From a8488f7b98e3d0fcbe3b53f3813728bcca5cc8b7 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Mon, 29 Jun 2026 13:00:05 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Jun 29 13:00:05. --- .../20260629/20260629130001-Binary.backup | Bin 0 -> 373427 bytes MikroNUC/20260629/20260629130001-Config.rsc | 5008 +++++++++++++++++ .../20260629/20260629130001-Diff-Config.rsc | 97 + 3 files changed, 5105 insertions(+) create mode 100644 MikroNUC/20260629/20260629130001-Binary.backup create mode 100644 MikroNUC/20260629/20260629130001-Config.rsc create mode 100644 MikroNUC/history/20260629/20260629130001-Diff-Config.rsc diff --git a/MikroNUC/20260629/20260629130001-Binary.backup b/MikroNUC/20260629/20260629130001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..fd8a4e2b5cba65a4687207d8a9a9e9ab7ffc6577 GIT binary patch literal 373427 zcmeFa2Ut_f7B)OP36M~vsh}W+CZGm(dZMCqL}}9OB^4rpU=l!VAU5pSd+)t>Y{%Xk z_TD>IEU555YiEa|c#ik`&%O72-!+f!y|S6IX3fl6@2oZ1Q?Po$hD{qykU2s~%lFGt zXmu)0I*t&+5JC)O_)x3SCe>)OYP1JIM{zKO7#QQ{1msCq=>4*^N=LGIfAU^lQBh$_ z($NSZe-y=`BD5Ss<|v9oLx_$LqF@MNW~dx9N971Zb-q1v?CR49UPxi}{CTIA`l*yK4TU(G7!@UKH;#i?_%pUSV9atk& z?&DDHAyi`~S12W!YJGLuf^3~!k)@I;bZWBjG_r6CLg*VwH>pO0w0DBU5kjUILPca6 zGYp}vs7giK?OA+(32PcsloLs6U*gkc2V7{VBl6ofG>EfK~*E#YE{FjtCN zLr0iTKokeWC`T9_cz8xd49tOs7+8H8VjxEvVwg0bA$oHRAsP*_O%2sNrB;&Ps#QjT z$}kGT=o&W~vP2mDYehvxWtFB1eTqWMwn3PyolGE?i1|W3ODGUaSv;OZgd@z=R*AO| z@>}rbE!c_{d}Rv}k5TJW;Cx6F$C8E$5PDBV7@{F$gY2%#|uq45ZzLWGb4AuI(UOob5YjbKS1|ozFLI~x7egHL*hhRt$L@&k>>WdKl2^FCn zgy?)ra%}a7Yy+T_!3YtGX$U+SN`4uJ5F>9mLJSins+>kP2)V*wcD48Lj)+bOjSCA5 z4)tl_;hhu_;xiHVYR7CVgjXCyF4+@4X9k9ib_EFOCW`i4lieQUK*2g>nJMxCitOLG2u#QkSSoS{nzU11=r z_Zpb7KkGHQMwY73{@e5f`mHB^q9=N+di^ZCIniqd@<=s30f6IA^n|@6JDHWC)%49_ zC2LqRwMvn$|GCQ8w_HyB|D!St?EO?_>{~83s0<<f<(+ieF2Y1ym>w($2@B1U^bSl?W$MC&@zQvW zBwZDq+O~a0grF0i=>L?8T$^|9la>>jCCrQs7KnJsX?^t~ZD1m<6N`HXMW!h-a-xEy zNhuvviomoee-fBWm2x9k1wcz9@gCf1D2fB1T&h!Ovy5o=`vmY@mL^G8DJ3$6OqmSO z8*n9nQ1}2abtCDv#B&4Kr5M0AApsIl8f+Q?w%t$^2XY$iF{A)|P5=TT1%PgOiY&v= zFeZ9xGW04`(pUP!`m7z|Ryr(=|`hJFFqlU~k%Qs{-i7A%G^gj{J_g+$J;Ee{3ql#qFBs^>Au z)~fUhc5Ruckg2?asEARm7Gou9O6d2v`39EJwLs6V`gs?scAssT{6Tp(GunYur zra*{JH$zAXUjP;YykuY*aOn+#V{^DXC|RwL_ta}u$;k?>4!*+#G_H){4vSq_Ibg8( zQ)`l05*abbp|jyLk-Wov17r&y=y)Ry9dAqn9Y2pubDsjwiG?qMm6tg}Pz44nQ#*t} z#02^@0~Y8A(V;`F5Mog4kdxFJ{$dO06TmL23m2H9s2)(RaG}5j1`XiY`UtsFtjrmJ zMgfvi)tcnWfn=JdNYiL@3jZw}VKq6zeu*QRT%}9>_wYlh$q(h%_)*AGH2BqJSE4yX<}sTSZaCsi|ar8R=Z zHfalBp$m$FK_S+-Mw1P083djm#D?lg0azmBN>`=p720%#zS7_s-C9N#w32M2esu*A zAy5qP->{0ukOHYPvINX@g(^8ks?joKnslWqIa4bEEyzrf=$Nt;NqVwE-kh1CR!DRT zrdFZTOSF2XK1IPac*>Znbf!itS7@1f4O5blq0S-xn6AiX>J)l#*y*|3?VQu2-zSoFt%V|kON#A09VK0;)D>x+!-Odqa#9%Aawvj zry=zjNO+dWk0?x#-Eo8%txmub8-z~6oe4wKkf#|WZw{9@sF3`0s78lYqeH6E!PV%X zYIF=?*d*yu)t*IGqa&)(ZL87V)o8D3v`01Cy&7GIbOraxRAegjIT;FFUvefVkRDx7 z9^FYAW|ol#1<{Lq4(P8NNtabrR7gqsOGQP6oTS0cDkJG{6%`d~k_Mn+EVIZ8p#&_7 zGl~idZyyDr;Z%giQxPhp8q|>o6=4&o2%AhrXaa^9CKEA4e`bPEDTWy61BMu!k3fCG z5dEwffyEivXLwQumoFG%n196#tAlUky&OY~yb8ELU1t-vYS6 zNaTzJYBX8k82B<4F5{?(VKxz{NpN9dh|$Uy+UN)Ez%j(A%f<}cPJsl&s8yp6V3JWw zcK_RDO8K9asSOb!NLT1tWMt*<7cTXmCtTWpX29BHtF#KWLZ>qdx7Xi3a%ulO;ZpxI z!nN1sq{~vYnsiNOrF^^n?eaDG=gId!G%+>-P-`S|qjr%09TKKgmoOlf|5*vw1qsVF+3D3~Ec-iTTpf=Q0r!8NjLrTt zqu5@PuFhelNVM{7iB`cPaJTwz7cl_rf1Zd<|1%xL``_fGBjF!PqjvtYK-3GlFMOONE+#Kf{x-aiH%cED2n3(tLMgW zp(EsK4ttaQ^!l85+==v>fOE_cN-zZq{K*u;V?nr&U}aDEWAi)-zqKm_id>O1T-@OT z%ON7vV5U=ORT4Fx`%Bfcf2n%Pzg#^V-0)h7JWK9JM7xasvmT_d;NAm8ag44(qf6Zi z5q=HASJH_>xYrp}5J;ti9ik8h_Zks6AUte#@TAhs2FrNHQCQ1sGjz~P2LGVp1I{O? z1U}%PvOQ08mMCMXJqOWS_mwHYhoN(D+tF(Lz)TXbMSc>10oRkFa}D% zBe{-DGl&X#qc}DQEjRe}oDl+HR1IX{lL%EoA5nY|qVMx!pr)0w0+%S2aC^EU#CFZz zFe%KZ=$`=u*lrW_TH z9_R`oHWP_FO_g3NH_#Ts?^+u-$Kq*~+(7K6IyY@41Kh^-n0F_&LHVTyO((Qp`q}L1 zVDCY98c#22pk99Up@Ey#<|9tIH)?0vUbpK&m!jZof*Zo$KH(Q+1Mxy){DN!(vYiOo z5R)E)cCd@H+|?kPgqhY;vg&>r7G5}F32)rhx$Q&T+H81ex&Qdgv!(X8UyV0#)3-45dXy?vtBFnwhPcQNo%Nk~AWT@A+l|*4IHKqtY3YoSL>dERB3P>WP`u6m7htwwD@F&^+vTR)=(=N zOPOvEk#@qfN4=9h4~u$)Ea{%HHV-&5i!wws*O3y!key-sEbL?;g0wL6Kzoow9Hd74 z4cxf!HyG#;$OTTZ9|pP^a7wA-RDH&2Yv%{TjY;4;3RcxsIhGCCK&KP3Ug;+#zQ@-0z?$PJIMH z9%wpj=x9)>P|Gn-QhUL?ql5N_5HDf*sXvOvN{3s#%@H*URHV2upsnkZwwH4(urcQr}QROs{|*{ULSDH3g^RSYI2 z3-@3Y#VN7?|L`v23T2a465C;c&`t}3rg`1O4@N@X^TtnG(vlv=XE zrUFB4l%Hjz*33pBa6)A^>d&&#YRN{c%trfJHj`SinN(&o;TRejm^(AS*buURQ3P~lv7|GjBG7bEB zKN)cYopghw0UP#%af=WUg(8z9l^*zs;*3LRJ{8eWuzzB_DT?urh>r_5N5RqlaT<-D z**SD5f!LZGYJy|VQHs%=cHEhBza7GCBSNHOS@egYh z3IqtL!w{k`fS49S^b-_>M!-YjcNtJAt8=I|*dq&s@S7N(k6p#{v0n436pTW#MT;q^ z3ty=RFpFt}dMK7o%EQe~=}m{XJ?&4UQgL6l1Ed9;gRdM8moMgvyZp=LW#KlaW&}4B%+#dWU>b6x zN)fGv=c&Tb_>)kAE2XTzdX9zQcaNOUIC5?9vy}mydS3 zwElxD^Gogl?#e^LEKNxRj~lz0{vug(lhSBi?|m1K%E#JmiQ3l2w{1$!Xns*i>n{x! z1>pfi+ZtJ8SOtwnrC_GGwJ9~Rkv)7j!KoNlfj5E&b!hczbr&6N(q-I&$g_Oe*IDjI zTdYlb7n4+7j?`p?%PDx@$aMz>vd)(#QdYlrNPO4j%hQMF%vP)!cVBiodhcW>YkrIR zEc{)A0#?AHE#rD@+fKn7^mw#zz_8nUZhShxU$`V{Q;!$uS}EH5Hx6Is&KVN zDp50u3W5WFL8I=E4+V{yx1qB>88j^MbFXp+1(fP4cY{)u)Ksb%{8A+VeyKvJQw-Fp zi;)8Z15kf(ps!4;_svkG^~5W+>?SInPhE%SQ>GcTtPQ>8outB`unh|`dmrmO;Yd5& z%9PP`c-!G0tuV~Q1mTjJdbS>JZ_u-r#tK0&>;||4Jhrg6`CdG1ChlTT#SWD@Y6=Nd zGcI7W*#^xFs+r5K_Vqu(LO$kJz2TS%qUK}P2+zmNDft+N?zOyYtG%^+@r6YlSH>pP?Ku$1&} z?ws~}qxU`Ol6F61Z??_euh@rSSC@y_bmFYYbi8piwW+S$;Ye4XxtzUkOUf=-1QoB^ z7Rb3~S^VnL;ETJ)c51W5=}Cn5!i;Nd+Rcv}>%WaOk2YKWvYmgAExC&d53KW|P%(rp zlHro?Y|rpNvpv*XvHYZSk-LC6ul58r#~&4>e`2<9 zWm|hY^Rk;Evt#1czrVefR+^JTU*zHVwSBXp`&c_J9w~pnzj3D%+tX(E(?6c>v&weM z{fzkwPDK{Xm^5ZW#=TY6&U+@UsE}QJVAkuxqP=svGTvMqcR&99I9XYnW!E<=Z%dVz z&ZP&AeaqVNEW6#jIi2n`>%1?({UysgKeTmD!o()i@8q>zE`0U+Qckb>w^l!?b1Hpx zh=a&4;@aKN)=hT^;?J~*HT~%OhRNxQ>LWd0^11+qSAKmj}JB4&fgQ-pq{_eDZeN5?+N|SozPW?h{xrLB)CG%b!sBseLYysN6NsobMGJ_i z);|y^2^Vpt3Y;$x<2(*eAZ1I~LcTyE6Z6GlwoJ&A0809qz0N?$^#?N#P^tzbAR*OE zi@z08g>!xZQuUVh0!US1&DK?iR8)Xe!F32oMVBD7??+TcpKn;IRs&XkM$}?ZFyWkp z$oRPU!1%U-9KL{qbMW9mHj7;g(mF}Q^Jz!%eCm1R7iSv~T~niMjM_Jx!%T>bXU4?`G7SP^ zf`pjCf$YCj$R|JANMn}nl4)KR#w8s}^XlKvE@{-8_n$94zB_*RlvQtg1=h>BZimXe z%(rwDbse~|!=ye_>hunr+?DTC*1v4mp*l0U$?Yw)QM#_Z|gr><@TEG zW-Cz@Hrd(t>a@o92P#)(hD^~NU0w02yZNZj!FN}0Y+?Pb?bpkx!u_%vx56%64=o?) z{;lvy2Q!xri+a9{2usLqUU2BW{p@M=T2Y@Y5Z_Q)a`vyQ-!XD>c+h}_M`sUwR2-GC zE@;N`{j@)_XJ2aj;I!?Xrg<}72WOmVla+cdGGdiSk3X#PzlAMdrJi(B8W)r~@zcz* z9z8a$mpp9TctqxHs9a1Y~m92@SKqSt4%@blBibQv`kLwG=CD#~yknMx*swUVwz z!tbUPtXIN0FpKaYXnJE>OI(Z#=kw=thqH~vXw}?bDnpI?Lm5n(0O#Qrri@<0+hW7N zsVNw4W@?f=*b>8Vx~VA;lq!l+`HcGA#3UeS;hT&T-qTdm2I#--D{Im}e$|>&if=n- zo6a6}xl8bfmr;>PJ=g3%w8ez!+xc8YyVChhudJW4=9q80mY0`(&=mN5#oKrc-F0AF z|4C-e*NsTc;=V+QaT`0&eX!%~yW5Yg%Wr-6h1uT|`=&E6Dy#r0)7kA%D5gVAbrbqFavr3yY7Rd6i84M(g5Qe?!HyHn(r& zmp*^rd7`_ON7E^uk;fNIcvQS?^$7i@H))GzT>pG=_t1cOX43(JfNkv(o{ytG#QDErA=f7Qo&-T*D%`VgaaNRpW|P$rUS{^POMx82CjG;rWy` z2DFZ$?@$0fct}lfOoo`~_GYBi*!H+B;9@g-^D5!78{&@e(A?g(nhcwR)6|#E#{CRH z+WS`}N%%^|xELp$rQjF~5yAg6xcn>c%icax`kS)OypK-D92b4ei|F*!ZHWES zL(E{T<x{cSUezEe^K21%*6}&yyy9thm#uT>;^yMhZwm6hwC{eB^J17Z*po*|^1>!;Zkf@vP5Oo> zvkS0+^NK%Tk5B70XK(YzomOq{8TR$`K__Y}#`6evH&xiCJK+Yf523stLU$0itRCB| z3gxw!In2x^*?a4&54%kQ)0z7xU$egT-5@2P>Wu5%b1r_K);XCfc{8Y`DLa$3fH^Kk zF=F$_rL&8!JoP(!y-Ud%{TSV5QP4G${+}qB+rKT@aCz;A%eU-L#M=xS6?Se~**4#1 zwyO%)d*yw8GOx>1;k;E3ZmTy9bC~0Q)gvZn0{>D^+Vi|2t7cMITWsE6DLg{c1-#UH z&R;R_#oSdXb~8F29&guzv3PgLH`98;{j(l$7QGZbxgvkpd{Eu5lxOo!RhXqXTz4xJ zvHFcYm+(e)zbE&2KmY#b_mAiH6hFL|x${t#BlmRk*M5;}K5lq?I%fI7S?v-`59JQL zNVmS{Tt3KQ`|2JaitBF-W>`jjSeCkZ#!$uaeg*gLh3x6}@tJce5ovUILTtMwB8~Fd z@XKHVs{Wqlf2T6~J%H^l9?EC0+ zV*?K?k_Q&a11mW2I~cYXVAw7^pR&jR!>F{7ebsFoM5G5*!(p+JY&V=~&}j{RDk-)X z?g?ou>|Op`UdFe2H3EW(*f@v7=HNoEu#1BgM+^{*{Q6(#@2|A-{VxL-X?Ond z`dHl&rKwo--ShynooQa(b3b-vZR&EQL(f%D|S24fb+ET?Y*Bcd$u%Ncrr?N{oUG_BS{y#ESoyA?A@xAV)x;lz0NSaidLs< zhdATf+jkZ|J%3l9*uTz`G?%Q%;5om*e*75&J>`(;Fqefynl zuls%0UJxHIZ+wNPE!`Y&hK(I~am$wF(7o~Y*mFG^EK}Vw<9Z*Do$`5E!ij|8v7swI zNBjx+ssdZ|tWzht#`7d2mAwAo6&gdT6 z^?gI`-*8^X_~zcWYtd1|HK)_U6EtS4Sm7b$PvUHdk$>+$JHLv$Gr zhBrLV4&3Rthh^U-OB4MhdT^aKU8!#K?e-`;*|s}DJ-E4PQ`S_6JK}_*wimLz=FDW7 zE2n-VjDJFkf|(c}8kZ24 z7@uH-RNjELh^GLxh$tw`c!N)@1}^*SAa-5@WqZOQcD};k5VJA7*T)=?*F&$LA}`}+ z>uM3~W|b_l;^G6VImA?&^eUIwcR=i(37&6q3(uz>CZpHbw>13gqT?NwI~B?6@Tsio z#?R6O;e!jR!Lr17qceOL|N&Sr}$ePsU}R`V%8?mMKwzC(&RC7*(!JUfMhpw5Bo^i5}1ceKiS zdCKcTy!dct|BW{nHeBj2^tNpleocJ1s6~U#J(unt zIA@V8XlvHn6)l@h_;gQm_C|N;As;J!l^@zIt zKRjqWuJ}QR!?wv`^bRM6*G*_s#4R7Bo?TIYj^pkQOLDUWKCue&NY6wm5Q-51;9 z$;sC@isnX^uQQp-Z``rVwu;lA{kJvW`XS-w(Z_ZzqSi)^+SYC6=50*>oSaewYEN-ulllR063w6QoI0xciU0+$Qk5(N?9n)*lt%FA_Z{OvtJvpgmhrUyi zN0;~~m0O-wSvy(3^K6pJP5YQ0UZx9vIH=ANl`{9aUF4Jj?@~=x^r%1N zJtN{uM5l(i69tbtOsw;+$w22QhoWOI zf}5P(8`v{oMM%i|8IL=Tm>b);W5V**-}ExS4Y3NwqfSA-!3`rfzxE98Tt;)5RNN%2 zUF_hExAyei_BFZQ-D4exx>(CDJ(cdf)HBidS+~R9begAld!1%0-bPMyHfv)QSNigm zU%qt}R;_}j@i}|DtZdfqOhVq>E3@{^dApISJn;iG{lTwT4Xawh?p6whx)l$wI`a`5 z7&t>=sXG)m@5HAwGfZ=xt_9bdHYO!j`+xCJI$nDsS2cHhuhhf||> zj&Y4yI4)5-;hn19m7;?C2Ul8rd$s&&`^2WE%(TS5J`GBG;@#SN*d|tZ%uMgmv{{Ko z)V$n}m}qj{DZyrpFTGZjIIprBGk<1}Wz&0iP8;2Z{^jVo&~=XWQRUfM@`=*rn4TFW=d zwj(WP+ed17w~H?JxxKQ_&AU6)V_MmDS6tiO(Qa#SYQ@7_QA*nmXJ)K@;jr~dp9y1b zMU>y<_gPraYqIkh$^9m~G>eiwUAsTJ*~r2-#i?cfx)(!|hZRrnpx>}#M&8JZ+`bLE z<+SVNJ27Bwq_Ao8V@IS%>vaDp=z9E)rzf`gW<#^t*{IFg8y8>r7nkj7b8^@vP3{WT z?H!blrPF3^;a@wDynaNx72b2*$5nLmO1-;2=ABsy@-6N>;zV5FlxOe5FPF#z69~`r$fu3{8d;j|N7I$Vx9&o<&^}cFLc-UaSh54&4 z$U-s>j;&yEcdi-Ve@jNe+SU!u1bAQhdbDs?_Ze=bagRD3YFxk$E-7eq`S7?_!Mz(T zbG$Xszy2HP=i`OTzY&ho^A(kjQm{Ejto~d7|3^&KZ~gyU|NqwizxDrrMgLbV=M+LQ zS0mU7?y#Ovq3n{8y= zbIUSpNH*+p2RV>wkiUpZsL^=CZ51Ms2tFVv*~5{`H__b#^_xAw%R|i;?1>&+La)E#+Qi|9(kIfay zgj|u5D^^H&Tn^6Wa=Buzf-7N*WHOw?5epPbu~5d5$ixbzK*(jwal!)CHgl?3AU>bZ z7f5AF4j+o;bNMo^goi8Te2J9D7jl07o0o9zzx11zo4>lV&Jo4<$Ll3prAnce*9h<$ zHrX`?hhkL%VwhEV6#u?mc9#G8E<08wTmRBFySotIy@}^jNV8PSHoNgP{fNJ~&CU~d zH~0{pD;cXHP;$o|2gePrM4zf;e<9Yt-g5Vkfz^!T z#dR`I3crjVxxe!pX>QL=Jr($;W!s{%y0~QZ;O%=dHEG7EO|NqopW1zc!yYi<%$=UL zpHf#wbUQa=^0|fgWnCFrTau)A+v^)mEpAdwr*%F%y-uA+x4s^D(YWwUl~?TtH`&j( z-wm+jG+uTU&pkLWWs!9Gg43(ax_VXjs#y@f8OM-q=Q7V2s%G+xmNOgY4-*$>nN03+ z*LzZ$v^(RE`OAyfXNunNde3<qGiC~ zj{^sAN~a(1G;UzilETh9`DcN?hv$M)rHOB@xZaAUUt&j(8>V{yXWQ?7Pk-a4>VK!g z`aS)BPyheg^sj<+9GQYGlj2gPSk6(36>OX%7IT$S1&7UN^EooElp~kpGKo~KV9Nv| z1)s|nOGR8Uo6nO=r9vg2fONHK-AYJDZp-_1TMn*+KLrSXy+v=oP1MhSgKT)QA-t!T zp1ZcZ#xEJH0Atmc7|znFc$a0m{J)kOtH zvw{Oze0C6rAIistA-K>QA$&RQ4SQHiKd14J>zLY&a~rUCuRpac>KbM1?j~a`2M-!m z#82CN%kEd(eLTE-L`2xHi}C+ z9c|xbQ@^xfR?N2_sPFo(mn8^e54hfJG@Q>}s-67q)S0-{z57@C|1ql|@9@A$?w7|u z%Z(a98MU@zWm9=^N{m=|yL+!b^k>ae$6w^`*|>PvFq>(^E$8#c)!7|cbZSjs<)yAo z>dz|8+clTA@k)uhLx&}ACVH=VQzCmY(Btc?sB<%fN%8;>=h6O)hTLd1ZkttkJz>@| z-=fqH?dIGp91+w*Cyv;AVE0SUfc=YGC=Txl9nx(7kTrdq`c}+u7OaRe*NyFb3b+*Fzov767}dM?RTy!SnzE^OVb_2vc)gPWb}B+a@u}zpUE0_$YG_$ z(cp{u`}XYa;Iz2#$mjKO_IHA)V|HJ>U3wiAzEzbtc-=C2_4Tr8(l^cVRt@|XObqQH z_u2G0e&)J^pdc7EOtLN&L;U*^NLj`a@W@z zcD;Zxd0Oz|;!fHHNv*zSH3>P_ad+ZK{VVFsyjinsUuJeSpKwLr=+LK6)AtXINLShT z+5}xYjD|~mvlD&$EVI;F&RuRls`au59%^0dx(k;ECNjF19__S|b-ktL{ncKvU+FI| zxZR#xIBb11W7*VGb|YR}PAzrYI=Vb}o$p}U%%1k^{@54uneAfnzG0o5Y1e1mSk-^x zsa6*T(S(mPpS8a~C-wNWE%=mYC`9Ejq{Wvhx({{cJXD7&`#aE* zu54rVzOku`dP2pdoh76Fk{E+|*E2fo-yOkNTyM$4;QN^yPaG-mO<(SH{@nS-n7LEG zqKaegqR$>t4;S!K0_!^5IQaDV~i@Nyw zWRBqO_8aTk-wRsNC_qKgpZX)4UljTA!@9fgR*ZRed`_p=V;!_pJ8ZV+R5YiZ8^6#Z z*<#)F4-31qU#yI1`q6pF$R152My6_+DYny-l`Dt5I{Vdmbt)R1a{OG-`Obf=%zDXr zGcE7ryTssfhjS;pPhIVjW^y^Yo>S-_s8dk4pydxz;B9}Fun?r<`PgfNf0ADBer#+( zc$*2|L2BHs@&!_sKhu7&LKDKSBg2oP*hb%?2Mjk-}vVZoZt0sv?%5I(P2k-Zt6j~pzI@W9pX27q?N?PW2s3+H``kg@3@QW>#P^i zFYfJI?`))ATO97;r2CfC>$we{ICQn(L{_;yYuWZ@U-q^=Er_4k>%>j=xPsslJ!#JU z+T<;6`ry&HwZ&bV3~yVw@#C;-AM0Ly{w+25^qePqzx0@uvFXOm7W+T<3%%QJGIOAK zOF`^RpQ)kE92Y;tm$V2h5AG1CZI~Or2zzkPi}E=xbOyjb{AGbb~Ywq^3P?>dASP`-fwrL|LW1N{qoPG z(-#O#DXVf_u(jJhby{*`j{E9;vyuQ-uz1ZCR!>s*vU1%?k z>r01x40P4oHTqi?o znYLE8v5u~1`xTSKllShGO-~xE`Qo#zZplmARc&?Ox;LSJoF0GQQy^H2{n3?u*?QRd zL)_Bqt#02g^6tBK{YNL!gT7YV&b?N)pSX75E{g#1;JM!h_WdMwn7XsKEwN@=TVCmC zg*S*A9j(7-%I}$iReBfx*JsN3-$?g2(*2EeeP!@B;pCVVPZBB%KC|~;Kuh33^;+v_@-|L9S)eaGM+Z{gBPQY(Tf2-3oGzh&@12d z{S%)>T_YbqIxK82aPGS}7fJy6$5#-+#D1X{`oteA(Chk#n6R+t1VsqweS)vTOh2)?*`1oxhbJopSTq z5X-o`K|S9+@ZXS=TCrnSG4k@;Uw#ciNsIpgR?k6X(x&Goqx@u;pkEku}~b^LZ-hFgfegZu6d zcK2J_u>WYaYrW>mrJLC5OBdcR)rUUq(RJz^XWuiYUk+_kXThbNe*4C7i{6}e?(4pH zaaSCzyquVDXE$YkhFOK*xWnUZ_Z%EP?QDn9UoA}^zjGdO%wm={p!M4WA&v?6cNIs3 zByHf`v3WJB%j;7AOVOndCRhdR>>^8V;Zkrmw!e!H+vLibV}2cP2R5`Vc@p{IdYM#k zJ7de+!n*?pu#y^kxHoYw)CVlsR`1O8J|9zZGVdMxcw=GT6Bp~Bym0d5sIMlJ59&YG z)uZO-)0YW9&PvRVm@(~2+wpH-S{=^jS?Bg2%~;MHF-lb|?B;pf{Zh_8N!_E#vhA5F!hO8_J}c;J&l?y3M}?q-KJ&9-L0EG%Gg~`-}TJAxhL**=<{x$ zPfpD{^0?cLF+2SSKOMDi{cc&WI(+&?XRj_tUUls-dRxctpOy@IaBKIZ8M`I>9xdt` zY_qtt`{m~jW#jfw9E&RsY}wZ&;=r(gRGsScyJd9_TWPH8`G1Sp^hgntZryyb%fy_E zL6e0^a}RRwH+=ae_Ooj3KFv91!{mJ-cef2HJlHSWmY-S>v5{%jWAoA5OvN83zM#6A2iq(;=l2FFY}fY zlbJIEOWS9MEg7C!y#4Okrx$}5gH9bv+11nWw)dQa{e16om3_Kx%GlE@FsQ!&$MNd9 z53ekk*7H-@wfiR2j&}+c-B@2#u;L^C?vd-J9M6w;G>q9^dGUY5Tzwut{@5PYNH3j7 z!7i~HUFc@J+k#Fl-0Zk^z(Hy5x6gN+sQp^$`&(=tI_Qk^l-;B8Vc0b<&93nMCsy8} zS$7W0o>cG2oR;5YtsZ*o&h)++@M`>ByUc?FR;@aGx!=H~=!o|TccQmpE3>FWS2y4L z$L+1mM|$P5_;&rbzj;4;c2we<4#mEC_fOb|zwWSw+d@9W`$fsss};7-gI;pqrKOuU znlpDQwfO##^A+E`yG6fJB!1l0#V4E5wevJTp8@smy*vL$#D)c*_RlqOQCkUm4eWzI zZlBz=-LBAr$fga-u3SwuyZtI8>gmYY!4aMPpL#rZqe_=_4B~7oj_~e#WY+U-sVwW{ z=?9A5yB)c7dgQHx$J6WXZlCfwM4CQp*0dQ9oGVgC_L0rWAMM=Hso3GXIPux$ygnZ; zotL-WasBAaMNW8kO_2MV*7SLc>+ZkY2^2>Zh52pMzdWE|4(+8{*PXH=czogJrbmh| zW)?a<5~o`=nE%b1uWCjwK0Gwx;)$q|>^2!=_iD-e z+w>7TZ)TJwbl4TQwSL^P1aG#cpSS1}(C5*OQA0MX zpJwwmIOL6>>>d&nbHZZBk}D0r4nMqT#h`9(cKIhitrA*v&zTQD?|6K>v+bUQupG}?Mu$N+&vyV*Z14Cg4M&5Zr*x6 z;;G#R4&IAfch3d4Z8~va$5s6M`>aM~-CVIlvr{B1^1s|@Q=281mMk9I_x@c)`b)>A zCuEIg49E=&?a;ZskL{-~_1_$AX#eH*eFtH;p&v&!-jyG>i94J9@bj$r37jX}r2a!s z9oX9K{`ijWoz{(L6IW-%dqL0CaqM}2e8_KIbjfz7?&CR`bOoXZmnlsqL{F5!x$GMPZgXLHyxIj)q7WFoGZt7J<# z60RIq;0l>UAeAcx5;j}HmEjVpoMZUee{Hx6Tp6|EEqEiQjW95T%f;COQIIGo2aj9&N&6<#3fU)@4r&!| zJ>XK4ti9)&_{?uN>p^kJAS-_PyQ_y=ju`OiuIN$k{G-E`#drkyF#A7qS`$04fqwDO zWouW6HXYf*&%ME3R#ra3<#mg&V@(sMZ?#i%_7=R^?AP5+a6skfS+V`er+csOZoAS_ zF|Y3B!WD|VUEAAR`7anJ=o&xhp5W;&uf%l;Vb`ArT?sj5+1;}Fvt+?}zXLsk>*t$3 z`Mk#QiYc;vplxOC?cZ21!h3?l3VD#rgG~R;Lwmn+8@}m7ZioEv9ikWa>%Vxun&JI4 zGbwoKvsD+{?CgH?*c5dT>Y4XY(Q;*vx>Jv3+lLKk@GDD&#mO_`CJjjK{+4!te$?V~ zX}4=1O#hFT3eD}(>o2g2`?{-R^n!Y0j;-7^I$(0!&2ilB9s!DRzS|G*9q)yD7VZ1w z|DolMd-u8=e&G7NU7GdgGR<&XY?k6;gHGQXtlYEVaPqmXYns-3;coJ=cY1JABYK;n z^eOhcuCJ_EGosyjBr9AQ7}KL~_pO1Rv&3z?&D}HY+k>o4!J@Bq=H<?PTn6MU9|l^Ps5G8;9zlKulrEh+Gi%iqs*rtfBW=(*}>NX znTvBSM?JpjP>&NXVqd>;_i2gq-gzn3H!iP#88nsA zPKkMsM_7j^YPV}#C!Svt_K++6v!%lCDf4^ERC`N-aXH;Iv$Z85~-gk&)p?o)hgz?qoPkZfSr6hOd(J zGAcr+u_#VG;zUS$;_8Obd^pP(VM>HhGD0X7A(V~~g43@u;UH>+P!61QiV(^}#EGKt znpZRuAv6jhG#Vi|Y!Hnl&#)g)o>LEJ*u&ZN{s^H!gisJNoSDoa50vJUcOiLi0l(91 z1((*uY4sHqZOD57oY&U@GaT>>;Sb`#dc&F1#F4<}kjsHA$9Q0M1M)i@T#Y%CU*G^+ zIBAtQVbvWWMjjkrZSF}vX#xd#!^HHcWYLy~g-!n}jtN&e9hMIcn6nbbVs4(Nf<#4977de06jOQjK4QE2T zk~AC#ZA=eGIvZ(_fRUzGJCxlUgXd8k450$hG={f-8P0YGMonYce4L-|^+OU$Ra@XE zZu&@-Qo(NWLo#Y*GKM5gr&nl06j`o6q@q=(qD83^l73{!q%whNno6x!Xn#y%T9w35 z(~n8as*)s2w31|nZzU%nTR2FaUYW#Ju1S-q(pfr%L@P^S=@fc6_nJ6Wo*Wd0o`OLK za`Pd307?oYX$|o_iUU0arDHHIEMZ(2G%HA$-d3a2M@!NaVTOblB&0yXY)EL2_ralDd8yP7qfx_H1;(0^%)q@VisD!xR6s%IE-q8e zU0jY5Y*|+7dUH6c78(iVWUFNonc9OaM_jFeMj8~EE%_V{@fM>fjyWnvc7=#xPAMdY z8iiVj=mixO6|_P`Ur$Vqat3Bzh!~g&G?iXR7>A!^++fJa=u3zNav>8`PUu7;qb<>e z29*lM!F&hCWy)mZnd|}87!N0Dm_LI^8hR(6q(@)~1)wMnr59qDVK#_?QEd1PQ);qB0k)`6Vg}X=(V5W*5zU}NTj~Sfro9k- zJq;PyF(n&*OJmT!_c7>BP;4a^X1x#wbr4OZKt=RF zsR&pG9%(grBUjMUpO4CacL&*rHlzvZ{3^@#=kqh|X+DJ_luJq+wVX zX;6kn8kC{2OgPBi_}q>H&ka3*5j|i+w$&V(iHxEohC+2w(m3HPE~_$UukJ~eIq8Ie zAO{5+ZN?90@dX0BU1diH6h#xFMiXLdX0nCq=w=2jLWSz!3lw4rg|G!Ui_a0^Evu?E zkEtxdf~dB73AE}ZnDE0{TtQV<=xbwJf6Qv~eO6wzT49L%JgeysS$S2p!pQo0R((?Qgna=ps^$A>HJN%R=9BgIS;FC z5mACUSpwXl1Ob$=+7=NdthPlpO8_zIWGM=Hrdpu|@qy{sM2Zo{)E1KVLkP_wX%IK8 z^x?xs2wfrRWGdt(@CxRO8P;cP=+-n?Wdk#;J_ylYr()n(AVC52cGJ)-g*Jy7BFSOK zD=OdW5}KZ+(rVJv6zO_ql0>VLNYx4*3q!6g{B$`wy&}y|C)27j^vwQDZDu+%Fp7L5 zQ?MposY-5H^I=$Kx~wI0pb{Zh>%b^hyn;MWHZ(nJ%a1G*?gb8p=qpDC_6F`PfqUQD zxp%ALJ~%}oOJ#;>w9Lc|Ih?~4PjExW>PA^fb4e44kJq#&pJ_T;; z1GhveHU2i|SDE&!ooQxmOovHQ70e*5N}g;Gw0liK`+=C#G;+VdC{{$Qlt@SLX#L&8 zQ9m-rZ~<{PQ3ZfF=?e-BgA-maUCVf|O;D&6$y!MoGdM+}X9j8X(Cw~2=O!VX6{OJ< zyjYRE7#>}z#>rzYLVg&c=V@B?X2ZP&gXrVOH$#a&CLkEZwrb%h*dQ(;F-CvrWl6f6 z86=UVW@a#TigY!+AjYb+Uqmc&8Xruu%8fnlh8_B$2RNy;&F43U;C=Qq(YlJW`CSV-vA%r;~ggGJv z&K(SFp&2SiP6#1q(oN9_83Kw-a$!$L<;as<@Lx7yTskc62>+i2G?iGuSpj7Sem#3o zM1-FM<}(G>MKr<%=mtr^{|DI_pz#@bR4@dDFJtc62VgYNs+QtEzviCVN@^H&fiH?sixAEUB*EWmINVRZL|@BqJiLx^}upkmv`Q zk}27cB|X@%U>GoMz!Yo~hF=W$MK3mN$ncxr3~x&bjA)a3;8{{(Zf~V0jJ1AiB=CF2H9W0Nih#3GPoTcK@rdkJSR& z6~*cz;C@T(C}%EvJTDmFHz56R(f0D7z^0r&AL_F*sh})dqpjL2@mGw9Bzj>i zr4t>H+22MYi$DF-Km98ZMUY^DnT@S&x`+59=@EbbsI|TNm&lRx%OX`plD>DT^(Sz5 zkOcj6t=4;xz|dTO^Ba)1t#5r33j~|Jehz*9f^-bEofSF=P6+95wf-VbpZpv6_AB`B zSEayZG!v1lhV~!OtS|jit9AKjM@d{J9ah@Dh0C|H>EQmS_nxrA-)glItb4kmspScO zVRQj5zWe&g+*(*4WV)A&z?jsI0?_MIF5RewT%+Hd^3KmGUrd%yLcbV7f|Z+z+J{~28h zrJr*e|9R~9lQJK{<1?V$l``ocNE7(`2kdeB>!g4E!8cleo}CEb|I4y%zpT&3NB`wx zJi}k8slULg>IYCEA^Gn8G<>}4aJ05QfcNWXTdfcN@z0QF`h#y@ZIN^u!fo}7Q0#sY z@?iLjt=0#B{V$LzNp3Gv=BRt@p3xOKU4!A2Ra~V54Cf-24=^dquM!K&zx7_L^^ahV zg}eK`R_kZM+>p}WY_oa=!EfJcwf@fgt=1n(JOBRst=2Dyz3%V6-)ikcIJH`> zzxRHtbqIG!tJV51-fy*T00*sB>kr>=wRT0R?~lLH`bU?xSAV7Tr~lx+)}Ip;tyf7| zK}AR8z)`F9!9V|R|Ce;sYJKo?!@ruo*ZPwWfIjR7fBC&uYj)d(&F}kYB5AeEZ(q9d z;iW6>L7Y|(^8&4SPq+4;9VXd>QHh5iURvMJizFT#%J$x*S%2Y$scrZ6(`;x? z4wE7=fcdLvlYD=k;o`fIdAVqYdH+j08s7bX9*<1Dz2$?XQp*92-_}W9O$0v+Vp;e+ z9(C?S=rvlTvR7WzfTPBMI<~5yDB*ONjN((XTJkW&@{go(sZ@Pg)jp{*3qHEk`v zNMi=w9hj52$kOb{H(buodAybqi0zvY|8%9K1iyJY$VNUALh{!=b{m8-|z0{__ zE6T_RtP~5ud8KIt$*W{AtrF>~AH8_7K8cGmF}sm|`_jp+qZ*45uo-+A1V6GA*CIR+5)h_eZN8HR}4P;=_u(h5U4c8T@!VS za`C`Hn|F?rTWiXtyW79JS-1rB-e^y%ZL zhWVt4{NH?d=}OS|+%D^L%mmdqqlBMX%Goerj+&_yA~G)^oP|+nGVNT>R#=t_jiPT3 zSH5g$^(;%^cGH4+2ShDfLAi|A)5T_bPv*%Ln6~>1!Qw`4ymI_~$7#nZSZ&d`G ziY3KdP9qMO~BvF$CFV~C6_V24=))oGhv>5dl+H8A% zPLH1#BM6%1$X^CY^l&$rY74rVmPyeM>z7GkCUIGwX*Ck;IdFr~Qeeuu!lq#`5>npJ++MO!Mrei54OZ&?kPW@2*21P9O~?E)n~qKUTKMv5QcVjC z;zP8S?wf@d>!Tzy?MKt`OVc+!)|6>1XejDMZ>Xr?A}ImoBpnWP7mc*F zQxz{?ZkT!(fV$oX!xJ=#rqFm?R4?C{WK`{c~uqh0NXKgw&|s4VQQbYx}Q%F;^Q(!Ol`PydhKBiZuuV8wR9Y0OR`Eg>ZVw!B!7G(1!MF;pBZCgQfH&KsQpdPPZk+z>E zSSGm#X_(}%yxttM22^6jj1H@6Qm!vA7kSwwn{v091~!CYvj6xbO9~UwYmkX+>0w%w z)zc|UI%2a;`^*YvV_XH-H5NVZm3AYKuV@t#3g1soKaWS#WT(mt=;5fSTd~dY^U3hu z)6X9AP{Wsjse@}l7P!X*BnxPN%`klvVM-$N`ZY`Wy*wY$a$@?_kqB@l!qqn$jw07c z(iwAQ8D15>#W}H#6nrsz({xm&S*OB<&z%zE>XVYA1Mu~ps4b?u=f#McESGWhNawd6 z;O?%-49kjDlc>Ps(}W(|mV6-6F=_YENIJaJ^{bHnGdV2cGU-RQ0SXJ*i_3HXk>f6< zK1ocGpb=9YCdTW9!V1_yTOovP9BO@FfV+26%HQcnT(dMZ27GRku2BsIbxtEMLt2~bsx+N6L-@857 zzjb|ezqcCS?A?mv>%;3eZrreF4lF4FllD#9|E)Dt;i3IZNh-5^X03DSLBzPjCwz?n zBQ(i-cklJi!)H%AdlVfKHN3uiG@)>hPMi%p)5%c5qD>{*so8EYPdOw>ztOU%)&n)~ zn6}5IT7#oZN@92A!}bnoo%Bq;kDq0NCE&rUw1ilG%y;c-RG(zem&+NOz^ zXH03HyNnV0RrJFvmy2=$ZRm3xDcUW*x0_voZjxkGAI>v{1B?^Mk_$P|W~*(%Df7bc zwmQ(D?Q+VlHHAXmYaRfscZ!9c<*DzEqdD+*-wWgf@@n->)HU7%u7VAxbxUy_Zk%A| zI_?40F|;%FP3zdHlDQnK>_(eZi;eaqAEkrSjrK6ls!oyo&NMBO&LkUYrg4;d61bQfDwe@&Gr6d955RBfjSFc|6*nWxG!ua4$h1IV^73biC)9 zU0ht0f-}tl$3c4^f9E^RRC1^3@#4lp=Z@+bAWgy2Vq=$%6cnB^sd#Yil|s|GW3D(V zBkjo>#=$b#EXGM$#s^7%p=+>4wry1Ues20k0mC2{7Z*3+%*Nz2Aq`AQF75umWD;8V z$_Vk9g|4Xy3L542@c-iC#&uwM!@8G*z!n!5KjgzF|MdrI`uIy~`naE;WUvRA!RC{z zrFjw$j^cx)^o<|?Ve~J^`0?adevgbFi2Q)@<6F(fkAH1WlQ4gL^uZPLQKOUDem=sq zy(ax&?&r0Xp>Vem~}UYWB#)YnB|Hfk$5NUOu?9)jzZ z%VaMut2EA5)|SVJ&8yO*4$c=PMP5q8U`eJQj0k5$VlzyOWKiYBsewNMyUpWt2yF-3 zXc1XMQ%>SRf=Zjip^42n9TfS_eKUxQp#|h5JxaUUEy05)%iD1_jYsP{eAeWCS{?xe zlNVU_rV|sJr<>ayJU7Q_Y_2X3)AEQkgz9vX^eK+S(Epur{Hjx?KTi6qy=_yD@~U6N zAfA-tIO|M=!k`GUAr!+Fx-;bTO!w_Lm&iNIQX3}@GS~sqeKReA zk*m|mK@ks=4jR8I%h89ImeZ_Civ4(yET5$Nsdi0UOzEBtB5eSuZEz=j^nkDqG}#%) z+44Bf;)A4ktJ+s|X({7z(h+9|`zLrC;LNsa%2vo|2SxInZ4y%1yzrC;l8}+oQS_37 z56t}pzCDwVhGr;iO*6|Lrf>&JQz^)x_P&Z_hM;W7#9$Q!p2?nUc}yX?*N1(c1x^)3S{0@y5=33| z>=2fqv?M?x%;!mboUGas<}fbJUXo;Hm>#FYWC&VLvnn@3sx+vyt#X~~cYbG(k0XMP z+N0l{co20_)eiGc|7Le(6~-mYbXBg@g0C1qRZ+&@&x`3eWVqurIjQnVI_ORgC*Q03 ztG(50t7~L$)wn8T8%V2UP{HPvX8kWs6c^*b)Y;Get$8_TBD3AW=XTCt_ zB_dIwn*?!}A7~APUfLhfNB;0v!fjU|09XTE#{o?04=-6OSEY7ce}g!9@zhz=hz(Z6 zQT1LvIW5wI!^$iS7R_p}cfGUPTfM>iJ;M?Ezpg%(JM0faJ&``8l}t-2fgzx72StX- zaXLskpur`kM{XzFG17*u7GX+?M2f^fqO-@@uw0kgIQYrfphs%qdX$_9J|cemBP>i2 ze9pEETcxO9n>>Ve?US1~sEZ40tgn{$f zZVi*HN~=?=mM*9Agu-^f-xTDalL|R3b5Rp0T7(VK+v3A^Jw2UfkF!A{tfHmi6sJbj zU8^s6*Fp3^dNc>4urmF0yp527O1-cgW#RnFbyg>fyf*9&A$YEE2M;ZH!Bc{bpt7d9 z=f!Aey1$>kGHpdES7C^s7o+>w8^LtSG5NOUy`-q%dT*9cQn73BO?v1?%ZT#D+9}PW zjeF$RBvEhOnm!09VKYrhr%@WN0~ z+6xo-(`6*S4I3stb)nP1J=%lw?~ds$>e&w+op@0x-T*qK=R~MGQhk>uHP5k}^i?T% z(J8*cbL-Qj+2)TQ6{Fw;L!60%2%AI{Xgvx7pP-GOEbIWESuojO=5eMHSbdK4P%g=A zc4`u3HqWSMSnxv^WY9J=gQoIw->igFsbOO~`8cT#F_md)PKrD`FmME!(|lU^vs+T^ zF+2aPp=kT)8BQnJ9jJ`)*?97h21gbs4^A>Q@si-#q-ICj<`xi@6M!w);CAW!4Hq1y zC9<(_gd~JSZLDxi&}o*12zCjEAT4dZC6i?F9-;!ep6{Hyp*M+uB;+U?9*q<7#gYgm z?X4j57uj%tV`n71N5HDpL>F27_2bV)Oh_b!Subj+q6q!&P3zqs}-P!$$hjESoiw z!Nf9jbi|FxAHMM-t;5kbj^ANmb#*nw06ujr@H5sGrT@^2b+1U+X$>Th7sU*Q@?<)u#=?* zWETe77JIan%gjA|c!rpg?U6yX=p|%D6!{F~u}`~)E!KT)y4Gd#s!YpDN!pFH?HI%h zNv<#7XSY4flkzGo616UXx)-Lck_aLr*nN1D%7L=Y{Q#w~cnmPz$?&o#29(Q#xeUf( zOcUGS!@P^_9?84NPD;ec7bClD(u2j$V+nlfQh`6*J|yAXmbCJ;$du%yvd1ek(t=-F zmlR11t`^uE=S<>uOhjo%Yp%)&ub#m(j$V9Bvxk_w)|n7;lBfPr411IYws0DQG99@3 zECSFuAVL%47m=E1pGLM$mIsM#m`(@~ReG6?#gYIJB$(6aGi27>x445m5*w0DC#-WtHN{va_EMDb}nO zRyU%PEDFGEXj~m44a>Bqb7uwklJ*5Y_|b;+0B4X^{-O-7ftYB{A5ryPG|ulo}`LXk_+q zZbCGVy=0W1EHUwrzFCapkyDp-S1DXCz%eC$mdE77!vWFsU|Pg*`4A}k(`@U@n3`o+L4I;4`B$Vvm{=c9gFQoB-BQ?kyiVU-U1DbW# ze+IYeU;L$uxmEpo(641=5;C|hhI=_KEpJh7#+7>WVy@I5aH^Aab3e~2Q{~gaAv4h^ z&63N`H=!o`3wlA^FrFsy@YHJPaNh!4eh;HRc~bctgE~|ZNkaBplpN<}1x_C(`)QU8 zO-kv1LCJC`5m8!d0M`~A+}sgk@f>HXa)~P}-UMbPeN8E0cc$a=a~$nD)g6=TlI#0! zJK0p(7Fed1TbXpF1u)+G$=>up)YEm>=o2K|;dj)UxuTn%dL`xpjwcuhLf|JQbN@oy zHT3v6DT;K66Z4jcX;-i~3lGk_qNB&vAx_1xR5S}P+$QevZRPd&vH3FYU3YJ z*80``qW1=djviuuL`@CWAj;$H=PB+~l5^R0ty!3#2MPN8D zC=~|Tn98pC1W=SF9*y!7G(~mE%Flr(r76?#bX3Jzl26OgX?GUqjHvRN^iB({ha#-I zbtLk$>np3*uH9O_)w{_LR(iK?-oA0`)+z+3?ztro)e4M<__xIC5LN#2&{^2GF6jGsNTqG+PT%8Ye$G|?z4-Q6-7R2>n z%G2>)J}NQkJ{gxDF8wacAEedcj?}4%-e(dxaxWj{#bY|?r$rq6_Y=e(Zeasi+~+&r zT=+*iIlksNJwHAS&VKtRE@54)1u4n>zIhNlwPx7)% z_eKfFyq4=wzV}ASk{RXMK?kufO9rV%((GUfWR{Hb2@b`$5zuk4L=qa9i0cE-t_Ze# zPm?S;nd@0sS3C?TcKN4-F;LBv>ufvEVCGsqX?jKJV6cjsD;%^!@(RRxyjGlc%C$kU zrul`UYgw;4Tr2#ipbo!3C@s|8O1-lMU@?pPe~$W}UoEb2EwfbH`t zznudNTI01_lEH6gLtgMH*m22B>Ql&P4VO@nCx;?EIy(0`;y&WiM0rUhe#*hPOg`=z zqS(wrn%Mv-GL6v6{&QXmFyx3k%`2o4l~XD8p;KWh07VYog^#MDm_LN{64G%WSU4b z1*F~t%KPa%o^WMv|yS@pqw`rfBcm)P7=rlTZ7_KET+oh;Vd)B66l zWM}77^Zn#>7R>SxkNxgF3*;PtQDSZt<*hnYREb^=osx{9ceeQq%bdSko-mAP98zI9Pu&vj?-)uhBB+&dQN*WkgL8T!5_Mi1F*3>0mI?W9 zhLC5>exR()?9_7!;*?ZrZDed$9h!w@)45}Qw1}E`Rwcw4sQxI=CPh-hvI=IQBPrp0 zPjHH)CUVN8_$)0e6UEaC>q$PXx<$Ib5$4N1YPb2ek36|Y=YV)h;hmDQy?skXET{;y+$%^&h zis%GQ34v$9mE;Z2KH)Atj|+t1E?r=twVLe8v$=#36kH26;lb-JSn!8vYUjt|BIoC?n^-tt}7}&XBstupOQ2T%XlM5PZnQH+Dgo{vg-A-$H0cB=vwEv$R zcUf`{A{$)z;8j{Z{=QwU#Kpv8pwNd}0OLRg!&_(I zpQJ0wv5iy=x}Y-kgO);bIjH87ln+;>ut}L;BTaA#>O?XiV^!d_l7pzOW!Rcivcr*) z^k%QOyuWg7zjymOrJqs&xY)DJPfRq;j{rYhc6VF!{qpG9v2*9WcvuhIrs3M&N`#2SCN)ITgN-vM&cjVfm(%o z(_*t29J)F|KmOUxrta=d3&pJMG-yD`jR$ze?Oki$8aGkt0ZvM}F*VrZyb;ehO1yWz zrA>@EXbzqF38@$?knjEK^8(C(Up6?_@8jl`P{+C*Fd!Hx8Cd^<#Yhi|5;R&y1 z_LY(JEs7))U!x;u*9kAHfjcM| zSTGN++T+o12BVGHofJOLIOUDylceGoGpK%04&q7jFfX1a2M=C(Rqh?eNaC9m+tX2% zPDXxn_TAHDGKvR2*6xjxID?EwwhX^HJQo$k4Ubp5yG5Gp2iSO!!oB&}r-_GTb@?o% z3>Z3EJFe9pVA=#Jd7ai?f13CMv@d6H@=1~SZ10jedQER{{-*zH3t?Ic)u+>OoI!tp z1(zXmFSp8v)6wYkUY=#7H+c27%KMLYp3u%YGz@oHdG zK~X%lXOA;|>PYJ$t|$0(dXQj_eW2(CEK8dQNmlJteq$(0ne6-up5c&$CWzkyzpA(uHPwc5%5E$zX*I4L;&s7Z zbsfgNsVx@n#hm5B6$lp}_dKqx*b>0SC$ac&iP>!n#BwT>f7MRm@_MC?NoT~6>=?^D zDAHy%r8$&K%?!_Rv+ZE$e3}v`HQTl3FZXLjb>|8DiX8gDh8>yb>`pR-gmNtjB>k}8 zH%5+wt=Z#X*S%96uxwC2)^eqYf-8(iP-@er%GYbKO8h4u=9MGT>~lL4Yl1B~%%EA} zHBF?>#s+%dsnJz|I;^d~g&BPrQ3nqYO znImq+23+6xx%JCxinV>ATTgs4VEU0dO#&z=;8ASwJeU-I!!nS0ik*KXV{ok`hIWSf?p~0%CeA=|#;3Y;un5 zV$}n{oFk`1sbF^U7P5CCRd-x`9z%t~i|=#;kf7MWdgR(t>C#|(0wudsWAy@aSUqHz zKq}6(UAms9imk^k zb8<6COgXRw_8KNiJ#&UI<4o`dBMn$$nbQOk=?v+RS*>m(Io0qW14UOM`J7u$H!I$V zYZ5k?2DM>F6olbl2R( zLI~(bW)(^#-=i0Hrh2>M0cl=t@MAjjyTs*j4y0!M=tX)n*uje#+=SSXz8rS^&K+*3 z3!ZA#ttDZV-Wtev0Qy4H^voLT^!Gk}8X?q5-E_^RUfsIk>-}E-7y;R5q8FG8x~te8 zK;?v&yF^+H**pqlyy4%=JE^j7J2`17q6 zOt%)LUaAb@EMGu4$eSFI3claEGKJTwV$>5n^V=0h(x$_dGtziNgT&W_4;~)>uR=+> zHf;|EyKIm)6C%(LWzhkNe51uUkZqLLoaAul4l)2F&fubu2A-<*pG6FhCg2feJRPvp8$2Ytm%g9P7O=Dhq%|$(KK#7eHkhlp7jLC+ ztktN?)1*=F3vH(mAS0c1yGM&n<8G?cwCVw6p{9kQ);d#SKw)2rYbfeXJxV*IdrMxe z_4-V6J%2vt*A*_Kl(~WkVU789f|VPc*`y<+QNma zI&-L2mCn!Tm6%%va403_*Aj~F?5D-}BrbqqYZs`C_=d8oj5d&oX6?U7%ME4EXj$xl zK9ZUkcmAMl&Twyvyir>&Zz^{NTr=$5_5{LwXxQr8u{-!CNbE~=?<7XBO*5YOklti- z8oqFQR3~oizEC%S^^GGnXkU)>sxZ$Gt7s1FBA6t7v7os;UYNEU zv57v-OS(%ZawlCl{y0bgQoBh}H0XskhS<3iVJiiHFcwfliCAooQe>X-`@=yHDmtfj z7vap*PFEW_r*q2pKcJhZ&guIeZUz`sUe|uzhMuEO<6;Prv|h)CKP2caq|l&Y%u;>f zq)b=mwSb^BuYsmj^g`{>%IP(vt12qXtjt5G!0s)sGZ@7!)?GJDR}?eP7`$*l^%Z%h zvl{6D&%9oH!<%iSVIJoVSXjApC(1@RGj&hJ$*5RlJ2Y8KdMQ~=_uTHa>c zXA|Bp_ucz?Yl~+O$_AWxQ(JH1LZh+(hB_s0HRlbcK|A!vGOOa9Gn$90k$R-j&*}8Q!c8M!}ch6zd-`mYm2%RX_9iBFOg^FC0tpo zo7K!&esq?N{%X)hNDFT+yzu3lMW^@Kpg%8Qa7F|4q7R)W^TMnb*|4k%GfJ|9>ahR9 zw6!2BuGw_V*Q~Gh%u70r)sHss-n;+c;U}MN{l@n{+kW);$-nt@=h^emfAE{X^_Szl z!7$lBI847d8jZ7j@;gOYO^;7ro&LDDvbuKd`i+~nZnL3pF7%%!uLyQkKNTEzpZmK3 z?EqjP0S2rEgk_6C4x79X0Kg1Rr}cZL%FjUDwbk3#Zr`}Mdiy%rMcG23qw`L@AaIO~ z7Kh0|55cH=N3~$OTHNg@+AFFDi=W2}LgciMOnP!64#A1~z3zKb-IkPI_RZY+BBD#KgW=6z?Gx*r$tzH=v<#0W(u;oUb; z3Zo>DbAJ0lmeX!J>^HRdQVf%73gs^00OcD4M)^SsMVfl_JcKxEV|N9-T`dOUf2KRna8V|}>EB12RMbF&wC1Z%Br*H)2eX@J1ODUU7F?0r( z-AtcBy)+9w^N}Z_R=HVk r_E}YxFbh=@_*?Rr7iI}-SY00Sal@t56T+8OWll3~ z=|zB*wuwaL4KB{WG4_x=RZe|BIbC8zr&(XRcXK5+-L}Ah9HKOv^<|!iPy_HNIgL#F z`^l+AC1O>q65_ULwzfv^f~Fa(URBJ3M!FE1LmPR0%w+|0`nwHf7TKc&3JWGn5v`!8 zlgrMsbqVuaE=0Rz*LOb35Gp}27xsx!SWu}(+KD`uAEN;uS+bPSW1;CKg%hPXst(*VMtD8GbvFpeyoD$?oD7Ls3i z1~&T=>7v?xEAH?e^~2)mH}X9M)Pp#_$oKf1zZz0&4poG4a`rt9kbYL2BASg7vmq0g znN0Ua>A-9~kt~5jNy=3w1uplKm}5YOcw-wNOdrVJ;?%`?6E(OI;zkYcHXWoF?BLdx zeAti3cT37%$IGbPKTXPx1`H2?4Rp-O2K!TF(TU3rQI0|U@G!1o7d=cL3LolU*Goj^ zg>6E~AtYkQ^^oqvcxRkM*o;u;4gOfndo6?iPu`!XAR=*Qs0Or$GnB5_JJ7+tW?1`I znh;hS&kqE1@>Y~^4puBF*l=Lcpe9&x)Y{#4Eb`KHT+}Bm_U>J9BS?+4AdWjj;^1T$ z=>l3Sq>&h|$)0HwD5~-sALf-=C`4#%}yrBB|^RrwSlqya&MRlLbo zg-_n^;J$GQUuG1F!XohoDspEuzCfe3yJr&ntZqY<#cHJQRM{~rH&p534jF`CB@fg} zQIfP0?=?9d2-p!DH1H<=bk?{Q=xx_T>q0DzHDR=2#)ZV4_UV9=^; zBS8AK_NYkDD+Fthx>&hvAPY3Kc4p>~W1g7#Wvloq-H6x?kmWf>nN{ua^B zo9I?9wQ|7W?y;W24_+&i^Fy8}PW0?cfab)_ZNR|JM9(7qA@+9uPD$P(=jlgyg$niuzq=BlcqKLSZpSDkfRAwjf~fAnNikM zcww`s`pPUsKV0CvWUom(eNBgHUgOB);%++%Zf~qr?wg3J$Uel=Y}%jY2aKzRI@Ez* zN7CM(RR`cihId%h4;{&L{U`_0JHbA^-C%)l2OP;ukr%Yg+n3l|@rdYP7E@bgfs#5iD~BY*abl-#V9(pO?rg(8$Uph162xE8DV-AW@M{l;Lk)9vU9b-jq|HSwCZx;$9oRv?JlYQGSw9jzMp~ zX6`-xj8luBmQ^xVRQt%}1(>t5=AzY`Z_gFItVTTN-ks}sUhmDdV!>hA1~t#jYOOo(jwPJ@c31R<-B?Y^ z<7fY{yC*(4*}GT&sw`brR&`Bul`?nQ^vZgI+1k?lTb5KFvA-!B!*KEoS&TCpJLdnjHdyjbK#TkU}C#STl-Kp{d=4>~T6p7KvHr%-r z-FqZQ=-?;1hs&H)O>QTX}YJH@Pt`-lJJfpus{2@-}5cKh%W5Y4K!>hK1||a zQgrsyWHjtAe2ER)3@S|0k`@@+AjKEB}Orq2dtE=$`Cl zch%GeP1Iowo#B=lb2qs%aeK#qyydQ@zN$f3HLS*oJbUWg6kp|}!AKrird3{?URImG zwOv-Z86N>3xGKXp=?900l)c_gog%5{>GAWWvcG0TTRTrb;mq&9xq_V}DT$$GjL+q- zMN{JsOK{Z`5otS3M^&12=&Bl4w4+7ym5J!SEZUw~H0$SrjWla*{COwctpQ<(miE_1 zd`NOgrV2?Vq)Da%Q6aZTHz-lmib!W)6S8Z9`Io}yxQ;f``>Gr?FnhJmqgBY4)w8Orvw}`+aP?}ydKn~ z2!G_JzQ#$Il{1ZVFOIICK+Z&0-8QUQSs?Y1{tHw_UZN-iK4nAo#OWk1%gJF8mq|a0 zLg5-_18Bz1+e@2pH###B0o?PhVg70%`eA)BiGK8=*SY=jBbcznRw&a@7xaaBX=Yi}&BH8vvI?(}A?Qp(*gW;XSCHXDK7T+~@iM`lN_C;SsHgBY>f4j_f))nw z0!p84+}c-pW3nAr$h-; z&$D%^n}kL`LtnE-n#erL%@{+fFa7)ZG#jc`*2Hj($p#xHGxJ>+Fee+<>fqug_=Q;-_hAUn1I(YYhxZGA4m3W{xwY)hdu z(Dlvj0g=14j${u00W+(kZ-wpP_Ht*z^^>@&lEORt?NBX)mrOskP^-39)OfEHhd_vI zgy>(e6W!C9rAs8VMRQ@8QmuVD#pNi09%}Vg3%{1 zP%xj0EPkVay)k6C>061Wuc2(RXtme~yoL3Axy|!Ov!^lkzNE$u-46$?vq$LH6P|H# zWPVc;)C!Tqwv>Yf*C_tXygCyO4BrUb%AlO%lrzxKgmzR zJp#94LwK2H<#&6_YB5#{JsVF}C?Wt}sqdPVUJuQqS?Sm>xoQ^LRACtfy%Hp+o{cA~ z$XtR~0cTOARqW0MkgjRpO*0#2WyOar7>N;>hmRW0*=J-%a^88FJJ>) z?Un$a8ay&$nz_*7hBXrs5E--Uq)*QRxy9tFnu{)-LFBgBPaz2ou_awz7HPy2$j=*t zPN@dUn`l{2eON1@&No_xDW#7>JQ+e6cwa|8CUS>b4n&VrSZX>4GeZOBc~zdTHV`M;p{NL?v1k{T>M?x|VO-YZqZv6*^7tn{ zQ$&&Pvr845oWv-nT@&5QV7(PywwG9uHFymlt;Lfn)hsS-Gj3u#x=ga!f!kwZBHTos z$ltA!{NWeT8xD*y8nwW+v`_5}u?vTBAsII<9dNOL61>FucA``T!-cAIm!IcZDzRxC zV5I7muxR7zQ#(Wz@HA(ZSD{RO&*-qE_wXXXDez!(-QN67v(f`&*P5p(sPe2#20V-k z16ts=yWuKEqls|;8C1HLER6Btp9udbHQqx`VTD%+)R8xrkvw(MvdPRq&s5fBBXbxR zC89*SFJA7p7ZzWC_oMH9`DS-llM{O?{htAEvWmno2xH0mM1Bu2_(HV1OS^xjL^18+ z^*m}Ndf@3*$<;uy4>Zkt9p!lO`1|vP7g_23_$f=Xj8V!G@4v6dSJjm#TA`&^WI>Hb zCAI{CymN8Q)O}4Qva1HY>=`KNeG`#!#9LJ(Jp>w=h`lrtNhBT$s!eX*&{!oZwMaUI90my%b3y{A*|)ki&(pkj?<$eXL{eu^N|ZG zbhrHtMtt1_EmMr}W4bu`1xdP~=qt}oqOy0x^@ zi)w|px6!M{W^%U+ZEB)(XLZqiUt6r#q-7PEt!d-4y=~tU%W+d*(NT-#F8<-jg@+#+ zEhNnhyf>FtR+d(l)|Rd<-LUZ5;@t0oM2JSOUd36m7Z;NvKAmRM(exmh466J%8Eig! zaCh_Rlc$@%_59KE&z^ts;K{vbk3WBKFS_7xO=ksb%&Mx#1Obh0`_9U$CrP)>LVFvU z!>ZHlWz7%JyMRr`N2a~KXjaUcqDzG?PyFfW>FGT9dfs%b)Td)OoIj7(yo%TB6+ivd zuSk^DGiFu66S&6XnNn-UT(6ZX%b8L)jG?>D2zxw6yIweqGMD(#f>!187bB%p!qTd_ zhKNCZHXK4W`%gaowEko~Hfv$6vNSi$O?!4uLm?X$!WYylwGU!P&+Xxm|9<)@{~eF{ zZ&_-KJiF^>ER~*{+;WE?%38&&uJ6Q$6hUpL1Jdlx2u;y8Zw1B=qgl!I8 z;LhO7m}oWxxiYTrnl&e%0+npm_6YD{X;q--QkYx%Woh^5lRy#WxH(wB^f0x7!B$vF zW=SCvx2p#ROv3K1hf+(262R5qh!ip8@5e%fs2MlhR*mncGpf-2v=AlGGsyD51tEe; zel~j`jc%2P`(vnAzptC9YueJV(7G^7TGTD!+Q0Nk>x~p^LhEe*-EJ4g&H?N-Nl7t< z$*Z)iW}PpVV|btJ_hrr96xFQ*3D$4wI&{gq%kDWSN5?{1ue# zrhvBauufcBFrY3i_-9965CKeG(w8MKoEfmxHOJo)4b$@IJkmqMGM#piA=v?4XHpzN zc`m_e>u*JI=(`cRS!!z{G=gj%ozabXbuuF}rPUf{WcqxK0K>EXIuUq!2j4lNeegtV zA3YmS_MI!y#uV095taPU#*>FQo4AZg_E+62cORIoEJDFx@^`|Qr04hLYRCREvTM}DVaau27Y1n!lBeHAr{{= z*k*=;dMkWVS8dtK&+?sCV0wT{b$nWx)9&n&ydBd8WmeM3>VifCk&Op+k=+Oi2bWW3 zqfmqf;LQT!bc1+QB=PW+RRfQZ=8OqQu(lcksb`P~tFO}=bj+pODhwJG!ZT*<97zn) zC6VAS9jv4SGNFi2KeaD>`XdC@sjog)BDQJFw4lt2Y$id)oFl+<iNi|{e?S1HPhMl)}x^E#}}+DW^q`1g9~))>&L(HVJ&uqnzW{-ht)4yaZ9Ay zDCqX!hea;utV0J%Q0NCK`xcu|YKtLVqj*T12vF3zlPY$m88{{%w>_=LcgPTe#;`f1 zBsVt7Lx__Bev)IY6~{nheI;h!>f#($Rs=}h9z5n)d%G44AVXIIYDJ3HtHRk|a_%p2 z0)4fX!^ zTF|FjR9ug9EaVD^T+by=h1rOhn$fzwg8A(&f?#3jVT3d{25XQAW`%yXwL7L)`mJ3t z70y|n_v)sz&HBCNGBWsX@h!y9A#M2*U- zwj%MQpYx14L++FEF~aky;-#F9D#{Yds)z={>Ip6mhIMyKN`pagjbMd+fwp4QCoifZ zlyp+=6e&L}uiEl(-8QyikzzG^&X_XW1PGuBiZE=;_87E`L2z=8enia5>IPwv`@>Vh z9Sy}VPwVk)1$yjiK;A)~0OOrI0Ao?ofrvzO7hpD&B^VYR5Il>zjB~5r>a9l?H0iaS z2bqI=@o1Fbe0o3{Oan?9zcWp7p4pYKE;%mogSenPeqM?5T%{tZB=xOc>MdLM%fOCw z3P!H)N>5e0y&u%O|&n!%SR^SysPY5_Px)dr%HX&R2SmPjFPyl4AK~;`{}@F zL-8oBP8UtV_$eLoDHy<_4M*b46SR@Y)yghfUwCKUe9SXfg!j|WP<}r2?tODgnUJRD zZednvu+>29&^=oVk??``M?LY418wSsGDg0!2ORv30kUaOk_yQ=*Y25x=<|3qq#eR+s4gW8zOF0>YP6v^9Cu31mcVdU$oKeyZl~GG8<_y7FKLLAGep@P ziW)q<9Os@tcqT(S3lSbUgYhgK93|B|Kyt=}Sq0m_f!sKO%zctbtWTzgZ-*Bb600&z zS`Z6DF!eMW+%ZywBYOuT%Y_@|kL3(1;E@9(WvhIc7G)*9I6y8iLEHe{6z{Q+Re7D8 zp+=V?MD42ajyO`x^s!1NgCmxII^5Z<2Z&7e^^G{id2oGmxw%n)ds0JhUGrt+Yz~L- zj@eC$9`cw&HxuV#R?Jht0b@m%DFI6?PJC@oZFW4e)OA>v#Q7B5xdXe=qG@jq<^DX> zk-N5gW9Mrj8FYR-eQIg$gc9oMKN$}>k&}1FG}nI@OsnRzHC%cJGM0Hd6CqneTvXp? z5X0HL$h>UXJ=(lE5kj6pD!C)46CRf5JXEBgCA-g-n2NM_z*xA3DZ4fbM}JG|kMUfr zE!J1DTBq=uLMLENGacD1eo!#=Wv^rcmAYUxx3!fe%v-+LQz9tkLxF*=+ptI9lr@j) z4rQk)EznLgj5Kk3L^(TAmskub5*G7PqHSTA0W5AK#zq6$h&{>`9F8*a0ZB`}|M#Lm zFlE%?xYLKZU=~21D;f~Bjf_eaE&ipc4&zLr5s1rKke85fHL2j?^+0BG6pyS)ZL-Rb ziz4=vm8P@)b**J)dEP!1Ch-qxc#5Xcw89X*QdDu@*2>hXh)U4sR#qj&aXd0Gl`t(Y zn^iq>$txFLPza+I;YLJa(L;KD$ApPg5MvnX6f@uuMG^G{N$OrGJJ+ZE<2kb)OuO

8WS>=>J~`V(UdBhPYmS;YlTOpJ-Wz*c!SNMIxo3s}w7;ArM!OH{Ze0x71jvl=23 zzd4ChimSjO97N#rQCG5g+1mjE(H?H~l5FVT>O~4|L&$|)plape%{54V8aA_vd@gyB z9^mqm-i9fsdtW4js^4DOFk{Xx+;6XLm{FP?_1kM3rc6gkR`uK04DGW?@k!T{txuuex1i0rubNNf^m{u8XifMttSc{j?m!#Sr_I zIajG^=SV5p*m~zq+i!A_?4@%`?nY!&^2?J25D^_g9i?OEM%+0a@8zSrr_Zx=kPkVJ zn8K!rk!viRTalVk+^AD9c*xC`4_;M8%r96R%5$?Is&o|Z#e-=X^`qT~z1`ancQ+wpdOGo5-motR@hHiL zapC&Dy|#Pny7#^qb`aav*~?#fg>LTNT62XC;{qxE2SpMi@1Iw0ZTHsgTDdf9E_ch7 z8|BlXfP4Ga?yVK~rpQY~E)|N2+xK^G-LtQgxTp?Y@3-#l-nwsJ?x#iK-rc^oyXl6x zKguVQ(+-6p+F7{0x_j5n!a>4Vda$~Cdvo`;8`U9tRcLSftsbTahn?emRK*8Lr%VrY zer|8>Zn`m1;>0vN=p@;3GRh}DkZZe}4lRfoE5>}0u+YJ^-MbEuQCu7(oxF&%gQPP^ zi^0fm>f!FDBN;AQB*WQq*LLq-vp9nc@(^-u_qL-e2voWNrIThyok>EYWBR>)ZTHqg z+Xy1ayhhe`Z@Wnu=X)To$zh)Pz^?7ybqJbF%fm_PH^1gjdO1kTGB1dIFgf>jZ>`$C z%R!NkMq%%cUdnMgN=`eIxTtW|OlLnHcu;I!-@WUIT*~5)Ulcvw+P%B!dgL}w(hLz{ z)Ffl6%Cm#1*Zl2UyFMtBxHuXm-YC48FDFSdIPC1jqfwswh*;g-^hQ%z3f;WFd)v*n z1VGhE&?|75RteG=9-nqN{h`ld_aG3kl)YIpZC|Fb{v$$dJ3dJ1fG>IH-S&j!76oV0 zfw!0D8jcBz^b~mr-&H))!yrDPcY4=4y%lf%Hh1sdwYYAe_$Q*at~KC~FQ1b3vpU`r=z6RkwplX;s7 z*`7)S5^ome8FXk}od6Z%x^rhi8*0J<`U6>C)2A+c@-ESH8HfO9-G}QD*O|r47@hN1{vmsy@x52ez zk;dOJrPd<7RPEt0LD3=OGlhYW^`Fo|+X<=Z1vKGykOsX&9-5b7VkfU6APZ*Vd6vFf zy`QsL#SM79(hDj*t%b%z5IrwO4>G7bZq9g+>M!(aIkYR{#1H4T^V;uQoSEOvb_;WP zH@dRh{?4ymU0D3?M@#D)ANTKk@7G`K?!NrtZ-4pv%~yJkUL?hIuQXqp=sUelI3T~% zyH9^sd;DjG|E%(#HU4vr|6J!kH~5cT#^@7$XZ038zs-NR_0_xl>mL1Cs;qL*SXFOE^?EL+~guRxya22Rt zuuHZ5iI5AyVP>(fU_{tC%?3UXwZj_Dh!L8p$*$oY-6C^{ws(WIs#$?{;7CRs(g0-vsEKENT%?3|iq z6<1R}EE1Kc+2F9qv-HP_-a~Ai7a-Fahy_v1zBTOOAwh19*3T#8#C5t(a0|zj-_Bzn z*SDflI4SVT%>ma|X)_Eo3l2P59|gJ&h)t)|*8AA3jhkqV`wKLasNJLEFK9a?;+F;6N$+Y66j}q1+w)4tvVmjIWG%aMA*p3mo-^yHx0hqr43&*4zq)lpVj(>2vQZ4UeU$sC z_3>IHBf0@I&&<h*XD1#Gi=+g@(L#_;g0YH!#8IG#hKn+qFQmPBbLUyx8Rc ztQsT(9(7G6XU99?!^`3mWqD+x+Fh$0szyj+bn7wX1wM*Kx%0z>u->Fe;szn_HlME4 zW5)GWm08vqvpp}Bq^O29OHS_<$$-+>i_$tr?s#zPQB$*E`*&Be`}u4UEsEQ}Vd9+U zz0q+s1WlfOzk!E&y2Q32rMQhlrJHdtcHx1KawIJe?jrDmF?A;3Kbg6lz+9Is60-to zeiCw7$K14eK8S|Q;y4Jvaj|lFu<7tm?{v7FztnjmemHA_S$NJH6DugR9Qh)*5nx;y zM#qaa8G15ofY>g;hxv(_PTav!m2$z_SEIolq6zA}^h}rXA3X z{CA2xPl$wxyVXad;dBN0WR&m4BW6-uClW|_T;Y*ccZ)RH51!X8F-j4#^v+X?xD8ou z7oz87Qgk*ClB`-c+sK|(rAK_<3HEf;Vvuz1M8`={rg;X5$BD)KmvJ$G&2msp3r^DS zxeBGUi<4g_WSIr>57mc_<~KB8-y1dy+{K!yh0(Q@l~p_%@l`B@_$Id?<3|rpIjE8%9 zwl6{I!P_m|=$lsI9mQCiamFC7+~tfxEz)RqrsMMSq)7L}%5}U46;bDYT5M)Rl{>-f zdflDr{(c(Xc%&xIpxz9V1aFb7J9tnhZb5FNQZ##ZEoe&5SLpel;N^@LHhfD)!J1t) zD4_=)c22V@4$&Y)RBmNLcS#k#fCwWoL;A#w*fM2iS_R#pqeop>`XS+%EFmf^dojXx_kmUv0-s&c;aAe-5 za0^u+1THX`B@>r)t}-dB#JlkZ9|?yI%v%Dr&Wn{DtRyvvNot76S_|V$hDuHNZfA(e z?r^9wul7MqzTjprE|bo*zzrc-{2YGgkdz-2v z&Ps%+^vA>NxW48vk+V)C_-lQTSsqZkfWnTgPK7=ldb35SD5v8KlOJ7JgwzH^8uf%u zbLP#Go%iJo%zC;H4XlfVzB>e$}6MoMctoh?qn6w*la{lieaqGqy2;0x{ z{HQde^eFMnNp`CPVd|~?yzooXWX_PYFiuNE(3|ow*^9FS(>GV!^8Ms>(@uxgoGkHye7qun_I8uBp{dcGK$!nRNVHmr8z%B*AC-!NaR3n&1E{ z6PWxVHl3Z05!=Y!tW)KMf`*Esi0$RW(Q|)8rWZgj`#zF1McdwwBz;ejFux7=Q4p z~^XF(v;n zF3nz&WG05<5OOi8v&pDT`Znn6ED&X8-=cGM5X(YQQ~A!Ia!-a5kempQzO(rkA6eb4 z-{bKPh_uNNhwuellR6_zW>QrxkvxGHSA2nP+a*k9^H`~$1r~jO^XUpa-Z4?H+k?rG zlqeEGGd>P{97zPSoum+3I~xexUzukHLUz=eG4ZFV`nD*UQI;~bh&~Pn=x+QQlkQjYH(=@b|8B^sN44YlChoGQF`oPwGUtB zyV`oTz&GxGo#bWHoI{nUkyqqRl-XxQ;hs8*AJWKvJ5F(Szb$dW6M&C$W9XRlIef0& zY7VopYm>DiNy&C$Da$+Z%kRV}c0`CU~)% z_H1C9BWmYm<|-f~2`kVrRVHs7T-Vf%ezNw4U_KWb>h{J9au^Svkd(}q#WXV(I|%ql z4>pjs!aW4aHu#)@8r9qoyokrQ8G~g*FaR0S>PU3^bcsL_xAh&h;CjI+{#L<(HnTp5 zI2EnI$jM|sY|fJ6TqqEAROJl)45Yrijk-qSfs&y?;)2mIDYS33tjS8j)HBnZ4E*B; zX#9a|K#Hq>k2d`pO*Z>}J3V0flGRIAXs-5Iet z;!ARhWJvGqDq*6tmV#)>45mea;LWhBaeQjBgwom!IdC$~Gb}8=x*kdPf z0x-=uM^IV$;ib2Xsl!%_FANtUV7Cwc?#GL;6FF)9%U-lT+qE>J41Nj`_JY~^(iv|0 ztRD=^XkFiHUSz^O$}&V*=w5c14Vl8*jcgO*&i1a%QvhZ0C58#v#qr;}bv3ipFPZWv zolLx-BTdP5g|f2J&M$qX+d>;5_u(aSxWUP6@?u$wF}Jv4a+*;l_i^?BVTUFP5p2E; zH+=JVf#wa)MoMdHWR4yjC&j6`AD^0?q*4$bWXEZdXLM-c^SDT%qS4KCK0CS-A$DMX zoFs_252x);Qt`+hWXB*{a*?>rj~k9gKicr?+1hFyQTK<9#_YEhKa_8dj=uKkE1jso z)myv^n(Yq3mUDYz4OqK73u-JebDOaMb9RrnghfM61sECW+XJKRSY$CYOss4!QX`k0 z(mAv`r!-L*Frl*%sq|#o6dbSFFuNid!pF9e1|p?^4)ZWCLI~cSI7uW1{m;jq0qG>$${oX0df%JP#eS|m3UzoO%6Y|3WOkyW!JRrZI;@m-wG*Ca~2nR<>yr5Yy3 z_ojvJsY!3$^v;?ErSO7_=pI5|>rY)~t{7y0i$~@pAuWpVCKvTFT48}>?29du_=A** z@9QHH%W9Qw_t0}~PN-dWE4uYlDd9qz$%mJ|)%ugm-yJ0T7`0j-{N3-|{o=jWpM3Cp@3&gxR_j~e z{GC?ogMV`LUhAOMy8KheI197iYF++wUNcFnW&YAPuUxv~M>pcENgs!fOGHOn%Lua* zjx7QW-M#o|d5nXEKiZ3repHn4udnpFYxHlW*PToeWN%M3N9PpXxOC;xl_Jlp?l_wc zx_j~9XgW!XOJ6f!w^l9;m=xW(bS2Q?oB>zX^GjEp6r#vID}sd6n$IY`^--0%GojsJ zP7pM^XwEy70+^@e-by$pz>FO%#aZH9AjW(D@uxV$hSo1#QqpE}^=Kj@idkP?F7mQV z#MUjQ%hhV9)&L07GXPgB{qmVTYs~q-1u|KjdBsIaN>L5#Q)*v{(cHh{OXVXUJ6e98$Kug z<3X#&i9aJvB(2uv?f$6qa9BSm<`&4Ep@-!hVb zS*;coKly=Q057jB(@KjJkjrS&;~nWqGM)7K_Y-pvSIJ3y%D+GPLD<3FA{`zifRDd* z?mwnXjUJFvBmh+)^l+_lLQ)oij0y!%+Ai$a7}}sd6bu@+bT!F~ikjlz zVU2oATLc3zM3aqg`{@DcxkWtgAO&jw=8aq1rbrIbvMNq-_=E*I*i#>_bcgxiC@H#W zj_aw1Y0)p^DqaDp@tV|{*fr=cD5VYJ;wVWbNwJq#KAHXRkN;yL{r}(}GnxH6LT2wb zliAPu?SRJq zDGg2(U{fW6&Oq?d84hafUOqW3(u2dwEDRRSYOi;_v)Ws|!RNTm$D~#Ky6P5pKD=~= z|IJ2!EvYlOf3v%C8*thHF)v7GiO;7{BeF>Fa5T}>7x^BU{NM^jBd`n6MZPj>e>3j+ zaxY?l@%Ldh(@Smlw)6k8_a^Xh996=2$yaRWz98WUrP0KZ9L;EEblI|HB3p{B#5y9$ zxhzL+&9tPBX1XWcJ(86>z;b-BglmCifv`ZhmLq`#LQdGgCJ@+_7g+c&$?gIR3(I}O z!e@WK_v%%3bx)5hISISp_xlfFJnF9F)vI^at5>fUJl`y-BcxjRAuWA0m|>&C^7!D; z7$5B$tLGP6hj>5i8qA9&3XM`Z0V1}m<`cy1SDFT2a>;+OF>7+6;BdhoG+X65(xH9k z*5dMLw19yQ3s-4b4BrioKNB)`x-{L@74Wz(wW$ap*p{W-2vz-{HrFnPkxHFtKXwO@Wjsnu;jPIH;{2pZAny+`ePNgiuj^b)Z z5)tVQ_ZPe|w*m*}Yc@WF>Aq^d9;w)n&NTKt?Q8e<#=|yZ*afH5YZi_8k&ijErj5XZ z9FQZ6%b64ET^@A~KlJiO*}T|sN6hKIaFQPIW%M1gJUQv3j> z{Ed1yHV!Dp6$?sC57@!ZX#-rO{9B@Psj5|O6KR)d>JRtDbn_%)mH`0O4S>6EsV#)o zj91;V+V4500j6xEgq%tUwD9>(#|Pt#;&P<V z{sK?&-MN+L)Y2q)V<>wAtr`k3S+;`6pOq4;K72J*+C#}VBF3uM@C~J0#gPu)kLi-S zvk;cprs5&UFim2O*pnC4x>y8cBAf17P(6 zCO5^$znF4RYTHxdqv{3Zo!WtWGn?SHmU*)jw?(^Gso}bIn6<_D)a&QqqkQG%+ zR*AeMJ~c^oKTi(yT*))MQ9+>18c*@8eiSp<4Wef8NN7Lb&f9_wV)+RoAShrnM3Lx? zrnrh`EhH%oiQZ@t7)hHz5l9llI-D?!{z0B?uQ84bdAmLi_|R>8jg85ExZ%4Wj}&@Z zNSTTcR6nFyk6ImvUW+V)v8!;#@aPQ-!n~)&b&m3Y|8cV)vDGD`LxW(h6->``Eu#q8 zSRn^l_qCp5L!fcR>=q!4wGUMjwAtS)ldcLLT|riQwN#~zddu!^Oad^e9SLzJwpu)^ zP8*ZrXKF`6Q22yZP_v-$NcKl8DN(P;eyZ6tr|7o*K>QLLz9Vo!j!9_F%vDiqjaJho)rJHAQr6JiVEO_7wO-M&TRIr1$mzwZ0YK7n(-SI*z7nTGx zIx^NZp^rQ$aE{tv9~LYW6}r{2!;2xkvR({mySf;7b-;O`m-Nj;F%6E*z?!JPP!%E& zOrhmX_)gi%Yg4GVOA|ZcV@m?%aM=&3I~=3*;{;0BPA#3<>?fAY4urn3A~mqtHm1EY@N&!~h2#$W0WWg3BcQvO;yBAL5M6 z1jmN_pG8`Ch>sAwa+14w;>981B0frPP~dV%_`)Ir4p7;SZ{i`ksl;wK<1X36XI&=p% zCia-cqB#H57+WyS6ZH_(jdfI{P4Gz!*^q<;qH zSGc0%NjjS96HVeS)Sx$EH3HpH0F8Wwx?g-q^+O@DNI^1&k_!M38J-p59=Zu1T#{TM zsThwQ*7MDDt~ME7^aFp3G|FPWZoDXDX#$Z6M+)GwX*^kdR1rQQ6Am8c&Dg>H`%zVX{ z*}=LS6L_c&azLkp8OIpI&^ae@^?{1rk{2681QY~TiJ10rxEc-`iV`YM9HV~0u}!=c z8DbW?8}VKSgd&sCj56_&G@v=!KpjX>ps56;n+eiAhNL_BYI!arF9?dwxIuk^q!Prv zgeIhQnYhf9^x%xCrb}iy5lIJ|x#wHOA_TwVq*^wIaK35Rsn~_I&|cbV8$Jh^jevdH#GSwa1hl2s(n>CiWNh2B)4$NAz}6%)h7@hIn`){{C{EN7GyO-u_* za1q|gEPxxrtlSQDXxpLf^bNuC;?OwyNjo8CgF3Ury(>7d^`nh;j25T^nd3UHz=4 zEfSRELKrg-`MfbPV&+Y24iY=a)fADH?bFH`(LiZPi*zE$S%|cN0&5 zaCa&`SFdzzgJk$nx_HNlv#Go)pD5TQRPXSMlEq@9k=uf zCw>hRaBQ4YRXS||<01Bc*7)uj;ksvi(Vn=KwMK>w%h~lCs*gcUU0k96~b6v;X#*^x|_&IbbECp4t9;Ut#C+Hxe zsPi~OYsMO6Jkfd8@kIL3Zg~U%599QINkkOAj)E~m;Y803!iho+Kwwd=cMxLqj!14) z2q2P&sG`A{W4ps`#|0aS)t87Q3IPHVOU^!2{O<`ZY7PZfQmD+u#fmp0VY{qiRv-dE zzT9p4@)b}M#*@f*`T*g~7bJv$C=mI6xZ+NmvUap#-44;}=#L?`qJd8Vcw8>k`E>vw z9XG3noC1=n5=}{vqR<3^G4f5Y+kx_1R@64ddt?fiP=V;Z+M$;+fJHncuSv8P6pLZ6DVae?dwWe=`L*O^;|sYDDW+xF0WFD%YVw0s2rgl8mr8Zp&9&3tx=vFj z1Rw*OgDn9GowU;E4kr~8EiS1>MgS5pOJyGqu7bW3iYVCaX(oDx-JZy>18=Y#x{Pv> zb-*D;`-D8~J+9_3@gami{fGy=nzdy5Gfttq?0CLZkm7Uf5D0w_!-q&X*uVhWu?3<$ zX@H5y$`Ct+OBzC3AnNJz0vrPMi}Rn_k?apS)6hx?3I*~;-(6ka{&}#oUA^PVvq%r{ z2~@uL#ETT#k3zC4RM8+UG2>$*a7dE*!oGNEgax#TAq%pwa5P1^MY^9QBM_VFBv>6U z=9(pEE)pe;k!Lj+mCzG1+OQ+ZM*-TT5~X#!JL7{iWArfy975@>%`Uizf8=7bP)rs((~k=eERYySp6Pb)+jn%I@~G~ zc5px4n5uw0YiktK&!a{GnO2j7m)5Dr8P2l{4jM{Eu8zZ@&>xfqqG(MWsgizyGmb(X zxJ#~#U>UabD5OSVVo#LqPTHz~-WA_?D4eoP`eKsUr6i>zOkMPplqEpTb+kd7@l2EF0fWz{}0>wI99?z*i%DHNn@-@O2Qrc7(SY z#3#`JuP%hI6nu5V*NyOX1AN^CUupQN4|*qSO|2gQa1kelLrCpN0t$6IOsyZ~;z3>J zfyl&q6z`v~Ex4&MSa!gN%&$YBE3mLmh@e>y`P2wpJ}UN_XAD=5qt#7J8PkF@-A#xV zeM$wyj}bD~;+S04$-o_yM9mi3UV`^yIamUD$b)NJt2=TYHlf zrwB);)?b21K~Uit#DQM;9kMB^(WquRM3e_Y>#syO%n|q@I&5kt)JPMp3<9QxC}Lv1 zY9s!5kl^Jl&vRV7P+W_M(orB%LDRJGdBfwr=yVOaXKZX(tiVwbPFMvzY9!@k znkP2VG5HC7L4k#;Cc(3crVU3oG*l!u;jX84s6qBoRh_m+h3{_@VJwK07l0`Z6Y4|4 zIB!l)l#OX~qAapnWAOB*vf+B>1ZH#_Fx=UKGjCs>BjSklO9%zK0c{{!(5H`?=%v9&IBnuLaN3vXP7*28Y|ypV zv=6Zox|NGaIiHk9<(Ox)Yk0_|C9bd7svA?Gz45JJ#+5mv*qtrK9p_e>hzDo48&wM3 z>K!)7pd0g4kur)Xk@Td2mtg}M-S86oq3z@9{b@B+x!{-eaMo~ssu6Hp8xLd{6wPVZ zP_5qt``ws@MCagIjyA*RMbq$n?$0~i^IZ@D(&Yvj*f9cGi}u68#potER=uo9Yfw9A zDYH$*3?;MMBtv#5bKBsu-r4SCt2%0wY!gvFfiROD_ANKP{0fj#)B6}2T``JZJxN>}A1be7h5M^`zvSLa;q!OHQ8B^n%o*%5q zd+dVrSLmtE&h+a+-Jc@OpO6wY@s^SYOft)9fBr#V-l*>msw?RI4@_$LCbKk5eVHOX70Ikx98!n{01&Kl z0OEzR=}bw86MzZnrT_q-{T)2xH63sJLR;x5(~cb}sAAzf8AK^QVOhp~nFuWy7McE=Uhgxm-mb0ZFe z4jVSg158+|37p%~BO>pp5HjU>M1eM)K@RhnXi5F}Rie*zImk<%$IRjhk!1LuTV?d) z3#6p(8A$EK#M~)yu)VKjSVdh*kF5I@W>x#%kA#$d14-!r68UF?(_OEVP zMvArAcH^QSDF*_aI~C)JF=l*+_YD{p)_>-MAa`_kq}y84odDgj5>qx1yoD~FZEwl6 zwd69ncBpuTIq6xx*@f#z$m~09`7@QtblxeoOq%9`IR~Y5yMUW1m@?it0Qnldifh6d zUp`~Z!C@{)B3yCJ0>^pfp2)W$LP8y<=<(DJ@v141@j^VvSej~wg0!JTiZ)1@F0Mp~ zyZ~lg>0Jq!a^Zh+>bEKp_y4Qh<5cNSSLI4&^rzQyOX#!zS2dZ`Vv_Z>-FEq?uVDEq zpRFE>-D}SE+fz=zoiA1jX8*8mx?+WXx|xM1ItyBIT6{O^8?Fy&3V9;a+SQir%5_GI zz@b3As!3d~)QQ(CRoz^(EX9z9wn4y3LjqI=I2jz5n+3}c;$S^3W3Sf?#Y`JzuRmi# z^oa?gmRHI=@3^j+_lpbA>>g(xidHY$3rL3+9wjDf$rB3lEy0mZ;X6=E+v*5+;M=Y*58arVIZ|G;^)Gyu=aA^q`ft zG*7niluA0>=#(Lr$0(}0U0}9R5BiI9NB2o*GBbfkH*gQxhgQ?&96vcoCA-0Yf@j^j7OA)e-W z*YeHgGL~ruL#!F{Hq1M2q1m&osi|hqv^@(_`!>5y$+5#A0Rg}~YTb6Gd9qW@K`;0e zX{^^8c1tGPlHJ-_V;aB#8K7>^@l8QVn|U=ES)R0A3eCtfmIvfo0J60(3CGle08dR6 zdRNVSeg+Qbi(~Ji zKVZhGqIt-gw2F|H5HH(B^V+%|FCWJq`wkhUauGlNX(1(00jrcy z`Umu%h3qhyl>zrt(O0*OR*|m*xycg)3$z{x1Q~J;>~aZ%kG?}hwQ}g>k|jJ~>B}X} ztr$$WB&4$U}UT@c*r4WKaG zc%YGj*3|-7Z#^hj)qL=3zZ5>fegR0$1K~cUiVJ#dlc5WGkFr=*fAU2Q@fu(_GFF*V zKIpeSu3uTKs$cnHIU+VZVv?>w#~pDUQ>m(c>G{)_%3+{z+EDZcaCOGP6%?!jEqE0( z^&qLm)MKP(Oo({{SvJ;`#=<7%KyHSIw&U}Zl*g7Y0{e6#33i>71dq#?J7bEg-C{Rl z!fvR5dce0LE;i7t6OfYfstJtw3E25q7aIuaEjc8B7c4SR_@*6P^%!jS1Z<5*Ftq+u zhF(RnLP2*+LJ~QDVHUczIn*)%2TYA(N@Y2TotD6GL&Zgwpf*i#Td6-|mO`^sJzTu7 zAix@pyw+Wr@TqPCgj#hQ`bC*gPj0dcp;FyS1QNNwMxaQcsfQyi0~XmzFmYkrE*Ba( zy95o%o)rQk8&M>3e6R?*B1nWZS|K1|$~-!Zgz@YI~HoB&++Er+&ndSFzrZn29^z97PQZSJdhh&o8{xJ$50$3v!fv zKU6G4Mi^5=H$K#0fve)mZrT(eq?=Q+;UPO8*^B}F$5jt(9)(pB0f2doir*eU7a)VDhPJvH43-!FIY25C=pu~$t#TF;ZU=2yR zF)W+6bI;5>c0o@bjTh*0xHdPe4K-(g#u{+zE|iqJkT^>~A8I>qWfX#I(YOJM!_yE% zL}5L4ae=h43fgCRUE`5I;JE-vnGO9qG2V zbe4OwR=I2z1P~C}0-H%w4m4?S+nhID-e@~^3P;u?uWSRVpTcB;O88s0=NrZ1kX>9D zhW;ghl9p*PFV+t7BI!h~Bb{kWw`Mdia9&<82e%lj3kv4v=hNEe8D21#DwuOEP_uyo zTPP^k<7L;JvJNTOMhAv@V&`lip1Xu+m|%kKW8CVMLHda#)F8)}=R1HQUZ|Kz+>~W7 z&4(do%H;VOGe66V&a{}mlH)>Jci*sz9y*`{ahiaW4A?ZmJDwPT+nIf9Hb@m?RD7po z_*Pyr*(Rc=@dTesC&TzdOU^7r`_cOVt<%L1#tH9(&2pcWNDIn^i2qJJ@JB;Kz-y3O6BRd6(l&90Oz2Ti zdcd+RSj&S|HR>C91td-HK=0TnT(Y-6Syc#Bo)kFptV+zI(HX~urGqT0Uze^uCaFur zUHu}EC|W}>KOkhZMsQi1YdRZl040aw;dlTdPRKda&8nz75gs#Vx;dT{QHTv3 z5A)_lLWPoXts|~$D_ORKuG6w(o3>9`Qj7o%DpK8q!@zle0ICjPEeU}tGG{`VR$xnk zeOqw+EZ^USHyI_NKq8$`<`yg>l31dfr?SHImzDt(mdkiC9s%`!N&^OMWjNMW?TKE}M1u3?ngGwOa!11jdrW`{K?op6O*T6OuWhETgpnx}b zK#q%ypvI&a8szfDbqiJ%f#qZf?Q%+G*o*^{af#V;rud}e&&cVMtcg03mp@F!9&0<9Qa` z$EqT3abr+y3*!CBP_!AhHXse6dB}&&CI`7wYyis5s9+PW39UNZ=2Kf!B6ovjQyfW9 zSna!XiE&_M+V}uiG!Y<%CQKTSC&dV1X?Y;TsNrIgMTmTYO4=est@i|pK@VWANzTUdk>F&$t9aUxf<24BA7#O~Uit1nl^cWYAwLhK6QnKq9

3byM@70-vwJcENhiK(WDGtq=oP0M9kRpa9tR4ZvdJ#P2oIyKUQ z@9+y~!;#iV7X*-i?9%$LAF7s`J3f+?@- z3&>62J9P7HV0SM8-O~q6j;&kai8d;tz!52gg+U1Mw9!)tFhg@FSRRnm045Ax$Sr~a zQ9-B)Ll96t>QP+qIz|qu$udI?Vi0XuXDn;l8u%z4oC=K1PHy?!Hq8Q@DFx0q50#5n z-tr-=1(RCA^|^59)CM1tgd^NH0WZiAQ=iI>Hn4D<3M@`wAA>B`0}xJpfN$rWfeRH! zFYg>kw5Z{h%4i9iu4jsz|JsyE{tlBAIB4kZf~t1B8D~Bfz zh8%PS$Ges_MbV+pSOxQ#AWKOWLqQ~&6nqdU0l}_PTLscf5^&WZVUY&{!{9~B_lvl~ zrqC;rAz%TC9XANV@lBf!XpvViN7wuY@@hZc^B^wG7F&j*CE}$6A=g(tXW(t_Isn|O z`=7OM2+ysM;8>|#>_Ou$CKO)bqI&BVdGbX;S`!h7X=5zo&)xu zyZfiDt8+JqeszC?GDQjUePaGxtjS-3ald9A6)W5|Cw zhMc%>!z`p}QBWW(dCfIxrkTbTrX~e13VT{IX#xvY{D~KtQBxdLFG9AfAwNaRf^UNHQe;f`~t)c*FON{0!{bd%;3t8)`$iF^*yvK>C{n zXd0?(OA3w-1%MU(yragH$rDDQWZ4%LoRVSL5F(%839-`Pkc&0=D^HRpo!|*UbXjRa zg;pWq=G7{M=B>)XtSmLei%gV3t^+d5@YPPIupm|-;VL~EPLgdXIH{UkgKXMYE}-u* zsQ9e<9(Ae}qNd09!Sp6iJ)RI1WZ*meU^0vo^wYsIW3=buzOk#iINUmhJE?}f06x|^ z%c*$91$lB>H6*AWDOD`zpdxtYoQgl}n!F=)H#@w<%z35@FX^2K*lTRu-{QmRHaZpo zs=jD=e#%347nr1QC8txIv+U_q!S=)==9qOXJ5_d_X&`)v29>lSlRia2g1aHZL(r=b zlJzAK;!$ANm~>npY&wZA@mOBSBWal%Q$9G3!rjQtFlmk)Lrw)DAF$trmbsX9sb*mp zT)`2UF5W0`+QpMgPxyGEz@MOAu2yIuq z(ke~yT(}zmi{3fYg*XI(YI$5Iz@BJ-38mA3Q-|}0V;55dJ%Y=Any%dlkuz_JvP3*1 z*5*RVf`WGiN|D{YKPjE|^@j z3D0=4W>G1WgGfS%z-Te;Im>lyJhej^ENV5Oi&;2^9<17EV-p~V_?eImH27d^1+d=0 zuenCsJ-p@`+&x4?vtQs-x<`etTn2Rt0VQQ|7>Ka_1Ac_ofYFh#g~XQzj zjEE?m=yKe2ar+4bkNzBPMd}d?ffy+YF&`j41J)L1#pS~N48~*_t0d7C#b}aR08lNd zJ$wPZ=tLrf6rT97JZ|uL$DK9snnGk|U z0Z|1>5>ca@Co*aLpC<0AX+nyA#51)iX@O#fVP&Vm0xLd@AvhR5!+Y@fh(l*8>_wZ~ zV^Xw$ULG{YV=(;Uk)eTOjYR9?86Hl9BiJ@MI35S!G9?HQQ_S#=lX&Dwb{P>8gYZy*2%=g9ED>s| zU#k$NnkC>w9i%E1$gOUnV9uFEr;G=imXgPDm<_eI0-T2H9Um(;@XLk$kLNouT+xE{ zAF6f=jtNK2AO@@{6l?+lH4~O6CWB;?aQ0V%m?jJ_)dR~w>%@@;6cTMyv?!XpHDYzD zb`k{Fg|M?SA_yihWZEf}>gQ)t7&#~U@VIG%Q3abva0#HexRL^vs^XOZOQc}a979xU zhSTAx-bxuZQ@}q*v_pDWWdU145z}frFpnwzhr)cSu@dt>;EkoxLeN!H4`M15cqQ-z znvtf|END8CB7n#^!C+2>A;*o2Hv|C_hP;X!mW?g2T`-wQQh8?jGSO7`c0-HzO1X?5U2K zr7~DnxGHNT%`!2EK`P;xF9=@2w5amAqy_byg3-YLK}ZPt*=fRUOCsEjH)_sZ1pqWN ziKQk4BOvCh8tMUG617viA@n%u?VwRDEC6twaPSnuxD}}2Q6}fgFh*F)C0;M0oTvCf zmGT*5=Fo#k;6Y_@!vv{X_)5YbdE=bvrsX<;V(gmuxSiAkMm4)uI7o`lG{lj@CxKCM z0WYWmL3)-Fg=1oZ7D&Webc{laD(GRfX=FTN?2r?I3;zh(nsT(-TL^FxD9|3Jd4iA! z?m8DDKOMVEOe-jgm@2i}8Mjk$pW|!`2)`@H;C-B}V02>_PZmrO=y;sX>~stlTqkXBRTDIH*v5#q z0}}Tp&NclDB1`kHbH2aJcSPJ{0;67q38}esx_K6j)zBl|^Mc;TT5omtD_N2Heg`CF zELnENH@Q%q=!&syNL`GcI^4tuFDSU@qyr|{+JHMn(bN+`s11B{tZ$fSyJ$x@*w7V= zck<5PB$#7;V$g2{r8uOmN$bSU=J!7(^!oEnD88IX~nHJ3`3-73!*$+iSoIZpfo6 zkLfrJxHnzA0#++Jtu=7)QCV<%?84+$>|8BCJBS|L$GX!S-mfN9j6=)%U$Q}P{H!r;wuo|gK%LfT-Ql`&7be;{PPUGx zs6tKiT@}}bDGt^(!E#1hrI2l?0jb@97I#y3sB19*^k53%2pU4z7E3V+Qh1NA7Bx`*5zu!<$i%e(N!WY`t;Y~yBEF+C zWzY$!VhLi1ESk|(B1knXt`nG;$O1=?#|zNHlg;AwRS`Mt4eJtO6X7lnO9PZfQO&lm}T*G7RNlNJPcr z`dA#J;VQ-i5J`Y5Xk`Up0ty{ZA}<)S)>Z`XJ#-|LJ9*@l0%aRRwIEfRFyN}jK5kPG zf(Ypo!QZ-QJ_v_K>8Po=HAWCDoHupEhOk&>B7SS_Zevy!+w{Tqg}dFYISX$34(3y6 z20b!BX+?5J3;Qw%=qAR9;7ge`&$xd&-WrVwbjQU4L05Ggxw<@wo?1s7BP<_U0mDu; zaCWfR6Q4j3iG9+La1LyifV(Le1xu^2Kj3!$iJToCO||PEosm1! zxVM(50W!}!By!u;VKKUE8fwF8_EL8UNh`4|;fc}TviQ=$(jQ2fQKdNB7C_>4Ih*=4R=K)xWqI485_KU5dC@)gRMuQfk ziV5}8+C-~MEfnOQDQq0Y5=u3>2c#|+5s+0Bgq~;&k}X2ye1I1k{?ekm%B8KxI!kvr zNiT?}!K-`>h_3K25NRnz2n{Uh`8>wd%$rd(Nq+!LF%bhnE2JSwlDL_wMg;L!;LX<| z);;@5<~AS-gsYuoY`Nl=9nXaGp<%j%G_zvo3!V#sFM!n4QjChDO@Oj%!ge!e|4{wM zn}oGlCW<6fIHY?nP=0?rnJ1IGVSrPmJnb3k@oun9?OGm^Rj8%K7*^<1GhC?gM zE*@T5${Y32905*UwmcyHYCCXz1;m>!8;~Y2Dz3OdVY-HPz=5VbAaHF)LXxKzW_uuB z+9-0@#DiUU081p0Fbn#wfJ%po(Q^*mQdLd4Af#kWv5F>IIYRoUFztN7LE%opi!f|V z&O^~Y04c>9*>F2!Hbag!NTG~8N11U9FuA>o8OfQk;8a{mKq`O6RKr^9y*~@lcl6Dh*mK|Hh3bL|DD9s88LNQ4Z(MTin zO|n8wwQj7cp^>=}J_W4f8xmNE4%0Gy2}y0mAbG>io5(%Frz-NP5Kjk=RXM~!(@KdS zqnxTGexUkYlhOtZ6BZTj& zqdG_dX!*j_%C-W3Cxk>LnmD@ulxz$EA;eSYk+|khBx8tcRYVfYwR;>*Jrmsyhv`&y z+CayW!Xpn!T4E-)S)qp%&0u9JhlDy%mZ@F(S;T(Gj&!)sfU+!MxXi z7hn%>D399{>OdeQym>Pp>l+>8qhmcIV|?@G%?HNqao7N} z^0@mgwwc797(Eg<3+t8p279Th@~+bP4-{}h`H}P>BMhRBV@``j;%$kCs<{fD;PfI6 zG#&A@WGHx=^ur;VFjPw-X*Zxkuh!JzB?b+jj(&oMR}wKIo+v{D%&0b+B~G;p>9nh8 z8a4>0N|_Lh=V2(<4S=VeWYuJrI3P-K-O*m9m=f;k9G#^JmLIX|C`OXf78NB)l&vav zo*02SXSxe`r#Z-Q;SJQ*V!G?AnNK@X5aTTe)#yhxD{}nfTcMm3(!(Z(*sTR42k425 zY(jzHvAkVHr&8GCc)nQ>E}ocCV)@9JfNn@FVtjKR+Tkt{hA492y!+jrELPx=p*+OHOv|83CS@kOlV-X$2$a8~AuaUmuJo zw0`7?n2e_bTQg;(5=X(_OfWQcF=_1Jv@FB2iozLEpGa$qKP%-RL9#gL2p<{75#B?Q zUIsZsaRRGB^Rh~(MA(4|sToVooLDRPhBu3ZFORB_kcHiDb>dEkNDk;2(<^C+Y-XX; zLdj5hGR)lYkzzxy9tI=WqF#as8V#w;;1h=>>b5I(dgihpEP zF?_8=7z5f1nw{k%fgb}45(It7T7UYeY2{XHeyS8|uz8@9b(Q-(oP=@71%@Vq__*C; z7qmVki&U{kJss$@{Cc@sz&TtQF@^D{dWn#gr_+qW*Pj40!N|1rhH$mu76~y&Emq+v zxegO_po!A>_Rt*D*Nx2Pj>GICt} zU;^caXN(siuQIwC1cTuWb%#PC)k1>yU9=Twz>WTl!e` z96Aadp#kC=G#XLmOB+@I9Cs*qKc+v$luU`*=3I~$mDFSHqRR3MTRcx&K}YoRO3Xc( z@-N=T6L*7a5qKK@6q7F#gJgRtbk#Bpg&kRqq2tChpG)}!4;9>XcI`Mt>Eg&xOsOp%plOZgaj>_3r57sTx6JF#4-yZ_lMj+>!N`} z=v$;qIHfD%y5b@yX+;)t4ys`Xen|C5IEv-&9HnO}@Knfg4|yVD8%6|at>WKlo=~O= zcpsLngjd+fxE&Xr(FL|d1ZB-37^JTSONxbuW{s>Eh@>7PH*Sj+v?n)$$y6!Ge39Ve zp`EuN5tk^e_KGmsy!879Zrade zx?AtRm#!nLn=o_KqG3%fheZ<&&xa(KAb;Ye!h~z|;jn;&ke1cs)D9e8$);W9z^D?q6C(#@7Gy6Th_T*pc;bTEke0 zu??jxj!W-d=5OD%g`QfAIw)U$dVi2jI z-42A=aihnx0#{?SodY}tt9wkL2lOB)LC9hVM7xP{Nr@*ILjZZZMUFHSe$f^itNMWK zONQG78K)bhO?(_+W(mv|2_`fLoS>ov24T_D&0AXR1f-$^tbmIy3gLd9j81qp#;^z^ zu|)g|CuXhI6e(0UgSE*P>@V*%?IouIGvYPGcT)pp8J@&;MZiiJA7bFzA;2Y0@bP92 zdA_@;IWYc+v)SpJB)6U|xwU5?b@4o$SKMoPzNho+hd=oT*e86lFN;PgZCsTYmmeS54Qx9PFWJ@O3f}VPjEMLtAw#tAfhM? zWXf{QdAPBia`dE%Fdk?{8AZG?-^6p7OlK;W$#n=w_;wUH7vXo>t?UrFO`#rTyZ02N z%~A<>cc!yjp~#Hym%Xl*7T598vW1p{lW&=tPXQbPh;#{jabgt#VtD9M6~a?}iL4Y# zA_o|xi5-D+5`nu%ynssv#0&5zK>}HKf!{#Okw{%wr-B6FH{QtUovJS1H3jZ;&>+&$ z*_aS*Q3@eIc#Gqz%ML_JEZn*U*8{(48{F$?7LA4O_DrS(SE(K9ZVzP#6>|!w(L)M| za@dDQFUorRT(M_HC`3Z-wOnkYF%d>}p#{QQ)HS+vE4sgcOGnamX`W~y16gkp@(MH( zeuADMj70BIEP3>L{dU1T1Q`bl=Am@a^Tle5N+`~PbI?N-pJ(B^GNlaAa@%FPa7T?% z^n?Zqmj3X@LY*5N*c8>JhPNQNZU`TJjG(!_&h)Tr*&;=uEIVlW1BN$CS#ha#de{+yMxb)9lb^-M+Tbs? z>_V?uv`V@QMX(8GA_LLx@kAz@Yi(=q=-je3-PO{wb60QQ#k=?PUvlZ*fx)5S%SJ}W z_FaC(l~-MDOy&#b)bxyX?QF4RJLT(K&#%nQA6mFRrPjZ2WThW{1l<|PJ1V#BviyJs zL$IgkFO*GZ3J6tP^`n8cp9?YGn9SmGInl(E{dg0fxPZg1l&TLj$vn^fhzj_iff=|{ zH0tD-^0IaU9YGfUF}h(8=34$nCIy=W$vfl*0fkQDPz#hN zi$!t+qDI3Cu%f(PwJ}jLY-1Xda4$r!Mh&s4;B4e#_$fIW88=kWFO>y1%kHsfjcT%h z!ghT|(5tKJ#f+0o7gYo=>MR0LCBuvwLK#>hV7Zui5)TK|aZeear&^>=@dnX;zMZ%0 zXogS7mVg_4He9F2G-TBYe4!io`E6MfEeje;ga_Hq~8}3_!#*aBs*@|ATSE1hqt*| z*PA?;g96Ag%QxL_FusL|DR^_-DMNs(2fx$hqG8!e(x8_eI|st#jYyxV9T|y9O~t@e zk;I^yG)FR39%Dav|$_SDMz(A6hLQ(*hft(+pf`ru#AChZJQ``!$q8Kg3hi2st zjj{j$u6X$b^%O>hTHIy(J%s}0b5>34vi%Vg{7o_fDJV?=FOe7h!*gwvqQvxg;|(`O zy6GRD>sabNNQ?@kwI!1UnO;EHYxqXob7}r0r9ngw$nN8ONhvEO1hyV4V@b+lfn`cq ziTPSmHm=j!GWJ+(6eDFpufQsWE?ZU<3b!pUDQ^jKIcwr`OsT6VTm6U}-LH*Z_%n>{j$q%Gi>SV|BHz|A~y z&HhYk>wz1x&8;_$kEfUOM`MdDmAk3w#pB5;T&oElgow!KEFF^4TlB<0#>YylA}<%9Ecu%;^LMkvFih1!0zYCV13LR#hdNC zHP^%&0ZnO9xCu&!QKo1HJ_rV_>qK@i`Xc~6jBh|*V=|<%Q#+EPQfh~+)x?v5LZuPw z9Sd_%Vn@=Uk-EMob@hSGT|i;tkFN3Y^nnWlnrnR~XfB)E5+0PG$3G>}byO43vrl!^ zGcRXA(OpLz;dSVQrxRBgi$EI3MM{Bj_so#e_;^}SPbRfBb>Kn}Y(!c&+d4|WHp zAi2K96Y2Me_^JdmNy^&4M3)dglN7)aD4M7Wsjy?pCMqq>`ejHcMZ41OkSavBfl35Y zIaX=7rI%v3_5rU22uU?Cl*ke(pbVrhd&L%qi8=~%`yE+kioWI!{5&S!HI?CSSy-wBR*t$bSv!~Qj<=YRgX3S5gOnXj`1bfp}7hMYxn{TEFFs4U<1reJkP*sTdTDPu+ZpbrTI6UM9JO`!9 zu5)Msy5Y0tLU+#Xid*!$6J71?nfCU?#uYX)(l;x#j-WT0P-D4SXNa4s3>xl;9>%dEKn(X6U{9F=pja<;W&h{{5gRBmhAmbMiA>}<=f7uf24#bm3fP za_hDGx>q~_yY}|?4UTEu?Qg+k!&64yY?-%QbGl-<1@uQ~2SDeiQ%bBK;AOl9B{gd< z9DoA_Y^F|XnR9e4qZ9FY%{7Z_{zoaxU5gW{$=hpU~S9%!#|+-!mT zK6nmRz2vUr_^E>BQjfulqB9Lw2y`!)9`|NSDbKpz>~0&N5;&< za2fl?^vwy?YC_<-;{=K4(=|NjQuF3y#UcdP!BLF&-YpRPrf&)ae}oXcHXgwnjd|G$ z==R6gb(JeVPsj~*Zk3E_%6aS=b0(j$O0Z0-c$0|h#74aIy=4mGQhCKKb|-2DPS2Vy z;EF&_r`6rd7@)-><&JZsv9a{+LF49o8J+&nz++&o6Wo1Q28%|O2fUf0qcG%q`D zPxE2N^&!q;9xn&m*E`JH+FJRGH2@lWO162uWn8hFU$(D*7cW^QEAK8eEeTNpnA3+0 z55ALkirtk$SuU;FP+x42)q__CFNnoQkMJ` zeLE-ijrNU@s=_l7njkx7-Qk|mQL1~rFo7#t-1DGXKrh2_PXUZ3~Q9W!QSDa{=qS7I-5zi;(yspS6f@F zq~yJhA(Fldsjb)tlJM!h0jpOlB~7MjOsZs*u4O zHkwG0)0(tI zopw^Yik4~nx_#2!vlH!;EwejuUHs9d?UOT=o(`G=J^JK&61w}l!XL`X8GhJxAVJ0D zzq=M6Ui{SJJ&SiO-n;l9U%Y4WzQeaI-p?05&KDnEd}Q(7!?!Npb@(NV_bq;W@&3ho zp}+%&Z|95mFFw5Z(BYRX-n;ne#fPxe!;2qJY;0&LSddMwP~fmL+wGUiQyv6HPkE`5 zaYz^{*-U1Ddqv0Zc8!umH)`6&`}pD87Vka$lEbg*N^InTwrz3I&x=|GeSVhR=qu2IsanBIm~2$1bGB#P%9 zcNW$aErLRVH2}yK(L#bFEr5FVfC#H669u-81g>F02<|0_ckxY&4=>)mc-P{`L7)iX z^T^`Eiw_)r&Els(n4s9X7p2YN+xX%mAc)}U;)9F#@x_N0@8XAFfdc5E#rr@o-NzR{ zwRqR!BOt&Izor?)*C(*fLyPwvegz6JCF34GeB0rd9DeEIBOLnVRyj_f-Gw5k;=yX7 zh7ic{Y1gTgyXRfYH>>%cmkrOGcicjE+4N=&x4m7GPweOq-wG&!ZyfOA!-sD@{F24H z_~OSG?_In*wfG=BS-j`)t2qehDhYh}r6@8Xg)g0Al}2^Mz7sY!S+uw)0wZ=yX3N$% zyDqSK!Eg-QwVK##mBuYJv_*~c9WYNYqL;#49ljN23a0s<#fJ{x4ssr+k`&BChhM$; zX?}&}n!CY2kV0K>D-8eetz38qnnih-KET#}qKSJKA3Xe0zIfN-J5qKP6 zB2g%kuR+lI5*nj3m(F&ktJFofI?05^I}j!WS3-7=PHXpvPyrAF^%-TW3+DL##Rm?* z7AO_R1Uk$!UC5fv=jZ2Bo>%0JxCm&*YCs#Xv}xjt_booKcpnrJ1+@2DGEHfz=#e`< z4VXsdjx+@=-39s^*p3535SKl$crWtJ?Z{UTE#4KyxFFX158npO!6;xc-qq3q*Eggv zEstFPbOAlINGRmLRn`h50k5`I(DSp7G3J?WY1%!=#OF%-w~jG(3H@HB{a(Wu8=&V< zdxCzSpgrH9J>LjDP?=AyV(dybkXy&t2N*kn9bp^Uk-9aEZD8x+Ya?SD&N`8?4eL&a zKhI=r{n4XGkJhmx8vuq4&s`0V>lmwF=bJ^_^iN|)`GF`*fW7#!0!(XGF}D7r>lq6g^Sl{s%=2a@qKyf}t%Vj( zSgP4|(Cq%xwPsHss)wfK?KUoiC?9G7B)H{bUWRJfD9$^gGB+TsbS=zu?3=uF>m~hz*Y$3_ zVvn));=P$mws!8`+gqC2oAYN5jhI_!Gpz&V(Vp%#jMbm!dIkW2DH1Z-Y<9Iu%2LNz z7GTLd7hpL7pmjZiF}Au6z^$uee?9W{Wa4LIUG-_-c;Q2bzk27P7p6|h&wuV^uYdAI z_rCfCYwK@+!+WoJ>F-|qneTsa{N0ya_OEB$yy@hffAOnRzfpg~^oL&FeD$VxjBUI7 zC2yHpSNCt9`uXYKZ@J~IZ`!x_eG_+IGXJe|_ObPU_0xZR>^;}M;uHV+$t`dA>Xi?! zzw&{%zW?=)K3KB;b#v!Ce|-_ZwdsyMU;fHl{`}0p{qyL<#N&GhzkT+rr~cB| zyXwZDzia1)SKiJxz542p{QkqUzdHDdJ8!z|E%$WHKK}b#K2zEEuD?${^wX|BUN-!VEm)qdTULsJ*-zHsN{;C#!4 z7xvl%SMD0Ve17gwzNcquYGK$g+HhjdE?Kj#Gcjq*UZnXQV0JdBH^-i#x4-J!-=6!% zLkF5pIrX~abmO}kzV-6vbFTUMUB-^@K7RQ9zxcZw-get3TL0xYouAtN8tasApV2b# zytQk-aqd6NKJS*V+`9PN-#&T!hMm`c@2tPs`Q9JD@pspJZRGA(zjS+N_Q+dKocXi# zU;X_4(%W{eKK#AEdENY%e)dg!<30ChUdc}U@D-1L=0j`CKl)^U>sPLM?O%N<_0-o^ zpYn>2ty%xRf6TrAC*?nUV0hjf-+JYfb8q|n&bez+snuWp&9?t|=QkVg-}L!~C!L0U z^N(J8!rYl(|G~pAzT;DuCeK^^*xJoEChBLu_5DXyz4xJs?_BinH~ehyT_4!m`M)pS z_UWd=|9;>Lmp$;3cfa}f|9Z>JK=#~^eKfW6?R#!~*@ymd!|z`F{Z*&F=oDfz@-kZX z^hu;UegcYzG5q%@YX)*BGWJTrbD*78GY0YsxeZjwYM4}Z67b#0@CEF+dLv_*yP=sl z-gxYhAAON+U;Ba=tzLNW^X?0_{O@x&^qkgka^ZnD4nOs!O|7Y4{OIaCpX&eeeJ{w2 zq`z*SF=2JT_G{PwX6pBs{rbU5+Ye^jv-ws3^wQa1m_rL4h zfBV7uCtvx7=O3N8W9`u715dqXF?s90^ji-*onQR)*Yjt8w{+R`o8NQy+tcg*BYVs1 zj5}JM{N5XPum9^GzThU{_^lfiE=kM7Q&p+Yj`}$w^L^p^uy3``yEHJ=Q(B$3H*3eccBi{ipAK z=0E@VzUjd?d}h=1`@j0rKOX#xFTL=gZH3Q%^w0ARkG`UO=(YZz{qQ?C{`kTF`qquF z`u@=Tmi*@bb^qSBnJ;YW{P?M>hjQ<|^FybX-ZT8Yi$>4Oe*EUCJwJK8vhU=_{`$@j zy{GeSFMII)KOO(4`?mgI{u4JI`0!}I(`bI;;M@MN-FoN~8yBAct39WD{r~&&4}ScW zQ@_9S{HJa^@|A109bEg++~a@y<8#0Gh4oGC=RL5y`DZVz-1#H#bt4C|`)*tF!rk9F z;fV3cM_Uh1^mqO-vGp^5ciSxoU$yV1Up{eR?t~9s|NZ>fHNW?+{m#bCJ&dv2*!Nqr zy_J8Oe*70}zjmj2$BQ?$=f9S1{`S{@{>gjad0FSRzkc)UdpZw)@GrjcZ=XB!_t|y- z@%2*=PyKu6)z{D0eR%sR>5ex)a^uWb&%geUyZ&L%zui3ld*}Y9zq;~p=6T=#%eTI! z^71?QyI(l?Xz$2HyITIaeExa8KW+Q`n;-hl`yP00!!J9A&-l)&xBU9E|LeiuBM?t+ z?RnluJElK)-oLee^RV0$9oW>7tyW#$yKKXa`BU_*P+0Bi=`Src! zH~#MC*Wd8-p0}PgdFKm#4r@uJb}>I>^H|4!+@Uj60w-~X<`U%k5VjdO?If6uwU{>LvD9=Y>Q_k=gS zV#`%;-S}wB4yZ`agZGZjbM?U`G{?opA;S*ondtu$H9{Y*?(C+NWkz1zguR8pn zFa3R{=VtG3U-6&2HoW9@+a7q|Ef2h>^PBCR1LwW&TUWp7nlJv<)XRVIZT~He-zv?3 z5qayvV^7@ncdvcws-xHa*YihS^O>0ke*45ba{ut<>pn7b!wcL_TKzC&;P;sKm7EU*@4ch zKlL};PGH|(_o=V(uA5)+kNlmDCpUch(ZhRQe(n|d8=rb!^BKSR%pLiAzTN-6x&FVs z?M{H9aPK#!d#=y;Z~ybpess&5A{)tcDxcH-c*K9uN#>e|6 zZ+`w8*1zS4o9AD5;?LiE&8aW@_+$62o!!;;^DBB=8$Pn}^5_1p&3b%f=r2C|?U~L~ zfBdq;U-)`k<^B&pa?pNG;nK&>yU_ajme#jiv-*@9KljPYF1hB#KY8J26PL7ov-6Sr z!GfMI=JQk2;A-Da#)q`mLHfzxs~KZ3b?^Z>C!ZfVdi3b&^!&|r@O&V5#xQ#&W2X$W zSFUDfFviYej6s=`@cBlt&4<~B)hEIiS}mu-ueI#RhE=BzvwC(Ke4RYZ>R07w<9a2weLLFz>1-eeL0d36fYv%NG3V#!(cdSv-lH^Y@b9Bo z;pi*D;5_=uH8}I@P89`iV~jzXzg6r+HgDOJ&Y@Imx~;XI`T26HxM0yYE+JQ3&cXx$0y==xLG5q2Uwy8g(~4ea^s=!Uw}*wGEE z*0G}-Hk`?hf_Y4zqenNMci!Yic9f#fpb^{jTM8y_)+Ytct!k&@XE3%ZOTW)#Y*iQi zeivh`oektxF`(Hx#$LG!U|zMFu~jFtBe;?TRG!Y*DqMo>?HNQu%u=N~AnjF9kukjj zbchwMpbA}873vTwy%InMmDcy$z6qB+V^_dK+R#!ZvovYCFpmkwSObj&{%v3bIa>ST zQYul$*oIB8A^~u)F{lQO<^7UVs1(gTMBK6&m@q&de1P!fbC|qVdJdELJo*ijDa(J8 zKmcUcv9ocS#X=m}99Gw`3Qj6a^hJsQ9_!cmQ+^pnBAPkzc|a{eGpn%~%gwh^kyY$- zXEOHrGli)pi-O5^+9@!lM>ed*DxOt-9vjHX0`OuT_E#?JFl`2Ou_JXLr=ZLUSjP3e zGN8lu%aVbvAPm62SFnNHNerlIBT~W|#$bt7N2Ff2fw4N^r_&j$!)5g;jIF=q48~4l zY{S|!fEUh!ue0F`CJp9c10uarw#y~i=V{a@{CgTQEdzH0%oH;DbrmZ=>zO{3hZ!qS zdHA=$267f-A6UgUikj;;o_Aio{9T&8d#Di^@(7fMcN$P5%dY!b<-mCpe+De=Iwi*j=Oh3DGC=Yj{0nTe1`%~KJA$C=^a><`at_=S z1*BI%x=}9w3`PipIa!Pd27MCQ?NH<_7%l0hkH7;$KqDy+_-89Uhe-i{5qv-nokGt6 z_^(i#D3_oh$*0#-85q;wQeObdJE;t;F5XLZVWK}v?ZZSJrQe_fJ!%JddMA}XlQH&Y zdJeksn^Ybc=I77<&o*hK0j4{oV;

}ow zUDEGfXp_o-MExnXc`;+`9rSxQW9%_110w%E`rQvaK)=B!E8D!3G4=zhyO%NcMj8wF zXFo&b2N`1*0HXlz8Dqes@EHbrCOlup82chH2V-o6G4^gMGs+n2rr%>=olsx<7-OHH z-@pA$9b+dCc_~Fz2C^g9p(MQ2fDUovK`H_ zkK5&AxSrCq3td|>^2wCz*giaJ&15nl`On%lI&$&E*vP)ovA*7kp^^UG{ez>Rqfem9 z=W9@`8FMQp)LPryw{zcaz1WMjVy7F0l4W0H9x_VhqM6P+C8%>o?(>qM-ZL~hruVc(FIzBtW76;tizf~bjgIXe=^LHs z-3b*=Ba}DG279!cCyKQDB{Q3Ag^o^Fm36FCHL*==VuMkbGi|@(V(%xb1^_*={p&b- zPAsW)04N)W_wC%_uEsJZTSn(#i=`odas%o?Z3Kj zVsHOIKjL@2oUW}}t#~loacTs0Lw~Ajh-_(u0oMpTi@{N_GSPu*;0$Eg)6woovw_?b zjMbmm0x7p!N@l?_zQ|z3$BxvWp^#s6rc?NC2bDjkWzKM0iq>R{ocQaCEkG!$^4X!v zveXN)*B6krGyEc4j))DFb>Q)a{e&0M+ad9G{e35*HAMyH&B@ak`@m{;85_v0M!N-8 z17hol)n}$>@^0F4T0GOROO9JK7qaawAy_1`iUuS#*XMFHw#n?Vo0QY4wHcthPQY2m zu4R*u*e8|e32v1A6dWU`gvpyWsVDM=w$uWbSi7#6%614GT3)IZN{jfG6ej&EJC^OI zy%|-WCpJo)fF!>5PuVT2KU=^ClOPAsmF++pmVc)h18cqxY#FdR>lv#{Fjfb)3fL&H zN?1#VCvFxtsQr}ZFt+}WM~@zTF1_Bs7(aa->_vBReVR8GOfT3lNV=lvOb4V_OHyGQ-b`r%g8sXBBG=wg zniNBEO$@u~;uX7SdS1%&opRYMY~*;kGuR?n86)kx__4)9SmIz^3}2RbN^!7^y0&Dx zjIxEVos%L=nkgX$a7NT?lFjOR%O~D4@5PGNxnpxC@Zjj0G zD#b0hva2O(VN$_3E3sA;X={dU)#Vzcaui@-cJTyQoRSrFV@!3fv;|nSSb1quM$Ox$ zX=todn@CmrSZ>)=s;UXah?T3!v>l=Dnl~r0Kpde)tq(PD$p>2`%7l5N-bc`n9dI78 zqq?}XvhaNkG=Qh##ZOcAgUUKd7b=^;GCFBZt@Y0;wn;PV*1*|fFvr#m@9szYf5W6P zxiDEN6c%cf+ZQbtm}+(GJTkpbpcqkQX{{5Xs9;*vF=;&Yk@0lVi(-tYI<`C3(n%IQ zVLTNryK)FrlOw~{5N$%ldDdZ8s~^O%=|fNOj@Q_&-a+cvd8m= zYff7b&jFe}Kg+$MX_lM$lxf12ve(QDmQglc(jOk(1ym`O7BJZb9M&nChHGKhwmgE2igR5NO0qn6~_x$|Ni!1M~&Io)M!# zVJO7q%bCD<#?G{N!BNqr8N0u?3y;hbX98hs52~b?AWV>45G#EwcD>_&_#A^c2nZi# z!C7l-$$~YkMUw?yDlB+8y%bI?HTJqqZp(jNHKk3cP8PC{=s-~sD7%d zzH4ak;(qjJs0Q@a>$;Y_k)Od;^C?&M?w;7yvujV^#GWDHQBYMb(12V6M=_z3bz=j= zz5TepRs{n|w3dO-9u|#aR7wu50SoU~QVN!SP?z9SmDeJ;=g?aOMZH_?m&zB?o3mQr zcuh-MkW`DCFFJP6$~y6PSQLI}6RtAxU+`j!g(j^d>)4)HQMf6vzo!k?^k=3`$DKA& zg~4QL!cgJp_+{bhI9WKlO3Fe(A5s)vVNRyNA5%bUv{L4tQ>;K@dy%5WtCT@&iyX;L z-YB9(%NLyrTvqG2#FDQJkl+=N4*sc(G3iO&#ELHkbYOV_ZZ;^ixi~uu1NcS zsobR+hf;!$yW)r)0f^XTTeoc8(uH5rE~{Y{VIc6O&maYbBpAxXkF2gG6B+EWd;quH zKCp&?mlhIO^KdoZt3g^=X*agu2QuF4d^jbkEsUA{_@&vY(K2XOpvBKo^fXcDQt{k9k zt?2!@T_I~gX#64K3i%`%P}sJV7`p(uJSW^AWoO=Wrz*u}xG}(-B%YtKpkA9oQD;Wv%3O9!lHuP3WbFhAd@bjpUCt7!`{0EH*#eOVj!zZ^)6LQ zt(IETk6S27EcFm1z*mtuT|ELxkOdV zlMx;I66^^~*T87~h?mx%!ahmBLu9@8+G&t=@37kFM#vm5PPJi9(GJ;kpbJ}OlTn&-}9&$J{(vT>6-E;bi;*AkI zgG|A_O?OBm6NthTCln;k@jW$bjl;+vVrY{R6rQnX;j1L-%!C734ZLU#Qog^)lo%P} zv9b*AJo89E*gSAdsZp@Cg_WXSWRNfUsP5jG?K$2osD1ep2QpaQA*DT%p7m@zJiA9e z{|!iKE0`Was5S6O@w3Dj zrtU)F`-%)XQ9+H@T5}g~$_S3_ue_VNXN<)^uvyDqBYsD6AL!5#Is3EL zAP@sO|55Uqj%oWH!L$tmafGa)y!Ox!BWm-Ur=%1oKP69`AR3!4**2|#-UXP`_-c+UZTou@h2P?kIZ=4G5RE;Lx};R{{1V8V+(IH4d#X*t zyT=tP+)?O}>|Xh4r$=^v=)R(Z?#BYUfsC`c3m9h+Y)~RVx`J;>2WLG^Ok$gK=zAm@ zm=U2bM?Pc)90ksS8Brp@lthETANL2q&Z(_XyH95nAXf;zs0x6sj4A==l8DO^%1^ie zCt1c_nWC0)CqxAagCszPH_0s;@;CJw<9@#O#Y@8lV#6QhUin=_jgMenu824lfCyK_ zT{mmew`qwfL{#&{iR2C8^%IKm3qrM+YJ{jhhap^VKCO1E&89FURNqUU>SXEu4nLf( zqsAm{VZa=TsP%JQYUhL%)P3^+#{}aS2~U{SB?c#X;0b& zo`?Wea5k9)vMX>zrNJ~|wy#dlr3sWpRR9e#S~K6KX?>YZ52)*phSZC$IhOCS%W}+f zpDS`{lmHPOj__VzieB**FBlm?a35vLCD-r!Gb0bos5F*LKlc1C$ax^T|HKebpQJHz zu@W>!t0GX!D#iyH6@e^=Ga*UC9RkJ}Bza#M|BIXE8ZnEDtrDVOjgf!@ zAaA)xIXlvM6D7ipHb9%e5C-3*`2k1XMMNc=~ma*TeUW`xwd@I9y^K4%ZreI6e|2MuCTS$c-mciSX+D4-DtGB zyUq1#rDMNMw3ERHJC zfND>E>$4(Tuo*w-7e9yUZ;R@}9e_2Hn6EtP7}F_@WWaw0ZgSp!M|(`|Xyv7nf>7Zuj}f6*@dV*N)3W6d%Vh%~F1~ir5PSg-3OE@g4S1YLi?Rt! zGe~SOn%vOYyjmRF4Z>+csvMw%L15ge7ilarh(N|vK}J1Q5@wJops_;VEGEJVN-BA5 zu?#iNDV@SBgG?pSFg=JI3WRn->4~v(#31~TNxfzy*dS9=crMhL8F91Qi_VLqBm)YFHK;xDr5t}H0(GJ{aUqxj@KR$zzNB9dP8Sux~^}Pm@aT8^k;S&%^Kp=)_S+us%lbf zJ$7?(yZNm1u(7kdv%0&nQEM^umK9Vil$LDB>c=RklZV@{Gt`4`jXeC3meKgWJTc{n zO-o@cAK8f`kWL}6qT@mOHimwjr#N(?0f5PP zi0sCADETE&xLp(2;9e zaF<&Id?>PwDb5v918EWu_AeY!YD2P%Fe3L39oGffnnZ{2j$1pEz#M*fjrWws5_tgw zV+h9q#W3ZiAq_*bPeWn`lz4tbYzi^ZZE~+Sj)-M?B%tC^M+uBDE$eF`95f0)`?_%!2)Lv~NWp(MSG#bz@S(yZ zUABD-XbDj1v}^IC-BTs|H`<+6V`sCwz8X6bK`p&c@ub}YgJE${sNH0Jh$rnHxI>7- zcUraPR&}k`eOm84>~2Ay(g&*hu-0N{O10Tk_%zW2gcB7FO>uXYCgi&KJn5$-Uim?U za_nVjPB?7yMTwNQwuI;83)h$h!yZ^QBfBIYRpubdZh59+EH2E?iITq=S_3*XAFy0N zux>YEp(oX=s^$0&xIuubQMS4?e}4t)Uv1Ua>+N)9c|Kl1#W--OQrjWtkYrjf+r2Ju z762Jg<6AMWG0V-2~O`g#w4j3Ct^1lDoalG#ZynW5`zTcDNUku%-ER{@mW=;2;m1B7vpDp( zK`jl|<@*lWlH0yDhNIR*qjOLz@A<)y^u~_M?zJLn4%4>fyv>v~=y|zqJ85?&*DAYF zNHR5NZ0vxF&Z!Ke#PKGA95CP1oR?C6oW(N!DDBB4{Pnb1HGHQ_GiIi8=Qi+#Aiel4W1#uKz#PrP| zMYhCgGRR71q`1m_Qi{t$0jJ&>Du+9FjAXTRK177`S?KDr5rls#b(87 zt_+6Zel>dh;z_N)vGZ}`>8DGdY>w_9e6osnjJIoB)pn=87NY}ncayqi7&%r*&A=L{ zN6K}uZFOnM^KIswWILhdAJE`v1`?fQE6XEg0xu@ufcU;*H<9Qmd9I*C5}X5*v0LQ- z_7)Sw;5#9Rfms=Zy81uwvI6iO7q|kO0`cX+$bYi1t|i!txRw}`u`)A1Q^`&YE^f1A zUokw}cY3C0%IdGN2j{2xw{$fByIhN$7_*@Kia!9jQHD|A^v0lXVH=C5f$5p<5$rXg zV6a4$a{$GPX%bo{80>(xbG5DpS4f``d<-*|ugG_-E4^5!SH&czl0)8-WpIlS{Zi;W zwYXHS82IOqa&tA1L#9^d%4Gxp2-wK8Wkb&(Y3GyZSSnOBG&PM_#)5h<|#J;t-OgS^jWjMh<(C(!=n6W*ikU^RIt+@f;XC zX2}pJwWyHXTZ6#1>kt;68~8^kV2(LZKYn!!24E~U8v*#2#{jVEsC!MYz&<+oUfF4^ z*SfWxC(z(E`VyQs?7%#f5IliV2AG`WkD^&PNxPt&HAm8AHa_|$V$0C~nu$Our#9xc z24ZXWEK+=6zM*o1phGiQcd*&oka6{#?nDRF^Gr^`rN)5`N3>J zM}Fu;ejpt~nQ|QrRG`wkno8VMQfdtNgQPy-Z*sE#+j_FEk1aMM$-W$9{EKgIX*hNx z2iRU%maFmW^P|PLbZGJKakPlr7g(_uP|6%ROU$=vny43Lz%eP|tq@~Sc@78zjfKdk z?fI@vgD`EN7WbAs3E=T5Rq&{$OuLiC&E}v}{9gXbtacK-P500|Vj+@Js8(DqFN1A1 z!!{>l;YuQL@Btf5~aQi0SG}uczAd?lW;phmF`BpRoiHM0(s0~z@i29Fgqz= zL{fhHZ}RkbU{nk8+ke3e{Jt7A@aiG$m2jl&xLea6cSW6PB3~Khs1uVoKSIBuL+E>4 z4&xoF=!_T%d^pEw^}9%Ax^TyV*K0nY5{9%j6J*!@~BPj`Xf+1nl4t; z9+m*wkRVmql$0=7P4bBXoey&17`w<22;sk>7=5Pb%sfPNg8*Ogp$?OoFIOt?v;t2V zNV2KRICPc%2~p_aQfD2g$ybF76(x~^{O#OBdopota}j2Mw*Y8M5KCKo5F+KduLhO5 zFgFKydFM*I{V-Edr31$Wl}XY7Ky9$vOQ1N2Y~SIr8~zw#H~eud&GFC-`b+j7f>Cjg z27N$>Sv~>rZB#H&gP7O(G5$>*#{Zk*2xqG%Fn)vmGi&4GI{iU(NZ~ILPJM8G_vs9& znc)%KT#C?+AlAA5AsL$B6XltnMW=}qk>}$uBDPP#gM^ajes6}PsRQdiMIBTtbRBuf z(Zuk^5`^M}1!%DUbh?W0St|Y0l(rSRX;W(t@Vax)*#{Qk;fM1_tSd_y7>wN{48?ngr`qYa6 z5NG%NFmy0!-)rpW`7!0&I!y6mOo4s`q6pj8fzuz9m|ZJZYN(pZ_S!bN*XBO3WDO&c zjRSUdwH;fHd`QBhFrvc@GC+r=&>E)jL5N@{1$+ImHK5i$WDyRL)#kVpdmQ}a+Bk4a zBQqKpkfqzEFOvr?_Mbo>DT8EpK#u@y_YDpeIwUBrtf1CJ@WcT2ov&kg0k%1aAZY)+ zTuZN{n_aC4deY4uBbz7ZwGjZ*3c`tDKW<=$=aQKHlR8!alL*n)|fpn$~_epk^Qz!3ZO;Ct?(dE$#U+ z`z;-2|FPhDS?dC|O;5dgAUjW5{8qsXfUAW7DsCxqh7>Lo{N8hFfoV}hEno|0NY!-# zLm}+|h_y}#ks08Qn!>4QnJ)7r2D5Mi<~sv3u)#&1-BI9U%N)|c#2}Io{}G}fxzs$M z?CroG(u{1(rZ98h*i==MvVW`UBVLlBwZ=Yaz8sRf%pQqQkNJ7RTq7SXjxg#3p5F&% z;P_*RHNkXKh}$Wj<>R*&YbeYoxX$;ASUn6B84)G>WC?n!K1vU74d~e8wY^V zG4PjBnVDOdSu8H{rMM9*PH!1$iUy;tarAmtKC+k(Mj+vul1eCHG7h6xln+k9kA-U zn6YchSZW+&L@1os*_!!%SQ)k4Mc_M=rQlW|T?*En2?rvI$m%gsMD!MKcO+lRn&)37 ziz>P^KGE}I)!RC(`XkOnu#N><^#PSwC_@lA!4R6?CJ=BMNpbqDZt4Q)L}UVjVVnU9 z5^MnLQipVopSOqz^=Ta%pLYTw6a~2E;L-u2LC!LfyU-gE4K=oR>Z`l$*kkKU@gD4~ zt2RW(IwF2FpaCE3Owi*fEo89)1^$bg)&LyoohU@k47_?|TOwv+7ov|%36&k+Iwf}# zGsQ?r`cup0@*KZpn-Xo7$P|y;s6ImJKgXV9Dn*H0Q#A_#gyZIYF**tx^%9wq6i(tH zdo6jeDM&=YJl=kI0t^G);wXiL>ko1X*Cd8p6*QYR`{to}q?%2G zZ3Q}|-FRACZPz=sbYV%bCKZB(0di2zj)f>ru!OE( z3q^ER`HCI;wigP%fCoUr?^s@v1|8r$oxSP)fuvp|e>kLcmaRsDbm97(pLD&WBVE5I zNEbFPNY|F4>094vCtPY03<2`zrVY7lEC{KJdOxVK=eQ9Chr=wH6M^Xy6ID2f6D|U{ zqXAcJ#H2{7I0W;Xj2Fh&6Nyxk!@x8_*)_+K2^78yGsDNo$S=+ti}T2(+n&n#v**Cv zE6?vj)NFz|T=z_i2^vfsD6hb6;L3t3U0_cHtP)9Qt4;2~)x!`ho*~d8BmqAy{FOw6 z)8K0sJOpedvm0g0iF{T=hneRjXjq9%;hmtk7-T4y!CJ{DfOo6d3P8cNSFjN(^dRmX zX^+D@XUtfyLBN0O#V#m`C%bC$Vz z&2pdHm_%LX55W8oWXqF1v*HeucSrx_afEHM@IcFBkr!k02u}NWnBs>~nSmVj0G6=y z`it5Gi^h_d8kPB(1;r;S9_{%_;=4MMc$vFJiSY`WxaPaA+4JEt>41`<8SJAoD7Art z2?uDQsJ3KbKTQfn!)Lx^0t%Z=v;ouu^t3s|Fh)mZ`SQqM$`eWql(Q-ETS*%Q_m?gK zPF9K9TAGKWj*nO|P@Y;8o0M{rOxS0RMv1AO1Za7amE=Zd**go(;&aAkkn~7*s5Ffd z8s`-CF$fYSr6Cs5B}rtD3);X@+=yW+MGUa%)R8n_uFS>Hb5KV!FiB^m*H!&O;AzEWZm@K*R2 zFW2?x;mnaabXkR1z7uI(d8%OS8a~#Dlss~LQ~KA~3;96gbR~qoq!t++MFZa>r6I0z zyicTrd3T(?Xp0Y^cr6j%AUS2WGnps{oQ3bQ!mJQU<)RqL} zVqeWIr+FVag}4zmFQkeC$!)&HT#_|At%lTKQ7lMQdrAHYOaeh~r8Nz_kaqznY>802 z+ozs04rf^hsurC+>1kQ8pU5VFAeKNcDFDEzER>kzpf&IVyF4>LQ!b7A>`_>rnVTu6 zwtrRIM^Um32d2AEkNB6d4B?OV5B-1{sj-*m=kLC!6C~fc#KLN^MG$;l9cRnzeZiJd z7%PF%Zo+qmC8`IV8`>15(?6#8K-NhrNj-}?rPZwI88E(s$OEJ-i*h$wFiVl?cvR$f z;&X=cSfg%Zaher-{ZwjMLXRN!Cw#3#p=8h+Q2~n+ zt*VBr(b6SARg*x2)WK|!sdjrkM{~`0*Y2HKjf4I!pxS=;stBRNlprI1Klf@$)iO*L zKtl|t@!PY)2FdaE-0@4hH?IjSBFC5~<@|^wK{G5evjh;ep zg0IAd;+gK^eqr8M#30UpbbViUbp0i6xh9&A4=-Gy^;I~&z@-EYRYM9a3hE(ccqp4f zlspz-4?MG7%1%4TBg$NvUW{pQgz3~VR%H4-V|!snXT37YIoSBtCJG~F?xjLRgUPD0Tjo)65-$>aYmNouMk5%`x;j}0X&E{e<>GjE))`GA|fvG z_3Cb?!DIVFbC;i+);^7*6WmIVFC|=5c`3@)qFpH5qj@z6-e`0+A+B@?Ym> z`|zzn$ul^P^6@IXub9I5G4lsH%={Z1GkJ#sF{{lwX)CF~(W-sVJn#|SB0mVgo*@cg zi-I(+DWQ@-W_u{U6+;o^B~`a?VTKMUC8m!c&KXCYhESL7+H*V=vxK?!F$sT!Emuau zRm{1iDa60Qk2?6);FaDg>w8*&;lo9GCH`@Kl=`7g4=-Y3iRJ}PZRnhC5e>MBR_e$S z^;7qHObGj$llh3g&!u)3l}|=rz8i=P8DzqVvUr1u@U|r#nx)WwYPq}uhwF-RxM~pp z80eO_ZyMAneg#eNofF|80i1}<|H&~CaaDEGx6riZBgkUv%%HClAo11e`gVP1yIS9Z zmM^ilipuf2H2`xl&4|@wA0I8?J6Bbhud|G5+6EE?{pj?Gow_?!*S1Rt{I_m%*COMjQPI;?3 z$~&1OWGJx=*^Kb-oMDbkYrxzk@W~<9u>qkkm4sS}J9m|MJV3|ue8`maiz~nUi93bDM6pnqc&|_>yk963ZWRg> zmkI^!@k*g^wQ#pkxH>UW_{CMCrcNv?370)p4|W7hk4hy_X?`b--RQJx2xaVuD0sc_0?{xy0hNcPJ%MDJ!$vU z^X3Yu8mKqK%9=BA((Zw!u(+HgFSn~3;n5dkf6*T{o_5TqkE%ycI_-YwERpPaAZc-fCkfyC72Gq z;V25skv$zAg|6TC`fBRCv^hP z)Qy{5LKf-T`l?W&!?v8NnPaCdSd&w=q~`v+E;kR&2;Nw)x0}_@+QV9_i?Igl2sqbd zF*O;Vyyf2HDwsTKti z4T?cuXBlL>rfo9@bgQx1tv9<*s;yIx81n0i_TqiI1&P_}JI&n=w1tAfsRpN_@5Q;r zrER1H+qLaR>sfcJzFj{(9B(P(x=@*0hL&zOnvAM!*S6zilcyS(9vX$h@KjASlmT7i zN$6&o;meIyt-1vZztL)JpL*q0yZ6^WDQyUYCHMuiy(LNB zw69E??5wrv*5Zb<>R0DRpFHYRj;zg(pIEikC*>!#7fnp+uCXUM)%vP=Rr0J&PSub) ze|a9=YS-HBdSmCTCz5Jo!%T$UXxGd)(m>dAh4!g9b)mwr;Pu@mBo)Jyhwb{O zr$=}dr%ts2uRp17J*quRoIq?Hz=TBL`Xq}Xe6_s|`3ZMf+Sp6sFdEsa`OM8d-~XsT zG#wY5ZvZS=4FTz_hH9g83)+~`R1sjus;DMF7kVZ_{7oE;dUCR|s7<2-7_j^mNaSiep73X^lP$)V20u!DFXCIv99Ig z!fem+W|@8P6t`4j3rI>}HAOw!_uM0LL_<<41@y((2{7#)c`rprrqnh3_*FJrxbs~( zH#WxD)Cy+Cs26y4W^M6LT9wz>WWm5MTUqJW3d}E#hUUxJA<_rz7JupQ8&2w0Vy@o9 z>7@EGBA@@d;*L&x_4~J(S($(!p}+z|e~}9UoWq+Bo3q<_7(#kTinu*s;U#5K}j!xr5 zG4&c~Odw$!Hq9?xbCD1W#jE`4P#@dXtXGQi7$@>Q*B~M=o@)B}h}DXJV6m*a4Q`Q? zFuaYT!9f7z28Vo=Nm|2oSYm(LHE5?|3X6w2v64?u`*&sf<04D5_ z;LOv{J6j5aoqh@8O8Ob2ihI7F7=^H*B|TGsBaQ^b7XwO5+2$H1L*g3BoD~u<6aUCt zqi?7Lk!bx5l}KvcIfVX7sRSWXdm%Kq1_VRq2q3KGg^(#r3#;$UjZTuz2q6+Do8d3M zL8R1?`pt36u7s7FlT$IVzw+aj#3&;4FsDQiargBNhT#1L-~VqIQibuk*hB97`Gus}K5oO}8(6z}V7Ugb~}b8=;X=hr6{b^4?OZc#3~6&j`3 z@UbzX9%-}as_hY_HtEnXnjt$r*>KHpFb%&xHV;hv@s##LA6xuW~Z8Jav z+t*zDd4Ax(s{{UjHwJ#_M*#j7{)-s{4#%NmVLT^_`36}2JQ|?&-)=}f8lk!0suOj% zn*|tMWs>Q!;m??3JCRoPPsKW%FWq@UvaqVBKsj7Lz=M=ZZfbc6+@|19e)tt`I?fgY zu_=pAfG@RIvNM1t9GnnE{^pfDo3Gc0kzvcJHUk^=_q9qMqg3j@N%MwcFWPo`M@TtAwG&BKlxz zO+0{9>hMqK|J$)+Xnm*NSzql|Tbp=kI%)S*%k#`=^kEVv?VftmnW>cxk&vo!T?s`B zK_W*z}NTuRP#L@)hu0PS5Szrd<24as!$FTbm-eOkm0LH~Yz9X&q#i+4)rYi4i3vg7UDLuG-$;JjzGnu(G-;VYeWpp{fCeF@!8Fqw(T}e&( zszXQzvrj|r2FCtzweSn_&V;(7-w+0y2*LoA|AtCQktaD_6oUy&^($S4z_@-$he~Ln zOZd;ElaTjq7V!tZHSD?GT;hlF*z%|!LbI$ZC2bh%?EHt#`?|yCuX7e1Cn8RnDnD0_ z$$h==`G+n9Am--{Msx={?fDVdCt(Erk!wbfDoma=;M9YeoUJ1W+Z0-ua|>B|tnCMV z)8jF(Gfe(Cq&Un}nCp|>du%%N4fvCw%Gg$d_da105DU|SE?YQ2+zcIK9UwuCK?h5w zh|1#JeA&Q1hqMQb_+S0AvH^fS4D1kXCUQfJP8QS%Vb|9lR(CdQ+coY&`Q~=kypT33GSbPn|)oW2Im$V4OEdF?Zg?9-QME?3E*2|ra5wiWc?#v;KM|L zL)v4B|Nb&(A14YQ6xbm{keg*u9z)-yC9pK7VMvO`O1WGqsup3~&-3Ieg*$JGsJl2> z_E%2+{1o5=9R>Iw1O|6nZ7yM(6m;n=<(JPPu z2lg1XOOM-SLjv$8r&M>zJXu3O zd@**S$VW_xr9w286>{S(rIhPS(eZ-o^OW@>#ph?2+1U!;F$P~8zK9|)frccYfVvQG zFM-0>4u#T`C#~0~i%{a(QOk8kAuYwjSERnH@x$|D;*<^({{l~76Spt0vBpM2w#8zS z?Z=%C8PYH``;_zof1jq~CB%)S6~I^tazd#3-?(%FtK@l@w;no#sVpzg8~6t{hJ!L< zOeMw`rov{YVdmUqh!YPmPPa&-adokcAY&0P$D+E3O4Z zhd&!Zm=eo(!8}x5QKD}TSc~^h1xtYT63h|x|5+~TU&JVuLX8(kFnWJyd8b?3*=V%Z zYTb6N)2Z)lw!0hkty;HPYi-xj+XR(o7rbRpjmR4}@g_9U+TGcywc6d#j8#kLu`00_9cr($_Jt^{nUHbauvDMmNvbp(bz{-HpZ;cPD~+ zDyt#M8idJ~^^;^RDGtnhhY=+Bj!Bl}DL`wO)ndKPF%RbH__N-!$Ns{;z@W}gc<$*4 z&mV9Wz*~;Pvpn^K{XNKfFC(0j$oF03;4RM%+=k2klQ(cuew?xj`Uv7ZmupRK>xezy8(_qn+-Uqi7(ugj0yQ#Ja^ z9J9LoxW+5=U`tHq`TWzxFbqeBcC@p*F@NNI(SGvWY4w`@7uy>vj~UrZnUVuITtho& z3&NAAml_v4!I;8!y|vb8wY!a0eY3v9lWJ7AFq#fmh^rCpk{*_-mpU(ePuXK-y;LuB zUUEYzd8(aC`4AkCXT=1+5BtH3PASu$oLf}d6kdM3pbCLk6Jxl+8fT$$m8R7g3OI^4 zc)|8o7d-gj)K-eC>7TIpw`B20wP&f)iABU=-(Q@H>I7WkUL=7_)qyn;G# z$p!HCciXjYyR8D|iN(2hBX36*2e`U#Pys?cT1f*Q=;UQFcRJG`R+^Z`V4l`dWf- z;=@$ogF*GTnSnhwE~|E`tJSu;;VKzOBJ^#wrto0p{j4hhD+l(TTBE+hnYH$#dJ~P> zpVV6Q4UAF1TT%VWPesxalhNRjx?UHT=2>w4#5_{?q*jpgcwL=G63kTJ-3f#N?)0r$ zS{25UOPlgW=gR^5V{s(P!Tf*?<`m0$=EFwgug-^}B6glfx~8Zc^;I_N^ywnsD(0W&=urZ{tFh-qM*?30>QXag5oEsAs%_P(?Hcn&7U}Q!sHoD_N1fqD z^rX2ySNkGzwi|w{XD%$gsBRCQemcLpI=8uJu6x^S4R`62moyqIR5w3uJUuAa_cxE$ zmt4zS-9Q9w*VbCK4iG^FLDemmlfQ)^-`;K3TB%bfafk<>tXqpmkG7ij;i1`?Gv}U! zpSIic!e`q?Ma9Mv{)m zH+HNG9o~`^QUqBI2O!J8AvRqC!f^jz z$pQPxabB2TrHeu=ojZQg85_`sxnlqGvrTmweE84rYkr!ko~w)Fr>ckv`ZSY5N(bEq z%6e%^tV(uAt~oGBvL~S+NUaYW8`lP?`cTI=>uTo-uLb2ywNeYQOy^728dFY{!_{NYF-I2AS~N84_v zwt|gCPBA&g<0dDjl}ZqGmI=wJoD{+>v2vP8q@+y)lW#)m<8z6yyf-OU8sw|WsiH|x zxWr;va+Bl7JQM`7E~1_gSd}%?zeltaX0uY@%(N4Wtj3ALF0Y#w4HLMTP|ylY$(#gC zKr^y38}Fhdye6`emx{V2u$l%r%+M6%ui_TDw52P`U*TQO;I&@j{+v%Dqm6NJfyvCED)SH;}_WZz%oCAva;-=9Md*}x=ZOS1?eaikCLsc?AB~YR0%{o-=hvG1k zO{VaQePvEM4fx@lQiSj`E&WpHLQ=24QHSJ5(ERhH4qu7KljKevHUFvB3UiK zva!tk&_SD~(E)rVc*}Z(ofXQDlcr93mnUu|&e>BcsR)tG1>TsX6(=k!fWPJ?tZO;=yu4QwbAlK6%9WOgu04 zGPyun(ordwlM2KfU{!Y(8_Kay2Aki_SF|)t#KZ+bcpRS+9)<6B>LT?f*xz;oYIk8h zlXsAxa6^Ci)>zHz^U>c?0n(-cwb4Yk6i_wR%Vp>`pkE=-%d`$Ce-HyDwl1J@%Rl5` z8TkFc91h`z39g^$0rjGi9XJQn11nmWJ3D9Yn^=1(D}Kd_Rv6v_#8jtYlmYx`?`S3*D5m4e4Qm4EqrJRL^w~v45Ka4V;z|JQ#y5PpLpsEm zFP9fp-Y$a{DR5)%pA!7AO}HwG!Hnx5VKabO|I6^}SG^T6=po8APKk1Y&L5j2`fRa| z{_?xbdjh^S=Rl4GuZwl$ebMXFh#g`0^ZZx^t{hkX#V>#P%eQ$}#H)n@`9pzK*to!} z9sC!Ibu?z-j70il9^^>;6VC-e9mfNgX%_gRkEes<5$}s0%Gntt!S++^2~$vi%{g)T zA|4<0h!rv-+V6egE!|&UNg^%|K5qEY=`^+(h@q`ly!8kbMe{-!Gn z?XRquFj>VEX4l(GT`*ei)^?u26l7Vc37sf_Q984J1M$gqdb9CZ;*(Y*aQrncaKN_) zuf_3MD2Q_t*5IBzEuZhxD58NYdn@gYT~`r35`r19v7R*3`VNL#N-l*zB5nJotf>>y~oyK;3vsLXd*8w&L)ku7jqV@2N_1Z>t zcdOIgs=wk3j$^6g_hlO(0F^C=Gz1N;(Hl@?#V%B*bT>ztpT<6rGx?g>g?V{5VN1C z_a8JBDU2;e9)-@^BBYOLp@y$&jsjZP*|4m}XQ2(87<1BO@DqeTO_G76U50}62BCub zi^l@14U)io-fn`z8Kkz`;x7^iZV2EJW6Y(!Mr>ZBqP=*U5$ZTXGhr@`_q?+bQBgQm zRK@wYyxmKcVhE1!Ggk^Lpcll07No?_zD6uTew9HF9(cc(d*Dqb;y_<8T^ES%cQ-m) z5CW}hdtsM_EpWX4wr?{9;>a2JE>#nbCK%lxh}sa-08T8 ztY+_HLdm@^fLLBAe3u0Zxw<%6C|q5Xyr=Dj*;n7XSSZ|qS3>9Ww~isP`p902mYfZX zejq@R;&OResC+~_$?_rgJwrA+TjbDj zUDAi}9(V~)Lb$&Vojx%C77e&Ijb6LUSlSXPE-cI&3kx_@+5D~tswnD3BpOiCqY#O~ z+2e||CfgihqP8v|>krqOq>Z@3=YO|Eic9y6rTZ|^yjESuQ5zxp|{9H!u6pTy)+gZ3y8UpMIc2G%X8aWWmfJ+JoaoG}tpO3L(!U64D6WFhIqK zs~OM`cE<4_Mycu9{!q5oqreB4AzNWSw&N*?L8b&T5y4>YlDb&ib%?DVOhI^51`t2% z1&-aPKNG+oj}L}#dm#_Z0>c2u5fTpkv1>y_)sRLo+bPp^MMq*}8OmrRirppaPH6UA z8WJxW5esmXgh!sml&kSc56y#Z2xwR-Y5AaSZM1oLKafv$I?dGDc+sc}Ep~DB4@}n} zQ)M>H)aiGZY(UUH8iY=W8^d7()`;JO#XQ*1_qa}F3>GEeY2&!Us=Y*}guaDF7RPPY zWzL-e9(C{Jku2pXz;o&ka--8t6h?|9wB7e{;i8Dys`0Niw`!ks*S4y4%x--Vnv$o}3?YeTvG3}{xW*ySr*R4#2QJkPk)yKtwiixu`Z=(_YQ%vR5{Mg-%%Nbl=_FV1cgcoo5=A@a2AB?wOvcR|tP6TUn@tMMYI1 z{Mu+}S{6nzNt<|I^!DtY8V^J%D@}hz<5*f9(oHjom2sGwCo9K@l}A#TvHv-4dvv6EuDrNtz#o)U#3BKeWdv98ISes#kU^&S2$YzG z@R4B-k?F$u3ouC(EytGp!1MQr_Zl zki+?48l(R9Z#s}xt5 zc^>+n5ZBJ!Et46+VHgOPw$%)L^SR*3BY~VhO@tRsAUFfHOmNXV9M12MO;kd-Vwc5p z@l9;n8}}0$THB;xVgr!9XS$(~+hmm;8g01#;cUIRQU8P&&uO2JwF?k#AUWe5ix-hI zq+O35CPpB;YP#dTD7~%JUYkK(54Dp%Cil9CK%HR*E1Y3Yl@JD2g_FS_cPGj)c>BtYK z0anH8!ki;eJ#-=43!a55d{po%pnCxg2e^Am?rvN@2ZDMZ8KfdyJe8;2z#n_IzqeLoMr3RzIU1^_wsa`H5>C@kd3MI&p}MYJL9?dsOn$rYSY7ZL2VH91F9IK+_XR?_QM8!C=y2w$M}s;8T?Ii zsG5#ph5r&|7-fVl0fmyf5Fc`k|L`~X5B_xwX<<;H(iCqz%tD1aRhu$*a5%D%oXnL! zRNp6-!W$3sMg;*7S{>N!h8Tu79!{(6e+bcKc57`uk9*~5GUbe>KAa}^D)7@9vVY9M zKl=P1^V4Li-)Aotumbfgll^;fnoNb!R6O2$OVea3ve?VzX);B5#T9IkJ+IuKCR1aZ z{{u=5$1iaZbMPj>H)4o$STpoX(P#n7%)_9;^WBAh$-Q}~WAoPLv9vu3O4cx99W3C? zMh8pEC>LN(@T?So79HDJU~@ZID(wYkpFM)v1mOX12s-Kqtn?yVx`U;X6&#J!6<8Gg zl_0GdwzCM!#PpKv-?&O{$l6_m6~Mv7>%WN8fYv?Vd#Sd*6!+_oq7YkK#z&!F;ybwv zlRI!c%3tF)IQ@Y2whT@C;b>1;jumJj90g89OToy(R#%`E^JQsnk^Pgc4)0@{>?CITQT z^H3$UM45RQ=$l}@!A;giADEPuvq(G%KyTmhK5-){SJAC}0U$=#M9{Y>~ zH^EoKM_e7H*l74@xNG<@XXcMX-vicO&I~@{LeC(@1oJJfKH&p`UAATzx^Qi0kfP15 z+|(+B9ekGQQji0LP^4^TTs)N0r62UWPGYh4eAfoqVoDZb+oIf~5yG@o z%I*?b5!E~=%EwGlg-+th5uR;Or?BA;E!o+d;uAGrQuR1JM4Ann61@3}zUg{em0dTn%7U~BkWVe2 z94dT@dk%H&HQ(EF`Wg@{a#Tu#J_k>W!$BJ6v1K4Uu=c3NsR{US>rJB zhnm6QThn#=fJ;U25zH(CYk<0L12x_HVPhcyW!Q|eQ{tl;86ic-3rExfq!-jO`O(xW z4$aZX@%m{%5g&DZlJrG<;*~Ue7&|Gu_wXr(5gn!BPJVP-gw@0z7W)CEo_0mC+=1zi zVLwISvgAiIarm6vYe4Oj`-~&HB|j=D5Fber#3x-UGt{DgK!X6niy$s1fFV`5*bf}L z>FeOC2$W=gE{R@*6c39AnOn#_ewidL>{C3-EO2@NX(9xlB0n)T@KXe2cu1Z80D!g_ z4l|2g-1Gg20yWQWRuOGSTK*w4jS!!nhoB%(pqOc!5ZK?bh0UwErv zkBaoZvX8D3F44#g%pr|vpo0nd$*YfTh(nv{ZZsp8pZLfU0gsxZ|11WHPn!0Lj|Rio zC)0_(Z4F$(CvU2+bg2aFe6v`5&omzuuIw=SW~nr5#6R&;34QrDizSvO`-vATNu>Y$ zESY9*T3T4_2mW}p3TN9{PX%!73nHkQM-G+KKa3zyou0^Qk8k#g$+Q@zW?n=~{q?hT zouLDV{bH88PcK>W->K$`krSa>q1Z;d9a8!US*KuFjT)2`oW!$WEQT@%*@@CYaTHK+ zMHFnHWH^fK!c?+w3#ynNnHk}$7||i5Z-=!{?$ariI_U9?ckK#ygVX53kPyR1I}BlRiU#& ztKs{X@~no{SV$9vv&CHbU*Bi;tnjVzFwncXeNSt69{7i@8K4*a74eVrdm1e2>`DKT z@HF6k2}{x@|2Oj^c08NDqyb@JN&~P|dwE1q@l1RVeR)RyXzZE+F@u1Bf#_^NO)GjH z;y!}RW$lAk2>8qN(Yfo;i3ZF;TsXD8lENJ453T^fe&5$mz-du9+!la^`Y_m;!H!G)ql@gec| z_9z^i7=y{B5#(|Cm8nVf*y;0>UMI-t?p9=*aIJ@ZJmb=G6Ga@@~sc?`%I7 z$w0f!t=-M~4$E_nJ&Wqnd7)4MPvlDl$UrwyC|rS*+>`t}rneW(;fs+7&$;}7m4NTK z1o(W3CO+fg65%^8aB=t|itg}E{=*_`0>0xCm!L!_{1|?N_X6K>k;_n|bQppk!vrRJ z&w3C1PB#?oz{$VpSdjn5h!u44+m!Lc+tfh|l zEH2%jgAC_$1^^A`MM|WCkJw-EVPpJe31U0WLu|)+1NJt4ybMq94?;!!92!`}W)|^H ziQ9^5?Cy`n25!J9CY?qn>@VLUT~rg;r`(U5L7zqjVK?8RT)KHyKF`lo={MU`&JFly zqN}cqeLgLpy@-^59nxMGo_s!o9OA~SfzAY8A!WOh8(K_d2q#~uL+U^M0i!JN9g_{| zka~s?eE~8rFss+t&-2rY`#M_jdpvR%Yg|wY#z!$Wap)g7U@?yVMqqx&`9+M_%K0?l zvsRr*uySCnl6ER(9n7GIYsRzmYmUpuSMK<@e0pb6Ry9G5bbJtBJ|HJ)F6jR9{bd9H z6zC47$R0UAm*Zk%q3tf70{s{QC=!d zH4~7Qp0omL;AUd>A)*aN=qOnMwIOw@>4pIJP}5*vDL8~TVhs_@GH#lznr5-Fc*b=L z?y!}}*C}ea432#G#~eA>fWl_LNAX7+M9g_e$JRhEvopyOFi;abtHvJa21?*`Iihxg zk%?>MFfe?n-kUpmue|u)et-Pw#_Iaf&i%D#U(`Phk5+oaal?67f7GHY&eGb$WovWk z@mllK=i7GWWp8_d(!Rq9^(%k{K*S_8BR>AKn|T_pTLm@K)m8K_vc^4($B}kYzaGD} zdk`Q)c+)3qW!=@)dMir3E7rjD`gDk$=^fV9s&GDtE-#_C8pw`swHmuS>ubBKEIsA= zYPa*Oi8ABOc(_B;aUs^dsI9iDZv(P$u(bq-D_9U{Lk%HtadBZDP+03f-u z7(jBxvQrR_{>c^~_@HPZv3B3htby=l&CcO0!w^a7lfzI~;WBkipa-xJZzM<2epKJd zcHdIw@SQMpjoDdeXpUy+OY}nrkr3K?H`$hmZl~WC2n!(A<-*F!{4ovax8||Z03TF1 zj532tEpvOj)8tuMv-4De^}@o^B8=(nF)(|5$9tKKnimIrxNvxQm<)*d-{wZ>zmStc;`>tkcAZ{e21l{Gxly?f ztEHmgr`p4NUbYdBTmAxc16`Uc-SZdFF2!6%-7o*;UnJJ;Bsj+E8qH9NBuNNA?H;JU+nO>!Hs#9MQiqjk4am_0IN5Ln zu>6@K81EsTNq#x~c4(V~bLPY*;XHZ3kDI(+d2Cdiul{g3p(f6MWrc;6$c|MZ`Mmw~ zIg!(TOzR&kEHM{;n~tbwhh5)ezyh7ctID@1!zmvg9wwf}infsZBg`Fb2#7vAeQdx*$_B`}QEj6KWAn-Z5L zZ;6yH)lPC)eJ-e}<~A%aD_JfJuQmAafU9Vr(N$jrz8|sFCgM<5-{MUo`#UoljD7<) zP<$ZkJF3!V6Wzln3XZzq*A$ZX#({%>X2~oz2F?8DduGrN)qZ}iZTK&epF;8XGVSk~ zVPy4L>{tn+Naj|`<;29{BZ_BcgKy)HD2B$Zq`lUvH#^;p`c@5y0eR2%tub7)c45ih z6NQ;WFD|S)A^14V1|`|RVxX^m9T1Sx`gR-{Xmin}HwspBuBYGEuQ1Uim@v`7H3Px7)R9>yw?$E{2ZYZEZovJb9~{ zsQJ5yg&{SAmtKFC2OmX$K4|4F(Mr44>C|^N+udfh^H6C@GQ1ZGaMuRhYf33}{lIkh z=@Gh7ia2C9)Lvr__7)#TiD5THwTJfJzyqJ<5aK1`DmO$G&=N52SKJ!@&T(4H$-?h) z26Lh?UEm|+WTI3G%>zp2%cMd|phit89-nkk&$DvP`ERFwu*&2%Jmkj%D;?d zg%M^cutDC--Zd%>$UVcoQ`BN#IY;kr=vd$1=K3(+uV8#p-Dn+^0*anbm{oURTKixw zMus#pp}aL9c#@^LUPb4XnvSaQ!UmFzEVUhOevmm8^$W`ns^QS|Y=fL-->_!pFyt+y zRA70>l{i{*4)WC8`Bq}bsiSj7?_6Vuiv=~= z$i>-cI0BM*b*;Mgu-09#qw?TtIP~`^xbJ~5ER-2@f*hYjspHy6v#)Je+nriVP;1%t z2TI!)E9G(-26C~vSw}t5iRE_Fj>S3Aar7D1*vPpgCDZ1LIm`3*!`)tOsZluu!o}MXdIq&E)%=WXLPc3|5x3dOC zZ$MFz??#=V3Q1F^JVN79auG+2QeCXe<7jVr*jvDHuCI0>s8qX#_e7#NnCS>0euEe9 zjy(swU%Qrr!-krTt*vUO-oOhIQFlhEduezSzCh9GCKlh>sjVGXUbF!nTwh;JA{YlN zh*>Pgb_FwE_gG3W7}5Ifb~6^rbT#4}Ww%A?_M>{U+is&oC~Bx7tglw)?qe)E%!7D& zeKo$m5vAee79%;#YmagQe6sl%P@W4!LG_3i3rt-DoURmY&-B3(11$g~Ea z6oIzCvt6xkVY0YxZF{x0-rcTs9yS;iQ3~aV)RAOqT+&KQTS6!3`fPnc-wAb zVI4Rmwysj1!`nADj5I)~E38|iZ(%2`T661Jr;%Bv#k^%oR!gsxdMw0v^=<5_v(@fC zskQ1G&$`XpsTV;9Wa^P{VUh9r*SD*mbX&Fd?p6o$CW_5aQwClFRU?v~x0|i{lWM1i zYPt5acBi)8U9YzvsSpZoECTaxV9hS`EkhV>?yhdt*N&^NiVz^4fCzCbzL`NP7)uhD z?H-B-BCnqeTF(JKE~%udnuukHYOV}1SpZbYYDwOaSCE_!Fe;Uqg&DlT6lc6%!J-&* ztYF>~4`SijX=Waj7unHbcm&BMoj-mx#P3B(b#opE z(8zA<3{s+6v9|LB!~5A|3#4&A8E6tY^JJ)*yO7?;3@HJZP@eq^GGy^-fVyx@N$-eQ zrt5+R;b)9Qp@*6e^~N44m4YF9pp6D2Vg`{DnjYDwM@HOasRWU0el|na{Lv9l#01^2 z<{=-GGEBi@8)Ry?vnDR!U_^{hhb)w(U9n5b2?K84WpUT^mEmHy3F&@o>jW-|NW0T$ zRX1y|1V(a>IRh`+%ty~Mc^;_;Qqt%g>Bm$Uflx zG7bZfiv*abg`Gs4eJKMPgbRDJuUN*5-zkFND}$8AZfCPm-`OOv39RRTdn0Yvsk;hkG0DBFZw>gog0E^-wk3(M&kuSg*m;os*ML4KkWLB7Xb#Gq+a{wT44%7j9$(ox`qv;>!E z)__2e6bJ>EmPC9vm@!ADHJ~$opk7I^ddZ6im>2>_M##WdaKjR2FBu>=?Fu+;!kJfeGYB#t%0^P_$5LnN*2W8HTLuTK=+$Ep!)|g&_O=}>{y%!cGDK8 z!$g-t5>U$zY#NZrbX*@|Gk`nSasG*4v(q78me}cVWcKO*+upl}*>PO=fprJ389YdW z6kifW-2opU6WqD)*NBif00sm^4gli8hh#0>kGeAr+}qvk?mL5_thLsXW9_b;_>nJh zoahr{DYjxuiPu_tCC8su_R98J)>`&w$7?xX*4gAAC)u^-#Fm{eF|gn7)T68W_5}tQ z(%Ek}mqd3@Jx*1fI;ZN?sZ*yG%j$+z5xbB~-m-ZcYjFW2!zG0~a{`AT^4t>eaIX*3 z0X(*UIPrxyvv320=fNIf|yo-{MOO zO@o`jx8N066xTF{;$5NwjFtAX>!mVd>;Su7nrEzZh_TY+jIk#eV|OuD+Qr!HjT<*^ z%rZ8|9%F2-RASfXo-JaFe`l}-imgx~ialb_UmbF#7YYXOu$in8BUrvC8s7q;h3YR`9EF$hmu! zC(hb9gvl8SU2x)c(<-le+j*I(_O<*Z@Z(XEDGQj|pDFx~nSH5<**~tB-DqEK8Zm6; zR;|Q~L+)j&s78kKV;>Wy7r34yj+@}VDFR%E93|~gj%XtkiAHf;m3%^ZzSIau>)bqg zYM7J2R?>60WH__hN~)TW`>0L4H?yo-d$9EFH>eX5a|y0YCV{@3tJPlMpPnR z`8J7xSn%ANjl&7@AvXKtskUb`w5Ou>XAF}sZOXOjJIR{o-_kTpr8Dz&%t_RD3lu)#YcYGNx3E`GjwNhH8qC%6lBt0Yb+T+?7* zu_!HFCww=heQoSHA~Ckak@&Im0x;eHOo`v-da(nS?VA-l3M|*L;zT;|xgC=;g*juM zpVNVN&i=>1{`vdjUsEP$s!+wu*irHPF}$nM%!mYQ5pJmzrwYO-SdFX^*_x$sT%?Z6 zHcvJ<_shvffOYr?_Gh?%Xbh*+x$#ApojZYsat&`r#nX2229gGunU)LXR@HEGu~)D; zR3W3WqlV2`g{;QXkckOcsRhJajv^K1heK01MPvq-O1anUwHE1NIuL3!aI&4A)x-%G zQTLRNbpd9wu`83MB%G$J*BaeLdQ!R~>ZQcfgoZo63;x^QO7g;(mof|uc>AUfc&2|I z;dlfC&@3GjaQ#%SFgA#H=<#Rg{bCfrTMsV~>>n1x#9VuZvAMP$Aa=NZJQ=lnCu0;P zJX7G%_T`hk`mq~hl#WRHBMaAl_{S%bD?~J zW^P(M``HcTak3Uf9_}kz=VdD{Z}8y|?}$6&C`KUi%aahvnw5|VtIcuBRIIaOJ{*v2 zjBPB-OpaA}2v;l4X8B2RVU?F`=FL{q%G2_}_2a6sK#;^d)tOlFK$F7Ej5O&2AWdL& zRuRh|YBzheMS4J`RDKNTK%q|H$H9=7pE`B%;yHDk zFkm?5I!-=la&x?y$HqC!jFAX;J?pJjm6g;Bv2TToZPb6a_~XuLeYuF%|GK1g0bEh} zQaSc80+ctbs~rA|aji4PXn5~c?!3tP(uH+CO!)I&a-{rRKx(aX0nSq#v*Mc`Mbk~Z z6khPHaNF~f#1zq+To>O2pHm2#ye%1hOv$EA3I!VAUab#hRbQORxFZ6_RCDspLBByX zMDCy1BDt#}evVK9q}+_we@?hSnf>Cv!XbXSkk$>kVHk|Pcxa8P;}A~SD_6%OYq5^H z?=wQ~oa#>&iFvPTs@G*2q|b+g3RIKaHS{rb;wU%RiwZ8F$_pV+3?er4IJdC{VKg{H z$*Gi8h^xxGqJ6CV%&8zw$~f2jp2cU5D_yM!p!84yHEXrTViPuQ zYMnNXEkMBUTp}5E3KH{uOT_srQ>B$1v`|o*nteG-?YCVzFHegI3lD8keD^pKzTzsv zSDbky`=A6OVqh}~o7@!C@fS`npSd^{)Ct3~cP_@3W^$Ep0>p#5HWI|rrHiNJ>5hDb zQhian&Aq28>Z}=VxA+@U6=OnZI$Ow5Po^|7hW4VGYrdgl$yemgdF#0%-uiLHTUq=o z{<;($%ee5vk_L^$T4x;6UNXGk>tte~lw&+>ktq22-EZl<&lGr6Qb`I^c0nD9z0{wWIMYJt}UkJHWzu zG9otq!c;ak^$$Y%ibcl(vg=U&qse|2gB8qDm7;W3HYn9o>=7-c{f|^pvHrV4QGs`6 z!J(9&W0?SNo#1ZK_zJm>@_B+2yHI{^$i#T-#QSApGU*pAdFnP(d#DZ z2ALL1P_$Ty2TvZfoC*d5&+)9G0YZ>celNk;t8^{jtE^g)<5?!+3~7{Zw)c|F%%o_v zaSC@CDYCsVowbZJ+c~aj)@mJfKms!2NB(mol*CY@iNpt6)t@V$4);~pJqK4aSWvZ0 zvyhq5iuB)pT+B~+>lp=#^h0vWnVAs@@J0gKZ`&Pj#=~G$Og3MWlTC^BSVcrE2wz)E zt{W|k-SFsQyWT3RxN*$SlUL-^=O_{v#hRP>J(ckGfw1|7RP0oU81W?XoLK)&h%x56 z11h1w*d6ckzpsdae@!v4*(-{L;VTOUIdM|qg8_HI$iftdTk&Qk2`X^(2#-{1mcV(E zmn5ha(XIup963@BgAE=H#zR;)l0%7{n5t?aQIgjNrnh=vG*Nr~DwDt)vD(B&ze;m6 zTvN^ok##~~L{k?vz?6z9dya?utwwK=9+`O$vthj@x8OjilsB~xxI-ePVZwgvI}HOt zmMCc`_}5!hmq4qPFBF+x_cDKsJJ_4 zyyuG;@8vw>$toz`v!-xg>{vr`WOebviDQ@=1D|Vlba^-oq%qyZE|+SMEa*0wOJV3X z`AcOp45n|J#UzZ>RxQV6J#ZO4z-5>#kG~1n1C>t@0TKESP4$jvuGw}m*qVUQ=c+MZ zh0K#K#_n17Vjcy4Ma8I1rM*=su;aDBNPJKyR#EU00Lc5Q$=Y~i`<6FMVc)Bgr*SY& zLHhkwz79`_&d@VfhWDuqMx;7GJ>i4tE|pkpP-M5Sz98?k!n=S!i*=iD&=q%SPqVC zI>D;AtCh-vmCO;`^SA1)^BAVI@`A(-n4AaYtDJ{r%P;dy+I-jy#!-1K81W-QKIX8r zvHZ<)kgV|t2P7O$KsGEtL4G;2=J&-VMqqt2^ah&?R%q@!h|6?tV{NK>w0H=a-uH5L z%o@e2-ombe;bFO6YqUnw&RxhnnjIJQ7lFZ=R3}lawwN;HM52_z7LD(TWCmL;ntx0r zy!D=6uh;A0O0b?D>i*>ak93N$S&arXB!7A8a=gSoXlS2r$A{0u7hYXCdG^e!mvQd; z^5qj}SC&qn(K_zg4Qn{GY%62NXoxmeM2>k?s)B7HoOi*X{1~b9;Kf%b-r#nX94o}Q z(qNURgZpmrw-|Pn>fo1eqB?-?eRA*gP&($Og~|pQBd%`boe#MyMMLgyN#REoSup07 zBW}4BFR4Ispj%Lf>Mo<~Sr!E&r`A^9sMfKJFCL^+d(}r~RiOf>j8-aIf812UDVL|x z($@XOi8IwX*{4~nx0IFuL*caLN)b8g@kh{9>JB_@T%Hao%M|@M1g|HI(P(-Pf_*h< z5&s_EJIw*yJRvN|9RJ&i-Md(-<*dt?Caa>AT; z>lZc7Z9ipLkr{UM^?8vghLz zw7C8+J7pTW@JW0bYVa-0q1+ailIP}5IY?(F&#iS4%`mx1?ohARZ_8Ou%z_isoTNXY zPFLhfuqMdmITgVFtx2K>9g3s{6sX=tRySX`Go0b478CVzTU&GP1CA z{4dTd;-`Ultb75c(hzi11JY4lmzN*?b=sm){b)nEA9<|26oymKq(}6lic+*wqKb^9 z0sJWWE7b*>L-Ns^j^H|rIrwfV%VXt}IJPOtLc_@n%SRi+%Wu);Bl(`6BJ;p?g^@Hv z?>8Gqs6rD&ti~G}5>sDYD)=>VNf+fUpz7@HN4i$J?RvbQLZmvrn9htvcB9=K10w<~mnU#Po_=dbx9 zqh!%~V`V3sV9Z}7c|e?P?SS~%qWSAzsdXJ8O-)`)bfH=q<|!^l5^=a$ePITB<>c|@ zvdiPENf4T(U0(MrQe4Ta$}rv7QLqv730;*jrwu)Sd`;{(R|OMRWQ80n;j2NknR-#9 z<)JmkR#xa*30E#@%nc@qJYpodvvf-wQ)1m#>3mSu0)uoh|6V$692>*j0Ln}ck|BhM z@Tj0lf;2IT+**s&tkrukPE1{)19G!guW6G-L1$Ee!T9x6`w%JEUwUi$6fCcqkj=Bd zwR_sKaF&_thPjO(a>IznF&MSLGx&^a-!i=#_E3o#*EZK)2jXDFGi6Nk@;&3y5mPk~ zWh<6*?VYRCj9AhheEID86X(t^U$}rf*_5wad4Y=QB{mB?n@z28Wj1pWkj-{~rZf`; zw^^cECChB)*r@grZsLr!U=i?lZ?XvZNh!IPSesQUO1p!TWVm)%TyIqghvQYxKT1C5 zF8gGKa#^`)F!%G@cL;%*cRy;^qqT+3LaQ=><6B8cQ~cVb;(;bCb9@%#moYxyrUQ?2 zMdR~-lBe}_iE4<388hyOPOa3GIUDR7H@F>piCkXTu-nKjC^Wp=SHcx8Af{dhS%hXe z)XIBw4&PC4iZl8XL#ZnWGZn>B2ZmDwpJ{`8p|`=zs6si*6TW6OYBTZRw#6xNiixxF zf}S#y*mMe{vT}>C9!?t>w`bfY0y5)_aQdegRhhWrre%^8w-CQfGT~k?MIeOI+U-)h zkV4h;LQ?2g@0vC%&9Tg7))}w$cfbGGE6V0sjp}pOD)*Bk8{9U%r0=TNYHjj#Z{|_% z#?w6JUBl(*WUptpPj!dE>+Sxf_K9)BX&oQ%<7eX+?W;rKxBUKWKoqjvcS2VnkIL@ZrQeXZOY_rWLhyYmCsnC ztI_*5>Q~8`e=!J_G6_ZoU5coCWKPnI80SP1*uhfwb=HcYga+l06!yzjQyugR6(E<}MvI~J2 zwUzg9K7AYys}35iJMA7>QXCH}6a$C(DC?o3yjS^Vn)PlYD$I1HoqcDjq!#G6OSH&n>lDFkc9eH+I*L@11o*gSYn0v$(i}A23+%PsYQfOsM z*nlE9J)Ho*Xfuq>et-U4C{CDSoqX)DNPxFCIN3!st_(zv%OrT~BvQP>I(jF=#SN1x zW#i)U3?EhqItCI^&auMW^XcTO?!--Hm&(}o`sT1(yh&>q#$;=taEpsw07kZ^*u3Vc zv?f_7&?bnEsAx#Ati5xY^Ti^W^QApPr!5Ls0_Sq-w)6PVisSNG+$nG&7)K5-pW(?y z5M3>=qz0c^1-5`S-GWW62#j0D7t2fT$nzIvHGo28K&m>1q#n7zPmwmI`zUe2D!y=v zUA*PwLf{JIPibu`{l_ZtQxL$E3TJ!Sq?KuP&Q9%%Wi7W*2H~n(O#Q+sGdz6DC^5Y% zC*zB%mxUfWJNGW$a>CAJ6LO&JE)!nvN`zYpK9n~n%fdkygxRcvu1fhZB(K_{coLs0 z=UpIi28nWWLR-uamS&`E9WI{4$&LIZHjy_s$>p=lIcy@E49_RW^p&q2 z_tSgPWu^3dHIZ1)ae2tdf_bVi2O^3xI96eDF`Z3hP?OSR9uZlKs)C`zfX+b4hFP4pw1RTD=miZ(2UIK3BB}SK!s-i#N9h{td0fJI2VLb;S=7 zZU@2Dg>bW6shp92ErsDi5?tl}(Zh#x!AhNX^zdO*qj&7h0LSJZe{F1S!Yuj9INXFu zGIlU@B@JcW9+}|IC8zU6lG6{%-4q2~p-0J3=}qr+)YPK$Ii^2bb4(&do`OJbc3pXv z2O>sJzLF*8w0WkdT+9keev+v(thp7`5nJd}FWc`kf;Tay2ni}rx0E&~74&*=N3D!& zA#zO9ae?=qe-qIUzPu;j&BUQcr*deC9HuKx!+tul$c2R$^e6{kIQ`P{v9o8N&*(m8 zhu%7|SgLej3~R1*Z}N?4Yc6%j`|ryH8K>3z&1-_i_GGcMs>hWXh^k4&*q^67J?@fSJb z5snkXD8Q+W7za))Z^+$DI?E2mi8wrR`dry^U2Le*`4j2sAV=cHmb=mBmCe)VjE#1g z72XrgIfF1mG%>N@Heea}E26)8uixn`il;hYd9xw=mA48pAU*0_BD>FTiR^Ce8z3E% zpOS6?@lHw73cYtpJ=oJS0p4i>eUSk6vL|Ww!Boi+jpJkx%NI$BBIM4A^->YB9+Si> zfGcu6<*lw&LLQO1qL0%`;+&N9Oe0sI6G#7-M%L?rU%t?sPL{Hq)a*k!yD1!cMQZZr zzi51C=vIVJp_XMnd}-V|Oz)H-n2JN(W%5u@?^j-5>GS#yn0c zI4gIbh8l7nT@Irl3}R~t*n1gcAC$21#vvWR-osdFCoZADwG>JSv=lv zBR;x5i|}3SI$elyZ<;F@dd}wM)hHN;$UVatdsybi8=iYnc~oV_EEtJp!35$V#@LM; zH<&Fmo7GrnjM;3Z@rXFx$lih0>|t!~25^mLqE_qy{P7STs-7SS_8>!G_IH0lSV2R9 zMp?_)g3&Pk#_zcChVNlC5%MPbXJ!{;b00zH^iW441ya?|?hzvpqiR7CRlP9B7{hE} zCC*v{Wq`iEBFn)0D{Q54l(CP4INHsEad#Mzh69D4VGy^mjf?gIDS6&}adDlb1iidWzLFk|!2 zF0Kv(+ZvWL@sk+}fnPdz=-qo6dwTCmqkQA~?A}KoeF?nbC!tik#?Q!Rwq!FwImhJp z4&!^L@x9CVex}42&I|06L;+k2WPsRrW2mPA0k|}(@gg=QCi1{VMn2C&D~%^_T%SK! zTZqOBVGs-#{DeG&6++l?6A1M!LD+c{2#qa4*mV;K%{+uz#@IMqjVxF2J$~<$_{aO5 zY^8A*aJpAqe4_@H1Naj(YK37%iZJmh3>=KHqY?m+{+#^YQ%d<|*7$~7{ddbW|LMk! z8_&w`?=At(O5^K{y}{V8)ALt}_J5PH(yuXA`Wj<%*FpE!p<~&F<8YfaY}--A+E~Rg zn44yvMfEUh;GG4r_gLh)tGx2U(i!me&B35$0E2fHjI7D6K>#5Dfp-ps5JBMJ_2#v} z4MhL}d;$cG?>mN;kIm-7tV|+NX9fCo)>+}Y%o<`;8hEQC%ddK_8kNq=UcwtT0%~wC zl^$UAXV=euZTN%UKltMRwDZ!T-}}_&fBV1umDYQI?z=zt&VTdQ{=>8WtH<~Ji--T? zL%;KxAKdXftv~zNfuDQ*JHGiZ|K?A==k>qw3+*Sr?;pHef9-V?DV&8>);9j093i?G z4dvW&NPc64_=x<*2r)0eF+w!u_io16H)M797~i1$7i1a~s3u#?g(@6_mHI~0)iPJ+Nb8lLybshM~O!}QS_#2x(KTd0+v za>h}_{baaVhGpI=cgv?XLmpLLDzAG{GPZ{0m!4ZHKNa!y#d7WGr$Ou6gD}U~{O;Pd zcC+1_6`%E1y|n|D2{$WwhOznkS3D;QaGt+>Jczr2O~%g3rK$I9nUpMIrPK7BzUt1ghWeJB!P z-Fm$y5!S2qIzZShYXGDjJnbiZm`B)NRMe&c2hu=_q3%NMBgGinF@d3P*BGi5W2n`t z9ebtv{#U9eUV#dt(P}mI-y|1^8kC<}dhQ&q8G;KH_i0IOO@Y9-ybz7wej|t9_inTP z)6u`rXnhv{wT0SzG5&W>;QyG$e|Mo-#L7h!x^(>9X^G*6!0?*@M&q!qm|D^3{4MJ+ z9ZS2#jF?4GccIzT2s%h3-y1g=`^Ps}mZ5h|pvz>%`c~0(`oyxtRslob8I%-R^&G(! zc9>a%>9{(8WZJo99%c1!ko_Abi_ECE+eFd~riWg0v4;PO@bi+K5ssgzo*ftR;l)?Us6otkM#JtjbEaWM z;3pdA`#mBBqBEee+eHZ##iXuSfLuPf&e##(nKZH?`$u4R(^ccV;X*lvc zFlXXw2Y3LwCC?i68toe79pg_8*9hBIN9{EWCkA}$P>Hs@b|zhFl?L?B*aT#Z&BF2+dWU=ECJSQ+_Qy3nzwczM^eAJccag%6lzj*1p231#EMQ<9=yK?a>4z1( zj2Oj-(0CtYD~)fJ82hslV}Dv=^AxG`h1?kitDY}25KxyVK2It!PjJg!tbjf( z)8PHIQ2Nf^#~7*Sah_)OUdEvJoju4H?Tz4XRNY;3LScofN&!d;6%MpJDjfSGM)>6* zB)sc*(4Y|yFwhsDXk;skL8Drng7;7-bzLzofcNi=E2xIK;GRB}YJxOq`)2Y~V(1$WMd*UEt-zUlG z8OCP6lLqtab9qW=M@aHBTK4p7@V7LZ|A4A%8%MIdBBiX0$_)&z>Zuc8-Qmf5i|0_g( z5Rt3c$^AC`Y2#t(u=Duy1)PBPUh@}l`D~@uz;TR)5w_nF@9HA0hE5^f3Lekm@m@UM zL+fiKyXaj#ijY14`8NgBL%J>=9X#529LD3X;PEsbPZ-U8kg@rXE-YZ-2qVSn3uj)r z@alz&D~q+7_&#>&0=}W4s?};Oe6L(Mc@dZR;(Neb-F~~>taR%=yV7zRywYn9x|QC5 zx1C0(RUg>A3V&m@YGOsJJRvDdt(&X%FmSG7#rhC1Mwoa&f6@5!(V5%i4R(jT!EVJH zd*4*vnA`m*C|Qlve<@tSvMjM9vPL&yi2w6XF|NI34DrZRhKQ`u*4g2asq7G0qdQ;* z7zfP5c7V`BBuLYJkkqfq`Cbk@Vh*Hmh<7R!lAYWpa{}Mzj*h{sAY))%p)vrx42IE- zp7M-v+PYWiA->7<5#7F^A`JM^c&LK`#~DS=&`+wKpA}i1Q8W>TJHv4;wgL-5O@&n= z#AwM*lt@>M$4S0LLtcsLl$xFvAvCO7aTo=Fr{H65U5%`8>1DBp^R@Di+grHr5WV zr63`4Wuu*NJmMpjeKLNHTf<~+db|g}(z?o%`Cl9JaT{P*ySE_SC%T{nD zjDm!5LB*x3C4!F}k){uHCW5$~R5I&c^qh(qc(_bS!AAR4jGrzye^m6SBy%@jcHN z`=F1|;mN43u4}G``PCD(M6YH$x{Sl@7x?MQ})iyVF4gulmTPj zfblV14~MoK|4E6_zb}+n=>chY`28hT!diKjT`&F35-a`T4p#c39jx@bjIlr1!B7IM z4CW60Yx&2&*}-P-{@)q>Trna;Kqq>C4b0P8lv=n^*Ez{XjO@= zG0(3CV|no(T~#oGIUlEU5b$3Zi>tZTxSwtjmY?FdccA_>4D#Zkwa&|xGHwnU(fnG* z^vx}|{8Va|^z@yycDLDDpbf3XTelX5HKMhT8Lho}&lmREW5C$s|Ji!&aovt5jCP>c z{<8ZiOC@hjuRWn#`=rs@@5%AW-+33Kf45VIFMq~`t%;x<`~g1s;dcqj!CO<#ld2B1 z#y6?~O&$!>q~-A3{pL_+44P`D7+RY=>V{E}1bWU>a6gH>REkqW{`$3{j0iE4` zw$gaw#`QT?#$$FTF51Odw0kGn?Xo}L!RFY`oiI?wx``B{W;f>n* zOYeK};(G15l`EU;r!Liw{@D)p^vp`*4|ixI*w5a#a)s?=^X&fyte|~*_4u$}eXeuO z9(JyD<8#)z*89)AdVZO|dUo{M`>#B2kN)a<&F){hbo4I-ELtPwJNG^)#9`ix)9Vsb zG))HUp}O)LkoA?sH7q&tXh`VLZg$yFswotk}i5xYE1uO7zS|ND^6Rg7>E|g zB#vgOP*g5V!pypjN<>(y4+nvU2+OLxF&9Sd>L?t>)hJ#MtD%)HD4>aq+SMo+Ll~?I zVWb+H3o=aYMv@>72UROdmH3#?^YIy(79=>4z>gCg2~kZfO5<~Hb&*D*rt%G=R3j3SnpEtmb>m&!-x;OYpQs{GKI@SQ7QuJ&?p!Mx;RW3vF{BA z>AZy+#5_tIy=EmF_K_X0Sy3u*U;>IqHrDyNs?Zn2BU{n;%d%L!Ulu#>9~YM9IIe=C z0htbcsiR)7TohXou!-9Jfp{1sAB2I{KH5b{ysH;hj=?5t_sWG+XIGZdAh>_gN*3TY zj@K$-=uNDh%$B1KRrCE6* za8B--{lN}Krw`{KD9wK8oiupPW6YN45kVu^qZ8&eRPxyOoMBGkjT(q>;ebWe6#YF8 zV{AaukJ82VM0bOPK=M_?3;^4p>sopM4b42U z9|W2k!JivRXjA|*mxAIrda8xssDt%@M)i|*QLUx0q2p~BK&gD8ss&bMR7c9yY^ zAjf}$$9LiJQ9M3|$9LoL*YNlrJaAS7q)NUGg`(qug7cULhFmW)wpA!%W1~ugQ`Jhl z5JN~Bku^3T+R>RZ<1qF7Mx)|bAQROOn9A_On@pE}7X9%1VsE{Kp_uZFj4XMJ6R_s4 zF94TcfdA2C6b|C5V}kV3cyJ6R?f!pb|8&<#FYz`WZ!|RQ@)7F4G4X0PDIZn50^{qk28q~T?r`KpX zw%vF84XfU9>W$W*(P}zQb5QTp2F{?)>rTIC5A3$>Xh2S*-R8X6aT~VV?hg7L8znb8 zeY-obx{htPTUM`S4QhbdvRjR2Z_u$?HK*QdcRPcc2Gnh|T-O=c^-i-}>kiuOUZd7% zHr-~Y-tAlcjx}gD8xA1UyG`!4+k?TNSLa>sTHQgTYimH3#qDON(u+)?RUEMPOaB%)*Po(Z@BHg2ISNSosM0%+O>w=vbsH9 zxBHELom+!}-Rbu@@Af;rX18ni+KrxFv%8({pwsELxaIcxyxG-&Y|D0=^#*r2Z@ay^ zU2k>=ZHxD6ykEE4172@7t$Mp-HMrGo)Vrr`GMY+5@ZBAGA7d(?#doEvIX_R;yog?1ojdIy|jWt=G1jy_Q>d8;w@O zZn&L#yD{hvT5j9vbSr`@%B4Y%GL47lZXtiDxGYcyy&{YGn0Z}Gar zJ9Vem=rtOHuG?^HEvMD%cj|7Z<~qDLaQdz0z;(NBn>V{1yWelOc`v2xcFh@dty-G5XG?e?6(pf%_>+m^+f?OuzgIO;jg zrroz3*X~*EcGqdQJ8h@t@@~D=vN}%3a+=MqZP%=((`_}H{aUTtb#2ZYJ*(I4chl}~ z54tsbQ14l_UZ+;;*6JPJZ}se2%i?a+?ltPQrq%4&+-lXk?Y7-NU&ZO{c>L zVh`vHg9zKFQ{6tD33)e#oTO))o;3=8i9B#A+u^;BJ~}V`3Cydo(bfOqEW+^KPdT5b z=lkgSI33QJW7fv%*sE}V{Rxt%c9+QZ?hVFXrD9&8Cw#ix%UB6V(eG!h1b+nBXoE!^ zj<~mgVj!Gh>R!ZNRPn6c7#FvdPi%Qq-*AxSYdclUeXiU2C!eK47;jTs9W zo4w~SW3M4i#Mtb|?_(@xY;MOR2sw+#i+G&J12$aGHoMJE)9v)T{hHHk)vQL#Zr55Z zr{VOwgI2TUba->Xx!bNa-A1QgbDet6=?~g<*J;%|9sVd|<p~W&1mdl5h{Uq891J6$mEtWqZ-Lf32#u#dEG+1CT^$uAc`Tt>n6l=OBYWa6|PosJqQ&bU6In?wkQ8Y$s&S2 z#Gkh3r-i?~e2kn^9&OiZwQMl_<{l-pzHB&L;OE1aUVcu3srMQN9E6`fb8-3n$))4V zN3D(3T-=3A$IdKYJX)_U^cHFhwQ56PmKu$`%V$oUJA3-f#iO`cDXj*gPMo=Lw7x+9 z9qBF5e`$hquU4#L;>Vq1VD7=I*&5N@CrA7>+4GQ*)4ESnEAP=jc70Yak|A>svcR<+Col31! zsr4^5>Wj_RV!OZ4X!YKowrMI9muqPgkhYLx=sDbvIV!o8Q@Q^fId5W$7n2`@sCRYX$Mp<+^~_ZQoZ z#ddR{->Y{zwPw992;xvceMc9R5vC7CL68hmsypO*gTZCbMTj1W-XxJU?OF+NyQ1j? z!0n2t69Bg>s!jmhuE;t8aJ!=G1iintR1w=3#S z0Nk#~I{|RJqVEL2?TWzJi96X0X@Do|hnR-Xy&t|{SnR*u`2Jp~&dyPQaF;~7H29g@ zn@$ioa{UmQ)6s(^>8GPqGz&Mnp>rRqn6HHTaJzF}5i6DY&s-`BZaC*#8hewP`#{5XB3S6B*vx%6vHbLpHRLl#o13$xM9f|xDs96Mik&>L834P7Rs&*Tv2Z00d_XOOVk*LL zbTyE%6>%Vq5}|zutc_J?pn|E0Y#XzR^H0b&;{6G>(rA`gsZnC{yG0A?B{u)K>s*a4 zhgNdg>c8q-IdAp7w*B0z!=?7p`{I@G$}7D__r+R?&CgmR*th$`YKhJ7l_*F?;X;Yc zKcZy2h_Awn?`EaGpxuRbN>oQedWF6}LJH-!4973q2*LMXW(ms)gL_ba zviX|p{)ZBqD}5_PKRVPH7d|A@^^gu{J@4VaA@*#L=Rt|_{E!16&u&-$sEY3EqCa&q z!8XyYi{7qSsES_HMgQ_2L#MEXqPHtRs-oYmi?;6A4s_18Q(O;5IA8%Ro zc7;+^^if^(&kuiciwNJQ=2aE_9$hqa{P^9n)!P+xRnhOg{i3%k604%0)kS}sJOg{n zR&Q5$Rz)xAqMzDo(c2ZXRnf^K)rly%enxBCu*%@rKyJMG6SnFZWdK~)Uh`XLP*Tsga4xBIr!G>wX z<6yYXqpIbar-8`CPDKrZXah&bBHE7J$^jXmAJ*Pvh^CKrLF%GVm!wP`jy+++Hhj`Z zz=#}Kj^1*G&}KwsoP*@zGWI@L`yk(F9D7d2{us?pV_pm53VG3%eX5PvMMgxsu@hEC zmQIlcJvN+&WMf8CW1^`sXrHPHELGErBBsJuaREXlv9!ek%uaHNJYS}Y3`Z(38px$n zz|3SI@m#WzUV9jILEFnkM(uX@YGX%<5ongq$WOhwMH;_*z)>%uD zi@wT48V4^X;*1KxFa}K+jfaU>!7XFqT4eZbK_|fcH+zl}6NW&W0g9%C^yCCz4>h$& z`(|~hg3ckBN7+$B?Gq?>3>Rg^n{lJ!+UaRxvf10nhJk}9EDS4l5F|0K_pQLqzaoMO z{D$UH0$6)$6vE~>n3yQh1?1vJIMYFUQk!5@R9=A)Yn}()8AoPRO@LN7T+gaJ;58gS zyk|=*jqhOWjTv@7Gc*(nq#av`##LIVzcIt!UKqWI?b7NaX555w19-u>^7$I5KFk<)=U@Cz@!op{k_LHE_`|?*<7-ekhOk*S zqJ0EJOcoU)3h=;+#rZpNub4FN&mjk*+RG|-yhd{$W7^n|H z(g%L^N}zpjp%08G1q3vtZfQ_q7}lgkAGj;#8GBM;&Fcp)f1GY=ARA8l!4eyD3w{{T z)HmR%Z_p>EOZ+gFt8ctj8XTWd->`sI--nI#FiTY7RpT2n%a7(As{Fw3m?y|24*lCh+@pBmLKn z^uJ-G|4r#{3cuen(*L%R{+}A@f5%9Vqt*(C@V~F>^Ls}6e`cir=SKRM_aHC19h{>} zV`#|&&t-JF^dU0}4g$rk86_3I6RVs92&XG=c4flvLiho!Y<6XecmSg(E*Y4NdKgiQ zDoR14ioFBS?m`w_I$iZb$Ht*rn|p^!Pqm^0)(=p4ru4%oqC6u?*IB5Dr%}Y;&J;o6 zRfPWt!k<<}PZcI(y)xJ5=1t`MG@|~x zjQT0UPcxJE^GNW|3iJL9qW-yz`aI=rWb*zj62KOZ(2|Mz0-_+;AnIo`QC~#V_sNE2 zbHS&G4LH}i>_zO+IHlqFyiKCw>>WhDh6u&Q1{B}Vd zeg_Hug_%IQILYAQcaiE}s#KXed}Fc>xz6}Kvku=Vr~}wd*MSm9_avD*fb(=6z5$Wb zdVL&eud7&p;D`5|aO69;6Oyt#Z2%P-78vkLi67qIF47T0(X9OWLzHN~j8i8IKVkxDlB>K#HG-MiloPiF=`OEbf5v&RDtX2MHaI zgBb;_5{&wohcj{qxam|s9bCO^__k2%POKYb14!P-x)WivY&0X(s@58Mmev~p2VppQ xoD#}|h{HUOi_LU8IIXh*nc`q;evORfq*$DceOH%{<*o=NUEH8To;6hM{vT07za0Po literal 0 HcmV?d00001 diff --git a/MikroNUC/20260629/20260629130001-Config.rsc b/MikroNUC/20260629/20260629130001-Config.rsc new file mode 100644 index 0000000..d861029 --- /dev/null +++ b/MikroNUC/20260629/20260629130001-Config.rsc @@ -0,0 +1,5008 @@ +# 2026-06-29 13:00:02 by RouterOS 7.23.1 +# system id = NmJcEM+8XAP +# +/caps-man channel +add band=2ghz-g/n extension-channel=disabled frequency=2422 name=2G-3 \ + reselect-interval=20m save-selected=yes +add band=5ghz-a/n/ac extension-channel=XXXX frequency=5660 name=5G-5660 \ + save-selected=yes +add band=5ghz-a/n/ac extension-channel=XXXXXXXX frequency=5160,5200,5280 \ + name=5G-5160-5280 reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5180 name=5G-36 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5200 name=5G-40 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5220 name=5G-44 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5240 name=5G-48 \ + reselect-interval=30m save-selected=yes +add band=2ghz-g/n extension-channel=disabled frequency=2442 name=2G-7 \ + reselect-interval=20m save-selected=yes +add band=2ghz-g/n extension-channel=disabled frequency=2462 name=2G-11 \ + reselect-interval=20m save-selected=yes +/interface bridge +add name=Bridge-LAN +add name=br-awg +add name=docker port-cost-mode=short +/interface ethernet +set [ find default-name=ether1 ] disable-running-check=no +/interface veth +add address=192.168.100.3/24 container-mac-address=5E:AB:F0:EA:47:2D dhcp=no \ + gateway=192.168.100.1 gateway6="" mac-address=5E:AB:F0:EA:47:2C name=\ + awg-proxy-go-client +add address=10.9.9.2/24 container-mac-address=70:35:5E:FC:C3:B8 dhcp=no \ + gateway=10.9.9.1 gateway6="" mac-address=70:35:5E:FC:C3:B7 name=veth-awg +/interface wireguard +add listen-port=52175 mtu=1420 name=wg-awg-client +/caps-man security +add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \ + group-key-update=30m name=xs-Sec +add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \ + group-key-update=30m name=WPA2 +/container +# exited with signal 9 (Killed) +add envlists=awgui-env file=sata1/tmp/awg2-webui.tar hostname=awg2-webui \ + interface=veth-awg layer-dir=/sata1/docker/awg2-webu logging=yes name=\ + awg2-webui root-dir=/sata1/awg2-webui shm-size=4096.0KiB start-on-boot=\ + yes +/disk +add slot=ram tmpfs-max-size=100000000 type=tmpfs +/interface list +add include=dynamic,static name=LAN +add exclude=LAN name=WAN +add exclude=LAN include=WAN name=Internet +/interface wireless security-profiles +set [ find default=yes ] supplicant-identity=MikroMIC +/iot wiliot servers +set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=P1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +/ip pool +add name=dhcp ranges=10.30.30.150-10.30.30.200 +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=test owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \r\ + \n#:local ScriptName [ :jobname ];\r\ + \n:local expSrc;\r\ + \n:local FileName;\r\ + \n:local FilePath;\r\ + \n:local DirPath \"tmpfs/\";\r\ + \n:global WaitForFile;\r\ + \n:global IfThenElse;\r\ + \n\r\ + \n:foreach Script in=([ /system/script find where name~\"Amster-GlobalConf\ + *\" ]) do={\r\ + \n:local ScriptVal [ /system/script/get \$Script ];\r\ + \n\r\ + \n:local expName [ (\$ScriptVal->\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/700/f14f095d\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 13:30:03 22.06.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n#\ + \n#root.mnuc.backuper\ + \n\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ + \n#:local Script AM-GlobalConfig;\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\ + \n:global MkDir;\ + \n\ + \n:local FetchFile Manager@id_rsa.pub\ + \n:local localDir \"/\";\ + \n\ + \n\$MkDir \$localDir;\ + \n\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +add dont-require-permissions=yes name=awg2-webui owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + put \"Download image, and save him to usb1/tmp\"\ + \n/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-chr.tar\" dst-p\ + ath=sata1/tmp/awg2-webui.tar\ + \n\ + \n:put \"1. Create veth interface\"\ + \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\ + \n\ + \n:put \"2. Create bridge and add veth\"\ + \n/interface bridge add name=br-awg\ + \n/interface bridge port add bridge=br-awg interface=veth-awg\ + \n\ + \n:put \"3. Assign IP to bridge\"\ + \n/ip address add address=10.9.9.1/24 interface=br-awg\ + \n\ + \n:put \"4. NAT: masquerade container traffic\"\ + \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\ + ade\ + \n\ + \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\ + \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 action=dst-n\ + at to-addresses=10.9.9.2 to-ports=55055 in-interface=ether1\ + \n\ + \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\ + \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 action=dst-\ + nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether1\ + \n\ + \n:put \"Create environment list..\"\ + \n/container envs add list=awgui-env key=WEB_USER value=vados\ + \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\ + \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\ + mboLs2325272931q\ + \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\ + 3\ + \n\ + \n:put \"Load and start container...\"\ + \n/container add file=sata1/tmp/awg2-webui.tar interface=veth-awg hostname\ + =awg2-webui \\\ + \nroot-dir=sata1/awg2-webui layer-dir=sata1/docker/awg2-webu/ envlist=awgu\ + i-env start-on-boot=yes logging=yes shm-size=4M\ + \n\ + \n:put \"Start...\"\ + \n/container start 0\ + \n\ + \n:put \"Verify...\"\ + \n/container print\ + \n\ + \n:put \"Should show: status=running\"\ + \n\ + \n/log print where topics~\"container\"\ + \n\ + \n:put \"Should show: AWG started, nginx running\"\ + \n" +add dont-require-permissions=no name=awg-proxy-go-Client owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:put \"[::::::::::::::: START :::::::::::::::]\"\ + \n:put \"\"\ + \n:put \"C\D0\BE\D0\B7\D0\B4\D0\B0\D0\B5\D0\BC \D0\B4\D0\B8\D1\81\D0\BA \ + \D0\B2 \D0\BE\D0\BF\D0\B5\D1\80\D0\B0\D1\82\D0\B8\D0\B2\D0\BA\D0\B5 \D0\B4\ + \D0\BB\D1\8F \D0\BA\D0\BE\D0\BD\D1\82\D0\B5\D0\B9\D0\BD\D0\B5\D1\80\D0\BE\ + \D0\B2\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n:put \"veth \D0\B8 \D1\81\D0\B5\D1\82\D1\8C:\"\ + \n /interface/bridge add name=docker port-cost-mode=short\ + \n /ip/address/add address=192.168.100.1/24 interface=docker\ + \n\ + \n /interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n /interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n:put \"add config-client.json\"\ + \n/file/add name=/awg-proxy-go/config-client.json\ + \n/container/mounts/add src=/awg-proxy-go/config-client.json dst=/app/conf\ + ig.json list=awgcfg-client\ + \n\ + \n:put \"Download image, and save him to sata1/tmp/awgproxy0033-amd64.tar.\ + gz\"\ + \n/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy0033-amd64.\ + tar.gz\" dst-path=\"sata1/tmp/awgproxy0033-amd64.tar.gz\"\ + \n\ + \n:put \"Add container\"\ + \n/container/add file=sata1/tmp/awgproxy0033-amd64.tar.gz interface=awg-pr\ + oxy-go-client hostname=awg-proxy-go-client root-dir=ram/awg-proxy-client l\ + ogging=yes start-on-boot=yes workdir=/ name=\"awg-proxy-go-client\" mountl\ + ists=awgcfg-client\ + \n\ + \n:put \"Start container\"\ + \n /container/start awg-proxy-go-client\ + \n\ + \n:put \"\D0\94\D0\BE\D0\B1\D0\B0\D0\B2\D0\BB\D1\8F\D0\B5\D0\BC \D0\BF\D0\ + \BE\D0\BB\D1\8C\D0\B7\D0\BE\D0\B2\D0\B0\D1\82\D0\B5\D0\BB\D1\8F \D1\81 \D0\ + \BF\D1\80\D0\B0\D0\B2\D0\B0\D0\BC\D0\B8 \D0\BD\D0\B0 \D1\87\D1\82\D0\B5\D0\ + \BD\D0\B8\D0\B5 \D0\B8 \D0\B7\D0\B0\D0\BF\D0\B8\D1\81\D1\8C, \D0\BE\D0\B3\ + \D1\80\D0\B0\D0\BD\D0\B8\D1\87\D0\B8\D0\B2\D0\B0\D0\B5\D0\BC \D0\B4\D0\BE\ + \D1\81\D1\82\D1\83\D0\BF \D0\BF\D0\BE ip \D0\BA\D0\BE\D0\BD\D1\82\D0\B5\D0\ + \B9\D0\BD\D0\B5\D1\80\D0\B0:\"\ + \n /user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n:put \"\D0\94\D0\BE\D0\B1\D0\B0\D0\B2\D0\BB\D1\8F\D0\B5\D0\BC \D0\BF\D1\ + \80\D0\BE\D0\B1\D1\80\D0\BE\D1\81 \D0\BF\D0\BE\D1\80\D1\82\D0\B0 \D0\B2\D0\ + \B5\D0\B1-\D0\BC\D0\BE\D1\80\D0\B4\D1\8B \D0\BA \D0\BA\D0\BE\D0\BD\D1\82\ + \D0\B5\D0\B9\D0\BD\D0\B5\D1\80\D1\83\"\ + \n /ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n:put \"\D0\9D\D0\B0 \D1\80\D0\BE\D1\83\D1\82\D0\B5\D1\80\D0\B5 \D0\BF\D0\ + \BE\D0\B4\D0\BD\D1\8F\D1\82\D1\8C \D0\BD\D0\B0\D1\82\D0\B8\D0\B2\D0\BD\D1\ + \8B\D0\B9 WireGuard-\D1\81\D0\B5\D1\80\D0\B2\D0\B5\D1\80 wg-awg, \D0\BD\D0\ + \B0\D1\81\D1\82\D1\80\D0\BE\D0\B8\D1\82\D1\8C \D0\B5\D0\BC\D1\83 \D0\B0\D0\ + \B4\D1\80\D0\B5\D1\81.\"\ + \n /interface/wireguard/add name=wg-awg-client\ + \n /ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\D0\9F\D1\80\D0\BE\D0\B2\D0\B5\D1\80\D0\B8\D1\82\D1\8C \D0\B4\D0\ + \BE\D1\81\D1\82\D1\83\D0\BF \D0\BA \D1\80\D0\BE\D1\83\D1\82\D0\B5\D1\80\D1\ + \83 \D0\BF\D0\BE api: \D0\B2\D0\BA\D0\BB\D1\8E\D1\87\D0\B8\D1\82\D1\8C /ip\ + /service www-ssl (HTTPS, \D0\BF\D0\BE\D1\80\D1\82 443) \D0\B8\D0\BB\D0\B8 \ + www (HTTP, \D0\BF\D0\BE\D1\80\D1\82 80).\"\ + \n:put \"\D0\B7\D0\B0\D0\B9\D1\82\D0\B8 \D0\B2 \D0\B2\D0\B5\D0\B1 \D0\BF\ + \D0\B0\D0\BD\D0\B5\D0\BB\D1\8C \D1\83\D0\BF\D1\80\D0\B0\D0\B2\D0\BB\D0\B5\ + \D0\BD\D0\B8\D1\8F \D0\B8 \D0\BD\D0\B0\D1\81\D1\82\D1\80\D0\BE\D0\B8\D1\82\ + \D1\8C \D0\BF\D1\80\D0\BE\D0\BA\D1\81\D0\B8 \D0\BF\D0\BE http://your-route\ + -address:8088/\"\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +add name=manager policy="ssh,ftp,read,write,policy,!local,!telnet,!reboot,!tes\ + t,!winbox,!password,!web,!sniff,!sensitive,!api,!romon,!rest-api" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=*3 registry-mirrors="https://reg.vados.\ + ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/caps-man datapath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + xs-DataPath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + DataPath +/caps-man manager +set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \ + enabled=yes require-peer-certificate=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=Bridge-LAN +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set crl-store=system +/container config +set layer-dir=/sata1 memory-high=200.0MiB memory-max=4096.0MiB registry-url=\ + https://registry-1.docker.io tmpdir=/sata1/tmp username=amsternl +/container envs +add key=AWG_ENDPOINT list=awgui-env value=10.30.30.10:443 +add key=SECRET_KEY list=awgui-env value=RanDomSecret32SymboLs2325272931q +add key=WEB_PASS list=awgui-env value=zoomzoomrulezz +add key=WEB_USER list=awgui-env value=vados +/container mounts +add dst=/config list=awg-conf src=/sata1/amnezia/amneziawg +add dst=/app/config.json list=awgcfg-client src=\ + /awg-proxy-go/config-client.json +/ip smb +set enabled=no +/interface bridge port +add bridge=Bridge-LAN interface=ether1 +add bridge=Bridge-LAN interface=2G-MikroGig-1 +add bridge=Bridge-LAN interface=2G-MikroMaster-1 +add bridge=Bridge-LAN interface=5G-MikroGig-1 +add bridge=Bridge-LAN interface=5G-MikroMaster-1 +add bridge=br-awg interface=veth-awg +add bridge=docker interface=awg-proxy-go-client +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=ether1 list=WAN +/interface wifi cap +set discovery-interfaces=*DF +/interface wifi capsman +set package-path=/tmpfs/capsman-packages upgrade-policy=none +/interface wireguard peers +add allowed-address=0.0.0.0/0 endpoint-address=172.19.77.106 endpoint-port=\ + 51820 interface=*F3 name=peer19 persistent-keepalive=10s public-key=\ + "o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +/ip address +add address=10.30.30.10/24 interface=ether1 network=10.30.30.0 +add address=10.9.9.1/24 interface=br-awg network=10.9.9.0 +add address=192.168.100.1/24 interface=docker network=192.168.100.0 +add address=172.17.0.1/24 interface=wg-awg-client network=172.17.0.0 +/ip dhcp-client +add disabled=yes interface=ether1 name=client1 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=*3 lease-script=\ + lease-script lease-time=10m name=nucDHCP server-address=10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \ + verify-doh-cert=yes +/ip firewall nat +add action=masquerade chain=srcnat src-address=172.19.77.104/30 +add action=masquerade chain=srcnat src-address=10.9.9.0/24 +# in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN) +add action=dst-nat chain=dstnat dst-port=443 in-interface=ether1 protocol=udp \ + to-addresses=10.9.9.2 to-ports=55055 +# in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN) +add action=dst-nat chain=dstnat dst-port=9443 in-interface=ether1 protocol=\ + tcp to-addresses=10.9.9.2 to-ports=443 +add action=masquerade chain=srcnat src-address=10.9.9.0/24 +# in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN) +add action=dst-nat chain=dstnat dst-port=443 in-interface=ether1 protocol=udp \ + to-addresses=10.9.9.2 to-ports=55055 +# in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN) +add action=dst-nat chain=dstnat dst-port=9443 in-interface=ether1 protocol=\ + tcp to-addresses=10.9.9.2 to-ports=443 +# in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN) +add action=dst-nat chain=dstnat dst-port=8089 in-interface=ether1 protocol=\ + tcp to-addresses=192.168.100.3 to-ports=8088 +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set www disabled=yes +set reverse-proxy disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api disabled=yes +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=*3 type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system gps +set set-system-time=yes +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool netwatch +add disabled=yes down-script=\ + ":local msg \"Host MikroYellow is DOWN\";\r\ + \n\$TGSendMessage \$msg;" host=10.30.30.86 http-codes="" interval=10s \ + test-script="" type=simple up-script=\ + ":global TGSendMessage;\r\ + \n\$TGSendMessage \"Host MikroYellow is UP\";" +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260629/20260629130001-Diff-Config.rsc b/MikroNUC/history/20260629/20260629130001-Diff-Config.rsc new file mode 100644 index 0000000..32711f9 --- /dev/null +++ b/MikroNUC/history/20260629/20260629130001-Diff-Config.rsc @@ -0,0 +1,97 @@ +26d25 +< add name=docker port-cost-mode=short +30,32d28 +< add address=192.168.100.3/24 container-mac-address=5E:AB:F0:EA:47:2D dhcp=no \ +< gateway=192.168.100.1 gateway6="" mac-address=5E:AB:F0:EA:47:2C name=\ +< awg-proxy-go-client +35,36d30 +< /interface wireguard +< add listen-port=52175 mtu=1420 name=wg-awg-client +43d36 +< # exited with signal 9 (Killed) +4700,4707c4693,4698 +< ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ +< \n:put \"[::::::::::::::: START :::::::::::::::]\"\ +< \n:put \"\"\ +< \n:put \"C\D0\BE\D0\B7\D0\B4\D0\B0\D0\B5\D0\BC \D0\B4\D0\B8\D1\81\D0\BA \ +< \D0\B2 \D0\BE\D0\BF\D0\B5\D1\80\D0\B0\D1\82\D0\B8\D0\B2\D0\BA\D0\B5 \D0\B4\ +< \D0\BB\D1\8F \D0\BA\D0\BE\D0\BD\D1\82\D0\B5\D0\B9\D0\BD\D0\B5\D1\80\D0\BE\ +< \D0\B2\"\ +< \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ +--- +> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ +> put \"C\D0\BE\D0\B7\D0\B4\D0\B0\D0\B5\D0\BC \D0\B4\D0\B8\D1\81\D0\BA \D0\ +> \B2 \D0\BE\D0\BF\D0\B5\D1\80\D0\B0\D1\82\D0\B8\D0\B2\D0\BA\D0\B5 \D0\B4\D0\ +> \BB\D1\8F \D0\BA\D0\BE\D0\BD\D1\82\D0\B5\D0\B9\D0\BD\D0\B5\D1\80\D0\BE\D0\ +> \B2\"\ +> \n/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ +4717,4721d4707 +< \n:put \"add config-client.json\"\ +< \n/file/add name=/awg-proxy-go/config-client.json\ +< \n/container/mounts/add src=/awg-proxy-go/config-client.json dst=/app/conf\ +< ig.json list=awgcfg-client\ +< \n\ +4725,4773c4711 +< tar.gz\" dst-path=\"sata1/tmp/awgproxy0033-amd64.tar.gz\"\ +< \n\ +< \n:put \"Add container\"\ +< \n/container/add file=sata1/tmp/awgproxy0033-amd64.tar.gz interface=awg-pr\ +< oxy-go-client hostname=awg-proxy-go-client root-dir=ram/awg-proxy-client l\ +< ogging=yes start-on-boot=yes workdir=/ name=\"awg-proxy-go-client\" mountl\ +< ists=awgcfg-client\ +< \n\ +< \n:put \"Start container\"\ +< \n /container/start awg-proxy-go-client\ +< \n\ +< \n:put \"\D0\94\D0\BE\D0\B1\D0\B0\D0\B2\D0\BB\D1\8F\D0\B5\D0\BC \D0\BF\D0\ +< \BE\D0\BB\D1\8C\D0\B7\D0\BE\D0\B2\D0\B0\D1\82\D0\B5\D0\BB\D1\8F \D1\81 \D0\ +< \BF\D1\80\D0\B0\D0\B2\D0\B0\D0\BC\D0\B8 \D0\BD\D0\B0 \D1\87\D1\82\D0\B5\D0\ +< \BD\D0\B8\D0\B5 \D0\B8 \D0\B7\D0\B0\D0\BF\D0\B8\D1\81\D1\8C, \D0\BE\D0\B3\ +< \D1\80\D0\B0\D0\BD\D0\B8\D1\87\D0\B8\D0\B2\D0\B0\D0\B5\D0\BC \D0\B4\D0\BE\ +< \D1\81\D1\82\D1\83\D0\BF \D0\BF\D0\BE ip \D0\BA\D0\BE\D0\BD\D1\82\D0\B5\D0\ +< \B9\D0\BD\D0\B5\D1\80\D0\B0:\"\ +< \n /user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ +< peskar55\ +< \n\ +< \n:put \"\D0\94\D0\BE\D0\B1\D0\B0\D0\B2\D0\BB\D1\8F\D0\B5\D0\BC \D0\BF\D1\ +< \80\D0\BE\D0\B1\D1\80\D0\BE\D1\81 \D0\BF\D0\BE\D1\80\D1\82\D0\B0 \D0\B2\D0\ +< \B5\D0\B1-\D0\BC\D0\BE\D1\80\D0\B4\D1\8B \D0\BA \D0\BA\D0\BE\D0\BD\D1\82\ +< \D0\B5\D0\B9\D0\BD\D0\B5\D1\80\D1\83\"\ +< \n /ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ +< face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ +< \n\ +< \n:put \"\D0\9D\D0\B0 \D1\80\D0\BE\D1\83\D1\82\D0\B5\D1\80\D0\B5 \D0\BF\D0\ +< \BE\D0\B4\D0\BD\D1\8F\D1\82\D1\8C \D0\BD\D0\B0\D1\82\D0\B8\D0\B2\D0\BD\D1\ +< \8B\D0\B9 WireGuard-\D1\81\D0\B5\D1\80\D0\B2\D0\B5\D1\80 wg-awg, \D0\BD\D0\ +< \B0\D1\81\D1\82\D1\80\D0\BE\D0\B8\D1\82\D1\8C \D0\B5\D0\BC\D1\83 \D0\B0\D0\ +< \B4\D1\80\D0\B5\D1\81.\"\ +< \n /interface/wireguard/add name=wg-awg-client\ +< \n /ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ +< \n\ +< \n:put \"\D0\9F\D1\80\D0\BE\D0\B2\D0\B5\D1\80\D0\B8\D1\82\D1\8C \D0\B4\D0\ +< \BE\D1\81\D1\82\D1\83\D0\BF \D0\BA \D1\80\D0\BE\D1\83\D1\82\D0\B5\D1\80\D1\ +< \83 \D0\BF\D0\BE api: \D0\B2\D0\BA\D0\BB\D1\8E\D1\87\D0\B8\D1\82\D1\8C /ip\ +< /service www-ssl (HTTPS, \D0\BF\D0\BE\D1\80\D1\82 443) \D0\B8\D0\BB\D0\B8 \ +< www (HTTP, \D0\BF\D0\BE\D1\80\D1\82 80).\"\ +< \n:put \"\D0\B7\D0\B0\D0\B9\D1\82\D0\B8 \D0\B2 \D0\B2\D0\B5\D0\B1 \D0\BF\ +< \D0\B0\D0\BD\D0\B5\D0\BB\D1\8C \D1\83\D0\BF\D1\80\D0\B0\D0\B2\D0\BB\D0\B5\ +< \D0\BD\D0\B8\D1\8F \D0\B8 \D0\BD\D0\B0\D1\81\D1\82\D1\80\D0\BE\D0\B8\D1\82\ +< \D1\8C \D0\BF\D1\80\D0\BE\D0\BA\D1\81\D0\B8 \D0\BF\D0\BE http://your-route\ +< -address:8088/\"\ +< \n:put \"\"\ +< \n:put \"[::::::::::::::: END :::::::::::::::]\"\ +< \n" +--- +> tar.gz\" dst-path=\"sata1/tmp/awgproxy0033-amd64.tar.gz\"" +4855,4856d4792 +< add dst=/app/config.json list=awgcfg-client src=\ +< /awg-proxy-go/config-client.json +4866d4801 +< add bridge=docker interface=awg-proxy-go-client +4885,4886d4819 +< add address=192.168.100.1/24 interface=docker network=192.168.100.0 +< add address=172.17.0.1/24 interface=wg-awg-client network=172.17.0.0 +4913,4915d4845 +< # in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN) +< add action=dst-nat chain=dstnat dst-port=8089 in-interface=ether1 protocol=\ +< tcp to-addresses=192.168.100.3 to-ports=8088 -- 2.52.0