From 9fb24014f32fc0a1557ff17b4352339def782c47 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Fri, 10 Jul 2026 13:20:03 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Jul 10 13:20:03. --- MikroMaster/tmp/Diff-Config.rsc | 3837 ------------ .../20260710/20260710132001-Binary.backup | Bin 0 -> 385044 bytes MikroNUC/20260710/20260710132001-Config.rsc | 5519 +++++++++++++++++ .../20260710/20260710132001-Diff-Config.rsc | 3 + 4 files changed, 5522 insertions(+), 3837 deletions(-) delete mode 100644 MikroMaster/tmp/Diff-Config.rsc create mode 100644 MikroNUC/20260710/20260710132001-Binary.backup create mode 100644 MikroNUC/20260710/20260710132001-Config.rsc create mode 100644 MikroNUC/history/20260710/20260710132001-Diff-Config.rsc diff --git a/MikroMaster/tmp/Diff-Config.rsc b/MikroMaster/tmp/Diff-Config.rsc deleted file mode 100644 index 85f8d58..0000000 --- a/MikroMaster/tmp/Diff-Config.rsc +++ /dev/null @@ -1,3837 +0,0 @@ -6,3841d5 -< /interface bridge -< add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\ -< "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\ -< Bridge-LAN port-cost-mode=short -< /interface ethernet -< set [ find default-name=ether1 ] comment=Unet-cable loop-protect=off name=\ -< Unet-ether1 rx-flow-control=auto tx-flow-control=auto -< set [ find default-name=ether2 ] comment=LAN-2 -< set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\ -< -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3 -< set [ find default-name=ether4 ] comment=LAN-4 -< set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\ -< -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \ -< loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto -< /interface wireless -< # managed by CAPsMAN -< # channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding -< set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \ -< ssid=vados wireless-protocol=802.11 -< # managed by CAPsMAN -< # channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding -< set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \ -< ssid=vados5g wireless-protocol=802.11 -< /interface wireguard -< add comment=WG listen-port=13231 mtu=1320 name=WG -< add comment="WG interface for Amnezia route" disabled=yes listen-port=33033 \ -< mtu=1360 name=wg-nuc -< /interface list -< add include=static name=LAN -< add name=Internet -< add include=Internet name=WAN -< /interface wireless security-profiles -< set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\ -< dynamic-keys supplicant-identity=MikroTik -< /iot wiliot servers -< set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" -< /ip dhcp-server option -< add code=12 name=HostName -< add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" -< /ip dhcp-server option sets -< add name=HP1505n options=HostName -< add name=StartLife1 options=HostName -< add name=amsterDev options=HostName -< add name=MiTV options=HostName -< add name=miller options=HostName -< add name=amster options=HostName -< add name=garage options=HostName -< add name=domain-search-set options=domain-search-list -< add name=VADOS-LEN options=HostName -< add name=VADOS-NUC options=HostName -< add name=MikroNUC options=HostName -< add name=master options=HostName -< add name=MikroYellow options=HostName -< add name="=\"Client ID\"" options=HostName -< add name=iVados options=HostName -< /ip dns forwarders -< add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no -< add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \ -< verify-doh-cert=no -< add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no -< add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no -< add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\ -< no -< add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\ -< no -< add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no -< /ip ipsec proposal -< set [ find default=yes ] disabled=yes -< /ip pool -< add name=dhcp ranges=10.30.30.83-10.30.30.254 -< /ip dhcp-server -< add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ -< dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \ -< name=masterDHCP server-address=10.30.30.81 -< /ip smb users -< set [ find default=yes ] disabled=yes -< add disabled=yes name=vados -< /ipv6 dhcp-client option -< add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" -< add code=12 name=HostName value="\$(HOSTNAME)" -< add code=61 name=DUID value=0x00030001488f5a8e1abc -< add code=61 name=clientid -< /ipv6 dhcp-server option -< add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" -< add code=12 name=HostName value="\$(HOSTNAME)" -< add code=61 name=CLIENT_DUID -< add code=61 name=CLIENT_MAC -< /ppp profile -< set *FFFFFFFE use-upnp=no -< /routing bgp template -< set default disabled=no output.network=bgp-networks -< /routing table -< add disabled=no fib name=To-VPN -< add disabled=no fib name=r_to_vpn -< /system logging action -< add email-start-tls=yes email-to=vados@vados.ru name=email target=email -< /system script -< add dont-require-permissions=no name=fetchCustom owner=vados policy=\ -< ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ -< global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ -< \n\r\ -< \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ -< 0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\ -< \n\r\ -< \n#:local Script AM-setup\ -< \n;\r\ -< \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ -< heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ -< sc\") output=user as-value ]->\"data\");\r\ -< \n\ -< \n#/usb1/mikro_bak_rsa.pub\ -< \n\ -< \n\r\ -< \n#\ -< \n\r\ -< \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ -< 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ -< \n\r\ -< \n#\r\ -< \n\ -< \n#root.mnuc.backuper\ -< \n\ -< \n\r\ -< \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ -< .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ -< \n\ -< \n#:local Script AM-GlobalConfig;\ -< \n\r\ -< \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ -< heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ -< sc\") output=user as-value ]->\"data\");\r\ -< \n\ -< \n#/usb1/mikro_bak_rsa.pub\ -< \n#:local FetchFile AM-DOHCert.rsc\ -< \n\ -< \n\r\ -< \n\r\ -< \n#\ -< \n:global MkDir;\ -< \n\r\ -< \n\ -< \n#:local FetchFile Binary.backup\ -< \n:local localDir \"\";\ -< \n\ -< \n\r\ -< \n#\$MkDir \$localDir;\r\ -< \n\ -< \n#\ -< \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ -< \$localDir . \$FetchFile);\r\ -< \n" -< add comment="Global Config Script" dont-require-permissions=no name=\ -< AM-GlobalConfig owner=AM-GlobalConfig policy=\ -< ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ -< !rsc by Vados\r\ -< \n# RouterOS script: AM-GlobalConfig\r\ -< \n# Script comment: Global Config Script\r\ -< \n# Copyright (c) 2007-2026 Vados \r\ -< \n#\r\ -< \n#\r\ -< \n# Warning: Dont touch this line!\r\ -< \n:global Identity [/system/identity/get name];\r\ -< \n:global GlobalConfReady false;\r\ -< \n#\r\ -< \n#\r\ -< \n# Global Url For Amster scripts to fetch\r\ -< \n# most be defined in AM-Init-Script or AM-setup scripts\r\ -< \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ -< \n:global ScriptsUrlSuffix (a);\r\ -< \n:global CheckSumsVerify true;\r\ -< \n\r\ -< \n:global ScriptUpdatesCRLF true;\r\ -< \n:global CommentsInScripts true;\r\ -< \n\r\ -< \n# Debug output:\r\ -< \n:global PrintDebug true; #false;\r\ -< \n\r\ -< \n# Debug output for specific script:\r\ -< \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ -< \n\r\ -< \n# Debug logs\r\ -< \n# Other actions (disk, email, remote or support) can be used as well.\r\ -< \n# I do not recommend using echo - use debug output instead (https://rsc.\ -< eworm.de/main/DEBUG.html#debug-output).\r\ -< \n#/system/logging/add topics=script,debug action=memory;\r\ -< \n\r\ -< \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ -< \n:global Domain \"WORKGROUP\";\r\ -< \n\r\ -< \n:global EmailGeneralTo \"vados@vados.ru\";\r\ -< \n#:global EmailGeneralCc \"\";\r\ -< \n\r\ -< \n# \$ScriptInstallUpdate mod/notification-telegram\r\ -< \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ -< \";\r\ -< \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ -< \n# Use this to send notifications to a specific topic in group.\r\ -< \n#:global TelegramThreadId \"30\";\r\ -< \n# Using telegram-chat you have to define trusted chat ids (not group ids\ -< !)\r\ -< \n# or user names. Groups allow to chat with devices simultaneously.\r\ -< \n:global TelegramChatIdsTrusted {\r\ -< \n \"454403445\"\r\ -< \n \"-1003631309063\"\r\ -< \n \"-5124482807\"\r\ -< \n \"1087968824\";\r\ -< \n};\r\ -< \n# \"-5294757340\";\r\ -< \n\r\ -< \n:global TelegramChatGroups \"(all)\";\r\ -< \n#:global TelegramChatGroups \"(all|home|office)\";\r\ -< \n\r\ -< \n:global NotificationFunctions {\r\ -< \n \"email\"\r\ -< \n \"telegram\";\r\ -< \n};\r\ -< \n# Toggle this to disable symbols in notifications.\r\ -< \n:global NotificationsWithSymbols true;\r\ -< \n:global TerminalColorOutput true;\r\ -< \n\r\ -< \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ -< \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ -< \n\r\ -< \n## Update channel. Possible values: stable, long-term, testing, developm\ -< ent\r\ -< \n:global updateChannel \"stable\";\r\ -< \n\r\ -< \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ -< \");\r\ -< \n:global CertRenewTime 2w;\r\ -< \n:global CertRenewPass (a); #{\r\ -< \n# \"\";\r\ -< \n# \"v3ry-s3cr3t\";\r\ -< \n# \"4n0th3r-s3cr3t\";\r\ -< \n#};\r\ -< \n:global CertWarnTime 1w;\r\ -< \n:global CertIssuedExportPass (a); # {\r\ -< \n# \"\";\r\ -< \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ -< \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ -< \n#};\r\ -< \n\r\ -< \n# Script BackupAndUpdate mode, possible values: backup,\r\ -< \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ -< n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ -< \n# osupdate - Update if available and creates backups before/after update\ -< \_(ignores `forceBackup`)\r\ -< \n# Set `forceBackup` to true to always create backups, even\ -< \_without updates\r\ -< \n# osnotify - Set `forceBackup` to always create backups on every run\r\ -< \n:global DevInfoIncludeIP true;\r\ -< \n:global BackupAndUpdateMode \"osnotify\"\r\ -< \n\r\ -< \n:global forceBackup true;\r\ -< \n:global BackupPassword \"Peskar55\";\r\ -< \n\r\ -< \n# SFTP Backup Variables\r\ -< \n:global BackupRandomDelay 0;\r\ -< \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ -< \n:global BackupUploadUser \$Identity;\r\ -< \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ -< \n\r\ -< \n:global BackupSendBinary true;\r\ -< \n:global BackupSendExport true;\r\ -< \n:global BackupSendGlobalConfig true;\r\ -< \n:global BackupSendScripts true;\r\ -< \n\r\ -< \n# Remove local file after uploading if no errors\r\ -< \n:global BackupRmLocal true;\r\ -< \n\r\ -< \n# Local Backups Root Directory \r\ -< \n:global BackupLocalRoot \"tmpfs\";\r\ -< \n\r\ -< \n# Encrypt Backup\r\ -< \n:global BackupEncrypt true;\r\ -< \n\r\ -< \n# Sensitive information in Backups\r\ -< \n:global BackupSens true;\r\ -< \n\r\ -< \n# User Export\r\ -< \n:global BackupUser true;\r\ -< \n\r\ -< \n# License Export (not for CHR, will silently skip)\r\ -< \n:global BackupLicense false;\r\ -< \n\r\ -< \n# SSH Keys\r\ -< \n:global BackupSshKeys true;\r\ -< \n\r\ -< \n# Certificate Export\r\ -< \n:global BackupCerts true;\r\ -< \n\r\ -< \n# Certificate Password\r\ -< \n:global BackupCertsPasswd \"\";\r\ -< \n\r\ -< \n# User-Manager Export\r\ -< \n:global BackupUserMan false;\r\ -< \n\r\ -< \n# The Dude Export\r\ -< \n:global BackupDude false;\r\ -< \n\r\ -< \n# User Files to export, comma-separated string or array of strings\r\ -< \n# User Files are not removed on backup\r\ -< \n# Any directory paths will be removed (/ -> _) on remote file\r\ -< \n# Nonpresent files are silently skipped\r\ -< \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ -< \n\r\ -< \n# load functions and any custom scripts\r\ -< \n# [ /system/script/find where name=\"global-config-ov\ -< erlay\" ], \\\r\ -< \n# [ /system/script/find where name~\"^global-config-o\ -< verlay\\\\.d/.\" ]\r\ -< \n#\r\ -< \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ -< ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ -< \r\ -< \n# :onerror Err {\r\ -< \n# /system/script/run \$Script;\r\ -< \n# } do={\r\ -< \n# :log error (\"Loading configuration from configs and functions\"\ -< \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ -< \n# }\r\ -< \n#}\r\ -< \n#:log info \"\\ndevMode = \$devMode\";\r\ -< \n#:log info \"\\ndevRunning = \$devRunning\";\r\ -< \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ -< GlobalRUN\\r\?\\n\" ] do={\r\ -< \n :onerror Err {\r\ -< \n /system/script/run \$Script;\r\ -< \n } do={\r\ -< \n :log error (\"Run script \" . [ /system/script/get \$Script name \ -< ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ -< \n }\r\ -< \n}\r\ -< \n\r\ -< \n# signal we are ready\r\ -< \n:set GlobalConfReady true;\r\ -< \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ -< \n" -< add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ -< owner=AM-GlobalFunc policy=\ -< ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ -< !rsc by Vados\r\ -< \n# RouterOS script: AM-GglobalFunc\r\ -< \n# Script comment: Global functions\r\ -< \n# Copyright (c) 2005-2026 Vados \r\ -< \n#\r\ -< \n#\r\ -< \n# requires RouterOS, version=7.19\r\ -< \n# requires device-mode, fetch, scheduler\r\ -< \n:local ExitOK false;\r\ -< \n:local ScriptName [ :jobname ];\r\ -< \n#:global checkRunJob \$SriptName;\r\ -< \n#:global fixCRLF;\r\ -< \n#:if (\$fixCRLF != false) do={\r\ -< \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ -< ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ -< }\r\ -< \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ -< et \$fixScript source ] ] \$fixScript};};\r\ -< \n#}\r\ -< \n:global GlobalFuncReady false;\r\ -< \n\r\ -< \n# Git commit id & info, expected configuration version\r\ -< \n:global CommitId \"main/729/f42d43ae\";\r\ -< \n:global CommitTAG \"unknown\";\r\ -< \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ -< r: root, in 00:05:03 01.07.2026.\";\r\ -< \n\r\ -< \n# The variables are received right here.\r\ -< \n:global GlobalConfVersion 140;\r\ -< \n\r\ -< \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ -< \n\r\ -< \n:global Identity [/system/identity/get name];\r\ -< \n:global IdentityShort [:pick \$Identity 0 18];\r\ -< \n\r\ -< \n:global devBoardName [/system/resource/get board-name];\r\ -< \n:global devMode [/system/device-mode/get mode];\r\ -< \n:global devCurArch [/system/resource/get architecture-name];\r\ -< \n:global devCurVersion [/system/resource/get version];\r\ -< \n\r\ -< \n# Variables defined in AM-GlobalConfig.rsc\r\ -< \n:global TerminalColorOutput;\r\ -< \n:global CommentsInScripts;\r\ -< \n:global DetectIpAddrDefault;\r\ -< \n:global DetectIpAddrFallback;\r\ -< \n:global updateChannel;\r\ -< \n:global Domain;\r\ -< \n:global EmailGeneralTo;\r\ -< \n:global BackupAndUpdateMode;\r\ -< \n\r\ -< \n# Single functions, without nested functions.\r\ -< \n:global MiniDateTimeStamp;\r\ -< \n:global MicroDateTimeStamp;\r\ -< \n\r\ -< \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ -< \n:global LogPrint;\r\ -< \n\r\ -< \n# DeviceInfo and Updates\r\ -< \n:global IsCheckUpdates;\r\ -< \n:global WaitCheckUpdates;\r\ -< \n:global GetPubIp;\r\ -< \n\r\ -< \n:global GetArrDeviceInfo;\r\ -< \n:global WaitArrDeviceInfo;\r\ -< \n\r\ -< \n:global devModel;\r\ -< \n:global devRunningMode;\r\ -< \n\r\ -< \n:global devRbRevision;\r\ -< \n:global devRbSerialNumber;\r\ -< \n:global devRbVerAvail;\r\ -< \n\r\ -< \n:global runningChannelVersion;\r\ -< \n:global runningChannel;\r\ -< \n:global runningVersion;\r\ -< \n\r\ -< \n:global devBuildTime;\r\ -< \n:global ROsVerAvail;\r\ -< \n:global PkgUpdStatus;\r\ -< \n:global currentUpdateChannel;\r\ -< \n\r\ -< \n:global ScriptInstallUpdate;\r\ -< \n\r\ -< \n:global DeviceInfo;\r\ -< \n\r\ -< \n:global OldMode;\r\ -< \n\r\ -< \n:global ParseKeyValueStore;\r\ -< \n:global RandomDelay;\r\ -< \n:global GetRandomNumber;\r\ -< \n:global EscapeForRegEx;\r\ -< \n:global CharacterMultiply;\r\ -< \n:global CharacterReplace;\r\ -< \n:global CleanFilePath;\r\ -< \n:global CleanName;\r\ -< \n\r\ -< \n:global CommitBrief;\r\ -< \n\r\ -< \n:global EitherOr;\r\ -< \n:global FormatLine;\r\ -< \n:global GetRandom20CharAlNum;\r\ -< \n:global GetRandom20CharHex;\r\ -< \n:global GetRandomNumber;\r\ -< \n:global Grep;\r\ -< \n:global IfThenElse;\r\ -< \n:global MAX;\r\ -< \n:global MIN;\r\ -< \n:global HumanReadableNum;\r\ -< \n\r\ -< \n:global IsFullyConnected;\r\ -< \n:global IsDNSResolving;\r\ -< \n:global IsTimeSync;\r\ -< \n:global IsTimeSyncCached;\r\ -< \n:global IsTimeSyncResetNtp;\r\ -< \n\r\ -< \n:global MkDir;\r\ -< \n:global RmDir;\r\ -< \n:global RmFile;\r\ -< \n:global FileGet;\r\ -< \n:global Unix2Dos;\r\ -< \n:global UrlEncode;\r\ -< \n:global WaitForFile;\r\ -< \n:global ScriptLock;\r\ -< \n:global SendTelegram;\r\ -< \n:global NotificationFunctions;\r\ -< \n:global SendNotification;\r\ -< \n:global SendNotification2;\r\ -< \n:global SymbolForNotification;\r\ -< \n:global SymbolByUnicodeName;\r\ -< \n:global ValidateSyntax;\r\ -< \n:global CheckSumsVerify;\r\ -< \n:global GlobalConfChanges;\r\ -< \n:global GlobalConfMigration;\r\ -< \n:global VersionToNum;\r\ -< \n:global RequiredRouterOS;\r\ -< \n:global ExitError;\r\ -< \n:global ExitOnError;\r\ -< \n\r\ -< \n:global FetchHugeFiles;\r\ -< \n:global FetchUserAgentStr;\r\ -< \n:global FileExists;\r\ -< \n:global CertificateAvailable;\r\ -< \n:global CertificateDownload;\r\ -< \n:global CertificateNameByCN;\r\ -< \n:global CharacterMultiply;\r\ -< \n\r\ -< \n:global InspectVar;\r\ -< \n:global InspectVarRet;\r\ -< \n:global ParseCustom;\r\ -< \n\r\ -< \n:set IsCheckUpdates do={\r\ -< \n :local isInfo [:tobool \$1];\r\ -< \n :global updateChannel;\r\ -< \n :global PkgUpdStatus;\r\ -< \n :global currentUpdateChannel;\r\ -< \n :global ROsVerAvail;\r\ -< \n :global arrDeviceInfo;\r\ -< \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ -< \n :local CurrentChannel [ /system/package/update/get channel ];\r\ -< \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ -< el) do={\r\ -< \n :retry command={/system/package/update set channel=\$updateChannel} \ -< \_delay=300ms max=5 on-error={};\r\ -< \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ -< \n }\r\ -< \n :local Update [ /system/package/update/get ];\r\ -< \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ -< \n :set currentUpdateChannel \$Channel;\r\ -< \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ -< \n :local StatusPkg \"undefined\";\r\ -< \n :log info (\$0 . \" Checking for updates...\");\r\ -< \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ -< dates without-paging as-value]->\"status\")} \\\r\ -< \n delay=300ms max=5 on-error={};\r\ -< \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ -< \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ -< s true; } else={ :set PkgUpdStatus false; }\r\ -< \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ -< ] ];\r\ -< \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ -< \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ -< \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ -< \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ -< \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ -< \n }\r\ -< \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ -< kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ -< \n :return true;\r\ -< \n } else={\r\ -< \n :return \$PkgUpdStatus;\r\ -< \n }\r\ -< \n}\r\ -< \n\r\ -< \n:set WaitCheckUpdates do={\r\ -< \n :global IsCheckUpdates;\r\ -< \n :global PkgUpdStatus;\r\ -< \n :global currentUpdateChannel;\r\ -< \n :global ROsVerAvail;\r\ -< \n :global arrDeviceInfo;\r\ -< \n :local Status \"\";\r\ -< \n :local Update;\r\ -< \n :local WaitCount 0;\r\ -< \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ -< \n :return false;\r\ -< \n }\r\ -< \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ -< \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ -< \") && \$WaitCount < 60) do={\r\ -< \n :delay 1s;\r\ -< \n :set WaitCount (\$WaitCount + 1);\r\ -< \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ -< \n }\r\ -< \n :set Update [ /system/package/update/get ];\r\ -< \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ -< \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ -< \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ -< \n :set PkgUpdStatus true;\r\ -< \n } else={\r\ -< \n :set PkgUpdStatus false;\r\ -< \n }\r\ -< \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ -< \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ -< \n }\r\ -< \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ -< \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ -< do={\r\ -< \n :return false;\r\ -< \n }\r\ -< \n :return true;\r\ -< \n}\r\ -< \n\r\ -< \n:set WaitArrDeviceInfo do={\r\ -< \n :global GetArrDeviceInfo;\r\ -< \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ -< \n :delay 1s;\r\ -< \n }\r\ -< \n}\r\ -< \n\r\ -< \n:set GetArrDeviceInfo do={\r\ -< \n :global LogPrint;\r\ -< \n :global arrDeviceInfo;\r\ -< \n :global devBoardName;\r\ -< \n :global devModel;\r\ -< \n :global devRunning;\r\ -< \n :global devCurArch;\r\ -< \n :global devRbRevision;\r\ -< \n :global devRbSerialNumber;\r\ -< \n :global devBuildTime;\r\ -< \n :global runningChannelVersion;\r\ -< \n :global runningChannel;\r\ -< \n :global runningVersion;\r\ -< \n :global currentUpdateChannel;\r\ -< \n :global ROsVerAvail;\r\ -< \n\r\ -< \n :local DeviceInfo;\r\ -< \n :local Resource [/system/resource/get];\r\ -< \n :local Update [ /system/package/update/get ];\r\ -< \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ -< \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ -< \n :local RouterBoard;\r\ -< \n :local IsRouterBoard false;\r\ -< \n :local RunningMode \"\";\r\ -< \n\r\ -< \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ -< \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ -< \n :set runningChannelVersion \$VersionString;\r\ -< \n :set runningVersion \$VersionString;\r\ -< \n :set runningChannel \"\";\r\ -< \n\r\ -< \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ -< {\r\ -< \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ -< \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ -< len \$VersionString ] ];\r\ -< \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ -< \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ -< \r\ -< \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ -< \n }\r\ -< \n }\r\ -< \n\r\ -< \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ -< \_3] != \"x86\") do={\r\ -< \n :do {\r\ -< \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ -< \n# :set RouterBoard [ /system/routerboard/get ];\r\ -< \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ -< \n :set IsRouterBoard true;\r\ -< \n }\r\ -< \n } on-error={}\r\ -< \n }\r\ -< \n\r\ -< \n :do {\r\ -< \n :set RunningMode [ /system/device-mode/get mode ];\r\ -< \n } on-error={\r\ -< \n :do {\r\ -< \n :set RunningMode [ /system/device-mode/get running ];\r\ -< \n } on-error={\r\ -< \n :set RunningMode \"\";\r\ -< \n }\r\ -< \n }\r\ -< \n :set devRunning \$RunningMode;\r\ -< \n\r\ -< \n :if (\$IsRouterBoard = true) do={\r\ -< \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ -< \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ -< \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ -< ];\r\ -< \n } else={\r\ -< \n :set devModel \$devBoardName;\r\ -< \n :set devRbRevision \"\";\r\ -< \n :set devRbSerialNumber \"\";\r\ -< \n }\r\ -< \n\r\ -< \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ -< \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ -< \n\r\ -< \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ -< \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ -< \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ -< \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ -< \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ -< \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ -< \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ -< \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ -< ion;\r\ -< \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ -< \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ -< \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ -< \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ -< current-firmware\") ];\r\ -< \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ -< upgrade-firmware\") ];\r\ -< \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ -< \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ -< alled-version\") ];\r\ -< \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ -< \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ -< ) ];\r\ -< \n\r\ -< \n :set arrDeviceInfo \$DeviceInfo;\r\ -< \n :return \$DeviceInfo;\r\ -< \n}\r\ -< \n\r\ -< \n:set DeviceInfo do={\r\ -< \n :global GetArrDeviceInfo;\r\ -< \n :global GlobalConfVersion;\r\ -< \n :global Identity;\r\ -< \n :global IfThenElse;\r\ -< \n :global FormatLine;\r\ -< \n :global CommitBrief;\r\ -< \n\r\ -< \n :local License [/system/license/get];\r\ -< \n :local Snmp [ /snmp/get ];\r\ -< \n :local Info [ \$GetArrDeviceInfo ];\r\ -< \n\r\ -< \n :if ([ :typeof \$Info ] != \"array\") do={\r\ -< \n :return false;\r\ -< \n }\r\ -< \n\r\ -< \n :return ( \\\r\ -< \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ -< \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ -< \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ -< \_. \\\r\ -< \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ -< \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ -< \_\\\r\ -< \n \"Hardware:\\n\" . \\\r\ -< \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ -< \\\r\ -< \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ -< n\" . \\\r\ -< \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ -< \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ -< \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ -< \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ -< \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ -< \\n\") ] . \\\r\ -< \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ -< \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ -< \")) ] . \"\\n\") ] . \\\r\ -< \n \"RouterOS:\\n\" . \\\r\ -< \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ -< \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ -< \")) ] . \"\\n\") ] . \\\r\ -< \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ -< \\n\" . \\\r\ -< \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ -< \_\"\\n\" . \\\r\ -< \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ -< \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ -< \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ -< \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ -< \"\\n\") ] . \\\r\ -< \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ -< \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ -< \_\\\r\ -< \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ -< \_\"\\n\") ] . \\\r\ -< \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ -< \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ -< ) \\\r\ -< \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ -< \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ -< \n \"RouterOS-Scripts:\\n\" . \\\r\ -< \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ -< \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ -< \n}\r\ -< \n\r\ -< \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ -< tionFunctions ({})}\r\ -< \n\r\ -< \n:set GetRandom20CharAlNum do={\r\ -< \n :global EitherOr;\r\ -< \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ -< FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ -< \n}\r\ -< \n\r\ -< \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ -< \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ -< \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ -< \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ -< \n\r\ -< \n:global checkRunJob;\r\ -< \n:set checkRunJob do={\r\ -< \n :local Script [ :tostr \$1 ];\r\ -< \n :global ScriptLock; \r\ -< \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ -< \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ -< :set Job [ /system/script/job/get \$Job ];\r\ -< \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ -< stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ -< \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ -< lse; \r\ -< \n}\r\ -< \n\r\ -< \n:set InspectVar do={\r\ -< \n :global InspectVarRet;\r\ -< \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ -< \n}\r\ -< \n\r\ -< \n:set CommitBrief do={\r\ -< \n :global CommitId;\r\ -< \n :global CommitInfo;\r\ -< \n :if (\$CommitId = \"unknown\") do={\r\ -< \n :return \"unknown\";\r\ -< \n }\r\ -< \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ -< \n}\r\ -< \n\r\ -< \n:set InspectVarRet do={\r\ -< \n :local Input \$1;\r\ -< \n :local Level (0 + [ :tonum \$2 ]);\r\ -< \n :global CharacterReplace;\r\ -< \n :global IfThenElse;\r\ -< \n :global InspectVarRet;\r\ -< \n :local IndentReturn do={\r\ -< \n :local Prefix [ :tostr \$1 ];\r\ -< \n :local Value [ :tostr \$2 ];\r\ -< \n :local Level [ :tonum \$3 ];\r\ -< \n :global CharacterMultiply;\r\ -< \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ -< fix . \"-> \" . \$Value);\r\ -< \n }\r\ -< \n :local TypeOf [ :typeof \$Input ];\r\ -< \n :local Len [ :len \$Input ];\r\ -< \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ -< \n :if (\$TypeOf = \"array\") do={\r\ -< \n :foreach Key,Value in=\$Input do={\r\ -< \n :set \$Return (\$Return . \"\\n\" . \\\r\ -< \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ -< \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ -< \n }\r\ -< \n } else={\r\ -< \n :if (\$TypeOf = \"str\") do={\r\ -< \n :set \$Return (\$Return . \"\\n\" . \\\r\ -< \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ -< \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ -< \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ -< \n }\r\ -< \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ -< \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ -< \n }\r\ -< \n }\r\ -< \n :if (\$TypeOf != \"nothing\") do={\r\ -< \n :set \$Return (\$Return . \"\\n\" . \\\r\ -< \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ -< \_\\\r\ -< \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ -< \n }\r\ -< \n }\r\ -< \n :return \$Return;\r\ -< \n}\r\ -< \n\r\ -< \n:set GetPubIp do={\r\ -< \n :global DetectIpAddrDefault;\r\ -< \n :global DetectIpAddrFallback;\r\ -< \n\r\ -< \n :local PubIpAddr false;\r\ -< \n :local Url \$DetectIpAddrDefault;\r\ -< \n :local JobName [ :jobname ];\r\ -< \n\r\ -< \n :do {\r\ -< \n :log debug (\$0 . \" Trying to detect public IP using default serv\ -< ice: \" . \$Url . \"...\");\r\ -< \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ -< \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ -< )} \\\r\ -< \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ -< detect public IP using default service: \" . \$Url . \".\")}\r\ -< \n } on-error={\r\ -< \n :log error (\$0 . \" Failed to detect public IP using default serv\ -< ice: \" . \$Url . \".\");\r\ -< \n :set Url \$DetectIpAddrFallBack;\r\ -< \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ -< vice: \" . \$Url . \"...\");\r\ -< \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ -< \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ -< )} \\\r\ -< \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ -< \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ -< \n };\r\ -< \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ -< \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ -< {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ -< \n :return \$PubIpAddr;\r\ -< \n}\r\ -< \n\r\ -< \n:set FormatLine do={\r\ -< \n :local Key [ :tostr \$1 ];\r\ -< \n :local Value [ :tostr \$2 ];\r\ -< \n :local Indent [ :tonum \$3 ];\r\ -< \n :local Spaces;\r\ -< \n :local Return \"\";\r\ -< \n :global CharacterMultiply;\r\ -< \n :global EitherOr;\r\ -< \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ -< \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ -< \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ -< \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ -< n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ -< \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ -< \$Return ]) ] . \$Value)}\r\ -< \n :return \$Return;\r\ -< \n}\r\ -< \n\r\ -< \n:set ParseCustom do={\r\ -< \n :local Str [ :tostr \$1 ];\r\ -< \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ -< \n :local End [ :tostr \$3 ];\r\ -< \n :local Num [ :tonum \$4 ];\r\ -< \n :local Return;\r\ -< \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ -< \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ -< \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ -< lse={\r\ -< \n :set End [:find \$rest \$End];\r\ -< \n :set Return [:pick \$rest 0 \$End];\r\ -< \n }\r\ -< \n:return \$Return;\r\ -< \n}\r\ -< \n\r\ -< \n:set LogPrint do={\r\ -< \n :local Severity [ :tostr \$1 ];\r\ -< \n :local Name [ :tostr \$2 ];\r\ -< \n :local Message [ :tostr \$3 ];\r\ -< \n :global PrintDebug;\r\ -< \n :global PrintDebugOverride;\r\ -< \n :global EitherOr;\r\ -< \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ -< ];\r\ -< \n :local PrintSeverity do={\r\ -< \n :global TerminalColorOutput;\r\ -< \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ -< \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ -< \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ -< \n}\r\ -< \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ -< \r\ -< \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ -< \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ -< \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ -< \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ -< \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ -< \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ -< erity \$Severity ] . \": \" . \$Message)}\r\ -< \n}\r\ -< \n\r\ -< \n:set CertificateAvailable do={\r\ -< \n :local CommonName [ :tostr \$1 ];\r\ -< \n :local UseFor [ :tostr \$2 ];\r\ -< \n\r\ -< \n :global CertificateDownload;\r\ -< \n :global ParseKeyValueStore;\r\ -< \n\r\ -< \n :if ([ :len \$UseFor ] = 0) do={\r\ -< \n :log warning (\$0 . \"The intended use is undefined!\");\r\ -< \n :set UseFor \"undefined\";\r\ -< \n }\r\ -< \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ -< \n [ /certificate/settings/get crl-download ] = true && \\\r\ -< \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ -< \n :log warning (\$0 . \"This system has low free flash space but \" . \ -< \\\r\ -< \n \"is configured to download certificate CRLs to system!\");\r\ -< \n }\r\ -< \n :if ([ :len \$CommonName ] = 0) do={\r\ -< \n :log warning (\$0 . \"No CommonName given!\");\r\ -< \n :return false;\r\ -< \n }\r\ -< \n :local CertSettings [ /certificate/settings/get ];\r\ -< \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ -< \r\ -< \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ -< \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ -< \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ -< \_] ] > 0) do={\r\ -< \n :return true;\r\ -< \n }\r\ -< \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ -< ) do={\r\ -< \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ -< \"' not available.\");\r\ -< \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ -< \n :return false;\r\ -< \n }\r\ -< \n }\r\ -< \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ -< ) do={\r\ -< \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ -< \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ -< \n :return true;\r\ -< \n }\r\ -< \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ -< e ] ];\r\ -< \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ -< ertVal->\"skid\")) do={\r\ -< \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ -< \_= 0) do={\r\ -< \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ -< >\"CN\");\r\ -< \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ -< is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ -< \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ -< \n :return false;\r\ -< \n }\r\ -< \n }\r\ -< \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ -< \") ] ];\r\ -< \n }\r\ -< \n :return true;\r\ -< \n}\r\ -< \n\r\ -< \n:set CertificateDownload do={\r\ -< \n :local CommonName [ :tostr \$1 ];\r\ -< \n :global ScriptUpdatesBaseUrl;\r\ -< \n :global ScriptUpdatesUrlSuffix;\r\ -< \n :global CertificateNameByCN;\r\ -< \n :global CleanName;\r\ -< \n :global FetchUserAgentStr;\r\ -< \n :global RmFile;\r\ -< \n :global WaitForFile;\r\ -< \n\r\ -< \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ -< \r\ -< \n \"CommonName '\" . \$CommonName . \"'.\");\r\ -< \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ -< \n :do {\r\ -< \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ -< -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ -< \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ -< sUrlSuffix) \\\r\ -< \n dst-path=\$FileName as-value;\r\ -< \n \$WaitForFile \$FileName;\r\ -< \n } on-error={\r\ -< \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ -< e '\" . \$CommonName . \\\r\ -< \n \"' from repository! Trying fallback to mkcert.org...\");\r\ -< \n :do {\r\ -< \n :local CertSettings [ /certificate/settings/get ];\r\ -< \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ -< \_] ] = 0 && \\\r\ -< \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ -< || \\\r\ -< \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ -< \\\r\ -< \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ -< \r\ -< \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ -< \_Root X1\" ] ] > 0)) do={\r\ -< \n :log error (\$0 . \" Required certificate is not available.\");\ -< \r\ -< \n :return false;\r\ -< \n }\r\ -< \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ -< er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ -< \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ -< n ({ \$CommonName }) ] \\\r\ -< \n dst-path=\$FileName as-value;\r\ -< \n \$WaitForFile \$FileName;\r\ -< \n :if ([ /file/get \$FileName size ] = 0) do={\r\ -< \n \$RmFile \$FileName;\r\ -< \n :error false;\r\ -< \n }\r\ -< \n } on-error={\r\ -< \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ -< e '\" . \$CommonName . \"'!\");\r\ -< \n :return false;\r\ -< \n }\r\ -< \n }\r\ -< \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ -< \n :delay 1s;\r\ -< \n \$RmFile \$FileName;\r\ -< \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ -< ) do={\r\ -< \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ -< +\\\$\") ];\r\ -< \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ -< e . \"' still unavailable!\");\r\ -< \n :return false;\r\ -< \n }\r\ -< \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ -< \"_[0-9]+\\\$\") ] do={\r\ -< \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ -< \n }\r\ -< \n :return true;\r\ -< \n}\r\ -< \n\r\ -< \n:set CertificateNameByCN do={\r\ -< \n :local Match [ :tostr \$1 ];\r\ -< \n :global CleanName;\r\ -< \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ -< rint=\$Match or name=\$Match) ]->0);\r\ -< \n :if ([ :len \$Cert ] = 0) do={\r\ -< \n :log warning (\$0 .\" No matching certificate found.\");\r\ -< \n :return false;\r\ -< \n }\r\ -< \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ -< \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ -< \n :return true;\r\ -< \n}\r\ -< \n\r\ -< \n:set CharacterMultiply do={\r\ -< \n :local Str [ :tostr \$1 ];\r\ -< \n :local Num [ :tonum \$2 ];\r\ -< \n :if (\$Num = 0) do={:return \"\"}\r\ -< \n :local Return \"\";\r\ -< \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ -< \n :return \$Return;\r\ -< \n}\r\ -< \n\r\ -< \n:set FileExists do={\r\ -< \n :local FileName [ :tostr \$1 ];\r\ -< \n :local Type [ :tostr \$2 ];\r\ -< \n :global FileGet;\r\ -< \n :local FileVal [ \$FileGet \$FileName ];\r\ -< \n :if (\$FileVal = false) do={ :return false; }\r\ -< \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ -< \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ -< \_true; }\r\ -< \n :return false;\r\ -< \n}\r\ -< \n\r\ -< \n:set Grep do={\r\ -< \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ -< \n :local Pattern [ :tostr \$2 ];\r\ -< \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ -< }\r\ -< \n :do {\r\ -< \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ -< \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ -< \$Line}\r\ -< \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ -< Input ] ];\r\ -< \n } while=([ :len \$Input ] > 0);\r\ -< \n :return [];\r\ -< \n}\r\ -< \n\r\ -< \n:set HumanReadableNum do={\r\ -< \n :local Input [ :tonum \$1 ];\r\ -< \n :local Base [ :tonum \$2 ];\r\ -< \n :global EitherOr;\r\ -< \n :global IfThenElse;\r\ -< \n :local Prefix \"kMGTPE\";\r\ -< \n :local Pow 1;\r\ -< \n :set Base [ \$EitherOr \$Base 1024 ];\r\ -< \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ -< \n :if (\$Input < \$Base) do={:return \$Input}\r\ -< \n :for I from=0 to=[ :len \$Prefix ] do={\r\ -< \n :set Pow (\$Pow * \$Base);\r\ -< \n :if (\$Input / \$Base < \$Pow) do={\r\ -< \n :set Prefix [ :pick \$Prefix \$I ];\r\ -< \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ -< \n :local Tmp2 (\$Tmp1 / 100);\r\ -< \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ -< \n :return (\$Tmp2 . \".\" . \\\r\ -< \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ -< 2 ] + 1) ] . \\\r\ -< \n \$Prefix . \$Bin);\r\ -< \n }\r\ -< \n }\r\ -< \n}\r\ -< \n\r\ -< \n:set CleanFilePath do={\r\ -< \n :local Path [ :tostr \$1 ];\r\ -< \n :global CharacterReplace;\r\ -< \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ -< \"//\" \"/\" ]; }\r\ -< \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ -< n \$Path ] ]; }\r\ -< \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ -< :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ -< \n :return \$Path;\r\ -< \n}\r\ -< \n\r\ -< \n:set CleanName do={\r\ -< \n :local Input [ :tostr \$1 ];\r\ -< \n :local Return \"\";\r\ -< \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ -< \n :local Char [ :pick \$Input \$I ];\r\ -< \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ -< stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ -< \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ -< \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ -< ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ -< \n };\r\ -< \n :set Return (\$Return . \$Char)};\r\ -< \n :return \$Return;\r\ -< \n}\r\ -< \n\r\ -< \n:set RandomDelay do={\r\ -< \n :local Time [ :tonum \$1 ];\r\ -< \n :local Unit [ :tostr \$2 ];\r\ -< \n :global EitherOr;\r\ -< \n :global GetRandomNumber;\r\ -< \n :global MAX;\r\ -< \n :if (\$Time = 0) do={:return false}\r\ -< \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ -< [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ -< \n}\r\ -< \n\r\ -< \n:set EscapeForRegEx do={\r\ -< \n :local Input [ :tostr \$1 ];\r\ -< \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ -< \n :local Return \"\";\r\ -< \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ -< \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ -< \n :local Char [ :pick \$Input \$I ];\r\ -< \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ -< \n :set Return (\$Return . \$Char);\r\ -< \n }\r\ -< \n :return \$Return;\r\ -< \n}\r\ -< \n\r\ -< \n:set ExitError do={\r\ -< \n :local ExitOK [ :tostr \$1 ];\r\ -< \n :local Name [ :tostr \$2 ];\r\ -< \n :local Error [ :tostr \$3 ];\r\ -< \n :global IfThenElse;\r\ -< \n :if (\$ExitOK = \"false\") do={\r\ -< \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ -< \\\r\ -< \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ -< ror\" . \\\r\ -< \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ -< \$Error) \".\" ]);\r\ -< \n }\r\ -< \n}\r\ -< \n\r\ -< \n:set ExitOnError do={\r\ -< \n :local Name [ :tostr \$1 ];\r\ -< \n :local Error [ :tostr \$2 ];\r\ -< \n :global IfThenElse;\r\ -< \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ -< \\\$\") \\\r\ -< \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ -< r\" . \\\r\ -< \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ -< rror) \".\" ]);\r\ -< \n}\r\ -< \n\r\ -< \n:set MiniDateTimeStamp do={\r\ -< \n :local mikro [ :tobool \$1 ];\r\ -< \n /system/clock;\r\ -< \n :local vdate [get date];\r\ -< \n :local vtime [get time];\r\ -< \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ -< \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ -< \n :local M [:tonum \$MM];\r\ -< \n :if (\$vdate ~ \".../../....\") do={\r\ -< \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ -< \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ -< PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ -< \n :if (\$M>12) do={:set M (\$M - 12)}\r\ -< \n :set MM [:pick (100 + \$M) 1 3];\r\ -< \n }\r\ -< \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ -< \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ -< \n :local HH [:pick \$vtime 0 2];\r\ -< \n :local mm [:pick \$vtime 3 5];\r\ -< \n :local ss [:pick \$vtime 6 8];\r\ -< \n :local Return;\r\ -< \n :if (\$mikro = true) do={\r\ -< \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ -< \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ -< \n } else={\r\ -< \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ -< \r\ -< \n }\r\ -< \n :return \$Return;\r\ -< \n}\r\ -< \n\r\ -< \n:set WaitForFile do={\r\ -< \n :local FileName [ :tostr \$1 ];\r\ -< \n :local WaitTime [ :totime \$2 ];\r\ -< \n :global CleanFilePath;\r\ -< \n :global EitherOr;\r\ -< \n :global MAX;\r\ -< \n :set FileName [ \$CleanFilePath \$FileName ];\r\ -< \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ -< \n :do {\r\ -< \n :retry {\r\ -< \n /file/get \$FileName;\r\ -< \n :return true;\r\ -< \n } delay=\$Delay max=10;\r\ -< \n } on-error={ }\r\ -< \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ -< \n :do {\r\ -< \n /file/get \$FileName;\r\ -< \n :return true;\r\ -< \n } on-error={ }\r\ -< \n :delay \$Delay;\r\ -< \n :set Delay (\$Delay * 3 / 2);\r\ -< \n }\r\ -< \n :return false;\r\ -< \n}\r\ -< \n\r\ -< \n:set FileGet do={\r\ -< \n :local FileName [ :tostr \$1 ];\r\ -< \n :global WaitForFile;\r\ -< \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ -< \n :return false;\r\ -< \n }\r\ -< \n :local FileVal false;\r\ -< \n :do {\r\ -< \n :set FileVal [ /file/get \$FileName ];\r\ -< \n } on-error={ }\r\ -< \n :return \$FileVal;\r\ -< \n}\r\ -< \n\r\ -< \n:set RmDir do={\r\ -< \n :local DirName [ :tostr \$1 ];\r\ -< \n :global FileGet;\r\ -< \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ -< \n :local DirVal [ \$FileGet \$DirName ];\r\ -< \n :if (\$DirVal = false) do={\r\ -< \n :log debug (\$0 . \" ... which does not exist.\");\r\ -< \n :return true;\r\ -< \n };\r\ -< \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ -< \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ -< ory.\");\r\ -< \n :return false;\r\ -< \n };\r\ -< \n :onerror Err {\r\ -< \n /file/remove \$DirName;\r\ -< \n } do={\r\ -< \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ -< : \" . \$Err);\r\ -< \n :return false;\r\ -< \n };\r\ -< \n :return true;\r\ -< \n}\r\ -< \n\r\ -< \n:set RmFile do={\r\ -< \n :local FileName [ :tostr \$1 ];\r\ -< \n :global FileGet;\r\ -< \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ -< \n :local FileVal [ \$FileGet \$FileName ];\r\ -< \n :if (\$FileVal = false) do={\r\ -< \n :log debug (\$0 . \" ... which does not exist.\");\r\ -< \n :return true;\r\ -< \n }\r\ -< \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ -< sk\") do={\r\ -< \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ -< \r\ -< \n :return false;\r\ -< \n }\r\ -< \n :onerror Err {\r\ -< \n /file/remove \$FileName;\r\ -< \n } do={\r\ -< \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ -< \_. \$Err); :return false;\r\ -< \n }\r\ -< \n :return true;\r\ -< \n}\r\ -< \n\r\ -< \n:set MkDir do={\r\ -< \n :local Path [ :tostr \$1 ];\r\ -< \n :global CleanFilePath;\r\ -< \n :global FileGet;\r\ -< \n :global RmDir;\r\ -< \n :global WaitForFile;\r\ -< \n\r\ -< \n :local MkTmpfs do={\r\ -< \n :global WaitForFile;\r\ -< \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ -< \n :if ([ :len \$TmpFs ] = 1) do={\r\ -< \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ -< \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ -< \n /disk/enable \$TmpFs;\r\ -< \n }\r\ -< \n :return true;\r\ -< \n }\r\ -< \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ -< \n \$RmDir \"tmpfs\";\r\ -< \n :onerror Err {\r\ -< \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ -< /get total-memory ] / 3);\r\ -< \n \$WaitForFile \"tmpfs\";\r\ -< \n } do={\r\ -< \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ -< Err);\r\ -< \n :return false;\r\ -< \n }\r\ -< \n :return true;\r\ -< \n }\r\ -< \n :set Path [ \$CleanFilePath \$Path ];\r\ -< \n :if (\$Path = \"\") do={\r\ -< \n :return true;\r\ -< \n }\r\ -< \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ -< \n :local PathVal [ \$FileGet \$Path ];\r\ -< \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ -< \n :log debug (\$0 . \" ... which already exists.\");\r\ -< \n :return true;\r\ -< \n }\r\ -< \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ -< \n :if ([ \$MkTmpfs ] = false) do={\r\ -< \n :return false;\r\ -< \n }\r\ -< \n }\r\ -< \n :onerror Err {\r\ -< \n /file/add type=\"directory\" name=\$Path;\r\ -< \n \$WaitForFile \$Path;\r\ -< \n } do={\r\ -< \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ -< \" . \$Err);\r\ -< \n :return false;\r\ -< \n }\r\ -< \n :return true;\r\ -< \n}\r\ -< \n\r\ -< \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ -< \n :return \$2;\r\ -< \n}\r\ -< \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ -< \n :return \$2;\r\ -< \n}\r\ -< \n\r\ -< \n:set CharacterMultiply do={\r\ -< \n :local Str [ :tostr \$1 ];\r\ -< \n :local Num [ :tonum \$2 ];\r\ -< \n :if (\$Num = 0) do={:return \"\"}\r\ -< \n :local Return \"\";\r\ -< \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ -< \n :return \$Return;\r\ -< \n}\r\ -< \n\r\ -< \n:set CharacterReplace do={\r\ -< \n :local String [ :tostr \$1 ];\r\ -< \n :local ReplaceFrom [ :tostr \$2 ];\r\ -< \n :local ReplaceWith [ :tostr \$3 ];\r\ -< \n :local Return \"\";\r\ -< \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ -< \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ -< \r\ -< \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ -< \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ -< \r\ -< \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ -< \_\$String ] ];\r\ -< \n }\r\ -< \n :return (\$Return . \$String);\r\ -< \n}\r\ -< \n\r\ -< \n:set IfThenElse do={\r\ -< \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ -< \$2};\r\ -< \n :return \$3;\r\ -< \n}\r\ -< \n\r\ -< \n:set EitherOr do={\r\ -< \n :global IfThenElse;\r\ -< \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ -< \$1 \$2 ]}\r\ -< \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ -< \_\$1 \$2 ]}\r\ -< \n# this works for boolean values, literal ones with parentheses\r\ -< \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ -< \n}\r\ -< \n\r\ -< \n:set ParseKeyValueStore do={\r\ -< \n :local Source \$1;\r\ -< \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ -< \n :do {\r\ -< \n :return [ :deserialize from=json \$Source ];\r\ -< \n } on-error={ }\r\ -< \n } \r\ -< \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ -< }\r\ -< \n :local Result ({});\r\ -< \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ -< \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ -< \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ -< \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ -< \_:len \$KeyValue ] ];\r\ -< \n :if (\$Value=\"true\") do={:set Value true}\r\ -< \n :if (\$Value=\"false\") do={:set Value false}\r\ -< \n :set (\$Result->\$Key) \$Value;\r\ -< \n } else={:set (\$Result->\$KeyValue) true}\r\ -< \n }\r\ -< \n :return \$Result;\r\ -< \n}\r\ -< \n:set RequiredRouterOS do={\r\ -< \n :local Caller [ :tostr \$1 ];\r\ -< \n :local Required [ :tostr \$2 ];\r\ -< \n :local Warn [ :tostr \$3 ];\r\ -< \n :global IfThenElse;\r\ -< \n :global VersionToNum;\r\ -< \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ -< \\\$\")) do={\r\ -< \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ -< \n :return false;\r\ -< \n }\r\ -< \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ -< e/update/get installed-version ] ]) do={\r\ -< \n :if (\$Warn = \"true\") do={\r\ -< \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ -< 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ -< \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ -< es RouterOS \" . \$Required . \". Please update!\");\r\ -< \n }\r\ -< \n :return false;\r\ -< \n }\r\ -< \n :return true;\r\ -< \n}\r\ -< \n\r\ -< \n:set ValidateSyntax do={\r\ -< \n :local Code [ :tostr \$1 ];\r\ -< \n :global LogPrint;\r\ -< \n :onerror Err {\r\ -< \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ -< \n } do={\r\ -< \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ -< \n :return false;\r\ -< \n }\r\ -< \n :return true;\r\ -< \n}\r\ -< \n\r\ -< \n:set VersionToNum do={\r\ -< \n :local Input [ :tostr \$1 ];\r\ -< \n :local Multi 0x1000000;\r\ -< \n :local Return 0;\r\ -< \n :global CharacterReplace;\r\ -< \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ -< \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ -< \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ -< \r\ -< \n }\r\ -< \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ -< \n :local Num [ :tonum \$Value ];\r\ -< \n :if (\$Multi = 0x100) do={\r\ -< \n :if ([ :typeof \$Num ] = \"num\") do={\r\ -< \n :set Return (\$Return + 0xff00);\r\ -< \n :set Multi (\$Multi / 0x100);\r\ -< \n } else={\r\ -< \n :if (\$Value = \"zero\") do={ }\r\ -< \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ -< }\r\ -< \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ -< \r\ -< \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ -< \n }\r\ -< \n }\r\ -< \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ -< lue * \$Multi)); }\r\ -< \n :set Multi (\$Multi / 0x100);\r\ -< \n }\r\ -< \n :return \$Return;\r\ -< \n}\r\ -< \n\r\ -< \n:set ScriptLock do={\r\ -< \n :local Script [ :tostr \$1 ];\r\ -< \n :local WaitMax [ :totime \$2 ];\r\ -< \n :global GetRandom20CharAlNum;\r\ -< \n :global IfThenElse;\r\ -< \n :global ScriptLockOrder;\r\ -< \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ -< \n :set ScriptLockOrder ({});\r\ -< \n }\r\ -< \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ -< \n :set (\$ScriptLockOrder->\$Script) ({});\r\ -< \n }\r\ -< \n :local JobCount do={\r\ -< \n :local Script [ :tostr \$1 ];\r\ -< \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ -< \r\ -< \n }\r\ -< \n :local TicketCount do={\r\ -< \n :local Script [ :tostr \$1 ];\r\ -< \n :global ScriptLockOrder;\r\ -< \n :local Count 0;\r\ -< \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ -< \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ -< + 1)}\r\ -< \n }\r\ -< \n :return \$Count;\r\ -< \n }\r\ -< \n :local IsFirstTicket do={\r\ -< \n :local Script [ :tostr \$1 ];\r\ -< \n :local Check [ :tostr \$2 ];\r\ -< \n :global ScriptLockOrder;\r\ -< \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ -< \n :if (\$Ticket = \$Check) do={:return true}\r\ -< \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ -< o={:return false}\r\ -< \n }\r\ -< \n :return false;\r\ -< \n }\r\ -< \n :local AddTicket do={\r\ -< \n :local Script [ :tostr \$1 ];\r\ -< \n :local Add [ :tostr \$2 ];\r\ -< \n :global ScriptLockOrder;\r\ -< \n :while (true) do={\r\ -< \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ -< \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ -< \n :delay 10ms;\r\ -< \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ -< e}\r\ -< \n }\r\ -< \n }\r\ -< \n :local RemoveTicket do={\r\ -< \n :local Script [ :tostr \$1 ];\r\ -< \n :local Remove [ :tostr \$2 ];\r\ -< \n :global ScriptLockOrder;\r\ -< \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ -< \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ -< \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ -< \n :delay 10ms;\r\ -< \n }\r\ -< \n }\r\ -< \n }\r\ -< \n :local CleanupTickets do={\r\ -< \n :local Script [ :tostr \$1 ];\r\ -< \n :global ScriptLockOrder;\r\ -< \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ -< \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ -< \n }\r\ -< \n :set (\$ScriptLockOrder->\$Script) ({});\r\ -< \n }\r\ -< \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ -< \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ -< \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ -< ist!\");\r\ -< \n :error false;\r\ -< \n }\r\ -< \n :if ([ \$JobCount \$Script ] = 0) do={\r\ -< \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ -< );\r\ -< \n :error false;\r\ -< \n }\r\ -< \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ -< \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ -< t . \"', resetting!\");\r\ -< \n :set (\$ScriptLockOrder->\$Script) ({});\r\ -< \n /system/script/job/remove [ find where script=\$Script ];\r\ -< \n }\r\ -< \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ -< \n \$AddTicket \$Script \$MyTicket;\r\ -< \n :local WaitInterval (\$WaitMax / 20);\r\ -< \n :local WaitTime \$WaitMax;\r\ -< \n :while (\$WaitTime > 0 && \\\r\ -< \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ -< \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ -< \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ -< \n :delay \$WaitInterval;\r\ -< \n }\r\ -< \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ -< \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ -< \n \$RemoveTicket \$Script \$MyTicket;\r\ -< \n \$CleanupTickets \$Script;\r\ -< \n :return true;\r\ -< \n }\r\ -< \n \$RemoveTicket \$Script \$MyTicket;\r\ -< \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ -< once\" . \\\r\ -< \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ -< \_lock\" \"\" ] . \"...\");\r\ -< \n :return false;\r\ -< \n}\r\ -< \n\r\ -< \n:set SendNotification do={ :onerror Err {\r\ -< \n :global SendNotification2;\r\ -< \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ -< \_silent=\$4 });\r\ -< \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ -< \n}\r\ -< \n\r\ -< \n:set SendNotification2 do={\r\ -< \n :local Notification \$1;\r\ -< \n :global NotificationFunctions;\r\ -< \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ -< \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ -< ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ -< \n }\r\ -< \n}\r\ -< \n\r\ -< \n:set SymbolByUnicodeName do={\r\ -< \n :local Name [ :tostr \$1 ];\r\ -< \n :global EitherOr;\r\ -< \n :global SymbolsExtra;\r\ -< \n :local Symbols ({\r\ -< \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ -< \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ -< \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ -< \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ -< \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ -< \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ -< \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ -< \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ -< \n \"cloud\"=\"\\E2\\98\\81\";\r\ -< \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ -< \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ -< \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ -< \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ -< \n \"gear\"=\"\\E2\\9A\\99\";\r\ -< \n \"heart\"=\"\\E2\\99\\A5\";\r\ -< \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ -< \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ -< \n \"information\"=\"\\E2\\84\\B9\";\r\ -< \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ -< \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ -< \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ -< \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ -< \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ -< \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ -< \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ -< \n \"scissors\"=\"\\E2\\9C\\82\";\r\ -< \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ -< \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ -< \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ -< \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ -< \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ -< \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ -< \n \"star\"=\"\\E2\\AD\\90\";\r\ -< \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ -< \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ -< \n }, \$SymbolsExtra);\r\ -< \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ -< \n :local Special {\r\ -< \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ -< \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ -< \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ -< \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ -< \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ -< \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ -< '!\");\r\ -< \n :return \"\";\r\ -< \n }\r\ -< \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ -< me) ] . \"\\EF\\B8\\8F\");\r\ -< \n}\r\ -< \n\r\ -< \n:set SymbolForNotification do={\r\ -< \n :global NotificationsWithSymbols;\r\ -< \n :global SymbolByUnicodeName;\r\ -< \n :global IfThenElse;\r\ -< \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ -< \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ -< \n :local Return \"\";\r\ -< \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ -< mbolByUnicodeName \$Symbol ])}\r\ -< \n :return (\$Return . \" \");\r\ -< \n}\r\ -< \n\r\ -< \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ -< \n:set UrlEncode do={\r\ -< \n :local Input [ :tostr \$1 ];\r\ -< \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ -< \n :local Return \"\";\r\ -< \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ -< \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ -< %24\"; \"%25\"; \"%26\"; \"%27\";\r\ -< \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ -< \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ -< \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ -< \"%7C\"; \"%7D\"; \"%7E\" };\r\ -< \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ -< \n :local Char [ :pick \$Input \$I ];\r\ -< \n :local Replace [ :find \$Chars \$Char ];\r\ -< \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ -< ce)}\r\ -< \n :set Return (\$Return . \$Char);\r\ -< \n }\r\ -< \n :return \$Return;\r\ -< \n}\r\ -< \n\r\ -< \n:set IsDNSResolving do={\r\ -< \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ -< \n :return true;\r\ -< \n}\r\ -< \n\r\ -< \n:set IsFullyConnected do={\r\ -< \n :global IsDNSResolving;\r\ -< \n :global IsTimeSync;\r\ -< \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ -< \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ -< \n :return true;\r\ -< \n}\r\ -< \n\r\ -< \n:set IsTimeSync do={\r\ -< \n :global IsTimeSyncCached;\r\ -< \n :global IsTimeSyncResetNtp;\r\ -< \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ -< \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ -< \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ -< \n :set IsTimeSyncCached true;\r\ -< \n :return true;\r\ -< \n }\r\ -< \n :local Uptime [ /system/resource/get uptime ];\r\ -< \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ -< \n :set IsTimeSyncResetNtp \$Uptime;\r\ -< \n }\r\ -< \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ -< \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ -< ;\r\ -< \n :set IsTimeSyncResetNtp \$Uptime;\r\ -< \n /system/ntp/client/set enabled=no;\r\ -< \n :delay 20ms;\r\ -< \n /system/ntp/client/set enabled=yes;\r\ -< \n :return false;\r\ -< \n }\r\ -< \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ -< \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ -< \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ -< ee license and x86.\";\r\ -< \n :return true;\r\ -< \n }\r\ -< \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ -< \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ -< \n :set IsTimeSyncCached true;\r\ -< \n :return true;\r\ -< \n }\r\ -< \n :return false;\r\ -< \n }\r\ -< \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ -< \r\ -< \n :return true;\r\ -< \n}\r\ -< \n\r\ -< \n:set FetchHugeFiles do={\r\ -< \n :local ScriptName [ :tostr \$1 ];\r\ -< \n :local Url [ :tostr \$2 ];\r\ -< \n :local CheckCert [ :tostr \$3 ];\r\ -< \n\r\ -< \n :global CleanName;\r\ -< \n :global FetchUserAgentStr;\r\ -< \n :global GetRandom20CharAlNum;\r\ -< \n :global IfThenElse;\r\ -< \n :global LogPrint;\r\ -< \n :global MkDir;\r\ -< \n :global RmDir;\r\ -< \n :global RmFile;\r\ -< \n :global WaitForFile;\r\ -< \n\r\ -< \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ -< ithout-crl\" ];\r\ -< \n\r\ -< \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ -< \n :if ([ \$MkDir \$DirName ] = false) do={\r\ -< \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ -< \n :return false;\r\ -< \n }\r\ -< \n\r\ -< \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ -< \$GetRandom20CharAlNum ]);\r\ -< \n :onerror Err {\r\ -< \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ -< \\\r\ -< \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ -< lue;\r\ -< \n } do={\r\ -< \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ -< \n \$RmFile \$FileName;\r\ -< \n }\r\ -< \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ -< \_. \$Err);\r\ -< \n \$RmDir \$DirName;\r\ -< \n :return false;\r\ -< \n }\r\ -< \n\r\ -< \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ -< \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ -< \_not show up.\");\r\ -< \n :return false;\r\ -< \n }\r\ -< \n\r\ -< \n :local FileSize [ /file/get \$FileName size ];\r\ -< \n :local Return \"\";\r\ -< \n :local VarSize 0;\r\ -< \n :while (\$VarSize != \$FileSize) do={\r\ -< \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ -< 768 file=\$FileName as-value ]->\"data\"));\r\ -< \n :set FileSize [ /file/get \$FileName size ];\r\ -< \n :set VarSize [ :len \$Return ];\r\ -< \n :if (\$VarSize > \$FileSize) do={\r\ -< \n :delay 100ms;\r\ -< \n }\r\ -< \n }\r\ -< \n \$RmDir \$DirName;\r\ -< \n :return \$Return;\r\ -< \n}\r\ -< \n\r\ -< \n:set FetchUserAgentStr do={\r\ -< \n :local Caller [ :tostr \$1 ];\r\ -< \n :global GlobalScriptsUrl;\r\ -< \n :global CommitBrief;\r\ -< \n :global IfThenElse;\r\ -< \n :local Resource [ /system/resource/get ];\r\ -< \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ -< \_\$Resource->\"architecture-name\" . \\\r\ -< \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ -< CommitBrief ] . \")\");\r\ -< \n}\r\ -< \n\r\ -< \n:set ScriptInstallUpdate do={ :onerror Err {\r\ -< \n :local Scripts [ :toarray \$1 ];\r\ -< \n :local NewComment [ :tostr \$2 ];\r\ -< \n :global InitSetup;\r\ -< \n\r\ -< \n :global CommitId;\r\ -< \n :global ScriptUpdatesCRLF;\r\ -< \n :global GlobalConfVersion;\r\ -< \n :global Identity;\r\ -< \n :global CertificateAvailable;\r\ -< \n :global CheckSumsVerify;\r\ -< \n :global GlobalScriptsUrl;\r\ -< \n :global SumsDirAndFileName;\r\ -< \n :global GlobalScriptsUrlSuffix;\r\ -< \n :global EitherOr;\r\ -< \n :global FetchUserAgentStr;\r\ -< \n :global Grep;\r\ -< \n :global IfThenElse;\r\ -< \n :global LogPrint;\r\ -< \n :global ParseKeyValueStore;\r\ -< \n :global RequiredRouterOS;\r\ -< \n :global SendNotification2;\r\ -< \n :global SymbolForNotification;\r\ -< \n :global ValidateSyntax;\r\ -< \n :global CommentsInScripts;\r\ -< \n\r\ -< \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ -< \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ -< hout.\");\r\ -< \n }\r\ -< \n\r\ -< \n :foreach Script in=\$Scripts do={\r\ -< \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ -< \r\ -< \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ -< \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ -< Vados\\n\" comment=\$NewComment;\r\ -< \n }\r\ -< \n }\r\ -< \n\r\ -< \n :local CommitIdBefore \$CommitId;\r\ -< \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ -< \n :local ReloadGlobal false;\r\ -< \n :local DeviceMode [ /system/device-mode/get ];\r\ -< \n\r\ -< \n :if (\$CheckSumsVerify = true) do={\r\ -< \n :local CheckSums ({});\r\ -< \n :do {\r\ -< \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ -< iptsUrlSuffix);\r\ -< \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ -< \r\ -< \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ -< ficate=yes-without-crl \\\r\ -< \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ -< =user as-value ]->\"data\") ];\r\ -< \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ -< \n }\r\ -< \n\r\ -< \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ -< s\" ] do={\r\ -< \n :local ScriptVal [ /system/script/get \$Script ];\r\ -< \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ -< ];\r\ -< \n :local SourceNew;\r\ -< \n\r\ -< \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ -< \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ -< \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ -< \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ -< \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ -< iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ -< \"'!\");\r\ -< \n }\r\ -< \n }\r\ -< \n :do {\r\ -< \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ -< \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ -< e\" . \"', as requested.\");\r\ -< \n :error true;\r\ -< \n }\r\ -< \n :if (\$CheckSumsVerify = true) do={\r\ -< \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ -< \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ -< ptInfo->\"url-suffix\") ] = 0 && \\\r\ -< \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ -< rce\") ] ] = \$CheckSum) do={\r\ -< \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ -< >\"name\" . \"' matches, ignoring.\");\r\ -< \n :error true;\r\ -< \n }\r\ -< \n }\r\ -< \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ -< \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ -< fetch\" ] = false) do={\r\ -< \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ -< ng without.\");\r\ -< \n }\r\ -< \n }\r\ -< \n :onerror Err {\r\ -< \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ -< lScriptsUrl ];\r\ -< \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ -< lobalScriptsUrlSuffix ];\r\ -< \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ -< Suffix);\r\ -< \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ -< name\") . \"' from url: \" . \$Url);\r\ -< \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ -< \r\ -< \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ -< ut=user as-value ];\r\ -< \n :if (\$Result->\"status\" = \"finished\") do={\r\ -< \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ -< \n } \r\ -< \n } do={\r\ -< \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ -< al->\"name\" . \"': \" . \$Err);\r\ -< \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ -< \n :error false;\r\ -< \n }\r\ -< \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ -< \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ -< \?\");\r\ -< \n /system/script/remove \$Script;\r\ -< \n :error false;\r\ -< \n }\r\ -< \n :if (\$CheckSumsVerify = true) do={\r\ -< \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ -< riptInfo->\"url-suffix\") ] = 0 && \\\r\ -< \n [ :len \$CheckSum ] = 0) do={\r\ -< \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ -< pdates with 'ignore=true' in comment.\");\r\ -< \n }\r\ -< \n }\r\ -< \n :error false;\r\ -< \n }\r\ -< \n\r\ -< \n :if ([ :len \$SourceNew ] = 0) do={\r\ -< \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ -< >\"name\") . \"'.\");\r\ -< \n :error false;\r\ -< \n }\r\ -< \n\r\ -< \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ -< \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ -< lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ -< \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ -< \$ScriptVal->\"source\")) do={\r\ -< \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ -< . \"' source did not change. End of lines set to CRLF.\");\r\ -< \n if (\$ScriptUpdatesCRLF = false) do={\r\ -< \n :put [ :tolf \$SourceNew ];\r\ -< \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ -< ) . \"' source update end of lines to LF.\");\r\ -< \n }\r\ -< \n :error false;\r\ -< \n }\r\ -< \n }\r\ -< \n\r\ -< \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ -< \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ -< l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ -< );\r\ -< \n :error false;\r\ -< \n }\r\ -< \n\r\ -< \n :if (\$CommentsInScripts = true) do={\r\ -< \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ -< \_\") ];\r\ -< \n :if ([ :len \$CommentLine ] = 0) do={\r\ -< \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ -< iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ -< noring!\");\r\ -< \n :error false;\r\ -< \n } else={\r\ -< \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ -< ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ -< ] + 2) [ :len \$CommentLine] ]) do={\r\ -< \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ -< \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ -< ;\r\ -< \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ -< ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ -< \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ -< omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ -< ded!\");\r\ -< \n } else={\r\ -< \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ -< al->\"name\") . \"' did not change.\");\r\ -< \n :error false;\r\ -< \n }\r\ -< \n } \r\ -< \n }\r\ -< \n\r\ -< \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ -< \"\\23 requires RouterOS, \") ] ]->version);\r\ -< \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ -< \_false ] = false) do={\r\ -< \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ -< \") . \"' requires RouterOS \" . \\\r\ -< \n \$RequiredROS . \", which is not met by your installation. I\ -< gnoring!\");\r\ -< \n :error false;\r\ -< \n }\r\ -< \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ -< \\23 requires device-mode, \") ] ];\r\ -< \n :local MissingDM ({});\r\ -< \n :foreach Feature,Value in=\$RequiredDM do={\r\ -< \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ -< ceMode->\$Feature) = false) do={\r\ -< \n :set MissingDM (\$MissingDM, \$Feature);\r\ -< \n }\r\ -< \n }\r\ -< \n :if ([ :len \$MissingDM ] > 0) do={\r\ -< \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ -< \") . \"' requires disabled \" . \\\r\ -< \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ -< gnoring!\");\r\ -< \n :error false;\r\ -< \n }\r\ -< \n\r\ -< \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ -< \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ -< ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ -< \n :error false;\r\ -< \n }\r\ -< \n \r\ -< \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ -< ript comment: \" . (\$ScriptVal->\"comment\"));\r\ -< \n\r\ -< \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ -< Val->\"comment\") \\\r\ -< \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ -< F \$SourceNew ] \$Script;\r\ -< \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ -< \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ -< \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ -< o={\r\ -< \n :set ReloadGlobal true;\r\ -< \n }\r\ -< \n } on-error={ }\r\ -< \n }\r\ -< \n :if (\$ReloadGlobal = true) do={\r\ -< \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ -< \");\r\ -< \n :onerror Err {\r\ -< \n :global InitSetup (a);\r\ -< \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ -< \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ -< ctions failed! \" . \$Err)}\r\ -< \n }\r\ -< \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ -< \n \$LogPrint warning \$0 (\"The configuration version decreased from \ -< \" . \\\r\ -< \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ -< \n \". Installed an older version\?\");\r\ -< \n }\r\ -< \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ -< \n :global GlobalConfChanges;\r\ -< \n :global GlobalConfMigration;\r\ -< \n :local ChangeLogCode;\r\ -< \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ -< \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ -< \n :onerror Err {\r\ -< \n [ :parse \$ChangeLogCode ];\r\ -< \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ -< . \$Err)}\r\ -< \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ -< dation!\")}\r\ -< \n }\r\ -< \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ -< \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ -< \_do={\r\ -< \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ -< \n :do {\r\ -< \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ -< \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ -< \_\" is not available.\");\r\ -< \n :error false;\r\ -< \n }\r\ -< \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ -< \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ -< \_. \" failed syntax validation!\");\r\ -< \n :error false}\r\ -< \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ -< . \": \" . \$Migration);\r\ -< \n :onerror Err {\r\ -< \n [ :parse \$Migration ];\r\ -< \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ -< \_\$I . \" failed to run: \" . \$Err)}\r\ -< \n } on-error={ }\r\ -< \n }\r\ -< \n }\r\ -< \n :local NotificationMessage (\"The configuration version on \" . \$Id\ -< entity . \" increased \" . \\\r\ -< \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ -< d modification. \" . \\\r\ -< \n \"Please review and update global-config-overlay, then re-run glo\ -< bal-config.\");\r\ -< \n \$LogPrint info \$0 (\$NotificationMessage);\r\ -< \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ -< \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ -< \");\r\ -< \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ -< \_do={\r\ -< \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ -< \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ -< \r\ -< \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ -< \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ -< \n }\r\ -< \n } else={\r\ -< \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ -< \_changes are not available.\");\r\ -< \n\r\ -< \n }\r\ -< \n\r\ -< \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ -< } else={ :global GlobalConfChanges (a); }\r\ -< \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ -< on; } else={ :global GlobalConfMigration (a); }\r\ -< \n }\r\ -< \n} do={\r\ -< \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ -< \n} }\r\ -< \n\r\ -< \n# load modules\r\ -< \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ -< ns\\\\.d|mod)/.\" ] do={\r\ -< \n :local ScriptVal [ /system/script/get \$Script ];\r\ -< \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ -< \n :onerror Err {\r\ -< \n /system/script/run \$Script;\r\ -< \n } do={\r\ -< \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ -< ailed to run: \" . \$Err);\r\ -< \n }\r\ -< \n } else={\r\ -< \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ -< led syntax validation, skipping.\");\r\ -< \n }\r\ -< \n}\r\ -< \n\r\ -< \n# Add and fix global scheduler\r\ -< \n:put \"Add or/and fix Global scheduler...\";\r\ -< \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ -< ; }\";\r\ -< \n:local Comment \"Every Day Set Global Environment Variables\";\r\ -< \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ -< = 0) do={\r\ -< \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ -< ent=\$OnEvent start-time=startup;\r\ -< \n}\r\ -< \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ -< \_do={\r\ -< \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ -< \n}\r\ -< \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ -< ) do={\r\ -< \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ -< \n}\r\ -< \n# Add Update Script scheduler\r\ -< \n:put \"Add or/and fix Update Script scheduler\";\r\ -< \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ -< \r\ -< \n:set Comment \"Every Day Check For Update Scripts\";\r\ -< \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ -< \" ] ] = 0) do={\r\ -< \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ -< start-time=startup interval=1d on-event=\$OnEvent;\r\ -< \n}\r\ -< \n\r\ -< \n:onerror Err {\r\ -< \n :global GlobalConfReady;\r\ -< \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ -< \_not ready.\"); }; } delay=100ms max=5;\r\ -< \n\r\ -< \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ -< \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ -< \") ] . \\\r\ -< \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ -< \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ -< \n # signal we are ready\r\ -< \n:set GlobalFuncReady true;\r\ -< \n:set ExitOK true;\r\ -< \n\r\ -< \n:log info (\$0 . \"Global configs ready!\");\r\ -< \n} do={\r\ -< \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ -< \n}\r\ -< \n" -< add comment=\ -< "Lookup IP addresses for RKN list and add them to firewall address-list" \ -< dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \ -< policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ -< source="#!rsc by Vados\r\ -< \n# RouterOS script: AM-RKN-dnsLookup\r\ -< \n# Script comment: Lookup IP addresses for RKN list and add them to firew\ -< all address-list\r\ -< \n# Copyright (c) 2007-2026 Vados \r\ -< \n#\r\ -< \n#\r\ -< \n# requires RouterOS, version=7.19\r\ -< \n# requires device-mode, fetch\r\ -< \n#\r\ -< \n# Script description: This script is intended to be run periodically, e.\ -< g. once a day, to update the IP addresses in the firewall address-list bas\ -< ed on the RKN list.\r\ -< \n# It resolves the domain names in the RKN list and a\ -< dds the corresponding IP addresses to the specified firewall address-list.\ -< \r\ -< \n# The script also handles CNAME records by following\ -< \_them until it finds A records.\r\ -< \n# Usage:\r\ -< \n# /system/script { run AM-RKN-dnsLookup; }\r\ -< \n:local ScriptName [ :jobname ];\r\ -< \n\r\ -< \n:global dnsLookupReady false;\r\ -< \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\ -< \_true; }\r\ -< \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\ -< \n:set dnsLookupReady false;\r\ -< \n\r\ -< \n:local arrRKN {\r\ -< \n \"telegra.ph\"\r\ -< \n \"grani.ru\"\r\ -< \n \"xhamster.com\"\r\ -< \n \"lostfilm.tv\"\r\ -< \n \"rutracker.org\"\r\ -< \n \"lurkmore.to\"\r\ -< \n \"dou.ua\"\r\ -< \n \"youporn.com\"\r\ -< \n \"pornolab.net\"\r\ -< \n \"crimerussia.com\"\r\ -< \n \"telegram.org\"\r\ -< \n \"api.telegram.org\"\r\ -< \n \"facebook.com\"\r\ -< \n \"instagram.com\"\r\ -< \n \"x.com\"\r\ -< \n \"twitter.com\"\r\ -< \n \"youtube.com\"\r\ -< \n \"googleapis.com\"\r\ -< \n \"youtu.be\"\r\ -< \n \"googlevideo.com\"\r\ -< \n \"gstatic.com\"\r\ -< \n \"googleusercontent.com\"\r\ -< \n \"nhacmp3youtube.com\"\r\ -< \n \"telegram.me\"\r\ -< \n \"t.me\";}\r\ -< \n\r\ -< \n:local ListRKN \"RKN-dnsLookup\";\r\ -< \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\ -< \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\ -< ={\r\ -< \n /ip firewall address-list remove \$aListItem;\r\ -< \n}\r\ -< \n:foreach aItem in=\$arrRKN do={\r\ -< \n# :do {\r\ -< \n :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\ -< ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\ -< \n# } on-error={\r\ -< \n# :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\ -< \n# }\r\ -< \n :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \ -< do={\r\ -< \n :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\ -< \n :local newAddress [/ip dns cache all get \$dnsRecord data];\ -< \r\ -< \n :do {\r\ -< \n /ip firewall address-list add list=\$ListRKN address=\$newA\ -< ddress comment=\$aItem;\r\ -< \n :log warning \"Successfully adding ip to list A record: \ -< \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\ -< \n } on-error={\r\ -< \n :log error \"error when adding ip to list A record: \$dn\ -< sRecord, address: \$newAddress domain: \$aItem\";\r\ -< \n }\r\ -< \n }\r\ -< \n :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\ -< \n :local cname;\r\ -< \n :local nextCname;\r\ -< \n :local cnameAddress;\r\ -< \n :set cname [/ip dns cache all find where (name=\$aItem && ty\ -< pe=\"CNAME\")];\r\ -< \n :set nextCname [/ip dns cache all find where (name=[/ip dns \ -< cache all get \$cname data] && type=\"CNAME\")];\r\ -< \n :while (\$nextCname != \"\") do={\r\ -< \n :set cname \$nextCname;\r\ -< \n :set nextCname [/ip dns cache all find where (name=[/ip \ -< dns cache all get \$cname data] && type=\"CNAME\")];\r\ -< \n }\r\ -< \n :foreach aRecord in=[/ip dns cache all find where (name=[/ip\ -< \_dns cache all get \$cname data] && type=\"A\")] do={\r\ -< \n :do {\r\ -< \n :set cnameAddress [/ip dns cache all get \$aRecord d\ -< ata];\r\ -< \n /ip firewall address-list add list=\$ListRKN address\ -< =\$cnameAddress comment=\$aItem;\r\ -< \n :log warning \"Succesfully adding ip to list CNAME r\ -< ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \ -< \$aItem.\";\r\ -< \n# /ip firewall raw add action=add-dst-to-address-list\ -< \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\ -< g comment=\$aItem content=\$aItem;\r\ -< \n } on-error={\r\ -< \n :log error \"error when adding ip to list CNAME reco\ -< rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\ -< tem.\";\r\ -< \n }\r\ -< \n }\r\ -< \n }\r\ -< \n }\r\ -< \n}\r\ -< \n\r\ -< \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ -< ={\r\ -< \n :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\ -< ptName . \" is NOT SET! Fix It Now!\");\r\ -< \n /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \ -< run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\ -< olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\ -< \_start-time=startup;\r\ -< \n }\r\ -< \n:set dnsLookupReady true;\r\ -< \ndelay 2s; \r\ -< \n:global dnsLookupReady (a);\r\ -< \n" -< add dont-require-permissions=no name="renameLists " owner=vados policy=\ -< ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ -< local oldName \"Test\";\ -< \n:local newName \"Test-IP\";\ -< \n/ip firewall address-list\ -< \n:foreach i in=[find list=\$oldName] do={\ -< \nset \$i list=\$newName;\ -< \n}\ -< \n" -< add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\ -< ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ -< #############Script Settings##################\ -< \n\ -< \n:local \"IF-TUN\" \"6to4-tun\"\ -< \n:local \"IF-LOC\" \"Bridge-LAN\"\ -< \n:local \"POOL-6TO4\" \"poolV6-local\"\ -< \n:local \"force-update\" false\ -< \n############ use then static ip #######################\ -< \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \ -< address]\ -< \n#:local \"interface\" \"ext\"\ -< \n:local bound 0\ -< \n\ -< \n###############################################\ -< \n\ -< \n:local 6to4prefix do={\ -< \n :global dec2hex\ -< \n :local ipv4 \$1\ -< \n :local ipv6 \"2002:\"\ -< \n :for i from=0 to=2 step=1 do={ \ -< \n :if ( \$i = 2) do={\ -< \n :set ipv6 (\$ipv6.\":\")\ -< \n }\ -< \n :local fp [:find \$ipv4 \".\"]\ -< \n :if ( \$fp > 0 ) do={\ -< \n :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\ -< \n :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\ -< \n }\ -< \n }\ -< \n :return (\$ipv6.[\$dec2hex \$ipv4])\ -< \n}\ -< \n:local \"str_replace\" do={\ -< \n :local \"str-pos\" [:find \$1 \$2]\ -< \n :local \"str-len\" [:len \$2]\ -< \n :local str \"\"\ -< \n :local rest \$1\ -< \n :while (\$\"str-pos\" >= 0) do={\ -< \n :local t [:pick \$rest 0 \$\"str-pos\"]\ -< \n :if ( \$4 > 0 ) do={\ -< \n :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\ -< \n :set str (\$str.\$5)\ -< \n }\ -< \n }\ -< \n :set str (\$str.\$t.\$3)\ -< \n :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\ -< st]]\ -< \n :set \"str-pos\" [:find \$rest \$2]\ -< \n }\ -< \n :return (\$str.\$rest)\ -< \n}\ -< \n\ -< \n:if (\$bound=1) do={\ -< \n :local t [:find \$\"lease-address\" \"/\"]\ -< \n\ -< \n :if ( \$t >= 0 ) do={\ -< \n :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\ -< \n }\ -< \n\ -< \n :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\ -< ) do={\ -< \n /interface 6to4 add !keepalive local-address=\$\"lease-address\"\ -< \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\ -< \n :set \"force-update\" true\ -< \n }\ -< \n\ -< \n :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\ -< cal-address];\ -< \n\ -< \n :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \ -< true) do={\ -< \n /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\ -< ease-address\"\ -< \n /ipv6 address remove [find interface=\$\"IF-TUN\"]\ -< \n /ipv6 address remove [find interface=\$\"IF-LOC\"]\ -< \n /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\ -< \"::/0\"]\ -< \n :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\ -< \n :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\ -< \_0) do={ \ -< \n /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\ -< \".\":1::/64\") prefix-length=64\ -< \n } else={\ -< \n /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \ -< prefix=(\$\"pool-prefix\".\":1::/64\")\ -< \n }\ -< \n /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\ -< \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\ -< ace=\$\"IF-TUN\" advertise=no\ -< \n /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\ -< =\$\"IF-LOC\" advertise=yes\ -< \n /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\ -< \"IF-TUN\")\ -< \n :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\ -< s]\ -< \n :set t [:pick \$t 0 [:find \$t \"/\"]]\ -< \n :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\ -< \_= 0) do={\ -< \n /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\ -< [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ -< \n } else={\ -< \n /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \ -< where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ -< \n }\ -< \n :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\ -< -LOC\"] = 0) do={\ -< \n /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\ -< on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\ -< \n }\ -< \n :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \ -< 0) do={\ -< \n /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\ -< onfiguration=yes\ -< \n }\ -< \n }\ -< \n}" -< add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\ -< ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ -< global MAC2EUI64 do={\ -< \n :local EUI64 \"\"\ -< \n :local MAC \$1\ -< \n :local HEX2DEC \"0123456789ABCDEF\"\ -< \n :for i from=0 to=5 step=1 do={\ -< \n :if ( \$i = 0 ) do={\ -< \n :set EUI64 [:pick \$MAC 0]\ -< \n :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\ -< \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\ -< \n }\ -< \n :if ( \$i = 1 || \$i = 3) do={\ -< \n :set EUI64 (\$EUI64.\":\")\ -< \n }\ -< \n :if ( \$i = 2 ) do={\ -< \n :set EUI64 (\$EUI64.\"FF:FE\")\ -< \n }\ -< \n :if ( [:find \$MAC \":\"] = 2 ) do={\ -< \n :set MAC [:pick \$MAC 3 [:len \$MAC]]\ -< \n :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\ -< \n }\ -< \n }\ -< \n :return (\$EUI64)\ -< \n}\ -< \n\ -< \n:global dec2hex do={\ -< \n :local hex \"\"\ -< \n :local dec [:tonum \$1]\ -< \n :for i from=0 to=4 step=4 do={\ -< \n :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\ -< c>>\$i)&0xf)+1)].\$hex)\ -< \n }\ -< \n :return ([:tostr \$hex])\ -< \n}" -< add comment=Generator dont-require-permissions=no name=proxySet owner=vados \ -< policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ -< source="# 2. WireGuard interface\r\ -< \n/interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDg\ -< uMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=21641\r\ -< \n/interface/wireguard/peers/add interface=wg-VDSina public-key=\"o5IgCl1/\ -< G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcYQnD9\ -< N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=10.30.30.33 endpoint-port=518\ -< 20 allowed-address=0.0.0.0/0 persistent-keepalive=11\r\ -< \n/ip/address/add address=10.9.0.3/32 interface=wg-VDSina\r\ -< \n\r\ -< \n# 3. DNS\r\ -< \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\ -< n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\ -< \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /system/script/add name=VDS\ -< ina-prev-dns comment=\"\$prevDNS\" source=\"\" }\r\ -< \n/ip/dns/set servers=8.8.4.4\r\ -< \n/ip/route/add dst-address=8.8.4.4/32 gateway=wg-VDSina distance=1 commen\ -< t=VDSina-dns\r\ -< \n\r\ -< \n# 4. Enable WireGuard\r\ -< \n/interface/wireguard/enable wg-VDSina\r\ -< \n" -< add dont-require-permissions=no name=AM-Telegram-Send owner=vados policy=\ -< ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ -< !rsc by Vados\ -< \n# RouterOS script: AM-Telegram-Send\ -< \n# Script comment: Mini script for send messages to admin Telegram chat\ -< \n# Copyright (c) 2007-2026 Vados \ -< \n#\ -< \n#\ -< \n# requires RouterOS, version=7.19\ -< \n# requires device-mode, fetch\ -< \n#\ -< \n# Script description: \ -< \n#\ -< \n#\ -< \n# Usage:\ -< \n# /system/script { run AM-Telegram-Send \"Message here )))\"; }\ -< \n\ -< \n/system/script\ -< \nadd name=telegram-send dont-require-permissions=no source={\ -< \n :global TelegramTokenId;\ -< \n :global TelegramChatId;\ -< \n :local message [:tostr \$1];\ -< \n :local identity [/system/identity/get name];\ -< \n :local sendMsg (\"[\".\$identity.\"] \".\$message)\ -< \n /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\ -< \n \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\ -< \n \"&text=\".\$sendMsg.\\\ -< \n \"&parse_mode=HTML\") \\\ -< \n mode=https keep-result=no\ -< \n}" -< add dont-require-permissions=no name=telegram-send owner=vados policy=\ -< ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ -< \n :global TelegramTokenId;\ -< \n :global TelegramChatId;\ -< \n :local message [:tostr \$1];\ -< \n :local identity [/system/identity/get name];\ -< \n :local sendMsg (\"[\".\$identity.\"] \".\$message)\ -< \n /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\ -< \n \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\ -< \n \"&text=\".\$sendMsg.\\\ -< \n \"&parse_mode=HTML\") \\\ -< \n mode=https keep-result=no\ -< \n" -< /user group -< add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\ -< t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon" -< /ip smb -< set enabled=no interfaces=lo -< /interface bridge port -< add bridge=Bridge-LAN interface=ether5 -< add bridge=Bridge-LAN interface=ether2 -< add bridge=Bridge-LAN interface=ether4 trusted=yes -< add bridge=Bridge-LAN interface=ether3 -< add bridge=Bridge-LAN interface=wlan2 -< add bridge=Bridge-LAN interface=wlan1 -< /interface bridge settings -< set use-ip-firewall=yes -< /ip firewall connection tracking -< set udp-timeout=10s -< /ip neighbor discovery-settings -< set discover-interface-list=LAN lldp-med=no lldp-poe-power=no -< /ip settings -< set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\ -< 8192 -< /ipv6 settings -< set disable-ipv6=yes disable-link-local-address=yes forward=no \ -< max-neighbor-entries=8192 multipath-hash-policy=l4 -< /interface detect-internet -< set detect-interface-list=WAN internet-interface-list=Internet \ -< lan-interface-list=LAN request-interval=1m wan-interface-list=WAN -< /interface l2tp-server server -< set authentication=mschap2 use-ipsec=yes -< /interface list member -< add interface=Unet-ether1 list=Internet -< add interface=WG list=WAN -< add interface=Bridge-LAN list=LAN -< add interface=Unet-ether1 list=WAN -< /interface wireguard peers -< add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\ -< 109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \ -< persistent-keepalive=10s public-key=\ -< "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4=" -< add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \ -< endpoint-address=10.30.30.33 endpoint-port=55055 interface=wg-nuc name=\ -< NUC persistent-keepalive=11s public-key=\ -< "+OvzAjLC45Td52hjkQPmpGvC3RGhZ+Q2CDMJ1U/D4Rw=" -< /interface wireless cap -< # -< set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ -< caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ -< CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ -< wlan2,wlan1 lock-to-caps-man=yes -< /ip address -< add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 -< add address=10.8.0.2/24 interface=WG network=10.8.0.0 -< add address=192.168.33.2/24 disabled=yes interface=wg-nuc network=\ -< 192.168.33.0 -< /ip cloud -< set update-time=no -< /ip dhcp-client -< add add-default-route=special-classless check-gateway=arp comment=Unet-client \ -< default-route-distance=2 default-route-tables=main:2 dhcp-options=\ -< hostname,clientid_duid interface=Unet-ether1 name=UnetDHCP use-peer-dns=\ -< no use-peer-ntp=no -< /ip dhcp-server config -< set accounting=no -< /ip dhcp-server lease -< add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ -< 48:8F:5A:8E:EE:A8 server=masterDHCP -< add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ -< F0:DE:F1:91:0D:1E server=masterDHCP -< add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ -< 00:80:77:EC:43:86 server=masterDHCP -< add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ -< dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP -< add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ -< 04:7C:16:36:F5:37 server=masterDHCP -< add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ -< 10:2D:41:2C:20:C2 server=masterDHCP -< add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ -< 10:08:C1:81:59:5F server=masterDHCP -< add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ -< 10:38:1F:D2:5F:13 server=masterDHCP -< add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ -< 10:B1:DF:E9:D0:D5 server=masterDHCP -< add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ -< FE:02:52:BE:3F:16 server=masterDHCP -< add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ -< D4:6D:6D:FD:E5:49 server=masterDHCP -< add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ -< CC:42:10:12:46:94 server=masterDHCP -< add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ -< 50:CC:F8:85:96:0A server=masterDHCP -< add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ -< E4:18:6B:58:34:AB server=masterDHCP -< add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ -< 00:27:15:41:97:A9 server=masterDHCP -< add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ -< mac-address=C4:82:E1:03:49:10 server=masterDHCP -< add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ -< 10:38:1F:82:81:F2 server=masterDHCP -< add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ -< dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP -< add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ -< dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP -< add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ -< server=masterDHCP -< add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ -< MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP -< add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ -< mac-address=F0:75:5D:1E:5F:71 server=masterDHCP -< add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ -< dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP -< add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\ -< ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \ -< dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \ -< use-src-mac=yes -< /ip dhcp-server network -< add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ -< domain-search-list dhcp-option-set=domain-search-set dns-server=\ -< 10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\ -< 24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 -< /ip dns -< set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ -< doh-max-server-connections=20 servers=8.8.8.8 verify-doh-cert=yes -< /ip dns static -< add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \ -< type=A -< add address=109.107.177.79 name=vds.vados.ru type=A -< add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \ -< regexp=*.vados.ru type=NS -< add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\ -< "\".*\\\\.vados\\\\.ru\"" type=FWD -< add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\ -< 10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\ -< FWD -< add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\ -< ns.vados.ru.local type=A -< add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\ -< vados.ru ns=ns.vados.ru.local type=NS -< add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A -< add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\ -< dns.google type=A -< add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A -< add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A -< add address=10.30.30.33 name=ros.vados.ru type=A -< add address=10.30.30.95 name=vados-nuc type=A -< add address=10.30.30.33 name=amster-nuc type=A -< add address=10.30.30.33 name=amster type=A -< add address=10.30.30.33 name=amster-reg type=A -< add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A -< add address=10.30.30.33 name=mgr.vados.ru type=A -< add address=10.30.30.33 name=prt.vados.ru type=A -< add address=10.30.30.33 disabled=yes match-subdomain=yes name=\ -< mikrots.vados.ru type=A -< add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A -< add address=10.30.30.30 name=MILLER-LEN type=A -< add address=10.30.30.30 name=miller type=A -< add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\ -< security.cloudflare-dns.com type=A -< add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\ -< security.cloudflare-dns.com type=A -< add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ -< dns.quad9.net type=A -< add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\ -< dns.quad9.net type=A -< add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \ -< type=A -< add address=10.30.30.81 comment=LocalNet name=MikroVados type=A -< add address=10.30.30.10 name=MikroNUC type=A -< add address=10.30.30.86 disabled=yes name=MikroYellow type=A -< add address=10.30.30.85 disabled=yes name=MikroMic type=A -< add address=10.30.30.95 name=VADOS-NUC type=A -< add address=10.30.30.98 name=VADOS-LEN type=A -< add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ -< A -< add address=10.30.30.20 disabled=yes name=garage type=A -< /ip firewall address-list -< add address=91.215.120.206 list=TRUSTED -< add address=185.71.70.78 disabled=yes list=TRUSTED -< add address=176.53.203.171 disabled=yes list=TRUSTED -< add address=176.53.203.170 disabled=yes list=TRUSTED -< add address=176.53.202.194 disabled=yes list=TRUSTED -< add address=8.8.4.0/24 list=YouTube -< add address=8.8.8.0/24 list=YouTube -< add address=8.34.208.0/20 list=YouTube -< add address=8.35.192.0/20 list=YouTube -< add address=23.236.48.0/20 list=YouTube -< add address=23.251.128.0/19 list=YouTube -< add address=34.0.0.0/15 list=YouTube -< add address=34.2.0.0/16 list=YouTube -< add address=34.3.0.0/23 list=YouTube -< add address=34.3.3.0/24 list=YouTube -< add address=34.3.4.0/24 list=YouTube -< add address=34.3.8.0/21 list=YouTube -< add address=34.3.16.0/20 list=YouTube -< add address=34.3.32.0/19 list=YouTube -< add address=34.3.64.0/18 list=YouTube -< add address=34.4.0.0/14 list=YouTube -< add address=34.8.0.0/13 list=YouTube -< add address=34.16.0.0/12 list=YouTube -< add address=34.32.0.0/11 list=YouTube -< add address=34.64.0.0/10 list=YouTube -< add address=34.128.0.0/10 list=YouTube -< add address=35.184.0.0/13 list=YouTube -< add address=35.192.0.0/14 list=YouTube -< add address=35.196.0.0/15 list=YouTube -< add address=35.198.0.0/16 list=YouTube -< add address=35.199.0.0/17 list=YouTube -< add address=35.199.128.0/18 list=YouTube -< add address=35.200.0.0/13 list=YouTube -< add address=35.208.0.0/12 list=YouTube -< add address=35.224.0.0/12 list=YouTube -< add address=35.240.0.0/13 list=YouTube -< add address=57.140.192.0/18 list=YouTube -< add address=64.15.112.0/20 list=YouTube -< add address=64.233.160.0/19 list=YouTube -< add address=66.22.228.0/23 list=YouTube -< add address=66.102.0.0/20 list=YouTube -< add address=66.249.64.0/19 list=YouTube -< add address=70.32.128.0/19 list=YouTube -< add address=72.14.192.0/18 list=YouTube -< add address=74.125.0.0/16 list=YouTube -< add address=104.154.0.0/15 list=YouTube -< add address=104.196.0.0/14 list=YouTube -< add address=104.237.160.0/19 list=YouTube -< add address=107.167.160.0/19 list=YouTube -< add address=107.178.192.0/18 list=YouTube -< add address=108.59.80.0/20 list=YouTube -< add address=108.170.192.0/18 list=YouTube -< add address=108.177.0.0/17 list=YouTube -< add address=130.211.0.0/16 list=YouTube -< add address=136.22.160.0/20 list=YouTube -< add address=136.22.176.0/21 list=YouTube -< add address=136.22.184.0/23 list=YouTube -< add address=136.22.186.0/24 list=YouTube -< add address=142.250.0.0/15 list=YouTube -< add address=146.148.0.0/17 list=YouTube -< add address=152.65.208.0/22 list=YouTube -< add address=152.65.214.0/23 list=YouTube -< add address=152.65.218.0/23 list=YouTube -< add address=152.65.222.0/23 list=YouTube -< add address=152.65.224.0/19 list=YouTube -< add address=162.120.128.0/17 list=YouTube -< add address=162.216.148.0/22 list=YouTube -< add address=162.222.176.0/21 list=YouTube -< add address=172.110.32.0/21 list=YouTube -< add address=172.217.0.0/16 list=YouTube -< add address=172.253.0.0/16 list=YouTube -< add address=173.194.0.0/16 list=YouTube -< add address=173.255.112.0/20 list=YouTube -< add address=192.158.28.0/22 list=YouTube -< add address=192.178.0.0/15 list=YouTube -< add address=193.186.4.0/24 list=YouTube -< add address=199.36.154.0/23 list=YouTube -< add address=199.36.156.0/24 list=YouTube -< add address=199.192.112.0/22 list=YouTube -< add address=199.223.232.0/21 list=YouTube -< add address=207.223.160.0/20 list=YouTube -< add address=208.65.152.0/22 list=YouTube -< add address=208.68.108.0/22 list=YouTube -< add address=208.81.188.0/22 list=YouTube -< add address=208.117.224.0/19 list=YouTube -< add address=209.85.128.0/17 list=YouTube -< add address=216.58.192.0/19 list=YouTube -< add address=216.73.80.0/20 list=YouTube -< add address=216.239.32.0/19 list=YouTube -< add address=2ip.ru list=Test-IP -< add address=wg.vados.ru comment=VDSIna list=TRUSTED -< add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED -< add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina -< add address=love.ru comment=love.ru list=NoVdsina -< add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina -< add address=pochta.ru comment=pochta.ru list=NoVdsina -< add address=vdsina.com list=NoVdsina -< add address=vdsina.ru list=NoVdsina -< add address=youla.ru list=NoVdsina -< add address=kupiprodai.ru list=NoVdsina -< add address=myip.ru list=Test-IP -< add address=geoip.co list=NoVdsina -< add address=comp-lenta.ru list=NoVdsina -< add address=128.85.102.70 comment=update.microsoft.com list=\ -< windowsupdateslist -< add address=wu-b-net.trafficmanager.net. comment=\ -< ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist -< add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ -< ctldl.windowsupdate.com list=windowsupdateslist -< add address=redir.update.msft.com.trafficmanager.net. comment=\ -< update.microsoft.com list=windowsupdateslist -< add address=geo.prod.do.dsp.trafficmanager.net. comment=\ -< geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist -< add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ -< kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist -< add address=e12437.d.akamaiedge.net. comment=\ -< kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist -< add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ -< displaycatalog.mp.microsoft.com list=windowsupdateslist -< add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ -< comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ -< windowsupdateslist -< add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ -< list=windowsupdateslist -< add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ -< sls.update.microsoft.com list=windowsupdateslist -< add address=fe3.delivery.mp.microsoft.com. comment=\ -< fe3cr.delivery.mp.microsoft.com list=windowsupdateslist -< add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ -< fe3.delivery.mp.microsoft.com list=windowsupdateslist -< add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ -< fe2cr.update.microsoft.com list=windowsupdateslist -< add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ -< download.windowsupdate.com list=windowsupdateslist -< add address=wu-f-net.trafficmanager.net. comment=\ -< download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist -< add address=tsfe.trafficmanager.net. comment=\ -< tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist -< add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ -< comment=9.au.download.windowsupdate.com list=windowsupdateslist -< add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ -< list=windowsupdateslist -< add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ -< au.download.windowsupdate.com list=windowsupdateslist -< add address=a767.dspw65.akamai.net. comment=\ -< download.windowsupdate.com.edgesuite.net list=windowsupdateslist -< add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ -< comment=licensing.mp.microsoft.com list=windowsupdateslist -< add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ -< consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ -< windowsupdateslist -< add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ -< comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist -< add address=cdp-f-nlu-net.trafficmanager.net. comment=\ -< star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ -< windowsupdateslist -< add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ -< comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist -< add address=cdp-f-tlu-net.trafficmanager.net. comment=\ -< star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ -< windowsupdateslist -< add address=storeedgefd.xbetservices.akadns.net. comment=\ -< storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist -< add address=\ -< storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ -< comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ -< windowsupdateslist -< add address=e16646.dscg.akamaiedge.net. comment=\ -< storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ -< windowsupdateslist -< add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=bg.microsoft.map.fastly.net. comment=\ -< 3.au.download.windowsupdate.com list=windowsupdateslist -< add list=windowsupdateslist -< add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ -< comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ -< windowsupdateslist -< add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ -< star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ -< windowsupdateslist -< add address=a2033.dscd.akamai.net. comment=\ -< star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ -< windowsupdateslist -< add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ -< dl.delivery.mp.microsoft.com list=windowsupdateslist -< add address=dcat-f-nlu-net.trafficmanager.net. comment=\ -< dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ -< windowsupdateslist -< add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ -< comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist -< add address=dcat-b-tlu-net.trafficmanager.net. comment=\ -< 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ -< windowsupdateslist -< add address=a122.dscg3.akamai.net. comment=\ -< tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist -< add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ -< geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist -< add address=e10370.d.akamaiedge.net. comment=\ -< geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist -< add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=a1683.dscd.akamai.net. comment=\ -< dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist -< add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ -< comment=collections.mp.microsoft.com list=windowsupdateslist -< add address=a1847.dscd.akamai.net. comment=\ -< wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ -< windowsupdateslist -< add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=au.download.windowsupdate.com.edgesuite.net. comment=\ -< 2.au.download.windowsupdate.com list=windowsupdateslist -< add address=a767.dscg3.akamai.net. comment=\ -< au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist -< add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ -< 4.au.download.windowsupdate.com list=windowsupdateslist -< add address=cl-glcb907925.gcdn.co. comment=\ -< 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ -< windowsupdateslist -< add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ -< list=windowsupdateslist -< add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ -< comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist -< add address=ts-frontend.trafficmanager.net. comment=\ -< tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ -< windowsupdateslist -< add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ -< list=windowsupdateslist -< add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ -< list=windowsupdateslist -< add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ -< windowsupdateslist -< add address=e12671.dscd.akamaiedge.net. comment=\ -< download.microsoft.com.edgekey.net list=windowsupdateslist -< add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ -< list=windowsupdateslist -< add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ -< kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist -< add address=e12358.d.akamaiedge.net. comment=\ -< kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist -< add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ -< tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist -< add address=dcat-f-tlu-net.trafficmanager.net. comment=\ -< tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ -< windowsupdateslist -< add address=a1856.dspw65.akamai.net. comment=\ -< tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist -< add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ -< list=windowsupdateslist -< add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ -< kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist -< add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ -< consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ -< windowsupdateslist -< add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ -< list=windowsupdateslist -< add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ -< list=windowsupdateslist -< add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina -< add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ -< list=windowsupdateslist -< add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ -< purchase.mp.microsoft.com list=windowsupdateslist -< add address=e110219.a.akamaiedge.net. comment=\ -< purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist -< add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.153.5.141 list=windowsupdateslist -< add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=storesdk.xbetservices.akadns.net. comment=\ -< storesdk.dsx.mp.microsoft.com list=windowsupdateslist -< add address=e16646.g.akamaiedge.net. comment=\ -< storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist -< add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ -< software-download.microsoft.com list=windowsupdateslist -< add address=download.prss.microsoft.com.akamaized.net. comment=\ -< software-download.microsoft.com.delivery.microsoft.com list=\ -< windowsupdateslist -< add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ -< windowsupdateslist -< add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina -< add address=87.250.250.50 comment=YandexDisk list=NoVdsina -< add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ -< displaycatalog.mp.microsoft.com list=windowsupdateslist -< add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ -< purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist -< add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ -< purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist -< add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ -< cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist -< add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ -< comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist -< add address=a1996.dscd.akamai.net. comment=\ -< wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ -< windowsupdateslist -< add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ -< cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist -< add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ -< tas02.sls.update.microsoft.com list=windowsupdateslist -< add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ -< cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist -< add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ -< comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ -< windowsupdateslist -< add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ -< comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist -< add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ -< star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ -< windowsupdateslist -< add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ -< paymentinstruments.mp.microsoft.com list=windowsupdateslist -< add address=10.30.30.33 comment=amster list=NoWG -< add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG -< add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG -< add address=wg.vados.ru comment=VDSina-vpn list=VDSina -< add address=80.85.244.9 list=TRUSTED -< add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ -< disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist -< add address=185.71.70.78 disabled=yes list=TRUSTED -< add address=176.53.203.171 disabled=yes list=TRUSTED -< add address=176.53.203.170 disabled=yes list=TRUSTED -< add address=176.53.202.194 disabled=yes list=TRUSTED -< add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina -< add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS -< add address=dns.google comment=Google-dns list=Trusted-DNS -< add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ -< Trusted-DNS -< add address=time.google.com comment=Google-time list=Trusted-NTP -< add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ -< Trusted-NTP -< add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP -< add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ -< Trusted-NTP -< add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ -< Trusted-NTP -< add address=cp.vdsina.com comment=VDSina-vpn list=VDSina -< add address=vdsina.ru comment=VDSina-vpn list=VDSina -< add address=ns.vados.ru comment=VDSina-vpn list=VDSina -< add address=vdsina.com comment=VDSina-vpn list=VDSina -< add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina -< add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina -< add address=10.30.30.0/24 comment="Local Network" list=Local-Net -< add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net -< add address=146.120.64.208/29 comment="External Net" list=Unet -< add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina -< add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina -< add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina -< add address=10.30.30.30 comment=miller disabled=yes list=NoWG -< add address=10.30.30.33 comment="Direct connet to DNS servers" list=\ -< Direct-DNS -< add address=109.107.177.79 list=VPN-Server -< add address=10.0.0.0/8 list=RFC1918 -< add address=172.16.0.0/12 list=RFC1918 -< add address=192.168.0.0/16 list=RFC1918 -< add address=8.8.4.4 disabled=yes list=to_vpn -< add address=myip.ru disabled=yes list=to_vpn -< add address=10.30.30.98 disabled=yes list=to_vpn -< /ip firewall filter -< add action=add-src-to-address-list address-list="Honeypot Hacker" \ -< address-list-timeout=12h chain=input comment="block honeypot DNS" \ -< connection-state=new dst-port=53 in-interface=Unet-ether1 protocol=udp \ -< src-address-list=!Trusted-DNS -< add action=add-src-to-address-list address-list="Honeypot Hacker" \ -< address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ -< in-interface=Unet-ether1 protocol=tcp src-address-list=!Trusted-DNS -< add action=add-src-to-address-list address-list="Honeypot Hacker" \ -< address-list-timeout=4w2d chain=input comment=\ -< "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \ -< in-interface=Unet-ether1 protocol=tcp src-address-list=!TRUSTED -< add action=add-src-to-address-list address-list="Honeypot Hacker" \ -< address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ -< connection-state=new dst-port=5060 in-interface=Unet-ether1 protocol=udp -< add action=add-src-to-address-list address-list="Honeypot Hacker" \ -< address-list-timeout=4w2d chain=input comment="block honeypot NTP" \ -< connection-state=new dst-port=123 in-interface=Unet-ether1 protocol=udp -< add action=fasttrack-connection chain=forward comment=\ -< "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ -< connection-state=established,related,new disabled=yes -< add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \ -< protocol=tcp -< add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \ -< protocol=udp -< add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \ -< dst-port=53 protocol=tcp src-address=10.30.30.0/24 -< add action=accept chain=input comment="udp Accept input DNS queries" \ -< dst-port=53 protocol=udp src-address=10.30.30.0/24 -< add action=accept chain=output comment="accept WireGuard" disabled=yes \ -< dst-address-list=VPN-Server out-interface=Unet-ether1 protocol=udp \ -< src-port=13231 -< add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ -< dst-port=29185 out-interface=Unet-ether1 protocol=udp -< add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ -< connection-state=established,related,new disabled=yes routing-mark=\ -< !To-VPN -< add action=accept chain=output disabled=yes protocol=tcp src-port=443 -< add action=accept chain=output disabled=yes src-address=127.0.0.1 -< add action=accept chain=forward comment="defconf: accept in ipsec policy" \ -< disabled=yes ipsec-policy=in,ipsec -< add action=accept chain=forward comment="defconf: accept out ipsec policy" \ -< disabled=yes ipsec-policy=out,ipsec -< add action=accept chain=forward comment=\ -< "defconf: accept established,related, untracked" connection-state=\ -< established,related,untracked disabled=yes -< add action=drop chain=forward comment="defconf: drop invalid" \ -< connection-state=invalid in-interface=Unet-ether1 src-address=\ -< !10.30.30.0/24 -< add action=drop chain=forward comment=\ -< "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ -< connection-state=new in-interface=Unet-ether1 src-address-list=!VDSina -< add action=accept chain=input in-interface=Unet-ether1 protocol=icmp \ -< src-address-list=VDSina -< add action=accept chain=input connection-state=established -< add action=accept chain=input connection-state=related -< /ip firewall mangle -< add action=accept chain=prerouting comment=RFC1918 dst-address-list=RFC1918 \ -< in-interface-list=!WAN -< add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \ -< new-routing-mark=main passthrough=no src-address-list=NoWG -< add action=mark-routing chain=prerouting comment=\ -< "Mark Routing main for NoVdsina" disabled=yes dst-address-list=NoVdsina \ -< new-routing-mark=main passthrough=no src-address=10.30.30.0/24 -< add action=mark-connection chain=prerouting comment=\ -< "Transit for address-list \"to_vpn\"" connection-mark=no-mark disabled=\ -< yes dst-address-list=to_vpn in-interface-list=!WAN new-connection-mark=\ -< to-vpn-conn routing-mark=!main -< add action=mark-routing chain=prerouting comment=\ -< "Find routing over table r_to_vpn" connection-mark=to-vpn-conn disabled=\ -< yes in-interface-list=!WAN new-routing-mark=r_to_vpn -< add action=mark-routing chain=prerouting comment=\ -< "Mark Routing main for VDSina" dst-address-list=VPN-Server \ -< new-routing-mark=main passthrough=no src-address=10.30.30.0/24 -< add action=mark-routing chain=prerouting comment=\ -< "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \ -< new-routing-mark=main src-address=10.30.30.0/24 -< add action=mark-routing chain=prerouting comment=\ -< "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\ -< Unet new-routing-mark=main passthrough=no -< add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \ -< dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\ -< To-VPN src-address=10.30.30.0/24 -< add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \ -< dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \ -< new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24 -< add action=mark-routing chain=prerouting comment="WG for all" \ -< dst-address-list=!NoVdsina new-routing-mark=To-VPN src-address=\ -< 10.30.30.0/24 -< add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ -< out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\ -< 1381-65535 -< add action=mark-connection chain=prerouting comment=\ -< "Mark VPN connections to exclude from FastTrack" disabled=yes \ -< new-connection-mark=VPN_No_FastTrack routing-mark=To-VPN -< add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \ -< dst-address=10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24 -< add action=mark-connection chain=output comment="For this router" \ -< connection-mark=no-mark disabled=yes dst-address-list=to_vpn \ -< new-connection-mark=to-vpn-conn-local -< add action=mark-routing chain=output comment="For this router" \ -< connection-mark=to-vpn-conn-local disabled=yes new-routing-mark=r_to_vpn -< /ip firewall nat -< add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\ -< yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\ -< !NoWG to-addresses=10.30.30.33 to-ports=53 -< add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\ -< yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\ -< !NoWG to-addresses=10.30.30.33 to-ports=53 -< add action=masquerade chain=srcnat comment=\ -< "Nat Addresses for routing mark r_to_vpn" disabled=yes routing-mark=\ -< r_to_vpn -< add action=dst-nat chain=dstnat comment=\ -< "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \ -< in-interface=Unet-ether1 protocol=tcp src-address-list=VPN-Server \ -< to-addresses=10.30.30.33 to-ports=53 -< add action=dst-nat chain=dstnat comment=\ -< "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\ -< udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53 -< add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\ -< Unet-ether1 protocol=udp src-address=!10.30.30.0/24 to-addresses=\ -< 10.30.30.33 to-ports=44333 -< add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ -< routing-mark=To-VPN -< add action=masquerade chain=srcnat comment="Default NAT" out-interface=\ -< Unet-ether1 routing-mark=!To-VPN src-address=10.30.30.0/24 -< add action=dst-nat chain=dstnat dst-port=44044 in-interface=Unet-ether1 \ -< protocol=udp src-address=109.107.177.79 to-addresses=10.30.30.33 \ -< to-ports=44044 -< add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ -< fragment=no in-interface=Unet-ether1 protocol=tcp routing-mark=main \ -< to-addresses=10.30.30.33 to-ports=443 -< add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ -< dst-port=80 in-interface=Unet-ether1 protocol=tcp to-addresses=\ -< 10.30.30.33 to-ports=80 -< add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \ -< dst-port=2904 in-interface=Unet-ether1 protocol=tcp to-addresses=\ -< 10.30.30.33 to-ports=2904 -< add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\ -< 5000 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \ -< to-ports=5000 -< add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\ -< 2377 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \ -< to-ports=2377 -< add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ -< Unet-ether1 protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \ -< to-ports=81 -< add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\ -< Unet-ether1 protocol=tcp src-address-list=TRUSTED to-addresses=\ -< 10.30.30.33 to-ports=22 -< add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \ -< dst-port=2377 in-interface=Unet-ether1 protocol=tcp to-addresses=\ -< 10.30.30.33 to-ports=2377 -< add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\ -< Unet-ether1 protocol=tcp routing-mark=!To-VPN to-addresses=10.30.30.33 \ -< to-ports=22 -< add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ -< dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ -< time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 -< add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ -< Bridge-LAN protocol=tcp src-address-list=KIDS time=\ -< 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 -< /ip firewall raw -< add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ -< in-interface=Unet-ether1 src-address-list="Honeypot Hacker" -< add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \ -< in-interface-list=WAN src-address-list=Trusted-DNS -< add action=add-dst-to-address-list address-list=NoVdsina \ -< address-list-timeout=none-dynamic chain=prerouting comment=\ -< extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes -< add action=add-dst-to-address-list address-list=NoVdsina \ -< address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ -< content=linux.duke.edu disabled=yes -< add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -< none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \ -< disabled=yes -< add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -< none-dynamic chain=prerouting comment="YouTube raw" content=\ -< googleapis.com disabled=yes -< add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -< none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \ -< disabled=yes -< add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -< none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \ -< disabled=yes -< add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -< none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \ -< disabled=yes -< add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -< none-dynamic chain=prerouting comment="YouTube raw" content=\ -< googlevideo.com disabled=yes -< add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -< none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \ -< disabled=yes -< add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -< none-dynamic chain=prerouting comment="YouTube raw" content=\ -< googleusercontent.com disabled=yes -< add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -< none-dynamic chain=prerouting comment="YouTube raw" content=\ -< nhacmp3youtube.com disabled=yes -< add action=add-dst-to-address-list address-list=NoVdsina \ -< address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ -< content=rutube.ru disabled=yes -< add action=add-dst-to-address-list address-list=NoVdsina \ -< address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \ -< content=me.com disabled=yes -< add action=add-dst-to-address-list address-list=NoVdsina \ -< address-list-timeout=none-dynamic chain=prerouting comment=\ -< "icloud.com raw" content=icloud.com disabled=yes -< add action=add-dst-to-address-list address-list=NoVdsina \ -< address-list-timeout=none-dynamic chain=prerouting comment=\ -< "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes -< add action=add-dst-to-address-list address-list=NoVdsina \ -< address-list-timeout=none-dynamic chain=prerouting comment=\ -< "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \ -< disabled=yes -< add action=add-dst-to-address-list address-list=NoVdsina \ -< address-list-timeout=none-dynamic chain=prerouting comment=\ -< "api.db-ip.com raw" content=api.db-ip.com disabled=yes -< add action=add-dst-to-address-list address-list=NoVdsina \ -< address-list-timeout=none-dynamic chain=prerouting comment=\ -< esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes -< add action=add-dst-to-address-list address-list=NoVdsina \ -< address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \ -< content=gosuslugi.ru disabled=yes -< /ip firewall service-port -< set ftp disabled=yes -< set tftp disabled=yes -< set irc disabled=no -< set sip disabled=yes -< set pptp disabled=yes -< set rtsp disabled=no -< /ip ipsec settings -< set accounting=no -< /ip ipsec policy -< set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 -< /ip ipsec profile -< set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 -< /ip proxy -< set cache-administrator="" max-cache-size=none port=80,443 src-address=\ -< 0.0.0.0 -< /ip route -< add check-gateway=none comment=WG-Default disabled=no distance=1 dst-address=\ -< 0.0.0.0/0 gateway=WG routing-table=To-VPN scope=30 target-scope=10 -< /ip service -< set ftp disabled=yes -< set telnet disabled=yes -< set reverse-proxy disabled=yes -< set ssh address=10.30.30.0/24 port=2222 -< set winbox address=10.30.30.0/24 -< set api address=10.30.30.0/24 -< set api-ssl address=10.30.30.0/24 disabled=yes -< set www-ssl certificate=Root-YE port=18443 -< set www address=10.30.30.0/24 disabled=yes port=18880 -< /ip service webserver -< set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ -< no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \ -< webfig-secure=no -< /ip ssh -< set forwarding-enabled=both publickey-authentication-options=verify-required -< /ip upnp -< set enabled=yes -< /ip upnp interfaces -< add interface=Bridge-LAN type=internal -< add forced-ip=146.120.64.211 interface=Unet-ether1 type=external -< add forced-ip=109.107.177.79 interface=*E type=external -< add interface=lo type=internal -< add interface=wlan2 type=internal -< add interface=wlan1 type=internal -< /ipv6 dhcp-client -< add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\ -< info use-interface-duid=yes validate-server-duid=no -< /ipv6 dhcp-server option sets -< add name=domain-search-set options=domain-search-list -< add name="=\"Client ID\"" options=HostName -< /ipv6 firewall address-list -< add address=::/128 comment="defconf: unspecified address" list=bad_ipv6 -< add address=::1/128 comment="defconf: lo" list=bad_ipv6 -< add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6 -< add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6 -< add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6 -< add address=100::/64 comment="defconf: discard only " list=bad_ipv6 -< add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6 -< add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6 -< add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6 -< /ipv6 firewall filter -< add action=accept chain=input comment=\ -< "defconf: accept established,related,untracked" connection-state=\ -< established,related,untracked -< add action=drop chain=input comment="defconf: drop invalid" connection-state=\ -< invalid -< add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\ -< icmpv6 -< add action=accept chain=input comment="defconf: accept UDP traceroute" \ -< dst-port=33434-33534 protocol=udp -< add action=accept chain=input comment=\ -< "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\ -< udp src-address=fe80::/10 -< add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \ -< protocol=udp -< add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\ -< ipsec-ah -< add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\ -< ipsec-esp -< add action=accept chain=input comment=\ -< "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec -< add action=drop chain=input comment=\ -< "defconf: drop everything else not coming from LAN" in-interface-list=\ -< !LAN -< add action=accept chain=forward comment=\ -< "defconf: accept established,related,untracked" connection-state=\ -< established,related,untracked -< add action=drop chain=forward comment="defconf: drop invalid" \ -< connection-state=invalid -< add action=drop chain=forward comment=\ -< "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6 -< add action=drop chain=forward comment=\ -< "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6 -< add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \ -< hop-limit=equal:1 protocol=icmpv6 -< add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\ -< icmpv6 -< add action=accept chain=forward comment="defconf: accept HIP" protocol=139 -< add action=accept chain=forward comment="defconf: accept IKE" dst-port=\ -< 500,4500 protocol=udp -< add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\ -< ipsec-ah -< add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\ -< ipsec-esp -< add action=accept chain=forward comment=\ -< "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec -< add action=drop chain=forward comment=\ -< "defconf: drop everything else not coming from LAN" in-interface-list=\ -< !LAN -< /ipv6 nd -< set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \ -< managed-address-configuration=yes other-configuration=yes pref64=::/64 -< /ipv6 nd prefix -< add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none -< /ipv6 nd prefix default -< set dhcp6-pd-preferred=yes -< /ipv6 nd proxy -< add disabled=yes interface=lo -< /ipv6 nd settings -< set router-advertisement-route-distance=100 -< /routing settings -< set single-process=no -< /system clock -< set time-zone-name=Europe/Moscow -< /system clock manual -< set time-zone=+03:00 -< /system identity -< set name=MikroMaster -< /system logging -< add action=email disabled=yes regex="* added|changed|removed *" topics=\ -< system,info -< /system ntp client -< set enabled=yes -< /system ntp server -< set enabled=yes manycast=yes multicast=yes use-local-clock=yes -< /system ntp client servers -< add address=0.ru.pool.ntp.org -< add address=1.ru.pool.ntp.org -< add address=2.ru.pool.ntp.org -< add address=3.ru.pool.ntp.org -< add address=time.google.com disabled=yes -< /system package update -< set check-certificate=yes-without-crl ip-version=ipv4 -< /system scheduler -< add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \ -< on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ -< policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ -< start-time=startup -< add comment="Every Day Check For Update Scripts" interval=1d name=\ -< AM-ScriptInstallUpdate on-event=\ -< ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ -< ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ -< start-time=startup -< add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\ -< AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \ -< policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ -< start-time=startup -< /system watchdog -< set watchdog-timer=no -< /tool e-mail -< set certificate-verification=no from=MikroVados port=587 \ -< server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com -< /tool mac-server -< set allowed-interface-list=LAN -< /tool mac-server mac-winbox -< set allowed-interface-list=LAN -< /tool netwatch -< add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\ -< -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\ -< e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \ -< interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\ -< https-get up-script="" -< add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ -< flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ -< oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ -< name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \ -< up-script="" -< add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\ -< 8.8.8.8 down-script="" host=dns.google http-codes="" name=\ -< "Google-DNS IPv4" test-script="" type=dns up-script="" -< add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\ -< rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\ -< -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \ -< http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\ -< "" test-script="" type=dns up-script="" -< add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \ -< dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \ -< interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \ -< test-script="" timeout=800ms type=dns up-script="" -< add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\ -< ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \ -< down-script="" host=149.112.112.112 http-codes="" interval=10s name=\ -< "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script="" -< add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ -< down-script="" host=91.192.189.2 http-codes="" interval=10s name=\ -< ns1.unet.ws test-script="" type=simple up-script="" -< add check-certificate=yes comment=\ -< "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \ -< disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\ -< vds.vados.ru port=443 test-script="" type=https-get up-script="" -< add comment="WireGuard NAT " disabled=yes down-script="/log info \"[WG-Monitor\ -< ] WireGuard is NOT running - reverting rules\"\ -< \n/ip firewall nat remove [find comment=\"Redirect to Router\"]\ -< \n/ip dns set servers=8.8.8.8\ -< \n/ip dns cache flush\ -< \n/ip route remove [find comment=\"wg-auto-route\"]\ -< \n" host=10.8.0.1 http-codes="" interval=15s name=WG test-script="" \ -< timeout=5s type=simple up-script="/log info \"[WG-Monitor] WireGuard is RU\ -< NNING - applying rules\";\ -< \n:local routeFile \"ips.txt\";\ -< \n:local routeDefAddr \"0.0.0.0/0\";\ -< \n:local routeGateway \"10.8.0.1\";\ -< \n:local routeIF \"WG\";\ -< \n:local routeTable \"To-VPN\";\ -< \n:local routeComment \"wg-auto-route\";\ -< \n/ip dns cache flush;\ -< \n:if ([:len [/ip firewall nat find comment=\"Redirect to Router\"]] > 0) \ -< do={\ -< \n /ip firewall nat remove [find comment=\"Redirect to Router\"];\ -< \n}\ -< \n/ip firewall nat add action=redirect chain=dstnat src-address-list=\"Red\ -< irectDNS\" dst-port=53 protocol=udp comment=\"Redirect to Router\";\ -< \n/ip dns set servers=\$routeGateway;\ -< \n:local content [/file get \$routeFile contents];\ -< \n:if ([:len \$content] > 0) do={\ -< \n :local line \"\";\ -< \n :for i from=0 to=([:len \$content] - 1) do={\ -< \n :local char [:pick \$content \$i];\ -< \n :if (\$char != \"\\r\" && \$char != \"\\n\") do={\ -< \n :set line (\$line . \$char);\ -< \n } else={\ -< \n :if ([:len \$line] > 5) do={\ -< \n :do { /ip route add disabled=no dst-address=\$routeDefAd\ -< dr gateway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$r\ -< outeTable comment=\$routeComment check-gateway=none } on-error={}\ -< \n }\ -< \n :set line \"\";\ -< \n }\ -< \n }\ -< \n :if ([:len \$line] > 5) do={\ -< \n# :do { /ip route add dst-address=\$line gateway=\$routeGateway \ -< distance=1 comment=\$routeComment } on-error={}\ -< \n :do { /ip route add disabled=no dst-address=\$routeDefAddr ga\ -< teway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$routeT\ -< able comment=\$routeComment check-gateway=none } on-error={}\ -< \n }\ -< \n}\ -< \n:local dotPos [:find \$routeGateway \".\"];\ -< \n:if (\$dotPos != \"\") do={\ -< \n :local firstOctet [:pick \$routeGateway 0 \$dotPos];\ -< \n :local derivedDstAddress (\$firstOctet . \".30.0.0/15\");\ -< \n :do { /ip route add dst-address=\$derivedDstAddress gateway=\$routeG\ -< ateway distance=1 comment=\$routeComment } on-error={}\ -< \n}\ -< \n\ -< \n" -< add comment=WG-Default disabled=yes down-script=\ -< "/ip route disable [find comment=\"WG-Default\"];" host=10.8.0.1 \ -< interval=15s name=WG packet-count=20 test-script="" thr-loss-count=5 \ -< type=icmp up-script="/ip route enable [find comment=\"WG-Default\"];" -< /user aaa -< set accounting=no diff --git a/MikroNUC/20260710/20260710132001-Binary.backup b/MikroNUC/20260710/20260710132001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..ba46ac632f69ad93b5fd11058f910cabaad28378 GIT binary patch literal 385044 zcmeEv2Ut_f7VhjMKthqKh#&?80X4AG6BVT+N^f>C6(WIP5 zGHnSGD(FzD31qW3bWy9x)~hm8{j#O0S$;BQswLUi7G%S4Z-JsXR;U8AhjP#c)(}vT_PS=qs6SQX}nyA+!xR4vk|7T_N+d z#1Ps{K5qqi$mbbm2xXusP8z~6f<6pkj7SQ?7?zd@W1yCBF-4dgMXjMD%qJj<1MHF` zj1D9Fn2H#fBMmXIdNjm9^=XJ<;zUFA<`_aW8e*Font4R6N`9@;7zG-`Cip1y#&Jpg*vo2%+H!p%Dn7kqDtN2%!>$kOCnr4Ixa05bB9QtP!R`2xTFJ%uod} z)-dLM5JLSB!ulhG3PBHmIw(XS5`^5EAjGhyBgAl!BgCMjBE&GY0TpHs&(c9Fso`rT zlpBChFLp5n{-*5u%qU5XwP_K0}63E<*G&9HHI_(H~L~%0r0GwDxWDxmfFhY#NAqX){l&ESN*&yTw!t7@6;T;j37#bfI7#!-;!oxc`BE)AH zLT;8G-a+vZA>pA>fx$kbev)zY_Zf?z1wvM9j@*^%IZFqn0wWhzi;ggj3QR~0jVA@p zFkc|+tb`1? zDkLX4IV~u`FDzD`80i0qirkte#$srWJEGYg?EgX$Hd_>O_(%2Js~Yf z5tbXtQFO=%^#?WHC?Zp@&?+S|1yiZfGNU9qy+X?j)?{WXWO|h*b8`)$1ReP<M%? zgp&O~E0NfLO(Gw!YiKs}JfTYr$!#?x63p4pB$APv%1RDNP-RNK7fMtmlp{%@9F|B5 zWptn>Gc7(LJ1jyQmKEJTQOEDd~vMTBvoo$XQ`OqNgZksN?vf=yy!G( zj84qq`i162hoojlb!^vBo|+cPiQp#X_30R!s|}1!PHn66C-IR~DK}yUz!fyo9K)T4 zqBww!q&kH*#|SFE&j8P58InvDh_+0b3J3_yJ759$0MK$L(`||82FyV*U>-sllJ?%9 zatO@hj-oh#ER5dX-dm~k@D7fQ2#rom2}z0w@u@;%R)#iJ z@)UWtN*?%KHPB>LHMV$foLyB7sKBaP=*C)Fepdm|2^ClZ9TpzmZDSG=qXVNtYZOh> z==7PA3)-DlJ&V=9%%(zCOKwUsh~QkMtNiT-%>$EsU0%aCMBQWaW&FyoB?0~5Cc`MNv#qj(+ow1Mw?giZ=neL zmLlwzD5A+#y7Ye!J(O?hq5K*>3R#-w-!o#=Z|R}_5IS z|D_DkzNLs(3q^HuByx=|fVlc`Ov5}e zrcV)R!V(n|R;?H#<{HcsItk=yM$reA=>}D~5sH+8s>?wAwU(j$ybR3aTFX#>UIu9Y zz6=GXC9S%Q(ODtM$^?}IszXky1-Q#e)eJ*vjbJTA+5%XIfTCbfh$V>8WW%Z%!NMG| zp?Q)4mI%4gRRDN175XZJXY?)@Nzh7ijr!FMScE_^z<DU(j=Lw3VCy8mRcdvDVSP?PA}2wnff#Z)8MdRsxp}xtz4mH z>NQMBR+c)C_+zFbm#I_e!Ed7LiV!A82=q4SY|I8BLWJ!R!W<9+odyaFtB(-Yz@X&O zafC2egs?^kVE}Ic?)V^tHAM(xfeI${71t5e4B7}i) z0ld-Q{&m!%PH>C(J`l09Zu2!upYV(%RsiIz`-R=(II5 z80j~d!REr9aABPvSYoxOAc*24@GwAVxbWh(2cshIUa9z1SY1JrqMRH!7k7pWUg3zc;2D z{ti%WN(+QMsfK(_ARi4OFSsK_@unIm1(QS>3Ld#)xPT;bhCylsS>Z_dG72uEsfb}V z4pQUc!om=vl`r(s5Bh;)h~dD-4Af4941=lF(g!ffs3p7o?L4LY&+^oUaNuSt^eocB z{r5AM`p;u7?LQ;1Hn}RTLaos0jLhxvw@WVVpT}J4e}=jCy1YzTnpTsk$*$sW*T0>= zCjUJC{)dFuI!&Y3WofDugY@slO|@zd+`5^!hIYXZ(O zLny%%Qs7Uf5FQJ{eFQ6e!XI1cN%*bZAW-CnT;S3eF0dQ|7lxaePN7vv)Of)!HP8N~ z<|+Sj^K5X#YbEj=xgQbjGWyTDlgxs9cNE1jx(1Cdbt^>pH3(lxM+)IyXHbD5RStHD zT^QVJMBsq%u-U1jj^!l4MnxPjZkjjmK_ zGe8xCKOEv(qsdl*ImR^P8B0C~pNBCZ0)Y=>pyVV4@<(xO5L#mJ<+&h4Fo1|Q z5o2XRhNoa$C_V_$cY85V)2cxNHz<{Gb-E$McFSEmKFp`|%dzW)-u2v@7Nm9^efn!X z-viDir>=H+#67tkVR`N@p)3yxJ&Fv zORG_;)Pw?r&rNcA!TlzR;?zSBDS=rHJ0hH_v{D7;NvZ&tR&G4mIvym}`v;Hjk)djx`Ym zt#C6*%~t62z}f05b!if9m1zkkIScn-6vZjE04M8q;tF+>rUu(;fzUP!gS(Yb*F-y8 zERY+`FDqLL`#Gsu*;3GXx;&j;kpcT8;Nwf)!LbW*4)}m~*C;YEM4l)Psk=#ce0^Xq z_~gOdxLJi}Yc*L4zbK7Prpc{q(DoP+12WE6OBBUvju5@yjF_GfmLqmpR~QUq zF$k!AQw$>F$!U9tBO&7R*Y6lF*mOyUo01=!9;)@KCstM$C zxb-H}0FIuKfDW=sfH0D_Yh)hy^Byv61v=>}nFfH>2jmtZB9udBM=Cwg6U7;g&>SkF zp1rd}bM~e|N>A@rAg#DZS~CwkP~)R4VSvw!j&t z)FhgzJtZlDZG~IF7jt_W^onhR*MYB8d!iX;r%>G0(Tc;z#W)uyKAjz{c<`0O;qt|N zap!-zz8u`f)Qq5pf|;5$8$d(uR4Jmhva4KvYvul)z1F0CrZ;Sy`(pOhzLsYq#AEJ7 zK9QdJh;Oyee^x(aF#GM(=nIEBo?r9MjrqA?FL&8~VUDKU$>Zt{roTwm+~jSvuIKJ^ zhvcK|Hb!l3ioPRpJfd zK^n#24U&kcZPUeCODAI)@IIKiv=%Zir65V8TW0pTo$i00tUX^9K}pg`C0Pf>_=l)cRly3ao*9uTvqv#W{<*oi zzH(KnN~X~2ePx=A2B1N!a)qlkQi+;LG!Pv43mSD#LMUj|!nK|Bsi0wrpR`mkD4VHS0e=m0-*iiKwp_w@0+E_NWrVL?0PC*L|u&+Q6?L- ztPQ>8&E%4xu(fludmipI_Fy~Q%9PP`NZTRrtuV~Q1mTiz^=w_--k@hKjST{0*iN`3 zJhrg6`JO#&Chlrb#g0`azGV`qW?aB#vkjUVR5O=dG z+^-Ea4L}1JCr&sI+;!u4%U)r(&npj_tk3bPH>U3_*NOegH@BTnzkGgmA4{>RqM%*3 zMx~A)mhUY0zMwDY(|c;C!D*RY8*|$4ir)RObH<&lUAZ>9zF_YLUs@7k(~+|@yZ*V; z^LB>c_Uid&8uvp4y~l{MlnpHg?V7u+U1Y!3Cu367Io;>97ml5E)%||P35N!wdmgPg zzTQFZc(9AlEY7Z1<)6-41eGn{9LTwBS@!(HfOFeNb!@ZI`C)|jysXP?+O_xV>b;6I zk2YKKtet=NjRo^d_OAA#P%(tfm*JA{Y|oHCvpv-7vHaxIk=vCo=HGU9-aC1n|LG*W z5tydNwEB3x!rC)@D}Pkr{?Qr2Wo_;4%s*WVnGqAe=FN>&w6}SA^!Xn3zqD^QXg6!? zxq}sN_B85vbW6sJKKch!e3sj8ypuI&?(xXtspChE&APqZ+GXeXrIoUCcg=d7oxf{l z7sktTqwgfV87=$NX7QB`${SMU`O}$!qh7H#KF)17duGSm%{uK4X#9-jT@>0nFL7Lx zDK`t-E)hO|aXzm{z3VF;);XTJBE(VT7jgMkXzQk11qmlx#G1bMeYmefgj(WO{~T>) z?^exQ6s9kJvbwIrql?4#Y!#_*k5vz^lyA-T?11lf_LzU`>Z2Rs`5QNQ&`t2CtQ{7+ zLU+Y(UHbaT6wGerq2dEmcqyaITOD|GZsNp@>tH)UK~&k!Jqe*k+xdG!8`Sf6I_39- z{ym}pxf8k?5%IV@kpx$Wc|4v>D3VDz0=@$0i{yNTNX+9&d2$g?DHaGgQaMK;mvZ<* zrAW->Nq9W2Oo+1uYyuJ0rf2~X)%phlCE+5jRDtsaVw}g}38ZWZTgVqkWMaNp%$5mx z5pAoef6ihfLF)|@OAuyqBAcrsD;2bZj@TSuOnh zG%{V*H;W-Wpeh$-2#?GqlfYU@_f5v{rWLGL!Z|RD@F3`VBU(#bj0@-R=WvIxjn!z? z++V6gjr&6#Oqu}a;TEQh9z)tDN5Bd>UR^9fS@HW zvyOUCR!z>=f8G75N#BI!D~~I_Zku5`WB7&6!9$-#MJA`L+_Qh93DdXJ>B@F*=QO>z zX5z}jzU^9GSo}^??DGY0<1uLa-pzf-n>AlOG(Cs=3?;>{>on``)>E%;v z8|?rFE#>6oS-za?(I=;MJkx>QUx*D@r_AtauvW>)IGtJYX6q+E%wd1mWI1-J-_RwZ zgxMpyg=KU-;5BGKS^tqE=TDD+aG?09Fu&>N7fGE(TAPc={$!-?$}%B;iO&GljGWTz z_4}5T9Xa_tmHL&|*{$B%%ExVPTrGP0jjcSIPV|gCGI#9#vdt@o>es)_m_PN( z$8$Rd1^0uU4wY83?SDJ4Ab;J*2-={Wq~n(nuz^ZTvo{y)%k)!1An!a01USSb_m zm2#y_%$IUy5|K?#`f|{6}4wzl-U2AL!+@Q4p_U7Rl7C{vY zKn1G?RjewiSmB)S{Gx}!FS;KuqO3Habqsxn0`LI?zXiu+h>31*Mskg9kJ|z+HnTUc zW*)l%ULPKs+uPRQVRLYr`m))$p8-gF|0*X5U#S=uw4LR;<&!|KJqu|qnC~%W;Utbo1VYhVG@|h+%w^__4V(Blz^&J zuXM{h_i=KkRI21<|CXlgY}Q=n=orP&4euAtD82Z|@6?sfr_>B*lq`!=&(Ub4ok@Z-bTogWEjFTZ<3y?(IcO#e$BF?nP8 z=Tm4;3I{HqMqzEVd2_MkAWawWOzSyk>FlSomZ#ZG?Qmd>T?@v79U)&$>k9Wwzss5b zO!V-g{B`sG4qqsbXCJRLOLM&9ULs=k8Ff1GrRq)!_edZAzUFt16r_mn-Ok>&Kc_zT zMDrJZkt^S?eQ+XX$-e3B5>59P^gBnlzU@-c-*L-|?(fR#tqW#YM!j2{zG3Ph#gRV6 zw{M5+?E3z(%UdGS==hM>yGleFCK0p6B86N+;I!Jb zYgJU4f)jD$UpCW#xqh_wnXps78X9CkB$~tyq_?#9Hv#C_NM{t|pOmTUqtI)Zi3(X- zrUo`ODRj&P-#}kCh(-gv$ zvMs=}VeBheHDMV8U|B2IpTe^5qtlHHG_Xh-SR@Us;K1)-*e-x!+wmgGd;<)l(n5CE zv~duT?q36k#YVE-ai&41IsKGVY%kms@>tlr{yD#ll~L`Te#$ihf{EBThr{OJLawm0 zqZLOC5RCl#U#IV{wDO(L{pM@8{qf?k!_c?sSoE#T0JCiwUfl}bcVVsXd@wF$`2x-& z$`hs>0gX7i3k>8`w96>~88 zT<67;hJAXyJguzpkWOAF8D6C;GPMI;aP5to^B$eKrO$TS(R5bdx`{OB3&G-*N#6T! zH`xAW_uW;Z2=1|*!L!AoXBNzQWj8YJL;hV>!P^xnPwLHH%R0U7*w~=lNYBG1BF&W- z$3BmCo!qJQxgOE?O}w8)Mb9~Y)U49u-TvdxwwILN9wZFQe*XhD zt0h#uXvs?V6PW*^`IXXBZD)??u3ghR)r_x=+kV>7bl=t_+D4oCqr9$L6v?w`N*k*F{-3%TDDUZG0BpR44o0QdwDDTDHq=KK*v9#^k9Iu(vSf+~(KNX)@er5JF3oi=aXKld52Ol5KNGf&;JHMIt zw*Lw7v`eCwaqnZA1NZ`MVe}J%1~G!K-;?`KmGv(vpWl=F_vHSsP3~&Q#h39#Jb_5g z=PUUl1y3wg2zgwwh$H7n`8dwTr2;uyz~>5i5}8uOl?dfL36~?63I!q=kB5sC1mvns z$5ufuQyfC#1nl~`Erw9^Uzl`&Vn0U)1n!EBd}d{cQk#&zFiVu+AFaq`wo_2F9egH`%GM-=0qn5JMRC4|N&#wR5t8X=W8pe^DlKrJE)3Nzl|6Z;02{dEw#&`H^z zaEP6$G&sa;3@^tq2jq3n>!--exY@c!1iM)kNv!yUz#0xQl_s;=CH5TrKHul49&8esLm?ezXw;$>c*WWO< zOe()pFyHiLas8ep?yX8I>|YFZ==<(&qtRt|;||!ShSB4W4sl3qQ_8LAubxp^Z)W`+ zaijT*7Ap^FQ?Ixw*OpE1P2C;a;^DCuS4(F_R;)Ie#BbE0^XAGEAN@Bs-}El=+Mx$_ zEuvOM4&U5$+J?-}Or11-r{jBP?!QEF8`lFCD#6dD64^_@FIo z+bj@UU!u%rSkec-HOI7S!fqONzaJ5 z7}2po!8pPFxN&t}H|ggRgNMy8=@JmWG79nfjo^&{?sKIwUS>{Z%jXTN|rj z-0v9V8{8mr!wb*wPM>J5+<5AXjVI`A5=i=Tnk=A9p?A zO{aN^x72C2^i||!7qd22@o%3!_ball#;VoOG$C(S=Vi^>olGpeb#eOcnXlGSl}CSo zra$-+>a#+9x$NWo9Jx z_Himt!MnEiuuZD;n3mbSX|r;RsM!VYG0_BviNR)!&pnowyDYaGIcHk;#Z!8A${5jx z{`t`9(AD+p%1i95b>6=FZ+k?4>G<@;o6rjP^-ugppSct&G1)U&vm{45X2eLr>RnbQ zCwh&#zev+ay{MOT|HV@SwU#eaZHHOTu#eR8Zj_$ubz@ntYqz$lN4B!-rntPLgWaa! z^vZkJqm;IBC#SA@>bU7)udySqM^s$n_nKGNYl6#3$(<(KHS<$F-MZbs*3iN?&ADaK z>Zb!!2bWEW)34n+wQyKvL2sw7dF^`mjtf{7DQw#O@ImRJI^Et2x*WOb>4|N)*1&8= zE^2e?>ba->WuLaUIX3vbreG=S##YMvx09!B8@!TwdJp!hzAPf_pYxT>pAM|9UT_ACHtQ`ARrS&s0`9O2OtBvHEZQ{~s|` zzxDrb{r_A4|JMKi75!hmoKpzJT$xykbChzCM8f7OIBXf0&Ebe7GMN+?vDsn)k1G}O z#4?dsBo^?bu-QS*6Uex7o=hs|5X-sRa7op2j)}9Ca)F$SD`gU{Ou}bNL~N;4Cg9-; zE+6M|HI^TwlU-u^_ijn%{`G2ZchsjiSj`3SKf`Ly z@Vi+HVkzftSjv6(6R)5DZnmLu&n?TaA=$9YA)Nc&`Yo7(7g5^aMc96F{brJsT>7f} z0zQB50_$_jL$x)31p06Pg;hA0Sd?*bSch@ocV4h@0lx6bum1@We)5yuYl|;!AHK!n zvqgd1nHM{E>RxlZH7MmhzJ6eO>8XkDUK~4Ru}#t?F0B77*6i}pGE2v&W?64f4)P5c zIOAcPz>JnF&n|H2B&o%gFORKdjJc*>{wcj+4h0u0yZj*^wPjZ9)g|X5<~=)j^>jpmBevzx zkTKCCi<>Q(wsiRZ(`d(s#M{&Eb;)1vN zRROEEKwP#&E)eiUN)a39vAH6dkSkJh#R>_J%fZ=PE?3M|a3yS!OonqfVu3;_7Roph znOLC|2)S%IPFSGYW=;(Y#OL$*0;x>N;X}22E?>r#@NlJ^FOl;2Le9^B^AgVemwxkd z?N@i!)kiV@33`cEsZyxr-voFKo9vo{L$NvoA!gMc#lLTto#ns2%Z^n=*1xpP?iR#% zui-@$(k#`o&2G%Me#BqgX6K1FHuw--stEgrq2!J`4vrgKi9XfY{(`N4z2)v7NAX_; ziFQ2OL;dn@%ooa9O_$kiFU`!mJ#RBrl3agp_@)a-{Q17ag5S?oO}{?8!B>0cj13XF z9G~Q`Tc3`+=Ke{0)k`wD{9WfkPcxmi4r_jOP?vN1&*>@qhb^>;9~PGMW=poq{eruR ztJ;4^(srOYeQ@m6>4~einSTGwwma1u-Yi)2S}x2RxBF>W_kvp)36av(#~WG5wzru1 z`AZ&}BGI30QWPM2y-wTH$!hA6vO3wvgr7$Y+tcZ#v>;`DiUR+zcym-vXV;wWyxk8c zB~Kl`{zbup<2$Z$*!g2m-b}ImkiIOU>*=WzPS3j|>%z#{m@K{3Uf*z1S(7q4t<$L~ zb?V%|{$=meMkOz+y=p(W$$q~5F5i;VXz?YyU|+wq`O+nGPb@d<;#JeDWg|vmN_gosE{;H{TW(xNk%A>-3HPoW8x~zO#98(Z@^P zq?$P$Y8BSU3hTGOERZzCfyfUbv@Y#fW@=kWlT+vxhYtex0 zNxDyIW7Zx$(P;nEPc!n?5j zId;V8!KycZw*Bt+^fzv*{&y;@-_!s1^#89-|7u9bktx_RDK1rtH)Dpc|bNLQQIt%7vqw!B}r<={H_ zQ-JW-TlDtWME(3X$c7gi!pm;y1*GBa*6k5{p7a|j=_Pkx~RZtR&XGT&ko}7L;1Kc1Q%K(gfF4JWDjoX=RD>?9aFo} z?)kfR`BOhdU8Zc>(PWh6fd0cjG3|KQo|wEGw&-|(i}lhuU{u-zQ_R74y|Q>g&F1WQoGqy>8bU4&iebX(zls zelk9N*Pdnme@rhfJkW1^;|pUR7ewV#hOeqz)>K}W79$qk=+>hb{c-d3G3U5D*DV-4 z*k`Ndeh$)Zl6V4cd=X@7q{@`IPaA&%Vkgdd3<>ub$Y5W zSsviwGQxlUz^koBZ?>waE6iE!Tbll^-OOtxLxZ~O#1Xsp?s(=IuxCLF#eton1Dov` zxUzRs-^w}70v4D1y)AEG`J(*f!FG4A+h2R#s(&70?|Rm?Vq-$LGXKeI*;h?nJP9*FN&gMLuvQmONkq%<+@G@2tRVMwAYxAD;4LhW~|P6aOQKzgMwF`ESol{ ztoRVSNHyfS=NlPQ5;-Gz*Vw6twwRTNy-OOAvUINEtK;tD`A>4ysLUkZJ;psRl-Fm3 z;>_$Nuk!nGubrc|pm+k89%XZw66E?l^bj?G;q=N>%RY zb=~ComkXxJUo}TsIr+^U7aAw`S^qI%+Uk8{CT&16H)VkIV^A-gr zF*=(b>bQ<|rKRT0r5>?g=+Dl&-z3EC z_Fvmnl)94Y)nW4dL9_GXqQ(h!Jjr-&J1UQLv9Ydc{(#TRV?JEE(Kl>p+Z!=A+jsxi z=T6{MyB0eyGPa+ubQUPyieJsk^X)xh(O}o`oqgXVTl%-{lSF-fVCiisR(ED$(3bN< zW)BQp8a^Y#)pU6e>+H=@=UyDk6WrQzb#?pOK}#D3s3`j5f8_E@Bj3MUee3nok&lne z?D%4oqjpl<2769rbK2=K^DI&=R!@01uN(X6vWTYdT?P*8-ZWxZx|W${J0(@QY~b@# zUtCtCqXB70P6wUo^vANCXPlRl3y-}{3a)TGeXQH06|Na37ozJrhyH;&26YWuayJd$ z_GbwTK{{T9y)gJE>2>eK#ukUS8T%ci#@(x4AZ7V8?FTC~A?!Lb{3wcT^eu{TE}Mr7 zJO5H0e+8Ph#K(4QzUlGi5pVI1AQ}^97TiykG zpT&J0;dP;fa&W>z)ngr#(3|_|UfX-6?04z2vP!{6-A3 zl9+fbGO6rpdp+VccR@X!^?drdUA^m`iqvb%!abaIUz2-0vB8rDtq>f|sjz1)-qP&z zuC^xx3FCSky~ZA09DFo|=F+E4;ew`j?~h(p)}_giwk7M{55D}~;nI_@>A@#vKHT-W z`}C~!SFg3$^RZ9pt#%Wb{lpuKW2gB{3T;+@!99Foi@=KDxIk@#g7Ep+-8=W}`@YQx z80Y$~=h(H~2Y*`GC$X+a53^rhGi|Ej%Jdpyka-4(*5n*9czQJLBlET zOGBJqTY+S4QYw*%h?y6Np2elX4bI_Bbmgx1|IX#Plk>e06GTd(1J zY>qr~4&JS8*_z|w)?i<&l*MnucODtANY~V3Z)v|1UQg~m9kypkeS2Q`j>=gxmz0ZI zoeJ2BzRvr4I;iwUo4sout>`du@+#T7I=YnhOUH{R?Aj%pk~~23*=Mms`7_()ZFOI} zHKD(sl5odUAXtU{(S?1%dhnV3+_zU+-MCTe-FwxV_s*iby{$H%exYnXZdJeS76IY` zv%dE0{Xy(FX0PG z1kxp5dMgx4WOAiaEaD0!Qn`RD;s|6Cp$x}yp+qDVN!b$OwbT*?m&?bMQXyNU5Gw@& zj)KjVi6vY^Xsb3PRpke<|e4LMqL_8rkOw1-iSwHa=T>ajG0mt|l-}KF(!zry+ z#v^-v@M6?4dNIIfVFf-5deytWf8w)nFw*g(!@~9~=Z@Q4)0wNiwp_K?;u#~Hyf>o< zcWZiQ2U??rv0qmY>pFUgd+(+xCtTkQm@$1-dBbPyiv6?OXdZY!p6O(9N7Uruhkoa# z9(f{d-fj(lo%iOvmwAhK-W&Gj@$hrGiwhHU-9~1=d3R;}Dh=M~g0J~~mpTWxoU9v0 z-P$c=`<@4_M@1Yzb3IWy@!I8qmhrcOQeNNnUz?X+xpjLP^77nXq&(e#GHKX`EEmU9 z+gB_tJh8wDkDqqh*`xHp6U9OCn99q;8AI^wm8-g09*c8z@26P8IJC~=`jYdrd~QbE zcTi`92#a!#+$hX)53zS_yd%!;PD>m1AFZ~p(Of)#4O?;k?3+dU&_~_7Oq%K9d-BAy zL2c^HJ-^Lw_egH(%M&iW8}C}s1xL#+BqiS5LD`dKR_QnTz!=+|`-V(D6*uCGrRjs$ zE<+DnOxFgqeziBGe&U_&Wf39CYk4b%}Z&(%A2_SmuEUrZ?P)PJn5OD!m(FBZO^o|GFgb@IiwV_rS8I*`k=F6cXgv4lBv zxT;Lp)$>N<^Le`^4zHSan{0b{-l@({XR_?(T)x#hW7FGvU408S9T~lUtkisS1aH&a zkQ1LSIXf2J7C(A$rgcWbVb%SG+)17fp2oEpb2xhMq=#bJea0;IWNNA?u*`Eso0jFb zHm!dzV|O`m%QO4h&iEIhPr80QHmUI7gRWOcZu1}TX!!0mJ7hiT@agAVygDCz-X(6t z<__IHEbM>x`i}8acSv^MpWh|eWr@|KFRpXI zN@HEu|7*nh`-+%M>*fnw$K{<1njlP`wU2wJ!L!e?A62V%Yfdv8r0x#6wYh)EzCO9O z{Pg08bxf=78#cW03SCpD{W`lN>6wxhM?Q3(kvu!*%)YanUav+TN}D>X(zDT=6D3Us zs`HLom~YCExrSJK-4qh?kc)q`> zVa)IH#0___~gw)`qy?WW+V$P?^38}DQAsc3%6tp&9JLRB5x0@s zLO#{|Y5Ao~m9|fUo^fAiWSTdeIcpNN?9Rb6m0!KPMn6|1z2Dy1CzsKs(_}xN{JOVa zpZOzV?c5K0W|_FEtpq*#^}-*tPi@+6duVZFQ>RZCFQuE^cpehq* zdlk$A8g%U9$mO> zqC8FN8j>{ez>dxJ7UxD>+ZE!iy4H%nx-3R&J?_xclcqDdvK^l%O|`#$Z$rlcbI+Q@ zO{?%+B=^mjSv+@#$w<5B3*X$J58ZYx>r-Of_V`Wp;up_tR#NxIjBGS$qtE2dw|576 zHMV{9$~xDt{*A8nw?^~l#y72>*ZSyC%L$_gK2Ze)?OJGK9-od6Sn4$)v)o_i*TW^> z-67v$rGWmVMX!Kf_pc5gxIz6Wm$%lja42QRz@V6;7F!oyZ182sf%!}O?+Z0}E8_9k zZv(otH8q?Q!$QYde`dD5IQ>vxTi!aQ*ShCxCVul4#oBD{ccV>sFI?N?-`O?m>An#m zUKcw^=gw}tZH`^vZ8?QQR$OSaGTGMW^vc4tahneAd^B~nS$)y6(A}#$oNP>SI5%j^ z!qcv|js(y0{d&20#gOD{*Pjf1WVe=s_uxA0JnOz$Cl2heoPTGx)$p8aOSfvaiDaez z7aFc_v+(@F1*3Z3xuwW_R=?>{S;MLM1!19ao!a}@e)wGP<)H@lpKsi86m}i-epsXJ zMe*yoGuZb&PEQ!idAM2XKj`@0OCm|2>Y;7o>kNG(NJ$^fp8dzWqSmG7ZMW$j z?Q!b$silU~dB0~@mj>$|A0BCXzaptav{xsOV$<@gjaHty7qaLUi_Xmzo*SloPPi7)5hS+_>F;oW8mKy_%{arr(1%no^S}Iz9a3jCqDtqy#ilMGAT7(^LnlxpTotm?&_~iz_ zZgzsbDnHN4Ee}83esOE_#g>ZM4i`$6Dhju6X>a8}ceJ2OLjT)>N87!URwssCc@lIn zL8R-cu&!CS$Bs?hjZ=2@|}KV zsjwh*YW(>8^lqAPX2l~ zXMM2fOP$$;GiRTxX#3KK;^3b@?9k5M5Bsm!*~V&>vhdiQG0~-4?(j6+$g_?XXLmIo zBwO{^WJr|xlq0Vmz4^57ML*_(ybDnet~u7_gp1f$uHJf7?y_rkn)THSYn}y7Vsw9D zWvj0A@$;>pzxI0Rb0H;Sp_g+~;e(;p;Yr#p8n=W;oy%!XLy5@P;#|i6eo{p_C(8 zkMY22C-OTST#dPqU*G^+IBAtQVYM+rj6yiR+T4?T(gZ5T4nX@d}IL!2{Rfzc3g06QK2 zjv>T|frH(xJiLP=BSNDSQ=$TceTcf@7)^7TTBXR;r({TE^}cJ$&{B#{p@)uw3Ns#D z4rfYxk@E-6cy2L@P^U z=@fc6_nJ6Wo)ikhNP*A+-+agsfSSU{w1#*d#eorm+A)v|OOOkLW(5w@+iG7R>x6^sjnC~U@Z2y07%>7SWM9ppo5;vYLKJGU zlEw*VaamO*dvr^#DoH081SKfYX)}H}i!Tu1?WzVkpfs9bH5wcHZ6RA|j&5eqB2;J& zzCb0GPzhUrv-lhl-mR~SKMoEZih|Gsw_tFD)s4c0`guu4&5|aZa2A^l ztBzc?Or9mtr^%G5M%{0;#Gw0)RyKmL&{3SK2@A>z6(R-|2(jp`V}(fcl30m84GdMy zT$HL@bYm8f%v`lhrvSZXY!$!B%O$b%2u9lkXqgna=ps^$A>HQ9PqW-4(vcBQZ@Sr+bHfnk^d zVOnB{;Ti+f*rN&tY^-Nc%rJw=pkoLXnq!E8EHK0{Czx%5As@>qj%Q^B12N%Zg&`mF zC=Ro-f^P2W8VAe(>LqfyR%aY|SW?2rkr-^lX8^I(G#F7DLQuHU1R=T)L73rAh#+S8 zqdCQJ2TKUOH2@O8vS7cB?4`FLi^Cm?I}*js5rrsjj*P`CiQWLUI$4@Ro~>4BTOmYf z==CIpFmxNqv>!rfCYc5^4GU`cun|HR$#g0eq4frOFkj5D3}OTKGGH+a#ISlHM1PTv z!TO!Fy+B6O&>V#}j~OD#Vl(25D9DR0E?Mf6Hh; zU~`5>?iU!viinjG`3M@Vzk4|RN8%W+z|JPB0AMG5Zm~f);VsU!$b)U7Laj*EN-~(i zX%am%NTY{gcl$XtiQ%jujh>*ziloKx=wb~@9&i!z!w|ht)2b&M?kyO^7(cicN{lgq zbRdLO3q`>Ob_od?{b7_PnQ~^3M3$bN#ndS><;+Y?jdwfiHO$Z`iAwDYePDgthicI^ z6lWR4Av8mxQj^kJH!!M}KLSvafN3$R+wa#5F#D+p!5Wug1!}hrY~8h@8+C6TGg#Ar zbu^4)mPV`B!NLJ7<7#q3!wSim2K@`#0zRo2JdfglrnW{11HB7&q%K03BSKhxguoAi zf!Q!a704MO8JwpB-;fwNUA>u&_*oy8ORD!cHsW92Sq}-17JQj zf#rh_;VE;6EZ`=C1r!5RC8H4Zq<}Cs6>k3oa(#@;pg*IS(S+2?Q5@)96F|FgNUonu z3xJyVSQ($`6nZdpRSp-UuL16)1AxF9;OHQBV}l^rz>m-?D=Q1ABwN2(A{$o9M*F{k zY!U7oP!z|NaKhFjhnXB&%p6sKtCAQ}3xqHb39w`xDKPwqK?SKZELrP7o3>=bU~&ys z0!9<0hJl=5=Xe81xxl3%nZXUJaVOlY1a<&xX$Lz#vp7IsK{QX$joB>ANJlZHnMCx5374`OB%H` zmTXH-0?5Yh({JGa*&F;C9n|()zRfpsmR-IEi=M>qz(>*|9 z2ash)b^^!tLxLDVf+zuE!--<#B}iWUk|2SCyyYzjki6P{aAF9MgKz!ppHrtucHdD9 z134H>7th&0Yp=cbT5GSh_S%P|lW}KqSnPF%gX7=&0PktHSEl)|rh`#F9pdW4@3dN1 z{@iwYROF9e-2b?tz+Ko~f1w;#lPI4} ze&g+*Ql;pdY5b?c#-SIw=RI)#=llu%X}|IB{q*1d?_JZp!TL!i^k@9Wmwx`A(1kAg zoCEpKLsw7Ad<1LlfK)bJq`xOk;NRb4Yw>SGS#SN`w_AUj4S-nxS48E$qVL8>fBy;I z;a|wUKgIIz1DFiJ`8IwU{+V?+Nm?Jka{Y6y)(3y^GvrnJ;1{m7h&v5oa{fg~n_mP! z82)0b^}%od8Io;evL*>b-9w>9SL84WhErB?l@2hRi|kskNSS|?55CoE{iScUTK^EH z6u7Fs)oT457B@C&-)Xh}P~0{@hNcbC&}y~*!|$|O>yWCgR_nJfwOW7gm-zQzzSL^{ z#edAdf9F!G^}ApmaD!c9HyED3da2d=5)1}?U23%^Qs#FrwOW1Y_pe=QwVpyVfV=Ec ztMy#=%m2=$R_i~PGXL(SR_piSb8EF)f8$cC^>?M6fA3PO^`~U7{WmYQTKiy5tyb%A zU23%sVd`wPTK~nRR_i8k&}y~*?xj}im*qDs09|SS?_X-QGAaLGUTU@e@&cFtuP?P) zKZJJCYPJ5srB>_b1aJS=fA{UyKfJuX`pd0<{&&9B`V)fQ^(rZ=4_bdj9>b$n>w|y# z-~2D>sMY%5PY(Z$^jobz`T(ehdirO-)oRV^fzZY;p^2o`GQWBG>W7!Fu8;D8)#zao zHZRTkm-$|XpRYDPyetKh*OQ%M;QoG;juI3P-@vrs-aJSPyf9HUp6r*)5x&R{;)iis zJ<1ET;=SG4e}0%`4@V_let3C(KQEGaa47o?lV<&em!_tF?x)$%oE#=aVgU2k(I(ma zy`9weBJ*m|4D61Ls7!%Fd48RX=+9a(xmPWny+C{q>chsb7fR5ikpv1uI(IFmKIn^y*c#VRjkF8USBW zU$$=tg(5%=BtBB~okL1H7_|jpgZqAq&aWCg`{^j@FA%6S#a$D1i*m5r>qVf;^wjWqppBpc-eC@H0y}8wQJ`X1f84%nLAQStvA_b}nZtEK7w();DKWzG`UoVgs7f zAT0r1paI8Y&c=d4m>c~;E7drfJ(p^)GCpK6)$q(Ghv>5dl+H4GaL9bsFBQTof z$QOgedbk@*wFTWw%cSUs^~DfgC3yz zUX*Cl2Ne(JiVJ@wE1lq#`5=PR)*z7{+D&;B}Tv0weK zf1R{gY#Ly*{u|9I>`y_3U4ah!dzYN#E2bHgiO-Y5yj&;QV3z`RY0zwFsK-fBrg`?t zL<Zx&vz zkCM!^A5X`xOyBfaQ>L+?p{N(VrJ{n1qy&_cba2ElF0?5W=Off#G}6{iRlIt&Vd`A~ z>UtjxPtYWqLgR5!y?SesQJFwm3H{Q@d3xIf3|b{RWfHBmM@4#Gp|>AiUM~m-rfqRS zBXpaSkPytvwm+%o6P1Y;BeOzs+vkBV+hMy@03;LA*E@D+xVzQ)-F+_fPIHcVzZy<_ zK1nifRzy`I&_y|D?`%Ic_w(t9`~oIF+cEP0Bt!FL#~@@POGakD$j7?GOj#9a zcCc=KQ-}Vf+{}iuz<#qUk`8hJI*H+q==YKtkRxi8ACyuI3W!|*0UZhg{l?7#jq9To zOOp+SXid2`2cx`9bO|!$M2o~CyfQLOT>?s9R2L{lQKc^_jJI!z7yjWdC@=hF<%PYK zj!3qxEUm;(=JUq?^#AxB;*EdfpZ-PSjWD8+H?o;G{!(Lu;FTx8a8-n;L075W^?%5Q z0NI)I)hiFP<7de@KTb?lOp}e8KsH~IyVBoi+X|w)iF&*O^?3cNwEZlBnB*R$VdB5? zd2`GfPzi|{9ahz(Twh);^0G_z=x#9$YzV_-|H(;~6egn2AQRWpqqHciXH({Mw9Gc` zJIk1jaTQ$G5PIGx?M7Z-)hfgkevq7g9*?HUPL&tX!%X^li~empFQHCh93h{ z2iF2GaIXnSX3)OOFntqYN+R>-4RiUuJRgxbF@5St7`PJQ>e~%Rk!!^1jJdiDj||`5 znph_cewe*!I;zsFQ{kf5PKj~#Ny*Ux_q5-#8iig z@p>UYC)-KV%IuwD4|$Lj^rmaJ;XE#Dup=bs3(zjP3;5g4@v~*R&Z#;}dT-WD_fu0ok1QC~gG`r*hFD4@IO+QLj zuJ7*;;^B?GUT^irt+kb2@8%$mudl@`t1I#9>hN}Q=T@(`e|>-N&S3xcjn)0$YJ97A zJC1J*Z`{0j)1o=Bqy&q!Z`%IfT0<2c+Rv1vGRre-ol6fQ#vPvUGa??)B=6n5&pVHv zKke+1yE2CEBUkZZJ@C}22~a@{V;QYte$yn-2dKzc-$ zQrl8oLtSUm;K>v`wUsFf48BAQf^hr~5{N_lToney z>sj20uz4}T-`)hOSa>lR3XlO~SEi^f&J{0Oz+ZSuNg_yfcJ#Gxp-$H_E*cy||Wbm$QZ;GI( z|9|BTl0FgdyRN(@?mLggY>rvGla*fMFtk1Bc%mJ~m(EFA9p=-jGbl#i3=bkgA$wNa z>5mXeZEwZn&oY4sc=$Rk!Pf06p7XkKabG3Q;nfi4aaGLHw$bL=riqwmOlh9Gj1l{F z^rNd+igEyL=yMz;*e$-ln_Y!&l4MmM&NGDr3n$)5H1xg1hJSfuId>eO~KM)W0#H;6rM7vcyR8MLesfxt~x3s?a3R)!7|w_ z#z|Sm2T6aSYak=rHcWOuH+`dkVUUZ9iyLreV{)31hDAy)?f$=D5?c7$2=SSPuBkB! z8s+!#|HZ|P8^H30buS5lEiNv8$U*1-)dy<&`15M|c#xlDum_mI=F@AXc^VIn;)A60 zjUWF(^v}rn@${E}hm0SH8iDcSXPb>5|H_;uVgC5&gRADFMklj0 zs9cpEnP>U5N{S~tGTWsww#*lE!1=-}bJjzBT?A&MwvvOiI-KqyFmJg`_TsWi<7{PZ zd5pNeDn07pTtQOgr9>N+WctB~5VRhfVOk`EDlbkA{0Z1?9;ZWSJJ?1G%Nm+;5)Tqo z+8ho|Y{u!J$afx?L0k+iASdZj+SP6e9=uuJjx-mj?>s&TOOw65ork3=_Kh>9EqX-cgFGSPMQ8V>96*-O*zV|ei4taS)=_hEljk` zfhU7_QjX)SGZ6}dBFKhN3|r{Vkkd2Wx8qzQ?<{j|gg|Go1El+AS^^{2rjvsr9wr?$ zeoe&DhnJVrtV)Xgc#tfgr2DCMOx0H|$nCw=sQunsiY8OPc3IL_jOqr>@i^&-vxEH;ybW+>TQy}XWVC}Ke$F-tscc?)N&|7oNa-kg#lZ*WK?2{N$wxyo zlx0mb%O0k12TD^Z$e{MVj%0?QY{Y}P0 z=H33S?#e2ROLoy!xl#*$V*FG^7yf=;OvmAZJ5H06Dxai-?&NUt{i?s(TfM%zM)p>X ztHLScv`PjQY+h;B|H?#hF%C>F4G+rPyzcL&W}oQw?VDemSI9);bW-jm(OYku?6g=V z5eCeXoNo|nctX5hxbWG-F%iNu;xtQ&^9ouz;z1cv-W5_d;dq->eqkj=TSwh?>lF0e z_UFp0PF5GgUg&W?O!`C-iO@?#u|hWq;x0eX z8VJ3#e?TAkyT2T6y8;Hl8t6Jsgi(L^$XdB7wd?vfh=YZv&Z0(aup*AC_w&hVkscgY zW?`^sR(ri0oz>pzP2TSrj`sgm^|9P#e-P>k_bDxBT2c-S26ZPWGE9!sLDB&YE-^iF zJK>IzHf*&BQ&J>SBm@ziJFX;cuzM-y?5jEvv?g?B`cWmSRSPdh=hUUUJ=@l}#@ z0SkwX`pi_mW1xo?0t+YHERmuFB-a62Li_|li8!u zX(1?nCsQ1?=E5p2*7(Kj>)bS9OH3g6t)9K(q}a>Lq@U%w6$UeKKHIHfl2vJSYSq%^ zRNhe74%RmXIq0N<56fKC7>X8QgY>reuw75jrrDEhkjPTe(r}7Xqw22J54`IjdLTWT zgHc$Sem34l$UvoDSdOxAe&za7CyTr`>Sw{A@z z1eCE6iRv45o?)-0N6tNKz7c;WLCUMnqo3Mpha%80MqG;)Bk*2-4@OS`6x0gKPXN z&;=Q^4b7mbywW!-;Z$na*iJr9szXd=TAGt0&khV6LFP1{7XIv(6no6hKWix3K6;MR zNp=S+V|+fIJfgvo14sh&@ zgx3g&YucZ;(?zSrsSErF%s?u$h}32QFy^hH^HKekUT<8Qas0Z!(qoqConIgo!x*_GxeG{rdP%X(p8eC0%)vy&_X2+5S1*D7GUCu=T!op6L8jxKWXj|;jmM`<_ z;lneuDA^tvREu7LS45G&fV}0??qQ4dK%1_0nY=F3vQm?2U6K zaXTiWw4*iGWQ5nwSTl}Zd`z>4n7h`Q5OR{Y{!t8jlm@nN8iOu6tm?A}K<9u6O^jbe zYNCA_**e)ZNXv%lgaA>cmzS|v5&(h(le$5%nM{}VGXz^=3D+_hEn$O87WC4sVBUrx z)ac1*$PRoc)~wue1X2g;t_xiljPk(|Q3z!udNt=`mEy>g)3cze= zTpc0}%e1C*X9f6*_60up(T4YmVx|I$yFe6Q4eHQ;;to5jtKLTN)#_Orjo28}h9$sT z3r!HacfJLSk2uwLBhHHDroddlR0H~ALJy%QE0lmLTt)O!I?bqRoZWfKpd!hhgk4bC zxp&&3O)zT)=;mDPhfrJ;_qAI8l3+fBdIsYjKiC`&38OR<>nDdeKn9^zjqN8AT;OYg z;N_$4bPj;{V10MN^FiBVa1fbr%Pv9)FE$%A%`8-#wvnDPf9|FO`$tc;QecJMc{@jh zPo-7qZ%FMJoHYR`l&E`fzI&(l9}8*ImZ$bf_nCGdL}jrRvmrUC zSbh*R8>u%3;)uH~;rQ-Al=bQ7biy9&<9O6x>)|j$C&A40+cHH$Kh2uxZnkyp7)MF6 z#3aa2NZaHkazJPKiP^d~HdR_A!)~`re~gkC%doqfJ*Si!C+TQp_Hb@OG>^Sxl%Fgy z@sPe*jN_40mvvVut6qR(O8hL3$%lsnqUpi3h~e@fQ1++U0Dm|w0bC+CUxAEOI=EHD zoc>}y4Q_z}cuc^$ootoB1{4>ksu(3+zD8A&N;|6_0G{oTwIu0A6fA42ZTuP#AWJ@f zOUG}lSR)_kc6neff~OV(HXJF%c;Gt*iXD2A1jx(hyq8E?r@1-6B&D+&++g5 zl6p@6tmirPRV3em`XB#;Kcpb9|E>SeD98&bfZ#|C5*Z@prQd+2!Svt3t@^M1(#71W zem&^dGBODnTo=Q=9G8}_C^zFuy>&5H>JK^9$+~%vXO*e)>EMtT(J0N5E6z8eCi@F| zLEJE&CGqgoYUps^0$lzMqd$34`5c2fR1rx+_FI%3=VgVJK1}x0EE$@V@{xj);%2By99haZuXxFLkm|T}!-*?-|rpmU!Jhj}) zq$@3e@jgiQrU#;)uDeE`BH<2yqt?t--SpHe@haeWf`K3eeo`{`FSK1lPmYtKNQXEv zZ;6<81&g!r;Jhn3dQu(YR19-PvjD@*lA%0+OT@nrYgL$XI>Dj2MKg#q%-ys^U_)t6 zlF^95gSN~Nfoqj15~l2-gs&xo!`yUG!3;e_P;gih56yxG78T{7o1EmuxI0XiaXG>A zgNOHCe9}Fv#-poLwZrFl7SW-q2BZAo0Qrl_YJeD|vd!~M^n zt#03(e6o4);0HJV!tvpgo=}n@2y?GeuKtjUX+NFf#EHm&GJfbV-1iQ7@9V4frBESPB6KOUG4b!VUff`biLNo z4xqy8s5=A1XMb815Zj*rsL_TinAo2mZQ_|EY2BG<#Xws1g(c6$lW>;`Q43`)$7-9 zuioz6;ukBu+qdrAynTC>g5aQ!Uq#g$t9P#7x^ZjmI$@)^e;G!!5RXQS0i`Kc0i|E+ z&0#)H-sJoH=^&vRu3`Uh6Br7qP%TpNu)L8Fx2^_hfkMiOP9rV*84*mxTVh^{lfh->IT~99jBb^*ycPl+V zJ`B!&`&A#sqY;jnxw`Qr?WU7-|FoMI2UPFF%U7>zMr%2i-!)J3vP}0z3CFya>rlS; zM#+*H<=H_8u`f#osYcT5UTadp-Bwvnli@?k$mI13;zM`L4tQiMok14$n;^jUd6mD;0S2wH?3V1* zo7s>BJ_S22nMr*L`K;j*D)Qt|q(?{RK1bX~T$(5^iNsGi7?;V%y+ah6Sx7S*07a$| zlI%}*7=UdQab0Yfw*O^gv5S4nRg;%o#(|LToA@|RM<6xY{jj~h6wnb-jQHH;c)v;z zB2G5Xh4diHi=;Haxt|wJymX?l-Qqhh z)cN1tHX=QkU#dZi=Dn<8qY(mgjgl=+_COm*_f3}bzH}DV^;-JX>vbo|%Ct(45e2^wD*>4%(o6xVH-YkgeVSB8 za=j>h^1Avg9VA(qNNHAmu%EvF>9Zv^x0LB9$&h`bJW3~v_4c&Bzb)C>`PBR%Ih_Tw zJj83id(Q$n2Vj(#TSeDa9V)6sABRp!#?U+4e1>ICXDG5AXTfL?-tb^LoChC$@<&e? zMl=qou$-rEiFWdFN6&W*B^MFY%D5=vQ@Fu7JrS`wuZ~CrxoN$KCQY%y1(T8nU98e#j3|uL&xf@RgI)foSm8hB`b5Ackw=kkMq0nmd&@9 zv$vhMY8|%Yb@Jn+7{#ZNd9?(~?t8WQb@ZdgMt66+!{siW3Zi7idT>Q_f~JJPv*1ed zhUcGf7oW!k!f=-^Fwj~}cIDYz!Uzhkg_`i-br&r7Lo~JXV{sAnKr6OZ9|dGH z&Ur@d{D$6A>6Jo@1W%YY_KY_AuJs5r_INhTDB8`2$uY^{zG=%(((CGFo^j$mDJFlR zWW#iwMO^HToH>s!rln^u9@EKm7ePIXeh~7R$QMdi?8~14@{zQIQAjZ{GXT%Q>q$DS z4$U|&j*`OcMjp`3I455ig@9f)WqN?44<`xn9&D;lC6%(1%WU3L0WbbH@xj7r&fl;2 zULY~T-#`=}QvC^cVlJnrnY?##{@U_l>px$&CkJBH{Sa7Z2#v3v#r> zSi9q&$o(*|bHP*_zJa0k|Nci8G}Q8{1sq^5LeX_Qtz8Q!Gh?Iu|KzyKl5-H*;KGNm z)9T3&th5pr6OVyHA8L{7*2Y3k_-E7X*YZ8n-oYJFDDGRP_S4r$EJUv;_DWuW2Dn3Y zTwb;7a6f(h4xIDr$YoBitty03%sYJGI^hzWgvY)mE;9o#4rDOA^#%NsbVWI~k%~bD zDpNmbDKwXZYCcK%a8(MMl=&6X1ec&rBm**51zsyTi0WE~tvMw-92rS(t=?JQzrH%W zz7`YHQ~0Dp7%3Di>)sNcGe}Y>JA6tEu0PM{(059pXAEpgnr zCf+Moe5)kCm%R6&L)!N_pFT;dr_;SHjKwwdNm6YVxcWLBPfc;NQT1?CNij1_ zRIS6p2)efcNwGa0Rq15pH)p>+ zOD3au;A8FnD2X%hcx21)o5OoiQQYuY+TAPCWIw>h!xZk#Cq7L)BCE@1DP_RW(b{pX z_5jl+NXhH8_W9GqAE5m>gOg8+#9#I+KSmf)WBF%EnN*Lf zaOH0wJxG1j(g_K#`m-@6(0hSDKS_MH{vu0XuRh5ACGescJW4=OJxB;{;(t%?aYwz@~ztcxvyS zWct>T)+1a`@agm*!5sTQ(Fa(THV=}l+Nu1;P?j>;`4v3FAu&x5zXyQ#S#w!5e+8~3 z?osh=`Hjbm+z_@h1X)y{$3BSe<+FfriFwv@@`p0jhI7hpEGE3AtaP*Ng(Nm{k}DF9Bj=V z2fN{&>VRc~`mvTPMHF0NJc3f2HdVe}gH_@``7o~>k!GLUnOGBS$zcY~3a^>E7uwuL z=WZl}k`#t=OF_t!6J|&vACzqh zBcEAV7wyt<6Pz5&_mRZN+mRSPr$_FX;IN)7lCUuNGkb2rRv0gGv|yIq5c(IwDo8P% z9Lp9fT0Cc=>uFT7qtamj zzVUPN%W8_XeW8;lJ{d6mNS!7I6cq3%Hh3RQ3V&f9$ZLw7f5c;Ott8{vFGiz5R#Wn= zTMB8{WHeCLd=OHRsvbZ+RDxwDFkEbfF~e~yOKj?Np-nZ#N{A@0fp81_jguqbTZoh3 z1*)8bxFyL(H^7h0&G7I@a1=&}+!bH&s(xfvc-2a&pJZSj8xj$6CgTx419UbKi9_yr zGR~u*#!4ZFbMg@!+G|_o!Ub5hC;|Z8C;YkVZ>C_KrT_|v>7BS2H5)9Gb9fi49suSX zJ|#*8FDFlsy$`9nrqH-n&t$G=s2Up%&A>#@t6+zb*^ z4lH4L4HKoFIYXFnCU}F91}w46X#$CKhIGiRR=1IyYIu-=qN|X6&Ml{#6>r2f4jW7Z z-F1{r#}V&2d5^_2bk|-~$2^}=R|Dszk$dXGY3$jJ7PqAeq|S|W^o(x0Yi?p81oR`b z3MG>7(F;3Mz1^(=XKO5$1Sg|cQrHT4Y~wzqK6TczLO&$n7I-CC4- zsWNC~`3%BA-sFf>@cq_xQFyH?Mm@$ezg<~K+H{z5MjCHukk&QfgNMieSEeLgo3;mo z6&s|@gb4IQS#&_c-$)n-yp8gj6Cdu}MFxPx8C(?7z*9B9av{Df#~Ed$GctO98zuR@ zI(+egYbf0QS;X*Yf;FNGPY3Mu1`o;Zqwi<41uSg=X-&f1ho7ZwgSm=(@g#j?twvp* zCXISuXgh@f8R@LsJz8uUcT=4vsRxvWnihsy>r9COg?%Nip{O_YDD9B$iM(3t^_k{+ z{(Q`@E31rB<_aQYY0R$^NN#jyMg9Cb+K*Tw)ux0l<&%g25nboE#}MX2!&cvp-N83OVn3pL$1#F!n(^3&^d_6r@Ppf< zI(B3Cg}MQ(Zyc#X`*D=-#S~BJ6SRKSV56W);68Sn!@!^IUe`V1R_oNTerrn~@i_q~ zHas(GXUoPD65ZK&LYCs-E4#8x!vTh}P5!aPH)qB*dOV3PF1g68sgY1(eYCi*ll z=`Nkfopj;&;~)V@?IuOhpcmR0V&`sztrYyh5TJ$p>{}edJU;mMP-?lc?cEQJ>fcoQQTtPb;EQ;G4qVU3-?o($TOYQNC$Xk zdF>5vwvmQ;oHt-u%ALDWHo~FN3(zlskZQ0pP&L8HY-l*Z=3*noQx{~q#ZrC=iw)EA2cUm=~bT`-Mu?p-OWraxV9Iz^R>V9eGf zz?&~mHh0;m$aOovSH(a;KJ%zqV4qO|XkFFvHrqa%@P4K5 zzSmn@JbO?!;KZBSdJ`8Kl?5==DS4|oZ!itop+A;c74MwUJW`F+BaMbWKpUOAA!lsr zt8q3hGmzvhiaqDnbzkAn9bIB>nTs7sM1DaZK|d1qe1mBqSQ&79>& zXW8hl25p42@aDn`U%g#)dY=vY^8yBEG(a!<&}lL+&3cgy%c?M=Bs-`M`!7vf3$o&x zO~-uA`fAU-qSILYX!G9v2M-^8^6A#E{ou3h$4{RA>(6$czxe!zzy2G4A>JDdll_Ck z^vk2sILjx$Rg~5A_~iBJk9#YtYu9hwymk8y8~Wx#|7r4?U|021!EyJwzaP*J00t6Z zz*<09wix8F$qNAh%;0odzh|oa48&buy>tD}&0DK?ZjfD+EfhLB@5BoN$H-`Lm<;p~ zjJkJJ3#O~Z-HxKYqI$6SdAuM*PW#BDCnw?%oT$I+z9-dfN$F+ZoE|&GX`H5eKfcWO z{9}iFe9R`@eG{cHN&-3O zw;yCV?WV(iLyND(FsY_c?h+1AzA<2wAEZ#EsYlO4h@&=kSHRl^ql+F>>EiX=OltUo zjql@7K1p0in?<=_xE++?RR~16rQ_|ZW;)<+TWl-PUgafj9Hk8n86dSJ5Ua;?d{eKE z*nZ^QC>uKUzluf1>I)lq@rq7^W znuVVE$YW8f+^o0f)KG61&h0)r-7wtM&Q6MWwz6T8RnHR2#jGIOUF_2$!NntXqi>g` zE%7%03oKM)-ndWjD;xNVxPt_9%hEg2_@uD=6yZva@Vm z!aSD?(JtBbosTkvN>I#&ePWa)s8l2EM4ro!(SS!pmJ-@52yD@?ZqoM#0qtOMsO+&Y zh%g9d0jc$~obrg)dL$mE#B>%_%}_nvIZCRhV@GzYs>{dRHMe`7YHg?ldm$OoJ#*_8 zQzD0B*_!p~WlHl6Sps$-Q}kGsM{ml2nh(X%qzQ}iOLzz4$ik^Coepgw`ITp2vmcQz zs_nPp4&PBf%#MC7-$Ot>h~vwAkI(t5A+_dEMHnY%-_ro;=fx?a*(fm^GI5#7bZ?Xn z%+^!M5;&BkTxC+=7@5Qz12V)L+W=vDz z2Xzz@kA-AaT^%-F8dlmFc*sPZIX-TW}*tZE1lWcZRfrlVPL+v{pzX zFEln3bEVba96aLLkWlwNjKMt;Bmx zjt2sE#0Cw#i9ek+t_AwqHPN~dOJhwKtq9VNS(VGo2!7j0U4OGtO9D1#np=Rz8)&u? zkUpoq*@iq=RJ)blU$GJ>t)DAgy@OhHdfKVH(26=SNrWB;PQ65Mc41yofGun{?Ntf^ zvO-j%tb{IWboF>T_K5DfPM%L(rL7$P2-l}G6Dvz$~FR|Uu%zw z^t?i_2C0jc%LcqaLu+Sd4msxO3Qs-bQlCDOvmv+84WQs|J1NWfAn~_|cHTs{a;cSr z74BZ^Dg5BGE^>a!6UB+1eGbr^xVa6u7yX0&A+=D~cJ!7%3cSt97gWPFWkFd^_MsJ_^4eF>gO&Z^a{`gIP?S0VTi&1k{HF=UQmO zdk{D8ozt~m6-ThVDqy3^`To|q3;9KftOAWonYfTzYTSh<-mze3erim1Kn?gZR66rG zFN%mht=N`b4U*fWS(RkN1j)|nqB(m2(%p$hY*5;*ACP2PX8<(uQIL*hzetkK;c(a~ zp_-Ui=3{ev?e^`Pz1yJ=sdj&9a5v_l7wB;#pR*l;p|O0^_lfEMk(&K;Y&Lb-W%m78RZ!C_G{+;v(GrS z_-R=sV@0)(Ocrn+d0l8mALl+r9;C-frj0w3Ul5{V#z6d3P+~#@54(Hp zgOj~`^{5^?6qJ+u9LlU2`J{L<}vvZhFM?>5hkso`zlQ(x5}tQuD1M4ml$Zi=sQ(qJTyEYm74POqrV-`Xy#+>DQa z4_uYuoAiUjL%O`)O`RgH=jrkDxw0=aqOF~0pK#{)Uthsal9a?yGsbh}8`0GGVGgdE zA|h?4>8MJx4qa8ligvVUzBUovmqpt%i)MW;*hsV1#?O1{ZVd=Sw6rf9@et>bOcjz! zNRvzjtU_*)Zcw7A72(dlCS+xT`4_UzaUE@>_fHhvGYS#!t}?u z5~Gj2q-No(fRDX}Dbr5x`HTL{WluETSj_K4nAo*y$uL%gJF8mq|a0LgpG~18Bz1 zyK|dxH###B0o?PhVg7m{`cYk&L|?q@b?&_S2qrAC70NW!8NR1VTyT$5R=AaOn%O1l z=3#buvI?(}A?Qp(*gW;XSCHXDK7T+~@iM`lN_C++tEccb>f7V=f))nw0!p84+}c-p zW3nAr$hM2Bivn`HQT>;G;R; zmj!0d`4a0xvuwVBI(eQD&qX}lm9T>p`b8t0p409~@rw82BuPHOOxeCHGxJ>+Fee+<>fqug_=Q;-_hAUn1I(YY((ZGA4m3W{xwY)c_GQ2FNefXLli zM=}ThU@@zsZ-wpP_Ht*z_0zbjlEORt?NBX)mrOskP^-39)OfEHhd_vIgy>(g6W!C9 zrAs8VMRQ@8QmuVD#pNi09%}Vg3%{1P%xjeEdHW^ zy)|UG>06GbpP_6rYqi)2yoL3Axy|!Ov!^lkKBvYG-46$?FOSf#Cu_#Vk@-zYlxK9b z{mJvE4{bI?WGZ`_pBRa)1>d7i0~Z&)S?R6T{KWTC&{Gh%#zp&7c+o^@rY)wlXUTtY`bVjKY_}1T%)P(8mA2Cr#7X)dj}AF7qe!{xm-c_XymI4dG>) zmA~6tR*SJ*==pfELJ%}U39$yKw^rV7g_=#?No^?W>8MdlKG3RV_X zTE*^M0O^|cy)?67R+fF(f>AfHbKtQHkN{BfraoWMO2Cmg{`kst>IH0otKAadslg*7 zrkM*JZjhPafXJ9#Cw+Ps@GT}+)m&6`29euhKLsZ^#FlhFucA``T!-cAI#m|c@mDn^6FjDnOmT05& zsU4yU)--39SEfvT&*-qE_plJ)6nLd2eBkUVwLE|Zyoo~f+MM&>XsN<@itU%uLH zFD$h12XCMWh(`ag!X$tn`VAPY<66Zt)`z!#$3UE2LKC5mYmpXX64(F0Gf za;^r7eW+>P>nO*ECqJ0ayvR!L$4^jAnzN)S~k%X3Bkp(p#mDmyl{LaNS zQ};EM$Vv_R*fUVj`z9jeh$mGeJp>w=h`lrtNhBT$s!eX*&{!oZwMaUI90m!5IU#}5?AzfBR%ftoPbAL4x}BA| zDr*g=@bzMtwXt0Yx8D?IYkj{rUfqsvyM7~&MXZ&h*G(AWrgDO8x2Ahu`-rIck^x5Wb zym=S{~-eL9B2`SW<)t9YYc@zYQJibPpGV^$SB zfonXTDYa(IjasR)oGEqF7`oexu*YMx^1@-1SBW1jXjML67%80+mR8MmL=5V?;Sjvp zfAi_5^*7_OSqp2GrMYQt*|T#R3fUkCUsA8sK8PJXw}(Ui_tQ`L-|?9LElX{YXLtP! zQR%tK?dlLjS*w`U^&R_=BB0SRu&1jqBHS?}8n%s77CU%{P! zVJ=9~Vr*h(+EBcdzPzX#HjrCHK=Y)8PM!+k=c;^XSo5qyT0mbQ!ZwF4aA)vkOf(yU zTp8E*%$nm*fl4-Odj$Bfv?|bZDa?s}5$zs*5-6e^HwO!t9;P-h*ve9pSyITv?dpL6 zld${hq14i$1aLJtB83h4`>_xqYQ_z>RpSTgj4JdXEkp_Q46;0ML5QG|-_0IKqg&HdH%(nsa?=y z_%|arKsP%vO+eKy z=(`cRS!!z{G=gj%ozabXbuuF}rPUf{c=~*e0K>EXI$?Nv2j4lNeegtVA3YyW_MI!y z#uV12h;shtPsfc;=NIt9XP52d!m8Rr-aP%kNET_9-2rzwaN6p z5#RCyZO#26i76x!4V!$Q(81uij@vBDB7#ygyEGBA0vHd6b5Kl8bjI=P4!ox@7dIXw zsq!iwb;ij!FK|Y5*{mt2tVI-sF!?-MP(2exI<|hf*g(EWT&3%?k?Zt*n!} zYRguB=I;y;@o8mFyR#yBJEjZDETv?d zgLqUV@$i&Y1CNmAj0s4vwi*JdXOIZ1uhScJ%%$7P3>p=}GiK}@P7Kl|mf(vHR?-2P zP(-Mo+7CYc5rXQ}SD!0k+cahpD6=e^Nl-E82=E-fz4`0JwVA+H%w5w~qk^z{J~C1=!JaZvf=3sx4hIIO+F1-fO-r}g*_8A8w)Hm8*2#zuJvaWcS9 zbI4k83^dkPV)m^r&S7O)fYj~5V-DHdwO{}lDha3+DO#@zXMf4Lzr>N}5dO;DNFudu z9EYz8d4NedbnG;6=L&GMFO1A3dmt88OcT;RNn^5R+Q1%VCucR(``c?lpK4KYJBVuYs>-Gxfx3>s_g`tNL(%cxVLBg07`q|d*nqKL*cGXlkXL*trMy@NggbVoH(01ek0%t5jdZd>@mh zl@lbegIB&;Z_QVsgz^nG4maz=#Kl)rQb>xh*2Z*k%$gbA8sjHw)TL@G(wg*hp7F|% z`=oq~@O&zJDW{`~vV^iKqJgk_f{TM;-QAMXU=Um*SYcnFtr+#mi>e4Eos>I8$`89% zZF#tE8{4o*u^K&ROqp#01keOU7`A153|ht@I5|f@qQ%PU24Ru=!&|}~4aF}{@_4oa zy>>Og@4!!h@y=a;W$S(g*pW`*h}_*Bezd#W z#Xk!R@n~`wzu8Nw_)Rf*v%A|}#QQh1IS`3sN?C7nOq9kjlR;CD6 z>uMI$x!zz!z(Xbp#Nab8YhT^Qrr`?PnIzC4$QdQKO<0B!3<=_Yp0l@k4&Hi}A5^BE zW0)4m$-HQyeYsseG7;xpW!JLreHJ}c>XW9r5LafD#ARiW#xUJa2Syu;M`?AsXbQ$p z>5xys02XaH5@(*GjYO_icG3E>cIM5;Jaa{OKm82l=R@z_H>Z>dX=?5kUJ4Di8n7L@ zXKNvnb)fxGPkiG*n|h&)k#Fq*2Y+LLY#NlLLUPWvduAc}JRS|{o`!F12jDNXIwIzV zrts>f1Wu;+dWGU&*tcO>10}?icY?UOI?MbhKYy;;0L$>{w)SkfYgii*4{D;=&g%iU39D`P?)Ex2xP9GW)#k5FIVQl zyjlv+LJMNTXnbx!MLJ6i#%iDOT3gK`M^#@#W28Gejg2*Jl0Qw_^GBxldVk-K9#tRl zbX28qA=AIh()*0q@tSwy4ZMeDfT7hzSrdXN#q%S@<^s4z0G`nd&F*=v+&Hh5VsLI7 zw`y$&yHT!l{&dV6q$m=IGbW5LF52-DTF#gbCP63GvCsmY)g|t(uV?<^Nn?+>slZOF z?O5^;H#>4|?3|Y&o>%gmO@_R7U_B{@iG=jkFjy-i#NCi9m5@{~jZF3g38N@%ThB5h zaXA6dxhviA(Tv8Ftklg}HEUfm5`Qh<;|sc-W-DK00-V02Ax_Q^Wp^lQ@bq$=d;Z{= z4C%~7c;pPm^K@{ORPO=F853p|Z2tyw;}|mcNi4BGnI66!UR+45@-%5dEC|8W(`<0Z zND+?g9f&NK)hPeil|cnOa$uxvm5dE| zM~ay~q+~KUV*aPYo!xqX$YfvNh*O*g*DqI^8}+v*HT2dsUq;U6aQOb1-K6LtZ*k~m z;#|y%c?vjStf-h0u*BlT*Y?zA$0JLX!y*#rQ*h@l>_&^Gy*ZTo^H4|b+U|{=uZ4Kf z`R(+nrMVMIsHgwQc*u#Iyg#P7{`+8BHJ`2F(tD7x%+r|&*&5=a`Zj|Y&gMntWy|i- z=FN!^@(fbR9XXxwusr9XBK<7heKyBbq`e2mLK&vZwUIgcTT*|F=VEQKF2!n{!fOhh zfHlo@WV84|!PJkvk_lAmVyU^Ut%xvBe6goQP|Ak_16{XakG?4~kLnI(rztJaPBV-& zaeG8LJ5lFY3@H*8vnbKFFw6iJw-IBb0d2${=L!x-nfQRDrQZL0Q6QKy>Tulc!(1>6 zpuZ{_5VehrN)-wJ(o~0WrqBq) zr@?$aIy~gdTDZtSAY_A7GIPgq0qPYtf96CYKLTw3jx`I034W(I128wFi?r+(HfQyx zg)Iwtc2$>ET;RmSn3floRh|tJ7zxAzR&zBtn)%og6>f<@iYe@@hRDQkPU4i}DsTt~ z5%_%6m26)2c7TAjhg-cQ8~V3;kwV)La$yBjtvtNB2FXvuW>%5UB`?wgTz=BqFy(ab z%VbdX+bbJp%-Mze?bQu4O0%PWdu_v%=_tvne*3zi9T=Ojw9|(;ZNo=CHVmJFkpm!Y zWK1rK;DE?1EUKi-N)5)VZWj^2{x>}dBYDqN2rl#-3D zckZ_RCKt(GI;Z4rL^dVAJXrt{(Gk>9I(BZvozwANKDu}MB1;GPkn@NsY>F7U#=^N3 zsTswMIt7E5+-&*qbydXtf!U$FHw&UlNAX@fn3hpL+I`g9z4K^y^VaUBoc}hk>%_&l zLq|wZ?MJ)!dKv=+uTy?P$y(*}=KbB-dF9r2Z{MkvOS9&3w_UkWJ{=0UcW&?A zUU6TFyhP+up_sVyVE6WY`#Fh=>d^Im`~L3j2lnHBS|sk8xti? zOtXVdk{u_beBuMSw!7)jf|#*l%ohm@9bDhN=KvYS#X-`^i#R(-I)k(rjQpk^?QS}f z;i5${oGo{K_uh4jGw>h}A=h{BIJyEur3+9xX?E0^Bs4mv-#gcLZ$Gk)AcD+mWNr73 zo0M_B2jZF>=9v%d+U`Avpvkm6oTPs9YyPB{gS0I3f|d^^=l<^PRoiztDDu%L?A_5z zIZj8(X=f4_6|S1;?8gHSip?9l_Z*Q+S^VP{MUS_4?`^ssxy_R_Lqr%g$yloL>|p9O zf9LkD56UDijz)<$3UB7iNsJA3hHl;=JoR(ChO(NvZ~Hy`ZYakDJ}P<0aY3LK_Y zf;5K5ryWjz=r6JRUet{W)6Ug7qG-P>+*nkuaHI%{4Jw;%eft-eqi zn!mFeX)L?9KU+{tbu>Hw%+{wVI1M`=5=Jh;9ceGv(uvwck_dY;Z!;m=Q;9(0&7!=6 z4z1D&P%*AMcNeswHqG234v@*@dLYAv_VCf}z1vvOnD4sKe3TcyJa%HUL1`!vIV62F z2+BbI2H#zn55ESU1Cj2x411e1Rw){4`lBY;K+bK80C_Z`m6?`FG&xw0Ew-EDvOSFSBA ze($5D^^K4FcfbFuFL!re{pdHpdh_;cJx4E`V!BtFuT1pa-XO?jdZO>H-sbmr_#bY4^&bCqpZ;0nmuviTO2To8xodpc6Dfz%w`QY)+v!u*Nd=5+RB1O>G zI_^Rk9VaG=Cuz4zM#(`DkC8t%%;qs;($hDx*L9q3t9&#ajZW|9S(Xg2OSSz8lMBJ& z#bQ6fh_G{-4g59K4r@3gMrfucyM}jki_9U~-bE_O7#l`pTbUh;e!3qI4wLX&+AaI> z8BAJ_tBD&`+kNDkjlq=w#W!ZEBQC2Z%Y#vxWEJTOe7d6f0EdX#IW@~FuBLogBq~p{ z!C{eS>5mh=huAtVK&CSg3!-@W*06_{1i3X@znG8{*XcUJEgVz+I&b;7z7>_Sk^-;X z9B^%wHp4)(;J_pKDA094Y&xa3-p6Kb+(c{KU!a*p?H(PE$*PIr8G;SgUAVDCH*yTq zAss{n%Dbwd)sSp^520?DNKB59KtJOvkgX4B)%k$Vsd*~bvNdpUN^P}!*R>)SUa7Q(|W8^wUz$GMMMAFo9+q8l*t z%shL3pY*`{pFZOoQ3O^pc)h-T)1f?E@h*XD1#Gi=@PYBSDZ(g0YH!#8IHIhKnvVpGkZ3=FYtc25Ar_N836SUJ(2cYc@<)|)g*+#uxL=F^pW%(yO9dC59s zw&$gi6xFb1$?3f!8BiK~QCjEl9S?3jYHAj2|L#h5Kc6k4MREH#Oq}z)H#)9{pvklE zH}Eh|m)JI>6t{7xbTjV7EZHsVwOS8PeLwo%uSo; zgJ{Ssj)MRk7b}+sn-2f!oer1tmpV_h9?qIzW}frL#0m^rxN6oQN9RNPjUX7xK+QPBNa0eClN0pK z7ygRj#klY{owKbh#Wf&PY`bU)i#EV;Z-tvR?pf}Ox&Q35N5M=o9`5Jaz67ZUU$=0h zZ(4v#_;qRxY~*vy8?cY@FLx;xYT{WQGs zNKKqUy_rQ4d_}VE;6FFm8eBv8X`P>I(V4wkP4(S@BEIE-78abE5aH!;% z3B$o5^&rwJKgp7!FV$o-(vPlQDawJ_J2juj!@R`t6kOdv4t=-iX?kU^rkD{nPK%Kk5>8eYi(uw$i&&6<<7816R4b6L)M@@dSpqC57<6VPK2}r z7Il~mr#QArjvfb_y!Jydk@4*~$*QlBes_=1=y%VyAvo7|_vrQthXn_Twp&Mqb|=_S zpcEm(E`$Ci`6wNnMx=)O?RM_!CtoSYGlwjmqM;Nvk#v7QDaaZU0v8y} zl8H+?SDBPm;@x_KT-bxfed|1;fMC^uR=SiBS<>8D6jw-<- zY(*|_kcnB?c5o{qmXp`hTS~-%$2TJ4nX?4M;zx?u1$n$^exCgg504S55i;YbRr%$x%K=St0jHt2G>lQ=|0d|YG(+-rww*Igw!KjMLfP> zk}NTglauBVxn<(X)W^AiJ0n!*GOZBub0HK(o$PxsNAYqW6r=qBVoP7V+N{Y-ycy%? z8yFP3rcL6HrOM6hD9&3Up6b@HSo}m%SS>xXa$U~|#p(VO*NMB*{z+#UWh9 zq|PRzGU?l(ud_gunSF=O)j=$RqNehlLFFC~B_KHw9{pzXFCLNZ*6;CT2SnOrh(q`S zu1TF?CNrt3mWZFgiz~iBx9yTeX7gC7p9L0ufAi@IJlQc(uiJykk(4N6K{GxMJdPv+ z-cDSIt(^@7?n~yGfsh@wW;qEULmDJW=`ZqNoK$ccoaR%Q8_C^Bs(N=0mzpO8Xhikd zd9V#6H5f_HpBv8wpwnZQl+eI7%diLAfqCDh=y;UGaN91~1Wy(f54HnCsMBgC1P#|> zs9OR@1GyndF@r3Yly_rZsRoypUW`IYxtD0W1MFytid5vj+{ZosC2P$Ib1KdTa%ZmqDD@1QB|u(ss}MY2D!u_I}s z_R%&R5(94(a6!6ra9fZ<-Jk8{!kK9=<8kR%GZp}v_rPGmHnTbVu#iO0sYhF~;7mU~ z4Yj_;^@|I33=-rp!RHFnj>oGW#%d% zBMB?eFjXdR99-AbjefHBhG0Gy8tV4O3vw6_Pe@AUt74iNiyZ`fqz4YbyVdH{S2f&zm2*^;(?N(LE?hZFe$WewXBJxVCtD^P6qyQ12q1?H6X>+zfYTf zjV7D@zMUR0eTnoE3C-0$%MXwyQ$Mk9LM>u2CP;xMF(##FIDXJFaeZbfp$KfIYCJZ( zXT2p~{8DRYQ2{{@4lc&oDhIuLHeHzxw}X3^)=CPy@nqALNE`I0S%U@LY}wgp#He?| zOJg3q1t26smwi`x-)mJCPaVZ7O-FbF)b+s|6`^S*CIgg52pj}(DRLC=-H3@YjjxWh6k|BMwQo=-M ziGpa!45mea;LWhBaeQjBgwom!IdC$~GYA%6U5_ODa*-UT$q6X}V*X@Bp~G!<^5di! z#ivW~H)N(rIuPMO5w||vtXP@}&Pxk^lpJ(vlQ+ciE0HdZ+zL8WBgUKh0cv-%-Ao!> z_iPV;JZz6U3V5FMeHO=ik1^Hek{)}oyB5P~Y$gj6eUH<7it$LlarFDkr{Jo;v%6Vel>oqI~Z#Wx;Qnl)o+I2HtYx*R2rE_ z(s*^ib9!`4$h*(8-lr{eX0NuC*Do?FS*feK*TeJjG2!Gsk?DoOm{df^}!Y8eN*^Aa^yOu_j!A~K~UNBo1o#Cd>`oSPZ>-t`^kO}uF z%V1@pd)Z+&Tom4JWSbCows&Qo0w}_l7EHKY-1>XJu4Y92k|~eU$;1mf(v)0RDJv`O z{L^Lp*j1Db)9v3N8G`gA2UyklXh#i<8CkZ0%!)d#dR6MeW z*)fQgTqJJu@&f*K-bZZj5O&hGJ!uxQAs03#!PcVM&~i!6qQiIvSoYUHw0I)_&0lqL!TCUiC; z<(|x&g5xzCW>+{v_}VtoK%^AVVIJj02*LXkC$Yq!{}~#cC7F;yo0^y*)LF7LspQw} zuMFo+&4-s~nXF>e3D;-14UqUA4q_Fj<}2pzp29~(G|qx4N4HoDkuVNygXYM30~pBB2OCcSmjJ8Kq{ z!Ury*dkFcgf2x?dYLNXc9+{Jbv?#)xT-3*Cg$0hWFSbZpAEZqDKwlACR;zTohn{P5 zLhZ6!(aBGxgbQgVA71|1)*oH@1!>o66u@vo zT7T54TCLVmtM$QO`@_vIN3GTefAhQdzWi3}k3RUFORd(p)%w}*{8p>=!9P0sR_mbE zy7E)UI197iYF+sgUNcFnW&Zqku3opcENgs!fOGHOn%Lp$g99sk$x_j}_@)!pR zzu1e9z9`E0S66!7HTrL**PToeWN%M3N9PpXxP0~U)gsTU?l_wcx_j~9XgW!X%il0y zw^uFzl`Q@vQ3sK~rWkIsin$IY`^HG(#GojsJP7pM^XwEy70+^@e z-by$pz>FO%#aZH9AjbRP$)`BOhSo1%R?=p2^=Kj@idkP?F7mQV#MUjQ%hhAxMc}5xkS70awaLXy~%$4$#*dmoL97?Y3>V9)&L07GXPg zB{pbvw*G2MSL2`5)hHLS%1ZneR^tEgC;xVemH74V|E&}&@vrzR@ec;A+DiNxX(DO0 zu6$P!tEnG8)S>cR(FMXA;1sPdzpb$RS%rme_f78SSrw;QQuy5AFWh06zPtCg38ud) zFnzn3JN$gDDR78?@-3N*L7r7xk4$u&RELx-(trQdL@Pb4efn=1Nx-aDi;AE8&@X_G zSC>iBA_e3!n)KF=^dy;1`uz7(a}Za_NqowGfAYhygL_3fJV*c^|LQz=LYW#pAf-qE zszB<&vPTWopwZShKD>;iECLx73ZS%I*s(FRL47C~G;HZ=k{1;<#eau2>Md;%48Rag zHh%4=2c+i~@wkH&sQp_vZ*Q9-IY`T@IK|-;X6RU+`f{Z^%m+tF(M@w)Pd!YFei>Ks z3P_D*Qfp#m(4SFC8^py?l1!3fFRy$u``@4ZM@0Jn{vR-z{o6ujmzv4!=lpg+V}JB* zZ$x977~Pbg@$F-Uxs*D?#AU|fxKYv)Z656 z(oM7U%+9n7^_5fuytuupuZh~-l$|@kv%2Cg1QQn>N<5h~wu$!yay-Gw>PRz; z`ifF1fM?G z7V+1HthfG8&2aW{K3v}1?rc3}&fqV(|MvgVbU%&7_6KDTjS#sa*iqwn}o>=4V5wJL>XjK8k{J=rb-x{ z0pp`H9MstTd~#Z(2Zxne7%ZCAUhhU{wYPec&vBcNNvrr()h+IRc=;;-Hyi!6q|V^} zt?tSlz-a@-yda$=KA%F3h>+mnXriev^F1>8!4--|U>Bl`d}Y-BX591TUc><7@55@Q zm)h=a=d`Snu{}cSg&)e+$AcM;j3tod0-lE7Ttr4K6yLvW3 z%6{cZ@H4mkkK&`muz;ftziW2JbmT+(&F#hYXf(qhhlOXPEQRm7* zD{WdraBf-2jWE*>NptUV7!~T$6Q;X%Qn5xo@7f{^m1!0as`NPNXL+5V$ev57~dTDYvQ332kkcW)BT3^va~yS?+?4CHBBnddL6vLgKI z`Txt_o4`kwm4)Ip`%I7>9y^|{6f>2XRHdr2b*H-;(%qTv%yiP3Bs~kAO!rOIO>!qy z_ZIiwN;6I|#Bj%dKvar`>6=?<jh3C#1<0Kf3C~?G~jSrL|5JA~HLktVi=<8xGEQ z?fev$`|A35w(UbX)70l2*Pc9<4%@8b*MsIUx8bDEd_GuneFPr(fSg%c%^YiVdDPkd zF{(K&_r@Tcbyp_rB0b>Cm^kl6u?^)#E!rrH7TpTQQDnnAHGaDV>eS@4{rB22&z?*- z#B~;eB>IC3t*kDgp2%Wg82A08@TPxtp2?l;Vm7A!a7* z;NTnpr;>kL3@$~rs%;|m5<~o9T+CEY5^5O$(AfdF`?d-p43?tKo>jbOTLnz%NLjg* zkZ2K$BS8$x8Rz9l^+D!|$#>yZ+S;5jhGp`tlrh9~%KP_-(n0(`zGwl(bhmK~TIGRs zadOI4u!b>TCr--iC`l!4`-|-HKpb=G^-Y1bvy6AdcspJVLNDGF1#!Hx`mH}YBfXdDJ@z3TOlty@pKB}E2 z@4{h>&0Gt&wQRWcvy{yhRi8C{I_piLwct zfg~|(!U@xuoEGKbF7voS44d>Ur%yjSQtM|r@1&)bi;)lGA!ra@h+yOA4uP6Mj3LJhL&T~XjeqH)`;63Arx za5JLK$z!tUD(%r-RHav@DhKL4znaehFonZeIuqN;p4FiF9DOYu&Ju;6_3COB6dqas zNF^m66}O-2wkSBe?FIT3hZ^~Y`K?AM9G2iB8g(u<(koo9AV;Z+ zGFlpPJK2l}uF!;X1WW~o#c;C^FQZlnK3q*_S{0iU@a$MwH<&)|LBcsoe{))3C@OTT zV~00Fd1do8pzY4rz^en!1M|(;J)hFy{3_T)ll6`i0lkD?bT$rJUd>oSvtM4=voZEW zD2K~_Slr7 zm|?3GLWIC6;-H#FTgVOtQJ7b+<|Ng2bRus6g#**6)n7&O1~^J`k%Wl*5FoX59-(d% z#d~9x=T}{Sq7k{s^r-3p6XUWMM)6ssFkp1(4$NmyxQzy#f6Ax6SQOcPkkpNBRHlvo zWKa1}gao*|oylWuAaXQ_tjNRGC$HhYKAvE|aO4%P=y;NjrhVByx(ij0Mp`4#9VgJp zM=1O0!=fKvVvQ6yqg7l0fGCMFv3nTCKDZ=zfuv$Qdbm$q&*y4$w$Ts!o60EDdfodR zOVb1*BS#A0vTq^Rc~lWTmI?@M7-flh>a$F8!}6pd(N0o|(LA|5m9j*iEjQwHuz_1{ z2kS~JnibiW6Gh%S=FN2wOO`9H;)Nugn>kr1Vef05B1hpTr4JZnk=RSARLe{d1*|;o zB}t>hts;)_t}MT=Kl~IEW#l~=^7g9&2xfUJMw*`quKt#K zjr>SZ>4FTtS;OiPwrQ$uCqJ5sIGI{=TalM_*|xesLw|75?Swe}5I!CL82vGL0DLr5 zbUMZYYPRj;eKE{ywx&$BcX-V^5a^zFYwcK82dn0@c&H9)Ko|9jV~(M9&WWx*P`O+3 zVq?gFg2XDyX`=p^EG_?dyT>;;qP#vrx_By$lFNsbnZ+^pP}RINCrQNKl}w zER>tkxVMmmY?skxrYr|nUA0`Y$_W)6>=#k&H5!oo zj*IH~0@C?b!l3QfizK}aYa2cZT9F9QK3jACv=k@-yKh@&;oHv4xZJpNUVM;Y!;4qp zkTGs27Qfp}fK~OtkKtf|eY3_EH)*6*kWP&BP$^XxNv#qOnPO$DR$Wv!yfB&;lKI0} z+RmrnIyNy}9FKfHsXeK4#d1Yi(4_RR#V*1-nF+X4ST$V3hIEoBAwi#=^*0@`AFc@d zqC-)`OM5Vd60-;s0>z@RWPq1GTXJuc6;KuTE;@zWP#wp0lF9}wgc-cplkGstR_7XB z6!YQ#a60d9^z4KormbJnHZWMa`r1ib%qZD~Fz=p^MLs+0)?9BL3Oh(^ipk24*>c7_ zx>}4{tF;GhjWsor+MwcZtEJ0^S83z!xW7;j*Pf>?F@IylF>v0Uww!C~;94(pU7 zgs@$xI;Uy6^24$i6pQ_GwK?fN{qkBxPneUbPM9=KZCo+$A%Oe1I7-#aclu`6@PR6v- ziJqj>iL4GFv8dZKNHO}^L~T?^Ad-iulF6C#$L+q;l8wmvqD&$S5a3vH^`YUvPij%W zl~~ECGB-Bb(W->)mbTl53;_A?xEsqyKuwrWBA=NPgfm}I5CXD5|`+SyKitf(6-4H+uJDq7|aeIH%p^dPjBw!u_Ht z7ot6ssR1w#^FD{2WdwA+L$~HM#CW4&dreslLfSj&`pT~*7aJeQI3z90juTq4XFJIc ztPnI|FiNF{tqSAxw<*(<3IWK#?jR%}p_5t~-{GWkqUn-q+z3DdZnG8R!BvoVB#3mh zr=RH=qCJUeYj3cey3BHsZNMSMaYA8xk2`l5eHh^vp7DTJvo_s$HK{?NuTXg zAj}v>44H5czyRHG0J1!Jg4u*+h=al<4OR$5{kpRR2Q7Ya{R@Y4la@0LwFLc=<~L?^ zb!YK&9og=TxQa5;1AMf|r%yUd;dm61RlS1-*~CoGiNGnz&1d`Kr4puT6H^xC%j9TE z?iT5OmK%Y$sY!yJ`C_5l4Av7_(wKSHWur2BETs(xlKV)bO$q_@*!rff#D77hUPu&? z^-y{tsRHj(z-(i$F3(3NrRh%Pl}_f=5-W{iBkU5~RH>8J>i;k{58Q<&+9BuJJ$d2$ zM_a$!^BP5`Tc=x@HE-`KIA|z0a%Ub6r~V)> zpjW%fNLBO;oN=7$AVPL!Xftfp?1)=V-OO zAl&mUw-!eNBGQ-*E1Ynp4Fz?W`PtRfl)+FqoR!MG5u#>A!Za~NjzpSdZ!#Wj@jUtC z#Q8X6CXsR?V9T8TQ|oRRdR$91*;AM4xJ_g>V!@$c0`8}9_O>I) z^b9ri8v%kn%$2L9siqPfBqMv;bi}FKH0bG$W}ye;E)4}mStIfhUNx#Oyuk#!Npjz? zoi8Z}Z6P8a_AW>hTjE8_6SB7bAO?+1(yW>9WW1Wc=RT^^EE!+e_TeUbGqqJdqS(*% zXU|$ekEvrKpFM;7$r726%pre(ov~=ff;tG4;|4&X%(f^Dd-m-0Mm_>Va?7-qU&R7fW>0fVGo1Hu~w z{3X>!`U|?}hN!sW>rHW33?3NSZ!$K`)WFU^A5+|0$t@KR=)k9*T1n&w_Yajs0pXB% zqrVUiLNpXi>|-{klb&dNMH4EyPKH9ZgD;6W4Hii*vB=aX(SV3gp1da7g~+2sLYCNW z_aG@Q5zb86Uqqz9sPGKp)G_#O=@gx4R4Z)}<)USOW$iRa*bm8Rb2nBeeQX)%O$}MZ zy!kqn_`M(@s(Dcqgm|I2kr8F0fJ#C0vWN{Q5^)fSM&RSATYWWCEJ1^!&anuVmj$u` zh21<8eNzDQveIfV+{x12$-5J$3yb3|e7eeWTg~SbQ3CnFNeo>2GXm~GCL2Rjz7rMjoKoj8 zHr&q-oAWl^#iLyje1Ho)+E(1a+*R6R3o{o542D2l2qXs^9o>`@_Pc^2y@g&vZz+|; z)aiH5`JILnHVd^zP+Lm~fF$4ZB8%~{zdG{#noG=07m2~{u+~T&vWyq4{f&xE+PksW zq<6Dtu`C1>zF%@huoMLiH-?KF(ik95Thj)j1%3KhiC!vvjMF}GkKnjOHOHjPtHIY= za~xtfbSsTWxt?4`W!tmaT|DGc6E`ik&dyY7Z+b6Sab?|URLjk@<#0`?SmV8x)}u7r;2 z{XU3yV-*r}2X}L{Ik9NCP85rHBM?y>0t=8XH>kjl8OTPqA5JbsHp#h~?^0QV?nz6f zgDPhzS3W2=WHnbg2$%J)Rda*ts8Mc+vV1f%lLJodw7mQ-kkZxrXw6QqGdYe-OCjlI zG@mJ_C6a=zY^Z0pLo=UUu=GmfwFTw)#0+-pHJxSitR3Z)yi*l86EdeJcB5F^Rw|&Kn`0Y20=twPI1ZvX6yS*jAqs{VUIT|+!5xqC5j?ToRJqE1 z2el_^@F3K4XaA=cue#x>P!n;&x4@(6N)h-%K3C>xnr4dhROHIaIOG%y06<$g0P$wa z4VERuS-^yJQvd+a|6x&z`u5sCNh=d&#<3#>RVtj11lGwVrDaaV&exfFC9E@Q8xp@c z{3Uyc%X1&5B~KKQTgXwvDkZ8y6Hu$TPuK`Z&w8WGeg|E4bjzMf_Yk zt7Usg*fXC?XEi_9^hmv;rOty^MHU@XmNOQoMF*SmIj-Ag?Gu&6h!54dLdcRerFd2{ zxUAsI-`OX`cUxd_@JF0Ow9=J}Jsf9Egc2$HVp)KMC@1b)+~nSR4iDwku58%kb96M0t3iG&E2tRfeJA zZSGR!#qJo|k5Jin#fw+lOT}8y99VMQO?MsMGW7!C7GTLlehTU}M(xmrGrnTgS%<@1 zP(-*Lx^;o;Dk7@4K`Eg@(1=9gFg@ziJf7Ht%%$mcC`cWOO0+@Abh;8D@c=gCZtqIK zk_-QlOTTrnxc?_|_bAdYROCuw^zci$E#%q%t&&ViF}d}PXuJGrqVC12o~@aReau~- z^p}H4zt(8i-N_kKb;Smgd^3y4j@FIhwD@c;cET9S6pCzVaBQeNRvAsc0*3bSXPM}naUeFKA)iUf!Za54m;aO+;I^I#*RVsF$Buem<*-gwo8>=PGQt!TGI zEeJ!m7B@Db+Y`YCyxNZ3G5GVS(`ZoXVR=CaX(aI~6y<=bS72ASoX}~yu^UF%s9Xd! zxIpM>H{6hl*yh_&+i5g5MFiKGIqGT{NJH!sXRcp_0V_q3tB8V77|*-Km7>U&>sgVn zyUR|y5kp!p{LlxjsM%mq*S!oCMQ%tGRMFvl z(1KhZr=i-8f!fAJ{0#h#i9;}p!*D>FAsQ}<+^{H!Q@)^ky5uQyhD&=&@O~V+wTpUz zo4M@CroNm*NI+wR1_m-liXt~63SuT`c(qMA;BwsR58b68i2LCXPya^f#cqEK-{}WM ztRLz&Yy@GwKk~ih<^IU^BM(aZ_J=_;@NJNQ0AL-BVMmK1H>%d)82A)Y6;qLYlgNa`;2e%v!&1ms!=vh}bC$MPnDrxpt8+J-Iw#Ji*j z)v2)^QKXy=P$hn+MS(R{7vKS+`-(uL*Iy3=x-2Ah81%1Bakau=-KztLlIqZB9*GS& zq`u@L$k-cx@Tw%NB1hZyd2O$@1{<{9q7B#de6Q)4L-mV|RXCha$KGi?*o?~!_q?~{ zHJ~gZUbc(swRbmOK8_&`FcUp0M=gvgB49j9e1ZS)px4 znf#z%#PkR9RVe=i>8a#=mD-sUC_0}?nXn+dWyk70t6yN;>ItCG?p#YG-Mcb?&EEBk z9o_3kXC(8{@dDtQi}sjO#OV=-Wa@%BqI|7mJo%std({|D%vF|@*W(VSjVoX47*{^n z35&I7%-mHEJd!prztu4=|9;_I*#-)i4Oy>-Ycvfm{bC1b`ccZ#1E;2?$4t$X6!Tuz zY`kS-3%ghYxgUP?gIE+KKlWlu>@$f(N1YT0Ppg-^>eAJ2seu^V4W+3Ed@FRZfuWrM zmy}mcV9t-;&f8sVK-^pI5DhPAWFYWeUtjg8gFSj%;}HyFJXN7rQ7j4Qsw5<;`3tL1 zHP+Cm1gtkTvME*NBz0M|;)a5YH9=#U;I`6u)oog<)Hz+eus~ytXWs3uO!##60Zgs4 z5A&i-XeWd0#8f(aNkAgwYYd8Hnr1rE4q%bJ=!LU!yHjZ7>M}IUdv*zo>_m~s-e4iR zVn~P^?Gg~1GWQ0BCTE63F`r!mqdPM8#f89xp^Qa{3FsZQCzzn4F1wO~ewIb9H&Ic@ z3g~DQ8)1T|`B~IhcVen~W0B&Pu9+rt6l5lY5E(#Dzn{ ziyljX4&sFz(WZ8_qMYeQ*lTAqW)2Njlk}F$q86r7%5zegI_4aE#YsF7t88er#ZS$V zhZeGeseGu(!mdht_u6YU zLaKs`4WIIBiC_%iKdrgec@$Qe1t2mpHHfcM9q>=B6~#a*6wrMfjLDD;uOmcdiVOZ7 zLHoMU6^>X5g1T4=Hus6Xz6F2sx~6D2ZJ$n*fep#EF+5)ki^#17e%&k{jTh(&xHi|8 zhK4i1*cx!_F1#tDkhn@fA1a);I|@NtG;M-(cp8$3IIYKTY>EYAAr|yz>vGuK<|&HE zq_ZAFk-hq0#E!FYxUgFRYCRR`rq)8s31bgjG++T5@ldeR)6@M7c9T~H0I_@&bqOjF zb=faMcex#bNev9R21Ty0(UUVIbROe@};482r(Q@M2Dz}I8Yfwu& z1zy;%K}5r3$xm`y5U!Cs<6IQO^=#+RUvmyJaSO2ZG}Q{y+C znk`OEPM?|;O@xB{Nf^Ych{N<{g#0GpY8fdG4He5GTJu^hw@yGnW(x$9mILV05x%?O zh9d6=egS9JC$DS+s$a%pfr|NieiS>6#wowCIRoQM03|K6F;BLGyhu7*87Y>Aii0J? z3tW>I%)u?j>Vkrejg6uaJi`m-3UzmV09y8PVhbnbMxqtE%iehf+uYQQ$R1hK?0Jkl z!weIIk1^CMlk~GWXu*!HC=LKaqTY6qxVg$;QOrQjlq+hhZf#98f)!f6W)MPI_t^0o z5jvnXJI%sL2JD*QUC2(s?aZ;arc1>*?Ko&Uu~(Cu>{_O$g{)XF=4||-Cg;|Z(F(t`Ia;y>39*TvUdh6SD*8|+-aqblLPf{GBS2HY;=(wDOQT*Ed6&VyC_7j;KGT>>vz+^V6kj> zfSg0^;dB5JPRMmPEUT&ILr z#nEU`nd&Ya2Cl_Z&~yr0NeI*{>n@~eXf&|DfVH4 z${^sx@u{4qoI?ffQIJR1KsTg!B^=lx!CP6B^I|0^pQEWkEnl=-uqh>$vm$gfXtp32 z2P)$hs~0Sbr669F%O}bGkv(Kgf+7R(%fF?RLtj2!&kYx; z*4Ems2n9J!5?n{2vk4G_Hwz1Y%>+^8!F{YM;}!#h6c)t$li}5V3~fLeME86Q!KMIr zCj|gyFiHpE`cSLGFrNxdQSAoL=R6YqvWmNm(LAs*2R;B6g9XskNTrEHj%Em^<)XDw z?bqZMVe-+93?oF@dqiR|0;p?p=NdnQvL#{IDySe_-)u)Q1oIpL`XrW`;+=^q zoa$PdX&s#}7*Oq|`{IH>iFRtDhd2<|alnynr0X;!z`Km`MAm*2UPOoq5xFE4kp&9E zSP>fG1`1}+ZAKz%bY7%K)Tgyc;BCmr@>c8yVN^?b8}?x&?%|$!q=Uwv)D@V=09S9X zm~q49AZ!Xc*TEnn%tS3U9zkC23Esd%HrR=Ac zuSSshRuBBR;QF<2vlUl2U3p!fCO5*jb@Q#(ySISu!a-%>Ye-ujkkbn)3|`1h$$%&z)Pf-h$REutE_j^6hty)ZR)?5GYs-usEnBac!-G>= z*&G#KEPU6k!f5Qq_tpCE4V%v4xReoLy~aVV>9qXj#&Cs2HHTw3EE(s zKpcZL)^?B$&U*#R}(W(zezH;i1W`EM+l+}}1yfrEzcF6ihdS`9V| z8uo3vg=yJ+cPCc`F!BLe4OtHb$Gdj4M9HbIdUbbOkR>Nep&;f=3O-1bfMi!Gtu*(N z1l%!6F!F$5IHKXjaRV)EPQ79t0vZrS+#m@jc6~me#a_V*U-PT^)fv3!fiBIakRkQN zduh>feWmXVyv^MNKt%0Y&5a_ej|nUZQ)oaBMGcKw*fXEoRQon%r8z&I`KC1>9Kwdc zFQwts`)P=J0BkP+{m+XGm7s$~Y$uYWJCVGJTOf;;cL(@lR%9&LUhqZ3NlMucW%ii6 zN0~jE^1OBxeeHVW#DrKrCv&Ghr!Y-&>QBC}_c$zWJu`J?ecK0NSJ zK^{4n0W)^SAsH5NAoBPIBt(X86tTqs`Gj1HLz@s#WQhKPj6bA!Cyt%kD#Yv~ZActM zX$UvQaqa?ef42@@LvzEV5a>_(rZ`|D1ZzbUYtY-s` z(gwNqbgPcON8Rut^*x$YORQ!*jzRTiPd%OxB{GNuaV}@$1pRbiX3UM>I5B_6n1EZy zFp}!{o8V(z_kwoR*pw%yRYyeiNU3DbK|}D&1?_kybj65uH#XN+)Hj?cE=1_=0+kf5)sb!Zlur48co%Bs zwCYmKLKIxVkytK~C!CIn+}8N(g9HCa-Rjoa@R)wEeni`|2DQNL4v6wa44*5>dRf$RHi5M z?L(-$;+0lK&ga5t02saNZU}h@glc(QM`Mrr-$Lm0;?m)|;oND7U_@})ukf`S7CDQ7 z`hBnzq{6AI00Up0Y2ShkvEXm3B)*m;en4# zmSIQo=|EalWKk&w0dHYL69+RNMuw$9!wHY>5=YJoM()a8_2z?}QG`^?xQ$^agCx#b zI}+HR8K1idTNHIJI^rhQozR2OEzAtU1Z(Q(1m`zIvD*SgXdX_LfNsS5#PhwF?zgUs zRW}5qB7|xTXf-?Xk^tC1U~y0gP)CK9+BE*HPB`y`D{hQYB3Mo%NMyW3!NWAhZHl z?-h66X+#h2yc45`sAx_SKBaq!CZ^nxE~y=cp;MKLwFs%wv<;=l%ZgbGRsOjTSx|^xLe`!bA3Rf?k;=2TNe!n zl!zpqn0(v~G5iFK$NU{`MH(kVAcc!U&Ihnhy|qcLxRu<`piJ6WWsa^W#^BThKqse; z@Bxfs5(zOWJn`X0!Vw!mxaQzBg}9kvI~We9V!47_I%w40P`ZSOe*rHgzR(Q-wu2A? zrV8dH)S@b~r6T^%V0WD~Az44-nfsKqz&XQU*%`2a#fLcr=j=1Q=k`V%=BC0?jJ4gC zq6vC=&=`-wh#O~5O>H+5V~mSDonE;^pg@|nqe&*ErPqK!C&MsHvb@_%DhX%n*NA;% zZr#=|1`(Fq+1!#sIQc_|P0lT(0k}gB0>qRuy*(0-JjpIILQ)WJC5RxZDPf6G)A?AX zFm-(cPSioEQbKNL4|R9lZ3Hbm*t8WtPQ$F#+b(cwx7*uR>=n0?{*UK7FkR6D`wvAs zC&$=XGl&6i85tWvpjN_*Xfc>Kk+Z+8bDA){)J!Y`sgp(;@DlaS*`lcKcFEQ0h$PUi zv#_%}BG3zHsdh@F#djjhqb&~;J|V#-RqB0Pa)!kBy=_~3tokE@Yo#Pc!I~~l#&uU z8+1}jMhEqqbjr%;weGHaHJ4JQ{5r3OyuVs@Fd(BxcnU^FkIZgJfIv)j-fgx(vqGyZ z&ywZrIwq;uIbV>xf@M+V?~)eO@0^SV{trfi9_NS)w=Ge+o5&l^T?GJivxIM*rHz1? z@91b8d`a9-_m0rxWcGtfHE96gIuYP0gn27a!K2L1l^M*ilqTLWM7b!4bE@Ps=FFi7 zk->w;;D*tqTEuSBA4PuM4U5uF;2gU?vEb*-gi%AUB?n0(Sb;oJ_+&9FPVWWvf-cX} zs-ld_s`ZoUc|q@Ex2LB2m9RgaQTd&S)R#EdA9aYR=KbjgSZAEWPXC^18IH*}y4 zg)F$aB2oGHn+73ioRl~?anX*00&BQ%9V02esGs9u45_EUL**8fz6uLHoJNegsdYll zI0K_^n<4v=Pr)EMA!*r*rrnKG5$O?%2dGq6?bc9CmE%8KF)UB;;K)N9E*_HWvEn zi7Hv0l}Q>pTW_G{)YhC8cYxl*1L|y}RqeJi3X>ch7u&>BQlJ*a(RLWZ5^K9gn=^)$ z!n&aWq;UgU+D+Zo&@=(`U=nkL4<8>E7H?!zbqVRwn<4acCsyn$H|JGGiuMRwXv=P$Np3IiKDfVQVn zh6URpiVKEu1*3CT>;-{=o7>K$1n`q2WARC#5Cd|PJaATB*qvfwh&h0eRPeN?e;zge?wGd$b4>@tx!;(}5+5C5RST^rNeUNY#3Q$5YH^ zOq^R!Ox&a)uG-&4c3JDluXbC>Km?KG!6_?gw6;W+fLkq1&BL0F3?g3GbeVx9b5|Ae zt>_rvDS^2Pa70oHz$Cd9#S94#)}Uk>$~lWgrQ&+K9b@1sMFpTDz-`pBG?;+GAd<+_ zQ#Sfa;C-Brgo>bsd!^3R#!xIskwyw!$J`fuPC}rRK1%*JS@StKG|ER!>DCw`SU7JQ zP(YZ>OvG=u=r&em@!c47U%1=dTle6mZ@r!*8O+Q8B^B8nP5Pxy=;n=)z?V{MF1mj@ zT^mhFbVp->q3bw~-1$DUo^D4R6I+Cs} zJ6CHx27lc-`_(JVPCIhp z8~{6^kED<^b{^YA4cR_Z08DwjWh8UJ{|K zM5I_k_By~;;w&At7bht+l-!G4vC&~;RBb}@v^LY~R)&I%nL^+wl~6j#U6Z;rBA}`$ zFg@xFiY-Fsyv7Spe{0s=;nFs9ouxaRxfkTq;8i{jWLL!3QCUh#p#hU#Y+z2!hMPo_ z^asEaGcho<#0{B~q^(pZB6xpkZ@vk!>DgC2w--@Bu6E|Jt#;T7A{Wkw+H?nHW-0Oo zzZ1hJAPupUBH}m*&uLsE7Ie8JLjm3F5+Xo=!Tq7TDXDpZ4(FP@yanEsO90yeHsO=_d zW^4xSP!f=;pRwEyp{+S_japVyR9=xaG1KQr(%d>#YwkxG7nj~J`8T-0q?K$fW5V~t zP98p?({)QpUl3a{#2X?i=D*~+zClHeP1zf{`|v1%JY@vFK%ix%uq9KZ6dqEURf<(g zJ0pEolvug#qzo-Ur(&`o;+ZDan|Xy=YExNNQ)6|*J_T&z8wyy^fJIrpgt@lbAT`IY zxww1Cr%Lrycu#A`s+^*hw36ee2&YbtuSFlJMKj1`LG;Ce;qX=2&9+A}c3Wk}zrett zM2|6+TO& z&5u-Zl)_0lM8!oCWv|MeM>BBO-Eb4{GzT6|-ax|^GhJW(VkMA_7;ib~L_dmIs_~Cc zNjNE_+bRY{YeC5YdJCY6aU-rW02IRHL!ued?P0b2H0M4SO0(DgIXQ^8$DW!CH zs7?wgg88ftL#P0Td@GbBa^&Wj(=*2k(-XJP7ml1dHD8z?pS$^>aj%zL?9?*?A}1l! z_YWB_CeAmAg{)~GEM$#wBiV-8+y+C3sJ9@3yd#AfeA2Llg8|ti|B}iPWw5bS zZ7<#B)?`*&QDi4(XHU(FSwbDNCy6w%V4jgl(j@7ox|l2iB?E{sBTymaodvQiti`^u z77l$FAI2|g|H!5^ed7%q1I7bhot+~=Y=Z>}f;nYlJag7;xpiBg4uPtJ2PRo}xX@#JnW~iO4S$e*3L^FVsE6hM(ogs(- ztVa3?EdL(|_0XdRH&6kUO7OKf-l<9=b+$^XK1Ih0P^TS~x>JgNmK1Rd*)0ShXkoil zz7C27svp4ZhAo{2W{Z*y;*&5FU3+RMg z-i^8^Oa7(ncyu?ok%4F6Pi^uYVvuz&g|2RjA?cBw7}_(I_I1~a)AT_apY$2+8DJ+y zg5VM-zf)bob3xNpPJoRt@K@MCCfm+dC7@gk7|Apadw}cWl+KO8SQNaHSag<71TmTa z=mL%1)}YjfIu&W!6^YkTCy-8C+SQ49i)u2>KucXlf>F!`Gh$^eGAuCSxpm9^A>(Ib zJaI^UOAHC8bSbYZEpw7BGRrxrrmg*u>L+p(%jg`JXR3>W<+z7B5vd&`f{b4A@1n>m zRRz2cI~Kyb9Av>y%gz`BT_S<9ehUWaYr!|k@G!KIT?3IbbL19$vY;aw2xe8KF6%{t zkB1{~x)2w=tYSr2Y+m|(wVT%ZS-FEd;Wd1V+eOpN<7S-A+&!>nXG5SEGaaeg?&H!q zrd#jdm#!1mjlDU#(Xb(wZPvuoi=hZ6@Sn7KViPup-~cSMF_j6l#jZAAveSjmE%=yD zvbD8rk;x9J2btwgjj0q)3cMBZh-7OJAhA`HsZ^5oKce#+ft2#X&P}EwJFH2PrypbZ zW=$MQ0Ru{4Nw(@lTu4m@@}Vq6Qtj)~pkMX^4rAc(T8}&@U~O^3!^s^CjbuYaX$4lb9LsyOq|JN)-su^zx1YWd5uiw>OcO>x4cU-4_^K1 z%QKl~CUZ^S^D>#Mzp-{nW+ju^cLm-AvYg56`vJ2bH;&es}2-Y@uU~Uk-1;r^?`rI{aPLSHtyG- zfBJO}?RhV8>t z+Z5Vywfjgx+AoE0b+lMM0I#gZaVr`d7zl%?D0>*F2epCajRL?yKopzciz6!n*zl>F zRSHk%C9;w!Q4KIC6FUp%B(%GS9>667^Z@)xP(U`^6!)+>l4uKdDsTXC@4bSbspj%o zpLVB%1d)!;e3ts+5<-CRfgn_u9Z*Ru4Bdk3LELu`?saq<&SrJERBFOiYUiuNR&`KX zQ#g%o2_UXvZ_l3IjZTLYGh-AYp&s)>>?5DGQC%N^^cHoEF5ikCZ=&hQvaTqy1FRsM zT|!-fJmW`?3~40hh-C7Z?I!)Ydmbtd*4^{PMii5^#c!yc1?QkowPR6+>&lccK+Wx_ z8^RqmP9q`-q)mT#;-Spd2R5m>l<*!T*PVh(g>@rsD(M zKna%VHl2l)4=0!BS6zRCz|h^D3|3}B&!-ZF^4)1So^ql!u8PaO^N%AIG=$2NL2V6x zHYR_g=hu(94X`k;sK1 z=9byH`O~-FcKaRAb(U&%cX?&iyKAk{^n=#(!YFR9Z=Bz}yP)h}II=Q{K7wiq>W<2= zU0Ey|FzA?GyxDStWgt|#>c;@S?75YQ2`%R zFtt0yz|L_uJ`y^9ZPkEGBHCJZeZQrI>5Lew1^&7l#!$D=kDw4mwOJpADX+Tc)qA-N6HzXc@MMScD(&&Imvd{jVhCW$g?)f=vD~zF`p7T7Jh(3OWgrx8()_fzIsE zNR(%dMeYVfje!-|it>8Ze75QM&I%Oa-b`MNYHd^6*|>}0tK8AJajh5QW{Y;S93DqD zsHO}k95z=3y}GJh$~;+hQLo@doedzWoV`&klz}D!nu}Xw_OPgqd&>Mg)gupzH;7J( zLt@xOGkh#v0&WC{vf+wLxQGl=kPaBsaI2|^mCkTh5 z^r3t{Hz}?cxye3g6e*WP2hn$%kU5QuFoiAcSsmxNKJ5tGXR|%s3%l1lmax!u8{DlW71Zp+Gm? z3;v1#xOk zMrf1<0C1)ACupZIN@DS-ACK4TT+dl`anz4zUGO)_3?%(FC%hycOwOziafuQ)68U@X zOAIqPvp%xbbKn?lC~M0q3vPOX@R$=jX}?SLCnpsm{(<#AA-3eQl0#tcsXUgsEWWTq z4l6O=jmxGD+MUO4w~bP`EXWnGQuwlEMWJxp@|OITA(yL0pKZCWqHOggadf{sc5w&c zV>1^5wv{9WLxNvqOqgstF>%}Xyxq9Rxc--0M_G18&Sv)(v+v5Q&jJY0w1`u?~293;cU&T zhuJ=ZKifHHl3k}Uer5`CSeSq{*`)l05plhxFy_JaMq}B~kzdK&j}&%=VaY)x0QZaR zoo7mg1B>^R`v>n^SSaq~kNkjqt8!o8vlnt5xK;~14H=QiRYuxl=`ne1Rt%cynX2hr z!--a5T}b_x0HYCLOot}~43;dT95qCzW17W-qr=hzY{-|rmL@AXOiA~%NV`RTur0!^ z)=oCc^VoC&D%&aYp{Xs?rwak%TmYyXK)5J?=;13Gw<3o_FMj zC3YkoI)%H(3(sA=ehes#{uoRah&|JB)-<}lFh@djXQOj`F;`tM6;S$hUvYpy#5 zo_8JYq6?V1nR6qT7FW1K#7}@-L^6KBYYj-(^nhtX4IrnbqwEWs>4832)v6%7zUdd~ z_el7vXfsL5ILfl`hg5^if# z3~e9qS^$$&6GM(Hkzyr_!zT;r7Tt7jI^l&KNZ5?xiuCEeu0Ys~WSC6Qj;pd8g#wcz zx2ET06J_h=bLy+Qe+fQGomlE1Qc>?>J#D8vqanFVBmyA8(TemBkce{Ca zh&Pi?!BO+?xOsPq<~?lQu2_9|wlAqd;5F-Kt;qAMw&rX&?zdxjCmg@t0EV}OK^XRO z>M@K>AuW5BHvJ$p=z_E=H?YRtZshSg`rvmZ&ElXNlTAu90IWlrb%vqkr@Nek6AL@h zRt)8aKCF6Fm2|emWY9Lnq~18-_rz@jUy`gnf#2;g%)Yod09bZ|XxJ26pqhzfA`CTk z>_qTrs!C9Hj9$-6^UsGVSWb#bi7Yn1T@$ z;_!#T2C^bgNgACFSYwAP{kBh(OQjO|Vf&z=)m5PYn;7aWcIy*50;ZvQvD=FfMDlhW zP=KX-7oc%&0|Uoms1ITga8yw3Y!%$!UDl>f@2bcU?#}b0mamivVULmtVa~=%!S&b8 zOt4qq@tnILWAinf0hTc{z;wpuRooOZzOKA-fN#iiLpVGX={*N;wZh>1CJZCi+|BCv zZO6}^oSd7Vn5J9ws@bvO;nMJMwr7`}%uY<5nxBxJluHMS<*!E<*SMQhxI45YO6Nc2QXd@JU#jdcl}bbK?$F`gL!j_|C=`R0 z!-wKM^r5hPD6EU}2!K-A3oHt|hvLJB!kVa*_5jSVq-B`U{@r&lH!*wb#O&Fb(??`S z!SLkD(MEaT_{jOC#>icx(Tp=Q^xWw?W+&V`PBowR+`DdGYTmG3S~_so>FTZ*;ONQ8 ziRpP`xHAJ-YrOcB} zDWe1genJCB8-t%KCoHbqP1RgruGMunUe%KluD_1fj&29iYXO5TP~Qj7!K#NM41%~& z_d*^~KWGFiaD_m1(~U&5+AKug-EMVgijO-7egV#i!&6iCQPCs9H@S>sXXXB^>NQJv z9=S^5`LPC`D}@brsqHa>FM*>NZ+R~v_|<!2(;49J*+~aJ>UO={g^2)JRI~G|P zP#0d)S>c+;k+bfKRj&zVQaf5gTxWam()WR7$V(ONuu;u+OPpSFL%cPMR|`4te;-aY>y^mdIU6qizXLZ8K&h@@j&rFu`*B@5-U#Z zZaACrx3V0kqQ+SYz50rasp!xp^kxkvpUdHvLZB)W9Dai`+Us@xn_tvZP=HDp28&`m zio6vc&IQ2b(g+C*-jZ`ckfg!Q^D4u<)Si~`F#d*$VtRajOf;S7d2JW#ysDiA$)wB6 zUX4bOQ4QfcF%DB(bv(Zsg*Esg3Tv1F??#avw*=!lcwI|XcP|GXE{d5Tj3Lir11|?V zeQZVy4GoHC8vx|To4$Lu=iGK&+;V#IsAzgkuNH3hZ3$5wHfIbK9^#-DG^*`-i|8o` z<0_26FaeFhi*X94h)sTw84) zD8grs23x&TC>cD>*rbX_nWBbY6$?F`(ndaOIGb*02%>sm^Vk7Xu<=4tkuyUSbrV{0 z##kdfIX#+vNxnlj=O$lj!NCIg%G_$uZq!Az8f=U~^SB*V`K)WUr)K~>4*0$lfkDfw zMfYbFg0ra|jo)^hV1X02{)*?Hhda8UbYd2dJ7%7)q~=o%smUhlN>Di3@LWGO^^@x^ zKZ^RvrwT{WE`B$Q&qt(-&&Mk{t-Av``ZHHD(>*h0f4C;6{o~kTmS30u1*b;nG)3Km z+B418a+K}q9l*bUwjjP*#h>Y6q3N6_b)#G=O^K)x#MRJgN~EE@gacK+8^g8iW7!^| zW#&Lqj1eKB&??lRzELx%yVYnl2xDm10-X!EKk8me0v)In%Om@XaJ)(%Z=8YaCq1pf|WrC!{I*NaF+^g4;d4byX6y~QUOiqLZpwf_J;-pD17@% z`wyh)Kw3WpCCk^Zdk1Uz_V9{o+ z+Ny@Fjx2-iY0b8}@YB&su{;X<(AMeg<_WRUA#I?DbEm99%e{Dov?!ls$i~XXN}=s@ zAq!J5zA|?V1>!H6j^f|BB!fr$ubRTsS|OYfehe6SW-lNQ-+wtCw?fHndExVp!s~@4F35K*jWBL2L}fAzWg=RS#2v@5Mn_7{Bd! z<+kICR;n1Ln{bCafo9vjtbH1^tSM>!BsIp$#tKgfj^&C`tPpF+bzl(#O}Dw^hG{d@ z9TH8+?hGI}x^H4uw@QLxw8N-CN@FxDfT;n2xc+(;;kN?Oz7wal4BD|_m1Pygx(BJ0 zqzo%{lq_tj3JSM@!IEq$`9A6-Y0Yulq7nt>ePu%ps#@x8-g4bAO6x?uyj$S6YM25* z%Jd2T1j?9f!Aj}Y2E9;~jg{gJ;Hc?N`djr;&4SWeM$Zo*E@l7NOhI!5F$0k#bw$d) zuIyo(CW&%)-4K*yTZ>dO@0@zgtUIZ z%lREu#e@#(8wc0Zoov~Iss+03q8TS%6b~Njh>qC71ay)^z@?XN%UDLh$(L^4CcKxRZc?WrAul| ztXKMadIglFD3nGDgC$X^jFt9}l`B0L2t-e>C_&X0xUjJmx>(a9@?tlldX!XuNnOq^ z3zi$X$;215{tVV86c4CZ{b12J)(NM0ag!bm{Mhk)Hx%3(lyWhyl!Kd>Le)!A@a@uY zsT|gYbHM=)8j?H;o;@8oEAE)uqEws>?M=R(SgWz%IM4Rn2h$#h%eU!@cM-)w=&ZPk zK%I@1V_-BB-^unM^hBQRXz9k#bwvpPfKyC#WJCUZ2JLGj{6X$`)V2$)!1H4=CbElS zIdt6wD^o|EWp{@~iB37w88JvdRIq_f0%%~w=Ch~q9Pa74BV*`Vr!0!R>T5uhOGEpI zM@R6ywU|1B5cFmH;1IoV8>3~}Fy%nO(D0Z7w z09G`dCAU$9XFP~1X+Iblzg&Eppbt$coig~1F7yE(xx&0eybe_3u3xl~bWqA>1(0D% z6Cy9`okXY80Z?B`Z}-ubD;I^*+qtYyPeQON3r90sZAzFLIdftW1?{j#l$%fjyk^2O zfZdg57^J@k_r$kCcm3G(oXBEZy|VK6Gf8z7(y&cMSLvz@F6yh8(~<>;@yzVRt!Ix- z&t(_MWt_qei0d$evY3*^f6Nyy6so!TQ?uj8C$sl zOW=`vxKN-GmGe_G$0ldH0}hnEBO}Y8J~sRI(6a7F*h~q>foOYsj0puA@`>$HU@k@{ zDY~c9;gvmQbYnE#)}%7Y6hXixmE>+*dxb25)qk%wQ1>IujVGT*RL#mZSzA}9W}pY; zv#_y37sv(gy&Ds%4N4>>3%4aGV}j%`rE6P}GOO4r(U>{7)4qJj0HCar(8!c$u zYpr6Dl#@yk4xxh|9g1& z@@_r=c^GONL!Z*aWW5E=6}2Zv#4eevHK`wPOh>rU)KMp!jFbo9jL^y<>7 z=s;y~U}AIn*h+iq_M2|6udJS|Ob(vjy!-ZtpUkwLCOhE-BNI zlB5*w3@FII2C%57Nq|&_T6K5nbf6SPt4`?FX)?3Z>o<xu)uFdrmr%TnWaQ!;kh%&*%T%U4DKgLMKaCv{FB%DSg*l_Er z1vn;4#nM1YwA?WAqS*E0!kX*0oQAjVR?DUCWCv+YrQ+bgV5J*gfINnZLJLnb6+~W_ zWhQi_q;}JitBjDe+-{hdnF_J9UM@JfI|Z_xXLqMH-c@>cY6rW??@sAp7YW{JtyQk= z_8HzO%`YU;I;}ee&F(X;)4EehzlBJ17cwx@NZ(7EH}_OxC)vfF!l z#c)v^o1W{rN4oSvX9H}(Gt!U*Ckh*qiwEUP(guaXgz7|Xghe#Q;=l<*XH(>;C#rwJ zhta7%DYrHpmgKfoy~;QGa}k)V!+F>Ez+8Ks6LN+Iq$GsriX9 zxGMmv(Sujii}0>jzzA8h?GQ`qqufr~+4d18e1*c`vOjn#^;4>8`Y2k}f0i8EZy3z}w& zG?q@VB7ocrUDbkD+$@T0a(;tUiQwLK1%B0P*qeoyh4M^7tQb`xx*PR z;4m=z!L_Q2tP?gzhOBwun|U)XimyQ6l1G6<_H?Ku+efoQ)7*l7UN0RSQ!zz52UxCQ&*A_A&mC;y=OZSVpx z66ts+_ej%Ob0LA+t;IpOnbH`R7w?Rwt2BU+k(g;uK>6%5)RPfqL&p^k2vbSKQPDqw zQw?2rjzX6hkCe51-> z7^noXTNIQ~B8=)jtD-7$5o!_G*z*Yk19*C0*20H`690?lH_ zyn`l<*9_?CHJ}(ZPpk{>`72{02V1Fdn2J$J0wx+wCfVYv>YS8%87G6O-=RxXT&O`N zGI$CS3(kIfxHUjH4ZPKX^p%K@^P2z|{2ERlK)#2)ue2);QEX^cpu0d<29VlMlk~Zn z=k5#z)I0~lzv~R!oP=pdk^aX$C}u+PP)0S=JF2F0<+zLHyn~rqM+dx>g{H$7@v=m31ZL> zZrA@Z{fUMgED9cncl0HTTp{K$|!t^ zQ(EYzEO~w6KK*$vh|hj{b(%^oXeC*5D!%c?3|zt6|VyS;hOxRC+E0 zj42(-Q3d5a2}eLGLc_%!Y`h8V4-CX~^Jae$|JU8F>D}xf&9a3j=R1aI&l!*_B5G@_yn2uxv^4lHdX}X@0+=ZlY__c=-49`k7K6%uW(M{ z)6GdjK^HvB71ir|w1D%%j11!Tsy{VUP3&J%@Il)X# z{W3iOiLPG3OOwF7p=${w5J&LLvB+oXOCjZzTjALE)ck3YEm!uJ^dR`V$V1L_ZMADd zD9fDX&_%NGaVK`wLj!#58LF|VhYWGTwi3zhK5Q*Lwbhe8!Nz4i7d?OKahaTN8PeLy(pzG*6~Ro z2;=I)j^j0R^W(GgDF}K9BatU8n!TqJ<-;@&!1ivzx1c}R zWBa3edTICfqR|N}NoT{gQ;YT^iL0L8MC&bi2WtxKAdq?k_&$qJ-kFX<3yY#@Fn%>1 z(>v?6>qNMDH+p2(J-8sqvBGj1u5ge-eft^YQ<`-loV^UFCWl}m&QeE2L)Z1=sG2=9 zDYNDlduAx(=4MQg-%Z9%4_C2;`(u?J)dT9A{9$VTbPq(YstNP6XC`z{w?tKVEixl; z4z`I31{~P9)HQOmy1UMQ_RIuP3`K>^KI(2`SAE=66IF4b=cc9y-IPniJvTL-^YB}x z)H7FxFQuNj3OpMe>6sf8RWUT&GdCovqB7cZ0$xa|8`pCJTBIZ<^qhbmQd10iPC%!r z$pSr-FwRA)vDPyQu&J1G&m=%(MTdJP0TLbO?U@|r7W)tP^qiS--Egsot{5hQ33gFo ztY@4ulqP3@W~6;w>Y3nNC!iapmi5f2q@|l>&JrRCh==m32!dVZRdq1DEm;=n-mK4<4$2;Lp6u=%?xE5^2mii4>lN5p9Vl+rHwG?#@;53 z@;z(rW<-2g&#p5`e4DxLs6&{S>IY9iK<3xcQ`0w29_R3C`os=)4Lk;HeD+j zl92Ri19VW6P6EVk_#6n(Wa?ZLeMxBt?s3l1Paki$DAeX*k*`igQkwN`{o|UsVk){8>6-aBNw81)s2TNl#EO!=LrIGU&AF zM*W>(C*1gIvmn30SXj5^Hzv-LR`aDXQS#6`@Y96GHBlrg7oq!+g zGz?67*(&fufG>gz#)!BiD@x_qmk3D)$&ykBp{2Hvfq0}rYF1}SltJMh6XTMXrArTc zsVdbusXbPeVh0t#M%#}Iz;Ib9vfps>xM;hoD`l<~dmv$)|5sRQFNLLep%Rs)OcVod zabN%csnuj# z%#hmm|CB;%pS}77hSWa5A+;{mqOVb%KsfD<*BBBh9a9vEyjW+LD&>)(vgqOXxQxX^ zk;<9bQ@7tC<|gJ(&ukfx=Kv`dzY~EkHiLEu)fU{)cN*YM@oKKftKy`CgMCy@1A`tq zj9S)7z8J+{@_Z-U#M}w&vDI*5D4Jl0YfpN9`@Fzp$KB>h>CjLz#Sc=2sFq&?x-U>J zrAl28LJvD8#4gjbb~S9;ppZEE5Y83zGSyu5w@OjWxpDdlEUJ{!_Kmf1&x76sgv6F| zbs;;3C#@EYPK~$7BCal^UX#(K%}qzE3)utR9!^cdpyg86)>GrRL;FfMkmkzpxa-pj z^gcM!W%v`&IK_3>?RDra#i7^j^+6as?b3#B4TcaGDYr6oX`qh-RTp-3Cei3GZ!WMt z?*p&E6~?KoPM5ThqJbEmb=C*0orNqW@(~{~2x$&bGt>wOh^O=5l5!@cXp4vu&T z(#8+#_WIjkQRGjxVlVKWMxU&G?+8k&spB~tkOzu>*&Grd>_%akKd z4x;=xJp=viVrO{mVSE=aA-#aiE^CqxdsdeQymt+y*PnM~w{ z&6V(6hCa9Re=o^oGB@$}OEa0wEPuZ|lgUi+cW8ZDn*!cM0_OMAhGA%W(@jga6JZd)gU< zmqL#-y2p);4eW7aV`FOPJpyc(Uz*8W{qCzX8QobFtzu_Uw0bt#8BO#GK+RR~PZ}zr z+bf~lGmka8y=r4)qYy<6=vsb1o$P*Rv%d;De{$C7{4%HIAV3 zc?xF!9wlMk2}(@r>VaWCbcq4|BSRO?f4QVT!#wO?t_HG>R-sry^yEwix64n#p2=iz zyS$0NAG|D+`Ke2$Dvtx2yE2ox8kPr^>C$U5nQJaVQtZiO_6^RR7_SVEjBT!toL;*5 zz)h3W&pUSDwiC{Q8&8&QIxu?te%3v(RvMgY&5c(thl0Oh}dW@g>VY<($0q-fzC~$Tcs1S?1c8JomqT_g!n>KKH)2-gnDu z-#@bU$?rb@W9`##{GYjxe0^-fdGYk){_#mKec`YFr&oXNZ7(a|e&1W)l(sNesD-)I zT$qu@cx_~EZh825`_C`maQucNOVb+zH{5W{pSu0%%&i;i=WFBR%gdWHjx&S{^F*vm zdUnZKdyX<0%OzNyYt)nNSLkPc>`Px-|D%sA_C4y+&&#dk-`M*XFY15to!|T==kQ;B z@`1Pi<8R&b`WL=$@K66~^j8o4xc8_pJ#Jv?saIV7M^E|fwWmJ+_g?Tj|NPHic-b{a z?*7UXe(}g#{{B_}a_1k+zV{_RbZE5v;AYmv4Ob8-L>W zy#Irx7iS*vuG>EOv3Fk4`q~F32Y>I*m;Ur;3t#+$%O3Tk@45WyxBYJA?f=mF*I$^~ za2F2T{)P3||K^ePI}3%&KKD-t|N7_tB>%x{e{=H-LGS5}kKc9G`r|+UH^2VuH~i|& zxo7^)d#NAWh(E~Ot}S@I7ch%y=c?>}5V zRe3}v^J3a_AgwOTWPk_YZUcUJ87yk%2Vmbl68?ehcv(*-Q-b=ise9uSAN|^=Gl#Bt z`VU^V`QhITpT7U!o^s9jV|pK1|In*uzWCW|2MhoBwdcO|i<6)GwWpV6i=THNch;-E z^bhX-r{(Y7@|_R2hyG@5xLmvR4}WOwi#HW6`N}`P<5N#~@_PqHe(|z{ube)8>nGeh zp7w^Gw@-fK#0xI_t(o8d#Qq<9=WQ>$?0e@wbl_{h^1#?|t*H|K-z@z-cu>RlQ{S&p`kN;@v{7d5>`MWRQ z`}ZII-+yuMkA3yj#{Sy%|K)=xhgLsz?dUH*`m$4%x4iY8k8Qqr<}1&cduI8U?_WOg z51(wGe&i>9{;ltP^XTh;_``4i`obUn+JV2>c;CH?@0yzo^6vZ2z5ZVhc^`RS&*sy< zed1A{|6iZ`o4^0PM}PImv%dJk2Y>I*gXgaJ$oeP$$KOBY)1SJ!Z}^!XI^O?{XSCn? zwdm!ui{;ZVy!;u*zkJn$&Idj|_`uo8(eGsseC)Sg`22G}cKW_=eddPBRqwd_tF`$% zzZ>24<(})uGnvc_GhZDnA8Y^N$|wKvia&U(`-W#(HZ$Bd_`By{o_fth>K=^tVs^ z`TZN;4L;cS)3-lRdg_;c>UBTfe$gAmo1QWK@nf^kIXdvit!F*+*w=@C^EDs&^4mW2 z(%x^4%slSPm%jEp|NXyw_`3+i7Y>X+_1z;Y?|9~)5B|wZ^Z)q8JKayM-1_aet>5_= z@xZ}*KKS)7{MNqN17G~c{rP|T&abpy^)L6o;+}7gzwQZ3Z~csO37Pv3U-j9A<-dK(`Ja8t%YNxoU$}8}dGOUw{KJ>N{Dpt^ zryu?NE!WJ=IWzBn(esa9{;qfa?LWD0CX;!=6D#jI@X_Bm{DX7l%Wl|r>zAAV`z4=y z`v>1R{q2|JU$uVz?eBlecYgPC^^d;wt>IO#{?Yw+ysqct1Aq7NkN?&G$KJaDN0KFn zVFh450Oq^@&)x05>DgV(?xE4$_zh5ZbGHqkf$1Hf(c9ga+1b6lW_8s=cg<8+^;A^@ zgXNM(O8gunZ0SgmJblO$B^~9p#Z%a_MDoZ}9Pdc!Xr3vXrfo6IPne8g$fRtVlp`dY zRO~o1-+NWBJ`G^7vpmw?-VJn5)%)hl%$J!jGvB}Y#~=H9zxAbm@|8Ev|H?U{gJzIOLJf9Ny6_f!An+h6;BbMnVd|LwDrbKm`P_0}(a>V=`7&lP_7 z^S||rKe*BV_V4&Y`Fp;oKl!0Qc>dph`B#-UFTegX|L9{UmH+L;&-_nB{m$?IAIKLj zow@ksU;MSJ-}lrF{q5g=dh+3a_X~el|EIrK{)ao|uYdPX!WfKy_8aZuTY3M-{?o7h z<71!tRr2L4qt7|t{2zZ~^ozgt=I%GY{PutUzyGsiFP(n-mrJeh{Ll}Le*WLSwEMYJ zfAYmopZlJF@{ON8etUWLPj0NtT>R4b^(X%CS@V}`n?Lfk-|JjH_kVoPul+awdba;_ zKlRmbvmZCEedC#rn*VxX=JTH(Is5i6{q(D^eEO4r^pUS+UYY&P%U}IDkf?VpUEgkl z&*#Uv@FC=P;C|xwh@vR4bnpQ_C!W81@7}$K`12nfg6A944_B4XD$3ca^4SsPVMS3M zRTKrvoW|!Mr;k^av5`~o2c?#C@awqp?%41{Rpo+m9{!xEDi?;Q*OaPK0Np?Vru*)N zMEfwV<9ysH?H_~ohlBP<2;nL(%b%1nnP-wtsT2-FYjk>HAM& z2s=n=90z|)G>-a9YWsG){fCr|X}Am+76-sO1S00{?k;)^h+Xfe`KrP9Ph*99p9O*Q z-e-^D%AdH-3cRf-%7>MEKQW|CC|ym@cD?qcUDIwkcVAR7wBY6C1$Ayoy*#h3EU3%N z>e4Czi*KEXEC57U#FL7GLjn2&)H{WXcW>yVa&Ppk@~(19xi|Xmy)orO%Du6n^UA%k z;S0t%XbVyM?I}D>89#NFxGs?TDOak;CQj}rTI@XI7#JvKqGz8c@ z3>6hct^gfkg&Vwrny4^@qmnDZ$e_|FdWPE6$F6{Eq^Ut5X^Xm`9b^n%d zMFDtm0{iRrC+0}-#FsVF+~AA zZU~?=swhKaiZXPLA@LCE;Aa(O^gnxCQO+yM*zt#f13n6W9)mxyw6G3i2=so>?sY|< z=Xsy-eI6-W0UHIZ6q4VazNz2#s1M~~#SC5^z71t#+EkQxhLv$vb9DTfXD*1}-P`}w z<|QQFccC=A8>h^)qHME&zuFO_8~)soa$yux7FM>FA61mXi9hbY`AqYBf&5*k>)3D{ z0)qg4At)8TfzXa2pw1}o;?QNR1{6VN2sRA^@fCos^?H8{Gla>UVKahBpXS0n6nPY8 z%Qvtu!2=F}OMHicuSNbG7UgH40k$~GS^gXb|LeR>d^Rgf0WnfNU=Y7FYzQD_X z3i3r>7Z&2@xC5c6y;C(^CuKV z`7*ByeB&$p_fv|Zyv^GI^4#Nd|B#|6zs<{hSW%Q80PdQF;u!0|kJxNiN=cV?6mjO+}XF^ewKjY;A z<$j<4eo;}BZ^9%LMR^IpC#NXNSNU(ixj*4> zm{t_!9sV0wnSk4@qA2swFzz0Ta+$+?UQv|)g^wBd@de)If}$vdk6{tU#-GD3^!pq? zKc**_Z|{J*+4f8gQqvn#;YR={ohia`jDh zAzzrEOnp2j9=A08Hnk0PAupb6yN>O{qnUg@51jwe<$7(k*{E&R8>N-zX05zduGC>y zKglaUFOA|@!|hY3b$q3?w6!J|`=nItAu}CGj!1cyvZRLLJ!KJa4;zmiX_i?GeM>!Z1&^f(Y+pIK7 zm6hgJEi&4dq}roB$Mf4R1zY2V6Vc?iW*)y;ZityZcxSC*i{ zc@FYP(O^-kc}njDc?9$uv@gKAc)GFrB`P22SMpo?=$n=3b)_44bb=6ZRf zjPM;5%e5%gN+0GNv~hxAH}n@&ji4=`VMsMl>mfcleuB>NAZXxWB-n>g?wC?GroX8u z7f$7L$Dp|`HB9YS6i^G5cP~5~0N--jS$y{iUjE74j^^epvy~GIf5*xJq6C#6i&Pe+ zK7ze|m`gj=XHgVpr!ObKEDnbb&+@mM?Ct2!o8$-==+ie;7B48c9b#yO|HR=Mz45NRJEhgz6N92OJGDhf#RLmoG+k51jy44Tv-5%))Zo;|BF~S0zR9Y~5+Y%}W}j zY}ug}X+hKg#4hwYj_;6LP9Ocnc4>=fy`CkqW%Tf_C7?4;%|#GtO6&E;b~1P1r4DDqmp0 zWC1j_FpmY`&|k9+m3)FH)C!iD|2u(OvFC@vFkWY0JmY0pzfx*!HW5MscD=Hs60wc& zO2Io|<vWr*`4&}4W_oVE+hS9J z)QXzxtE6vR)bp}%jY*FhA3=pY%X3wc%RnfN*l zn7B);0k&Yd_Z!B9gu7mH1qg}AIzncF)$E!!A7G?NxS9itpqRy*kOeX^-(cfrK8Q&P zlNU^r5(iZgvSw6PJ*-eFCJF+kN-`jE3R0AXv7qx{w*ZM2EANlWxbv#g4vlpNBWch+ zmOC_-2G#aO(>WZqx=UNwdK#j#6$+(~VB&%f76izccoV#jfgd{{Bqm3xL`YftfdMQP zpL~zJAGWO1@}BYnNJgiR4bp#x(cmZK$72PquND9A7VRs&}p!Z69gRk?X|R)Nxci?Dz$nZ(KU$21E&wz+4bARvncIN zl5I-iqHJ%H7^c>vE<`B6jWLtB>HGa|m))ZW`S2{Nxi-;SPM=-6*n`}Vx{t${@Q6*R z;gMa_??8b|nn${Qz4Ibz_u>9Nh#-rJ2~t9!U?$Y#&6ffA=r=8Us5B5g&QMqsIsFf@4ZfqVeOX z8-Z?iW~sP*tyZcxnk&Ud5rtylionce#qJRfGya7EZ%nBa)mbEYqybrbJ(1Hjy@Oiw z+1FOqn#;xItEJ}EO=eLD`kaskc?=?}QR`$$z$0ykoand$HhWMS*{lLSbPOcCgSZr^ zeo&W>FQ|MRhx;Udi$e+CjriT(NBNsaa}dIr!^~o4JLl?_V~4GrVE>M?!vEq0cHjcv zV8v#NCf6f}l&h(%@P$x`X=^U^J8kN?ZHikMESAI!17IGV7mlRy!uqh_g$zFgE4)El zS+K_#D2?`e#B;1ZI6NbVB0McMa!Qun9F!d0a{7?49`Ah>VyriqZKY0HVqCnXbVUbr zD3AL6UPR3icphO`hXXURjucTNO9FZTa=L4&E_ZxspOtLD?vcTw&A`yk!J& z1qcM6B{&_Rz8dX4h55mt5YN?E`+m2l28}~0hR13evf}_^?0a!xaY4mDLM|I59fDkR z?Ezv?gh?Pz{L;uEo~XbX%RA_v@Xj#>thB%h#xbp+t{KK&K=I@F&n$ot1R5xIEa$m9 z@d9vjGvNhd+=w>;3j?Q{&_qIVIvsXnqWmAK&qdE;>JI;DPvMJ;kFpWQpnL>V=3sBg$;26sQTr$nfA3bN6y4!tg zl2AyG)N@UbW-+<-ByoDw<~Pi8B6i_61dx2f>(0p4Mx$CMyRPX&&Oy^AYtB@RlVJBu zfCOW@#5inr=bUM`Bg}!p1#z1zED4yUQyx}C%2q=}!lI1Y3}Y_`XrcoC#Ga>7EmlaO z-5A9!=dey8;vunK zI&m0c9X?R`xWq~9d`|22a=K=jEth6@X)B=ElkiA$_o93A-{)$|-$++euBDRG3u#iW z)TgvJpOPLQozjk{ZO^@9Y(b?S1ifiQx2OiB;Zt{8sgk}%7Fi3?# z%8zCej9|`7?DmO0H-$)n4mqBwaZD7wZkuh%@WyVNQON|H+cdk>*MKQZa7IChueojN zt7Ial_dVa~!k*-3q41QEgRiWpGv#%{YLJpjCHc#9%!rX-9*Ya=LVjTe83>yPjwv<@ z23zQn+P+HO=A*iJA=fhP9GHFi6LXuqK`xN&Hi^$V7Yxs6kvBgEk8jS!4_gJI4Cm)(4_7=LJQ7F(;)QE8;3R>%UDJbn(;mpb z!UzbLYX!qTxY6iU6QYrA6ZZ)1edjH(L&$6s_ld=ULfwe+5lM#}Du4ocY`MCHC-NhD z#|8N;v~^7{Y+#9%a{U_g1SLSk3rfrtrt$23WTUhp3WQ?gkRpV+alCW|Wrbjm8H3A4 z@DbZ(gv9oJPbbb91N9Gl){@7FkB8C+Mt%6^?VR3m#ej~!m7GWu+WwXh+B&Y-LY7fq zyXtswzYs>Ex+KegY}Uzj)AjqBMK(0OW7;&fABZ6%{dvx|zpJ@a;{B2gw$DM;$7#3c z?~$J7dAp8ld?LC7bleE%Plp#`eT?}{%wJv8?1NLk1$RV;j2wL( z-$8HNcZQVj;+Q$4Jgu-Gc9PB7P8K5cxrcz^(*gcwt z-LDGl1~$&-E^vI=f_t&hJcoP*-;ze(wy8BqG-7D9>)6EaXg-0g5+3zLt{suR0Inhr zubYutp+=idNk}d+`Ur-Hql(~p$i%}E(oZ-5CrQCQYz*J0@Msw&R1!fM-X!;E7`&+C zO!|4>ffvUMq=sJ~c;t5sEj~hc85Mga5W=W9>t;pqcwf@ftGm*h}ipl+c z)cO!^(vBogCzoXLh=%CRB41-os7t@I>ezON?S zpCywlngXbsu$nmrjoZr%xRJ6S=y23_GIXBpqPz<>C4gZLT6;_kAZV>xY+Qvk6itB- zu9)vgf%(J-klrZ1218%os?|!BMzdCWb*ofwL?A7@NRLkE*(Wj)XoS~92WGkVNvZc^ z^M!ecX}fS*47$2mV~*r0XmK9W=uI)sI0c*oYCa-ra(5xIRfz^$t6xzsZ8I!7JkOSTy7NC?i8_sAP;7H`HiDAwqd z>q*k(J}ML|9%20V1-1dqazO=*3yxh<7{0&<37u5T-zXyKt}Z_i%$AuMZiPQMP}dz+vNE?5+uCV3 z0A;`~A(J1~9eanm{#{6tC0KJoTX*bs(KhN-cd1|ZUDIxFdDLh)b+c_ZI`ozLX5|KL zHJsbjo}HeV1%@{M%8f>o`P{-lgO)=k2BG2XJbMg{{UBikHlZ_OBzW*070Q3%6ytWO z@f1TCKb^D=JsDVsW=+d7Z4h&Cs*%whowJ=v<7_`8v}fLz#M+?m*EnyZ)^-+>zf*%a zwq@FsU17v)Q8&iJq*Jo^WF)3`up586cZ(Qngy#(c9wK^77M#iF7Y_8T4Y5Nd_l;ki zykzX=Ob&K0z%?wqk4Y-G%vSBNs}w;bB*?E1^r{<1)lpCwB*SJwNS4{^ znqAGZ96ifyfm5C{RoSeTkfzpGn$=oqeY42iaCN7**V9~oPj=B`Cl}|dHyc+sD_fPN zt<}|1jgfa)L8ijclMO}vfCSU@;rcm7dhng155Jr$XnZ8xF~bpSx+GYH13Nkao=zjc ze>uVrWd)=J1^RvPleM}IiW7SxyRvEf4$&C-ahU>rMqKLkyC`n-dzPaaUT_O$c*?zp z1jRMt!6dtw&lf^CNCXR6<+EMQ)*#Z*1~Di_VZ~?zm7&G}b(P~pgnsv3fm9-1oSsqf zk8ll1=!;x2#4l_jMT!X#Rwai(a%_f>i~QzoB4_~wI+yk=O$Yl#2IwKf7A7;DVJT3F z4cSn=9;HUM<-oFD+BGc;bZg@8!aMHmOkAz|;yCXqP9@<142;3+yVQfrGqPRkd0Lx# zL~|*z9UpEl)Ap!AF17kT(KVa6)aZ)=Kx~$2?~#`2^PZ%mark7T$MyPlTL>T0LH%2J zEFZjs*qvtE)pXkIQP*?~l@#VY0G8kBcU!h*S`^JWz&&=U0q)>ncrfig>?gMAbpUw% z9>S}T_lUObQx{W&d!4=y{u{(I+qPyUPV!+844)Eb_-`--fIHvWM?whrXu2MFDZt0w z?HVe1i5G`J3A{@;te=YEU{UzC_nT&cfrp$3IrtX_S{F_#FG@1fNyE{BmjIWJhZYYT zEm^aFxZbF3R@Ry;OFN>vjW;9MoymDM0_1KfpoCw(FK=Gxv z)R=Y=VvZ2LjAE?X{B6`R}S~b5j2d0*JWt!2!;J|DB#^f$mP4c_IqP42R$ z_hGBm(CJ*SJSD1-v zaY-!T+&jVLaOL*VtmcnKh_F8kUW2>y7Y80^4l9sETWnzD&RRjQE_S-!?V|tco$ICc zYUP#98?Vp5w${76^V$-gF`h527we7kazGBy-5F|Wo^R?Ng*^T8mU0RlIxL#C9fJiY z8K$Q@JJj8q^7nekRil-|EoBG~CSZg3h~zgB=_$IeU_cV=1H(aB!9$1tTkl77d!N>}UBO)-(F3}A23GPp!Yelc>Mn48ZRRQ$6`xw{(Z zArp(!`MipM1a1uSWy8pz(9b8*acEFU;i+-LQV*m@oB@G_l1NG=63LAd!qE!LCN>ip z=a}~JexpE=Fpx)mZJ^&A3$hVB>exbl5e3rorS;MV9C_U+ErrKW)Iy^`$VB2tK>vUT zAi#G(@1e`wYATUFAIcj$RQDa%?B;k+5c43*c;fMqqkPV#5p9thNO|jmTvMFE&^Ai? zp4Kug)87j{62w1k18grE+_2c~X}-x`#OyGjfAK+{X31o@Dj4L6=AO$1^Ox$wf zxPfK&A%?{x!!w4ei2mNdLp3=HbQs<5nMel-#UO1m*mK*O@3=X*1JN^m#|;BRnQ)=v;EJdv;FkkVpAd84+k0i;>(-u_ATE8u@}HH7Q8+> zSv-_R7XOHoMbN&Wifxxt7RZ@pu}zaiJ}8T&w?c|R<2euvG{)}I+jcC2x?bEtE$A(} z6Tss`n&8n)84o85njJt+!Ta!60@_jZ)~sD^kEKY8ky>UUzW~13jM|tEm!KeSqu&oD zu|E(6IesyvK8nEn6$(<72fHv)!7>OB~+XhGi04oVmi)!%-3kR1=4YC(Vd zMPA^`a?-%DUE0dxNZEF`oVwj*(p(ccWTdT5OycMS{csvVU*dWg?@%UZ)SN&L=M*g; zm3Iz28s;*k&4K{QqSHl7CA)F2lfe!(ABOWiC1wXaC2YOTO0ubkdFTr51G3P;q0S0$ zllO`jGD#u_`O$%!_Hg9b<`~QXPXW-EAaMHIh7>8c9671X$n-SO<%Q9D{c571%m?;M zDih@aK-%E77a?&_*&gS)8-53JH~dbZ&GFO>>4)skf>Uvex@{nb9G`&rRtuP@LCovu z6#qyX#s59Ag)^uLieF{_O!~N3X1n9>Qus?mP#^5yZ8}9tnzsihmm;+zsCAaJOS&4w zpxc_Q(@A3bY3yNuC5AT^VH5`dd=NrI;A|C zMk#hcDbSA~6ye+2G25Li^K0cs4cSszU)~^>>O2OPEMq3JzRQlTHUh7a7YVx{HbD%~ zVb;^TF?tXx*g?r&KdyJEej9utJQTG#?F11ApBV4ER<@`49hKxv+n{%&8!h%9A)inO zNv=RT0kG9qIaZ_*L1u9gttLVy2DERyAK(St<|u-w{bK_?y`o`;k-)0QR%_+8Vx!co zHR{#KvBSx2*KBJ(4fmCUW1AoqBj}Q6nFB_SHxUreNqz(k)N?#INBAt(!9c(nP z2MIa!6hB9R@1Q^^hr;*SCXs~vkB|k)qS_8+Z#zzxCUj#qg{d9Wpt6~i z{aZF4@sf- zAVcGyUCJe6Xd$z(c)6hBpForrXSeWnZf;h^KS)g2GOIQ>HwQ1~a=zYEIUS|F?i7VLFF8mX9c63jwUk8&Y1Ej9(wEZEarNy<=8uh0d#cOS{%9H%r%PW9Ie6s@twrc9-&t^OtAt z+*ql$%b){4x>jzi7nho~&CNzcZaL95eM@VFV#|mETRVs)r^JjcEzG6HDMqBiImck; zv;i`5xnm%AMoYn|K)e*dohb(*i^$SGSwzx3-Y$f4DQlj8Wpygq&iF)+PE}8&QPr<= zA%b-*$f^ybjp$5g5D*dT z<2E!tZ*&tDHy20-@RW@!4G~pxKNGo#Udf`N&5cTVX{#PYY`rbsgP(QLfb3X%#PK`S z<%6AaTb!hYF4mzSe^E{EKp?&8dnlPfR8QEJ$eGxL>|+zcWXGmICEeY`Trpyr{=`B) zKg|!>CPbTAGQsmU%8yX{AK=e15#vObCcA|I!EyJ#fEM8nUH(+oNkxW9D_!Lbs>C?&bppVV_okE)`g7=*0nBK z`c^9SNJvdYAVB$CGvF>89a5^I-4AMPo0d-@;4sPNI(=kw(TPeD!~q8ZJkWp}HUd@@ znmB~;8_gHS;fYKtDq-LaH%XXd$p{Hwgqh)E6y)b-)VUdy(hXad{MmC5?xp7!A!|0l zTVEj`XV?m$IQWaq%Gw3?M8GSNG}i0n5*$5r!Q&YcEy860)Oe9MaS?Tm8FgW92Kr>0 zL<+~v!r+m9uFSFPYhV&GU0s1ugsrZCjIdd2Tv_1dVF-Bb&l{O+*3i5Tx;$hiNe1Fl zGb|D$AyWnHDx}H;KN69B>_xDJL@&Pqo6xlfh?tCbA=)GFdV8O<2ibu%ylC&~wN;3~ z*s7HqH~AHP!X+CTKiPJ*ZOzs$OA=dH`SE0Bai^T97;?9vAX)YKP&{R=2P`gNU}1Uz z2($$iWkA4fx{C5#$clIu;u|je;`y58`5m1jJ(b3hL@q+!xnN0>8=&Oz3C9emooI0J z6(u{S*ViobEoK&o`5MGo5d&aMx1?z0j%AVqjsmQ3K8pg0(0B$uGtP)>j=_QX;E2`)c?g^;laX>V^}7U+|T ze7|830srLk#tP3ifY&wgg)bGZ&=C^H;A$Qcw5SP}(5UmAyA zR+dDN5wt7ko_m6a8oBI-cIQ?aU>8^toFih-(f;*#Urn#C@(JO_Pj)z%@WjX1}I z(vZkqh)bjLpyFX_!S$GOBCd$NIz2=!s3&LJiS(3=R14~atZ7(^vl7G1u`sV3kGTz4 z)JgsT+z&ywJUB8d=rDSA^h^6OwqfN;s*FYM^tCR^i%1LaqXVw0hs6kgb;^?H%19)xIvCL6Mw@Rq&%;aPmn*bK6sFdQn*qlCpd z#(h+Rj7e&UrF4lh+5M6>a1vJooQg36Y&y0j&EyNy!H$Fl_K^YAqhmb~c);Os>56Lk7RAKe^cqNu@~}!xYLyodY9^?x94{pn`FBP z}$Y-JKz4!8*4WQAEF61$(0M7tM-z`7@X6G%tVyxZJ% z++EEzr~$tuE(jmr?L#J@X3ur*n&GXm@X3n&Qn~zl$O8W4Ao>Hg7UK)Z+Ii2KV8^z_T1 zJ!bNGG+HKW#fB%>Vo80TOmuW(vv#e-vIO!;fy^p^HBy+ye2C8usMl*LJ4gwi;WeEl&)sQoaM({sfA(Lv#C={ugRLP`Tp;8uJZkD)m>K(^5@>4TY`E0Mv9(nnx z>8X5d`Il1r$b@3Uj%MAad;CjXfb>VVcO92Gsj-(wm+wBDrbs?{oTb%bKoD|W8E4D< zeZiMeI4gnEZX|YxT~rS?H}olrU;h}B16e1rOX^wHsZ`5ax&X#k5M_XvXVJig7Q&LR znKl*oJMlTgew<=%V|kh-fBo3ivV=%`99-zZv)pjm1dK%WQVll1P<0F62|k$iE=VQ8 zDoev8JO_kexT)O&V^az2mb|-=m8t~zYxHrkUca$fTM>ed#7R{lr0@z7{-S56dS!-PGQH=iiMx5O}$*MJgY^8;wGu_i=k2172WMsEKFS&YABoK5B5d{n{P zfSak|Pb?EtT``VJ1ao150jldbA&jIWsC+Opz&3+ZE`C=TYiXPi!JP`Tk!If;A4}~r z>gji`XdNvf%ao6+JWz*G|6BEUBI+`^+7R0 zNhm=<{PMt~CE3a_tbm0WcH<{TgjSYd`-12* zbX4^yh$v`>4AVmy6td*81bYyfZBe${!9AiZl<7{Nx_fw?I_8Ru?`Lc+H2;2&j0S9M zd}$+u8}frVY>`M}%x7XDzc3HnXMP_$Li8v{^vV#5Q(l&E^ayDtEXQ9Vg}m`TLOX&y zNH(7tNH!x%#7#uxMLt#BYHae{{?OdXTbh2G`u+i7rTdo>A*#GoC}bb(+Alm)$HT0n z!CA@xPMOc7QRWYE%H$mi!Yo$Hq~7lV%7$Lt z+uDwUR4u$@ia-wMbC zgXH(G29n=UBum%R;_Ne-aSasY54}=aU%$Cpt~9HV{L$-BqmH*aZ@Cz;HF}F$*50;h z%akSDwfDL3NBD9jG+fD@J9LHk3BJ|AcM4sldu4q%6=C>rkza{_9G#?|O|!#`oLHiH zK~t+~LAOW-+(j$4Wr_N+b3LYnz0bCH(f5(e?xOO+*_Kmf#Bq;z0yCk(z&QpNzP&x#=NvZFw1PF*T(KIX_Es`Ep3*xIj@hM!X*80u@}O;o<@coW_3j=^mWVCkJxcgX zoZg0B8LY%7^^WFx)W6dAw->st*%yG-Q};S`;j-H+3t)|baVE0LvZ2bBMD_#XCmX0stHv(tS0-0oCeQqF&n7$2c?wn8taB2Phd*E<-jW{5!2`Jx%Yha0z^}%WZ7H=(Aa2R^q{3S)LEj zv~34&N_uzn-o1PGhT&eQ1IsEG9tmY}hO7(BLqsf?GBmEdJ46&kIitKgbU{&uGKwb9dseE+F^z@+oW-63ww?25r+&gmKlXAF#$QOnA$nZ zX`4}hIR;Z%I!l2!zD{AfQNmR@*zl~4zhh2tI5FTZk#~Y}c|Ad;kuniFg`0IkYQ}Pj ztp>Z|m=dKCEFT=M9)NjRcz{rcxf8pZIRI*G1o&4F3bq#8*B0`4H7v^jf(23l9I$)t zY$z`?)*-A2fKr94oCNddF9W0IR&8D7Yn@|bdoau%`x&qZOyh+B2L=)_rob~kwk%(( zKH78ek2=FG6L;<}Jv-D1hYM^!(E2r#}F zcc?qbM1o1r?)H3F>lu^Yo@Y62yDeXR7d_F0!)0-bc&MhXN`Q#W09q2q--l|+kXkwv zNa2uOhUcMrkr!@w9z~?_l_g<9hh;fbGy6_kh$e?>Nxu8dks(quN~F+}PNv zlp8k>4JydoCrBmq@_i&|_C~4LxLT@h6sw1B^4p{)Pra0zBQLT4V7wnrX}DQmzFJz@ zT1ScYP(Xo;2F0LHu^VKYnqe>jbbWKJS*|v(7i)(eG2E{!+6&g{EL_Z1u2i=g&=x8N zhZ>wrzQ?BL<~NWNY?L-OYd4$g<&E;;@pxSt*GOS{0a`l0S!G;hqqGrRHhHLlrDLNo z7#^yLO=&>m{HD_!b9^~nD;3uP@T;}WjYC6T_Ip3~T6R@9EWt0B?OD<4)lzZgK6t1M zxhN0iz8m+&M%&V~NoBcC*XLHvC8s#ud+l1Iu&1xRa$PSiUC&=H-KpZG?kWBxhk~zs zugV~AlS4Hm&p+Ic&eluydU>;QzdMrbW5Zm89?K`bfrMDS-4Wm&FY#**~2V2z<5{k;AGm-AZ(1fS&#ZzHhy7W zLLXF%WtWM)YW8gtQph!RQ#L7l*SCH!%7sTI9a?iu&1k6wbW0jGTAxgHNBU4$LkL5` zj~D~`^}yEhijr%Yc8>W6PjF8q20)SpuPJI9j&1FcJ?fEc)}?p)ri<6!k>_H3WI~4F zD-W_+<-$|p+}IccS1Xtq<6aQine@d!2r4JoWWm8NSy}2fK~6bSTUm1HC}S_HTxj_|>*5CJ*27Nz=OGVe`+5`2{0Ei{}%`24=83O=FPMkVtC z2||zjw>t* zUP#RiP&(9Y#_=*F zZlN3iA%Qc&k3lf{fJ=~&tUurqQL8)0&~GW1ASAS22n((X$&fh#2yc0zWQL`M*LUJX zC(37p5{Z*d$QK_FQfy28V7p~U!qUmfp@i6P`F2YJ5)pQoLlTHM`}%-F@ce?W{|5r8 zBzUH3dViTIMA$YDLn6}tf;$U(wJ#poPJz}@vF+et{d4;`&B}4e=l9H&((Tngb(gN{ zi?6@723FlsAzGs44co;VOl7<4;oM$D9@Vd~L^-K z&2@&k1EFs___b6XEQn*6j5Km_AdN)Bp#X{Dh~WhD-3<;6*d2U_BLtC^^N;u~2JoHY z|E;E4a-U9LN<(we!S;lOKaY<57t@gcKM#-}`Vok~j{joLfZe`l>X^@o;(Y_`{ygfU z_urOBZR(@D-;(J!c$ft^T_rBlW5b`)`bOkh)jt>Sa1Oeoq-0@L4?%JWKcIt{Np50c z9>S*J&*1bc+;yA*1F0!VPCzfE2eL9iCLEoRM1FX5kk8i%^q3U~uFnRph9a1f=c>x} z+OWaFu5zNf2JU#!#jw$m&-_krP{Y*NB{X!H&SX;wG(_y0}d!8polb$AF*l5Wo zorzk>6bZ2!r=(P*Fuw8S&B|(dt+`UhBX@qb6Yjak(8~@O(ZLxF&WL3|SL^+*6btjK zhlx=G4#z`SMEuxkG_kj~}(PEUt1?Mw2+>aoy9FUGGHE^~z0N@b06 zBE-0>-8CH7HtjZb8MWYTp0R&OVgrZo(YfYxXIP$kSZ;F(Cs4B;hwkXjcsk^1=c*i%g-@0RKt~*I;8gQRU zvbjTDk5YG%Y}q{wb#t-xS0HW$USP`}i<9$6T5vBlVPFF^2#z6 z+AQ|{4w;_HV@a*=cc|@~I=>UeHo_`Z*V(l+(Km~zi;F)}%w1$rW$^76eJ8x{b(b12 z4$bm}_pp>2ou^KfZk^htE#@Ddi%3@k&*>x-9VjM=Q1nna+SKD=VC)}b%Dd#rA$dhVUs&;~iHKdM$oG|f?!LZlJG&MnAm;lGW^@NWZ96{rCt(Kto~8M4Ram&!Ku{0f zi`*QfI3(*##H8}XYwlk*`+NI#6SBNWdVSC7}_D(3=K>%I;_YU!cHw; zEmqb_8zmk>`N&4OQr=8PZyfKMw&}>uk)sf-1n18n&7PC0!M?>t164wacIZAXyS>B{ z62NyznOe^jn)OS(z>ARryR^kF{`+1oJ`O1_C~T7n=`~{S7C7bPn)B8VC5F1qT4Y3J!1;?g8Z&{bBAbelZ{qN921f zi^B8Gmc?(_Dt5KE9Glcn(Y-dj~fyMA!4Q7rF68U{7{mDRqeg_10p+^7m zdtJv6>yQEb*&)qc;XPSh$Gg)vecwS!3A93VmKA#AS*euegsS6+zl14;iF zX0a4zydZ;(+-JO?#F%4n``uJdprs3(gWAzOnq*ZoLmPoD<)1ER^7N$F{*<50_;1 zdQ5T`+$6U1vl&RXmax6_%|G4K*H$8J%4#ootwYB5bV?`JMp1#Rmycl zutp3u6YnK-Qb`PFI0+~4Rd)Rxz!{^+hh)8YaN^exwCO| z>DtyUZFQ!EYDu~+KWI<3=u2}<+VX=M4={o)GMQU5H|9Lg>+KqTWovb2&wQ(X{gzp4 zRoizqRu^AoY%k_Y4(KqBe$G0iCy@^|jy2pqh2?r|d9zk;Zq~|cow0hSRKZmJe5ITF#+>qj;DXtgkmAf)93WsknUo6Bd6cEPkzYGgdkRL>%@RR$NZ~ z&h#@`3XpJt!vq#bBqrb$?*0Q<4n62rkf!v=E*aNhT3lM=7ahawa9 zposL8qT#5=*r=nxGo=Y$5%&^nJrk}^7x%5={nMO0vJiLGw@rUf(2Gkgs(CDf%tN)( zdZ}11v1nv*{T&|_mAZPl(OvbgS68M>Z~5lNrc-Nav-5X~8=V`k&nzuXuWf59_Qvw2 zHUHXO>UU;~Yp-wK*vXe~ukEeOTe`NiiUe9OE!Rp7V1g2X%1azh{w$(=eXClk#de*@ zChoqrqR;JJTdx|syINyfo4)S7Ua!w|7x%8O?anW5Lbs0utu%|(aUkUK#D zA~5F*I1fl+@<9dW7Z#?)PL>A}aQ)DQ;v|2tUmZ_(&7NF`KZt6qKg9hmQm?EyhOVDU zjdif!MIh$>L0~?=zHiVq%nQ@~zo!7~>-$AvzLzePKsz^`XfQUA4GYEoqx+lc0>tni zJ=Xj%Q$11_`%hI;6Vk7l6k0miE>PEtb83mt9NnVvVwy$cr^lHO4eM9fQ9Z}%`*7VG z97BTZj3w^*HXOYVN0{($?o-1fx)TNsoQb8i;>VB&g>WPDOu21WxHSy0yaule_v0dR zkRHpe4-vN!4l6W{hHqeRQe*G_KjSKL=n!v&%Ao?hkIq`Kj}+TfOhZ3vm@CeeyVQV% zT|~H}o<9KjBDp5+8wN+VY9fCq;Y3;BiV z=oKm{>zQgjQ3+UAu+89po@5*}&&(I2$4JD>At^ry=Z;W4)5}@#FMAQ%F!)y5>_SytB`M;Y?2H}L)T6_YwM?Ntitr$Ds}j@OS;%?(Iw!e4 zTOLq(`5@(&gLKEi!wHe#P}CS5ZM_~_3O1H-iqSFdH#sq_*acDdGof%Q2c>X}KrUqx zF>O=D%QxZb<0GlCyth!TRLOhQQ$>?ta0%41=pqM?c`67LT|_;huu3pXe~)A*+-5_C zGto|O^?^60o_UX97qW^!X4AXAZaIBS3?Dzo88ccumF@c* zdJ!=Zddt`5_d2&<>1^C6U%j@qur}|R({t-{)tjAHZ_Q3)^4;_!oN%}iduL>d$zzg6C2}-$& zm!3QoR&CU_>W$J$likRUXZPI1B>V71t(YOeV%A~VDi*DhZupE?#SY@qXcc2S3Ur$W zD7pW@ddZEttd6+Cm7Pt5MyHYY(dZ<6qRyb(=yWJRm_h>V=MfoMc7F?^NYV3*q=YwDm8)+u2k(S3z#LBDZVj>Fq9FeE zx03mSNEeEpDAIp!c#wCNoNQo731x`B=VBBYOfWcGl4J-G`0&O3j(mmJ4{ZIq7g z7_A)pl3b-vuqQ{~EI*pIS-vFP6|q;bQ&yZTuGvo)5AVuJ05@&nu@qk^T{K{C-Ql*mr($vvW`MNA2lEjKvsEWv7rI}$>8(5 z_JBacR7?a2;$#1i_$Xq(V+W~c!2h=CQlkm*jGjTh#vT3PJH=}@{XY5&GC~^Er3Sj_ zW?d@hdN~Q*y7WCHdYMc^%4Y(k#MT8?t~l1Rh3Kk6Y4Vx7!C1r|%yc zfOBHS5b3;ue&{k291iZ1JBNH74>@wSzr7c*!LvIWWK-8WGz-rK(;Qr-6 za8xK>|9qc>L~z3a9Fh+y$62VD90_(D1r1P9KOACg%d~e*YEZXhQWr-GQ$Gd+IXe5y zreW&e6qxF7?+G-8-^8N62YCaCM{R@j`d$a3In8Z>nUGyz&*{6Q*Kur09K5XUw(s=F zj;RUj7TI>4E;3xWqOI>kzJR_5SnrwLo<+&kMx#oqTMeiWq6~qY>eTZSi0^OjO?e&3 zbzC}OjUc_hJ?JL-Bv27W<1w5F3BcXpgb!CJjWA~N`8ip(OOQnj-B|c%hnepsNc0i{(1%vvfw{`eUBtNc7 z#gm)WQsqWzsrFim>37WOQG1uR+`DpKKFRtUuPm&;Va15cDqdlBsy^QYr{!j;avi1+ zmJKbTLkc*hGw(N0pDeSL3&s-cv?&V54{(J8zEkL0Y@doE_Dz7nrEs^rb({J=b*-?s z>~`O>B-JAv?$HT7mqzISloNU|PeJRN*x`0*i{A?2IotlO=2BwNZPTU(aW%tqh)Z>9 z?j%AsB?s5!{G@#l8`;myCJ-k=ZNYdW1b0}Frjg%5{xT#(xjeI9WK|mK@k2qr7sgA3 z3VtvT=945L{jX3I@sWK0Xet zH%gU8b7k{J1#Y@x$0t3_^^H~}28JyOApFTTngQklK^K6bsGFb)@sG;#Rj__ zke3XZ-G~BH2WIyeLQB|+a{Zp=Xolp9%O3zUhT>00i}(61%hcI1a=;@`v!_kmy9HBy zG+Gfae{BU-hK*KKA^F<_PlAS&<QF;fnUqjSx0SWk^J?5-PaAcr2(|B@xQ!?M679N=jQb{vtx) zsz4qw#(}(74cv=lvKLPiN*yO?rp(3Zo_CfdG6~0u$}}I8H(Ie$jKJ}I;z(f;?1H$_ zf|mHk`$#1yuQKex4eyCwJ+tFj zRK9RDBIrINYC}!~yt1gN^~|QA9yT~^BIL}W$@>(l)$D!1D0%b+Fv}6;DV8W?Y;IUl z#^yrV)3CkdtA~y$$_02OY(77-4~tFD>?K*r*|7LmguCK=j?P`D)41!`c^XO9xZti8 z>hC)4?d+~;P*OC=lI7@-t1EWa+cUGUN>euVB__yS;-PqIhQyEC4(9R#-}_I5QmAy^ z%Z_Yh>kS*;0FIXiu_Sq1BrBCVse&6;KwFu)8Fg+Z=j%Pyusv}vQdT_g8Nn3&hI_54Z^=pU2aXI z;}@AonAO~n3 zgD@Z4{v1Rl6M~tDWH1*=S-^G$a;v)&kRFvG#J9Cv(`eIg6UZNo4~B2p9#6~y!+^jM z;&q(9Wk5z%kNPm%3C*%ZM`C0N&ZtI;T_h`}r?o8V5!>$(9cYwzd$!JutHDkW&4X_U zSXe2kIbdzwtn>1Y8$PKtsxjEuey<5FHWB(enx&G7JR4?g_q#||A!#3VJ=4R5;kW@X z;^$z24AymQZd2)lM+rpQn3nKr&yopYZ=t@9ywada;bRTOWg_!rf{3fo6aI+;=jID13*zSCFF)(%dAY^PWtztHCG%hB(}# zZ$2}y`TSYT8u}wVl@;_Mww|g*?+WRidIa2+oJpPm9>Lmie21SO0J=H0W-(hPPhD(s zMDu)?YF%U?xKLhKbA8gd?oIMnK#VQtE-&77THx|zP`vFRzR|H&mo_kqodN!X|+26qiR0N0`b9)w)%q^z_w2Y80RPsQn zZd^p?!Q?rsW^mxww`xptpm%-h+Q8i~qZWwH-}e^-4+F|W-Zeit$f$H&fqQ+0O*pja zKE1Ze5?z%WH&aZ)C)=*Jt=U?-LHO}xWnmH)6=j3)iC$OJbo zbo~{LV`+IvXEc{;77}o87Y*I%uGv^oW~ssya~_o@u=Vi?2U7oO{s6rTz-$Jlm`8%* zBChgI=v;f!Xa%ka!+~$i*Vr-d=+B;tG2Dwh<>1Lt#*yJ0I5H{?CvECO{w&BGI-;as zSS_gre5~SIElf{g?nSX0YpHDgh0uJ%Rw!q0!$KKq%c2yHl(LYb7f|gae*?KclKaEM zQbUgCw_VDQ0Jn|zVDy)XAc{)Egr@|l9R0NQK%QA*5#TiJHu*>*LZHha`H9fMg_0F?#-hoc6vd)m1L&p=DVmAax5G$!8Gc| zreYiNOg_J;&Kz*Ta*}n6u||(olI38+a+$%X#0QMg!VJH>slDz%ToCg^Cv?wrKpR4z zLta<@Ew>|~T-YNg<4D0c@(t)vRLupU*p9Gw9m)d1PoV^o$-#v3*YS0rcHMvBM7^yTK%?ZqZ)47 zCNSmr40^1DN{~&7X^C&L!gW&^A114GY<3Ep+L(98YJw)MBA?=oz(b>@@=Zy42>I$$ z9-~>oP{E86$~0m?;+xNmgN>`n;wAsq+HIG%HJ_@)*V>c1rFq_@=jzR_rcWB4kKa3% zX5&N6!)F>Rg7yF?gFm1WECD{jAHLq(wzRf4iOFLpeaD*wTourTIs0IGXu@qTxEC(+ zQNb&hZoAa$;Oa?tcO&>rNb0?(l7a~Fl%6(Sr*9k1_O?p89jQI+N(GCM-`rVjKHq)* zX8diFZ80kInBp6lyzPt=65X)|kj8SYRBV(;1JcNn@+zrpHc08Ua=lTH^iMAF5wP8} zO_m_fVFQa-w$|6hi3Q0|N(FI^nx+BixoejS^DidLPml?@Mpx6Do~y$*WQ|WLpI3wb z5;YCaKSE8w8FKJsG!I91sEKPHj^$8g%^tRE!mVxq{RlWG@>BR;KUz}8sn(uPz4%(l1(4Ja z(UIqC-ConQJ?cW_88B;ngc7*Z_wfmN3v9G03z^RsviLvA=T-bavZ$=_e$UVjXj>k6 zwN~CJ)^3t(rJLjuaK(V+CIu<69|qV%kvVca#&3Me@Nbf1)ntGx{Ff-hI3p|x7?fl{ zyvQm3#gFkH{A(Z9!mvQ*DR#e`#0q(;24&&kuw@}Tna;l`zmI^z?so@`3KAgH8nD`% zVizX!C!}Op=Lqo4uID3e?s$ z_V2k#GU53X!FVstPm&2=XD=5f$pqyU7qLb5yl{DvO!N)@4=B~`-^D>p!y6ahh#^j6 zP0z{ty;&?X1A~UhcMJL@mu8@j!CRZb(ninC>Rq38FpD$m?aWJ~oP{~Tv#bkNbZlpq z&248syX|Ui_6TOYx*?n_H=A@5n9piW~b-aKN)m*7mL_tfCYs-AWYA;O{vjB9txGK;1`Zf z6bcM7ceAD~##$&q%^jByu229-S<`&!3e(uDXTnSbLKJ48il>V*GceF?eL|4MW(9BL zS}!j*2$Bm~*#xe2wOm`Nw%sh#YSn8td!PEjS{pc%PRz^ z3)O1T*kM~?tRYfe(t~`VJ)y=lK&H`p=5-;biCY2SRE8^FtQLH-+%PJXXQBCUAfl|Z z*Q2UXN3x>e9ZS*zrPAyWPlZX`6<+P|aol#<5bk;G(|4_iTn!&_bQBY#;gcd=!-oYk zzv4MIi1y*k;3E$7RFa7Z-{R;KKA_koYkHmq$95{o80^SRu0q(xr)w4kJwPZ$(jp0s zbH6nbpr7FCVW?d?Zo6qlfVJ&d2Iv+OVIj6G(m5I-%t|G#E(t55ndd6*gBFxw>S^L_$211M1IPPi z$8ucg)or&l*j1;2*G&W8FT9u-WCl#4P`Vg`lDt5Q7Il3uSz63FFj_=s^Boej-wb|B zGt5xKM8zvHyUex;*nX30Zr#^hf5Wl;PDYhg9e{MN({LQiH+!*H2xw^yGnQ%J2Bdi7 z%@Bf_o@P@Ep9X`ABgOv99sqzZdOEL4!c9O~ur`76G4O>$g->SNq?WPl*xP111qCyl zl;Wt*(NpJm5XX6J85j?&y59kv+OdqlPbK`sMuYYAzUMpLl)>Oz%`)3SOBsj}OaOs3 zKrL$%E#2wE#zF$iuo-Ek#3yBBgk((H>rowuUU19kC#6=VtMz)O-Hs!Q_{i{y@)z+5 zAgQ%5cT#fg;gj)v+Kb~|_(@wLtR~hl({?GfQz44wb~LLG>nReKML#JMhtI*iy3{zh z&mf~)^dqwZ@d;Ui_{2*khMIA9sOv&{5v1h^GQwsL zQJVyTbe-f=ndeX`!LfX50HSS|Q4%Vqjn%_pBo~SR1gw4+w~F|>vQJti1W`|OwJ!Ck zn}!qNXHb1?Lu}g2c9Syl@DprVBH>Y0^q-_4@rm<3@kyaD_DOV--gXLJ!DrA^A1J5< z?tB0&zGf*O8Lte_{{U1eFyfy8RKi~V0k8yUlAi!rQ6~MD2V^O8OXY=`w(InJOR%@y z@2&uWeXb8R2eCtG_xF5ARF}?VQ@3yS3D~q4X3D%sD)&#Htz~vi*zD($(tR9c(SOI9 z%lM{`W`#^0{dP$96J&*gV>Mb(Vt5kFf{7T?9Kued4l+HLLMWmT14Dr$!wyVC5pGsi z(|s+Wd}Vyvh3ne^_R)1Zq)`VWp7E?*l5TJsP1w?z)FS0N;K#gESi~crvTs~1)k?eu z8$G!~CRiZV1SwWlCcKt1KyYLB(3s)vp8bY zHt1dI5|*aa1y8lRdjt*7#IZ4!r|0zgmgW-8bqP3#=3J`j{w)vJ5p*v7HbjL$yi6N| zyU-aG^C9hMt_im`SFhLbLfomacdy?AvB@JX$M2Aa(s&y^udDb55vF_NK>rRrIX5ja_$-W_kqDJu{akjT9Y@3*a$)Y~x6UT@$ zXPb?h!^C6F+71L=!0^RLAb_dg!}Lt1OAT^qmlDH)xEIZ`UYv@1)^d1%D{|5NzwNyV zkR8c+9+UE>xp-qdDm%A(3IyNj@7MEj_mSoAa6yi!t$__21)e)k&q8O4Dq8wg%?Qn$mur1rV z9F_pb_vcYr_3HHnjP0=XfT*g@>l4bVz@B(8viQLO@16_`> zeq71jCEiNj_L$AvzI4wyc7dnBTcyC6FA3tK!d)WXDnU>4b`%YYLcaJC2Z6Ur(TfzJ zJjd`MQ3~EFNgtBrw?mv`$k9db?WYIcADIK22jmnHsxT!?>JuoV9b zzU_()?MAcJh@3pFwp$*Kl!c*Lr!!)Kw`q%01ru}E7D-~F!KAU1HyMyJ_{%Imx%U1pQqr>&2hLEVlj z24DG>>C)hN`cCIewQ}1_>aYU-QCZYl?ECy|9Cka>{@S*yYY6$+5NU`P9}aaU_=+Uk zU`N+txBBw4t9*wc_VDU6Z#@~Y!!MM^sGrIlByhbtE3N=@&bnFglpT$()ZXepTOMie)+Nw zlk%(yX_Tc03G_jnq_v>)W9P>z^ysVw?dLct&S_3RjE>QWi5SG#m&;;4Lg&;G!0+GP zJ@)IFXX>86-7SZamoF;8=nBx|L4T(O!dtU-H$KEH-lcro+XLve%L(mT1v3N9nhig=C zX3~!4mkTX*EP4sAR2m7L;ISg&@RT&3K}p6-QnjKQNS9c&Ik{pi%`C4N+&_ zn$~6u9xEJ7b7_VwX26sxu$x|Fi&SZ;nV__Eqcu{)F%z>6k2d6?BX0$E4Oh3CjSzH? zoE82`(IH|a4vEa#j%o628OWyOZAZ7ThOK$NPD#Tt9OR>i={p2KQ#0_>&ZBKa{P0kg zT7yywL&+4VsELzREf=7=fzO<(<>T(bJpt*4q~+r+4PhPu;vb z`*yf9UTwA(oXfLUmh5ro+|=bU>(aSvQ;ToknyZ!WROd!)yY2`<{SasYjF_Zm;>Uk} zqLYQ|B-3xY8ldwIMRpIkEz&N6%I1wY5HWY_T%b$zHu#IzqMhyb-PK0Wgl4A zvtoRZMfTEZHOw8KTv}M2pPpKsQCp=_XkMOMSroUjwzpF!*6xvWqo~u<$wpEB z>1g0l1D9|+0 zw>uixC0@$B3vyV=);3g?I`I=_%koap@lp<4eXS}+lu0n!^&*M4z37;-XIO^vMpA@` z(e8qNb~_^t#Ab}ST5Q8=g9dSQ0V5mL0O)T^LjE39OFE~^?v6~57-#kbiSguu7;ZY1 zDtx0-d$R|ZJ#td}$H%!_iT1i`B45Byj}sl>D_MVGpPj!3W?(Ji-MgsoNEe=)2+avN5Lo% zFo5~UX)~yYdO4rS1pMcXZ$PP6gOwzs}ckMe8n2(s_^PGE<|aIu!I6+hm$ z*6`|BOx9!N&ZAGj*it(1un!$7o<-0k?-L!jF?2EAh5f7IV&cWXi@c9j3WfNh;);y& zg6Lxf=&X+}&rB@6HGgT1Tt}}iT}8p-@>cz#=4XiuL)#4Qxb=c?K1%2L0Od&uWqD?0 zWp@73^4j9W%4H2ytnhX-thGUVO&NubZJCWtdxwruN8NjiRypf}evB9$k%g6?`Wc~OK&^<+m+(0HlB=}w|VaBy3PsJoGvXLZG3V!A{eTgv20NqKZ;h2OA z_yng@x(;ZC1RgpV{Xul~i6Tk({=1HwA$pj8*+@?zYWfg~15*=ImuJ?dXUTXl5H`I{ z8^`xB8J5P3vJ}UANotjwWcJayiRG1YY4t7l-lLP90BYt+}ZpG$|K1`|xx8 z*RurOMJecH*Gf^hjDSV#oNz+JG-`IEb;mXuW@Nk8j?uKuuodt69T^QT4AWcA5aijBvuOuI)<%pYO>}Bo zGc=FBs$qqMP*uSRDYc*O$d**&ShP}GFEZp52(w~22pGX$7$pIvr zYMqdAZ4y0Bz}1h6?%bCom81u<-f0UTyNIVx{^zC{(l=GjN#wosWT!=iGi0=sQmij@ z9p84y@9oLCo6Fa(uE}dtNQ^ekz%gr8EaAy4MsVfs)a{X(x4o&6Re!v=FyhazJ7dGO z%d6Fya|@+y2rdCj+8K0M`t~#9VzlLzZ?xWQyuH}i9-qE+d*XJnc6V(3&YS1&de>%e z1J>ibUP}uLD+z#)h{~N6ZP0IR(%W^E=a+VS*(QB$rI$9wQ(^ozE31oZ+#L!Z zP&lGW8YbdgkMdkV-P+>n(xpTe-OX^EWdOI!OwUZNUedwqZ8$0~@er9U7^b!UNI5s_*WH3Qi@L4SD)=xKISNWA-sL}N5 z+@hM4W#v$Jlszg_FJGBmTw7kI8KKOfyRaT8mCuteI=Tn3Z+cQK-^kP$xn+&^#qwxc zg5O2caMPCr)H6I>JV)J$#0yJ_{?V^d>v3EBrkw#KT$;H!`<6~c9g{9EOkGL#y54iL zO0p*)6689XjMJ;zRVRPl1G94zmuA+k&Q9ue&{vU;no(q08!(Ch_EU2cvsdY|xV4$N z$(iZ3xtW#A3tS2ctmtd4kL-A@H&TmiCkX`3J+DnnPm>-hvz9f4_Af&$@4=>c}!c#mJ>QS%S{dJ+Pt@!YC;oGl}ZxT&TM31SQTQheX$vie*}TRBq)qL)@wpZ@5h@B8r^2#M1Jb+4F$RCB*CvkrH>L zcDLDCWGu%lrBOHYkfpaG0Z<(L@$&YGj1-zND@baZ@JYh8D`}dDHMUN1QnbMT)E@e1 z5@*`iyd@nFO0j8r%fzdIlftVW+GaK?miCy8y=>$U z@S~y)<7H!M=GyA)(#&)PcNES};a)^T8jVz<0|1tgp(9?IxruX$2UlHXuL8*G(g9|P zdd8Xg>*U_A*0L}g7mWc((#(^tW?shiK4xeeI1(yuKf?`Kq8Tt3wrr!iV_0UR0Sm&% zxrm|@Y98{nTqBJ@LcopA!Ew(cf>_ZD29W_eN0+4 zrHWlK&aAFX$ptvni0kRNg)+Y?dr2E%aLl_X*P0%fE>;(D-S5n_fkh%?d1YZ~;?m4R zp^*;5T!j|hxJlA5vWGH}MvQq6t*vr?{7{-F6mRl3BouNk=2DE2ECEA3ek`N!1K`JL1QL%*GOTdbfGN$R3Jtz2aExDH8R(Cn~!ReP) z7+_u`$vi#TN%+~1=YSPMO!nfk)ErO6X%oSRMkx!cE0-2#=Pw!19*yOhrRy_G4~1$- z8^r^cT|hsVJ%DKklz9xxq~q%mP_JQmE6aNdD0xf)8qrWpOaSSalp>tKJ7rb#mI}_{ z>T?^tLX-;ncf~j(=P|Nx35>4V?+QsK+zlA+?oLd{a3P_Zww-xsy$<NB&E$xGWJ0V)yI39_!?JdCzmFc{wuc$_%|mpk^`|M?JT4I6ir`hgSL zc`Tw?8wQ-Dz!hA2CgL@MA=5Xl4SUE7^d$+NFS+o5h7obJO)@A7D=cCAA_MNG9mklU+xf)z_|Tz1i#l}Zn{~Tl$QxF9>`>Hx%jN;* z;v7hVOEOpHI1WMNsVU%@v2ko2z~jLWCtiJ+y#rnmlttX~ZTsSu961nx+38rpwePe- zGBNEYf4@&`2>PDHQ8Xogvo9&sH{5ux39rDsxM58c_woubmOIMstxUJ>8ESEQFxYaS261d#lrK% zENxkDq>rg>Z*LDtOu)(n?<1HZheYRbMe~8}dm$VH>}ZCl8n#k-K8)en)Q=63M#1#` zG(3I|j4mD=lK$=!qX?lV!65q3nbmb-EN~;!acya{;#dX)#TKhLEX7n~MT|eiv65Qm z?lAli1foy^-C@O;RFzx*>ADu2cT#pHr!V5b`T;qxA4djTjVM&?*Czs!Tk`feNc^K} zOJ0HHO+#FWWaQTk3BM5fwq4t_BWt7OW6K!|9kRkLeOF%LzSpAGzU?HcC?&&E%f*1{cs0l3$4zkG6ahA%M~QtX zXVoSYfku8@m3%@uuCNFPTeg1mRNGF1y^@Y)3x?CHEw!pPT`m)`#12N9ZD>* zdyz81fk<~|tT=}4?R>9^oFhsV&p0445DP9oY#g?c53$+5>A3f-i`G=+`i!>aOKs)a zajj^>arfLBCe!KbHGBC(gIgU8tVavj#9dh4aV^Ezz2v_DY~7=F+J4306C1n}swS4Q z;Ns`^R(S%vRf3bKTRyUU?wSVcidkvtI^jns?d_Ih@x)jXN8*>4IAFX1m=Zrxb3zL) z+jsKSz%y%>8Aif^&q21FNz7^E{D2BPJo`_A{nPiw-WTBFov7+L*EqGU>kr4?t z0^Cx`PZjuqR}ai4?KO+zY@Rwas&=$(+pZC9dzgnevHuMB54GTwIwfCJ*{Ks~C|C1l zls#-`FCZz9iD5ZYZaYs%Q)Fi&q8GR71TYZV^x5jtW^`qViJzim5Sx_6?#&-Eb67ios@>d z-v$4z?zt9!x%+z&lEVc-M+G{Ee}VwwE+*WttM(H4iBKwN8^~oi;1Z$ zE#V0vCgK95oLEtnF{bC2jb$3SY4YqQ7m!=gh8H-vuV~9Q%+T1j8x6bz+iC?N0+C;w zgorlGh_bC(t@8i{)P$9Ud!I=mC?G@iNeXLM_h?y@qYPdU<7KQQobV zNBYX>FlSsh6zPR>q*z=eg0RR=)KO^Rh+IwF{o9HEVc-10|B?wH#S|n8UfS0bql;m4 z5=6n{g_^hR!n<==zz7Dfo=Pd{mvMV(Hp%J8r-X?N?}Xgo5+M5sdgkyI1*RJ|oe(z$ zldh)+99{@aXXy$*Bc=*^5mF3jj=84D2Tf{>*Yi|y&N8t{#I8B!du=MyYY-dE^x1@- zBEijBdV`*r*sYC|BxzJK2uLw#hK`U@1oSu$XJK?jIe|KK(-wWZbI4zzUS&2RseTiA*PnCusL$4(DFmq^edyN z{}KMj;c0y)i`M_Lpmh#hQu%}tI*yUg^$@oG&eJ*^S7);zVbS zOCFiE7CoG&m^8y(kD{q2uKLTa=|AxJBrrwvCg#Pv;IjiEleZ6{b#rfl>RRt%M|f5nY6Cy4Gpj5 zgblMCJNG0b1bz}`-#;h zaax4$@K8I7A87^LS6rU^iqnr|pAtZL4E9W7Pi_oq>gw#w{7Oeq)7sA7fe=fY(Wbov z5KpVx2oMviE0@LTj&y}$dr`d1-B;jsRt$H9{|&8*F|IT%WOCFiF^#lfy(pxbui04A z6*)X_UCQFEAC|n8#J}XP)nGE=!Vgm#G!k>2mQQQR@Peh4VgL z;gLxNDRkhi-S9??kZCPZJ+9H;1&v4*3#o(}b;*P=A$CkIDCvTtH%i&Y@0?yLf{rN7 zZk&2f;aPZ8++TNqh0|n2Z2YB;Y^>WKxbYQ}juW)6L-vm%`+f*3Y)h4f(tgpP*iO;M zTT1I6v7ut?x4EGL@5F>d8b4bi0p2RXBfRl>avkN`5l-yF__-|-4avI)Fq^M@oXzI9xJS6nBEO7agk3#KM2qoX6GkqUpx(GX)KLWU`P zxRN3$1s`cfDb1)%Lv*w!qs}~(zDn{fM;GyJ|GxNkKW=H|x%8jy=o&BAfnPMAv|DDY z5pA16&2}*z+Ol}3l1|T7H7|@d6RI1Op_%TTFl6SCl8uVdF$(r<(Lf(1Sh5RT7tG#SuV#@OWX%v2Znm2~$g_9Wq_Ykp7#e`S^sl8c|?Ke@P5EU0pl@-bg^}ZAZeLu;JDD zVDmLG*yPw4%kzjK?rUqJRttt&HUC0ov@~MKxK?N{kyqr|MT*2lvHD{Em`r$ZAZ&0b zRy!pknsyX8R;d0a#AsvP37L>%?9i+HZ)P#@uSy2idquJ^d}U!nP8j9w^>y0@pcU<?s}|A1RMj=#d!rFdCLd#1b3` zmGZ{>0}e@~BqplweWyVXB#Dwl!T+;Qa|tv{sIpJRNEF?&=YF~WUo7k6osb5c(?6Q2 zR+jd`a-sqn*F7ppM#deU@vdYs-iwb8W?rHQR4^ zVl!RaDwk}KDCmI9B{6hB{*u|W4bul^F##jqtCr%jF>o0@z-1UKryc_KK;>;jK!pB% z9lhh}bGBZFy(S>^fkJ54q4UI(u}8O@&<;E|FJt7Q($NA8*x`n!B|fDR%P4pW0OVtZ zXrtAvx~9{JVLv95$8p%4g7n7=_7*%LS`9~=89pvEXp!;&b(;^SlQJ=1phzxXeM#JD zg?9#jX4^L5pb-v(a50Cs-mpB+kL;iz%F$S|PZoXXA@FJzC(8Q@1$4=P%du7SEI+Mh%fjG7%` zEcM*8M$;p=N?OReY2nDG<<&vO0P#!eg4-7&mq!wzsj!m z6f;;w`)*67u~kL?qb=dyYkp&6V`I1yY)px|-~VrsP9dA6G$4`um5$T#9Q&ANeLjc} zpJ$hE&RtxXzqy8U*K2Fj3v&~*^UB8Ezil=eX4On=W7Jd|Ga$#jGF8U15YD?mD8Ec5 zJ$Ug|iMQ=)fgCG@xYD3*$HM&x|C@_lX*&3&T}%hCy|=HOz7)&cxKPm`P2#FX9$w_m zWr^J15Xz4%GDGGXfo<0EPLzk{K)0YahFW?!e>5rRk8ebg+*@ z@%n%!jXL)r*jJGj@$Z?VogBbD%5-N_$F|LY-_%>9>sEAEPy;GXccK)BV!a9Jr3;-n zX7}_sa*P_s>2{)klN<-mA@ZzYmLAgw4x5QJC-rqpia*!=c# zG4dIXi&N12`oH9msoBEY@uiu;_c4arRemXXYU~t3Ix%?euZw7eNeyx@jTOg7#VE%| z!M0&e&>uIaOY$UGZRQ5}2%475rCjB11sqKnK`{#ueoii^e$XyD5hF+(r{}_0ksTwM zEP17jC@hx$*_nBKClD_i%h)OnMMpLumg=g!wDebLv!wckvUET4vN7TN9nhpC`UOcT z$|+G^M3Ml%K>kWqfx1Y(u&V@DS#;sMuPiSc7jbM;kcEPi5X%?J+{+2zr5 za*o{rFVF=)@_<4sImnWl_@ zZ12kK3U?(d(#7MWz9ETA6g4tx$3x;(t*?qbfL}`Q0mLwijTAqhwMlSb+pgy62tPM> zXOCZlS(}o1>$RDkXo5C=<-`GTw!Z`73t8jWKa=x1LYf@BCg?&n1KU$-kR<$Yv;4vc z_SVIz8KY*0n~~@1q-|_DCK;~8Rb?1%s)4s1+HJNfZA@!8ZtD(TZ!T~q%!>+HW@OjB zU?=vXM$<#Hg{3UNW=6JjNuw_?3FHwYiIt^2aZHI-TZQvMQ40v^Z2n!H)sBr}Yyf4( z2gwjZM0kNyB|&PFB70krhKr>!Y)*__p#$=8u~bxB7CD_!0UG0%>eZLXz<&L`=~J-0 zVnQ~^{_2rV)53nH&l?7|y`bg?b{K+DGdzQL)v9}@mtqf<=&Duqxz~x%Yubr2I(hl- zs?iZsDTtC4OS$$=RjP|mX;0l)Sejm3nps}Poov$At++r%_Y#|goy;cZxFVZA2}ovp zGEth2f&-Q)XUQU)E*s@q!Y0SP(7o&KpwRU$6CX^AA+EyOR8jJwy15eTKU zcu-2`TBsaeNDKYy$xfrv083nEo$y-!$lH@|$vw|fst=fT+l|g{+g065dT*&%93@Zp zdLHR+JkF!vHEaYI$HuCom(Mr6yQAZ)qtmUjH8QnsPc4Mks+$e&xBSVuiKW?z>B*#5 zVYEY)qE(Vty#k+3_C-Zbmh@=>_RRgDAA-yjQb{h6I zn7AV@qg|=7U&{~=l_!aOU_X0~j@fdoh}Rm?N^Pj7rWQvjgcjnV7a-r$%GIFA+w^L! zhPHlmg69#zuv{YB7m*&W)({R#gIVtjsaOjF0FYw{2wLr&< z=t3YyF6BL&P9KJif`vw_PJ2|86o!pF#lT@c%6cX%@20&IXMIG=iU^tWeOWofu(4*v z2hmPwc`dc{*j`_^=|_R7Z4OcOl`(QJ$rI^Pn@%;Z>oJK?ry9zAFpu&p7Q;q?yJ0LV zq|nTkumMAGd^!Ps(YhGx|L*j;P@FKuJbCgAPk^`DaMDXOE;ooyi6nTdBtpHyJi3SB z;)ZsUvUc%!f)Dcq9fE|HGntutFdkgxow%{?l5bU=ab4_YFVbooW0EzHxW&aT03%wH zy}jnuxF$&`uqN=1$SX+LS$lY$^IDe9dA*O@w0YrD;hc%xc1|_SFf9x=g>k=CL6C~?Lt zK68kz>^Zm)xD5SM>^2qtW2O4Z37|uTlfA6dN~by}hxUr0^cKp%U3K%JpF3rShi?(Z zhga!jydry<+o6+VZ)MK`JCTj+fug%~c&RH9_ELN(Z%UVigDxnuNe5kd;|w&fVue46 z&!zJ&5m%zPQiWr+!>mD|Tp!RXXSS4;nUExw9^voSz#)PG;m(y1f3|2UC|&%8kl zcGdGXhx{EQpPv_hP5Ay$ zj1>%3NzGW-ClVZ9b6U#Moc@|vO_9(gdZZ2&-}FvLO-(wVqx-YfWfB?kBm{D^TN7t_ zpkk!-D^X&~nx}ip#i$_lCy_eAn)^W=v4uMI^5A_&@Y-Yw*PzmLOKDSD!PpqwQOnJ> zP&qo;xWIc?9wPd|myf2qnK<-9M-I)A!*pqBI8H|vZN9?`c9c_BXRpspE-YM0*gpCj z&K9v)Y;<4@bFO%8^4(5zE_ulNZ;Av7r`5;xYl8XmWVW-a({dY#tVzCRZ>c{trczZs zJXbAean<(JdLK6H? z&DOoF>pYY>OL^V()>@$*VAAyAir%XUo|E7cOt&A@5?yELDtV)gVBk6d=NHIfM<&A* z$8kheGYVrJajZB_&TmWb8>z02-jko+c+d_26Dgu0=GorYi8Rgt+{Gho3QxVsZ3=iR zgF)<+9oH1LTMM)a<1I7v+)=kaTrMNrB2Tn|Dr%&OOl_~DV+MZ>Jsu%JrkPlTs~6p3p~?pmAYc4il~g?5n@ z-V^mPgD^uh(Kg}MU}^ZvqQBDE__=cx{*(tScN5ufy;q0<=~3qr*?nKl3A4rsfgi_=Q{oRsiPBW9p&NB<|9=3UPiDXYO z#vDJiElfgeYrTG)F_vSDl^FlwjYS@85<12hdxWupE?g9mJAsWFNAUpAE2+U=w=kgTZej}_-plUMg&2>;xx9vB?X1-UujM0m7h~*MksEJ#?nUKMl`g$tBo+k|h-VmM_wV0l zRgqb*#uj6&%I3~hzF)8#do*%-J^Z?YTvKt7{mVh9)U#EjVL4s;y41)NDPFE zy>@i2Y}~)sfAqx{ufd4lmIp2+(s`blE5CC8-r%X?P|zCkJ+Cq3M&wZ|6GHbc5K8-k z(6bAK^1dMS?gC*r4WXYg*7ECtS>t?y-wOi&c)!5r$|r%-qx_;6$%H5HC+NoX{k$0R zsWa~}#x4i|ujLrKD84_GV{BS{!}a`!#P^@vzkmM?@jaPC-nsJE8GDzpU!&)*F!pK2 zzQI`TR~gHFjj@4y;JSOTL-gXv*ba%dYLGX#>zIM;nzFzLa1rJ~V8Oo^A-7sCOre;s5xSk&pb$ zcYNW6|MxHb`#0R1Q+@yB+5hm&Z~e&kcK_DMAAS3YpSkQ#{j z1J+&F`nc9*ig}U)oKNS?M96q16$APcFnlFM`n^*&{(Xi>T(Q&=WFDbN1M3JoRYD3h7%5^>)QDf!d^QDQ&!pvl0Zqits zoqcP>m|d30Dsf~zI23`f^QBTzAZ)BSb`A*Jvj#xgsaZF&8)<|cMMXKEW4MbkbbhG# z$!rXDw_)hx3PZ(g42_HwC*LZ({Z?W6EzGgYBO}A=Z*oY=Yhb)OacL3v=)gxv?KMGd z!yJL{c_9kF{4hW|;0|MNq`S*)Bzp%YV!vjW3q zj^T#@M&Ym|nOf55;GT8pjHM%dI7=ev{Lt{QLeMFaeDB_8?8oo3Bt!SMp-X4Q(tgo3 zJ3S+?mBG-5gAyaFlp?sy4%2JU8CNHeOnGliqpb8z+Tex3A|dsT=t%0q@Gv%9DdJxi zey)oVVQRXtv@mBF5-~$XgHzI>Gn4q=4Llm&KNqe?n4qF{eWIQn8rIj|FlyHB4V!kt zO+wbF7<%wQ8bY z``em-Gc+SJlU^m-0q<;VZ7aaU-Lc^Ohbca+RY@gy@1XahuZ1cCWIm%;SMR3;B9CKg z4>IYcW@DlbT+$Ri%>x5EuDZbkFrGMOW2`({gubKwso-j157bdd^}>k(-#b*IE$qG1iZ*wXi!pCRPy`JJBb?`jTnOM@0A$ znYMqu#KYE0M`YR_0S`9VZ~XCC4d%gKSlW!a@}rC~m^NQvEcYT~x%ZQWj;wR1242U6 zoKIk|`>kff7)n3P;6+3;j2syZ%W@o?$JL5~Q?q3>&>*6>8m1e{aM%^9xN%el01ee> zqkt7x8HSpQ%rM_uZWJ_R+{t8|eMdop*+Jx5uSxr^9@>mUQ4Py%*ro&vBQo|q6++AQ z*DQ05E)l|p4lk}ea15Kh7B0sd2ER z|1rj3(Ct6P7%dXuZ#1#CVflPJrhq{Bq)_fj`kV~MLV*^(=K0h=Dju||#mmNhkI0Yr z_i*j$(_QQj@87@w2lwyaf0D5u$+4qsuKcv%p7$}v`q({&i@Q%Smcu38PjJo|VDASm z3_J!I>%Vt@fZ6y1O9Z*cupIN4LL2P9uRM!bXe)iZF{KxQ$H(y?1HGzqU^mPi)f9yo z3YG`}*HHsGEfuPcTXS4R8dxyVqxnH(nHkif$2M#;R1BMj%u%bV^K>dNk6sJyxO37F zcoh|dblt*M)wNZRr(?Hlx8^Bc0cSvaS7L;a=7gKV2PPI?AcLQWIa91{eTs~TjD5Bj z;aJtV_by{^GsgZ`#@J6W#y-wd<}7{>JK^W6LP*|ajJ?7b`!>edrx;`3!5G7m$#*iw z{yJm1A7G6A4aOL3tFWkpUtq#rgx!>}{^?VUeU~7o*BR^o3ncXK4fIWj$V-g%|AXU< z&5Fps$=JYCS47}75%^K@{#nqFC%`=`-Y zx7{J!!kRCZaV}w~>1+mG3=!o*YRi{#Izx(>)2?2x>{_Tr7B50y6tj=Ts;mXi8E30JTr zOLPZja~FpAzyAPo?LA|N=Q}b)U^e&94$pUFhrnzef*G(%K8QthLJyH3#_5_DmF|e~ zUI-pO22wcGKp6@RP%Niep6l9{iovKLVzA9XW&n5*jNK<{$kW2feVt4XHBY1u=o$hU zp}`MY4HXPHRx_{~Zd7pGq-tw5gSIeSo{jsVC0OWGGAth;MrnY&M7nD`jM6P?*!hr- zYpG!oN<-ZY{lEh}2_Iu?JurP-4NocoIb@Tu7`BtKRqsv=5-L|R+VWdXyD77`$8XqX zBiiU3@4&&bs&ae&+bz2l$3Ll;Pu-WQK%#X#LCsVok&!)Fenx_11)!%Vn*{oRdvM>2 zI562(bfk{v z7PUXW?F4qcWd^E-&<>q?)As}K&Q76jyLMnImY{qpk|4-B0vmBub6t@&6f(!h4h^LP zf_3?B9H$09A(2vSv3|^BHf^Z@0`6n8%>D0t(sTgo&BpRSa z>c|9-HOi4M6jqr7tKkj1rb+`!8+NUbt_5YcqtJG(V8>U4ht@Yu%h$AX)S+owk=;;p zCs`Pp-?YOG+N~x70m3ySzv(M(BM{U>Z6Gk$bnU1hc8%t7H;RM=xgg`>*%HA=jzG}| zIuk*5HOeRE$LKj3vF_kjAqgApmoaY4c&I6Y9X~pk%8`g_nr=N7RY0=Jr9n%C2j;dc zT-Mj|JJc5uya<5McY8tbWbDPlzBX9})Zj4Lv~Iy>85pkF&Y*2kze+UA$FEZBC zgI#lY{OfMkU&%4{Z@U@x4&EE+{de7Lfc<_q>mTW5><>i-xx)_g=Oc3y%PTWW|E8M_ zo*f&X^U5>s_0b#G-+X&y?)Hd%cl6q|&53gJ=AF&!&DpEo&5600@y$14Vj&`PExXH>&34i+=6y=DfQ-a^X+A*=t>M zWoSC@U$pIj&H>S^V~z%O?C*dU<9IG?HrRqBHbD;b!a9b{c{r;nX&w~mZTa$oD-{lQ z_I(pKImo0u$S;_tGD(3teBUoX;t7Y8GBtSI_k9nJD*4$W83Xx&O#C2%3`OPq$WJI| zR3gG+;}{sqM_AJS1u_dp3r)Wf7J_igFZgDxHNe~uj1~f~1&Lqa5~mRAS{L|NOX7w8 zdch20iyp?vbbMmq0>!o^aKi{2pk))Y(zv!$->AmMiL8PG)2%BYshYN`b)Pg>S;%wA ziipO-RM&E~A@cp1$?Q8g{g_HRn3=SJ`C)tFRP{vhvDGuXFV^+Gz(B2`5)BOeO=T-i zVbKYlkd$H_(=fnlAViwT4xlYcOr=omJI%0}P_I)^M1plIA2ofY%w$5ThJn&tQW)V- ztay~nj1S{@@R-&X%kz~=18r4{S~uOu3{@;xB^WK#n|}V5=O_Y!*w!+|T4f6FY1JfE z5A>KE&hW+$Z-{m&Xj5G!7%(4UGn2@YE;VrcL?5K+g`!hEkg7M5z;&D~AOk|0=|s~= zdQ|KFmfujqO7spzHEO(WI;9D0QhY)nq%(3(h`T}1jRMT$y_OP)x=5pvb=plwCZ?R} zNNTP`hoBi%ZgNtJ9+Ywvj<&OMk$g?m2D*pLMX^y!<;099Fl$arp_H&qAqB^^yr!nq zQt@VOt5)y>d)>Jsizh5oxHtkJBcN^sUei;>VaNzwXMH^$w@`!74kAk_rnI58Sq(SL zAl7s+0ENvelzCNEObWtgRnqqjQ7qm!_%ht5xvqoF<|rDF>4<|o*nn+J+}?-{5=TB7 zHoWL#*sXDl2JOh%T%Mc628|835J*7_^$+XkSqFF^DgYGAq7cIvxL6Kr=6H1B(TztB9=&)R!J`k4emn;7IEu$H zJaBLa60rZRE|NO*mOCm=f#80>8%#0K^FA!g^fUHJbC0!sFZV_zpb&5+46O z9@sbzQYBAbO`2Fdm2vt=!%)o$G}|dfY;PAxI2Fve3n4<{h~$bQ(T>WLki*pT+vU7v zf=pyT0EhVDP5T&r8vXFQd;u*7QA~N7T9)*(GFY?sOTguq;B7Bz`s-oAGX1b=x+G_C zTa$!j1Cl6{3YBD6KsjNgS&2cxAr1|Mi8X&T-|?bC^L7*!s)4tujWw7sdA{w^`E;6( z%c9U;8Kc{-F?(0g!d8_FD}9dvCIi_i3W05@T^XoWH44_leAudr!-}$S41x7{(vMCe zh+eJQ3aJNWO0vhHaXc!tl?p6ls*zl|l6j!2AWt>QUl$A!t2T!g-%f($Hl#2vTbNU9A~>*VUaN`^kVUn zemDsv4`D59hyPX>!@4B>x^qa+w`ag=a;;7-C+)~8Y}d=?c3r%Nz^CiDU1;LQrM0Pr z`HQocX!j>imABn3T6w{#C@ftA))HVHsf>&iM@CfEtFy~1GxJ$laUM}-T}IZErQ-Nd zsd#>CB8tL^r*b8__ltFpp$+ zyz8Ql|EJuN@f`d-KHULdIJspMXpL0B%s^^ZJCfB&jyyjmdJb1JbMbmGl$&cF56So!?5VvY^=n@y|< zxs5`O;nq@YiH0~F%CW)c>5_s6^~H%dIqg@Izl?`x`%*nLFJnO&8Mq6n4;bVQ8wg zYIfWF7E-?DyMEKIIm*BV5u^g!lqZOozz)5}mK_w#nr`8C z*uZp6Q#ZBZ0mM>hjr1554k?OoVa9DAR<+2cX(`;JU$m&i-nvv=LPLi5LB3`ybgYEM z4$Y2ZZhK*#PFagSRrY3{5z)2K^7BnorAUHqX?yRIG0l!KLB|-hPu2vsow%Zi$=h`} z$jC>gWO`E6Qi&W_qzbfsh>#SibP|}J3?!aP)-1>VfyieI9U($Y~BgI2HlyIT@OmruuZ5#GDWfkejr}PfidDbMnTKn zlu?paCG9jEE3R3x^;9YWj#DK2O+@BFNf|_R+v6IFqk2?U3^A#dQ;gWCGomzDvY8^7 zm_)WklBA4_mqsCFB(UgCGp0Me6hB_xl)Tx5ib=RtSc zB9p8M&`A66Aw#s|ZzyOL7Lpx@(0Zo>$ip@Xd zW>%sPjE6vNdp)QRLBi)l;g+YiuA>jMC^pNH98*iBg3r_MIHbeP+MoW*0ybLdB-g{j{5EawEm$t6;6BK#!6Phe)#n<(NbNKg3aXpedp zQP?g)Q4$)R&3F#bP9j{DPOgC9$YbD1gg+d-w%}|9Cr` z350(U;TIBcE+PCMw1;0t_%F1F&m#O^w8OuG@c$3tvkCa{X)g7%V8e-}}YiKrh<ClK|WBG(si z#RQyO5s~~PqW-do`U%3%a3b#)k>DR?=KU!|{bLdJMao-FhR6>I;1+|cl0`ZGoub*H&q8p zaHJMS={kV(R2{wvmD9Z23e=%R%s=qMdw`#V9q56kEbQ|zp<#l7<68LP{c)a-Bm<4g zU&NiMu-{^xW~deBZ8MDW)JhbgJ94{K8vz0J=pS(c<#_F;$V}^8-OezTaFIFme zPOP+&g_JRNi&ui)x43zkR*G?oSMDH?3wmfb!oiC\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/729/f42d43ae\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 00:05:03 01.07.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n#\ + \n#root.mnuc.backuper\ + \n\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ + \n#:local Script AM-GlobalConfig;\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\ + \n:global MkDir;\ + \n\ + \n:local FetchFile Manager@id_rsa.pub\ + \n:local localDir \"/\";\ + \n\ + \n\$MkDir \$localDir;\ + \n\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +add dont-require-permissions=yes name=awg2-webui owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + put \"Download image, and save him to usb1/tmp\"\ + \n/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-chr.tar\" dst-p\ + ath=sata1/tmp/awg2-webui.tar\ + \n\ + \n:put \"1. Create veth interface\"\ + \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\ + \n\ + \n:put \"2. Create bridge and add veth\"\ + \n/interface bridge add name=br-awg\ + \n/interface bridge port add bridge=br-awg interface=veth-awg\ + \n\ + \n:put \"3. Assign IP to bridge\"\ + \n/ip address add address=10.9.9.1/24 interface=br-awg\ + \n\ + \n:put \"4. NAT: masquerade container traffic\"\ + \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\ + ade\ + \n\ + \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\ + \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 action=dst-n\ + at to-addresses=10.9.9.2 to-ports=55055 in-interface=ether1\ + \n\ + \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\ + \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 action=dst-\ + nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether1\ + \n\ + \n:put \"Create environment list..\"\ + \n/container envs add list=awgui-env key=WEB_USER value=vados\ + \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\ + \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\ + mboLs2325272931q\ + \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\ + 3\ + \n\ + \n:put \"Load and start container...\"\ + \n/container add file=sata1/tmp/awg2-webui.tar interface=veth-awg hostname\ + =awg2-webui \\\ + \nroot-dir=sata1/awg2-webui layer-dir=sata1/docker/awg2-webu/ envlist=awgu\ + i-env start-on-boot=yes logging=yes shm-size=4M\ + \n\ + \n:put \"Start...\"\ + \n/container start 0\ + \n\ + \n:put \"Verify...\"\ + \n/container print\ + \n\ + \n:put \"Should show: status=running\"\ + \n\ + \n/log print where topics~\"container\"\ + \n\ + \n:put \"Should show: AWG started, nginx running\"\ + \n" +add dont-require-permissions=no name=awg-proxy-go-Client owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:put \"[::::::::::::::: START :::::::::::::::]\"\ + \n:put \"\"\ + \n:put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n:put \"veth and network:\"\ + \n /interface/bridge add name=docker port-cost-mode=short\ + \n /ip/address/add address=192.168.100.1/24 interface=docker\ + \n\ + \n /interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n /interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n:put \"add config-client.json\"\ + \n/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json d\ + st=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n:put \"Add container\"\ + \n/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interface\ + =awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-proxy\ + -client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pro\ + xy-go-client\" mountlists=awgcfg-client\ + \n\ + \n:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n:put \"Add user:\"\ + \n /user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n:put \"Add forwarding port web-ui\"\ + \n /ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n /interface/wireguard/add name=wg-awg-client\ + \n /ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add comment=awg2wg dont-require-permissions=no name=awg2wg-uninstall owner=\ + Manager policy=ftp,read,write,policy source="\r\ + \n :put \"Uninstalling AmneziaWG...\"\r\ + \n :log info \"Uninstalling AmneziaWG...\"\r\ + \n /ip/route/remove [find where comment=awg2wg-tunnel]\r\ + \n :do { /tool/netwatch/remove [find where comment=Monitor-AWG2WG] } on-e\ + rror={}\r\ + \n :do { /ip/route/remove [find where comment=Monitor-AWG2WG] } on-error=\ + {}\r\ + \n /container/stop [find where interface=veth-awg2wg]\r\ + \n :delay 7s\r\ + \n /interface/list/member/remove [find where interface=wg-awg2wg]\r\ + \n /container/remove [find where interface=veth-awg2wg]\r\ + \n /container/envs/remove [find where list=\"awg2wg-env\"]\r\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg2wg\"]\r\ + \n /ip/address/remove [find where address=\"172.20.0.1/30\"]\r\ + \n /interface/veth/remove [find where name=\"veth-awg2wg\"]\r\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg2wg\"]\ + \r\ + \n /ip/address/remove [find where interface=\"wg-awg2wg\"]\r\ + \n /interface/wireguard/remove [find where name=\"wg-awg2wg\"]\r\ + \n :do { /file/remove [find where name~\"awg2wg.+tar\"] } on-error={}\r\ + \n :do { /file/remove [find where name=\"disk1/awg2wg\"] } on-error={}\r\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n /system/script/remove [find where name=awg2wg-uninstall]\r\ + \n" +add dont-require-permissions=no name=amneziawg-mikrotik-c owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\ + \n:global imagesPath \"amneziawg/img/\";\ + \n:local Image \"awg-proxy-amd64-7.20-Docker.tar.gz\";\ + \n\ + \n:global DstDir \"sata1/dst/\";\ + \n\ + \n:local Url=(\$GlobalScriptsUrl . \$ImagesPath . \$Image);\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n" +add comment=Generator dont-require-permissions=no name=awg-VDSina owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# ============================================================\ + \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\ + \n# 2026-06-30 22:08:12\ + \n# ============================================================\ + \n\ + \n# 0. Check prerequisites\ + \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \ + = 0) do={\ + \n :put \"Container package is not installed or disabled. Install it and \ + reboot.\"\ + \n :error \"Usage: /system/device-mode/update container=yes\"\ + \n}\ + \n\ + \n# Auto-detect storage\ + \n:global awgDisk \"disk1\"\ + \n{\ + \n :local usbFree 0\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \ + } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\ + \n } else={\ + \n :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\ + \n :put \"USB found but not mounted. Format as ext4\?\"\ + \n :put \"Press 'y' to confirm:\"\ + \n :local key [/terminal/inkey timeout=30]\ + \n :if (\$key = 121 || \$key = 89) do={\ + \n /disk/format-drive usb1 file-system=ext4 label=usb1\ + \n :delay 3s\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \ + free] } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n } else={ :put \"Format failed, using disk1\" }\ + \n } else={ :put \"Using disk1\" }\ + \n } else={ :put \"No USB, using disk1\" }\ + \n }\ + \n}\ + \n\ + \n# 1. Uninstall script\ + \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\ + \n :put \"Uninstallimg AmneziaWG...\"\ + \n :log info \"Uninstallimg AmneziaWG...\"\ + \n :local prevDNS \"\"\ + \n :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\ + env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\ + \n :local storageDisk \"disk1\"\ + \n :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\ + ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\ + \n :local prevTmpdir \"\"\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\ + Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\ + \n }\ + \n /ip/route/remove [find where comment=awg-VDSina-tunnel]\ + \n /ip/route/remove [find where comment=awg-VDSina-dns]\ + \n /container/stop [find where interface=veth-awg-VDSina]\ + \n :delay 7s\ + \n /container/remove [find where interface=veth-awg-VDSina]\ + \n /container/envs/remove [find where list=\"awg-VDSina-env\"]\ + \n :if (\$prevDNS != \"\") do={\ + \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\ + \n :put (\"DNS restored to: \$prevDNS\")\ + \n }\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n /container/config set tmpdir=\$prevTmpdir\ + \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\ + \n }\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\ + \n /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\ + \n /ip/address/remove [find where address=\"172.19.75.209/30\"]\ + \n /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\ + a\"]\ + \n /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\ + \n /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\ + \n :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\ + \_} on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\ + out.rsc\")] } on-error={}\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\ + n-error={}\ + \n }\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\ + \n /system/script/remove [find where name=awg-VDSina-uninstall]\ + \n}\ + \n\ + \n# 2. Network infrastructure\ + \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\ + y=172.19.75.209\ + \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\ + 5.208/30\ + \n\ + \n# 3. WireGuard interface (MikroTik derives the public key automatically)\ + \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"4CHyNhbOs923/E\ + yNDguMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=14710 disabled=yes\ + \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\ + Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcY\ + QnD9N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=172.19.75.210 endpoint-po\ + rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\ + \n/ip/address/add address=10.9.0.3/32 interface=wg-awg-VDSina\ + \n\ + \n# 4. Container environment variables\ + \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":51820\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\ + 77.79:55055\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\ + 438637\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\ + 809250\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\ + 09079495\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\ + 12329741\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\ + l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\ + face/wireguard/get [find name=wg-awg-VDSina] public-key]\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"\"\ + \n\ + \n# 5. DNS\ + \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\ + n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\ + \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\ + g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\ + \n# NOTE: replaces existing DNS configuration\ + \n/ip/dns/set servers=109.107.177.79\ + \n/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina distan\ + ce=1 comment=awg-VDSina-dns\ + \n\ + \n# 6. Download, create and start container\ + \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\ + \n:if (\$awgDisk != \"disk1\") do={\ + \n :local tmpPath (\$awgDisk . \"/pull\")\ + \n /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\ + ntainer/config/get tmpdir]\ + \n /container/config set tmpdir=\$tmpPath memory-high=200M\ + \n}\ + \n{\ + \n :local arch [/system/resource/get architecture-name]\ + \n :local ver [/system/resource/get version]\ + \n :local dotPos [:find \$ver \".\"]\ + \n :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\ + \n :local endPos [:find \$rest \".\"]\ + \n :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \ + \"] }\ + \n :local minor [:tonum [:pick \$rest 0 \$endPos]]\ + \n :local suffix \"\"\ + \n :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\ + \n :local file \"\"\ + \n :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\ + x . \".tar.gz\") }\ + \n :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \ + \".tar.gz\") }\ + \n :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \ + . \".tar.gz\") }\ + \n :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\ + \n :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\ + atest/download/\$file\"\ + \n :local filePath \$file\ + \n :if (\$awgDisk != \"disk1\") do={\ + \n :set filePath (\$awgDisk . \"/pull/\" . \$file)\ + \n :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\ + \n }\ + \n :if ([:len [/file/find where name=\$filePath]] = 0) do={\ + \n :local freeStorage 0\ + \n :if (\$awgDisk = \"disk1\") do={\ + \n :set freeStorage [/system/resource/get free-hdd-space]\ + \n } else={\ + \n :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\ + k] free] } on-error={}\ + \n }\ + \n :if (\$freeStorage < 262144) do={\ + \n :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\ + B free). Need at least 256KB.\")\ + \n :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\ + cient-disk-space\"\ + \n :error \"Insufficient disk space\"\ + \n }\ + \n :put (\"Fetching: \$url -> \" . \$filePath)\ + \n /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\ + \n } else={\ + \n :put (\"File already exists: \" . \$filePath)\ + \n }\ + \n :local rootDir (\$awgDisk . \"/awg-VDSina\")\ + \n /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\ + DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\ + yes comment=awg-VDSina\ + \n :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\ + =veth-awg-VDSina] shm-size=4M\"] }\ + \n /file/remove \$filePath\ + \n :local freeMem [/system/resource/get free-memory]\ + \n :if (\$freeMem < 16777216) do={\ + \n :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\ + . 16MB+ recommended.\")\ + \n }\ + \n /container/start [find where interface=veth-awg-VDSina]\ + \n :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\ + }\ + \n :put \"Waiting for container to start...\"\ + \n :delay 5s\ + \n /interface/wireguard/enable wg-awg-VDSina\ + \n :put \"WireGuard interface enabled\"\ + \n :put \"Installation complete!\"\ + \n :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\ + \"\ + \n /ping 109.107.177.79 count=10 interval=1\ + \n :put \"\"\ + \n :put \"======= NEXT STEPS =======\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \ + comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\ + \_comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\ + address=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run awg-VDSina-uninstall\"\ + \n :put \"=========================\"\ + \n}\ + \n\ + \n# 7. Verification\ + \n# /container/print\ + \n# /interface/wireguard/print\ + \n# /interface/wireguard/peers/print\ + \n" +add comment="wg2awg GH repo in client mode" dont-require-permissions=no name=\ + "wg2awg client" owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:local Arch \"amd64\";\ + \n:local Version \"v0.0.1\";\ + \n:local Name wg2awg;\ + \n:local WorkDisk \"sata1\";\ + \n:local WorkDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Bridge (\"Bridge-\" . \$Name);\ + \n:local VetchMTU \"1280\";\ + \n:local Vetch (\"vetch-\" . \$Name);\ + \n:local VetchNet \"10.9.0.0\";\ + \n:local VetchGate \"10.9.0.1\";\ + \n:local VetchAddr \"10.9.0.3/32\";\ + \n:local Env (\$Name . \"-env\");\ + \n:local ConfDir (\"/etc/\" . \$Name . \"/\");\ + \n:local ConfFile (\$Name . \".conf\");\ + \n:local Mounts (\$WorkDisk . \"/mounts/\" . \$Name . \"/\");\ + \n:local RootDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Registry \"https://registry-1.docker.io\";\ + \n:local FetchFile (\$Name . \"-\" . \$Arch . \"-oci.tar\");\ + \n:local FetchUrl (\"https://github.com/vados-dev/wg2awg/releases/download\ + /\" . \$Version . \"/\" . \$FetchFile);\ + \n:local FetchDir (\$WorkDisk . \"/dst/\");\ + \n:local AwgListen \":44044\";\ + \n:local AwgRemote \"109.107.177.79\";\ + \n\ + \n#:put \"\"\ + \n#put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n\ + \n:log warning \"[::::::::::::::: START :::::::::::::::]\"\ + \n:log warning \"Add veth and nat...\";\ + \n\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n\ + \n:do {\ + \n:log warning (\"Remove interface: name=\" . \$Vetch . \", address=\" . \ + \$VetchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/remove [find name=\$Vetch];\ + \n:log warning (\"Add interface: name=\" . \$Vetch . \", address=\" . \$Ve\ + tchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n:log warning (\"Remove ip address: address=\" . \$VetchGate . \", interf\ + ace=\" . \$Vetch);\ + \n/ip/address/remove [find address=\$VetchGate interface=\$Vetch];\ + \n:log warning (\"Add ip address: address=\" . \$VetchGate . \", interface\ + =\" . \$Vetch);\ + \n/ip/address/add address=\$VetchGate interface=\$Vetch;\ + \n:log warning (\"Remove firewall nat rule: chain=srcnat action=masquerade\ + \_src-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/remove [find chain=srcnat action=masquerade src-address\ + =(\$VetchNet . \"/24\")];\ + \n:log warning (\"Add firewall nat rule: chain=srcnat action=masquerade sr\ + c-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=(\$VethN\ + et . \"/24\");\ + \n} on-error={}\ + \n\ + \n#:do {\ + \n#/file add type=directory name=\$Mounts\ + \n#} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove WorkDir: \" . \$WorkDir . \"...\");\ + \n/file remove [find name=\$WorkDir];\ + \n:log warning (\"Add WorkDir: \" . \$WorkDir . \"...\");\ + \n/file add type=directory name=\$WorkDir;\ + \n:log warning (\"Remove config file \" . \$Mounts . \$ConfFile . \"...\")\ + ;\ + \n/file remove [find name=(\$Mounts . \$ConfFile)];\ + \n:log warning (\"Add config file \" . \$Mounts . \$ConfFile . \"...\");\ + \n/file add type=file name=(\$Mounts . \$ConfFile) contents=\"[Interface]\ + \nPrivateKey = 4CHyNhbOs923/EyNDguMXJXdghL2I3UyzXPwrANVgHs=\ + \nAddress = \$VetchAddr\ + \nMTU = \$VetchMTU\ + \nDNS = 109.107.177.79\ + \nPreUp = ip route add 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nPostDown = ip route del 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nJc = 9\ + \nJmin = 105\ + \nJmax = 920\ + \nS1 = 90\ + \nS2 = 136\ + \nS3 = 45\ + \nS4 = 27\ + \nH1 = 472437748-472438637\ + \nH2 = 707808381-707809250\ + \nH3 = 1609078552-1609079495\ + \nH4 = 1012329484-1012329741\ + \nI1 = <\ + r 4>\ + \nI2 = \ + \nI3 = \ + \nI4 = \ + \nI5 = \ + \n\ + \n[Peer]\ + \nPublicKey = o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\ + \nAllowedIPs = 0.0.0.0/0\ + \nEndpoint = \$AwgRemote\ + \nPersistentKeepalive = 10\ + \nPresharedKey = RNvF7T1cg5tyXcYQnD9N5BEp6e20vVJQTv0GMjyvHU0=\";\ + \n} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove mounts list \$Env...\");\ + \n/container/mounts/remove [find list=\$Env];\ + \n:log warning (\"Add mounts list \$Env...\");\ + \n/container/mounts/add src=(\$Mounts . \$ConfFile) dst=(\$ConfDir . \$Con\ + fFile) list=\$Env mode=ro;\ + \n:log warning (\"Remove Environment keys.\");\ + \n/container/envs/remove [find list=\$Env];\ + \n:log warning (\"Add Environment keys.\");\ + \n/container/envs/add list=\$Env key=AWG_CONFIG value=(\$ConfDir . \$ConfF\ + ile);\ + \n/container/envs/add list=\$Env key=AWG_LISTEN value=\$AwgListen\ + \n/container/envs/add list=\$Env key=AWG_REMOTE value=\$AwgRemote\ + \n/container/envs/add list=\$Env key=AWG_MODE value=client\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$WorkDisk . \"/tmp\");\ + \n/file remove [find name=(\$WorkDisk . \"/tmp\")];\ + \n:log warning (\"Add \" . \$WorkDisk . \"/tmp\");\ + \n/file add type=directory name=(\$WorkDisk . \"/tmp\");\ + \n:log warning (\"Container add tmpdir \" . \$WorkDisk . \"/tmp\");\ + \n/container config set tmpdir=(\$WorkDisk . \"/tmp\");\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$FetchDir . \$FetchFile . \".\");\ + \n/file remove [find name=(\$FetchDir . \$FetchFile)];\ + \n:log warning (\"Download image from \" . \$FetchUrl . \" and save him to\ + \_\" . \$FetchDir . \$FetchFile . \".\");\ + \n/tool/fetch url=\$FetchUrl dst-path=(\$FetchDir . \$FetchFile);\ + \n} on-error={}\ + \n\ + \n#:log warning (\"Container set registry \" . \$Registry . \" tmpdir= \" \ + . \$WorkDisk . \"/tmp\");\ + \n#/container/config/set registry-url=\$Registry tmpdir=(\$WorkDisk . \"/t\ + mp\");\ + \n\ + \n#:do {\ + \n:log warning (\"Container add width: file=\" . \$FetchDir . \$FetchFile \ + . \", interface=\" . \$Vetch . \", hostname=\" . \$Name . \", mountlists=\ + \" . \$Env . \", envlist=\" . \$Env . \", root-dir=\" . \$RootDir . \", wo\ + rkdir=\" . \$WorkDir . \", name=\" . \$Name . \", logging=yes, start-on-bo\ + ot=yes\");\ + \n/container/add file=(\$FetchDir . \$FetchFile) interface=\$Vetch hostnam\ + e=\$Name mountlists=\$Env envlist=\$Env root-dir=\$RootDir workdir=\$WorkD\ + ir name=\$Name logging=yes start-on-boot=yes;\ + \n#} on-error={}\ + \n\ + \n\ + \n#/container/start [find where interface=\$Vetch];\ + \n\ + \n#/interface/bridge add name=\$Bridge port-cost-mode=short;\ + \n#/ip/address/add address=192.168.100.1/24 interface=\$Bridge;\ + \n\ + \n#/interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n#/interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n#:put \"add config-client.json\"\ + \n#/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n#/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json \ + dst=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n#:put \"Add container\"\ + \n#/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interfac\ + e=awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-prox\ + y-client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pr\ + oxy-go-client\" mountlists=awgcfg-client\ + \n\ + \n#:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n#:put \"Add user:\"\ + \n#/user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n#:put \"Add forwarding port web-ui\"\ + \n#/ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n#:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n#/interface/wireguard/add name=wg-awg-client\ + \n#/ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add dont-require-permissions=no name=tmp_print owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDguMX\ + JXdghL2I3UyzXPwrANVgHs=\" listen-port=21641 \ + \n :put \"======= AWG PROXY SETUP =======\"\ + \n :put \"\"\ + \n :put \"Run awg-proxy on your external device (10.30.30.33).\"\ + \n :put \"\"\ + \n :put \"1. Download the binary for your platform:\"\ + \n :put \" Linux arm64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm64\"\ + \n :put \" Linux arm: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm\"\ + \n :put \" Linux amd64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-amd64\"\ + \n :put \"\"\ + \n :put \"2. Set environment variables and run:\"\ + \n :put \"export AWG_LISTEN=\\\":51820\\\"\"\ + \n :put \"export AWG_REMOTE=\\\"109.107.177.79:55055\\\"\"\ + \n :put \"export AWG_JC=\\\"9\\\"\"\ + \n :put \"export AWG_JMIN=\\\"105\\\"\"\ + \n :put \"export AWG_JMAX=\\\"920\\\"\"\ + \n :put \"export AWG_S1=\\\"90\\\"\"\ + \n :put \"export AWG_S2=\\\"136\\\"\"\ + \n :put \"export AWG_H1=\\\"472437748-472438637\\\"\"\ + \n :put \"export AWG_H2=\\\"707808381-707809250\\\"\"\ + \n :put \"export AWG_H3=\\\"1609078552-1609079495\\\"\"\ + \n :put \"export AWG_H4=\\\"1012329484-1012329741\\\"\"\ + \n :put \"export AWG_SERVER_PUB=\\\"o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+\ + v0b9jU=\\\"\"\ + \n :put (\"export AWG_CLIENT_PUB=\\\"\" . [/interface/wireguard/get [find\ + \_name=wg-VDSina] public-key] . \"\\\"\")\ + \n :put \"export AWG_S3=\\\"45\\\"\"\ + \n :put \"export AWG_S4=\\\"27\\\"\"\ + \n :put \"export AWG_I1=\\\"\\\"\"\ + \n :put \"export AWG_I2=\\\"\\\"\"\ + \n :put \"export AWG_I3=\\\"\\\"\"\ + \n :put \"export AWG_I4=\\\"\\\"\"\ + \n :put \"export AWG_I5=\\\"\\\"\"\ + \n :put \"\"\ + \n :put \"chmod +x awg-proxy-linux-* && ./awg-proxy-linux-\"\ + \n :put \"\"\ + \n :put \"3. (Optional) Create a systemd service for auto-start.\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-VDSina comm\ + ent=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-VDSina com\ + ment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=VDSina-tunnel dst-addr\ + ess=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run VDSina-uninstall\"\ + \n :put \"================================\"" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +add name=manager policy="local,ssh,ftp,read,write,policy,api,rest-api,!telnet,\ + !reboot,!test,!winbox,!password,!web,!sniff,!sensitive,!romon" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=*3 registry-mirrors="https://reg.vados.\ + ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/caps-man datapath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + xs-DataPath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + DataPath +/caps-man manager +set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \ + enabled=yes require-peer-certificate=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=Bridge-LAN +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set crl-store=system +/container config +set layer-dir=/sata1/docker/layers memory-high=200.0MiB memory-max=4096.0MiB \ + registry-url=https://registry-1.docker.io tmpdir=/sata1/tmp username=\ + amsternl +/container envs +add key=AWG_CONFIG list=wg2awg-env value=/etc/wg2awg/wg2awg.conf +add key=AWG_LISTEN list=wg2awg-env value=:44044 +add key=AWG_MODE list=wg2awg-env value=client +add key=AWG_REMOTE list=wg2awg-env value=109.107.177.79 +/container mounts +add dst=/etc/wg2awg/wg2awg.conf list=wg2awg-env mode=ro src=\ + /sata1/mounts/wg2awg/wg2awg.conf +/ip smb +set enabled=no +/interface bridge port +add bridge=Bridge-LAN interface=*136 +add bridge=Bridge-LAN interface=ether1 +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=ether1 list=WAN +add interface=Bridge-LAN list=LAN +/interface wifi cap +set discovery-interfaces=*DF +/interface wifi capsman +set package-path=/tmpfs/capsman-packages upgrade-policy=none +/interface wireguard peers +add allowed-address=0.0.0.0/0 client-allowed-address=::/0 comment=\ + "Peer for MikroMaster connection" endpoint-address=10.30.30.81 \ + endpoint-port=33033 interface=MASTER name=MASTER persistent-keepalive=10s \ + public-key="zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4=" +/ip address +add address=10.30.30.10/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.10.0.2 interface=MASTER network=10.10.0.0 +/ip dhcp-client +add disabled=yes interface=ether1 name=client1 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=*3 lease-script=\ + lease-script lease-time=10m name=nucDHCP server-address=10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \ + verify-doh-cert=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set reverse-proxy disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \ + webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=*3 type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/special-login +add port=serial0 +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260710/20260710132001-Diff-Config.rsc b/MikroNUC/history/20260710/20260710132001-Diff-Config.rsc new file mode 100644 index 0000000..7f05d76 --- /dev/null +++ b/MikroNUC/history/20260710/20260710132001-Diff-Config.rsc @@ -0,0 +1,3 @@ +5475a5476,5477 +> /system gps +> set set-system-time=yes -- 2.52.0