From 70dece6d13f4248490c02eb8df86c028cc9d5f81 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Sun, 28 Jun 2026 02:20:03 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Jun 28 02:20:03. --- .../20260628/20260628022001-Binary.backup | Bin 0 -> 360653 bytes MikroNUC/20260628/20260628022001-Config.rsc | 4865 +++++++++++++++++ .../20260628/20260628022001-Diff-Config.rsc | 79 + 3 files changed, 4944 insertions(+) create mode 100644 MikroNUC/20260628/20260628022001-Binary.backup create mode 100644 MikroNUC/20260628/20260628022001-Config.rsc create mode 100644 MikroNUC/history/20260628/20260628022001-Diff-Config.rsc diff --git a/MikroNUC/20260628/20260628022001-Binary.backup b/MikroNUC/20260628/20260628022001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..dc638080e44e1869082ad1b284608e607dc4ed10 GIT binary patch literal 360653 zcmeEv2V7Ij*6-{jKtho&B8Z_0sDYiHs3;v#nlyV!g-9Tn1Q10*Y}m2)-h1!Zj=eYR zy?5+g;r-Um4xr*W-tV1z?|JVtKizw>nKiR!&CFW=S!=SVc*Wec#|ur6IYLOw56Dqy zbt+9Jju65SLJVa1P-~=3YNX9-q`ioA3oIf~)X5TYZ5C>TPR8LGg{Q3b+K1p}F&3VLN_WhDbuxFZ`>;ZDnt zs4{H{7Aojas0n1VH#AYJ$=0hfQv3Z*1lt*@E3AX_I_sfU z*ybTxl{{6!iVlvYBh0ry7Q=Bx6>|`DH8vC>G#nu`0wFXKAv6XdRDuvvAcUnMgsBih zJrQ&(!ZZk>EQF95svz15ZSI2*>W2{Oj}R(^c>vR)5P?XDeltOcVNFMf;UGtdK}ki3 zVQK?Y*dCsx!>m-p*G!-rfKV@ZqJ^wFxabjL$g>fmmnaa*L5My>hEOg-^fDZw-U!hj zQW45Sh|aepW!o3X@}ZOg2oV!-AUqjFei@7qqi_g93=<`)8b&q9Et9Q}R9BBVHbIcB|9g9u`k1ry@T} z4Ckrg_Lz$N%wsrY@z`@vI7GgQyK3-%^iTM&156X#XK6LP^Ztx|^nb;^K_&hP`^dn) zA>Xzd>>mgABWh93mbs}vaBff-py13vD}kWnO%QrQMf6cPG4tG;#s+IL(-IQ1Bciks zS+Q-Cbo>rnPLy7j6OkRqPFJ-_R;9M1^xQIUI7UTEvQ*feRJPR!v3gy+SE zrDn%;XwyNSnikE8;wIk4_Ly6WICL9Zm_NtgLNk)Kw36~av`jHLlnaS zN~2rO4EG*JSBcnoJ!)lQ)%>m62q9Z!0S+gUR$e!gLuv zdl5pBBp=Wo3{}v94k`$wAmna`_f{&sd_$w7!ef)Vhb2da`Bi}qD?^Y4tVuNGCYmlaCboxw5h64H~ zRjbL)GQv0>**=gQpG*V#V3TQRtAI?OLJ0Ay>&C#W7&-zBPG$uIDCs4@3cxK4A$OWq zA(8WIqoDvzIZ0zvlg1=htI{jjwGmN)sG^dnh*6^!Wwu%^Fc1(NS8+xIf~zvZ%+ft( z)SxkyN@VHTSpXZ=GPz!pElY!O37?1>_Xrfj$wUb2g%HvqgN6fhoDPT)44eWXI^7H* zC42$P3Kp7yWx=HQ^yFR;SRVMzy}66QLRa3No2$b zZ9#G~j=aN60dN2x=rv;+dd-*zdTlnD=MDv)6BrqR1~Nwos=xrm+93q8A`G}0us}zM z4n1Q9^QI0ty{zFcwqU>kFCYiF!0bYfkaC9$1uoG000rtIvGQmaOU zX@(+0qs=S%w{V1g%MtcV9MR+|UHZR=AIi7xBO6li62v~B15BB z%>K5=5IKgB9U?Tr|8NY^zU7Ek3rBTwByx=|h`9P|vws*-CW;J+N)1y8W{oymtpe=QJ>n zYo($7oCbLRo`wR`l2%P)Tu@80GC}2l>X4Ia0q$~A$3jgoq(*j}Yd75a={e zU|2nbu=)li56f%J%>YU;4-%;OA%rzX2xEZ?#tg$qO!x;7YK{;BwGGaTmI$F%2%#W^ zuwaBRFfIT#+8~75B1AYd;t|4dFc@rv7;b!o=v0I#0#f}75n`B$K=6cl=!6g*&qk;- zc~67Cs9@!W5vxQ-VLE)FAp~nWc?PMJVQmL%UkyU^yWYeak`V+8JvUh6QBPVMJSeA# zI}M$-Mh0v91~V8>xD#%c^8>3)hH16wAf`W94=?}>@@|e0eTxO5D(LYMu)Hw*-3lRk zkH-jsfkDUyfq`Lwfk94iaR#mq!^H(5hPf+3^m_FWY5=)|5IO<5PeR611U;fKL3T$F zVzf94Pizo626rY5Q3FjA$leq#2~Z*VX;&j1ULze=BOO{J9a1A5M;JCqW=xG|(KXUh zHPWqXq%J)}Nhh;#hgebmL1E*k;C_}+(R16mwiJW1O8bKB~626Rr z%V;WMn2m$fc(|}I#Ax9UZ47{R;22^!urUL-6CuN3YW3&?m}JzFUH^8OQvTP<)P`^} zW-9b7(h2+b3zz!O6E5vPGhl6URa%8wq07TBe}`w)LMUUX%aK@U_d5^04hd6gN*EB!|5^zd*KTpJ_{}~axW@M}NDuZZQ|8}%Sg!%t@vi@#`Vg7GgVOWtMn5D~* zs0lAwmPV`ZuGYxXjd7O(aybkONn^T#NXKxP#2yP56vJ_Y)pJ9*&=GPshiwc2dVO9Z z?m~J^z&U1!37A3({K*u;V?nr&U}aDEV+*|rzqLE^faSR>Ts+|d%OP-KxSQz|T9rhN z7yMH7>|d&$@-J7<1~0ebf(Yus-Wl-HndIo%I1#whsWQ47eQ8FA zUMI3ZxOYM^9PnAdW*rDGK->-DhQ#Oq2a#br4q|}B7*q%}5dNRuq^A)v2!|p_%N^Vn z?sTO}n*pjA{2AFgh1TfY9Zl8>!ZD^H&sg#~_&kgOkyaGQ6T`7VXo(@v=!y_Dx_ZC@ zKSXQ^`hwzz5Pi1~12wLa3AjEDp+t9t*zUP&$4B^;emQo%(6_Efwmzd z0i`Gw^TAW-kde>zyOW=kcqe|CmVv|E5 z{_#U+eJ37>>s58uHw>8oL$qp!`fjor;?n=?En&y#E|29XQ2A;6iow2bHZ@m`f18#Z zZUe4Dw$0^!gZ06VcKM4FBM14VsFnjmj0|9?yHt`6E+QCy0TPMCIPi^8Qn*9F(!>}$ zAO>`X$N)?$cW|k>gFM_pFjZbJ zqJuzLKm<Kt9*SZ(r551G+)iAfY*L+LTP+aUW?^t?5_*}aXNv`Lrv+qXOJQFhH7i>R0aaa| zPOr#-jRf%VC-2}qg;)Z7z=LWWGI2zn7!Ii)Ntbs$5HI+>L8ZG}g=cFuS&D!djZUV? zbu?&HjEJ)s=Z7VV;WR~vKDSj+PY8VxTN_|^fw3M>vTnG08n#@zTf}Cxk%h-J5p@WT zhY@Rzs0btWMh!M@PVA-81?YSC>OoQq$vd>hm2QD2wHtZ22q;t$tYE17+Kp7 zWRzOSAo^{njq)=x>bGPR!k|@=QGZ58tA&hKMMnD>nMo~VCRJo69D^i(Xq)M`WH8+f z%`*KNh1t(2%%E2ZBmsjRhJ=Odl7OK$4TdQ)M13ZZ&*9daOast(MuH>ADj~OA0YBHsJn-i| zWC#d!&s8!FV5JX?PlSlD2$>zJ^uSLHXEZ`{sECF_1CtX?QCwhDVnU=j3XKg+&}j6` zj^Tp{XwlTrdJOh24K!dZ0`Wko3=Q6#W`+>Gz$0Ze>=ZEoKG;}U?1~WVne5>W;~YRU z1tM0|!7#%i$bu04CnzS`IFOq6)cz33;>GavD-_W951g$-uEeHwe=P>1tt z-nlbB7wqLO+b_(~lskJ}-N6hL$(owHjn(zseeRHal-^wgN z4rS5^-8*fzbmizfvJ|iRH>>^g;vju%9Pooxa7dx++2UTDpe&@X!ZUwO-6mtpjEjd)f%Zp z%_J%a4gLj?kMN>%c$QpI5Rc@XSAC)6nh>eS81 zfq?<2KQ!21rq%mrDKfg_Ra$mE6)&Q$#)~ME4O-TQ-uz}tNl3)nx!FArcN}}L4Q^%1 zXgs9#koQ&?W@3VH$+vpe5w|z!SxaMuAQ-kY?gWo5>}|dm51Wa*8C0=T6~(tg0@aKQ z*le~zGlOd8vTJ<(Pq0vgdDLt;W`d|im^H$SFmp-~hN0WdZ`o?EFIjMQe*0zd^Tt@@ zmK>h9u-xv%q|O+Fc?=uBI2PZW_&#)>3bmhkdz8nup{7A-0OQ07mw~%(9BDsW=>BI7!<-Qm61$}x??Kn6svx_IE z?XK9}4?AVt$=a1`v+E1?Zt$fgVKyB&OS9{pJ3Vh_DiSMA3VUDC@qV*`Qr> zm$ixR*YadscXdv;Ic^Fs9%uvlby`%Qpve zE?bs8|1jX(_E8;LZFG4Uayoju^2PkyE-rf~uM0e#j5h?+ zGkDZ1*2c%VZD!BxaJxyz-9etuSiVK!E%TDbHJWm>u=Nt*^B3pydeptX;$fZRnJdDa zL;+EkZ-uvPyj75RvRS<8d;f>~+DEA+?)A>mR`zbuv{_;L;wP&e9UfgAwr8tIeS55W zc%^)6u6KKUw~N>OTUQ_5h|J%(!HaH!KV|K(*cHAje(TcLPo`jYD-RVPn8NEm%Dlya zN9QI^%(xD=6BI<1?c9?HyUGdM`Flbe)bn>b<@bdCJ)!@(6S^7^@whyZ1XqZ8Jf2J_ zl1VuNz5?fq>}IY%Iua`-}}NX+F)cs#C5h_eN30uj}wXaNz` z`Ue6f;Ucb7f%64ooX6n_q-+UW$QMXtV!l|+mI-+hKuJHd*I5X;|6t|;N__(fNJur! z;%|jik(^(ER6V6V08&+2vvoBg6%`;=XdMDl(Ip7&{t;Et=NOi%HGoxs5w#c;Oe7~M zIx!(JII(pwhcDpZ96U6b&0^Prw2sm6BHAImh`NSET9$8jm^MkFyy>$gzNzQ27s{HJ z&f-6Sv?4jgBAAVH$u+P6Y2jRs*tiJp_)B1qi?a=guCY-zM(rEPVJ1ZobO`1I{#mooh2n~&!o+#0iE;__ELf*rH2*r888 z<{R6KI`>=GZhWtab$SL*=*)Nd)c4c&{X4zzij?R3UiX`P$KkC*%+bX*uj)Qt?(u@{ zVJlIUG}_kt(&UDB`YD%ZhfUNST2cADtNHMbp|@77Yi9kr^_L6j!acI9*CWnf39snq z`L*O>J2SU-^SeKbibyJGTD<>_{fx3?GLM>uMta@tH&RcCWK^<`!MZO zw{Gj!NbWUkxV3;WxYIYlD%K;3S#RR~JDK;bKYiM2_srC3jQ9uSMmPz)X?1Z2Q+g9q z%*4cuidCg3c#biRVYHrj8t!HMj$=dWrRnuq%>n{6GF{d;iy=IyDi>u4kIW^Lz*O4T#!cN3FNZ7w4FlhL{>%Y^(Tegjl9a!Rk)>swNGQ`DP_quBarnPA-EU17@LSXUf1v5AvAIlybNEWJQYPRl)F=I7i77 zN~9t_&XIArGMN$=2mqV^3&`td$b16n>@+2voeY#17_3$G(PT<2QFLIUOrzK9Q z3dIFRYQiLPc^>#XX(%dF=HCRoo{<_R@tAaXDzti)QYDk<70lpleVRtA(&sT*zlPc6 zGujY=C8vi4H8DFKFuU5f*4PrbL2Ci*O(Qidf-4q)3RVrSSXErHB01mrMGu2tbU$81 zS!qD)82Szc-~$GJ3y#SU6W!j7lp5O}w*_2mW^Z0CJa&D&9y~O+x2++=rrM4u=lPn^9LVRqfT<&&=Yhw?wKX_B~LoK)4$+eA`7Y{1B- zOG77l-dNFWz_dDk`(2kl>gu*>)-2pyeBxzs;petpk8z$3mWF!sC@DVJ*bU9I8n?<^ z`*21v)^B#%$18~$J!bA|`k=$|E!`u&oY?0=ZNYdF#qOetSbsCp0QMo2_e1Co;+8dI zd)1-5X43|n*`)ezdj4*QNpL1}&xFg?*S{O21XP`RrEA`~kCQv5QYA0@H#cQxv*t2K z$0>$xc)w^y>BUC@r>=A=KdB$7+aL2`kMs%bYkucQL3i=J+u7Up=hWk#X!;@`dgc4I4^G4_**CpSlIi|} ze&^`cw_PjxJ8fCf?Oj>jb)gK)n0JfQH%uL*IMS#1_U*8pUEV)-eM>|dogNbVK#54B zdzC^%PaD+UuT+WrqBx1H$q>xJpoK~B5t%@pBa3XH}%Vrud*N^r-6Ly_f zLxT*6M3dNo^p^JiCIB5D?SkS0lQUI)6nYIaNg+$i)WGH?g^ro%AMEcA(P)4-*%{1g zlmo9CsKPm}fYQh;N!o0kULj}3D)hM;ZTc@or-wOJwgy->jD01mCM;tBENkKRQ&{$W zbh@E|2NuZ#i{yb78vGp$+XXOeJ6=SYZ-8M`TG;NIHVz`v{cGT`_-M8V&NS#W=buW7 z?Sp$m9t(T7KbM!WFsi-tPo+jcFcBN)aM&DN$Q5>Svf_vVf{|bU>-_zdR=)GO-+b-1 zKVBSm82UCHi@lW@WVS8Cr)$Cc&aCyF4z}yQd;w>XWay?$>mg@w%H$6hRPE>16L;+? z&pUv1T+xEvMwEYscBZZGLuU8pX7i54=&rn86?ZV@T&Km8hJAXyJgv-gNJpQO44={! znc9J_xc0`)d5_NA(q}vGXgsU0V-n5fLa2CUvhV)e^|!y-eRq{8ihC?)@N9ATnFX_6 z*^O-XA^$F`;O&a;PwLKI%R0U7*w~QVXz#-%BF&W-$3BmCo7}PGxgN3iO?;n4<=MC0 z*7{1oN9|ehk&1>FdD^!df=;rry-%;(vYfg$+!BAfoAYATbu+H-k@$%p7bhJ}8WJDA z^kdYYfUjz>Mb9~Y)U49$-TvdxwwILN9wdy&e*XhDt0h#uXvs>C6IkG)`IXXBt!Iwt zrd`uJ?9Nr!)r_y6tv~H(yl-nVZKKWnQ9jo#ie#tCuUiW9f;)SxTQe=V%c88CWv6nF zdY(l$)hPkDR904(mhEyM5P!*Z;gZUU!c)sCZm)kkl@&f{_`MLu1wAF;{jiHuAC>x) zMUL8L72%qD(qVz?)&=Z+Gko<_UM1JL(ZWYo`pqpTAIN#=Giko^+O1Wuf;%6Xk}^=2 zb$3YpGwk4P0XtdtopLm>4`T<^Y1NtPF~@GFvV(1#qttyH8aHN5a=Ix_Ds6o>$7kj= zmg%CyPsL}JUzt74!iU25TN^a-!N-R)l8c=q&Tr-9Vom)v zQh}T;;B$pMiA*WtN`!Krgv*gjg#wX`$HPSm0&>-+W2+#SDGniV0(Sk}7DFidFHAZ> zv7aLY0(ZqnKeIAKsZB^ebC6T=gd z5|R^>jF8F~&=&C&pcWAYg&A+~iG731{yKDfboCJ0DUZJl)wW7UM z&a>k_XQNlf50uc*V{0*Oe()pFyHiLalM`;9xX~M>|YFZ z==<(&!_j4T+a0h?ji9$XI>aHVRVlZkzj{Vx-I?`vv>VM|v{-pan|j4vxwdS2Z|d&& zW)F|OxLP_Zx?;7-B!0v8oi85u{*A6|fYZkLAdidrp(>82o1|BK!;H~Q4 zJWYv(J-}ik5~p)}yq~Z$QCOl2ea+dM`25PU3Vp2VVEV`&j^IxZ%EbUfz z;IS>Kw;$TiJl47BZ1nnPohz^3)2;Aq&O*ER$$CcA#i$PT3&siVw;NaIb)$Z+F;1n2 zpN2L%wJW%L(9*E5H&Y+9A37_(Vf&;dEx+nz0c+zGjQbrz{6p(UZ+PJy+3^$2ZG2gy zh&J&9)?MG(d-Io6$6JTn4|21Xoqr_VcD{SE|KlzPeCafA@s>JGmcELf>}uA^D&g(3 z=K)35)mXI}nkMG$>a?s$o0Ca}w=PcKJ@eH%s`BU$(DVntVhyZn3A6ot_}pV@x$APfk#nYXTRf#_$BYrJ=${Xr4qsi*QC?zat@HKYf7>he zONXZ~-h@|ptbY{Y9FF>P5Yz`!AjvsI`2V zYCFtwhJCb_ccb)NuN%vHUAwhaJ+g&eSH*&rdQs(9;38vcXH~gr%sz5_8L3# zdQ`I=E~~JN??NQwxVx7W8)R zlGmn(|G1!4(Za?}4-{FM*ii!scVL|S?W8>b97}FpY&U6;$EATBmc6FLysl|Pkj6)@hI5~e* zN6N%&(wTp3E$`&3AGC1#=8}V!W;fmr6X-eTefO+cV{vmv^j_EVU+$m{+v? ztSl^R->6C!ciYM_eK%$muWIRhGRXJhmqR7nyH53Zn{dCw{)WZu(DLF27Y>YW5!$oC z;(FKn1=f8j{dlBg$ydTrdZx0;K>S|F{1Cujv2k<(xt& z=E}rUoTHSBBoa1P!C}j|Yz{{xk;$aEh|LxYcwDKFCzgrCBC&uch0P9fo17|#J6`aw0<=F)e9R<*YdcnuJ`!B8%1Rt}Nsic0TZ4cD! zEovIV6%;mFS^7%d%C606mUyo@W3ui|v0!Ae&-VMpqv8iImVKPXxvm^<{qopa#+YmB z<)6|E=1_34vhyGEQCnukUtMx8YTmPhS5HS3IAL234H*+Vvbf2TX-kLiKaF;LNV+}k zUg!MvK287-VaOVtxiE~40P*(#(^hSJCw}c2$^AXR{?!3iZGpIKiCiGyiIgHX&SP^$ zG9g!_Q8tKdr5BAE>5aKr+IQY@5lBr>r=DG+kma-6V0wauIw7KqR1 z^953wlEa5$`CPt?E8*cvIbR~>@r9h9|K=r<`!D_G<=U_AtgDCO0u%KTtx}~>%fAWm z8aCNA1&3mF24a|1dldh^U3QlL`YthmvjX=pAcN`oyxDx%Uv;Bow|9Z>aKaS(S3KH#jwuk!V-IyS;T%o!V^ayfn}U$;ITdClXK_NtF$a{0SX zgPvwOZynb3>Y&c&^qCar4wAz9m=;{3s>SH~xAzGnLU zGh6ReZ+Np{&1<FuAm(qgn>$@xP4~sX)Bigra8kC3Jo3wE8FY|^ImaXnv3$&RGn4EJ7VPxotZsqUJklE72u$m7ewzDF7IaEsf|2<`flEH-zrV~3&f5~8-I=;F?z7-&7W<*`#t@Qo2vhv z3hVdu|2_TxYtz3P(s5)8woHmkm0~$ZDORv?j#$i9N);S7pUvmUxKfT>j>{xcxq>Yd zh!lJ-TPziE#cV!LE|m(Ed;-$drgf_z9l0&<*KIkt4*nD%{Ph;SJvK2v{|&O?1%~kA zSbD*#if?|&URsy;(o`ZG%&2aJ()i zIF=O}%;K{{IQ(!vE)2tk)(GKCXfN4=n+Ldzc~HmHZnQ`Ku3drDPcfG%n|3rBWjUb# z@J~!T-nAztFNZBU9^~}$@QEV(&w|Zr^^=CjqxVO7kItCdZMkIkk)eGaecfT3(QTc$ zyu+cko!0ls7;MFS^^W?w?;2T>Fn+K5wFX1@+(p_6uaBQhNZ++*S>PYjiwh6*8}E5x z%;SQXe9G`umCG8-%hKY+!W&(C^rAm*nm*P7Na*?RX7TB z7Ws!7k zKY6gt-Rt((UbpC=#)Q#Wt36_XxeFLTd#UD=DGDA`cjE%Z{- zhH1HOQ-UIoTrBN1=Hp7md8-+#a~_=e+~J_$RY%Ll^(!kr#4l0}dG7s2#*{?QNZB=Z z>Y*)WN{Yj*}=GJ4f2+rTfcs1V6(92^*Lqr z6COV5_-4(HL$ltu&mVkcN4a{$!nWI%7tj4Vwz=unGTDNsBeS|aW4UZOx7%bTJM4hc z;!xUfR6TDxKTx@%Mz?E)MQx|w1A8nI*y=mq0qXlam z2VW^>Oqd+Hpsa&-Zc2+UIgP?jx8IRGO#hrZt#JBu+h^IG&BtEUH`xE-!<0S!qB2!B z{x%_(51=6u|J-E%UW+ZYma~@F4{y2nu9sTZ(qZ1B;ABQ8(?cEBv92`Nyt&jP{tNxt zS&tjDN(QfqWh|a_+-~R#%SmrNHjSt#SnWT6Hm$q;>OXeJePp{?ys2L&Z}OF?SC{u4 zcf7^f{xso(?8j~I%uGKrc_TjYF$z;T4Q%##qV8RtnfDYYzD#|7lD=A;am=h}$c!Yd zAdl-1q2DyCKW#~&4QJ@81Z76+mzGCjCDKUuEl;=u&!Mlq9P3Zwr|tJSUgo-EM4%Hb z<>F>m&#UV@smE51-&Q^%AcZl2cO|Rco*hw)1&#~vh2F_tcl2Pff94XOGpElq#LQj# zlvW=06n*rHxi^=W7VO}3b>E{S6PD%v(Ir1NFW#}dj&f=MS2l*Dhw9 zV8@e;=eDErSQkBYjq?Y5ULN=1(v7|mLtEd7yVvN35y21MegkTCdD$ab)RJF^8-t7OEJfpg&|wc51BnMcxmK}3^&u|J*=}g$DDg{ zEKhK2%hlCwZ-*>x5Tv5$kN=U&FO7cxZuPC#OGiFFGPA>rQBK-P?KaqRDx1JZW;WXat$c-x;PEClIz5%$91pQJn9iH|Ri zY&G^fNR4|`y+F$HXW9=|XhPU^WcX1O+vr;q;aoNk7k2ukGX4rQZApml&~($|%_H98 z9me|%b&o7E9eMu2BAU%|_w|#Hy&sy_CeHEQGh5yTdp}R1iEmx5$HE)twqLRqw>XDe zuALI^pZLVt^>xn%^V6Oj8hmKm`fil7%3ku8VF4qCSxHR17MWCbvArJkn!BK`&U!xm z+^*h^r=s=RvPdr%-Pe>JPi*kyK`R7Db1Ljvi?=lSysPyILE^X`N3XF*7l$70PIK+k zs&GN$yZ1-0D(l>6Nb8by?+0Ig?{MkK*Ywa6Gav5y+--W+`m5KP?fKXz{8pO@%zomH z#qrbpCWSYtx8NSWuvu_LXuDu-{esB(*xft#?EAjW2pZ@1uIJdb-3EVJ*(b@-tB2Vy zubDR0aAo?8w?D4vwCG*)b0zOJGqb~K8z)Tuu7io6EcpzZvLk2Loi+#it{Cwmpy*^K zeXhWivb?|zTebN^hlN*Xdal?_tMqvLcE{RKY|wCu$I>w87Z*Fc5u2O8o4&`vjrR12 z{_Vi`!R~sy1|LjwzmB%?qObG5o(?I!(Q5CSM=RP- zoV-f5u8yvI+oj{h6L#&AO-UJ``RupYq5PTc^47YqT^rHgPf5JvEfB22{^-oUU_JQE ze(u{VEpFT>_3gcC&3hNo-QHH4Prp#M9k;6Ac8ehKfLUMr_5L7snzXH_EwN@=RZ-<= zg*S*A9j(7-%I}$iRe2Zwx6hO@zme{5r28A`{zkh0Pas|5rME(%L?%}%#UidyB9#lc zB91^N5z25J7fM7@k(4bVUP~=eaJhV3DHXCs3b9fk;3(K!nOMR#gtlr!QdNEs8#X_j z%g6b+NW>FzBgAYXl=Tx|!PV~_7;q$x@lD?hI-GcFWjy}o2QNk)qZb2w7FOW1pjW-? z`zJmN2O}RpIxK9@a_+d#HJ!QIXUkQKE#7g$$$K+;aJQy+a-cO_82@$kur8yQc=T@E z{e;__0W+qrDsS+NU9o?5E6oGn$1|NR?uZ&a{Lt^*)FV%%P1~&Duk+oU_cCws&U?e& zJRW{7cX45&uItF`H}9^DU!}ntUhp@+?^@^JmXnSV)U92^w(oh+a#YmuGuM-(6R%w! zXqj*;r2Ff;fot>9E4OYhLq6WyieAo%VX`_Jo+h?Fb=Kry1wN6EWevk_Z`$3VZx%EBR2}OJi_dqJa@FS zyVKl;{YQ)KYcvHs7SpvsEnn>otCw_Vds$Ri z%39t{o9Dwjy?7gVKKAY1u~tFbI>|DdxfP#^@9XBrHo186a6tPT!S!v+A4b2s@<}SV zk+tzv$*q3*tdxdco{d~f^g(ksJD!}<>wQ{Y_U*&(ug>dz^jzIzXOA5l{>6myPW{Jf zM`}S4eX;QU^yJ*Asgp0Z9`ov%)qz}|bwS?|j3vyW!&PO%F5Wjh&*$xyIJ|1yb+YZ@ zd8ax(oyoGBbNN=wj7@Lvb@4CQbY%4Yu~PHRQM^ra!%lp<eK1q^Um!?Y;NE6!@~Y|ukRQ?b%$j4{rR0k zZ5DL&yzs>7)95|pM&XLR8+SK~+B-NXU8nl^dU2ftRvK%^z^_s3?{t`}*YC^3#i>)-kQRZP@U}Cwxtvw(IPU zq-RQ29Qn{`M#}8CGyBeRdc7KXC~fMjO7DhqPLwnnsLnfTVbXcjUFY3lf$OgHFmFCC zl{qc=ZQI<4g+sE-w%j`P=v)Y+|MC54+q>7h;X89*AOBliWv?#lvv&3f4yhaXevEq7 zy^C`vcmMF|@*NXu`);hrj`#bU8paHt!o)w~E&Kfe)IKfreJwT&>VML8;*JscVC=GwW_#qGqswm6 ztUE^Jj(2=Gv-ww9i+jGhlRd8mJs)$+E_+}8^5q9E^y!xp8}%mXX6$BcSq^p3il)2% zxUq?OU$0!8*rxB6mv2VQh)I6guFSvi&Qbfw7wtB3o5`p8J}tj=snYgI$TRNij7;+e zGiObrmfbmcrt+(Am)Pfu;c;lIgIcZQ92$Y3B6llc(NwtxO-*OE$A;gll`3GN&`*RJo_>asYg^|(V%Pnyo;%65F7G}Zq0y$u}(%sp$;Zd!%+BDsIY%;LE_Oh(#0U-;$* zedxApS)Y>HZBN)#H(~MICMAwHW@Mv58~rACy1hHt$J6%FE9=~VdN;b%+ZxNCo6xvk zUdy9HEhmf~_(T;FvTLD@c|tlqV5!f9%<@24Ko8e^4~Kk*l>+*cX1#)X-M>0~;0E=h zT;5uz!l9HM14H7DT5Mf-vHq7K2j(yBzc1Y2tw_M*zYXZp*3@uL3=1D;{h8VN;`Bp( zZF%dIKI@*ZnfT3H6l=4&-}N@(y>M%le`nXMr~5{P`CM!-ojcoe+Z?;T+j0trthmr> zWs0re>6L|P<2D`K`Dp5DvwEUs;k#G2Kj}$vI5%j^!qaZIj)czg|9ZK2#gLS1*Pjf1 zWVe=s_uxA0JnOMpCk}4EoPTGx)$p8aOSfvaiDadL7aFW@webAH1*3Z3xuwW_RY=R?>I{7&=$<~BJ^PP$MJ-Fu+iuf6+T+~oQ*#Zc(|+$RuJzYFK0MO& zenoQoSf7qw#ir#~8?HQa$?wDMy3~gQ;?Kq~OR4nn(?x&gz4$$Ceovd9IQ{;&PaA_P z<2MHWje&n-;NKYdpN@eER|X&F^27oqPsx@`xMHbHCJ^%39JWl3E2Scth%4qQ*;0;# zE5{YMLM9PNvSW(Ic=ujEi3PD#jkjM=|JbUgIC;t@J2hul@yiVXUF`&WRRP|WTONM6{o>Z)#c$D~jAIdU~hs(OBH#H}mI@0}rzVWgPw)DQwwHd$;^W&c zm*1KGkCqBe?K11mwM+Q2y?yLl$B~DZZ66Udq4kCYZdb1$#c2O6d-?TlhkKXq{t)=C z`PSRFI~};|{-jNY^@dNHA-33b#X08=U!9ljTzeq(bmx_g9iMudyziMAn$m#Ysx)(= z{q`%%Dpw9|a|X#umIcRk>)mxzu=jLv>n^i)PX2l~XML#XOP$$;GiRTxX#LWU;t-fW z?9k5M5Bsm!*~)5_vhdiQF|nmv?(j6+=(A21XLorHlC64dG9<=)%8^%(-hA5kq91cX z-i4S4*PI+Vks|h$tG6DNyY8BuW_|U-nr9)C7~Ni2*{Uo30{rXcuf1OSTu6yp=;M-H z_+Y4YWU_XP#(mtGg%S6-(mz`&{GKwur%a8v6d3nY|8Ji%)f+1LJf2*M^MpcvMN$q&#$j`L9JXAno3yR^u!R#=`ei&X>r~)%Z2sTO+r(at`M&dwsM@Utlx^9AyyJ=RoRIQQ`L*Bu7 zP`FN^%~5Crv>HN40^sGfVTux;RtTY1#Cg&c7!45zt<&M}7($FVIKbV?%QrMSDm*r+ zdrWYsA5k_OqiHTvs}z~~?imtU-S4V0)YM(4&_hE(g&7YhhqI%7$oT_jJU1fKa3-`n znTF$_jrrk7XJZ;9U`*3%9KP<0!SfgnhEOqR8pGSa3}?6lqo(m}KF-hd`5_CXx-IY% zH+{59sbDwyAse+S8$*(z(<`)LiX8VJa?z@C(PC6dDL*n~QkB6pL#0+Lv_EDstBlT))mc&{T1l$Hzlsx(EgYCmugYR8*JMaknJk?`qLrnwbP7G3drh1kPYw!0Pr;xA zx%rVj03}6`X$|o_h66nWrDHHIEMZ(2G%HA$-ddy6$4W935r&KyWTZgGT*zpT_r|$C z?c);KMkd51$NS*DalDF0yKi|^t8{wkbX8WCMx%zY3XC--nSpy_6vMGVsF;Gx-P|Ub zySW`A*s`qB_2zI?Ei@9!$yLiFGPUstb8(FZ8q=W2Y{}z zgGz$6GG!`G3LvNk7R%Y=jMjnC~U@Z8V?7|{bJWLwRlnaC(gVkp!UC5;ow;U@1yOCy5@Fo|9gFVUxgp{kjSQk9Et%mO1bS1r>iK(85V z1@HkMs1;Tl@X03u34=+F7bZF9FbWft8I#mmroDBnM1_pTMDFHd9NugXFDfABT_B42 zk(}}^IjwzsFsC+RFa~msp4~ejBVEEG7iUIGRG(xL?)43N+pwlFC#C}lO3AiLBodi2 z)d>FlNm96j)uw^PGJ)T+fu#fy5DO!B+YTL?efzHttm_o|09BTrrBtc)3N4fgh6_L* zeBkcztr;Qg3xH8AKR~O=)~hm8i94~*#1Ja%LekO@Dr`@t*CT|wfbcK_+O)(F!z~Ut zvqu#SI2VLLF~bb~L5D)jF~p!+V2ELEg&{xl7!I?tf^P2S*3JY&ewHyD@5%}WV#0;! znD(`lO$QFXEgq~B9rz+jCMbU>59%|E;doS5Fb;scK|m6@T&pwM%ob#uKy4b+pf-(Z zP@6^&@QiqFu-`O+K3qUnBlQG#c&7n3nDhOt3^#(1|nz=0PO*wH6>^n zh)U2h(9daC*dZ#^dlYDo0<9U)uCPO}aE7~)_6s2uBUq^#OUHrmI1obj(9O-wDMY2_ z=0?Iwf)FI8lcg!-*=mIrBm#yAdLKS8LN}7>0EEy?G7XXizX5#M2%(E)I+Y5vg!C|f z%&^*HV~Bw=V9gH9uzDdxf02%Xn}UQGz((Wn9ECQI879eNCMv4l5fh%7qta?JGZdM6 zW{O0sl1SAG9ScM5%>s0JI=vzzKqu3xvh>WpOl@{1GdPBPzf-6tQ>jXA{_Vqv>`Ym6 zWlCEHeXjSr5gP=XX6?6cIIYT242##Sz#Y>5N1drC=Jskcca||~SXCqY*h?73I z*kJ$RW!1He2iqitT9K-iWH3Y1Bzk6uMi1TY{&Q}UB3U6CJ;93=$&2C9#TuME;35=& zA$p;vMNc-|n=yz!esC?E=wkxVL8Pn}jzSIM5)xzdhhCOs%9$Y&S$cLBQ>Vz3Gcz?c zUSX}*FvDXcDz!hff%R=0s)w$DoMjje;TaN@njEc;!7;V`5%8b{EU3|{e7`ip5W=Vk z!BU=K1*)VD>`=C%8%<0dGg!I-2r%?xmPV`B!MOv@2%)9qgocT3Ov6MsronG%Omh)J zE6Ds{ia?{lry~{e#Bji9StEpj2?CSqh!Ez45LOQ%a0y{xLCsJFazO~WlFp3=$Pk8P zlI{RHs=&NSHvu$=3fc{rCmbIPWCbZZa0A+drXk!SFkzix8HE!bLl4LT?n1D64A9<; zLMkYALJj_njH3Suqc||i{!>Qx{oRcIk0ivbq~QSgbbiv&VX6qgy;a77FLtQ$IAFjr_ck+tMWD)9c^$Yya-;*28?OI4lsp5PcT3!G3fOnf zIkZJB8CpWn!A6&%&+-R${4*5)hrPFpjU>y`!*X_ecY9mg+Lg2`+rY}W6_vAA`~F7XyCLiwqkQ{N^{qfc>f;K(esF%J|OD{fUeuSv9>91US&>Vn*DbbI(2J+;h)4 z_gqwilvFJ?DNC}2-F_}cgI9uk?3DCxSb+3zSb+3zj8p%H_N#wG`_;ey!cXCEGNq9i zhRF-FV}9PBgpXRS4-emr(w}X${_S?_e-Rk?!G`Bo9(?ii#ly#6Z0$bkZa?d84Tpf7 zkbP<6Kjk<6Yd@=It#77rtP~dV&QJfp((E_W_y>OD?VnLq`I~9{XTrw+j5Pb+jsGcs zLVwn8{5wDU*Z*g~^`CS?f6i}w@fZII-DafEC5`_gHmXUPkKn2pkRq>43J)b7{QGN!+-E|Q;KWm^tLWEoZd zqgJc+=f2fy{XN(U;fwuNtMvmR#vY#E`=HhO5rhc(`k>XCNSVL*L95l5 ze*e-3t=2Qx%;69Ipw)UV2BH7>gI4Rmmok6lgI4SBz^UA7wf^b{t=8X?cK(wOTCG1O z#-#uBgI4Ph0;tt${k0ETtuJBAZ?#%~cmJnafA6E6)n9G>%fIoh)*lg6Y*a~Eec1W~ za$ldcS|9$i|M4HDqgLy~KRWy~DGUNY6E+cl@>{LethSCl(+6lGX|>F6e{}uhkFIZw z@`2rV!9QVMnvEaj2O0i+wfXT!QXqLf*((O__v3Vwpm_KOb}skkVOrpYiK_ABuw0Jt zMfQ2$kJIXLUZ554?e^jG<0N}DD)I8;k2VhTB8dmbvMV%c*6+MDwOzttnhnj_aZ)4( zFn=9wkps%x?|vsTuNKTO?|)@S!<)u02AK7C_XoFKlj~jCe68L=v z8h@i$2=Z4U@`-F1ef`=TGDSHe5F~HDWkj^KxDksD=A{0Ph#b_@k1XubD{TtAqKtgR z3a${GSDHqUyiNwwDv_@G(aV<`lej1ovmfbSUm2SEPV|m|S-31%(ZZ&AYxbj8ucA$} z&p_4y_=@_neLE-=0cytbk)rP$Qrf|&EdZO`_gi#+-QYP)M@hd!pwbjCnP{mf2m8HV z1iIW9=Eez$Lt^*Y(p2=i@bDUV`1&#$Ht}%ClhmfFXpp#Qqsq&wFqWH$cc}*0g$tWO zo>fU!m3`qN5t zR~yir28jifK?8}$l8qMz5pMK@IMq0sy_9ONGd_fwYItU_RQRgI*nE3=t0Lf3EGhQO zV$i@wwg<4$TUxwp0{%fho{W+zxrXt5{E-1e&ckeNji)ipEbHl!jK(OEsm*z84ux6y zoC;n<%qUE3&S2&lv&o~PfPCP7ma9A;EgvS;;MhzjqdXq=&y&(ji&4MRW|QR$di|mp zLC`Em{xV3Shr7X4ThPt4Op1P3zf1}->J z&;wK-un=Ll#>@g3WRE~bl{;-$-Dy5tmxLwcsq2>ZxWDi-s>J?+uf(qSTI}$@`^%)o ze)YfqWzu4y;KQ@6}79vsJ6mW&|1SvPhKqn>;J3@hh@X<6lCZU)ladnqcXF{)!@4KT78 zv{x9r?qgh37I4!>;a5hNj`k|81Ge;|Z0I$$7B=-{I_8hrbZpu;!;ia3H7ziRkI`Cs zXgV)9MoDJcPp0Enrf+(zDbrZcP}GawQc=N0QUc0JIyhk%J8g;!`vmnDjI^~^6|Y`x zntB(2y50xF6EumY(0E)_uilzuR3=!hgnnt{JiToK2CWjEGKtpOqar=8(A$qc+9(JI zrfqRSBXpaSkPytvwm+$t6P1Y;BC|s4wl4!;w!?O*07xdJuXpUuaCfWoyZch;o#q_# zem$J{e3E3|tca>apo?xUwqxX_ONQp@o&;BgQMi@NEXWT3sf2FZO$jY-{x-N^TL075W z^?%HU0NI)IJwT7L)7@m8pC+a%rpab)K{j8JQ`z5W+X|w)iF&*O^?2jDw7r{PndBa% zVUoY{d27rXP>B^YISPSU8|5#_+E1UWjvZDdsSXQ4@X7aifxTwOok73zj(|; z4L=5^4z2}R;9e7uETH{0!}LvrDT&ORH!S53@_aL>-bmg5E5d9k}?*X_1)Zbv&p>=cYPNOOt0|8=XkT7%iBz zH05!AmMzKb215cmc_>=Jy!7o=h`E0S+47I#6VAqe1h=bKAK(hfEN>y z_og2uD>n}h2l4RML9e%Z>(1IruXlS8$2ZsFmDQDab#=I&+`ZH59o{@VxH~vpzqNYU zTaEAZ*5mlr@Ye0yw=J3jOG?0`ebe@TYYkO+Xg^bu$}G>UbuK-M77TeRHB`l?FRFdLz46xEqiJ`Q1gyydt9nD zI5?psc2_=Z?~&F?@8oaXUj0h#i^2yDW==6MmY$@-!`2dsb%Ehb$}KI?T1sVRhgYy5 z4@i&5Qfga@YpCl?8a$bTr?v`3MGEY)-hQYPg>-?Pk2D}AmuSJ{(`quU`q=Q8xa^)n zj+$59d(kkiV%~kp(=cClGB&DwP>c@EOEzXoFZ|iOnn5;bV0N4uYvQkHL8z4fLBgeI zpR0=j$$DOHWU+ZM!EbK@by;{Z848erU{|52EzVtDw1CfeN=dSi>g?!i-^NeuIKxrA zCi9S+Sc<92lc;ZDHsTjbcWbm%M zH$~{$|Ic}Yq)){AuAJ8-edmdotubqN!s#^$L)(L{x3t6f(mhM7<9u3m2gT@{kwHW# zWY20l{Six2+v9lrEE6mNk6x!G#Jc6;IjtdF+jW*XdO~gE7O7q-h zjM%TEA6&mylmlo(U*cTLe(~M?>^gLlB&+&xo+%t)oIsXb$$>UoZ5vLRmxj01fd*}t zQ+BN>6zX2{0ARgSEc7f-eRmwqfxr9ikQ2zO)i=?S@m_EhY&fl3itBLW1T)uhFQ|^8 zovCkH$4-^Z09h`5rhj~_Yi{y8vX_0g%Nij|l8k3cq?NLk`cU)A- za1$HW?jWCL)n=P#YO|eYr|~EqZnkB1Hrq@1wUi~VEBa%Y#P}T_;Y!5_3TDzp2dTc z_$VoTltpW;dT!N%3?~X1g@TmigfvaDM2Ox#*$3t^%`BTgg#c9ZwGsD7RcD2XR@Y zakjFyJVu;dm7a8Q$R#QAQlkG#GW}pgI9d>!VOk`EDlg6r{0Z1?o~A=+JJ?2x$Qqh* z5)Tqo+8Pc`Y{u!J$oC$aL0k+iAZO`Gx}@C_Jb1Ib6KB(Sw6VuW6dtDK2|zG;fn{$x zF|pa*+UerGIZb18V|kdCC!`@%=aZyQaU_QR-yO%VyJh<0q`%tRG36+)`b9jxVU6~~ zv@p>!2c8V#NjZ+Q?nEdIiXa<8F>IkbLr%~1(2jGFyt6E|5vZQQ4v-$2X$g$nm`;w0 zc$jq2_zhW(KK^Jq&8nn0j0ef`S$ddi*R;iy?%5#H27uZIchW}>2R?JWSx* zGx=y}hQih~v+Q9Ccc3(tf(&Z!>quq@%7#n~RzcvI?8%nL6rwvzD{G5pSfqGi4)X#% zCxtmni)56PCE0my_dfgl$Hq=bY2t#&b^=dJen>=JCX=|pVU$R#!qh~9XvsW3h9xL1 z36Kc$c^020tG0wWj!ScpB$*ker|B>mf|k>)%FU1}4JvJ`+~E4%-x=iNh@hkP=yx|B zL`$e@hk37mXK7^>#wE*iRj$;6KQVr)qKto-7t?XbaHnZK1)Eoz^}jMvT#N&gOT&XQw{QBpso5uby?*Ds*}~luorrq50gGo1i6&ufkWCF)0H_xQc>J4yH1xCkgj{z4S-n6CMS{K zku&x}xLvUUx1IMjXu--OatkTUx)8xcykwqcCN?*FHy3fD2!`IcB92!4jpK8CVFo4? zVi7AR$sj#UlVL#n*COcfgfBMhkhf;zPpQiCi>k70?I1(MbmHqMPyWu&{Rp9#h&Y9A z62x78s5KCJX@5W;`CGplZo2{jz#8ZV&h1fu_{dthDzzK>8^pnjr_Q2AY_KAZst@wX zd66C+SEe&qFsr@Zt?p`X^)~PK3`gJpy82k|u|Ej)MEaCgGA*hEhJd;o6d5L`=^*KX z1{awgxt(ywNE^0VgefT!DYDau&K_sOazkq4ydYzPUa5uaNpdFmi1_Odu`osOIomR9 zmEvNTxRf;5MMBFwn}q9#EyUgnYnbpYpI5L;v}XXb)=_9w?_waeV|8G5V&2J$DUgRB z9FLrHpwdG)ynD3pR@k0q@d&d~+t^vNjnb$fh!2qBv>zG2`<-`0j}=vc-%mS1v|e-t z%kgzu=K>t~7W(Lm$Fww%e@!-a{`YHra~O|G@uh*z-LfQfmuBx{T&Y=85P#9oy*dy$ zW|_<$jZOaka*;W?$!~30q?bSq9#zZ2pgn##E0#A+MQ-kvq2)PqNU*!r$*IXs~>pR zLG(a+GzX)wGQB(ALC8R*URaK@aDL@FtCK}u8}^0}yjQq`mlnL>Ex|@mS<~E$Vzf6s zJWOAkwxX1)FvKs4(L?NwU^?ZPd|UHDQdDrgH%lm~xMc8`^sp2yBgz+Rr!0$`9;nebM(IM#^9m2~Jvryty%&WJ{Wu#O z=S3MUNFYI3B}0lOKoFvRE@_0K0-^=;wTVdceD4POCW=R+Xu78F7 z6~mbJ?wFP{YE)L4dblVVsVV;RY`- zkBUOa;{a2|hq@u<&V3WAK~OENgEY9B`l?|o%x0&OtOlfu+Dn`<1cZg1EHxmzFwnNx zqpe(K?%~5T#FT8045~%1ASt zF1C9l?;<-X5hGuW?6OG@7CVn6@YJOOKiobf;oO$A^0dg5Kr9KU$X*Ner$Q z*c<0e;!aFNX-8{r$Ovy-z%!0sd`z>4n7h`Q5OR{Y{!t8jlm@nN8iO(&xcVXj&^aJN z6XO?=nrNR!woaA@iEWrp2oP0znT^Gg01zaY)D4QwWXjsR2(||`ZzK3>^{kCXYz%6{ z65y?cCWzg;+=9hNoa(y~XT@?;V6I@Q0evx{htQK1NhuK?mT5sk>t3- zE~xC@Kkw2em^A}*b1C*iD6We8TCIOWFdsragKEmQJRU3vtt|}!=hDR?Lu$w1tO-D&MBPL3-9LZuL`a*qJhe}{&$Rm>DvPa{9ig*4gf>Gk6$1;C z@}6cfBppkn3B|Van&v~w;`wRz=oGmHJCRJ_TCd#P&mfnht4_&&)b@-l`w*erf|we# z>D7joCF|n+`QDFy$R-u);wp_RFU)1aC~>Ml=bP)>4ZJlr}3!2*27_hZi1QVw`GciewsDW{cQWj zDUOn4iAj)0lD5f<^Y^>I7>$(bAWRbqIn!7 zqx@`fpGDCH>WW8r%W{@PvSMJJ~9M4JajLwKXUQX>TiT%Xe@v(Agizsju=?<6Z4OwF^ z^Ev+QUs2ELpY%MZzKY~KQ2*<{`}-8+^?&sL1qFE_T@M_oLApsKCiNT8WTpN)xK;n1 zU%8rF)vpKrT1F-zgBxPFm*dj%73F4JsdujCO8q{kI@vG}^Q)3`Y<_6vt(#e${Gtw zmP3h%(ozGsw&39Aju?xVI9ruVTw(DhFe~Y2$|Sls9hYC?XxF*!m|T}!-*?-|rpmU! zGPT^!q$@3e@jgrrrbnWlZn#FDA>j^xqt?uI-SpHeF&A(=!9WlKKPj2}J8jp{)6=9V z(jiXFTOy`i!NM#&IPZ#%o>s>=6~j`|bYQqyG?bTbk>nR*tqN04Cpa{>U< zY$(lHG8$2M(6$*OaIG>$!jwIf@U>)coSQBxn4yOV3Jy!+q3LK~QBe+-lC!)RFAbAr z+?28W@X`GjpDi6%f2ZMTwCy{>Cb-upa1NwV#siPqQd_SSE&udUwP*xLGR?T5pa z2wzAf{+q=CM zZJO)R&09Bb_SSCRyhUR&FG|G8!0?vO=HjKdu?ENt3{4xPz)_J;CzxEtu6F$VxJcq5 zx?byP2T3BM-;w;Ih<>-8A7Uztp^11X*3$2GDth;q2^1E9r zt2b}1udes*@Qan+`klMC*Vk7m2oC!AbyU5zdiUm?TX)uO5;mIqmtjPmcr;oFC{3{n zDE(4zj`MNyCOaK&JU==bIa(0cgDKC)2l=SP zr2AxCdbsqvEWe*t$9qzzCVHPs;K+k~lowCwpr00T@IOotd$^4aWbu$M9&_Oz>E!gL zT>c*3FDV?N;=Sz8UMD;%Y==ycdJ1)oam&~)gEYpKg!ZEMq z29)oEQL<=8d3MxA?8~A-s*yB1S_GLTqkMuxF>VBO94wK91}5VAz_TlYE#GdEC1-Oz z>*|V!0mUx=lrRRWnR1;z|QFEPxR!ClfI8WD#^KQ8|DAqK;P;@iv zRmW?E{}$BY_Xnkgx?8Dtw_TRgWcY|OGI_m%_|P4T10LB*caTN>CJ3;7UgfWIfI(}# zc1sTNt!&5(J_S22nn`^M`K;k0D)Qt|q(@ihK1bX~T$(5^iNw!27?;V%y+ah6>7n1O`i~}J(H1TPijzDU(`(b;1DWD^w81cEw z@nMx9M4W7%o%ATni=;HaeV7-6gwqTCHVMk`K}35{2Er1|iGSnKS$tkfhuYsFc7_?r z(tKJ;ha8qKI5OSlW*eI`dB$5!pv;le!{ihvU$(QsXgW-`pQ$uZa^n%%=_TyC3Go@q zLqKyQphu)iGSRc7Jc)~2wEPh%J%0X7lhNB-6C8{T!)}}n^YKH<&v`Fu|M#8Q+1VQHLA2TM%V9DH1dXfMfz_tOm9*qRXL zZtZhZ~&J6OpL%+K7=!mbOgDe=~$UWA+1O zZDr@4OAx1|N^2uyyXw$%mQDAb`QZX;;$4*xXQ29%Jew3r3Ck*&g^r|z^F6^SlA6dV zlj4iCtV|S7E37B^v|1|C!$t3BJ{sZ`s~*=49jmieHCkoj?A#0}S()3si}x{noZpSN zY`(pmz3seJ>#`lMo1Z4dC_azOt3_CL->c29qaQRjy1&0PTwbD6L6odm53Yz#(3B8( z7F)-|81CW~23o7ht~{Gd7(v0cP!k@!?t%q>h^BUaEH0uRXvLOqr<-Hw zqkwG2InSt_-_Tnsy;5kA;0e>lp3z3%wH{%{9?ymuMf=$>Ii+>DZ`$%F>2>uoyPSAW zipejOY?!W#h>P8kGw0F8w6y!;37t%L5!AEj2O(dGe4%v3zWfZ3kE9)pLW+r*0eB8x z&(dLaY{qeMk`!h?@_=r}Ir+jU1oXNo(<2;xI7>+OU{ifAsg&Ki%;r5^;KlzYK3F)- z`TI5B3nWJPTZp29W)BPQFN;Bt{p`X=fA$}%x%QW5%(b9--&p(apWgiu5{}<`x=yEF zkWU@P+Fk!d?#F?h3#Que4Ggva{2yJ>P|I8kI3QevqU&~A%L^zoW2607a@=LnIf!g< z;iK1S_4IpowGtN-kAXrTYLV;K#zIc`-D&n4`GINg;U+H>_bpS0>1!kwqE{4qB`-h& z+@U%yuUkGmOkcl)lw%vI z7<55p>IW@_=5kQYXDJ`9N@0^SzebwiBGidwK*p-TYb6I!UCXdFr(}mCBk7%9Z~1WL z=3(#dElNM70C2JATc4R|nw@0%8D*sjzf!7+Xlq(gx(0v)Jz|n?82?DjqB$Z9CSW@_ z=g1C}$g4$ESXtXx>uvPb%+*^QPHH4FB2J;({Z`p~sLfKJTH$_l}VSTJtaJ zThlWu>wNe^kvU9G@8@yBAx5^3Ae{36-|4I~s(KY^*|T-LqirPqVI8PdcrY!tiovm~ z6ZGSs-E8Xa!L(4!+D?N8gxq+5*WKQ==B;rPl^)@wlp9lnJas8w1HD(!x3fRby$`$-4D13#dDqQen!$)^B|mmgl>NtKxZz^xzIdd( zlV<6|xJqEv+NAsv$> z7RSwa;=OXkw@dPS$$Jkvq9eGIHa*zJSX@J&CDm4ed)U(fbysVu{>@bsRS!p% z6f?s_)jBXn&<#Ev>?WtF=0=toruTbEk;bDZl>epH+`*Sgu>~_&&{~)wS9rp!8GfJr z;A#ZG-=C(VA*S4`vHKK`MFl~@es*$%{A^WRO?~7KrbUrt;%ju|>^k9PHE;(70}JNC zReL%b&S11LyOYA_8K=Cle3n%FVFuNY%0WCy9_Phwa`fo6SLMNRj3mBEu`?Z2>15o@&h+X&NAs6L;L;|%%(EVvAj z`?y^`o{mQ65ArM{y}_%uT|RuWw@Vi|r5S=Nw88C?#L;<1_v;7)xt9-Ogb_8C-%ZM- zdQyd)zjN|1^-)VFB)saoV@#m;0zW@Xe6ju_OJA=(%zYMkQH&mC17?4P(YuPmYmRy0 zi+td(1h7J?i_0tP`;(xSkqgWFj%t3H3qGy--^eTVI4|barSJF8Ut}qUB!sKO`VvXD z;wsrY&#Ks`sai;a*P&Z^Asvnqe+=&1PI|;qPhL$CSN{)t9jkqIkB8NV(VMpdUyORtdpNk8oOt&!tk zYxX$UE$>tZEF091wOlEp;0ogrl-jhZ@{Jm-6937EdF6;S``j+XnqW%~GiX+L&D7m# za~s`zkqk;w7|JaLO$1`vPO)g3cY#U@$%!rP8A&5#Bx+4|5q6pq)CHqlQ`02Z z;H-foLQsa7U=9te&mg%$aX&*frS>~^&l1il@BX@nd4VL%ah1SS&iOefF~WoF30Wll z#qEI8GFqV9n#@(^e0Ik7J*b2`ESNGDvOL(AD20^FnpY|T zo5ILv80)HCI%$HFWBDPH7Eu+lSkb~IjIO6q$&N~=QGM}4*pWk7oUbTaup&v0O^MYOCpX<~Chn+MFab2n9C0f) z;QGeTtzTACtnCZkdg7A-(~s0?56A5zS9jrf?@;fk!wq(OM~qRls_lLDT4kz;tI_1S6Fn77vFn-`3wq`50tmM+f)n%2|kWuW>rBlAh z(QdoaR=g3{By2DZ zbk|Wf9Y?(9!m9m{-1T@9R7(F;3Mz1{JEG%q*!F`fBc;_^5LQZs(^BE1>x;KK}VLhMLi4m*D54mZ>VPqpgS zlCVl|4dgojeW7W3W{q|F2cPdo2(?l-U300|>$iQq-^(8(Ap1=85_3U!725--obZyI zc-S*VMlW=0tZ#Q)wQ3IAJhD#P>$ZDO63iWec&#c%J;5`-U120`I!rkujW;w%d`gU(de#8=~HYIc^pJWM;rR(yRoED`mT)C<ig!`^LAAk2q`t-f8mgKvVwenj_9Vg%bXPX^bpu%6I8uZ5<0wCfDW1|NX#J|eMnRRpee5=efj`^5u6x9-)~R9r)|Niva{^Fo zcxKejmW?O0bZ6rUS&DB8~HK?0E4O^TvHciI?Y_g;jp6#T(hKn*2gu{lbSdB*P#2SKRloZ3qWXQpaK-B~%v#mL#@L!rvhn3)`doyI^L=>4b zaou~zYxf%kQW~2BV*~DG`S*}Ny9zcEL7iD7_zLNaEyFafbMHz~HT~&|((oszej^9IwP9r|OLRq-wv&12O_J<@3C1GLe-7fQya zz8YuK3Ij>rQqBm4I{UC@f*YzS7gfq(dlbCiAc5<(MO}(CNjc7!$UE~2t}NEgYUV6I zI?G0XHE1KGg*O-OeD!w0>3ufn&kGow(Ez>ZL#N5SG#f=WEUUtdlI*BD?!Po`Ey#*% zHXZXd>#IHUicVwoqpkZ79zJ^f+2`B8@x3p0o;-c_@9pkAfAQt_fAhEgbbK%vCWlAI z>5ooE<1C;2PEl6V)3ev-KklupuHC$K`_B4ZHuTMf{`2HD!LI73g5&OUe?Ood01PC+ zfVF_IY%$1TlUD)&n8E3^e$Q0-1&F)3diUnt+jmy)-XgmwTPSpN-ia3kj*-#gI2q_6 z7?SAmP@7Jb;VWzNzOzi-j~#sP-iszNLXk;$_f3?-C<)|T z-hPnfbSWM78(MrNhDkMra+h#`@{Iwb{3wMYO+9)ZLL9ZRy8_-W7-f1)rHj{dGpXSV zHolKT`6O{6Z5HKz;dW4lxe$nQtmEygW;)<++iWY)Ugafj9Hk8n86dSJ5Ua;?d{eKE z*nZ^QC>uKUV@I38y`PlEgYwmiz1()uGwZ%&43V@8M^N4;yQjL8vdI)fXK>lg^aa#Q z)9IN{JQ20Z&3b!I4fS^6-0q{(4Z~gS?4*ciD;p+RwVO~bW(CpiVxJWWE*`NPean`% z#Fuo-yH{e>k-R@BZ$N9VgpiCKkryxu<;P9|7BL;QmND36blQxw@4#h4D<|a|ZVTW` zCXyw$O@ML`1`7d(?)mv7d5YWSl`Y#mF~KhUizEX$>Jn-wAqa%hm@GxKf}&0?JImH3 z%yZd^_Q|gAe3T(nf?_W06Qi)8QjN3|c`iRj10Gqjl+b2DV2g%zlfE|yXa~%pYmbFN z7K30GkXk>>DUWEaN0MPmOcznr4As+}qojH|ab&lu%0A|vS?_tOwV@L1g=9qc%$++- zi5!k)Yu2ZiDa|)z3E07!qQ|N{dQ$<^d?=14O+=Jm!aEp87ETrEbZ867uRH^r{fKl? zZNC+F_>THvar7Jc0Rrkl96!nr_?*8QQfm%XgmH5AJq?h4UYsMEjS{mV6PKAx4@T+0 zY(JAMfkR2kRVD?Fkx9%kAVa*d4G^XWvbQ*Qao$7?ZiKi|!@Erf=>@yEwIv_+Bl6vn zve)%8D)-Nmva12Z17HIkbF#ty6j^lQvP+a>5I;POtJp;k(?j7y{abp8$h@#kC^>{g z?6@A&eHibJlL(s;>b$`pi+QhQ@c+sC6BR@x&J5Ln_Hc&M6?+dlIMfVl|3(wSYUBBV zU{2nN5-!1tB?TJ}EE?1VD~?*b+m1zEnXZfaq{ZHS3vL9du@=N}cSszZ3?p4YYlSot z!!_A6Z30DAepQ}akw6-HJAPe%Wk65{Sli*acB}Ns_qi&cB7`&`h_H$`*{bl#_dVP< zF5%0JLQz;G-atj}jK&vew08GQVxQG*sIpj%^qVR>X63djUECpq5Uk{ZS}97BR^q)T z#{&U7VuJ?W#GlR@SBJhXnP@|ZrLiWARs?C+tjc9(1ix*huD{u+B>@{V%`HIV4K!N` zNT1W*Y(pL_s@+QOuUH9`)-PRLy@OhHdfKbJ(26=SNrWB;PQ65Mc41yofGun{?Ntf^ zvWuuhSqWX%=<3OI>=E5fojjk!m{@2!c{ZO+$I!PVuA9(?W};riBj(Bl#g2(?0thLn zyr@1w{RJa!?N!CASH5+EyU^e+zYoE&-z1u%*z}@$rPF9ho5n4{Wdsabm2Ct_zt$cV z>3M}<4N?~?mknfrhStu^9CFOl6`p#=r9OSM&W6%LH-Lh>oun+|qr~4L+IbV*%B5Bg zINZI~Q~1GWWpaMW6UB+1eF@N@m`*+ti`EW}A?uxEM+FB>tU%CGhJGM5p z)Vt#aQ)R7Lh7o@UejB0pkWHPoRF{5q2M{-Qbn zCo;UlqJHQ|rt3#JkiH4_>FXv7d^_MsK8n1cW!`?o-ik*=2eX(u14@7m2&fMU&b82l z_aJWGJEv>CDvn^8D`2C_`To|qjQpZRR)I!VCMl$r8h7D|cP!YMpBj@LPy_xNDxGFz`$F(~cU4@fetGXR?SC`iY0SR_gJcsT5q zP)*D$^Ql>1TVKE3TMvCmwfjqhyDI)5z$^Q*aOJW!32#R^I>fUGKq$JRn7j zoV1jC;mvVe8YI)kV9entE{_cl=U~dI&#a#@N^!3ZU)quI-Y7rID950;Uo#JOzu?s3 z=Vg_Q71cg6d4coD>q;~FB=;%uC_POwZQPmsf)EwE{)7D9^`_Eq;s)I--=C|b{pO8B zx4CNd=G${cFRKyHrFZ8#p4WSGtypkawn5D^vs&xUyJHC_zugtRVK-Kj^7z?5?CyyV zPWJBAzadMPl~qe7xB=HIBOR=2t6O)tS(_il+vh^1`V2v=p^hK=2+PBeq7>`5vI(h0`{`|poj+xbYFXs zn>OL+Lvq?qQ_>ap)#l}KuW;7#ab8Hi9@2~IqCv$N-`Xy#+>B3v z4_uYuoAiUjL&{$7rcRO6^Yr-nQrTZKqV2ui&p7k@Z?0e`NlId<8RNP3jc988umo34 z5s|jjbX28Tm#(T|MLSwBUz>>T%cAX>MYBFvY@}Ih_fHhvGYS#!t}?u z5~Gj2q^9##AjjUqlxe5;a;CqK?FnhJmqgBY4)w8Orvw}`+aNq`UJq(ggde%7uW=G) za`C%cLJgp>Pee0W@Rh z-K9;q8=aYm0PcC$Fn`^Neo$Xbq94BOb??6V1STx870NW!1-_?BTyc+6R=AaOnpqZg z^DxVvtio$#2s)DxHcvh96=e93FCUOqyiBmCQeCJn>M6X9`t~HfpoIavg3@OjxAs-u znC!$AGVjisoYe-U$_i_6ZZ`u}W*!3H zNao-lFta-PR@e@1FLxGPKZ~m>DZI1a4%ISv$@EhTwQ6fcjrU4%2!zN+i2fxz(LJ46 zx`)!L_1TrN|@JYcA;8Ca%j^;KA?9EpNj6j}fTu*JzI7<~c*1@o!M;x7u= zTSJDMzLjYD8OkP$R*Q|mTUgJR+dO|Xdm3Z!OKR-U{czAadxU;H;Tac4<~Jo#p3%w9 zXV0HKve^)ksq9&PW+b*2a*sLokPeI%o7wuEw1rw!_i|=EmWW;@H zs9;D){LQY}Dy$^1p6%x{3V#hIm@$M-8~^`~G)-ey7Z~@t%%9Nvv-~XFBXBD=gqLYn zez&)+7GtH*^YLVbA_Cx*`i@!Y_0T+;m5%+AtESVY3d<zjEhbmhTy*ISBDckU3Q2H`E$Q;INF$y=e%}~$N;Od4M9X^W z!&(V-zR@a7DSZ^;$q>rG7mG^zwPJBaKOri@)kJ6rHLcu`qFs&~zDhT}IhD0Dkvr6K zAbOm_Qqwt@85%IptMYucfjH3)MMWTuMZ2(6kLhy=mR zBt|*yn&@5z>#gvzy~K*F!E1Q57Eh{Fv$(L$xQXrRGRbBKZjXtHa1(VSf455Vhd)Gb zIWWd()B@MiKD9H%E*!^&WZblLz{LVe@Dk_SiBc5|7pl%(eqLm$#HMk8k*Zh1qK&Ih z?GRPK)0|meg);R$qr;Nk!;1i?z=O?oXX`i3N)L=(Yo4Z{%Cj;V@GvS2sKae9g{v5i zCc^z^Q0ZQ=Fvi0_5<Xyoa2^3a=2TBX2GvdFrHPlbL~DsI1FI<~S}&M2RfDe6`>1 zEWG*7C*S?*?f$+dC-zkOKLp-n6^UUG#*+1k{2pNNPPD&IyMLxcG40~>JZdF+;OSM# z)j+Y2G|hV*<@oUQd-H`CS?T@wDND1AQOXkUf3L?^)s-h&p`}-3L5)WxwgiE^b8*eo zeN82@s|J1S87Sy|6OnPmTU8@H1R9x$y)+U@BpwQ?O>W-gb&4xq$gRQgJic!Og9}u$ zYn?Wa`fC&Ypz{WT=nV}+LX0{Zt3;(1NQaQaAi-izNZ>U4cKCwT8LZnAiF2@SXJxL+ zTEi)Py%=U~Y*)hVH-*_+-|vlAx1-ys-^gPTYuC|ndQ#*}?+1B4azTaew!guMubZG{ ziV=QF7bm}jxdVT(W@XzvB_T;)@mKxpFh4x>(zZsu#hZ(_7Vj*sFRt{WTH&1?^s2F$ z+-;{#O?2RrQ!4pt0@TTUqra>5l2Ncc3|}I?Z0z`~bZj zY%)GE?VSa)V%8L0Ds*|`&(F`#=fT(Wremc(9mC=LdA#XWyj8FG`R9H`qO6`Vs|udL zH6G8DS~KQWtyEdgl)7yU-EBtL<1yOx!eNxT#E%xVDxbd?DV-9QR?SUB4C=e#5VF~S z^ZDoXH{-Ec3u~37xoz&)vvV2>*{~44q+Y3g5IcHq4~P8k=b!Vx<1znRmf9lE?#2a6 zrROHM+#!gvRxzvVJMke!P}}K%GhdNm!v1E#R=b%wfI(iqB(NB4}_v(Kv{J1h-^@<9XAp_iYAd9KY_b;Lg7= z7o=!0HnB5pC|*imUepa6$SoqEc~U|rPlfPvRlYN=gC7ZQ90(@9n73jGX=9Ye0+CBOtP((Ry4i+#yOl@GW6;_g2Qpm*Z>VW~1 zu>0zv)Y72@a5Xq0MGX1-u@E6@#tpYs>tD)cZdL<#f^vOI7>h@g_+%^pajTjk;Y z80yvU8zx#ZZE09&U6>^;>XvZrU;3o=Mv66|b+-Sdr6m|U2e8*9CB+mbuhX)cb-q}R z;eE2-mo;}&RJRT!Sih<3&?WCKyXT-B9Sdo_>Y8_WnT5#BzkpP`q8j|p^Dpj9?Sdx5 zzZtm!y4i_o0`rj0P)hXwqoUB&zkz_60z&cQbVKogzdOTSmA=3SOj;_N0@}jMI&o>i zfV#BcA0Bx@1Tb|;UzWUZX24R{9DhqROv{tYNDmFmblO3NWCwIzNO1(^r39y~zZ1ow z??&imsjZ372(o!}MmOfw$&AdDR%@7%>GL%L4A1)OMBwQie3yjw!4t7_@_alwbgo1j zQ&?X`RPsL`PaflJ;xZ=LUv$9(z|4^1SV+GKj) zNN)Low&p>R#1s;VhE0A*=wNVM$8BEAB7#ygyEGBA0vHd6b5Kl8bjR`QF1)8O7dIXw zsq!iwb;rp#FK|Y5*{rFgtVI-sF!?fCP(2eilX-!QJt6#L@mPoZx(CxvGi(JlG zhYpmW(DzgJEjFLj7DKv5@sKzXpr~~xRqRYNa7;dKds>h0kRb$(VRK4JZful?5GMot zEXP_aj)BJdO3c31#W}332#~rxc+9c(E?F>u3|$GR6)9S;3TJ=Gxxd7b=MetN-AE#} zZ5)TM3VDD@IdtqaaOVnevoC_oC3_$dR!kGpK1pM;X4=3WWhZAf)cf0OL7!?-aXrql zkSic^J(oBYW+P&1M(g$p=C`*1f`y@n5z^cktU)4}75drM?wMZcw|3oBIA?j57bhj1 z=>a;DI5U*3rd%|mv`UJ2Wb#Z;Y;jV*|u!33CWIIC3WVZM(^ z)5-}F*ug8`theT?aE0;>HV!u%!^Fi`Q&LEZu-3+uIcCiaZ;kO2H7cvxio}zC&NJo= zxlhW+2+yaAmvTC)C`%}-A{q#*C%8Bm*4-^B4Fc?Wp{jCbz=j0H&tA`;PEfZ0%%U|4WK@GR;w&aHZ@w;o;4q}O&HWDXw0qfvtM z=>cgl4Jc{+&NRh&W>>=YFQj}!v)UGLl z)w-I+bgnm85%5@(1Y*dUm$k2MW7BYj?MxDA5af)K+a@eS3C0TIf1b0qc@Einksnm1 zo@1CgMT~Xd{uUm0h&H@XoyXm}jmC@28)k{Cw!$`{tA~Ax+KQ!mQ9>tAW^| zd$u}}@PYP6J@JhLZR&+GM!vNN9Q=&|vT0C~3duRw?wL;XWjq?vJq_R34!~!$IwIzV zrZ9I?0w>dZy+ZLX?Ax%Sff8cMJ3(As9cBbV=xIk30YZBM)tDvn1tE#iq9$0hYtS|p zpRY{x&;j=#tJW24l6)c&%}>tfQ*0p)t}OoyNwRHmyHR+Vdx-_xkYAj~-PY z@pM$Ba3Ryb%hLPIvg0-HmN&>AngNDZnX!GwQ}pSR*J!; zZQQA~A>u}*&gIiFZ;+x$AkLUDzOZ1&OK7=ZI+z6AvJOTIbXJ$RyUx%2#aoR%;ie0A zTJ6M=f4JF^Yh&lU4Drm#b2b_B+JW`77$y?ZSHobfj1YH2u2e!&y)-h}6C{kHux&ld zjKt*xK=+<>$44_7Q?gPw7uBqF$w>T-{D3d$cABkxkqL16l7=`rLzLa2sKL|Aaqjtp zXELO-5aE$C7|+weNm9KBBo|DWRj~aV$c+=o+$V{|`eb_ec6f0iu`1J~1+gFmQ%|$O z9V10JvUeb|T)0vGv7A8#JaS;9Y?qJIqO7DB2gnsBh#R1r;yo6!Dz9@h)aX)#s9iPQ z6Gw`fK32(OaKiFWhdaCV0FlYQz7eN553XOXH8<*SPip9`Yrc$}t>N(fF}p?4LmqSJ zX5v!Jig^k+V65meC18ogiLdRc&5lQwx(>^dIG=*M_h2_#Fzv0O+@FU!a@Tfm?0hXG zgD!8UPc6-zP(nTZPsT$|_ZEa-<^Oi66ln6@sP+*|zHtf;2WX+?xL)mFc3$)V= zBTd{MQO-`(B^E=9gvGp+Xj>R&0E^p*vC)7wVo!1fhoek@Oc`}J?)70V zm<7=1iUvgOAfr-6i+^dV<2X}j1mbcQHVqKG|ZrRl7H zU2Bt?|^2&t| z6vC)QxDk<9^pZZ`GhreX#2AJ;#SAz^QAB+~lDe15&h=^kbk3{?)2_TnKzZp?O z-N9)vpN|d?`N9iV83-2HAeGGAaa@6VMa*9~k;sn#+rJadf?0eA$g^BsR&jw76Jug8uvMN75*P`@0#0Bpdp-dXYlg5OQG`s9Je=a}AQ8hRv)ZpG#h(N4Wf?w`t1h z!H<$b)o-tCnlWb=?zdMr%_z-I`t7w%Q>LRNtNQJmhIU|V#?nq7;j|4O`Pejk3Puiq zw2?8nD1rkbv#_X=E}R;SSKThM0Q=wcB#h)e*F{)gBffI+VOkF2Vu=09oU7EdbEK4P zY`uH0?KinV_R={e_am|?`Q^z1h=`7$j?%GnBkrA#5AxCd^A}k<$cLOqOkq>R$Tb$u ztw_x%Zqz9lyyRxfN3W|Q<_|0m<-O^MDjmfK@nBj;{b>JjZ~yM&{jEFuTXO!}z^)S) z<1QT`L6JwR`|FSQ@AotY2wtcBjFPp==dB0(>vw9OrxWkvZToQ$kCJQ{7q0KSYy0cB zyzj-Zi`cgALH^n+bZ38k%@sP13#9lT6iJM{e_pw@{q?)Ga%t9FZrzm|<cYuuI;wb6nMVuWa-9cImMt)O|_qQC$ zaM2yK?Ch#>PCS=+zs zCS{x-fVd{ddFBJVwtwFtXfiF2C#m23nm_5~AT7(hAojuJJlJ1fwSAX^A|H*y-W|P^ z<8+jqcPDXC;i{SLVLb4l*t)fU-x0Z##Xo*g^tir%f6MjAZJwnWBEqOi#!{7MM^mr) zyX*TtD3iE2871B*yqPa2NisO@9>k+jp8JSc-QV&?Q&|e#dboer&9($U)k)ARaGX{N z(ionecRBr`&teZC5U`ZJT{LZ9rm_AbLTx8LO6huz$IDy;OnYhDlQk9^TqXOxEK z@2*A~%kJ&ZI*O^TX6K*T`ZNWnVdq1OkxOt#+6%UHqBhY=ggu$JnUL+NL?H2IQQkp^ z*3}76F|ND!I@(a1W^Mro$YgRokl{jm^mzaNIv5)BU0*aG=Y_u>yJfRMX($mnBz-h2 zl)?HNe0O0!{2F);mUO>m*xQ`3O3_f$A2rFws>Y{~MbCzSVcZ7Sjzt=O!<1T!^is8l z#{@-(jL#GXLe_sm2W=;$rWeqJ+d&%i4tZ%_g^8WKihwMbi5FS=di7z>W)(N!jY==5 z^t2Wl4?*;z7(L3M?zlPQL8`ydtL4zHh!a1Y+s*Kie{0^MSrDhbM$)EKl zs1unjS1!*JHqWRJc``kKFp-k#OPIqCoS=X@3j|nG@`3I0;gh}Hq|8Tr4omMMMbOs< z?m`%yCMJp}=~9)9lA|IXBY$j|&11%-r*CAh>m=QF`FJ`Soj=I4EE!;zYWou*7lOmg zVn4x%uy>vfd>(3tHJlM6G*gpZ!#lb~<`8Y~DwSl64I{Fx%#KArJ%|U#Nq8;ow*9yZ zlh%`J;zreWAGu~@a3w(TjhX6*%c{xpV3a0VMY;l?u4q2MA|G?S>^qvJ7IH8DIxu)(?uHx}tej$t~a zgNQ)+k}7C5B-`FYs2e5{lOrV1&-e;t>jPSKKA=l#p3Ajt&WuG2MaXKR!BIL$vXWEa zB0v5J_ZQRg3tU1{%c?wQ)=}>u$F3PF8&!V2ep_N8JnXVj47h!g`>6HtS|lU70W;6c z?(+wv2R`_Gmv2N7Sjph^di}OTdC2lY6Us6vm@JU^rR`(n&B@@sBtP6wz>1M)QTVH*fCTi(rrjQF64cL*X@1yKq+b zsE7y2A>=r0e=N2_TseVH+1o##9wj&{=e$*_gwW;g^9(|~qT-@Ud0ae#x?H6UIhrZ& zs#k_1I6)}7f{=X{y)n$PuFNEu55B%{7>P#31&z`1!{E*Aalxxy4#28GGT>3yRC0E_ z6F$5wK2erOCaT@F%Asn6Bu2L$L+hx9<(F|mjYv?cy7u%n zVqnlD%J>7GvlqaTR1A3;M;J|hcvvP?-!?Wlo@OU}c6Dv_&h2%=j+dof3C+8BnfDd4 z8Yv)`k60?`D0K5HoB2Ssv(VjZ9;ww|C@YGP578<8uZg^L=9+duGxFal@;o6DChk@r zjfT?|(`2MU=GgBm+>$!aXbZAH;_Z$F+EMM?9~)ABF0G&Zx8P$ zFgEkW2C3zAE;GZ*T6pFIlM&b2O>jjf7x9z>`T8(9O$W&iAJ)-*_K;q7asL%*2@qi< zhREPhCq}*ey#275ScjJv(g#XXabcJYX}e8qeqtH_<-$`30tZjehrR8-jCf|A20Zs-){Gwe)5%aJafq685&Aq6G;yblY(qgJl#Q17bDq@@&=iy(yBD2 z1y^Ih1pImpw}-|f`#Je1JljpOhmniv@7{~jqbx7T_EtA(g(LGeh1;kCA#jDkESk8a zbCpS1CEkrUcqAM)FmDOeIxkjsu#(guCaEDNYb}g387ej5yPY8>yThT%yxIpb`GT8+ zxJ5qrEaDB~j zB4?dO@Ynhvvpk@70fik~oeF(A^k$1tQBKEKCO^8c2&oN-H0lYR=FFQVJMWJRFze|) zG_YC*N$TYyEle>a=ntFIi~SlEGk)f9?E9%_{8-Ahe>54F@Cdoeb)^u&s*u;m^`JaAMA7Gb;O z@&=iNg>477B7&W~p59U-4m`dQ5zibJ5Q`rvVpo*$qWO9DKRi4}s7A=Z!&U`O7R9OF z#rJr#cXMVvwM&CD!|`KTOPg2qh4;u(%-b`G5P@}rD2h7S_h61@as#Ns$uh=Mn>`a@lif$34cwzeHq3c5#?Ln} zD0WSo#2-tQo7quZ#vz{S*1#-&A}Mf7&#c^(^M99!TQ|l)*nW}cC#4ysCy8fHvRfSp zQ*Y(xgQ$1rDoU`#zRZhyw z4S{XC+0f&KPPD(erdB)IO>ZD%((!LyD)}vv1fS&x53inRf&;8fVDg99bapyMY$JEG zPL&r58Y+q+c90Lx7ZvSvX(`U9M{`t{}wxXC{^&BWmq zyM|+4LZ&|YutZ9v9vc&Bnxc&exwckaZawd7ExD0>93^`gfAqTKlT!lA)z<_dmbUhD zhE6k6mqkD^MAf`H-yja`>LO3$@F5FyuT*%R*68`7WSxPlghZoCuHpX7eu|S>3JQM@C96x zIwMSGQdKRIJb@Qie1UG;B}``XSgD@{7JYy7=?XmEGf{7;2a_WyQ6z$9d>nWjNd&T; zq!3#>8wlKAnP&z9K>=K75()YU|ko-?;ltl9x?$ z4ppK?UXeFZ=8zGEd+I2DNF)30IK|ohuEYgT03PMW&@t(A_*}cy9A;zJCTm5KlI_Y; zmUraW-iuM}h!A1ON!lY)kDc9sO#|VI;JANQB{EC3!ghTJO=*XC&Dn>ABzj3b+L8rl`srz? z^);?v?AVPTD(>$u4d0CO;llD#!?q5{4ZNRC=K8=%MvPAX;~@vNX9Lq5Q9Ca)R{JAGI`_Rx~6XQleISl^SRJaw>R#{VLUt`DVeW|X=W^T5b%*6Z6a%hdkK_n@;L)F zs<|O}5s&XO2Fr$E05YW2k?8j65`iLa>w9X!^@3CUt%3t>W_=EEDq4e)lgWPAoF&D% zP$254${G3@NPT%5Eg6XiN`?lB3r54F(7x5OCMyL~&rEYN@J}0{@dvH}DX#tl+VpEQ z+3fe7^oZ$8Rxeqhx!M=`5z=JpC-zOKMGVFSDbTcxN$DAhAGAzTpG8Wz1U6GO9-G~> z-jcukQfn7c0YMK5F2>m^2fceXU6~HIgL{|ON(#I2)~0KbHt0{Y1`E2`va`{MQSXG8 z#yofoAS6PUeOGzkYgL%1j$*d9xi0-S?c44>7azE-0mS?SPF6fhAe#5gHX;_2vML&^ z(!RdqZ7^MBI)O+#b(%G1I7$qvs&IT7rz70wGP`GK)OzvQ3HBhLAyx;(T=fLc9NKWT zFBpOlU=zuB6iq;S2HpUA*S%Xzwk8uk8ZuS}Z$_bzyahGvbUqvUjA$!|rX6v?&Q3ocY{|PG;}Uv$Lz*#-#2aL*C&$DyBobw&qnK&xF<_)R82WpR6c!xy^2VniQk> zd=dVJ%oIr%OL$Pk@rRogOEbZFX~B<@gR(YxL!7*l)umBdL5FI@cvC+>?S8hONrM}n z?conc>~Tkd%#*$^l6dbirrKQ6V-I%MVmOV>WMQK3aC&c9<#ZnKG)!G2!y!$IM5FLE zzjw8TA;K$8#kTg&ll3GyD~TFeFqbAS5<22nlgGM)vBsdQQxjYLW(aQ6j-WxMk$EJI zR|h<&M<;~5`#kG?+CmrhYD;1*8<+6cLiKO%=4oXjRKmbDmjiz_Cl8D(;xW{(hdXrd6o=BseSH-8ss-r{Vew5CSp z=+S9XoSTR7x!Fr91>sS4nihFRhZeq!ixesv-Aw1RqdO5|2j<5~f{6QY+U_M4kL*!) z3Zf+!iQD|R;b`=u4ZohPt=18Bf7ocuep~TF`R3^8YoGq46BW36i+4e@-67a=ZcnTM zYj+nxjU{GoGZtXZ?(vSWXvnDmBO`rxV6+{JEQW@OmCZ$J@iNv7)85*4>nUF%8nwTNfS+X>#=SWnlVRHIlTIimd^wur!tXWVB zAGnC_A>_0E)Me(nLH4(JWX=-Oq6lwtQ6Hlf7C6Sf*dmEPNSXMaz9O-#R_S&RJ=f-h z+GV$*TR)W&uB4fK{L#<1{@~g#NxN2~_?thyv-+#8fB84Q)%xQtp1Tc-rh70gt9<-n z>knF0tJOMbwLbhg^Uu>!tM%c*AO9=qw_1Pj;qQLXYK>d1pa0hHv|1njqmys7j#{m2 zKXZz+Fo&(ywLjuDleAi9^QW(W{Lytkyb*^@`Z#r5B0SQXMwp*)ZV`A`I*3n}$2dv& z!-M$bhea9x`buwUjs9EdEls9~vbV>Yqf3fze*6)jDDu2o8fVkN(m^~pnNE@d=K60I zxb>AQ11CiRT%gH0Gp?-afH6EbVI`3;T=P+-cRsN)cRsWm%nV{@7tCd6QwZp3d9V^r z4Upr;O97WSAc!G9eEK;Kv!Q)Vi&8mLu16ga(ay&5a*>xyM0ZQYbh#Q&mT3hMW4z`# zu&R&i>wcQW#ktUc{Z2LqTrMBI1lX@cg)XVpk3Z6^0$PkD;k%M`+XCScZ^yO?ySgi} z$*kM@y_T}-A5~VBTUv!pzXdk^`+xMW6Ptehcm5i&>0b~w{b{i2KNz%XZ2EK3MAB+q z`}Qo(WVAeibi42-#7OH$Kc%qzNri>3{!Jd_Srw;QQuw0dPv2#jzJ2i538vo@n0~5R zbo^qiDTt4M@-1PFL7r9Hk4fL z{E*9N(&H%UNz$P7`S&w(6j#Yve9pf=`+nHL{URM6C4i6r>OOo*X&gNurAPp(KNP(bhLV{sOLMd$!7bi(FNs5EK^2zM~eEMGz>Hp{dfXVDX5;FUsnaqB{ZwEB?2S4SFXpDWaG%Ok8y+@nq82Cf*as@dU@VuLL9OD$OwJH)>OU zT(w=D+_F3#%8y2vo61?Vm*uhF051_&!F)At#t`09>!)#nA6Fd>a&|R>PakZH_@%2% z|7T_-`#2viZ|!uqpRr`{S?+)OzyDWax&P;v{x_2Bf3Zm^{KZ-WP!H?xz<>Y22VrdP z#~)pHmm7+53a!xx24z?$&^_0Nd6dCmVe&%bXiPd$0hyEr#|^OK5rj^3+SXZ%fC%`Q{h+U=c}RWi2cOTE}c z*%vV|y7z*A@5$5WX7ADSYvytK+HAw6aK`%=8Kt!l)HGVpV2I|}8o+*_3+(}q7u1me&c2jJ=d+PPG<^aWgNC2j;cmc@~e; zfv;~U$ZFZG#nSqk5N8&A_a@=#VB0OU+q>^AK%TW#c>b~~Ddw+; z9nFZ7nPYMTN|*D(8D+>B*Jy&{lxbvw3oefJ&%4tMxlS9ui_?4iVKZ#IaW>4y z50g~&2!#7S1K;lV zd#_$qSNHU2C3#KqeZT+MKkZC+ov+?quU^?Wc;EwaW^oC1LcPm#(BX$(!Kj$~9e2!} z9SCRe0sqFpam(|=qdct{9c4zN>%chj!s8w4y&*Kzp~2zs@A-Z!JehictIZNA@DFag z3N;D&kR+5(V=g2uonWXtd>%^Zj7pP|mL&LLnDRTy-Pja0 z&ZVeU4m_!sXyOky&2;r7qL#q`Y8wD2;Bxy5?HRAOWwjY}N(D^mNC~-=5QX9MeU1+v z6bjmr>Vpg-lVzc(AZ>~!!yNjdcrt`^O!?b+W;gy%w=kfXuGf!-tJG1Dxm*M?gu2m- z3reE+Cr9G5%BNXp`!#9+073V$pAm&o)$wJIxhYFS;QcGfu*kc*BvRQm^23T#? z-fBHNl9IRZX;v=cXu|lmX~)N)8;N!#1HiEjDmMksKZ6ofYI|4Wqv{3do!W~VH{0PV zmqoKUB|^Qtp36J;U7pL){a=^oa&SvPkTO-vWQnvSK6O#`2u}|6-oP`wS&cwjHJ;*G z{hVg7RYc9=dC@_>hj#?K$MO?|M^H3p2qV!QO+go}TD(#kvcQoM7|E$X;Ykw0`Z!@4 zgTp-AS!W(s@=kpo@S&^tnwyh@aQ*ino;UQgcrz6|sJ=+G9;G@?y&hTyb62sB;n^D& z#DLF=yB_7~|22~zk=51XBg3Gs6;01{Eu#dfS|LGM&n=!~Llkn=>=8p2whvVkxH;G_ zGqMUAT}8@zWvbFHzGe3`Ct)zDy$Nw(ww67sPMeeBYie&oVEB|(RI8xiNcu-CDp9XU zeyZ6tr_i?}fcz2~z9V2k+}2-HS=g_{>-FFibqmWCv! zFyn#yH6d34VZmPBS#H6bsuh6u_QW%-T$mHk>_}PHm_E`V`C&l%>(c^5QGr{XN!$;) zm-S+R+qK2Os{_shy`*m*k7;mX4s4>qVom%&u!NR3=^E-mbok1Yw1!%aXW z?r@IMj}w?If8rYik;j*Mq`o>e$qOpEq8|#8MhcuUlz9LKk>Odv?xCCTsU}GU5{vO%Vk6%{hi;Q$qaWy7XVA(R6tUbpFpO6X&bqHjUc?JiaB*D_8Aqr3LlB!3^Qz=X0vn(MFJBvti zD_B>tq6wa;7@lV>U{GBRvLq-SE8bR8OU%(M3Tt2M7&!`$ls=%LMTC}Ov6h%13Rrm- zOrl1OTb-6eY|TWYt+i_LoE1LAUB`XHH)U@A;6raQct&25A+N?tfnb(bX2kiK;9hX4 z*T|0?s<=IauH6W=2xJ;-+sRLWMHFcra9iFileR5)yGHQAMGr^I1ux-K`T#zC5M!s5}%gEbcwAJ=<`C#N>pE4tm=@AYv$o+A!4(OBz-Oz^Un~Vm!1`oMEc}!+({4Vlofn;Q zShV~(IDw4hMB?`p6ChRHv3)o-5WaR}nQJ!U(o08rdZLu7)1+4MCrq<5$VXHoQ$* zEF|%Vd>rMAXEj6&x5^`*k7`fq(6L-m5;QR_EJH#RVec(0>VNP?<4%M(>LU?KF)i#6E} zLfNWaqtjwO{9lge^^KmDFvPg^i`oVnOIKfOaf=uwxezAI<34XrjF|<~T7aw%(wZW) zvVF3gF`BF3qt+Ut!LV{H$yV7?%BZI--7P!;%-yN_T)pDW36Vpc47K0|B)^L@yb`>5 zuwQ79Mt7%$>Yi|; zJ#nK`RR?kj+kmCssf*!SG+tJ{tpn?TDunGAZ8ccHxE+Ds5=JQSIm0f3bG#nQ4SX`# z4gRUIPHBe_$VH^?)J<1F2)X5db`?Gx#|X zQS>4T#telMJvj&`3N-+MMfKi6h|y~ziBlnfNS?5Y24_wj2)7*u#@v?1pTN)nn1_DZ!^$E8>Rzy0FiO0)R0?}dNex2WJ7n6*uO$~7U&wt( zu`DYNXh}@fq90fxXu{wwmFl*KYe&O%nWj_-00uS(TLN-)QcI%?o>WY5Si*ISQ{_qnq_Ap5+#k1XLSgbz!Os1up>!F0obGv zK##4h>q_(s()dE4h)kB!1VI&e(E>&rTSa+zIx0<9DzAcI&OlD;W9B!=CiL3R0 z8Jh?0A|_fR=gB?!`1wy@{hpfFC_G(0+$s}xa6jIdssKIfOBB;DphN+lR+oa8m#J$E z=jnrkhLVtL<8UbS2YG=gT31G@j9}o5qfiI#k}D%H!UfD%M%Pymo^wSBBB=Pk~5s9UL+=-qt@eIuWzvjU$6I=SP)@iKfdfw zO~RysUO3AQn zd^-g%cfg+`@aHJ}X@);7@aHc0a}56M4R1AwPofE4T?v0u@TUj<+yQ@Xhd+11pEUew z40wcv z8rKE8AS4rR5E!l`jRn4)w$LkWNtxMzzu* zq&yn3zY^gvN1%u3w5gd;BQ0bZ1Vjx{#6*0xO8i=Y;1w*-b6mV_T#Ja(K_K!()3WeI z!{ff=@RDQWsoUV*CSMK>GCup7~TC$`fu`6=C?z(O^P;8`WphNBxAC=%Oo z*Hb&xAp5APPTQlx_qUxO7DUR6fhh?S>O+ok(VU*D7_;V7MWnpO;OXrZ!}ZK5%=R{9 zxbsD4(Y`K6$Pw$85CY(d^}p2h1gzT89vgy)i>$QT$M0mR@8n&H(}l$GGCp19x$S9A zDx?JTgOeDz^hY>ck}PbD0P_tmh3AxNkFg;=|G}KM@h+ag6+s8Mz@r`7H_)jn@Yur4 zc?vf}U|$F%2N@mploRs1f+D?)ULr~lRyW zV=A;az7@>4vS5^YvgNqr+)5Jh;Ous@%CB3y!v^VfW1cEhMiwQKo;2|aY(S$MUP3># zeO$Xgt)?msepwG!4cDg@0BhQKAjP0$&bo$b{Z82L#w;W{1=n-589pzWhUasC(czx& z0t=8XH%QNp5y)D!A5JbtHp#i_Wkp(p`aw&X-701%ncXc3vL~6_4LAAD_axiZQKMvs zi1G=Tne1?2rMc%<0hGGl$I$G8bry~z-BO6U8TEI{X^E&1RyNeTutT#sF&WY;wPKUX z@re=ap<+Rl&E+eKDS4YpaK>d!jcV3YUSMd`25Q=MJniF`d5zeYsYyqKbECiG-I zLH^rI>NX0|G?#58c;d=lqqYL+sdh9$k1E1ridsdnzZRrX4d$RdlylK5!`f%TM@)?Y zUF@Vfvudv$VjY4ed285}IK>K@n#%oz?`$Agj zAk&T=sZqs_^DJPU2%xpBGx17TXVf+%e3SSjv4?VZ?-ffPNg_9y6cu|!pej@WwTjvV zLO^^D7K;`UcppaB1t@|{h2CQZ7rfSp-b-h-tPcTu`g`fDruP9pidNB5r%ro#0v%H! zXDm)j9BgV%Qr@-@ov0v2e5uYALX@m7#S@ajB{xpXIrMDEtko4LdEONY0vV_Jlc~3R=c?1`f>Umr zHq9k-0ZQq50XI{yWW0F@@-=!@*Mu{^e9l;a!(5O=xayikj_b-jk#9qUggQ>iB!vEydZ#69L{};Jy6zPvwH*;Ha*;VueAvwuL9U zi?EwaD~s>OeZ%!3O(9QY+VdURe6BlM1P%q_Jx=20rEa`?speXn6$yqkv<(baDiRst5C`jN8GF4}C}!Hod;K{RqEAdVSEt#%JV%uExsz#}_#67s{ z%ux5nKp0{RKeFQ}beK!?WR9n}f_Sr;o=x*awwU0}MRUfemV5~7g$FHAOH^x5^JF`8 z35&sTHK<}HlgIxPtz4@vZ+HYXJ!qvP&66EGrIHReI~9oKF-od#9@I8U;-|qk&-cJA z_QC;a8c}DOCp&qHkJwyX;w4X+)3^dp30|HfuJjVEz_nfB$;K8=;z&SagbErky3#z^ z#Z!FLDOrUj+2M>|X?4wM$MIX?5Krr(Yx!nt1l9Sodv51LzGyDK68&R!Xfo(6Nikg;Ro+g!Yp!vY;Ubv zg?S**YDExS*|M#&p?B5F7w6z`zBu+S`U7H|DVfKuX{!Wj3GpUgRIjbu@Md!Cap1U7 zu9RR1#;hQ76d2%24sl4HC@-Z1D8NbyrGG&GSx66)Ss76MM_=6vT1C1J_$E&bEs;GC zFfybZ*yR!mAN>s>)#^tlEzt0Ur7u_K?`V<*VNWt_iY6!A*NPH#r?B!*2t8FeU!`^? z1xnDcGGRe@%cu%f4#O&h4@7uJ)f)g|xbZ+D1+6OsSZ_TjSkrv)>WE}M!F~a7&7Hz0?F6`_ylMhtegblaO~K_Z zHW1ufQb;gf(8xgGn|5#yWU$#2kTo8`(E3vudKJbB0o@}JN#y*6Rp`;yP|E}y5H-5C zRF;$2WeF5F6kMbUYRd#ynfh~PIkZZ()5Qx50;ti<>s_P?pV~G+8?9|azeN-3$xU{_ zRBBs^j709Q(NHAQ)WeZhFc#TLuyA46u5>hVb!jxjdsaCZ*@!}swT(sK6^%r2qg4(h zjG1d2MS#vU62*L0Ihdd!jV>O~m~boODC`LY6t$)?K|^(@Qf&H#Eb@Se(p*L`2n(;R z4A;&tX-pOPmPi^As&z%oS(dOaqISY*GlM*~VwXTrR#X+#UALk;NlWw-7Y+?C@mdOW z5HG?Jt!r1a%9*Zhd#!B7#G%1zlHPKe)IwKEX-+CqN1tO8KZGY@l?{!y_{g~M&_Z;y zGVyEPfb|cos^*10JveSVY%WG3>SI+$Sxghd#B56%lrYV7o7x`bZOPjH<*6TWsX=896C;`xP_y4NlSa6yWa??+0-$P8m@=*owhEKpTk+3nl8D$~O$+3<*6 zh-}6H{Nt(zI*)=Xu>b@nh6d4Ht8Mnke44k#jslwZoxI$Vp>>2^ne?Q6qf@=YHMzlO z9jC~roux+J(lTieUQy;HqiTy2Wne>6ZVb!jo!m1Ej$PD~N8|0f9PZQ&OGC{Wppgb# z$qOarE+noJ;D`!H5+{;ZS0?6y$nJi91|V6~px{aM6GTsO^V>l^!4Nr?H!6l>iXaM~NmuB@#`x za@U-xdSFrm11><4D@?f{gPF+sCB}jsMiLV?5lKmc!5xkRrfs@LX~NO+I>aEe_IAc` z3#KTdJrxf|$!AmZV%!X6n-JL8H)q(k3EE4Lha%Sb*~IC7Y>!tAzc5Gj;rtrp(vBG~ z(5vH#ZW6*za=qiu3wOpb&xh;Tj-kKi7)0WxeA6u-g9E@YAP@Z#g3VAL)(ju&y?SIU zJv2BxGRDg|3gJ(}O{^T>E539IzX`Zny3!pT=`8o=txCl#ia|hR3v4FMIMAfQZFA9d zd9&@e@noRJ8bTSM-)a1-!v>&|> zkUDvOERJ~}YnA(~gj!H8g#5=^;V$`tNn?Tc8i5^am6$J3J%s&Gwhm4lBfoqTUs&M# z4-fZE42}$s!;hw>fYu%ielsFN2{c0L$PiMmo zAm>mt96x}F6LP_HvnuLNgvTtHZjL8K6k-#{!@LENP@!zx;)v_o%9ib*>$Kw7rtMRf z6e9qGic~k@FmS;if~rGUOO8MlSui0?E6}Atzb!g`mLJLEO-4y5kVq$#x&=l=5=->( zR92||QZs{D&sP%=gjbF$DfnSC(-?^ZNgql)-EDIA`4bUy_Y#k86pP@iVTcj{+3b>efi>g zZn#LbFkh{BD9FVm!FA*sOE5z4W?|y5QOENvxQ|su+~UTd*cQb5lc8uUZf!ssMDw^0 zn@tWp})*+Kw2Cgpl7x9m#Q2T>XT?HH=oVAV8%ZDQep1eNkic`5T6oY4eA zUxf<24BA7#O~Uit1nl?`XV70Of`(>jLL$6ROh|RfuL!DL0V<*z6>Qg+tDX;=c?Ji4 z5>rhPWr8{&Oak3Zt7&{v8`Wx>Pfyx|Xs1S6@Ev{yZ8(yRbVV={;9XjOJP|Gl1rZnm z5XmSO2@4d2u|hNf8%UTvzU1+Q)_7XH5^aWv1WH3hmNgr$;Ch9a(m;nEznxm9o_1?L zMN?oN!?>E7_^9d5IBuDXa~(899J9a{FgQ_j1X_&ux(G*sSS(aW!3Y!+QY=gIr&jp_ zI9eQ514zkFEsJ^(`BrpnKV{klcd6p{ESd7Uz5v|>yhAtN27320qkH^AlXL4)aH5Th z=->zy!ptB9c-rVG29TjO6eJJ8X#y1nFXR@%fG8l;g5eO5Kk89j@H&PMsl_rw4Pp>& zSZ1tf*_!w`9-Io4&2Db_+&0Z3oGAs$H;-3JR>ATitOb)=!S%Ut=+p)uk{n04ZyLNn zM@)SxH`+kMajIaPz&-|PtVbc7_$c4Qy8{<0&R*U*kZ4oWEmu$zG+oaWIsdgKlk^=% zDR9ux-32x6cyrETDj54InuTeF+pdqUYQV?`WH#iWD>&Y@q9uw>ea8X|~uh6fF@g9Sym@;wb}fbJqvJy=tLgdY;IS2`mXiXh07|4NcSt&wPAI z(QV91Q+zz}%}|GM2pcwjMHo)8Rdi8wfbBV;|5=`<64bDWQ;8($P88n6Wq>7?cLnew zR-`T1THqzRlbCWUkcInPJ;=hnDbH(NK^}wtD^cXceH&&mO-4bHpyajI#hF%`TNs8^Z5I#KcQb8O!C|0B4h(lpm_zrKz5)csSnx01%1H=wwfU ze6`OhE(r@HT%}ioNwNbOCsmU+$o9jPBKjVKichHTQO8=rYI=PiRB!Us;|WoL2EN0O zCBra5KOLAE75AJYi>T$=ELbWIu-$?%R*U-BSN$(Ix@*wXekk2eWxdasFGv#B(Viay1=&R5t1x0 zF8ZyJsu&4|iol_;9$jCqv!*gUnQk9K-4(C2N>e-+?goI-yI{Hyhaf;LkLv``6YVb} zbeeGKaNTh3Vu_$faM{n&wHqOH=50}uh$qDQR47SM(5?U}lAF9;Z8`K3QxyuoXWD)% zMnHn&%Ch+}9lwuB>{j?BiC#w-z9&Q!I^iL*>BCzdZzaltsz`_;X4Tjefgr40O^Gm@ z(Z^BCWi|Sz6_Wu6`B1}>jDX34B;X~-LHir^(g-bu;6Rg+Y7%L~+1&yt8U=>Q4{1+W zAAl82e7|Lbf7&cqxHB+qKyh>GT*fTwhi3SYSl>J$u0 z^5XCy!uk*R5!wSnN5mE!o9s5FS@UC)k-Epg{|V-rXZo$+Sj7vGEE~4h(Q7N>O44#G zn0A?ECY@y@17h5DaQS&~K%!{QShiW@B?FX*D4yti+;nmK2^f$59BxJG6^1|z7loJ) zV4neL3$@}p;eG~XG7MGX=n7*rPAvvd%c(tl0lnx*BA67O_^>=~@I}X+H}IN5BxWE7 z&Eb^J=8&YFQqgp!OGxl9;H82u)EfZVK{x`!3gRT9Mh{P9()gdo?rL#DvVMd!wJC9d zVur!8)5Zc8AI1r1TOt5c^ty{jJ<6*j;rDZXMfeaW{|Oo5vY~0Jh2$Wn}oB! z8pJeVc&Q#(22v*uHK34ao1#Tg-K`U=Q?rvGs4fJZ)geK!fFadRiB!KZm%_+7(TB%P z8Il>*1!zv5dGJ=?_?La-I z_#X=Msf9|+`+zo<2Mdj^7JCp0^J4UDTPYn8jBbOueNmX*qpfW1dq)rCB-!s#Yru>I~bG{r>wMAMUoB?DrFaG zHRS!(vVk_adxWQ8U&rRWNyqA5$rxF=h@uh%`K?3~rbpRSRED_#6g-_Z^Jz!MRYlVZP?F zBjye{5xDS=psp!rtG$H)CjkQOVVWlhc;K#cA@b9)^I};+P{dTJ*UqG!iuadLwZ3j5+ot$g(7g(0&U+4Tt-giXYV*;aIg$k*; zbb5FemDSKA-SdLp$9ivd_bX|U`hEu_Wh`5E)i=2io#=|OY)D;M8J2xdo-KA_N`^BSzgcbV5x#0~6dfBkV^y1%u#( zpk>P&HWx=cp+_hlph8`>a)%7C;6^;U@|cdpfP2%$D`2&vBi=AX1Wh>mNYRP8Xu_gC zQC^RO-x!?CaUG+wq8c0rudJ_Ke%jP<@^J5D(qR&4BPTb*i?kf>%{q?3!u0SV`)v4AKaq_1Y>% zVcwWE+eA4$piVYgPq?n!g^6~Ki><>cDp1qBuj;z6#DQHCm@}G{Lb{@>wTZ1uLHz|&r9U{0fjhI`e*6q7>=@A1{c z2FgDI@~#A#xRxLZoA03Z7(z^hca*0LJ0VdlhZsVOR&=v zfFqJp07lU*%}0gsAPq`}p&Sdbs90E^iefZa#i#%x32+s)tYDY`LdTQ93#P2K6@hy% z9SP-50coX3*~U;TNRcKKxSF|7+7yH!Li$ATx6Yc6!J$z)YASAx5eN(CO&zfzEX+)V zZ@t}Z%*tY$KIp!1x4X4q!A;-6dJ4&)M+PXVNbYE%Uj_l)L>LixDYfRb`={fz(U?GY zG!|%dHOG-_%MJ5@*xWtcB+B017lBo0!AeENkhyz&{+cNrsRB>XU_<^a|5kM z;2lN=ihG zB@|uZi2{SC=ys36im_| z0832BK%*7hkT^-)O4R~_=qvE%>m$}Z`-Q)@jg!7?cyn{5eV&@B< z3x+QSsfnc+5l5Q<71xCAX3YMf`j1x$>yu0rNGNbf_FSR-{&+G^CU?UCr)p)^HHuoG z2JSjZHn@ zEm4@Rp&f9bB@Yl>TaggwsR!9!h?h1>+%@rF7aqV82_(#-zAK>8pBY1-+lKD@YrmbO7X-T#w+T)RZWf54VkP-XdF7cA%TVHFfG%U5Z6`& zQZVd-iPR%}sv@5X(RAQgl~W8Pt>pMI!l{$G@lK$C3;W;B5wF%?zv{;8w3#ctl z+QEh13dEuqA?D-gh+3%WNXoBZ-Rq1O#va~Kp0uabhps1wwSj_a^IiHjSJY2p(mt|d z#|}O*Fh0S@Cwj*w_>LVrj!xQ>umNTjaQ9nmGl@MhdL(WZ)+-MT_fu8nU8VCM$l!$V zBkn;;7(^Y%oED43+Y$}cQWZSGH2l%WAuRGZB*r&MNOs4a})pApqlf7|L}6!_!W(YCKCE5T&^8Xs?n@ z3HNl4&e8bBgp&e#Sj7;#wV>nxK5>yvC}2F6*H?0?#eQ`iJ2vqkIV`1hQuPq zHy5BCK8Fo)*QxrZD?E0jc%eOmf()mp!k@)n{fy<77a^`qCeEkqZfaII1mG-cDv(D7 zA4}azNhzhnLv~UK5o}Hb+Yo94LzZ$SitM{)^zdkZYIxv=iPXN4k%`nq@Ax&lwR^qf zV#l5l;7K{M;Qk@4VB~xQpG@fX!DK?~N1lkuc=}-Lri@hVDA=0`rlu|?jh&p9Wmr~G zFhlGUX>IXqwGt#q76%>SBf~htdnnS&AXg}kVKr%9R_T-oJ1`+NW7$~{wt{bX^N9HJ zs0uMz*zHy)?(`AK37ukjB@U6!EM!_J87fbPi5otWZRpj*!w9yhmqCJNLkcta#6bx= z1GGo}C6yx)!A4TGI(>^-kWp=Eo){P#8yVwc0(8WlB+&SzenuvWlR`HQlF8zr3rBni9@-N{KeDQrzE&a(0qq5?&dPznPXPrv1bxa{fBLM+a;vvK zH3Bu*JkZg)#(f@6!nmw~p|K!7Y4_Sitq(~eHRRDq2RbdkQCbVQhO0xSFdS7c5w!Aj zoKf)l13)I2nPzVYR|{^D5OLHa6`qoIn7{*#mBzP+>X>dng4z>o!AW<&Z+lbR$$PtZE_ozl`dP-}csEAI(N(!w{v{f-(&~AkK z6Rt$Q!!(6fj!jcc$bP(uOM6aG+rKE*LWYg&ZIWLSrB6r{MTZnqDR4O$n!im`J4v&& zY;N$f11DFAfxtS$CIYY;=_d&J|7cSWJ!)_R6=10xejtuls**^ZEf=d#iDLz*)3!_9 zDMmkwinz(dG6E2^uvIEwyZNNZA3*gwLpqzhLX4PntPZw2u@Y4)w8|2uVx`2PQW2a7 z@qO)iIvP!0*=CWSfzVsj5jhz-8b6pox#_ggBIH#@SA!rhT%n#&NTf0(Xx~M%Km%&@ z=Pb8~Mnfxlq=2k+WRsp%;?sWk_;Bbba0Ca4YEWrJkuP;vG2pmE!ACItDW+sf)K}+% zyr?7|>lam;Us&UL+yXixmsg|i$&`QbI-a;2T#LZd;HQXug%Bj&OM$DNVkq>;S_rKf zN{#ik;y8U!^e^<8z%xKjj0nO-PJYL_g2$b*shj|du4B)Vfh=shuqpxRV!%ii{g4N^ z$VYO-}Pw4jPeanuQ<(^gP*WZt|d8fFkkT>^rZ z%mpK2WiB#IFk+d-ko!aKpXF)d5c(GB5>DxgxURU!NwUa7&OtTpzz?Y&2}iNqoul+j zMV<;d?jcV^Y{Lj3tyTP;<_V>$fcIg=LU@&(OxkhL8F|npA|PuGjY0Zau%s|NG;L(n zgGlNza+9{Opgp+}OsYyz=8FU$5AD1KiMT{zwO546=B3{^aMOk!D|c}1cs1YRsdm%! z<7O1iTz_LN91VeDOn0OPb|0nA(cOCgy?7n5Zo$Clq`+Gdj)=Az0t&W@GF7Cc z{h#Rk#z9JX5spn3Np?t+6rO(E!`E}-h!8Nq1d?QPhDV9i^9^j4vBr&f6UYo>jc4lZn2hl~>*c(n zr?lYkEls&^&VYperaNX!l-M|gxMqYGXOF)RW}ED^rKiCM2Tg$lLJU~SR`2P=n6d)cMHjCf7)-P8eD zh9|LI5wH@5hnTo_2ymGbe7u!Ip6?!N4wOHlYGkYzeIVS(BOu*lmp3)KUI8v8xy~p$cu#`T28nI(a7(c0 zlqG?#)XZ~vg1ePlWsI!?7DZtoGnQ*E!j0{eqbF5@`9Ld5DdNqA7M{ywx>LDKu1k!B z??Hxh75+`T)x9FODb%BE_nsPQs}#aL-RbNuC^F~!6))e`<~m+lw$N5|3T-osDHw+s zM7j*VIAKKq8y>kvh49o~A}g7a$N>gvV#nZ|MBwfbFW`~^@dErwkU-X5;hr5>_DW%!mV3yJ@7ks!@Z7X$yn;? z%w)=NmD=&1&QNwxv8HeuJtTlAhkbbVqO5n=6?di_J9~h(A*(scGR_Ok)lwR9X94vEM9NW!;4$$OJQy0c-boB9qOvcXW1j@7$HnxApGp z>mS&E;NalZ*Blxe9vQuMY<%MIb=Ti;<4wkNp=i#`&RMt2m&&$Nxz+Xj>cZmjrQ1@< z{)HnegXkmZ$w1ywxowx_N3}5odwTv-#dKx>QN>k1+OUpr!N!}DSu~duEj&4hH}Q!J zIP7Y<_CS-&^E`;4fDbB|fjdQm&H>Zk=NfilP8*p7bZFUw`z_^|j_`cJu@_9&hrETh z2Z<Yp0>(kcEGYZWx5M zmfw*`K_@}<4!J=tw+ zN{U9p4Hfju6+z9id+b@mnk;~@Q(qDE>Z*D%^CZ11U_c@rrQI`w_q_vZ-F}%2ype_d%99GEL(9J z^s-~;fS9})@iVnIBO$4Y7+5Oe81z)IO+X>VL$SU>5`mYZn7Z&s>n@Ry_o|)>Jw^=| zF9NN_32xfHyF@qulTbs~-Q_sD8c#6wDvXhOC|Oy3*Re+#fz!Y+5alJ46a&jZ&JPel zLhFVP@wMeKZWT~bgqGqX^KyqqX#g;;c>Vji~TaV?j#AUI-3OTHVd_683*J*todnz)D;j$oCz)GRZmKBD=ZOhB@TN=4s zHSswm*HxIUzC@1h*M}}r5Wd!9A%LtTDrge?G($pX+mVTfeb1-rx1aKVnMIUkM|d)- z4J&mAr+SoUGr0~C^Sp1_#aeEN;8H^R2t7H31AxkHw1YH~!e z38HAFdP*)W95_%5E?W`~q}vmK=^CqqmZdU?MZw)9{Wy2lYPvOXe=tBAfgn)Ncdo~?wOhI-F69`Q45hM{m!zw%<89nO@0{<~CU>cW28pCX+R=Rtr1~ z5s}eVM%*LmG1x!G+x75FRdu{%cyq8WLj9KmMk7F*4owIctgwudq9QsS<18NR9hM%( zhJ4wo1ZX9@$pq~j71Sa>SQp2w)=pMxroP1msAQ+em%6qrK6MZf=K_OD!U&IYKzjI! z#w|}`*GEBtJ;IZLeaxH1n?1Ze*TS0tOleWL1xklOrf>#6I1IAuM0POx5ez*HZvb9% zG9` zZqrSuHsrM8DEnl<^gti%2~yf=PFIwx}TfM3QdTACPqGf_b&XyF$3>cnXf1|3>0nDVWzlymg`ahaq2~3W3+G zm9!$u?g?won&bXd4DX;}7fZnKrg0O7yqrNF8c|5go}^7H2n}&TS`SqS^?RzGdyD9U zUzIfToq9|*D$QVEHPWnh8(Mzq%Q-l)uo7)WQ*OkERF57dokL>Msp?`fARO>}BH6%~ zC~J?v_f!xjU!3p2SXKjQAc|!`O-M4}x&d~qMDPSy6~Wwqy@Y1Cygu|l0drT%WtIhJ zL=Rg%=GJ9M|1aV0N^aW@EDjP54_Q_wbrX!}EB0}0+Nf;4I!uo{Ic{kDZ?GntI= z!?r-hP*bTC5HaLgtk)(q1WZG<60Xl(5Xq-%Ky0woZvr&VQ;dQ3VniE)LBLT#McHa| ze|1rtL3meAZsD#xK5Ax@3pIK*Z+DDFTe?5nw^Y=4Pr2 z5nr1&wb2cErVEFMynyDQRK<0UFF`ka-dyVGz5c+|p~3NqfnjlrUQZ(5*_r9=Ol(_a zBVz+YBNGF%k!)sHI-BWEXS=)8-MiM<Zfz{Q11<@_grSx z{f}o=?KM=+$;#RGuGM$lE^BwJe%|99vU09_)jc0nlkVuwb+mVPckE2zx1C+>YiLbD zp*z#PGqbaOXEuf3cI7%(57UDRD%q~gu1xpN&dyv)eBITtYxRISr~s9PD5>18j-4GT z`r6%*T{Y|m73}s*^UU!~CX>x%vK_f>HfMBnWgx`DB&(Zl;>Lr&-5Y+otccA)F{bgAo>Zg12W?YL?9 z#<2nO#*y-^H{Ej0bot7K%=E5X4)?5j0s0ON4h&Cd-5qJeWWzH?!E9T!TywT+xJC3w zXa_(SXH$x;ALSLi1|>CbE**sf1?;*8DP=C!rHm2~5G$+8n-|<9X z#u~q=$qdl*@Ro2jxRg;Yc6FqE!%ffLCUUpH%z73~e=e8;H|+(qZGw6rt0r-41+w|z zsaN%qyN=_hik92s8NQKi3tp6*S-3EuXUX)qH&;%1)@^1_#}FNEcI*_K2#2@2q!THQ z1ayUi*f(bHN~l&70;-!BW1i`jXWfI0u?EK2)l7WWY2P<6#)jxQ)R?00o3-a#wdX%* zfOdv*n;5&FvCZrR+r~~bY+!6F+X8>KF}C%>GZ@>t={)$^z)oy!SjX7bi`I*uta1H} zUpbeZz<*cS(mH5qG-zpYaS>ZuTwENAjtOQ~e@q+JF}CHMTNn!(^Sn81%=6}^qK%0O zZiE&$FW2lQX!gi?TCXIFk{uIuphHM_1J9KN-G*YyXDUHcDZuHMys;81^g=1|U`J3eOa zn$NTkRmOXJHZazBuIm{v2#n3oWV6}z>NHRTV_6tW=E*RY%`jTmGZFovkQx#c-D&_d;0sH_tcGzFMP?HZvNxnyx?QsdF$jG zuDS^NI%7w3GX@%GubJ-hX$?XQ{G{q8?{#muILfB(Qw&-+f>-LHJv;X`kp zdiT|fU$0~z-tree{-=lEc*}F%^Kb9p`I0Z*@R2PyJn+i5y!fGyl&yc;(f!(AUd5l; z^16ec|H3Q&^n$c<1_^U-{+pFKkcz%fqchn@({1ns>WDd|SuG*S;&) z)%>nk7F)VHuKcSbnK|pD|N4SQK7DBT8y7uq=Fg2o>+bmJ>-TNF_l0cx^KN>_Z{I%u zi(~J(@6Kyq@!qcaPyhDrk5v!9{_m3y{y0Bi+&g^!&z}5(d;a!GFZ;opUzok&&imdF zw=f&k!mQI5rmNIj=o%lN>AZF4@tG?RT)A(0c(LuuEBo!C8~R4CTUI$PD7Q?JmgpZkq(EPUm`qb+Bjb8B+8`Snd-e|GD| zH~;jnjlJLc^rLV2*{5!Q)jjWN|JPr2e_+q^t+T&ze%sKc8#jFAl7E=L^zJV_^B;fx z>&ITWb>D5@zVNU1z3GQ9{mso^8hiKi{&-J!_QWgBnER9TU;OmLvOU|N3`6y6#O6PJQ#L|G51p!>_-8SNH$EX7`6$ivRn8&s_V!AHCt_ zzx}tn=Z3PEyz8B*eXl-v$Ftt{Pg{TUjPI;F=jmq?naw!vqTzyr?@VIEKLQTT82<2g9_qD;#fAFc9vGkYC^QWwy7kufq zU(NjX+FyR8+VS1_&TL`bKmYOk*RD=AeEZjL{mg|Izq_sLuh#E=$?)Op9yV`$%Imhh zW$-5lpSk{1qhEY@=X2k7{R`Ls{`dpCe(=6WfBf0My=Plv+lvQZf62dpcgth)Ias_Dc_J z`OELWX7j$+-u38}%{M;v7lU&@pLx;+ANc**h2Q^m-v@>_UOaWpQ@*oqLsN0gZ)rIA z$Nz9~?!g!S_2u8c{+5f@efo7q`kt3w{P*mUr)<9KgM%-6qz6Q!@wx}^c+;VG=ik`* z?l=DJe>}BsAEKK8xezj=1} zB_G>9`<5^M`1i;D>~l|haCh@WX+pa1R;zi`fX_Few9 zdro}e=H16OKDhAdzx&}OpZ(01md?u_IMDi&r&aI!f%l@ZquImvY&v%Rhbp`(Ar(_btDC`HOqIAAReeedXUjalvo1oBs35=R7*| zAKf?Iw%G9YJ!hx8UjETL=Dv9OZNKmPhlBrq*Wz!T54Zfq4Uc9n{l=fa^7++gzmC7* zX~Pfok6qQ*_AiyoFYEtt$0uL@;5Xm=zzdpw-ZgsuH`l%5mmmLMANef~;;~)5m%g)W z_N|xwd;3>k(EPKn-E4kl_PSrZdEw@B`J=mU|L~6=`&8rDuCM*%uI69;@_m(;{^qV1 z-~Q9yS6(=M-y_DpzdZAo16Q5=>8-h4_kMQx`l%b|{hd#K_PPJk_T}#vpZ(46U2^<2 zm%Q+=Kl9lB?wR(NUG&c{c+oxo_OBoP^0iyX$BohVKKt&z4R3$j_kLxXjIn24lzZ2% zkA7nB)5o*xuWY>To8|v{-sj));nxrU;(5(4T{!-h_g?bLfBJm!qxaqCZhqNwcHa2P zZ4b45|DlJz^`GzD{g;ou<8MB4nUT;|Jd9EzkcL3xqtZlt?!t-{qr{*zw0G;f8*_ceaFY2W3|5e z%vYV=+Ii1aqqlrwa(lxAZP}N-;<1NbJXF2?&esk;>rI7=pYq+yzyG1nv!mTNec-Ql zZ)V@w^now&{9VuaC;r;zvzk8i(4z;ReaZEOJHB>l>-j(X*y{@K{l?&%7Y6_Cp8H@7 z#rJ(>w)eJ-|LQ;e_&YaDex84*XG_v~^na3{%fzk`58ZY+Q$=DcYL+`qaWVJ z7+WkA3Ny2AwPfxg<>MIfMc{t&`+CM0EFFA+&&lT}PM$n@9zB0~13Vwfoj=O%W$f%x zcJF$2K4a`c#u$`26Q6Gbg?5x}U4I7rL9OK+__mRq*t+h#QP#-Lg+FJFvc`3}18kIK zL1|{dZ%;JVv=8IjNaK!ae*?6?PPM;2(tc-6`(|YP&^Gh|@<6rU5FY<})&7QX`nEy&G`lH=QF2+`|}y^X2Q<8EnzAr=8=e_H;*kBl8QDRN0$t77ttU z;uxpWP$ET7uyNBLXr63_JtZ@MObgc5=(v>;yZ5o!oNb(CxJ)H{rbn59Y$fZFSz zB4c_5=nyMhPZjbt6&i3<&&TgWIWj8Ic08j2tOu}EU?SLIQ>4g+P-Ht4fdR%AxfF_g3W~tQV~adRwW5ju zF2c+Te%UEjOQtlVXo3Y$NI~7^SK5+qKpS(cmjj|}{kLR8Z z_;q6IMy%pll}p)BP8NU{o3Ou1#n;BP10c#yGyv0tGMllC>w6UdhwWD+HD6B*RYkb1|aV97;8X-`)tOxTy{QV=Q6f+YxMc_~7au;{cOhfhO+Tp~y=>}F zfTy@l*|FhtI&=(7ND@B$3v{~yfpZo+fy32_0nh>&EjTTTh{gbDqf+?^%nBxOmY4-h z^h`1wpvZ+VLlTbffCn_`W|Cg;&n|in3-JMHfEeM~^c)8N1!@x+BNQYue=(JTIsF~= z1w(l)l>zhSO;i^a_v6$)EY3;#4no+Yc7Unuqw*Ip#$Ha(fsK5X$^+57n)-SYW9+}^ z`I8xAAELUzl0QPU-(RU#Kmw|L)j9sp^za4Oa#&88=>~~ZiQ0`mw zy@fIM2uy-8wgc9J#(5=U>_s&9R>oMBzNa*JrWs=+)J_{??4$G@aPFrBha6+82c9*b2kHqCCcn%jBy&nE*Kj<2ch;Y!q44|u{)_9Q0#tA z?eqZbU||_!dl_S+)Xp;)V`*yVD#q9!(RZ+1X6gGrm*pwuxE?` zjlyRX@R{IzEo1DnKpc#*F~-;%sLVKHtcSi&fOQDf;r^+^W1-RR z&}wg~IG#W2n&8K5+%$UN;K=xd-qTLKY|-$IX~RP(o-sNyK5<}dV0@~7A5=J(K;9}F z?A2T&w519>!HtTaf&gkt6|{Z3dLna^r1MUz6IVW7uE<+7r@2w7lqjp*wu&)p=2ccDy@#|>scb74zB%ha z%7KdO6svUY?Y5#hV^m9is^FSM)AlW+sjv-it~>=B;CY_N zb#|4f#Z+7q_q+4FYL`sUOL@LishGuW9IrJ3T?8xBN}ZZLggFk@1#65J9EJ{>QGRD8 zZ&WON9S2O5(s_j~Sni32G3SBQt6c%kL%NRCSqRfzC;n$%esAf?Ux}Bjyk_+PGf;MM2%`6YT}X(c1n;5^+vsqfFC>HJfcVC zxzw`oeH}1>r{WopllOzjI#XvV+d(rrb3;A*XC2$FsdXD5suom|4WkDJQUBjMZA>ps zSBu4^I^_;W%LS@h1G|h=ug&PRwq}*4wF#Wq)-0%24NNLe1Ef4%_4F9!sev7c)pU|2 zPbg0%%dQ>=5oNkz=|kmRaUCB``d4s%{i8`GBQHS&XIsp9d1 z;hM7+BrFEWUYO@z$uujie8x0kPupwdMa!s|F3As%vfx(B)1ove z2!*J8B?}l&*qP2e1W7JW*n|Cf3>GKK1jN=J)NnC@n83LJK~F`lulpaq#=s5ACm z;l_HrU;}H@c)>=rjer@PwXe7Dnz4cLiK+hHiC$ESfhz(R(+#@|2xjz88WNB|^>bA9 zzLDYmgXqst4d~YErnZ7nm_w`i>>K(IO!f8l9UPcCI3hd>s>&7GAUCx6nO|l~!*uhvvtXH3H#ZFpdT+~v$p#wIQXZqDj$jp&=9%5K412eLY7*!+16+Hks z^&puMbJE@kTIq?QDOEO1BRzt8)LTIiJwPD%tcKG8>gU6~$1p$8^bybVk@o#^C9fKX zQUZ_jambDXi0EazcJA7l$3IdptD_cSHuY;xBL;;y81lq-tgput8SJs#kK1hbZ(!i1 z1x~Q7&GZXx1*2G8QWU=pe?lPj3@9{EY(typE<_7>mTz(@5aCAD1S|~fXhIV;n$wv< zH$s0}$1V}hr>(FHp!=m3&1vbidZ0n@6Zlv06WCU|zky|9naOzpmSd0k9Dr@3=zYzu zkPW~zeiw0tyq^>(Y+G`SJ^(Jy3HL|ESv1|5YN-`+C7N!oFj*j+x zM@RcMnjjkYjo&1prko8gh+E`??D8^}y~X}pvl(sQW zJXbb|1=V_x^k(n^T!kH+nuXrQn)VH5IJq_VkpP0xzBOtJzf>bO>J%-w>-Rs zxlaHz@S%mhlA5`pTW;jL(+9XlcV#x$9-&sXz#*Dl*}@r;&k-0HM z3Uo+#mXBhh>~+SP)f{hv+2#2aux~R}Hhlw_!WG0QxVqiyinc=4^PMst?ny!6bg>Qo zNy$2CZ!V}-c8X@6XSzFu6QhQC?An=!lY7WO#5{0Jkx>ZP0;IsH%I~02H8r+PTXq|` zed&n>xtkk#YKBK=-KK_DoaRS&!(}c~>EYZg%sD)9Bs7hqDk&von$T*)h3yI~g{oWP zDesVSjJw8STA*RoGhG@o8o;+0wpqAszN%AbTiNh@6E~26Cxix>a+aM$FoZd05p4EC z-k2_|v`X12@~*Cql@*T%j|LJ&yk=3j4NSLec^+g}2K`rp%Pe_Pm8=JIy-}kiE}lo~ z_hch87Rm_Y3Fj>!A#}Eha$;9qrEWcYnr1^bWYOc*H+mR%POWwu@kxQkh9^pVYrd^8=gI-CU6gE!Q`-JqDs6MF6d`>jr&{C(9nUw5blV3{ zscS#@b(ZT_jS?R+3UiiiM&yAUGSZ*t%=n9jYihh-)4`V6sM=$eEB+F%7@oK2xW&C; z2{7k|IDb66kXR$k?~1POT~c`x46}x_t7Xgwi;PXx2nEgo)$%+`Y+-0%D9-_f=r^EQ z9+Eu{Jr2Dry}HGaNP>j(fpsfUuo~D-QlJ{!s-D~C%^9xQX3tvo@wPd?T+-b@3fn_| zUy16kt=&>rs1C6awW$6yxqnr#YMo~RY;3%aEe~592TvEo0BOZK zBif!_m)|!qJ$B`+8%GY0P4(@cni#oeU>G?2nG=VHhX)Rc2hi#n=z5wd8Lp{?o?xuw z{TN|;e*=3aVP*rnl=)TLHcLE}vYiyzoD?D9R&70|;nL-bu||y_1>I|3i_wv-9lN*0 zVfVEXyMc|1xl0`HlgRA~CXa9V1kSpZ8@yK{c?e~w zNs4Hwzo^@U_Va`TFNzmP4PU6c<+lMnK2mwvB4s5I!WOyLEt+(SW=c3j^zg)n@DAY_ zrzl1ngnBVO2vL6yLpWpf`rfJD(NP&lsJ{<%s#9C{jU=4TK#xfzN^B!;PlwI=-*Mq0 zgMXEaED%JiG3x`kX%b1F$l57)YaHb+k=I@8SW#{;7I39qH_qV+a3&jUCCBCl-XKqe zYPzjl#J*b7B{M{_=n6318n2mCG^75qqPbv}oC<{1Y_kfEEjG*XhPS#VSBw+DH_H{= z*AGlDwZ#jOT2>kMniP(vO3tj4uGkPp6%)y{$9AT`&I8kZZ(d@3n8yT-g?LP?i$E)@ z1s~M72!dkBHedvKp2*}g!bpnI4uN9wJiK42eo<&{Ua7d)D(4#2?5(aS7b2aS zNO20<0B?dI7ja)y~cW|KZnyLLGV^fDm`+Fw_ zLJfcdEcvKv;Noxt`v>|5#(F0PM^LelUBfxDnwpn}YmN;Z7#yFdt*Zw`!)cbrvt_+t ze^vIQ$0cueox;3VoQ5iDkgx@{uXlW43O1z%hDFRb!Dmn#WDq=CMtv82N&v$)Xze07 z0M*)P@5Dh^L)jF>;L7=~&x#lm1?i#Q8(`>thsVYsXU^EbwTB1BCqj_cL!`Gr!X)^F zCIXF6O$=bxdvDcx-_Vuq>V}$U%0Z8gjEO+<7_>Nd$*H<&Ap_IEIiThRvL*#9OHm~o z(BsL^K9UdsOFQmt;wV&qvaBwT1Bhlq^9>}OP&$Jk88|-!=gFRYajcjcj6NzNaJ=VoxBY@Tb`9k;c-D;R#F0HA@y;vA5#fvpa++?fZAQ`;^v3}51dhE91NMLc5CvTTUb z@>~Ush8MK0UM-^bJSUzIDF-Bx=P>Tbizt=l;UZZ4L<$P-sk5*=zXEuy^f$|ih=Ku^ zT((#ZH?C7ULRoo!MVJhugQ&xSFit2sF(F6toPHb4ci2aw5cp{p&A!y!(|nzP0s$DZxAi{oa&HT`klwd~o$o>`o5 z#;sXsGdj~MIZC77EF(qPdVW6tzfQdCQ2-<=D?5*hR2Mt5{ zgwB#9!Hw^*QvR_s1h5 zL?zX|J0@vmvp?F=YHyoalT0hq=vdQ-WYWxNq}7gAyOPOFKVv47=@^qf_Cr6bUFlD| z)|9>H?%^I09(l1iJtGmM0a+1#`+Lvdd;Sg`W&2Ns^vwHGNE`J1DW`4JJt#rsGinpx zb0Jj{1XcsK5lYb@MZ=U^vh-vWqIS9&zuvktlPEe047-c!GjKw3 zo$kOHn6B$vC8i6U4gJ~Oy+#djYI~#8Xx6s(s>}@6@`uMmGl-5=6Fqiw@p9uy`@!Ds z{_fiT=4P$Q&|6keu~1sFA*&ywpiUlc-C?K)zZ!Y?BQ2xxZFyqK5u296Sjd50906a_ zA>co_#4lyVN(l^%MqnrF4t!)MjzKzgEL6Pu#AN8l7(8Y(63}ooKz3s^bbZqf=R`bU zdCPr_2*oAhe3V@+mn(7|6odtwFR`qfvGwT!19R0Uf%g1^S61;6ssZOmV)5HVG#2 zVE@7)r8We9gsiV)$8|xrCeaw)acgH1n1c^*@Sf6GA}?TI4B;rCA;g(14QLpeJsJ`- zpv3bdmWZ9&QNka2Q7G$cAsjRcKl!S076`bcL`cE^R<3s8TH!;5N4jSF7SIx)(rMS?NxQ2` z_OG_u&Ar{N&c<5oLlhJ5#EShQgQ6Om8}(MYvOFIzp<*1kRH^Ndb4W6+*X(WwI17LbsPRh7Ys_&o0`32$GsyzjRp`4>YsD$6C)9XcLfm`&PU&`)G*DhCJOEAgwG z-eN9rpO$UnZP_{7g?qE}O4nEL;l+>rTe@TaZ}4NEk69f0JD`^K$k;h_(9Fg5tq~lx zCK{cCTKT{a2BbT3T)4CiNJPy++P0jxnX(4GD7S4V?at&{Wj6{*rsj-|9Z=CZm0^@P z-b9cC=9`-HQtFShc!&*Uj(!g3=XXhE5P*$ltYg#Aq3;??A!5X4>U>%`&GNV6SJlgF z7L$`NgA@g2JB8>8vnEMK4N^Rn@`_q2@iItJZ2F5Jj-rd0z8R#*mN-oYS;>qPS6N6( zaakzf)H_4vaOX~ttd=i^h;Tj&T7#$a-_E_xoGdhzLx()us#uNH{vbT8MxQ);RO@Z- ze!Tbiv*k~>hWCy>UBf%ZmuuVAR=d6)qXTqzi@IhQIaWx`!0M|<%1y9sb!o}-ZRVV0 zJE7$t(cpL%k}qZ}%Ohn1FDBrC__kseS&Vay1DJW$S1?6rK!odp5W)2e-=9u*G zRf9klF_1?6ykt;6 z8~7y@Fee`4*>fR76Fmv#|zPq(q81L4!Bwb8z0U19L1P zcmksgFgeK|MsskIc0f664yDU%eDqDkmZATUi9ji*Hs-blVr%v+QhZ?LK$JffI9En` zaZrC*2kMpp^>`@+vq(*Ea(jg^%!%Mqm`(BYo4eOR#v5SNV`a9DrVsl}u#I zCkZF2{hX|k1LCrP@~6r|r;eG0as}M)W0=*TK#2&*xGy0FF(Aue;*pbv4J>;CGOS*B zJyW2H;2-8*s;OR}lW2a=SULzO1|gY2pW8DdKbQ;X&<~x+52Rx#Q?7%73RHSqQ;C~O zN{s=3kkkkKWlr{gLr?bgvBhR3*_VTi|Ki(Q8jRe?0k#*GWh#DsakO|vhZg@nM~k?9 zffWY&@Ec-lvek3kED&P!F@y0!Ad|xBn(jj|WDzAiw=ryuk0OK?A48 zv|GZFvg2-Dd)yUuripxIl%q~e;^GMXst%z);Bpx6P(^3NNZ`XcMynTQ!akH)??in{ zcKpvB*EPweKk{r;(WRI<-UAp>DPoplDz3XhOPqgVQ4j~X3~~D6Vd=C@rap3iw z6CHQ_A?F?O%7+MYn#h31H1)5TY}i=?*KxiJoVL}GMDD(0WaUV-fBI_6jbTJNkL_jGyqT= zto9Np4kFt(cQjN4Adazb#aV;O^5OS zrZ~dcstJtWWdF?CxVTQQAB`z|6XDbc=Xa0JlA0MF!_B1#?FeF>>yOF61fM9+^ej3< zoQOOfg%PoR3LYesJoUS?BuyPy_bKY2TA}O6LyjhfH$pPP)W>}QN0qcDQl^e0h^m^2b01)R6{4jJd-QZRB=fyGQbseU7F{VI2 z0#Sr*Yv1YhOU$m7D>YP2Wovzhe9+=Puw)%0k&Oa&b+u!9CPWnVq7O-U97c4IK?dls z6k3B6J_r%)$cex*JTZWM`>R-9fNc&U2-?4yYw4AAGfX&Ey|LM> zZ&lm1PP5%=B(5E<9RyC#jHodi;-ev|EbG(Tdd9Lv*XuzH;@jb$?L*AD{ z0e|Cz2F@VChu-A(2=E&hkbEfIUjw`Plv|*~Z(Qs$OsvRD9P$$I8<)8Hn0A}(^}I5# zKqzfqhH^^GpTLm)!t`-8QxTVM$P`FU=yHBYFrbQ98fGwOQRo4X!g|q`8);b{>(g5zL zDV&Oy=`v4ZFbgMOzSB1Y8(ies9R)tN%mEEd3?d2fAHhoArREW3Z~Oj$W@KYFh1ny= zrmC8h{aaNZ@sbR!HTFph<&fNE_DF+S-8b%qJdKQSzNFtq< zHZ1`UjbCHRIb&#{xUzb$V>IN{hQ&c)PT;Xy6wj6SmB%EiEm0~98X6prbgxHt z^0h|H&=MlJkLDp0ibzTS?LQUJtRgwm=KtqRY{w+##$p6iqy*?W5ta6^sEQUIq%7E5 zvVaoDKwi}T-8?~G1h|Dn%0PidLS+`!5fdtdM|n*v;tP#74gjNL;9o{%c7AbosRW@V zA>cQx#T9&WadP(!9l1N;j10Cdh+RvuW8ZR^Qw|tjVl+q4*X4yZh-aaQ@fT#&*)kv+ zB<}>{KJ+W4!`Ov#`CeA?o##CDybJG3q8G=iZ|bn> z4>=RTIu>Zv15{$63_;`sLuh`RK)`7v#p$!UsSBV}kqHQfaSkX*umP+~9nv{|-XbE@ zr*&w2-U)&;J>J8^}&(ei9+Pez^g~LC1NIaAo|#}P}%XVQ*t*kQ;d|PKfO{e&+|*R zY0+khO!K&n>LZl?bL=^$QYH^=6&YBmkF73h@q(&O4%tKP1q z3rm7EsSqp-kb`n|EJSgFC3O87$F-OUU5Z1nE`b_v31l9WXD-=ZD5A5`nJ~B=s8lg8`*;Y&8<33)ko3r0Y!`>H2L!y0CFUy0#Tf-^Ok$ z;Zl=e2#`NFZOCO~K}c29`$3HZ$BigB9A?R!2uz=tsKP;LD@COk_i;P3p2yV$jC1(7)uMtrQ4p$`LpN1+$+!TLey-6Nn{U9iwPP` z94N2CZQ$ynDqUbt1gsKCd%HzGfUAcAsEHuZqDQGs?GO1t?xL)*V5}@HK%Y#K&`{hG z3?A|4{t`=H1Kq25bst6{TipO2VXxV~zrxGI5HRh}4~wOeZH9d`c__}1BKV~inI}kw zr;5py#L5gk5}tkRMGj8|EY-so2$+m^A=o4B`soRG52^vFOtkm*)+Tsh>^JM}Cp<-; zFv*6-uk`}+!1T;}3dbfZe4l&(orN4i;#CNNRna(s91c$H3Lc~CM3S1X^+D@XUtfyLBN0O#V#m`C%bB?)r&2gXGm_%LU55W8oWXsb% zv*HeucSnE!B*HdXxUc20$g`1o45xiOO!0?NnXQy(7XU0_>Gc=22^NhdFEuI)vx|yP zR6N>?lf<`mB=H(|ixT4%G;!T`U9;=MWzrEP12Z^8XHaSb1rrX?LQ!qW!hV_*iiXd9 z$pjQOn`i^52k2>Yh+&M5%JSur!IUSI7$|2`;NK?oeqOB{a?{>SGWjOiDv6q)U>> zo)ol!qqq^nREij2)2SnApjldsdHT<| zaVPw0L_i3|l@$Ts(HStoJ&zfNP8gXUO53;LNhyAGaYFM;Kxop*JN}v=G>J|Gxq09Z zXq<%u0^y3l&dFo|$;wGXP4lHH3!pxqOH69`AqdEPnjgRvRd)P}zlDhQt_7(pbU z&M@$wJ2ERQd`cp|)Li*XL;-&@5C4FyrRV|@x4&>RFT~>O2@jB~&S2nJec*Us-dK~- z$V4bS{$34MGZj1JL#>+|YaPhoo~i)3y<-+uoTZ|?II&^yyn{qiN{Ai+Wv@ZJ1s>Fo zmpidtkpos~R~5k3aFTEARM#KWcWa&PTD7@b-`&DVC>0Z;$3nS`O3Q4m)bP|=EU3?$ znT{UsH6PYklt4Zy;913DU8>AuJjCzj)a$hCJGH%ib*Oih>WY0ex18pEk>Q=4Oe$qe)x*@=}vZxAVe5tU5mIhU}cgg0&DxV%O#{3Aq&2L^1YQBtN_X>VUuu z94bq`%o~i~2n!fd%T?6F5-d3JuboZ9|1Z68I+HXNDmAwA|l z#tMW#Ivo1}Gg4zOFV5e6OD9Oad4+}5Vv8X7x;oC5+53VmqcBziquqq>4og%IIybZ_ zN~eEJ@qw(9RFZlYbxNyQ(=%Xv2ayLzSr+APv|yGZ)A6Xt@5JW}=dniJ#^N+9_WG&R zvVAgBC!=1hX&r7LF&v1Z^5&1;4qi87K`rVUm?9DcAG zY)l!}nXMsbR1?{MffwU%8D%s0FCSI>Hl}8V{1eNhL|63V63$#$AV+k)K?psn7xxSEzAgrF z@uTb8x})pQamzK)e0+G}3T>>x@dYj=Xs8-eU{O#HDZ@kA6r$v@0DIt>?NWByK^{@& z%JghRgJVpmjE*ek{+bj7Lg=He5O~*E6YHAmQTB*&piz+WAne5X|`$66Ue7+&0j>dN(*F_-GBuf4kH`|9_4N9KFag>i&;eEvv zE{>Vs(P8Fa;+V-h6o^@E)JaQ81&&tS2j-EF=oa}w0QL+~09zEKaZL%8{4v`@@v9h$ zATO!9eG4;mKq)bO1aZzd>NKpPoRan6Q4$#Zl_JIz7CIi6xpBIJK#BxoFnhD^BJk`o56b zT~t0Defe%6GGvemC(7atCc@j6bZC}B`{|YPDjcq>%HgU({1c#C-o9y2qxdB>!S9?3 z2MORrZ2r9yBI2s*rdQCkdd0A5+LzZbz`T#yHl-iL(5m#TSet~)9Qme=73h_ zQAx_mgS08jA1mcsgJTvf5nIAMO8A$!y_HrOti-QceKQDYbbk~btPHw~?*pl)!6O<# zvfKMBppAiXW}?cnp{klh_5=#w-g(mcWIGnXailn|C1s?y65~>;2~k>BQ*A?D0?TYM z8>saf>nvk>&w5k`I2Er6)Vsmz3EMDMT$0L51=t2)GG0TIUaX7a1Mqz@w{ZiXV@?Lx zY$*SYRQa^Xz$RYek3qQ#wQk3v39eM!!A;fyK1^~n8=Uf1b(D89N61iO8L}DS_q<^a zO{>q`CGg3Z>)3$Mmr6pd#GSiJJRYFqc|K%H`uX)QzWCycNyrOzYT3d&uSs5<0qY90 z5D^KZUfP+jehtU?^PZ+_0pu@Q*DcXR$9F%oIcNc^+#OzVe0$B*O zb{JvJb7-2|!d_En#2FooRYGAXL_l>brrwE7 zzhg#lI5D6uiFX2Xc|C!pi82X1h0HncH+Qv za#oFv0KWyIU~8#!ZKaHp3>I7enl^pPWr#5-&J7uq6Ry3OwUuEAhRGW!_{-A@2e-h8wgP7;)%?Mb_k=3Wc3}XpqLT@mP0&{53gvX)l_q?8(`Yw5+ z375;_7V%6?Jx~@RF#~8xTz{XbC0l9fOiK!v?1FN^E}p3ub>k+Nkwv<(u_jdLXKv=i zX$#imOaoGL|J{_Ehh_w?Zq!?iYJ2@bt=Yj?gLRzf4OvW0#wTyNx44StOau5c%DUec zkk5`DfUs|F*Vmf0-JMpawY$^ktncmY?C;jwPtLql5V=pFinQ{5EpGO4t=fK2YwlDV zXKwN*N|QIgH@8H-$Nq!yeoNDEr?vi|wz0pB9PODF1riO4LEjAMz>jFhv~9+KZtrb% z>W$8$YV*t^hWxssy?CE)Lt?i2ZezaIJ+ zj<=O@U8>BlKua(0H5gUdsqMtcCeJi5Jv0i1;hCD)QwDT{C!w2ThA%HQYt?O7_|4|t z&Y4$UwR^wwX=zg!EWuwe+uNem2esZ8y$EMtjP%$?kfKZZB;*YkqZp z`02xT<=EQ#_>omxdsKc@d)C0D?izcNGp(IstD>3!UFw<$@wad=>dDE>7MwZgp#W;{Jn__YGckTxlmn1o-#Ft9@!lrU=0{R%0SAf;AN zvdoaOhb1t83GbJ|$h2>Q+ZYW>A&p9G{6fEkHmEL(E|YrI8F>!)^LH#qRVn=1FMcqE zcV1UyXftq3yK7X?ENRm2{;Jj->6c^;!3@QJqzKR-#=4e|3v*q^n`8FD)7(;tEg&g@ z)fDw?-*b=2F%3zn6wqfQC&09KC3dQ#L;P-DyH55jR_=d!>0MAYc3LE zp?H;F9O`4cn)OOi9^+KL=LSRs##2o{AF*2TA6P7_Zi8DSB@C}-XsR${5Rh@ODMFGW z6Q;0c&`C&&^)pB%u9cQ(z*LScH<%PksUo)8n^UX@*=r^q7$hY^@L@@j&>)Jq$lt0; z8hCFz0@jl3a`Ig)$R-7EBL+$aNMZy+OqcR>(sxZ$AeM^_QdGof;oy?F!Uw%VV#&F- zNNb15tTzQn@KJKJP&o(r{9ITCAE~x6$g%(eX_22D)Y%L{&w>Rct7&CAR<2dWBP|C> zQb!;zfCdAQ0cMt@(3)iR`HC?np4qyth(z{+Yc`0_E`SMpBslZ*^Y*sFV5eV#xRQRx zsN#X|Cq^M`Xi3);;D{pu@x_4BQntB)$&k2)GG~PZ%*21>tXV z*kAZ@OJWoedYCgJh`9Uu8bk2@g75#=45`9+Y9+lt%@`tdn`c20<$S@D1+CgwFRZ6P z?Wj0*@Us5h6O3k6KjfE>osHVz=7 z@3TNT+MIj(Fck0UY+mJ16mxQAfEU*%6?OWgBW_VHyA>Lx*zj?0NIlYG(N$YRN^R1n zVKhs2eX{AAVSfhx`q(@&@sG!}8~Wf1fd5(>xo+5ZqI3Xt*Y4F$a6a~3n#1!fL}w(Vfovio9}I0eawBX@IgBY zzz_Whz~9DyF=N2ND0D20=R`5z0L!081GN6z52;5ZH1}I`qBeK40Hdo+GCel@S#xA3 z(yIQkScmhayGTeDR`m=hhwBG;kW$G_uPlSx6ny1}U*V?XY%vgzQ_U6ho+^|_C3@sMX`_t><0i;rge?tGS$Bv=( z-Fkatty67o;ic)M-Bm5mGo#UmNtm>|>P=^+RyIUJs>V$v6e*1F#`@mwW__!(QO7HH zezzmf+{#62rb^Z>-*sI(jjFqjHY}%)XX1E(sUof%)9_1JCh#G+@|***sJKP}l~(z89yO z@9L;#=`y>5LVV>T5VTW;a-g6C-=={KUqvFHQ&8rk)_#Q4bKoC26pv&xIG!c-2&$?+ zq+Lo(2L-vkn5KXZ4|GL|$)QJ;E|WAU6Qo-M010)On9 zqHpF=mu7zypS#4Ss>^qh_nol5w*qRzI7~Mb*279@bRIfY$vQQrU1lFXm*B2)@97i} z&1I8>E4t*D60>0RJT3(e=O?{qB9pEJQdWbULWR@)DRj^v=ccLHT87gTtAd0_TA+)^ zr-d-oTy$Ls!*Ot_^LC|NUO4p%OcG&(C?ruo*@RXQK9bXw)ReC}gmf@_G~{kz>>pEw zpOZHy)E)hrFxW&82B7>esgx9XlCwoIn7~xO(p3nI>j!k8gciDj|4cdwd9SmGKk%zz z&-LaK-<8LfNBt0*WnC$0!&qk*KWyI99X5ZFv*qE~UyAXhwpEnrM z9q6>@M_`|X5%hA*MOD?yd9tpx9V$|fKdrUhNLaDccOI>tIcf*OMkmP`?qrTK-jfnQ_V1xEbW z|D?q#RpZF(;H(7q z&%n*zQL4eY#YO{FBu6`Oj%2qV@PGvHD>2g?IzqDk9xw1=qQIDTS>nGx&)LU`!uthw z$PnaaS(L}ncWDVM&1o2tqOn>oSBk1d829r$y-MMo*F@A^oGkm6lfO6xcwa{W{s%z; zU||IXcmR1od7?jzoy8Laa(6_2#xgIw$mzN~!&Y@*e(rmuwUBb&9yneycq(s4&u9r4 zFcdIKVlE6dfw`ImEGy*3 z+e#_dm!jh(*XJqgMT*ZKUSnq~{Kgo3dGIWXzyunSfCB15yuAbp-xv#}DNkCjPZy!Y zv!j;l3`1Iqhp$L|Q}M%#W8$<96aNfPU=z15u(8HQLw3YslATZ5Z8D%?X!a=S2L2&U z$4iJCNh^S{66AzX^}liH1XjuOFmF9{2vb>ESupSmHim;TVoW8*7^cEzr(x#YWQY?F zNtouqrv$li4CS5cGv=7Z8qviQj@!Y=xlH7MPh%qQjpJAxw$oyI>xwt|-yB z2du?=XM!a_dkN-<`u`{w^)F)-OQFV#BN)B6yRzGD=HF$iZ8_=YhT+l4K2sjB^*%Bz5w$87R6I*`EIJ*IPP!E6MmNIqQRXk>;+K z@2wh3%lB5|lUj2Up9xl#SVshFq(C$CUI8bAq+o`la0Xsg)6X2rm;^pV>(vYImjEe5 z^8fCwJYD@<0b;-kBtNIFK92jVBJEX=MqU3oF#2g-eOw-5+loG4u*N>_Lv?N7FL z8qxTfJ^$P)@7hlX8&5W#?L1j~xc}7LT&ST~qSxie?Wr1lWsX^0eq7@PdaxxX^K{|y zQW%EAu^sL1Z!R1=pSK=8b(-Bq@7d1g>L-lsrA)~I9B!bUvjyQv)Ju)a?O;Sk6jY~XtxU*AhH|y&OzKIW0g%1YRuQLOCZd_Jv zSJ$d7b;DIMkVNR0)tbVCmG`ru0IVF?yK0U4E@#$S59zPl3$1KjCbv$QIVC6_kkjn0g3`%$^`F=yu{|vf%NGj-zw&x=IBuZ zzpIhwM8^VO0_svTWD#UuY1X!D)mDvpBa8HRd{k8F>ZA5xGkVn6n6G^vIXioPvuiFc zKdbKaAAh#6wl=?YU~YIj>wE6 z6$DkcSWf;nf_!VgQER47ox~v?e7a#R9Y5S|*yFL;o;T+og`c%r3xn0;M_c3N)jjC; zwYZf|wNdZ1_a4?TRUe-wSOf`>d6~t;v;BeTc*14VY!cptoZ6bU6#CGJS>2#Wz0 zKtr!$c6m;@nN}c{3%L;l00J|V(HxR zlg`+HHp~_KAD?fkE8xR_abNSZO!Y!toIF)UOwgy96jD0qE>PA>Q)-3ITwJ5^p-!Xm zpWI+JG^}5tM-6><6hXQ-xP}DN8CT@_wtZ^^SD5f`Zd1cOx-$w5oQZ38)7Oxvxo{)# z)MVQgW(_%-*Z6hiJSHNi$+2AfkT4tJYlX^D`3BA=BlYh8Go~VEcJanlIg^9;#YqeH zq0vpHB=n2Ax#C>8NeyV&g@-%J`8mLsh&6HUHMjuHIrAEvrrW@VGWxUB(ar2=Zk*;E zuP0vE1D?Tb@!)b|rMxnqOrfILPp$UEAfR2rHsky}SwCnVnJK-I4jPQEF*({+E43ADEOLs;F`hIzF|AaB zsPjxnPUW-^Zi$uCOd=(18kl?&QXgMPgyp?SvC<%4R!$X7g2E*h%aWTMKjxtzkaZFD zgutq-nf^VZoiLk~0%xY3SY$O$6?S>uv}l;X&4hwhU`pmBU;>(vmDzX~CE+!ZmAq8c zErHcE$YF-2Ab%CN$fYe^QT__=a+WT{rXnxRXf|Hu{9$g!)LUQD?Lrmtr#$*RvRr?J zf#K8lI8%0)hqC=@T`v+U!f^fJ@^Sz0Li_(v!Dj)pm2g)vj%HSVnfdyXPt<)rK#r#gq${(hjRyv1Ap!;xnNY zJB>=CR*an}(5-Hv)c#}bC0FXQIwFNDyPJ?or%PX<(n;7v-9od`@pwGfj|MU~ff8g; z_{IKprmoTW#a_CIkIes%v@|)MlG5ra#(X7N1BZr->npye(^vdOp3OAwQK&3h)IBJ{ z6(Y40hR)Kqdfa!cKD>iOrXjPg=1Jf}YK;O)4n`h2SB9wffXI?0?3)nAZU$X1&8{Dq zk#j^bU)&5DVh{X)rcF5nsZZHoW2j2zrvxe#y;+B<{ZJfcvdI))u&>N%rvX2lQ;HCN zrlnsBT}bNn*Xoe`2%3MI)FF({=cqzr=;t08C6>PhK_sgMSTRWv>W1MiG5zzj|y zw}v=ykrDstFOv8IOD9=RWa)onGS50o4K^@QkUYdF4A6@VCK%r>DLjO5eE8cZUHMGp z_$+-#IVgS0x4U!fM=_PY%AQ>Ou>57+Vfj5_u86&glXBNDK`di=Fh+edBGD-Dz(DaB zHyL8J632^tVrovlaA;bYLl65%op`XE&{V>Nnok}vJ`>N2y-Y5UmUL9g<)i{J2Uyje z#fEb1lfmY9>jf*X4B8_+Ki=w(I+l;4Sg5?dEgx$TcRSO$JCFb4y;VS?)?dPKdb zWCzX>^}veO<<8ET`zF?2%8FmHq7{a>0C~J{E)Z%LMF)qKm6bBs@XJFi1BZ#-BnNXzEsX%_47bl-39i;ws0jbf!u>e!}o47OzA#MN(sb`bnDC~nbr*j}66QT=X>f2%8_bBl( zS=(Xc56O{Z3hfp-2>byOTu9M2iXdLVCrdG{&{h%0#}af|NM(DzW653ia1p$kUtPug^dfm+QomdSVtok&Pb#`=0T3c zKk-}u)Nwp;nP!16dU!fG9`Qc!qMV&U5^O)ko-hUVSDX`c{?6%;aT=O5@GC$1kyzk#x@kZ{aSOnH5&u4U;ajG_9HP_T%|)k6$Y~2x zz3U>IBb*d(?lo$=k85kqPc^FFDSt@4G3^G=)wq0$_BUNwXn$qJgvlzVFuU1W?tsy9 zr?&eDrXb5oP3S}cjMAC)8;DP?)18aQ5}&jhf#WZ5fdhUucrA|4LP4CHum&H<)AH#d zjUpPjvbWN~$aNLbLk{=ih(4!7^#7P6dOS~o>!vv2#@`Sb5k67Ugy|LN5{DSRrC!;%?(zg^wl-h14s zw%gV92RpUhc4uSn@h)V#V%H}_Gl=YN!Uu+J2>|@HY9mHJUQ%_fxm4S4La|$5t>0PS zZ#HYY>&)<&HQQ1Qe`msHt`kvXZf@?qLmGJ0ogD`LQ))#W+X>!7^tHR7EtrJ_!_fJi z)koDf%MQp(N@91Z08SaD2P;&vyA_3)^0l}) zC9UWv=@QQr&9+34QNDeQXOg5ec0T1HVt`+QiZUIv?@=!bfz7gkWug#L5~oBgC$L6N zM#50&E$>wP@(fT4%{@KH47=g@zSXDJp_DMdU!C2%2x9gF_5OpVB89P~$fMACTZHs6 zE!6N;%~3!LI~$hO_&l_M6Jt)A41R*}r%5u9w98PC-XK&^fALsgwLub?&)ZEIi8#=gOxFdX`_^WA8$zIUY%lDvumz6S+wpCt zKpZ-K-=%88(FCLW9Z?%%8eqzzjyZHX0(;otun9?-rONvziq-6WOenec1rWxlniqUJ0GgUpaxq>LYt8T5>il{*$1tIG>AC*LfXv{R19G zk~J=<>n@GPesEYCJ2oX%o2|*G~BX>jq@R;!1f%sC+~_$?_rgJxey*+hpvxF6lvd54?mYA>7}GP7j!W ziw0bqMsM6@ENzJt7Z(?d#YG&dY<}MZRTT9i67?zRQi#Oh9B@TigKZ8mQCk;~jR)%u z(n4I}^S@gn#pQd(@;#VnUaPL-DNTdk4B-q9ZY~3}rMD#qN>~Cp5b*4T%>Gi3K=H!eh^3%GLO! zhvvaH1T?IaG=0#v?zMP%Kafv$+l|!Pc+s!}Ep~AAk4)Df(`7cy)aiGZY(mgJ8iY=W z8^d7()`;JO#XQ)+_qa}F1QsRWY2&!Us=Y*}g}#MG7RPPYWzL-e9(8Z#ku2pXz;o*N zbEDHu6o!fAL8g~xb(T;-f2j{T*;r|5#VuI`+nr}`vU+s-!omN z%jBVp9S&$=6i{=31OzuK9GF2w+K<8+{tA$>>p$nk2Ywe!o@|QQ4$=o5+jZrTW7<>Y z%o@|~SFKEiQJkVm)yKtwiixu`Z=(_YQ%vRb!u(>nY_RWq1u8CxkurN0n9Mb&IZ}qi z3xm8+th*t+^I-CvRI_#9>03=EInd`34LqQ37*PvY=YQo-1{}tihqP;XCQqq!r2u(- zg-%%Nbl=|EWPz^g?I#+Q@U>oG9+;k~R|tP2TUn@tMMYI1e04Z5EeoTVq)ogpdk1z` zjR&HXm8QR6RH#(?tXxj#1IAH_gV1DoGWpn3qv#0$m@UaLo0;#2=t_0jSMD z74uqLT=-Q!lg72z>~3s|Fd5s%{5^Kfd;NEArU>p`9&+&7bw-il7br3c4c9yxLHsO; z9D1psPgt#p27IjI*Qm_TV(dk+8(Uhk{=QV-upOH74q&5fqw7)%S4t%a(F>qco=&tw!i#5Tiz*Ea*396900ba@crG`UAW&KGO^A#g36T4-e)rsm1YF=FMB z6lUyyPTC$FX`U}HEgA5Il8RU)pt6kMDn5rHW)3pQG#`Nyvk*Qq%po#eIDY{qiJ~Rh zQfT$*z?>cS!e=q-n$uFYXc+m!PA@Pm+8NTo@olD60Z__Y91e0gzZCabA{;51sss>S z6o2Mo1&z>AQtd16vpHi~kmq9aNgztOFU2Lq{RDx+M#BD}6FQ$$gB0hNmIo*lawyE1 zpbopSsnmhIP%f_;3#TMl&XR61*5tKHwj4}YEt3yQe8A`}%-}1WJs#x3f|wr~p@)tS z(h%Al^1ABZYC8(Z$sRcxCkm#4FQ-FMbuK0biB>e-am*^k6=t7?z9+=Bb9c*RMsOGg z!li9B1K)fuc=AXf=T8&iMH2|lKrIto^c@c8?~pB2Lbzg=#dGmXY}y_55*k|Dq+ntL zkbPjfp^)2Tm0cQby8d{s-q@^v%8Tc;&&S#U2seY#p=SGBTzkbAlnO` zg{yp2@G77O0S)`OdrIzZTs{YadLJ94B3wL`r=7qbdA5IWV30vyX%D+HKqC}&j#fMG z4c>c_e%oP3jKM6X_yMLKJ2wbPo>)1kvEHmz+cnaLFtVh+Np|%OH$SK>f0!*lO{Ucv1Jmk+fd#)1HC|J` zY{dU%YT99Rftmm_Ag@3 zAgZ6CqcAcD!;a&HGyu;tAlCQ@IdFdz;S=&X=x8+?SuR&f_&+I^4g5c`sjTtQ&^AwL zTOE0$S>LHPpOA;OC*%X5iZRN~2vlN!*q{$Z;>h6`fAJ}UzZniyGcm02zeE{E8DUF6 zp`c$p+cRiO_@7599c+C=F19(%Ef z6{u&K?B7c>WIBwd{g-eW(7NY)&(+qK<9_{N6k=;D_$c&Cd?#06az~Cw`D@$;rx&o^ zR-kD=93Cjku?j7O!@!AXDHvMV>MFEiJ}=ELv467F;a#j^n=uqr$^bA!&vTSUD`hBD zZ-8AmHc_dtm3dxrJTcZv1!^7zd~lTttdu*?x2`gey@n3VL;yr(0jh+SD6;?qJ+P() zTI}s&My~DpdYd4+kc~Z{S`X^GTPZx=YF2mKq*dFlt+!`5{>+g5#zwVWn;{#u?OMAA z?Wz0<0qjDtS~PanRv2kWR9EDnNJvj8G3D?y=FoX0_%x9f0B&Wt;Kgder^FSbLU}E?YAUUAVS0NYQ3jZfX_64nE6tDaZjr zC{i{_NSr6_ky!d^E*?th(hqtaC$U%uzH5VQF)a(RZBg#g2w_?(Wp|0Jh-#iw5uR;Or?BA;H;^=r!ndO*mEOf!56f-LHI@8DtSuqENajmy*0ssxA$pFk4#8IaXREXY(^< zwSOG{t<11UZ3hLf%4nX@8Y6h*y45A(1i~2=F6?I^xhyAwiyOA?Yy~2f7_OR$W z-XQ?R4}UCIusAe5>f+OQaA}}8dE4U!;G3?eRoQhDt1L*H0QuDN$)Uohc;HaiUiZBN zr>6nIB1fe(=yUM2I2@#59$N;&1G^seL8kUyJGN7ipVVluo;3<1f1nu*zBOH^2e?!O zAHmEbum-5>?xChzKWr={pbVQ)c1nCSBO|2fc;S#*fb@b|CO?{5#eq2-I$kdgDB`28 zPm;cfPrQ<57h@-7_Z~jQFrvdW+{uq_i?Ev5!(uO>)YGmgmOC=t5$vZ3T$cQ3CJvv| zdkv_4dY^Gbx8z491>z$~g7~CMWrkYxk7y7;coD?q1Tdru7khzYH+&sj6@ij0%qP){ zkm9&#kom>Tw<*guwoeENot-hvHKVM}sW(DdbdqiecY}mDHhKYKZ_9 z`u_LaKWO)$~)Of(C3%E3-9O6B2mMoJH# z)KsxH9FKkg2CFbv2r7`8DVAbhdQgI$rJ9Wo%<(598UW0~8tY56p1IHn6FOoQg-~Oq zlohC=Na`dAgzF?fD!z+C36AAQIe>OhM^31!8*7Ne$ZiyY6>vubJSx)r%09YExI{xU zFb6cEfet3*C$B!XAr5V(yU~nXe&Qob1Uzbp{<9b)K55z~J{k;TpG+tEwl#1CpS-EQ z(4`Wv^Yvo!J=1(txU$3O>!s4H5&y(XCG_QAFP2!E>?dBVB$58pvt*jNX=!1x7x<&$ z8k}wCJr%&QFNmOK9ywG_|1g3;b$TMJJ-*o|Cevb=nt2f|_1DkVbp{R`_DfmrKD}hg zf2W!&Moxrkg<=csc1Y<5WP^fXHEK{&a1zggu^7r6WG6}o#bH3f6;ZH(lHn+_3scF$ zEvjOAWM+h~Vnhd!z8%&+xldY&Fn-nA>-4Njv2M>^wLlvoG+ns*k9gycuw;|H~7 zjn`nKC-=!TbEKLk)!hxXwe9-D8kvsOveQ5E_L>{DCRux;lu9iwN~@MTvT4-?7EH^& z7hSVUkwI&tK1ePphcm&SNbW0JMoJ&5B7`^ajB|*B1N@V=M*PZOtDOsIkAj?**605_cU12*^~Z`@HF6k2}{xj|2Oj^ zc08LtrvYJMN&~P|dwxt%@l1RVeR+odaO9c+F@u1Bf#_U7O)GjD;y!}RWgUW72>8qN z(76kZQ86CUkr_CUwYl-Ai3xFMW$)o=2y9bGx_;CrZ9fRWsjD5B0FBIVW}n4{sk0%5 zv!o8rPP~_pgw!0kGz{Hi)?>@}%pjN{P1DBTZHN7W3q_OSL*gGCP&hU*29rx8$|sH< zW&QyhHD8mEHS77{bOFN`BLN4d(GbHkIRUlF2V+WXAN*cS*ZpudZCT6L`xg<5M)Z9# z7YaUbcG1BtcTa+5M0VU%aS2r-)2qv?%LabsJ5r>4CZ-BMC+5W0aQYR)DG<+?_#oN* zpH6TTd#pHHd>il50<+t7qQSE{b|YkWxZxqVI)A%aU0bWScRmrxKs$}?{jK^g%X5xB zi|W#Op-=!%D_kffAwcWB3)`3;f1Ku0fH~I0Qe22~6~!^&a@H^d1niH5QeK z(1~@pIQd`Jk^ldYlYh~%Apd(q>T!d1G8nm$Q^MPJ%LkXTFf@DUBNq6FlzSCacRpz# z4c+;q-4qI|IKHuFs;m1m!tpEp^0aY5CqfWH_HU0BATb zQX&<6#J<6Yjq#f$i0!xlu^kr-*xUH=3OvCtgo^k%G_ZutEa96Hw-wdc-JggJ+<;R| zI*m@)U%o}Us3x#axgR%!9*qpbZoWmibn~oyo}a1GZ?>nL8}J{Bt~xUI`HXz_EK>e8 zrri!a`SC1rh?_44Ium$>lIQc>yQvbns7-fOqm~2Rg)N_RB3y^t%SzTp+ zUYu6k)6t6G=8?NtEl>=*)v{NbT zU=}@GGoGbiaa=yWawo^-(>s&0stIbOuofP~uH(tcX zD8PgWLe3Pjn4QoQu?yf|J2^b|_q9HC-+DGOk0JMEKy7eaVn1rw5BB8ZK)#{@@^}6@ zC?pKXbmuxUrc&S>K|G3s!1tmOM0bS{#7%13PDI9m6Gha601M4gm_GBAAW3|@e$eB8 zDzME{ds?W)N}h5!k_1$pv@$xlTB(#%Y4vglIl#@#c_z!?14oGP@f&9%pc93+xj$(t zq_rl};YS>H;8&7IbLcRR>SHbJC~>)9rjCU_JSvp}Lbupk{^H`0w5ow5QWUHejzEOO zLgQqEG;6IkVexr5EWt2I*R&2t5V67mF&8CdE&*eyfDZhK@=|H4nSiwPq!myDHxsi5 z5p6I+N68AP4XImAHw3tcng;tx!6Cd6YlvW$anoegG>eVJGp<{3hpj}uPEo@ZaOA@; zbLe0L3Y!5R#UHI7G3Oy2TLZn!%_d90Kuz$h8hM}_D1p=EklG1GCa#gg!0@GdcmDX@ z^3uD9z0qfzYa7SA_tu|$UjHmSUhNJ>d(MOU!zNvIme(JwSX;}VtT#S;x?@+KcXt*k z?KzxKzW`VOL`*_6;^RNMm8aplT~IS!O`(60HR@tKj#nZW zTUF{^xB8~nqXXIu+G?x%HXsWJTT5`bf(3y#)DQxfmlhX5?$iuGWV}ia0Fpb40VG!}I|bqBpKJkw z4~iBNYxh=W4TLXib`IwmhDb`E9EQ3I*Qjd(J%ELHH93mb!}@Nv`=&C7Z-k+1%*{Ci zb2v+%qaQkmgwWR8$+kpvJN>pmSOBpumsVF7PG~^CHJ>OA@Ii%xC^M+kGPicx4W5-X zJ5Lo@FD))F!I-|8oD|mA4@hb`CNcRK#9Vk&6LTS%kt9wL4+{cSei^HXKzlPJ24=74 zc+Znj^WuOHm&W69G9c!En;W73QcenqZ%gspb-IBW9LMhFM&%x?mWqO(X%FuO*+x8W z`4^xgKfy}}!$HY(hmMCK8j`@escl;c86n2UmP9slJMI+UT%0K|bWFk2bG%WWy1_@@I-*yoY!u`Q`N6 zp=}b*nNypD^W;81Zt{BNu~Bip`oravnmGT}RTfqvJ646{^Y+u{L{9rLt-rsx%v|_w zI;5T*c6^Tk3v?E*D&L|Er#v2ylT;hK%j05IsAS{~i)X-6Agf9Ov1E!9Unp1ZiRh`o zc%L{0Km#mw`Xr3N$CCMcJ&vpc?{%C#L}bAd7)EQ>p5x?AiOZ6=L`s)xCpoM>7t~a9 z8y1+Atdxb<8hm)bRW#7(s4oKFk63CGaVV>A@g|Xd&kp;;Ux5u2AISQSs=+-kX; zm^gey@yu-SZTu0%(72Vf)|>T4yR%u}t^qM1@7lgKf@{_eEZMuFFmvd|g;gg6ABWkX zB-=g9w7*AwH2cBRVeh9;hqU+8o^$Ziq1XGV6^1{38vfL={GUD_xIZ2H2M72y|6z84 z=<}fy(2y*Y?ewUadtb-(dvKYoz7>{7KLce;<=n?U@K92UKq2pExn>NL1vP~I2Rt!x zBk&{t$Hv^8OjK-$SAG!vcn)~hms_=J^V8j}4u+22Z*D`!Jb9~{sQE3#!jPK5bFVkY zgO8#=AGGp@Xr)zax9huGtxlubexNiZ8Qx0;xN8IMHKi1~d1ShW^cdYJMI5r1)Lvr_ z_BJ0ziD5THwTJdz#RH$^5aK1`DldsDpe113uede*8z*TkCkuazGnf;FnF1dnCljSo zXdY3rP$m^p0!^|@kElz=W&nYGL`IIuLgAg6^HnUoqg-#Xs{F@TQ5a#C0vqJL>|LYM zfZQ|OJ4G$_rE~QDijMXD4XzL4{R+kx)s5D1DWK^2gjsd_rgaGBVq`!g6UtkCf+ty; z>s54Ksp+T+FKi&m$Wq(k<_DQmQNOVKpc)KJ&o;<;_6=)h4ny8TN(Gj8T#2J4=O9nb zoo^*}oI1)^$}6kM1c@4MQy{HCeVGIFRMH^~$V3wfyysV#aR{`k$6dt&n(jy ze})x+cM@gTNHBS2P7+}eF#b1B2pF#q>iDki z&Modjp>lHC7nkwBuOoDug3yVr6{M~O4;o-O;e^B_Hg!kODRIq+de$)+P%|6_%*G6| zb)X@eWqRTT1XJ+?iWjK16AoSTSk#>nf53|ySpo^}{f2at4ol8aanF zn6>(HjTF+Um}V#uedCGEC5USLI6?$$!WEvVLV|~%uRmL?edez(?hjYX zdyB)}17~Hyez4!IE$>yvK)85YLeHSKrJA3S&FILVe?0ow{jA}RS2wnvRiBmZ&sPqf ze|+zA|C9PNXzMjLuIAoeJJH}BKDZe^2Q_PxIk>+Ppf48zLc(kIA9b zOj%-jkCf3YKt$Q)MdNUNZT^?t!Fn)i`&+w9E7r54kNv^DrwfPFKKQgAc+VaVR|iM? z^E=jkm@&5du!c#sM7!##c!heU{T7tG0Yl#2Td!^>=BF0EwBKHbqAx*Fk?%&GpbAOT zXFNjVQF0MSj8a{!Yoq93Wzb#3ac-=2AgENUhWA9GIGE`OAbyn>?~FVLyk9$(gTscJ zd)wR9c6|>oNJQOPrS6r%arg{Hr(0Njcel2FQhCt^bZ~QHEs0>$YL~qc%d|5E1)H_a`ll)sNMa{|B#3)7@lGA?WDnzYPt|v-TeZ%1eN7#MdW&?!j3U$OgHiDzVzKzM^ zI<=j(+D2!m)_$ZE6-?)^1T5B2>XRGGqV#MPbXLB;6Hphd+6!=mt2OAJTF!g$+mVPPFOB(|)p+lzJ@0c=bB=)ZT7&9@U!l%_p5k?aYgy z12XkUxU|H0{hK@0Pdm+8Yk#|qc@xEEs3`-lfT|Hm&o>**`lD*QhHAOilUBR7)7hxE z9;y%uZY%=xUc#Ck=39m^+Sp&)uCJd|Ulk!hJOL5nc6>8~R4|q#uGw7_4Mbi)8MK}Q zd|XmVRW%XI5Y=26VzL0JlGT#DDX$#Gg8aA5Auz zU?UAuJdFcowKI|g2X}ceGzcs9ZTk7`sbK=lEdP zgxn>~+9&(Li9%&FT>Bg7dBTRAHR_4amE|t4RMBCz$fRB4N?TAS$Vo1OB@CfR0lpAYn=Tx z2yo9FN)&;^NRSV#Aea-)D@kEbBe1+DjhJqnD&WgeGA=(eb|L$K_sb{@KrRwso)&fz zarUJQXb>*!$-ZJ4FMg*8f-ekG_V(Lbd-dHd0^B2M)tZlL%@+bS$c@4mB)b6qTLVyA^_(lRi`b~-vPOLjtjpY^t{BTv-Mja5A0{+_| z(?X6BdyCDeto?~CiGn9J2D!Tv;us_(jK#L;7q;s_A4sFQ*JfG)KH&?ISdA_!c_gLP zPU7vC=~O-MQSc?(^|fZTDY6#aCGEZwDoG%FHY8#M-qEoRzf8}um~D_AODd6JyM)>n z?vTLaMDRm!P4umkxM)=_LJeu-Ol~qVu)q}d8TxJzOEMZ)h;QCyo?`GTT_NJsg$r6y z<_#&zK>LamavA=8aS`MPIuYbs+(itUR^^Wp3#d#ej&zU1gn?4cz}r^aAbrGd<8cwVfK;%a?`GY(vIVWR=#6SoA2(V*u9@tG=oDLIR3Q0gMKd@;) zBGYkwh|K`*TqpS_e#K6Qd|6_r!=c%u1`!!n+1uGDn`QGHvN&rbfhF3TIktuX4;gE&c@-LnVTP84o0H~dA&Uy6tC`1+0N%Z$$=LSLlTEZ1A zroZ|mg{r}g@0k!4n02?Hkm4(B0ENQDjl$0-NTE=;RrvYDJB7kTu~3+Jw@@g&S11&2 z7YY+s3We)meDTE>*9(QI!rek)YGR`B^Qn(?Xz_n3XaU`puoHnEq2u*jD)d7B0Yuo0 z`iKao>xu{`Ec+*3Bu9NGuuG8F{+M(f&xCZcGfe#Ss27DZm|ex}!Be<+uGZ0H-A%ix zjmP6zu@azVg6Jb4B8Ld)a-gMv4*d`U0~{-gC>uvS0R?2YxlvgV8HFwVOgDoJ0 zV$(S{#>lEX{o~tOz`WaHGZ}m#2KLU0f!D!haO6f|jDFYngQQ8`DUQVdUTl&#S16f; zCqyEp10vd=3x|~2hcvSKqam1_L8r4;c%)k8&7He$K~?*jUgUe>AWHNFEA>*M^9v(; zRfp`qE|6WBU+Nf9Y~^}pgu<7R zxvOGKD97U(;oyj>uBVDQ3D`y0@u;+|_Adsd9tS1^77p!Mb0()Pb3Ot6991gi;GSrFpqpX{>& z@EaGn4Pz@s){up!fqO+=SxhH<2g^PiITkAnSK?6kZj&_(ztAuie%*FL3qrOZm%4#( z+LjqcJb=%6OwPp0Dd+rD{P5!FzXs@^&KLhon4F1D1v0~pisOwSx*DF0P@o?`mP+PT zFbw=&U=GmMOunP6bV#~18dK_#XzYU=J^=eO$UiiKpwub)68D|*K!bjjXh!;DTYrHR zH<>t=wS23XxGL;vE{95JG(N_sx zK=UNRAi=wtOYqeAJS^}C5TNVmCSZG#uTUOx|Y+tDNXKZMG^0kK%*vg>#C4z=1h8n3$f> z$Tky{MhXD3fU;RSlrJtVtdtG>0+kZE3(EnWTD}+hE+rp4Xtx_8w^|9x8%qlealMe2 z=gd)z;=B+L3w@znq6IE;HqZT=hyS48{LMef0FXioBn8DYi5QawFirwe@YjT3)Rf_=W1TiyykLWHu=SF^D1m=NT^{gxlRqpf#Brb}^HB zj2fDIh~MIRu)nF-gF%>(?7{a-y}lJdIIj>y%TYL3d_FfChMqYzmSFr>**`80>opy$ z|EnCpoAt0Z)Q0+6wJNFjbPq;&=w4bgi=I4=yo)H05V2fQuY{&WocJyz7)C+yW7ta=NP8puPo5sCEtJGhYI} zZY9@W;MabzmI&boA`MIuWS!9v?~)-3eq4+RN-4yHD-zLu`u3X#?^78bQIvy14sM;a zZion4ZArZ23jEzyfHX#-xS#@EqM!uC+~ORP?#J+kB{TTW;Kkr@gk?^`)a7`cc|^st zZ3m!m8jKK)eRs91~zJkzk3++0@{={H^9f%c}r3yvqbv_}fr?|#uiuWHGaVPr$5_XKO5hJu3#J5>rKQEnqQSn!X$WT|JXyf!3q}f{;`X7; z5|&vKWe|=|Mbz30*{dYpvgJa&y?!RVJxf?x;g|kjs*wh1Y z=!mMwa#MMGaeS%k@P%@GQF;)#QuT=G;%z@F_SmQhN=b0n&MphUN}x~w-}b&e%95kJ zukO5OU(&9mm4qJLS%g+=>&|`5>&~z%H2WTDXZA6>t6dQ?^zGaCPVe;X?(Ob7vmHpsZB{5X1BK3o7)t^hB4!0FoZ4*~B7*Mrzvykagiu7+kz~?8t)rN zV}e8&^UbRD}~vO=Pu>+D>TLf6^9WH!xU`ntQAfDzlO zrFvNvy^J2{Wtb}uyadz(mv=A$G5W7|^^T{n+4>o5O~B~G#n5U(=7|?$x31cu6?kqz z#>h>jO+_fM!(~rPyj>-hQScG~$eWANa=TS?4cm!f?~uvkI2flO{g$G&3QvfpV{0qJ z+hhhUQXZi0@WHfACgvLy$?dBb#GO`nXY|i(-6k9~!eJ0D=I|Ph>3M!+1w~Pg)+GmJ z(KkE=9?R;9^1ea=U3S35SgZLkKfaguTxUJMfGY*LHR=Ijw~{|=W1B4>dJV|2)@c3- z8IU5*wOZC7c4W%*R2S1spmeNZ+YZaNegKhCXQ^HUX$O|N@c-H=3(6P z*R)ry5T>-^g2XkLoO}5d%kuMvo43|!^MS5FT=rVl!(2YLU}v=C)wgMcGFf9VI zX1EdZil?>ztdAPLzVE;<)47hdscg~gA*6fTi`g-06f0W`y9%0z<#MSq z-s*PlLgZ21aYlU+7_3QE64}*e;ttu7DDGf0+IL4Xty|6Le{>|g`kr64TCL(ru&NsB ze)zYMPcb&j(SU~J&vadm=h*8t?eq2c@VR^O{QTkL3+I<`?s{qI;PLs{xdo-;9$GUT z$EXYTD^q1`3*o#A2IW_gN)KLqRpK?PRwTy?A+9uNTJhjM!2jmMu2da- zaRb!>bnl&er@P`YH!f6ENE>lgC2xGlozEI_za@kpS!BkTn-46bUa+GABnP?$)sc4@ zCC{=*7%8>3^hULcWqkG^CF?6c5~~Us*k!bm(duJE2`8WL%1hVoFOHw7PRTxFrSiDc z5@0Cowp__#M>YO%o{HUp$CXR-A!X^JABW)eYHc*?-h$}9inXZ!?%veR0o<)jcQ&+^7MRx@?tm1ShN^vOmn~+|*(1~Lti@(KB8Ov3M~|O5MZSOHTsmb^4&jCmADdl#9Ajw`Rh{^; zzq!pkwemO@7omIlx(^51W{O2p31bI3;dL7I+j98S@rBce77j{pY&Q%DUMi&f+GGuM zmr^|y@`Sn-zALz!iKTh+!xfjSQ#K9-vK_Z1DUMFvlBB|kfleG>JbmQUp+&_&dOqEA zSCWNPHl2m^tnr3x4|}zkthVw)Pi>#<-qilnpa{TSPMFiKe#6XGd3gpI2PNmTXE$)K zgl*~0`RqYuyJCc);o6sqibTbhVe6}in0T|9pze*QMv3A~c|voBt&`}+=f#DrdGSkq z+#iubUQUcpa8n{V1=5aEgnVGsE@r;G?cx+Pzy2>dWoo+cPI_r-@N1Yu zts1|SJT-TUK{_#cURx8<43nDVc2!H$6JnO*vtY+GC-{%6(x9m_e}$5PnYfsdmsVIuSES9H-~PT#+3kJ6ZBd8Btg~{%2?A@!deYD!&L*X$U&9 z0`aJ>%1e*_Ds9%NzON$PkGv{B>-$~Eq(=08l2epZqJoH|0em0%D^&&RL-M{2M{t!z zAAGMV%d7H-acontg@Th9miJY-m*1?*N760dMdpF)3N2}Z-!~dZ2%!!pmg5Z#iLtLP z8GMmn(nWbQxH@_Jk-|#VU5)o$m{i4Q^O?5Du1rkIHFg)eKo)%MO%7VgNtVRKA9P*j z^)g(VE{&c#kEac+S+&UXyCf2B%S9sHxB0*mln?W4|LM8Y+?A|I7tfEnK@uNP)Xbg2QW8tw2Zkxw<=h{u;?LO6IlKR(7Ha+WeIh2gKR6 z9S}dBHGlm_xvnFk$;oS$E>z3IJf)72gdc8}Uzowp9X@aa&;}zSgBlv zaboNW9gxRL<&rX4%RHC`-~!gT9|Xaf1+; ze)pqtJz5%_933w-;P_TBQWw8Av3Q^uOCO*4_@#}{*Xh9HMArEH*W$FEDp3y6Fk{C3 z(6N=8G-rc-sP{ME+D#I2AM@>G1Q8CbavlRYw|Pt9YblI zGiEG`#SRR+2tM5g_e^htiBW}e<~w}ND$*w6(c5Oa#K}&ajOYB6n8dnsAeEI`gjI3c zNV`4bIth>%XSmZpwWvzOWmhecB)f+AC6aOXdNBbZl$NfS)43EXrx%h!U)u-5-|2b*%EJyWWqiMO(!)sPe_mbXUE|n(8)4iTYx*L!4=ywh0gTvKoZQ|&Z z<2^MoeP-fdyJC(XXjli1hbL<*4);071d@YMaUdsaKa&np+c*>~N>`PrHZ!OcjmMOnrv{r)0*2)*2JXt?Jc65Hh z^lHt?*$an*qfY6mbHd3y-4Y@>26ffI=~qZ!69v0X`x;E#5tmV~)ZDLSh^NYJ#6HlU z-9yK0IaS1KiFlfS^|qt!A8qA%L@+d$$aY&go2B{J z;0#x=TvI9myG`T+^%|_BpnL|@d&vVT{2mHq495y0e(_?gI=oHHbb2JtxdOr~(-5pn z+<#OW$W8$y6))A1cc$T_$+Au47vYcXD*$xOfsLH`0?>N8Z#Vm(DKcu#RjZJe?fVR~kFZjqgPlNU8a%Be9y}(vXn_ z^HgRIL}X_rzN;5!c-DT z;2h%wpD2l4@gPsGI;b4hMXq!Q<*BKErc$DRVl`X5&S{i{1zsAhWZ%&M6Jv z_9CoGix<4rb;E_$XGMu{8D2d;xv@3yH-(dT zw_>^bcJEFFOLgA9-Me*--u{;Y92|iJ)HD%qPNO0ql)2S@U z>DR?>ii9r7BW0-grgu7OYS8%{-Jh*KCXpgfLLfK0b#aylB1THS5+$azdAg@u%nDL| z5~&ki^IAwp-9nvux%oCDcpYO3m!Q&oOKDS5LA45Z)Y7;XB1bnJ7y91gFCqESFK%}G|MBCGCv+b}j=f4H%p6A~7k{tyT4h)~OV#H{PojvwGD#MX!?O%ic8G zj=Yu;!5d}W%0Eba1LfgL!|~RHD_Xsu9dhhTb`W=|R2P!qN9&gEWnJ$>nX8n&uD8?< ztpJOrM`rX^P4qblKGEr}g|x)i8L~N!<43RL{(D?V;`|vnkMJB zW%!L$S4Us9KRtT04S-Ihn1(vf+BKa>;~jvzc!W-2=VM%_fVWZ@#7^09O<||DKwB_g zFhb9raGPV5Vr$*@HJ0wf-#53uD7QxF{mG6^0s{@Bq*)fpxKMg;4=#CUINEW(04+14wMj zF*dvfE_Hi)85`<*6uzG>j|_@tMq#{mzyrl!zH;Tt?V@N5Ac?jYC>@r=5u_Mmq zIkvgJ)C|0~kK8?svAacXyy3YQ$ODxgyh1XgS({-N_J`{N0femQhiVQD7MwFdD|+_#M#R@I8zw zLf%CC^z<_}{4^S;3LJ?QNL4>H$VVVXXh9N{tuV|O!)#zg=5hsPfWJO3%E0^cY`(IO zvA2RdF6XG$I~W`KelL<<9?n^)HG#bc?Dh)AM)uB->3_ZzHuJm4FWbDm5_sn=$MM$S zZ1~{uCl+?SX6vR0P9Isc-1@u~hDOuMKhO%BueqDCkw<5mj#o3Bd?LOxLniPuCw9GN z6JvWe%~$eQE)Q+G|NgV+8*bzawQIOnRC8QZ6P&YOeD`YKecE@w_Psa97|sjy38nz8 zIWfTO0~qRQKmaW@G)`huq9YGnWTf-lHD7t~%H@&mrO}{0>U*9u>PF-tEE7WS1`x{E z1fg#O2$gGs(7yqMu{4As##q~L21cFtd;IPb^vC-?HecBWnr`A3-^f8_EB*wJ8opl; zB20)|bI@qB0svg*zearj^_44E9u?o8qBQfBuQT=>V_&1^mx-^x$yn|yjOD({*l;g+ zx)=JBejIgM$GEX+e_+>}R^iy}0(_os2!O^Yj0!+QsbP8@!^QqzN3R#}0y$~wfo zc^M8mYQt`}47X_4Wk)?FDu*|=&ERz z_-p^*Eg!k>KmXGIdDK0BVDQiH{;Rvb^TBuaerNp0Z{GR`Prc~}fAPAv(CGviH8)H*B?DC_1Z)NPQ=+^8fSFZfkl_7SS=Elu5 zVr>?)6|oaWu6-p)0Qg@WE#)6F+d*Ktk+YtMv0Brr=Z~)YR!}&bU$uj%Z8-U}M`rU6 z1=i|JzO-i#Smfp)3^O(|P`WfRHZeBDKg;9g@m_4!Z&Y#*V-Zk-LGU=9md)uYu<{79CI8qE~sBBAX->jb=R^gql^krm_iDt&B~TXZIHm?Jv&n z&!3o^J2#%6Ta?5qb7I{*6hW}5a=9c3RxMR0L9nZ00HST5b0f=16KoR@tx;FU1Q}Ck zYP9rpHiddSDD(zJp;9)5#>Y$h&lR6MS3GzQtMbbD_?Y^erb>=M{-N0;Cvfu)yo%KK z2yPqW1bo>GQS_azr0DzFo5a66`8R8|Ptw0MS{liwe_sdv_bd8OjgDn?9UD^w+D;?ib5|Jq{VOclq5C_?rFX^h zwUTS@;2}Y+j1GNcP-0@0Qw*2cU^)ifX|)x}l)uL`$;#g)lQ2vciBWGrCsGflhw9i& z3IDR_b5_g<2M!ib9iPwVC1FNOdCo~UoSBCIjliSgL-S!H!jcxX8x(kUsn}p=#i&{v zSL~o2uFyU|pYODa-Du`S#j?P6R!kIiEH_`-!Ps*-b~mfr;YyK*mkWYS1wh06pJTl& ztk)9lI@D49^Pv$Lnfxlr4tNj8`ne*M;#~_aJVNndy+$Iz%Llz5Z7oC*5c4h_UA>(W zgxrGF8Q7$ss*R;RXi1CybRQVjY1NB90CkIPIMvETiA3V~PX$*CyQzlSq!&&d@Z}>V z>hkhIe@PnZrf9kO?`Wwr{Y}ww%iqybr{$@e8H~4f(DHR+EZ=C7y_wPRI))p{aOf3kxT91C zfDE;0xrjYl83s&6W+?nkHwqjXw=EfGT~d&sb`ZH5b*T~7LtAku&@c_hG9*~2ona|e z3{A^lGL0p=b_gaQUW`0w6esc`U*<+_6O&KPYM>|m@1sMnWGpBrY% zQUH=dxlidy8ICOjEquxIiS8;MJgCLXY$`ag9AjOjR%KJLObmu47`z#ZHQTM*uA(Y- zC-i83>Q`n4Vf9$YGD5}cX~-OVh0dL+ygYg-wBq`wA#fBGgfwnpyXIPo3hCHY%dLBg z&A?O;d{qx5qS@h!a5#xw4h&!SLK7%9lAa;`8)MJ*BOF^Om!D(oNygZ}WQ={BG4=+Y zGH3Ej&xt-Sit*(s#@K_5v0r42J;NA#3uCOp7<(II?4L81`whm}Z!*T9mOM;wF4I}e z6HqxaHgs@1V{aGZ*j~nlexAn5%fo}SBJv1hL!a8h*qn&`Eyjj-J}v@Jion;2_op$! zc>>(s;(ecZ-;ZIqhp{{ojo`6M#Jozp9}w?L;{9_-^hWW=L&)C8*qg-PKa0rEkP4Ik z{8Iqwa<8L$dec@g9WH z9_w>(jjD_<|2`sLkH{wW5C0zitl?p(uv7T+7|z|=7u``@d0Hq{a0p;gw1h>n)Aq_fgiHgFyCI+|(oNwpiN^#UyYcuLJoe!6YOT6=GB)ze z=qT1^FpVo7TR69Pe)07DOsT}b_n%qBH~lg>4}N4!c@6h zD~y{Jt56+lOckmPYr?Edj+YxXs|YVwrD9|RO)DZnMlMZ@HODhouqeC>6eCLPRA01h z_Ds)p_6>G}eS=-CZ)|!=`^NCV{ov&Pr@ewDyF_nbv^MAv|KUd%*Iu>`ac|cS5g4s& z?+*8N?GAy_x`EDsE$I>LSQB}O1!+e0qVgp%rHX-v&w&&U2}*`ScoI8NrsukrsbVlI zh#2hY%M1W7f??{RraUd2HjHI@NJt`mKtBIvga$uoJ1Q7(%vNAJZdA10q*Q3Of{rlU zRE^7+C0NKpGOQ3FMhQ>6M7r2IjM6o7tU^d01-D?CGZD)ar<7xfyug}A!P&!rnYKGJu1~adQ=#!B31$f zXGwti+5$++aQNl4>bSb3ZmCAqGp;plCF7$ks()e44yk_XF?Jda-G_ zR$!`|uEQxuqy$@Rz4Dk9O9g^8c_1ne zVUuKfSu%t@JGdzSL>cun` zl--I#%Qb^_UojqP-!e>Jlg@!d%P=F$QOgrq7^>g0!eufIlYs!?8j;`fRc|8@)IuE~ zuuOBUs3=S{3%H0xLc+Kp@88CBg$^O%^Wkwf!#mB7zqI5V~m<2A&MVCm4}Q6o3Kj zJHQGDMUj}YVZehQz{%C>J1C75rQVZcxqnNGlFPKcQ(=5#ii1U#h%}jNlPy+FILMi{tyOhv_Glp zqESt!IU3(k*AnW#__9blS84THibrkrFz#+L9=kpj?CqPVLAoNjRHF!#$}tY zUUCe#xEfi$Dp5jJBNA3~u&Ve`2AKz-2w?M-AM~;h=GYcCUwQSF%fl>>$50>ccN}Dw z*+3tei?N^dvSHTO2fH{t{zoqx{-giZ%ZBeJLyZ58*dOBYm%VJrd66mWIq2p4Awrb@ zXD=Ih_|(Gc;i=PQvpEs1pEJ*&bPrB1Ozc18Pg<4I>eX3E*cB;W+^8Uv@*uxx z7)sHDHu8PHh`~@ehLow%{e9o};4qS(@sTkYT9An!2#}#b&X4?r+(soLELJ(8ulWc| zYL(EZf{9|wcfw*2uKGpahy@C0B7%ux;I%Os6!~CO40VAFU0X}yg?^)G1hJkB(`Pz9 zF{gn8I}*5I1Vdz5#jG^0WjB{=vECx9puljO3P=jmcCG1?P%8_$Cy9utEEHgESDQUw znVHPGgj0yAq$8P09V{I?6Q|G<#mBnD?6zp=ZGkylBPA*r_$x{So1&r}+9AoyI;El3 z)If+dkrhCYl$1)5+P7O_DCFf*9sfB?OYEl&8P|SD&&5RG@c=R!? zE~e)zX$OL=7S%A^$Ou&|x=JunY_|Nu1us^4V(`>5#R6xF?rEtdg@@i^sU{H}tq{Q! z2$LwLL#W2^!yBI5dW0$JZR|3)N=71#qC>$_;v|YrwM_;DICm46 zWI;%GM^R}SS87dv)pyh|CfbdnoI1x%=RrYdicbs`>5ROO#0?}kN&)8aURw>7`d~*T z>s+0VOsrGWkyKqt4#7>T+~i6Y?I=fBxWdlLMI&zl8^{JS7sW!;o)=-gqAg zP$L*>#o-m0w?MVdH=e2FwriVCN>2q0csM_;FEK@XxBU?N2K1wJVXdRN!9w82qP9VX z-HTPV?n4SXBT@GhCxCk(GdnoG;Mh&oH$XcXk?JFQp3wC?)m6}W)*@d+027XcVw!4( zguJJM)o4Tb30!1tDaZV_dKjokZ)skz9SrxwUUZ7#zE@zQWr(q-k>eNe_(eRP!Q;(%yakV6!s8#} z0V`^-DmlVxk^XOI#^D`}LUlXPw4oHSwpOIUsc6Jah#@47NbV65@2E_PL6Ta2tx_-z zolP*tQfNyY5W_FM+ltQD{{pD>0^HF>Ex!>KO~VgchD##}t}~L5EI^V>glSANRuScd zk*3)NkA|?34-;G5sG#jd#n#0rD%JvTMH}j|lJR`Yr32iwT$M$Evt*2}Z^q(QK?~b8 zJ{;*=>X6d2QxpTsR7MCus}==~un@Lu;xwNu95YZeUK67k2%=Z7wL@wnnUZv9s2q<9 zEhU@Em|7%vn`9nH3dmE7ioO-t{<5yy1BpeXQD3!!2)7WbtdMV1>{1v7ZIkY=lb|K0 zHCP=OuB&C$@ZnNVB9r06sT^)>Y6DUOg*TN335}v$a*K<#WZh7KIL>lc!ygFM#3LdJM(JbX8%;PNzA^Goi*HC1 z@*Bgf)P@3?DUk+ar3^xkwPt~< zC@puDbQj08+&##Bd$}|{S}skEmZzphr>0Y|P92&*e)>=sSkl=wFzE%X+%%9F01}TK z=#ojgx+aYqGWC{Ag!>R>o1g23xt_6~GEP@YC{JXZJ=di~=`$524j^OCH02{a7t398 zN%!K&HOTQCn^e_XtaQny7dAwNjZ^J-VRWuHqgC`=!<4Hs6_+*Mr7U^V5>VWPT(^x+ zRmR7rrpBuU`l?Qj#bAzhtEmoVGl7{ZO;t2vE9G*<7$2`ZvNy<=E00iIwN!!KLUnR%vN1J2H8EA0v?}$n@oK43 zg-HO?jz6M`p6f=_eOl4Cpy=VfL4K_A$lgfH+>MgBH$qbKR%G6~H>l^!lPJ8Rm)?zn z`Vg@l05cnDyM{Q;Y4xbHQPM;qlYq#JRD`Tx6~uZXYkN*pHpDnJ2CrMIPYILSFKE)Ealk9kkP_+v+ERdY@`qJ+GviA z+)LMt%oK}()r1q5^+GwmxqdQ7*pYl)(7q?cH-1Uu@`@e!~|O37*WI&tR`I86e2?{GO!j*C9++SD$wkHA?K&k zNnm<1uy86_%P9!B=9C8Mo0pBMiGa#11vlx`yk7_838b_hC7i7yJ5X6;VQ=IFFC zI1K!>RxTY~_n;Y8g9w%@Sb%Ga1ms9A&MkAJwR=Jp)UmR!>uLqCPXaXVE0y&_TO}g3 zP0Wrs4I!**P=!|8iR=RWMEc8tW&@2zfWka!lYj|vqX|4JSJFz1mHz;XO zPd5t#hRTFJWzvGO!u7CHsMli498#pMCBx8zD9rZ@HP4GeIA|}xQHvx}2Yr2glLsnT zMM7xly^e_xO+e=2+%O&WiM8lJR5-B-Ri6jnY1_{d6Oa`yGm`SkkZ_!U_fT%W@+QWf z>tS~=O~@D}GvU#oU8Gg*b3N=8nb9*7rBbPQuO8PSpMWkHxBh`x**?u!ZiTVjGmPba zjxqRYIr;Paz3BoZ325jB9Vp_S!n%Tls3Hjk#k#lV(p9IIprZ3}Nvjs^BG85)Dyw4n zeyGfmVVhjEjBp*H#lZ5t(RHKcK%yk7!eWpdK}+(X;~`Kx&I0a3knmzsyx^(53$%e2 zC4qp4q@NubhG9)8;n2H6E1~4&Dt6baTMv-09a5~)4+;&;E%;$Tliz?RzrmlFF7d-y zF2C`XX|NS7zp*VLzjtftp-GhCMeVz!eOI+_xL%RzVWuO$p$L)RP=v^DC{*M(#7p@N zg^K)sT>FNyM}{wG-|yDGpJj~QFY5kYEgYw)WZw5{-yhJve@FZNkVc0OYu_KyzJE{q z{;2l-F}OhyI6SX~HkDa4|g#VpYLhu|5Qu=XIlCv2EpfaN)D@$%X~=!r%ZG_?k+tF=h?X5qnr%y zLzb<|X<2_Fd>g{IV&&4GC}Jl@Px!>?jJg|9Gcrm-BgF0jv~9?uN+)MsaGW!I2g2`> z=?N=1+8N$S;fd0BqlkPDFI{D!BK9E5yAnlEcoE^hf$%-D2nxpy*~8CvhF1}eqvSEF zl>Rjce;DD_1ROZW8ZLK+??d?Scfy%P`11(gmw);$vk12k{_Z|#L(7R=??vn@J4<;V!qITU z?@gqCKf)hC`1=y!A3*p&?u7F@2!9*GKagOI4}mdm5xkd-`Y@t)h^P-Ga(x6*|3pOP z5>da0s1t(IK9Y#~D5Bmba(x7sz`zY1G0Dde^-o3AM~OaTiM-Dv!JlU4{WzljOhi3T zc`J#$pFjfGBNAB>Q7<40f(@cRk%;;vqTVhllFapoi27v_^+|Z~R2BIQ=-dFbXR#;U zQy!H}K>hZ!h;AbKGn@&a0YPSp{TyPKRqWs)m%REU8u;@_bAi&}jvQ6+7YHX&laGnA zC5;LC7m?yuM2au);&CUGD*j7I@D4pezwP?%C_$DlBhjzQL_nlGMByts3NLaL zcIzm7RY!pm3<_OL0*SBbNW7Rp;_IDAj3tryhK|J7ITA39QgryHjsztb@Y+$D5Z}^q z_<90|ZzJm82^xJot1bQ*DgM1k@$C#8zJmmRt|t&?#|b+82~z!qOqIalyPY_s8smF9 z4&Tkd0o_gEKnVuwVdNS~9MJO=4&Q~yX*|^q)FEN4Kk&nQn4dcz?t`Q(HVCmnh6M)B zc;bim8+bYz8E9619=969YZo?(N84e+GQy}(8O6orqieQfd(kMJWyUVnwkIece`Ya% z$O!4Kr&JK+Uu>1~oG|797WiGz-WRyOnv79!YF=|*DqQgKH~M0ZT&ThZ0IPrzNbw`k zl)^0^_v{Z_m96rmV`0VhBC=UQt!R~?;iK=Tri>xULY7RumNYYQx$eZeK~#X`eXKhX zM$1M$Lau5J$2OGS07`oV4A#Dj&;T P9!k2nMuCjfC3gQ8(zA(6 literal 0 HcmV?d00001 diff --git a/MikroNUC/20260628/20260628022001-Config.rsc b/MikroNUC/20260628/20260628022001-Config.rsc new file mode 100644 index 0000000..026d967 --- /dev/null +++ b/MikroNUC/20260628/20260628022001-Config.rsc @@ -0,0 +1,4865 @@ +# 2026-06-28 02:20:03 by RouterOS 7.23.1 +# system id = NmJcEM+8XAP +# +/caps-man channel +add band=2ghz-g/n extension-channel=disabled frequency=2422 name=2G-3 \ + reselect-interval=20m save-selected=yes +add band=5ghz-a/n/ac extension-channel=XXXX frequency=5660 name=5G-5660 \ + save-selected=yes +add band=5ghz-a/n/ac extension-channel=XXXXXXXX frequency=5160,5200,5280 \ + name=5G-5160-5280 reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5180 name=5G-36 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5200 name=5G-40 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5220 name=5G-44 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5240 name=5G-48 \ + reselect-interval=30m save-selected=yes +add band=2ghz-g/n extension-channel=disabled frequency=2442 name=2G-7 \ + reselect-interval=20m save-selected=yes +add band=2ghz-g/n extension-channel=disabled frequency=2462 name=2G-11 \ + reselect-interval=20m save-selected=yes +/interface bridge +add name=Bridge-LAN port-cost-mode=short +/interface ethernet +set [ find default-name=ether1 ] disable-running-check=no name=ether2 +/interface veth +add address=172.18.20.2/30 container-mac-address=44:F2:90:E8:88:95 dhcp=no \ + gateway=172.18.20.1 gateway6="" mac-address=44:F2:90:E8:88:94 name=\ + docker-awg-veth +add address=172.18.0.2/30 container-mac-address=00:00:00:00:00:00 dhcp=no \ + gateway=172.18.0.1 gateway6="" name=veth-awg-proxy +/interface wireguard +add listen-port=12429 mtu=1360 name=wg-awg-proxy +/caps-man datapath +add bridge=Bridge-LAN client-to-client-forwarding=yes local-forwarding=yes \ + name=xs-DataPath +add bridge=Bridge-LAN client-to-client-forwarding=yes local-forwarding=yes \ + name=DataPath +/caps-man security +add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \ + group-key-update=30m name=xs-Sec +add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \ + group-key-update=30m name=WPA2 +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/disk +add slot=ram tmpfs-max-size=100000000 type=tmpfs +/interface list +add include=dynamic,static name=LAN +add exclude=LAN name=WAN +add exclude=LAN include=WAN name=Internet +/interface wireless security-profiles +set [ find default=yes ] supplicant-identity=MikroMIC +/iot wiliot servers +set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=P1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +/ip pool +add name=dhcp ranges=10.30.30.150-10.30.30.200 +/routing table +add disabled=no fib name=r_to_vpn +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=test owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \r\ + \n#:local ScriptName [ :jobname ];\r\ + \n:local expSrc;\r\ + \n:local FileName;\r\ + \n:local FilePath;\r\ + \n:local DirPath \"tmpfs/\";\r\ + \n:global WaitForFile;\r\ + \n:global IfThenElse;\r\ + \n\r\ + \n:foreach Script in=([ /system/script find where name~\"Amster-GlobalConf\ + *\" ]) do={\r\ + \n:local ScriptVal [ /system/script/get \$Script ];\r\ + \n\r\ + \n:local expName [ (\$ScriptVal->\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/700/f14f095d\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 13:30:03 22.06.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\r\ + \n#\r\ + \n#root.mnuc.backuper\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n#:local Script AM-GlobalConfig;\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n#/usb1/mikro_bak_rsa.pub\r\ + \n#:local FetchFile AM-DOHCert.rsc\r\ + \n\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\r\ + \n:global MkDir;\r\ + \n\r\ + \n:local FetchFile Binary.backup\r\ + \n:local localDir \"[usb1]/scripts/\";\r\ + \n\r\ + \n\$MkDir \$localDir;\r\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=awg-proxy-amd64.tar.gz interface=veth-awg-proxy envlist\ + =awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=Bridge-LAN registry-mirrors="https://re\ + g.vados.ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man manager +set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \ + enabled=yes require-peer-certificate=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=Bridge-LAN +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set crl-store=system +/container config +set layer-dir=/sata1 memory-high=4096.0MiB memory-max=4096.0MiB registry-url=\ + https://registry-1.docker.io tmpdir=/tmp username=amsternl +/container envs +add key=AWG_CLIENT_PUB list=awg-proxy-env value=\ + "NAonhRSuFIrFpNKTs5X32ItcvFuO1kiJUigQZb95YlE=" +add key=AWG_H1 list=awg-proxy-env value=472437748-472438637 +add key=AWG_H2 list=awg-proxy-env value=707808381-707809250 +add key=AWG_H3 list=awg-proxy-env value=1609078552-1609079495 +add key=AWG_H4 list=awg-proxy-env value=1012329484-1012329741 +add key=AWG_I1 list=awg-proxy-env value=\ + "" +add key=AWG_I2 list=awg-proxy-env value="" +add key=AWG_I3 list=awg-proxy-env value="" +add key=AWG_I4 list=awg-proxy-env value="" +add key=AWG_I5 list=awg-proxy-env value="" +add key=AWG_JC list=awg-proxy-env value=9 +add key=AWG_JMAX list=awg-proxy-env value=920 +add key=AWG_JMIN list=awg-proxy-env value=105 +add key=AWG_LISTEN list=awg-proxy-env value=:55055 +add key=AWG_REMOTE list=awg-proxy-env value=109.107.177.79:55055 +add key=AWG_S1 list=awg-proxy-env value=90 +add key=AWG_S2 list=awg-proxy-env value=136 +add key=AWG_S3 list=awg-proxy-env value=45 +add key=AWG_S4 list=awg-proxy-env value=27 +add key=AWG_SERVER_PUB list=awg-proxy-env value=\ + "o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +/interface bridge port +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=*C4 +add bridge=Bridge-LAN interface=*C2 +add bridge=Bridge-LAN interface=*C5 +add bridge=Bridge-LAN interface=*C1 +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes \ + forward=no +/interface detect-internet +set detect-interface-list=Internet internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=lo list=LAN +add interface=ether2 list=Internet +add interface=docker-awg-veth list=WAN +add interface=ether2 list=WAN +/interface wifi capsman +set package-path=/tmpfs/capsman-packages upgrade-policy=none +/interface wireguard peers +add allowed-address=0.0.0.0/0 endpoint-address=172.18.0.2 endpoint-port=51820 \ + interface=wg-awg-proxy name=peer1 persistent-keepalive=25s public-key=\ + "o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +/ip address +add address=10.30.30.10/24 interface=ether2 network=10.30.30.0 +add address=10.9.0.3/24 interface=docker-awg-veth network=10.9.0.0 +add address=172.18.0.1/30 interface=veth-awg-proxy network=172.18.0.0 +add address=10.10.10.2 interface=wg-awg-proxy network=10.10.10.0 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=Bridge-LAN \ + lease-script=lease-script lease-time=10m name=nucDHCP server-address=\ + 10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.30.30.81 verify-doh-cert=yes +/ip firewall nat +add action=masquerade chain=srcnat src-address=172.18.0.0/30 +add action=masquerade chain=srcnat out-interface=wg-awg-proxy +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=bfd disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=docker-awg-veth \ + routing-table=r_to_vpn scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set www disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api disabled=yes +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both password-authentication=no \ + publickey-authentication-options=verify-required strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool netwatch +add disabled=yes down-script=\ + ":local msg \"Host MikroYellow is DOWN\";\r\ + \n\$TGSendMessage \$msg;" host=10.30.30.86 http-codes="" interval=10s \ + test-script="" type=simple up-script=\ + ":global TGSendMessage;\r\ + \n\$TGSendMessage \"Host MikroYellow is UP\";" +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260628/20260628022001-Diff-Config.rsc b/MikroNUC/history/20260628/20260628022001-Diff-Config.rsc new file mode 100644 index 0000000..40cca0f --- /dev/null +++ b/MikroNUC/history/20260628/20260628022001-Diff-Config.rsc @@ -0,0 +1,79 @@ +34c34 +< add listen-port=12429 mtu=1360 name=wg-awg-proxy +--- +> add listen-port=12429 mtu=1420 name=wg-awg-proxy +4625,4662d4624 +< add dont-require-permissions=no name=awg-env owner=vados policy=\ +< ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ +< container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ +< \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ +< 7.79:55055\"\ +< \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ +< \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ +< \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ +< \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ +< \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ +< \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ +< \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ +< \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ +< 38637\"\ +< \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ +< 09250\"\ +< \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ +< 9079495\"\ +< \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ +< 2329741\"\ +< \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ +< \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ +< \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ +< \"\ +< \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ +< \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ +< \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ +< 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ +< \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ +< ace/wireguard/get [find name=wg-awg-proxy] public-key]" +< add dont-require-permissions=no name=awg-container-add owner=vados policy=\ +< ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ +< container/add file=awg-proxy-amd64.tar.gz interface=veth-awg-proxy envlist\ +< =awg-proxy-env \\\ +< \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ +< start-on-boot=yes\ +< \n/container/start [find where tag~\"awg-proxy\"]" +4712,4735d4673 +< /container envs +< add key=AWG_CLIENT_PUB list=awg-proxy-env value=\ +< "NAonhRSuFIrFpNKTs5X32ItcvFuO1kiJUigQZb95YlE=" +< add key=AWG_H1 list=awg-proxy-env value=472437748-472438637 +< add key=AWG_H2 list=awg-proxy-env value=707808381-707809250 +< add key=AWG_H3 list=awg-proxy-env value=1609078552-1609079495 +< add key=AWG_H4 list=awg-proxy-env value=1012329484-1012329741 +< add key=AWG_I1 list=awg-proxy-env value=\ +< "" +< add key=AWG_I2 list=awg-proxy-env value="" +< add key=AWG_I3 list=awg-proxy-env value="" +< add key=AWG_I4 list=awg-proxy-env value="" +< add key=AWG_I5 list=awg-proxy-env value="" +< add key=AWG_JC list=awg-proxy-env value=9 +< add key=AWG_JMAX list=awg-proxy-env value=920 +< add key=AWG_JMIN list=awg-proxy-env value=105 +< add key=AWG_LISTEN list=awg-proxy-env value=:55055 +< add key=AWG_REMOTE list=awg-proxy-env value=109.107.177.79:55055 +< add key=AWG_S1 list=awg-proxy-env value=90 +< add key=AWG_S2 list=awg-proxy-env value=136 +< add key=AWG_S3 list=awg-proxy-env value=45 +< add key=AWG_S4 list=awg-proxy-env value=27 +< add key=AWG_SERVER_PUB list=awg-proxy-env value=\ +< "o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +4755,4758d4692 +< /interface wireguard peers +< add allowed-address=0.0.0.0/0 endpoint-address=172.18.0.2 endpoint-port=51820 \ +< interface=wg-awg-proxy name=peer1 persistent-keepalive=25s public-key=\ +< "o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +4763c4697 +< add address=10.10.10.2 interface=wg-awg-proxy network=10.10.10.0 +--- +> add address=10.10.10.1 interface=wg-awg-proxy network=10.10.10.0 +4774d4707 +< add action=masquerade chain=srcnat out-interface=wg-awg-proxy -- 2.52.0