C`){TbATrx~{kLI#`kLtaB;nF3Y(OQn>x5 zQ6xM4m}6dxWhmb}{diXOvvjYC*q2#_R3k~cHw!Y0``HkOV(bX$I9MzR4OGbWfoEF; zTfWUWjSnY!*0n1h1{5RyDPas$Grj6eJC9)IY9H3UqI58jqUsU{tq{KgaULw@N6lif zn=k78Lg7-{D)$$2_bI5u?GH)|b+=IMZoMc*aqkXgWO8~1@u53r2RyQcW;YExbr4|t z+~&6vfI(|4yCpmIYT9FgPr;6}YFM2@K5ICOiaa?K>Cx14pCRreDpZ&iMB+yrjLYO> zpCO7(O(&@dfFjcfN%jX@48R78*e+I7!+o0~d>^0-hR?Phs5=JY}z5u@}!h-ml9fLUU3;ydaeMn{Eo zsQa76&M+ljnvF{7ki+r?N2*!hY;AKYOL?malv#4R9UtK2%X-@Fk9zU?L(L5|x$%h1 z^b&UMgt!aJK|p;Yphu)iQsKk6cpl|fNc<5g-F@^>r#UzI_$`bK!)BEBvcYZ2&v*7=0?X-QE6gtdrA$bMSE$qOCaX z-AYnyV=GLUyTyB6sFUB@ZA7v+xm1l7&3jqJMk55~DowUH*#m7L*;Q%A`_ge#4?dvm zqXIXkh#xTIh&#WS|nw1fGGG~SP959 zk)#@sY7;2$)~88jBv*^lE2paul5U(9v6N=j2m9%@_cv$R+)^a{I7Rk};(0QhskW!< zyW5hjt@qUr6bPESOv&S@h;CRy4t zA^%Me{EU|$C~Gx6a$JHqB~=(38QWERYIkSxP!rF}m{ta=-_O!v9v85zVzJPX z6o0;lI7L!nIYpd*kQAi~qfrTYl8wr_JlUOf{>=J4JYv=3lA>dE#;QhACQ6S~my(s) z&AWIX{g3s#@s`cCm$SE>w`xtc<2AE`IPXVCp?Wq8%kJlD^ONu=wT*6X&-Lc#=u{9T zE7k{BL?@_A2s{q1ByV_hkGpshLW>|Y~?bW z_q2c)|C{(=;WX#>7hNxq7~!uViVB)NEVy46gCP6aWgY$gKh@^iuaB8)LG!M$_CLRJ z`=>}a{`|w+bm|2;+F`8Sa!=&G?b*3ts`a11Q2T%XlT#XMdDQ|AFc+cds-4!X1(X@H z(f)sO+-24}h)i(dofk>@;D<(9iHnKHK%ozn$aQ05At(IiDE*ymM>V!^M-+;?mZ{z3 z1riI4gV(zC!MnkoAjHyE(Lq7hz zhc3Rgk0j7K|Dt}XT591sAHLAY?8OJSvMA>eBh!Z$&bfp4bk-SFor)y(OdaQF8?k>_ z2PzfTM)_*q-M4kTe%!O0b=|Fva*bKjsn>vz8xQc3-Md!2HFlzsJ)D%XW2&*oIU^o( zlsNBPOPd(!CcM>lIOjE6FPx0J%*@3=?-X?H?2j_%1@8nsy8uz%CAF2LFk%|ckKGex z|4}J!xNyD777rUqn%s`c7*?&VG8*7CjRtB1i43YQv0lVzAztD_IldiIt)0KMugA9f zLAFP(Ac6We9h0Ob4$rrEuWa%4g8W|c+<^{h-zU7f7ncu5JL?#WZRlQHuI9M&ODK z57#1u5!II8jElIuU-~P5aH?+(FoDhk{CO{S+4|!&dC|U|xl7=2-oKM} zdHHJ?ovSFE=6Ef9kab;204t<+aXDpOe-hL(a$z~|QOzxL%&WHhj=WNLvwTurdVlNa zahhOALb!TZPmp9QD&wuAw2WMus)Qss9a_l??ywiTW3cZwl0A-ka%u|8dX)LJy~zo} zdO9bFQv;g{isGp}dywjydokwN1&Ut4vb4Gvr{z}ZHioj4$s`sV1CLc4J9F z(ztSn*9Lo4br}1mA}s8S3F5*Q@P&_k9#tf^1aR?5EIwSKwi^PmoC@W?DyMK+UTMdq zHDXA1jCmduX|p<|Ih0GC8J^>28{W|QG$l@IHY&|u>{N>CohR%oa_9pac4VG2J4qiB z%C#hrbo_o_DLD?dXpVzjaZYu>vO)bA%aukHTwy$dLN~3-Y`Frf#DDT(UO6JoKDT4B zCfJh03_2^k&eT2K;5M2!Lm8B$FqB&g>Ig(NtYT3&?*f$+k`r6HXC#e~k!T|W=`atU z?_sAYL0vG))iq6g4bB=kA_QfK3Fgqi>I{+_6!$ZfBWi!z>{$oT<%#cLhD_a*vKDMw<+ok0uI60Q>B8ic+BT;-#kK8fdVLe$Seqr!u_T2cb zFka+n!8p4i^iTU$kYYMMkS$g?bHYN`r%}m{N~cj>_Cwf_Ls^`!D4a1YNsdj4)fOi= z?QJIZsF*haG|L=uD>mTj#?Q(xqbXMQg;t)pWWe+zb?O+9SHPiI@3}WA{DyfTuPJu^ z5s$&Ol8j@w7>x#5P06=zD5O!5(Lh=KK}d~M?E%z>O0diXhSRMuW;k|biA|j@v?)he z2_fY*5N?6LadHHF3vm*>KsDzeZb`Dy4)8s7)jvGq9fc7hx5cNOs_&`=UbRx{*BO|@ zhD3xM%Xoy(0G)M2Vv&22jB_Zcwvx}`tb7EAcG}i*;S{V|6aj$l68^;XH&(DpQve0T z^qII9HR~;t6L=S^9suS9J|#*8FDFNkeI8P^$HgZtD4%)poo)aU6zf@!Y+IVU)YzUt z$@bJ(wZMd>?k^aRD~`2b2Bd*-3~%UM7@s#Wgh}(tH5iY*ftiLmp<7;@onxiN96a{i zGnF||)mh8@*RBc6dE*hZlmjp9!+USQI*aJHvAStHLZ^U>uS6^CpUwj zhR45NIBy)bV(PKWoZJi&Qw}U)dG%sVJrjm7=1gz~BMlg0na~6h>GbH3S*30*IaTl= z14UOp`J7lzZ&sWUS2(OU4RqI0IvRw$=j1&W&(KYCQ62MqMqLG*r%LXr^QW<8Hd@@4 zRv`7|c@sy38JzDLjROzZ7-4M_8HgCEnG+a)fKvmn*uM_;5jh8?^Z z!;Oy}>C0lr?cCyqy5OnSy0s*%(zgck9e^&=R4uj0I{n)Fn;}B2w41KJ)Qjs^UA^DQ zA0r^Ui|8rlg6=9d2T(cTB{}i1X9|_R(5<$<*=<#-S#0yjrW;PT&6|>VmU^MASx`+~ z1BdC&U-U-lxA=3d7EHGWrB130T3IfGu#nd|A~pDK>v~Z*t!j)qjAwGYvXFGse##kX zyrw}~*Mtuq9{;bIl60*a4h%+YkT&BZ&<$nL0}}p5!r0?&l-Hd2aPuZI0L0edq9OG> zRg){{;>)s}QARo@qbIjfkl(Ax7a!P${OzAX43EZJBYNTK0b9MnL9%`6`q@kYLt8*v zoiKOdXK7nwuHs%CNncy5R+pzqqu!?*Rv|z}I^%W^XX?gXSEo+u0cF0Xg`rkD)5L(n zt`b*M)R}sewn%qGUZwTwOmjVVJ|@?dRYoau1rf3|CfD&KH##$-esUe%k60qLO$lAf zD-i)Ax=wD%YEim{Q&+X-P+e6zKc-h&+?oOVTw-!9q4?%*k`E4}92hosfhvoyDXW#y z8ZyyY`%lwyP1$2w7CWGeq`HMWdC(?jxHCo0sLd*`D|ZZBW6QhYFoem_u+_I|cJOtO zn3w3@atv>qrX2Pmy~*a(e_{8imfe_rq22&iH;&YxdD+i)B8sPU30l9^!A4#c&wXq+ zhn_#%KCXJijn=8d`i(8U&*uc7*zn9~J6k#!lITtcL$VZmZ`qZlYBtz{-l|4P6($*C zHJUxU2qsCtnAW*Go~ni&u?pYM3c5=tv?pCS{@6tda8CvaykuZsfx-nE0Yi^usgza45PTk zdd?2h7RAgn22b5jRU(gdRv{hWndP-JyzxeA=5f-1WhpmrhG`#%Mo&S%079z4%0Sfw zC*!SIr0_4DPKTA?2U}xgWmy!NGjZMfwA1bv3ZyhP0md5Ki}-htKQ0ApiJ-bzB=`#H zjLm|nm2;n!qAL2+DW_9Zxe&%|y##pk<;dnaHY&NaFJ-KrGzXJ_i_eK%5L9Hlo!qO& zfJZ))s99hiQvqmQRq{5QKI`y)v18v?Tbnt4P$uBSnc8X-ry7+3(AOz>t2t>fHQJ#& zmT?vDgwfp98mU7XHGP0Knm2vUSl3tWY#L@D$y=S$?7dInb(>t+>mmK&XAqQ7di5z@lz3r~OiYR2k)Cg{%z7#!08o#;cW z$vjoddD<(=T=nC0uiWoERSjK`71wk$;A_^~E%l5}V|BvSTWh!P+`aey`tSVkgN^$S z9{$5+fRP_ygx{@;qT=|IXXCearCp+LVI!P%GGPvZ?K_n zBJ}UaF9>$6erj;+eeRzRXbS)X2{2$SAS@dUa@gdl003riI<3=EWp)hWmfAO#Zd|?A zzHx=@qHLkiqjOHYAaIO~7W;8mAA-^D9jyh^)#7$X(OA%Wu=shLAVg04$fPGH;t-su ze^-4^TDK*omwj{k*db2i)ZP2>(`?5*cF4!aOwvuhKb1y=2CUglPU@jHohrjy*5+Mj znRY);<9+jHIE)aAOw7BZ!URT1Am`-vy)375Nv~7W;xjQ!YEvk82?r?O7|_r55-8Ht zqvIjOQ5&->;O&Caiyl*HhJ{<-^ZbRlDLpIi*mnk!z;t95Qwr%$Jtknb-?e| z*;b%?m4~=-lr}VEfYc>{SbaRlHTCKdo0q&BWkaWaIjx()y`PlEgYwmiz1(!sQrBJ1 z=p$(pj-aeVc2Dh6N{1s1oxx={(+5y5)pSd}>#(RcH|y*4UbF7{y_C4^+mh@5~?C_iQj zAjI^jbs2?S#&m;m_C2_4NODrH;f4S{r$Q0A4FZ&dFqjE2bdQdP@dMm8ua{+mC&t@_ ze-NhtN4tb-N(cg>bh!xSm8KffivTNa6N$^^yFKJ~-+XqFM3q#fzr&Xw47 z8v+Azh|+9U#XJw80^sxbC{&Ff#zzK~h*dF4h~1`{+B$j{G|gCbs$v#&qzj?hw~<%J zT$C`Uf4-rNBfB3%VZmf+L~BsAlgrGqaS8KWPKVoM*S9`OA1XmH7j}tJmY}8@X(x1C zevAfuL}Y0~8wY_c8pcifxj{fXSR7jR7#Kttc(Z`i`e{aaL@PZK57WeS994}`J>5A< zs;6Z~W~-`~kGiR@w;a`4Q3>`!GNN1R+BK#`4#zSztJBMr<{GjDY)_`>V^t2lX$Dk( zD2^sgSd?4BIT%M4PR-Kk&=!(kIR-ZK66vBEZY%ci9reTP=y$Rm1k{5#ewyv@Ie%?P ztvFN>#>v_Dbb$1u{0Px(l$Z^fxYTg8(@(l;{h?$D>`79tBF=G)Ok$1!8RCsifG~Z) zd-Ee3=S|dLM~E9WoZEDeUa*N!a_1;6nmS;(3v8fcPBz#XA&X8_ zG>LK);)i=t8QJJz`cU{#=Zd~WWK!5BlpI1Lc3gMqK8(+elMtH`>b%Aui+QhP@c;Gu z6BR@_&KT8z_Hc&M7W*7@u&Xny{fQ=ocJ28AZ%#fFC7gg2LkcDwSTv|1B#yRrH|!F5 zrkXbDlZ3r}=iLZWSz2Jn%^t1bxEE>xS}CL>F>I49)gVx`%CD6tTg2mr&W>NpUl|aT z0oHanuH7ho@_wSqrx8LL5Lj5rn{2J{$@?wbH!k7Jj6zXZB;G)?+%b*M(`e1^nbNVA0yG^!|*MKxzF%;p!aJ zs?yU|>4a8PiAf^#IB@DIg0pk=i~?+7yJ@s31jqyNnAIf4b6nDkVnjwbBY}k-2@O)PyWBnm z$8M8oiel6A@|m7SL)tWM2`(dG(5h@BK>C&Ts7T8x1Z$9Xv2t0D7wFL1v6(}TdAh<= zpK+;9AIVvtTj&j-;BF%>ifAu(w}@umM7Of3mAw^iAL~>2-fO+c`5{jfCwg`{Kz-uo z2H>7?5BmGmLS38D8~!Np)+b-k8h)eZHMDFSXJ)2ift3pZo^q?Ik6Eef+_<_z=L9=9 zuC1s;&Nkk;vADvAQ#v;mv>ei{O^4eHx1M6h)}WS}HyaD!MFV<7KT)7HpkrVzd4G`Y zL4G-GlcqI%Pi!VPk)sJ*jf~d~nNikMSg;vXeWIqrpGMTQcT`AKWFO*aHjNLmJ;qf{9qPcXBWdrCs{?RC#XBtOhmK_0e)I~YcY=L-yTT0L z3^>l7Uawg|HBryhd+Pe)_3Kw#*L@#S<^EFd zZp?1pZ|a-vX=HTd$-4*jr0R4HEARjLu6J)k?vbKFPEyFd@M=FQ6q0FUFlx6S75j>Z zvoqq+~>QBlSNjcON}EZ`jSI@OHc&s>V! zOAg{xH*QUSUWkg3{~*85dQ<5aaf9xu@6Xkw{qm(nw>oY0`rC6wFRKvGiFfDPHLvf@ zHEh9R*#tF@&1$7P=Z+5^?6qJ+u9 zK@y*^J`qcEYHL3m^?SH8B75#&$?@orn#98ssSxMolL+y@-fhG1TzQ_QW9FMxFLTgR zT5R47qvzzuqH8sNV;ZIu6JJ3a1ly&p0C|! z$%``xKa7uPSG!eaIn3F1Bnc9ulWn+pGhDkbN9c{Pnnc{){U}N4_tqC+=PxWKAVQeQ(OB%-@-yt`j2pu2axGrH>l%`S3 z4QezO(Mi}f%(1Y=t*F2yBTSif1cx3;H;Mbb&h*FFu#KToH4v8Z%5e}(i?iRK zX}}1~6!XMN&9LTlJb)B8^X|0RE6OHvK6h+2ZG$H2P>RlQ%Z%BZT$#9?<3EnLtEjKq zAgnd4+KD`V>g*I>=A^+$9$6%1mLFZzHh*KgEHgED4t(IM4A-RZ9Ujul>$9m-#Pu9K zelk~fWk$HZwRw*-zyEjvJ4sR!ea#r3i(iPQ#vkV3T2n-%?I`J&N!p~VYFN<@XVfPu zr2DdHduGtAKc{S@UTfpe=hEG35Qb=JS2p59oI^5INGc(nWXfX|a*K405=E^DcXl-) zBNNoWl68*jXhVHpl_lnRogZ~RWG(^^QRgXke#lCg{0vuObdZ-+O@Hk1u~#rap|LxsAUY9h(Rb?n&1$e=;5Z zq$*6p51+Q0H=ex<6PDNtWg4ms-%%w_xyLC=+{!sh%@VcqFupulh1ZcG=uAS`9QD9e zkl{lq1plPvLFUx5McLEezl(ls?nAv9I#RWFsn(d3W68tZh(QSz!&% z?q;CMOhUu718AqgU1Yg`VX%2h*COzrGjK+?99yS$lhEkL=xf|a6RP`}8em9O(Z8FG z(w^4J>J}Vhvc`tz4f43T@Crh+XRv8}2xHNh^w_0r>n6_NSRhtq{*Lwc_)Z$*D*!_! z4~VfK=>9{`6C;ie?I}clvvrPDT>$r|CIF7>6>&mW;G;R&mj!0d`4X!`Gi<(wI(eQD z&qX}lmN0`9`b8t0p403|@rd{0BuVaJrc7TlAA}-Z(6ee(xP;J+qo_^mddSO`{0yp( zL%Anbryw=1L3V5bqIpxo+d5o=6%^AN*_M26pyiw010r{870Dd@gT<^JeG6;{HRgjzLpMIG;z;1CFrjS&4)cA`5vvvi4swrI`|Q>wI2r?_mU zh)KXuTVt?{wAEL`Lgk1RRHD#4Ab>4SKEdb{7$}%evn+n20ehv$aMLjyO}~b+$*k32 z!}Ata^X1mhAI+YQv3EH&cIa+6Xmxq`emz+;Hjd0~N}@c&=NtDPJ-lPGAtF=R!|YH= zY%Ta6b?Uje=*dE>UGWp&N} z&pf`x*g8onV#n;bWMnr>PXD(lXK?@-Gg>#+(;Md#qfP=k4v z%9GUwT8U;Tng!BWbQgx|F?|+cT-I4fV|D92lc?)B@Mied^8- zyRaYSl5x|}0T=Tq!AYENCQ7SdxKMSX_<5Wr5}U>WMq0g+C0Z+eDu<}NHO-mjHB+X( z$8=cIdsql?3Ov|cH&%bF7Ft-?mF8&*$}BD7E)S!`fTp?aIbVv=XhPh729@p^Gh=-C zPlSIII^IK0Vfj}GRFOAvAvx-#SterxJyuzljm&d-`mL=uUIf@+hSH-3@eiWhQga6FIe+rZ#FmF(hlgGc>|3V$;F z5{&324MReVrgf|mm6{CNHzyJ&VBO5hM3uFIQ}}u@%*xnK zh1)L*vz5L-H(u?IZlii5k3p=Fql4smo-w`eWLe(^724bWx_!QGg2WUf{D3Y_ehPC3 zez9g{+B_g8NpJD1`nH$t?mB5(!`AH5?3LMTv)5-AT4AN|#s+%Tv62myRgH}qwV)O? zx-`?}i9b3zI+_Gu%bAXa>U8valjm{Csd%MY@%{JRibPp0rP>-ifom`rE48T9l}f3i z7%O#EDZ1N?u*YLG^1@=2SBV=fXjDE|7->2sEVb1VA_n!dUJtz4ee(YM)hC02TJ&ob zg}SP)nX_{`6tYGTKBZo%eGof(ZuENm{r>y>Js9wJQRo(Vc9)M4m5!U-tPVkxv5Fa8 z-?9%Wg4$LGq}dx|&fYH0)8}dxK%?XV^9~4XK{dOCmIJ4kl>a~a6E51>wSZP8ALBS3%K*o&jl%3j7jWF8;YmW zmlJiv26BT4Xr7eN$x$KPT$P_0)+}w37SIuhu+5w^VU3sdVEY-K6QENRHZ?dpI5ldyg3pw!Tz1aQ?j zB83gP`!OFO+KlUOs|L4|F;(bxl8X}P7-V_if)GI^KN~-gMz_kt{n67`zb~tBPBo-q zp>;9!rk~dPU4z1(;&&|!j*x7}>CN3zZFn*B~<+$_3tQg)WyL}mRH$`>p zfq3$py7pc2_Og2p%F$yXtyjC|EndbUvhyz>Rj#PUdgu8Ucc$)wCd0iMxdyuNiKzo~ zm(Ea1^#7ea*V4a+fSCe(_G5KJ@qmB!1$SEd!a88m(!9x|Ej+9emoDg0moE6nM_yn7 zOkL8KAupU6Fw`}{-xBtc;`vFWhlXW3%^-cU1GXdv_|CbRrqKK+RgO(Z^*$#mWk-*N+O)mk1$ z6cUMsRklm$U~p{54VGmgL8&vl)Dg1=FzWRtpqQFy4x$%Lcu!$2u02LlW@XfG4&p(U ze#CL7gjGUO05Vn_#VSHFDR(DvQDb1EnE4Szmo)} z2e?$nrIiWoj*H}th%P8IoKB<*8ueH<9#mO&EhrpZPMM8-7V3dF4v5taqJADny(3l) z9738fCLqDsY6zs3LL#h=o?fqGF5S?~pjII~X2wq7#2{T_39jg1B^{6nMfm!udEwF@ zA*f1y)wvS3O=Bj3GS0G@1U2R?0iM9OSAR@gn+a?|-Bb;2R1j9rM<&f*xFb|&I@?&k z?^S;9l$FIS4r{M>fo@fP{D}{1F(cGTYbttJ^`aFkBDIZzZV$ejXL8Qkcc6HMew46p zvHqmC7}9kV53v&gidwf^#mqDV$K+$Tr`7ll8G_dsHm8*2#zc7taWcRUGss$T4Aj=w z#OzvKti#H%0IA!8#~iYE&VT`AXh}e=NYQFlIQt9E{Uwe(i|}XmMiQxQ;y7GY$N@~s zp<}CoTUUUcePLua*#oh#d=!)RNg9(e(|YzOGdXQv?{6%6eQJw}?Qw#ITmvH4bBR-7 zJR+uIv~Db5ep@pjSQvU3A@z;H8YGNaLqFcyP1P#g)-I_M=PVDi{CPoVdVr2NN)=_R zDP~naDdRlqt1Q(gwm7NZeq6+bJ3W=YOnA79d@-fSU_4CLoK>o>VZM(^r^yO;1Pt z;ePaTCoZFxdH3b^_S_7fzZ}nj0F~6Y8QssoS(2XIm-Jvu-%2S;vhLK#6v1j$&0;#& zH&_wykVyhD_{`JFTf4ETxx#iV2{Z_DOv!B!mZ1bgg1E0I>}?)_w;tyQm8s_#rfG6A z&!})$ZkG>L$az=Uwd{JIMNgIbq^V9vrRv8~Q7WV{Om>s5(hWuZq&%8YIpe3W$fsZc zgEkzAQxDNbELSVrXnk2bljdWRxx&AnevI<7o^$V;Rmy}kb?z2k3N^MGupPQ*YdVy5 zp!=hq_{M<-^+FjVUzr0A?#2MwG$=`hi6iLhA(Uf;4ZW(A|{5W@am=n zPO9}{f#P4-w_#WVCB&3xg1D+W%m@V2(;ZO+2<-{9#w?L92uTcQb%I4BgVrH@K33t+ z;yepiR7flUKfnd>op(bIsi*6$v96}k+Z=w)p<{glg?XwLfz0)jl)~A}<;pymXS4oU zXhDo0jn55ekvD#t0R#vmfQLV3`G148a#>Sd9$)7sy`CZj|vAgR=k7^(Bs9z>< zA=CG~^gbqboaU`~1Mi_3U}*KCtO!Ar;`xzc69HT#0FP;gX7{94uAJ0L-aWC6Yn3*H z-Ds|J@^nlZq$m=IGbW7B%$V^KT8^0xCP6FKvCur7)h6z)u4jJZNMnb&X@Q-T8@#N`A) z^QLsiM>A?uvQjt4)vR>MNc^2_hcD>1nytK%39$N-4so)ED6>P+22Ur)x#JHW%aG1Y zgh$R`JW9IH3!WTv>+9eG*HoPNsuzix(Rbt9hEVAQl8~>S;E(W26X2 z_6|gr%W9M_voffFLk^6T_2O=l7p3%K0XfA4aRYQyyt9Oi%4^*W6}l8AYNW>J#F55K z2U0TbK4<=?hdaLY0FlYQz80rA53b)_tZ&rao>b6V)qEK_tG(Xm$LuOa4>^lNZzfK} zteB^O1ICILQv#M)ocP+F%Ir8~spYVU#K{!gya~I}jB2d*k>k&gX|DfyFs(J8_1^5~AY+-QV-d36!$tKC2GO6*)6C1d*`rOG z6Cva=q>?*wG~{79&O?p#<9PS+98)9hb70JuVS2gNGDmky>W=Y5tj$!VSfx{VO`#L8 zrkV6j7C$JM`emzN0+qU0YIbWYBFqtA>?skH@}WRa*R9#3uZqm0x;@!xN(;2p^dn8| z9#PItR5=zyiiE{1N_1NorU#4Nh_TUtHe&ZP4Gu?{xPT;uzW?{MKrm%g;kem>xnLYX zcU9CNY6BUSN)rBsD)*yQLn9Cu;~>u>;c8sM!|Q;|<|rOno!VrS9~(vNC@Xbm{i|Bb zn0Veel11Vk(r^?_rPB(7^-58V`-ZMetqQ9IeXgfvoF7De1yc#r^1N#6BbO|>@Pa}Z zbrEhvI2Jvm*Ef})NCh#5zD_X)4p9_QpO>WWsb0?2X@76Rtb5b0*B$}oz}Msf=ppMJ zoDSx5(cvIp*1~B90wL?Al9@P;Q&6w4`C}&%`4M3Ix2#z(Oz>O98GzX#ou*~GusN$g zEo@oHZSSAjz~ zh`{Hgu4MBvw*z>r-QViPY0tgYixk?LkP9QAD&^tLRY-p7H`7Kwmn={AaQR7VMHQo+ zpT^y?(^yzh1I{koX|z{VKS`f=8jCBcNcwSFb{b2Hc3^DA(w*MHX&XNBv7-1Cj2r-I zAY*c#dj~|uVbMyutWvp!?T~CrZh5i*BBH~qqv_bX5x0&8J6ZqM(c?7fW$gbck?(x-an_@;`a3$m2yd1U+%gs*Uv^h0r$rB z?duEnO`a8qT*@^jZrt9!zGhy>QC{xb-mkB1U%zc$?k0I`-`!Z+UbVyA?PtT`QIofG_tsT z!%oT|+W~P6_p{Umc5(ZbMbL0m><<&S`9*iqi*8aBSx(Cble4ycy>0p~x_Q>``@LIw zDF#VDK57o5yu?*A&E2T$K(Tsd`<5kgDT^<+D0;lUeQVYB$ZZ}bDI&tCNybu{rF$c% z`5V`_T~LNm{=6SMqi|-v7{+mTzqu3j`&s59qP@N9jHWacx_W#2hMjE*fU1(9Q(!+S zW27-WIBIhGLwAX-fgwPYy_!`Gm#4A*BTQ{0+DqtwFL~$f_JsHr1!vNMw`Xbz$ApD@ z3O|JJD(dUQATFUdTT9K>f-`@s+qZ5RT-Q*1wZiq=+t=;n)Kyq$H5Z*8uHSK4TXmt- zG=HNV>R5JXe>SZ#)zsPf$F@Fo!D-m}kT9|d?nryVmQK_rl0?{(IhzUDo=OA~Zx-bl zbZ9M|02Sl9d2?Df)S#K0!2vRvTnA*h(C*ybzI7c78uMKhns>9@mB&_W)+h}HB8Q}p z8bRsFU+=vQ^Wn$9vnSHsmSJzR#wv}5ivFmRY_xTJ3R(0_2pGn#aP3&A<8PQ!E0JDW z?cp&&(IMkAg@KUupU^?u390D>G~srT8ofgvs%L&;C#NDH^Je04n!IS=&e*JC2fSSB z3o0G0g~me=JwZ7OnfdK>J69LC!%N$Z?|k?2 z^vw6(on2meuXFSJKX|&m{p=?nef;v(C;A+{aEj4Rp*~jOcUr4(Kz^rno4(pD{#xL# zHh(Sh*AjnS;jgRwWyBbL!tb=N^Ya`0#jUq*@n387wa5<_`Qf5GWB?ZLa1kT)q}e3~ z>3qCWV8cjA|z zE`b*xtwr7a*uR!`-Mrj{ zN$Y+&w4-X+mt3jOHW=8;^>X3bc%pa@xYG}uqNaawQ+ zT;#{^d_h-4WW@YiH5<%LHwQ>RMc5< zbUsynb-sC$uZ7m8firR&< zx_f!ljd#JvVf$mY<>SgSe9GSb{%9}8Svl*i(n<(j?mo#N#1a)3UCPJCBWRbalp#km z(!Cf_d-l=M5v#QE^^lbo|hJGJag}be99LY7lpM)D@MS z9q)t>CyP&*W}ylzcdc@$8X<|%t&bs3^HDU)o$n`vbtX*`Hwbw*_;jT{W?Yr3ykxC0 z+woFKifUN11N#1U3lQ497)T)y9nH1Og$6upNw5jpsq+3iE#!sISIMQF*|LJ z527ZsI1U1ET&!FkteX6%b2?nkU+Q_H^>Ew-GxMA@CRR{L9JwsF7GPW%M#qbFGW57t z1F;dn``Muy4eh~E&E-7VSE0czqiRZ`QbHxi4mI^MkwIOfnwUvUFF1)V;Us zxY0K${X2>wn{mbuTMt(e7^I z-*}`=oL;@LMdH0hvTpA|mAD1DwMx~&LuG% zT5^nq;oy+E7ipCprg7epYO)#WgqJSnMOW<{sV7k{D{wpoS2vJD-!6KZUfHW@%m^DN zM!ep;6~oxf7aJsIrE{6FrK}5&yB6wgg^0D z1J1ZPtDNbQTa-*-d|9h*ku+23(I{VTt@U&lnK&Ec+!@wr0+kbM$Qm?9j||E20o(iW zp^&!6qW0t72*)qNm;1EfU9G`1pI0ZyNAX{_H**(pY0~z!^p+-H*bc?UYg}(d#jqX{E<1E!gW*u z6F9|SW>r+sxyraGW9P;jd?Xy!Gj9phdR`3gU?r)BO;STl*19mxWN5Al-|ZMNnH>&Q zW@+!m#>8hriYZnfU>=3n{pyF?sFqFw>;D=<>KmJz5=WmbVKN8drQF3LAbrA~o!5E-$*o!VN4|rEn?K z6QD+|a5;*eV~5+#Kn%!Dm=jbEg9}bGfL-?I)hxbX-9q$Mq5$H3Za8+HBxzFY zk9pvz5-h?-&0IMnrrjECI3jks@|V9xs}oWB^3;e1Ylh>GSz5aJ8a@e4tfDy`$0@sm=>itZ>9TTb(nU)Xvi4cmSPWC;Rqj}v7s+s zZN}uK zoe5?DtRPow%W;VdKn>;cKuellG`G2@bUHF;MHMGaDWvt zO#Wb-)=tNWtzF%$Q)RgZ4HZQZ+sS%Ivl{JmX(`U47l;ERUF1_ceDDH2a`GBY0&ETx4>CKQlD{7n zYA23U6+v++yCBjkM;y`@a82q2Gnpt= zwLts?QCx`yTC+|)z z5;Le`Np&}-wW6;U75?WMSkl> z8^z2B8HQY>Js|bi`VH7M;7bI%`zKW*)hsnO@*Om#2P~P~ph%7~ zkJp)l*@oBv&?~ zG1HewFOksv+DGXz%4F(C9GlP{F*p;XL6sPj))O4x>zTMdvlL$hR#P=Trn+ajCs+JZ zZx>MkK@Sct&e3}K+GR6$cm395MB4obRr&;yvQoN(yqSa z7?}2DI)O-*I;|RSI4TUPRpIb7j0d>SWzuG;)OztT3+zBXL97;tsp<(nQ)t7!eZdrj z0INvGp=biqaqxQ3+u^M+Ss#t~Xvk1+@M;ta$s17pL8os+cO#mYebfC%@R*!^Kw#n6m*URv;@$w6;ziiTKzCDNsmTS14a#CX*>K<$3ApGb#mj_={i zVS7A~$MaBNuf&hF1!J5+SEnZS`b`krJu`y}l}6T)G+sU7 zDI;1YPL~%m>%{aWd?LPn!6$ldaEwEuB$@IE65K!E9M{`bM9LgF%dz^}T8#|J`h;2~oeG^4IZbDFT zO@`dNvlMVckXfbKqHe~!#Ws`EjIy}f$p+F6Rp297edZf{)2%@DInG8(Z`#QmY@9~f zxq1|ytKF#3AZ#S3ah4`@XyM~9i=m>?&2;W|v?oH$#N0ed5OEhl+uf+(nQbJeAX*BM zSmVb|M`u5p^y|sDwRc2^KTI}ex2Ew!_2%g4YnQ&#i3(i3#a7Vda7ebCIudKZdbo?A zhKQNkjRBaedt4J1opLI`$V{&fjPA!Ei=km+Wp|Nwa+xKaLaS3+6NLd2dNl&gJ()Lo z$7}AXec=rL&!&?KBBg{5^*GIZ2yRZC#1g&nCunq%WPA#(>SBUWC&^O9QeU&%?oV5q zcV{P=tj4GnuFr5AAn`pM#LCXqXUyFlg^!x(JPW2AZDQ2}VLYsj@~y*k!639w^*N*` z)oAYWt>3tj`!@MEy+=mX_>jFZ<%dX@z9 z6lUT_bX<*H*&I1CYIdNN{eE=%0H^bH5vBb^M~+0L>PM#!$CdQ>gwH4%AshS`^_;F6v{n!UMQpKlxvN`_sY9%-8-K9)73YYA(@#?N)O%Mw-1j*Bo5Z^xiBS^K7gvU|#owyG|16;Zdc_MJ-d_bMOJ3Bk8>kH^d_ZYnE zl26SH@6d7G^a>xlZE=rw@yuVJ(Yy8+^{$l*TV=<-gB|-1e(`U|*s(wU{l67s$Nn4c zj{U>lOlimdoOBV*%-s5hMzSsu@vfdOuOD4Bd=DID=F>l?Vfhy|EOZNS^e|0|FixV( z8LpD%REW$QOjb+!&$jGW+(UjH;v)55Hin7DBaLMd{-~K%!{lD{vOlJS4 zkl9zN$?O;0en4YC`E$;UhPX3@aXX0fqH7wz6qRYQIm%KhaMbTVqjNqpg8x($sL6+QfLr=x!+YPU;v=>#ttiiZ$PTy-kpXjIuJ zekYK_5l(Pl2}V|1s$ta6s89Lhs{QK4&GVDK{80&WRXcCxxo_=2fTFy4~osIxBqMTfI*j#&@)y zai7%6IRG({CAOf0#@*Fs`>xl-N#ttkaO4=U-A=feTxj2(&90A7GYoR5ctXljny)=3 zEy#F~$#PG=K*xfmPeTYcd@D5+CdMIY?pz|Hg}RJ{<0uEVPMGwGO;2#m)t?U6l>H-~ z6@8rQ>i#q1PAU0quHjgt<3gp^t<%lKoRKm!#rp=7E~c6F&rn>h(i_Ls)5sg=-68An z-xsPRGn@posxm-&#UGx8#X4xsRV@>3GEHNmY+a1&iD_H~aZsHpT(_shw|A zS+J>(pN$igJ*|8$@$bz?)v!GalYTmU6b(YZhLHwvFMS;)1U&eFo>^6G9dC4fB-;Nm z?}el2ahg4gjyL>bKJaa9yovL|hw`l!chtp=K8A6W`|xh9f6oJTYxAl9_v=ToKbdKW zn=BZ~^oNVDye?51Nn`mfmPK+Z3wp!R?_OhC0XEAxdaT(%HmZekA& zE`f3`4S2!eT2z}FC|WOZ#2>}aT=k@+mH~jt4&Vg5DAcgj$|rj^aiL2UFry;{dMS~R zQK$!L0p(2cceMJT^T~8uH07-=iDgty-%BkcOjor3OttROe{vxMiRo$MIJ7DQ*&^ng z)8Gx`HfK&M>!?YkYWu6;Nva-&{rB=d>rq&QM!53P54A~UmAY-DFD{$B2~kXI^hV_gjY-+e zADRKZc5QF9TPVrMTYT!qIb5zCzj&Aylz*eiPGkVA7pUBlNBN3H_G_ECH_n$)fcL^wf;TTQgs7? zvudiL+U}7}8#R({>FDUDdS5NuK(hYWObJQs^eB?N(UO0$;G`}!Q4mgyz*2by$yCx9 zcHzV{HlM2Y?J4v4wz}=k10T7SuU@Zh;wJD-I(nEpsb?mS(0tKqJxO(%`ZTh%b2n*^ z{_MjT>EOqF?V~OPaO3SK+v>Z!+fSjc^`kt>;&6bft*BMj{WMP#BqWccE`!XrkG#gT zx%o&JXXQP5jq3HrRF!~!oOJ6o0Moc1@Y&f(_G|{N*Z6DWe!vv|GVYsIFnARGqmqAH07A)Cn1}JH{nXf13xVz$<&fA(ZXwn1C zeKa_KS)?yb52P7ri6#5fbho8@Gh5N>p-x_6{h|>X_cgeLMw_!u^omOu^eA1`CQCza zC!g`)s!fzF5GuH@ZV%__(rSa?``v1$)$uuj%ubYbhw0NEWSo=qcc%qI(V*KLPkf9r z%x*K#_GB}7b>KX3TNcrqiVpWqU=wZjCsGOQ62|$@WD(w2ggqYIz7;pp;o3#b0W+_2h{trF3Hy{)0kzl~=GNRsENt z(L9-LF`bG)6SsVm7%1;D4ZnV2G9i#~CTc>OpibyO><<1g zDT=gPMO(xU6;oK;@76TcPIRJg3dO||b5ixnhD{aRLh?7gV={8=C)iF*jwkJCx)sdxovC&-)*3-~l4zqJk?iM>h<-E@ zjTD^GD?$JuTB^e$tob)cxR7^({Z>jg>{B6xQ`mw*c+%m7%kG?~6s+SE!#*P%= za(=%yd882^PX)v~g0j*)?U^UNVP(=t$a9C3*UQ_}C`A9kk%rvB z;q{1ZT4~$qkEJ3>y0+X_)ph;0i!R!*A6j%jan3%(XTl$2KMoJT$3n%YXgr{vjT5?8 zMtIG|lqvR(toZ~2qc>4+T<9ud-FiTW?@%kcX;++b5xw(Jd_{uE=+YM;BO?mwR-F63 zk1OQRQJGLxaLN1qG>Pc;WaKP#>vVquLD6bCN*RAN4LFWAhyx7@x(ZO1#+HTj*qiuj zRi~vd5~{4sA!C74F>zlY3B@ksOHV}(ocMtk2e+KQ9GI!0FpoSoozgb1p%ioR=JUIE#xD97d+?B;xmy35cqm zCIt=<_&0D|aN|Z*rRma0UzSq!meeZsr72dvYBfb=ql=|^A%#DzRqcHKZDJGSf_dWe zW$nqFKh`TMf~KN}3w9CR-ORvkQ+06*8_`Lr)C7O7*5A`q{BTX|iwQ-IF885SO3ETE z2^5dQ$^l;fT*$p$R>0NXr|1-VLrom(DJvUT2se0fBin(Mt;scdE9S#L<#ayX=(!3* ztXjXaZQ!tU^L3K8gi(qMVJ~`9sCw`$>P7J>3P5OUO2{fH#B!!Qx?VwAtG5Sz4s{qVB9T&yJM@Is@iD-jC`uqq<3KA;Q*brL3hILD{4Tr^6y*e+bf(=}b?VOuS! zg9W|YO8e|ej!vf)Ro<|kTNv0pOamTKGKy^UM5hG64%x`EG`pv2<~x7g{t%|1N!Fth zIegL%8AYo%Os(0Q)A>YybuypGJp!(e0MMbG&40)lMgNW@V|wXCf6=BBc^x3JXxcNR z82#N+4OJu%>BCm#vPm) zX?j(8Ws^Cr#HwQ01iJ>eQtDK_^-md_2Y2C#PRMz2PkwR!W3AuId5xjdi_@)IzJvRV z=2ThooGwwKqDK-1JZJeh|hsXxRExam|GX^Mlv87HX@Dic?R zHN!5Rg_dY#NN`OVkB=lX%S9!2U^%6Qg1mCb6pi~T&Y2;)(uUGTIBP-fJELj3O)By^ zCOz)c#^xCOw9zYaLD41%CpM%t2n*~#lw>@3wuSBA&)HV`4214 z1K0!%uOnaJ2;O(Hv`BmDV7JI(|0?6kScBK$^K7t@pg1G{%F!S8+HE~@6fPd=vXCD9j82`M&KllAm1Al@!Jo+~NY2cqO z{`nF9`3(Pjj(?i?=awB^v^8Tt0C3I|qbW4**MLG-4>R_oHXh8SAB0SLPxAePB*u-7 z*6hGX)UP*?71Y=zL`c>*g>-^TN;%ei5@v25t*c_{oEBQ?t{|Gn)B>U&yn6LYf>+c% z#jIbwdSwda>X!7F)`f-;B4alQz|~u$#Mv76Nd}O?A!>x*SZ`YHN$**RBA4AY?gwcW zAIAwYX-e+^qwbc_{G&8bsXLv$WzC*yxO8t1(7Yp#3SAXZDMP@Sb4(Mc9Is* z*fh<$`A$yL`e&bWHD}HEvT=eN@7>f^{fJ{f@4bBK1wFPNse15&_LCUALew!&XpZREeuy}U?@D>Wag`)cX#${m-n zS*8X%|4qShZzH!%JYWK!c4{qEU%Ip0QVoJb@Ox#Fe*BOxb+C%J)L3_ zjb^1iqCD{IufR`p#C|AGTe|T&nHS5zZfax^%jTO@;%|b4ycg$rn$gAMPDYfA0xlUX z%c9Q0Toq}m25Ca4ZtWFLg$519p9_^99Vuc12D^13`k`v*{U)1oUcIN>DqUN2)Oryfj4TO2`lP_IB6;Cqei!?$c2t%_o~G_@*3_f9V<&)M#Q6@^}y>IJ)7W zBKRgnJ)J`hdW?zJB|OT$zi$f0Y^FQ|W+aR^hKBJhI(#__kE53(u6|9))88D0SsuNl zx^G)y_PU>*B_DT$I4b=TEC9Y-|I1WQz_lIil_`j{$VRLE;!c+7PTs3HT|^vT;L|mp z+ityPh!W(7lNhx0FBI-eW*fs&ewa7toYLemHrmfWHRo-$i^sYmt#c2T`o8YgmdsJ3+A?SP zSZ1aN+_-8P`fDI%s`t^Gon2>k9J!W4+0E!aGfqn)1z*`P&wPhwJ=pj3N~hVraePt+ zyVuNS*?i+lIVJz0DR8EAPE8Tzg|*4olfL#>xTVhia?bU7{?gy&?3#a9vTOF-Vm-DL z?q8nTDY9w)>dy*3X=Oh&p+Nc7Ihx>R711$8=S7aMy=zLS+BrBs>bbZtW9{4U5ld&- z7kA{HV-ssfu7mAT)oXa|7KI<^YYneas+4rI7v;r0H3yiBl!Qaj=|DSo$98%IyVM-G zNb@37@I*q0!VshD;;1X!1*sq5iSMSWbw0mmJyA>dQ1@N@pK);#W!sr0;*xJcMzfV7 zs6oBfmT9_XiuP30+QvAP6bk@gtsFpnK8n&K4RHWWXg37_K>znuE1$n<|17OslsU(a z3{;hHz6;hVrKfdH#nsnYcqP`Ev<;2l8vPQyFJ-*%^OBc}$nDqo#V#kR;uWY>(kC_o z(X(AFSw!$Y%C55{LQF-TQw0~g;YglqXSIGG3488y?W~sPmL9oRveaeJt_sL8E`R`O$?6}odThOJ^LJU z^TxkbM}$4i_&SjvVaNQ4rXhz7>-qo_wVH=>TYE(GT^7t!Zo&$j<+QcVE3zfs<5$5( zmMQQ{)uRgJ0T&tm{lBKOAAenQ>h-P011j9z;DhZO!!RDWT>9Bp|Cp+({iFYjx%A%< zF8y;Zm;MWt-5>+9`UyDpAOFi&D6v-AZ&miA)Ih+wQ=U(SGE<~#V=Ij5{kNY4dB3~T zTwZFf0ya!O&!If1vorrNg`Tg!``R_8We{3JTe<04uk`w^9WkK^KGeAw)z!^OiW zI*(4#%GC>0)WDLd`WEUn=Ho2F8DDi0p5ibUiU^OhsIO>URnGM`I3+Yq2f1q8=STCF z$1{7-xipgw1+7DIi8ho{=c^M+53m`pd#3`GT==tG`fY;6{d19fLy`VPMXnY`KYb~8 zfjs+XRg!5brnkNmZP!0-^y9+RvvpIkA4R8|$x*tQ^akU8w7KJ|uJppD+~A^u)xJ}l zmY(evVOF3_p$b|{Ys>Am&T6>{4h7PcPJ9W|DqX`gal_4(1Va;jgTZP=0wM!WhBQ-A zKQ3$@Z0=O-%@@!tN{IIsClRtwBCuLD9;sfMWl^sfoTJ+h(laz2=g}Jed>9S}TzXhv zB*Gd=ae|^8sCosvdK6~iFe;)frop$1=MXgOSAq$p2SB-3we~}F-rR`Wa%(Xe2_o@ zSVw2r)uyVgnl*R?pQ6n5(=b_VwHMoWSEnok9FP`uPtzh|N_tOCl2M#%-KD=kdnV37 zu6>YgOhq`3&KW$jP^fF0MF2>4NfXtn={=@MJsVIZedk5NnwpF9fav)qX!O1JK%hrT zQ-?$U<`mZ`OHboIK-5%6KJ#3i;gI@aL?Bad^r0)2sEQnK+aHYM-fL{o@rXCvFizrO z=nl1@&Q5SRpO3xsc-V|bgXm3s7!OdEkS^sV^*a6`T~baXZoCPHqX9q&k9nJuzGN}s)yrom+`ydp8EK+q-Qz(Y<~2LNgy5F96p(@W<35&W^aOQy1J3b+d`_^n)qv z)nd3bS6x!xj(fXmT-|J9T>aoGEY_c~a92Cmr{<-nOwEcE^EuIM;v;7ZM^poO0Y4^bp&FVW#|0<$xkO^4PKJY5)yqAJ z_zJknK#cE(veX0L3SVsCXeZ#3`l<=a`LWyivWpFvd+Qxy;e|#9fgdIIN=O^*vD=!C zU^wHM3cZG6SwMF+A#u%LtU}jWL#Gn3-PFXUOqG+$WwDAI2`p1H=UE zj=B*{=xEBWB;Rl0RwT$nfIFTA)L`up`>lu8xf}-3fbLZN|c(VKr%Qxh`tqDy1?f zld0p*aZY_iCt{5aO}6;N;7$+6ZJ$PGrHp!=aqkMdnr`NZ zVPUod2TN3DdeMYO)naXOe0}PNkG!(Ip)pf+zPXGVVy-0BC7++Y)ayy#;)QmUe!e~E zmu6V;hO2y-$zoSkwf*KdEke3ViVbfky;3j+_^*21>O2Ok!U71Hlo}-0t}Z6qubXPI z5(;!*q-#1PBkPE$Omjc^emeeE7O7Ajr)ggursucR{QQ2h`K_TEgyV!yl);9S+8A-7 zZmT@%rAgl{9!(eRDqOGYOGC#Q;A{=t&Wn~h3Q4O3`Y_?V>rn{VqE!>*!_!D2lC+*= zaIW^9h1j>7ZOUPDpQjii)6RMdMb6oS5m(N_k-}~b)Ou?0O|Femm=!TxG_U}jcqpv& z>U2Mc-PBD1Kq?=_T|y<|E*Df59gTCC)L_6p6uF|33p$xetY2X)G+?PP;hbzKyY>%VNy4 z?VvB54mvB%)^c;H<#>U6`hq#!b!;vuI6FIQI>9r#V6M@RPU+&=IZ14hq}*JMvgjy& zV_@6e+EKxS*Ooo6v1eFdLim_My*f!hsNoH9Y~@7?45|J&BI1@RgH5%AoT*6lPNLpx zHAs(n`G#qRvhGC~4{~xqTXq`YBm;FV@a_j&xWl=KU)xeK;kZbLVG;NACi|w)(|({% zn>8PQq{&77@;L4okUDGXRTcAowV>myLRx6&5&x?NTr1y;1QtAZHrT5LP5Dgf9`&Q` z6qk4sCKCm3c=?LosCgc3{ z>~NPV{68HJ41WTj^N*v9s>V3K?z}#JK7vkJj1j1zPy}c)$0kM!k|{%U8f7`o z+j5FuuKMxOQIzrG9kL^s*H9XwtF_U%P%mmw|2A`HXJezQV5QkG|D=v##xASiVpMkxS+x?{50k3+J>AO->`EX<1zg`fWcg+Ums`-DFflgP<80 zbqhvBjaqb7qs^+n)(p^CoAEp!hWdq+0YhIcMQ@w_xLrm$NKP{ug9>}SAXNfyACz9} zr$xs=N`1JX3J5fDda9?X=g`4D3i{|8bVF{d;h+u~-p+xZmncE?8cz+ie93O1S2?j< z6rqRdaD-qSRK^QdFFjI+X>p>LPm}w*vusS%CKnNyXv3^u^E}3VtR~}@0)reDr2CW6bb&$}D1#Wi zDG+Q*X?Jn}PzR%I5N@8dItufd&=l8hh!e>pv5igKWsT=SFH7J9usAG$r^YHxu4+6( zn3f0LM)jNNEh6M&Uvi8PWA8DEVFajadgnSnLs?U`CE|2SO%?rSKUNEW^Z3gZ{xr<7 zSW_&Q#b7is;#c5o9>QK}xxS#{WHc@yN-fe}k!lUAW)8MVOa~H7$t&ZfTyyYDCJ^~5 zOzNfWkNh@4USt6xe!>~t$7VyL8<`NN_wj_xkm_6ZwQoU1G*BU2KOE-;f_b5WK1rpf zWM@JhV3WW#(_jVk-lXi0q=6gQ-R+S4G9^Hh+3J7 z*aC$xHiX8wLBZ_Z^IQc^=S_aZeR`V&t&x!xANwz4d9R{1_F=9*lb&Uyd(NNS70hG6 zH8-brqU8M zPpzBg$b9RkNzsUsUUohzy62I;uFsMiaOP!baei z({TC=JVZYQ+e@MU#kr#rOt6T{M3QzVvN!PpWbyJ|0bjz3oCUiHzIZrIDVL$lAM^Ss z^G7qD*QtWMg8Z+d$nkv}QNJlhL0__< z<4;Qmn`UE_7fq)_Bg0IcNa-3^Z-6@>j^oP4LB4#PM>ihQ5~wloxKvD&|S!fBd; z3Yh5HT7~kg5Wjn4g~+;1IGBy5MtISMGQ@QtY8gFxkoM2n0`Xs2cW_c$CdMhRX&dC5 z&qsaoJ=zz)RNtdZwajYPivp^*cHIM*kqO-D@iM5%1f;YE1n(s8kqMQX*nn;j3Sa$c0-p*-V+y?Xt{Vu90b zax4O(eh}tGBPVwkR8m~YnGR0l+{1bJXTW8z%lqhOY>`K_Hm(d9qlvOL{h-Hy1C5VV@`l&8* z<}D@BYms(KgsM4Kw?;katqZm#Khc&2Q=XeL9E4bwduVcN9z+@o_)F4gC{wBS& zw3j?Q$YivdB-(KM9wWusf&TWRy~oxEsA5h%juZH&qh3srfx{5l;b}rlR$wRcnLt`s z1*8;1zo};^nrF@>ERl6d9qNU%RQKKB;3 zDCt~$#7&)sS&YyvW`;1qYjbo$@*DCZ8bJ}-!>JPJMzT-hBrf=V>%KaPG8h#Zsxgq& z9O_E~uz_H4a0t*wg$~C&{>Ndq7iPy%K~W+srxPS{8gcM(w}>c0&YPV3#BZuLwW(&x zHj@w;7>iMI8fR%jr*@=*#k4M5Hj88E)@qZ$CLk#JnP?k0@FBDUtk0?6{%t3E_}jlt z(L+)+HyNMWJ<7gvoz%$;O7mhL2w(q!A7ROEbRul#*kZRC&04+MFTMK;{!f@|c~mUG zu}T*r#RQw<4{xAyC0Zk@EreX}3136(6(v8Oo%ORpID{VjND*08Db~oE~5lmq?gN(TR^Z zSD`vfv)3VAQ%IW`+re=-HQOE9(&?ZdW!fdg{0qF4`NA{+#10||geruS@Ectfw3_rk zhuuxmgl7GOXX#VZg5(UtvU6a8#YZ^=ulzH-uWm*h?xvzqoVC4_q8WO9(3pKb_btqNJ$erw= zADu>nbVLW6F5<^knDu(Q22TC=ZnhQY)W@v<)A^8)OTd0WB`eBLdl#4Lupo( zZwLnCLq4$^u8b|{E|gEnDoGZeQ5L)j>Cmw`zVU>P%^4*n3(xqZmW~eEmVC;}>6MFg zaH>?&m(|esSL+TIb@Yf%!RY9b+YJj4#8mg9;Ru=)S!H#REH6(fNyX3kLh=fgMb*D+ zS}?y$G8+6Jf&@Fxg9x`Rak`tTJI-AL0J=G(Rxf!Y5auU3T8A%5`kCGld7RvSNU3HG z0Im}SPa)=QK!rzHoGUw&VW~~LN6~5Ai&R6sG9{lWXO29G0v=w58^)GuQP)X-RQ1y+ zYic_|a_r{Seo}K2MjgGD9VCPF7M2e}r^RJzM7~5}X(X&W}wM2=d^r%aHk*CTqN`5EK=!OzUSqX;gh~*cS+Y z%~tTfVK0>3xTb3Th!Y)e*v*49%-}k46EAPr6{l9JgmNpnOF!T8hW%PIgjwvGIt93K zZwe>6;V=)z@t{vGHS*JPoL=5;YLkRR>%^`}(`&`3S;gD*DFsm{B)3r#5$t?bDBn zh_0s8P6Jgd9|)kMNk|T~;#|j@o)|z0Hv^y;V&&(`SLM%>=kl z2X3j`TONz@EZGlVw(BRlkf|e#QSJvE_j9Ej`3sii_}7(su~wv<_ZU#tE31%>OQ);a zq^x>Bxty}Z(~Qb*Ce8A1G;R)!^fCJXGY9$-3=RPBOwbnSFSq$$+E?MBN79H%H}y`aIcH$(Z8K~?$|)E^Cz6)q{AqNy zowFWccz{WDb=rLt!h+k*<;r6@4g>dQMpwW(O}F!>$Ozg?ABdt;anVF9W0Jhyh2I!X z=Bj~7Suq{%!mF$^am|<@N3FDkS+Pz#*okCds%W!QKs&kMv2?=7n%aT?Se%X^HBA^I zAFSC>VZC43jx!F2D;s-GsM7=qW!LO-Ik~cpMSgmwN>OKZl7`LJTO5VG*Wq!r$nEHW zy4Yx4|6Lu0DGyGI?c%8{P@C%EILola)~>PUjANyUZs-8%+<;bfQ@1xXPk=m_%pCEd z4LBYJiESQ~ouXk1OG^*w=zGaGm9UZ{hQx(I)cF2o{V_ac$$%_3#V9@6FGbsUn znPfaZ2?}u_cgcfhHHF<77DkxE^yBIL&N3gTH8ao>Gpp*hf}2e?o5Ie#=^NQ#?}N9UquBaZ?*a)t=dpw4CRu0{t7cP7gXG8frcr~`AA!6Zpc204^l|dH%bH)|(5M_W=)nk4A|H0I@V;C7(In%Q5h_YVg(c*#1GbW6>6pE^$)Tb0UX+TBp%|lP z6S}9hg;p;z6m-lKful-7nIv~h>e`4vRZ%cK?hM5ikvVViBGbQ^bx*jo-CSqw4j1l) zd>XpSCq#Bd@hvV($tg52>D3wK)SN|SG--bTmRN{Epk;0-oTO@{CJ`a~%X;%&h+WUV z;kk2!0(P|vj~$J(QJP0MAL`Q`%FJ@)3%@hNXCNK1R3YLd2r$Ybgqx}QhZ(Bnq+Bp5ol|VGiLQ^3%_Ay1-%p9TOY$P7O~rX6+Xs+J zu2F*98QU#!w4sDD?K!E86GG+A$5E+f#(6rT*OTHg*^2iCDsas0>g2akp-jH)K|HCLs94Z=|>)zPi zM@I?tDI@p-LCZ#AE2l^qJXA8P3agZNM)j;XvGUSMIa+{C#S}p#GcB#R@CvikuCi*T zChCSR*2Efzi*FRL-~pSue2H*vvq5@c(u-*KuuqlismPwTj#WKHD`_>yuMkd?9N&sQ z26Bg(EJRG<*ZgrYhN@mUlUUpCRW$WBhTZY$R1Z2Q$CCV+dmL9r zhs)ESGvU#hF#X-+b?|y1ZE-)b7kV2Mb2A~#FEEhwFfovpUv}N6zzf*@fbxFw(tPB4 za;yy+n&7+kZC+`dU_W{B-h1zy z3%f6GJbfgu8tyJOh=;<{W)`ogNONFadKKj|9PV9!6^2 z06ga;tHZPSfT-kkmq*oXirv#4IZI>Bk4kY=!AT`VB}Ec-ug0CnGl)*3?40g22M=d& zpks@PThjxQH_L*oopr_6!L!nx092=2-nvoDI*A*QN{S zOLaFhD*^$W#Y_ctROn}|TNx>3ba+%JMT%fOuwe)jz|gHSO(G9I+?>YB+>BX)*BcN&;GJF4!)39{DLG1^weXt)m)Mm?R?)>Og9vuE4S)H6n%uqTZ)weOyhDbpnD zrnZqSXF{Ob;DJll6Yg`r2;+qYhQor?ezKnQoiX$lnb;n;N{E z$;YD^r9@V_OEU&vKLyO#nK||byILqjBAa8{R#6RYhcO*EthBm6Qpa5T5o(VO!@R8p zx6_(bF-dpRTN{y(G*~y8SI<57*@Nx% zXOE1ar(~jMZlDY8E0 zUU|CEZdm>CUlQM8Q&KCR9ZF8fW4ejU`CYK~_>9*=r;WRPieHkXk0*-CAXU6%T@In+ zZ*$a6(JbRcg=(1MujA$eTt72 zkWRa#b*BpbtSsX8g9`*8w6JR`U-#5L*AI~QZhJbLzCuixbfpe%GS9)gOE4B!!;Qd89!7&dG4+4MbuR$R|9V_TA{9&5@`$xiMu!! zsNIdlNu2e`XjmYR6tI*HQO$$-inHkM9O|GVmPynN5C042te$&^1jlWIb{c zLpR3Kt?62El|IPhvp!=z1LDLe5nSoyccm+MHyuXC32>IB$*~y7Y}@&&1j@z0Nak_G z1Kd~JHaCW1QD{e9Sbx145RrLG{s zDds{MvAPx+6&Q)5zUThX@v}9VI8xtAL*kS!=XF(OPKrh5IS0+Otsm0-#ExPeos;rR zebw+B_ox$5*)bu=>6QL&s=%l!@IG8w2w!uM{iG^8V-31Q31tf&4BFR1E!psJw2^BA zQFC+T_7k?Ca~%j4Ri&@%MZ(7;kvCh2iyNC*5fz))eqZaR^?o+);7NEL-{NJ_H21if zWHV0>tohjxB*t7vs7P%%zZ;4&8|G ze!=Z0nwe4W|BRkj`IHt8-^!F9o`fjqA7#&?(ID)>8q|+A@?JQK9;ex}=y(I7T|ao9 z4K|Wq+DGHJb`%VNs5-6);S-3)4_`jF^}-wxL#BdrI}laJEg#RauEugd2dV+UMLDG-7_`9_tfhp!!mn&7S3m!tfgwyFDI<{_~3~U?*lJ1Bp$vuA$!n|inY1-)C>w;GSn za9;7FI4^Q{zy3#m@K0#JcGv!x_UpeV`}HgCe*H!NeQey)PuRMzzA<+z%X_$#0d7A0vQM{yRN;l_5U(bE`UKIp|LMXKJL zSDjXCwb5yHRu~fXJ~5o{(7(-We4lHZ;ytN$pBqRQv=HvDHrsd6A>)CE6wWTcU}BeKckzPFk5qc^BH*pJ>c2YJEP zmb5TC3+JG>$AxO+x-ugSNOOA_Ww@gz9ONv4tm%&@G09weV3S|h52vTr?( zir&cwJRUgi93awojvC zE6iU@Rb1&^eq8aOVN`yU_FmJ^&g37*N&itah=;BVg|`V+A_HsBRnTg8mX>d?tlqiX zTw7d!@bJ;b<0l_%e)q$Vww`Y9{N}UWz2_f)^1bi>R(RO!M@Ppe@u#l`!z3O3Aj^yK z>Dim}A2y8riz6$W|P^?b_4jSBrO9cO z6{uU75?E*T1%>FUC zVGwJrztbj#PD14Exj`V%g&jJH@}jZm-9V^uu!60quUD-H!!QYtQH1-vd^M`KO?hY2 zF2+~AqiN%M4U6H3ce5UzMs}#C4HVvXSA@K}=Dmt}it1vT&_$gC5LM0Js2<9oi9mCS zdcqzK%yCbhpJ#fMLFoq3P4&LI?V=eUPnW=r;7FUGm4Ty2Omr<=;Zt^Hs3OL;zzE*N z8%+ga15cZjB6yw+v?qv$dVeKzj5G$tJpgQXIVA-^))1PK`)O79yYVY=jI=E5ImxFFE?s$NDOJ7Go_ zflktdijpEb7aG7M4Ct=AoMt!S36@dW7@0_=WM!om=w<<_?vVFl5H&s zFQo^YJEzN1q9n>y{j<+Y!))%Hu3YpS9Ak{KwxY7ore_Erg+*BPyHcWy^*_aoh5R{8k{>tHz&8 zxvrsX^QClje>!$)2hn3U7XsT#lY%3`-!dj#wq2UI?|Z&%+(%OXE9#Rhd!cG&ZP=(g zG}QyuZgrM9=lQ{fi**r*a4FILu%aY^vwuRA(3sa3BeM9+;u6%E`zTH#M~)aaAv@Zr zo|;Ru0|#&6vL$vPeHMVy9af2+wK7Oe;cn7?oX;mU-HE(E04Naf2F;6%x^(3!bc*h$ zd76MbCy_d6+z)zjKMUp^{_N+RX?9)3_=PFxVKD)3vSs;+5ox`(FqXmXMibdEkzXm? zj}>-%!{42AGThXF4(=Fj%&XYWyNO9jh!J8XZdy*oZI3BTH6# zn3nD5fOm`j(7Ob;Sv&nwUB>1MP{mHs4_$4UKT`;h<^rH51_!l zP&I2Gt2#e^iOvCVyDaeS8CX^_nNK8~1DcQscgU zYhKl?K$RK01G74)v7_lQZ2WM&@mmM)t%1V$kG1{%=E1iu%`LqRnrnCN_>*FK{Am*1 z$|M1O`BXQ#@_Gdf-K|s+-ik|jE^+x-1Zmuel&o_1c1US|zsc0oYTRucd>f2SNb9rC z!spd2>&C!a&Go9l%dVqc^aZBw=G^F|r4^nK@f)yy36O3vP50&#Uetkx%_*+PpXuug!WJZB zGU>SJ>TV1QT#CGyp3AQoTd!U-U(NkX_>^^Gt%GPqeTwyTnet4AB^tN#+^Fom%Mc^W{U>nU*^_b z`6+JQsc63L=Di}`TsnoL=1+0+UKPzZ*t}D*`qSCItO~(vwjf$joOFH7*>T)o#_&D} zll}kwWUUUrU-5=`E}{J-S9Zdtx#jyJFIA9QZwH+u%!?wU_XF8HU9dSEPXDI*7)m zxB%5cBpX>~spBew$5K^^axHuDW_Yna^k;!`ugYaEL}y74yFTSkWk~-l(e71I{g!Fh zCN7raiC_v&P)Ncb4jTwmos%>s9k9+0H~Q_oYPVV~_QTHOMX#$y1DhCi7N_-zj=(fb zFaG-~gGj!t0}ilE?*baaIc;pb@Wx85cZ2Y zAuK#QZbZqcn+f(i-~Z01$k_awk^wg3W`Nm@&7YH3k@5A_uP(|Bc~OSLL%H2^Xf?{x zH|H2ey^hYi>z_P%`O)U?-o{hDMXwvI-M-zreLI-FW+%@!wzl^+bSLfB-DbPB+H9|` zHdpW7u*>g0)ZN{^HaOqi+B7q2x2`{(?{2Ms&y3z_U3>i9wt4#oFL(6I?WL9L551({ zUcUakcbE0coz-iP{DGPD@@i*!X?1n^PJ_PPSy{S4Zw3pit<^iNJ4<)k4f=MsbNl)@ z{lH+Qz0$hdTD^1ocBjE#?=IiHKB7J_h-xECs&jYw&T>P(t}eH)jk`^QyY~-O>rJcG zYPVYLhkLC)y_)P=`StcX?532KkKXZ3P9=H1Qvtc_lx`QXFb(v-2j-|nwBx4JJ;`E zcjMW|8_!bB24dNX3Sa!d|p^7H84%IL!Lwk8lovo*g#~TR%`Ex(223 zIyyhVfr6QnceIrGORkhL0s^_RuDtnQf9pG+;-tWT@vpMn`CB4)-l>*5zl@>1&Z3!_ zTmQEsJD~5;ZQ*%Xgzd#*I9fE|Ho{?lWw}{|S@ZaZT+Ib@?Vd)(iJg>+l2fvF?0b-2 z`xI$O43DMeaUPyV>Leb*Od98hgzI3IE`47-LSCvGXM=7q zEphsFlmS-)a-(;WVPOK*&vExcapEtaG((fwS%#_I)c3ex{p@lEvzCnc5om%IO)s=D zOxvyI-R9k9XR))aj>9543(xg$Z9PuMjB}X9{o{yI(a|M(^9Iw;^>Bw7sLBOLT5v{t zzb}7FLpucnsD@#wsn+v6K2C5h0GCS>Bp7_8=RzQ9gIng+#=Oj)*6;}amYeG7`reuv zhWQW15!HD$I}6FAM@MmwN6=9Xm4pQi(>n>{q?>0w{E%lo%7BmZT#wtrxFKEF(zV^| zfp0g}PMQ_SvpA#6!Ja?bQOnCq>Ngw!>g&TK`e7V?@&Lw3iOL0Db0#5Mi7`lV`x~U8uG}%-odYUA@7oAs^X+!Q5Yc!+mOaec_tt1 z?d|NUyXDDz5*@1No7V!p=sBQMhu4E0AY1@B*H;CrGZ%n^=QW$I6v1PrE6oqbvC-r| z*?92s`R>Lu5mj_1!eL~WzPq!&yDRVhFinT}zid2+e)z+ycCx$i@Y%-R%MUlcFWo!~ zlSk=rH|k|kvDDc;A0DP3<(;L@?apfF?o#^)SM3-!%Er@2JKLL2_oVA~tGPt~wOeb; z%S)P)KT1O``pR6}Y#$Wib4SBgpAYc2e5tXM^xO${az|PkkP{ z=n6JjNG@{bh@xpiOV5~UgqNqsvv27(d~P9OP+XkJ7%%&A-zXy=ylE$S}aRlnU`hmRsG0905rZ^T?S|( zcP*Hu8k;n6QZQKQ9H!%>$gL*WI8LFV9>w0v4uddn^!pH}*XjlWuDckHMlu8eW*Bzw zNRK%?J9jl*&QqM(d(&#Rn(aobwY2Q1(4fI0O)ppXLYC!c$BXgs7TzJ~ zNNY|A7iaRaW&qd=j}|B*H%RClpt>v03r;-S#mk(780Os-Q*?1U&ZCT&1inn&<{fpM zrQ=ceEQ^b1a%ZYhnCE9{*6)s@{B@Y!zU>Yn${@mUv`^2X!^Su!#)NXWa^h1fpe0?1 z^-L z{zXSNcFv9)<3tKsxPtL-)E<#Q{7+m*@gKf3Lr436Zi`N9WjG`JOEB`>ULX&D|0{Id zifqg0x_hj>(fXl2P#Y6{xTGNj5mlPeF=*F@*2z@@OEFH8Xg~?5l)kK(jX@mZ68npK z*h-VQNVCTJCr>(`JUQ@E#VFlGI=l)rm-glD({$ub$?_+yF?P<5WlA`ft5&H(tRvUK zA{K|y@G#1%W@tNPn$q1lKuC1o#jJg+42JU_MFlEeCbI%e4FnP;rvbt51)`I%sCqLU z7migH7>I2TS}Ca*R_iDMHdTj&+u~A7zpD8@=_FOJ)3zlg3g&(1%nWMYwA*|XMOj|e ziD`UY;4gZy0)UF?GyEl#3E9F*nf4BOp*m;B&2Pg|GoAD=>Z2P#X>F6|2Z*cKKR#2i z96{|Ml4Pz(xiytNT=Gh(+}$(;mD$z-mrVI8|DG5>=U*}0QY$$PeHVSB=W@(&nK|a) zcRA){F_d4e>IYuV|JPJ8;e-0l!S!kVEQLz42?LgbQ7*U<)|3s zEp4neJFUhevL(fH8r+*T9Y4y8M{%YCRvMvJ(Npg6c{b=)AG4>i7@nr$zvl1FR((h| z{cCkCn_O>aTiVs=ioP_+dYHjc80YFgxR z5#?NulIt&-%h`3oawj*L`GVD-VQr##K);)$2hOohoZ_WT`Y=t3FixUONpC3S;#?_* zo0l@vOH;}1(zsNP>cT~EfI~ylN5O;Vd3YSHnJvo2*~s3M>xr!z3&(jd`#Gk)j?1_C zig%S4X%-$whCsu!<3})>nePO%1U-}II6r)xMUiR&0GwjtBOChX7i3>M;SYAlleXO$ zrEyZQF%cZ7qb!O_tjrvB*4^D#Ek5PUXT*?xXkdd)0yGF>>%nt6hx>f@!5X>NIg6rh z`dU=&*7BX(t1EQgT5UZb2T#M4;SbJL^rl$;4TfKn#ts|;>RadEg14G%-)smAfDbsNQ)`-fsbBcSt3~nu5q`Z#zZ-g51xGJ3m|^_eXRR%78@NQcg<%hw;v{ zjgMbGdb%4Nu*z0z9>|?d)v>}pKM$T6tJ*29Q7f}2|={yTu5+F z5)+KG=Sp~#9=<5hgv!0GokyF`rUMSjzLJsUP@kB6H+Zw3mj*I!__LvX~UX&Bt zt6(lpCl$J<(cz6f<#gk`dZ|g}k|}{eORCA;x%P@!gsA`VXtAH(w4RlW(i~@SB%!Vy^mK zS)bK~BrQg#|84~s6`i<7tNXqX?nO2yXHT%PP-(jw{(E6J-MUA=C@p4rOE6!-@JY&C zx6f?+G7FRAD1RxcP&3PWmEB*5M_&lVk0)m~8V?3lgA%T;Y@q|O6=M1V107p}6*XN< zeHtxT+*_^UfR&R@6Nk{@M@RAPEX<2++$+XeCA zn9yPc)Qjq|6Ej>lWy`|kJp$0r|kHkY2C|L}V|XW9DGkB>jdy8&rfQ9`*F-S+Zo zyJbvAPLeXXbD&`V8elO`%K(`SweI!O>7W$lCt()#c{0zQo<3gPYxjg8*tcUN|Bo&4^K4z7{l zUG=ufwY@yUyW;gPl4xDkoq^{1nbuX^nIzzwq*_;XXtIHCl51Vj;g_1&TQS}j%IxL- zywqMdl0JFDqXK|yoC&CU+u;AwLje_U|FkpPt3WUWe$~|Ws!j}9UnjS{sw0EWD<`*C z^)iv&K0BvwH`Sx3yR)BZmtGd0!4`a>4M{jr#E?9=ryFS-6om=RiQ1fsXsi`!m}TL) zs&P+T|3VIP>mj5(Kx5OUV#y|X2%(o)F-)JwzK^sOw@$K*-&nf(_nN;@2nFm|X7UmWkCB6&g>g&cHC4tEGQSsUkt+EH9Vi(J;-<8z=GcNw?E# zZOwk}1{lJucVZ(hS;P)b8VHZ#A|k7#0o#^bH0&WnDv62HcyGz|Ax_(VTI{5`dLh-k z@M_Rxe-C#Cw~W$t=<&E-lXtk97H_K4C_8X^jgr3GEA^qfh1L1ORCM8%Tof!Gh;NWL zTV*E-AzwBN;guc6Nt!8a`(!*cVA6Okr8{>3%g0AY@f+7i$vwQ^RUHYh@Zh?k8@^f z%WdMH6BA#|qCphqQNB0`aq-8ZKFhjD5Q)>>e40uOlQ-N4+A=&MRKV^3t8re3b?WnTVP91j=W>;GUc)8#%6MKuo0+M8YsM`&Kp`B%l zgnlT2Q22j9yoCa#6{>T4<--R}^8eDBlLKoviq_1v4p$@Hxj3OM-$R;s1E^t?f@Y~> z*+H95GY5KZ28uEBq`Kg7a=fN$*h-E2T#QN+Fwmxvxup<(L*LO zJO!l%7r#Aj4N&2LZgpUNC70v;E&vX{#_0p(d-(gxy5b1Mj#dTT1zkBnT0c$M=jNWf za}-eb9EALCGi+-bBArv4q^!GmDYZ`epY&ju3CoZBR(!lzLoMn^1?5&bj* zokh@8?Uk(u-&R?~XzSA@R>JCBq#$$oifF-Xuiy6r6SjWprW%UChB&ZqHbo*9PeS2AiqWOb{)##A#{4LU2erM^hrihBS~rD zo3ixviMQB@;p2Fq0yE@Owwz1#nnjV#pq8=_H(MJGPagwFu;}g2C%%tZEz?9Na z9#wJPlL{455e5pGFmP^#-LH41 z*jLwugG<$cca4i^Dmp5{9a9JL%tDK|13P{DO{v|J^b9^`SvrOzp9+Y3{%R@&wtxFg z+02k~=cUNbIH7|F!s|_%x$SCdPM#!wtu_@MHj}IBX6Ib~#0Spi+ze|L)Tq$U1Wzot_&*I`Hotk;`-&5scjND~#Df==7^0hQt5-b~|9((E;-oKU8wZOjiK z(M=P&GzsPnUrV5YctB^4RXyM@jfy58V`N50BfBt1Ew-tjY|PF;rlXVGz-qtvWT^_5>5?IxcQYR0LZH|don zm>KazOTb0iqvQ0>B7W4EIP+!Iv zWf0qT>u1Nf2p~#Su(rJ1T3)s@Tt7PoOJ%ZftN$PYS&q5|vvVY+-`4R-5QKAe;l%Np z-M#f^dld(4{MP^tbYDJ#8IrbgZ`O^nQZ|PPu-16{X#XGoNi?q=fBX~n2vW15X!%3d z1Cc&P30jkc3T$)kzNrE_xkTsq?e8=WJ=25PXBcq)-UQ&D2xIe?hB%-NW${-hO#D

0RGWg1~a%g)#@5K5_QI++j})p{*>kcY+o0A5BhtvzCUVqj(7hY z8J$>3J{xYGTD%`wT+Pmv-oB7`h^8P80WYP1H>Z*9eW(3W_H&J20!N%pT ziJSGKQ~7gtC(R2K6>|INM}uqi@!g*4s=Kq_9meRU-MT&d-C_6!zja!(yKQ`F&F*&a zY-we7cS&{C^6lB(Wz|)k)!7fwprUTv><4(GA~9k11N2atVlevwI;~6=nBBxUZ>h%G z>?U9{G3D7!K;%V-XEyHcTCdKhdO78kObo4yefv^T6t9y4DUjg#riiTmZ4DpspeG1W27~7 zk84q;Kblu_tSfhleT`}k)teb*8|uV`pa(k)Y2E^$sM1E3PGfHyPWhhK(Rt2%*v@V; zN&J$zU8zIN%k)DhAdva>aQo@w%_kCGt)AGu>0xA`+jQj>2n9v44RFP`z2q^69?N*C zp2pVpBOSGtBl#s6d69Ze3Ji;+{52^s#c*_yY%E#b)ViALF6r9HkdmaY8eoE&Y!V=K zBj-Rsla+HZ^rfX8+~bm?Up?M+QE1J>rd*v$rmPe*pQ>rpr@UB!Qoo=b-(5j7Ha0Ns zOQlQ*r_7ygLAGl(aHWbUwnr1Oao}{jsM6+Kd$aB=6i}``01TG#5CCvljpA7)Z!LV7M{9;}WN_zvWgfZv-m3|xA-DDcC8AHW6U zL|n=hrE20!M3OMW%)DAHqTT=ud|>ER|-r6wnJ!>Ur^paN{X z{iFbll$B!pjV4cvcCETn?plcl665^y!csRWEF}w7sx0NA7`UZ<{r{`dQi7M8)|PV6 zD#fMd-gaLiRGpKC5di5`2ZpA6nC;QNMz#t!mJLf{gMu=6~oa>iom%cwLkgaIHdLuzxDxz z)c!z1YE!C3f8BI~aN6&F-H}MunBqv}+d9M4X|F7|)vUzFbu1o5DtDf3fA9NhcVqAQ z&V>Pa36N6pJC!EtJRN7Kwh(1WIDk7P?nSC@ijyua&2u#k3VPTuYTG9HQWXC%PQvV* zawn+A(I6~PG{FzoeiSF;H;R%SubU@jLqp{hKcotAEx!S}Z*VT9NnKFN4!fq*HPf@M zHEh+ONSyo<=Sq2*X0G;Ir>S6D}%lWtj4UJr2~}zt)*Vr@y+p!1lZkn&1lKN>*n}T4>S0 z49`3318ZkLphQ0ABMu?$0yWFi@URO!bf&GsCKl~2`9U2#xZrJKp^bNRS|iNC^O;U- zi0N2Q>a0wAoZyJ>BW?V?ecygtYO4D7sEE`5 zkG(g6bK|HIhieXd4xhQ5yJwu(PGXJb@Qi0VF+?+?87rR4lEz0uB3e?7)V9>;lU!_qD*n!r%UW?^RWIb*nWqo;b_y z_c8wcB)PlpdhgYHuijy3rK?2jdre_RHF@;2f%5=N;=qA7!c5`3`rfbq$(COH3>GFw z+&GBY$9XgGew}FxuT}IoJvgqQiosKmZ|LewBZ)*u5 zHnqwH>*<939pc|jgpeEf?`A?slK*ZcgiQ0_P&>naw-G|-`R@+tc_;M1pFiA8$RRS_ zzm|}D327rINhdi8Eq0K0_~<00x7?mIbE*jlp*^*wV^I*bFVsc`epzHEgj~t4*)G zMHpLaGa>EoZ70NQ%(jczm~9s`!N%A`*TB-W!AICqLbGe3*_+Oinr*AqY7yHmLDS;* ze6abI&Ats9-_k8L-lA1>9J5x@S3TwqX!b(6**2}ByJP0R?ckVKvLrHebwW4yHA$o2 zU{Ub@qKtordHA2S16bQd2v%TkAq3Io)qpdEAiBJn|Gu_`kXJWN_n!?gx0aB0*dExX z<_sK|~K6HQkq5EF-_7^{Ne_8+Mt9QTt*Vil0 zy6O#kzxbtB{^dEJ`peqR=lth~U-ZnD;jjPtFU}q4{-=j`POm+w82jFD{p6jyw(Ngj z|Im*2y()jz(5`FVbyIIqfACu`eDsm2neUwUf`wOWQ_Z*i;*FyncfE*gd%=zG`Q5vZ z{_5!;xaXPsU-`kIqmTUVj!#tQ-}rY|Jn%C$uH7|r_Af7Z;hleb{>y&+wiopsdgeWE z4%?VD?#49B8#7dj<%UwJg~4OPCl;=myk;~zQ;S}6&A2grXl(94?f8jYEVi()IHzg5 zaAVHHxTKk^cJz8zWbEsO-RW@OEWbmqeg1d8bNuTM+O~i3&BUA~c{nWs`(&(D&d!a+m`e*d&}x_=!ZcQKrU z)2f9KpaF<&Ko47BQ^|V3yAALG=-ARpNH4^P4aJRzAN=v>$#rWkxx8iZ{?AyK4FBH? zJ7Sx+Zph#F(z$PbVcS6Dmp{Joo^K|;_|Z#xlRaOfXJ_<1FZ{}_zghU*{$Jl;-SvZ` zgMGQ?um1VbZ{84T`nUgl$LG%7^8V=1yIQV&$;|wLhw0&q-_ZH?#LxFWtL3wEUw(M_ z`R_dVqLx3LxNqdgAA0O(pa0uCJG-JUPQ3BLfB8ZC<9EH};!~M7teMT;_szffhbx{n z-}9=+%-x^=*w=FBeXqQ~@QSy*|Fu19|Gn>yyR|n&AOE+PPPV`4N3Uxeef{l^U9;ox zCBI4(|6}3&b3XEijk!Pk_1H&d)@;e_yZHOfty}X+=c=Z?fByGd`X6}FUtjs7gGbJ5 ze&h{W&z&#b@^|FXi`#DhXyWci_W()L-tfR}Z=HI-`j)}>zvXZL^^&nQryjRYZfJSc z17Eo2KVI|E-~R3KnEt{3M?N!m-P(6N^wsZu;)j2DTVduUpV(G-`x6J+9^{LDH{^s_Dy+3`VI=|uJH{J8jx9on+v+sZV&z|2Gg;@iTrAd)2wwdmhzB-?aYM@#|0h z;#mL4U7w#hm^pmZ8NT4ToBt{LwIAi5``sU2c;a;zzUZ$%_xQx_g@Koy_th8Pedj-a z>%p(>??|Pzxeq?~jQcH}c@8pK^JsujQJq1K%zG*9*S*_K&}D z=2tJ+@zUcb-u}T0fBlbN%s+U~JyzSxo;Q5>RhnYx7ysbOAARhLu-A`p1u9zm$bj~M_1SGUiXW)-m>Z0fAjE1*Bl+& z^^1e!16$wIdEkQI?$RGg&c6JU-zo0i^pj^l_PMX^s($?44?f*EKfmwc%dXMCHazgk zTUs{W_URArzu}gr{`AsMcHgk;8@nI;IB?XpQZBbp0GrS2IP)R+cc6aacMBl|whsP) z&WYzIPn|k-7JvSVCU`#GfA$=?i;#_TAz&0C((o*gfxzWZxxNB{1V!}5p4e~GTjf! zfMIiBS(|{xtkr60F(6L85A$7v?+;^zQ+ENwdFrlK-1)T!Sb^IJA(xO-Z)_slNmJIN`| zl|prcIuLCdF4wPMVAedyCw4X=&3*j$IfOK;{P!CPA%kSPznK7-HW6}HGmN&mg^=bA z>d?vdIA=~)x1U{ec7oso#es>cg9os-4fuUi;+X6*)Hxbf) zRTJ(P&KOGpj6nA}r)=h{CAybmfan-D7nU3T06WBU*ysWN95(zS{u?BEQT`izps@T+ zEItxx^t6OH>MgC@5uo>OT4e%n(nKmqAId%n>!*D7B z%MS7tfbWB3x_> zz0IVP)oky)?6NNLyL|NhvpW!ZPeN&U*GZXbg)FfD?=OncHQ(Jty4o>h;mrKlxrFqs z{dx7~%QDXa^ta5iX~1;|3MA>?DcF3^qp`R@w}A-C~%06iD^+%JX`mjAwl5b}JWu7r?F2_d_A z`O63)ckthr6GHxu|5gYgALn!IB80pLUUFJ>1up|6Vk`d*q~K+6CJ{oel-dVc1~>_S z+X*4R=j8$9zQ=!GMF@EmCP4_f8uo&Z^BO|P-F)sl2_aSfJ0h)T49DTy`K* z$Kmr@LdY|DJHUMX2XAK&tQ~ADA>=89kU8GYQwbqGyq)U_A%DhygLF~gzeiy%yqz(C zOa6Nt+T>+`qW+AxIY9_{9sfN^2zi*70h0ew{u|DgcK#a_xuVT|gpeQbx>JOZm-4xQ zQuhgnS;5gDZ#M%*&(*A$$1mG_WwdFHjDDfdAh5 z+a^LbO!r@dir^jixg9^xA>`goX==Ri#jC&3Jrteo`*>RH@imTE46s*V7YPxl*DKoCoThJ$^%MW^y(Y8=p?hWa87Y z#FX5?kkr5$Yyc{q=c@z>To2AB$4|E&B#oVkO~>VW*Gc`I%a^fkb=FTLXJ^v!neohg z(l^?xrP}Qk({>6L1zls;+PTTSv#GS))397NuQ^&)vvC#I&CRCLlgW50Gd>CxHuELl zDH@DPHP_{e5Tm(F`}zlHBjp;J~@7a&f&mq;A}+LvykuTA=CYj64JFU znltk>TBdnj`#b@$keuu~+g<#US%~1fr||MyqQ^BWTGF#ovGK=BQ2-RT@_D|>qSU3> z>m{7qnY$cWVRrkn7S!T!>2NuJJImg-e{>ykQ@lWpW;YXZZwuK^ru$ovZvpv%-8Yf0 z-a;`4PTovOBkoG^EI(6y-{iCr=(298cu;ggyiYwxZM9Qzw+((PEDM>+Hy9vU zESlOkgazQzUo-Nm@)RCW%iUi7|2o(TJYNxn@j6Sw885^7l|o~)i71LouE$4JMI0l% zlKT!wxwLh`*W#!^A8B!#V4>q?saj?$2!9dZ_Is<=h*Du2cCnnX^;@Z`boUPqm9uOr z5L!{Q995|rC2HFdNMll=`A$Up4tbFpNuVR7LQbeqME@OsSYCFqo>+4IHOHMVT3MJ9keD;ApY((x8kduPU9;Sf??N zy6t1R6+@|8ZAma4#8Im?n#I<`0F~{K$9=dH7kDr%mW;7C?)$*7;GW}Sb^A(IR}Ta z-Bt`r^R`mcogx(2q1j5gnk!zV6snNF4?M^MY=RUJ$eoGz>x?iBZo57#U&#g{+SHvt zy@Tp-Z|^dQofwA*eVk}13IMkBppJ?$zy!)=Ea-*h(De=f!}l1-fd}|V3(j5Bh!(Vx zsD$HdP&NYDY{O`5Y+o{-N@vDn=@>G_Kox2+;1 zr{#($HE%pLKA9PdjqQzR_Rcbmg4^eIX^^epS&dRB3j*$I+oMEl2%!4Gwn;e~UwL-?cd9$~FAWxlwT8jACRly%4o>CDZU)S9JdvmA*n$c6x%kC*OD*_%$!rIebbI}meFH7Z2Fp388wDS6VC#ag%>|aaH4Dc)tcaMcdVqvQ8Mfu~i%|d*72qfE zJPd2GLI~~#FmAXP#C3sf(ABP81M03_1D$+=DBN>35StgH<|U009pRv;Dvnj9h?lwl zhJEq?50Q1p+La({^RmLn4vu1*qgtgB&1oe)YtcxJW?hVJgGZXR=s%m^%*B+KhKnit zLeXhk7?&&cDV@#hq{pkrv^8PJbETDSsMLeNH%-Zvs0OIvP-{Ws?nYV5tU;{joeE$Z zgsX;wS%d|J|I<;^JZkgg)SBTX#~EV_>gmw@T1iRVkR>;UK@oX?t5jF^^$!HF)!kqp z&aP}@5DVRqADQ}P1a)5BXrHkmSYG$0Dw zIiXM#N3#mlQI+k{T-A2WGMq_H1Pb@$qwp0Gb$aZgR}Df^sY>teL8ip0BOW8e>TvJy z01^;34;)iq6l`swM`}2#avLAj)~;w)H=>~SWcv?26YT4XMtALl`(9o`x6%St?X-Qnd2dX)RaO4H`HP#E=pHY;(b>X%>}e zzr=$raZz<0EmxdHrJ~t(&9w4Q@t*)i%SZXc*9)OOK>W53?H&=#6C;>)l-=D%)!Srj zs_sxw6aY0WWrv zD~gdHqeekDPDG1Nxg@KBTxj>{eFdn$zWz$x1$D5Es0Z~+#r;)IH;hGO-{6PDM6JOG ztB3ivF!t$s0rSwAfck08vGfxn=*fbas{+FWp+?G@rI#?ghpmH&&Q67vXhAcWzSgF> zszp71D}WE!M~`kqB^-cT)T$wFdFAU^Hhl!3z}*SH39b+p48ZtsU+*qiKB$9m!MiNC z+1PjkSsq0By=Q900BG4hBiL?iNbj47Y`e1I@a%jtGd7V)&+d!Q0A*jFo}ZbCPq7Ek z>N-?CEtDWfv`5I%*707nw!OEBJc~nS6S;^mCw3(gG0X^f=yMARt7^zL4Hqp{jC4u# z$m?GEnGcR^_0ZiO2HpDwbORY@a~Ci^R)V}(sGdW*f^U^{)i7vjr=lr&jh0PAaf+Iw zKvW5v+9KADh+Y7x$h~wkQY$oHpgj_hON8DB;ohixaPARtuY~jyF2I#~#@%ZS--pm> z86;H22Qs`#Zqd+qQ#%>=^Q13c5H1iKzSQu_uN5^uf_Z5dXC)v)ySVFSO`3TcVG0r1 zJh2H4w%i-Sb;}gv7ld*#*$7d74ntTscQBTT&CLlzLixRiipxv)UHoubhZ>WBmDn1* zp7x9NzgL)w48B8D?x!Qxd+R2hNb*EhkGUOTn7hce?o!7t=6YiRRoa1+0#AT48E{IO z21K`D**4ft?^KxWs}A|IWRyi!0JZA0W@erS^<{Z_oR-W=nHo-~o-+-0Sq`>HjYX~y zC4fWA5WtGsp6F#%`4ul18R=!XYjR;UQZfr>PsIQ;st`-2>kKmkavq58Pf-Qb`)Q2V zn2*MUstBaAlJP;Eioh#|WCLU3Dc!wlFB6hNC=Xza%5z1E`$}PaAn;RlSzK&YQ6#KU zeQ*Heui;V7j&$BcMBzpopiN*1gKvU-0w@jf12lTA@A9%0G@4N1a<{_N)a=2`*xvZqzRbjI zGBZCn9!tl44FCfy=&0Mk7Jma1@$q;vmQKtfVtqAU)&RGV;5iQ-U>& zLTl%V0l2Nr#nO9W4@Fa8gDd9S(#LG#-Ibn>9fF~c%_o!bnRF%@-#;HurF|=DA!0wj0^6_rIxI;L~X0e{Ih zgIx*1ee$Am6Pv}&K?#aA+GE)gce#WJ#ftj~|7k5-17bO>0>ru3E+GV8z=H%%D#mY= z0gn@DQPziPs^S`q`ZqM%s20a|RpB%tP!3Q+RbbqK7eOpj6@iR_f{c2~BurJd1C15> zW-$>~(4&$|7OSJi4N3L7MxtDbpy#jC_jbEb62j zOE(JhHqEEalwL5>MS4SOcIF_>rp=?&*wsI<3kX{04F}U1W^)SzbzAm`7`TSB`|J)> z_5+9E>V!6kk>JI*pDF*uI!5h6{VAHzf4W{fw8hm9?b1sn-2gTRr|KKs>M7g0Fv|83 zAwBcHB+>?bAL6u)mKGuq{GH|%(F}AqV{F)r}UI1%YcnOtMbd2rVN_WWz zNQjW1YG_s0jH08!FbIatoRCU-wyc-6QpwCkm@cr#HhX4f=i-P{Q{$PrWPEBi#>{YY zW@WLWSn20ACdV3XQEc7hdkkxllFiaj!ZDObg-y!nw z^`VT$rQV6@jabV`jDxN@08bd$M zQ=rX=MeS-C*^O$YWNLZa&4TIOaxWr6af!Gw%8vB*_Ic|dAuL3dkCZh-15ZN(*q{)B z6}=5q1{w{-RSpwA{9SSfLXmi+e?Y|#VH#2=FLJ>Uzp#lAF2(~`RapU$V>61fm1o{o z1TFwWXVFSY%YlBP8}Ol1rJQBL3_8+(JPxAJRqrt#~c(z60N#Ou^D}G*h9LZst{`Z_tLta*EY* z*3k44MRg8Pj~dN`IXEaDbfXIAiJ{v?SiEWl*Q>ABR<0|-%xD5U}&Yf zn|v4qgQvPX{F@j6K+bpeCjkWfX}O$hr2v0ct(;ett9fy7l)zlNUj0xA2aUqhpKP23 z0`5^Fq~Nb_s9k6yS4lilTi(n8EdeSWbS-YqXJyI$>{L2AJ2ROXA9bCGpjNm~adSQk z2E*c@kh`h(A#ToR!5u;r?n=hzreb69%)vx@Z)OVm^n9Q)d*exVro`svBtA{_0MSfE zL)*DK%baC8=FNUTCGpC%9F$|*pgG~N%@@Uy+L{thfX7N|6byS{)ztbWxxTL-@)Pv- z^r?fp2Kq(Gr`ow9Eo*x!)oe-6!Md$?g`PmKvXI^t2t`9Q;gcTRxis&H^9>jRSZ5kPU;()O+KkxgQrFh>K zynU_beJ}CIzZkmOHx$uI72UuKv*vsj^b_?prGta-mH3uUZ!s6RPpfa@BCm6{3%h&z zrLNcD!_^=A8^VtLSMy_^k69f0)1a0H>++*IH(AS7;i%Qn=v?GQP_k9M#O}2ms+EJb z<-E;+HRx)&?Y!Ua%v-DajY5(ca>lw2sOX%^FiIS6BFF*rO>OYf(;wI4AvRQZ^m8~r zeV0@Q0oZ7rb!-qi!n?*&h#0P!I-gd9X8Bw3E$ih&7L$`NRp}O#Z5g5`%$hthsw&;f zQeII@CSI!2EjIm35J%C4OW#zbn=NsW46>4SQe5AFUy7@T0#3c_s2uLx5|Y)>>JSmm zXF+T5bbf2Y>&#{XLA1pIrW~8>%gv1x%l6Tjv;WwEcwu7ZhS`HR4jr1T>^^>I6z>=} z$ERYcbYjd!2k34CEoru+=WGgb`sE{K9T;?!Xv8q{%sDBq+d1<%wHAAv#R^hYe`W7T zX~K&MI3O;S>?V9Y`Og(}NP=^q*>#Kj_IXSYgKwW824-at>gwlPSpoQV3$(+gC>R$T z8XFHK*pj&B8oO`dap2^)!ED7|p+sYmt3p7L;G| z2LLxp+p+X)74$7^WAQZ546U>Xd#z9~SfbK7fMUf?#m;G9umkGnSV9i25IiIJ7F!o|99Rg7;c4al3n3~mvkUjUuA4-WPAsrXT&+*}RhknJP=y}c@a2-s+3%Z8po zo}G`cV^5(HLQ{i?r7nw)I0FSXND@b|k0$oFl!B97*vq%vCHS(Z) z(ICTOxuQ8bdlAsX@P2x988I7Q|M21sU~GvcL!b;r1^?cv3T%5A!oqVEKZF8ii39b9 zGq+%P$ntq30H0a{fMrMBPQe13=-}HvGdmv7#AgmbgPrsQIB(=Ft>!^+6GjbJeOJb=xcHaR3Tdy=3CGyp(VPYE2Qa z$E(o*#JvL2Pnm@d95VyGec*oY!fXf%L=*uTdpw9i45()?@yH3n29{j{8AevUo&iur z@V6UYs>xoU&1inlSULzO24RyypIguz(~3e4L|b=E%X186%5^YMfl3#JRH|6|am|r5 z2K<3vAMi3x_U{fS`{A+0dOWi44buI^w>MI*mK+_}URah6_x0-0;;b;Vco#F2a`<9Gy&r)2 zD`cc*&g{ncfeTS?w4qqnf?hK&%j5;7;r66$3%W%Y%o894g_PpqYeXrytrDd!6oJud zwOWtQ?F3c26NzMeV)hWE-h%;)7UaWhxquOV`R$QLdOR?y1^MkEUf^SL(7=uw%|>vf z?6?~XJ?^^0OcVLaNJpKR#Oe|H>@bAh!R0XCp^VNbIRPKeFPIo<;pQAuK!WGWtZgXTN`#G)V$a2aCx#lzA;n@%xZxZ}X=jcX9ggm8wB`r4|SN#KyP0kJne(03?$jqy*PAzg=M19!KKbPP?IML7cxpB1$jlo zL%Z2`ZPN-fz*_*cC2)=Y79d2*5mOE-)6(A$c-hsSO6{#HDAR$Zg39=50H8Kl?fFm~ zM7HyJ?1pba?1pc-(i{)X5Pr#iIT#gZsZ{`Ui1G=DZ?z8tHHdkw9^=mm!}vFeBb=?8 z!1xLF-+CLDl3pk}H42}KaO#8eyFh!CxMnZH&7}zK2x48ytSMy;e9#Te$kCmO?kGp9 zwxi@t^dOTnz79=$J%q#pfTsQZ{VH?=sAm2*ZwSLmwhM@r-)JaF%B-{;Ag)}sX|?QL znyqF3_jACTwlgehzyXK*3Q9L(j%F07;Q$~;7fjpMF&p7p_H*@^a&8!=7%rwjKLSyN zZEI046eG;8l`A!5O=W6qTG^4}KCsFdMk1?P?CNUTwHmofVF_aEkO4Z3*tv25AA|_D zT(H;caz&au3bqh7vf3PXT#tjNbXKiWq@p=RRf+0Go}Ta@wAjB7eLNYYeh0!4fbG7@ zp&|?kx<^J(Ya)1J0Q>ZlvAh7=97GVbU)#{q%kO6BbF4aVBAJ+srQ?}oIyL9Jc4%9$ z^n&J4?_62lw+TWqf-Jd_8DKj={&CIH%__v2V7e*9?SRkn(p!r)B<2%b z=d<0)RuPvR(qv2PVMDBGrc%ynrChbd=%|)8k2kn?4q=p$sb_)cR6o*%(xyS+q4A?e zIcE$lbPtd0?o;u@Wu?X4Exa8Z+@<0NA``aEstpbf!i&MEldGs4kHTJ8^ZwT%Vn!$- zg8OJ5GNBtO={^4|pjk$8q|N`eBDSNMY;_5!NC{BT9qQS`qAFT=kg{NJ{sK}Q1Mi~t z!A63<2yhE|mVp9`e9J7VBj#HMkMek^h%YqSH~@@}fxpzgp8j1ugAoWV2?4)hE!N|0m5e%D21En@ouJ!C z_)3Lg>_Bht?t00$pYzoHs?Ea|)d|&%Q};oUis{JJJNKfAYfOrJ~k756WW)=D=Vjvt`ufg4BWtU_|8HrhKfw0q##!ST65 z0%YKGCll$Z*k~p>JDc|LEo%$9Q_`{?+tNbdXa}}rotSY+^J1xSj1i%5HnBA`3$QYB zxmMsi{iWbmAXp04oe2jbipb~^QAENm-nu-#lr_)4A~`DQ&iF)Ek5w0hVbzy76Tvzb zXjK4IGOJdOqR0t`(EK(*0jH6ATqowjVMwQ&jTRB1KBzJrD}p1v?%2qgfme^$mWY{{f#_q~h02aizemd5#7r>)lK%GL-rjzG z$+lgz8BwQsob8HV#qLLWEkslmT2M3T#&l@u5&z=KwFFoH1QL`1y z`U>$ly;cCk!CqvSEL~tv3Rop7>8X^m1Fjy*VDSur79kk`&0ocv*ov~ofI2)l0DUq^ zB81{bVDN}Pdj?th8kmHPS9@R-UaRB4Bg`h#dxm*=7y_pKxv4u6$!m5IO&+>;D&63h z+RZ#c>Ub)bTzOboM~{SOAA8{*A^zkypcC461_6`NE(Cj|UAHZ9_aGaPdWrTfnw$U+ zjQM0DeVC`{6DHZvcw52J7BoZKEpcpK<@4(+i=1+zqDS4D++fw4J@%Bf?vgl{fO+8s zz|j^&lm-sB;UdZv9x38oh;K;t#p5;0^IJVdx-g6)iCBcZb3u|MGeF7W6RsIhI?*8U z6;+Pwc2z6sw=%Urz}6s0ir4}MSgx{ZfW-$;uF!i1=H`T-erAfb)_}k?UP(l_5PYo% z4*^^L>_+wFL_RB#0m(2V%y0Mj+`-~=ouV~bX)9FUN1moU#)qtPNnD9f8UH)c@KVM!DKd8re6 z86Oo+M$oPtd+q}6Y5ispi)4NK>=qXC;OiWo}+k?sMys zs5brp%nw1fT;4Ow?a+UB^y#GtTQk`c%3~?Vs@fu)_U3k$pjR(KG6nH575&#AcihFO3T-X3Ch}bXKV&ZkLL~*q)|fS z9H2g`f`mzGh=p|V6WOJLHgFVIU6=|G18h2QBn|ZT^}8n$7FdD@R96r6fZ#5L!-J=z z;lb1BYCBx8^pmIixN#?Zhlqd>imP4(>^RNDHu-5 z{FCuvxyL8_x(Uob4Bod7_w^5`_~APB)R7~h=3(F14EyQ2&jCFW7qJPt0)meS-Pq4*Vv1)P2_Y{#3*@Z-JQP34F1hxFjW_yfeRlQR+tr10+}@xfA^vg=q1H(1p;YgPGlBL ztEO3bnulK!{f0lsszMB-OvN%!=w3cs_=||hSWyuh%Ue%X>C%l{shXFGf^Y3?Tu!MR zdk`o?4eBf6!od@Wn7*YEt%4&UKtu5$c>cOZ;V94bdCRQT%Vj-R1nFS&_^21TO@s~P z@8!Tg9d7UfsI_iCl36U0{Y#YR;-~kYMxh2~b z`EsRpWo3mNdh@*L*x260Ogu9ck0oakGm|(8siIFz8|dvt1#f+=!0_Z+ECAA$x{eOc zCilfzL`6O+;P1s^weT^}&C* z@G8}mLC9CLUVN2mc>=7L2(B(Y+Xja0oT!6k6-cdZQB2tGiM65_dn^(~c7p1}(kz{N zB{%a1-8aIKXn9GvgICRG{k$faPlApw)QqyF(PgQyyFyKPff{<%jM(?gI$AR=X3)o8uAUdZBuwbuvWA5qV~Zeo-~`T=*+zrir!edS181L~69NP3C(-^Y zm?|^CGqX;5v`R&~2w@SrLbZ_L%qrhO5PNqCp;n$=Y~L`mWn6g0QAIM@13B7Vej0q8?3T4OohkG5Ck{0TOe$z0;eVK z&LgF&0`%4YIF?EsoK21kR!X9zs$h$F1&MHiXRw=IyzWeb;RP$#6=K7LGn6-9SArjj zUevP&CB)$etHH)vCuXoU=aRa2j6_ z74}-Xu~4d>$Y%#ag0P5lmO1RgorYJsQmPho!#kwg_yhkr`wD)}!gq*HC)`~@ilN1` z0=oUeyxYYfR)2I|8g_Ku!L9s6^X}n=D>Oa|#}|0&p;50*fki=`trtowPa&cp3q}ZD z>?O)hJIJ}p+`f)gskMly=P|Bk@H}ICp*g2}z1HAh<6G-PT#p_E*A|f^Kzz0j_YMyM z^%+`1=iBnsDKvL10{UdfZKrMtmpK0Kt>ouzrSmUeoelJW*3Qj;`-=xARu3S zLwsuL@I+!JGY5e(?IO*mFa!3yh2CxLM`)?ExS$&{W(m{wC6XfvySF+CS2BI~%tqeG zk2?4c!K-i!wo5_*h7T9%mH5xvBbKT`kkTepHgO@*r(`*#)`Jzhm<`lAhjmuxroeiX2iW1R3DoOk^@JTAEAElX76RJ~`gLSL}eCX$B#yRDUg;Cz-2114u z_mRyAKl@d!qUDOrwFIBkxQ-17eIz2(O571H!eb}uhG9Zhsgv!ePMtc{3^}xxElax2 z@py3tti#NjMr;^q>Le$d6hg=baq7|gt8^j-C6cdMJrGv2eJ@Y z6=F0xL#IJ*3wsTm5i4}YmI;L_5dql+n;OxQSMP^JQ^-Q(VKbJiJ8G~i4k>;d!Se1!^fHi#g&Qz+7-zDq z=?zwmjQ~FdqF`%*b8Wa6)9A8jDOez6fn9RX4Kw9!#yScs0!yhv+ABf)`Ab)+IiH+T z`Cdoa*v<^G$9@`Y0+V>b8H6nfC{y4WA6ta)l`Hf5OA2`xpsB$|0C#=klZTz&k%=ew zdoFKujk|-$_K_`%6mM5AnT{nBvGLJNGBz_lJM9N$XuCO|mCu`YP&H7ajFm&q#O8b! ztg6NBqHqJqY0PG;udj5P3@Hy!Z!nGNnC%gsHMEr(u$T8F4^VvTv0Fb#x)Nii_|$jDpcsO zEh}nf$!QDLWJN8>c@o!on}=ouXOAaRbFuW;-gq*DaTyZ`IGtWGIdP$P%RR|eG%Fgw zEz-Jg6p+u39)Pe5rV^vc_{?-FlbV^H%Z$xVPtVUJ(uY^PR1oD*po(V^eU97g!FVja zH=dl1&8@h}r%O$)yE;0kT+RN$crOWQIFlON8y}yaLXLJtivmd*#h}-*Y`YmPpJxo{ z)a+y?F_$?IORjjtkc(Kf=kC)+NMe_mnVU~TTPPT;XmB$6w)PJWO(P|kj!(}f4`-$l z(}|VC@su>KmcIUBXle889HT1J@o6_P=ZXdv4vj)#xS}Rzr2%#FtgumL__973k4?eC zPb6ojSG@AFkHDrwkqKcU1;1dn8%3*oi{Ms0@s^ayycG6G~{xeXDN2q*kz}Zm(6E3ESTo?g|eoXz)=bIm(>uE z&T7auIvb&lo{%a6>{u1q1gIseA;fRM!N`!q%F5PeErY|Da+eK5*b1?7GSkB6$C^x~ zW65-SifK4-j`BSNFWQd1`%1}r6JF|UQHmuH9gDMszaax%Fimg0#L3Ib$t%o&>MQ|N zaF(T$u{k_XJ6sM)9tls?=hir!nwp)QnFJtg7mSprc4$I_Z%_#ALe?7M;etYj_5@8a41ViRls1?BoOMCj1 zNCeW4S&^J(Q}!?d1~B%XUNCDdYT#l=t%yyX2phl9FQL_IiACZGyvkG!9m4Hpa=NTi zc-9|(Fr@2TNru)eUCU?HJ~T^e&S#$*YL0ZVS3@vE?vDTg`jV?_xq(Epx)Eiz)Z4kG z5?eqe0#;Mh$eTuKQCXz65{X#!SXH+$MWAv;fR1dJ*YJij*(~Y0(3=|@qibpfGh@^X zykP777M5F;wQRCr;8$N+>NaO-w=R~o6VWo#2kaJqh2J+U*R6-S;oe}&)prqj_16_$ zVcM&YZDwX=0)m7B3+$>z-VAW0pW8bZonB1spNg=ESKKRJ@=pzq7%18esHm26YYo45 zZv$}+Kd(FfHRSAd?d{~}H zs49}U$luCJ8hD@A1+4kmW&b-@ko61Rstc41ki-atnC{8bem}pE08&w$+K;T*A*AHrChM+6K0;OKl z%57(aJNOdBmEbc*6&FlX?$F!0tR}z_hX>+|3Z*^SrV|rKaSdgI6%sJx{%EvDf1(nK zht_|h5`L{ahtNMNl~5Ef`aF6IE)B?#+$dcxV!|y6u9sM9mwv zi`iafz3a-%UPa8=`&m$-(ENnqAv>-Nvw8J~BAJs*16;j6sXI)cbevn1d)*3+l56-l zTcL)MVv%T56-x6;n%Yi}GGi(eCCx7GgkLvk$2I(MkY;TYTmkTZqt#N$F6vG&*u2+W zV?`4v1VqL{ue^`ku4n;~G6mhbyaw@gh?pb*L{)vk zZWds4RhM{>4ZlaL=6xw>|68oX`O>W>d=0C*0+hq`13U<*(G!9k6O~=_{ zAU4&b6W~kyjO+}c2?r-ck(aeMviVwz7PI2Q^>WwLP&iZaxL(mp0S-7gRo2c;f;k>^ z(VWl9cYf=qX417~T#yY`F-AVRPu7 z?PKBrq@9QVLjUKwj-iQ}M0$KQ6H89wrD=0MD_fq|jV3%yLUTSV-*nd1st=J6sIg88 z+Y00B9Gjh)NK9tN6L{s$?{>U1w-v4IfDkPo(O`qv1~j!^D*c)li{1+&>ry!G!Xo^~ z)}x}0`MY}_WNT3X4!CrVEp>a^jA38uZ>-Mqbo65UYTs@SF!Q0LaZtDzm$egl(=v3U zKrMzXnE5pDABk$`fYc|{o2jPNL5h_8GEf_BPK4ivO(=Bed{`cfQ|Q&5(bC4B&? zXW2ZiQ#_J2Yq3X3I8asgAT&rvs0NpPA!{KYo{`A zRM6GU!q#s9zZH0aE!)gb&Q{U~#z*medU|{m8!S^t15DoO6`D zd6-!#LsyMvnSFTF$6YnNr;|XmA)6#z(LH|2Hw#A3-BRFizSMgrGKG~u%Bm{MP~l*I z5*<{P)26A|S{zj~dMaBYxNalnnsvVPJ=7)3ikX5II8Fy0N{nnaTKcoV!q- zGo6@8%+`BvtSRe;Zpy}y?cl5g_s_u1Zj!3Oxy42URXmQi=`<1p@8AIm;M>DYt)dIb z`f6U_Dqn#b&9Wqk&*AK26WK=CA)_ES%i>DfW{F0?(wy41(yfm4_V#tl7Gd1abNMQy z>l_iG7$?gZf$31_qf45$(q`7sxU>ciZS1>@MtlVYrFzrwI{1PosAL#r?Y zCOD%0Ga(LZpqhp4~;@U6Nt#|9Poy~q8@ivs;NaO^^f{`x1nj~>(^0r>q2 z)m>grv9f6&tLlzpBBr=fAsWjHxpAXZs$_biV@t`z$j!|}q(i-_jh(IV?P73i`IzH? z2{a^31=NLjdp;EItO=#5%`iDUwT2YWj^;{w#ikK=_>$Du;XYhFCTAGdvh zjd3;_Wm+tzGQB^YR?5`2wE|VLmU)y0<0ZI_1Qozo3G!#i`d_!S539WMu+e&iAxz)! z@PLXRurVBz5o7vXjA1Hlb{f{5n+$Q>AqmqQ_=`XuAys-;G8uEsVvU5wUUu8TSiMZ- zfImmG3e-`R?NV#374Jb0JYZECp_$Ziuq(Efz%Wq5QI*^HQj~Ptp$4^Zq4+bcR5EKB z%`lC{GGuIpFhKlOuoe&<{;UFFN^)ii%tPfBRl?f?*5b+)!4jao2j+1X|!9HPMU{I?kJUhY&&;6VQFoxamEC)^N=t9Y?Ndcu5$23dG!RJiF0DV0q6suGi z=Psy8;N)jBkaR6xfa>tWKityU81~0cX|O(s7eVfNX!nRZIJA4%J*h)Z;uXQF6zfRA z8UfI(doO{Lssvz$qi`L(%BG(UD5D?v5Uod6yz&CTDUTl>KQ?`M zbl?0DZDJsfVoA6z-)&FU=u2~~*X6r4&Y%aIZ!$*)4i4J3U8&`rnfZxz9z6aA}|53AP?N*0(krLsdy%pk^yts;@rEDw=R<_mnqpanT*Zt-9IHW zB)q%~18atdcJ*SEg7fyy&Zpx0;_*3%%b%D@$CC$Q@~Gr^`CCv`#NbDKq52ZHdpbUz zh@l=u+6{TpyfxS~9Zx3{V?Mr#4^xH@2G!>>1AA^<7E8xQV<~yVWisGL=*@CX;laxL z8J7Uo8`u?cjl>LR)>8Wtb7<6lAf8N2V2lFZitJauB9i8tOb8yy>(x3mz=G@h<`KXr zxq>&3P4YbaU?%(SHX#h~BmyBzE5n$7X#?Kqd^tdWERIBPFqg5xtYA4$`>+Yif55O+ zM(jo&=^;hEQFpLW`xj4_Cb&oBaMmh1q?#AGX)#wfM~?{jT~!U;SrqtU(Gt~c7D48$ zWPB9(RPr01Kd@v!m3>2@qsj0aq^M zMi2l9%=iNC144+rTY=eyd10~Z%L58nj%PyA#vd$Ihv)Zkduihj{1WR+xZOo)%8FJr z{j8T*8{1vDZ0-+S_4$D%ovvYC81DZGIba`H$_w*}bU|F{TsQsB*nl?775k^BH`QVA z;a|P4`AVj`sxFqEsw5_ar{ok;I_NG?)(cWnM;2F#o4=yK$ zdx!h|DO5uCGgNz`Dxh7#Hr@O@^?uMiGG726eI73>#C+GC+lTc`E@#fa?1iVp;A3M& z1Q(}@>k0lCy_)+6ePx-pK~-E$g#WFiVhFSbuedrP@P=y+RK?$uP!I&xhmDPE17!WG zBE3T2YdO1aK+N|kcS9w5RY8%T&(0IoRV9RdlZ~+hlDdC{vXm*rN8uhMvMMpTow=L` z(>clY+4g|Q%LggHY$Q829*zeDE5b(qXj7@cRTPMMEEM`V_PRQ|e9vCZMVHG8^wABD^N*B`+CuBVaWRa+n%Y zkiT+Uw4i+5!z$>h8BxQZzxV5Ozhn^KRh{P>-~dMgL8+A`;YAE$Kbo+S2*5qefmz{ z6zi{XyjrKNS_`{;VFILVP3Ngmw#>v2rN^db=f^V`)!IctNsy9>bWAkgG8n_v##bz;B136uBK2B;VRe}Kp@TLpL~x`g zDQRlCca6j?-#NQNC6%Ih%mw3U7>daPMX-b?s)d&dFezTIyQ%)q-&7+?mckXu6> zxX6g#_Qxc?z|wiFC$jW+H#f4*l7kI25s!zc+7^0|!35n~ABl$$jt_5L>dL37fzQ%q z(m`qF%zQS=z9duWwd~3256f%94$G^Bxgz!|PRbcG0y}-tY*XW(RaxJ znWq-bqls?BqH?U4Ht5!(Pax3C&M=_7%mqqpT|niOS>s@7nFUKLm*Iv9uAk^}YB-U+ zr5~pTSkacavvb{j6KgME#V=XW!l@;~xbVUafiQGY!r-uPc(@mA_`O4{4i0_0$2IA2 z+ARTy{inYg0CQr;5a{fNcIYw@Y<6?WZ9=+^mmE>USy*(*;Kt(`L{rZdX#}1NqS?Vz zLUPG=>g2EtgHa)PJ+MSTBFJz6m*h=k4RaNfJ;Bx>qX8o7B_70Pb)%-!Jhh5CwQ!^` z^;Q_j>d9v$3{qbuAk|q|6krO!l@fJqh#R2T)W|E9s$B$cPJKZ@CPWulG^>_UDVhdV zOib2x)G;f{aa|MIEoH$n%Sdn`MO)Q@cmY)#px)NYl@e9$hz5N)aU}qD-5WmKp)kZ4=0oC6Ic z_^?<<#;w@`b=VPxKUa@c;L6edhf}9cUBI&F7Rpw|Hon-RarPAk^Yzm zITHWHa{*9CH^60@1->ZY>7W~macdUk>^daD_58LI);b}_<&(6(!OBAW>s9obtYQkYb*Z5Y z7%gYwGY4P_URh5Q+C;!8omszu_*BxfQFkovNgEF z6-&$Oree_?)sNS?Y)S^M_4AX?L2P6xHJbn&AGW#U^ !moyChhI@BIFqGW`OL zfgZmUoI8DoaWtl5-g_`B0SR?;1+Mx)Uyk5bE^rJjmq9-%oWlh>^)5qyW{TFs>&N30vH7WVW-7+AGV!AF zrPqdd)iNtII!djQj#%B|T!-LSX7Z?9Rj061t*jwNf&*yku6(9{@3i;uragSE|{Po@3X@ zE{$Bzo@Vgu7DV-2e??6Gnsuu*=d*r+^4UI# znDVt)Jtgf6qojj8Q#9KWK}PxZF`mgIrLOZS4-o_W5>)ikL7N6O92?lIJg`g@LQ3M4 zl$>tms(PJ-A<1mtKWHFQ7+Z=) z6uQwCA$<%AHGEYYD4>O%4a;hLI<$ckV@{e>euD6)elp;<%aD*>Rj8o;;<3PLRq(t_t80V{Ax!RoA>oMtkwJPN?Gu&4jri-t*2Pij2a6qB73A<@4D< zDTd(qzV1q41oVP<(1MhB)02oL$geW!!2|E!h6i4=FAj8zRw@C}y>KEu1tHKfdBe`I zUuqC8P^p37yZ&mmsm>k-a1>IU5%L@=;fu&+4gb ze;9TB6b~cG8W+@chB`IVIvT0zd8)+n%4o^VL9DL8U2jE?z%KO|)RBlFH;IShp%D_V zGfa%-1-AE3@wiawzL#Cu$l4n=yap66Y{lx)W2-VglTzlu49mr>?!f_da3JdBDr(-a zMP8(ccwWu>o^Msg>4H`*Ib1tsTC5w85xa+bhlR>VwBs*tW8Xc>M0!f8>7|lVfbbr8 z39s02e{bsrVE%K|;@ULYxs|cB5v603kLL>%#fh*GH z*ybo2YU?azeDBztl0sbJ^WPd#x`%eFL%U(3jan_~hSW6Z{XkM-y1HN&GwC^gJu3Ck z*FT{4^$&P`gj{rPRZPczV{- z^9A~J0sQXxVEB2%=HXmm7~nXf*hRBi%0om|n>sMt?OLfMIuawRql~Jr*j8m+x3z4E z+KS;+lpNrwVlNswrd)MTdT1VOLqNkym81#U*4Y#Z49T9ffh5k`p31B zs%-CN!wj5$Ta^h2+D9#0w{c@QY`_}vdoY&=E1L$_sZ_zD1Uzl@lCWxzDBFd;1w7># zZnG{M+!^3ex1|xul8ypAr|xeUovw*gBuQwxVB*3#4ztV6<;<$#^i)dpM2~Yknk#8~ z8447r!_?j4$x*ne0nNB(J5iT4VXO(Oy-)?22zHH7pihbv942i=fUJTsb=fI)3<6&a-b(1Y8gP?FrpT) z&d>dy0f#Q;A?+I4*+{9hhCp6lp%eCWx))7Ous~Od^x+Vda9hFB7BoW(R|ub9Us}EV+bdV1| zQW{FVl=cYrYY9UCouM1>Ha~TsL$e%E1{_SP4}@G9{)ZzLjwoqYbX@T%ppA$@Gg=P(Alvt;c6_Rh!GJ!TRO_q`3ZMIs0)iNWiW<+Ldu;G|tI2Z2qE?6sto6VOH>mftySoW}Hk^9z)QpNe;;DtM1zyK(dh6>oqrIWQqoQiC z2t{jK<7@A0zwc%`c8w1)HNIm?3}E`ObKEeJBUTsIm|B{dSeY?a;6~P%y=2TUtQa$| z&n~YlC(1Wo7B%3bXUmv`pTiYOKEHbHnq09k%7a=$>Z3Kg3HRJfFIUc=%cdVN2J{?l zv#}Ni4ZPtsJ|}&-rv7DeHpA!uIYBeV-iNHi~iL5Z)7kUC>^?ei+MrPYzv)#}NaPkbonu16J_c{@U7;nNxo70iya-~TBjdHn0 z{}Y|cfp`3-xd&{$=8H?Sa}!H9jjJ;^jh7)670V4uR^lH`*h5J;3Oc4Yg>w2E6jU{+ zXhnRG26v zxSe*lTEPLr(h7QeK~}@|CS{W4lGiawoj z*Jf5`08iIf3~(1st0l1gLgAtzkzJbyMRN8;Go~&&jp^Grq@E^k1;DC|n0WDAc#6U> zDksl!<|B|uy3USo)#P-fC==dxv{|5*nlIwj(1<&7S34drXw5d|_B{S{0w~8 zDK#2Tj&_ZQA7*|v^jxU+am(5qvy1zY3=cKT~Zzi4rP8h~N+ckCuo6pO}XZWA|(#bhrV#wXJG`Yji; zpng6*&BSil&8~6Sct7PiUVu`AR^7y?T7|5uLhe`2Wh&VZlPFS8#Hci0GA0}=h{9}Y z*=A+5NVet^8n!>CzO@$iTTPoLUYXYQuiK#Zo0b_YM`jSsd2Y1PU(=^Lz_h=y;(1PF z`>7~GwAP3Hj_q!OC_eJB7=!)3=~@njs>-E_V)t%W2oRl~FRQY6lUSCbO_F>HeQ{Os z^sn2N)130$b-R^Ag8hP((xflQvmxjpP4fg9f(N}GZD3CAIZd@sC4N%1p?r-_79{QUhN4Mmoivsz?B0)asRGF&wds|izz`Y3Za)KCAiThiD-CXqY z=&B!*WVo7SFT?2H?yniukxcNNq;TO+|4s(M=?bKU5T1T9V&>3KKbYZ)Ww$m!wEbZ_ zgY5ow&x(rudUe-_K30LeWG!D%GLNP$kuxe!kR%hNfGRgSb5g zcH^K@9?w1{J)TrkDK~~kFTjRXv=vSTQZ1!a{FEM2@Ub+f;{$X1ddCVtv%qnFisjo5 zfbdC&GEqn~R?1jGCW@p@!hpL@m&X;MOU`DhnHTc0IOXdEvdAxaJKKQ


^rlMTlJdJXbTo+F!HI1ns>y2r$gL4cN<$Bx2^BV~y_eY+Hi3>`D z^KBgL0MK*{Rxy#i9(dcK6=;xSW}W9ddh|H4KLU6e5zYGqZ7{yhR|6j6CPr-FJk6m> zn-%REzHp@5u3_C5Qi0u{&y_!TAK%Z4cg_ie{9|s<=WaX?yluw}=oEdg{Nvy!4My|! zlfEra8i=ywPSQp3H$O*gyG`qk6&T!2X@H$-cXkXiJR6=%XL)?j?>J^)m_cA*gJ>zR z%tmx8q<+MltFehwAviD7qQhOZ8I}AYZJB|MTbmbeEYXFyLviV0$A{V!8g(z)Fjl-E zz@e^{zyvk&b2F>lFU%~jVmM^X;;@q_B{V|IY&%vMIy=0?WzRK(V9;1HoAkbB^EZxA zELjw2cGfbv+!qK=ox!aDb`flY1sRu$sop+m_Mv zaPGx)oO46zowWkre;K}LWZ4HhLLn;77dphw-QB2}n4LORE=WF!S{UAl^ z%tRl%YnX*^(dj!(rx2b>_>kEAyioje z#N_1c%G`B%8R**LwbjeB^ZcH3Dp_Wa4=*r=lgLLHZlEhL){85-d&FDG+rwu2wlCdt zj$Py_@Kz~s=1YS3h;WyPw@PrheLITIh(f;9&q3g=QXD~wP@ZG>fG7oTmE;(b6t_d1 zV<^x?@7dD>?~P9n$kx_IG>^~;JRDs7pU)HjKPkk&ELe*F1>bVThIXUfaU#1&tL+UB zN6Ny`Y|$C9z}vLMse*~Q>x(2q=dQ1;NU@!gak7xKjPqO=47(nSZo$1>jeZkHpC!12 ztTk(*D}E>T3x3*br%mmmUsvCisdZ+nKJe#dL+R=b;`*{gwA{ z$%3~M8}WhE`*6`0kn)079p#?~mlYTCWW|pO&s`k2loVW#;%Z{s+p@7^oX#6z`<>7i z$z!X~)1YTf+L2V{uv;a4sFW8lL?>J`CrjU9zkC97yZhzKKTOKACZtiG9wg8Qagx@8 zE{t6mtI%;qCrP5dUeFSs8f}ZKJsV`jN{(_=lLS@mhM7FN8mp93*Xnf<eXD@(fo3urFMf}!Yh?V zLZ^7Fh&VVUjptC3(Jxgis)2NgMVpgr#?s94ioyN!2wFlljk?*`?7(A%jcG2;ki`s` zQUzAqi!6~UEj1IAmTt60YB*+Mw&2l*JaiNrfz`y-t)>%#?vb;`Unx37jKm?4S>~7~ z&z6I1N}f5og*9x=^L0uZj^Q95{g}Q@05mlNk9HnyBjSgL^3)oXQW{F8Kt)ZQtm?S1 z4HR+c(zlukMMmZ5qQD4LovrSiEsvhvY<1qaG&#L9e_`t8o3n3(JLC0sXTiQQdv(bg zx6e;q8EafVe|>84jazfg%ANY$h-I~GA*de$Er1b|)J**Nzn7qTAk$AQ%+B=t=wFsIpZl+-L`2v@O3Y9>rnGy;1&*!OB}cYLI6W|A#iwfWEk_# zoC?SruaXtO<<7DKNsMKiAP@Q{A;9^dgpk19a~T}Sv#i-R+)p*+rS!>a=vX*rIVR)* z5b=1j7Ry&>=d;BxX>E8q44qo3WVcO!$ht%4&@m+htal}0N$+;~-2%4&5-*3w$A@o%g5kz;n^IY z3&|Tv)D`hS2(rANvPegJgN7nzw`IF`l3w$a!-qrL+uKQpn7`K5L;s;JS4g}NPrn_z z9+<(7I&NO8TmZIo7JMUj@E(p~sCvg=U`H{67uWrE(R6&&H>&1+_e-ps!cxmr}e)h2S;i^muk|V$q;>CiDPtt-A8|mA0)&fGOt;NyRdE z%!l(UUY_vfWN0cuQU{QQboE6bu`2fn?{e+B=1O3C@}dGwBYoDf_f#m}yEXxAK&kd_L@n?rWp}-vYPN>>Jk1^+Sttd$ z(Hd%&gm}~ZvUEd{R-|4?7gb+O)b#B(+%c;$R+gvM@Cb*iv_WG{j|e<3;#ZrG~XzGGt&B{4T%E+-m}M<&m-hGNwtlhNi@V|i+6c5!9x((JVv2m|A6 z(`$6F%(@1Yot26CfnGwa-XJ_S--D8byPsx%oAJ@1mv8y4w{H1X>#df({+92y-fD#5 zTerfu?1uN&owoDVwzs}cKh<+t1X*`{JFr4yxZF(FiXZP=bG#N7ll54+^XL;Wwp8wW z*oO`k&mw4&_ld6C7X=^K-<7p=Abl+*V0AAEonrfbx`tvOKf0GCO~Hd2MlG<%$L>R(KCF zthGUVO&NtwY?;ocwL`}!r601BdZ|i-JuRwH|4fy;HA(295IVrQiO2D;W zxoY@#cC%Xcu>VFVm<2Y-L=ABF=%QA+`M#U(?lI&PpmSb$20UZ0t8##IyJ2QBH z8QB?ad5dQiuiBWV2=gnjG2hFsHEICjKBKvk-o8E&`6fndNrF@syVvBivT1QS*vM_?FX4rF(0vFplY{G zw^=jpr{5@NW-t^GQYNr&!<8Ibx(wv0wu`Q$f>T5JSb1zbc|l^1wkerbvVMFA=$@iO zZXlB&5_~U~Fyq>ir(zNo`A8Be1wZqfzC;*hfbJyIa7@Ale1g*{T^F=M0uS9E{Xujc z6Gf8n{dZkALmX!MWg~}6QQL<|?3EJLI9)7+rNj6i-o;^jzEj7ud24Q}2u;ex%|7@X|ATpg?vfOAvTLQNTSmYl zc23x#VH!=#>D;jl$BZnuv17C?GwcL>j~Q<3pp9$|)0Gi$rs4$_Euc2-(09xonRifr zAR-FvdWTd-?rgcSX+?(Pg<*Qj8G<}3vNx?@sId{_NE4mf)(p*~uWDE+AyidxLQ3tY zJMtyfI2Ntc){7iD1;VTupl2ZsK+%Z+#cMSK{3nvdY;qrxO|?$QxQs-P6L9sTraSi~ zNhRrltasYN$1dXOlYiMXL;9wwIf=afr@AdF43N=MO0i?1Yx|Z>es53D-CVwYZB1UA zLSnRS2DaI(V+l`YF@mdaPTd}vdBd9;S@p-u3nTvgx;-}Bys}!KIloZZhTsygq@6*B zrEfnoE=5~j^|j8c&Krx)_W1PW+Y`6T%{Rx^@4R~9P4D{bZNPeh*K28EVI=|Z5mC88 z(FXn2CcRz9d46fPmu=G5R*uldcq)uvs4_V*b#--djk`nP0}4k}MZ-j#>rtKys9RfH zUAmmeqPrQ6v-IJ1ndzCy)yq0~y$#3Zg*+Zz4yE6eC7X9ctIaSx%AOyoZB9*A-|w`i zg3gL}d46=PaeM1kuYKXx@TS#Ve|dF+7ofA_{kqn$soKc7aP8W}%IpFykjT74THYh=o$xkI zola5m`T3ct-O@`KDB#5OWRk%IS;1$qtXnVLd|l^Pf}uv!t8g#ev@e!N(-QnHnueRcB%s5?!{zhT zok+Z}l;|J*8nwf2hu^f*hlEQrmu6qrsi+(s472%*F7!!g z(w!_p=jg+*q7uR=DSl=W)zP_7b=xUQoJS6cuB()*wED)YktPTo!+AJ*j0#zrS-f_0 zWg&y6(Qar;W=msA9~Kl}JxL|4Tw7kdF|#y#>E_zv%)XJ3M`ZetaA=h4`X}ZlUSC_9 zSzf)iLiZ-h&d{$6JOWcAiJoT`mu7EFtjv&EZu#c&%FNu_^z8CgokDSpMRMLr%DKkR zmJy9Eu1;Q?o!TwGK83*a1XGC9YGsC`pqfb>Yu0IMAn)~yoz@G2S1GltstRfjG0}An z(Zj$hSu4r2@e-ua18SAZ(8v(2V9GH*-@u}6=BCQ=-=ZC9GY^UVgU>rI=FK~9oZxGV z0x5FVfs0G!R&F!Itvd0B+tebW$calV8(uqq9+10)n7<)X;*QkrjGaZsa?Da1bu$lH zdTSB@#lashZ=c9Wp*gdHq^1dlP6z}7qq7CCkV`=94>g>|Y zbPabD&Q9T8L_->lRHFL;EFnWjygG9e=MwKj-j0drx;GU_`25I)XD6rE7>kgww!#bVH= z6KMX1Zi{J54}%g@wZ&V6wDr4t627fCWtPj(W1_TxEV z%@C8lxGXitQ*qiv@S#!4!s^Q9h1vPb2DC?Gd1mRx%+f=l8q!AbgUc?UpUWP=v;)dK zhGo+6^$4ifu)I~}Jq46JrT~p-C?+O=bWBPSPT-xgs(DKd=WzA8jb0&21^v5b49Izm z>{|k(tMk_mSMhP%5H(=l8~sHSZL53ScBAB@GNg%xfU5Dh+%h|RG@C5NQ6*-6Ge zNTK?8PZM9`+U(@g#FD(V;6-C)!w$7eAX`mb#0cHdZfrhC$!eNiGg|yoiHzDM&9+!W z!if{94`G?;`Q5Z=eO^Qs(#3rplZhP*^ii3i=LBjdlXDc}nHTvaUVf=mYDaeQNrXbIYBVqup&p(RXp|WA&u2Mg+L#v2Iw8n-3Cn<0Rm!64u zPB3KpW@Ez|@&bKHg6B&vJfLAj9GOW5MPY>{%q}wEZrX7i+QiScC2pt9kVU+(NUg$X zh)tDP2Nnd0g9uJg^aHCASY{-3s3NYw#DX@RHL&<~oG*cp_C^OtiaLnsX=q=^Y98*n z#1{m$;hjTm_i-)}H&JpY7DxH#!HMp}c|`X`MRX`fk{$Q+z*pMTb(nOd&1 zzE|?t;@@g)fntkPh-8n@c3X}m?LyuH8iCNmR?xc^YZEtT6Nld`X z1n(o5B8NohaYc)P<$EC<1MFyqs3x{jc|MHc`P7dMkw(e%{WLs&4va1y9FqR-6Qc;B zC&3{4(3#hDVk~eY({?Rsv*K6=1H~4rI4s3fV`Yp#<*|xd=I%255Co!70^McBm{gTp z|KYk8oOfDwCZ{jrz}9_oU@wjgcAO|w>~~BAB)8=4agg}O)t0;xE1HJ55XmU68xnpg z^ewBoX+@2Vj*l&8D0HY1Zt1)7O81?Y>1JQkjXXDOM~Sk4sgsGq56tWndCdN4$?RJD zQp1S0SFUA7cIaDnqKZ;7EOlHAn6}rn8~nHl?wcaO2J|Sg4`onoLJ?@>$5qKElY3VxQM=0&>j@{siu_TVfFD`MwcmpscezIwY4Y+LIDb@qeY&Og=5)ORs zXUmzyoHow)slbD?|0LKyeP8@-x#dh2Dw!E8Dz@8!cQqOrkzgahEtULKfggCSz--fA zvpCM;sY9b~McbC;8qv0gd3YQ9&v5@x2TrL|@1xk^-3+mUH!1 z*>HWbm$Nujq)lTNwLN1++BFu3WCmbq7T|9oMT*i7hoW$bNC=mrF*ZClQllT;fl#%I zlkN0diW+_mb&u&-6`&{UG)1zQgyVFTa`i%uekolZ^-|()O2fhLg8%3{NnVh7F~g9+ zJJD6(>Hc}R;}Hm;UOFbwbYs0jTOdB9)!xD>!!i5DpL&v7x)H`>Ek->4E0hnjAf zjXHXmF^b}zDR5{zyRxh;4@XvG10G&GZPZX49zdgy$1w*N6H|Fw!jnQw#05w>v7#zt zOwTVH%QSM+MlEZm2ymBxKXo_4I&)3xVl8UE$}% zR6#F7iUG|r*A)4nNsaM(o;uE1CN_y!P1}5@O=WrwVuP7Jo6u7vxH(U6&=V88WjINa zMlFYc6ocmI2q{%yV7xqDsnHLa&kjE5K9=dE48;(K{Of%#LdauxCt)=y`E|NUU9m>a zI>cv$9qfnl?O<>dk{$To-P&jbaOV|bYS{_fBX>$2KXgsMHj4Tm<$oNU)@Sl){ci|b z=fEYEPZ*&M31DoSn-=^R<639PXn60H?!3tP((;z&MAlV18Z<6@WY${raGqk)40k<> zrkc3wFT1Ayz~hs^6w#ZQ7w>}4E`&_pmb5;mWZedZ91HMRc^t;7aegM_Km?4T=F-DK zzeY4f?w{Ewxl0k>N2mZ&cBA#5<1SEozkDKB#Lwi?x~4ZcUdIj{vt8==aLQiX?6l2V z1$956g&dsfFXgFuHx<>ZGBwh-ob@71lU7r+$IywRl(6R&972_cd@It3ShM5Y#}b6r z-~=VdT2?N$s>RT;`PzO~I4hdQSC(jBG(LF63nK&Pnm<(g;FPr0@&HN?6VPzET&)db zkDHvQbz=(<@Cy^9!*)Spx^Ia%f3>T&a)>4h(o%CGwNv}a)g^ISgzxZBJBlCa1l(6# zk^73%k7Pe4fbbaXnZ%yl7}V6Y*_rv3uArv1oxOb_mNcVHYX=~nQMC~uCRSIjh|?YE z3dQ!Kc$xcHiPu>%+)@5Fv?|89(zKAvQ7^?b(t-7&lxn_aV@X%!;JkG?kGFnQ@>UZ6 zlD}4i$%G3(OliJIB2_G;5^B^X6UKztHMyXqi;CVTWrp85z0?F9QJUR2^}NEf@Tj=I?f?s? z$%xqa?XGOB+aI{`6_burw68<ZaRf0!&Yk5%plwU2Pk*+)B_raR?Ga?EhvOkth z;5DB=Bw_Kb;}X2$Izd#Df4EsNHBlKI9jT1e_^%udF-9U}n8Jr^DS}e)k!F4So!L%t&2YJVULKHuj`+#HY=n{;sx^`LV88Zr>C@qf(w5!8)eI&~ zE!}p=^e996Z=dDk6W(e>fg!zL3^_eLJOSQFKX9o#1Qwj zHPLJaL!G97u{K&6F=SjPw3f&#^6Vl-;-Xl6F@H=Zyni6<%uuX$N<_4+D6ku$`kN4= zjdiDFLXNQmukyc|$H2cX8CdTX$-?lJg$+4jRJ7LDtp*sGZ^g09aHkk~ML2qdM=Ci= z;5^9<0cwu7Ye*SK1`Xfawu1GJgWZkfP$H$K%327Nq^*JRtsamja;;xx;&>xg%PjQE zG`r!Na%NQ4jKYYf))c^)iYa@FhsQ^%V>S9ojC&XjD@D0 zAPAB~NuuC?+o!n%nk7`(r(-0FZrO9c-2W+-_3=(f1J3Cm$yF;W`(Qay0gdY(l_VqM z4$gR2^BC{7G~cscW-~%>9eS)aWV~i$=c{E#9e8sLJB@6$AR$6gE;x@LNd&Z_^`G)Bl)($N`&=rUqUfUYv`mu$b zHm18{c+rLx;DAKKA|TtQ8zH|KS<~y{0wdUcs#jZ3R{K_t-1K8fPYp4CO%#8~b4bmj8YUII1?p&V8{Vk#V$RcxOt`S&f zvuH;}XbyA>sw3|*N}gqrFj8i1>5Xa&)A)QLCEF`M60-^!*hN~&X!WtHhGQ6AX=(rd z;`o{Bl<$;!soxUb!Zw=Vs?~3c8?)u0%nPsZ8?NbFzl|)hy4-OALy9DWnM3$8gMm z(vL6COfAiOB}`Yv6Y zSiTBbnyjjh{Mg^z37%ScoQsRlJ$=1^18ucZiA=&+flhdxM*B`)T3VQ2nVFxK-q;Qd z2wp0r``Tm+beB>+Rq}*-3cf42n~AkK^1~IEt7A3}MP)O$Bq@qc-IAojiGUUtmRBw> z%`7Vd((~z_yOJcNvgstGXN?zJd)WKLV0DTgdg}PJ?@g^g9TNe#%L!xJ-Z#vgl9y-D z=Ah(w_Ss$BD`8nWJD$Cy_O6&=Xu9^Dl0s3bZQA-QB1YasE~w|@p;1<`RvFctVe2S5 z__#QqH!l9_VeXGeRbCE^uko!!atNdqr3iu$tH6}njckkGUM@yH!*+2BnqU8y95OXq zcotup8GIjOs8#2elBdQ_A*2(7=l;5gMwrwf*FRPs9~Gk<9|beRoS;8$PM73KurlTb z_z0So%cWf9?gSi77(p=$5PnWBs(#QeIuRpC9H-~PSdkwinJjswj3_LY|M{7Dd^Zp; z8q3%!4Mj&bAeQQ?ytMRJY4fD|#j12a@}e=}`(4naB>F{3Dat8PQACmezexT{Re`!l zzPPIdS6Ou7yRR%S8kcZvQ;>y%lMu@ntK7?P-sL0dp6{abz;%U|G(qpX$q}khhKQxS zA(0sS>XN~?`6XSHH;1Z|w;!omskSS5--Sq3d_J9NlkDo~c{#`Kf*0t5AAUfgl^kSA zP5i^I)4W3rm!`{2Pub&XN4Kqdj-Ib@S30t)eLM;X+o0l!_D#wBiQSgre=($6>dhJuama1 zWt(KU5?7UBxTy!;c4%d6Roa;5*ly5@iYU=qk9MiMJad*YZ9tF{W~gQ6A?()s+mI;$NU!`J}Ij1Q6_goyAWr%Hm9ks^Cr zk%r5aF>FqZU7-W=aJf=eTNXK;Q2`p`S6cOcGO*uxXZjQ@ub7aXVSnprw`pN7)8`F+ z+g{N011k){s5zd&dz$q<(@U|3O7t}A`rPYO=(Vjx8Qr{m_cZBGUqMRj*Y`Sce zYYDqJW6hZa{M}t90Y4!$_W~Pb#iF$C;3OHY9p=|t6@91EvfYd1b8gM0T_|hPO@qFk zKYBn2Ouze4xgISKogW%0uEX)IAfzsSZDRF65tc5Wx%|@P^L;w-Sj>~pe=bhzsS>4# z#x`c$4;}APliS&_zj52Dhjt{U7j^90NKGgdy!$u8P>z| zKO;(;oG@cmEOubnMe*q-+;hDRCZr1GG%~(s6>1al;I>+qILXAxcur4=L99CkQdy}< z*ceV5X}4$GCjt_3hCBUJld42qe$x_3@>_@}k&L_7ixCK=w0ysm&b3fEypR_9)zjTZ zr9PIp%sSz<{*gB(UzdBHrBv@TTb3IQZd-NTOZt&Yxjagq?)5y<-FTcwziZeCE{%=V zN3UFPyf;V3S4XEi)yBxwx;3>BUaxOD+;90)a}!Im6VsDPufk}d^g!Lc`lsQqlYBy| z+LMxG1*pDm_fuZ;wJfsoS{68$lf&fEH_dw8zSCv!)-ug$nT&a}y&1f^UAgtf_2$Cx zmAUzbS8tu4xOFMG;*{TfT{xMiTS6qopsgA>{R-)QVX)hL=io9*F*>SY>qfGVjPa|ML= zrXg5&xc{g$kf#NZRJ=4tK9h!%M$2iDUxY(f)#Ixpew4bV?00 zT6Nl^qNFf%iWCEf`6%nzyu6#%PMq}-Eh{2q&UfYI3`1wF5g$Z5rR8m?rN?Z2-L@YE zrnWgm)mO&Iy(CYjOKscrxUMH8LhX7e_rW~MuUHJ75_iK`RY;+kEnx$O;P`X`{G#nL7jO7X8n8L6 z?mO7zj6l0}yk<-^+qPR1)c^|R22$BEr1gjievGs(-A9RYX7Ra0Y;DiMg}~+LpJKPE z@EFi<*%VZPb>Esx`(zUbP_+E5TDK%bY600#T z4H;Q5PUYr6L|%r5nVXysXPFFgP|D_!G3hKAkTR(e2ur@z&4QogskG#zGIC_W|M&UI zFjBLctnknhNSE&AQ7&0B@(ze4H9%a<8mkJ&4TJb`UowwUcIyu`3$n$rXc2u`Y6@8I-3c{!FC=e_}RUy3b*hlm%WI&1C<6*Yy;ACv!nr z@E$8+S83^%x3y!su=;E&6)wlC$Cr2C4g8zRh&Rc|pLNmoBCGCsn?wGNQ7q1jzb1Tt zDDpNf_u{}nDp;EHE)ERn7QM-b0gjzHd%I)qU|aI7j=zH~$ymWqmDG%N$3%jIYfejf zn$zDFt0@w?M32;=;+x*-sHsWkb98^Ux=bQNo`gVdcAMfX4^)hlekDpwS@U#Hxfm6s z{v=W-SaUz9BeqbdULL&92wp~}a1AO=x0E)e6^xC+9ktwC3zegrjSIYY^&z4keEDd) zn~6g&cID6lIZT(9hLdz;(c(M2U`KiE+U$*)$%Tch3EM}nV{Z|Q#YP9lFz1TbCO_A0 z&Lt0d|2>f);k5dseoZi6p3HYvbyjWzku@nctu6J3##E}R2j{BgJg)kF!Bw(+$xRcT z$ZMMsyiqnS<0YaS7!Nns9dBE>qSg6q#U zc*hCUMFLpM&eH5Nv5_O_gwc8^UZf@Rkb@KJY96sp3S#BJCAnU)TN_2+3TV5ci_=Q{ zoRsiPBW9qPqyH0a^G(k+mWR8Or6?!f_930!X9#!el3r1p5FoAfMF?R3XJysW)^=fP}#_DXY`aD0~ z$li_C9Am8S9&n9jqE_r_{P8S)WIaI;>=}l@-QMI6n%3kPWjA1k|qsB&6fM%d2H}Zv8YQ&lz$f@~D*y;m|G+D*J+PcozuOeL*;~3xwe` zgkHv2$8QB@lk*9l7X<$Ceu2$ZPlG*=^NV666P^-Z%=G=D81ktz?=r?N3IOK{j9n7n zA1E+3ExzG;{sZFs&+py4_lo$QEFkY(_3Mm%j0&iCH!BkuP+5UHm9>}q<}w|y-MZasn{LT&g0&&mmjsIO z#v-_sUWLNbtn$j%!q=SdxBtPH|GUGh{lEA5o&Vy0__mP`|J-+d@rD2Wum3-fIIwO^d4cco0}!VfJM$bWskvFgCf2}n z9E%Pcoz$D$uh1qDMY6UhgQy9W>q0)F#;U^?Dif2XnaR@Jq_H?V`}&A6yDX7a;mCS$ zC<0*@DwVQ8*jRb&JP@{L4S=-AX5Gkg(g-__igG^3a2I3f!ch5>`4~Es!O+JQhRXRE z8W|~1zFvCc_0sg~m}6H*Muyejy!8|50%g41%|5}!w&(B!eK=+wWQHA zd)A>lmX7k_EQz2CL&L)gL64E-``kUoe)1kmGW3xQx^z~o>=#|L(=!5FIShR;C^51s zDT2%GFuexdadisGl=sFo$|~Qa4PF>55>oG|j-(z84`ai%GXCY^=Y|*&rlw0v3v-4c z5i?XaI3*o8Gl~D*z@y>4bK!b~2`XB5Ow_YW!;WPeM$Ov2VbgZFNvrmJywe(X(9DU3 z<$=#OOcZskFjsw?vCkFQbF68Hniv{J z^FW`Dt3%)c7*A}|8LN(#q3>vaD!5wM19jAKy>Mc{cMg?k%R2}Cp>)&(;qt_{aH$jh z1L5-Iw{WTBa_K>Y@u>_hKO$uLZiDQDh~sw>{sZ#47~U$F6$f4j%dMQ>e?d%`@%{pv zs~%zO$BwY4*<2L{R;+R{#(J@}7Iufn#VP`0r;drRW68ADqaysMOxwF&;bH5QqcZJb z0S`9VZ~WO<6XwAqu(TO-)khg)Fm1lTSm8a472Zo0Ik z1}`GoVPwl-SeE19BCb{p?4~87fd&!1<(O_L!(msbv^I_i6jU@M4(I#$WFA;m8XN1Ls~SL+a=cDcCP9lD?Ep93H`ZG+^bv&e z!&aqmC&Z2tl#k~z?fn>=tNuxWu|F*^_QwTwh9Xry-)cBs%XTHXJ}+|O4X0MHGQ+k< z7WKmKgG{~wH3Wq>t;n^aVrWIU?k$vspA#VPKF6)Oy-zSkc4{0f>3y6r7<79dV~iFF z@Hd*++-UfGJEnj@_@q$oN&37D$3lS?zUKMVKPn!ys>RF3eV@pW_xEw_>C-*zPww5j z_s93{-Fu3$A1koqY_9r@;GTCe#*VSO3>SBwVyu8mx}W5n)5qQmTp0K{!&vX#dwtBp zA6OzNJdWj<#}(RO_kHO(#6nv+#v4<45AgT|e#k(t>Ks^(xucq*5JSNd0pL1nAg85L z-FBO{t4IS2CVDhKh%7UMI`mk_GDF3%X~-P4syff4^781l(26@J4S`otK}gpv?9^RL z^>{jV%W|8Z;uUZPw09*&2x)e>DSTjJ;RQ1Id6+ZB+SaGYh{)Jyk02bYI(I+E*c*(o z|CTZKGmNp1^OS`KzlWXh^Hm`v-(-xv#2EVy#@MGAW8cLX!;;B&GsgZ7V}&1LjQw54 z7;LMssDoc%!d-;jl(F9F#~Aw_K~5iJtoN^y(7)SvY(hj{W~}$0o@8uRME*U-`kuZj z09Cv80D7n(TxB02)R_b z`1}2c{0iA&`Sagv-#-tsJ%&3m!)E<&;g280&)-&)lkdczJNR)a+vf;IQv>lMNV{b= zz3>Z2_IdpLeT31n@8{sHRqY4;&k*@BM7FS``BD5?$B(JPmhk5_90j&-yF<8zwOFp= zT*6S>-VD6R-mKBA=?c=#;pY|nd>B6;qIo!yt=O9v5i$-y?yi8wknRG0&f{kkKLhyr zHvF8!&-=9IKEv3VPYn%Wf{ERFrEBxAFW+2VnX8q{{CjeB8Q-vEmCNN3e9tXkTET6$ z_+Gb0E{u4P2jL2qWQjw8+1`aA z{^vi2TzkhD;`y!&5t!}$v%~XU*ʠVe%QlApmMI-!S15aV>yiz;`-crOGG9|I{I zYM=~-1}K)(8lLM~4Hbh?LBwF2fy@B#A{e_*)R3ozllwZE9%`OQAJ8=fGD3qNbQ~27 zIE{ADaNMY5yGhly(GD_UxI7#8LrbvGsbp9&K#bA=d5Lt_b{M5wb++E!a;&&F?9rW0*+kGJ7q zSyefk|8~df#PLt*X?D5A+$rg)%N|syR%bjS*{hBiX|wYiX;fKj=)A7)m~R*4Ta41u|q@YfM8v|8^>Mr1i^?j#FC^V?Rq zLA%vtAV9cgP1lM_V%KO9ccVy1kP9*{o-Gl4}!)%Kn)I(O{<{n702AMf(w4&MV{(k8OJZKO-dcvFba(VOA+$Z zqI%)B9W^$JX2U63ZWP$D#FXgWy5pE`X)CgPRicEdm>&}-C?THMiU9;kBLcRCc!jy@ zA0EQ|_#~UFzVF`MK4##j_b|fVEyK>-yPMhjh6(i1!+d7+XNOpC-(O?w@L}wl!_U7y z#CmH5#{TUghP{J#`;Pp(L#&Ve(IM75a)hxz5gFtTJItSt&P^<@%q;zzL+s4p*!Y}R zopEoBzINl)H%8`ek63SxUcbIMQElJ6vw5REd(FE!F*h^5`Rerbi+_43vC-`RPX5Ub zvonJ;3+HcMF{|6l+hgzdg39~t@X|sxnhIxMUA;B7IWccq<>qatJ?CATz4(8j{5LyG z;llfy*Gjj}o7?8(Yj2e1Tke&m_t&T9S8px7RyVI)@|$mN&b!+q7ysfAJJ&N;g{Je~ zMav5491zVq=4epI{tjp{w&%iTgDps66J*~JSjVtA4`($c&4VJnEni-6rNY6^zHj0t z2bq)y`6bg-CMi&d@B1Z4JmHX1rUsAuzVE?NB|lpvV<10}i62Cep{Sf6`3dEWN<>&} z90No72us?(KxV;csqH&qDG0axl5fUZ1I!Jv%({cqkEx_*a+5lkA7&G$swaw%t)BUPv99+825JqJXkg%PDqC?1i*{&- zq!jCzh5=RsA<{%v0BuoXDurs_ZinrJdYytI60A3hQQKF_OfHmq7%0spg%J*=5s#9& z@nIYf9@E;=@O-7xKwH(K)=f7uLlp~F2}Vn;wqLyE*@{3QwzW*LR+++kS~W@413e~( zGraNO4bd(IZK|sT0~RA}W)fM_r3SX2=z|o!P;{yXQuRg>xQ>$rooE_Kk9y1B z@*O3tMDI|P)8uv2DNSIL;u8WPosn}w+zo&lao^Ppp>Iij6udCuTf>*|a+frG#w?DcNqrYimj^6>m1T znk7H5*6lm8c)~J;iz5Is0_sNKwLMiFhK$g)*Vp553pEI>AZjSZls2@s>*0nO#F`EU zps-zsGOwzNNkQ1IOZt9I6pQz3d>QW3T-U*7a}*88bi_d(Y```qZg0c}iK8D09WVMA zc59rVK|8WHm**z2LF4G$@|A_T88isa4%AEvxDCUNq952>W@IG>Z>qA_*bMFU1lNaQ zW`M*5BwCNhQD78*XXZiZohUHZaZFMe#3iy(6&1zpg9=k%b&9haMLyk&ydagoKQ|32 z8BsB^+CJSXCQF0CJPR=}x4Y($bx2epi~`GSE2xkLS*VGblEQ%9C<@0^vQ8j`C@7yF z7mFd1Fm8whc;8@i)juxazVbgR&_V(ZSrmH3`IkOn82?v?7@f80gQC>??Jtn#s)ZWxaPDqE))f8S@k4bmgVKfdOm~BXK=LJRO%Q7xTWXew z6m-a==_yJ8^+4@+tS~ekyQSCELTMqysxsk>e0861;<4Wz0GHrJ#VwVCy%@h zM8D1Yo;ZO&3-~(xHvI8LZGSy1HB3Kjn=VNr+~*|AvQU;Nf~qA6vxJ(2k!D8*jfXf^ z5GHm70714FmD;zXs8kQUO>H#7l*;ohmrk(Lj9nH5jK~<>x{dk0f);k_T%75<5HMZH zPf-f2hT6A*YSp7)JuHTux;V}#3&$YYip>J(MuO-y>z$DLSf(V49U8}@LQ5&hGNvBM zwJn(k$_(<{aL#<&#|8EGFBA2E=ieyA_rh!%{GoH|fDyA$d$|SvwxM!WdRA={ZzDdcJ`J zc9rWba!P4Mjna0jYHqj0YY3dYj{AouUc01c<*AC6yG3g=I5&mGZNORr ztfRG&k@Coh%6e^fd1YokFDp(g%B;)Cdb&~`AF7lu3{@^%7`ia7KrGG7Ev(Gsfsk&q zQThs%&NopYYcDE3w=kWXF^TB5*Ks4-r~>AZ?2dO!)bW3mn>OAJPms@a!57YU86{dp z6)-Dkfh3n-4JJV~nv1;Txr2@mfrr0zMaX3_9XP&2P3~HrP zV71^RVy9S%Z^k}fpc>QgSETPxk^~>cw>TV_Y!cZw6)AI7#`U4zVF*1dng}&TeqW() zIu$QB+wkELeT@xr{Oo4oY_~K$Nb@t;W7C7dtJ!H|nVUf;Zi#}BrX`T_$&9LDY z+onp91l`eg=Ots>U1Nf-F=(Hx39LVHMG;f9T5zFJj7-V&q{^id*{(en0y*$^ddahDjvEwWSh1Lp^aAfy!IN^rr$5ZBHJPQ7 z7C}ilM0DHZ8j7uYR8|ZzskK#%*r+q2G+45kBAA#&wndVpjEfgfA!Q`6=uSJPJG~S? zUI3Npu`Rg0W_FZq1cD%Jhbf+hQr2mY%6jlWO+w53Q@Y{sm<-^ z11(Ad0S!q%A2JMLP0WG8U7?k*(Qpfy>ou*jhq%gy;SUe2n;2X0K%mKQz?0vgPnjOF zTz=y%(_l$Te#5FLzX!DR*f}o4OWHT)K{9+y`^H>IhQn`({D!*=`8}b1U)H{%e#$hn z+BeJ$G92?R`8}_Fe@6TMEMx3F0zaSE!g20H=KT@v`$x6!f2e)`xQ2&+q^T6#FRkoEaJE&V^&(*FxB{cFcS=X9<|9Fo9v1Y7=T>-DpG6i(o9KQaXw zei*ZyQwS%gNk(g#q4(Zh>SS*QqDp%HhdQ0 z|0)arD#HH{gwH16!|O@k`E2@mgpVQoS|a^t5Z<8l@6ieAvk12k{+Yw@)ly01`aELa zn=R!F2uH{DeLj)?M-YA%;a^CE|0u%$%PgFKi16=5_>U$C6IKf{TIFEkgV<7h=O7R%=~O3*Ow9XJ)$AWT>k`7e^W$#8D0cc zL%sq$uLIg=v82>f8InXmeESQCZXxZzm@wk&l75}S9@O^rMBev^zq6Aug4T*k0CQ4M{ ztJx}4lU4Y2y$WCDRT$8#@HM>(l;D`K)g&tM8+s+anyAFrvy~W5R^m7HN_?GH0+;M5 zJbXj11SL4?b)qyPeoL>z*AsR4ZAAS~0!KfS*BAc`DSlt1`0boJ{00cuuUvl7*Bpc8gbn-nY1UnbwkV&R6a+ zkV}4OH^RY-@aV>u@GuKF11Pbdy@-~a(JGoHX!X&TGvt&K zQvy*pQsptFL>SEoWkhNR6>Y1dog-`7u2xJ0\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/729/f42d43ae\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 00:05:03 01.07.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ + \n\r\ + \n\r\ + \n#:local Script AM-GlobalConfig;\r\ + \n\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\ + \n\r\ + \n#/usb1/mikro_bak_rsa.pub\r\ + \n\r\ + \n\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\r\ + \n\ + \n:global MkDir;\ + \n\r\ + \n\ + \n:local FetchFile Manager@id_rsa.pub\ + \n:local localDir \"/\";\r\ + \n\r\ + \n\ + \n\ + \n\$MkDir \$localDir;\ + \n\ + \n\r\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +add dont-require-permissions=yes name=awg2-webui owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + put \"Download image, and save him to usb1/tmp\"\ + \n/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-chr.tar\" dst-p\ + ath=sata1/tmp/awg2-webui.tar\ + \n\ + \n:put \"1. Create veth interface\"\ + \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\ + \n\ + \n:put \"2. Create bridge and add veth\"\ + \n/interface bridge add name=br-awg\ + \n/interface bridge port add bridge=br-awg interface=veth-awg\ + \n\ + \n:put \"3. Assign IP to bridge\"\ + \n/ip address add address=10.9.9.1/24 interface=br-awg\ + \n\ + \n:put \"4. NAT: masquerade container traffic\"\ + \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\ + ade\ + \n\ + \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\ + \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 action=dst-n\ + at to-addresses=10.9.9.2 to-ports=55055 in-interface=ether1\ + \n\ + \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\ + \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 action=dst-\ + nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether1\ + \n\ + \n:put \"Create environment list..\"\ + \n/container envs add list=awgui-env key=WEB_USER value=vados\ + \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\ + \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\ + mboLs2325272931q\ + \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\ + 3\ + \n\ + \n:put \"Load and start container...\"\ + \n/container add file=sata1/tmp/awg2-webui.tar interface=veth-awg hostname\ + =awg2-webui \\\ + \nroot-dir=sata1/awg2-webui layer-dir=sata1/docker/awg2-webu/ envlist=awgu\ + i-env start-on-boot=yes logging=yes shm-size=4M\ + \n\ + \n:put \"Start...\"\ + \n/container start 0\ + \n\ + \n:put \"Verify...\"\ + \n/container print\ + \n\ + \n:put \"Should show: status=running\"\ + \n\ + \n/log print where topics~\"container\"\ + \n\ + \n:put \"Should show: AWG started, nginx running\"\ + \n" +add dont-require-permissions=no name=awg-proxy-go-Client owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:put \"[::::::::::::::: START :::::::::::::::]\"\ + \n:put \"\"\ + \n:put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n:put \"veth and network:\"\ + \n /interface/bridge add name=docker port-cost-mode=short\ + \n /ip/address/add address=192.168.100.1/24 interface=docker\ + \n\ + \n /interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n /interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n:put \"add config-client.json\"\ + \n/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json d\ + st=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n:put \"Add container\"\ + \n/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interface\ + =awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-proxy\ + -client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pro\ + xy-go-client\" mountlists=awgcfg-client\ + \n\ + \n:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n:put \"Add user:\"\ + \n /user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n:put \"Add forwarding port web-ui\"\ + \n /ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n /interface/wireguard/add name=wg-awg-client\ + \n /ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add comment=awg2wg dont-require-permissions=no name=awg2wg-uninstall owner=\ + Manager policy=ftp,read,write,policy source="\r\ + \n :put \"Uninstalling AmneziaWG...\"\r\ + \n :log info \"Uninstalling AmneziaWG...\"\r\ + \n /ip/route/remove [find where comment=awg2wg-tunnel]\r\ + \n :do { /tool/netwatch/remove [find where comment=Monitor-AWG2WG] } on-e\ + rror={}\r\ + \n :do { /ip/route/remove [find where comment=Monitor-AWG2WG] } on-error=\ + {}\r\ + \n /container/stop [find where interface=veth-awg2wg]\r\ + \n :delay 7s\r\ + \n /interface/list/member/remove [find where interface=wg-awg2wg]\r\ + \n /container/remove [find where interface=veth-awg2wg]\r\ + \n /container/envs/remove [find where list=\"awg2wg-env\"]\r\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg2wg\"]\r\ + \n /ip/address/remove [find where address=\"172.20.0.1/30\"]\r\ + \n /interface/veth/remove [find where name=\"veth-awg2wg\"]\r\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg2wg\"]\ + \r\ + \n /ip/address/remove [find where interface=\"wg-awg2wg\"]\r\ + \n /interface/wireguard/remove [find where name=\"wg-awg2wg\"]\r\ + \n :do { /file/remove [find where name~\"awg2wg.+tar\"] } on-error={}\r\ + \n :do { /file/remove [find where name=\"disk1/awg2wg\"] } on-error={}\r\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n /system/script/remove [find where name=awg2wg-uninstall]\r\ + \n" +add dont-require-permissions=no name=amneziawg-mikrotik-c owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\ + \n:global imagesPath \"amneziawg/img/\";\ + \n:local Image \"awg-proxy-amd64-7.20-Docker.tar.gz\";\ + \n\ + \n:global DstDir \"sata1/dst/\";\ + \n\ + \n:local Url=(\$GlobalScriptsUrl . \$ImagesPath . \$Image);\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n" +add comment=Generator dont-require-permissions=no name=awg-VDSina owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# ============================================================\ + \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\ + \n# 2026-06-30 22:08:12\ + \n# ============================================================\ + \n\ + \n# 0. Check prerequisites\ + \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \ + = 0) do={\ + \n :put \"Container package is not installed or disabled. Install it and \ + reboot.\"\ + \n :error \"Usage: /system/device-mode/update container=yes\"\ + \n}\ + \n\ + \n# Auto-detect storage\ + \n:global awgDisk \"disk1\"\ + \n{\ + \n :local usbFree 0\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \ + } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\ + \n } else={\ + \n :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\ + \n :put \"USB found but not mounted. Format as ext4\?\"\ + \n :put \"Press 'y' to confirm:\"\ + \n :local key [/terminal/inkey timeout=30]\ + \n :if (\$key = 121 || \$key = 89) do={\ + \n /disk/format-drive usb1 file-system=ext4 label=usb1\ + \n :delay 3s\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \ + free] } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n } else={ :put \"Format failed, using disk1\" }\ + \n } else={ :put \"Using disk1\" }\ + \n } else={ :put \"No USB, using disk1\" }\ + \n }\ + \n}\ + \n\ + \n# 1. Uninstall script\ + \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\ + \n :put \"Uninstallimg AmneziaWG...\"\ + \n :log info \"Uninstallimg AmneziaWG...\"\ + \n :local prevDNS \"\"\ + \n :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\ + env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\ + \n :local storageDisk \"disk1\"\ + \n :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\ + ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\ + \n :local prevTmpdir \"\"\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\ + Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\ + \n }\ + \n /ip/route/remove [find where comment=awg-VDSina-tunnel]\ + \n /ip/route/remove [find where comment=awg-VDSina-dns]\ + \n /container/stop [find where interface=veth-awg-VDSina]\ + \n :delay 7s\ + \n /container/remove [find where interface=veth-awg-VDSina]\ + \n /container/envs/remove [find where list=\"awg-VDSina-env\"]\ + \n :if (\$prevDNS != \"\") do={\ + \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\ + \n :put (\"DNS restored to: \$prevDNS\")\ + \n }\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n /container/config set tmpdir=\$prevTmpdir\ + \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\ + \n }\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\ + \n /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\ + \n /ip/address/remove [find where address=\"172.19.75.209/30\"]\ + \n /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\ + a\"]\ + \n /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\ + \n /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\ + \n :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\ + \_} on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\ + out.rsc\")] } on-error={}\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\ + n-error={}\ + \n }\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\ + \n /system/script/remove [find where name=awg-VDSina-uninstall]\ + \n}\ + \n\ + \n# 2. Network infrastructure\ + \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\ + y=172.19.75.209\ + \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\ + 5.208/30\ + \n\ + \n# 3. WireGuard interface (MikroTik derives the public key automatically)\ + \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"4CHyNhbOs923/E\ + yNDguMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=14710 disabled=yes\ + \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\ + Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcY\ + QnD9N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=172.19.75.210 endpoint-po\ + rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\ + \n/ip/address/add address=10.9.0.3/32 interface=wg-awg-VDSina\ + \n\ + \n# 4. Container environment variables\ + \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":51820\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\ + 77.79:55055\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\ + 438637\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\ + 809250\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\ + 09079495\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\ + 12329741\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\ + l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\ + face/wireguard/get [find name=wg-awg-VDSina] public-key]\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"\"\ + \n\ + \n# 5. DNS\ + \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\ + n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\ + \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\ + g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\ + \n# NOTE: replaces existing DNS configuration\ + \n/ip/dns/set servers=109.107.177.79\ + \n/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina distan\ + ce=1 comment=awg-VDSina-dns\ + \n\ + \n# 6. Download, create and start container\ + \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\ + \n:if (\$awgDisk != \"disk1\") do={\ + \n :local tmpPath (\$awgDisk . \"/pull\")\ + \n /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\ + ntainer/config/get tmpdir]\ + \n /container/config set tmpdir=\$tmpPath memory-high=200M\ + \n}\ + \n{\ + \n :local arch [/system/resource/get architecture-name]\ + \n :local ver [/system/resource/get version]\ + \n :local dotPos [:find \$ver \".\"]\ + \n :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\ + \n :local endPos [:find \$rest \".\"]\ + \n :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \ + \"] }\ + \n :local minor [:tonum [:pick \$rest 0 \$endPos]]\ + \n :local suffix \"\"\ + \n :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\ + \n :local file \"\"\ + \n :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\ + x . \".tar.gz\") }\ + \n :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \ + \".tar.gz\") }\ + \n :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \ + . \".tar.gz\") }\ + \n :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\ + \n :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\ + atest/download/\$file\"\ + \n :local filePath \$file\ + \n :if (\$awgDisk != \"disk1\") do={\ + \n :set filePath (\$awgDisk . \"/pull/\" . \$file)\ + \n :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\ + \n }\ + \n :if ([:len [/file/find where name=\$filePath]] = 0) do={\ + \n :local freeStorage 0\ + \n :if (\$awgDisk = \"disk1\") do={\ + \n :set freeStorage [/system/resource/get free-hdd-space]\ + \n } else={\ + \n :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\ + k] free] } on-error={}\ + \n }\ + \n :if (\$freeStorage < 262144) do={\ + \n :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\ + B free). Need at least 256KB.\")\ + \n :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\ + cient-disk-space\"\ + \n :error \"Insufficient disk space\"\ + \n }\ + \n :put (\"Fetching: \$url -> \" . \$filePath)\ + \n /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\ + \n } else={\ + \n :put (\"File already exists: \" . \$filePath)\ + \n }\ + \n :local rootDir (\$awgDisk . \"/awg-VDSina\")\ + \n /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\ + DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\ + yes comment=awg-VDSina\ + \n :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\ + =veth-awg-VDSina] shm-size=4M\"] }\ + \n /file/remove \$filePath\ + \n :local freeMem [/system/resource/get free-memory]\ + \n :if (\$freeMem < 16777216) do={\ + \n :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\ + . 16MB+ recommended.\")\ + \n }\ + \n /container/start [find where interface=veth-awg-VDSina]\ + \n :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\ + }\ + \n :put \"Waiting for container to start...\"\ + \n :delay 5s\ + \n /interface/wireguard/enable wg-awg-VDSina\ + \n :put \"WireGuard interface enabled\"\ + \n :put \"Installation complete!\"\ + \n :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\ + \"\ + \n /ping 109.107.177.79 count=10 interval=1\ + \n :put \"\"\ + \n :put \"======= NEXT STEPS =======\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \ + comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\ + \_comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\ + address=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run awg-VDSina-uninstall\"\ + \n :put \"=========================\"\ + \n}\ + \n\ + \n# 7. Verification\ + \n# /container/print\ + \n# /interface/wireguard/print\ + \n# /interface/wireguard/peers/print\ + \n" +add comment="wg2awg GH repo in client mode" dont-require-permissions=no name=\ + "wg2awg client" owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:local Arch \"amd64\";\ + \n:local Version \"v0.0.1\";\ + \n:local Name wg2awg;\ + \n:local WorkDisk \"sata1\";\ + \n:local WorkDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Bridge (\"Bridge-\" . \$Name);\ + \n:local VetchMTU \"1280\";\ + \n:local Vetch (\"vetch-\" . \$Name);\ + \n:local VetchNet \"10.9.0.0\";\ + \n:local VetchGate \"10.9.0.1\";\ + \n:local VetchAddr \"10.9.0.3/32\";\ + \n:local Env (\$Name . \"-env\");\ + \n:local ConfDir (\"/etc/\" . \$Name . \"/\");\ + \n:local ConfFile (\$Name . \".conf\");\ + \n:local Mounts (\$WorkDisk . \"/mounts/\" . \$Name . \"/\");\ + \n:local RootDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Registry \"https://registry-1.docker.io\";\ + \n:local FetchFile (\$Name . \"-\" . \$Arch . \"-oci.tar\");\ + \n:local FetchUrl (\"https://github.com/vados-dev/wg2awg/releases/download\ + /\" . \$Version . \"/\" . \$FetchFile);\ + \n:local FetchDir (\$WorkDisk . \"/dst/\");\ + \n:local AwgListen \":44044\";\ + \n:local AwgRemote \"109.107.177.79\";\ + \n\ + \n#:put \"\"\ + \n#put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n\ + \n:log warning \"[::::::::::::::: START :::::::::::::::]\"\ + \n:log warning \"Add veth and nat...\";\ + \n\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n\ + \n:do {\ + \n:log warning (\"Remove interface: name=\" . \$Vetch . \", address=\" . \ + \$VetchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/remove [find name=\$Vetch];\ + \n:log warning (\"Add interface: name=\" . \$Vetch . \", address=\" . \$Ve\ + tchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n:log warning (\"Remove ip address: address=\" . \$VetchGate . \", interf\ + ace=\" . \$Vetch);\ + \n/ip/address/remove [find address=\$VetchGate interface=\$Vetch];\ + \n:log warning (\"Add ip address: address=\" . \$VetchGate . \", interface\ + =\" . \$Vetch);\ + \n/ip/address/add address=\$VetchGate interface=\$Vetch;\ + \n:log warning (\"Remove firewall nat rule: chain=srcnat action=masquerade\ + \_src-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/remove [find chain=srcnat action=masquerade src-address\ + =(\$VetchNet . \"/24\")];\ + \n:log warning (\"Add firewall nat rule: chain=srcnat action=masquerade sr\ + c-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=(\$VethN\ + et . \"/24\");\ + \n} on-error={}\ + \n\ + \n#:do {\ + \n#/file add type=directory name=\$Mounts\ + \n#} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove WorkDir: \" . \$WorkDir . \"...\");\ + \n/file remove [find name=\$WorkDir];\ + \n:log warning (\"Add WorkDir: \" . \$WorkDir . \"...\");\ + \n/file add type=directory name=\$WorkDir;\ + \n:log warning (\"Remove config file \" . \$Mounts . \$ConfFile . \"...\")\ + ;\ + \n/file remove [find name=(\$Mounts . \$ConfFile)];\ + \n:log warning (\"Add config file \" . \$Mounts . \$ConfFile . \"...\");\ + \n/file add type=file name=(\$Mounts . \$ConfFile) contents=\"[Interface]\ + \nPrivateKey = 4CHyNhbOs923/EyNDguMXJXdghL2I3UyzXPwrANVgHs=\ + \nAddress = \$VetchAddr\ + \nMTU = \$VetchMTU\ + \nDNS = 109.107.177.79\ + \nPreUp = ip route add 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nPostDown = ip route del 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nJc = 9\ + \nJmin = 105\ + \nJmax = 920\ + \nS1 = 90\ + \nS2 = 136\ + \nS3 = 45\ + \nS4 = 27\ + \nH1 = 472437748-472438637\ + \nH2 = 707808381-707809250\ + \nH3 = 1609078552-1609079495\ + \nH4 = 1012329484-1012329741\ + \nI1 = <\ + r 4>\ + \nI2 = \ + \nI3 = \ + \nI4 = \ + \nI5 = \ + \n\ + \n[Peer]\ + \nPublicKey = o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\ + \nAllowedIPs = 0.0.0.0/0\ + \nEndpoint = \$AwgRemote\ + \nPersistentKeepalive = 10\ + \nPresharedKey = RNvF7T1cg5tyXcYQnD9N5BEp6e20vVJQTv0GMjyvHU0=\";\ + \n} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove mounts list \$Env...\");\ + \n/container/mounts/remove [find list=\$Env];\ + \n:log warning (\"Add mounts list \$Env...\");\ + \n/container/mounts/add src=(\$Mounts . \$ConfFile) dst=(\$ConfDir . \$Con\ + fFile) list=\$Env mode=ro;\ + \n:log warning (\"Remove Environment keys.\");\ + \n/container/envs/remove [find list=\$Env];\ + \n:log warning (\"Add Environment keys.\");\ + \n/container/envs/add list=\$Env key=AWG_CONFIG value=(\$ConfDir . \$ConfF\ + ile);\ + \n/container/envs/add list=\$Env key=AWG_LISTEN value=\$AwgListen\ + \n/container/envs/add list=\$Env key=AWG_REMOTE value=\$AwgRemote\ + \n/container/envs/add list=\$Env key=AWG_MODE value=client\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$WorkDisk . \"/tmp\");\ + \n/file remove [find name=(\$WorkDisk . \"/tmp\")];\ + \n:log warning (\"Add \" . \$WorkDisk . \"/tmp\");\ + \n/file add type=directory name=(\$WorkDisk . \"/tmp\");\ + \n:log warning (\"Container add tmpdir \" . \$WorkDisk . \"/tmp\");\ + \n/container config set tmpdir=(\$WorkDisk . \"/tmp\");\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$FetchDir . \$FetchFile . \".\");\ + \n/file remove [find name=(\$FetchDir . \$FetchFile)];\ + \n:log warning (\"Download image from \" . \$FetchUrl . \" and save him to\ + \_\" . \$FetchDir . \$FetchFile . \".\");\ + \n/tool/fetch url=\$FetchUrl dst-path=(\$FetchDir . \$FetchFile);\ + \n} on-error={}\ + \n\ + \n#:log warning (\"Container set registry \" . \$Registry . \" tmpdir= \" \ + . \$WorkDisk . \"/tmp\");\ + \n#/container/config/set registry-url=\$Registry tmpdir=(\$WorkDisk . \"/t\ + mp\");\ + \n\ + \n#:do {\ + \n:log warning (\"Container add width: file=\" . \$FetchDir . \$FetchFile \ + . \", interface=\" . \$Vetch . \", hostname=\" . \$Name . \", mountlists=\ + \" . \$Env . \", envlist=\" . \$Env . \", root-dir=\" . \$RootDir . \", wo\ + rkdir=\" . \$WorkDir . \", name=\" . \$Name . \", logging=yes, start-on-bo\ + ot=yes\");\ + \n/container/add file=(\$FetchDir . \$FetchFile) interface=\$Vetch hostnam\ + e=\$Name mountlists=\$Env envlist=\$Env root-dir=\$RootDir workdir=\$WorkD\ + ir name=\$Name logging=yes start-on-boot=yes;\ + \n#} on-error={}\ + \n\ + \n\ + \n#/container/start [find where interface=\$Vetch];\ + \n\ + \n#/interface/bridge add name=\$Bridge port-cost-mode=short;\ + \n#/ip/address/add address=192.168.100.1/24 interface=\$Bridge;\ + \n\ + \n#/interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n#/interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n#:put \"add config-client.json\"\ + \n#/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n#/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json \ + dst=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n#:put \"Add container\"\ + \n#/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interfac\ + e=awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-prox\ + y-client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pr\ + oxy-go-client\" mountlists=awgcfg-client\ + \n\ + \n#:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n#:put \"Add user:\"\ + \n#/user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n#:put \"Add forwarding port web-ui\"\ + \n#/ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n#:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n#/interface/wireguard/add name=wg-awg-client\ + \n#/ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add dont-require-permissions=no name=tmp_print owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDguMX\ + JXdghL2I3UyzXPwrANVgHs=\" listen-port=21641 \ + \n :put \"======= AWG PROXY SETUP =======\"\ + \n :put \"\"\ + \n :put \"Run awg-proxy on your external device (10.30.30.33).\"\ + \n :put \"\"\ + \n :put \"1. Download the binary for your platform:\"\ + \n :put \" Linux arm64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm64\"\ + \n :put \" Linux arm: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm\"\ + \n :put \" Linux amd64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-amd64\"\ + \n :put \"\"\ + \n :put \"2. Set environment variables and run:\"\ + \n :put \"export AWG_LISTEN=\\\":51820\\\"\"\ + \n :put \"export AWG_REMOTE=\\\"109.107.177.79:55055\\\"\"\ + \n :put \"export AWG_JC=\\\"9\\\"\"\ + \n :put \"export AWG_JMIN=\\\"105\\\"\"\ + \n :put \"export AWG_JMAX=\\\"920\\\"\"\ + \n :put \"export AWG_S1=\\\"90\\\"\"\ + \n :put \"export AWG_S2=\\\"136\\\"\"\ + \n :put \"export AWG_H1=\\\"472437748-472438637\\\"\"\ + \n :put \"export AWG_H2=\\\"707808381-707809250\\\"\"\ + \n :put \"export AWG_H3=\\\"1609078552-1609079495\\\"\"\ + \n :put \"export AWG_H4=\\\"1012329484-1012329741\\\"\"\ + \n :put \"export AWG_SERVER_PUB=\\\"o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+\ + v0b9jU=\\\"\"\ + \n :put (\"export AWG_CLIENT_PUB=\\\"\" . [/interface/wireguard/get [find\ + \_name=wg-VDSina] public-key] . \"\\\"\")\ + \n :put \"export AWG_S3=\\\"45\\\"\"\ + \n :put \"export AWG_S4=\\\"27\\\"\"\ + \n :put \"export AWG_I1=\\\"\\\"\"\ + \n :put \"export AWG_I2=\\\"\\\"\"\ + \n :put \"export AWG_I3=\\\"\\\"\"\ + \n :put \"export AWG_I4=\\\"\\\"\"\ + \n :put \"export AWG_I5=\\\"\\\"\"\ + \n :put \"\"\ + \n :put \"chmod +x awg-proxy-linux-* && ./awg-proxy-linux-\"\ + \n :put \"\"\ + \n :put \"3. (Optional) Create a systemd service for auto-start.\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-VDSina comm\ + ent=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-VDSina com\ + ment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=VDSina-tunnel dst-addr\ + ess=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run VDSina-uninstall\"\ + \n :put \"================================\"" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +add name=manager policy="local,ssh,ftp,read,write,policy,api,rest-api,!telnet,\ + !reboot,!test,!winbox,!password,!web,!sniff,!sensitive,!romon" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=*3 registry-mirrors="https://reg.vados.\ + ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/caps-man datapath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + xs-DataPath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + DataPath +/caps-man manager +set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \ + enabled=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=Bridge-LAN +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set crl-store=system +/container config +set layer-dir=/sata1/docker/layers memory-high=200.0MiB memory-max=4096.0MiB \ + registry-url=https://registry-1.docker.io tmpdir=/sata1/tmp username=\ + amsternl +/container envs +add key=AWG_CONFIG list=wg2awg-env value=/etc/wg2awg/wg2awg.conf +add key=AWG_LISTEN list=wg2awg-env value=:44044 +add key=AWG_MODE list=wg2awg-env value=client +add key=AWG_REMOTE list=wg2awg-env value=109.107.177.79 +/container mounts +add dst=/etc/wg2awg/wg2awg.conf list=wg2awg-env mode=ro src=\ + /sata1/mounts/wg2awg/wg2awg.conf +/ip smb +set enabled=no +/interface bridge port +add bridge=Bridge-LAN interface=*136 +add bridge=Bridge-LAN interface=ether1 +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=ether1 list=WAN +add interface=Bridge-LAN list=LAN +/interface wifi cap +set discovery-interfaces=*DF +/interface wifi capsman +set ca-certificate=WiFi-CAPsMAN-CA-7DB23C23C976 certificate=\ + WiFi-CAPsMAN-7DB23C23C976 enabled=yes interfaces=Bridge-LAN package-path=\ + /tmpfs/capsman-packages require-peer-certificate=no upgrade-policy=none +/interface wireguard peers +add allowed-address=0.0.0.0/0 client-allowed-address=::/0 comment=\ + "Peer for MikroMaster connection" endpoint-address=10.30.30.81 \ + endpoint-port=33033 interface=MASTER name=MASTER persistent-keepalive=10s \ + public-key="zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4=" +/ip address +add address=10.30.30.10/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.10.0.2 interface=MASTER network=10.10.0.0 +/ip dhcp-client +add disabled=yes interface=ether1 name=client1 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=*3 lease-script=\ + lease-script lease-time=10m name=nucDHCP server-address=10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \ + verify-doh-cert=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set reverse-proxy disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \ + webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=*3 type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/special-login +add port=serial0 +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system gps +set set-system-time=yes +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system package update +set check-certificate=no ip-version=ipv4 +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260721/20260721182001-Diff-Config.rsc b/MikroNUC/history/20260721/20260721182001-Diff-Config.rsc new file mode 100644 index 0000000..043f823 --- /dev/null +++ b/MikroNUC/history/20260721/20260721182001-Diff-Config.rsc @@ -0,0 +1,3 @@ +5498,5499d5497 +< /system gps +< set set-system-time=yes -- 2.52.0