From 51547968e40f504a8af277f63eaa2d48b9a14bee Mon Sep 17 00:00:00 2001 From: vados-dev Date: Tue, 21 Jul 2026 04:00:03 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Jul 21 04:00:03. --- .../20260721/20260721040001-Binary.backup | Bin 0 -> 388625 bytes MikroNUC/20260721/20260721040001-Config.rsc | 5522 +++++++++++++++++ .../20260721/20260721040001-Diff-Config.rsc | 3 + 3 files changed, 5525 insertions(+) create mode 100644 MikroNUC/20260721/20260721040001-Binary.backup create mode 100644 MikroNUC/20260721/20260721040001-Config.rsc create mode 100644 MikroNUC/history/20260721/20260721040001-Diff-Config.rsc diff --git a/MikroNUC/20260721/20260721040001-Binary.backup b/MikroNUC/20260721/20260721040001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..06df2e3290332729b5c83955bfd64b9c1a94f2ad GIT binary patch literal 388625 zcmeEv2V4`&_Wx`WAfZTaf=HF3z-H4`l#VF9iVagCQi4fnih@|chS+)D&Fh;f9`wlzTY#S53{q&l(T2fob#P?W_OF%FWq8TuK~0H08)l$ zmQX4aOVUvQ00ID@0OgO^DzDKhuhlB=i04Bw1ON&``FRG`Nf*jJv!o&mRr6k|W3xh` zFjVEk003Sf6e9w#1_9b26e9sZ1^^Hc01z$EjA(;qfPiKS&;ZS3g+igAfMz>j0GjPc zXsrtOxr* zI)G+Z^HvvOH(COrh?|)zZ=Kgs-JL*~CFTodF{;MXRE-k=0AE!3POb8;2mpH^$6@CP z0M}Jzx*-6RtFCv4WmMPGv;as0p;$6N5S%^)Ae0aSKq$Jp0HJ_xFwq2v9U)ah28gS7 zC{BA3Am$`MLCi>i0xU>?qG3q_Wlz8LkIvN zOYBKN7a-)%3WcJjOHH9XStz9%0L0FS&lGSu3>L$k#pLkZ>2xj|1&E!Y2<^&ZbY%#- zQiWX^qONQ@rOm65^3kD~E(sI^@Qw%&KmtGyKyhdWZ;1f;Km-)<5hhJA@ql!}d%U3m zl=t}c_VBw^-=h&6S1S^r5Z^#f*gz&U5CMgN-~6l0fi{U_@S9g=Ti<-AU%z>dh(Tkb zLYg~IKo`2xMRabPH_vGE<{AIVn;-l2=Ev?qTEvVD#T4GZE*yN%LIe(eD`C_2m5K#P zLiZ4#Ffu?~Mk1k@HE3P}p#DIL000vJ022WKlK=oy005-`03iTKG60Ae05AkVu?C0) z0FVIy&;rf)Si>9F1?0EWUVQdm?56FC4BK_&p?QXv3Y0FW2(0mue`T#Evb0|5C65rA9( z$P8VTYz>Fi@?a~Y0KgT{Xn19e>SQbcl!9>pP&7oKWf~a(Uv#a{bRAuMqk{c|0z!TKTqpmeV9ECd3ttE+A87dVxa)E8= z2+dHR=$L>gmB1-SOdB*KT5wvx=@g*>z%wEsYsTTXZr4R37RKd-`T29{L5z@CEHbWF zXBpk6Z#Fk0I!z$<&x(sn_Ko%oj1a{5c-0YsU6;^atf)w4u*BC>6iE*Wj>E)g-zY(N zB+8cr@={WwlYNDO*&&!PJ}tlts_~A&>2je|#N`WZMG~oPC|4#IN^Sil>FGkgTr5d1 zZzYsaNB)6OYVmNPr2fxJB=R4V$fsL7Xf3>i>k?&lPb-Op=Imz@Ny$!fkMoZfr*pp- zO3)&dlT<=EK1L;!VLp=d+L^^$q1@DWcW zP-6y&D@ZDH438ubia~6|lL@6+YEbcg0eGFC#!VMP(dLViAOeEs9by6agFwq(mG6aL zS7Hu=67%57P-X9xDhJ0r_8=64$U?0yVF@Av0Isj`5)k_clKB~){8X_pU7je(fU`&j zG21(ZLJ_3uvO%Fx_^9&lahtCE9RdIZsYrphgn(u;tOv247Xbh}BQ!@Oa&++v2@VL0 zN%W5m_IGVTV|vOy#ezgZrdZ(fT{E!DmSzmm9F*G93{-(Ft&r8Nbo;IWNGEJS7t*2Q z=+Y}ZIws5~G@w=0WQk0k&P@}-;YpH8GBdiX*iKj7A7mawm4`z>RpsHmGF5q4nWf5W zApp?7(t$wRqZ}7#mC~CjuoZGCBnx6v1OPjdRLB)D+NwiTv(P7J}LP4TjDo#ogN@egIPC)en1s>s=0|Gk)V(?T+ zk~Tj0mLG}1SW8f0#lf?g9!m9P-q~`FayAjpr=iN zU;!cqVyYymMUXVpglQ6KZt1^-BIH|&kYA#RBoNC|{x$RvzNLroYxD^D$&!D~h!MY~ zhxkkMXi9}?61i~kw<88rG6akOu0Z}jWr*}GMWi+;YL~?oNMzo4>LJbiL83H-XsYaQ5rn{^03uLI|Cn{|jkuLEiSz77FSOVZamYG(yEBOR(7s5%5HwE&L-m1>4V zsSn^x#>wlK^NPM zR3TR;w3P~Fa;{WvD^C{MDjgQK;&fYyR3Mbv$|bhkjEvM={GaKqlaZzS28&7C(}}Ienls((e$Z&4owYg>`9ki^^dT6U_A+7Skt@6EEE<=d$|azitP znL>GPhESHHn#nOL#~M@~166rAv($O0AO@?hL-aR5m2Xlg6g*Y_lR}{osPfPY##iOP zC=`lRRUQHrb(0K_1n*aRX}c>4(ej3WXtg$O_?QK^m`i2#{O1jq~`082}}8X)?5j{pkR2y-70Kt8L5V{r=d5ngG6$tMI*v_B)t)xj6lu^9oB0tHMG2!MiB z5|m=Jj{wL^#v!1J0LaD0030AFtJx6&8S>elsQkYJQTcxe)#h{sz=^0V*9n#*0pJXe z01#Y=N=l(gA{0T7Tro_bBx2)XZlbEeN$_McOiGA=qBRZXro+S?0hI0@@E$$keV_=S zm{1WVwKHLXvBa;^2Vs(0OAh?oc}n=7<*5Pgz)cs*-Bk|mzn{6pe;#v5{~m!g$QDb5 zsY01d&D_C%yX2DodCVpLdzfo1%T4DeOC{-&%ohF*_}lrb@z3M$ze#xYlO=LlhNML? z@cs_oBCRYL8QRu=9(y(ZJ>qMW!5`|LnUN~t3e?&`@ON;S(3-;#vHZ_+*aUJ|AjwW| z&13%G!Q<9=43CHY^LVWF?~!6-NqTCodooul$mU9g?l|sF{o7d#0ro$S#hU*f7F(xf zrpm=i*1G@8(Hg#m;-AOs?^YPv|DqL!o(crJ%hI^1xR)$LB9$kmO86=2=uN(AISdz) z>U=Yv55;Wp{VP@=6tjV==Z-KT17N2Ow}^Pk<+;(QmC9=Zony*Sf+oyCe=-60Sm5p> zxU$Fnu?0@J-`WlaitK3AQV%(2GuTgJ%IZ)a9>GZ0`6X?5FtZa9PBW5p>(g|fdkybW(2Ra zxY^(`o^l+n<)s-iI7&+Ypz;TuPp}jCgAOV^pxhh-YZF?Zbb=%+dFh@iNfNiX0HMnY z{@~GF1eqS}|HcIfp}H3*OWKqv-%7H}gJ z3@^aY9gIHW(g7Vr%B@a-0y#z@!axJ=|H)B#8UY1&C_-ZFpxeTZED}r8pely`j7*tO zs*Zk@sCtFWQRiWqsjBPH=b;XWz`%z(P*OvH767V2RQuqUo8B0&Dhr=^oHcQT9h7wqt{_dE{@1BF5lw2L2F7bzQ`3u^XJ0aC z@tqXQ=1Z1tQ~Rv?s8u)0W#pZXbLuTq*Ia$5q-MQ#(P@Vcy*2yD_8#h2;g^k5gZtR0 zw#A#T6C39Zj1l583wh(6ZH4m&pXe}92RG0)+bMYyGf#hJmdU5FL8V12=_OYe_3^jw zx#gkmf$Di@8;ozioT8*AXHdsy-FrPV?_RT_r0SZZE~JJWDo&9~!eaekEacAy3x)<; z2J0JwU<{B#`byC7od)BqMt-@=N(dS7Q~RsIZ75ur#^i&B+2P0dyxOiff*YMAVpfCU!$0CYIt(FT=k?> z2Z7-c#$YwnF$#Rb;L{Oz)k1H+frX`miPyE;+i&JX(kP!#*69NP)GPfAsYE1B#T6j@ z-BC?1c)SBbF*5)oC2&^59TAo-TB#XvQmFtqt;ld%!8j>yKEA3z<>Xf?L1WccsILJ= zsI>_eDy0FP!EmZlpeI;milFD0;0RCgd%+C}ZddG}`mkw{qR?PJLwKbfO!Qy^qZUw< z?V!8Q4)VheGN#2NhYJi;WH34?aF?a=+#!e6W}qz{s@}h_R39j99^S?heLM`>Y^RZw zDU`_}XTLTnOXf;jOpBk2v+(E#La_=R=w#iCr?736sX=z@0I)|#>2AfzNaJ)jD6INBp26Ff51f+<==W)crW9`i4gb z zU_kAgYA}NIeKkT$HAL0h57h{5RD+RuWp9L^RU>{|jer~5mTJVGRU@@gjnq<&^s{Oj zZB)}}siuJ`Ir+oAX?|M`PB-OkY5uH+*3W8a!BNFgjym?M7B(mn>O3r@&cmTs=V2Wv zwH*NgFl2ox#4P@1+z6^?O&jjOO)v}$7q6v25=e1S4j zHA8hB9&%K92##K;039sKg@mbSyQwMz|9wCewt_n8hAIyM)-WiyDxl@9stW^|@v1y@ zn5dcoaO0?xMkrPSz!D-L0Y9(UXiX6A6&xKEqz(MSyrLu$xotwg7#tdPQBncJo?x^R zFXHG8hW)_U@?KchAfzmNnVM%?OBy*yxN3R< zs;xM2AWzpH3URcqw^>duqW~Wsk@P4-Q5jGh78@D z{E6JbA^X+h8^d+a2Xm%840*;o{}J77ocF@Qe=N1(dD!LSeJ^c(Z)f`{{}65M5muI@ z-qP_#rL7m6-$kP#Og3cy#p8m>Mms{wdwTRr&Yj4psPFN~a=9<+jo(`beFRaENJIjn ziRx<-V>=kba}AV;APTetywHwhMlxA`yi>oDr6Fe-{Lk|pj(6P{_clDPH6Mvd02L6> zoRCe2M!27Eh$XClXCC{u->15V=d{W;l-%c^39Fi6rO)VU=8nF#EOz%^zN2JN`7Q!# zIq1={ys@|U-S}{bv211Nwn5Je>yI=P&OJzY6kA?`GOLlHFI@JYOt)J(!@0}r=5FHw zFo0qMg|-+*I>(kL!~CeIbJ_!IjZy}W~67jhL1`kCs28%{TQ6`_urPH`n zjLO9@0b9snp{R&1;&J#QHUkr(7?*{zxm<>T!DKQg06=Y1q$k2IasaTi<U-| z5tGm2W2k_R(pf@=kjdaOIW#sp6rw$q!jr(AdQe}a!o6#;(a{v8k|e2=WIGV<JA}esFtWXysTqv@I8B|wy2F#6`Qxz_?AgfHKR-_m8#UtP&L!2txo?P zBord{t#2IB0K`H>AE1SZHlYwfz`bsF4W+l%thlf|er?3EDLUDuCzh?OH##$`KSHrR zg-l-^hL%S+`W+U7_=Wc-+utnG^ai6SXU)+fc2>g+yA6r+Wm~GY=f%L z$osKZ*Z3Rs#mX`*E}mPqFX*20kazQFAA-q)C)Orz?>eSx>Dt~QBYMqF+LsJD*?fANiNO3=f7eA=)tmaJ3p&2F>&ktwYr3^BKa9G#cXHpJJFK1r zyDZDNMkU>B+-mkFL_17t&5Pb%gLdREFFmx$nLtDUvYd}{zq38#{>b(aZ$&WT&V}q1 zy;^?H%IeVUtzPG1(T>nGIgl(+vx2q@d@FxM$o-QGSZjM38)-M)^j{DjwfWucjiiR$ zT=H^9i_d*JkJ<0O`{J?YcLzH5J-I7w!7%ybIj-vrcihidvh;LF@!aW?re@q*r*FM) zdYOWM@qyOh3(Kn(_NTnQSaLu5T?xOb=j!X*MYnmPOXt#kCckmt@ie>l;)Q+hbxzpt z?eN0gr7)mJZp^e!bM6%MTElwz>Qe4tvs>$*v^$-?-rt<<8GP+-Ko7Uw%;=h~5t@x2 zPY%Zir*iEqE|NCnbnnu&AZ7KlO{OMwSH>UM%}%{HHFbhQusho+9^G%{xcu&oy4yi{ zJGMKLHPGkol{!@cRS~<(-aeay7;QLSd~^;yak6&zqjeW&&P=-nZ6{O^Ew=MObb#7+ z{+`fE_57Vq`8}b3Pw0Q{g#L<%=rlT;iwZe(I-SpA^LZGPAw(H$0Yk{<(CIw7fK3;1 zm`sc(z?cFa#$buq92%WVr_=Z>l***yh^Q?^3lUM9|G-fa%BJyzD1*sC=@^~KqjIS% z29wL@FgP44pGD_Fl=L%uodJN|4`v=hsc#^G3R2C}`CB1X5cUg@Y6x#Igj5QBs;o7n zB0@;z*A9nNWG(>ve?(Q}CCa60D`4fRMlDJO6NJTtL`OyYMECN+7)%VsP(L54JGBj@ zb&7-*l8&Q=#LX(CrQ1-c**T8zZrHAfE)J(&iCSAaoqq$;3c~P3Fcqb#*1$@nh0-vN zdJ&xPOJI+NQk96#P0bs%_6@>pV?v^BqoRFml?<|l9J2NEq5i2tKGkTz3tzRDFL_ZK z6?Y`fdH67+xCyV{eZ2Je?v%=z>)s6ZG0nJc1e%<+cf_;%kJuVHedx?~LwsiRXIM22 zZ`ylgpCj5F_ww-D5wq``G?;{*Ty5~i?CCoDS5$jLuDG<*o}8<*JKi55T9@fRQ+9m4 z;^jc?2?>68*Kh5r|F+lX%PFh_{2R9dFI^949^vq%^hu#7r}us`CW>Syfa=f z+q66J$x_Y@u`YIClUaPoj3D2%z5I~G&(;>yi|#> z3Xwvz5E+RYwXEpLs3w9a2ncAksF#l|*e^PEn{}(E(v`KA*kRv`)8^j*t1$Z*TZ@^G z?x#P}Z))0Y^g`2o3g-vphC2zINM@*sCb_dFqM@NhL|SqLG)tXF5YiAd8Ff^jqsTam zWVt+}tEZ=gFU$C5F@$=zlp>6yt4i^?aIGZ!rr>we3a(dzFgS})UwG>sN!?Hm%38u$ zLK{a_HzQ4@{ZbpLs26O*mc&HqsE#IO@VH*cxG$*$1l7{iNE)S!AShW=6J`isbA*;_ z#P2314na#_XPk7IEuNhx|FXZS)9~nZ8%_(q>{+0>V8Z2oenl@rL*f!Q95}K=!`36= zoT7Kb61OXxXKpy*(YxE_)$b+6uAkAKj$`&7Djz;wtIMXMlq}i{5F52MVbO!#XW!m_ ztlxa|!{OZq(oqyrV$JMD9$02c&Ah(n80;>H+do^M+U?R zkgFq#*07@&PaGJSHsGl9m{GMOCrw&DKkD((;^(Y9w@~}4SAcO%i0t}W7GsU; zDDi@WJf4o>Z#(S~W90)<7LT!PdLwLAH9=dOSYdVbaThsm4be_L8-Twhi_Z6G-*(k;k zaYTG3LnILKISd|+&t>!ZEH;zH<8T>l7LS3kSR59O!(ef!EIN}W;fbemdnTavkJnkorQ9pf`ux@`vw#yh{NYE&PI*|_IJA0N9M>j3o zH^FpB{wYoFb~sv3q;f371Ma)NGA<$d;d|Bx|I3Na=5*|>!^9{T#s0n)eW@Sxo8op%{lYB zxZqQtfv2$NV|ji~bV8gnGIe{m47Z-?Tb?W^Mn){I{dhe(ZScaXE|2@J+m#sj`OIM} zVt2~3VCn#I;I=zKO0W+@c|U~iVBE5GZ0~C*uj{*JO=I{6 zLgub7E4N(U`2O-O1OAGk53l&t79!*_uzKwwz1|5y{Otbxpa^PzdT5ygvL}{ubG15$#Tqv*&6UwtC(v)9{ zPLDTN^n$Q#JoS1;Ygk5su&leyPhr{j(dmv#8r)ShxT|Pz_w)Gc)u1mOteh4#C(|6vL<( z%A&FQnd@O32*FgR|8e^MOe^32G-A1Q&%swGOo|#(kg&Vy-dcOooCoGN_IKab?^tBw zx)s$_8Xv-8fA&i8S7Vw>1aYuTw#+4Z*@ z!;i&X?6-Q>_@=k(l4~8tB{hGccwkFz1x z<;cDEd*AJUu#p{1JC!wdF(=^sibZdXCPjY8d*Ghmus-pb+2Sqk=k}bM>YE+nbfT0k zx&G?ZrxKgl2|X?j4tu2G@*+6bxX+$m*F8TSFlCSI(<@0;rRZ@=@)xTEAEY91!gw> zfX&(nRj*pJ!Tt>5wQ9M7cedBUiG!q@bNuh$u--)Z;?S$9((Ul>SkexI<&&Ln=@jzM z*5A@)<@)ru-@198&wy1KcWTdOpLDnY?xeJomX9_sf!mJqa7tu4jLu{Su>nqP~W` zPZAGrcXM-}WqyYfQ_<@}mh-}S?wYGkJm;KWcYX0Z9cKc=b&L1R#~+_8h%L4Zyi`ta z7?<)IsWMg<22)>}UQ2Pm?22q2r-;?_fmGv(vpWl=F_vHSMP42Idi@|5G=}fkO z!4NUnLOO>fWYK9HHYUJ$3>2lJJf?ukWYAc2E?>l^aajU7mxc*=EGC;zr=x5k4!PRW zu`Q5G6NMph9CrQO7Q;~VpO|zA#eR+qaNHFU@ve;;~GmLDk{gsha6Fjg<(lXX* z#ZRgYYOO?Yrfss7>VbBF|0fzdwcN=cF&6?fDvDyQePnEuN@chB$o@H`77~8kcSwNy z4hhG#kGvG8z8ZI(15+r8TApHOc%Qj%>G5w8b?K z8^ezse^~Fp^cd9Ac>RSDtkus3c1>jrxbAb==vrB@&h0A&6DZSpB|AhlPQ|Ck?Ap?E z1xNoXVbL?AkePXJQ#8s3nTkmiV-WP1YZg6 z+dh99^HJoqc5ge4unsk^IPu)C)7dJYMDH?x|95jA#}_S%=olZfrpFgK-*ZcZkn*Un zuZLgzknOLWf)biYHq&c61@?{@we{A%obt~}rgu-okFn9`U#jEnxs({|@pQmZ7c$9- zv#VX_vNs{Kt+jgUMK!#5=~<}%6{~)QrqQ`o{nmEwT@zDq_sabJ3*T%dicbCjO@Ht! zw!*5qaCa*K0Rw9D^lBQB5k7N;y0Rlti%)*2nX8#^b z2lR0?j8!!Fk7-FOFCuZB<7|nJ&iL%CqG&x z>6p4|DDTLXv!kWDuagYN>n<=3kaom zS8dbYo~OoMlH`}U-`-7VY?wW72jkkIq|HUW%Ul*Ylqd!`r`+8f{#L6Vc+@5oos9CC z`Se}T<$8fnY~JJq!pxhzg$H-n_j8etSvkMF^q8*J?S}D8Id;kAz~;?5cNT;kvcB~B zzIaDa;3&^!h3hWx{WA_vR=CslY?v~9M@I3+9+oxUE>}JuFWozEu6;w)qrOKv7E}G| zi#uFCTGHKbNQc!Hw?=rGz2<$aE?x5lca)x2v^Ywk%~50Z-}?XGVyb@Y|KIxmxBmaF z|NkTU|Lby2$l}oW93F~^1Z*ysN)uvKK8=cDY%ZVAL)la+he@aLSac4b&0%wxbROL7 zAfPk(Gy$E@6JYpqt}R^BvYfL;sUiVWKtn}*E{)G+P`PX>kH=@yQ6Y_i(l7zs)$nWh z904e*WBS2lbv?cjbm;8EqUtAX; zZT%4Fzx)ZSAR4|XqoHsehQa5&;Kl`b!cd+5J4pD+BfB?OU)?)lm(C}he7p0n_U)6s zr44LfL4SJd==_SaGvB{DbyjB&w|`{d$VKjp>r42$=Fhb<8fwOPc#mH2q^D0>w+$Co zm?SWB783pH4UAKzw>B29UYfGQ?@ZDS2L;i3`Mn;$66YV+3g2(L-fP9jrAMx8Wcr*k ziwP=bIzDj*puXHmSJtnt5dt zj+_IPA7bv!d)Pm3o3l9th)`tJ&Ri(QYJm7#z@#nP-tnhBgJ{16?5_&gR|`a=as^B# zoh@QhQ96~z=Cf#Q5sf3{(rFkV3>t$^N5+-B#5Iw*aJ)-8m6!%)?ZI}AmYu0+?b#r}k?f4=4JA4l<@1&JzO93XyvKjkxF zi=_YJURM|9-dk2qb*k?Y|h?F4!KNjk(5s+5LRdP5UP4 z4QKA``uF|DJWsdWJ-*A0G5s&fKcyrd8NbpXYJ6bqyIq;qkMbYHZ0z$PRvJ&R{9ryb z;hBw#mi)-VUi(tFzgw~St$>v~ZU6JYLHT#nqCXOlIEzW>RrxVaOyy~Z@q};StHpd25!QS*O+CxwThK2Y+T90fq@pPT@q!jJe(Bbu1jq zsm;=uG3c(#^fcZ;%E2XTYBy)HU(<&ye6V=JxK5Fex|}=eo<7sI_cY}Bt_exQsrQmR zCe0*v^6*>OoBF=p4&A-w_gMM%d%*H`!=pZ>?Co~=LT+T(>C$&eT9(JV2M*IiMjYw; zIPK9`)O?=fVS_uQ#yfBFYu9Qkd^@mS%y=kBFtW{NU%+~>M`g~EH6>5ka`H^aBhQ-_ zjI0^C<+Yak&d*iVE2_@U*63aF)WU^OS{ai=u^W2f+=vcW%{G^Dz0PU_`_IRQpQH!^ zbh>$uY8;V=HO#5*TQb6}zBEB5_{fwGa$4FT((uUVn3lPHikMh3R{ZXdw%`4p{_0KD z|4N1Rd;0&L{{OM*{}s|O026V9R21WIXd<2vqcW%rj8EfX0s+eB@&rOE zpUD<7XjBf5P2*4*bODdY5;1T{*Ou08fpn^EdB1MUq3hre0m7ee(K}!e`txUyl`lMm zFTo|}Z*2bNNd`TLvCO#257`iE03ctmI3+$0KeYb!<0Jt0|A$X&RN-=T%jC5t~A<5q4H~nyfo& ziZt=({J0bw6S`&Z{8E%4&Tg=VMQFWyV+qJgSJXKuD|ot1|^@gU6lh*oKb;#@NO9M9yB?wEmR}AvI8nb;~ zw#^*xpz13XL#KS)AiSivU{luP^Pl=2W4=kyb!)F^{t&TBJnp5_JH9P9WIyTS^aoe_iUS0iPw#RDQM?I-a zc(=Lo_@c)6ys_6S>r*GL?6YTG@zO6-yJ_yO<*#@?DPzzJcdK0&_iJpR`X3eP9QV6e zxPM<|q}7VjV;?t18Q<|GPO7|kyWu)0eIu?ncfO_Z^7CcQxG$3G?v|cQrv*d`T(^CU zp10}nl$pEz^Ox+SoeMp&?a=KRPH!izHatD*`k>&sD;!Rj7$n{5qF8q_f3xY>>&28A zv;9`o_LVM;>;5^blmEH+%GmMpm&ADm^XD7B$n38@^@_a1kq;l{92gOtE;jHm@V#~v zjN^J_$9fE1tt-`Cw8nTskJS$xQ)N9&maX!MrS#K0-gm3}^=^`PR|iLYCcn5~e|u5s z*v(;-)w50;6}{4()nLDKVsri`k5Qy~iN>1_?hpS+wb6OkzFqF@>vM0c8$RuH_X{IQ ztjC#8``llcQayVII`b*;7n_gn`e~-@eY=GZg=ap`eOW`^#7R4)RXA=zjFg#6GYORM zTr`rjroaFz+88BD>-Ackq0V+DJx7@KJ>evx%K3+VvqDS&gaja?}%ty4XaR`aA1FQ z41Ktip6p{{e&cXm^^CRI2M6SZJ$eKy;3uy?o5#+{n;r%*tnJFAXQ> zx?gdSx#f-ev@ZO^)!V}Zi+bG-ztd;X$6@z<<{EX~cZIU|lER89Y~Z|Emg|u-W7Sxj zpnb#N#p!zW8Wu}@d9>^v4>4U>;JfS6xW%J=%7PZ8*=VjCte;sPdhyk%T;|F(RINl&X6_I)+kTskXqyD_HdLOM5PnNE_C-J$n2gx8U(9Qrl$1IZ2|mqhFr=Y`s1Oj7qLP=X*Zk;M%Mg*z4H^r{2c;HJhJ1 zHE`B?n>3BfVWw6A2SH!o0lsSB5B|87)L!DgBdV)B6z-#X&u%eg~;h`<53- z>HbXn!4(<{?mALF6h&407TG9`N=I4!eyNQ=15LZ4BKmgO`Luju1KM}GbCF$8q2{DZ zk5`cl*4b^FeX6l2w|BVd`xl1v%f_w_EDaYkn*GY#+J>JqR(HRM>Ta16;Sv4J()#U? z4$G6D9Upsq&$dB?3!q}cCdBFTDK&w>?h4<40ltnJ@v zT(8otjbpDhnp}PMCB^T|!Y5Uq2F=gdcH?H(10RP4-0eNXb_8cfal|~=Spl6bRy;&k zcJ*oYi}aDU&ktITJh=bRcz8pa_cWXLL#A#SG`4BOuozRv!CJq(X4=`xmFYa)__VO! zs`uS4mNrTjW(JUU%$WV%0OOA=Igg)HnN@Ya_p#yYC%*D5tVt&?Woi=E<=Y?|%Rls8 zd1Il&`u!w@eM3X#7C&Un1cH5;zvZhdecy4kwcpP_U}8ghUM+7J-RNT{H|p>~GyBVw zD@UVy47@Bk828+qF>_l#y6Mf%_$=rw>>`%R{Klc0)TEq43w{KUt*qL`)_oq|*2tE=?KQY70rV_(2S)i~t$~WuR;}oka`eQ1MXKPkaS8 zzIR~2&->1<|sBlQQ4Ezdn7V z1nqd)L;I0+yJNd*OaqC#2m0?l@VLk1;M3=C#qeg{yf#`l>aK6%+Xr4-a#Iw$_tpYu zr@e)ubL|PU#&6HCHb1*}eObYo6_#k!ymMBL6-S>5k8!3bu1%nfLo+vQ9H@IL(#C#- za1G`7R>xawE-iAs6a2^|HO-$@m{ondAj96@*xaEq(&&CS1M0!GEyQP=*ct9X6JI>(`EMSm2my&M~Jr;>0WLrdXVa&(H} zzQf~YpN*XOSy%J%TkE0|I`gI8J>DGhw}`pFw>H>6ZVUa6!OIE#UNv}K3Tt>URnL1* zKYn^wo8q$(!);ut8dqvgc*fuMX>VBnB;@_|CLZ&4#*R0ocSq#8$8~gc=ww|g_g-3V zS~F*8V{&fhy%UW$mgSthXm;wtsZ$d^YY^V29^7O~%r7LbW;M=_%?_SB`%14VZ(isf z&8F+;51&X`V_P&qT+15Zblc%l?tZSx8@GY84NojP+wb{8ccUfO?)FIA+3;|HNB++0 zk|R@j+U3FYolE`CG+nhaFTBU8dwjk}TJ#C=qm{H-PLH2QcAat}?9i+y9R4H9BI;~n z65FTNX?@Rb^>=q}Yvfb=pSkOld2?UXtAJ+%KAxIYaP0Ab86pTUX*hs)2*n@SE$n~Vw%?bzQb_|RDI z6q)$r+tuxk>PhrXy}kr*dn61`*YC2zW?Jq=-x;j9MTcqk+rRh}@lm{SzvP^4`=tH; zcgshX9v+r$$Ve#;-fF8iX#4he&HRj{eK7p$v*;-&_PLLDmN^#h<)nfO0}Ly5$i&j^78~;p^YXuZykkWi z)?GeaXZx6uHP$mLC!%AKYtE9rK?hE*y+hJZ2+W>t`eb3ZFZ}KgU1T*wZhF6*a@Q#H zaNfFgM=uW>5f>KxF6K^HIkGm3IA(p9s)M(8+CGwtR!8?9zU%e7i3>twUq{w@6x=^) z9P}!32d%4MuFLcKt5+3<&wO9d-lnB%cUZV+7P0pJvGa;AE(5||3S%4h_H)gq^iP=W z>6&MH@9p`6!CRJoIIu{=CRL9)c*Icjai1i&-g^UzL)%@BMBd7HUu@9IAL{f9%qk@wX0Fr<+vvN&e{1OP@b~_S^^7 zij?s~`3nmtTE|<}nxE&yKHXk0^!=stf?m6?AAhmj3LPl%b=c5@ym*Dlfy;fN!@?3e zEKJct6sXqVITX9~}ujq>~MXMmt zvt0h-kkEF_VDYAbgfhP=rQ6+()n3djwR*%!*Rx#mMV}$=Os+jTCgx&UZmguwSpAWL zu!6NS1<5=c|Ja#FE6dGRX9wS`@^=y6?9SL!8_v_8cKmsb=0Y03^3$xj#`hj>?>lPg z1&zpg%}%QX9%&1UmsV;_GJ3i4-EDHwo|_p>F_C+tcA7=4UfQ|T^!9>GFlLAA?0)z5 z`#3uo*1gfs_O!S?z+!h8V`-F|MQ)FiMY=OeMn4n#`c|zp(2hz$N0m9xNU!(edk(hF zvp2~z*}x<}>pIkX=%X7GMsH88%cgHJFDN2Zj`j^dsk3|KmG+;<9bH~F@^FCCTM>mu zd>hauZEoe97#}cA|C4R6EAx*JH>7VBId6TrdFD57QEbcRemB~<_rj)U-u))S2uT)mIZrl!2V6~H4X%mi(_`J zJZE#a+HaA^mutoA$Hm>e^{lAQXbXl8rkU)!U|%ld_{6Vc+~2P^A?s$@Zpj`tzryQs zhiyGqURt?ga?bs`!t@swZYTL2=H}%G21F+GaW(w#$?Wy<_Qs!X-#2Fs7}Geu4{02kD6oS!<-Wwi#6+SblhA})m5RuIY4=d=IF zd+~eP{GK*Har*tQPaCBx<2MHWje&n-;NKYdpN@fXR|W&6(K$>JT|^adX&fG(&tx&E z7?m$TMLag2P2t@-;cgMZ6%!Akx89ir|J6#eN^p`H^wpKv0o_|wZ~i_A-d z)@H8k(`j}o_0+17-J|vME_KSPI@if{N$>d&YU@YpF`D0AJ=(1(@55d8qalUI$F2@{ z^mVlz{?uwi#0X3IiZQDTda!Zo1dsd{+G~RoCtztt_@AH6Py4ELrP|m=eK2GyFy#_4WH~Y(jtZjbm&+Qf$ zEL?oCxz}q~f{9n&_~ZL>o{U_-uczKdQNgMEQ^G2C-KR@vAs5VbE>t;;;ctAZF)mbl zPW79*cTI<1jj&yjdpY#+O>0yz# zk7BHiL2MjtQ8Y)?Ow=s_kA3{B5R7M z;q9}_bbeRk@|w>#gWA1D-4a(n-l@ImMTe&P2Fo8GphO49u8p&{$@E^B*1gZojKZ`Yv)5P9vu;m6 z5wv&6x%H8wD^$JakFAOL0H-z@k;B^Cd@{rGX^X8hBrw29h?v=Np5xyi8n#$^0pFSKurrWF}{ zI(k6vS{}A|k?Zn=c0Oaqyi4rdob|jAO^ILK6LEhMdu1%A( zBCi~{o>_Wmb(vlOQR>Kv;c1IK%?;BwDnI`e* z-4Jqq26IOKuq~YP?V>|RD%RgOcyTw1(tXWMG|}g5Gw+#@zG2knBa0f!`s?dkGRJ!y zTA^|MVb{xbKKo+}p}n{O?L`e*h{UPv1$aVtX|j4MYOVEtUCsYlbjq>iO_jPo=i$$c z#esW6WFz}~txv!jay-(!h&+~-L zwbS~4j9y>-M7F%^X4eZTS+5tnC-qiD1y@J*AN{FXb7@B_3!B=j1XMQvA=rk%rAQB3N9F~yEr&FmyCY{Y^h*%7P z0AG)^H6ii!NLv#TdIQ@9uxWIR9q2>#4e(KZ4d>@thyp?}002cx2LOQykm59Wt zLJRmB3jn|w)lTbXg+g&vm0wMS*F!N={6qD|cxn&85&-l7Ktuq5Bmh7P03aOz06)r` z2>{3j0OSGyh5-Ny0DxcShF_lm;{gB@000vKfZsp|lK}uF0Dvg~fKmX!Q~V%T@n25>Ku-{g z!H!4(AP8tC!~Y`yP{IiS*y%aC_=N-qgvBI=`uMrxZ5x1QJ8gcdSePzPOyly+zUxZa zQ=&{Lhc^sWn1hM|1OR}uDo+FebW-I>0N#S~r_rjsW~)5pfVv$r0C0BWKNkdE55*7w zilL@azLXegAyhMh%0LMzW)`=J!6 zr4%Vt9255=K^iRuG}FYXsY25v{L9lDJZClF*}t63APqXUQ!^3FTt;eVsM0D>j;z!T__hy%?d?<+)E;p zhjG({fy#nVhA0GBFdG&$MsrY_b9{JIpP;Dl*a&Ad2SrH08mT-+BP<`v~6sT<7DZ=*?_mI4S*d9N2T~fJc#|CD`-aljf^D^)n@XvSw&v-pE3qKg}zU-4ci?CY*!ti2eZ z+xX5o_b(!nq|`ND58!|xk`edk+;h)8=iGD7J@=iTG%ld+w|ubP0$6XO#nFY28<*6B zMuUd&HpcQRfctYFH!l6x7aI)DW%&a`c*}*K2;px^@9#7|zWlK9lkYuj{Qdv@VdEeF zpAQ@V+nq-SiqC)CxPU%rsBfX8OQ&=MkOAXG4@TFwUyzk?a--@y!Zo9{aB|H@l<&ogj=X5bwe>tzhHp;1Ys;G**4 z{QdSq+tmE{`BPK#5+MjR-ol_ifBk;@`i&c%Z<~q!jsNZep}O(+9{H8NgzheVp1H`| z=nj9NkuRW;xf`AK_4%dFitYCDL({@9P`7Ri7u^=#xqiRBaKl!`TyN_XptrZLdB2v#;Qd<4ZjglDoHq*=%&GB{#=CC=kY9L_x9^5U_$Vw6AgJ6@ zZ<$h;bP-VI@t~JS;A^^9C?9yxD|Q=rUW!8Ut`d4tvgR(lrNGRT@T||h$lKdd@1km4 zxqPdG3%8Izjn-Yav01JDmS6qicOR|J*Hwlv=%>Zpi`n5}*p|(imPEfMK;q}GG2iAr z&1G5+qLj*5!!Yda?Q7*v>nr#PseKU=>m8)nfTRQpXk&EcOW*t6vj6WFv9F7Y*?3g6 z_u@ejWoQ$E3rZdy{QR;nMo7Lu8O^TGX6d+ylYRQBhw_shsf(XGK-dM=Fu!o2@$T0i z0-9gOuI;w~;pZ=~$hdT&(fG;b3ypUhzi^@P?qx#uI~N*LU)Y@g`py@RMf9z@v( zjRtY(KM@Eqb$=$m&o&y3Kak%crm>;MGuLP|{;B-F|8}GCCk)SpnG3vmo&)xV*vtZ$ z_KzBkOaJ`v0`~7BdjZBb*N>v?MBNQf)OKWYI<6;2ah4{-C@Iv_FpI<8L6o;IG_EYq z<|la(4QKOS7LN+`iOR-_THTaw0qZ zXH}4C7e9ZYap@oY?&=Q#{TBfJOg;30g?{ZI>K&?kX{Mfx`nZL6n;;~p=a=^f>25fX zcNTTx9e>AwZEzXE8f74O?0oEPZXdZ1Mu(D%Z_NZrZe{yro6s*mVdpm~_~ zXID4d8;^FW9Kra-(#zkg0{8CMfX;8kzX5b!`cHm`i4&L0)X>A19!G;{KMRLy?I0}F zowUHTUzrTen~!8zNF_9 zrd<-;m`za4yN$nw1FgS?-@c0feq9P&K{ElFSxI+*w7mS4M&rsC22q$tZI%S@!tR-j zdv`xvd&I)J(P%_iOnRB=dA`&7ocHcdkYQyaxY3o?SsMbusu4+cH8~l z(T^_SJ?-}LIQ@;dH%P~Q+{pfRqjBZeH{-)Beeh)MgPH=jVR!wdd{~TT0M5)XLN%-z ztt&)%PUe6ck7eKVTyPI%QU8t=t$)WRSpSZ3>ff<%(!XQhq<{Z+-oo!>O`t^ytpT&6 z-gPJ8a-(r+@8ux=T%+++4x&- z{(* zNB`J1%^R$rXF@;kHa`8u|AX$C)Xy1^e-XNRl&1q&YkQ=!=|%d7(gc3~AzO=o2g-Wm z58rD16*d53{a+E4`-*-yJp6|b@eV)VZZs}@snLLq_YzD7;Cw5egMVfjhO@>cSgya& zXk7XqKTlqzOTTojLENbilk=A$ZN3bC(EoCyap`w{nPeN8tVzO9_fV+O6*)}2;p9bF z#61k>Ji8VwQs!Uz-3yJzzjdL}_$QYc1%K;8qwxhSZfw%tZZ!T}+%`XkrVY{1Xf*!g zw;PRRNL9GIE;br}{1yKFcP};?zx^-x_usqNX#8z354gcDvKtJ~zk9LK_#qe!++r6S zjggf3+ZP*+uJrqNE;bsEpc%kjcCpcTEc@lZcd^m<2U6zWyVz*_DSU2?M&tJ{HX45< z?fm-}8;vi?Ui&||*l6s5IW-!M|L|g?aR3#i(P;cv7aNTmz(J$Y_@j%B##iNcSO8|E z{eO6|(MY8He{-?X_}vzl|FesY#&@AzG#ZV6bg|L+g5d4n{_o#v{FBR@^IvWJ?C)P_ z{DPo&xrp-OQsbxOF+6NEF8#~@_J4{8jmD*4?Eh8_M*vU{_4HRRG#XVs5Zd@fG!Zo# z>f_5--@ANud64#uMh}y)dZw0tnC>R{_4&$sm!&}TVziz0?BDm|L4@M|8<-aCo4av_ z7b+-*qrH4Kz!%v;d^e1XdufJNoVOc$j}M|`eURhjdzY8@(ku#l2eRK#anfx)QziX# zFHZXE_#nz61(-h#R>|h??4-UKsOM9vpLRbnqv7qy({P~5?al5-h2F~0_)VSY#Yphe zlC93uaL~RTpx0oE%3gg|0*)F3>Uf)nqJ-0aGzd@Be9ptnqeAej$_YYI>rBupfRf)6zBt)`}c z8P(Lqr)bQeyM1*WW=Wjvt6(Q-*FHPRj)0)L)X#R-+evf%al0hp8WJ0fyWPd6~I z2hVj=SSxxV@3TTJ1m~2d5kxPd-nfXQt8Vb@+43mN@<{Cj`nOLMO?@kPO~4FX2CQIe zMZHox!SmaM(Z`3xw9)4Wn?(vGq$&4d^3EBXs7 zWPNMv;g;fcQb+!;-n)F&>w99CbLe8^%d;hDkG%vW=a zl~-rCDhy7uC5`<&>(wkH(*u^#D-zx%2EUdLM}w${u3&ucT~=6-lQ3J7@ic~tSdaH* zG)g0x+MKk^p`hz^P6baRW)!An&S0hqFO&5w1ApLtW{Wf(%OIj>84X|1Ne!U9&4pi7V=&*ly(MrB-oIsg)8fEI)GRX$B z6tGK!W=0k}8o#Gh=VG_~M2^U-L{n%y%!=o)R5ZvVNGqXV8aYpIlYl|1M5j!mrS_;u z$0_vcz01oP;XpMFE@*^ybK(<%de(F&^=zV2!Bn8;NN&44@LAJumkNMneENFL?i6=7 zKe@Z7Lhm%^nD?vx#HXVuab`tSB?4WPgXZ?;Bej-}2jmw}(TgGrd)SVV|0n9JhuaDv z6G=2sds#ZvOHAcO7AO15>SI0hhxuyKmj(9mj7U1j0q7)(JEGsGRgWA|gLFTaVo*TL z0`TZi5a>3pS~RZr=L}8O6rwd{+w2X}Jkm>$DJPgB7U7hUVd^EI>5J+D#VD%jOA6!d zE8>NJ{!5w{epU0r&Rkn0+eQ)>;wN)?tT4t-}ong#M*$TF62tDVM?nYi;)m4Zod?z}28V<(Mc9CY#!%us4jIR3|tf8{Hqm9 zkqgA>l)5?#k4(H5_rfAFP8j^6cE|Cch?91ajq{?NV_aQQa`XUPy(egj+3!gfJDp zdtf;{oH$L?aip>cji}-vQcf@A=VUucT&Ud>>>>A~jNZ(sO*oJ9aTclQMc69_C#pDz zbCo838?8Xb7)+@+SNTDDoXp7VdP4#_c__Mqdgj`z5OAC(GFrMp?l;#15!dB8VxUJ^ zIzq%{7tKyPz>A5D=gr;o?F#H$NB7&-a(2TQ@tM zy~VxVTfM!d>+^e^`S50EDGaaouiv9@zDz6Ognm1w7AyTLrA;3VBz z%bvC#X!DM0I;&LIV7GTp%U!R-<~C`a^iF<%5FM-M+P*03pvKH82FBdsRCw50B2g4D zoJqNv8Iq+`raHWg8M#M#M3z$9P+U!2YtrD!6g)LGQ`AU-UDnwTwE~|mu=9}y#N-l8 zsdQY7#zhw!9u?;8Bk)o6ynQ?9hegP{FL`R_%S^^{k@m8|o_fZ{OzDL`tLGJDg9fVO z)KLtsMDv1h+z%3nL;GAU42ajWxDjFVWQ4z+3DjcY$*3B&Mcv{=@uCa33r|y$ z2vR*e`n7B0r{!2#Q7n^r$aPDKzte)OS#bQ76^5GC%qx{vZOvDIG3zPUoS?FntIUGq zWa>XWaN<}r8^EK<;C0vD7(r40|H|t{T_WDsU3qofcM^+P9kO;OE4{>FXnW9hL_3Tx z?c=yONXJFHmkmA}9z=vf_N=DWA0d*O&WgvMc?1!#{vyu7*3BxO@Va(!UnS1r)DY%z zRm{?+(fZn|j+iT^G{;@Wi2XG9{?#j4-h(#u6h{emvTyAqSD~9kNzsM#Ov8bNyD#2aChG=asoNEx+<7a&I_)B z4X1HSaUE`)VCFjZ1=UfsGj&bt*r}4a98z|rNvg$4bCeF^-pNX{pC&~+i+(hYv#33a zvSEx+oFrdq4noqn!>owChE6q4L3I}n2r75$s(wxCxGfDKKpkMk? zh`+<#bWCKp(u$4-YF6=&eu{cw((n53#m!2c!T87nT2U&kfaJq+?LtSl`>_1Faew&IAu+c;McWoa(ahB=vjFd_u4hpHcEQLjj|69s<) zcAH0WAKDJK(ZaI&Dj$Wt2$fd*eHE%<+{@DKyQ&vveFMmGd>GH@ZV4W|ncWPNaX47s z=HU0caefF8RGLBTjYld}TdSLGyjMqYsIJZSMxzjQ7kqr^!3ZTpJ$iW@ONRkLNA1zy?XVZjpsE?>?e5K)xp^3u%%Uq&O)dBpqkK0CUOC%jtHo*(VZaQ@xdx${$H(ir3!gq56(Bq#jFTuktDvDH9+VR0 zT|>$y9A~r2FN~yU>QOiCIt6_<-MMnAlhsAB7kZfXqb^Ydxs>IBL)sYA_2TqNMdNnX zb~>v8Y1?;g4~Us$bQriDSz|Al+c_Js+j&=m7Obq3TS&vK1rbcdGwNZYLbcdgoW@xd z7<$8kRU*?*C4df3_+qmTd25z`U8^i#)GEvBCJyC~ zN3M?Y;7>pQLxf%;iWRzv7k7C{*Ffl{`2+gMAAQx|c6khdHPB_82&4Y+k+pKI)Gq74 zK^!bR^(^X$4OYZabuAs8Wbyt%p<2BuHQ(u6Z_jt;Z}5IkakT$$XdlaM_6MP!aG%_8 zrfJQA!Juw=Mf%ZE+>6?v!D*&PZpYs-(uS=RVM>Zb48y(X>|xT+m!&pNqA@n;m9}s_ zh>isx0e}4g1XBQ?vnj(?DK2(~OGyX2NNAa3ldv7Jh1hvv3=^*9^Bi`GW(6=~9fd~q zItEfRRtsh;r;^_-G=|k&*Gc z+j>p(7*^%^{d6aY)(g&IIlfAA&clIgp$|T~N1}oJYqGI(zhCL9y>O6=FAa2V#gfon zoV4(>v$4FPupO*#3Ubhs3O+1zQDP{%2pgm~#fNQs+8QSh zlU^iCMVE$CoEp{cTK$1{9YhbLM{_U=E7M!UO@s^-+6&837S^v^Ug~6#*9|*E@ZM{< zy_W_&?=8VbP#M$QlWed(-rI{`sHR3KS7C^sWP`id8^LtSG5MzET9g%Vz1MRnsW_wX zoAfXf%p%GcvQwHz8*Aj(Bvx_BCVkB6gsG&r(AIdGDxiA92Ald6ui$t@r% z#{*li!R^xd8!p(7bEJph2uU!B(pce`pwld^0Cow6AkIy_X%!{mE}{Zv9N#&2Lti2R zNyt$)JUULuWlO@8bZ;4%zsQCI99tvdH3H(A?$6ojqSfrg27Y*EAT6_q)T#g|^-9tC zsP0^+GtAX6e9@ijFw1n#FOZ6%RC8-c;*1&h#QOQ8>ei;{95eG`hl{ib z2kl`rgpKsMnpF$LgK5do(Gfc)clgSQwDw0|JAR9S`T2Pt19-|<;CHMmO8>qWYb}e| zX$>ThG4>=wBkeEkaB0g3DqE|mgFD}uB5)|uoYfrN0J5w zq>I`!oQnd4g`F%lAiFTow%DT$U*^@rhi7O}vOUtP7CZ;92m*HjIm@Tn!4~VTZo1TE z^dgV*LX)%|Y11wcCnUKnzE5wvpGNsLSR_ha0Cmq)Q*$D)3~%@0OezP;*7pOH!s5}x zbVvOw4ja&`+?z{p97@$K8$7&rvE3tn7nn&282Mskmrc4S?3^Wmr_2@j;r77^C$^+3 zkF!LRoK$w!N`+hSN8^$rj=|MDd*g&j+zg2*&1ls%8R4~4){LbW7t`z^=C1Wj2sz1H z_b7%rN&{OsjX^Iutm@MUK+gdYni#)`)I|GKvUM_Rkd_V82?3&&US7sxNdO2EOlk+k zW-`6Bw-9WJC0xp2G>r`|SKa$6MNWMyXs8@U#Xt4(TI&f+pq+9W1;b4_s+Ip@e!x;Zp2!#>=dYTm})>@Oz1xJ zWQ7t?g{z2ON~amM8fSK%GN?eZCt(+qx9^;^X%ozv0lGO8`#u!s#eJ#PUlPpwP**VS z@PpNUpD;=@v3z`h17r|d#n5~r!3DnN30^+xPUirK50-ZqJRh_@1_zM|H|)ZP@O-mD z)67D(ZX4++^Ji{4uzz$^D-Eo$J7?#J@Ts`S-3_T3gS93Ag%WiS&Ufcz?SYUsZFx$c z^gh$RIaTtE!H5+Je4#W|6o5S(lhA8XOuj3JWu#dt) zccFvB2<-?n({0KW3H{V-qC3gPwIduQNg@>?Lm_RGr^x}Gq{nLG+E5j77WHRlX6TPW z6k-|9>?DsVrN(hQ7^q#Gn-I-oHyWhJ(@Z?1Z)U@AVAW;4tCUqQz%eC$l!oNP!vWEF zf1HJMRs)&m_QpvMe^@O6Tq0GUfQ+?tu&anU{rP+v+yVpefPl3-*&>1sD9lc@ViY;~ z8nu#?n^|=LaBPRHB}q4;U>RF&?N^TgS@OACI(}os8u>ss^L=$5{P84-nFCKnXT%;a zrS@jTe&X!-Sh+MsG;kE@4wvXPk+Em_9RK($+H?9Vj_1@>kz5DrfBKL9oPxamm+rr! zATOisdeEK4AWoty);FO|_UH71*kNo%VgJNv=y2ZxT>cKDKY3F59D{bK zB9escw0!=ot6;yzBy8zQD%!BiC4~qkwieav(S}@#9 zE6M{nP5cY7R+-AjBOIEWQoS(2+>LVtHstC!8Vo2rXhZc8xK^kvV#@AI_*&FENL3pZ zRNp}a1&2jpU$t~#QI_{+qT@6h&h(>MTuv~1cm2+j`!ff{aB!8Xw)q^-6gt$Z!64n= zNB&~68XyKK@3M%T=H7T^QhTn`S-7zzesH?%^^~J@`!s6m}8k2gGBTfc}x3rq&mEMLr zK&Gc?+Q0?&vvfSdid^r1g&r|nDQu1V---krCuJS!{}wYw-@&!s$m;;4>y6KkP0Q^B3{AZ z>iIx-4D91{e}7;1~!n{UB2tdhJVDPqeZ*Y)1w3L?6+I>UN{)wh?%V$j^dek6z`qPq}e{z zd++kqt2(2#9Lt|kkJ3DkcLx#2yynYLzIO-Fv>K$zejBkb(+a6Z;$(jsWEKt55e~)J z5zuk4ND>;Tfa?R#wg|R-TTv1nPxP#7S3C?TM*LI47^r4?)tPo4!^|~*T=$96!9a?t zs~ogK{0hW*w2+;&^Mzivpz{j_i%F+ASjgPBpbob`C@s|8T)DfAJRe8>b;`)(^a|ob zcgzlWWOMCa5_Ibz!1j5bzfJ%Kt+DKu?9{7Cp9MYzJ5H-nc?$Wg;WR4pLErQ5X+EYP9=ddwnjTBcd4bxwGM35g|mJY@V%nKS{GFS0C@CSuf)BLLU>O^dCgD zdu6~Zu{iNF92|!yxpb)eo5s#CAzqq}3+a%<@&!k#UEgeNb1F@Es|l1@a=IHG;pEFk z(i@EX(Z(aq4K%s&h|Kg7cI||?3(7%2eIuYpq)Jl3qbNTNv+E@Oh?MRSpP2?S?4R}q?vLp{nhDp zJ4*7nh>s8jzXvM;nI_^y15$1R<=y%;sf^@uQTpU`^-eWJ;EuH63fY>?4vj@R1l5}$dhzj%w+N2wDV^==;IZu9#<6| zt20(Lk}_d(qI#69%x>Pr`{+N`@5Wm;*Iv%vcHXMB*^bvvkD_c4o&@UoG%UMs)aIwb z_iG#7*_r9j&d{kKN>;27u82-hmk_uLt|V`Ge4o2`8fFN?oj%7vOEuY*XL1Q6D7X}A z!h_elV8I`vsjVN2i)atD#+GZRn_%dpfNaJ&�MS-&-oZQfQIj3Dd@&(OTcNKEjMW zo(VGwc9MQ{L~^*Rn(`~@b>%W!oOn-)$zLd0GhL?<7rP@X=h4NqwDsfxolLh8)K&C@ zkWWRvP`bvx{OKVdNjn&Y6cbYccmiIJ<9>0VhGBLXWojpIfUd_m`NAj!^s36^eH?u_ zj)?bQQ+*<-l&xH5^PU#);(rq#ES%>2{fg@a5+nR|L{UMrhXwb`Vi06MyR4(%{ukO@ z`{jzc7Bue~YyY$BcYlb46TmRBv{ z0CN$FF579%T0ohKjrRYQ<1W+IL1cmp*I&fN!|xbrB`zi&1BE`6BG-+Lg`DtP|weHS2IMe(@Td^V7g)PA{!0gi%a7d|*4_ z5}bs`yd^GE0T>4|7~b*%{&~8h9NS36pam*ZKWND}mxF5V$9%XdhD}O+gEYZus1s3- zj8&f3N)DphmSJm-$qq+G(wpmp~2!}XLqk-B)B7^crtQRp_h?h85 zj&FxlYv*t6>#?nVl1xcc4Ss_X(fwN5!M@?gqwU z8@eAAs~N7oj(gNysj2ceTTxU!997bo=|@_v!@}^o!KdA==qT2?k!6PI{dSba;ot$~ zeV;N4G;J`<9N`=lsh%H9>TGxLC|17I^0KowjwOX zF7kWhEQ=EHHCl4Eov>K-+(F*Jym_$I9uE2yjMip%((pOPDQ7JAqk=zFP`#e_!clZD z&9-LEbZ=O zakS@QV?Bm@^Px)<_sHtTTqAA8c>Yg;8;W;0oQ~ zMo#SLB%%9tWC7WiYazmjYRhj$c~m?o{FT3XcsF)YOD80p>RUrhpz{KM-j7_i{v?TC z%->DjCGaF0tS3EQ{u)N-Dhj7LUJDguF*pJ*X*l(NhK1V${ zHHBq8PJP@O!QkzTK8~0!H47h2y^TLMIT^UTHTM5V!Ln~ zLs`mX=T>kGhr~2N{0;!lXPwKU{wr`TagQ3`hTk~6$PQs6L6Al9G;~3&vCO&Z|HoQ5+^mArRJ}6OGWk06ZRE3 z^nndKGS8Wvqz?(@S`tXQe!s7j90yx4$HA^Ur#fKSpniTWf;jrQ$81|=yB<(7gv0#Qw?Sk%qCKqZCb#Fp+E zNh4$=+Q>jU%%j77>@+2)3r4xRrirh?Sp!FepbRm=92!`jL2`rQeuiR9?YGRH#h+8& z{k8Yf3`v;7B7&)$^K*_uga?@uvPk-i8wbaEFh#dDsq@Tvb;frbsAP2*Fl8)cc`z?g z3MrX&Ua2^@zFBRLpy9epovm;theAyO_D%>*!GPhccbI(SJ}6`ADB%qz#sTnE==@!< zp-h;&ou&ty4BLI@j$ByB6**ysB=TO_x-jy}!a8r4mYd+@Sh|NKM$V2z@i{$m$9RYJ zWRduV!JpZ4!*pWk7oUbUD zGAv1sO^MYOCpYbFCibY9Hvu%u9C0f);PS@L$}giSmiC2Kp15Sd^doiZ7?4-Mp;+&| zH!1vuc_6PTcK#8M!L^c%W49QM23bwXw{9q;S(4E}S^Yssja2Oc)Q3v2%mjw>tuSUd zc4di8oi4N~##jjf@02(mXJReM}~(t`4t7vJdyAVIO7 z^~koRxl4`h36yM4jg<>bSnB?Q@wj581v4NGgkyL^=fe2Bi6KmyPp-kZ@&#rZ=7er} zaduWpi#fRR-ZPasP}Nz>{Liil%lYCP#H{&iVi6xCsa{*JZuR@MofS^z9dydVz%zH* z*D!wI9=3Wbw@7kn;{3cy*N{Tvo#WQrilW!n2i>j$H`37--E>#qM9T;CeKijylJC*;JJWi*T?5j*+~CJ_=5~q8<19$^ z_|X^XRj`8(72NpPk-jW;+|Dg-s0*HIty@dNDt&7p-vQ_{P1R8gtkbW3xD_DOO1tUm zOTAdS;p+WP{ulw-T}00?7j###Ie^LuFUg6AJyW3cg>JR=&2Fny&0?EJ)@nN4wr@+~ zS?YzdWh}7V_t?NbMw5l=cFrLZn z%0kjj`zdFn@tOu{T@yZdc>KR+O47AzIxrZqLE4OuKsS^{4@meM31g49QC@T6!|mJ1 z01#P&i-y$mR86j&i7(4?Mj2^EMo(@dC%;#lFFvph`P)B(7#@wcM)bnd1GajDgJk>B z^|P4*hPHsTI$`d@&(gNWT*bXOlD@W9tu9ZKM!mP1Rv|z}I^%W^rs~FBSEo+u0cF0X zg`t)@)5L(nt`b*M)R}sewn%qGUa9r+OmjVVJ|@?dRYoau1rf3|CfD&KH##$-esUe% zk60qLO$lAfClLW6y3TINYEim{b62(IP+e6zKc!b%+?oOVTw-!9q4@S*oDGk|3>Y?c zfijD)DXW#y8ZyyY`_I#IP1#dg7CWGeq`HMWdC(?jxHCo0sLd*`D|ZT9mF3-Z7{X*| z*y`IhJNPo{^A;nX=1g*d7 zU?Z=J=RUTZL(iXWUza`NM(fmJ{l=C);Bx{{Y`51nKlT!Ulx|WK4Z79D5Zku{ zY^C52h5%KRh{fb6Mdlf|KO6+1q7!P*Ae@=nnbD1$(K+S&@6pXuXY{>>n*n--)3sZ- zrsv?pFzbUQEtj$34heb-DKuypvs4zGli)9z;qq%<}G#v0s<_;-+Bm4dZI zP+lw&e1&wzX2I0Tx!0wrlKyng=@eBifH7My0p5H$vU!G$N-ph78LKDFz$D<}b0QZ6 z71?el_o^}AkPEg1e`ciTW;c9qcQ;cIwfy4 zCk>`XJ9NiVRq@Uk%{{G=I;2t42WX>x+vkjRebvsUVFr@CC9g1r^73KL1UFPuE~=Qr z_9%G2h69&ti@Fr(B;`0?BJb35xUyI`E19$0=qwZcRillN7G7Vt^~tL#tM{3pKPOV1br&2zKPo>PZ<+i-6C(dvf& zuC_WU;@L|2QBrJ0l#5w|Xm+uWvIrNCn2o+!mZrp0y5-#|F>guU9h5Vm1zSQ$#*D}b z7=`je*k!bujI(dTWkZsaat${H@EH||$ZZm!9E8D4fT4SQGKwDJwt2lQ zn>;bzF8re?0XW(vR8v9_2&KzKD6cftlwJf_X`4t?zTn~v9Ao#%Q}e0sL?_dX=s4+0 z_jaztrrQ)4kVBMavn=L$2qgdyqmw{2zZ0DpR3cWzC?R&6W@_u`UC=aR)v1bE(2*{L zX5U6$9&=v6oc?A*sUmw2L1DpUX+&#Kw3ExsvT+IXT(*K8vg=zPr4N;$msB-xvh6gTgmo=Qavp@GFw%>eAI2V)Nxd6MJ3n^$%yW#n>U#fIULK>EKe^}nrp}susxZgk5xJJ zrWsKEp*Wf}VNq@g=U^OJI5kVBLt99GX}+*$JZAC@~u{ajDUGcM$i~#v{oR*q5YSd6eN8nZz6eGQ=C3 z0AYH-d$SW8=S|dLM~E9WoZEDeUa*Z@The|vAm1%1du=D9a`z<4+d5#l2W+5YPBz#b zBa2R$w~2BT;)nZT5!&csdMJFTdtF~5GAV2mN)90rJFa_lAI2NwB*12bItE+U~Pxv+KtjD-zTbk8X=?sfrS;k$<_*=eBZ`>;}X8iC=`W7;te#*t!R9nMr(G@ z#P(U;hAInbq`zrpN6p>PN*8y?Ab678Q!7PD(v^6x$?-tIj@Y1qH}R*l#?_*)Gb&gX zVyUeOqZL8gR`YV18NqKFDeG@0YDvJxOmhp+csdA9S zjERM&lV|h6cnEz<;<^cKXeQ_cJYue#QS6xLCV-HF%Cq8q)Spt))^?FSf9_f*xC~6q}wE&-FAK(x!1sa2WxER%IIj(l50~MLJF)Sc9~SmCJg(K!?^=W)3;# z=?YJM#-%)cBxikYp*MhnyUi%i!~MwJBAR&<-O8p`_Exxktxw^5pY&6P5 z6YSo)xuT9a+j#fZ!U`Ww>E4>ta!9w<3U=o1Jj0HyNiDT+H|M~MhV+VlMS;$cj)A%4 z{ZYCP`Q@-pn%3Y0v6&5zQ3##K!n>cFidY41;~18@SxJ1pvlj%3RA>umJ(}KEc@*>hSKx%{%9GjaS7IEUyaKs8YVa zb>c#Pk|V1??NTN#q%Ae}!V~9Mur)u`COe=8Tp22zIh+?oM4#5!mR${!+r&u`CH)A= z&gr5#a{$ubiAHQt+ASZDWLjqcbmAi~9m`%8MeT!rznw!hQP0%}YH49<=|*SC_aT+; zFZJ%m>}7+tzS*8eMn|5!dr;4+PS>#V{-5u9_cr7nDH`O&x!en{4#Hd^nKlNa_6A{o zpm;dDV@`c${ER`2du{mAj)?b0>2X3i2A%zyTHE@FQ;VPEMKsi?c9F>f&LOXJ&FF*F zrO5sGC`xqW*5v1fs2KSV@_XHzNahUeW7!V>BseJ-dh99rnS=-kti_M06QmHKT%Sl)2NS zSJo$(jV;Z+Wl8fR_IC=u13?lgxudt^w^SxJvd;()w@Y`#mXF->Wjx4C%7dm$wsD9O zCJP5ie8T!nEX}CxgLFLT+Oe zpry3fz8!>zWiYPhrHN{kYW4mF})*KJ6;W>c_PH0!VU8EVz*>)r`5~GuCxP3cVdmu;Xjj)P@W)G+$5k727bj6Xzw3Q;_eFn@@y}kFTmr7#5{z z)N+Fw%|&z)b`5hZY7Gi= z6K3I2#5)Gh{_NU*&$jd;y0A+((6FKSAPW0Y*4~SwLBHGj1RJ&rDpeC<8Lu1%K}($d z{!9Z#U?!g>R%(VdqvHXjxS4mS#eQD2k@LB0t7#iFQHN4=hFfOL-sH-}?HvDc#9c{! z)dpd$VbxCL=~HK?_!=h-M)Jr!F4FAeinjS1+hvie;UVyWt1?`ZzIS*?FR#~Ar-I{$o-3b;rp6C*aIGmK(smpVia2T0RW+<=2UF@( z70`WIv^_Iu*3UT`sn^>0c_ZDe24RSnc4Z?T;vABxLQ)CoBvT%%kXxi{lqhONxU;JX z8JVE|wXAboM;qw-sw^?j>inp)0do;}h`P_P^Fvm`_{X>sql>(xs`ZJ-$6mpdX{Pt= zMStqDC#1<<5;@;F)W@)$9B@>&L3o-h4@z8wAGxWob`q+5rgrYd(e-oinc$k;hSe(z zq(0Jrp32A~iZb9+HdKe5j>0@29b{o1b%VfXu6{OvdhEPDxAAwQm5K1+o^%cKr>)@o zWnmKh;8~}A>-qaIVTr9!rlHL69aZ9-dz`$$t(@b;EKxfT)#b@5yp9Y(XA;8Zs0Xfs z3?K5@12T%2^7d3(7b>%Q3U8yn9ZoN3VF1se^qIzueU&#Rn_+>>yH%63wn1rSg*7<4 zn}I4b2@Nd=&~B5vNHhP!VDpx)Mc_ZD;Ee7#wodIPq0v|9t7@bP)PqzFF{HBS-%H0y zUu$J`3yv{aW5e?XdD>if1){7OM6KAjzh*g@uQ~f=@lg9W8z);Bp zVk`){|G@Lah@(S$3X$JzgJV_a!2PKSfa7{aoX{2cXwLR!ftho@#PZM#o3Eixo+rd} z5l^=z%piq+(FmvKG&@qf;=MRYlKYq`)0fN#p-30>tQsXQA#~#?YAsz4dD-G0L-lbe z_sr@Pq{cPKjx9j6Z%cSvmrJmMVp=2HlFtpae6xE%3Jy#M&oy2*x!Ol6PKV)C!T zqi|&~!Hglan)v^l(lm`-yTG{DS^k9HAEn3s9)VjiA-qhp@^^E?XfcKhJsytcC?Wt} zsc)*eP6y4SS?SmqxsxXU!P6^^ukB6gqWG=xcZ)H)XdF;*wkQvpy6DKCj%CHYp zFqrY|9C*wEBmgvdQ=iXiCE!RLe|)amiI^iFr{=+h$llR z178d(>90A1EBX_x!j~pOL#S!^h7@gc-0*q2=}f4sI}^S`EqkoTDl8?PgBL>$=2JL0-OR5HrLJ7@2R;C7Ivw5nt~!t@~FqdC@`QFw>{%aF&a&P`_G`#J!fW&hyO(Q zN3P>N8R)6Xx@=?)!YoIW$jr0nJI&VA%WuB_txsO^lHvkL$T{R&3hT;`0(&M zlbIJ;>D~A#L$i!g$`bE>FUMDvl_!$W(krr{hJzei0*~L>xMu3Uq!JmaK_5E`3VK%s zWE^p%YM>8+1}b1LjYJZOhk|O8n>Tt9)XKKJeBN9tI4DOR0ZE}y#ynA zNyCs3qn3_UqEb_&L&#wePnZ)DIL*EpzF@V2b#o$d0@lr}OjKD*IEAkl!z_*MT)6$L zFk9;Tjqz%CberWHc?@EW9394oS<3Xjo2COBRA_Je>kat22@+F`@FTi7`5DX|_>DCy z)8-K|N&1T4%3u5G-ky`THRwz)PG6tCIlVMJ*9l66H#gC%j?Lt5TTN=BeS3b&{=P6( zu1R7QnXPH#v$<)$(~{$+KBc1;vorXIBNq;SXtdxo6?kt>&&^HGO)pF@PTw%_n&RAV zOCm&r7casj+6}W&7M_fg@nF0kje13T6!lggtlwGPdbG9rn@=7*`RK|0^+#)uA3j}Q z3(h%Q)t-Zlnb+zuK|o{MygfJXaMDfHYHmVvn75j}$b1jIEo?I0SIx~SHK!Idx-`?} zi9b0xIhh1s$C-|~@^tk3ljm{Ksd&9y@xu?@ibPo*rRFtw0@rX@DYc-~^-`%kuavr> z6y0q`*yAx8d0{citHg~KG%BAfj5M7RmgdzWA_n!lejmKqee>amgfxT)ul;>wKOS!oWI@JPC7jq6I7L z7OybZ0LACA3=z~gpJ*IJK!RH`!STH5toKa@W*ENc&f(5KKNqBEF($DyZ77~eUry8w z8^{eJpm|b4Cr5>Fb5*`JtZC9FEubq9VVgr2xHI@NCYlXFu8ixOYQgd+PbI6`9sxcq zts3Zw6lO)gh<1lQ2^3L|>w^VU2UF`AY-K6QENRHZ?dpI5ld%2jpw!Tz1aQ?jB83gP z`!OFO+KlUOtA=;uiYjzB&O`}x46;0ML5QG|-&GH!(XH}ufAsa$@5?HfQB7%BXk8Xd zoRux%x_{}DDFJ1;?Q?3bX97rBQ%0+5}nbF zd1W#qGo{fQDm;C%Mu6cNf1NNqeFxtep?&Z~Y#u%yj`pl8(Zm#%rHJPIkB6gsIGZ?& zNp_`fK1hphL5;z&CBF)z7a3$s-}hMR%z66@Da0+43siTkxtE;Ei>zGS7H8ZGH2v3=@GdM9wmso-;I#@{uWI_?Xeri6r^hXFPQ(t+m zgl*H9NuX3&Hj|*noF%|B`1b1eh-))}&8gd}sf`N4>iNi|`3rZ1>P%;w8xOq7ADpwY zn8ji3^)ApY%a6bGVJ&8aI%!Qw4=Z1^Vnw93QPAzd_p(&ZS^EwYuh4g6_AS<*)D}a! zj^ZJ9B0y2=maCYVX5g57?Dn)A-yuWr8pGz4lH8am4C0nt=(3g+->cuDsay7IL!`oI@1GmL}8*RTTMQ#25}K( z;XtK{KC#6~{SKl$%H8QH^<~1tUF3@?MF!(xvgWK(c@6V@OggQcAb}mc^38Z_KJg`# zYp}7nS?)(RzM7IkQiQc`OfQbAnctsu4;$DR+vLA7-tZ@^IbOwqcNBGLs zl5`-#5$y$-HDw8gDGLP8q88)asw2Ji(FL9K+RTH@!CE*NL^z-Bkp|O%CXFABW1MHU zC5%gsOMExXD3700;w)FGa4JcCt1tDIt@{;VM>>Tga%ZRi{?5(}ezaQQU~~|^+>MIx zW!8JSvokY=_b;nC5TKI!HlqhAI7{4@`;s1R>su*BN!FbjnIc#%t65Cv`UWck9x_QF z2A_FW`f4{eHCNbHl0btXD@tyYunZ*_62$#HVQ=#oy!A9cs7yV_Fty0ZJf(s?xm`X` z0q0$1*Rtz<7Clw!lcw4V3pI$syiiDE81KbBr5g$dad9%GGR9ACkx#(@25mSJryik= zNUm14(fYD>Ce6nrbA^9DeTDMVzH{%JRmy}kb?z2k3N^MGupPQ*s};yP(EU+QeB(fq zdZCPwugn1lcVmET8kD3$a?Uk7sues92YtGy;WOI-xC^a}h>4*oyt*lYlj^*fqxcv0 zZ5Y--2{GlJAg-(qGXlZ%bVn2cLVE(OF-znNLK1^%onX<(pbZG0PgL;ZC`*GC6%Y%+ zFW>_Bne_q>spsphxuIIa(<;pym=hOaKXhDo0jn55e zkvD#(4mR7UKQLV3`G148a#>Sd9$)7sy`F+)SvA5?&k7^(Bcu>S}A=A%U>AfO$ zoaU`~1Mi_3U}*KCED1rB;`xzc69HTx08eR#X7{XCuAkLP);qI}o252{-Ds|J_H;}d zq$m=IGbW5rO_}i$T27e`CP6FKvCur7)h6yPuV?<^NMnb&X@MOVo1x?%u6N{`*f}Rd zJg?*ln+$nv!FrhWBMIp%VX#z2h`T0NDj}&{8ky_~5=N2Vwm!>@#N`A)`?hq)M>A?u zvQjsv)hu<%Nc?uX%NKN8%~rn11Xz7Zhd5b7l-Z$ZgQt_@-0=rjGNdyT;gK^KkK^89 zRJ;Ksr%aepu-zNTm1W4>C$YrxWIFh^c(Ea|nx{z%VnOhxo@RqPMv8D`??7a^tVa1^ zRt6Pt$bpfvk>886ypUcjAm^AMZh&rzcb1S*d99nFM3=%ujnsHU9BIsSAtj^UA@e^y z-0Ic?L?-+CTAboMxc+jbzEO93QbKQ8^JV0$_WN&+*;R@jau$c)Oq_{XF;4*pj1?`W z1T3*Q@wGjr*>T8H%V80TlPS1;8+M~9)m-h%{duS(cWrlu*4IKj=?PlYNWjZ#(Wv3muoF^bho7L7|+DoR9T9ZI)&F1Ist2%@xWy9gMz6) zc5)_Asf(p%x3(g}9P!1T5KC#2ETIMFkw9D55?uN!>HOoXgYx!Gu}&rd_W+0?L7}%>&Rw);l;I%;%!RLB6bo z^9%$+)=MQbaUAEMUSad6P9*Xp!1ixhvtXFuw~8|WvqL&h%XVRNR)1R9vXHB*IxoTu zCnkopys)g&q!+P1Q4z152p+M19HBcMv<;muV@e(Et+UB_t~KJu}m_!NvB0BIs)a+Y}qM5?f8 zC0$mkH(u>_5drLe(6j{h0m>tS{)e==Y2zSHYI1jqP&b`jgt$RDGH+NR${I`N#C(MRzIzoaX>+?HH z_jc}dbPN!@PU$fvYn9KdYdcFfOP|Lh=i?3Yu@?@aq#tIs?^_EyOV^$6S-*|gw)SrN z!YOofXKBF}ItVkQ`0r&=h`fJJxrLpjTcvVwQeSS#mK&twzJPmcX=iE9e#z1tkxQAz z#I3tKOKawH6lTSN?R{x&XX&o_xEE)U{dQ|{XVngKZ;*~gCv6HtG_!DPe&>#zh5d-J zv_8LcYjx+A9n}GP)zIE@TRn*P586lRpa}P)b{_BR`MI^avuejgi4)^wza1q<(I6eU zKrZa8TC^Z$EF1Dg!a@g&J9jJ~gD~5V+G!Rh`%$|WXT5>j)V-ZmOEO$Ei~7}ai#vA~ z4bH%W9E2?H+_H29hDsNpwBzKkJ&I^_Oux4lcb4v%Mi4>fG_tUB%TCHL-34)t4${O0 zc46m^MbK!RABtiV+> z?Y*$)K(Ts#=Z+4?ZvxEhW`7R61duis%V=Fdml!hFUL()f$p!DRg_uYp1@N3}N z6X|Ztu(w%bl}1BJf7D4f=5>4uS@cW@7{;w|?O34WZ%WJfspl| z&_UY?sp$kX;dYQ3y+dBA=YC=*ry?NpX5vW_znH(9vRTCrc)8FQR61Gzuvh^Kju69V~&5!^N$7ovB*EJ^N$<+ z!-z3@g0Ign@%vl+gIk}!!+)*Oj|G0Yz%Li%B?GXq&P9ySlV%qguE>xQ-b1?3UYWKEHIuvv2a4xGuk&L}{WU-czuCo)^EY@R13qC zWV{PzA|8So$tf1br>zE`-5Rq=Il1&lJ%h z+Rwrv^2hqwJSrwV{YLh>meXzI_r`<4$y%BuQ4hOR)1NRo9~@pR<`awv+b2oST|-U3 zhBadNW@@r)I7he09HQGhPbC>+&4^4Z)v@SLYhmvo@~@@cFdw&I(t1#g?5LXdBiF1A zt^_EqF;hF@l43O58^lpkkgmX|E9wt$h?t#FGcUqo%!fsS{3PieWN8xrIMVkJ8|MYc zv;wgpikEK*dw5BZ8>97;5jk&vyOVZDR#|J*{Jf1r5h3p;b51IV!-W#)J3g}*DM;)4VY=7wjQsM9=P`57T<^> zu#&;+#nKIna(~GSP3R>PW09rfKCQ9w2pV~tXc$Z!#P69wMV%E#=QHJ3=i4~jVZWb6 zITjoVf_UVORs18C0);i4ccHmV+LrI?_Y=Z8lO~B9guI)4x>6rAE=yHjveuaGc&Q{sHLO{3dM}H5 zl*V3^)(L#afm7!`An>bXu z8TWh_9=Iq+(sJ)E0yh{_&jkD@mCFg#b;%-8Wl)ookc%9%)8_afYBG!CAOOe3%H_eT z&3`(l!{z*?o+nxlr%f<3&q-rq1%ORm7`fLq5B@Fn{yL5@E;5(yj^3xpk9JWv>`#oTT4z6-sFvCqGNbQZ4cim4}VyS9HL> zGi+wKQzcUiqiZ9{i*PXDt5^u}b#6h%jUX7xK*>17Na0csqGR;U7ygRjMcME-J!cz9 zjB7x~*mltp7Hxpx-taeT+_T&lv$ploJ#Qu%4{K?%Cqe4o*A3k08yEf^#gNT7V-Obh zaz?KfX*Ap8Vg5AA;yu4|8Sh?2)VUjHt4Uw;9q)6w?)G?ZFZORd(k4!?US*MZUy-ca zdr>BCL2j*5R6V=qHKos2=<`3`$BGx$|4K%|l3mp+p$|N4pCm=-qd|x$-$;b+G@*z% zs+&R;Y^7F?cW-!dE^UxA6w|86XcL26i0Rnms3B$BiEU+Y z$ycmbjJ8Zz)6>rz_{2A&^0^Pnz(507?b9_zNpvhBG;%J9;n0$!5{83A>RzN(dYnXA zSE|Woq#InllI1Ns|@$}n)Aq@GXM8LU;Wh)K|8762;;Sfme*vw;x8lgxzr zh(cgT@NCkNQm8ORnhs{^N~Uw%DrQt{^*Tzn+$u(jYdS7Qly4B*u zTh;4XhHV(IN=h(mDMX?);TZ+@fRx%Kk4E`&Yi%TZ$i&&Ka%Whh2~&mzq?Clbh~HU5S(i}yL5Yn#e#)Iw_8Sq?oP0wfzk*OcIovuN(XW8 zBp@~1ZMS_}e{z*_JQK*`5gLkN6N&fsqKs@(Jl$SU7bDq>@*0_`;v!eM0awR>3Haq2 zb`On5_H**XKif^bhmnivZ{H5${UpuE_Et7&`6F{Sg&U{>CUB0yOsg=bbCpqEM9z&j zcqAOwGj9phdR`3gU?r)BO;STl*19mxWN5Al-))7M%npYtv$XeO@&z}$VIH-|8Ey!H zkf(S{+1BV*rQ|ppv~yCl+_DarqUV`f?xo2Q?rkcvFv$_3(jE4%G8MXX=*$+OA|DUWO@4G?5mFlvX_ON>O_(=BcFr%SVAj!nXkeublGMv- zTA0R=pxCvIhi8&q)PiAnVR|=1kq(7i=!fzRaH9uCh$>LF= z4;u(%&P<$tP)2y2D)a;e_43GJ9G{8gB6|!aCepxhyH(6iB&^jwY_Y{bq!;-xOvd40 zaPlp+eHf3#!zQ<$Ut_hT3*F$FiW9vLw3gZmLAbQRjt8H5WUGkB6-<&P=0S8^KO(zK z9GUtc6>uv;bt2R9AwLsBQPj!42XhoJ_g*&G^B^|##jDMjymVX_UBF%o6Bgy_X4~$1 z<9%}4o?RG0CNY3+23*xJ?2I#rr!&`?nn zvE8(PGOf{0mzLsu9@22tqj$2DE8Qg^kIRXD*o@JE<=4xXSWWJ^X(kS**cBY}5;Aqs z2N5ZedTdOjX$qDD@|{BE4i6eaED`!YA6TCM-5~ZL(G*DcR1=WqC(_<&74K z84)53IZ1m!>an#OuxY@T2zK>XRU$Q0Ds1FCXi9fj+H!*;*`HY3ku*{IXd3p3fj0`c zAl*8+4M@K3&-QZR%(Rzrxb*Xi1%T$=Ggz?AY{EXwC($$N(U#0R(@#%Ltxs|NV#{p& zP;qBxrvGx7_NQiNYPNMiuIK%%GuL}gGFs^L9}n59T@6gLL~XsyTm@t#VFfx&mB||i z*LCVfH(7g4FrN(#wR_{19LB@rlal%*8z;(O2LT`P{tB{I*q1=r3ZFC3Mm0MGC*tvS z#$c8q762L2%1E^PbcsL_xAkpp!F7UD+^vEItsIalxP;Wx8)|SrbXY)Kh6r2L3?}H15E4K#HxuMw@;eO;-KB8SgWF ziS!Z)&DB0i_mL)3e`4Q+wur%)AO-5gn3S$?e6MBV`pi;%5m-;vcuaQBa!aoGrPfZP z0)ieKT#U0t3VL^Jx-uPh2lqOyP%gjbCMx7I0I_AMy074>k z*>{n4omOS>lu^vqHru7!rg_`GZQ}zsbO13wo|6@iCJ>$X%rqhvlf1}ktkSN&<7_Z( zWjcXKJ9U~hUT~BcRI9?_Q5X+!pG$SmQmggiF%#@SULjTs#65MUk2 zI227lItE@3dfUAfCaa?n9}OAm1zwLrA$bF;-|6IK=q^N4**EQo^Tk5vF=JclY~)N{ zo#>=`cb=JDz1o=6-DAj`oJU2qXxCOR71Bg#O+p=s<4bais88RFlu*HGq9B-7y>XTy zc+>A{7@nvkqO>-B4xEhB1cJp?*8|DEoJB`*bWDnXm_J!jXmgwG^eD;(;mI`o4T;L4 zHbl5r#I6rJD~4vg^U{JJO%8f#lQ+cjE0Hd>+zL8WEynBm0cv-WokSX3c5DxSF>H@J z@_3%~eHzDmgE5unk{)xgyA;EzOePBze3R3Ai-?_i8E=={{gR=*0tt(Xzis5CNkWTdXvz1Gjl$ApvnjH{~(0hnr-BB(5X@A7NL)M2Z|7lsQH zFxv-r_v1v^37<6nWhYvn?OHmb41Nk>_JY~6==3*z#t#NDTGsdKg^a&PnFTBJ-OCoU z{-SVpBb$V{)4eN`6hINav|#+@V%OiBbyX4d(<(pwf7pBb=s2?MKCHPPvonxJ(rP8^ z!z<^p(L2+aMK`(|AV7lC)Pf|2#0)`V32al-C;r265-au}j{mTaWlK7VkItFR`Q3ZpM^#tj zYd9m>acjhFbiKOozWeUGU+=#Ag2BK^I?^S%CaEebd49nY?G~C0x#uTn!ws9vDvD=x zGhQvWnVe>n$-NgYBkfR?vjkS}WF5ZoUZ8pxXCnog4l$zZTdT9-}-EmX%{KTk`)fBbL^*(L` zB)Nx!Sn-j1ho!q?@KF<;XThAKU94(Z1P@!IeCse>FbJzty$kJ0HJaOe>o;!XzC`iO zOfdl%7B1)T~-Z>JJs_P%z7{=PCCcAaXIct__g$LY3`w;S2|Ebl?q(b#K zucr=uvZ9D?a#0_X6%jb5zQiJFeULHnn*NEzvW`ku8t6GUCj^(b6|Mf%oNy}3f2ste>m{tiKmR%<>sjolcrZECNnmi4d9ACpO~~# zh%)z#2$Gdnd`9WaM^(nogzg4&f~46gb<&{};5_=IJ9aYB6e*oMd_`N zXk7k~#)WS8^>0LB>II=6yVBu{R~V&g=Xr5IHCd# zN!$^%O(P+Q)2N%I?HQ<-nYx$k#i$E*rrrj7gL)7K$9AUMP+xx9!4H>P`e)*HJ7p&h z@VKtH3!%hmhvE$eg)s3uq3jKCGW%3GvN=+Wqkcv(<&V?C)svefdtLdX5a*(HhU`hQ z=K>&m_*A1x`^6N(?*#q8i}A;4M}x9lh3L}*0}+2+mG##C_=sfhN8OpF)!ND$O9pqz z{mMW58?@y9?{E8?B-wvNmfQt*$$e`M04%`#Z&-hS>|@#V+vg`H?fr#ff5I|!kwF`_ z0JK}RsFp*-BvcgZR2dZvw1D&zg%bsEszlH!2tGQ)LBMWAgQGau-Ah%qGo@OM#-&=T z(VFLT-0EerDn6%ei)+tMO!9xD*glh;coZ=^lN7j{6Es!w7a;R%#=R^h4U*xg16-b?FJyoja+R zpU*&m?9BcG$@w2no?db?CPi}dLE@_oDV&P!+0LGq@(DM}N9B+SO>}}I8dy4B z*d;MNA~hF29H}YmMvLLPEJ zkF2O>PNsK#)H(ZO((wlVD^Yyk-(AiY=|L=G`ALwZSuCGw(MDag=yf&5~*>x=j>6(A3{a z?-u3(6@+4;#N31(>RdL!x#Zt5ooiKXYMW@g#8H2=FXoyjIkOB1i~>No@3<|5*+w!7 z+3fe6Xn+|TsjR0Gi59849;GnOBrivs4?0gww?$K4+LACvW%4sAV?^nK_V1|1Rr*gZ zS|Bw&t{;b2r6XIMoO2a2-MGzJlFB@4Rw-Kks(dR_H@$B6NKx%9r;S<~rh8Ewq(`cz zZne%{Q_GRy)lBsU@fx}XRkm#A&smw(9ln_==SRJ6ILGRymwHCI@{ta;LgkX$O{68x znS2N_Oe^$8;mM0p-OL{v0ljwSxU^dU$>>{rswN#&v z{ZfO{*`DH$dC#(U?HcXPynx$U4*l*U&gM$mpSg7XGp&|f@%5Qj3l{;{s;Ew}N?J?& z8Oy2FUd6PN zl2k{bH*o@UWfLR=NmJOx6T?`!tD2X_jN`NFk~g9B`sHy zrSJ%MQXJ7aT64BcAkf$cy`x8I^vFOU%Rp-^S)T^ns)lBkqP0Vve8cK-J=Csgbcu{M z7n}GMmn-OA+Nw#OhF(rt!GkL_QI0^k;F`MBpQ6jC4S}zuHbYbg!2`Et>OUy}xUmPHXr()nB4DR5NFJrpAm}(# z=)#qWeUuU;COIzq5p_pn)Nvf^vhV_N3BS^v&QjAh&XQB>L(l>x%DO1(Qn9T^PdX{3 z8>65f48qgAf+;D2pT|baWcI~$iUAGW%1siWyvj8G`i0R%KcbnK2~mjppFQzA_``x% zPjXw8zds{f_+#XTBra!!FPsP*pbDcj=y079mOP^(#7bm=n{hzg8#rwbS1HaBbla%4 zrl~k(?%$-ujI3FqR18UxM(rZrB5|mg!-8(RqPcbih`s?72c`?FzpDHVaGd0#8Ijf@ zFwNLJ%G@SO_r~mO?D^qxFY!s}an%7~#+@Ke(nrK$5Ofp{td?*4y&j)`sunh^tMWx8 zb<;a0)5dzl6;sQXTp_(l2(M|T?l3oRxi|Od$MfH-LtF2_6eyndU zqs;U5mCt1?O)wb;Qb5b8&C2LeMSL7jghdrOb2hxL-@mWw2r+Dcnh)pgm9yFkN!XwtI@arPlTBk>sf zaby5K7Arm-lR@hKFr@opMAjV7nd0xroR1LDf8uwBsjd#zu9oRg9cn<=?Tk~7Vdk6@ zUwvS5xAeuv$bdp(73Z{X;%Ybm$}_4epYVP+3Vpg28958>D&5OKSTq`rQN|z515Tg~ z>Oi9cP-T>xvE?2!(p_S;s@2dJ1Qk}?kiHe+sGou#qlKP^VX9&SFC4L6ioqyV^$H}$;`;zqpIN+H{z3A2?_q34&L2J z;&64WixESOF72TdO3EV4DU=L{m#*Q*j^uCFk?;PS0rsV$uBNeFI0No3Eq1C4y2y2pj&BR8`CO{f-|Tps<7Xri87+ zR6J+OqwAz(wPw~});QM7*7#D!sh2|BQ>qN%9t~4v9;s@X%cP5=W*?xwU6JEeR@If8 zY(YDb1}ak)gk!zsEYFk5(>9H9am0^1-oq*OVeE=63aaX$4Je*j{vX)7dn&8$19#fX zUx$CXY)tBWqCYa4Pvjo$)<*#7FwV+f=ZvEN zK$0;t=|taU(}^+wkXSVC8B&aXCRZC32}Jr3RX#a$<5m`SQL+(xUz|ylK?D*@&puxK z{YfpF&Lmb!s?00BVX~)j`~1)!A_G7_yyd6*5x9x+N%S*!fH?Dof)L08(a+b0@vg7m z&I5Ms5a%8DXXI8)svV%Gw5zVZ3{ITBe$+E`q>GA1SjckDX{pM6z_8hNK{Io+F1u|{y3O-(^o->{21`ZnPg*=*v zBdI?m3%Kc69chYwAs8pA4l0&VhIPY^ABEOvc}#Hq8267PGb=@9@4!k*iv>mHkSQ8; zRgkbibhQnojd0e2++#+=bek09bBspZ$Mwy7@Z)+f$OT~+`~4Monq-#-$qIC5Zh%y- zz_Vs~P5Dm-ekV;7cBCmAR(bL65CwHa_+_i98Hb^Et*niEXNy`43D?C?6;^3lyy^Yu zjLg$NE6GLoVEz4z9igiHp>mLx?*@s#E^Nu{G@|IV*2^4eJ*1u zq?Db`99axpyp|}N%TUI(9p&~rxH1#>bw9@TCr7K4Di3;I5Yp2}c=!_jd5C|u@J|*0 zOyQre;-AO(=UR5Ffj{L*Jo+sDso|eC{`m_2c?bWzi+}3)=c4UhtTp350CCO}qaoC; zRX{@54m19vb{@=S9z;xfPxAfCVSt+&t=oZ*m|stzE2y!{h|sK0QUQX?M|rP#&x_qW zTGzzXIW08PZ6P%GsTD-E{P^)>*}Nj~v}gVJ@nci?R=1?bG%wVJFd2tIfUaH|ImuSL zMmm5T4lyILjrF2sNP5je6}jTBcC8%6!EO*DlP32LDC#Z=EkAM{<-qCeE$j9aPNiy z^U|Y7nN5$?o2puVNb4!1GLg)of56Jva`%Ep7*zHRz@Z|xcpLW7qnDg~1i|EvAFdC# z-|{=gF68x>nbJGHuIFlv#~d3wdCcw_xZ{U+f^gsAz1(}fAl#>Irk7NUZ6X&jB=tHN zepcZxZ8q{>0530+;Y!W>>YAFpGJn|>Y*whj&wrBgzPHg^WIDN=r9n9kLZw>LJ{*aIg;_$cVo zQ6nuU>#F>M9Fu?KIuz7sWD=5~=Z84D;gF*I0_}P_hZ=MrBd^Q$D98R@5Q^DMc}C1= zm`ooU$3uVn(ZJjF9}T#wH6>5KF!18Ue?%4CR=s$?8y$wPw}d$g;}Wa@KG^un*hs*c z1MP(=h&0K@s(t@KmhnN}(*#{a9Ul|ZHIdtPwPKhO?1z&WH1!V^?m=cB!*aft)aabj z=rJ~0&mUUwwm8INLlJU-3lZ(izJa@{Y{V8LS2fxU!M+eQhd3SMj1!5w!jL}3F5yR%U&ZVN=vL z4f@=+{D{gzpz!^+ucGZF>iH=yZYUCfGHlBmL>7waQzd$B@Ci+))H_P{CE68XWtk1R z)>`%<&ce6aiPZBcWmHZ)n>{8%t}SubV;co#QhSS`P{ox4uh(w&i;i;}O{DDE?W!rE zJG#S$3c3Zq8dfF|#YImh)c_mN6o%K-&ukx$?oXScYKLFHN3%xrGfIGSZ9Ir!(DQd= z&p>|{``uK9#9hJT0&QNZdcK#WDm{!;lEx4LI^>25?397*Wc$(J3UremtJ{{#8jMd` zYFsrrLzU)Ly&&6_)>T~AyWg(NnxjUQInMI2!c2F#eA@EzXCTVh=woJdcAhzK}zH#P=0leCb(He zbWG8Ck@wf0HziZ;7@QyVSlpK}_f5oz1sK-FWqD`U?6o7;!GcuP3SPTN+Yj`$g4ZZj zO2BORNqSXH0_QX$pVhN&v8 zcdyz=)a+H%bC>vMknZ{Mz1T8wF18@O*-8=Apjv6lFkLrAM=B~!;~Ywg1rV@a4lq6% z_|cBWxC~0@Fa;0*{A;R_Oq~}#Yb%#z&aoqdRUw|wLv%_>X`NGX`gs;viFqb#L({iH zzm#8=^4!;W%5z2JHY@yMn-f*>3d|~jiG@J?Y$r=55wef6>nw|qP?6_U!G&%vlIJ>D zt=~t&p8H$}tL3@nM}|tCx^&uBWeQAXg0VC#KG;;PNZq!~Ix$I%^w69uM3$_p#mid2 zm6crnE-@jw+k)Pv8?F5(0U}m(3WPe&_~#f~rvHmo?65~MUlZ~bteCIRFyyddRUcrY zR#OOW>xhWHqk?71c|?ITowkN~LAIoO{HnYh#|rXNb*QpfB27CO8=Nh=})*)`a283AOo`a2_*LK{J<$ntQEp7 z%6^m@2sn4j<0&v^(nu|@dI7!v^pha3wdd<|v-JgFcT!=>Nx`?fsG65%8gnzPM(Yw@ ze8b;Pg4ACm{}GjacY}0qxLxl={h4jwKk^UI%C!rWU&EBC>MH6rCd1gr8DF*M9pEq* ziU<#5zpH3oRl@Z)I3+ZSdWouC<403g#=PMC%53m@|dRGFK zT=;`r`fWtS{cDwbPL=+CRjyV>AHJ45MxXtws>!q#(@WpkZP!07cZ1Z_vvpIkZ~6x- z;ZC#?c6!6Ezq00C&gn1uq*Zq5E<8)-HyEo4K-s zEo@vNOkgqM1&0{(byb;HHMJJ?g3gida3>v1$NqK{rPDaXGkq8bsXslSHq$V~rct-y zFp9g=Nf_+xOecPr1Ssu09Y_5r%%TJaz&twLF4R?J!OX!;#1v($Z+YQNqdC*OvM^>E z5P-C#yBnoGbJ9y{l#PN!+b-Q{S~EcccI|>~11iF?bHwPGi9%i5*at$gO6sUiP46*B z>d}BJ={rvf=G0t(2SQKP!J{v|1P0wvnmZi+H>bD;adZ%LfuiO*ikTzI&+Tej9q!?9J|BDM{;(K#dj6AOJLsV-Azijh z=5_EkT|Q1dE?De*|F0uOLo9ImMfauEHDm9=wOBQ8Fli5ZAj@4 z9IG(#3AR%?_^Pcltx#+}m2qLAyft9cE&~^W+dKgYv%sxJve1nK>_WEC^?cN8N0sKmA~gc(oMHja8SFxBXr!>Q^@#=~q8Ejfl;TSfs1% zc)qA(X*JTX{Qmx>auz9?HWIxSuZ1GKY{L=M?4yFIhot7Ir%cU)6!S^3Y=RwU3Hww7 zc^W^4QL1WM9tSBW_PI=Acb$v`FRGWj=kwKWg&Q&1FqGvU#8&uX1IIdnl+;&EP|lBC z&L>@Lz|vc<5Q{G?GAMjMv{yaa%^tg~=?I3?pQ+GmIF=Q3TQd^Z{KYJ^ojG(W0oz4Q zV#-uGDV!E-xRK%#OVF7n+*X?I`Tfi+jSiPCEU;9Qk&nA86Q5BS5Ne|^+>0{tp5A0< zp)v|3hl$=_6I8U&bkmVefs2M>CoW6d(_*7%SFjP;b4Fw|5W^zp!-e@uFkxwQMntll zc|I&GI}0X8_?!_L3&>d)?*}K^%Gko5fL&4N!U=%JtV-VW%Xs8=5!IE>U|JFWVH9j=?;`i1$LW}HZ6KWiJ zf(W{w&bVcT=4L}jLD%=W07sf_loPyO(bSN1nF zWs1%>=Sf4tm9)C#^K+DXDePLh(2CN}@AbO55f;4R8Xsn`SXD)BUwFY1q^+db@V&5; z+l&GIi(a=jkD;oF03s%(2FZ1*GvU4cx|%7(0^rkVQE$n}JYrX-z8QWY8on6&%2T^h z)K%Nj(M2^iwHdCw*jGJo81jiS_>fW?BM8+cmH3?~?7GFH=>lDaYjd;O&#4>!wblk+oCXNdzyoylL*bQueT97bsY+r*?GDX#T}oUIKT1_ zYZ9{=d9dzhs!cFA-q`cP(1-P6>rfO1KPQ!3ft{#NUn8h_S)6(H9rQ)g<<@+?F;|~$I8oq^zF-cw7@G?U z4i69O&gL0iFjwpP2QzqcQW9GvDK}Ar*xw1B7~IxZ*HroXz7@}l92pjzuzgHhy*f$1 zT)`U>*hY0aXWJw?AuZ?-Y|{&UK(`tB6~sjX|t>j>Xj`0$ddEB`F`9!pmi42<09excv|nX z3TvTVhWQ^)Pj5LDE(*j4IRVnys zeJ_gPI_ReEb?MH}B6WqiM;};;;sC<@K*%^h-QQlP3jcS9{cRt4N&4CSd&%p5OjTo? zU)T0`9}HkqrbBGh&{hO^GQlE73X&;9bl}Gc&f9W|U!uCf&W<1R767yLW)=WR4zq@f5y%B05B#`k zvhFxN=D?3zs=`@_lZp=WcDSHI-+L?K>)QH37*XhS5QTo2N|hAPlEGxE`#22TNmude zD!rvKFij48q-j}O3ifR`N}KB8BHd(EL4$I=Y|Je<5fy6DR<$OZ{@OA?W9`QCco^%4 zQU(mL8j9XF@VH$}IY>@3>4OS;JtR{CZ*S#Z>qcqIU`jAtR0RbZI6c+F)MIGj9tC}L z4Ynb-)p!s<#<#Vl$0bHkwZcO~Eno6m=v7WE7enYq)E{6o4kqIo zz+BTS*ZCR7nySo_q*H3F>No4LSoxdBAFT4HZg$0+V!bR5quC>V49S)u*ki5Nr&SOR zhAC93CE8;$t>M*7!Z!)%K!PcGWulae4xPybqF9AVy|nNsZc|RuxQrb?kqqu*v!DS+ z2E^%oJRsAhdeOf2B1}Ys6}Id9!z9IKo~K|>QmH9fnPkEl(ArHK0lw*Abr$gT&2WYM z)EtB~QZLGeqxeWKT1+6joc>ff+Y${4VNEa~*;r;mq6uhm$Nv zti|G}3kM2#vdA2T6UYNHB1_AsY5f2at%$2ZQi)URrU^3Nx>1DXIFzT$pKvr*>;8F zU8kC&{LuG;u74uRT9OrTkVqzj9}*>y?5eeum0p^GM+ONe4+6tey&z3{ua#F1>7EC^G@G{!8Ir7}txV{vcxBLS?k)l<8Fo5;l5l-Y zh$Kp(fgMT~8o!Yp`TCJrw*@mT`SBt*Gacd(Ha31a4W~QJU34Rey$JSSkT@p6h=@2z zCFyV?M-z`B7EkXf=p~}anXvQFi@VdDauUh1eV(0U+1^a#b*v&UVE@w?a(v&0->r*N z&=o2r(_?vNTE>>;CW9{tdvTc@fd$W>oDYuSAxecja<~C&*^EPWEYe6-sRa@uV?Rm6 zV?aKk)Z(x%1d0stU�)j`z~k>+E6AKCzC(RnmsIF-~$9ApQL=K;w1CrBD=50In40 zUH5i;Rrb35ApBf6>U%+m6#23$v!|g@i`D+s5lK@ot1>fPQ=3p3FC+`zcp)-xBLQY( zsS#atp$rKfh*?IDu1DP?_CT_)EIBl(%#q-f*R&7v!h=DVVvqL44>b1ZaxIIRr8I@< zEs=UUAz%i(PPoM{c@Qm1(-DD#z1r3J3m) zyUne$&8tcbH5hg|>Q(dPL6$H+rqQtRV7 zmU;~T7^O2wQ%CbgW9KPCj|kcC%C#FAc2+a_B~iQ($FD-Y1bOW;Nol$1+trR^FCHoz z{D~i?)06>;z*P{c$1Z=2iUsB$goYY zZ;nn#enXP_0~kUZI8_4MNY+UZ1}Wcf-Bo*j45uPSH3ssUJ$*?477#oR-U76{Lfb>` z|8+0k@Zw!RrClOSr?W}qG~&(2_0*>wa$e*N6Thj-*rr-2+e|`aV9fa8K@dkFo!XHK z7UMv;Viw2Ht=A?So4_C!XQE}`;D@ahP<>K;=}XS;;g`NdyN6_Gt}s1yc$8!1I;oQd zl$OO=B(nAo;s~>Lp%Y`X#1_BJSk~(CX71g`h=0OeOZ;>ifmON?DG0H>PElLVE2-

VzJk7ney`NYROpAW@z=jN*Ndt|_F&jOE}2 zoa)UME$OJ&^y*P7wB1bd!`k*l#gHf;CzqfkQNSr>N@^B{g3PFLi z%!+26RFqx=h0cy)nRWTNMkWd8_+~7=DYx$UhEYQ0c8-qa5J~>9+a`}Uix51e1OYP@ z4DX!GqffHyjF19?XA(q+)SR#+q#1o|QkcfJz==APDrMr1Lg@MjelHr(!KUNnaS>%R z(9S^9?0e^1ij(Sfw*TpT2c;_p@c&4)OL9y$YlbKg?2uq%49rXf2~UQ|CJy!wZB7%V zm%52%&^kq|fkq5lvPH?<9h0jwvXj88E<>HOF@c@HjA>_7YTDVWQRW=?ktjceQH9MT zTmr}!S4zUtNWK!NBnq~!C`Dy#Ivt(r9S*RWg7}>9j_6@i1?(6_EZ(*?k0t*{(tJj# zQt;fajpNB8*o|@zQ7V&o#dLyZlqvPQj*gTJATdrTnbS}xii`3MAz-qYkF17MQwz2W z-(?I%c%-IUr4D{jK5 zW7l$kq!;ZXj})IWWyRUGU>ex+EPYAGqyjA{#M+Cz?u==eP_}7qJUn*PL{J*S4 zlDhVG6#6x6>#8j-pndjL@?ZevGM0Qpdd#GooK!1o#`o#^sZUo^>Y#zDm5g#C=yONB=@(Iq`L+9xkR4=RKAw>y=GNC#2I>O)^$9Ke>??iaw5e>V{v% zigfooP?WJBgu~QVtU4(a6ND&TOp!X;#77hq;W-_Ev0EFsQl@2!s<|jT zx^_dCop{6;L;ujI8LqowH`++aBFvSj)?fMhERx3Ah{K7CVH(xM!o_urZ1|FWPKPnH zoq~rZEU04@8S+RPG1;b>6Kc*G7<=0c`;T%8hRBJe^Nu^fj%cr&IeV4bG-lDo(V+K8@;p;K_tL?C^VzFtS%7(wQuj>%Xt0M`*!)|t4b zPq3plTD&-2q804yWMHUhvzEd-Ip(ndVPcI1kbNvcN3fb^4ABqPZ7A^GPwmH#=0|(mm;>IgQRld{)Sd?&wV(BAhICIy^%dAxHlLDi_^^O zZB@SO7t5EdXNry;8^HQg1>M4TNYa|)T%mW#ihW;b(BjT!QUd)v%VgvvIK;u+We*zF z7;$Gr7*P(x55~(oD}0>REI@O@tO#s@G#hO;Mx14aZ*+s*UnI;nB1v1G%2AH3`w z!#3;nPLslO9y?^NlZQro)$EFCl(Kt#JgZMcC4atj7#v620>>9PnW>Gyp$PL`(A*tFwMt5cAQJRjM$w)Aam$SqisW zx|T;~Gvp4z>SQ3Gn6C*PU++1 zZ&x%w#-UL;YRb39FvH@!X~Y}C>}C>u$L(%YRhH0CVf*54_uwGFP2YAtSu?nq0Y)oI zIGXKCo6s!_BS$Y|);#t2bg?yBkmyd%f?zjt9C@_8h@Npr9CJ%P;{ju*8Y|m6d;GD2 zi1$e|!r9s^c6Cc}KB}|lWx~1E>T%@j>BX;|VPW5($O6wur@UZxbuAAE_tpwGP=!8h zb8Bu$ajOd3P}6GL?|8$+$2kBAIDfE%8_{nZD$6Wax}%Xclo?Aqgl#8cZgIC67Z?Nd zKWZoPVfTXQyY(MUGG3mbVnh^pLfLu1Qj#nkvldr)Ybd`KrDCHe&Zt?0?rCk|)#Drm zy=RJzqe4a*Wp~T!+KE6_Q3yQ-hGL7zoVRq5;U6!$M?%_euCoq@i}XT14PE8qA-f`d zk;_tY3JqL(bx1iihkl++Iv#*27G@A^SsIEYDVnKKLdg2E(R>$UH?nVJ?j(_bL+v7C z2g7&}B|grFX88_fW_jlezq7z+BptO>pyFf`U=aJ*Zl>xVrvGA-aQu?V6Nwa#=$;o% z+@DV7>Edpb;4~cU#$MM+)Sz7_Ed~$jIdO)uIu9LNQdMO*;#n@LtZS)n)FX2QEA`a! zK=f-E;rI%~n=2cLCnzhfcO+@Lo^!xKrra{PGb0(vGmf%L$d~qdD)#AM7ahRj0up}L z-4!t9P$_#Z!Yx&!oC_hPbBawi(b);IvO{I(yAcU@NnXUTsW^{h`v6nPH41S%W3wTF zHk44NH7AvEJeb_c(9hM(IEsd`W*}2PV`muSU3cJ?v|^^1yrRs&+?XS4^USGQcRlKT zaUBiQe%J z!OO;A%cn>gIur`40$-f2NNuw~I$qfEY4vbSmFua|`mQ;uLmWVsFQ!(*vhhx&M3tu$ zh5w9f%pk$yDf1Iw^T)*)ilA~PvG(1Ic6U|0@{^k78vpc^m6IWQ*2Li5S{OOtC&kr-tl$Zf8@*`Qy&WZ~-{lZb!6>PH zZcN}CQHzw{+yNZ5M}Slu4O2hnh@BW-ycC&VO`OS^m^?Ua=Y8y-I zuU&QS_0p4Fct$`~G-mexA*W&Pe1qC7yZ*su+3820h-oA)vSUj|8gXRzX6(?+#iWIU zbE*vMR}9UF`?#zveH{*Lfn+}Dh>uR=$nK%&D1)A%B7rsOL|JuEA{)R&X~uqZz`jE2 zCHutq`lyNsS?qS36L&5~dO#;kujV1KnOUc0ilM4Xc5&mQ#fJNO77e>aeGC&+J*~{} zDWVc}2DT^prHv!bU=yu6+M4{Tv1DCBw!spo{jK?|{jtEkl;ZoRj`p`>cWO-ba1D!#7QF{wChi7A^EFDcR zIkrk%o-y?L5GZ3u=J*>NYN0I>Ssde*imGWpjQPM3rN!{b9CQ6gm_2qI=4nm19oDFc zNw%AoTBo%x3rIq1$@!g!W_vz1eOz>|+%YYQMXg0uU5k>m#LwD;<$rTYGm}hJvK-B0sK_>nun|c&c!wpp6QjNY<$EP((w9VEkw5Rx30ok;( z+IA|i&+;m6vwVyKgcWv1FK7+6~zr!^d6*)gtKzZ`1twq#TrceVfFq)xuCMD8160+~&c%XJQ zrh7r$C8uGUB2rjZF0<*#s>taydwe)^6gbBNvTDd^B$cmiSVp+$Q1C-4e@Z2p%Hz#B zTNhQ-(x-JNaE03SN);z6k;x#!O>R*CIUH7>F>HK8&d_*hf^!zGj_5W7G-BF!j{O9Y&wI3jhkUi)`Zv=~}($)1M5#y1aH(Q8{8=Ji%DmJgV;m1VYB?*KWOylxU_$;BjgwvxcL)by zMU0tDpkr3G+bEkZ^msF*bduw}Aj27BKIMsWjBkC zyHF{Fpu>=vO3(h?zxLa~h0=S^{`kjArGBaO+|-v#rDuO@|3YcERJ!I!^N6Sga8~Cq8@qK@H8LC}Bco6rN!%oyi zr-CZtO%``E zhGY#@A-J5dlBEX^+&Khz%n3d#lbO3g*3PjFAGpij9~5K)o_vJ=GqA#QA!8a=fh#setEC{oqVlxj5^3$<3G zHP4u+mr3A!j{dF3!)sjI6z@s3`@~>6t(9x;vFC@&jD`hwC)!<$gOE!U>b7_Nbk$4tr7EsK zmmlXd*f1&YM4f&5*%|yRLD;?N_kz9~Lg8gXmB=946IE_BTeEYQ<`*tssV~kfUB7X2 z`ITF@S6+SX&g$KJYoEWrzVYDoH{Sfh7rpIH*WcOQ3*OrA^}}fJ_2M4>SmmUrLXa|hSSN%9>Jya~ltCc3X%jGFmS)rTw_yUe_ z*dIO6r0YDd5Gn8>1Jj069O~Ti)9bMpcJ>_1G@&!oZtu6$I6YL0ohUr;;}mrZ!vuvW z+Wqb&40+FgV%k-jssSCU!QlZ9w2396w(tYp836+E|234ptX)tilsP^oHwg!dj<-QksyC}kal)oA^vrKtq(<;VSy`pL1 zW*Vmb0k3A=J@xExO%o)%ij$dQ97j?L|4?y>XJ)ld@{BKZUjf#1kDTrJ>sHk<%*cHt3wqDwrM8t3f`zIC>uoD zq!ht}xThmQ)E%b}RjZX1^^&TrOyQ-(gd|3oe%yfEVLXK)jKP@r(9lx$`gGhE1$?~D z9f7=%IH4VTmCMk2w|D?20OSaNXot_zPcLec;YVtFkj8Lm3?n0RXRJ`GofjMOiK02-Br*SL!(%5I4f~zK?j5&OoxQCE+FaU}f!K zPD+&ciK@QyZmye^wS)QNoQECuNH|9WP@~T1Ev@7J3CVNrN(q#`-C2tKIbBBhyrJ9Y_ z9Opb=KX$T?LlGe*S|3)Ggb4PJs1oY)>}o_NpG91VI&*h|(0BBR5fieajp?bSGzW0- z7A{-j0Ma{UaJnNZ0a+V^)D+<+9mjch)Y2Wv`vZc40WZ)bjR~ZyPhnHE-%6qo(mC|i zR_$836LjP9lp~+BIcHj27YTk53c6biAT!v!{zQ*7-&z?<=XRlqZWzh06zRtXyP>d_ zAR2+Ms`8f}HfmS4-f2$HzPq_uKg}Q28QrS&?$q~hRz_%TCipHgBJ;CMyeHaY<>q}g z>!xR#SJ!)9vWIzL^Is!OPJlBU84v_4dqx$0k%Epz9uM`7sRwQ(mxF<2E8R`Q!r9{0 zqCfO5;cezlzf_gJ`2tk&Q}jdETISCf2Bfh7sR}UMQeb*~CFfREsOv2lun$$m`p2ru zPhM8DttnLnnd;nl3azswGdzP2p&@=9R|k_nEb3W$gLu_SMq}5mRrsaaHT~9+sA+|#ICscn50f=yWKo!0cb#Ukt6 z$XmO2=t{C|~h+05Mnt_o-)8INDI8@~CB=UA71FzYhy{Y^NXa(mh@*8j63AOLzW5T)Jb) zeAdN#O1imxia^cpnY5Q;%h4$=4+e|}g@C9jYc_Gv9Nj)!hDF%NgZI(vkglt}$0kIKnHo6V1KjZZr zPAr_pT5*gU{)p+(HrhF(CZnONChfvO+>@3KzT`!Fj=m>RSYmN$1YFKSXe^3jNG(jV z9LJVBPNR4%SLHa@ikHj?kGF^ZAaL$!rOdJ9%-LaQ=iIRZ>0c$@JuRu9GVj{N#r%FE zgo3jvB-QU8Bnzv7BT89j)Mt65E=$b_I(vY zC7%R(N4zd@+Fjzp~sGwQdW^?~+S(`S!tEIPaPoE#P^Ndai`xc!L<{j?V z{P4id1pDzXeC{n|Z2l?904uo}U^Zj(6Y?rDzMgqzMsCRSV;mkz?3zQXK^#3fLN{vP zKWZ<%aqH2YmGzC~yL^jYyS#YmQsdI4^28Z|++SY3x3R2&G#gjy&Bj8#xv)@QxN=UA zuint$uACX2S65feh?y z+4AP*TGw8VRkL-Co?ULVT8&2I^8D=l&cfWnrG?hK-|EiJU2e24HyVvOw4J+lb_@)? zUyjvm>)OldIbawnzZ`c}a~`O)&V!4g?#t=5m*b9VHO_&|CC$qi(B-oOSYN*X`ttop zYY(n#K+&a@-5b5;%&qw++r9a>7Lqk@ZSISAzi@xq|H8fgm%sSdYuo+L9yGSEy!D`c z<_WlQXJz^BhSS}{87els<8}O*!yxu|hhE&Jc!YBR^l-Ok#QK&R&^0Kveg9|+2MS7i z7qpi7Zdc0~1%X^ySKs`fU;Nx#I4SU}f1LHsPl(>RP^@=8iLNui{8H)SKXG&i>^-_I zJn>SmIg|DWGX~w7*YD2H)l)C7@4n5|Trk%5fuHW#K`B2xAaBRM2ko^wNt=x+}LA@Btp#rV^|$OQiJ|D6f^=Y+r?FDCGWcc`I2xBvPx zi-TdR%6dax1$}QHwK z_F_y-S#=ZKy^!u@Cs3N9$;1TX)U4}!TrhujI?EH5jrkFHf+kH*v~f(Ejrx`Pm3nKY zHK%sH)Iao&^lwewPs{YP9S7ZApHk5Q63{Z8>F2t;?HF9;q9ZLhqrKaezonrafS`^DQ{-73 z(&bV{p#hIeQLmG9WUVGRb zFh50c+C~q86L<^_(@10P8{Av?6)z-hvP@MF)+`BqBw-uYn9q;o_QuBAy1J4d%p3l; zda!aP)YFcGIsrTz?m*!f%(=cQM4h<+95Sz7ceMx}Ghb|Hkt5M-SGQ?~AIU zGZBs;JMrDMrS)}r_w6X^$%Ijyske?qS ze(VO>C;xNp2KmLmAnNm*iq+?*jGngOphtiD84dpDf^=6}yS3?YMBGV_M z)a@3&Kbuj{E?`#c8KQS+4l}@cKr?x*E90`ly$Fs>1W@C<)un?va@WceRAZ9{P6h@W zo&9JSrirx#Yr7FF)SV#nvLhhO8{IC{>6ySl!L?_+!9cno#Eii1?C3rxCMHj3%Vi8_ zj@~rtje4`zXw1%KOla_68bv3YdmiiZ!`+#nzYDq?50-THBpHEaG2oAXLC+GFi6bM5 z+=4Qhs@)_lKx5vH4p{@K&+b71TV#Z@l^@J|V?6@>JmVOk$Z19bV?|nbLZmpemvsXm zUbwfiB6fp@PJpUA<2>Ocvt7DOI)q`_T`)wKro+UKNl4(!*k#^QyKyuev=8GT^+#8x z8hA-^7{%T8z)$wQ_|he}3o!<<4M*$r(BG~N0}@OqcPl48wE>#5h1eby>yI1=7<`u- zm#-ArK-NBlk(IRp9pN&o4M709?BW`FX>j1HH-gx|1sA!N`0;@sD|U^iNhFILtY<~5 z^{TPdNo0sWZN=6YdAiW5Hy5xDvo?M9^_53xi2yteHYdW$tkY_wZ$b5_suXS9B>CLgk{6$w{juu1tjv_dS za{jKVV!{XYorCMeLALT$^9F_Ok~J^gQ)L66j4?Fgw9*xX_LO5{P_(qRP;WJAH_4Zj z$Z7fNgaLdrNpA+RDzniDvx=TF#0PP&U3|=*`eJCML=CWd5wx)M~IFM;pPuDJP+-IwZBI z4q8(alL}=iYK{5YY(uqLi;c^R&DO;GL}Fr6HBhw$7d8%JpK4kpLFy-5kCN*znakOA z!Ez@zndO4DpW$tyctE!uMqAFYPMqSUMS3F&Q!fbpSP3+ga&fMd!_7;vfl^m;yEHD9 zqq=ZD0^qQa^ilBggT&kQ7tIpo;%ww^%Jsz7j78wQJn=4uy@boR`HFXyq*3hc`i4Qh z!`+*3npy6YCkT6H&tbCtO6>cp0R(W0iH~gPpC6Kc?QDN=IG(KS+8_$Tl%0w4mfDGZ zKPSq}QD+VAnriSVXFel_^h1Lid=ijB2wN>bpmVqn)~_#8Xq~etss`4KYBuIBUs{-_ z^VVwhI$fuc4$9-I)H4}vR zL1&1~HnwzYI(Ls}ZPjcwsk90Ib@_@zQG9sDPy@kBYuy+|I!H^gw_0+Pq<+5*WL3}G z_IqtSlTJ)Y``N_#<>~VTe|Sj6oFOg7@CQD6hGmLm9=OKcv>FoYkd`eguwlU~%wCx` zIiPnVa9;tmcX`P*>&n>eQr2f8r&x`LV}-4CC0vVKB(X}OVccQP%^3kfKj#@>brm@V z#qDrU{2=xZZr)v2WqQ}ntp5FB-dsf*wrl7bTUF2{dzErp$_N;*-CutF(apQ-h}&Ug zO3r5UN`2u{z16r({-!YEX+2f_@)i5CaroeT7qL^;SIy#YUOtbzngwNJR>!imIGx#d z3(zP4;ySJF`@*=#`J9|R!OlXV?`q`lv0&QO4F96En3XN%sRDsdTIQ@Uc+@ zC#^aTp(Bot;@h#8r17wm4rAX*#o!fVY!n^55;id*A_}|mqHQ*2W*at31o2o|%~z0z zVU{sq>IhS&6<#;op6`)B=r}h;y#ObZXfcvdk&!QMR}e37jArXLNNu}TRpX#`eHh7n z?J}owkyVbXNa*HGuh%=8a;auTg(00ppm}{^+xEaqePo2S%X2qwAKl&CzL#8S&CV?WA2M3(F5F_oCgLTWB_n>&Qt`hIS4X z9A5)2=4l=wlcCl=TRI(#qGZpD{VosY{@sID7B-rl-An1wo1HIwKD>G5?xpL?gL%Kz zIC%Zl&u<(wZmqs`ba4AYqg_^h*d-rPCz!bN(`?wsv{P}ZdAZe4UauD&`d#w|0+Wq; zW2T`7ew+kJ>W67<-}eVzFF5eq&Bl1PLt0a#K07np8b=qf$6Q@m<>{t^=c21fF>LGJh|2d06);g-h%$#S7tB6%cSUW9^S@YANY7XdMBeU{wzB0z?mr%rA!f-;ibJ~62-)z!_r z>l5$jkY4N^!WVp~9Z3XH#F5;(svBt^6om=RiQ0sUXe_3Y7suX_sxTz3e<6p_xjw19 z?F1}2Y-^zE7SojkE-Obvvu!GgdKVRp9e49oY^{Slk`-vWLZEF@-MzQ5yokF3P>mi@ z(IBC_UO^G|W`{AA)F-{2_p`G{n5YSFXT!KbPJ^*2GiRNk;&tY7))MOmNs8Ol+s%St z8zLH*!1=l&n$7{W42 z*P+MbYDM1RYFfOg4*Yn_f$E1{7b?NfVBvK>G!g@bZPk+P74BR&bhj@#94>T0z`%t=bJbR5 zFYeFJWyV1*tM0xiHNnQE^nye7e5j;6#iJwF+yQwaz|(^JswzLZJbwZ>oN_q@KpI$E zl?^m5(OP~GCc^>z62F__(?vx?%8+pw_w4TTZjkN`x9gp#Ka&Ri?KrWCf6kuxOzii3 zFY%L^o`;J+X7pLs8Nx_{2H*}LNMe8y0|*iwc<1m)-`n?* zK<#(ZC_XB98PiL5M)Oq~U}R!uUK1#v{g5F!yKEG=q7E^X+&(JBM`)7Rb47?6W8oP-^M9^fQU8gKO#QaD0Lfk!2jpDdnP$rQc zj|==|)tYZL=jNOZ1+xMA#?t+}D|c@#syopkZB!}3U2lZCV6Yk5nxmc2*JL9U@gFd6 zs=#TfYF(Ot?RuT!zcl9*z*_hHMRTpg=~#C%2x-Z8kS1OOX_%zoSpqC8XvJyfV9(9K zF=m`p7d!}e7gYsIsdkNvQE3Kd9?d7&Qd4tI$~30IQ0jN=GZ)u7$V5h@AUEL>x5upk z%Inds4s5R^a-82qz>(KDeSmzA?7Fg{I3lrQRl#-vCMeVDyGYo9Tx_g0R$FSud^b=K=3B4M^ zS{(>pUiJIOtz9-VNDq=`(XYI$n)3?_3$5n7vxa1DGb@MzxT^;}X443C7C~J#=U1

eM(txK0!iKuglg3RSpk_DqZMKm1ACrQ-vYu#agP*0zv`2;b*p~d@#7m#g@!pg=< zMXmv1MQ2aUuG=Nrbu)A3L=XKC`7M&S>u?5lq0@WqbSr+LOFD`gNlFXfl%=mvyl9`V zA*mHwZc%0Jc6AVVP8^)KChPDXd@oha1|>oy05mfIjNIFLVKZ(AUayTz2FA(uE;&u= z?(&-(3YX)q>pUmh#(tw~dQ>v-JGh8M9|2V9UK|Z~_vpSdlb$OGQ%Xm^SH*cx%2P;1 z==rpQot6-Pa1e{#o6B|jzwv&}=wgSzpn;DV^p4-_O zhIH^iWW7lvF?(Lcgmja;7_bV_!sB=CW*EV+*1G<|4D*)tGKq$3}V}E>2Mbp z0r;URFV4+1=H~1OmkxI!QkgB>>OV+8mZNUviAmDZPwV(37{a-_aO8N+`o_}zje-L< z+1G##Y+pWt>5;W^b;8|crECtf!CK+vqvL=4C-J-v{P9m%BS_7Lp_T2jS{ChNjG#qH zsK7F3@O4$DlS_1t-~LYh&@@hpgAN%-^-0-;WU$H+_yf9V7UI;e-^{EKHv zVX#DmDuDcG%|RF(pK5i69EmDZ(S=^jlpoSKK<%@lpTYj>L^d8ZG0CfclAKP=B%ckp zK`ma7tga>|b8jCjJH%3u0D-m}5c{m7yfYt#RvC`w&ZKEErB4TS>_Fu8ar`KudxRi3 zup)XIS2$>;e)0&a1+R@^obz;O21jTT%?f)YN7oP2q+NcvqO<0V`9C9XS4GY>$9q@ z<}OXF&#AU*Elk`-gMzwo6Swh3L1MzhZ9phYF_^dwpoPf-6D#QFDb-k;SOIQkPkCYm z7-e>cCsu%o-RGTHxg>8~zBV!OaLxDQtqHzjm>DKILxr)4CC*Sx*L2Pj5edx0c~y+TnewVe1m3YCi|ubpEJLCG11+gc#7JA{8L35?{%Bq- zu}%#X>l)P@iWf7=HdILp!47r=(v(F&QKgMI8YkYCo$@{V{!zkm*p6;AN&JMdoeChv zW#G^W2xNZUxOexJm0PmCT0F3;eBabt$$$(*%lBgMbO|6T$?gY?AhvYPUQ3oU3WRn01jGO}jPZo~F z@R!zh2#-sSesO>vDA}xw2Bse5|EW9rI!VNwWp*`0ffCvGIX%Un*rnIA!i^ z3-Voyk;_#?u@KFUjf1BPqR5(a{mrT~Q6RaF05Do6LIA{NHpX*}TLOe_7TV;{AZsYy zXF(o2x!UF&iz}GwFzBXxi@X<J5#K@x#@TVnSCpzq zED=ct`I1ss@uu~V!93a_b*r=F%Ag3uT)!M;83W-wRi#D;b%vm!DJ&%um8&e}k{Gn5b^ZUV(o#Z~^VXJf$STF9CZBq7 zDW{Kd)ukY6vcVpb7F@X$`WgkNK9uTG4zgz}FXf6PyT65DkmQh@P_bpli&h+G`T)yI zeV^=Z-MWn}?g)3XF-qj(eDj3fR{J)+t(Nu&k7x(Z-BSC;-{UQ{zy9oP+EV*v*-{%* zE&4eF1lwsp`<$bZiYdiAkx%OkQ>!^Y*Hja-Kd$%UQKWM1{=GN9pw^c+9;_X^Auk)G zRQygwp*o6&F{&;2ap?6BP6;}`s+!`Yv$IoNO@lT)>^5rCCi&7X{&o<0@e$=t5X3>x zOHni-yIp%H2!~G;B|DxqPs(l$VgXPv3rqE3-G z`2miV@-od>?YCB4t@~;52`sLZG7O!$@t?qM0wam1+}vFe;WZg! z-g)&#d$W9H+{4usblPl;eS3B3O}yV4hthfzkHb*f4M4{K4(zWkB z#Yr_?I%flYfRs2K;H_~goPFPZ`-7b6B|2EA97%Ez=f~L**l$le!|NRV`*aEE`^fCd z4Dv(I>dN$P32VQdDWglEoh6$~K4q%)_Drc%O8mIL8$T}b=S}(F3#C%&Rr&srQmJ%b zzJIJ#Dy_J&^CuIloV!2l@TiK2j>ZSz2v9Q!4!zrP3!#@0BJ>?*Za- zrDyTaM5*-LcYIT+^xQL_#Gjukm7e{^H@@+W3#Ip-0}ju9*GKX5g;MF_GpXMT{q);P z@9D3v=HXr#3m5P%0N!^Rcpu$K2LOiuy`P74It)Joh-((&;o%`cJUl#HJv~I=_OXwY zO3(hnv!#*+mLz)wEJ^kr<$>`)KMvA-0{;||5@4SJ*oU8Vz<%QJ@UWI7J%HBVALPNG zZuFl3@b4}=z(48@0>arF1n0*2Ie`5h7wjjzL11u}?@1o#(~!jFt_gJWmo7NiKOg%z z|K+p&jB#Xtc@}J)?4eje^4+BpEtj9dnkkiNxqMx|U;SvQ^ivmBTi*_zd!|%+7Sn@i z`p9#o(sLJx6(>rii?i#ums*$R7mxPlA8fyN<<*tDU%q+ejoaRpSMD@ky|QrY&dvVL zomRT{rTpHg6Ts{G8e{ipYTx>EkFjm3-g)cd|)`CEVc=bn6D?OQsB|KlJ3(f{M$_=`XI>5pIh z+K>I|Fa2Bp?~nZIKl(2>zy9jyfAibF`oi)*Nf&hF3uJJVl$;b%6k{^B3| ziJfOI{9pg=Kl|iAn)!jB{P72O{>-CaeD(0}51POB?0@u6|Ce9;&))iX|H5zn^5q}< z+i(8mXW#rwKlz{k=wJEE{oprWTKJED_jBrxPW>mh|Hl9N6F>Z^|KW!Zr~mE$=a;|s z?nf{Go!|YT@0czB-CvttedawCzV?gpKl%B&@BaLsZ_QW#{7-hL=I1{9Up;K>1^@lu z`;ou)>v!({gYW#oouBgVeB>+t>}Rh(_b0wqdf^AZ_~-t`pWXkR$A97H-u?Vf{L=jX zum6i5_|@TqpZ%MaU-_qt%if>3`|bbyyME-~{O|tIkN@L8^R?!i@BZA^izepdW@0|# zPRx97sWboovG*q6kzCcGaA}#*GOPF9zB6N6V_U6mts|8^#x1F(X^%E{w`M$c?54Ww zs=H>ot9q)crIB$kB!uN956luEge?JsA&`WGu-Fg-W;Y~p2+JQ#UVxCWg)MRu?pF2sh>ej7yp?XeVy*M8^IE>`s^WX8j#{?TfzlwdF5;@UH82?mBsO zY5yDdef9ah7vKHEKhyJMEtk*pE&j$iXNrUU&?zG_?fxB7nnhYwX> zGtu_=KmXDFE1&tnm(A{XKa_Z(vh5v5Kl!1zZ>fFvJ?X*E-TmU<|4i&FpKsgwfch8Bhe)EymH-9ky^;`bwSwEP2rSq{HnIq4}8qNeDwcb(v{r3Z-@Ty%NM@#nQI4QKl<(+4}2y4+4o(Z$n<@Yo|`ug zzWDR^{AB58xBd77^`UQ_8165&e&IJyeC5_y%Rm3e+dg&v#qWxb{88JDFPmFD@(FtE zvNv?UHT{D_&uRPk!ry&j^hIw!`jWO^oO*cdyMOWc_dorY&+Xn5e`)%Sm;B?mI-hvq z%Pu>ef5Vpf!oy$roxi#IIg5R-e%w0n>GyxJc)>TSx0PP`rgy!zZ|lGG-*>ulB?8k4|f9&#qPnZ8~>B95g`-`2$U;OFBd*`-XoIiZoH(T5H=^6LB zmP5b!*B1|b@FjnG&3BF-zo7M#Z_xUl`|^wbN_p(Ej%U9weg9(zfuw0~_~5;7o_Ux0 zrr~$J=`a83@`){{pKzYs(e~;Oe&&XMd(HcP`j^W|(__JMY^8;^w;O*yB-?Z@0w`8yE|FdT=9s1rU>x(-+@dppQ{Y?j6 z^Slqd_4~i}h4+npYvs@Hz3Uy>w6&l9`7>Yh^P7wh{(1N6W&eI?=NJE<&wlG)Key|f zKI@_HKk@NBnX#|@;Mx0s^5eg# zz5J)oe(AG*n0)p5g$Ewf#{XdZk5jjt{^7}iu@`=N?r8ql33v3O=kNae_!qyUKmY6B zzU0*FE_unHe(H&-151OixZn#fzW=%Z=N}&V;%!~othVs(=ifKc{*JeQ`zMqtit?Nb z2L5F1k&oVdRkpwFhCN5VUj5JC{_I;HdgI)`|MvcuFQ0nryD$0i-+oqq3 z^w_JrAB}(K(MP}WFMoXFA3X8SKl{L)yFY!yW1pV6q2)!N_@4Q}>Hf@<_m%b>d;HtK z`Ljgw+0I8^@a>7N-?;zAhu?DF!*4q9<>3RfSKj~CJ6>`3r+Oq4t(JkQ ze9r189((S`U;LG0r%(RpWtrdkQ2F8ic*X-;ae(o&`$3OaO*S0(y?|;Rso_O@7v-M~F`s>rrdvo#P%f5BZci#V5<*oyF zy!Vf8>`=bB^}U}b>a$<)x8(KvckFxrqmLhY{v}6?_kQKl-gAHSp*IxY{k8O4meU`3 z?gKCe{V%>$O5T%jU;Dp5{KxIT_F3}&gPm7fkNw@3I^X>GT`P~h|K7j(?q9TDzy01% zrV7u#>}8#=`p)$$_iy{*oA2KByg&QI`?j2z82aJS$-#Z^>^^eQPlt?8X6AqQ!(S^O z*!8c^d;C*h9I8L`jz^wpUZ@}b#FaM~UmP8L)!l77@BQd|ZoBpFXMFF95AVHo=*tHl zc?dY_l}fR=R05mNn>h0!_;;Xw;&+>(D6n<#59pkD{^aS?r_bTfU)ciBX9vz*P+q7g zI~SA}wkhW-igLc9C{SiQJ_kO%dqL@H+Xf%Vwd{glTa+ieTF+Tf_9(mIW5#ZRi8e1F!v-;P~6T_S=K) zcMO-x_r$c~+LLI(4k8-I!MBUXQGSVR-wd~Zjxsv{$$(*VU|Cy$#avlgL5l%#>b-~W z8hpP8E1Z5IFr24f*p55D^$06)uc9cIE2rPsqVy8{qT%IVGr{-s5^NIBiV^^O!<>xLm)Qfm!P? zpV+yI(%R2|pQk9TD*ydPMNx*8*@0FCz_dkCUf2qwZEaJO)*Z@|C``iYoueqND0R#v z=MeV#d8HPB=2obvC~^hp5Gx$z71V|bEjTK<5{wKgb)sdcNnPv;&_I*1crtUUmGfNphZzSuWP~m!Wm;JfD!1v z=vFPgUZICL28fPfb78sRA7F=g4jVnlpTmY<%724IFUo(J4-}TaMY%u$)(WL}Cc%J6 z4x;nb-rA)?MPTLkw7W}gZJ$?W+oi!~+OQeJE)Mb{t;$EwQtteev&IJm1K73pNAF#Es z4_&zE^_p3$iavMqKH+;eVzvT03fL(`zms*Nc*3DBl!qPDd3pHOmDvG9Q66knx>?Q6 z?klg{BYsy;ylZ|xBJYz>8s2qNrdm;!*x$F6#pqh^Z&CJiV#va|#fkG3rGM)W>UUk4 z|1Cg&+p1b7T!+9QfL;hpg>OK#c3h|(%9A*B8L9z9kQjnaLq~XpMb~PzAHWP@GCSCe zVA9(;a}Pz%huQK2?49s{FTj3&!ob%Ue-4}SUTA=AjQjXKSL!$Ilrc7O_u^YZ5@itJ57wEAMsilV#-sH>tVS15{dfS12g zQIz}m@2eC=`78dLD2nnBpW_}yQQiqJIjy>ymjM#7kN*Zz@CrDS6h*m4Y9DAB;3WL( zQ55CpygY#1H~8=C6h(OqCZQ z-vDzz;O>dRz=y9gPg`{JbtHEEK~xzuESK9inK z&t>6M@8FfMkw(#;v+ERUZJA7sFHXzFo*@-GN7Ji@c?&(IRcjRr!Fiz0xs$gh=cecL z$;sLDTs}3MOwY&-j7SY^!3Lnx1%XPC!1d^SX7WtyLDJZ{YA$+GzV94+roS{H=Rjk z^ONIHVK-m$UeRDus=2LLh8WFN+CMM|9i8JB>trBvt85n@fgixU0~`uJQTFWBF|Q zj#PdoJ)6e$?G)QJCe?}_<}kFel|eW3=T!}WEuW!}HBjpuJ~@7a&f&mo;9Nx5bCB=o zQ)UMqQpkIV1W9a_h*djTiS>`LH8h;qAe3g_>@jM( z_9})@?sLjsd9t@#tO-!!H zY{n`<<|Pe6wk*>MDS+1i_%77SmTQsYRvqodR%n4}wOU0)%cx zzX{7irt%F2NEVBx_K#ozxb)XdT_rd3fLh-6^1mBkEA)Ir5XS4Q31_?v>sJbm%_c&K zN3JKwRU(cNUdek0q+Hs%@N02YppUdTO|a0iRjF6m3c|lwVEg@5YeuQC4X0eqJH|a! zC3^>kN2&!j6$q`U*{(|JW`#OV4APj?sNPM8pdDBl^TnxTeexh`F^YqAK^o&54nqgd zNF7b6TFt=MQHzPEwCX_%mV3I_m=OQeYuo`s0=$mkSztG-hRFvQDB|yC(;~=b@g`)3 zOw89ixS0)NBZtWgMsbPFst8^)$g6IYDHRh122&+_f#VdYC^KVT=iX@n94%H}8of;auYD}HVJP*gtqG>XIBIo;7O?dwKxI4Rb06Ns1s;rwC1dQ3_dc}z*a0CS zK1wBm%UWw0KvVIIr%3zZ$l5NSDc1sLw7tEV{L_jGKfyn?_j7rrePKF{{C`(LE36jk zy1ojE!H9B;;c`B!)}ma=S+5T6iso@zTbXYRuvRUKV4hN(dAjAQ2zz&S<=NC z#D*-oIE)^Ln3U=cSuxx)6xgphq*^bQuOp>88=|KY(V}J>i%Um)_>!Ir#{+sVHkOLp^krtf4 zr5P<~SK<+#@N46-3B1z%3z7SK=Z0eRv)Urzyk1*IQi5Pl|xp`XH7DWrQ zt%4RZ_zY87UOuVX2W)vgqa@H<4}shu^I*JIDioO9vdAS zRq;dcWzD!l;EN8QMFgn6}V%05X}=FY*#=_3zVQ6!wMEPU0?Muz8n9H z!4d*P1I60oj=dZ%0GXQ!FA$wyS1F&pcSnr!wg|q|F_<2Yb@*d7WVcUXYOu*uj z0jB<_Su50Ds#kgmh44r<+i++MgIo6!t42+pVU{DY4cQQY^YPQ2kwdxMLYA!9h6^zV z4Uwy!z=}e16vn_Z7#4htXVYXVMWAj)dwUj%CJq>SK|OC zD!@G9?a#S|; zKooj7p&-Q7>=JcV(i1P%9oMSDndHWxaGxHBub8OQ=al_w5RytIi37t-iP1nj#zxiA z#ONRr5H=4SQ)m=yZJ|eMx+=Msk80nZc)>8^p!VfYj3sg>*+XJWBs}Z5H$1&S?z#~? zn+4ND2rZT^viHuwH16_J9RWm2wRyOB_OFO}7@QeTF>Y%seGCjCQUM<_COJ8-nY4J% ziMouT@v7#y6fcl~CIki4Ib<_=ue{f@6FBr49Ftp7;kgYmL{47y8@>dVRRYiFmPWivex^DA^jt zwEdo7+RC;#LMBjNJ7hVKUkE)>Z4%=@=CkC8VY_v$LT0sM*)VD7JP<=h{Bx`&cSWkVmn`pJ>u9BMOI4hQ|-yA#v%65SAN3Rz`eTew=j2svf%o8J+4V2y6M%CYB zY^vc`RlRRSQy{{}Eq2|(Rb;LG~XY%>IqAmY5Ybt4Q`i!#a?s6Fwz zW5+S_W85qm=BaqutyW|;kO%Dny{`cE*Ee3Nd!P=s5sjdJg}A>e8m765>>K=$n5ZrI zVDm8F5yd{;B48dm6Hq^^xwdgi1U*@@igjR^Ak;`zvyBRd_izj_(di|$LQ9&-^tBEx z)@|zZTOoYFKKcwZF5v*&qSj4u%PU{UvgsoLh3-!9O?ZW{Ulf_GVO zv$63evOI|LhtAfD0noC2MzG!4l-{=}vhB)_WAlrd{KQl~H-9)a2b6t#ZgFldHNzf2 ztJ_fZv{Zo{(LNzZTgL~{+V;T~ zgM>-~Aj6yF77fiewVQE2Py6D9;R3PYb4{=O+EL>pn3qm*Rste)io0&sq@~jsQ;5js zi7jZb<=qf&Tc;SmAe4*AMu_rr7{a!Nqse@7VL=!Y%I|$tTwl81!w;uzs4)pyiEY8_ z>7ZEubHY?)@ExIYKNGRuUpMJQk|(lx%|tCnP5g0VaarpY2`uA1JV6vRX}}^#`ui| zXiTJvKq@O4A2g^4{9;HpFeV<^n@|%>NQ$65fH5l16)Em3h4F#FPt{{_u~kAOtWg7S z0OYUfQO=HZ-b9RWqYcm|FoeN3VLkzrhWG)RL^#khXCKJI^an}WwvJ|e>2_s6lE*rD z0CONGyC&x6CKuDWd~$L!lgcui>!M}qbt7HVR3@2A&m&_Yx(3IuhMJcKYi3f@>1?jCu51(y-Yk1| zihBP2s^~|yOYX3(;t5ADKoxJ0a0NA<%%<{i@syflHs5@G($XM(%&c*|cI{I>#dLmuxfG zl@Qz~uaZ02EbaFTg+#uyXqn5@c27Z&EJ2$4wHeDSB~3j`i#Bz$u5Fm5 zMThD+D{GX@T$$dQou4~O3pwiqHHQWUhk&4U-+DBcXEwJmP_Jd5h=FT3yU*@IWj}Bj zo=#|o7zti{2buB@ZDZ6f(x0LQ{ihqXLl=A6p&_GEF-%}{aH@gPZJx4ii=u4r71A^B zOCoL1_wAgv(aKT`g1=LpSZ2jADNA9*Yf(Ey!=ziX@MI*Sw!RsEv~`OZYk=l8TRa5x z5HC2GNQ|y)TkAuIO3oO*IC{y@%Wt2XF}AqV{F)r}UI1%Ycny_Qe1h%TMt3OyNQjUh zX=+v1ilU>yFbIatoRBI;p=wmMO2sP1m@cr-vHIrb7gC5*Gn4s+OloF6$;@zzR&BMW z+3u=rqQ`D7b}t;u9h#q8oEu-9no4CDdixb*Ec7kekk$84FiIZI?qaA1-x2cgEs>1I z75<6ok60^8jDVX!jiDdsDbQxb zrcS+z>_)v-u{7QBvS9kR+^dLCTq16cvSW!vzrPL=!a`K}SXDDM@H8}m4T=z0(c3^} zpwUEJ2F6!^WYkBV-`0nIOwpOJ18nq2eS4sb{1B>OB>(zp(85N4^ z9H1U6R0nf#P&^oB9nKTeaLTZF^%|~Mf5IW!l1pt25$=@hF4%7n$0(UvrQs$Y2EpK| z;ST>!1^|%ro&A#l0{&^mqGzQ5|Lm2ju9E9{ad4EtT)KY!NC*dw!ZV+4oCN~zQzE3` zuWzbd=uobcc%%;9DgrG5Djjw$Zq*C2WPffpmzkfN&QFeePDD^E+NZcxFMz?YI4I<9 z8hwac^#Zst7lIoEs2crNM+Og!LH({wYBHS-SN6}xHdKs* z)upfP@aGU@T08VY9ykkt45)FA$7{s7nXz}cinVEG^oaw;#)7=>$JXL~+wk_ak@vma zC;wvTYX3+~tJDk=FU(r?0_Z0iYf1+P-z)Jgo!(+DaG%!L#HD`cY!?pn4M<&Y!H1ha z_IE@b`@hGJeLiM!=+A;$8m!At7~Ev7ScjulL!)z%7l9P&MupvLxm2r$ZOeI^A#2dh za@%^)?#y4S#*IRf8F9vX4yfpy$}mbCZz9M6^G$8?($^n1;vqKFaP)IHKXaE<1_9V; zgLP~eI-Slx-cNC(N3BGOCij>r!4(OD0|_ z*()~vY!FA$g-731vX?D!m<+O#4N_eHU{H!{gaS^z8>k%a+!~VA$mS3c&Sybu@N|B2 z)9cJu1%hac1B{%U?k_Hkm8;H)q!21`^r2T-i&B~DQTgB?&mC)09ph42}{$Iw@_B>9eY6)o09 zt6~CEX+qwDWpIlS{X*#6Gdz;$SMg(oa&tA1Lwd#r5(yPQ1Z*_3Wkb&(-_9q{v9C~x zps8WRQrE>toB@H2l2A$|63TTG!odp5HXJ50%rWWV=>~yD#6TML;ih(T%*jU3sP@ss z7&4^0Q!}Yqxbixh8uzcEXa$u5J`o9D0lkSkAi%eW@4m_0R3wsKCAa9j#zg40qMHNDzOTI_O?B$go(gX|BOu zg!C}HpFTrI%;wiWym%8BTVu%(C?ioJxVI{SZI41&c&_4yP{6Elpx%1+77PzrK5qoz z(`x{*?5NuiR~HD%bH%xks@I(hH?Uk$4r z1aGafqOGzJNg-6*JDL~;+iZqyOonT~Ag-fd3nZ~WU#cQkRIpXe%o#eF3){_9P7><-3cN3Av-QFnE zM7}c8Q70y`d4xVU3ZeINIgEEGqcciQz=v~;mM_eNeJHcuam$p0ibkfax~Zdz zF2v079>9o760;;z@u(ZL!1*T@1#y7O5bG}T|Eqo znsC6;zJk(?n5&s3YPtZ3@g>V~49rHjmHpg2rko#zDW-=h(2qbAVcS|ZO63@{YvoD} zSyP#vm?itO+y|CSU?j4-&91IyJ*$!H2ul##fDF)K%qdnw_#i~E^@6?LR4mit39yB5 zkk#h6<9Qt1++DXTv6|+VRT4K$ot_FFwAg~Ty`OF?a;Ag8zs%9{<*TgZxe)K z1X*$?Gr)-RCOqWn;8)OqJzKncgcm|48AZWw@1TJ*NbsTC_&oxAdj)(x6z;EqT|Le% z(Ba!F)(#Wf%S)W#CE(jDvGph|WO5VD%A5nCw0RlE@kYmcyjIvJ7Ao2aTBvBn6Hb|G zwpaw!alv?tQ6#pso5$=6qA>d(1lP-27pSe7^3?;GJCfnI3YraEEd)@h#9X6F;X=VG z9H&JvEpllQZlwE2vQhyIg|q`8)*22(W>~W9Duq+As8yIJG58}8FyAR_whk`x?2ZB- z7qu$2H4GvN@gE@yQiW>El)WumRoWmMvnli~8#JV#!>8233Lq5xEZ!Ol4m``w>FYG1zL|k%6lP#@> z1F@!=O1Y?2iuDSkqgugQZgTG&!6+kB&jQh@L8ObMO~b%LX!^0Le2-S>J4?vNJn1YT_x5!3tbwg%x z{?N)vVROBJmUx&T@inSfxZX8;8OHh>K`3h4~1*&-s;hjnOt-e@K)G8ae+@Q8ye z3J_ItCKK6*R>`8F`PsSj_+r-c*t%D|2RrMe4$-kziRG55%?I0O7dT1_S*%Qf|Dsy4 z436}M>mX+aUOj$WB4%P9qL1|ml^vUYpOm|anPP+_{hrZ8Vt`+=^@uiOq=(0Clpmq= z-^8AyCq#)Vnrs#V2*=I)JaiN`>M_#eQ#cw!cR%;W84@m8{wsFu>!u_40v-Sfzdd=$H|PN8 z>BgJxD}Cx!v#M1}<7_noqzl()^Q7zIDAM(yAYItFAYC((rf+gC8*r%!Fa*e-YdYkz zDMCn9)cZk=C8Od}a5!uvbLBdcx!^=44q}~)0PbkO6&oHY@>Lvy`3=SkSJ530k1$ffJ1%=xqDz}!pE_d(Qbf>~c79;e?5fH>HT49U_3 z_C&xck>qBwWItRzRKemI0xd!^0IFZdo7ji4#-KVnJP3UKL>|d`Wl#o zj8_L?6n?9dz$46OatB9wc^Cqw{kd~*ET(Ht8BHGc_L9Bem%5jEf;8|{9=Y_$&e@qg@F0NW1P`i3xK07h$u}QZlgt%t9??$ zyAa=y?2E^1mgl#5igZa7MG~uV0NR%aw4CV$bb}} zVKLH!cY@+#kfB@y*7|$`q}UT%0Vp_e7B)hL9>l%Xrct0f6gj`4=K+85#Ox%GHh}4x zcyI!ild(;!)s9F=HzdsS)p)!N5z2I{=*0{QJ1mI;ATM=8FO%cK$q3q&W6xd0T@4_! zsPH-v{#2~${A@Cfp<??7wl4}JgBgnnwK6^ z4#XAES4X?3dG+LIJAs}WJ=MHAK51%|{H(+<*1=ipJ)y+daAh<{2@Zjlcdhj&6+Kv`1gXHO9Zrlmq z5h5Uj;%XED_e2>m!99=WIELeDCQ92o;YrMUw0S~v84#Lq@{UJ&N`YV}g4`Uks?^KE zVL_e_9@sgU3?NuJXsF5F)m^K~48xx0fP&DSzgBC96pSWi!N~-$+~<=6-Gt^J1@Aqh z{R4w4et1qj4dh6udDu5L!+v^h`BF3j_J*sngnT8%B;c*^FJ3Nh(v`kdty*CfJo!$f zb>*pov1|BOtdW>W)@~~LHTFWT6**mroG*Y4J?<2#NgY-&oF;%L3b^wwa5mSmWWs&-(R1qqb3VLj{)%dF1pIEt1-*TeeIRt0H`O5JqB{F~}&1QS#3Ab_XIe z1UHMpR6~3QE_~!!VOEHQGHa4x_o5K!CB<(7fi&``@=KPzqS-pt;g>|e;h$^QA%;=D zW?QEWKc6l9i;2isaS0tNdxF5Mqgbn2H<-k5&Uho2_wQX`d583WR z6(A3~$LWa;0`MvKVn9qAOe9dj+gK|!Jh>JNfOK&~M@Q!~hf^$~BA*oS_hPZy`Ufy} zhZVyETsBP`-4D;lxM za?y4X_@bK^5AL%ZCr;kCZ9EPk3`E*3IqYaV_#z;v@v@<&WoNOrY!;)Q?3x_UXLIwJ zZJGOuj)Gffae@GTy`BGsA9=|?04ug?u$kA5=@EAU!_{U0P81$ zYe>(wgCRR7>R?#~Qfo&X6Sn(ettiGGi$sy#pgOTN+n|2Q-Mm5Xjc_DdUlQ)(RrNxU z*97xP(D6l@QMNU^EERTFs0lAo)2KUf)`5KEz@8K$+0~o`Q@yI^*`YhJ6Ryjde`IkBhp`uQ#ST-~0V=p()3tt{3 zbYHxMg&<>#Ab8+3&X(CmgWabv>;ePlfS(fr1L`Ny{wka*GsH8qPWrT3O}YqS5xOF^ zkkQO4-$CR$LRMH!HyR6jwK57SmetZ3v~|B}6*oAo&T82*kM|P^e{7 z88`raG1q@5=wQ@4FYE@ZEDe+Jco~A=Ms^E?O(k$z^6q?6suG~D!Na z1DTS6`{QpJWmEY#AC>pkqh_lA6U&6eeDrw}j&E3?iJ0F_2t(-rD6dZpu+1`aR+6C=?0?_z@MbIEhqiag}4Z1gNzFXb?J>Rnn8qPBzi<^WD`8 z8&-LtZxCDq96DQsP-04u5kJuM8cx>8v?`!Yhtv3?xUknU%%w{GlwKH&2*M)HS>~_{ zcN%`_TBTkxO#hJX;17c5>?`>>3*QksooIIjDTWr$3h4C<^X?Rb*!P}g0@1$XUI!kw3w z@|o=Q-5`V&Z?_+z)w?(96gf(RDET_>;sDwtT!2?<=OTdCa^r3Nv5EF_U*F z5Hq=uCfRxoK-RZ-U(%K>L^s#6ZLs}tZP+3^jB8R@>08+zitjKlDZ9uElYKxbF?|Ga z&NxPCqeVF>MM?{4-0+!&n>1mw$ZP0h?4n@Z2+7a&lkQ>J; z=-t+NoK`BUONJ?9mN0E!BRP_=duxzzCDV7`Y~+pnsDtkayo$D9yF3zL_;8V4i9a@v zQddRYS%~;yqIrQ+Q&A4eC{l5Aw$PC!>WA(?nGp6g-&2UbH+4lJDzA^ed^Zpo8jy*H zoPZ-R5DGXJg=QhN?-@;u!Qnb49j+0GzXo*sHTo2La$jY<_5s=)tnO z=^Qizx&<=68hz;31xVbLoSaS1%_h?`(DD}cR#G``E0)1^wMzR3P)W+lgS6?FUzN&d ztE()qB({V(r|_4!>GmyHSczv8%bM*__h8*!8m$(Ft_4z0?IYBN#J~qfK^p_(Y>2?i zhAL|k*%K(dbM{#Fwi!W zp*-2LM^Re#DoV@MilSVjD9TPnY1yJE*kh-nbSe83rK_byd9sT{@lfyJ)-X6JLG2F% z4l=bIMy9wnU@!=R4(FbH(FR-#p={F)*-A2ETsx*uLSYuFFmE^VrE9=dmU$EJ3GW4`)RTXOyUJ+ z5VjMU*u}tk=#uD^8X0_(pT21eDR-KAfGD~urz~GH0TrP`S#0@odNLq-% z44@@({k@@zJUgV8y9YGeUdvaW;&|zCP)XbXG7OcsJT9Wf5Zu2(} z%?Qq&OlKF8xrsxmOdjJhrV((u{bF+BLjRU~nyY9wG=RIMb>ArvAxj2Iy?S>Wwk}`@xZ)4eZ^O~+R26SeAI-g$1A4z65JYvX2EZXz- zX(uGHOV2GV=AbPU3^p`48GYLahDTVIl>; zV75C&tA|p_$upp#^2!BiD7W1>BQjc&rcLH1vUFy6${4qj1GU=^=lWNR)3+WerpAvX zj-*a5%<*AEW|T9ge{v3*X4WPf+9-Mc{&}=Bo62U>^K)l{?ua1Zztt{Sh zS9TV1IWDpkyIY*9ThnFpnH@`(bxWzL85M9;g8gMR1f;VXvW?D8XrnKpiU2!SMK%Fy zD`*JuJ8&>EpmyOssng|`u zT4KHmsK@mkVP%FN=I7j!t!5F|`{sCXn0?o936UO_2}_d8>T(P#@ckSg#P} zQP<^rx*>Wpo@&wa5v%3>z+#Q+Hn>HSLKa61O%`TU0x}LZMMzL&!gSvZItdA}ek$qr zYK0{lFqLD=4JL)YRN-0e#U<-O_L_+YDhY`Yd|19ns1iwBK zWP^gY>H#GKBryUZru*`A(9bWTfF~ELWUnMf3umB)D}2x^1eTm@iz4kXnf0as2|h}0 z7V6Kze||<-1^;}tjY>uY5cn4Pjf2{lA?QZ1fHZ1anU0lfRq;q`f+V3M5Emc<1CRk` zmZZ>{&+79PV@y1=bsaq*Kg`W!RbsIVV8Y4?&OH1)HzP6F;g=w;gr700xMW#!hyKnL zGy#q{JP==0DDBHO-IzFvYbcwnkboKQN3%8h6_p@9TK|el1hwuQLVu}Lf)HPOAvCxu z1diqiAgtwukm;8eR^JUbIzc)kgh-rh1Ap-=L<$|LzdCN&m9TVkvLPn+mwwz54@HC? zW`hVK?!JD7A$Whm_y1Q6sl<3jN_zj3F+}J#H-aM4`GO}4TD6aDT2F!6QE}|xW&PD_ z7|qIl$h%jK$<&FdI&DDpMa^Xd;pGAEY?xOsij-Y9+2GPfxAyA>KG&+u`+Mop4sk!Z6uN_CQ>j@w7(EHYKm zoN_Pxx>Z}&@W)YFa4c{Iz`w@pm5Ng~+;FgYzq{s&CQt~7jD>#r0J+`J0wQG!yLI^u z;_C=8NdSmS!tjGNB=ClR8!>YoWadC<+YWXub7yynLy(L(vaczQ1l^$kh~bK1E3@78 zE)7_|!i^zDki1OL7#;D4J3{Lqg8{2Ba< z83R`9j#0$eR}^zIuv~-GM(e*thnmzybH8!J&2cviFuH0;JjjOMr`7d93flh?>u|nw zn+adTs%`+~aQy%eLMpkQ(GhT)f{*5*YPjh*TMWdeMsxyvNu8CQ0W{&@gedZg&So}W zThU@xT)1B4nHmabN*>oMUMs-?2dB!`g=sLygDzV2f_&$O&L91T) zHR*b{KNh2A(b5gGbg*YJH#OP=H*CcihGBE*!JY~60MgFGpV0sLo?~cwE}fek&nGj} zcxl?I7i7!xhS5ZaNodsz@=a$$t;P@up&Hwyu&pq@?uq%isq}PyGL2X6{BFlTbKB9% z4hYfu5e;^TZ9r4&wbHNovFQCEvL1!wE-b=-Y&$C2n7_O4LADhI;E+q_#9Ftftr+&D z@y6-`Uq>&-ul66{0J9iL8i$38aaB8|TefMKC2BKl!OW+jKP0w+ukYrm=G9SDGsdHQ zA-?hv2-+z_IZ)85rBmAv^+jBZQ&5(bC3gg=XVqFZC?3h0z1m08E>x9$NDGu`5CFfT z6)_(=lHaUlYPQ`=G8#~yUNXN-ZHH33mn@n!bak__^;^Mj1zupw4)c?9NbbnwIKI!# zPL5-PRqASh$-RD|`Sj!j7Mf4i-7*>IOJGT@?v|kx6)%2cD0@0>yl5j=$ z`K7=t7(Mq&fy4P)@0rLHRRSriO4gym;r=8#sFE|Lsn}Wrrzchg36F1qE*`HJ?lIz` zYf~7GgA1Lvqlv`ex>sO65mt#r5~C*@&7bRU!z@oY5$#f*Bp0{H zJNhfapc6qDfbwsbDJk+K8;fGlf@zU`S0OO2uhOa%T4)RY8FUgd&u0;T;5&jnk2aUM z%0ISDYB|s>>q<(o#yZ>lVRKE?Ve=BsqT@uwDU;;q${KmXPngz91%fs6^9G~e1D!T4 z7wnTT+d!?NxsX=PKWo6L2eV!mS0QYZQ^fpa$kJnN%Pwgqj}P9!yX#uw;m+3=a$@RQy<>1z^Nq_}^s% z0DBnNA=|={^t-=l&g4`^N zE9qDj8Ussn>NsStI+jTE@0BgWxS!|xRg^vFi3r6wS@!8qe)AOI+9(R}1wjE|VFd*^ z1UXZAQbdfM#giylHOye3S>8@Gqa|QKmB1*7 zxiHiK=0+?S$5x&cV`KXjg`Hzy@PZ#&jTtb(89fHcf?$tP+Z2iZp_4sA1r~yD)tfms zNaXiE_a`q3^xMR-3nltnp6WjOP=^HI=NnXa`8ma^mUFUhxUPkm;z@;QEGy*3ol>ca z<%^DO6$>Lbw<;nX>YW|zY=v(RgWIboT^CHCAz><@F2vglpm6t!P?|anlcQ5>Nb&4w zv0~I58uNxPNqt@3!_8x2PZTEJ&6E9j?F(#7vC)uOv6y7`wp@->spDuRN(#1hf`;QI zc#VV=z*q_LXUO_ruXF&b{PVEcdPE^i|LEwTiXX5s9F!4b`aO(cDr|NdHk_Lbal9c3 z(;WC0gFHg2^sZtt=9tAAiHg1KwS%#GnaBbET+J>~S0z1CYpfOjK_5I|Rhprh)N!~g zwwAy!P}5b(y?iMuhT~F`+PF~snO3P-D|yYd%+)GnY=tmD{8hLX5FP%k24PByRt3yM z1>V$+-$!WR1Qw$3|VgSK};t zumvV_eDLV7<2bby-JM&U8eBE*$sRdwWC{zVle1G}w=uF8G9?Fa=teu|B7`TAFE!e8 zcAdg@T`)19$>!%X>FM+wPe78K!Du>MAudO>3wl_}Uh2H?erb=T^^(2NdC4iM}S4yk3!7kC1r;>=2f<1ay)-Dna<@WQ{#*1QpStQfp&H?(7pv@4nZ%g$orttFP1!V~A3XEYpYn;Wym711gDBvj0?O=lI1Br;de62Nn^By@M5(L%%cmOy&Y4Sm0{{nBjUDKK5!lBz{WQK&7mtkPb=*Un4qZC|lXnrx9I-E)^KwSRx zTrQP4l9Wd!$IHJMRYeSb#22bBal2ETV=#<=8+yz)E{*h8+CB;3~7P~MGj}JWgtwUb;>=mFgcLA z$2Df>txQ218abJqEg!vOaD04VdP$o!XD8+>Be$QTZh0s|aWRwLW%&myN{;E56#aXjv`>bOxCe!g9cD3!PU-|pkj*gK6vve z5=w+h?DDxIECyHr4V@dOZc%_B(+YTUAvb~mKw!ofa32ssa(#M<2M!eev4<*Cn)tm$+O^TKfdPssuM z$XZ^QPo)dRlgR6S!3#swo8WK!rDk3MkZWZfrg$aLin;P!X-JsCG znN+kw_!@FO7j7h;5t)gFSwj=etM|J9OiV=9lViE|Az(Jb*9w)R{u?-()X=;C&zOpA z*u@)HWkU|$n{HEiE9 zP=o#~baXR2n(p}RC*L?xhI!8X18JdJ+PJThMh z9|ImQ8^nCiojZW_OfF~6zwCvt!{B3MMFbb8it7pf7`>VYh681pwm~JHCL;J&QZa;D zgI8Rg5PHKk2Pz5nBoqXp^y%51!gnDCltl)Plrje*rP$YE+kLH^2XkxN@qMfoed%NgDjn~JNZ#zCTfWdd8uWK1O6_aek z7t~_<3l`E2%UZEum1xChKr6N$l}4=?J5iw9sD+aI_q3N>smtn!6s}C$=_{Suo<^mU zu!-7%W}_=BEAg^h^>Y(QK?a3i?5ml&Cc-baZ8JVH|3A{wH1U-5t)4v0my$JbXxO~I z;`%6k#Y=cLQ?Ey%vdGfPQVgyTsU9$N_HC!>p@$5;%tz>oz4zbrYQ{ z9n^b3WJ%(bH3(zZi>{Yi!Ll{iSf-dSt``lltCmf}rW}IQhwQI0R3-CM0u@TMS%<9s zkQ`jdKqv|O0LkDeIgbv^-!CRw8*qK84TGG^d@0y8Qfpd0)N-9Ep=7MoF48>%DB3!~3 z)uKy&mC4iOK=N(|Grh!%13IW?`=aOhzlp%V|56PgN`Q1i(n z#y7 zj9io`IP4!CO@Ix*e~2}}VPN;TCLK<@H2`to%vS?oPV5*0ozv6~T_%F9UM{&^NZ0X_ zBW}7&s~#ELxvW7n^|ZbU0~I!+oV>uOiC4r4`^zKr#O!SS5iXa;H;lz~y z*!6DsaEGE0V=$2zmU+7dv=A5{E5!a4-#0se{EfwxDM-GgR1rZkqA2_U%WPFtAjb&70`a8g`6zmS?cni|jC9-;c}vTD>^p#}St z9G6eh{)Q_H?XO=kV6uuS%(i7m@?f-_Pt6^HDfnf5O=yb(M(ND@4aBF4QHXnE@lM(Z zf#XG7;DGN4ycWl&qKI=7)?mMXS{^?^U6zX*>R%n4|g>bATcSW-)(dm+5Qk~eEZdk;oMQSWJxNJ%Wu8s4P&OvNsEj60}oB+0Y z;|(C(Mwc`S{YDc9AQ;Ml!L>ZAqCk&d3i7isT*4Rdy?HR3Bncp!-s}0Id;k^^wFl08 zhk}5Q==;O1&7|55&S)HK`G3jrS( zwj}`Y9mxd`{dh^)wWck#n1NzDz*;{)v6#uE<|dfoF>5v}8UFSd)l=5@oq2GLh9fVQ9y5)4P=pXQCqJ`|p{?oNn>wwRlrO;2Z%Ip#XR#vmJs zw^Fno-aeU{N-oai@-s=6m5CRXFTHl8>b6y*@o{Qb46LT&E;%=m^39YR7o2U>cCZhb&Loc{b1XX`FX6_GsjG_B4-Yw;-zL2PqdiwA<~Lm?FJ~EN>Ym%{vv?jssJ7_#-_Aa^~{T8v=>hsggTDU zOqdJfJ?|_=WE2h+m2uuHuNOk47=q*bhAV|J&1B~vKqBg`dz?4OKt!Cr} z_OQWW6Fz13Ro>fBtY+^$Ldm@^fLOLEm#{z~UBj)4(lzY!p1SEYzB;E}QTD(qq4W9O zHArl9WG_ie&W6Rm0@M}fvw7+|5Jg=-!ox_i#szhqqwb1jpNOp(IweV+j9088#Oey& z_126S>{6deU5N;ClXxf|86oi|)52I@V0(YF&xK0&z3j?H*50t;HKBM>E7ph}`^e;6 zmMnl7mWNw=hX>W+!MIzjsk-Tiyht(eysihH?<13RNvl^}uAQ=M)(yyrdq)$aLggdc z36^)T?>;h>n;|Pkr9w&&-UBb;i39idj!^>UzesJaO{3lW7)u)?dxwSw)uACAs^9#g z392Y+y2LG0QlJot!C2yov<0>~L_=+zO(qXbERZbX3ZMVJ7}+~=Kpi;%6K&RN#W1C& zLGK5W3e(kvyO_%@@as{jhyH;EQSFie-) zOInda$a9xC)I~Q8P%+|a+SGxaF-(Y2s+qb~^;;`Y-~%*=tuPFKZQ*^d#6YL#N+9G6g~VsO=aIZVZPFSR;N9=J8-v%j7zhI#`r| zr;Sk&R_!s;BlIocDaUY|b=l<30FSzhn~^N(D8O^-15KmTwJ0@75}GYpxNxq^>~f1m zt8Th|wF*7e=Pt*K70swZff99@x?4Os0XH?E8P^<_62m2BYNHyzdtoMZdwyajna1qa z?a-8eI<=nF=Y8FkL1OU2Jebb6lHhRU{y|QBGB} zU6MQE^zv7Lj0NiyFJ83@VDh9>ye11DbZpn9Lyl=rr88@V7M^ZpDvV+sRcdrx9H=_&wN+eYF*<68&3!;Y1o&_dz&1n-U!^aDioK>vr7T$Rc+# z2wYo1MR&AmHdd5Ls!+x3MxhCGeSE?m*T0=VKO$t32r&*LLUy&lI86 zvyJ&MyXNhD-?k9J-N!=?c62g|4BtSJQE2EesSEM5Al_h`5}mMG5)JrR#kbl&(1)=X z#coVTlJ#qS^$pvhxVZ!yrK^PsrEsMbgAly{Y90Iy#QtbJAI_B;vK+T$Q+@@wq(23v z&rphYn^AQb`XVffTb4{`p}Jk?F$u3or>3jrlD(#WJmGeYKKv(qmnlwA5JC zajjauWNSs5uTk5ubf#4SP-?a~9OQ6*A?`CqI8riI2_U*CezJlUB7}~ZY+reh%^Ayr zJm;BD0#R!EQd~kD3=k-6#3@(vj&ToF$=-qCktzy>915FEFbcb|snCHum`IGNgX<(% zZY14etifxQ#&R%WxlD6V;sZu+VFq7L-)glfEQtA`5xQeoAPu3-A+Ia{mfMj)&hL?< zaiCxr_?mPms>VHH5NIW$JC0c~uR`B($1;VucE;T@nGqa@fpA5(+5q2tE_m|zK+c~A z!ixqFoPkn#DK&% zpBY~^E+&hY{97xPY+BM>suEW#^%g6d$6 zrWGl!a}ZJ)GgNX zh&CiUo1B?hzk*TABZ6(TJZL`FZxz!nxxtb$OchpL>V)?~E`X@MfsPzktJd;{=};Ry z&wyCtBjmuXx{FW9J)onF*vLepKZgI4L_)>?1Dnbkuh(>KowntXFJ#iQ$;>fwICYHd z2de0yT(3YS_Cp7KC=y2w$M}s;8T|EfsOt4#h5r&|7-fVl0fmyh5Z7^xzwSo6>P6iU!$?pS8Vb-h7Mg;*7GCA1oc`*#LUhS3JzYe0y zET*!29{Ur$q{pcBT-QtX_ruR(mHjaQf0XzigT17uRAMiNumUxU8vA>=m-IMpk2l`^ zBfX@@EwY!Ry`+coieuO!d)|Mbm-N(i{s)w*)=%Le2H=g2Z^RG>u%=_h+}aS98H7QD z=X(YECHn`Vj?P;f#L{}rjuope>tG0HR$CsCMmYp?f@d)swCLE*5S!cbNNma0O6(EL z#&(u@L(oylW~GPO(k+j~iuP(vUV&lJUkuWkVLQXHOiVAy{>D|RIIP`aSOFZ2xBkO8 z4QSo8%u{mfBVNB&&2_M~QGDcBF}{hLbcuuTsN`V#;!HPbYtM*9;`D82Ciw)ZB`b!6vx;C&!S z0^EAv)ZJ1MO*OkMKD-402|P8W#zqoNVj&i?*-{Tw@4do95%sEyRrLU(-AWY8&S+-r z#LJvGaja1%Qf$YLVjpYlX*oF_+2iF{)>ziD<6}7|V^8MHIhi$1;%!cBa?bbPrEV<` z06}(~%&5ros&M!F-~a#bfB*a6|H3Yuil|gLWNsI2SGKiMLC(!UG_Fzsq@1c4x=NL5 z4Q=#9B1B~fS;B@)GlYh&HBL*in4hB?xvtDiE*nHH#?(Bx)}@)bizzz3xHvwyY%EP* znVwueBk1Rhv9d5VzC3-#n3}#ay*!Qbba}-9bsf$cw z`t~&`r^#CZuqz`LUOX3`qEL*=#j{-b2q2QIv+Y|oxg06Vgtr`R6{w}=n|L*J;`^j6lsGbSDZVIkp%r|u{?}dmtN3XwG+Tv^PDEu z7N_Gxd|0%7G{fLpDs6O)I3uZfc3mIyg(@mho$0b@?SgpUu25mXbX_l^-M(<3rbQUW z0IWX-YR1P@VmxtH{tVPRwiC^`12v-}iCR7bF*2vh7I^`kftoQOdOVOWz%T|nb`vRz zMdKpZi5taYa+D3@lj(c|mWx%;0AHSFV%P0v*Eks7PkN3Qpw^&OH!-VL!RxBv`<0h7 zjU0eV6sgB!P#P~9RTgd%%96E7luv;#ZYrLEHQREUlb*X~w{lQ$K#)=z^#yu11RkVuo=OJe!Kg>; zSW|mWQ`xD+PpUPPuh9u3ubtBviZva(1zH-w8Nmz?cmbB<%#)@&zuA;XVi^^qjg)+H zT4opnwj26Z14J*mW%9|%HPAMF-*#JRM3IjUpCo^gkAkFGC*MigvBxtIMwXw(yZFf) zBFZMmaG(`fmYWMvO1Eh`9gL@RT$X%tI*w=eS_7-Od!5RoTk_FafqY_?AfI%qOj8HE zO)CiCUW8~lfefj{1FgVrE_iu(H2_XBR85kXVGL{y)QswICir%ex$tLTI|JZ!1JXc4X1pLeYfr>3&EKf&>GZvJC^{ z+i6hoIzN=pK-g(#sZV34@)-!%JwP&#>{1{CDXe>2mn^eM^=g+*@h6pjfU8=CpoxA| zs)LomN~$*le5(l^P4^@RaJx+G#(udxo;`AUJgKfyZcL9}0E1QZ6;1_GJ*8Cqlpa#> zxin|s19R(Y#|nV6fN_3`rCSaP;foHXqL6B=l(K?U6iJH`Ip#GP*eON?30qvKUGjJ^e`92kj5 zflBJjzXdD_n(U*1m1NTY>3}S!Z@Ij1pcQx>e*$ycz0L|a*cU{|*^M1)vws-DQC&Wh z&7Hpaqu8`;W=_A1T<)LWTgPtOnCwTg(tR3a$-h&@4McWCYK4I%vfD9=A2FsZ7*>-8 zC50!d7hJ^9`Vd#5RWRTO7LFoHF)$W52Ka_)EW!=z%k;?1EWQRJtBvd10sG`Q?NO;i zC!T4qU6XF88>^VoxzwWhIuP5ugOnsRKJH$>G`%=2a`4t0=Z(|+Ak}GOd~QlF?aIvM zY2&m~%bxzYJHI$Jy=Y9_&{CylO)U%cKvAK`QV}$|te( zl}!_`K6FKhDBzZm5Tyk89~+FsmVd5xF0fh_)@fOJQ(-Reo`$(es*4wsn#44K{l+xf z!8r!1a=oqM+4TgF2O>|z#1*BB^KBgLK%wav>|!E&J@B?dE6_@giFJ-!^yqQIJ_2wV z7Txwj48{Q}liEkNuxC7|F9IeOI0|5OqmQ(gpE1KSyl4P3yK57~D;1086#o+Xg9~ z4bP>sJih0595XP?ATVGcS_&+)5#0=F9I@tVY~WM~&dapua2FY)l0T$PGq7=M^TM@7 zx)66Tu08Dd5Sv1y?nUdyvKIt6)U_O#z(#&ZYF&51xy|38(jUyC`76lsK+M0!FlYB5aR%D5e(}^-~jkj9BB;>`q9u8fg z`LZQAz|`@{J(C?+P2;64%V>Hy_hLHE%Y$jlS^@9B3|};|?)@F15Dn)W9l~;VCu}BS zr$LpQP(|bP*x9kOHTvm(kRo+vqMzL{%)+%qJWDy?|?h^4<33}VNqUfZkkGdF=lu1^bs3 zOZGqSTdpu@H`*O1vWv9a-tcgwEDX&Soe>MX4NIIV7@xhmKshiK=+bJF=D@pS> z&xOLU>#^t-+}qXYH*xe?7MI{WyTCG!`HY-BSH%tI)f$jS$Rb6fLP7i&XV|#BS%h!L zA^3J2s$pzZ@F+s)hpJyb;XrguF-|TZNnkIcvg>q$me#mGq%fUcn%paLt@7eUJU}3CQj2 zmoNV?DbJeVMtO3O03X;%S_(QhdTz8vKi#FEy&NaSInAjDF)$i35rG(ca#_r0=z=-| z_=7vU$9^UEOx<(0I_5U+z6`7;jxF(*?)HO+>>tTTbCCSxpF<&0!%cUN9s5)Y>`nNi zSPMKiD#E)fTo5l>&88h0TY()#mJ0_9i=8k%=V?xoM0>rUB|bIW7FT;VNQ;%6<)|eI ztl9}Od3ZHiDW|U0>%z!^H)rmpvm8IDg@hm9yC()(VDA&>NmDMZb37fsDsTtym_3@l z%_XYWa&brV%Y~lW4SET$R2m8$=dmJU|CltEgGt7K6s@QQ(j^udC)bR{>7`|Z`{xn3 zgk~Cbv$4^E#|j(ETv{QE6)>d=thN_fB2}7eCNM4CX${qI%*1TLqYZiJC^iDCiK|;p zCj{OjXN|v7c!(GYLqfC6F-@K=2iTN6b94)P*qZ0-6gM2jK|cC1eVYo<#0)&zd9?M2 zA0EmRYfwvRFqr}kHF2`4<3cx3#Gy;yY9<63m7|LQBS3Ykx_zoVa%!X1dE>&w)b`xD z$s2FYyb*4X)!UtU`_jziMQhAHJ9%leaq;Zc$%Qv=&NeHz>$Ag_)v^VnegL=tLQG;a z(c}MmyqkvW1k-Q2>ZkKXjZU5XaikBaA62o;2XJ<_fTAhYIpnvauhRoam{ZR zO~-rCwqa&4-vn-r^KC1-DxJcE{!SalXiDN~a8P`PqWdQXMmy<-| zPSgUAQg)Z?sb#B(&y(!ok%dx_8?C`+Nw7D~FH1KNX;tc#bP@H%LQOZf;f`62(Xu?X zhDSJDB?FCBJtFYDh+l0YCuKdBb`tsTpug^a7y~FD-1<(cv{IsaJW;T{igQh&ajFy8 z^iwiQR2Yi+=qWR3g?c@o%q{q@7#~OSQVY~RvoW}&15}RS{{88%9hGKPy3Le;#CAK@;=$sjG>3=F6>_t7ZWc8UgW)5E0yAl zifb~;3!*nmkXavInjT+#eeU8axsG00yn>3w<*oWf&Cd`OhL#!Jc3UOke3Z`fp_C_N zDNEDK%QJHqmsS_XmoI5W#RBgEhP^gOuPLR_(M{9Yu(s(KrSwB~Os`c*uqQ+_ik!OP z)gI+NN)tZ6LrA1hS&qpp&=PRzSMD1Aot?CnJ?y^`0%n1oVWNeCO%#ivxoH_gWusyg zp-FbEP0KO1%m9vkVv6 z`;OiZ=ZU`GEA(NaUMcvJy0Nic3@keNM7Qd$n~e>aiy3VzGLgQqZqQ7YmU=avSE@U@ z!ix$>3bIzy7Ul<;Sur25VxnrdO}AMy?q%F4XJ#@KC8Shf-KHx!wRD-tQ+*dhNfoE2 z^3n3>Sn`6z9BES$tt9>U4$xg$hcqCQMI`86Y+=T&B~Qh~Eb@UQQVM$JH+_jP$^h9( zrs0r;3-|=3Q@So-1qU9yH~a(ZIxMOr=KJru8bkCl{j!nXQq=ar68k5|CofH}PR)?= zpg(MT8y1f5VKFR~8CA)ScjMG5H}UKvv*Sz4(~FW@$7R2$mEBt@m&<5K@503y(i82P zZY7;A=Gr|BcdvlU9u~e#6>EK1HBOA*seJx^B2E`GVd*gbhj(xopYPQ1RNkJOszT#( zakuxs#(yP`(Or;?P7bYPbxR0XfaQc88m7^-oX%~_aLmYZ8{05ZOm|62N|+8 zOjkz0nTi)!w1L{RL*FsCW!^LL0})YR*E=LKa%anp4J$GnFAUQrX9)7F$lkDm!Nz(F zBaL-xrWu+?U)8Zvf~l(D1ee;&aO88UF>G2X(~BHF1;nfwz-Pe?fYFHnMQb$!^e2+V zWO5IjP4!OjxC}>+6L9gPraSi~P9^byw0GLZ#}4f2Q-9ewL-M9-IkCKfC%SDaoF=8E z-mb;@`Q=1`4~fQ|5q;2aZPNR7gy)xfd)X&_Z{;8v##3edLY0Z}$;&GX ztK1z5pHMiUDjFo>To3bH0Nv`s%HqXD7TwKooTVSP%S=sAtX$NK*ZXipUdZFo)kEz_t({!npELWcu4_a<EOQ++Md~R-fa;NmN3{-G*Y9dKs0CUwJ6KWq3$SqSf*aOJhQO6v_vaHnL~GB-CwDmBVTlM58~me3AKGAQ)A|q zE!q>wqiYFz7hS_mU$UUyp`r3w8crmhUrdaTevMkM+u=9u^dsTo^o5z%bu8+dbZLI_ za&px5k&{i5BLS8m_t9jW-rSxR`RneVnH|44y?SM4LT`hK#L!jB zRoZ>y%}67J4&gi)JwlZ%PA^=!u{@sv(?~ZkC9|a=rB4frt{$hFmai280B2$XUhmj7gi>&%uMc-UtdCCd4eUx3AHmrTu`kf4mazx zG?4fD#ZK!5!mE_pRaFJGh8XX39oL$N{xVWpH?qb};1}pRZuijJc_C z{I_UF+R8&hfB)-_^LguzYe)Isq5z6qb>QMsY07PexK$@MxJ_*$ik!H_vf;J!*8#a( zi1`MQ5_TkZXY?#GmP3}(sGE66(_51TP#pa6^8Sg86q>UtNJ^UUNy4QoshWr-wr+8f zwZQ+>F7jxy(1aLSGX{2(KzZ)WN%L(IksX?@v0-i3RFTCZJlA|;(3tf6ZE+D3 zs^P`sJ|?Z1QpBzqr&pFI8!esTJN;7FHgu11?~TqS83`BRxlBj&sZ)>pYcejwcwf;aga5(2rzPaz@Ki~$JE zTIi%&anuaSb?{702=TXOKzbHfqAfUT3HCu5q;QfG6?53#7_6u%XPI8xb%7tZl1urS zw#&5-PQP@*0P7-&=IO;w!q0xZ2CNxku@~2+)_5vTTL?ZdOqpL=H zUYlNgAXr1vD1LC+1>|!%0$6rHn8&nCGQJ)G@fw=9s=TLwlE)aJAq~aE2#}6R3Bn1u zQ&zQZso@;1zP8aDM5!Qu*NoG09V5q;9ZQl4cPb2bcPEx(xR6jS+fF~QQ3ro8 z78d81xmG}Qcwa0wM;DcxlG17?8GApK>hnDSI@k=E#VwY6gVh;%?PNY19ZKCIPlA`r>5ot&l_H;}pb}Z0Ob%vf3 zsFh64QHZBr;3viKj*mj9s|$y6moiVpOBs}}twMV7_x_h4AIV#SJSUEbp=f>mQREJl z4GVXb`hgu(-zb=vxvzUvlFC9V6t(EHWqxJ1k*# zlL2?rj^WTIezq)eJ8cFn;*CY>6=p*iRbn4lAS4bVI6=`5tVUp&k(8l|xB?R!+H}^y z;@5G$2t?W)96%`=Ai}4?Jsqogu;&t=7ube(4z}IHxkTJV$(>jn;-C9Rx{u}|-4_+o zp&p5L+|L8wX;ar>(vd3rgQeCSYsMIAcy&6ZU&UG+d;F4d+oQ4y6u{{PWB96e!7+$g=gq? z6|;pVe8ttq0KFs1T*D8uuy z9|n;|$@KkndHft0T|77_{oN;K5du$wK=i3IZ|KBa;6|qHT2g1lp$r0wHCAz0il|1* zn19Nn6}8RXW%{8K2t%ppE<45~s@(h!H?*L<6LK&)eh~$>?vVofaAdIKM4=+T!y+JQ zlDEr2;vZKgc_mgf4RIloQCu@*`K8detmcLlHP$;mOwLg0U?bert@29uoR{fpU(<~| zH*80Vx&WzTiOTm)?BjXF{uxQ^TK`hhh-NF-G9x?mEj!Uf$r%#C zkWoD!-I^SGkupJnNOyX)JPPx6Zfhdfh*HEe?hzS?1Q#AO3^V9MWcF{m+Me~$o{HR` z(M-OSDc82!h}La)SJN<=PT#ND%^w=v>R@6$Qi2h8X=&SSD8fES{tH0Xy~@(|D+XWK z;GGaPv6TfEKYzHw6X2~9oIu-(QN!o1X|S)DmzJ&*eu&cE>evmQ7+c~<{K6tH7;h9z zi63v;VFNDPw~O__Gn)-FjD!Q9doekakkjV*eigWX@}B_tr|*luB~8v`rIMJjqhh-q zcvqvD5ee1<+)~L;75IVI3d}ayn#FMzPaPU{E84Ow*NC<}ti#)|Kg0b)9XO><@fTHh z>I53<)w~(yPuuw$NUF%hw45uq%8u)cy`0UVA{mXH*KEd$WHlCtWF}y#7T|BeMT*i7 zhr)1*NHCY8F*-ClT%#Y|fl#%IlkN0diW+_mZIAI-RiG#9G)1x)h2wOUa`jw|ekolZ z_EO?*Lc{*=g8%q?iC*A&F~JbSJKB}u>Hc}R;}I~RJ~}4QbYroD1Ns z*b4;vXE>YaAL(JNe?&2e15G!~Mjh&9jH0+_3LM(b?ksED!;#fkhlkfr8!Z%v2hiyw zam@bN#AKe7@VHJ{K9a_#B$;Q~mGWFzGh5K-|(%3d$8zP|_#kc9U$9%aKnD6&cZVV<_PY>8X6PU`A6@E@E74#}38_*ncO_C3q)EuwpspFhw!brqw+U9$$D$`pK zE6nuOgq|Wn&3STzo|wojLrD@fYB>m`2sB4VNQnZc$I4@s8vT&^Z2yz)BbhtSGsZ=a)LIK3&Qna7;f_bqR2NtLCD-)tdwvp-B776;;vL}G1(C_yk~YSatlOlJ zqX8Z*k3m^A#?NHz3xP4!TzD|x*N}$L{j+;Scgf=W2^0XzPPqPa+yzSCmyhPM_~~3+ z*W?Dr>)4@Vwo4r!PT7kaowix4pzTMsko{x*g*-9uhQfMPr-u5LvsQ#^(rRk@7&>v3 zV)nd&gJ|-gZ$%msYkHh}*n-eHoWSH*%F2aSwHP`!-`meJXNA-F$|CIx#w(Y+Ffwqi z`6IPgCZ(>H2T*#bfQHKDYHbKMZgQR0jVyq`&ySM~+XaZ}u_fgE)vnUY0a_?XP0i7i zrS{`1i{i8hxA0IF#Se7??kldyeZ}cVvL6wJ@EF)k!X`H^YVyj=^xSgSqNX&<-u@6< zn$d=}jUt{>tr10xuPk2@r#sROiuFbDHuvEYZ?ht}L;P<@Rg7_=X+D>tUW{?11MNjA z)qPFJl5WWUY3pJhZT+aEtt9*vVkDONJMGm5eWxQiO*s5?OwF z_ggsc(*+)xRG>l^+S&E>yOOc4f8fejEIN*pU56YWh4y`5RxnGIiqbyO zp;%9GnD>T7Thg5!cL;}23f`@qLi{v`WwIZC@h4OPtB*t4MJ|+^A zNk1paOZP~U9H%vs?2{1KKP_I$qs3oJ)1sgz;bW7pU`j%lA>ZaKJ!Zu|B`w|j9*E6=6>d{@_ag)a1> z`J~-6J5ID^22IPwa%j`iiRGvkyMKC_$)gub(2G`sq?K{kFdf?MC&eCbl|ic{?6vdF z0$2>Tl}4#tRBF#usMJsCAQYgG`GhC|bAeJPud->n zcClp!4cpWKr%9u9v%MW{CniO$k6oxsOOYIf?xdxi*-lZ-P`P|o9*}^H_^H2afRY%h zb&=>`uljT8)8Vnwrrp5R3?@`9-7I8!lp_7NPx1K)Z#APpkv<@%oSq(@0BtK%GOiO^i{uq~W`QDcQLMh1KPnU6 zdm-%PU@Ue@K(wtWup6QJn*gKDb;o5w4zYdj^1qfxz`rgDSRWNh!tj*^gPbrbT5D@o z1BA>?aV#_3E=FDvjvnEWO3o5EPjXEZHOu=osFWjT4By+bg0+qV>qc@YkrGp7D+EZ= z+Q9f$4{#H?*Do`1xDlykHu`0nonTElGa_q7U_@7Is=yeFDSL{B$A+t;HTp@+dzcL? z!(s~#h)Q{5`+$8SDY1$Adp~Gk1WBYMR`9>=QC$Mb5~A#rF%ZSD>}oIfe~N8=yc67j zQ~Jkp#mdSaNKQ0Bqq>JB%E-9=6W--K!n>X(JkbP6duA8v3mc|Gj;xlKrY0~odak9& zv1$2^CyePbyIitEqM~~wE(xJ~q%WCGGnl?-5));_wrVLV8wHio52y@t<>Ui^9#k`#aoLZ`)6ru>Nl-M zWHhY^bE)T^G1?xvRnkJ%%m$8ZHoO+UtCi}4mCPC3^VhOBtq`WP;)292n4EjYhGqGN z=^EBHZ9dQyi0fY4I>Y5-3zjyfyKQ*Ux)tDnM8l#&woErdelfGA_r(Q7V147*YukgS zukSnX%XIExZ7N4JpM`WEdoepEjbi0!VOK%(uv{ruhuhuGU5Gr29Bb-}iou#xC6T07 ziwQE5C?>F)_MJ(lkyTCqBa?9VJ-^Y>(NSCpHmX?NAN~IkPr;idHz1b$m9ES20((=_ zKHrNEpJ$eC%wCwEyRnLM*Q={j^RweKb4thEw`DqxSvM1AjGAa;2IQDmrpnnC!g&`k zj;lJk zf0jF&$8vv52tTsQ9G+_gmf0-YQ4x{@-Gb`KyNr@&S!5Y0wYKy|wTWeXK9iFDl^=;! zg$(S%tz@+N*iphUjIOw}cYksGOm#~387fzXrIrA!u-kGa4;>Z%;W!n$1CKkG#zV@| zML!O~>w_9M>OO)XUxivkzo(CMa{%`+)16Hn-7*7yQ*V>5ThU!X^{Y7DiBcSj{U)TB zE_C9UozvsUFXTihL`i2-nAO%z)aDEKN@?PA^N3YH`!_2KQ9SQQ70KU0+_EetltPksOY# zUYcK7B;P-AE*&x{hj9HDu8c2T1}{xERR@0TZ|*2htvt@fRp_3+p2vZq{0b-7Uq|hFD_0mDFo8<>7KiiD5SFKD5PhNH(Yzz2gPJ{oF97X_+B6({($wI4m_w~Pzmz;RcM2w*m^}A3L^Q*sCb@yp^4N%& z<@hX^ndSukado;xPbw>;Zh()VDY;$BMea_(!GswUs{rBWna6i4;ss*~rqU2}WCvoduIfv3f0Z_mtDmn*_aiSDK@$G0Y9X z%=jP~LI?@ZbF8G2GF)VLEz(fAG796w*cCcT9x7ML%4Ct_8C9SWex+3(AO-ui_hw8% z@`?!AN%pr6bz2tpF@4?8zvTr@Kd{0Ogqq_Syr)^;HN9keXhcu5uCKk0hhE!C)X~k$ zcTba!m`X;JY*@;*cdAi6d`bJr_4&oAg~jQmCEUp-ecg%+RCF(~$+DB#R=(?M{LHOf`8$fol~xtFkmGuE6%z~9|r5%3d2axbtERxC>G4o;Hc+F^dZRnd1k zE!#a$KIc|lvO-yvZW{Fc{E>Z@!1TKxmFv;+;Mu|9;u;*^3PkGS*CrMZ6k_T8ne#7= zKi{JRkA*z`{O97do~lu@XqYkMe(2arO`5a8zH!T{hjt{E7j@Weq!tvayn9!|4Ca?^H0EEC;5a_ttTPL3ebFA@29-xYguIDwJdNhC#T6nZ<+PFeY?x#t!0|k zG8uDbdn0<8(*=tIheLOS5wguiiR4e)B?b$tl0}x^Oa2w}eQHL0`4v^ed$I1i^08 zzE&pgh|B3$YVOxE#8c%7LLcbQo~2{994g|qO1RP-Y^tTj5elJ=c*q6F_mpxqDDt+w zX2;R?kB;*^A{d%WWP2=~&C>j9aD*#bZbK>oyG`VWnsr!5LHUeQpCb>b@Ovm4V>(t4 z@rxH@)!}1erqd&F&J`tmAYFoWoBNMS7xJViBo!~!kx!+|NrUBt$S=YnD{{ENhpW~D z9WG)B0T{WJ_e?r{7&@f}I;{rnVNp{UIz@_s!+g~BbY9*KYdg;Rkd_q@GUxm9a)zO^ z+K3OL9oO8o&0#h>%QSFs6(w5}$bggZ>9=G+V1gKpPr5((}{EEfUDRDQ9 zRRt7U*%CCM2#!xDz%N=4V}0M7J{O7;rdTIWoaPDeRt6^r3CE>@=%h%3w@M_|-TX~j%`hg}0ts7O?1ExM zZ}QD+UW!|iECt#GJ`hD!5-e-?FLPealR2*)<~nU&xfD33W4E1?jv0o=Jnj@&@;X7o zGUlvk%L_J)+1TJSsleuCb+=%XD+2A-@tQH-Y};;4Gy@=%2BdOeNa_&_{1|9mhK~~G ztm1R0*xIg>3l*0me+p|;;XhW2pBw?YG&niRI<9nUb8>308A@)U4BS;WpZd8|W_b7( zQG9xpPR46;l(`-{Irr9fov;(xxEv^kOD`{VCBklk59LkCvT)D^VK(WYt7x2tXD*%xOfsLH`0?>CU0tzOJ^5zSSFhYPbbIp zm2REo#`mI&MydHKlUU7h>5`EJ^HgpQMC4^?n7PUMbe72=C#7s28I#U}2`Q5rfzaez z-8A?~no4s{sw0ON{C}UW3?sFw$ubWufpqC!9^srN!|woC5(C7=tg)zY#4v~+_r&uk zWw$}m+QXNjX>O+_*tNk_6G`B_#R)u761&1do?H>AWa}bVnm~DKqR&)H&?i>2rF)!4 zNm$^u(MtC3cim6XEtv~SgZD@YR;8tz-sZOHLhG}kM7SKU9$((s8u&Mr5^sW$KkK6F zMONMOHU|A|qgb31e~tV8VB~FB?)lTFQ^8W5cmDKgU86VgAc|urPu=R6+b~PM+3~kw zl8hY;)ksZQcUUCYzvQ%-CprCXv6~`Gm*9~yRD9Dr9W^!Se2(tVR_95i$de_Io86{3 z%L5T3C0~geQ`$V;Q!Zu&DL;wS3DVpP=!h)Tsh9g7Gb%5`Q@8|`##>68k_tvg;f`7w z*FxmzrsD$bU4DSz2VFj#9%iD@^Ia*lKn~NTrr{VJS+ux?7xXBPT$#BxJuyFjIidUL zbL>qbu~_NA7}i|z-sC&o)?D(C_umr<5>Bg+>DL7F?a6#+Ri~sGh-^u*X>F=MG@?>X z-9J?=a=6GAe6|GKZ(~f=H4q}o@k&rBY zuxaUD)^!@nU8TI@daIq#3b1JUNKGHr1kK6f6GXQc&=Owf$SOr6gD`NNfb$FFup^gX z%40a9swsuBk2qQ$Bj>jj_>ELoNAF5cuiozffQS^*5b+cm{fO<5zgmz!r6WZ_XMnXp!V-GRb--C-H3ddonaRfgo^jKis>R4e^ z#96t=RH?pY1*?AG`Ce!`DEkOw>`hTN-Z-R#vJW#>=*1-zxR&BmR}1VAuBE`;6n*`S z_4ghTw^bZP@G<L)uNa9%#Z<)8jIq0S z@3OkctT$tmF;-`@)#v!>M)oXvbC|LIyMQ&iiB_>E@yFBnk?jORu%{RTlg|@5VL2TI z7)2{X6Gp@M8_%TnhVNl?5%MO+r{^GJ{hz|%jG~Q%3Z$y)8m7~zl7{hE} zMve8VD4GG6+{hPd%J3C|cEchbke(3V2ej{A?fani{Yrr`*w^<8Afj!AAq61EA+Saw zAT;ddBePZG?w!6P?|=VQDDg9S;8G%;=jqw%i+Aswe55=WbOwFTa|YdrJZj~ZaA1cL zDtjuScZU+Hdn)1J4kZkwOXy>ab^KOfHaVT(d0xOD@8{WU^#sWC2)`&s65(<2#Z2EX ziYcE4^A2O|yeQ!10%I4%_lFCNO^I)~p8v4;{`0$c@4hO&Ckn_rTm3p??=bco^!sa! zeTK1bFjn|=#tL6!tp5(E?hf=22XSOtD4JU>tUz|m+=nKCvhYq8(LWK`&6ag# zd=8s4JC}mapcK55r5vtPDHV7y-MI{0!GkgY45d^#;FvCUQ**O20Rfd2uv1z4xNk1g z0okqDt+wfw>?TMXY<*FH7;kKXOYT)DJjp7rZq9$r`F{H!eEGlYT^abj&u{-1|HHQp zfAr_R>x<9-?|=ROdDXo!dH4^W`S(x%&X0Znf!`Va)9*a~b8o%xV^^=TNU;o&(|=B>gGz4U#@7zCqGM;`J^a&70THJ%wC3ryU1^JU4CP_TNHVJ{sd#^3fQv;mOaeaXTWsWpWVIt@9*}pJ2cZB zrJ3%in0tWi1+cgCWz6UJKRQ@8UTSoLz;YvJ+koj=%W4{zwtXuoUNbiBAnKToaqZ%` z@ls%I){OGYF9T8UuY`WaP97@X9vK=L>f@i4;mYs=p5s__*yxzv3xJK5N6!LayS4y8dt}CqEGG@HBWNh6b4+(J zgw73?Ka~%m0~rW?LP4mU524}V^2F<;m{oTQTRO@{b{^h~)$$a?tX5c@e;D2s#D36r$Fm!x! zVMai>$|3v!icv7ENTQZFdUDq`bcfO*KAj~2bZ&5HNCD^(;(YJiW$Y*KvLrzt%z#TL z#mZj6H8V9Wpp`?=`zs{|RwadSxdW!RpgXLNBboBvmGcUgBWWeiU62T>&?~2 zDFMi1SlRGpzaHnN52J29qI22mdCyYOC6Sr_rr{jXJGj;!OM4=WbcO^znA6TC!LGw zt%6l?;DylK%Juyh#DW>`FRSFj-G3m90xH7zJZ>A?zKM6|=mmch_0$H7Hhtr*x%OGX0>B6`y?-B5-@uTaO0 zqcQ+ss7LE1?6}G>v{Yn<`o7^tfg|HiB;%~xswAi#M6R`_)bHw{?Kl+8Xqb*=%3`5J zhTT&sY*_wk!(63HgkaF&#f=Ay;zVBL%iQQ~91*Be(UCZu+wsXf(5f`n*F0BsfEwj^ zou*8J9yQtlZn|%*wPff+2<3;ZO5t`0ixSk2=MnAw2%D|`NrACHEim@S1$L4mRX*Qp zI9|(kCAvN*a^elAR?sp-w?`WF!tVo3z5y`=l{c-(wW4BZMY!%Ql$F0MiopA2uFdUx zj4{$v<6ueOql`hJ+xG}#v`K)!(Z%L^!{_Fhq6C5`g>p~QXJt4x3bgQ5&!_QG@xWCr zUUu&LM1H)#k4sOV>0y6z_wL<4zI*rX6O8>>fgNG9)u#mYypJ(`tIEAXBPgz7D3@rY{xvRzy`hVi_ahy(#m1pnacYC$H(wP3VPM% zz;euO)fEL83YGu>)lmmIE|u!G+q7MU8rU$=qxnH(nHkuj$2yi7DuPXy%t5P~^HeG? zk6sO}cyQ7s@FuDf(rpVnb=OiOo{rtL+@_~!1(X5lU9k}YnjLNkADGy90S|r->P)e> z^=VQfGWNNH2*<9@op%^}gE98sGRA&}G4=_bve4l7uoHZ~DwyP3jIkFPW8c9T`!r+h zyBK5GGWl-C*xzBS@I#ETzsnedZWS7J&g?b$P>jqBi_%8_xmxI^e}~!{qP?^v&swN zeM-D#@-fxe+ZFZAw4XA{(J5F=Yh6|aVKWjtp6?i@q_sJ+iG$0 zo%nMbKQ3i^hstPbMf?cTZkkOm`~s4F9zTB{VYKc04!pH0d(i(3k#8chg)PmGKd;~@uzkxN#4W7Fauw$i2HW;V;6?UEjaE&UkZu+~uj1#U`1uH}!;x&+-Z+nt zF%;zPSkNfaox{&r{EXn|G=9DfKQH6wgIaf=V(jFn2M4jhgtcDj%G~QqH*DJH#Ax0a(Nivvr8A2ahol^*R0`lVdU3c>wTh!dYv+oiYt~4kdUm+7 zR<}xUyj3nmX3(-ClE&ovx>R?(#s*flPXl5Ei6_+;@t;rk+#_wUebNTojW&)vP}=A} z^nPHn<3&z9eKnjN#C_^CuitV(9=ekxy#b8ztF)%Zb8Bn|khV_Y>^0aVr zUnkQ;%oFJYx`seTXypeTM+KvtMmuOYZd9_}q-fh{2bnNjo{jsVWwDT{WLPmkjFJF( zjda&`7^QpUSjCWzYpH1wLPN_8{lG(cvV6>~t-$ngH9Uy~#{>w>nlQj(Z;BB=z~MnEHu zYOg7@hCpWfu+UI4AV`;6BM3YW702ARf^&Z0 zMV=a88OJZKO>!OCF$#?WOCj=;qIuz#9W~aAX2U63ZWP!t$CTjRyzQ87X*05XRii9b z5kD4A5JEg*iU9ygB?8Psyuxht4-a5{e2mRjKX~^}KQr*t*Nd=cW!TBPcQUqbSU?}@ z*qtW<4eoai~r^TJ9%bwY}TtzyVpjpUwiG1;n`cm)>|W2uWpQ2+c$1+Tx-u<@otRI zPLFN8Hg)yE>B;%bd9WMrp3)URwN6eR6K)=Hm6bdFg`R zd~0LQ-5Ngs7YEqOJ+oCvIv-fDtbon|(W+yXCUw|%K#H+F7dji5APFPL{)5nt!8i|R zH6_jiBfU*uUT~$tLC(H!;wA@~ln41G(^M)cV2AJfC2&09kW!`wjr+du!BHhYTO?z^ zKahzZM3A9qoFDlK;f!iTSgafaLHP(v>c4^+4Z%n$@H*i5 zCC+h5p)PfSezhcC=&zN`AlB$%j!efVCN5xXCV?A9Fo2d_%uC~1c5A&JD<|?Q3QV`9 z3Q4uJQ*ZesxynkOO*TYy7OJ|At4)y~$W3P5#_7jY(v!JK9jp(tiBruJ)yG=T{IOWm z#{v_z21;}=@HdpMI0Z#Jv_le#bx1=2s}&*AL{#OYTs^$?Sy!pDn%q%YZRll zuY{T0QtDx#B$pIKcqxr|mduS0<9N`R)|ZCoE0G4$sus0ox{(>GSddCEQfjsR;!V$1 z2m-dPWs0TB6x`FINva(fF*%*#jR$YAcFAZ{LnR2X7{QoHWJ%W=*nVORQuspAsS!xE z8%f|gPF9dpLYnAA*NA)6TmGi+C}t%_hoYP&Z<~&30-6+`UihQRiFuv`&laa|fFn@E^SySex#QXmC#BUw3wStpHy~Sz@$UGcI+#J} z!g^-7fkHs}lC~#^y^c+_N<<1envUI4c|zCo6g7fA zw<2F_0A?;(N~58sS_qCRSTQtepJn>gW0hv(d0Zl^CEA5e>7ku0W_| z;9FmEwEsd>gZE#s*=i318-P=*XKD8j`{#KFc)%)9D7HnxhB0xm0`|=D(}SM_`02&Z zLHr!T&td%Z;in%zNAPnLKRCDp4%qj44{;rOON)v}fN+0w07TK>`#x;T^fC4+YpKqWQz=|nPTg!4;WWoC~o2?#t z7g=yzwo;1I5iI^p{B#bmYGH^V^v4SvR6#xL)UQ}w|ilS0I@HVvB2umu@w_G~GPAhg<6(AyG zbnQ0Q_o}q8Q|IhVw?e>jAwNYauo}v41I?;O!CF`hJ9TlKQC5ygvK6ZZFpN~9*Q|F! z8e^G~GoOs1L=aoTS{MrK~X-*#m!=}Z|FcAXSthUnK5hyV|$YxoE4JC zw3f8vfy<0x=aQZS1*GQ&9MG#=ZIM$-D{7RsT2*taC0>J|g4>~g_(+N^4MUdd~UFE z?%d$HF;&Fk^z8idbY2nCZ8mCOrrNm?1+w;`;j{BoxfzpyZhIX!B107rk0f`zTcVBs zqcqxh7M>uV>H;sE?J`QViz>>@0cu`9lFdoZO+O(<4sW>C9xAXxwZKk3E-K<@#JL7B ztQ6SEQ_aRku|4%tLLtk3+!Z{*~YGs>y!!% z_nN|J8tibez)n6#*BI1FrNC;zNyK)s65ot{wm>bW>90uNpCS%Ef^Ts+Fxe&2Zz@#g zqKxZ9yu%cFN^}uoiu}Gr-*hTo8r$&c5n~MlIevDtaH?CH9;Eph*x2-7@@jUPR%QhZ zF5mH8zil;br2+#BQh^!q3M?kDLeJT>f|A+P)#$Wrl~HS6u!TLBfbeQBnq@E>D7R^G zr}jhuSPE^Dq@%*YMG-C(z1fLZi)@<>1$&H(7L~BROT{H*Xs{pTYj;Ask%3%4yK79)H3t2YErIqYZYW}kRtqjPijgUa zosb%|?-~+K}y%I(rTwYM19)RnJv|D=f}ZrO;kM zvK%>lyqs{|^y4LSvK<)Nq8)k;-Kvz|4oc%#Cd46`B3T1JGB4vm7;zh;pyO`HD2b~Q zcO1JBw=CIvs+9_kQzXYtL>7TbIY@NN;}VLkMpQNoF{!;(%-Co%qO`JPH$^ZJiR_C+ zNf{S!o`TEB!lK*l81M92{CERYriWQ@d)4eH-3S;#*bY-P4WX>l9+Bx)HX9Raaw~QN}>zxjuY8M_^I>P1I^$Og8-FUasv_*1_zr~ z6io^7ZiKbztJVpfq1>n--M(%Ef)*;H+tmIw>I%2RYOz_5x8Z3Wyp;?C1yPvq7weuE zg>VpEgrf)vqzrt0T|EyCiUJ|@cwT0r#1N2eD7QjIe_}lw8Y-M$ z7X(Qer%&uJ;@wx6t-j6JJ3Z_PrU@Z~WD__TbV>}iiSP8V_vJ>{M#|-K={Y?vBfkJH z;9GwMb`m(@&RAiCvBIYrD}0hMayao<`TNLCNE%pRA9k>gehWvlg@gy8q15!YT)JxU zHdfd^^nhBli$I&PlV@aCOy3Wc?I8>iOO_dKBeWD)zBjmSwjD^a1XY*^kt13OJ`f%P zH3NKLAA*Eeh|*0@8Mk8$v?y5!a7g<3kYQkJVhs%H3ax~WhHJ=NuW6k+z(qDpe|VtX z#N2`h3{8HcJoyd$l)u6IQ*8# zZ@9aV-{ac%MeQ5nr%W@WeM8M4!?Es?-*ejcXSMIoF~;66;PZJc9Oph{-XGDve^mSa zhuZg#YjF5S+V>Z=?|-a)|CILq({S7%+VCYU97fJE{AacBceU>?Yv2Dw`~C`JwBv~9 z7qmY9q9(%slGgrTW^`{EJ-?#W`>Tw>9+sY8)5?dTHShq>uWRYQ#u(uQp5M^Ye_c!e zn_BvB2t#c=zon)BZ7uyj)6)Nrmi~9O^l)$?+w*%``hTva{})>N>xY5obgoAnlE88V zCjVr5{j?s16FA(DOhJbCVwH0o;p8;wU?Thk!jEHRb1+fGli;54;*pJd22n7mpeR`y zo!)pBrJX>ys-2t#!PQ6q69|7+rl(fHHAw%H6rQO4G^#LqcoixORRL{W{|_drpzspH ze+c0(%PJ@wH}v*@E*n0Ia2$S(n@Z{7)}{Xp!bcP3z}ZlLB^!Po;Xj!zXB^>QLiqVa zITsQBPqX2d5dKTq@EL^vt8Dp~5&nN5d?ryoyq@%*&8DA2_$b1!B+`Et;SEavejSlM zhj0twpY4UOmP#Vm=MnpXY%O0vI0ml&^NI97g78xa|3V`CM-l#CX3P192>)(`|7Zd+ zejJGLkiflU)IUPhqay0Z6S=;KsQ*et6%tYZ7*PuX)4rI9`YA+xx5)KHTtWdiScD`$ zji|pNqJE0tGnB~tB_#Ogxp{vEQU5|jeTni`6M26Y2@Z(_$=1G$CH$~K!;YCn&dwv>7*gAxgdZhryMEku8XBLOrd$V{=nh}d-% zdwALxnk}HlqF~0i&PE8;gI26u&Q0 z{B}+oeg_HuKu>Te3>vPP9E{&Zs(&d{CED=KY#UO8@q2n3zM0bokeg})B{W)d|$GMyx;Z;N8zp%J%m{QWpAosL-&$z=1A2cz=SYBhEmx@|SR{D)hJ5 zry1;oMavAMVs#J~Cl7Afj_pN*bovr%?-SQ4z*t!_rp=J4rO&xyTQ(vUL7 zZt_OZ`zBW}(_S*p`AQoDx#fp`BOJ5{k8XSm537Kakm655BML`i+_N~gnvct4O~nn@ zi)hOky`oiu)*gL3LoO+?BoJ*QQ65W5gwcvnMx-pL$gGYmM^-hfRxAYMs@8ODQ|S!= z1K-b@C_s4-SesT5T2O4=-X>!tl?}k;#v\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/729/f42d43ae\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 00:05:03 01.07.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n#\ + \n#root.mnuc.backuper\ + \n\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ + \n#:local Script AM-GlobalConfig;\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\ + \n:global MkDir;\ + \n\ + \n:local FetchFile Manager@id_rsa.pub\ + \n:local localDir \"/\";\ + \n\ + \n\$MkDir \$localDir;\ + \n\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +add dont-require-permissions=yes name=awg2-webui owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + put \"Download image, and save him to usb1/tmp\"\ + \n/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-chr.tar\" dst-p\ + ath=sata1/tmp/awg2-webui.tar\ + \n\ + \n:put \"1. Create veth interface\"\ + \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\ + \n\ + \n:put \"2. Create bridge and add veth\"\ + \n/interface bridge add name=br-awg\ + \n/interface bridge port add bridge=br-awg interface=veth-awg\ + \n\ + \n:put \"3. Assign IP to bridge\"\ + \n/ip address add address=10.9.9.1/24 interface=br-awg\ + \n\ + \n:put \"4. NAT: masquerade container traffic\"\ + \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\ + ade\ + \n\ + \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\ + \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 action=dst-n\ + at to-addresses=10.9.9.2 to-ports=55055 in-interface=ether1\ + \n\ + \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\ + \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 action=dst-\ + nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether1\ + \n\ + \n:put \"Create environment list..\"\ + \n/container envs add list=awgui-env key=WEB_USER value=vados\ + \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\ + \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\ + mboLs2325272931q\ + \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\ + 3\ + \n\ + \n:put \"Load and start container...\"\ + \n/container add file=sata1/tmp/awg2-webui.tar interface=veth-awg hostname\ + =awg2-webui \\\ + \nroot-dir=sata1/awg2-webui layer-dir=sata1/docker/awg2-webu/ envlist=awgu\ + i-env start-on-boot=yes logging=yes shm-size=4M\ + \n\ + \n:put \"Start...\"\ + \n/container start 0\ + \n\ + \n:put \"Verify...\"\ + \n/container print\ + \n\ + \n:put \"Should show: status=running\"\ + \n\ + \n/log print where topics~\"container\"\ + \n\ + \n:put \"Should show: AWG started, nginx running\"\ + \n" +add dont-require-permissions=no name=awg-proxy-go-Client owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:put \"[::::::::::::::: START :::::::::::::::]\"\ + \n:put \"\"\ + \n:put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n:put \"veth and network:\"\ + \n /interface/bridge add name=docker port-cost-mode=short\ + \n /ip/address/add address=192.168.100.1/24 interface=docker\ + \n\ + \n /interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n /interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n:put \"add config-client.json\"\ + \n/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json d\ + st=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n:put \"Add container\"\ + \n/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interface\ + =awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-proxy\ + -client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pro\ + xy-go-client\" mountlists=awgcfg-client\ + \n\ + \n:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n:put \"Add user:\"\ + \n /user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n:put \"Add forwarding port web-ui\"\ + \n /ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n /interface/wireguard/add name=wg-awg-client\ + \n /ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add comment=awg2wg dont-require-permissions=no name=awg2wg-uninstall owner=\ + Manager policy=ftp,read,write,policy source="\r\ + \n :put \"Uninstalling AmneziaWG...\"\r\ + \n :log info \"Uninstalling AmneziaWG...\"\r\ + \n /ip/route/remove [find where comment=awg2wg-tunnel]\r\ + \n :do { /tool/netwatch/remove [find where comment=Monitor-AWG2WG] } on-e\ + rror={}\r\ + \n :do { /ip/route/remove [find where comment=Monitor-AWG2WG] } on-error=\ + {}\r\ + \n /container/stop [find where interface=veth-awg2wg]\r\ + \n :delay 7s\r\ + \n /interface/list/member/remove [find where interface=wg-awg2wg]\r\ + \n /container/remove [find where interface=veth-awg2wg]\r\ + \n /container/envs/remove [find where list=\"awg2wg-env\"]\r\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg2wg\"]\r\ + \n /ip/address/remove [find where address=\"172.20.0.1/30\"]\r\ + \n /interface/veth/remove [find where name=\"veth-awg2wg\"]\r\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg2wg\"]\ + \r\ + \n /ip/address/remove [find where interface=\"wg-awg2wg\"]\r\ + \n /interface/wireguard/remove [find where name=\"wg-awg2wg\"]\r\ + \n :do { /file/remove [find where name~\"awg2wg.+tar\"] } on-error={}\r\ + \n :do { /file/remove [find where name=\"disk1/awg2wg\"] } on-error={}\r\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n /system/script/remove [find where name=awg2wg-uninstall]\r\ + \n" +add dont-require-permissions=no name=amneziawg-mikrotik-c owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\ + \n:global imagesPath \"amneziawg/img/\";\ + \n:local Image \"awg-proxy-amd64-7.20-Docker.tar.gz\";\ + \n\ + \n:global DstDir \"sata1/dst/\";\ + \n\ + \n:local Url=(\$GlobalScriptsUrl . \$ImagesPath . \$Image);\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n" +add comment=Generator dont-require-permissions=no name=awg-VDSina owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# ============================================================\ + \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\ + \n# 2026-06-30 22:08:12\ + \n# ============================================================\ + \n\ + \n# 0. Check prerequisites\ + \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \ + = 0) do={\ + \n :put \"Container package is not installed or disabled. Install it and \ + reboot.\"\ + \n :error \"Usage: /system/device-mode/update container=yes\"\ + \n}\ + \n\ + \n# Auto-detect storage\ + \n:global awgDisk \"disk1\"\ + \n{\ + \n :local usbFree 0\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \ + } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\ + \n } else={\ + \n :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\ + \n :put \"USB found but not mounted. Format as ext4\?\"\ + \n :put \"Press 'y' to confirm:\"\ + \n :local key [/terminal/inkey timeout=30]\ + \n :if (\$key = 121 || \$key = 89) do={\ + \n /disk/format-drive usb1 file-system=ext4 label=usb1\ + \n :delay 3s\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \ + free] } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n } else={ :put \"Format failed, using disk1\" }\ + \n } else={ :put \"Using disk1\" }\ + \n } else={ :put \"No USB, using disk1\" }\ + \n }\ + \n}\ + \n\ + \n# 1. Uninstall script\ + \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\ + \n :put \"Uninstallimg AmneziaWG...\"\ + \n :log info \"Uninstallimg AmneziaWG...\"\ + \n :local prevDNS \"\"\ + \n :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\ + env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\ + \n :local storageDisk \"disk1\"\ + \n :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\ + ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\ + \n :local prevTmpdir \"\"\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\ + Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\ + \n }\ + \n /ip/route/remove [find where comment=awg-VDSina-tunnel]\ + \n /ip/route/remove [find where comment=awg-VDSina-dns]\ + \n /container/stop [find where interface=veth-awg-VDSina]\ + \n :delay 7s\ + \n /container/remove [find where interface=veth-awg-VDSina]\ + \n /container/envs/remove [find where list=\"awg-VDSina-env\"]\ + \n :if (\$prevDNS != \"\") do={\ + \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\ + \n :put (\"DNS restored to: \$prevDNS\")\ + \n }\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n /container/config set tmpdir=\$prevTmpdir\ + \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\ + \n }\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\ + \n /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\ + \n /ip/address/remove [find where address=\"172.19.75.209/30\"]\ + \n /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\ + a\"]\ + \n /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\ + \n /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\ + \n :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\ + \_} on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\ + out.rsc\")] } on-error={}\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\ + n-error={}\ + \n }\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\ + \n /system/script/remove [find where name=awg-VDSina-uninstall]\ + \n}\ + \n\ + \n# 2. Network infrastructure\ + \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\ + y=172.19.75.209\ + \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\ + 5.208/30\ + \n\ + \n# 3. WireGuard interface (MikroTik derives the public key automatically)\ + \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"4CHyNhbOs923/E\ + yNDguMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=14710 disabled=yes\ + \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\ + Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcY\ + QnD9N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=172.19.75.210 endpoint-po\ + rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\ + \n/ip/address/add address=10.9.0.3/32 interface=wg-awg-VDSina\ + \n\ + \n# 4. Container environment variables\ + \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":51820\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\ + 77.79:55055\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\ + 438637\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\ + 809250\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\ + 09079495\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\ + 12329741\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\ + l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\ + face/wireguard/get [find name=wg-awg-VDSina] public-key]\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"\"\ + \n\ + \n# 5. DNS\ + \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\ + n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\ + \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\ + g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\ + \n# NOTE: replaces existing DNS configuration\ + \n/ip/dns/set servers=109.107.177.79\ + \n/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina distan\ + ce=1 comment=awg-VDSina-dns\ + \n\ + \n# 6. Download, create and start container\ + \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\ + \n:if (\$awgDisk != \"disk1\") do={\ + \n :local tmpPath (\$awgDisk . \"/pull\")\ + \n /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\ + ntainer/config/get tmpdir]\ + \n /container/config set tmpdir=\$tmpPath memory-high=200M\ + \n}\ + \n{\ + \n :local arch [/system/resource/get architecture-name]\ + \n :local ver [/system/resource/get version]\ + \n :local dotPos [:find \$ver \".\"]\ + \n :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\ + \n :local endPos [:find \$rest \".\"]\ + \n :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \ + \"] }\ + \n :local minor [:tonum [:pick \$rest 0 \$endPos]]\ + \n :local suffix \"\"\ + \n :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\ + \n :local file \"\"\ + \n :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\ + x . \".tar.gz\") }\ + \n :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \ + \".tar.gz\") }\ + \n :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \ + . \".tar.gz\") }\ + \n :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\ + \n :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\ + atest/download/\$file\"\ + \n :local filePath \$file\ + \n :if (\$awgDisk != \"disk1\") do={\ + \n :set filePath (\$awgDisk . \"/pull/\" . \$file)\ + \n :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\ + \n }\ + \n :if ([:len [/file/find where name=\$filePath]] = 0) do={\ + \n :local freeStorage 0\ + \n :if (\$awgDisk = \"disk1\") do={\ + \n :set freeStorage [/system/resource/get free-hdd-space]\ + \n } else={\ + \n :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\ + k] free] } on-error={}\ + \n }\ + \n :if (\$freeStorage < 262144) do={\ + \n :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\ + B free). Need at least 256KB.\")\ + \n :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\ + cient-disk-space\"\ + \n :error \"Insufficient disk space\"\ + \n }\ + \n :put (\"Fetching: \$url -> \" . \$filePath)\ + \n /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\ + \n } else={\ + \n :put (\"File already exists: \" . \$filePath)\ + \n }\ + \n :local rootDir (\$awgDisk . \"/awg-VDSina\")\ + \n /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\ + DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\ + yes comment=awg-VDSina\ + \n :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\ + =veth-awg-VDSina] shm-size=4M\"] }\ + \n /file/remove \$filePath\ + \n :local freeMem [/system/resource/get free-memory]\ + \n :if (\$freeMem < 16777216) do={\ + \n :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\ + . 16MB+ recommended.\")\ + \n }\ + \n /container/start [find where interface=veth-awg-VDSina]\ + \n :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\ + }\ + \n :put \"Waiting for container to start...\"\ + \n :delay 5s\ + \n /interface/wireguard/enable wg-awg-VDSina\ + \n :put \"WireGuard interface enabled\"\ + \n :put \"Installation complete!\"\ + \n :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\ + \"\ + \n /ping 109.107.177.79 count=10 interval=1\ + \n :put \"\"\ + \n :put \"======= NEXT STEPS =======\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \ + comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\ + \_comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\ + address=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run awg-VDSina-uninstall\"\ + \n :put \"=========================\"\ + \n}\ + \n\ + \n# 7. Verification\ + \n# /container/print\ + \n# /interface/wireguard/print\ + \n# /interface/wireguard/peers/print\ + \n" +add comment="wg2awg GH repo in client mode" dont-require-permissions=no name=\ + "wg2awg client" owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:local Arch \"amd64\";\ + \n:local Version \"v0.0.1\";\ + \n:local Name wg2awg;\ + \n:local WorkDisk \"sata1\";\ + \n:local WorkDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Bridge (\"Bridge-\" . \$Name);\ + \n:local VetchMTU \"1280\";\ + \n:local Vetch (\"vetch-\" . \$Name);\ + \n:local VetchNet \"10.9.0.0\";\ + \n:local VetchGate \"10.9.0.1\";\ + \n:local VetchAddr \"10.9.0.3/32\";\ + \n:local Env (\$Name . \"-env\");\ + \n:local ConfDir (\"/etc/\" . \$Name . \"/\");\ + \n:local ConfFile (\$Name . \".conf\");\ + \n:local Mounts (\$WorkDisk . \"/mounts/\" . \$Name . \"/\");\ + \n:local RootDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Registry \"https://registry-1.docker.io\";\ + \n:local FetchFile (\$Name . \"-\" . \$Arch . \"-oci.tar\");\ + \n:local FetchUrl (\"https://github.com/vados-dev/wg2awg/releases/download\ + /\" . \$Version . \"/\" . \$FetchFile);\ + \n:local FetchDir (\$WorkDisk . \"/dst/\");\ + \n:local AwgListen \":44044\";\ + \n:local AwgRemote \"109.107.177.79\";\ + \n\ + \n#:put \"\"\ + \n#put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n\ + \n:log warning \"[::::::::::::::: START :::::::::::::::]\"\ + \n:log warning \"Add veth and nat...\";\ + \n\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n\ + \n:do {\ + \n:log warning (\"Remove interface: name=\" . \$Vetch . \", address=\" . \ + \$VetchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/remove [find name=\$Vetch];\ + \n:log warning (\"Add interface: name=\" . \$Vetch . \", address=\" . \$Ve\ + tchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n:log warning (\"Remove ip address: address=\" . \$VetchGate . \", interf\ + ace=\" . \$Vetch);\ + \n/ip/address/remove [find address=\$VetchGate interface=\$Vetch];\ + \n:log warning (\"Add ip address: address=\" . \$VetchGate . \", interface\ + =\" . \$Vetch);\ + \n/ip/address/add address=\$VetchGate interface=\$Vetch;\ + \n:log warning (\"Remove firewall nat rule: chain=srcnat action=masquerade\ + \_src-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/remove [find chain=srcnat action=masquerade src-address\ + =(\$VetchNet . \"/24\")];\ + \n:log warning (\"Add firewall nat rule: chain=srcnat action=masquerade sr\ + c-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=(\$VethN\ + et . \"/24\");\ + \n} on-error={}\ + \n\ + \n#:do {\ + \n#/file add type=directory name=\$Mounts\ + \n#} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove WorkDir: \" . \$WorkDir . \"...\");\ + \n/file remove [find name=\$WorkDir];\ + \n:log warning (\"Add WorkDir: \" . \$WorkDir . \"...\");\ + \n/file add type=directory name=\$WorkDir;\ + \n:log warning (\"Remove config file \" . \$Mounts . \$ConfFile . \"...\")\ + ;\ + \n/file remove [find name=(\$Mounts . \$ConfFile)];\ + \n:log warning (\"Add config file \" . \$Mounts . \$ConfFile . \"...\");\ + \n/file add type=file name=(\$Mounts . \$ConfFile) contents=\"[Interface]\ + \nPrivateKey = 4CHyNhbOs923/EyNDguMXJXdghL2I3UyzXPwrANVgHs=\ + \nAddress = \$VetchAddr\ + \nMTU = \$VetchMTU\ + \nDNS = 109.107.177.79\ + \nPreUp = ip route add 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nPostDown = ip route del 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nJc = 9\ + \nJmin = 105\ + \nJmax = 920\ + \nS1 = 90\ + \nS2 = 136\ + \nS3 = 45\ + \nS4 = 27\ + \nH1 = 472437748-472438637\ + \nH2 = 707808381-707809250\ + \nH3 = 1609078552-1609079495\ + \nH4 = 1012329484-1012329741\ + \nI1 = <\ + r 4>\ + \nI2 = \ + \nI3 = \ + \nI4 = \ + \nI5 = \ + \n\ + \n[Peer]\ + \nPublicKey = o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\ + \nAllowedIPs = 0.0.0.0/0\ + \nEndpoint = \$AwgRemote\ + \nPersistentKeepalive = 10\ + \nPresharedKey = RNvF7T1cg5tyXcYQnD9N5BEp6e20vVJQTv0GMjyvHU0=\";\ + \n} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove mounts list \$Env...\");\ + \n/container/mounts/remove [find list=\$Env];\ + \n:log warning (\"Add mounts list \$Env...\");\ + \n/container/mounts/add src=(\$Mounts . \$ConfFile) dst=(\$ConfDir . \$Con\ + fFile) list=\$Env mode=ro;\ + \n:log warning (\"Remove Environment keys.\");\ + \n/container/envs/remove [find list=\$Env];\ + \n:log warning (\"Add Environment keys.\");\ + \n/container/envs/add list=\$Env key=AWG_CONFIG value=(\$ConfDir . \$ConfF\ + ile);\ + \n/container/envs/add list=\$Env key=AWG_LISTEN value=\$AwgListen\ + \n/container/envs/add list=\$Env key=AWG_REMOTE value=\$AwgRemote\ + \n/container/envs/add list=\$Env key=AWG_MODE value=client\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$WorkDisk . \"/tmp\");\ + \n/file remove [find name=(\$WorkDisk . \"/tmp\")];\ + \n:log warning (\"Add \" . \$WorkDisk . \"/tmp\");\ + \n/file add type=directory name=(\$WorkDisk . \"/tmp\");\ + \n:log warning (\"Container add tmpdir \" . \$WorkDisk . \"/tmp\");\ + \n/container config set tmpdir=(\$WorkDisk . \"/tmp\");\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$FetchDir . \$FetchFile . \".\");\ + \n/file remove [find name=(\$FetchDir . \$FetchFile)];\ + \n:log warning (\"Download image from \" . \$FetchUrl . \" and save him to\ + \_\" . \$FetchDir . \$FetchFile . \".\");\ + \n/tool/fetch url=\$FetchUrl dst-path=(\$FetchDir . \$FetchFile);\ + \n} on-error={}\ + \n\ + \n#:log warning (\"Container set registry \" . \$Registry . \" tmpdir= \" \ + . \$WorkDisk . \"/tmp\");\ + \n#/container/config/set registry-url=\$Registry tmpdir=(\$WorkDisk . \"/t\ + mp\");\ + \n\ + \n#:do {\ + \n:log warning (\"Container add width: file=\" . \$FetchDir . \$FetchFile \ + . \", interface=\" . \$Vetch . \", hostname=\" . \$Name . \", mountlists=\ + \" . \$Env . \", envlist=\" . \$Env . \", root-dir=\" . \$RootDir . \", wo\ + rkdir=\" . \$WorkDir . \", name=\" . \$Name . \", logging=yes, start-on-bo\ + ot=yes\");\ + \n/container/add file=(\$FetchDir . \$FetchFile) interface=\$Vetch hostnam\ + e=\$Name mountlists=\$Env envlist=\$Env root-dir=\$RootDir workdir=\$WorkD\ + ir name=\$Name logging=yes start-on-boot=yes;\ + \n#} on-error={}\ + \n\ + \n\ + \n#/container/start [find where interface=\$Vetch];\ + \n\ + \n#/interface/bridge add name=\$Bridge port-cost-mode=short;\ + \n#/ip/address/add address=192.168.100.1/24 interface=\$Bridge;\ + \n\ + \n#/interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n#/interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n#:put \"add config-client.json\"\ + \n#/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n#/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json \ + dst=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n#:put \"Add container\"\ + \n#/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interfac\ + e=awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-prox\ + y-client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pr\ + oxy-go-client\" mountlists=awgcfg-client\ + \n\ + \n#:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n#:put \"Add user:\"\ + \n#/user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n#:put \"Add forwarding port web-ui\"\ + \n#/ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n#:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n#/interface/wireguard/add name=wg-awg-client\ + \n#/ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add dont-require-permissions=no name=tmp_print owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDguMX\ + JXdghL2I3UyzXPwrANVgHs=\" listen-port=21641 \ + \n :put \"======= AWG PROXY SETUP =======\"\ + \n :put \"\"\ + \n :put \"Run awg-proxy on your external device (10.30.30.33).\"\ + \n :put \"\"\ + \n :put \"1. Download the binary for your platform:\"\ + \n :put \" Linux arm64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm64\"\ + \n :put \" Linux arm: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm\"\ + \n :put \" Linux amd64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-amd64\"\ + \n :put \"\"\ + \n :put \"2. Set environment variables and run:\"\ + \n :put \"export AWG_LISTEN=\\\":51820\\\"\"\ + \n :put \"export AWG_REMOTE=\\\"109.107.177.79:55055\\\"\"\ + \n :put \"export AWG_JC=\\\"9\\\"\"\ + \n :put \"export AWG_JMIN=\\\"105\\\"\"\ + \n :put \"export AWG_JMAX=\\\"920\\\"\"\ + \n :put \"export AWG_S1=\\\"90\\\"\"\ + \n :put \"export AWG_S2=\\\"136\\\"\"\ + \n :put \"export AWG_H1=\\\"472437748-472438637\\\"\"\ + \n :put \"export AWG_H2=\\\"707808381-707809250\\\"\"\ + \n :put \"export AWG_H3=\\\"1609078552-1609079495\\\"\"\ + \n :put \"export AWG_H4=\\\"1012329484-1012329741\\\"\"\ + \n :put \"export AWG_SERVER_PUB=\\\"o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+\ + v0b9jU=\\\"\"\ + \n :put (\"export AWG_CLIENT_PUB=\\\"\" . [/interface/wireguard/get [find\ + \_name=wg-VDSina] public-key] . \"\\\"\")\ + \n :put \"export AWG_S3=\\\"45\\\"\"\ + \n :put \"export AWG_S4=\\\"27\\\"\"\ + \n :put \"export AWG_I1=\\\"\\\"\"\ + \n :put \"export AWG_I2=\\\"\\\"\"\ + \n :put \"export AWG_I3=\\\"\\\"\"\ + \n :put \"export AWG_I4=\\\"\\\"\"\ + \n :put \"export AWG_I5=\\\"\\\"\"\ + \n :put \"\"\ + \n :put \"chmod +x awg-proxy-linux-* && ./awg-proxy-linux-\"\ + \n :put \"\"\ + \n :put \"3. (Optional) Create a systemd service for auto-start.\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-VDSina comm\ + ent=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-VDSina com\ + ment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=VDSina-tunnel dst-addr\ + ess=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run VDSina-uninstall\"\ + \n :put \"================================\"" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +add name=manager policy="local,ssh,ftp,read,write,policy,api,rest-api,!telnet,\ + !reboot,!test,!winbox,!password,!web,!sniff,!sensitive,!romon" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=*3 registry-mirrors="https://reg.vados.\ + ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/caps-man datapath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + xs-DataPath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + DataPath +/caps-man manager +set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=Bridge-LAN +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set crl-store=system +/container config +set layer-dir=/sata1/docker/layers memory-high=200.0MiB memory-max=4096.0MiB \ + registry-url=https://registry-1.docker.io tmpdir=/sata1/tmp username=\ + amsternl +/container envs +add key=AWG_CONFIG list=wg2awg-env value=/etc/wg2awg/wg2awg.conf +add key=AWG_LISTEN list=wg2awg-env value=:44044 +add key=AWG_MODE list=wg2awg-env value=client +add key=AWG_REMOTE list=wg2awg-env value=109.107.177.79 +/container mounts +add dst=/etc/wg2awg/wg2awg.conf list=wg2awg-env mode=ro src=\ + /sata1/mounts/wg2awg/wg2awg.conf +/ip smb +set enabled=no +/interface bridge port +add bridge=Bridge-LAN interface=*136 +add bridge=Bridge-LAN interface=ether1 +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=ether1 list=WAN +add interface=Bridge-LAN list=LAN +/interface wifi cap +set discovery-interfaces=*DF +/interface wifi capsman +set ca-certificate=WiFi-CAPsMAN-CA-7DB23C23C976 certificate=\ + WiFi-CAPsMAN-7DB23C23C976 enabled=yes interfaces=Bridge-LAN package-path=\ + /tmpfs/capsman-packages require-peer-certificate=no upgrade-policy=none +/interface wireguard peers +add allowed-address=0.0.0.0/0 client-allowed-address=::/0 comment=\ + "Peer for MikroMaster connection" endpoint-address=10.30.30.81 \ + endpoint-port=33033 interface=MASTER name=MASTER persistent-keepalive=10s \ + public-key="zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4=" +/ip address +add address=10.30.30.10/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.10.0.2 interface=MASTER network=10.10.0.0 +/ip dhcp-client +add disabled=yes interface=ether1 name=client1 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=*3 lease-script=\ + lease-script lease-time=10m name=nucDHCP server-address=10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \ + verify-doh-cert=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set reverse-proxy disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \ + webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=*3 type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/special-login +add port=serial0 +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system package update +set check-certificate=no ip-version=ipv4 +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260721/20260721040001-Diff-Config.rsc b/MikroNUC/history/20260721/20260721040001-Diff-Config.rsc new file mode 100644 index 0000000..bd1fd4e --- /dev/null +++ b/MikroNUC/history/20260721/20260721040001-Diff-Config.rsc @@ -0,0 +1,3 @@ +5476a5477,5478 +> /system gps +> set set-system-time=yes -- 2.52.0