From 4d672ec4f41bdd08fa07781c6002b3a8525968f6 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Sun, 28 Jun 2026 03:40:03 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Jun 28 03:40:03. --- .../20260628/20260628034001-Binary.backup | Bin 0 -> 369315 bytes MikroNUC/20260628/20260628034001-Config.rsc | 4916 +++++++++++++++++ .../20260628/20260628034001-Diff-Config.rsc | 109 + 3 files changed, 5025 insertions(+) create mode 100644 MikroNUC/20260628/20260628034001-Binary.backup create mode 100644 MikroNUC/20260628/20260628034001-Config.rsc create mode 100644 MikroNUC/history/20260628/20260628034001-Diff-Config.rsc diff --git a/MikroNUC/20260628/20260628034001-Binary.backup b/MikroNUC/20260628/20260628034001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..87e678483b800d7e7dbbb96003d0d90fae33eb3f GIT binary patch literal 369315 zcmeEv2UrtJ*Z*u1AfZTAL=Zz0Py?Hus3;v#nlyV!g-8h|0Yp&{8+Poy_ue~LuDv(x zy?5+g$^SW<4WQz^zTb1-_r2f$Gmq|0mMLe>oH^$==S+5rSI%3vV7>`5M+j;7{y7Sb zR;A9w5keS3h=B|rYK^o>jkH;fv?q~{=3odhFvialP$pBM^Uu*J>yy<7koQWxUT;gL zV-P|CD4Ih>XeoxwQ8b5!5FH^z!4SgCP$g!LDiMY%8OQ`x()D`1o`EXekPWJIqh&}` znYIK8m2{}o1hUy1x~NfS>r|O3{@K!$EPt6Y#ggo6bFyK$H%HMND^!WuLpf*zYltd+ z9cw&vT_PS=qs59rfvZ)BZL~)czzKf^aq*e z5<;kqOkYL_Z70(mOcBaJ(VSF-VFY~`!WdB$gfT2F5yn6*;9`m}H%hvijxgWAXb!MT zjxaim>|-ioV2(7z!0OQu1J$P?hKUmm(VJli(P)TmYG~#WwJQ0wMq?Cc45J{7u6Cy( zON7zC==J)lCQTK(RE36ZgD^KcnLsWP^M!ntP#~7Fcsz*+N0^(f5^pZ#H|NWnvlY$x z%H|>-qt>TD`JiZyB@GoL^oEKsL_^35fjCs6*HnakpdtqP2$xTA@dLV`k5^5Qp^w$w zBYJD>qaBQ^GYv7QuYeP-z=XF{#GnwJf05nIwZ~wh^M>RWteVqQ=)5I#-oFTg&eveJ zd9X$$Pf@UtQV?R8 z+Q1aHhi7RpE7Rd?CX^e9P;Ypmfvj4%=n!Javk{_~C=kj)h(1$>P%c9BavY&P2+ z5z0e|&bK6a+YgH6LoEXlA|~J3Td6HUXmS3yP^8cGMJEU4>hx}1v!d`^VM;In7`c7tTa}>H%mLxZY z6|G9ssAIBaWDlNDLGfCnXpWb@lHtnKSJGFyJgoDKiU^VXW}5w?Dsf+ohqj$lK}Eil zXwFl^?J*Vknn!cU>aCuG$|3U2EvwOkOVESxTJ)QBZc1&$8>Sto2{V}6K~R_>>rbo*(ScJG$bae zS9}Mlq)m91yl+}eW-iY_d04EVQyU2w!@|?2O>9D9Oi*-KjiRY)tu9lNp@6YT(WtYtj4+Nz_76D6C)0pF*kl^| zDj?IR5JJ4_wlOd(hJgTslUd1tlJpWF1>hEjkQ+^-kjVM9m7zeH3bKq%%`zsr8kJ7L zuB{Li3RUWfh8Q(kQDIk(GaimNE2L4m6>!pzd$XVxfVDwW96va;1!{tHE z=?Zxdoko?CqR?pJJ4_uTh=x1hVgMf);KX!w3QHm*B(x<-&3N(-GX=l_d|=d!X&5zQ z9vHPbWS%<|curts1mMjaA!q^v5Nn4J@QN_tW-l{o_pI#_jTx;mvwB1|(B8EQ>l$-jjn>|2VkU!sU6 zS83D!J@in%rHArs^eAMh>VMCOQNN{!`b+efY7`l2onp?nBZf#BLUxGI1ph-BqJ2vd ztrm*v4)cDh1an|3p5I+!QMG|UrY+Nj+q2v8`7 zP%%c#HJB%K5^U3qq7S;y4XSb@G-Ay%P=BpuC_gU)^SIVB)Ss6D+P^PDfoVyrE@NC! zOR_RS<$&stlWGC(a#F{_P+B8cuaHU|)(W5~7!+ceU^KR{vO}Q^^l5dy^k{|yTv3@MN*D@VZ0RH#x?rD_dRrp{EVQnED? z(1OfViIyo#m1L$Ujbi&#T40%4)&3Tr&-No#`#eIgxY_f%51^reS6o)1V-FlFtG6btTiE^m@INOn=tv^>Q)| zo*EgM{;JpO)5$ad6=R*HRtP0x(VP)fP?EbT2o0qoG?t1`3DuyEJgEp9M@85~DnjEh z#4s6;A^Kwzgx+F^f!<+=!Fdm<4;Z4KG9!RA1N#V1KEdTPh8X5wFaxgtO5Q6m#32!cp*LG+f3|5yNaeq$a?Hg&{^uKj@=B z^aIBb!-0(%sGS5EhES`e4`7l}OLqI)c}n>|%TpV|$(X6ou}CNE-_Km?KaaVz|BS%e zfFqlJeK_(Jg$kyh?w0!kH=>J87a0`XQt<|QY9LBu0*3?5x6`3Z)Y(8?0+7MP5(12 zcFD+2*QpGwW&PXH8WHCI=kfZx6^8l0X@y}$f?$?5Ly}H-$+FZMU5|9NEX^2qDIk}_ zu#hySD~WV8he_^>i||{!A$M4wyTHW*F0dQ|7lxaeR-sWz((!^{YM%W|%~Ss6=Gowe*GS|! za(^ODW%QqQCz%EJ?kJjLbPXC^>Q;#GYY@JYjugVZ&Y%KAsvPVPgfO_*h`<5iVY7oL zRc8GHl?0(v+HC8Ux7&Ub52FDXJ13>*p7o3z%d3D0u6-!rw{3AL=3{A2;6c5w}l&BsnTSCDh7W>wpO7rI(NsA ztpan5X~;8M$z8wl_b zatgc&%ylMsLriXnvcbl#N;d;<5~o{F%5nHSB%);4BHoxwv)hHbw_bP8a?g?Jr{3D% zcs|xZO`q){4`%tniyjTgisP9Pq;(DV{TL5$-^Pw@{Ntx z`n2aVz8rmIjSw=frn59^r7E3JGVr-ciZI-7qG(P%A{qfR2X?qQRn7cL%!{06AUJeT zGZ2d;RCKkPF-$OnqOm8p1XTy|Kr>S6lM@pht}rzi;B6(N>ker2k2#V&ET7V;S2XTeENp+5G zvp{IOg~6ps=w+gvtrp0Q=AV@*jugj*Y)Y$ zlPoPH@6a1#8uYC(4K~V{2Hk5+gYGq^fkzy&9*71R)2lJa16w-~SO8*M2UrV2fB|hl zc-#<%f(R7@s{>zQFpR|@X!T7oh|+vtj8at$BU}5S7^RkC5dAi^M)_GW>bJ!xgh8t+ zM*UeaS}nzBRmEsOD`rwlF_WrdCL9ANf9RX(x5Z$(8M=>>|wUdHrdR6Gfb&TG*f#@QUcoww}3C^_B7}f+Xk-#U#a#)Gt5q5xT~WThmVVKE>3(p zJ6iGJD~H47i}~Wt|8jjfxQ(e9K@9~nHEBAKhTN%AL~CiMUvX>I{$9P;rhcY3^vHcN z=W0L8Gm+x4_oALi&wRwU+2=p2A3B8n_G!$8LmkhredosfT(FnBe7`V9UE$<;wTu}c zk~K4V8>8*D``jV846P>O3&Fiu7*G|Q(zy+JeblN4Y)OUmz~4jv|NGF7g(*G?A-6yUo2OLDByzqK$2oigu{`G z6k;KcD|t$(Sf&*5IZB)(5#l0=gfHg{1cDI=v1=9SkN}n)Udk^^hG-C_ex4gU>KAnjZ~6#P;5Y`Dn%8d(CC_npXA%vB1pR_W-IEXo8ntj;CtV6? zSmGxPl?)0f)fFBFr7HPWsbaAEJP>xD6Y3NLb?R!Qz(4@B9}?sz)9C!N6d676DlNN# ziWgDW;6;=v1}$qtZ*eoZBshHCyzE|wJB>To7Pm5GG#T1v=zA*+GciH9U) zSxaMsz!}|eh51Wa*8dR}kRf%tz1gaSqu-R;bW(L*FW!L!npCF+KbFbNP z%mh)3Fl&StVdj(~3`4hD+_KeNU%K$@f)2~$=8v_=Ejc`YQH9-!$z3o8^B6W^NesRv z;eE(H73whS_GtHO!%PFwK*os^&VzQ{INqXn`0ew`gC-ktyz7naH`{em|B5Yb7SJ!B zU(?r8Y^o?|+pSTl*hRyInE6A9l{TleH_?X4e<&-H=O5 zLv1>8mSxvJcY6NLh}+)1-c09yh@|%%S>9t~^TE63EpHpuztzdu9_cyV=e84$n|;;& ze#Qxh24i|1tvtTLLGF04i|=gCu2&VG&RPVQuhh(B&^697@$`=c6 zJ3H^4vOeH+65a?*lLxInUazqB4ByHh6}W$Nrf_*1dpq+_*FtB;#;<*IV>Rt<(oZ?Iv(AcF|)7k!BpQBwwvx`&7F5Vs(9LjQRA|1udsI6IboSz zcJ8iO&$A15&FaEGidZH)~3g~ZRgDDc)Mw*-GLs@ zSUyEzt@0AbH=cU4u+388^B3pyde*zX@?o9hnJYsbMgEbOZ-upLvQ3b1vU!~8d%uVK zIz*;R-0GjBt?JXVS@XiQB~RAWb$E1f_?~T|^xNaoN9g6-a=kj>yPZ83+`9VcMnwLm zjh=K9{3)x?$X0 z=kEz^P|x4#l;0Ej_k{lEPUvbx#N+Zr5?mqX@pv+!NG9b7_zIjalJgZJF^?zZ$wfS+ zSRmj?mLY|gp0UR1!kg_Fg zAzvVoiTPqNTPEa5044p*US}cX_Jf%RDD@2_AR*Osi@z08MR0xrQuUJd1W2W~W@~Fg zDk?y#kU9jUqDv6k{UfTP&owMnYXB>MBWf`ym=F5dN;U3x5>*43GgjM$U_*(L?y_swK1wEcch9?#@E8hRc ze&&?AEvXOZiLa_GIeXUB>ku_DA~=8kp_%>fmq#bA37)oe5ABcKndjTwJz;yZN#V2? zAz3F|=cJvEid^B@{ST|6ui;Bqq)#{|jStQq|6%&4?%mg~mE3F8Xj=he>cfCfg9;*4 z^9%^92rI&iumQMT)ry{un_`%rf}t9Vdfkx1-O7VEgx61&`3jd)8}58|-0>S=72}@B ztUu}goy_~zpFVA~duHl5R{R5UBb)?Yw0gLMDZQyFW@2JS#i~*iJja;EFj_A>756lL z$FZUHQ+2wm=KlU_nKtX2#Sk7?m5VZzN9K}AV6CM6CgXS03f3zT9GFFTFm$~UtpzT| zg>(6HxkK5;YBcHGU#cS=4}dzDGy%@TEle3bhql3neod!fxS6R*%0NpD!|A4`kf2nj zC{@p>-%U&cf|k6@I_fh;H6>s7b@!*n{SsEJI)XDa+vMWfNvjU~wQX@>$vbti?-#ta=inWCxAdD})@;qNv>fg;loY?d)9kz3 zPQAYIz`F9F_TyxaIXS)KnGWm$LTuoAWrlBqbxKCY>CBQh+dlbY z4*R<%%dt!Shb;5t}Q= zr2-CLA||kTZMK@g=C#>q12&f_`BFJ9;7IuboTKCkB~lR|=g2r*nM{cb1c1%|1?2TJ zWImB}cAApTP6kQ{2-2wfsxu{)C@LU9rq=1Sa!I#XX(%#N=GPRw zo)Ky$@tAaXDl|HkQYDk<6wIJ(U8-86(&aH(zlPc6Gusk@CC7&aH8DFKFnhXBt+6F= zgVqArn?D z$u+h;ZVR~B%-+13dF%#weRybYZ(DY|?Db~Le?*3qfQ*zqvLbETg>tz>;+xNTok-u3Nvut#c{oT#2 zmr)0On!j^I-ChOPE%t79axgjac<)l$#1`TC9IMwz>3(RmDnl^Jw*Hp0>s@+o6n&zM zI&t<|xY>2{R!_R+AIkr{wrRq`@lsWLFB3_F(1D|xEeo0Kabsokfz#{w?sr-CsGIBN z*|TwT@rjqkg`eAXJH~lBL>l77qa=G{<2JU)YSKD$-NTv1SpPZYAFm{2^qjS;*@KQN zw)P1Ba$=t|wI$<8B)h9Be8bHM1K5X9-VdQWh+Ec-?Nx{Jnol2MW|QKx`T4stlb}rI zo{5*OuYV_`1XP`NrCZ*)k5f9OP$e%1v@m67v*t0!#43hue7|^R>BUF>r>=CaIH?<@ z-6#saY|`%oC41}FMe8oCes|%z{m}%Q0VBdsPx-XPuc_^dlC|E2A0N)?{75)w#oZg} z8-_T}3b^DMn>UVsz6b3|;h+`MDXdL4Z!VS`q-g`6X}snxoAY$`id4I49S)4OYtC3$ z7W&n+u5izcyPO5jL=P{@UpE`z@P+bt&T+k2s^b;+5)rHK=+lWWRd;%DkMs@bXMX2M zK@ai0+u7Uq=hWw(X!gQCYSsI74^G4`-8Z9cqUrvE{^#h{w_Pd+IBs3p{atyz^&t$) z=yyxfHclI?IMTQH_U+J}UEe=;c}qkZ9Ul_=K#54Bd?x%zC^%PaD+UuT+Wrq zBx1H$q>xJpoK~B5t%@pBa3XH}%Vrud*N^r-6Ly_fLxT*6M3dNo^p^JdCIB55<&0tj zk}_3&6*@IDQ6WpsRKw;ag_fD%7v$##(P)4-*%{1glmo9CsKPlefYQh;iJEM!P9bN; zD0I1MP1-L-r-wW0+W;&Z&c2dW6P7UmmbG;KDJ=UwI^D=X1B;}AMbf|u3HlC(?E)CK z123X1Fu*V>Ep&HH8wU~T0X1+~Tol_KXBu>x(@#0Y_Qt&+kA=PKpYzLD8P(qDr(7c- zn23#YIBX6sP^GHi3E_0TgoWy*&Ost)t&i@Wub=N-U0t!&9|E6P7ZJJZhRA+tvd zv-!uOwO3xRjy;%suJe+~!#}-Vky`FCw3GKqhIi@8OwAw{Tyx{*{6}YQ>9U>5n#}H3 zH<9LiAw;|?$!GuV20PyDzPnl!$vu`cWR5uO%);5P>_)Z!kbjp|@OEX7C-vs6W1Zf9 zY+P_|l-J=Bk^0JuW1q*kPU+O@T+f*MCO*$1^X%JgZ*#@}qvovmNM)moJk8sUfhXD6 z-lx}XS&rQrZH+tK-D!#Hx*6B!NZh24OA?PJ4vh<2_A&BLz*jZcqURhxYNq#mxBvLF z9VMl=2Mfcq-~WKkY6(>@Ub@Qt1QxJ(fnIv5&8(5#HEa8X-nr_shVj*-&8M;^`?e*~ zHrXr~?S0*%NOr2?x}`8LsEhmhwbO&TF3!4Hek%8<$60hUJ=y=3%F61}@?CBN<1U#l zTB@HUJhi;?_J+69SYd-l+zV!0&{6!~55G9=QK@%%#OUo-;V!u+9TvK5Tgcuw(?>_; z>A6mg7d^7lZD}>-K+Z$&$qSU%ZmoV5)aA(3n>FHxpq619c|klrS99f zK0ch8RO}RfehcsIfD_{BmqahyzmIJO;0v^c(N72(#0b8APwqce*1x2DeoyY-ll#9m zxvL=;U&a^l1R^<~ujGpqJh4zAUQR(s=QEWhBs)Cu65Eh>ppOlbjgj7C&wuq+ywTLJv%y@%O z>>FJ6*Fo$;CuKXrA$CS@aERF$UNmD4$m^c>Pmz~#vvrLKcGD`7Sn&x#H5_6pb!N3o z>^mTK+XOE%xsDf650KGo>}v-8Wx2g7AUGHDFm%g3%d9w>Ph5 zB-?=qY|_l^Eo$(S?TWh?5M13_*~<3Ao5A0y_Fh#z`7`DMKx5-Lr>2iggtOVADj(TD zhtwj&gp34LsvMqCyjC~fYvvB%=F{<9Xyf;Z>9TGpcJxDU70r=Heh zmM~h~eyBTKf8)4vsr*X80@Ihp^?Q}Lw=Au+e=*FV-@Chw#+2V}f50{+oZkNEP>00U zrQFH^=`;29X4NliKZd_}iSm#p<%*kfUHObY)ZKB-A0B&gwRCn=#(djsk$Qm*sO=M0u54c}+AXF?+GWWVxkf8mlR-I}NKyIu*pV0U?0q{WSkg(Daf zq+>QIPkI#}AG~#4>xE+LOO)A9?4l;+zfLn**1g`KV_Q>hKeV59tV_|^s147$=&#?? zuJmZZLc91$I!5Hh$c_yP#tZJZA7AHn*5rQ`yGS*LK;MEeBl+*=@ZR$LV4rxws8a3U*Fkh%a@e8w+?q0>}oAL z|46$1e2*l*$6XKj&}m-ct#z6%dlfas#jLee{M%>G{fn%tv1&CmO~~8Td3n>eCld>A zU7WFd)~oeY<g0Q@f6z3ArFMV(oTDF3PBSfVz8q3_ z&TL9jhsh2v<6C+Uo9OebQFBZ1YP_AR&g z`h4l5c1cZ4nHfoae4Q$K;9c8!+9v5er)PF=(zL=NdQQQ6Of=D9QivJjbI)ZJE-UOt z&7IzT$<$t*GDfzhe?D|NY)$>T@)A31t&iXS+nzCBIzD~zCaltZ!xR58XD)?FO!iDs zFU`@69XU#{W|x)8iQc2{FIG27U))=||Kh1Z8q1d{w!^0_qb8lBP*}*d(W@yJ<;W)IErY zZr$!*YiQw@>fEAe&C@|CL&~SN*R9(&t#G)$ppR46ytY04#s{vB5;kde_@MMqoo??1 zU5?!J^1?P=YhX4r7qvch_1x2d@=rTj9~*LBU9gOGV;klD+bPpG@h|U9Sv#!lGN0KV zWAt6U({8PeeQj2O{K`8GI~pG}>G7M03l;L9r2NsHD3h*9XZ^9QqO*@~@S+)8N)B3@ z-FQ1(pyQnP*|T=7#m$*fdtJ_dxueO{FoI)t(%EVHfqm+vz5;j-CVavE|4o4)B z$)vc5%@zxIT&a*JmWjk7v4AIq%?@&&K*p8xWKubYSkBdkORAQ0Oq{Kh3*=l}DU)zz z5=M(zcS|z&uUB)s zqd&EW)m$L|GpyzeznirnmU8ZfrQCNv@%s7iW*Zv!+_DTCk`22YBDmkJ-$E#O5v4U= zgzYESZzf5}rLVd#j!3(o|^RT#j#Ts+a+DvhYy&|no}`G zX6g9UEbHyb!G3{*WvLn>_S(>2#u7cZHYwkhO9%2f|N)n&o$ zR=*PGA6f(7Z@AKC;m3LVFRm5@9kZ3Gq`sx?4%8eiYAV7N6gFB_`YOG(UE9+v@m_Pr z6z!X0!Kh;I9ruez#|>E``#76(T{*$}<*{{)vDea9d`c^rOTop;E`P{JZ=D@?b?Ldt z`OgksJsnx#h;2PIbZpG1;-*WdFB`G{G%EX$czgQ2F8Le09RVPM$QqrwAjU?3_*=j< zRomW)UwcMye+$^ZDqz(Xh|8A91p=N(DPrS1HdiDQaz#q6SRvtYIXIik<%+oqu7oX; z$#4!wEKn%LLK#OQ6DyPgA(t)32@6!)%&B34_SQy(LpB-gO@QG}CF@@Mc#BcR8o~oYrIi@I^N9 z!^4x_Y|VDLUvM{Zb-NEqnhq4F501S%J#qCh)9s(tW@q}wHw)LkmJ9R7?|vHIz2H_x zLX>pP@kSQ19nEKb{*s5LN^~b17X`{*uh;Z)vYK|JyiWEp;pdUV_jGzGE$FeKhXVhw zWJ`2TXV;wWyxk8cCr=x(;YGp1<7HPl?EG;jZ}zbLkhVOs>*;9|PtU(2>%z#{lq|i~ zPSn>~ZId0^bA*wfjw*Bt+^fzv*{&y;@-_!s1^#89-|7u9bktx_RDK1rt zH)Dpc|bNLQQI zt%7vqw!B}r<={H_Q-JW-TlDtWMF0FZ$c7gf!i!_+1*IXW{LM^{p7a|jv+yD+UTGdR!9(w&kpAB!}z!`6c<_}gfFGN zWDjZK?>zQF9aFn8?)kfR1yDalU#4s>YdqR=;D8aIn0CBtPfT78Uwk~!@#WzYMfRTs zThh~?G&&x&KhkSV#-*?ynQcb*_2P<-huU@C&^Kd<74y|Q>g#@MWr@PL zy>8bU4&`$fYbL%velk97*Pi78f6OQ@JkWoF$Az(v3!?KWBUbB|H<6d8#)^eEy7lZ$ zf7~o>>^bhv^$Uj#v6(W|axQ;NowBIXqGl%V8aM6GRbU!O{*&Bv zRBjUQ9_yYL#_Ky$ac0iaSNZ+9*U#shUyJWhI;QcB*i&^|oUFIkqjTGKf7}+ya{ca| z9KJrsQ=Zjt;4HI)vC|voEjzbi!_I)_q0bv|${WN#eAMa9+Ok8l-*?C#a;2;yedMBc z+gB9N`#P?L>9%s&!l$FMx<6w%Z#}o$WEDH~fYRbn$ho53JImTTFDyCuac#W)&0y-N zvU4}yUO^?VR27ci*G-;(xnP?7RehwTlmEQ&VeRF<8$KpXU$bxQq-~)Eb9Zu2M<3p> z_r^r8*Q1u$9v^t6d*rl*9>>Snq+D;NUvacxZQUVPiWw89ge)xYsF|1C@=H$R(9<2t zl7{P^Q>Pcsm|^=YyNmg_i@JvUKYW=8?iUrb^qA+PS7;F<~uJkcAVEc3lwj~ujc3Z^_jSMh-<{oes7X31KRXWqCP*c z?6wrEJF75w>-nK`1_dpPn3>^fx}v9b_Lk^#FOKC2Zf(7~rrqt}Weo#W6y5PZa`~lE z@87Mt^?KQ;$46#$d@@v<2p9m{CLaAw|K`1-oxA?icCkHf3TQlv%+n|lw>GBg?L=mO@uuRq>AsW0n$}-<4`0+gs4}E|kfuRF z!~*Q@oqP8E-ev@jcYW7u+`8^VKCSATSl6?s*)Ok|HrH@vdQY%FuIRk@U5j%i@71%i z!)Ti(PWf(tiJvTa51(3=v+GXVgZ);HeBoboGLt?}U`kn0;EJu@@}c9RtFt^-?xyM8 z-@Ywd7lI8QL2+Le>h$7b$2Veg^LI1$IJnZD9?`uW^ghTt9Y3|pt7Y`(~>UKf> zNAgq8HXd)iN9?gV^2j-4x28oaj;C9LeJy(|c^k3w$iT(gCZ2ms`=9WBa`)-*Jwxl; z^CHUhvu7=>5VbrNxD9=s|Mhfm>5bNV*FIX=VbYYiBQ&0d<9p(cVNJg zIL0@9Gw5*Qsg?2gn;*Owb&OsN@L5=a&w^g{uJ51tEF6q<{OGW-J+qo zvbZB^{P08nbJLDIkv40)mcQO-OWw=8B|Gm8fAe_6x!fg%3EFO>vfsSBGGVnEZ*;-W z{Ju+_gIiD54X1AF7P@24gI1#>kDs}oD4lfe@*vCjTfseE-wjxom!{vgqa1mA?I=>7 zZa|qld}Ef2^Ml?!S8!xAf%+mp&f57IwkW@(W3cH_Iq{vdr}UV-Ae9-MMe* zlvC|Tez7!t@Y-eAVT&1>z*evJhSpEKv!gsRG4Mf4@Y_cM}mBd1Nd*k5{W!(QWag2WMJkBpg=VU&Nj4_26my=3@`X?4A5jEW6K`&7ML{ z5e1cdt!&+*;@0L3?`7;RCvJIVU)ve~BJ4@mkH;n#9(>UC>Zt7j10Rjpy|zr&vksqr z&c(a)!RKAtkKEFs+lNI1?p`mOFs)3o`~HG1AvOy;d0cqn_-V|Z@uP9Y-c7q3NA4XG zn5I>Ie7&U30V}n2-GHx=8}2J&Gp(B~bRC~}E_k9adG=`$ z^wyRECHwm3+VaziBiA#nx^LY0#yf0nop$T(j-+KuRv!7#d1msQ*faaia(cfSbtrY( zY`s^bxhF~*4@%EFYGKl4^j)Xjp#kf!^fYfVK7~0w=xw{)@I^zj%eUS-_2^tMW5DtK zsXKbqzu_}$UthmlTxIXB8?tux3<|Cn@P2Ii?0XmIP3iIB)8#uR)DAa`7hGLiTDiSu196aEp%cQcA_z>)}w|Ym!o}T5|^|N$@l7>x@kEhO=f*rk3A1ct-!#r)$h}Mbi5noqcl| zT{=zi_sy?+`}LVWBG=9PuxGZ3Yr2)7XaC;#gLWxR+U^J|j%woc>Efj{vm4JtqaO{Q z84}qk;F0GOcdB$zhhWb7@<^XP2WLFllE$)5nYy?1jr+m#Cx&0&cO=uHtX=BIP-*6j z8B?a+bR^vmt>|+WI_$a7 z5gZmy;IOER7hzvXhehABc)gJ$*9LvJp8X|f!(TZp8nGMV&P1TvvR3u^m)?pq>dwQy zD$>jf!~M7Dp6yjI2lrI1=|))=GPY!6lY`~wvP+!ri!-g9=6<#2tD4fw4-8H`w=6G7 z-EN5W0C`N|@=5YkscUG`qyuGJ>MhBQytXUUM|G_we@%I;)O!4(rzcHkab;znCr`7# zeQ#sOf%DFqw4Yw-wOH<#F{^l9naL=-=ZoIlpby)AE$dTa`yKI{>%}jb*R-VWjhWeK z@Fw3Wop0|B^7gQO^vXKdzy6J`^|!_F=fyXvpV#W>Fw2Q!20c*)2k%;BV;-M|4_xLw zF|#5-=HJsL-`yeKVU>XXq3{Q7&(tW8pAL*`VOqqZZp1U2O1W=z#^x z2J8zncq`)ZxNifxw6!&y6T`#CTYqM@xj5rcKU>~iEqEcRrf7#;m?*dD!kX z9Zq^s9L^2iy6Cj)ts^0`{k~oenEIx`%dkAZ9jaj_wrB!`_DJ- zI10NCem}g?j-vPt+?niqA7>9V4H$fU@8+&|#&+=NxMo=E_&USh2zsQAVbA&F zT~Vvj^S0ZykM=nA{?tOv>Ac^ot4o9Rj}MPBy(j>I%J_|ee`Da^82C2^{-@;His>f<4UPWCgO^@O16|E;mUCZu8>ItQn^wfVY4M%87`5^IfkG8 z*M_^ml~F6+f;VE?2!leoT%0Ws1&e}%aUS8`s1+CYHT!OJ#=qj*u>0428#W<9aV(xl z6wVJ4g|UNzL#oc%sSC>mTf7MSNG=yzn$AnP)1>nIErWl{a>3bn{tngh2a5i3sZb$~ zoIyDpU;O!bW&P~)-Ir%CYS(y53H#XM0WA}(^UpWV*>$?H@7%UC?v_^!u;N#~zI33) zu>23VME83Y9U8JE)-%|b+3&IQs<{46x`l(6tX?MCaBvg9;3|8`r^;cjFPeuRZjv;0 zvt2r8SMke@{@v^ZdsY5k`mGN?+>S7iF|O_A+gO-pN^fJTC0KI0sh$%9?* zW(RB>-0Qjf&<*bj+80G^6Ft3C@9C4344+5Y$svm$uQ=Cwd$((cC#46Y9)MjF$WQC`inf=2$l~MMu9x4L{*RUl&FnJk&9jUDvZF)Hyt<GHTlezo-wyLC-TfipU5jnEZ+AX$*X>E$4C{@b)I)8t8H#gG z9lts)-?{EU%IPkvn$&&jVe-CLW=L{Fdh626N%lLgEZ46Z*7gjNl`Id6?cS%`<{+;b z;x=7p@0{}WZq9}f(U&@N3TMqZSJ~#JFU27sfB2!DeI5>2xwEy^YGvWEJ7Z%?x8C8Y zxlv~wEza)p7%W@;*kow5`P3t?9=-Xr??r#+!n_O753V`Z2o0^a*?-lQsIMP))7gXt!lUNXBLIu<4XT*sqlNs z{GKv3-cn%PPyK&=%2aQtx(uaN!3t!$8q+ zDlWqe4lT{f%JL`AgNC!;;d6rA(f|huUn0{>sPH_RQM632CD1>9G&ArGcjiDkRxcI__ zI6U1CQp8!#aJsjdT%nX?r|WodGBp=2)^H(Cux<*+Y?7a5HPXZx*EW!?9$dr-4sZVU zBZ5D$YWV|kVzvPO>Ql>KFa7TxO*%;DuM8*yPB16N?C%{-J90ExicFa%FALt#^v@Vr zkRxqoMixt^&dA8lROwU-t?`It<4N0a?}?&0&Im2VkTZ(rz`^VwV?T(O6{^Hc5rU1< z#Oc@8kdZjhy)LAxPhB@b$jvk>Tbizt5hCwkJSbeN(BvpI{u(vGBmvO!+Au|lPiurw zYvMfVN{ohxgVyQrcMKs$EF9o&<>?a=6&V(j*dsb9#FwZWj?pxirK=Q~x*i!4S-tO? zGPKk~tI$D5L4_F)D2KD7y~+6lXFNA1({LuV8<~dVppE(ANM~ajIABcEYaG7rgTeD? z4u()MXd1)YzYJ%%1EHpIY(CD<^!_0WrMfTh6E|IyN~vHs{vjK+DjP$Rq17ogp^6;0 zA9B&Ea?zqyiOD|_WKxyEG((l1uF(9L#k4w$p`{ z47w^SORY`^Sp~wHki@{f35w=eAXH32=B}=j&0Sp&5oB3b>3VZGsuns4_2j0@B(ikl z5$56=9W-Dq}L|;oxj!Fh*UV<2y z33QcSLKugi6kKO0$mm0`1xg_kR7vPWqM$7?ga(xg)xmrR!ez=7oMb>?4Z21-d|~Nk1W8MP%zHsHb@> zD(o1G<}Qv!yWhm3o568aRG9Td7_>ojl>!aX|D+)x8EB+^LnG1tw_PVFfFtT*AX6oo zGG$6SIhf6B3?{3_U=pw1M~E2A7UXkKhQ>6Ag)t4v(3l2gXsi!nhi)PxD+y7k$x0e0g2iQ3mF(FqxvC_cU=Wm`K&Q?45iGtyfVZt0=)lq#g4JkT z+_!~np*gylL5onKIrsvVSVARi0nXxcM0ktpX3b-(YOo-htyu%DW(_9%2o_gRT@=RJ z*w-J6ntWfBSEE%Bk)Ibe{h=tYx>b;@pBFXzp{S^OaA0Z}i~cw`bSMf!58Q&m5mq+} z6YA$B88u6qa3WZ2Hmo{w(`E83i7r*9Ofl+yqa_C2Z?v+JgoTdgR83e=PN)zus6dEC zA1y0XqLai)bg5vdYUZL;<)Rz2fMn*T%d`s6YsOXqe82}$%YqHqVRO#_Q%0>5PgO9?C> z7DjHi9XmGv_Fo-X*C}-Vsw^E#sY=%=G*BlPE&zG(fxE-EW`wXW07f-@e~mg@r^-wr z?!-D1L#VJTS=JJv!Xz@i4k6SPn1>nArX_|LuCYLwJ*s5DxgZRR8Dnj^wm4OIQXCui?VMVLbH0qda8B3n21#Sa-Byzb%Yc%yO$sXAwRFwuU z8O=WQv?Xb=X$S$$dKiqxup(_tNIGVCY)&!U!QcW@4Lzw@cBRWhYbbjW%3g%B_E2`E z%R?(DyVB*MC0X_h!3874sFHw7Q1B8IbRZgKAS%%)15wF>dZHloR4YqW$g|TG8t5UI zj}2r`L9RBDX@7*!EHVuk0#^I*VIzbtlIavGlqE0==7$;9Xlx8IPzJ2Dff!bAgy=8Q zFmNuAzyQc-5|*RTz|0ri$ZyS_M&f-cSC?u%nG*3xaOC{;# zv&c-XPLiH($k&4DX~_BQQ=qmUP)pSE&EIDID$)M66V0rR=x|Azf*Gt)$x{rB_V||3 z{=nu8wcI}_niUx*CGrt8T7UO&#E--=T!Ed9Re``x`n+O;)rMD0*CG$LiHdYZibj&b z3`v#fn89it47=OUsY#4r1*>%gEmkBghDR4`Q1XC_kUxg#h3b~Q*l=&oAjbH?wJ>6g z2^a?Pty(AwF|bQW$mkEFEXkBJgC(-G>@22Mktt_ps%yM>TBl})MN3rae$WTjw|%G< zT|;q}K^(#|B&u{$TI&Wy*YZa|aT2h5MqBXxf(Anfqap+gaE2AAk~*-j*otm640X(4 z!3Cz5B+k2 z1sa^|>@U;68j$!{8J}qtI>2UCK0>2=4DO`Qih#%9nkD8~z+C#q zt7CBP7$NIMvPHOWMA0A)a}oF&iHS{4X3QK_f_I&m#1;r)pae`1qIaagghvc2=puuc zr4F=dOEwJ1(10Ca3WJ_tfKp=68$ikhE)B^HZcvRo5gGV@?7dxVBw2PQmNV0mTD|I( zR)4ku$+#7jqavr7$s}37WM_?7f8EqHtIA|mkECMFD3}=}W0)C{iijkO(^YM(0R7w`$tInn(doD|IV$!$!@-`MKw-`MKw-+$%n_?rx1B!*$A!swWv^atUCR_pzP*Q4~u zTdjYy-TI#d2Y#?k`GxzRJ$e4%(Px`G4?9~=JDbBHFehSP2>k0l@L&0HHAa0kz_C(T z%oo1#e+$^J2KakE@b-_Xs{GXe|FIDGUly?M4E&e<0sV0w__u!i5C2CW`j0xGKj8yk z`ssg4cM$1w0q~#3_A)8+5gZHyQsi}#!mo%2|NcHZIDQv;E|1hwIoow%&(h<)>P$_y71O$m#k1&s=MfBpSja^7Bw9ejamw`17sS z`@j2hq`8nsg;WS?iu`y1%4HQ-=>RBSW;2b6$TF(@e_E~9zyGyX>mR_v2M_AkTCJbL z1coI3MyvHF;!XS^_E-@Atyb&5_(rR>4qd6$YW?net=8ZF1^)X#c(2v^oqxiA|K5A8 z*58GIfOqyirXHT(f3Ma00fY$Jdau=*NSVL-UaQrYcK_OYt=3a)f8oV_uhn`cW}N@% zy;keLkurbdy;kdw;0kWFT7U3ftM&H;&VT$~tM!+}1oWT0*J>R=0JU1JzxiIPbp#81 ztJV73@3mTg2Q+}&dieF$KlosK^_N=z>Ti9m^%sOJ>s3-#@3;Px9MH$D*8BhbzyC++ zsMUJ^FAo25ihVvvh7H9pey!D-)!eavdJiCyR?Ga>2UkD*;OhD)AJ{z@JPhWAS^q)4 zpW)A!8y|ik1(H{j-D2Q=KT1aliidAtsd8@~qy=7>s2WcW%H;@OWY72AIISM#1)z9u zw+@~iCE3GKiI*RKuzrviNjx}`9imCI{=y4W+c6xZ+0dLGB}HO@^Ow;kxsbfQ@3$iJ za?uR){uj14yn*~Y9+^74<-?@X%_sHW)=6GXggy(hIsH5yb?!!JHCm*yS6|eSBVZsM zZ_H7YXgW+r@tIjIxtnED34Ki+z@$jC%IjVq(0~TO)Eb*xcH_ejuD)2GOsg62HT=qa zS`3nxgd!Cu+>1dSXTn%Hz$i)>NOT1sXxtat$^l)|*5ZrQXYk#jIgN`f%??epmvtJS zy=+fVFnwxgw;1eY-@ou7RznMEc8~-7o^9Xs%{BYu+MI%fexH%X-zXNM{6$E7VjCu3 zzcz-P*r6KN`s9ThSy?(m6ugv>};aBOEoZExUd=IS(Ri}*_WBBQ_q`w z)K=RQol!w)XNQY6hAlV_czDDpyN;h~{lm>~~$cAo4Qo+nN0|K`IFt_E$-ZL&Vb z%utOZO7xlKoDGA?QM0x|MCJvAvrH5kOgomd6_%w!qv)G6D_=H1yy+vlnvhRi=kbrW&0YEfu~hF*e>@3{?c2iY29fSqvJck!=Cf=nXC2 zH35G=A5TU}m0UspKK#I7Le8UXZH=cs%q;8aq4dTmkqPF!X%6LC=Q$NTkC{=Jra7aT zXFN?F76s%3x3gU3`DpndsRl=8IvM5huz!}6W?GE;3vD)EKBw2uixC9Pa^x?ABzm|R z47EkwOv|L`hxN;(Fq60}PxE3JetH_0r74R+2foI-U<*583@y&=3;;hs^}!S(>eeQ+ zAO_hZm{H}0wyW+mAFfNn67tkFOZ(lQ`Y}~vf67;4S9~pY_+S5Z(qg~(U;jF3u~7Em zW%z?;752xV!mdDv{X6fum9Lm)P$oW43iD!})&@Hju!DkTLtQ;diZac!mnK?>&_S!< z34r@Yah4?`NN?7S9bnXR@1J7jygx0ge9T}V&ApeRavGyLHr4~8I=iEE8$=2IS+4}kO5TUQ)bZ`JSx)j3cdO8gY|-FVA_@z)I+y92^qn> zX#0bDF;kgnF)}N(Zu>IuMLUE`1;8>Pf4yaMhMQZR-`wZI?=A;W{2zMx3ud| z%FS#j6YRITveIE4fKFn#A^LmC49Imj$`4B^1_i`UfPfE$fIe`uK>hk?#qwlBA(~ST z=3tbUiB3W0oM@3mgjYtosZ&7ti|T^JD60G=h4JcUCYP<0`nO zvFLf9v>ADQRjZIt_)c>6c|4jXyH#F54@X7aifxXcPloq*K6}Jn4L=5^4z2}R;9e7w zETH{0!}LvrA&JcE*DU4t^L#|hiRn{ABEXdiSKn+nj$9*2XUx@QcuV*);KVve@Q2x- zrlTs&Iu-5>?v&_PpOhT!fUoyNZ86t9FGd8iT*eI+o!@wfE1)7XEGt$`q5`ka5_)YR z`ADQ=((a*=ba;^B?` zUT^irt+kb2@8%$mudl@`t1I#9>hN}Q=T@(GaQ$Ha&fwtojn#wRYJ97AJC1J*Z`{0j z(~>!`qy&?+Z`%HEt)U7J?Pp3-ndO1ICE(O-HyEcJlBC~g*;DI*ns-dwo26QV0~Jb|?m7?KyQFo} zJNX;;Prp?AqRfK^Gp86BOHWeaVQY!Ry})oL<+@#3OR3Ck_X-x|0qYT4N^Q$=4RxJK zg9lUS)K;OWM1ft_+Yc>7AzxtUBLKwY5-pm1T1}=^9~&MMmz@*HQS-8MHyXxO%)2jn z8pg{G#(I?xiqV02!NyE!g+H5@GsFfD%=S~`PW%-u2%GXhNaz&pb9FHwS?#x$;@ss$3-}XHIY|~$9UXn`+xTfZ&dexYlex=HQ;NUSglw2_ z{FN1khS|(Bm1b?j*KjiHkgFt^nai`nf+L%nKRos#k5mlcQ8swnxi>`^+y6iF21%co z_iblhlk}Y@Vm8OD-N{U^Nf_E5biAb<#+S}%S{>!nsxv4?UyTeRMj?Av+v$&3lG@&k z$Imjs67cXwy0~05ZC6{ub%~sojQ|5)?ZFQhQ+vSv9Yl?-s*E|GR z?-UC?%TwPSM`Pgcz8A;|6W>z3j=44iQ0I_?G4F|;%FP3zdHlDQnK z>_(eZi;eaqAEkq{jrK6ls!oyo_B1V$&LkK_4%6yrx{si_@g zaR^IGfZgUvI)t`^ZM2B2p(!WvAVH&F0iIzF=WDrlv zah!D~!eLMZ*$|3u3*Q-XdZq`qpG)MOWvPvz^$d1^^uSC@P~_Tla#+N}qyymBWI6iq zgXJ`oGp*zEIv$%x2kC%?nRyAPE^MA4M-Y_`p0!;M+6#XlRBqt!ZT0 z!xZj7X()vl1nXMzM6Yh&{QgCSOf*g><$e;q@wUlMi&Yk3#4OAC z2BC&0r0b;%pWhu5Av_~av!uAFpyea(lo91!F=Z2uw^`*EcBN=*uiI{(g1_7TSb5dS z>SEXnJ4)#M)fuZQrlOD=0eOnSuq82_k*L7a}HN}1c!Hz z7TyZm(<~lgG-?|=Yqn7y6$0^LQk?uF<9C1IEy-g=Rp9s2Mi8wRUBYsFmDag{2EK(p z`s@)c4dh>wjh+AfO5YsBqf&fn;B&Vu3E!pJyBJq$))d5FG&HXc1ddrIvqz)TLP-2p zrZ|G;!YVEY{Brhn22Iow6A1oR&)!K=?B`|D&vM-gLl`)p?ba~Ks)$*?CBpdypPE_pJF!{F#I)&pMBPYO@`RK*JcBNTm?>hU20Ln2y+t;2==&FWM3mPXRQ@ zs!VjNTO8|51G^*WUVjfkPXQFv3J|%nu&~eud3WW^W9M!ZI`rdgaFiEiv?zfDWt9vm zmHVFNvTe>?j)^jT7?4k_aVjtswIk*>FH(XC%BvNLxsTjtzcgD1w5l~rW z>fzd$Al8uBJbqN&*%ZBFW+r$r1qBg@L!l9&P0^&mKNJLz9y2 zkwLZSC1gbu`4h;SKJ6a1SPv9*t;yt7nU-~e(@>I9%61`@xn!l@5B=`gF$V*nikVl**+5vz&zX=LkU z=O9fR<`Y6hm0q64Vo3lB5=`nk#bz>{+B*og#1yXOoLa&Lmn`U|o58#dL8#G_(U2YZ zP^?+G)Lj?4Fc{^7W8x6XA@y?3$125xb^rH>$6~#;i9CwK*z8cn{|HK`3R#&}^;H%ZMHX5-ps0~Yyw-%ZpcJE>f z79Vk{??#*z%MF3KgsBGn#f%FRiujOrF5E6)i}HJlukvG?+Ux1vUBgOLz`gM z4A9Jl)DN+^EbVKx{+v)g#CnF}o;=tb4vC^P66>c&I6#I)s~X!+v~WSL1q&}9b*FOx zBnRue3my;J9z%l2fLn19VtBdHpkd}kwP_paDf1U@IbKthSShvd6=cK@-kHf?!opLCyT_d!$^TQS>1XL$&1hL}{0EKJI~n$eJSERiM@ z+s8!#z?GS;B?jx;US_oEmCc2kxT|2>1k}NR^a!S%R zd5Ij*S$=A^u8mEV7Rj*N?b44?5@Q;6_p)b{QsXoojm$pIO^D{PpN#U;C1xJdH;ZvR za_X|~DrMFSa?FXJLK9S4p~c*W<M7@)hM~T&cG%=Sux9r#e|T5Av)sRX!aY@gy3hS#rhsCe&nqNiT@&#!eCs z&#Z^peH9uQKUnhn72$!yMo18 zd~n_s4Lzxja4LqSqFI39X30>Fz9o`hh_xzAIi29p+@cx88OCl}BCw$}r^#qU;Xzww zh`_bV6bWhRfAD}c!+e^WHmqxQrYJva*12xj`i7)#=&VKIyJ8HIfvH;CqX4# zt~quEYp()%K(}(3$li#7kM1)a4*Mj@k|G{G%jNi}jekH{>sR-S-X9n`dWi86H8og+ zC>5}u>b6r!+FsYRCh~ojA1B$?&_uV_?(}ZoyuG%1eSLHDleO;;SB?%o-&x(hIr(Js z@WFR({^rTiljQoZ-MN*W<&#stlL`tcfdQ$r((A3=Tw7V|-Ra$2i#E*F==zQ8*L!Q% zuiv0Pndc?qWMFv9XY=yX+gJl+28MwzBf25O>>u#p!Cr82AZ@=oJ zcr?NhGgmjBq}_Cq9-MXa;*jcn_`%hynuA=9<#)}~ye!lGQNl5=s3cKbH@8)m(`5LNGBSCsg89%Kiv#Z2N@tKo{U!{seO~3SbC3ZvUb`iq_+~cb1)qW) zm&~L-gnZU;2^D#8DAJ>&W1l1LBQ8ypm&D>{9E{8CzfPDfxh+WoM-z7*6EQH=Q9<@lgV5F$=C&xQ0b z%ZsEmzjcrogM`xy{T2zz@Igd-PzJ&hlN0~Oqtp1Tlm@lECF~3{lBM~yk_I^}Uua}H z&0rhBnLOjICP?Pk=|OUWlP_D@U^E>jTTfLQD7$fw?C=tG-GKNL$|FEC5bz^XC7I}H zQXa>}4O;$)l^#8Ns)_0C4GIoN#$hMUhWYpbWoU%kF~rcNbc)J@YO=n(%omBd6cwBc zDv(w|HYgl-w)1=re40{}0HHh1rh_hXH3uKpG1^VC;k`7&Hnt{&xmkSYi8}wg+eV~^ z^Gh{o(Y%*6Y&1e(u2Htd$sT9}>4C{|-j~jjdi)t>9~HbYMErs=N8D*%A&sbYf++X{SP959k!FfW9R$kz^=VL<$n~Q1$!qGf zbdY3aBBfdN!G8Mwr#nk*ZYk4Ik|Fy+rO`zb)C_{nUIXIh#eZJi=?gdCvkl z2Vs<$TSezq9V@CtABRp!M%O#re1>ICV<@s6XF+ce-tb^LoQEHM@_SDdMl=qou$-rE ziFWdFN6&W*B^MFY%D5=vGq}MyJrRjI4@Qhkvb1GF{+l7>8BafO)@F9*xdd@as~Crxn(d zd|Gvj^kB*RnU98e#j3|uL&xf@RgG4eI6E@~N>=7J@8W$7ALn=DEt_vIXKy=i)jDj) z>*Oa%F^bP3^KuE6-FJfdW%Rv9pnH4W;c}Nw1yQnMJ-8w|K~qBDS#%|N!?RDgiO=H# zVYo||=xD7byYg%rp<~*Wyd_!-k zv`V2xLMIFxdqx|5*Ls8*dpsLv6zyfhAYzG=&!q}SEU>~P{eDJH*AvSGN+V=i__ z&YVXV)6&lK$8<8?MNrR@AB=o1@rBcs`tma%K9Y7Y2`MIK2H`n$Jxzzzkr~IuaZ;GQ z$V0lB=Hv^b5YVfpOb>DN;WQ!HgH83Bq*8Y4GMo2wffxUq_+a5Q=kHg1FOV4FZy<^a znmsJIKQ9JB_Or`8`kjBG=Gvd1G1r3UePivvdvfOoNH~7u$!$9Ig52sb*6#Qxaz700 zTrky!Z(ykX7ytN@hFYGrzyrcXIJ$19wQ~VwW^A`<74A=q&0=um>ICihXE&RgyFV?I zvbNCxfUp~P@T%Lp*1R=tpwdH}lyZG)u*Z2lo^h0T-+W7(80qGGRXd#bnXMOIMqL)> zVxad5`gZnbx%Yv0f`MItIPa?2O*0rVt>nk?r5LXGTTDw&| z#%UTwY8#0R>K`#*#AqR2;?j7&9a62m-|FjeP(RBL$rU76KcHihG{tdCo_McZ@vV~l zUh>|<4r$-#eEKA*o=*3-&=&{jlcd@#aFcpEpyq0z>fc;NQT1?CNhvc-RIS6r2%5pC z{hj0_)!fK3!t{PODbjfKnDW2W!0msY6q_)E1<=9_xiTlbn&J1^53WXl{Jm*98e+)3 z8aq$mSX2}g?Wf0w$j?^A)zl~cU|JMOCcZ|;&aM$&Rs(lX(6L|~T(u{o;S5C^vpXq% zo^i_S%O^?2A7)7XupGpb@Qc~$No#Yp0t6x-8Ll}<)JIQwlUnT+CrPqq7_ zB+ek?kuAdqhxekQxbE?4cdtm3gMbFu;4OA?&DVZXgV65-Osa( z^aiiqR{7xZ?hak%lx7I7P=H${iKDZO?$?nCTwm${O#ihsZUxu zA>mcu8Djvw7x?)};*0g?S^8@ALGDk1=f&t@HsI;6IC@u6c;I+0e3lRVl>k;qb#ZxR zeSZ?vGIC*g-%-skbIzw#{~LLw9_7Wny7c|t+4C$#mxOV(Tc0DzR$L{!XIT~dJXH%x z@EUY0FQmg^;`hOQ+fENT>dC7qBI{Wm^7alV2pein5U&O{6%@r&d-o*Mw~nrMHzgo-A@* z*vb%OQGFi!D7u$B0ppVJtmotp*HjzMDZ8<>q}8}~h}Q*s)pZ#6rM6hO4|A3aS0G$` z-21q;VoLxQpTy$BC1$TJ7|W?p{#84L%j=aoCY=#OvSTcBr%0RCl;%(_H8VWN&9;NC z^Jz+))NI$lU+LG1>dq7P6*=^Q4LdT=*_~vF3FTT6O!{HFZ;TuVTeHW(Zg{6UVA-H{ ztmR4x1y>mNpj6PN%GYbSO8h4u=9MGT>~lMpYC^7 zsANZ_)2P1qA?nDXEY4RHEn1Nz$EL(;i<6t~HWPPLEEoV9WsbNN8*qK&=hiQ)Dc1Id zZawkYfcZ!2Gzp-ffXA`H`(RM`3(G*BQ|$aB8G~yjnZ|xG>J74*l5gE|NV~R1gJjJI zA(g1=0n|e!m}Y{*D{J z{Mg(K503;#VT8$D@ddByM`nd*t(5vvI_8NXSwhYgJR)a6&L$>t#Jy;Z^EjxnQYhiv z`UnZ_!Pa%*5~5lZ0if^W2GisM*~O{{khwrkiBiGS$y>Yv> z!N3qD?I+)0Jo5!+8kU59d2x2mlooUF%=^Gp=3&)jEek*UCM@quXb^Meuen7+l%#rN zy{6e8*7jyNnRn1AF9w0R%e{v21NX2sTe)Q=7Z8`1Ra!%Ou}hau`65S~?c9w-(X-M< z>xv#tX-83&&Iq=;)W58OCcjx405Ylk}w@UAeCsu4dcA1l#L1M~5B}}hjqTDm5 z3p36HuQLL`GRqtgNTf5QLuR$QjqFsTgLD*4h3s=-Io+&yJ+4XEU>NAGqii~kc+bgu zEFPh|_M$qL`AoVRIxmdeQx^_n&u+9BmMV}sHqy`z-E`LsVj)EIBeM!6lJC(A8&kdA z%>e-~H~2B1`Ay>TIEPX*ee@!|8S3D}3~fT{NL!9Ne&dcd)C3Q;>eiC5N^cG1I{IF_51?|wOLF32&lDNG(5R*^u(b=+MSMe9RYn`wM6>o^2698$b0CWy&?i#U#GT)1n={-SBCpqW zmN%6<2d|mw-Sz~+d~De2+p#k6Qa~ghddsHWG?7mPpfc1?d z0kj`S`F>3Cls-f2R}D4_ss!$1w>b>_+3t1SBW|@$4ePhI^bwyEfMUZVqjt7zJfWpK z8&Akm9DHS0mTA~v3wi4rB~_Sbh*dHNb`cDcept|49xqJW_1Hw8<|W;w6Sr!a8(r+&jj)x1KNt(Bp+qb;M=3JT`0e2!2o;@EyNhsUg40zX7c@@!{s(mP z)CFzd$ISqP%4^!M+t70KXtPL(M!Rh zmD2;Ht12qXsLUg%;O;H1GZe)w)?L?4R}>@96ufjh^%Z%hu^Q`u&b(fG-J1o{Fpl#& zEK|92H_AphGD$&Gqw|^ah-cxj;iTTmmE$}H%frWFQ~yrrBG z3iav3nh9>Grd(7hhwV}DeuD(A*A{gt(j?_LUn1|!OSrOFH>;Vm{OBwj{nen2kQUxt zc;SmTi%##eL4RJr;EV?7MISm%=7m`=vSC>jW|U-y)lvV2X=_1NT(jwzuUTL1nU{1L zs~>INyZ_+fqfb8F`nB(Tw*C0Y(|>1Y_u2E$zx(UI@tg7fV3-^n9;H7x9*whn^4mpO zO;1i=o&B)4vbuKt#?4!|@35h7F7}@$uLyTlKNTH!pZmKZ?GRujfd;GvL}g1s4x79b z0-y{|r}cZL%FiL(_0>Dq@7%n#dglh&McG23z4K1IAaIO~7DvfI55cH=N3~$OTHNg@ z+AFFDi=W2}LgciM%zAPn4#A1~cis1-x-BWa?3>eLhd7PXbnnLx@_ql^DGs zDTYZkg>sW{fbxw2qx>+1B26uN9zqKJHyV1AP(w6v~Zh7}gtU8wW zJLPp~&6NKxrW<4#Hp| zz}P)In+8K<(X#M(uyD}u!%+G3og#UG4_x> zRZe{;Ia^{vr&(W`cVi_s-L~L>9HKOu^<|#BP($!IIg3pDJIR?PC1O>q65_ULwzfv^ zf~T3PUR8{OM!FE0LmPR$&t(O3`nz>yme`{N3JV5H39YE8lgo~>bqVuWE<}4|*LOb3 z5Gx@u7xtM^rl4|-z==GUACm!(ELqBEvna4d!@5b|83n+>CRD7J)JnRTUDJt=B~Nj^Hgg?CD;qegzlMJx0n+-9Lv_M4=;0? zZ^#m~gEd8uReAiT0;u^=91WU?D8GbvFpeyoD$?oD7Ls3i1~&T<>7v>`6nFTJ+F^0@ zYxzC`>cJd8$oKi2zZz0&4poG4a`rt9kbYL2A)1X6vmq0gnN0Ub>A-9~l`MfnNy=3w z1&)zP%rP)Sys-@srU$aOICF8{#0{>8xKYEqO$X@(JGiwaANC{i-IB7`@iHp+&yupE z0mB1O0}XSs!TuCkbmFo@oMR9_JdCT@MGw z4F?ttYJwFu)H1u}-y8cRspbW6K!*T6a>67nsRX!yMX+RKR6>qXt;gj#XxNls-mzjj3ut>at zirg8EFVJZ1?wQ0stJ_dzu^Q<&Rd&qEO;x(MK}I21$pf`glq9Xhdrgi90(Ha&4Z4Xx zoi(ln`r0+ox-d&)O&F~R(~en{%ghLW3#6{U*{CH!8zapSpz#Kptpudcfj0}t!$q}Q zY5gTDfdc))#nn5gRp+PO$_uTiGm}KM zPsbk9UDv_$S&W&5hLcD0@pKG*OX9kTYycDWBJMF)E+}?PbQ54mLFGmD5$Z1*fwfx| zFJJoB32s7zyZknU#y&`ZqS*AJda1)`S)2MT!DWODpvpD^tY3piMS5N#ScBBX%4Gvt zprN%hBZnOGbcLs$aj6dnZ%;vrck; z$pgiSo_z_>oVd9Sychk0{vo$e)3*0kJ_^3g$rn_^Z#R5~mhIxq>`<(*av{i5ZdLOI zD|P)lH#g{G-o_NQCo%yLT*#QCY*HCH9le{P*`m|D8b~Q+D zlV(+t4HG0gr;Fz70Z4Zz8i_%HTR$Mlyv_({;-erP%R!MOoulEfQ$jT{FU`m1_S)^+ zH+#23A5!i9(%^2)K{4v+&GytYI`S0UgL+YQx`vha|9sbbuptjv(Gn*u`V%LAL-`n0)`c>SZd+Gagm9<~LcH}mft=@cluIObo z=DG0hTsP>qab#0MvP_v&AhrOV2y zu8FQu=1!YlSx+!qTbh5%lFB3YcZ$3NLlP_by?6b0TqZWMuZRwJYj?!fkKFQQJjhJS zou*5+aflKo3y(;A!umogb)72{I@05@JGpCF={w^+=zO8ACNT7rrhAX zrj;U;?7X=Dm{(q$LHJH`M!VYGDlcHpc0Eav7@cgxox9Qf$8v<;E>`oHdvFw|86CfG zX6qDL`3L!UGD@ms$&AyIu3F&27C+1YH<}l4y{$Ee=bO2H#x{)Y#AR9I9O8TI7BZpd zcQy4@4Z^BnH4fzYL+6J08Yc}#^2jo+^5X1@+Wf8UvdYc)81%qZ8NNwBI6S1& z>+RGjl6syVKVK^QYeuxSyYmTWe*g6q>?BD^3^ijsSH2QWjUSfaswpDUcAAc=H0#h+ zHLPeyi{?uc(S2F8J+oxi=aN90wKjg9wGj_V4#`v@sf0AiR3Iwk7U>2h zilB&e_BA29CYXOM^BmXFMtWbBW9DVekGdSO6oH4R{{lNdWF<_0h$}Jr$V+M#z6j*l z8<;Zf@LoLW&z<%}G}%ic=R1e`Sg}(AkC|-{o;I%sH7UZ6+|<`N2(xmgaqPv>^&`lc z=$hMxH7g6GKGOdJm64Yy%79PVP(5)viOX_wRK#V{kD^exhS>m`sq^;ICftqA3`BtU zyla@hT!_9`UreI!zvy-Dy!;3zEU^{JFw_OUr%GIMk5g8-m2;ZeDeA^yc6zc3uaO~W zOhVW^^}tt<;X}T-Lss!J!JbNWp}MH2@HT4Olk`FsM(`3!p9OC1tGqGUjw@u|oi#bD z4N8?2*5KT32CB?FGAwwA_S@ViuGrH&5I@L`=y`SN)StCtk9_MC^ zF4dR*gM69|RV!+cDj zG}c!Dfl3|_YeCTVqrej*jt=z{BEQ)d$EvPC`V$DC<9kKC&=vS-F7{gZcx zJGi~vS!n$dkE>w<0K`ja`Kmyd_1=gVy#KN>xavG*l4cIbXMXnlHwem$8pE{@CxB~hNy@%AUro<6kM5Rs|u zX?|)Xwia@a8Vy`r^k${ETJsa%OTkY;+!`0{Q{hDurICy8<4MVc``A#ykdgSCU9(kK zNnkzO&!rds8caB&3kz-h|62l@`mQc8ZgrVIq4lTvX}CvVC^m$bc~*Y6x2zUprO>nS zWQ8IE;FbE8S?Tov9$=+mzvQY}Xj6q{6!c1voO(8%tRiy>J_R$2Dy?F7E{JqZ`(B#a zFe@uQY{94-*g5dn2}lSidsCY)X(r%E9DjUiI`slJz}0RE@YL{;9@EH$4mYfskbuaT zU1xoI7sxGUSJhl}=?o&b#eND&aD*-C^0G)H9zcHI7<5WCP~Jq#dg{Yk33a>y6{eIv z3h`hFXW)w^CH-2lw4$F772#?kJcOE7Zb;D%#|>Ymncker+L*{4f*gn*r?Av?4xS7R zl;>4>zS=-D(RM{eAoWF?uw0Mfa|GkE-aML-^CXXd!-F z;bnV?6D`kYiXO> z7-AQW;zBZRT0Y=n0VjBg^X)*X3Wf_+=Pp0bvs7Z!IKW8NE19B=t559^RWPSHv%Csr zYI{b9CB26i0ZxGjo9p)GubY(~CUy-x4MCM>WisGyROrwG!|sNw81*K?{bx|=Ua~O8 z!#@%JQEI%0oWcsP5U3Mx?nLs`NjptuI(n|ME*qJnxF``N(tYuAuf4GN`dc4;`-?Yw zdzzfsQ|bQ<<|eC1jDt)pS)a)7feF44?d{R-pE*%XyZAhhTZtcdcvW&WaO^`(^Ij)8 zK0Nu(eBnh_dOv>3@+?!7vc&t}>+w}}<%w2kX%$&e<57t%K_Ks3Tr)LaQ;F=VK_7bt z3VPo}WE}BU)kqJ4MkZn}jYJZOhk|O8n>Trt;))k?Yj8Y|@7qA<0+sB_LYsU2rHQ_` z@EU^XHFZNmj21LjiApV!4k3p@g2kMOz-jhv_l2r6RJSJ*=TO~_%3PJTMpO8D(al=l zE=Aj~in6t~-q|G5ZY|wjTIof#!rR+uRbw-`*@ZTN=-gdh zbbqfc)@#zTipM>zJecQgfvg%3FZL`qchUT#9G<#X|1M)6llkt&hZ!ek^ zv!>)yq00k*c6N3)55Jx_94qzV7!K!;<8`m%je5mTKlLjTXZ4I(RrCa}@pz`xnlU$O zrOI-q)J*p+$o}1jx4k47a zidkLXi4Q4)+D-?g(VG#@!7eV)=Nc72tK@<59tvzhwY$L?n;j1>-#xB6Utoo>xUM2k z!U~;e!3?{@Gt4(Y@p&xE1P#t7>IX59(3VVaJZ_rxzRk#t<5&F^-1!&gf)p*rCU&L` z#S3Z6i@IS0xg`WNPfFYM6f<$VdT78T?7n&=wR|W6 zTn&y$5kvldEF_4Ual>uZ_(3|O3Oz^*Q35@KEO%T8BBbPZvj@`XR(ZHThI;k;x{11` zEr5mBWwNA2-4d?tOPjRbNU@bLRr8|cim9(_gmrRny`=c~FbX*1TL>-||37O>|@##-IG>~{|gXw)Ex#b7in)^i( zQ%EELoBV*t!RWY#+q{-Vgr#P7X<}wYFdh!)keEPp#__8Tyr(c1Hy$IY@+uy6#>qG@ za7J|5tf{1|MHGcN`7&BaJrh$hzrzjlh1Cm3Qn!Ryde2asClu6MnJ0DCmaY6O-)RM= z7r0c%=ao5dXP4ydm@X)@l1^3^01ZSoUerZ)BPtwRPMM8D5gMR3i-^+=;!%;r!!uS5 zJVu(+ClJBfY6zvCK_aZa4sXyfmu{;tXjBN#8LaIk`By-BSQVue(?E^ z2vq03`dEqBrasexGApu~1(kA+0WXl-o4-y{n;C4y+%;`ADu}4(Ba`+Q?g-UPXWLtk zgUTOYva*=PVeJhr(5&A?y{62Yw4&qBLvdZiETs;O|!@-#1wOFGj7awKtPC|gar zWJYO~6!FO9nV#6u8DA{mUsXmAKJ|;~oCq!TeuY9xK znlHi?$~V|J+N=)~7hg?DAt}OIf$8L!H8Z?1#!u9!Q`J_aIqBy-1EsstsSlp96L4?9xOSGe|_~mImo~=NyT@A=P$P-Y! za~EhVN;(jci0%T+hO&giqCaE^-bU~9|+i{RFxF3&33C^bntie2>tnu5^ z6z7>;3G0&M65ovr%H!vixX4v1l1ftF>ZRVYb-x1YNTYB>?(Gdf+S}{mpM`~ZG&zc2 z?7zGrM(&}u{6ilDe5ubtqEZJ}* z&O8N-M6OnL(fTrX=8eZZb47SR{S4>lL+{=w_!yCCB&3>Lb$p*%mjqc(}pMlg!TlgF-znNLK34TO|WR!pe-yuUzq5JNs&hz zCL$4lKOhD0Z!w4hqF%1G_Lf;dYhC=+MZCPQ93w4M~hL_+#%6s(mI=5EN9N<^xcMkag0gh>>_*0an=Tuumd?n-lf zG@~&kD>ZXo&03R8#9zzz`GRhz*~%9g0H-f$h?6r!*&T`+JiQ#}ox^~;rJp#JuxM&7#S%f#6n4&R-!n-o3dO%B~mTu50lPk{zZ z6_&^Gy*ZTo^H4|b+U|{=uZ3jL#c=urY3_g$ z>FIycA95lm?@np1|1OkP&1Y-4^bTw+<8&@TwuZQ_lB+ zF{VgZ%u9*FLN^0k+(wLz2DA}-oGUsUW#S`}mU{p1WszXcsN-?B4|BmRg8r;%Ak;Q8 zDpj=jm!>+3GsQ+QE@x3*Lc-Ogf``{bnaxq$vnI94DnBlY*i%-T&idE2mYL;w`%ET@ ze@MeqG>xVehUk@|O8d4}Ca5AR!Jk`Ml@urO$iP&>yu55y^~fc!T=+mCj9P?&h{U3o z^!cs{6R9A^Fw`k#&>@Z@?hBICz0m1gANG&ujCwHaI`;@E55Ep~K)b9vI1T3W$>9-S z=E7wCLSv$MLa z;sPfo#x%V!t@3P;z(^n#u$rsE@yy4Tsc=gKQcPiIHAE(Ua~h`2Rg+0eh$ixk?1kPEv&)yl)0Ymodj1ha~KE_sn2;_{Q;hAF4}KS%~uzrC_y z#++Ta-(KA?qcl72x7RjInU0dI>bI{O+JUhdOB;QN(>8qMW5e(%7&!paM#ki#2o8wM z;-X5r%+#R2>UNO@*#D*{VI=RlF2ed6@s&#t(sB?NL+n@PT&1RsBc)^`^v>P34|0+0 zrE^N|MPyU*%aa8V5gkDt^yR;--X=Yb=~wk-#Wz)F~Le zWU%GKS5*=72Ns9&-YkeJ9mV_cU|L4~Xzx*P@6MyW&0Bk$a{k-Et`isI4jmyuk%y~$ zw;%1@>uC%SyiWNkC2N(>oA>u_->Q9{PP~sd?Z-hpO0r>GxVG=C?cKiNeJ_R`#I|+z z^H*M>TYI?fZMTAJ~rvX_2^ZcdqYkx^5nf^2y|^Lt%(^6z;6<-E*UG zm@t(duI}C0+`Hp?b%a(G+dDqgqxA5obCQp$_%P{|>7kC#oz1;X*C$Gxm}ZBaBs)n) z`NT(ZZEw?&1u5JBbvS=+ng24$S@gSjS0 zdFCU#ws+4FXfiF2CaDj8%^&n~kd|d$(DcFJ+~2#sYTGUcMLrsZtvh}x$LT0J>rCRJ z!c{Y!gLvR!v3Xhf@#yo!fgpDwDW4 z9wlBcypb;_NisO1X^3J>M3CS%A&ZGlxFU@rv6Bg+y@({kOc%+9x zd`9o|u6KGX-uP|q-MeRL-N5nn3b!BZ-FAc1RAHspS@T-B{m>U}^@-8|{?2NovFzUd zY(Xj2(d_&)Tc4)jH0*q6F>(p+NPEGSPShq^iLfX0HWRWvl?Wu>EXq6R(7HMSE2eel z?t%hp)5tC20GSM~hcaAf4%WJ zfspl|$U)l)sp$nY;dYP)y+dA_mtkTjuOcuDM&fyvzFK{dvsuM;c)ijKDm|@*`a>8! zFGdeDs5@@VxRdHH^lCY>E8)Zs=eG0O?pvIh-^=z2b7e2Oy4U{ZuUuPL{MJWH>l+{U z?|%DNU+nF@{N8VU@%qh|dX8Qs#dNOKB-pZ;0nmuviTOFFEU>pDrdRX&=IMrZf)EK3I1rP}sH$c5h?{Eh484$MlsO#aqg4Wr)!an=myL@Gds`jlOA~g z(;dDMMQ|m9*Q?t%9m&HfFFc`BCdDMnr$d@!(+M>44)HLAIG8^$gNiyUj?Nb*tj@P_ zcH-f%NJ>mNS_slf&{y$~I1UuiaM_9G3u$lM+_@K_Aa$bTXj@0ZE24JctnOhE50V4O zaoGM?Y=yLP0-v(Ce>y!(a8}NFt5gZ0%iZT0gm^{8MVIopcm#F1N*QuAQ{Gjt3`cN+ zQFH|%`z%^xoMl~^NiZLLeb+D&jfx9^(ecCJ&Fpc(%Uuq@szEZ~Ue{D|cDxfkyevLZ zmPaP4-L=Z0YD6R^w;n@Y;G<}iJ3mYa>kXPDZV>iv^XW=GW?WxYdCEFtw&$gi6xFb1 z$?3f!8BiK~QCjE79S?6kYHAj2`|e71Kc6k4MREH#Oq}z)H`=d;pvm*^H}EJ=m)JI> z6t{7xbTjVdEZHsVpc%SPeLy1m>V|F2hosO90vh7 zE>O0w(eYwUhMo)?Ft!WuQGRNs z6L)Y_rChM~)p&3hY2Gz41|6ieoXHvBdHU;afx=JqxD&tpJT3@`1f{BLPhTSj1|U(! z@9>zX!3)DGO79&*x+cI9rM}MwbffUZxeOAEbYo@-o?wjuaMP95xKa> zQbBv6n_t#FG@)i3AcJS9qk=y&_Exg7=p-r1G|wRMII)=jF)jwMSq`dc!Abf(SD}=4aq`PVEVDrVp?bFg zenSKHy>7F>U96c}m|R;~S;eCfU&TU%Z*mJVZG^y325QD3CJL8&oSdR6mS0DXsyTV%tSiShNAgdn??mam#XF%>A9u9t9)Gbhw{q2NI+neBHv0zG)TSQH-@2 zXAI)XUCtQPB8_HuIxas?iu53?T&H_b5p^D<#b!2Cxf6V@*WH~S9HilmM{42>>dj1& z;46}K2QTW(EyQh9ie}HQ1)%hNg`WQjKF)Yy!>?o%tl3qA5_;fa_bjX8kPN~^*;1l17%I7{P0|Rwnb4b@1Wyz_8(8#$Y#zR+*nJ^q2QV$}n z^3yCS`ch3cBmL;=m7*M&{WJ49gChqB3RL?SQhUq;^xX9Lc-d9$4Pk|9ba zFutr+A(Cb)En4NvueFsOAQNYMRyxBPO{j8W4Vi=X=#gbPK4AMeITh9pMAT6-oZ{Ff zIeHv!^4brz1B&)te`rUmZqu)H+hTvS=+o#(r92FcU3b#%QZBD46NGU-?Tn6n; z@=-cCi%1Rk;dbuoCtoSYGlwmn0#FK@NP2LP6l9a);SPejn8>!5*T_tjR;4K|x*7u} z=+|qwJv1KK&&faG*=~|OOk50q=Wdi9W_dxjx4KCy?3uSI+(H!yflG8|$;2g{t4zu& z@ov1qBjK=tc}uX?aj~+4m81qSNr0HGwJ^?PsMLh-c7~bk4u>l9Y9GYp3vKq}GU-eU z+z^6Ap5iTKTcc2=a4^vYwQp=Y?4xIt3ZjGJXU?~ijR>*+q!v04U6 zYUMmFOerMf55eihevOJ5KXYd6yQydVSkAS7G#Quh2)oL4r4YfYkk|X=G2qO4?a43; z(q43V9?*bSXTb7yVGeM^7oxD?Cty-5zPd#@AQ5hHaVmw+p}_)b)e2vt=oov_ZV}6X z+=Mwt<*>BiGy~XWzpG~P73&tFw-N`C9M<#-5xe2od6H&nc{JmJqe`#{+a;Gb$RsQ* z9NdbC>EyNah7xh$@r{Uh=1c*x_>m%ZNf|GipJ)HW!+nHmgbX}vRp4Y%oa$YCkJo$G zXVz1@G&nOHKXz&<_y#!%O{}IlohK;+K6E)Tr{nQi7dLw4@F+?80}3bnwl!Gu<5Zg> zom6_*Krr)0;_{uci`Th}o{*qA}vX>VsPu$ z?msv}+;7)B%wRCb>4Bs)5U*8kfK@nH#&~M8XCiE}`{=Wdd$h=gId8=H`3gG4u4$9_ zeW`LY+lz~4h^M+WOcp$shMa|QS|Wnplt;;aoE@6Jxz?7yuPqwgrG%TK3nv~8^^9e3&c;JkIVmqU1h(mB zLvJoDM0=}iYPFNy^g2Q&-TbXfB_AS5@Y(s`(bW@8aDbHwO#Tp?&Q8aKZJgb#Q{{!C zhKizy?dQX@B_%suT8i^|NW;}k-ubIs?Jfa%d`TSQW{nQKe!YH;+2o&_X6EpUUBNLg zVN;)cSRy4-kBx~mOwoFTTwALyx1RU4mfXlbj*~r#KYUg4$tl6*@@oPJOI!OnU8j+$ z%Oa2%qH129uaE|Ib&;pB`;Z0NbMhL^L#zvq2b*0^$v=uqv!5iHiJ>@zvzXM`WK<@7 z8}xM^iZZfq(YQK@Wud64eCKevCqoHIPJ~B)v-uZ~tnSwD@njcF+GL1B_yVp;oe?H8 zsj8Mpp1_MMzCgF_l1XOsSgD@{7JYy7=?XmAHBqnIgUOMUC=x+4J`OyNB?8$_Qi!dc z4GiwD%rhM!J8I2x5@3cjNRrZD)`M|U!D(=oPhoB(cO$9l-8oWf-XcIfs*lctZ4jx! zNP6+ucrE}P9y_Ik2ex?)d$1jt_g#vPM@bB~?UGIKWJ&R0J1~SgtyV(Na4m+qC2%y5 z0ZED(WU-{Y8}mvvxU_^ikUbvOZTt6=r$pW^I(Tjqi%0FTbb&@t)H@VR!YIg^cDo2(T{O14W&S>BOf zd8dhDdxQu>PSPHcdhF~5Y#Inx1ULI`!cLNI=v+TEHPQ z@J0a_q&o+IuNo3jrKS@eQ>v?UA9^wZN&>q}g} zxL`MasJOS+9ljpt!^P!p!?q5@4ZNRC=K8=%MiZU>$6XF;&jzMBrgmOtt^ziaumTNJ zW%kCwbxqyqCu?sA=5wK;Zg0FGhw<=)tYp3@rkSzSLBL0PxPhz{?j=aJ!RHLrsOGxh zMLfPuAM7;51Rz6NorrFqE)gi=w!W(tTrW7q-zqrNX4dDBrlK_%IhpK-%~@8Qiv^;N zs+_T(!PJ+xQP)U3P%<<~Tre6Yg|@AhHCZW`duG5%$3Jes#_zZWq`3O`Y16OKWV7G5 z(?jMjS-oV1=4zkihe(sDpV&8{7BLtTq(IX$CZ%U2egK)IK8uua32f$SJT|*$9g@HN z614NUfUt)I7vpS|gWo-yt_+9U!MzQ%lEQAhwdqQv0R3UsU_m!pb~G9(>Yeb?m8hbcFj{X7??&PM zocXg8jm+MiXGd3O8?(B940)ULsF(%XwKcB_c_zFjp^hZ+B{@Yhq;GbWFwuESL9}EB z)1pA|X4up?J~LTDX>EoaIGN@d78YM!k0kqYk({K-DJcSC{$xd=!!SGfNm7jBvnBW& zGE*cSEa5>BH$U8{Se^;aOACFJ9dv4wH^j*+SzQ{X6?CXZiZ`_b((Yw@nE+h(Y!81n zVvidNWS+Erp2T~HKGnvO9(%C67Q<<5CJPgNi_?3{DyQRsr(x(K=?-a9BpPL2^LtlY zCPa9}so2)udaxcRrzLSC3+B?qMM6jXYVufjFxD7!d2V8>-weZT*d8>fG%}8)@oI8cgp>PBtE&b9m}ZP6_w-5gA$BVENIcfdNUbH^jwKSp(ehLxxLfQJ#8E*Ql9}LTAUEgb7WWqhlGDKPE zUUrlXCxy2g*(SoB?_HUv0LtP^6DFK4ZvMSnQ!`8bk|~eV$;1mf(v)0RDJv`O{L)vt zEwmAGAAUd%H#nJ1UMy=do-MAJoMx24eUd#y*rAC+0-G zq&PDV;xn_GREomG>?AGnj1Db)9v3N8G`gA2pN{TCi0zmkCkZC*!)d#lRNS+N*$J4I zTqJJuMh;{%{GT%%egJF2CU7U zhc%X%xnL~9oZaIsanX=dK}LG|_Q)t4ODx8QnU&2&YUHv*I)_*1lqL=XC3G|*m7Xk{ zg5xzCW=|wT_}T(#U{VU`Fpu&g#NgeTlSE?B{tS=KvP{UKO(13%b(SqnD)}}0E5mt1 z^Wg`xLRKm27S|oz21s%b2eFDX^94(HPvN5?8fU?rqg$+nNCXdSqkQWyT`&l()4ajz zNjaMPeCs!E>%)i61^KP_}mO?vC5ch)Q@g%4ar z_Ym?~f9f)G)gb#@JTj*VX;DNsxu}oH3JV-lUu=;yKS-JQj=mzXtXAoE4=vZmgy6DU z(XF4#3767LKK$S(TYq}xX9TX*DE{s@wpV|t^{@Wc*IGZ@;;~z&XuA8;vdYKrxBj$M zwOXy?R_pzrF#jSQwOa4*|LosLzt;NG_kZubR%_g9{p8nvyVZLCA0L0Mb=YcM`LPq6 zg*j-ouKWcLOwwwZjc;82@Pn&SyB{Afk8zUl`}^_n z_lq+A)ssS~cYEd1 z$VpKk7iev2a!ytBT%T;ye!_^w+_m#gt)nN|=n#%qoPtNOUM z?xk5=oCy!u?__hp&|)MB-1mR6ajU&A#0hkx-8X_|idM}L#1>0gm)`VCCeKOVGd)AT0f(S6u#*A%{z?KH~0ULaQc10>Fdp+J(G zoHmGy<0P3R#eQD-Z1%rD`P;<$|JffioBfBvX74q#*-!a!z+->Z4xZN(HzAa`Y**sRq!A|G6Uy-f$F?tpBkL;7IO;coDL*a?R|mH& zkB0K25$C3Imh5GD0|51~{tol+-+M2N&HeC$tL}0` zQBI*X`pBRR>jb*zS~m|f7%WU)XdI16Cn_M5(%`rOc3dLp3vFr;RTMY0S@ep zUCGDxtJ|pSxoO5hP7=?ovJ~6v&PGem?iDiJvlZwpu)ws8;C!}{IANw8TFt$iV{}oM zmN4A4V~jQKd0U9EVy0O*;jnf$-(y$O6=S9LIc<=xJ{K@v!~ z8ciI@(X86+v1KA#imk+2BFWioMShxjlAb;D-sHVEl9iRTl;wl67bs;b5D1i|l%0?Q z4Gg0iZ@ z-feNt@Wt^r3|1BX6kKQz&Tjze7S0&g0g z5sFj~JZ);D8RBFbxZD7w8OIHrGPoHR>w*(0)6fMMx;R$jzlV54W@u4mak+owitn8> z{5~XKF?q6|_1F7cr&bj)NpY_uS&HV$fi=b*z6y`oVyuW{Tlb9Nw{!3X>s z1II1T50CP+W^|Mpjcx$r$P15msPCrGP=^MG!@rO9Tj9wx0$hETNP&NF+f}GZ$cH4M zd>V5hY3T$*-Qn|4LT6N(l(Zzl55tt-QSQbD3B~wnL5S(mJlHwyj*EPNOLQ(pwQ}G| zy+jj#xM`-VClR#_22kGsI02X1U+Bns^)0K-pi?SfN=Hh_rGzL9pYL&e@Ssr8j#M9H z5Sc6sMFnY7G#Td5557G+d>Qg3RS2kRjBKUR-ceT1RTX zK|Za04(~TgrA3a3wKNvN`)dB2<68bAPw{>El_%WNICyI)wF4OzrI-|4L0HgAkyW3* zS}N_Kq#L1l_Zz;UgsV93!3QyyQg04o7CTk21d&=2Ys4PQsF%&+gEPQtEB03F*^!jI zg-@$;5l0ioXQmw=gKi|+kqiLGHmKYbJpW8eP^s-*iI1umpm%CFZrp5zt6Ub$(v%4G z@_Mi6+H*xdPxpUakVqhZPj>+=k#-$!B!D9 zi|0iL`7YiW>>kTc5FSC%oFR-vcQgfEv}^H7X~+UcMqnhT0);0@2hnh)3uB;q-uo(WxYo|$A&26n%OIcENmaDCUA4GUuI+#G`fP6 z^~zMGU3|;#ZB4>pQo9r4z-&ExR-Lvc#n;sCguw7AtE5&z!IAWjSX823k^EG%X-=VU zhXDB{G<-+Eg35_FX5!{z+A1D27#5M58Wfcr^!n^YxUgao580}NXVe1Dy;@$J@|`Kw z0%`_QViA3+=7wZziWCDqR0~FIU8;xFZaG{8V-To~_zE{K$XXmbysOfNH&rVD@9vFfTKO<1pxKeKt}%V2LGr_Z^w*~ahN1$uI+J(}40c|4}Ui8-)|21|AE1Hlqn-jwfDt)jMsdb_l+Q$DsNKn^znk+{P-NE{V^!cWnswn2MXbGs=$)OwI3agQ@qlk40~J&z$1f|?M*$+tNKJ5TNDf*iyF+{g;gkqbzoD-uq!fFNQE^rFp z>5aoJWQSZ}m{sacO02DGL|zXHr>SF8!}93$a3TUmA|h(xFw&6D!_`%zc&W_H#GGjl zlsyxfo=8bR$T(xUoeh@#!%(~7(|xm1iOcB!l#-f6-X?`bBWD-8y&h$hK+upZ;@kJtk<1aBc94-10)lU z6o6&h;bi?eM)-tOK&V3?i_9}P=p+f2CJj+|dY4o^N}ftt5}zdraoAZvl3T{QiWN=p zMAh&-YaWB@>X0Qt=~(f$l6qo}W>HxETF1yyc%<|J4J{(H6pOXQ1W~}svtSZ6>fGwI z9AaxG8f~pri|4HHA?`Zv8@?%X^9LV#i@`JUk_>q@Rtf~OyfP!s&jj~^OT9*Zww$xR++SIsoOPz4=#E*S}u4ApE`d`@X>exe1cJlqcfpF zjn!XWY zwQLT7ezUGqvrB0qy)f)g9Z1Qv=~^HNLv4AvRq}Ru1Dh~)!PQJ4yZ!dj?q?w1&rGf=qqD{0-rPN5;(^jvE0BXgWcetI_s2n z2!UKg>Q3EsrI$J0!6(}#wMFP`S&mMv6sFqw zy$COhFZ_hk0?t@j8eo>RDxI%|wfgC%U{oo=89UEsp@;Nu9wjh=`(>P%vgF zoam`RI8mqp2rO#!4nmAx7fGB70YvhIRWvwrVqduJxL_k;eThh-&_IA=$<>F7|2?5a z?V-R*iiNqRT=VAS*siacHHZL^FZY?gdSvQWt(MMo0^#>h9pZU^#jSy9^*@00mm zLIt9iZiimV02c9(ye82a@&1Q8c9rF=6uBxB&fqPvAiKqN-|ZM^g<#VTaW}a8k(_{V z`Dn~-Y5YkH4S;#*mpv>mBB0>~yG5hS`^x38*Ob&C#JvNit^8VYvGIl6hZM`Q?0}ZU zR6Y8E6@n%V?oz34d%1QrT$gD|g#ch+bFd{KM<=y3y5LF0M2j1&kq`g{%u3bAQ>`HH zgdhrbd)f(~VYeqT?Z6u>r!J#hWF2sb(LNy$dynfWOneC7PdwrQ?`^G^{+v_ltva4B z1*G_#Is`)B!|)*z4mL1Acg#SPCrvOBu?(?OxWOT`1)`oVFTf!XzqtOX-O0g_GYz$b zpisbX^xf6v?Vkrb+x0uHJcsxIpFre`PdrPZ{U}7MQXLMGi5VXgfm4#i7xu+VB`m;A z3|Wwcg`+7-EzVs05yn(uN&LItsuhg#dbNZCzKQ zUy#NZ0!3u9lokl8z>5|z+Sn?|!_!e|x?Fh`1ak%wD~@5~*yV6zrA}O}|I64sa2GMr zIyq17$tTW#0_*qGyhh>a(&1Lwu!H-F##9C9*;t~Oei0=K@U(^$ytGVRWjN1XIA|yd zxjqhuLVu7Kh@uT;q{;{e&NvEn;4Zl`0yAvsSxAW%9SPh`Ci;gUvw(}z-a)`AgHfPY z4q`>D61P0T5OryTVIv}Hfi5}2Y3fB{;yLO)?v45ud+?2VkBJ2lCiWA{{?sB&8VFXv z3w13B<+6-GEl+Xtc-1WW9)}%ijE3cgJ6nTnJH-6Lsn(RiklLM)%DuKlO^SqWV(_F8 zX_CFk{pb+SlMe@u`z|qwn2`S^WBNztP1m(3(P*@GAg)8*h9p(&8x=4Ck}%q;e7R)T zaWX*mOYdUq$8r47DE7`7u2J+&7vji_V)$k3d4M1QBh*k>;1JwLUB`EdPI=sSt?>QD zv3m`n1`oRB0UI(hil<`tM|kaq`gH|Xyg@%_kRepwAg(r>>3Ue1PCQR+NWC98UW6=T z@_k3}p5_t@sbD!HU{UQtHIE0e3<>> za|r%S!kruRa!nWWV$H44>52;_rK~`X49T7pY9`~sc zxS3S!HP0EY9!IOIm@=jXSGtz~E&7xKqBU{k$PwDS!sc<$`pA(ZDl4umiLY^8unR&m z;Rb=>O45jMw$yHv0cdcL8WAomiB_~EX%0AWduumq4BfYuk2w(AXr->hVrm(bhZe5-FS| z<8x~^Tyw97w#rvx?`PZ8RA|#*Q9*sm2$DTreylx%ebu zp9BK}K6>(6;4bVuN+2Wz+iko_ic5quQ}&lYQeaeg263n#zK3**dN8V$4k6`a$o@)% z!yJJgqSK~kLXEVMWe^ZGL=hA5)hqF<0fJYwJkN3Qws9>YN(X_+6HUv)7YvX4j>F52 zji+vddz*YYG|2eub7y9TBO6fAZ6&0y@RX!CBFZ+tjpwpio*@LRp!e*GDTpJL5J^la zq|+tj{)vfEVS%F{oU%%I)JXElG*4`$WAanFL4k$p7QwU1rVU3oG*BeA;;yH5s6qBo zSDm&;h3{`GK`e-r7XwogCe()<x z;L;!Ba7nVTF#^mtycC{Osz1ht^!$5s-p0Fl0#^hb-~x|!Xx~7ms=#9lGv_JX41s+i zkQ`)mG*V8;?+S|a5_*X!rBo7Kr(ZtjH_C=vNfpaZ@mNFvMERcOg%}_Ct3Asunu56n zNn)@$%r#PiDC5ZxeWPL%SJt;GqHJOc(?UR2{ArUr)1Ff{eYn*jjseoN1KdEcpidvu z)JuhrVA{s-;IuE%ng((Drft{RA*N0 zwL`2!&?Ik7LbYbxe!#CusD`0Z)XaqG`8#Fx*sxU|V8T*u;M|rT5qW`y;3-c4MF@c8P>G3_)Q?{!23(f| zzvM+sJDw0phTs1z8U6Tl$*KE>QhP9EcS;;=AE+2sS?AJY8-9UV)xPrs!KGhDTzaF< zr7wzY1|lHi-vGz{#XZYNu@>8IT=XO5K!9_nVm>j-jPLM)A;ZG@r#}dCcW-yPvm@OD zqf@yn8ziP|q4AaqJlB=Uc4qR~d>2%_(VX@y-z=d02$_9nEq|^yoh~|+%(Q7Pn)6Uf z*9*9rf+gdvLy)i0tGOne@#S;IJRIhNB*Hbf*kH$O|CGm0qNPDHr}Hr+%wrasR)_U8P8Wq9Rucqu;-jTSA`w zzbeV36qBT{?Y7HD10~B>`E2!2?0$28(4KJy?P9rBG6zR>)fFoY(zPu-(NlumWLjB# zH|`s*4`~W{BHK~u%oXxI(IRjt5btpkH!tjq@itKuu_o#kpWHy$K__p z@`E^7Ps`ZrwL>w}M&9esnGk(q0;}bty+*k#QV+}9 zLxe`+&p}cS$a)2Kb=7c2aST8(igIc0mN17))pi5W`j;lcx zv)KavpJ?Y=b$P=hsOdo~ooSxz zF3JvP{A#;vPCJg@4u^Q!7hKCX+pAcn9Tc&4$lI{sxTSW_wq|D9J=69qNbTG1Iu*wb z4+#(e)=}%WC(V;RY7P3qr$}=>YS@`FjnQNk>8f^2WAS;b>OptY(X zxQb<46+`c;oiEJ6;e2uIUGxXUI8!!{Thmq<(h}lLyr^DVx8u#^*yF%)qf#xy5R6$t z<|r`0l^o)bJW*Lp2~dEQ5=#Go{(_7+NHIAYf!jIk3wm z6h8VJLaLRIPFkSh2}@tD&fn1_3&Ngc*c44pxUUr@>P}(hpAdSgaK1|IObV2sVP(RC z@Rm^(svL$@2p@>>j;c2R!f@k(L<(A02C&|GP_VA~;MF0?e1iP~;F^=+KBb5YdhC>; z3wn>TSY3beMFaL4KsYj2nNmLJw=1q+S*)&K`C>UNHauhEu0hA$aUD~sx_;^T6X(j| zLE*9?>kY=$6F07)VBOGyS20TuoLVeBMry`{n75E-W6fwJY+?@Nc6ewzK2J%0Z22Ov zPe+nq*GX~kxO};DrXbDOjhL_-D!?A_t%!>aH0=bqq`YbZV}1g1hE2hxE;bO{TT)0c zUeL%u;G1@E4`i^}6Oc6?!O;3s8G04Q3IW|K5lQ6yg;nU))=d8%Z!Bpy7iHt<< zuhCE>)6~O}mN6FDO0aNY*e-W8a&>7m#Cuja7}8%2Q5 zG!n&pRydfTA&oAc$e3^|V-ofR0*YGIn4qBsR4F$7LKb;IL}@M~7=(qFslc`KiyBh} zz9o`Iglb(GbCxBni>RG&+RPx2t=J_HloeG4b=R%vPSO(n#Dzn{OT3l>9mI=pMC;ns zta7Gn+g{6?F>z?HnxwZ}CbiI&Qks*B)Y0eI!VlnySY<<_Ej}_XJhTuUtxWv7H(>n( ztEzjUPY;gU4x0;+i27L7Q5Mt0FfrS*1|>{0ol)DPJd>>NU!M9AM_z@!At4iYzBvjS zWUeUHDV|?=sr&3w02ibv`F^Baip(&khOT_5$pTfymEF3Pt1`Wuk`0g8#mHt1z(1~f zpz|oG5(_|JVrUTEwVJU8P#m6yAR-FuvCE76u(l9~17d4%*gVWr6p~42Ju;b=;9$hE zqi`s(TMBYLrNkYssjA`n7Px4@0@U_H!Ag%0_tV%-t4aWf>7zuGpc08D+qrAb)I2b$ zfdLmG$rYwtkikr3{Ssrr4kL*PTZp72!Qc+ZKGQZ`qdehgc^zVqS$jLaxm3xV$6IGxD6oZsay?#k%^B;s8r%5LC{OG;7O>}n@C?(KVEY)i zdS#G)A_+CfvE}&=K!}%WCL%Xw8BFt0h?z2Zan39r<7H=7EMLWOA+5V_SY;0#&;dJ5 zz)1#dn#OxLF$6a^`_{1_Rg6*dor>XGMM-2^37-xp_KKhBkgdPe9@$_zekj`jCytO`zJ<@v^J@+c@0}PN z86JlpEiD19L2gYH+=NLx#T7E4M?vW!%eKIl2d!${H}DEbTHc}liE+4O?@+R?5Qsd< zaO7E)m`CGtjti!PEUMq7u01BMOUPaSBH$=mL$E%;WVAsc!C%V)5bS@$O?MzH^-ohzyBJ%o`G|-XGg&RQ5p=daM z01+qTyy@mt)SU>AnK#`$Pl_nS7LJE`iz1;y#W?DS>)I-o?V#(l>e#03Qo#ie%2OYuO;gj5g?HRtD@1%Jf#egg9Swf#xH+MDTls%aXmL&q*^>y zt9mHN#U#OXXgh9gKpI5zxDT664pOJs z0F;|i!6sZAYIV5Hr?#d?6s5Bl=iW!1wIT<3< za4|_Dgg!wf%?MHUoMZcoQc;T;JKe@smyO||xO2}n0 z7}Xx}5#VegfE|%?y`5WjwdR8;4S;q8Rco+nTEI53@IZn}d8NFR1r5$<0->)$gnkmgG3Y2diua>Q%Jc!7?X`c!VT zfrjJMz&L?@4ANL9A)I)U@8Ugy3l(QC?;J>E)O0IV)C5h}GeypSZOJ5khfxX~G<0`C zT|3^KvyckLeu`#cTH&@EqpKP)@&TC*Ip_+GcP(p)qEnxgO@GeFQbJ`p;yF1Km!sxZV-gyn>HQLBClYcuK5l4)gip+ zL0pC8Xv-k2VN?OBL~H5G#qg#3=7}ktylsAB3;w-$YOwaLdwMvm=KU;Nc@6`Kg4*$ z_l@El?Ad#PA+ZysA>0^8u?xWc%@Q;X)islXqeB74ihka4W5(nOqg1i%t4mJBuxtpC zPw<4WG&tm94Sp4g)1(tTA&@R7Rj7~^5^i2uA+&CF4rZmPAzWml400WiT86LoIHg5l zfrP8{X)sB4BIBfL(gxXjuv$XjV^Hx)^*!oXD_BjR?}O@1o_ahXD$u}p_>p87Cg`UF zGh@8(nt_R%3mk48!<|&aUIZWOyyeuq@}fLBtr`+okC-aVIj9JpIj822x+d=q-OUa! zF>{{j!b^H50`^*44`qBf-A2bEK-8BF&rf;i?gEt*uH|Xa5av|a`9FH(*jQ}4Zk)x@Q>K7Zk^5T zZ17K;MGJQZrVWS=cWh*`G!PEdS<=bKef zgeKrr3Ft;dCzfsb;(qHApEF%BDqP6MfL601F9`qw0*gaz0S3E5(>2lm4Td{mxU;5@ zyF{>@+9r`!NNhfi`zG#?3nCY7!ZV(1SX46QAd(OwFfyh+Z@G?*r*K6 z3CVyMcLQ909vqM;nKPDcmU!6!B_fI^Iv+P(+7>!el0n~G94_`npI+6$`g(p5Nj~jf!agP~zO(7C9kb~xMO6T%O z(oVT#y3!>i_!sa}!5110fb1X~0bvDk5>caCWI_+R7eHkEL}{nZ;Y*5x}f7>x}C)(F@%CYf^Cx{hvNpgOb!Cb6f?b5 zB9A=DE+ax>03HeuK~Rf;B?3+TYZb!Oumqf_gH)vgxb-cR%z3lyRPkWbQv5g$vZ2;i z0Ml^2)sbQgzd`8#c)kO}6)mv;P_$EUOgL%=Az;lQV-q7#D`9zJF^D$_XMZh-X~OVQ zJ+KU9E?xEN+BapMUdn^Q`PYb=P9T5@+VC@D@^X|0MR9U@f9F41bp`>SOG z8M%9er(opnk=~3DAh4%8VOFZ3S)o^XPUrG2QZ=E;Yw6qf_#;%PY zwv&3msHWEn2T9qPg*a09Brqy2paoSRNY7HCa7;|l0*P45j#0{}f*wYjM&={t4mlCH z@Qkad{QLPUOANaZiC0rf zrvXn!4+P-RBnS=+#JSvW+GqNswdp~+xI_rR(b{y`Dh^ha>CKa}m^=%#VkRKk)W%JD zd!v0}oTc!?NA3E$CTQxgjS+1JIPP7XYw{OZmgZmQ{7}JnMBHNnqh5syskwA|c@CA; z&?DXRg5JkQZ*})8X_5MV2P9>zSa!`fxe%S`im_}+U5uVO+{6bjD7fdO118wofICG| z)e}LeEqr`pV3g+yw4)nr=n5kqe2liapu~*GyAf=(p^ybPm&fxDy{Q9&#)T3GCoXEf zlOhclu45F6FY4!b7(?nQ@KU)2rLQ6c9ttBy-86JUO*;b<+%_ZZM>++A;Dn%M%NsTq zMm(WMC?23fUA1xt46xuvJi79jj>CX^)5R-bwW1^5Fhm4RID1IZiMeRPqCQbxkAvSB zoXl|@qq3qJ90#wmjKo!a0y;{i#c=&Tq+o3)1EvaPMt#sumUvB#2w*jAApDw~j(}AIUJU4>}gw_YLk$tW?ZC`i`rP|rx#dB>Z}aX2%_~eRik*!m^Cw^ z93D_78?857SMI_@JIBS=;S?39X}-7Sy0FB7T@#oynw3Jjp*BeE2DG@Fx3i`PZ zEfGYxNi=V04+_j1n1x`cq3XRnF>J>3m#}3D9cwy3U{A$#3$}yjr!?aVdZ(z^Co~Ks z?rHHRg8#^U+ER1{z^zam~hXv-)BU*jZ@$ zN;U-hi#YN+HYZknNwC3vAA;;O#Wrm9wxht)UTa`ZqlJch)xs2$LkjQlHNpnUKLYZu z44JqVAqkuBp!OI-OoVrorwltGQ7nfTLW_2El?YS~6`=kUvnlW+^O1?`I7C_d8_2HE zI#SU_E9r2@lRP+PCAHcik;UOwOI`B_%|>n_KC$T%1Bu42D&U89$LLN8j8%Xml2QOh z(JjqKh43H^N`|2v39+bHSf7ewG+4!`03r!+4YjObm;ge@lfVn6thE(^dmkMMTHX3A%Dk9WRYZI<6Whlr!Q`k6)MU;AU4^Uki5s+0Bn4V}1k}X2y zd;k}k{?e?w&ZVu#I!kvraW9Cc!K-`>h_3Lj6lp0%2o0F@d;w!>7R)G^q(1=+ zE4U$XlDL(s2L#bq;LX=Ztb6tq&uu{v2v{X_L1uM##UnJAD@;E?ROQu+PyWS&g!h5=5s>a1&&v_K8qb&_mw zJ{@6aFjwuRrc3fxnhsf(1s*mn<&Ao%jsT@Dn;(#TwH-LV0_;ua4TuvM6<1!QFkM4C z;6O_rAh@<7A&sjA0ZU{W%sSVa@9 z93X=;n0CJ8AakeSMVK}w=b>mH7%9aX*>F2!E=!I!NTG~0N11U9P`SOD8OfQk=+s<^ zKq`O6OwEP5`osg!lA5C8ib509eU3t!hfdY%^eFemr8i9e1{avLl0(ZF@%@mKhfe4; zBq`|&A}dDl22UjOpEgZf!=mz{Y)!cP@F;;iWdy!Jz-6VdMMI<%9AcSOj8!TqBYsvQ zu=13X(zJje6q5uI%`~#!#4FTN>&mK{8mSvHS(DH>ba+Do3(;X(rY|9`tq7!O*hLem zNBC4lJ{6+rz_BW)7)V;l@neKjJ;x73pBUsQGFcFPzN0yORdjRMBk7yf9KoOC#-QZh zxUou1TH9*G3K+&NU5^mHtB&d*2B78(ODo$7{GAXIm1yJW{!_d$Gzh_-LXX5XeXTs;a!Jbp8VwoDhD*JxB?I zsN@Kf+x7V2m?(k&GB`Ij9Feidm84 zAKwb$q<|h)F~n{yC^>*nTx1gp7?0)cEjzW+e#i68l5p|F%o58-<^*^{ViDt;i_i|A z!-lx))O^zw9y?OJ(4Ij-hSO8w&tk8B#&RnQ5Z5LX=Tmk!H7gtfa27Qc$fJUfrEaC9 zl+xiLJ1K++wkCpY2(^JBOSuw7_FOl5aI`-)JaE%QYR|~XL~5dM{JNdmyf+FA>zxUD#T=A zw_BaK(?=vHbc*GbI7B+LkZGZ0s5}`aZum&Hp;r$NBiN!|0ts3TDa_y#2PNzb&>s1h zRE|Uh8%fpL^ii`YquSCuF)%hZGRDUQ=!iW@pz*`{8JQ?f3f(kFCX0iT8;CF?P$A@< z1u`vch<#%&9PuG|XipUV$f{!cT8S_Ov=_8G%Lf8K1r+2E^eJoo>9Z!wtAl$8`G<)Sh4)=5#H1Fs*tO6LmMqwU(=0 z#()HANqa7)7WBMi_&CX2x?`FGi}D5DI_h|SO6VqS{9wp^wr8YotX~Ow3?>?@*+CxI zQ-%;lNeF?Dxm;rdiSohTMx5?Kj%bX!M>R^*Q`!SXMRXcgQfPgmt%~V_b|ciEa3%5` zrYW>?Y?@+1uECqQwC4o1YZk;>$gpv}P4Y{k^a+Wg=#XM61uh3e^S5bgCux?J%?)00 z;N%K15Ljo}L;zMJ{RAQZA8qQPM-6VE0xXro55)0uRT8PQpaC`dbCz2| zqoEx=Qb1NZvPsV>@o7JNd^mIzID!L2HK;VA$d@{-7;xO7;6s@H6jL%K8mn_bUQ`l~ zjf*PHFRbxAVF4YH%PUd$WXivI9Z%d1u0`N!@KZ#-ObC+hrNGrlF%)`aJ%m;brRK(3 zahyIV`WO04;29t%Mg-v^C%N%e#iq{;v+$9 z4DLlik;tNxbP^*L=0CbXeY4sj^`Ux2T2Mu#IO+t_X)CBYGH>1+4KoO&E&)MH=7JHi zG8Y*p7_rP!$o(Pr&k8hg2z`rm38!>LTvuG=Bw1u3=b)N);D=O?grivQ&QW@%5>JI3 z_mC$dwqXR2)++u^^Mq1W!27UlA-uv)4%>0j83oWKA|PuIjY0Zau%s|NG;L(XgGlNz za))hUL3?r|m{gUL%ohnh9@=>e5^;&bYOe^B%}c*;;HC{dR_@^X@oK)sQ|+ed$IU33 zx$(wYI2r=QnC?go>^@4Jqr3I~d+|DA-Gqsw5e{o&In0`9dOjq<1pX5@Ppm@b5FCId zHl`whmY{0AP&i!Z$YC49NtU*jLuj&0>_KL^Tw^MRlLBu=I3n6=2q@Sp%2bh(_J5-D z8wV-nML0HDB-tTNQh54t4`0uTBSOFc6G)QH86G84lNKIv4sMQ-@EefH=yvj?`YyhXTnEXzk2=%h>=jQAxR98BGdt1TPJAD@H0@^L zaTiR5U=>9Y3E$xZLxxp;_u8TS)7i;4Hn9ts7*hd)#Oc)2=q7f8`HZn+jBWbnn|^MU z8Qb(vkNn(fVkb7eVjW`@#x}Rz#@MEx9BX2;j5V*vn?Pn5Yd%wN$7GD}S}W%jJ*5SQ zZ)wVV=L|^bZ@Ob-vD~ONQG98K+yMPP~d?=4hB1IZS8{C_zOD41>|r%QG1}0jcN! zD&V4vj_?pqMi;yuVps%{SR#Cd6SGlk3Ki;`!P=w?4ptAC_L5718Sz@;yJ-NjEKg#) zB48y94>57=5a1Fg_;@>qJm0<494LQ8+3dWnl3Fj4)Y>jU9N9s%hdxuT`n^@?yQ$qh!y!Fv*vHb`uPhg*V0rz{C{ zrDlQ46Ws0Gs$gstuqX-xnXz1R0d8!k96hNr%m-RgN)c}@w()#6+mp&?^W9=3d>1mD ztMPBzt?d@MO`#rTyZ6*c+ocfh?Mdf$K#@7$uX=?{#&x{3Y#~!}ikX>(6pTX*B3%Jr zoUkH*4Ub%>LU`&gk(EqISbi41~9+Yjo*Wbbk>| zN0N1Ep2(1btTzdH1zHI{LC+9IqW36F9=+b6T{4eD#=(+#JYDvDVQoc(kU)Xy4{t1#xxs-=QC&)S3xexL;8LNW)-|SIoZDZUH6fQY zDO*&2f30HJfH#nWWw<8J!pfI}GZS;BJs^e=Gd4l^GL^hZ2=m+dpv4 zzWsyOUUy(jw(kcEGYZWx5Mmfw*` zK_@}<4!J=tw+N{U9p z4Hfh&RYA?Nd+b@mnjCZ*D%^CZa3eT`P2kFaqlZj%DO|y)tjkc2jICV&co1r&IS3o@ zv{5R8gKk-Rg0MRgKGfQp9OT=0a_?g)4}=z-eF@i1Lz2ih*Sz=Ld)&p>@ND z_}bDKw*sgrLQCV&0C`|z` zkr#ub^PQBU#PoRU9d|{#862JOUg|w?j2fi1C6xtU@{PD`T&InB?5W5ohRcFn0V{JO!Pi z_o(OCz@2TAPo{P!idM-@v}yb~9CIewbsXa-rXah834|sam7mZfuD2A%)OkQ?Bpd4D zD~bCFg*`ltu7JY3?l{Ej))7xft}qkk5cXK!(XUHNRIjqd=fz#g7?0He(19&{DwxXSYKXfUNC=Jy2|N@-P{HpZuxQedxN^N_9wyuQ?*9hDZP@9P zOu9?6MFsIElXSa(kEGiW%qu0{Wx`FzQ*hM$Hxlo1!MqCMZ3xxh5BUmJ2)t(Pq!n3q zZ&-8I9QUVUc>4{zR0f7Ojhis!n7dpqvm`hpdf3V_ zw;@CNe+hS&3+mI1yFuV$bUzW8g0?9{+aDSmNbpt>q*3pH)hJx)w{1L^&1QukwhbzV zno6aBh#}8nqc))-U>d5GaDDEANIq2qVuPh|6QFUPVhpqwBiaxQ0*(qQ%2u2ED~s9; z!n^Wv3wQbPQ8OE4K-k$bAk0{pO_}z*9trk}o3B0!5u2~12r#BcfCUko8>uQpd~Mi} zp&Rl{7Y+}30nI_Fs_PtIgl_mTbFsJY#(h%<2FE7`hQ%#*-1N>{w-!*Y1_g?O5?}t{oawGs|sZ zucC5ZR?c;Fue|FHS-W%P^B(V%mGeC-?s>nObZ1Y#v!kb{b9)NEZSU?_MQaKQJ=vb^ z+3g+Mb1D3`Bj2@hnC@3l$#rLUWP7%Eb>&my>yFMHD+knm1*jZEN#%ERZtqOd*PhPY zieWdXV7F_UXOCyI*<3c8>&)kJd84y4zk8R+eci{W%iTwNyisGc^OoV8#|F%s zM=H17a`d|C%2o5(=^aN8_O5sV_8u4<7@p9&JCwm>!!t(F%q&>0Ia@Q_68a;w1E34D zDaF<&c@?igNgXp6C*eQ=n`@F%=3-sSC;H zXzc{`Kzbd<%@)Y-gXdt?OYS<3pDI}{^%%S;JF{?wK<}dIac{1Y@~qp<-p(O9?(Enp zI3o^kb=fD99tn60m$7fm-kngbCIp=C-zedHnGWY6xCLvtR!r4wI((!9`#qKb@|%_x z?oWZv>RSR?fB8lT;i}ero;WCbuqv~>uVS0GTgHw1ApH~+Q99!(%fTfcaIt;=@HkIk zUD!|-yJzzGA#H(C!vG(d4kKJI1dS@HO zUMww;2;c>j)SB4q*uG)erVGJ|fO+*Dh$`4e$WLP%ejIR|nx6_loFJYpmkNQjoMt?? zh=&_Y&+AR(dh+S~_H@1@pU&ko9a+^1d3oZ-Ass-W${j&v+c$-{0TvwBfXF$Z7<6O? zs(K);s;2424n-Ai42~rxa?08suVai2(Q~LVMc+4S&o^t& zf6xT&4COa4c0Xeq*$K9VooHIe*k-l~{%m1v^Mz+Hwt2&O@Uw}X*xa;+vCS8)6+cY%}qrc z6BAqyEpA+@*$vR_q4Tt6H!dtJq&%+-P0R0fV_h148==vQ6I!EdjjDxXHLBLC$GRDs zy+m(zqfxcgSn2yFz#?xB)NJo!!lOS0WMT~Q=uPx}=UT@8v}q`RJ}meK#x?;u0Ib$* zW^8j4;=vZinmfk#_vO2~3yX8z2dA&waqZynZT&lL+;8l-=0Nt^9XK>Ma9 z_UB`-O(uRaQD{#4#$^va`sMqMUzR$%xbUfGzx1(ZeBcF7U*G)Vm%ZiIKm5&$KJneR zAAZxd*Z<4;cW*sw&!7C_oUb+CG5e0^wBNGzbrU<^`vQ@{* z@YbpKUc2y(YVP4pfA-^lc=*jnpZmUl`QY}Kefg%3ZMx}!SHJD04}Gj+{mZtV*Z=Zr z{;ak)?Em7IUiHTp{LLRPwExksKltLi)^7jWFJE|JN8+CzZXeokg4@@<*Ztu;IxoKd zJ^Aj|_q@8)*4=s4UmVKLSs(xB7d`UX1H<3E=mj%>Y8+T|=TG0bXY=!3%(lMZmUsR3 zoyUH0j9_kT3|Ja)!AZ~W{h-m$*=gAWdNeCgH~{n-~%kAG$D+0T8?x=nBWhy2@q zRQ<2}M;FY)J8pVx{xzT8GkF z>!1FNwTmD7wEOh!|ND~7edo5EReIp%qmO@KYe(v5Ke*+-#|OXo;iqTE(qA>tpR#&i z^p)FxHS^o+fBCUm=l70v<%(AhJHLMW=PtbXy_xR6SiAFO!v}A8*u42^ zZ`ks-!Jq7Z*4odEe)-|;&ws~_FJAk*;}7ik!3Q4w@#p{g-Yw0Umkz%1l7Ic)rpKQ5 zvZtM#dc*pW=?5Nv;om2pbuj(vN1dL}f8?vhi@sgCe)g4be(!738~#0a&r6IqWFGs@ z%lB>i^Y6cIw{peM#H$VLsgL6NhdCCPJ`rX;Z-~Hv@4-K!scReRs{emeQEt z*0lc*|L)@agD?KeE53i@(Tmo6_6)`laF~P&RYBG2fuLD&tLQ5-~9D_pY{IyXFolJbD!JV^H=Ar9m&7tzIU8gdGqLZt{%TU_g8n%?ElecYX{GI_|NZq$D4az z^X!kk?Z=1z@xwd5xA49@C*L_f=(L*eJMx#y%Q`pZ|ow6EvUxBto4{`FHA{5H4Y-@kg! zqci{3bIa`uP4C=wcDnnOAHQ?%%U9g~yS;z6|6lK3_^tENwm-Y+(d?z){L@#zu=boc z@HbsH{80bc)q6AlRK4Qz{vUUK`jroU>#YyGsO9I~qvwBX&8vR-$^Z4S-{K%1+tGLF zySr!Ke)+$4eEmhOKYRRE^K-K|{NkNw%wG;%ee$Qb<##;q^TRhz-F(d7{?zB3`%js#e!ujbZ~ez5 z$6t5Ji~sU-k6qI<)A5Rn{_#aGx%XfG`Qu-`e)IUaG5Y@J+_QJxJKymizcNk6*t0Im zzh}qCKehWAR?UfAEr>54`oB2j1NC^{$?w%U|-1TV8SN=l^WxIY0ZR|Ekt+ROUe2 zde-8@kKFs27d?LS$=m+(X=5+^#M}eFe&luezx(2C@0z>gi#Hv=`(^ih^PPWr=O>?Q zwZHbv*PPwnb??=qM?ZCVYtsXn+$&!7*h4QJs@-wd>j$6xmg2=v``#7b|Hv2FWX~-h z`iq?#*>^X5=qtQ%_jCV&zrOXXmXAF2=>F$ia%1t%$1iO^|7V|gL-GCJ9DM8i;NRSP zAB>^&fv?T>-JbPd`^TSr_qxMh$aVF=Vu3| z?|$0LHofZm+ZJAO#!ugJ>p9QH$3$>oz`c^M*ifJ-<<0? z=ZDXJ^mAYBtbO#IA3tJ0rF7lHmtSRlb$iFFZe4r!ouB&P_1E6|%pYC$$;7ptU+?+& zN4GG>7Rtrq%&c20o4ZK)I6{08xS#yKmN5oP2Or>b^7)CACr_S7&tKUD&xi8okFw`6 zcJ?TH-dc7(W9&l47?e2^pKk$$c9d;idj|YLt>ql}ww|5Xyym=7*38a@KWB}y<~8|! zY?S3dX=cE0Pc+xH593--}lH=WH+urt`nO(#xnW=~@$ zH#eQjPHtYaft}pE`2uzl)MNUbJh|oa%cr-nleBROjo7B2DVgZsO$wY_(?!M4XKYQ5 zzF)xDngV@)BV(+K4dvG`z}Y6op0@_Zyk;$9YtCXP(EI{Wp2yf4v4JrcF0XkZYlt0F}w_ zmulairhR`Qejmz{QHi$W8BJh4fTaQx!46v@MJ|LQTcHRHFt*60P~)koPN`Nlr5P>f0oVg82_K+B`5Z8*gPsFM!F=HZm?g`9o#qNF+r%zHoD-%r z@|-5Jlap#$1|mgZQJdHKGkz7|A(}bkQb66HnYGxAML~Z& z_iVtg6Pwp#70;?(%7*f?0KC|M{Z*^JHl}R=QFfvUm?o6jh-F;gs{%M|zbdKuMuGtR zdm|glpUD8Vw;)=sV+`!YCZfBh&5Shxai7On6B^uS!^)n|*tv{tUVlCi=7sR*BKQM~ z2J5gHfnKZH)r#!%TZr34j&SEEUxH>TaS|FnZr$q_T7yxZlt3QER!353{vw(@7 zNrnRyxe#VZ!tq`3fF|8a(hL6CLC;|!J_HRABRrd)!{EO}Z6afYf<)#or7|$5zoEWh zD6gk7VBWli>cZlFlG=yGIZ59^2z%5HFqJ)2{sP9>E9p6~k*`yEAez@wUr%9-{U<$t zDr4*;R2NwC$LRYdjIleZ9U#d?nme$d$EnQI8Dq}}X3ZG8j4{?j!5I5n z`py|+AEh}qGsfNpFBxMAAayDOY@vm|1NpxKqzhy03a$OEfD1H+D;Z<|MdbnIzD?iT z7-NsXBp74cU@d5zS24z3LUV6tjMeCSN`q&bF*ZW&WEf)~r|*DsKP5Qi8Dsa;cVJ%< zZk>#=ZfF>V5o0|B^KQo2Khc2NR6P&MSjC~%6gE2P77<&_y8E1_3()S5akEpMMjIsC8_h0|2iLtYW@>iiJwiW+g ziGMF(?EZ7uv)ND{IP)6DnkOKKR3Vc&WEA0E&B4*h!uD*gyFK=CmwXIYDw%evustiE z%(#y2!=sLDHVfST!oA~T*Gx@}9UPw+=${%H8{9WIJPu02Myh;;Hi~r-z`x z9NecDd!|x?5oY=Mx|Od(?zEOb-nGu?{+CUNbf_JTWlbKXq^{G}>)i z?M+q3^JiTX{Fu!fM)&O>8K2O5+OC%^8NM-XcnHNaMn}dc_KgjUPxbGC3g;5Y+hv1& zTFo;=s@RH|%XdIW=c&p%RO*`8sWq|LD9xL;Uvshdvs42Bp4k3%7(FEx)w*FQTSgD= zIWV|43L}t(5`Uwk-!eY1cWhu{>bilObx?I`RW=RUGnQ@ni_pb6dq(q> zumxf6+1a_Go3@;cXBu|Jam(gnt}7E7iv(8LfJB`7T8_synLBlpa#^)D18_HqaW=7| zY#I)ur;0qmjjEr5untP{w{@#}B5xH*EpiF9+sdh2w}7GLr8=N=$tfN)-4rIOsXCVJ zr@c8wJ8RO?|fSu+7*Oz%q$@GeDf%i!UasYDOdfb4_ zVe@90PeafSIyDzAw_Px&xlyf_DIe^XsxfO8R6az#hqO_xZYdhRIqN{O zpsMSXYII@!mXbMR)XILU=$a+d_AR6A!SE`UUBJIvAPB=MnqFZGSIY+9IkzgNK#Jk|1zxkurst&~FsN#lwg9MwdV-Z{rB2NrWG%sQur63*wBRsw(2NS(vjwAS z;p;eHqLeNuY{7C*HjFtBq+b0Ba30ciq|QQ^P6G@T306~(fjBr7DuQYjHK8kHa=uD% z3#zQwFsWdime{C@)HTDp>T;D*ISWuQ3p@cDrzAyP8B?7rX#pB7R$dyFQSufv35|6c zBdKa1%PkvARkbD2va~&L?3AXpLB!pGYSqM~@-#ro)78(2QJ$LEzF18sS@wkTRJQEeaSAtJgd|s;DlyIxaG0%X+L*RXubJ;R%T}h-Lykr?w(f}$hs{qFvmL}}M{sJEJBFY5B)*jSxF@c!Cx$GHh_EhBhhX3Jf4D294eB=ceu5ZK( z*0GGn3)Z7;1kB*9J$-wx8ygs(nCkDF=tHF#xFRrf-LSiWU`GF>A$1s3KSx#HJ2HID zAo?>@1G@FPAyYJpb7(c6eN+Fwsl9!B_YX|%9}yk}Rpm-;kn7<10CciJ1Zsx{7jUBW z4E*$9G>Ta%KC})ryi;*0F#Vt|jZalxkHfu~-r`WyyS09$dKJC7Fark=GHHQQ8Mjz= z?4Xqm;&+%8zGEv|nfNbwv4x>Yc4QOVAIl222Kx7`;hO&3tm(M3CW~W3j8r8c|Er0lxvWTRU9k!YE?`jk4YFY$R9YGxUU%kxs6#< zsUwiP>Rjd4*+@rDlAP@d`6sv$E+;(3T+Ef37dI$~6f6j$^BQQe6LG%KF;IleT2dG~N_a4LiK+{J&FGSk+E7gK(97+j1F2o@_4j{t5 zcWmFWy?}qDUe-uE1ik3G(}+PKCV@QhU27ZhLXZa?l0ugRRO~AsyjwUowr#YP&bYr3Zw1!h}(4z5b-V_ zPkHzfDZ3CL5*8KIRw^xK08I*jKauBgRErg2Xg5M}+p}Pjo%xOij8{v`RE{0|Eo5)OgdAyl&T`W0mjni_qJ~i2VhW2>%l(s%jJXhC=1=V_x z^k(p4*))JO=)jLKTU=)W5{|<~_lC$uZCHWkbIjv4k(S)%=5fpOAyv;_0nosQ z7WPVN=7w&$k?&3);40mfxqL^2TGaxFXm)uEgH))_%T3jT5xhcm(!NgS#tmme ziixt<8EaN^ya{Gk;8()F%~Zwo4PXja5~JYiUdk&o#hT|k6+Dicg2L%i2L4IOI%#h% zs8(@GW`SpWx`Y#>j(P0ZUVtX=2-pIoz^Tgbq*1jrXQnMX18!e>V!^Eo z%{(>3qqEMa;gzQO8z{x6l-por@RBoG42`* zX@Q0{&va?XXaFBIY_oX#v6@bynTp~0CT<`BPY4Y% zDe>;^&gB)42ag64MZ9K7xD8CVVtF3iivaqsbOM@XPpXoQV6Hc6lu;TB>i1+LGZxAS z<4NZ&AR%cjVU==UmXwlymgpZGzYcnW z5}@L#5?#4G?!B)a8W@rV0=2P;No8(Jret}?P*+egX0v)Eq>R+qo^xs4KBF@KAWp4* z8}TWD#)cCWf@f$4H zuNh@NWEAHt+l zcpg3w@*;O^?pY9`)6UJZIcwO$U+bAgxVA&-TM>G|KGK$*(P#j6QERr`<<+-i z#q<$@B6}zJCJG@e7{T%FxooFyAJk#E)Ll-s*w}ajTOLgL{ih3JfV5(r5pBm_yr8y9nz zIKEdRw=0-DzU32`$)cSbykwXa#}@Z3o5!mT++hsphA-c>eSYKGYO|N&|?yb5?hbk(_ypzzqoLb!N1By76_u1 znDqhNG>N27Wc8H0IgWA{$?L9ltSC1a3%Js580YW=IFk*wl4Em&Lka~VRMTzeBKFmq zE}J2eMOT37)_KjGk{R`vmCSjw>{KDFW{XvHY_VC6ce6G$xni6EzFDc_zJ6eOsV!cJ z)UqnD*Q9VXRd!~bbk&A1s+dToUA8j?b{?4Sy9*NQ!#pNvEW~4CT?ATLE%>0$MGzE2 zwgDq3@I0a1H1`> zVDL>;PXMPO{sB)S2=uYjk7QB)gDmZgjg9ouGye~JZx-Z8k|l;Av#Pr8sy?TWox=;& z-Pt{x$OQ7L%-F4&MkbJ1=*j~PAgj8%XNU;%!Ts zWTMPg2TdQ6NnC1WBv%q8nauRFX8O>vCVlWj`k+YZPoz!D-gEbGj|h*vx_W0aA+0v4f0-=oycIR!yX@K&V6bBqjol@S14AtoA;w^nP)vvUCq>-VlRs?zEU8xdtp=KJv%G z48Ifr$^kWB6E(T9vN)B$vcSBX%#jnaXJ;=5qd%>YDDP`aj~63ZX}yQut4H*&~FdJu_sI zQb1h?QY3>lOvFQhu`3~#ZT53Ei=U?M82#h=RB8_DRq;SVisvx7D zDhV^l6wp|qZx$0_1tpa{wpfN5=af!imO-YHXqX;E4h2Fxq4dPqIbslg$fRB~5^RvE zDLfk2*Io!@tHcbC!oQF!>rNI*Dzy{G+6}k>Ws6-$B7cP^rG5@hoPso0%uV0xS3SE; zt$;@DC~&;~Zbztaj+FSUa@fxUS;?n*;f`pC?9l ze#&-TN7?>UAwBcH6w(HLf68eab@xgTp_JOh_gqMF2w~uWZG=)ZNYOCmmMlFPg{Ylu z#;><-5o1lzyu8IjKu__4^X2mLiMF*8It+4V_~PiLLNC94&SPwGr};HG=)C~eu<$V| zso6EQ{-@og1RxR0>kd2`V5?qT&Fj5hNkQKR*C5XXF`8wd#71PoZ75G zMAXflDl@~i{L#_K45A~|M33EEyxe@!d9bs+yS=)*zFu!J^p+J=ER>dP$m+)^sFR1= zw;AfeuSOpJNXuw^Po9`^#HOV%7II+cN5C681pG%A_@%5^DS?5}80=)-p^xmu5lE+w zg^E|7m<;_GgU4(}0ve8o$Zm{Bu5a4mtcc_A6fnd=P$jT~{6!$bmqkKF++60gk78~7zmLo)Ir7Yy+So6vAE5?~E-3LwX3 z2)RqBhl?$6f%J|@Ku4}=fqtS0_)ugUQ=BWJO@c{0*uQW@sSN>|Az%BU;d$F~hqSqx#Z zqQQ9B^GwI3sLlcEafnfFQSsn-V>nMdCmg`yjYqg%m2ybTy$E904k!r+;|KtngihZx z-ONos41&Q^<_`aJ1^^Jhmwgm~fRAZev6TXRg2SP0kRS5m;3(mby$B;1vyT?SL8I`q zZyINTfJ;h*6#Q@HY8NgSK2&(5%eHR;EdeT>b}gQ?d#YsrYP-|g+1}{ZR%0h3sHOKQ zp0s;lFf0xVwVSLD@ub}YcL-7VPOIMBtgh9&j~kr_-A(9I`apFb)LZOKsWzJmpC)>M z;G&|TDelhF4E)IdY0^(gyz+wx<=D&6oN(CYixMeqZ3@rHXRa{|hCQ%qMs`U)s?6O( zg-yj+T$rB|C4U@R13EPCv-tI}ZZ~3~C)KN}<@gS`L4c}Jwz@QbZw2aKZPjaycDk}W zA1|O{9Jo}e?T~XwGOd^GUKcnEfDEYdO3Z6ONNzA#jt^I{HhD&$IACln$@~6S$ML=w z@b)#!`+irFe=&5UvQ#qNk>lZo*`(bA{Y18=a&Yjy62HpnE#?CEY1t;;k)5+$xHmJW zbbSdQp8wdtsXO-nIzRULn8l&L1!`%qF5h?1%*FPtF&wof8l8h$dCw1qq&Ie4xU>yO zM9pE^ww$+_vIadbw{0iw&g5EUHwsCn=8TOUP|-P+VU#%DM34jKo0{`d>W{N{hz(_q zeh%kncS&UsfQ@FXW7E)~?;1-XV#H?Zd|Elp^0(qw)yr!Zlanul6a{5Ff#?adCP_vO zQaq9Jidri1GDuNu`imfrqKlZm8KlUTI86pw$&3_NnNLb_St#JtJ45Ag=Z=xAmd=NW za6SuKgQxS~&b`i@EVPtEhdkS;Sk0BeFx;<3pFDe1@2_uvyz}_8rB63T_YOW?#XH8A z>zmbfr?D2J19W$jx@H(TR!Ggj8mLFgb+B!9Y02|#=A2|Zq2(XY;AjTYCTABu(flVP802>;s zX$iI>t|i7~tjx^MRI(F;i`y*OR}9bgou28LvieKx!TD+aEgj8&n`@C1V-}QO@dp4m z$}kF?-Wc>PY-8~>Fg?>fg1sgb43?;J4xm^uO+w2AgB`GTt~S)*3h6U~k736075R>J zr5Ee;s+h!7a>!e<3~mvkUkaV47MIEu1HTR_H&+8WWNKxuTsH7az($@e8+rywJD)_y zQlX-uscFPAPQ*u?0fCKDP|6?*%3ULbgB6y|940EvG3nu(27xSMAdUKmxps5R$wn~Q z7njQ`$dJBV->h%JmDl6?s=S7xE-D2i5lLSG{oC9D0e)kAmzE0aS|oi>@*4-#iu}MC z&hnnX=RxK1#N%^&`P|kaZIvrXdFujQHO6458ztk=>^ZIz9Z8D>@lVeN-HT~sDhV@k z*o%}NhW9h$sEC<={lkmrz}PWMhCr!Bh2-8E1h!p=u<+c#FQI@r=0N@U#Vr_svDj<` z;IEDWVAWCgnqYyMgYT8?om#zH-+lxQUZc;!dBYCOLkYnX7-fLTN&YCBg_E=k%2{(H zU1sB>Zz8q~{jZq_lyYigZfhX6X3rwU2UZS5`BQ;&Wu)f^^_O*^ZV6D2mqI|huz@}t zI1%mnW?-Z65$@9njH3HwV0v~57SAKDvri!oKtISzCbH$@gcH?%PS(f)aaln5Q)Qu3 z$IN`W0`B)Q%xX}eLp;G{0vo z9Rw7Ekj$XZ?VFJw%m#Gihfd@N(lL}N*TFyqD!rqr#7!lo#(+Oa>I41~C;PvpC;R%? zVl$HL%R$C}@$D@Q$8O{R+Y8HbHGX}5w0K2_7XLm+i@1G(6?*}t%#pLie4D0;dQp}N zZ-p3x%5y*%Xe>lNZO?aY8iZ*BwYazBNdS*ese(r}W!jxAZZ-#<;`j2e%xWjW+jI}j zBNielg=)p+@-o9o75wjFiaor7C;`|eff;hlsh?5r&OQ&r*#dP5k1Fz?t=&0+DIPZv8KGd@O;m8M{;prGG*cI=IxS0X6x$aG|0kQjourduUH4u5B*D4Dc2J zZ3$wdzdZ<%^3+#@%3PS61H8O*rQLpzDX7wc--r1nhxXtEpddiRTCJ$&ip>^P4J2GOwXdz#EHn$aTpQXM-LK8p8CBR zlBN!<`xJFhtQR+(!|;voGiX|t z2#Ey%P3Pw34Cn?>&Hp3b5Qdd(7Z5A|r(8)=Wu?^sal>&)$HSNfeu@1%$pPPJ z0qcDQl^e0h^!n6`01#*Q{4jJd-QY{?&+}u->pD#FVoZU41fmGr)`8O>l$c#BS8Ax5 z%J$k8`Jl~xV96RrA{z(n>S`;t8u^ffM`1*V8DxMCOQAJP;e!yt4x9*VV{$D{e%%^S zYaeVOLS(gh(b(hQN7u%ITN;_sz#y}ZXVd4&gBJTwppTS6vOAzh0Ji%EhYB4M6jxSI zYa)1J0Q=52vAh7=97GVbe>>OGE9qvKaIAV`z17&LcIw?$r`=3kJ6zrioW2=Rd9Ix7 z+XSH)L6*G53@~PS6EX5!=2y^wJ(uEpgx`d`FNFgB#s>|YL4psx&hHW6H!dLgP`JMa zcJ(Q@K!@MB*hQFFk(b!#CEzzM@zP`3YjxK0%De)hw0RlE@#^C}zAx+(d#<@pd#-8i zhXZN`ViAlm0(&Axk=W9nAG6=kVfG&iu9vkgP}}s>s|T|EsKsv;%mBDr2%zGYAong@ zDEPgn)B@9@h+4oF&XB4LN!EQxI{;#>6Os`P;EtNYsc4xl^CSkda02E#12eF}MV{SJ z;A6`i(!j(Zk`Vt9q9D1{JfQ6Dz#r0#Y|N%GbKuxiRgIAa-2WH^-V~91uf=MH8r+k)=-&(ApFrVN$-z$>4A}%@H<}2$F zLab?~QnpOj8oP{+nmzv@=iXVvC?iwP>^h7j(rIbaBJj}obx1j93@sFwSMF5|{EAs= zad!)E7Z(={{6b{HmRYsM#YK3rI2&0bgX59z_1I3n)`%HeLIn5GJY+%tP~sTKi`u`RC+Ld+w~$B~D6mMV z%%VDCLS^tMuWLnoq0zbjV*Ysy$^9AiW%oZD>8{64IVTJ9q7oyk&gE08V)>&}D& z5k+M6m?$E8i?=(HFJ;a1pOQrt-5H*mjM1=aZ4vo({fe?xUTyt>g0MQ_4naEvc zb<7*u+1hTb?zUr(tuMuUu(Ph(5FP7?_|bp{e6TY?kE67Z#Re4kFKSu?aHMyl5IHmO z>XB`Un2BA8J~ky(c6{rU+)d0BBPHoiEtku4{E}@-v{@okJZ_`<2&MlVdyc6TC2~#G zECdjaoA<@&C~VYAWJ*#viHGd9fP}xXyd(`ezlloCr*xn5e=*oNy7q9Syi*BPK;s#UYsAWV|rGo=BvU90sNd%C0$x zm>E7sMt*VLSe!>L-S$+@pFIcWUU_~OqGl6JBD-f=OweHBKzRjj16LMQ=>mHqV3kNZ zn{Dy|Ts;iI;u!)hLNWkqf5-=N7iEokV|j5N`ec%XhT@iB@Q6S67g_om=w8LE`!EXG zY7KaVomS`mGA|E9z_dS~7fU7E3@Jp0&-9G(hT zs)sKSFd6Maut(bU+>5?@hr;Dlq-b-rL~ft0O5niR1GOtD-;-vf&e zpj^kORax>Nq4of(!duHBF!?Kq2&ciu89XHU^y8tn4{4n z1?d)qdA>0_JAepfwr|BTgVGL5q5#NC*Pxf$s&F!bcGcK(Z*o@y$Sf+n4un4ytGcsQ zZD6PvsHz4oxwL1xETQFX=wr9F2{CQNJtmZfK<0t|Lj)q~d2KhB?dJyk@!2ZA_vr^9Nvl2(snLo>_5+$-ATf@;JgaS-7v| zvBPVU| zSLWgq2@4#<0~+UtdO+})!r{U5zvK$6c~{$d!7@pn{xfde3BMW<5JGWfMZh~c117lV zF~iUaBhy1^`xZPY#gEQUXnq9keo8xnM{-e&cb(DVOEHw z@>7yz_o5JJ_r%`>!claeclZ3@&yF$*isQc+%<*f4nBK_V$7L=S+nmm%H)59-Iu9ow$R0jspD3gBuu$v3vD zYY!UR_3mc9+S+bxZ{Q@9iV4wUzFbD7Wwusocxo*c)aR{CM~`<}59=&SAfFWQtYWb) zROT=q;tz7_bvuo%`p&L8)VoS`#lD(bPV+u;3UMQBUPu)OlG}WXxg=|LS`DeeqFAz` znoU-VUKGI`uJPi@eO6^D7&SG(!2=v^$2RbY^rJ10qR1#jgdTV*H*jj z&Q7bkQSWx1G!cTX39zj!r~(;ZD(oQUL2Iip7^Q|9Q8WSndVx%-se(|VW>zFqYDu9? zCO6BZ9J|Soos(Fw76M7^@+>AHm!g^|#vY60hu1(I5SW2OWyzO$gYg^T9CNaCca>MQ zdrAHYOaeh~r8Nz_kaqznY>802+ozs04rf^hsurC+>1kQ8AITkz zpf&IVyF4>LQ!b7A>`_>rnVTu6wtrRIM^Um32d2AEkNA(V4B?OV5B-1{sj-*m=kLC& z6C~fd#KLN^MG$;l182+ZeZiJd7%PF%Zo+qmC8`IV8`>15(?6#8K-NhrNj-}?rPZwI z88E(s$OEJ-i*h$wFiVl?cvR$f;&X=cSfg%Zaher-{ZwjMLXXD%#|Bf4HAgrRf-lusrG*k*jo#dDRhmaY*Zs8eMj z(d^fwW7;ldPxxAgLdl>tq5>8tT2&2KqoqrLswRO3se{=dQ|)#wM{~`0*Y2HKjf4I! zpxS=$q6neFlprI1FZXIm)iO*LKtl|t@td>42FdaE-0^d}H?IjSBFC5~<@|^uE{G5efjh;epg0IAd;+gK^eqr8M#30UpbbU{Ebp07_xh9&A4=-Gy z+A17h;C+UMsv!jy1@(|JJd{l#N*)Wa2cFq3Wv3nF5oNAS&&D)3!gT5wD>8kavAr;( zvtAkH9Bh1R6NoG6L3(WwNm9gTYPr0;1k`8g7(GJrDo6Cn0E%N?iE!|cI3vsPSBN2> ze}k)?03Jk}Ka-0#7YYe85fK;pdUdz6!(;nHbC;i*);^7*6WmIVFC|=5c`3 z@)qFpH5qj@z6-e`0+A+B@^5mpefZU&mKbno{Cw*T>F@WKf;zPBjGCM+|m@{-{eOf{A%z@ZMBE1s-I6q4LK&OWn zF|kDR0;kq>PPd2#+(avNWQqEzdp#zEeZ$FoMBnF9yNk*vqc7hLM1~A9;Y3-y!9;l5 zk`B#MXg{@FUV+1PMLAqGh<^-p%iA{%Y81bQCiu>YaF75_#OA+uOhjB&-Si5YwtNJM zO`RF^RRScwTCHt0wzsN{O=$TNd#k7%uUi9f#~jki94bj!d5|_``6H!#dw9fxC1OjM zM+yHDx3|(NgO&KPH86vaM)$|j-tw@w@IH`w8a$!_B)h%84B8kNXC|sF8>*^FWKW>* zt*s~RPc~x#97l@dT2w}QGchiunh>RBHPtrc23Tf`*+8w=SZ5j2d)A{mz^n0^K)q|M zp0EvL#U-h{P=IX!CgU|U>BYJzJ^Z`B5nuNSiCzdVTc}?=-3|N<$g^1X&!o;=0FD6K#P`Fw6#l)RL zVWL~NeOEI5O9#G zjHTQT)!UBB;m3I2?&smh&c)*D}Ih;9;b4Zdu6*T&y5BRHHGP?y9zfw{b%z|usS z1fD`>9f{3YE_2jiR~%B3ID+Nl%heMg4-4lobr?HwXgWEo#zuhO0#UHF)Va1?#?-JZ z0tgn+EO1Qjxv`Yzq?g! zHLA7MZmYUo+u2HjGPFHu_tf*|3aA>WH^j=CGjY=Hfu*pxoFvb;s_Ws=7h`|XAMQNv zn2#S;j~;c}{m@-{v=Tn?a?Z#}yQkj$C3;OAa+7vXjbqP3jYG3H)~ag{>fKta@rapv zzH2+-$c(H34W=1OFdcfsQ52XXdpbM{UBB=3)zo*%8%?-e7Pp9}YU+Wq5Q!N;OXB+b zR4v&`OQ%{=xMUZU3wH5Ty{H>Exr8jzwc4ssp`W^$W2Y@xlT!^y&HZ;>ZXTKuyjp9t zo7K+RgL8x4pg9 z?5^!>ZS8J1I!{i$R1mpOpo+BeeJyVGalP7kP;YHjo2PE_XG)XTe>l5He#riV@qSm+ zaJRkopkCYEM2_}Uivo!T#h|aV46Pg@VDU2B)I$#ks|$Eu;in^{t)OlkR3?t8scb-c-hQp)$7&Exo+cWK?CVz7;2% zJk`MT&?pp!r)pwH8PGMJgl?7@zT9ZltDCU!>#d!wQ?I;g_kR1+(z-BMg1=z4w?wNC z>ebpAXsEh!NgB#+H_k*x`^vP*_F9{6F0MPPesym2>BCOt$lCb$kyT%PRDM){*2JXl z8hesct*@F_CC}RAR1K-~m*>%~cD>zh>};R)L{e>Rn2FGR&8}94TL>cXrGEx z7b*-3ZtpfBsTig_Y&SkTJ;JLvb*c@x{iwS6u>K@*0zlPret)%F(TC){Oe zV=slnXk@GAGdK5q|D*oUbX;)00kC8>1f;VXs*TPqXk$iGMSvZvqM86*=$Q!dH*qlP z$;ry9)@BzLmobej8-}nIV&zn(h0l*Q+3r+Zoz5oHaNr!(dj?+g3ih5TrRq(1saHiQ zmK1ZX&XU+_2D<0_a=paK%gU)M%z)|@0aS37bz0RXo~Ku14oMvePd^vec+%e7+1TCy zAiN?NDXDgtKqF>Q2rM9L4KZFpA;WZS(A(cHF&dOY z8kN}ig?Arc_iXxoYa~-E%WHNsK|+Ki1g%vJo3cqtVeEC*~V~dR*U; zR+fp?OuT0LGVLpIbQ&j$snbvZD$E!JWE^aYkfg|jDXbZE5|U#53{r_}r6n3Lm1D~d zCWTU}h^_W!73)Fvnu!MnNr@1ASW+Z3h$1fXx2lo`-rJ6VwIsWod>0F{Nx|EQfsz4| z7=aMer97SVUDFhZkxMZ&IL9dWla;`1X+F>&5O#u>ol-w*-&Otsu6IQ`T zs%;FiB!EC#6aj`q@OXWxaa$cQ3xAa(lZ4(;z&SzF`%@R zZLVQ5B(9;%Ss?*4@gI3>^evSj60N_b5=pH)htOXtl^{fFFN6lyfMCcR0fe=@5He+H zVfCH4(Mi%7Aw=S2GyKK3h?F`~zddf*m9TPiaw;bFmww!m7)690=9CB`?!Lao5WK(O z`~NLNsxY2fN$*cGh6vr}X;4HtU+`o>tM-+1>nTt>Dvlkztbg|yqgmAt`Q;<0R^MMA z(_r<1wes1g8=%#_B3Mh*ykWbT!Bo||p3dx5#8Le{7AQxXb59?J;ystZEy`uLLZcKLKJJXDN7^j9YI{VfO*%A;X2`Zr)?G6kOv7Ivn+GQT@tF2P zA6xi@rhr3yT(N!jy9vl9QIkppNRsTq=!}-#kCnO82dJ2@o^#eRe zspO`Xm%wcbzVgGbaMN+N7>G?-bOL;-zmS~)G~wWcDDs!CPeB4rZT*+zpKV<7(j-+Jl8 z&3n4T=Ff8$9Va4AnJPb5j>&z!@A-!=1R&<;4MubaI_>!p*e78G{gG=%kSa``HQ>~P znVhX72-_4|m~#tRdaUgSebeJHuQN>kIHWktRG90N-Fs|0^bPn*P-Sc@!F!*u35bPh zL6qk$@tqn$WIvfB@M zKmz!cm}!n2AzA;B7x*wy;E?uM;=e!3*~f{(`vrE$5aecAl*iC_X$dUNX&92Cu~IHq zimF8z_wzitO5x6HBI+(qmVL{~pPvG}ucH9}gP;Jguz~_SfIOf)(I3Xn;)wydJ0d@0 znHOH<^jw}{t2#8l@IBI=PdRT79WNO?mA9j3v;+(o3K%6Z7lxX^T+M=UY~_g_PPbn= z>|6nZ7yL3u%zz2b=oLtS1AC0xCN27>PIiq7ECt_2JacT2sP85Br!ETgo8#Dp68%SC zcONCxAp!X3r&M>zJXu3Od^UEX$VW_xr9w286>{S(rIhPS(eZ-o^OW@>#pmaj+1U!e zF$P~8K8qqSfrccYfVvQGFM-0>4u#T`C#~0~i%{a(QOk8kAuYwjSERnH@x$|D;*<^( z{}fMP6Spt0vCc+Aw!~tRtxq}~GNfT>_9^KF{yt5|ONbjuD}b>Q|`) zZ#{GfQ(0b~H}DHKhJ!LmPPa z&-adokcAY&0P$D+C$0rVhd&!Zm=eo(!8}x5QKD}TSc~^g1xtYT63h|x|8XwrU&JVu zLX8(kFnVu$dAnQRUf*f0)w}I_r_6aJZzvJ36xjeOK)Rf>simY>FkWR zjBcK{p(bz{-SwSK?oI^tR8~WhH3*X}>nF)tQXH814kJkL8w|ca=B}6Str&|-_m<<6T5}Sg3Raa^M+9r6 zKr{1R0Vji`V1}b`23}Ru&m78_1U^LTm2>Zx04YTB|L*NPUHxnUV!#R{KclWbj{B=3 z?Mohwdj4}@^wYZfxIDzR6@9*7jeXpQ>M%+=pKNS3qr+$R+;gkEZ9g5>p46UgJz0IY z`_x>YucKI^*X76UsTzG{j#*uPT;m0Luq7t*bpG*T7>1)mJKEk|pFeWGXg_-Dw0h0{ zv#s@&PZ-%tnUVuITtho&3&NAAml_v4!I;8!y|K2_YIk>9jg7`OPpVPf#ArHPA+AQW zOL|zUUh2H?2g)8R>!o_3^OEaI$y4oA+Ryyt9)+06OR5fY%&Y8XZMFNj+URs^_0?T; zDdR=eKszrp(EbQx4ncxcyqjT(M}%XbrUw>ooD~!NKI{iCI;Bj1a&A#+Q+WCDf+_@F zO^o3NYn+A3Rhm{~DBvhwrYap6N`w$zR8NKq2HN& zrg8xaEbujf%@KhKcm;Lfk_+JN@3!mRc3TC^6N_{2M&7zgu41O-_C~APeDKMp%8>B# zDhym&URo$)l!7-N?CiGd59{?N#N}^ncj~Q2RdrNqy!^LNRm9*&{Gj?0w|lEzYgAE> zqU?scXmSm1Z`C`k##(}J;=@$ogF*G{%)p)-msLB})oNSaaFq-s5&C7drto0p{nQkI zl>>WMtspAt*CzGry^;I$!PFMU9XEv^DMZ2Vjd}cQY*-L z+*aq21T)olcLHI6JAG@GR)w+T(x$x8`Er2%SR9FRFyCi`ImL3G`LNOWtMj3#h@Iz= zt|=-c(d~j}OX?{f(pAl53f(>xiK3`dX{r0V1d%sJg{+^0yG=+q=zrD|PB54)NgA znzeZJaIvRqC!f^jz%K`h*abB2Tr;9=?ojZQg85_`sxnlp5vrTmweE84rYkr!k zo~w)Fr>ckv`ZSY5N(bEq%6e%^tV(uAt~oGBvL~S+NUaYW8`lP?`cTI@?uTo-u zLb2ywNeYQOy^728d zFY{!_{NYF-I2AS~N84_vwt|gCPBA&g<0dDjl}ZqGmI=wJoD{+>v2vP8q@+y)lW#)m z<8z6yyf-OU8szKBsiH|xxWr;va+Bl7JQM`7E~1_gSd}%?zeltaX0uY@%(N4Wtj3AL zF0Y#w4HLMTP|ylY$(#gCKr^y38}Fhdye6`emx{V2u$l%r%+M6%ui_TDw52P`U*TQO z;*<;)m6NJfyvCEDG@6+7a{M*$c}gST*ai?@FlgFa=}vCVO1-ZtfE(ZCbVKFQEAkQu@eQl)h(3Tf2_UaN?le* zq;O?-6H@7P;Tu#s37e>!Xf}FycsM(VhB7yS5@b;L#r`#>uF?3#UO11B%>R$HG&!D< z(&{P3d?i@}hlca(D}JccSNwUN%{1;&s4Uvl-7CQrBDE8S&eFE}aNt-2cn670LuOsg zlfZ@48V8i@jXiX(3{md^ktInuFd>ZHG`e1zJwGrb=YV3qxM?)R9{K@In{o(JpR&Kk zP?gM22~;S0vkq1Jp*YNBlPSDlUzw9m1AaKC6e0XfOTQGlkkspM)gk#2H2);2Ll~XU zQH8|N&pk3qEPo4vNLCB5Y%DWBbkL@0bO2uq-m)HHXNB_Pq^XnM<%wH~bM}-3?f7 z&pJyDHZW0;Jj6H*(2EQv7~d@^JcMw3_}j-_`Ap>aEPY=&D1FPfd$a6EF_nIaJvskj z`K!9a@`u7)5qlLU<+fjfSjO^Tj0R>zqH*AXf#MNvGQ?^nju-jF)SP_b$h0zt9`=zs z@nAWjse}nNpFCoGCY~32nOq<(>8O;;Nd;mKu&O(Y4dvJ;gU#>83tAc`V&Z}zJdRHZ zkHYsmb&+}#>~FgPwY#vM$venTxuHM&YOH4U`RMPc0BO^J+GwI%3aA?EPYHh5CR`Q8V8(Tjuo*zC|5fYz_XPZE&Vd{WUKi`g`=ZyU5j(>0&+}syxN=_i1$Sg z2&TLAWp`1i>R-!cW}5S{*hE;?O6PFtAjT@l$F;iPzLr&-^ATwiT{s!{!3 z^+(h@q`ly|8kbMe{-!Gn?XRquFj>VEX4l(GT`*ei*0&$Q6l7Vc37sf_Q984J1M$gq zdb9CZ;*(Y*aQrzgaKNtyuf_3MD2Q_t*5CtqT0Y&UQA7h*_Ey>(yRIU7$l;zJ(Pwpt z{vUHhkLM|H-4rL>A?@+35TU;p9hw0pHr;bPYLmdU9iIf$qRv6aWm7S5&CX9b2eFak z)NBH964(}xH-T`cT~ZzTEtl^>FqC`q$9Y!iK#yMv^0P2qLJIitJeW|@%YBNSZUQ%_fxlrG2L9v@)t>0bSZMEv#Ys~PNHQQDUf2YG|t`kvX zc6Ro?eHwVwof!rGQ))$B+X>!7^tF4SEtr7>!t=l%_#-;IN(0xyS}%)QVEpmf&bHc# zYN3C*X$DcLwu&p$*lu^K+iP`crkq`Hwoy00K4ha+eN^qR?0~$aBz6}HFm)hyZ{TVP zUD51#=wk3j$^6g_hlO(0F z^C=Gz1N;(Hl@?#V%B*bT?8 zTLWtCO9=z~)!Ds^AZ9;O?>}fNQW#r`JPMt+MMxjhLJeQl90jznvte0{&q5nGG3KPn z;3o)wnj`~By9@>C4MGL=7mo#28zh1GyxjzaGe~{6#a|>4+z`Mc#+XZcjo7?MMSJly zBh+z(X2M(=?|Ek>qM~rBsEYG(dApY?#Sk3dXRZ`hKre^~El7!#DTtGx-Jmix7RzH5CW}hdtsM_EpWX4mTxl!;>a2JE>#nbCK%oCi`o#=08T8tY+_HLdm@^fLLBAyv+iITwRuAbZqw+{5B5ukj!j9`CabP* zL9DLSUGK;#!7j~sG*XBlH;ISh+6ali?)ezY3vBOyB)L%KzL#CusM;Ggyc~+BTd^#9 z+$FW`Hfe$xR*YN4#d%|Kem1g3hV6wSFH%W7AKQuNcS()znPWHN+9^L^-GGc(TrMvQ zm5*pASw6(RXUKYIlN>s(OZpJr125r82>17)(+B3?q5;>Y(Q9`ZOIsqvg@t)zVF8CK zo8R?76-B*>L<35C6e2M=dt8y$WSc`w)Yb*0_F%0^+K4NB{&!2HxOC50x(5@@Yt?l; zrD@RnfuzE8b?Gj)J57E)s`OBqn>Q+R^Rf@kMdw}8h7iv2=?6MQ)3P8&7R(HyJvd%O zgFVxt5b``CA&t-t15}K-ngI=AXB-b=l$xIH4`pjT3VeVWvK8iIJD!3VWJ(Yd5e()o zX^6G0L2UJ43c{l@fcRN2aO^()nE?KHd@y|53wdA`7zQ|wkZ|CST^k~*hBSiNPMNMN zIuawxP(~wB>@KM}q1kh3NW5r7EWl9`9(fj1uEr-lG!M2Rpkbw?<%70$r_Iazfqb&v zX{Of3i$+~&v5TvJV7dmGDzjmxPQSZk9fJ1JAap|97!Dh-M*JQu=D~)($8{=WuqXjf z8^;w^?IkiL^er^9IBv5pbM6fAsCz4qWGP1ho>RY<8=Y>VFj6F;t-g;77e&l2*RuSv z7tM@Z`g|rjn6+Hf8A5?RjhMPyJlThv8qkcJVMK`&kpT@*jeo7VS^u=VwpndpcI%7K zlsug#Uug9A-}=)`BMQIr^onEDL71DYcivk%y&8-X))0q#{=;V;4xfLX(uV$J9?A;( z5JykbrOyTTPD29bO8zvD0FTQ$@FSn!9{{-dp6N1OCJ$Zga6k*AfSN-jAh=QC&m4!-JR8$qhFO7z#WnmPPw2AjcZ_nYU?=4BL`K-b479CQ6Q_ye>q0JRyYVqS}j3%|-|(zy1r-HS~TCS%)} zf5@(Rul(KXDS~^Kha9|og;8Yq1&WM9!)1>~5I+kdhh8Y?6ILst0UxXQH7av67<*Cd z#)g)xzc1A{Y=>sOJ=iGQ=(&`_l~M^p^a7||=5HYONA`SpRcXi%qkcg772uxzHIzOJ zIwXlYv^1ACN;Q8W6jO$3Th=bM2| z4xDgox;%(*n%pBG=ZiJ|2)GtbEwnNYQ}bly7_st53N!XU$8C>}G|!b67Y+DANkuFY zP+3NB6`#WpGY1)DijP2vSqL8)<`9`KoWB5*MA4FLDYOQ3XwHoK;j@@^&1orHG>rUF zw;z}m?T%>R_%_q304U`x4hK1$UyA!I5ss8hRRV}Eia&F)f=1{lsrHrk*_^Q~$aAsz zBoL+Cm*NuQeu6+@BjI4!4V^EjL5g#WOG6Y2ITYqhP>0>vRO&#UFPB%0`4bW>XGymh zYw}tpTMj0ymdOVtK4A0~X7Clx91U|}LCg=0&_l-uX$Wl&d0q8ywH*cIWRDz;69v=2 zm(!uBIvW#%L@S!^IA)dN3Nueb-xK26nY(2&BRC8L;nKF6fp0z+Jb5IL^QVdMq6q|N zpq2?PdWXaL9kPK+2v_W~crJd4O?%^hLPKkt6ijRYviD3k6mpxavQ49P*FT(XG}jxS z^5Qw|^RadT!VM&6ykqeqa)z|)(Zj?DWLHgh+;=<_!yV57qMV+=h?Ou1k|{AQ@k?r4 zHihwFuu9)!x3JpA!e?$5BxwWb6mJ9`+C76GO3FisSFd@DY6aT>HHzeE#DK&vpBY~^ zE+&hY{MYRF1KKwuYLLk6Pg|}ThSOnSb%&-kZHE#59=N8556uvtnXCxv1E3840hM42 z@Cp7AS))DI?1$4BJa#(r!)bt3vAQtl2viSU$o7I~;R+uWyb9=EK*IsthMUZPMvfhj4WxalkJ@jsejsNciM^m$p?G{?DXuDRfu!g!Q$Jyo15asf|RF~ zg1ARr$A<9Stq&?oA7;x>ktwyt(6qW?V8Jg$jn|Yf8}WacnsykSqb9%%Ie9W>h$B1I z#LW=La;mb<2-|fas~fC-VmYVEGx%R(s?G>oKSK=wa_r^gX<|`W$dijk)~JhUL)u%_ z&CQc5IHN8i*lEjy=Huj6G3`>6EUCg&?=Dc+2oHEe z&{02Nr5D-K9W0fs;Ao_-z@q4{1ZmB%okdtCrk7;@##M4d*6t##01hTz|3#bzwC?%d zbG7xQxLO;jpuWuBKDPmHxvftm*a zA6%sZE9K7dt*gvoub~4o5dcw{hbo~Z%FM$+_pB*_7CYORk!!QD)**;4q_zW8>p^3C zBZbEst?G7%wCkJowazrhpJ}q&tW`VpX;Q0i);o1*Pvut#U>AzjqOsGq!bn4+x*`Wf zLV7}pDTk*qN6sU`r-`fpa4W+FFIEdaC9W71!n2Tk_#z^&b2Orc5JyU);4@c|0+rJ2 z63>81JQr5&@bQCw!xrXw>@yDB1YZpwadnhpqv50BuHnO+nLiGF4_JFSGx&%LJ%bbz z%(uAugbxUI*_vVK!nK`2iZ;7)Q>zem@L8ryK@Jc?k+Mlb;yiAT#L`c3@lZ;ae$eka ziN)IUT^nSJDOreZi*k=f2-8w2yGvw6RP&rDA2UG}I*BKfBedoK-oF%sLeca*Kf>F- zuxKbR2q}W~N6{dk$A#e|tFlkAH+I~p;S~*15lAgQMG4HQws~DxouWaCe8$Ce1B4XE zjtwPBC9=VE;-pkc?lK`iPuD9_52TA4LZK>M$Rbp3Kv@0!=meW`v4T5|5UDEab$Yb#i#M$(m-+i zw#N&=H(gJwvg;;RS&%jX@~P#MLxoRq&!Mip=6iciUju?gj!J3J=iq5^I7q`hwhV*^ zc0C$^OzpdNY^NeWsnK9PYaB-YP%{{OYr0M!aH$ABf|*5N4N%wJK~1-Q*jPwF88)Nr zl=x^yMo7`|!V$Fq=>@e+el)d;Lvu88ynY%`#7AA9Bz+N|cqPpq#!kxaJ$#B`L`P}3 zlONp{VKuRb#eP7kr(IDjcVN0>*iR9-Ecww)96l%a8c_S>KI4dP$&X43#7B|@@ky7; z47KPV&>(>DB8bZgU`Q1%_5;Um`Z~BO0wtNBOQIJc#lxaO<`y!KpC^e6`xK8d3!EN6 znh3$C$WKfS{1gEh9#E%00H7^~!^~nA_k2I1K+Ut8RYcp7mVXFMBgCiYAt(qGC}!Fw z1on4qVe=|I6rW-^9%ivmA*bR~3&;O9ZGe@DCqQ)5d<4WK-;uDqm!(R?cX` zJSuZDm6=LvHbr*T1QSiqM6+-w9PH%0R31L3r1bDfO%-dy@#qI&unKd9paQ9xVkzdO z2PN29s@eF!Jp5!#1AtjrV||JCGZz|RLPxBk5NfQHvI12UNu30NaGm5Q#dlFC!Lj@# z2hjE!$O%<-V-0Z_*^MHw0`7Q-M@4#H*+*9imuO@L=8#4-(7}ZKl zPkdyFfJaTye-?wpCr$grM}uMPlj%g?wg#@?lQ-2Dx>N#ozFjQ7XPS=+S9TbEyHuJr z;-7e_gueXS#S%-C{ltrvB+`F!mP|7@EiEke1AjbPg|qFfrvfEM zqXs1fC-E#8i=oUxcA|7p90e3y5d|A48IB^mFqJIaf-0s*W=8lbMsx`2+hOgK`*cdB z4thM}UAw~F;552$q%*EXiFLrQd1tUlNPglyeo$}Kc?~vta-U2wN2)1O-L9#vZ8jd( z$yBVCo%)Hl)2h{5Wc7(sDz&&Mty=Ebrd1bMFfIFDbj=<`2CakoAi1O*&IErVxvy*) zDSfDl5Z=Hu&LIj8@Q>RX@hg9=b}pcO3UXSO-;5!bO;3T`B-Tk`QsJ12aNn2)I|z;e zU3vatX=#vHb<}}3~8XWERl7aS@fvyxP1hy%L1R? z&(Xm66LuT$0*x5Kfb$k>Rp_kHYWUuzJgZ?f7ScrFY%y2<*Y}t`EBtCa4D@bp-_;tP z2mYaJ2Ixh9Mf~IZo(79Ld(yuvJPmkX!jiPf|IPe}9nYrEX+T(*(f};go*xlZJQLqT zU!IXa8oOpd%pf3OAUYdR(~6#kxQ`%nS^MA>0{$|6bnZf9RE&poUgoh0KqK>;*=2EI8f=K+3~7L~6YnJ?AvK3C4MX>c_1N}3 zGYFwY+swyfpr{mY0&Bli6ITnrAm+rkaQY3yDG<+?_#oN*ACGYqd#pHHd=Kx^0<+h1qT#by zb|YkWx#1zWI)ATKU0rQ-wmuQbK)cP&-HpaJ%X5xBi|W#Op-=!%Q;WsXDari8X?(k0jqatepe&Z6CphPJA z7=DfS0>5#Q%TT0r7=j!8;P#EUA zMfV}Roq^v8*JsgOg7TcOmOA3IxO8t0GMvvD05qHzDUk|3V&CAy#`w(=#CDvA*pBlC z>}~vb8J^%5LPh)>8d$_;7V%Aq+lp%J?vKR=Zonxfokl0@FW(|vR1?^z+>e_1f68@W@@PaX~277Yg z)dV%t@j-m~fSjbcpnJ>rmJR&M=Yme-P6~dSwHL853NRspkW+;$W+(JS>;m{#j}MRi z>sp_>?>-xwN09q6pfeW7TJ?5^u=qS2mSC8qXIlGX zh*;r(n2QoJmw>TUK!<)rd8stjOh8(C(h8`7n~B+nh&C9ZqhtlthSaU58v@)zO@sZU z;1J%3HAFDWxM{L#n#IQA8P_ei!&V|+r>NmFIP&3_IdZT8h0TDE;*U0nnDda1t$|)< zXObmgpeA@$jXlr}l)&k7MC}A46W7RLVE9tKJ9qSMdGX!-{`j-?)!Nbay|pJ_G(HQD zR(iwnj`N`Lutis#rL_mk*2dB&Yt7G|ZrPRRy{!dG`wl16F8~$*5tGo2`1p@+=4rTY z71T^uSJA)78uu_BN7_mKdi>VzL4XY5O`oilbyrvGttj=bSOe4R(;;@IcUV`e!ucS& zyoBCrAUnR%+S%Q%t?jO|^pv&LZs$o8WyYKFaEGSjLacjHTWwX}24vx2YY7fluprQe z8baXW;=(-0otgoNj91A4Kyqg>faHp0ryv~tlPy5-LD52D?cUC;f$(L`&fzS>5J~Bi z!%$b@GIdR$2e1&YCP&eJ*x1f?-%{rAoiKEb*;!|3j%Mg{^g{=c5ZZbt*_McIr{5L` z3n13z!ph40F%9Uq<`bm>KB#aQWd@a6=Jr;n$+NO%=cxkgg@vU>7}J}{Nnw5cfTWgV z5|fWX%!Ri!F&B~cOGUxYw1@Y+Y$G1G{0q>LpWvmv(XeE?BgexK4M|{K z*S4*Mj1c2vOCp=O6?ckn&d(GWI;P<270zD@@*)_5$8pf(##XgSaGnW1fTvZDqkW}y zE26vf&6|`7=c@-a|Z-{Brv3&^8I@%!y6Hd2*j0H+jAC*r+&P z{o!&#O`QMA3JWWd9jij}dHd;eBB%YB*56-PVlMnP9Z}B?yS~SO1v-mYm2XjoQ$9RA zOj2#^E{}^>NfvhSC#F8mae7;<{C!(hU<9+ND01dFz$&)YwA4}%*^*FLF zyw`E|5RnB-U>L0#dzOS$!5eR)Q#!xs`G`F>&~a;+fgt+xR1jp>Zo|ueBP@ zPItYrSqEZ3-nD&e4A-n(Sh9CTVdl__3#(2DJ`S@%Nw#~MY5$P?WafjXqyCpqN3{QC z-`V?eoZ&8nd%9QL!Oj`9bv4S>Rb; zZr7`=Pq#O^7&>~lwFw>b4z_yUl9n zfzp&@crO&-t_`@?lv3#Wf$8qkBXpw_ama3{y~Z5uEk2AA!)}Ob5AD5*2R_Ro#7o3g zZip(NC1BjIxHbIi$7wAm3xA6_5uD4iK{$ngFj4(@q4f0<0u2E?~?iuc#q89twIeLFh$NK&j*N5?b z1>=kAM(d~)Q1pDlthxi!+6QwnGNh3S<*fn1lPt~kDmt&!bX0{GHjrdwsqJv{gUqR@ zUs!%n4Tq*@8{{nehBY&XA#Wk20?RwD#L<#-kf-L(w-P%}9p%gA<&|WDL=CqokXE3+ z%mI2L=@15FqKO3F^D9g_T8vbT#6rJFyd=kGmg$Q>!wSGVi85>@Aq0E^)3IF6vH}I3 zIUD=|>AK9jMB@8@=Ndy?EU3vwF3v{75s<{IYt^*}^=_?!%7d%n(BG%vz6ZjvP-e^t za(oh{j%y>$zP43ucj_%ct!3NqD{Wt_l*?rp$i?PH1NB5FmfKC2lT>@M0J&Fy%3kKN zOk>jeay&S`fA8w)`z={c5@8WA{W-gN;+hfltRpg{W;hO*jTvO?Ktndm^u!AYrs4+_FHmhK9J%I^ zs5>qGfEQ8V^v1|CvS7>BK8=X$hhf^}3?BJ3a`tI3V-4gQDWp>|%}^rx#uJ-O5Y_l` zf=ZocJM@%l1um^((+drq0>Cr~z%!=?0MUsDF|HW|@Q)XhXmSS17SE2;xC}*?1sMBb zsKI@aQVDoK?VWP*aSVC-jbAp*Aio)p97$gBjl4^RDO6etDt0;aoDp>}?(MCuC+$x* zyCQ80lF^|VIHui$D?Cw!1P{Mhd$v&j%wJpB9j%mi7Dn59&hotdV7FIa+Nm4@;o@xx zJ%ieoYJNu6qXU2L@%Ur+v!;8vQrmb|eO9)=Sl)a7@x3qnPa4mlt=HJNT01+PM1!~a z;HLQ;)T~YFysokOLT@kTq~5JuLc@6Mj3rcAt*$-XZFX5W6n3Dng{mkkA#1(NYQfTV zo4c)zL=`p6u&i86ND;ZCUqW#@Oz|IwsW;?W(8ZCF+%S z+fecv40&^Bt-6_*pIZ3BZf6aO-hiSa-;Fv!6_Tb-d4$HJ0ew7#Rjy(swU%Qrr!-kqWo14{6V+SutMBN#s?xo>T_zXp- zn^=5%yS{c@dC>-RaJ{ygL@*9k5VKf}?FweT?y;0$FrwP-Rx=jLbT#4}WiN};?T3wK zx7|jGP}ERESYNHo-NRUPm|~Z{ zF>jfY)zT}a9t$yEy^cL~Hrw4t^;Tp3Nw--)^&;qiOg$1VEHYmI`d0PRZmZtj-RxlA zM6nra%D_vYYDCiWX0z3JRPEGJE!Te1?$o!swMP4)3ZdY}A~5d;*6cFhGKA6Q?&@Y^ z?YR1?2m#^=h!D5pn;E2nu_STX?xAQP^7_f3^&H^il1i$oiCBiH=E@M01wfUomgFsY z1gmmMC3IgiKXQa^>Tpr3Q=zmDb^0z?u?#Ayk#qkW#Y^{sOdFC1NaW&@v`~x ziuhC`6(l)Lh)Ke@E1{Z@99!NyL0TaG)Cv4(ve5(^X^`Sc94M=ukt8^{%Zo}x2T%gB zndB@ezD>iMc3pWpsdZJKX4FRI$_c{QT~a#32fHTZE@{<2*=@AyH3M=KHr607A`wcX zxX>9I7A*sh_^|#2{1VU3x{6(eMs{0gkP_93_3cL(-p?LeAdU0MK$FOsCqvELh4emV zNC~)v^6Y1jA&XA~)P-Y8dPl@ET^BS6KVu{cJ=A=tH}*)W6b#V=Z8R7WGl-nf^vFIv zGU6snC5T+}vl+7HkB)dECg_GW5BZpsVG0)8AXB@YHE{t4BVv3yWT7nWid|Ap7;y70 zi@T<;4HvsjNcUT>5x68G?aofCx>0{2Fp_i38F=Z&RFZ_~k1}3{pLs8Au0lS3A=BfG zH^v*{47q?$&LJD52u!o`bS;)R3?irwd}^zl{WS=1&m2k=fx}3U53C@V6U{40VNW8k zyeEyAZk#CK%TY2eKQneA`+)b$I1E585@4Pdb`o*+r3`2gF6_y^Vi_-frwD>C3{rM> zI~zNV?F|ClBWc%LkLs-#0yW5u!WSgF0RCL;0EivH%)_yaJiht@*lWp&k!v$fMrPWU2?bqp4J?~NQC7X@aR<$Lv7ThJB zffFi8Ap15XVg%mNvG%`C&#{-Q&1uRW3peY4cQW zGBU8hRqQkL-5{1^G_DYD-esO*@GD&*;?#xnT2bZ=Dat_miWG7Y{(XKC13Kde>Xihmm%Mm@i6L-g zgbaKIH!NZHk^yqlu7J}fd>vAroi+m&@?sHZ1*ahxRl+?m2S{*4aD&n)pjJT5Nbpc4 zNP!6#+URRQSvt=50gz5!4ge|KAcUuxQ@Pc=Sii*YacF~I4YZxXFA*|PvLF^Ou|Llb zbU)Ss-QS6U4*C&b$KpJ&o3=O|Cb|@ofLeZF(||;#7J zvri2oGOV(Z>b-!qvjvLgDJf zMBx`#KhmMa|D~V>bX&qs1bT#y*LSJV3;BBxVKW*aBABi#BAl@7pLmfR4V=I(L0h zA3|V&BSjHqgDI6i0%f=!`oSQQ%$lQ7x;^FxhKUDfM7;aNDT2$BKoIrl)NLI<3%tm5 zJSucnY?T3lq{d1bawWdz&N+Ut1%yy+I_Jh1S(T@MbXyCUcS~$0gD=Fu z{uwdw3b+i8-6)LF?=pXoG|4-`k@(+>P4Z?7C6n-kNTjq!MEkShh*Eo>M%G|F0+Tc7 zbjAt~RI9w%GuJJsYG2cfd@meEiN0W^ZX`NCH?miC$o`uG*_HXFjuFLHu5U(8IHFEs zh=MY-#vUA)j&C~_b2ou}Q`j&8K8o9+Ovgqjd>NU$D#nCzJgyNA4yfvSs+g02t)yd7 zj&SO*1y_~f<+KZn=s?nFgGTjicMY-kykr6cq1@DRc^S;xnXQSC5e17!&Ik;Mg3TAb zh8gfdH2Y_{wr7)gry}lW6qB#ml4=dZ>O&yW7A zfd1)x@y~?Gndnp?Gu)^+-WZ~*;mHUE1_5NLWL^cM!0!j<5N*xmJIYFjq(`GeN<9)C z`XGl7!Tt>L4~-!xb&9^keWyIopkF1Lk^b1$Um(RzCXQt--zp}q3VWK%p%NO6-B)bJ zN@z7EpJWbTp%!4joQjl09F7>m@kN5Tl*sb@@`8b1Y5<|RIq+=9@7c&288CJU$8iU0 zv9ZmINf4IhD&@I*27Y5X9rR-1Jf`9Nx!`~DO@bHDJc%$!@UG_)JT*QK3p@e@=nA?C z*q-DolndeuG5xvt2BQM-8TCECJ+~FFU-Dr>0+UPuUKRXaN5q^ zEGyT;5w!*o;dMNO5pw4NnDjOI=KN%0O~)m?&dG%AK+uU!JQz~jZj&~i+$cPI$qVFh zH1Gol@)aFWVus|9x-R?%)EWmNJcRn(6CxUz5t^{}D0rDNIXk589`eR;jb*CEK?)y1 zs1@soyw4I=InhztY*h{(#RuC9XB7c~19NULF+HJ?Z6+v<6aZuaWwUfBUtFADE*tm- zDkX9kmIFGqd@uA}NiBk}KlfNt{hm9Qjwc ziVS`ebc0a}7HH<-%I^)$k zJ@B(k7>Q8ZF~4b5nK}ZgFjJ)owL}7&b$o+b7||_*Ndhzs4FJUms^Jk*tiaStd8K0D z7pl+Bf9SrF*`y4_Acp*(r@Vv^Zg)38Ycf0PVJ7t$H8l4Sf0OIM{)S!;24O<72j8#s z2UY;#yh0Ey$Ki0{`RsTUdgjPjgz>+`{&9X-uj^p_U+1vS8W&JrC7}ZpfE=3p6yg^{ zT4$iq5WQD~^TOau?E~sY^q~_?lMNr$T1_APDOSz!SXZ=oio2t>XO8~g_P#z!j_j)M z^^7!{8GWtxd%Yj-(XLm!SUufc-96ns)~t6VjilMtj7Bs1UKY8!yLzTH-Cd=s>KTn} z!v+I!5)%mI0D%}Uw!sE$;NY07f#Vp*;IQ_=_QCjIb4ZBukMm7}jZFY4=Xc*ny{fJr zeeEXaB=l;lYTmo|zWeUG@B6;{?zn#vk|KQ*^Wsh9*+-Gd+mcqs1lF%pNLT@`S# zs`4`#x23@7YL2`%;@6ah)cw6TsqV6gA0bgdD4Xf}Z*mtX!=Kom*u>8y>bf>=XgOWm zZ<+0E*M(E|%xbr7PUgY;b}i)gwf;!bFz>w5dX=W8`c|u%!P2DF(AHz<#8IrV=M0X6 z<#E>vG$q#7ac*G?Ld$SOlfzL~qO^>R-?I7MesANfbQ)j1O8a>Fz%j=U(m2=r%;bSX za;=sJ5ImNE3b~vyS%8h3oTv4x7Es_vr)dn^M~LyVCFT5V-_gn-O%&ux&Gwk3_PwVU z#c2_4;h`*wcXvJRD=x!*#py?~_Xr|91~!wh$qh*zIzBryf2uF3!tDJVAa|H zi3b!ng2eRcQ^&;VjyOZ%dQrH|y)DamRuyiD|BX=tbBC$q28R|$Es~6c=_O&&Z zI3u@Tw~i*&tq;k%6_vlNU#Go;5f^@#(jb$V>vUb(ONJMG1;!^zv5JQ+5=lS4`z@UJ z=>r}KDpa9Q-P%lUR1p$aOH_$#`ZuL1sj5N>P}4367%F04aG^<4O5X^wr@nK2nG||N zFq_rX2_06EU^#{KAib=;#vg?rLqtt#FjTOvN6vs$&H>v5UpebpedG0^T8j$)ulG z$z!)zCAm&(RdQHL;P&g{v81~AnRs0kwMqEcCp`<>db3WR?&LP#YOdY_@?UZ&A6qN=h8pf*EL?MPkqsR z(yp1^RX?bnytr21ls`l6*E>&kQ|ZMJB)pBDBwS819hVXvKU z7Qjki#lj*1XI|8>^z_2)el>3rZjfoRgoPF}u;Iyrrc+L{Y1eJDrIFyO6yHnG_9`1@ z$IdL9Ufniz!D*vWy4l_iHX@y(md8G|OM{4(LjS6zo!O4nnnEr&ArDAkjQG<3ZGqA- zRLdgOgPUDHmp&ct$*$RTT+Lu&simKV%z#=*|MC;Of5Kb!C|F3}E4rM40SRBrb~8H}fkJ z@Yad2vGH)&DFxBC0?)4d>TeQ^*4OQnfLvm?z03bxQU(5;tiXDy$SMq9Sun`)gN)T| zT6I)pZi-`>{zfKnGH~<=k5sakz^t z`36OF`|1^Orxo4_^)q>G6Al{TFbEfOIL%hwaooW2vLYR=N^X-$-*y*xJgFwi`w9hh zSpk>ARn7hU_+HxSv^LW7xKfZ?qaG4=E9o;fw%O9Y)5JK|8c(0KVfkvAK^NW}{ce2) zJK9d|l2s4V4J$xj>U8#}+YY%^(n6YM9Y;3n&N9ENmC}Nh%zoVSw`{LjK1^xF1&Ql0 zId{^lmgT0+PTJa_%?G*yam8s{`}z3Tf~Aew*+@IVisj*eMBO4H>t-hazUW!w`{F_( zu)b;8&5d!>)%P9vWjePoH@VZyE$n7a{r&1w`?x!aV1xxVCHGOz)c0M7Y zvetA(656AX6LcrAEq;5s==sui2dAL<^?%VWQ(Ft~m6x^*eiMDDRpXbE$NEmuNJl!) zn=2yfVPc)!-b$`o61^Pn1$(+Vp?`ciU8*P1>RE1pkD$YHyOa;PyB-%4dQi*)grAcs zRSw!kC!z-l<8&YC^b$;^G0>422wQcPUcB{Jut}}@ zlp)=ZJf5C*-9BPcE&7zy6y=mCBO<8*pCW&yDnY$Tp4zkpS15Ypds8Tnr;p&+rcet- zC(I!k!yXSbf3J;hzg3b?R;)D4n&i=ui)?RZGItM#g|0emHH1Bh-G zh7_MpG7=nFw`v(W!q1nxll!l+B%@@Wdu?VXvY_=}DRDrY-P{536G{Eoe~|M!5}NG1 zrs+bpG|W>PXi50tX8DC4?A(zsh{!ikjdVe4tUgA-rt% zz{EhKrq8{0`cB)5q|wjI_dtV=n97DI%2>>`cZ{h4KBe7r_Qc}hg~gerCEUp-ecg%+ zRCF(~QQA>7ImZ=f`XnHVc3&hlT?Dt7qMRiQG`($8i-8AU?`K8;W!1TKxmFv;m_{4ZI(}d$& zp-6rF+JwUcrC56V%-b)meZEBp9t%nB^WTWmdMZWPM8k|3_d|zPYSNqy_KoXS&9?(F zy{N%%BQ~K>^lp6-E^z|U_cF*NF^i^F+@rJawn~$q(eG(W8(cBNp;+j^u+PA!U*n$W zZ7|ZR5N5i^*Q^q4Bp$VGvQM0>#L;-JPmxZnzXnoTu}N43r;W7RGj34;k#>eV{Zo^w zNL+H(A|S~*#4iHI-Rp${#Go{HtD4S7p|X3SQRu6?`t?d9EOME3#B2TT3kT0hn`hao zkC@9=C)mGk)pRfETl2YGi9FrwIMUsCh@;;%oc4}XDz(zFa?80|s-7+#?i%&tp{8}{ zgnzQO+Two8@0*)moSi;=FzQtpIg}o#`?J3b{yNDgq~e|iNtOrp^>shxHD5!K%xfrc zE+@Omp{r)CW?$*kd22{>8d7@RY_EFHt>-UYIN3N+I5sz5cWTQM)0d8T$6C3o=Y*4a zx+O$v4Dzax)31=eDGB!L_BEQgBQ7CdvA$nJ2)oK%q&`?bdzg;da;b>dMbeeVctcGs zMk$0g;xR4&-UG_jpulZAjc!ZZKibK0L@-t^fp$+E&C>j9aD~fQow{5E?AMVGHEOVq z!s0WiK0+Q);rCE5W40_W;1@53ONaM}o=%U%Iag44W1NC@h5L_+6S-dyiN(w1$Oqzd z;$qn)@I^Srid-)6;i~08my0Mu2u5z@Jrsxc{Z_V)Oshh>OQhuctqjG$VLsA&FbQ|n z+6Ym1Yp95jm~TkJ^!?VwdUz0Rr-oZsTaUf`cG_;>nVNBk;#bBk5C23$GI6R#Izi0!D4gYBTTqsVMVxD|(9|yo&8Juh- z9hU~8hXe@T3PcRAFpu8CaB)NLlCpO3c%&X?h&mb)p3cEU?6I(Om3QKXW0y>~W>@uQ zH+hp*GmMFHAZ3e-T|h?UCfU5^sgRQ>6|5%kg2*UJu&llPG3UvoG3S|Wd`+7tE(e@5 zq1(!tIzE}6ZnW*rq+kOg zlm?`-U})4MCitPy`V=1lC(Pm#yV%Jab}mFNVf-nqO@;qhIsD`b(1+n@DeJn@kLPID zKABeI7DC{zx_Q^noifA2w}|51t8_9xDNC8JLr44G$s2aq5i~vy6vd^}i(QFuqk#|M z#>TR6(1pQl)InD!y$>U=+$4WeJ(teAL|mTY@{?SueP#_paTi$RUa3p3>5TJi5Q4TLa3XG;JiEQ zL6DtNFOH0fqo70Tfkq%!@~wU=_|ZBQZ#gNAgtp-S{d$#7$7VIXjfVyxUApH=yk+TW z?;uzj28fGU!=b`xI!*QQrrJD$>{lonKYSV*Z|yXI8!}8O(FmM#9MKasVplrI!Bqv7 z&APyfS5OX3^)m*E`ia?W_7=NQ8Z7YCXeRsqzWXVSoK*| zL%0O59-r9U8u*K95$_-)f7Y3f6IeCJSsiyb(wWS>_-opA#{*~8>P+q17Ymllc~krL z=_`5%Ukh?vKp_tSb>$VAi+aEbCCXJkaO6;ac>QX#%3>Dt= zPDf2mI-jHav(?)qTF8?W$jxp;oaMm~BR0MgDaKawbWgeH73BCyKu4Qw^Q!TSHUiFkP-R z?4Toy7Ps)iI?A5ovu9=wo;dM*WbI?PWv@{c3l|+2!<;MJn|!(7oJ$_^{y6~F!m8Exhgro&BJe`x;pxX_37C= zEdW#^r8HD|)^F-W8m|D{#Us`f?thN2Dd4RZ3__>uxTdgowLqINUNU{BQ|c@ijBIKHolhmH^OHiIL0YQv?1FCmMUHs5<3!hUaB9QHffLhiS&aysS#!DpKRhzK zkTx3)Y^c)t6XEF~rsCR`yO!s}dgjcL<;^62M+| zug*RYE^>HXKWO^mMWaL>a{J19I!Rd%3T5TQrMe!omsc{b<&n8!2d9_a-cNo;yKH2L$N)V?En%ftI=ad6>g&FA(gn#AcjV27<)W>ry|pem{fKrW6XAatBy&CRc|iuV2q_0V|m7Zcw>_X zMnc;eW4jp}8Nfvmshu#?7{vobcX-z2uH^?AoRzyrQFSfLyXbn3>-c61v_~0ZFACat zDt&fQOrn;=MH=z`D@p&U%yu*kN3S)kFE_Pd@H*~7h>EUVmU3lzHxEcbGk0D z2N+`y32eOKxfjfXl>t3r0E>i)#Dk2n>({Tdnn2dsSYwRU*qreQKi$Y4MsBt-HgX-Z zMmE6}yB~i%h==483c(&=2#o&jO9)HID8wkZ^i3EI<8S;9X>a%*Miw#NMEMMCWo+an z6ix*^k}A+r{qQ#40x@C>BT-ojBaAWh24+xSF^~rI>oXz^yg$R{j48(64ehv=qFmq2 z*zh+70eWpDWg*u@_F<^o8yFiqFiEEW>9)U|-b;Sj=Im9^Id8RE&N`e8A3kw*e(zg$ zjy`ef=#tfG%vru~E?em*+Wzue9%5|l*~#UWQ!`uXNPI6sBJtA;d*3q3*wdqPM*8}- z;nBw)JA=B>30$%4>K_o?sdmq$7zjs0`d@+NMUdj3i+F&uw@ep#!XS! zx(S6soWd|;tm`g&W`oyz{2mqZ$NNz>XY7JZNBPA!vQgQIKcSt@6d#>cHWD70xo z050?2BEJ9T`t|G2itpbhm^tGMjJ?d*AJFsnNw2@eSn6|(r9RKt$RKoj5bGyfanx-C z?Z)Uq&u%PRnd8&*@Oio^0cxYrDu4~O3^Uj=JJ^3sL}emvg$k|}>M-}_WwuaJoAz?s z>}2hRtf-43b9iIhT()n2`A_`IEvNT>?E@SC;9q}N@vXo4gCBkL zKmE{OJ=-~dXxpDX^w$r5<-{_xMA&0oHX zB)R{r%*y&d7nP=r20}Eqd&M{8|C0Ddr5O|7s5AxfJ;WIMs$h4U_6=n?E?|(L?0?Wb z$Z*tO`Hig0Z*-800{4@<7%Qi+%a8KCi?Mg3TC?w5zy80=wN#K*K9B7nyvJiqtof9JZo(-oqPIe zsK}jB7-4K|D0ih)C>4hJXTF#(4q~%@vy=xI8@q4Lu6quSxTg;}p6l=<6T282dk9Qw zj+tQg>N%~JMaPqN=vm&Y#3ltrt=T}2pr#d8IayE@qfpLIAI#1i%+4K5FU-!KE2d|c zq_FZ_Sa(iE2&|mX=Y+s2xyl3tc0&#zv^}$(z-q+>HVQ^-RMpWzh7u}|=Uz&d&|r^* z-lim!OO{Zvm^*kbd*NL6@Hx!NjbgE&{-&;ybC7;&`se~~-ho$<#?wOE3S5A%dm>7{ zRU;d0_E)n!Jf9I_%77aB{}dZ!exnvC*WsS*pZCqc zOw?B?cF@}&uFqw$DBd^W%rg}4H)=E_c>SnvMOllX2!#2d&aPfg5kc<2>gQjUhi;h&1G7IsGkHL53074Y>FCGzt6QGZPe>W*Z& z{qJO{EBzhGa>w7vQkUi8oixTfdt~{7Xv;V2WbdRoem&{mVLcb!TOPAw&+)O=E9dtg z6cc8=Kgi~ct&DwmE4!b~8Ca6Vz8GU{7{<7`EckA*@4(p3Z6a)26xJ9L;X@L3xS8i+ z&HRvr-6H5=)%Hu@sWh;lxD{(z={e&r#uyeuA7w1{7-Ok7(i#}8f9)ALfC)LDz`$Ov zVPW}{ewe|Fh_)ZtG8k*oVQ>bQF?x2xlF<-@h+b=%9bblHU7?0MN@W1VPzzSF*rSzU z;8Y-E!N1-Kyq1jH6^*m5C`wp%5LnHIToKko+hHi!sGBXzlw`5&3`?o3U$@+gb@L)! zI|LIDCuANn3W1!!mDtE_7~v_Z$VeE@E&n7AR#oaNO{b$WKuooqZbO0~NA(GE9h83 z#3vs&hcf>vo$umpy}5)EDq*_z#H*c~NR>`v&>{M4^R zhG6yBmSy@%*W;8q_llhdVz@l|qHl%yk5k|*DhhGl{BEsdDJjHb*Q`#%QECRI!oXM6 zKoXkmuL_5g*yTX;^$1o1#YWP*X#I_`_iaTuwotCU%-99S*uP+meVj4&HV&Dp^GnZ3 zKCg=QwOvzQB5a%61y z@E*o~ShQmY7#sdRYA>&iY?~I5M;ROb?H!EGipZa1Y~=puMc_#h_=0$U5-pq~$UP+9 zkBawWXod$EO9N;OkG&%1aq)gayswD&I|1}|@yAm@-@@2C#NTg5I(a*Z% z%J}ko5cwh^m$85N-T1SHhpECA@#k@zyR|QO#&P9oCTHLfz<3**K7qYDNfVA^fSbeP zSv=l~$1^mA1=uNjbqXO>5bA77r~>`2o}-qP@#$=o>J~9*ST=pvb3jkhN8h^anJ(^Ory&7(Ka;WO zwxh8%=SoNtqnc=R-R-umwnXoZU$M+qu+l%?hBsryaxebnuGJ0W@6*$#;)^j5$sGr1 zm`WuQ(4*-m07MzU5I347=m&gpyH3D~$-JTwZRIGUPDBoK{tRx7{k_7d+ z1(=rM@XKj6aCJ$;QiZA`t}okajE}S^|Cx2$vzEK2r#Qsu&|Yr4uIF6Y$SzwQ%QID# zAUqXG6eN$3Mi|v@Dz(Od%ywZupvHixy4>`|Zonx=pa!zmI{Pw@<3!BgH0OK z%ak$Lv%SmmPh?=#ZitOW(c#KSWI&75g^4=WG6Gi&SS1EFl3P|or3R6^(yA_R5Y4oL$!NeJMAi{QywklP&GyzJj zX_*_AS9U!oaFqVZIDU(5v{jUXr_jK&R7JaAh|gcQgZfIwthX{&C-CgBMVH0DcBN%@ zvTK3msuU$v)i^==w8o@aXk0+EAPQ4T-@li!;nbY*=Y#CSDYk>n8E?9NZG@%q7~X%0i6CHz0ElxgkuGu}V)=_=B{~5sXu+nymsq_N1WCdZ6nGXx z<`pf)gUFF$f_O!&`k!O-aG6U@4*bVU;O3tKOVqI#gd#_@RN-(cpczV%{*tmIa+H4}NyKH=Bq{M$xj@Q-0nUuku(iFjg;>jP&~OIsvCG&nT`2}}`886XC^ z90*^@Q9x0eieteJy(x-kkC%m@M?&B-3zHPUL|q`MpW=aYji1a9e{;@sVw3~UAyFeZ zs#)?+K?TG)AWvIlfCo}hi6G)y)=h~lsY$E||B^80juQ~2$)&}oC%ex zASD^+j1Z=R=i?}zO^W9Ua43NBe}qds@stH=#F891t`s|c@C@)oIVQd6Nn~XXDHj5T z(&c%hlm%T$kjL{V#7j_~3!WBFg%Cwz5=)EW*(3n|Eh%tW5pfec*y4Ob)EcBIJz7g9iOC zL4+K5*1-p7l|;)~5ih}o0O3;Ofl{M5gn*;Gb0|ttp#w?K7LO?`!)1O6MYJ%KeWZ*?km0eM z9xyl&3J`1w2tk2IadZwXnC3r8mn6VBCbC3J)=foH;)MAjV8lz-h$3-?gm^AE5GOC- zM0z|B=p2PpqMYz2Q9uI3yx>;+#c6P4@#J&}m&71>5Y%|yLuLg}{Kw@+pqw;kTWYo7 ziujNm@<9DB@l&}Gyz(}R@*=uHCJ#THKr_x6k@<*+Sb*JFxoJaRFBo#M-Lr7 z?;bySa%yzJ@_Z6T@VsTYCLC0N?b0Z%n%xR1teOqX8QN;u=wpwKVzq4lt%#FW)+UPQ zjnd5N3nxzom6=&<`nmImE0@m(Zw{==<+Y%|TzT2M3dd@@>zcULRD$v#H*1>8*b0lIuIpy8At5ejkD1UKUs|*F=d7dhV*Sf{aPg_HCc`taVAlv``}2>=<59=7ywn|6?KomHS&M3#oxt=}EUJoE z$}YFv%q1r@JH)Pqh7@l4#^fH~IgIgv5|f)$c;kmRb~EG-Ppqg!1 zDTA24P;{&WVtfMx*C@yY5-7wgoyZ!s9<^n6&26d1N|X*owHll^UDJd#DL&F5#1VN- z2#Z1JjUvqBovvyS^(Ku{MsF=M6_1Qqgv28$yAo6Aj7m3ZGlCM7?Iq23>^-g9OiP*j*)3k~W28?M~fkYkSU=yxCZ5WL?i{+E--qBxMR0?l5EoOp-jO z?Wp9?W%wPt*$n$FaNt{BP*?lLbX2=tqj7>_3muT(u3@iTg<;R$Z!5!Qqz12?$_fD) z_x+WO%g0NRo|Wi1^;O?)MyjOm_w-)au??DGCx`6f?;aZhh%WHVCj5B`V^S#zu%e>4 zZJo*n>LJD1^$a(a2plhlzc&$vMgT!3u-Yyzu~igdY}!lFGuQiKNFE|A_L$2T1JFX z={E)$IfWU)C}#NWk5bDvh6Yu*iNQfK7_ssr9+YyoW7k_Ti!gA&!?|Bf!3dRi*Y#nc zOFx41Ydysc6@oryHB)rh39l&&3qX)Jl7^!+0osEt=@uM?wCrV7Hy}G15vwCQj^A+{ zRaH=V)&o~#0NskDQm?Ci5TiO3tXdo5Pw*mhOJS|Ly{-|Z^tmmMS+85Z0)}WrMBS{f zC=qH1+-zKy_TP$R@cvsiXACg*?i7Rf^@kaD+i`3o$_PMqMt(!7S79j})xcu_ zk3l@P;IS2tAw0I>F^tCu9;0|{#{(W_&|nOo8(@$kz2!lkJy5uB4x&HBMPG zEJ8FPVMNp#pL9ndMH)#e`E?^xH+3~Z8%v>W;fe{r__+pDzOAo7TCd>ZhoJ2?{cPQI z{kGYmmIN1vOG*|fNhLxzCKW4-bo@ZGp@fe5@J8WB4wE2*wi9IAmxCZ%^PE+!smFZ9 zajg!yN+fF#nG`fj#^{!vupLp<{BDgmNBZFvjKz~7vYu5}$9=$7E%2It#_!gI-z=Fp zdZ6Xdr)v?NU~N#=6IBEsS&7*sRh!mTjF4(0GwKobuG_!S9B{nh*(6L zjWx>)Y`ts5_(sKE^aHP358!E0l9rs-aK6XvbYh|wsC?8DK{8!j-_UH@^+@)hWi7`u zvw`D=JsZk~Liu!15rP6xc*hFtm{lBzU_fkj)tmyO1`1zRwpu6@b@`pR!XBw%4DfYy z*y8>5EptYiv6lzfQRc6hMrmR)*EI6EaY37YwzEV+ysz$DAG^>?zv6!ppn&o1tR>ik6!VRIp;T#b%dB~Z{;o>idpdN8`7IQ3gq|gO<|zCO zwUF|#+vo^OkwMJ}gCC&}Gxj_^pQGm!baMPIX09)1=upCZx1O;&Yj2|V_Kz7IUU`|Z z^F;X^J>iNES_Lmd_c4}&8!1?-;Yi9cc&cHHVa$i|63q5tg8z1Yv?aBVvD7;lWA9{) zo#o{)f?^)o{R})v!I)<&&Ya}BjJb>r-?fji%V;h=#)jX04`V(Y7CnNH6L_4&V-XJ= zf_S!Cw91W%Vy;%4sG8Mcu~;ZuR<)3?6$*_;xmq`Bx$;E4m}?rPTDev#m#Xz*vs5&S zMRTH1s8t?gEd9;Y+eg#sy{1=Ru>*^$!`{jCUbEepDDK^lDBh;-olFBTo!&ds3A_#0 zu{*)u$@B}to8I0mWJ;YOzbW`d;1cwj4z@6T>ev)_dylKyvVP6(2)FR`xB4@TpdkKd z&F)00pLIOAxIAooU^8c{ATEn)zzI*{DpEjasGF ztQ86st6Hk(bJdA*-pE_lM6GHT>xEjmSZq#|CMZFYl^|FymaOtbzB*x+D!GznSk-*N z%omF}vyd|l%PbhhykS)Hm3*<#w5)QzRw^`#jS0glTa}54VpK%IhD#+%=7&B>X!M;+ z+VPn;Xy5NaH@!ds+^ZJ#+i*3wL$5P%GB8FbU9xVs)e6f#LwYkFnBMsE)q6k;Cz-ZV z=n%e0#5kFNwswrhq&wE~2D8JEHey<3}NJ4r$Lsu^?X3;0ed|hIUO$m6= zo)O;|^h(_QLxAV^WuXx|y9}{U(mHyRv9ZzVvqvu;pItgNGY@IsrHdc!B^g1U&Ucg^9?zG{m`jf-0O7LNO0H6<8va+b&t$?N8I`6Px+;D z1!Fd-uN~>0$gkSZowk=xUZ_<|=UX#jQiqPu&di^>xM@D-lEE|<^c@-eyKkZU5qUdL9a5lTOpsCTR1$s*dISSuV_2nPB@#1 z#zogPepd87c>gS$GYTn|GE%CC&!^bf6OH<+chNP2i)QtF{nDaYwM(_5=UdaI>F4}8 z_tLqFQ9hYVv9V#Zjq`b(RyM`Pwu^BAMjzuTHueZz&pw&Wde$H{$tUI7b#Sdc&`Hh+4cZu+86i$ahMt1%c)=|ElVt2j& zgZx0nUxxXGfSE1}KlzQh(i7YtI-L}OQqy`9l7OQV?&UVs7iIu3ABPv(0hCIk+pv1}d$8;RM%q@x zRvW&Uy{W*S^-7eaXZcQR&GNElLqF3+n=~@2>3Hin02t2KA$OdlqOA&b01v7~p$(c1 zsc0PPPBHLzNtqMRhwWx@flvrG3(HYtbymr^O>yaI5WGjrh?D!e-ur10= z9WUaDh;I0GH`6v1M3i(_^P&=sY4?rs`oeA=DL}h;{-mg z{>|VD0I38$@^y7%6Kpvu5n@-`>FEej1muW_yF5aE!ewqSDy~QHRh@_4X+~9&6NnYg z*rNkGc~}&091490EhgW`v|-pdIiMN$x>;HeeR+VrAu)Qgl*{F^kLYndBRI$f?H1NS zuAvL55Uler3s1zS69s)H- zY0y3d3IF)nOOD#BM;T~Qk_dE2-ryj^(5#6~C)6(Aifn4~E#;2Wu%4h>9B3nve%J~? z-+~_+H2DpB@*Dbz?h-$=@kt|4`|`=&nIzzLHquY z_Wg_6_b+L3_=xuXQSJLzwC`WjzJDDK_5}|g)576VONRf37XFI%{R!>+x3uq1F-G=t z`2CKS$4_fRbX*1^^Z2`rQMuyxds@1mWem=j==b{?eR%bP9^m&m4gT|tkxt8VTQp@ST{sY>gywKUz=Rw$K~(5TYh!l%z(C zJq&8QfTB{TYhZ9C!^nLIe^|m3SGdAq)q> zKP{7>@EpS5*Bf3zIGhxRtP=cN5WXMbl?WYNyE2mR4WB~zulCZJM)=1NJ{6&J6yd+! z8-5JopXm*sMff**=|7L~|BUe22z}g6F*4B$KacPV!jDJb-;3}%!9S)e()$o@A^g2t zu;QJMV0{3wZ|qG43kxGCxRDP;;C}((Payn*k?;>8{2%tx`9*}k2jL%zD8?^AF?I{x zi$;9}QFn`|Uy5LT6jA?3M5Q88zk;X*p=lqDMEx3~-XpL+I;IQf*AexPMbxj6dIwfY@g#Ec>mqF_W1{|hfcQ}X@w+_vH|fcL76AW52iR(N+-?vN%kKl|$0bmN zg;#r7FrqAcPG{j&&cZ&Oh0p6O5WqIE787CO4|FD8jWF?rUM31rCcdaM@deJrlR6V$ z(wQKDA*UO}1@VVE4_}Dz@MT2(TOp&5CzZt?0pi~Yh%YDb@D%|3nGPTv+C=2=$AJ2} zgo^O+)m|QAh4D3=hp#5^fa<1rAb_EUA9Tzp52$&Hhp%GDXt`&}4>HEM>p6|_b-QId z!8m!z#b)KMvlNg%y_B9Y{QwKGu^^0pVc)|sVZ2Cd#M+WCmVUALDvdAUk6F7GPh9TA z->8czx||O-Z?p-HQT!NIJaOR@zcU)PnLDKq&CF`Y3CKnhyX!Pd(D>2qhhirFbnb&p zn=fi!hvd8y^9C+OKHkT?6Ja!M)Fb4q)@<3PS~tKVfoGviEN\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/700/f14f095d\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 13:30:03 22.06.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\r\ + \n#\r\ + \n#root.mnuc.backuper\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n#:local Script AM-GlobalConfig;\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n#/usb1/mikro_bak_rsa.pub\r\ + \n#:local FetchFile AM-DOHCert.rsc\r\ + \n\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\r\ + \n:global MkDir;\r\ + \n\r\ + \n:local FetchFile Binary.backup\r\ + \n:local localDir \"[usb1]/scripts/\";\r\ + \n\r\ + \n\$MkDir \$localDir;\r\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +add comment=awg-MikroNuc dont-require-permissions=no name=\ + awg-MikroNuc-uninstall owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n :put \"Uninstallimg AmneziaWG...\"\ + \n :log info \"Uninstallimg AmneziaWG...\"\ + \n :local prevDNS \"\"\ + \n :do { :set prevDNS [/container/envs/get [find where list=\"awg-MikroNu\ + c-env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\ + \n :local prevTmpdir \"\"\ + \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-Mikr\ + oNuc-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\ + \n /ip/route/remove [find where comment=awg-MikroNuc-tunnel]\ + \n /ip/route/remove [find where comment=awg-MikroNuc-dns]\ + \n /container/stop [find where interface=veth-awg-MikroNuc]\ + \n :delay 7s\ + \n /container/remove [find where interface=veth-awg-MikroNuc]\ + \n /container/envs/remove [find where list=\"awg-MikroNuc-env\"]\ + \n :if (\$prevDNS != \"\") do={\ + \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\ + \n :put (\"DNS restored to: \$prevDNS\")\ + \n }\ + \n /container/config set tmpdir=\$prevTmpdir\ + \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg-MikroNuc\"]\ + \n /ip/firewall/nat/remove [find where src-address=\"172.28.232.12/30\"]\ + \n /ip/address/remove [find where address=\"172.28.232.13/30\"]\ + \n /interface/veth/remove [find where name=\"veth-awg-MikroNuc\"]\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg-Mikro\ + Nuc\"]\ + \n /ip/address/remove [find where interface=\"wg-awg-MikroNuc\"]\ + \n /interface/wireguard/remove [find where name=\"wg-awg-MikroNuc\"]\ + \n :do { /file/remove [find where name~\"awg-MikroNuc.+tar\"] } on-error=\ + {}\ + \n :do { /file/remove [find where name=\"sata1/awg-MikroNuc\"] } on-error\ + ={}\ + \n :do { /file/remove [find where name=\"sata1/ru_ranges_timeout.rsc\"] }\ + \_on-error={}\ + \n :do { /file/remove [find where name~\"sata1/pull\"] } on-error={}\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\ + \n /system/script/remove [find where name=awg-MikroNuc-uninstall]\ + \n" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=Bridge-LAN registry-mirrors="https://re\ + g.vados.ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man manager +set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \ + enabled=yes require-peer-certificate=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=Bridge-LAN +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set crl-store=system +/container config +set layer-dir=/sata1 memory-high=200.0MiB memory-max=4096.0MiB registry-url=\ + https://registry-1.docker.io tmpdir=/sata1/pull username=amsternl +/container envs +add key=AWG_CLIENT_PUB list=awg-MikroNuc-env value=\ + "NAonhRSuFIrFpNKTs5X32ItcvFuO1kiJUigQZb95YlE=" +add key=AWG_H1 list=awg-MikroNuc-env value=472437748-472438637 +add key=AWG_H2 list=awg-MikroNuc-env value=707808381-707809250 +add key=AWG_H3 list=awg-MikroNuc-env value=1609078552-1609079495 +add key=AWG_H4 list=awg-MikroNuc-env value=1012329484-1012329741 +add key=AWG_I1 list=awg-MikroNuc-env value=\ + "" +add key=AWG_I2 list=awg-MikroNuc-env value="" +add key=AWG_I3 list=awg-MikroNuc-env value="" +add key=AWG_I4 list=awg-MikroNuc-env value="" +add key=AWG_I5 list=awg-MikroNuc-env value="" +add key=AWG_JC list=awg-MikroNuc-env value=9 +add key=AWG_JMAX list=awg-MikroNuc-env value=920 +add key=AWG_JMIN list=awg-MikroNuc-env value=105 +add key=AWG_LISTEN list=awg-MikroNuc-env value=:51820 +add key=AWG_PREV_DNS list=awg-MikroNuc-env value=10.9.0.1 +add key=AWG_PREV_TMPDIR list=awg-MikroNuc-env value="" +add key=AWG_REMOTE list=awg-MikroNuc-env value=109.107.177.79:55055 +add key=AWG_S1 list=awg-MikroNuc-env value=90 +add key=AWG_S2 list=awg-MikroNuc-env value=136 +add key=AWG_S3 list=awg-MikroNuc-env value=45 +add key=AWG_S4 list=awg-MikroNuc-env value=27 +add key=AWG_SERVER_PUB list=awg-MikroNuc-env value=\ + "o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +/interface bridge port +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=*C4 +add bridge=Bridge-LAN interface=*C2 +add bridge=Bridge-LAN interface=*C5 +add bridge=Bridge-LAN interface=*C1 +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes \ + forward=no +/interface detect-internet +set detect-interface-list=Internet internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=lo list=LAN +add interface=ether2 list=Internet +add interface=*C6 list=WAN +add interface=ether2 list=WAN +/interface wifi capsman +set package-path=/tmpfs/capsman-packages upgrade-policy=none +/interface wireguard peers +add allowed-address=0.0.0.0/0 endpoint-address=172.28.232.14 endpoint-port=\ + 51820 interface=wg-awg-MikroNuc name=peer8 persistent-keepalive=10s \ + public-key="o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +add allowed-address=0.0.0.0/0 client-address=10.1.0.2/32 \ + client-allowed-address=0.0.0.0/32 client-dns=10.30.30.10 \ + client-keepalive=15s endpoint-address=10.30.30.10 endpoint-port=22022 \ + interface=wg-wg-Master name=MasterPeer persistent-keepalive=15s \ + public-key="64Y25EUZQQt8EIeAJYD8qWt+te8qvGEepnswdBgmzlY=" responder=yes +/ip address +add address=10.30.30.10/24 interface=ether2 network=10.30.30.0 +add address=172.28.232.13/30 interface=veth-awg-MikroNuc network=\ + 172.28.232.12 +add address=10.9.0.3 interface=wg-awg-MikroNuc network=10.9.0.3 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=Bridge-LAN \ + lease-script=lease-script lease-time=10m name=nucDHCP server-address=\ + 10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.9.0.1 verify-doh-cert=yes +/ip firewall nat +add action=masquerade chain=srcnat src-address=172.18.0.0/30 +add action=masquerade chain=srcnat src-address=172.28.232.12/30 +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=bfd disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +add comment=awg-MikroNuc-dns distance=1 dst-address=10.9.0.1/32 gateway=\ + wg-awg-MikroNuc +/ip service +set ftp disabled=yes +set www disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api disabled=yes +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both password-authentication=no \ + publickey-authentication-options=verify-required strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool netwatch +add disabled=yes down-script=\ + ":local msg \"Host MikroYellow is DOWN\";\r\ + \n\$TGSendMessage \$msg;" host=10.30.30.86 http-codes="" interval=10s \ + test-script="" type=simple up-script=\ + ":global TGSendMessage;\r\ + \n\$TGSendMessage \"Host MikroYellow is UP\";" +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260628/20260628034001-Diff-Config.rsc b/MikroNUC/history/20260628/20260628034001-Diff-Config.rsc new file mode 100644 index 0000000..2fbb5db --- /dev/null +++ b/MikroNUC/history/20260628/20260628034001-Diff-Config.rsc @@ -0,0 +1,109 @@ +27,33d26 +< /interface veth +< add address=172.28.232.14/30 container-mac-address=22:A6:30:44:4A:A0 dhcp=no \ +< gateway=172.28.232.13 gateway6="" mac-address=22:A6:30:44:4A:9F name=\ +< veth-awg-MikroNuc +< /interface wireguard +< add listen-port=14587 mtu=1420 name=wg-awg-MikroNuc +< add listen-port=23934 mtu=1360 name=wg-wg-Master +62,66d54 +< /container +< add comment=awg-MikroNuc envlists=awg-MikroNuc-env file=\ +< sata1/pull/awg-proxy-amd64.tar.gz hostname=awg-MikroNuc interface=\ +< veth-awg-MikroNuc layer-dir=/sata1 name=awg-proxy-amd64 root-dir=\ +< /sata1/awg-MikroNuc shm-size=4096.0KiB start-on-boot=yes +90a79,80 +> /routing table +> add disabled=no fib name=r_to_vpn +4665,4706d4654 +< add comment=awg-MikroNuc dont-require-permissions=no name=\ +< awg-MikroNuc-uninstall owner=vados policy=\ +< ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ +< \n :put \"Uninstallimg AmneziaWG...\"\ +< \n :log info \"Uninstallimg AmneziaWG...\"\ +< \n :local prevDNS \"\"\ +< \n :do { :set prevDNS [/container/envs/get [find where list=\"awg-MikroNu\ +< c-env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\ +< \n :local prevTmpdir \"\"\ +< \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-Mikr\ +< oNuc-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\ +< \n /ip/route/remove [find where comment=awg-MikroNuc-tunnel]\ +< \n /ip/route/remove [find where comment=awg-MikroNuc-dns]\ +< \n /container/stop [find where interface=veth-awg-MikroNuc]\ +< \n :delay 7s\ +< \n /container/remove [find where interface=veth-awg-MikroNuc]\ +< \n /container/envs/remove [find where list=\"awg-MikroNuc-env\"]\ +< \n :if (\$prevDNS != \"\") do={\ +< \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\ +< \n :put (\"DNS restored to: \$prevDNS\")\ +< \n }\ +< \n /container/config set tmpdir=\$prevTmpdir\ +< \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\ +< \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg-MikroNuc\"]\ +< \n /ip/firewall/nat/remove [find where src-address=\"172.28.232.12/30\"]\ +< \n /ip/address/remove [find where address=\"172.28.232.13/30\"]\ +< \n /interface/veth/remove [find where name=\"veth-awg-MikroNuc\"]\ +< \n /interface/wireguard/peers/remove [find where interface=\"wg-awg-Mikro\ +< Nuc\"]\ +< \n /ip/address/remove [find where interface=\"wg-awg-MikroNuc\"]\ +< \n /interface/wireguard/remove [find where name=\"wg-awg-MikroNuc\"]\ +< \n :do { /file/remove [find where name~\"awg-MikroNuc.+tar\"] } on-error=\ +< {}\ +< \n :do { /file/remove [find where name=\"sata1/awg-MikroNuc\"] } on-error\ +< ={}\ +< \n :do { /file/remove [find where name=\"sata1/ru_ranges_timeout.rsc\"] }\ +< \_on-error={}\ +< \n :do { /file/remove [find where name~\"sata1/pull\"] } on-error={}\ +< \n :put \"Uninstall AmneziaWG Proxy complete!\"\ +< \n :log info \"Uninstall AmneziaWG Proxy complete!\"\ +< \n /system/script/remove [find where name=awg-MikroNuc-uninstall]\ +< \n" +4755,4781c4703 +< https://registry-1.docker.io tmpdir=/sata1/pull username=amsternl +< /container envs +< add key=AWG_CLIENT_PUB list=awg-MikroNuc-env value=\ +< "NAonhRSuFIrFpNKTs5X32ItcvFuO1kiJUigQZb95YlE=" +< add key=AWG_H1 list=awg-MikroNuc-env value=472437748-472438637 +< add key=AWG_H2 list=awg-MikroNuc-env value=707808381-707809250 +< add key=AWG_H3 list=awg-MikroNuc-env value=1609078552-1609079495 +< add key=AWG_H4 list=awg-MikroNuc-env value=1012329484-1012329741 +< add key=AWG_I1 list=awg-MikroNuc-env value=\ +< "" +< add key=AWG_I2 list=awg-MikroNuc-env value="" +< add key=AWG_I3 list=awg-MikroNuc-env value="" +< add key=AWG_I4 list=awg-MikroNuc-env value="" +< add key=AWG_I5 list=awg-MikroNuc-env value="" +< add key=AWG_JC list=awg-MikroNuc-env value=9 +< add key=AWG_JMAX list=awg-MikroNuc-env value=920 +< add key=AWG_JMIN list=awg-MikroNuc-env value=105 +< add key=AWG_LISTEN list=awg-MikroNuc-env value=:51820 +< add key=AWG_PREV_DNS list=awg-MikroNuc-env value=10.9.0.1 +< add key=AWG_PREV_TMPDIR list=awg-MikroNuc-env value="" +< add key=AWG_REMOTE list=awg-MikroNuc-env value=109.107.177.79:55055 +< add key=AWG_S1 list=awg-MikroNuc-env value=90 +< add key=AWG_S2 list=awg-MikroNuc-env value=136 +< add key=AWG_S3 list=awg-MikroNuc-env value=45 +< add key=AWG_S4 list=awg-MikroNuc-env value=27 +< add key=AWG_SERVER_PUB list=awg-MikroNuc-env value=\ +< "o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +--- +> https://registry-1.docker.io username=amsternl +4801,4809d4722 +< /interface wireguard peers +< add allowed-address=0.0.0.0/0 endpoint-address=172.28.232.14 endpoint-port=\ +< 51820 interface=wg-awg-MikroNuc name=peer8 persistent-keepalive=10s \ +< public-key="o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +< add allowed-address=0.0.0.0/0 client-address=10.1.0.2/32 \ +< client-allowed-address=0.0.0.0/32 client-dns=10.30.30.10 \ +< client-keepalive=15s endpoint-address=10.30.30.10 endpoint-port=22022 \ +< interface=wg-wg-Master name=MasterPeer persistent-keepalive=15s \ +< public-key="64Y25EUZQQt8EIeAJYD8qWt+te8qvGEepnswdBgmzlY=" responder=yes +4812,4814d4724 +< add address=172.28.232.13/30 interface=veth-awg-MikroNuc network=\ +< 172.28.232.12 +< add address=10.9.0.3 interface=wg-awg-MikroNuc network=10.9.0.3 +4825d4734 +< add action=masquerade chain=srcnat src-address=172.28.232.12/30 +4835,4836d4743 +< add comment=awg-MikroNuc-dns distance=1 dst-address=10.9.0.1/32 gateway=\ +< wg-awg-MikroNuc -- 2.52.0