From 79bbb649034569616743ece1a97f9b288118d3f7 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Mon, 29 Jun 2026 08:20:05 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Jun 29 08:20:05. --- .../20260629/20260629082001-Binary.backup | Bin 0 -> 362430 bytes MikroNUC/20260629/20260629082001-Config.rsc | 4903 +++++++++++++++++ .../20260629/20260629082001-Diff-Config.rsc | 99 + 3 files changed, 5002 insertions(+) create mode 100644 MikroNUC/20260629/20260629082001-Binary.backup create mode 100644 MikroNUC/20260629/20260629082001-Config.rsc create mode 100644 MikroNUC/history/20260629/20260629082001-Diff-Config.rsc diff --git a/MikroNUC/20260629/20260629082001-Binary.backup b/MikroNUC/20260629/20260629082001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..1283b2b2e9a5acc3e41c64ab42546f63700ca7d5 GIT binary patch literal 362430 zcmeFa2Uru^7B;*m36M~vsh}bT1i=!R^h8DJh|;9lODaSH!6bkv3Sz^Kz4zXG$9C+! zVeh?TZ>Z#d)?@-v@f`2>pL_55zUw?Xvoh?mX6?P#diPp;W*4oTw{F)k3uKKD((?VY z6 zRfZ$MLIoWPwSZ*K#z)j@vh=Eq6#pz~N~XU|nPN*mYjd(0tbfBc9O<0qfp?mVIY)_qB*Gu!w9}HgfXHh2xHjVB8-7rz{wI}9u&2P zjkcv&tw? z8Ad@EUE@hZwg{ttF&GS$Raz?asR}LI0bw3aGJ#wo<_q~Op+GEU@puvujxY~LCEi@f zZ_bxDXDgcXmCZ#wMzwc=^Fh%ZTN)}t=q(jth=!0If^JfQ-cS+tk%}1T6P(K7KGhku#X&ArE9;^B>?`NKE*^@kTL z`CI|6;IgE0o`S_w@+8$hJipq9=l?e!en{2B57}eZ@~`3HBaAJNpykbantirHpUMjA z5Wz|gO;BY>NdBKvVO-mzXpXm`g5l0IRM1yCNB4S8MMNup(^|jSBfHz?J(}uRMn#P& z(VS<-%M&VUY#q%Zi&wpXo=c>2+F{238{j{@nqgv>lky|$Zm43ekxMJ+Ai(M<3xu9h z5xs&>bTE%*F+rM))cAy~@JMZVW=y+89ls-&6RDSFhiApI(^PGfR4MH{OU3+7>ac*v zROHc&7t$s-CRG}%6LYx!VYxA(DOu4S+jf+vq(*TfxkFgry>csSrZF5GX-} zX%Ir02q7y}LG&rm5PcCs{Sm?jAcP9Qnt)L$K%hVfEoXrc!=8>1qoy1o1|B1y zLUg_@sfqeQwmc|hAVP#08w7U-lRt(a#3&ew5W_-=DwVDSLLQ*{Je<9JBV!W7;=_YN z!WuXC@=cBmZ9E(y4_hza;P}YUh_L9OkjA5bl5ouT2@9bHLbI8V^X*k_MhCO=C(ULZ zOf(xSDk$cEw&k$@TFZ?;l6Nv(MrddwNil0V0141?0o5yMnoN?(1}$+Snu7w3%Izbl z@e^?R1gFn%Du)wc(JumZ2~M;?W4|SeKL&R!1Ca-^2(0X{W_W?XXcY)^Fd_+r3}*Bf zGy1C;ecp_|U`C%aqf5Kz!xAmH~`gol5`v5z7Z)>j7XJGJ|r45ii(heCyM5Lp8~)wG0KP( zfLP_JvP^%OTBXR)_t0eORhkSPAnmsXgCT;f@}0q82qNkC1mZFt`w&7ABrEVp7^!a&S;R~nhX(~dCoM;V=0x$ z(y}sz)#b8)T$eCou0|DRxvbJ98Ilx*7A8_^nOv{QlBGiLh9lhU8jhkl83>`0dBigb-OxA@<}5%w)d*e`KJldE)T{~mrQ-||EGHGUMb zRL#Gq#i-x%L;WRwEVYVsjb1V5+ZID)A3{!uP$2(@eTeogN3?1`YjlCc*-xAG zLyxjhq)Sw47(y^=v{`C}&g8Z+SCA$e#)*lBabluR6EtCoiU_M#gb`y6#tEGS&NNfk z2bJjoMR^d4l!B`AK>5|?q5M1#jN@waP=B5Wc>g{R1%@T9Dv!y@3nPO1gC z%1PA>O=*t+u#mO@a6c#t28Dq9CX)?54Fqlz#D?lg0oWqsL04ty71|7izS7{Cd_pD` zw2~Z?e)RwmAy5qP-#DqkkOHYPvjxlyg(@Xgs?joKnhd2XB}*#-Eyzrj=$NupNk)o7 z-i(>4R!DRTrdFZTOSF2XK2^aqx|x`&45mgaS7@1f4O5btsm>+-n4!pF>J)nLcImnz zgvk*Cy$w2>z+cdXoe{!nA_O`O6d2};5LVZyY+UQ^*ODiSUAf>}};{GcHO^D}umsgz-!23{Wx zLiBsy#C(tu2$ME^Kov}woBmI`No^T}`j~512nheV-(?JY>upVFl z806I&A^KJuLRHY?!oeS6{JR}O^qx-;0t17P0|Eo%2nGhZz^M*!bp%fJ5Mo%nAw+j| zMW{Zc4n*iAq&@`+PZRkOg$c4diV&maF}UM^&~dmjp^F;xG==2N;1mxPl1FNBla*_rgrHrJ%8Vm+CNdr(Zm04nk zP$Cx189@bww}*nzP%1)WsR$KQjq1pYim-81giWL(G!8=yi}4tuKe0gQ9fla_J%$*Z z4?umy5dE|jfyEivC%97%r_UH-SbxEcvxBeXwE{zo0t1{nQ4oW(lVa>fyC{f0cPNH- zQxLt#8KJ!tV>S;eqJx}0sm8xIq#FMYP;F{+guJQ7bd4Y#4Iv-6B1G|}8aV}%L>UJD z(jquPPvi^-Y9v|UDEKiNPGhKuVKpA832AV60JN(qE)a6+^zoGMGOG@pC@9=|BQ&;(zDchl~J^;e>++u7QX!R zWc}R?!}{Me!>}VkFiV#%Q4?OWOpR9GL#>genW8uOprbiVV%1SS6wPsm z*>eLp(Gl{nhJ`);dVOvJUXS#efOE_kO0Wb9{K*u;V?nr&U}jJFV+*_qzqJPhiad}T zoEpLjrb9%i!Ahslsw8SW|Cg#~|5Ejof4O=#xZ$-DdA8i2h<2I$XWdC*!L>Vz=9pZA zCYQP$BK#VJucRY|aIZ6{AdpH2J47Lj?lmHCKzP`k;7+BR4W{vo!!VcEX6m4ojQ&C6 z0nR6=1P*Xe*&*Z7CCE)N|Ir9oHp-Hv)}*K^U4Y=Sf&;EB(gg?$hKLA2B@;v}2v(DU zm(C(v&&G-HpH7wD!{kddIrKV{1;Vv6ispdN0+z2qcmYCp5Pc+i2RMj~3)Bz;B*vgZ zpn>rJ^dUWsh(S0Mff)~QTX@iwDs4KbV(@2V=@eR1^lJ=RD+tF#Lz;2qeeijh0wNIj zFa=6ZQ6POZ#{r?GMqi#ALLh*u&I`N|;VEbrN@IlRdwdwENo6B}85@?m&K)lABn>La>&oSNS+)ArcaiLC=aqSj=vU)tw zcfhR%Q_Je8mtMYaGqSdYknRQQ9NuBZ_MS{?Ls|Uue)!%_vrM~@0@SG7;EIFPxl5- zTef-X((=^8F}tsL*#bB8XjPh46O$AIv5+4c>pSs4Xt1)ezF`PrfDBp{L;W^846Qfd z>uq7DsIE`sC_q_0VdW6tx0_q2CcH~c3UdIrA=}|f{~`LIT26UO5+VjSPFAe|h8XF< zP!Fkuh!*`7M-XA&-79Ka)uUA`Qb+w|= zl&MA$X~#Wz&@09Jps0K3qHdY13xFf5=&C3t3=MyYL}D70rXVm}AqHzm=kBhx_zLY$N^A5|*QIQWf9(3xC%R25(Ztxa(yl?FJ2VW={|6HJ;S z@cdG|;3x4cgdrj9iU+6<_sU)r9U0;XcWS`N4o(oYfMM01pHXDSt+Zf%gRrPGOK^`>!%q%Ia!lhw|I;@j` z!;idzV;ABaaDaE$)Ma9cG|?PVca!dTR}e4wbrp?hP945DWYtOopq#xP}rfZ8|NAcFLLHcDkSjI8a4Y?NxUL1f-o z8|7!&sNZIz5XQDL8}(<|Xw_t+Rc538ESp6&*(@rvS#XS!{NdRwzs&~2&G=ZBKg(hD zvm92?ssze`&JJC|)Y+g*m}p33q9Gmh)CLIAS%cD5Cb~hB;9e$rW0T-s&~;=AZ92dQ zDAyYbAu(A3xqt(@+H~lq$QY5DNZyA_ACd+T^qd54kW>PFkL2e%nFjv6mkdvV?zu+N z0Hpdt|3rug*^tSRN)P-*bH*Svmx^d8Bp@ll62%5YCd5ZrqmY<@c#THS>=ZVbfI7{L zwLusY4Km_C0*yf!4-MIpYK0Iz-!pj(tYR_ZKv=+8!FL`Y{SZ!{8?I1^`sb>J(-VcE<)G{5pmgVwdqktmj-R1*1?L(Lzev{1@sxW+`nz zcg5lf1-P{(y~)rvCj)3yD(=U&!5Nm+B$}l&B`JYzhugppYiAlf725%?0Y9nEL^aG# zVYs`C9fyyLaV}0Aon7pB@RP&g^2K~{=YP4pY}~=pir|KVSz0t5NJE}fDWbJ>GOW10 z>OimFYg0ed>o?4KIpjrMcMToFe)lZq;^B@L*1q>(e$L;= zU4B5AttqSHb!{gzKqPBs@h(Q!YtQ+^^3hJ4qPMj6Ym=Hgl3!BR>T{h1!FV9?Z1wFi z%s``2DVQa0Z%Iw6?+m{!a4Low@cMA02CX)&=7PhGI**wbb($~xGNa+)=Btz6#3q}| zk(z>VIR)<%wPs&`*4cMSl$CE?lHPRw{P_MEt7WUk+?Ab-**&qIJ->Nv7XGGA5i4-P zrZL^OY^C6Jx<8noH{|B7YajRV=P!!h(EV9q*@1V3)Bd15NZK+67aYZUKlj~pEW=~b zM4x7_Dq0Lj$N{gXQsHS}paSl3CP0veWhv8aMU0j0X4p;4(yzE!Fita1;8Rqlj3#Xz09n>a8s0QH9i z`N_0;zf47X54=*#ZlL0Y)HQe^Wr|VDI?!9(N-ho#UpFtS*O5-+4z2We^-lIt0`I%SPwCf+%*M1#k9b>ihdE0>QoAMVF?_1+Tp<)PIAj2i!*`A?) zW_zeN;`qsDqIM`>F1S;#-o7d81I{Gj4Zt)tq`Bg?3#w1>ZU3W!^pDLHE^p)PWL2BuSc_*TZ zrcD?%F7wU`d$(N^mKkK{?^*Rcw_x|IE{s>_$J|YLJ4ROCddby|%9~Q|= zSgR)61PP~_$60>xd$hkpq*~(PdY-nbPs?V_3(}T6T~n*(<4eQ$ZWF2Rj8l&=$hYNq zcfj}5^ICBG+T)uMd7CzR(Jk<2terNy!*<7QTlVJZRLp7B;i7|6c|As3w>_g zH^6p+f~d5edlSM;w)6LZHmc|Ebjt4m{d++Fa|d)4BI0p*A_=Y#^LRX&P$ZLb1bhX~ z7s>ewk(kGm^5i0(QY;W~q;ifxF6HorN|Bh$lkj+4nGk0S*aRY~PSFA)s`d{AO2S24 zsRHK<#5j+`6G+(-wvaE7$i#fHm@O0XB!H5BX0J05^7z5b1C;s(5|EH;y3OATsUkSP z0I7OOdjg~~*t2!!kctYBDx?Mhspt}f_WX#d=yQ!zRWo4aZ$d3b1rxzZj7o@42uf%Z z#Ni7#I0p|2Vzb!QAg$vxypVPnFQl#|k(TYdot90LDR293jceBM_)Dd^rL*}DAgu@v zF$relTyhR1qHAK3jY<1PaF~fv3C#F}Af{13Opp*WB#8Z& z3ioV4O~&!AeFSDjF~kM*VwqAvZ{ zx1Z2^QjK0g6T9&1mG>*(abTAhUXlD_|C|0(?$&%)Gy2#Phu5{Atnhrv_H>k}iW_b3 zb9qXGyZx0bvO*{64zD!4=w>~lQ^@U=>zmuZY4hb`nsBe|+KuoFSHmj$H~d=ssJ)eY z`vpCoM}{ZnH!C{u)_LZXS}m!M=83PVY&m<^)b0>9F(No`{^6PZACyKXt_hyDbT93X zoS7He+&k%bt4YDMmm!&_T4$%7iHcm|)%_2WAvOSas+`f&aZ3y{P%vaRsn-uF*rPmjQ+VUl&c?#! z)cU)gpK$pGSjBiIGF>MJ+R4w>DTFuq3yf5O)jmSwCado+ZGp>yw?;p{(`sm8oXoQmVOhgnynd@ zmd$;RlH%8QntgBE={GkY+E-lvxPP02b|8b+1v2+krhmhz(q?OmAFw zosyA$CZqW6wsL>0=7Fxsa_n;dVM|2`b4GRxPw#rrXYjz%0i#AOm=XW*V9_&SUX#x+ zlRAsE4wsPgsVLpmy@{T$>Z`^~@Eh~rVH@r$;FzxE6^E(Fz&as*b5EK+@B?RpyB|PllzWJ@`IQ-w5 z?zg7%|E=l%AJBAF*jy&UIeev9DHHIOa-~enmvUtikxV8O34~Iygf9|G`5d88EaZy$ zLNQy&6L6I>5t}Q=r2-CLA||kTb+($o=GEC~BQ}>Q`BFJ9;7IuboTKCkB~lR|=g2r* znM{cb1c1%|1?2TJWImB}c3P6oP6kQ{2-2$hYBD6YC@LU9rqSzla*0}DhhhUFG@%l? zJQw_(G!&U3^J@xT&j<~ZxJ|k{62sN^U&HM3nQe){lFOrf zbIeW$%&zvWHns$A&}smCvj`1~;EDyHf@Q`PtCA~L1m`=y=n?RX9>5DJtBhzJL*JnQ zeBhvO!7&+PqB~oWQe!*gj)04;oUN;b$F7UJ!cA*uM>82V1E;AUn~nP$fwb?hN|NxE zig7VcI!nPMW9dTXop&+v3W6wd(iw`hEuoi<~ zJs1)>$LGoW!S!P1ZoHZ~^$-VJXVJ z{$_p5veAXk_cpg)Mjcc>f7ggwz4C9^?Au(Yrp3`G`it>4H&? zu3OHnck8)PR8ARn^4#@ss~gs>o_5PSocDQc(}acNrKCv3dkA-tq+`FmXFvMk6z-6!4+;RL1J!nr02CbM*VQq4Fd#U&kO&9oF>pgeboM*FF zq&iLOaB!?sbH>7*pTVD2(Y^uwtnVJp?;*Z_Cu{qGY*+5dW-tAtR()9a@MP@L{WIDoS{}&nf1YlC$E{+3 z%hr|M-Pbh^m~~99_IhGVP1vPcziYwmvT8gp+YK_$wV@~l&8eyLMfk%i`hycIJj_;SRqjG zB?7L3BjkzYa;`)s5wpc2gdMGv^DMQs)q1P}I6|&R}4J=+#=$Hw9L4F<(jRts=mCmd}Iq(^TN}S^c zD2+^#sLj&p6>?^bLZ742ru|ZMdbo?B4ZyPD?5mmPu#5q)tfl);VcGZ5=>|p~SR@ZD zk_T2u(04FwH^8tRcp+th5r$D|p?l1297LoCnBlOvD7GigH0rcEKa~{Q2ls|FHqP#U zE-zDIROdQBl^OxTL~NYHVRLXHSJ>Ibjw1#LM*jS-^Y>R;`R?cb3$)w+czLAeuy<)# z%M+k$+^v^9_aN43WlMHj zQQleF*>=8T`?_P6T z!}!{;P5I6y`?n?0HaRR9?Q_GXPSYd-l+z)14)KmOF48Jt(afwf9#OUpI;chvn zYA$r!wvfGlrmvpLGjQuPTJ+dXzopfbgV~RKCNEH4zrFf(P?w`qlLzTC?+vYcmL0U+ ze;3QSbG9btQOv*^t-DY?=Q{0Dc64lejJkhglP0XmF1N&qC2h`S`^=iovRr)RnfUCA zt8=E?_)z$b*9A^``03Hiq@p_E7q;-;4LB*Dep&RY{fF3Q0KPz5nEZsGK}_K5_u&3h zW&KOa=l9_LJ-GjCgS!fH@nw7wPau->`AWV>!4nG=LLOHv;>bBtK8~|-sX)#a@VP>s zM5YvRB|x?P=S-eMNnhkRr-e0D?8X_KR@AfE^1ZW zAjzHO%xDHn&bW4R_?+Vb%bvYIwfEYqbL%ej6Z$$fjkqE{Skk=C#vY4z_Mf#t7Q8w8 z^|BUC$9=q`IsL3QvzXE9&LjO1*Nx*!rShx!3oKt1x%MjdY*|v_{Bl^$e(&!!7*l$$ z{Xxf+aC-Y=Lu)3sF5y-TP|q~fp5?l;{TTk@CCbCvl&c=fb)_@BUe^BZ*Nyv1u2k^f9VKX`^~hxUv6`?akYq)yF5aXy0d2%E+>SJ&98?@gM;vhKA99p9RA=aKWQ z<6R2RMQwQA#c<=kZe_z3EVP@Sq-R84itJc7f4ty9`|&m2H0tjb?NV~&SxBSPyMuZJ zE(;BPJMCeIVYA~JbVyv<>Z@Mnzb;O}c+fG}FQjhN#+Tj^oyuwM6G|I}w~ZUP{>H98 zTfU^!x_zX>V0U}jg~!tE7kVW5J?VPTmrnB*Z>`aE+3Tn&ZdR@B;@>@g;a_N9g;lGd zX+rMq&dZy&J(XB+`_ha(vtF;KDv$jDO@Ht!nqgI2Slvp&P}kBtyHg*q{z20ewz>oH zbB=vHHO(@=-j$GAb7oVLI!vzlD!!%9u!+9U8#Kp+^RvGs#O)b8<6v6M_E8?O^T#Af z$GuV2x>QnhcmHymuP>H9ZkN==l9`^=r*WOK9(dPwUXDoyujv`xn=~!6iJp`H0TWHE zIVr@7@ww-+GPe~@qvlTUzGP~zPU$0C(?1_R6Sl^+mb}=>Ugzs~;Eq?!myXX~z74DJ z-0;+Y%-PFf5{tc4G)uF!V@Hk>tl4d6akBU52a7cg)Qfvd4_rDuNNf8l#c{apOy?*q z?`FyQ-Zz)`zJ7a~dQ?lNZi*{AJ2-6)Ni*EP5v_D=e`?z5XD*u`^&U6sMr6fxe((9U zd?vb`lH6^yL$e^o+oRiq>-BB?QtP!ST=Q&D%8=5j?e*)nO)D5~$nR69Yi`?~e&YjI zM+uuWJ90>RxJI`Rf-XmId3$3Uuh+GjnS)xNzIOguKxz4o*2jlj(Bv;;-P}g`@NUZV zP5dkSQq~S@yUcfX!!d@gK54ht#=fyCLw=>5h8>F!n)Kvt#KkgsP*UFLPLxU4rL+Fn zR@T{9KX}oMEyagyt!};>F3@u>`0ic1*5=mCsC{l1zT8!9iU=R*KfiFrIaz4t{?P^& zcl)Zb{WfJ5t!`E4RG{yrFNceFberb+F8)Es0}YDUA!SANFCHAzGNf1iC9XI62h@Hg z{dBZ==~u#0de%_sCqpNEn9T+9Kf`R!_};7yF_rT)PUXIP#p~zq&DJ-qxn&s_BpX*b zL~y^GzlBinLP~4A5IaE5-z<`nOI~+h$mj1{Xn%f1nAZFy(0}_IRuNocQpUw$9>#(9 zykOx1{NR&6{}U|y=!s_=A+g@=`B{BTUfJ`pwBF7NSTAPT6<%4(UN&- zn?g>eTx)2cx-GcV>R00YL(TC0hO2EBewugS(rQ7_aYva-+PI|MLG#w4rXpNHVWU+g zuhp%c+MZ#F_gOQh=-w6yMiu$&cu+JtZpaeZr`env$_e(bj;~{ky{=wSo|ZqCf{T@1 z{*aH}Iy>&#(({q?pC7t*CNkdz+j@BD*qBj8O_xqzHsZh;wDV))o$2?xwDq%tLk55@Ai zd>L25!p@=zi*YD?Z3Xtj#bIlzqHKmHpF+YtM`sMxDFO+qfE_2#ko|SuN{uZhv*>zvU z=8H!I_ro|JsWl1vs`=4M>3`Cedoc?GU{v_-t5}o zF6Z^1(|Q~jzQ`edczDv=tyyjl^6w?CZuc=s+ksN&qf75jPu+d3^ap0O*`?n2cH!DL za$)ZHJb*%F=I**&{EZ_lI2${S`v{5OY*6H-r8Z{o=__FU=gW^|JUbP?GWItbimuJgqu;enH zzrTO#0_oCuCs$Z?@iF(R*%0rHW5}^nxpyp8GjUpr=?w~ph)c6ACU(E=J0V@#jq%6a zrKM}LM6YApwPnArvB`GF zmOH|H&+TYIjehZ;({{Aje=fIu%!%T+DOPn3w+!!VhxI?u@nQOdA-KzQul)|UXdiC9 z&M#eVZ3wO}d_M8Mypt0%M|6(UN;EKQvaURJ?7Cwo8yt96K6AjS0qb5_u{M9%eRSdO z(^D+kmOOFwr4;W>?8ETreeO*E`j>03T_y=QZH+v?9O`$BArG@@5jgNe|2)pSsYg4G z>EEQRxRXx)NuclUJ@1{;!Y^N3Ygv=eaU;hJQN8`M<#)e_ziCnRzf)oT9{#_F|9@@x zS3x?COu?2(aj8-)=P1PrHqH@?xk{;m!{)R392r;2k;`$JL@HOXWdf0c&t;3HBCeRt z=gFl~p^{HPy6UuUC8Q&l<^8%X2iL)$0))R_qPN!}`seQ;8$VzOAGM|Dudev!O$Ix_ zShXd_jcF*S5Tc)RJ+3+n-*|-YW~IZ+$i#d47L=g)#IYW33wC!!8SdXGt;)_sL!&(UFhAAjBHnBIN8xUA#hcAYo$O&?;% zeEpvKrr%mwqA+fs$MyO{`P{|YiEmDvicj0UcX_}cGl~ih_Mg!3;@Bto(Rq{+s}0MW z$V*dW#loB2diJJ2X_hwjJa^ang+qooOc`oBmp`V)&Zv?TtNJJ}bZJz3#=C+YvuW!u zm8sjeU-W9c@2Xd2vSy8L(i`wU%SH*j3aLW-sw8NqgUR*7f3H z!QFM@$ld#PKKBmXyRf<9;I6PiP4^C3)u)M{VQ$mFC1w8a%Iey_EIW0m?Y$e$*Wa`p zkc-&6pLea;l+dj-V9Gl7HA{DItCf=2(mmvI;>PJY?o$IJj$SJ1 zJ@(To#Ra>WYqB4n{oL`8;B_b4CUp%JALACQhQ9EAD`QHcW+v|*H|_9NtFrL-Nh5nK zo2U5dvgbtJ(;PJ_wTSnO^~??9^&P1=J7?+Zy#Cx97xJvH$9E_h)97aG=~^vL)!x^z zbK7=*+!4ug{O+F`zCPPap4o5UEUQDY)9dFhJHKJWu7KvDFY0ni>&8EN-0AJworhdrFt$VKh8uPB=LbzBR}ZKbk>&qif-f6l76_52=-RqW7%N}IzW=L`4j+S$I| z!s0`p*2X*E3Z{)m4lx{@RfsTsKhTP z$*=bkTdnQvrOqQ-ExG5V*0riRe{oO}qqF7Vj_X-hTWH>1?iu%m{`{Qh&Dq66*2XZF zOg`Z>?4|AGcb=O^R^+eo8%Uep!+FggdtyJa-EH31t&uzB>a=Ss`i(!)^4tKL@L|@I zc6Vo`9i6fXpY#NUs$2#&|2#?ezQ(Nkij!Zay*Nc*BTheVRXB8JqE?X0tr@Q0JbM6b zX@LW0*y?y?dYf0aM`I+?2#>8#xr5H5uf1#4oy<=?;B%tXZRf}U7h3YAEv#PGHgr~x zGfdcCHqt+tF_3pPv;E$kk&K147TpiIo3;Mfp(4MGr9NlRoNa(v*XvtiIMPt`$t(K) zJYH&0O_yu?A0M5#Jm-(Dc`>+I9cb_ioTMr{=pZF?L)q)DtM)iC@pp_3JZn@eucj zUH#rB+Xl4hn?!waaM>LxR%=#4@YV}M=L`y37BMs3-Eu`w`>ZX|=U*Pr72Mu>ZB4s7 z!OQ9gswnysf8_8>qCUJ|bNkJ*QBRJ}>iBZBi*|DRjm{iHGuoN4^KDXW)=YgrzZ?76 z^2jD1+y)Kr-XwB(nwFXBI5kDNe9(*2U))xvp@FGK&jg?C^vCk-=bTql3XZ=?3aM~8 zbG+N+mG0>l7h`JG3;P3g4DK4d^j<1_?avk_f^@tPdujAf(rev~iz|v~J?=Y5jeAyp zK+5)K+7D)ELRfWVd?|`;@-2#RE}Mr7JO5G{e+8Ph#>aJRw)x4Hk?-)16MTkwL=;+% zy6|u@&0&SdhAGEC49jgBTkHLEN8Ux}#tnrQzO}iYi*8ywe#u^gf)QOL0#G`GI33l=uH_h8KG z(k_jLwkcl!VaSyaH7`H?nig_$)}!5@yU)nnaP4~Yy`TDq-EKRP*Mb8TF1j|W;mSQUgXg<)+$V2Z` z|D$Ej*RhulCba5yQS(RgGp{xc-}#K#>u~gOy^uZH7Ogm59(DJ(?6Krs#IBDXT$dnb#>-N>@>`twX{ss@^s)f^mYE%Gr=V{Tkl)@cx8u4Q&!8?*U$Tz0QcS1mN##f z`1V=7_Cr0_xUJxnY_K1BQa-MT~X<1g)fMj9Id}c z%I}eaReBfx*GJ0O-$?g2(*2EeeP!@B;pCV z;bJxs%KC|~;M(^N4A`#6^rdeG9d={2Gi}ZDgBPQQ$%_F#3p?;x&?~?7{S%)>O%oqK zIxHN|aqfD|vz)cYXX`bat=_T1Df`lUa<`>*u1RaKDDLZ;;a$fp_3YE6$4U3M182@y zT~_}&yW+r{)|!XDPiEDzxhrb)=wtu$(~drsHfy_H!KaEt;<1J+BN#*R ztW~SK*&c82?%7|llyP{y*NvqYW;ebS`JkpcJyckjee`BQre~F$c#w?%F?e%IWqazt~zneB(Ckh|LUbV5`^rLR}N@?kJ56Ol8(nvPV(xua-*%H#0ZAF23DA zkCoiOt6?LzVtwGeEwxTf?foG&H|x%k57*}RId;DG@pH$IkN9Fid9VIsO)YAEA$^JP z!;GYy$Z1n9wHf>Rx!u7Wo_&75k&LCxVIx$f!mi#o8(zrWBdPhiNw+DEN9LdI{A?D> zY3`NVtfAi5X2gXUQw?y(b&kH?Sez~4Y;T`eghi6-*Cmc~dSj3&|{qR}) z=3|eBr}T83RrnNZrxH^``Hv{eAszbCtcjZphr#Gbp%rz=yHw+4nEao6_TB z`IWmC)DE|b7F=6fQnc&?|MsD)mK^U7w=|5IJ_QMX#9n@yF!snU)^H!4SJ4i!8lCIv zxYLGCE#Bz5I&Z%;|Ldn)^{9PY>igMj96aEZ+oYW%@gdk1AI*-4y~mc{qSQ42#9{6JHZKtgLc`H^Nyx6yYa!lmg#9J|2u;tm*!7H2X{^RCm<^#QQ zNkZFxTVK5$IWs!xRr^xEg1g6@BVM-O#BDC0=KHMd@@0eL)8OaaH|ZJH^=HkVOf9{8 z=&a$ZZ`YU?ilh%aIycT?bm=t3zj0ozJ8#bZ5xH*O$Gx*H+|_o1p8b2{58I_QX}cq= zD5^=F@=KS~tZu#tjeb0QW=LeGfX7}>J*m<~9fCRQOCx>z9GdZTOB%~QW$M0?x1NVC zoE&~*|Iv(^JKLpx3YBKem@#GAJvT$z@ZPdng(KZM)GKv4D^7Z{v7q<+3uonRwp~5^ zd_g_DnIH@DhT)AqJO?m!5rLEwWb?oS;*MpjZF@fp3f?-_duLs zS7+{5d%mhEz4YMV#PiE?lQivy*bk7$6fB=4PnEidCQUlHb4%?dIg!_Qhx)3nx8$!W zjg{JuKm6>J?p3G5mS)O9o!-+V=}I-C1lYZKlJ_ttrLch7#de`Ki7r4G`0a~f`+>(p<1cEQk<7hA7Nc5HlR zRYB_b&4+e9p0>uyRkS>8&zcUW8d7SWAG~$Z8TZ>qLuUJZy;8JtX!7+NPlr8rTF1eA za%=87=eb2E4(hOie|L}Fi0tdjwrRGDWF-L?>u+ei=)$6fqx;;wt;l%p+T@t5{^k_v@CG{y<2P_;vhRPIkuZ+)Xp1yp@QHn!yWSn! zp<%~0!&=AJ81`1sBW(aKrsWR&HDilh!P zKApUZEX%GnSatSt!NyE#b;=iB!%pzV=@o?gCdvwRj7@i0L2<3gvQfwm=jt3J%73gnOe}T-?{{ zyTuv*if_Z|U-xY|gapO0cp_0aKS&hD4hjyb+-Ij2OcxySLhKVcU1(`JFXe8Nitm>U z{w>pmdZzt%sJ1_F^p{hGGI8V#%8~e@&o3%mvo3UBp0%i5qbbGgyp43|v*T0T_;ov2!mx(qU z+QiSl#$HlhG0gpC^Y9~0lBRBUQge0}z1ryC%}KCN|?9wD_0EgyYa<$B2y zIo{K@wD%2YAQ|2*k)rqx0_d>VvOI`eSFtDVcsQsJ_fvRvF*;C z&Ij*#JZ+n9zp-31)DfGZIA5pZ*E-90tvi@Zqt3b5oZH=Sux#}ci=olhQ;)uW{I-1m%l^!Txfi1! zUU#X*i4d``Uc3Fc%x(9aRQqce*FF!P%;^5o&QWb>?C?kc)Lb~(!-?3zx+!e4NgmD2 zXkw3R2S`>MPGSU`H-CGG;18^7{y^-QEr7rJR`b`(|97`09eU@lG$;dhFelpV?`=&d zvNc(X44F1J6TZ;&&uCcaN4kvkOqNWOo}QJV(yJ6Y(-z65owniH6Ge0CA+!`j^-wei zHfD!D_CxowLlu}MLa+H8f^ zU#lU6BmiFC7>6ivv_=TECiauAz-WlrXq^s!#}Hz~!UpbkUcMnwkzp~3J)(m`8WUy1 zHk#HlwMvnp?~yK%)&8z3V@*AD3Ozh1s4&w8<*;|O4>^8dkLN}t4SPa+kTh%uZAuSY zI-6*afQhD?ZNBb{!To3shENe`8spc$uu4WPz&+vA5+w8~VpXjNkJj|^EZ7MlQ_yX=@L~2OQ(=%WvMKkLJ#|16T8Qgox<2s(CI*KjmZ{(lEO(^ zL)?$%Knp?X81xHU=od!K3SEKTMx)cmNYWMI#)KFoq(H(PNa&3B!MQ#iV&mII#K$JZ z`QUwUypl(!Z+TR!bb4rXRc59}qlUf;j5Q&dfol^K&9OnKh=Q!$-6vbSyB{XlvaQth z*05DAJS3Epqn1fzYSR|xVzUP{(V)m2$@{R0w-`lptWgDWDn<-zN-@#ZDAZy^FESVm zv|>bGOAL+*24-E17?=e-D!rI64nN7b&X|$WhY$sVCKF&52T9EWMI@gLqU5R7C%iihyO{k@gLb zME&1BI>7;KQ4bB7D#?&3Q`BT*HaBZbmRVyGpWa7^Xv`MmeNcub8oGsv24!fXK^dCL zgpKS?_njzk-`D~e(E=9avs%MrB9kbIu3#=o8YhCqWmV?v*)6#;C!G)w&@g5F zv2o~-6*@gg3mQjQRVfUppXX$l=d|ENu-I&vb>ygJ@=S?7Ri;ca>3)+X2HkJ6vXO*^ zj^O-Z0<=BQ;l1?V+XtpGmYfLdX; z0Y@GQNEl4Azc9%$hf$cI%$TIkvh1T{B`9PxCi1Wr64fP{glk=+-Zsu@tcl@3f>QEXB@&5DnPLKeeq>g- zg4L#h#j=2R*}zhQ2#AT1hhxW%&Ag|5(-uPv_gLV@8C5V~FAxUB3NxAvI)+ez zHHH|-215*MLf94P!valB}GI zP$k`mpp8b9h7e>nfP4%vNo+)PKFoOAnqs_y4TR@3LXno{c^M2MZw2J7fV^BHFN0_; zx;2B4byZ$qQYTAQ$g|W6Eiea)c>~ELwAdz+_D2ZKB5APBFpq|VjS#v-(kWEPOFRhX zhZ$!-Y!F&H%wd5UR&RvpFVirXwv#3oWZ5JvTcOQmhDvgo35v>Zri5i=tF)SobVY`q znJm$&BvQ3P$HI_DbAMf~POnJ!*U7Z1Og*z7Q=65+42mYdcNC(@P^wZ|e0wuID?`?T z*>z z>X;6fq$!xeT9rJ-DCmaY3fdpUoUW1k2Su|Y~aDrS^koV14@xRbAJZon`C}Vd)Z;n(VE$f}*SWBj6(mSQL|%{eG%|A%sy8 zf~hUT4zx)PSg~tIH>unjRxp(TqiAf$OpR8rGtC#4kpmjc(@K&CwF}w;j_w#j%TP22 z6tq1;7^qt?AGHv|ToA%s5d!xI2G+s~RiJtZAvba&UmqDmZcK9OOGg#Ro178@vxMdX z#)wHi1K9!P1THUU&?1BjfY6D=421BGc|sC!jlrae0ZNilKt+i0mC(~G|2{@Bb4CgE z{0odyOp~5J<+TyPEBHu>sSsdW*b>)YrUm#+9CoIAI)xt0TBUo%WD#w&SspT)_^)4$%?_i8jSXQjPpcqfWsY)OP zu#MKWU?Xw0LZVarf9$h%ivhpr z#fA+Te)F4Pz`F(dBJx#ym9?z!ijdv1ppfS<=T zIoWjZ;IsQrd1-F7S_ybaxkLAe_!rwF;Nl10ZV_Dp8YZ)EqoF@DNU}-iXmmR6Opc2E z&Tw$@J0Idb?d{4m|Mhe*%BMqIboiZC>*}A|Nso*C@r(PPG!(cCE9)&Hv5kvP*g;xCig)-`Mi%-`Mi%-x#Owgp&_<@G^EB8Nt^5Vgx&$pgE>})^nYz>EioREEC zuq7r*m=OS9ih;~)5qw|_=;p>L+~p9vfPi_+|SH~#1R3H@2W z@$dcY-~R9Y)_>Xw{W-t!^}GLs|NgxXTCLxQ@PO0n19p1h`KuqaT3Ft%;QR{SR8LzV!RoK4`U`LLq>2?1NV8x$KVry$@Qg|3b?A`yaGge;*#UR;%?l zK4`W6uC((Xe9&tBDcM>7%@10w0|=*9tM#`&Xtj=D*le|0|K$g*)=l7`)oT5t!M9ug z;L6V0ueSch-}zSSPY7Bzs-&!-9>A}6+-iOJ&;Hy0B^|X|AO6YVUrfK%`lAnlGH8>3 z_FJvitl9?U`2#eOv|8r3uPl6YWnp8K53B+X!>xH~HonaFGyM5#^P?+LAbCC6Ee7uQ zqjZ#@c=!ee0QcrWTHu9=s`2EYT#4{S6#gH^Y4s>C(2DnV`{4Oel06)ic=^$ljf1>M z;=z$@4@{c%7hjs1x_FRgLvwnR6o~=MUq@SHnfEq6-;2zvB{R(XU)j;{?%|7gWa{m$ z943|SJZSv3PV#yp_*s;l$rtgcb2mb-(Grzicv%CE8UyNhSB9d5(_u1-&&*oM!z`0Z z@N4P~Oo}wCyy5lH8o)p^wa(_2-Tdgv!pn`xw3=zY249&^i$U^=K&0XXdoifPOb{yt z7zGIviJ{;F&HG|oDWGfGT6~Gd47xisr*V;`*`bN{vQFc(m+c7%rceFs7K6R)#}__C zYUm-&4stZVXZtsObIty^Hm4wg-)ErlH;RQIe-$F1$cE9^ugxJ-lp_K`^5$DcL|cm+ z*}7v+>hFliK|TG*!XCZSrob!8$cL;53&DA%X#~mZWH7A~>8c;Se7P}+i!w2Lk^c3S zp{ZYt-Vrbhmjx?Y+B9#?Ui9i!v}yJj$Ql4&QD3%i2ZbU)?HN8&^qoUWI~cVEV3YfP zi_RAeo`ZCh^cM+Kn&PgBx-8eg<;E~KPDmUOyU&)Uq6@;q>)_#q6*O$(;gBb( zO;yn#anVMVmsMdbHxchr4X_IrHiJB?lB_EG!l}x79`8|KZBKMc-OZ1#TmYp=nzts; zI!RIFg~-A~L%+Zw51&1I^2{)wG?D+?kFG2Peb4Q(KF3T@jWbI4nWdaf1LmliS|B3x z0>W7sg(lO^IlQdvU8G;8ZLr_RC_>z(%$Qu+dvuylVpfemsKbl}3N3$}0&#?a!-mSE5WR3ESqVYkN20vKeEKt`1p+pfCPe7G(NOUP5# zE$xMW;b&Bd{RLl%UG=rt;eY>qsKR=#4I zL7Dg>Da^|aS{p1YV0Q)0hK72Q6lI!cuS~QUVSrY_lLqb|#aWh&AiY^Pb`7JRd;b(G z=ly9}{kwkJ)r=+SkL6&ys3dU=Sanwe-L&zT6lknQ1?sj$fI+>9M9vV?jevFM3Nw1s6#P zC@1OQm|St=+14^=i}9y8zVnJ{X>$Ni>DV3N0TespD{ARL&s#RZMfZB9Z$FfZHwq+U!^CR&QjDy`eT41C!R z+ob{^nUKETu{*=vt z!~<-{$X$~R&68b&z=kXtnS&x9D~p-3D$?w5!~C`m{Ykl%4TZseyDKXl)&b}whC8Ca zm(76uMx*?&lwwdoECU2|CrGE8Lw zr7x-r6r-rpmlVd^wk8f8(G1F3Cn1 zKgfC5EE|8Nu|den(_dPUMbx0H)b9E}VncxJ%=vUy*mw z-)P$kqPvNDybASrV?o+}mSCCW9;9KCzw&u&%oG zhRMN`(<~`WM4v$>uBAt5QC82UEa`~Nw(L7An2m82T-R9iyieMVyk5{MBouy-oP80G zrpa!V7tq5|QMY1S;}?_R{b!#);-Q8g15*drf-G>a2}l;u{+eO>Cc>0N=FJsUJ_#?>b!M+e~R zJyBcCbuWq$HCe9UVt~$XJ;cpAkr|d1t0qx_*Jla6wk`QUq+`We<2U5qWR=QL=jd;9w9BZ|wJaYd3DKul9O32XTCTJziZ~ zjn~$Ox05@!dcA||2m5yh2e)sm9rV`XTfN(Hd}Day=FOWH&4DE)VA8&6`@gk@Dm=8G zDM@9PXVyBG9!88iJmF^qD4Q}awFY~sOJaBB!}cy|o%Bxr#fDWnaTW9KOP+@LvXik<<%42$U|zB@Q+nag z=G6?cK?Aen)Sv@@MGInP{0|a0L;GA^3`o}VawCh)iwS;v6R69=i^))c3_o)?9wmc!<-I9lnErpx8zg-q-go7^Ch0p*#B7aOyAw{YNf_E5 zbiAb<#+S}%S{>!nsxv4?-;4|*LLqxr+v$&3lG+}}<7b&*33&KAEg{w|7teX!$lMDg zIlLMoJQl<(Z5wT_ZJLOA#+2r{%NVg=M?YG)T9gB5Lth}^f3NudUbX<;B+05ioM#FL z7$=Y=mvW%ZR@;VC=B43nb)Z4p<&<4(3Wd7YJOEhl6bn7eQ{Np&bKvj37s(0a)#{t5 zYrGd+1shK5mf||xIKj+y+zYB>XlLr1*0ED1b2(Po%{HkPo9#(HN(X0~?O~o(og(?2 zX<8(mNm7hcgwSN=W_uKq#vK<`GTg+5wKK@4S+&{bnc8fp*-1P~hnsDgoy~R^zq(oS zx}raZNsQm|em*5K++0jfMrOtEKf@gL;%wLt-;0}-I)m|%2e>)RYvpJe@im7p;?X88 z+kNVQdkF$jVR6f*<9*lc($bO?oM{d?4%++VyWef5lDkc>mo^tWcU8{-X$qE>8oP9) zpzxGQ#e;L76q?Rmv*4(Vv?p&Ehbv^W7$;>JA13|9uE84Fwo$DIx#=4P41-)+TH1s& z8(NoetFBgAJGyQU^6Xq4Z_|Cg3FZve}i*1aSIwzRbL5r>BV*B`3s zoPDKwUr#E)zNex0d*^7vLBaK8fUBPD`UjtRq1gD(f>)2ml7pdlIaH{LX3HAhG~%u zs=PQe@F!rmd6EvH?O+=%B5P>MNjykUX=^w%u^Fd>BHw*r25~X8fSjhsX;-@?c<^Rr zC(fqvXk(XS)gPqgF+ebRfn{$xF|m2JwbQ|SbCSm9+R893k4ZzQ&L&Bp;z$hrzcY?s zcgpl9Nq?=kW6Dup^^16X%^K~8X2dmOp14^y`W1=8IO~WI6K%s!P@|5wpCNMLPk3%lILub zkjmzzr!iV)77AansgS;iLnz>nz$gcoxszQ9}rQO z$s{gtDk0LUFg1}N>YC?Aumq(g0TN+8Pveth&6Y4nacTCGBs0VGBpoJ0&~lnpxfxQW zL8Wb#8(hEhJA-^25p>iZ{qDqrsEew0n0NcPx~pq2E?K6la-|mhiSbhvW&DG@n2tk+ zJ4ut%Dxai-?&N6l{i?s#Tf4rtPWD!ftHN2}v`PjQY+h;B|H?#hF%C>F4G+rPyzcL& zW}oQw?VCTosE~=q>7?9GqPN~Q*=ey#A`F-%Io}}E@Pv51bm8-dVIzHf*&BQ&J>Sr0o!$JcCu#c_%BTKpuW@PHxW0IuGIS?$N?qVSAdzBg{r^V`t4aN~3}xK1qmU zUu695FTNvstf&h7e%cA5^`c8yju&X13vl3D=%ddc(b7QvHQCtt->>$~K|CtOmj*g_ z%aYJtn!S&4rDjb*{6$0e>OkO_Wiop-IxPgn?_`Rj)?8S{5d3f2(Kj zBq{duGU;czZiOKXoX>W9m}FI2omsVXC6zZ6wgdjAAP1dP$YGg_nn2MaY>?g&AGYi1 z*))5S4H97$Ee)qQHLC7f{lL2pq6gBWIT(eN>1X2|gbY;bh2m&D@wTvL;Ru`J;2@wrc;i|w>9r4MFrP;vxJh0 zU4y@*hi3| zI~0M2IWmz-As!9KMNwlqV>5z-nu34PmY{eFfI(Je!duarhe(31Li%RhZ&?!A9 zLfw(-yELhJj^(63m4cU?;v2lTK24f!e*CBy1t%EdOcX@eB%(m;Q4n~7Hh#LW13a@} zvcJsZOeL`T9O*$^lG*IkB+6`_QO~g8hc3vVZDv2r_5+wD4!Qq}XG2{#irO&hc}cPO>{t8RPTuM!P1#~^%Id?-} z5&=obQ8qjpC*+GI5lY%yLFO;A;Q+_ZNO+BaxTgJiJ6*I|oVmb{zzn2o7LnR40LHvE zbUv!T+Ut!=Gmc;PS9>fnz4HsCVi?nYHm2o_8kJS19 zyoyJiaWaOD^p#mL>m-ATW$5UL89aIbKit&5L8R+APugjzG~PCv)PGc zEdlAGc9&B}fUvNWr3Pdd2HF;Tw3W-uJ$!hEn3C<0LAB@=WJMJD4CJv-yN4~-18ut2 zW%9aA%SuVwjkN6;#0yETFW=|4JuMR+Yp2rJsAzzfe*!+m0ONL>OkFfp$mgiJ~$={p#(y& z=6tMD99eeu6C%Z$)xzpVbdp5@m<^4qL!@Du)^zTy0AJC*zz09t^j=ZSR6uc;h~le3 z9r{n)VP|#K+X%i|J!_*88-v=g1bAzq31asywqWrQr}}QhS+U#{m`j*yKwnJgA@pR0 z5>Q2|h+ayk8C8w5J5L!@B*~7j3o1MJ&N{RSX3YTIT!{S;ip%1@R_k98%!g3VVBC`j zTf-q?lxAY%^auyYuxM3d`-v7V$hBbM<)iL&4uIrfeRsk0LEB?U5Sef*E2u@c8&<2N~_Y}klHagYXVRxQTLF1_s;G=7Sg6IPwkWL zGwnWz%3>>KN9ZgMq0JCX#lXU(ysPQ#NXHUsLb2_YI{bOJ%~_lK}-$W^jbs9l74UgeD6g+W|Inaahb-In5`uS>)T#twIsVR zQQ(^i+Q*7$Y*IiUi|l$4G_sWOO|?1>D-VKZBlYHBIpS_hIKDer%KG%@biy9&lX%o$ z@8K{)C&A40+cHH$Kh2uxUbcPh1V>4-#3V>4NZaIPazJPKsoB0ZHdR_A!)~`rKSoIm zHtgG+LZ*2o9CQy!Yj;EyLs%p7=TbVls)a%!(D z_7iW%$I7KGqQFt4J6xjIWR1PZ=lJ)2MLnl~*7KbDDw6L&{ZId!Kcpb9|E>SeDaZ?{ zd*Db7@(v~L%H`auem&^dGBODn+z`XP9G8}_C^zFuy>&TP>JK^9 z$%c85XO*e)>EMW&Xq0BjRp*;fll>*VAZ{4Xl6ZJ#HFUUd0WN=s(Vsl2e2zgKs)!^Z z`z=b2^Rfb`50is5ONJ(;^r4_+Ih2SfEj55^3l47Xh_QHqvsJmo6&7y-vyy(Ml#;vC zarp&~cAe>t$#u!~eYc%#s%#4^Q_Jm4y3zs|?}KE2dMN7YhHLaG67KLfYRxR@rl($s zxq#yd27(ayNy*&5*mey)IZ28l9pc2iC1TnYEX~4$^RDRVNp*x%F)S6$A`CanhVu6< zll(%gRbk5M1c&C9%plG%cheGq4W&6vMk5Lj+BQQ3u2rT;n6ifwzLpG*a??QtGxQKa z!C^@}G>aNoRFs2ma+(+8?l4)w6#^>{9^QNLY4@laj~1wEhtKgWp+i*-M)~0(vJ8{e z05M2qpO?sG?u`f5XG0nXr-|s)xXKqCUKgAMm2kP{*cGh3+Q+}3L$+m|k zy1jmp(bx3aT*a_SFK zn?gQVwA5Mc_115$udes*^lq+4n`R-pe&hP}-um_HH)u@eMTs~W7~b;Pq^$Hd)&QA- zp=pB@I4tt%1e2@S)sCMZ6-hiq*Xup)04ltWx-&pb&RIS+M==f(=OSA`^>91k%y?ze zVQCgYqSOz5UR?r)^MX=gkd3MAnoj{mY2wi+KSfhim#q98cv6}&9ZyG9oF)0R9G!J% zan6V;pG)tw(0VAsx?4vgzq_%zcK!P8wcEX0{9?6t`_`SCw{Nde5FGUJ1ysGUcIW!7 z8@JZ46E>RrmtjPU@o2OZP?};DQ2M3b9OdKWO@45Y4ic*28ukx2L72UDJn_w!MSN%zUP^l<5SS^hAsj&`L^P4qsOz>)j;C@-GSK|d|x z;D3-H_HY{;$l?Lt$mGI5(#gqn$LaaWQE>L#ulgt+jc~-w)r}`v%?NzUzQD0jilM(GRQ0$gDmPdL4fV^8h@Pw3|iy0Tarm{WkX)@DcEt@OzKm}XAPH8ktc^DJvut~IpRLz z(nNVlB!0%hxJ*9o9irIGVw%|iC^C)E%Kl`R0oXwi*Ttr3`(HMfy4bfYn7rgN4utf; z#3yk&0;$pNhwb&HfR2b_#OJQW2UUU)ak6_#<&Q||(etO8mE5M!cQ7&x z&*E&Dj~`HmMz|eA2wh62s64198!Ib(Ka)#Q!MUIUX%%FH!f|KI=X2U8mZAg*-ElS@ zbeXC-__z+yZjue}r5U!dH6hI1;yW|y{O@iXksi)3)u2W5Ue>VD2!Xjq$rdMjpbex4 zCd+wWI*aP@=ahX^;Kmg33x*tVr+I}mqH-#wK6ENfWt{&PjXdOw;G~&)E&b~Cx|?KW zTBRq5fBlzZ-Aae0w>2+j*C&knN>;1~S41ahN(ej)t|V`G{wa6yMO+{Zcli_n6C4Pi`|hk=h4Nq^z6lBI+^YwsAtg+LOvJy zLg|Wq`57P|Njn&Y6caN8@Ep9Jro-yUjN{@sDa>Bv0o{yq@`X_d=z=NJLmYiLO-S}& zQ++0>l-;__<~?2D#s4NgSUAo3`&HiyBu4lfh@ygK4-4)ui$Re6?7~OC`%lzd`^z)t zTF|_2to^r6?tF=a<2Rn%rc*D-tqx=DGyg>HM}eISrrPig47LB)Kfa`)mbn&iK)47+ z*X^{H7f@!#M*IKCahGN1AhN-Q4_~L%lONdCN?c4l1`2(sMXp;L3pwGRO|##~_f2~j zS304%Z<#tsUn8*)y`tDFc>x;W4%KnFVEOPMef0T>4|7~VPq|1@1uj%}o3&;^yLAG8#j%Rx1trhK?6g-y!*8fk*dP$!ZB8LI-X zl^jHMEyLEFk{ynWq_=v#m4nsm2faHtDE*WIz{Q?#eQKgl$9p@N~tEIt!YK+ z8UPOTh)KR-{39{T=8!CyfNlSbBRfzcua;3^b$w&Kx6xZSYir%!%`T36ks}Kug@R?> zTOxA?NeX3$Pl>_x=NWyR6p~z$X7xIDMsD;l(?3Xyt!$`K(WH^D5E+-#aoPQ{%xS2u zjx}}YG34{lduZ|9BP4;={EPb5^vvpQK766b9406C^0?p-Bilz1&bg28bk-SFy^6H# z**f0QHWL4^4%8~#pB7ui;K6~?-lgz?9X%W1MdU_y8uz%g4s%SWogv7g`Xcs0bT6L;giFG+o|8XZ zQ*Ah>?8efPR^!?sUKi|D*J0e3+G628%vmm6fpGD0@8jBvEdgA75{nO)n7y_@ET=;G zSM3xouUG1rbVdxxj4X$e|Bx z*pYe8?j%DVi?OscDjHaMr*PAt*ykFoy=#XOP^WxSye#Qu~W`&l1il@BTUm zd4VL%ah1SS&iOefF~WoF30Wll#Z7_JGFqbBn#^V9e0Ik7Jg9^_ESNGDvOL(AD20^F znpY|To5ILv80)fKI%$HFWBCD+7oUlgGu2p zECZRR*!f2?2G>e5j{RaZ8e}yk-@2ucc5RIY%9;;CDpJ)0sE10xW&*?IIE)33<1DeM z(}gzG6r2!IUIUR9_>GezkXwk8UFNNBHZT^BAPsznh1=sw}k<-eJN zb(#VwAf|VcUes*BCKt#qRy_dB1#(K13T7v7A$uQEb;rf$F;pnL_)a$f35pG@N3JcE zE)BLPP_jEURxdDz)kB5}q~c5qc0dY*XLv*BBKU%dAxzp&zQK6r3(Pbu3H|co?3^hr z=HQw4fvL=cs>xawe)dgR-j~oI=FDGni-aIa^~QQl+#lBVIGoHo=#&?Oz})3t!}x)F z*qW`}vXV;^mzPyqLq@SnmrnU2N4xFZjYQG2(njlw9!+USQI*aJw!;=9v#7^_wHoiv z$;}|B;qh;m-WN}-*m~?TCpUw{lmkm(uVJFpGiL}h&IE5T(tstFIZYsu&X5k7)#^5q zQwR9G8>T2M;G;&W}IE_8K z(c-pLfz-K?j-Js?cg;;KhJb!-)}Tc4J$hkhs<%5HkmltEKc+LkOI#l3Kx)R1UZgjJ z9ekLbZb%SrOF`A@&$y0yvY%%;QOsBQ+TZ^Mm@nZzg=M@Z8}Uj zBaJsSNPJEB;NkKARVYc()l^P5_78n4yDBWT0-%igR~f*#sx5J?E-ZX-%wVS z(FQWnto@g1xuNViEsGt{M^Y2x&L6bR8SYJyH)_k}P36vkYlgksocoxR7wQJEzHy`m?Z;8RA5%P~Ptf{RgN=eJf&18P z4g-I-dtLX4Tdh;W`mHT}#ODN{*znA#oh=(rXz9+z6S5QsU)hyq8aCL1-nvFf73LXY z70rQN1e2s67B!d0OVf5EHqmE!Nq6Z)?xYLH9|s9QYBwp02EEwE5Ic7xY^C52#sX?6 z5sS@Hip(>9e>ez2Md#G+BAl7p>1rbvbWZvH2Xyn)1%2Pg%>aYS>)Nl|&~x-zTnr(S zHtN{$hXlQa6dE*)S*kCbl3ZyhP2gU~6%ku9be|8mYB!W7#NbnWX z8C!;FT<6}EqH6lnC8twVxd_H=WdYuNd24f*jY>Z4OBtspbzu_l@i|utf{I+X^Ltec z1mrW1ng#Y56@d7vmbcmV*@XA2efPcI+S2)hvH>UF)YhB0)Tk_gp-#zL&3S`q&<_2v z%&K@7jOLMQq#kKB^a0xF+zlmTQ(ujg9W;Jt`ADv~RzZ$d=(!!eyFMjoQ$?1JI=+6rnoY4Ti=tHN; zyfhm{HY}^cjFRlII_kePZ7s-(Yc?J8HS23V^NLPm^`otO_a8ib^yz2Yzwv|5cOE}^ z`fonleg5K$AO7ZV{e^gcFiZ{(kJ2xXN8>D?{7z9;)05NJXFut!uB~6car4&gJ8bBi z3;k!wYl2>9^-!BmmEkLE^S-l8 z-H(g--nko1VuT`-@a~%^g;5g7xw!ox%V{?q_8VG!C5A~gg>sj0fbxw2qx>+1B27Jd z9zqKxrW;Uc-KU-pLH12$i6i3;V<4nEv7^c$Feo+)610R8?prKU`^3uRUW;m0BSxIN0TNZ z$}iy^j3W!DigY@(h2&SBfz5tIx~R6_iaUHq{jfOtjeH*g^&pNf^L;+&uZGl`Llt41 zoPAFNq@NdOh-Rb2Y{4EGm&Rm=~ zQG**HZq)E@(?NQ{4sLD9hy93rx1{WKyo}2Iv!v{3!0-UrK*yYHus=l>ow)1})OGgANWf!`i>ngs|3leju2WccO#~uwqHUh69TRHNlFb*6y}rkyobUqCRP{ zci(~=L29f8aoiaa2PeZw7tmTEjl^(G_Dq{VQI%hnCs!nphTe`}*IyYBlmXUuIIi6) zee!*-%BKh+4G1Ev;!Ue6Ufj9A|v&OYZU%MvS5MpVp38NK3+A(W# znHj-v8>#DWHfl-0#!Pby(0BvQRsz!Jv^U$32a9UA()%k`0;Tl}7gz6~R-K-9D=)O7 zPD~P^$AMEX5u9C^R}^3i+f93oLV)ZdDp6KKmo>V2JRN&PcU>pXCov`#noge0$I~(N zEs5(Uw4s@(7x9R>azU|UqMHCh3MwzEk5PZgNL#yA@#>Xto!~AsxXbTDaO^jUrYJVO zs9xzbTGFO*OK=$hgH~l50n)FvM@4#GAy|Xd#mZ#^S)ie{Gc$)A^K^x$o^h#9AFZ>Y zw9pNp;BF@=%lI(yw}^J$M7MIOl>-iUuk{pu@L8FhU-Cq8qGw+MG$(Fu1MVgNpnpg$ z)U_SGm5%~%bMgh%@Y@Zap=G-`GdmTltXv52lv~w&#Y$cO&dp6aC)mGpYtx)^w(yWm#811dzdx;%en_BAJZLdNWjp-Hri2}Vb9Ru^p`}6z|>z5}sX_a@wru}(-$hc~#Lml{aB<=lqbpTFec!x#((2-2nk8&V=6YSI1O&0iez>$0uc|ps( z{fNC4kBAOtF?9x%02>fc9}=8vp$YFn+`M;A*LqbP!7^9CMwRpZt#cXqMTx8ejjT*k zNG&z)!V~XUuroh3COe=8{54cM^CT~dh(4{@mR${!+oV~QWWxl>&gr5#djQhiiAG{j z+N~duWLjqcH1Sc8j^&_8lFrd^*eRi!m{;Z#b9?>v?VG*Zp%1Bce`#vIT*#|k>TO&PdW9O^)p5( z?zQ1dI}+X-<)<0t81(jQ=KizKIkos%StVmdwU10*;5_oW)QmpPeTqCxPm)Xql<+G9F|m+Oupry3fxf{jD`YhjXG)2pt*=n!meSC zg)Q&JB`z6Z%4{lNFS`$lc(6eCwHLW*6MjAK?8dX-)}APzxAH%_rxYrhBRhPnd-#3GWyJ`?GKR zz1Y%==)ykTK*NUOqa+?CMdu(*M#KK%SJ<%4pwhGvmhske5G;zbKb&d62+Wi#BueeD zx*884#qGR%Ee^}7gPhNOS50luL>D z@ik5wjO3AJTII#rRkitB+hvuT@iFj$t1^6(esFk5+3VfZDUy1g9zS0y`)fwDz5DD_ z&iwwHtJq1Bk{D{nc&>gUni@YW!Bta4r0p~vRcY3tt7=%$j+V^VCZhYYXnSVStj{GI zY1Z2Kc`x0q0bz)i_SZ%{BsnBgg`^VFBvXN?kXxi1lqhONq_eLH*)_rZOW|`|M;qyV zRgRcfG(YM}#8LzvqW(+l{E(F}{Rytb=p!$wS^O%HV{c)~w9|Vr)1S-sgf!VpBIi4Y z`dG130*;w&5S})#2Q?|ekKEMPI0>_Irg84Y(e+cvndq9^hBYe-q(0LB0+o@MD9V6O z*-$-kI*H42a#X}+(vPB0xQ5vPnz8fl(k9%E&P+rA_q=PEzg~=fR9{S@AHVE%?!5XK zCM>ZP$~4pkzNboDa*tD1xRrC7Sr&EkFw35-!fRv*I+GAKPd)GzWcZLT9*|YMOt7a? zU8pYVDZGvP_9VTag#o;T(q|jD_Ep}P?8Fr^@6MW>)dr=?3Ttp~Hv?5>9vT)sK>Ka( zA}_)VgY8?o7J+{*!5Q82Y@O;Rq0!IK*Q}8yGLLgJ#*peu|3N;@hN_h{F&tyE!G;$M z^1QhS3PQ7IuxWeCyn(LK%kNb#99!v|0wXph@(S2 zg~)HV&9SPhkp9#J!128zUg!#ZG#C4_Aj~;mVtr^<%r{Uc&lBRgNT$0Ic9259XoS;q z+8rrg@m`!(l20*HwlA3vLXj2>tQs{bA#~#@YKvMAdD+sRK=tt`_rmHFq{cPKjx9iR z?n-!DpG&ZUVp}8IQYZ~{eRF$2uYzbIgD4H<6wR-)-=D4Q%=Ej9vgVLe}N^Ze25X^g!u zsj)-%!$Irp5&HFnXIvba-;_joM#np!K7abqWYXOq510zK@xb5%-Cqf*~RCH@jx5u#&)fwx7!={56k zd_|mqBXRukmFd(A*Z^0%CBRdIM@CFD7dqUqW0KbVm|RtJ(WNtp+!p&O zB*783q$?{Tjd%k2ePhrm)j)X@t>~!_YbDhAMyoKT^ihZ>Lns4ZEGp^Os>K!kgs2Et z6QLp0v~oj=b~tYMGTrp%RMyT!?oi8t=y3{5P3K@{Xuv$L%JbC*;zTui?>JJgHL6;=(rL zCbpx?B%2+$Jtii?P1K3}-73i+{t&(8z!;-Z3tUV4)XosQa1wmis5*D~d6A_Oo5le~s$L0;Hm*LkLsS7zb7pxJ%GCFa4oi9uF9Mtb4>s4Gt=}}O zJur5yd76SM&&p)L!>BNzMQ*zru3|Kr2=|{srF+G~7!UtM_(!Sn9&!pRyh5Okyt$0z zsgssXW(In$vMw8$qqry$CDMKQYOlSx^yYgXfB&nudwZIk*i-5M73Bm@mA@O7F){S(;^xQkHoC zdp*9Yt~}8SExjTOYCI~jB?#o5i)*ItYbudlHRxl{Ktb=Dh>RoNsv7Ab(8xsWrIAP? z@la50a`PsyQ(W;vZVis-@qHT@T%eL&U2OBHzc$g27T-V+y`f=9h|!|PDp9E=(jnw9 zNU)d_5;)Di9ll_72J7}j;vB5oS(&S{)^G}6FNRqg+of>(O<}gy_j}{j?dW#uH}Y7- z+I4iC9v3;&`+lB}Tu`CA?QbyR>n3QKVuYX2#mO&W?!aHHS=lyENJ!FG{8j%t%nuH{ zw5?HZ`TFvWai%Aim zO|$7}dYDWGReq8TwjMvcxApAlv#sBH@%Y8(FFt+v^#1cFUp%}YU2?dlvx+rlP1R$9 zfX23ScXiE^q&sG@y#vi*&1v?s<_G9q#3tio)81J!t7cu%r9zh{{_O1RY#w|)Z#q`% z(=i;*pU3N7#T)gCpMB<6B+BX;v!>t)T;uUfsdZy+)Jm1*OsSj3(A{Q)JszW7FC0dh zOZ;d-tMd7ak~5U1RC;c5%N>F!YZbG)z7ro(1ht(GNV7L1oP%9l zpwBfbfL6%^<~B>v zSLHjynr9u-0{Q|GwmEcxJA*G{qS+AS%DBE~)}4F`RI*vyBfy8HRe_#MVQ%S{rQM@X z0!5VL=3oKS!_)=_TVW-cC524ft{xaL3A?WzN-Z5q09S(}QpAwI9}5wpX54UFHGYuJ zs6r3YLX<$yAj<<6ga|76-Ryxhx>X+TkD*@uzG0%SX-mUG>%uH)QMZI^|I#O|H&Uz# zt+V}iyImMN2e8*9CB+mbuhX)cb-q}R;eE2-mo;}&RJRT!Sih<3&?WCKyXT-B9Sdo_ z>Y8_WnT5#BzkpP`q8j|p^Dpj9?Sdx5zZtm!y4i_o0`q{*P)hXw!=ljDzkz_60z&cQ zbVKogzdOTSmcGCTOj;_N0@}jMI&o>ifV#BcA0K%^1Tb|;UzWUZX24R{9DhqROv~eo zNDmFmblO3NWCwJeOK}9{g#@RqzZ1ow??&imsjZ372(o!}MmOfw$&AdDR%@7%>GL%L z4A1)OMBwQid>4fF!4t7_{Cqq)aIQofQ&?X`RPsL`PaffH;tD3&UvM|}Dd4^1SV+GKj)NN)Low&s43#1s;VhE0Az=wNVM$8BEAB7#yg zyEGBA0vHd6b5Kl8bjI=P4!ox@7dIXwsq!iwb;ij!FK|Y5#jLBOtVI-sF!?fCP(2e< zGJn7g{KD#mL#bOrEWT&3%?t(gR`{f@+On0OilX-!QJt6#L@mPoZx(CxvGid@cFhYpmW&<|7gEjFLj7DKv5@sKzXpr~~xRqRYN za7;dKds>h0kRb$(VRK4JZful?5GMotG{;&ij)BJdO3c31#W}332#~rxc+9c(b}bk{ zhOPwEiWIF^g|olp++X6za|nOsZX}V~Hjcwrg*?Ed96ELyxN`-#*%v|Pl0A?JE2ar) zpQJHaGi_jxvXiqG>izBYpii}^xE|+N$Q2N|o=cnxvk@^hqjh@~^V?ej!NSnP2x)E% z)*ung3jJ(rcTKPKTU#&{&RL%3#c@ezdVr23&J1O%DVNPCt&$=hnLN`ITb$JIC@GWD zpPpJ@Hay%%zL-*EFaahT&MMV;nD1lKv~q$3cJRtK>#g}JT%mk}jl<2xFmdtKloXO8 zthF&^j#)FqTVwo0jmoOFBJrf3^Ncw|?vwH{!t<%(rJRl`$`Z<|hz7#y2`&zXb$3fj zgF$eOV1<2wwqn#LFRCJxbW-jVDL*W)+VXJSHnw4rVl{fsm@?Z02%rgyFl@{A7_^K* zaB_}*M9j+S24Ru=!&|}~4aF}{>+x&_dhKdJ-a(!K9w5)nS=ZBXq4c5dO#XX14$^{rm&EnD}iz>ahZN95k#@Z-I`F8*0uj7O8B_|1M&#cztio4vj665hX=&4B=w zG_)B#&LLUSq1>1BWLIyc6eU?ZwQGuCwXS9{o$C!&1U%Lxff#b;W$mlm*fd;WJCg(& z1UaMRwh7Bng0X`5pXcmtoMU#Xd{uUm0h&H@XoyXm}jmC z@28)k{Cw!$`{tA~Ax+KQ!mQ9>tAW^|d$txM;REfDdg2=g+SChWjC^YkIQSa_WYeG| z6_RtV-7|~P7x8FF_cVNCI{=^2>WG*dn!?;o37kyt^(w``uy4bP21@F^rx}H_*~^uAFt3)wv(SQ=FdCm5&?TK$4904o@mk|%Sw~f0 zLt~^nI*pArZCZbtwC9ga@AbifA3dr*;_0YL;XyEgc;vuH*)AWYMOjHN z4v|eXNqn;F#r~4tI9z0V0!qeIrhB9$dd% zZEn=xp48A=*L)c{Tf^b|V|I(8hdk!c&BTS674sBuz*x~`O286}6JOg?n;nlVbsd%^ zaXtli?!s=gWZGLpxjzqe=m@?{c-0j0$Fbkm16%B~mK}MyD7XQ*zM{%am2*l+q$jeB$ znpE)cdLXkoibvL@Hd*DzMGJGY~AYK`NQKq8`5Q3c8twg{fV)Kk!QKOtl|PECdR~GV5>YEBrp<)1+3<3 za5VFYB`Vw!ffQ5NSq+hi-<-xN#Z}-C4kGaRs4LmL?Ck)7Xb-n~NjCIv^&*9~A>_g? zP_^>#<{BhF4Vzg*K9{^m4{`ZPZ_||1{V$V2)o-tEnlWb=?zh)A%_z-|`|b5jQ>LRN ztNQKhhIU|V#?nq7;`Q^z1h=`7$j?%Gn zBkrD!_w&)cvlm%9$cLOqOkq>R$Tb$utw_x%Zqz9lyyRxfhp($5<_|0m<-J)HRXU3I znS>L;T!~0$gJBV%T?B}n&LbvvAue(A=ae);7gCdEM z_s=W0zIXdhtz4Qlm%HuCjq>SGz`b*O@Aj(uQsgBfmkPziodsx;V@w=JzU$nv$c1}jp_)!Dzta} zR*%xdqs~b_s^Y_>Q>KSHKX>VbU3-#bD$&^=NO)kqj3tlHqK*>wEXETbw}#c?h|_cgN8c1S(yC z(n+)9&LpAHG5y}TzIXePZ3GcyUL)&!cig0m^L-H4!jE@knL zUlcvw-n+NudgL}w(+m+|)Ffl6%Cp0%*ZiH^dp;IH-S&j!76oV0fwx!YI*tj8^b~mr-&H))!yrDPcY4=5y;X1iw)XDbv$$@c z_$Q*at~KC~FQ z1b3vpU`r=z6RkwplX;s7*`7)S5^ome9du}2od6Z%x^s6?8*0J<$U6>EQ2A+c@-ESH8HfO9-G}QD* zO|r43@hN1{vmsy@x52ezk;dOJrPd<7RPEt0LD3=OGlhYW^`Fo|+X<=Z1vKGykOsX& zUYb{7VkfU6APZ*VMV7u^dyunP#SM6)(hDj*t%b%z5WOfy4>PDcZq9g+>M!(aIkYR{ z#1H4T^V;t_oSEOt_6l=#FIw1ZfA`m}EiQfUObPx^Pi|LZUJ_Fnzyx4(Mx_G>*y zFOp)qUz)E>^xfVT9FX7bJ)nQqdi>8S|Fg#btn)wD`JWs7&rSZvE@SjW-(9=S@9*$G z-1^!*{&k=JS?8DQ{Bm7hG63rjxrkl#q}l5X*bT08gX`SjIybn^O)heai`?QOx46iy zhgP)wG360ZvZly9*ep4I2hQYDGYZh;&-xP7iOiNOm*)waXViy0neIcFNJ;f2%;5)4 zP(Ymp0<0#Y= zlqOk4x&oiBXg0VLGIPh(LK)6|@?XZSNt}4HJpU5fbQUdQm3GtbPk=l4kuy#LuVz7a)WC4<-N+czD`LzWks zP?kx-WchSRJT{#`BkvFmLx_X;12d?ov*PG{X~OD!8)qjT4vVA&!_h*JPJ*$Df5cIs zh=$8DnlGfid2{Dp1cNk)lA~=M3a^UVg|oVcMLb9jAje_*W3d(D$_aeR-u~J2Fu_?l z=dDsDgf4fVXAt5Q6&GE~0gt+-lC$HT@Zn|giLyL0QSGi(4pk#0F}n2_@**Ea zqulvnLRfFoByod~cbiXF>M`T`s>&?ujM<)-N>WtAnkA?Aiex}(>_usvBX>Nw^{A;? zwEep)+5LRBh!(}|-!O5`^WNyV8iFRzzu&;aJY8bjkW$>nq0-H`m%H%5M>&#~2X_(p z!I(M|@Sn_FPGD|G7KvE_H9rZttYdE4JRd|uW^o(@;J8@1JlJ&jr*}GB&R^<05kH(a z!7M!IjfoW$T8?~?+XyhO45Q=4nhZS|Hb86_;G_K1OegN(s7kqD?W@t?F4DYfVhlP+ zYbld6z%%>nZh^v2^|%wi{30%>5eZ6F*Pgyc3=En?8GpcY_5wJPiXpGy2&2gl4$7qJ z+r|b*)9jefuCA}$x_O(h<7H`ALh~+O=6!{%MheKqBbEv}3f=t5WbVint9~ZWp5$Wm0su4wJ0fFgwVeRi(##-wF0~(_)Zx?nWm`QKoqY ziN}e>{Eu-lfX#AHO$$!a@3{)4w2PBpA!M0F@(cQ7-+~}KD;T^?Tn{mbo z!pe2L2NhB0L0W8OLzO$h=X%}U>A^u7-gu-Y&Y<25lLTLptUGv7CvHJ*qf#_`b}eX1 z&sXUApWx$+7dHG#M!}k0H7KD69(K>NDh|;gL{x5PLU&3ivK%!{p^2X5d1Zd5<(LV>!6Ee^(kegAlAd{{^K*+Y8S!TndHB|wCc7$Sp1jr$uEHXReT0AP7P$jQ$Kr3Iml zEjCH)_N>6bd6H&1;byQ=y&@q&mstR;5@3-&I4wp(2rmj7>LUt)8^OzYM@pf>RCzvH zp(~j#ajTeBvCX?E*>bBGDX#gnnoO(yv`mU79mwh{!Rc0qlYpxq76rCpz$z)htfdf% z(u`Zz2W^Jg^`T@k8DiF1ba?1jd)OYKx?qN{?3g@@s8p2gt

oZTsik_EdV~}SjxVNb);;cl7N`E}Of$M9I5;^NMg1^=WndJes3n=W^>Qv~{p*LHE zigG%>H2KkmMM!Nxq)|`kG-uu{*?E7QgIQ1ap@G#hNK!B7X<>>XL4VksUhLPXnDH}* zW8Y6byj3xrDVfge|r@N|edRaW;)dqqFau-Q#p39yYo4{2Hqz zedq?)Oq%IF&{=9{2*Rfgc07dCBU?p0{=y_#Vjd@_%_DMb;;pHVa{+f|QJpKaLdY+K zP!x5t@4+0!>^>+)2LZ&EzL?vr$xGw9=mPden81`@ zas#Ns$uh=Mn>`a@lif$34cwzeHq3c5#?Ln}D0WSo#2-tQo7quZ#37#Q*1#-&A}Mf7 z&#YdT^M4nJTQ|l)*nXbp$E6vi$BAc7vRfSpQ*Y(xg(`q%;3ogvG!utc>?)3V37Pun!xAZxdTdOjX^J)?FO8!w?n*AinObo>#*u4_yXOwOPI{&u~I(^ zEc*WD(-nBKYocDa2a_WyQ6z$9d>nWjNd&T;q!3#>8wlKAnP&z8CoqIMtyV(Na4m+qC2%y58_{<^w_~_AHK|Ywe@U)Z`}PR$;+lWhbmDcugIGybHIqgJ#`d6q>=r0oZ{?$ zSK@*v0FQEG=$Q05e6HPU4zsaqleHpA$#!We%RBO`@5Lx~M2IltB<&HY$IfoRrh#xp zaNIwu5}9tTuwCClQ`%u|%MFTTe_~@t(nRf}Z8#(b-YDRLbm!oE*VK)Evi62xJ{KD5_Qs2H z7!OZKO6IF#ni-271bn22o5)(>UIJyCe9l0PYHkQ##N)e+!LlJ3fDCDMB)WaNM4*V< z`mS1Vz2FpotKdMJS)W6kiq>G{WU?PNXGw7`6o@*ia)y2eQeWOiT_f>8$Ln{QSNl9aM4C+f#J&l& zh{2d31)7#IDLo_cgO*9^vq%Y-z-Fq(W3zkKTk@A*YVABKAm|~%#W-8#pm)!vE7Re2 zaPQJuNntnM+H^J22K{N)U_m!qb~YL@>Yeb?m8h zbcFj{X7?UtDfMQLmRI4IYSTvY$6$tq6tXPz#BmCx_67o)?~s* zL&nPB%_tO-x1ffd&SyiP5pCtrv?I-2hnaL7LYcu4)$u!Tf zu=whFB-xjXa5GSu>b!n7V(4iVJ-qa6JyO-@{(%^=%%zEo zgpT;t$gE^n zUDdrFUX+gsC-)gw3kCt0W}G9ato-Q8JI2&utHl?Fix9Be2Y>hDMc9d)wEkr;TA%G& z8c_y6g$R4WY<=krH+|L*hGn#_?=>$n;T~lLqAYYTJIsbm;q69t2yy3oSLP{zviK6i zgzVz@@BO-(S?ZTfd7MrrUeJ-IU+cEeM#z11g&b~hGMl_u(PGRku9%!= zl*xUPJw(`{i9!UMufh%A{9T}Vi?fl^ni`p-hbKvKW*)?6W;dx6gooKlTI3lWTKFO^ zQmANjGo8(wzBJRU!yPH%zvWM9Th?ZO=Zu8@YqtTBx{Cc*wT1V9VVWTno zZN(4eo1>$zefpD5RN(3@-UZEehhWROJ+TI?-JJ(DmYBKCSb#aZ$2-EJA*TY2jP%`s z(RM7d7#b#4HW#Up%TDPWTAfpxC=8g;*@#qnvTO>D*KC?SkqqH$+eibEQb31!loufc z?@yd05`+F{XmpljLJDnaVuny>$L-t2i@X zv2^zoJ}RPd7EC$1#afI+@US+@w+_<Be<~B_1 zPUmY9rM*l&N1{>YWm)(kP{ZvZ0lxFhLm7j0@(bZp)cCAM7 z``_7F`_6VYJK=OzkBb? zZ?*pD!{7U$)f%^2KmVQIX|+E5$H(7l9kyCmf93>dVGdfYtAE04CTX?Ipa0Inl?6Y# z5ob;MICNYhI?`H3n4NHJ5oqY{$HyyU93=eleti7nqKtoiwbxyz|5kh5$rM5M_Ed9p zLD9`C3s)A3Jg>UrY&z)f$AjbPBq^?Z!+_mhy)uB_)*7Mv8K$UQ59 zgwvYOD82JhmANya-C#}-G`nOjI+OyKr{(@?I48i29W2FJ;#?rc`{2oEIKzh4uUt{m zW^(mtA|i^}SXn9ZvP;C)Ev75gc(M|0+FG2~;EF0cuA7}Wiw~3H*V7?LiC_`DlcfPy z%13DEislZ`*PBCw>0?)EvfDavGoU z?@xaic5tsqhldH^#2un(J$jFUInS~n$()uHR#VMr48cZI7uc+v7c8ynf;?D z{|S-)fA|lX%>G>=vk#id>=*oYKx2ROZEr+l+=arp9i?T}w}pQ!s?bVzQsk7Np)3Xh zwk;$G@d^#gs=tEeWu+UJM+NeNy;E=(%2^66UgxdC$ldFBda6LFzPpIQ+`~wU7g&rJQ~W6Mwpw*S+tksk>3F6 z!W7{Dg4&|nHkAG&W9^oJDu&PEE#;3`|tjb z|A|=c|NN!@nI!w~3(I}WXSrXjH2@8;{to>2Z+{Sm-+pvu!QEdd`X@9)9~hKj4M4Y5 z8|GmKn}o>=4V5wJLBl`d}Y-BX591TUd909@55@Qm)h=a_pGdvu{}cSg&)e+$AcM;j8(xD`-lE7Ttr4K6yLvW3%6{do;OB1nAH~Os;RTL1{I1y<(~%GDH@6qp zqtOh592TBgWhs2u9e);N+$&_dXDiTgUun}4f^*ACZiJbBXf^jPhtWk{dct(qPAb-@ z=UrQbp)$?lL6x2){VcB&6xnkrm7HoV62@j;8V}5?!?P?NrvqQ#P>|JlTML)UZ%ZY5swi4@zB*#fCM{douq_$?dC*3`gm6I$igk=}PeJl`;1j0?Y0ts1Q z10*D{yW##X$pT?vxvy~UviA3TuU=JG_w>k;ld$`JzyA>AneIAXy?R%@diCmzN1sH| z+3{abqUe0N5S?ot=8Wmm^Q2GZib+uwa<2-N<*f$;B{9xFVUT8OJo1S#kbF0=|Y2`P^x89a^Yjou{%~JRH%}sF z830h-0J!@W+Cpf_c-1Yd{hnhQV9G{H$f<-t3!iUyd@#-^E=QUVGEPjEg`$GBDPRoK zYFm@cU+3t@?^DjtFi(N5H*WOLi_ku-WqHW z%TEviK>?c~ibQWT#Z@$EAxUXS^hS%oNZJI7K#~~N;e=uI4e)GRjd5JW+w^h3hi=Sg=r3=vK!LcS3q)y%^ATbusYjfb&2v>6?dR z8XTR5HBn!oDnuZdLdzTXowAkJrciH}CU)G%mITV-vL8}+I7aEm36?B^L3G6T6`I1> z3<`(QDfJ=X0#cL}AgN0-C|!NhiE~*P68eEbxR@$1C2{RXp^-9Kti@!A0S-KnntU?#$T9a68RQGRUU`E)i;M@gC;X7S%w1wi33ktIe zT}er`RgK6SK;gi2Z1z_ky#Y=Hxky4pJ_JZZHV;>~iQ>I6lcUq7-COib6nY}-01@M) z<$C@&QWyw2bO$yhcALebIRDfTTQJQN>mjHc>!?VZ;FB1%Aqfdc_i!Xnh=GKofhTwa zu)gpbu5Y9PHgQ8<;fjtY>1bM?XcTv$2E7TZ5$KKrXyhx@{o+Ha9}1C03X(CDTmXQ` z@T?H`&`tQ@lH>wO#d!2^J>N*@YLnqbKk&Cmqb%m@hD$=0CJ>o$qyR1($CA}Y72y*y z0ih0|EHcjEER$qd8Z-pjNlMYGN7+*uOX9O2BMvxo$a0IAS23dro+ulhXU$^VToth- zDB~(#NK(zr(L@QyKi4sO6doyiKqHF?FU3+V2|-k_^0=2IjViY~O^4W;i3U__)#4>9 zd`P;E_=a!F^!vew-eRDPyaz+xew6~nEN{h#^E1KK-_ov;9|@|sAcJn!2(<`o8oRcW zpMZ)em^zTQyg}w=Tj&Cf;DeJM4u}h0!l%j~6MQro0G|LVaXKah)NsYd`(jAeEKHfS z-k~|KLZErr%vXGw9jvP%frsiK2Xs1^af~qxopTabAE?+Zd9g7>KtW)Yh-n{#tKp!b zD53JiG3pl_+r(RuA!ebg0q^mk8(b0 zJ*jiWaz;tf#I&#g7vY`E0=PlU8XmxgbP`D+AwG+1Z@?ixTpIYI%22~gdoY9&qX;7k zB}8G-4PNnCPRVN*zksyeO{H8x-(^v#RoT0011t9p)}mgU3$<#b+q(X$wV z7&m{>wSgwm)z@m;B0)(mgi-Ub&l?iMX5O@BA+dv8O%YkyKCPTFjxO(`)f(c#uyHKe zR;{JfqMj0QH}V7sccAjN1|DE@FfNpEm3QILB*=+`uP;-Qb_9)hX=|0=tOpochw0 zUS@dabsT4C&1k)hCpy16o=891Esp@;VVu4%iHM@xC>S#oPW0>`oG8=) z1QykL2O&mpj^sv#03vyaDjJ+Qx+~mvT(FT?eThh-5FjA29nJ!{QT*b_!i($MdCv6rW>K#{}MS6fwpz_5hUZl`|6p~e;iUw(k86OjYLz2uF_QgvhETBycS&)T=qbbTQ z()}zMf!I_h!RmN1*DN`+ktk`5JgdQ|gr1Pmh8;;h3eYB%0D5d~-BzMskf|2}MPxpd zdI+k(yA&|m*eb~L(NS%>SbY@)a|RkKPGBSK65Lp=6Ibj1GBFR*MGUk`&y#!dsmq^W z^?Phtqv&+uaH~w%!TnTYssi$?tx-%rj~WGJT1^gKSf?ImIL{6^Xeb%EIu3_Ie^3^P zqBV7-O8N!PI0|*(F1a#-W!S=_kQyxt30yxW`iCI1K#J1dK_DpuD9|ehk)l?CTb>Yz zy0*cv5fQaO_n6@@^&&Cx9MvB8T78Q>_*%Wk#Da(=_ESsnR4N?bINK?hWQ2`U638SsbmkV|srvqfa^e(o3 zoWu`7v18hBjl6HV5JzU@!!Kjc0|WsWp@zZ=hwwh+I=+*4iX*;jg|8@%-D?OnxYsTA z+K_ZnJQce?!fV&xqZ_c|4f;8QB%tz=aJAV?H^9n_;W-jR>V5CwJR}m6?^}ZRG?rLQ z1=ATpi)t6Dc|3?^NWirniLUG6%1pSg`ygz83U3wXiE`1fY{@eh6u7^K2!k;w!Ss(OH)|y&B0N^4{42O`~ zmIM^)c9>c}%Eg1a%ma~$^(fvyVOwxhW3cRi51C(wL04d5oe)8@9`>mbxO`OXHBTF^ z9!IO2m@=jXXS$0JE&7xSq9Jkc;6d8F!sc<$`ryHXD)Fr>iLY^9unQtG;RXS4C2K?^ zTWTBX095{_$4SvEw{MCt%Wb(WCwBhpc%IT^hbEPLYN zlC3QYvS5S(^=lgh$1zsQmZqvoaFC3`!xl%JY7IlYUDPOo&ZtSvKvAm^`3kQZ4KBRF z0J}cnzM*x#q##@i3F0B|f?Q%tyaf70thQ~(2a8S8tRC;A6>YfwMvaX{Y-sv=O@HvkGHu_d-)$HzBn@dyOT z9@8GFOdK-v$}SZA7n;&Nrp)IW7>^M$*5a6T9@t~rdn|iKqrFJIqGiwEHq%C)6E=|! z7zFid5MIRLmoyv2FKC`BqT!0gOMDw|+1$QK7i@u0gLVF4U+jA;y`}a8s_+>MEyEjH zHnnDW3gM7=6Tc7+foMpW*hpe72znCzE1FQjb#g1@Snx$L7l0)+7e7GMC((e2kDk01 zva7m8~UQ924lDrlM(K4*B`cN|`HY&>-vT+QT5 z&>*R^&z;Fhj$%Mzw}FVh#8Z;rh$$QSMxM=Ncry`T3B6|*j6)o$#7JUX5uL6fcaM$^ zi4{01!f~sBM~$SMO!LGBIwn7^FDS53)g*XU(X`>{hK7p72Hf@34mHR=s;blWsPO%5 zAdCf(@&YiWVM2XK80XB1@v<>xj+aGNYYd*=P&Qo89LJ1q{f0YJaOUhQazq@lehHxf zo>~7(O;5m*9qq9ph&aj0s(tECmfB9<#W-C^9WUV1Ri4|fhNL1&AU`;Xfm6Sq!#&7i zjS*13;id4LQuQ%5V6l@i!Vaab zYI+|-qYLI)IF9s{Le$Nuzf(?2B!#fCq27fZnhlAukX@-28&i%?j9?EH3!-c;SX4~O zdsKomE@NtZ)ANHhdAD7V{t7+S**Tub*K_upMRd(8D7t1;Pu3HpxIL$4qYzDV{z}3p z&g^AsE0CUQM-%j@B0Q$3RTTScC#jUF!5FlMax8jfnENdFh^aB)i%nE#O6|2ntV7Tw zZ%9J5^|<|jUz1P`L#3#hQPcCc@OpsRcThPbayhWh^}e+hL0n1+>^q+Ca_~fg5`~2r zUIT|s!5xqC6}$<%sgk)Hw*;Q3mMxIao&2AcKW(~$Za~Bl-vad(WQxE74aqDGQ(vY? zPen4T7KapK0RRN69DsPfY&w$?;sjtqx+wqvXnz~ec#X%~zR*@W%Cuug3aVH*PXf_N zDWzph#p36gWF^cqS{o9-NqmynO6j?`i7AgHksC{jid`a56{>()MQs8jAUy|@MUx1! z52Nb>5<#It?=gc5-dsfQrL$Vrhk!l(y>wR7`+y!rtGH69PP=#l9aAA^EDlQ?Y-&hS z-nI~*s31mssm>Kbl&r4B6H>q>I9>iuJ|Vi>0&C-q*5+XgJXUxL1Un9`&tYt#{?|9a z4!h%uYeH@Sj=2GcL5B?+{(dWzP$8)8m?(R=*$Hd$zaj?C&WLQOAN)NC4EoN2w;m?GWekDoi)w+~E zE4CSkfQ)|w68pC|FCxWSY`byMkCX!e&Yg%dnDSAA$O}uIhWV{d$GM1*= zp&)H2k)jP!ri&{PA}@d$mwHzMrd;^nocgUw#Qpy&_c&GhQ&qWA8U5w8+yeUS|5Z&U zwU}gmZMR)M>MdBl%4e&GV)vM{efFf&XXlHRg4s8uo32=)k8Wn+iH?GnoEG1W_=f94 znnIq)v~;#+J98b;B5)`WuWAyPD|O)YN>w-4EJ`t?p=}Vb(vSd^0ZsBRK{3-t+3Qc65Pf2TsO6P1&pWPb=KbP4G`riGgQ6AB?1Y~?jABuw9+nq`2#ds@ zhNK*j^$OP2Wy3W}rf<3)R?4Qq3{DC3REnl6lGrv>yoymQ&T|j0Gc(lHFc5~=$oFqN z03GJiJelJut}xzUrl-<8ku4;6L&2OhDn%c{df`DM)DqQN(mdG$UBYB=oDHg&$#mj> zi6*X9mzOw#nI5##n&!z?o>EDN8=Nx4@)$)`w-d}ZO5&&Cx07#$QEY<)(gaaknkUlOjP^87w(}Gpa*9@dUUoR? zmz!L3!g2g2IKyF-rO<>tV|hTX z1t41slWj{dKqXDYK?_yG5PSpi?fau0F(CEgEK%kRc zQin$W>J(Smb!M#sfGDXBedZpYgG1^QCW4Hu;Rmlu!Yp!vZLh6Z`59o)N?9;m$+E4I zp?B59=ceIszBu+S`U7U1ESiU{39ATc3GuRBG_S4e@bYo&vG=f1Di;9+V@j|&DhzNX zha@CVl;%?c6|hPPrGG&GS;!8PSs8FY6@7J!XchT7kefWwKTqp{K#(Elz%G|C_~>tl zsFn_$T(X1*EPc78xfO#6mxOdy1Zzea{16nx@CV_mQ2q&FrwZq*w9ceL3F4{L5*C!V zY*>{GwF`n#YX`tC|m9?U%wQ*e?L7c_7@URB=I%tuk~$?@<=3 z>QBC?AzlLvN5(2s$_M?n#q}$TRrM=hEJnnJM@-T+=(s(uV=7hEFFk+iQaKD1P8*8e z0IrTWxPpRJparjDrXD1tX{Ty(NbP@Pb7K3g5JY zs~&^Ro`9|K2!__5%FwGQRw(E$Nk}5+FU&%hHiud!;DD)7OsOmd8%ZAyleci9jOv*9a6TH1%+# zMZh9k2_`O#+r>g7XP2NM*|S7oWFv}1jt>?=R|JWWMoR=FOqs_AML^C3i4s0b1SV)m z%HK7V}OC*g5)w(d| zEKArHQ9I$ZnSmyo+$9j46*UEQ*RAMI@)G^TiNl4Lcr6t=s2Aag)~%~4Xtk*@_wb>q=N%Q7dD4==Y>6BYCG>@<=lOD6Law-?PCO7z$;}rOWGryiUHjdeS z7nXR@sMz8}8LS~GH-=^NHtv~u$1do}qwxY=4%g;}wV~z=&{zX*-G!2J7ZPU)=tFJi zEsa8OEgCmKad;Ynh$yVbF3$5YZ6d}3W~*`7JSl?~Uoz(oTqKy5!1R_XEKeww&xPzeAreUxYtOd`=_6L-zYiU&(-5Wsmza)l`u zWH1x0eo3%khmpjD^~6$=VQ`0ImuZ`>Q5?a%soF3;gPMqML;9lk9Wc8R5=2 z==pFx+d=f#9E3>RlyADFgKz*C0P@f;A;b*zVNLS>?n?)U)BSw|gTuUpPzZk#Zer#5 zHu0rh_)Wmo(w=T@O=r0`W0lKhK>z`fEwGt1=|GbPx6L`z`LJe|k zdA*Ktb@vUc=%E8T5T^+^$$(80ykm)e zxSiRzW`a~PM#XnZhHvF1lWib+8cXombTW)TwB*b}v>&|>&^n#`V4Uzi*d+H^iL{_x zi1-gS!FBO@lVE}O8iO5dl9Vq3++$U@Z?;)rfE46_7N&{XL^2aLL~OWK|(hc~aoWvnnxD`xFq>*c+k7TbTMm;_H<}w zYHt~AO1}adHMkW4H0c2oLkN;eLo{o;9-OxoA$}e&Sd){cD<*G3ID*9-QbA~{vt04{ z{v?=xeV)eI!00^Dp3bGS3Gr`h;sEFMoDwIZtY1n4E$M8y0hAnyhvNZ=I3Z_EH>;xV zM0m`s>E?J+L?PC5Jj|OH2^C7lAxB)-Rq!_%B(X#nPi2MaFD(NoESK?OJOb+d zlm-mi%5bc$+7snmj6u?hQ6HGtYd@M2Q2RinTEX#i3Q}xC2bDm;f#X{_OgV-e+@m0m zu7PbR%1St}K>=^>fE*VYK@CYUG|1(P>lUmk0?Ww|+ToPSuo(v?;{vniO!5iGpO(`n z$^E2tVlk1do$i*PRb>tfJ z03mp@F!9%r<9Qa`$EqT3abr+y3*!CBP_zlRHXse6dDw@|CI`7wYyis5s9+PW5v@Ah z=2Kf!B6ovjQyfW9Sna!Xig93N+V}uiG!Y<%CQKTSC&dV1X?Y;TsNrIgMTmTYO4=es zt@i|pK@VWANzTUdm1l&$t9aUxf<24BA7#O~Uit1nl^c zWYAwLhK6QnKq9i zd5mU#jW`319lH58u)7z4?x}+&$JV9rL>m=R;D{8$!XSir+UO|+n4vio zEDy-32NMP_mP6fth2e*7~ zn`Qydlmh3Qhs#APZ}||`f=R95`dm14YJ(3+!V&J9fEVP5sZZrb8(26_1r{f;k3kme z0SG5Pz_;>_z=evVmv;^%n$>ViWwZoM*E2=Ve{ISne}_p595i%yK~+26v@@3qU_VB) zFsyLfwaHZhjB-F`Lk_xv<6VoIqUg}4t%7+>kfkJxp&*h>3O)#wfM8dttpe#K3Ak#I zu*d^}Veq2m`$b$~Q|J}R5U_y6jvEBw_@+$mu<B}sRp@Fp&REHS-{z!!-kZNiQRU!prnDaS%txX-1d zEZm#&yw+6YG337(Lr&bcVHVP~C@2t?yr!Bo(?nwnQ%9o~Q?ARy8;J&#rl5KlwbulWN%W;A5S&oQhYRmnWxHLxSp&QpIu(DuQRusrW;#$=gGBv%^cwoM*c5lHQ4c zy@rPU%|4uNqhk@E>WhZwr#y6bfk_HiayrFX%brRVY)>p=j#X!AP)Qpy z=~DzGxEnG&1icC&Szi(%9tC!d3CH!prjz&*kL86tl9stK>4W1a+>P7}ljg`V~FcpbV#HiMHMKB06S5+b`W^_2JrL4yPG-ER0pfl94 zWFru=pb2=Oc4>r{LU^FTNHdA7;p`TH6paJJ?1#K3Rv$nW^?avggMZr0TeveY zVL)`aW22BI*pYmykk-W$XcU8j4`Cx94iY|ujF1HlCp>Cv962iJxu$dtm=8E34WXER z1-G3vk~kRRNDzPe{@l~RqG)r8BW`@wa4p!ng^|HF!HhaOLGcZqZgyi zShnSh`>hLn+H_%2;X*bBTs0f=k^o>JSaFCgz+hKsq9Xdg!f;0ocgpl}mk6d)+a%Ho ziOt6m-^3kq!Q`S%c*c`8i%Ov!L=r*-Mzd+pTCQW`sU6B-QL71E%)&ABVAVz&n*c$? z&xCBC!3SF_fc1KQ%{AKY;WgLb?jahQeFC4-Jt}K!oid@FTPYjE;mY zBsQ(vlx58ijz#Jo1pg;2*F4j20>>&|h-BHYy^da65m%CyTfwx;EHmjWpc#!g6e2SNJ7^B4bT)@9?Gy{9D_ufD zet|3%a-kLgv<^ZDh$={uh#FlykxAqKG;vo=6H@deo~cbq3luX9D?1GqSn**D!NKqu z-h;p6|eLMGMw{sM;wwCLA?`7_cT$un7p%Ojw?n43bU4*J{CC4l1MN(xx2 zidO`3iGMPO3eF!Hx@<< zL03&Zh^bKEmB15dMw(Kypy^1803zcAgE2bIAM6QpY4O9_AE4YQ`3mg@wHv1{aGc2W-*)$Cf~ zASpUi5Jw811V+ULyr2pM=~+q?j)@6cAQ5ZPF$&G9poh_>k@1MJLrw%P{3B><%F$|X zA;3wXKzo?x2|^yY>s*NZbnH$st)M7ks?=&{%udC9jiYwR*ELW@s`KgZmN>|ZQ?RYe4~PWXOXrfkWl%0P(O1FO0(JHEyl+UYeF~;;;?VHT?@BOY^UDzQ5CVMBHNnqh5sxskwBzcovP-&?DXRg5Jkk zZ*})8S&{mF2P9=IS$4%Yxlo@X-7BM&=re#@G;uvoKiC)??$lEhDsLPTprIo@b(r68W%Z+C7W55b-(4#Al={O9yH(k5}Rx3K_4M0TDsI#36otTRzEb0^W^$7Tl!O0xgF&ZnX z!4dE(%Sc?+Cy=8wS`63kMh@0?GGM4sX2=KYWP#Vzh(K1&2Ewn&=?J7I34`=QuxyA~ zy)SwlryLH8UhHXGoobVixMoD8lZ&pg&`&R@lFV5dq!C2xHJ6S2j4@?4i*k5Coz`ew z;kt4cCfYepwvMN$LQV4>71xC+4%Rinazhg7;Qp?=nYA1(Gf`X8?=Ic?n6ri5pEKf zH?#)@%NrPl5T~K)T|6;h#>i7><*4Bx6P?*ieYl@}l!F?Zs?KHzSyy|U2g{QsN(458<8tzq#rI-XMyvJ9I8Yuq==({3h;+lsf zY`%lmV~8*j-%*(|;Dl7M1TjPwP3S5Sq#7zf{V8G7$q&v(2CmZ(W$mw_yF&9wMQhEZ z!yQk`;Fy`zYKK%7hg&Um%Of-zxrzAHhD!n@8oR2HAKD$GJ0&ny0ggyY1sEl_G#?Vm zgDfZ+hH@|@qGEAu1cSS&LUzqNL^F)NF0`e6IQ z-R{<`1vh;M^C>ig9vPstBDtf5eHjFF6Jtd1rOcYA-9H^~jm8AJ<6?oJt2&NcU7kcw zts{;RmJh9fVW%26J6P2s9@H0tr!m6TT9e{8Tw$GTT+7$x2gyms)5+%T)-GW|3mIXao9b^`yQ+xRWM!@p=3nFtc1ez0IWn&I*J$j z#MV%h7b#<-L5oqvg!*Z1qSb{K3UbdBHjZKmrJCFWQkRPe$SMj#Pc#O}79nyzzzYq3 zVbNXX($-_0r8}IY7sS)xRXzqpSNIo-w3H%*2A1@E4r6NO%qW_qKLDnfh=HIL(vT!c z+)Py?g7_=&=Iapao_!^A>k$RQ)lM?DTye{eXTtf=Fx^3#S+Vm4&xODjKx%3!M#a%4 zK-o26yBV{8sQ%+k!rCkoMG`6;(mfX{zdxSLlgZsMz^PK6a*cu(sDZmqQVhN1@F_r)qV6l>6e+8zz5)3rwz(L(>@X{g9J~PUzHRDd`KM zRg91go=E0DVVbr^Ma6m9nsE2wQ383&2z-G+%gSJjhDa$q#0smJRjJ^N_)&?#%3}^n zvjT!pOj1NN(#U+1tWZ;}8>?z)WNw5{0qgjN1Qw#hv`k+@Qd==d-mvo~a*yz-ihL@> z(}81E4l&TQQsT!br)r5Gs6Js94WW<))#p2!!&gN&hdq+MS5Ut!B&4;i zMy!Bg?9%lJ;k)Xn4pIPGzA&}2t-#+2AyJ7&j_yAt8$&<{@f3O_uK5$m7~)zLk;HQC z9!FD8N4G;^I+dN))3K!R$U_pBdIy(hc+7}LZNT_DE#@KA0$Ph>c5tD$La``Dg!vRY zq86$;lKLx{_Zsj5?BNaNF?(En=z4OP8z`tY-=%MJQT-&w?EM=zZseoABcps|w0n4z zZ``=?z?eM-8(>x*cfZ9plh_lZN8)B-y>jnB4^>s(RXYEH0!}DDk{)D)LDX@~X|YJW zE%8t_SHTmUUc`Z>Bc75B1y7THI7AbMYDpyR22|+PnmWA1pyAWePtfp6B1Xg$WoUpI z)kd?xsa7GKb`(v+2H{jG6N2$P4CT53@U)Yxn#>XhL@BO2+N%^(!abd%voyi-BUT;7 zNK)FOq9lp3RprhTBQR%8cOLIF2N^EBf!bP3cYQVSDMt!oyyc)8{itR|j(>bBl#@bw z*u)UKwP54`J#mpuC=fiBx1;D(3cDT8Hw(hW6EjLI9~l$S4XH(pZ_YzId>R|#u2b<% zS9t8m@WS;BDl#0N3V#-R^^=xcnuEADnK+-ayQxtj2q0P1P#}*AK9;tX(o)KXhwP*f zBG`}!wjtC8hAibu64`#)(B7e*)Ijf*qp9tKgQKa@?vcy3X!m-_$&NiEz>^ZP;Qk@4 zVB~xQA4}-#gRz9xk312R@pNEori@hLDA=0`hNdnijUAkpWmr~GI78|aX>IXqr5q$k z76%>SBf~htdnnS&AZI8}VAX40R_T-oJ1`+NW67BnYX#r%W{~jZQ56!hu-mOp-02X> z0Ucv{B@L0yEOc5Z87fbPnHxS*Z0Oa)U<6y#3lKqrA(a_?;;@9B0okMclE#sUU?Z(s znK)$TWmH?5Cwhm62Z#BvKplxEi8MZ@pOJ~uq_9ncWU>g9+(3j8fe9h+ERbnoL*g5A z;fN36Lwln5M^+WX*GhyjpuM2kSv(T>F|Z&((1)z`r;nOeZnfs8N}&du2Rd0-xzEE% z7#Cb%Xd;M@+1++Q>qD|g6??3w1D%$?Ual5!4wptuVLYl{B4p+1G^6nK7r;y~GHtyf zTrIdoLd;Q%Rd`CS!vq~@qBOoeG{^MyBbYtGHq6sC;lZ$~O-!`iq|{ohbs2*ataK#Stz#cP%D9S>J ze9Yw<8%UH3_BP^d7ji^n)IFL}nw`=V7%HOEu#rOZ6Kz!t7pxm${)8)$?=VfFmBSMh z6S5O;;?kZI)^^T`xsYMwdYj~zMC}t&MNyDqDg`bFL-V(3W+z#emdy=ba^U0&2@sfP z*hBzPBmD#+{~vAYp+^mFpaLqD;0Nk>u_lSM*>bV=lsHy^Hf@Wvonq{>sEQj)ET90v z3R|M_wS|v~`~g(2Eo8IFE5t}h$J$_95{oglLbEJ!DrQO?Diy(b5Z~9*Nk^l}E88IQ zGZ1-;IwB_{$HfmOP_BR4coFg{qpLwM7|u{vC?rxXBxv77TY(1L=uca20T&HT=#c`p z(uqxaR!L6#;p4-hqredwAg)295mmmlVFkc(hl2NG`cq8Fl&Eda1$j|PJ=QL&EWfbD z^OO~IL@zJJ+>tAT|c~qM%4* z(n&iBh{f_BU7)^MZjts-wIMCIB2pY}0_n6BTpbxV?}~;Q1X`Dnpe1v`h*+763=@o4 zW+CMMko#wyG;j!gi*yO6bVXcOT;wFJ$U@FRHSE9-sU8VOvD}@b^h^bw3OVi}Peg3P zh#;+1{GH|rWvYPpVbMx>iJgquanTu_U`s?$))az4`dYB0Sa@jG$dZ9b>M?R-wpc-X zawC{bm4eI{2|ga$c?%M8iNb2H2$RiAzi;5C4Lw%w;A(g^-{P@$)AZwJ6wO?FV=WvF zfoe>5qz3CgN}Z#-_5Nq+I%wQ!$bhWGmtk$yOskAy!eRij=hf8=c<>q|_JT z*kqAphb&3q>Bl{MJtvL`0Ru`PO*U^TgYqw2F+a`PWCD zwCdQAHLqU5Sc$QKh#xn zB=k4kVY6H`@~|3|uX??_Q8srv?yx!43#whd*y|R1?YvWf!cW^#FaU%%z!f3l1fuf8 zN6&5TS4YGkQbD^N2(#lxk7ot0#%MbScnVhcm_iTeK~RE_#Sn;gBju73PcVi6@^*_H zX(;@nEjCp30oj)fw-GW<*GrrDIKa#jn9UMQXbw0*MF|YRqNj^DH`@tFMF&^`7hM#> z{X7|+@M?@<5lCW*_!UmfTCFKksBQ*plP%a+-ecMeP6cMftB>!d2Ffx#iS3Gjl`uZU zz_mkw3!LENO&s!kcTsa-{1Iof(>6$MJxg+HcYkW<9Gq9&V|l)(^XvOQ{$I$iU7f#0 zetiw`>k6G;PY%}y#*I7z);)MZ{d(8S!=)rw7zGFKNl?}xi47iZ2_~JgB+!+bom`&a zZsJx6W2-{*ONflu{(26pOctgIC=Q5d&R4$Wi7m)C+C~z*pziGF! zP2@I(dX(+nQ;;@ECEV4K&TfVx)4pH!I-8qa$4ko=nhQ?8d2%iVa0npMCGf?GRRoCP z!OK(#PxU3TQYeWWV2~zu7|uxq?jG?1E*TInz@G#OWZijwJuOEfbzz+f5`f=u1E+VY zx_s9dxYI#{NJnQwLbOFGgaF~qj;k&^5Gk>6>lR!O{KhSCucKKs=DXT5nG#&3cDSo8 zlpR#eDV#+N;Lo*AJK3AM*^v5kgA7}bSl2yao>=+dp|{yZ)nN!O)$ zqL~b2y-CO`&_MVJdWJ9(y+^U+(d+fu1@kau94wfJ(?!o0t1T*_I1A1}4_17hh3m?c zGC<31hv~u{HAc}B8Yo!$!y5~AZg5~zRF@jwg5bJAxKt>pwbS(T)4MBECghSPV~fh~ zu9OTL=mt`-3{=EfSoyMVa&+3Xdj%Llb9*QM0@7mlp-p^u;| z19?Z~wq2GV&|nDm^!)j<=}ZElimQG!u=aBy#v77ZTrMXXd9n|0;u9Be*p*WCfhL*f zxerkRA2cuncZ!CcU8cX?HSGMf2AM>3XxfAOEhS9*d1v0SXHD0KyoI(0i72{Cg*F)S zw0T&SOJ;cnbf|0&UWkEafkpTMcz}0C0D{E-GF)EPPM{;m!aqhg48mN?@5rQJlOTDA z+#sOPNgQf{@?^0{Za~y%SOHd)*Q+)pN``GrK@#ry=+&qpHWi$WTnt|&M)LINKnKaFI^ zEgJ+z!SwJpH|si+2XjyWIcE8$+XcqA5HSUBmOEt#aP{DOx?D6YTS*%9vSa5!n7je$ zGqo)vF{!B-m@1MO^i+sVAR#3~vA!Y_L6@SKy6{KqE|HM;sve6xh71=k0HDc~jYqHk!n zl~R zT&swA-oD^uEd(OCl#o9HRbqp)ze<&0pG#LGH2Ffr*^p;$k7b*h9#LX~I9i#WQc4R4 z4%C9nmV^W8`UFtACMuz2X$)dfa5qUm&W+WUZdKeL07wuB2K9Uwo7D9w*c4rdJjVv< zY@7T*YFi?272HIlCZEGGXHs0p34Rg^vRfEHXs}WJ2|eO`OJz)*2aHC#p(?(Tq@OU@ z6^5k*kpSGp6W8p|q&6S8KHJoC;hC!HNYU`7VP1s!F9F6yfHoW&5C~YYGD?by=yZ%*@nG*T^#B{nWvd*JmFy-H zv~xgki~L|+gj>y>tkgh#iwjU`og!cA*0T82AV3@o0F?v?4{#uQ_=<~Lp2V&XfC0Oo zCxi7dZxC;`@|Ij9ZvZr zS*wvJ1BFT>);kvFpu~=(LnC!vck1c`8#{r*#E;IgvGjq90-9@iI%qDN+Y}y@pvS)? z(Y03-&@)eU)iW<=K+#=$9O1R=gr^f%7>hs}$3;qkarg9)(%4v9P){bcId$M75Nt$R z*XNpUj2BtQ4SZm^E*5y=I^?3KFmyfUMoulxaFvShg>{k8@y%AbS-Pg1^(9m@N?LK0 zeJl`qU=MZ$rXab##S`iGi1?}mGfB$Yzd)A|K9dx{5h$9d3aPMT$|fo;&H6=1C`G%{ z?vN@(wt-3nQaM&>xP_Nuxb^|B1qewsFqFs=DWPC-_#`0QqL%F~PIzGh5;iTlqWILF zS0HRcG7QG4_+7FYg#w)-7pCWE6}8rDNUE>u{w4TCZDMJINJG8G>gia8i z+6(}z(q`4$(DGAT&%ud>#aJtvaU(utdUPr698!}`MOTvn2Gp?_#S>6fgmMG%5*p#c_R#+Z%3Z9KSrDBOJ8bEcTT>wY zzeKx>MfKB6yFuV$bUzV?cIp5X2Z`b&qzLC-10db37SE946Ez{PPShvJRhI{)5M|))> z+05p2Hq(*Lc66jWHXmn`m+p|wZC)}sm-hFm5oI$=AI_!y-B+sKbD1UgKay3okE3!< zR?fDxFTLv)S-W-V;~r_1m2(|S?s>NwbZbYhwWXt@byEtzZE9~hj@A?wIx-!bGMid9 zWmEWVbFOXaINhzVl5Njy&U9>QYs;m?*Uhb)myW323Q<{zlFDsv-PD?*uN|$~CF8D7 z;cn{$&m7KVGTBTf+nUQ}b4F`xZrfIuXLH-|-KI<~m&s%{wYRiScC>c1b>!O3T%o0P zQzo}5lgYF~+171Khd|+btIJz*+qU}0(T2kER=2>j?Ep&dcwkZ3-Rf`K>gIVaa~#05 zNm_;hZCZK*BfY~{^bU^??cFXLa@zW)b`-PCyV?&=6x$DVctgfe>(v8S4fmQ?4VJFG z`p{()rHf`W6Ppk1?OO5#?AX)SJ20wsx4#*a4Nn?*vw6;P&8dpv7SJD|9RQu1N-42^ zfS2(al+=tle*g{?u<1IfWzN>Mj8YH~E3509$FIKR5S$eF%nOCyc^&DUx_G^F8gw0M z%w%l+&o$iv_8#6A?is$3ZT3s$W(97_C>7dU)4t)Rr>+y(TwttSv!*{C42qlfEUtEf zdZ4|=aI*#S``|fP^^&`eTe4Kzn>7i zG9JO}j5*l~==O(Jb(SkWPsj~*Zk3EF%6aS=vnHRmO0Z0-coT^0#5%n6y?GMiQhCKK zb|q>BPS2Pw;EF&_<)>Ykm;^6)aQA{g9iBic21VAb6EJ1d@*WqMzhF8O>jE+suYe|S z(&R*|g=sdE-kjc?&Nb&+`IOhj_(rI0bz-vKQ zQXW<;Wy$aB-9El|q<5H96`qOE1lcj`4t0-=P~Gbsrv(3ZD@F6V>lWL{Nbio}-qG>P zdat5ph7G&NDUFzU*YsO*BlD#RXOEX_$+hJ=a+_PS*DkhUSflg~^b8I54UAIL*-W|x z|I21NTU%QsCGT+zk@QtaZN)y2gir4cSiM>)X);Y?QYE8wRYOJj*t%+MBi|K`dDGPt zQNanz*k)a^(L{FL*1y0=BQrxd)l}TuJ}dF~%;X@5{9BD;Q(_^c-rB)A!Zd^R?RZbQXw ztysp`nh&gDENIO0rm->4n;wrgCJ?t0T3o$Qv#X%l{ikWouAZBlOL<-qnwH0xd z-WeE2_{ka|V{aPldN0Wsvd0^MM;Jr)csqSx&KSFczJF&0V{fSI&z%nRwu-SeK;;lY4Uh z^x=`%&}FuYdL4 zJ?|X9`_j4Zm9r17`TJjf<-vCxdhtiT^YKlu{MwbDT65)nuYcDo9{5zr`p(9VxBTuB z{`|((W6!c1e*M<%Yj1ry+wjt>-~Xrg z&HVP@NAA4w^4EQ|edeJ*-Tax#-naf!^8R0T_8PYioc^0?-E?^JqFonlpBR{HzUZPJyZ_1^Ls!hr9?o}nPfpGc z8AdBk%vpH%?)Zc;bBU%WVRqK4H^-i#H@)PECuYBO|AEGnPq{WZ)$rE(@4cw$>}!7g zA!FMQ9(wd$zxl%TZ@lFrE&ulWj(fKLt#$Gfr#JUMXXT1-o%7E#&$;=l&;OS{{Nb^e zuibv#56^t>_B($5sy|-y_2Ii;`hu+;*(0wzVfwGrfB)-yOK;q<{Lvr2_qMq&{p#EH zx{uzQxs{#pzI_jU<~=LRKl^xJ%U7>?+24OD_4wD9pZwwvu2}QVujJnKi}HWnH8f|A zZNBoc**AWE`|LHT)bcO?e#?Kn<=YMSZutECV^00vxd#rdo;~B6KmLb{Z@=fV^Rr}hz+s(eh zmBj%!(|vg7b@rv%?9ld$Mhe*}XWBfJb8v>v>BrMk?zsHdDvZ0HF+9=@v$UF?9(#`7 zYJT>){okD%e8!@rnW_qB_@_~D;FyYJ^~yo>*I z$`@Ownzy~_!LKGc|9aoVH#*M#=85OM!MJ?&OWQyHgT3c|IJNfTyOWpLzc~3P|9Re# zM<+J7Zhg%wK6m&#U)uEfm*0NrN9MosnDKP~_8lQ)6Gg)h~MQRXZEcIrRnp+iq=s?_Zz(_V54I8{Y7R;SW5}cT3%8-tx|WKAFTK ztz0a7>O|7@zW_slG5q%zEBbRMFm|hui(pMGXAJZUN<>io%VApCi69$Kf%mX|>|wTb<+;yWKL4rDyXS8D?{n66pIU!X;l5W5J^rN)Eveu9?CLuo@B8v6 z&dm&`ziFO6Zgsuv>(~8$@=url?o*Z4AJ4R9^UJ>Rf| zTV6S^_lgJ2tDbxNx_9;cYWMS(e_`lr4{mzNd-lD2`JWHpxA|uud-RtN|HCco);GVR z@2%&2_s44_xJb@1EA_FK+1g@F~j&b9dbNp3_S282aHQBj;y7eADFaUp!RVd(wk% zyYoHo=y>A`KlQF(j(y`3n}0m_ksA)YZ=}y@Fh6qejsLaPy8k2V=AZl9-6wzZ|NHWf zfBw}|ezg69$8S0E)oZpKTzUWOL;v{ma~}TUn#Q*C@7vY%tMe*%{>-~=_&|2=Ei2C3 z_5IaHjE_Ii^5}S9$Db3MKl6oKZa(;uy*EDj$VIu;@4oIw`O$0sO1=Kkc|+xYiaKAL&X6K{C^ z-&S69JAeCm0}u2JU$Ue5U&|Mq-}B4X&%gHm@4xfDm(@SnK6Lu`m%Z+HpZ%Lp{Rx41 zY;*T>KF~h(?(@If^6i&3{O0j%%r8z|@!NOKUUMpcbj$Vk{_?RetRLR|_^)ni`2Fub zR({nVZ+gY`zwUnhnG<(DVr+lgiNEW;KP|lI z`#(A7@SD$h`G>yv*v^j0mRFzkjhEea%Xj|m)8D*&?Z}8R^wAgHyko`t-t&{+neWwzw4vt{O&7XE`0jVJKfc< ze(|QOUcc^v=ASzJFJC_{hyu>#utB zColL@ru!!EA7A{F9c%yUwk`L)^XB{B(edrJj{fs+``*>BzUJY-pM248p73AS@V(MB z82!(mfAEo8zVNcguR40|e?E8kZ$C4A-ya@%bMBwNeC_+EumAFuhi`i2%}>1VLpOZ( z#a7dsPJH9ZO>MVaGIZ#3V;k!3YtFvCsg?Hr7e(sMi_~|FV%no#1 zeb0NhtY$x2b?fww|2|e@+@=>zCzru_2a) zwHpJWdt`l8`vBKUf;*=D70~`N)&BBG`)yV2n-Tb-ZRi8^foi`l4F7V~{)%w>tJ|ig zuS*&Eg$GfG9mF(_z^{;vVS#Y;))hGOt4Y!!p1U6^c6VBmOOS-jXJ@fPBRLPra5DyzWMTQP# zMQ+{%I3o>;Gy}MVxrFsMKm=?E6nFy8;nBL)?C6@4*%5XEJG$n`(Y5Tk?C9FMQ`ynA z%T}?YYuBE^j-E|0Gscb{U3dQZ6YJPf+S!IiY}0Qpn79D|3!l>%Th>N3PG@XcmcF0C z*s@Og{#M3V8|%+4V?eWYjNQ5nU|zPIv1KQ*Be?PhR6<+0WZcs|fP|Q(N_E%`RAfxA z03Bk5eN>^dszMz?rB?#TpwgN?+c)9jNbCxDNE=$JWR@mO7v?d+7^|m|z`ymZKS#a_ zT>2*J7+bpmR*(P=HU`z8vAkb$3YDU{n}}OB0}}?wgAWkCd=8V>LeF6mpF`haGG+O1 z69|CJI(8OLvv8asn}at5ycS7?iQY&Nz~lNA{-j@qk%(qacn(lY(9Cjd#&Yv5RAd?Z z+!>60{tRKN$)aGgoq94%>5;W7v5IGvpTqidvH-kTh5ePwI!qe@UF=95$SEkZ8q2u8 zR|a(0epxcmKEeR}yN~tfPGmq$>yQ#wFb2!$IwJMDwT#sPKb^){9lAkIW^Bz1PiO2@ z#@4Pp9eCkP_;VKgfk}gTSc^!nlQ}PFI*j>xmI#F}Yy7SLpFTa;&?jCGFhCBkL;oUk@c(vH1_coFqo6Xh+xnslHCqP&VIf({q><@bAF~L`5&9q3Uzz|-5Q{27d~ z*V1#)mEWfFz(8-JzMjPx`%ilQY{u9psV+#wPto^t7-Kh3JHVdvH1_8*#vZ3K=Q74# z0zBe+)9)UqH#x}xS5S$k=#%`mrH!;R4^gX5FGtC$qq;{Ga zW1pt)Ky$w)JmeT-chPqcWfE_#jInlT7Wxc z2c7Z*qR%aiu^Xu!u&bV=cDev}FtLoWZH%!YYUg6cSen|ogfaG4^c@xsQ}lg1jD_0S z0dz^k{R0c%;C+K@0@Bn=WAG&PwGRD}CsqP-e*sEwP z;7|Vyl^>d#$-KKKUwdm;WkgR#3#VJ~F;IgrxJ7+XIITh*P-&HIf!+KhmV z9le?=U!Xy;V$`jeP-|sR@AkdB^kNrl#ZEH{CCk3VJZzN8MKhguN>JzYo=dw2b`6eq z_w@G-jQ93;_wCUeXxAE8i48!dvqF_%UvA&vaL-cf!Cv4%cYm*5Z>!ednS{nF?3}oB zcyM5}cc5o{?{Em(jauzBWykZUToYWq>sJl!+C4Zjs`s=>FIzBtW5Vzdizf^Xj*RXa z?j0HL*$x#>C6qVG2D`PICx}$OB{Q3AfsRg7m36FCHL*o&Vy#h_HEqA*V(%xZ1^_*= z{p&b-RxGKt11Rf;_HN(PwASjjd{1A0AL4h7oUYAUt#~loaB2i~Lw~Ajh-_(u0oMpTi@{L<6w!fd;B;iz)6nin zv;N#8jIBSR8Pa$*m&}4?Jj`Il$BwK&T_L~dOr`MMHY$I1^Q_@E7p;kAIq}yPn}JYN z<+DPSWvTP9*K^6*8G0TrN5lr$D%h2P{h#O2+d=Vm%_mMkYl;fYnG>fncGq%tIqT0Y zN4o`917fR>t6%9y~s?X&}Y?IkzHz}u8YcoK1 zoq)5B9byxZEFhKV32v1A6dX;XB#aw2s3-E)m()C$Si82E%C-v}T3)IJN{j926ebcX zJC^OIy=hgRC)P=vfFwTjm+Y3UKTE&{lOPAsnQccJmcLVsfi+(TwhUOE>lv#{Fjfb) z3fL&HN?1vTCvNW6t39u0F}CK`t|Fsid4olzOluNM3w2Ew@#*FD=i zxl|)mNxcJ6u1#I^wNw?Ic-i%o&?Z=D)+ts>0)y~@;|!!Liq2F(dbK1Kw&6{e#vzcf zlP7X*?WGAZ6xYNUj80y$i>BwLJl`po&B8j47e<0Df|W6Puah5JJcK0<*2R!0iKi3? z%cyfxrqd`}_&N@msHHmnOez>>CDy7UZOyQ)x>%!BjsgtKPM!dZQ?jCNjH%9*wg8J3D=$pS zsChdz4UKhb6RBz+%PpEpRW+d)v2rz;wjtD=bLIpVh$Gaf^`QnX`CyYonJ{nE`w056 z1I{CMR412K7QU~62Jlo|{1jzBsH_upp|SxiqZ3!uTK_C#8#J?S1)Ns`b8N-Xu0FK? z*G?D{^AnXqVZKJWz0q=ksaD6%C(~;+`i!k9WofMfAF?$Crd1u2##1jDPnSF|#(1h@ zyJ9V!WYH7GQ_-?3he1V|ZnFYfGj4*B9KR-C7N^O7UnexV>Qt$5j)=o-ViU%MWqRxR zZnIeSc;0Z$DGTCnK(ps(xK}jIauc64P1sWQns~u7%BD;D!=w8JDy7mq9-xH);G$`` zHa8~Vq$HXIu3511K7w(f$8FOrz@_T`G!$qsJYK5gryKcH#q>Nr=eRQwGhxc|rz;b% zj115he0y4q28E#zmoH`l;~6{C)(OW?7G~_eo=!Z5N1O?Stv#rcVuCP1ash!Ji(PO3 zUp~hm4g$hQS#ajcTC!jTYu04JN?aR(FgR&@_m0bkdq+mcd%8!v(I^I~2vSU6*quQ* zqkqzn+6}6oqN?v09N5{1{tVTCzIt8NoHz2*xN1K6%AQ^0JGyu5?j7GfC_DK zC^}+HjTBe>0PNI-Y(~OKdnb6MD~6|3*)WfE3GPvE1w(WJgW$6&Ne86g8SXts_`xCt z>AW-2zF#VLs>Y#|pySRsVn+ZXcG>1ln>TghA8D7>FpDs7`?9BzfSAs^T-CmoR_*u5|y!3xp@hi&>` zFj@9gNH_?*AZ^ovr3z>9oQD;WvpWMq!lHuP3WfP*Ad^m@pUCq#uEh#5yc^-TO&M6O zOKyX%T3cK2FbfS37x&}_65|rmyl4oaV;+Wh0;AZ88Gw;5^M8SP3J4FGwPDp_n047P z7atA8Vy8A6<#Kc0C|VP)3CAZD$F7D)hC3hD&2Oh=%B$j+DVN2v(}p-JSL;*L%_nG& zkDt?4#;ND>3NfKt50c*uo-djPu!e8qnOL!Gah*9x2;YSFzTj;Eb|G|ofVtgqW;|XI zY2$5f9=1Fm3hodH4SZ-}ucWrz&{uAPgHk$x$LX%j=2{}$swOzZvx}P;0Yc$I5)@qB8+u`LzT){# z36D#spm4g-4F9BLowPR{R4X|Jvy*2!+JqCMN_cGE)CoBeP=JVWAWRV`1a1LSrtNp~ z8wjfU_01EO-3)GDdSbz?80&dzl1E3~tiUTw@B>@mnmlRraBk+O9iG@98pZ*Y?i&bC ztBohngujl%m8nIZ^7bglxNFR%1sPU6({X{{w zUAghJvDfOZZ+1J4hqYax?AJScySue*_5fPFhN`E1*9@p+dV;o&zk}AczcW$z4Gx(T zg?9?k*z>4MN+r)Pfy~J*B!aOg+cdm$T(QC(i5?~0OMlwwk)0p9ujrurk$`R><81B% z#@7XK2aL$$ThhT<&k&Q?CLQ`7%ZE*0j(o^8Gzy#pGonO*DTxMwKkg4O>oHO%)(W-z zbXEd#iO`Fx0NB!~6gW?acv3?86E46>mT{M+sAb#L=PO^l zG+ZDy{6X%O-$m5;2trC=7|&P4dJyDit!6VxtMH(C_jfG zTx&k5cB{>%FeH@UCp^{3()}HNI9)@HNy5?)WMV*MWxrXqu1jmrHjVtul1(upKb zRfoApTDVB{g6OuIC zAz+L_)ceZ#U)(g;h*?~0l@JMQ3`3QLln6K40Br(87<`lF6F_N*U!X~Z z1HJX?fh8?Mhtv~E;Hd@`i=0>$sQyKsUSkTe9fw$ELHftNTR<%=aAY&oA z1~;xu&3DwAt=d+--O1LKjiSMu<<3n}FS%b8{m6F7mjmB=9@;&q5)Trtpw_DGS{E** zYP-zlo3Bq@8f0QTJ4AjLbV{&>bI{tGVgPY#&1&ZX?4f81Y;eVVFI1R~NxafK)sJE5 z>wB#hL?dj~9_`iI9c86u6X`1uiV{A`M4%B~6AhT<-e;uVFD_S>??KJ$V$jV-iy4w@ zz~c6iKMrQu88{1+18Tk@YI0*`aa4&0WP9?PpBCAI&H6#V_*1CW0qc)#BK05Ka?PNO+52AQ75qj7Wnl|Z&k%@=ukfVdFCjjeAk7tX z+xPla&t@U?+EL(m{k@Rd9l!1Lz0QDs)NbrPp}mg(oO+A%3yVO|rapSo=`x#J7--yb zLc}HtV6+4G*;i574;)6U6S^Trf*0Q^Q~r;yF>0svrl(n4N^2rx+P0b zMj~n_oAK+dTf|runwPhD2cW-xXZ*#NOV(6Vzkg+haWJ6Xz zMnRoC+`h$74}LZB@P}GP>i%D^^NiU^E6hS$F6o zJ8=Zksbity)h8xHKgQrOn~{Kq;~}yeHG zfb*pxM&v>vSu3zI*Bb^JIpQjZ2?c+T-2p8Uug)(R_$5q3GV&r94Dkn>&~Pycz#8Nf zK#t82a+gpK7hB*0=^c@Pj$G4%yWAq+Ly>JvalVK)2`2Gi|H2WaHU!WPBl7;CqyO|yAKZSsC^91+X( zNI>ne7y$TYIo=WJIT7zkx*CU1NxiPO_WOeQkS^*!!)y8Y9r*5a`+;fE?uZ7CZyTht z6vARfgYmHEnT|_QodeY4klJ7l4vGiI8^d|xIpF{nZ#=^Fs+2=w?ng90&1*OqM*z?S zVo95B<|ZEo!Qd%#hyN)9fS>XOB}4)U_?VUzTPeUNI2_sr`5`Y3juQUZi^8P77Q#WJ z@UyQPXMunxln5#KZ|7xCnBh& z_bHyVdtfju4hp%OtPk;|-2-OQEo*qKsoHYGky z^Z?;sMMKlvouvu!vwy1kDT!Bp5TP7<8JZIg+k8MuK z1-yOD^1k0m$iEo6QCTjT?#S`*!fev+fqo)eQ#v^KUWs4n^cHi0`?PEm?IFsOX%^FiIS6BFF*rP0e|k=#R5_hz(_q zeh%kncS&UsfQ@FXW7E)~?;1-XV#H?Zd|Elp^0(qw*2`-alanul6a{5Ff#?adri6?d zqu>IU)OhmA^2b}Fdj}t{;T_}c z+IF?wsjtWA0Nvf7t{Fy-6;d;>2J(?|4QyLoTJn6GIVagpX!!>;IGTmD*4fI*kurf7 z6L3I$SF)Q>dQ#67bV!18U@~@#{NLYXf*AZNf*6>UL8z;LahDZ<-?+dP*c5^x%Av6h zEy0$=HDyf3>g>X7B|9;=xXqG%$?)vC(=$CYss0*!aDJM9Q%Cc^&9%tNm<8pR`~kp? zGK>PJHwJwR+gLmeOwV+WV6O=UgC#1R11MI^kkB&0UBTy|Dn^+~4tZ0{;1(hJrO!Ah1yqN*P2#xhX<8SYg@BVIspElODcm5Xd41(x`uuYd6Q7Yy^{i zaizS94C(FKc5Mf)ydaZGd<{iiR0J*BF`3)cBI$bxzi~jV$Pb+1 z9PbHy9%LR*JU+LV&n+F&R=I+dw=U3CV+@A6Q8EtAp5r>vQDTuG{^>#5BuKns`NNSJ zIqXGB55xPJb!5cMzy9IHb71V4B}1UpqJp}&27ztYAuK#M@JlFQjyX_2dUXp1U@SHp z0r-n!09ba^of0fCbMU>g+t{deYrBu3!72I@oHy*iJWL>X0;3EtImsVIb8wP&K{;!V z5|`Qd=$nWwL;o8l0;QbVnA;kNt=Y3k@_|hTBK;}Bxir%AgZgb9s9OTmUOt}sQDp2ViO(kwBnP?37163dJS2@}LEj`)S z#}=DS$bK@&_%FV_rQz6(9AJB4S+2&f&yN=0(4obDz|kUZUtq<4Kq+(NEHU4v86sbl zrNUbw#-Q>X5C$3xkx$$AU7H4B+CVMtO+5+V@hMgCsHRN2lf}*Epi}%l`75*9DtMdj zp?SnYB&ATTxKdsL+iZqyOoq!~5ZBQk2a?zyu!0=Em{6|*Fn@)N)b6X@7!|k><<@e= zx(nzv6SGW7U>a^udKpp@?)xu62-1||;cG-GxUCYUz6}8gK|^?WcsQ%LouEp0v)-z0 zHa>>js4!sBf_#{r6fi=S-~QV?JsudNP8t5DLd}gwZ~miXPU@Y zMmp-mB+ie}uj>%{eJ+Rb4rO#kj08TMW3+r>ChS9*^-eUPWXJ!^ab1&a`eV;V6mJ1jsvgfoam_Qk2vp$S3cAN*3=k# zcpKzVo80wBpn5c2tfoCI0krP}pkone2f$c;B0=Z1)f&mDFaD1^&}2mrGG*cI=Ix?0BZ7O;X+19q#%Di_t2hHu5B*D4Dc2J zZ3$v&Yac?SJoDwCG8g9O0Wa@dX}2F_3d(fgxS%pB4FJ>zt33t9L1g5oXE4?CSs`^{C3YVfe=P88j^? z2#Ey%P3Pz54d@0?&HrQG5Qdd(7Z5A|=UhorW~Jo-al>&)$HSNfevSQG<$!NZGc3yC zfc3tD(v4VTdVT6e0Elz@ei%BK5b`zl=lL<^n>tMKVoZU41fmGr)`8O>l$c#BS8B+b z%J%vWdB4qlV97d0A{z(n>WXD*gR86$NO%-RbeKT~=&%%8!xTOU5$vR3uRpQ|)OrqS zU_)fJIqt+B2S1(~2QDV)Hprag+4QA)&|?1z`Xn+)b_etbz;@r@P@zMD;_51DO$1L2 zVBh&FmKR`~g9w85-_Eu4Qr!#{$Er6sTlKAKr`BzC+D+x!;qrdqK;H4>Tshgd2|_V~ zEP0a|V9fC*V&u8Zub=^YF2(lc6waBM28N!h<;^${=0&{|`kv``MoU1pC&sK@*~ zVXl#n7DpI$0?+RQGjRMd#F}8iq!G7MKFh~%E!L2jPjH>@70F!@mwew3#5s@ksZ2Y^$#|VuqFw!F@CjnZWX7|GR%Gpjk$8q|N`& zso0K5%y7jBs7MLWcOshD!=fr$c#yJSZ)yQ4jzMx!`;YPjeG%XmQe6WD7Adb;R7XsC z4Ibq+t%xr)+Bg7=j)8v}mD%~l*`*SMmV|)cuojo_&H2gQw{+xgpEEMpwjg$G$&P)? zVNN+DM*cZ-o5c%~hmL6h4uZU%%SgYdko7;WS&7 z!K0(KL-(Vnwa2ux@X2a3=(lzc*UGEQ_ZD6}*=Y9bAOnAMtKQkJu60|DMn~aWUh6xN zYxWYhJK;*!8#Ub)dy5!p$tLf1VdeD(jK5qpfBn7zU;L-u2LC!LfyU-gE4K;Rl z>uY=M*kkK+@gD4~t2RW(IwF2FpaCE3Y|!HcQGSHde~vxJbczzWrfe1h2*=I) zVssQX>LoIrP`CsS+3SP{n}$Rb%;W9*C%`b!Esj!1xPC8}a7|*kRiU+?T*7=zS2lLr zu}=?@Hdv15`zwKp3dHMe=nh4BY!xgbdIft zLb`B$&QH4D){(B?5u^(n7o=-j()4ZYwiTBexWJ1U0_4w48*2($>v0I2-|AIM#lH5QDOr3L7dNfH{0TY|wO{@h<;>1&{S8L#fcD3Vq;fJbPw zI`>z2c^Cqw{rR+5D%oZ@K$C~!3@L(NYLR(@WO%BWTqRhUp+~~AkG;s@seq+=_zD4& z(Jlmgq+OpMbN3({kS2-t-r3p&4~)H5z4Mf(=o2Q{(D>zkVD6iqc~9cllFHx8Ru(zs zM8$-fZzt?2Ydt1$F#$`$3xK07h$uM@w|Wuf-GmhJF2pY+`{MDM<@ueTB7Iv& zkwh#)-nk%2k{O_6@d?)qNQ_KKd_~ED6OK*S`HZOrQnm(ZQp6T8#c~aO4=g@_a%t}w zn41%RtIQN@Er-D5uOuRz24Az_Az(|*Zj>!2@>vZXW}c(auo9WZJ3(@-i_`|5oLXLU>OIUjSMXkc3vE-#jWnp$v@`;K^dw!Dmj*cW==5A49yn-gK`>t#D ze7HLuDM{F8jz-EMX+@aDmN@$!@)W;x5n52eSNEemJ9v8HMqqq^nREij2)2SnApjg`dJpJd~xD$RgA|Qm~%8Gz@bOuat&trz66Gom)pV0gY5Sn!Ij=v!YjnauAHxK+Fjk9n-AY2jHSxp9@R#pu)**l)d!}q@G zfP&CnvR2236x5S4butQ;Cw#KfO=|u+c%NRW%r6-D6+880$dOR8Y0{(U${sCD_ z(FG)KfALygh{bOz9w4td!=YmhfaATrv6e(56QS_p}+iR0YWG z9ka0FEEVO&i4BA29VkgDA$kCmy$tadcu+rH?$~xk4p^yOSpb*ANxr#LU4KyDt#!9+ z)z)r(cMB&WRa8Weg>o5{mf2dV;mNgFP@lIm9X)BZ9@bctKt3tpS;b;qsLW$L#P8?S z>vrlpwZ@)2)Vor3$-bIfPV+u;3UMQBUPu-P)NQ`WT#_|AEr--#Q7l2iYoB07s#ZVG6*R(vm%*PD-p_)cMG za}o>ILLiAe=*cJSy@#@j1hJtWmeIIL(s1ek!#rA<`KK2|aj}8_t`6lBiv4!2y_vZpk}A z2X*h_P!g=NG)%%{KnQ}X?G^}|LEyCH-6f>dAV6Q$$0Fo3e=1Q@Log}oE7m@cQ~o@2 zCc*I1l{1A{GjN9HHN%g@B$8LA4OT)Ney|#BOc~ahts!SrmF&O3i}AONvKjoBk1Bo} zQ!^v^6U(GTSM=i&&Rkd^M|7PcgrT$o$|n;8Y%{*);Qq@&n*DNgOxtDB z6Ta4=kQ%f`RKVgytE%B@v~&qj)hK9?I+zVI-EME>Xs-G0+Pzb&anRodRND_;6(N+E z5@f{hfD;7f6#c&59!Uzqn5F^KaYUEkFmU4M>Su8HR3!wXkvV-1cka4A7U z)sO;8kavAr;(vtAkH9Bh1R z6~s;GL3(WwNm9gTdZoOw4Af`&7(Ie|l_Pp(0L3w{L^yaPIFpp)uMk5%{R&rG0Ukt~ zKbMO(7Yd4*h=_}Pt-9A~@Yw#)+~sGc^_)i032vpwml7_jyi~$upKRI>@)qFpR1$SG zz6-e`0+FgH`FFV4KKyD>@(hlne7q9xE2eOM%>14XGye+5Ox~eD%xbev+EOZTv})fs z4}3(o$PWUrXNUsWq9BcHQmEvQ*dB^s$xsA&N!jgNn4tqoiRmMVbH-7pVHM@1v>z!f zTdh>?8Tch4dgu;6%=2*^|0uzxq&dp)E?iT^nU@$r1+*9mDB-&tZUc_9*|Y6{j4+6P z|3fbNO(;>i-Vt}7*@$Z(Apgoowe9VvoAuppbKG;Ca6s)gW_8{R&|~Y$GwQlW`;I4L zmN3^oCgG2;<;qC7k~w!`3h{UOQ3t;oywY1`eMbv0e7H!j#6QlDQs39<;YCa=(Y(N^ zO`X#%q5(J2N*!6Ee(GM231MGxG9S_Rxzz5W^2zAScLR|jgG@M47H?1qZ(Gu#Sqkl^ zSIVn!xUNcvs|N9pf$rq?O@kW6FQEy(b0Qolz=_!WpB)nsS5`ND15H~#gv6%KEcz+| z5?`%u?9_L6s`YJX`4W38sT{9a18~P2(#kw4Nm+T2Hk0y4Qu+4qhy_c;mN1VJ{v~d2 z6RQkX;@7Q#8H6;tKaTcShP}lf0I8?JV;VrR+xsh^je&7yqRO(N%9=#>1Pb5WdD?!o z9Sh(%QXJQkG}0T&xTI=AluoM2wjtNSGF!|BYQ4ca%b4D?9_0aEjn@R~O|g2yHjEWd zNackBYy&VEZ=gvp)pM(L;Z*R;uR+)sQp90L8g|&XbV43 zjNm}f;oMUq+JL(plyyOO7lbp!>{HJISqQXt7-7wGXqwx?UQ=hpDIJVuLSaZmKz1vp z-kj_A9o1frt*OkNY1SKGYlyCjxCUP~yldm{m=PRK45*9pPGBytC$Lm0qu?oI)=97# z%Vmxl?21E*iX&J)zFa*4^006YQ-`q=ho+OWYHS4fEf57;OPy;gWlRmrB7k54%>u{d zo*Ns=+l+MxD*{VtKq@Ce{Q1jRskztMHuzr8v9Y}xVvqggYyy*b!NGwo2`E$G86R7T z?^P`GswIWI3(%Ca5x`x4^3`Eya%AGk{rA70ca8ggLALq3a76KT^*cM&R=v8h)@@aH zHyS%CC_~$mc27QUu7Ik6dPA(NITI)C9#{&C%SrNbr@9#)eKz)&{9)rs$9(dzdi1!{ z?uYL3QU$3q|sC745^~cQA^Ih8sM`mOV zXfVTAf|<}8j-tRE*)!o$==y!HFQ>j!Z#3a@S==I?s;LLkLMStUmc;efZRomTZciX!=&F*?*XJ>D> z-g$cJrGm(P0#y<#-#6lBpVX?I2esBtwR!3$e2@o_4qEJN47U@wPOs3zhj5Xz6yN$*9UsZ6{7Pd8&cwp;0Id zPt`<28qgF^LN~_@U#_=m)oob#%~oUQ)GIIBz2Ew{v?&ah;4hf%P0{LuT6NnrC~ z$+I>&RYUUplk@0iyVh>k8@p#ckz^YiW+L=@yS`CdueQ1g4TL?HXrGKz7b*-3ZtXQ8 zsTig_Y}Y?IJ;KX4b*c@x^|-qIu=Z3rf!I2L35me4MW%pv2rrg!so}DYUB|yCBlkW#!}*WZ0&9V5MB|CRHAm6 zKqF>Q2rMFN4KZFpA;WZSGbHXJe!zJ#_U~A2pmAE;A(cHF&dOY8kN}ig?smf4%=H{^j@buKb4w+*fTRRgQ`ED4&pjeXG$f@`KwpfV0Mp))cT;p^T3*AC zUS+d|JKs*`#>N<%TEWa1^#ae%tS$aYtMVF~EExD@D@)y4f%)0d(0n;JMEZc;;$Qmv zhLgHYFjw#4bW;5ok<_7(#kTin#yaY zFVnsfN2hV3m^uX-6G+&GP4i3FTqMLo@hZPM)W>!;>y@HB#)*8-6hs8ZQ%ye~v0CvT zSS+h`Ysk^Rl(bcfsz4|7=aMe6M0(o zUDFhZ(LT&s#lS`Lz=jzC-h4F(_s%q&TvwS?8@E5?|3X6w2l64?u` z*&sf<04D5_;LOv{JKGY2oqh@8O8Ob2iu=B=j6&GZlAbBR5k~^zivgt**=7opA#n|5 z&I$>biT}u3qpzt1NznRhDxqrKIfVXFsRSX3_CjcI4G4zJ5kOeW3n4QpEv&vXH##bv z5ke$RHp5?hjYz2@_3Pu7T?tD!C#Pa!f9c09iBUx8VNQu4;_mBf48i*gzW-k{q!Qz) zmGu5JV~Eggo(4sv^94^9v}#{Hx1IvEqvF`X%ldbZF`AYAkZ&J38@1<~V;ZbIuvS0$ zcnh?;R|IQ`nm240GnmSH*VCE3ia4sj#{%VObMEQGP`szJc}<2QnUhNcJik7vsM9AM zaEtP!TcJ^k4IdjL>X9~!uG$_^YLgBPqgk@+lTFtQ2Q%>3N9KWve>|bR&<9rl{MXvp zb;E%Zr30uZ-Q_EqKq25*%)LJ;uaMhQEg({+v|CrwAima!NdiC&l7=6wA%Qo1PGjb} zz|4WrwjJzRc3u|nw=LyNes-6PnaQy%eQYyLWm1S_7 zg0KAWE8KLPEe2v!7M%cJYOiEx08KbJA&UIfD|t3wuc5`PxN!Y`Y-%W+DS51_xltbu zI5<^aYi@x#9&|Bj_vAaj>pRqTOqPTO?@H6b3?}W~Po(SJN~uIW%eNh`e}8(fv$--2 zH*8i3LyJZ9{`9(d0IAgBpV0p|W5>|?ZoRXy)~&X-@X~bB?#Y(tnbGLOBuv^p`KB{d zD;pvqRpXiziWJ5-wcgm>tZ#KU>UibO?{<YtO^pI!~$JBJ}HEu=A!Fd7>&9bhfv|+5X^B*?v=?qAV_OREeZnRn7N!MVws3&B z89K%~K!O^B4wg(2m8JQGvVmWRv0H%=$|^-H7c+ad>ir1u|XogPq;sMQJ~)($1arUKm4-$m_Qv8 zfIm8=x+}?(HT1(5V<(Dy#FSVnL}OVYH{O&=xqc!#UT}S$vRU7AEhN0P~q!;+lX*ym)+(=phjFliKgslIKODkBFoQHYqp+lI; z%F2R)U$8M8lo4YpF~%?zHaiV7=O#m(cu2xD2Ro#kxojQ7(pz`d3x8lhWdE+MDfF@ddySuek zyIb3>u5H)wJ_#zw%D==p?Hf=76WP?d>y5_4I{J}7dD*@676!JS^L(4m&3Y^7=6MTh z0+-R`8VOm0Fxg3cm8_}a!0fjeL4x0yWFimS~eI4QXJuZJXAqY>lW1vN>X z{A>o2t|e(tfB5SyoxK$`eoD^zAYP=o>*af^#?tb=mH4FAoW!SsRVmgH!5S&h%)FPt z$sj41;V7JeSK0J4hcc?bhiJWe?)?%Vg-HJ2e>+cCKUaVlumZ`?sH>0T{>n)Enn$Ca z{}LGew5~ob53y}UpRZVBANL_UjFQfyt(|6c_`;rlX_a^FXTy!B8!vXAu07m)W^OLj zP%P2w^5gbojlML;tS&#U@d`cIl*v3>c(N3R;potgcK0?Hj-1chkDocMUbFvVXLI!t zBYP=RasY=Zv~#u~Jc)d%aj_GODQwr9>y1{s+i2Cd>bpFtMs*vb>2QU(9MMkou#~;j zdExh^J(ku>_Cn_+H>HxN+Nrdk`N=&BF_V{+9p;!<*^Q00?vrZ0)7_}8?V(Emj)9sUSh#UkOz``#AH3+aH2ul>C8K z*91041Sa4WF# z`YvbI+7IhZG-`ibYt=U~Mgea{_A5UXNmC}H!6SLSE-o*y;QGouQuriSNak@%o`(u% zvhVH$!T@*r)-0_IW9rhTywUk`fc{tgvPJa5H+`+?cO@7CAc&ztuArmtRzO22Va&SX-Ol+BY}6o%M#h{P9Z~4Hm0g zpERBvl{v?DH0dQ|WsjWR|G#=^*SR#{MKDR*w zsFdJp=aQvm?g)zk7C=L5MD#eA~V? zhAT|?H@B(b9^Dy*2F}Dad+BS)lU%rwcxtlk3bTeB&1?L+auySjljK;geNfCs_*$WI zGtdv*g)f6h4{nTnt3K-RAk=~ZXDt-eZ$`HFH^E72PS zMSecJL{vA3hJBNbu~U+|It*FL6yl?B4-#3GnB2}>&eQ3fWj>MRpVrgBmUH)Z8ClSoOM1}5Kx)W_!%VR>(f zSZR@`kO>&&V(-Q^1tAZ2U1M2+(H zZtdgF`gUV)ql;0kV-%DGDS7Bg&2Oe_rc_R{R&k0aL8&(}>B+Z~s-4zeyHnffvW)C_ zch6N!vJIcA#Y`3~r5%>FVrmt=;#1LzokXQkE5=R~=vKE-a{saRk}Gvt9g)J7-AyD) zrwd=9(n;7v-9WR^!^6Y5K{QNq6G%Y@gkJqndYo4WfYxI(11V(6UMRv!)=YXI*ck!i@Rt9cT*kXqw_ zlKruV&XpnRJs`3q2?r*Gv715HOS9((X5<`D%ojIs16OTk;#BkZhDew;LQ(z`ryOF3sxsiYz#VJ;X)!%$2X zDAFYoQB7Ye#iS&etLn|4G6V07Fu)8>A-9G&aFG%J{Fh05fu&1WPh{zTYckI|OAazXY+2lY=oDm=TG_fd>YPN4UultCcuj>vCu3%zYDUFJ;9qSyFc=kr*MD(LKqAO+0GH$wg-gs; zO!fr3gp3A=sNYE-w&!?<4z+18aA<%dg{fbJft;UwmUNK%HwC0d`$qyy;cw#7D1^8H zB&42AM&ob*-ki?9fJ}%kfT?ds1K*>>$7F5KBY#8=98+kw$bR4tk>Em#ws8dU0>&Xg zedr8FE+r2-ohE7Sb)Y`5G6Z6((=f^aezboy8xADXap{It0s3e^FB5%sQ4vJbKAgA` z0K4%GAMTJ2F&4_@C7HL&phXJYnEPh}e%K~l6~$o2b&#+bK&=0D`0JOw6*1@`$~8`j za)Qnunw~4>(huGVfg3yu?k!{uKcSnzWCxTo)z(G zp+J6LU==nl@M;(T#bOFk zLU9Ygei8p3z49%SU=GpgALXLc1?04asooWl%@IzDw;Rpc?vvVD>tl`T_o_dl-XZM; zFXgy=lJ+-US!jQgii*i9rZBtKUhaa?a<{ho7^aYvO*Eks1u#ly)^8v_xlV5`9!q@E zY6OnI$OR7g)!?-_J_`kLZo(S8pPZJ@p3^9zft&PJ+8?{FBzh#nJwKw)=@9)t;fNm3 zQ{cKOPPjwb<5?j>e?K}j14?YV?|9TEfoVHF38+P#gN)0jWZ;^epL7mlBgd)P1mGyx z7LQj!xYI7F4*gcj_aGR`y@lgEt8}2pF9rEom@bhB`0+fLO_BtVx%YaBD6haGqW1jR zcSr?%MBjh;TAmbsRmow=48Py0Zf`f9bgP|Cb^XCkZMW0iXgt}4OjqpsWMl@B-BWyE z*p>jmU#>P|^y4LE*P08py%rR^0oMB6^}SZBw!6*@k6E*A$?$h3eBn9~HRk5#-g{01 zkGiv?z<)-qsB1gHdx*Yv53~idkYHGof0{Qc`%uKzx;G&f+FqxzQ{QS;JIr-}jX^dN zpQLC#e0`&~S>4<2bhoQ4D-$m&UwYlBjRSu~=hkT8I#}zrs0GF!pEP#mPGk%H%S|(g zN*imqGWFedr@FgdOU#tB3(hv`I@pJ7wW^P+9hM!CmrRJ=g#t_+h~1mGT0&PeHy*jZ zX-lTK`~eVSDE^LGd^GO4j>WE#V;Xs#J?-MzEr{wj)ry$>wHH^Jw0o*R@^9td1Wgpy zwSJ~|CG_t_f$uq1I0q|KvU?SYnDVtaKP9c`DCrW<6wS6okWs#UjAu$nY3zK;L&N~T z1QnBX(7s2#CqPM(L@yjznNi_H5AT#WS<44wjTF(;+ z1N_z5y^A1bKbG%5Xev?|TZ%jiowr3uAJak&U)3B1w6L>bS&h#^8#poMq{-kX2!E=Q z0o5);LVANxLH)&Jfz<|4FrT-pP&k9s_FDXfg5ZV#9x=vT+H1t-MKaoprx~G+BQz7{ z(s<81D-jumQ$=N*kIUP=R4Inw_&#%`unKxXJZM2m{PZit669AI^x%Q_JGlqmq!I`E zg6X=)mDG*1_z;~&fa8zM*zb9%#Oan|=)HO#=S6~kt z95#_q=0xRv4aI8qJ|>jh`vQpNg~GR4ppdIelZC?7rG)piy)gUg8y5?OJMc>AeE!-o zBvv2UOVX0FVeub@y5fA!PhIDA)b;my7)jQ+psu?#I`o6*r9;Q2q-v8j*S8>6SL&{J zvoa56Ebcm*9L5wVz8AN+gd$J=-59t@SAI0cOZnn2+sv3Sy9HK}OzZMT>S&nHOO?C4KsE6-6fk4w2ua%6XM2j*nlGeO$OGVs^Qf<&V8+cI48R zv(dqv<(keA3iN5j)ZOCAbGWGi&A1sxlsFL?&;Zr=Q_bz#$KCbqY8|s%UxcQT(`oXR zMt}dUKg%?t@SB`oaf~_$bCdPXdt0YhgHgg7;&9J@_$$fWquZ8FN)pR(vtNb zBAqs^Y3Uel?!)|OUbs#U4%d5u12?>_7q+5(ty;jMV zg9*!J@aWM*_K|M~=oy!8GvYbSSFM z#l%2qMbjO}tWsQI_F3qALR>p@w@hXPhhZRG+Ez30&F6wAPXgrpsS;jPL2w3Ync$*# zIGo=hTd0I^#V(8I;+NR8H|{GMTHB;xVgr!9Z@Qt7+mb4~G}?6i!?}8Mv;HwJp3^=b zYZoBgKyt=A7B3=aNV^_AR7Q|=)pW;w$3rpP@f;w^=^2bz343i%JR@+$k!tH`2Z6KZEjle^@XYfNwdI<6AHIGrPU>l%DNq8DDAo0s*#+QwY$>Jsd zHT(U5_RWYIBr^LmmTQLLOc+?*p=r(7VT8X2uIb@JGsI^mD}wp}D1(1MCD;Odf`3HT zXx}ya;S2_kor(N#24GdJF3dRs)k7Duz2I56%0~sS0=gg2aDclfV|;@zYsNEQ@(7(|7B|0VRVj~05jy|$(SLI>{JssLmbPg z$~q%#*MY2Vu=>h!PM2r#KV_=U2wOix4FGcN<>YB%QCP^6i$>O{i)cgIJJs#&lPfr* zE+W`z%Y)|QAga_J8)6vVcsL`s{{cjo*{ikrJl-$QkZET$ z{lN@*zXE?+L-vn(_(z}rV_}9&_xtR{B37WDWwL)S&5-FZnvTc&{_+f&jx6?aWrj>s zUU3y$WX~)2X2|r|=Kp|F!|_WT#5}wS@QoPaJk|{TQZ!n`G7B(h@O*cnU-JF})UkPM z3s~A71tn`3u?`k-W}|~;X_SjFCwNv0K#Pv;EV8*BESL5Jv(FyEY=ZEBHv}E^16F#8 zE#1L#$qJ4}@(L`8{z{P64BJ_PWny|s_HSGzH)QQD!3yAD;`Lv`X+Z0q@4b{;Uyl3r zM^T8at>B~3FY%pRfyo^>9_6ob8=QW?dRu{}{cyA|EypUf5RL*TqNQMDVXLdqiutlM zzr_B@R)=@7ifzVFP$>hzj6Bbg8m*L}P`wFu;n+l_!dB*G$??QkD;21D5b(iODzH-S zJm0#?JoXwoFcSd~l?A90TB6JX40PX`7HHAf#f)6r_4N)xbRioJpjr>=yIUzd-fC5M zJEUFPuB~@wIR4C#z2-)>Q=1_hwe4D`2JOlG3IXgwv05~C+Ey58P^wFEP$Z-$l$dgO z8gt}47JQn>3IMk^?3{te&m783Ju!GMsT?%r55Q?Nt5)$WednA^Anu~{tbm<5EuA?m0zVF%~ zTTCZ~*tSUbXoN5=m9)DgsfcQx6Xjzjs6r?4WO9Vo9Kie6Vo)fWp65q++ZPrM=>;K0 zu>L3-!I@gH!}ki%&5D=2Y9fF04+`AVogoV!8oBietxy5~UK^ zVmfhBDyh3n$j{UDiqr!ssK~_A%-exu=e`5O`*q*-1L!sA_e?ld=YiJE1KqEDkQrnV zRH9J2nk*&x0jat)h{9}XG3Qumq0Z*#(rW)S{#%-1k=hOlUYXey_Z@)tr_>DEkr_lg zz84LOhAis9N{Q6rcVyS;6AS^r(wZpboO{}sYZ35&|%a;rlKE-{9y7s#7?K^!92o^air9q#Ar^VqQ4fEJC5FXg|XaF*` z@7l4QO7cmK2J2blF!G0*!Qfldb^3ryMeq^KECOqQx^4qC-TGl;ApvFBjI>kYqZt_? zMaK(A)B>az)KdLuY88j(XykbPG@yu&ygn*@5ubP^%^t>1%I-aUieW@YX}C*1x-G(L zVh@Y`fKpGpqFC<0bjPrtB5;}d(M%jZC-)jq`{X|3h;HgfCI#Y?kOc8bm&y#a=pWD^ zfbb%S%L*{03K#of*rTor+mEX=FuMM&|mXps5E%;T3Tabch0QD%YD14t7g_!Rkx zsezv&Aj1Rd^alX6#c-He?Bc%fM--@ecC(6TJJRwGp=pHp^gILwfda)$+l0XWjxB6n zribEF49CMP_DSSae2U?~hn3W!U22H{6$bv{18UmXuas6vI2?u3J#oR`YO=aiHlKB=i-N+~N)MWN~>2!!h-KPkS8LJ5xLCpmz&Uq?=; zsvB#F!^mzFffaDaLp&Sb?qpz1rvqt#EE1BRcuyYGS~XsSjh@^m)69`-npAf;@V=BUZV;bxrI0kg(`G=+D zfwIWO$meg8j?&GI9B}M_M$>QL789!X0{<|ifz)z>th>yjM}EicBVb(?`SgB{2F8!r zZNMuuVgv)uo2*r#vqG!kdzbR8hUHjD6NR(IT>0PLWA?1@tMM?_$!rZ`&;&T*|`G?4yrZ;6JC_tDw5`sEIUm=TWC4$aadxiB8fq&i6oJnClkZhwyd= zek-oeqB(`~oUoQU;zBmUk!9Bc!iYhPHt#1nIW8f zr4Fh8^m~l5z;8@85{J|?gy;*9d4XBI#{N7%t+=P76~DtHcd^C=rC@v%V-tt|fddxf z=x+q(cbs3uh^?GY13qibi3BSL)+%YIQr5vNdbnmhOTXf{e0=4OkIScbCS_F>YNX?X z`0@ccNpnH>R_?7B_?6EEoyMIM{4_US#l}d$ga|@T6|$I}&=au>;NLhtJob;YK6T%D zF*c7N_hmqBa9d(Oa@Y^{ZFWaySwNs*YP39bBzc%Bi$^ zIfNYGX67uDW$=L`MELlvQxVXK!aLlbG!@cX6Y20n4m|aJ*jxVM{E)P&fh1BCtQC$xgv3JQWP`M7?G9n_c{nV=FiFp}o{u47g#%(P zO2}LS#!>+t`Vr-&(o|D{wDhDUPy;s;vkwt%FhWPk3aAaKTTM3vxQChs`$@qeyb)`N zV3u*yWYsi_jm0yrTX2UhMZQi^!xeDk!!L8>U;`4H0Uya9Z4fc%Ast%-z0A$3C19W? zcvg))&<&Kp>2gGEg^`JC9`Q}HOxVW^q z0CJ~h03zd+Isi!SEC!&iSau4+(O+!=f)9!ol(qYIW(|ZdYjzH28HPwouMR_Ah0D}6 zfgZp@ysnO-{jk29?YYRum*|HMA|bT(j@p)pZl~WC2n!(A<-+Rf z!Z8i#x8{-503TF1j532tEpvOP)8tuMv-6aJ^}^!v5{&6Bby8SgKcGa*F^S2?Am+l` znwSe}Mv^#1JS+%Q`BkhU0`1L^7?{1jATLH|J*x3>{N&^$O=N1$hw+!IL=Xaeb%SBsfon58!Fl<7i)L-HK>16`Vn3 zEVXAo1ixba@mNkoVhL0pKy;EDi$JWZun|5c?Yb07U}Nom+%%r_*+2uwycaa@zBpF& z+(ta4Jbc1xy66PCNjV_(bv!VHOl%{|7m0N{368P4Ml)0*Dhc7I-F?}2TT=$eX0md2 zqQlCx2IS~IoNPD(SpG~AjQ0@FB)^<~JG4#0Idfu@aGu=f$4y?ZJT@xMSAV#iP!s3B zy2`>zWXCFzeBOTgoXBZEruFw1mzfK{O-IzT!>;c!V1dr!Rpnch;gk;#4^^s--Q{ty zGE_41hQ%{rDUekrfmkxdi7%8Z_eAtmV7!l=0-ynwI(ZUC;A6>rz8*)`h4(tn9wM?} z2@In(YtM1=CdFmRTOz4Txsx1Lp9^ZTxeW`<9kYYjd;;3^tubmbR;??)`Pi8z$y zw|JAtzGp{+(XYVem6F*I%^?e$i@+39Z9w`)KQ z$h)?0jp3TL3rqH{D9jvsabe{N!N*}XC~CW>nf4FKPiEhLHtK)=Y()E?_nrOEM_&JP zD-1t>7Jlwn{^u`;?&pX8{yu)qe~?`u`f}t1G$adUJ3T7q-q&^gK3pctZ-wR2&q3Kz zIrFg(JX9h@ppf_TTr-Brf*ivBeV&-O8TgU^Q)6x}NmOizSAG!vbPjmd+wEGl_3`dj z7ehzywYH&Sp1f5~)ckG4!jPK5ORqo2gO8#=AGGqOXr*22bn3fX?QXN$c_1~FFuWHE zaMuRhYf33}?Z9-O(<5}F6miI|%e}@N>`gw562oqYY7gzbjt4%=A;e3>Rj!LFpe113 zuede*TgPcFCkwyL8O({oOo5M(lZjF(G!H0QD3b~)fhO6d2h=5pW&nYGL`IIuLgCKL z*(w(9NY`7eD*rK7Bu1E}zy^6Qd)Fv6kn9=moun4~(m8s6O~?BF7T1UIeg)%;>PG9R z6j1bh!mPRj(|Qi(Vq{1o6Utiyf+ty;>y>m~sp-fHFKj?%WU1|N^MlN(s9#uqPz{Hs zXB*@!`-U|$haqnvr2@-4uEf!jbC9Rz&bJafP95bd<&{-6L86A+6i6#jKgj`lBIytY zWTFWL@A(yGGFpsOjKo5}NW3J+XO`)UKf?;ZJBc!EB_Ra7g6UW;XIX&)&z=qbfOK8v zT_W-QzjKWtE*9iuBNykQ;Rs0L)%EK7gIaf^j>?0p;n06h!F>;eVWG^J7v%UPN*&im znmx5sZFg!dL9LUve;~Deu~IIVVIUWqTXobEomg%!T`r;8lLg4V0#x=gk7XK@*4y#m z`2M}Cr|&nDatRR@0ptJnF#+TCK^@=K-MPhGNK`JF_W5P}AL$6)rXX};YXzxm!-FPR zPB8`G?=vp$r?$dQ!>qvBKpP?n^TBt{8*t?39D2@(IvDr%=FZdhqwTIpn}TF? zXaco);{sq7xzZ1<;LP@ci&lAupjL8YRiqvArLO!me4cEZOP_m zWHUPO=bwx}azAOhhpQV~FRCxf_Gc^mFF(5Xng6K%0@`|mjjPpYbd&~f@xjgTImlU? z5fGi8bCJ(fnZ01;)E7merZYxBSA4%dTm$KTpr zTCrXneB=-BJzIEA?fsAIf%oF!Xmxn7H@{=uhZ$qL4{MlIOSCJWikGNY+G|6}DH!s0 zW4*eq%uga`_x-L0)3 zS6;LM9bDU3QxS}V6~rtSW4nTxuX`*d7>sCRZ>JdxWx5)1jvuJzWDKmIUv$#xT) z0KeyMbz=khP*HVWTF@(PAWNls2fCH&q-Q1X{bf)O4g5Y-xr*J0t2@zyjL{cCi;4?| zMd7Qa3`fSoc-wAZVI4RqTURO1P652nS3N%SYo{XwVmq6-Bzu=x81?KiDEP4l!2E( z)rh3$t!AtKxZ0_qTCV-H-Kp(#H|p(&GK7K~i@?0=ShLG~%MeDJdu!YE_2cTxA_Ryh zAVS=XZ)T7R#*)NkyN9BI$m^E`t>*wAmy}XfO~f)pHCKk1EC8xxwIpvRSCE_!Fe;VV z#aX<;6lc6%!6F%RAIjn_!%Qn=%MCAy|G71rC^92XrsZ1m_g)(rbnLBBO`9IRD#Gg zKbs}%{^*D&VuEg1^N^288m3^e4KlsgSr->@Fe1jMLl(-?p4cVngaJ42vbbyd(r~fY zgmk~P4FZ=$q}^$>s#~>J0wX!coPn2aOeIN({wU*R_?h?0<|^dlS28`$cw@XF&X5cE zBm$UflxG7bZfiv*abg&if%ej)=JgbRB~U$KlAzmo*PR|YAKz0OvnzPm+$ zdnD~z>v661N}vY0QTT#n7r>v39RRTdn0Yvsk;j)`0DBFZw|SAL0E;IOAOQ`&NdO@I zCdCLV>yA}pxy1lKTv@h}2ZW`7|2D|9kYmK&Vly&pe{4&l;Bk#X?rudKgM@^!*f#yj zb{*&gX|@_2rWN25J{O7A=%UmkDXn%AZ@)~Z@_CPfFWIiIwW=+Vwcsx444hC(0@=4A z5hL)9j`jS@^c;)X2I;e;5*fBjsBPg62|P{&KLpoA-#LzpmgOSUkTy@{CX)mfxQcy- zz8l1njK&q>t-H)q41N<=h&XlOf>xAyGZAH=eMt(r2>(962=Zf{2=X27A_h&%@<)jU zR3;R1m5u@@q$RjSvjzl$q(CURv?SuY!K^tltpT0&1NlmV)l)AXU}6Xy86g8-!3|58 zy<~vgw5#B>315elXQ$18MRKu-vx3tQj4I(Cm;)p@BDg_m6i_RmW+Zs15~RR{3vKi@ zpe!Bd4*-x(UJd{$+#rOf*;BdIyjs7+?{a8^Uk$XK!7mXqQL-QwudzSR4|Kn-1G>K- z10D1uz>dXvU^i`XI!tsaBmuSjz@`C-Ovm*hHUqeG9p|6;6+0dBWr>{*M`oWIL}XZH zZ)c-ymd!KB;;az`OSCt0Yz+a(QzGE>$|{%+z}J^|PTYQ#y92nwAq%nP&z}lgCNO{i zsGY9OdGzHtL>1F<^!MN720?#WaYc*iuRckkY;fayCPW2h-7QF@_!1jHp)fI3_{9V% z6bd&AznHjFC`=R!g^70yg~EG>W4bC z_`f8yfNo3Ji9nCg@%kALOR(Q zCVqOu9p>rrp#I4-aR>N`RILqK|-x93q@211$w~0kyuzyAjyaFzR zV>b$8^t;R-s3v(QI1>N+u}R)sp=1)C5Q&ubiD-W=98qdNr;#-nkHF*%I-Rw`1KBEX z?#y)yvf9`5BHs&#kKKu1<@#pigd^%GLll&uHTK}Z zbbQ;fn7aw&o5F?(@KM|jWhOR4;mgR}RWT-%<8h5}a6o0(Q^}kJY$Y9wa)gtIEx4)- zFQ;8tLa8#JnCyK9KO=Oq;kgmTj>cGJ|H3vrAbL}I~iV^z~#xDT0 zz8G8D{$s)f8~9aNO}NT}5I_H7j}?I5xWG*qTPdI?ZkHSC8-mAQf$X|96Rx6)vn~^b8Xj;T6X>T?6|h`rAd>2oTQE2#;<;fiGIIx zA9H7R76d`5?bikpXJ+p`_jT?$=iYnnx#!v@2ga5-fbTiUGsYVk6Y$LqJ2c_4eW_Fr zJfmS6VI&;*T#Lz>#GE$H7gXTd*?&LSKYd^PC24Xd3zf`_9TnSc!@C-di~yJma7!gW zRp19+Gca0YYZk{@96Bu4t!UA*++wuoVIAIr{Tc2bYQrgYO1`MFQzy_+uI9}sd)Ut2 zKvG#IhULt8t8BQw*vr@)Dv{CHKFwyVL{?*QNXGyy)dKu2q)18n;ZPJ#5eeZ^Dvpng zk514-cOX=&;bc2K%aQ3%pzbjps{(Yec0+*0Bpkz4E44in^dz_}>LuWAlZLh51^+WI zC3!*S#SB9NZ+%yRr~BvOjz=JX@^nm~;l}d{ZG*U1$)CQhTngZ=#0w_&w{bC180%rI zFs1}VZ^I2cqx$<8qbTl~0*AIccb2v7;m9)Q;Ni91LJh^?0W^9rj#;~yIFL0u0jh(L-4YE_wDgIHmvuO@Ve1UF~R z8+2e|w+>E{q%n~}K#D;#<_M{&z|Osuz10bNkos)xgYM>zPU@f-;*jsIauY%xyW0S* zN!hQ{P3np@GWH>!5_+(AWb47;CZu!VyS+JQ25{#UVrkh9TcelDZ9jAke_{;v@8>_( zPV0xVX#JN3t@F$!l}{E!8xo+nXv|yiUyN&=A*12FSGw~e=SwpSmJ?YI+tIG#5s%bb zCp?^|*l&a@9z|14Jnhf8hJW4TlfV?wn^+gGfX^<3Ox~8XJ|?hkgF=P|c)YR~%BsEm zOvaiB7(>nB7YF?s(Ga;mwMufABECSV08&<>^^b8EDEa5tXNveknY6CW8yv4~hmO%I zw|zKeFU_}G#zYl$U$2F%o$3!~P4mtxs#j%dq;EO1C8#E?hNh396Gtgw&nq~LDi8Zs zq!F>E$GL_r2(7^hN{(k)nb@k8LdWKN`<=pB(KNm~iT0l214q3uD&k!8D<>W}Aa%7o zfZ(A58mUxj6C<#3lk2o@YykqkbCTw;U67dWTO!WSb)BvB(n3LMYSyPLwQoLsQk)jy z79Pr?_=a}CeZ`fyuQ>fk_GXa@kAcl3Y;xnQ4m>h-=-8>QSsm0YdkZ19G^2TI30d5t zY9q3kJbmh@INg!1P^>SCx48$(yv~Z@`uT6nsu<&wrsJ6$b#F`~ZD=pbspe}smUKnd z&Ra*ac-@YYIrBSy&7mZ%=r=x?7!q>6PP z-3rgbqvGni11y{-BVyy{y0WpZf8fejEIKxlU5D%+MfQ0JE10E9MQL6%DArR9@Rrj4 zN35t=_$F6W;GI}-Nabf+0N||vZs3hCk?Sbeig02V%FjgsjJE>bAb`oFpR?rAYh+1I z(;7?WB?i{ci$}9~@zZHu6x<|yZ1NRMS?Dsvd_}t0441;lYVlbfrhdw=7STvo3;9*B z=CzE7LWr!6WfOSK<_}3&+;m)KueeSSmE<3;7ECQv#>PggqZ9loM?;K}2pOU9k%<&R zsr&&mMlfR%hUn<3jC$xr>8m8)a&!^j=2ykHt8q&!&!vC7t82Vm7k<%v(k>WnCt5Uu zhUH>8v|#DXvR;c_JHJe2@rxz+MJqw_%A{K~9NO(C#U8I!kyc6AYv-EwxJ_V zn~l=V_I9+C7!zP2VCjbOOl@b^uORY!|5t{qw@$t&{I35vu;vHE8IxCFfROxVzHJnfW- zXjxHUo1ywmh|$KnjS`S!Y|Xp;4`ng%7bFAgy&_o{zOrDD6GkO#cGfb%$lMgiGQy=& zL65|^htaS)Dz@N2sFXIg z4_G6Sl9;H!^qmGlkR(bH1%JItbqQvcn96R8ktn+5s`hgKRc!0yosb5c(_fuAt*ows zbM_+#2K83DDmJVLW2xuv zDz-dwtE7d@8YYfxnqHIN)kRtQsCaY5oDOwPUHyk+@C!!24%wD~|+ zAkKL$YZsp%Td=e-+@+!y%~=5sNSGF7vS_#w(u0_z*co?RL?e0|@6U#4>n zYg5^y*&?KS-;2>PX%s7a3%d%MhvjOeHrncT?n0zd>^PymC>yLv6^LZDiI^cffMN!l z(7rpsG`5=1e{=v|ea~-ve0&^Nf{iOt_x=AL=@hbAN&^zfpXj#^yMpQfy7$h#)9ta$jSCeG(j=~GG;H3+lIA&#d z963gfV|d-GTH^MUv{R`#iSDN-4n>vVm22|g^whD8g7#>lD^bv9l}H|YPS#Mrn&nn` zi9v~Pg_Pj>7>*fG`ryo=11Arik{;FKs_7N(sga|yn;$xR>cXLOC#Fu4!?6oTkDoqC zzJKCWI%ZN1;R=TznVfkTvNTy$9r>}px%C`cd7O)j&^>+Ki34pD+m(I*s;i zIDGQ>u~UbR9hBbK)|?T%R7m%=$rk7?rFv@Q33VfUS8z8I7pBP%S6r@+**FxH?YJdL zQFQ8-Bo$5sbmI8TsUs&3%_suW)9IeOk|d;(=_I5ljW=9-*vrLWwUHlsYWrmOruLr( zL;&t`!kBjT8)i1j%QMJ0C^?=zy@GosY)f~JXZI@G6(bA{*S=gW+A5lvSLlj%m)Ybrh|ATs)RFE`F|$`y*17mjmNjZb~GFK-y7?APBJwOwev*Tm1HN zG4d5{7pI{4^?%7BQ`3ca;!9J5uVM_f>ikmj)YvJ6bYk#aT^G>^lN#iIdzj6ET9sae69@71=S8 z$&y#fh{9s|pPiV;cgy0Q;tWisG0~9?h^4wJFD?BQY?f5tSCj5X?kP_Ceit+;iM~%# zigHR+5|Jdp_mRI+RiG}C_pK~F7tXBE=`w4Po2lp`WLNw#zRs2e14iK0eE?RZGMtM!7g0emiP1BhW3h7_O5G7>B-TJ;hg;pgh^ z?D1=E4i*Cq{+c+k}gy$!aSt`Nx}~|%P)*z z=MEn@RBTw`eB}8$X%`o4gA`Zdsxk~W^}t&Utqxt4Hl{hY+rG^Ao6DRDOQJ%i5m`+y zSc<)<(elt}V=K#V7?CAi(&!sZ0(rzpVrS{9I3{4#R^fb5)B-{}n}1JFX~)JeHh?nY zgJcLHBHYKRl5*;hB3IWUjZ~`RFiwnJp(E#!O0}X)7CD_!0UG01oAvFaU_bNH^eI?g zF(Dgbzuw<%S(s<~x}mV>1r0y2!Vrv_;TgQAQNJp@6nm&dPou7{y*7qk%Sx2d&C7RB zgN~R=L6odm%C&c@QayZ0yZP+#lLt?nJTxNxg27Nz&Y>hcE{q9HQdbBdUdw8@o3&*#Dkh=J_iKhpOuypy%<(DR( zuhD_Wi7fg2kK(kRDp87Pm@(si=-5h4nzO;aanY)Wb|jV;b=YmB78EMKYgfW$E+D#I z2APFsA!@}vIy=|YoBWJ^hbV1u!i=Y4u>->{6Q6FvJ=5D@LaI>8Vu!C;h1x_sxNV|K zoMhr;Jg29`Al97%sjSo@Y#gVJwA(YT5djG~!=3)AMO7j$yJ-oK>=xoL0mj|y#R$Zt zv~sPK&S#-=c%fP73!A!)N(Gj<%sSz<{)Wf)pOZGvQmPk>rsYPv7OlGOC4F7BQW+yp z_j(%XZahw--!)te4v&x5$ByoCyvN7(o*p~cu9>3;W~~Fq!$<4$4)b{{>P1a-M-vq@YWJd zYl(`-jMjYc&|>xCV~;kDj~tyoW_tDJ?#YXXgQHI6@pHn-Jlzr^DF$uTveU1SUKIwr z4f|T2xFas3U8%8OOArs0n}~d%Kf9fd*>bFi*9D@L#&AO|Ee0usHsUcaK)PF$t3i>r zTq4<)bTUixufYkfWVxnP0(Kk7`x|vwM?v|FT<;(csPKCzDq}cS z5b=u_W7XjnG1BRgIOmES?oQ`mUFQCy(wS@%nWW;SI`WouK54XU66r-a=87CI@ZqYp zK*x*dLLf$N<=vKs4@0MHqS30;ZWJYjp;Mw5ILt>`w`QfCx0d3hH)u%_Ayd9AD`glu z7tHt|+D0v{skR+81sC@?hR5LI6pBW+1;PM6xU>v3JzON83>P};%V$gfxooicaB zSW`%$l`UZdis1Nk0{o)&FqVI7`dlbZm|~s0euaudt5p zW4O4XQ>Cn3Jf7gg66Fp-!pqs8nR+N5T;-j(@!X};+UJ~)X3aUz3~-$`FI-MI55;af4>(2`7LVgjff=tI zm{#$a6)k$fd~rH9_)IFWd0yQu*yM^pyLEh`IN4~~?u4iYP$&&ZWyjF0M=bDTq;=^& z0?t^)XAZFwR~=j^yNvm#ur?L`W99Ud6F`>=Cwp0^m2P!T4($^~HE*E=+*LOp`ngkP zc=#4ke0Y^k#wTPib3Jr&?47vkfSpLj=YgWT^!!p+B3y0aLupfUSvcszWH#xbt5n>H znO9|kKZ(z!^DYrrrMT(@$7+{VgFv}HpiQKOr5-6-hl?k1aw9#6b)-!Va_Qt^4C_cH z!qeawzS6a`-1uH}Q7JWEbpWd|E}b)yV4TWKfrzXGrjZHGhqI0Za!~3_BV*D@Fd%h6 zBM_Q=tD6Qt$x~^`No8cng8%pVs#r{|YC4671|VI!SH`$x>5z9oEKLK%#jNpEVX#;v zeq5EzBgk%@qSc2lL(|eu1Gs91sU(_#^BO1UM9tV04RUbBpi-=hRA~m~(8Ql9Nbo0C zv*l|XMrpFZOQV(SJG<_u=$6bmrNP@=hE-|#qPMVQxX}8{t0`QDSC8jcwg&!+QsV7r zXe>n2yEqC9}ovC1{&fB+hr>@c4|6*jvhIU+P8%r=t zzS#DcV3Ld-3{^=@SvMd6);@DOnKg6zO|hFIbC>9mbEx>HcRFfn(D@wQpRF#FNRcOV zAUC@Wah3;DjMV%}l$g@y>7H^iD#-bhfKIUHYEVaPp-#PAf1go)9WsT_pwe_pu&G(W z_&D5AOXFHhIlAe%zs<#WSlI2Tonrug2%ZT8OvSAhPCAxv~aDLYD7KJNXozD(A_GLSW zSt`XsGW+3%rF&V|c_?$0@__4IXopsSMbj%M^j=NyoXkGKbgMxv(RIdLrBv)77`RTr z`2}*=k;yQXy*Q$(DTT3*I9}OH&Tp&m8>z02zA8UGc)c9}CQ?L0%(J+v6KR|QxQj>V z6t+FYbqaVZg+c6;9oH0gY74Xl<3%I%+%dN~QY*KXY+obkKKx!gIiJcR=X(V?BWp>@ zQzvxeFLK1g9VhyMhf^CN4xAXaV>J?RM%`;i{P4)siK5YHU_+J8p9oI}DH7MV+_g4O zFHN1$Hrho}cu&;F48jc2M8|?#%S*#w7X4Mn_wL?3!JqPg#4{vPpz({C4W9$aT3O%?eBDWES8iRNs z(+z=jscnT(31{WDs9b%^3NHA8=X;^yAn!rO*lR@Ic;k=`@*ZF;*N00ea4p3XkLFlE zuBE`;6!`*Ug}y;?Tg7?=Z@>eU7|bzN*Z`NhJ-v+O`yPbvrz=APqMK0|ZyoA^;;$?( zFW)SR$NOgDqbqrYuVYu}LX4Z@RGwp-OBb4f*Y=URhcR}WNR2l<_oDKsN{?PJfJMQS z#jT97<>h5o7m4+1EHK9EY`S&_Ki$Y~M{5QcD=Y)oXeMgKw&BOEc*uH!AlNMofyuwE z8DSX>1sX*yLjy*`_>I2<+8e%y(L~HQ(LX)w7%M!1&KXA?i4;gxpC8~7h*7mL6P3MC zV2oijFd}oVhB823pB81{{b@E`+sD|OKpj_d)asiU%YUaApjQex3$3PXZwI-(jIp5y zCdl-^*b1A)?c|qj+MW-*^Ooayi*Po4@c7wd+h4J9aL1`5GnU(!w!+Y8TE!i$u=$GH z7#n(UqUm^b!zm`>I}>DPe)`1rR}3ImU2apidA5aLthcV(*8jCxHN5YSnlYn-U#q;36ZP=GN)jy~|gI zHdls&_OS1H&afMihp@~XdRNGyx~d%dR>+~YsvOp>ki$qihdg7f?KcCX!TBD4cMAOD zeJ7i)Z30dQ`NcOliLJ zhBK2g(Rh^7_rB$K&sHxzjv~2ZuhQJ&ZwqeT1IZ=Ef$icO-28<21~(6hZ*cR7 z`0i(neM?k#K>G%jJ|bXHpd1)6Zpm;67Ws{)%WsU_Cq>$iZ(?ju4(10Sup1eB6XXs1 z@$&LNEa%x38noAwC|xgxQKEB*)O{69P4NHtaHV*k*$x8Bjhv+-tmv9nqj+@5w}R4{ z;({GSZNn*^IWk$iFR&ISik18C2aR4|4h6=B`YV^mM#e_+{Ifb*9qok`!Ad3fFgCPx z+BO3ZXYY##yukPPS&mJN4c&%HY96Ctj~jT7W6`;(4SJKeE3`>Ok(ll2K-8p4wI>@< z;0rp}EPr)DIwsvKF@pNl})o@%us5H?;J-wlLawFW@i<|#L_ zoHW7)QBf`~FmlHj+A~~vA{#@!9TK2p5c)Zg`mwO`JP#3 z><^b&lA+gipi5`P>T1z7b?}hDRt7__EteQs)fB;Hc9>p+?zq|rFy)9cjk4;u$W{%5 zMMCQJ>qzRs@Gw3yQNe#%_&Fm+gaZf5Cy!4TixM%zl_IC4H76$Vzf$&Scz!yZjj+~6 z>jp$UyEJT|vtiV%l^b@@4(G`Lfsc1u!`7NO(Xg!SI~yj7dL%bpyNR)9a_lzNu*3N> z53iO4no7tG*RAWyj8I(4!jUbXt}M41L! z6?1OZb5#SVQjXVdND#EhYz0PSh30HihTecser~KBE`>0TLHYRGti3n0>Dmu-jQuFb z*bj1Sh$2-w-!dJqX}cl;W!kVJ*NRG^72!s@P-c3+fWiBIuAt3tVT@GiIQx>ni81JC z^P3r?eGL3Y)f;oB&n-q}DaevSxwGrtG8}suTKEOeC%mh8(4ZENY@j=On@ErM+xV>L zO+D;~%gf6@SYBS<%GmpIY>-XYZV_DZGRD{dyFz;Ujf~}RkNC};BMR(putE`!A;$7o zmJ5s&_t59(Zh{{FCa!C}QXnPvy|)1rvycJanCe}arftE4l>MsCf#n!WswoOF6f6+{ zZlVTq8Y$Opw_&@g%dw}UNAt7NGBJ8xk98~~RE(I;nWI)!=ay7j9(^IS;?7Cuz^kZo zNY^cF*Ii5Xcsh2$avPrF0Z=?<TOL(}H>>0|Vp=I$N zz%CdKFMKz^-i60I5k@=H&%mLqGFkm+hz8T_o{VW_Z^`1uG0FVz`B^vdEsFpw-Y(z)j=vARe#6h2=+%otrs7b832`QsLkGPtV{R8mdaAGK%l%nZu`W z;V!;st75M4%uZ~RnV#!fri#I+AYxz%Arl~b5ex$vHRNgGw9PKzF?|#80o{}!BeeX3wxfcP zkJ$=L$BoLio1C(mt)L?e_j}_CYnd%3YBH=8AV$sXc!_i!co?Ny^m5et1cFStXClQ7rrzs)v0>I#ip$mASjF4Us|*S ztJyXJRYS}U?PkmO1Ml)uxoNppU?`TLbSjc^kaYw$;;7cFB5O>@Y#&A!Y7Pk2(SUioA$CE04-8SCV0%L zMZTD@$`sh;cC3af4JdW2Mmb#zN^V7=<(k2guLuvVZyBbq&CXGWmSIMgqt;HcFf_kq zg>z(3Cj*g%Yeas_SKLNfP!DxvfiYL~ZN{PsNLHz|+!En|u_z0d^|k#j z^+g0P0$Jz=X%IXa=3+3tlT|pFI&P{h2lKMYLQpi3tC5+*B; z!9szS9fO4eCiFayBJvp0@_46u%8kfQd-qUesYb)u9nat`WU4 zRfoUY!RX&w>d>#(0gXW&@K$wz`3lv6)xF(}1DmeBeECX&74gXT;Q~?gbAKP%BeEa&vI6VtgW)9} z-|c0EzyBY-47R6N3S0gjvERqzhrKNCyug%sCNvxUm~B<}{`X!swCm)tg~NMJRn6vD zv~Du4*D&xKnY?;2u z`q&WrZ^+9Vn`$0#s^ufQFV~&j7x#oGj1!}e9Xo&Wkahle>(XNvAFj84dZAL^d-3$X zpYXhBKAG;^El?i9Y!Rn&1*S-(cniL~%1nhrD*C>GJ3AyO5Aw@~p)_{rB;WVT7&wIM zQ3(xE>HEG1m!$j@nT&xLMk0RXM24bre&i?SxKtv-V%;GK)JIrSJqS4yjFnry6PAN; z!7uwpJo$pwCKxLRUK;~vnG5c6s83!Y1~m{b^k>UP5Gy<(`_l1=@gF4E0pNxaOxrI~)0J4zVlNAw-g(kD@YBPG^7Ah)KT| zHEXz$5vo|QN-$P#w*1mXFVj-=*FbO@SJCpsVFvTtCUzc21dhfE0hwpDWq(>rq|Ne22{M!SZI{}z?!u$%i;;k6fO>X z$Ox#80__@v9Xek08W^*zCyi@l&(BQnhy6$qq(9!G&u{O(vz zqIaUen8kruv9BPJjjE_9u4Yx30;^M;ZI<||Ir4&3dMpk)VQ7*Ol_IO<)BSO>H0(Qc zLI=iT*A%i2i7JFqU>PlyE2KeZu89Sw!hmg-gbOlRClEpuRCezbdrFcp&Ika!&#>v* z4|14Tem_V1F*r_>%Zrmv1+l;IonA(#stTAW<$v~05}rel+2WiPXaxHi+!TRIZo9VW zq?CiG0T1VnC1g#}-)%p{W)1xjTv+euZjca2zN~GTV#{bjEw%wc$9Wo_q6AP6X5S7@ z+BkMou^(_JBT{UrrwLupQ``vtT#S6J0vNeuE~cr5T1*^Ouo7rgKT#LiS_*Sadr`}j z%I9hw!!)f>0RuH6!Zge|g+eU>-$9hU{S#3P-alc}wH^jB0QY6L(i)fWw*sgP7rJG=2 zF^~;W4lGj{t)N=k4huOiZDELcH=>oiqTOt4h!g)j=*CSAlRvz9fj!%D?) zT`j3rA3p6$Br<$>N5qxmiROU@9WOA-k>|(b9{Pqt`Fd1k1OlLN*NW_v`V^U9MsBs$ zq6TvZ3U4Z<9y&$&mKQg~$+n>Zah&BYsF-A`me+P8GEIT(nHI_MmOfVhBiNlz3&B05 zei7)cW!fh#8!gv*+&1KUk^Bqgjm0L7?xbl*7Mc{6Pl-bDeu_=kMsh4y%dw$;o_#gP zhITZ}`QUG*`=go^JjlK3*{m6M|a%}RUaN56kZoIbV(MpaD<&75he_W@WW4J^W zX3gN);T#*fgYHb2D3=4P36B&@rD}W)_wF3kk+4vr??z ztcI<$FyIpv*fGL`4+1OnoCPZ=8x36{PAexFHR}b7*gXk|URI+c21h`NN9zlU-5(zV*5Z6?%8Xm%WP$qP$#=v(xu z(oOP&h;D?YUuqc&BAIntv!6@Gw7SLwU1QKbSraHA;))`sWHsThqZAoxAi``S1!TJd zD$r~RF&3oYWM(=TNIV7BGRzX)>mlnUwYMBYR4>o9YM!g+POu$IFM=kIIT6Cbdh7VFh(Yl$MulrU)h`k!_JADdXa8P)He> zS#-G-)16+5A8%z!co^=sE*NdKJcl3%TVaZ)F>`3Q#$-MCPkBb3GJ_>6ZTVv%F5ytP zG?jH?G6&Pj;4tvh>$-Gw!-M)l2@#C1n51b_QKU#t;4E{c`CVc$0g;KSP(x)Fo7#y+S>aMxD>drzhB__97L#G%APV#SQr+{S5Z6%`&kLdEl-J8dUK)&yvUe}LqyCePJA z^v>s|Yp-MMnI5*4X_Js)vhEuW+GPeS!)JQf%QB-U#wwLc`3^m@LyvcWL1`nIU1`qkX?u`~E%c`~4ao zKA?SnQ2YJ^?fXO8_lMzHLDb<{Ega^`GW?@j_;cF#^V;_xY2Tk{1+J`n!w+eH25!T@L$p3zbZ_w z@%J?i{_7h2pJ?#k(BNU6AZZmYC}e%Ut-=4P2LERo{MiAdrIR-W@^M5<78vi7(ZH>G z6wb(SCoee}-iKArMud}xrge$%O$gtJmCd?D5!-Mc0)93+qi#dggp888QN?aYZkv!q zl}?_C$kJjf!f%)GR4cN6*hb-r(s!bWVh=A}C7~kjM-jh~D1ySv2!98{@0UeTIIaUO zJlz>Sj&K}LjjKxVuR!=NgpVikfhV9swKE(}WeR`Tna?D`pGEk-L_S9l{>Po+M-l$% z&hROOf2TA5hY|j_2%k#i55FXZ-JS5q5I&CZM-uQ)A>1VRyL3W&8sQegpX!4*m1-i@ zyAXSKXDKiyDxl*E?@GYG2jM#q{_aHhdlCLGJM;NHgufZ#?@bWK`#~5t2--_VeE?B6 ziKzD{Qhg9n|4KyV5>bDEs1t(HKA4F55Tf2JQhg9NUcl!T5y^)U^~)maLxi7^MA~No z@TZw+KZ2+~6H(7n+FBy*M*+|;0Ft$R4pErk05cy=qsy{#QiQ^KeaZjN;@eLmx{2sda3X+)1c@p3Q;3~Yu>*%(@)VNj;7O}1;kqg#AkT%xBy2L|2Y7>O$S(KyM8-Lpyl%b`c(;(sKN`K zRj4Ja@CCgJFYqet)T{7Cy$S>{Aapf}N_TD%FN@OY`ue?bu#4Oy?t^ zqTO_s0*a?+iieDlF1ASpVg3tsI!}r1K+=#h#xC+o(EB34_lmYNaS~TV~z z#T@yI#4Zw60YjL@4?!aeS6|$XId(fY$^%NJdDn|**AuOxRf1L@UFV*%%OPVevPZa} znJmh6C)N$30W{yox)WivY}6y\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/700/f14f095d\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 13:30:03 22.06.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n#\ + \n#root.mnuc.backuper\ + \n\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ + \n#:local Script AM-GlobalConfig;\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\ + \n:global MkDir;\ + \n\ + \n:local FetchFile Manager@id_rsa.pub\ + \n:local localDir \"/\";\ + \n\ + \n\$MkDir \$localDir;\ + \n\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +add dont-require-permissions=yes name=awg2-webui owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + put \"Download image, and save him to usb1/tmp\"\ + \n/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-chr.tar\" dst-p\ + ath=sata1/tmp/awg2-webui.tar\ + \n\ + \n:put \"1. Create veth interface\"\ + \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\ + \n\ + \n:put \"2. Create bridge and add veth\"\ + \n/interface bridge add name=br-awg\ + \n/interface bridge port add bridge=br-awg interface=veth-awg\ + \n\ + \n:put \"3. Assign IP to bridge\"\ + \n/ip address add address=10.9.9.1/24 interface=br-awg\ + \n\ + \n:put \"4. NAT: masquerade container traffic\"\ + \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\ + ade\ + \n\ + \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\ + \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 action=dst-n\ + at to-addresses=10.9.9.2 to-ports=55055 in-interface=ether1\ + \n\ + \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\ + \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 action=dst-\ + nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether1\ + \n\ + \n:put \"Create environment list..\"\ + \n/container envs add list=awgui-env key=WEB_USER value=vados\ + \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\ + \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\ + mboLs2325272931q\ + \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\ + 3\ + \n\ + \n:put \"Load and start container...\"\ + \n/container add file=sata1/tmp/awg2-webui.tar interface=veth-awg hostname\ + =awg2-webui \\\ + \nroot-dir=sata1/awg2-webui layer-dir=sata1/docker/awg2-webu/ envlist=awgu\ + i-env start-on-boot=yes logging=yes shm-size=4M\ + \n\ + \n:put \"Start...\"\ + \n/container start 0\ + \n\ + \n:put \"Verify...\"\ + \n/container print\ + \n\ + \n:put \"Should show: status=running\"\ + \n\ + \n/log print where topics~\"container\"\ + \n\ + \n:put \"Should show: AWG started, nginx running\"\ + \n" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +add name=manager policy="ssh,ftp,read,write,policy,!local,!telnet,!reboot,!tes\ + t,!winbox,!password,!web,!sniff,!sensitive,!api,!romon,!rest-api" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=*3 registry-mirrors="https://reg.vados.\ + ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/caps-man datapath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + xs-DataPath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + DataPath +/caps-man manager +set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \ + enabled=yes require-peer-certificate=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no forbid=yes interface=Bridge-LAN +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set crl-store=system +/container config +set layer-dir=/sata1 memory-high=200.0MiB memory-max=4096.0MiB registry-url=\ + https://registry-1.docker.io tmpdir=/sata1/tmp username=amsternl +/container mounts +add dst=/config list=awg-conf src=/sata1/amnezia/amneziawg +/ip smb +set enabled=no +/interface bridge port +add bridge=*FE interface=veth-awg +add bridge=bridge2 interface=ether1 +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=ether1 list=WAN +/interface wifi cap +set discovery-interfaces=*DF +/interface wifi capsman +set package-path=/tmpfs/capsman-packages upgrade-policy=none +/interface wireguard peers +add allowed-address=0.0.0.0/0 endpoint-address=172.19.77.106 endpoint-port=\ + 51820 interface=wg-AWG-VDSina name=peer19 persistent-keepalive=10s \ + public-key="o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +/ip address +add address=10.30.30.10/24 interface=ether1 network=10.30.30.0 +add address=10.9.9.1/24 interface=*FE network=10.9.9.0 +/ip dhcp-client +add disabled=yes interface=ether1 name=client1 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=*3 lease-script=\ + lease-script lease-time=10m name=nucDHCP server-address=10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \ + verify-doh-cert=yes +/ip firewall nat +add action=masquerade chain=srcnat src-address=172.19.77.104/30 +add action=masquerade chain=srcnat src-address=10.9.9.0/24 +# in/out-interface matcher not possible when interface (ether1) is slave - use master instead (bridge2) +add action=dst-nat chain=dstnat dst-port=443 in-interface=ether1 protocol=udp \ + to-addresses=10.9.9.2 to-ports=55055 +# in/out-interface matcher not possible when interface (ether1) is slave - use master instead (bridge2) +add action=dst-nat chain=dstnat dst-port=9443 in-interface=ether1 protocol=\ + tcp to-addresses=10.9.9.2 to-ports=443 +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set www disabled=yes +set reverse-proxy disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api disabled=yes +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=*3 type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool netwatch +add disabled=yes down-script=\ + ":local msg \"Host MikroYellow is DOWN\";\r\ + \n\$TGSendMessage \$msg;" host=10.30.30.86 http-codes="" interval=10s \ + test-script="" type=simple up-script=\ + ":global TGSendMessage;\r\ + \n\$TGSendMessage \"Host MikroYellow is UP\";" +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260629/20260629082001-Diff-Config.rsc b/MikroNUC/history/20260629/20260629082001-Diff-Config.rsc new file mode 100644 index 0000000..e537d80 --- /dev/null +++ b/MikroNUC/history/20260629/20260629082001-Diff-Config.rsc @@ -0,0 +1,99 @@ +24c24 +< add name=Bridge-LAN +--- +> add name=br-awg +28,30d27 +< /caps-man interface +< add disabled=no mac-address=00:00:00:00:00:00 master-interface=none name=cap1 \ +< radio-mac=00:00:00:00:00:00 radio-name="" +43a41,45 +> /container +> add envlists=awgui-env file=sata1/tmp/awg2-webui.tar hostname=awg2-webui \ +> interface=veth-awg layer-dir=/sata1/docker/awg2-webu logging=yes name=\ +> awg2-webui root-dir=/sata1/awg2-webui shm-size=4096.0KiB start-on-boot=\ +> yes +2739a2742 +> \r\ +2741,2744c2744,2747 +< 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ +< \n#\ +< \n#root.mnuc.backuper\ +< \n\ +--- +> 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\r\ +> \n#\r\ +> \n#root.mnuc.backuper\r\ +> \n\r\ +2746,2747c2749,2750 +< 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ +< \n#:local Script AM-GlobalConfig;\ +--- +> 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ +> \n#:local Script AM-GlobalConfig;\r\ +2750,2761c2753,2764 +< sc\") output=user as-value ]->\"data\");\ +< \n#/usb1/mikro_bak_rsa.pub\ +< \n#:local FetchFile AM-DOHCert.rsc\ +< \n\ +< \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\ +< \n:global MkDir;\ +< \n\ +< \n:local FetchFile Manager@id_rsa.pub\ +< \n:local localDir \"/\";\ +< \n\ +< \n\$MkDir \$localDir;\ +< \n\ +--- +> sc\") output=user as-value ]->\"data\");\r\ +> \n#/usb1/mikro_bak_rsa.pub\r\ +> \n#:local FetchFile AM-DOHCert.rsc\r\ +> \n\r\ +> \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\r\ +> \n:global MkDir;\r\ +> \n\r\ +> \n:local FetchFile Binary.backup\r\ +> \n:local localDir \"[usb1]/scripts/\";\r\ +> \n\r\ +> \n\$MkDir \$localDir;\r\ +> \n\r\ +2763c2766 +< \$localDir . \$FetchFile);\ +--- +> \$localDir . \$FetchFile);\r\ +4754c4757 +< add disabled=no forbid=yes interface=Bridge-LAN +--- +> add disabled=no interface=*DF +4768a4772,4779 +> /container envs +> add key=HANDSHAKE_TIMEOUT list=amneziawg value=60 +> add key=LOCAL_NET list=amneziawg value=10.9.0.0/24 +> add key=PING_TARGET list=amneziawg value=8.8.8.8 +> add key=AWG_ENDPOINT list=awgui-env value=10.30.30.10:443 +> add key=SECRET_KEY list=awgui-env value=RanDomSecret32SymboLs2325272931q +> add key=WEB_PASS list=awgui-env value=zoomzoomrulezz +> add key=WEB_USER list=awgui-env value=vados +4774c4785,4786 +< add bridge=*FE interface=veth-awg +--- +> add bridge=*FC interface=*FB +> add bridge=br-awg interface=veth-awg +4776a4789 +> # ipv6 neighbor configuration has changed, please restart the device in order to apply the new settings +4793c4806 +< add address=10.9.9.1/24 interface=*FE network=10.9.9.0 +--- +> add address=10.9.9.1/24 interface=br-awg network=10.9.9.0 +4802c4815 +< doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \ +--- +> doh-max-server-connections=20 servers=109.107.177.79,8.8.4.4 \ +4836,4837c4849,4850 +< set forwarding-enabled=both publickey-authentication-options=verify-required \ +< strong-crypto=yes +--- +> set forwarding-enabled=both password-authentication=no \ +> publickey-authentication-options=verify-required strong-crypto=yes +4852a4866,4867 +> /system gps +> set set-system-time=yes -- 2.52.0