From ab68434a2a7b7baf77a98808fe249a2e19cab5e5 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Sun, 28 Jun 2026 02:40:03 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Jun 28 02:40:03. --- .../20260628/20260628024001-Binary.backup | Bin 0 -> 362204 bytes MikroNUC/20260628/20260628024001-Config.rsc | 4871 +++++++++++++++++ .../20260628/20260628024001-Diff-Config.rsc | 23 + 3 files changed, 4894 insertions(+) create mode 100644 MikroNUC/20260628/20260628024001-Binary.backup create mode 100644 MikroNUC/20260628/20260628024001-Config.rsc create mode 100644 MikroNUC/history/20260628/20260628024001-Diff-Config.rsc diff --git a/MikroNUC/20260628/20260628024001-Binary.backup b/MikroNUC/20260628/20260628024001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..e579b9b669515b8d634d6f4f1162eb4b046e8887 GIT binary patch literal 362204 zcmeEv2V7Ij*6-{jKtho&B8Z_0sDYiHs3;v#nlyV!g-9Tn1Q10*Y}m2)-h1!Zj=eYR zy?5+g;r-Um4xr*W-tV1z?|JVtKizw>nKiR!&CFW=S!=SVc*WecSBID&bA*tVACRNa z>QtIc93g}ugc!*1q1H&7)JU7vNP7|K7!HOI17rL=0W_HkeL#*@S&u9}ki1t^R#w`Q z=~#qNAd2Bo5n6&Fa}>j&Aw)+AQ80usGgN_@qY8wf3I;Mk74*u=%1Q>Ra7Q+%!kv~O zQDxc^EL6~;P!q^zZ)l=cldV@}rUqn7Q?mkO%2Z3Ttp z_&L>h2-TR$6-r6AT3<75LAFk=$Wh4@x+Jpj46<+vLg*`*2BB^SDIEfK~*&EaB-Fn5YtLr0ijPz(pe zB}W(?diF6DF)$|@VqkS?h=JY2jL;h@!VnE1D+I%#0==dp>;n}s&_}p@f{Q=!1#P@)f(&h} zZXVHEV;k+DUtMU3L45_1a04N{r6LA}X#9)pu5R525sfz_H)GY3rb6Q_q45Dl7&N|y zu+2lXDtW4c6&)N)N0@JaEQaHXD&`>QYHTP%XgES>1VU&eLTC&^s01OTKnP1i2vZ@1 zdLrmnglP~$SqLFBR6(>A+S~^r)DI!lA0bo-^8ltpAp(&Q{bqs?!T!a)-`zxA*dmicJbn zhzJf1_iN_mn-Ue~Hw+J-BxqVHu{w@%OS?B zSjp!Ka0QnomGcxVo{}f2b9kcxZ=9nE^J!S{*t}$T`K;t6~6Bd0pX07EKS-L{Y zlH{hcauoVBlK&@EP`lPBhT~mX!Ej?%R?t`2IZ&Qa5iuaYnPk7HNWxx~JS?72PDOr{ z7|v6}?J*Vkna6O*;<4wTaEN>pch%tk=%4Uk2bdLj+hmjw)P)_{` z`^dmPk?-`j8tfkj_9JRh&X&2UKX7hP7@*+HKr4Zu<4q8HLPhjZI5G3wo5lufGSdIk5m~WqlXUzJTuzi;mJ^X3$4*zZNmiw{>m(KPJF3G2A5oEeQ(kE6yx25poKDQ) z288FuhNWi5bZFB-o|+cTiQ*>b_303ws|}7#No}nQB$0qrDK}b2u%I;3@W7phVmN>T zq&kH*$7nvk&j8P58InwuQX*5xl&N6r!PtSNgAZ83hGaUNcy6$+6oYjqBtTj=gK{CP zdqWh%0ZOA{gd6|}7*yiVVB+OzvaA4^TBXR;ch_X;Rhmp4K$AC>m6efXeQzr(D}%}O zJHm7sK6?>Dkt83`9t>5`fetDNq#)#Ohxb-0y?jHXqrzj8x`!o4h51#14l6^QDtUK# zwn`rST`^E)RWY`BZ=79K3~0KlQs~A~ntxXS@CgN20v{G$zOCaDlVXEo!fTMGX>|Hb zNrnRYCRMA+&N9L{9@##S9G^@B`e2i3XsduspF#-ns_VwUtQa~13{GYR11RYwzzV=E z3?X-#Rw0q|Yonn6O*u(pQxB@~A%lhkbDR!{5e%FH zAv)a*AtihP%L*2nfn~v^CrE(J;qstlwL;!quT`a{DzrNI4pYYnqTvp>7{CVxI8m)h zWl3bj2yH=fGmgB&OaX8JALun>8hXu`2YPKbndc4#o)Z`u0eCY<2&%vU#M&VQvLXz) z8L&V{hz>nt1@op3IlZjmFScO70WTm2xWMc}j*xPP3k5FF`v3*%BIHi7GG~B62dhq1 zYf`I5glUE%L!-?r`L}R{eajK{OB~VUDqZ@&habwf{7`<4AB8MU^Y7^~>bLw*e~BMc zts+CCSIqvl#}GM&kR2j4!T)d!(Z1z~RtraUawKw%E{M4LYqNhCQ6`EEiAoJq2xg5o zTdmO5rrnI14(5q54fDj9HflEt0u+iNRE!aG4dw}*1lu&@&xdok87o&{+tGQ|DJ{d(~?$AV_Z;6vNA#Cfa;KwY60$YQpZA9S|eDmkV+la3ZN($ z6k?fRG`6s^L$G*6Y^a_TfF(libXBHaq0Ln2tE`oA1#DzNE6FwLS9cH*0>uFT4GSR* zDUd2FN5ITfs8Z9U8ZA?%$yBORv$Yb?g3L6Djwwr%WTqg_fz;FeO=8>OA6)nTlMdPN9djy{-#Fm>eO{+n}>C8-$1yD; zfDq_3P+(X+gs}PsB@fGM%*_BwFb@)__#uQfMhIhp3dRh>NKE(#5NeJP0<{g!iX+C<0Rb3K3$Mi9qm#dFX@? z9nVInGkH&gzo=m4h7qeoMqxU9p&?1t+1eebkVwiuy47mO)d9T0_qp%V#9Vv*x*+DT3qn#8)pECqQyC{fWY>&_$ih<0X zis&F`531qso>ar%0jf=DhLAVakgpNsqaox2cZ4XuR0F4Ak|;yLYg7yu7>S%=kQzZ2 zI1;{$g3D+sVwjDC)OfhCFvMu#4{Z#9cHkIdIIuATw-X`5U~2W~1DIsgl3o9HnNt4O z%G8E%GG;3DEYb=4_Y0T$&l4`~KQmx$a#dP|TA|Y!h1=tAAGx%Do^YxE8R6RN@-k&< zT1}=VyGp)Y{&xAA{PX1d9~!*YX&SvQOH-v7q<@EOu^N_)4z~55Ctj2P%<#3#lJ#O` zXQ?$3xludF{|*ULYDyRo%l}#lJAj1cn%vBqGM4=vGOmfoh?w0!PsV2dnNe)7$yDdD z(j;1Wu0*R~5x86Zw~H76_CHU=rvDicyJlpo^(upCS^svlMuhqQd9wa)g<<}0T47j` zAeg1gkf;eSS(Zkt@2=L!(v5MK0&+PF3rSj__+tyb3BR>F@_^;JD_lI`0?Q$AVYr*= z6k3%;jTih<_3U4&p7JkO&jvTVRwB=l2M}>8qyMZMDJ-~mLopnqYtZOYw?c$pgYcDf zpb+kL1{DNS@lRaGuPa9P0z?kv&;NJJICVS)(iz}^|~(wXGw**Fon)2TAL z8+~a;hh8VLK)828F&yw&z-Ao?FF@Q4;)cZN00)s_I}T!i#28cvG!Xuu-lV4yF$jku zNXs4E7VdPVN}Be{L1>8~(CCT~ zG`f1g0zX7-3HpNKhY)?Y4+Ax>k_osz4WUGLgxK!6YsW|Um3}#Pz0kL=N8^IjE~8I> zt?PflrR3Dr&X2e!w_{9%*ft6Eqn@vRWxr@?+{8n|5&hg@e49w*8LG@$xdEOD|7vaA z98RQFaRV`$n%uOOu38*J>Va5u;%X`1!K9EZGt8JJ^tF`wm_Z*pa>aG2a=VJ`q^zPR1NsHD`oLZb*FnZTzFH7Kt9-~Uv zYGRW^A^!10XMHCgi0f5#);A2907JBDhWc)@8RF9a>n&l&=q``tC{X!n{EET8Z#Feo zjenb#9Bu=yLblE2euMSFj&}Kr6C(%trKpwzLyQbysJm2>4lW`XegP7R#5nMcQBt@= zz|zDRJ0J!nG2{t%D0s|m>N$Hl1YW+e;acx@T*jB9kE{_w#?^F|R-;s@2_*xco8%CN z`%M(XsY^s7VCKLMH|MIEUx9g((+ma<9n=iOA_)~;t!4}p%%EuO$t^+EK|IimlzQaE z1cxh34F-5yNp%n2Rf-pUCE7wLYeILs!xVL^>b01tP+NFX2QF4{fye+%D|c|Ixr031 zK`>QbFQS7$SwI9%&eCN_Ss-Dfs;x~=8Ke7it&zd55M|7a;F7kWlLdSA2lmm z3ISDJo=&gGfQSe87Wh95Qi4o)`|PA4!*YJrFPWy+NhBTZLz9HCc*) z7>!P*$#pbnRE&tT80Uv2is3Xxh(5PfP)`Vb5nCHzcY(1UPqJ>fdm6S}x?99%w2_6! zG!bY@r(pVkX1tNRt0{p zk$K?Hd&m$F=$@-&8o){)7@r6cVG%MrQt5%87|v*f=1>t0g$5=knxeSCsKkUwa}*jI zn4r<9{8 zXaOaC-g9+6vy9fin_|)ULfqVx-grps6M-};758Ub;0#l0GR@SUlAOr4!Y$y7xjhY9 z#kRrgz*nk0Q4OXc<(Vk)n0wJrq-Q?jTkZ3o)e9TUe)}}` z!l4f5*SvFQelFO{UAAACqbYaxy1IiID3Ucbc^j+ix%=E9`6#=MF`HZYw@%9&!7nXu z`Pq4X2p&YVt${U$Rnllw3TBF1n^Kb-*u!@doQh$UcmsG)hgO&7F#k}aPNU~WpW@5D zO!qw0Y*otZxRjc5q^2TVPQiOeuio2_b>?j{WyKq((ZcmHK_rEQg`UmBH^5)UF z;0V_1neXnSneGcG_%wZ4(R>&}HZW{pa27*!aPa0dNDuhk_5Z(j{TP_yBN1{BQm}bS zrA#8{OL3gT7joG+E|5tiJg$VzVM{n1xkw=v;<%Ehl!|3a5uc;PIT9f*l1TV+zCa)t zju5-nAw2@B=#7v&Q^LbJ0;zusM{&u4xw*Oia#gBIrqJsBWtxooph2s0 zMXEJYiJD1N5E}do8g)-%IB3+uwH@`TpkaxhFjO!opj4N88kDN!TcwJ@?(-nneNL!T z4AiNckplw*P=9E!zf7z5&r)P`$E&pLdMaK-U5yt}CL6S@4ZZozl#-B$wR5w39_~2y zU>n@Zl+k!d>ml#0FwDdR;gWCltRrr3(6g4t3PCVzXWR)MTiDxtFCI1%cQdGBrz(nX zg#@Y@7qHoEgJuTR%w^a3`k!E-2=l1faLfczi!f`17h&d@D(pI_a_Qf#UyXw$V}sndt$JIj49=nMMvp4xG6 zT4ondPTO6vyB~JSxRbRj*Jjrj?A_o?OTuhAaF%A*J9m2C&dA$7J>N{@eu$#?7*W=J zL$g7<<}Pa!-LK`zxbEtlZgbiS$IiOyaX;gPL;cY`k5(LC?;v+N*x7FuXVp6?ZZEfX-8p_~rR>~YvmR&X@0!_}@$%g0JBe>b%RaSQd}V|3 zhE#d}bY}3VSFDYXbKA_G+2MARj=O_ApRs(4!dvDgjcYXJW?}0k!sjo}=k=(2eZ|8% z$1_)iIf(+IF5e1o*?6lU@no}j)A#-l_qC5wOWf<7qpj@SqG_|j^u{cEsJ}`yX zeUy2N1CP#4oS1PPY$qs)D%-gy5q6amw)6LdHmK+Cbjt4u{d+?Hb0>5)BI0p*A_=Y# z^LRX&P$ZLb1bhX~7s>ewk(kGm^5i0(QY;W~q;ifxF6HorN|Bh$lkj+4nGk0S*aRY~ zP0<1(s`U>9O2S24sRHK<#5j+`6G+(-wvaE7$i#fHm@O0XB!H5BX0Njla{s~11C;s( z5|EH;n#JD=sUkVQ0I7OPdjO=Wv}WsSLMkdis?a(Fq@qg@+WjM{qR%lbRcipN03&KK zD40l2QgmWMVsK*XU=Clv!8v$nFq_4$1!*0l;YGAVcoB6CiL@-=?l5hVLV43?OMFw$ zV=t67EuF=G0BJ>Xh($0P=aOq+1Jc5|9Ie7BlEX}jPGlw| z1~Ux;VuFO2p~39GRLIBP+eqUUZI@}Dl_aF>&+zHn$1Y{~%Qqj-Ke#n!$He8YdIURW zU9m%-e9Skt7j^EpuHE=v6YKO0p3s@^@~Q8q?fZ9n;T0**_r2~n`HsU|hnS;_ZC=%V zyxijj+rw6(DrvN>_oc}V@AOkH&kmcYJG7$mc~|q{9Yb%eSl7(@b?Yw|(uI3uSFcB$ zzY<>2&+}`^!**tF?dErX78Q|H(6o5}8~YiP9a~Tz&J|x(S#tKQuG>C(LS#t(yhAhk z-7kwtS{*WV$sXDtxiikUzI(#|CQS&* z9`|9|r*7TWt&!Yo*l=qBW6Hz8PXh}gRdWpps|YK?i?IHR_DfK{wV60_dK`*$+$TYvhr)$W<8(-`p&$c=Ckc+=|Q z4yN=brkII|85OHaQScmN8pCKk@ig4a_#MZF)JxOrvzi42Xk@yqZx%y%P*pC<5FVLJ zCV{n*?wgF?O)FThL~>vj;UUoUhP39m7#Ggr&*2VX8;jAZxxZ9~8V`grm^1;-!!1l1 zJ%+T#hJ001Fx<@4Bz1r#hT(KmQ%F#%Qg9F7+h53y?zew&R(%M`^_9vrtSC$F+OZ*0?X5^G!uh+Mv?8wRIsnoBuPVRNr zRz7ZZ<7&~{CvQ5A^R)76JkdM)$lS5_%QmkVs$c&yWB$}DAJ6R=6g1mx3P4a$s8tZO zrF5tJO`~N`GRbz9R2&LSIU(#F<;7+NklT4P$Upa z#S*?qDCKj6La~r5<_pDaAy2?n%0z6g9G40>e2JLA=C#>s0-M)nqYcZ8e&Sfc2_M43jf z*U2Sng%yemjMRil?Dy2#$(JPq2+4?k%R;ABl zvVIM-%V)G90!vO03u_Np{1zOOAtt)L87VckJ#GuQ*v#I%T6paGcs+P%Zf{#dhE2g~ z>d$850R|xL`>T>9e5GPsjFZk%@RbVL94_04;Qtw1{+0J-S1&33<)@Ck_b!L)&3|7Q z)!~uHK>J1enW0$oK`-wQj+*WB_}w6v*f|@nWKB89!Pc6zG>a{N^C>Q%Bku8FxpPYT z?LxCJuj^(Pire+Q_mRIzAG>r^k^S9Gt(H;;eww#)xMR

lS-AIXjpfdAxTCZ9?;i ze2&#?r1Us6N|hlPX$cxHi$k^MxHo(EyC=&dCMnV^AF{JUehFT!8oa^owtdk ze%OGKO_zpF^1QL4*??(v{Pw#pebm)$)2vyzx%kA(;=<2uyB^~_9V`v?=2237u(2DO zXEkn>x%T0VVyxfnvX561GkVP2)$~D!#y*77vFsqGJpv1`Uyup{iNsiSbu^t+t-&qNO|%3n9_@9>54c=qv1 zvoxnG9wj1HpHZiiUaIbN=N{=3*w_5dk%I2xd$+Tz`Y7}oW|BgdmZ^cwO9~w`(LdPV9iq_y zZ?ZF()hGvEHBg0fTmhw#S(3EbI=w>9j8*7!HQMxFicSx6s%#CgY#94WR!vyO09e+- z?WeHp`{;B-0}m{c2NuZ#D>V2!7`6*w*mk^#GT#8hsI;)%HEkS3r2E&vVe!#y51eVx zY0f{D6x#>)hCCMbZhtN>V_{T#=buWAfM6mv&f%~*xR5LC@f6gIu?5?GstXPhELam_nlemI~{D-efa{;BFWHAnbt$j;FQT9E~whi zttal$su?yNxLS4DC!?--pcZ&CTW=i_u+qy(;ct%DGO9Ck^}bdU;xz=a7y* zCmBAaD>AhMU2*M=oAVx>xuwr`-qCngU&kbx%Y{(!%4FaDx9e|zv-|EUQ55%B&fwYN z@G}c$y|NqG?nC}vR>9j9-JjH*y_R))+p)1BxzXN-OGKJ0FOGd4?KZh%%X2+q@0<8O zi^{WayRG$=fREa<;v*FeFY>f+Hw2wzV|$-ow`DnXZMY@=bT{Y4s_SN4-y`u8KQ2x> znlvOneCfxiKLKCWV2hq}{HR%_*Sr14pKUKGy*)@6k^TM$Y*tICdeM@V9w)HCMe{4A zr&`Y((M`Lici5e)uB#beJzIa;(Rkn1WZFiX`J;TUTNKGom0!0M<^^~5Shr?caF<0{ zH_J}t9`!tnZmLrPZmF!SE-l;TJ|O;*>B1$I6NRUiRoq_xb}B1;(C~X9j0<{7!24kr zr#>q6DT^Gn%__n*_oTxD*R2cK`)2s+sk}^tRXVjsp1sMD%5)nks`PGtw%Hb<%ZHZ*R`n&fm-oK)KS zY>v;&X)M!4ho6eiEWa{)nuQOA@3%H+;)9P5XCxOpN1Wfxd)xnnc-ke=%XaVMngaL& zZDI5if(9{yuiumVPnGpADWBhy`}gGjuTAc1$i&gU!nA_Y$@R0w%ov4|t* zNclL<#-#!|TfpZEc@mjY#FYr;JPDU0mkI?U8IOmH6a?g|O~+P2E>j#r;sosaxh;lJ z^k0~CfMP#K1_bVkkA7xlh*F!7zA#Ia7#OR_Wwudhb&5PI6dhFQ6^rDL^eE3JNpc;1l}>m;H4RyU+9mcK5W8)H7nxkgi>L?4=r#5=1OGDrNV_F2 zrSdv_DyydPvot~YfZ`gkEIHBW45QndR|}HuKm;~vX7&~}ScVQ#c9g?7c!? ze`-a0tDI-Yea=R&j2|euy^I;dV96O*PYj!VEO6=5cPIB;eR+26`MyG5+a{5h#Rp28 zIdAB`Xh*-9^JO8Ma$YTM-el~D+nQ5P>oQ9iEpI>6AFj7yY?)MkrC`44%i?-HOFUYX zR@lE7>d^Py-G-yf?zTH%n;JoHcXWtDQmayKMSt~-%DOY_?Pxcezi6@YkT&&-yK-&W z^xo9n@y#9{dvUdNR&>Q`lS%xB?K^F*Jn=DbbJI=llCB+kVAm{WRrK)9U8Zf=%nUqI z;K5tfzj>Mx3wwaYMkG$>_IN*GXQHq~7y6pBH}UzEWfl5Z)xq?UJ;q<(chK_2EzYWA zoM(Ny)_nDEObfNe9*IB4s>zB_NBugH)&uY*3B;474 z#o2zs#ZS66Q}erA3BF)=d1;izjf;iD8RMm+H!4qh7at$AWo@ekV(UwkSx@YuC+5FS zH(A=P?!aSPQg1)BpLwiv(b?$r&pKCLzo%Q_*_?%T@sst8sEbh@>KBX?+;2Co&g(|~ zTw|O{4?hiUbZS>{_n@U=VQ;2BXg_pTe8cuhOIm)_%L3NMD;W1Xg!qTnkKXXYJF?>^ zn%nrYMiFh|2dulkv-jpNsgAb}w;$wYEj#~6y6t@TWdFxq4*1e(-r_BFnk;=4J=xW) zl~uyqXU_wQtgEqVH8f4k+tq1VlQt)l3U6JUzI*1YbyVfiAE4NtBACAs}1hnER0e1=Z&eb%rUCY+b^B{6>Y zpy>zFW4DcTkDE6-SvvN$%JE`p@tu9kEWSQp@~CZcV^d~Ea&JH9^6q$-wqCZ$m0r^_ zyESf7ZV@xP;5{aq;4m@NjPbe0(sI}3b|dFZ>$Z4G&yE=*TG2lrIvu{co};|P&RXZ| zzyG#Z?3WHtU%Uyg@L2yOVDyF@xn4Jx^}2Rzt9oP$yRM4MJKEcA3Qe!PcRfaF+wSDlRZpEZ zJ?u4h^HTc;Kd zt1Rg4+$FC~5C3sNtD=RCn;t$WJyfUbdqL+TH@&^F4cF?M&B#TqPF+3sG_dT`_EyIR zpVt&DW!>0HdH;6uw2l1BdsEj8ZL`#OmgnfoE*8l$zQ}tW_|JMJ%_5W}E|6kGn z)yp}BP|THyr8q|^7fB>+u7bmsaoHS>NFtL-aS@v>7Vx-IAx|t5iA7=oPYRnI#`}YpyK7!(L@?|$O- z^WV)jFz&f!88##vb~!|HzgxeBQt%>5E4&EXPp;ogl2b}wbz8va?_FShZh5%2=8r)C z?Z2>!8V-P+mnO*g9grc*eW=q`O32k96Abm z&!mQy+t{nM*H;xUo}0cg^hD}a&q}K6{M#*mCC)#j2EJc^rS*c3bN63dB?vxdD^p4R zO4}Z&*;~{!gexd)w6gS-x|Lm<(=72`bH-%dn_|JpVxR5zi$}!|UM%}Ki*sE$-umUS zwTv;>)XP7m7tEpHVrAz)gpa+P%*C>wTO6Ai|I}I&)zd8v)|)0j90m_D=lTGm`szfc>ijtl9!`*%G-xz!ND& zY@EmDiey5rNXZo|Bs?w$XLGq+F;~HruthQ%&f$m!3Z+;m<49y;g;F5ovgJ5ofohvM zH7pRH&*uxIG9`x(#qzm)8CSx?m2$pB%Hs<;KmW~3B==wX&C9i4-C0);#RVqnC0eCQ zp_YFW;5BTrYYGm<>I}p%tM(}VeY@-||MgvVtSYwtrEPY%AijGIFQSlUsg`YaW4`qx z{^B+}Z`{-1Lv*cT>>GiSJMK6*Zg3^~RcHGPvHtazyMG+Ve-$L!@oW$E%eygOC~GyH zXScpIGw=4i%~VNBy}gl}E*uHu`wt6!KUX#V`tbT+?U^$+MCEe)Qoe3|I`W#wC+$@q z$>j2Pod!M4bly6w>D57<&*?v>ci%s3p-sZDh~zh0vR&^N+)Y~5_CvC^J;nKhQ?HIs z++ldmeY;5`{AUNsl(U5C|GcO$5jqH zf9%Pd-EBXlFN^AOdg_GJ^X|wxGjcYjNN=^(H<(n`sEkhQcxpjTgsIJ^H7pt| zF3T~Q(CwD*_zY=R#vgN*lYz2x$ktd zgN*xwai?is`)qE~-rsyxP`1pxGNgg<*@S!Yj&{sk(OFJQ(SYnpx=(3i)*e04aR1X! zGy0$GzxJgWYtxrqM;7clHQA(1>En97l#(4uy&3Mk&Yteq;8NW+OC^D)%#p{JgME)O zHmBB|JSB}HKgOn6l|Fkmny|_j#8{(;~cS=tCT7@Y(AUMk#VIQxg3{C zq;dsYCJ-t3T((#$;)>aPo?I#wD)|JYt4-@xK{|3<-mlwoa2@<9K=|t|dV6eQe*PO| z!wU@I#j*5)RTba-lEDfvR$YnV@E6KSgy?7M9aEiwBShi7SsCzSWa4GB#Cx-T^4kWd z(BODoOmHkKG?>L_hj94ed|ViY3#}2tm(X6a2R9FJ8S|iysoiLg{9U^Osh?slQ#S2r zG|F;7|KXpQcD!p(OkNIKbUeuE<>3=W_MZit)#@h=k4Nv1@*bTrwcB#Z?ju9{Jo>uB zHly1*ae0SBZ9A>+lQGze`RX0@b>B6zBw_qs_iGJ?@VSe$6J8%bnUKC~&$7TjrWY3; z=r`W;!kEVeG5M6?t16c@mY1c)iG?@1_UJ`_+%$d6IquGN3kDCinLNaD4u5o=9nq!7 zSN2w(@7$>F^tXlEXVKPOELXQ{xA5gS-<2=RWl#HgeR&>pda5u*9^~aZB5?k|t1U)v zwyJOx<}CIvO@G&B=CzWcA>DN1s9k$^Jo66Pv!I#cz|Qc2P4*02*}JiS<(wu#i^~Jv zme;p@QGW7Zo4eQTuf1;3KM%2YJ?m1jF|lh|;N-RJtEO(=W-BH=!d~W{@4B)VMNzV$ zv|H$Pjc0$%p}1h&Lc0J*Jp&{%L)yW)bY)l9fxMUZ=XN-%8qjNh=pypEiaz?b!>Cft!1(WPe*2Td&Y9va&EWD zN_N-*rNyDpb49y%?r7(-pyc4kH3{}NL#QKnoV)S%3MzS}DtGd^Zu0!g1=EzTnjV0D-ZVfA#vy*!|=J5KxHzs($9=X`|_<$?jqNXnJJU-ec^?K9F zG)d6@n=bz0%{>9)_ZJDZQasBf_U!-pw* z`bA}`Z2WCPE+0TcB>uU{{=F7kYAt6iu^--Y@m(*quBF4gMZw98PNs)CtYckiu6c8* zNBkH1v$GyIW|a(H6U$gU>A2m{7nYOWdTbg|QLx&70Bu@#`_+H!j{C@Vvv^a#PTu4z zQ?D-XJMMUkv;Aqp2icF?-kF(xWb#IQ;$sx1avIp|^F-adIy3JnPJEgA{3Ly~IOCXE z(U2KQT0tJyAws`tR)5-(LL1J|RSC+B)-NrO#7d-*?pvO42cAP;dpXvh#82DrbG*!T z$A~~DTFS-Ete#ibcT$h79KWr6L_i8-0PjjxyFELi7z-R1-V42xz3%A2V*kt~K4(s! zX^5G-^eL@8>?!)_6?1PcFD=-?>FT~mMKf+{_`E#s!=)R2BZjuV5qGm~w~u}91W&bVw(}xm`}s;2 zf#R+B)x13a-V+uLc8lEE_f3jrVCz1~)aM75-j-sHGYdnuoF6iKVDQq&85wS-%X?U7 zZ;mt=TtVO zogOpKBGqE`ly~#GvY#%CYW&`H;IM9uqlTqxnQ69DQkBaFK0o!vbwxTFkapyB$eE6R zEX#Suc{#c8*z4rb3a8V@x=vc*mSJ)s*3l*W57Z%~OURPDY4El`OIQff@gnSn!9PiN zyb~W^9NB8@caR$QsCt2v<&Wn|%R8>NR&k zU7huO`ng@b9ZyB;wPlfBF1oKNJ)YR$$%9r1j^)sE({NCZxldtKaCuTm}^|{;hto2u~HQV#CPx!4i z6PW$P8;j$o`ArIMQg6XMd||WTiqLk!+WG~N^Rc^k?%DT!n-Mh5?Oo5YYr75pw6af< zqgM~JUtTk9s^QA?8E=1F(P`1U=I2V@Yi4GL(>6|+{9OkVKUwk_Hf2Z7t~+fG_FXaJ zML^NXO!{1bDP?(q8@6imhYky`&h%Wdn^x)Z_U(?fq1d3|6py80&Mz)@cq2A9e>Z)P zgB$JX5&heN?}Od-b`3t5=6)S>@jznBt`{_aq&)R%?fKSc_#T@hk6c1`Yn!*^c)8c# z*P{F4w~;%K3|ORV?6tSF-wB^5cb^X1Go+q9FLFoateH#7MJ-MRZAD+_eLWpgdZX3e zHIG)bpE!AyY+W5)_qI#Nizn>bC7Y5mK=aveu|xSY+vTlwU%NJ@!)tdJ%qPxAVHlKc>Y&&jMzwH)5;sLY1_UrvY>@;axPg`Qm zw5p=Y(F$)6H9A^<&y?RY1*`Hd{BNHrV}2vu-$?g2(*2Ee|DQm*#7l35LWxYSREkAh zp+qVda77$}Od^!wI4+ckq#`L>LcEq*qTq7*xKb))ixgs|K)_M3xiYbYYY1)ChNPDX^x$qy@8m#hxG?_f>S0|* zFY)NzxcdpWHv?u&Usc}V8M|Wt>{glwzK>@*Tig*fdibH=xv58B!m8NW({H@x6)e&4mu!7V2pBdA-uhHc;TpyjBj<7ciX zNhe;rJkT=XR!H~PcLUevrB`mD2ZWOAAjdaK;m+op$jm zJ@7^Pm7O;CHxAf%+ z*WRAH7IenZvJ1&cH+N9>WSLb4j6N{NcIUn!lTWo9@x{{g!E4u{hb^XSgId1Y8&)sr z&i1mXu#~mDn>NpfcY5(Q@OwYjy*wMamgs}#ZgxC5rPuqkyzJYD-(Q{A`{=p4$Ic!*HvEeT z<(>ME)sEDHBKl(C`{~KKQBx;hY(3`HGphr+JnMqKBN$7VLx-!%gk8LEc%IMOEpd3& zxa(xw!}CscdODM3H|O%LmKmGg-s|FDu<6L?{bQx(o1=J}=7yd4bjii3=(hOLgEK8N z5)Z5HFXT@0e(z0d0gs07Ub92iqYj^b&ef;W!RMXZjo942>xYH??_S?Ae(Da% z?)&pQhuSRY=y~CZ)2GpU#*M-idpGWG6t#D7P`Xa_@%7?52dp&Kj)7mJ*56meWm-2~ z;5IJrT*w4r%B+3dJN2J^j{m4ywOezVSwD4m*saa|OZN52wdJQ5N3CO8b=$DvjZgTR zI&Ih49ZAoWtT^(a(~OkaacB0O<@90#b{Tq<)~@Y}Yz5etW8mue0CnM*rjc)3$f7cf)t)zCQl9xXNB#)@SYP5gbxC z@ckI|ta}&dPVWBU)8#uR)b=-v=U-h@TD%<)+@WI$+AI9JThz zpcPGb{c&Rx^S)lWII&INEid1Um=TlwvR#>f;hm%QkuTb9@J!`b-!8Gw70K_nck;_+bnZAgz%SqN_Uki$M6I3sVb3fRH?@_Z zN55Y9gSM%S+iVXnj&AJy>Efkyvm4LDVjc~f5gOGo@R8RO52|!w`w-5$vMAr)2d6*T zoX)aNowB#|jmN?BCx%_$cO=tcN87ZIVbaX$(spyUte0$N(FoV}E@e(<#L160 z6!v;|{*1i!)+>je&3D1OYC=3$wxrKq;IQXH2XI(8gTulRFT%c(4vRi#@wy{MtO@>Z zJ^M?}hQD%HG-NlxU5G%nWv%M-FTE9KG@XWiRiv90Mg(luKijKd4(g#=-IcO5bWF*H z#s|yJWtX_z7iU^I&-rT2S2dxR9T=2!ZfRb!rtM(s{_@zuWfSFTQn#?=i3fIUuDdul z>e{X_U)8l1{MBV~QtNSto}M(F$(8N+JZY-^?Ry(K448Y?q}{X%??rO|jG4uAcbJT{ zd%p0^4f@b+*Rnn(wcDPsscypJxlKwOZ_LO>gEsn2?sR*1u#czhqgU3s0rhTlskb$j zKR2Oqy}Xu3hgwb;J@APtBxKh@8}o#8e85tl37O@AvVb10`5q4W4l4!pC(U{V^}2s` z_`nV7N4dPUPK84$I|hct9ktlH@M8ThLk`Se+J9fT!CR4l$A25prLC#qoER29&iXU6 z^~LFj`r7i=DSg&GUo-KWw4tvrZh`emVcnZmZ!r*OqS8Y!k^!11~gK-)iCcg$qXYzH>{F z`K(^!qp}85^9v%v+jVT~XZzuE-Is^z+kd`s$4S^_(EDKxw-+U>=gwf?`#3#uEa%~7 zY2cvadpC8tGp4;~ht)${CDa-EM$kQdG<)_R?}}QMp10kmd$h;7*Qe$hPN)6eU0mz0 zdwh7L>HUi2_OU)4y^2lCuQptH=91rs+jXfA2gIL^VU|+qB+Wek2KXLl~ zZ=W^>SH^D){2K%R#=yTZ@IM^`6Rr$C&gF>(N}iG}mvF^WnM@$$vpH;;99K$3G7(qI zRkEcV30ICQaD_}Fkjj+;37ak9%5aHP&N2M#zc$G9CC`1$z zg7XOXMyiq6mJlD4ZP}5?Xc6jw37=Z1E!OBe`5? zVLCVUPUDL2w+#L*%LNzX`8!n0A2|BUr9!zlYC7d`LhucUzXdux+EsCG2C1 z`nO25&OhHMXV>XQeskJPzgt$`--=)H`qF{sL-Rk}65a1vbZGG6IIj>tX5YsyE93h) z>lX}KylSav{lSg=f~)MspDKpBy=WG3xN-87O?GO|uHu&)0=n7>_NoHBE4MuSaQnrr z%@><1W;3NZC$S&o~RB%-3#w2nlJ0-FzIlveMG+VuPhZ7q)ts3pP%0K6>Ts5 zkj2NhT`s>f{U0qAn%ZU7ookoyWqbSBxsD?bFWWvMXhQ1^3EZw;L5k7-TlVtn-46FI z-Tfi(UGuHCZ+ALy*ZoPG4C@V_G(&8$>56mC9lkm*+qw2Y>gmoa8#_MrG(;yLreN>s;?`Ye?VSAeZqE8p(U&^23un$gSJC>V zAH^Xsf7qd&y&v{pv9p!cDrMoZJ7Z!?x7^`rxY1{wEY9xo93)%y*knkI`IIBC9=-Xr z??pf6g1iec53V^maw0|SD_3tlDtFyAJI(s)g*DGYCNa9bu(DNG`UUvc%U^rF^tq4{ zwa~{Ux$wbI>&Rs77LEJ3GYcc`aixE@RQNq*eovViZz(YDr~cnQWvVw+@_9VD66Xnp z93@+cb2uECT*~H%alS$zR^kG-l&9bd`CKtygo~scj*P?R@;Gd{SjmwqI3lHz*ic!U zD*JQm%MHZ^!EAvroXZK02zK z;We*l7(!?`LTCg+aM&OkMINd?1|bBevcjS2aF}`^LMRv^6hfRlUx9JRgQNN6T}a-W z!S6I%z@;T|ta@c-EAk!$=k>M23! z1rDl(lU9inRy`476v8pp=HBF!Mo^G1T>Rid9G>nEDdH?=INjS!u24#{)p{PBOwEOh zHC%`jtee0wo8+fyjWlt_wGCve3l}kh!<)bTh~N*bTK+(sm@R<6`quK-OaE{8CLKoS zuXHE_PB16>?CLYt$|252>ekOaWXYr_;JKCKW!t%&oaD=-=&4qB(f-!X(3ad3dUm6va5 zbX0h3QumnPP(PwGMMt zN_AV{CvN&^l~TcO^g}jkRW^nsL#J10!xTC0KjflS<)X!?l2U$T$fPQRX@*LzR%n0B zVp^TWP}7fD%&N1bO0<$xg?|+%AX_*vonDp2R<6mAs4`hPg+wb$W9bxnIQN=3J)RsC zhMs~!2XgZxdjLv`Ak!M+c?<`72ujCbTv)=mFlbhgFuk=#r;n9nC?X6QF~~@PjJc4} z9`B8FecHz*w2e%NOOE%!d*gT&k9Obks8;Fp(CMnIER9ADV-*-{Ofm!a#wdnkflx68 znY+17GIw)3M6hL9rR&Y%s9IJSy@RdLG(4moD@J%4aOtMG|Zp=WEy&>h)fT~5DG#u97+$wFvDyR1Ebm? z2C8F&7}nNsv4LlV(Cpw3(1Rwubu3OK%?7!fbypT<(H^RqyBU&NCObQVOWmCRoivny>p~Nh#2ck1$5h9vFg|^fM zzD;`|`WhNCuwzbsfhJID@=pw}BC>W9)WbXu6?TY2a~8#+-EZR1&5-yiF3fr$4C)}7 zN`Z>#e^L>!3_Q}l;gP8S+ols7z!CM(k!g}lnKD&Pc4o60oyn@vnZ&F25h6OXIr$uv zp)n1^!k7kSXiS4LG?obm*&CnRQQ*0u2QZ=sOvtvHLo<<4l*CY|DM}hAlEr0JQTFJX zQbkE81OyZmXtWtWlEoJY@HSN)9aI`ih#HNJ|CY!Ws-v43vkSYZ;qBwnIV14C6a7o{o}-IxVNX0BSM zQ-EGG)(YSQK2R&HHsF&_0ulz394}0A&S4ZLC^IIhvrK#IScwW5jfvdN#W=j#9$r*H z%)3Ao^CLOsTXI_a_+UamZ(0-B;4y8^tNG5V@^y55|ol{ zl}IEqWvUVU`IDq@2dhm3i)8}8WdlnIA|MtlIok z6ATxCJov!f;af98*cSk!T7H05ldV@}rV@8zorxh-*oCB}Ayn9&Os_`>bphdF2DE93 zA%{M3OeafI$g|Z7El30m5%fNMV1#ZY(*X#fnPeIy3w{Imun|HR$#g0e zXbI_I{+MC4$Hou?Wx$#pm|^uoi2foS12+W;F@TN6;W-Lz9y3gm$4pdIy(1<(Ge@P> zWM(Kb^~@BBRwa?D6*?A%+?xgH@^pGdMu1MHRb}a!eVN+qOlEKl`F^KRO{P+n+Wgyx z5!sot=FEOdgxsxzV_1m_@^sqp%$$usvP?KDI2fWY8y4IXxVHrE{cGpmqni8BG=(gk z8KKcKle6S-s#hYxA;C4LS*ltim8i*QQJFfuM6EXDYtHmC?D z>44gqX4b}Zgd|Bt^19G7$1IIjuY+?3oDo7x$q5Y;-I#`nZcKyU z(wOEVgjSIG!4!c;flo&&7|04zcHjoI2Ten`MPR}@!!imdJcb^S1>A*T z^BADL8HH3(>Vz8n8yQ9a6Gm}hl>MiS?)$qL{U1q`4UBUBl+i!_Zbtt{66FA++&^V> zKf&mV|MD2+8hrqN%IhA2R|pwEyPN^DzzNX-GA*noiI0`>nNFbxlvm|#G&cr=V<3Pt;5BncgxoFF3W-j^GT;LSIQ=uTWnryD;|Vc>@>GC|H7ZY|%LMM=EdW`x zr65A305=8=LxF6DgO!!0m9pfroL+QzPPjUBDov0|rq*Q3;oMIuLhcP> zROwnxY;tIeS~9eRpo5JrL;ru+d)L@VvMfC;XSa8^x3#TZNxQNQtc+VxIa}m3Gnpjo z!6G|rmi6l9PP3{^R`u+vSTh^U43aU-jL40MB#YBkZOGCOd9{{gLAC_Lh6Tfb9|EKw z77YI};6DNk88#&NpZ^&K?7w;dl7$6U#&;g~5gAFcYI-FIaG=q}jJS_;&pqedbI&>V z+({SUbjJy*K}xC?o0KKl!frnoqroe|J$6d^H!MK?-;5*qy?4^2gcwO*>BAc|!a7W2^yvh)o`(+^0VaN8|=}p{)<$qWOhZ>%+hQ zbL2k#@Rx41ND>XWVyq0mx+)SLpyCUu9bk zMr0XP{=-(Q_2<6TYW-c<3gL_WR;%?3U|>k%pKi5&U;L6k#vTjeztw8}=Re(QZ9rFQ zwOW7vgI4Qr{|f*8?|;y0{n>xSfB)_Wt=8X!fPkO(1I8Yn-}|7|`VoW(`ud>Nnn;{Le|GfWGt-t%x&g!qW{>9(;R_l)lDmJR5 ztUhf00lBYFTCETN>HqK#(ow7R;U69TnG^;Apb49ZKl!azYgSvwp6LTLk+fRow?Df6 z@kiG;M)|<*yWpQNFU`h}@`DV2zS{iwBPo!)p6nF^_xo`=N>Ds}13Q;{^Dr&&!bH`0 za#$`$_#*qf@5gENI4{tO_jdd6`Eimx8kKnY@kbknd6C3}W7!p&H0v+CG__sAVVVui z*>O@N1~7jeZIJ`Y+wXoSGOrfRFzxtlJK{ljc z#-q-?2)#y&RQCGI8gSGYP{*5b6eXMvlTmzbR!bgcnN)&bQ*U5Wq*>(+uaDLM2AZjL zHn;5N#~)pPxiOhmGtJlFEAweFNL~?$RGeTh26dPTVx<71AYmdg6nvn0UuY`@bWK}} zFVdJncSq(dF0wQ`GSPn4X?*sxeF4Grsh_=Ku%G?#(uYV5J*3%Tj^_7m|E6zl*dI6M z6eRHb3^e{mu@L01LgW+KF#7tnIb@1*L?B4se9MSvYjGnM8_Y@l9T7RGryp6^qgUD# zctsich!tERIIlE~AbFh(rd1+c^`nZPP@bL9zG;HGGkSD24RnZ`E(MFY*RbebQ5${qB zunQM9gFLH}tSbA$smgjD?@?cEPjpJ%&5u921WJ)KZ%v+clA_29k%dQwet|WH_ zsaR6%m&KrgjcgBKqqnqp*9827d^{N?RdNmE`}iXRhMb4l+8R$|m|51-BN>fRBvYI7 z*c=M8@;Mc}h?r5B*qp)4GiH-VMFIK1{VZ2`K3YCZs==|DPDXh=?4Kv4nHHn|LYqyN zFX;7)Vgy069Qn&2i5~6-Q*A*v(=sXgVf`{G%p@+$v%DCFpPt2KY06^Ifv2)A*up^= zLyI#z06-5=eZWG5-5N6sV30im8C70ryXsE!;kqO&Ax~Ymw8#C0pHU_D7knjl#n)no z|IJ?}E%vMb{V$Ui3k4sZg}>UY!u||Y*cIro|MdrMb{Y4{f z?N!CASDU8Z1)#3?!SDo4qA4^U7uBn`CK;6pRx6=j8aYpIn}9*9M5j!mwf3k;&nxuy zg7abqQ%Ip(7Nr*z?bc?T`B;Q3F+${yEEL~>iq7$ z6ndvQ$Gl$;CqADfnKvt`PhC;+suFb(HFB4@!rkrSzM1)sHhN&!|^hI@nViZ;SlEQfVmSo}Y z|B}kWUsYMyTj|Kkww~ zB5Kf8YIpq~vmros=6ny(qwI7y8Rw^osfuZ`SzD0JSL9UoH`=y>=x(AOuRuNCxGrt) zCRir92Wgn(uYBGbvj$XR#f*-tYEo`2FBf^)CHrul%xm_er~v*VnZQ35D+^=U>L7X|h-41@v%K)UDXo_{C)S zVE2p1Jk;=GVCvvnkOl5F0m%Z|Uo%YKM3|Duym`Y?{vgjsw49hebtD2@iE#DprlZI; zl61ygUxtT-uM$qIQv`pQgK0Xd(yUYA*5OWxarH^b(E<2+Pt+C@-HT#GO_s~J|Dy9- zk8puhWQJwMs!3Gf^?5?CZA(57>6o;8Xe1rp>H1Yj|Ct;YahdcZ+WZhfXHz- zBcCOvNYIF>juYecLf&Y$lcbe7IL99HC@JVo*X+Q>Urvj}B(LK^H99xdaax)@3)@(T zWQ@_GNlQ~6=Vw`0W;YlT(8)v53g)G6uR`>Dp2=wG-jLsV6v=X3pCbl(Qsfha|Mt=B zk_Wt)h`cxbC|S9AcsPiMw+?!})mwMgR(ieLgE+pq7O$+X#H*{r_2llIUhnYc;lbU( z;rgxB!`^Cqr?(!*w}!WF-@a|p99U8UCheQH|66OQ!bAI+l2m4SX03DSQN*~z6MjZq z3Yz4-yZ3qT@$+Y$0}3jL8b04YnNXBKC(eeQ>13#2(WVmZ)ND7HryP=`-)PxW>w%hg zOxxp9t--+wC9%8mVSA6XPI@PQws<0&P{LaMW)uYDUo zvEvL!@tVv-Zel6^P7K+=aQu}Oh6ZkCP9?5w_!=^^PPs~g8D5?h797pg{NafgZKPrV zkCMT=^4=7oYyUsz4U#?)@4Iqdlk}Y@Vz$Pt-3h1HBn)j2I^NO_<4fl(t&a0))fp6{ zZ$<_Yp^!bR?es@1No|kg@v}^@1U!13mJsWfi|4##h-PO;FlJoVjiGzb3fdx4xlUah`~y2g9KRj}c-ZYi$AjT6jV z$GxCBhIXdDX&pONGM8hO-E5O;vDu#FqjYe-*&gOu)hUwSnWjb3nIy$HMQBV`Znj4; zY20y9CBsc@SUZD!npK-^o~g}tnw`d@bhz1;+1YG&@vEC9uPgdvn8f%UALLUa!_9@{ zbYzwd|1-={FV2Sj@V&TMsWTWKd4QY4yjG5u5nproG9GQxvfZZ+xR)UQ7#6o|IzDjC zE-o%g!I|cO3JOn|R6IEMNulZ7GuIuJ zk@n;b<7k;|7UQHWK`+S0F zdqeuc+~r1PjoM0%(&~76fIzwB zGC7FLDvh(1wdFD5?5gyngF`M!k(UzvSCZ)mBf`;w*bLJm8B}?3Zs1SAZu2x9LfgSM zT13{+l#_UnpwiZGXks%?2SvX3&$@=lyhBPilcWbAE_vSQ>&5h+@TAq-GP@PYbKE;t3`hRB}zwVUjkCXmtZ^x9Qyy_S6 z_=Yvw57WX#%N%$zh$rPZ&N>sJFerj-2*t34?hH9S(?dJXCGyU))JC9s20K7{Xr?7F za$`ClI;U6m`f;7^R7swm?h=EZazGTdpJoK^WG9dswhlkZmj z)!ypO)ituWYFrhLyr)$%s9^I-v;J2mii>eza%p%_=Jrj0H#Pf2uh(z?@UlWC8mE); zAc@|3+hnK3Dv2;)mgIbcP{R}A^~!}W9*&6+o)M>6Qe0Nh(h(2Ji1MzGvI)oAtnv%H zQnYo{ZO5me@3uczUUjm%81_Ps^I_5_iXfM=Ja9-`W4bbDNGgikW!LGl0@88sIsp*f zY;qF$9XVq!gxeJxaNBubgBGkjBDavjtP2rL#9i|=GqJhZySaoDMKJWn6>+rUZycZF z3o|gG5Q|tjNe1a*nhXQlzZOA>d=X&=#^Tyo+M|2kBGni5DQZT zpR+B)Rw*uaiAza?T_m*3vq`v)*h1{Ru!afW@_7ZjM0*A>YaN9~^)3cdJ5~qgLd-i^ zF$MDQgX58N4pe#whj)(_-U{2(EFNJtY8yLiwow`t1n~h(PKqb;P=x` z5Um$o!E$_^*0}%&zJ)&e;xR1^-yFuHQhaHkbGIxB-KE+47*}f66vSUN zbgvEsj#(zNN2Ak1Q2b7&IBLy>Ra~v{tJ&ANX~LG6K=8ME_D+-HATN`Cmg`m+!oc}# zw}(kqrPaArOP5o5Lt#7MZwhkINrfDixu^*gEy4!r9r0nio_43%(`=9kt7vIB#i>zs z*Xjq}br3y}9?iihtW58YcMvjAsTY=`ESz7t&gx{5*M_|z1n(8@;H3pGcuTMmRMs^2 zq8RN>4-eDVrmZODDh%<9V)PJuBbZJ(Cg0Y4kQ5bM@68fQDs~P2k{-IzGNOF3c1rVT z;{o|KNz_}nrVj$j*oZ{+jXKY;*V1F>o;BZyKa(J3uJh=p#_do98s^AEDusA792Z56 z>5R+d1xDS(1{0U*~F78cq-@1C4T{$AY)NLb zQ%nIwx35Ean%eCON^eMtl)AxGKpXq=EQmP9CN zZv~mZ$c6(PJ0sx@0^)}D=k0XSYH{uYKLRt5u31ECvj7vY}QBy z6U)%i5jQ4(_{NL04oBZOeush8)zuIKcR#LF^CtE zTwlH~ZhM#~D~$-Br-O2o()BfD(UgT>Bc2|RVFzz??%NjSG9tvoFrpzQ6}R+Voyg%v3;eSBT=PK^^)}++k;R)!PWZT0Lu{ z5gUWrumpH(p$TI5F1KLu5vTfY#96W26qqZRYCvC1=ppoEg%VIjs)$}nrx{g^vpY{2 zR3tgBunQ_X_s=`D31-az-CTKD&tTk>2V27-VU%WKC{g#2eD}{EJQ32SEl=%}?lbK^h{|FsW=H5O524Kv zOvS*$q`aqD3`xflX+p8>yr%h(vUq-)Jvv2h!G%aBaIIHv?q`t8(N(8pKWckMmVJm& zZb3{9+VpBe%aV0*{(SF8KV*{%b#ax(m6)w12J72?X0;@{Fj3%}3EIbsXlyP>AB*gI z5j3)t@lCZl4l56WW+V0HU^(J$OE|teSjzhJ=XAmz?9+JEU+dv8LMOq@^xHB;LO;!# z=zg|+;}l0pvcx3FBT3ujC2~M#`I*_iF*a3NB*SjEOFu?Q3^wfUXU{36##uTVnFE}g z5Y6Kt8Rch7OgyA-7UOv2)MedO3fBv8Oo?CQG5PRtKr}s?7BO5t1j^ww8{mi25+EgV z^A*TgR|m&MEa|W2)8G~ufF}g3+sRf5Y(Q~wu8L9OWz|$AskF1|0pQsVSxb^`M8UGQ z+QzQ|0rJY{Z|V4rUDn74x>FvRtKg3(Nz5F0W^_jE@p5XfEA|s_$H&U0Euz3tq&r-q zH)M^y%;)&Ge?>i~f70`u`YMv|K>aWO``@P^um7X}&nd_Y>3ZNu4bn{_F{$5xCM)&d z!L9ml{mRwcs(wA_*D^8*8Qc)Vy&RX8uP8U;O1*P6SL*jU)yal=m}ix#^6B81nP`+| z$u;MjP?P-?y&!HFyGcAew;DR!w*Z&F!{|?*R6fU`4pl^wko^`V$9Y+S(}&4nnk7S% zQr1{dvK&f8l$IL6wFL(^cf?q{#M!D`;tGp5fmumEQzp^9>A3t7N4w5-$K<-?`o7yv zHdVF-mZ{}-CS7R(jQ3%3Fg+6Wbi+0J3<-Dm8?|Px>!zn(iMfE|2?l}?_({p!ztDCK zJv~i|A|2wyyd`4V6)euegY&NF=xKF~Q!y+R%>oQJONR3DEs^{}tW{yk=>&)77R?~e zFn7}ufeocOOGYCK585_E1g=%4NSLyR626uUj&svN1vB&zLBU~3JTwa$SX7jQZgQ3v zUCXf^4{n9Ns?_3O|-stx3_+KeQovT#@5zn zYd;*W93OtUySj6G^4ZqW!|&bx)2GKzlbgSB_fB@6PtN>7YEwu9jFvhpz24gGwUxEr z-QMlBXwzJeZr-|iv$uBh<}DhNc~K%x28OqMHWx3wjWs}KU})MP1&)e*I>F>BcD3W@ z$3+qk(e+wSJAewWqwWk4lXIR=&2fx_#JR{8P(9pEI5S?EbXb}NkSO(opVt!G2cDFsOvlqv6=z94El20wS)4PX%IDHMEwmnruv!(nUSD6OAUNpb*HQJ>>fM`nZrxeCN!V!aUxpDa#G}z- zKxv9qKB1c5>-l#GjH1%s>ef$kXC=lRjm$kBqh9!z;Y zKFCKUCfz6F(!-_SW%>QII^L5yHPQQA0!JR?qr7-Z2mQ2&ga2WI*u!mXAd825@t6z$ zNGGQ^9jE7~$HCcezv|<7G{O-xS2v!d-E@*3o_F)&i0Xa((e>+^cU+F;cg?fBEYpKg z!ZEMq29)oEQLVBO94wK91}5VAz_TlYE#GdE zC1-Oz>*|V!0mUx=lrRRWnR1;z|QFEPxR!ClfI8WD#^G>-oDAqK; zP;@ivRmW?E{}$BY_Xnkgx?8Dtw_TRgWcY|OGI_m%_|P4T10LB*XOKnxCJ3;7UgfWI zfI(}#c1sTNt!&5(J_S22nMr*L`K;j*D)Qt|q(?{RK1bX~T$(5^iNw!27?;V%y+ah6 zSx7S*07a$|TG^lOF#tO#;=0&0ZU4*WVi)_C>n1O`i~}J(H1TPijzDU(`(b;1DWD^w z81cEw@nMx9M4W7%3+Yjo7fES;`!FvC38xqOZ4#8>gNXK^41^_^6aU7ev-rG}4z<4} z>KT~O-jdi?yECZo5vCO8-whTS+D=HrKyp%HG!5JH#I zDJl=E$;R?BUqj|nRB$e+Kw1Uapm5yT^7)+hiKQq3LU)`^2VJIW4nD3!w3lSV`)P)4 zY)uGrxA@MCI{&-dMx;mcOEqZGyq7g>G(upmQL@F!9%uvUp~-UIm(HSk`~_tn6}T}) z{DL7z+-Y7Rji{VTsSlkBQyJ&~MI(>+zC&rIUQ54vz3wGhnO5m3qTmlt{0_GURPhFgCr{xDb1=6_R|kO-(6yJOPP+64B02jlXS9JZ%^y{+mgM# z&&~Ie^I0&Qxrm@v#zhgI!wt^qiAdCWZN$hVOIs%7zZpWF zG5dkCwz6~2C5Tf}rL~c{iS!4=U7 zni2xff-A`zo`1$&d>I!A!(F<JYm|{Gur68)+5Z=m!ARhk+g$RNHH-p z0MEheSvsta%{VSjlEUmq9?;D=CtnzafL=FcdW547X9>w3Y^u*Cm9krx*}SI|w$EWibe{pI!Lq&;BDd*Z%U1xfV3<8*BgF)4M-H!tq;A z*Xh&?@~OjEyX&9G{W!35!BiW*fuZ)F{lhC7YME;R2ZW1IblpyCc>!f+Y_$JUj=L;5 z2aydfeDpf4o_^1+R^npfF;M73Eppx3SjY*#JI#J0KQQe*+~kGgzGdn#eT~FI^onAy zFalpoL@&Sb9#-d5JoZY@PX@uOK=h%`|NgD$8{{h+1LTn?)FEak&hDQr^a*GLmwf;y25$XFG4t>hr8YZoXHgvy&`8qpURHS4uSzZA~jm*8p&!M@;e!;~$AxGDl>= z1Z)TA9NB>qd9{QJD{C8Ty^Y?QSzYb+Zg+9qiyT=PDHJU0-V&KJNKz;}d`b+iKhNmn zq>$v2G%Gi;GjgMcnf_r~Y-K}@iYASGnaH@Dj?3R3~U9z(wPyoVOwJ4O;{ z&A+H`P0y^X^Wh6c<}f+EpT`A<7}-98aLxmKr?bwe>Q$s=&(`sdwvqUUb)Z(^!L-;a z2FI>W(2sw1v#GlW(?T(8I}I8Ta^nGBcYD{Gx5iCWdW4fwZcGjKIB&!=juP*iZ)p=F z-JGv#hx0zO^}@@j%feg?^j<;V&i*|2KJZR3unQ37T{nAa1|z1G{MbEF_8*hshKr&5 z;*s)BnxzlpDuGpNuZqVwO`|~VAdx}+Blty(7UCr?jpy4T)!O^5z8=@=7x@vnf&}V^ zbWD<195>^M_sSLDF3ImD?>*>{_I=K$&ywod^k5rfaSeTzR9gk^VNVCtU9GA5H&;%bU6H~4h0o1CVa8(C(U-tQ$v8jqe({+C*F2VW+|7R+ElYhi|5;R&y1 z_x7rpz#S9} zESLvZ?dfPZgVDz9P70rAobtx;qhvBzetnA02_}|xHq5rH1U|ME?=aS z0YgV?$FJCbT~@gL(K`|)xf5L zqIhcWo@V;ik=A2ePw@HlD8U^2K+y+SmbQ+PtlF#m#!!|r+4&Vb!yySx5Wfe2_gQmU zG=BxICGJu2ZRL$8i`)>lGXz;wU&cO&?&WSkxFkI5Ir+mi)rND*ZY(WnHLe}vb-`YB z9majBEf(&>oaMq52p1psKCZ3U62QeLvG{O_*>4NPaw?R6)lT8^dZms@XT*@~7|T2; z(q=WKIh0Gy49{`1?O^D9ni3~9+qLGe^=n0S=L!3Y9Qwe99hv9sPBMgqaxDoY{jlG+ zMvjB6+2dfhyi*;pY*0Vea;1oZD~v}_YSX65H)^m-{3jpgl_S#ZbGs00f-O1BpjqKH zQ};rf+vwbjWKfdAP;Mz`A`sJdibd1B3sh1_PHbtrhgG#u=f+=Gm%Y%K1Qb@_Hd8N|Q`DWD~LBsV~ovm;- zheAUE_D%>*!GPiMJ4`-uACxt9)bIuq;|TbwG=CRtD0Aj+za79P!}j0#BNx$eO-`60 ziF{DDDU5uEv98*slO{MhmLDRCk+&l;d`^$tF~MOyVUn;gDY4q(Cd*VbsDtob0MB2_(rdZ+|!CNNx$!&u-r&JvqCU1(EH!3h!NH4tfm-#9q} zxrI0hW>A$JBrR!ebOZd<+zt?n$X)RTuj(geg}GKr{UihP#E>i@7YZJcGeBn( zkvQaDw#IoB)L1E$aBh8sg!bCjb>Rx4S`-0*?i2o8{+lUSrzwB}VtOa(Ma>3ma*6C> z)dRp>BBw;DV0Q8rviBiXcU*iPLxsYN?{ou@pxD5A&ipmENC=WtZ>-nE{b6m7!^ymZPI)m1%w6s^j32m%t=Y;gE4egrby=k~WE6XJ z>69;WwA;?TNEAIQZM3fF(Uf)+Rq2diJ8UsB3wjJ#tMTrf+zf&m9{+afeeuMKt;a5N zax+LwIj{uw8YW6TbA~YEOz;LH4On8C(*zRf4C#yE8d7} z5;m9yy6Y&Ljw9Z4@*az4=$^f(j%7Zht_IFaBlpyW)7Y~cEpAH{NSzz$XqRrfYi?p8 z1oRWL3MG>7(F;3Mz1{JEG%q*!F`fBc;_^5LQZs(^BE1>x;KK}VLhMLi4m*D54mZ>V zPqpgSlCVl|4dgojeW7W3W{q|F2cPdo2(?l-U300|>$iQq-^(8(Ap1=85_3U!725-- zobZyIc-S*VMlW=0tZ#Q)wQ3IAJhFwh*KOyXB%Y;SC~Fo}Q{TX0dkdM~D*XG#I2=qf)bU-5CXfY0C8|5`8Io!F23;>BUxG1E7r)qxXLVQ_HGRjD2*68_d zl;rp7@WltNp>X?W5yPVictjab2ki6)56SMM?`N|GENua4O^dk?Kd-h8<|^*RTj?8X zHR|#-Y1I2d+bIOdNN3&d(PGoMo9Z;JdO%sIXcJ zKGR&!pO5)qt{_5KV}6}rf|+LX|xe3B(VmafZNa$1zOaOJAb z9I92N^9y<<=2ih5N{RWkgyK7gX)!*F3t-sV1?nQcp{y#S4P>HO`>)b+L)i;j7CWGi zq$b9lKWLjX+?yhA)RxPe%3T20412ddfiNE$w)%GL4!#Kz`w`tci4knmj3+*%H`$zq zAKV_*i5t5w)D2*L<46tKkE8q`rg%!9p!KT;8wFJY_p#d?2L5dKy6zFTTBnBfTU+{w z&j~=W;h9l8TQ;81(w&VbWGN25vMb9pY_J8rb&ZlL%rnF)nghECCP_amXfBVJrtL;- zqR;b^?$U|eNf(Yk4ibRWZc-EtdZCRWcJ4*kO2HqD1=LU?7Mr6KnP>d|a1exw&Z*r+ zI5V}=)kZGqobvq-=;o}DG-w#JR9`qL z)751yASlgiplKDoQaiMAdJXBSipnx8^AIYqdyDG~MsbUE*A3GZ#mqAXuiQ_4MV{%b zMmoSVuh-u2W*cdk$9V%5R_@%3vJnoAUV(lAgj9o-fvO2kW?OSe;lDJU4lBV=_h!h- zi6}B>;=1<*uibAHNNH>ij19P#<=;d8>?+tu1a)SS;47pvwhYs_&b=!|)%2$;PN%4H z5scZ&0=)V1*5)o7m3-QlGEPtG!X)71bFLHw6}fKb_o^5O$Y&lk3+yv00P$5VZ?o;Q z3GdhX?t8tp#ft}J15UiDtv7L{QCR>(oszej^9IwP9r|OLRq-wv&12O_J<@3C1GLe( z7fQyaz8YuK3Ij>rQqBm4I{UC@f*YzS7gfq(dlbCiAc5<(MO}(CNjc7!$UE~2t}NEg zYUV6II?G0XHE1KGg*O*o`0DMV)B9}DpBFGVqXBx+hfb4uX*P;%SXPA@CD~DR+<$4> zT96gjY&zy^)>nJx6`jWFM_czFJbd){v(LAG<9lE1JbC);-`U-J{^HB;|K@M~>G)tU zOb(BZ(;uCT##ui3ouaI!r)RIvf81MHUAuYf_MP>+Z0MT{{pZPRf?d^51;^dz{(e9^ z02oMs0c!za*EtswrcRPyqit54Q=kbCNIqf5po}7q7aH9TQ_dTg@OG+>M=JePhPUAG) z`|+dvz(01#$H#2aO};;sMuY~O*-cLBp*Ec=!&lbkeP@}v9~bbwb1$022t_90-8WGR zqa=`XdHX?@({4KKH?;Ul43laKUi!Y`K=C4^+`h`fMNC_i=zu!!lXwT!_oW1-DB`wm<-v~p6e z;kE$YHIXd2Z32{oFjxpMbkENx$y3}muWZ@oi3xV$UnCj8QI}9d2|*x~E+3)HX{If` z2(Z#Nk*IvZ#Thup9+IcZsqZD{ON{6=>r3};uEeI>78sC2lxDNO%<~Xx0G=f0k!gP~ zIk%`ptcq1a+&0bD*63Z(G-K7PidoP|7eaGrBd?FStYA)mzoE<`dz3(7!DK0-6%=)H z*;%$OVV=u{XrJu*&PN$SB`D^?J~0XlD%D6kk>~PbG~kgXO9^cj1h!~cH|cwWfOfzf zy7pKYWHAV40jc$~obrg)dL$X9#B>o=%}_nvIZCRh6GwKds_bL#nf0EhS{o|CUPwlC z&)m7gl*r*&wq|{LnbLeimVh0sDSE8Rqc;^m&4=P>(nLi0CA@=iWZ_hiPKUOT{K_-1 z*^fvU)%II)hwrE#7DvC4A0VI}#POs2fY14>A+_dEMHnY%-_ro;=fydq*(fm^GI5#7 z^k9?@%=R=JDXb)#7U9tC|gG0@*_OCS| ztTvt>2Xzz@kA-u;Qq-yX{!ymFc*sPg?BVx8O#Q8f!rucZS5l$uQCd zv{pzXFf&S-prMr(J^B=%X|hANBINWZDFV^(gf(#0Jz2*FAosFk85 zX(irkay$^QBQ|K@P5kMsaV^l-u8B5;SQ=}>Xho2A%&J^wM)2E4>iV0FS`x4^)7%0y z-axaJfb==-%{Ju0qS~$W{)&}AY5mg0)jOzFr>DKj3$3UVlSJro;M7Y5XBXxb1=zxN z(_Wj4RoO;> z^lR-=k)Brw)*yAUa@jx@XlU)s%pu1-UE!%`Tue}3bOR{3+eykYK1%#8qMbL< ztz2s5fWzHuJ%t~9Rwn0{JW-tJ*_Qy#iJRMid(l7WA5sf-ZAWkAqrlsod_gt*cEe|A z*)Gn^PQ?l<7Xm!xRyAL-QrEwGdy~!y_V3==G-sS`ynlCXlMko#@2==Nq^&JP`z!Zf zV#n5|mOA&^E09HFdPRStKyOUPz0{Bp*dy&@yj7VsFJGqJvpXodG4l1_acH z1m{|4!g~-m@14`NUKK~M%oVUv<$QnZTtX;vlKFhR0&x@gWGfOL1Fkrjxy6))@dzd=#W(IV_T- zb37b&N~k90mHE`HudT1&?yZMDq}u(Z!QGgHV${)_?P+9m@$<4u#)@hmnY_Sx?>fey1%gU;*iEdElPMcm?PcU0snt#iZ$|Lr7io63s5-ItkcjI?dCN{Ef z2oLvacf{6@-122S$V|$Erc1VQh!Q3X4@rE&`cf=)&E9c79Sw13M1JC7$@A!tn#9AC zRUs*=FJr|22Dc5va}{`&E|_mtz3f3tX|Z!JiciRoMb~yh1~UJA8HeBewTdGX*0ue>;e@V(@mcC~v|Ucj8~Mv@{iI@yLh_o4?+ zXKd`M2)X-c}{zS_Jz?iJ2jKF$lt*F$F$DH!-}ZaCr5DkKeY$~$4aLVvJWPtt zVVaDF{e`cvVVgmvX(KG-t>++E5NCfl(|{3}DVIr<+F^Ay9zcrQdG}fzmQ@EipZl(w z+MtO#jG;5!GGp#0S0--n_>Z^T)znut2&;zGIFT1motxqtoHQ88Bg?ePi}P!0^S8Fk zDmUX3-~(4>_$K|}@Q||CyQxzo^*lX(zEt+tjA(mr_cPA?{+lbR+W2`d-K_y(h?e%(Mm!`r zBvXZ?64E47fvAvMq#KkdYDJ{8uL;>T!Tc-Xb6iIo>3vm>n3pv_>T<+V1RkRPOYHoR zl`#D=uEgjgFR5AhDv)DuVal}AdpXlz$o7OZ*-IklJBRvMu~Pz$nQaiBHm?UYDZ-E3 z)Ymu(vvQ_!?#0pd6Udq9hTDcUD+{DP(*FXLk(VgSfKS;_J#jjT%W`sD#AVWtqENVo z*#Mfc^X}3n+>OpmL;&}^YnZ=Yh<;FCOrjsY>~-$G`UEB{u@%ZR)CIn$N?dV|Q&zZ@ zbDCKeb@MRGo~*)aWC%Kw5H?Re@D*hEkS`yQRlH2Fr&3+0F6t?~jr#T^y`Y5wyn@na z8@KjV-k9vf6*BM6nw-@JrOFCxaBepPRc0O<7Cb=vZSEp3!V81#Te=p3e=foq-Scdn z>L#Jl&(PPbktQ-vax=z|>P!D&KFx-zl{GOOW3s`97Yy>Exd;kEvuChrdJ+5LHOP)FKy>a&cw3)Ku!3S+Bim9a4Rn2T zdqCuFts|L(f56P@=v!esxV_w2aQ!T_qo;X6X_MZP8p9rc`U6PI0+R5%Ykdwq{_Ns?}Fvp>iY&YEftb5Wp5EpJ4O}3>3_# zB8$H$U~df>Zu(ZD>1QaLELtr#0&ihGUvBgK(d=oAy)UV;L-)f$>+BKw^@L|!9GTyg zM0rLhJD)v&_Q+;KM5eN5`I(W}TF5=>G;ndzo0Z;b%};zk1w93EYh1KXg%?efMlQaO znUWFrsiA@)A@Mi6W~;E0zDP+I75#*$2v-xKA=I>TLyC4dZulzQ^yXC7 z&P47|%Yo=|3QJArU}k8*Jg>_0)du23I}{axG#2f`Qaz^6A&kpY!8LYR$%k~m0vIei=(ONvIQqAJRHsdC?qst_l9k@LvCc;hBiTvFv z$shg@z2(3dqfrZ7OZ(K$5W8?37m{()(g7C>D8WmdZzoDsFkGlQclmjdr4pOQ0Y<7` z35zzaKD9$s0Z(&gc@@gk_lyopdJiuGoB|Iv*PX53G%GzYcCC4uf-29-WWd9yFrWo) zyBn@zG@1zapFyR2#ljd5|3vslsqr3i3M;%qppLw`jO3}4mQ7{`dZDr|8=2#{C=n&n zefes?y|DP^JD+^_tGE06nw;2E>HiRTlT{>!K^RNcC-QrM!55nO*Er{9||yvR!L$4^jAnzN)S~(F!fSA`5CfDzPO9 zBi^bS=^@a_MC_%JNFwo2P;GMaCa+Um@j`A5j_2`x z8yH-ml3iP9^QgZz(GM2hKoGs5VMvJ4g2pOQsYTKu&AuJJV08xT_C(?w ztlL?ctFqQ`3STdVSsUAxaQjVRw$}H1(_CX9K^+>h|j0lbTmCmCW9(JO$J*}9^K#C zeYU&xTQ8ox_~ON9kDfhv{`AX7527m$*K}5}#;mG(Oc2o6cJ8gLdXjXVhE5M`}mR@ZmpLyDlb(*bGrW`uLFiwpF*Mg`C+dBD5}0$Wh+Zg9qC z$CJxE^ue? zWlS_1f?OHbcg&iTPk~A{YkLIvu(T@Bb1BR%{j#)s^huzIa@-s&V0xI^z+fw^B(tQD ziQCl!114ej)kCSJLkZw&a72n2^7msQLez{KZmY%*(-~FhVOoe1=ow^r;DQiACBK_J zkVd!4!~HSTtKT3|(iuvL{(n>yy81T|FjGJ%ew=P79`JW(xU13^_<%`EWm7;~ zcv&YdEf`Rj7W~5_FNgr9F6qmX7tRb=>YC$kiH2!;avABNVVO=l$dK%St_vxSpuCje zwDotQIP~2J-7K{=5gI`@kIv}EygHeYnbK+vGctX?Mu6d2f1LSswIm)YkMUBC+C4Y*bmo>rLDeXk}N(LrP-0ADu^c<2z^S(EdQ8Kf8wEu z#8aD0?;FW2KhV}ZD3X{$BGItP4+$L%j_bJ1Ygt54YG#)vVpag-;cyO$sfo@we%*oh z6z1Z_VKXXONhny47Qn} zpxz3f)Ky!y^0R!W6_{S&QXQXG=CnJzB=5v@L7A0wvbvzrKxE@ZU1T?c!olT~*(emD z0eG{3INcx~6-hiiXVt(Xq&Z^(60EI;K0$MYR@@S)HVV2u z_;HcTIqT4Y5)}G=%D%```dRztnNy%zMT z78Tdy91FPuBG+??Q(-nDre?HmuV8+Aiy&ASdKe+ijlmiuf?1)TZS9`vm40j2O@(uo zXL)f_(wQEhBZ)IZ*=ouqGfJzZh({*R^u!h?^*c_=r1Yn!)|U+r_mMBA6d6o_$%eB^ zbspyXm^7`NAb}mc^38f{z6w_;-(cf#voTCud^IJ7qzG$mOqpZW%<$G2KT)Hys;x*o z>E}FS&XD`0e2nmXs(2}lG0!hTq9UvU!biR^~sB>2qm4A zJ4MP5%d56LT(^yFSfp5uo-?M*HUR=?f+7stvONYZV-TF2qaP8ovbsT77?XbRZ%T-36EpWeJ8w2L#WeF5}#)w|eW*1xNYkFSJ=)Zfd)a&D7kIIGL&GfApYk$dz9X{rlxWkyL{Rt9Md)5CONw4r#E zR_BYRVEmL0`4kLb(S{>&<{8>ZYLiA-k8qz%t-`Ebo zXS6yZ=7y#)cT)l<(|f%_@h|M#u%dwyV#+%~TwNVz1VZR(M-%}5figV@;dZpC;}36VrQr zc<4uus*iX&s#3U+>EC7PeP-G5ns>_^WDm^%L#s?#TLe*x=SPao1#pc3yr3DH-OF0J zby+LL;L6kZ2Q6vy&Oc-BWwBseTTreF>f^Jy{qXjyvOWa-OXa3@? z#-4D~1v{;FV#z<;?8vpTb6$pc=Hxk>40-LqdRhz<3F)h0uvSKhyCGL9A*o&(nd}J? zMp4+do@GYjasr@pPrBoy8I37fshf*x*1BXQ{ziVl7j!$#R=&stIDJV&oSY%b?oia= z>E$^0{J}FB(piY`$Qg|1>EI-(-UE^gCd?|>{te{D31se*L}Gn1J$yU7xR6+tY0`pN z5Q3?v+2D?mA{^N}5LqtVDF0Z_paLE_FjBV5$7xYk(u)J+3KPT)&`t3k3t5%dxfyD7 zDMHk)8t;iC#Y`WoWHLBm`KQC3-Fkq?WMAKiQ=A9aFV~tI^|vQA^wu?BM$Xo7`2LvP zqUa%yIdn5|DQ3ky1spI|beR&c#Nx!)_S9y_BTHR}Wl5Y*!JT`s8!ejl)==)xLmjzm zyEk^e7Lq}ix6`MV=1wS~p8hA}At!S3{+Q|OrTO1tmd}1vV?id7kf$srFwiQHK|Qj`EgOi zp0d((*1xW`%q-74=fWiZAq`K_G@4czqF0J4?%P_KS`|?V`rOW{q&SU72Bs3GpvhlhOOg{uq%i)@feX6`tyK)oX7FPuo^M}Y0$iDtnt!S57j0Op2t zm6jc2b5?(1Y+>YCt}d&%z=?@5u@~4X&jtyM1Y!ZJxf&eJd}@gbw?rVt6n0iaWa2kx zaY}I&ID~@;d_L+*HZOZSKp@(~tzME1{ad|Ap=}7cunSbJJiNIE$xp*(R*}yoFVZ7i ze$v}C<@Df3$)M`DS2oRP)Z+a3&@}BD=tgjJYx%4nC2XQgPer3*8 zYT7wcN;bCMx!3laTqJwxoRa$y*_8b9WC27(M^H!U*trq+&c_G&=>GYOEFI)S&LgI< zDPrUr3+Gm(W)wH-6bxQ+v*n}LRT1+C7KifQEQl%{#Ru_VT1Ne7|8Z~s?&JNfJNsL5 z{@cK=6BpwS9U(!HN2~kmkN5BQGzJJ>r~HhPwaVwM2m9-HYM-YQ@8fOzaS)G^Y#0}= z@4IXJ>$kk`#ju0ew$4HR+ADNte|^mrI*tpZ_#YHWjJ$tdxwZZEyR~v@)?9Agl^f;L zp@4gLeSdw$eJS!1kxPYQ;_k!!^#}HI5*O96>wW#f{`y1v@h~kC_wDY@{Vg}l!%;q& zoOdV;(ayr%)&2W!7LF3e(xcV=yIcEr-KdVyt3rF%Z}m7mI_{k2qbfd1I%RsK^K*A= zf6I-D5+|nFQ76exlTkkLfn3|)a%e%!STW{{goO@n?%#KSjN;-b>EuP69VMMXS`0>h zQ;+wz9LaFeA{ow>ySab=ro|a#kcW_)`*$5(L7>tFD4jGr=}ZzD9nE$3T%e)}=!Q?#HUthI-mxCf7 zjl$j?y_Dm0l$>`aaZ%x_na*K6@SxbbwSV6cxs=5}eo^$ezJGtq^~i0Wr5Pf^s7c0B zm1jp&ulc*{`#va>xHuUl-YC48FDFSdIPM(8qfwswh*;g<@IH-S&j!76oV0fwx!Y zCXNY<^b~mr-&H))!yrDPcX~HFy%lf%w)XGex43Sg_+f#`^ z;?1JGgAT2$6QE*TckV4{Lv5P5MI0cL$@M^n3+>V4{rl@+Xv}wg(R`d2{(9_|%?72R zMC6e4(Xdbk>u>Pgh57Jn;5k^*{gz>GbH*w~Lrs6wBpa(5pF$Qr8v=%L8(cdUY5WaS zYAw=B)gB%b6df`?Qy2(Y{|OzmosgPdKof2UY0x|5rFj)5cJe9$vS21&Wa;bGhdG;7 z+<-SKy`a+5T4+23(TigAD1*A==8Ola{z9*oL%SkQ{BUkNul>Hmnfd)}zcAPKqwD+a zZ~xkjg~jiDvb3@JY5(4LfBohD{;MDS_E&G-ey!)|MN&);O7oS8zTMk`1M=IwhxE^C zkN;WWe^&XQHU8%&|8tA~xy}FBWsIKa+pFvR{x1K+t*_qaUk~V?HGa9qFW2NH1F-gp zi`Yd^n!U+@-Qqg8xXvxEbBpWT<|22v$Q>?nhl|{KWJSv#QXT;%Yl_T+&64AH;7l$x zqX13*tS>>G$ZWZCd7iL&Mt#VW=>dd^lvH2B9Dd*g1=Lv}z?zZ|Y?lw8?CmCHKH_s& zdKW2zzBX_d!ss+HQ9MbzRWeGBig=9tv0*lk8IzvAk-e^yblc_Q>1cHRAkVU7fL*HX zPlQ|u4l|4W1S7)Uc{cEQs2$dDMvTx*O?D0M=oXnnw7siTk})=n$hI;&7X9=f9vmm( zwY1yz<1S2EPpXLeRa{N^ zut-#%XM^J+&(a?!dJnO6UVuzzAQnV1`_{0Bmjt;rTECc(6W8fF!7Ut9{yL9+T;GaH z;iSMTHwRo>rOhzVEI9CJeH7?AAU2&+Tklh|Hg2Ld?k~_xqIQpt$7I#S@C?BQ>n_|_ zq8mAe>5vX00_9y*&}vAwy@yaYOe7{pNT8qb70A{HwCa37m()C$YuTI`ix`TK)kK4% zbdY2vr@%#i{1NUirsEg5grt^LdCsh(-a(FCGgLOJ{CfSi#6o!3Wuq8y`y}^K>*KXZ zMsx#ao|)a}4@eJu@cAy^h$66(!Rz(<$`z(56m}Om=NiZLLecvz=jfx8zqvMCco7v-nSGyd5RfA-} zqpqps?06@9cv*a+ERRf7yK9w0)d)$9Zas#)z(>(2cYc@<)|)g*+#uxL=F^pW%(%X) zGRrz+w&$gi6xFb1$?3f!8BiK~QCjE79S?3jYHAj2|L#h5Kc6k4MREH#Oq}z)H#)9{ zpvjBxH}Eh|m)JI>6t{7xbTjVNEKGtpzu>Y?!+&@j0PDBr>_wMgC8>EbU5Y z-o?wjuaMP90l9p{Qb9+dn_tdGDQd|Qv#kPxBShN9#dpq2$anEvJ%!A!89tShYczBR!hZ3Y7 zeBH*4zG)TSQH-@2XAI)XUCtQPB8_HmIxfFViu5q7T*rG*5p^D>#a1>{xf6V@*WH^Q z9;V@qM{42>>di1o@D<6rgBNw;7UVW6MYCtuf~NF*g`WQjKF)Yy!>?o%tl3qA5_;fa z?>wvG5Dh{^<#r}?r-UNQQPUKfXgAL*^IMN1dw&d6`3n{&JyA_QegB3h@6rZ2L$PG4 zf;KV8g_uumjv7+7z1UU;mwd&_F>0A`rl+4Y@QH6k<#QjDfq@3FHKc2dvgAxcXyjZH z!=Wq3Oc)LhsRxl(`B|0}eW@m!k$!ajT2T(n!MXV|9_A&Er{L-aa_Bpzr|Ffwnqo%8 zI0@qI;r#^0X1>@UwVcjnW>{GZ&wOAq;##{2uE^vfo^l{xA10^iAlc!=I=asu(#sC+ zzalLGB8q2zT>YphunhxNNeN~xg-DcU+`2w!Gt90JC6n2RL|)Xtj(!kw z1J1a4T+VdKElMUZzN}SSB+XQMw91!XYdbqcCeHS(bcQvWK;^_5!h`ncktI1kVEZIF z6VeVu)NwML;@BoRdK_%>+7H1*#<$ZXtG-71-2+0S-#y!g;9T23pxY}P791qnZXFfc zonS+OQiO=O4EmeoqjYc{ks9u|+qtKoe5D-E9I|+ZhEmu>(!;}~Ae$6VcM#OYNVcQA zL1wD7Dots@)fg}Vzh1-bq4CImPW}ncc9ZO3FwLZu!52#&0VaHadLZ1%3*&ENdbvmoQw$0E!{+p2zedH3pE(@+e(D)NmU8VMO~xfWLauUMDMYX; znnpMXfM`05trfJC^3#i_KT-bxfea#+(VMC^uR=SiBSevZek^Ng^9^zmnpjP9x=2z6bm($oPRHZ(E^hS7;Zc(G z2NX{DU2CxB$Eh|&I;r%qfk5WX#MK977q1H!JwZY9dgKX?Z)D{ndkiHeQsB7VSBspsykz*5YO?{FJxHF6DT%i?0ekp{asFQsU<|t}4X7LkAfm?cJ<))nfyF}c&F$Ti+i#$Im%_u!d zJadxW>Oh!!D?cy%k~En!;c7w@AzW>-`4kK@uDBuQps zC=MYPlRBG>%A{|DzAge$X7(LAR|l~y6g8Fa0xI`pC;`cd@aS(g|KgF=-TFPA?tw^~ z3~>lwz%{8e!ek~@)e^}QcyYxS=(b(LWHyhL`dMJn_cx!ez|%bw^}0Qn97%~H5j5lD zz~e|FknJRe*xK1Z;Qq=yGZ3<))+{FhWJrS~Dg9+V7$+5+2Iu({=0^$57k{XPpm(Pvo0?_HPEG0Cs!)w^Xoxr^BQgl2{Vz_OWY=S3?iibOaA=GKL z5`u?6>0-XZO1j7d!!Ylp90Gq|f1V?N)P`ja{3p z6-i3AD@$44kzac+MzJG8gdrzsk4Qasb^|sIge!vM{#ljCbZdp}`VN}X4r^O(P$c^k z8#|IFY9DRGAu;eq0T-k@2e$<&)cx6BE|Qt{GMpH1faz)41oPXFT}2eoGd(;QJd zFEdvG8A(`yhN&`nD*(wLUdp2E}4!47Qm)1%OyYbehYmqkSPqPLKy4kX` z(TGv+gqOxVcnlyULYIA4dEaYQn5T|nwzj!0{Wk5}&OH|&xUB)i`~*%`JW3#%_sljT z7L&3n8m!X3zT<5$U1d6fNIP|!HD)+U463Sdd>W@C+~+d8XKB=W@z@FWAfF*t2gF?U z1kW7WaJ4TOf)HR6$#@h^Kzat=0D9NGTTHel6FwR;Rt9fIp^&@SJxxSzFZ`yX>vx2fS5m7QRr}+ zo%}Q@M)CO){0*5Yk`9*eporrSH!GHAg7eaXA0-E6ZSsaVc_ph$qqKq!)rj$?et_Ej zY(J9*H$28t zgGwXwNE)vWcutQ_2zmE;*88-DF6`Bo^7=()CA;dX?)B)hd`vjG&$zm75P)gMIfBZ{ zk3V|Hm^y5=_`+}z0(Sf0?|!@pJCT#tzwAZpvt3Ig%HXFEVK11iFP-70&-%fzjMnwN z=0zslqbx&|h3;jC*^nu`-N+6h?qcuCJOxk|Ut*Y$T^#?tUsp3r{gNq9(#gaNI?|L} z*C{J2?flZ$x-GO3avy(04mUWNOI!hR5ZGo&Syt=BE$~NkCOxu_u;hN zODZ1OqwEw!OD+<(`EkS1=tmoVJzHC?BkKOJ(U|?V;)n9h(b3mF{YfV(aP=1Nf@Zrz zu;tvISOeDXE`l0M%-m)yz?|LV9bwUsQvpUs`tHDJI~G|C4HGMyi`2+vr*saj&M8e4 z22AK|L@GU5HU-CPHqE|BhVZp*q=85&pu;@Qix7hMCr%QHLH{!}I!iJkg*G)YL#VT4 zX;R6r*&+~-@raU=IFvTp{-1fY>4RyZduq~K zx4g4vK`DITBD#l=&-zoBnd=7G-{O%uOGt|%yvapo^};(Pjv#IjnY z+dcGLn-gl6-HLAgR7$v#X7cezKi~R;YriDzT8-jw{`Ai3ueSch-}qMRkGFX4HYl3z z!L+RM@rSKHXjQFN>!j8C@aN1wOGmBNhX;TBucY5<{lSO7`$4NUZnb{?Tfft4efSSg zzSTNvwXXflDbB(iwp!Qzh}TTgYMITSzW(t?*ZuHD95(6W)NzUMNNXBle!{s$;GugE zpDd4YlJJKI@yQR1GXC|IUU!ZDTj_NtQ$*R@W6jYeMK?eG2v8JxUUkRWbkIGB2Pe}> zQovmQ%>uW+a%JG8D1ZwzIcLU|RUI&f=O(Nq5{7F&s`Sn$R_4x!c7vHg?Ches>}(1F zJuMGb!l?mr+;}PA5(fk^0@YtNu}CRk@{A*z{Xq)4%se|2nbh*MH})5u5%6Vbh-moBsVltH!23 zCru=+*0pcX;!H-%6G*oUZ$gZ;e)Llc%b!$O=<46(L7r7{nk9uVI{x%shUwb}f1P0Z zJ%Q<`nnlMi)|!I&_{ZN8))?ejwf)#cr%828nI!%9&rGz^gIu8hmXRUM&MPW@_IcioWH^oW$;A|7{;AGLqy_WF(~lB2Y&igTPyVPOx3)t4*XVLmuXif)?Y?&@J$^vk%4 zS3qh)^%J{5{RySCL0p_9$s{Qb^2#T(|MTg8L8Skm{(UC1|3Jv>gJv@O1-~88*dP3q zH=;2vN@3iN(z5E?!ao!}X}LQoa?0LN76Sp>77~Pbg@$F-U&g|-+>OiQ0!hQ(skh1T zq?=~xg`H^`>MN-Rc(J~!uSpWSDZ6xl7j?y52qvyNlz1{}Y!mMZlkr206PL!KV+l zMf}oLrvEcDl6{;Hm$!C0+s{}s_$>E7{@?#AvE2XjOaB{5_P^Mq6#inZ0jP)dci_K& z?}IQl_v4SQyUPtlIfd5f1A{WG6X>36!#v7hurPU{aWp2KsDMmLgX0F+afzTa5PWpN zgBp8~PtJ?<=(sWqgGIC2>)qA=@F6lAsR)?#UWO^7oKzI&7Kbg=Cf+U?!<79h{sDm;H#l@*a!&p+$j54Dv) z@elq9iOxH}|4&GC{v{TjAO1blYWWJw$3Y8_o#7iu&i~~4)g>oG(j+%ul!vyNuO$;>gi0j0}%;fylmjB7N(amq9@!37t`dh++BsjV4aR9RE*AD!_B$8ohq z?8}3f{j>l1vm&2PI3}s-b1h4eUvqm{J};&?RX?}!r<4n9?&sZUhFqtO-^J;@{jeFf z-8dWOR`OI_pa{?Yy+k=8n30bW;8Rpc4t?MwUTyM_Uf>t^|e}S zTQe=GS2Nw??jC976DNe@gK!53;R;|dgd>C-;{Y*Wz>vfN0{>tq0RrK^&%n3){obor z)zv*cT1mD^zVG)R`=_1huJhHq>(#4p;vzY~31{B4aqz$gV$fi=b*z6y@F9O z_dD*GIXe)}-~;}RffJVJhe!FiW^|MpjjjXZ$P15msP~4@P=^MG!@uYIt?*>(0j@Sn zq`*J8?JCqHQg3RS2 zkRjBKUR-ceT1RTXPCl&z4(~UL#U+l3wKNvNd#nDO<68a_Pw@k})hFE2ICyg?wF4Oz z#h4UaL0HggkyW3*S}N_Kq#L1l_Zz;UgsV93!3QyyQco6Q7CTh11d&=2Ys4PQsFls) zgEPQttM*pw*^!jIg-^3`5l0iow@o`f2Hi-sBN+gWZBV%>c>Wobpi2eSGg>j#VHZ$<@H?Nx$p8^j_&`uJePx80)mvOS|&@RCGn|?sz-QosP_h*;mv9U z+N$vs&+6wigRLTJ7SD?g@;$sG*gck?AUuMiIYStU?q~|SXw~AC(vSs?jKD}v1qx4+ z5Z1>D(-<7)+0HuixRQ73^MDUs#n;@N9E9t?2l2e2r^TD8;6e38s`V(M7b**T6rfV4`NYx4n%6g7_jtx=BRkKG7S=c^Q zP2lEWzs$%gXmk}R>y@cWyZDyf)0~9Cr1mDnf!SL2tU7H@im$1?34!5LR#B~jf+Oi4 zv8Y77BKfIi)0{%zjsWsYX!wqR1(g$V%*4&bv{gK4Ff1Z9H7F`M==Iu5aACy~9hq+#vo7|@fB`fkiGQq zELs|poWhI;?$?A|1%w5Ad1tu=Z>m-R-rEz;v~poiK(ixdU1R!4gXD(+>90=<3`GTQ zbtZ8?40c_OC4i8-)|28%WE1Hlqn-jwfDtb(?Ldb_l+Q$DsN zKn^znk+{P-NE?J+3MWnswn2MXaz zs=$)OwI3agQ@qlk40~J&z$1f|?MgbzsNKJ5TNDf*eyF+{g50QFWQSZ}m{sgaO02DEL|zXHr>SF8!}93$a3TUmA|h(xFw&6D z!_`%zc&W_H#GGjllspreo=8bR$T(xUoWS5O!Gt|M0{f% z6^0Xh5+gQbD1oI3hxvpENH`jJf;R){3$I~g3r(<<8}fcvbUaB%Q)8keh@#!%(~7(|9=1-plC!l#-f6-X?`bBT?72OYXihK+upZ;@kJ ztk>;VA)d-*10)lU6o6&RWU}@gBYZ+CAk-m{MdleCbdm&1lZGffy-TVdB~PU+iO;fx zIP5GU$*o{r#fm0)qGEWSwSYl&HOP{nbgXz=Ni8u)vnZ^6tz+aUJW~3Ah87W8ip5%D zf+%3+SulwjHEwlU4zV>8jkeaR#dB8p5O*E-4d0Zx`GXI=#o!rvNrt={D+PjCUYQZ+ zXM%gdrCuXHa;W0=47zqB)FO~+tZgSh0TxlDb--6mPmMn& z_-H%;KEbHO(V5Vo#;P`6CPTbtdCVkxht|9XfaVFaQ1xZ%u%6}wp16Yq(dl5tF#s`i z2uj?Gpdz~Dt;Y}*1>sgA;C&MAje~}wh{_YEsb6$#6R%8$n1!BZytDyFk;!OEnfOQ? z&>U?b4&+dvsRZPr335S(*cmCY?P6L;FU{J9PXt#a00N(_K7X+kC;{t}EwS*^&P==c zxOQH2%3;y+=ime~k`syF(@cO=b;tJM)Ij*!jb*Och)XXW>FJ45svak`ia%kBRamvE zqq5;`(qbWrKjh;mUp%WJVz^Zv`FvD+QiqP^ijts-X<->E!V8NLv4Av$!X zCv^rtFCvOwOu?9;aH1y%;Y6VZAh4+3I|wm)Z6t9j1Q5v+R?*okgo1IRzxuWTBEnijF1-jFE4G z-45j6vZA&r-YfIFgbGA2-44B!0W9Jnc}=1<;{6Xb>?*^XDRNaNoWWaSL3WGlzFRTS z3c;ow;;wV|BRK)#^3j;v()be?8UXXqFMC*7L_pmOb_+&{_m)awuPLcPhYY2|*O>_Ouc{!){Mx+JQG%PF+U1$U5K{W+)DQ*k_B3P|xeeF%iUhv7pc9Bg2K?$`!Vo;1Nk#4^NA;Rc7$7KnPfvH*ub z{Nnnj_9h2I&NS2#fv2o#aYQko#B0xw#?Xk)7=4^Ky>=}P5Q5X>1!tT={^W0%8? zl{#^?{x4(mz+J>dYveq+Cm%ci39R4K^BRSx%ZFQK!Vd1o8dDXZXMKrc`UR9Iz|-nd z@bWTsjp00faL`Z^a%~(Ah5jHf5Jl_CNR<%`oN*NDz+G}>1ZLRsvyc)kIuf{>O!N;y zW&szay@P;L2BSc)9K?!PMQ(Y5A?nfw!$w5Z0$p;3)6|Q^#B`h3A+;1JwL zUB`C{PHEhCt?>QDv3m`n1`oTX0UI(hil<`tM|kaq`gH|Xyg@%_kRepwAg(r>>3Ue1 zPCQ3!NWC98QGhIC@_l>op5_t@sbD!HU{UQtHIE0e3<gR$a5JgcYo0S)J&smaF=b2(u5=FpTJ$LeM04WUv17D(h0Wuh^|52e zR90MB5?|xGU>AgB!VLn$m822jY^l8{1JK|gH6mPC60K-S(kzG~o!zDOCLGtAwQPu_ ziPQmz>LelgN2H@jb254>Fni+1C0kq3$buOL*spC6tYNN{N=;Rj!$C9(Pg@*usy7Ys zc15!YI-@2v1w~mS@)h1g8r+710d|AJeM5G>#2~bV1oDt~L7LbSE`dA|*0$~Vps`7u z)#IJCqRqG6AyPO?#^+XTxaM9DZI!RY-p`JysnDj!P(N=@96@>tiA)IQkPm<|j_P|s zH3&-k27sZ&w!}8<)YJ|w9)U)3$h60+)5pz%(hCLsg_iV?DU-bh%3}nLwK!&-1`e6_ zA*Q9* z>Bbj@Treylx%g4SJ_!Z{eDvhCz+KpRlt4%bwp)Lb6qg8RrtB|)q`;`~4B}8fd=Kdq zwO~{$9YV^ZA^R&44s!&0h)$cD2{qC}mO((&5JgPHSF6OY1qfcj@;t}I+s3tsC>;bM zPc$tHUo<@KI}R^7HlDf-?rrkr&>-Wp&z+eWj%+|dx0#T>%u|xyh$vh54xY_qcpD*L z8NFwhPeB~1gh*maA)PKE4^B*s3JV+s;gnUxqehZXrg>sJ9h0BZ4GJt&vk0D5GHp1z zp@AZ?9d|voLk+Tzn(DMYDtv$231UH{ycn30Frhx=7#GdysfsacPE|z8YYd*=UNKzH zoWg8xLxwwFbQbOFa)cbQehDD}o>>1&T~ENO9qq9ph`7i~t9|TFmikWKl{j5U953V3 zRi4|P=A=SOKtDK%flGgc!zIbW#t1Oq@KShAsrDEf((@n8c^mKI30x6$fD1g@p?w3L zssfKK%$%oiGX(a9Kyr}LQBOG`zbh!x%jhMdlu}7_oqpw<-zXVwIaMe*h53j8i1Izl z3o$i9lEh$hm}{g6QN~9@^o@#5Tv^{Li?WF+ObY>7@uyAhOnXkr^x;;A zI0i`54sZj(f znz(MU)i$O=d*fTdj4KO9sV7^GJI<{n5f9F8H>>=*wL5H(UN`2cLSk>2ibg>==QpMf>68Vq}w?t6o;5HK-r7l-aFfhLYLck|2AMx!rJ+?|e_P zT^%(_c8DmSfSJh-2UePUeicBe>wOH(E?8&bIMOYJsGCuLr<|6E3SnhKy$d@un-h~E zy;3VSsT`je!5%6WMA=-vqL`Ams|06U#?<(x=La@3O&`?C7#IFbMb3Mbj?dB zx@JO8))VBvy`*lV5KVL0MuI1<>@{jDke+Hs6ZEJeJf^5s6#HvI8r5J9+Cw=Py)vwQ z7JS6i7|_K|sxzzh+9B2#_T&N91^)4Xy%zz{-IUFI7xuMvgcEkdST)7yz`tmuI|| zwYD#$l@2oP*pV7l>^RQ?)``Snw8X)t<|O593(<)RV#Jr~Tp>is>QX!*8C-(X&G6(CqKhxEHePpap0L1U zg{MHU5F2Ufe6U>H^8xfan}k`ti`q)7yU>%5a8UYm`{u{<2!s{$gr^f z;~xaMx2G%J(Vp&x(W%^(brMrH(Rhn_p6zVQbhPC%xlX8fy*ce!zL`h+5ixhL{%h>%dn zDS14#SG;Noc)VZ_GM1*+p&)fAk)jPUsf+s(A}@d#S9_5Hrd;@+ocgVX#r^*xca0+b zv5H(NjQ;RaZW(#@|EeUDQcRM*w%aZr4HPY3<+Ig8vHQ)1L3_p-vWbkSWz#oZ4=ZKUpa!P|c&a7S6-jKHt6tS8 zm6o^%cbysP-WUi&Y~e?C9EA>ZX`amS6ju;$Hq*0dp2!vxyt!!37}b&wVZHF61!{?E z?P;EDhc00;IIad&%w+QTf1;IZ)#VM3pr!|{bfkH*gQrx|;bx}-u{=ge)y;$2MoIiM z_~!W@n8jW=AWb9cO!H(XPw^3(i%Y!ZDRUZE;3>h&bHtTiq7}HdD?HiQ!buznXpB%n z14dVxC%brxk2)o*up~R2@hh#aIqf)pD;(l!U34wqY^`9KR#3!RA#cN?;}%;z+nSka z^-SBdAhmC+>y#ZkJS0E>SVyhf?lez!t2O8cpCZlmxM81es#TZ=0{uH+Dhws_a z#LyDi0|6sL%7I-jq43e)5K^svbkYJ1PgweLb^eYfSrGOl!=`9*!hNkMQFjU}|Af#} zh4WQvXHuX94J#8Cgtv^UP~|YJLij+0cT~Lr5QZBMBvR12GJy5ggMu~92d|Du<`e7} z0M|Sk?o*1mpvMjwx}f(ci`DceU({i*0fZxSl_}+eemmp(mBniMl`mGpV#6~g?izI5 z71uG9s_B=WKX$Gh9uzJcvff}^-Erdz3f2rQconnsz^TR3W29zGhis{u&KMGEF@kX$51Etpp1fhV4p6BUhJ3L%e5|gOQCW6j|F?1YXfd z1UFjcK*E^0wowG=Oe0auXO)8q8q(mq6=oHjGaV=HzE1Z724LEUvLx|6g-KXKvE z@Di`3KnL+69MQUVHLINI+P2rqW=tF!tS0F#mq{&jrIhBRB6ajRHt|DvB39YZXp4`G z3lA+sM=KM*<_%c?z^ZCq=+lGaw!`LPB%(f6b(F<4F-*+1q(KSOOt-1+QQnrU?O&ey z5l3Eyy&)kJcfL6a8f300)hV7|c&U5sVgMJUDEWS*RE*3priQM3sL29V#g*N@ovSiE zoRSTX*oDYu48T9GdZ6RB<04iY~IN|v*6f8J$W?VuFK(0-LN#& zoBz75WGi>gnW_gSH89`;B)P(r3o@9AtY2a**kL3wVH1&*BpBS`IAGeQYm_D&Ew4ii zGHY*V9JgSKBHB~&V3d3|H7~}^P__wyjeT>5ZJVII1bHZ8ou5sd?#K3c#qbMrR3FZ- zK`!l>@dCX%p6Dha{3O>q?!0hk9P@m*p6wX=YmPxAZpt^^@-a973m0PANkS)gM6mhJgQsWf7jmPVm}IY5caWXucOLEbW*$aSSN z9qIOr<^?Xu3+CX4V|78n;^Jaj+dRVy=2As-0dJjcqQDjk%Jq1~HD|07YHZ^}qdc*1 zK48yz;Tfhe!S*q3^~xaqL=tL{W6Sd$fDkWMO+;?WGMMJ05Hn@+!kk%{=Ot%WEMM7i zA+5V_SS1e~&;dJ5z)1#dn#Mbs7=oLdeQQ2Q6=PI=r)>CEK@!<^!l%guUq~mz@Iy_` zEJpj$`v9qv=f~oh_pw&F&q}BT)y- z!`1S%32{mC-PnkCo#|rM813ok{OsWh=#+jHHfnGy0&vm;B8Ctom4;}+bUiq4D?{Z%0W+~Y#?-==t}3(*@XDFBXN}TCQgYHk=L)L zf%bGZ+yHV8MZ@s}h&Uk^OgF2d?nHRZg6ZaXQbZv(aXidh5D68^#&Jhn*H*S{2VJKX z$2M)BvZNRR7*wRX35S6T{t#3h!dh|!s>p%~VOoJM1^R8#@w5C$9&a*ALV-j&q0}uf zB9d65ho`ba^_Q9f6qaVZn2#9s5lRCFZDlytR_%#$F2*2f#i$QV>~%!AVi!#JXrx-v z@pEdV*oHn-8Ujun-^yvqIpp9T1$lH0bVE^AjsqJML)0BFZhwFaxE32YM!4>*zFhTu z*vvCH=#!XgiYOD*0bvs8W?D_-liH|O(|mf;9z;7e(t_{sD`>-!Y@{oKkpS<~`s0ak zNhpZG5P(QVu}D~;AdD5F3D`iw?C~X!C$z@X;+1GKL?loeBC@R6a0S;Z#FPd)^!RPm zGWE1u`ze|N^BBg})Wkxfc#O9;)2&Pd`K;p z8EO!NXu~pNMa$O2$MN7)plo(?%jdRf7U4`OP`-JhQnCt`4`D5s)C#W8g+r${_>kl{ z!hO@=1v+BtQ@POw8je#1;{^6GNMk(;;lxMz9^M_eP;vJ1&VfXmnr^v*nxN@=rpWoP zEt#b6FiL@ghVCw?X~&y$7E{64Ptz<+E8KQ{bX5aJJ|MFp2VKGOt`#j&bn0_f(LC*t zB`1r)AmU7Fd=MxB!LCwT1>8#_aLpva$ODF9@RH^GCA6?9^on>0Xh34e4T5ld)20Jj zRE0Pa-_1=I6HeoSCV7(xSjC~9b; zMtJ7qONwq|R+{4DiEoBFghSY{@hie`imjrHq62Kt0sYVNG?k!+MVw9~Nq3^~CN2Xk zvAipQ7qKF3!PWvV(VfJU(}679=juTg?oD}K>k9H1^k0c0C+^!Yi)k_niUcLEwJy%I z(%iz>q{fTPo=hf8{GeWNf3d-h&nNbE*w2sg%2>;iCqvj|N?b?PH{heUCcU3RctW`=EN0ryfs; z3N-K?ek>V=3Hs^4%oy+8KQM7)p2MwUxRYwwOWC-X3jHRcuDU>z+Q9nkv1Prx6!c(5cMU)^HUzWyFev{D>{P{dW&!ab8dTzjO!^cV65I_Lo`PP5fUKKD2uA^3W7=_j(CH++#AA6O zkHlqe%=q9q3U?zn!=yTL8a@?-e1IW^nz>kYDQ008T#X~LT)bJpG|!XE!>99NdjkLmb*Ok%gfCrR`=!tgyIqR6KdqPyILL<@mShA>79;^LIS$(2sFy})DFg?aj8v0I8_w<)K+z~L zOnyjv!ukNLXyW@V8~oE|!NQ$^X#=9e9UGY}jUCaa253Dzfl4t5_z*M#}(Ly2P{iUjtj@6SCBB#JthIO4_^4A+9KTbLPa z6U?il6BOUz`DO(ap$Rxu0=f~=iDg^9xZk?S=S&xj3Kz05pw(>1O9Fs^z~T^FfWfZN zbXD|!o#9Rx?yTwKE)guJwn?NF5}S|XzKJ{Jg2+Xi@Qf$x7L`mnh$Msvj5gC=uw2K+ zQ#+KwqFxg^n}uWOfz?JEn=pcip9#r88y{?~0MwiK%{Obihd1AhyN9S~4hncm_o(od z%b-rdpd>F24VMP4#MiHPEf&c{s`x1WIV=+EI+q+VeN z#BfoF`2hAAkhV}Ot`qKOP$t7rC62BzM&s0C0JWUj!xzwtjwFIf;fW8+;|5=J+<619 zDMVrha?l)3>1+;3+9?%HSGt4*{{mhr_(Ht_kR600AgmxxB5L&TL?(^@Y3!~RCnW1f zI8&Pv7bs>JEIVy1VDVuL!Ljfe-eYS+4xOm57j11%i_v2A@}MyugW>zfMutu|6RnTO zc{)v!LLfm}h@yo|iVLp+fi4WggplR+3aKER<%Trf*c z1rIhY$B*M68)|J8Fb&sR8!0yN>xBM~=Q}W5(E|GqMLPw@grjB<0@e&NHZcOV5|$?x zgLsp0_E&?LCJZmt1Is|_#GwWh5^YnoD5|@4Vs&bE5(L$SptCw82o^A;+9{Fh7v@qJ zIVbw?xM_n@1)E23381*Rk^+`$;*|hOBw*7VLsaU9)8VP!Y6Uh^z&}U0LvmPU0b528 zleHbF#}xlVVLr7`iFqH;#`0jH(bZxPLMjw^CEx^-k(SgfYBG`{fJiyPU`_=g$Bm0O z1O^ixc?~tJ7+RpaU_7NzNnB$Qqu|w+4j!8mH=f|JIi;ky#-cc>C3gpdlH!z=)~ZO- zAws3>BCUqJzgjlXCU=kU6pY+G(wh+i1ol)X%yI=ZE40d*NwQ2WV30~U<_m&XFfFQl zE^$FUr(iVje-IFYe)gGg+mZ-(YiwqpW4Pct(E~5n*pvvZ{t2p*+6y2eh#T&4l&eE;=aT~nCnNi76* zjg1q!1KY+y=6OQ=`#Q?RYekBS7^tEZB~6%a0U!B@rC0(4DH zd~j6RK1I_v@oGxxG~mhTfdD+31i^uUIG6iP2TXsoIz31imk0qkTAeOgg~5t4y?Ig= zlV^ce%>+c7+PEoiZ?rFrvlM>#s9j&v1Wg^bF{14N$GwAdP5uJQ(){b3AIbZUhY-HJ45g&!Vy#dZc?^(EC{Lt?qs$EmGg_fTWCN%dYw+7orngF_sOfi_ueuoA}@b z1^1kEzywN0hKQgEXCEm# zF&9l()F;a8aqt_1lR2(qR8~}j5l~Gc2FZuOY>2VmS8T^Ahr^1EJ#DK~Z4wgIjEi(~Q5y^W^a3kMos~fv zL9||5#VE`hvu2wphX>TjM(YXJmAf#}&T+AII7J0&n)g**7nV4%YXWmdvrewRK15MhRt~X61GgCV@(GL?5UV;!FKTc zlxAE(?-UjLn1+GG9gd`g;YU#>#3unmw2|xRfwQW^?i33{$ieij`ur|nK3ZwPKqJg7 zuGtuFR$HtNI}1%;$%bHm5l3Fb=ESNm3pTj#Ly(=O*oLj%Rup*JYYoh4w9s&`T9{&T zNZ~!cde}huM?l_{AQRUTBw_O%)E+~KiSUl{lwl_%iscYPXwizU5`n6r0@R;kHhF$* zAu@3thbU`*9oZFHM=DxxB^~Z~k_X4Eq*gm5vN+soscRmg*~m@A$2MJJAko-W1^m$N z7~Ls>u?lcRQVPH*x~2K35FVsK$uN{-Ar=)2>(fz;2CEnqKqLXKqLvj56F}&A5_rLs zwYDN~@1-N5+$kWf6e-&niUldsgaTJH_eq#Yt^D#IyN=Hq_tuX>&;k>CM zHiU(liSVtryNy{{Y|{tb7w&eq7A&~wJ6KO48T7~iB^AjXE%eJEpqmII0xzZ3JnsJK zcx^N$&>f8h8ePqCi(Th@%GqzQ!i2t7oCY4^PEp3J%UUrVxVM(D0W!^$<@d=;VKJ}E8fwF8_Hso!4#%7k9jcmAmRe%0P-JlCyK-FG2ZvUepJDD zQGk*X5n~C3*8xb0qI4834vMXzC@oUPMuUt|MTGikZNk;%3xU}_HXXy?n?gjBQc$JR<(G~s`A}yr|p#hVgFJes1 zq8SB~^asEa6Ee_f1vey461P&dfFSw`y!rZwb?;&%>sryipI;5unr+^8=EvwgbmkfW7Iw z0dWGO;z~;trfX;i9B9b{1lLw1#ChsLwin{1jS_cFJlKT?utWk0v#9S1sC1|pJ?FqJ zRkfH4OiIQSt7xLt17vUp)6N$iWbPEa2-C*oJQVE%Bc)g)8*XRJX2{V7DU^}sC^L=$ zDz{fPBRMmcoT@7kNafF%sk%^CpLhUTQd3l1QD|bi&rwM8(5YIT9_7Bc^oGgb-~y9Y za%dSNz8`Y(&;q2%oCRr$RIxI9BBp14%16evELc<@kZ<6N4N@CJUm^cQl8uif#^j zBz?1zCHQmP7?j)_H&%&BYg>(20mIm(>k-0t)lnV90MvY8X=Pi1zY{{D5-l9ve~LGT z1|ir}=#jYQPb6cAYgI%NOWQpTryh@PN5gn3J8hz4N#U7?I4<=LF3<3s5sun~@poFR zL#PGR7ANiCLT?3PQH&7tF?2*N)N~}}SFrAN#tUN)ZzxaNQ|d$4lf&9TLACiVeVZ%l zCoyRs*|B2>pBNaQ;Nug$V-tMGjvYrQ?Mc`GvkJKTEw-7&o)|q6Hw){P2ZsBps`9SV z`441pLiiE)ASDcn0P37n)JgV8Z%TTk<=Sdpw~+3 zu!%v_r=y=B;T1=WuqVpU04u7^W|>p1f;;t<63a*C z1b9PY5#yT+&<>x&hPdlgebW^lJ5s#RoBYNB`i zn%&yHUUIQx&j|3O99eMxkXA5qzJX6Bbo*d3q4gtA#AG~uuys>LDs~j?%>+|Z7n81B{B6vwcdG%u@kN`xJlkeadVEC^e{ zH@ta7e0fxbm@Mpes}pznh~$J$v%C_ANM{x@EtCwEC&R=IAIUcK>fvDoThz-SL9-!+ z8GPcPgq;D}Bma`hk%(X;sal;rZWd%zTbd^Z#>Pg*_?Q44u_p;MKB=FPiQ=TtO@m~z zI4HS+2r~i|Lf%;*)53<>H|D|-AA*PWMA46|DyFZM2tz=7L94TJAn?;bK@LHmveutI zYqH$xtxt_W4K@#Sw61ZVhm$ZaYhY+Bh)>$Rc2Vm?l1L4CG}3`i%Wss{0pr^+<)Mq#Y*kKx3ux?V&oR+mE331lur=*MbMr zs#P&jcavOerP^f-NRXDa=VEF>&&!67lgy<%rYW!}m*>r+j_0R@ZqmXJhumlTMtaBk zm7vF9qOqzSBHv+}LMz9nDJEn;-o&LnC#daT6l)>F#`QMIFNxA8B#NR#im4R191P9h zrm3BzSz0zXc-euIE5txxonaFJSdH`(g#3TBsfQjlxPc0=R1QB7$17Dyq|TO$)u+U< z0@P{SrS24?pG8I7WMUZs2wK=Gm9O1=QsfVydYvJiO$j?CNE$WDzj2w+0OrYHKxX~iyRYq5XATV5^o=`}nG9+l< zMYBKyYV_wUw}?hVD|)1WtaN0Po>k)0e)#xs=qPXm2Z(A=X+)7PbyzXrxI@85F#Rc} zWJ=Um=YqVbBp&M*RhnN|<9W;iIwF@>qwdL+fAKn=xEoxHz|-KThYowBK%0E@0;&ys;GY`d^30qJ7E zNEZE&2e`;bg4h_`i-IDNMJMSbMl8&KbbdB>590nxX4Me$U@FRHSNF;sU8VO zvD}@b^h`yb3OVi}Peg3P2q3Lh{GH|rrK*7UVZ}mtm7Pr5anTuh&?O=uYYmM-`dYB0 zFg!GEWYvR6>M?SYwy>Z*xe-jNN>S#E1RoFWyakE4L}9g8gvsWm-#2j6h8`<-aP4?C z-{R?Z)AZwJ6wO?JV=WvFfnrQ|qy}~$rOwgadjGw69kFi0#8D52HL)CKO*B0pl3)V= ziJK=@A#(^0z!Do%kwD8(wO%M3E_7_t#&DA5t>qA!tPp#US+3NWis7WdTM>?kwi*Ho zwu&-Uq@?|y=={b(N_i2EO%_RZNRt$ve%!;?bK-~)Fu(+oWOIf`iPYpqKBT3Hs(p1T zw8~b%VGJBT&?Ap=SX(4`IJtwHVJ1I-0w%_khahn}^)$MLon$^^ zY@V?#-+1HCtrBBf{^g;cTMg{wmX~i}tjyTfmRlIx@{{=nHp^J!M!X4RhOx#o^>$3g z_@4E0UeQxpaQK#{+&5=HLVwd8Gb<&d0M?*r@*?$6ncOU0uux; zhCsACD3_FYf-wY;w_D^$L*^H4vAL!X$i8H_Es$}#N$SLF7-p7+*(Qex%>gB-D1l)x zdU|+Uo1K7EbO04_(M3migeRj5UJEfS0!b_pzQT!FuQi1Vwas8{(gg=AhfI6frNE4M zP4V5-0a=D8v0V|c5{8GExONC|nG<}xl|!EI9%>GhKcZ}Q-gZf?7fEXE9ZKzAg!77r zEYJ6JdVR+Seuwnhlm7+M>z@(5ZqVuV>~MV`+{hy!-D8(GHM(8_E+x6nC^~pgg3<Yc9f#?UbV@Rf73ID@rNi&4m`8%VfG! zxlFE0jD+t&hI1AEO}o{-BDX2jqipw{8fmK(!ad#T>@FxW=lc~e-`3_jURt)$R&)w& zGm9x0hZsb<48AyFMF1NfxkiQX)LtShnUcr>25Dl);G9I@?h!BGk^%7o{7H~N)?MPa zkvS5n3wA1S0Dk-JoZhMG@?A^dP6r7h9i7by(H5l;0)V$UuDa|%q{PClTW~$_J9fjp zj%LYN>gmj6%5at1iJs0-c2KdVa2h=%fGCH3c=n>Kci0tsW&}b+)PBpwHkuP*P#4=E zyhUB3OShu?OK3WhtV{Dm8!5kZmP^8{oZESe|MCC?Yu z7L`zx1?Qkgsy@%cb!AEzpyt+Rx^PF0QSyWY3QT`^W1-9q4s43*Qo>shTsH!j3I(Knj-OsyGWPUk=Vp%$fFp7)H?CA!l~fwQP~1P?jAw z{UO7fr>wZtIz8+PjYfd-kW-k)$J*rgTXwPEELmmUg(AoVGm!yn_jn?c&9!%Qc6IOE zmCm>I?(6Fx*ni;Q;MLb08X6uMy>@JT;_!9X-*Dqi#&n@*&dknP$LC9B+o{~*dVY0b z@x;=tDP{k{k(EL85%gpr@2K3i%krbz7=k@Lf2m?RGk~b#svm7wN4Q|)&B-j9%ZV1A z9K@UW#04C7wOo6kN#=PTL{Pv770ke$qCw|?>F;w5yD+DXOaeNz?7{t(a!f~fzTnsk zrt3rALfeBx6g}l)Cro+HJfX@ZvpfSbR5k}M#6+_|BK#;kz&j%VK;pj)mzTBE&~eDZ zKSnnU!dlDkNTi^XAbN+~ARy3*9cqE{q_Ie9K+tGV0aBFLt2QUfhHcD367Hqw)uY|F^MV%!;s$`f@Lm&f9 z1T+`3KzhP zRRDMpYNR;`8}PJIDuTmqNqT~?I}twA+?*WbJ9u)i1uA*UB~gR)^(LfG<8hcmoe?7* zDp=B9pY;1e0w1F=hiJzw8yH5>^zb$}>sFHoYfuC}X8ESu1Io8xF-32II~53U_27HD zQZg)CaT@fpW9NXFyczK`wKpRnsfid^D&iRQRIp7zA;m+nzCsd#m!g=u@JH(|k&ySQ zo(?@m4Hqv0t;Gp$+P=F)H~^DSL)YEqIJ+88F!d^ok$NauS$)^BM;U?Bz%UTyC6g2b z%RtT#5J5ugh7a+zr^KnhAzz)R%C;OIgJr6@5y-hA5~k!}V@7rK^v4;-TkX>CbmL82EU>^FQP?zvQd zl2Rd}2c-9LzATrO90FU9<*~$NvA_yBtb}|$E*sZreI9!{GK%4{AXmUjq05#PhQe*j z%koaM_)?*=ntRyOE68v$7gwD1j6A$~IPuFih<^M8^ zD9euUWKJCozD9>hc9U|s=-?EFf+z`Q~g!B=J5*wWTHKGLjT)h~f#TP8jhCFkJ zEZfxNh+-2&(Mt7{Tv|AApcY)VBpgV$B>>YkRtYUjWe|&kyGi#`z*{TF+CA-N4?Hm=#n*mH|QMd(4he4)r20l0pvg<^4F!~V; zJq&LEUUM=eu~U1KqEc$FtkuGkfk34h>m3VqP(nxIp^>_^H+9p|9eKbo@gqMunLc`D zfOGAS2hL@4JHwL_`1prJx~^ITdg8IJcID*?D7@>6L%c2>@pR-0LlID8O{f$ocaIM$ zO-`l-_GD7KQb(@@#zv@hTdwtvc$T&1!3Ub_N(WC=hg9?!rmn}_$fd;6A) z-)2?Xq-(lOH=){)(~6_)lL6BMeXu7`1lA>!V4RaW7Co=ickG@1;i#G!(^PQ-y@q*AkZ;#d3=smQMO)lQhinTFTp3O6H6UL zD(ZEtr_(9VXh^OS$N*-H$EpM9z!p9oOyzMk#9a*}1V@Af9*QBT;P((%G-*g&xmGg| zlkGy+e*@vx?eqyI-R0S$g7_0jx?O)j(ya^T)e`Rt;ils$IBNbIiFc)7UIX#gh3X%M ze1$3mUb9xxiY&V)tT}6r`_nPJgN9u!0mGZdO&IcW27PEmAuW57Hmx8u#063Z%hq7Qym(#&`2G1;gzgMrmZv)XNF`Kd4G;Kag8v=vRc5g$@LdX#hyiAkrbi^+g+ z!0(A<17D)7Jp$j;L704Tz5`=f4WNN2mH{;($$;wy*s&796JS*Ya|8Agn&I;L(EkL? zT`8AY7Mu}1Z1tF1mm&SXgu5#R_2Z1YLEvI^KM|OMwkbs09~v7-@MaODQR{%!C|v2c zEj*jaWP~5K1uBM`N~M5^AGn-^U*x525%vhXFnf8Jn3HI_EuR0D9o3EeloonN{~co>jHiP&p?nXWP40-*vmJ-Ld+4k9Ww*x$af>d{9lgqdV8p-re1?Glk!F zcD1jeH3fz4O!v;r&i0+z6n@*4>s&od4=Si+yE3~n-8(xwb1Ct4SI4f^1L~jxR2HJ7 za=SWqcBJTQcSm;Bup3mc+cV8GCo-8#Hj~MAd;B%Dp`g6SE%Iy^3?;Xg zu_);7@%Qd=3p|%u!(cikF2jU&uD*fsfwAib#->IO?~@HVorAM|rEJ@Qt`pOxuH)U_ zs4?1c)9{UB1Lln*-Xb$RpXO;;Uts=Dvty^=j5xg2WuHiTB;YMv#=bFoXF|1_5OCha81qcGJnJ50j5RREu4dx1 zPW!%rF*Zccp~e(_->f~~sy+Wf1GF=g+r-$tjBREo**12vVFP1Z*%tV-jj^p4p267G zP3OVS26l35!#c*cUbJ5PWR2@*{K~oPB>ua~mexT_qd`lHi;LLO;^N{^bWAX_`eWL# zjUsRa3i$1dAVjcL9<8B)0*A9xVV_|yb?4mzt@a)dH8LH zMlViijjlH;7LL`ZSZf~ZR%rGTz1hu1#ZqIX?^^(iyg49W?_$EEKL=!D4DslV^nLew z#{RrvD0ez71Bd#{Glz2i+=(%B*L@~^6PbTt>Y2SF-{SSZXo)b??on2V`1?t0bB4Z(Q{JnLjrU zt-JlFZ`il>xi4bdpMTRkfBTO4UmSbyJ$GFD%J+56f9AJ$eY|@34S%1!|Ht_OD8mVe5<^+%Q8-8;HyPVTzlk%d=(YTv@msnq%}{A%}qzV2(yAKCt? zrAM5m!;23b-@I_aSHAnV&v^X@uSs6^kMG{N9DQvBcdefHY>{^*Ub`0c;lH8+&KE z$ZW=O7Y!F&erFOR{t<9!#_-=CZ5Ya(!Ps*J%>f%<&loTdq&DEc>tRvZnegW#?oIg&!4h-Uijr(e>L;lYk&FCYR7lyJF|s#|NO`Ek6xW>`1Y^g_Sp+B zeotH1U#;K$(&59`J!szel-F;2>)=lgK6Cx2N5Ayo&gZ@T`WLPL{fYZ_{owr%|M+u% zd-t}+wwDaP;gWyd)JGN*S9_L?Uxym;!Gr+jDKhNj|}-_mgKkN@G~-2E^5>&w4?{qc*|edhH>`tFxq{P*mkr)<9S zLxV4Vs0T!&@%sC3fAgXD}BsXpfBw*}?=HUg_M`6@A9R|{_a1xo@Ag>tzjxcx zQ+{#q?63TPU-<41zj)4f_Fewy-6y|z^X_9C?_c=L-~I5C&wX}FOXp?x9ccZ@)2jFU zz)7)S-|_Q@uFP$I+pXUzOx*li z@Ax;j?dWBU-Oaw!p6##x^XzASw(-mNn6H1v_RhkWv#sCw%1=M={?}dGef*cNcu8;f z!*Bbuum1ZdFZgYC(|>;DoQG%rqx+^?7aQKO=j?RXD?WDn+?OuD_4j@MaPZ&nT>P!` zk(R%>;o;1s-}v)ay`cK+*Yh_%ZTNxyv8(#p{-tvHW&JcZ)J9y0d*<(a=6xa!nTZ^`X??&pTDpSp40 z-}&TcpZhOuU-^FV+28!$B`02c$&3E_vybfWo@syiMgRQ57vKGF|N617T)TCA+!%e| zv+wHL@Q$~C?^mYD7<=YLxp(jS*eCZseLTDV%Es%yS^lr*f8nhkdBgB8p5Oekg%fXm z-zC5Nr!N#gcF#TT=9fQb=Z&x0_CVYBA9&zf|M{-nfBDEe|K_7d&i&k#4}I>?l?~5( z@JIIj2eM-)@0xAA@!{|N@ozJ|cY1&KobUB*{i7G}zV9t}-S?*MuXT10UH0Oy-}LgE zKlc|i&;Hpr{8u)Ay*vln)-#tLeCX~^zwpr;Pu=ogPZ@i`$LH?*^+T`C{lgb-dFR}1 zU%27KoiDxX8}In*+duIftMxT!zWVIe&bzM~J^snb?G5*}WnccvM;>^|Q1!MuUN`ux zHy18`%6BjS{)fN7j&|Sl!N1zQnSE!|2fxhocRuHz`0JX_YWna44d(%6& zUH9bQbXcDm8~L+Od}FTroF6{x;m>}hqxz9|eC(M0q~bLXUUsGRm7VRcym|fEw}0{j z*Is?|Gk)~6Pb9AH_*(bJKC+E5wpc0@W@g=L$=pNA$1&oI!2RU+^^7rCI`{yelh03{ zI(6zidj5(Acs`Unf0R9!v9m|nbJw%;8DkeR#-PlZ_>#Fb9Q+2^_?A-u>JWUWeLLFzd2A>L z{zF(C0BZxNn2U>xV4=-OsrLY_8vOeJRyg%sP&iLLcLT2crgKDryBT9};(Q%DgDqP2 zv~wcWp6+OGWPYKNDtoid;$cf(9PCsY%C4ONGm@Z)GXP6iOE7$3L_mgsfoI?vo@&_4 zPHj1xon&XQQ(I1++RC27PHk;Cmz~ZXsQ-yp@g$5jzUI|79m9`Apz6tjYVOKyy z+SF2Ivpj9O8G>9B%><}Se!o=v{uJ%|3-J3;j*LpQ9nWY0>j5kkm*6e)5c6xj|% zV1ThjE`=hWh9WTW*dk9+t*9b^i!if-Uv`Ssk}1t-IS;@dSV{N*70Ty;N$vC;Fbd`i zAHXbG{%bT>SlI@45#pRMrIF_}ke!@V%Q6rt0*l(X!JqLf01wg38J7a;2Fr^PjQ{HW5aoM=opxgBz*W6=yn4F=PY&-hpQ6?1VCM#k7X;U!}%0i;f4fGsr9cOd_lgLGkx zU9Ppi9dLoha0O%RcT^rw?pyS|g)#OJOoB1C1J;7Zc_m})#WeR;##oiUr!;t`8Dk^V zP8(zFWAq(x?xzHY9AoTW`VQ<%!mWcb)&&itFk-BmVBWHv@(x%Isu}aT>!e z7#lqYq4q7p&)tl%JE$E{?0!z|^Z@K&VHsn48Dpc=&NCQeX=>*x#@HXxcd%S$>H9vI z3$@b+cuC*;p-n0ST=d7(=6=T5Yw7y|#@K^Y2H5Y(b-s%#mw zXDr+Dm!OMt_Ko!4I5j?a)4F9VE1N~j_#6Y1lbvilUje`5%%dqOI$+jmQpI) zC17ZIsdgw`bPDsPo5BO|700suv^S^9^Taj@6X3+h|B&6X#*4(*U=id5^4TuLVfj17 z7-;Yfpv!>P*~nN!g0TkBRX|4p%U~lZp18%=q&9S(#MqYKpE`Bw$@F?FWBj~Lu=$zi z`Z8}TnqI-p^Ipk74nYn*j~kGYWWg-)X$T;L{7scP$9MQ~r|QC`d5h*WH!779<(b=7 zF=oxY%Cn^RkTxonZ3V+OXB|jFP;s4Nl`g{FRy1dfYROL(T(fA}zGaj=7+%@3^Z0k0 zXS#5yk(b}b)w02N&aE=`7z;!!07r5RyO`&D>7bojUiw{wTao80!Z50{ES^yr(XVMQ zSgvD3W^yqR&K0}v-WxN1q9&(VR$4f zO3rM6di6LJw&Bf{r(gp-&l9=MuJW{)ifiJ2cb-@6lIeLV&vz;nv$&1pMMt2EU}ajV z)3b*#$HBT_jnRU`&_OfG@66|E5Lb3*O594VLA;k zR3unUK?WiqJ5&VKENVhm$mD#L;1*O_t6@^XI4!YW6{%~6b=8$BrE(UaVCH!OG)_s1 zx-zCZSJDDBTCBW0Dx>7hYZ4mk)JIa)K9*ZCma1w(FkP%%jXhvslsAvDIW7{>g zZUe;Gf=aSs^uQqM|68Yx>80svvA9&H+~H`sKvipCmyznV8J*VFtkSeLffL)B1=Xs7 zN#$vPl&7nn9-}-pumiE0PO{_)<*8)Z)e|71Ot(!9T2pR%?|rZW#=lgktKV1FLN$B8llv9$*^TudM) za4ta5(~;}z|A((Ju!8{ckr!OJu^unjz}hrkun}z|U+QQ{Y+!t1s=s%l7nNe* zionHm!|not8U2%nlq697996w9`b_eo&Xjrz&s6 z;a*H{aVYBDdcRz`lHOd{27!%jX@OF0ZlUDZK`WcY?=UNT`*yT4@n7&_3qzCa$Od*W zmKAOf^zT{2HT}6+({X1_6k)Jf8Z%TdT01XXAIA&F*GXO|@I$h~>&@vD_+yIl+D*?X zRq+;MycpE0RxmX!CUWzm^L(Uzzg)?y#-WtJ<9r;l;{YOh*{+?tcINSq)XVCqMVMdxn#U1?LL3Zv z;yc&ZoGEG{XE--bUSq?4tU>d)RxI#Wa3KX_2IYu7>jeBwfiFpZbUNQvJF;751gHg(3<~pRy!XIFr z0>ndNZQisJVqJGyQ;X)bqS(#w$Z(g!viXfpcmXcQ4$g82v&D55A(1IuplgUMw{|g< z_14_yIP)H_igc$oH&0j|-pkx402=tv!d^+u+|VsI^4;kJT%)@(n`@6yt6Ja?&8}== zkP6jtnW)?U+Skb37$OBaBs|MUF;Vt9W6f%gH^J=k{0i8&nJSyU0ZicvVia86 zcXdTuq3Zcg8ISp-pm4g_2LGgFowPR>R4Y40GtV>Kox+Jx!#sBF%)?neWFTT5IHt%b z1Z)9P;8f+e)2Nyn+omnM4cxx;#DZ+jjXX8OqqA;P!z)hnqr2gH7pe4cZWiVoo;VVk z#!;1~5^_&ywc!eP1(rh9E%B6hNIAw`V=*nzuV34!CY_DD2c1+k@`K^$c%+D!g#`Y3rGl^ZK9mmRadE7&z`2)kPTV%c=e4Q z#vS?fg*g}WGr6a_A)DJdgeCe1$FG5&paiIRszhfthkNhqhX#gZfk16+U{aae)>gE< zdDIn@jM=Il2`M8rwr5{jv(Ko^KZsMS-9~&;pt0eJ65pC{E6llaKx-Ezo8pwVKbK0| zoGV30U&*N!`9a6?%_80Z!BgrY5PqHI`c|J;p}P|^T8rxQ#C?? zb3nB`&k|c08W_rRKq2}KXqJcck3)|^FH5g(F(i^8;e2r2N))UHwv!a7#ZDq#*c#TwXenK$kvYCTjH?$T8Z7j#>Lzvj`vCAb_J8iw|oL;-O3GKG|Vzy*=_jT zJW+8VLw?1z77X9y5>2^3=Q`EdIlQe8xszzcEY6x~4aqe|FRKD#YoiL`dBDVj653bT z0Oz%eyEesG#hr5z_vKZhZlF?xOPRPX4h3?$Uw2Rha1t@}n2 zPG_LUBoZaI5x1wqX8rHDaFM~k%0(6kqScu70o*i+q)%k+l)E*Ka+k>Ku63*^Hy8`J z(ykll@B}!M4YrbFa|7>`CqgydRxV;+t?7~(B3X0=m~M^N%qf~te_7F7FiTDa!fLiz z1;-Yf<#^{?U6U)u3E-RM3hwI%rkC2{g-9){40}xqM^hzd)=5`v2&0OLWZGjpQ()(T z>Ap8Fu|CXWg2qBTCe}rumDPd|YFq?CF=QJsf;>-T@)=F?k-|uT;M%G&iqQ zTx^wdjcW2CJOK7qSCk8pPEDjZ1#N&gK@beSiRua9G{isPNd$pD_V^=Nl>Z=0J7aS_ zz4T0$)9kU$nKb?f?Btxjk>UQsgA-G|{rzJD<09s|;Mm2g723Sq0C#afg{P|uhYpQg zKh<||pzoTg{Uc*jhe!K+Ck8?dfC4P}sA}Nia0B}X`Ul2(Ck97Qv5;NEIkK9XmxgPO z4ICI8pQx>?2Svkamd3MXyHRDZIpE{_9Q0?mr{Y2Bt|1wFT9wVw32gKyQJC{C#k-tBo$&$Af@o9*zA$U(v0B= zOUX4$7F@ju(J(&hlcp=Sgv2d&N5m|SMlC4OXxjBO?Q$6tN)!(<{#Ajk4zt{u2aHqO zE-?&W;)8}xc^*YPV$!l~h|=<01&oFlw5?t(qV_x|o)9SqB$4MZ?#PQMmF3}TSo}l^ z3ht@1uspv4c&zj{%ZZ4B0he61SPeI>Q#wLfd45Hh45Ndn!+|hPC^|7ANAjG6Oysp- z!Fhhg6(}0__dPC{tur$eg)gaV>#k!do!d#Vb|!3q3SbW)lixy@U7mnLoRT$XjYEz- z+iMrc&4O$CNn`?fRc1_A50RP3EU@wb0b~`6-M#2QgeMS{fe2JYAW=zm z?~X}Y+3b&YwA$Nd)+E!)G&-ZV_Wm(7e3G zLqJdQf(zyH%Bi-s5;_cWZusKpr9v;iea>TSai{q;Iq1Cr*0AsiDyg}3w*F_`r34@$ zLjFOnRox_tjsnB(qWTP+kX)xba0aI9`c{eQ0%t>ic6YB)L!8>)=ro$O?Y$~9!?pb3 z@z4ySW7R~D-CVrfc+!5bx4XZ)w!gVqYclkf6;v#gmTbuC$0(?ihg)|T>cOu@9{xzn zXnb3qm~zCXr7#w9U>8TgmvjjD4=(XbS+Pi8vo+SIgy!Tn7bV0q09B4=)PIT7i|h-Z0R} z5mz}(B=Gmd9nd22>imL%U&1sbBQJ8n5Pz@<4HqK;)*xp9a%_f>yM%hU*a8JvJ}E%Mg7sB>zR&AQJn+SV@z!@ z2M5K2kFbD=unLGR+G6487 zUr<66fPjx_S+SJ@e1h@7HpusQad4FIM_v@l`dSDFjlxg9YMccEE-4XG@V}L-UAR{G zP~nlT*}es|1gLb{wRqC*s*?Syt#)&7cdN6p7CR9^Exk|iq}>IBVR2BX-DG`;C+#k{ zLx{rfG;59R>Uyp7xZZxy*@ix)4^-ztt;x=mYNMg>X`%-RE-D(D=I$(wz>oYNC;gPf zD?f-(j=cuW35RXID3Q|Ew(y*M<{EQg*aNF(WS8Wl%KSZ4*i?+A#f5oM@>fHvPY33G z78e)R?WI`gN%g8~IlcjI5TI(5tu8OzTZQ^l&Duu2m98w$$4jUf2QF1=JLDXaOzSnf z+X2o3AOmW=67w2!+{`#WT*cbt8GYh_v9ToY`(K~L`(DD^*DUY*ElK{x(2dG+$#jQ~ zhZkm(b{F&$*_z71!S_o1DyO%Y3*4t=n|NDx&UWG6?7Y(T6?}N{WB-=!*#8^+*ym#w zhyD(zr9Cos4jnXev3+XHN2IuQMkLP36!b z&$cR7W3@jB53A89&mPr!o4X(HJ^pO@)2-pXqfgiHj`8K%cD2>6ugB;B-QA+D8Ags3 zQZumn>XC92Y+GGg@_d^)C)rMD`A0N3o`rOb*~;=rnZSz)I3T{Q*i9sQN}em|kOb$z zWb79CzrVo*G5AdgVqjJVp|1YPT~+{o;{w-VQwRpYhQ>Cu1X~f;5@Rw}XBTEG*@?l$ zZI(fdR$wR z*HF|&rGO+N=_{ari#s5|Z;bEKQejhzr0+?7Di!rF>Scb8Jdy9UZnIeyq{S|Ma=x`A6`5M z#!gr=1WGL`B=^=JuxtD6H7w9CK-!qmD0*XOMX3*#M%*YSs0y^|V zC-MX77|N9EV4wn(-quv&rjk-)z#k;_0e_j3{ol}&eSK`PSxNTgAmhLI_Lc@CH*$dO zg=LwFUtb(8UeTe&zt7PkZeL)UL3A;zHc91sQ?3z1Jd@Lih* zVcI|~?k#x|z~eKj;89JPb|;IQ%|WO5z5FY)+DY&>-LZMhLL{Y7t+-NN0o!bbZA^yC zU=Y{Qp9GTFAFzTPzL-#-1YrIO8L8bDyD>@NLX=y}73(gc*G$YZ$-p$+p7h#*6VLByDqN4)Z(7O0&kQVF{pp z9{?STKsx}&$tMbQ-p_?&te+te!hb_C`b^Q81&HVd0lwlx9R{&bu2kS@1)egHWK)-M z=qkNaqR_#m&IVAEFAEncN+JdMtGS2vWa8T9GRy#P0nnBpHu^h&5GhZ6HK@#``FX(0 zcdoZu4>AQ+I&e}@nIsJW)CQ})1d4;m_6;7p;g2A8!ym=c91qQ)zhwU|7!`ME&;xXs z;}a0SMg;>kh$}>HS&JZUePe)-yY@dP$2_;Yc?kq`D2iARxI;d9YI`WXCiQ$bU z2*oK2o`=!`ehe}{&k7M{$-?aG03!9M%D7?p#`hUCElY&N0)VFT^YaFD1E}WzF>eUN zO12A#mH%_DB&o8}YJj-GD5Rr7%mQC!|4wqiccvK@<#51yUqR(YEHb?w^&$YoxdT58 z9ZWZPmHl~fOnF_0DPD{z(2qbAVcXhwdi@f!YvoD}Ra4no-yt8gxDPB@$4F$OfL&ef zn4Sp{MZM@l5*~*U9b}LJIxL0OAcYS?1Uqsfu#M5UNU;0(?^}Ip9fB=Hh^#g*8haf4 z;KnF$OG7j28)VM$Z2CNT&|?1y^pP@1b_etbz;@r@P@zMD;_51DO$1L2VBh{KmKR`~ zg9w85Z{}KhCEW}Yj#Y1LHtSo}cCFKFw;G9ShieCc(=#I~&y~}Cn;;Y;$db320md9} zB1WET{0bVd=SqB!@avHGrBJ}%_@IF^NbsRI`8@*s#swrF3isE*u0G`!=zaqO>zdYK*r#S77QqN3uqR>^ zi7oBLG5ZZ2X8)1kdRglNwM|dGdLX-xn*3J541lYJ04i=Nat0JG6#VW}YJq7{L@i(o zXGzs{0Yf3}0Eo3tNQN|kJ8BB2qGh_wlNijx37GHn&Ap zyZ%wmy|acUf?iSuIEiD@Og~)_0 zvuaCAOYmZ8F0zIO$0ObAk)3?45i_)e2=1eK$b=$N(trC;1vINjjD z0Tn3$dQL>8JuIrCg$F4M_LeN5#4(T;wSPBH&=&!2A(1jrV3AOnMRml4%HUC6(~9^) zqm2W==ot8yQJI}zoLwqGXh{h84Qp`)-&~yBeM3j?4mcx&Z3|-8Qta5b9Oje*hL;%4 z5%hI=VGZJ0C}R8t8FjV{hz7|!!MG3oO6f3mpRP9{x7SYaEmwO^kWh^z0F(MSs9kynE4^~DkcNzH3WGT26NSA_jXTpJqBC>Wu6cN3}+dGmk zWzF-Sl0_BW8K3CIvFe*TtolRFM6iwpTJ->xSSUjfIl&N`-zE@n8cA{btZwQ8=u~6^ zf?=Ek3KDDp>r#hwj-R)P2=!?l8lQIpAru9;=HSu+qCw6xk-N|v5e@C_?AF)zTd~L1 zPsMw%v##0@9qX9*QJ)5Uu(LszqqLC4`V{ytYFd48q<5kaIWzF;k!^{Xi5-YOHZ4?k zeCw3lP0SP{CFxJEl*{w{l5JYFSt8RsZln4LrT-jzj_DL7a!u7N1Q3p!_r>TaY}89+ zT2eTPhwQcF!KNV*1@n0O?kO+~bc>@D60YCRC0vsjZdGXQCzmiE)AfzrR;-h|+Vjn^ zd90dEgKY&mrM>jHw$`e*Yw5z0U`;9n3j^e!oE-~MoL~uEzs7MbCPJ6u5Ufj}##;iJ z2j!Vdwik-%tnw8*_H8c|d;t%Dguk)8Bn>*ic{+R3{T)fYhW=nc=^R^)1nI){xj5;1 zQ%AafTaYenT#&A9Mbo#j+e*09Bp3qZ&rKV0*;o)#74?2lz1Jh!H1``L$t8g2*x~NJQ*b@P(MAF`Fkq_YNVE}3(2(;)?YE%0| zK9IX8Yb+QmOAF8^lO!}0w*-Sn{JFox($_%uDqh`(QOH&|fJfMCw(qa-@-PHU`}4zM zsbrgBA59*LGo%Q9sYT`qlHsXhawV}cLyv@KAA6C*Qvpl$@C5=Uqg@F0NV|S|!rg;v zKq?dMy}h*w9vJ)0dix1a(I-r@q48_Iz&tQL^Pa-7$;#izRu(zsL`6y6CgNb#FH826 zwH}kWn1IRf0^n#1B1(?KtzJZVSCS&$h4_VJUp!v3I=_okq_=bwNyH-LoePqrm;ovl zpK#59(uoO)uP8Zk!jb7ZpEI>U%GMxFir50CSgwKZfyD<?Wd0+YXz zh;SNw&4P!3tz>qiY&nt7YTz*QoCFOkk!idW6c>XG{(ANrTe#6)U{>}BB4IXU((>3wn1S}`xC384@q#)g*FwZyU=K2t!%=WD~W>DH; zNfZEi=?3(&u_m01pj|cg+&8(a0b~{xUI)UTidEg)sn#)63{+JEms~k8U6#=D4)n3# z+=iGo;vN%9Lm+p-E?rj#m3C8$(_^ZExDxtmy^C60PmQ*d=qc-|7T1xaX;SgC62qKh zZeDZT=Qbu$*Z2c4KLpwGbkD4~!{pu3-#>}4O&0EJc`Wj5WFEt59}iRfVN_--<=F)Q zOIUjSMQwsbW64X6%EIiT;u95*_TnV*Z5>Ix#@(XCcm+*d_g&ZQ`f!Y06 zOP2sAt3+)r&BIa0N30kqPc4c~N;yd;>@$bM#8giMw7khmawD_sorh-eIb$8OmNR*hM^Niriaq@ZFo|OA6=Z# z{1OnFbn=eBCJ0TU6G3hs_yZbe;ebH6BCvBZ89=gf(omDV2N{ZNAN1k~KT6hSXqDELl;_CaXm+i(n2nc=6;utFh12 zeY?qH>%l;j-BLqoUIzPm1T|hZ)wJpWb*a_DNFH}K);g{BUbDJY>$IOV5Q1(9u&per z0vTT_>>%brH`ZVMKw{3Jr>CiZ-6==Faw9mk}vZH<2S-N=5*<9idVI}N&X2;0zq%3H4VI!cL6AD ziBP-SqnawmOw8l0Klj$mYCz9)%OFtJi9PkE)9F^QCOax zpDm}he@)v*QL+t3rh7<_`H!&z;g1f-e!z^>*vpIaci++pl5bvNVYS#I2)?e4vt{;k&~U)q~CrZHm(AA5(lF>m-$=o<*I~YS#1&7~etU0aBJlxf?B*rO0$V zD)Kw=Im3CZQMa);&5FH#Dzz*j${7a z0gDr@s)no4(j`DulR$&i!EBJ}R%;_ibIo_x?w(nVgZ?g{+J5k&2%*B1AR~S+_i9Pi zGE5dgLky?!H|K;6lH(n?qvv*aK@(U+oU_ac74-D7^w1sk98Vt7*Z70vIr~@nISaoU zJ%!!`Ux^FFGu_4g!o07GL0tUk`nK-q`g7cJO*9`LUbsRVYjAvlO9>jPh7?#7)I-Yf zP&S1qc`U#lcxJnlopz8%l({lJ8`0nx)2U;u$n<%}_QH(Ldu5b!u<@-;Ag-hb>9s{9 zNfDpvmGa6mP@m-!^a#nT9MLNSD2{n0!ofr0j4a1rA%^_$D_rda@F3d!xm>ilR7jYK zh`7i%tNZOe9@`(9yY|$y4rvsf;#PWcDdD2ZOGzgCbkly2w*a4S$f%?7UC4D2h%||k zzs1e=;a7u_=Wrb5<5hTHF@=j`=67_M`Ik6m@(u-JRvUHFQc{7V759O8{EPOdmmtnYRjqps_OeQLKbtMh(<9$VL+QrA5`a6A>Wgt_(!34eqw zS4P5B%(YQ#74Y-L` z>c|rHQ}=pI2>XhY`G~$Rq;?mTPe)(A8;A@UWWtHEc!P=Xwj~{!rO#B0N zY7qYf=$5x{8q_F$2~F@jr@}!3I1!tF?}UiBs=DbFG;R3^5}P`+=&J-sJXPJ;sqgMo z>)X)s74}w9Io`DT;Ep+vhpBp%JRob`PSf=1xv)1Fpm=cC2nt}RR$~Zt5)9( zLK@v4MF%T`?&AAE>S^$Z29WIb{t9SgV4Rt#vTUfTCXqdX!nb#xv_9F61#lcGj%!I7 z>8-@Llxjkhmeo|-ke9$RTg(P(y~aArnBKD<)d5b$YXbFduzJEaj1`xp@=^h|0ho-} z(4-gZqWA!OU(9XXz~`8g0X7@Tey589L^p}J246P3Yvb>j5gbkos7vCVz+7HWU}>UE0#6~cj>KjxmpN*%D-J11 z9KrJORekXV`^9y0R#(Z7C0vN+}KdvW~@V4 z5m-tCQaK6Y&tJw$&Hd)K!S{NOjqSw{d+aA?6PUyc4i0QdK$!y1_}EH(uVR@uSyITm z08Kd?0o?UxUmbSJBNI>Vzw_O^YupbCs?Fb}V~V${-`c4*>(!05PP4kZvA2^1WoUcS z?yBd_bx<`>Z-A9GXX2#Y1xsOZIZ2-HR5!!p&qw}}KiGTRHXlE%9zSZgdZD}gXf=G| z<(!d|c2~XoOZ1vL4G3-e|(*vbaS&Q&SI=g-FZ*S`ydaXKKk-S~}B`!X>+)T(FC0 z>P6kS$z^1bZfvXx75bT*IdR&8H96CO)ZBkJ<>sLo!K)kfR-@Wpe^6_7FxFrlCwfB` zQLScBOCiav8 z-QY>+=9uBjOU+t!8y0@ExwmuXl~?WF?|fR?6b4K17tHpyX!Sv@x^WH~s;*p;hH~4D zbCJ=WGHtTE-lE$}o6eeFogaSsuw6N}wmyDj)z%)BAJv{UFsZx7p5#pHtL9b7vo<+X zL+bqHd33u~YqjcoyXQTTR2v&+BJ^sjzENARHan6A!k#O%PsOQA6@~?O_8X8?3{xJq z>Ytq*;Z>YE(+1pmRNa19dy+VT*gAj-iNN(q7DITdwFCJH_gUK5E8!p-+N$}?tpnfx zs5dYj7o2YZELjZ!>8yroqjMYDnAKDfV8^PcCP0_ECPMrz9E^H$va+hR*`=iwOe4#N zA#8I4{Qj9jgsAPHUT7U+|GmUvRB(Z-N<5PZWNwfHI^_N+l-Y zmoNG@gFGy^oOyo z<>SI!*YW0F*m(>sDf} z-oxp%`Y|G3{JP>Do%ZT?UuI@y0)m7B3k>~5E(mZAZ#-zs?Hsp0*)FjtPTbR5@wwDT z!4vJKR8*(AYU=OZb2B$dj6vBy*4X@_5gSLN(b1eF<{N-|T;GvamWkC&yk`0`?JIF~ z8mEe>H$Y=>p}LK zi3bKri4c5PQY18pA};c`s*(oY+m3*>B)gn^7YnjU!P|&|k^zz!fe_QBJe~Ai(-es1 zVuKVFFbiK|VhhR>4QAZ49z3fIwR0X9smQ zL(sEe0m*7wnU0lfRq;s6L6X!Fhzp>>0AzrfB`LHfS$)1@jEQHqt}7yuz2KS+;mmsdBpE0U<;QNVD2pd|`H3c~0NI-lsptO{2ZeTJbuA$6XAptY- zA9-u^HI*O|t-q!cNv%7F&|fH(AVg{}ga+4uV8|Q+gtfd7GG%FD^_{uVNzxf1MB-#K z{KeOZlsZzsK5p5SuyS*9CMNb5e%z86MT8#aj0hs`zP`o~yuaZ4|20FZFrHdT?@u#^ z2;JscP((Rj@MJ-&_SFmPDNs8qjvc(LfA<8VS=A5uwd|o<0o4dpes}ITXd5Tp8fS^+`pYKIw>Cl*?{~ zMkzLY+#6Dlv{-c2){s)0v}qX4l3kx{x@Op)fxkXBk4*gIG3|yvxB}q6)<&)y_MIpl zKwWm1uV?~=fMYTDepx<2ZqKxUNSV@ZU9v%Ztr3$1fEXkVKUhNnZ}^lz;5G$c`QcZ% z={Q>q#HK7d0lw5;$j$(oaBxBt`ODYyY`(6d#jLn+{cdb(D4Z#Itg5+T4-PmuRjxL+ zz#I>{n6$gcT?e341>)lGJL_N#59j|wPdcVE7G7UFuRtZCk zMfCpkx_AJo)Zw4d|Ld`1XnnWd-dO8Yn_GBkI%#)R%k#`=^kEVv?XG&$nW>cxk&vo! zQwc>1TJ~U%AMcs$TRmcTG;_1Iz6JnEwK$~YJE~lF&ST721bo39Cu+6 z{$nqpqK)~xOAoTEC;+EiI@eFSJ)Oj`FWDQbH>8eUjNho-;{da-C5=nM#du&oxBb9# zydDi0wqQ2T)ISuqfv@kysph*ns#&_suAmTK`3MBDyQYOHoRIvse9sJm8PYU?`pl5MBN~L11~X*e z8=|XQfUSQFeksV;7I*R&aezuGy z%~8~+UgTIjCyHmwDviJ&yQb)ydDNxZAI0Y`v8n3vo#cHdtnaOW+At2&4Tbfv5*nR{ zPF1o_jcJ$JhtDOrtK54!1w?b%B;krK`K81x7(I_mfy4Pp@0rM?D}j{NAg55_bbksR zG|0JWDz=v4^u($l;gJ^T;_+!A3^f;B7s7BHTB| ztnCLq)8jF(Gfe&{q&Un}nCsKsdu%%J4fsk>Wo#?Kd!Moih=plEmn|G1ZibGr4v?V6 zpo1k-L}h7yp={vSn0A2?|Mfp98vxkDzz)%7A~(e7WI>G(c60qfb$6?_Q{yg_ukF-# z>w8)6jVlAkb9~h}@;W#x!TmFEvv-tgaBi{DKo!Z+PMjmz?FT#{0sKnLG>49mtiQ(# ze3&ROrd^i!@6U7gaiZ{kfgLggxmgzFG4x$p0!womhNNh$mdll*Y7xf$JWsDuc;__{ zbr&bgzUAaEP66K6QGowJPykq1K>;2>9#Ed>4`XNX#DLr#k)N^53omlIF3+%49hjf{ z9%(J4oVN##mkgfD+tD*x0tO5PjFOlOLrq|=X2CeN@Ol7{yYk@!|+Z@9nPac51tu zd(HJ)r&VjW>$_X6&SrhP)@jt5J9YFnLFL&cZ^ct1^2SZP22C{gcXw;eR;RXGUE8kV zeG*hqm4DJX?G>njiEL_}^}W4^b@U^F@~V639Sm$e=lM3BoAp-E&GQb_1TLeqxwp;T ziJ+d!YDlsMVX|fYBw0&}1GC>?1POj)k|lWx&>Cj7Sl{HB2lI6NId8>d->@$*sEZSx z4|Ig*_c;sTt;FG39{a)J0c5?G5za~E`z~_umhX9>uZJXA!y)6`1vN>X{A>n_u0^(| zKm7HU&fZEgeoD^zAYP=o>*af^#?tb=mH4FAoWy5>RVCID!5S&h%)D2?$sj41;V7Je zSJm`0hcYIC57Bz{!uusa3X%N3dn->@KUaVlumZ`?sjH9U{;EiO)uU0@e-4a(T2~*J zhuF5F&ljw*kNZ#^MoIgVt(`_RerC@pZU3+ntTt+CI9J@uF&=otGJCe}plI zAVDhL&9KBH!ZA?O0}D6KiV1!n_JbFlR;E8WzofJ&y!?1U6#}OcV|a-*&O+rXO{*~! za1^idg01Zic<{lgtrS<&KVk7#Wbuc!C#lkjMZ{s>V#U?a?@T^Zxc~(g_?p1xh`^4E9UwdSL$Ix00@{+p;OV(=q=P<@Hpy;Iw$S5c3m?1s8%at-e6)Y{GZ zdV+7_!&KpeLG|m*z@8hIRom6IYD?X4l?)^i`en7I@L=WrY$yOL2llR7qrS_TwbsLW z1C81r)tdE9j8VW_QT@u#MA8zI(cqD~UYC~_SaAKsJW}|iR*>_!qs}7VWaU^=R;8uJI^CsQ&f(6ij6wCc#bl` z`ywx~IdmX>y2!VR`KLL0l)&$5Ev&80ZylH$-p=}-yZq^M8ub^eTc7PcJ}TD_ zw~jZKUCUhCL~S-&Ie zBW2DTJJy8`Z_5fPf~wn%(p@Fk3vhoLDKZ%qLT*X!cX9JuwJqSFp`EKTp;V znn&hK;bX$%<&2mgyK^V7p2_9R`Io(rIt)HGRzz@dhPa;KkI}1nekoCwX&Vd@Ya)_w z6%|9OHF(9<38^<+b6}8UPeMVES|2txt_@K2t3-L#-fksdrNsP%a#t(S8w5puK07I@ z8$`ptsm9nTNj*6XRmv3Nqi_!rS(TXF&RovZ>73O1YNt*^H--Oi17ZPE4Z&Iu@$d{E< zMU$X#iN&(yCdZF?CTM3$dxlOEa2{S2=%} zn=$p)mvp;OMf@p`K94NdA7Nnl^gYg$-Q}TdzgpLego-d+f4F?yKm54A^SJ)t;r`0j za_G!2Z7(&R^gnsJIFG@1^;bA@xCwn{Vv5;o99iq!sx{r^3lkt!YdWb$d2_e+X?uNp zZ-1kMQLSSXR0Jt?=(6VP>6$5(ld4s`!IPlW8<_OuEm^hQ+;6pO8y%LB9q;bBib=KM zOKLIYf~B;>s#YvnMX&fwXvI#W(x??OCN`BnkT_gt41J*GseO2WI3PQOp-NgNE1xKcHz-4ngWu_SYDylKClt3Po?$p=v)A zhnZ|Lg%|8AbJ}UZ59gF3gr8~YmqHhkdi}LJBtL@YpC)w(qw_hckQn;8M@EU|Z$S{r zY5`V^73PNy+BA(0;7h?<)+6k^P=1m$b=tc;aVv4oo>56fh-5ApN5fD|6)4grq^PDZ zm10t4=Bj$*$IQSxBMdNuQ^>6$4qRl!fBK6gzQEE+))QI!-XV`2HghqO9XnE(E;UmVxYv<1ypYP zV-A*q-wVva0B)Gz`iUM} zm<--NG9j9})u$zRE{Nt7QwgahuhYoFG7LtA;Ps!M5ReEm9Ka>{MBxf^6;nOIt{|fU zBI>s!#C9ET>`7|6xRXGsUCe_cRobZ{)d6#gbIjY5bUKtk%-WH<`@ z;LYhA2*`x!0+{-C*!Mk3d`#AM82LkTO*HRbSZhz zZZ}9{zYX<)l_3yQorX~c@S}s{*|4vejw?5;380S-@-oq97ZpJ??Zb&H0k9k2@Zk>W z5M!ZSUQ&6x3|geXjk$kH@WVFYswf6Cu7iZl0Al?w!(YGXt%yMnQEu;yC@1Lri8-Rr z7whQHzsU5qAkBk@l>7XWn}4_u~M;ENuf4vt5>&$}pRXOINjPq8OVLH!ly z#N~^4a?~SM$cSjK`?UYW?Qg2MV!E-e(pQ8Ou zR~Fh|SutU$VqB80XPY4i^rQlxU(*) z4*gcj_aGR`y@iuJt8}2pF9rEom@Xj&{CFPBCP@Lv+!_d+(429(8Ajf&Y|R zQO9(#%O3zS zhT?B0iw{R#*Rj|&a!ey%Voy7Gb_=5Vda@!Wf9=LqChcxgAo-iQH$fAHb*-Q2T?PHS zQQ&)y70$s5mF#XsA*OsSE>1}+I!e04Gexs45oDBaALE%MDUF>^d59R`m!P6d2km>* zi$Y+tY+#uvgp|Z75z7gzk&}@y6ne`$6~8H4UIKFT7sdXqN4DeTH_b!5% z{Xo6{ps7etzZQ#V1lO}_oApB{P3?%I`6r?u@ z71Uom7FcbN1m^R06BN!Mwf!c4kw9=m0FM}BF6}j9^CA`P#nX&X#}S$db7{Qiot21+ z!l|Mv&d25LZmJYRaD1P+QdkAOARe?JCI0X$#1iCJ8T81a~7ARzDX|hn5T9Uk{?Sv&4jp!Wkwh3V?jUF^0S z{CZUBp)$Wgd$J=-71*18n<05fDO%*S>z1u@99ASNOh%w19!Yr6rl)q`mWkIDez zC*8oYd-Nv)_~Y@x@NF;TfmvV};5b6UzCUtph^QLU2xdENx~}L*j4VSLjYP4#WWx!~ zu1iDWMMGi%j*{@$vzT%_CehT>T@{ zHOO?C4KsE6-6fk4w2ua%6XM2j*nlJQyGCp33%E#uCQt^k!hiCp^?RL zn{}CUXMjiDn|UNlISTNc`u*JKbQ6W4A_?vEd|bFFVs^Qf<&V5*cIeXQv(eF<<(kd_ z3iN2i)ZOCAA>7n}X50)TN}P!FX@F|{8;$MSr=9ifY8|s%UxudS=`{I5qrd;gpJf_R z_?4$u9HS1x++@A;-qh*UV3e?iINXaLJ_~U8{Iirc^sn$xR?vqydKxZ$F1U9Z5-?Zt zXLtm7T-LrH`TYI>z|Hqem+3Nj=wgQhS{Mb?93TO~jS2^55RvwyaE8AEWbFFSdGUeY z1(PS6Vzz_yLC1DoIpmo3R5`Q8wEI;nQ(+XRs8aQDaiC)2?9AI}ME?|1IlVBySS}mv zJ70l{3u2_qo&_dz&1sI5A@RZ>FBI!;2=6?YJSWv`9eDaylSvNrc|-#bs2fJq0@nFo z`I7;MG3FudTAs;MDqSf+USFXTmO9DXzt9tv1MkRc$7nld8XX+Kg-^f-LDq&Gk zRR~`l4ou6!C?;tW@5|nS-Bsg(C}pMTuV@@gt3$eF2Gn#Bfrn#Mbn8vCv7$;+g(~J{ z6q-QS$0r6678e(OmCvMc?KQg_n<7lcwlRN?UGrZ5otr6wdzXhC zymp;YWcUS&j6%aTk46wb3nGVJD(DkdE204(tN1l4^RpOxQS8Q+maM-o)i-R1=DY*g zDBI||l){x#2}1M&s9oc4AofT0e0Wu9$Pc4lK=~Emf&C?vK8rfBu;2B~z$QmdI5J%xL^w_E5s>r6 z8h;2}3#S%Z8HcHPvT}@Ac_f7y`=67xM@O3H%S%fJe4(Tw773^I-MxmZCXbd*&4%KL22SQg~D*nAR*QtnG}32{F`psd_CY2eH0P*k0Zi9w!0%CIqmbYb^yW+Bxk&1 z@gi~twBylnVg$0QhCAvx9*W_P=KxVo&tS+(7zD|bn3nh@8(cPp@nNt^-($D1+Q!0X zZU-c31L+iR1RmO5gC9!DLx@+ed5mfW+W<9+2dG{t;Qj1J~?@GZ;K} zCi24>fK{=&Fy{zV4;{$%f@k3>9~Ha`=s`fkKJK29yBn9!fuP>U2B`=aPvvPR@JF8Q z9~>BD&{x{St_;u!MV+J7&U=IRo}}M)*b!qeiz$A9smIO@LXsy|4r;77Yt?p*v>}Wv zsc(|qy*8yZhVQ;>LoMXOx1tM;*t8@Z8N0D$5^c z%TJSOwZ_1-I$>bJFGP*klrJ0cf0>$g7+s(yzzjKkGG>S)JJZC?5XW++vd$3Obs(!7 ztbSrSr^~bWUt+4x5L-V-4FGcN<@9M{QCP^+i$>P4gJ?rqJJs#&(%4GxpPi!h{d^EJpQ`%NX-e}f$s?8_lVeJX|0H|V&ax(&z*dI3NLyP0q3-KYx_z!=D|G|GwAT10ERGQ+A23e?3r)pE?4h}~a zl9T!JhwA&pQh1|5-l!k|LbDCKy(fm@jRrGn`yWDdnf+Re&*Ovg44HO@(;v=|4=V7d zHDLdkhkx|=KNe=lbg#!=EMf)fStk4U(hQjnqv?3OA1u$1>BwR)S7yjGm#pA; zsII`0=&uB6&9I#%SSF^IWdFuhazobc6086YCSLy~oCdV+`QCH2_2sx+6q1j z{Sx2F6`0(S<5B(^x54QJthW_t+7E{Z%5tni3*j(uB3cTD7Ph(yt(ebC^GocXY;|}S ztJr1?1(h-Y%+T{3rO`?m3e_867miI-Dr{w*mmE)wwNinaM*$yPr2;GE&hxFS%ww;i z12Yi-QCWa0p(V;Jz(5bIX@M4dyO@z{yT0Bgh%RJf52)6I`tDW=kGGoD-8N~}wrlI{ z8IC_QWWTXdZP#YVMs2&+u0eY$zd``JP^=b>owXH48WPnNIVcj+6G}`uJdHVY9tl28 zWCeg*87_FSTJR}x#i$UTh2+B*5qX{CAvJ_JQW6E9xr!91lxCNB22A3)uxf{oAN1@1*_E4Gg|LIqGF=LCfDnq5O%f94NqZ!gewvGiQo8hmUdKr+)`9QZAX`k!LTp=< zdo)6rmP*-OA}gYr=T!Na398UZJeeG!H3#tig%}iyrsw$)-u8t>LwP|+5v)Io2KixJ z7(TKp`xLt)$BpV<(I6Fp)Z$Z=z?^EE*M-$78l=c)Tue7WNO9!YP@+^KTTCZTN~Pp3 z6Y{fky(0BM3Mw-3H1oFa*tze(@P6HQ{Q!CmdR-Gv)p?+G^Fa42A7%zw1eGY1uF9n( z?~|%agDA|F7ITi37RlNCOj+$8$A2p`EK=J+!7DSn;(-Iu{)C!AD>8#<$M>Rs(NIMl zSm|NE?fY)z3{$Ugp_M%>x{h}UK=H#L%M~mRO^>?xG#*?UC{Et?cmepP>uFVX-NY&j z(k4JYwS01@@F^ZR)V0@r@4)G4K(NSBDGmA@JS`3fX_&{Bf$+etM}3f~ebbiTV>DCV$3kfL0W|W;0AI-=JDLP&_q!u8( zpq9yxrdDxa4u_7{O9P7dsOyuYFX9ugq}j#TN!h)JPce+>Fb#L|quU~^Cibw{3n=xp zD~jcgOm_tPDFT-zKbncd=k#6!YMXaXA4D zslvrx;Mfgc2UkU)Bn$IN^dh7@i?=<=>epP5PXXK#MHn~5s={l zb$WdO+G04!EOzn0_ah3_JiA#%v>j>sV`v&7K0OaXL7+e}(>5WnzatBqSLvbn6vNRV zi+u_?6`x|*_hBVt`aWM&!uK;j0+Y0i{4XV+NckbOUmI)@F$Y{%9fGRhpGtS4Lsur)Bxg7;@S46v$0tofIY&j;RRujcKrh;26-A=Z{Ov{lp>{BcH#K z9i^KaI^fs=ji%qgEhbd&2L3ptfzq->)?H@NqrT(z5wI?ce0o1a1LIHFZNLjOVgv)u z+pJZgvqG!kdsp(ThSgX|6NU4|T>0PLWA?1@tMM?XTrq5|WSeViPEY+SL6I47C-$P%Xp+6kCW+*#RsI2r=m6q2qV^-0?g z0&wbT2PQxx^PAacabfCgh~X@$gR>LwB_ts=2QCdm_n7tA@;x&MW=PYt@ps!{zu-dA zr1+5d2L}|6O^m_h(unejqeq#4z(&p2BxKEcJ~&;#@Wn{LfoU|v@JvoXZSujG659vA z7t?h=oK0KS^7Z~j#G(;>U(AJq51d_eaLe73pc#=JH&t9hmB{q!^6IjIU-^y{DW8d{ z!q160@im-&#c&G5GbTPrHvgv+9K{|h&KBRsyR^XUcAaSOY>wRs*&S|p2(HfGZdTXU z>g}CRL^9A$V|#zAzRU8QW6z?xbY3VFz!UjO0W#1{6bjcNCHEx%jp^-WbMR~^!gH?N zXC>e_E&)DYqKO~!aEb667q~ol7DeyyPX41JYXW}b5?7!^DEt_Hh4%u#agl3Kq%;n} zk6{86y=T1#zAL>4#B7a4B_ecU9WGA(mv!X-Kjh?JbS%jK-jI6Spq&gxZse5kw%zi< zr7R519{Pv{{vqXF1=XET8c0KTK54fF*-p_o(Mg)d`5q_?bKRnQ5Z=zf?}Y2KXf8o{ zPFYJG@mX5FHxC)k=M4ZF&Wn^t1s}0*@L^;8W(i_DE{IT?&7emkgRq-#Q7+v)E1&0Qs`Q)f zDdz_KhoY;FjD0>MpFN9|e~oFk15bWDiyY$Si-FDrULj?BCpWa1$`DSzP>0li@Et~3 z;5Q~4(joO6A^HMjUSL*N*`F7u758+s;C7{f)r12WyYj*O`kI7bkV;vn$7s07hnAp~)g+O`vsao|J| z^&r4Pa}=h}JS9jHAFm(u_@4@F^VFUeYO#{19F8ObRVS^C4z5-zEj?)k)WFTe>_J2ujL=cC0%}9*R?`gu?xCi^eo}AqpFaNXOPdFLSfW5-?B`JgY_?=mtvQ zbUCDUf{}@9^_E zq<%AgYj+_)hVZ6O*2=o8tMyiude^PK>GkLUJJUO?t5xBA5M5qDZ#9q|-)Qdb?{2K` zud(!$8*82RlLpF+x8mUrOvi;-_oBAis=f`#!ok)O9IjwNpba&Iz~!aI1&}*60}vUn zk^_L`&SC(`70XURIQl1BfZ&6og~Zyum01Jf%bK0Td4?g9(kF+ZuEI6ynm`X=Azn?6 zqV=%8o9(`-%;6hh=o)i#&cGbb(&y-h4k976^>(r?5#3I|Ef5w!tjnd<)rAup&~MEr zN&|dQ;ULNkDz(h5opys~WzEi01=dT8%S$k(Zzd;&_4NaiT8>FfJ_a!t-qgfgNMp9-@WYoMk;KQZyc$^G~`QPS7=)aVcLgL#}{C1sgUvK#ZY%<^s=`M2gtY5QD1nW&`*G8F(q{t=obX=Iy!+x<(Q_N|kn->e ztLdT>Ke^Zi6lt~Kke?TzT28IKsM#d*;0pA{g%>o=JW={dQ=ZgmdQ9CgD7}&ySnDUU_U(oUi_HIi)7fe|43GmB@}& zA^E)h^f{5!eoX7{FD^3|ewz-dXNMi%W55EP#jDD%e;*XAcosumpzDnziRR zc~j!D!W+f|S;k5=I9&i;6G&<^w!1p7T+C&`6>RY@?WZ$#H z{_s~|1H}ijzN0E_F3~-FqTsj#eoY~HcN94IHAm*KF=*yj-!+3?sP^+SZNq<-{0NG_ zn`!^R3?r+@V#i7lMKZTqE+-}qA5lCr8+;poL@_jOC9U;lz0vM$*0*aw49L5-Z;jxZ zwF67`t|-hLdU0XZ3BkuC++Y{j}#C{B-E`erko`PoIWA zbu9m<&j;>L$Ns?qe$9WFT_E~==maz*3uQY!D(2qTas3`#CaZ6S<4XVgCV7Oxy_k$p5i1HzyMn8{(B8L_eMbp7rHct=jx_cdLV;qxYNJ z&@oTmswQfF3$ZYyX7JqW&GF!)=+6hOydhd?)!Oa)?pCYQsJ0&{O-Y9LQUUJTfO}0T zg>D|1?jb!!H%bwQ>?O6=n1j8|hf!kK4N>i(y;t$TXE}s;iMYy3q6%mU822k~4gbbT zTFc48-{K7BL}8}DN65)UsT7(=lq{4;U>}i@W3o_qXXbnr3-2h` zTdXSoF;)~tn5Do5c`tj{s5Bt=4EIh^i+$-Fy}zPkeSd@N!+5`f@kMo`bzBN4dOl%R z-M(oZg1HzO(8z@HR-fQWmgagDomXl)s=^B!NHVh2cDVUL=2X-#EI+6Q1Jkn&a-My| znwi6pw~$hSPpl`T8McxT0zQH1ST1K-fdbE-5B`93UE^IM@%_JZ zjUg@<)MO)<=c2(7NaECbb^SrDvr$Lo!BjZ#4=K3sfiNtT8S{c1pGK+U+DNl+>{MIr zT2oMK+4lQN+m|clav274xv^D8J<+M<_S5Ag)t)Rs?iHZ2*LW<`n6$ne503BOyL$S5 zTb7eVSOkp!%@YE~>w`MJtGjcHyHKc{oc6_K{O{`s-KHRPVrvDdYr%sCSWY-0F^Nsx z(Q`^%Goqe#Oa{~pM**`jgKQmW$YzHyCrB!Tt zp`lX%m<9oO=F|WnI`JUJHG=^D@nRB9&OzDY*>M_|q3E&zV?PWvxGz#F0S~CXQ!YME zAWy&ci-sBGH{+2b$t%8*cd0OqN=re-u7#d6qz=Zty}k3K^~rWeq)kCGIxqvrw7YPH zC#sO(;pgkm7HgmR>x=ut)$-oraQDDjS+F1McWcXgl`#-5-j>iasBNj{XJj)v^5-9q zK6XEAxZ~B0t!LF|W&87$gXbUL``rJe{tViBjg70hx7SWIc!v*ehR;FG+N93w2CFah z_F_)z-O3d-jK|JcLY1}Z`osN3hlN972MSxLin0>2*2}CGEM2Fu-`q-6QNs+&DpQbM zW}~*Yzoj;>&f$hg$m3&jC^b`-nBF60Gz$<>c6re_Twk02Wp}V1jN1Oz?$V0&?C4{E zaPR5DA+--atq0z-hr`vu(f<67bsuJo?LMqwQZ3Q0dMaL_UTMDtC2zoxxA)eo+ll$9 zg)i;5*P-Z3P*mi*Q75QE()1aR(0G(w#1W%Z7wg(6I#?NW7jc{$YaIwG)vDn=kthyk zIs%Aa<;6QA&jIh(j^*I6q2}K9cC}sK!wV8ocUGx;WpErmL(%CL7T?{it)En0v;iI5 z+*nH@7zZneSuDnO9W!5dSxPV%(Z>ExBNobZHR2p)FN@NxhxJCM)k29-)KEiMPgUmc zVJte#gLrLYExx`HrQzfjBRUhx!_*S^&Zh>MzC=Tp7Z%FPxSddVubJ2%HI3S3Z^Sa~ zOhLhBZL|KV3Prg^TYKvdle@0&oEVbW2_OmL9!R=o$6Mtvt3_P$DrOK z-7urbwECbFfwsS~Q>|}fvbaudXRWr;*{QW3>@h0HS4F*Ry>sl3K1yA(-Nq)s@3~Xm z*g!s1RGn8A^m+@(QmNjCZk0OeS*d$}4b($@zXw&Oup4o8CwfpZ`Z8!yalx=CeAN=e zQL!-Iwp&(=NM?4((1Y(Hu5WtM3vZ<&(S(krDN3o%~3 zjy<)vTb)O>W_|NXr%^leBItljJrXW0F<$@XPW97Hv)0<*Ze!j=u^DR0z$>6?MAGxk zMzj8?+ODBmuJxqVuI+R->aB+=gn}E3z`U2RW{3HfA&fTm*S72HC)HO)2oO&|gt#5w z%petvC5dZx7exb+*G~qm=Kvp zGhVM?QH;59aO}I}M2h4gR{!F1$9gWJ?4BCiQa zEG>Vamjkp{h9(gN|PPT@zBjV9PggA`BWKw0gKB*DR5UQ{AFfD(w!BxgbKZ5rOR>&n|n zt*iPpqc$p6P7%iLlF~Uo*fk+{NwfCJe!W@SFd#=^eI4>55}`DT3!S53(K7Ie4{J}r zFY)}WtJqa&WWRY1DN(Ih+kJ%L{p^ti(m0M#fGStjnNbh5Ylz>Yp&wd6OviLMW zT{xnodrU0TbwPvh6Go!YL(PYJBaf6y!2mtbhW#NigUAU@j~votBW|)(g2**LnI-G~ z@R%oJf^JyzkdH|jreLuRGQHnk7Z-3aBF3jf7Ru7T*d^tJ0XOfmxNG{-aIxQjbicI? z0+&Rj)!u7Xw`wm0Mskih125f}N|F%$QO3*gGw+4XRmjILWO|(O#&|=VAs6t;Ib?$r zfoWEruE!FGK?K!-&&C>Oe+>fMGlvpI;4l*811kvTMDt2g*wY9s?@1%38>b5Ra+HkA z&x~EjKH&W_3ImXf1em9VokW~{DFYgW3wyG!SjLOrDT3e&gOt7f_SRl~cZ&e`NLsb# zqgwNYKn-%E@CC^(fIk;I0AdF)^KdL9kFUM}_8K&A^CC|H7MBp901dv80FZu@VuTax zj#Xp1#Q;BCRkl$Fgr$K0HpsM)W5nKKGb(F;VoRdnNsU47?u0l72?=AdZTf}nI?xBw zXzsO{R)A0VLL^qBi%K3zX||>m)8(m5WeA+BlP&j0`L=g?)y;8^n@~ z#ueh5cbTUc{7P4dICbHIR+M=|iZal?B86Ore_vb#`GHOZ`4)E(gQivaqr?I#6AHOX zhk+B)5?rELeF8yJAQW6$67k(&)*PBvpU(P$dL_Z?B`+ReVh9`=Ap>8*4NI84WPseX ztKhT=Ut`L%(`LXzUM%9Q;4}oIO1KB+011u=ZcrKq)C#B>2_C8hDKOze8+{EZOUL;> z0MhBp0U(7Ngzz+bCbyaw>zDX#4sGzOfwpt_B|;`j7R2Hz`}5*J_p3Uf`#UkvK|ccQ zSeyrT(-x=0M3+JmP|FW&8j#3zTpwaHfIHVo{)u0)(;;7$*y(U+_NYNbhE?`&MT_aLK1rc!aN~O>Ls^9fQY6mAuM zKJiYWFi|WNCf+R+3hxyPh1-R~#Fawf`WIh(@x}E*VXAPqP?(ySDExftBOO}&UkX}4 zw6>to~>SCTGy;tQ8)qR(W&hu3J#m zzNQ!XUO0#neZfk-l<54z$X?YU`>zXRSLT;GMig7Qo*6mekUEJW3d+zNd2nDlzU^4d z-30PYVZ#LYC~k)`6C0uMWn}KE7!%6zxJEcQqN?kuVon0Kl8!|=!l}a+Tvdjb(=IHc z14*L|8r8GiHN@WYk_ilia?>m26)5V;G4E(h7k|oa~_j3v2w~eKNUZ`IQp*v`ls{7KNBWrqEms) zaHHaQBZ#hsCnFT-2au(bc@+!;zZaMTv^A6OC@US3E{(>NdL$bAAcqgY{tWUDjUXs> zioV2sr##T0UnQE6{@B)EAjM54j%6+1DkiQ9dz#Ck5*m%&S8T>gXf-CEWDa1V7GS@e zij+hgju^u6MS{4L$jZXXqJdv(0HOJL@NCELxyTwCFm?&YaR+L#kq=hFp3eR5h0(lhm{lI~IMMspFAsJKG zh2MZ$qacKbP@j83M13Fd z%E6=fV0+=5A|P;J&J8A}Cp5Cn1f`JzfGnVFmJa2MOA9My1HV9}MDD_JK&O`Pg}zJ4 z2M^lqhRCf}g7U`F0z+IcF5aES*(Al0e~GKe;5R`x7zNO~plgq> zC@{Tn;DnGd7H>iaX-7=UYK*P`gP>i4&9wEgFOs|$#D+Yd{`t0I|?kky1%0LWa z$p3l9O9h)j{CM0|C{Zg-Q1rW|F1krL74i=x! zjfSCT4vi%k|5f&ni^FSeDJ4OGs6>I(c&rY4_lr&{L<$WUnzt)E*GD$o;iSw(Uz1w#$tJg zf<^=u54<3yI$LE=Qg#WSoThZ zaHSa?(qm}ioAGFP6V?6p1Mc0C9+1=*$!qRwb8O5p!d+$m2Ck}5U`*4V7Ng#mFfsz| z#awFoijE~ckc;EimJYZ69f4cP^%wZHAFL%p_<=|RlLT33G{n1Ph=Ly%V}eo&@!*O? zw4c8H=E3_^hDQ|Tppb)GC#@SIf>v7+@3;bg_Z1+GQ7A5`K$j>e0Wr5Yhot*4ykW@< zzB70+I2>V_lQ4BTUS}Rr@od`xD4Yf(MC0GdMPpU}z?82bblgI_4zWKm*k1=?1!k#2 zQF@(ENa`uBv6LnuE-ya4>h1@5rPmoRjcMN(vC_wM#wJv+zBa+8&rRh`pSnYo!+-P0?{tdYR7 zEzISIFqo%B61N0AWMK(-SYQEWB@hCkhu~pj{13imTjF@YjNk8zBO|l2=G5Bn+0@L- z%#P!WFTVI9;)^f7_`=N_J=*Oj#U95hPpc&Cwe!saSP87#P!e$DMGwm_onC%Yt($}! zWLhji(PBgnJbBP^%IkC-(=mD)2+m6By##Hq(lT79&@}?nF?7Od(kR_*??l^)Nl~lg zh~A~8NVdZ0uBDyXPW75k^aTU`22*ono*!g-zTP=u`!+iZzQ1owyAJC?0H>2*?dk+HaXT}1s*ZaeQhmS zRxm%X{DX`2axE|82BCeHydp23rbt{At8eDFWWrkq!sg~}W4rM$6yz-=-q4HNCxzR@rc zB$<+ig8z7v>Jmtn5M}R=i71-ohW2v*MQrQiofr*xPk(!+SXsV_E+-Jsdfh#eWn|p# zcf4n_I^KnJ#}g>XzGsZ+eW7Xe$dT2#)gy;6HF~bCx}#_Z4efHt3WSZnTGJ2qwVXi#SMs6z27NNin*F7!q9+g-|!Ak%j-&Ks(2mQ8dIK3G5UYR_O zgK-Md?=0Gz@Pugg9BpNIugsuD$^+CxKA3jP#C(GyxqbCXaiykTU(YHMXK9|)K<$Z+$y6k|fu~zd*eta+QxxMZDNn9z&tx*pP zyOsQT2it7<(Ca{swdeB}99X{EMl^so$8cb-V@KO-U$)ICZ`l#%QqO%d-}lI^k`~f2 zOdQ!Xy)M72mCAyZ%#*n1uj_2uAxvq-1&LcQIrs7#w(aK)H*as#<^x@UxbF4sC%JrV z!_vlZxAR`KZU;CZVcG;_%Wxy)7c*;mUtCZG);B$;vpsM4`o06dOy?HXrm{t|hmg^2 zFJ{N2QLJn&>?&v;mdm9|tv~AAg~+42E9M*|v?KRt3eo@4LOw9mKV!{@=(ODo4toxHS$ zbJuHYM^3FQEuU06?&&R~*E8Bi!i-T9ZH#~%^U72i+d??+fIUzK>vZWqb1 zLWnC3x^_IcPw~I`uq#yuzjhtf0d()fd#C&2F*hz$R7e|fRV8nK$X&@Aa(`C{KeEV- zF*hIBhE;H)0wf2z1+^#dGD@ChkuXwfZRw3_6U+GQK}yzFek4{EGH}FbC8O2HbtRm9 zek3p5yuUbpraC42R7>TW)DmDQ9JO4@Vn;RpaGr|Yfyb3g^C4v!p&y6f^=54}8r_2E zzKXS||L&h1FW_3Xj?26NhORO=!Dm4)Nkjpv!_m; zJ9_en^u~7EfZ(M45a7NJ$EHpNM+MmNY5H?xQ?+mi^*yiKlC*4$?i?6#lGR_tB9C*OPQb^j;BV6 z;$pe3Im6aTbo=w-$*g(t*C)6?B89x17%y;BA~^-pj#7ky5WB#X+Kn8W-(D_ezP#h& z6g0p7FF9puy6|CoX=?DBm_zM0zmz;RcZxweF?rrx6VVKln&kGiN(*%{%kf!oXqprJ z$JObQJqgy3x&c0dj>zp&E^-e7PA1HtSOo|_CkItKXcwJ`86=L=b78K?j**=#d8Ldf zEFS-}GxPXSAl{T;g{d?I9a({RR9EGtM}L(zYg9j2k?u#{lwb1w5oA&$`a#Jl$|+Gn zMA86$ko=XZ0`(#J;B`lEl|>(XZz{{1^2cy&Q?P}ClNgo{R=AhntjkBzEk8o$f$It_ zX@cLcH;xcOLrg5k8yXU0UtKczMSe*a<;~#gNoj$n!@e5^l>yBHg$7)CJ0id3N&L z@;UBGR-}vPN8KQak0@$p)Q*S5yIQXb8^BMdZ2&RN!jR%uvWx_0w(NF+j_`AJclP`> zmt~a9Yp<>BL>098D<=+!vzt30ekyDJ`VVqlM?{m8*AiW*mWO$Yg^`3GZkAt|!7d&< zd^B&_;YQ^7I&0@Q9fK5C;;J%CH|@aN3hg0Xl{TmK9CvVq?>85DCoBkrOe3Foad{IYgz408iGGd@U$ z5MsiEoGS^^&?s_aEmE~qZoxP)c7+be)l#{nOcptxQ2|=VFL&GfNWp&owP{mydDRKo z9Q)p>QOm+k6CoY zR1QQ*#8R%kQ%H^RCGDOIr_LTZefH?;D(+;HzHY?@D!P~0Be{MX{No+?oe(J*7i{m`+MnlxvFedCth4xLCWFWRu%NG&K7yjxeoWiB8_UIv*( zW--)?dvx~SR%`Mz`a?sh#Thde#bO7BBLtsOgL|g8!NjOSIrBrlW)*1@@#t-fBjRKy zPR4V7N=#y-IgrXqEy7wjZKU0vaf<{9H7m`q#AVhAul0AoaOk46d6uL4jM25-=*ca+t$RtIESE}k@^r7~ zk?zLhJo;V3`QTWq)vljt_Pm$s3(wb&3@T>raK}D;Dm>HP=yAX0_pL0QU0ynJDCt!g zHIyExN29+R{yNDgq{5zrBs&25y53KD&DXL>vw6DR$ z9dQ};O3nRRhIp#nP3!~x*+X>9mQzK%)`(ZEc}p!VW+{X=;vp9x-|LmDL6NubS%aRo zf3%C|5y8-0BHO*`Y_{fKgEL&gc1@`S95shNAM)9H~o=L!gKOhd4*aQ{(hAomL(sd%Z5e0>^Dnk>6Tei05?k<$e}T(uhLbP-Jm z!pN<>2h-`puvauuY1L@=h?2svSD+X;%tu)dWaZtkx8tmLYgrK?bG{)fXBhU@%=jSM zE-kOAwjPJ^b^Cr47@Bd2!dJ#fTawqMOYJ-D7}vWbL7jFe?O^WVS1g9TB6q`BQADAY zEl~rC;P`X`{GyF9HvOIHbD=n4igog#{X7BQ%HU*@cw8EY9u`UPR!M|-g?01J0+Z&Y!fS zEic%}ufztQNd-2CHQItrt_ZYS#~1TUR^M?K1sWisG$54?LsE}e;KxK8(R`FRV-=q{ z#V+1(av^XT@~5yi75-zT_{kYy1j5Ny)_G+V&dI5LF|Xtn%D`Q9^QoUZWrl}u5yhuh z>12FSwldd4C+FV98&24XY+Mc$&85RjU5Rib!H4puWLY@qf-swO&{fFqhvZdS*h%Vh$V1Cc@LnF@2@6 zv)%Y!bb*wbuZ9wUFu4_}6+M>{RS4H2f2NCM{=C-_83?1~3@a@9fQur6|?J19?0{WFyk{S&L%;w?_2 zBrNdKXeIlhk^3pSC38+`@b(m8Ra(64ZEhPbv_2b3gv;>i@u}-u1OK*C;vHh-&${4x zk=^#Zjd_1NUnraue=Yg`eB^D|?!o>0Q^8W5cX0oHU88sC>j93T5Tmzsv1bY#)y7GBV!?0Iha{Lw?FPCc8@ zeN6Y9P3mH?(t$Cox#GRaS4OS5vkJZ%eqM)%)4eo^!3=X#q!6HKj225nH7Na(-Ke-$-?J^bPyd(|6hc=tPQXsPk;y)QL3S0l14t=oIdM zhU*mYRtkgIDLbwy9M%?S3&zVv=(%;bTdfrP+m5fX^aTFCeRe*V#m;XL>IdI9YC!Fqj!M6i4S9Eb&iJy}ao@vAibm-{+Qr~#VbMvd!(QGNoiOoKwvzyGJ zm!~Fw{)^gof^T{F2+rk^vQ!8VDG6f%HW&0Te1{TXz+8ZvD0)aH9wEe#qz2jJ={qHv z*2KiJyBK4RAKE4sA-37+?qrPR7-MC|e|Te)2S!47F~;s@Y-S7>MdWtDP-7Mk0Nokb zFAnT5D&VZ#y$Y&t+rgS2c)k}JJ;0u2jJ-p^#v6xp0DA{xxd~iCfomyVK9gfpxRwHU zQ%uh=HZw6RZmYNp!8`E)60aZqtj$&`5A)NF>><=<2V*nWKx!#iRQ1z4_z1)ZEl8rW6=oP? zm<^1`T(6)E@YiQV8F+t&tyB&&_C9dO)g0A&FJsexI*z1QXL2@bO<*4ayS;(2xdV%2 z`k(KI-TXfC%eLZd1l}dP*YmdEZ1~8j3n%xzb=T};=Z>%1uC-!^q0zPTkM+auTOVX> z?&-yD&ubgKd?J20LniR&Pw#u{EMrg1u2k~Zu1?QB`sjJ|4L9`=#Td! zY^AarG@a!a-^f8_7ybl~8opl;B20)|bI@o@0svg*zg2wy^|fo)o)+J~NNH9opJ(h9 z#(s;Qzd?Nc1;%opWi0nO#%9LB)8o*eOya29HpY$FLxE#;?ZR_QC*kw-x&Ua5!l(c= zlp1EdXSmpZ&CJR~*(xirR#~UHH!q`yj@og$eZws}mh7l!Mdk3uwz(Yda=H6i`RUD5 zpX+_M^TVI|mlMzL`-2Z}|HFU%4YjxZ{I`DWk^l5F|y}e(z|8G)5HKFhTDDO8}xr! ze52FMiEnh8s`#E_jD1<4yF>d1Gdw5Kpg=kQV0w_@=)dwCRhQqGAkT`tzqFgNW)8dj zXy1Dndmp+r`-^MW{_5H^yGnE8T{L3dC1xvPCyZPNOOOEYzcpXVKW+|!z;>hFb{@uR zUE9i^*!Jz9a6Z531ku3g<-B6pp0rc1@;*g2Nhli4 z#)b&Bq;fU03Dv4po8_fL#iNIcD~Ix@mzOWr^2@7|SY=MEJBK0&)-0Dxf?%yus{w-D z5Cafx&$1iYy)?mQfoPk$Iwr`NLe2To%h?nfAEMAVDGHUcDO9VK4qYt1aItvgB39*< zTCJ-7rm2!+kbivX_-Wj{1Fs_16N1~SoPe)+A&R~Wl@xv7c8Be;=e(E^4j(C=J++e0OTx^T@|=@yJ2MUc*8`7= zPp^cX2uoVjZim2gM8$RtSB$E4{fZrN!VTKz=kuLbvD?j@s8|;G;fjf(p3ALN_A>TL zjy=dMC)_CV@Nz+rsQ_r0|8s1dg;qP!uG2%+zZ4pgk;$);?11-Vte-1FDL%5`!c!C< zT5S>uUOVWMXlo&gfS3>H=<4m1AmmQ0&cG&Ez}JqHsLN{y{p-?DcSOs({+5#`5b;vUf5Zzn1Xtu%C`kFb@>Bx64|$?j(>6{uvf zFUA;~hA}QK3*IaC9T?lSLxk-}rmakg@F|&gx>M$1o${1SJ0ajfYx{-2XjxDwPC}QJ zU#Z-~7=tqO5yoA*<;wP)r47UX;Z1A95khWeC#Siy^kei%727`o^m?su-HKzh)Y1bnOsKK)e`v&?rviMZV09+Qt!qf{Kd7 z;oS01=7CnlT<>_UssJI?^9Ghof*P6qz=-V7>~v-5-3aB!vx?z%2pbfXkKZ2cy@#z- z{w&AXpXV6+T8_<8q{`>pX3y(7uE;<@Ejx1Us1Vu_E`AFo&?iJ1yr1BD(CK>_BaJnV zn9v_!&OMCLcEMi8#(=uDZu;CXQ~diEdKj8Ov61v1(!VkG z!AXQ;3+3u7jJ?1Z`xlI{PcX*5iKon&{L*ux&#Pj5d5JOh7RK1OFvi})82eVnScNh6 ze#Y28V=VXmjIkeJj6p4VjNn|QvzVu$a%61!$R5VNU5sM~7@PiP8ZWQT>{t?!#~GXc z#hr{Ti^v~hZ07!FMc^3`_;&IBC5&*M0QaDHKO)|bVi+D{ERRHUcoDDxs8WQ z*^!zHmp#&M zNRW|B(_*{lnHyLXJ^+dlCGJ;Wv~BjDv0LmL>^A!byHVem{kryznW;y?$^S=t1xt2` z@xbU`r$hYvuVGw!%{s)xBRfQ3^l!d9JUp^H1V;ZhIs>+(=dfc<_nNK>)NJ@!K@%+u%|CG0K5o>sfU{Kv~b!mmgylOiSz;a{Ff0L z{9w>i!GL4-1GDEwMaNA_g=Rk(3d2p+xQtnXg)Ah)3ISr2@We}`i><>bU89~|2ot65}>}e0MarXemQLmSC?3}YE(VrR@YH7KFXr{ z7q*Ba>Gpj;@UCnZyS8fwhUyZOPel?0i6f{HNA)|3ts#&(KFkM{42Z7F zOwxvn~Nqe?cOk+XW?I^TeGuZYO(j7@)ZFJBsbbT1o!oUxhvU=1)a$*#^!LVlbI1JgAkoIB=Al{YZPzAMLa(_{g6 zm8m>r?DCt^(o4&W)iR7fguxo^PpZ0TRFkaIGq&xZ=?7lqDW;Qg{Oa1|P$;QQp;2I~ z-gUpAS-9my=6b;}dj;E#0w*5EWt(qa=^1WuGqQbEqJ*kOB&_CORq?e9GEYGfz*Z_> z8D~G1V>{VO<;~Zw&agZl(-XMgaR*Jz&p&hK+-B+c%H{3N6VI0p{`ok2Vr-@I-^P{c)kpWTF*d>G*nb5qufE(p+$$H4 zH?FjMjmypOv~jxj!pTc#kJ^_`^ewZd8y-d5~W;45jEn8~MIp#9$~KL(0_X{=V;fa2UzY_{bOx zEy%0D;g9+r;7iBsr_;$vN6c3X7x zw!j>&krEXQ{0*gnO;OPaosi^ZozhTiY9K_K$POS#N=l_j?K}OjpOCy$P(*@`S%~_+ zl5;Ylw8KCNH7Sa4C}uo?X2yqcJo=bc7t`~Vv;#p_i|QC|WP~afT_va&yM4cK*^5=4 z7(BI1vA~(4ds=Eq;i0!!s!2pgD?~5_!X%365UMf!@P;S1F=2{&FT2XEl933b=yb3a zd25@#o5Ck>{6y=dIEkWDZIb~3&fNqiSrF3QQB<17m3G(P^m}R;6YWM(J&WU}^Pr$J z#V3Y}bVlAs;sz2Nr2zAIZ=i-seXygFb*@fFCf2FxNUE+Rhu|hvZgM4yc9bJ5Tw!PB zqLDX&4P*nEi(;dJ%86xCU|7yTk(8)SAw|bEy}l+1Q}KqiX%+pz?l@Ou@kC_`7e@Lr z0#aAt^*vP_CX>*0I-Ph%0|ucTM5dBv$$+%q4%dw!mP9Z$h5a^G018#CB*MPhZb51A z6`W*2o+ZhXe{? z6xc>zK}BaDhMHLWC<-`cLHKo&IDvVhpww6p+Z!|{F~-h|1bClkE0wS1AP#;tM_U6p zqX3bKj*rX;RrjBcGdij=1Nmn9osWA9A1HW3smcT8XGL59g=# zC8lWafgfVufPR!NY!5XzSP1-B)HcYld$Fn3eMmuPBrH#H0=NeBd+eZ!@Z1lJi!NH!ozCc-o(8LNnL!bsEXf=5Hx$cKq7ZdB0mqGJEWC@QuCZ$lgE zv6At8+oc2Cv|N=%fwN?cu5ZTTRzV8~Z9W|7Tk4R~vr`lU+f+sfK&u@Eov;uN+Tt{y zEF3dXH(nE?83>|hwFe=!kxWTCG*pg9g|?DSWlTGgyG=3=Bn9MYM@8Qb9DiNc?SaH1 z(y%t|Ai^z#Dl6n06}uKj!N8>Z>m+E2X&Y7thU;osHGH_#lgMQFa4LtJniJInm-W2B zC`O(i&unNL3grt$1qcj4;jSGyDP0|aKvcE|YPA8Wfx^2=gM>y=F1f|US||db!c5+Qve8q1ot^n(da|sMOn5wN~c(qLU2s-2$B{a>=yvtrT*Mo^^VbDEvH) zkkSNa_R&Yrh?8n(c2cTm>G=#jA0vC#UCh|(7P#Wkb~oS5FxY;U(SG_Xj9ntI7wL)9 z!Fw6Y;o#GKjOB2$4azg@lAplg8O9g{J_t+LNyM(;JNZ%~x1X`xyBK5dW{h26(8pky zWo+i|r*No^v^LlVFAW&;8JoUmKVvTtP_Yu4J2 zGM4{p?wzyw{5~Tv*B#v0I0)>0i}`&<-)hwMJ&7njpzd4DBVj(j@2DFE+rHd8(oojY-md*Xuk=wjG*T;ZvT{#Jj+5fsG#Y&&ie`UNk* zsrw^N0HlkEd^blru#L#J5Lzi!8ii7$P-&j4loxB|#Zqm)UaFKEm0GFx0V{o6o8_k6Y}mF{Yc-N2ine`fQBsbEM4{PtuWCE`Z_vKqk2(4@ z1@MD@G->1X^Nea=7(M4{=N%JY-0lV9nfb^F=DRQ53qUZen557td=YuEQHnu!j)c*@ zo8|fPe5GJHK_mb?3Egp#;O}8lf3-(?XFDMo$+ zV+tG$7DXCp59CyjIZb|VOd>t^&P(G<7xY{#S4;JJ2X~<@ zT{yn>-16$VqbEVhT`?tXca!M&oR)hGxnEZj~C{JWux;Ual z=@A+wP9fvi0_7t-SIZ-E$;%UvYX`@(+ECS7t>~7dB0W)u?v7F!EZE(JFeb8Ol{@ z#%0w;lqK(x1B$cAb#JX%sa2cJTB|@`twuElb7E9Ybuf1km}aTjDz&Pua)G`UD)pFP zCq~sA*P7vMJ+RpcF!z-krG-+nRj*eH{BxnU5EJ9XC}QY&;5Tu2|Jtt5j*h;0bAKPpP7pN73}4R`lH{dgefouU4Kq5NVl5Q4+V}NJ`#=%)1T* zR=(Uo;T65~Q54jNh&=!>dmwu1Kw#!8C9U{TWP>YcS^Qq)o&xSIEoXfML#}H%??ujA z+CTzTcViHco?4%$YX>vBi(by_sGO5ap1Xc_b#QDsIOd;x_FP!MSgkBa=H{`%sq%*N z%=1q7%nR*>`la5{xSYe!EgwC3Zf$fqNpZXH4cu7BPsSye`yUX)INl#%E0t=FDjFrTGfj(x` z%iJSRhdzQL7)xb&`cBs;vZQfU z5+>}dlJ0Z?!xd$&59J~10;M39UkK@i)fEmIvt_W5oZy&BZ}O}G-F8f2{?)v zgHT}&EPH5M1k%aCcm2L?Ici@NVuT7DQrL=ZNzeoBphGgIKQbm58H4&sOt9q_BZ`=U z-G%?MLS!fn6BL1|M2;&`1=^txD0x!pBrrW0SU8oeZPJ==`e~&V9}L+%y)VzerymY)8m9yf6W-EZ7&Q2VLwduY0M9UzFc#O zKc&wg0)`_;WH^cqE{QJ+muH%KF`J{)%HS~Y(_1p>Xv@R4pc+K5nuGRL(;_2BQZs9t z*Hhdk_5m=YCNf*PP8sZzh{a{qvVLf*M5JcHG8CsFghd~!&>!?7rvN9x{(7JtfI%Z* zw=`*xh6#a_O#?+ker$qbZ~6*5u^lX}Q^=r0w+RM@>ikm5o)Kk*+hL_(wPUkP+C|w) zhM@;hnC}f>{ z763^;bUXxVXBokL2of%=ikCgLag8?6q9hRTkaV&p!!WFg9T@bk&`#{|@%>fTv+T#n z(HiZl(GU6_%q{p~K$G8qC%?g;m@e_dST4WumT6#zB)_pIEx#ct%k5huu8)3ceV6i)YAW+mi|jx`rp^m!&jKZ=MS{>f2gJZBQ5=f z9pGC!B8}C^RlX#FM?N|m{eT{Y!_3_2T~3BiAj>Z0v2rpIz8m4YuyUD96mdTeuEHVO zaMXi{T9i=|8X@)&pzTH$RXTZUgx9p0`w;$+Oix(B%i7HS6rL!3KZ?kY@zPZmD&h%b z`9Puw3NIr3`w{+xEP}#I2>;-4cnjh1BNC%Z>EDX*ClTICz=3DPneuS>L4^PGFq|cX ze;nZl6L5|r{1=DAPaym=!{N&a|I=ak&m#OkBYZgl9}eVZ8pG*NBD{t0=Mw3E5aA}J ze^h6r4YOI9v+U1v6;4nGYw@{|Le#L-4o|#}WR1 zg#T!QF@6G!akt>TWYk9ywO2&_L?YM65cQ8mR4x(qQ;0e(IPGJJsGmX9`$evg;RZ15 z84{EHETaC2i250#Pc@PE<4Ev_nR!2fs6P@>AE&&PMBbl60vMwcSrSp7L=*%ZMEzVM z>QjjNc2SXJu3tdZcZjG@!G*J`$frT)4xoJy21#S(dC3ISZ+{ulT||GHGXXRp$V{=n zg4lHxyW^-!F5MCh{28RVOlfdInkx8L2`5pLpA}_G8WZ$iLyGSdDSnj~j|%}+@xP7) z-=!y*bXjwvNQ-ITEmoRdo1*jszu`@&-|w5WlPA@c9G|UqsZu6*T%pR$KfYQv5rS z;)@wLd|}UOSn>f2{G^T- zZ>UtIB_dp=Xr8Nu|5g4*U(AvJY#4yi#xSJ#Ic&YcCo8|!1%`^dOEh!qf2xvh!Wj&IrkMC)N$3A|&r)-H9+-HtG>_RcrJdL+K5mBna$HI|yxV uJwle|DjFp6{bBo85R=;hr`O0>PV&Xcz_nEQSnl#r(#3TObV5mD_rC#n674Yn literal 0 HcmV?d00001 diff --git a/MikroNUC/20260628/20260628024001-Config.rsc b/MikroNUC/20260628/20260628024001-Config.rsc new file mode 100644 index 0000000..6b0f057 --- /dev/null +++ b/MikroNUC/20260628/20260628024001-Config.rsc @@ -0,0 +1,4871 @@ +# 2026-06-28 02:40:02 by RouterOS 7.23.1 +# system id = NmJcEM+8XAP +# +/caps-man channel +add band=2ghz-g/n extension-channel=disabled frequency=2422 name=2G-3 \ + reselect-interval=20m save-selected=yes +add band=5ghz-a/n/ac extension-channel=XXXX frequency=5660 name=5G-5660 \ + save-selected=yes +add band=5ghz-a/n/ac extension-channel=XXXXXXXX frequency=5160,5200,5280 \ + name=5G-5160-5280 reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5180 name=5G-36 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5200 name=5G-40 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5220 name=5G-44 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5240 name=5G-48 \ + reselect-interval=30m save-selected=yes +add band=2ghz-g/n extension-channel=disabled frequency=2442 name=2G-7 \ + reselect-interval=20m save-selected=yes +add band=2ghz-g/n extension-channel=disabled frequency=2462 name=2G-11 \ + reselect-interval=20m save-selected=yes +/interface bridge +add name=Bridge-LAN port-cost-mode=short +/interface ethernet +set [ find default-name=ether1 ] disable-running-check=no name=ether2 +/interface veth +add address=172.18.20.2/30 container-mac-address=44:F2:90:E8:88:95 dhcp=no \ + gateway=172.18.20.1 gateway6="" mac-address=44:F2:90:E8:88:94 name=\ + docker-awg-veth +add address=172.18.0.2/30 container-mac-address=14:8C:F8:B8:02:D1 dhcp=no \ + gateway=172.18.0.1 gateway6="" mac-address=14:8C:F8:B8:02:D0 name=\ + veth-awg-proxy +/interface wireguard +add listen-port=12429 mtu=1360 name=wg-awg-proxy +/caps-man datapath +add bridge=Bridge-LAN client-to-client-forwarding=yes local-forwarding=yes \ + name=xs-DataPath +add bridge=Bridge-LAN client-to-client-forwarding=yes local-forwarding=yes \ + name=DataPath +/caps-man security +add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \ + group-key-update=30m name=xs-Sec +add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \ + group-key-update=30m name=WPA2 +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/container +add envlists=awg-proxy-env file=sata1/tmp/awg-proxy-amd64.tar.gz hostname=\ + awg-proxy interface=veth-awg-proxy layer-dir=/sata1 logging=yes name=\ + awg-proxy-amd64 root-dir=/sata1/awg-proxy shm-size=4096.0KiB \ + start-on-boot=yes +/disk +add slot=ram tmpfs-max-size=100000000 type=tmpfs +/interface list +add include=dynamic,static name=LAN +add exclude=LAN name=WAN +add exclude=LAN include=WAN name=Internet +/interface wireless security-profiles +set [ find default=yes ] supplicant-identity=MikroMIC +/iot wiliot servers +set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=P1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +/ip pool +add name=dhcp ranges=10.30.30.150-10.30.30.200 +/routing table +add disabled=no fib name=r_to_vpn +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=test owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \r\ + \n#:local ScriptName [ :jobname ];\r\ + \n:local expSrc;\r\ + \n:local FileName;\r\ + \n:local FilePath;\r\ + \n:local DirPath \"tmpfs/\";\r\ + \n:global WaitForFile;\r\ + \n:global IfThenElse;\r\ + \n\r\ + \n:foreach Script in=([ /system/script find where name~\"Amster-GlobalConf\ + *\" ]) do={\r\ + \n:local ScriptVal [ /system/script/get \$Script ];\r\ + \n\r\ + \n:local expName [ (\$ScriptVal->\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/700/f14f095d\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 13:30:03 22.06.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\r\ + \n#\r\ + \n#root.mnuc.backuper\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n#:local Script AM-GlobalConfig;\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n#/usb1/mikro_bak_rsa.pub\r\ + \n#:local FetchFile AM-DOHCert.rsc\r\ + \n\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\r\ + \n:global MkDir;\r\ + \n\r\ + \n:local FetchFile Binary.backup\r\ + \n:local localDir \"[usb1]/scripts/\";\r\ + \n\r\ + \n\$MkDir \$localDir;\r\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=Bridge-LAN registry-mirrors="https://re\ + g.vados.ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man manager +set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \ + enabled=yes require-peer-certificate=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=Bridge-LAN +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set crl-store=system +/container config +set layer-dir=/sata1 memory-high=4096.0MiB memory-max=4096.0MiB registry-url=\ + https://registry-1.docker.io tmpdir=/tmp username=amsternl +/container envs +add key=AWG_CLIENT_PUB list=awg-proxy-env value=\ + "NAonhRSuFIrFpNKTs5X32ItcvFuO1kiJUigQZb95YlE=" +add key=AWG_H1 list=awg-proxy-env value=472437748-472438637 +add key=AWG_H2 list=awg-proxy-env value=707808381-707809250 +add key=AWG_H3 list=awg-proxy-env value=1609078552-1609079495 +add key=AWG_H4 list=awg-proxy-env value=1012329484-1012329741 +add key=AWG_I1 list=awg-proxy-env value=\ + "" +add key=AWG_I2 list=awg-proxy-env value="" +add key=AWG_I3 list=awg-proxy-env value="" +add key=AWG_I4 list=awg-proxy-env value="" +add key=AWG_I5 list=awg-proxy-env value="" +add key=AWG_JC list=awg-proxy-env value=9 +add key=AWG_JMAX list=awg-proxy-env value=920 +add key=AWG_JMIN list=awg-proxy-env value=105 +add key=AWG_LISTEN list=awg-proxy-env value=:13055 +add key=AWG_REMOTE list=awg-proxy-env value=109.107.177.79:55055 +add key=AWG_S1 list=awg-proxy-env value=90 +add key=AWG_S2 list=awg-proxy-env value=136 +add key=AWG_S3 list=awg-proxy-env value=45 +add key=AWG_S4 list=awg-proxy-env value=27 +add key=AWG_SERVER_PUB list=awg-proxy-env value=\ + "o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +/interface bridge port +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=*C4 +add bridge=Bridge-LAN interface=*C2 +add bridge=Bridge-LAN interface=*C5 +add bridge=Bridge-LAN interface=*C1 +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes \ + forward=no +/interface detect-internet +set detect-interface-list=Internet internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=lo list=LAN +add interface=ether2 list=Internet +add interface=docker-awg-veth list=WAN +add interface=ether2 list=WAN +/interface wifi capsman +set package-path=/tmpfs/capsman-packages upgrade-policy=none +/interface wireguard peers +add allowed-address=0.0.0.0/0 endpoint-address=172.18.0.2 endpoint-port=51820 \ + interface=wg-awg-proxy name=peer1 persistent-keepalive=25s public-key=\ + "o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +/ip address +add address=10.30.30.10/24 interface=ether2 network=10.30.30.0 +add address=10.9.0.3/24 interface=docker-awg-veth network=10.9.0.0 +add address=172.18.0.1/30 interface=veth-awg-proxy network=172.18.0.0 +add address=10.10.10.2 interface=wg-awg-proxy network=10.10.10.0 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=Bridge-LAN \ + lease-script=lease-script lease-time=10m name=nucDHCP server-address=\ + 10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.30.30.81 verify-doh-cert=yes +/ip firewall nat +add action=masquerade chain=srcnat src-address=172.18.0.0/30 +add action=masquerade chain=srcnat out-interface=wg-awg-proxy +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=bfd disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=docker-awg-veth \ + routing-table=r_to_vpn scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set www disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api disabled=yes +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both password-authentication=no \ + publickey-authentication-options=verify-required strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool netwatch +add disabled=yes down-script=\ + ":local msg \"Host MikroYellow is DOWN\";\r\ + \n\$TGSendMessage \$msg;" host=10.30.30.86 http-codes="" interval=10s \ + test-script="" type=simple up-script=\ + ":global TGSendMessage;\r\ + \n\$TGSendMessage \"Host MikroYellow is UP\";" +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260628/20260628024001-Diff-Config.rsc b/MikroNUC/history/20260628/20260628024001-Diff-Config.rsc new file mode 100644 index 0000000..db8f018 --- /dev/null +++ b/MikroNUC/history/20260628/20260628024001-Diff-Config.rsc @@ -0,0 +1,23 @@ +31,33c31,32 +< add address=172.18.0.2/30 container-mac-address=14:8C:F8:B8:02:D1 dhcp=no \ +< gateway=172.18.0.1 gateway6="" mac-address=14:8C:F8:B8:02:D0 name=\ +< veth-awg-proxy +--- +> add address=172.18.0.2/30 container-mac-address=00:00:00:00:00:00 dhcp=no \ +> gateway=172.18.0.1 gateway6="" name=veth-awg-proxy +64,68d62 +< /container +< add envlists=awg-proxy-env file=sata1/tmp/awg-proxy-amd64.tar.gz hostname=\ +< awg-proxy interface=veth-awg-proxy layer-dir=/sata1 logging=yes name=\ +< awg-proxy-amd64 root-dir=/sata1/awg-proxy shm-size=4096.0KiB \ +< start-on-boot=yes +4664,4665c4658,4659 +< container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ +< xy envlist=awg-proxy-env \\\ +--- +> container/add file=awg-proxy-amd64.tar.gz interface=veth-awg-proxy envlist\ +> =awg-proxy-env \\\ +4734c4728 +< add key=AWG_LISTEN list=awg-proxy-env value=:13055 +--- +> add key=AWG_LISTEN list=awg-proxy-env value=:55055 -- 2.52.0