From ae4549211f9d416141c0677dce3721220d67018c Mon Sep 17 00:00:00 2001 From: vados-dev <192440777+vados-dev@users.noreply.github.com> Date: Thu, 12 Mar 2026 06:43:54 +0300 Subject: [PATCH] Backup for MikroYellow sucessfully creatd at Mar 12 06:43:54. --- .../20260312/20260312064334-Binary.backup | Bin 0 -> 181816 bytes .../20260312/20260312064334-Config.rsc | 3969 +++++++++++++++++ .../20260312/20260312064334-Diff-Config.rsc | 34 + 3 files changed, 4003 insertions(+) create mode 100644 MikroYellow/20260312/20260312064334-Binary.backup create mode 100644 MikroYellow/20260312/20260312064334-Config.rsc create mode 100644 MikroYellow/history/20260312/20260312064334-Diff-Config.rsc diff --git a/MikroYellow/20260312/20260312064334-Binary.backup b/MikroYellow/20260312/20260312064334-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..ea693bf8728d2b60c31ba421d129d19365f38fc1 GIT binary patch literal 181816 zcmeEv349a9_xNm*wn@24xdqDh5Q;SICOs)<=>b*BRSvnkO*ZX9k`39Ur5tj|RS~E%TIb+JXMJ30r5?%)ffNl$L)?QRtrMP^sK8tY zRWc1A9~93(v0+xh#(V9amZ-9A6IBBBw?=`LNV3b8B-(h30M!5}4QVy-Y#0b4hQBVw zjOg+hZKB;Hxc^K}2k$Jg*SOAFsydy#r=}Iw^Jh!@gRll<{d2%tg)-41$adO&Q9zYI z83_5}K%B~ZohlB5+LNXaMF{-_9}z-8mHTNNsH_7`1H|qiNl=^mP-cO-6fq2@3Nb~gL5 zvssNDZB4L~OtF(36gxst>c{2QpLBj6 z9tyaO#XP*T4sdDE`WSdfxt(_g$DcVU{>*yB#Lv_fnAhsjEF#o^I0MWZp1{E22}~TG zFwejf<`{T_xCKv`li>-IF+A(gC&&lz8)i^=M$jk3;a?ln}y4GKk;QeJd&^l7SXK(nBwq}{cGrU?&7 z6Qu_cFN{ix=vtUk0Q@yJpjikt(Ia#=3^C`z5OYJ1m=FU(8a+a9=*c`7rbkGx2UIaA z!T`@o#-K;cRy{&{!jQqRHw+oj{xGDs8xT4Wh78&-!w{Cbz6wKz`Uk_1q2AYF$iRFP zh747QAog1r(tj0(&~?aq1Kt!FkOA=!6hmNvK&M9r6rv|(S>X*P#&A6{SZnE#!CYI9 z3{N-KBmIU(2sNb%o6+C*=#fFw9ExZGK}!hcK_T-YSOCFO5M;oIOg)*LJLr)iyd&i7 z1g|?okOjd)J<`{!Lg-mN(lZP~&%?__5G>Xs{p8vRy#PO6gkT8-uR$TN>ybX{JVLAC z#~OIO4uUWA$iVD^*lq~+5XjM9Ju+17gE#y2$e=v{!Iyeu2>S|xgYe-S2o6E;Ed<{| z@Vy@C5sT1a`aA+Jk3tp4^vEzt%?-MSBJ?AC2GQf99--s#<0L?L3WC${^JhIWMEwG> zvk;tv-~|3lLm{;1UFvA-Dp;uMk{?;2H$KL2yft^jnUUpi20G48XJi?>YnN z*iZwE)-+TfzC^;81`sqfAcMIH#F`n9L30nz;**Tt*BelDnuE7wa${3DE{PkP#wD<> z(uz!OY+71cdIHO*W^!Y>1eQ0Gry#i8k^|z63@93%(W7YeoE}BjPRYo~OU=s2HDzU+ z*TdU=VJKQ(AdYrR{l(Gm>yZhBS%i?E&Aq>0#pc3(kIe<0L@lPEY|aF1&hvkY%`rYU z2keck4S==z-vdh{@9W_h#OoT+EG=gD!1D2uF~HE6|4$g&nx)cR7@FbwAL3@)3Yq8svwZsFbBqP0XY_RQ)9%u2%)m|LLAC3p}r0zynFLX3zI z8b#LkjD!$!VLd=4URZ-5F%BU#5h3&tLTECP-}DdxMHDQOLl835(<5YPXhq1NDM82( z8Ud3>19&$Y)L(Y^=>$=43PNMxjT@565O@$WSiK18=L!gwA*5eqL8u%d{eBLiu?Xo; zY7weHNS|7pF4o6Gwh2(m6h!8whY>PpZOF&|BM^#4Q{gvWo4>D`4jjlY^%?+mJvD$o z5PAK0)7T|g19UAggLVOCWf0@AM1y5>zq&vX(D8JqntMo;Y7UESRz=SS3NWf)!3r52 zDlmi6#VyGW$%^$=z%mz+{P?*D6_`U1S`mU8lf)p?fY7Yh(B?-HnGpoPF#0YmFs(V1 zz7JK>>TM?S&SnZ#(n61d22qQUe$TZGYbZjn%0g|M7MMZGZh;UJg%A@C-N~T(hI>Gd zR4fbbG7!=M@ak=Y1QxsGwL${;>!*75Lj`6lLP$o4@enFA0GSz>Srn3~P}8TRxd}6% zSEoZT4T6Uum;%8(2wV_AEfxpw#0p21YO^)16`rlBYEwfLsF=>F9*Z>JfGVRgg6$To zNAg-q71;A=De%lg1!gBg%oqYcE(J!?Xy{C6f&ij;7(zDq0fPbtmw|CXFbbh)oynY> z0_d^}R=Gbd8P+852dGryu!>OPFnKC*$g9Kw&9Gj9KcKxB8efakfD*dW0GXqqv}m1O zu$r3C*G#}`v+`OK@H$y}tqpjcqP*4xyiRRS%MS6q)_Y~aZL|y482TyH_o<#-E_y7b zM&53R1TtXTE?7r;++spnuLK1rGU(E8%gdpJD?G4navxTU$h4>m6g7d;g1!z5e`xCs&2^|6iX`x7mr-crp zS_m<)Ag_mjfg(U2ULzQQ_Yo8TyCUcV(lh~*qX{k6Mkrb@Iz58hDR}UxQ*R_F`v5}m zAKeE~wE2+p4`}nDov_hjMDN(V>6|8y$Zjo3e96v%ud?qG`a-n;J67 zGe|(9t1OLm3SvoVvE*hglG7%Zc-_25l$>lSFSC|X-dQ486IhpB;AMez3$llIdst7Y zz>?hsR&=tG+bXzOkHqpWm%RdibPDCHEO=lWNgjp}V?|h=0A|O)Oc99?(*Pj`bT6QH zX^arl6d?w5D{h3)=X54%g%A^i5CeRLBQ6Ytl3`7p2~EXst^XBd5g$_7Ln1AT_mXDx*Eee$sS3xBVJkiO_N0`-?3CcAo& zr9K2rAZP{vdLv=g2% zKfqImP&-JT06{;ZWy61cRqsf;YtJZ8@#y=!3_o(!f!G} zYPm(9l?*aWu7Y5&1{utoHH3WL(;)ql84TK@LHbz@5Zb08*`l>b4|tBzlJBuv@*TvN zg_#K5t0n1LLpmKoZQzNJCSFS*Z3Jw7CTzCNf&eJc{0PJzqXj+=Kc0YKwiX$}=0R*e z1V#oKIwnFJlb{_OgA5H#41xA3NHATCb-VblF+#rG=iz@jPBs5$aTq_YiDEx#$+`f-Eb@E&9tTSNGqCT_IVGYkL;3sjG_3iz%8Si$@DO{{`a9bn#K~v@MT*dGvDj>C?hd`ZnGe1K9G9V3-}6$NUgRq!<7ISEhP1~5v%V;i$+ zJR64rgA4(NY7^ZK5XqsbDmjE~0VyS4qY2Hx`ye}{}z~c)> z6zqn<6sww8@kSIDH*g06eDuIf&9lN$Fw!)V)m-ze+G<&oYo1kCEo(~6vw}^D8sOCI znxYA|9{iZ9MSId{ae1LfEP~siSPR@scAsz$7Sip1csvKhOs&i(!B#4z?^8ey2;og0 znjAfBM(Ey<0`qKymS~Xas#$}jBKJsf5C>eNq?JnZ1yX$Y-Auu}#C3+!ov zZ3;3{;)M-AH2v*T*zlVaGjKN8f)JhxR!_59AOr?YMfbvf9FT(s_T9A85z;TkQ$N!0 z&>%DuUSjfvN{xea>j5{Yg%I~0!%bzr=B6@5OSBqBqp6Qx(u`hq&OU+NuX|{O@bdi0 zTzIJdz8O8f=%mwXxkOVf&Jd~{pbKrF8Bl1d!_|Tx;SF@qDpLek7k+9R;A+^xxm;9} zI_6ZaJ(tYkzadTPq`*(JIXSg`YWpF7xV$nhA~Xy`qhUfr+D*}+7;Q1qb&RZ9b>#Jr zMvYlpdPCnbw*35y-;S@nH^2Ry<2`>a-uoN3slkLZO>?H3uKd#Lt4|*Ma_z6t?2Snu zB(MA^y-YgWEbiOQY^MxMLdca~@~Eu`KCwO#`DVe}T@rhgRy>ya?%B>anl10fb;WIK zS&w0=bULku3FYdAY6rAz0KY>xEyGlCE#XC7U1MFt<)5@3GJ9#y-KmzF&&Pg}xq9HG z-UHQm)RrL5s^P}=T=T(1f!%348VR*~ctj^xCqZdA-!k#zyW^ zvsuQj%io+m;_ZzZuGxqa%O*@e{NA_MK1f~mkAe*&ewljqqbpONeP458z}vIAw9l9^ zXX3Z+a7O=QL7RjNl^q^IC<4d^h;tU~bxwb~6yj6hnr)n!Pv9d8v{GAl;KHWLA(JGdR7QyXFv`CJ7fP?x{ zb+=2!yq(1rWM|cYqi!qA1&%s--C$1%a9C`jS!vJ!Q(YBHm?|I0RGH}r8M@8@{tN6B zA8C$KARquh{n=TG7PlwSB{)WMJ}$dK%T3j;;ihVyAzU^>-{FUWbGzlOTk0M4>EI`~ z-_O+vHQYC&$Be6W7$zhHaeN@3ZNxPoe73eyAt1)ojB5g~Yc+_djvf=sMG;oq#Frxw zNx+)9G?U3hI5V*3WRvRWzXOD+OpLnWObF6WW$GbrDif}m$}s3?ha>gf->-OS-||5# z`z)JNt9gT@{6a3G6r@hGyj!d+}nj$vp*Ekpv6a@i1}`2Xje4F@WmI+AKr5K z^A2P3j(%y|9~YLE6=2H zW1k&7z0^4@*8IShURzHNaU64PDUaB4llgV}*DG=&9yGt|ZF*qOviG_lZ8PffbII58 z^+k{EANfY+v@J_l-rsX#=Uu%=+RH{Pc_97C7ru=-;rOEAJ+nvcsQi3GLu-@mL)*S! z-g5Em^?kLv?O*kFmie37`_EmQa^RgO9_;dF^OO1U%Us`>bl+WF-}qwB@Lpjn&fMQ= z#G8|r&;4Lc8x5RrU2fs{YIDzwyUjh?@B5?<+|%YX9nf0Ca4B%S9)D)|0 z$~B%GJV7A+X#x8?7NxK3(I7JX`gb{tdiPs<`S5Dpm5K`e^0=lqA80pit8vqT?Uk3e zwR&*JM#rLYo}U)BT~+_hW3DAjKkqr~+4+w@={mZqUW@nUzglHE@MBofzU5mM4>epk zF#A~H<=K|&U0yl#hV5{%?aMvRtS2rS-#lG@|BH(sJlbyX)~>NM6(fFn0oj@Xeju3UigY^X~yo*mE_W z^7nxLdqDs94rsqbl#-m1!E-|Ul#~=pdWNOgoR%tZsTtN(A)|dtN^y!cBgNJ}EzMkP zHK$pN&8g|OjP}VXd`e2PC7m;+nXp6@jM0Kb6!Zg@lDLfIVu4FdYtN;aQ__k}yeU03 zjkmNM5?NKCRr^~ z89=1Uu8Tz~J&(}V+odY~60%fP306sp)Iu0ccXR)qh5ZV%3VURkQ`5|xnaj>H8BIYX zt(`h^6GF<}`NsCK1 zw^tUygKH%0C37Ys(cP!uM&Z8Q&20akg>1jVES4aM1q`v-S*G7*$UCn_6!(7l9gB2k zZoh#aIogaL7di0J3zvWU@~0znHb1rMVo_Ej*P%#sy-oO=gEEFrT;F&8n5XKF%33fq zwfXh&*WdZ*y*RFN;JFVkO?>89!z&F7cDxdCvGM6uG3QM&^?7k_>wk{@`k7Y8CfZhc zbDokvd9CW)@bE_mXCHZOeP+E&J#KzAI(?hv+wb$fJd|5GG4|HnlYPUY`Ys=NCO@zL zq=Z=?U2d@GnMNJ8CzrPWR;+E_wx;o*o(sBno3QMYMH5f#FX+Ff+p{aS>E172^kt79 zzo`GieUqO(pY7V!rEK(`p82cdM!a8V>aDyLtL*c47WeDsopmx?2U&|kF)oRlu z!@`rDu0K4fySS7{SW}s)+*IZvF4DK6*K?r^Q>9^$YEkc*K6$Hc`{DHOcWrK)zEa!r zy)&OT2@tG$#q?*JK6T=l^F+Pt*EdC;32ic`{cVyPRubH+Ys@ta)wc^}LPEl{j4!6) z%9J?6=tgm+T%7WoV`elh^>|#FNlB7Lb_FbkxURlbni(lHm4%13k{pn*+OUH4N_R7i zBCZ=Wy_K#5*PcsXlDZ^$hDj;LZBMRI8FsD{l)>uKxD>8dsG(>^4`#+KyN2PyLPJWX z)Mgk?9~ue~jX$RGz0+13m{ct+)%{nN+;?#8Q?GxTcz=hlUinp;)%GUWC2ra~AG|$&epteq znWM{+&!7SQ)(?K+$4$F09sa3a<#*RU+!W!SV$hA;^~?*2X7B7>&po(zkm;dxX3Bb- zqwPKGYzD_3=iJMit|u`KKN>dB%6vU>=8BBM7atp*=NR^Jn`u+_KlJ$H%b)M})5o)Z zNuO}vjq?MBWVj;^q6WKq%7<2_r>09jn`G3?sE9s zsaJl!Ja}Ggow)m+y0_-u8YLJ&cLq54G7QN^$g zfz>yEb2@YC-<#i{1>^!Dk=?Nig+o6=L#l5Lg@Q?ivSPBW+S?XhegY_7(#d9XQ}$mSMXYO$3| zGZ&|(ab{aeI$xZT%9$$vLUHxoLM4w~3VvoUhbRT3tCwEog^>pxu}!x=Tlmr0gblsNScytPOfgJvWs( zPo!ymy>?~Z`s*jWRBf{6Vtfk6+IK1x#Nc#}GjT-YXaa>}24^y5aLJ|=E`3Oi%J@A6 z!|KOB{U?8a`w3SEZ%dewa-sDt{px)WJ~{R5mD1Q3F8|PHW%tqt=lpbd?Jd{o?JM_0 zzW-aTC8g^U!!LGgxU}mNgW8vTw{mK`{*GPxnMq$C?Y}zYn*pb9>GB>u)z3k~Xr-)zQ z<*@~a77tk*_4YIWIQI3WW5f3E`K9Pa1iSTUWZkFU?$zbJ>jz_7IyU__=*5>_HH_b~ zd)fBTE8nz^8}{hX$6qRW^ZAW!r%(HE+pygS3l7b#sFPeD%@f;}bGQ06Up-^l7pq@t zvorV7=*S^c=MI)TY_HJffA){4ZSy1|&%$oiZM##jHRs>HdP^nPZk#uu$>qp{`$kka zPxXD^^4Wfqzx=sc2V-gMwR*jo)Y3b)yzMI!z53VX#p~j(B{`%QB0}OPIIaw9*Qfn~=}EWp z*PU3ta!Ayw^%vhvO@83p=7 z<{r<=nR?6eRqoF#ZZw{A{Ha$j$F}ai_3KWSSC$OP&&_|}%_BB$(prajmXaGWAu9^>y}*)A#Q~(y1|A2rM!-w9eMS{GrxJ~#e6d-a_h$v%$6ta|7r7!=hp9T_+pQ_8^>OXt(dxO z;LB;B^elXN^1Nx0PhY(6Vyh+x4D}D@57_bE=|NLW>-u}vbI-tk^f?R8wLQ#^8e z{I1V>IhGCop*^uqb2OPVvQ452^hE+5SQ`0zu+Up|@N<<*{T zroI2p8zYXzKV80l^jA{*AJz}MXS%D|k`wl)v#B% z-!j^5J{q^^^xSTajIiI{3R~F!lXJsgSbg@1))&scG46s>>>e^xSXDHr z6}Pc0I&#VB<@1>6Qi8hE=?K=&1#bM$KBYr!@bU zH7!;Qbv`z{-SQ(1+B7}xB^qyKKza-K$lTKGR;vZ#<4WG)}O-wqVt=71y55_O8wUrR$Ee zpAwI4X}iC_eL&>SPQU%L(e_abTfK1ft%UlEXIrkGHV-cNATqM}RQ<?_>TIW5vojX&+jQSclS(GP^;1ZAxXHZu#=B?sxgHaxS}3uw_LNC4 zuXJybJ@eOW>vi+Nh#QYjuK35g4uw0`f4gsAoh3t( zZ~Ssk%Hb&m9_HUi>?dgxVv_|bmUl9w1 zBRyy7E_X}ZIj>Fm;|~;}<7FoX9sXeAp3oKB^UBjAF4fCB_vt%_kB)sexzCdKCuAF* zoj&r%?DZMB?~V<>GXMCVI!AZLHfc65^XaZHU3ua_L4L=LlTYtj+;*5NcTx*5A8P~) zg!jpj<+xews!!@G!5yvCDgnw>o=X~JNR}a1tIf>c!!`5|&|9N48* zNTjuJV$sJhc0J(yC@;)W?-_oRVO?OQy1!FOlQcpB`uet2$^p$q2T zbEt4#Az2yp0d)zo;tMp)WvC2X5}r|@alvW?EB+>&fRq;s?$>O z?9hiFexz5~b01%i>zdJV=_8khfBF2`B+cx>-wfK5;ykeJ$x((WQ5$yc`EJtI$SxZ` zH6Qw^e!cjw`}VFpd}8E}Tc_@R{;Aw!Ck7tNd}UzwPiI?fT{G7YZ$9!1hq*L*-j1g4 zUwWZi`%4=S?&-bAHEHvahVOoqK4#}m-L*^R0Z)GX>Wx(km#^5{V{gSY`H{RsgJ;#d zI`Lz}o0A&4lVXZT{CqQQ@RLK%{c^+l#gwmBbgi4eH1odpAN+LU*vyL~JH8rsHgWmQ z?MGj~Jm%o!$_pJ_YZmvok@Wpqthc?>O5yJz^Y@TZS=%T}hX3nBX3pQT@87cT-?H!D zvhV*2*%#YY7n@U4tr-?B&Cit6v{X}aN(RTLr*I}d!(vJ+7OY%` zAei{n^y0J(vn7R3Pc{?XMlhKR?^FbnwP2?rBH3)U6{lHwAw#fnsa!JXJ8qMQ!4)H1 zix37E8CXj#t|W_H6r7%sk_#Uug;Q^rtE#HHQ61)$s;Vl*=jE?eRaI&9{TtW`8@a6s zPRTH+QV;py5Kbp>_ZG>Gwb|n0vwP;}_Ub<}XFz^VTR3P^hg2t8M_Rq26`V@KaZ{xP zsLfYGeQqpg@|94Km5mF~D+Q!g%L~v!-r7)mt+@Cey$k#I$|}euxk@G3(OF3Q#4O39I8>ja*n4E>j zr?kMkpOg4f)q|5l-x*n*Ti~s!!ScZAQvF$)2Q<#UJR#+7(Idc_K8jg?Mc9pCWfeU# z?aQIFdF^(JP7Eref+7UFj>W)Yk*tBi(*M~4>kmeF1poO_bWTuzEk$$gx&G3)FJd4^@F$*TJ$*tUyu_| zfIdUVJ@959LWbu1;pox<`1vISKwGr|5+mtY(=Kq-T>1Rv6J5VPjqr6G0e=9v%jHU< zN8FX$(#BKWJsj|yLE~^rbv#pGZiJ7@kb`$I*x$iSa(V_mf)IKXA@mqRaIykDK|BC3 zHXs-3zSoHm0+V4c91=&^`80Nd4V?rIu+8*f7r2*%(~0TyiO)LX1AWTLY6CfujgQbb zp{bOU^3CXPI5E$FyGAG~3VyVrKVlIwOonsw;rG%vtpR^+5W-$M;^9YI2=0R*5dvSQ zD<|Yr;6!LL1oa@mN9)_EJSHZn;`s1AcAX90_Tc=Qf@|L&KCzz$U*m&(o$;SUJ;q5* zux|kW2N>J`8q`NBPDBK!#a)4U^}n?jfb+>ths)=38|WGS;OV3%Eg7Ui?}p!l4=%#s z!HC1&M6s6-?7RUS2zXlr>F01D0Px!op22ZkGM{1LQhe^5fh|Rcy1d19(E?{G0TiP} zayYzB(L?>8z#q1PqR%2!U~Z0YI0Vnp*q>?RAoaokRNR$-yJqav!0(X6?=1q3KvNL# zhydOW4ycv88y8>*$Xqam#$hgajmEbz2rWR^>G=w97*1TDhoefupz#@A@Xrbi8t{cr zrQ=brh58zhW9cj<1Qx1}M#vPcUAdmE8jyOk&gb?1x%$$sYa_Zh3U7AHHCFfh)w4$$ zoEpNg2$>>&m>>S~gvuVzk2|#Yqs~h&9|R^I!do4pb4oCn$Q%$HChXY&!vsUu6dhwd zdwy%qKR?_*cI++T=_U2^?;rHwiM9zXwmmTD+iZ`16anCk3+KlC(z;zv{ozYD8P4tp zpQq6wWxQ3AU!wppNbw^d9u*Z0Qx9-26`}wr{0&aO!Z$z{OivhHZ4uIMZ9^CrKK)Gm zUE{vOaHijqcmH!IKeo>AoHPAoJ<)I)~4aG)LTOu!Qa95coO4#-yu5DLqM zXH)De9Wa8BDI94LL#`Txj4&e#F3InlUOBW3PepVzfQuOF$4{9*m5RO~VB+T&sKDF| z!F^NU{pCRo9(zj|)C_?MshpXV1gFz5Wg{Rf&)KLjcui$?k?#cq6&TzK` z_=0Xkd_EgGvT#)IvKHE6fGODk4jM4au8WXiER1Au7)|^Ob;L8Ne-e!Z9QbFaQ1}T$ z9Ol$$GFd^_D|4Q@(XzV?PPmIhb$x`g zMo?UEz(fRMDUdDU{kUOxUc}<98{CD-9wWHNgXJ43)g=h-kuJC7l4Kq?5BxqoNc$3= z5BmBN^9*tq0gxN!?rUcm5x~`|s;W>i&8+T~GPp|wf%AH}VWblH zi9rJ%jfnFiShhme#z4~8VT*F%F`hP>1d$iura4-X?=Q%W!*~K9P|CdMv`GLp{3)J1 z;0Z1&pxc#eBH*eA!(`}}41f_+0pJDS`GLn72CF(>^7%LmoHQzEjqt1>K3?c`&oEWt{(KI}N`1b8ObL!K;18aysOKOCI>mqG z3ebwy=5c{vk1<}+GFlcq&}A@px1ftU7?rDOQJ*pJ9%!U$i3Zg|<)X7#8f#2WOyQ!D z$KoJ~M~Q z%t^f+Ln?e=UqHX#TxcYN8;RRjy;V(6l_@l0-QiQa4*&}-#y3=9=R3-ZU_NaV^uH1Z zj-$k3C@67|?3FkW%^aE+x^Nzi0}cD6BORp29-V-DiI} z0djx~K!KLQmCsj{L+ce!20+pT0ZH>814#oQX@h`7mN5SbENKBGT@aASYUMuxk`6!$2?A0G?zlPsbMl4- zON~i81i%Rm0!|nPXWqXVoKQt92m(V4S!oO$?Hj3J{}1a1;w}xD*U{pyJ97 zc%Tvo9;n2D2P$#kfl3^Bpb`g9S4#W}j>9EbftR0Q4F+xrZUH#HQzyZ0#;`IQ;18Mv zyA#8z>pLdFZo{y$`i@DkdoZ|;>dr|*VQRs5-QBU2Fi3*0xbr1}NdVByTdi*FUJtOV zY?;6lHaVz(2NOPQB9LJ~gnTMB3qJ-hKdMJX`s}B2l#D3K9f*(o-;s7B|OYZi=N-jMtG-|;#RSO)jHVjrS z_!%Q9ImHQFS1Iq$ZLPM;gX^FY7|;pcf>fw>k25&nSU z0VqZ2g%yw%yE_D#N&}Ov1~ix2aD=!GP)rz9;g)&G2&;7P7I$XzjQcl6+NNah;Mj>{ z2ETOW*9!?d(!U%ZGig~|VTaEOpIMmZTE6OL+%Fr(UHznyytcEg!;*P%pFK9K)8}6w zdHDfN?$hsf9d~fRTC+4IvcZ1t>f2v`B+cLPM#eb9cLhU+wZC?=%X53Gl23fH^nAN! z&%SN>dejLg|L~Bag0*X3nzDb&19k&kbJ9A_Hr#H7{-pV#~iQ6>l z-fqRm=bR5My0GZdpvZ5HW9~J7JVN?v?)zyktmMC}SU1<2`*xp<*tlQsneO;HW7_lk zny?1E&zVwp{%3Ezuzqd|>d-Lu z>cN~B2OpYSIcxCua$e>57e~+B_kD9_((J82468MCL~MhoH|I>9T}K`|zwLsuSsfmE zVd9Hlgs+#5qXJS#3cmpJF$S}&ZbJ$T9LXD^=HS^B|~O={Pw z6BGXZ_FWI?U$oXAS9?#pgb z^{-dzQ06^N_oq7EA0m!RyV?Eo502-wX>`13-~-^?c?!C|^r4ydmyUiq{JHN+Z>-|MKyZ z+ose$`mWIX#JQncdd6Kdv#U<6Sv`6FL))LQwR|IH+0^8Ei_T^zXcisrR?y7#tm7Xc zBh$9M8Gh`^X%jkyjBUGT-EX0=xSN759vB$4XT{`O^x83{AxcY?) zJpUXNnb)O7w{BOrH_ge|GUnU|2Nr%m;_<#0^_LEQpB%OLx!sH7&ct02ufB5p^y-R^ z``+lnt!I_)jru8c%~yt)Bi4OeYrk3=|Ma`!!X|9~ zRm%cX!ygyq!!54nFWP;3>zDAY7eZcoq5pwajn{qh>;3U3cl4OO?t!eeH+3h6UObTB zvGk`QJ(>3w4w(LM-z}!4%|dqck4rw#V*28-pXZ~E>y~Lxl@I=9|L~Vv4^57W`FZLI5A>C)P{9~F(S4+ zebD^bvdBY??=9c_>&?s^CpM27*!lf~_mAlpadd5B*pEWOz>(h_wN}&_-(vhb9X57; zbZOC+D-&$bFMQ&@nWL>QGe=IJcf9fDjiS7+PkrU>*6UD*^z)A#Zu#BMF>S(r&DVd9 z8r53WF=Xb#x5TB}W(@t|$YWLR*4-zr{B-C=+m5FV=TAS2fmql0z4t8h3+H`o+!w#& z=&$iVOpzC~X!FRP8}^U4ori%UK*e;D?`Z@ZTj<&W4oYD(W7*3QPbl!O-3db~EK+lcz@ z9=-I_hf|*$+V118uRr$bz2n!t_}Y%+Ik5JyN*>eLB*$ppsPf_sQxo{;hCg`Tqg>Ys zEIC}QV*y_7b(Oezt6xC~%ohIOS(oS&$if5j`towK@ejDZhGiN|n`0z7$uo8gEYkow z(DuV0Fli+YVu=z5cC5rfEK%Yx<0x^Md9Zq$IH32%;hs)%Pb;3CR320Djhx{8nyjlB znhMTS!di;@gvF^ezEm1@DotQ2tuK{Uor+8|u)5R06`B52I&~_YuPmHO=PN5johl?S zRfsQDXf)O;5$Hp4Do~+?;YB4*rA`p$OF&kgI01-`iudy*=vdbu@lOu)0dBReM%htp zR8-8+yNVDDPmpCn_oYaKOY6b3T1nTgOX^Xrbw~;5JVE>JFH$b$-HI3lR|Miec;=u2 z^SiY`@BI!ARpm3AY9aJbxLMR!$HrPnaZK*=7Gv4jJ)d7UBA8c?LAVE3`AUcrzGD3@^ofO6i*7Jr;SZjAA`N2I z3Qp-z$#}pV;18blVJm4P)=M$Ejl?6qPxvb5?RLRxEaBZ&0ZU;uQQN_=cJtOUYZAUK z888Qp9!@KT=Wr}ol2roq2e`Kd%mLXzhk;xMyG0-;Yq5@6@j&k%u~;FBuMWW72~s(* z3BxB)P`S%3jjc%HEfztpvGaa_lxDQ>mQoCPO&YAKFi`sns|omnXDCA!c?_D{3h!yH zVDP=$!Su_J4GM)_FBpeF0SGQ;WFXK$poKsOK?nq)5QIUXhrj?qI0UsIz~0tD$p|HIGq%D2`=sSUv4fXA zf;;$5yAQ=y(JfeNJg)F$Bn$2&p68*T;7_r7 zWRQMZ7D7o3(xbYgOW_ht*cC7{NUwX;Q|eG!4K?V`k7mHqiEij)h>Z-2uGbA)iDfyh z16)?#BiNAdU2d7+t{5Z;qhZGsmab5tt}m_dM7$VKVJ%toRS37E2dS`SHrxoGXXo7l z3oc?sn`q%Z0!wNJXd0_tkMySopjrn1G?HX~T?Hagl?ld`51zKc;fX60JYJXLi!0Yz zCb}i3LvVWV_N8obi!P50U}Yu|%Z?=Sjvddsy-qf(z({9fPFl3?^(5vcuy_1Yi;! z0^|falJ=7#p2mRr9u-e7fLu!5^q-`|4D>yDl<~g_S7FdJa4p6K%*hej3^t*#?S&9} z4tPF6yqh^P%u4^sxzw%A>cz`M+mn_3oE9Ic7*h$?Iw$u0YM)J86KESs+A)k z#J=u{rQOJaZEPl6Elr*9*gD~{Y+-i4{678J{9bvz`xRvM&+pw!`G7k#lO^c&h@;tl zprCU1E@XMHM{>Z0ODr)IWm~ge%mSdmfr48WC1)mUPEF)e5>2V_GTSZi9>JQ)a_LE2 zMv|E`Wx#7fS=LO}l$yk)B$+ugPMziTluGVQmd&yYV|gdsCEi~s7KJj%Ge{_wMURll zDuyN{qNmhbj7?061)+kZ8Z3EP3-5#*%ssrt!#V`ExPldoKmjc8VLiCKu9zS!l7qH6 zzo1X=e*Lq0^^b;{3Ph*q@H$x8>w?`T!Rp6A8EGUd%4}I$VoGviIxWFyG_nP~bMo^B zv;BMI7qW%9*??0vtB~!Lo12rH11X^JUJ_+uaI-pr3tq<;@S_D*_PPbOLh`bue3{_8 zg=KJku^&csq*+UY6DB7G#-?Asd@GOmur=I@Ae= z%19TpV7idNx+GZ^i|qni#@oGuoJspOft6&^xe#*#)D?-4nRY$PvPPC=dpqqF%BynG zZfA=H)+M-YlG`Cz6WMshuniZUz=}53DLDn!<(A4st6*(Q(Wlf!3Z>jc#+S$Ys86)9 zd>Jp=c>op+M=Y4QWLmw<77I4XEhO`cJTLdx|ilAC(f$FbN za9U-8Jr-;+*z!`r$?{I6AQ3E7yiO~|LEvAZ;0Y|A^+>G8?G@n3+spY1nZl}on!pNW zf|D&5J*AS@L#vQ|xFFajxVQ~2Ktmv6NH_T)WaFKZQc=)`27xvxlq^sv%;+#p`3Q_~ zumZ^{urW%v#Sps6vRXx;Yu?VfcsK75pd&;Zrf3i3wieP8|MlF`zK=3-;|2=Zv&otjE9mT$wgCHQj6 zzELDPEq1R}u)<&$#!^N^RwMr6Wx*+n9kXVw)VjgW~JCjHn%fls1Kon_-DJh92Rvs<7T!NJVL53Qb^+1t$kO^)W zO->_jP+K+oSC|21yCP{iu){u3zXG6*x6726@=1rX#Ne6D??bC{Qm!M~@F1bQ!-sII z;1MjIKG;e+-=%PN7#WyGW7#Zd6U#d#XN5!Z%Fv@8QTB)ynYBoEyMQm0OH?|5kUy}` z62U3BMGG)wqmPcD&qa%XLGw>4PfD+b@^R>7C!JJCp&XmNh_12} zzwN42R+<#^J4NIvVED@5U1Fl>g2_^Hmq7kH;jzkmE66fj^ToQ{f=wLjE4r|t4;#~M zw5#<1mo*dTQ0DTnq9@nwmfQs-CmRz7X$h8C*&_k%vQ|3LI9UPGCbE6(0x!du2Z7%% zm5_nuklfI_9$vJ|iKJa6gaTuRIfprM$rR9GF<7*&nd~<#hAm5s3+y@B!-L#Ztr~R| zFn?sSMKmA$DoRimCX`vh=KyX~lmN>Yi!zJCcNN<%N>Jnm!f*n35Tw1s5G^8o6w8*C zv3Ub}VX>_ce#FL-NuZzL@w%NdYw^0>g41Ki)1gyzmiR>zDi*@LmFe<&*r9Q-mg_Ef z`gw86-ZG`>;Vc`=_V#*QUQZ_Qpo~P5j|}dRg|$kZ#@7jFSxOXcrN}I&Rbj(J>1vY& z9j6yiR3dm3sD?u`eA#6eZxQ-PGCMTWCOWNbT(I(D*qGrsk7#4#hi2LZCmW|^9L{!P zxwby2aKR;n^!!xJW=meXm32xURv7DXgCtJTFId^$g$ih_>~V|E66l>EU=#uUfT)#; z30qY<{+*zraGY>rKtpMtU;%Y#rc1Pp4&GKy)ihdw8}~RHrz)aOI4(W5Ce%Rb_b${x z`z?SP$h>z)YEZiRucZdbB{=U+3Gug60%ZD2sDL7hwYepS(qI2dl5h*M=dQF6kK5MH z)Rv`0AA~B0laWDITNb+{3w{Jb`7v!N#%KyEDfvhc(r|1X&RLz{e3V0p4eM-VkPJNK z(rxU9qDp41qRl3_3EL~Kz%nx7e!=-tzN`{a@c4*HOEf2%V#qTkCV(!9q!GZ_?pi={ zqA9QdDl$-f0GGQxe>JKu6Wk^?&ZJ^nWrEwx#+k_gjb(EwQ-S4xgC8Ziu~6U;osyfi zNDi0e6r3Qf0AcZdH2An6Wl9B*wE*W*An+xD6$1gm_X@UOeVq;8V-iVUvn=M6aX3LI z)@UO9kyUdNg+2L7BXBEp0mX4FE&&smFIfQ5LMmEKJJwI8WrCZKr7xFN@|b;~61w!m zN+^?H3xA|+7Pvh?U}ih}cs!d4D>sr>fmNYlNIG2AF3LCK<4DsI0Y7Xa8;5hZg-R%k zj%BkYhYOUtzte$|jV+curAiMf6psl5&rNZ+_atD$1pMhvAI-x9rY{OLp>qr(>+3j5 zyUK8^rf>j3l;oCK-tFcq0A5hK!BXD8)Z*PGURXoPnedv8GqFY%uHeQ=6MR|#VXOyM za}pLK*f=w5^sNfncyf}T2SpDQk<1$XYd_Y?dw5tTlGUL8Wg z42w!wA#EcIUYU)t@}j-MNLH^vR(*?)fJJOv zG9B!9lAe9}tIN;65C2m68P`H3=y)RAQYE_0>%?m=wg{MA0J@44(Kvw>omdDgiu0qa zD5kB#;L3Qr2%9S`oDTv$hF_ziXy^dR{(+F`sc;FBja3yloQ>`TD|B}Zs8{HW=CAFp zQ#h8@{YsoR{%mbPcjAKzhJeE>dqD5Uk$f&)mUaC^1U70?A#p=yPt13>}pOy3w{*;tSh zKyjupMqs+WzKaXab~@pSAYg*H4G>t}LiZ81oKiYybN##wGvx%Od+ySav23B}v%bjTJ0jkHE$x`C996!FmqPZweTtO0UA;q9Z<#$nI8*Tq>2T)K7OW^^ef6 z4_v2BEb$GoKqS?qf2y~;RJ01e3or)s4s=YJl@C6cjbUF)O~@n-rsW`GbPz9M`r}!< z=<(R`K7-)In@5x#0HuRWBCy~%#v?eDnI+RI*!c?9%*hlw{|bL-5*A9ZRsiT#=~g|4R*j8O$BCBR;=JGC6q(QbYR;HE65;bt5FdiheQ*g z@X>(!%6S$=N)RMbLV&icN77m99GTmdt^1AFT9wk^jei^-3vR05^DT>g~ zdpx|Q6t4&Tl6nU`MY1t5u+|4^1@`aX9#zZiShWbS;yvL)-X^dyF?Ds051_&6r)WdCQxdfH4yHIC)rERP4ITA1=Z5={@~ONOmXq=ELz6s`WLL}`KnHB+WsebdguGaB8$*m>MQ4f8>Xga4;CJ(g zPA~>60a}k~s}>K4!T_LELDabui(mO0pw2>PGpf+V*i~#BoK}`E#`YGOK5P+WTScNu zR>+qnTm03kVP(N0Ijuw&tWp~XW$8XugnD`<@F=q@IHXW|&EMaov)Fio(@Zw*?)Yn) znCR1Dld0E)wHGYWt5m~Xe05}kk_S3pS&(2Rg_S0l>M&hcB^K`wuxvn2VlwqeofP_1 zm=k@Wj8x!I^c5bWFl*D_sfGLc%M;f*Os zQ6{)WTLs0iV&dXM8Yw<#ANr62Jw^=hfQU%XK#ibIEfI(oFo25Lr0OG~+6be>d&i+i z$DN8D!uF^aI5;gSfPtt<3U?epR}2*E^dw+|1uz2#D^%6E1bqxh#4x!BAjvN#Q7%Mr6d*o>ooV$c=PpvRn!Vb5 z!w|+uB1y_hg64vgU!&NMs)PH*-oBI^k+E0aU<95oN$8&z4K>(Yzb% z74a~J^|sHBvMfE(WX6M8vV(~&-6SL&3wSEw2zRQVu6h6fN)D8TkPMyJ7%mb2r{Zt7 zlY=q^fWKa)NQDqAk{b?^_?Z(<1uHyk(NYv>`dSo(GCKS&X{ZMkZm+6if0vdC@MJCR zb@SNfD6e1dg5PV1s*b<5HNYm7Z4$6*`{m%`%TKPVces-=b_9{S%8TCi^Z-ChQ~5KBCtt-YGgw26OSO;50d`3uYKg>j{*LCZpu6=QK&akZWbV7$?B`oDDk6(l_SvE-rbM?} zsVR0zD&25gu$*LHQ8h^Jl*m6+?v7W=Fm5L%Y>FRX%100lGn(I`%s;pJ&u4&0f$cwh zCXDoKf zG8(IHAgO=n-OZQhz<#iA7ssCv3dda*%VrZBMQQ`@WM!9NfirU;1vq#QTU1(VbU2K% zT;$u*r&2eDLfI;cQ^4X_^Kh`^FoGS2&-{bJoXn=)`C}TJF&yt^`+>qpC>lI?@L*#> zfiWkCSpAdVk`rE32MV`1#_Oa~8?n@+k||{>xKKQ-Fil8yEb%ya5cyU5`b>}H^g7f{ zz-7ax*YIkhG#IBi%LKPaRTx|3l**D!COE2;T*P)}iy&fjN@YfqsR(mU;DQvFxM(#l z@r!iUWD1He3Q6*vKc=v0fK2srHkKVA3-}xe?OGnoPipiA1q-?sDx_*}N`@-H2_eL( z-uMVWc?n5y-_qQ~X1trkyRF#r!$+e5=BUN+-3U8NgjiJ_DSFy~)QXSyv2d${U}dpe zB)5+uL>V9M?14X$@lK3dI`}%8*mzb4h6BWQVq>y<^rLnVcTYDqBTdDuaJL4l8_b0| z)Cr%6k5mQVA>T@T$zoK%pAQ|1msvc#F(LqXvgjaStMe9?!q&BqWN%LZ)SIC!H$Y=f zlJqMEG0%>xW?44oHoUET`7}tmb`LYX0Q|kh-VRX z3T0{!hQLnLCdqF>1S3ePE}#iM1QMFSgoJSj!mgdzW2!R;wC0YPW!z??6F2(yLIN6m z$3o~ZG1^48qnvjGX;ZC|(vkqQ+_4<$mPK7o0BQLQQEM`J)6VtfQ4UnxKH)27>D34V z>qPwa=JL z{iS!qC;q5}uar)X0gfax;7HY0p8`v;lCt2?AT7vO65eLGdqG%LLe_(zNoQfB2-=I4 zNn~WhdY@|B`{08gii$6X9JMjBML`BP9{prbNmUN0=(8nPg_UCHp<`wNkn#Ws!)Dk6tFBU@*BbMU-Tpgq(WVXv2 zq(YK!YWj2KQnClh8H1PU6AJx;e|(&8s`4*1pe@F6l2gD^96P-2pR0d>3ktd;-n{rT z##tdinn3-1t}U|>h4Ev)?(onC5dKn$f|vk7)X zsLtEJkL3Vq16#$#DyH5Uqo~AU6645!PBe%aB`)G_DX8ES1dRBYVO>Dh>x7RJs1!wsY)otN zvrKTSzbYaRBp~w>JzGN(kynZ=1&JitSHf*_6RyQ0xYQM3+JF!E2qF9<=0Eiws)mlGIvmrdlNH!+6P0h%5L_EI%eY zo;Ck~R&w(ViL^Q)sJqB#;CYEHr6I%; zAq?Bk()mFFli}LNdsUpHR~w9cVYeDDtjm|}Y(nnuwW%or*;!h>8*iF}SGzCG`nGsf zI)_TWRKsO|mb|w*`YKr~ovRy3Oz^zYZ2X)5^uOH1;gXHBNR=?JaybRS6ekvO>VZ?0 zcxG99LEkQF9iByc@sZzN((l;&eZFS&uj+RmBlxVvs16XjV3QE9C5t29zgtFPMqQfx}XE^Ejkd39I-T^2U$7l-cxiSj>20S zry{v`jhjLPudl#m{2;05R-9#{y*ME+mq191FT4wUnZ=`b@kydzlKGWmZHM8PfW0{| zEtfyj`njQRjp^>5!O<}oSzS-K2t?Xx$Z9ToMO^TKck*DPY(dE70j*C?6y(K*JPue8 zQ6P9i;!b$GBnu>QG12!JF-(=}mKNI3sWmXRaCcelzlLV^DaH2b2{P1g4BfR2y{sp3 zOl2KYb%3@`h9-KRy!Y_$_=sn$6(ocdhVSZY3od0D5iKRBI8$?!Wgd1(MK@i*Vw7)K zye{D}mK}MGTRBKer!6dmTQNxpkPCQ7fCxK#tKe9f7Vs9v`%?U^su5I|2Pf|O-dH8+ zA|yi%7GS(@4l{~_KM@O(0O;R+5ax&*EufVH4h+F6GmAI#8MYFRyfu0u&Re6HJP?Hn zbwD($v`KLSE$zJh@hs2SHot9R!y_w8SW9R?SNDST%}rh^J8Z76_i=rNe}MVw6za<; z=w~lqIUqYNzFjxb1?iiYA_KUcx@7;hjV#(we&KfVaHbYqPbgDr9y6!=f5)hyMdhW! zXeaJ(6mnn7r*#+JC>y1Q zHjvA5eFK;2odxW8k?~>CnY-CuM&}EYX1a<7do!Iy{0w)G;L%R8<)6BTV8ET7p5Zn! zYvd_;+{A%Pgws@f{;Fw$#1e9823)7uv`q>2Wz&K!?VVpwn48{(qp;Q4yqF;sQ68*tN?|YpBA{g^ z&ro_2sYST4I)VTwcyYppV;Mucrnq>s)R9CoM#RnMEjL}1VM24Blh?o8jypXx$QX6j zZ}Q_RS7u1B7bu&iE7O#d$fVyHlTg{9FyB zr{7HBK9Q60QnQdAwNq#RAzl3S0g1U+XXT`ol}elH0^Sp)G{5O=kr3z z%4R)0o)^_Ave3GDTf|y(qIJIyX69cYu_6$pa`8Ef{%-SHv?rHfw=;o#D!fzhmjjk;9m~Nlorc#UqO2c54AUfuv*!0cWO>Tuif?lf8l7wkgJ#F903r_NP|ax6Pcdj1Y({G zjXi*^$gO}IxK34{V%S=rI_OOa?GI-j$Oai5(evS)36b7}>2IV-s~dJn**wf59n_yG zJ`&RW4g*OK{y;)3D(>9UFMt?;c)m8;l}-q+t;dq2w*u`T#em27m4V6VxDabebPxoN z3E?(L*%B*Z)MMjqyp1NhjCWy$11kk@IFAR}BY+Ba$^_JurQxZ7aU z2LJ8DdRevC9RV0v%H0kH-~?Qf?q$Hr^q3glO`YV*>2PjnK{W}wB00))e#`t{5gf{U zW^+(EKskmo)6tTP7T@rnZDGfjL~5sAkvkNV*W%sGRz%T)=*U5Wf+lA}_SgYP9ZapD zk<{fnCxQT*)=p%T_mU+gfe}|oR=Iv8QTpA;T_@PoV%n-uVtDw~%hxX-_nzQ(RI zix;nYuXYZ;x^I>S&6g_e}V=)PWhtPe^bOjO;W3rS{YwldLuccrQx zT5eA9SkjNR&Wds!oF!Q`?C2*JSwwW?IW?qT=QFm9oyC*k!08e?q?qHZ4#1h>d2!k} z(oN3*>XW}SDz55+fJmyie5Wf-gstN$+{>5GhrlYtE&R?IWqp|H7X#N9)@6wwzS!A+Y?%;w1MJT;SAgL{7l1mY5ca8v zLaQUdhO?K}C50z>UEGhyLsuOWm>2a`+L#(`q4Cf99QaClbK21VWjj!|v* zpi%WHIDgu?yCbN56et4LQfYdD-3G~afF;jv3DRdQd7Tp0`X;i%3b%}x=D}AR<1lNx z^4o^Fx`wmW00cb^o_6RTu(Si^Gf+=u)o{L{N>@8wo+_Vxo0v47stjBT_LL z994l#XBY?`TY~_=tu2gq!oA4s>IZE}oYy5Ruoq@ba;mPRCi4%UpM=Jnl&HJgBSw7` zP`FcdYiL_a&mI#Gd6i6%G75udwat`15$zax4wyO}9+vEJzft`{`nQJ}hlMS*%?4z1 z8EUe}-OFj$gf_)AvsTL(=ueLvnNKPr9APrDQ$i zicTb->OC)Lzp5es1^u(lDE75;z!iB?GckF`Q-d+lDoQ0npj@SjnE)PGDx zaGUjSsX}dgH>i{Pn}5RT5;^(-u?`vtIf_R~QI-91dXnNdDlz&vJxS3SXAj%Y^Xkz~ ze^gZcSu*|Xr)y}Z#fj4?B^`%xjRK{H%f6+=ud~x4E|VdSaNhx_FE(C1JJ>(iIrwsC z+&Dk&lTI6v)8;}5-2 zo@wOt@8?O8CgpH_FtD#V#}!(Un^B&X!;OKNmq`yD@LRiFWipxl+c9cIBe^N9 z+Bhp|fOFw=^gY%J(0t}WjhcBQI@m}k!*IP%|HrAYmyB^yFUW=UU3=NMGq|&T>+WE{ z|Jhz&U%$9ZgNhKtot>SXX1`5AyT^&8CHtNf(J1ZUt12%a z3~g~?*NWw255Zxp%(bK+##N)5^5qI9x6~v4bj65wKcv-*ulN=iNhk7*4O6>C!8vQy zbnL34?;|3^o$mPs>ZtGwI_ne&QZ(Plv8MJduEXG-X1@K_$UFPFzFRSetUmFTq!yU# zM%oY#mlfxI!> zzsrx1^~10qfX@9{e)6(NGnfiMTRY>iGquQZ{f(ic>l-yLtXW&k8l~%JMGAQZtpc%H2_vcY|7Z zbUBGfA-@IFKiHliu(1#T}>&=zFDyom!}HSTg@1zRQ>Nzist30r&h_V=xh zZOgX#hk~~4HE>njzq<;iNb6R!uBR(}V|*!nbZsVcUO z^}n!;EmfzuVC}_mICMz9sH*Wb2_dKi+O}&hSH9NA+=BYGL6fBgY`LWpnzU6SBm3Up z-}1FS7NveIJ^BI5*V1^FSGLx#)h2W;SSw&_7xpYE)Z0=onox9Cvn%+;YqdXN?taPT zWz}oL&)Un^hHbq1wfaKm;1{svnOYPI6EGy>n`e&^b?EQG#G z&3a>uQG=aP!7&S9w{X z-ZP!e?S_F?hr^fY@Xi&Y#$z14OlMO(`WNcQwkxe>?!>WSK_{+1T2y^q7O>VKgFfXih6 z`JqQ{SE+^DKg^y|mWo;rRc=0)v_z6r@pA_Wj1S&;CJI~f+FF&eQ6gzJTgNRLcQMLrS?+%*IZD{c%=0G<$B?cmekQs!9G$r!LVaAo# zr9LjKtZVt>vbdExI+CDN@0E+`DrA4Rs_DwCLXyIMUsRR%a^-ZjTb!fAz88~gbA3>= z%vw^BTjPRyx-#mu3hL6g1aAXE;Y=33rS){FpGFs&lJQCfb-638r^|mi^TLm-nl7WS z$(Z;$Mz`W8DW^+AT`ZCUpS)$r;^qC}%jsSUWuL5`?&Yy&T{>jdE~ChOAN6#NJ#~08 z2DcF(>4r4P#yE1YmkFNO0$~48Oqa};vTlv*BCDy9e~xuc3JxIjikubc1QLGYc`TXE zEg~#AWat^>&tA{Q+kxix!yP}^sUi)Mls%nh~3u6`oNm?n9#bK{k( z>~g=d>A#;cyNYzORr<3+828^$on3(maoLarmoKv`AF5{Q_90m={KX8hiM_|C56Hrs zf8zyp!;LHwM`r~Pg_-eAVREByyaW{AOJQB5mJ7Bh>0IKxq|qdx{_4k2Sl9DJ@xrm# zqX6F4&LzQl2L~ZSVbd!I2f5FE{;JhW^){GXlmJf6z(kbn-WuGg0Nw4Sb*b`OYgt__ zcg37Z>zu2D7l$T=WO!j6Qmay($r5dMMd>N0ux;(u$sc!hOg>zun=9ZG%;NzQgxsb0FMQLWVOqGs&Z_aYl< zP1;2b^JdCz+B3YH#b6+=T<%Kaw})*VUXp{rO56fYqkQINISV^8Tfd5bDA${1NwXN~ zWwH7FmFw-ct$N@oN(mubNCS;Lie90M=}YHkWyTnIy3&3t{c^O;*S79!kp8*3Ies(+ zelMx`S<_ET3EP%>f8ra=hY&_(+lOFa0YVowx-43S=lrIyXHw~{ z{?M}6#j1r+WAncpyH{lzduze%c1FDpH zy0QGUu%_$T-z^a6CMbkSihZLaKZ1I3M}8el>W7X$tgF?kUdjlF+Y;0D!kU*#_fqN7 z%~ONNZIt+rtk9){6#kA{r-0V|lT^BN{VOJ1;4^YM;5`mBEpIt|JdC^tEpP|qCE+Sv zUZbCdr7o}4m(;pcLSPcT;>-^H5|_5V<+Z@^3S3$)drg>H%3IcJTV4x98>T2O-4_?P zyw)&Rt!{a(LHy)QTHZ3qWO1!th0;Gsam#A~aM|jXzSzS~_OI>2dX)f!ti_%c>c>@; zQZ*;JhMCgeY$R*1vT4=UTJf@4aZ2ik=KiKr51WFS4*sux${M-(sdxIubTkCcNVPl- zl>%~!bMr9WH}!IA7>3+xR}fIz{ywazxe`JomgCT$(4`n@l+wGPP@w=WCTan_nYH-B z%7hyC6?O#XdkO66#~%8=PXxB2&;@2RP8%N!_1E+sVfL;Z#zsaSJ@{i7WjYsw?9O!Ksh(D zwZRLQH8#SWUrE5Md%Vvl08|w;$kZTrj?&-DcPFoBW4(2BHPo0d@$qIs4H|XDx14TC zNiY{ztX(duI~Wekwz9UugJC<;)LSYK`mG>>RAaX(wprP)_vYp8DwM6Qgf5Fi(c9$g{<8y8Qk7d`{@-*77~V? zH}RU}f?Z>n*T57cW~x@SP(Ex7{{56KTn=WlaG^rS@}5c%VwS|@f<5Ch7Sv{r%y?X{ z%gPX5=HT-yl>GxL{mra)iMD~cY@01$D6^5gdm_lL4TxpMLN0At-Y6loRx*VJ-Gkh@ zpbJ75Fc`};EasPR7{`sg)~)QLt=ks<(QLMWfdtdHb7l@|VQDay@2%{hhv;UdK_!I1 zPj(SK{4J<4sN336(#1?j+ zQ>|rD!j-^=s_)28RAq31!mo}M-%q(g!HZ0PIRkIprudN%dJ`iZ{w=FDXvyPmsMMex zpBCZ@TgH~z(7IeWPfCW_&+Sdar>`*R?f6R+6};y3K224@YYzUsmKD4vOh2}|f-((a zh^Xx#?uS+Z2O;}*{tL?rG7nUPmXW_<#nMx2p!d~mFJffTN`i}!EY0*p!wmL2l@e4u z)I2FI9$E!U%Ndn7e*3H>6ZS=u@-zYd0&dYk6~n953UuQ&jqX0aKVhjr#io_DqC>Wc zrxu0N8YILvytq=J4CLS8H><1pWq1~RK#^%``h$D_KNJdN`xqHA8`A7M)bHCF5us_( zy&tqtpxw=w5D^NkyUSo76gF)7BvAVA_A-G&SIzoK!kYx0;ID0I-brnxlo`CS7Qm{bzPG(pT16@jDD>`foe``6#*^WOKxIbOvaKh zmB_Bf(|(xZfimq-tn-bH*0?hqrb{r=W>0_gT?r<0@DlTG=oZVFxz!8I`-wPq+*c4U*ncvG_p zkXt9`QXyZlil9ZkW>5~VPt=y7&Ds>LYm^ZrPizez6DC_zW7}{br9xXVpb#o`v5FMl z;&sB!O>HHuhX1**P2)#V!%Mf8WM^rSXGqAd5WS(~*pwDK@@T47EGlxUG_s)}do_}4 z>HQ!7&^eUrgZK)NO1t1$-$c9n`!Dv*elpF^63x({h&6{xs*;J4su{QWN6r)YA+93n zz!h(%!QuI*fw8ONOx7hp&|(w`|F}Go%mrAI;agGSF(vQU_SGY4!M1-E$;K zH?{0)OUu+a=3>lYwv&y$F=TsC(LH2#Ryrte@NKS1xj>(++Eqy{#G)NVzWn=Ca$3{@Na#?BC){bk&#P3|2^-6<$ zU&UFk2*lrbb=Eq(SGc_LLklmw#|qsKmK;mIpNg#YX$EBM4BD311IpHttgW3aqGI1F z9G7OE#YYp$*z7TU zU%MPDy0gyjs;%#SNGm$5-!~omJOBFPtDvx*>FgE=EdTh~PpPo$lYgXj9{+u<^GNkp zAI-}upZb*@|Lq_BS5(>Y7fUKT{=43{$xnWA9F_| zQob%GuEJH3m;EzTe(V?XHB6a`uC8$OGLQ#yIHQ%Pnlz6Dj_M;b5_Q_k*GwUmFSK#2kW;1e7H&zR^ zjcwTu_hhiJOG)7`l{%oU2v|+12Jnu&*6`~_xQ&JAZ7{GV_2LUMXN30J`6O+Dl$F4VWTlQ zLWlZ~UhTi$CDz5&r2kl%&Og)bva{DK>$~ND{Kdbf-SVHmMwf4BTo{S2j~ z?H|}Lzx`vaBD<`FtPD!|khub;tr#nRb4JZ-J`+1oUc!<2d{#+HethcEAaqA7W@9k8 z-P;&!+~I-EFNl%-g|f2;ToV@GEiNxRyxU*D7c^N|TUK}igWFcelnR!n@Ir`DH+4FV zvoU3OM*mNcFqCFakCZb%Pu|P?BYyiE+|f|MP21)Q-1}zjENt)OI&Pr+eU=pdgEF5N zqh#3SOmM>cDH4F{LrX1hl!@-47C}C*dZS`uTE&5sDn;d1$cCaEMJpzsSF?FFoR>*q z;<9%ZPv(hv+j|fpQ9c>t?OYw0-5C4RzF;g#y-v0S-`CN?r&0nMIM(s32%(uSZhly6B0thI$}kbr8bLWe@`t9Op$6k4|-`q}k8~lgX8z zSNoQi^AFLl!+jZ8!J4a98{FZOsb2Xlx#s z!E+Bb*OP@VXiA{b6NEEcj|G$=f0R$BIprKN(SDv+=C4R*1Z`01gt#2F=>64hf0j%k zS!%7alcboTXtRlu^;^fsqj-G#XfW8geRp$xFt{^{<6E2Y`o?;^u`%9C?%f>>j&B_w z-5VWm-QGAJY{Yj5TXB4QeEZIwJLsMIXYzzFkd>;5I+EB;Oqocx7sJU0D(Xz}){vUi z6-7+a4fS54i%GXeGTRfUPrz5JsRs{Pv#2jAYZx_@NziPGh|p0|D1XJ?LaCmT0zyG7 zVh+5~?RGm@HT|&nAUc|-lPb-6RWUECUYw0i^P-GMiKIu#I6{sF>*s-=3py#Qyhx%I z^9K`=_J8dTh9-(9lW4{K*`EafI0ed|wamn4U=W>o*5ex9HF8BA?+0cOB$i;s=jn8o z7gX!W>%QN&*OS1fG5+zURe(kKx?Ceg5o7B%@Xj#7b1Tqfr>RGc?z~{K!lR%-dehS( zsB+Qlw1~@OXzw=pL~nIZZ*D%yj@>p?@Z7!x&Tb5$L%L9ITa_d_$frqliW*UAY2Fuk zcES~h&hvTUqq4lgo5~oJtD@mu+DxMwjG?R%s4HQQI!|x zcG-CIGLvPGI8asNG*LU9wHztvP%uu8<~U2xk>IfoRs$mWP^M+&juiG}V55DUBqJ=q z-ato+i+UdCNlD>XGQ^_00-COKQcy<6SYWjX1Ivj;eZ`sC;oK4JCs{njitg<7m?d%L zm{rJqIWp-2*nU1;|x1S*+*7Z@niz5iP~aO)X;+D zhO`N$d?~;+zO$;Pwi8ucgq+pG11@#3B0euB?Y0^1*lFUI&^SR_!YczsnUrbiF=PN6 zjsaMq_1!rZxV*=(YLxBqL34C&(yH{uhPQOOd%(-(Bm*LUc>d_Q%!1f??G-K}m$o4eK?kGLWIUfF1)Xoz|LGLjKj|>&L&|F7i){A{j(gUTbaPPNKg_TN zqi{tQ)8S#%@wBHy>=y1p6oN=^=v#Ugc$anl8`hO*h|6@YYhYC@FtNkTx?x!!G$ohC zpntGE>t!2Yk*pYsMwLwtLpl$;>4I(}wLc6yP=E~yO8RuEz`DAnOaF)L}Pd}fUDlL+6zu%`nCP{pjW~hz% ziufLR$R8!P!l^k*Ci(kSj@eBiNQ!AZadL|Izjf`f<&KFGpXKowoGr{I4iCKJc}8&) zrB8@(Hvk(@M&M2wS2=}q4-CL_0+#6?fK&;zwYWG}mjT~pRdt5auBr!scPMb8(7m@u zq1Lwn0Wy3Jd15YuKUM*(jwD3k>jk(E$f>`+_^UYsr24OE69vv*AABw{ z;vy^Aoj*~7-@ot-e!evHt>nMoVJrE6A$Gt2tzq~3XEnhK^I!cLtbqUBC9QxyBsjLq zw5&0Z-)kX5ev5Vu%irD0S^j<*7g?H}Y@5e3TwJ&*qt#bW~Rbod~g7EorKEvs8#f;(%D>W~Zv58CbKABAV z=;o;z=cKzA3DfFWvJ)nw)7Grz z`iuT)HJ#j~lSz+1UBQ4V$0qs7Nt&II6sz)CIx2^(IIQwvh9@?hCeyq?+H8mZJzU9E z={reT9o+hfOJ<+0?W*)$f0R$x*!?o6%Ppmx$2lN1(Jx=@fAz)wi`OsNM5C{3(PdF+ zfRFAQYrgecJ{mE30o4!!&Cc`LdrU(op&@q=p0q{%@=^8H1TATzo+Ter40wgz|k!TMn9?!7x(TN}49ZD`jw@#*c2d$;c1zPovg zu+cugOe5;XlgSDpt&UYJr{C(^(|nqIn;##iqlCV29Y6PI4g3T&SIWGoZVQ8}ROohwUqsWIMHa&hq}pX9|0x<}C_ z4*thUm5i#Vvz_r+lcKuohjey!%Wd@h?3Awg6)09ebLctb)vvNj`(h?Pd^GsnCK8a-+^7 zryegw-U+K_Rv(+aA67w2+$)O3n4SWiBRxh zpVBV6A?}-w|K|QmAL{c>qlIl82ZuTidf8NqbZlPoWi(){)~ zFGdLmkNuW*c=&UWRAC!XCa4Pk#*_E)d07kkU&R3>v$f%QN+dirS)}Q;ciY;X$umCj z0A+58A17x|v*Y|}Hk!=G$e(afnu zu+6w*`4rsP=3nsyk>3bYFj3Q|hxbGX5ef`HOf#IOYTSc+#QR+?DZlW&(|^;G#jRSD zKR!|!wq3xmZIo<*CWx{0*kn1Mgqoi~CC|4QF_qau$;TBT<}VE{020i@mq+WX(rqB4@}P3e_4)U$MyWMv|)S!Ux{ z_vp+0RX+8X=_JXj$+;=trL&cKfBLb<=()*W5BuY_eq`WO*6s??y%=0Rn)hCP!9#o<7x0Eyy~IRoU-IR_TeVBy zG-f-`*v7M46wnxX@_Kp`{J{;ySXLz zY_%46u82Wo|Mm03;?H5nR!5d5`a#W0kuT(~*q1*8eNi* z;$2dh!^i`=9p{8{an3B$6Znk1Plz3mYonMyoLpwRlnQXI%Upkd!@rCWEC21mU|QmI z1((1-;V(i9+vopQt%iTnuo{BqeVgItfAl|-ui)u_^FNVi?f(v&;lJbi3Vvp7hWHj1 z!|)00h5z;c6M83M=h%uaOu*Z8eaTxE9ifRF1?uKPyAdww^0%>$&a78p)8%i~T{&1k zU$}d}_{s_%F%mOGbZ=U7C$c9}y20C@XMdR=na)9x&Zs$UB%Yl)PCvl^iXM@>iafw_ z@_?4**e!LOeh_S=*~Luo57EyeWn8rlvdpK;4Z?eq-MZ{kcwRLDj-EXcN9Ouo{4PV? zC;I?O6${dskU<%t$reldMOqP&q_B&aKO=^=3e6xHk-;R-j?1qTsg|1{TOoV-mlJqPY zn<70qtqd-cJi~)y7+NB3eRC@?93IT4<>R#2$;Q?(1b63<6=x+HU3B{ z!E6qEZ?Ds5IOx|tcr-6|iqWb2CKx9!MyDz4E%Sn%c$!};X6>Ls2SRQ})4pkt@@{s z=ROqL_t(m)XOcoJXuW^5pPZ#-n)|Cs6*QL>%ltYisAx<8w3K-iYLN}$K_0$uzHnaz z5K=X^SLrm6o?db*uOmM-yZ3lBFN!3SyDmq}ZWI=(!G%OHvtS|IXA<5WG<_KtW%5;W zP9@?G;9uzh;#rxzr(Yx$zj!{M9wmNZ(%o_t&ypv3v7emmBA8lvqYXpzo;{i*aR&B{ zNRj$;C@cQ6)3}I7RZ{FHvq?N^eYH2AROxKuL%N&dX6=PP>JzG{_$XbSxoMM8CARWcmEI!&@&wgu?Jy`5iqU+g`F=Z?Pnaz2eSC;%|!ao6tU)AGrD zGC6;gXBi28@4KhvX9qoVt<1@d_l2-^E)fMNPk|%kw=v%r;d3gRhOEIMywSOH? zQn)Q1oM%<+Z=>2Jxi_FwnZPej5`PZv-Claa`lR=zaIsf;Nb~#2@8@v+(F2e7#gn8O zoj!|;lLUzON1`{d1nrz8S#?nPRN&e4h!tZmc%6E$ALs8g*oNBQdY*BLZOa`z7U0(6 zX@+~w>g(8t#y#8*2#?qyhr2SH#Bm@Llh)x+PFHD33iO-p%8#OO?mnJOb`R@{ihEO& z3C47^1G&8K3`{pV?8va<)z5#e+z%Z2S&WDP@r(pvc0y7yrL2{@tkMCm_Wg~a2`jbh zc@G8(cpw+&Y|qTbLwkM;hk`$x4ppn5_0bq|)gErb5@4qBhv986xgQQz7^f8(xK5HA zA?@8%`F0IlaphwlH1sCxCpU%8h7!U|=z$_^KTw2rJN#+yK_uvtAzFcyVdP`6ZE08V zepOdPZzL{d_wwBdPH*CwgY(-0JP><;{TQZtK?r>2*oUjWL`2#hH$>MS1!@Rj@809Q z=qZvl#BLVD@xz7}AY6{CgheYK#gFsiMQz2_p$C|dxP?@v!vQ!|T+InX7Z)Gnt5JV{ zv8l>B%eORO6Fw8o0ziWf1y=u=53X!l4U0wmOVGB(Pxm{G8fNQ>eH9(y)S>sXs5e0? z)BWZnPr#CY{e4s>BsQb%Z=!d}d9)qDnVqiL>GzNKZ4cuAc~h#F$Of!;_|fLYt}zvH zwhG!KLNhs&6HK&X-XMAzI<50Wu95ReQbp$N+mAw;WO;1xo50#i9*@zA@}QfSf#Vy1 z6>`w%zNzt4vKN7^UAaq<+R=TV3rV)bWURIFqLu59Agsv^WZ6TzrQqt=;YE{iqWk7e zC|=%PyGsYN$D+e3f)+D=pbY43US#2xBzDVAu43noOCc1E9_(kjkyURXMFzvm2KNnBELOcYICJBOs*ctAD%f;h!E3kuhrIm} z7N*-Dzkf6zS$dkAPqDEDk&bqhRwu*d0>2+jQ6%p2z!ZBodmA$Uqy^s z1+f-x(B6XxmT=Xw{npMZ*!ZLnbD=JwH%7<^8ef)4k;ao=MpiEGa~9UbV`O_idEfY0 zYuSj}nT9uDywiX>B=y0VfLd zV%(j7+O8jLxFG%bLQ{X*y3|{|dXGZ*Z|{pj81|=|nM4syhiFcWBp8oK-?sA>Up;Qn zNV}=6vNj>72G_=|4<%olM)&saIfDw^O~-> z|5h&y!-u{F+4U6IrtNuapOjMm{<6YTIrb%Fr!+mtrZeIJ*>u)4d5H1C@rdS`N;m|~ z9m0*lMxLmSo0o~c%*zT_t=p0FFJ-TvAo}x-={O|WWK-P^!0bJUfCrdrqZO^DVADv{ z2ZZ}2nr=r6KBsC-)RCIKw zEpAg92!GqOqqF`oB!~T0uaglc-&lzHm$cuoepXE5GrIuo$U|ed`I@U1adwiR6&AM+ zk6GHkzl9rPG)MzDyzE2CD^j3#XD5AyyRKV%E-^xpQU~%qfs@4N=CU>6+$lp8Uw^%^h z`>WxnI-eyu@=Y_#z)e^_J@0t*h;e2twcHh()7p7@%N`hIo zz}CV^YE)X&q&v@SW33FQ{=G>0$av0;dW?GuO`r86n5dD1jH#>R zUk0iMRtjN}zqcsrBtP35!yF533=+2O*1DmCc~{_kO9KPf8?#+x>s>({q-+@^;iEg zJ{paaBqZ%s_!$hKs5zsryOn`OZyMfzx31b zu%*YhatPydr8WS~a!n;>|`zi@; z{B(VtpbgU^5akXYVFR^(3b8!RkW`|>DJJCEGstAq9hjecG`_+6)hXfjGTFJBxR*|B z1e6zm;%n+pvvHDDq6#aBR|4Be~qS@Hte7nPzr zyfCtHbqX24k#sz5Ed+s(Xg)%jNKHpZ5n!cnx*n7_NcV<#n!pfZxA<4d`6?qi&4x0( zTPranbo4xWsd>#1)pJLG^sKO3$qw zf%J?C)Nt2`ku(N6gAv1-$1YWEJC(50`uKh~h0L z=R4zRnx)8hLauO*hkMszmd^&6ClFCSjYnrmHqMKZ@=mbRg(?(_hA|z$4+?{P3?(L+ zEGCn46MJw)Yyfped^<$jR8927s{@WU-M}Xg*;>*?zb+;gtPFXvG#50DiXUfKGZr%4MF@VBRT@8K%QUTa;wyE{@;8sv)ofWQ&E_zs&slembw zj^oLMl6?HFCa;ZF2Tq5P>(SQ*xUmGL#KBsa+ioq{xkU$aZJ??3m_icqvjmYPlQMDT zrHKOEH&(2!oh)0MsobKCJzz3RHeYvnDlrk@A)vo z@5!R0heLUPFpEdzz-<*FIps)dXXX8k(;*SMzE#T+Kjfo7j=j)O^&PZJdbWN?4`@6E z1|iV;^_WUpwtnZG>hz!p?0B`bd1dS|4R8A<+7`+X-Hml*{j#gQ_soW*>n8YZC-RFu z>)F*7um=u4)0guaivT5?1^qQU@?g;k%II(T>@8>PkfOLrKu*3lN{yZlDlzYc>b0yy z6&DC}q?6klcn0GN1#a!sdgHAu0k_`G#!OfAvPM_W=Tm-3M0ZOUkH54atG3H)@_asp zCMzzfgf?^&4I-W~e_SM`3&sS5UHAnT)z9($ik7oEsEW65eIpT9f82r&|IBy$WVP`nCS3$-rymU8T1zo~lrdl}k`*t~&Q{UgHIDk02r6 zG!_Z&_L8!UPXcq2T{ltkTpq(%wZ|Gi@dg?vstb>P4=@I>k27@Un7Cw1D%TLH0rx-Pa9uxgSg0~+a zu>`mpTis+und9)3Evo)ty3wz@oJ{3g(n7u^$@?u5XRI7{qOd*z;mdwJG!cEGW?$rw z7ft3_e!{q_4>&Xt4d8zxI@q#r08V7&ux#t%kp@NM=nkZJ_LTH2Ke^8g-@+WpOW_yc zgkXo^8IjLDQ)h5ahwTZL(2(F9O4{%qoUU4r?3Q48SKzWqiki4>THDC4OGHpE+RAFv zb*aMjM89N9%16pvf|evM>H(ml8VM-=F7C)PFCaxXEHLhFI(#opb6g}z?{qxwmC!iM zTk{LEwYjx*XRsAsq%JErGAbs$v4nH=M)afm<~<~yJvwgkM^HYLMZNEov@fC zFg{syd4%IhFgCF)fctswliNvpmSoz$v;8}xj?acbU0TUy>6&<2*{3J~bLsLgN`+zl zm`i@%Ui_uK8o-66U)+Y)vM+YeJ1mRSoLGweg{=|1S0W3!I9!F9a2Ts5)d_%-A`#Vk z41!aqdR=@jqRH~2zKK4kbYk&YoK6s#>CU_Yt#6T3j>DJd!p~}ENR@@|O0_}M*PHu; zutx+i@=#k{;q*yS zeH~NOrMKVd(l@x2U9!x~rnOEdEx_0Dr1v0--_aE?WEwf5w7>J8mh?qHnjUvqyb$G;O382;fSoE$)VT528oUJwr>|y81LdIz`fF1Uj}; zbBffqTE%?TOw*F`6?0&S9Je}ys}5x*!_C%U^c zP5W0U7n^{|Yvr^#eI?0y4%t$|NSg}3ITcO!UVX)!yGzPdR%s^Eq93y#^= zwHp(1_Ld|K#KY4W{o10>IY%K9T$L#bdEGE#n6)OxDmT-2 zpai6pb^+89?ZS{+UP1cVVh-x__vq=t{ug|K_p5cBQlq#%L zZ9*GA$|;UDC^P5ReJ1wBL(FVp=d*g79! z4YSK>T-k0*TXhOF%V-ckA`7`_GPz}0VlDwm`!X^AsgX4QwA`3l%r}YNU-C~(_R;4~ z>R5O_U-fBOfl8EoI1|unde!t zhy+?pMZr9mtx?br_GpHjrU<=OF&wZ|IcY4^EH(L-y_l)3>(Xn5@Gih!P=N!Gq1~Qk zb^ItW_=`PVFQlOGKV^U9bw~*60^s<@ch5%;2K|e#Ojxf8@~Kg$Elwq}I-&`I-4i`? zx^73&yoS${_c(U*U6@>?7~_y2bZ-lS)gsGy5Q&VJf<>T zFxaHcgq*?aOPm|jdXCvYr(TslOZ) zi;{o27L5d7?v>Dst74@z!6K8kvlN1~OXvz@FLw%Cz^?q$kjGEO6KvH~?6)9EfAqj3 zI)fEhOc>-stD8gFgw?QAR}PAH)@7RKMBiYzzHD~(o}Dor39{t9P0LJjp5b6_j-T4N zw(6oZY%g^hg-M_hlLz6FWYw_a_BRoL=y-}5<^hdu`Y?fv*CQ2b$_8@=Cdk|U&G z&RpHpsNR3|PixNIh^0pq@K z#~A#GNkRVcOj+S%vHZOU5!Z;)n8U?0^O(R>l$8P#xWr^uQ8){Z&6JZ_g%$tEvE170 zJ>V5o%R8hDrGG`t6o;Q0tAt5gc~0*^xVVJ07001MS*UFVH}Dbe%?l139-09al4q$| zYdJ3_y^_jk5`{`zk4w?d8?!yivojnet0Kh1!Ma(p^M3Ko3OXghtf$w| z#A=nhX_RFe*3#}Gs-g;h+3ID8p9MSida4)y$bR$ZUn}$?4V7FU#wC^5^sn=4^YRE# zB3qd-sKl$|VYbWHg%)#N(rG}ejc%nFYqbThgZUM3F(-yiUkN2Y>9KdW+fNF$`QCeX+!mzcDGn1NI zgIf)G+8X16AG^mCg)Mv%SPahyE&VT`L#hgZS&!$_>3JXVk~u1JNfrT0T=M5NZdg;h z#M&v4dHA^eq^$5-D)fF($wg)rif2>c+75&KvjDd{<1rj>P7~ea(>R+W1nbYu!Mk*( z338b@K4-OL2pRJ^LUu$4t&1X$AiQ4}+543^eZkamJF4Y)>u(cJrasRF+=ftH$h1Pp zFNBbfoeUdHO}yPl#pF1E*wPp8Hfy<3w@PR%-By^eDQhJ|$QSS8#z>VAdMo0G0dUA1 z)_Ss9407yx^IFvIlG+V309KG|BeJT;5<_wpj?*#u)gV9gNzy0p;ry5iyO)#^gL;&T7tj2+SiSHA=ohV6eY1Gvb+t)x7HE@XV>g#7H_cgGv_m}pDmD|lu+BeT zk9-KLxFyLlE?~C{7{aqWe^;7G`Y!QIMfRwJnpd9W=Vg=|)-xpJH(hliDNmE5I72PD z&pYz_=PO1}DdFMh!i`5u-LU#CIC!WkC+$(j0-6^Lp-SY>llO2y-q_UBzi_f`Qt!HFIgLcr_pxwmP7dMof4Z7 zv50TA?pXlr0%5TG0cBv}tRi;{K;`8W*|cn17CR>*`Z_NHigA;)09~IF2UfbskK4!| zvjTzZ%)8j9iva6`;xCUI`1T$pNoHaw4&g2)bvBFxTLz-6>=g#D35uG^w}i?)9!fxJ z*eyL*Y7*&g?=)TlT!{-24{sxIUotl)68dfPPXJlpM62fgX$lTkk~p6x6>8v} z=W}G!EUS3Js(OC`ms%tQc(B^)Jl+G6n%7g8SR3yOK$pjEDH&yt9U&j@1?GKsjq@al zQ8ms>h@z|bc&~P#Q(kJ5r@3p1-h+;G1pDdGL`Qi(5nt8zRtqgB#CtrbJNEZgxVaIu zj`Y0kV6_j0la3SiYd>^Q_leJNzbko-(-Mx<<2Ld_ZGd!?^pMWj9P=DXW@gSi!iN;B z?5f12lhWN7UOM{f0#=B&U0nxWu-UjS5o<+Up7QcsmeWhzxYkCoGqPbqUCtZt>;`Na z2ql8s{Y{l43E(H>6?yK1+&W>p&u$YA>CT4Xm_$P=IfSyS%pWhq^z`rYpK` zbVl=zKW`fr09yCJU_pq$ZfrY;1yE^cp4t|CM@O<+^aXa0Zyw>%I1J4Wh!0UO``c+g zURmq69P2oU(!2c(%)YXzgG(}cM*ra{2Y07U1HL0_cZ1BIfQ-aDKtp$!yx}8!tkuDs zaBjD^s)K<$8+T*Jph8kI-=OZc#SSim)06wikL?};WwsOs8`azt0vAyr?Q(Ol+mI}$ zxI?TXanZH)1GV6K7uP=9aG*69XoyqM8q7Eu6-itsW45vaAWMo1p+F!uR$toFY^<72< z1U)!7ivp};G0!}kt}KT;!Cj@dl4|C8vgw9P4Z-X@z@=L)yBe(+g@6;kGxd4!Hh_=_ z<#vNpn(I}Qg4R&XEA58#`?ODc51caaRMQmlPjJbKADxt@8nvB>#iW@Ej(;3#y%U!E z7{v)mxbv#leZ@Ke1!Nkld^gqXsU0`Y@*KT$7!~wBTJ;9HgK)`R@*Gr}#1lUG0 z9z_$7-c$nU-SAGB?965p$|E$@a*ORK)F5tc6%M+18~Pj3ejHrFT(Aw@M;9Y!@$SSR zu7HPIRKbt#HYRmHo2}*{Kxl2UKq};!&>E74AnySYwyeCCK%%7|%^jN6%^0TCv#OJHHZ$S0*9z=N1 z#HkG}G!vu-4x;+q)~4f&<18XwTDcW;s8)=(jRVvkW`~({xb4{R6Rq*Ba~Cdx<@VZI zJVpM={#iWE%YHFmyKkm(nyqc#TEDlpnI!A??rsfMXur{t@ruBfuj+zKn-g}DVc8{u z;(aT-RT{pGt196H-&0Tl&L(S2e!UqXZC@$Y{nrKh)kRjy`qLx~; z)<4yhcxz?UB4DVm1}rvTtinR=RK8#v@g%GY^pASF#r@cc#r`v@!FBpKSM z4}A@9AtpnKk$3|_b8A*F@ZG+Cq|Iq!b)Tx?;v#Vb^xCeO?1fg>`1TDVnVF+^dtbbI zxhrW)Sp>h#-y6w?4V=-Sfi;$%tPeJ7`I;W4NEjcQC#dO=8n2irja*J%T3SKeFAOyd z35nm)>iObj0L59CMP}i9UJ}fhLbrqe{!F?iH0otAFV`Bs!ssva_x=%06TaEB+kAH; ze?!NX?(99=tLbc=GIJq2%+JjFV1Vw?ZA;4y)9ug)YiQ`Tpew#t)7gf30Gw%xE1@O& zXan*_0O^~~!!&cpphm-}4=!a-$@sCfPXH($Y0S5@6G(fYmv2q4-oPfM4*IOYBQvIz z3z)qNDr#k0?hs?+y_g^uhxQOLG)xHa8~1Jl`#uxikF#+;eVk0l3f81rf8neVwJ1N2QnIzO|Wh zcQVVponP_ayzen~Bgl;o#modLDJxdEv$yjrvrboJweD&Ct2`?cNsnEj({6|QMrvh; ztq#p5g7-eIUfwb@!Vmw6G-PE><=8Dp@ho|g7yHS{?uR<^cuTeHV$mpwyj4;*Cb~45 zk5>o8h}(}}_usrd>~vSY{n^j|{F{%5hpO6mwwLdLG006l!63U@_9vtyZ4`tFkY0$t zlrPikMO%f|pO;stJlHPu?e2%P;(~lNwuu)nzG}lbuG0#uZ+T(H!>Q^($F6@OT;^m1^}wK}%+N#>Z|zB&2v%;Y z=w`$liO*n>_~+2ql%^>8kXDJfbke{zSy&tYMi+;ZyfA+-(XYGT!r=KW-*s^cysjSC zsMQL|R>^!H2)Vs9OCQHof-QGY#Z#xFySTE^B)2($Wi8Ieag~@ihz7xLs$l3_+Q;-3 zzt!K4^W$T$)N(Xfy|sFK_3rA{>iR&dz-m`}d!z;kvU%8Uhq~xJ*jRDDZ?4pap$};o zQa<Q%|MmL;9gxt%UTMI4cXfSzb$xYn_15Yg3$Ja?<8~#PX7u4h zoFzwbF)QNpc{ZQSPm>rb*3RYA zHNADP!41`52m+eh-h=fGZ?o^2Zf6gYbwf9~1J*}x7kc2&O=oY#teZ_m7j1XD9_Q!h z=ZoMQc+0U~Uykt@d%JxdZ+Rcyu7CLDm;Q%DSp#D>6g(lh>9o;m(-@ntSXz~cY_>p9 zUw4ezvVE!Q`lf?<;wbtCghT(1$NcY?U-G}xDgRrRw6EN$$;;Mb*@}#BGc;JS(}=Cc z*G{ezhz-$Anko8v8CP6=TX|jUk;)2gP_qXDhs|q0F5^eYc3JaKIUdMl3+o2#b?cNM z8zgy;Nzy-57fDr|8>>jREqN>#upSUd~nU1c$gT5mL9j6nN*yuZs8&HpsI#{g?u?L}E~;_;%D|+E8E1dRRg+}#(WD-R%LCG@#PFDePyEp8F49Pt@Y;rdR3tIE z?g2{(B>_qpAn&r2g;zvyvOU`@xEp5>k=3Ie&D2G28h_{^s~hZ#>WmfKAys)5PkPg2 znir@qv1T^i!6A_SAxzAqdA9!HIB-i?GUb*%q@C%;ar%PAxxTVGAn!CNu(E;b$}2r) zievso50FaMr?d8c-70zle=mLqr!&j*M9iSufL-H3UD~$-!%l}F268&I9R~omg5up{eYM+ByZ0dAm_z+5M6p{Dj-xN5va3%N50n3#h%b5X?s znNUSQiSC6@g$_jl4c6C77&^_GbeASG=P4=f92xRV7P9r7UlGe>GFyl1pq{o>TcxrK z_AjJS(&EN@PoD=L|KgG#OC4cY>f%wA{N2r2W@o5HGHdGDK}9JuTGV?MYVz5WB9~e% zZKgzN^h>14c0E~pqV_~Zr8PwxsqB95jQOJP&=SiZJ*(3peZqe-JnO|%x7x84EE;)R+Z3-J(bJiD7h>apK-Ku-9fmv5K!s0Ive>2Ag@ z8f38GTLE5~6d(xD?%B8Prem3)UKe8JhE%2_04)PzVCa+`XlQnrjoPrA!I)~WawEz* zI$(GO6%eU8FOW2yC~9`{&N{Z$UdG@-WiN-x_*MBW^WJ7p!9pYX(|-bc%K*V zO7e#UI+8eptL_}xUnXgl6!FC5nI`7vvgfBsnUwynsEuXqS3dH^QYDiKFxe7WWml1z z2*(`T>fwR}rcQZhFEYLfRRfpD+wJ0oS;(|A7tiZO% zZD(sA7Adv^E_T=K0tCSP-u6mRgq}Y3UC=X@mg}kwd9!+4iN_;r5sMf-@Y9Q7a3e-& z=MUJlW50ly0UHO#dk+A{id1qFLFC-rTiQ~WD-H-=MP*FfD-$<;tf6`~;8NE?7G6Bn z{JTLb7L+u8KTlDx#tDwv?cy)vg37gfEv!DUfF-pat>vLO$iK>;&!>)o-2lo25?tIJ z9*%#0c-Y53-EKUYoyOlDB~|=wG5YrKu)l)m-!^JmIsMnO+C9%Dn&09`0#W4HqQhDV zFUYPdz04FkKKRfO1ZJ?GH?_C!xH*eQ@8XkWjXjC!6faSv$+)L+F}09zCRIW{4kZvQ z{+VRqiIb`q;fl1$HJPCaO|V?<(#7nGi8R_NG7*Q>@^!3#V=Lzd=l%G(>Bg0TzjS3# z#vV@9Hf$=Mq}BP#g6La^IFv;&;&aXDae>&fsTQq>ER>vt^&Al_P;EOb^lae0Ktc(k_k@@aT$GZ6z(`$4|kCzcJBYCq*9J zHxW@jegX00-(nO6N50FA)_H2W7_E=r5Z!DuLok2Q;hCYO8M$IvVIZy^t6}*UK}?wK znLAMN#w5&G9Wq`+5|&M6r5rjVZP95j%2yY-D*fCHJ{%wW&Uey~NA1e!YchI+1$*5) z(SQv{E5Ohy9g@K-Y{ly%&4eQpp;$#80B#b1OS+-ey{MPl7xhw%F6`rOtq<8@y3v@& zEnAL7lN6x}H%-F)%8H#Yp=HT(FbO&l2mE;=jw4K;<)e4?-7HCLoLus5w0J|qT)P)b z+Qar6W9xXeF~D}-nOL!O4cX>keNl`Pu|L<4T5BWpo>$0)ChNyUNqDQbwkjNBE$mx^ ze}OClp!YzAlc4;C!z}x0BTJmM-{nVv z?VQp(*ksMB$MMV=j92OCT~b{G5?S0DdWAhm=iDu`d@o@Fk4apzzL*}q9bTO3tjfIf zAa;#l>1ok<;BJTig|Dt`Q2EDh7HU91`$&0OK1qwRl2IHWGOc9`#8{;aY~H@I8lk%g zS%5edB-g}|Vn%b2GE3CyHZ^k)nH+mtaf;+*`sPM^r@r=HLvLLJWaR9O$JfW~4mtaH zn?rT&3o$E3GvI)+qLNF%5<3|7)iSbF(JWGOans%dShH44XJ^cXMoIdy>+1So>h6Mw z2VLCHka}9UpoDs#i0KM4xjv@(`|Ds@Y53`Q^%`VstM}D*h-D4E2c4(m72tzG3|I3q z>+;l|RTiy@5OM>lWImkFcv{}|rV`OI*07voD$=fju~3HTc5P*j{?W{z-vEOGNQ!Y3Aj>TMh)%1`9O@#{(o)YXQ*T z7p){44wvR?g*y_`<13Tk&b>$y$bsWjXuq)q&SO_Ls?07&1`5O8%r;| zASX&~!kq}$qKEYQ0p}vO$A9wj4)lr!I7CxKe?gv@H@c+UbS-G2m>2VajT zpi|a^ow^hH=}=jQWjdiEFt-eu(fQ_G2i?6~xHJ)T6B1R@ zWtaNU+gk|{!2UappW7#%(t9Nv3!xO4Y#M}lk(taEWO?NJa2 zn(S^IZaq1CI8di0+|%Umsf4|}-g$Jmb+`6usCtrc3HAj$5p;I1)=si*G}>*sc9VQQ7I5!v9d50=H$`5; z)v8cT+!lbwtO)=uu;lmv_BKP?|&EUR9T{4!cJUf|t-QU{^K$*qGyGi2B z!dv-rmL#Lo-cdZ6 z)S<;&K@^zCCJ$?S3!n8$^DB>EJQ_voYX**7=_e{%4c_xyAq7=6~++ zKURv-PxPl7Tm1YU|HHj+JmkL~(LbB~aFZWy%0mWVbC;V~nJ3-eV!&?mH@Eql+x*RK z{^kxhxyw!Na+AB<G7?leb%w-=o zzULK+E2{^W1B}0Hb;txDjA_P$28(3XY;812ldK|bi9=$>G(&t6*sGR)DFvx$W0vRH z=(NbQ^sgJGxM&|XAQm(+2dm)@4+(NB4qwmcy4z`cLBz|P-!9@HZfr#*!yH~!^2QL; zd&?&shJjYWfd>T18yN9gzWasQl*)rTOQtm0h)5)>YFX477{oMX)y(h;!7Qz5hm-ND zIht3t)B;f6R~5B}WINFi>J}0J8x;~5X1UBx?2a4mV(fx1&l9~t3noe3wb9@t9VJ=G zu48X|528tOmP{yG=D0}M<=EP47p*$JJIY}<;Iwu_6Mfja6Z#wgyUZAY+vmBDS|6`P z!WmEV%Tmd_zdO-1VuX2o~mhdf5T=p zt3`?!W{rcY@}bbPeJ}YWIWL>HPlYzA%(F9UpK=}Ig~nR zgv*I1d4UzuiruW6B_ly?m{Er-;t|rlygX5sMP^Qt#0ChAallX|4Zl%nB5 zj-HNtgU}k{uhEKKj&6iH6+_aeY|9n(zw!H)Wo+x5U$u8n6}6|-Vkib<9)~|td+}Q) z99nZGPYt>6awsNc_C$0FE>4K7<<5kDm#jX*U^*OhtReQq5h-5evAA^A~`5?_<_nSASb4+yj z_M@$g+@|6SOZNAFH}WS6#8^2OlHD7hgxGsP>AHIrOU1OL33 z47)xJW9~%2xCHaMYlk);Cv{j`_8yH?1Md?oA0O)Q(^x`Y0tzUUy7S(mc;6vS<{ST= z>XbM6mA`n7mnSH}7KObdA+AtGlarj0GMWP1DzWjmx_iIP`-B2QIosIwtC*DaV< zBacm;7kV&5+oq%t3bkLxBLrG2oRz2fdo!Q82>(S;I%av0{xwVmExC{kBKbojb^HwfaUK@gb(FzYo^!1CkcGO32Pv(f21d&emTHaG6x z*&+maj8?fNDd1c|S(lN27wm#B{_Ru#iIGa+-~NU4PoD&(Wb&$AQWM0K>zA+rg|EL^Y@*s&0^$ z>M(_bElGmyaY(%#Ms!G`13)pQDhtTulW6^+#6#X$T%;%^Ryqa4BA*gbGtXu~=!C#U z05#J*?_VY^H-9Z>D<#~vf2;NUEJnGz;Tt{7irbS9>#Rt#%91#n)t5AvNq0ME zanXAa_0zGf*3tw+)~dd|s^rEKXFnxrhYHjtFV?gfL*Sap=}su~MYel}trCUkGT(&Npca>iG9PgylHRleWpt2K z^O+9qZ%J6Hc>yV{iU@^<8>39A;mL>^Vh2fOv5NRG9IHJqLN^iZ1gR}3sa*4GEt;k^ zQz;<&h+ZQXg?NN49!g?cwN-$6IB81@j#7V}DVEhJ+HrG0&(6%lbgxVxalZxx*aDBXJX+HZY z4oahVa;cgYe5j(#P3l`uXIdONp5-y*idM|=3S0QrJ+y=qh>Lrr(~H+y0#EUn-Su|7 z(idnQvCj6{Pn%~or3GdO;8FWYJmw6J&=Zi-QWTL|6UbL*&Qq7+uCQydkZ~$M%IHJM z&OY9Uo(_Fw$jLO3=o0b@>IWQn;)!{mP;C_YD9|k6i$>6?HI2x6my<4wfvt7`q99sk zmMU!s{Wa8&le32~sOr)jW*THH!Nud`?9sf?nqYJ-rYOnayA2mgO>R{|zSah>1nrI{7zLLiAl%nBK6fjL)uNE|{EhXkyw128e5rKhK7 zrrEyK)w8n;;sXQ*h0D%?4e_R6Fv16MLgK@l* z@2}~q?w*;IA;B3$ckg>uuU@_P>eYKyHPb{CBch{lA)*c<+UY-c647z~a~BaU@tWvZ-@$!2r-KTgv$mncC!M2T38rW3K*MDcpPUOy0EFm*yMl})Zt ztFEhAo-vhljB2^86_Z=nt;}YVr*2rk@wlYp+7o(FW637^{qz2>1QJAjJ=w`@Hk*$( z9&^Q^!Yrb`?qoil&2|&@b*>!Ab`kX@+``IicC5+@okV@T0fQYxeGAXht?FcQFg=tW zNNN>TAFHUv7;5KI*`2dg{G{$`2A1tNX&!z&B)PVzIG*MvSGd~5>SVT`OYDz9R|;}4D+D<- zqC$MVxygKbFnRjf83wuKKRnZr@4PKl#lUouTdg`i)AgPO?pLbLLg=b2$Olb03Q?q z^EcqRdQlVT0|NAfp;%17(Qd)hm?r>n4ya_ROmhWnUQpSwT~D<<*ATclQJgj@DfI@J zQn4V)hoEKvMXRdjdKuLQSKYq6^{pgfQ+>SZ16q*dF@oT8U?Y}_;^t*y50ot{stuF*r3 zrI>rkmAg*;tJCg%>4_hYp1l6;V+OCSZ{P6TkyD*t-g)!Be_Aqd-}@&{ zl}0Z7?Uh&k^Ml7->fL6;g=-}$pm@0d?KJ95IG7`Gq4_nk9-c=ejGl^eI-_#ZE2vyb*CF1l;@ zi8t?iYx{Tl$48!ia_gVHH@Es<_1z;oav$4u)3;y0Y1s{bzxVYAUcCPK1Br4AH!V9m zx%lRNuUY%%zW@GL7W}+t(Pvh51M%xOj@Wbf1<&Q~x#0Yv{@XwCNNm*|zgQxa$W+Z4 zQ}4L$>Gm zRk@Wnhy&p&0uBQX;7oHT0^{xhu2QnCh~cWHt9Tj<4am7DXPc&C6_Kb|wkHSI{4mPV zRKqUomS`LGikfF>UP^RXpfDDS71hZohUUuVArKC29GVysr58rwW441gbTEmBV+hp~ z)g;(Ogf2_VwmDc7h8N*98ZychbPMmW7HD)djOK6S6v*bf4gO?Cd!4Mb2#OeNwD6>|O}QS25Xx|N7-BcjuY z=xHK4oG8{y({vzB$1WkF%|vuG5$z(PtB7cTD1OR(q8oj0cmh%Ua-v3Xyw*paP89#g z1Bf>I$iE><9CD@)+~Nbz_wSEm%-KGEACy zp-cTgR-k$p(N6#GV}bkz4`UmjuZNx=C+Z`FBb}_Md=7tn9+xlRay2efxLCZ#9$vi| zs=XI6H-Gu#ohbIVxZDAlQZ#jI5904!emI>?XVbauKwb!BxvDYm0{mIPMUk+r`135H zz9aMeWb=9RSRzuIzjl@)RuQ0!z}*5Gmy!Ug{B%d_?I69HKT64w4mjG)*s zEtD5b=QEi*|jK_Da6J(ucLz&X3ey6Fo~|UH`9^N>MZI=D&J9v#p+U&N)2l`D5AY z(iv@)GxmXub?J=8%4z&Btd(Gd@czDhxCQcQ(DrhZ{yZq0JfFBY9I>c?A`C6*WmB;- zYU8l2z`#-a7)J}HeUSIT%(GoNi-q8PK~RuE%;A^EHc2q~hv>UiBSJ?tUDdF>41P{d z(BYA;=|*4;5{8yC6}+KV6m76#XsO2eG&%J^0%e6cu8nO^Q5y4C*;O3;R1suQ%HZv` z0*k3JiY?fa0ZGIbQMBq*P0bY5Tk#c5F}%vmcpcvglPtH^-%-`70si1{`&=JQ3`Ba@ zC{R?SP}@|Gw%?{elmSG6(Jn#Z729Ku?KOyrz9OI#2p;L_#W0FDoT}-rR<0_pL}5zT z%ckSF_T*HitXcSV)kr;wE?gb;y$W&zG>%(xZ_ z@)|%Sd5FMpa!Tq7OL4lpLy!RD<9g9w0P$xPfrKnV$Z*mKqc-xM(-daGs12`rlLBbAQWwy_}MYKzx?w)f7*yAT;G4I4sL^ zQsdf`EC^)*)`*}nZSahJrC$YcuXsk_yv~QiKE*QxBc9QOcy?l_JDNw@hp+(|KVLqJ zA>;2s{>PV^(O`e?Xg*n=j`uEIx}|NMj{Vl@UDvLi?lyH6kLHiAPxsBwrrl~9LoRK3 z4!#xAmO{^dDC9m6g<1QdkpDmw;`^a6&`bfkaPTvz!Q2B=z$hBS_mzG1ah*AilTj3D zo3JK;Fw#>@Q(a9CT};W2zp&df*c>V=KvN>-!L}a z!Hnq`EaS2XCxZi(qCreQ?qJ5XtMGIgn>nS7;szrO*;_N7{|2n3%5l@KjHT)2N+HM+ zG0im7;a@DDfstyV?C^L+;17!uDCvf$xfv`wR4v_;9vo{Wp?3UY+N76iDcaYzXyXgI zErpxpcwp$9vJqR>HMbJUl8JEkHO;XgE&RQgmb)*mpzl^832q}c5nndmB zCNm>JRTCAzKuJw`rX%Oawp0qtm9uPg4oz?rwjvjC6r5$cO-J5q@VX+o%yVtERa zSeUsxm?@i1>S8;H+cdRVh*~Z4SwZpV|=2@#dA{L^0#IT1lT2a4uyIFKQ*FYDgg=25@cDmd#;y;ec=o z2Vc)Dy;KTjA+*FaS67TwWK9+9GR-y1Ep}n$$EBAju@IY7J@Z9Sf;JM1_@XqnxOzOzurv>w#{T0O zAC4Xmat@aCI!m4dVz_@uN<8%098jv&YMfH7RvT^R3DTLlk6j%^@%!R@O%tIQmfu)~ z6JxB>LTvv6Lu3LFvTI<#$DX>iBLWa-$`k6l;TRLdND>?zjhdFwZy zTbr0v*RCy9JhG;uO3iNdgEKq-}UQnUV6)w4-LHh zo8d=KxIv%u>VnMZq1|0SSn{vqhhF}@E57^gyDxnvvF?(63-4Wb=gM`?{^_|b}yZ5uTXMXvj)%);c+1)hz?>_mhZ`{-E{O2PZ2fnxc zrdyv${pkChbFRI=E57%I{9V6res}lgns&je^In>`<*9WO+f%8|XMc12n}7Y{ipP$A zYU(BXsB>yhUOa2!pnw0#<7;kz^vvZ;zk7f8F*}#_jlc5N*E{a~+SqF+zkca2H|@E5 z)$s4nJpL>F#ovGR+grZ6>yFR;_Q#i3MsrKwTv)A z2p|J2^Fj-!=mNtDD#o`TMI&IK;JGE1V%5TgZB)&`D(U1pMKRRUWS zk5>KT5T>EXt|6)vVCFi_R@sa$+6b2<&pak={NRI|DcNpK!4JbrG=yF7DhT>CK0^rp zQ7h>}|57tw1Aw&;XpkEk$08U`fVxN!nq=&Z_(k;IfPDlu1Nd9La7A^*N+*Hg|)Ko!Xnp|y;N{I7iTUy?>q|Og*rNS2w zqjZG&8Y*HH#R-D*C?9b3DV^B{|D`?Ar6?b~jG-xb-Hs>`ZNae(U6pgLu&YMvo?Er# zQWVBXAOv15;H*unO(mjw^N}eSS{ozUVY4Qtn+z>?s&Q&G@XY>ecj}@w(7x)`^peTgTpAKs(2d3E+ z%cqKkU~7fXp0y|pCct5i!+Bz!t2ikf*%wkr#3G$3GF|%*Et+T(j?`Jxx({E-3vcrQ zA3iDL`ln&wLf@{}>uY>Aa9=~Cd7S3Jl6Q=zen+WoaRU;sP$P4<#{EiR~T10XUj-V;%5DM?6dTbWe z<8x@5W>Y;rT~E+qR8Pd_Q9aSoL-j=GK~#r7@jvx?@6x4(UaI>CHbAVgW92aE0{#ax Cjw|~B literal 0 HcmV?d00001 diff --git a/MikroYellow/20260312/20260312064334-Config.rsc b/MikroYellow/20260312/20260312064334-Config.rsc new file mode 100644 index 0000000..d85c2c9 --- /dev/null +++ b/MikroYellow/20260312/20260312064334-Config.rsc @@ -0,0 +1,3969 @@ +# 2026-03-12 06:43:44 by RouterOS 7.21.3 +# software id = A8L5-07YF +# +# model = RB952Ui-5ac2nD +# serial number = D3D50CEDCD38 +/interface bridge +add name=Bridge-LAN port-cost-mode=short +/interface wireless +# managed by CAPsMAN +# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding +set [ find default-name=wlan1 ] disabled=no ssid=MikroTik +# managed by CAPsMAN +# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding +set [ find default-name=wlan2 ] disabled=no ssid=MikroTik +/disk +add slot=tmpfs tmpfs-max-size=22369621 type=tmpfs +/interface list +add name=WAN +add name=LAN +/interface wireless security-profiles +set [ find default=yes ] supplicant-identity=MikroTik +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +/caps-man manager interface +set [ find default=yes ] forbid=yes +/certificate settings +set builtin-trust-store=fetch crl-store=system +/interface bridge port +add bridge=Bridge-LAN interface=ether1 internal-path-cost=10 path-cost=10 +add bridge=Bridge-LAN interface=ether2 internal-path-cost=10 path-cost=10 +add bridge=Bridge-LAN interface=ether3 internal-path-cost=10 path-cost=10 +add bridge=Bridge-LAN interface=ether4 internal-path-cost=10 path-cost=10 +add bridge=Bridge-LAN interface=ether5 internal-path-cost=10 path-cost=10 +add bridge=Bridge-LAN interface=wlan2 internal-path-cost=10 path-cost=10 +add bridge=Bridge-LAN interface=wlan1 internal-path-cost=10 path-cost=10 +/ip firewall connection tracking +set udp-timeout=10s +/ipv6 settings +set disable-ipv6=yes disable-link-local-address=yes +/interface list member +add interface=ether1 list=WAN +add interface=ether2 list=LAN +add interface=ether3 list=LAN +add interface=ether4 list=LAN +add interface=ether5 list=LAN +add interface=wlan2 list=LAN +add interface=wlan1 list=LAN +/interface ovpn-server server +add mac-address=FE:9B:F4:E6:40:D9 name=ovpn-server1 +/interface wifi capsman +set package-path="" require-peer-certificate=no +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-certificate-common-names=CAPsMAN-A2A7DF3D5EE6 \ + certificate=CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes \ + interfaces=wlan1,wlan2 lock-to-caps-man=yes +/ip address +add address=10.30.30.86/24 interface=ether2 network=10.30.30.0 +/ip dns +set servers=10.30.30.81 +/ip hotspot profile +set [ find default=yes ] html-directory=hotspot +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set www disabled=yes +set ssh port=2222 +set api disabled=yes +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ipv6 nd +set [ find default=yes ] advertise-dns=yes +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroYellow +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=10.30.30.10 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system scheduler +add interval=1w name=BackupEveryWeek on-event=BackupAndUpdate policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2025-07-07 start-time=04:39:32 +add comment="CloudFlare Certificate Update" interval=1w name=\ + Certificate_CloudFlare_Update on-event=Certificate_CloudFlare policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2025-11-28 start-time=05:45:40 +add comment="Setup Global Environment for scripts" name=AM-SetGlobalEnv \ + on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" interval=1d name=\ + AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +/system script +add dont-require-permissions=no name=BackupAndUpdate owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \_Script name: BackupAndUpdate\r\ + \n#\r\ + \n# SCRIPT INFORMATION\r\ + \n#\r\ + \n# Script: Mikrotik RouterOS automatic backup & update\r\ + \n# Version: 25.04.15\r\ + \n# Created: 07/08/2018\r\ + \n# Updated: 15/04/2025\r\ + \n# Author: Alexander Tebiev\r\ + \n# Website: https://github.com/beeyev\r\ + \n# You can contact me by e-mail at tebiev@mail.com\r\ + \n#\r\ + \n# IMPORTANT!\r\ + \n# Minimum supported RouterOS version is v6.43.7\r\ + \n#\r\ + \n# --- MODIFY THIS SECTION AS NEEDED ---\r\ + \n# Notification e-mail\r\ + \n# (Make sure you have configured Email settings in Tools -> Email)\r\ + \n:local emailAddress \"vados@vados.ru\";\r\ + \n\r\ + \n# Script mode, possible values: backup, osupdate, osnotify.\r\ + \n# backup - Only backup will be performed. (default value, if none p\ + rovided)\r\ + \n#\r\ + \n# osupdate - Installs new RouterOS if available and creates backups b\ + efore/after update (ignores `forceBackup`)\r\ + \n# Sends email only when an update is found.\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n#\r\ + \n# osnotify - Sends email only if a new RouterOS update is found (no b\ + ackups)\r\ + \n# Set `forceBackup` to always create backups on every run\ + \r\ + \n:local scriptMode \"osupdate\"\r\ + \n\r\ + \n# Additional parameter if you set `scriptMode` to `osupdate` or `osnotif\ + y`\r\ + \n# Set `true` if you want the script to perform backup every time its fir\ + ed, whatever script mode is set.\r\ + \n:local forceBackup true\r\ + \n\r\ + \n# Backup encryption password, no encryption if no password.\r\ + \n:local backupPassword \"Peskar55\"\r\ + \n\r\ + \n# If true, passwords will be included in exported config.\r\ + \n:local sensitiveDataInConfig true\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:local updateChannel \"stable\"\r\ + \n\r\ + \n# Installs patch updates only (scriptMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false\r\ + \n\r\ + \n# Include public IP info in email if set to true\r\ + \n:local detectPublicIpAddress true\r\ + \n\r\ + \n## Allow anonymous statistics collection. (script mode and generic non-s\ + ensitive device info)\r\ + \n:local anonStats false\r\ + \n\r\ + \n# !!! DO NOT EDIT BELOW THIS LINE UNLESS YOU KNOW WHAT YOU\E2\80\99RE D\ + OING !!!\r\ + \n\r\ + \n:local scriptVersion \"25.04.15\"\r\ + \n\r\ + \n# default and fallback public IP detection services\r\ + \n:local ipAddressDetectServiceDefault \"https://ipv4.mikrotik.ovh/\"\r\ + \n:local ipAddressDetectServiceFallback \"https://api.ipify.org/\"\r\ + \n\r\ + \n#Script messages prefix\r\ + \n:local SMP \"Bkp&Upd:\"\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\"\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\"\r\ + \n:log info \"\$SMP Script Mode: `\$scriptMode`, Update channel: `\$update\ + Channel`, Force backup: `\$forceBackup`, Install only patch updates: `\$in\ + stallOnlyPatchUpdates`\"\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n\r\ + \n# Returns currently running RouterOS version\r\ + \n# :put [\$FuncGetRunningOsVersion] # Output: 6.48.1\r\ + \n:local FuncGetRunningOsVersion do={\r\ + \n :local runningOsAndChannel [/system resource get version]\r\ + \n\r\ + \n :local spacePos [:find \$runningOsAndChannel \" \"]\r\ + \n :if ([:len \$spacePos] = 0) do={\r\ + \n :log error \"Bkp&Upd: Could not extract installed OS version string:\ + \_`\$runningOsAndChannel`.\"\r\ + \n :error \"Bkp&Upd: error, check logs\"\r\ + \n }\r\ + \n\r\ + \n :local versionOnly [:pick \$runningOsAndChannel 0 \$spacePos]\r\ + \n\r\ + \n :return \$versionOnly\r\ + \n}\r\ + \n\r\ + \n# Returns currently running RouterOS channel\r\ + \n# :put [\$FuncGetRunningOsChannel] # Output: stable\r\ + \n:local FuncGetRunningOsChannel do={\r\ + \n :local runningOsAndChannel [/system resource get version]\r\ + \n\r\ + \n :local open [:find \$runningOsAndChannel \"(\"]\r\ + \n :if ([:len \$open] = 0) do={\r\ + \n :log error \"Bkp&Upd: Could not extract installed OS channel from ve\ + rsion string: `\$runningOsAndChannel`.\"\r\ + \n :error \"Bkp&Upd: error, check logs\"\r\ + \n }\r\ + \n\r\ + \n :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOsA\ + ndChannel]]\r\ + \n :local close [:find \$rest \")\"]\r\ + \n :local channel [:pick \$rest 0 \$close]\r\ + \n\r\ + \n :return \$channel\r\ + \n}\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1\r\ + \n :local ver2 \$2\r\ + \n\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1\r\ + \n :local dot1 [:find \$ver \".\"]\r\ + \n :if (\$dot1 = -1) do={ :return \$ver }\r\ + \n\r\ + \n :local major [:pick \$ver 0 \$dot1]\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]]\r\ + \n :local dot2 [:find \$rest \".\"]\r\ + \n :local minor \$rest\r\ + \n :if (\$dot2 >= 0) do={ :set minor [:pick \$rest 0 \$dot2] }\r\ + \n\r\ + \n :return (\$major . \".\" . \$minor)\r\ + \n }\r\ + \n\r\ + \n # Compare the major and minor components of both version strings\r\ + \n :if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={\ + \r\ + \n :return true\r\ + \n }\r\ + \n :return false\r\ + \n}\r\ + \n\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n# :put [\$FuncCreateBackups \"daily-backup\"]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName \$1\r\ + \n :local backupPassword \$2\r\ + \n :local sensitiveDataInConfig \$3\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"Bkp&Upd:\"\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\"\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\")\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\"\r\ + \n :error \$exitErrorMessage\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\"\r\ + \n :local backupFileConfig \"\$backupName.rsc\"\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig}\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$backupPassword] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\")\r\ + \n /system backup save dont-encrypt=yes name=\$backupName\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\")\r\ + \n /system backup save password=\$backupPassword name=\$backupName\r\ + \n }\r\ + \n\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\")\r\ + \n\r\ + \n ## Export config file\r\ + \n :if (\$sensitiveDataInConfig = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\")\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\"\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \"\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\")\r\ + \n /export compact hide-sensitive terse file=\$backupName\r\ + \n }\r\ + \n\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\")\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \")\r\ + \n\r\ + \n :delay 20s\r\ + \n\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\")\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\")\r\ + \n :error \$exitErrorMessage\r\ + \n }\r\ + \n\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\")\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\")\r\ + \n :error \$exitErrorMessage\r\ + \n }\r\ + \n\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n\r\ + \n :return \$backupNames\r\ + \n}\r\ + \n\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n\r\ + \n :local emailTo \$1\r\ + \n :local emailSubject \$2\r\ + \n :local emailBody \$3\r\ + \n :local emailAttachments \$4\r\ + \n\r\ + \n :local SMP \"Bkp&Upd:\"\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\"\r\ + \n\r\ + \n :log info \"\$SMP Attempting to send email to `\$emailTo`\"\r\ + \n\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60\r\ + \n :local waitCounterPre 0\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\"\r\ + \n :error \$exitErrorMessage\r\ + \n }\r\ + \n\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\"\r\ + \n :delay 1s\r\ + \n :set waitCounterPre (\$waitCounterPre + 1)\r\ + \n }\r\ + \n\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$emailTo subject=\$emailSubject body=\$emailBo\ + dy file=\$emailAttachments\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\"\r\ + \n :error \$exitErrorMessage\r\ + \n }\r\ + \n\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60\r\ + \n :local waitCounter 0\r\ + \n :local emailStatus \"\"\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\"\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status]\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\"\r\ + \n\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout\r\ + \n } else={\r\ + \n :delay 1s\r\ + \n :set waitCounter (\$waitCounter + 1)\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$emailTo`\"\r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\"\r\ + \n :error \$exitErrorMessage\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion\r\ + \n\r\ + \n:global buGlobalVarScriptStep\r\ + \n:local scriptStep \$buGlobalVarScriptStep\r\ + \n:do {/system script environment remove buGlobalVarScriptStep} on-error={\ + }\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n\r\ + \n\r\ + \n#\r\ + \n# Initial validation\r\ + \n#\r\ + \n\r\ + \n## Check email settings\r\ + \n:if ([:len \$emailAddress] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$emailAddress` is not set, or contai\ + ns invalid value. Script stopped.\")\r\ + \n :error \$exitErrorMessage\r\ + \n}\r\ + \n\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\"\r\ + \n:local emailFromAddress [/tool e-mail get from]\r\ + \n\r\ + \n:log info \"\$SMP Validating email settings...\"\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server]\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address]\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage\r\ + \n}\r\ + \n\r\ + \n# Script mode validation\r\ + \n:if (\$scriptMode != \"backup\" and \$scriptMode != \"osupdate\" and \$s\ + criptMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$scriptMode` is not set, or c\ + ontains invalid value: `\$scriptMode`. Script stopped.\")\r\ + \n :error \$exitErrorMessage\r\ + \n}\r\ + \n\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\")\r\ + \n :error \$exitErrorMessage\r\ + \n}\r\ + \n\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if (\$scriptMode = \"osupdate\" and \$installOnlyPatchUpdates = true) d\ + o={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\")\r\ + \n :error \$exitErrorMessage\r\ + \n }\r\ + \n\r\ + \n :local susRunningOsChannel [\$FuncGetRunningOsChannel]\r\ + \n\r\ + \n :if (\$susRunningOsChannel != \"stable\" and \$susRunningOsChannel != \ + \"long-term\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$susRunningOsChannel`. Script stopped\")\r\ + \n :error \$exitErrorMessage\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n#\r\ + \n# Get current date and time\r\ + \n#\r\ + \n:local rawTime [/system clock get time]\r\ + \n:local rawDate [/system clock get date]\r\ + \n\r\ + \n# Current time in specific format `hh-mm-ss`\r\ + \n:local currentTime ([:pick \$rawTime 0 2] . \"-\" . [:pick \$rawTime 3 5\ + ] . \"-\" . [:pick \$rawTime 6 8])\r\ + \n\r\ + \n# Current date `YYYY-MM-DD` or `YYYY-Mon-DD`\r\ + \n:local currentDate \"undefined\"\r\ + \n\r\ + \n# Check if the date is in the old format\r\ + \n:if ([:len [:tonum [:pick \$rawDate 0 1]]] = 0) do={\r\ + \n # Convert old format `nov/11/2023` > `2023-nov-11`\r\ + \n :set currentDate ([:pick \$rawDate 7 11] . \"-\" . [:pick \$rawDate 0 \ + 3] . \"-\" . [:pick \$rawDate 4 6])\r\ + \n} else={\r\ + \n # Use new format as is `YYYY-MM-DD`\r\ + \n :set currentDate \$rawDate\r\ + \n}\r\ + \n\r\ + \n:local currentDateTime (\$currentDate . \"-\" . \$currentTime)\r\ + \n\r\ + \n:local deviceBoardName [/system resource get board-name]\r\ + \n\r\ + \n## Check if it's a cloud hosted router\r\ + \n:local isCloudHostedRouter false;\r\ + \n:if ([:pick \$deviceBoardName 0 3] = \"CHR\" or [:pick \$deviceBoardName\ + \_0 3] = \"x86\") do={\r\ + \n :set isCloudHostedRouter true;\r\ + \n};\r\ + \n\r\ + \n:local deviceIdentityName [/system identity get name];\r\ + \n:local deviceIdentityNameShort [:pick \$deviceIdentityName 0 18]\r\ + \n\r\ + \n:local deviceRbModel \"CloudHostedRouter\";\r\ + \n:local deviceRbSerialNumber \"--\"\r\ + \n:local deviceRbCurrentFw \"--\"\r\ + \n:local deviceRbUpgradeFw \"--\"\r\ + \n\r\ + \n:if (\$isCloudHostedRouter = false) do={\r\ + \n :set deviceRbModel [/system routerboard get model]\r\ + \n :set deviceRbSerialNumber [/system routerboard get serial-number]\r\ + \n :set deviceRbCurrentFw [/system routerboard get current-firmware]\r\ + \n :set deviceRbUpgradeFw [/system routerboard get upgrade-firmware]\r\ + \n};\r\ + \n\r\ + \n:local runningOsChannel [\$FuncGetRunningOsChannel]\r\ + \n:local runningOsVersion [\$FuncGetRunningOsVersion]\r\ + \n:local deviceOsVerAndChannelRunning [/system resource get version]\r\ + \n\r\ + \n:local backupNameTemplate \"backup_v\$runningOsVersion_\$runningOsCh\ + annel_\$currentDateTime\"\r\ + \n:local backupNameBeforeUpdate \"backup_before_update_\$backupNameTemplat\ + e\"\r\ + \n:local backupNameAfterUpdate \"backup_after_update_\$backupNameTemplate\ + \"\r\ + \n\r\ + \n## Email body template\r\ + \n\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$deviceIdentityNameShort`\"\ + \r\ + \n\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\nhttps://github.com/beeyev/Mikrotik-RouterOS-auto\ + matic-backup-and-update\"\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\"\r\ + \n\r\ + \n:local mailBodyDeviceInfo \"\"\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + \r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\")\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$deviceIdent\ + ityName\")\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$deviceRbMo\ + del\")\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$deviceBoar\ + dName\")\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + viceRbSerialNumber\")\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\")\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem resource get build-time]\")\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW: \$d\ + eviceRbCurrentFw\")\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system clock get time-zone-name ])\")\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system \ + resource get uptime]\")\r\ + \n# IP address will be appended later if needed\r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"]\r\ + \n\r\ + \n## IP address detection\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\")\r\ + \n :delay 1m\r\ + \n }\r\ + \n # default values\r\ + \n :local publicIpAddress \"not-detected\"\r\ + \n :local telemetryDataQuery \"\"\r\ + \n\r\ + \n :if (\$detectPublicIpAddress = true or \$anonStats = true) do={\r\ + \n :if (\$anonStats = true) do={\r\ + \n :set telemetryDataQuery (\"\\\?mode=\" . \$scriptMode . \"&scriptv\ + er=\" . \$scriptVersion . \"&updatechannel=\" . \$updateChannel . \"&osver\ + =\" . \$runningOsVersion . \"&step=\" . \$scriptStep . \"&forcebackup=\" .\ + \_\$forceBackup . \"&onlypatchupdates=\" . \$installOnlyPatchUpdates . \"&\ + model=\" . \$deviceRbModel . \"&deviceboard=\" . \$deviceBoardName)\r\ + \n }\r\ + \n\r\ + \n :do {:set publicIpAddress ([/tool fetch http-method=\"get\" url=(\$i\ + pAddressDetectServiceDefault . \$telemetryDataQuery) output=user as-value]\ + ->\"data\")} on-error={\r\ + \n :if (\$detectPublicIpAddress = true) do={\r\ + \n :log warning \"\$SMP Failed to detect public IP using default se\ + rvice: `\$ipAddressDetectServiceDefault`\"\r\ + \n :log warning \"\$SMP Trying fallback service: `\$ipAddressDetect\ + ServiceFallback`\"\r\ + \n\r\ + \n :do {:set publicIpAddress ([/tool fetch http-method=\"get\" url=\ + \$ipAddressDetectServiceFallback output=user as-value]->\"data\")} on-erro\ + r={\r\ + \n :log warning \"\$SMP Could not detect public IP address using \ + fallback detection service: `\$ipAddressDetectServiceFallback`\"\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n # basic safety\r\ + \n :set publicIpAddress ([:pick \$publicIpAddress 0 15])\r\ + \n\r\ + \n :if (\$detectPublicIpAddress = true) do={\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP add\ + ress: \$publicIpAddress\")\r\ + \n :log info \"\$SMP Public IP address detected: `\$publicIpAddress`\ + \"\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\E2\80\933 run only if auto-update is enabled and a new versio\ + n is available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :local routerOsVersionAvailable \"0.0.0\"\r\ + \n :local isNewOsUpdateAvailable false\r\ + \n :local isLatestOsAlreadyInstalled true\r\ + \n :local isOsNeedsToBeUpdated false\r\ + \n :local isUpdateCheckSucceeded false\r\ + \n :local isEmailNeedsToBeSent false\r\ + \n\r\ + \n :local mailSubjectPartAction \"\"\r\ + \n :local mailPtBodyAction \"\"\r\ + \n\r\ + \n :local mailPtSubjectBackup \"\"\r\ + \n :local mailPtBodyBackup \"\"\r\ + \n\r\ + \n # Checking for new version\r\ + \n :if (\$scriptMode = \"osupdate\" or \$scriptMode = \"osnotify\") do={\ + \r\ + \n log info (\"\$SMP Setting update channel to `\$updateChannel`\")\r\ + \n /system package update set channel=\$updateChannel\r\ + \n log info (\"\$SMP Checking for new RouterOS version. Current install\ + ed version is: `\$runningOsVersion`\")\r\ + \n /system package update check-for-updates\r\ + \n\r\ + \n # Wait to allow the system to check for updates\r\ + \n :delay 5s;\r\ + \n\r\ + \n :local packageUpdateStatus \"undefined\"\r\ + \n\r\ + \n :set routerOsVersionAvailable [/system package update get latest-ver\ + sion]\r\ + \n :set packageUpdateStatus [/system package update get status]\r\ + \n\r\ + \n :if (\$packageUpdateStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$routerOsV\ + ersionAvailable`\")\r\ + \n :set isNewOsUpdateAvailable true\r\ + \n :set isLatestOsAlreadyInstalled false\r\ + \n :set isUpdateCheckSucceeded true\r\ + \n :set isEmailNeedsToBeSent true\r\ + \n\r\ + \n :set mailSubjectPartAction \"New RouterOS available\"\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningOsVersion, new version: v\$routerOsVersionAvailable. \ + \\n\$changelogUrl\"\r\ + \n } else={\r\ + \n :if (\$packageUpdateStatus = \"System is already up to date\") do=\ + {\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningOsVersion`\")\r\ + \n :set isUpdateCheckSucceeded true\r\ + \n\r\ + \n :set mailSubjectPartAction \"No os update available\"\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningOsVersion`\"\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$packageUpdateStatus`\")\r\ + \n :set isEmailNeedsToBeSent true\r\ + \n\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\"\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$packageUpdateStatus`\\n\\nPlea\ + se review the logs on the device for more details and verify internet conn\ + ectivity.\"\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if (\$scriptMode = \"osupdate\" and \$isNewOsUpdateAvailable = true) \ + do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningOsVersion \$routerOsVersion\ + Available] = true) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningOsVersion, new version: v\$rout\ + erOsVersionAvailable\"\r\ + \n :set isOsNeedsToBeUpdated true\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningOsVersion, new ver\ + sion: v\$routerOsVersionAvailable\"\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\")\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$scriptMode = \"backup\" or \$isOsNeedsT\ + oBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\")\r\ + \n\r\ + \n :set isEmailNeedsToBeSent true\r\ + \n\r\ + \n :local backupName \$backupNameTemplate\r\ + \n\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate\r\ + \n\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\"\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$deviceIdentityName' is scheduled to upgrade RouterOS from \ + version v.\$runningOsVersion to version v.\$routerOsVersionAvailable (Upda\ + te channel: \$updateChannel)\")\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\")\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \")\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\")\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$backupPas\ + sword \$sensitiveDataInConfig];\r\ + \n\r\ + \n :set mailPtSubjectBackup \"Backup created\"\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\"\r\ + \n } on-error={\r\ + \n #failed to create backup\r\ + \n :set isOsNeedsToBeUpdated false\r\ + \n\r\ + \n :set mailPtSubjectBackup \"Backup failed\"\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\"\r\ + \n\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\"\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\"\r\ + \n\r\ + \n :local mailStep1Subject \$mailSubjectPrefix\r\ + \n :local mailStep1Body \"\"\r\ + \n\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n\\\ + n\" . \$mailBodyCopyright)\r\ + \n\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$emailAddress \$mailStep1Subject \$mailSte\ + p1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\"\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + \r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\"\r\ + \n :do {\r\ + \n :local nextStep 2\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\"\r\ + \n :set nextStep 3\r\ + \n }\r\ + \n\r\ + \n :local scheduledCommand (\":delay 5s; /system scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; :global buGlobalVarScriptStep \$nextStep; :global buGl\ + obalVarTargetOsVersion \\\"\$routerOsVersionAvailable\\\"; :delay 10s; /sy\ + stem script run BackupAndUpdate;\")\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0\r\ + \n\r\ + \n /system package update install\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task\r\ + \n :do {/system scheduler remove BKPUPD-NEXT-BOOT-TASK} on-error={}\r\ + \n\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\"\r\ + \n\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\")\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\"\r\ + \n\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$emailAddress \$mailUpdateErrorSubject \$mail\ + UpdateErrorBody \"\"\r\ + \n\r\ + \n :error \$exitErrorMessage\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\"\r\ + \n\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\"\r\ + \n\r\ + \n /system routerboard upgrade\r\ + \n :delay 2s\r\ + \n\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 5s;\ + \_/system scheduler remove BKPUPD-NEXT-BOOT-TASK; :global buGlobalVarScrip\ + tStep 3; :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersi\ + on\\\"; :delay 10s; /system script run BackupAndUpdate;\" start-time=start\ + up interval=0\r\ + \n\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\")\r\ + \n\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion\r\ + \n :do {/system script environment remove buGlobalVarTargetOsVersion} on-\ + error={}\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\"\r\ + \n }\r\ + \n\r\ + \n :local mailStep3Subject \$mailSubjectPrefix\r\ + \n :local mailStep3Body \"\"\r\ + \n\r\ + \n :if (\$targetOsVersion = \$runningOsVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningOsVersion`\"\r\ + \n\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\")\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\")\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\")\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\")\r\ + \n\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + backupPassword \$sensitiveDataInConfig];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningOsVersion`\"\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\")\r\ + \n\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningOsVersion`\\nCheck device logs for \ + more details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\")\r\ + \n }\r\ + \n\r\ + \n \$FuncSendEmailSafe \$emailAddress \$mailStep3Subject \$mailStep3Body \ + \$mailAttachments\r\ + \n\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + \r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n\r\ + \n :log info \"\$SMP Final report email sent successfully, and the script\ + \_has finished.\"\r\ + \n}\r\ + \n\r\ + \n:log info \"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\"" +add comment="Certificates CloudFlare" dont-require-permissions=no name=\ + Certificate_CloudFlare owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + tool fetch url=https://cacerts.digicert.com/DigiCertGlobalRootCA.crt.pem\r\ + \n/certificate import file-name=DigiCertGlobalRootCA.crt.pem passphrase=\"\ + \"\r\ + \n/tool fetch url=https://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA25\ + 62020CA1-1.crt.pem\r\ + \n/certificate import file-name=DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt.\ + pem passphrase=\"\"\r\ + \n#/ip dns set allow-remote-requests=yes doh-max-concurrent-queries=100 do\ + h-max-server-connections=20 use-doh-server=https://security.cloudflare-dns\ + .com/dns-query verify-doh-cert=yes\r\ + \n#/ip dns static add address=1.1.1.1 name=security.cloudflare-dns.com\r\ + \n#/ip dns static add address=1.0.0.1 name=security.cloudflare-dns.com\r\ + \n#/ip dns static add address=2606:4700:4700::1111 name=security.cloudflar\ + e-dns.com type=AAAA\r\ + \n#/ip dns static add address=2606:4700:4700::1001 name=security.cloudflar\ + e-dns.com type=AAAA\r\ + \n#/ip dns set servers=\"\"" +add dont-require-permissions=no name=Amster-Backup-UpdateEmail owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by/// Vados\r\ + \n# RouterOS script: Amster-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# Add scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n \$LogPrint warning \$ScriptName (\"SystemScheduler NOT SET!\");\r\ + \n /system/scheduler/add name=\$ScriptName on-event=\"/system/script { ru\ + n \$ScriptName; }\" comment=\"Scheduler for \$ScriptName\" interval=\"7d 0\ + 0:00:00\" policy=ftp,reboot,read,write,policy,test,password,sniff,sensitiv\ + e,romon start-time=\"03:41:27\"; \r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n:global getPubIp;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false\r\ + \n:local scriptVersion \"26.02.12\"\r\ + \n\r\ + \n# Include public IP info in email if set to true\r\ + \n:local includePubIpAddr true;\r\ + \n# default and fallback public IP detection services\r\ + \n:local ipAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:local ipAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\"\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\"\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\"\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\"\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n\r\ + \n# Returns currently running RouterOS version\r\ + \n# :put [\$FuncGetRunningOsVersion] # Output: 6.48.1\r\ + \n:local FuncGetRunningOsVersion do={\r\ + \n :local runningOsAndChannel [/system resource get version];\r\ + \n :local spacePos [:find \$runningOsAndChannel \" \"];\r\ + \n :if ([:len \$spacePos] = 0) do={\r\ + \n :log error \"\$SMP Could not extract installed OS version string: `\ + \$runningOsAndChannel`.\";\r\ + \n :error \"\$SMP error, check logs\";\r\ + \n }\r\ + \n :local versionOnly [:pick \$runningOsAndChannel 0 \$spacePos];\r\ + \n :return \$versionOnly;\r\ + \n}\r\ + \n# Returns currently running RouterOS channel\r\ + \n# :put [\$FuncGetRunningOsChannel] # Output: stable\r\ + \n:local FuncGetRunningOsChannel do={\r\ + \n :local runningOsAndChannel [/system resource get version];\r\ + \n :local open [:find \$runningOsAndChannel \"(\"];\r\ + \n :if ([:len \$open] = 0) do={\r\ + \n :log error \"\$SMP Could not extract installed OS channel from versi\ + on string: `\$runningOsAndChannel`.\";\r\ + \n :error \"\$SMP error, check logs\";\r\ + \n }\r\ + \n :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOsA\ + ndChannel]];\r\ + \n :local close [:find \$rest \")\"];\r\ + \n :local channel [:pick \$rest 0 \$close];\r\ + \n :return \$channel;\r\ + \n}\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {/system script environment remove buGlobalVarScriptStep} on-error={\ + }\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :local susRunningOsChannel [\$FuncGetRunningOsChannel];\r\ + \n :if (\$susRunningOsChannel != \"stable\" and \$susRunningOsChannel != \ + \"long-term\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$susRunningOsChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global isCHR;\r\ + \n:global devRbModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbCurrentFw;\r\ + \n:global devRbUpgradeFw;\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local runningOsChannel [\$FuncGetRunningOsChannel];\r\ + \n:local runningOsVersion [\$FuncGetRunningOsVersion];\r\ + \n:local deviceOsVerAndChannelRunning [/system resource get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningOsVersion . \"_\"\ + \_. \$runningOsChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\nhttps://github.com/beeyev/Mikrotik-RouterOS-auto\ + matic-backup-and-update\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devRbModel\ + \");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem resource get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW: \$d\ + evRbCurrentFw\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system clock get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system \ + resource get uptime]\");\r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n## IP address detection\r\ + \n :local publicIpAddress \"not-detected\";\r\ + \n :if ([\$includePubIpAddr] = true) do={\r\ + \n :set publicIpAddress [ \$getPubIp \$ipAddrDefault ];\r\ + \n :if (([\$publicIpAddress] = false) || ([\$publicIpAddress] = \"not\ + -detected\")) do={\r\ + \n :log warning \"\$SMP Failed to detect public IP using default se\ + rvice: `\$ipAddrDefault`\";\r\ + \n :log warning \"\$SMP Trying fallback service: `\$ipAddrFallback`\ + \";\r\ + \n :set publicIpAddress [ \$getPubIp \$ipAddrFallback ];\r\ + \n :if (([\$publicIpAddress] = false) || ([\$publicIpAddress] = \"n\ + ot-detected\")) do={\r\ + \n :log warning \"\$SMP Could not detect public IP address using \ + fallback detection service: `\$ipAddrFallback`\";\r\ + \n }\r\ + \n }\r\ + \n :set publicIpAddress ([ :pick \$publicIpAddress 0 15]);\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP addre\ + ss: \$publicIpAddress\");\r\ + \n :log info \"\$SMP Public IP address detected: `\$publicIpAddress`\";\ + \r\ + \n } \r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :global ROsVerAvail 0.0.0;\r\ + \n :global PkgUpdStatus \"undefined\";\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningOsVersion`\");\r\ + \n /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningOsVersion, new version: v\$ROsVerAvail. \\n\$changelo\ + gUrl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningOsVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningOsVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningOsVersion \$ROsVerAvail] = \ + true) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningOsVersion, new version: v\$ROsV\ + erAvail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningOsVersion, new ver\ + sion: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningOsVersion to version v.\$ROsVerAvail (Update channel: \$updateCha\ + nnel)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n\\\ + n\" . \$mailBodyCopyright);\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n /system/script/environment remove [find name=\"buGlobalVarTarg\ + etOsVersion\"];\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n :if ([ :len \$OldMode ] > 0) do={\r\ + \n :do {\r\ + \n /system/script/environment remove [find name=\"OldMode\"];\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Rem\ + ove global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n /system/script/environment remove [find name=\"buGlobalVarTargetOsVe\ + rsion\"];\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n /system/script/environment remove [find name=\"OldMode\"];\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningOsVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningOsVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningOsVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningOsVersion`\\nCheck device logs for \ + more details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info \"\$SMP Final report email sent successfully, and the script\ + \_has finished.\";\r\ + \n}\r\ + \n:log info \"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\";\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + root.mnuc.backuper\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\r\ + \n#/usb1/mikro_bak_rsa.pub" +add dont-require-permissions=no name=testSetup owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \r\ + \n:local newFolder \"tmpfs/scripts\";\r\ + \n\r\ + \n:local errorMsg;\r\ + \n\r\ + \n# :while (([:pick \$newFolder ([:len \$newFolder] - 1)]) = \"/\") do=\ + {\r\ + \n# :set newFolder [:pick \$newFolder 0 ([:len \$newFolder] - 1)]\r\ + \n# }\r\ + \n\r\ + \n# :while ([:pick \$newFolder 0] = \"/\") do={\r\ + \n# :set newFolder [:pick \$newFolder 1 [:len \$newFolder]]\r\ + \n# }\r\ + \n\r\ + \n\r\ + \n:if ([/file find name=\$newFolder] != \"\") do={\r\ + \n :set errorMsg (\$newFolder . \" already exists.\");\r\ + \n :log warning (\$0 . \" mkdir: \" . \$errorMsg);\r\ + \n :return \$newFolder;\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:put [ :len [ /file/find where name=\$Path ] ];\r\ + \n\r\ + \n:put [:len \$Path];\r\ + \n:put [ :pick \$Path ];\r\ + \n:put [ :pick \$Path ([ :len \$Path ] - 1) ];\r\ + \n\r\ + \n:if (\$Path != false) do={\r\ + \n:put \"TRUE\";\r\ + \n}" +add comment="Script for setup routeros scrypt system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros scrypt system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n#:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados\ + \" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$Scri\ + pt;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Script\ + ;\r\ + \n# }\r\ + \n#}\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe;\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs true;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n \r\ + \n /tool/fetch (\$GlobalScriptsUrl . \"certs/\" . \$CertFileName) dst-p\ + ath=\$CertFileName as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint \ + ] ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :put \"Thr tmpfs variable is true. Checking for tmpfs/scripts director\ + y...\";\r\ + \n :if (\$tmpfs = true && [/file find name=\"tmpfs/scripts\"] != \"\") do\ + ={\r\ + \n :log debug (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove \ + global variable tmpfs!\");\r\ + \n :global tmpfs (a);\r\ + \n return false;\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global GlobalConfReady false;\r\ + \n# \\/ start edit\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in Amster-Init-Script\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix \"\";\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\"; #:global EmailGeneralCc \"\";\ + \r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.21\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/167/eeff9aa5\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 04:24:04 12.03.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 138;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global GlobalEnvRemove;\r\ + \n:global MiniDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n#:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global ExitError;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n:global CharacterReplace;\r\ + \n:global CharacterMultiply;\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global WaitDNSResolving;\r\ + \n:global WaitFullyConnected;\r\ + \n:global WaitTimeSync;\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global FetchLargeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global LogPrint;\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n \$LogPrint debug \$0 (\"\\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if (\$CurrentChannel != \$updateChannel) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n \$LogPrint debug \$0 (\"Set updates channel to: \$updateChannel\");\ + \r\ + \n }\r\ + \n \r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel (\$Update->\"channel\");\r\ + \n \$LogPrint debug \$0 (\"Update Channel: \" . \$Channel . \".\");\r\ + \n \r\ + \n :local StatusPkg \"undefined\";\r\ + \n \$LogPrint debug \$0 (\"Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n \$LogPrint debug \$0 (\"\\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n \$LogPrint debug \$0 (\"\\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n \$LogPrint debug \$0 (\"\\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([:len \$arrDeviceInfo] = 0) do={\r\ + \n :global arrDeviceInfo ({});\r\ + \n :local arrDeviceInfo ({\"section\":{\"key\":\"\"; \"value\":\"\";};}\ + );\r\ + \n }\r\ + \n # else={:local arrDeviceInfo ({})}\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [[ :parse \"/\ + system/package/update/get\" ]]} delay=500ms max=5 on-error={:log error (\"\ + Error\")};\r\ + \n #:set (\$arrDeviceInfo->\"devUpdates\") {\"devCurrentChannel\"; \$Cu\ + rrentChannel;};\r\ + \n #:set (\$arrDeviceInfo->\"devUpdates\") {\"devCurrentVersion\"; (\$U\ + pdate->\"installed-version\");};\r\ + \n #:set (\$arrDeviceInfo->\"devUpdates\") {\"devCurrentChannelVersion\ + \"; [/system/resource/get version];};\r\ + \n #:set (\$arrDeviceInfo->\"devUpdates\") {\"devUpdateChannel\"; [\$up\ + dateChannel];};\r\ + \n #:set (\$arrDeviceInfo->\"devUpdates\") {\"devUpdateVersion\"; (\$Up\ + date->\"latest-version\");};\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n \r\ + \n :global arrDeviceInfo [:toarray {\"section\"={\"key\"=\"\"; \"value\"\ + =\"\";} }];\r\ + \n #:do {:set (\$arrDeviceInfo->\"Updates\") [[ :parse \"/system/package\ + /update/get\" ]]} on-error={}\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devRbCurrentFw;\r\ + \n :global devRbUpgradeFw;\r\ + \n \r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global ROsVerCurrent;\r\ + \n :global ROsChannelCurrent;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :global ParseCustom;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global devBuildTime;\r\ + \n :global GetPubIp;\r\ + \n \r\ + \n :local License [/system/license/get];\r\ + \n :local Resource [/system/resource/get];\r\ + \n :set devBuildTime (\$Resource->\"build-time\");\r\ + \n :set runningChannelVersion (\$Resource->\"version\");\r\ + \n :set runningChannel [\$ParseCustom \$runningChannelVersion \"(\" \")\ + \" 1];\r\ + \n :set runningVersion [\$ParseCustom \$runningChannelVersion \" \"];\r\ + \n \r\ + \n :do {\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :local RouterBoard;\r\ + \n :do {:set RouterBoard [[ :parse \"/system/routerboard/get\" ]]} on\ + -error={}\r\ + \n :set devModel (\$RouterBoard->\"model\");\r\ + \n :set devRbRevision (\$RouterBoard->\"revision\");\r\ + \n :set devRbSerialNumber (\$RouterBoard->\"serial-number\");\r\ + \n #:set devRbCurrentFw (\$RouterBoard->\"current-firmware\");\r\ + \n #:set devRbUpgradeFw (\$RouterBoard->\"upgrade-firmware\");\r\ + \n :if (\$devCurArch = \"mipsbe\" || \$devCurArch = \"arm\") do={\r\ + \n :global devRunning [ /system/device-mode/get mode ];\r\ + \n } else={\r\ + \n :global devRunning [/system/device-mode/get running];}\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n \r\ + \n :set devRbRevision false;\r\ + \n :set devRbSerialNumber false;\r\ + \n# :set devRbCurrentFw false;\r\ + \n# :set devRbUpgradeFw false;\r\ + \n #:set devCurrentFw \$runningVersion;#:set devUpgradeFw \$ROsVerAvail\ + ;\r\ + \n :set devRunning [/system/device-mode/get running];\r\ + \n }\r\ + \n } on-error={\r\ + \n \$LogPrint error \$0 (\"Error in Function getDevice!\");\r\ + \n :return false;\r\ + \n }\r\ + \n:return true;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global WaitArrDeviceInfo;\r\ + \n # \$WaitDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devCurArch;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global PiblicIpAddress;\r\ + \n\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :local Return;\r\ + \n :local License [/system/license/get];\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n \r\ + \n :set Return ([ \$FormatLine \"Hostname:\" \$Identity ] . \"\\n\" . \\\ + \r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location:\" (\$Snmp->\"location\") ] . \"\\n\") \ + ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact:\" (\$Snmp->\"contact\") ] . \"\\n\") ] \ + . \\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board:\" . \$devBoardName ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Arch:\" . \$devCurArch ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Model:\" \$devModel ] . \\\r\ + \n [ \$IfThenElse ([ :len \$devRbRevision ] > 0) \\\r\ + \n (\" \" . \$devRbRevision) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len \$devRbSerialNumber ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial:\" . \$devRbSerialNumber ] . \"\\n\"\ + ) ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License:\" (\"level \" . (\$License->\"nleve\ + l\")) ] . \"\\n\") ] . \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License:\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \"Running Channel\" \$runningChannel ] . \"\\n\" . \\\ + \r\ + \n [ \$FormatLine \" Installed:\" (\$Update->\"installed-version\") \ + ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :typeof (\$Update->\"latest-version\") ] != \"noth\ + ing\" && \\\r\ + \n \$Update->\"installed-version\" != \$Update->\"latest-version\")\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Update->\"latest-version\") ]\ + \_. \"\\n\") ] . \\\r\ + \n [ \$IfThenElse (\$RouterBoard->\"routerboard\" = true && \\\r\ + \n \$RouterBoard->\"current-firmware\" != \$RouterBoard->\"upgrade-\ + firmware\") \\\r\ + \n ([ \$FormatLine \" Firmware\" (\$RouterBoard->\"current-firmwar\ + e\") ] . \"\\n\") ] . \\ \r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n# !!! The function is not ready !!!\r\ + \n:global FetchHttpInfo do={\r\ + \n :local Mac [ :tostr \$1 ];\r\ + \n :global CertificateAvailable;\r\ + \n :global IsMacLocallyAdministered;\r\ + \n :global LogPrint;\r\ + \n :local Url \"https://api.macvendors.com/\";\r\ + \n :if ([ \$IsMacLocallyAdministered \$Mac ] = true) do={:return \"locall\ + y administered\";}\r\ + \n :do {\r\ + \n :if ([ \$CertificateAvailable \"GTS Root R4\" \"fetch\" ] = false) d\ + o={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Vendor ([ /tool/fetch \r\ + \n (\$Url . [ :pick \$Mac 0 8 ]) output=user as-value ]->\"data\");\r\ + \n :return \$Vendor;\r\ + \n } on-error={\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=yes-without-crl (\$Url) output=none \ + as-value;\r\ + \n \$LogPrint debug \$0 (\"The mac vendor is not known in database.\"\ + );\r\ + \n } do={ \$LogPrint warning \$0 (\"Failed getting mac vendor: \" . \$E\ + rr); }\r\ + \n :return \"unknown vendor\";\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n :global LogPrint;\r\ + \n \r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n\r\ + \n# :retry command={abc} delay=1 max=2 on-error={:put \"got error\"} \r\ + \n :do {\r\ + \n \$LogPrint debug \$0 (\"Trying to detect public IP using default s\ + ervice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={\$LogPrint error [ :jobname ] (\"Fail\ + ed to detect public IP using default service: \" . \$Url . \".\")}\r\ + \n #:error \"Failed to detect public IP using default service: \$Url\ + .\"};\r\ + \n } on-error={\r\ + \n \$LogPrint error \$0 (\"Failed to detect public IP using default s\ + ervice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n \$LogPrint debug \$0 (\"Trying to detect public IP using fallback \ + service: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={\$LogPrint error [ :jobname ] (\"Fai\ + led to detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :if (\$PubIpAddr = false) do={\r\ + \n :set PubIpAddr \"not-detected\";\r\ + \n } else={\r\ + \n :set PubIpAddr [ :pick \$PubIpAddr 0 15];\r\ + \n }\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n :global CertificateDownload;\r\ + \n :global EitherOr;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :set UseFor [ \$EitherOr \$UseFor \"undefined\" ];\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n \$LogPrint warning \$0 (\"This system has low free flash space but \ + \" . \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n \$LogPrint info \$0 (\"Certificate with CommonName '\" . \$CommonNam\ + e . \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={:return fal\ + se}\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n \$LogPrint info \$0 (\"There are \" . \$CertCount . \" Certificates \ + with CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n \$LogPrint info \$0 (\"Certificate chain for '\" . \$CommonName . \ + \"' is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={:return fal\ + se}\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global LogPrint;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n \r\ + \n \$LogPrint info \$0 (\"Downloading and importing certificate with Comm\ + onName '\" . \$CommonName . \"'.\");\r\ + \n \r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl http-header-field=({ [\ + \_\$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$GlobalScriptsUrl . \"certs/\" . \$FileName . \$GlobalScriptsUrl\ + Suffix) dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n \$LogPrint warning \$0 (\"Failed downloading certificate with Common\ + Name '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"Required certificate is not available.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl http-header-field=({\ + \_[ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n \"https://mkcert.org/generate/\" http-data=[ :serialize to=json \ + ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n \$LogPrint warning \$0 (\"Failed downloading certificate with Comm\ + onName '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n \$LogPrint warning \$0 (\"Certificate with CommonName '\" . \$Common\ + Name . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :global LogPrint;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={:set NotificationMessage (\$NotificationMessage . \"\\n\\nNe\ + ws and changes are not available.\")}\r\ + \n\r\ + \n :set GlobalConfChanges;\r\ + \n :set GlobalConfMigration;\r\ + \n }\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (https://amster.vados.ru/; main/3419/3ee\ + 19780)\");\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetRandomNumber do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndnum from=0 to=[ \$EitherOr [ :tonum \$1 ] 4294967295 ] ]\ + \r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n \$LogPrint error \$Name ([ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\ + \$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={:return false}\r\ + \n :local FileVal false;\r\ + \n :do {:set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :global LogPrint;\r\ + \n \$LogPrint debug \$0 (\"Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\$LogPrint debug \$0 (\"... which does not \ + exist.\"); :return true};\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\$LogPrint error \$0 (\"\ + Directory '\" . \$DirName . \"' is not a directory.\"); :return false};\r\ + \n :onerror Err {/file/remove \$DirName} do={\$LogPrint error \$0 (\"Remo\ + ving directory '\" . \$DirName . \"' failed: \" . \$Err); :return false};\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :global LogPrint;\r\ + \n \$LogPrint debug \$0 (\"Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\$LogPrint debug \$0 (\"... which does not\ + \_exist.\"); :return true}\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n \$LogPrint error \$0 (\"File '\" . \$FileName . \"' is not a file.\"\ + ); :return false}\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\$LogPrint error \$0 (\"Removing file '\" . \$FileName . \"' fai\ + led: \" . \$Err); :return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n :global LogPrint;\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n \$LogPrint info \$0 (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n \$LogPrint info \$0 (\"Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Creating disk of type tmpfs failed: \" .\ + \_\$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n \$LogPrint debug \$0 (\"... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Making directory '\" . \$Path . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={:set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]};\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={:set Path [ :pick \$Path 1 [ :len\ + \_\$Path ] ]};\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={:set Path [ :\ + pick \$Path 0 ([ :len \$Path ] - 1) ]};\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n \$LogPrint error \$0 (\"No valid RouterOS version: \" . \$Required);\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n \$LogPrint warning \$0 (\"This \" . [ \$IfThenElse ([ :pick \$Call\ + er 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"A script named '\" . \$Script . \"' does not\ + \_exist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n \$LogPrint error \$0 (\"More tickets than running scripts '\" . \$Sc\ + ript . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global LogPrint;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"No symbol available for name '\" . \$Name \ + . \"'!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n# read parts of a large file\r\ + \n:set FetchLargeFiles do={\r\ + \n :local ScriptName [:tostr \$1];\r\ + \n :local fetchUrl [:tostr \$2];\r\ + \n :local CheckCert [:tostr \$3];\r\ + \n :local fetchMode [:tostr \$4];\r\ + \n :local fetchMethod [:tostr \$5];\r\ + \n :local FetchString \"undefined\";\r\ + \n \r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n #:set fetchMode [ \$IfThenElse (\$fetchMode != \"false\") [:tostr (\"m\ + ode=\" . \$fetchMode)] ];\r\ + \n #:set fetchMethod [\$IfThenElse (\$fetchMethod != \"false\") [:tostr (\ + \"http-method=\\\"\" . \$fetchMethod . \"\\\"\") ]];\r\ + \n \r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n #/tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName h\ + ttp-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-value;\r\ + \n #:log warning (\"\\\$fUrl =\" . \$2 . ({[ \$fMode ]}));\r\ + \n :onerror Err {\r\ + \n :set FetchString (\"/tool/fetch \" . \\\r\ + \n [\$IfThenElse ([\$fetchMethod] != \"false\") (\"http-method=\\\"\"\ + \_. \$fetchMethod . \"\\\" \")] . \\\r\ + \n \"check-certificate=\" . \$CheckCert . \" url=(\\\"\" . \$fetchUrl\ + \_. \"\\\") \" . \\\r\ + \n [\$IfThenElse ([\$fetchMode] != \"false\") (\"mode=\" . \$fetchMod\ + e . \" \")] . \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue);\r\ + \n :log warning (\"\\\$FetchSring = \" . \$FetchString);\r\ + \n :put [\$FetchString];\r\ + \n #:put [/tool/fetch \$fetchMode check-certificate=\$CheckCert url=(\$\ + fetchUrl) dst-path=(\$FileName) http-header-field=({ [ \$FetchUserAgentStr\ + \_\$ScriptName ] }) as-value];\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$fetchUrl . \"\ + \_- \" . \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$fetchUrl . \ + \" did not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n# Global Environment clear. Use: \"\$GlobalEnvRemove True;\".\r\ + \n:set GlobalEnvRemove do={\r\ + \n :local doRmEnv [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ScriptsUrl;\r\ + \n :global LogPrint;\r\ + \n :if (\$doRmEnv != \"True\") do={\r\ + \n \$LogPrint error \"GlobalEnvRemove\" (\"This script is needed \\\"T\ + rue\\\" for confirm to remove global environment variables!\");\r\ + \n :return [];\r\ + \n :error true; \r\ + \n } else={\r\ + \n :set ScriptsUrl \$GlobalScriptsUrl;\r\ + \n :delay 5;\r\ + \n :foreach var in=[/system/script/environment print as-value] do={/sy\ + stem/script/environment remove (\$var->\".id\")}\r\ + \n :delay 5;\r\ + \n :global GlobalScriptsUrl \$ScriptsUrl;\r\ + \n \$LogPrint warning \"GlobalEnvRemove\" (\"Done!\");\r\ + \n :return [];\r\ + \n :error false;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Setup Global Environment for scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n#:local Resource [ /system/resource/get ];\r\ + \n#:log info (\$ScriptName . \" Loaded on \" . \$Resource->\"board-name\" \ + . \" with RouterOS \" . \$Resource->\"version\" . \" and Architecture \" .\ + \".\");\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n:log warning (\"This script \$ScriptName Loaded on \" . \$devBoardName .\ + \_\"\\nRouterOS: \" . \$devCurVersion . \"\\nArchitecture: \" . \$devCurAr\ + ch . \"\\nIdentity: \" . \$Identity);\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err;}\r\ + \n\r\ + \n#} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n# log the successful load of the script, or an error if it failed\r\ + \n#:if ([\$GlobalFuncReady] = true && [\$GlobalConfReady] = true) do={\r\ + \n" +/tool e-mail +set certificate-verification=no from=MikroYellow port=\ + 587 server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com diff --git a/MikroYellow/history/20260312/20260312064334-Diff-Config.rsc b/MikroYellow/history/20260312/20260312064334-Diff-Config.rsc new file mode 100644 index 0000000..907d848 --- /dev/null +++ b/MikroYellow/history/20260312/20260312064334-Diff-Config.rsc @@ -0,0 +1,34 @@ +1c1 +< # 2026-03-12 06:43:44 by RouterOS 7.21.3 +--- +> # 2026-03-03 09:00:09 by RouterOS 7.21.3 +10c10 +< # channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding +--- +> # channel: 2442/20-Ce/gn(18dBm), SSID: vados, local forwarding +2152,2157d2151 +< \n# Git commit id & info, expected configuration version\r\ +< \n:global CommitId \"main/167/eeff9aa5\";\r\ +< \n:global CommitTAG \"unknown\";\r\ +< \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ +< r: root, in 04:24:04 12.03.2026.\";\r\ +< \n\r\ +2161,2162d2154 +< \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ +< \n\r\ +2832d2823 +< \n :global SumsDirAndFileName;\r\ +2859c2850 +< \n\r\ +--- +> \n \r\ +2863c2854 +< \n\r\ +--- +> \n \r\ +2867,2868c2858,2859 +< \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ +< iptsUrlSuffix);\r\ +--- +> \n :local Url (\$GlobalScriptsUrl . \"checksums.json\" . \$GlobalScrip\ +> tsUrlSuffix);\r\ -- 2.52.0