From ac6fe1837b0d1718c8d0375128238e1152649e73 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Sun, 16 Aug 2026 22:20:02 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Aug 16 22:20:02. --- .../20260816/20260816222001-Binary.backup | Bin 0 -> 386776 bytes MikroNUC/20260816/20260816222001-Config.rsc | 5534 +++++++++++++++++ .../20260816/20260816222001-Diff-Config.rsc | 5 + 3 files changed, 5539 insertions(+) create mode 100644 MikroNUC/20260816/20260816222001-Binary.backup create mode 100644 MikroNUC/20260816/20260816222001-Config.rsc create mode 100644 MikroNUC/history/20260816/20260816222001-Diff-Config.rsc diff --git a/MikroNUC/20260816/20260816222001-Binary.backup b/MikroNUC/20260816/20260816222001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..8ddeb5d5dff98c45c878c16a921f37527e950230 GIT binary patch literal 386776 zcmeFa2V4_N*FQd+0tvkdB9?$4MFX2nSCJ+lN>hqp0aGEgU=o^wAPQnb>S3D@)Q&RfB*ofKz$Hf#K|q;ZlnAJZ z6$wxgOA?@hwj@9$Tay5#8v+1{1QS>9 zbtI~IiGpDQ5L+`5M=ap8xokR@!xz$7ECCM%h^?s_Ku&aoOn65GR07`kS7}2##*W1sua35Ce3xHuJYULYa!?7AE)=sQbe5DQXtnX| zRvXX$Z#KT5x$y!yH8dCtET8IIl65;@$>X<N?(EtpG zcN8$G5(X*&sNysLC?ygA(gC29iU7y}fN~K9AQJ$}V`MpH4c+nP$DXiMqwT>+3zSbzbfL*L%1Pe@pJuvd_8i>&c-r7A^` zEP>qSj}`GaK5Pf1Iue0OMj;W1*{$Uvz&tNBc}!a7A!jILDhZ>tOhlNep%Jf$+M*U|T2c~6odKu5 zi82z*a8ra2F^XMji#$3)fhaL8mD^e_GR$>-GzD*u{V1flCf#H~iXcv+fDj=`Bv#4O zMDcKR!^5w|*$)I^DF7hD0RTz>@DU8fQzAqMaKcLfpip!HkirWnX`sZSBB?M)fQ(~c zOcpFTNg|F_DP(bR5`_|8!wIMbOz;db5L8A8!~{w5IJ!WD4|3Sq@R+7K!}$h1nfk41w1^{F+F3@x#2^0V*utN<2pc0KVlhhdg zV+sWtl%K!?25^poHZW!j0|E@-pn;;%5&&C*p&k_qI4I?aN%FX+fuxfxNtP?JO8zYr zA>UGj{1QbZu}qox@1ckAEj@%^qemi&m;ZZujQA}*#9yLEM`G$*@tZ~$K=DJ)2?>3Bq#(KTKQT5n+pJbt{?1ONq117NV`91s7IL1c;GD3+R+2rozgK+Gvl)(A<6J>l9!4glr8 z1CDX2o)Cz3gcy`qWvpJkp2g23aLyR0m1Z5H)`9ShFL5uAX%gW&&7vHij!>FIflSq$ z^#Gvk(8s4PCDaeVp2Pn)1b{N^DF9I517HH01U|5WnXMsJ$6;Ut09CI&0F<_E0q6iz zdjfC)*m06^_|65cTZ;1oR5;E+-0=?ar~gTVk;q2}n{BJSHF-n&KI zr$yYmMLYyoG=h|%7WV>M!~w;!qf9<8ZY=|aa-`LnF)WknGHa3biak!EeY2sfS8yk}}aR?l= zW$rNqARGz8CJ>i;2hn$sNs2ckM%7nqI&fFnEuKyV_eDTOM6 zFb=Nji(mjpA~qhzCTa?t1TQATpqL1#y3=56It=Itp!RfyZFGa}KoLN-U?6I0XTk&p z#OBclVT)F34gK4BO87s^Qxn_>lp;~lH3qQ1pSi?;9&<_mnE`8(AyY__Bub^0xx@bU zkxTmLF_-wCVXnC{D@7Eqkf+Ggn)o~9Z|5)hpU2<-(BL(Wm#dVi@+QF`{5yDyw9sS} zs9XPe>?QwahOb$wXgEDBHAyZIYo&wu@8B?@C5Itm`9I5H3&>%yJR_wgk41k6k6Yp~ z+^6!-`ywOaHf{ zHQdGe&*SxXD-6AV(+a~-1A^(wWI+;cwMvyMRIy2NQKHtHlB-z`!-b?a-hju0FdFXP zwgEv{N4R?K1Oo~HwtCQo?50v>g`qYYlL<6dsZIMjFb3_r1l(eQn{(jG9=DI?IpB6= zTj;p41?^$b83u4U1Wg#Wx=M*cCP+eaf2n%LFI7+Ym#b$$v$#SaP8Yl3-Y2a+D@MaC zc#Z)q3xtmIa3~4fWLtld0+=UzRaf_E3ywha%g3EYnC0xrZ zQkAfm)b={{0WD9k5_mxClp#<%*kNu$%Zo0MWHm48N%A;ZlSvNRtKb38bd5<4y0vkO zd=nA4ZwBsLfL2Fxx{86~?l`3^IaVoA!95DNTLB(}@KAjo1cESVvw#~Vpt&Eq(x5jG zA05y@q}~bvsE}h+A~gKt_Mc3Rmt8H!?P&qz~B6k2aov8GnY z9Bmw?nX0)DZ5~<&1$0Dc9T!yum_7(I0br%tmDnBtoB_D^2k$F=jk^f;3&9xx$^l0z zaB1o!XqF`6rbk-<7`7P|)BT+Hd^uH}=VWQ;k{dUq_}o`Z*P}KiXKxOE!mQej&;VeV z3}_eda>E<*<*PzwR&poi*ut?+7KoE&DgQb($HPcX)Ik49OKSQEvh9jv7T!s;Zn$ji zGPU3GPr6S=JB_;2Y0eAlq?OkmsHs`2H|})j4t;g{DR&7i%@Z5v z4fNUJV;1tpGs6bw4L;GK;|y-FX|PrECVZap%yf&-1^y-Dma&SjE$G+V&ZFXi!NC*r z&b~9h{c?($n#`C^&wBQGX4SK5Y4QH+_6Cp|N{}p3ArFr5fxd~q>MZE0YwE0T2!cL2 zDyf;Ek=slPZAN{)%Z&~k@>C4mrS;R-7C6;y>mi%|E>=o-p6#5te6ZEaAxGMSb(o>Db zo04>pb_(8P!W=b=6jPr*Oo($h%8Ti}Y-sBGJV=plP_tJNP7ODKK%ljHYn`(241J?}yotUmn7SbVywQ8U>8LHh+u-F)=bsk>EB4gYw*h;u^1Khd!_+xuvEF;eIb- zYMKzrJY|+rB}s<+7U1EkIYYxPbaKE0T6eWWCIn9tgqZ>WU9}o>d|McUHhHLSYz=+W z6!KJwTaa8Sl4rD0OM3+O$!O=R0SLmn0YC{R=O;in8NQPOZf4Nd(^*qDJa<-a#k189 zPVOu64eH8^@(P6`Ru2#XqTW}c-Ly7bu5?pn4j-n;t=(M!TceFbU7(Fa{i%&Zy`YV^ z+?fD*glWoyo+E91Jp$9i%_IP7C)^DWH5opDArgYFbhXP0db6mA5xj(*q0I&zT;F7a z?xXLs5t_0gn%aKIMrb7)^pvY>Bm68I@!M-6u%c1+T9J;Vqag?Lo)2JP6a7bw5Fp)M6yIvcIdElt+1OP>k z=9{36ALx+Z6raXzjysR(odAcFNTNtC)!?%*&E^U??B>BC3)J4J8Jhd>l&OhBKvb&% zaWJU>5~HE#mL?69qz;f^jYQqAaa%#WTdj$=2LOzK;}+oVv8FgQl4yzn_eKH`Mh(J> z0a!!=B;ey75oQEJ+wu3}l7Oe9gLTt)KacEBgNIhB8s zTqsDQ4Uo%KG#{_AICko$CK)RKe zIs*Xrun8RC+<}V(0`$-!aO0XM+_(nD!AmH~I%?@u69DV?@p2U@RIaI#x&xdP+bc96n-#75HcB{0){?H z)geZZbj%46VT?AYIlRy_H_%oH8N;wft>A5abCd7c!=RxZ;a@~^tEL>^G70TyWr%VZ z34MwQ6Q^@oc!RYp|4?c%wU|?CzWV>7AbUeXm>X|b(WA@)Z-D9|4&1LB^ z^5%3$%PAulbex&5TQ; zAAI2PpyYe0`!h`Te?i_CTwB@OBnn%V*7nl5CHwqq924s1F+T=ShE2Q}yQTZs{fk%k z4b16P6%w129M!VfUtF`@3%hP` z@#V+Smv&E%^4MzgIKXL1>U9R`)`v}&Zvyp#bywE*b&uJaTV8T#gCl{60Hj=m3Q!{* zVnhdH1ZgCZhyQHv%xxn4hSLHP}Hiu?!az7V= zc7lI*CbdN^^IA{v?f4@??w>5>uI^)QrdNNfcWKCgjdi!zlip=zQOfPxe(BeB>;d}D zOUD}O4t9zH%~ZK3q?xfHL-Z|GZ}X7pWH7FE+V`haKWTDnudZ?CNIXr z$?LO{`|{Q0tYMbbYabh(PFdUAisu$^{jP5>mz|ujs_vmWA6y?F9vF}$ux)#Zv@Ww} zx9)j~E1qp=WAWtb_=7unNi|cGCNzq7W;hH)57^k3-@WL`kcO3f4}ek z(4DK^KAVG>t*b0LI)@cIS+D2OCzocUa_Www^2|izh%Od=`r(;_^g7jKh|oY@V1c;qh54Axq3-N%jT$W%s0JcAyTd4rp{-EaNaKn4kWDH0VCBfaM5n=Q6|5ixlkNpCqN)Qf%kgCy` zp==4Mh!9fw7~znLA^_mPkEn{W2yWH+23Wai8>I#<{#bZm*nlvvus&WGn}eYk>f^@iV>8qv9Ed80*i{unJhFpM@J%!{UG5DjvO=HtcqOM!gqgNZO? z`EHTCwq!u$kz~h_Bg`TvysrCn`O)1eduOhBGt8?^>J2kc@2IzRAa8KarvB51&ooN# znlYGdQ$MnP_mO?}XhY=7!*6qD-?MmU5p;5e$s5b3YwTVz>`Vo+k}kV4ug&gsFGsp2 zt@li2<=V!VL-i&^``lf-sk`ypK3}dRau14bR{LGP;oFeY`D@AJ{<_nVUOKx?PvYan{F^cZ?BE8=fq^spy|b58mgYRX7!8FGPywj$AoL3(cvuUH?L8neTbE$J4yVsA& z^_MMHBdmNRAI(Qbp=M2}ih}AONFxCOEr6A(An$eB4z3~iy_prDHWlRrAZ|cz_pU{n}pv@E4W_q$KWhNyl!M&h6>R9}ZWtgsJK_%(@upt?HbxX}g(f>LyJV1&>d zBQ)J3em6032wL(w^`z5m+3al9*8}xkMux3fcUtmwSE)|vge!x5#?=M|M#io?cw{S? z<{EvjvG2P@E>}0sTzA~HZ;vZ0-ph-ezn~uWV|O3gK61Klw+-VG)0wp(V!)>81^0KJ zeS7qc=&Do!eDNsmbS3O6qpjyCD`w zhD3^yYdPaq^1>EQ9O{=muhN6GSeaO#Nw$BFK%Bu zPPO@Ua{1gFpDyhk>$y;O4uqgkpf*9!1R-u+iR3DkQY=W47=jRYe|c|#Seymzog@&DB695tt)BjJ z8h%@2?vyB0GO0`?P)TTBX{va+LZ-^1(SHrIi%a`L%${rYIJYHcr$Ee}?A4Ae~xq@8}1len#vkMdECu@u@$xeScS z&?5MM29x?L)YXT$MWc3))>ua-*5v7ad25-L$L~M#!6)`MRq(3G`R4bxd8{Ii zsb8{hLYsu#YW+jotS!hVo*r6Bn$g2A8#8Q-lHdVTjevW^X;|WN6#~IKGJ^Glc62AEm(l+ z@z1<2%KO}J=qc=ZfzZc+MTm4nrf%tx>f(`7@wl`I$ys>u(~Yp?VP*TfJ&IbhBi8TB znZq{3p44Xnj3F|=&3F9OVBZ_{{Ly^+t$kIe1?ulUuRzx%&S~4r_j}1+DYSz#t{Yc> zH%M`)I`_uVtV^F}N5>HbuSfOJVWiO)(~3hR*d0!`w z{76XK@pW0nmG$qhRGXg+GZ{6(@7(PA?XF!-*OY8@%=`3s;h-nng=_BLPTE{xRpx%p zJ|t@@`*JMlS>Bj6^9b~Pu7pP)G5K8hYuUY6=7|yRBlYf`$c^Pcs7c#( zB)u*3Ot)8Vf$Kh0JUSDy^6>n=;W|fhb1qSgYuY!Avf8mW=KV#>O+HkEp!X{hx6BR6?27bCdy|>xzNCc^7s;tge~AOB^Z~*7mJw!k$}(O^CV&cj?-F` zt`MieH;dR3P!yuBUslr)bN#6AQ{aZsW@wNMx6x>@gT`8#`HcfQG|&cwxJRVOMo3h0 zTDU|MpCX68dx?@3=IZ5Y3%$`0-lQedno*8Sp3;oI+C!A4NfNF|Q>r9lTChZwAy*{+ zl6QK%Rbw9r%f>Tqq_%`*R0zv@cKj(U``$a@&-S74&nvPEGaB2y{4J z!js>4b?S3*$Jx=nE)5HQNOr0X$TIJ@tIrL$Pl^lt6AhiNvJ~&OcvdlxL(i*C=~hEK z?Fc;=W4%IFt;=*e5jykJitv-+g`vKyJ_Y;<_-giDQ_@eL)NQnXf8=!S?vgz8 zMQ2}B8*sC{2HS1gIL~Xy^3*#Q&t{zLd;#1^igddxGc>%mdcW=H&}%x&RyNM$o?YEg zv-#azy6@Nt54@>YR0OvVt#$ZVf9 z%CzrE;^8eWF7#PeclhCZ`dmnNESpEyS$_OE|NNR83+L%O64=fao--ePdR!V&WbJo( zJL}!3GyHkic(40^2y2NqV^>bYeUD1D`(jgT4IWoX;S7>0Zq1sDL*4V-fK$v^5B!kvhqEJe* z3_+l~I!5!6sj{pxz=jRvS?o>&2W@XW^T~aCw{7pkZ&f}r z>mIZ|aKiQ>^R{fKxu3|jW33<6BVLO1euM=3h0SLU`!Hi)7`H^}^AJq+e(TUBk(vA<#lK$Z^I(+GGHHc# zHa1oiG5)aO!Rg_swfWi$IouV`hIUV454quW#q9d30R7un^CnQI3yZf(s~n0>kKIw> zv6OFojj-UES>Vjo}NgbzO?Bdrqbo8d`eVN<8#I?D5eBjuQ#-htlgu5=sMz}s5a@2`J za^UYU>bmMp;OzFg9)<(n)xLDgH*UtN&CoO~YyY6tUHevr=iR+J|3KNBO+@L*AE4b0r4KBLfzm{8%+tC)eh>Pn(4c2oVEkS-c+5({bDk zr`k^45$=-oFJYkv#?C*Q7`$teZOD@12;tPXvNl)u6x}<#TL0_Il~4LbxaiQ5BQl+> zU&NwA`q`UCG}_NgiE-)rLO*C>?gxZ7!(yh7F7@-URWI7FF`Kk#Ud)O)3DL+eTbsW~_8_JyK&I{3Yu7t2*BXyUowsiqBv36_5|kmaj}#Oqn=|vthp>`ONUi z50}e3B`qH=JaYBy7=^*>IMeY4rRISO*6lr)hTmR2{MOx_Nt1e-4V7HqJJ4*KPh#VP z>L96U|Ejs`pIdEvJbdb;>VSq@?BPq=IL>HaCAimRx4b;g!FK4wTOIUW<86B6Z+Jc? zuHfRF{;G*xCC3bOZ@(MQQDK*z4sP72f2TC? zQ2WbY?#Z_L`;B&6lE3DHsCVk&$&Ga8u60vJZcQy(-^;qn)9LD$%97nf=i0p+@G$B~ zry_>Wi=qx!ju!XyN$9YmZFP>j#qHbcN;2!$dJ3zab0C=(My z`}(ipd$^)&eWd^m>@8Oo(8Atg`Jpkg3v~Y8Ey>KkUdB^iBEko~I%xOY($yQ1)w>-0ncuD7dUZ(^3R*@u=IUs~gFm;l>4c!PZ>< zCrC&~O>}heHWLsXa@Wx$U`G@J(ybNOc2C%$|5-oR_WY}T`;>2)L)-0PJ*_@Ef6v*O z?_ZrdtG`PyxWC`11@wh4ibV!i&vjGZRgHD^98>z(!z;PRx(iD!qB)smM4uNX=1Gd` z^+hWdCvNpQ6L+(7Be8vXO|M_^^B16 z5&{FP+w&&L!>sQ)I{%O!b+)puh%>3kareWb$)N=+M4uL5)zaz4uTND_r`$?fQ=gc- zh=B5?gZ~gu-mxI`=E_R}OKOkZJQt8_h3u#-oDw{#sO!pkt0o*d2ljppubKB?aQ0?L zD+mzbkkuM<;V{+$#NPu<(X{Oyf7;WZ`Fnu6w>Xzq+%oEeLTBQwbDOnIuX4je}Rc$*vnT zC^jd+hgq{l@$cJZXYjA@vZFVV^)GF+y9@ohx6pioMlH3n&2GxKcEn%YX6Jx*R@)HU zHxc#?Lp3|@Fcejr5}liq{RLb9dduBEj^e*^678)$Nc{4C$`?X~eDK0P*UGYLmTV^q zBHJGF-*)AMJKJ@<&xggb`PCEJeKn_*ZVAZ1oFl*Pd_L)xUA^L_qhR)n_k+ehPqE%P zzT3^QgD`U5G zw{+uMF*j@4f#-fPxp$Mp0)-n+chVQ_?q2r!OBR?TP*ruw_Y}R|q)4zfoO|M;QQ9f) z=ZWJFM!y#3#%_+4pdVLk4@w`@F+GNL;PI@;xf3?O%3XST?@f%6J+$vx3vYWmhl;oW|!4zn(Hxkw>JpPgf5^sxHNq34}SUN>9SelU~$eEVIt0oG~7 zH8l5dPJFp=<>E7IbO$@Ow5sXj&x|9$G`ij)geadex5vCr`33xo>EszPcb%pu3x`tw zShVuu#x&k*RzlhRg%b+9^ncjx+);YUOj_S*$nzZ&;zlxR;#?=qBzAH2DeKF4Z?x55 z_x2iYuH7zBZZvYh=fvGT4qwRXAAGu`E>73FvZvn&LnP-&)T88w1*p|L`@<%8NFVOJ z$-TH*uhF{$w|2$@akLpNgLeVz#T%VAOIaU3rQ+n7PDh^CmyW6$Rq zolWk$=V@CfLdo9nOsehh3+Hk=T(jJ`O5lE057>P69hNFWqT7$Oc&!e%n~LLQUPV6((R zAy>-AAzf=yw+Yf|w&nf0E{CRrKLrSXy+zM~thOEyHLhYE5aJ#XHo#vGVl^B}MEm}= zK>!qNkH_7+c9F$R1_5gb!;0Fs>f8OfK|mK)N{{w!dd15v1kFdTq4~%#_0r!IEF~l^ zd6|?=yGR-pBUwH@ujOhIb^R7^8KU}XAVq?$(!wvIIbIDd+84qhjE(Y9%|pb4tPEN3 z64QED|JCw-vMTRs*0|>Gx+4k0H^zUabm*M%YT?b12Im9#Qyv696Q2Ks?ljM?ZQHwm z@$Px>mCC5g8{gZ~KIa}{u0Fy|m%p&Kzqyy@&J%SbzYA6-9Jo{|o@}-?XuF4NpZKha z>^(1feYVC|<=<=jAK*Z<*R8y=%b?=LfoIvGFY`NBc3&U)HYBnoABk}Q6%)|Rzzv6T z=;z->5Z2aNMZ6vK`N@NGx~tX|-xHk)-ao^}nBCoyj=r@nqI;HaEsoi~gMeDcJY14p zaC_g)kB8VxmIZB&d7l5`$h-Wxe-IuA-AZ80u6k~Il3>4*v1OgUQz`z&+3={Jtd@hPg zSyCZiB;~O&DT)cWC{G|@i`g6w2bZm_4e2J?N)xb9j3X3a5-CT-6=A5Dg|fI3wuHkL zaQI9fzB5NF6rfzi<%Pz?y5A(|=PzndzvK|U_?D8pzTun4z1l$uXem&CyauTPfI_0? zC!B{b?u75bN`?=B;V;W=dJk4BZ)~vg@d{N2c?Hvbyy#xuzL+1&m+$M#;2Hyft{^QQ z^u*3HM|sKrL}>NX8|Own!AK7I1-3e=mMe_>j$ga9e-XK{YmaG_`nzjs7Ea7zV-!R#N00qgSaF8(7*a>k*!a{HdVIYXuav6FI@b0>$TVr6Bua{Jo22@ghnG0%38 zmyemr-|IZ!bm;!KCDIGmW8ym~r>^`s@^;QH@0Ephf!13KU1t+7FDUBsV6o9zhWtey zXXolwv?GJgWzGq9l`R;-N)Py>8Mu{^|5`1q&+Uo<;PoA}Db8!3S z0pXbqx4Q0Sz4W9r9+qAn+kWfp17k|FuFddWUV0=YZ{U&Y7{=6{?(09^rVnkiesu99 ztF7iER$a~)KaBmu^6r%=r&A{5v5zay8d@1FTW;sUUlePQkQJh|xgBNgvYWPPH``+4 zvjvGV=MifZ4+2L#@*Lb2>+y+b1ul15c@e|94PBb5ba7g7XLjn@9IT+hD&hF44Q{OB zWAE}0j&?g;X*MRpW768yFA1|ak35%L=+SuN?k%sO{yvT%DyqF5`+eEuliVWDS^BvR zSFruLt2X4ChTgogSQ@ir=&W^N{4d9McbqY5oAb0?`UCUl4zJy3@<)%e458DBl-fmE z%OAB1qYm1<@(sObyBB#j0Y?U%S~Saw9AU<9+>E8bBd1t0! zSq2}DP3$%KV87^n+aFKA8OhqX{bu3*^`*&YAK&X+W*XJ5ZdvZRtAl$T&mA%?G-lA~ zK?YI2y~f--d~i$g3!TxA`udhJ`|Gph4L!bUazd#tk@;%_*==bC$c9Fwy3%j za1!%dbbPa?;MCH$@6zv#?|e=_wCl;nE_o(i5q)aARshifUdHH1k0`5os^jxV)I6H^ z==A0OPq$4I$u11d_~9^nzZY-wYCA0x$OJF=9dy`>FYv9n|eH7 zVmjUU#goJ}Q$G8i&-6RVx`^oS|0G*^uxDM*AscPGrL8-1c-8XcT{+I}2X8?)thsc; z(JXdpmm_lry)(M}W{Oqn`&Xj%s{?LzUBB1qWRmBrU>g(3?sj2USDzd;tk6@3_jC*F`&Hz_w&p*SYbB_tu?Fj8v7Usa&F`?Yah5Zz~9liX0(eJe?68m)(Eqql}uD z-bd5&$vvz7h_(r+rgvAyk-U%6b@U=@wmdzyBOTGr3pzHero{~vQwLf+UN>A&ye zDEg4D4}$mUwe?N)9N|h_S@fvwfKhYF`!BB6Kb>Wm;dJRumt5oPpUSs?nl(grW0^gC zSDyhimQm1rIX*|TK@|VWinVO zchE1D@mCAW#T8Bi_=SyI>>irlt9f*4vr&=h{SFuJ%$A1eoDLahk}%aF;dS)Y*^`Se zkE*@&e$mNIqIIfDVu^!6{%iYdUC)o*+4aPr%54PundF@fv0LxIFn{>$l+v}LcF!7* z(8||KPE_U(>oR%v%s2{F`1#Td_YqGXJ$*hte6RP}_9a8-E-*OdeWjcAXq4)Hq;d6a z>rbOboaY}~JKAB`nv&TgGxMZww%aZMy7Bm3qIi?*Iik~(x`~ob2hXJRei}V8D&ZZy zY@p6tNd|Att$fl;3zrJ%o-3B)Z?5k-?dS&EbE_iv<(r<1xlh`a&mnlRSDO`wL^x~; z{izQN!9STmJED=NCPf<_;NJZ8`6&>FH@B99B7CBSQ+E?w{{i z@vw7UyZv+4bvm~EiB#{a!AOGdi0Y-uy*4LJf6rvTIbbLGa+&T^p7h6>ju7+354dHlw>&>2&mvG&vJ zhz8S$YYBycX^V%rkI8jfb$NZS6xzFtT}x-I-XdBN)h+f6P3b+|e-T)!I$oh4DfWAU zSZARg(Kzm1-_YcY(tLIef2{NOO!+-ikR}W4|Mi(Ne*@6P--5|z z2$&L#&E#Mb2^W>{`2rD7$dd}BOdg9R60*c1iGYs@xNMXwVM)Y%rdS{q@>n7%m&IT) zcv7`FqZJ_4WX>>Qv-xZ<2I}R@WwCrvo;U98|B0ob`g`*Q{GgBa)!kGI{9bE2?ZOGu$Ntx4}5F2H%EG)N9DRFA1h^M3qUrJl^MMWePn&aCNla;<_cZE zc61STN7`V_Ow3exeUdYb_qB% zu3Yb|!TI{!Y>TR`!$mR4i!5hM{bcp7VdCs|-3Ru0G$w9$EitEf-pWHl)&~BE!5Qvd zQ(X%D*HXdyPXq4F4~!do^BKGDVPHe}tgFdaW-eLYPkJHqG-;Q&Mc_pKIm_amUG)rB zj7WdE;HAXG?fy3oM4sxtj5oL$sW95}m^u z+Gg`7qFHi#+jf!8YvVZM-jT1-zf>TyP?4 z#pB43%V#fs?RMbdF!J%8w6&8~n=#qtGh}N6uai2D{gCG};-~3V5`%q}sg=;q=0?EoUjy97yffe2jc#U;V1a!ZG~D z`SULCD|S@}PBa!wc?*zMfU34^Cvg zBW)siOzAvz(w8IWWq10<$G8o(AF%sCN&Eb9qrGW&tKX2lN!(inZHB$3wv>R_qJl7t-ZPG60;%Fap*IDF{)5_p}4(z}rhq8fZcV&KYwXh%j z`9Lt5^*o;xFJU}-+VQULsQE4wX-({d4aU(zGHp~WciDrQiryeiuc1eu{ws}EW9J&^ zPnP+5>+uyGELSXRKlkvnbBvb{`qj_e(tbf_m($sM2#j1m{sG|}w_$GMx;WB09KN+F z)%>V?(uL#qRfW=ZPl|V97w@0Sd83zV)Zx(v; z{#`64(FQ*5*IxB@^0LF9B^Ju<%jjt;x{m}|9XQSm`@Veg5-1#Ode&t*ML-`dWs_-k#~$bOM~od#y@D_HLRl+~o_``lu9@}ud0RG6-Kb^bQ#?k6ti#$D&WZ_MZZF~%=vN+Wq=4!v>4 zjmM|Pb{%xE&kNeETN%$x@66#EvVxQQ_m-ZuIMPqotG~-h7fa_GmYo8xeJaE1%pB1h z7q%xZFXsnyH(n+^ju56G12@Y%PNv+cw)Obv_$1Ak>vg*4SUtN*Ro=($E#%JhDRbdr z4_tPf+#DNh;PH0Rl0x0O!pj8`Z0$t0%IdqatTn z=<4w2*v@eBD0n@nZ0;ft^J$846+K@}cj?dp8Z4}#!J-YCk9^e_EV7@rnRa5$fg|6o zXMf4q@K*+lPK*wy4ZfMjpjG+#m)45yk4o=884*`?ZPkEsrh&kG-A!EoOSI>Y4Yl1`RCev2O6H%|>&$xA*qlo$`KT&HEc) zW+jG2pN=1~O1C&pU-)#M`-@Z5jdK$>c8@y8?BJ4jwD&uSO0{ric-E3PAwy0W)_&M< zePwuoSzJixY!l_XsLB!J^~dR4VA)NgOmbha^P^I2tr&oYe(MG!ZERtjNNx9Map{ZO zwU!(7$8<1QPppYtqWI=bv#lxJ?|K`zUUUsvobfp7{ISr{dsi*qvGVZK-2>LsT>AQ~ zf1~SsrK8Bz^kIk8Zp)6%XS%GCybdO$P#MeCZahFQO9`4>so2EvSXOplvir^3w8QnB zFUnEHJby+^U)A;*cb+KMmoAK2__#Lh{^HVCAqyvZ)klrrHK^*rz_{vXL%LR&RqtCN z4B!kla9??`iWBqu>AaX#-6e zzd`VC5d0ei{|3ST3qUY#%;0l`Y$=P)$1pMco`#4eLP)ykzFrJAAM^3@^7cV}*wDby zDli_Q``zY@f5p1d{$IClnD}^w(iuFz-dq;Pm(63ans%zSf$IfRG#~k-SuX?>Uf6J$ z?f>;V1o^kD7i_d2DI*&EK+#{W74FS3>5=Aff2P+0Ld4c=w>`wyGfM*Lv-$J3Rz5Zj z%x)O!II@k0p>gfwE4v>Wj9I6UcuNi)&gs$VZQiH-hwsE~xE=cNfLmZZc(Lzg->Obk zqi&Swy}jAz%PHHiHsQN^2@hONn<##rJ7xTuH<6{mC4cnvo;(#bx!&j2PWocK^2Z(D z7ez$8DS0S3?R9SQxlxO{(p*Y`W3)?h}5Ut@>YT{B(I{gE}{b9tRCu=ivE=t)e0AOf z+m4d|(OMzOuI=os`;N73tO^G99V%#C_-xng$ps6_qtX(5_H5McZo9aTBnI8`Y|B-T zVN>@T54`y1(=?sL&AG=jGu!JGUU~T>GQ8V7%GQdp*CGyxooCpcf2A<^P@GS`z1bMO zX@7KlgstD&$4NO2%QkVnwp84!TytyNT$ksKq3uR)Ja;c5eaxf$_+!jRvWgAvMV$4f z_qNST`}(pYV_VR)wktV1B%begFO=$S_jtE$-Jva$Ev-(hq#Vv3F~ugZmuSNMM}ORy zWSgLaQkTUR29MvDQ29}3oEKJp+r;nfr?+1hRa~+<#QHQ~QDnr7K#w6Fq%f-w?t{kX zPOKbURH+|8;Jf{0N<4OA#g-B?oQ^)FIl|vu9 zs2um?&t0&|XN-~S>Ji(@5*D276ZmLdX3gYlD#I;Gk2W&N}4dmv^r&;W|woD*+!sD3?1QU@Pf?Xk^je>}V2 zlx3_poa(0`d#EcH-<)uj{HT1)E5CNE9O*uE(9N7Ly2r(W=MzeC$(n|FSuejjT-bTnm0b{YIuXo`{4XF*(=)b)!#S)v*G`bG;djN@7X66Giz3u zo7@@NHo}d((d)w0iok_4X6)5J^KorxmpitOPGOS-(X+Zfty~Z>CCu;s9TV#|WigGy zr|~oUWuKe=cKfxuYd2%pZ(M%q>xYoQ;g1}jAE3;4h|M6+b{yX}%HzVDbnoFhyV5d5 zi~G2qJx&UnTQ&Vzo82KjJCqrTNz2l<%QI`3{S#t7Pc-2=lkP>4xECJD-q<`ZoKTtP zZ1u`C{&K*8Sjy!^tM6{;v#G;X!gG@DmpSuBm5r1SwzZD(A^UDlG+Hu3v2)(F*(0WZ zr8r&>>c7Lp^EneEU&-?xA_$R;9q6~OsIoI*U9G9@rD8Kn6LFw)W=M51-DX67`M;!j ze@~g;QwI4zKV_OVuL%DzrHGFTSt15Q!eEM|5{VcS^F%x*#^s9H3=xCHWJA`bxT#qrLrVRTlnM*0N{*fH(^6#W8*bVd<7BS55n5uAKf*_LpuN#0bmFKA_V}% z0RR#K04V?f_;KDe06+!+APatP8~~69@E5nh$8^AW0KfzQz(fGxmp{Q|004Z3X9@tI z1OPA<05A;z;0^%r0swdeSWg3j!7o`hHa4;~XRhYl9ll1UCk%Q4K!J37XwIJSbK?CG zfPe-nfLjj`0!&7Pfi4X6U|^*wr>*8}tvTDkFN(LwQOaazZGO#lVl=%$Xfsa#POn3H>E_8E>XBCp4@v`B|pY%jY zGD(UmHd!FD{H`i>O|eRe3N{#uu+AC=5C8yv&_xp`0oVlfL2i*=r$rocKwAz4 z064qx!wG@+gD?buA}DFpFDFKt2-OK?uu*o3;}1y)O-c0N8#q*fGO2{o<%eX%rest> zvQi~c^p>RC{*a2)l!_E23y=JfAaYXzon%>3l0@-i5}oEG>Y9E`qT8G#PM{FPNnD#K zfxLxsmeQ2OR4h*x$WrJ^i9jKWrz<5YvsQZw$~4F~XAMVTNq(BR9KRog!5)I8BXC?8 zz;U6LtZ*n$`pA{4U_r9PPn{5sAu0hT%zz2a(M*)-I51>DKmP$C5uuJ~CWO8DBdG*XHsX_` zfr{vr04hR;O{J9J%Hby&E7TdOnK)ZuE6YC z;r^O9oIj&9ao9Wgn)o;b08bEv5rzS(E@A?x2+;&kfsqNI8XLpF1m44$W(NO&JxI<} z(lLLM39u!n3&e7zza~GWIls+M3L$(`2pca%7cYbzHwpw{lwqKV2wv6M0}~$yfKGJ) zq&$F-^8fOqNTW1)cY$O3SIeMB4*aSjL`tgB~ zuc@63hUtZXyr>YcXn6=YP!|I3c!xGop*sv9unxSb1XvN}Pbz{WLmEln(1_RnZPT?w z5%0)&L5fHkm!#>;?kzf#-l8+{FM|PqcV-XGeJBjIaX2iraVQM6aVQM6Wl~$*HzUCN z>K;Jw9w2Mlst211w5-I3LQ7VXFn>Ce-js9L(8#8o6r4dY2LU!(m+enyb2w<zr-nA`kDWt-S>d3E z+=89MZLSnfsGsMgw#-S!{OJq^Ty@;c5dO*&0AX zrD?_sO*7{Z0u2f?nnq^nWGd-l5)p|8Z1wmk{O}fhj~YJj+(FQf*$LlfCk+hs!dlA= zm4R5UVr04{Ckp7A#hF$UwbKv@&+XK5TfL^y!>5A=lxo^45C}xlI4$_o;uUy?TAKtl z78yQ84mBlY0lqM@HI0hu{_W2QuInT!H(9ERE|n#zBnnt2R9q0`!2_NxzEvZ*et}?A z!FE%~(^RsQIQ*<_O5PAnUU(h?8HT74rU3$|9YY{B=5Ws8t390U%Eg0aT!m z0ID9&Y%&6z4T3O-#s(^&!N3p!&U!%@t+9ck*Rf-N$P7rmKrB|^NEm8#xTJ&!JbP;t zCkX(Up^*###Th3?ea43!qW)8lpgu$G2V1CC`LGJ5C|)8?OOhyh0)UIv&6+A8zqe}Q zZUBHXO&sc0xC({`0|0PU6OSVTuvtwK;)4l8GDd{qWJSAC@qM}6#6f%J@Nus19z_z=aGE1qFB)cg^3R$X( zHj<`DOQCrMXYI|j^+%HNr8kBE z%Ifi636OdNNWE+8)Y~;v?-MT(CDQ!l3R*;}7=A)G45tvM8tWdHBo_*jH1`5hlqx|| zk~&=vn!P&Zw|616mXKP!lyCkk`&FXdS|^&;8qt1&L&=bm%!xefI23(t~avR}j_vw09#=5AhL+Aq(B=GjM`yLm;hToPFL z)&J^2@=sP9C72biy$>(&g$MCWrf@I2{VLersc^;Ul!081g`QWL?pJ zuhn`FdMta`aN0DV3gnxc>Y^@zqJCE z`g5(;dti`Y_}^-^-uqLn)_Z@t)q=s|J@EIRY5lnM=UT1Sw`J@7D=iLBF|t|xj%;AT zw}fAP1AB4Wm45@4IoP~f-?;dTU>vk($NKxOD*t5BickvXEU?9IfW3X=FM_xILaW95 zQe+I{u{w#id8~^(iDR3FhL}Xtip$U<3@msCd zT^cpKL;f>Df1!Blzmcrbdmn9 zG=YDAm(8Sq6G9!&dA4pB?r&8YFQAE})iS?z@yex(SJsAk-)hCMg_;*;?ely$!_SxNmo7?yf6VMoI%{ipHJ)Z1I! zPb%FG(D-eghSx)D00Yg`I-6N`{nEuNFV@DBYO47fd}Tf<`pHWIk%|-SMZXR+L97&D z6eLU}hJp_??{jUXfUaq4@p&3E=x*N}$3>QA`zG4SI*rdxwj&^z9`&B){YjNbSH0-Pi?wlFl!@7i^w$@L zrhYDZOTa8#7OZG~-Mle7(aV?7y4hhMYXE#fec8Sp6p8>fGWbZ*cMd7-VAK|Xb?*BO zI=^D@AYP$2N1)OacTLnS%KpyMQUtnO8|20@i9K5G)1|5C6Qd zRYileiq@*UtO{dS6RlmUf#t%5O+U}7B&*7vtW;fk-rA$S+8*nay6cxNo&lwBnl~oT zI!RIFh48|CLw{j~+<*G?@l(U=q>23BT)KEA=zC_D^*LsOYMfER&ot$%8!V2R{R1pA zFTk8-q0nU7xty-BC>0u6-;7oHvZ2-U4QNJ#v;=g41{{w$8w&jd^!!v`W%vU+a`kS*`6$YnlNwHrR{f1>^d%!Y!L&Cep;5YNpc$ielWsL9AMS}%7 z3$ryDPh*%8>*>CX#we1h%~{JF3c9XyDtH<(qcAOV1~boincOc5@CWW^vC8w|;$Bkq z56omd%;Q1tBq`0L820AcY*2bmub&q~Fq*~47lXulxEoBh1>H=_r09k9%cL;lxGazJ zVi10M5|^bZi+%@Qkvd}w2Vo2eXEx7*9-#VQ2@!T{i&+2z?-9tT@?6_hcbX5^C1weJ z>bj*p^*4V?mDq3kO6;<)#SZ?9zeQT?7yrxOA}to12H1W7cC!lmQ&3@-p~L>}1twN7EiPz;ZgUb6f_c&QC-rQiGSPfwmPu~=Jn%(3 zY?lgvWJ3CS%kB(!w=%oCPleuT&N1&-!imqvN#@Ops7eI7CPb|VKBg51s zp!7v`fnpR@`jWzU`-XVozxsLQh2K_QxU}36$@VZyEAch?yzxK(zkY{!`ow;?)JxxaWQDUlMlC0MRviX8se*Q-L zekK(}cN6t^8S3%c6>0lv0x`)wNW;W`<@3gfHJ}m_GdifMak;j*Smb4w?9ts~64($1 z$=>7REGbMxpFt+Br3YzIR!=9)>1dg4*mssO8{;att|9ciPuh*VzM@r#DSSUU`7|C* zlI(X zI59oyNEo;h;mVtJN0F<<>5RFu2#-v@lohKcQGpvaP7-=;Tk?TON2J|DBkAx?*RMkQ&-kE- z%cK|C2FTaD8<%MxEQg1a=9xK8Op%}wQynD6>xF!UY$r)8vwMO)w-(H1C+dPxeqKNs; z`;mz2`W!LP<02m;)UbzU7d+s_MC85cML+2U2NunNB_&v-J=6C8)*7nt(0-;Qm06x? z>s-1YG4Ak$pAj{HCVB7fecpcX>`7;rT)t7m=evhv^5J&kY|xpE2MQK#D$!2Oc7u7! z!AW|JmOZr|sCmb z$t9XM`J@_8svb5xCN4Wi;G^bc=T0<;tC)9R@-)nsos6|A?-#>8^MZ|;(hGk!FQNa5U*!(Bf{qS7=L>csAA#ycpyLqj9rl z7+*TaX?2iKs!qQcelIVwIEPn5 zn8y_{OWQ`9Ynvuwo-(C*?lMN~m(dTeTrSE!w4qNCL%&meZzsC~-6YAX9-L$n$G$I#ByH?3o*O6GD%+4VN57VGVCK1};3>+M0FRh=UF?MYfB zopDl(QiS4U<$8M>c!ch7rqxaD|H6rBM)$Wkk`tQ81XfSPvhY_iR~VB zz`X>~p|H4RlhLkgc7A?d3Qjc#90%=v_?_=GQ^}pC*YoRhoja;$fHVb5^Nn3PQc!rx zq~gK3PYO-vj=AEfjI<|j82gK4vlu018Sf{(xvqhXY}-)Nz1;MS0)|1(&(E*JnT^S5 zLK+q+xwL!#nn`HxOC!W*=DMcFC}@=5!~f^!*RKQ1>(;#_1U5fEe~F{5|LgbF^zrA_ z^l>jg&R`EP{f#GAOYjv|pwY=}pARr?uSq|c`Mj1g6e?GxhvsQMsgmOHw#;^Ej4kuo3~)a4%AEF4U+00@ zsI6o_tqvx;2+Uh7lij$i(l}dQT^u2`tAOuO1G!Gkx8TX8mt zhils$Kz=VR4*`P73y8hR*u>`P##RUK%~2YgtBZrQJR}XFIvFQDiX$=f|IR3W)hW{- zCB2oUEmIEjs#nCLtJY{gNDC7!a^Oin9+#sy>x_lMpa`-d6vGy}GvxG4_v|;UPWnUuiD)ya6jhzCgrjb9aUbm`(^npH`$7x$CJ<8&|8u4#)Y-LpZY4FI(b z?xcqv5Y~YvJEJ&T9K~6@pA>IZ`-+N|G9D!zadxnOg0}(AY^$bhg^YGk#Lw9#A(hPw zPiY_y87Un_FFE+Y+)LowGx=~}2C}SaX4%6O?m%fO1sT-dmyyg6lnt2}NI~G4?8$bG zDMUBB%c~1!P^5Ta_VNNfCxtmqi)5ITCE0myEPeFxkBps=(!>Rk?HHbxe2<8_OvZ76 zqXLmug{g@cQP(^>fF&p`36Kc$c^n@lE4G9=h)c7ZB$*kcN9iCLfR@v&%FTc(^($?w zT;uwk-|pw5h@hkP=wRIOxEKW{mxc#rZd~(sQ`1lM z>eh|V&MIW0Q93Snljx1NO?FzWk_ZE4NzOM2H9R3+&t3TR;g|^F8F88=#aRU{9r2)y zDDMg>n{d3%D!;IjqOGHDyLAfsZu@iPRVS;9VK4M3A0$1Z2y!XQ1BbLVrt9JiNkwtH z=sI0gKsxSSCjg?GjSnNgBWLUdb311PZaeR5(1Mlw~M+%=Cg6Ps&G*A{Tz z1BTwXq7|+98^tI1!V8#C2q9LElYY9FCWCjzY~eKe zWbErGkADAWK1b*!qFAAu1aX(|YYl{6+CQL={NA_2ZCAhmSOZT$9>3&BfTDS8CyU zlpG5_BL4ar1XBc`vn|6`DK2(~OG$%WB(%)4Nw|*KLhQY;h6&&Dc@DcodkQdX9fd~q zHU?5VRtM%>%sW{z1@iEN!)r5+yLkwQcaH>bh3#n;4>23Hjh!{yD2)n&_;?@AVv+H? zH}{t4v8*ca`)MbL){D+zIle-2F2I3rp^rX!K%#;CYqGKPzhCZ|y?9uPFAa3=#FEfm zn!Ss0rDjb*{6$0e>OkO_Wiop-IxPgnZ)J+3)?8S{`5Hf;eVv;oY>5d3ztyvMloY#p zne?(;x58is&S(2@kYrU_omjPWF_kwIwuALeK@K{p;KMQ(HHM-^*dVnE~Qv^1RJ)Tp{^^#kuZh#p9f=3o?7rk{?s5He7y7nY+eoL{-V)X5^R4SPcf-YeX} zOAB7`mS7{OtZD9fG2EW)?WM0wTT#kY7~ z58Y@HQNEC!(mdMOB)=xHdh6EoK|mQBk*K~==Na}|df?o%<}2}M5~RH9Jo>4vb|?Z3 zb7UgrLOdFdi=xJK#-?nI$OKhF9Gc~M655=c;1$$(-B5QJ!-Ga8|&fN0))X(G}*-?@RFiQ?ff znm51ts{sHn3TJvjgFn5B6=`=O%~FDk_wK&SMa2z5uQ z@6x2^IhK=tDh1Cw#W#3weVR1e{Pl!ZAUoS>__xB^ZLVwDlHDlEu4-3g~*ibMA(|Bm$C< zqilFIPRM6V!j!bPg3MoJ!vT(+k?<-3aaH^CcDiV_IB|g=ff-0;7LnRC0LHvAbUv!L zytFhb%_x4=TV7(8>78F76~mbJ(-Da?YE-05JzN_L#2ONt=Z~s8o1%BjEQlSh@+uy7 zM#%^^(wAn@tP&5VB|}F?+?f2~8!ys29DU>X9R^lbRzeKmsbhiPv92inhhD7BB4MXB zkU*BNld)3JUYrh-!5Ryg`$eJSae%4fL*0;a=e`NmAgGq)APugjzG~PCFS8>_B?8h# z?JnnY0AXP#OAW{_474rwXv>#*_3+^tT9j;$45~#h!7HN3UqIgSX)j@mbx)hFb(y>> z)3Q>Mb|Y=O1>%Jy*TwhgZ4dIKyb6m%tqY*;g=s4%0?P=QO2o()BfD(U17YVa2|RVKzz??%PB^nAtvo3* zB{`|=t(7Tm!5^(liZ}*W3+#4X4LrI(knSP}q&1e3Z!v6)Pl z_EQ8~VhPu>04-pHOBVFftzh1UAk^sbaKH|HDAugpas*Nb>aGi2=nwP$AyEir^?5nt zW0m5_va_EMDb}nORyU%PEDFGMXj~m44a>Bqb7uwkg7yVI_|dxeiejb$iaSRXUk&Qe zf8q{1tE=8d@YU*B8;#f))P^O%TMJDPyLYw)i;p2FBw7@Rc$D3qvsaK5`In~#LFY0Fdlr29;} z52CWzirEo5%R^{0#G+zgVN%}K9CM^&2{)nGc9v;Aq|BZlXZMeg`E4$e30z$&*LO1T z<>9u8wgnpVe(Vgt!)gv4w$r6(w%O7o%7svsf<;UjX)sd;vA{lhMUHW5~#8`&i zo$MK<)HqIuL$ix>6QX(SCd2%Afr*Fo&0-V}ow}^MN?G*+98=;ac}zY$91u1gzW1RtaoCadD!GQR3x1R3)jj zv+4oh*$!Dtl5Rx7vbNgBuK@wF-oKBBHd^0In@KxVa<7;u+3XT_vutcoTRj>1WFGxIGz_ zpW+sUTNw!l2Ke3(gBS^(p{m+VgVMLk_}jXpub9sWkGnJc>KsaN7v z!0`lqK?wY$WbU79yM`VgB}I`AaAMvPG3^TGr{TeQS9J8aI>4zI=89$xhMNULc>ouP ze<9YYFy&;7Lv!<{A7_}mNr}LQ(i|tlA%zD$Gy?>#Ri;RovIi2rmh=yD(?JC@@DM@4 zVM#nNa~fDwl>KgUoEM|+AX!9K{>6Lu?>_&idr*yrSEy=-&+*KoLsboi`Tjl<_mb5B zF-T>PMdSka#sllIA&rC6gmr3M<#P_N3r>PcxLkAW3S_S~a*ys0FpS?gE#i*EJ}9X-VSh?*M6AWF{aCm-!pl1SBct*KR?<%dc3aA2Za ztGAbK-MF>7a&2v6Cr|$;!`xC#5OV(PUV~S&~o6;YoKI z=ZvWGne(&Yd!9gFtf~wb7ZeP23 z{pRX5!bWrdGK^?09uDUNN>i)?O25?WgM5^{&iD4xenK@|!~WqWFceauWL(567+jqX zbjQFx%lG$(juyoAV9JxxZayqA={^~k9xnYZ%O9lG!M4nf`O~>ipNjER{sotfF zSFUJQXgQYOHBa)gOm~L~$GnznP`-DE$$}Z?*?tGHFAD~#M$&A50c4g8^Dz#^xDn8C zutX9Xn275G&#nlzd{2`sIiBfRS64g?C|3Ma!WgJ#y6S8@&tT?SId1wy>0ls5%@qz> zA$|qoJX$SII^}A=Sk?SO(Y0);I#@0Ix1bKcKPWBK-EzIVhh;fQ2KOl=lh-SV58W|4 z;E^qN`dQR#f&km+75+K{7_`Q+TQWRvWCIrX6zsTQ#`P)WvxW<($df~n9vz+g9C06U zX`;L&5{2LFCdxy zewV45gOBSFZ712_Zkk~mTVul9Exz+Yo&DWyBhvlZr5dzo-pd*`8X+*(DB0p<543@F z&ty68OQ%si`h>EN3f!0?e!-9Ixrm@v#zhgIzzxpn ziHOyCZN$hVOIs%7zZrm^@$v&@ZDc2&OAx1|N^2uyyXwHqEt<|9^VvLV;$4-{%0Tr; zc{VPR5|&jg7CMp=&i5FnNNOynOo~s^vNBOTsUT1CN!2aVy#?>jd^o@>Rz0p5I#y?` zY9wXi?8NjbS()3si}x{noZpSNY`(pmz3seJ>#!ZKlOH9;Fg}UQ%LQ0=->J1G)EC?K10&NFJ~H}sZDuM}D&c*3-?XSC6Gtw)%#$FpHZ z(M~oZ_t;$nB?)OmCzx>bCT>DE? z=33CaZ>;^#uHX9{3C9mVyGN&9kfR;O+HL+pf=giCM| z9{ZNK%oM;lkiqcQ7w}Kg73J7QDh3s(O#Psx&|D6x`6%VXRVi#z=2uA*T!1=}^vPHi zc&+3hs%sgx=9KJkWF)=0a(i*_+REVCYD`R10pMcKHa;@ZBs0Dp7%3Di z>)sNc(@#<;JA6tEu0PM{!_)ce?QPrzR zV$as`jM}DI1HD(!x3fRXy$`$-4D13#c~{JK zn!$)^IX`w!l>NtKxZ%S0Dmy%ErCE9}t`b9vzdUB@WNGc&}XXhb8&F@bsRS!p%6f=WF)jBMUpc{PJeVQDlnj2YWnBH$EMH&wuQT~@& zbGx4=#Rkk^L2F@#Tv-!d&G7s52UjBi{_Z3l4lw0jji-;{SX2-c>?eo&$j?^A)x<}B ze^L}lCcZ{T&aM*{tARTx7+5e5uG-__U<#v+*_{+V&p73c<)ftH4^ybVU-sj1@*pps zCj0kac~v$KVkGfRiml18O2P2cehBB zy#O2cQ@A%D`!w-@tS+CVlmSCWYsa;+1ei8JN?xb6&mSlL0PV*qoP1Oy{<3$;9KEKu zHh#nZ>mkCl6snIWqd0^901GZd|0C#t0*7EdMkqlj>0wuKcaTd#R6FIw9dze>%bhdN1(jM~TnYpJ(Z- zm3z6r1fCbe`&pltzryHUMd3BaYvGf;?@Iz$A=Sm@mG%8eP|L`L<$XsrzsxD0R{U?| zm3ojDv+C0KyC=`H6hjii)nR>#BwKNnY@cLR?9)^&B*E*@NnUV={lp)G`?i(tbJUYp zQ&`rsJf!WXoFHtVIYGP{*i=vyPwm~~Oy4@vdVuQ*KA!9+m}4I(`T)z)#(t7j+m+uK z%2Fmfzk+8tB&G@C_W;heG?OG}c*wL`ov*sHF?xGyzf;Xcd|7p_1keBArECb1=ei%(+l;S#gc7Kr6k zDF0PEh0F3v9h1(8A=xn&c~GRyYD#k`mzo)#<7V5z(D^haPHMJm&0p@-it5f2_7yqw zfekw{&)J=12npp{5=eSszi*5j2V1qr!LEC!I$+tLeyrt65d~KmkD%11O_i_JV3qh! zKFljeq}k_oD%J#Ba+pE0!fU4Pxi+`axf98tB!!{eQqV*ortK7qrg;~rq>!B0(w>nt zLPnxS2GU`k9PVSMDM4K@$~84jd=1VTI3fgPhzaJKpatPTsNjD;)@_9aRo zC9~$0N=xUPReJ;t*I(*vg|j&n8Vay?LTCyG3~#-|5)4oIIJg& zBrFX6%$}RD6~>DkEtqCEg#Nj(3Q|lbN3z9==FeE@dK#7NsB{|DXFr4;Ih4iuilTYT zlH}NwSZ#4~)7@s`j*0~nK(ovdw_*dXZ~UD6vYKLTU+CnCPXhD3y%%6Np&0G&-l;*fimjPod{u~Nw4oO}d__S#mta1K^2iU2_O34iAL zn<`kRDS!fEdMoZl%?8Wl4Bo}62Y@+)Pl-~&%gGaD??S5XxcICE6*4cr(+xm^Vgu`u zYfHIHgY5~F>`sl<3(Q#R;erXc;#3QEKnjFscthvH_=1TcOxjPr!FcKm%rwji{qo}M zoGLBm;Hme4smz0_$yyeE_Dxvcm(U>Q%wIE$gdj=v#(GVwKdkMoa5C?pQx*n+xy!wV z@dNj;HCwqwl1mfk=T%xmMzKwoPWdcHyY1YGMA5U{M(c_mO=(9_mCgvZ!xkemr^kS` z8t=}@%^;}Z@jooRFCJU5_1I-jZU%`d2bQqB28mM7j3G=p6THDl1D053G=W4q13F|@ ztJ_FUH9W{b(N#!3XO`2=iZ|jKhYhBI?mEgQqlovMyvO1hx??Y@W1i2btAX>v$USx8 zG%neV7PqAeq|S|W^ptM8Yi?pL1oQ*50wt2~(F;3Mz1^(=XKNa9)Q zg|cQrHT4Y~wzqK6TczLO&$n7I-CC4-sWNC~`3%BA-sFf>@cq_xQFyH?Mm@$eyIomG z+H{z5MjCHukk&QfgNMieSEeLgo3;mo6&s|@gb4IQS#&_c-$)n-yp8gj6Cdu}K?Z=t z8C(?7z*9B5av{Df#~Ed$Q!;vX8zuR@I(+egYbf0QS;X*Yf;FNGPY3Mu1`o;Zqwi<4 z1uSg=X-&f1ho7ZwgSm=(@g#j?twvp*CXITZYdeJi8R@LsJ(_PCcT=4vsRxvWnihsy z>r9COg?%Nip{O_YDD9B$iM(3t^_k{+{(Q`?E31rB<_aQYY0Rz@NN#jyMg8nL+K*Tw z)ux0l<&%g25nX4u_OX{;ocN^qqeKOsoW`WO)c-X#}H;i!&cvp z-N83OVn3pL$1#F!n(^3&^d_6r@Ppf#uQKK6SRKSV56W) z;68Sn!@!^IUe`V1R_oNTerrn~@;L!0Has(GXUj%o65ZKoOqSx{E4#8x!vTh}P5 z!Yo6qqB*dOV3PF1oaXX)VcKrQCi*xp=`Nkfopj;&;~)V@?IuOhpy%2cV&_hTtrYyh z5TJ$y`vB|N@Fu%Y{0#Ue-HW7Qm~N->Wf8! zuaM5zE|^9+_qG&O)1S^coubM`FlOr#;LVpOo4agO@@ZenI6bKglYo!UnOqQ5c)#3p-|MZ-pFSuXaNzdRig(6n9;im@kw!xwppDL*kTW**)i|4$8A$S$a*8R`mk(#k{8lV?_ z=roxZX06BuWmTAAlI>Rqy%(mf1zB;;CL_LPePzkKq|;cvXyfkYz55S7`uO3mfB%!M zM~|QUTTi#2J^%Cvzww)YA>Qo|lD++d^z*~vD9gvcU6j@2==jyikCv8KRb2V01PC+fVF_IY%$1Tlji~en8E3^-jb>EQxJD;<@UAP zH*T)nzD{;gwovHkyb~`793!K}LDJVlFzVh>EtswrcRPyqvg*O&=kbCNIqf5po}7q7 zaH9UM`<_&{C8d{rb9(F$r*WF@{rEiJ^^YC$@iCiplkZQZ5upKRc9WBOs7HA&%PET>)no^zRTzQ)sR|q zs3MG$v+rqu^t0jw(QK5M4Vk#ic(OZ8`{v;j$r3n_q+DfE;24?290M}M8`}V3dcb>& z6Bp-A)Zj*l8#TP!bdX-KgIinjK`$cTEh&2)FQanrBq=)@Fx&?=&@m?)>`jnGCoVfg zIR^2=gSd)a^e{aXKGeIemx#;?+k}!sNW_lo0o{l3&Nzv%8KKS_{IQt#S_c20ygyMv zgyT$64QLN%C|$94po2Zlu=Z~>A*?i>9|-2;ttjCPtXNX8;lQFnjUjQ=+TC_b9d`z_f|Eg{0<>00BQac)OQubrsLHR(lPeN%LvP2g@>d1~Wq`FE zj%&9{pM0OG@+m?{0|E=Hc$2LPpM2lOed7|o%qSFvMdA&Vh!c- zd7%|`Vv-0w4xD;{;OxS@qySskZrUpp0%V1#L|F-4*68ZdWaJUuHJv=4#F$uUI(ar9 zO-9hSB(9s#hGwFrh)2wo3yK{R-2@O)PeW4}o> zMX~8c^-`zNk~WQ7g3AaPv?|*OkbbQ_DzfAif;C88tXwwW1sYmAHFL-@Pgi*A8JGI> zk(>>=g>C=^cUwtW#`}rCMYQuKx|K_<9ISBnT2J8zpLLP*OP(lB^z3th=ETiyz&-CD z^be_py0)XY{88X-PQIWTe!Jl_v}_k=W~XAAl?wr$a;uszSgGsXzOhc{1beq{uA5`d zHr~6vy3U7FdbgKV4ryz1(a!SS7ud12sin@H_A+?Uh+ff86j&P3F)*LJKgstYzdW`{ z(;9s!Hj_KZ(FCqW#_P7sC~GP#*et5PG;`4p=QuCfYtl|%(_xy|IPy5Z(~g4M8*7z& zCZZ~`5Aigc_9yv1P>LwD+gg0XUK29TxRNM>1VMx&rB&V4uFOGsCw7j^v~8 z3lj78BlcE2B08AG)EQ6$Y(PMLNN}!&CcFo6^WHgK>s4_C%c}x5s+{j{ow<;om&hv6 zxRi+tsinqUc;X!kcIKzXWCzrMFGHm>kMp94=+laA+0`JqO`26nHb{`{oGzNP2O!;@ zXv7Ak-TDDZrga8D6CVZXSoVq}=^P9Oof4{vd1*d0w^nc6y0LUC^dZ&mFAeU->=(n1 z-fT}Jqa#njJ*a0@r)yYw|Ic^52OIK$6fJVnQtpK}2XSeTOdEqSd&9UqFg%>y38y}@ ze#R)py*7MlN5Xrf{5Yc=gWi74Y(D*jQ;VOJRWedk`^aPg=aJXBX7o|+Q{;Ynlw{ht zGx-G}Dpvl3{NDDa(y!tM-E-fctEBz9@*D|*9jtS05HXaBIf$38gOyI23Jh%U>kx+c0xnLBNIWj(=cZE5~3 zOUjSf-zoeK1WBaikKT>nQJL7tz9Kx_sofDj|XBsd9Gvy+& zQah}!#sf%kJMUhLgR<%%=X1|hQyVl?^O zbIwMZwKjgXW z8Sp6^s>e>paaoQJinvUAQ4})QFdINKcHW-bguBtHi3s4Hbq({EbI}j$!X*0a#Zu?? z%MW0}5?i56L!IG!s>C_>IAw)fIVYK2qHZ3hmnW<68X1DlB!taV4}1j~KIF3pWEC$H z?5R{2swI{iz9n<9kKC&=vS-&h}-2nRC9x`p_(!Z=g<|C&Y6RPj@BkAccO> z2&dgZc$JGi~vS#bR%uBxQ)&VD;o z%itx`Pc77{tra!iE5#uYA{!z47wkm$bY|%i32o6_7^YNfpH6YPOcAqyp|+-AnW)uQ zVWD!w3Tjbk0T93zC!b*S2@Dj>r!0%VC}3|48E$%(qv>ZTo6K4*HUe*9Jzs9~{L$=b zjJ?mPu|xO6LF>yS^y|r*adBjRQxfGF9d3Q}?8$wb4H22jp5(_yVr#+osMEm3MQ@gu zR%(9YyD8`?h+E^LJt{nJqBL^xeY_|caUU8g7!neHvoc$ml?2wa{ai-j%V2^TLzrvh z|KF9SY3%9(<6al}6MBD=ABTGcZpDW1GR?~0?T1#2v0UicXuM1j0q{zF*DNnBp?Neb z9s4C$%v_r)ETW)Sg80<4(Rc-!OYkXJSyX8SyK@1gYub0y%!XN6_F)S~-N4R)$1Xqu zK*^i>d`T+-N80Q9Lm|RtJQPCMh zZj1dCoZtXk(#1vLMm&N1zA@;OYM{J{7WLGJwG!%lqg9wvdMLz`A(VkH7M1kZvc(ns z304tG6QLp0w0uK~b~tYMJl!nKsH~j{-=UTR*5eeGn$E$Cp#k$Om1nCBv=Z%5lm*gQ zvJJgHL6 z;=(rLCbpwulFbg>9upJcChA1~Zk6~Ce~8|2V2shI1+JxiYG;UDIEV|$xM}Htiv^V6 zCC;}Kr79RMRGle)o@c4Vrg4Cgs#mf^8>LU}5LK|IIkUVnW$JrMhb6s-g#f3(gUxko z<2TIm5*Bu?d76SM&&s6F!>BNzIc~cfN--Kug!|8+(!FG6jEDb3_(!Sn9&!pRyh5Ok zyqOEhQzz{*nHuP+%DQZ14&tIjlt}l*%boVz{Oj+2@VzhI?CfZAVo#<2V_2K4A~6iI zutYwQ-vbMLF520l-9J;Jn0E1b7PS&R@boI@YM|Krn&!QZa(sCF{n^Zmtn_~Tl%-k5 zC}oNFzt`id>dF&IXz3MMP~%~VEkVHVTwF7CUsH*!)S!<`1`2x5L}VQCq-vyxKqC{e zmqsFq#6v-~$<3R*N^!*txivVR$MF~DUJSD~wsYb3tHNxp?{~(l+tF>+ zZ{)FvwQ_Wn9u_&%`)-~OT~MLB?XN%N>n2D{F~X1N;^Y@FcixVCV8;pW1vh2^EFR(NX*y=rVGcRSanCOUUk=H2hr`Fc$ftH^9k8=tK$ z`<<2?H}xeQwOH)pKODL6@I#{or?h-Xl^-SjjYs$IZajVRbmKRlKYISj^N;R7*?ji+)BBszIfrXH%aAcE zsvZ*rG`6if%PSry-7<6SEocraPO}%8AE0**n~V=kdu!e-n^i@ZGF_hdlarH^S@11+ z)3IEij=^B|JYMrEUawdD_+!5!QPz?%D+->#H5yHoS~cc+tyEb~mAYXJ-EBtL<1t!! z;V{ap#E%xVDxWWmluijtE9M#^2KC)w0N(7s`S|1do6*RuhPBGl+%Pxo**Oh`Y!HMm zs8?zq#EzcZg8~2h@yGn{XvF`PrMAekyLO7G^xWijbqJ!YRm|%8j(tcG)OI=`&E6Dq z4t8;YKG&!KS|tyd_ds9^s@)Av+3a|7`R;Mm`2s71g>?ma5|-&i3s%@|USYlgiqB(N zB4}_v(Kv{J1h-^@<9XAp_iYAd6u;^%dDbBVW~1u>0zv)Y72@a5Xq0g$?=pu@E6@#tpYs zqkHL;Ds(R`L<#f^vOI7>h@g_+O&>_3Tjk;Y80gjSYbNTNwlplXE{i2C>XvZrU-~3@ zBgLA~I^BP_+l8^S4|`2gQcPj;DlMyN=Zjr2yifM~vgU4z>ehh-@|(I2UGna-dk)Ic zv5?lQu6c)-X^7nX3rMvqs7cCUC?CsHzPMdH$5>;VD8ZwN{RlzUlc0+8wi*w zAY?yIHxv)}+b_8D(iheNla}(PfVS|mPFz|rpe`-=$46dZ0Zd)emnAQp8L-qf!`~7O z((>>u(nG^Copz8R*#TXrQXD~fCc$azZ$)wFyAir+YHK1if@~I@(T#a^G9xpk)f%RF z`fQB=!?XT6VR(86-x;BO@I-7KJ{yhqoGa1B6xOAPa{gzd@dKPqT*M^%QnwuDRj;DP z;MkI%!stZ?S=09emO9J9{z3|I%j7ub&IW0T``_Hbg`gHewjad0(w)N$N?O|L3nt0p z-C>&TJE{VEqJhw-gv{~}`1B_pnn*mg$@IPv-|_=(&1R9r6cUMsO}$>R zo{A}%J>Z7*!s>-XsS_a<-&5G;1qJn1)=6EpWh+1Pcap&L0+;Iev@)aJX_34Y(*uUaKfsAM@Tcq1SD8n4S}>|kO-@% z(;IZmrQ6C38WqA*X6y`34ALc*;EN7c(gB%JM5v$I4?g`7g6h;)pDSV8G-eVg(=3}w zP%-BS@C?4a@f*aonZTCK9n)5$g0Ol%GHL(99if`(Z0q5ppz??3tSn}6SbKvDbnEit z-}tZ=J3>ubQ`5uh7p*uEsWu9_J@`S9%Q@@Nff5w@LCU_x=9AiDNY^MHVkZI=weGlz zooNP+$;WL^>+u~jgrG5OPASQajq(uUWPqRKkhS6%XsoZq>|0%&!^*M%sk;P^Ib?6w zf&pZxB%oHLXuT?&{UzuA5=Wjx_)B*qiPW}n9KI^#0Vd_pvD3hvE5OaZFfy0yfmm2E zNl5!7jmes61ACO6oRv`TZ?6V@szt^1IKx7&fXMY+;#8Q9h^ZN^+sl~WrFjr63_XmH z=Eh(R62`31Pq%i*ER}w1S4@R-mdAN z%B1wCr`DGZ5BHHTrW6@WfXRllO7%6&_c3W&IY9zDc;%b*)_f64DBob?aI-c@TzoYp zg`@~;ZA=%(w3*?JF@B;(U8=Sstw}%U8LtevPs+y#&!@7Nax$zaODL-%8VIW=xHuTr z-7P5%2EjFg74`+%icycesESb1Nx4&`{IF})mWS)Mu?>q9tI>1Dl<6iw08LPYVOzGx zpk)k#lXLVUTCA*Y5Ei*Vyd~VxQ2g>FkEbipYgYsO4*Ucd@7w_x^O6okIHJ1%v!N`( zFz3F7bo7pgewF ziL+d#!l@+ntzPOaTldSrj&uq~v>83h!CBIQ+?VutTW_TlC0RSQGDWajSF@PT^#&^f9x_QF2A_FR`|36}4OiGs zC4mM(PAR!@Yd7(pfdFw!!$=u=6MtC$?fuyi8${nyOw?Lv*@W( zpET9ExH7{eE-QmHhUs3~H`-78B_^A9(k^Ii*ZUQ**cQQfRQ%fbGydTXT`D1MQD`;u{Cr)C*;dd}9wd_!|Rc z)1V|3l5?)TWagqzmHD-x?K}ce>pa~YO40;IR^M#3iloWZiZX#j<_yI0}e~W$;AoYB` zwI7-}^w!0%E;`l|D9lq;1Txo8GYV(3mn-vNUM_@Zp#?EvG(I<=BAq1$W3|V4t*vH} zqpGi=G148K#>Sd9$)6_e`2(}`YH!bv9#tRlWLTweA=AH$()*Oy@tSwy4ZMeDfT7hz zSrdXN#q%S@W&*fM0G`qe&F)#PTtBOoqJL%^H*0MOyHT!l_H@h|q$m=IGbW7B&)e}5 zT27e`CP63GvCsmY)g|t(uV?<^Nn?+>slZOFtyuC8H#>4|?3|Y&o>%gWO@_R7U_CAd ziG=jkFjy-i#NCi9m5@{~jZF3g38N@%ThB5haXA6dxg*{2(Tv8FtklhEHEUfm5`R74 zjubOJNXevs$ox--JH7P)k;%Tk5vMp0 zu3s)UH|lRsYUr(NzKooW!QkC7yFt-I-r~^B#F>~C^AvEvSWz)0V2QUp`QLH;~^(<^6r@C`tO2i z)qEZf7T$r3Wu8t&$io3Hs&6xh;cT8~ULM*#+N?PdLY_h@xg#fI9+u}kRHUEAyHDqs zinMpYSSZ7Exi&IKe@p6*@l34E*QHpkQ+Q3G6R@V44s8}cD46#y%Ybzqm z6JP8p5tQcUtrJ-!{vi!d(KMP?7_3){D(>4_ znOYTA3Hp4PRY`Fa4-HHuOv{UAMUPyv9~~a@Wi6a%AP}-aDw&z%I0y9# zn?H3TkskrJf5(~y!vw!moB@~{(s^2T3!Ah0)54a8JiV&RDlTwhVnoXe%PPH^*^GaTPd(g9v;+>Pj{*dpkhD+QY40k`4S@y-1;L z2)VEVs#YG}T!ZANVKXbp=aLucJ}y65S~uln_w%G*_1eqpX2jWrd+n8VGfcC?UVC-j zl<6?Zs$Tn=p&b~Tv9#0sIBmm6KGqGNf{_CtZDdR?ir|3AG%Tv5%SsK#t8Nz&!2UNq z2_t#WRS4^A#8)odOUr&-46t9Bag~~Oj+By(t#|IU{U+zhUOJ=XPDC~(zdTt05z!IU zQ95>R#O;&OZa%zw@;poX`GE6?DQt=uxyHh|6{#7;jXDK`m)vZ5|5a7Q{DIk_yf<^A zN=NZ-+@F+DFWPyqv~&Bx&c@B14LSd9VAqL@QHPF@pve7|om&rf?k;Hz5WG(LF(qr2 z&l{UNw{F%xPsZNI8}?&A9wyl!E?nQYS9fk*_r4c{4r1FnyZI}x(9NA&tFF*NTp-1N zzer-_{qxGL?%cXvE0<=?^4|X;j$#Bsk8BCYEwsZHI#Tj^zhmdPKw;f%9 zq0$8?oisb_j1w9i)9>wTJGUO#Mi4>fHL|*M+fB+S-vx1v5Aw_hc6H~jL(q6q9*k4J z`Bi_?%YIsxc|pqule4*VYsL0m_KSQt410I7gJR?Q&Rs|3 zQWpRCMbYD}ox2;ZM{e^t%@7erO){3MJlmgm&ELMYy#fbml^~7b(MgBXANosd6AS^O?9GB{`#g>H zA7N@+@qS7Ne91fSwkO25C^(Z2yuCEna7+f#`^;?1JGgAT3I2~aVvJ9p-^p*GFjJPwe_(}>nnHpuTA=Am0zy%%T;;F0Ic5UB39^0v)34~>s;qL*SXGhu5+CmT;wJfxyeOt za*><&Eo=E>$|Im;O_6!9S#taioXMqT6rjnU_9dtjnJrf?&l5J!s1JTJ*#$F^lIlyC zu^u=<0d*EIu%_e#56gRxwx1?tKIC&)dKW2zzSeLT!tf|DQ9Mq&RWeNWi+F_mv0*lk zDU+VQk-e_tbPvl1li~1WGtaW5k6o(mPncW?4lfq_2}XqNldSKrp>|lq88JdLHQ6=1 zqg!MS(e}<$NygYPBHPOJSoG6o+&@UdYiS?ak56IJdQ^?wsM_u$*K7=~1Sq~SQypNc>yw=f>;p6%eRI- zyd=o2(fawAoVZTc32xz-@Yh+($MvnKl$8{CzU ztD`1blWHr&?FzqK<$tiG=AAgAZi|P0UE+MI9Rh}{HsJEMA z*9?`7D!;mQLt-I3?6Oe|xP6rSsP*w$BtyCZGtbP^XPcx4ZhrifZ$uGT$>8fZ56qyV&WfY+g$b+kZJeEWFes7|3yuUqIu6Dv z{t-uk!Wz!I(0nHC&6_*-A{eAWlpJmAPEQ1hBR9ti^kBdi8m#dT^M>FMJ^~!JrCkRC)2-#=R8^bJeWh%jZ z@bz88NHi)gXpD{@25+X13!d+C09Fl>K99PllC$HT@Zn|giLyL0QSGi(4pk#0F}n2_ z@*E#UqulvnLRfFoByod~cbiXF>M`TGROKb>jM<)-N>WtAnkA?Ailk3z>_usv!FN2k z^{Anq0-H`=ezL0M>&#~ z2X_(p!I(M|@SjXwPGGJ}7Kv#FH9HBp$T2rqG($k1IUV z>TZ!Hd%^pf2cleG{3F^``)mb;m+4gEsU;* zSy{!yAz#Hph;MQWGHwLHPzGwoAw~+9dXyZaZ@%zX3@^rozv-Mk%u-wfGQqZsmau38 z4EMuuv&KEkeKDI)KY0+$B;#Q-&-NrpJ^1<%H~OYkctkeMjiCd7{s1!|~ zT??Ah^A&pjC-^w!g$=)wQLtuL4NB;NhwYQBibFIA5tR=!p*tlM5l2l^XriZiUYXy# zAKCk3pvs>job*IB`Skr8p1eyNv8C>!e>xxm!gfl(; zq=8R-BPyT!pbQK&fQZ+9s_~@iP0FNb(t)hL5}a;zI0;tu{i47&3|J*4 zn6(rlQJQh<`k>7)yFQdmrXvzrsDBy#FkB5dlUqB*zDAA0@{^+5w9?NCp!e+ayPigH2xhA(+Vcc9dk* zmq@?6OK9}FXWI~*YdgDidxgV-gGAe{qe8nAY$#BQ5Mh@=f8%_Z_D>>G!~J$Ucl495 zl;fE}7EjPn3Y$o}x0e)Tlj7+Pg1Q*Vc9d7iOqEupDJ{4f118|tYq&i$9@)>yKjGPK z;ysL9On>K2l(M~M5Q+xT*vh_2Z@|@8p2=egUtMZ+65GLY;`L1 z>Cl@kLPa?lotymV!Xl(LAkwHObeb`5mh8MAr(o98eQ02{43gB#Xp7CQT*ZycSF5wY!mFr5uf>j}}kIN&#DS7SjFx#ZP=<>8i16rMGmbVKt z8aI3)3LAa`BDL(RTazSPpxQhW;lNA($eM| z_#`y3n&xyGrwr)O<;0wfMkig|=#|5xB0twb%$tex56TL! zQ-z+OpjjSyjN>bjTx5@-#6$`lw>yp5nS`}5fGxH?O5D2h7S_h63V<=!ubdjZ6jzIe4+lb6PI(FN>{Fkw+{Y<1kOH{B`a@lif$3HQb{`Hq2Qw#?MzUD0WSo#2-tQo9R)UwL(1AtzohF ziKMVvmdx@sIsbPCyLDp>nC&Ndeps4edYE|TB)ioCGxa1t3w}wO%o%d#Mrnx%dQ%=G zyK%N}dgf|deqWt8x=RT+M`tcPn(8Ub;Eaujs&Z0ZZU}7C&4%7un2UB+R@G`JyXiHA zOuF@3=SqHy#KEW6gNIj-HNgQ^CNTMfZ8|$0BerpMvrd&43K}YkBDR|kP8JmHbZIHh z=OGPOGkRxBx!PR<^7x!Mgv}ZqSbn{Jjn(9zn`Ywhie1JrFCkMOeGrinsmI1dnx<$i zLawb9ms`*KT1#$ZA4ka^#_zu>`Q((qa(bwXj2CJG?=PSg4l`ir$ z4j;TgM^0X&S%7sx@gTGFDftI+X?Bw&Gcgp0a21m}n+(gOXM?^@15sx7Ejm{Ru?UKq z%6AHtdpwkY<>SEPNFw0v#D&<}*+AgFWS$xb*->kjlK?WL zL6VgIA`eDM1*gGDK7qNB+>NBFcV}>^SwetDRG*!DTR>8Sk@W1j@mv5pJ$6Y64Q#Ot zySEjX_g#vP2T2UK?Sf74WKnT%D=>sQtyV(Na4m+qC2%y58=r0 zoZ{?$TjGKz0FSQ5&@t(+@R@e28HBOfey4?EM}!DNPSPHcdhF~5 zY#In9f?NI5Dv{~d3S0ROn$iwyTW(M!`x6^Gk|t^&ZNnik@J0a_q&o+<1u4}1*IuNo3RfIN%V|*v?UA9^wZN&>q}g}IA=G0sJOG!9lRdpgZag7 z!?q5{4ZNRC=K8=%Mhl(($3qTkPY0$sqIOa(X!2zU|y`@qrIDfS8}a$%;n_MDw26M#N%LRz-tV+Shly4W_G1ClG0;PP4`fjuL~a zDjXlh=@9q1Oz&A5wO%}Sf<4Hmh}8ixQ$4{mgEn04Q-&Y}*hDfOMH7&ofj5BOb?=19 z#(2y}Lq@v5n^7nvZ$S+^oxKeGg=i~>rX6v?)m&oY|`rolM`IXJ=Pe8%$x)gdlOiDIPgWE<+-4^~N{V58vH*WWW{RW(5grtA>%+~8rJ3No zwBSd{L6C(upphGocys00cb|>4(q`@`M_VCBU_PC>f=SknEalCgJQ*AEk zu?M?rF`UL`vM|wiIlZ??Ih_YQ4O17%a7dFP)+pjgY%^ksNMtGMl_u)MC6^ zTroM#D3kj*yN|F#6NLyiUxXXJ*}FjV24^FsH8nCv_m7g|#N3Nd%yv>K2=}w2w8%3$ zwD4(Mq)^f5W;%a4x)ULGV1Aq=h`0x*?RHY}$nIxHAX;*fxXq6njz&M)@ayT?Y8_Gc zhmFSUwG}^_UI>_sKC`*ybGG{4#Ac)dtwb(yE_ePh?tqpSb#aZ$6LapA*TY2 zjP&h+(RM7d7#b#4HW#Up%TDPGTAfjvC=8g;*@%>TGH(iw*Q}cz;SAwx+eibEQb31! zkQX5Y?@pY=5`+GyXmpxnLJDnaVv10w$1I9#i$dmPjMR{@jV>G zDo)H7%-ubOkBVrV1yhc0vF0LSJgklKt;2M|Ahb^N2GWyqH23({Z`{azo$Q-IG65*$ zDZ+qB#>m9dQR+|f7{N52Zd^B5Vxn>Mf#N(S*vVE~0w~`K*7cn7Lw*{Vg7v+pRzP`|q{>WQ*r+jiTu`CuNn7-f#W5Rkd2J!&dA4AOG(^{CwDIz5jQ< zbNBQ2T0egOcP_MAqgLx1U;ph^>-~Rv_+D$j)w=vsM>q?!*J@q<6J9e(t7RU1{mR8l z7q9s7jW})6!?EKM@sZXx!V3xq7lDZGZhW{n!coG{cH_g(iZcGS<)!W_{kOc-9ZwKu zZ_hPHXB1t(2*do9OBXL*De}DPjB8AO<>}Gw6zZ z#{e8(qF6r5lw|ESpIUnB!z(jqM!UfrA&hq3oOMhEBfGLVDR-B{SptSIEf;mr6n}~H zf*AL`#~D{zgkz z?a%6}l?z*C#lD9X`#=8d-%GJ#zx@5bn_|WOb$`YFVZT*du|FeCB(2uv?s3d=7mEOZNSvYBU9oMuVkbCJJrn_>FS?%yMr{)WKxwPr5zbG4?x zN&fkJGH?Ans~$cu(NR(zP*O?%{Sy-{FM&hQe~U;KX0=~b{OAXM0erl&ND>*TA{Wu5 zx1yvc$%xY9zn_@>xJr)W6aM?7AA}v;Ez-e$0{Hk>=iXz==;#3{MFLO-QV*70YN!T{ zw!VJpB9gZVWK<}C(sp6T#?S`!p@`71rK@pXRMZsz9oDF~^pIcxhG??!YcJg=eYl86 z9i&R_-Mn#Y%M{6eT2{pg4yiEP$5Pdo%iTfVKTL{ln&TSlL0a_6xQdrSYAm~2V=JqE zQ7Nq-7l%nQPKw>U^2zM~eEgpf>Hmj+$Yl06h0HEAli4@@c0gl4{+c(U5$;T3+z!*S z>e<4diORIt9Tzzzawvc zsy<%aTG7`;?QY7>9N=kPaTkJ#|ChZt0go%Y3WUqOw?Zd`Btt?HxGq(?OKw%Es_-zBc!#V3>3&U!DIa1NA_!$ljqqAh zK)R8DlLz2@v7i$m`0%U;0y`bFc0zA`BNqAEfT)y8qlHSTGDhdU#R;@9ULoy_lW11< z0}>rsVuNzixH?`eAG2ODl6eN{91Fr>B|*cH1*skhRxvaPTc!X6;zxMlFOS-E+KoNm zUII0yzm^EmB)q)EohWvj>ZqxarpPXmfirA~c#)W$TM~;?ONYf-@2Z%F-Gyy(Wq6b- zSdg%2jo2Yp$uczfuAzam&Za9!!C_!PgY5`0nb=-GpIsiICLH)safg=0G+%v8nu&2L z(=R397+j6UZkYp%~ z`(nvCX|-^=o46zlG!NHze5dKvOnXD3EQ7p>v|7^=q9TL)2ML=V6vhSX_Sk_1$b3!; z&*w{Hh2_=Kxxy*iT6x|_KZ~Ms{GUIIqVo+TI&b?Gk;$0S^9~CF$WHqgkeqMo?_F{d zCTVi>V&sY?F0cyQxU~%@rju}(w@RTEoahLSa=_AY{5p#14yif*%t%dMKO9++$EkXc zpQ&(4B5t#fz#1MGN;KC&H?`*sDKlN7Z$Q$aAk^_0+?Pv@#!>Y&jK*1a$QttZl1S(b zBf%`K43M1h(;H4aiOZJ;&v|X;<8xuqZc%zt+T%pQBD3XmJz5IeaKOGR@Hs3C*7fm1 z+lR8Jsn2=;d-_Z|ZVQfI51MD(hGW+-k_avZo34+@gB*|}ORKG8^)8P@+doD%r{$gv z!UcDI$}Z*uv5l##UKHC{Uf1G|vbfRx;2cFZzB7{#TBy!U&)R=)p7HF#bR%46!ARmi zxcJHf38j%Fm9Jx2B%`vR)gAtB)pq8TT-I%@_yJA%9rbQ%zEDcY7L=Ho*n^$(Mmd!R z+@*7=s#OgXX_px45BJYZ^CV%G0Ro)>APBhIR>N>9>V&NJh4wVSl#P^?Qwa$fu{agP zV4QLOjx--+KAC(MUZthYiDg($-%2e*N~gU4m?#~`|Kkf8P)&F1$KX}&NEb1uoCd2K z^L3J>Jdcu9(w4u-o(seor(WL?SYyk0M@+WkjUe>m9Z?YHD*La!Wk~S6Rpo&li+V~m zE}bE?UuHFjucpfQQLY=x#X94}j#934^g~QzS*2X(P+-U7&KCsick=aoxntS1anY|M|<>+ z2kGGJbnT-o1aRQx$II%T#kpB9*XnNMhMv=as;y9~tole4_>hp?cB_Ok`99o?cys!U zEY3=6bRX60m8;4d`kr6S=Kz_)$t<0n?G(?d(|nG;7EWe~!!LVvH4BQ4Y=5M(68DPB zPk}88&VsuH%rB`C2Sf{gk5Zahn$xgVYN$qwmzqL~-<*yn{T;ZwVh7LLsxxQ|0mt5I z>|Bn6%L)Qo22x}3`c&X%Bs8@YwH<2YCFXbQp>R^7i)7R}+sLnQ34`pVD$3|-$mL`U z9=K`~$`&veoD`$Y0lc(Y5%^>^U1(KoNx-9HW8Dz?xCV*lsQt}hfupF%t&S(2g)+?M zYrxx`uR&A?f(PcCv3oTI;L-;8MAP+-R02JPUUWGQT3*eVLK7}e?By6C5y|0FAXaxc zMj6M^E(mVBJsih4hgYvcO*Toz0d-F&CUDqhg%BY~ zia4mI@fM0hK^*4Qt2xQF9YEwwp>VJ|wMwi=-V{g4Fp?2*9RjA7%_G#UqjNy$K0@73A6EVF z5?iDo8Lc7&fJ8}@N!&v>_5mlk3M3cf5yive2%o>r*-k&KZz{J;^Y!>EkWb~b0h3W6 z1!y_2oa;Q&2p`J?gf>jF#5nbtC%IsG(2$U4cFE0?%TpOk^x1VG&Ia4K0Hdof(i$p>l8f-KPh{_V2i|BO66J>f~a8Su`tOR9bt8z z4%(VYCSDuO(j_Z=Sh_C8PVCAu{rbaCF>yxTmmzP-Du7~^w`Ziqnc#|WY1hb)M3pYm z;2StBh_FmkeLMNlT*OJ&TH1=dtlzfVMH~8qlWr%@>4)&?h{x!UAp_u}v7%En7E%js zAMcf6S+hH5vcJP~-a$b3s#|NvvWi$WpT)y>P%FBqXB=}8t@BWHMS{xck{2LDMiiu5 zQSSRPTp{d$g|yzKgdfL(W1qkM}nq7NwG5l+j1>fDvc|bs$jzP+2HTqsu~C z;*DdqqEeC<38hx%;J!do5p(aN3E3~BOHWx3Zn$c?WHl5jPBFF}6u9I0Mo;JhEHm$mtY8pUU33^~c)1Uz zQeqZiLZMh3mfYZ_&#uzj6a`f6y^BpD7gWcwo}{q>6Jc&%9LRSdW2aekFFM@)oQIl z+c=iXR{2uOspo>-10oB;J!r>5JremWl~ZR&O+SD-cxjGTR^+G8kOgf-8nB$1=Xdp% zZJtM!Cv6(#;;?=8sW1$}<07ZN)7QCs z!4*`=dRQWdPTE06(f9#VYnJ+DKGBzV<`bDmz~vDDJhU_Y5y~j~W=_Vm(uuxQrxRHK zAhD?1Ge|M|zC;aGNFb7jt&+)^OXqCZX~{<9eNiTng$PJ2Is4G?UnjL_&`PZ2T$rf3A17 zJ9k_~8TkP|TIJIxU8L}S6tY#lg9q8gOwWnHA<4yO$Ks_Crg;-n7UatmXiBaY8Ge=v zftRVtf}Qzdq1z0$5?RuidDdm2GI=bc4Lg$SNRv$}0gTxCrme((K}BCk6p?jP`XQ+T z?_9uaW3MjHQ75%&ulhQ>k8goryek!=QJENlnc2t4~J8KP!`auU3H`? z4hF$EPIV9=hcdJqw)-fgMoVG>*OXEJkYuK%DDNF;NvW~Gs2pU9dUfGNBoIw)gJ~m_ zwZQkC;V{itQt~-EBktY$raky>y{F`Ykc)k7g`oP$rGaDxyj$0UR4&iaW_dxlS6gl^ zjs)yTV>YaC!u2*3-eKWqS6x#ML*Zmr8u!K)H5(G9iy?BP(xiBk`_Y!nlRr*fjYAd^ zDJlQE=Jd~PxnbyW&Cz6Qt*)(ZElrjBL?ujsCQL$=4|nZ4O$W$+`B`fFG>LCvaeBiE zom%XMkVod!?1!o60dxX}1;|!7O!xUPh=W?tSd2r@zREatufYO%F>FlvP@Iu|rQIKj z+RdCX4On`DaZX(CNu`vY&IDN$Txb>v zoy(Ag>pim7$KYyBxYzp%Y=2U;N{DQ$;dnkiy$lbJz(1GZpB4Bg5C06nKd**=uE0Mh z?X3p-Wc%UK-SAHV{;9%0kHbHY!9P#HKSlWGujIWZ(bpI+_S!N<%%khE8oP&I4{@*GZ}?J0A0B>5|XWO5_JGN9Bf9| zFUv(skmQ;LRb-00!pUq9dh4DKnKX$uKv8o^NcoZIC;?7pZ)vwD9WM#3C(QH+HTN4E z1P2%^S5;F@B|6AP_OR)QQ@3Hz)1F45J7bWBfug(-`3SEh)feMng55NQZ`jY59E83Q zF%L%C--qV)-R+kOy(#U^>y%y%+g%|G@8RdbetFKqj8MDj(6_&ymZQtxb=a zGa{e8gzL#tnUKsOe}I*-V(tZXFevXE0Ee>JqHWmAmya0v2#m=E*I#U}KH}DtT}bQC zn$iodtoy2s#{?T2dCcY-xZwI1Jb%;Ry+pf)=WpUR(-Bc2o5(~Al6nmc?-uZvG#lwJ z0M8B4aK+b~;-nZpHg?n$Y+9&+pMN!`eQ%|=)P6t*J@wE^B0qd|q$CQ6hol?*g?JF5 zp|Iiri#eV2MExtCP|0<2D`YSHl9bbEk>(OB%zcs!NciN*YvNtld6Y!RlGyFONs3d1 zBUAntF)0WtJcBrM2EJQ1MJE~6Oj}I3V) z2oa*17ezsc7mphmQ6>qfWHe8U*mfcj2Z3k=KAyVOS2)EIH7NcZi(qX{pcqip%`?+C zMM17NUX%mkh$xpzVu%^AiP5u{U4}eTNs;Vj#dM~IJioLwPaZfb!pmMAj~YoiSrpkj z`I!7=)1knZIwm3V8mYXupgYnz^T6^;J#$?F*N5pQ31~>bsl5G_56$l zZ_`6OIuyYNxFDi!?Hib@N=IyASVh|kG8mU8;@rt#+(XdH-H};zJZuT;k zg@6M2tF8!EqoCo&aKS^G0OVn7-axWoOdl)OOM{PTIv^esyf0DBF)QIkQ7q!^Ktyo}B0z@Rpi(<#ARF0!IJgwuB*$vLOJxnZCoPqZtDK=+ z`M6w=)m-H`T`_VOBFa1GN&eXqgeaolYU*sE6h@7 zFN&yM&kMhgvTMGDvul>jVm-PP?u)ttg>0HHznSTYGkdSv3glmnqX}kK5gt=C8q)sS z9jb(?9)t0t9E;f)=DrLuVg?55;wZOSS9|S{>!3l3d=8o&#_b3EnuBJTD#c)y+$cUS z`T^%SK;@9FRKPkn`!*ngxReq&4x%^|5QzjO3XT|F7l)wWE=c(Zp4efkT;+-5IubQ} z9O}Mv{L_m!+;A?`Oq_@xw3K&ImH4H&|VH;ywh@nHHmQ+ zC?UfXfB?WhDN516LE)3OGD&6}J5pGs;&}&%PA)wyb1HhDXO@*P&uDE(`sVPL>h= zK9|92ey;hEprWVFomNE_15;Ko7KcR#oANoX+h(m3mBfe-)wx2*k~Ot>RtmVR;7j5; zCd7AOU~9bj+P&&Q#0pP=V8@n!4r8`9~^EeKJ4;$v?0VaHF0D{{x zA|mgyAenLyQD97`u63T0EomOV%1(u$0C_2DSb;oCMTURswKDthB~nsP&J<2z;qC$* zY@cd6Uc;2q3%7g@tEzqCQzWI|$Wr=NQ%b)e6%1rRrau9R{khllP+~0=Zd&#u*Fb=C zr!<}vVR#ZULrDW7G~^IO8ieoGm!a1x1A0 zp<5R?uOgy)8T2-!8M$f#K+eM%KpQ_2E7L!Zg*lm|TP1U_v)w4BIvCp_$)Baj8 z?bjOZx;s5@ny%Pjns0Cs+3~tjoED!g#!eVRnL?2*4Nr`eCo1E~SKv?}Ug<=aFpc9i zOdU7e^rRSy02>6XG$cS}K#(B_gyWc+K@u_Qo47WS_VoYDK#xYC#yf zwYaeZV9y8J@M=49C*aT1PNPAkhvh{gWRb)hP?Q6zUV&fTazdx+#%>s4qjC|<-~y4S z-Ec!HVw-PAZKu)L5fNN_=BO)VAPsRqTspD>9af4WR}lrFD4utV>qU_**RvvDch{VD zBZjnI_+bEAQM2Kq$PGi6Fc|`8gBzAg6Zn7GL18qPmpy`+uAz(+MQ%hCRMFvl(1KhZ zr=i+TfZ4`H{0#a|h!Zf1lW;(qF&Zt3+^8ssIbYCyUhbWT0GLOk+wr2vjjK6012IJ&>m!aoR4NaZkBxVk z1_(fE(#;03OPq8>bh42bN!z79h-=1+fL-grwjLJYSlc1=)I>pD+t3Asc$E~PIyJT< zj+CPTuEg&&DKMw%qC6n;BY=2d#CDfU<;m zDKDDW-lKR)Ircbp)oHdGfP%A5%N!L3gpw@@DYDI-0+9l|6s!CL#?LG}Ojc#U{Zx$A z^#B#uwU(PAJF~<7fEHx9a$uK>3_kwXVygXPCtVhMz%rK0np-U}3Q5Rdh4vX`@`HX6 z(;p~Sq2d!{r&91$T4z$B=zJ>W!h-UafYo~zToByq36RhRt~HW|t{h+!x_+?(ynb{^ z3Lm{+08(?s?o+Bb-Q$Q%T`+r;uXXe%A9N9~n!<^(%98TB-_f*wQ~{x&khBBgPIxY3_m83SDeqSSKJQH|9=)vb2!_$0s?e)AmK1bVG7{DNg;}T?b7)io z){7d&l&W%)IxX68L&e3GpfOEwt7*L9HmzCe94=m1psB_q?{=pqd^%x(Q0s(YUZ@G} zS>Ph=zz#Ucm8h4_jwA!)Qv zL~PDH7#5nH851RZ_KA!JWUPy8!3noAR$xy+uc!mz1c17%O4{_ZJaWB=ib7^EkcT(a zgd6C04512gi;6~At?o)W%VOIiYA2jGGtgv{y9BhdlBS>;x~1;qTH-%(;?VJ;$5Nq# zdZ9qHXNqvf)wg=v)Xm{g{YImUi*0Z+s#9~yn}xkZZ5LUyzY zHFi9K4Kxr{9S_Xm!ExJJcRP_$FEj2+oNJA*V(^3^+QKq z$={HaNju-1Bn=8z)asniPf_Ygzpm+mD@s0}Yt$1XOle^nA8N3$s?y%Q^G;2Ws^DV7 zbABzc83XiBYp!h`MO797NK8x(;%irj{JG7d7)r$gz{kOa+>+sWgk729vj0%fzAJQv zBi4hUE>?q`!(w1y*`L0vDH=}OrxRu1Lvn2l&ljU2a%+KKH;YH(MY{s7*R{2w5ezVv z2HegIZ^~UroF(87wVk&=4nbcuZGd!m8j^@Ot;cWdh-G6Umi1!ma@gFKDT>KtupYM} z`}M(yp0jYcuv-CYJr(FC*Fwt)V-G?!-~k%@q2Q&br~4V=Ca($rV)-Zn2__MN92B9u z){elX1_4}yB3D>)K_)Y?_sfC>J4_TN?B^vV7Yy!joO69QbQ(*6QP&}bnT@AwL0EI? z72{X>VV+|)9S;^=tJ(x{^6rp4!ynd4eLtj1z1h z<5sUs($D6g1qZgGH~0lF%LOYuBdIewN23o)@k~hK?r5tW5;Vm7=YH| zGz%vg5H#bvoSlI?oMUfOmx^)PanN*PuO=7Soyd-D_?UN7kF+guq%U-^NH0h?uU1~@Wd64%lC_|EphhZ?CGWH zx!FbdqrYFTHK?tLikms|M%ryaXyw z3LJS>CFQ5ZjUWWqLB48Ut8VTy-HYNj_Vc zi|%(rtQuqdI={Jou?03|+=h)B+=>96j9?K%3X&>AwB?2ooVTSEzev=*wKX@S$y=pB zFwG&q2%sif?O0sOf%!Kb87mtWy2y?dE5&k_{yUOg5u#sk;Y5`6`vEXqEZYE3a;P<& zjzA&^x#fmsm32qyF=$^Lw?+jOn$9BuUDww1`~X9zt-yEvn5(2XnhYva z-G#%zwRi@a&R{EvfqG@jg)}W~OM!h`58|@8G=Vo6<=};EF{{iia3XT}MpYEbWco|X z0A7}EJdKC2zQkp~09Hw0YXy(q3o!@Dc#ZqO!d{oqlz`SNiDva6t|&|qhKVYpfCI;; za+q=q6}U%19$f?5klvMeAV9*mvLeUDMo>OSLxWnr=(k`~N-SqX=ycF*!DbwojJwQU zuqIZ6ctcK~WcNGz$eGA>P9jjE3|>XIhZQavB9R3{2Jn}EOD%`7e7c?+E>f*+wp$S@ zavCIrjzVV#Fob9p7XF$KqR4~$SXIU?ZVb}4Al{!0uMXnY29!Z`ug0+16yWNl4M4dW zr8nUQ(5l02KD9MPwHrL2^GNi|YTspo#(|A_;{$LpL;wwqOqxjKXoTQeu2>7zeoZbB zW*^cHn7?c_~NoZjecqZLL7*@c*Bu>q`NdGAiIqIMAm*2UPNLLA#zDBA`cXlv0^l$ z4HV2?+=)ci0A8d=1k+k1@HS**dFytAFsh}z4eKxxk1=HK>A3MHfdcm!@apdu^KQ5n zgiS%`Iv7R7nYaZUPP80hEv83ZC{RF?h2|(Yfixf`vZQ<(ln+3nrExWol;hO$)d(`* z>VY2@T)!6XwBqWHE3fO*>_+sqZobua_b%97J8E)lRYfP>s7NBmtY8ZRi}1YBQ`eN? zIiw{I#OVhU1~25MWI$99YQhi&l#gZ>7d%dpLu#^I3m_)Z+B&1BY3mn@cyLM^o8!WZ zh3~p`I8zEM-@V#ucr`DEv=%IC1=r`op;I4XND>dbZ$_Tj5lf%SjW)1wf;KoOu#dqO z>k6b3uZR<3T!&C`^zzPu?2sC6vxSzR8%8eG{5Pgdu5X*AAV9-+7j(dhHiGSf#(fX4 zFf1E(cXm|>qa2XckabsZysM`vN)CO)tGj!mEG1bA2eD*Q_(7rsB)dv&rKOi-;Eq9p zlLrFB5e+Yn8|Yzk>J`fnuz+aC4U%wT*XILT92KnaHNRS3UBY`F=+bQ3G9*a6mR79L zSNh7p+uThAMAWX;+$f^@m>`lcg$C?Uw9u%9J@UmJwQf^pn)BmXZdx6}A#B+Ar8J!S zAazj>K=W{}5bbCbdsg+04WhQI>PADs`1;X#xN^2ouk znzu6!$+3t7k;gY6Au@EMh&=|#C*)cj+J%53L-ZG9{2|9XaqQGKV9!3%j>K`)hHzsX z=PrQsck2Kenj0>Kz<>haigDgWXU!E^r{47ZSJZ>1S{***dPwXm7GlzjMIUeu{e2lYU!Z~0k@9fPO9VY zK#X~@-s@<%jYi*#c;Zf zk41p0Z#Yq0h%np*CMjIW88o&$f4xxmBXVN)Y~%TbRv4@U<3l#6<(tspWAUO+A9Yi_+=Gsl$20vC|Ymj}Wq7=W91Cb{0d)C6T@m zyRSmI1ZnLONpZQ!+tqesFB&Qt{E_R&gO~vcfh*4!S4{rCBDq`flU(#B!-x~sqA(X8 zGMkCs?tCj*7EDEE6dKjxYJ!3=a~*HkV#dUyQ_33apJz-a986e%x3z|SQf&l$* zv`Z6f$)W=fMw&@%4VRA-QH&L6FF#y+RqALHuZnM6D~R7x*Ovz5lpACNo2f4n~#gJi#z1B$O$I= zCURY0l|or(5<&*Xkn3-GVc_Gb9j;)}4TLFX;TXF1+IV9VFi6Cia2Xi*!PW{;yr*=14cxW zPfR)PhPeF%g2((FZbh0TM<7LtLe2+>PrbCsthk@T&tOd2RAq^-IL46Fgg~dHj_?8W zVloK{DLnDvMZyu=LAdGQHHEmCVL2E9r((H+OFC%O-B5;vNPdAVCArWI0rrCs1Lg{r zB-ElRvZW&a&k%Q=JRwCt(wSjOUf`Tz@azm+z~jRlf-CkJ-YW-V4s%gqFUH*N$FcEY=r(C#giPGIf-U#k01OUt`zIB-v0#d#M&?Ll? z7*2OU7;!S;pixa00EA8iL<(Wt3RQ?Gb8uxIGc2WxcgEfFYOW}VE2`u(=FDLPk1smfwqU5)oHIN-s}MSSHkABTbPW{6k78n4bpvyc(A z6r5s1C*`6EkNZS@y$Eq*2r{R2jK+!rxCl{YnTf0V1a_20ixb9^xPpzH3>YfBGarL> zvdd!zLd5C{z<$g@M_@I{7_1+(+mPbD_w2{1fJ4vDp0U-bHVJvvEK)hSq>qJhdg4kp zXJwLx&ej`hIkin^-5sL$@PIn|XjQwd+=WSYj+1TDDXCD4;&eLsf|>GH+)Orc}L2GIUgO1I!U zL~+4zuAq0$ioGT@aBv0T zDA{{_-ME44kAS{wKqamnD8d#8XgyktiS$m&l-a;i#S%q}Ee0`ELab`N!2KyUr-y97 zO3;0hkA#Y#hHItH)y7aQNR>tgT*ug#eNIB4ls-!SHbwIlI5f&fP3hJcVpuqD8qkI? zxtU1cZoAu9mBn{suzlffcW=vso4)mYl4dY71C&2zx} zCD9$71;(!9ICAIvEPA>faZD_E%L9g;YFOFY*`tpZM6^$831@Ay=+(`|`LNEOV}*0I z)nmxl-o>w;VP;=1%>uWiQ&KRSx|W6m_tr8uV1+)|=9b(L!>uZ0Lk)^mx8}4X7tR52 z!1?JNT!((6P?@z{@s38^P$n$(5LS(dxyD^*T)-GW|3mFWI_#bjeb@e@O2$hPl#PfK zPspAJSW29wqt@ayZ4D*YB3Ep5*cnxe&^)cpytHOS#gaW zPSbUa0}edpn!$}3u_RA7%1%PQw9^owiwC>#02URHaO>u-fGUTI*>eHhQq{@1Af#kY zvC1aeKS8F~u7$~=$~^~VSOGc}lNAwSE7Vk*#;O_`n;WuN6ImQ4y`g{wby$?;OIT{F1yXbT znv1K4VyaY6h1awWtjZy3O)DjSigN0d_*(T5lJh8JLG{If5%5*n&2~gGc3Wkpzrc+_ zDZO!Hm4&pi)rbu+ja`NwA$?aJ)jr4nuKA;4 z3~5j)lUVxhX*_j3x}CTARCe0W$CB)kTN0OhhmfZ|W~8GrVEnsC^I$h0oGx z_ajvurASiVqT(Wn5~>R4(FoivH{8KH%|V7!G|=$H%+S}MSP!Hi##;_L$&YH5YW(9< zQcjBKwuwQzwP54`KMATPqy>)`oo)o}`uQM=-8zMMQbvjIC&mPP!)g)pn`;0^Y#<;J z2JP4lDPqTl7y2`($Z&Wn{h9Xa*SxT~4S8*{a6VUeQ=>u@K(eTzKphqQS=v@gODP*3 zs*^&BU_Pt2A=Czjd@GbJa_Zjsi}Pm+vr`W)6;92~Eftm~7wo}g&=Ec|jlRYLumr5--xoxpoAU3gwl-7V2gZ(*oiig@#Rq!7P7G0txnvT z7|8+cF};$9*k&f3W)(vfIeT%#M~V%zxs8V2qTYoG@{Uwy@JXW*b_Q&Z@=F>=l)=VY zwY~a?Ta#IBMUkCaSeRQ73q(2=Pm*Y2**qhYqY&xo55^NQjJfrCK3{Xao%s8icW;rU5IrQw2gL*|d&h+~IEPOV&6<(!bS zcoUcLJ5%lKHqC`h8#iHcToSd9rHYa$r8LqZ2giuF8D=M2mYy#h(G1|^3JVaJXV^pl zQ6u97R{W1Q^)R9aH&6kWO7yil?$sobHd`gto}yy~Xwwc$+bP99ORBi#>@Errtgw9= zU&qBV)eqoyqn6DkuMlG)ooa&}&-P+!S+gu@N;5@=N+~%H^81D-_-HgoW%E>@f!Ukd zP)$aG&JPw)?!Rtp5$Y;qsDTz3&QR4#iBygR@4FZts9ufnh8Nb+X&A(a6f7%~*<@su z<#cQxAGVGHCwPEY4H}K8@}&(+2&WwizJ%pZu_RNryE&)pqOyAI{;IP4Y>Vfb6?8%` z@5kJeCI8ZGJh~g)$iOq`rxtmS6lB{=k*k|wNOoi=g$_)m!`-doG<%TxCwoRm1~`b3 zV7SD|@6=H6V$gI|5MVnD{B?Ga$+xpj2`Co>PBQhw5#YL*)44IY7X_~*CY`ktVNC8n zhCpMtH7xC+PD7ejMdEd|31rZgR&`?BqMA%I&{~&?U=(w~j96KV3=52SZruuh$o;bk z9yp}FCAx%Dx|G+ImO05DnH3yV!`5*~^%Dh(W6}X2w5vhQYKn7I&yC|~C zRDtM2&q{coohltZzOVNj@+_O9&{u(g4tB5%X*Oz zM_#>0kMwnY;UFNPwRAb--viA~rYf&;KD##AQIF00yn$xau#vg~6z z$?o2=#U?#+4+_g(ov9Q_3bGaHh-_;xAc~xR9FM$cM5NNwcp@gFy)e0>&WWwHKMQ093V!f67M#QD_I{B4=1GI1u8+00~a`;)hR)@x)kxBd5D{j7H=^VDtM zc2g$P%w%pKcvU8I+h;ZpW!5v9!#CqiAZwY-;V&}bxS5PNaibhp@{|@FzU3jG-f*Cx zzZ)*Nt%g$rZ%{s(ifT^FJsX4z?)ns{cKP69*qHKbK^nQglES2+<`myd-kT z3GbvBz5+!ok-ikf>;_G-LMIq(&9>ll>w@d=Iu%$EuRpz;E+i|79Kxl96`LM3aN`i* zE+_cJpny8xRR#yfAFu4pbMKU^^#yXZPR}k*XqRQaJ_yz zuh*N*_4;hPJuKYBPq1{aysZCl7}elXlKY){fcGRQYmmi;upz;ubCm?XQgcGc6WoKs zYhrE{h$v12S@S}78*Xgp8a;&uj0d17qe$dy1ENwYjTb7V${1lHPN2Yf1^!zM+b5~E zDYWBi_mRSMP%7c-c(Hs8UfGD_Rx~j*6b4aILKvzCwV}1`0^mVN6q^u>BQFBP@Z7yB zg{SipSt*pL1{joyU4U~EI^07K;F1A)0P!R!ARF$8$JiZ7v;{vEB!GDQaly}2bNOsQ zhtolW$UtX4OR%_v5D8R}|SHHjqt_ zP*)(&^wB*-8j0B>xjbgOX}|7Xg^Gi9_iC{b#pG@A8){|2Iq11|EXr_QnNkL5xt(@H zxTD5tM5KYV>km&n)Vcb=CN-BD-h<@2Ik;3vw>s;_wT<)bbr)($v$4hRpKmuEANU4J zu*|mUEUbJuy|%RB`cs6426rJ?pAS8sN)*a>XWe+li8i?^E<@)Z$1H4!lox{9CjM*; z{;cQM&$tb*X@*c}nP4R{5bcr3mdcgkkyU_gt66rBJsVt8 z1`>{%GlEfF)h=b6Y`Umd@S@HJFjdZ8s20h<5&_G_t+9AmQO7-Hex8EJo#G9m)8d2} zHOUMg%a(u}!69t|X9fa2?4nEM3Nd9?GXg73vv!|{A2X)wx;odaWvJo0DZWJyxeP%$u7 zEHU_35}Uw6N`_*4#U#X+^qRWx$LKDbmG`Rd#UArch!=r&@`P~xINV_#fI%qK&2Tx6 zt|Jo6y^=H1jU`+A?>hA;BS;!R16f`QNkXgyH9tTFk<|?!mTS9n+&-wH7Ft2fZOR=Q zWdQ(Q>GBEMDTJnhGm^*YycRv=FM@q!ESCYgbx-{ypu#DnSitr0F!;zlC>*b|9v zrsucDc6$yIqYY(k*<`^*PZ*wYVkhl)Y5wG-LBv0>-6zDZQdUX`gq|v6S<2!IJxW+f z`EF7+t<&x@cCTfWB4t6ZfS1CTEh`R%+m?5gw~V=*HTvu+brol;FNvf3-KmQ!2p^ld z5U{KyD;OI5I#a?F+lhhOvFE+|J;U|C+&b#AOCp!FhLyR4LtPQ&Qe}j4o=@#MS-YVK zAthWNT9x<^?C($|*ysM$2v0tVI3McFUGRL@&?8Dr@QPNZraLM<2=!6>2~D(0fLMHEzl?q5u~Y4!KSD_5(Pd;XWtbog_GHuR}ZrT zhJ3bj&ZM|b6Z|X`WVbK?Yp_ZE2|eO`OJ&TR>xIU;p(DSNr5_pWio#NYNCaLjvJYP> z6^^YuRvsLFVtKjP%OCk6`BvqLftN4mI%usXcos4ule3Jx$J%51%z_v;(=%1m#fB4Y zz`T(8FA+v3z!(k>2m~y7MmcJTLB}+Y2YZL92i#CDdo9gYvYV2IvqGyyey}a#t>#WP z%5&dz0V?|`@}X%h)29mq;#dHw9ALO2fa&2YI=3Q+U9W%vdr9Q9e=PF!exAPpNRMuyQvDHfF8IDuYj?i>w19uPxVJk>^#1 ztLPerZsy#`sl^%YQ1MgX7m)YOG(BXxP(vtb=_vcM7J6V0R<$X}p>O&{#yt|T zDq2jEvo7t@C8W>f2suW@5LK26+fz32+tRG>K|(3sm3D_zArb~E5h&%@q2YFS#nAVG zs09c~H87OOk||!i40`Me5@{n*1qswG?mBIkarD|FddN+ zcqoRcg5NE&7}}7fa;If(FWarLe}#qHwbQ40>FzET6~&* zLVEVBZ3aPU&;@B#ZeaDhSI?7mjKS|qo5evlA)C}@fLMn%>)eKxpYD1NPAv3dtr*4) zec1GyiDBdvQcIu8i-y=ksdN zBjc5k;qmd2qXqnSbZqzl&=eKMOXEjNM~9D=3;69=Wpw{EJ+G)z9xELyjUOEytrY0% zv5{l@C)9aGs4`?pRgR4u9VzhF@saYrX*aECcVbnPu9ixra;a1vsg%nVXJn*u@ul}bm)hR4>%N5)6TD`Re@K0I=?R5@BIl}6y*k(2w!K+*d|D26L1Ps9g+ zp{RT!tc&s(pi(&qE{eJ*;*%%Bny8cxfXt}mWf;)W{R3E>TDX5|;qv^&QxZ@xI=z0n zQ64%sc6GHe_Q-fN@63<9a`vHxDfgkd=Br-$$i1u0ySGZK#~!&@-S-5XzA!yCyJU2C zX$XrAuQ@e$Xxj_j^|lk%F&<$Y0Nq|MD6zgGT6hggVbk4Nfdd7ZjYCq)ywKD#NoQ80w)DN@YSSuzLWLNp>)0TTY=4LX7KW*p^u=nt`@W_ds@=)At4JmXB zPP0BXQjDFjxc(?rbAho|x7>I`4@$WH7J56n9cZs*+-!mRK6nmRJrrRO#D%&Sa*z5! zBUpzk1gbl3B%+OGA@Uw|t0Oaf+&SmRi(JIn9+lQCF53NC7s%VFeYPMVA^rjmEtr+D(Z6kz<$%=XecQ3>n z_5|{4@Je4F;Z!cldt6}t^mJzXG#k?+;0c^GInl~7EtiVNipPqTp~{F@cVc(j*^$4M zWj__w&uZw^*Ii6S2ao{G>P$YD-K~beRVF(824%F@>-;yrsE42sl{gF+#bgwD>pq+d zfXk&36X?7p$ATzHhnvS$hHM*R{Av`|;D;!zVFtV#MY7)#^y}btEmaL(c05`X^FbIxp2ap^4tDX(ycii7 z7B4pt$WJzX_fgMz;GDSc;`C|J^qO8R+!@#vqdF|k7%Du(K`m%h+w~UlQxL{g=z(zp z9)lO-Kw|DH+$-=aG>EEbnF`M@XcD@RgsoU(EIE?%OH1>M;#hJp54fx1;`F{yk81|% z2ylP60}8ufPW4qm)Ts-=LFN^UrWS$6#8*-twmoIZKQMLb^2Noe1y)sfCc+S8d$ygQ zTwLU~j|M>#{y%It+(#en70BY$>4mAK%lA$_#9$U2|4h(abZem-4_6jSE=`P#3`K2U_u>%yasRDzRSBqYqRRqqa z0-Ai_9N_{dZvA!7zY2GBLFvRS9(T;VL}|@0GqfhVsOv%Dbi;G~*tAdXy6H69C%;@c zjehZuvHE;gy83*c($g9o=+W=Jg@x{=3H!q}Iqe@ORO}9@L&`w$`F- zU;hyP1-u3Ot5y7&9u}I;RWdiqrP7Ru8bMqQou(uj>Pt9K<-0Ll%RZ6q6Iy2uCDj-) z5-P1i4eA>;gSuOdHi9sQb}g{EK>DNYr8Lm7O0hh4v{){cl4^+H^;vxqO7(hb`(aBx zn}A8JTSTwn99qC>KtoBb%j43*Jq->|1fWKDt8)iM$X(0!VU0~3I2ssabT)&wA4l2} zEUX7$p{{vWV?#iw7WF!)(|v&f1y>z%S}pDZ5mN%YwkG@R>+A2$ma`0Jir$oprDC~I zDh-cVCN%J190Yrtdk*RH?e!tAxej#M9W3hXel!BJY{2i{K+X~@6GKL%xdmA?RqIil zg2tF09b^r}F1ZIOY+(s!EkB6&x_Siix#bu@kyA?o!-~}I1WR#ZFYN|^c%k010@)2T zbOflHGfoqZGTWp}zd;z1-6=yfY1)q55QPMM>AK7-Vm%Dnt?G8@#ct=y6fGx;wu7)< zZMo5=6ON9WU9d3-+i%m94y+RReRO2)KO%x zKdr@97kN5fDVE1!9oja%-8`W-IJTom-wnb{;Cpcp7A7A!S9##vij^vc z=_U-Y7i{)~Wv$boWerKoCuuQOw%2(`a4c7hV})2luY-sfYP!u;H%uF$21q<5!5K*K z?!HM`-71NO(GGV7QW~RM0YVKJ#Pzqbh`+TF?K^Q=%b*<_URhRQtRYCFB&Azvqhw)G zRZzJN4VPq7DfiJPNo$VF7L6!y?+c4mngye^jFBH8T*~^fg@Tp{Vjgyq)Dlxi{_npLu3_vG{)d1N-Ld)(4H_%42+f*#*39w;SBnc968M%?^A%! zMDZCf6j?GF!K}ik1o2|nsHPvY$G!-kqM*M9j`yW~P&a*jUg{<@+F7{&%%bNzCXN5w zNuu#j?oMNfa&l|XMqifi7u9R{^!20bN&HzTh#7A)43@l2RZc?WWk_m5Y*hyO`URAw zD3rzu!zEFvOq7mJlq-GLh(uq%C_&X0xUjJmx>(a9@?tlldX!XuNnOq^3zi$X$s`xF z{S4kF6c4CZ{b0p7)(NM0agm-5{Mhk)HxvvFO1T(U%E8S`p@LEre7iJUDu;F9TnK=J zg(Q!HXD>$1x;vqkC>3Wzf0M5#)@CdO&a-__z_2Ib@@=}}T|{vZI_s`tP-lDn3^>gs zcd~tmJ+WsyT0I-Ot|$QlaEghJY{;K4p?_^`e^59ct?fc9@cfvZiR_A43tcxM%G6P3 z3GSpQ(J5y-BL?Y*3ODdcfDBC7eD)%q!@an8Y63&+ltqzOu!cmrG;(xwd<@T9i8G-#ykWB#9cdgL9`lu->?ZD1b&$Qo9>RdG!(mG6E4vj@_hI~W{3@! zR^;1w?jD|1MY&SO(kArR(PIWh;X^Y9H4vP*P!GXK2hw8ftq|=*vD>TyvZCRvx{WG4 z<4#mb`{Bs=<@)mkeP~GOoWXB&;Sc!88RjYCd7v71gQAVBgIYE#fDKcc5PMngB!JEa zz;L&4gzFt1HbhNPiFR ziEoAO)|uHwk;S%pX65gflIAL;VVj1ovQ-&fv{x~wB?|%L`Gu+bFQ1uR%&t(#I7J+g z)L{W-2_;MZm@ix_R*Oq>3zO%j_CyM(u+(hTL6swcaLt*Rz&%OCFvglo(2*frE7C~H zrJ4CN(+k}Z2hQ%v$uhW)-M#~~toso*Q_68D+S?yvMuCQWVtX8fivc9X_Ea{!@}~?i zM$I2ifKgEtZb9DZFOn}c0fK03oCSiUGUz! z38C7cMpC+PPlhrENC8v2wiP+Eia?3S%+9qHLhq$uLX8wM2X-)-rby3TfS6mO=xmmc z6~{-5mC{l4H<=N8^;Bi!W4f_&_`vy2V<+2JweeSt58|%cpmfY?SC(d{({7uBMhXzq zX*Jt35jQuYKn3#q=VlE1rxspc*Ih0lA6#vxg3ZO;OXkIOwn>$WW8T)VuM5roFZ*R>(N16yXp$ z#L=PncIZTL*sjIx&^1yqXvHWSMFy{!O;m^o!>+Vw%cY^=lFkx=cr35xV~~fTmNCGT z5hm*`Xs) zPm>6#47KY1(&@k`iZ-0ktJP^A}6itZ@B0`iL^Y#GIdUNk7J&iqZ1XN=Z14MzHPHRSO7AmWrjJl4!YM z`G-?w#SC()?Nyt<%6M zZ1$gNod!-N0UspQIt`%820loxbqc_zHL*9PziZ0uC3se9uep=ndBP(Ffqk3_NNcU= zzvrQVl-AF5W_ub6iottLZBGND*m^&??P-7%IeSiSPlM8t-QL$PMvLOi>|)R3~a9ETS3hQ5U~t0PhTd@rT?%kw zNASptUGz!{;M-z|h9ZQJN}~2@tX6z|i1BVci06YyT;gh8&@@}5cn<-Cu#Av(=;3ib z$8D&Z7A>kRH(W8Gx_;e+iZCQt@H#K4iZ1jf6$SGe92=y?mI_3`mM^)55S49ueh>;+ z_I|sm(8T^qLIO7si`r{z-c>V3Nf1s{MTNIlsB`(ExqV6DaHb0c3`{sUS5=X9!sghB zH4c0;Z|;lYE3k3Ny}%)RI#iM!pwXdgZh+hqV6Wg_EwWdSj_m;sPPy~|5C>KjSp|(s zv}P~*QM(0xiCee$bVA^eEHbvkhTeT%_u`HAYOxkHhhnd}8b&(t&)5?m3f+e5L~bLgX*`z3m`~j;GM!FO=r`E1ZuYy z2jNaiW0+pNGn%f_07gb;rZoZOvo8@OW0wsBSJ)v8C9#i+@ev$q=(>xvb&30tvX+k= zYg+VO4%TRzE;ite!bZJbh+0k!C5_%hLLx{q;I5Mm4`Tiudm-i?s6?^bE+~;mj>iOk zLR7{o<&hC%LqTnTJ}|j3J3V`DLR<*8aidBg?s6m41OuC)l@Z(ty_YvaA^ro*8w=pH zSX4&G?mbn+_%F^m2Cx=gcS2q3&>QRadp<7t8l;IAfHXu>;8_IBD`?ty&A^^s1CCMS z#Jb>~zdj*yu#^fXsTh@HVB*nak}bZf&Pl14aWI(r9lFHDg&JfcL!=-v;T*SzTLXmC zz*`;2UWxcPzlne$ui^9o@Lt0Jt{ zfxyc%ZgaP_OJ)Y@LDVd=$q7*&8y_F9l*f!U#B*z{AOc{n9_Z0dBam4HMNuA`Id!)P zT_Rf@FR@}#XA%W6mwO}&jJAhpI3%A$LBlQ7+s#%nz8WVJ!~hO1-Ul2HZEGm3tgKYX zH9)NJ?1|cS8^v8WHD^Zj(Dfm|h4Xd|&Y&)2das^tK@IAtqwpn8X`!34Q6Col1G}HnZiPmyq6K-2hqY9Y}gp=-_bDG5L z)PqX`F2`Mzc~1Hr{SB|_5mC#n!9^tU2%v~J!l1prf%lcE^jt<5Q#z8p3d(yDj(}8z zhKnoMcoW1QIEd-)&Cw$Mue)Ed(Zko@gjn1NwjsvMQ%872T@f+QUvckbA2~- z;vjtB#WE4``7-Tud%fapuM5iGH**oEhtJ{Bv1hHE!%X>~=A6Wrq#qr-!vX|piNEw^ zGBtA&9LX%%^(tTUe%KTUe39J(J}v79ScZq7sh1xJ!c9s!!Awp4GCcr|u3o`Qlfb>9 zYY8M0r|`_N$Y<$GA?20(;n?@g(nXOiSB{o+C-}R_L(X(*?GvFFVcx{v%IlPCal7>`- zpnw5t29JCtsfc!R)E)4GGN<+;{(`&iMNn#1r~2|Qg>sS32o=3Rj~ngE1kOZwG3;VI;ajM?TSLTK+K*EX9I}MuOT|VC7fpHm2}qx$7-kUb_a?X3 z;UWOn7ukuCk1%bdU$MHWvk;W>W&JNARmWM}#rbU1Ll193}*k^75Xtl)yu^vfe9o)MG|NK0$p zG!a$Jg$Xq&Hc^ORYGlS!B$v(=ut;T3FiJcPVpkGgKZJl#J>bzXlgwW-fdLQd!EyeH z{iHBxB7!Oa`B51GVX%9u)jo10@g!Lm-c@$6rN99KX*WRZvk2v#=_s_YIGQ@+SJNro8`Q1?;pW}=kwfuI>cK`QmVN03ix)`f8n(xDn0qKPz1?GYVa*N>xW_R_S>np^3cr;M9>F+qMm z88>}g#TM?5Rd!S#m~ZljnWc+;uzOWaxSxIVp?k3i4Kq|}Y;I}a^V5)=B)1BBERgTC_sG&NbEZyNf!PBqs0rU5s# zr`$IU7+Jf+eba!6-skO`9_1ECPxkd)ns?oBrH`%{CWZ<2QDLlak}{O0=YeOWe_ZOD z;#?=-8)cUD&8wuPdu7fN5($`x@~Q}fedSek2)tcI7TMpJSO$gqx1^*}5hH1#TT%-% z{o(a=iPbYuSl3X^A$>7J*@iqyA+UoDfi$2I5Ljs=47!Q8DWiPPrn?i79M+@jOcLK? zY&`*laVa=>0s=C>PS4Groj%9gtLXzf-hCSx$gMzG1ww(N$Oq`LwUs<(@MDrL>BE?r zJ0o|k`AB|3NA6}`qX9!IDcVE>CT_NN(~SwQ8{banx;;QE9g@)WX&rQMlTHFeFnkUK zcrtY?ioc|`gYY=#=%@F$UlMBfu*g@ZqASbA%)43|`7RApNNN|fqq{3`#L5ST`%*Cz z!YFg6-$36r9l1nB6b(`B*cf=4AkwTk)8EV+69puf5dcCicEuH#YTK*F8xyn_WK+?k0N_4oI6e5L;hw6kAbcQ0HG?FQK_o#M zaS=s5fs$KF_OGgj7XB=QFxa;&zJgEKxTGg&m*LO4U%BbD<3@v>+fKOf)nY+;gL`4! zrr#Ji4_b|v`b5n`!$f&0M~8o?L8$@Bv8Zv7IgaQXn0F$6ywfo-`DM3_A3}TuLNLaT zOR}O=j$?_CWRNT=bsSo14;h$8I;3WGmP8p8hM4G=qAXn?9HgpL=b#Q)Rf+>tfEz78 zE&#)2rO1E7!Q-UutFDweR~&(ae*SM^se=@j;)zOBmNH2Uw8eG(|EtncOqYY!mNLl7 z#ijbMdvPhFk8ahaK-Ad59+VbTxfJv@6r6fSs!JKj?ytO*DU$U577PO=2j_&cE!$nR z!f~djvAonvd3WpFdD!9(;7&F|30<5o>XX}QUo5xP;%4hI?!cK_YG3$6+EV+-ZRc@I z?Y+FE)}>nX?FtBNr@iHNLnEbAigqHe*BPctd2FOC`gng_?!`lq%K3%42OkoPQ%e`; zcioWZ4N@$ACjwvW1nm&2Ex4iYG$5Sf)m)KR#Yu;U2dJ6`ZhGi#)Ur@z)U zU)`p43W<|X<5)2-Q;k)Bs}#ke8>gSZqDm=k-}r zadkQMnv5=O?m1mu&K~RbaAq1hEtk5so|$|Q+E==vv{;76U7uC}`tVqn?$1Nxl+azb z*8y5eK(E{D!_ax!r48L0j36yiZe{4wKpzLHF7NA1q5&^&POv`j1Fygp#;KxCm$Z>(v1#_K!-}VS(t`NyH0UXgAOKo(=gF0I@;|e7=slv z?e-!JM@Le-y*0{x9<|=ki@Ubb4C>bB7eW#_`MH$;NL%VLniZJW~OpWCi6p?%&nQH zGJTn+0OIYL+u)zROy>6IKP!{D{g&s#pU=x=Zu`O)zVL-ZnWt_C9B%*88{y|enatr^ zVz=SD@fT;Fl3(vh!adX#F2Fkk@Lr(c-MALF02ustAqlBB3~vC4^BUsz_BKM?-rk<+ z9U|a%(+!!-Z9jHfCZmBx(FOvGqK(T*U^LL1fi$)r& z@pBi>G}kUv;*F~d?y=3%@JwrQvU(E~{0$=qkSIWn!&13izA=;GtK$x3GG)M}^re8y zt$=M9Ihjo6#zTPap+lJ;Soq#t_A^Tphl{cE(kDOq+wZvg(!#TA+yCXOzvW|J@zdY% zlA8~|;f-&9_^bZ$^&j};4==y)#K)^3LyDI{xmj z{LZyo4*idx`J3l{a_BYR^=%g~{NUwx-?RP4t@4L%`<}o4%@4ipk*|HvAHDbJ8-M%3 z_uuy5`@ZX)-}1rtH@!bPGXDL4_X_dafj6K3wcq;AZ+hN;{-*80ula}fzTt@*kN*DO zedF_ov;X}=gEO~0CH#Be9e(;?JjG39*S?3euQm%jdWKmYH(?NdMahVp|?yyLBD6LYhgm>bNA8EZ_|#ugXXMqhRG z>e}7s?mo3TyFGOG-Dmun2T#x6zrA&}HaWSrwlnWIBRDZHz`CTDSDnpQD3`HZg4wxU zJ=uGPzW3|@8`v3Uf55Dl>zxfI0Km5bT-f;V=M?dlWA362*Pk-w_ zKKwfi@BW6bIx${;>N}sc@ioQo`J10>zUlOhAN|CSeDn54KJy2D-%tHq>FYAj`q2kI z{DF7f-1^jer-y&*;n#o9M+zVRog1J1wLgB-Z9n*%m3RJC>z{vUe%oC>_Tb01-t>#7 zwjM4NZv3^sKmO<6{|EV>yYm-!J{I&}-2UJrw{AV}_x|GNU;gHwxi|OazwzTYA9*}` zc=L}x`3pC^{mILJ`ilSg*k@+n@gB z<3Cn7^}XjG|LS-B=I#IZ@=xCIoUeE`FEbrd`XbgPe+7ytlfnP~)lD;%XJs;9M{5qW z)s2}9$N*ezAP;YZNzHr_th+nlA6Skz_GL09s1KXEHa_$VpZb-|iJM>Y6*um@{};oT z9Q~IU-9Gun{dd&g_pS3E|Hz%gg}?pOE8p?)>0kTVmy{NYzvq6*Wv}}B-+A=!*Z%3g zzk7dsQlI{NkRdf*K=e*WtFj(zH=WO5 z?zSKJ%kR7O)c3#oqj%>YddcUeH$J=e@1FNFpMQ4k^FML=XJ&7H;pKZ@{K*?`>aQ=v z1BcFk)qj0q<;gev#LNEjfk$3&!-wDO6kqqPFZ}h)ufF)!SO4tvH~(rCM4I#FCm(u5`}zO*lG8VT;bYNLcii}0Pk!X?&%Wtr|MBOyCcU4keE1jVPu%juAN<`v z`@sME`5#=Led7o2Tz}_p|MlmueEUaU`sDHYfBLa+s`Y>HYg<=eAAikX{^{eNe*gdX z$B%#gC+D`0){gu?KX+kd@T+8^Z3e-E=~t|_dQqM^v@@}C*RYz^Wx8)fA;VF zw_p2py6_2K{g=@8(#W@BQHLM=wv0e?EKc1HbgT*IfDfi%)#^SMRRe`ooWYvbOZ_KShuH zY2T5_OeXWX%qNG-XWGBJ{^9?{-n&3Yl3fLYA*nu+>f8U1?e14u-L2}jQkkh=NnuyJ zQ&LKmUHWxqs;aA-b`lx!lo?%-5m^zDQmJWdm;qyUX2F0lFazc@He+TmJ39*oe>lb; zFxcyv^)QS%*sx%h!ved2nStdqr)$r>@4bi@pOjSUY7D#1?xW0#c>j0refQpXKYwxf zH{MTw^evA~>Az7J{mK`=`k|kD?=$CL{LA-zPx1U0e(L*w^LIae*WVP5{NWc*ePQ$e zIRD&B+kHR%=96R7@A>%4t^fS!OaFcTKVJOZw{8E8^O48@<+ESNKlqg&`oVwReaDZI zpLoOSrxq$t&F6lr^XNkhe>VBc@A<{w|H+Sj*V+F%y?*EK_y53Oe&T=l*x%qFzC2re z@Mor*KlRY>PJHRR&i%!2zm@)4^YVZD$*s4ZCSQ2dH+|&KzWgg^Dzm@+=WjdrSAY3) zo$veWw|&nyeYN<5cQ@YuIc@I8kN;)qsheNDK0f=-&#qpnU%lqf-1m;tzm@yqpBV4> z{Xc%-#*aMk-T&^_zPxyTbK>3i{Fm=~*SG%fzw_}gJ~LFUYU@AyjH5Yqx-@{Fa^1eC}I+<-30S>dota`?|_M|E1PP|DVtO$oPN!{PhpEzUlMN z-gw*hzWpmd{qJ7>#CMpZKYaXOoE)9{)~D8A{PZ_G*7wm|;oU#*;CA`Kl$+Il^4!G_w)buO-Ggg^T^Nt22tPk9sh~E_uPrIAO6%AF23V|EBed7 z{ov@GfALE{s{ia)%0IbP{^Ym5AI4z(+;29EFXjCo{vSW_Gl#z6^W?)91|M-g_n&`r z@O@u+Vf%9*e))gK^tM7a3sc-xDpZSHu*XAd` zdSzka><5Q0-}l#(=C4-PzW)o{|?ko{2ovg1-1@8 zKPj>&no;G5CXA z%PIJESb1fr|BiL#jB*q-G+0|kigD`yhz!?+Ifai_F@2-@!t+8>Cu zKb2^o#>NkALmzM+1nu`l$3GCXe<<4i(Wz$ZrL3m!K8Zf;Af<5}{2|de$}g$y+wu1A zP*%nv88B=PENdUInA_XiXfYs8y$|tSgYOSvg`4jLhV$k-58=)qxy%Z@tSHLsm771- zr;I3VP0zNy=DBUtZa6m{SJAcLsreaoYEC^rtuD-{^YiN5A}kg^IuTf45n&ULDhdt- z@DD)m7;fIpzN5;`!IR1>$}#2U;43$Wl-DUYhx$${H;4Lo@<`j}I$1IadnRZR$g`X}DZ}gn?QA6rb3giqc=;zwc6%ewF|JF-1|Pl$G&*1;DgV zQQp}PqwOD1l>QUSD=19D>fNCz{U~)T7grJX3cOMuKyyD-R1~=abchwM@Cs_8LLZJw zt^^~4N`q(_YEvJ(0<@8)29Bf+>VkBTQ55AYpUHVeQ6A&J%lLd{T!_K|_?bRM8F~x^ z5*Qjb{8+5W`94J%e7q0$3ula_07jsD-ETWa*P<6W28fPfb78sR1K1&+!$wc==dj@q z^4}oQi}GLM1BK=9Q|?iKwLyb2cb*?7?U=1K5n| z>Jz+3zw+t36y=xiV*H%w5%{{(Cjkgv89IzrJhStlvNA3Tz>6c;U#BCF=?Pd=<&{1l zW>DrRmT`Tr1IuCi9f4(6_zJ-H6=h}oxB~DujIeV^Q9zFCgVh;Sl)fQF={v=MxDRFU zlZrC4?w4w|hz7r_m-SFog_yb!D`!Ixy-tE|(w&?RT?-RaHBW5e0qkx@4^t;|Q z^=lsWp*-xE!OO$9p{$IXit>SeWti0*9DeAbGvasq+W)+E4w3g2C=Kt1DO0T|o9y4u zw8ZH8-_@s_8N`r)oFmHi6&79Vbp9M>2$MO%W(1Qy&Y62CayQJDA7CGZ2Ydm}@e>BVX8Cj2 zl%IzN*yboF`EwZjuk$vMhCxA2%f5$~fjNDW_XR_FFE0Zk$oqI**yvC2_F_h&K#$MxHfIz?A$$z8FgE@iPN6^G@cAZ1QNEeC1I*Wd|3c-1x&YcTS7gv|o>cxeX@@l=bQYp{}k)#6G?uJ>lCzq|P|CRXS8Vr6Z$R$5)CZ&V_qeL|`|*l|3+=~B=& zo;k9i6PC{qBcY&h6YXq4Z!lG_Ajr|y{Vu!4J{3?Z_F*1=i_SxXQ6=K z_~?hjRJ!s~O-fY;%l4*eoBj@TacXXD;cC5Fey&tsF0YhveFw#M%}TY>hdBjp9AVH6 z{RLGcV9RG1Vhz-~gHMj%pmR6~8n_b?_73Db#*~%u&ne28V>#V1Xs%5SQ~Rs}VxjWN znLC5Ux144c-#y98-=Evk+?-`La$@7JTR8xfpz=MD%A(X8u-DgfZfE^rWQE!7%MnnE z!==N+{OuZhJNOI7kelKKwrS(EqI_ULc}7_oA3(kZ7u>ZHf<2C)3HRfj1J~n0zC87Tm+EDv`%MO*L>P^+#MD2Wg1=GH@8fGXV{>dTG#Tk zx=Rge`=(~08+6;WRXiw$A>OB{Q%@Zx!M4F~!m^O5e1id!#iFT&X)FMj{+ey5~MRI)dD5VaV^!MY%g@ePNe181bp;_I}<#8X-gpasjl)@w{icQk0dIh{u=k1QMNZq3{&e+7d#Xo zW6UTX`hK_FW_k1=9-c)t*CtxS>9VAY9f%F7`#6jdkJywN9@#ei78E$Ad8FOdTaS}w z7xMRk2U(0wkOBe)GYNm)7N#L+H-hE+*+4{_#QBq-QfKn{JrKLR01^5)(INx@TY8Y7 zVhk{Wa@m_^b1!uL(SP834CEjLe53_;AMQm94khr*EklS4fFSrRLFoYW)oAZ2#196A zaIVJM_uCycXdFs0I9Ahu9S0C2-?KBbGb;WOd|5B<5cr}?w-JIOL;`8z2M2o5LHN)5mFn$>SnS~_;h6aiq%6aZqyZ~fwCcHq58u2DzW8iiZ znn-X?$HQ(+vUAK9!i<5kfiksE)(3 z9cH~BSQT;zh{oT=R3RVY3>3C4D8@W2E*WR)kB+lV-Oa8wN+^U!>bRyyvl!fZlsFw~ z^9-{biCxHs0Gv;l?u=Zl)z+(I+ckZNIcVBs$r+1L66~Hakf2PL2#3vb&Y5;ILLAt- zAZ&AiC9!7dn1>Y+v(*rguqeYe!`R6In5Y0hvFB-6ixpCEH->RDc@WnHwn0~ulN0LX zRpPr{ig>C2J?v8mc!;d$j_e0n`}Y(+&T$kwozps< zoUU1B!=>46+6XZAC_K{Ko#@&86I@LBzH~9=QYtz&NYuGr`GH+InF#= z&`^gK)k;d@hAg=;49dy_JfOO=Fg_8()?kApIJ>`%K`abHe$-kO_&Llqzg~yB> zd}T$QF|QR?gOF4z$)BHMN{j^Yn4M8)@-q`iK-fHROtDe0wS^w3?W^QvKB}{4at+hY zf!dcpF*nKcHwn~jn;yiQ_JIEtNPFvuFkjW;V6SF;;x&h@4k__2b00HvQ{Q3so$Pef(7x=SK*EK$~f+ZHp)l1M5 zlmHelC^1zS$Gi7|mC}kR5VDPZieTo3G3g5O3c(pO1j$D55j$lB$M%i~6ZedP_y;y? z$!o-WL+%5;K78|9PH(wlKnFicj-)YdKO~s8mMe~sd6d^KIv(T~LQhneWciP^D!FXB zepj=|il(sU5@1fba6 z3BHN15EhKV_)H-`Da!{52p7D|UYm`L_mJg5l)repRt$ia?K6Vy$)5DSPmyg`PF!8v zsMO~d>$SB@rB$Hp$7>s_tEFZ309rkUs;5m0azuxO9BmyxfY!Dj=u^IhLuQ}ypu(Kk zNj7UcS@6*377}jPmTejy+^v{$MxsYy_tH-zKC**D_h1@yKO>+U$T*w3fbn??@?xQS z4(STMCAF??Q)`rH#L#Hlv5DW(d;(D=JnD&9J0f}kq#_T~%}A|Kqe;gkAeRVz1j55n zMc_On;$aEtCtQG&B;y`7hVN5ov5rt z=ZX~fmBRQy;HMg}xY#No64s~@H~{k3^C)LWI&UINxX}h^6Bxqan>e2UN<;hunnXCz zE4LrW;`9ee+Oea(_|oIbxFnAqF*XqTEg-WT)Y_4_3Ho9iy^70U9 zG@-)7L51bzwJY`ci>3KX^~JSHePey0SSv*u00vml(V&6*qYW&U7D|<3t-OYeh3Fa_ zzY;YcjMl7_mde#yvaW0t4c;tgPKtWr{i^6kwo5+hI{G!wXh4-H({|>#81(vDg&C5k zfW>JDqc_GV;}}p5sCk#D$<2ktQ6(CX?a5C*pJ59&=D5ww3sC(&QC+wLux29j4Np48 zbcRMU;6DR5IrrV4dQ7dR%1hahOJbuDyBFO|>9i7aIrvF6oOV+Ead1*0^n|Ar{*zty z2w`ax61;+n%B7Zx=^S<7FWF|WDV(}Y+#Knaz=xMMHk zSf&zzjIn}@ddehBB_lv%g}zx#gcS^_09s zEJ2zJ+OlIei?&gvx=a14@0xaV!=pycshUl@)}l{W*H*94M$NfK?aA?pNg!y$PhY9k znawQ>G-x>_V&EFi?z4wb*$*5>pc6VFMuHdLQKtNtjxlPN>QB*!{?keA(EWjSXwtMS z(*`yNry3dE!71CZG|Kk#LVD(XNu&+>ewNcVYHemA_&YU-V_T+8SqdXwi@GryCf$<7 zCnFKHz0LU3ty{!cBQ&qq;vt~Nc)^K$er8YG+7LQaa?9|=(MyJ2e*4^uvBjO{*W{r0 z0$9VsyQrjc^K94lyGs#3LWKNePpi6q6deVIK`?CQgk+hGw%OJ!%h9t;7dYlQW2w7gbiX1Kc3+39GmzayLIv73w2>sMOBIIRVFeirLrXSf z^#c@4lZUIP80x`yiah*ODx>j+@Wc#9tmzVC5f1F&2zWdV0e@wHU&@M=5*X-r!A{m{ zJIGG#i0I0u?K?zc=*M{qv>9=!*KH%a(d}4{W_Ups%mVU4 zM3v9BHCqEuLmSwj6oD1J4O9jiJ;YTG6A}E~bq7+Bcy@e3#XrI{Bq1+y!4SW&i4-m- z1Xz{q1IV!%LeBEc+eF|3Fmx{MSeg#{i45RFhHXq{Ji|hu5*wnSdL2rQY{P+VJ-2OI z7Rc7b--dVG+L^do`|)AkQyfde3m6!K*LA4}$uqKT>Umm|dPH+6u^k_>muWlHAm7xE6yp|8%f$vVe>1sNycc^PR zhDr)k9xRsM>b4uUW?B^0IY2$OsR8ETpm;FtE}SQ}>9t_-x*c4vLf#|VrcYfA5$?6R zKG<&%&urS7mAJ`=K`?kq+~GgZ0045nvyTK2@X>TVuu_1JyWKWa@&qpqjuMzlH>{ru z;h<6Y#@8BWfq;jU2r2k`dukVsDvwJ%(ow_FftCQ3j=L838x2{qzq4AatgSB97v=&d zBB+(_Q`~Pfz+hM$6mmC7AL4$a0qzi@@R>?!eYrSas$VJBF4mW!&(H^|ez8 zUE!Tcd6q*wb+k8=csjX$<1bE$2b70s5tEMKG z*6ny8^u&6VwH)_?8w98t!&av!&d);q zp-O3?T#Z)_&&L5&jDyu>sO<>n5M^4A8jU(|762Jg8xgTOdBuE`i%zYCz3U#gM;st_?Av@F&DT`OE&Rf z*g4yU^JC*u*N5@p!H@kDX~+H#@nfHlSseN+pq2*f@@pnHS<}04)M{vSF7hIfM%T31 zy_Qe4cHFj{w;8hrJt((rMD5PPwMuRjlFXDdHgG^i=TwGK;&>B54w!FhkC&nTIEjbY zP~zz4aDMA9sSE`ulP{HI1ZCTU=n1o? zkc_G%vnS;hwPfO@l8o5&+d&*f7Xf`!Nro+PoD8y(2`R2H5tZVSP{65og395}?IKxC z9}E%Ud=|6@Pv`gbyw2=bAc(d&z{vHbg1$c6YJ1m;{xjDvmzs;KPp@5hZu;4!&iSop z=kSj4bZNO*t(E5kbb#(oP)qZCQ}-yu>6ed`V_?u>(X8zl%sI(0J>A)&?#`IM(?O~l ztsEXHeRwee2gDmByNO6o(Q^eIlHeTZ58NVu?;a+I!FNOu1G6#+b@k_GSpoPC3Jk)g z5R8irjV+`SY)M>;j7gmxn;0u3R|PI^lVo2qJiBH#G+PU+A7Kv;PV-Nu(fkLv7CACz zLHQ+r0C1!9eAjGrLEpkQ7Ec4s)~p@aYeK3l)OKiia>tAQLcGCQ8ntN2I2MlV}7 z^b88^d?Fo(3Y8R^8b>U3Pkh7~5ZEXQrBouJ+%O>=tgvk2Fp*)7Ne{0z2qX~$Y1Air z+RZU18$qKE&E#j1Aw6AMF0H_o*Ok&-cnw7@R0@PdBz^_-uebvOdFG@9v|4t=TsWf7P*3yw=U2%#TX2AqonI;4bw9HozNmd{L?l- z_o6|D#db&YP4*(DhvEHx3?|!O_?CMA=w<=uo6P-}{S zJz7*PeycdoWT>+Q{Na z*>N|Ydfa8wOcVLaNJpKR#K95z&NPHR$K^2Ip^VNbIRPKeF2Tf=uY9Nutf|_y@ixe&2082S1b>@!Rg#U(Q z^ckZw6A;l20(=FBI!tCFUns!S0z73P$)+C0p(`}^h(ZUKItxHeUM*b6D2Wv0Jv|TY z{>Zh>A(#Q)0-!BHVDz^MAyQs+Gt$3ruuU$Q?8M#T;4HUS-Sd;;QIEnuJqF|UJT{9S1n|Ks8aXR9VK zev$n%Y2#v<&6dAS;V%(ReQ+OrX=~tvZfmwqM~Uf^7rUNM z34gKUMKMjm=-Vt8W_Lb1n!_d;m_KPnj?XN3r}WMTGo0Fmja z%D7?pi|-R?nhy~Y3jmsqkB_U+4WOFy_q-ttE7>j}R(`3cBq_7fa)7vY*Q4EbaA|gg z{X5D5pBiCU)Pn;~_Z5_G#C*+eQribW%xyZJXJR(OBkbqFG3D+wOtAw@fqn#{2;0_{ z*=%K*T`N~=$ePOP{0cc&`O$1L2U|)MJmKR`~g9w855BIe6infQN zc&_a2+XSH)L6$tp3@~!Mi2!+y@+)Y-p2NXC!aE_8jH2LoaL~XRB>2!{{2l?mg90HR z3isE*uD-}E(BV5Mb_gbx;U%u|67U_AIC6zHDz*7uW$u7b+Pnzi!~7Ya_}MXG~okxzBFksc#O%K{9Av;!d4njS=E*mT@Bg;P=2EapiJ{s;ujcUqcj zfQvl4qrk_y)~2q8K_nsmBSb;6sJ2Df+m_R&3E7xUVQkAZsH`Ss|CZH9yd*>G6#Jx! zyhqM5dn7__r`v21oU8Ak#SuoGKvsWCb4{lUu_l;q3UNE;v%LG(VhxG;1lRdShMW~~ z$stX)v>qPBnr13xU9=HTS+-ZXNz z$r%}JTM)adWXHZ_GN&9cyhICH(ANcFq+;AjFbheHKOm#dmI2WqdM6n4k-k!C7(0>A zpHE7@V~hxebBe8*(}b0g%N+u~Gg=C6 z1>&V(-I;J8qKM4x5=A84;_Xbxm$K&hS5~Kz?u<|L;8=BE8dm)}XChd~010+ zDTZiAz=ki}XQ z_%EvIEpVhaeGfS^@ahTM5-}6&5PfV!sO;GE$E4g%%oHOg>5t6h^W*%IZA7%0B_lj; zqx=Y^{~q=nBQZ*3X|h=eARIUE3(!&6sAtJYNZ~>}WUoUWYy=WfFpsx~_kdxbTO6g3 zaDA*N;p)e5t3qqvKZW_21{YSVflls7)6urI9ocLeY%9_CX(1WV}pQykX!#IR{q{ZLoNTK#PzJfEthUCeEU)F`>>(O+cSal1QPrSr|Ox&xI+L zz6K^CB@Ca*_+JzZj9)^Hvf1b}|vxeri(BvUAN;2S=nqi(G37#q-S0Pp= z=#lX3V=sauB%1sNbV8SIBVaPxg*ZbU9%KX3Fwx$FON-!vu~8}4uJROp!Xz6S zKiYJ)P0iNMOB`ER`QBt@kyB1o45?dR5Ul!i$eyy+0}>YyurRy;INE}U(!=34T|{{# zBt^Un@eRqoc)VtLeg~&W52R5f5sQ#_E=ZDO1}Is4!Zia*CmJNaqGZeTx|(Ia#MA;Y zTZ1?$Vhb2!x!R5m79T*lQtugB}SVhJrzK_45HWr%4b?lGY>1acSb(x5!3xSLv# z9#am)7139xyQl^AV3y&GZcS1zRTSmb(F+kw+Q7^e847RCzsu?YZ6So-vf+6arrl9#H5iLpt^Cn^~2 z!AatSX(aI|cZ(9^6*O_)u`I3Oz-7`FC2h^UhR&eW0174?poOAZ4+}eSQYad}Y06i~-} z4CSOSVV~CNM5ekIp!J$;NN&O`d$&Tf_?)pBBt4-!RGdZ$jdP6ps00a<)DR2l5+$;` z1#RFct_Cm_BL>)X>`0o(7si7V2@CAP1F8pydO+}i!r{R))brr!b+w%?SVqayN4aq) ze5Z(j5Q-})0-i}TV1j!d&GSsp*KCxwPr{RI@aW)#=5;`5;>kNc#ZwAII}zmOqSK~9 z77hpUbnw8=(PRM8%27j2_O9zYZDttu8V3}F?!vX&J)~edDT_`fg5@Ef9O))D|1@|X znJJ7Pe6zq2^)V*bMs_xaCXH2-q90$`bOG6qA6r!oPUAx=pvocC@y|Dg^SK zNbAZ|1!LFn(K{q-liiz2e~rD6$3#w7BIgTWL(h3SwW-Gn#?u7wL;=sgK%NZRm&ykN zOe+@x8*4mX_?x~t(x_{8{8+(FQyw|JL3PsE@mr2fvTcNq0K!NXGX|MWF-qQ9W;ha= zA-Y)%rV{ZPxbRVDg;^mI%dAPF-HSq?mlVGV1k$MAsBb#%w&ohtfL{{*hL7)dA%;=C z<2pCYFrO`avLZ58PQ=Cv*Ha~DOk20QhD;P9Yv5NRa>zUPZ+8`+LzU zI09lc6c2*$Jk~25<=qi)nImSqZR#zM4o)x3g^}At*g*bX4(u}&1TTPE#}?-5knKKJ z0rH>+?7rYTM0vs8z~FfYkp!L)X#vU}h1e8403t89Yr7&}uGFrqtdK)*-m_AizgS)^ z)t5`f%4&Ia2`3>{jEHFy`8+CkleJ>QlWVa6NcSf?y0TWeRALbo`J{lq7mGDe7{}O= z5BI27ua#FyYa8-V;lfx{mu%6wl{xRDMrayj=ma!|8(J1swsm|q-Iilm1>0oY?ufx zk)G`YLv~Ko!LkaZ)}uL0*dB_tq8NKD5=9P!>crJtlZGWv^9F-A!jWiiNqC4?H5yS~ z6U-+;$CqkGIne8}RM=giCcH^)v+Lzp2l9;rd(uc{SDy@<0D_nW9j*WXwJ@1wPL_Jh zagF@g#8^JtX|hLNer$X!AKU)9)IKsHi?yX$*XR!aQfDAk)U|ELWd?oh<-vL3*QW{H z_a9~<$k-wX9=MFNWwy~^_bCj!z`!};=Y+t3`bo6Eil@qq@yx7~F|E^)E<#v@u2d~# zI;_&E#TDLS2WcLgbi7S9S8^b7MI6oWYU(e;M3qwDS5%1<;O z9A3CW3v+OMfu|lC^?DRo6x7*RkAsbGZ3J;cdJtb*M3NZs8JWq?Oat|q-bLpUz4j8lGJxWkmn9rLLYxW9 z@mGi;&%cJN9RVIho45Bwn*k+aQX^tWA1iLu)_5KSXzu8XntqM?{vIy4yO$E~yu4J% zWbf?;A*^_Z!w9Xxz0sh^Q5r?bAK@+z@STE^x8P*U$1Cx^VhRVx%!kr2^LsgF@(u-J z7T3$9+U)?yh8FLe+LnXp<~yznwjaI=Tja)ZO$sahG}}Y*9p@!w7kOc_4=5$3k08z& z$24uUC?};ziDB7np>STsKO*``+Tn*eQFh}WCD@d7RSDjO>&7_q5+JC67BvJVeAk29 zfa7fJ)^2FLBcyTClJZZ_!(t>rwwg*Wa9JHzpqgQcvB>)P=;r7iK^k1LI6Y;AKOV zHHqvA6h66fwff9*Ab{gYaa>c|!=h>n_$=!cBqoC=YNb zSQDr>%<2g{I#xU+l>-WF0|*Uwq4_h`MezZEKHxTn@j2$NfX#;T_r}V{MFuwUEPo8j zRj73`5KVBUf)0+c4)9@=qgmjTx0ptG`+Eo(Qrt&2Bm6tAY8_2)G1n4&vdwjDKoB`_$v!)Rnrt}Rfuk;Z`QBEkY z^qo`TL)PPtO_w2oo&)Mw}rjN&WL?FW6Oj> zm56}sf=%t5|C44V;Wr+ zEd>jtEO0>XxnZWf%~*%9BCwPyq`eZvpT7*0nj4j6mG5{3c9+`M@fAHa6*SO~t**sN}E za&cjr8QShQ8uEEF2&x8Zx3O}{nb>bMz^Yo@E|ME7#YJ!DrLHsOwAZfG zv@4g2JC|$Kre{rGp7pL`#6{kWz%<^geD@dWHFn7L8x1+;KMTtahvD)0;{3%@eW6mm z%*g{-z)3lp%n!xCdCR{FyTf}`ebx~S~$PAz* zas9oomJF$-eJv?mvdinauU_Ph>z_szX?S5ysL)|s_SMX;(-y4BzFLy=BpwSl56uYf zTqsx9i?#WSrAi&+GL{i=hQnfV;==Hjdx@)P_BDXFO6z`7Kt4Nq0K)EDF3(j;t1H!d zb#-OEKEJlIvawpOUETLmL6k#*DxpR6T|u)~O2yj6Qe~yMzV9Z#QEKwo6S*n!1p5!h z`}&lI>(%*-rG<@UgE64XYfJU=di`>-vhNW?E@IJMuumr; ziCuYheWM0#p``RdZ{^5CavRbNE%WJE*dLqd-Hq1om&T4s~G+(ULLmCKs zF3~<2rv?fP3r=mULjpET4_Pfgw||6}acW;1aO!e#`BLd>WCz$ffC-7f^?nv_d8oPq zxg0lGirvFr+wT~%`OJw;$9byR)=Uc=m0*8a4FTz_hHRsA651F`sUpCRRgq1A1{xYd z{0SV43^}ZBe+EpmOqQ)&8w zqssX{W@z50e2aoIq(QP-CgEo>WNwGLS&XoBp+K@(NI&LgbXB^LrPsTr zizx!hBQZKMBCp}ox3gL0%md-v*cby-E0`IhUf>0r^jp|#RgSR9f`MPMved2aYA@}y zwHvuM(g*Aof2H3y?A2|Ex#`|ud({sR`QXRT6%dIv2-o0m*s}N&Q_75~RUu(q1(WK~Tb`$ee zKs~PSh%3v)YDQi&eOc-&adfJCimAh(F@fZE*fhU%?TLg~C|Kp&hx*uV%6i2pkGdz{ zGYrv_@l;Enk65kX2Np}J+u#;S3R#>oG+CHY3CK9u6d_TO3DbQu=p-b@`l+N4)QU?q zU@FI!8%zpAsUoo2%SqOQ>@^b)R1y;*_^?8eP$iPM$luCJ8hCG*0@kAJa`asw$VLTk zH2_KmNMZy+Ob_MhsGna-fj}-+Nk$T*g)>m%3Lo?ektOHaqEtIfX1ysuf{&7$g@$to zpWhNz!6#JPsAO6IL1>Ym9Mt{{LHC0NB&lg-I##Y##Urf;lEjWcT!0h|Kn9pul0s`C ztIt=AG4agSb>_VMu(n)PiNh{{2`eW!^Z4`HvczD=UxK(2f5xcdrsK#RhCA2L1UTaG zKzvc5bST>lW8x^Tq3p3j0%n3Az1HaKRDy(P{dFo4)w**C{hCqW>{KSeJ5^oqI5FDCYDe%z7(MT8z^p9muE zzP^qjcz?n7|LY8?#CWDkdjFU)MCdm6gCf%Tf+q`Fwa*?{Pl4J|aqQq_{Uf^=&B}hr zr+3VS(zV4db>}YXv(G)d1X|re!CIo`4coD=IqB0UxIQV9rcc`97Uf~LLZcKIKCX4BO{y#sZM8$GL2A_V$H=Nf7A?(djl!>| zwJi;QT%irm0apP0*Id`Kyq4+5gUyHC^;R^2LO^6J49iEz?Y{?cD?-Iu#8FA!nPaKK5Lje%O6~hr`yBk~@uzZF4 zLj)1Q^iO%l2l!60|5j5qxeumqrJ=cKV0*;Ep9cs2vuVKpQvvWpKLYTV@n6gsu-)}c z9b;cn%+0`Z4N@1a|28~oQy340UpFuaw9X-;5G$+dWWjvrsHfe5Sx>0uK3jfQ;FnW&Wvkr1nKObXiy;~Sn|TU{(K)fdWm<<9SR!ZY^}TG;_1+B>4b z39$`mYQ0Ub&MH};X4?W0^pa2|m>73u~_Ou_vz9es~?g@4D zV*G01JO`MKRMI#lT#Vb=4a0G5({56iVGCwHjr~Jn8~FMjoN7LjMm4iM$`|4*AAz8q zGL!=aZ94{a!%$zucQ^%QSy^hAk$SeBEtBGrthqa5r0hdg*@v`2i3S1iEltOK=tzF6 zj;*=wD5+>beMZUJ7Ii&J-BGe(chJ?%#nzt&zZH0aEqlyQ&Lg$U3v>9swz4pX4YsMT z0Va=zh1SXo^H^xD*!5dvd@PS8wXWZywr}b@e~fK}Rn}c++tNhe%%d*O{zyJ|kxiAC zZ#VBdVSTT=)PQklmM5%-r7-e5%&e55YnwKheRwXyUG==DlR&g5n4yxpqX)3ms;Pk|*AmIru(8c4u!ab&3bR7u8ad5Ho zb|#;n*z*c3B*H3@NMibABU(ZDgq&_jP5G)rNC&M+J!W~riRh5>3c0^e-qEiU27?H~ z0F?i@Oi7U^*9v0QNAjL$vAJ zC4YzeRYH)6`(Lj}u zqwTwe#K7lxKmzy7kE5UV4F5rlEiQ4>|>wun8FSjg4`^NE9p5F&4Q&l z^*oYMXY=_&Mz#p!ex7?*QO?{YA{66f+23&T2d4m!rBQ(YA}9bXte^lFA!jO2iiokZ zcoIeKj>ykg=7r~*4U1W~2Z-9FV_VNS8O<6ZBXzV9HW1X3Xy%L=*iq*TgsLeX)+axijp zzarA1K7W**t?(US@S*l~-v<+DNSF$!3-R_MC_KC^l%^iT&3S^*pUfNyBxn(RjRsppm!&7%M^k z3|aphl#XCkcpmmzk2HiS%*;%v_y;zIgEC@FA;1`>!e*yo;@o726AVe1=D;Tld4yEy zo#im*n8g}Ni@hAQgRy#<$N?W;bDPvx$%xb%YbAUz1`k-3UT7wD9Pf&)B`^%s_EqvS zUkc0gd}>n{7m7dAEX&!hYqn$Wv>{_FgaP8O;44`CEbp~ed$7(Kc=vsy2$F0NJPOZ950Rx7VARqKo8sD{aThdE*;rjIRjT#UYH@D4g!f5ML00~S&S`f*4NUq|s?V>jT`Hp= z36z)JOHW}C@SN=!G&g3?pqu9@s0my~eQ|A>yAwe@nbio%8iW)N>qp62R2&$)mk}iR z4oFtWQ-Ibmsl~dFV;;=YbaM8L&Hlo^z@QFJc+RB}o{w=Bz@7=hvs`i9Ynzs{Ed`V& zzT;TP!RwA~gT5XTigh}Sa~ISkcJi|sNV=9VKy~`zpKj@F&qU*=^jIIni#T^ZeSTJ* znm#`hoYW~N@xEYHigiS=Mhr9)?8=>NlJl!05+y^+9=vZ7ce`%^Lfl57}Xq)Sg*dS@*ZE z8{;?h{HpO{d*SNB^_8o0mo{G17AHz5mZa)eD5BGn8{1Z z4s*<_?8L%c{YtT1t1p!1HqfPv7nK9;oMxc?6viBaWU_cS!;-WJ$H0^xSh#UkOz``# zAH3*@H2wbZDXC52<;M%k5I7VW!*SL)i-#*UEyqy6QQXN3R+sDG!3U?dR9sG#g~jg( zi(e{Tjg^ipA`bfmD=vqAXY!fM1xT>K*91041Sa4W9MzwUQR9c6){N>eJsdBj}k4lc0 ze?O{<82pGYRA1tDuap+bMbx86yCE-HxCWs|y$(%Ju;BWUdBpHZt`N@Slsu0pn907oeFy_Qi9pKI$}kpP+L$*wUk=b8iz6`{ z%tLH2`&iCfK5WwRA24i{5xbX1dP>o7)I)64(Zw^R30@F6oVAV#spds)TFlkW(IX3f zS6$omcLct;)S{ZlBFNlPDJ_?Z)e`eY7O4XHsHoJ{Q?>S@e|ddjy!4W9uB#`d;W8`s7!d(Ty?6YbfZ%S+qSvun`p zT|q1L;(EDWTf0=kw1#||U=buh<}{0mXE<%mw1vz1sjxm$=3ZmRy3patutJO=%i#dR z@^^;i_d-Y!0QdBj(%i+hwM%IPER@NP9@wA(R7!BQb2zG)V!RLDJc@)8u@a|3?g)zk z7C=LH=BTd=5M)|`KrZA)5C90w_yX<&Qiyy|f!T$HVX>3t0R>z?G@&@kAM93#=l2PE zIm#bICD!ldb{DBBD-NOQXHsJAZFdo{xqlR>&oA%lbPe;uaR0B$0sHc9UYM_@3nh@w zO(*J%4QRt$vH$eeraA*Y{0H|n-_KMJ)Wz;omBfVfl$=6J2i*nAdT~lE(V2s5G#*dW zXnbgxxpA|8g&x&&tga8K@!%Q~OlK^S6Wwt1E?i;4zqw5f_vlV2G;k)C)`(w2?&ZRb z#4{x`u`p}sp?M8n7jDHwWG^|EYab$JBYdq;IU2r!vq_D;`~Qro$i7{?aaH!^;C*n? zf_zOjTI4GoGPv-_+#{H9-oSoW!eUn1e%EGTS>(bYYkp;bwcb7*Bq!M z+LKTa#MXz6jcWsB{VI`Oq3^YvT{kA?N0hs%61_@L=uy3+4c1%)_j!>2| zh4?7kgG5#(Cbu(}^LRQZxjx$-5PA6^<(Iu=$KJyUfnZMOJuC zBqc8yb+ceK4RV;8Qjot2TIAAJT2cNA?{cON#HJ!I&1g1W<@|cjjHxGHrQ3xp;t$#M zhOb*r7X!n`?{S8V1`lQX+PYpuRD|CArRkm4wWnJvSIQSJZOkl9d*=Am^3?j()-x|o zj$`oM^edcjxDkD4WQxgaoUqm{tJcykUzh+XThoPVl>1jp&(`Lb*ESaF7}YvJK}nF3 zhaT3vJ6DL|AF?BD|J~Nk;0W}J42<@z-y><5;jpM&}?*jdppR$HG(9{eL#w9%^QB}B92yR;uXrL&U-8{Mn`zLa zP+3%|wV8!0L~29~okQE|?Ut#x;2k6~^_X=vPXgyrz3Wo4*|pKR(nGxmM3y98OM@_W zqv(36H5^y-%`J-g;zrRByY09%ZptA@ea!wELsc?AB~YQHn{~+A56NLBnM~m}`^xNf z8t}t8rU>C@TKuKZg~VQeT^-Upg62OabqJ&LJyan9^mC7lEX&`5Ad=Jq%&0TW4;{2= zDLQ~x1#d}@uv>-l-K43#-t`idaPMZ82Ps->5TF)3l@s`B~^ z%)mP#3^0RJ$gLp`Tx7&w{#p`WVCh2E6IuFq_4l&Ql7kKODIpKh^<4BKg9!$=J`xWh z93S4d+m%mW51*xnq=VAY9ix$BUy`Zx5%%QZhvgg74$CKmxgz!|PRdm$3$cvDgVAqk zKJmM*4F-xkxXBQ!m6*2g5H028^E#TIIP|cO*ogy=^ z58o+Pv+4Qh&&U92P?s8LqMLQ89P8yMbnDVr5$I(!4JaQ9fD&65P`T`EbFg%srmMBv zaKi-GPjrjge%5f!Eoy@mt;L<46ZcK5y_glhWJL?7mI&j*3-<)V)I~{y!@|r=9&Gr- zLo5M@k=^5(bU5vH0mSiJUk!jcv115yUQau8nF#g=x#UhEUB^p~ob7M!1Z42!mIl$( z^%l*-b3rtRm`X@4IY@mS%P<%fg4ZwZ5|9Wo9Ka=cpK_SFipic}hmp|$5%u*U#5PQO z+oT3{TPAgJq%ieEFpz_j&uki`{-A(Ve{)BGDf}iD^*x9iKs;(2q|^0U;LT}n3dn@$ z0y|FEC7qUIQ{rHLEZ zePCq>#8juAp8$M+b7#zJNv7k{4QmAG{movP=#z_zAR71K#FYTp4Q}{whtd#ZBA=g< zdAkH!#K4WYe}>?PZNgPi0A^eV37Y}L`rF{w*Lo`g&_k44+b7BiI=^d<=v#|*^z9Ea z?+N%$IR|=3@M*D*?3Wr%>a!yZe;ypGz?Eb0zu&xh^FE#xaY#|fCk0kv;{vZ%@n0;~ zQI~}?66ue5kR$O=JQo0UOdDLLS>TH%o(`r>?3WrSXD5&Z+mEp)OhNq`=fvfUxO>zi zR!H?}v+63GGwBD4kiqf%s&Zja)F6;G|6vIKGn$9Ppij*W&n8 z6mf3C8k`GH%NMUv->0q>_Lkl3T9zbwgu^{JqUX{O{bxC%2lEuTu89+Fn>Kh>2+!H{ zw>6g%gKnBOHHfPjrbAq+Q*$ffvMCw3Cg&%egV@M!YBm8l5o`;_8$r1JE@>M2&E(HR zFqHEXyLncnfgZmU)<~qQ}ARCGIQ?wpFzED~$ZYv(nxqI!3x+`jq)pKhv`k`Zs*nu}$5} z!3t%KMnNK`d@T-6NegL|bc$z+W?Lf2DBnKDGlirya6aWBVt`+QieWlv$ELRL0h?t2 z%S0ihBu=JR$V6iy|jjS7DeL2y+7j~HW5+N%cUMKaoprwO5sBQz7{;&{(H%MuxdV?|}0 z56T;jSSg0!_&#x^FbjG?JZM2meEv1W669AI^x%Q_fu09meil{uQCF zIG=-4*YPy!`bi!}k~J=<>nioP9rs#x+cYRC8f4CLbcodzyX)-S@I98(Dk9hS!7QrL9;JJ-_JntHj=V!?R-PF34&$UyI%eny>F*B2&5h@?iPPDv-eUFjF+A`TTEsHcE zya!&w6A$k1J+leSzfN7QO{2qS8B3cbnaRlsb#fAi8aBUSgDQ&JKJi!gaf!smZBOES~v)#>vv(O#`urY$uMdOwgAeVFZtW?7;mF|q_@R3pXCk_FS#8W#14 z?RSU{I7+-7TW8AE;G~D-Tl2tmUI;0IrXug(dqh>jwA`KG#y+x-)DBYy6$vsf2?EC8)N=fPPa6(4F#Ii zXXn#FXPJanX7(&FnQKmaNEsnssN}X{-LUY^gUNGJ&DMdZZ`GLOKyUcewSl@}L@i*Q-|-Iv z4g<_X+BH4eOR02NfxNy#CmiZ@A6!~wfv(E6t0^ksqfJ-a)NCzXA$)JLvQP<&in2oZ zNT;poIz};xn|L3xH;slI4@4>(n*NH$v9vs-6Pimk3lX@pjf(Dc(`>9LlT@LKIgLUS z==%7C1Fru#e}L8npf&?l%w0io;a7P*G_E~rGy+qE{=hco6YQFI@E4B72<}-Pa`5ON zqsZ_L6d8qvqc-&+eipJiSHR+E}OQT@P5-9xWw{dcM=CH(gDq^$vAS$6#6&0Ht1w z!$A(`7vny&gd-(Wl>nlP;@2&#kRo(sW&6qtY|dB~bH~Q?UbiBA=gCC-z9NoFv_1tkG+gWI33yT&6cD@d2Z^ zFoQ2|Y^U857R3C}2;DOskcQCakk^%e%k4-Y7xu`}I8rbUd_6i8RdWF`h_sT@9mlL} zP+{yv&#{HLcFWx|nGqa@fpDd^nt*RU7d&}FAm>jb;YA||&Oj{@T=Wcw^D|@#l@ONL zW$|2m6N5Io&4`B9&?uPL0A$OKuwj)|>MvT(cCNg>Sbmll@6kRVYaJk5MRLYF7B76W zP3tz@j*KAeYTfEKO&i5<(>8%9$7j%CB~*fBN=!?9lLaoD!uT*)rDL;O*wn_n>sB2k zX%*=dZv-A14V52C(nE+>pYj;h3Wf@5l#r(p0}|hSW_;PWm@HoMZ>`yMX;bs5N_?$3 zs#}`pje4$LZ)^If;raNzWob4()I5Bqu_CAsfHL?4D!~@u6a3-polQ$?dZQRTcGP#g zQGivkx-e%SR1bB?_JU{OEFTrTa_Oc^y%z4Cl)D?3&xD}fJ1Qv%7f&}&2>JD`+4`gHN3X`;*4YuGGK(pGfXT}Bt1Vo_Mgy^H#Kr;cbtsw>6i<-IGIojM}ee#?XAWA9cm z?UElYDZ^A_$ERL=FXRG<>ig)(^R;%TZrUDo!Sf7=H9kTP-0AxGguDbg+LVpV=L=c< zpXBo@{vX*?)_AvLXnV9Rk9@sSUMW_tl1rtlayZ6se9GW& zlta~M04w~LD8nctYzZioC7V+`-|(fEMPRIAKwHbWmIa$7w zGcdU=)2942ZiCr$S#LAYwBvO)rRA7~7QBvY`ZViybZm7NTG4J~$EVmo+3N5vX0gox z3JQ4un2v3mQlo`D6e_QST{t#TD6o~eku_~G)AF^guZEAfI*PH;@JZpW;lrGnpY|LZSo?5h@DUe!D#=8cZ*lbr9}w)4H9gOQYde)> z40h!vS0U`+(>05N93X@uX_JJ+x!WFzr61wqVJKZXZnJJi7HiY743I5G!a{6Yq%F%wjwlVCDEgw`H__e}vPWHj4$e7x=RGOF}~kPKLVWK{BeP#8X8 zRrbj=x~Aoq?Tkta0;$C(69RLrZC)2vC!>-KpK&JM03n&KX+Vi=mMk%yILT(CyG+P8 z$LnRN4N_2siKmITEz{`v4h-+-9m{c{SGU>F;8Yz4S~m`KzwmfskQq>kLg`|-l;kl| zw5aQQ$b+g-?UQ#erh?Z4VZJZ+bedO0Jt&WkK2m z$j6p194dS=nOnCpH?a zr*}QyX{QVZ-)ffG1YF91k6>aESOe6u)=<-(K5Q%`pbVRlc1nCwMn*`+w7m}10qF&` zjDAvTW!hS&W7^F)poovWK2iE2KEXP&(JlIsNrCu;Btd-Qr4mEUI9t?pA-o9Uas(J+ zg)>dpG}fIoxXJ(}nHZ0v7a^JLj7r8Q6OV61i3|H=b`lF5A3&T4!6(B{%oO;^05V*p zX0ruAoAKI-#m;Oxj!%J_CpRmDwj&j18=6LlkIzF;5GasIv`q-?Z&%0WWqK$+8L!(; zVxL4##V6yn99YRTw2LhfphC;pzDP9#`<0SSu}`dghN)UPqY3jUjE@z@3bEN_*i{ou zG(MA*h1=s`CkLhS@YyG&hfi#(SR0N<#|48`m@5Poh|LsBF)uwR!Oqf@jd!)}XS&n{ zn1wY?FHya2K_g7)2vih8jTKW?po$`@lOPbTlYB$w5fn;rEZ@)r&^F7+2^G`E>ftbw z8%1CRtZo~Riuk^=Pg*5hqK@WjZR%4u4JN`*ulm@AIJBAWCS~N|CpfZ1z@v51e-eYl zCrx(6p zCiw{#D@vsQ@hn-&+)`;_rs+D}&K#U=w|XjoW1s6o&0geCI{iH#0@bAx+0^5keF8Eq zhM6)il1ly4XKR^l6At^SBzGTQvgp5K&1HPkN3}wxigr6B`y^SQU|5YBlo*@@vtTTS zG>5Pgse??%rQnJv*uaqC$gm63kcFF+#dKdw2wxeW{=e;g3y>YzS>Cy$k!D7(UG01A z-E~VVuXaIq?wva`(#-YB-g!xymFA&&XdkvS?%TKLPHXyhx4QezXg2G_!H_r!1Oq8Z z2#zAWqc9YKkV+MKRD~pvkb+35?>~<|-M8<&q{XR(D^+*T zd7uCM|9}4TpY#8xiR;?|`}8>NQmI20&$QRBNjKDu6-?<|YSDZhh;80}N)j3G^Ip0< zwJ;@e@YWj_j5FMj>WncqJE@m;b^6MbaYm_S&%Do@TbP_$FvefeQe}Wkt5wTw)$K7C zB3Q2Ye#$j#HVJ4;qz_6!D)3CoCyDgco+ep+=!y_gz)c|`N(u1)HW-O5|6J`{Xg6%E z)7s@tg}J#z!ey-b6QyXY_~`9s<;LkG7u&tG4l3vv6C+M`wgu_-cYe!ONZ`C$m7uBFffHgda} zW$qVdnl~}(H>P3iBx;F_$Tpj<9YyXIuW`}$%rHD_ESPnAUv>B!CKL-c1seY9s*P!r zd@#9oY>SSQMVY_KTPFdazeXqJiBQdbsu&wrt3b}pFLSC z;Qfv8MI-Cpp9zI%IN#_HCwI5QW+HYPRJjRNG|r5k8$DO0M`uHdjLk$JyKR_-zrfSC z7*D}G74sps`CHo6EyF@K`t0X;0QrwJS$55b)-rKDQ-jP@j z$lg|mG>_0JIP9POpUY$aKPK3}tXQ)Dxxn_sfp(+Wa$~1RyX}?_ld>o>8)PFE`s=o^ zDj1u&Hcvcs=GxMdWZM}YCo9SFINyW9u%lUY1Mcmr^h}vP%i>a;X9rm3F`wac=PS73 zyix_y2w9|P3{Vh%!iJ5@n??9`9E5Mj!79d91&<(v9)uMt90d$hF~by76lX~xl#sJ_l8(q%SDecJxG88+;=YVe(JnJ!yAPv6PTRI9hWrVcyc@0C@pB)-qj zCSf;Y?XOL{wt|rN_mhNp@!nu(imr&Wo$TmZOcw~d?x{iQ&p*XE3*L%tBnGK_aM2f% z@Pb|);-CBH73cGK#ixYlE?&6g6kLwtVq(+ZaByOr?2T~zPRNVou~o=vkh8{}Sc-Bu zt&%k=09iVPe5*azkK<|q&#bi8|BGC0(@X6St;oJ$oY{fJvvK4yD=w) zo#y1d7#Izih(L^8xh&>0bU~Q_e&6=)v7gVise9sP%iO}Qa)zJ6iBD}l81@VGiuRF1^89H%ndvLI@(2BBip5`P; zwAT+C;#0$IakZyKTCDUeM=eQV)pn4{!>f^ja^_mS4vZXlb9OJC<@iA@B>ed3t{7;6 zy-nDYW?Wk5cshJR;11pido%-wOH?oB;*RE*3q5r#dI_&o8VVibu_9vsm^7M$NyaHD zT2Tw6ODsB^Ts0P^7MBd}pGV*lnrYNbYrO@J6%LlUv_cjuU`iF*O+U6psw~$`VOqA+ z8mhs}#B9K$4SDD&TA^LX)vcx*0q>Es%3m2gM2v(Xp;?=mCeM}wY)al{x`jP#&GU7J z8;-z`j~-^=Pyw2lfuClNwia{ap**n$wUqkPDbP?8mQ^hex`85$E(5!s5@b}44g!n- z)#=LC>GJUD^+xN}i{q19v*#yXd2RaDXlu0AY|S~Br>`v7qt3aB%OlpMbJr&3U%fF? zAGlSU8M5t$BN+8Pzy%Ou8k>n8|NXH}8m{9^zv-%v?2D{cjr?(Bjnt2**m?~PGNd(q zI#;{7x}I-T%hzkInO?(gQf2uD>v~qq53qeBI03da3zk;1&)JOBh@MASgq3A<#WMG>CO)P6OnPSLp`ea%b6qG{oAw zAPxP~CBXThEFlHE$J<~aZCTs$!VHFzkQ4B(6J;$S#L|1CB56_4-4D^NVpsr9Ua`Jfc&AkrWGI>6*c3wMrFXf zII}b_Ze?xnr;e-#hRzM6O^>EKMfvj^lxR7+=<+f6TzD+U=R*2M5_Ls90D>&vOj)F( zy|acwX0PFRx6)qol*5Muo12?yhnTN2?c$< zLcWyjMG6EjDW}KNGh_1x^)n?0h-=lAx38>jMHZNG&X5)?bLV_GzvA@?UrvT55~O7S zSxHA<1QM$9jPN$su4}FYCdV(RqG_gYcQmj~yySToJQc1{|w%>;7wM2FQ@8rabV%xu&GfWIvX z`Fl`3>6|WqIC6``JhNkwm`^T<>84Yy!Z#}QH-B>3At&{Jbd$};>vmv!^=QTSII^HJ1ywObZIbfl=4P5}Q+1uBSRE@ld!yuSXeo(RXMvP5 zBZ&`|2hL0HsSv!k?E=VvQtjM{YUoqS&T>7qYz6Uol07`KPzrLR)n6|O_NMt|=>#IJ zO1+W}qP|$D>BnujV^(9NEUnh?6AoADfX0d*5&C}2uQrjBvK~u2iTv3gtOf7F0LmY3 zeJ52~DOEjwak#YtyQauE-3lFgl#CJ;hGO1x+6)_!Ue5<}3;rv{`;h!}TluSI6k84M zJ2pX4VsoSAa;oF_$>eRlp;+~k$>?yau{g0XJ-@Vaar){Mn1OM+?prNvv#tPSr)6Sp z&`W^TJA|LZ&!D8s-A%W@$#`G?vp0gq>o)?s@p{8qeLe6RuUk>{`i9(@qXmVrG_`;eiMRRk^aKG^XX zLl@Is*gq>SCY}%d*nfYuR7x%?uF5DsjNe~^%zFRg)Y!tyvzJ!Lb@cMWRa7i4Z`Chq zew?T4)s7UaOK|kBep$Id#LUJ<5B4CVYN}kVv7j9Fq_@@#n#r*y7UEg5=go z+0STYcMp`yWi+IF{?at*iFQo4oK2T-?JkD9SHNX^gfCOYTJKkl6XSO}pT8eZ(j`n- zI*k8;Z5+nuJ9Rvrx96s+(70UE?ftLupU-1-7bT;ULn~R`A_C@da>9uW)2Q2S>y~Y} zW^8-bmeI7$s1@=vX1J|`4zgLMCnMlY#Sd-TK&?Ab;F?=9?^*eQh&Xg=EfN{Ivt?`D zjt$q3qU@0~1o?LCtlMF~wU)q0W1ZU349%mj>R2hoR8??_OYLSj@;TKgHm%griyS@$ z#H<>?XTc4C(WwAMYgGgECz2&(vIowldM9{X8%IwPaPgz6JNG3{CGml@ciP6sHtgv` z-)Nj6c~iBVSl+3JJ8deQA*H3{Vm*=P1hzwdZ;#KsvUu(4io7<3*l5!X9kX7;7M{#v zgjZghxH&ZSsy{Kb9E_IdhJx8uXJoK`dAT-qZf;-`j7yXy^$dDh`tdX4V!Yv3UTVGQ zzB=!2j!s^>Id-#Le{E#-){Ey~^RG?cL|G5=b}h`!Eu{*)Pc-hV=!1T1lishxJipZ2 z%RcFQD+lRdJXOXoR2d(exUxLI!rh_p355e{K!Ze*>wcaKpj(+=UbvLXqPrPRvh?A0 znaQc~*mIb ze)If|!F9X7`to$>-MkWvHaC_lGu8$4n998}MVD&Ha`jp9pzRfx7m@NXntXL`V(e*~D|KM?wBpr~W^IVtIXS)pr&5bkv`-|H z`8#osLoR+1aUy?b6FK zP{EPO@ic)6w1UrK*|uJ~`MSoh1Vf7^muKeHqAV|mx})rVnR@Zc^!&==BCQBz4&8-y z-$3O&`J$tH5PK%a)%J}{jhS1vXjdeUuBGT*bPYFs$%48E2g~PZIFWd6AvHewHEP{n zi{G@O=}HG5tRMN%-Hl*x-4#GYG!GB-sf&wb~Uh92Ze(QzICfji; z0(Q?UW0R94hsvxK4WPY?U`xg6B~+{B$@WSg`yQx=*8B#t^ief(>rU37Q*<}9s01)d zipNx{IXV@pVLL{N^UxtRbOYrI?Y{A5WD!D#a2||KP$dgf^H*P4nrj2oa3?UOvt=Qr zPYa5!9-^9-t}d=zpIVr{_{z%s)UJV$hh+McaA26r`bTEQUS3(4T3o)mME54j!O*V^ zJP1`Iv7Sfg7pAX|ElrVHZt<1HrKy>f$?3%_I)=iGMN-~T%DKXA%Lqs3m&dP8Pi&W8 zUqWDcf+fUpwKGFpP^~0->NQ##$b0<~r}YBiRZ8uus)AZWjCEW?bTN=hyO!j!WD8Qr z0o8$l{-J)_!IX1+zJf(N%uS8s&!Q7+D-Q|%{jWPN!B|bu$lXdaJSkii1C1-anC% zLUUFHX-N}4Nw{<+RTGKC)+tW17WkjqK^{#Pni3)B3YH~9M!Yih3hWa1F1pH5MIp-zdsrpv8K-8ilY75<%ff10bOuF|WS(|4^E9sa zF(cc6NvOE}3^!znZa`hwvW?o7VVSNA4Z;UFiy{j(ANg9IQ7nc{vOo*g0>cbrCo(-_ z-QKFIB8x?MuK7T}G2sVW;vyzg!;8m#OjQ<+F3=Dd5>SGhjE zC*2c*H~AY90=dLbAt6_dQxKZ9&>F6FniU9Np#{nCm;tcxU?XBRsuKl{lVuxg0KUQ(A@^k7=1?d_4ljWco`BgdAC(M9`hOOgq< zD-3scrqVIqd2_4P-QJ5)Ao+*KNcPGlFciDs=CaFPO7aM_iJ?}q(mU|MT-zaQ#b z5} zVi4L^Xq&N=p^CTy6C2uOYhd&1IG+I`?FDbKhnJ?59vOwkPh`owBvpr_)eR;4wFm@jnKCIux^J&Y&xzF-wZJ4+Ri@l zEjBt7U{OYgf!VODhP+{w$M(nVw`}fVEzS!`QAzI39ETy0JhKEmGct;!19;rMapKi` zIXa*ffmuW?-?A%eDUbsJsGW|KJo{EFA{Eni{P%mrfuQe7nW8EFn}126e&ELUOn3$6 z)eUN__#kfpV}--)cEMnb9b>l(CmAc8VytkQG4@Wz*m1@R2N~A%7JfHsduS1k-h;hZBDLCv7ChYfe}%;$HhL zqvm)fu9H2>m!F>P#nD;1UBzr56dTWD({yCr&6=rgZf^EVNI=U3?;}_uM}+4|LyMsu z_z@ffY-x(9I*wBL0hHnS*pCB|M#&6M-C_En5(q=7=ngx^B&yu_^BY=F-f=mY9KVPH z8+)X{UYHEF+&EI?*CPVbNAh+sB>rJ_B(KDZrXemwGK#B)EWZ>5wq0MhV{5Gy;K&&& z?YE*0{Zw9Q&v}`y_BFlO_o8N;stb@hnyP%?#6Ffs>>rWDuJtc7jc8}(8fNT7f$gN4 zC^^GI%fp1}_;ttP<|epriV8L$M~QPNXVoDT0Y+}FNAkv)~DUaZIJ3nh8*N9TYGxmrKM1u48 z8isA?LuB?}JDxr3qCFM4KcgM_Qb)PAJS$#vyd95*$#nXD%})N%;8q6{>){d(ahDdi zJWCPwLGoV!vhG$VZNF&ng$>>*Q4?EPaPjkp%RB+zD#3BItr%MYcTIzR#k{n1o$!5> z_GZhmcw%gcBk|J?{p>NhLGm3=+pS>J8laSNq`92l6fASv( z`DgEozbTKL$x0TR7-5Cos)T?aX>DzI#)XDPOVD%zglv8q5% z)~btS2?{6a2FjK5ReDmoJnW^!orH${-v$4^w-UX;^Ads~hIgbR!_)oqaK|HHK)qxp zQ1=qKLfardp!iSs!<-A?t=J0$`^Pz(=o{{0tZ!H`hy!&mYL7b9%@{>-&lE7)Zr@qf zwufWeT7!qzRue50#slc|;Us4NY+@o$N_a@HiKGI_Cze!WjLF$WW07WVT0DE{4dhn5 z=7$dME84IPGcq=9*Tp-utyUNz5c!2AM7(CkbcD5L!^)Jevm@JGCD|C;Sf-vFtMCA> zR;(@K8Gd1v6K`dYttO494k8lNL(ZWv&c`>k!it1t}gEW z?L`03Z~nml%?OYo3StGPcD2OlVmO=xR`6h{?r(bV?i`gcgTbq(5=wey+)k2BdO7l8 zp(4XO#Wy$y$TvaHoxbAG^rEH{;l^N+_4I)KGl9uGS>X#}si0RO*?{JlYl3{xWafB1 zPYrgKsY4=m-7(*4Rhiy`L}8|{CiE03YR;1z^u$DNZImQYqnd+2ia>K@gp4R~X0$vy zP^AZ{&-Op*o@g7SHjE((`7gWNgpg);N1-(-1vR=!U6Dr4KE%g_9_;(`^lwA2T8c9KhH#*KPPO z#RLYgva2_B+ld} zMNM3to|;|iSk$C;vbQh7mS((eZ=r}sRck~MW6MjIg>^@^L5aR7+2-yk@ir@hJH-En zRK*wX`&bTF_pUGTqm7EZK(apSCXL(bf-1+DgM;(${i0o^s)bB@H@>wN5Lb zy<~X7SIPK7DMNVJB9Y~1cfW=6K3(9ENd+o&psnrTMud>7Em0$`;ok)fNfimHgc^3q zgb5;cOfE3#g2FdS*+%aiU#bF+D9v`1dQQPvcvRfoaDarfXhdZEW=AsC^$%S6ibcmU zI@ck`N1=T$m=%ttN=0d}=uo1k=;1x3{f|UZvGJQ+QGs`A!6B8OEs+3kmEbE;ggBD7Kqi%7f^q{Av-7bUY!y3)0-nj3}7M?npKT*L?brh{cbN%i~j9EQdC1omh@&vHPc&={$O|1-)oBNLm^5 z4AZ6Eep2l5RvENP!d^SyEWjy&H5*C--grS_#@PJyS+#BwZjfoQ1VxJ(JMiQ|%PD_# z)v+AY)r#P#l-*0v_A2Y9=M)=eXgQ`1I87R*o9&%=D>W%`xB7GG)8WC=hGXGs1{125PA6o#lp_7tPV@N*Z#APp zk$y@{IbB^m0p3VJ`)!A!t;qEoe6sn9m~0AcgcW&2KlimYR3NF8MX~y3{)kMt_d?jo{zUAQfN0ur=va~Zn*gKDb;o2v4zYdj^1qlzz`rC3 zSRWNh!tj-a136J#v{zSc3xv#%;@D=iRgC>296iD#m7FDDPjX!pHN*SWuaqNajlkcu z!_}6H(~aa%A|s~CRtS(}wSmd49^fW&uU}^3a3fM{+vt~Rwu3e0Y!g}A1V(hVstQc7 zn6hVRcyy>TQl&>~-otD-FeJ9%fT)x=IUlf3BqcUcd+P@cj3AAa#0vhyF4ZNFEFsE1 zk^oT*%Z}&e{U>kf5N+xM|dw~2~RXZ(w^CY z`XbA8$&uC4;^a7{M&Gj)Io9pK^~GVjwp}jSAyLsDiAzFgkMt$8X$PkFOk$#pTpumpSd@b<_l~_i>O8`nfQi|7F&6;OAZc_FGGIpOXZW7GWz6DAL4F!_LY!MMt~=OfGa`Q#a;)8NyyW2I zt8K1`Q)yk>_mkg#kjWYhFw zq` zh^OGqk{b|9{$j`Fc!9lN(?0LThtK1SugqMWn|);kcGoK_lXEj;)3Zv)-MeYJu30lv z#~3xy#tg|ZuS}J*Ed+ZPFy*I7r3Wv*D)FXWE0JS`2v-_3?1Z@=;(v3tD^&+Szm4hu zy7%_I(^Co0O)3=~(m1Z_3`s2kSYfB- zN*+2Y{=;!9aR;7sE{lhhrGtJPg4a7WZq#`MLB0yLh4 zk}7mhUr)lIty(IPN*FuPDX-J$-_eT;bF)iRvy;*r+rA5emkQ~=Hr)f=rBqjiJfR+g z?+Wf_Vr7Q>a3%HXkWE6-*tT1e6h>!mNmAj2K=X5pOP3a=78L^N`E<`+X%te~bQIFF zCL69@?44q=I>wEjS^=GVQ~OUnA^>+eVNTomhM8mX@(em0l%CH%zKwe&Y)iM#XV0j! zD`pg#o^z|DKvZg)j=qXWfH#&~)Dy|nD4SRv7}lI&>mb_yyf~XTFaAO|_eZ1}FDJ&A z_)#J`1=5aE3`U4uU`p-9j?Hf`7c-yXc(8)z*Z-xbOidTw4lhj&zKc23uJKFBGjpe4 z(y7UFcSA%oOlFchHBufO7PB0m1>2@Mfqz_`F42?9YEw7BN6@6)F6AP3E979p42o5N z@N;rOje~a4iI_o>I6W8Uiu@Q!Wa%qqL}dy8&(F-`I~DP?v52G65Oib*60WZ5%W{8} zHjk@cs7UuCPa9)F&;d+}qhFAiqMQ;HMI*l z0xeWIDYkr}!oB?FT|SZ>`3^D;6XgOhOMX8DB~?B$CSQ%2p6)?+`=QQO#XOj2BltI9Cl)IxtVvfFf3 z+MMP(Uh5X$Z!U2nEQ$tMW^6b7a4YemM$1F9g{`chZpOBBNuzHt3E&YSiJhe#VN8it zUxo8Q(F!o>eEMCU*38B*HvlseLo$RA5?$*|6=;M%(5Rgv1^e~4W=uiyiU`?B_PvKXEem^@zHaE-^uu}(+ED~T&G8K0Rj=)s zUa~zjqN`rh*IvgWziFrH=;Y~uD{#ueH0ML;^+!>QVI5bUu=xk?tTjgm#<7&GpNPEM)G<7_zJxM|lS zClU###!BlPF%wZNabVa%@ae?d zbG;3wxC-So+I-C_(5B)+ZPgBOl8Dps9G_B?SZ55Rx-yHf5m*~(w`c4T04YAho&Kps zRVpsOYpEppJ;X1SjJwxM00^P9yjM);QmC9>NDBS(@lLZ+A4^?ko$^|L->c&<%QMfC ztM{1=+l$X`+BMxv`oV#6d6+!i>v^QR@g$Fa*RT;@92uz%Uq0{puMLkb4^Or#*3iVN zJuw$utF61-Z~4PBV++$`ljCWx!swy&K;60d$KkJ&d_t<$laOSGXuhuZQ(p76EVA)h z7C4ua)8wJo%v#O4)nW41GRGT|12V#fypR@If)t>5;H=MG5c7mSErF{-d&mJR%Co#7lML zquFw@U^y=Gi*U$_94_$Ts`WsJix@%xMsDRjo=qP`ZplKY)u7!kYKkJaNHK7jkGdYq z%e!uGC0Xy&vLZs}d|O`5C~{Y<#1QS6me*2SkL~UCnn4_z+Tjq@UKu0Ll01~HwdvH7 zwjPlHb!w432XjBaVli?{+zn$z0fkn!1Pv&H6YB){MeAa$_oG?6P*|8^ojiVqC%{`B zI5|i-E)R%Kh$MKcBtpExI=Y+T;)ZsWvUc%!iVllZIv5GBXFNCe$z*bscj6|pOR-gR zMs>EEze%edj7hgZ!WI|1pcv7c{NpvxCM`*q0&M~xh@vV9Cu{dFb6(4nIj{F{oi?vr z3Y=4k+s+Bsj3Q$WcM2@}t8ZVHD7l3)a97=Y>gP_G;o)0E@#$4M8L!Gw=6dM#+*{po!cJx5a-bM4y}Zno2s;Tr zls6;G!a)~=*|dYMqHzY2SGmfcMCa0ZmxvpnxPdB%YKK*W0J%P)RkO@ej}*Pb#gnky z$WCHyc{7t-HoKU^+Omo8Y;sIr+1A-!axc1Ql$x*F6012bTQag>p32REh`bDznVXzX zXKfkeq|}~A#$>Z#LTXEmKxp#qP8$3)O=USJ)se#s{@_*f5A5cg6E4Wv4;W+QXNjS#GB#*s;M>6G`B_#VI^d61&1do?H>A zWa}bVmOy!GqR&i9&?i>2r9DogBrNdSXeIlPJMO3GCz%UMgLk5YQ>CRF{>GN+LF==w zM7SKU9-rU-H1Mw|CEhqAf7V6MkL{Z8ulEOAMzJ_6{u&E{{@7o)y$ff~WP+tS@4}fg zx<+sOUKGbpp1#>Kw{R@^Ml0CDk!0*(s77kax*m~W|B}-}p5*lR#BPc#U4lo-P{~d2 zWNK=XeU9$WR_95i$de_Io87vw<$;Kik*`FJ8Eu~KDHpSXl%GWE6lv}TbVL@)>gDdo zjLK`{DO`fe;w`1kNChJ!a7Qf<*Fxmzq~ikZUAc$g2VLHu9cH4?3mqx6Kn~NTrr{`= zEZY2p7xXA6u1;T{8lRiHlG1(jy3PiXSfX@b3~R1rZ}N>!Yc6Tz{f|U~l+)^?`Zd9P zdotfy)oFPQM7E?@w>Q)u8d0gH?w_g_^Qh{(1y#xVB{hw;V!vs|@J3m;jb{jNpgde( zb^T4@idLtyDc8B>gb7JyNJtjnU$=EH>pBhPu2P=&{FPQ@hgdYdyQ+_BisoeTDWcmA zXbG=#WR;@PhA?oQ0Q&`U*pW*xY)#K=8|@-1yeH~&20?~!qHV#gm8HQi5B~;6M$etA@~1Sg+>T|x z{8j-5s7HfKX!n_2q212D0TQ14tZ)m6cY=~;;JicV!JZQd@JFO#jE4=4-xZ zEDm-?OHog9>_a-c$z{DfHTm4JLmq*H4AwXm#j8UAqpobYalmHBK6mFvE zA(6O)5JQq0WRDl_7G&BG6UrWAj5$GMTUdnH)@tJ@W30d!8({p0H#T{2NazS->^{c& zx^PiM;TR5T9L58M9u4iAEjx;fu$6mIl^WP~xDteZ;76v5vJW%H-Y?3=8%8=PyN9tt zH!h*TwGyulumLt>OrRkK%zw94;`{cN8vlyACkc+x-H3Kixjr zBZe83@!p{wsQ&hyJ9i!u)#LpT(b4T*gdb$L=|YSLl3c#)SX(QN&~F9E-NhJtT;#?Z zo_o=FG^IPy2RK#P9u{(F}u$suMH)De_R%0`jC%APZdpmm5!&u)Pz#82|tJov> z<1svBJAn}FQHH?u@8O)VoQ?vFqLq<}L&NwRzX|OP-^1u4=gr&45c@90)aK^t?d3ArTKqkBjdE+IP41eNg*; zzQ7pH*LMpbqHTmB1t7;Eutp*vH0-&+qL}idG6;<^c0m;IT!FDm;v4Sf-zC2P?9QD#FNp6u zlzyi2RmR?6?3d~Ji;R7Qv9B>!_$9^)Utz58HYn{jbPoq%CbmWFtQHo{%?8Xvw$0p& zW`LUTP8V@_Jap;}yLfeM7A{A(F9vt!pcwQ-X+aLSribm%+^kGAUu8wdRn}haOv`jZ zC#z1QX?i864w!-uF9`VHja_TWZVH7**uV=Lb6;`4+xaJ-{}+vfkNw7{zWcy$4E@h zLeta{F>wG>3*b!`%9xDtf26-`JZrVW(Dq_?%fPv@hFv!&H9R;x*vmf$h6aWXVBdVZn!6Y~`S6Tmg+8p!jR`*t zd~UsPoUxOSqmi1AB%DAEeb=?gQs}7Oi55>Uh_yV?LXrgELn2h>Pq@ch8ocxh_9 zG&63@Pfx!*WK1tgU=46!-F+znVCM%0$^u{`<&kp$*p4j#&`wNyvF&C7b{Gw<5!qv| zN+5K;zx<(m2pwpH&<7NR%J~o)8Y+*!Tzd88(&WonAXkQl2G!r>O_aC5cy{d4JTAe3 zgOB=i0^0^T0N?UT6nsZ38Th{EF5BN3{71Cjr{Q1jFQ3eZe|H=F#})j~_YdZgavp|` zP0UXV2v<0S??EvNh69qQC61olu??M}bcoMOX#kz?9~@KwIzgQ8jXR9}*d3N8=!0$G z(n)b(x8RzdoD$H=A?W>;k^pNUgK)V6rnjIotd1d>a=n-Z*}&K7bQUIy6xTbX1E~ws z!^mK@jDLCXxh`geiOJH!+>BvJ!1R|5j!FB@OzeNV;?eQmnP@e}>Jq){5$){Iv7Yvh zQMb15*rXG!)0R7*@3fBXH*>0EdBwMPOjLEXFjIMeu{R3raaMPt^%4&sC<-tYQ5xp| z0z1H>dM!1sy=~opB{E|(7hfgVQQp}^RaSz2x?{z~cT;>+uaQXb)|Gw`V=Y7x0P``u zx%xPz0C^Paa-hjU>NZx{fF-TJvoz4B!|DKN0GbcSbVn+~Wym|)pQ>Cf?5+mtuwFS4 z;9Cbu^yRH9{hkceUBU9mU%*mF`n!VV(Z7JD4$FnRVaCVWVEJCb%eR|k?}i<}mF3?h zor~$M6GTTkOm9|ddOO|;q9b=8Cofxa1=evGkRoHT}3=K-;)!q~AM5!RDVTR9}c56QH>s{=f2b>NUp z+bzn2O8RSmGE#@O^dJq=lEnX{O16qcmr6MzS zGb}F-T^R>ej236#QYAsDBVtzTQr)eGHj_{^!!ljll*K})j$>e@$g+bK%Uq#5m2ker zPZ|#xC5ikvkh#&@BqCI$q9aK-Kh`MoKxbvGt@@to05!_>TXmTPJ+hji8QYPy+K{35 zA(Y#mm7=W(2W(J3ekZi|2{u#t9|gw#XMwRlF0hjnsqzK3<@ycBlj!<{$cZ<6d_n0B zwI^*b6n+JI3vIk*xeVQ3T%4apiXJgN%{d9(Fdp4=@J(cJB$s zXwL+Hql@)5E8wS7MF|8?3gwQq&&hD?n`q%Hen8`+;(@DLyzJa}iTrqf7nesr(#8JA zojZ5__|Ba>4>R_u0z1rRDvt{4c^hM_huvnl$NU&$1>9Nw5T~3z_71?pz~dxiy|?f5 zF&lqi$E5H8cBdXtV1pX`na2?e`LBm}X5cBn@j*Ojze2S+v|V#cbwvS&f+YYzb<{zQ zOQo9Q)g4cv2KJBiXl|D+GXp#HSl2cqMX=eDIcQaL9?j(C(JPUi3{JKL-b7VGwrx?X z=Gkh*v#}etSN9dIfHJTiQf!2P=0xklB`7YJ2M>M%%3`tA_hC}Y^6j3ZBK${skp>%H zx8GpwRmRvqXN-N8G4=tTt6=df>Iqg~77X(>#@I8Av2S6FeV8%!ZHzJOCVe|&?C&#H z_L#(ID1C}Yzi z@*gqQ_sA6ycufSpSG<23_~eV?9vAN?#rrADD_uCN;o(uXH>ixd zR>Th??S@(Rqfa8)C-C^k2%{bGH{i%t9hLn{hN`Bi#%hFW~VWJl;)O4kTN0)-NDr6a{(P7Bqr%=kYj) z$1ome@c1S?p2OpvT6Z61?Bs|0`>}k-LB`V6*_RhzSzMZ_mdpHme0dSy&=Z!+CFYBee3vmaBqMj@1k;*NaPzmtOK&&9E(O)p2cHBQJ}^T0@2vL&T_+ z5wFp;i%m0%vpsU{VnkM*N?ZiM8fFxPKFX8jL*{IRX0YaX4HA{fZ=;NbIGc{G`L~iH zu@p&1TS2R7H)Zzr_%+*faZo z5D&d?npU8#TG584X~njybPBREbiZjwYjmhp2BHYhjDu#NsEvxC5o#*}IvCH6OX6^O z5mzY5lE4>aT%tvw@{uD{_<_MhkX?(5DZLR!PDZRcxO_~OjsD9RFCjd%6v0jqpUdP( zMKw*Yk+3QNS>@77ONEE#rmS4H*9khb7ZJP)6rmpq1>?y%vWerbvI%IxezIu|l%wLB zTXuLp2>sYs<16F%{nlx&BRfW+acC<*sfze_+dF74ah4RO#S-?&>u&_|J~kB&v=jrbVEdEp-OFe8moRsZZi88jCC_fPv$0d zv1V^ioN1n@KG90&kHxA!7ML(JP@;oju Z87MlD6OnMHLmCQltq74OwnIoQ5>gpZ z2Tn6;ro_BVDI&qDRg9Z~npAU3sYRihK{F8HrC15K&W(?fc+i;E7t0US)C#Fdi&{0k z*o;&xNF^LDHJU;3hVLi@0sGK0CDKg>?%63a(+-T7WITA|hxbw1KH?SvnV}K{Sd4Le zPh`o~8ahF03^Mpa(U}p*v>Qp_=}=aXQ$m*LMAwLW)EdD?;3{S%Mu(!@I&YhfX#$!Q zpJE8vjGPjZVGwwu3g+>COEE;9rBTf~?q(xXOP_2cbytEz;Ebv_y*R=MNt9y;>v>*ir%#9p`S=qBS#2W?W1_QL_f2QZ*IAY1FJq{C-JP zi}y=>oAe|6&^2r$P&G;>iyUc(gM)iq2aF>@hu#~xe*Au%PdY;C+t^uOoEgWFq(d`{ zm*-}t&>{HdP!c_08%1lyAapj&*iKE})MVdUkDS#M)kjg=1PMVnUQOmvKoozs$>SKE zI5byb)hjkEB(TvG6~%S73Q{0-igTpp72b1QmLPxmKUptoVZij7-D&ASm_zx2LB~)|Eb1XNb zT|o3okXN$e44YgW93bIM6`wA0)JrF-#JBm!# zX(;jo>|{iS4D~#b=lhBpL7$s(pfvz9mn_Ay)Km+>Q3Wf8M(q=Ak-eud*K#(sLaBbf zE;cR8j#OfRMnqVqwWdI*W#C(rahi?|NG<%yRQK)63T z0HWyYejB#RdKvo=a{M(sz6FmDbBr9gn|(2TUb^s^oZ%Ypov1F_zOHRChv6 zher{cn9C{O3VCi(=O&q_t&AQ%XeGeUc6M%k`^*wk5e-`l7{U+Q;#?4?g zDp_U_HBFB=5w0JTb=jy(R6)&>h*?5QqFB>s0>>j5(nP6K8vu~w$ED`YI4;#fe_fl6 zu%z+>+areyv~rYH0U|O+*Ro=rsY;7lHO|iTQzBR{9i^;#>UF_tMwbA-8ZC^x zh&1aPb{ON)^@EaE zab4EfOP5wA=4LNWU!oJyJXO*5HfWCkR)Ziil(m4e4poPS%0ojc>(%MSrK#DxtT3>Z zSr?J@_&|BIf1rH6f8hN2{_~@%h=r+{xuvPRBBYmh)V@Tu^FuDk+KYzI%uVKIOar>< zx4f7R5`lOmx#QgsZT#2rP|e%nxb)Eu@PcKdQKFq~QDzQM^ZJo)PI_+o5ixRj!wdXi zffXtRcJd)n5qD|8HCfR>ft@^Ex7Ndzz>HVS(O0Y+3+AXZT)Xs&J2pJ_Vl)%nczL99 z{#v=fPWGBj>|S_osladzFU$nM4*Lu2r@sKqq>73up! z#KDL0E$mv;T_Qc3LS-(>cmc#aOrbbGgCE2c`F)wb$%%tJ48^BMvTcO*JDD06PIpSv zg*2bV8K^EyUiDVpZd(C^%eMkAXxep0sldR3RA8HU1r`(9k?(HUVacrP>Rej3%BWR8 z+=T8wB)r;*CjDcw8(OQCg=bW}LFD8hxpv3=szBAceAV2^RpqEe?LGjS;y z8te!8nytvOQaU|!JBhjJM@4cQAjVW_MtMd=*CQ(^HcgcxU35!3J(-Sac8m!-#-M+) zCD8sP4Mj}RZouP9F*YU9lPH%-{aj_X)S%hJ84TB+b9MS9#sWD%H@gG4udE}=MTL}kMeliB0L zjEy!UN-IltQv?%{$i7IFlyS)>9=MDwEWXuD@J_EKNH*eRdK}wsu9z*Q8v!GTno)+P zA(XY6!?GRxPw6#+3d1>O+OUQeM5aUK;#hLiP0$=fD}$pj$S$h0(RClXBgI4@xN05=d?E4RrN9G$;y$(Bt`S6D5X#&hGM4!st(; zXG24U&zDHiJn&B2hLSA-Sm7}vE#veGM+bQK7G^51GxkOodzfiLNI#v^>J+4iD0bIbh{tEW%;opI=!a8Gx4>MNyAY4$M{T&hY;{>0M?`&w@>WuLKZgW| zM1pi{-$WDy8$jlBsa&5&)OU!Eq;vfwqP|l^eI8CPRY$%EIIp6#k7G-zYoK2u0nzQx zAi9C*FLES+h6I@@_Gb~hreb@hJo3Dg8sIM>%?(O}D`iy0KSym6J^2Yyw}dg3{_{xj zQIX>3c=fnKNmc&~Nbp^Hf`g71wBi(4ei4bjM(Hrqq-U!?Yso?N6y%Ch)kl%{4fcRCt4PQ;Q z;nxuLZv>1!n>QA}jugKuQv6y@8-4=`eos$uC<-mlOb^CyBGvE9RH-(6y}b>Y!T2q` z4PVb`1ISIaff5|5M{%|dpgh%vuS4WCUu%WR>=f${{P6DMmdt(Kkd%df9x5~}Fkobd zAKo9}>4-DXto#{V0u22v_G$WCQPDP|xLE1OJ>UJCj_dewKUv2@?S1?u3NV%zjVUvt ztC2E6kbkjL!E<6SmNcY{u^YS*^uEE>%e0paJ8XHzKyLY=-v|dS!T}-Q!ow=yB&7J0 z(1^l~9(RO~t>$CW)U3Gf`7v!dqgS*_(AuMKXJigV(MdTv46>pfn3U^ItQ$lJNZ!Y~ z6JfM$)Fb4o)^r_H=?wsbAZS0L0OdhwZ`fgEL$P&hiw+~HYyc)dERtO#V>!teCoQk8 T>c?`IhmtOCwMfS`W$XSA2&P)i literal 0 HcmV?d00001 diff --git a/MikroNUC/20260816/20260816222001-Config.rsc b/MikroNUC/20260816/20260816222001-Config.rsc new file mode 100644 index 0000000..d3edc91 --- /dev/null +++ b/MikroNUC/20260816/20260816222001-Config.rsc @@ -0,0 +1,5534 @@ +# 2026-08-16 22:20:01 by RouterOS 7.23.3 +# system id = NmJcEM+8XAP +# +/caps-man channel +add band=2ghz-g/n extension-channel=disabled frequency=2422 name=2G-3 \ + reselect-interval=20m save-selected=yes +add band=5ghz-a/n/ac extension-channel=XXXX frequency=5660 name=5G-5660 \ + save-selected=yes +add band=5ghz-a/n/ac extension-channel=XXXXXXXX frequency=5160,5200,5280 \ + name=5G-5160-5280 reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5180 name=5G-36 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5200 name=5G-40 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5220 name=5G-44 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5240 name=5G-48 \ + reselect-interval=30m save-selected=yes +add band=2ghz-g/n extension-channel=disabled frequency=2442 name=2G-7 \ + reselect-interval=20m save-selected=yes +add band=2ghz-g/n extension-channel=disabled frequency=2462 name=2G-11 \ + reselect-interval=20m save-selected=yes +/interface bridge +add name=Bridge-LAN +/interface ethernet +set [ find default-name=ether1 ] disable-running-check=no +/caps-man security +add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \ + group-key-update=30m name=xs-Sec +add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \ + group-key-update=30m name=WPA2 +/disk +add slot=ram tmpfs-max-size=100000000 type=tmpfs +/interface list +add include=dynamic,static name=LAN +add exclude=LAN name=WAN +add exclude=LAN include=WAN name=Internet +/interface wireless security-profiles +set [ find default=yes ] supplicant-identity=MikroMIC +/iot wiliot servers +set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=P1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +/ip pool +add name=dhcp ranges=10.30.30.150-10.30.30.200 +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=test owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \r\ + \n#:local ScriptName [ :jobname ];\r\ + \n:local expSrc;\r\ + \n:local FileName;\r\ + \n:local FilePath;\r\ + \n:local DirPath \"tmpfs/\";\r\ + \n:global WaitForFile;\r\ + \n:global IfThenElse;\r\ + \n\r\ + \n:foreach Script in=([ /system/script find where name~\"Amster-GlobalConf\ + *\" ]) do={\r\ + \n:local ScriptVal [ /system/script/get \$Script ];\r\ + \n\r\ + \n:local expName [ (\$ScriptVal->\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/729/f42d43ae\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 00:05:03 01.07.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ + \n\r\ + \n\r\ + \n#:local Script AM-GlobalConfig;\r\ + \n\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\ + \n\r\ + \n#/usb1/mikro_bak_rsa.pub\r\ + \n\r\ + \n\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\r\ + \n\ + \n:global MkDir;\ + \n\r\ + \n\ + \n:local FetchFile Manager@id_rsa.pub\ + \n:local localDir \"/\";\r\ + \n\r\ + \n\ + \n\ + \n\$MkDir \$localDir;\ + \n\ + \n\r\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +add dont-require-permissions=yes name=awg2-webui owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + put \"Download image, and save him to usb1/tmp\"\ + \n/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-chr.tar\" dst-p\ + ath=sata1/tmp/awg2-webui.tar\ + \n\ + \n:put \"1. Create veth interface\"\ + \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\ + \n\ + \n:put \"2. Create bridge and add veth\"\ + \n/interface bridge add name=br-awg\ + \n/interface bridge port add bridge=br-awg interface=veth-awg\ + \n\ + \n:put \"3. Assign IP to bridge\"\ + \n/ip address add address=10.9.9.1/24 interface=br-awg\ + \n\ + \n:put \"4. NAT: masquerade container traffic\"\ + \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\ + ade\ + \n\ + \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\ + \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 action=dst-n\ + at to-addresses=10.9.9.2 to-ports=55055 in-interface=ether1\ + \n\ + \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\ + \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 action=dst-\ + nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether1\ + \n\ + \n:put \"Create environment list..\"\ + \n/container envs add list=awgui-env key=WEB_USER value=vados\ + \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\ + \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\ + mboLs2325272931q\ + \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\ + 3\ + \n\ + \n:put \"Load and start container...\"\ + \n/container add file=sata1/tmp/awg2-webui.tar interface=veth-awg hostname\ + =awg2-webui \\\ + \nroot-dir=sata1/awg2-webui layer-dir=sata1/docker/awg2-webu/ envlist=awgu\ + i-env start-on-boot=yes logging=yes shm-size=4M\ + \n\ + \n:put \"Start...\"\ + \n/container start 0\ + \n\ + \n:put \"Verify...\"\ + \n/container print\ + \n\ + \n:put \"Should show: status=running\"\ + \n\ + \n/log print where topics~\"container\"\ + \n\ + \n:put \"Should show: AWG started, nginx running\"\ + \n" +add dont-require-permissions=no name=awg-proxy-go-Client owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:put \"[::::::::::::::: START :::::::::::::::]\"\ + \n:put \"\"\ + \n:put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n:put \"veth and network:\"\ + \n /interface/bridge add name=docker port-cost-mode=short\ + \n /ip/address/add address=192.168.100.1/24 interface=docker\ + \n\ + \n /interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n /interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n:put \"add config-client.json\"\ + \n/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json d\ + st=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n:put \"Add container\"\ + \n/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interface\ + =awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-proxy\ + -client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pro\ + xy-go-client\" mountlists=awgcfg-client\ + \n\ + \n:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n:put \"Add user:\"\ + \n /user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n:put \"Add forwarding port web-ui\"\ + \n /ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n /interface/wireguard/add name=wg-awg-client\ + \n /ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add comment=awg2wg dont-require-permissions=no name=awg2wg-uninstall owner=\ + Manager policy=ftp,read,write,policy source="\r\ + \n :put \"Uninstalling AmneziaWG...\"\r\ + \n :log info \"Uninstalling AmneziaWG...\"\r\ + \n /ip/route/remove [find where comment=awg2wg-tunnel]\r\ + \n :do { /tool/netwatch/remove [find where comment=Monitor-AWG2WG] } on-e\ + rror={}\r\ + \n :do { /ip/route/remove [find where comment=Monitor-AWG2WG] } on-error=\ + {}\r\ + \n /container/stop [find where interface=veth-awg2wg]\r\ + \n :delay 7s\r\ + \n /interface/list/member/remove [find where interface=wg-awg2wg]\r\ + \n /container/remove [find where interface=veth-awg2wg]\r\ + \n /container/envs/remove [find where list=\"awg2wg-env\"]\r\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg2wg\"]\r\ + \n /ip/address/remove [find where address=\"172.20.0.1/30\"]\r\ + \n /interface/veth/remove [find where name=\"veth-awg2wg\"]\r\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg2wg\"]\ + \r\ + \n /ip/address/remove [find where interface=\"wg-awg2wg\"]\r\ + \n /interface/wireguard/remove [find where name=\"wg-awg2wg\"]\r\ + \n :do { /file/remove [find where name~\"awg2wg.+tar\"] } on-error={}\r\ + \n :do { /file/remove [find where name=\"disk1/awg2wg\"] } on-error={}\r\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n /system/script/remove [find where name=awg2wg-uninstall]\r\ + \n" +add dont-require-permissions=no name=amneziawg-mikrotik-c owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\ + \n:global imagesPath \"amneziawg/img/\";\ + \n:local Image \"awg-proxy-amd64-7.20-Docker.tar.gz\";\ + \n\ + \n:global DstDir \"sata1/dst/\";\ + \n\ + \n:local Url=(\$GlobalScriptsUrl . \$ImagesPath . \$Image);\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n" +add comment=Generator dont-require-permissions=no name=awg-VDSina owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# ============================================================\ + \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\ + \n# 2026-06-30 22:08:12\ + \n# ============================================================\ + \n\ + \n# 0. Check prerequisites\ + \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \ + = 0) do={\ + \n :put \"Container package is not installed or disabled. Install it and \ + reboot.\"\ + \n :error \"Usage: /system/device-mode/update container=yes\"\ + \n}\ + \n\ + \n# Auto-detect storage\ + \n:global awgDisk \"disk1\"\ + \n{\ + \n :local usbFree 0\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \ + } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\ + \n } else={\ + \n :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\ + \n :put \"USB found but not mounted. Format as ext4\?\"\ + \n :put \"Press 'y' to confirm:\"\ + \n :local key [/terminal/inkey timeout=30]\ + \n :if (\$key = 121 || \$key = 89) do={\ + \n /disk/format-drive usb1 file-system=ext4 label=usb1\ + \n :delay 3s\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \ + free] } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n } else={ :put \"Format failed, using disk1\" }\ + \n } else={ :put \"Using disk1\" }\ + \n } else={ :put \"No USB, using disk1\" }\ + \n }\ + \n}\ + \n\ + \n# 1. Uninstall script\ + \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\ + \n :put \"Uninstallimg AmneziaWG...\"\ + \n :log info \"Uninstallimg AmneziaWG...\"\ + \n :local prevDNS \"\"\ + \n :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\ + env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\ + \n :local storageDisk \"disk1\"\ + \n :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\ + ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\ + \n :local prevTmpdir \"\"\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\ + Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\ + \n }\ + \n /ip/route/remove [find where comment=awg-VDSina-tunnel]\ + \n /ip/route/remove [find where comment=awg-VDSina-dns]\ + \n /container/stop [find where interface=veth-awg-VDSina]\ + \n :delay 7s\ + \n /container/remove [find where interface=veth-awg-VDSina]\ + \n /container/envs/remove [find where list=\"awg-VDSina-env\"]\ + \n :if (\$prevDNS != \"\") do={\ + \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\ + \n :put (\"DNS restored to: \$prevDNS\")\ + \n }\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n /container/config set tmpdir=\$prevTmpdir\ + \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\ + \n }\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\ + \n /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\ + \n /ip/address/remove [find where address=\"172.19.75.209/30\"]\ + \n /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\ + a\"]\ + \n /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\ + \n /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\ + \n :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\ + \_} on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\ + out.rsc\")] } on-error={}\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\ + n-error={}\ + \n }\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\ + \n /system/script/remove [find where name=awg-VDSina-uninstall]\ + \n}\ + \n\ + \n# 2. Network infrastructure\ + \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\ + y=172.19.75.209\ + \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\ + 5.208/30\ + \n\ + \n# 3. WireGuard interface (MikroTik derives the public key automatically)\ + \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"4CHyNhbOs923/E\ + yNDguMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=14710 disabled=yes\ + \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\ + Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcY\ + QnD9N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=172.19.75.210 endpoint-po\ + rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\ + \n/ip/address/add address=10.9.0.3/32 interface=wg-awg-VDSina\ + \n\ + \n# 4. Container environment variables\ + \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":51820\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\ + 77.79:55055\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\ + 438637\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\ + 809250\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\ + 09079495\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\ + 12329741\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\ + l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\ + face/wireguard/get [find name=wg-awg-VDSina] public-key]\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"\"\ + \n\ + \n# 5. DNS\ + \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\ + n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\ + \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\ + g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\ + \n# NOTE: replaces existing DNS configuration\ + \n/ip/dns/set servers=109.107.177.79\ + \n/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina distan\ + ce=1 comment=awg-VDSina-dns\ + \n\ + \n# 6. Download, create and start container\ + \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\ + \n:if (\$awgDisk != \"disk1\") do={\ + \n :local tmpPath (\$awgDisk . \"/pull\")\ + \n /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\ + ntainer/config/get tmpdir]\ + \n /container/config set tmpdir=\$tmpPath memory-high=200M\ + \n}\ + \n{\ + \n :local arch [/system/resource/get architecture-name]\ + \n :local ver [/system/resource/get version]\ + \n :local dotPos [:find \$ver \".\"]\ + \n :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\ + \n :local endPos [:find \$rest \".\"]\ + \n :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \ + \"] }\ + \n :local minor [:tonum [:pick \$rest 0 \$endPos]]\ + \n :local suffix \"\"\ + \n :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\ + \n :local file \"\"\ + \n :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\ + x . \".tar.gz\") }\ + \n :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \ + \".tar.gz\") }\ + \n :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \ + . \".tar.gz\") }\ + \n :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\ + \n :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\ + atest/download/\$file\"\ + \n :local filePath \$file\ + \n :if (\$awgDisk != \"disk1\") do={\ + \n :set filePath (\$awgDisk . \"/pull/\" . \$file)\ + \n :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\ + \n }\ + \n :if ([:len [/file/find where name=\$filePath]] = 0) do={\ + \n :local freeStorage 0\ + \n :if (\$awgDisk = \"disk1\") do={\ + \n :set freeStorage [/system/resource/get free-hdd-space]\ + \n } else={\ + \n :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\ + k] free] } on-error={}\ + \n }\ + \n :if (\$freeStorage < 262144) do={\ + \n :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\ + B free). Need at least 256KB.\")\ + \n :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\ + cient-disk-space\"\ + \n :error \"Insufficient disk space\"\ + \n }\ + \n :put (\"Fetching: \$url -> \" . \$filePath)\ + \n /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\ + \n } else={\ + \n :put (\"File already exists: \" . \$filePath)\ + \n }\ + \n :local rootDir (\$awgDisk . \"/awg-VDSina\")\ + \n /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\ + DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\ + yes comment=awg-VDSina\ + \n :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\ + =veth-awg-VDSina] shm-size=4M\"] }\ + \n /file/remove \$filePath\ + \n :local freeMem [/system/resource/get free-memory]\ + \n :if (\$freeMem < 16777216) do={\ + \n :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\ + . 16MB+ recommended.\")\ + \n }\ + \n /container/start [find where interface=veth-awg-VDSina]\ + \n :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\ + }\ + \n :put \"Waiting for container to start...\"\ + \n :delay 5s\ + \n /interface/wireguard/enable wg-awg-VDSina\ + \n :put \"WireGuard interface enabled\"\ + \n :put \"Installation complete!\"\ + \n :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\ + \"\ + \n /ping 109.107.177.79 count=10 interval=1\ + \n :put \"\"\ + \n :put \"======= NEXT STEPS =======\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \ + comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\ + \_comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\ + address=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run awg-VDSina-uninstall\"\ + \n :put \"=========================\"\ + \n}\ + \n\ + \n# 7. Verification\ + \n# /container/print\ + \n# /interface/wireguard/print\ + \n# /interface/wireguard/peers/print\ + \n" +add comment="wg2awg GH repo in client mode" dont-require-permissions=no name=\ + "wg2awg client" owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:local Arch \"amd64\";\ + \n:local Version \"v0.0.1\";\ + \n:local Name wg2awg;\ + \n:local WorkDisk \"sata1\";\ + \n:local WorkDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Bridge (\"Bridge-\" . \$Name);\ + \n:local VetchMTU \"1280\";\ + \n:local Vetch (\"vetch-\" . \$Name);\ + \n:local VetchNet \"10.9.0.0\";\ + \n:local VetchGate \"10.9.0.1\";\ + \n:local VetchAddr \"10.9.0.3/32\";\ + \n:local Env (\$Name . \"-env\");\ + \n:local ConfDir (\"/etc/\" . \$Name . \"/\");\ + \n:local ConfFile (\$Name . \".conf\");\ + \n:local Mounts (\$WorkDisk . \"/mounts/\" . \$Name . \"/\");\ + \n:local RootDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Registry \"https://registry-1.docker.io\";\ + \n:local FetchFile (\$Name . \"-\" . \$Arch . \"-oci.tar\");\ + \n:local FetchUrl (\"https://github.com/vados-dev/wg2awg/releases/download\ + /\" . \$Version . \"/\" . \$FetchFile);\ + \n:local FetchDir (\$WorkDisk . \"/dst/\");\ + \n:local AwgListen \":44044\";\ + \n:local AwgRemote \"109.107.177.79\";\ + \n\ + \n#:put \"\"\ + \n#put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n\ + \n:log warning \"[::::::::::::::: START :::::::::::::::]\"\ + \n:log warning \"Add veth and nat...\";\ + \n\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n\ + \n:do {\ + \n:log warning (\"Remove interface: name=\" . \$Vetch . \", address=\" . \ + \$VetchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/remove [find name=\$Vetch];\ + \n:log warning (\"Add interface: name=\" . \$Vetch . \", address=\" . \$Ve\ + tchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n:log warning (\"Remove ip address: address=\" . \$VetchGate . \", interf\ + ace=\" . \$Vetch);\ + \n/ip/address/remove [find address=\$VetchGate interface=\$Vetch];\ + \n:log warning (\"Add ip address: address=\" . \$VetchGate . \", interface\ + =\" . \$Vetch);\ + \n/ip/address/add address=\$VetchGate interface=\$Vetch;\ + \n:log warning (\"Remove firewall nat rule: chain=srcnat action=masquerade\ + \_src-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/remove [find chain=srcnat action=masquerade src-address\ + =(\$VetchNet . \"/24\")];\ + \n:log warning (\"Add firewall nat rule: chain=srcnat action=masquerade sr\ + c-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=(\$VethN\ + et . \"/24\");\ + \n} on-error={}\ + \n\ + \n#:do {\ + \n#/file add type=directory name=\$Mounts\ + \n#} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove WorkDir: \" . \$WorkDir . \"...\");\ + \n/file remove [find name=\$WorkDir];\ + \n:log warning (\"Add WorkDir: \" . \$WorkDir . \"...\");\ + \n/file add type=directory name=\$WorkDir;\ + \n:log warning (\"Remove config file \" . \$Mounts . \$ConfFile . \"...\")\ + ;\ + \n/file remove [find name=(\$Mounts . \$ConfFile)];\ + \n:log warning (\"Add config file \" . \$Mounts . \$ConfFile . \"...\");\ + \n/file add type=file name=(\$Mounts . \$ConfFile) contents=\"[Interface]\ + \nPrivateKey = 4CHyNhbOs923/EyNDguMXJXdghL2I3UyzXPwrANVgHs=\ + \nAddress = \$VetchAddr\ + \nMTU = \$VetchMTU\ + \nDNS = 109.107.177.79\ + \nPreUp = ip route add 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nPostDown = ip route del 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nJc = 9\ + \nJmin = 105\ + \nJmax = 920\ + \nS1 = 90\ + \nS2 = 136\ + \nS3 = 45\ + \nS4 = 27\ + \nH1 = 472437748-472438637\ + \nH2 = 707808381-707809250\ + \nH3 = 1609078552-1609079495\ + \nH4 = 1012329484-1012329741\ + \nI1 = <\ + r 4>\ + \nI2 = \ + \nI3 = \ + \nI4 = \ + \nI5 = \ + \n\ + \n[Peer]\ + \nPublicKey = o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\ + \nAllowedIPs = 0.0.0.0/0\ + \nEndpoint = \$AwgRemote\ + \nPersistentKeepalive = 10\ + \nPresharedKey = RNvF7T1cg5tyXcYQnD9N5BEp6e20vVJQTv0GMjyvHU0=\";\ + \n} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove mounts list \$Env...\");\ + \n/container/mounts/remove [find list=\$Env];\ + \n:log warning (\"Add mounts list \$Env...\");\ + \n/container/mounts/add src=(\$Mounts . \$ConfFile) dst=(\$ConfDir . \$Con\ + fFile) list=\$Env mode=ro;\ + \n:log warning (\"Remove Environment keys.\");\ + \n/container/envs/remove [find list=\$Env];\ + \n:log warning (\"Add Environment keys.\");\ + \n/container/envs/add list=\$Env key=AWG_CONFIG value=(\$ConfDir . \$ConfF\ + ile);\ + \n/container/envs/add list=\$Env key=AWG_LISTEN value=\$AwgListen\ + \n/container/envs/add list=\$Env key=AWG_REMOTE value=\$AwgRemote\ + \n/container/envs/add list=\$Env key=AWG_MODE value=client\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$WorkDisk . \"/tmp\");\ + \n/file remove [find name=(\$WorkDisk . \"/tmp\")];\ + \n:log warning (\"Add \" . \$WorkDisk . \"/tmp\");\ + \n/file add type=directory name=(\$WorkDisk . \"/tmp\");\ + \n:log warning (\"Container add tmpdir \" . \$WorkDisk . \"/tmp\");\ + \n/container config set tmpdir=(\$WorkDisk . \"/tmp\");\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$FetchDir . \$FetchFile . \".\");\ + \n/file remove [find name=(\$FetchDir . \$FetchFile)];\ + \n:log warning (\"Download image from \" . \$FetchUrl . \" and save him to\ + \_\" . \$FetchDir . \$FetchFile . \".\");\ + \n/tool/fetch url=\$FetchUrl dst-path=(\$FetchDir . \$FetchFile);\ + \n} on-error={}\ + \n\ + \n#:log warning (\"Container set registry \" . \$Registry . \" tmpdir= \" \ + . \$WorkDisk . \"/tmp\");\ + \n#/container/config/set registry-url=\$Registry tmpdir=(\$WorkDisk . \"/t\ + mp\");\ + \n\ + \n#:do {\ + \n:log warning (\"Container add width: file=\" . \$FetchDir . \$FetchFile \ + . \", interface=\" . \$Vetch . \", hostname=\" . \$Name . \", mountlists=\ + \" . \$Env . \", envlist=\" . \$Env . \", root-dir=\" . \$RootDir . \", wo\ + rkdir=\" . \$WorkDir . \", name=\" . \$Name . \", logging=yes, start-on-bo\ + ot=yes\");\ + \n/container/add file=(\$FetchDir . \$FetchFile) interface=\$Vetch hostnam\ + e=\$Name mountlists=\$Env envlist=\$Env root-dir=\$RootDir workdir=\$WorkD\ + ir name=\$Name logging=yes start-on-boot=yes;\ + \n#} on-error={}\ + \n\ + \n\ + \n#/container/start [find where interface=\$Vetch];\ + \n\ + \n#/interface/bridge add name=\$Bridge port-cost-mode=short;\ + \n#/ip/address/add address=192.168.100.1/24 interface=\$Bridge;\ + \n\ + \n#/interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n#/interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n#:put \"add config-client.json\"\ + \n#/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n#/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json \ + dst=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n#:put \"Add container\"\ + \n#/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interfac\ + e=awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-prox\ + y-client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pr\ + oxy-go-client\" mountlists=awgcfg-client\ + \n\ + \n#:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n#:put \"Add user:\"\ + \n#/user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n#:put \"Add forwarding port web-ui\"\ + \n#/ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n#:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n#/interface/wireguard/add name=wg-awg-client\ + \n#/ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add dont-require-permissions=no name=tmp_print owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDguMX\ + JXdghL2I3UyzXPwrANVgHs=\" listen-port=21641 \ + \n :put \"======= AWG PROXY SETUP =======\"\ + \n :put \"\"\ + \n :put \"Run awg-proxy on your external device (10.30.30.33).\"\ + \n :put \"\"\ + \n :put \"1. Download the binary for your platform:\"\ + \n :put \" Linux arm64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm64\"\ + \n :put \" Linux arm: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm\"\ + \n :put \" Linux amd64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-amd64\"\ + \n :put \"\"\ + \n :put \"2. Set environment variables and run:\"\ + \n :put \"export AWG_LISTEN=\\\":51820\\\"\"\ + \n :put \"export AWG_REMOTE=\\\"109.107.177.79:55055\\\"\"\ + \n :put \"export AWG_JC=\\\"9\\\"\"\ + \n :put \"export AWG_JMIN=\\\"105\\\"\"\ + \n :put \"export AWG_JMAX=\\\"920\\\"\"\ + \n :put \"export AWG_S1=\\\"90\\\"\"\ + \n :put \"export AWG_S2=\\\"136\\\"\"\ + \n :put \"export AWG_H1=\\\"472437748-472438637\\\"\"\ + \n :put \"export AWG_H2=\\\"707808381-707809250\\\"\"\ + \n :put \"export AWG_H3=\\\"1609078552-1609079495\\\"\"\ + \n :put \"export AWG_H4=\\\"1012329484-1012329741\\\"\"\ + \n :put \"export AWG_SERVER_PUB=\\\"o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+\ + v0b9jU=\\\"\"\ + \n :put (\"export AWG_CLIENT_PUB=\\\"\" . [/interface/wireguard/get [find\ + \_name=wg-VDSina] public-key] . \"\\\"\")\ + \n :put \"export AWG_S3=\\\"45\\\"\"\ + \n :put \"export AWG_S4=\\\"27\\\"\"\ + \n :put \"export AWG_I1=\\\"\\\"\"\ + \n :put \"export AWG_I2=\\\"\\\"\"\ + \n :put \"export AWG_I3=\\\"\\\"\"\ + \n :put \"export AWG_I4=\\\"\\\"\"\ + \n :put \"export AWG_I5=\\\"\\\"\"\ + \n :put \"\"\ + \n :put \"chmod +x awg-proxy-linux-* && ./awg-proxy-linux-\"\ + \n :put \"\"\ + \n :put \"3. (Optional) Create a systemd service for auto-start.\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-VDSina comm\ + ent=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-VDSina com\ + ment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=VDSina-tunnel dst-addr\ + ess=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run VDSina-uninstall\"\ + \n :put \"================================\"" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +add name=manager policy="local,ssh,ftp,read,write,policy,api,rest-api,!telnet,\ + !reboot,!test,!winbox,!password,!web,!sniff,!sensitive,!romon" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=*3 registry-mirrors="https://reg.vados.\ + ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/caps-man datapath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + xs-DataPath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + DataPath +/caps-man manager +set ca-certificate=CAPsMAN-CA-ABE2F4E9EE17 certificate=CAPsMAN-ABE2F4E9EE17 \ + enabled=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=Bridge-LAN +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/container config +set layer-dir=/sata1/docker/layers memory-high=200.0MiB memory-max=4096.0MiB \ + registry-url=https://registry-1.docker.io tmpdir=/sata1/tmp username=\ + amsternl +/container envs +add key=AWG_CONFIG list=wg2awg-env value=/etc/wg2awg/wg2awg.conf +add key=AWG_LISTEN list=wg2awg-env value=:44044 +add key=AWG_MODE list=wg2awg-env value=client +add key=AWG_REMOTE list=wg2awg-env value=109.107.177.79 +/container mounts +add dst=/etc/wg2awg/wg2awg.conf list=wg2awg-env mode=ro src=\ + /sata1/mounts/wg2awg/wg2awg.conf +/ip smb +set enabled=no +/interface bridge port +add bridge=Bridge-LAN interface=LAN +/ip neighbor discovery-settings +set lldp-mac-phy-config=yes lldp-max-frame-size=yes lldp-med-net-policy-vlan=\ + 1 lldp-vlan-info=yes +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=ether1 list=WAN +add interface=Bridge-LAN list=LAN +/interface wifi cap +set discovery-interfaces=*DF +/interface wifi capsman +set ca-certificate=*13 certificate=*14 enabled=yes interfaces=Bridge-LAN \ + package-path=/tmpfs/capsman-packages require-peer-certificate=no \ + upgrade-policy=none +/ip address +add address=10.30.30.10/24 interface=Bridge-LAN network=10.30.30.0 +/ip dhcp-client +add disabled=yes interface=ether1 name=client1 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=*3 lease-script=\ + lease-script lease-time=10m name=nucDHCP server-address=10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \ + verify-doh-cert=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set reverse-proxy disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \ + webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=*3 type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/special-login +add port=serial0 +/system clock +set time-zone-name=Europe/Moscow +/system gps +set set-system-time=yes +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system package update +set check-certificate=yes-without-crl ip-version=ipv4 +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260816/20260816222001-Diff-Config.rsc b/MikroNUC/history/20260816/20260816222001-Diff-Config.rsc new file mode 100644 index 0000000..f0f1ae4 --- /dev/null +++ b/MikroNUC/history/20260816/20260816222001-Diff-Config.rsc @@ -0,0 +1,5 @@ +5389,5390c5389 +< set ca-certificate=CAPsMAN-CA-ABE2F4E9EE17 certificate=CAPsMAN-ABE2F4E9EE17 \ +< enabled=yes +--- +> set ca-certificate=auto certificate=auto -- 2.52.0