From 9c445015d85dd0ae7b37f393a9b1ffd94e449b2d Mon Sep 17 00:00:00 2001 From: vados-dev Date: Sun, 16 Aug 2026 23:40:03 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Aug 16 23:40:03. --- .../20260816/20260816234001-Binary.backup | Bin 0 -> 388705 bytes MikroNUC/20260816/20260816234001-Config.rsc | 5531 +++++++++++++++++ .../20260816/20260816234001-Diff-Config.rsc | 8 + 3 files changed, 5539 insertions(+) create mode 100644 MikroNUC/20260816/20260816234001-Binary.backup create mode 100644 MikroNUC/20260816/20260816234001-Config.rsc create mode 100644 MikroNUC/history/20260816/20260816234001-Diff-Config.rsc diff --git a/MikroNUC/20260816/20260816234001-Binary.backup b/MikroNUC/20260816/20260816234001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..1b4f0c4a3c0b3a2df2ab52ef7ae08a61338288c2 GIT binary patch literal 388705 zcmeEvcU%)o*Z*t^B=jbTSg2AI*lfCrGyzeXG{J_cfYMAtQxQbLj#yAptXRN;V#8jp z4MhceN5z5-6~O{3{64cu02QC>ec$_(_xHGe%%0uM%$_+jbIy0pncd9Xy0(<}nhewc z01~ESl1L(rj*mkD00;np3gic|15NHgt9GC*aoQI{0H7k&pA)c5oJi)FBoTL2RPUrX zx3spl>MCeI0Du$l#fShDAwUiIVk7`4000640HO+75H-*O5YR#eWY9usZEbC(f)+EN z16s^TvApOwU7Up$3ape2v+2v5D2Y#$MaM-tCh{W_90lS?4Mkh~DIN^Z{eUl~30e?+ zSPnh|=>b}7jXKK4j^sAi~@%sY`+HVe8)@#c7BJ!rsgJz7DkHfeO&!00I`{Z_+s5b z%NhW612O{uFdG0c2LLb^05Bf_kP8410f0mSfJ6fT#sN620TK@YNB{t+f)>25VV_R~ z0HgtcOaTC7z&Q@5dIo?)0w1?z0I1p&0H_8+0H}mW0H`WDP(A6xd*h+TiGi1Ku-sGt zCcrxqm{kfB830saA^?wx6X!o%fTBIp1f@gipZ7YR8^a=xe@MsMKLl&ynPF8_ErkfG-AhHD4-{ zBq^2L_Zi@QK`bvWTFeuO1mZ}jk)axbx(Oao@tZ5?!T5c-4kXBRFy4U*9VHhNu7k~i zF9tQ8vWsC3A_4$D#_$|a7Ym~V366r8Xi=OjB0fPD9Umu!Hl(q&wbe`U$oH+St*#3C z1FnbU#|Z#{mx2}8Bm}fjU^!@eoCpAz>7glNv89c>kGF?kaKxYx??JY0)~$Z%yR%YcSnBpv3f>;eDME20|1!-0FVNJk6@^t#zS-fC%gy%3PlwFF}#4925KxSk^qx& zP;fMi&VV(?h=dU`NpxhSNFs&TZ~`g;6Ffr<1dR~_F+ogxq&-i74|3Sq@K~rg!}$i4 zB|KoqD{0vA$~>^+S1a;7BEb7N9s~W>&_LB_2!I(uQ;iB09Mp2enE1%Hfus^Eij9|~ z=KfPSLcZk)`6Z4>!f5IEe-1x{Z}}no8b2aIRQx}u$B5tZL;NLvR3xI<_F zV+iO0T!H)##}MgTj!2zwq?N=I#!FrB)IpN?!-yh_VtLUqa0_g7 zL`lPWqNJ;E8n;95-f@5WgvG0mM#FQBVmuY*LzR zi1YzmOaK~uyg~pP0GLst<76U9oJiJY@RX|^B?}T>vQoe9hRp>4Kkp{^Vxs^+gaANQ z3e_m00{}j%^Z`H&0Dx)+>J+3a07y5v-USx`Kzagz^a21e2LOQx#1;U=4gka+YDL_{ z0l>wVX8`mE06 z0q6m9y8v(z=Bb296xO(g-IZMpyC+Tf%fP? z59&a>cc9%m(Ehls;l=rOxaZS>_U=Fr?m*jgpshR5mK|t|4z!kH(LNzjlqiy=CWxdd zipdqMSd+s6K3YLTeW0Y_oE@vU4*}UI1>M}*+R9hZpIcj7g$f!jrUeT6Yinz3jDm*P zL0RV^O#p%sUu-rJ>Y!r;0J4by%qIenOO$H}OCmrP5CO872*3gaP{|7sKzTt1;5`IH z9}qyrK0@jf0w`6gI6S5zP4G@LOg?fUM+ktj zCK~}q34k(FAAsWoc`-90pg=jB6Xm~K5aqu^^t7xW09HhKzTPk&2>@$&27q8glyeHL z1YrhT*w2Is9EsR0NX=1HI2T^bgGmk%P*oQ~Y7tEA5kMW_0NdyY+kqm0YCuEe+~&ay zS;Y3y2a$_XagF}lWlH$3m8lNy2Z|HP>=iz+zhAh-|2*N6{xt(uCplUoiV;brO5u+E z+ea?xKTo*Ce~obUrKxd(C`o)=d}5n?NB!;cCI9Ei_g^%4wWH!?(uDXn#lZhNWQ%mL zWE5yy|MSF4{?`m&y#&Do`^1Epc%D$H9fW^}gb5ub3=zwJt%MDrgoW|RaUEqW_&a3W z5s%?vmH#{$tNv?7v3`79OsahpPa;g_NksNI?vDA}MGOJUnHr2DJIZ9KL8ytsYXbdMa__zhq@atJfO{-(j}Bbf<1W$+ zE8LZA24gp7pgT+~U;>vz(1l^9Diukhc`<1EFFl_2OOGe~<;T;YXI#P)CJ7z!0F=_D zHAW#Ucpd|MF{QUo>E+f0xL*VJm4p#+k2jSF1=8m8hT#Oc#|!u6<4!L)9WQ!AmgTavkBN_rZu81PmlZtV*6ctlPb9UCDP$>25xJhA|f5qK&;j{v?H^jW~Y642uh zqiHZ8h>s5FAd>Hf08}V3DiQkrasN+>!ubcNxQ`DqV+P$8W)yL>Bo?Y-=+8)$iX_T_ zRF2}QP&i5&=2@V)4}BiW7zK<)C}S6u1eo6!(*dAJ9!=~H04@ML0EG9Ix*}o(`-NZ& z0Ogo971*_P67)H}3r*}$+JK4zh8T#`+2+29i$#?Ig#n-(*)HJUiDu8{+s!7Zc@hddO2Y5OQQjm>vN9Yw$y;!P<*4uOXB@P++ld)&pHc6>)JZ& z8-`$5j!J50XwqJtY?CQpAF{)JM!gUMCvo$ltywmWd;3Q(dLI?yp#$B9G@aXNSu)oy zdXqN=c}=$sjotzoqQ*joBKSN!fb(Y@!GL2MN8bz|mG3%?U_CIxmB@G30y=1euCOxp z`ug*&+B;)ZkZuyrJi;=$h$IVMJRKKlb(%9~(1y_oB^i(-Rp0i&BAgnIJRVQ!_*TYc z;TeWS$;z++K4I|bh`VZ`gI%Yqv4w%t?fbj$r3|A}zf?Te1^_5m`U#SFadZr>0O9dK zF}>jV0r15P0SsQiSq(R77`JJq7Q{-S0^qcwz-a|Tm$><8SAp`$FIR&4iX9d0F+Zra z30)OR13H7@RHZ^su)-8U&o99eUgB-R4GC^n%%J+{**1!Nz1?-;9W9t>!UP5q;7~S$ z?mjap4>Ks3Hjf-WV4xy{0Xw0+G?s4LM zA|Gz~A|@pAq0W=0N@b#0xOD*@4vI5$?7}z)JfL@1Ib{6tJieGN05DpsaL0Fr6!ghM zb7Q9Iktm5z5IOqBO9k=CUF6yx!NW4j`KkeYvAzIM{K%Q(V5AJ+Oab>ZD4%1Ycs4v+ z$amwJsr$ta5qS9a;e@#cz!9qkhyamqEm7`Un-DK`l%-4k$ z+Y11SnyJS)C4H<%W*Z$iq@A{%HfS6iQUZ}Awn%}`f)x8J;ILZ`hb)jsrxq*j!&8ca zhJdI}0peg*9%M$r&pkyRs7b9L!wQXhR1vm_1=WWaYWf<=2SUNnj8P+aTU}r0d-2dr(Vp-pqP|gE ziEo93_B7H&Su`3Al^-LFH0iVsm;VYDG7HknyQeCwE zO5yO$0qf?gC+D7Bx8b$k#U&#Vs_A)T(I!8%Ea;>A$!IWqWz9VEdoxsAz*OqRizd^K z-oMa)f@jTj@fq^2Bx}R@lUDW2OM6{5xR7%D`u2$$ToqCJkkP#k8GYJvk@9$NcTSOG<@fy=BHXzH^gbop7g@p6Wgr` zL!%yx_Jo<|95)?V@16ag7s*3buMDf{6MoFaqR!qX z(_>(2@WS599%KwIV!wHNJ$0;M_10%v7vi=KGU7OT-+t&Z&~85~sIp&x%14K1Cx?5- z@XWeiBW+6=(6?X4_)RajcQJT=bJp?woS2#gF|%8R`;)DPqsL4v3m@Kne&1{Ip52xd zGWyE?u=-JtqXGMi8(uC$^tP4HJiUw&F;8v4>F3w-@?xuJ0iXjF1k`0SVF3JikO!ov z{+`f3(<#3v^zRA%pF5%FLvuVA05cZ`ox$OuA})i$5U@D{KE`5-P$oyn6mhr=2A?71 zFvMII3*!qhmXMDz*7DB34ZJM+rq#{B{<*tQ8DhdyPV?UxQ${M(B=Nn+4z`X`LsbnWSn&ps&UGx8jbLPW@kiw7f8g zv@jY`TsbS9U{9f5}b64;}oG&!QPQ_4n(=)5q~V4on%mw0vvpo6%~s!`&Zl-PupOVepq5dM2m?9Id; zN9ryZeFLog%!5t4<~@BB_f)&NdB0wriqU-T56BG%YE~pe)If#OM+G61Rf$L&ML?63 zG=h-Ep;4%%@)||5yGF@m3H=-$;|0=$Zx%zSOIt2NHbaq1z=LZg={Fg_n^thW;)TIk zgu20|_agO2xhQ)La}7P4rmRL1L;s~ZVo)bohbf7LGEj9D>e%eTNcPtl0)nclkRzvR zAP7oPQGo=Zog%c|BYrnAaR{1QpHN}5G*wn^+172!R#9&+-KDJ z`h-SoJAP^p+0-HYQtOcSYwT|B$lG?-VMzZQn?A(PwEcoQTTVZCqHNM4)xO(jj8CH1 zfsnwR;j13+uWGnotKD+%)5-lhlBrZuMCH;|4p?GNl17*rmbSidzJE9K{maJig%+BYc6nAl z=hiNGdbMop4B4*w*uwlfP1g=jcUi5v3_?(-P}?BrI6m%df)Mn#ro))OHQjGb=lEOG z{ePh8+OfHSgJMiES1e#L#X_-w%jDAqJdQxX=CIg&E|1A!^O+c%&1KWMOg5LsX0YgD z0f$BxqI?#{@hZSH|W@30_=Ug;_Y#+>>;SI@4%IP8&~#T*mr)>v(PVk3e6;JlcRM6e1`(isnfm% z$2vHmB2n~J6;h+=qq-0mtLm$@3y;FaioVPCjHa-h*rM>&wT`Bh2czEUpA zMHS9c=qqK@Fgi_%;QuqY{4?*%(FuG?eRDYDqsiH>g&#A#!=9T@)8BZ?)E((Rz5Z#I z_iF1GAEul5t=WAiVc8iBDJ2h7^?Tje?C%(kn%8bI4jo^Uq57r4FfoHWY|@h^=3bd! z@w`m^$9tWNiPM_b9hu!_Tza+oiM_@KvsZ6< zd_QJameES5TbBN*3z*jQX1MT2s9G)v7H~dildo&)4fm zU4MAcSCua8<0~Fxg>{@~H-!y-rx<)8yjXpqRW-`!j(IM}e&W1K!S&IPBIxHPI!#i0 zbS^!D`=loEz^SCJ^oxDpI{Iw;SXz70zv$$OA;BuA($lU{v}?MzOflNGbHm#PxIf?{NFas z+i@C$Nn@aVI>um&_*{X2BVh6wVpPcHGwCRoCT2qi7s}y^SRy8mMHgXg23IJg^8`FD zjmr@Uc{on%OuIsy20t`nMnF-Bx_;SAL(KJ~y^n*NL))Q2EZkC~zzzy;Y05VN=l~xR z;O`U?7d=rVi#H7x38LcSVH{s1H4Sobbufd`Xb5i-V@=ypPIP=+JNoJlQJNx4uq06` z6A4ZIM6%>~$@pK2PR}xG9SmXFEZUufjLPh@?TsI@&lGk)F~4hXwf1%u!RhPBZ?gq-fTt70jcq-}4{KOIaCF z-}t9e!yy=lhGG~EL)mop2qR653n7@|^54$ipK0YspVJB@2mW|_)?mi_@rd8UI2Y9e zvDTy0KaRBDHR8;$h%M`}jl3Cq92P~v|k^xB9`OJ+4UY>B#RksWSbNwq$-HBK_EJ1V*VVBPb}4`qqQ zhwWBP>Jm&cx#7;;7GiU%rrW{BV~Q{@w&4=wy z?hhgD(J7o~U9FxesCr$k!A^A@X})vEa@SEC6CPZxO0KZD0v^PKIzEin)V#I%sM*wj zTPhohTJzXdn_Fsjz0bGzm_GZ78}){a;P`RY&HU$wtgm{_JD};=J-O0gefRzAX(tP8 zWJE?Q-MIIL=bEyzflE&(J+od?D8BcwYo6UVlVVyx%jw zsann>iRNqcj)=o_hg1+x?zXeDUt;ut8+>T+l_cwx%k5P*o_)o=yyed7ZUp4ZD5@26bkF2BX8ANJ9|F9csuTPVR7)F4Xm^?P#vLuLI-%IEjw{yn+> zZIinlaxn!=4ui!JGMQo~N5tT=MQjG0%fW;gpNXP0l+O~E2>+hQ1s{u7f9q1exn0gk%@eCjmiQEIZn7p4J% zocu(|rb9#$sVG$w_&CWaQ}<|DsuA#a3XT$)h6H&81_y=&1uG$y4Mbb`T?n=CC@7rq za-Y~Yxa`k^*cry+p}0fra;w}SrX&9zgc?L%Ppp56yeMmbh+y|=W63@+$hCt*EIK}} z-6i%N5UU}hndE9TlXzMYy+*#qqF)Nn4J$G^B-COO?K>Jj4KhHd&g=loLV}deFp9of zyC7)>cwm#Hs;}Nbp0u85cR7OV(y3T!4rpKaJ5k@NttJ0RxDcSxP!#LvBjcbn8mG-i z_MgLQCgI0@hXlCqkf27$Bp@I|Ph`Z>I&p`xt7_|T&7`^u)>nMC1x(}BY&P|!+6$?7 zFV0$h-l_Q2hsxu3>#vkvpTxG&?c;Tud-_m6?OOYo5u@cHO<;Dqnafy-=loX4i4K<^vA3=)av|FzLhNUO87E4?C?J=}8$@k!=v{ ze2CsMC8nU&aAnuS!*ZA#H;Kz7k$23*rB_#^5RV1)dv^Zq-9xKS1qEQvCZKB;^)q6ZW_G6q^ zv(){`6s-;7QrpScbV10hlbXjD1*69LTd$= z>=9R5&Ac#uU#atYuJ$d$s+W2`d6OH)lZ(d~PCLIZvgVoo%JU;LulVe$8`)a@M7q_Y zzdbn043Sa2Z+eGyOJB%(I&7gmB%cr&TzqN}|>`P>qhi8XR@2M@g{+xf{ zdPIoBi&3X-C?qTHKCM2*?|hbaS9R75d|&s*F;lx8tF}Yapwy!yHuo7)8JzL(=89u0 z-|ZxdD}I2cKWxkFfK@f%?p6WuJ}}$uaa(Z+r7)`RfLe? zOAP7*2UyQoY*W{(AHrUj^d%_Z*z^^r$NL?aYv#W$CxpMCA-c=WLo*+p+^qifP0{nA zA$BUJu^}n8#;+sLQ9~_tLs~7D$BnV;^IF|^b^1qyv)CZdU6uNIZ1L;vTlD6xSw3dd zvT@Gvh<)!Rmo7V}*%9dj<<^5Bt=FO4rslFXko zm$m(AfE6 z4pAokGq=B*7MXQ**)Un@{``ztt?4Poqf&>Aby(<9;={J!Tx;}4*2r@YtgMjT z_qwSTBm?KFyVqVhU2Q(-d_L=Xe0s6{{r!ZG@0Tv$!@PYWa>tAz#Wt%fa#}}OkAJws zzd`jiaJU*iqax5X??t26jn_igkjeAH33>PUEC1O4dW4N^`i2!{xo0#~@4uhLl3~|v zj_=r^{-D6;MEC1o9!2l*@|^0pE_2Hj!Jveb^IGlc2e!?hv?pO^$w1>u7n_@3%5x8n z&NqJ__%!TPubDLW*E4(EIGr=VeO!-CU8~ca4D0z#=W>g_;*QeGt!<7{XmgZU{kQ)A zmzb*G`v157|E>Rj>;Hd?{%>E-iP&7afXhcQv5>>#(dZ(KCZN+WjKdQM_$Y@)Ui@}GR9fS;)fG%VR_(BX{&UJ=M+Lm*sC`~M63F)XEGNBElEFdMNkY+RHa2%Xc|=(Z5^2xf9S# zf-{o`E2lfSOe=Wi>>AsD+m-bO;jEOE zMEBP^`Z1E~l9`*cG4ifOE3tcF&A?xY^JjO!_q*;4Uf;C#)Xfr>>v>&4G~f2n z(9<1zix>q^5rGD_9eNkztT*J6J@w`~c&I`!eBxqWNRf`vC*Pkz? z&c7G4rFne%8Uo4{kNiV8Z{MnbyG7T$*VUc5d&xW92-#PjJ>PHc%sxfSi)Wv@1P*@+ zu37$M8dbUK$VqVs4RfdIuYE=wflvIQ7Vz!iyEY&uPd;ufg0nbW}n zF_}yzi!TskOjs?G&J@sj3{)&+^7srU8~gb?FJAP&^v=t@U)@>P75F;^$#@cRv?xaS zO@LRv$*wPSD7I(7hgrKv@$cJZr}5W!+1aVU{}CW;g#^KjJTL zv$H}i*P{ocr3`OOxMBDakeE2?LA`>JnRu-iKsvkm>a|JB@k=FO73*1V;! zKa80ED$aQStiE@rkGv-PJU-&otPMJWvpho@_a%0Jn*KPrWay_5$#8=4C!-1BFMHak z%1*5ud?aRf}`LlPuO<#ZE@Lh~Hc|qla z2;EQPH+zq|l)w1Wx<`VM)TBM3{D(tjJ(gVUeU(BAuUe+1^|boSiC4XH>)X9*Ke)+$ zzWr{p2G(oSEj0aPT2vvwXzj%dAK)w8pE4}048(rNp+Jkucykyra>M^2*EL^{mPBldQ1 zUpa*KL2Hl3!Lk~5y7>W6s5L3@^Z0}PPhLqK=64~tF;dmIe1PXfO(gA9SZ(anEYxVZ z0fq>m5YrC;5w*6P-SUAOp&FkH_xnR5jj$eEhBMA{rRzqI0FuT!s@3#L>~DXmwv z-}~k0x%Ee@mXe1YdePN}kb5{dg=#k8%B8d(w+wd_^PH;Gfccj*lPah}5B2^oQ$MCn z#@;VG7nYM|_c}LRDr{oO##pU=FD5&rbGsDVeGZtDlNH_gkG9|ap8m>B)&ER|^?UmN zp8o%~>E90NFoB3B;G=voSBQzZA{vTuxpXmKgwdEZCMKZsF`*C@@c2RzO~B%am~_&a$A1$wDL ztcF90aF0KC2!O1zC_KDt9-7nU5HN-?Y-aaPW4k|h2&lq`+J}3zed6UFf@UJO&`e~k zeCe+X))U6BdlNI+^eSn}7}3T>868)XsKd8-OA}R>11S=0l@fjt_3_7;hI>FbgfUSr zs(6Wbgpno#USi7V>R+wzC#&)SdaYX?ZaXz@!j7oVlpYqzZ&%-)q;c7sJO7E#OaA31 zbie-Ox~_w=XzyS7-6#*czT<F4wl^v$Q(N%60ZE$<#Sb>ay6lHdDD#~r&?E}W;g z$G6PcVQ^IH9Oj|d13w$%tMc!y{SR=UJ?d6i-g`vOTAwPW;L8e&@_r?u4gR4WK?{vU*=A!Ruz>l`wn&gNJ}oY{uO)_v<+ z`s4Q1JQV+|BmOavtgNp;PDuA9u1@M zFigl1aoH#;W{CM*ftbU@#3;sNqZ}TODP*!(EL^vCHl*8ht0|9xVk|xn6Ny;@wg5wg z43xnZF-0sUkHw{P@SQnIr2zFRt}hfW)}uPUKmSmJ{DX(^Be<0Gl9q2?_v!{UpdnBG zM>a?$02C56bKGV4l}h*>tXTL082;hhw(nqd^2G)tch>-^udAQEyQ{scn+N8}@ZfrQ z(Ae4lpqof*M?5!oNt0glIu}s=;?AWh&oPo!W|o;sg5f4D&$G9#9bH3i?bCl@x%$C6 zQv)0N*lCja_XhN|I{zqgcHp**him@`6J4~*DK9&ev24^rAheMd+xD_rFO-&7OUt%K z&VDlGi~eM*_`+#<+{3nk7XpqpvNd##>JlYwBY*m?t7LVn^ur|Yq7`1f>UuB!%tO@p)J_&RPyP* z{pcUg1CZ(4}++^w765SFlNUDjRc-+JfaJ=f7*?$#hIth+h$!^(LT z?3pf0)YDsTU`Nx7x2Nj{+`X|@JZ9bKCEJ3yU(O!vxp>N6+l2?zhiB$bs5_$bNB=4s z-{xFg-I~;mwcUcKBX$+Nvmemyb%u%esS)Sb98$0;k&gS?nOUssyO<1e4VncSyt087Xz-8}E zhdp~V5mVdX!9_eq1stw7OVtS>U|&yN{3PRiBpdajN-(QQPZw+w`@k>CPG8 zXJlK^EymEqgIV9uKh+_+$4%EGTimBuJS7ylZFkd}Xf%I*rFW+I#Ks5y*(*P3*{&_v zJ)oFuShhZAS+V0{pGz+B`-C4`SFCh#9v-ImqUU9uP$%O75z7arE@ecl+s55PjyN}Y z&PapG2i_H!=bE#-TzKc#H@r`JFw5eSdO)9w*4`O9t|5c#`ji5}F;4Q-Q0FkC<+8IY zCf3w0uf1@6*o(aj1)09maj#tIht9jax_8$3LZ-z3qN%vg-mPZdqI~9KKmBXt>g>1q zPt|pPwN7`D_Uq^4x6J?SaXH1af^ij5KiU*sbbLVLfKfZl`X+8Wb+UM4?141f?jv`j z+qYahXRQ~pzW1s85%0CGzngEA@ZqhXWV83ZJ|%~3Dq>vT`kCm64t5K=xw&G>*lZUS z;)jJ6xtpr3ZwvO10efQ|9P*=19&W4}A1W(Ml-Y$ZJa7wa-kaqU7CMnfd$Bk?a`LeC zwaGPa+)gKEk_S}&5pLpLZQoBCNpd@Fuc8)Ov-`!FeIWs@;*~@7Er+Budi}91&i|eH zsbNPxO|c)<=ZW7DwXPlsE)yMyMKf!=22RN*AHBL+{X(i{vdy)3z0AallQ|hjLSW~f6uuWD@%(c?UthclJ6Q9?66*9^?R{`F9{MD@mjDX|)UBbWARS$CSh!@Z)_{fk+0KQ*5*o_BUNnhqaO zH}C^Pl`x~rrjMD0jR-PoWcb(*HIsXuEssA_nFIDbW7}N+Ode>hTRvLV;o$5;QyZ-7 zn(9MZbVF{9%l1iJJIZNVx=r!*l7Vri?~@O#U%Yv@U{hG%h>NCDw?$rSzdai!dggg^5ILRK(@-1ROp`%oEc&42FQu5DG**F2-XsQMQO75_0K6o|w;J2*hj# zjX~pxrc&U4w{}zh zk@I0N~5yRN)`_Q~aDQatFqz0m3Ezp<8lN%=4Zo4H zN!7F4Vb2xKa}V8iYN`=#E_gw;8ul*d#pBT@KHtmmpE&h=engZp@ovEYXcFsN6F_FeY}5;o=2NM(^k5>3ZPQUw-+4$6_C3wlr*c*B4HVzeENx48e;AY@6hkMB|XMZ0x zjZG7i-mH2f((!yj9`i|0-Dg4dhKIg4&a6E;^WIS8$vsO|pZBW_#xA>=+`u9l&aFU~ zF-CXU)kM^b?QYgB)OKqmYsP!>tWPD^BY7sw=CtEykVW(Aol72(z0LDWn!G>c*=C&! z+w?5d|9aKcuYHd_9ZNpD-*oHT&3bfZ;o|76KDS90(?4d|jk@t_zV6G<<4$dqU6XWE zo6y(N_3-A5fscFNBwpq=-ZVE5e7e53|9}V5`@*dcoQ#4!8q9fJ1SoMmf zttB_^99{R-DQ{58{fSn5yK5R0l6UR;+-j#TgbS-z?yjONv?6ue@+q{|vifa}fpzem z%a`pwlpd(|nWHnRp)vTyqO8JW8efYl7T!01QAc7(sS!KWC}W~Um#15Ak1RGxS@yn1 z!Cv=OZz4mzHuSFOncc;IOKAPLg=_Vj!-FzX>-&(WG(JsVm7I`qa@FI2`X!a>;9Tl^ z(oT}|e2WEhznr=p{a{Gc7{}3;fd`M}cF&wK)y?!_^*gc~iG44ttCnB-F@xQdE8b0+ zUt{MdsCGqdoT+uF3p$$L8! z^iMm*Tsiw#mMz})JZC?4_3`<%cWMb*J!*He&8sZm93H=7?S)UvbF@Cp@RtS#fA!{h z^){GmI{ewt?y`n?8%}-}8A!`EHoISbF>%JL=a)U-e&)?{EnYbJ+ML|;fp)#E6A86+SwXRR-(9pv+!&8rBZFGA<>NV}2 z^}G|*H_f@zmSp6=GMErsyXcQn-A!*V-zPn6Vzcf%v>ozJKmU(uo@w)2$ve{QTNmGX zc7A%F5yuC=HobQ*`K9iIWo%7`U+l0!;wpnvLseae*;UvX+TJnj<#VfPCDy2Cjo!IZ zHhyCv*N?s9I_X&mKMonbE57GE%7bb%=TFwp6Sdi{7Y0mMGoM@OcIMG)cAoo6I}Y~5 zZePW&2tN(yhBfQ5RU5OfXRZ1~_vtbz@WG|ptZsw$OymiGM$B%SUzd-Na+|#5q?YOMR@tO+HX{_M-TglJYCePGe@AP6$%WOi- zP41@QmEBa0p80y5+!Sd=d#UD`7n(A}nw;O@Q0&IKZ{v|T-{DYY&uPP@Is4gl``+c2 zZe+a5$+p}&K7M!YRp5Ns!pk7frFcNbn;O(7tN*r<#k;hYvF{%qaxm`0j+zg5zAPCZ z6n-IUVzFvYq&ok_a;MklsXOw=@8}nHiQdC5Clb2Vt}S?dzs_*G z`m`PzCB&N0b&_wsG~1cc{jRrh??oT~waL%IE}sdQdboJ)zM_*a4hEK(+6{3pd8cZ7 zqo=?@_i2xWz8lW0pxYIT>ir0DRN98EJC50}jPspWF4@U)-mvnq=-|7C#FNdeFVZPF z9533KA+oZ?51va)3RZ`$epZ+Gcx}O3|J8F`o5N-u7*Y9Tcx3gn3uYY)7{7Vq_bAdov?q_rX7Q+Nw>yfwDhqV zvy6^e7?)jGGkNqMn*;mooO|23pBJy7roei{I1c_q6$m)9=51+CW#vZxH+& z1pfxXzd`W-0T7HkGq@~1Q_Ns;F-!>mPeZ`qqdX4E=b#uvEWkJzpU38k*&;Se%oeiP zG%m(q(S#zph{a_IQ5s$TGF@lD3pz781zhkGbvkT!4_6wKi@CeHy1Aq7Oz7a~6c|rb z{cdx{U-52q|Lfij9e39Ndm6`c5SzjBU~*`Tww-ES;Cew9%|x0M>jm%ZE89;py}o{j zApe&2f{F4^%7_|2aP+5Zg-6SD`X@R+&U0Nw2-!2)@er{-FW1L@DR=pv@@Kj}lUqhx zPwL{Vsa^N%#=)l=)3!-OZlV(>)B5*n$Y?rx@C_*GJwAsq9rb{8?Mxg%!|SjLf0k9B8PelDE!N#gU_N%TfvcL@7asnD?H zy2a2Dgs|72y1n1Qjm%F;AFffe`xfu`#-o{iKI{wIf@z(s$4+j$rC-7wIZU;Xo_n^i zPG+%tx!=)Y$d=&zK^NY>=*^onqqVwBu;EwM3is&UqBPbxE9vBLX0o()Y6U)PjgGdjU&3S1K!ve?IYlrt&F=%dq!S?P1iN3JYA z;#-ioqKo><@U8!7t?+xw{GKu$KINi(>EyqC%Czr{B{k-xw^Uk-15fqrY&kt)suZUxc(`YwzMu&eLR)>qqFvV#Xsln!0A=6D9(X@>UPBWwIcrn(EJt6}A%pV`T*4`t@B z+UY(`%VG1xy(`D9su=83yDg<=-mMuQ{FW5l%#f<`R=(RA;B@t@`wqcY{!>-|^f8O} zRvV`5JO7n5d%kXU+Kh>HV=mbZo88SP_fx2!FYO(+(`Gi36+0@Hv7{Np4sfY*XU>zbLjjHjCZW+ z7ygH+MQiWQzDcevoc7kU8zW781RZfV?ThMJA@9}f+#61BEzKXMizgysA+MT3qPvML z=@YVUXfCAs{)**|O1&A}V)wx>bIasS-4Cnpn2nim|3{X0tMS&|h>{%}uYLXK?=zv+`qeSY3af}@@>1(rUBjHOyi0PMpmHEFS+I7nL)BSQ zP=4j2mt79}59qN{OGw&~SQejBLmxJ7%;z~eY+KT!FcSMpZS*^nSJ|`6Gi;6C>PB7n z4ve5&U$gn)_Q5-Q+$6jrseW0ue9Fp6@gvQQ!`#UpyT)s+n<&}8{MOQmi@s843vJTkM~g0QVl*X&x3o}rG=N1W$h9cyngF|+V5S>E4M=J%9A z{_CeqyX6(&e@rRhqI`ycMibHK0W6o`miMU4Y}IPFiVNb&jkC(;1=E=>x|HbPb=n7-TwLF;Tf6>Y zx8iqKRI;{dZ2bC%Yy894vp*L2`Emza>~t`)iyd&YI&02;_hnOyvDbYH?%(7cKC{=( zt|@V+SKgqIj1S>t`|Vo|;x`%mv1Mqf?t$fJELIlYR9RfIabD~C0;8`>B@&m0dDV6r zEXVA_Y9|GzC55+l&U)cuH=5>hEGN8a->)(5FF{5e_9ZSC3^1sTr%|Cepc=-RQtw}Jvlm$J|`s%o<@4|ZrVYi zYlX3)XV7hSX?xoBwW8D?>t^kU z?&`GK-TyCH-rrN^_mn~Y>!(b+)C%@v?R4CRT1 zC|gWpi^UuPkI59VX*?z-K0RR^j`}kX0TU&1_=uJd;-xuqG|J}Vl zo|*%&1^`U}5HSEC5&$qB01yWNkO2S^0RYJWfK&j$L;yerz(1J=Uyuc}006TA0CNC< z|G5q30RZ6Jv-1G}xd4C#0Dy%604D%|D*(U^z~{6e82k_E*49?0;>=c@`@s*m4S>l& z04R`eXT{kC07}L%1R$V=3gD(cgaESglRD8!OHx08o+cii@7`qL<>r z0sv};B>+@4E5)7Oup%3n*uumPCJr#6f)+D?z<-tzip0Fc7#RZqGeC!lHcYf&(g(oL ziOY|^9cW$nqYg|AVZsGK*-LE)2mWB+$q#1m2Nq0hI{Ee1|Lxwyd-+#7l#2XwdQ(r) zoA#nOfh08ne!BfXqhsMXlE%d**bCxgV-w?|Wziz3hGMkfe-I1+ejW>aF%tla5MTm) zF(Wus4LcbpaNel^0ACIUYM=#AqNf(%C!11LH6EXm1DhY}Fm}mh$_#o&WT03Zlxp}^k}0I2>10L(NkZQOmlJ^X?r zd|lmb@w(w>7u5tY(V{q6L@ZBW_}!!APl}L=WU#?dg;^*BKmY((D`+ABptpi10oVlj zLGF-Wr2`Empsa@i0G!?UVS~W?z8C_)OsHw(e+z)LF{%mRZZ+Onv@Z(qrL zqQxRw?;o-e+pIO+B7f44 zSybDzMDirONRdMuCs4Lf&r;g5=nCUwdC_t9QV~xgh_aW8WO|+U6x3-@Zng@E!kRo4 zbUc3F7lSGLk1^3w8SM1vgoOC`7&ulTV|EH=;MorNV(I|QBmlLZJ(sBU>{*Vp zr2%IHUaJ~>^&XCVSWj|{fG3EtRMf-m&_E>(&6Td={xkpp7x-duqUq%Vsv02|A8G_* zE}+b8ZEYpx0?H12a|LBshoMM1;f$yCrY5CB|&FGd&(sH%t#pdv&aKm}SlfU2zx z6CHRD7n&aY0rns{MQV?Ek#v9=If*BXmwGA6Q`*a${G<}XHuSmn2}R}FGd*) zW)i{MMoXaMZUxW4WGtYV`T>A9g9zJV2>DhS3n)8C zK+cYu;sQ2-(2;+9AY>|@P6lJu{6R*TKUlNT9~^7+2M^o=+PF|13lR7Wyr~5EAj&^@ z5M&whNcx6H{Q2KDT{#r-j*Q~P3B-{xiq7oUp)>6}bSD0voB-gR*J6 zFbJUP{N%}#Co@lGo;*G(FD^aoE_ZFsAHRHVYraPaLX9tA&|kU!uzUT+jfLN~6a8EN z!y`g<>u)^?D}4>!z4sO7B40#z_ydi66^$(3Sm<6~y0x(Cy1n$+w(twot>3~$zlASd zf7o5V;i_V;%~vulc@T^Giz)yNiq1bsP`-gK=CQ^!N4+?>CYdyx&OK4U*8COLoD6IkkST z#d(*1;Z@PSAD8iyxIBQM@=JZemU_<=0c9Q!`-KKyGrdCjz=K|~+raZ$6q5Iq(2J5a zci{^P%uET-`tqxyyRG{dRqOJl+Y7kz5*bWs-St|V_3B>;t6%*7leML$$`A&FtXzCG zKRS%NvNxQW0t1wSFRFG6B{3He(fDS-mo z7+wC_4}P!`{`*Dj>vTDvjLYs`GAwnDHX*p6 zF0^L8y1DeNpZ)p!ErtI+xX_xpw7H~y_UG?i`pw_`t3U>zj|YRCG+{_|Y$@^J=Uow; z7h5e<_}Q0Qt@maK82(9QcY!}%`U3xi^uq{QQwTP|$1L*?z{)h7W ze5=*^WBDDj6}w+4cpUCg~Uu?Dh0fTg5?gH<47ct}!cAx;J`@5~yd;je40yf2MgZ|!u?jNcLS+1Uq2e`a`n;;~pmsa+N*={_PcN=L@#={|(TUBi? z8NLOyzY1unmEhYSpBL!)W}sCQ&=2B6t?uT@V4o3vB}DW*&^*cp^J|;kjVHTQj$r(y z%F92h1NZ)K0-fJZehcV)@4xs%mS)KO)Ibkkd#ZKw#ll|HOmjpDwpr^A}q0{a*IbPZsfW<$aptfBJu{(;Sm}ve*pKJx13}qS4wc z$LT=bjr)g_u_|;rP-*7f)K+F{eKSsma~MN69D^fWuHI#GSRcj7P^k4AYnu%pq20ug z2Zl#h75xjX)`c&&TG*Jr|7+ltzm8L;zxJMCn7{rN+5fh99>-Z;77#9I=uc%qgHeJ* z;Q8<9{pJ!_>Mylg7r-FF@W0V&UHD6_)`h>^YQbP}0sQ?dtv_%5daKp?rfj``qs4)t zN;a$Ck_{~Qmhh|hu@|RZ`TMZU!RFO^|I)93anPO}>+d^8`6r83giZ2Xj+F9})f@aga^kon8V zIQFxj{p{a{J?=tvZ^(87Bl!MIdc@B^Yi%z5CRrbURnR7=x^SuW=djTcihiNhx&Rb| zo&VqqKxgayFJk6+ul9==^VbZHVACXtMa=#$OZbVM0&wxYFSKaJ01Z#z z7tqkJ^mRJ!9t@91-SI)b+a2_ee)m1Rr)^G=WWSa4huLH>*Uv^@Y_%@`#%6MuXOEuU z`>3J79T*&cxfqq>Ie;@a(x?U+G(u7r1?_`xJe3W@OTj&~B=b9Vf97}W{><+fr}-Tl z2J<^M4CeQL=L`6qw$Vi7*zRI>)cgJ1&ush)e&gT%vf0vpK8=6TZ@lxx|3{krd>X&#H{Sk|Q7k^6 z#=jIc{`=DGJ2(Ct{)B$nZ~Qx7{!jlWzxAJYLciiSKKo1m7hQ2|o--Q%B`B%7$c8Xe z_DStAi}X*V3HWv|FY1XBlkHbqt@r+yuaGPf%=nzWRv+HUu?DZz?@pG)_-!b)jGhApw(*q-HWZ( z4d4Jm`eLi~P5B*L-#Kaj?_X@SQYru6UTn4gMu*G)!;7uf_aUuYt=2!f*lK-M@b-8A z$1k-0@ukhBZ?=B+pI>PGf}nS$)J6GT>(9wmcGzmY_b>kY|1}x5TJQbh;P(?)z=3+G zc)xm~)vD`K&}c8B3EgU`A78ri!KEuJ!>n($V%S2}3$^l-Y&XTPFIPXfBn9-V@pj&K ze?Lfu8pXpm*i*YV_mdniR8)?}d&PW&FQSEiKTgUAS&mk`w;Ov;4|KXdEb#J!ODlU> zuH*iJ=Z<+Y>Xd>6evg61?BQH}@%$*XS|5p7dk z$$lDhQhi564(jPe7WU|+X$ot_EaZJwsDBHdL06lrg%<8b9vFZ|RsPN}>4!KE{x6i)L- zWocLEd6o+=+*kA$R>=C+*5fV3>!gYN-+XZCO3?SzE~|6Q1l2gBgr7R)tST&yiv0sD zGRwi7Wueey+PSP(n3oETtZ&MyeA&?I`35wlL0ST4fd(9pIU5TGVQ%yXtyJY`_Drh1 z!uXKIRKYWYWtgww7^`p2ZdDkZVM_-4Mc!{%Mz#kmqchhQ}GkuL^`^>8=5LY~`|1DoH%W`drU7=}zum0DehDh3aMecPm&%Ba_7cefTY5bmcug&b zO+A{7_+vU5srI$-gyEGJ2_cYJoLn8VeeV7NR#)RB)jS zKsiqOhYVwNSZhO`p;rIGXW zwh0)tN_5I3T4|4pEO>?9d~j(cCmg7@#RZMfZB9Z$P%qm4q@GPwDw>JZBFSx^2fk>B z?NR}dOh{jE*`4CFJ`6-f0^?d93XEHPD-d6Mq0s2`i5KQ7kNfh@2e&xxdi9Dq)uxFh;~ zR`to5GtBl2DFy|^E`Wdz1%ZC!szc-YaM99aLm^sIuFd{1E3{dHOgYgEu?Vk>4AU$D zLtj)EC`M63Us4!v-w-eSSHEm{;WrI0Tv+UiWZOuSQhZH5Z~U+S&p#sG__zPX9}sVZ z5rsT@&Ajm&jSYfV9{=(c5uyrRC3e^U0UH8jXKo#HTY8ioX;tPEy;>2->Qi$0`5W!^ zR4Rz>ChGAb)Z>*a()N~ynB*R$VdB5?d2PfRPyvY<9hBv`Sec*Cvto|y(R2AEuptce z-s9s`=PIJlAQRWpgCsA?tqF5FT4rnZon_2QxeBgp2tDtU=|)~(F;$2ud{3V|kB1Yz zU1mA-a8xu~v9-~&@!;OpCl7e2;m5$#!L`5(+-m}o8MH4mR8K{il1RON&0Kyr%Z4OQ zRF66m25yLO>CLL6$YtVmN?nQ)FvFT#U$5C zzl!_i@I;jdNujbdY@-v&7^4}L6skDLj?+1r-C#&SClAF`P%nIY6(Vi3R7Q&;>UY*7 z5!cl@VxY%)Hb$sn56#Ycz>A5b}F_T%u@zV z(rdKr8S8;D@2Ix7N=*%R9T&9R%{pvvlh#S^}$-hQYPg>-?Pk2D}A zmuN<1lX5&Md)V-(xab~%kE)m5JJBF6W8Qtq(=cClGFHm0pAYxc3pQp-FZ@}(tRWjT zP#>p>1n?zV5Xj5f9ruFjDB79&rgiL8$y^R8yV@qzVzoWahDrZqwLQqvvYYGQog}&L zj&(jt5Q>u)tL-OD&c(_VpyGI>x zFF|xDEN}%R8JYeFvyvinN>KmF*!|0 z!y+Y@cJE&^33WbGLVT(-rz(tsM)_U*KQps>9avtq?j<3xnVFdnINJIjyk|@wziCV# z_p{>^_5jsidvdiZlza-S9&KbZQwmNFD7S0;yQE1Q%$f4nWTT_|PC{Ada|Kk~|)_E2Bvfms<_ z$$nBEOm-2NH(%)8xG0l2U0j|YA+E1X4!a1b*LhY*v|&M}AB+fr-?17bx$c))exl${ zz;5#>89>{?Hd6YNZoB7Q+oy5bH zZ4My6pA?4xL1j6_-ejy|wY9d{#d~#>#Omt&ASn(>Lnu$ix<_#&ivI78;#b`w`Kj(L zEo`b{n3cUe9$mFY`$3YcXr2R4`ti6J#c6je6b40*4WSse(48WuXR>FRMy^iA`*}RjT{M1G#L)+r=99G4`Ci=D^T)|vV!Ea+rgYB+kv0G{ZEz<& z^nkDqG}#@+>HH{8<9(gKRqZQAv=s43cg5Mk{t4a&IJ2!WWgEz72SxmxZ4y#hz3`L< z;*gP{qv$0EAE^5pzCD!<2WlY8nr43_;nDiGdUZp2?nU*O-Cm z=G@})tQzDAUZ}k+N6$J}$4Rb-x+uubb7SG*$3IneLJAeOzm>97hEr zQx&ErVnlQ5=>aT3NkM=_n9t+*NH5tE>L4!EuGXmho^)eiGc@8;a%5{yfB(UqB@7W|6wQx&uD_p*F43K!f_qL0gL zob>0$2jlOSy`_bvYfH;yZ#8jMI9{8Sx?jTPm888-RTSr=z~s{Kpv;YH{%)%NM6Yh$ z_|aK~R5VJ)#jcLtc-v&B#TpV}z%0r62BC&0#Ot{WpFSKFAv_~aQk|bw(9#hPN{RAr zAY~Jdw^`*ER#LRhsM~Ixg1+1STzS>W>Y~^SJ<0~UM-)LWWqII`w#Ia`I73n~xSe;M z&Kp3w?p-$kVlEvYMt(=m*bC-%&Ia6e-q)Z7E9>MIGB6uK1QYR`dYr0QU0b*|i}M~Z z^u{HvXoJ5|e1b2$fC+^VV#QeZlf6U_0@}YEL5C-Nu~~<_H7mbiRF+>dD$Cj?PNPr8 zzK-(f&%W{#gkBhx#S(!#>^?$W~24c_l5j`sg8<72tQ{vgy7?o(LK zG;2687}V{c$Uq+@ecc5O&N4l6JK>IzHf)s$Q&J=n816-9kJCZ1BDHavi?KnkjD_ow zJ{EjL{Pjl=Oc8v}whUXPxY!vkB@^r-p=F*;!ga(JV(*1DO!$`1bJ!)?HNdQO6dKjr z7)b3{9hjY%cd}v%FFJ?i_zKCn00+K>KKkSVi3ako$;QtAez~Xi;$b1aG|;&dOG0-^ z`Yy(miZuoC7Y*GT2Li_|li8!uX(1?nD^nb`=E5q@*ZBGD>)bS9OH3g6-FWtnbiSJv zx|e2VD-34fe6||{ot8;?V%5_5MBY%?4%RmXIhaWWAC|eOFcedS4bq$9!*)GwP146{ zU&~T4rQsB(Mvc4HeBfON(F5tx9E`%s^www-Ap@oH!g7>_^D9@EI$7jR!`={r_Xh6Z zr3Ei|ORy1C)-?AlA8t?f_L5hsZBWWp7~*I7@ILlNFr9KtzO8vr=OtY4%^XT9&MEvR zJO8|D^*tCp1yE2g0OWF~ z(`f^}+j6e5dnXDV`f=Jn$nqkZkwAi?)B}noKoFvR&S-?90-_o9nTkmBeCGywDvF20 zXhwbe+W`PC6a}TdP=P;PM&jGBVd66`bQ-uvdvN~UQ42HX?1vehcu^_d06L}TM5sDa zeU~OR&#|2JtD)c-r}zf%txuC?n;$;O+4O!k*~ zE7K5Ib&kw|UgFv8)FjGmo>9-R;D;{AplxUdP37gDS`4SsgpF-yBV8U~Dw9GT=UKY1 z;0RJD*(CR8x1iW#cK%sI(dOY(oKCVkP#NRX(f9!kjx10foMdWZk>J^+>LYD)3y8`I zz!q$9yLA4B3l5S3DHb?F5=^2pRyZc;G)pIfU4kJ<3R`bh=``L&RKT3)JLhibix!ZC z9A(2};)Hy*BuvTlmXrC5Y&gKNGZJ1UAg-GJyqzvu%}-q5M_>jrGK)y94uDc`6rGRi zEiNpK3N?yf^%fVHWqRiqNX1a9y)`0nMvaP;sfKG~fmlOg^ZZeDXH)c!nFX=KWmd++ z?nsYdBYmmn)iUv5S~7HW#Er=xzVafi!_ha6-(g^BX(_}2o+=jj9qWqHf9S=!muq%f z0|{jLIvE=Z+KZE+9;~o{S!prPPQi*_c zQG1T_Ie@URlcfe^7Y5oEd$i@tyn6WX3@u8wM+ViRm*5pq1_`(U0j7lqS6IW_d>M|Cj!d|b|2oPa-eK;KR_ug9(_!= z9$fa=fLZ0iTn6J%s%hEa;kAqH9`U=#PD;ec7bClD(gR`VEeSkTuD}ns4^B9>B~y8l zr-tODvbR=h+=4$^mlSaft`^uEr%d8zOhjo%tFFojub#4I9KHCMW)CrUZDvBqN#6QL zG3-$q*urTHX3=3)pGE*?4v5gi_(h~9+NYAOlU;+fY?w|65To?+G8Rh$K#*WkHz+of znWepjU`s6FN*175Y;ehfUbq#^+Yp2rJsu9&fe*!+m0ONL>O$Rhp$q+C);}Z)p{zbH zr+h3E99eeu6C%Zm)xzpVbdtpYP!El(LS(`+t?ArZ0Y0UDfe(JP>b;_vset0n5ye-5 zI`p5o!_LN4ZzK3B^{kCXYz)SRCBRz?O%S_xwgroiI8}Ee&Wh!xK%K)>1Nve@51}V3 zlz=K+Mf6fS&1lp(yYrMmMUsICyP%?b_oPdkVAc%K&6(H_p*Sz@E4BU&!F&jH4dWg^ zSQ`uoqcjsM#|Jn-2BB4s>?aaj;A?^4<)iL&4uJSzb$7w@LEB?+5SehxE>{p6N+tTndU>v?D=uJeuT_#ok%8dd7)U{ zNx_$+^G?Z5)b@-lJ7A&Qf|wdi(@PC4OHRD$^Su-Oh)pWg#d#Vx#B41wkZ(Jw)sn1W zqQEy5v=51>Y^FXRi|l$4G%}a*O|@nmmLCMoM#h^1am3vgaC~8#Kh2uxPP%dR2uDd$tu(Uy(KdOO9MEZYtTwKWRGH*@FgG_xe++eu zWjME!KBbfz$H{Q0c5!Y(G>=_9%#LT7cu3#ONAb|9%Vt+8t6qR(O8g{?$%lsnqRIXw zkLj!ivbXI`(mwuhS^~I4ralE38|mOy5p(+U`82o%2H+6^>vpoGh7BmrPmE%uy_|sm3s4huGH^y zs*@FUKTAthW|RH_FQQ?R>dVeIVNCYt^n$oyZ0UG#Vl{NQZvifUhtZ!rseF#XI8+fy zLiSsf9A!m`l|ImWNva1bp`4zeWI2?GC@o_EH!V20xg*Bn8O~O-N?c*_Ch$@+pDEAd z_GDB%$I-46vtx2ya(&-zCz~qU0`t^jBbBa90gU&)-kt1=db;8oeS(BL{Eb>uSInlT zT8UQy#}o7gA@GxuxxdqP4Lv^6d7cb#V%`!l?Fwe<@Zh{FI(l3l;8YBAMb&}fW>!%i zz**v7h_%X9F&X2~+>GkSDduicAh4lO$9g!V@SqJfK;T-ba?O-IknlC#Kgd)U71Y2( z1OTM{@%`kF5Oj_t)<}dpLJcj)qsLYM0OP%%DS~8Vs}jeI)KB zs{vw=iXMx|S?-Mo)?-5&2d4?^G;x*BIJ_=62`b@o&9N(xy{3`-bbo+~Z0>%1bf4*P z*h8J_JRUyHnl2Xi1`sUHIPA+oYhZ0+ASrKs_WXMR(+Zs>U3kE zqFc+i7jE6SwY+p~Wo_-@@{b0K2Yb)AmNsvUAFl1+|K5$ic69JqU;FLbH`9}BeC!X> zG=(IsXsNrnu&{h%d2xB+_QH+jXjNT_u3f)&ZDIM^wd*t{^{hag3=D5sJyR;ZjZJ_| zU(vLI3+(6FWQ@r**fkwLJ;-%DK-bF)rUR((X4Kt2VscKhi8_dJkT?_G0;-4G31`Mj zl?)2i0f|yS`1A4%Fr4L-3WID+#hiKwC<+x1huJZjqPk?|=fIOf70GBaEaOyXlVW%> zSI0Rcs(32Blc4ob1i4#9BEP%7xODB>t)*KFH~Gcl!mXRPZ```IL_u)S$FHF3^`+a_ zZeG8+e2uWt+`kMX>cqq0Oh9P{tANrk_4*(i>DSrbUeec8!!_(5ZURFg6-vfMyn?|s z^MURd*r(b4{?O5axE@q-GTP0C1t#4m?+*2>8fNK!7qKt13aLhtbbl6Pria-Whhp3a z=s1{`ga#_&`oOa*f-T>cPWACr&$@BN!+>JNKP8NTYGziQZRaV>TuaAIpC}y+q^P>W zK`X?sK%7U*`AN4}?&r%Uzfg27T__KhbN?-dtDZrpLmfe!!c`Y5Vz^7oxSv9UsA)hszMMa(*iuCB3xz7;y z5f>`T3L^0n4#s8jaqketraDP#1E9z>LX!RQHUqGUBCd;7)%L%v&dg!oaz$kYmvJB@ zdn!JPlOafrc0X*dF9dW%6eB)&KHe)eLd41D*-7@(EZ2ql@m`kqHK!N)F)_;UK}35{ z2FwzR6F=kOaePupho-+->v*ZGw8X-QE6gt<{V z>CZ7$bMSE$qHUcH?j|X=u@xrF-Qqhh)al>dHX_-dUaCQh=Dn<9qY(mgl_6W4?146r z?5Q;4eQ6!lqfaRNsKAXW;uj1#;!d*?X+-5zN_FT|n94Z+FB)0ryVazbYAy5C>vdbF zMN%e5h=SjPm4HkWNooM8Hi7bfeVSB8aFc!6QkqpC?5FR2yfw?_mLeJI z6xk<=!(=>DZO_#Aw486O_ zXIQ3mh9aAB8jJ?v4fiL5Y4Fh}fAoZ5MB|VO%X#W%X(u0d&H0Xj)?swU(ZEEPIuEiFc)@m4WJy zvUHs50+v-Q7CMp=&i5FnNGdF+(D^4xQK~4Ol#nOcq@2r>y;<+iY&gIxRz0pLI#y?` zY9wXi^hEV3S()3si}x{noZpSNY`(pmz3seJ>#`lMn;q$V7@tJy0jLcpm2n!<{|HKr1!bm1lDaBPh5MYQlpz zyI{c|qN$x9i;EZ!w855dr<-EvqkwG2InSt_-_Tnsy;5kA;0e>lp3z3%wK>9!J)R9S zigwb0J|a2XQ*HT`^tx)9El#{A#pExPY?!Xoh>P8kwe#p=TH1Q{h)$-v2knbRw)3Skt}4j;HqxCAHR zv2TgX)BwhT42HM5fPbE@D91KZF&Kf$)DKz;&E=q)hY269N??;x-zH6P7V3oVld&rB zTFF6F*D`F)3EAPuNP2VW_Wa(prNOo3n3$#kfQvm{d#IvGdYER%l$9p@N~tEIwMj|o z8UPOTh;g=}{39{5YM(5afNl4LBRfzcD`!z*VPR$A`pUwxT3DQ0xH*U8UgXHaNTFa^ z_m=RSzD}U*@F_94{yd|P<3f^4QY~J?&d7}(X8QX{zLpM5R5WSi^F+qQWK_)kq{wKf zu8uWzm}AJNpZ74uw-1m6+T>p}Z`FcYyv2tv3^E7$=x!G09Aaeq2*Npc@tw{(qpDYt z#Gb9=9c?4_59>gs!o5kpmiG@_ouD88>}FGU_a?c)tnD;tK*)^;c*X5qE8ZG6QOQ0| zO1UvL*yFqr*Bm9@H{a4GM!G3qjUCSW%+?Dpqb@UZG0=MjeLMTp%=^GQ!N4v+ly^mK zCn=1Wmh)rxMA?5-iW@F`ud>6#W|AiN<5I(_wOz&|oTf2AZ6c9D^&{4c7%jw0Tqw`C zL#nm+xAFD3RzJ!1$rU6}-=|}ew8Y{07VniSzEP0hOWu3XA?^E=PY-qZWU{+~vABjF z>T)f|ozF?1x~nu*{pKo)s)wUW1~UU~)H*DTpc{PJ-O@*i$&D;COz*dKp2WjPl>epD z-0pLoufYr!v=(N_l{Mkj48PYuxEcZQcPGhkfGPKCY(0i!(STsUesZ{v{A^`hPJHC| zCwZ<@@ijVfcAc`tevl$nq_{ zzy8Xra_=BU5?`HfPKISN9{SDMZ(DjijQc*;?hSREg2y9UhTk0Ci;Cig$I|X@p6I;* z8|w+&n~!~(ctBQ{PZG+2VMc4mwX^`3)<8;Lr9)^aogQ86x*_qj)eG4o~i7X-ay7S8t=Z|7d%QE{sZ21Xq{_Hwt1$ zCn?>pBMZpAycZ*ksImN(E_C^*3|Ic<;r+x%EuE0?s&9=jf!+)J`B3|8{aKp4TDqV4 zOW;{PTu=MF{0)rWRTN%xycRym`o1K971Fr4yt2MO32GU+u)Oc6=9f9;(~|#W4 zW+82Fae}ac$qC}sz@~ztcq;E6r{=9Atp~WC;N!`@#vJ=V(Fa(T*7kK;ZkK*zC`*~_ z{0g4okeDWj-vhw=Y;svNe+8~3?$O}e@*9sAxgl(%2(l=j$3BSe=RuJ+Yf_p+xip#KIc~Nc44qF?;-qG~(){IKrKs6?!oDJhKCod& z<~h5Q3?ZRhO9DwR?Dvh5<6z77IM{XXR0k{@)Q`1X8AQPq#v>?9)2hr?DzHlYCm-gO zBhu`1I~8k!Eji3!vcj88-JLeK(Y+JNpd^K%+)~g)Agb*Yi>7%OsHBjb*fKpMX@rc# z7#T>1d2+aqou&kJ!6?_%H1Rb!Yv70wlp!XVLj$WbNN!Nv&rnXN{f^zUgmcQfzwTa^ zBMEa{YM9D7Kj%0`c#u6Ii=@A}ad1*ZGjv;%I?tTfXMD$lN>+yjQ^rD;2m2DGkdoQt zl}ZZdn>F?b8m_<8*$QWKC^Qsc?}X443>e;ehsj6ogR-WM3f^F190FgZ$=?MV%9Od= zX$P>$u>E)b$c1%WmJ?=3A|I4(3L~#Atn+s1xCu^H-!F9SOqDj^^t6`qM0)mx;c$Xc2qiz>a!ohjvUJ3d_~cWWl3^u zO02dxx#?~*aYx0137}c#h+DA%S2uo6epyYivM+S<#3uu$AF0#CfPw-Z#Rl(#N#QTd z19?rc^N)B8u9ajQ`^9K9$ZATybxR@bii`%znh!!6q#6&PIaGpWCNP|Dg)zf%D@$zZ zbfHZ-!AgiIuYqt2{Ed?%;9H23;00Dtd5Vxawe)dgR-j~oI=FDGHi-aIa^~QQlt3Rymt#C5$pi>qGfw{}QhVcXU zur*t`MUqPs=jTh6^yRSQckXaQUGP*J-C7b>nOg(-4nUu2ss**oI{m$mw<3gE88=;XsaLmd z_IF_51?|wOLF32&lD+hp<82pyW6T%bJ*sQb=qFH-8+(amU^MA zSx`-V1BdM`T=Z7yclh(I7EHGmrCzEGT3J4WaF91SA`SR{>t<1Sts0DajAwegvXD&E zVage4yrDr_*Mtuq9{+Ecl60-w9t>7&kTw${&<|xX0}}p5!Z_e_~)a7Z?sP|6WDFnz!XWj16Ow+iV>NH6`pe)q1Fw{zC zh8R%TSK=CqdQ*?m4(XoAtF&I7X|Ctb$Mm|g$|z;7AVQYL^g4m$MrT&kPp@P85lf`8 zDWOaGBqBgW*V!#OEy}cT?yAllYN|@-r}RpT+c4meOH8jN6yM!T^3ide1H;xXP-XEA zWsNf0Kqe+@|9M(&D0@oFVh8k*)U+#9fGYMmym-`diLd`+ZmLbct9RrGOI&|Nx_JL$sl$3X&+%1w%*L3i31V)ssjtrYyh z5TJ?@vDh4?$UNishl3zgbV}_xgfmk+bEc6qI;VX9eY$z-jK1&TW`KU_b?w(}=sEg0 z&Ie#gD^+axLxSEy3Jn^@EL8<3Wx6`61q7ve4Kzv7bG1W~(`(2`RaBN)nTAk--4m`g zjN%sSIX6sK6f@5lJa<1;iCpWfLOQ@R%WH3V^+p=zaoT`oDR=Kg=@5rT&q2QcLaM>a zK-B~%_0}9x_&1YIhn3*R+cmOsEQ-vTxbD5toY{ypT^rC=iwR2Pc` zUm=~bT`-Mu?rkZmqCcH;Iz^R>V9Yj4fHz;BY@TDIl27|m#_36OFbVkhoXQ13MXuZF zy&4PzK3ufn&kGo=X@Fkz zq0?kusFge&6lJc4I^8c1dM{Ml6lBFUos9UJ^`!;%l1^jwqP4sC?yo<1`0>VXfA5pc zM~|QU)vfKP&z^t(2fy>z;@$p0@9iHXKRFzZ(ro;@c~MS|j$fVpbYXF6`P%gxH*ei$ zL*G>BKi01ZcB6h8aNK?F?*_C3fPn-Uuoe)OEe1Jk@>~D_GdP{rTTo?o3gWIU-M)7F z#?7VM*U2u*778;u@5BoN$H-`Lp!?5aiVYZ(@ zk)|F!4J?P5XQ z@;PIOq%AmtvL4wzjY}yVPcU=_m)%UCK)qC*1@)oFqL#Q>Z_jB$y-%0U>+1Q@!fCu98>x6PYn+2)A} zcHy7s6yO+_P(ukpAe1g2p}f*mTY3>-rEMZn`GSixaEv`9Ps69ar%z@X(Mj5q?%iC8 zO}8yDAcrW;W>w7d5Gnv3>XS&dzo$Q%)om`E2wb7&*4 zj=3mdPJg$d)R8^ZP*^Zo2GIr-!%sz5v}w{Jj@W&X;f9Cdb)Fz zR8Pl_>{it*A9Y9FTJThBMJ3n^$%tN1H*Yc}ayXW)S)E>{G~bXVU@2DSUN57rzBA_0`@sn(q&-oie zYQ>?7Fiy_CX9A?3<|l||qr_~;#HGfQ-C@#K8&4!l;6Rdc6*|W;GKo0`WQaGm0mAfv z_vR-q&YP&gjSx3#c(>^wy6_PSn1<=%-dx+Y+_4{V@gPBz$^Ad601 zbcu2l;)e%u8N29VdMJFTcimhfGA(QqN)90rJFW+GAI3Z5B*JEdI&bjDV%{qm{D1!b zL$b2)(j#|87lrHX&K?o#ypjL{KWGeAqljDJa9kD?JZ{km9jjKan=Tx*J#L`$3 zMk|7}tCr+4GlJhXQq|vV)RKUWndTOt@dlc$1f)-CuilUci_vbS_m`{$O6z9|SMQ)! zm7casFSMdcOcJ5Tfm1IKoSmze6krS6O?!z#fUFReC@Z1M3SB*#j69;dW+u-kF(ww8 zPM*z2lM(bSiR&h`p_ynQ;t_M@oMOjBHvxncRGya~qW+AMwzkXs!Cjc(F24`K zvEL+`qS*Ajd}*f9k~WQ7g3AaPv?|*Okbb2-Dze}ef;GsvSh;M#3ruKjZRU_;p04mT zXI!e&M{+jg7G?t|xZBi45$|h%i)iOfbSsxyIauNDwK;_!d^U@mU-Cq8qGz82G$(Fu z1MV6Bpnpg$)U_SG<&OeybMghF;kO$;L(6t?W_BtTS-BA4DYvTnl$E;P?Hj9fPOx|T z=Bhg8Y~#J#%d31irFVPL$RX2OC)!!O`vN<*Hnr5f(_REG8qq8I6$KVXbPUWV?@zLQ z$S;p=(zHe&iOu8=ax{Ufk@31MGs>C@3pR_Y&r~P+VTbdQy(aDSH65mTjU$gUJMAdA zy|Gfcry{B%`w&mFX@8RKGp-uyPzQb;Nqc`<9e@)l-eFNcbR^UDV^$!26YSI1Rc82h zz>$0uenDd1e#G92M??p+m^uSWfDH(!4++k-(1iCOZr(emYrQItV0l%*MwRjXty35B zvjSNK8kaJ0A!Dg=7oK>>f}Q!PG1&n%;LA|y%;UT$BKow!w(M$<+$Kp&oengTozq2g z_5h^26OGuQv|BwO$+XS@n8ZgxI+nd$>+Zo|&@G^vsF&&^b!++7ts4usLLXA){?g!X z%zi%Xnw#xuWOU>yxCiyD>U0e&@BjI(_h3UFkfKFSQpmmV>L4x@l4)ZwYHt`92a1QY zJK@x4*3TFvxYvd+?a;h8%8paYG3f2r)V-}wIJNjmQR) zM>;i)JCk1!qGIJg$nR}$D*Zfe&^`D4xrVe~zjo+W=dIp+d#>nZ72-Mb?p(L#&Aqvn zEjTROpyt}FR=V@GoDG!=1*~TGCm@GUb z@d@iQu{5W)53TRtlG~Z11HQO+@6Xzw3Q;_eGTS$bSkFTyvSQcey)Nz9b z%|&z)b`5hZY;iX(aLEW$W>W!s*?myNg9W;;y~xcp;pang+D=o_75CNV<#DfY*78A? zOTHe`i>j=_urbP~kPZ~zAdbI$*-STOfOj~d?%}GD<_sYTY5@bO`Q%(P>7FXg6K3JD z<{d*|fA(#^XIpv^UD%@=XxLDEpyPqgyL*Wq4tkwWv0btpw=xMjxNO|DGb-tiw#+*Q<9V-PkP zR^vpTK6P%2uX560B#$hTGRsdc8=JqiU6z>|9ReS?D#JJF2Zx8u@_IXUinyMq$4}?V zzRZX=wznQ~=Jy{gVkb#TVyGG8x%|0kYWy$bgs08&pu$D?k(>G&C!x+~8s}adT|Wn(iLSbBShKP~>LdLZ zsEjP4C<8uaL-p9{I4+9uK^_;n7eyg+4YL6>W9RL;O}HDaO+*0qv}>3@>qI}S3X|wZ zFBZDDUw#M^me>kq8mbK6Qzg#1$0n z!7(NqYI~Kbu`2U-s=p_6(pX;s7%F){tOddJ z9|fKmada3@A@ZATaIESgxIZ-kaD1`rO z)VK!Ou?2|k9SLviaS2vXY-?m&3b}!iZ*C8W+^tn4bMOxqvvKq-vK`!B?ku=|5|^dU zy|dpA)iQX=^iv77YMY8C-YdZ&5F#5P`WNg(_jG3I5(#b5To|TQX`fDUxl9q$fT6Z( zuuP2A*T6#Mh!s?#&;lTUElxhc=o1(yn9r~*{$c=oqsVa6vmDKQhO)`5)nX&?7FP4+ zHqRf;o{6#dIW>0ZemH1#d4zsFSu-w<%x_AfJfp+ShfklZ+iZx)RQ4o0RuWqazDJz~ zE-rerxUf|56W>ihPeI%o7wu8u85Jdwi|^w_$%y+%QNfUq_?wm4hFM8qJ=@P^6ut~5 zm@$M-8~=Ytnx?TE7Z~?C&!5oylk7O$BXBD=gqLYn{%&trEyi-8r=#&AMFhYr^&Pdi zuz=>#taR*`TvDAjRhUOXuLSX_r=#%_GMC^}u(GJq5_abT$ee25O;Q_XW!Z-<7|jKC z4m@@N5&(w0sn3_R5^yArKfYAmY5^PIYPSScd(I&3vO(m{NKu#FHVEfiD)7 z^w*-r75xcT5lR!GA=I>dLyC4eZumUiEKI3vIupJ_EeEW}DJ&J8gBL>s=2CV zkEz9zD%C75Y%^|RyGBg1*@4?*Vj|o`-N@gq693^3(HjnoQ6_4EYneVxXNX-mh;zxf zY3YEA1(e_=&bJd~R4`nqI#v8UOB0Dr;{YS0Uda+|ls=V1RKc3&%<_gQQ{Ocmmh>JL z0-OR5HrLIyAE?CzEbL12GzDdr7P`;FC^4W8w>=k1F&a&T`_G`#y<}#LhyO(QM`7YU z+gK{-A~`_?3m=lo=X20 zur^smVi;s$iF_iz2NrlI+S#GqKU1QZcJX-{wGut>^cv39K(Xs4&3hH)`0)69)0r1p z>HYXAOS6no$`bE?uf|tZl_!$W(krr{#=`o+$T)6$bFk9*S zo$=~+beq*1c`RbB933TxdB*gks+52@+F`@FTi7`31}!_>DCy+vX85 zN&1T4s$U1$-kz7XHCmXxHhX>c=IpK6#f7L+cyklIn%GS4w$r92x_6dl-0#aX)tV$$ zk=dFyKAW5NJ1seG>N7fOF+YcYICA0PheiudQ-k;B?Be3=;_UM5wb>gMUR#{|?MQ@Z z^y*cd>fJaW=kduToeU@YdfYFwBi&znw0?JO>&e#I?>u|-?2~5?*Pq;b`uO?!z3807 zRoz9%m?fhg69hE2%{z-r9w*&Yo%SX)hb5=ki_8zu+rcK|L)G4#QHyHXpvy2_p7@iK zlap!iEqK$hSe=f+VEQ~>^D17iR{Z#5zamlAf>KKcJb`O8s+C$+>UyPAQPfJ^P>Sw0 zBkb`Qt-Np;iUj-ND^843 z-vGtuu`CfZIG<=7L_mUDGQsh@nXLD124)n$>Mi2Vzc3f1XfZaiGi@kdNMBym4I9WU zBA|IvLMKm!@N-qZHLO|MB`u&Q5Mi4`7q~O{GA5c0L9UGJJ8IeSr$8mE+a3WvEUgCU zsTAf!zle5^J_!_2j+=u8)B>h9Fxbjcl36m4iQCl!114ej)kCSJLkZw&a6}3l^7msQ zLW~(V+*Xb5CpA^*ev*q4=ow^r;DQiACBLg5NTXZj;r)OF~R zcbDCBP>vZ3X}!iZ@9z(Ic+?l2enhgJDPRR zH`2d>fSCe9_TzLz@qoYmf;%sLVI44O8Qv7o7G73~%M=W#%M|>JBQLN3rY`Brk{8Yl zSn8VMZ;1v;ad;N#p<$U$JIIjifUZ+1j-Wh~;7sdpMRDl65xP3HH4z#?HjU2c#=I(- zk(ttJ4Kdb=m1tuMt5U>p{->ky1Ds8q$0Ykw zw-{z+ucXG{*pgp`(TfbSrtb$VbrysDg%skJ$#Kk`4Uz))zqx}8K`nx8KZtduJBJyR zq_EXzl}_W`VUq4UssekWfzT&SX88wv`V$XLB%aD-df$j|`GL0TUan&biA2LH+aq)^ zIIiP1%d&`|G?`tRh}i%b4+c|EOigr0@vAPpr!W^c9wRBUG9GqEdX(ijBRa2^4X3O` z6ooMPJX%m)iz%5t;D+_W>V-q86CoDgHEi>Of_f|Kq^jDom7n=LNnm<`OLcr&nbK}u zByYxaL7C-rB3;mEz_Rh8%CZ|l;ox%0Y!tH40K7UNPB(~$xsC@XtQvTPG-XUcg0ZkUDPk)4fVegj*rK|l+Qz6Lte%fd+P`o|sL6D;x$!8d{Lwipi&-4j z-rxe=s{HsjKCH!#&?K#?=wa21R-A}5HVV2u_(7h@IqT4Y5)}G=!oJ1kliFfPH&Hyq zP6Q}w-EkE=(+nJwkK3MB<2z&sL1WmQQj!}Rr*rV*^EQNZ1dpYRSSX5k(Q!L~L5V@X9oC@`bn2OQ5y@>f; zm;u4U(8CC6ZVc8SVax{ldTV#oLgBY|MU^;bd7R~k1)b>uI&_>W%2rd%s$o*so#Mvbm31=r7s&E?jv7JDKeM{cxA|aQa(m_J`H;*Cc~1lgt97P z0%6SwE)IrucS}lxL2!*=g?)jxV$>rqszE5}q}(Y|e%Q5Y%fofs*oH-l)#y26O1%jX zKob;U*p}@vXc>dxp?P`GEfu8{5-8%qdM$&-@ zM|2lpHk2h8W*iVai$;udtDf{WM;A=eYda4z2lwLPP~&`hKpIQ~hBSV6lHfeED`8!7 zT;lt2PI>&i5@)$eg;PoDTXU(mY~3#dJJKl}kvlts4|jIv@T1d-hvS3z^{y`C*LnZ- z&d%Hn-oLKrK!8db+Ke7$;4H~N?n`>SZEmF$CE0XpWr|?6s%9~rn;WbMc*rDy7<}eM z<*VD+G+bd@O9BmotSPx|!ZMU#ND%+?l)cSU@Yd7(pfdFw!_*-s^Nfo2zTCP@h z(fYD>rp?DRb47SReU0+7fp_nlQ_6%iP3{(63JtazupPQ*s}spOF#SX$2w_#ZW zCB&3>g1D+W%m@V2GaXR`2<-`s#w?L92uX})O@c)$gEk<1K2_0Ab)H45Dk2tuU%&3iDJW0-5V4DTTAy%awUBFK5HE(1MsS8lM|5BAq1$ zW3|V4t*mB|qefptW28Gejg2*Jl0Qw_^M`8T)!v>TJ!*W!lVO>_g-k!^rT3cH@tSwy z4ZMeDfT1;uvLXagiswg)O$Bh706e7`n%%QnxqenFdH>8dZdTe5c4N5C+0!v?kfKN+ z&X_PhGh@d~XgOs%m;{|z$3hEqR+qTDx}N!qCyhPkW(0OpZpM;-xY?0wW9PgK@w}3! zY%=7v1M6`<&=S&D!C<9~5O+haR6~?G+X&16X5hE6XN6yQFe!744z(&bI%`K%aG1Ygh$R`JWcwCx_k#n zPMI*PVEZ?aE60$zPhyGH$@K8;@Zv&Z4NsF6#DWk^J-hs$+S&j0;t_&*R zkpm-Tqj-?yMJc^FK+Z8i+yLDa?=2y#@;Wy|g)W7OTB-4lI5L>&K}zcWA@e^o-1^o7 zL?-+CMx5e2xcPFqxlw<6QbBK3^JV0$4F>Oy*)@tD@)n2LOq_{XF;4*pj1?oM1T3*Q z@wGjb+40EI$YBwQ(oUes=(An+usHLeBN~ov*WIW_V z*6)sKuKzBWHk!}IVD=rzSmx?Pl8l=4g#zGlpmTMz(^tYt`7|+DoOjU|iI)&F1Ist2%$0-j%Grr3$6`p4u$V=O zX$!*)U~wBUHX6`I>``XG;V2Uykfbp8|DG2Jri>~acX}`v)B*HYMFXNXkx{86;a{lo zAWjW50&!6Xc@_y*bqNoz2Qr(Zcw|j#lU06P6tSnQG@bRYYArSKym=yv#6P6rDVoZp z6$a~-q6YVEQ<+*7RtfstNK2g`#X|*C3DfetS~5p2S#se6g)o{T+=y^2dP$$}s4$TV zVhlr_q6Q986j5K0r0#`T&eduEXv(Yy({9!t0p-Ehn;o19=JV0vAz#+Qc?JR@ z8>Et%I*xNtudw-3CldJ)VEcEhSujlSJH;7*xgnjWWw)?7t3NGlS;+NOU6gT-6B8p^ zURYLH+Sf1=hy|?TYH&33ktHhJ5`h#`*jWvbiC-PZ3B^_55Dp^n`KT+|yzK1&0c#Jp zdO98Ww|bF6+YoYL1yrRxytxX=Ps3)Gkk2K{lYLx%vaqU($?i{dzwEUaSJjBK3-{Vf zt7@2}hrRalsw$G9PRm~VnxY*To3Tu%>o{%0M?O{+pMsGCAZ=t!&hy}aNF5fVq{~VT z#%tUzB7psG<|K^dJvTzwyheQG?ER$Z$N2#Jl_^)Lna+_?va$8>qTGvSAtT>u!u#3E>Avpvle|Cln|iRb=17K%=6X;scWvkHHH$Ow zAP*tec5XYm0z;(>P`XKa*d1#c9nBh*;WL^F~uz3SGOubKA|f1VB|u&?|6|lp1Lak50Or{?K1y_rMS! z%HGVXw$Ia8{}HCP8Sf`_z?Z!9ZhJy}i-I%hz}ri84abCqdkQ~*3bA&)TXBrJ?!TOOc6X_x5KUgQ>2` z&R^U5GzF(&=R?BCCAcH)1zS2%n@AF2Pv&hVWP2(RNW58;chI4YbOKb2>+YS7X{b#z zH-iIYGPxeeaG|X~*tvTP3mWrX6`BvS+?U5rY&Iwj1tN!}j|M>*$lu_*3-jUEz;htd z{gz>GbH*xzhKl}Zl58xQ_!P3}*$^;{TjAQV$i&|;rB))njM~Fvf}%slX9@!$>p!7` zwi8m*3uwaaAPstlyi_m4#7rCw@4$oj3iy#hLk?bSGDrccLph?QebiYG>v13-QRk# zv-9$YKmPRfo6pQSdf^n4-9mk;qHis%!2$WLh5PhlX@P$%@{c9{vCKcN@sI2L;|Bk* zVvL^XTT8e2{cZlituNi>zwXhGWq!HLFPG&d1F*c#MXb=1X0I_|*SXGhu5+F1T<1DB zxX4W|a+8bPqdxe_ zWEadtN*Z6nl=Z*~3aGPyfi)!`*eLEl+TPMdHso_y<}OkMeXZawgyE4^Q9MrONyzm!+xhW0z|C6DAje!;8g!f)Qc+B<=fas2$dD zMvTx*O?D0M=oXnnOnc|4Bx7tCk!__u7W3&|+&|FawX_@d;}%R>kIJzdRoi{!nvKDg z0L3?E8b@4Oj_3QsM5iU`3Vgbv`2dHA*(o)PGA<{4SR^V=(*8l7rO8jVxrf*~FF>X> zhy_u+d@I<)OM=`Qt)Gp_iR*No;1-Svf1S2`T;B$jvXTO?+!Szal{Ujbv*5rZ`6$qJ zL2PD9ZM~1w@~DZ{xW7O%iP{TvJSHv2if0HmSa;#ZEZxX4NCtEe5h$NC3R(rpw)YU~ zhKa=F2nqC3z5?0$fR>yO=!}{taxI%PW6^>lWHr&?FzM^G;1syXk3Yoy#dQ1vmylGl zDo>ep)Z5LlYlg~3m0#VuA+Zo1cG)Nf+&;>D)cSbM^^k7B%u==W^d9Mf_ded@8&L#S zGI+hZb;F@NT=GH_X2~R2WZ7guYiu%xM&2bF1``MI2WC)FXT{O^LWR}&HqLH5805OZ zf+InYjDxX?f5cIsu!i$4G@nU(^XAUI2nJ~o1xMRD6kZm!3ukrr^SH0~z{g?xW40CI z$}xP(-v04qU*oKt^Hv!pgf4fVW)NbDiizC=TTQwa(28EKD;bGQJO_6s@%28 zp=yLAMz=YJ+~K2Wlsi962Kp+IclmpwtsgeyPwY%(W1Eh8z#vQ?>F!;PnXy>q!hPtsB|;# z`7S*0QI4eL!CeG?Fs7La_)lt=6R7KwMWW82rY9j6Ip(I#^FcIZ7RNyVj*FGcgH@OR z^iGG%`AaiTv>r~IU}m1v#>5H=i6fuoHUf+*!{~UiNrtWm4G>!ae2^Wh$=DqnHC!%` zeH9wqMw)k%7=sSdTFT@M@VxxZZh^v2&2cAw`8>|45eZ5)u08V_F)(NnW&8n8*$d!E zDuz6dBaABB+beY0vyJr+Cg~xcU0q(fdE*vg$IH@g2+g~AnfDbUjSL`Xk60?0QJBrI zY~};i&O&#md8Af< z!=0&^S{Pj$X;H?*Az#Hph;MQWGHwLHPzEZ-Aw~+9dZdrhH(&TGh8N|+-^`qCqzSG8 znPA&ROIWl4hI=F2tZ~nBU(CI&PaXs_$#}SzrF#;j9(>)vjlM}4-cbzMj57vt=`Lps zYLP~>JsB0xb)M{nm8*CUDx%K)BwtGhhVKNQt97?0dwWTE6O2K8!-B>0MC-NB10 zaSL)Am7@CDwV)|;zQUaU2|m`mu;EuS3Rdi@K?!r8!kM0a-oPim5tYw=e*f=rbjlo?FV>4fDkl2;ZWok>= z6s~<>GU8fW8dqd;5l=agulMy)($|}OSjX(M2lTRw`>#k#01G2FLTgik%$TqR zz>@caocw%HrXaMjP7}v&*BJ)RlQi=QH-nAp6)_3A%mQE)0E_g&Nj?-pc$V8xA5jS0 z2wqG(QVJEO%(CG;UCDHgTg9x3t=>k-mRrS0am^;>cvAKzh0dFFAgiwgr&}FPf>phq z=h%h;tE2?8mO>;-Gj3fUv>9gChar=CL?R3I&!QiOs{v=+yj9M0$t_AIFuttSv`Ct% z^k|hYzt%>&hfJL9I(LROnn2~m8nOoM(IZQ8e8BdRJ{HmrSk!?YOmJ+I96b&;dF_W_ zBIDbUPRq}bes`D9=y%VyAvo7|cIoyChXn_TX}5|B)16?$0A&y&>@w(YoDGxyNknS6 z-){Gg`Q$6*c&3oW6Eu{-CX(#!>6~m*Jl#Q17bDq@@+z6BlCn^R1=qxY3Ha3-ZV!z| z_H*(hJljpYhmniv@7{@${WQzT_Et4%g(LGeg&U{>CUB0y%&NGcbCtR%wRhtU9tnpH z%v%DrnHS4DSV?MNlhhECwJD4<8HQ`ZcUvPSyThT%EbW7se8J6bT(LhM#~)E&H0wi$1Y%3yV`Jd2aYPiB5Xx2Z;**u*miI$B9@ca z(;G^}fyXx@;+e7p#NtPa*g1K;Xnvmk4-bzKsu42quvLMRMRBTk@jYH!xK@*=Rx~&> z96xqxndTe#Bs8&#=5!jT4Cv71#GH&qCv&*bD}zT#(jQPb;diaUnjfdyj?YDMkv)bI6B*#R-8yEc64u%Pw%GDOn?*i~(@8uWo_tqr zA0}h*u*t3GS6MCTK{vRnlGN-2ou#%$5I$|N;~}IT*(&1k1(Rfnd8Ch{VK_TFmR$W&|{@Y31sa)i@K(09Zk;^hhE}BnJ0x?f(4(#Qn~x z^%MqkoF34H0(&hp1*pQwQp!`CJriM*-N!sDxJQd@nA2vApU+`X?3z~EA4{33`Y6s? zA)e~iuvq*=QdlhuYVn$!|2u=-x-kaK_LD3-EYvVL)SfxXZgs#+J;~34Uy>$shMdkQ zDG))giUYkHr~9g>uD0d(t24^%Qo_yAnG27mx@H-ivhgsgoRpUv0^4-6p|=(~(azGc zvD(RQdIceqZv9rdlHVe6@cMf2@anN9IKT=GlRwy|v(qtR8&@~$R9S97Lq$=F)hzK7cyYxS z=(b(5$ZQ@f<7a_I-`{+?0*|*^A=GKL5`us=z@+L~{F`{r! z9mNls$bLIcady8galsRS$E?QCG3l@HsdlR=i;Z2ItQAR0wsUh?-jQE^r-foiga|`U z(jJj|?Cb_?8VDtVTm5yFNX=CWTlo%}G96a7+@MJICpLB@O;kSGhC^cDjRG!6cMfg~ zQmFg0y<9jm?PWYJ{jz2Opm`4r7Hl({vJVSM^o)A6B@52<)6-DvGhDyeu^T^B+}W8M zydGtPnfbYfZ5@ysct4xW^?{R&7CQaMLk?=!1JfK)J1;X=0U1eHfeBM(^2Wh+le*DQ z*4_}z=R!l>-nb)&@$iJCq(03jsj}EXz(=ybimVmxB~Z4?=M0Qd%?-heczl~N*ky$KKqBSTvne2znSyG$|1)`41jG?bV>hs%Z zPDwnF9w;O(7!Gu9`Zks|krYflwdQ2tA2mSZ58MQ#xcc{K({G~5>fbk$eWovwULv8n z+9%mQ(qx)X?3*waF&Go1K$94g(lw4Bv`k!|SxP7Zo2eR)&F)!k$rr!W+G$ik(1U}E zakk7r@19Lpro-*v-lnyJ!frg-bU88&`qONJ1>J1f*=WS5cf!lWJa`L0NQ5r?F0-E3 zsw|!=irL!cy7b$$Z@YI~eBg!&Am%4Us-EDPLL093DMJtfY$6$tq6tXP zz#BmCx_824Z9L|qAtSTEn^7nvZ$S+^oxTkHg=i~>rX6v?)m&oaw6*oz(Bn zv$Jbf8&g0 ziApu4wHa{WWRj&2EWWxPN%rMjA0_&j6ag`RvZB!CHoMu8&WG{IEc^|r%5@haJSgJU zhnp2kGr@Uj!H*#av$V+@;`o(Fmqu;{9jX!IP5l71JLyg;4X${$hrbxM#~lScPx?NM zAgkDnR&p|Fm;g(hcqc-jk2!!y{jz?BD~^MY-?{l zS&#H_LDa~MxlnPg>4;y2ADbPFH3prZn%L@BBe+#Nf(DgF=8-gBGvFybIws`Z=UMI3 z7CN<8TgvMfnU$>6HM-aOS^1c7a-VT^MIiuFjWPt46(3xB%a}TBwfMqtVFGsh;O~CC z2s`1E*1zmU>$6?UM3li#Aqk02QTO8$wXI77 z!g_j?0u_yJrt_DhI}u_B=Eq5bhBa zU)O6J>xglG*l5gN+u(=t&C$`<9{oxuDsc4{?}F;xA=q+iPpko(?oNXmB4%nc7GTcq z@s_ZdkW&FhM*8-^n073(7#b#4HWwKqmz~lnv^u3UQ5Y~`W+O7(lX+8cyk=GH2xkai z+eR9Qlma@`gDejrcz5C?mKgM3qtQCagcRD;M2%4EWT_I#ui0B1Oq-eyF4dW=!Kf3i zTeuC7_#O^o=I)-tM@3AW1yhdMVs#>6JgklKt;2M|Ahb^P2GWyqH23({Z`{az zo$Q-IG65*$3BrI$#>m9dQR+{!7{N52Zd^53Vxn>Mf#N(S>0z23r_l_#nfMbOSNnh2 zd(-GhuIxN8+3aSMklEU;#j^b>kzvW}hdq`o zc{@IbJ?Fdkz9k|fv9Z{aJx)>8iHsNb-FM%8cYF8U$DwTAIWlH;SsVLZ|KJ)<=j$R$ zo1xx05|gUyA6y^C+NUPFb;&tvmT83t+(i2j@>u_=)y$+q^*67l4t=tsh;DLGACnak zIHtbDB58e)G4Y!IiNvywN>>`_IX5Q+m$wzI{?wdsD$C^giRVi1UHA%tYb=T%dwR9? zO{FjX;8UfqD)HPcQa0W7VUkAuXG`yu(o(6kUn)KO-p_ybtzN10>>v5~wYQ!sz4z>Y z_2E*fUn)KK^yf;YXMbt`snTw#bm1chI195=DqZ+82aI1TsaKw!oOpg>(#>zgX_GdN z9Vf_-G_et0P&l{@0yon3f4WXv)9Dc|nZ(#@$;u+lD@P zf;8JRD?8j$CSF>cnTeyMPK;QOhcjt^Fawoh-s7qV=uc>DyIb`_Z`Y4M8FayDz)QEG zNCd8&FB7omCnhFzeF6RG3Zr*c_Nkce9X_rasED!K7FTE$m%go}SMA62s+9{{WyL;) z75g_o_B{bs>=%CYy92D)Z*^Df&vZ(;75h;E;g?DmKCX$ZOGG@chs*Ov7Y$#5L@B-X zA&tv#)VR+IHye-;^xq7Mg&FG?FW!8^ZGeZ9Go+DGDsl!OofRcLNkx=4|GlPm zz0^PSj`;7JZ)7{T76;v3ANcXN+KszZ(a}Ltnq*KFOdVXd2~Z9j4gJdV6DZyym{Fq) zmZl3cHpVvdJ`52WwsbX!;*>z~-`O|vkX8r>P>3cQ-*$psvWH`@Uqh+X_QL$7RTcZY zL6XKtIHba2A4^sL*sOP>&b}Ylg9z7HcZ0Z{c&XO}tFi7X4UDe(YRzdKFW&e4fgf*2 zsmo^n?CuW{>;J&dFq{1WVY3exv)ONO;ef~9`;arDKJH9m+V+AZZJWjq#blbP58{Xl zIV5pM&^C>PAWoxhlD21{erD=kvKOO%*qM48><#Kc7#!P~ZbN|ryYtn7!<<9?}V~9zzObC;mBr7F^>8f!IVEv3s+BWlI(Tmk3yV_+8MGZ z$({>7bw$=&`y(Tgy&rXFmR4&kYb+Vu zCHLdM__t}v{XbvvcSy2-yDYh<+$HzrIRLN}^S@#J{f-Z3({!Jon6&pCik%Ak(M1Mr z*c#C8*P>bu5xY=PtW#=KFwg?hPZUlb!1)qEry%&~tOo(R9u1D-V0SN7)y|Y^H5wOd ztww8}&wHzv$-?-gwll7hSvd(LMzX}F^`>!qq29clY2qaFO!GMwf+I?ThocKpy%lX! zXb@Yb0D|}tUHB`bcAa)-&-XNe8rNUTg=lhK-uh9J`h9cM)Janm7s&qJ#)GNVbwSwJ+Lw03klqOh^vuK^zAyvt8H2AThfmghJU$KItz<>oi5@K?(eR4j# zK0?hn$f4p9ElX*>_L#H~<611!J^BJ23l^A$5$yJ@)KD1dhqSqKiHuh2(i5gTccL-J zJ!gf8fMyVSoisS`+hLSvD2n@1$vJJcNV=PPpd2(WbdN%>A9P%ML!+#Nyt%Ym*An6) zgJ%bcO%D#^!n(bDZUM4Z(ZcgYx1;5}gbG@mEN6eg})rXaA-u zm0aohd%`%ApmS=mbYOuynkz zOJaINYA$?fq^7JNiLB`3RHu)hnQ%%jZgYmf8XXtPy>5eUX3rTZGh?D}An8mL+xQIa z%N0iBxOy5z<1%;1I`a2{%IORz!K|nZke>1DdtSOk%a;c)d2R0Fn{hN8aC%bF<6OZa z_sx}VvJnq)z&?s;K1>fi8tUbcpjMsOqA_d`M+ zazKx)sJ2d~cYP!}`(x7a2L3Bie9zxq&KC1QY-9Oxkfd2GpJ;JMUEJt(I7dkq-_@lz zGpMev+{ymEeRDObGk(|ncneOQKOl@aL$raruiXUj| z@1%DN^MwjRwoqbjVh?pL8|7RY@R-iEsx~!Hv|Zw;KiWTY&6Av21_VX{AP9KeR>N!~ z8HH^2g-$fUjEz**Q;CF(R9%Zw7-y2dqs<4MPo~?VDKBkFETeMznbb0(bV2)fRO1T$ zCl@l1njY7W!>iJfEn?0&4ViA-<}68N9yO~JEq_(M8L1myw|k_h#+K7YEe+GXC=Svi zRZ}-xXRp2GNbqW=%7Zu--GXXdHbdyF%<2x`OqKJaUN@YJb;C9cJ9D(!EtF*REk0Ef9M0E{pV^L5%D>TUCprM$3rudw zqyJ{9Rq1SF@yEPp*}Ha?_HbUntuBXt_aSF}CGC%2y!P={ORfU@c&mjA18ntFr>G^Z zCH{fA!+0lCe(!qE6+DBao;M~hkmes54ckjSl>-vcw2VM_VTT!d5 z{Ze_w2iam)cO##Kq<2>ioaBB>(LWY zO6kTZ{0D>ZG_PPvis0w5(K4BRF`bG)1GjRM1SqdEjlX_jG$D{^CT2nuqE2W}{0{!G z;MJ4dR^@Nb2p9esxgiP88Q}{j0tc&TV-|~AsJ||TzY*<(2 z3rPN^cT7f({gm&9C{}{0$!7dy77zy-R9RKA^f_vHVM+!#tvr3zD+Qi(py@(+itkLd zy|L8@zLP{7{fKlwe?;}8kyxaVjF}GAmtNGP;=a1r^Re*9CeMKN)+#VT;^a zD&$%bf}~*eu`taVBVl!!4&Iu{Ctf?R6-!opM7pl0Uh3;I{q`eIDRD;Mm!WUTszEX9 z+cS#dOt>Ok+co;5QRRy?$e?u(T4rdq-PW7>_dD; z;xYE)$N+pSR(y&kgVeoYNcYN!tT~=D#ov)RA0eRs*zXKeT}7;2Ez{vU)QYa#8K+#t z%y}rjBEe*I=?jpN5ruRs&VAp+6>yi3h92kaWo9Ob=F>vw~bGZS2O`^%+?)0PX%ef@yk|3_=zKPEi2{Jh^ZchDGm^1Z{RrQ#*Ly%)485LD5L5LnN{ioGpw?v)fkhF zE|%tr6#1}NwDS44kwuIP=1I=yttWH-SkI^^ngR&NtRlL*nUT9o)x|At#3#8@6Z|ajRZ}9TxSn2JG07aTH%s74x0H-hBT}`EE@L=DMo)ZS3?yEMEbB*J~?yaW)^l)vJrb8JV;xQX&f^fPyWI2(q-5y%43&)0_W zuCL$D19t5Y=N#t z6kpP%UNQ~x_itw&>I4@4QKBaKH;UsABjT!|s*<^?YtPVyvC!Ro^Y=6*S`pct^W0;u zfs`O1?jbF>IPHT>4Zt|udmm1h5is_y-Hz8&OTAt;YAR+B@!oAeG;u9G+4Ml~L-Mqo zI-#ZfaFqSvg^&wFyHuvzwsKC1yE@I75FiGD!*V3wGn1{ zlTsFRV-7UsSBnlm>xCf8)MdfZe6iT?M+dnqY05ksvrvUR8KaFl((A~QO)CM4*oLmH zB!8izFA_y`-IPfrRnVOalx-Yz^*QRiHa)GrvdNrQV-*Q(!d;_VsCA0o`cF*EL%Q%l zNA$deC*QyPvEJ{=vc~Y~@#$8LY=Hay=2Ths9IsLQv_l#NGHvV%K3=DuGo9x;4jSr( zJer3isXrtOxan9OX^Mj(7$>O?Dwa@&b;FJyh1O_!OmIyZ_m3nqD@A4Rz)DJs1x4kM zDH?QDkgz~>wGE|>aMps{cSgf>n-t`8j7HqY_04HX-8%+o(EKTcy25(O#$$L93kJ@Df=keZ|Ux2?L)beqvsg-=Yv1TrxNxr_ z1Mq&_TMkj2k$>ggACB6s-f#_AenN3hTP##xCT=#H<)&C&S-d4;$UI+u+(E%H{e0Fw zm$4L5%1&pFECw!KOO(xJDC2sMa{C=zt%-ZRA7T5Gqg6_k2R$zc>FGl}d=dXVz&~5~ zr;2~3@Xr_U&m;VEHM`ZopYkLgy@Y>i_@|A3K97Ii!9VZfpE~}zV0#y9&G-*Mob$wJ z2(_yfkkGZmjQ^;e2XpBM5tH7NeE)J7;6_L5cHkrC*JJ1kYV0y1H0$G3fZ&o+-fQ0T zVmFW0H8FKg3(a&}2+e(J1yLmhFiK&uX`XfSot&oCci!b{&RX!r!w@&#yQ!`E z5%2xH`0!z7(_{69s+J$nddjFwBy;E=urjvXy`T{Wm3;$nsE94zhJE<(MJFFYFuCoA z>%;B0{Eo2;dHrRk^tP|-zFOlk$Hq<`v%3av`{C^%+;?~{_g*gu_i3ByMb%=P$VCiE zy$*&iDg33)M*a)no_+iw@<=sB$`1|Gxf=4;#>N_Z;G_s2 z23nY!|?T%Fh^lrf)&6A8-E!a z2{?10y)XrlCfQiE??1>gKFE8Tpo^&EV`91{a@(#}3{!&ra1w*2{(-`M$?RiT&i9fU zol_b;#zyP;OBTE>4)NGfgdE^PL_4!@;I1kgvBk($jW$EDF9gjYPRBUoMB=V6q>r&n zxRo(UT$}#%lHcojalh8-MVI&X z6tzu*KDRADq_PkwkiYG#Xgi5|eu@hoiUgnx+wumHg<|?tv0fW|LenYrj*@+ec12iO zW<##OmVJn`@U3n?y#ZKZo#jHl}SW#(UVCvzy>sh;WhO$+sC8((`KmJ;n(lctkL|865w1L4`LYf z{N30y(BH*=H&r2VSMaz%o0qDd?Hd&XAT^> zohNCUb{fs5A?Ny z*CY`>=o2~m-uIp?)mZE*fMc0wjjOPN)gncT4~BKT{lHXDk@Fm97>7>5U^ej zFg_ai(T>Kr3`*!Q1rPxItE!Pqofkf9E0<)>u_J?3A)e1ebV})Iol|l8c@|lTc_wQ^ z)3-vulwX!I-dB0bb4BDfEBs=c6IJmF%qoG2g+TmlCrc&~vX8RsEQ^p(k>^ywg>E>K z=Q>!e-$%lp`&gXB35(?ggVan=NMb2{|i;@utzapC-Ql$n9tKN3i48Qr~-MJiwythZ`0Y2-=rn= z(rWD*74EL_!S?087xY{yeeaoHrK)Pb_%B#Wf2T<4kGfL&YYV|31G4xDB=)a<%PC5% z6~Zmbev}#rICsk9DKKWzNG-2=0loj^lOV6Q=j(H`^#x#OYFCaaOgSm|b{AFi;!I<1 zrqyU&#EWnE+ewi6i{w9|vhQw??hUu=ov1&v?fXam0b03sf%0pZGF4qgy~bo1`#9sP z_Phfe=0XwSVeEGm&8ted-Ug?HMo}+OwX6JS%F1{a4?34-G@zhuC@#^4QtEtlLhb<; z<5}-ipppx}o=d-th`9fva?h#K->=Hm%IHh4<&M#3|G8>1t;O`xcXr$LPs`mPHT7)W zRO}o6!AiIjt%RN4uAJ|QKnFp8?%dZ&BfM2z6lNm z(v?np3DW{y!!&Zk&8ZYa9k3x_wIKnOfgnQ^E5940HV-y&D)uJRXy%6`d(%B1*(W|k ztr`wgCyHagllG1P_EvO=ro+Tv#Glu_UXM!;>x)F#B1!j9lmk_-;8zd4*z5bLA1Cxu zvko)3#^f3H{FsZ_R)@*Z>-COQf@{w_bA=4j5U13G7q`%1tF9_7Ra1uIRlmMlSLJ56 ztg2mq#~b!ir1j#5DZIt6&DK?A7F}X86wQXb*k~-$f8}ZAysj^Mgqd!k%+*z8PSs4& z;c7HME|1qU?=He@lOlc&eHYcs7{yf_kQR(C)>Y-As;Rr7;`_YxDRaTgMoQ=&9lqU* zq2LCu>|hHUR|peWjCjEz#(Z5>=2cCtMZKVNq&wV62h*{?9YyIh4)IJM#zE>&52(#F z46$j{Z8(hL?sO6cJ3G^fA0`1x`%cGEKMJ!bfdMd&PPYqnRar1|a04+#8S7hKIMZm( zG%qiVnFa(PE$Qw=sn4ABq8eqRAknrr5*Yn@?q2SSW7|*tE;Qh2S<%K*B6=tC1{p;{dzRZNm}p z_R#|^eC&P!q~=z(Pp#r?k8?V8!R=8u8|hC!7$aUSg>z%oCFO0u7mNDU%|`mw4^AUu zvm+MiYCE1U>R4Kh^eex=f2o{Bil&W3uf=Pj2rt`k1U37pVCo^MdFm-svmnKMQY@Qb z$63NY)j*!ck71OmnwG~w%87k0lh|D+Bf*R61zh1qOg0QM$+#5I303vFi( zol3xVQInW5RZa@0#Tss;xWp24rU|#2rh9%rGfShxr3(uz)nw%3?$pF*6b6LaC=B;P zO}wW!*;%NJLdjvG_tyj!Ei~P9q*LIcq1cJb()P62=-Cx)ME0B!84bj+$oX(#z7kAW z8l4f5EN7k%3(L-ei4i_$M8*Pg*2Vk5iMBGfuqR+w)VXj1pfRhGH~lgmxm`qcr85}V z!<*^j2KpmMs6uXW(TL1jpC~xXlC?$5PPlAlkjbWZ33z4YO+hzw%iZakaW zwL*t_;Xt%&UG17+y0h(dx)Fl~p) zcC-mKjy%Bz8bsB|19x~hZhOZ+%w^Q;jC)tvRdh2)4U4etIaH!D(=%p!RLxXI``4#_ z_{b~!8=5jj=bQ7SA>m3|UGn)kO1%_zEnR3u>F0NQ-P{NZ-f)c%Ggz#uqP8!*UknuuzA&!i1Bur1XNJ9gdrR=*M1fBXa6G6fm>%bSH{C zJ~wfG&4cgC=7m1D!D2)9Sryyg)yacij`_aET^Fc3;8F2Q0(`UrN^>e8!s@6}gV z?%chn`h*3?lV}sGrLOXqd5)VP)G}Y6o2xffvL6fvewUFzW(zixb|QfEROlc2v8skq zSfi0m=_}j7^*dB7&}kgL=9qpCwOddTVGvMUqgB>i#)Z%AM(Nh455b%#DNw^SLdt2N|I`Kq($clK2;+U4o%M={E}r(V!YC;)B6 zX&EOO2(;k4Szg5*&S|i3OT~D@H0pb4(9w(R1>vX7vO1_&vh*WM&hO^?ar=PQSyYdT zg!iLqz0WGFg?1U{e>9D2C|edHzSXZP+V zulq4ojd6Zm+uyxEfK8bWu~9=?5#Y%Lix??LrVP=6A163(%PD?|>IOSIe$11%&4FN^ zLum+5i-TdR9#mldtt8IM#zI%+`Fg9~Ec5@)mA90dR8lyRWc^tH%+{M(03jz;(q0>PW`e7!)w)|MWZ7(vwv4-K_^$#0=oIk8*}q3cn9fXz6VjK|Dgw4=78 zbWcy8X7}eO*qNw|P9iALgjX@{VM|JeXk=l?0Dt|r)^Zff=j*v~k!ojuI7mp5^B@sA zioGLXh-elS{#uKYB*1;FCgYYi26dh#-2{%Pn z9c}ZOttqbE5QLIPVjG)%mqi{2y(}9az{L>(JTx|G5>??5!nNGWEYxf>y+nk4>`RUl zV*EX3G4ud)O|M+%XBca$GE0(9sj;fxtjA*IZytZJ%AdN~6>p05vN()pkN6QJTZUkd zv|gW9K{yzuP^Fe=kI1x!S2GFUB%lKcrsS20QZ71lCKrfe6(;r4!lSrNIZ5L(cKk## zxR1?(1{fI-r}y!IOqc2t_O(yIL^N1oyS_h6Qf%gV3ic$Gnv#_XbAVj}*G(G%zUg3f z7V!1WaE1KT9E3DdpO6hl@sU1ZF@fxI`cvg>OEe^6Fd-^=E@BT9%GfX((*^~z*N+la zc7WIU5yQ+Z60}A}Rkt$P zXXX|-oMbs-Efz;zI8eZoMdm1+Kpv10Sz10#>j#i%MO+P%N}O6ZO_2H4jl#6%hn@In zkhYI}eO;erH>P*y=38rbAA{ZdM@^5dZRjK$6?x=@6|%x0LwMQf=~~Lj9P*L}aVBBH z(1qNb3`h#XOc@;tD)jv>&Xi*1 z`;P~`pcAA>YoVf6xIPz$PD8|yG#=T$1$kyiDt)Rq+F;>CLpUec#}JEk3+cpL>SeWH zL#Q-*edj=V#tgSVAWP7X6Q67TJ5#3Dcb26Pppm-^M&KlS(P7QvegaqwD+_x(yBdT^ z4(MvgwksU(I@J{AhrSnd{S#5vlB|G(L^2utkSKvwN z4_i{NM25fu;vF|6;iP^j2ec$A*ph30t-N|b_dM{W*}P@QkYp`wWkO%YD}!!xcM(v@ zu+#CAgzIBMBvA?t>`=1M_>Jty*N@D)EtqM^j~BU_=@5sovGL1kINfRPq8mZ%MX>*Z z#4!m*M8rudNrw|Tns^McczRDkFA+t~gq??8+@0o>lSr2B^Xw$c_GTilV-; zF;*|8m~Jp zg`$80aHTl!y0_!2ve)eg;U~LM-wQ&d$d^@_Jq?9gtoE;tNSbYd$ccpps`1n zYgyDRr728riPX~xQD%cQQjaQGnoyh$ZpQl3E6W?7UR1bsjCNAJ@CY&1gCH6vy(4{c z+5lp%Cr)K|4lg1y7Y)<3*jMwJyV>!OD(Cqz9?COL*sE3_%%nKoCdVS6>U&<2))ESL z!6e0%oKf!}2zP7UFkvU=#CL+QHi)BLFg~(DHE-ymPdSuuH)M7Q?khrM*Cir4GIhP} zC{AJ1X?pR``a&Mf%gWnH5je_rqc_8}IdX!WvMC>Mq{uSoS=VY7yWj?o+;pib({xc) zj;G%g4*U~$n_Fj_SCklPFzj;FtLDjx5R^45CP`$GE+veJZMu;za+aA&;@324=NMH> ztagPU=%ov>B|p)Uh2WCEou$f{P^t(Hg|%IKdCZ*Z^klhxh-_E7(yA``T(lbir}w~* zk%z#f*2i@$^%(v!N@tR$j^>TV&QpXQ5whQvYd13NtY-2{qIe;WUxj)J^4evR(sI+c zs~yK)JXALL6F*F+DFYILs~}X5T>gHfx!drQUi2=*sFyQ~!d-a8Y%Y4o^Q~rCn2N$E zJgN)r90f6RBQ3IG#>Hb)$~x;`W=tm>EM@@fWdtD$O`v*FME*C~rMb0~p@R%Yn@M5~ zH?J^JoE4Z|ezf-3`v6x=s#k&#@oB#k(9XcNhwShuBq1xf6Z?!1t*y#r6hpyhs9~8y zgpUv-V?pDD$9RpSM}?lpN>{u1urlgM#Y~5^?c}h;qs)qg_;dH?p1=|%n~RUQsRJ(# zuyu=(VVhvz9G#H-h9va|FoZU6ssy%?tdk%NQoi51tM>dDPDPAr4CFO?`jP-FAb1?S z1!#ALwujvR>t4L!#k+n=yF{2yXOqZj#G8-nsZTrPyvP|Qep8jPO|?+AnS{u|nDN7d zAdW&hwIdZQ#({9fERLaDuT3^Kfk7_LM9aXz4_hms`lR~oXPw={&wiG656RG6VS4KD zD96fmQYQ;2EsL{AWbGfs5oYZ|C&p%pEq&T*MAzR5Lcgne9*l@QpSW_|k7@e}g2(+Gw<0aE zBTyhkk@ErZX_q#e6|Zyn8OCImsv^-1$2gLj5g3)!2|YkBE|aj3q7xrMqC9mN#rqyz zQ%H*$%fSga)tfC^(owJL$2ug$@(Z$*<-#}w#1A42geydn@EdJaZq(`j9C0_w6I%2W zodu@m1<4tPXXoGokB@Q)9%aw)J~|(BxQmKogKq6>+*4pOcKuV%~*U>Zr$+>qlC)s939IclKf$}O&)C) zA$Up&0%j^0-Z_~^pJdk=Aq51_B#02HIblgiGy2%1FpX`26Llz6%ETRo(De`eUNoSC zO~=XOBFbi>cv|B-5!`d?ipx6l`5liptn@Iy%)m9AGmA@j2lg(Zi++*fEM&ylrb9 zOa70f`HWJf;JIBJ$CE{{8|5CNR3`C?=>*LvQ|fme9Vr<=Vw_Mir=d_37v&p5z+^EW zSq-PA7Hk*Fr(}~P_6{iv-fZd6u{pl+gpSP_BPI3@`J|TK9kea^l$8UOi*#_RRM?f- z(Dzqs05f{`h)%)i-6IzaD-i6dZutEHEGzQLs-jsQ9#E1>Hs=e;D^wO$|E_t#{4U98 zh<^wXY(Lk0+_uE&ZmQ}8cMSpnvrVlY@ zxDBd^C`)i5r;<;Kz0CCrFOn zl-dj{Zo;Tz*K&ZQ7wsaC6rVC>#o4uB8rbqIeM!fp0xc-S+KasIjA@uqwrOrWJa*JX zP#hm2TT_qLd5Q!lCV}%~U6qA+2-n5P{EWgyo>nM|f>*}D*$it%pL4%X7lDZU~FmMRfplgU%R9bk1(B z4TD~nLTVJJ<(q;O70J!T*i`bNROFxlap#?&G+6CEGNFM)Puz|;=IQ)WxcWq>4bFJs!7Ib<|jAu zLea-@Pu=jVSds322Z}QGgK(Joid83tVuBE*iz!k^oA`)=B0Q%9Fm`JLcZ!m!$4RJ@ zYJFpQO*I!~N7ruXvJ;OOW9T0mHN$l`>_!_YS%kR~)%xo{G>fEhHsWyNVwgrXv2bx6 zBOAVCpVMIsZKvR&2@C32MTR_*MohM8=7gGa2FBht!~Ub3f+2DuX*o#l_=k5Bwj+!T zFsZIiyW1W-xVwp5c`V0a5Z;XG3RtJ<-Q*53f;OUSV(1iHG!aOjq_5WzH%5@TsADo# z48V0nm31br=@aazjTSFXmuLk$I~f=%+N`CpPL6pjK$uu#0c0Ob&=IVr8AJ4gbsGx2 z_fz|ECg5;tXV2N{G@FF7YSy`&T;9i`I6ZTvn6o-b!)EKv47|?1x9iVvJ362)K3Y5b zuHJ>ocTSV-(kZV{>+1S2jxoj7ud(ioJ&SQtnb@I??ubN#kjZ$`xZyYyB{SoN99x8Dip$J{eH6tUSbm(rGA< zG9s#w)+enPhgJn902cusl9grA1PP-=6VDFWft92Ck{k(DQHRz_SE`MXTF@$u4Y-l9 zZ-$bDz$ty4{OyY7M>sSpM@{+G7-m?UH;s5hnB7dG@3`G%}jDQsWd?H(Kixar%@ zCu;^bGr(v?2}iSiX%o6-VdUs#%$g@2pDwmW3liPQSrF_-jw6q@7tu5Bh+}TaXFOo+ zRAXgZXOBNt5b-`~MmSrW#jb8C&PR3jyi7RPT0M?@J-zs~Gc4>I6j|UI>691DuCC?b z;NDu{2CC49ZEnpCDQ;C^8){l@`yFqX_&5h30p|~Pa3lJSLuHxeN_RBUhB9Mmhp_EL z%q{LV;{s!V{zvUZKI~o)eYgIjNyf_)RE&rMPbfPNSW1$mW7gsdZw=+wqEu}3#2Gb< z&^@g!yn39Yp!ZC%aa71CqwH>3T{{t|Dhi>;z))-vne&z|GW_F3_eeqiiH^jTb70*Ns4A_ln}DMY&74+*p2KP znL9}&;845B*ugL!M2U~{p;^8|nOWZX!tX5b8A(Si6{tAb1Q^6VwwtN?hv~oABpknF z@+TAea;TI&7vYwwQO<>s(mBN@o9OHWS=pho^WBJqyCg4S*i@WHvVDN5 zAw*I(_V6B8gsE93G&DZov}+w$AZL*VcC#yG5>Af4;?P*9cgGB z?xUjw`jio3f#79hu;o*v3>^xERe@K^E2DT+oLG6{pd2f}recaBl9A@-TV#cqYS&mb zLlbjD7i(gR!=*P0Sa64RUA{!5wpkz@FYNfVdN`)a^;Bd{+rX+GqSdro;uk2VQHgI= zA0xR&LKdnojhuk5$!^X@BvXIT6#6UL7}V06HdaMQJ6nzP0;RF*&?C}!%~2iV0J3~B zwHlUe@5s(#9w;e!`nd{J#IuWzXJjiq}V>ctmd+}aE`u>lrzX!o19nRri3 ze&U;j-Itf|+>lpIbXCrOkbq<5C(=WVFk~GUoEFRF+sYamT~+vnrk7~o=!o|vLlJ3m z4~ICy(6~g}ZXks|s;RRsh74bhenP_=iI@{lQlSAe>Wt=?Q>`qWuJ?Q|gm4-Tgurwj zMrz#vJ?A8=BeVE`sN{9$d(~o!!_zG}OJm)SLUmLiNo9*liX>{NCY;A3@DKd>i0(9p z4CiQ|Cr(4AHYD2JhCw$N@hot|nv!Pmo;iMZ@l` zC`tV;hjrqAKl(&WBXN-(TQbs! zBfB?ahh{D&EgYOvWmvyrXhz(}Wo_x}a9|50^Fc>^bQ(u?4@E~A^b8dVtVt)zs)G{Q z047Q^_M-##6;dzRC&t%DRYb^Qx7(b!b1~8bI$?S>4~fmpIxSNSRaLT!8y_t;+}E>c z*e&W~n4s!uWrj}?m8dhYJ;^U^9B~GlXw~8NTYg7pwbfO5`QE*|_tZTmorot*G_~oT zk;(HU+oradEFq;g5HTW{5c+FJ}GdS9$nOi!2442QoXSCxSYG z3K|7>$WDLmsKs*|H$Ni^)ovcRY&{Y_&lX`k*1>Q@klGBF!miVYULqsQa}-n)bt(4;)ci43Eq)*MEfB zW4B?R)P&n%jhdKbyJ@L)TI;faB(#>C-+5@Z=VQ~yMd!*L(~?-!T2$4wC`oHLu5%H;(YhfZ$%kFIy*)9@@rmTB1qZ~VB+8Qd{ zY1T-Q`N>1&;ljFM^C$a~#189{T6u3DJZs= zA=fy=knPA(3Z0uu7sgw~MfM=~&-RRs3`h_o$8fom--V&z^{DTgAi!Z9g}dS)vu~F* zB~UH~PBQl+5#X-6Yjb00FA7a^lP=ncF=qFlLZGQXnAP^ss3Fa(BG;U30v)vFRh=8R zYUk4otkxAGIK^BjBUaZUqXHv=-_3+S^#0kR3>>L%xh`=^m-D)cGAG3&%LE6_ux%XD z{KSD`y*nr6nYyZ$3EZPjL?K`zkOP(euB);!RS0xq(#c_etp-H>~$-%hx&YCc8Ms@vx(ov!Y3cm!b$J zW>ve5vgtyPHbY7$Io?~&u*oU8hlJ&6ov8vz3fW3@B(`-J zki{zLR4z&T>oNFENNRnN%}wSaJ7P(4q@VWi-I_R@0tQYHO}6JHQb)qE-toyBKo6laU%5sdt^v{*v zyD%+sA5vO&v*@@Bl|l$QTtp&`)bgqq^#0t_tF3P;eenmMDt&c{aau%@xSV=gd$#mm zDJ_*s`=!#ezwkr967))?XaC{f`jz0R(tFQ-*N01`eyQ}_)aOd2XMbt`snTw#bm1d( z6Ua`fbm2F+aQsq9z5KKuSN@b14&TaFX=dQ#iO=RmV5XwGOf z0S+s{WC`4X)6-TnGhrE}=s*>O=<*moP?h|Ik5Y`9pok^WmxGw&pcz&e1w(I(Ex0nc z?T5!s1y#hGEbe9u$r`Fca5-TmOAj8na|rO56MSk~q0V<(z`^*Fm0kME7xZfVTD@AA zR%@>u;=JPRAW0K-7)Idi}7wUO$$79}7446PE6yk568RlMXH= zdEM(qbWeh@21RVBEF?_2R7sF4H5ZjW!9A^lKIK+HL`fRRP7wQtxUpSo^wfG751<&M zNL4#is?}&L)LMCV}%w`nMhruX1fuyeHM}6NBlrR>JLtdh;@x?4{`-S)7@P zqol4O%ygs9%+6sAcrX(6K4Nj~ML-PSea)osj9wzEg%Z~QLz&onI45DlJ^TQd4DbWQ zlTbi5K2q<9JCb`Bekvq@`uyjWJTtHBXHzzu4h^CMoz*hKk`h87_)HX=%MQ3C7H!=k z^q}6of_okPo_Ex~*l6@|mD=O>#Y}Zjo>QDg&nO_NVV@m6w@vQHyk{mPBu2dv!~~;S z&XT%2gY*`2jjr5^o*t3wD7vn$$}?ghyC6|lpeppSJtK|8?U7v`_q~;{>pw=t!LI+f z-b+&UwxoqwSvUuMcbKXst}8RjfGoG`evCV6yk5c@$h!V`5|GZd2R8Y2t>FVC*WJaX zLiVj!{Is)oYq;y9mb4gK(*D-4?}gwSlwi3t8);mXd&o*ynV8W!B`Xm>3RLM~CL z+urfhRWI3>s<;AOew@!>!=$_&b@u6JXYj8CVfTjL3;J#dg_j9cB7K^G3pm1IfAm0;uJgP?q`-#^OdC#dsB_a#uf<;2*>f<{gw9O6z28#f^gu0k zqVT|vQ`9XC6BMFo_q!J{*)j*_isDh=auUD;>`(Ehnq6qg<{%X|B zGUb&`s~BJPil&8|X_)p0yqb0Q)U(4iO_1=SJ0ld;HSZOSQ%o1rgf8mrfvGClg_6C5|T~RNqi!Pb*$=DLO5gcg~G&2bFh>Nb3D`Lv74pk)B zrkTJic%!bMY!GRaQUv$oo{j`jcbq;{tyWgli>k6Rg_jZ&k{Dt7aRYLP@dSo224mtw zLrdA~({W!E@bNl(#C9qOAuzgrLbtgEZ~My5K^Jl?Nd34CL8DN*7ls`}2mxo%e04(5-04v8^DSz9q#XwfrSj7 z4`TNzb*z-t5`v%?%2<)I)Zmm7R#SeQlr8FXyo^0*85Kxb=oNS=a@n%sP~5hBth^P> z^{nydM5${y+kD9#-5*a~T0!*K&4s|S(yZWU@Fz?OS8V47o{c@9)b95ixbWNi#mQ-qsz9OvCpOLrvi4+shdyg-vQCXlW^ zg-y|ZD~Uo#=g?PMwX5Y$(2dJej(pDMoM~}gB=|)r=x#B9%wY5S6Ft&=Yh^5*+l3~& zVI;p&q#qmXhQeBcXav5X%AbAEs9oNAr#U_Q?&fCwG=EfQbgS08Q{TK<8KJeA;5*2O z%+E6Mo@kGi8~4<#o1ST2UGI6x9_EG3e~mCX0nTt_KoGF(8CCd23OW{fJk&d;9=MTQ z4hEL3bT^O}-IHOZ&CNPRi*dF$pYS388aJo7B7eru zD;QgdjKM_1w5`Dy61W_BJU{1OF}_~4V!oRDm+;Bk#M%bYhWZ%q=_KQs9LX~h8Dyq> ztTBYPzVJyj)yLI{cO8-l9f=ZjC`PD4-!o)!w4q4lQOi8LY!Bvt4HoX$PCwwKd%RdQ z6#pQX?);Z<>5e7ySr_jq>E`k&0yV#ei}$o-KF8u6OVuyU@?}#9QL|~Wih{76wVa*6 z{Ye7vmKSz=5O~|P2_sQX+lR9#v}Z5cW*SO^FGy?43z>dT>UpV4G59lSvosnfWb@h# zh>d8o(QRn`8L#JXV&OE_ieudHM@)~l(asq)84X=EX%`OSp0sT6B`?}@^gW5f5{pYC z;Bpp1V^JJKYGIP)IJVqz8pUI|D#y82yktgrygl^mfpbqQWsW6h&JH^}=Z+Of|2gsQ zX-WNrdDkW`=JyjJ6r4>V+5T|EKv`8eNn#T5N-%hD!qtW0v>=a(ifU4E7h*4*8 z983U$&@fQ4@2eOp`6K|m!7?5MEY1^fki8g&!2$wD1g!vi-H?7Kew$+wWP`9~xJtmI~Z*^JGP%B#rudghrKxgpPwad;@P zYYwdjarF2I-Kc&4sJ-;Y&4;&F);E^#@GW}n^5Vsdjf)q{6K4c+Z+Z3Z#U3!a{xF@;O1idR>FNd}efBU0pFFYBtV3oL5(u-ZZ_p8fWf*y=mS)$IC7Ka&vb6 z>|M|5x9842?)5qSa%N2eo?B?m%`Pm=U8>QyOY^hmfM%$$&{(+CxHNmIS)*^4 zTNlqx(_4lr&H2XV#=@nG7h5&{dU@{h*$H*a5UPnRsn+GWOLH~(x-i!~GwoIk?Oxti zjmM2fquFRQ=UUBX%bS~PU41!L&DK?VcB#>7H5!de^Rx3i3v&w>7h3avt2;Y)snNRB zXf)=~cJAugF);LgIaaf+t1qYLfMKZoa@ujytN=I0rHpH7{d8 zm(C7gefi$&%l96x-M^**MHg3gulJfWH|HO3_vYVPNY=cyxzF7B^u1;O(|7xy`^;Of zZTDX~Xl!48>wf#p6L9_Z%JQ8Jr@IF;RBU+1>-aN=LG14iy|_#92@h z^0>t5eLn`R1m#+1FUG`_RX4%i3+Y~V0;L(6OiVCN&APtF1@mX8vpiwhm>+>BXwvjV z8^^TSs9&yMuD51db86R1{X_3a|JKy~v`jzSanRlMDHRIS7(_J=vvswUB*AWoa{;(qnlM4<13eZ(Njuy!t|rE1*0jb)=r>naca}C5 zRo_cKH}t8_t65n{Cf(TyI^2Wa)li|AQa7DFF9_R7+`$h?+@TD3KS^}I4fN~LbuDcR zUUz)4uGXSBMV`eWT@H5t#+sU&n^oWJAW&WEhyL4v_r^{2srxI}RX^wlo%m?#Sd6+@ zoGB_iq){j8wTImS^HUV3ZS){GfydA=jWp)I!M%lF@j}uj%Txtn&63bZ61HKD`TR(3 zZEUQqtIPSpyy0)F`zvQcJ?%KC6Tq|K4it{Toa?JX)R_ywA@k~WSBu~=^Ocr|!@yYb zZ!BMXcz=EQo~SB16X6K56W?81T3?rU-;Sa_{y!e}{I}meEs*u)>-Uy79=^8xX#sQ3 z3vWdIb-xq)>1=ELsJ|WEPFl0Ai>-y$<=N)vP74@5%JQ8XYj;=fYzXLPqdrUjH5-d_ zbF-S0Z$};%ePyX_mJf>XxxHbjk18ccra6n$$S7CUNK>^rF{*9!vz~Y4$BrWEMp+p< z<0>|pNG@{bsG@O7OOKdpgy)CHqi^Uod~UOMjmD}dpB} z^=6}yS3?YMBGV_M)a@3&Kbuj{E?`#c8KQS+4l}@cKr?x*E90`ly$Fs>1W@C<)un?v za@WceRAZ9{P6h@Wo&9JSrirx#Yr7FF)SV#nvLhhO8{IC{>6ySl!L?_+!9cno#Eii1 z?C3rxCMHj3%Vi8_j@~rtje4`zXw1%KOla_68bv3YdmiiZ!`+#nzYDq?50-THBpHEa zG2oAXLC+GFi6bM5+=4Qhs@)_lKx5vH4p{@K&+b71TV#Z@l^@J|V?6@>JmVOk$Z19b zV?|nbLZmpemvsXmUbwfiB6fp@PJpUA<2>Ocvt7DOI)q`_T`)wKro+UKNl4(!*k#^Q zyKyuev=8GT^+#8x8hA-^7{%T8z)$wQ_~J#k3o!<<4M*$r(BG~N0}@OqcPl48wE>#5 zh1eby>yI1=7<`u+mo69CK-NBlk(IRp9pN&o4M709j1HH-gx|2^YDR`0;@s zD|U^iNhFILtY<~5^{TPdNo0sWZN=6YdAiW5Hy5xDvo?M9^_53xi2yteHYdW$tkY5PI(*J=o_n(s{KAb6O-h6GJn=;YBku8 zqm5wSl#@_Z9gdJx>(>@3w9Z)+ zRRe2AH5+r6E-uW|d26+LjWC!hPvH=~@_UKjmTqk2Eg6n8-xL<$zPFqz=5nY+9tHEXOPAfP^R^a(_($@h)>@F3_T^xyZ7 z)PtGSkNdbpYbFTsgU%3}ZEWe*bnYI{+N#-VQfU+Z>(XV1qWJKPp$3AN*19o_bdZ)} zZ?)toN&S8s$f};V?f2SvCY_j)_Opre%ai8`{_v2BIYU~E;SYTD49gVBJaCP>X*DF) zAuU^0V8en}n7uM>azO7y;JyNA@A8ss)|Ii_rL50HPO%yf#|m5PO1KueNMe;l!??qo zn==A}e$F$%>MC*!ire9y_(AL++__Ye6Eh_U4X(XcyPh==(fE+O8Yg>sk+XR$(%6J26Mo4c zb8ZJyXiD@v4G?#0l$_1x<@&0oP7w-DWLotQwandOSe-;^iEEZoF9ob;m>lJlMv^uqi4#F0w>0=ypED1K$ zbTRdDykKc>t%@x+PFi&wLPs1O#kXTGN#kKB9mc+sioq+!*eE)9C2V3sL=<-AMcZu5 z%r{!z^RK)DfmkE4*&FJ>MgN&~a{xdI3%*(PAW_A|qeit{`6E7|qsg zklJ>ws>VU>`Y@9D+GS4VBC8x%knw?obx^rW9xccU+Z+3V0Znsuu?;pMW=GtMrbm#TmTS>c27M34U?nS#f zx6o`D*O8N?4DB2&IKBp4%+owVCPS@#wsbleMaiBQ`&}N)y*mf5ENnD8yBE`=H#?vH zRCwd^or~9&2lIZbaq#-9pV~NR++2O@=-}4!@J=1_mgN{1kPY{_Dt&{a3%@(JgL@208KXVd2+1_0Dho}y#@WfugqSC zmr3n)chW~scoZOThBE<0ZyWlbcqpLY?Jsp^dl3qT!B3moUIfIj^;vS;ivSsNo;ta` z2+Bxy`^2QWSXVdhtWUh7Lwd1y2w(7lb|eu*5l3?Cif*KRP!uLKCu$QaqOq7pUL1Qz zs=|=C{)HSy=lZ1bwiB@Au&sfrTTE9HxU3uv&9RnVYcHGTVv9%8JNLHZf3W2ss zb?5HJ@*?gEKs9P75*NjuxZ3ac9r&xWqmOIH@B%3R0iEk{Wzl3ej+c5UC_)pCm2W4U@gN4`mz*KbMmRuAp=t*pl z7h53^g)Lup3lWv=2VoQ|Ecqhts#w^d8FSGaTC(A~b| zaJbL~0RtBf%~e~Ky|_O=ml+4Oth)Q6)C3!s(hCmR^P!UR6pxNva|h&!08b0<3#$D1 z()K|fRTxrc}<{v_5+6G?6OhdiaNwla{H(h zAEBYfzQ4{}m$VT~rk;rP@_4Mx_~;c{HD7OHIu=Dbtt+L#f}f&s<#V zAQKspg4~2l+#a_ED6dDiIub0Y_fr^a1icvg^u*;)ukKRR!Axpd2J^oF*T0 zbI;v52B>=uLVmXywiS($&Z!L}wp}tQwNCneU>+S`P z9mAG;&`(rdCiH3uYjq%adDZV9w|3dgAU#N$MZfa0YR)e#EVP>Q&Ki=r&8#2>;I1C@ zm`x+lSp;>}oL{~6l8SvMTbC}e5>e+81)0mIBnw7+ifA~JPm-wT*Sf?0pq@TX^9f>r zLyPwfFCg0*g_Vt!id+N2iq4*xUAK$0>t^Q6i5~hP@>?Wt*WnEALZ|oI=~nzgmvj_0 zl9U#{DNA3Uc)>njLsBcW+@i|b?dl-#oH#gdP1fN(_+F}-4N8Pa0BB|a7`eCg!e-nK zyj~lb42+ZQU2>Y#o#i(-6fVbI*LhC1jr~T~^r&RucW@DjJ_4xHy*L`~?$Lc^COuaW zrj(9+uZr`Yl&6r2(DP{pJ1rsp;2;*eH<#-4f8+g{(ZwtqyLKe@n}f@6JM>SF2F|T; z`1R5l|LUxGaH%@Tu3_qrB}c(_$JmZCZlR^ymL0zRrqudgbch(UOdaEqj77vfe>D~Z z3*UZIHZvp-Jh!tm4C&y3$a<4zZb6OB$&2hd>xwtQK-rX;M1mkKxKFsnrZw-6z_A&31w>9 z#{2*p-87*~li=R)wFDZ8YjoyVRm=RPR?y^i9Q$6~xUb61)}@B+gnn052DO%L1ia(JMsG!P7na(1T7h;Zc=Su^DsKkcw*AT^BW z+9*A8v?Ei=LaHMu;DB1CBVTzclAWB42Yk<%QzsGsp1&I;C^c(SedU*0v(9IP>Oo}3 zO?G7tXC^%H5@->1=s3MI2zrTbs4%@ab}^mst#$o_8RjkP#~BBXSVHrqVIzZ!r9Axv z(&s5g8N{~T(%~*H0`NmsUYwh2%+1*mE*T_5VS<^FIZugPHdi1+s_X=l#IqodCE=4p2!uKX9wRd; z{G}5Z=%5~s^Dmwyg~1XLssQq%H3wmEe5%zMawMuuMHhN8Q+|oY0cxKW{S5Y3CbIFU ziAi4lljL+_Ci!f*4QlavWOX$$nS1+K*&&vK1PHXH`w90TacP34XDSbMq zV+SIykK;!P-6I6SffdoyxWYjz^^-?XEqHAVqp2JA-A7_u%Z z960#644R}_*FTUyC)T1QMNuIaM%VA13C61()mE1$UhM|}(`;Ovc(w06#&500#Cj87 z8WZa+Je!@LSf5pGHFt4heNMGiYhmIR8Whxxo4AEH3KA10ZUI7JiowJ!04+=wm{>tS zPpHP)#0qdTd&(0lz$mjjJh1{y>^|?r%0+qO($$HH2W!3`Z%yzO!^|+z87hoTEOCa? z${Kh^`^SxmWyy5{-x#xOV$CEiy{2=Ph)7@_&Z}Y!&XiX*BJhqCS!{n(Vi^kcA81Ks zB1YOm&qyuG^hfhziFInASl6iLP`sE?wxLQ=2zIa|kftmGiYjfy(Kzw8?3C}>_m2{m z!*+C|N#ZAr?Nk6UE(3>7Kp^w$`rSLPtlX6C)#8C&8NZDTavM;Y0-@k2_5n`$b|!hu z;m15(iifd!_lDlJmLvH&9eJF2O$H3Bq-38An6y7QPB-SfZfaf3btix}IwYs*i#izL zCYuCEVB{PKc(QOThQGA7LwHX;V`NSZBZ$9GrI zh>Z`7`%)u*+_i2})W1c1>p5dt7CvoW4) z+!7#cv(P4o23bStJ`3{L$<;RJSX{wWhe0>pTjaf7ka6duq0V=z$K^ zOtVOaNJ1KMokTr@(pyT|Urh}y`dJ5IsBc|-g`S9U$xp~Gqn~ZRdeiC1Po_t=ooL~k z#X|Ci_QJ+ZzcX+dv>7k=Nt%a;N%B&Uj{Y!%G6T|MG2>u!oX~eLA4UAisAJ&r%W)e& zjQAEpFwTxkzM@n`Vu?sH$d{D5f;X*)4Cc`esau^TR|Z8O=KAF*%NPjfsVX%(sB>18 zk^mKOV5F=R`)@ROnzS?3m2&4wB9Q3kzZ8}_PhlyUs9a?!m&Bkgt?U0^m6j5^ zoVT`=Lsls+HTlGgOF4avt1bmmlMVKewBX96(AOw9^(Cn;y#K!9&`CbGOvK_)mCC z?Wdo;MO$h=CR=J_szpC%fM7fA2cL5^QZc1?C-O<1VQMw!=bCCl_Q&;JJc?AV-Mjnd zr`7uM#{IQpH{@l5l#1V}C{#z$Fh;cnKMuVf!YM(=S5;G-bar-%t7*`thuubP+9Y4v z#orD>FFvB&34%E2c`1q}WVdT?2jTFsqGZRj=1JMDp?r!TQiZsdUk~7GoJ(m^7nHKy zE-H1#^sF;=Thu8MCqKZkQeLJRtNqrht93suK7qxRQih>3H~wSTO<*MPl-rx-MLKD< z=>Tv6~=|4 z&X%;$s(}Sw=By9Aoy{^O^06Fo7-=1(nHxukbd?VOZv_)=qNC#) zVGNm=>9~d%j*X;_Yjsijyp(BS7k6i`A9dABkDVHuEc#x=z3cT6iTEK@@tuDP8;CQ=C-OrE@mW2S|y-0p1#?!rAxjw_nehUZR6_%8?`oaekZ~f&KQR zGrZ2xzfYHtzK_hV%pkwySzVdlEn)4qGi7uMw6kP$$)`-U-kvFyN{Ju$cjHGT{=6yw z`&6k^dR4xEs8lN5lkXocl}fAf9dAFB?;kCdO84dabI$J*=s|w}$q$uEZAliK={-PvuJkPanJAT>`2w%=2oTpS#KXfw zf_Qj%xO#es!0p2yDwUr7bI+Da7Fd$(5wIlLdzc5t1N{g{^HKa$L`r~t24Ek2r33b( zhlhu?Btqkb3X-ocm1wzqFV;+{M9bxe{nk?J;{4*#-u(UT*Dk-ha_4h5F28Zh zyZp-S#;cbXZr;Ap-?`mN_a5K#FYh;IR|o4$?GK~iZ=85QqJ|oWjb^j?bg3j)$30al zHGxax>wwEgfo+_4rBdnXr-1HLPnG_=dp}Sq|I)_dg?j4!<{$srzyHS{|K{4qI*0%3 z@A^YO|6Bjkw|>({E_}y#{;|*g&VT>yKk?81hs_^)^;7@!tG@8U^Vk0HuYUQ@U3h2r zhkwuXXI}WD8&`hhcYOEGGf(|rfBBcc@}JLq%lCZO{o8-y;g7s}_|FE-pM3WF|JC39 z$^ZVX-}@K;>5pCd&cFZWUwih=zxq9Y@(=y>zt#`_>5B{h&A<7i`fXGH?XAE4_rCiN zeD(kG2M(uy_rLqG?|Ap=OF#E-zU^yf%m45vr&phOPld1jNc=Bz_2*mj)j$6| z-KqJxm;UsF#$ND0|C4Y3TR(OC&M$oJx9)tecl$%1|K%UN_T2CLj?xR?`k6obAO6h# zuRi*VfBfA~efN*f@Bh?)_?Dj--v7bBQ~B|KwYcp4zB^y_ufOiwfBXOR8^7yc{E6>q zzWMGS|DmFZ`G}dA54jUF-&^X;udnZ1{M@C-J1^aQ>Du<4!$;mVH1Hb+ng06E{_=(XjX7w9C^5LKR zhW}^7i6{kEU^cmM9^zvH=UZ~x-g{ON0d>|g%Z|NgW8;NFjX>+gJdq50l-f7#ye zu7Ce8|CRptU4Qy#fALTM!NZ^arGFGo{ODh4{Jzqc{h2p@>L-5qBZGhOV=J?N@3Y_j z{Xbp%$N%8zkNw_1|KVr<#NTcG$^UooAOFQK0}%xIa_`)=RS*w)xqtJTs-Bb6C&OKNG_qs`r|8IK*)R99Vf*GzX+PgS)v zG7d{ZSl-JcW(gsA1W16y5Xc@jLkt+g;*i84f&2mT5(o)P!jgo%5Qyjh&bjwi-KwsZ zH1aqk|Bq%qb*t*`_ndRjIrl7g{{0(2f9U_^q%84 z-}ooLvE%lK`VO4=o3B3B{?-o`zkJuLr$bTHa^L@7&|MBQ2?|Jkme))CZ z`#&$N%%`sTjbBepzTwzIFL}qG_Wav(zS_R;ro9}^0+rHkewKU_4kAUt&u@0l5ARZx zmouD$)2c&JfCeD80X^)1O;vUS-tB>3fQ}u#iZTT8VPkRQ z{XpaJ*UpTl^!CsG$vY06y8d6Xm49Bj^0N2*V6Xmz-<*2S!j7wp$FKWpd*?wT=iSzJ>?i;D>fsOm z%x~WEjgzOZX#d2Uw80m@=ITFEp17{-1@Fy1{KQcpY1*4U_|RMDeoKAJ=x@E{_y6|# zsU7FP;6Amd!#n=@7vB4CzrUI`e|Pv3A6t6X&bL4Q*{^))>p%FF^1`b>bZhxn z|Lj{oc;3(c;SC?W)A;bO|1bUE<1ee9d!_eN-}v%F|M-D_|C@(i@zuq(asBrH@&38P zl~3M!AEDpc*ZST0G_Lil;yDNWV>bGC8a_pO*Xe{sf_%FTf9d9}E3orS=uYT*t zKKtH@udV&gLl3+&pS2Is-+A6IeE(VI2Y;t`{knfSw)b=Y&!@lkkDuB1)yZ4F_~NHN z^V~b1x8sAWpZLf>Uh}C>cHcI7@e7~#isc{w=O^wM?t1%!U)2lG{hoXJ%e}X!6-9Zm^3{>lbmOz-PyEx4 zKYts2({pYe)&D#-@TJdv=iR^e#(R#O{_g8ul|J(1+kf^i{`#YreJ{21??1Qi$(6r7 za^Hh%ZSQ>6-odfgJ@!!L&u)3}2UCB1?5|(2_C5RkxBc&XpB%dOOF#empKiSLP2`tv zSa^Ioch^+%FYCA5IQ^}|AA8*gzx*qYzVhHdk1bvL<@TTZ?uY-!2fl}c_`*c`+Fu_l zzx~F)9{Kz$5B<{@pG!YkKJhQVvijWpHUIX4 zS3Unb>DOOgdfOA)5G5i}7 zkA3vnH|0|ucN{qJ<=Vgh&rkpA``^6qFaPthE6j-9P=b@z~qm=5)RGW#gw_ z-}`v-8;?K!mB0V>JAdg5@A~Zz+`s=*cRcZ_xjWik@$qk3ADm6)o_b;Vz^Ny{{*&Ju zO25GU$jiPy)$AAXrR z@P^&Luy`LZ}?vy{`Jlu`!spq(e9h=C;sd&y5IWb18Yyb@1Z~Whu`bGefLA3 z$dq1i-K)EQ?i;tSJ-q8XZ+-5*m;Cm}-@D_?)Zy=(oE|y&uHF+@{o7&l6S>8o{qUD6 zNA~^WOP>7X=MFdC|IWvrXI*I=|M-n}n4cRT`MKwI?0x8?@4n~m=RW6~H+;D7?!%uy z^4R-E#Uf!Wxswm3kilRW7-S`~%^xh?WeA}Ts)zf~-l5#-V55M*-DF@nz zXO$%-1+swxME9u!P3^wBHHsxBKmPMA{#1YM(~N4{bvqa31*Ww}r>w;kVxz zZog}^TzN2|=^Ia?4LgWw90%Vi8b|phwtXww{w2!%FeC$p&4FcY0~T{_Z4E63#Hsgg zzH9LLZme+r<-l;Be|abF{LT}sz(b0nT(6vebDPqy)HFR&bIXU;Osiy{yG=#cg1e^1 z)zL}y$e21ku1-y{1jQ3g91r-Y(p{^KD(q`R={SQ_3#oeD_o5 zdz9;x^F3|*mGeFAJC*a@Z~OZ;B9 zmtH{FOYur=0L|@CQBmXy&>>bh$t$Q$720rAawQlURO&{{P>Xul6`+kYHE<*?Q3s@h zK1ERu@|he_6y;X_J&VuhhlMB%fZx}qC_T4=KmtRWUGG2IS}syx*O#0<)GVHwAB>#!V_R~J}zlCJ=Ko>b~*ZqO|oWO4~jL#BC^p?^TrU`aVV3uP8k`E(HpBIsCc;e!jZ`-IQ^h}jD0C}5`${mwQ_{ftXJC=WYk@bd6!DD%UnqCC>B^s<`W zy*J)?Kzy&A`K`r6h`dihX?WL5nQBE@VSnFK5u}q{--a2&WcIKb z!K8O{<{pY%4zuM4*t_5XUw}jWgn^F<{v0;tJ+Cq$tWQQu{#504L$6 zUs06r^YQ?4U*X?xQxxS1n1rGzx5HlWao(XQ%ENr_1B#+F`1gdgo`Z^_Eb?}eilRKm zzXQyDhtGXjQItpccOYeA-3}{?G6oIf>7gh`_?nL?it?9y%s`J1@HWR4MIn3)6EHUZ z98RIHaQM7aQIsF&?Ev%j&%B+Zuy(MqilRJQQIsX#&T|w+8RYHUr6|fz@b4g9l==5b zmy6`>diUALnI&`qQKfKiUK$aKT815e4X!66y;NZ99%j4%e+ipQIw_Ra!pU%$74U9<*?7#+~(iNdfkihliVs83E>p{}kh4g$zuJMSFY~cYrZ#Ug{`^(^b&sNuOLl^(2KX6sVo|lry#{r4MeN+xiN9^| zov`Ql zb$m$G>L$L9TTDEqRUcZg+%vt#gaoHv^9~Ra;&lYi0=ro=Ek3|dkzhAl7C|1^(;7(q_OaZSq13OoA()QhsMR%E!q(#emF-Z#efSd>crY%OjIlTV`^fTR2ZTiU zD3u57Pdh671pnBX;_^!8(rgy_|DKXoS}!#W zV;vNOG3Az{jPwkQb?5T4iLlC>eK-b1;`jPfQP=A>4-IXC*x6}_(8q}uApqFYgC;7*023&ewPKbxL)SO`7vEzb2La$CEx3F~ zD_YR0Bqbc*fwB?EW_u>nQ^#|ee4#ju0(BX{D6BXA&cendPLTS8Xe3WheVP zObXv|E4y%kPtamBL6ggoZOXA&Qg~}1#FRCMdX+M@oifEE3^q$5hW=u1pB8q+(ZYPY zpoI)R1Svd8O9{}&7|4w_>cq9H4KR2{3PpHWYNV7bx;Y3rdev?~zkN=h-#8E&HeAYzi0QA*x?=i#=28D30M%wpkb=7YiN-;QApsT!;-3jv zLSSg1SZC68R-*+Vb2H%uBGiaC0UHCio6tlP=d?TM#zg+9UAcxSpL*aHK-NpG(UQhR$a_3+`5UOqt-?ztL>&5KdXOtU}M)WGx05v@7tZ3ZbsN~pd5bJq> z0JcH6YB-ohSWx(zPTKYvmnWyztROkg6kE_hhZfdKO5%nrxiJh%$OGJ_x-vC962Vq~ zgF`sGwT(e6^h16Wo0k#Pc}=H%)0rECq=1JU&eSL*ie6XDvZQ!p*=AJI5BE038uc_F z3jLf=5aMZ0nR+VePwEZVvukiBc?l>yXe8kyA?ggem7p4gq*BSykx{0^Xd)gHfnK7$+VK7_T^8^6>>j0KoTn?I_soAJflP&xDz~^ z1=B+a)hjmXyFWCI2mDk=0FhE{9xk5!=$MDWo%0prj(JK%cPb=xFR?@dx1-uN$#tv_-c>MB6OX4Fhq|tzz z1nSgG7vfF3!2b#*ASBoFhrM~D;Zzf%krflq2<;iCEpS4}WE0PciIz-VhjN1?L$;+r zfb5)FTE-js4!z<4e-`MvhR5fz#B?@)9D0Hhz~cEOMpMIh_ues|nHL2Dwy{kS%v>)f zT|r*KKVy0z*$6&jr;Om(UV3fQJ)4_kms?o_QvzR~#{*?H?sO^+IRkYd*>IgC zMt)3MWz#yBta!DmtOoL-J*4*)p#H|@D|H{#!8W29)Nc^?SGs9g>&U*r7m115fe*G1 z^IdW5(_I4Qp)&#X^P1(;3z<3g09xIJ zs;8AIXmx;S#L#HXwuo2JJOWWA zTfuQUrorLC8I2=0;toZHM0#G)t4D`l~(O~japu>soNI2EC*Yp)*@Go62PN1 z2w+9sK=iU2{E8QhjLaI`HTf`_sM=+Fux^1FRg5Lmvn;y^avq58&sGK0hiOdESct~N zstBaAlJP;4iXbS4WCLU3k-i~yhzUtClm{?I<+&ooeWfry5csM3EH1W6h=et22o8Y! zwLHq%k6<@kr8J6U+E*`)f z$jQE`#f9nRY@wK*p3Y_R%;s9REu&$EE-yPlqX`vm@+-{EEuJh+9m`A|FU~CHipxvW z=|U#d05HIUj`|H;9d2MIGo8t$3)w|vEJWAf_|;VN+HlQWW;UBIG}o1lqQRTxz+O== zxL+0h$acwHj;)_@jS^Jx2MJeDlj(e>2p3P81!nWj*C#6tGBBR4A-@YcC0N5Gw04CU zfZy6ux^N8kP&5TLxMIE?DP|Mzuk?KSUKsk+axRxyC=_#$yP8StNho1CkzjyWw?8zV4q?2tC0mg@3Zk9w98PK!R6LQ8~0~Vme11_)E4K>`Dmk zlh?`pY!(khB`DVDpyNv1Bn5a(aJ#1MP|4-z=37{5^lJWixV z*$}3w#5WiXZ)mbrEspIf;WQyq4p2fRFz(2UD3+;2AY-H;qnqTNdCf?$O8WcpXq=h4D3C1^Gdv1k z)l$}NR}wO{6UW+axBz8~ok1est=rZrb-Z&BBukLyls0Eu<+NqwsqRoO?>VMbUUsQb zu=8fwDpcs*`Nf5kv{bOqQ0wsU$YCI8y?3816q(H}4AgHqAY$Me&hE2&P}vV0hOZOa zBSwN3-(jZwL%SHYi}j~yL;vY!?a%Ki;}Uj5S2_S}h&|dW07o z85$bj)V4N&4wYOmd~x)Wp_ku2w_is>%~H**Y1OK&Czvj9(6t8_7MC)JQ*+bBrCeriG0n_yb-TV^*BozM zHqm1@7yFk^6^<<~EH6wh&&*_U484O2G8P7wY{=^SC>SRX=l3zxgU=Xw_^wz+p;WLA62d}M`9w{#H1IUEfDMWfSkc=+WuVbQ zT;(tk!ru*dAQp)yhDTKVB}_w_5AdOnZA{;A9}9s>EQp5c)+sd-B^$Q&(3)ATf^1E^HF(FZor$B>ZtLYeMX@Bf zfPpc%4TrjrJR?z~uB(-)OEiZP%l069nYK<1a;Vhsh^|@0p+-Xt0DQAdYn_x#kM|^9 zjl)kOd|j`vlm+u4UDQ8_*Yf^5@ZBkv9ZjdjI(1CjP)Takg~jqJjatdl%qm574p5IZ zYJfR7C>~6!0q2Qjx)oTwMjh8HHRKX)#iI^}2zM(D59~LHYnCmo+H{i-gJAH~bccUG z0|3bR&VD3-fFDiQeJcg{an@>vN^a-H!BGNp=?3*I#bcQqJ5$n2OA?ZCJS`(7WAe=&45 zHI~q-b<@HNvv#8d`ibV6(!s&^N_+&-uH(ApgaMWsObT0BDkW#~}vU@F$YPG0sId3y!4Z2-!+X&m8 z1#8v3QAjdl&RE|86`fNVMv3E11UX>7sV!ax`r~Fi#Dr8Q?wze4S-p1>?-=)I=F<5>cFIQw=xz_K zYOZJME`>P#@{zI&3_7YbVc7N@N-ptqiUH#48W`+=`Z=AIgDXVO2tI~E-InA#)>XV%7q5y5O{E2S z3zxwyLiCHEbN}erP)fyLYm}R-fgI95F+4P+;x7Rkt!&xQGbph033VJORAOjq6tUDz z@eyZ0V520IQi+6ey@YVE!m>?=i41d0dU&QmpcyfcMt!)Y-5hhW5j3iEd}sn0(*2pa z%sgCqoy<%I*HE;IN`ZigM6ZC}!W|Ic)5rI~WNs!FNpA`Gja909wqw?kyeIH^ka;}u zc-vk+`{Ix`%@w4)b%Cxi#$c!$B@I_AnN`zU4=fVIpOyi-7Y#Bj*6NyPvKJ9O4DV;q zlo7M_^$#!J0>(C2G6c$4R0!{_N?_aL5Eh=R_)92YHaJl4zIY3Uhb*5r0`U0_09ba^ z?G-GrjSjxu3yag4VrJn4G}ueef%AspXlnrkw_%h4CMVf-F9|1U5tOr9J#d-zkG?kF zGW6q21d2GdF}F1kTbs`!$p`g?M>7gRnG*r7nY^Rf4zOQxFilOevPAr-@d?#6^Byh$eCciO#?)}D2s%* zLX1J>IUo!)#&YSc*j0l%Zqz`{?=5^1z~e2d;89H(btm(iZGley``}yCYKOsFtFCG5 zEJRWS)%wPV#=$n5VH=a-nlOm#=r;mM>+#dPS3eGY`6m{L4^jVJ}TRie~2A~4$8+S*{q?F3c2Gud2bX7OG~ zy$1spEy#!2W&tC@^4lj`>G8m*7UZ|bd4c!IK?8f%XeogsWyjrA>~Yr@XPU@YMmp-m zB({&xm&PIVAufmU4rO#k$qD#yj?waknXnIK);nH>l6m_6MiB==h2pMj9oMl2;sjW8GT0R%m_qug8*Otp$?N7 z8A_$#X$qb)kYrO2;?Skan?#|5OPy(;CQlbGWRye-^17CXc6;dBrW0m>w*Y8M;2Zs| zK!}vnwj5NZV|WL6R8$B~B?ni$?#h)`^@;H^+vz>i9Xhgl)QELoU+9YAC}sxodEe&hQlG#v^M5(@yD z4i68j&<&uP{hz!c3@h0#AXa|9r6eh{(sF>fTEnG{nty4wll>j$fcNz?ENa04$NLIO zH)5Vpw>k2!~ph%XJUB) zwmFC(XuqMQrB~R^FyvTu#Y`?cn=WLExk7#^bnVc!;+SR4qrthdxo;DMVgy-oFEhYM z@+N%b>Ec(=fIU0>dxV!mCK*M+Pye8SGf42EyZAi*FQP@DlLpm)LodmU4xuR%I@MP};l<<9OraJ>Dwp6H8U?3@ueP{ft|onj;oLbv-cN zVibuj?e;PIia5;vE5Y@$)&**7mVEU<7Ea{&t%BwNR|^4DstM1mQMgdBOQ)$0rbQmr z;YNCpq^niHP)IufVy)>yWQG;nsZlr;b*;)giNPO%fcZ{Ea}02iXLl6%Sl4RQ(J+W4 z#D9b+NL8w>QuelD*JzV$%%(87Y8q5lld`{M^${=0&^pFGX=KPH2bnz*p_bh!R|wA4 zv(e%RqfQ{Jzp6Q=-GEpVOgDwN9r0P-cx$nS#C(G5e5sEd6miKRO}4ZiF2tHWwO+qgu&cZE^1$!zd$D&jQh@VWf+tO{2g=4j&#IO+aW#2>1;?1pWIy;NA6ZQBZF-VVwacf*k?`V zlmmvBXh945IzNn5ggfzPA&K$ZWYpO*AR2`41pPkZS1Jx;M}~%uG)un2oTnaET^_cm zNvLL=dI*Yq#1wRddO8~kzG+2fqH$wjVS}M}ol=~#**B!a##baw{&81wb za?kqYTJ`QznG>`ya^J*~Q_d}{O%6?r9T_=$a(bzp1sVAA*=%7hJz2~xE*3(3%g(at zRkc#Uwsa_Pv;$kROU$^c1+mmP#)wcj``DVEC*$qdhC~|@!G`~$C;55>V zOI58Dxd7S}nSfxZ7XSqzHh>K`4(Uw0)gmI)M|Eg?-e@K)G8ae+@R)-u4iHsxArm=> zR>`8F#rcKolbY%NI#F;C_h5!zlA+Ve}ocM zHQ6i#5RRMo`RFKY)DxsXpl|^mvey9*)(?p&n8({qo4_#8Esj!1xIWO5aJ6H&RiU+S zAH{r3-O~$sUnjS-Y-?-Ux@H!N511v~%}e){rKV9){1)6F;CHwM(J zZr5s*CfRC)NEfcp_DR>(air@JLAtPULAvH7P2coFKIBppVhE5w*9^#IqeDnl)cZk= z6|?G5a5!uxbCm{?x$s0K4q}sw0PbkO6&pS&3RE0|`3=VlT!j;Ny}$fX;W%=xqDz}!pE4?@&zf>~c79%s-BfH>HT9G0aE?1_L?A}P$} z$sxFUsDZ^Z1X_e-0MxjRH*pYUjS+QxbOicjl0*!}O~Bw0e~yl_^ffRE8Ly7QD1ug} zfk#-(6^@Sc@-PHU`*VL^B4KE51x+6M21psTkS3nWCszShHqj&D*~eb^M@TsN z4d{f9UqrxUvk*;sl)+>n!7lW_O;2~fuoZYCooXBS-G9ZO$Sc3H9ouIfF zWGL5!wE>?1DfYxx018fBgpH7)2XSw`WfbTxMb2;Nd%#~kH9yUx4Pd$^9-M&XWbDxD z^%D}(9Tw*KYBE`Y2xW$?`!R!}4oji{$VsDQeuv?^qmOPx*xHq& zu{;(z+tAkGwD*T8zNo3e)X?AvfF&$_{6%euMPtcJ)zrw~VaX@TAMN%@;TFHjXq*Y34nsWx7L8$>0OgKObMYSFjwxgs_Gj@mzB#Xxy#QEW1hlY)eOTD=~c z>Sln}YO(>j39{^62+iVi#%7T81ny8#8YMK&5$dB7Bur96ETl`A$Ziz0fup$U!&HPA zVAGK!X=Erh?4L+jU;`dd-9FR51yWu2T!Z3?Rdd5Or9R)#+~pPBLYGwu4WPN zK%4;+-1BIzYr39hp|rgho+SK7+b1;F0ilT|?|7W26bN@B$jvdkM*S=tHstBxft|z2 z0K%2ShMMeM!?SD5Fzgu)C`-hkar*?5ppVFGV9@Z@4N;$X8NK0^SP$;N^-IT^n52YE@Rjm+wScSDq>uyM`aV zP7)T`xT*Np*bBK;R)|D0Ym#vHq7djM#diXMG>YenE4H(yIR-W0n?%3i$8#DG!>Cwy>~m(2&lY|X zA~IG|#KsENQzZvXORqKznJ9$T&c)@F%CQHLGSs4>B0d~Ejfm-2x1v>W1Vm^k9t5x0 z)hZn2J^X<_D@d+k=sPrK>l71?9<~1FMwLRrYDP#?LJZg@}T?dzTi7V zdBNSl;CTn31fCFS0m^nkYziI#k(b-BU6C(WYFAcP$e}l{m`_g~%PwS!bD4B*A-gb( zlaMNg#I%v2Ayn`-*NO~JuEhc%UES2t$;I6942!79Ck6bySgelJFvgC&sYShFAv>R0 zT$YCl7sjHxWQ)$N%y}Oz3UPyVUPu<5!rQ!;xo^kpv>bkfMf_w%V>VeX+9?8G^z!22 zeU{_I$@{j8$03A)NV_G69qj~P1Ozo+Hqx~0EY^|FW7Ly<)04$~VKJAU%@hl#mJot^ z1=ywz%fc&PD(t}L*QY08Fj5UU`f3RNDl%$WamU3 zEUQ3j?Mh<8_CTx^#n@w!D6$t+CywTrG$^^BH|W0+jzpVF!acmIQ3~^#U_J>tzF0HL zj#ihY!tM$+;bm%>4L8X;kZ&B=lTs|Z`s|4G$x^S_jxjViGB}i| zm)RqCXmEIND6;*Nv3>LfEY_-4Jww;|hdK_SqRy<@4m0RuFSpMNUmquQU%i8cAY+Rl zc;GC~mf1#w-KQ|@0t4repA!ND>L=0uDw--Y!ZWi@2DN%!x(Hzrx?;7E@ysgULF76j zR#+`J8VmckC_EPypEGa(F{()x(^~Rvh@{~qL^|Uj`3a8*#JM3*sO2*`H~<4NH+U!L zVB9-D>;|hW4U_PA8G_)(b_;|}C2(5u?gCP(5}>c)$LW0j8wRRvqbD@cSB zJcIr8;!S4~3@=)_sSq0`oT0q=rV{)}45FU3C?O6%SPeGTCNYDpA?LzFnUaC~<8K*d zQ~4(!mH*bKW@_*i%S6O{^m!AGZ&;v(nBPkXL+KDGZ%z!b%_uChmU;;h)G2j1)a=uv zW3gQZJ>ly(6bc9U5f!jFiB)THm1DF7sI@|95ILAt(x1;yx6tzQ-8D*ER(YXs5L^Qs zyI6!!VoHz^Khp9VPS(h@E1*q>)A*{Su-7uJm1^UhQ5uN}!XnOD=CBKQ8bRrLwNW;$ z;E?X(55ni{>-aefpD{X}cy|RUh8E8X==Tfr?iPdC{?TJ{KcV1p9V6r!NgAi7{ zy+MRl|K6xuQrjUonO4W9E%ineMax_P$afbECpz!o`CT$92|-_7<=d`5Xm*+pKM>;p=P=_819#xYJCEy_tL zQX*J3kxCs=@t25x5_kAvPLz%KM+r71T~!nB!gXVudGQfcK#LlH625D}ZNPChcwsvr zBMhS7AGJikwopW~YsEcrb96cokgvNtGdFi?Cc98vfD&B(a`dEPB!$o=}{@6ZB-4u6cA>xOL z<^@j8#5pLVNX5&XlYzcEt z;Wu&99ayli63@{qn&VRMXv13>uayqp3Z$MoC#VC7fsc-ZHU`Go6oHowRn{c3Cs26r z{HgpsbG`tMBgJuzN+aD98kbZ}h|)nd*^Xv6Sh0)QK&{JIXH9MjtVel(J^q?NyiVaxD3sou`Y@a0Q5e$(TmS9e+6tdl)o}kJ}NS>i6{7DP_9C)y}oFI zE9G~vi*qOcZ5su z*omfP*^pK0sqXXV&!2CH99o-}RSsMh@Zt#wSs)xk!Q19f{FgPhe?T-TvGPN8=rnog^ zFbIMU=bi%523!lFY!!5OjypiKGPQJ&g}|y1qtRI=jdEMqYvhdBqBFKkC{&3E$S&B_ zN>=T%8MZBCYbtYRG3$-5V~B1TaaF!-c)Q2nF@r&z7*LncJAt{pp1{&jnGl{r7NP)~ zv0T$pgI#e*3F8Qs_b;M1fjlhSf~mtelQqq3v1)7t_*)YiQ{HB*Ls$`5N)^&x3F6OR`by2^+?>kyI?2X%afm(k(_#~t#0$-(NL>Q>$y-LyBx4*|ARXcJ=!CbS|5oo-F3l z3)749VNiy)+l`WZ-gJYifm$`J9CIeN8zr!+7PpJ!+$#;~obZ&9Bm|ZHKNawaZV#q}-+Vl5mFC?+cE-Wn< zpe+;(wlp{yeLIIo$L5g|%xC5obEk@P+4=0&;do9OS4V1i99r7HxWuT+d}iKH%(?5%6-o%VBk%Dh9+r6UIW0~~y z1<+7=<-#4XZ&Oy`4+GI-`CC@)NkM`y>`FwV9;X+R&*~W&M2wj@bPG_dlxne*AVb3MnC*xE{ ziebUNm+55JR@G?$qX#@71NY5S5oC@s#TL&;95xCyY;w|^&=OLHlGE1?$ z!>xIBLpGn;vtrwKm1~+=1xF>=UsgjvI;$bu=BV+#kPa>5+^S!C$BIAs!Ie=!C6+wrI+wL?eRGzc_chlpI_rter|DgVHSX} zTQE|A+Mx{%zCj^y7+GtGhYJcBmIq~k_+9u9I4{Qj_SFV44t_ISUvO8PzMxAv(#8zU z+msh6C_@?~kzf*j0z>B3sguA6OGi^Ak%07LPD0mQ${r@b0LDE!1ZJ%j4P5M~lW?h* zVB;71CA502vPe9USH*^9Lb$!6Zptc!7ya-Dqa3(glA$%n)QpmvLbIfHqx76ubENBn z8iE<}zeEVoXMA1D-Ab}#T1jS0-OnwR*aDISSWQvOu&wGkS*I>ZBpiCSVLF&1klY-h zBmMFk-hDBfRSsMe%#DrFH?@M9G3o_gu+4r8o2|-DHd!$6YpyJHt2^3*>ox6MvWD~l zyTxzu_YIqM8(?m{H`r$NeMH{=b;W@=?bZACGqW-QK|+BAcGV(p1~}3$9a~DyujlWX zOR$Jn+$&!4PmPZlDB6vvs5WzJjlXwqndK_L7?k~ejm-}mv2ippI+~5dd=*fS>pP;# zGO?PW*Gyj)`$`<0>ZW39FKA34xg9pmFI`(AAr|si`Qo8Iwi~lv5z3=(%J=j_^kh8M z;^!k)%m0GKn$>M^izJ0Cjv1OP%%}up9Bhh^u*ihzz8Q295@G#RlJaXsB^of5W6KRD zg@IJzTkRz!>p}LKi3ci)h!A{Ofk>zlNnGS_WhD)~H%tL*VRkwE&KG3Eg171eB?BZe z0wJac@^skGFQ$Mm7ptUC5~GDPP}3DY=oLas&b39cc9_h1Q-A~?B{vHV<`6u;AgqF) zKy9OvF#!aDMSk<3wq^*r6)YglnpUP`;jmua)L9DJ}=Bk40iM-h%3=&j4H0!w%lQ`b0tlHBMuM57Zpke zvP~~0j^Y~17AquR#{bf4jebNWNPyNqq7q@PJBQF8DwQB4&|U})t_p#pIRXf4c_Cy5 zrG?dZ(~VA;&IlnAC)>nd{0NaEN9vD`TXrQZ-JEQRiT$A;x5P&gp@-Qbf{44XA7KdI zU-13^5ko35p0SeNe`gF4y3MVih;+W-$%0nx6Wi8PpmtOoJ9t@t^9Dw+5!5t9Ufs3ZzM zSVIDD_}Pk?>j*OkLfdw*YgxFsOB{h@#F2w7aU|>x1waf}3_F?au77F3@)d3k5kv&j zZ}N-}@EK$Ot;T9{uZ`bILvzr;c4rm8ZXfs$#sUA^ec*?F1mMr%U(6V=)^JT7V_#9s z&A@UEQU|U7mR)L556%51O|QV+EWqfhDe)j1{-D+{LMdqfQ>?@J(rqVv4Xe5Zl*9D{ zJcy{|`p3t>Z3=$14pqZV$Jt^aHZ`LY;7jJB>ERO7cx-Q?2F@36UDRq_C|pzTTy6T{1+nOZAhJG%<1Q@1e{44@+L*t4;6b(%1>lHF=hQ~Gr|lT_rTNC{iaN1 zaDZ8kC5@xP#ki)OGi=8)tul2OwqWMd$R85hz}I*CRP*LIs+r(Xz7Sve2n6kvp&Te^ z%{HhLg!&?$%_%6$%2GIi)U#%BLSr4kpKBOf|GzfrS)pX2(73wMI+KK0F!Xu3FyHNg&#iO%kr?0lyTQ1*7MFDR4O7 z=sgpe;z}T8Rmmn)INF~?2UT*xG!N3j{PDFc@r^wZ9@{az9Fc?G-2B7@A zWlD-X$=0G6v|(E0z*Pv0>uah}m~Eh5)jUY6 z7MwNU)Pq^C^>ql_i;G4Vm7_?@q@GC@>v8@pA zy~!pZ7DfeKws3&BO>~TPfCSYC9V{6kDxR5VVHZz~$E|izeXBV=I&E6Y3YNln{vTek9_&T{Eq4pjqBdJfkIGK$XBKjJYt>5az}#7{^wg z6k}`q6^ES@VDN&!v^q0jf-`yok_EvYqqZp){UaxPj0!9Q->N@zY>>$B1MW{=6zI2w zV;4&FcRk&G44@7P!1uSP?h0~>)ok}{!}L5GF~ye((O6cJm|>$K^I|c{{5^#NsZrO}%9NBG`wWf7OYj?sDuA&PE{pV>l=y#-x0VVJd8P8aADq3~~G+3DX?-NkASUReD#o z8FS2Hjl{)X_S?Z&y-ehQA5U}2)Kf{n)Ea9gcrXYLSd~_2CUqR`imfFu4Ak;e@(^E& zs_A;vq7E(;f2LKd_F7T1Y-_y+8CxL?5Pub|1w@BGt3#L)-L8UpsJx;izCB2+T>>>Q=})FOwYYdZi+&_f zUUo0the5!TmTl1Fpf!$ep8KFCa2ds!#X0Uy1odQABOq%KQaq?1CTn4FVDL&tkl@oN zSpiQ0TEk{7)>RzyV4kL(w8ky=8}y*F!?FdYy6Zf|^85el`P1*AfJ%jz9e4EuF3LaQu`O>w|a^<*vt$OsJz{ zN5=h=I_4za60AzGjtJI>fM(Ns37k|CffZ3-_xUQmX>p3oR}v&LCGT&Za}h60Y_QeH4WR|F3}IJKqXa;hvWeo0XL zc;-~3bZ8NA*n3!UIrKY|&txt@f(5=NusI?y0k0qrJm3O&`^))EF`t(KbJOD7yOFmp zlPjMo**BX@FCDvQPG(4Wc^L+FjE@~2!YBn-99vw@XO3qwOAwboyHLpFPNd~g$?@{9 zMpY4mAMt_eOWf}H%yc%5dK76l>0R6Ez5`)3q z$Of~8<-Fj-CNBR0!&VuwTY03%6b(k*!$uumJX4zBQIW%0tDBH&UgW05T-_W!65w~$ zuuN}V;EO}6RC8GbnM-n+xlB5rVcy6hRUjV~mAbmCP@C~iEKLt*9`wxlMLSp04v(Ep z&sR>~H!?XnJiDSzTk}(k)v6V35P81>vkMEtVmFru6mY!2grbW-*r*QA@8kE< z#UF$v)>m`8i`bMEooM>mEU~t>yYSiEulefp6B{~R!@Mxu|I>27KCzJ(=F{my@uhRq z4m)E5+Avq_Z(i6`$H9kx`@ZH|nd-K>*m$avm=K?mQ%LEcyFghlN~t9}vwe-mZE+fn zclRAEY*F=QhN-Bm(Yw(Jz6C!W8=0GLk zo`ixRvOa8VTpJ+kSBdlreXr&0x)Cuyq}+{_=v9IuKc8J7s;eZ1eUpu`Ba(V}gtC+= z#7E&CB(f?oxt+P3N7FgU_1X4-$jb*QzicHtwjNFZ1Y5$!@M!b-$X2ki1XB!;aihtJ zX+;u5UC4xjscaU)EwpkmlZZ&0DyI8{G|}4(XSgDeyE2oMkLE++yW#LWsAM;QU z$hwGnLSU8FEdD*BoiLjX1kR>*e34b%RM_QpqoQF5H$w_qfhkQV0Ta;FW|@t5kq}-J z&61alx(TqF202WPDac>>Epllqt|)(ncR8cmVpEZqW;7eGaz4{CW9pu#>2@KD_&pXq z=jm0ufq~(p_c%R9iHEX%W?e5rDnfVa_}F^o%-xmwli6d(m&a$vTyuDIZglBX<(|`r zhcWnW{1r|x+>pLAG{xp?oS@bPtJdN!Uzh+XThj$A6Lsc?AB~YQnn{~+A56NMsIhn#m_LbS} zG~kDGL=nQzwCGEr3yHk`kvgPx1kL|W>JUcfTc|>O=;t0836{SFL8Ms=Fs_a>KXlNh z#pnQ@7Q8ikgk30f9S7nzT zUWkh1?qAz(q#^^tf8 z;rQ^@jjnv!TKFv8C>@lxZX2Z}`;bhfcd{qjKP>NvJ1lP(=8D*>I4KwG1jI594o0t{ zdBkft78oe5<0eC_R$^M7O|+Pk&#h~E)1ilbL{27RD#v>1f^Hr9Gy=U0!~x}vK2T!o0xIY1H4c`JU3Rou z4Q`m=`iZVm%S#xJxk@dtqOEdg=cfB6)?UPlU$UZwQ%i(#;e}fQVeF#B!C`8Ad_&ZV-?NG917qd7H9>xr)i2U^|e}01@^20Afp~ zwPsR-Iu(;TI8vB;Ck$l!aDB`Foo}=N3GEhHaqJorTu9N@@E~45!v&~!&04)m$+1FVi7YJ_ zpgyoN1Y)XF*J}cNZ)JVZtw^Th(hX|}=)ILzndqAr6+txW!-*>aumjn zsLb0np+yATnEPh{e%K~l75QMsb&#+bK&)Q^-+tIz;e#Hc+~O8dPSE)cb3|WQtfQa0 zmU&OWXUsX!LV}Nrb!0tQDpQXgVfc0XSOu;e-9I>g{`^%uD`JnLkdFwg!o~$&E#O}) z)=`6nGZN{Kd5|OVC!Py{I;I6K(=6~s8BYh(BG!W?l(U81e*#Vr8)MEtwwqHmc5 zbBIolwM3^5lbOlfy)mla9=lGhHCl4c$#MB4?QgWQ(EbJ$ zLnf=3!faQ5tO!QS#mvG9m_krC(1f-rV3f|R-#~n-nx&*a7XPG;5jbAK1rGR(!E14R zDvCHaVGRxir{(E0)bprQ4SGwgG^$le^azH#eMC>jA^PufMEB<@a9tB8+!`(MtPrlf z;;m^8B?etFEou-)GfbN}RHx=@lgp-L;MzPt=^VsHHd3<*zzJcSKi&|+ZFNcG&~JR` z2n0hpGP03pRUGK?OF@1XMoR<&zCRCUlOzFT%X_^*ln=ooqW18G?@$=<5q-b2vy~Ly z6Ut%948N~U&&@5KET#*E^whEW%tE0!y?Al~GF`Fjle*@3Mk(Y2!?pwfzAL@tqaQCR zyVi7MmUB>S4_NCLr_g#O>+XeEXv>Ag`Rr^iU0|*QYz(rIcsoVw;oZ}jne_5p zp*WXjS($iI`O<4ors3Finw+Fg)x=u+MJ+J?xNmVm?nJiG?^@CvFEKrdE0bNw7t#w; znZQiBdBNF6?FRdh*ri0oKs)nWEX22r|mIkMT?aDfOLCd59R`m!M*h4%)V;<+;FS z8Nf182q}qEBD(454YNtYkmxP%RDALbP!i4EJje{Y;dqu_q57FX!T^7DcJCsH*|X*Q z4;qOS#+ITLg>JP)NFSp@4PVt33TR&AIyEJG~Pa=Zc zBp!;#Mo4^?Wn(Nau)TkFz=cZpz3j?H*50t;wV-%$E7pu22g&q8o-BbGmXBL~qa*6* zNYc~ms$sbzFH%B0Zy2HH2gx*D(Hd2cYo~07bptYD-}unDQ2B^|T`Uxq z`1PpNLuzX?fIH(R2zS&pqN&58W_8 z#fYovP#1Q_v>-;QW*K%ZXstwn571n;!hCESQxKK(3t}RI!5k!6v9{9?Tixl0@Td$R zo>y{AqfDPCfZrb<4BxO^9?k`Z0gfZYt=NsK0TESQ>cMRLwQ5y#Bu3Um8P!m+gJjxt zwNjP3#PaGy2OK5tx}`Jas(;c$^I#hS8dgejHfUQH^Sr$61Wy(UOOds)ym}E@EaK{~ zYE_l=53ylJPQQa>27>lc$2DEt7!Dh-M*JSk=fP^W#dRtTuqXjf8?!2`+7qN-=v%;3 zj^Q@zvc;VN9(7l@B3aT=falZ)T1Ka9Q|gi=G+(xH;XIGojq?H4ur`@=6_ z8d3NRPA@-39fY}Q_RhOHPOk=|gf+zBZvXHZfy3wf5pC$t@=#XLhd6qcs`Q-T-lc%vz(RXIhyGqu4~18Xp%2Du&L^RvV4zA7Lu{M}`j% z4XNyRYXvGUh#E0_7MRR6r!Az6054Q>QL(O9c;~_7IjLsrz|*&COmd*-JnC3L-7umS zu+A_2uK|ZX<{|AG8)&6e+Mz&RU!fBYbh_8h&agmN*}|z9m2g+t(N;7|i&qF=*<4wu zghfSJA-uC*({vr9m_$vyJFOL?B*z1h$_A#tqH!!O4{49)P_2pxTwg;)cf4sfR+LGq zP{r&=p$T+-e8N80znecm>jF@lfhy)Qzqs(LJR2C-b{Qq#6rtU>jrlOU=Iws(t_Z9&Dmr4!Uu2*&_zXDt_o`%xraGY53g+mNO*?<## znZy~vo)SN&GKL_7oD5X=Y=^9wUWFJXJT6=fuao)85kqq;C0lb0vTC{wt;&N4N69?` za%-{1t^?P?sYR@e!_+*@a*SAcB!x}(KO1dN9BCdN8XZ;P7fLE(k$}oFf-CtPx|lgg zCH;H^Qp`g53BnvA(}nXFU=k{t2wHOW3ax2_^|E``XI)#g)Lhi{?0T{6XgV#{sbks( z)2aX{wOSkwayY*T_n9CZDVeGS5M2~MTg3`7LPtWjuRO};jAcQd^UWuLD7AbkE+LMF z2oyHrR%%7pe2}W7Z+LX9hC(5S!WI*Z!)|OUav+Zk4Na&cnM5gdkraK*OT1mAovc=7~5&YyDOmC9_L2*?W2M7VYz~76HOl zBxk&1@xn7}v}n<_&;0f}w&MCE#hqfW#-C8DBOoCX1K+Q!AGp zTGl+O5>G1+=vB>i2V6%l)--*BpL2RzS!SmPt)!0m>IPsoFy zqm9|fp`la)|C6C175|4el{Ma|8`>sq%OhXPW#`kmQ{;H&6gdP`(MP!fflBO)0s2rR zjvS8h6Q45p8{kki;KK_4Cdx3%2wMUQC3zuk;~0P2o%{>`*nqS!D3EE2)u=T?g*;V* zGIww|vXGn%58Woe4=sh&sI?ju1VG3YV7C{=Fsw#xKyLpwh%U37$@6&}8X6$|X1)Km z0dgn>U-cUMV;KG@^FKxgNPoG^UL3{>)Y3Kf_virWcfEdpyobgHNWZ7Em*WGZpYnr9g{|R80G}e5)Nq5v7N(gZmVO76-O(xM=%@5UF8iyM`eeV9%W0n zI+oC#^}4(QqoThAq&35KMq!zlUXuNdt5kJayQ8oII2eEZM{yd^x@BAE) zKiTT=E+()|9|}@K05EmSGNndSLr^HY1a{%rL@LEr=3K(G#8^`)sJZI!!KG5LQq^I; zb*W+O)iq%z0w7W&P{q|nnGqQ1irz2KVsQa8a?NF@3Ix%GOfLe}I+k6Sjo|TYF1=77 z`OI8qsxZLuXMij(O{WW)0WzJL%M>!up3JWhz%CT4MPplSg^`9(bx98Lg!F_GQwyF( ztD7eTpC+;bz^x1yyjU&xNpQue5T1qP!xs^Go%K3Zg*cKB1*u0G)h z1iR*%u3Lp`JC*bq?8;59LfFBlYgGzzfDnqLO%f94MtdZdzMqSSfplp*<)Rr{tQEUz zfNaqp6k^*V-J=o0v{cgWlAt20c{Y`g|KIlB1W1nTJP&-;xVmx8eUUR{q6ZwzNT{yr z3+OHm$mt6}576jFcVjMcwwYD+x;oKWnTgD-ZuDqqb4AI^wIy4}hGom*a%|EPEt!@= zTxo~0LrZCOgea~khGc~(hgVu}Y=rlSSnaN4d&4rY@%`_}mq+yljOg8E0#TX$?)Sg{ z|KI=q_x}Hhg(@o1o$0b@?SgpUqfw#X_B=nP-M*;5W<*$4KTd!2*Q}4}#CVdd;_0t< z95~Vj#0L$v{I8CG|m#s@eCvKI?=~1?0oWy z_ubeDGEoF*V+{LU$6E(deC*8xg8hN*ahF1McP(A~` zq^WrNR~_y)r+jbKX%(Pgza*tB>Pz%&NIb~mJe3T_gHeyyu%`Ciraq^VJek%|zD6gC z{dPfPDAsnJ7HFv-Hi9`Ihyu9l&XcCQxY?9QVHp);jFfr`T4q`Oju!>I0isvjGW`_f z>TlaY;CQVpqNvA&Pny4|M?=!ClkcSb*yHJsVjg7iE_sTEh_b0M>~Dpfdxa3CbQ`wY z!FVdiW$CA&<9K$iHRR2m>(n0I(vQgs)RV9T^<-1!n%eJg@GyjX5u)W3GGr3>w?e16 z;1}UlKRC(oP@23ftADeD4drH2$^E-e`N(B8b>;URDqFfLB9 zbjw8{V$q>h6iSViQC5(OBCV6K;I7m9c>ifylu%nf-UZQCXGs#8C~9j&&Bzaw1qisE zHcb`TaTQNdCIV4lhjyFCJS@VAV{aoGiUg{NCr?<=Sj?tBMWa?A=I6R(<4{2fpgz(_tCR7zj|9bhTY%wcTcO_xCNa0|byk33Ul=22H+E>u{!t7^b;V4!aQYUHX49&f1^u!LxqoqQ zU8n6}vLDS$_gRpo|IQTGA3HIr75bOx+>TZLh&9b|u$nX|89dRw5F&=rholmtg8m@n zFhx{iU?Onziw)C6gc~uJ>9L(#eD%k?jqBS1`}8>NQmI20&$QQWNH^4t6-?WnpUZQ3mD>g<&n>x@>*p82>pzc@X!XidIu zq{;x7R;vxS)8rE_M6g2fz2CL#oCLIG(g!6Vm3XG)lSKN;r%6^HrXoZZa7#*vN&@_k z4MuXyzfe0D@)pNBEiZ3s%oW`;FgHzg$zsxwnEJ8bm_<7{$3Rt{zga%FmI88r?8}&> zqHJ-21H%p!nvKCOCbHK38tQF218*Tjh)Gftk509;07_dZDnjIWE`fctoe5eGO= zic*!%icSrmKh*8iu;~k_#P;TMiOU|~>f=Js^q!Sm4HbnTF==zG;4`?oY0 zEjmy7uCg?cb*Yo23-WJaN9=e_ew&Aua8nxMq}uH*ixkh6?~yG};0GPo4lO$jEgTT7 zgxqe#HzOKHthpNNunK{_OpA=W=rAhzL)x%I2e&pays}6a;tnLWN1Xs-Q)Jcsc+Fb& z!w^PY%b^Wy6m~N=gkP9h(Zp!LnuW2GtR=D{Zns??MedfUamn}WFg$B5+D&?2b;KJc z6pNe!Eq`^DW7;GiOfHYP>^NDJ`KzMU5+;!-*7IR>f#$20z<{X}kb5R4Q-P z*uB`U`@%r>WUYkvx5F2Ws(XJX6tdxBqeGtD-42_H*lAGJCREuvGk$LTT#bIZ8&YI! zCi>VN%PxHfPv2ua1@qL*huG#HZDT0*s$p#L4DF?bcD?Sz?OPSGBh*}x2M=ND{LJFS zjbMeP4)CHq$uEA~Gha8Dj+x7r;ycFMHd-tb{k z7DaZ8Y{Wu;olC2NiMi_w#6#zecex_t89w;jQw#tZ1K2eiJfniE?c}v-_6d{s5f6z zmmTnrsj5~I-{)tOuv@Y5*Cwy8Amq&fk`OQ6AM8xg6>+vxU0sWr0%6a6HAwx94+zeJ zw`LoOLFyh{^o1n6pjU^*=l*%c`66ENMd`Uq6s|ahkfVf{*!DLZoERs2BOJez@*;U` zm2w*7tVt(Uq8v`EWQ|Hi1p{Q^nzJl@kNxsV$ZhYJuh^JWWKD6SA~{Hc59}l>1)U!| zKUSlk?o!Zh%t>LVIek9{#y}<_5NlU1i^U9G(k6gEw!M4o7Yl9bp1#$ww{Z7m$eS=* z5--#3hX~m}l8+T2`KiBvLZXJ7?p!DFsT4XJ@JF#4`d(aycUQO|UgXWD6I+|16UW?x zgN4OTl%4YoCrPrse%O+q25!r%JsYIOO3!lCk`z{L2bm(g8XK%;uGQ7(cHjt!>g7V*G5m6&r%r=j(kqpLLMKG5 zjMzUWjTc~&)vrV=YJqZzMTe7X*5b_4vL*cUNL)fQt-9S<@4#b)gJmwQkmU-PQiZ(j z$6Th$a?KQ`Wjk%48q7@W7ChRJhmLY1Ro&<;*liwgO;N z@|@`w_OK1l*BNd&217pju>*$+FvJWzhCSL^ER2VW#2VC68Azu$}qYN zcrzu)=p0=H7zwJ=LtCe-qo>zfoi{E{PH$a1KlS=svu{LOid8TAjC8_6FvSu`{vtm)Ia^5*JhzHuX8Z)45&TD(n_6&tLZSusDTDi4vh8rF`FEzaM#Ha&G? zQe00tJ-M>{`U0&PPw3{hZO4VLdzITPwYUu2!XaP@gDU_8Wtc7m4vvltW8GQM0CnS4 zx&gS{Sv4RHv3wVlp?|srI3H9cq+s_{4hG7WHQ$H5G(%lVpKgW;g(KXx!4Ck4htsWC zx-xq$U;U!dhsUGHtyL;c+YSc!ZL&khk`QIRFI|@MZdW`ka0{T|a$tOXc$)%>hvvFb zfNWIMj&qI5fO%8?M}Wxj&cSsuLkY1?FNoVE*jFvda7- z#q3`ws1*qXeZ5k?RP03w1g~nR$Fp-23l{Y=B?riB)wQ>;tZqdWm~qaK7Ay7Qs_KmJHrK8jt^}qhFX*Carq4SX*d|`_ybEetDV8>Lle*Cp zWh?Sd(DhOdTz#z@Mwm%ueSttd$(Hdx0 zBzrUbvUCHHQKeZ)7g1j>)Xd{H!ZE8gR#jGOc%;KsI-s#)Muff}i>po4q-@60PNMi7 z2-boRV*u5ITi;2QR!LQlCl0q(VAm8`r#qoTKNYJ&g`t>_p0>kQWY+V^!h-*b^>HLW zohyIUj^aj3_>N6bl-S&OwVLWU9+f=T8;aGBN=AoUt);2O*@fkmi?df}zznR@O~28> zHtPyNc3LGC2E7DWvqN|saRwz_?rysMUDn43p1&Ei-o6>|*4r&-_3glGz1@hSw{J#o zI}QKs+imylO@DQjeuiGi1Bl-aoRCM>aJ89jl`!vHas3uHlg(Il^5~OLwhZoh+J_94 ztRiTU_sOou7i? zucBgkd8>I*^HW5H5x2wJUaKOVkCHtfN_k9`vNW^2JbUfZ(#pcb@@1o_MBqKZu-69Z zHKPX02L+Jt><}7Ss)|_9*XRn()OPLNbNUa$IGBmOx0qYS-}Z zZl|^EVgIERFiY$#lP#2NqFj#b4Q>rrtwE~{O|r{3xNB|NAsqXt8##IyJ9Tz%8QCdg zdrM@MuiBU)2#YJQvEIw?H5vsZV@6|VsKxI2j@}O!iM~H1^5i%Jq5{%_EN?pU_(5(~EC#HcsM>AYYu2p2 zj2q?5O@^|Bj0&vVbfu=2E)#jC?{X-q;>=V&RvjBpUyxWJZ7QNwq@UaYx+CjQ2gp z6HCi8i;7z(Wj|+>eQ>Z^t)d|Z7cR|`o@mE(H?rvxuHD0M_X@b|5$VfRv(^W7O5p=( z?~IL)ZP?SNzTG%O@}_P%vAq7rx@{_)A*H3_Vn-s+3AjUkZ%@v>zI6TSin=z1*l61h z9lKe_7M{vtg;(C1x-~NMhCelOBN(sFj|A6Now4EOxbMu3nU|g~+rDrh9GLN5G z7vl|o=+(~4?i&m4=J@obTNAgc&9}x@Z@+y0E&uxLEtK_$XxHNW{Bo+m2V~>U%08I4 zHkti8D)KA6z3P*>w{nOM##3eDLY2vhsVg@YR)jkgF`)=R4H}S0ay=+=0dy-1Hx@6Y zvY2j$lPrC>U1oY_^2Q~zc(V^j)rCAhT@Gd5l%=}&iqV>3c$7UiQd^&z9QtmzJr#DA z{Y%$I#~QabUiRDPZw{~X=IU#+p?B*_Fy7v{F*Mh>fF4u1S7zu^Emf{LD<0xr`Nk4b z9z~O{&QDETP4&-AeBj3N6p|iCQgz>r*+CPN&g^mu)vc6E9Mwt_SVubX>R7uzLhYQM zT!B-mr5V~MQps^lMcsNwJZ+GuyaPtwL+!2T7A>7l zQ1WZnW~R1FugX9L$EGLK1SZi6K8sb`dgP%zEP<$bE_8ZisaF?6urx?;ifND(81y1>Ny%t zB%WVPjgNVa+Ci@)ZrbTX!o``3v#*(0)HUhS{M427sGB3FnxsYoEJ5v~sW`K_JuULr z-8VZoacO4d>g=T126Gqbs2#_4V+~3Xl>PYJ#OzhNEN*3HZgOUNWo~Bq^1R@J5-R3i z>jPVU=cUXh+es<{cF!vl)6*n}s;ol>KzoDi?#CWgX{MN!^y%DEzJ z%LqpoZcJXCo!TzHxrD&-1WSmMdS`~Xpk7HFY1V0JpzifcoYqT(*C~yws!DndG0}Am z(ZfJ0c`eD4$rhxP18ReV10w^pgQ@2DVg-wFn420We#=g5tUMI-_rLDAP_*uN<(Sx8 zlt59d4qRNSj&j=(Zq-Q++-5crWlmgT+3?%N>wv;7#Nq>y3U(xR=kzQpRzQ~0=$m;+ z(_2#oP#pa6ivG!r6k4z4)SQa(3BWiv-)?EKt=A{ zN@poeq(lV zX1azu3TLNqFQTQCMmo_R3RWdUM!YifI_whnF1o5wMIkp9_pnMdGtOLlh1~l!I}NPH zWoJ+%N#O8(Xb?UjSQJ^P`N-Gtta3SQ zlLcC^7Fc!|JCW^K>wK%Gi!7Jnx#klC)|4M?$%~j!jVK=XF&WKNB6iI>b7Of*ZNQ;L zLQcmml;s<0l#Ce$X5Lk`*L2T#abp43{mx8V*d(%+mgg5IF3sE*9O*L6)o9aAs3a|` zcq)@=5)D5)Qi)gOxQEEYoW{F7T693MoI=cD43_^-CuTu`W_*o?Yyu{Ol)d zz?vl&dr4h-ji=*`h2VX|l=&OWm*!`$U9uoOT1zvFugomo7px&^6hFA^0`j>U0W3Qp z%wt+68Q+Y6cn!_lkh-UUk|!8oAPvPN2#}4*2*N42Q&zohslg7{T-%rpqEwK-Yt|XH zj!|Pv#h9Y~wk4^A+ZBepyHm?CTu7*wZD;P=sDnRP3ybs1LMtFUye}48po>aRNm;d% zioKUg&H0`dzSh;*$;F99b!)-1*7BMY8J9q|nz)D&vZK>jzn7ZzGP`EA#HA8Bu}i6K zv4;eU6D1E}o9OB7q-b+pL>khCU75)wjs^Ot&d7H|y^<*~g?QpwVJU`pVhW+JE*vgg z$~=}VWl+Ac3OR_s_rC=BNYN7HX=x&cqRsV3SvXX-IPNM9LMP&7Y@#*REI3JlE4b`R z#CO91JFpvTe83OQEeVk?z43sK5pv`f85D&bmMFi;fV*kOVYG>#O)hVz&7noIu}Hnb zY=}dZ*awyf2}1-oEC(TPgxrpm3{}PznAp%JTLUhx<9rT?v@QZzt>PXoI$tGT~+ ziO)!E!@B_6_F$KYn<#}7i^Jk`|48@IBBcA0Mmp4^&`$Vy5Ib%9I!rPtv_jtS!zK@{ z*mhhWz8PT7wVi$9du((l!J>^01G~j*mbzh8#16#yTQ>Kw78ix2sHAXbPQVaIo>>B( z85_sZ0sP#%apKkcIXa*fiCIJ~-@7YnDUkyKsGW{gJbt?qk&0V^$gd`L8avC>g?r(`k4POv+rQ;e1R87rM;jD3hPc9OBuA;x;| z-o1Obm$5$fEMtA861&s)QW07Fp9Wc=+A>w5$Rl#Rmdll1$X|tr&3KIn!FFBc;Y8g2 zNgK)WniDq5xYvHmsym*I>txT0<)_EJI66zWtJp1sV&i#YmX55uSu?fG&CLM?322$% zeFRJ7i10jVXgTD8AHgxemZ6Ah;wY6LKp9?){WuV5RqPbPO8Ba_(c@h+9L(_!ep@H#*rq!BQhX;ByR^p;-A(>@+z!sTk=9AtGsHd@+(om zd2^k|jkQjIBWI{|pb>4Dr}8R$&dW@-ukFRY7q#P5U4Yc_ROS07_K6~5|BNDbqkoxc z#5gP0vSTL-xRYw4;tY!&4-=;2H=TwsH^F^VRImj(N}fYGs}G?_FbZ>3@(Ja5QX?F0 zaMSeEI8K7Il1_t5f-{?~q^g`OR|r@l2P;c9bf{j8ZcUB7OqrrUq&qWK9mDZ1Q+f%40Gs1WcGh_J$u$edn#&w#yIk&k8*8!jd;!Rc03xU(wX};JNZL{ zTOCZSM=LnQU0K@l8k(>Vk^cga^+A2o_N$gy*x;QKHL;Zi7e9Y`LnOdkCpd|=mE%Sr zT+?7*u_!HFC;R}Vz149VA~Ckak@(p~Q83;pm=ZtQbfN}awr`c|p>H=Eb`(noK6^QG zrXXj`^L;vS|KvXj^3UEEe@h)XQLl%W=14f3vo-Ouqp^bzZKeTI%}51 zagjQ*>O9`$+_U0MAM5Zo&Y$7_p$?o;sWovABY@|j%rURj&Ay~H4 zZzXO7HMBj!V_kuntkaaq5)@9-4OWNF*XWnh6=5$W?j|(s|1S8CznAC*o|g~|F}!14 z8J_8%M>rk<1L`F+fu@(p6~+ef0nL97J|?&T-kQBYuzyOhiN4Vu#`;DzgE-LiqI}fh zgN#v>@Js=t?flNNu{|8~#u_}lcG_s6G#)^wk0vquXA@IJQo^H>O(Yd4KC!GDV@+RM zvX*G(rp2?D-azieYkuh9zM>6o*^#x$T^H|=H#%X2K;)N}5b>HF(-GD>hn1;VXGh#! zCD|C;ShkrQtMCA>RvKH@bK=4(C*H~)TTL2I%ZH{HRg49KMCPu}#EKbBQf7+NBnyBf zfiYM`B;P+eJXWpI4^&Flvj7JwZTMc~yWD#I^78V6x?8P`^tI7pLAYKd(@WtK7|E7O9BTvOit+l~IA-~5UHm=PdD6vPVpceTXmVK|%wR`5ur>2G@Q?i^JxgTbq( z7D{?m+)k2BdO7lGsUpKW#Ww^8C^kVaoWA1F_M)~E;l^N+^~`|%GlA(MS>c!DQo*c3 zu>r#|*A)4n$;|O)o;vI-Q-?%&)3M)cRhij>L}6yGCd?EmYA%u+%)~@)IZ9HfQ7b?o zO`rubLPiugGhQ7ZtkDmt&-Op*K9n1z9L5lZ{O`NmgivO8$DuW;1a-PeU6V$^KE!9G z9_+`9^>Hj4Hi7Juv?*Jp}w{clQK7lkV< zpRgha9KhPN*E#$b<639%Xn5~c?!3tP($WTZV}8Yn&svv!Qfn>vu&0=`qis#mbQf;~ zOP(Fv^ZX!S+_}{Km$Bh9fz`NT-apn3xP4!T)aQvH;{(V z{jLcbw=10hPT9-rowi*YMB9%U zA^XSri$!AI>l*8Iod)W2ceM=FBySq}7_vCZFniI!0W^6a;IVrUm@<{uv_2OkeiY?eRf28)}l+x9T07?%P&~UXnR2#+_H?>ad zMixNeXC_F7?E=K?*b;L7W>;zD04)@hrsi1Yr1qmX7Nxa_IN_mB6hF`jg|E1>@D*p8 zWIrSe5ivM3i8HxLQBzlEXRa-GEo$00+1nRkOEX^QTPWfQ-5OcM#Es?4(z+wtphRDk zY;zx}h&F42J1qW&RK=JOn&t~B>bV3*I?!HJGTk?HEZK(apSCU)(bi8X+DgM;(btV| zGUdV#OB!?%Yn@I&d&%&Euak*|QikxbMWV{j?tV+>eWt*pl1fzQLR;IxjR>JoTcStY zz`qLyl4=st2@UL02@^!@np|Si1&wc%GDq(MUuqJMD9v`1dQQVxdQ{xqaDarfXhdZE zZdWok^$$Y%ibcl>I@h7bN27f&m=%ttDn)6p>`7^?^JQ`!>LQOw&y%7f^q{b~`8bUh)z3)0-nj3}AN?npKT*JAom zh$W7WtKv1)Nu*NrBh-SKh05sY$lyp#{Hoayb0k8BDSWt=K`325(u`7?QI&@9Xh%Yw zxi4dtrdt6nqTAkG(d};B(ki?3U+(G}uhfNJ44tdRTiz1u-7g&3vfzcjYCNw8ZRl#npl`UtJh7^4Kgj3 zplGpU2cA4=IpwdeIt|BmjUogpW%m+{y~?KTIpvleHXPdooFR?U&Gt^bm6{ZdK6arl zBSm@?x|5b+vz?)u;cE4qGLV3b_^EFF`Kp!)f4Z1{ygMK=|64Xg0%v zPBXYr8yy_6R9q+Gi{uq~c7Y;sQLMR{Kc*7yy%2V4AQ3wiAlf_*okpbpCcqeT-3gUY zKy2T;{4W;~@NX*uHb+H~FnndQDY1$Adp~Gk1Zkus zR`5UXQe6Vc5~A$m2@vJ5?08=8f0Nt#c&E65p!AOwij{-AAUW9pgX$hsD5K)`Pk2{~ z2=CP_;mIZ_+OxY*U(~Q&a%8olXVo%PHU=uAA5a$;j9S|y{{7S7G$1e zG4|kw6Y+M&gHbVig510Vw%cC0^^a>z?hnN!bspRoxK72XB(S*+WHgGM+E!o?i^s@w4W zAm(93)?<+55moiRr@*U4l&J12l%*>ITuQW>XNCEm<$Laybq!Yviqoi5^4yB`ii2%7 zEAm$%$MON|RRhTb3WM z@el?Q4Niq@+Fp$Oa%Ro$i%W>$^o{GRZVlLhx$ht@)7it?RE=mc3+X=ga&}A~idCb9 zT?NC#@?dpnq}|Q#LgvxrSkqrr4A!JNi6XUHLXf#c34zs&?_4s2tZL>Txr96K`HhW@ zjp0hLG0p1!?EjB=3f`=^0kPz-c3qB_*qes-c`rVEo?3c+?&AEl*H>V7y|OYrKQ}RZ zP3yROH*MFo>vrlGqaoVZAvxw%sS37*VDAE^{4A;T;Kf%b-sJTPIaY{pr9q1)%>A(V zTd-ZFI{1xkR0q(#=l4$g6P}w?Dm!FwT;0k2v)s8Nmiv2B_)%3B@LVh8cC+lnWk?Qm z3#zN`GD_RBs4_BYZRL$>1IzegCZ+nTK2oa+71)Jasc8MNt%PG)U2$pm{^Ep9bw>6X zt`3eUEdf|zx8+I^I%@tSa4K;Jo^&pYhm@s@ejI|=hYW7ieFQkQV!DFr({ZK~r6d&lO-Qd?=p-@Qr-#WgTAZXey{e^dPsuu!O0t-K zdXi8y30}D-rsrm_6;yQIU|p$-9@3eV*>k#u=G81us!I&YVk@K!*T-*_Y9GvvPWNjb$MmxwT0P5ayYhfdH%*C`Tj|AnUKjigzLL_bz+m*I*tAvzqmMmZF%O}wDQKb?}Ff^Lb1)iXq%P*1>jg>W;mGDm*6l6p*I(h0LtUhHDS|kesYe2&1P?Kh%n5aQ1|1Gc&u5?8 z#=R1@rStRIbNcLx9Ywb1+^%R4Rob>=t|AiPO%xXObTT!nCe{W=4QJRUi1t4(UMrdx zfAgU5N2D9CCdOCAQ6e=3(vDILMu=TtO6|oC7q^$ona^@OSV4>H|I$;Yp$pH$%TR;w zVh-hXaVdFb?vzYAHF@rCh-ik%Omh8W)$vg|%ZXVqH_b`>6Y6w@o>W#&-2fj!(`vg^ zh}@k}fC)1wRsqt_$pt+Q#ziM`21(+~T$n40V-%64uauFMCH%iQvxx6j#Ix2Cj!Hw& zQ5{IQx~?zF{dL+Ru6|)ixgUAfnh1g}VA34@g2EK-l&CBtiGg1rf2F!YlOwXP$esmW`CE>yE{Jf#UvB8;2W7iO^6E>6u@O&+bseqf@uwc*&LxRO_u zVY;b@{$|8;x+-H%a~-d9TkJPi1QC{HgBo_sTYk8ecu}L}q20k&R?xI#u3XZX8%z>- zL`ZUHX-61SV%=Bid{DLmOuCqUZ_FBIW0)I&nTa78LI?>j2&|-%a$IC*Ez)pxa14hN z6IbXcdAK@Q)khWuo>2t`;SaXz{iI-j<-HkGkh~^Bc8dM&!`+sJz06!U^lkcKGYEMU zflv!PgZDJ+JEm7`4~^()*3GroiO6sBR2|*CeD^fT#8fe&bi*>Py)%vK5lh;KUY%c@ zURa!2TEd-d%Ga&DK*jVDn=U(@O|5ZdHgge>&h}WUHWLJUtWm9!Wj2#Hs=b75oUs-x z0{-4Mi-4bzl6#4bvT|8zcVJ0|Ylp@4R^`C$v>fjO`J7wv=oHF|a?@b$=a25Q1ZLj- zs9ld%2hI(Qlvm;SRw7atzcz_@pb^XD&w_s${CSTKJQj-h^Iu47Jzb+>(KyD8`=OIl zYU(%}&NpuIdgR1%c~Qr?jm&~Vm$!E%T;T$u>t&EdV3w>_-lKD7U!y5(^mDAVDG)Oe z#S#aGT?C(Q%)QXtV2Z0yPAlhYR)aPb4{ED*iBm+Jju-fpn#8(eAk~#wgpI-4$hbXY zj{r#V8R7I#FRD^;#a&A!DefVjR5IaSF99Hg(&}C@T}Yv7dLb$FYbU$SN_{MKnRUu* z{R3}IzNXGRE3V#Wx40Ld-Q;!COZuU~YIT%6-J5xoyYVECdDpNNUK|^%k6u3S`frVn z-x!_l3^hikR{7L?biKar3cux#%}p%MPE1dxy$Yj;$^&)x=AVSWPVxz4onZ`t*_bGysrZDg7=GFjK`_Imj8=HSgYt~ck0FV9_T`1RJg ziJKS0%Wn0p*QAqqx+O$m4EkymXI>$_D+qR*_Kh-eM_fU_GIPI?A(<*q68b=Y_I@(6 z6;P3{6~dL~KvOR*j#3D1#6vDXz9+P+L7BJhH#@Gee{@3Rk-^YhBHJU`Y~1j#ArP+2 zy@pZ(cALl#H|sbZ1?4kJeVRO=!tbGMjP3F;78frjs>4U*OlL;I&J`tmFk1q@E&NAi z3wc}?l8IO9$S1PpWWjP$=9l4+6$M=2!`0}42^Tqp0F2todn%hgirh*Aoz{c)psXp1 z+%m<$VLs}5vMBF5-%7GRU}Qyv%K5&coKfViG!jF!6Gq;K-g?Zp*J}rHXd8z^bbD2d zI!p3sw$`>&PuhA+0o18S>Kx32;)=z{tq3=aLmDWwvL$Fh5u8{jz%N=4W4%9=wF`xX zDb~r8XG8+L^?{Q^gyZUf=#)%?w@xC(E3BgrGF;q{S1B78kEiIcOr?X7hlg$7K)d5m9FeLTJ1%3jwF2hHO3s&)kQ*3R=$%Tq5kU!;VQ|UieiJt-i zx->XF$|kOKYjb*PuUT4dp$x)Rx0w2cQ)YPhmQiAQRZhlhYLtZ@Iz9K+cAT(N*@PS@ zhs!K4b0xw~f)C}*$g*(I1z|SrpsQ@1f#g-KiC>~~<-AMA4N}}-O+dBFszHL>oX~1n zW@$#s-r?d&SZ-t|v0UEFB$v%D=dfHh8JDwkN#aoLiQ1@ly4 z4n!1XXxN3x#dMa-peCh!9u?8iCN{^KKgaG)-kWC)H8F3;w@PSC*Ao)#RCn zkwCe0uZ{}NlH+#(EQtZ~V%9`dIBHo$kGtY|l(O5P80`_u&@8tz671Mus);0U(c%=I zXo+3pph&I>RIzoLD@&jvHPL4#CFm2Y*~%WLQ4$tJZM2g82VM75%#+L|t-*V!f>WiH zoBqa@?Lq6au0^;4uO467{xtCKY9-zzBY)Oq&yRWC_tyu4EvsCZSVv*$ZcjRu0 zDqVp`$xz8n?__FflYNfq&(`Egq{vexkel76wB><_k&&-tjTvp8=_wbpf|8$P>J(}2 z26RLg+Un)r$BfF$@f0CJW$~8MW~73#F}R~vhif5nbklKx_O9GV@PjTN%nmbA=!LEn zS|W$(O4D$hOcuE~;RQX)Lsw^CnVFoQzmn2@^t#RlkyxU1U<_-nWN-4FZfh=OLgS6zQox}r7dY{qqNJ7Gdn84^;(4>Y;yW!5fR^yOKvpSRIfQ}h1lTW-!;V6NsgA=$)ldp!A91WYPR?%!;WtuW9lawx zy>zbw03y;zL&USWD~mKi0K&y1bPA8ZEOZKZYlT7LlpWU;=CuXJg7Kyu`QE748Xl^& zx17L0>4W%t|LDA2gwD@NbVkt%m1h^s!(ZfxM>tLlLLXKe5e!aj$K}mbI=k+7VqrWo zyI|SPCN@;b{zQ5@$e_5f^#msktjLBP86?3@%m14r4u-)aTGr&^mxc`b$Aq)VJr8DE;ZmhTnR!y@FUwr*+&^;Z_2Xq zhLH}+KEhb(ATFW6wG^MaUSfxFEd}nT=y@8D5+Tg5R1AIA?GakRu(-*LFq?K!|$ z@4=Vg`{~Z9BXXEgndlwbf$Hzvy?ggjSv}s55*^*?Mff3hhc3i;ILYO^PGf7O75be3 zxqBF6Ps!YP!*eehkEZmP6(g~%n2LCkF?RRvT~?Qw&1P&c#_DWt=xJfy$lj0M9AT{Q zE?|vrqE+m1{P84yR6BtX>Qx8=K!p=b8`|f}jlSi$>5)N!r!r-n-IJiv-L%S;B&^9FuXG`d1jCF!m zXg39&;CV*EAMa<_+|Wso=TUJ{j3UAlzyaWm9Ry`L#q2J$P>@$pgld;loGgkUKV|{l(X?LJ|I0Q4XEn;W& zuxxL(U>>q<=3X=d)P#4sh@+FC(`@nb)ro6xIl6r@xHAXEpeI@ja=^7cY=0JJWwQA? zD>|;T_6lcOwhKC0by{uPt2j--6nuD5!Uu2cS}S%_Dm~5yU)q@ey89!}Km5vneeg#A zAANr7KmTvPYviN9^!;CY=70HX|MyGY>r+Sm~U z|L*SHe}A`^-Jxmf7)?{hajVe5&Ez;x2F6s@P+llNybh+g+>}al5hew^j(*erOoug zV(w-Eb`%Y*6WL>~N+5K8p!%s|2pz~l=o1=3)nW*Zj8rFItGw}AW%@NNkcUP_hV|d% zO;ohNdVb>40xrRUgOBD565ECa0N?XUGURAPs6`DP(4))|ARUB zPipv|9~dqoX5FQc`z7NG{7!E3;RycZU$2N3_(qS<#r2%w)V0c&q=po{K z@7!hVXYaB!K_AM2%Ou6Y-GXa&dPYL4fS~tRN&>9G48j!-nAw8vusVTc+Vx@!R#bexW3sBNrMaPp8GEP1o?=ZW zTCa%k!LkHX8Kq(VFR=qGYSvTZ+MDbC>yaJXh4`w#j`GeXsQMa+m1}tg)ouz?36IKU61JHapwmUX7T7|r0 z{He<|!tQCHj+&Jd0ls&jL|@*!((lVa-4iU2eFv5%(%%y-kADZ2CM*~4g&Cj7!SZ90 zmv1-8-U~Z^FU!A2I+xR1H;9gPncfFs1Uh>qO@MAKF439dnWQ$qATDgXXJ6#7UO z`Vkb_N_+AJsgA(=3v6!a5My6F#2#mJL(n&4(~mLMi<8FC>O3qrRTw*QM1~znryV*h z!w;*py{m&FY<2LkN_$Y22bJ_U|J_&<+R{T%JX&)@4>HD}>3xQ=(gzqTeUKEEq^x|X z??tFP#F7w)0h=7UVS1n+krC}Ec2qDF?MZMMH%*34ldEWeK}K)5wil^zXl?4afK>$m z4E1=ef(>XDhL+0A*v)8oapB?z$i)N$AQX?-X;;DE)^X~!o{&hl?OVj#@edy=?+k%T))#) zNzkK4JG5gSHC9_H^Z|ql+p|iv72$vl>c{ht@qUQS4gH%EWB<0q*q@i!DT>tj0^V@_ zmg6aOeOl(k8$Q0EbcfoLHW*5O3^e&B1UppTQfYeiy0AUyw!M{en<#_ddcH zsqJBB)B7-E&~NuX#2D?F;BR!Xxz-58=~P()!IMITW9@S)9Q!6l_=+FU_~>}xsu8a` z_ro$j-ajnl(a-d-e{=Wl-9Nv3_wHkieX+!jvbmurB=x+HF?NLAVYtWq1Y;%KS^lV? zoIdtJz{0}MDaLy5-0fo=e_+R?^e}d(9@b!k8vMDZ5DWS5i0I7V2LQ)M@I(6*y3HYX z?JeCE4Hybm007ld2L&!w>W$>@Z_pZbzD6vn31A>gGI=$t$8) zBAyIRwgk~cT|%~PQK#;4J>uEe4em94O)H=btcNrkA)qy9hS!~U7<+>;_Fpl^et|Le36ZPR5LeU_tiC20=39)h=NMz(%NYAK zW9<7GW7tjl0mj(hWvuk$jIqDR82bsv*hMPm4q47FKts(~@AN~A{h&mx7a8mQt26=J z={qtZBQG)5`_GOuHY+3lK4X24Uy*^=W#Gr;`}~n?cO&wvq~#XRe`9?AGEn#kt_zKt^}mfjehfc< zM=$-p4}Wgq$D?fTP#I05h@V8-4ZG<_UqG_YlY9*j)J^x3mQYZ^Y}T3pHcjr!OwT$=LP(H$ms49jGg-QzyOx-ILKJJdhNBP*O!*( zYSpUvp1iSyZ|DiD)#?bo=aw!mou% zD{b^0{s1spaqYhps$gl7I1t+HZ3yCj_;c{M_lzK(?n)4$-QGPpJl&NXLc6^WV!#1{ zQ#fBh;2{(|z8!mJl0BC&l}YxzUliPtJs-QTC`e5B+m3~78x)iecrsQke`)M^X!rQH zJv$!S2L^uI*zuTV#|_Pnhcr7L60`uZ$BzeZOF38#5y^%Wj^&XG#mY!-;x~NH;|(1H zX-UT5G?L1I;$<)nscBKr2q!O>Dm|7zGJQz5m8b}#{IKKdV3gBnhYi<@D~^|5@-^CF zE^O6tIj)gc#bT|Y!pb3H^vX!o=<;&gj^b>OTwadIs#A-L09eb8g3w2Ks(i?ttF7q#Y4f(qo{wMSwi~Z?k9XjQT{k(O|5k^0lK98W z`f2zw4M_D)Bxu?iB?_{q>n})2Ffu`aBjaK3CD9oFN#F}AF3}=T`N$D!{J>x$h}YwCN^gXbQxU5UE+126 zqyH+#O9&4wMX(dZ=Q24`QEl66C9DcS*13$*QsJS!sVZ0Pb%HMKMTDpVMVN;|!FURe zY~uKKMy@U1=XGvjNtYDA4{zjngW7FY4t01s(@rX() zf`W=|Yn35d83aKElqdbCs?@->AP9W;RTZXiDh7CrOu}wPg`#mm9HfK<>ILlK4@uTCu}K;|gA# zjZZO994^i!@S+&!^;H*((st>RkDopBP&7M!3X`ZY;(MlJO#i}_Lm@o`bqJv?uu66ktC_0f7k#J^0 z8VYiw2$?44A*2=ssSKzCryaFZVqT^cnP9b1j@yBrR0~U~N1>iUGY}D_G!kxI7#}6^ zpfRH_4L{IRE2JhPYSs2)JJPWrm2kAuY6s<;zM~NY?8C^ENH-a{XQ#+aJ1}C3@!*XI z@8h(6BrF6nLnR5Y9OL+&%#y7&bb{0vWblQeGb4~`Ht^$X| z8C`FBafA_6d=!4+i*gZvO|=GdpvpzDaYyHb{gr=vki(58@z<2C%YAzV@Qc5|ay z2|~W=+*Z{Slqp*_FNM4q#{n#@~hLBzwjp#>y5&fTs@Yj&8-xR`*V zb{#^cZYqS+s9jh1{i>`M?^ne(>1V{DYuHAhYLrYCIm!+P2ls>y7)OE*e=KtS_)VNo zI!5Z-*jZnio5Yc%!*ffQ=jUe7A^7Id5S)h9PA{`CPyreS>$lzPAC8DgHNz_X>X z7;preBjR)k)!gx%hMUo@pamjac*jsJ#dvpuNZS!nx~QHTZlDlQzGCdzVlQe#uU3$P zY?7M3#spvw#7~z;k?lGyO@4r#ipY?mnJ4mmUsEIKb2AQ%24Ln=r8F9Ps)gXFgEd2= z_Q|%W-cy*{a5jxXseZ98wi^u|>BInyjA+=6H4Q=|gV>r>qx~ObHF*CAHaFD6zy{!h z?ftYni}MXd_GVxeC=}b)V8fWWSP5qu@Y92z1Nb?JpF{XLjGrU;>BUbUevabj7=B=9 z1`gQ!S`Tp@daDyJ4*}u+>;QhS_&IRipXCp2_;6tTHkA?8%ElOY5PNg~oazJxnEQ;HAM$Zrmn8#d5H zjRRna2X8uO@{1UUKNg#sC9q=3(>AhPky-G*!sdn!zl$uebUN@Zj$hniJ@2xVdjSs{Yy*p(;_I}N&TQWdRQTE{^e+w+X9 zMtg){mda!YZ~}>&)l=OAmb!juS7JX%W=4z+g^CrcE(i!f;U15jjD`w@KxXG1z3hQ> zLE$Z}H^HE27y9xdJk>XJAc^DN23Z?khsl^s0!uk%VYp;ivo14+-DG+Wl#pH=uz{7> z^%nV1<#D63*&4DpTk`=g$wEAJ;`J&dkj(&lDA*yu73K zWvX2qazWN!G<LBZoJ&LX{f|bJt`{_E)9exD;g}ZQ>UAa^>8Jy;}v`S^~TLb zd)yhVUwYl07@c@InhS2eHa2wrdbPw(_1bOhUU+V$#BdES%mly=2TJVJ({$@btx^ej z3qDP@%7e*8?&nI>Vw(QS^!+K~;G_7KcCG0yk)BPXvJhpw0OB2{P@JE^12IK?U#4$z z;-C&giRqDS8)5xUrpBey-O}_R%`e~#R1YSvW~a$>D`0T>PT&P?-gLAI3@k_o=EN(o zn2<-lyTQYX-89v?v}{#TtA4l%-G4}UwHpm5m<^Pyw7Ao{c>tC|n8 z;x!`Mc0_^l84=x#8bP^j z>lEptJI3kBbWFQzOxQIB{ZlQ0_9tm5V#>S)k1yreRzy#tTqcp@$yA|nk`$aGlTH<8 zCIgCRlC|wdnQn$r?NYj90U>Ia@9`nu(}F8b1ZGMhoprh#HGHC+Xw43iC3CtR7}>HD z`7T`oR@@Fs<8m9~kV=uRL3nsjaUhJOjd9rV)>V|kRfRjQ(@0vD?mg8?1t%%e<0d1^ zz@!2sy5$QA#nB_G8itt69v^0Gv>8!GS*n{dn21F6MWLjMOE&SqWmIAD?RJ89W-URo z5vS7Q*mirx?r7Zz7(vvIGBgdLtkWJA<{(-X z9ECx4QJsx$`p_L|CIZm~@~^QDK#sI*%p2Q@&Z(6gSZ*qF(_B0PeNwTw-c$7tW0i_D zHZyW@MuQ+qq6_Vg8#`sVRSecb<3K6~0V=ihMi?dx0XCy3ni7)T2)+^M)=8bA+NdDi zzIhe_E!2miGyABhE82>N%FTMR9Zc)s&2$(jh{A%PT=)GrfUn5T zGzg)`^K%m=hJeoQic`YqPoif-L#5A`NYgy<&e(=hEdf~JF(WPG^h!quc=wj(hTdlE zogVfWGlY-{T7@NNC^)@L#63&dUP}BZLF{Z=mCvr4}lJ2r_QRb z*g+8K^Po5!TH$uIh0sdK1Ak!4Zo80V392}zLVlAK_&|6FGz=tweF&0HOe!~hZG3<+ zFrri;z#-+9MumZ`$u%&jE8-~~jnI&Jev_X*AVfAye|VtX#N2`h3{8EbJoOFyRO!LX z)i>TM4Ys7zH?)fC`;3tuC;L@+#rTHT6%{^ad}A%7!r^8|eZxD8`kpYp;i*N1L;O_V zv&J{n3@RM!F7$6qx>_+K;H|Lcsd z*`wz-jCy~QF`QAR=eLaVak>(CfakZ3^j~L;a01Wo80o)Zr2kzb{Ws;|c|5;or2l;* z{XaL-|ACSI4~_J2@1olCM@IU8VWj_;M*3He0ME(pN*b|XIRcXmI*IwD83hX|;r6Jc z!VhAVa{}Syeg;)oJ)(A7gQA#jtiyxK9>(4 zLpaR6lcrMo4c{&0h#MdxHAP_+XzX19#MZ&M*SSYXE>Gj%SiAq z3iJK~qW-0f`ZDDmO6C1UBseS+q+9zgq9E7+GQXJ0^%X?@pzKIG*FQzn-;z;ZfzwOf zk*@;It0?Vr*iz~l98gF=bo(oaZXx=s0tuiYL1v2mRm868*dsF@dEQA4@UJ1wO-h3+ zWpu^APHmDs`FUBlf-#l;8%Xg(GR3cp>T!jVuKqWX;D^lwha4~H#3``+783oaN|b8C z*YZsmN;l!R%_e+JG~tZdgs+=Tpae&xt|rxp-!U8UwNxX%k#EFsx)Hx?HsTwi5x5gl z!{M7|BPhXPzY}Kx@q1<)zL9Ff?<4BJmoWN;qOthrNb$!q#qSri;SZ4DPs{{|qp;!G z>B0Czr21DXRjLi&%C{ji7=L88;adf50J-TlP=dqFD9*M4l&9P9Er^`6OQn))qFyknw8f*Kc+2b^omvqMtjWdjLe}Z zIw?noK~{_dlWN_Gb%X2x$@^G$B8--eW`tVR+OA`3y#Zhl1o\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/729/f42d43ae\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 00:05:03 01.07.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ + \n\r\ + \n\r\ + \n#:local Script AM-GlobalConfig;\r\ + \n\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\ + \n\r\ + \n#/usb1/mikro_bak_rsa.pub\r\ + \n\r\ + \n\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\r\ + \n\ + \n:global MkDir;\ + \n\r\ + \n\ + \n:local FetchFile Manager@id_rsa.pub\ + \n:local localDir \"/\";\r\ + \n\r\ + \n\ + \n\ + \n\$MkDir \$localDir;\ + \n\ + \n\r\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +add dont-require-permissions=yes name=awg2-webui owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + put \"Download image, and save him to usb1/tmp\"\ + \n/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-chr.tar\" dst-p\ + ath=sata1/tmp/awg2-webui.tar\ + \n\ + \n:put \"1. Create veth interface\"\ + \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\ + \n\ + \n:put \"2. Create bridge and add veth\"\ + \n/interface bridge add name=br-awg\ + \n/interface bridge port add bridge=br-awg interface=veth-awg\ + \n\ + \n:put \"3. Assign IP to bridge\"\ + \n/ip address add address=10.9.9.1/24 interface=br-awg\ + \n\ + \n:put \"4. NAT: masquerade container traffic\"\ + \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\ + ade\ + \n\ + \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\ + \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 action=dst-n\ + at to-addresses=10.9.9.2 to-ports=55055 in-interface=ether1\ + \n\ + \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\ + \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 action=dst-\ + nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether1\ + \n\ + \n:put \"Create environment list..\"\ + \n/container envs add list=awgui-env key=WEB_USER value=vados\ + \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\ + \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\ + mboLs2325272931q\ + \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\ + 3\ + \n\ + \n:put \"Load and start container...\"\ + \n/container add file=sata1/tmp/awg2-webui.tar interface=veth-awg hostname\ + =awg2-webui \\\ + \nroot-dir=sata1/awg2-webui layer-dir=sata1/docker/awg2-webu/ envlist=awgu\ + i-env start-on-boot=yes logging=yes shm-size=4M\ + \n\ + \n:put \"Start...\"\ + \n/container start 0\ + \n\ + \n:put \"Verify...\"\ + \n/container print\ + \n\ + \n:put \"Should show: status=running\"\ + \n\ + \n/log print where topics~\"container\"\ + \n\ + \n:put \"Should show: AWG started, nginx running\"\ + \n" +add dont-require-permissions=no name=awg-proxy-go-Client owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:put \"[::::::::::::::: START :::::::::::::::]\"\ + \n:put \"\"\ + \n:put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n:put \"veth and network:\"\ + \n /interface/bridge add name=docker port-cost-mode=short\ + \n /ip/address/add address=192.168.100.1/24 interface=docker\ + \n\ + \n /interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n /interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n:put \"add config-client.json\"\ + \n/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json d\ + st=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n:put \"Add container\"\ + \n/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interface\ + =awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-proxy\ + -client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pro\ + xy-go-client\" mountlists=awgcfg-client\ + \n\ + \n:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n:put \"Add user:\"\ + \n /user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n:put \"Add forwarding port web-ui\"\ + \n /ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n /interface/wireguard/add name=wg-awg-client\ + \n /ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add comment=awg2wg dont-require-permissions=no name=awg2wg-uninstall owner=\ + Manager policy=ftp,read,write,policy source="\r\ + \n :put \"Uninstalling AmneziaWG...\"\r\ + \n :log info \"Uninstalling AmneziaWG...\"\r\ + \n /ip/route/remove [find where comment=awg2wg-tunnel]\r\ + \n :do { /tool/netwatch/remove [find where comment=Monitor-AWG2WG] } on-e\ + rror={}\r\ + \n :do { /ip/route/remove [find where comment=Monitor-AWG2WG] } on-error=\ + {}\r\ + \n /container/stop [find where interface=veth-awg2wg]\r\ + \n :delay 7s\r\ + \n /interface/list/member/remove [find where interface=wg-awg2wg]\r\ + \n /container/remove [find where interface=veth-awg2wg]\r\ + \n /container/envs/remove [find where list=\"awg2wg-env\"]\r\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg2wg\"]\r\ + \n /ip/address/remove [find where address=\"172.20.0.1/30\"]\r\ + \n /interface/veth/remove [find where name=\"veth-awg2wg\"]\r\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg2wg\"]\ + \r\ + \n /ip/address/remove [find where interface=\"wg-awg2wg\"]\r\ + \n /interface/wireguard/remove [find where name=\"wg-awg2wg\"]\r\ + \n :do { /file/remove [find where name~\"awg2wg.+tar\"] } on-error={}\r\ + \n :do { /file/remove [find where name=\"disk1/awg2wg\"] } on-error={}\r\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n /system/script/remove [find where name=awg2wg-uninstall]\r\ + \n" +add dont-require-permissions=no name=amneziawg-mikrotik-c owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\ + \n:global imagesPath \"amneziawg/img/\";\ + \n:local Image \"awg-proxy-amd64-7.20-Docker.tar.gz\";\ + \n\ + \n:global DstDir \"sata1/dst/\";\ + \n\ + \n:local Url=(\$GlobalScriptsUrl . \$ImagesPath . \$Image);\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n" +add comment=Generator dont-require-permissions=no name=awg-VDSina owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# ============================================================\ + \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\ + \n# 2026-06-30 22:08:12\ + \n# ============================================================\ + \n\ + \n# 0. Check prerequisites\ + \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \ + = 0) do={\ + \n :put \"Container package is not installed or disabled. Install it and \ + reboot.\"\ + \n :error \"Usage: /system/device-mode/update container=yes\"\ + \n}\ + \n\ + \n# Auto-detect storage\ + \n:global awgDisk \"disk1\"\ + \n{\ + \n :local usbFree 0\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \ + } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\ + \n } else={\ + \n :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\ + \n :put \"USB found but not mounted. Format as ext4\?\"\ + \n :put \"Press 'y' to confirm:\"\ + \n :local key [/terminal/inkey timeout=30]\ + \n :if (\$key = 121 || \$key = 89) do={\ + \n /disk/format-drive usb1 file-system=ext4 label=usb1\ + \n :delay 3s\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \ + free] } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n } else={ :put \"Format failed, using disk1\" }\ + \n } else={ :put \"Using disk1\" }\ + \n } else={ :put \"No USB, using disk1\" }\ + \n }\ + \n}\ + \n\ + \n# 1. Uninstall script\ + \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\ + \n :put \"Uninstallimg AmneziaWG...\"\ + \n :log info \"Uninstallimg AmneziaWG...\"\ + \n :local prevDNS \"\"\ + \n :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\ + env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\ + \n :local storageDisk \"disk1\"\ + \n :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\ + ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\ + \n :local prevTmpdir \"\"\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\ + Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\ + \n }\ + \n /ip/route/remove [find where comment=awg-VDSina-tunnel]\ + \n /ip/route/remove [find where comment=awg-VDSina-dns]\ + \n /container/stop [find where interface=veth-awg-VDSina]\ + \n :delay 7s\ + \n /container/remove [find where interface=veth-awg-VDSina]\ + \n /container/envs/remove [find where list=\"awg-VDSina-env\"]\ + \n :if (\$prevDNS != \"\") do={\ + \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\ + \n :put (\"DNS restored to: \$prevDNS\")\ + \n }\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n /container/config set tmpdir=\$prevTmpdir\ + \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\ + \n }\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\ + \n /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\ + \n /ip/address/remove [find where address=\"172.19.75.209/30\"]\ + \n /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\ + a\"]\ + \n /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\ + \n /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\ + \n :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\ + \_} on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\ + out.rsc\")] } on-error={}\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\ + n-error={}\ + \n }\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\ + \n /system/script/remove [find where name=awg-VDSina-uninstall]\ + \n}\ + \n\ + \n# 2. Network infrastructure\ + \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\ + y=172.19.75.209\ + \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\ + 5.208/30\ + \n\ + \n# 3. WireGuard interface (MikroTik derives the public key automatically)\ + \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"4CHyNhbOs923/E\ + yNDguMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=14710 disabled=yes\ + \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\ + Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcY\ + QnD9N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=172.19.75.210 endpoint-po\ + rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\ + \n/ip/address/add address=10.9.0.3/32 interface=wg-awg-VDSina\ + \n\ + \n# 4. Container environment variables\ + \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":51820\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\ + 77.79:55055\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\ + 438637\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\ + 809250\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\ + 09079495\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\ + 12329741\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\ + l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\ + face/wireguard/get [find name=wg-awg-VDSina] public-key]\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"\"\ + \n\ + \n# 5. DNS\ + \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\ + n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\ + \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\ + g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\ + \n# NOTE: replaces existing DNS configuration\ + \n/ip/dns/set servers=109.107.177.79\ + \n/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina distan\ + ce=1 comment=awg-VDSina-dns\ + \n\ + \n# 6. Download, create and start container\ + \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\ + \n:if (\$awgDisk != \"disk1\") do={\ + \n :local tmpPath (\$awgDisk . \"/pull\")\ + \n /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\ + ntainer/config/get tmpdir]\ + \n /container/config set tmpdir=\$tmpPath memory-high=200M\ + \n}\ + \n{\ + \n :local arch [/system/resource/get architecture-name]\ + \n :local ver [/system/resource/get version]\ + \n :local dotPos [:find \$ver \".\"]\ + \n :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\ + \n :local endPos [:find \$rest \".\"]\ + \n :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \ + \"] }\ + \n :local minor [:tonum [:pick \$rest 0 \$endPos]]\ + \n :local suffix \"\"\ + \n :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\ + \n :local file \"\"\ + \n :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\ + x . \".tar.gz\") }\ + \n :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \ + \".tar.gz\") }\ + \n :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \ + . \".tar.gz\") }\ + \n :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\ + \n :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\ + atest/download/\$file\"\ + \n :local filePath \$file\ + \n :if (\$awgDisk != \"disk1\") do={\ + \n :set filePath (\$awgDisk . \"/pull/\" . \$file)\ + \n :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\ + \n }\ + \n :if ([:len [/file/find where name=\$filePath]] = 0) do={\ + \n :local freeStorage 0\ + \n :if (\$awgDisk = \"disk1\") do={\ + \n :set freeStorage [/system/resource/get free-hdd-space]\ + \n } else={\ + \n :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\ + k] free] } on-error={}\ + \n }\ + \n :if (\$freeStorage < 262144) do={\ + \n :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\ + B free). Need at least 256KB.\")\ + \n :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\ + cient-disk-space\"\ + \n :error \"Insufficient disk space\"\ + \n }\ + \n :put (\"Fetching: \$url -> \" . \$filePath)\ + \n /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\ + \n } else={\ + \n :put (\"File already exists: \" . \$filePath)\ + \n }\ + \n :local rootDir (\$awgDisk . \"/awg-VDSina\")\ + \n /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\ + DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\ + yes comment=awg-VDSina\ + \n :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\ + =veth-awg-VDSina] shm-size=4M\"] }\ + \n /file/remove \$filePath\ + \n :local freeMem [/system/resource/get free-memory]\ + \n :if (\$freeMem < 16777216) do={\ + \n :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\ + . 16MB+ recommended.\")\ + \n }\ + \n /container/start [find where interface=veth-awg-VDSina]\ + \n :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\ + }\ + \n :put \"Waiting for container to start...\"\ + \n :delay 5s\ + \n /interface/wireguard/enable wg-awg-VDSina\ + \n :put \"WireGuard interface enabled\"\ + \n :put \"Installation complete!\"\ + \n :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\ + \"\ + \n /ping 109.107.177.79 count=10 interval=1\ + \n :put \"\"\ + \n :put \"======= NEXT STEPS =======\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \ + comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\ + \_comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\ + address=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run awg-VDSina-uninstall\"\ + \n :put \"=========================\"\ + \n}\ + \n\ + \n# 7. Verification\ + \n# /container/print\ + \n# /interface/wireguard/print\ + \n# /interface/wireguard/peers/print\ + \n" +add comment="wg2awg GH repo in client mode" dont-require-permissions=no name=\ + "wg2awg client" owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:local Arch \"amd64\";\ + \n:local Version \"v0.0.1\";\ + \n:local Name wg2awg;\ + \n:local WorkDisk \"sata1\";\ + \n:local WorkDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Bridge (\"Bridge-\" . \$Name);\ + \n:local VetchMTU \"1280\";\ + \n:local Vetch (\"vetch-\" . \$Name);\ + \n:local VetchNet \"10.9.0.0\";\ + \n:local VetchGate \"10.9.0.1\";\ + \n:local VetchAddr \"10.9.0.3/32\";\ + \n:local Env (\$Name . \"-env\");\ + \n:local ConfDir (\"/etc/\" . \$Name . \"/\");\ + \n:local ConfFile (\$Name . \".conf\");\ + \n:local Mounts (\$WorkDisk . \"/mounts/\" . \$Name . \"/\");\ + \n:local RootDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Registry \"https://registry-1.docker.io\";\ + \n:local FetchFile (\$Name . \"-\" . \$Arch . \"-oci.tar\");\ + \n:local FetchUrl (\"https://github.com/vados-dev/wg2awg/releases/download\ + /\" . \$Version . \"/\" . \$FetchFile);\ + \n:local FetchDir (\$WorkDisk . \"/dst/\");\ + \n:local AwgListen \":44044\";\ + \n:local AwgRemote \"109.107.177.79\";\ + \n\ + \n#:put \"\"\ + \n#put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n\ + \n:log warning \"[::::::::::::::: START :::::::::::::::]\"\ + \n:log warning \"Add veth and nat...\";\ + \n\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n\ + \n:do {\ + \n:log warning (\"Remove interface: name=\" . \$Vetch . \", address=\" . \ + \$VetchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/remove [find name=\$Vetch];\ + \n:log warning (\"Add interface: name=\" . \$Vetch . \", address=\" . \$Ve\ + tchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n:log warning (\"Remove ip address: address=\" . \$VetchGate . \", interf\ + ace=\" . \$Vetch);\ + \n/ip/address/remove [find address=\$VetchGate interface=\$Vetch];\ + \n:log warning (\"Add ip address: address=\" . \$VetchGate . \", interface\ + =\" . \$Vetch);\ + \n/ip/address/add address=\$VetchGate interface=\$Vetch;\ + \n:log warning (\"Remove firewall nat rule: chain=srcnat action=masquerade\ + \_src-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/remove [find chain=srcnat action=masquerade src-address\ + =(\$VetchNet . \"/24\")];\ + \n:log warning (\"Add firewall nat rule: chain=srcnat action=masquerade sr\ + c-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=(\$VethN\ + et . \"/24\");\ + \n} on-error={}\ + \n\ + \n#:do {\ + \n#/file add type=directory name=\$Mounts\ + \n#} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove WorkDir: \" . \$WorkDir . \"...\");\ + \n/file remove [find name=\$WorkDir];\ + \n:log warning (\"Add WorkDir: \" . \$WorkDir . \"...\");\ + \n/file add type=directory name=\$WorkDir;\ + \n:log warning (\"Remove config file \" . \$Mounts . \$ConfFile . \"...\")\ + ;\ + \n/file remove [find name=(\$Mounts . \$ConfFile)];\ + \n:log warning (\"Add config file \" . \$Mounts . \$ConfFile . \"...\");\ + \n/file add type=file name=(\$Mounts . \$ConfFile) contents=\"[Interface]\ + \nPrivateKey = 4CHyNhbOs923/EyNDguMXJXdghL2I3UyzXPwrANVgHs=\ + \nAddress = \$VetchAddr\ + \nMTU = \$VetchMTU\ + \nDNS = 109.107.177.79\ + \nPreUp = ip route add 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nPostDown = ip route del 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nJc = 9\ + \nJmin = 105\ + \nJmax = 920\ + \nS1 = 90\ + \nS2 = 136\ + \nS3 = 45\ + \nS4 = 27\ + \nH1 = 472437748-472438637\ + \nH2 = 707808381-707809250\ + \nH3 = 1609078552-1609079495\ + \nH4 = 1012329484-1012329741\ + \nI1 = <\ + r 4>\ + \nI2 = \ + \nI3 = \ + \nI4 = \ + \nI5 = \ + \n\ + \n[Peer]\ + \nPublicKey = o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\ + \nAllowedIPs = 0.0.0.0/0\ + \nEndpoint = \$AwgRemote\ + \nPersistentKeepalive = 10\ + \nPresharedKey = RNvF7T1cg5tyXcYQnD9N5BEp6e20vVJQTv0GMjyvHU0=\";\ + \n} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove mounts list \$Env...\");\ + \n/container/mounts/remove [find list=\$Env];\ + \n:log warning (\"Add mounts list \$Env...\");\ + \n/container/mounts/add src=(\$Mounts . \$ConfFile) dst=(\$ConfDir . \$Con\ + fFile) list=\$Env mode=ro;\ + \n:log warning (\"Remove Environment keys.\");\ + \n/container/envs/remove [find list=\$Env];\ + \n:log warning (\"Add Environment keys.\");\ + \n/container/envs/add list=\$Env key=AWG_CONFIG value=(\$ConfDir . \$ConfF\ + ile);\ + \n/container/envs/add list=\$Env key=AWG_LISTEN value=\$AwgListen\ + \n/container/envs/add list=\$Env key=AWG_REMOTE value=\$AwgRemote\ + \n/container/envs/add list=\$Env key=AWG_MODE value=client\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$WorkDisk . \"/tmp\");\ + \n/file remove [find name=(\$WorkDisk . \"/tmp\")];\ + \n:log warning (\"Add \" . \$WorkDisk . \"/tmp\");\ + \n/file add type=directory name=(\$WorkDisk . \"/tmp\");\ + \n:log warning (\"Container add tmpdir \" . \$WorkDisk . \"/tmp\");\ + \n/container config set tmpdir=(\$WorkDisk . \"/tmp\");\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$FetchDir . \$FetchFile . \".\");\ + \n/file remove [find name=(\$FetchDir . \$FetchFile)];\ + \n:log warning (\"Download image from \" . \$FetchUrl . \" and save him to\ + \_\" . \$FetchDir . \$FetchFile . \".\");\ + \n/tool/fetch url=\$FetchUrl dst-path=(\$FetchDir . \$FetchFile);\ + \n} on-error={}\ + \n\ + \n#:log warning (\"Container set registry \" . \$Registry . \" tmpdir= \" \ + . \$WorkDisk . \"/tmp\");\ + \n#/container/config/set registry-url=\$Registry tmpdir=(\$WorkDisk . \"/t\ + mp\");\ + \n\ + \n#:do {\ + \n:log warning (\"Container add width: file=\" . \$FetchDir . \$FetchFile \ + . \", interface=\" . \$Vetch . \", hostname=\" . \$Name . \", mountlists=\ + \" . \$Env . \", envlist=\" . \$Env . \", root-dir=\" . \$RootDir . \", wo\ + rkdir=\" . \$WorkDir . \", name=\" . \$Name . \", logging=yes, start-on-bo\ + ot=yes\");\ + \n/container/add file=(\$FetchDir . \$FetchFile) interface=\$Vetch hostnam\ + e=\$Name mountlists=\$Env envlist=\$Env root-dir=\$RootDir workdir=\$WorkD\ + ir name=\$Name logging=yes start-on-boot=yes;\ + \n#} on-error={}\ + \n\ + \n\ + \n#/container/start [find where interface=\$Vetch];\ + \n\ + \n#/interface/bridge add name=\$Bridge port-cost-mode=short;\ + \n#/ip/address/add address=192.168.100.1/24 interface=\$Bridge;\ + \n\ + \n#/interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n#/interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n#:put \"add config-client.json\"\ + \n#/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n#/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json \ + dst=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n#:put \"Add container\"\ + \n#/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interfac\ + e=awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-prox\ + y-client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pr\ + oxy-go-client\" mountlists=awgcfg-client\ + \n\ + \n#:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n#:put \"Add user:\"\ + \n#/user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n#:put \"Add forwarding port web-ui\"\ + \n#/ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n#:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n#/interface/wireguard/add name=wg-awg-client\ + \n#/ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add dont-require-permissions=no name=tmp_print owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDguMX\ + JXdghL2I3UyzXPwrANVgHs=\" listen-port=21641 \ + \n :put \"======= AWG PROXY SETUP =======\"\ + \n :put \"\"\ + \n :put \"Run awg-proxy on your external device (10.30.30.33).\"\ + \n :put \"\"\ + \n :put \"1. Download the binary for your platform:\"\ + \n :put \" Linux arm64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm64\"\ + \n :put \" Linux arm: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm\"\ + \n :put \" Linux amd64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-amd64\"\ + \n :put \"\"\ + \n :put \"2. Set environment variables and run:\"\ + \n :put \"export AWG_LISTEN=\\\":51820\\\"\"\ + \n :put \"export AWG_REMOTE=\\\"109.107.177.79:55055\\\"\"\ + \n :put \"export AWG_JC=\\\"9\\\"\"\ + \n :put \"export AWG_JMIN=\\\"105\\\"\"\ + \n :put \"export AWG_JMAX=\\\"920\\\"\"\ + \n :put \"export AWG_S1=\\\"90\\\"\"\ + \n :put \"export AWG_S2=\\\"136\\\"\"\ + \n :put \"export AWG_H1=\\\"472437748-472438637\\\"\"\ + \n :put \"export AWG_H2=\\\"707808381-707809250\\\"\"\ + \n :put \"export AWG_H3=\\\"1609078552-1609079495\\\"\"\ + \n :put \"export AWG_H4=\\\"1012329484-1012329741\\\"\"\ + \n :put \"export AWG_SERVER_PUB=\\\"o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+\ + v0b9jU=\\\"\"\ + \n :put (\"export AWG_CLIENT_PUB=\\\"\" . [/interface/wireguard/get [find\ + \_name=wg-VDSina] public-key] . \"\\\"\")\ + \n :put \"export AWG_S3=\\\"45\\\"\"\ + \n :put \"export AWG_S4=\\\"27\\\"\"\ + \n :put \"export AWG_I1=\\\"\\\"\"\ + \n :put \"export AWG_I2=\\\"\\\"\"\ + \n :put \"export AWG_I3=\\\"\\\"\"\ + \n :put \"export AWG_I4=\\\"\\\"\"\ + \n :put \"export AWG_I5=\\\"\\\"\"\ + \n :put \"\"\ + \n :put \"chmod +x awg-proxy-linux-* && ./awg-proxy-linux-\"\ + \n :put \"\"\ + \n :put \"3. (Optional) Create a systemd service for auto-start.\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-VDSina comm\ + ent=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-VDSina com\ + ment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=VDSina-tunnel dst-addr\ + ess=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run VDSina-uninstall\"\ + \n :put \"================================\"" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +add name=manager policy="local,ssh,ftp,read,write,policy,api,rest-api,!telnet,\ + !reboot,!test,!winbox,!password,!web,!sniff,!sensitive,!romon" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=*3 registry-mirrors="https://reg.vados.\ + ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/caps-man datapath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + xs-DataPath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + DataPath +/caps-man manager +set ca-certificate=CAPsMAN-CA-ABE2F4E9EE17 certificate=CAPsMAN-ABE2F4E9EE17 \ + enabled=yes require-peer-certificate=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=Bridge-LAN +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/container config +set layer-dir=/sata1/docker/layers memory-high=200.0MiB memory-max=4096.0MiB \ + registry-url=https://registry-1.docker.io tmpdir=/sata1/tmp username=\ + amsternl +/container envs +add key=AWG_CONFIG list=wg2awg-env value=/etc/wg2awg/wg2awg.conf +add key=AWG_LISTEN list=wg2awg-env value=:44044 +add key=AWG_MODE list=wg2awg-env value=client +add key=AWG_REMOTE list=wg2awg-env value=109.107.177.79 +/container mounts +add dst=/etc/wg2awg/wg2awg.conf list=wg2awg-env mode=ro src=\ + /sata1/mounts/wg2awg/wg2awg.conf +/ip smb +set enabled=no +/interface bridge port +add bridge=Bridge-LAN interface=LAN +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=ether1 list=WAN +add interface=Bridge-LAN list=LAN +/interface wifi cap +set discovery-interfaces=*DF +/interface wifi capsman +set ca-certificate=*13 certificate=*14 enabled=yes interfaces=Bridge-LAN \ + package-path=/tmpfs/capsman-packages require-peer-certificate=no \ + upgrade-policy=none +/ip address +add address=10.30.30.10/24 interface=Bridge-LAN network=10.30.30.0 +/ip dhcp-client +add disabled=yes interface=ether1 name=client1 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=*3 lease-script=\ + lease-script lease-time=10m name=nucDHCP server-address=10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \ + verify-doh-cert=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set reverse-proxy disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \ + webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=*3 type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/special-login +add port=serial0 +/system clock +set time-zone-name=Europe/Moscow +/system gps +set set-system-time=yes +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system package update +set check-certificate=yes-without-crl ip-version=ipv4 +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260816/20260816234001-Diff-Config.rsc b/MikroNUC/history/20260816/20260816234001-Diff-Config.rsc new file mode 100644 index 0000000..452dbc6 --- /dev/null +++ b/MikroNUC/history/20260816/20260816234001-Diff-Config.rsc @@ -0,0 +1,8 @@ +5390c5390 +< enabled=yes require-peer-certificate=yes +--- +> enabled=yes +5418a5419,5421 +> /ip neighbor discovery-settings +> set lldp-mac-phy-config=yes lldp-max-frame-size=yes lldp-med-net-policy-vlan=\ +> 1 lldp-vlan-info=yes -- 2.52.0