From 2aadd5ac47dde8c3983c37c30d4ab1bbc708ba5b Mon Sep 17 00:00:00 2001 From: vados-dev Date: Fri, 10 Jul 2026 13:40:03 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Jul 10 13:40:03. --- .../20260710/20260710134001-Binary.backup | Bin 0 -> 385044 bytes MikroNUC/20260710/20260710134001-Config.rsc | 5521 +++++++++++++++++ .../20260710/20260710134001-Diff-Config.rsc | 3 + 3 files changed, 5524 insertions(+) create mode 100644 MikroNUC/20260710/20260710134001-Binary.backup create mode 100644 MikroNUC/20260710/20260710134001-Config.rsc create mode 100644 MikroNUC/history/20260710/20260710134001-Diff-Config.rsc diff --git a/MikroNUC/20260710/20260710134001-Binary.backup b/MikroNUC/20260710/20260710134001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..45f0eedda207c75417750937c08cb8d7c2bcd6d4 GIT binary patch literal 385044 zcmeEv2Ut_f7VhjMKthqKh#-b0payn&qM~#}>CG;tLL?AO0*DR7h8=tFz4wmo*n7j? zd&k}t-nVvk02R;izVF<7&wJN=y7y!=WzCv3YyGpHUY*2+8EmNY( zvL#5UphKl5kj>uEMXe@BugXgE&yl8O`^%JRmSkU>lMTbYIf~|3p$g0%%0U}gLsa4G zSmPlyV##3h0N0e zLufPkyd~rzpJ$pOl!>A_=?KFJ`Y?nsq9_PsSXv^Cfm*=D6k%=@wT6x`-@s@NuuG0G zI*jaNDq>)cG{nH_(GUaGry+)k6AjUuVF=M^h;3?U<`K0j`L#x46le^iAdIeYry)y( z(Z5tyR#r7>s?et^v}_xMx!K7Ca*3EPZKLRJXGp#r_8BJ2YdG0;c2e1eM~&;@k~KTu_}4oxR`R(5T)|~YLPV zW6>NJR51sE{=kMJgoY!8Mj(VnB80{ugh~)X3WTt9gfJCCs0RYEMwkX6l#LKFLlwkW z!yHpB1U&%ipb&vb5OQmR5W|{|5W_)^5QCD25X004RG2+H%K)vUhOb#r zZU90(;fWTq>foYBh#}8Gh+d*VC>J663>iXs2+_-MgnA)Fe@I0rA0ay5l9a7JP^>T1 zG5{e$0S$yFgUBy~5n>b$L5N|ZL{-zs1|c^PW;c6JpU9Y`u!QiSkTBooo<1p&p}xZq zaOk&sYR45VBfx^>m>En9m`-sf2tA=9x@ij0b+=|3l_I5AOh~AN7r~E8=ESG8X{zG|b;y%sCuYi3 zp}8q3>A{Kq;c@b$pnykI@jW8iz5UC0FSH|XXQM(;)@isA)hV>OMo{s626!&Zlw_$uv}MXPKtN#L0SmwffR;O%ZbLjbU=E4_^AO6AwD$&; zLtq|v6wLu-VN{opgNh+U=xZVeU>|w9EZbkERw=UdshVtPe@c`SWHrCXmVtzZxtG|GPJ3Z zr^<6w@}TdkfhMb}vBi7g?5b)&1yC~z$VksR{@!Z!a_1_h9ShOrUL`pV;C2(N?8>Q zsD)kvWC13{5OSkw6%skWwlWkbQ%;t#saeJ(Ppi@^*tHd+LZOOEq9I0&R+KqvwZKq- zpuUPS8WgxHBSehuKBGn%Q>jFjk&`W~t&|Crx;%hR^vAP5R^5_WrX)*}rqBW;SIgvj zO^z%bq#HirHSXaknv;bP))OJ5Lx_-IF!dRL#=&?h5Tet~5K_Vyu-ah#8CW)4dI00t z94-%PRx9MGdaWugO`+AncbI_21q$3@%>lp;0}QU#q_HG~snEe-!)F|MhxrD;13obD z#xxAPF%Jy~BX5kurqr5TQW+ zFJ*}KEk(3iD5{eyk!y5;#MMum^Mgd0C^97~HB2FxHQF4tLT7XU)KrkhG|UrY8s>>H zeTqmEmZ+GpYQ-2a*I=H|Ngz)%iaw}JH>k>uP^1)8T?Xo}wG8FwWndoHT88@bGC=$H zWhgK$Y1L(n&I(C(7N{Ih9dc4Fz+FzNW*ACq1ZyGE7Qi|L6a|AqEJ2JW8&=H-7UqZz z&65nUM97V<0>GQ4&{r8eqj$kbf>x4e)UR&9A_R&7{u>rq7*ZfrcCLV#rBJ1%OEp@i zOp~QlrR8WPVCtFa5*<^PF3Cz$$eS^<)e4DD!PF{rdWlxg)Tb+$28RVxmBrL(;AF~vBOr1gxeiL06gfKZmptnJ1V>Sp8B5aQk=713BG*DnzeT1+E1|^S< zBZRpkgf&7419$^)#}^^22|^ePR4`#r5fT%=7lc|Mgg|YBW2hBEs5L?;5FsoGAq_xnj-oh(FdPg98zF`(A0avwA&P)hze0oP+6#;V&v! z6=K8+lu?)gUuX!ydQqN9DrHzVf?q*{5dE$fu|8!4!XnZY){oSa)&}p?DdJ8;r>&8} zNWZ}hHW%)M3+w#ADwAPaZ90hQ57q+=0E4`nBSha~L8uCPTsQ(rA^vWK5WV|jguuWc zWP`xK*n)vUj&N}Tst&`&86k$b3qthz^$}_axdRb80l7~?##2OjL}3E&jv&Nnc@&=5 zAao4wOb}5+nWm7v8C(*eLGlw{BOO*F9aqXAwB+{`4%A+fphM8qdgM#QzJ_q#Ig-m~{ ztgMuh>Ccswm2xr-UN9M%{#sdCsV36^RE%|&S|OB#MRSHzLE-JDAT)%E&=@L0B~*ht z@}wecEEQoBs0fY45W{2~hUkw?5PA#f>m7y|ocECWfFb%RGXjeF$yc;(vgA~oE;Q{811AW`kWyc+C@S1Vta)4Pz=S~sE7`HcBdNt?m;#D z9iZBj<_LLF4fz^FJ{m&aa7T#ZLp4weCW$f>JaWZw0ZHTxgVYGJ!jbT06kJAA5yNa8 zq{hRAg&{^uKj@=B^aIBb!-0(%sGSHI22-o04`7l}OLqO+c}n@8<*5zfz|B(VS)_ye z?`JOcpT}IE)dTA|Y!ncMwumt5LEkGa(U40G*u`B}1bttLy8Q^nsde>;Co z{(1cU4+*bzx<;?d)>J75>EFRytcE3{gKhoivDf53BffUovYxD*Y_&!rH);p@-@#!@ zO%4NM`Jd&m18`Wb$;+zAW7*%q03cx?8ckz#vImO7u6F44;KBw7WFz}@P< zoy7pK|9LDn{m-!2B{N5@R~cB#`nRJsVhhDTkJsO=FwFl=D-0_V1haIR5;fr^%hqW1 zscMZZ!x+6OAeY0ikTj+%h;%fEN$g*7M$sHsSUop_3mqXhbJ!x{uh-`%;?AVk1e{}r zP=YC>z@JPZJQjre2v+ulKeo_|@LRh3<&;F(6 zDgScwY;ePCCGuRkKN0OR`p>$N%z}G26wNWZ28}LtD@6D;2wzDD3gKR7P=O&;4t9uL z7~E?_;DGS3*};=4HybSD8HZpkug%uMC>i{Nh7UNOpb_|hgUSjSHpf6|O3g2gfn)%fjE-U!Jokh9;VM_`T0jMH^hy}sEB=FLi+_&`0vFn9C_1v2jq;(m6`fEME z1I{IOYaITO4gCOQP_U;|x+n}Ih;)2t`vI(!}+Q8IKP zZ}g>E?LysKuf1ov=g72EZ|!e9A7h}VSGPt_TDE!O*z)9p(Yr2tS^_onXjO(*6O$YQ zv5>zSEC>x&4c0dVK@5;Vt0t(=CYvG7{lDH4c8u!sSdIdepT@5k?DJ+*3)T3y>B(U> z;5KC2T<$kmA5_<_@8ZOWLB1)f>F&zn4EqL>7>N|Nj1YEwc;aabFF5}D5N7e`-<4QkU zt5K@dgaU-mO>%m{{U(a$)I$&{fmsbZBAlwUQU&HkssNZ)beL8UCnd~BwF)#$euEOU zC$~aX2N*$XQ|gmS1DwGyRTtmFNp$NC>;)2I|ALN{XT*Lu}zm9k^J* z1)>%p%5LE9a|3?30b{B>a)iKuB7^9loTbZ@vVg-zGfcEJ4XupIjPw>QqXz2e4SpA3Hv1A<44}Xu?uky_<(oUC^E4`o@frKyGeI^ePA#6 z`s<8?q-1A7}H=2jA^i+ z#x&RkW4h)}2;dQitPdhp#`G!-^26p81lEZN`-3GT1Q?JIgzgO?GKiirusZM+2E$kk z0&3qBg9y_1#VA$9FtW8DicxAQ29bF~Ym}cAqkdbALKxesV$`1%qt#N3R#lAlvtlN- z6f>zRX2LOW@`t{eep?Kto1t5#KPzGOvl3=7ssze0#(s^$1|nfhLndPyhTfQlG9a~$ z5Tcti!+IFgP2R;-rMWfIz5_#hfJn&{+Dw2IAc9^{If>O0$&DQ#g3~~Jks(qwfqV|P zUSt};(K8azK~@P6M$&eT%maVkLx!zDCtW4e0I+(4+#*DTa>(pRr3ZSVIinGpLq#+c z5|Er|iedvI6B8oLQAkWcf<~ifb_^RtK%i!Z)*!rz1{!c7fzlwnhX!v>H$#YC;GQxX zcDEStA#5})c0maCkaqV1`3Im+fhZewFhcaX5Ew#;ew2dHP=Istb)Q3}U=)fiT0qH|_gvkVSw`#MO|fWvA#QF;Z!)CKi2xdviu0hod7q>ArBdDQZrY21X(2zS-ifAqEDwp3{xxYuxHR+$}4L$N+%)Z*k@=T<7%)O{5 z(la0Nt@eGN)ejxae)}}$!l4f5*SvFMelFO{UAAACt0{N#yt;!KAd)pRc^jkavHRR1 z`6#=M(VJWQwMow(!7nXu_1S5DFdj(st)VrBRnllw3TBF1n^Kb-+QWAfoQh$Uctdzl zhgOf~F#k~FPNU~Wo#M;BO!qj{d{xTp*p!-lq^2QUPQiOct=`*@b>?j{WyKrE`$<~Og$!e2WTvjXRD9Nlg677Fgv?f$&JgKzA-`e84B-oohh z-JTYe?|)k~^$*JZ19j?Zq`*J`v>y`WC)4WvvK5)Bc$Jo2PsNLQi&GMWr&GvvJ$hMAZkT=K1+t&7_m^sJ?^L0}Bq33r6Y z7WOvZvxm*ZT@9+(v8u$kOaj%63)pP7K{JDD=CW&i{ZEikgt^!3IA(&VMVK|hi!gIa z5r(1LEpFLruP<3}c7FS1ar4GlcpocKOup9-~~d3%)m zwV|egXaM8H3Fm>kZX9pXGyL{>8wR?+49XnoXeJF&p!+}w|!KH)*GE4M*7UlzRadwd%v#Ut0?mr zvn9{k26Wq4Fu!E)YHtb^L)d&7F8R*(4EZzLL%klyPdOd6UHM}EZD;4blh*~DPR1L7 zY4V`e$Lkf=p5a^hqXPGj&JZqZV{d2v>00QF*n~B2Zmgoc&CjRL_pJY=UDH9kSzFH? zta!7hQHP^jGH3MGKbYdX+;-!g>^XCfM-@*UKXPpL?d8@kJI61rl%2b4*8S}KT{Al~ zUY;9$C-Kc_*{9ZvuWV4>kSfog&I%g!inZ}^UfbC-JKS#Cad)7{GnP+LSgZV`agC?k zENrtx`25BB{O)>KjNvLaJ#Ne=DSl;QRul>LKk8kgC#}t*Z&Cr~s)#>JX5ME9Abt9vHwybAA4^jja{@|rg>J9kg`A1yH9Vsl;JPm zd_4c))|ed=m%r*BR5$yI9s1;LzOlWibH8=*<9kl5(<5j?XTI~NKA*Pl-|2~0q&(mE zy5HnG4sRWzk1n=(Rqyd~_ZMt;TZyWq@wQ%r#_1ePbz3uy#I~;jLCIdQXkG0UsYLh z_N=bgK59ZlaNl`{X7syX7M-*@c zKdg$rhA&yJ9)C=l5S%ma!?aJ`x~*Fyx!0)C)&jB6B9EkR+XaQxyCex(R$$NxToK#X@d>87TTpj4+QRnMs3O-urUmb}b9 z>N8n2xv&1~?oW;TBrachT=8|=4AU9IFLVkS`YbvsC3WSV{Toe~ejQI&wtYLN$;CAj zS046j+v39Fcba0~FL-OuLEHCk?la!3+3KMgx!h+cIbmJLS$DUddVS-8b;Y$0`?lI> z2QX-;Cv&#YRK?BPAj~qFFdcuPP#ZQHOn|ywe+)1RhxrppfM(M6B6Y`h%4p7a=Exlg9 zPf6L4lh4zrUum7(>aDGO-1^4VqPI`pbR6el<=JGSSJaWYWAB%3UNKa^{$=L;saHOp z+c79`w%HVbprBBzAZQOM;dux5&2LS|;s4fjzcrozZ%z0Afu^g*<}wk^;VZ>TnSig9 zD`jH7lq-{nWHO;hAe4$Fe34Mf=Lm&jAy>>7irGS*fUA^=*jza-6>#_xF@eo%v(*GP zugyjqu(?dhm&$PgN6HuA93@XEk&5^@N5}sD{V@u!$tp%_*i_owLs#pLj zST(3(RZ+!?;C$y7Jq&)){df^&r2(yD=sOgE4;c6@I3`0(bbB+BYixVm7I3kdy?HhB z*bVUd@X*}ewgwNIfz#BF&Bpx=K-%Y5IZ60R#kd$Jou%L_6|y;8wh_VqGpPJ4@5`>9 zQu@nJ9eMAa57(dnzA&=GBlm&!i}o`^uoi<}-X9z}+xzjmLC!IAHeAV`a*%_qHECrQ zQ~u^ttba$`{lRjll#JVjW?x>{%PADc_qq3xzeyjnbX1Z3-A%2RQU`vTw{v*i9tGDe z_HJ@=Fgfyg?-JUC7U6w4R{?reLIP{mp0Bxpdzk`a~Id;_S6>v+L%qo^~O0k{bTy#6D+gOU9E( zb{AFn`kN63un(cUA3}E!x2zf4s}AKgpElUcCe3Hl^LIN;g0h%*`O{{nf=z2+>P{dCsybi1kT4~(&E&RDP`^s8xI;hyPtIrE>1 z9$u8cZr0!73+3_bb{PQ)(RH@$6=>HdO#=jhhAT`KxJZduXoU0J<#Aq>mtcZ)MNOdX^+(!2Qf z?a-ZF-amGEOGFwS9};_4iAbY-2K>C1fU3Wz`QNFGeoyn?)BL|S&8u-5kI&}eQZ9!l zR7k}#nMlT$@|3t-DCKi;FngG`7-lh}dumiGE4038?QjA8?lvsAqmdJQv4AxqEF zz@{dJj+y8e#xF&uhdEZZ z0a!MSeI>glEMovHYw7w^SoVE%x{-kf7D)q(q=6L@^c@V_1u$$oUPPI1fMHZx=} z4kFV1Yv8cBD7HJ!H0U&^pK^-rje9{J3wzf;=a;cEs=d=sxkf-R5gX@l*c@EQ6?Ss8 z;)nr)kzfDo^!=4qzVo@?eC@VBUL1B9`ZfcLxs?@Ywk^}UYr*@@to5A^#-}b{z*!_2 zx+%+g$Qhh6`NIWO`?>YSU3WBiqcgYkIZiv8%<5A&iROGEM7%QDXaDU6 z+u!WIyGj(vJ(fFowm9s}f?2QZM#g{WdzV%4c17xwdb8KEPH#IlHaIWJ>u`xkbLGXc z&!b%@cWia8d(3?kpJ$Qz_U*Q{x#Is(dscj;qR~a3_U(qilWc77)9bb@$F7aG#GUTu zv{-fBjO%kGZsNzqNk@~0#Dy*W82KmQs~T+4bB`Z2tMq)g|M;`*C8f6q3Bz;V|A5VE z2~{szveNwo7O-f3rSw#rnIpPs*Ypa#bJb-v)%dg zg$){hFPL#bPw{_0?Bdi%rQT%`qqbRvyX2j8Sm3gC0ejyJA3c><$#rVH@R5~%bF0Y* zavyq6nyNaVB7X6 zb>D_2O<0p0Z;F#j+nmkyo;i(Wy6Esz@tNgUW>2&5rtp2&22OnN@!^c*VyE!)n|W{h zpAb*GBzhVDKDHTvFVGf7KOtxkBl!9~x&KsI|B~|gJ-L5R?*H24u7+HE8DGQ`h~#{} zk}p#5#6pFT#}$h>a*mXb<7`|ikh2ARu8=2@DMeg~P|lNZIdZ8`Ad>NTxJW@juG(~L z734C-AtX+~uAkdt2u1&eNe3wQb7Vl^uDGaYR)#3G3F!;7M2P`0iacgpg;uA?w?a_? zh7>bIrO$Unu>ncx3TAR*SVB@la$=GZQuzSdBAx=&BBG!$;|)HsZ*bXP2eAvClPji03n!Uq)BfMv;vMrRn^-n^QTYzHE+Ni(yzsKHOR zEAC=IaCK{CE87om27jm8dsX%1&zK7Ujg8}+nm#fS&Ss0Md}RL|Qi~`*?mMKwzC(&R zrHF!|LOX?{pw8Ya^!2A!w71HAcHH}H)XKPllH1Fe(F~THarMNo*~bEwK7Ds`&()V_ z*Pibq^s#Lkaanwzw7JuU)I~e`&73a_-jw@lX^W;~Kit-wdRmWJ!f18-q5g3F4P(os z@+$@NOB*5467 zn!jkV@{l&|ikot6+4Nr2-Eqwy9(!@MbXHWwYLiL)M(sOot~~KEU~{ug?~<+^dSKT) zdR5f$&0VH#*vt$#QsB;8)xSl$5(|BR#e^qL=XQTTVP~SSL>Ka!vp4bim1PzB7}ddy zk=@5%-*?dR#x2gOW8+)I_nMeCqC6m_!t#{L+S&TGSK|zB=KHLOPr8tM{p&1LuJ!H9 z86-;{w$EzM_$1uPe#O~-!o^RzHdphzTnV~hcX?@~#f^)F!x`hHqcz{S5ynau&!lMNX?cyiv8Iczw zJ2WU5C%7L!uFmVm{am6QOAkK{X?$u|P-@`P(9kziAG9AjE3Q%dq$RDs>Sg|G;}neh z9fJKr8bob);T6&G6U}veS>y1waRb&}-`Q*Pm$bUK4!0lVYArkeNV@HOYO>$sE(d(* zG%xX%I!%|pikj?V*4irJ?X&0pMb_0=wHlfx=I`pXtZCbmNrksAPTxKA)jF#3=nv5J z2ftzstZE6nTPYaoQr6e%=<_Dt3+$<>Y-F;cL4mzBwh zo}=zB(lk;p>M7lS@zg-A<;yhNVU{!OqqMvmrRRFySl08}t*z>jE$zB0F7Ie>w<#o} z^4|4mrEUDlsjHqkZhF{r?8xhp71#JZ=hgL|;Br!Or}1{p{4_7OuJ^AswD3!JZc()Q z>A0IoPVBFq@Hw zTA#Xl?rA{Tr|qqe4L+|aSjxJwmGb`WP6hbjqCYItHrCcPDu(=8jTgGK`I3kHmCdEZ;wphU9N`*YJ zOe7YG1w1Kic98P~GOnB_lgc^7a;`R9Qnj38;%uc{Am`#rnS?8o@Yxa(TPl?ac({Vg z$GIFi>}vQmd=D$S+E)tTV6VBd01tbO*v3lZD`zc%Q9?8HtceU;C{D$3!&gel-76=wx3+TnIxx_zUsDs z&)>Vi`rPs`ZOtEn{@Z_H6~QGIWn3KAVI26K7i?UBFMRUre}aUc{ABmq;!E3yZ?X7n zQQ&sw#m=3&*W9iRN_mg3ADCWxYT~;W$4*&nlXQ*`?>~z*yL`0F(($QT_S=(#`~nBg zc-T59v&G7@3miHMdd;MUl-t;=wbxe_FP@vRG2}$rRgX%l%lzA|ekIO7qz1lUf2GZW zk8}55TqOuPW-C)keM{RNs5x5Hbc8D?Y_ziUmAbWE+tV!ZUUSA|-J4>;$YSs9_lrlx z4PGq!IE!;#Io|r^v9*jb*VM~DWfaVz;9_OxKjfpf%!<3Z}9_30owS;T(=wpiqj1GLA$h zRwxBRE?bTh7O1wFQ^NxB`Fy@WDpPX!P%WR!mvJRLTq);Eq&&Wm^Yh=lL~#G5-@IJ= z)tzUZPd16l(c50bausNju=TIE-2LMy{;MF- zj%RzQU*3)RLRqWnJiE=MnfbTpZKg_6>hF!%bm2$<-)~sR`?;#=*M~RwYR{apAu^BS zoAPz*(~;NQKWVReOD31U>on+TmebZ@&8`mWd`|y4BX$3(^N3-4I=++^q^?g@;2#!mj?V4mn%j-H`{AUN zsl(U5C|GcO$5jry@7R+!Q*A$FEQ{=Ndg_GJ^X|wxGjcbkNN=^%H=I<~xQtHgcxp5{o8mYa3lA*tgUCMoy$Q_6wQWmi?~IM$7G+Zwm|Dx1srU`XqeL*xq8_+5GsJ<0Ws> z%$yFj4DW4)_1oX!LFWCzxZ^a>eKt2~?{B^;C|hP;8Qf6#Y{ETxM>}So=q#s|Xh6;+ z-KX?1Ymc62wEyX+8U0W8U;EOGwdu>QBMWw&nrzax^l^P3O399-UJSRMXHWNQc&Xl+ zrILVC=E(ia!9GVB@-T}Qfdk(6>&tmN()<9Hm&n#yMg!S1DC+ z*nBphBjZXrayc%ONaYH)OdwM5xooji#1*soJh@aVRPqT(SDV(Yf^_7zykEEF;5ztI zfbiE_^!C_9|NJ+|h8G*c%Wmlft177g{5PFQL6;4{qV_Jmx_iQ@hdb zeRu5&pni(JOxd)f@hHmy{fB>I+VQSEF?l&`(eXgXmxoUj*?$&nR;!;hIv%w@(ra|) z)NacqyN?X*{pjls+stn3#N{0hwd=ILcjjO#=Bszq*L~K=l7w-4-L5qp!sjm1PI!I% zWJ1QSJ<9_Am|k3Xpx=0p3u7J^ME9i(UsbuRiM%X5RxG^HwR=zc<7OFS&T)6HTQGRA z&Ez4LbNHj{?1(BozOt9{eCNjXroS!RK8v>QV!1j#e&Ne;J}Y0A%bxc0{PH~d^i*Mr zJkZl+M8N!kS6hzWY*kTLn7i1oG~->{nb%5&26xkmBX{lH@ysi5&w}QP13SY8Hr+FD zWv?cFm2;W~E-v?fTi(F(Mfu5tZSP*UzxKLi|9r&W^{h+9#>B2=0h8CVubR4gnXQ=g z2z!}#zU#`K6h+B~(rzJ_k~U1sbDa_xapYoY&oLiYD$ZNYSe^Ue%;ydV1+O|0HHE$KA*KKFL#~GLr=NSoi!eUhff# zGqabx>f4Wd{d`~ZYYFX3M>oC^d#Y}WllAs`bZXn~kJ}|Rdb}JlmFatVexX`^&b0g;?~fDIXk(hqYtm&dt-vv>ye9Xj}N%g zEpqAtkK?0l(ylkFTz<4*P2Is)iWw6ohb$=Tpq-o2@=I>x(9`XABoEU+r%o%JKHc_N zPG|G67xfMIfA}zEPrt}4m5rZG@Z|$&h{P{1*{|nfOReRsCHBKxExzli*0pk&wf}$pGWF{6KI4wJJlmfpe30|F-JO{kM<#E?Cq71@D#wA%KTp)Xt26VS z;>4G!&ri}=+T?NK3i6nbqU!`cCSxmE*USkMK`n4B%bKj^DE*lChxf!h0ci za@HL^SnQXz#QV(YGmS8F=ia52hdo3eJ)`f<<)sHXI9}cN=*Wa+d4F{28#+=#u|uG`1n zcY>zcHQ#xWvHg6dvq14y{AymlU#|&^2D?V=?DHnYGN4WGWa{$+OK(fDx-$!dx11j` zdtlJgh#8r#rpvoq=WLEX_u^Q-;MSI_tJ~cUUfM8FMbRJsBadGi_5R)JTd$Xne0*eP zhZmz9wUgpE*mEkI(N2$<`o-xJ&SoyXo+@ zKTB8$((xkfg~2~buX`sht~jFg*zX`U?q2l*Da)T}KUkp&Vb_u2M^S8}Z&8GE**sj> z>6hyGE6}thA+AHSO^-K^c#C%!?>*ElqR4dQ`3H+=Hp|`CPd@g3Xnxz+y6>LZ@-Eo> zdI(K?>T%r{-Y~cQlD)X)IoxvXlsLb{Cr&P}do-M%{^Zc$L)+GOqnuUtl(!1?A2G~I zV&b{Tq_T_c^~l%U1@&~+^Xcby^{RU+O0O-8@O0LFP3iu`22UQeLU1&5h6K^bzo8~(ytZDrP_wa?ygDOJegR~6_BIaXv@7%NR^ENYZ zoa?(DW7l>Y{Ap$Hq`IEn&3<{!w5f(G(|f%AaYd&^?^>KId9Rt76Gq!OVe)qaO#EcY zd)Sm6xx4PPJ=kZ(h!_4vC$s2t1*Vkc1+Lht%^x}}ygJik#co=q``foW)`nn%hEv>^ zhC02t*x`-X-2C12Jr1t4r$_W}2fhz-)7v%tV4C-J%*6wVt-4;&{E_n1vyI1F@8NrF zjy!S>*{yBSisR|lU|-AB#cv~a9vQGm*Ti#gX}=TRPwqY)wr5CvdtStj%2_j)l#5!P z3fzjm&ii^gxb#Nry=xw=Xg_iCD%rX^y3}?{$BQTI+9jKkGC=d$cdv9Rln^Pf#LzP zzV_?&LF_nbTMt`e&9thb%F#-mwMP78>Gw?eJyWnM@52B3Od0bV>HbE#zme{5r2GE_ z(j{JcD-=p(a-~u%;tC~FxqvI;2xJnW499VyL?jhS*%IQl)Di`k%g2>cAzP#nD+L0M zg3XnQC0s*jt2QK611(7)cE0te&?nh zc_MArb`5`>&*uD>`HOen8}{b$@N;>K3lnu+N9MeFcV+x44c_R2pZR^4ItRC$tQ$_< z+BJ0ho(HW)MIJwMJxMz8+U0?k3Ach%U*8Q_o1am+b$c1|_S#;gJl%jYY1oEr7spfE zS1c_&vA_vWn0DIPv-H3d#X<3y%FDwUL-3rHtGZeqi+6SJr&z)`w9fPTlJm2CZ${pC zP-lh;i*k?LD9m;bwRiN`5pQ>=g$?_UmfP28E}p-JtvG-7%_4o+qi&ri&2;fQdE(ii z)^+Bd-{!x2B)9bC371|TyB2iD(XtE4NjG;;_GFt?`j0*^#&+kvA(KzVkN9F~`rx(8 z(8CtfwSlc(?G3G;bZ2{6WN6A--c6h5!#llr8*o16?cK3ff!jLCvYNXVpNi|_>dQ8{ zc=E7+`x`+GY|9@;y}R;BD!7ro@m0yKetlUfjXXUXyOihy=Wecha!Swl>G?Ug55K=U zuh-FY^^ToAc5L_;6UsaFAFJz93ySEAh3}^)=S5DPe6h`#SI?{tR>mff7ow_0UxdV8;nU%{p$qxX-Mns1KeZJHZ; z;?pH($D-TfM-R@l%1k`0y1$S+$?L(>_~v5{$LyW-P%OL8n8lt zD2`mmwCc8D!yE6gHFespvpbTJC0TLgL#G)jvt!TfJIm?$YUH8xsk17*8qGOT(s-ac z|EPsY=TUc^c83P6yVBjf#ke%)w4k@`^1>Gm$tl}%>(rxj!HoXL_or`9t$)L3=Dyy3 zx46olUDjvs>>d1_uJJ)eYU)OGh#+`^2_)#zrs65?IT{qZ{#+Y zPxX0Pe(6%B?UUeV+}D{|<_%}gnnW$TbMQ>%SD!91&lSn2_Y(_|A$ACwkPu!`} zh3$hm>&ha1dL5kpWOD|~I&I3{(l_o0&z~4}eczERhaK(GKZZ)Prca+d^{z{0#;~5U znMEU9+B=syo)ITM-cZ={-T5=}He0V8dN$t~@2Uy*SlNm`dx68A3mw2=;RFtgx_A-x zm2_D2K8x2IF=9>7ck9_-ayI;x!=e$pA?{2Bsx50(pMUACIHTz_^s6GntT5bvv;Ns$ z1#?h$)#|R4r6FTVHZ(a{b}pyH`Mx;I%4yD5Yrd)}z3jlCq;pI2lQr!ITlbg86fT=6 zPnWueCQm%DV{^U5d6Cz4h5D$jwdAiZipVf4T!s^H*V3vJ93GVlRQy(eUq2gv-pyYzK; z=An!4JozGzw4?$zy2dQcqB4cfBs zwCk-SA+!9xUM^lSB<0%mCqp0Et>xg|xehzex^LErgW50W-`Q<7Jonntt(t8jS!uw9 zhU;4|JilD_fNKhP$ClZD8gG6EMpx}_I zb9U;&a={ia!akDAg_fps)9y5>_O z=X|$iISbo0o?OB{wy1y0MC-oi8|Usi-Pm_d+v#`9%KKaKD_&nZ&|+xc54S}3dlVfS zyg1e~*q7PovGdBfeop!YgBGt^Dq4SVBfsD(d-11=p{_5QhaYZ|JY|!enzO6;zxWCg?LQBF$8qQ}e6wcghC+Tn@nV3b;TPtjsoH-|}w^X$X>I{nI0 zVL{r|gzB3ySU5tLvs9uj%48U1sf^{Pk|` z`Vi5VI#G;mJPV%0==Q?O zR$b}q?^nO?+Uupyg_OvJ-p5+{T?*7=Di{{j;UQ?4`zmeqT#e$h8Y}Mnw_2P zPo5JE=hegK1i7UF4j8^frWaG;c{HakaU!HWadk&%4soJArbGy(A%rpzLRknQIQ=RI z4x&Z~<-Zbexfl7QF;wIO7hkv#hrIhiia6t$IP+Vs zP)c&tdLEou&4r6KT!@pco5C@hha7cqiEoxlBv;18@?{y?0hEr7rJ z)biI$|8I{b9i;PD29yCOn-gR9_l~9=Ihrg*mQ0(U4R2`rXACUJkuEDUnTFRbZwF!A5D~RBUU=NF4ND7gE)y zv6~>|W}2NNRjXu#$U7Jh5Z5WRxeBenRzomJ0JOX|Oi|*~8X?r0IA^*7qaoq|b~^kW zLx>Rz2fJH&`h-M9hQ%bMMhAuX5_Q8dn&vXKN|B{c&6LRMebmh10w{rV;~onAQuMB3LK`l(dhIsl1xRo zAtMGEDUdM_GTP(4aISaz*o1Zw39-p>-gqw@ucFcJTN>3WogM~Vm7T58s6keNuqGri zaBqU5ITi>NQ;@l<>m+km*FywZmQ}jm9FD4mPC`9-YMDf)_9W{O*XW=z4T{W`d=7_r zi%~Sk991B@62vg4ln|mup_U+eab;yCtpw565R;>Vfti;e24(_XrI!%K;U@*x8VWLc z5p01{$OKgoI*}-7OAMhwr9yQu-+^$MGR=4HmY!CyZ+8_q1V}lsh)^M?bX9Uyi;14i@CcShlP6W*cxtZijiGUcB){HX&XJAM1r^g$Oe#L>Saf`IamSkVSn5nXc`PdI5R2w4ibcEM#G;$Q zaaB~9bw?PqL3EV@4blIkAs`uOqR}+$C0R0Mnwpft<~0VBRbw!T zSMMW43}y@RIVeM88pOhw24!eWgEBPM2?yC5pW9L3xnTq_VgyXczM4Zfk&%^zDAZ&n zjT6D*vZ_jU@0wCol1?xPN>HHFX8Z^iUm(ESRt zi<Abn*C5zR6RH_HH<}n92`0n1)&FS!Qcq18-)q=^OB63B~3UHEH)cf z9eHY*JX@kqmnqYXy5DGtLH8T2Y$Rc!qd8R*7L*ezL<}krV$n;-3YF+3aT0wx7^<4N zC{?-W#w;M2d1{$X0ea2YDu568K&!CYfKOi%kT95}yfDc*hf$cI%$TIkGVP^fB`Rbz zCUP?ut2jqi6T>&&-gp$iN@t5{X2nOf!N%Ke8y?!D`dMVwu2i*}zf)3y6i0n{9^<&Ak180jv7SLO!we>ajv-WNjv)rJz!1ZnV73W{d@Z9nUX>LL#Dt3#hJ4MV zIn2rmy1A=sJTL>Om&oN>opIn{NeLfEVz3RL0mM?%U_@yMLE%ahgy_BmVTL;)f|%it z<`lynEFtvP07wAKg8eqKm)@K#4tFT-NEA0m6r#8}G8V5SdIQwzWa$cdj#{B@i4dWo z*OL^&&}}5s{s^I&WE#vgEU4kbMhIOb(`i(M)*I--{4m2Zhz;D!gvBfn!|I6;{Y3@_ z>vz)j0vS!hauwQqW~d~enW(6Gc}iGTu1c%P%2Z_OnJE&jN+MM&bSw-36D zf1OOL%GNXcFts^Z%%EuU#YZ8UETt-~#kUW`bFySDnEjLpxmgEAvl12Lv8`cQxf_2Z znOMbhFhpNAET{)iZwb`<)lR*8HT5Cs3Rwm-T%%WX8tPC{}7-ItI zKnST8ib4$R5)v}{!zfF#(^9_EQmpH7>&n)NUQvx@$!@>fSnLu%-d) zXc)(AjaILNg#%c|)#QYR6_POx`WLhXe9|y@9?bzwZH*8HdKc_SU4$@4gs}Pufgc0| zvtfoRkTXKag;Tr%ye=Fqu2x8N3YNhVFyP>vtQ=Wrn~*qz zu|^0fU@{q}iE-5kcUUk1FWONMAzeU?LD(ozk-bcjmCgD;?7dxVWZ8BeR`=ePG-_)s z*_NCHkd57^>#E5+tYVSuUvjFi*nczB9d>t`-E$>3`;HE)4#_jDI;V8bDYAK|dw|3a zAj^*I1di>81TlgHQ3Aw<6UE3&ki7UMK>`JN%Ucj2dA0rE#1J3{-}>1Tm3u^f&fR`uneZ8^6h#K#LMu17^qktUn2tTdfcF-;C0qZngf^cI$r>82EwC z_e=Lbd-CGJqt7;G`)}8$~)A)D%#uvWx|46gnOyigQ z#@j!oO3^pd_)mq6LoamCd*J-f`4jrne&gT!>A(HoyQX=A^^;8K&-jfm{ro?n3tjX% z2lAhXuAY?n2-eyGscgDPe@~jgzrV-U;@^g{-uk_7xBfI60I~kBh{}CM-;Iy{{u8{z zzmR=@isj!2Fd2aJZTvL+GwX1Yv_634`sZ4$5B}h1$gA|hFI;O8cN)Uv{ELt_zX*OX z{KZ!5gWvu$B-_YjO%jH>heD06$YBx;r>x>C9bh;Y*|lJiGXE+ce5=*^OW$g>{vk{$ za8-S))%rOsZfw%N(`x;pxNUw6O&g-2)oT5R-)XhhAyr$g)^A^Gwf^2O@$bKUsnz<6 z|CoRO&ZSoCcfma12D`*=Fg$$&Wg|D8*%)_*Q#{@qKh*6+jT)@rr>#-?@BxW-lbOSPsv{UZ(eG(_Q9N5t=8YV z)M_2V)Y)pa{)Uf)nqJ-07GKx>lYRSValS=Sw>J3baG^@Pf_0bx@Kr^+@=9b;~@bcA{>yv3U z(|irSGM^TMLeP=}cyRthi*5+)Ku!3Uc6g|<>a*R-|xB8?ezcVJH9B1^La z6YXZ5#%DL%6%b6H`q?Q4yV)1#K16EhA{&8(iK?1+eK;t)xg&={H(buodAybqi0zvY|TSi1%iyN^8U{31qh{!=b{m8-|z0#(zR&*gButF^a=ar@r zB(Iafv`VC_e)RI?`XnyO#Oy};>nlT3zYx76U=}V5R@tuw0KTHW zY~KzFMSvPee5B|*hm>|OY74*y_x%=~Up094(^1l2AW&(FyC&)u%IPEr(kA-wRw&|g>~51&1I^33o$X(Io(A6~v1 z^gXxB`W!PsHO?sEXO?m{3>HVtb^{if7huk^P-rskT+UWlmI{rmZ_cWG)zIq21~jKZ zS^~O21CGa>jRk`+H~NECs&O=XF4bOTe8^&|;hDiw=BpfI}O;1Ar-a+T+!<^7}@9GdB5l*hyVX;PYLG3qb0*%Nzo7Mmq}qJaao?^#W4KzG%ib17K09)Lv_X$4#F4`&TLu+JwWxr z5+dx@7P9~b-XoAv<%PDZ?ld2+OUx4d)OAaH>Yw{5Rbqe6S7KLuEq3^y{dLk}zxrSQ zI%%=kG{9#4H=0%0pMnaz0v-1EE;-3pOfx7GpC^TRxlXddE(Pq;pxMw+kCUQI^X!$0 z79tGLDtOYs{lhrRk`cH!>&C8O)N}8jLUP`pmQ_CHX28w8m!fhSqdGQZfDvKPUSaII zk8x31z)c&4Ul|o0?NyQkw)Den=ry$#HuZQq=8xHQY}(hukI#~7T3`?#qP2A2EWBJF zC7EeIo{nFczUi^1Ok+VqQ7?K+MFkg02`DG&;D}*dXj3T8N2tGOq^+H*c=c+-)Vl!G z^*$J$ph+}^#^a)T_0}Y#GJ&)b`lXTc^tK5Yv`Tc!BwA~aiuAlfZ$G@eUJwpU+v0*o z=r$)IA()qKe^SpUDibY6W`*Ro&jVk!!*;0vNG7DOckIq^cdPTe`&{Uq<{a~WHJtc- zl4Rbjh^j=Oi*nH3*?wy7=hG4S1x)g~D&hgQW90uyhUUqRLC8dwjLd$Kk9CQevMSQ- zVBP$t4*f~FnGI!u{bpAr9pnIX62l$Q?Mi3N?%eKZ{HFx{KH>RUiiz(3wtXa zk!)L8T8W>`=Z*jA|M5G-8~?^X{fopKVMHNsWHWF4rN#!qD^Gsmst8eou2Q?}|Bwv< zvNPwaR~}}^&ysO|oS3SZCL1+@Y`!9QrN7a(6-0Lv^>_v9@%mM1`&j}p$vsHJ#DC@U z=9o305)v~ytg1=5zPw!IWtZ&H-C`Qp5QfSAlankdOhlhSCa$GNX;D_srp)PRnQhv4 zmN6USD!8s8^t?~njl909RfsA4AUXX!9!-;-DlediqoQubHped}!~4%Zd&ENxKL(}_ zt_5D;UK5bapnaKP`X<7ZMCQ#K=JI=aJ|b~q`qYsya3#Xkw;PTk*ND>@b9EUW8NR(W zu}&ELFniNyapgegHy+~7p2!T#idB=S z!0Xe5UfY&@Akr~u_s~c>ywmlokp43{EaEchN45d-Q}4xPIsnUYm(iXirby6;sSXq4 z^+JA5wv(il**nD^@*pYbP1kJ0d0bA5#3ZldK{Yxx)nQtiJPX@ch-8e>qDf0r9_A-m zS7tXD641#*(F*3JZ?8hYah}O&>8gg`co>PeuFnwzJt^`DA};%AcF6-?Ohn$Bew3_S z-`^j^!y9|O-s+88Yb(9p%|RSrUyD~(SK`&x;qBzktzK{c`u^UX!T#+VtNXpx_*UE3v{SR)V4iYtl76FQPpt=P-Z5=&m1+%kdzZA_ zbse^MNb96`@*5Whzf$|6tb+zKrx+MZk5l1cYl%crz;Gtzx?Pf`RAzQ~1vB!1^oT5_ zwxzg+y3VA*lPP#=D^paYz%J|UhZdrcF0k{F2E^nNEt-5+lWG3&*o$LPHh@RT;9b|=6hTq{ z|H>OAeInj>U3pF1cOHw`9J6*OE4{{HXnWA{L_3Txos+aW%%@dnP>jAA9z=vf_N=zk zA0d+3-ipVcWdafK@O4^(t=m;R=XK-azDk_Kt0Bzes+gs1qs_HV6EV-2(mZz=Blhd) zM^~>DYJ!*ycb*r8&2z%;yT@qNq94N~#^3Q?J|!~TSV)dXX4&vR!yNVE zY}gOqi<^}?gYl6ExG~IYsPrxENYMPST^atKAYjc(c46XVZAJzQe)q57P1oAeg*>*qcsFY@Tgy zcktdEr?I)VJWR_Y(h#cCNz$h{5<~y*jN{jxGW~JVU+rz1a+Fv7A|79}M*Cq}m}r>; zPX_U%9LHH_A`}KikPV?2w$Pm+r)Rov$GJq_S?1aZfzDtDNcYXO1V*k+CkI75Ogd=% znuwzhFE6KAl@$B&AXz?1_fzefwwTgA8${XwP}|^6`se{+9cZ#Mj@8{o{gYRXo~Xa`07oNW?P*}U|W2I7#B(oyt^gAdGu1in3!kA`L_ z%bI4EJxt*al%`UULG67V$qYf+kcoj51fI#BY}c4VbgR3vwq%AyiWg=-FVJ&Rn3J?f zMoC$co#$rnlTUwa?1YpiE{JR=@U-OnMAT(6i3=Qah_ot9O~i=0=J_EkL1{^VM3~Q$ z_&8a$CCp)5n!O~+%rHGphshAMoMu&ShE!=#X83aoF*q#K1m1N$>HStRe!a&dVO_`?5!GC zg;U09l?*D_ywa@ym5JhF9GF}h9+bIx-QP{kKGEyjH@`Tqkcr0Wq})rQx863{X|YNo z445T3-yqcRgm}Gh;j@QhB7|qeX_ge{6|{83gEFGLE2M0~@iwdc!b*y^j=JsEDd@ZH z&y`o5tS*MV(BpiV^ob(Kr7RB|($<)+i!&q@#qF}|bXfuExObfZh;BAHiu{h8u@}tk zf(^LsystqERvwaDNMTk%1QT)BJjqOKuJ^7l;j9V_y>Ue=TJblIPw|BpFrg4atehl+ zbU#go0qtLjpu-cs*sMd|n)N@YD$CES%CfnQL;2H*ucJKv{h#>~p_hnag>DkWU4Ec7 z5PE6vQC1q^^S&~=;$qyF%bwQ^Nz*Y$4@2MbS~MUB{CMI2S{=abVSJvgk) z!eG&?_IfuutG(5myx%h%?fP}E(m>j2rqyrjUVtV9u z!W|=R*lH1`q)4Pl2qHRroDIu$sg09pj179F7Ouz1iQpsRuU|kgMesS>GHjLNV&}M& zG}uK#%RHNe>xeDH-V1A(@GYMguuHUO0JGLnXjJcFAhlz4U@pYGlND1S4?j3~H|MCH zhj4iJNbpwJo@Vg~vr*gFS+kAOs33@sCgL0!8Nd4r?}#4Dssg{Cc7kZV=mM7Gt0d@3EidH`xsYh))d5FG<2^H1ddrIvqz)T zLQwoprZ{TNg;iXv@r&8lxoN_dm_YDbJ$uJVv6q)gKg)G13})bbwp+s_tJ3P!s-?@R zyrHlitZxc(&`AX!mbs`g6fMFA>22|0yPlp+vnSagk)@)g;S{Gv)m^I}c-KMnKzcL> zqp&jlY`l$-fl9rw9A)AB%JrpA7I|&h8$$42;SOF}@PfAl8$o4Fb1#a~&UAl2eQnx` zQm(=fzbHlzus4F~lwEh;Ft8!jg}GR3)v~nqmBFI*CbYN-I_iK zC}SfM)i>%q!(K~|oO{-MBmPW+lvkZcKeg2kMWA7hOr%_hN5gSZ)R@lL4CA1t;9s;Q zD4qgfkX4!RR<}6Ti3WB@;JyAHjGh80s22coWnp2V4fO8FxysJnD0Jw@+2AlQ%4ksn z3Cb!NQY-<25bbkLBNP=7Et;=QM4IP&H_$gxJQ_ud=2w0t0N|yeptP4J@Tbd2d>b}Q zeCk4{fqS$E=ign^Thy~3Iy&*9QoI3lO3#TXMnn6=}rEgZksnoEsoqU{BhnUK=G$%!#9T+%*%xOL?{Mjuj_L!Z2)=;#4^c<&? z><(1M_lm{o7nph-wHmTW>wz&mFeJnD>-F>Iu-%(7V{9!yJyj*hr7`NKC} zq;)v@#_>B0tgfzx7{F7<0>5KjQTh+PSoe#Boz_4CS-wsuNRf>zZXcX*ZcAEuT4YLcQrTN8Gu(ndT9*`Y46YW~8|O^o zc1%QRM{BOh2(O*7W*oivm}U<#cdauaSm)n^fa&H)jc7{7?r zMEf+db+T)amJQPh0isGTFJrMJ00appb%SCvnJ(>T2)4u$u4OPAkfZ5Qv zIz$?lX-((O3h))}3w-dS4eu4jOa&BofhfKj)S>^x9d=e%y^Y|j)w4Dlu`#F(OMtf) znjm)Xd*9zsu6C;?Ttis+?uno-p_yYrMmMUp)UyP&dj z@3cdkVAc%K&AHeQp|~jSYqkC*!F&ky48}cvusIwOMrkJ2PY!W_3_`0K+fO98z}Eu7 z%SYYm902jb`tE|~gSN-uATr^WU4#%`Y&K|`S*SK`BRysQ+)W4ekDh9!zzVzbc8&<2 zN~_Y}klHagYXVRxQTO0{_fGFW7Sg6IPwkWLGwnWz%3>>KN9ZgMq0JDBih+emc}Mf( zk&Y$YgksxSrumREdw!BVJVw^Kg-9lFtygaBX5h=wMW%`Ey)Td3Vbs``;dsnW*PLc$gUSbBXb$wRIB5# z{2*vHQg05#5qDd{@!f$a>(kHaggw~D@uJWr~D;nl;hgZ0p)Fj*?`F zNsytCw#iH6fX?z0vvqB3s#kB(y#U9Q_*ov44-W@K(}QUd!{tMu>`$`+{%~3XxI}Kg0vW4xaI1(p z{l$D5+yVpen1FRV*(!kzC@xM_F-p9AjjAM-c2+$AJli2_Nz#odSk_kC_%$FvmVEw} zj^9|ZMn2H(^1xgKe>_QI=D;(fGh&aIQ+r*ppLjbyRxWK31&$)!;S#+jGWI;51$&vWXlNWKI0KmG@QNI_ozTmPR?kQY(_!I2syGDONtzX45y>A!te3dA9AXbb@L$4DpTdt!67fAQJN)JoNq!+_80Vm zxM4g?;^C>)(BZxXxcnVPfAXaAIR8V%ZRlxBC13?JbInAf$FvdaRTzCtp9&RU`8Lvz_EX@K)l={J+R~CWcyr5JVWMeA3<`Y0s zns_wIPtX+AB`ZG%o|L9c$J0?2XGuOSN2lFcoHL@z=h8a~S`S5#yLBY;yBjO3*RS7R zz1_RTFIIZDZ{4|h`}QgY!9gFtimEqO?_9ri;9*q_QN>i)?O25>b z!+e~)$@lluK|(cL!~WqWFceauWL(567+jqXbjQFx&kqhpjuyoAV9L|+UOp-@={^~k z9xnYZ%O9rI;f~a)vEJtrIC4K9<;4>^=%+;-{0|bu9&TX+Sv=soo?Q4xIyt`XR(gJX z7@Ym~t3HZHBOEbvb>m6eO(*I8X*VwpsNRQ{uU^%R)^aSrYo6w1neL4ej(IKDp?vR+ zk|i_Bvx5#|UzQ9~jilMZ638qWiJx*XE|ZUYhbT6)kY+XjicBLU z*`Mq%0NW_yy4Wyn|I5Z=7yFj0CNH^+10mfv@o}7vKx(x6VS9Zkpd+Ff@wvUZEViu8E-X#GDl7il4G2F*~$i^=`h)Ps@y=yjYnjsm$2(5#9vSz0-75E zJt9?-iJm6qQC!?0@kgZe==oDkb8hqTI~W;;XK^;n#}6n&BixQ5gf691RPI-k_2p&0 z`N^fI;9O7vw+gaB;kdJ1=X2VpB}EAky5np*=rUDv@NpfYog^FHOEYX^YfPBC#dlt) z^S`@oM0zm4RD%}Hds)LqBLwCeC0m^Afi{rtn=I#j=`5rRrDX_X!$3Vt6}0y0gcnF3O80_FYsG^vc_ zdQtl1b@f>~NU}1K(yaPmKYjnxXG?5uDbrDsA^Svmluj1w?P+~~Te7qBsrf;2Itylb zh}VAio&|Caz$h`dimt6XR8)yR4xN&Wp?9|V49lF(P-HvKg3%zn;lXq`4?g?(TMn%UwDZM9GTv;EL!3O$mW#!Ik6< z&p+WVK9388;VxZZptYLp%CotI5foetHQ~YQE?Dq~Xlm!j;v(vSR&4opx;chE3dm-h z^Nia04ZWq(D}@#bo-l3f8Ey1k>k($`@obn;w3`i+W0J#t)0Us4*VW5Bmp=pKBWVYtkYZwH0G@-_lXO@e znsHnlC573IJfNF#PQEY-0ljL<^Z-X6P7>lh*i@fNDrF~^*}SI$Ui@$3gN4(azhCja zKw^Zyfha0y_ORgoq8J3(&o1leFaBdS*Z$&+xfV3<8*BfQ8xOuj!ttXo9?+>5-F`(a?`f~huq14Hfq{f{nasO41)IKW(lqU&~AyB1Jp#zy=9$#It@=OD7dg%4k+ z)sr7sX(cWu9s`9w)FRidjfI@>&!*Y0<$I>RgFB*7+_y~ar>~J%h+a|bmAn8AaEI!+ zylU6se){?yIOo@q%bZ?YRS2V)clf|{!X-Efk9|vAW(Hs!$Y6Nu3-~ALigIit6@v;? zrhd>;Xf6lUe3J6vsuVUU^DCqYE>r2f1c6DaUsbiX;!Xd zXXHi?GyQ|K*vy6+6-^rXGLdmP9hcoN%bbSl>R3~U9z#C+yoVOwIYbg@&A+H`P0y^{ z=EE0?%wckTFOLfjF|vIG;hcN;PG_A_)vHKi&(`sdwh{Y>b)Z(^{wssR+?rKfdzqyK{>fxx8VrH1A zT8D)Zbc0WO&ywR*b0f%EVHE;(70}JNCReLfT z&S11LyOYA_8K=Cle3DfBVFuL?%RxLz9_7WeKk9C!Z9FzwBKyN3ZGa&0qKb+CrF?LiOo%9B0rUV8LaG+{dl* z(R4IAy`N_p=?z}Jt@6R+oo94mRGJ~ULL1yFi5;D0bia-)Aoucqj4-0c^3ReosUBD1 z%HKYEkou^l6B1taXJbsD_X2-@lK5=>MV7u^eUST0;6*Wdm<@ROD~#S%6kc<@7Cy@d zz9fJZQe9kLS>K-owTxU?-gi{<%bf9P)&E9bsYiJ+uP%MRclshrF(e^e9oFYavK3d! z&S_S~K26m^61)zbCuD|m)OVwxa+4*>78=CWx13S3Lv zqvG508;=*cA#7y`vZy|feGuKtX93|7^Q`CO4`r$i=ak)8T9P!b9pZJtUUePDeW?ix z_hF8>a0No)0m}yUV=Y&TD7eCS1f@1@s(if$tHgiuVO}{R%|5p?u_oA(!wi}gUNdzsw7HGW z-AD!{DGcS7f+hknZKqf?&AUJ)h2+GR_Kc(vG7>d1kPh?o=m0xS3F?ATuBmC_YjD=U z5g{l;OfZKA)@P91ptzr*no|1cRi?NbyzTEEM$4GFHs69nKiFeS~}mX+9PPV{!(WvoXw%oP=LJ? zLQ^ncc$oB(%#cJrDBBc9 zKC`ec+NI+rI60Q@BZ-l>BQbnVkK8fAVLe$SVPWuR_S}T6Fka+n!7RHW^e==}kYYMH zmMvDac+NuC)2L)erPHWB`yuSep)Af<6fIhoB*&)2YKxPb?lu#5R4kYPnq`i-6&rAU z8l|l~Z^+HdrR-@Ge$80L(dj zN|Xv-PM#opA5wM4#pf-kka_W)ZU7P#8(5EATgqJ;Y)_zMcWSI&V9rtx7fiqvXIiiW zQXo9T8#))p7fcLc(th#{#xq}FreRL#mltQ}OldI(&%6&zWgb*b*0S)kZ^H7vga$EZ z{+e4P1WBql)@xe*VQp`PlX(Z7vM>nDUG6oEAGn9D*~%@FT$;EzuhJSaiXFOi%4a#+ zZRc(zik{^*T37UFN;`_GbVjfpwiuZOJqE1Rcy~^220;yvf2;Jqcx=ViW0yI(86>70 zSi5y5iZX-F>@E`+4S0VYFTTVAC-iT`)Hkbyw z>nNL!Bi?iJ9*bw_uDz&^c|N1A2F^<(_tb^c*s~igZc7zNog3-s8QpZ(+{8i%=tpK1 zN+jQ-7j~w4yITX&yxic&bmn)7%i|nK&G^xa^k%Sw4>Pz4u_Jvs?D(BK+)x)h)v8-d z!YaKrknaHWnWpKPHP-3xfBGy!sFk|unoGUDebd+bz5Fo(vcHI4VlL>eVtW9U6JC-N z4|}G_=!I^L_3dt}R?T6XN4C)Ry6xPR#Iw{3WzB+W>Kiz0Z{ec1O25OOZ?#~$wJ7yc zWzfp<8H9tp$q}jG`>pGu@LE-jdW>g&yRwk9=`iJtG~Uo4t!u&u50C$^Oi8*nZ4U-3 zHb|QZ5$K1q=zxU3kuVN;8|5`8KHRyB3;>BUxG1E7r)qxXLVQ_{Gs;M3Wc2(tO7eSk z_~HZCP`LfGh~d!$YeW~G4%q1p9+KTh-_K?XSlR;8nuNIzKTF#Na~1dEN&3cGjk-Kd z8uh-=b_xM9(pk5AwAeK6raDbh4=4*YEey5RnGypE`$}9xQE%!|+9BN&d9~K-GtKq< z`IuiA1rAB8~HK?0E4O^TvHFSIel&fN%GDfojSKn*2gu{lbSdB*P#2SKRloZ4N4GgCWV zZRDKJDc}EqZk{@)@B6qJU{HBo`*j<7jy{cxAz0FS9UK0Tptq1hgN89nb-_uQuFh)# zL1|tCO;Yqi?U3a38d9l>$}%hS5Gt^H!gU6txW&5bhUto8<{5(*?x!x1XF98q4)DzK z+8f?%BMtL7Z@{vYJ9ndOghQhjpkDwX)nH|yYJ!v5)*Mp!m!{KUCHTqC3|ToAMdnOg z_rBn@`;7uAjm?3v0rw*QJ><_y!A2seFBS>DLONr+U>fDzyHZq5f4bmwiYgbun5|2I zH(#D??y^zIr+q2o^rS9K0zN+HazRj$>vn#xih+Q9=25f2KBEHAx~k=EwtY6?{Yu|` zueY{%_MmLQi8rX-+U>dYTe=M^q-Z`Urq#CJ58V!AbHad4h&e+sf z<7`@HAjwV_Im?gE zve91++6Zak&4m}fdb{ZKJ{$Ds1q{w;fL`>W(_~(n^&%UVRbfU+c2FJmUz)ZSWW_a` zj`^DP)t-4pr?L9c=Dqt59zOcy)2(0o!Dri#pFI87pY1$<@%ayb{WtzXyf+vo`v-^V zmq(*-HTs^v#9-)8sY5uIi_PMaOjnD$9YuRZ^+kJGpVYsWEofPqGWy2(^o+XrvSwXbB*r!E;i%0B6-!4mA z;&Zy?-7B%`NZucmH=s3FLP*Ar$O{;S@?)m}LQF@kWej#13vI^P_u#T2$w|3}+X8sk zL?UwA1Skh#FcVq~-jo3~ABv+%6Bgx{@D9e2g;QBN9oj1YKO$XJ z+i%4kzN3Da9sOFqhk$wz$CvpYpYvBkYR#dFFiy_CrvcK>i&I3iQDQb^;xd!z-Y6ZI zt*4SDa41Q+%A~+CGKo0`WQaGm0mAfv_ZFuv&YP&gjSx3#c(>^wy6 z_Bvih<^E|>b~Ipk0BoRRPBz$|B8yI3c8GEe;)jQE6}#wRdMJFTe?u=3nHRPRC5MoR z9oHke597UY5@9n!oj3SnG4Hhu{y%wtqJjv=nV}lc9?np@V(&o*`qf?;tm;vK#~V)r6@^SiT9cu z4+QLp4H|e8e>!Vi3-q;XqIDsb#+oo%5u_cnDwmlN{I-$0{$`_=1Z>PSw*ZYd&}=0j zeNKC`4SBGrb}PNVVkJ;oKUcVV2es<-v{QMZ6?I~g2t5v*dWqod!n~pYTi9;es}urc zg{VYX30>Cc>hW~!5#4p2JfFmvSZF$VHXl#N(6=P6o6v@4qF%%!=E?=dj)`sp2q~z% zs6ImdMI&wPRK=@TzIB4T(BLk=55ckDB$}ew^rCvD(`ZSX#x22R1Pof0Z3IZa)*cn< zd4*sNQWq$-rllN!&0pyp*HfdU;kHuzk7de{1)yR0=mKkMDg$0{M)z@Yr z`q2XCC3{2K=^Hvs^9DyA7kArHaC>8|a^FN$MfM?{X4C#GKVV!n)S(XiI+FJOtU3TE zGQ7j0e&|T1>ql20eG}}{*9~U)cEFK*6n;Ts-hRa1ibq5TvzR&qN`MUrs1FIwwa|q3 zAa33}r)#|`j$nCJz($qx{jGBs@{1B#1saz!aUr$TxC>9bW5Le+)R^pm8t`SPbmnnh z6cK$|u`RnAB)3VkD#?ZklAY5Zp=Y3>gdh(G%`B!6x@S)UUj;LmG}RA*L$!b4@l7> zCoSb(cykz+2FbKB7_&c$%R|G%*_(3eGwWxJQrv69mv$t)H_A^k$}#Be*UbHApK)sO z)3Qp&ifSL3EZ{uyy3mY1&V7nJNRN|D8+RtZAVkH=e~{n1-c^Bl>E`V@jEIL8`(F6hr6{q zV(Uk4`7$14CgnlXCEGYe36q6~BtBt%E|$7x=P;j+hPX2#Kk~5Td2~ok;^B!@NQ&z7 z81cWsZNuwVmLByna59!*BlEl4|&~x@J>ua9-1L5lVJm+<(lH7iSQDket%4cBjeS@bpNp&p|`?n z9&ry2<20k=_swLTA}jwOA5TU}l`NTYTGCYuT-d^g72sy`9ICgq=FogI)z8?5v7NXm zX`F$4kK95c^n84?x`bs>N~4Y&G-xiOldx-;V`0mCafwStm@=CR*vsyNA|5QzeeFeV z+Jv7E$!R-HNmtxgo0rGE!dc5lc_I0FNH40h24!QEPazu`zCj#+`LdaA$^h?hLfykv zBh4ux32FfYsrlqw({xWY<_WX#B;g%HV1M>)zvo+e5nb4)8)(>2e3-<;r0DFY$!OSL z_zD}g8C04!!ZO}^4uS=7_J=bK7=f8`nOLbER#)Qzq_~}Tuf<_mb&&J9@2aT{nyAAV zI>Rk9=5BIj;`WaJc;c?6zN$f3HLS*oJbUWg6kp?{!AKrird3{?UQwIBwOv-Z86N>3 zxGKXp=?900ba}m-Iz?R1)8prJWnX4QTRYD_;mq&9zJi@3DT$$GjOWTXqN(x299%U; zMA}Z%QI%#Lx~hg1?P$?_Z6dlai?(ML&H7xhk!G!ppZC(;8W4tPX>5p+G zMjv@e&B9j!AA1W^rk&pN7yX&bo{%PcN#uOzP#?>7O29F*4Z_oAc~Ijb{K!pxjgv6T zXBy{T99=&FpNX!yZCJCiKy~xaVEN{PjZgqq;DOzIfT|+Oyr^PvLFUx5w!PEezlVls?fQ;7U#TO6yp0`5;u036>d;)SljM{~X} z3(TDJCDw;#*?a?a@;o7)i+H*#VFxMni$*v-r`?g_74OAKl6-=hvVF;X5Q?;5VAZH` z385QLQCrY@$jg@g7^;s)x#w1=AT_Q*c5DHnb63LK`doq)6x$lvmO^fz^3Cl5k-N2y zWDfqpVpd1r3fsZ$<<5fZr*Ty!g?IMbp;`tnnSN@aR&A}Q@m?tofe_gU(Z6ITx~DTs zmq=)f=E5+gTKja0%Vmm~2Mo0}1Itvcz6uMKBUVt0LJNQZwmA6&qfcOPi}tDTqKVST#rN@|WW;@J zs9;D){LRX2WmXbc&-QZ}g)f5%W(;AWjsJg7nx?U<3ygbR=1=JTX?_y!5x5l_!pk%( zf48@+7Gt^4^YLVbA_Cx*`kqtpqi$g5z+)F60ifhfeZHcVfFp7I@s;V+3)lcxyCuL=gGWY8 zGZ#ACATz-MkukeY`t&Z~TTHI1xv1z2BDckU3Qll{E$Q;Ia3h{Te%}~$N;Od4M9X^W z!&(V-zR@a7DSZ^;$q>rG7mG^zYsKP<{sgNCrHRlGYFfS_MLQffe35Q?b1G|R!gr|U zfb}?qrKWT6VralTOXc}$1Fb|m6lH-l7VW}PJ*LkgjLUlKXok-dKmLi&6j9{+tf*p> zlNjZ+YodD@tS8}RdkKlG!E1Q57Eh{Fv$(L$xQXqkm}Ij9x5vapxQRNEzgs2#!ylrz z92jFXYJqEMpV}E>7Y^e>GHzNr;9>zKc!~4vM5zjf3svWepBGswv1uG&r0SI{(MIW0 zJ46+%Y0fOKOqu$g(P2sNVIjaN@L+S@-u!j5(!;{8HBVDe&QG-a}4dg;xmFkvDfCdFrHHCNl#)Q(2dd%wb%Vh!W|(e6`zN zSbX!nkG}ua+udDFPVA}le++ArRV0Q%7M92-@_S%`FGRb$wEJgD6w@v~&!bkN2cBN# zTn!ZaP}98EQH~E!elVYTk(J($pRzQ|7^N)n{`Y!(Rb6=^2`#-M3u-(nu_Xxjor`Ox z?rSQMl^XQ1XP}_>O+>~KPpU?G2sAPgdub$+NIVo&o7}v~>l9bKkXwV}d3@gn1{bJg zR~Fhl>aR`oqlGtML~m#q5@NKVu}V~Gk#q<-3=#-)LIS7Rx5F2#&S2f1NSuRpJ1cWl z)*4RX>%}l@W4jP;zbVYt`hIV`x*gqi{YD;(SSv@z=~0n0z3=7u$ORR;+x`Y4zHWlV z6eIkYE>3<4a|eF0W@XzvCMHQ=@vHuInD6gVTH)<&^s2F$ z-0eb}n&{kJU39Wi%AimPP6G~dXP*8ReqcdHXlE{xB2Ypv(4Xl z@%Y7OFFtwr^#1cFpFg}GU2wRjvjQ2js_HR8Kx5m!yRzzW(rvTQ-iGF|>NI1DbwYNKRrD?od;jfn~s(GbPR{{=kdB%@kYJkr=R*2iL!detSWc{ z*LXZrYR#A%wNhm{Q|hKMbhjB{kH=``g~KSX5Z^mP@7S<|DbJN_iXXi8&vOy5Oq+Y3g5IcHq4~P8kr=Rk_<1znRmf9lE?)n*` z(sPsB)gg$oRxzvVJN6+(P}}K%GhdNm!v1Em&c9c!l`}C_ay6iJ-yxMB^X=65Nsrj^|CY-nSW;as0Z!f;<1h zT#%y0*u>7Xp?E2Mc~LiPAh(Es=1B>iJQc#vRr$`a=2?fdfWAP4Z4O=F&fv?KXf_17 zGOq8LHOHRzc*)dK@2 zVfWQTsii{+;A(J03LEnGV!lh!W@-WO?9%5J4rsn>~<5x5~r) zG1RNy*G<$lZE09&T^37P)GguKzw}A+Mv66|b+-R*w+mzE0QQ=sq?p3wby`-l&KJ94 zc%SU|WzF3b)vW^wtR;EC8idOn`)J6EEO zDXdEo<^0dblSeq4xQt2mrEWROtA0g|!LcPjh0%))vZn7xEOl0b{e=|bmdSC>!ABr8|cil(e+fmrRnyd!sZva8w2ML<6Bu37O>|@##-IG?92}lj(gU zzU2qnn)^i(Q%EElHu*lGgTZkfw^^1&1f^znX(DC?Fdh!)pqQHIjN{iGcu!$2ZahX( z)5@H7XGQXMOc#_{PAAd@jRq_mFX}A25flzCr_4qn3k|@V1;ptF z@u*1R;VG*I9wE&c6OdqSH3U-6AQ4tyr#I-BOShF7G%AE=%-A`c7^F)q!51B@qysXc zh)_SZAAI^F1l6gpK3BrFY0M;0W?43qpkmGu;5mGI^Vf-MGl8v`yQZy11!47kWYYeH zJ3=+n+4k1spz_BTtSn}6SbKvDbnEitU;3~XJ3>ubQ`5uh7p*uEsWu9_J@`?P%Q@@N zff5w@VamS6=9AiDNY^MHVkZI=weGlzooNP+$;WL^>+u~jgrG5OPASQajq(uUWPqRM zkhS6%XsoZq>|0%&!^*M%soR6c9J04-!2mK;5>P8rv|bg?{*rTli6hS;{FS?rL~7eO z4qp}W0F!d)*lFO-72sxH7@14gN;=a6 zbR=IQPP13M|2lpHk2h8799{giz>#sRZn{B(FIL0celHU_itu%AV4JzZAOoCaF%o^_a!~q(OW4+N!CuSOcAWs z)hwoSy}^orhfETP!Dn99zPgP~!xgqONuWWHGfHlounZ*_62$*JXK(Wyy!9+Us7yV_ zFfEXidC^4sa=UzFBF?+Yu4Ui*EPATcCrx!BuFNQj%gP{)VY;6Vj5ZXH(&}{46pWwJ zA)kT)EZT4+&OAjMiCnGhqV;9%%$tvS=8Eus`Wed4hu*z!PAL=8)Z8t+6dG(bU^{fr z)MSf_{M=Y^+FjV-`WEX{>A{=G$=`h6kZ2Q6vy&Oc-BWwBseToG~3tf=;Ysp#?gtOWa*w&-}%c#vXH1ft^;{ zvE(0acI4XFIWI#zujDzK40-LqdQuD%3F)h0uvSKhyCGL9A*o&(nd}J?Mp4+do@GYj zasr@pSGwb)8I37fshhKE*1BXQ{#w4r7j!$#R=&stIDJV&oSY%b?oia=>E$^0{J}FB z(wT|y$Qg|1>EI}--UE^|Cd?|>{te{DF=XzOSYmxLJ$yU7xR6-oY0`pN5Q3?v+2D?m zA{^N}5Lqs(QU0+jg9>=$z)0CDAEiZENiPnN3rr9Ja>TgeK=&ftMjGWEk@cl8nNzp^z;?T{+ zxtJC66mY;;Q86W8iN%Sp?WxUuf&dk>6-GEA3iBXjh(r2ZJs#oA(Biq$%W*AzMd zYntiEX7Pi9sULeK6R6b1Qgd5d5n-PAVo!;nln(_4x^BZBeN$u})g8)CQ(B;%W*BMW z_K0$JqRz1xQY0*9QKD^Om;o$qBgRGp+K4^Q6&#K-@c~Ioz5n;3Krm(0;kes}xnLGR ze^oRfY8x4qDiZ#ssSe{zp%IA7S&)~Ia5bsm;q^dfa}bvf6k{o^^a9!$HgJp#&uufqe-A?prK zgZX@Pc*vKvaFKyP$Ofro=8oe6)GKWM%!x#P1lax^YZeR>{7!KOU~WhkY1u7o&gxGK zTNd){sxGUzz=?@5EiWvqJR2l15{Lz?=4x;>^RXo=+!BElQ`lJzk%`}{v9;1CWX z@cF1K*}UxS00C@*4K!yTzZg}gSZ%CzcS}4HSHWJB^z7s z+->_!E|R@;PRZSfY)XE4vH&8YBdDWv?A(Yur{leRbno;x%X zGm0B^3I;E^+4AA*s)+dmvqO1r7DSbf;=On3~j=h5!wt=&yI|7~E`iHmWE zj*y_p!`0o}k9P0%GzJJ>r~HJHwaVws`@6Sq)jm%r-p8Bv;~*X-*)T3#-*?t_Z{P5~ z7sC!>+d6ysYp>9)-P>!f&|zF4#s8p4V&whv%B}6*zEdlgX3gbpyK&X??(O^ba}pQTq3iwj{oUIS?8p7INZhwO*LOGFF!x9KWOCY}Fhn~G zcUE`rxmh?!7)uXVckgWO-f^QkM6U|%9lzDX^x&{_oR6ybAnBCpfzHpJ&D~8mCQ6)` zW(S=lJ5EOV#0PS1chjK-F=NG;FA^3yxW0SO0Wyk~?5HzIXmm`!cdqZ=eq!+U^}U zDdT((#5Fn0GauNs-Fpr}lWBQ4N&V*6{7EkdX<6n4EgwwI{oUKEw(oLKTs70#j|UzUn>TjvIU<*`_{T4b9&hj7+jKp0nLlnDI83Vq zX$+4~JDmQ|Ut;&c5FpClE}6E^(^&rzrnVg)q;$ZSyz_2*LVSyYGwHzFD{~#kgoS$w zKZNfp9_e8apU^wK>z&?;H-DSE_wHF-H&A@N!tDpUx83A4RaohD*1R5WKlE8!eW5fo ze`ht)SaxrJwxF2mXmM8g@P;j9h{{(q6Eo6SavX5%y%>WYUkoBL?LE8zb=>;_5c8~_WLtdI!VPYq*A|MN9;zgFeUVV_WS;Y-_z0wOR zJ*|btLlC_vMh`QnJ8sT+km@h=YB{tk;=~WF|MBiP#&F}B2>bA#*L;5s+B&P^_Ii;LXiBDc86t%sJi{4wPbP_m}TJlHHbeh1FvQZowBp0z3`Di*Co!-y0EE!;zYWou=7lOl! z#eRYjVdpd(_-m*g)^J9Q&`eEs4e#g{nM1U_i&T;^HjK!&GCLOibUz*(CgHWTTlV8K zn6w^O6E~{1`^YsLgDU}wZ_HFjTvkn%2ctB}D$*7BbVc(44iU3+YL-=8P5H1$RGwyo z!y?bpA18Vbv2|X6OlKe#MDg;iVGl0}a%;4HF(D_e({+MdIHvq{-tuvMD=K9r1zx#1 z;Myu}hJj|mfk*ODpzDCxbV_Z#kImY+iPpHkKr@NjJvttfRTINA1RJcoaAS#XeO2e#TcITOZJ>^8uYx^Hi>7b7m}BP=u@|8XTpABr7=u zF7o4#aDOo!zrZCVwXDi>W*znRa_pL+vQg#Nw{J=;goj-=iUGHeb04)nUW;TzH(=(O zdG`E1>4En@ea1JU2&`oAdVTw*LwUI5g(h^#q*!G6bVzG#I)O&sAsPk~2k{4HP*G>a z(fQJZ)%iBgPCOhINr?qVf*_p)V-^31qd;K|7hPyRllJD#oqG`s(jZEXwsk1HB5D`T z>K+vFAlU~WhwYEqR){Od@F{!yr_+N3XXTu?N|g}0+gviL+<9+{|i*D8mq5t10)dJK7ikD^iT{4gP`H))c%LCCw!rz`cCab2qNl6A&x z&r2mKs$tEN(|biSpfvWPw9er>9^87=)GXNk-IeTqK3hbK;`VQtIOln9bX*NVlV{&= z;9;IFv292xZsSntX55Qic;KTPNy~$~2>f77oeB6)W-cc%HzbS1EQ6Y#gk0p9n>Nn} z(U4gj2LU)PRxS@V9sbih9WLiDb)INFoHfDBJm-yx6%-OjKFe(c7*~eT@nTJeo(vlx zwgUJtKQYsZJ2SB@KZhR#4kUO3u;7yQq{Gm zuMq=-CQ-&8@SME>j-+D9%Q(Vl^8NiXsrt6D!QnJJ;3>b+r8C#G1DfIgPLbyckuY&5 zeKZIhZh`3#dUX)4E**r+H zYTaxjdsdYm@qH)Q(@l#((zzQQCqV{-483*@g7t}od;>LnGKci1fT15cc%OMX?Ww2 znmB`cGm9knie%lvi#l-&avPPR*|TdwQ+mEa&;JA;XS}fCS27CL?5aTtJ@Bw|npJU# z1|gzyD-*g?LJ@J)G=(O5mgklEjfauFKL)D&8Nx|VRFhBNzv0Qdv_Z~LESajHO$>4& z=2M%ahLmkDww1vpU$L$jwM;nE(@z@s#5bbyxev;~Km*tu(ltg|av~u#axRJCP{}b9 zhJ!=uL8MiFk|jl7s>x=gA6>mtlmoMOYCeyLd5PmGxVnKH`fkzF^vYgMF(Yi881dHd zUIJq?Uu=-tmCj{mma-O}`M_kvwVoxoB9n`F%7J`+kQ}FjWSbA`=stT$FFUyZinIi< zFk(YwaHy^R28B(>ge?G;ydUJ`=Y!IM(8d;;ICguMVc^_AdstHVjKsvi~wwqd|3DZ#9z5Q)-^Th|9|hS~L@WHK9($U^<==ttpdz!^7h zl`~y(i;@Y9FKg8nNi&rmt@7p9+RFBkiL*V+oneh8P&u)NtU-J9$dVi%uzj4I2x$i_ z>M$8jacq+uJq|W`?T26@HdCFkWGrGI|%AxB->G5BQsT6 zm8P`dY7CfwU$5cz(0F7&C;xL#slWZtH53st}bE-;uS z6PI+ZGAXOXyYU8(gu@2rErD9+#qthTk{Z|~HN<4Cg>fcBxh8zKGsI+fI8>RXeGro` zxY>)#q%$pWLkNUC#aqg@Mq8DV(_+*qNzwAldR&U0mu7vCXUDj=sVd^EM2Jd%JiLMH zYYr1R>okJD)(4sS0ksP#?AYp5=+mJ$TZD>oI=(RZ(S=1wZ9t?^Pv|sf-YnU9KhD6c zr~A;rY8fP{m$S4m#gL#sY)&usYgEkmnX_WwPd($uQm*~cWL&}{ zid^0x6SJ`G;8sK|C$Fcsl!yb5Z$!j1X9o56+~}3Vqa^7MD4g*7 z)?m$#Q*DZLQt4p>fy|qUix0{QuQP?7prBbEd5q&5kz8btp~OTA9Jf1**|~(ZIfN~? zI!tttkK=3_k4C58H#-jZSOZw0au9-B`eW0_{&Jcu88|-)psYkYocznSm zSz;b1C(R>r%fyqZk8=TcMySqZS|Q};LMVzl+4o?M;^jUlM*9K8mcDqkS(BH>bd$)G~!6D*)yXIjAgE>wQB&7j+t#SjX!pSnmQ=2^#VUyiQpLN`$MK;WNGse$1 zFer9So5UYWm7Cd7oVP+e)vaN%_=%*jT6$*Xx}5(zhuyj{2F&)eJU=SUC_PF%bCTWa zfSG!dp9Q}pP38R(WpK{MLsdB` zFE<3X>1IQ3Ei6R4t7~etlil<>LMGk%t#c*6MdIMI>%qgT$C}^(D-)Rf!8V={n3k3}oMG@P}ho?)5cDl3_=kt(;s~NrXrCjYU0eO5*9KvRe4lKXkyuoVn&rLIN zc*U;Zn3s^Lk3NV`kCeXS)ovX7%=591GCmwa+cV7a(V0Agut zKWFGPGj(1B6oXaGtMd)wz)BZ+8ix;Fpd%-*(LBJqpm>nk#gzQRxHNl7l9?EaL%51b zolQn%(ziihXMrd)`wpF}gIEMbP31d-$~_)RKyo5H`pxEFJR;q#-{Z*+h_uNNhwuel zlRCppW>Qrx5kG+!SA2nP+a-(4=CM*g3oQEn=F=5;vSXrNw+E9WDN)3NW_%oY97zPc zowyKNI~xexm&`K*AvG)R)tU*y3!so*p?&8ILolDm;q_3j)lHBSi8i0ZTR zU>itkFp{1>H=YYXr^hZSp@D6dVGp(g^S(>b@hFMmwq3Fbo-8UJYzKx=r`1Xb8m`4q zw*-y`azm1023agA@5a1R4K6Lg4tS3Tb=&@4GPV;tN^dz>?ZfB!uC|^n@Qu6QBzf61 z=TIeTDiNy&C$ zF3UUeEAO>X?1&Iy$Vu8GQjeY8fK3CTL~yHrRwXjsT45{SK~vgcZOaXcWPf5~N76*? zqir}O2Hq&(f^_HLwjhPNKikWNGt*wict4;6QJyTdo*e7LyWZP?ZUxq}vLs!ZNExUQ)i{bcP8!F(<>)a{KIpjs!o38_Hu#)@ z8r9qoyokql8G~JhSO8>5t0U3v(pEms( zO*Z>|J3V0f66qxpnyY=5A0SPpeq!H*TEt*XkOEC&OiIsi{Gesx`pi;75!g)Ccx-mh zdP~0erPj`(0)ieKT#U0-4tn=&x-uPZ2lpyi7*QzX@I*Qra=DPITv~N3iU3}n{1`zWTI9c&1foR?{+lW|9%BpCv zO8febx50Fk=>#I})M?gu!BJvRRfXf@I33|Wm)Si_qt=VZPOu0046!;O=Bg)n=Fo<# zeZ~-k0Gmk0qi6!sGw=q`yY8JZ*_=%HXvkO>cryxx1dyS8SjkY_?`66#1CUy@TKL;7Z=go(}) z1<{fjOp5}+n_*Yu_|#+xrL`Gy;AEO-5G=mB9!d7)A~{Zz6H)}k{K<+!huiGr$4N1Y zPnY0t$V`!RAi{$pZhg2}u{0B$mlpgeIq1?RZ;0bpB3&A}6?CXZj5qZI)b3`xnKZcW z*&hCQ*dBKj@I2}JEROdcW2((1J@#OCEr!$BOco~k9;f#fDW~&*r(x2BEsZFHpF)_uV74wg!%d&{gF%ee^}S{x6Yf!# z!OBASvcqh+D7@XsHX-h8@5(#{P=qfnm~gqc_4j^V&4~IXQy!(0i5GOFDY>pvR#w{i zrLT2cXd~o4yi5)^IGIgeENd}dEv}fHW|YZ&l08J&p@~8So3FwR-~3&md5g1=(wZ8X zqld>yacUmKr)DRq6oiM_aa!aV9a{K2E>fsybTgg59Nmc!J1{>^5=7jG({?ARcw`T= zV-PL5NZjVf4M(FNZTR(UZMBZ5`@=?K_S=dd$~Q+xU;FfvPE_FPE#3vqc86fgxjnH4 ztlgajHAKwZW-P#*-Qyi$(U4OCMn?MXz-T)bSqu#mE1Qed$YrN=4z129O%w)9=xjvF zJ()KJ$7?psu5gC%wQZzL$S;eRmuFr5AAn`pM#41kBSIpf#g^!A8oCQ;kZm||3VLYsj@~y*k!639w z^A^&Ray0k()^FU%eS_?qK{5d-SYo1a^nv0$rrA-J zpJdS@xtaJA9am#hHhYe&njNXKKTMAA;dH(xQQFPab0jL&Fgd~7+NSXM7z9P1)R_S&RJ=f-h z+GV$*lb=cn7t%~Vy!^ARKf3Y@(yrAge)l`utH0d(=YQv0tv}u3xm%}by8F|z%EuqH z{-{;8TCJm2>w~}chnruHTCETM=6COX`K{I;eegS%TCH)b^|Rmktyb%Ue{}S%)owg@zI_u`}FF%A-b zu@@hGQIzqouJpQV^xsOaJDDQL-kxfX&MCTa`Re7XMV?pPaW)-v_u|3PbdnU8zhS^` zuUr@~DY|j_YM{e81Fp#P%U2y2qR2hVf@GyNpHX_}qbhS}Lc777AZT{coOdV%Fi*?9 zm2ggg89P{tv&6YTjQ7ElPjQ9~tzW*Zq|M~&(L_WPv%b7s{_PYi@$29JTParJU-4Js9}HTxmH0E#MAB+q z`K}^XQ$KvDL*==m3xqeoDOz8CTVeUL3Jcxto7~T{Do(Sc@VUcZxWh1gckgc#On+5i z`gSvS`1x8>;1K`hTQV1eJgc@IndmsF4k=lr|Ng0oR(e?b^xra)fLW~;6+ii*UjQGk zE|a813dm(N>8%~=_>}+tN2nnIy$tUioD9zd!kpi1h#cKVUNZw}s3uHIv!T`R#zl{^;A@ zh{m`Jg>gGd%c^e+e<7;Sa(7bXl%Sz31_HJ%Bna^e4a=&(4DqtujmyIVdBNVPx5?q8 zn`Y^mooN~BE2#!}aeGx?6Scc3J9mI*b;Vr>CN4UZcrs~h6YmM+c!HDJ7lM)1k!Be6 z8?`BaT(n)C+_F3z${&p|H~d(USYWe&K&6&i=cy-i^*`Z}ldh<2E0YR`IKTwCHu`Hxox%NE z-IY6l(*}rnK{`u(K7|?)A;H7ZL{nepdt~y1D-?~uE<_jk%BcO#xaZ5ghyljmht*6k zwcXp!X;~#>dxX>rKa{PH2QwTUX=xrmd2V(dKEGlfrLWBvyap${MUhcjBS1}e^=yKa z{mPTzXKwi)#Yc%@0Y@8t*X)ex$cOfu+l%YbXof)!3(rVd3g30dp9LBB3YqTN3Uu68 z+O&k=+_I7zVWuCF=HBHnD%7PXOn2?1VvTy2cD}@;X70J(p6+sn#N4 zZ04o$z`Qa%&Ej!7@bwJ^S&g@~a9Ljy;^cwv-XxqEY@UU7d*{6w$kVnm&tFt!Mflb8 z|ChZtfsZUJ3&m^pnIJnnc064vW-2qON>yd+PIon=yEEOH>7+ABdKNmF?whKcFrS3iFeCIpg`S$aj=WWOh7RkLJTR9Gvgk z`6(>-)%Edg+lO+dsn0pCJ$Wo0wpquo2hC${!%3g{e6Z&F2t4osIkU8yIo9a%sI&cJ zRC8MHjX^l;u1wfPdcc=4ao&q!8_J7Xv{4ok@3mu|J(+HZ z>nsFG^amGOSzSWOBS{7qvD}eSG0++gf46EjbE+-NHWvHd_H#H9^#T5%e%uLw9 z!8rgmcsj{Ure|Af(=JeH489&N>LpfH*oY+yqm5y|XNi3ICEkj!3kjjT(#WaU4QcqrV z%4YiD46xa*{nBOuBqeX*lUEMmWKH;ir69(<8cB961HgI#m7DY9pUpKWjqntGR69-H zg~J$|xfX6~*>LM;DVr;*K5O{Mvnmz7;_F$J3S0!BtD+jkDseB-rz@$R5xJ@H+eJy_ z6$HkriGnDbM=^CYh`Yrjp_Af}7}5b^`Oz5=oUmz8BzmJcucF^bNh(62H#PzjWfM39 zNn+T96Q(gaEy}}P=5d1NxdoWU1$_ z(i!d9J07HYuh4al@__%Iw;yk-o90eUgSu9CBRBM%22^8(8f4YGqQHkl?5)zvB}JhJ|g zN=iH`Za>v+QE+zK86bX%jW{4&@OzZ1%-o!&tx`TUSiIE~Q2gd(H12Q0ofMmRj#iy5 z;~sGCt;XirI5?|%K+Ql(EZ(20yD8b5+KO5aHS!JfTa8dSEWt%I>RfE3SGZh3j#3q6 zv^3;)vKbFtp$X*(mm4ZqdI`PgY#g+_nz4jtzr3(#W9*4g z4wwC~xWhS0KaMt8XoHxDpRD)W*wioE=#=shZ~-OC>QK}rr{C^8=_G`F84CJ=Lb#JA zuq0{yC!vu%nQSqcVt^CZd=nWc?J^0!Y|xqLhd5(3A@HI8XM^ny`Vixli(D1iXIspL zK8kN};7pfkOv__yiPN0#G zQ1;V@ML)d68Yyr_tGECFQ4(ch_b`loa7pe0NyT{daG$uI&(-E^qaXG+l~Jbky7xJj zrU^twjugOU-$JhQs3LqU6%g7m$`bR`XPM-N1n$A27%wv6oV*mYE<5Sb5w_ zl17JHotJ|`Gs%Q%qggs97F4z6J33va<}Bg z#*hI8iB*)-z5rLlK}ShK71?dt*8|_hTah7Wp_<2g84!w6$xzDZBWb{Jw1GH~pg>ny zC^w_aJzCtIeYK)ek{1M}R@~sRfKw51Zy^cUE~Cp#Sq`qcYPn>U6Dm5`FQV9MG$8pM z7uE9xr1PzWLEEnvNqQO9HhdDaA`zf{w&wh4DNq7--?q%cx1E`BxpC*b_#nfE7q7x0 zW86+Gez%zbtLlLt!@&UiW{oXw(nzZyofzq%QmQVJS|uJb#mZK#x~Ob;VKgly^M|pt zoln1YY+|@L9{GGyds63$<%+VPN$FvWU4(Zs6L6=nYPg0C=_FA?f<8OzZ#rN&?Jc>N2(%?YONioOByT@7Oe_s&v`_#;xuDknOvRvg;mlqdj{^&{k(| znc9G*-e-#8PBPw7z3qZ)y(`FeO!lf5FfAf5-oOk6vFiABaE^Clx!Na#!{9$1)+t8_ zVY^UuPSbSdhh;G+7W?IHOYE~9IXaEEu%d?c+=7Kn!xX?Hibj!+p2(B{utO%oFbEHd zocc~*Pu&crpi0)m(l>O14l;^H_n2BU-z)Qpp4pjCWFGC7M*#3J&g5q)qv++FjA^A4 zJxQk%Ssg%PQMYH1V)V0#+Nh8~Bo9#~lQZX!+kK}c80P^8+HXTG2y1Z088=QHha#g(m-9h-WH z(Z>84aw~epGJq$fsV<%e0P=COPRKbSsiV-81StuPPK=RHbhHEcw`^zx#m8j{7wd)O zz1r48nZQCnvezWpBHjPc!LCXo&zY;TrVL&L3$mMT^zO$*D@2=dPP@zXj_d@4`$bbO zM0+Sx17IHJeGWUz2G~u0+4~-K}bMCC$%)b!%5{t(nt03=45b0=7 zKhrZrdlJ*u-e5U(ndKtefJ2Pqgu?b7ckVFyFv2f9;{mT`ZMyMlP_MRvD3$_}KHH~2 zm@$kPGT|VA0lMP=WO?!gvkA)(2Zc)-tPqI$b!Q0U8A*~VU7o{vsS)1AsIoy@5vRvN=b*d@5BQYWp||6yz%xC>3RL(a2%^1}I# zwtlzgHHuERPPZ!A4(Ri8RUHWIWp9dGg1J z^Kr;bBIQKDmO1^W*4;4lxRz+LwHDXbu$H7seWDU3KoTZwK_M~ud{95*TX+&;GaeKClCMh!9VxI zKj+||!*-~FKG|M)bOZcTfPbp+&%N-^J@C(c@J|u`*{4TmZB5w^0667|;S>sobAUoq z4^#G|G#=Dt9*9hA$NBzQ--DYPwb=n5R=>`JtiYE|LIlZrKITr~@==O4uR5WbM{BB> zGN%Psy2^;AF{OaWXV0BG$H6P?9%I($&Ye?*Z{?f#7}o`dU?L+o2!JcMMuM{y4xurHSu@|scr|~|eN?4cGQP0w!%g;PYO8!iv7hVD zp0$D=Q^!O;dj|KDB{CtIL;e6eW6_KSbr2}W4S+(KZBZEZ?Ahy$d<2H%r0dVMm+o?F zN-w1SXD#VTSJrdY%433zjXY*^51e%Ulb*k3&|acl!}HfL%yhk|kWOR*21&gJgf|HI zORA0Z7j(}JQE|oBo8qt-JTS7~WNezLft`Oornt9~TPhyVflocPlE@G4A1a9g!XfcS ze<2)%XegN2$81g~J<<4zCRB2r425h5UlMZ~ERtMek*QCj0TG`(c}=tnkw=MyEV140 zK~h{IoSCw}h)97^;TgoKWANS5DLT=pR@x%UMa%xm+G&okAClANZmdrF*fP+Y8nTFa z^K~lmdqF}}^P(sS@j`JUBg#Ypm4fDF5gSe<;vf)>z{gX!`f8?Ff(AvMV-YMb3uFTd zyLl%1rYOk$#+$NFTrbL{k{DnDY@+wkAy3TD&yWRA) zPZmY?T0SO!)-)*arH)02yoT$;(G3F?*=sTCX&h>hV{|m<@F@BIu4RnrOnCxKNf>Jk z3FC&lbhhQJxMy2b)f$thuWdPD#UqmzbL_5`*1gt&uup882G<8x@P<~F+iTSrVT_3`t-39y;S%Zr+wlc!EuRdj!BtUgRiyb zIK*z~RvM9VJ-Lj^wr8`uc*vzDZdz=eovGB`^j@&y%DU62mYZqExs@am`s{XImC)^s zut5dglwTDoBa5P?!cTib2C&2_4n@ zeGu=)DkSC(?&fH7V$pD&C>HTXAfh+~79d@2P=OsYkd16VoLq`*l5;iRrLqRyla@*c zRnAbZd{A!4YOZn+F6&*Z<_6VKqudZ>`DkV)2b|bxdHG!+rK|VRnw?%}avYhKLekA> zK2uIhBn4a9P|s|KW6ON73(E0{8SK_;I?Lu+JIX0}rz&tJWKK=&MzOZZ$NjqW zSD2;Fo)S^Lo+tk-W!JodvuozfVm-RV?NhpT3fVNzyn^wGD|@pF1@f=P(F8NA2#+Zm z4Jp3%NL4ab&%yXn&c$pDYhMN*F?R<0Vn4T8QL%Q&b{!cGnb;DDkCgOx|fk)GoBJhQLuFTUk%@paW$d#3G$SD>8fVOe~;?0&D zEK7*9fC=fQ005x>!=e=R?X`cBRwl}fV@C?AR5%|AtdmPh%bbdxuQT&XSZCBWBz|-F zOZE_#=RQnJo+u)>kfVlGN>qg=pjL68un~}+^OoEIOtvXDm*O4mRa;T(`~ICn|{%AF6YOkR@wM@vLNU zS;3dTvrmZcw!qeSqqTe91CJG+0>ObT`yA$GjlVAs5%wUYYeMdY9dj>EgAW_#>Dep4jaAjY@-^bpuVgNLmC2=_nA#0wK&C$dj{WWD@1Vq5YQJgO zk6Z%*&YjYHQk0oE5EE05hwU$Z66E3PNO5SeI112hSD3Pw;jNE}^6)@uXrNN63`4`) z+@;8i-7&Nup|bCa7q7OLinX9Qu;jX%?mE0>>IK3rz>4u`p* zh;Tb}>jKwRL{x8sQbL2E5sAWKdeocKOpp-HTN{TQe2=n7cmd zF9(x;tO?0`^ zC|)*@aIvd(V)`9@`4c3Na9r}$^licz^-mNq0@9@H;k}Rxd>`- zfzZ=#xFHp>&9|er(`amp2(B}8)YUMMhS(?0T)zkdR*E855e1j`!qQm*1 z1-U#$keL07afW`<73}lQHMQ%hC#7xleYMXMv<+#-!x=TS2_roEc{*BO!-ToH7(+`SR zKh$m52*P@Q)LrWRxM#cw$h8h+>tPX&K7ZUa5$fiz0-KG8J8RGd2h*U zKv_b(Y!}sQ?{2(&97miu?=)Kt0Kr+IZH@v1T*(%P6xrrxflvWfidFsr{b!aQCaW@F zJQaO)JLnbnwdR{5JGII7fM#U4b0Eq^3LpP#5!LRYlO~HjVd=|d$*ndRxg?~sLfeco z`9Z&k=?~Xc}Dl#SYN)qm-owPEAXXnVKmn=Dn=h zc+18XcCiL>Km6ziu_#D>?8TJWXA+5yIw=mGRxfwerK{ai12MK6N>dN`R_I~_LpuR3 zDX*HqoFBcNx4YPYxVPLP8eY)IK;XN+zUom2d-S%(BN)bbszR@#SQ5}xNk~-l7gnKa ztf5f}SZ``%Q>w~I>au9X4Fwl#g2pnzZKd(5+q71xbGmq8fyNroyxU!w@agOWm|ABa z=0%y%P6pYDsdV;|fJDaE7!=7g&2*$4z#@Cm3uohYr_jjNWoVf9>=GE+i6W7`!9sM! zkPtW8B_K9s?hOh}&J2lSKDz`)cVz5~3xNqk8H*4T&^u~RFhNIMb|nSC=BFauRK86}{dl~e^y*DVbv_Y(h!3x|dm zJ(dC;#0xp1P3>w$In#}>*Uo0l92%@9=`EKUdyI502YTyBmp&dYN%=3cH+q%@D)PY#Roau*~#;3Xh6`T<7@m z)DInbC3{0+ChdH45;e$NQL1x3KY6Lg{kp~r?kM^ERHL4lVM+^A`B0OEU6uCkwbyEd zR0S6sKIPXE!5F}QT63-QD6BFIKxATS5MQS{;GbG6ih)!pp!+x&lOY*iM~KQ47yLVd z_I05v9I+Avb+Hs|?h}1|3;yJFP0?`LKAk878-CLFVGcmZLTd1 z4QGI{HQ?4=cvD6pag~5RR5)*U6oR&B+63wFG$avmT94n@6br^eEa=VF<*>QUQxuU& zXFY}@d-cJH9cSTiVYdR*dMeOOt%a5o#vZt6zydVlpz7U zvR{PmaytT(8W?a5idLS2hgP>e0ReQ zMcxnm0?w>YUfBjzzl_BK74!G}D0Ui+Q+{J}2F8~FN?K-Po@@tsk#x2)QY;M>2TO(* zxF#={gIkQ%1qB-$8$}~{h8N5g>hAggwCv@?7Ea2IL@RWcz4HpTxv3eEJ+h|R^B8%C z872rHW2jdq>1T7$f*o5?8~}zyz3n1#bCtoOn1P%rSJYPB+L~wtE3|ygAcV5+vEwx& zbUIywM{i?6v13p_VA*tvd5`9$g#^~1YeXyP3E<$J~Yy14Q5 z^wIgrQ`2+sM{lp*YfxJg1vgXDLApZ5`bob%<@p}i@}O1C#SUHp$;&%+Y<>8OiRCKEwV$~Sq*O|4I(=E^`<2D3pFcbka8Nnuo6eLxKXx$AXIB!cSevznq%gb&^ zi?>9MU|K_d5xN>{wPSH62kPHsWbAC%=ps8(tQ5;x`tMM7QHWl_g%gq2@1}#nV%hEh zIfvTA=>R00kn3((R#|tH9<%O-6_KMX#9o1id23Wqq3PTe&~U zqtT!;)m=CYT#Kim=@hn-5U5wyT}ac?x)kWQ^&l>bGh=v@Q4U_n7PCs-0wW@aZ&XF0 zOsc=s4B%yH#?yQV>N8vh4EibwY_0mE_d?7;GG5~`u&~z|R3)JGVxn0+h${+G?85|= zLBNUQQ#nmJhYH-IAdjwrZbj!m+JG{M?)eykO#$vs z3INJrln%o6p;m`sJ{6jx+6|u1c_jK}6?Ykd;ly43!tfyN)w43%@9n>MQfwl zugNXKiV(+Sa4^sD`tF8tNwhgSIGFe_|Lkz8hj zQN@VQ0cW!ic23Ime&PA8b_}9aBkdfj)?n52f^FjAfdp0ZN_i>A3_PO=guV)uda3(E zzfCrZ!z@Jnm@}A<)rN*{ctVukM-x&*itBW<>p(?RP(ir9*^Xie<~aiNNh~$RI}=qn z)wML!Iyzr4pxRCM#RY#7?bJjMaUibafFs*T*J((AcNyb}tolOY*0F`2aXt8dU>I*-tHB zjUe-_9{6#=^=si~E3R(3^141vZiH{^=3A|IZvowfgC^%zRe0h+MG`nB1)CXIi0430 zU1NsVkhVM^rx#QhypWrc0Z~Ax1w#;!Kbl!w@HmAJsl{@w4l#+=mKi%*wq7xZ2dA{M zIV!wZ_^w-rGo`Te-Se%6SMy>>Yr&#caD6TuI`zSaB;l~fX5fh&vGl17w1I{bw81!m zI0kF1i;zydC=Q8H?Lx)b%R2|M18Ta>7HWcS7`asQ-&iuazipBN2Mym{(9ut{8f+9a z?Avq;)3W>SPOb`Ih886OHP(TLCl#He2^#s$*xjbY3?Nn zxMPxF00ngbjgT zO2eu5(-8Fl*j@nopBEV_K?jT2P9#ZpB6$@jzb zGJ7=TdF?95Q^F2rG)TH1=X3r**!LY#cN8^Khc;Kai zJaRAtX6%eZGA!aivg3 z4RY=2Rvmqhy5U3Wdo-z*Sj~7GgX+zmdORUYWDp19T+YS``su*Tm>a)wV*ZXX0k@7} zB-QaZ!N}!QpucyhTxeC+VM>2iV^E>c6f-D^V|>~@-s@<%jeGw z#BjQek41o}Z#Yq0h|t{yDk)sa88p^Cf2C0OBQj#PZR7ccRv4@R;X^j4qzzg0DFG7P z4QWroY{E!3O(Mi2Vb@s-!WeWqi7)zDUdSV9SvbovIF9ULWH3ysBiryPo$>+kF4W9v z)uot)D7btZEK>kXskn7XO4>78n=*ZERJ71XD%eP*~N}m%FT~Oi$+9 zhfsILE3Jy0&xO$dFnZVB5b_WR)$+KG#vb**h0y86rNec@xziHCh~Tnc;cGW6aux&0 zEs?$vyYE7|1!?aRN^!f%+ts!rFPbVT{E_R&{g?p>jw{a>=S=!OC#hS}lic(s!H7fF zrZ6`i5}OI$)^saL7F0zh6q?n(Y663>avg8jY{rD6lgk?WpI1yK9E@2V%WVWq79@da z1OeLLsFx=8l7$DJj8v0Y8!jItq!>HU-hR0E$oc@P=oL45KKQ5Inun2rB?q#@10R_z z!;a+BfwZc~qEZY3-ol0^4rV@#3`>KC6CT|qj+_;Y+?BiP%?CT92&tHH8^cZpNu0BG zB(Og-K6eqeDC%5v#7(R_p$DN`m>Gl#*3{7n&Toifw*`vOJe(>4-H7*z=X){TZ(SFw zZU{z22-O(SYIfu$0kDC<;-C#uuZ;Nz(su3*uv3zN;lF?4OUabOc5Ncfp>8yN6GXa%s| zEAG70h#uZ~Cq@rZ(VQfFO7|%F%4Jd~F(}E4Z6Iv@2mAJDX*j`L%|$nmX&n2kPJw1x5DM;`hY~;UG{vpE*cIf z5lK2R`M4Wm_z4(~`8(W-G){&<3KxZ(4`82qYm-`WE4iORnY6LW99>b2!Kn#=PEH-+ z0~p055@J$#;=_xCBQ}C?&B1F5aWlhqFdRf>@fi!DJlT1oWuK|HhhGCXudAFBT63*7I5&Op6 zx~*RfA}qJFxg~{g@`nzaoLfi(aEBZOh$&@ydn6utl3iwmq#)c%5J6N^!V;sV^RY@{ z>iPzpsDo0agxt;^>h8MR2wHfsX)Au5hFPn(UEtJix3{g>D{dwIAJ2DSx}pd6ABuKP zj<+!cpUl$Cfzcmm1DOX}7Q z8Oa$ytejvnr@~MWrsW#~gRvp+*bO_z7U(XRPf03C=xksXyb9^yu{pZ&1dq)rB_(t= z=%kj64(d1Ql$FtI-Cg%;E~QHObzTj5f3@sjKt_-76pV}>nca{8ftc#N+iZbmg;rUf zCCk}$Oj5CPz94x8%c9EPB`v7mIT;Q7AB+S&&Jh=GTcUI~kvE*X3IOP43Ew(P8v!xj z(a|{glDMDl9ihj`><5)<(g479BEVA!^H!jON12@~Gnip1O}t}>a#0ZHRLN(|nL`gE zg9nYl4Wmo7h~1<=iu}487NwoQId*+w!OxiqqlR8f4w6Q&0(qqH$zoQV-V5plU7n@M z>6loc1q!h?0;fKpUW_o?G%+8VJJduFE%(^3HbaQTj)`>uw<{;w<1k0sUZajKHT2U`|Gr0rXMj*#TPI7nnf&w9*Q+(P!NnN-*@ZAE0b;TkT(BAznIo$%` z(iMGed`zh8?G=+V%J!+dv5QwzN~eLyB@YDP(IiL?)Z$#mn~uBjOnYgPFD@YgIMZHg zc(uuvGQCAkz9!EC?V1Ttp9b7qw>LQ!=2?;-K55r?biq@HFh;T;;JEh*VaQ)#S%!aI zh%;kxKzWZ@%z7mi(s1ciMH!V<>nGFmg5Jk&PfhnLYmsKW1Bx;>J-;2hfRgZSVD1^1kE!06Bh+$oBx9wnjnin;lT8BreNh^`Lkk`WI+M&I2~VutE&=s+6^ zS#WbjqVn-K4MNg5DRFS(q8$eX)^OoEMpArHKgYuuQcr=0$}K2;6&89pjTm)P>x7zd z21egDL-r$|f(jycPP^qrQdnX;R;7&z++HGYNCOJ4Rwuz^tKrM=+?J$HT)^?3HXACQa zbwdM4;|8>}o4T!`X#(iMB<2VoOn&G-Tip4D93jzZ-x1C7|;3rAO;*&rj2IMAr;H@~#1uxHh2(TO6SFXb~pjJIPa~14|T35G}IkM^_1vs`UborLCG|fa~6wA#r1YO#=upI3P44G+o)w}Fad=@B$215 zZ1k1D`#2v76+sR6N}a2Xp;(Y2jTE?!xi9#fgg_~Ml>BY7=5ugpl#iOytuaKfaNaba zfH0Yvh~I9}ZLG@TyD{j#aJRd+?!ispdOb-pn3(}eDzZD8^h=%4%^M?uFQwL8bpLd^ zHky*?j>ZB**Kr)V^L=JL-HtdWw!CElL!=sZwl?fy+ zuGV@C{A=0UObu9}55nA%8e+Irg>&eFCUt2A8!{(JTd7V&@cz=?d=p~Rv#)q=FQR~4?aX6a?XVR@E}Rdw=?==wQsfJM zCx%Zz8e%C$#BmUy6}k{^#_Atx{B)JD`<6)}2?Y+zp6is~A5Z4V;%=DW)NZYWPTfe< zz^IdCgX_fvJA=6z4-H*X?Oyc8`$BWh^^i50JTY@*+$di}P@{4?xPfMn2rmST3=n4N55Ep5w|m4yfEw+fCHW z*bLgCBp_8kW4RqdTXW(XwXCM7ydrC2rq7Y2xpk`6+>bIYF1=y$Z*YN0E7@Acgztx) zJbXf@>z0zfAhu$NH$+s-f5~-ygNhoPvNv+~;ZXv4$_RXcK+8&DOQuLEJft$K6sweW zM*6HMv2xo<8Crl&#biOmGfk{F^9r@prn0K0#_EQB3fROq6tJKHi?VzPb8WRjYK~uX zarclzkYGSUw{CZSHtKxg_$TO#y`=`!e--%>0{hfc~|-T2QoMke#|{s34^TT zl+$8~d|Tc_ox2Kt!R1997&795cqn+9%)=oDGgKy#)EiKscS>s8#Ng@k(NB=@iX$f2 z6IW<}6*XqF#i>@}PDdNA;{$VQw-~{A9)@e(0C>hpR)c5J0a4EDPL3+s6uGA>e3nL= zAF1Lfg_ClKii;%5UX?qKX5g;7;U?Z`4m_N^frc$+y1x3wN+20A-g3~1eiXA*;~$@r za8gLORSb&Of|3LDB&eE@W;|YWv=OxHCxR$;>*V4|nI*oTm=n+qi$%Zst)Qnyl4O6l-W zofJ|8^I08+Pyr12Rwzm2$jvjSXO0!7CvKlF965DrzA!&Nck@BxUN5=Wsb>U4PC};d zA2MD{oNo{dS<^mP$Qt9w6EUU81h#9*NX3qHY(`H_T}+xfIit$3Y@%?6)JJ7)@oT%K z3nbG)NBGDz4m*Y-y$o`N(im2+;boOh3EP1Qr5T&SI@t=b6RjcP%cCmHWFgwEPTZLg z$q8+$W}}0#yeOOtS89pW8(k zw=^&e79$SbYQU3^!`vCGwnxEdvqA)VlB9yR;P-Ix|`%$JJl{zP=b5O_?@Pv zN8U1hoMkTGG0llZl`)Z@38J__x=EinZMn~moEo1!rUX4E6V0}LT?cmC6r$u7LgZsD z*VII!ijHlh=`QSu#;ki(qYOQzUn?p!sI8>%`Xqa$>4J7c>W|%seTPL(t(;xroRAyw zCNAT5#@dY=v=%aL-0YM6k|=#FQIrHJrIB_yIEKH?P&-+(^nBrnW&kHwn1R4LLl6O2 zjr0>({yz@tp+^mFpaLqD;A?TbQxKY-f}TRNM(LX4Sost$HAyAxH*T4jk-S}8hIO38VU-#0kMN2A#*o2U8=Oy1On zYBCBmez1UY??u~-P*)jU4Ya{YT2N%Hpy6t4i~;HJ%F=&#h~2>4P*r=`-3hz)p+= z!6i<9r@DgYf~KpS02^W8udsnkwwz4aN#?Quh z;*k257!pqDQeIbD<|JEWmUB=|Tl*o^Pvj_;(K#;9R2K!yaSwGOQaeTj8NK4)MUhpi z3V0uOEQEJC$bz4ioiPTwL;_{~77WtYf^U-HVQ3?}1|nzX$SwF}K}RwW%&JOV){6um z4@cf~Auf7Z#fq@ly!88OH?8%vatC+9Yxowoi>8^!%{ZI6dtlAZhCnf9I#RXW$E9;j zx8A=mT_>y?dvkQ7VM8q2tcj-=LlI2iKWX#CCTtGD0a#{ZDidgnU2VQ(rwg51@G+fa zYirpelO0kIGRvJBQz@Jjcq`%&$<`o1Vyh@qsU+=xMCUgGDdmNon@mM^Sd%1AKgRIQ znmCjK29&^(Y}JXlkeUqSLs^QX+SjE)zw8AZ#=zmV9(hi{+Tw9^%(b+4Jn+TyW{WX~f_w_U12QJOgEIjUlr4YOt6_JPoF)`(Mjdx!* zRe5^m`)|A?^Y{$GGzLlHeClcD>db?gIFre&WinTP=}q7A8kx-1fBczmd6#4!y!zFb zXEM!9=9<3eWinTPW9^d6N+z@K3cLwqIg{D<17<&NCL<1ACg+trr3Hs?dCEsu9VqDU zhO=&~;nctyl#eE&n$vP`48mD=WdcOId~iB!O!&2+4liG{qhJ7t$io#ObOKTN;gjdK z&Zr||kf~tY4usWllgG2Pt1;Qnq9}lMk0tbg9*7c%7egZ2eOyb5e!(09sM}37(vbNj zd(3x?0o9kBun#Iu_e!034`7xV%mE1|bO$>@WeH4!(Nh%z1AZ1t(E(P#MVEx|jL0Py zyc1*i3KX$K{E`#1TW^XKI=jKvtP4)IPP+b_GsW~R(3GRO3 zH8HmeSQMv$EPJ850XMdDjh;dS<^#PbrAXv!eWFq-jTS1U$_POs4k5#N4*pvV+lQ&P zDYWBi_mP6MUkc&sXt8_%URjOfRx~y+5C&0E_ApQnY6Hs~1%QKqC^o?tM^*%|;ZrxO z6rRpYWF=Fg8emW+b{5V_Xm<}ifJ+AG0r-=kfNZ!a?qPEz(H87f-~i&@dj&sJ&E>N` z?M?>?A|0LiEcL}DgaF|KL8vY}ppsY^x&_yRxbGm`>*zL|&FXNe)P$?l&R2)6>Y%iy za2nkbKwQJ#o;|%Aoen8x#wbKWJ?4ejM?Pz#x;_BuE$SLwz7;**MAMOFT~TBQSV1cHHP5O2BJX9R4yXT9IC?;!*-%vXX&Ox7Q$D$0^l__C>n%hw~ zgga`SMnn=woBr^`Lz$}&Y*KS6;XO#MI|Y{t=~g$oac%WPd&PxX(yVOp`zP8>#|OHB z5-ihgItwcwPA<={y8Z-#p}RX7tjvU-PbCWFyVGtw-6_IEY<4n^2(}r*IJ|L2d(FYQQThNIKO#!LD|1>WMvY41l1DM9hG6b zvRE`=&@sJuv*iZMK&W)pj{(*hL2NvqE2Fub?Gw34yorx4;PBhc&I3)d&hsRq0zRl< zYIll(o#SqNBy{}RssWiqw6*N|eoG0{88KE1{B<{sp>ClcK_QB2vpx({UUko__i|-X z0vRg1g9kLxGHemC2tVMR5r822UrETz+8J~NnfzmX!yv4+{EnLxbP^h-A+bbd=x}?|Cg+In{*{r-*bvyEyaYDQZw38-;>&M|H(*R6Dfo{6X zadsV^U>=o>k!~c}+WpX}M;U?B02oN}l1UO^C8+rUB8aqZ_%L7Fn&NhW6}8a{;?$aq z&?pT6;7aFD&`x2L#Ntsu9MhrkSk!N@MX)2LgBXME%_}&E?12{+j3n++3HK;=ze$X;ts;c zW-bJ5D@h851i#3bFxhru;(q2R^8NrohJZF`6o=TQDNjMCsNNL?K5%E>6^n(#*_u}m zvwa4CwsX!TyG~>L%oOCXFac|_N%;vQ;(AMA%!BKV#<-WdWFXTFKtrmD1G9r_!jI_tnWAfOn7&Ox}RnxhK z6RpC!koqqHMkBzO4o?UeELlc5YKTt9G>ZpEhouMDkS}{JO;&Q4lI~}bc8mOATZCJ! zootlnvFQR-wo~LoQ(LA_7Xrk&08lxAa8Ur!!&fwJMGl8v1O@ht$Z7jnJvFFP_|Fv3U`kep1XMc7*H7fF}AQ!T)aWk+~CEaxpHN{Jt?Bchm+_=Itl2Zr@GFSmn)#? zZX}KHMohvpiOa?!kj9=!Nh^03hm;l;ibOr7!hyo#4Zzr#wC<_&-gK?7cg}*=SD6qu5gElp8&gvWc+~F8j!B(0n>yUKu$|X*%vg^1AVZnRY7)r(=XER zk?>W~W|EY3W{V*qeI`f1F(?MBvP9UnyoukIYW)s4l%id!cSsQ;`#>QAr5rmX+}5TT z+CJd504Av>h8$TU#Yz^3PZrWGy6N6@!V5c)uo=Y_>C=5(fv_3LFqxnoS7kQ}1tvvq zP0z_D%GS&0)K_)?5`2<6vD87NqTa=N+D>^!Lvoi$1~g+nRu@ETTX;L1%HwKCy9P=a zkBA986vJ4-?-p7NX~?fS^S!^Z78=tI19w`Pk9;}7N59eEhHZdWw#cJuBK zZzi3Bqvqdn^X?SQd)T~PvHI|AUs8p@Yu3+Nk>^)!&Dn6=Z^!UXIDWkW3~vd8Fzn^j zV;Gx4TJ|h$`ax*W1!+}oV2!)o$m4bN!S70%#X&bFo0Mh%Scf$03`5ILcR2?q7Ivbo z7|IQOSoNqX>1>I~plymty>YJQ&eAM+SQ4R$#^0#1tTcL z;SYliWJR8mG&&uy#tv8dZJ#KYN+t5c_CZ6dt3m-bG1OV?)+clXOhffzw-+IZ#v)c zV6VR8Id?(E=4&_uEMsPX>5R>*xG7|OU3ujI-;n2qaCj)vdk)@eg~9nv7)GqQo7M5# zj-Nd_IX6EsO}FS(vtz@G&QMaR4(m)IyX&?->yclly*J-Tv@f=L*t5UTpk?R{m_H5_0aC;JvSs9S4MX| z@(DHRq0!3F;OOYk{sMm6KQg$7-V_!_OQZWs`v>=z3;69oWq9{EJ)y8t9w{9tjqV>F zt`z9&fuRGtN7M<0s4`?pRSpd8A1d(I(V_CLaW|=OcW6nJ&X-E1a;a1vs+7wWXK1K$ z_)sXymBaXKf2mR_l}h_Z21k}hhen4-DXE9sLo;0nm+=f@157qJ`I>6xQ6$ML1B9S-nI`nJ1f4 zMhOVWl{Mwf7oYo_yWph2$9|aP&TCojT#_z#9t%TTow=FJzP~qQ2k3ivTX^KePI(}1 zwgwcq1*cgb87jt3SX{ZAs=2^itLtvOswX8}e;utI-43MJ0tQ>4z7L**RS!iN1aYD6 zg*>8u&5+qqDO>pav8_Y%Kcf@YnJdl za+SpMV+}l43LEZH+hYV@0!K04@?JvltN(-${9hTtSEM7j$Jvm*fNcNdm1C`TEV447 zF1)6*!ZnX0XWbR6UK7lucC>`J&i3G??*q$_mnzy}qnhoOIKAeEfGY;MP+JXQVX~qg z!QBh-s=a{x8obieLok(#@*WphKfRpU9!f#QK;WuP)7R-D+~ za5m*{WjRhojk6Sb^%WOW(VM8p3yC9HzGFcz!hsYw$x9)-VI!jUqX23C4Bsx|XW$UJg856f;2>L!QM3UJiEp z*o+t&8Whhq0LYIwefMt9x$U^P<@DrH(e#>LE!^ze5~4b6&KN2@#6c}+RNM6y(Nhq{ zRTzO`0vdxC<3K|0D%dOVD>R6zsF@1SFK86Hkc6#BV0<-lP1c{}YGY?O)VV>72Fr{}rra;Z3o|5q-J4Gj%SNd&w%R^W zgwGrewtA;fGI*M?NfnPWMGe0y7J53RjeOQ{Hr>z=MD@Vtu>+=H!)gO*o| z?$0U&XHz>GzwJ1|0w-?$70*8pcXUDN#4H|n%sgF5&8HetlTFl>pm4O|xqfWwC)Ztm z6!nu&6^^1^{B9PXk4P7vk5_V9cL#FxXRc(XduGi3a7|A8$FapMzb^j^PL0rMin<52 zXPT|$DBIIJfPVpPL437}KhwiP(>YJ-M!8g)5>X?FtD)1BNJDuE2daEGhHKf!vOPk} z%z>mBBSJ!Iu~$%)V-7hI#4N=NA?%XrBYH1QGY$wm;_S2 zp4xuU63=GGB-SmY*KiH3&S^peNvX^8(#$=rA6^ImjqXcY)Fi7ca z25mo%v?f?s2|z<#_N>MRgHSE%br7e!>IMW{b--!0cnAbcG3?s19J8mVcW1hsr8txK zrc^8y%Y{;DaL7`jfd=Cs*k0XpNS1G`40z2Iz{}R%qRj3^B{0hh{MHTRD#11}cto06 zkVRFs9>pnOjOf`x)BNNr9q7bo)4W&p4k z8Z9f3+(1G{0IIp-wBX3IO}z9Ph#}scGDQ=o?Z^$0Nx+w`+q@!H!l2!%ZiHU!cJ55k za-wJ>2(aI=7sKYFp&$98?L*dAk(-XSu*p%qRm>h zRSjDmSq9tFnr(IAr=yi(c@*}ct<&4h6Jn!7+CUNKPFaJNd+`csQ9j9#jg^g+Lfhv; z7N%f)W$qXX#9uNU#lLe&29Ne%HHD|OLO3J*7%=k8UO*nc|8hKTg|_8s**&bi()vMt zz;{&iVVf605MiYm8G|-$XqjBau*7ZOcN>_1is{RO*cgaIxWs;|9;O1{i-WK*e%tZN zZO0d_R5469;SP5K&9;46`!r}-Q_}oNYK)bQ6`m3t%N3(oA=Z%Vz#;~kZga^E(`KkU zB$|@l89;D!-^8qLl?20Rhf#r)#%NXmQv(8V{q-!uZv~=#Cr)b_v}406%PNR<4^k;f z8CL2jS=dw+6mA29CD~N+ebh@%7z+Lwba|Z<+@>%)`@y~x4>`JFa>~= z=@a}3lrh{G3ly+)^qz1$h^Jp=NSSXNWlFdrgknSq$X~Y5jng z^E;}F2_4io4z8y=*|G;!3v}B>GfuoJvZ{Yn#^5DNE1d+_o-kAl^p+Mzintse4$0B%&g8u3|*pv1_+4N(1DVt1hXW`ak zbDr;*IR0OU3CF*@HIBi{$*n;eJvHAesu%F-=|$6%=(A7|Q{Gw_%zJC9oP@|rm(-Y8 zuk`iw3MflaD2)^bOQKR4EA1aES9&fGh@M_if~qZWVPh+Fv8F}j#co9PD5?IEx}04W zEH`qKi7#mV8LUkx9#F6P!J=`j6Hf8sCOsPXvE%t}D7ZH$3(7=ezXHVlf+|zSM#?ZA+SrmEI*MKOOhV~DS zj^KG~F?9qX=*#xOA$s99BDc!J=*n9>9b>)GEkI*08dc2sPzm$lIXDm3_UmG)9pl>K z{M~v{+!%yS@CQf2Js%G}o8XtEF#`?(aoy&1;H^g6H*A6hfgi^In!72^48(5OgiEvr zJRg3L8DfK_Mfo^7?a ztY|n(Zlem%co0?6elRkAx%f0eADU7+W$+ta=mS1-g?Wj19jL}#zi1=rpp?xDAj6a< zL|)cAiB6{jpuUve?xQVNE()c$b6KCBgkV(`j%K#nlrS}N=ENcj+F^|-H=zW0&4gtD zyDQBwNPiFRiEoAO`myObk;S%pW##W@lIkj?VVjDs(p4E;)K@X5B?}JYnc0b3&mNne z%Px}3IE5V$*I@=_F(r%tm@ix?RCDvEX2*|DYzq`%VZPa_gD6J?;hr-gfqRmOV2nMN zz$5o?p+F-l=ci_lP0n@)94LE7MwUT+Z1(M;W!;aknG%iz(f0Nj6ACos6WgP}T#Qaq zbWf$jD|^c5#%Q{&NoA5Lf`CgZ$=$g23RwiJ|6XgL?njs#Pd<&Pnw4#`wysXiKo7`g zVPl0ZkPF^>HzrgYlt@YzZc9+c1j%7a*R~>MR`ROh0uE`kWeE9%$^NQ#wp@+ zC!Ls~Q8YHo2a2P^#Y$;E+M7&>JGE40;{&>}GWfvwP9rDVR<+?*jrU@%+Ffa%)s`g9 zMyK621&owVOrzCo&xE^`%}Lo4WGtlGu8RL|*-bTX(Jz!1)4V0ym%{K-%Ivn!uzfak z{1rDk%c@W@jB2Uf?}kTj3B~=LGi$XQjkG}#S39=Q0kJ7!dJ6*`wgf3^vY2`|TF|)H zTE!wMCzT=`LI*!O6yFY=C=T1TxE;DiDhBNsrK3pa6_bf_5uw|aHf^~yFj&%ABH)kZ z-FyJ@Fw{1NKBb4rdJCE>YEO=cT}VGSdcB|@E777Op~B)X=1{<1z%UvtYA3ZGTI7|1 zT6aN7rfZiel?%0UxQYaC-gFv`%{~)rnpG&&u?L#=7lduso!EtpuxfVb=!wng)umI> zfy&^(#OCy|mG;!_H{D)eSv^^q96Y^w_w6$q;rR5eD<`6A7Bwu_$J~o*d1$m;Ql=v% zNh#bJP>_EOU{Oz#0I3YM>h99%Kq-n=ozSh*WM-$=ZycR3*H(t(&D(2t+~OZQFg<)^ zqBY`HO6#}Ybj$pD>G;%Lo9ib|m#SIe`gODsWrB&hKIM{rjFF1r^8QLmIE_ZI;nr0P za7>nprGb)Yxnbl*vFpc$HP>x94R778mP_5q4$_)R#leBWN;kX!c?=bW7M^A*h`cV# zOz22S?WQGH86j!8-7qmT6=G+-TyS!C3S>La?oMmGtMu;F4tA5@ozlTB61>w|t6bad zGrUupUr3^LT6YSX-Dg^-b*GYm_mXOz)}hJ<-b=1^N{0_=VsFZL7nIpc{aLBKW+c7y zghvVhyEqe&)>`3z+d}~oSZf!U$$!)88m2dRtA~0FW8*0Cki^P3U!Pqc2cSP3G$-`NJYAA5D^@{0J^Alrm zR{&I_2d}6X;a#tQ5wd36A(qrfxt+AL?ITS13Wc*lxq+MprBhmGoj}CP%w<~>t9wxl zx2adlDb6nJf%^=(?ta>Y})k>)})pMU2 zU~t0Ps*bpXE;%@HAb8}(E?Ol8ux-&rLmom%B~fu2s})}#V!T@q;+Y^4XSkXdG|d*t z-$R{&TSmw_^zb;J<2F=Hi#FA|8!j5Xx_;g475k9gg4KCORdk^@sVJD&VBa8Zw$x4p zgnY>?1g~t<^Mg>pw)fjj1tyMH60&mxu&BMf?437#l+?qas;F>yg$9=|n&C@whcjNl zVPN)yYgH9lCv1)kS@Xa*^JZKWUxC0Sj{=A6=}<|wk7kFaxzXje9qzQd`$hKr{*i6E zgHtX$=nyAX6(S>=L(b(dn4LDOqT2hYcNlUh(49_ENDHGzVg@xfDh^ z@z02f4}@;Rbs{$!XgF~3$ACP`I)D(d(*URg07N!`50n>i3--Z91XROL{z3KI;00hL z((z92k*2feLISm0i-T}8r77xrjm%GqJIRZ z8oKTrg)T83DQo%2xu$vF1+euD6H1&g{bA!kkjZO5+XsO0i#ZKf8g`)h=rIj zPzhqUC@7&w&d2Qhkf@AQ%0oj&KtTmSZyTSTo}4~DCQb$$7^o5my9|Vy-9Rw3GK7)P zn>i2){vROTSOBHPqB1;k^N}L@e{s#xfi>s4W9nLmosn*@=i`>IL7I30P(vsMn#GQJ z2TdBU8PL;fKrw2bSQp&$SH?sRwo>6R6{C^_Of;HIvc*@`IVtrrP6kuILzk$yP=icl z@DwB#oc;E2Yk+VXc&h{HD-j>(HvusCHJm2ovB z-5Cm~c@Bbq*BQ1s36adH^#jsftdv?K{f~Q4%!K5}VJ$w+j6p4GS7eQ8Krq&f1$Ldo zqIuAdMV;k(RfyFx5NLVIZEm%9NzFhxh>}G%IV8#>qobph@`$mAcx|m6L>-vB2S&8h z2xJyPQItofj@%$Zm(W(nORSjHnMi@mef(LS!t<|Yk*MU*%K9Y8^)-cS~J6Y==zY~!g;#}WzY~Zy;m={payl6QTP(4 zw9rji^7_Pm`uPkbwStrz6Sm$i);-7YgHvd-2-bt^#G+inM2HAF8fZZuiPmys6Kv~F zqY9Y}1d|?}bDG5T#O?C}F2|jdc~1Hr{SB|_5mC#n!9^tU2%v~p!=SygiuaYN^jroQ zQ#z8P3d(yDj(}8zhKoDccoWzk7>McS&Hf_(ue)8-xtTezt7oFW8L+gMe0S$yz_}H2 zzwYm1U+oqSDpd!(s~x*t(UB7F=sJ*P7HYgL>gnrmLd>lO8{lK+r6V|^u7H^5uew5@ z``6!u&J0O*o`~$UeLQ%;yk4c5>#n-y>r`P09bl|Ml%z)O>i>)7G z(k{IM`G?mWcYQZ>;vl^3X)+P<2{P?-W2NG3tO&~AH**mu2an^?u}3T($4vQO;he;$ zrym`Aq}36mCH~e^WoqU)7?N4i>s7wytq>Fle34xTIxXu5ScZpsQ!n2Zglm*?f|;87 zWqJS-UA=;rCV_cF*Ahq|j^LSNkuIw-ALGX8xhn(r!YS)HP zmO0Czi)7>DPVB0O2Kd-BRAW;QA?Tq;p77U29w!3R!knExH6yrk3$>Z-fE(AyGT<6U zcx{xNIlPCelJ2PpP64BG)VlY{AJFks)o4!|uDM&>ULv4|T= z<1dexcvwK%BQC9V(@0b`7sk}0*hnFSshJs15nVc0z(SS1z{v4*7h9t6;sFGR+5sFL zE6MaF6BzKI9vtT%+f53CMk0s;;2)JCUIIwZ4Yvg8icb)(2nF*p8iVB&1)ZNCe`nahks^UP;O-&EFDVK(OZfZK`;kQbu zXRZuiNzPqWOE=4$B}5Vs59L)61iQ+s>R@K(8)49my-gV9 zd)C~|i1@IcU1yT`HgnrihcGYI51xR4%&()Trf-})&f(Sci5=`7Mh0}NuB-x~Kv84^ z?69?!JZ8{i5-;h~m^yV#My>fsenLiWrCy@~Ln0|!Lj@*owziUu39B35PN%wUx>hnI zA?ecw=%6N@1c=@6IS`=9)VV17lF|;`asv27Ovvk7X*s}NvK4ImOo}gZaKkIR2&}q|+ z`a8o;xbf9yL4Jd=ux`t5Oq?gJ=1XIu}sgTg%~#w9OHmmc;~ zRjPARd#ozO4l00+wjURO;j&U>zv1L@(RNi=%3LelrcuP>QcaJY-bO03#wcS@)`2`*20e5b zwXBnTF^a$B`A)crxf9r9tKq~@G{Fwnp7i|od4b7}yUml*p`m1oAEXLVEx!hIU!Yt{ zmAW8=9(GKKU8ZO4YS^?vA#w5{oGa#Ks=4ZKm719@F$>gitDc1>(E<@L$BNGgD`m7r48L03?VL3Ze{4wKpzLHF6`<|qS0U8Tws0P z2VQ|Ij8j>iE@>e}12H`7tPfZ_3t3F$BR*mf(j1^>s2d*U01uUJt1tduy1-+;6?1H+OBd8PvrM=ZzYh#QLs>d)JE{9PtpO zjUU$S^|!&I$e(J(Uf?^8K3V(T5tLL@$8$Cy4TdI6bT)+8VHtS)PGjadC{R~cR0+itSC_>;w2Z&zkAnaB;B zE8)2eeQxLfUXsaVZsPBkW-^&s{(gBTlbPc0(E2QYzbcc-oaXP>7{B+x2>kmeF3n_a z&rDUW%w&EclesGMV5TSYAoO@m=4$w-CzHA636IERuDSBD@aN+*nXAA5{qKMOlFWnG z01VeW=`#5Fl1ygbm9g9K-S{z?2j$nBlKo!NwO{D(66o)Vs=v#Y;}&!V|D8?tv@-}V zg&t>gj~g2s*yF~=#?;Px1lTUWG?Tgd-B)Kay0a)+#m=H=^=z^;n&=gPnycWSG*m*j zS3nZl7XydzI7j z6wLfRO2WJol$g}j1H*ji5(D~2hAy1{a!G%NdDy>P4P+gyLa~DA$(ampm!Ecv&X%Q#<| znBp z{uzZw)i!?PhhOo9AN-Y^_zy0Vx z+IP>&J73iQ+-rY!{@{E6^J|x{yyVY+^_!3V>cI0~_v+Ip-*)!BH*NeytNe+pfBNgc z`-wN-^`r0mvk&ZlHXRDqd)hZ=ZF{dz2U^?e($wE@%aDo z6C3?M^3NZ5*?pJo|D*5x_!9=RfBcF5sVg58{>|?V|NfmrPrl_nm67~=URUoM8M@&Y z&y-fZkN)XPKl90x(_ebxOO}7iIeF>5-+bedYhL`a%(X9h?tlI6yVkya?tO2)@0QoT ze`M{G-+lha+Na<6KXV`X`q+f?;_1izNapI^S=_zg#vrZ)y|xZ#*Tb^FnoTQ}Cv*T%<}mp5k|X9ySOiCCBP z?2@zg9Az?=ORzfEs3+U6(9itXm%g1Nj z{|8Gi&OG8>w|(+s@4TY*wGT`V{@$H0{prsZzW4{1J?cl_bNSV8``yah|DpA-zc91m zE*!Z13+u1{%_Hk~77CYr?w=0+_0RoD{)5;4=H?fI-qRZ&zw4^?$AA8Be*M{R_|=

2(hramZzmt2x>Ei1i2u45s-#%Y^;$JmyS$WNy-}^JgEC0Iu{Fgg# z82G|hUUmHHpZ~j`z3Rx%-T%N1`8%He?a9?|E&r#-|LXT1Rr}sA9sSkmE1rDz=BIu2 z(#w16vvJ=gCw}O+pIrIK%YNxue|OtmPrUS#Z*Yn)eAScxXXZ0cyXyX5n|%3as=(5m zH+eSO?}f8~?EIdkaB zcYOR0|LS9Z`@OfVOuzDD*RH(%_rLzVb3ggnXME&f{lCBaCu+SP|Iya@m&QNxcVE8u z??3#%|Ki>s`|7EU{k7}=%Lh*mt$ym-(O-V_Wv41{dFwkL+kErPSDrKX%`7@4x`Kkw<4}5&^fwPmN-^(8O*l)e?`R9J@^nKs@%ng;R-f{O=Yx8%0 zH@fS~J=c$CGMN`wdibqBn>)J!AUg$7Y{%bl{I$&wA#uuMhp^Yd-Sjw|(fP zz26#{dEA#TeeHMt`+xcHcM*s$92kGMLE-4mAH`WffQ&;P)8CZ6;CZ$7Vb z;KiSwzU}NCYw`Xkz34H2Jn;FytH0>WfBTg4Kl_xI{nDqtaO3Fm;H#hbhcA8k3;*m- zKl=Gwu9=&2X5Rmz=O4ZNUGMzce{$VSCi8+PR^D^qqrY+Z2j|L{-LUW0FE{`9OFsAZ z5595w+b_w#YW@7%-~W{F{O;%KAARdv!>eBXqx|hQBufs% z3c!2-%y<8vyW4%!v%8qxL!-O#8=&syZW}-Y(>p+;x4SX3vwM5Z>Z*tCnyIepsj3DB z%O#JL_&G+{(vc#0`j96|I?8K{r?6#-@_sy4?FEd|ezJK$NKlb;2>r4OSD{q|tm5+Y&SJpo| z^aJ1cBm1AP6>9H(rhVb&ul?a){eSYs@ASU@{eQST_E$dlv7i5kpZWQJaQQdqE^j>Z zx!-;Lhd=!*e`ovq{@w5SpTG3G-3|zq-?jIRZ+`c`{A<5`^WL35{ZQ>c`GwBU|A%k> z`1F7Gt9QQC`SxFZ?e2H}&}V+{r~b>gzxMs+H+h-@|zWe3stzY`o3qwDjEBx^1 zf9n^2aHIe2-|>a=_k2-*@Lw^8Szgr(gTW z$3FF|Z{*oKW<$6#xox^|MkMm=RZAi_U&K#=~rL*^e6x5BVWtBGW(mCzxs0^QSVy1zTF0& z&yREAL&)#I{lxDPMNwes-~)V4Jb(Azy?YPw=RZ0G&o`zYt}35Zl(SXkvm?sGilRKK zC<>H0jn6?&AFnE7Bd6dGN-gK$*Ky_DvEhfR$_3>-{5exqE(}kvDOIHax`6^r_uUJL z_F-Jd`M6WsKL+g&2kno<+Mi3bPh;bUwxJK$4}$iGqT?S4+CLU;|Kwb|^Hx^V_n*WN zc97CI4*r;E9QBvf_U(B44=Eeda2YTx4uEwCM9kgYUGx|byWUUpRfF%J#tQd73j*i8 z&mO~-KXIKEcw14F4=eY6Vn~@#x|*KtdhJWQrrmPxzNlho!OP1F>fDlgd0t&vP?wk0 zrBwhH-#QUl0En=NClv*U0`v!{cM2Ep-q1ly^~?1n51aD8s0AtQRYYdj(!;2(Wn= zDk_Rx0XoDAH+Tg#QDF#2C0BxxL8Vdj47I6`T>;rhQ-eU#7Ii^8$S8_(kW;*qKv%&3JDAi8-5{HxDDMQh+1Sz3z7%qi@lxoB~A0 zu($wj_yBc?=djQ-{5dT6)BHDR^rHN4@__>Qhm^+@5Uo&qXBrHsSu0F$y3@g9%h@$+9N0>Y(dIY)d{8>PPcgK!n70>KFt!zw- z0`TGl_SfslV|odIs=PY{%nZt$#4@h$^#B~U-xE}JgF^tmZzvnnrxn1zam1ZtiUNAv z5I|>CQHI78W#}A3;vv+*&nn93fA+YdoL7{w;|~J|d=&mX27h2_VI9U0=>4AE>xw?l z^FHDGJW{p-HVRlNB)>a-Q@`y|AIigu8N57v8_LGCsVMIZE90!@==d|wToAvzxBsin zOGv!$LTPw6PMK*%*=GNKwIfD1{JA0J!YHOJtZXemswjmMf82lbndbKb`MXZnvEeub z1_As+P%3-_p&dg&ol)M!q03keD1yuoY#IjQD*#>V_5K)U2$MO(W(1Qy&4qg?@+i!f zZ(v`72OI#G_znYKi~Kn(%FjRpY;lyc{5cH%*Lj=B!=NDNWk1Nvz?{C$`+}i-ftLXl z;^=_;1)KJ>Cv*fhAu45k*mcls|_J^*4EWAfO-PeLb!y%AfM*PbiA= zWnLHf##i|7rxZnbo3{hxxyR@JAw^Mso0s{pq9{KA+*MJOk0^?AnU{Y?QIyZ{-_I(F z@~`-BqA1GG@i|^l6y;0slJlzPco|?37x`~s1wRaXlAa#>)fB z{XYNwqM|6@gh?oh@)E2CALmCEMfn_``=p{Mef~Qu!E;Jcluh1FPEnMv^51}Sf5PD~ zttiSn{5P;N0k>I2QRbmx+&vWKGKcxRqA33hA2aad3%tz*MNtSJ!y=50KZjlD_c?xk zOi`5Y;O&6$^?&hpt^n*{VHHLBgrX=_-p(f#MVaF5ysRk7U*W$&yJ+*@OE4GS&NAR7 z|Gffj@-o0t|4-iLs-h@A&VR2dit-I!23Y>j^53wxjPl=L$Q5l~QxxS7c-?hHQT_&> z3mA2OftRnqS^}W}>=i`;8ih|4@R`H;RYg&L1&D(ihyOk=Q&$w_3jf^z5r+2##^L{( z|NamEen?TyY)pR?4Z)Z2?*#sRL{Z*3r+kmHF%4XLSWzxC;7(&TmwQ9gb?SNL>YM69 zzA!(T`gl$}ZfW{$Y8&c8UOd@$9ovUTGx>ZTIRB%|_1bE)QQN9FN-NFHT6wKpsl%>* zl2?9S8pW}O+ow?L_)2MMYfUcpNvYUFn$b1wm+4)t+p{Pn=Ycv8ue?&MtZg=nD;woX zv$RnxugeY0OAQ>y2B6YokxFoZ>y6FY%Kg@ZOJgg=jgnmN<5GW*axf;Kb9%M5S!t9i zE6uH1WVA0ywMTo7=eJ!7w#Ex5s%uv_>kYZ51-Y!D`C3c!5Q?X&oAt(8tyFKWEJ20y z9ORRt!J<_2l-_|H&0SiUo`H@Y3M$J`Ni^{>sfjVo*r7ILC58sh1PuUqQu~)-^mr<& z%|lD$)vcxV@^TzTuonvajgNjjyh>LF)vQ!yv}|viw(0Ld7w48XS8g`z<=0Ei_3}m; z;X5jpYf-9|KFm32;{?NQ=r5=mL0dkpcX3cUU)bFzU8#D`0f+D{FAvI&COY6D<>BIj+FyM2`WDpsVqu; z1bh83mv*YpqA1KxUrvBo91b0x4dIaSb&>z@& zlX4;7?&uKYo%5(>cOBQFdxg1NWGn($%JN_AIr1cMnr2PkEi7 zJjsj;m;fif_2=2Ga^bNc(mp^AwJ?u3EGCpy6p-eJK$Zci^MaxbWfWxyWEGH6Kub8z z1y4K{yBHk0Jgz9C|MA|vdr$D!V~Ro^IsvX45NFJph2^xz4eIHxN{Zsyy3>Z6mo!M( zvO_J>f~WzAUFdZj-yyf0KKhI8(iYKrJxgTE=;2*UKxdwsiy+dJ*6WSynorw~yQji^ znMPmt%^lO<8#m~-*0=nu?oxx=zNuLl2HiDn6*r1;$oFaL)KkYvux#*~uv^GfzQBOV z0%&Ss9t*&szh)aM`26)Z3RcLKL!&ku!Ryw1LO#>=pNrPSDLB7_9&dSyu^VjJO= zf_K2mrKO9%7Fz|zNQ>PB3+*^ozsn#9pKN6LL#PenRM>{s={7y{Evk~t^xS;6#ijzO z6*bpaN#C}p=Vjp>wNEMzSq^zY%I?q`i6Q0obj-{l|1%sA^ zn{Xya-^qv5cJhBe#CGza(_kAX2srfHYiTW$dKbu5YV|y#YY>kIP9Lzd>$iz#QQDg% z+mymZ+1?~EOsz*K!!ffv#my63+OUraVb#! zpe`R@Q296x_euU1hZ4LS@w>f`@;8s>AcQlAnZ?X@&ebi)4qG|F{vBn7|HTXJzy-d+ zip>;Fu15|jS5sNx3!xIz)?Dg$+SGB|6t^%~EQuKgz&tuH97*Ga^c!RdG zV2?3S8twOp=U9Dkct#FIcv@=Ylq|bBC^@?2^dVtA-uo)VSZ^@fN}aUCxOhwHiVo;d z9`*aZh?*ntJi@RJ2WDg)DWXP}1oQypbOp%_3xiM{ykoR-C55JfvQZkj!l);B%Lw8M z5C}d?a5_MJHQIX$^MgSlo~yC;{ccYU8i!I0kJU6}#{tCH_u|6hf{K5HTsBBL1i9$i z1H_;RlR%#MrIA5AQGqj-chEiIons1EX@L`rV_HF7GmO1};>YoySpXpjG*IkV&U1I- z1>ojp!VAQ>5pMz(22MAjiG<{II_$}rJgkV6t%it%MH#gj#$FE4LnbF3s-JRzR^Q;gROJp zf72z$x$W`GsWm&i9A}vUG_;{bt&)uR1)@c;>U zLS&FxXWvN#E2DQHGoIGcRjs8TwhBZU&d<*tu6R0lB#;Ee3)g7CNdk4drU&_^J&=Ee z5fCod3Wj}fqtUA-L?hcK?h)Gi&RbxIkl7~g6N>|dx)J3gk`6gk00r{ca&-$&zZEJz!EFv`ZeeYN`QzLl$a|_L2*5C65sw52X)``tZ%$IlbeG0UdoSIguu`{VgH1bzHH9ETg`5 z)$!ndA&f+INtXZEtdr}e>-RN_Y-oDNv}tTV5JN`#^PFveS97Vv`z0A{pM$E8({9h- zBR$RYb{*IFM05w}xDn2u4ll&|81tK$zq}}fC&n-noIO}ZHC$wDDzPaL0;r}ExYq$b z8>J1E01EMc1DdG>uQ~&jc5pNkT2!)@)|4^{C!=X((^S=mGnfGVPp1 z18|Dkx5X*1d>qTBj|dbyJHa<`2w}k(jxQAQv$B4Wz;GeE9JJWj_yAoVRQan93Sxk? zY@HEp&kp4GLyGLXa^~jdR;{_b+H7oID^-BApKfebDy4Py09rkTrl)NS?uZT^?HT46!#B%8IJEJWyY4+*z#%RUWH?^jH@An~KHd+DbUAKB5ddo&HZ zUlrI5Y@E$q;P|oy_hO-W4*3ecC5^sqQ)`lF#L#Hhv5DW&d;(b|JnD&DJ0g1lTtyyU zHzTz|jW(TwN**$Rx9kzlK!czwn;|GLt zG1&=Gehx!8RlQMc7OPd^NGQJ#N%3Iq{sP~ePNBsl<|TFe=8%mEy_taocHvo(HP?Cscv;Q63XE7U40eCIYFfiY?LAmfB-D`Xwblu z(FRsaE2UboQQkzsLUav*Ux}JeM{CwfYvp<)Syy(7hG>=xXGOj6d{y)#`z4=r9sRav zw4h2bNH~I8D%ML)ICv^mn9nzdPgxpd=sep+c^7O-0K*)#_Lvwz&|0gb?m}X#5)H`yjY&2r^qKhf*R$?wk->Jsa zcB(%Nb}Gc4aF@b=vcn#sEN#ODuVA8bsb%7IjylMfY%$o85S%CPkvG^Z-i&KdtkEgg zlcdXiR47(F!uanCYy+6(f(jTH9J{12e1Q)VI;ohyQARw@q(#{XrKu!v7>zDyZcr^w z?JD6sAyy7ZLM1Tn*o!!osYDQCtRUl_G7D451n^j4Zx$0_1w$^mZ?Ob79#A?)St^-` zl3{!h12_=+3B@PI_7PRwk`a5&Sg=YaCU9$9U49^#Ei*IR3V(2*t~;z`Wo{?7wbO6_ z%79%$CO@h>_6~LZyO1PHu;zlc?%3_3ZPcmmQoruIrrqB1sL^ohX4`Ib=qvTj$_?6T zIJc=iJ3TWC3~l_C8;vIOxrKoSEr(1DLc`g4_81!bLBa@ZLTAKC@ZdWtl>fph#_dw$ zDTXk9I%yqxGO!NKnwDkSAm-pyBcnSyXFHX~*?vZ7&%7^*wL#ynao$F)?JOjJrv`Cs z%d{!G!id+RZj6UXr)2TTNKEZuH~w_*7BSWc&l?0hMD&;}IFrvW9OzpcVuwoZ8^1Vt z$=J(Jp9cxHxYGQX9PD0zYgl+6lT>b*t=eH%DS}8ykY69@RX2>Pqo6QIhRuSIEVI=$ zyP9P=dY0J&r#xq>vRN%5O|7pqtF_YlW|6t!>P~O3r@8)~?4rj`F3wkPHm+_~wkk_o ztE;6NBk!<+OogE*8;be?38v}8^>d8$;5$VhemPap_(-^8h9lN=Nw5e9c60(fokoEF za)cks3P=eG^!wl^YjqtIC-y{kWz+T@qA~L0G6njKxYX-+QQYYFEJriE;1-xFNAQA2o|!+XSN)CbK*bE^T`OVuz&;kf_F6~*G4)%!*&_jkTOlCU6QlJtW zvY~oCN{wvGfn~k4Yg!iQ*2Le1cih{VxLWtcao$s$O2Pve7=zb$sRx&5WV_V!v^MpK z=2BuiKHOfW?NNhVYW01hYc_GI(H8@N*euiDBQ4YCJxNF7@X1Dx>-Fun5I&@X`nT{{ zK6nSQJI%JM>9pCSuIU&mDa?5QEWgw5wrtI`D4KJCd+bsJ+`+-{VA_4yPi)ic0Py-f zgjXT&5pCP2E~W_gI(;AfH;8ApZOuxY=KX@GlIsE}T?elw_onhNA;70WKX6Egm*n zvS$Bqy;0k&tTk7bf*>NOl^#<(Y_z~(SZow>H^~^{VWS1%5TfvfTB*8TTrM?llp9x@ z>(FNy1J%4*sX|kkm<<~(uumjwN*f1X zEAcJu-eN9ro|bIl>9BLQ3YVv*rLK?T!=rEeXVSL)zs0wGK4!7$Z-7}EyvuK!++|Jg z!&a-I)48}8fwcOj#m=>Ss&(VO<-E<9H|SBNZ6oS;7Q!mIP{=Y<_Shf*6@yb5MTzZA zBspNQsRLey_TwZSVnd0opX2%chomwLz(y0^v2pB3?;1-XVFYgKd|CsV~y``MgP@1*Guiy z$}5{UUY~z$t#^6nwIw`bJYQNb)*I#JfE=K^Gt|;N-_$({dHUroX!fF#%lhJ&!k-+hcJV(=YN#K5f# zQeFM=MOFa5g94+lC!s2eA*_yQnYfUIPEKzA6K(%6$c)A7- zJ79h;mgVFM@jZf%VM=!-{f>2&uGXcSVj@!+z}})|aEXxoV&ptAH=i%4_-B`LcQw#M zCKjjjc@_T%+!*A`hLJ&`pHHOY(4dmSQ{#lC9!QTk0|E;rk(5d#k{c(4qZO7-Y$h_! zG40{~Mu8+@AdmXmK)*Q_WFvUgv4#913Z&;t>!l4i^14x43Xh?vg+_spiNue9{s9j_ zfbW3bLzlVLR3d#ols9&$?mMp8&GDWf=0TS6#N#7J`J785+9EfQ^40~prZ|J4ZItvq ztz}xKzZZHWh=1A!*j_ZaVX@oOe3QM1*ILqgO7iB@c}rt56BQHQ%NDZwkm;T zPa{}(uHqkIfZ1n5edWOc3^!RmZ$#jG`yj9!s5>r1U|D&e##yXg%pFvb08RKjNPTT?N|nNy|{x~&|7pT zfX9b4!K0Zn9!?fCJAj;m_u;Puw4>;)S-aXEOOX^Kwah|(0erI=wJ{woK|$O`zaL6s ze;^8S{9;Od6oL6G6r?H-c44B(g(SB$P^}xmsF^@y3KP?Cf6|lNrc1Y-yPyQ6l;Y`Y zL@79}5~ZFJiP3glrSQyzy0zcJ03XIg8uf4 zyug>`q=93*w3Wq?vh8j;b-T-?xh8VRNL!tl#L)@*;WUE2#Pu-Vp-j%GIe{F`DOx@- z6aJyhd&lokvf;dCT9!suoxW|Li7qD0@gBg5N>Z~VSMjtHw8;J^fPyr@b%=w3ho$2_ zonpFh#(~FkroY#8dR%tIBOj`RXsY&YJPop`K`uJ{f*8hUy)MPWHDJy^ofL> zR|euSc9CEZB7Q@1`i$|J8OZ1c3BH0&9VRoAFBITu0iH6HWK$3G&=uMTWTAsYofY6F z?-eg(l0**jqXReX;mEPgF_;0K0-!HJ;Pkf*DN=4Za#ER*>1m+L3#0Y=)kHy=5A2sz zCdvbVw83jHLgJvZJnvxNbTx=U zw>4X*lf?ANt-j|I!@&p=N^Uu=DH7)ntos;ukiF2;*uwxz3~wyLC=LMlAd(jNqmt=q zR){c97Uo|E7@1D0Od5v2_&!0V`HFFdeQ^t1}y0I4~D&I`h*lC1(#LB#!O^=mmOVg1YRRA5_Umsf*7E~ ztfzNl^dMBQgOa^|T<=i*Huyq#C~9-s2_gHrF9`p{mZjaMElbmHdmXB|0tl+-gYy>SNDQ<`r|ielDEoJW)XQ2Iq^;TV(F3Vm zuklj_%>}6z5~x^N-|SL2P;gqes1B}0KGoqwdWsY+3n&z>9RRh~^dK|Cw&Qjw?25W( zu}ETwMQ;gwD4z$e%A4ju zhQ>d;luO3YLS|v{azVvEfhaA`ZsG0R+^mX!keIM#R&8!>4qnXVe7&b~I!b%pH=?go z)QnU{1n1E_WkLoy=}-Qpz-F1qkvIS8p~Q}1iqb98q1cpAIg=7J2iEtp+h@?&2!Sx^o*UZMvr*z1BcQZeZyn1!UqA5ljn7C6sC=sYkFVAWXqWsIRk;;F|&FY$Usv4iDFG zy%F=jJkXFfq`WQ}zdl;q+Pu1Z$E?;0omcmkcCA-#mafyr%Qu6w@rfRts-8%rs$b_q z1nXFkRU1gj>AN~bl@lDH`Dp@ypphgkSz0T00CXTR0mD%50}CQz02^)^(V5O5AR^Ys zZD@Sn=q4;~E|3i1DH~TBBC6zmCUOzIl0`$C83ESU&7Tu6uPbtr>Pz(o`+ z;_cZ3a2WU&Cn;oHUm3`_hB4i$u-XsL;eAY_E0ua+lRMFNv|VjacAEy@3Jgj+eWSEg zFE>i@!Xd*NmKYW$$U!|jP@*`)61M)7z_ox0jRYxJ=fI3N2RaYxGb4uWiR`T5E4J+$ zwkPBQo&X8I1AQrU=z!qqEJy51423mX@#YhAMR ztyJofkeY}t`pD*@6O|;00}cXspaC~*1gt1D zaR}iznlFsQ6PZ+0!oVADk}$`T5fZ)#GsDLy$j{BFb2BKV8@4R@v*#e(OV2Mt)@*{e zzCu3EuoXaY@E4htwF~TtfL9`Etk=mUIC|)U$1@~agv$V^@gi^HBI+75>cZR%^vN`d z6povP!6W@#nPb=2z$9e4x&osJTU`MeVYAk_vcSv35b)ZcH!|6*p?Mv2dB{wX48)~o zSR_b7rV7|qNRtDvcwFT!g%H!IC65K*{41ju}up(ct1M zN_I@IuUY0>%q$S|HHfn!2Edre)pcy}_yEq8dd|SYobYc{m}0FBU@(Iri3FEIuSxU} zxD~zKC|OS2XC-bxitw;3nZPqaaWKe8EkNy6`pMXuWRDT3D}*CBU-O_T_UoMg-ToHS9dWc$3PtLXz=_whh7Sst@)36k0C5D+}VO}{Na~rUz zll%d=AA)XqaAa1{Vf5_im-b_9!^)LZ8H?QMYkRQU2g4LU)WTFDKQ#kr37}6usEvqd z?DA5zFf%nP#Y6?8JvvK#I*lcs!j95_tcp`@$1w=o!$8otSIh&I(1t_kG9&95#8;25=9s(+*&U0Xa(G8^i`ZR35#=# z`=|sNlhhDP=@MnK`z3AQB(4TH6=Me2bZkqS$rq-B9SIBUBLk{O$9f>}fWzU&^V565PJ^eg)?u73Y6%bN!B~`!+X%0+q&ZBvr>G_(C+V)v^k_{dmozZ*<7)|{0 zj?W856X`^-o2yQj2DflHa8CzM>>RxeAX+) zWFk}^%E^&#V)IYK_lbqV^o)vsf}oxRI}&Cd_KnT3pFvo@l#PJB;ifF1Ur9L$cq{yi zmuuQ|cWO`TTC75#--&Bo`BlN#HGK3Q$=YQ9rqW+yFXRPrrz;`!F4akI&+j-k$#xOS z!8(yF-n(PAMO%CTnej+|gXomm$|SNJa1p-A3bR5ac0VPFb}tHnbx-^zkdC5xx4G@O zyP9iI1Aa+d5I(-!hfF}tp6lE-!&_nDlNI@;a{2d=1^mfD^apG$#ut#e{lKX~DHb1% zM1Y(yyIoW7fW&)#Whu-?CQ{+?_j0nDu^=EHYMokHYQhcfu?ldvcOb%wy;PJJJ2niS zcM!Rh60!$C*^`iOfhYCj<@Rk?+yN`KD=Xk~I?2a2ipy8al~QxPRIF9Xl{K7%R57A@ z%;fWEv`p5D4NtDclKMQE=;+2~?OKUt3FMOknNaGS<#e5mWv(}$sERc@#s3sxzFTv zJH>PB!9b+dl2d6O1OIwNHC{H>v>X66Qm+a&3a?AR$MDJ8#k+nLE{2#3$wC9 z#zBQ01TyH#5)4MFA!ihg;D5S8Ce@TtC{i=2l1a5fr7XPMEOF)78Aj}!#e%mGXksUG zcnNu^s)=IkvAFzj9Lxc(=9)Atd7d{Iyb-}M2Wxj@ysFWP%1_`D2zIMf*T9iM2Y|wt z2(7zqYMXs8$2yR$=>5p#jIxcfkV=s>`-+eeuk$mzvORL3zAmq9-&X)Q6 zf-j?RRsyHpNbC-~s2*%?=u;HG{xK#8vQA=`)U&Kpsg|{L0gSI8$^bFXqJax7ge6}y zZ7S|};&X=mIK|w?@-$2S`mw8J36b_VxX^=Vx#6-27>Vko8f<`}>K48ed@$`@kV=A8 zmWD}q4hX?;Q@aJmrV`jKd3PZzRSEFd=;LC&eq*z?A_NmD!0s z35FN1oG8SG3417SK2d^iiD4$M0VTxd2hd<+O^D76hFnmM-2Mx)7=Oz+o65iWsDifv zH&er(SSF^rVjPzU=E4F4RM&Ar7)eJ^`Cw*%Z3d@Y{H`+A(l{Z4I~8Ul&AvB2mfB_5 z6TVI(p=irsU|`Ov5i?J6ZQJa0LwLBU88kqGY-bPfNA^cgJOh| zP=bQ^<$*^_vXx<20Shtg#!uvg50YtbTm8F6YbGVJh}dUY5GvT|!_qyg-!|=VlRn8G zMEBVr<@+prr`RddUGSy6Q2eI5pkJ8xs2If2x2}(*ZC#(?o@=7{VDmxCbqHMQ=dqi0%)15wb_wYJ(%oQ2m&)8aM{{0>q4cOTD z(nbh3cv-bdglAFm|)iYXkOGM`DK%pc;E$vYH;S*(^xz25_r4ZXOx zwH*h^&39ZE{26=~mdK6Mnv^Q}6}E=rTXGaZSyB%B7H;T3Qeygu;#_b{v#^SC(zPEk zDqAcRF01%QWb{be{P3QS{p3dpHzmtaLU!SnDlWVP1S+sa4N(c-4UjfqJDa+{6_5!A z$?sncB)_3ZmaeD8*=I828YsvgdZo0!esi^4X;vZmqt~HE9dC8saxr3S^cJpKb4=?<1MrMdgFZm#+pALxPxaqAcHFB)x4mjm%dMrFS44vr7xpXe4FjLE8+=?@8tB-945p5nIB0l<=20 zy$!uGScy;S9nJNqf2HqlFLYb8F955j?se+IWw%!rz#0SNOk|a1LzOLw>UyAn<4AE_bJ9r9M8+jm6RLDrP4*2r4W8LzHc;yk)>*>!p7kgXa4dic)Ej5@gl`xt z90CHa-ZH(h{ypsVI8_GW(D<4-G*u=B^F&I~&*4aQcK}ZE1 zoMIi|!>B~F!Z~j-jq?ra<3>{Y#>~U04#*~YSGBz}%ygNqHWT>Cw2d_9O!R@aB4KlMFW?Oh6;sghZ z4ws%n)ds@lpsWS9JJ*{eTASKB=t5w%!whS-N#oKM_8QwG4jEu9GYVB=0&-X}wR4u! zHlzM>45qSlmI7~lox*gZgsXC};aMAh$DH7BV!&M@?*!%YdV)$LWg>J6H|vDdjO7wr z4R*ybB}yY$J~&)G0Q0c$0HF?ZCw4V+0MytB@UI{gY%R90E#&cPSe5|<3#0%zVE5eF zP+n%NLs$_2r3zO$3FgmV21d=T+PccuI>*NLV34jfQsPT5<1squ%zc z`Rj|`P0S+5n-P@8dzH`rBE7~oxnZLv=dow0#$hu&y%W|k@_MNs6O%BzPeD~j}aPiQM;Ng{Wy;^K6UoF*| zm}{_%h%+7*lP}{7Pr28)iRMrP__PG~vjX$k)&m&!#CmzDR;p~&oAt^@wYj{xv9VPt zH*OvpRFJt(kV@#~`$*92jZ(33wN%?ERuA3ew@FQ&dMP(YUSj{jct4!daI?OAwY0Le zjuP#mfC3i{ib0=ZH^??M!(amF`sP}*Ty0)2)($;lxL;Sa7p&7+xR|Y6scto(EmRB+ zH8`1kk4?|bZy+bwC~a)kZZ_A;8|A~}@wzmwk;3!>v~+&6%DBo#X(PC7@=yay$3|f= zJX8~#(tyVKO{Y2L_;R{dDy{?IS8JOahlafD_kQlR?5c2Bf?qJ(v!d0jrQ*tc@K70Y zQ69>DH|~p#wxwy4%5t5q&#jtEPI0>T+Oj`MQ6tCddFNzhWpA^Q zxdpsNmJLJr3bAss(8A}(nyfd9wMJu|SvYWx@;L)9I*PqVO38K;Ug}{{id~AiTw<5l zrVMo3aYA^BotKr9A5G35R8FwTf`ebOved2aYH#gzwY#}4@(1h|f2E%{ z9Mo+{x#?i@P8oIJ|nbn%mf`zq+1fS)6#J zw-j@ko&`^|8#7TI6snni?mqD5rjTM#_YW*K-)h3f(WKaD_EYm!AU$sHh#SiUG$XH> zy)5;W*gDk%)zopYn81Z?*fc+M9Y};&D1h>VBYkW)1zs`EqaG;tj6+6X+||r8=N9ZX?RnHCMz>40UZaMA|$FZ;T6^lI|+%2ekv&hwc;8LxXLkbgG*tkRRmsp zImvsFy=LlxN@6MmA6BRmszg#3`CHjY1Mdw};968%j=l>N*{I^J21v;eNsK_K>7hOy zja^GA5a`7!$w+Fn2yjUp;e%Zv0&;FGO7+8J-kSm?_$awsXgG)P`F&9pd_uF0O6CO; zgdX|HK^@K!^e|LFl9pCxW93#=+|mXRNo)&50Hja=3c$>h6j}>KeGV}u#4}&l1#ywR zkeXHEumfPi9tp`j{=Bg+3E1(MpsvK9F|N4nIFV5ZA6nAV1UlkKKz&i6bg0{m<7G(P zLOB3J0%w9BgJARlmmncof50W8R(Fn}-%>6?NNBwf7F-pQA#(x{-tt1p3`+~I@5G5t zl+Oqy5+|FGFFqio*p~XicFT^0rIV9G39;Yu?Un>2BJ41SBoJ}-^#O(8`2}D94+K(4 z@J!Y8{xVaDux%cOM5O%%cNX+&Up%s%0^4th%E@v_#7rwu?8I%68YoxxI=!s$XG=a#HWyOHV`be45W|I26g9TpHlf?Maz5 zd(sZ~C=a_87Nx-PakEElQfJv!>pe;h(x9F{MJf(iwKT6Y3BO*^b~OBPgSI>eLILn! zOMT1oI;I~_pdNNN*w6$90dWgoSU$pT4+TKvO!2U;ut9vCq9zFhQAr$su!e-*@Hvc| z>kM-TLf>}qYpFa~5XUeXY2@NS8i|HO0TROz!wKfQ8yp(2JNOPq2qG)zAMslZ;5)_t zTTQj(KApalhUTJ!?FkEi9v%5FrXl}-9w0yTBM^Tb|HYgEyM52pF`pB~`v%zkdDKPk zzb%j2)JJ!}CDU*4FbiKnF3C+{D5> zgiXPp!Rc4H>o@}jQd5$gfL=-uWMzO%I65JT{P5@?pRW_>F)I#SpAB3MMKC4LRh8?t zVS|HRGo z6L7+&XEC*yPp?cYiwAI(I{Xv*e>4aTEmz8om8E8}wuXnM!$wQ?JWq@!Jx#)}(UMO( z6Sa~l5@Iz@NvTL-eB;ZTmDTcEbES+&?)+>g+;fkimmM&ogEJbO5zBzC*85#47UowE z6Qc$kj)$;___5PyXk+p2VFcL;RDfe4oy+^3o(^N$m*k1nW1)>+j9)EW<_NQu${OcH zh;diDYdEfL+HLAGYQft)WB-uE1`gk&bIs?{xMubkJAy)byC1XUC+tC2Q{96e;^qRgNKTQKCUocT3apj&EeYb;s6RcaqdJ;69UN zbBDSfrS2rzvU?cn=3?uwK->zvz?MB0C+CsI^_3-j-`H4L!Unt4*MO2I!$O)psmH^>*gwXUcgd4O@``@I7z`p9191M+GABiu$|ior4~Al|BMC+*^jb}Kk%I*o~OG@JR5FXHg!B`mUSgv8^$_2`eyTd z+Gg|DxrmMv5xY#0?<@PJ=SO`eW-ZlOqzwH>#u**xcULdfrX6o(m0bA51lk3qYR3V$M88QY4;-UloKQej-t zWqB$OIsj_fA%lR0s!?ev_rBP8kk~qSdlY?om#$H ztgMwbN<4(}k&SYtyqS#NINmjF(~+GcMz86VSK3~Yl z9$`Gr^WZAVg-1lzU7RfY8&3Y{9N>jC4)8w<4gi1^9N;S41IjP@!`xZ?Vn7~_$oE(l zh3A_si{G$S>}qd0HmT3Vg15V-9ZjCf+esI+1P-VY8bv7=h8m&V6o7GRDG4ot8|FTw>lu*PU@N+ti;&Yofdi{ZB#%p4me^7~NwlYs*L4hZZ*jsE5L zx{e{%Ap`icLz=t7d$PKYcc*XqzJrt!Xocu3EA+;*QYp&`RmTy_;aAp+D?Z;i$@W(G z4k-9o_m1y_3p88;3Zx79_97%azAKET{L=dL>msClc2u{_o=3C6@FlHpEO>ZyN}Nce z#82}JY=ZU$HI~?D$c6wW*?6_lAYJNtTAPxV>)fXCdLRH~@ zI0znT1XEa8m{IW$EDT3wq?kfLG0cR`cEiNJ$p|MHl5ov|PZsXRQKfg5!-Qj&Ya}h7 zaL^8B&SfeGe0n{0mZ?iS(dZg z)NIGz>%uLhkOqjq;$J~6U^@I+57LzAjs@0PwN%?EW3&kx&qnM8Th7QEH1P;D zQQN9iO0{~kR4Fd4m+(9ZD#*saFgWcYsDT&Rl$y(%o7c)1M*`*L@X~Xb*g9uB2F*>` z3mE2k4r+pw(OlhJ=ix+9PZl*owgzdk!}?LS7F7qP9%l>*z5|vO$`oKVOj@y?;FJgR zG@YEiV6(rlE-(aH-C8{*r`)?;zQx8lDW&?D{!?Ge(gQ$$Ig~>m^VMiTs;S4YJke6vzQ9i2Ocn^+DcW znP^Yg)NeU=LC}xe>Vxu-+g9}XfGzexA9BDbX}r3&QT2E47}Iz4e8srcUAeh(XXED5 zwXIv)>P!jMl5|^s(4K73m*$wXBd1VPOAmIXs2`r9COu#G10}rJD-u_m-)U4NK#5}M#k8b3x%j_x;O3tm-iq)&HuFC=m zFE8W3@rC)>JZ33)?CR!Ly>zWqszP4=a-~tKT`$U`lJn(1iKZfkKjI6`m$=*;rIm6K z?I_Y}$UqBWaBid2sFjx^auXk>j2{fEA7u{q+_|jSC@vN2@`B53AWG2Z<(eXbmG`qE zA#6CX=j0mY3K!Pu*UD9NYQJ8pl~*xG0dGZ)D?b!Vi%cekj%0Wpo1bCH^&|6$(UV*u zoX0tN9#J%tV|RxT2YAqT3TR~C0?BmMJDV) z5$P#K!%>g1QAdGiN)x;y?j_cGCS0E`?pwwCr#X3KA?~VgoBp1l7nfR8^H>I%hiawu zQn6lQ(a7TZJ3cBZb@g(iyXs%Bu1uHS^39D+r`FPD=kF9ZIyYXQSz4N2+tya>jpa>i z{09cJjy$4Pa7&qn+bX!xWQ!@Z?ckC=n}hE|iY27*GK;^f2Bo&p9`<3Iuu~cY**! zV9pnC9+1N1g9^+qEKG}?EDt2$`k@QON&aBJI-c&DJ-H5l5YtMf&K+OGvzgVhk24<{)~~RmdXCli;kq|C zh6L9cOWgBqIC>wBFyY_ar-ny#Ckz@m6H9Bwk0B2V;YQ|}a@($OYZzd84PF=S$3^5I zJ(gP^B5orbR%jdz-@x9a#@_vZ##Q9dA>Ig;Lj`yrowZ;eDYmJYhJMsASDY(%sR0YS zh;TC6jzz&)4&4-O|5@(a_^ zD^ya}Gu3*c60ojdo5B4&$v9}9nJ-3RO;X&e7C8oEtkn{L;PI7&= zJfQOOLCP-&>5hYk6C%N(s4+U)dOfxjY%Jjvqhs7}a$;Js3!?64Lg7>nO5qlPT*@S3 z+NO$^Z^G5bM^a&VZ=qVLlJ}~oiYCF}5~yX-MGhYGR1he-h zJ$Wju+Nf>S8>N*dyOABw?zxFc_Th_KF++gGti!TZELtVq@ENg+9mJ*4D#msc=r#>d za{qz#k{fkd9dU&#JDUiNP9yK5(MkA3ok6$J-QC?>$M1%B6G%x0MO^IPWagTbxY&`S z#K`>r$VxLHQZn><3MgN?tbt?0(d`v4rP(X~I={^{=uwy~>eSlK!Vw}hB96|XZ}o1+ z)I0DFE;99)cQwBR&ZBzYrDVHrV{oO1b`QubNxY5*Y3wF3^ipd%uI8IN6z_|hL`Uqd zNm2gp%&oAzMGBfSKfF3J*9|=AhkxZ_Y782;bAJ z$lwf`f0@i7jL#1+g#_5oBQmn={uV@$q!nO6U0`wOU``A~ zS~>P5xk{g4PmaD>el%^fd`Y+~Vy|MStT*{FlShhA8YCs%-tn$iYLj(Mi!RL4F z0fC08mU~fauT|A>3c}@GMR>y&jd(`tqZJNcXl~ix=!2Gx?MP7g5xK;Lv256xaJPE!Hd@7 z!On^ECe~iei(m4h6^^%ndA#sIBuoWL8XguF7V_Z3A8uj^JdCU!x1_^vw+|vt-#;_} z=fsL3(s={@&}Ak#9NZ;$4*5DBa^!4(doN&vXLmHnrmlBr7M=^HImS#va>-HZ>sW^2 zs8GEA`92AW;D!S@Bp*_avrsWP66`n%8la+nIKbiFxB7Q6KD#*iA8-6@&*u(+6L+My$(ckn%e?1A-lky(|1X)l5KfV;s7AFfauVa(+7bFyrgAd48fvGC6j{jg0qDhkky z+aO^vfLVVJ{Q6ceMSyxpa+`-FIl<@my(9Ymavgo|(=2)dzEk#r0UCT-t|R-cR-5{4 z3&WpBrz!~L82yj;?%jKW--5Rnn$2`fA_$TfQKsu%k zA=51JMH_bq(k%uY`n278%bvfyuoxv=9DHQ6 z8oY98#5e&>s`zJc_9Fq{_;u4jgyIx{eIxz7`oNb=!Z{?TuMQ-q5tOurtKO)%%@KBr zCpW95%8k-e?X?us@0io0_AYI?cjdf%lJz%USy+F=iV>Gpyu$2MeZC1!%gs{dI!qxf z8(Kn#6mUvs-fy5jS!OF2j3wA;wIKz_WW99lC{+NwdZGvKY?T;8hHN|j~i zc+8ruOOC&j-W|*IshZ2>p1)09n_5#n*SSS?ziF86^GLo%3#3nDtHrJLMsvN$Ze`*{X+9`#v|^7bfayN9+E|AaXidZRnk;RBX}32VgBcKeX2-Fp zeBo$B(0xYKhMWd?Wl>Y>nN2}GY;f2_$eBZv_bF7X+53P|^5_d-mLtkjEK$hV+_0jI z&4se3VSC9}4;@pK3-C(Ve12pf7Mq^gOR|!)VezjBcg6V}ox4t_ao4Z&G?J`w!CfoV z-*w#E*fB7u*L$jAd*WWCta#oxBF`_96}qkU zEuUMb9G7(iI$~xazaUILqMc}Y5Br`XtBrNCYg!g*LwXN9geM-H-+N{ognym7+?qzm zFEWufOER;wGwSRt4mE6k%LY>vwSD4uC}~m1#9(f7Lt2$B4$;tB=aQAH%T-cGTH*7* zm?fF{%j*1PnCPHZEz_2o2D=|*`$#$Hyh!Sh!a3Oe zz=o*lI^@WLnL)M()Ap&mt?3j}p8Le3K89g{i4mdcQV&+fv>`{SW*bg7Y^_B>4$wRX zVLrC~IfzOo1TzuIU@nrffb9z8R(B^LJt{+pZ)>@x(Wc)fkUtn74BxOlo|pxO0f8gL z>o|SOfQ+gh^P4NLEZwYgyDIw%;Q<&?xctY@HcbgPk6l2j38| zuu@WUz}mW5=j9zYd{SvtW3aLPUK3huBJ_7OOC=L|Hq6-Wcaf|@(mv{XriTl|aRXq) z&%pv2tn1j^rqTzG5{R@hE#cLkB@@ElLVcanHtTZ0nE`HfPYz;P(pG@`)K>;(ryEjw zk|wm#b`WsB&-`+A-Rax@RL`P!r~I9qZfRy03bd)u%-!P2Z8)g`%edzGl$bv0P#4Yk z~^2oN>q_ADrwTTTaP86jP$_xcK(aA?zg zdTo^@x+*trrkI3Jwq0#ov$b@C@Z-tK!Xzvz$_C*Ry{@L~n8hUS;(g5CHd=B%5UFhF z`YRg8((;hbXfD+(B;ejI8oJY6v$3MgQiUnzJSt6K>*Es+r2f(#N3f?PxKkNZkine{RQDa1?3#Xu7%ki` zJPnVNIpm0;d7YM{xdz!Wy}oAgB*JlakBB^2t#NuFwQz2cs^c&-Pg0K&kVjUS@c-Fw zdD2+(bbfA5g+HjN2p|EMWeit}IrQ-6AeBt;5lA@;;S;7gM4=1kFVG}XG#j?$=^fhD zrh0AfP9VAtXen9L^POI^?P@x0_NZ$*2D7RFDh&b-M>(8dO!~|cPL#}40)#G#-?6Yl ziqesl{VT7qIb&JS=K}XhU`hjDibIGi5e9{gc%5$3GvA^r$xP49cTp+iSU6yUY1EBP z#Wv)be11`#IpBijBAlOaOVk;oIj1E7mW}&L$yS5(F+{UFOW4fLReyz#dGmZ4BG0qBNkdiqu^o#n7yr8 zp3vLEDi!LlTF!2+TwN`{#)}VVpO3W(7_K5a;~k3^zS*Tso9;$N5O!6y`fbxjHQcmK zV9N0s^jHa%Ae$1?65nKn>!vV1OjhaG>=ZV&G4GDm1Wj5+KE)e>hek`~o09Yp^3|t2 zMzeyUf*B>0X~clUH=h{?8&{LXOa863+b(TuK2?dYwI_8;^SnvV)tg;SpENulzjrLn z#)q1R&oov9?Ez2*e?TQz0(^o$e7(1AX>D&3lgCc_jyDOoDxeE<_QCYfgxg+lFI?oK zf>$oxcB$9F)syb-M(~-C)O$}Q1rg#YJ#D&9-!`1>ZIyI8QhV5y3Kk*1xwF`OzWe;m z_}eDiVpQfa#Wyf{+ZiV$x?>F>jpbUY*eH<(q>&}%RZ`h(kkV`AdZQlcpIqW2V7q6V zEJ2>b1{SYut*?s{3zDCd3gQ|yO#{+%*De+2Urd&tAQN(puBJCVSBG!N8lO@=uLl1m zY8sw@gqnae+1(sFndiTu)~%I%g4d3;!t*DB@m`vrBon^QUM@_M3Cb%jVvFo~;qoMz=o|bWP^#O%i-VYkH!i*rL!8E% zo|E-^vsh*Z1`Uz#7W7Ll%|IQ4w>E>Njh>s;yFTk+7H8JmnU_X63v+^JSr@G6*v>4Q z+s=G;+tu3a5zNN*c6dY3QQKvu=NRaA=CiuH*OMVIC;H36wPx7P9Ds@0CE33bN|wjk zodXEqU;_Bh;WVIi+p+J;tDcNbw4&Y3PS3G_GU)Iw7O~9$3krEan4WE$Qlo`D6e?H2FC3dF z6c}XgW=&g+wNQYXJ1!qwp#YGwruotprm30&)Hxw00cq1Tww*tVa3|G8ZE%;=)VN@v3Li6E3L|JFA zM^&MYWJSR{mZSwrrP(2#3X`}iyxQU8xb3nb-1FF{?^+SL8b0FaC?-b3Cq=r34+~~~ z#dB;B?ZcVDM;z#>Boh(7#nC5xK(R~K^gIiW?NpL6*pZuDg|LlJ*DMNpfKZC0MG_k4 zerqH^Kf%?*P`h;8cGHXiYum95&@CpyLTp*2b2LJjl}cJ&5>`Yr&w=_eQ&gdoU@`-g z)&Yq3?ExxeG~0H3Jni!`s`P@840wNJRPshp7(QWD_Q|yRrsbFIj7kcEsKqA}B6F;5 zUKgN~QAvi+I1_JxkWAk+phPxH)|gG4WV6v#CgeNf^)l23Ehxj()5P13X$*V^j`z!s z<+#wR+iq#Ft4;&2n+CpLcrh`^446crbTI@ad4Uuy>iS-?w3u^Xw202;J0xho8T^)J zn4yM=idSNGnQarW{U+7iy05wZhGYAkj4G=-0O?+*;W(CW_F}IP(9#-aEYrRXNb$y- zAp|o$&88MU4F(rSiv5>8003X~bY7K&n}D)lZ35+E;0uQepUk#NEo0fSx6O763T8Md z#ZjN5r_S*pj`P?uFdkTSzXLk8V;O;;O8AM52J7j4&v&{hgTc3&WwwEqG7uw}00L`( zTGl37y3>b^g#?yiGtx?lPs+#$$(Xj+qdE}1;Fi%(O07&+>-9{#9Y+-Lk>L~NFX9tG zQfp!Eq~zMeC*%3F7stEsleR=yO{`(2?NVx|LKMsGXjUKAQzR~neo`h5pM!gKsc~?h zK}NUeM`i`$6S4&HiI++YHRJ41*M;;VNXrpqh!xJXUDK#KX?T?ZPBJqcB`-oUyBU>C z&n6zeL&I0zKTB-$nf*0--?^D;japN!YG!x z=(ymp3Uh^|0k?vhc39`)Z%MfU^MO^b++u7Bs??j=)4A%vdpF1)3Sp6<;74datpR`H{qMqhzUFuUe z4JX3Sp!(Q`*tD7LCS~N|C)lz?!lSC_KS@F26X$*6lR{zaljtP9?G(I%&!DM3P*4fn z`2bja%~C!xUKyVM0jN@7#6JP3guVO&U%37Tpwxwe%j}x4+0P}V`#8v=|Bf}6 z@l7Ai3Yj|k?U3vz$O;9=YP6ul@FbW86EUPYgq=toWO^=zP(&dHh5|>19hin9+^npo z`&vTz%J{Sk*S7=gqw91?qYg$q<5{~T-QYBuu%$DpMap%+k9nuCh(|tU-?&<;m3R#{ zdUAzKut2H_Qmm}Vt*w`@mB>V3mYw*Ny;)l+)yUFKsZ}9@ZBx+GlJaJNxomn8 z=0>S5R3;^fDFf$?akPWv7|@mN>}KaX5g=!LhrbCsiZ|CYA+Q4)jlY3YOsL*+on4Q* zQp+K+R+vYR{Equa09=v?}3hzfytnKlM@ zp))GxL)y_?6K-v;Ua#SWxKm;8UcU!olSf*P-ysdhbs?y$;c9@5EN*6t<%KD;A$n7! z48cyk7ms*U>sr+FtUcCa-LW;-og_8Q!0&aFeM1OEjp9S%Y;RN8HZcd2MSaRAjuB6uKI8syS0C58iWFPde&I2HG-dKu%u(dVoIA2QV0l+pJfw`gNh-t1490 z>qf&vn-(Q6cUQ7?Y*@A|F2^P<$&zU)#Fdtm9a>7OBSdjUF(fNQIlS`P;Rx?xTefvM zECG)1&!e*H)$0ow+hOYgQB|GCpP7ID|DS*Unfa$I`*24nM8)|+huFEh8#NQNQ>V&B zsJwAz{M`7t3Oza>q)45a7-07dGxuk7`X19Mgr^cdBsPC%mxE$Aw8IuJ&{|qxR;y0b zyj|ccLbWxq@eoIyUs#%$oSa>myCyFKU0b}mdTDl^-*ZkS%k1&t1;%g^xtHMvx*TKu zxRSd|yp_D|F`Ku2>7H}!0#AXrN`W(962wP^yF|QIf}ZB>C>j)neDNg?0&kU~7b!w{ zj^RV16uecEJ|xL+hd9TOql@0#PY=95K0P2?TN%+jLMQNWc=3NOOZ@-15dX4ZDgGCH z+Z7wyjb^J6IeA)bw>%sv3q!L`XT$<;(-x-+Cg!d!k_?@@wz49{c1p&{LeetMb73&- zcr3aO_jVO}CXPN!a0$t?2QIUO&*-`HW!!LHu7GHSE|ND&6vUr6!^ZW^JbXJ2!?)vb z1%0c6#}Gmfq6!rb0HXwElw$H?uV}`;`(3#~Y~YlQPO}r0*Lg>}%qF={TOT)rx*b&v zzVa>8rNQ&`oz9tR<+hj9VFmo7vZ%G#_xag4>~^I6wQX0|5c07h(hx5`9O_K)6-l>=>u>M%aEQ^hNU6D)cnyS(8pARXOZdNgpcZ1q{&%*S3?T@3CJ#fw|rN@?{?; zR=M)oz%{ zqN}k|F?Fq82SEZDhSza-?e;z?gsHRah zt<4rZRydgE(hOP5fGJgAH@(OfsnSw2L22nmYovx_CT1NTZOB7M-U{p*u5L9OA?O}C zEBuwBL&QiN5}CCf)8yGQkWI-#S1aAA&W+f1-4TNNAV zAupv*Rzt@^pWQGa4}gfrlC@aAGCSX1{F2s&r^2vNDHNQh=?~d==o~txgn;$FBrNIO zF1uUc7C_>qdwhI&7XaB^b4>#vDit=Pwo0YYygawEC~jqKZ>LVI-6Q8lQKzSqjiUV7 z6^gAKU3B>vd@ekb;d3E*BZ;~q9tc5}4^kHCXz#3{h}o?>?wzF9Jmv7AdwY93=@9c* zI(q2u?r?>~3-R>3;Zy@N*ipyLE2ZV#?+w$e%<0hW{aSp#0(1cQU0F62;>e1v_gv*AyD3TY*E5f>9t~ z0P~U4W>63Haz2p>_|F^PisYx;;IEruWYxLv*qB5~%#9a|iH74Rlee{oV%1M3qs^_x z^3>Ao;>y~^*{d@U2FB@{XSJ}*x(1Y;mWla+UP7$iAp9J@2PFx2Kh6FY<6DPbz2(>6 zx#ipSck0giJHA_g#|p!DZiVkSmiNw`X5*c0Z+)E}<=5H~WZ&_fzz&V!Vl7=Oe!Oq3 z;nlI2tjEfoN1uSPrF7t7A39V#i=au~CpvCp=wiAH`&Y%q#EXF!c^|733h_n76&d9P z(Z>qVSsz`VnOJ&j{?Zz`j$U25ih{-Et@=gH&k`4gwi(=U>jmL_l+N=3%99ex^32N0 z?EIzWwZ(~*%NnRy;q7KvYlHThG725rG8>!r4jrSEe#nmNr78{fq^L%ob2q%&1Kwja z;PX3#L<*JVxXc180oQ)zs^MSX&1%`j{uiNO=Ga*#YAD1+J|CJ}wlQ2ZN=6=*6^nNHy z_5E&P4-@4|#h1*D)=oaK>EsjLs=HxYo7gU9H0{VldTYa=ku0tCYBsM_b993j0Z1yc zcFhsn586h>Y{ZIzs@XK%TE#d>zfsP%!B9X*nZP;?S8{0SFp#I(F1nHmP7UQ_#j)|^ z1&JBjres>l`tcp0dx{RZflPu(@V!{VjB87tib+^xBT1wb{LF9q5@D19x|2-9F$ov& z2~MYU9ncC1JajPngXroLMUwFScO5rF^f3Lhk)A@-^dS-lrY5E?&#X<)lJQ_5YECQqak+m7;DL0gKo<;e>{1)a*vCmaR=YG8$eOrnj6S$g?A7(+-BLjTlFo=+w4m zXdZo4!wLzZs)7?zYCqkPEvd$_Xr;DZWXLHHX2k$K3uyp~P6Q}ks~F%vkt}AD14uU2 zIw9lQBzl~Hs~;8Jxi3j7Ne^Vb(-uB<5l^4|&rLI=Z>pM;$b0F@PKyd>$Y?30SYPNm zzU`3T+mmxQm#w@7;Tz?W7euz!joBy;L6>p+aoh?ds8E;{&;a=#GhYx#)fN` zSF1DU7E0R?TmqJ~Gw87N?PtctXv-_#Xua8Zd$F-SK7Hx-#O-43?%4XBH_zYouFc*C ztjBr1mKGLP5&$0&l{+iipx@f0x9cd+FYWfSP5RnOFKvvc!uW+MlM_={Ru|W}I}|>k za72|fOvJe!<+*^mwZ+w?ONlJHo8dUi0B)C=o|#;|q=VPna8zE%cqv-sVnto2E`DDEa*S%+zk_B@7gBY^C0kVRzr zkkCEKb^T*=6K}08%`C58U7>puWoPJD2KK_#NTTQI#iiNn6Du=hmRr8LyfQPlHa)w1 zMW;|4W09P9oN})5vt>l1i>s4YXQy_{uTLQ`J;4;>q*|FFDX3-=eYGl04dlIkvD11% z@G7NtRaH*SAtpM`A-Wh?rQJ&MOuPgs^ngmKG&C|qE0}VO&o;1Vo4KiS{F!$mZRR1d zfB1RFg{*nU^<#W(Q6NRmI&g8R+{$f+xK$_KaGP306ghE;rR6oV=K+~Zh}jz=CGJS= zZnLw(d;;TvWUIicwqoAypcfz0ROx#r_T#+2vph>Ms|3?8RlNIi8BsCV~%*QWjQME-lQ?UoxOQ8p|_F*JqX<3e}J{ ziU%&cfPOA}0MiaA^B9&%$JZmEUc>TMmiH7;@|XfNqM?|W0MaojML2 z=QetUC>8YYig8BHV`SeF7+tmB6_QN28!+76otTc{LP9ldJM++b9rD3gTv}M+RsqrA zLy6c7TU2sLN}HWz?1L1lkM}h3HLlK1E=?@STMJ$`RyLeay9Bac!$pkH9UW`)K}uHB z?21w6mrAs$UD9leH6)xkk@^spiJsq0i`M5wWFcML*D;ycvA_V88G4OC&15o;LOlI4 zKPiTHd=x@mT{xUMm3cCr$^gDL3+ch%ho6FcIBN>>yf`8T(E9u%&mAfoHts6*11Gfe zSVXfn3^+-FE4cJb#A^gYrf*ss_K+9oOAsZahJ(u``pfvqMEH>~p5p{V_q%>&HE zIgkXGWUkC{9D>MGQ@}H0|Sn=vD{0H zFY^Cyi7{jxv9~&Z#g6aEd zc>Ej~T|77>{oN-<5kgObLG+2 zyaLOchPV*P$gdj`ej)U2yS8aZ)<(<6mNOJOWQAM$uDrs5^D^D+Yr2u=hRrBZ7BF=@ zQTU;meIkq5KP{PEYhP*@(e}#K&BzIT+euVWN`|GDiviQ|YL3N^o8Z1F0&GB!68lij zs!b>Yjr_PO`Gj&@VG$0tZ2jn|ww(lfB^}Ea45wFHYE^BzTqa_P9gH;F(58CcyA|2@ zB4vUDk?zb`aSYqr`Cbz_N0cg_aX?}q7F>MTIBX*yVzYnKaqn3dt*OZM8Ewm#+RC-# zTG58%?zuHgrqkDJ_VR}Yw>lVDj~1|ryRf|DT8goI$$tUZx<~D_{ffaSHh3pgO)O=> z#n11p@&tIR1Se6qd}R6DH4WAkv(nOa!jDke+bzf9iLoS(#4j&#z<2{NC4Qpjgce-3 z@8qk2XVxq;jD!Q9gKRmInA67j0Tp<7_MZg%r|*luEw`M>LM1a}Ma6Mj@UBK9BNA)` zxTTVxD)0lZ9+*wqYZk}ZJauSP?P%M!T_f7|Fb{8H{~7KdYQZUWO1`MFQzy_+uI9}s zd)UriKvEzR!*ZtHDjTj(_A(ZS^0aB}g0^QYPrJtAkhTF>ng#ev7#ztOwTVH%QSM+Q(UxtPp|Nc@8h8h`)e1rcBEL8Z z5p9?eZDFn2IAzM`*`eK7C*2s!Sf-vFvv41-R;(T46@For6YZq8t;Ut7=|jy83)%!h z5OYUoV%dTwhMABw@dO}FpmkOj%fB=_JXWmG112ToWuOCvTAmwv4cmD2^2*Ahyjv}g z^p(+J&bV$U(hKECvA9SCVUeAvqtL<;xth59w-f)vzWIayB@;l3DM%E&w67^f7sKWx zh=RupHE-L6cjvHx5e!~El~U3#m0bG@(Ck!AOVbRbJK?ZVqEJC84d5f(w!GMUs~R>8^&^_N}Kf8g;+V2bEX%!_xyX9q$iZ%bMqQ?gEjLWTu+tT+y1 z)i^(saVP@DP;>F&pkE^zBKObilia0`BM(h9h*xIFh2ryt2aC4lf4?3u)#+!)l<)!CW(m5!jMwVk~KA(k|wO?w9* zo>sLHASPBDB<4CTpVpG$1z#oO6Qva6VTnY-Pp^Ip=Y6`u zBa;eJ=)haM;f)v}(^{f>T%*4W8j&g%QVBKck_lr%?3i3o(gj6tl(LQAIlWW_9Z{Oy zIQ5*uv+$_6zwQ7Fr^$%e_)8txShqiL<0~c|Cum=X>>ow;{Sa2zmMRUU{h~p!ouZGo zl-56DL&er_b3+B*i3x`^ezrscyj6lnc;oZrI?A;poY;l&b6X_FTO~d&64RD`&XSi8 z$da6WQ73pF#+zBJQ$+bMFe#);F(MZP~ z^7~-TgN%qmi0qGL6L`($4@p>j>$n83xK0q2EFF5=t%eevyn+|tT(=|9`iHD0a*zi2*bx6D=} z+BSol?P5B#W$VmxOp84{zszRwi!Jy?D?#$gglm`$TJ0yp9WI^{QM%dQiFOi$qSnR^+@+;R_CjaY(#~wBxMsLmJSPuGKu7%Ke{O`58mcvs_+Y>G zbLrFJ@xqp4;c5mGrj|}SWV)0g{WnkZ@d;k{EKjx_AP-k$~3Qj)Xg5!>jYb z=4)cG$+0n(=Mh8P*VaU>77Vp&{)NhDX~d9mt`pQ2kAa(Z;$HG9ky$U|(=38-W zGu+8XULKAf;gL#?5;#wCU4WY7?HW?Xk+X*HZQH?mtAX8(79A zEbW8kL|>Jp}B5%G-#52>tsy zddJh}Y`qM7O+e@ah0v};=ZPm{k8U}k9e8eD#>hpbqXihS!wpYMd`cyjQScG~$j1uN zMypwMO{WpVeoQ8h5mueEqFq-8jdzId|YPGBIN<eBOC_dVh(S;VR@b(*+D^+qp@V4Ec(zx;MFWnl=l@1=#l}KW2@#_etggH z+{TVEk1GZFZqzBUZ^gLoV42Mby>;lZ_KbYl)rblj-w2*bv!jVnOtMj{BsVwZ0Ig5M#>duxOVk@n4Fnw`#Fh&+lNE9#5DU{0!%NLH)F4B3__ zX0VF(-Ih#atBU?dTf)89{Km${#&9Lrm=blr|KB2=LN-fjKqC1o9jD_t_A$-+d=MW# z&o1AbySOlaa}DRN*Vd*N<|bz6m5sZ9+iWzq z@ZzfyZ`;)ZIaUa9r9s_}h5HfyHy69obnr{Nm=0ijZ(looDVDi$p`t;W#8r(vyvUu) z61l%2lpk4ShRihr+pOiCC=bnnZb5CxyNr@&StN{Qly(n}F# z^#M&9b?!m1uOcnt-!n%$Ie>eV>CUE(ZJPnVskcVgt>~_x22`BxL@5r%dK1!17dmmw z?&)#l7&VU5>t59ox2L3?O2t`pKRt0MssyiG6Vr3E^BD!5*F;yMpi?T7JocQdp?)>X zGx8FHJYNdQ!}T#7GobXN%QI6;Gb_@gT3j`~!d+!@RQAN1H&)hW-ddbpB8OvZmlsx- z$oEg2OUF#gA>6>ls}svtAWM@~)sY|jn>)r+E01$=5xS?Z7jU4hQYer~7%R{TuhVGX z@rz3f^D8s+)6yH;p#i~5g>+w=Y=Q1ls;f+%P*1>j1$Q&CHb;KA;&OG&#-XTe+bv0o zqEojdsc<5o#f9aSOG`7$ih%Tdy63JW38`#43F%qm1=lY20Wnye;D?@CKJ9x`>rZ_m z0CzcIOxyd0nG^Ez4B8x&9M3+xi+d$3OSg|_uc*B%W*C~TbElwCRA`!xK8uKvH<1bI z`FLoQRjiaoHD}m5iVi<6&S#B_zud$95vj_{f$;|4N+gFsT2YE12(b!Gsolu2`R(Om zr=a=uf5{u~iz1j%+|I)m3?E>95jeN%ae5>3-y8W5V}4ph-#e3zAZl zQ=+_xBmsVb{FSN#b&-5wR|&4N=)!kjSzb0S;@GAj3k4@3mM@gKm*1?*N76mtLFa+% z3N2}Z-glEDRG~H^mhy%~V(hC+2H)nFbWz?6s!ra1q-v$wuH=0OB31F(bf!(R%cJMy z9J>QvpbLKF0fkm_kR>(o_c~7Vx*0A_mz$p2kEb2kwyTlncSt1MmWxEXZ}THJC?Cez z-j&%E?n+jqi^oTOLlT!LYGl-ohs3K|Uln@*zm(nsh+!5RDSkd{liDo7fWN;r(k)- zglv%g)gzszh5byQHw#g#Bqg8j@ z3*>Wd&81x^Ytl`FzMemNNC-^7`%$?bEe@R<8p*H2@vR`F4t{N7^*|ApE}yyl(&Y02 z9e6Be$>%>2r}b2cQbc1LGwz3ucd5zkY}ntpZC67l64Q$+_HCpl6bjzKjc}P0h>n** zW}#V#T5*rgnM3s^Kcn9!N^6`jV^u76VAw(N=_K4Uy$vR$3gtA~e9bDS_rRIHyhk<`IB=KOS2QxlS!|_ zXrc5#-MRWF;jfc?LaN%6l4J*{zHawZUh}mqvhrFMIG2;d!VfgagyyaEv=O%7l3@$f{ci$3D=INFYNik@v22Q_1dS4jqH0*0I zaYtN6yHaDnmLVQ0PZIgSe)b$4v*lP3uQj5T+E7hREsjzMEyP1FK)$Dyt3i>s>D5{d zZT;v3&m)3ixkR?d)7fmzzXm6`yzN@j2-s;LKT@k=cNC1zfciXnK!x8!Q5myg2NAz` zF*Y4OE=D>%66ah2;r(d{_8sm&Dh=c*0VEYK&5=*1;iS=WQsfum&=ome;KNmGfsPl^ zg+Pp4%6m4QJ`5WL3yoHt_NXW+3>$fhfx~>1^-NaYO?xNK`iPbl5i;ldvT}xDW6g>W zqMgw4T59RBy}oYKj{;NM9HQzgW8_|vC(@-hooZayV-lfGHI(~c9_3dohK&Mu!&p{G zp_wgV1BT%EbOQXMburfe-RX0oIAMx;^5hww0B^P7q?c%1ZV;UkN$^%lgnET}bPvPD z4ecgn?c(tSALa=<1PL!^GBfvJJh;j`abw*j->N#}y4cNLq}4XYBx@jXi;GoNAb1Xe{7Pfn~21Shg{5 zN84VoY0SkNK9dG)4y*GHHaR2EZXK@}6Sbz}Rzx*`Lb-udb_{7fVuBwdtwZ-w;*42* z<`7%ib8sPW8TzN#Z7Tf7O7)WyK!*w^ds(NIPIXQW?G;1mEtG+~>gGc~cghS8-y(_+ zuhPkQMfNhcLnp`H%ANyuA{*BOMR)1&Qdc7ErT9?Zlr9SgT~KC|4!ZKj8E9U`3V#xx zOXpo8u0(OA3dd@PS%W~iKA=_7!cvbEt;5BWIJuD?#M<(v2Dx;0F^08e6XEIP7{1cA zv)%Y!bWtfaUbQ7wV_X_CvS6Ib%z=ok43?RhoDXMh8RVeUo=3){vtU4KON~HS^6gF* z{3K7MB`1}UAq)QN=PScV&1%|(hn7IPbT5u_$79<6nsh!#_h+liBr@bl2;^qBCeHFe z#YpK_qQsOnPxq9IQ9C)10oQ^Eoe1{k8D5tK@UZ0s0Q=)f4}T=ClEyPf7-@{sr66bTYetB>o~1oP#|Y-d%c174 zt$SJ5c_?$1^1AD-wL&|Tf2FbUbLT4jDGylgCbHjpuMh*$qs}F=`{KUHZg1ZJu}pqd zxCO*JCP~wG-Y@K6uZaYB#|hL$0$9s#r`e}tBS+8*qxDd{NK51)hbPw6EMlD$#L9t7 za=q--H}bw6&~`-^r#$(~@0 zIeutcn1tBYdi^+KEXNotG5*6Fi#*sQbc`|f2x9|XxF{lb0vk1s;sKz?1N(N%4x>EI z$~~^2`nDac`GMzqq1gcJql~eS3D|h!kPcw?F_!DWB^0=p;*-~M>@w%_xkw4)s9s_wL`n|AZ(W?L^c@4+fS*r(L%SY}m#@MqWH{S5vi^`)aU3$StED9zN&oIXB-@nhQ zBC}qNEyh@t&6S_$ryJRGXiXnu1NVVzG!wOAPvMVe@R0QcL9nM80+YWdGr}?&3N(sZ zh9))*<8SKVo zvH;CMOK#)~GiCU?AiEI}4@^&r?{4k8NBi#8zF*HVhW+(D0*R;_QAiHNaRj1~7zh=6 z?dV+DxPPzz=!-92gAu-i6f??1VJ|Na}|doqW-bLFoy_AX<;M$cbi?9+^W zgR$JNGM4)qV*~fVb@yP0=*5w-9TIKTAa8EhF$38(b3dvC&cZthVqh|GYIXbS#5@*f zc87w-01DnoD1B9eQi2E5-C^Jg9>4%Hlu@O-VY*mN&CJRK22@tyPG#-qzPZc>*lyja zH%+(T)X+r`>q`Q~cw-S6;#{Kjy%B=Y|3Nyg6Sux1Y`dz7(HL+G$SzJLEe-0x@iXrwzvBi%7E z_7Jf{yj>__JjegBp`!7s)d~XJjT$=!ww~4PnsIr@w}bq3W6KGmmf0|_Uz#vp4eYIo zQGD$+5bA?L7+`GhNb%0-@aS+q|16D^M!K=|zFWy%j14|H=U9P<1M9|=7x*4O0CAGB z!DmrP&CL=vu?AkFVbfuw<9d@{QfQNiB3awjhNuaZ>wGq%#>&IzOB0iYnaRT3q_H?V z`__mtyDX7a;>db%C<0;UOQoVf*jRDw91yl=4S=*$vuigG^3a2I3f{7~_e z*%<0>!_dbShKku38W|~0zEybpt-|zMm}8emMuyej1%}HU z!w&(B!eL1=wWQI(J?qdJOGo%{mPF9`q2XbLpi?CI-o4M*kKboWhVE@cm(Gf%{i17j zdPZO?gP{)xB}P^$MR1uNrq`e|u1+AC^4^$6S?Qa!!3%>$Lh2pSk<^9ZVQjck#J?>3 zTo)t4)O2BKVa_llVup$ar=&w?Ch@-;cr?6!E?kc=K}GBOL_Iq+tgpRc)U4ebHtmF) zv}(`CJFQ`d&75dh7WnptiK4FN=E{#T_HK?n%W6)zS>WNNyg*YP&@lezST_r6)kMGc zw>AG}Xhvoxy-KtL-r3mNR)C4SW5M|kQ+!yfl1lL2LGMLh3snTjd`7RX-cJcc9>>%k zWYSB`#zY;sq$zxw2L^Opb%O_BJaNp%Sb4MveMkFK!PUYZsH2YRg%bn5cc?^L-aF_I zrK27Qm&g7Lmpaiu5H64Z87_5PE9{dM;T)At@8kX6xO$io8WbAt?gqH2E zS>_sDB7_YcUR-(LC{E->zRZo*#u0&niiX7Dd>^081FMR)vF^F50aU4m*Q&`RXpz+n zaMQiDUYDVdAe0}rDug>Bc9fue{7z}_Q*5sMhdIXnD96|z`cb{M^hfBJj;G8qS-Va%qXu$XDpVb}=D3P9uwbG`^MlATGpIw4ZP;e07&Z-=qgGYt=~P}Gy%ySW=cFO< zDk=!+x`nN(YpWhl$8Onf%~QMr&Vcr=#0VkH2{(lgOf0-W20ssTrdZqh6d4g2`)n`5 zv8r?LUB=#KjQy{Sv7cg$eVnJvS^OS$!p~QQki5$ndxbIfZH%!`F~+`wF@`0R?_`Yq zb;fc(z!>`*j4{|&VNnOaz=XR9yD4M+)2A5wE~BKRs8Y&c>FarIr(<{xr2vG+1@1> zH4VfMA?=n~^TN*~+2`>1TL`0N-*@4yRqY4;?-2PhMAosS`K|b~iifGfmhk6Q90hi6 zyF<8zHD4^_T*6S(*$lkM*{sm4=`zyI;qe9@AHn0pG!I9z6=(ATLdF5e-4)On(w)cS z93G>1oWbK;@OTZ64`|JOnz6x84Gm#}iQRgItMhLy-&|gqs}zg;dvbLd->_sAi^UOq z&n;hE!ELtqUbjcikB^QH=g*hMs`(MCZ0E;@*U#t2*6mTNd~T$)UbPEwyj3hjW>B{y z(#GWcx=?L+)+T1Q&j4eDiKo;T$)8Vk9gsKJA$f!C#T!Q-DsK!Nc@dN>CG~$2u3$-) z=nl;0E)4O1{{iIMd&UsYcVvjbZ0?^Op6|#Gf!RC+Ghmf`5R2%99wI@E(={(D-4Wxx z5IlSgq;RN#G87u1SWdG%*R?GbgHb`mV4H!=0PrFhyHC`Rr-hUII+-47o=6|iH3Tw3 zgCDdSDj0CAW?(hksNlFs)z)eTZDF`P8}~y?u+XVwSUy0E(g1mhbk}wmrCZdn^C2DA zQo|yYhPoO0fd_aJKE~F1VEVWko>T&I$R=YkY$s!@-klgERIX&S<+qx4Q)X|E->}U_ zw9z@x-V6MMC*8hnyE-4BYU#^j0DLFKu=FL3G@N?;Jz1e zV6v^~NEt!ewWB&xk4klq9u)>#h?M|ASrVW=K|-ZvI9!F=HQc6BvsI_+8Mo_>ny8>G zYJYy)3G8~y3{(xF9Xj=HsYw}x*}^RWR8y=8cGKQ z>+;<=P7QuSBBj`3{g}sW+A0vF$pg`ND4R6lkR?OebAsFQPc&fDsfpE6G2qHbG(d~g zkqI7alp|j#tTG2y!y9%@l?IeH>{=mR3(9Usq3v41j;{z0t#6u^uW9F~L({Y(yP@Vz zvM@BiX@?uMTTKQ6glk5A(^uR^AgG7hKwz%v+EGF58qMQw6bT7(LB_?iC4!F}fuav| zCW7p0luyi$(Q`6l-NCIw5;oc|W89eWP*VguesnICBN5d!-FhslfMk_RgO&&n%xzh? ztgqvDs4pUT5dfj@_JZKa*o%dIZL$ie!C|s#6_mZwFn8?WydQXxr}|gM@r!GdQb#t7 zLZiS|g#47KUbyW<)<)j68hP7|0w%jkgQ)b@%ep2dh)_tGAYJRL#p5{o38ld3Sr{!k>1t*ShA) z&~)CvXxjmu1EN{S91ZH&-vKSg@m$z!umwqMf*k0Dbqt&Ha8^^&JSfuJ^5q3rDje+W z`zCI3kV$!vUocH&k^*)3zF&aE6Ame5YVf%4`yL!s^0P%U2J!=$_(232ipu$spHR-I zM1;l0F));mu%!J9WEPATntmfJ1mTun@Xc6jfVm+UEd*W*62HJDP9fB_F7U6G#0&lP zf*HgXJ&cj*_{6{kifv2ah7mSE%O+-}ac!r*QH_lgSp@~ATUS6*HEmVvK54G9kmr&W z5sihZuH|Y&`aIF_m;MGid|!!}i3f>WSiGt7mp!tm}P&fm%Z)8W{MS%2u4h zq7ynHDaAUbVSv>@h%}KMKwFfUN}<|!nqf1cUZZK1k6EMW=coRc|DL>o{3J281-ziKdbC zsMh^0zoCSc=pBk`)Og)=N)y6dtx^qVsPgtgKaRfj{K-~zurl*R-kP*7h`g%NWp$4HHM3z!aX+vwX8g7_D ztm$9?3Y%3Z^Qx+t6ok#Hr0*M|SiEoWWw=jsT?d=ZQ8Xaa5eIp&0o$0ky%8HEj(jw1 zc+tnOTjLlF+L5!lJU59A8b{`qFE7l^ph0kUpk`9QZ5VFk{lM8WBRes8QkbFT~6U17_ zmYO9Z1s(FJd5RK1Jy81_b{Lusr>@u!xRVhnHq`TkuIDLk1b=QvzE%N@ToQ_9si78% zqY736jp`@rB3n;k4a?cqfKvI~9${LR9je4Yjfk*JYeS(>%fOeuWN-heC45dhs}dM;{*jcnsii6pv$g z;NT7LWIN-$rVMS9hE5|hpFec%X!NL znaF+s4)MdA_A&f4`r&u^0$L8DnDR8WEa_!sux9U7Wn5`%(692y7{YyN1y<3)w$?IvK_O76XttuB*`W^#J2C`EW0^3r%GEl8*6s(8&uvHa@6=mTV0_*XlADu)H zy;`*uQV+_MWRFARcvNUB6#jHs+vXO~xI=CiWmJfh6HjI1Y1#qpt1 z@%&Kf{Q05t;|j#m%-q7tOcn^~6dR?lQ0aV&1hV#{;&ThrnHiIaZh9>@qHQQ(9?9-_ z*F_!wPq`)IIrw>ex&yv&a?2>t8mWMpfz+&aB&(Agd45dv9Nuu6J)C2?a*ho?AqwIr zz`1=eEalkX>6*0}todfNW{%&qZY`PP&S>@0&Bny&#GB!qf9tKW^7(7U92@L6n^+Ta z8-*Oht)V}sArB?Xm2A+YOk0kM-W#rIyH%TbMKaLd#8CrLh!;#(a3OE!tD zmx`3RqT>2c-Y`I(7EOc_BEK)wH=TKxTWR>?4aqw&{S*H z?6&zWq@G1>0Cr35c%tV>gDd zf$5s2ZfeB?h^5dP=`kuCQWW9BjN3k}YLQLTQn*LIXijiew4=K)j3tW5jigf|k1} zqa>|L+G#jeT(e~BsZ;_Sr%3jjh|GhMGKlE5$2Am3^{A{EVp1!o7_m`jL}{>OGes~l ziEN7`Nf{R}jY7&uV9}jsOm})Ie!RRX(__F_p=9)e=1ol*Bb0CU)4@n1m!XWS?={69;l((QkzJ;b{|H&=d#v3I-JlT1@WhG@s%P|zwc>^yw8i@h&1x-wcU77Neo zac%kw@B+E@=dlX{=hqp_Z8Dbo6l1whFh=eq{sMm=y#-AJ)91bhX32MP@LFhiP#Ov~ zZ`-Ad6z^dE?8C~ZMY{-e7#ln*n_~KYsCE`&n_SnA4&oahd6!`g^7LHRLGVc#* z-#@H<{~hi7M>RbBUG4h|+V|hnzJEgd{zdKAvra4#`A8Qz0g&IyE*OQhaJ_(_DHz|5vMQN&Y_p77Dp9`!7u zuw8ae@>>STEX$hz*7{SDE$nIFuHgVDhm|>*DM3y zpD2RD3kd%Kguf<>pm5y3JMh`|@G*qrXlq9 z2>&9&FC^exLij&u55J7?UuX}XMfksHhkpg({~y9<6Y$~FWZ+zT`gw$pA^d70{bvwv zQTi8kLi#MiZG?ZO2cB3;iCmvU?EBkG`8>kWaRZ-Ar2ip=pGNrS6X8FM@c*$L&fh`! zcOv|U6NK@jAdE)@?IolBE}|Y2Q9qi<^#w%zPa-Opi28eoS`?J_g+$a(AnH3st}oz< z2{^eTBKb)~{bdpL6NI1PMBXnV!9U8(`%{Se$0F*Bl((G7`_o8pL?lSo_DhI@VgtJwdPI`mHE|mR~`l?~{oVRrqRq70Ssf{Hk7suktFK(W~$^y$Y0|PuOY_mH0Ki z5?@VJ;_K~|7*1B=*Y!$#omT=^=qWsWL$3rSIO4UUG$MXOufx|9b@)w0{a*q{Kb6%N z{}3sDSETsOj5_=l68sZA!I3bqTr=4jzl~J?RHjPQ;hXJsNOi{V=ymvJMjgOzst%Ok zNG*)gbpYq7I(!o zpOA-^@|&&~(SkBsmEPAxo84$X$C|d+6jKSU()yZ*oOfd0AR0jWKIWYWqiLfaA!oH_ z!!ecJ066gd_6-Oy9t8H59fURvTX%M7tC7kEWb&;b={Yi{lYDa0a%-x5Om}%G+2Ypo Kv\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/729/f42d43ae\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 00:05:03 01.07.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n#\ + \n#root.mnuc.backuper\ + \n\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ + \n#:local Script AM-GlobalConfig;\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\ + \n:global MkDir;\ + \n\ + \n:local FetchFile Manager@id_rsa.pub\ + \n:local localDir \"/\";\ + \n\ + \n\$MkDir \$localDir;\ + \n\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +add dont-require-permissions=yes name=awg2-webui owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + put \"Download image, and save him to usb1/tmp\"\ + \n/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-chr.tar\" dst-p\ + ath=sata1/tmp/awg2-webui.tar\ + \n\ + \n:put \"1. Create veth interface\"\ + \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\ + \n\ + \n:put \"2. Create bridge and add veth\"\ + \n/interface bridge add name=br-awg\ + \n/interface bridge port add bridge=br-awg interface=veth-awg\ + \n\ + \n:put \"3. Assign IP to bridge\"\ + \n/ip address add address=10.9.9.1/24 interface=br-awg\ + \n\ + \n:put \"4. NAT: masquerade container traffic\"\ + \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\ + ade\ + \n\ + \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\ + \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 action=dst-n\ + at to-addresses=10.9.9.2 to-ports=55055 in-interface=ether1\ + \n\ + \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\ + \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 action=dst-\ + nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether1\ + \n\ + \n:put \"Create environment list..\"\ + \n/container envs add list=awgui-env key=WEB_USER value=vados\ + \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\ + \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\ + mboLs2325272931q\ + \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\ + 3\ + \n\ + \n:put \"Load and start container...\"\ + \n/container add file=sata1/tmp/awg2-webui.tar interface=veth-awg hostname\ + =awg2-webui \\\ + \nroot-dir=sata1/awg2-webui layer-dir=sata1/docker/awg2-webu/ envlist=awgu\ + i-env start-on-boot=yes logging=yes shm-size=4M\ + \n\ + \n:put \"Start...\"\ + \n/container start 0\ + \n\ + \n:put \"Verify...\"\ + \n/container print\ + \n\ + \n:put \"Should show: status=running\"\ + \n\ + \n/log print where topics~\"container\"\ + \n\ + \n:put \"Should show: AWG started, nginx running\"\ + \n" +add dont-require-permissions=no name=awg-proxy-go-Client owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:put \"[::::::::::::::: START :::::::::::::::]\"\ + \n:put \"\"\ + \n:put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n:put \"veth and network:\"\ + \n /interface/bridge add name=docker port-cost-mode=short\ + \n /ip/address/add address=192.168.100.1/24 interface=docker\ + \n\ + \n /interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n /interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n:put \"add config-client.json\"\ + \n/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json d\ + st=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n:put \"Add container\"\ + \n/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interface\ + =awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-proxy\ + -client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pro\ + xy-go-client\" mountlists=awgcfg-client\ + \n\ + \n:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n:put \"Add user:\"\ + \n /user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n:put \"Add forwarding port web-ui\"\ + \n /ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n /interface/wireguard/add name=wg-awg-client\ + \n /ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add comment=awg2wg dont-require-permissions=no name=awg2wg-uninstall owner=\ + Manager policy=ftp,read,write,policy source="\r\ + \n :put \"Uninstalling AmneziaWG...\"\r\ + \n :log info \"Uninstalling AmneziaWG...\"\r\ + \n /ip/route/remove [find where comment=awg2wg-tunnel]\r\ + \n :do { /tool/netwatch/remove [find where comment=Monitor-AWG2WG] } on-e\ + rror={}\r\ + \n :do { /ip/route/remove [find where comment=Monitor-AWG2WG] } on-error=\ + {}\r\ + \n /container/stop [find where interface=veth-awg2wg]\r\ + \n :delay 7s\r\ + \n /interface/list/member/remove [find where interface=wg-awg2wg]\r\ + \n /container/remove [find where interface=veth-awg2wg]\r\ + \n /container/envs/remove [find where list=\"awg2wg-env\"]\r\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg2wg\"]\r\ + \n /ip/address/remove [find where address=\"172.20.0.1/30\"]\r\ + \n /interface/veth/remove [find where name=\"veth-awg2wg\"]\r\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg2wg\"]\ + \r\ + \n /ip/address/remove [find where interface=\"wg-awg2wg\"]\r\ + \n /interface/wireguard/remove [find where name=\"wg-awg2wg\"]\r\ + \n :do { /file/remove [find where name~\"awg2wg.+tar\"] } on-error={}\r\ + \n :do { /file/remove [find where name=\"disk1/awg2wg\"] } on-error={}\r\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n /system/script/remove [find where name=awg2wg-uninstall]\r\ + \n" +add dont-require-permissions=no name=amneziawg-mikrotik-c owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\ + \n:global imagesPath \"amneziawg/img/\";\ + \n:local Image \"awg-proxy-amd64-7.20-Docker.tar.gz\";\ + \n\ + \n:global DstDir \"sata1/dst/\";\ + \n\ + \n:local Url=(\$GlobalScriptsUrl . \$ImagesPath . \$Image);\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n" +add comment=Generator dont-require-permissions=no name=awg-VDSina owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# ============================================================\ + \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\ + \n# 2026-06-30 22:08:12\ + \n# ============================================================\ + \n\ + \n# 0. Check prerequisites\ + \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \ + = 0) do={\ + \n :put \"Container package is not installed or disabled. Install it and \ + reboot.\"\ + \n :error \"Usage: /system/device-mode/update container=yes\"\ + \n}\ + \n\ + \n# Auto-detect storage\ + \n:global awgDisk \"disk1\"\ + \n{\ + \n :local usbFree 0\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \ + } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\ + \n } else={\ + \n :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\ + \n :put \"USB found but not mounted. Format as ext4\?\"\ + \n :put \"Press 'y' to confirm:\"\ + \n :local key [/terminal/inkey timeout=30]\ + \n :if (\$key = 121 || \$key = 89) do={\ + \n /disk/format-drive usb1 file-system=ext4 label=usb1\ + \n :delay 3s\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \ + free] } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n } else={ :put \"Format failed, using disk1\" }\ + \n } else={ :put \"Using disk1\" }\ + \n } else={ :put \"No USB, using disk1\" }\ + \n }\ + \n}\ + \n\ + \n# 1. Uninstall script\ + \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\ + \n :put \"Uninstallimg AmneziaWG...\"\ + \n :log info \"Uninstallimg AmneziaWG...\"\ + \n :local prevDNS \"\"\ + \n :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\ + env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\ + \n :local storageDisk \"disk1\"\ + \n :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\ + ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\ + \n :local prevTmpdir \"\"\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\ + Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\ + \n }\ + \n /ip/route/remove [find where comment=awg-VDSina-tunnel]\ + \n /ip/route/remove [find where comment=awg-VDSina-dns]\ + \n /container/stop [find where interface=veth-awg-VDSina]\ + \n :delay 7s\ + \n /container/remove [find where interface=veth-awg-VDSina]\ + \n /container/envs/remove [find where list=\"awg-VDSina-env\"]\ + \n :if (\$prevDNS != \"\") do={\ + \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\ + \n :put (\"DNS restored to: \$prevDNS\")\ + \n }\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n /container/config set tmpdir=\$prevTmpdir\ + \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\ + \n }\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\ + \n /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\ + \n /ip/address/remove [find where address=\"172.19.75.209/30\"]\ + \n /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\ + a\"]\ + \n /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\ + \n /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\ + \n :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\ + \_} on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\ + out.rsc\")] } on-error={}\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\ + n-error={}\ + \n }\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\ + \n /system/script/remove [find where name=awg-VDSina-uninstall]\ + \n}\ + \n\ + \n# 2. Network infrastructure\ + \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\ + y=172.19.75.209\ + \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\ + 5.208/30\ + \n\ + \n# 3. WireGuard interface (MikroTik derives the public key automatically)\ + \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"4CHyNhbOs923/E\ + yNDguMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=14710 disabled=yes\ + \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\ + Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcY\ + QnD9N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=172.19.75.210 endpoint-po\ + rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\ + \n/ip/address/add address=10.9.0.3/32 interface=wg-awg-VDSina\ + \n\ + \n# 4. Container environment variables\ + \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":51820\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\ + 77.79:55055\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\ + 438637\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\ + 809250\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\ + 09079495\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\ + 12329741\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\ + l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\ + face/wireguard/get [find name=wg-awg-VDSina] public-key]\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"\"\ + \n\ + \n# 5. DNS\ + \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\ + n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\ + \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\ + g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\ + \n# NOTE: replaces existing DNS configuration\ + \n/ip/dns/set servers=109.107.177.79\ + \n/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina distan\ + ce=1 comment=awg-VDSina-dns\ + \n\ + \n# 6. Download, create and start container\ + \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\ + \n:if (\$awgDisk != \"disk1\") do={\ + \n :local tmpPath (\$awgDisk . \"/pull\")\ + \n /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\ + ntainer/config/get tmpdir]\ + \n /container/config set tmpdir=\$tmpPath memory-high=200M\ + \n}\ + \n{\ + \n :local arch [/system/resource/get architecture-name]\ + \n :local ver [/system/resource/get version]\ + \n :local dotPos [:find \$ver \".\"]\ + \n :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\ + \n :local endPos [:find \$rest \".\"]\ + \n :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \ + \"] }\ + \n :local minor [:tonum [:pick \$rest 0 \$endPos]]\ + \n :local suffix \"\"\ + \n :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\ + \n :local file \"\"\ + \n :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\ + x . \".tar.gz\") }\ + \n :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \ + \".tar.gz\") }\ + \n :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \ + . \".tar.gz\") }\ + \n :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\ + \n :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\ + atest/download/\$file\"\ + \n :local filePath \$file\ + \n :if (\$awgDisk != \"disk1\") do={\ + \n :set filePath (\$awgDisk . \"/pull/\" . \$file)\ + \n :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\ + \n }\ + \n :if ([:len [/file/find where name=\$filePath]] = 0) do={\ + \n :local freeStorage 0\ + \n :if (\$awgDisk = \"disk1\") do={\ + \n :set freeStorage [/system/resource/get free-hdd-space]\ + \n } else={\ + \n :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\ + k] free] } on-error={}\ + \n }\ + \n :if (\$freeStorage < 262144) do={\ + \n :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\ + B free). Need at least 256KB.\")\ + \n :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\ + cient-disk-space\"\ + \n :error \"Insufficient disk space\"\ + \n }\ + \n :put (\"Fetching: \$url -> \" . \$filePath)\ + \n /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\ + \n } else={\ + \n :put (\"File already exists: \" . \$filePath)\ + \n }\ + \n :local rootDir (\$awgDisk . \"/awg-VDSina\")\ + \n /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\ + DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\ + yes comment=awg-VDSina\ + \n :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\ + =veth-awg-VDSina] shm-size=4M\"] }\ + \n /file/remove \$filePath\ + \n :local freeMem [/system/resource/get free-memory]\ + \n :if (\$freeMem < 16777216) do={\ + \n :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\ + . 16MB+ recommended.\")\ + \n }\ + \n /container/start [find where interface=veth-awg-VDSina]\ + \n :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\ + }\ + \n :put \"Waiting for container to start...\"\ + \n :delay 5s\ + \n /interface/wireguard/enable wg-awg-VDSina\ + \n :put \"WireGuard interface enabled\"\ + \n :put \"Installation complete!\"\ + \n :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\ + \"\ + \n /ping 109.107.177.79 count=10 interval=1\ + \n :put \"\"\ + \n :put \"======= NEXT STEPS =======\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \ + comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\ + \_comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\ + address=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run awg-VDSina-uninstall\"\ + \n :put \"=========================\"\ + \n}\ + \n\ + \n# 7. Verification\ + \n# /container/print\ + \n# /interface/wireguard/print\ + \n# /interface/wireguard/peers/print\ + \n" +add comment="wg2awg GH repo in client mode" dont-require-permissions=no name=\ + "wg2awg client" owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:local Arch \"amd64\";\ + \n:local Version \"v0.0.1\";\ + \n:local Name wg2awg;\ + \n:local WorkDisk \"sata1\";\ + \n:local WorkDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Bridge (\"Bridge-\" . \$Name);\ + \n:local VetchMTU \"1280\";\ + \n:local Vetch (\"vetch-\" . \$Name);\ + \n:local VetchNet \"10.9.0.0\";\ + \n:local VetchGate \"10.9.0.1\";\ + \n:local VetchAddr \"10.9.0.3/32\";\ + \n:local Env (\$Name . \"-env\");\ + \n:local ConfDir (\"/etc/\" . \$Name . \"/\");\ + \n:local ConfFile (\$Name . \".conf\");\ + \n:local Mounts (\$WorkDisk . \"/mounts/\" . \$Name . \"/\");\ + \n:local RootDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Registry \"https://registry-1.docker.io\";\ + \n:local FetchFile (\$Name . \"-\" . \$Arch . \"-oci.tar\");\ + \n:local FetchUrl (\"https://github.com/vados-dev/wg2awg/releases/download\ + /\" . \$Version . \"/\" . \$FetchFile);\ + \n:local FetchDir (\$WorkDisk . \"/dst/\");\ + \n:local AwgListen \":44044\";\ + \n:local AwgRemote \"109.107.177.79\";\ + \n\ + \n#:put \"\"\ + \n#put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n\ + \n:log warning \"[::::::::::::::: START :::::::::::::::]\"\ + \n:log warning \"Add veth and nat...\";\ + \n\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n\ + \n:do {\ + \n:log warning (\"Remove interface: name=\" . \$Vetch . \", address=\" . \ + \$VetchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/remove [find name=\$Vetch];\ + \n:log warning (\"Add interface: name=\" . \$Vetch . \", address=\" . \$Ve\ + tchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n:log warning (\"Remove ip address: address=\" . \$VetchGate . \", interf\ + ace=\" . \$Vetch);\ + \n/ip/address/remove [find address=\$VetchGate interface=\$Vetch];\ + \n:log warning (\"Add ip address: address=\" . \$VetchGate . \", interface\ + =\" . \$Vetch);\ + \n/ip/address/add address=\$VetchGate interface=\$Vetch;\ + \n:log warning (\"Remove firewall nat rule: chain=srcnat action=masquerade\ + \_src-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/remove [find chain=srcnat action=masquerade src-address\ + =(\$VetchNet . \"/24\")];\ + \n:log warning (\"Add firewall nat rule: chain=srcnat action=masquerade sr\ + c-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=(\$VethN\ + et . \"/24\");\ + \n} on-error={}\ + \n\ + \n#:do {\ + \n#/file add type=directory name=\$Mounts\ + \n#} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove WorkDir: \" . \$WorkDir . \"...\");\ + \n/file remove [find name=\$WorkDir];\ + \n:log warning (\"Add WorkDir: \" . \$WorkDir . \"...\");\ + \n/file add type=directory name=\$WorkDir;\ + \n:log warning (\"Remove config file \" . \$Mounts . \$ConfFile . \"...\")\ + ;\ + \n/file remove [find name=(\$Mounts . \$ConfFile)];\ + \n:log warning (\"Add config file \" . \$Mounts . \$ConfFile . \"...\");\ + \n/file add type=file name=(\$Mounts . \$ConfFile) contents=\"[Interface]\ + \nPrivateKey = 4CHyNhbOs923/EyNDguMXJXdghL2I3UyzXPwrANVgHs=\ + \nAddress = \$VetchAddr\ + \nMTU = \$VetchMTU\ + \nDNS = 109.107.177.79\ + \nPreUp = ip route add 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nPostDown = ip route del 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nJc = 9\ + \nJmin = 105\ + \nJmax = 920\ + \nS1 = 90\ + \nS2 = 136\ + \nS3 = 45\ + \nS4 = 27\ + \nH1 = 472437748-472438637\ + \nH2 = 707808381-707809250\ + \nH3 = 1609078552-1609079495\ + \nH4 = 1012329484-1012329741\ + \nI1 = <\ + r 4>\ + \nI2 = \ + \nI3 = \ + \nI4 = \ + \nI5 = \ + \n\ + \n[Peer]\ + \nPublicKey = o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\ + \nAllowedIPs = 0.0.0.0/0\ + \nEndpoint = \$AwgRemote\ + \nPersistentKeepalive = 10\ + \nPresharedKey = RNvF7T1cg5tyXcYQnD9N5BEp6e20vVJQTv0GMjyvHU0=\";\ + \n} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove mounts list \$Env...\");\ + \n/container/mounts/remove [find list=\$Env];\ + \n:log warning (\"Add mounts list \$Env...\");\ + \n/container/mounts/add src=(\$Mounts . \$ConfFile) dst=(\$ConfDir . \$Con\ + fFile) list=\$Env mode=ro;\ + \n:log warning (\"Remove Environment keys.\");\ + \n/container/envs/remove [find list=\$Env];\ + \n:log warning (\"Add Environment keys.\");\ + \n/container/envs/add list=\$Env key=AWG_CONFIG value=(\$ConfDir . \$ConfF\ + ile);\ + \n/container/envs/add list=\$Env key=AWG_LISTEN value=\$AwgListen\ + \n/container/envs/add list=\$Env key=AWG_REMOTE value=\$AwgRemote\ + \n/container/envs/add list=\$Env key=AWG_MODE value=client\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$WorkDisk . \"/tmp\");\ + \n/file remove [find name=(\$WorkDisk . \"/tmp\")];\ + \n:log warning (\"Add \" . \$WorkDisk . \"/tmp\");\ + \n/file add type=directory name=(\$WorkDisk . \"/tmp\");\ + \n:log warning (\"Container add tmpdir \" . \$WorkDisk . \"/tmp\");\ + \n/container config set tmpdir=(\$WorkDisk . \"/tmp\");\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$FetchDir . \$FetchFile . \".\");\ + \n/file remove [find name=(\$FetchDir . \$FetchFile)];\ + \n:log warning (\"Download image from \" . \$FetchUrl . \" and save him to\ + \_\" . \$FetchDir . \$FetchFile . \".\");\ + \n/tool/fetch url=\$FetchUrl dst-path=(\$FetchDir . \$FetchFile);\ + \n} on-error={}\ + \n\ + \n#:log warning (\"Container set registry \" . \$Registry . \" tmpdir= \" \ + . \$WorkDisk . \"/tmp\");\ + \n#/container/config/set registry-url=\$Registry tmpdir=(\$WorkDisk . \"/t\ + mp\");\ + \n\ + \n#:do {\ + \n:log warning (\"Container add width: file=\" . \$FetchDir . \$FetchFile \ + . \", interface=\" . \$Vetch . \", hostname=\" . \$Name . \", mountlists=\ + \" . \$Env . \", envlist=\" . \$Env . \", root-dir=\" . \$RootDir . \", wo\ + rkdir=\" . \$WorkDir . \", name=\" . \$Name . \", logging=yes, start-on-bo\ + ot=yes\");\ + \n/container/add file=(\$FetchDir . \$FetchFile) interface=\$Vetch hostnam\ + e=\$Name mountlists=\$Env envlist=\$Env root-dir=\$RootDir workdir=\$WorkD\ + ir name=\$Name logging=yes start-on-boot=yes;\ + \n#} on-error={}\ + \n\ + \n\ + \n#/container/start [find where interface=\$Vetch];\ + \n\ + \n#/interface/bridge add name=\$Bridge port-cost-mode=short;\ + \n#/ip/address/add address=192.168.100.1/24 interface=\$Bridge;\ + \n\ + \n#/interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n#/interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n#:put \"add config-client.json\"\ + \n#/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n#/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json \ + dst=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n#:put \"Add container\"\ + \n#/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interfac\ + e=awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-prox\ + y-client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pr\ + oxy-go-client\" mountlists=awgcfg-client\ + \n\ + \n#:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n#:put \"Add user:\"\ + \n#/user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n#:put \"Add forwarding port web-ui\"\ + \n#/ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n#:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n#/interface/wireguard/add name=wg-awg-client\ + \n#/ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add dont-require-permissions=no name=tmp_print owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDguMX\ + JXdghL2I3UyzXPwrANVgHs=\" listen-port=21641 \ + \n :put \"======= AWG PROXY SETUP =======\"\ + \n :put \"\"\ + \n :put \"Run awg-proxy on your external device (10.30.30.33).\"\ + \n :put \"\"\ + \n :put \"1. Download the binary for your platform:\"\ + \n :put \" Linux arm64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm64\"\ + \n :put \" Linux arm: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm\"\ + \n :put \" Linux amd64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-amd64\"\ + \n :put \"\"\ + \n :put \"2. Set environment variables and run:\"\ + \n :put \"export AWG_LISTEN=\\\":51820\\\"\"\ + \n :put \"export AWG_REMOTE=\\\"109.107.177.79:55055\\\"\"\ + \n :put \"export AWG_JC=\\\"9\\\"\"\ + \n :put \"export AWG_JMIN=\\\"105\\\"\"\ + \n :put \"export AWG_JMAX=\\\"920\\\"\"\ + \n :put \"export AWG_S1=\\\"90\\\"\"\ + \n :put \"export AWG_S2=\\\"136\\\"\"\ + \n :put \"export AWG_H1=\\\"472437748-472438637\\\"\"\ + \n :put \"export AWG_H2=\\\"707808381-707809250\\\"\"\ + \n :put \"export AWG_H3=\\\"1609078552-1609079495\\\"\"\ + \n :put \"export AWG_H4=\\\"1012329484-1012329741\\\"\"\ + \n :put \"export AWG_SERVER_PUB=\\\"o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+\ + v0b9jU=\\\"\"\ + \n :put (\"export AWG_CLIENT_PUB=\\\"\" . [/interface/wireguard/get [find\ + \_name=wg-VDSina] public-key] . \"\\\"\")\ + \n :put \"export AWG_S3=\\\"45\\\"\"\ + \n :put \"export AWG_S4=\\\"27\\\"\"\ + \n :put \"export AWG_I1=\\\"\\\"\"\ + \n :put \"export AWG_I2=\\\"\\\"\"\ + \n :put \"export AWG_I3=\\\"\\\"\"\ + \n :put \"export AWG_I4=\\\"\\\"\"\ + \n :put \"export AWG_I5=\\\"\\\"\"\ + \n :put \"\"\ + \n :put \"chmod +x awg-proxy-linux-* && ./awg-proxy-linux-\"\ + \n :put \"\"\ + \n :put \"3. (Optional) Create a systemd service for auto-start.\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-VDSina comm\ + ent=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-VDSina com\ + ment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=VDSina-tunnel dst-addr\ + ess=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run VDSina-uninstall\"\ + \n :put \"================================\"" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +add name=manager policy="local,ssh,ftp,read,write,policy,api,rest-api,!telnet,\ + !reboot,!test,!winbox,!password,!web,!sniff,!sensitive,!romon" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=*3 registry-mirrors="https://reg.vados.\ + ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/caps-man datapath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + xs-DataPath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + DataPath +/caps-man manager +set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \ + enabled=yes require-peer-certificate=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=Bridge-LAN +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set crl-store=system +/container config +set layer-dir=/sata1/docker/layers memory-high=200.0MiB memory-max=4096.0MiB \ + registry-url=https://registry-1.docker.io tmpdir=/sata1/tmp username=\ + amsternl +/container envs +add key=AWG_CONFIG list=wg2awg-env value=/etc/wg2awg/wg2awg.conf +add key=AWG_LISTEN list=wg2awg-env value=:44044 +add key=AWG_MODE list=wg2awg-env value=client +add key=AWG_REMOTE list=wg2awg-env value=109.107.177.79 +/container mounts +add dst=/etc/wg2awg/wg2awg.conf list=wg2awg-env mode=ro src=\ + /sata1/mounts/wg2awg/wg2awg.conf +/ip smb +set enabled=no +/interface bridge port +add bridge=Bridge-LAN interface=*136 +add bridge=Bridge-LAN interface=ether1 +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=ether1 list=WAN +add interface=Bridge-LAN list=LAN +/interface wifi cap +set discovery-interfaces=*DF +/interface wifi capsman +set package-path=/tmpfs/capsman-packages upgrade-policy=none +/interface wireguard peers +add allowed-address=0.0.0.0/0 client-allowed-address=::/0 comment=\ + "Peer for MikroMaster connection" endpoint-address=10.30.30.81 \ + endpoint-port=33033 interface=MASTER name=MASTER persistent-keepalive=10s \ + public-key="zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4=" +/ip address +add address=10.30.30.10/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.10.0.2 interface=MASTER network=10.10.0.0 +/ip dhcp-client +add disabled=yes interface=ether1 name=client1 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=*3 lease-script=\ + lease-script lease-time=10m name=nucDHCP server-address=10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \ + verify-doh-cert=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set reverse-proxy disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \ + webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=*3 type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/special-login +add port=serial0 +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system gps +set set-system-time=yes +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260710/20260710134001-Diff-Config.rsc b/MikroNUC/history/20260710/20260710134001-Diff-Config.rsc new file mode 100644 index 0000000..9c68ef9 --- /dev/null +++ b/MikroNUC/history/20260710/20260710134001-Diff-Config.rsc @@ -0,0 +1,3 @@ +5476,5477d5475 +< /system gps +< set set-system-time=yes -- 2.52.0