From b7c17b043513645293bdcc459e6ee11eb73a347f Mon Sep 17 00:00:00 2001 From: vados-dev Date: Wed, 12 Aug 2026 14:40:03 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Aug 12 14:40:03. --- .../20260812/20260812144001-Binary.backup | Bin 0 -> 390919 bytes MikroNUC/20260812/20260812144001-Config.rsc | 5533 +++++++++++++++++ .../20260812/20260812144001-Diff-Config.rsc | 3 + 3 files changed, 5536 insertions(+) create mode 100644 MikroNUC/20260812/20260812144001-Binary.backup create mode 100644 MikroNUC/20260812/20260812144001-Config.rsc create mode 100644 MikroNUC/history/20260812/20260812144001-Diff-Config.rsc diff --git a/MikroNUC/20260812/20260812144001-Binary.backup b/MikroNUC/20260812/20260812144001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..3b590c7d9a588e682759432b8078abf078c790ee GIT binary patch literal 390919 zcmeEvcU%)q*Y<1@Affjns8lHmY2U;|MU_$3uuc?DV3`oh*A$=L zM!fFn?d??(mpuRgHo%>P1z;xvq=7pL2LK)bfI$F2q(BcM4SE0qdI&%Q^x%7YdwU6> zM-M219z9$nD=bP$*n}QDJgEdcOht5yvC;8@u&5Brcy>sPC5Im(E527N@rB{q3b>Qx zKo6n<>%nUvLqU(J#(JkkG;b{3rwf91ajAMOSIY_7}ScTnqy*hF}1KkJiTlS%Bcb z_V)JnUs94M2<62R6#=5B%%O2vOe&pfPNy;1<`fExfdWKNiH};*sa9036_IB}KmZ0PR?S02}~v0Csf`_<#k-CoCX<&v4NN7Z$Kx@E+?Vfao5--JbAn z`|eR0_L(*g5U}r|B!)pDbYKAiBfR;y@qxpF=L>IMR2+EoBYyqnnS3glhVsbfY%Yao zPT^BngWf!K(3_|JJ8wSo+s$X5MEZvr9u7fx|FW?2Ei(|<`2z-)4geq>>Nr&ObO48haNJ4&Kv2K~Kv3lZK){3mK#){~=1B$a3x^gb z0&YgZdUFAo3HQXpL*w8=004m-4*))w2S5S<_zfHY5&^(hqW~lUfN#PAkPHBxDk~ma zvthLqc$T>U2#w1;xM#k2BNG5Z`T_t55`56FMv4IF!NIJjVrb&(G0Dl>+0Mbq)XLDr z&(+a%Apm-^h9>sju8uBF?sg8QOMh};&W{IXz$*yH>cE~8+iNzT+h@a|ox_QA8_Esf zfIA7=YIYniHlfeR{dfS}&xvG3h4EP&9)}+SEiyDi&^EyzH2nJF@;KpskqyL%Y_PBc z#WqSLCZP@12ksH4}D9)U#w5RNh75zrQMLpd>)oQN=9lpr`dMi3Sq6$gDtdv9;A zi};cqy}iA5;_^qK9TNS{0RUXYO@X(BfF3-o2YrtX1^_)}G>OkQG;wfqb@G@L?C9(2 zXxi@`xJT$%0~R6GTLZ zn6o&-K@K|`{#J#95m20sso^hk&`As z0|%`fHX=Hte;`Rl@*<;SlXL$mEkeF;5%Nnd!g0gm!v8t#!F=By%&)bF#|e%8=kyr% z`}SaesXdahyvS$)Z`1cZ2E=0sCiclh?3w% zvce*u3PG)jjgR<-qX!zuzB1I4zB1I4zVc0BS?GzfgG?{wv zRC+=~iUHs1!1E7U2lMkfP>%<#gZ+6O*!CamV4zy!zSZfQJh5V;pvi%zgDW-*aLpB) zX4sVq0OB{XFM!wy8VUkN2%Gv`HbnXWP9^{mUS2E!Spf9#VNn8JY!pw>@9_F&JAF-v zWhM66S3M{qICFvW!-{|*0(c-SCV{3K#S04wWk<*Aa-yU7VIlFcENBIFLs@aUoKRL& z2#-5THztC|isR|V^5O)nSb?q}l&342K=|;zLd9k{JXkAuJOhmHq&nRA^ZX8bl z=W%h<06@3^K)VfXHlhfCa0sgafT#ihZ5lLSh$aBY5Rs7w*8xC=0e}n#0D$~s&IRI?@c@7c00<|po&X>y zbQnYc2*aoV;IRN;XkznA2Y?{OfPxpghbaKy(Rcu+ir1m=pD>7I5g}?Oq=&-|8~_mG zawEk?8Dd>H7m5Y||IA2;sR_0a_zr`Z7h9zunl0ZHu5sX&0uVXrc0}ZJ;aWJQuASHK zG9-pA($D@i{}ZFV|Z~%VojbTCIF!E2o#s0X7!b!ftW7d57FN=ak;Cvx0fw0f9dV* z<%-L2=FSn9yL)?kBgAD0RQk?YDhI$M#GSMV3k}{G3;+wT04&1-kc$4J+d2p~v*MMSfMZt=PY z0fh8kxCp=i0;vom8b+rv0Ka(w0?IJ}pREEw1x8d&4-4>6&iYu<{{~pm{}8IJwF1Bh zD>`ljJPrqdFwS5)n~rSHlA`vEN1?gh_o?GVpJgDdxXcriwz+DT*gB7ZYxOzi_et zdBVm0YX+=hVpuFMf)^LpC*0|O`^d%p=Lr}4uMw_FTyhjAG&VXaI=)}N)Bbk(O8n=^ z_g^%46+)v0aWT>ThJpQe$QBvk$?(v({^yBT;$Jg-m18(F&EsPtqFLNN>%jdxB#ap- zVTf4%YbC4-CCrUZj2b9o&fg*9fp|<9!}-sXvDCk26str>MI@VtvSPW3tXQ785O+uX z?IMN%`#(>_lK&bJ>qN#!2*O07HUFohHDO5iKTp;_%rKiy9X`uMXTv9RDe2)L8_sKGu;T@DC&4Ix)D86%|E30NqQ zeu5pwE=2U2FmNDb*p%U(ewqzV;|Z7HTs}4?4)&6W9~Au{`2;Tle~_S(1EPRFtc@AC zF#7OvUCy&0wO95|HXwx2KRAk zeT3c=@d@F23UDVu&H^T8!0-YL-NERiaCAU|NR)a32vA}KEDSUV`JW^)(+CJcLJ>Ab z57HKTcz#%HBs9g4&xnuX#r8$Na>Q4K!s#o+W0s5eL(ZcwAOZs)eSwlH3_RYQqzJ%H z5tpX}fKUL!Xp^w7WW?bq*e@7U0Ptsw3BatslOPR>6;hpg01)*O53Y1JE&Y1!ak`1R zzFAtxw47Vr>J}HZb8ps7Z6;TpLUaKjDtZrbeY5|)%J$-kt1r_Rr|QA6F2UkPhDH73 zt-0cZ>u(K=*9>gUI97^&PSB<&;aWYlT4u{9Z2v6PJlAB-li_RIv?6xie=cgx9_g&> z21Cb7PKY~oZc3>`qOdhWj(z!HviYXiLfOC=p>WJX+1Ms(3uPlzbQq|E2|Yb}BH2t@ zr?5If^-HEpZq_zR&i#!O9QDT@d@fs2x$b6%O8uK;X)z+Ny2Zpk+ zHF)>1@YrY%Uk4Zq`K!)?p~3#n`mRAR21vktYtZatiVL*obU&pBxJ`S-1vdPym3uNx z+K*X>t?UT(by9@1AyM%`YNo(WO*v(UkIQ^hzp&k~L4-)ypkOvj7%lp%7QyIde~Z2w zK9WCl7{+)^upO4|AP*GL4@%ss$l9&fdKC^uNFqaG8A~y1MIwq_{_4ey5TlEXAjfTi zG5gYCi=^DYMKPgjSh85GKBepn0>d?o!AkVSD1-_lR7W9I3)y@{O)Uden+Nqr9wm8^ z316=^D*yocX8JL)(fqIop#g-yCt~%2>nFgSqz+)D1Zp+R2+``dND|*m; z4C^07?ye3>aF0A($iW4STEL;K2kAaNC=Wd-n0`i1IAEY5gV8~*d0Zsh97?#)4Gd;O z`|=kG6@bX+3D2=vK^O+@(US;?=fw%2WWSv}rq`G60;E5z(zeb1l5iaT%b8vy6#n!~8OAOgtOfytw2z0WT8fNx+|lcnyhN80UaL z$nN$HnTf(<+(}~FEvDl&p?D!D58aKPoKt*kbPUhZJvxpPov0?V_J}YB)Tghqz@0P- z2HroU%z$AzVde%*p6I)df%w{RZ6Heh)06Rt9M5rbAIX?(=LtuwG{6Exl*iJSBsViU z&Qg#xbGo>8Up520o4zvi1$|}cKl{qiFZ7iMWq?$y3H3^bPl7F~2$?vN{brao|{TJk>C2()8*Fe$^p)X3eP!77ePvh&j@sb>;H7n)X7rW$wyFJPBmTFt={(07a7b}@ zv5{xQ;TR)$axqr(5hr%QA-E0>Um%K9trG8tt0Zw5f}>V3po539V8g_1dn7&v{#_vs zTS1#tCoV&PH4BbgG0?IV*M)&he{mTqdfzeX1Imy{5uYBkF9X0x!kv@@z-BDK0S6mj zA4xFL#?{B$MH)DG*my@r3v>gV<_jUyC{gQRI26ni;YcB>gW*7sSrRG*06tCMF9&AB zi0~v#rpwj=0OrX}H-h>CCk7Z8mBVHNfG>oBBmnSNF#u%2ox&Vhcv15JCk5!gWB@=P zA!r72AI(6fZ^mK}3`PlT#e{Ep6Op1@jhhq1+rBa#m6pVtEf{yh28YF>7DO48Ac^(G zNvdFceTZ_X4BU`b!NI#CDx&gm6RRS;jBbDvI!r^3L`9h>85RDfXvk6ECW%C*GO5fd z|M2+|P(?{8VQVmmq{PU%IG~SZ1Keok-rZ04UYIfSK6l6EcrEO!rXcgI`w!(WGs(>K9I2;y(NTLdoSl^*4a9aY!B1kVf6z-76 zspC|OE{~X!Q|NY+%K5t9;Ih>|zYi1r2Fei|0#GgnO>*0RF4g>Yhc9MNyN2(FDPNkO z-;yfco72d-;ZeRyTY+k&ZjOG?$~LzxI+_zyavXzd1-;mkl39Pc?$bHymTm5bgI;H} zUFgWjKZ|+cTats)Dv_D3CTFfj>1|tOJnCJK^+Es?;jn>&IU7bmGfP5YdG7D7|G(b# z%b$Rd%r3?7q?qI?RU&E)VIR1zO0 zvFIp+#iDYlG#YIY0K`Fu^kR64BmneuSrn8+W3xy+K8-`?kWelKrO>;=(5@tu;4^T4uKZ5|0tJ;Xf`WCS9k#jyI-)V6+TYTqNX1V5QIPrD@@z(Az+|U-EAN; zs;uvgDgrZ(ZDGc-(3~RBoDS=2fv5rS`VMv$oLGTH3@S(BqRXJ`rgi}p(-LfE8BNLC>Wv^ssVS) zs3`s@9-=NfOk|2R`fGeIBxssZ8j(m8S!QUO$;1Jh|B5DLAo>Gu9FYLn3`7B-8Hh9{ z13^H8^;4zT$2+&)De~Xtxn-G5V(yhK+uD?GteJ`sbgv;RcX*&BKAjHd!+?K5!&3c6 zS(3J3F5$)v?Rn+(*R5wdH`MYkNgPfvR$n%IX@pD!4U~Tn-aQ5qU#(NY0F_J=YJbay2eZ zHQh)mf8W-1N5;N-cZnV8fo%1gPjhQdEuB2}sCJX9$(EQ0MBJm!L+bC{q&=i|wvM+6 zI+|9Ldv3om28#fsh=a0z@I4Fu%=cg)ds6*wxt-#_Eo#u#K9_gM=9Vuy9J(e0oF=NC zKKKFOk3TGw{?!fiUE@@grMn(EZkXtOpuK({t|K`aUu3BHb;8K`XUtF3TxN&b4&9!Cv^rR#&IPGihY(0r<_JS96Vn$G*XMzHiWYjAs$Mvt;e58u(UUrn|7 z-olC#jEIKi5sP}cClZbP(KFhHMNjLR>s?Zg9x=pAps&r#WXhe&Jx>&WXjzLW@4cLT zaV;fysr2ZJ%{8l6M?QwW6B>wq-&x_~)aN^YE40Ww|6o&oEA(%L{?AqDZ-|IOrZ8A2 zk4d3WICKVwO`=hGD3!sb@)%4Cg-ziyD10W3Mq+bGG%lM&rSlm~GKEEv}8NVBuDyT+Gid2 z9A$9rEq|b=lld1QEfkYYrR=xpUHj+Smrs|Kt=|29 zx}93gLuJrqEPd3UF*Ws&*UFiz3tI@y(qxp>7GMY3LnOOy&F!i;M6^K zu6^j#lWNeN+vFuR%&RE4)zx`Y+NkUc?J67c)J9{Q3Ym3bvZRXr>i%x4TNEIt3NLrm4!gz#H#uDcC`&dOzUJMY{bvGN+*+dh89 zr*&OHL5B{oo(~^>B8{-N$);;wnoC%r2w`O)8E6JF2UYH$(c@7`1nI>fV8EnakePml zf2p4SxT?&Qz6(3_bnA7E?|_wu{v=(^)h`;OUMO^RoltI-)L6#+19B6R1V%V@R81)8A(L5!89Wi%%)=DW!dYTJJlW&uTf6o&=p zN^##E_=8%(`HBk(Y7uG=Z+$q<8fBvN&D7201;oD7#72;R=^PQL4LpY~j)qcD8A-zQ z1>=wf-4PfBm6DVQnJbGRC|*($7BJsRnErj(9~4svL37{5Ts6rH%S#b-pXnMg+h_OQ z>%8uh8zeU@x;w=otJU4jFL-aog`*O>76G?<$9HTtyLVvq-YXX4t?%ym7@ckU6&-6h z|J1pX*(;?+?avBNAh!Zv??V9_pPjh*q5h>p&!bQ0PbkLDCE$Xq@-|wK;&ZCjO}_0< zoI^+E9^yxu4mrptMBa+ZZ9maviKt$f=Ep_ur)KSB_-tAn=o~riqVfE>)pM3CDO&IS z@?!RDdWzYXx4u&tv5NPAN|jsO!(DXhPSd$z8xl$%YtGKCuB>_!g6+ml(NjOz`)X`` zT}DSsd%y|TgT;+tOM7wsijoEZsM3&S9V=Dxb;c(5QSapTnfG$s87g!=W>1bT*SkWzgAF z5}nSZlbKXHlSrq~$b1fiNamt!8i~qc3bFZMzFLUQ2lLS)Y|i0R*<6%HVpC}-iBF-k z*bFL4;*iK34j-k_AU6L8kk`+U`6@BlDJdp93Bbq3E;ejdbQDV#xY_t{q6LCDE-Qj3 z2PWFML_4y$++@gi;(%)u$6_R8Jzb)8g}cRcCofhI#t-AL1Uy~4ctL1%Y?vTf*ZkKo zJ9oo)VPHw4DQzHT$3x5>VKQiJ3DTg00QONX(dNQdnL|)vKA=_R{jD;0A^pIMUV*&m z1vCS*SA^CP@B<1!=g#{c9E(FtcoiwJ)QBpm62!$)D$?JCM;wA`!kyA8N&{p#3X-N4 zL?UV_0@5bGDoG(%%0!u{m@I`{DV<0n6Z;VSe?}|+ihU`c$;Q9y3ZQgqU(qb;On05! ztUpg>`vqMG#Cra_7n!b`j9-16ukEq<$itYmmq^G#i7`?hZS7qXEdx;fm%Fw6!W+`1 zzJ5@TPiK0~e*T$yOyE(xG(+Xtv9ZP2d0kshFH)P4_E_fJF)dYz%2(%h;#OHZr;y}6 z0KWd^rD2h@B}$qlcMj=HKf>t3EV*&#k+ale=`k&VDVI~e92n`dbp<=j%SeJX#BuJD zQN<2x4C?n-&0QyNdO@eSIdIsqjT=#E=8bpR>0c%UUL(EEWIGs9Fn-3!@*~zUW@Doc zHf_j8Qa4q9e&`c9y`X&5%gMWs2Rnbgab6ocn$Y4(oEGMM_=$@M?88vrA3}F9ZaFZv z_brrXwJuXiF~sE9n~!A@c2T+&s~#vk{$Y>`p=$oaz~q|Gc>y6<*1I{@lEirPLfxE+ zysRUg+c%WnYqq@ka7tU1U`gB&hW!JH*`F}+$Gf*3yu0t?-N!0deH7;`a=w+o2E3=H|>5_A8|NSqrm3A;l$+S)Y@QNOZvRs>oDd=72EISUc$xMw#FK5 zF5dKd3XkJsK!J6T!#6q zrMD)%3u_D}SI)ATE!|j|7R-F!5P$MQf+qRKsJE7Gdpi%lyfJa-`Ss%`NnS`xt-&ia z==99dIKC(7W3~Dr2ZF5o#~tBE^5^p^XJt1uIG&!?`AVll7-`gK66U%JBaPe*@Nrxr zRQ;{yf2T3}t>(Yg{NJYL-*6g*N~EA{GKoUxv6&nWgF|Ig_$Zgorjk)6kxz#N7s_Dr zXgn&5M&^;|6egETW^q_dB9p=6vV=HoFzebMRmPygxbZK$X^6T0=Z zLO;&YfhbLU$fVf#I028V>%kKwM#qN#QgnKuM(;QX%N7zJ#tejI1PIGU5Bn)B`!PB_ zT+{}0aU0CVZ7_GR`vHcPLl|}n&A=3iU>FwXcxIrFgAwUD18|t98&MzC71=bcpGt~o zj2gjXWK@RzxxD&LhE>t}snmoJj6p<6Bq9l=lj&15To z?At4sXY+g4-x2@6+8d|3Xb>;0$i^ zMI>O)XySNA%5B{32_{Xt!PZh+uDQoO{IGB0CBK>}JJu}h`mj5++F(I|aTUS1bWc?5 zJRLN){>hf++fN1YT4iP%XRA%ZY2S5V?)5df&@kjw`r=`z^R$jV!7b{W4w~OOd2P9UqMOl`Tt@W6x7WVp49g1`Q#0M;g@j3~YqH9Olj9y* zevZAvtn3+nj}qH)#I}lvoO}IP$y_6F_;Jr$L0UV)9!rr;Dm_*Y>-g(_MLn6Zy+|?i+b5N#}zCNian6z z*jT5tpU`bEuB*)K{0U#&QN^OA#*bw(I5*oK%hHqWrs^L$u+DDU_LwKtHxsWK+yPG_ z{4Ae_$;sW{RjxPJ^S16bLGcQ#p-WXKFy!3H2x~~{1G!V^EDbzn3GD!-AOPmSZ6M|{mN_R z?cEPIt&=gvP)!fou73HsX@hUJmUC?hrDM(w=DPcgcV3+nM?vrftwkSC2rWn-`1-Bf ze`>6M$@u(M?%&G&Z&U7Xkc-NpGAJ|#mrCVR89WM;&ZASvOa_TdVpCC+h_Y#1B8^I> zQ&=26gUq6HDJ(LH%cj#990~_u_(8tINizZO+`?bI&i%2ToC1D&6& z1VHCz4}fL9K7C{uUPbzwAc?BNz$Q*gMP`6JiNjDG5rR`2RIEe`bQJs_t76oDCx0ef z2+)WqN*c(KF;F6r(a(|n=QK3~^T)hH49q*kNMkZE2uN4vY0%`)J;WcrxyN5Fq4m1) z9k;!n^H>eLblnN&TteNAg`2L~6uw6D_DWhEvbfF0uSfP~ zn1Zcr?;jIyuKKYnoRR;I#z%*GaFx78^h!X=7>)aPA09@5aHQgCf* z#vQlAty6m+KabmEU~LY{slEb&>pj=WL(*2zUU;pL|1cs|$6cfJ%4>%aH_PpUZHpZp z+w))gXKnNx?mubgm~H{b@}MV=@M5yPg~JfHBX5md0=jU+R#uO29`8B#(BsodC0|3- zo?h{vKTLsB+sr;$8|-WGYT88;JkE%DTz+Knd$&9tsj+h29j$LHGZemI)o;+$C%Jse zu94%bCZ#{UxBg7Q`$Jg%)jvSfKk$kJu&OM~Zp9#AT6KzCRVR{am(P=pyWqX)>ZhuF z$u#W;4r-e=VtoDAsJ`ZJx(sso46&%m%aQ$nA*M4 z?8fuEWV+w%Y@Xn2CaD|gn`Elh7K~1tV5sEVYq%~d$ZTYrjQggvPK2>ab+v;O;mh>m zHl5wdOE#|y+Oc*Z# zBr5WvcP7LxTfBs}zg$k@#>}NJwnq<-*glhe;oi-8v9j+%lorZvP;rZ;)R)%Gtlu^B z(bE$VOGYaP@*b4=D<5+R?|uH*ov-9omA~(`#<8ZE%a=TM?Ri9;EDY7g}rG>TGNupPq$cMyU&eoHtNbH_GS6N zPTJJUCq_odkw-(MHY9?vH|uI%+f;X*8hb6XHae}?y#55Hvm#Dci>R0V9ciXsjz9~xsFsmQ23(lTsn_?oEzioX2N z`i_M(0jbuc;=lo!CmY<(>C}F03_I%LJlAqd#_l^D$C&d=d(Fuw_b!`#G$woB7_BN> zlY3t;=bj48*YEItG5NyqY@$P3_RzZ*b4EMN7`j9AajK2_JNDJsO zMj1pRlSU!4=@cf1!DKLL6gEtD;8JKDGMB<(b4kMK++et*e>$g&68T&jmyGf`EHZ~h zC9)VqHk(7Epgb}aC6l-?tKrx1J)F@EK2v}M`@oq6WY`BxKg1+EOY-kcNhbgGZ0?ME zmlvGP*;2p2*_`OPSsCF}PG2;Y`{5CkcE>nG79HmB>0>cOk98)RPpA&q6t5F zWcSgI`==Him-!--rg!`8>CfOTk7REdavyf1r4Vfayp8zFTDy;z;1hB3bq z=U*@Y-yeQBZtLg53-|WX?5-(s!q}#z6D|(yEo>-2c^D$tTlzj?tn&C<=FD@_guJ-+ zY}%4+<5MrPmwIOI;C$Xlddy#`@b20{!m>vZySu{EHe*mGf9hH8(&HOF>vq<-ZfU(# zcgr8#ih|G3_gR1Qix;*hfZej$xI%LLMEX^GMUUI^T;eBgTp~d zBqoi=XVN(&7Kh2>)97R(7ZrM-!8B)p2clA`R2rMZCsE;PsbngL%%Y%tE|tZmQ0b(f zKl9>3{)e7eEc=~m&FS!0^YIHf)5At&`&!`+!Lk@ zO9-NzXPWH0^w9Xc2p7;f>u=Q;i3*YBIuS z#u1$&YAQd*ZsJI|6sQZGz?8Tld;)mUeEUhxU8^U3?P>Rr;k_Cx8dtDbWMlywsscSvIx zbK}>IaHhHaDe#{?|*huM)UUGS;?pJ5y6g9cwEm=cJmoRwR5F zS@=R-;d`@w@@#{KgPmubyPb!*gPl2*XiuU#QBk@hN>=~?-HCfg%(S-DUiMO6QaMLI zrM%n*+vWZMbF6H{QrWq47Io<=Qy#TQyj!^ax~;~$D>pJ!zR*e{B3g!Dce~(floOdB zw3~INGHX_IcbQUT&>?2qD$P9wvuI!ME;DX*=tL&HK5+U>{Hsyn%WBA{4{goNRLol- zyP29JU*=YNeQy%KcIpWA^&RP_HsTK5Ym4ym+V*aR$=-KuoY$#_U*EXj%BTBrZ4Gr6 z+Z4^K8=X@k*P}*H*kMr`{&9T4quea}pg5*$`MI)IBio9tR=kU+o#u_Kn722{%%XSm zNZTE4mK|+FWZ$+`T^j%FvC5+lqvs?8VtMPdo})g2)i!wtiFK00jHLFgX-3{9)&}mK ziQ(lQDGhSCKk3N2#9?b~T`KRD&Rq6+FRxZ^!~TSqx4%rjM0+0~Yc`~}=ac95umx|7 z+Bv!`w+(*f%kwWEmuhqV=({+$xRBSaaprnTOJW45mhje}sGsaanYEaAd(+PMDXHYg zwJFk%y!}gaM$}Kdsb*cJe$HUZ_z7nl7@S0l=T!?2B^YvJX3s5Gy++#wq)yK$$=qA@$38Aim7QQflL&X+Jn^77M ztkT{q28_>!?#~M;p?0bob?2KaSM5qXJ1xZ{*;B1eUcu&|86#vb*4RITFZUI+ zvX;mmtVX+hWvkQo2&Za$wQ0N#=KC$l z7D=nNXAW~YJ-gjc)@Ix+U+kNU#SLsktsve0c548=$2(F(^q?WpMe%$}`L-CSVl?9XEF4c%#<8?%Z)H@1yYuOf=5SjgJ zKW+&mzTV|()~PdZVUU^Y!thw#P^GmY{9W_j-2AGuCmhTTt-NJ_JK*fDgjUkKy!2}y zd>wi;Ze0spvu9YO#9a?HZKtzfvi&ssozFty+x}$XL=cZ=Aa6zdBwnr2(=*#;?D8KV zHLBnL0x8*_SwA>Kqryt{=!-)#DV3@HOR0YB${k zvDGey+Hu`}(_0i#-}!rJR}*?v%y%3g`K5f^4Vur2=~o{SbFv+-2IF*QjZNQb_UuK@ zzUrwX7L3b1)S3C9Q}upJceulif~N8>LF;1<*FCbT_&m$$>G)N;sm!C=qJg< z?q&Bb`iu#@8-3RAwc$8}4&y}?ij~dU4rgMm$B+#5hMXTAyraYAbmiRbab||+N>gtb zw>*2juwsFx3dNvg&YAZ0^b@V(Z?g#>S^BLhzcmHvXBYn4 zHD%dvr28A`{zkgLk?#Krq$_;sEuGHdaQS>DgG^_!xim6^MB}jN9277$Pj?>Q#zN3nUL7A6wqqQRO?C4VmqVLr{LiW_&Y2Pkz zY7UyZra;G{>PGAQvGRqrCoRt`A(y_pp_61#zI7@JcHQ-z^rQ?^5hK-WnR9WO(&_UH z@@{%9{wgc^@`Fy+6`A$1wqxF(bJU#Fc&ggf(eEJTiQ=0@Q{Hyi)OvJ0TP|mNatbHP zYFPG7&)LIFi4ym!u2}ll+YM1_YjXSeu!~Krk2(52_i1X1x!-U@gAqEp0^7n8wW_r< zJ42J>8?JQLZArRXqkiqqwQGyMN?<-loZYX6P0PUVpm(nKO?1uAyEksx`&PM&i4=vj z*^3D~b+ZBv*i{?t z8Ef74^w{A}4sq&@r$+IQPJ6#~YMJ)=+M4uBFQ?TlIcYPudC{2zWt{2qRD6w&@svw% zrg|+d@elm8ZO*gDWh?W`SZ7`oO?6P*8enj@MWZXHV#QLFckbw!5w7PlZNuZjK7ZID ze^D-4LCvPy_3#Vc#3+SPTZgSkuCZT5_uF`$+&HB5i|6OCeP^O?=?)1wPVV_x ziAvP)Y}Z4&azRIqv>Q7eke_f!xiUP8wWspalns8HCf+`Ohcxs3lFOm_8+(n0Z@!T` zVqQe@RT+t?OP^_-akM$~aJsbhiV)p(b{!KEowqHBuRi|tW^;`_Vb1jnp{Ig1>rD#I z&$4(*=FgmVIOgC-IY%!XNJTQ(vG>-|tmwv2P`Rh>VgRTCi~qwz~1s?cQ#aX&!HQzMZG0m?jdY2IN_qrl>W1xP8|3 zVBx2VjS|Bm5VE4m(_LsWOTH6_;OENfwYfWnb3ht28`6GI?&{9SN^>Jx1HP7Lf(n zg=G>;l;3P?ug7Pdd=%3)$?KH&F?H`9g(Gv->NmuL`A1FjrZk+fGd56aey@;dsaZcw z^MnVr(A!KidCb);*;P67TEgt@%eN^?dxxWQi;Y)Bwb^hir|YEXtEQ;#rQutwX4=kt zQMYK`k%;C*%0Z3vEKJ!v`-xX&PHek3^%$o z9zAZ!YF0i-LZ_2ePv6lmiDTON@1{1Mkz17TsQ5(mNd~9X=I+qLW4G0A+qyKV@hLB= zRnzP$XJ~#(nzNHvzywpJPhZsET^^$HrM^*vK5c&I!r`YfybqH%5TAcu@3WlLRKm8I zfBoFCX^qSL4JPl;8tW~e)lLfz&mnF)`!QooX|2-9xaJD2nO)Y=q$wASrs)hh^yF;oW8mKy_%{arPshMQDuarWDNGul!Y6WBWG0)#q0y;C5|P72`D_M< z=At~5$6?XfTt1COB(lgHl*Q(fM34OshPxn@F(}@GZ^Trj+c}cSD3QjnXV}}L6d}Da zC@!8Q^+R&TKf-M&|Kr?-qJy2MIfcP+rrI%_h<5f4{omP9gVO~iGz0l8o-T}*EDUKh z>-jNd@NbzeX!m`82P^xB7X9T^p^fRf9&^Pz`^%di&G_1&UGdu{jL6F+UfVurw2wkc z?TCc(TO&+2k6-_+x^0dewdceAi`H2wpPn*a%*eQ$xnrWCy{Yc(SK50$Q?&$J=kM58 z%s71MC^fB)xTC8lYuH;W=PPEuYmX^Mkjk^)9kC2lrkxA3H0nLx^r_+P(~^7EyiKZi zbBlTDr;bmMvnkA>P4$`6Kx;l_?7M%G^TQVVdydy-17%0O3ZdP$JQwVso*~)vd9UU@ zNucyBcC>K1;PA&ZuMC$HjMt6ouUqyIOq%2U9JasO zT{HG%;G-+6BkVzN`g5N3t{~MlR}xj6Q?!0%s<1UA-+N_Bc;I{7Is9dr&mGeqe3bkj zO%+BdN2wPodw)IU?@_3>XASR6k`)ogGwDn0Yb=A-qAhK4B@ zpXs%Xk5o9)6}>-52kA-AUPHB)_2~ z9xJzxpMI@znMdjIMoKiDjO#XIZQt~lSqd(`vB#tJ zR@~m^{G81Gv#G*wmHDkQ1Kv{5mrwoQt}@>eDyb9-myc5DbP}J)M@b|Shs!3Cm?)J; zWAafNkxk)|=~Ob4%0L-x5{W}1k|`u2m&qq_c_ap(FHEQ$%#{7P_a!@^G&>@V?nEZp zIXjW)Fu3psH)AXLgXbOi{m?&2i&W`zx;Nl=Lt$Fv0lxnXm==i)k{0>%$0Bw7!<@s+ z`$7#4cII?PdlK1!M0Q}(Y0xY0P$*7cM%WZ=WJ$a=$v>Rad_}?RgEDT7@fgjUZ?ICw zMzA{_Zchy;d}5%+S)+flCTo8>Z)y%>?5b<656(OTHExV1nFEd=wC1U=^xuD?bL6-T z+@;y0XE<(-zS%YY%Efu{yC&C01q+@?8QgA)NRl|IUre{_I9GpB%DRVid9ugSZ2PPy zV|si~n}i=0WU*1^rnj>?4%wpB|Ro~XXBz2flaM>&HQ9a}uFTqctodACoiY>D4 zMTX3H_Tr%FRx`iFJ9fqC^e%pUqJUv;|I&YJ!ZLoxhnBk(j+IJD(&6zeqpJpHj9C-tqF7^#0bNU2Pp& ze|&%vo$kBKPiI)XZ9(Md36EkjBFE(IDWxRTue{=NYR0WS*UkqvA0<_(Ot+7k{dt%{ zet8sz2=cQs+$AIf(MfCyoy6p^SUet= zN1^bD92NzoQaEhrU#KJ!86`3)Ji5q_45nlQ1JWpk?o6_?cXW1gLaD-U7W}D^^8e9) z{Bh={^3$laYM&DsBr5%Lm!b8Y%lL!8kgl6Y&Qknxu|i;4;<0I?X;FZ@-Te9O!6SP@ z-j&Rby!v3n=qEI9jhkgdHL>arTN|FGWS%wcTAJW>ui{~R?zw$?o2$sXY}J+-MkbNA z`}-Qmf4cN;^w%YuuefW^?wxhQGehO{H1)6KXp8Y3Znsy_R;A54$hSv!l*-ddpRtHS)lq)Hma7r?W zu1;F($;f%}@c!L3xyu&bmP>7O74%%UxnB7fL7z95Og#&lPmZmW-1X+#6cxL>lhxb4 zo5>9}t_O-y{K0I@TUOH4v(jTHS3Y~H;^}W$G=JH`r4}sx!)xAcG7lNw>+M?UHFe&X zO3A|E+M2_v?_6NJBx%jq**p|yRe4MM{h=mbDdi*YG*Wa%H?Ok09L{R346uq1 zYwGa-%(2>h<({T&{3FGMGXN=OcqDB4h*Qofu>aiQ#NV zw0E)-eGTX5R_OnW5LEjUxAK!@C*iz^$Z&R~Q)o_929fe}LeQUZ+iTOfYX2YRy#EwJ zaA1r6k`S!F;Jf0adYO^y)~?w>gzfElrU7Z>H-@f}e3gish3OH2g?{o8H4oZ0V>FV2 zQeUmLh?(Xw;qKQHs|(!N8;=kZGD<3*yG8P{BJLZzx>n?Ts(6IRrz-7deo$Hz?e5co zU=ALpB`r6xvyvXSceci(G)4@x74`!*!O_<;rxkF{)#IyyieRX6WmlF zc(P_gjo0y7L)xNG3emS?ii2uYqaG@aA*HwEjdao4eZ)xJ;bRA4=zDR??i(YdC~WsT zt;)6AqpYywq;M+vh6ztO_GT2=+<8B}5x1V8JC!s0 z$=R0@8s&@&2ERfGT2(e<7)RVuZyWFVCM!K9PRugz{?3j3YVJVslDLr-MlW%x=4!h= z(<*1(JYJl6VxvZ*VtT#S(2UQ1K~3AHjlXS_z6r}Rzhb=mN+u~rdG4!&wnLmhYo=A< zjuzX?${(z7G*W)CU3rC~+NS;UE^UuJzr?pvd(PXkq2*sN?G=(8ZyS{P*Xy<1VL|OK4gD#uhtgdr>-WkZsCHBD**R_a?c*gB zQ%rfp25tRU70DBpZ9eCBW9G?|U&qI8Xt`O}t@b1loq3bEZcO0heR<=~tQ}LBvhYFC zov6TeRjbDiAD1x42+aJjHY4rwZoJxa%KFH(Op61fx#k4I!tC^QC#PUBMfTsnir;=(URvsipSnad}$_$)Sj^)?Ho zF_?5N559z(MxnD{(y`D14`#~#oDihaQKln_N@O}y7>*R`H$rfroB99pyz2i$&npVW z(NH@gYWH)`J7Sj0m*O{HKm02^@4y!QrRRMvs~1=~(_?f~r`ip#mw4$S2wEv1)fm&Rtl)_@)YDU8vzWL4oq? zp0~%J5MN?F6cvZ(u0-2LKkiTw%)_fj5)K7F`KgVFVxllRzb_&fL4sk**53u&sIN9|+6!^X#Tm=vkZGrT;e(dLtn z#)%=InLjZmce@Ai{Pt^KZw~*uMEYf~v2=pt3aeXFlQ2gr0-qF7U*`#3dxt4+D;&L|U@}I#*L0;s0oFKl zvhTVA>3RE0@J7WFrJFln#_uc4$hT1HoUvccdPhgobH|ptjqKc~vYYm3&Di5yp+BKg zZZh3!uJ7%{rPhbG6zK)tJ*s)}gC@$|bz#hGZ#3!ga(>j5;&V+EL-xEJZe+fKT5EcJ z+^{V>KDaA}jjOHk?5N9EzI?>(y)D;4^Qu#o3Ug~`9d)ISq}8O(UDc%h{&jO3rrDQM z9}U0u#+4!89XKtlOr4#wlf2$-lSu9c#MRsY1qW&~@nvzUPnpumQ?#HS}@{OwAt9|d4C{DN9 zV{ZV@uK&#%juU@aWDO+o+JOIM*G@hph`$&J5Fkj9FLr&=bm%!xj)^za`WPU{p`m7e(i7m;IDo3D}U;*|H1FQ z`FLSFW_KEHCfwMwge`-QCue z-PV=%!llLK<@TlB_TuGMyL)vhT3Wok)avyXdJFO1<)wx8mG<6clDu`S?8TC|efi4T z(v@4+*RI~Yb!+|BV#O85g70jw*$$9buuLr@@UJwNPK@dC%f*=iopbUaw6a>Lx5Clg- z5d1g@f}aFI@Mi<682n}s1iuvo!Ji9);Lis^@E3w0_=`ah{G}iWeij75ZwEo}mxCba z1VOMC1i|$H{d_#t4uUhEeDcXBm*o43e6Jv7>f8A5S`eH8+~1M!?*_q{pZtlbU@G|d zY=DzUQ>ReuCH(g){yT^Neo@-_CHeki^8L$jGk!z<_$L1N_vDWYL2&jbjUYIC?pyNY z+h}MS|IOgPH}T&b{yQ6dd_I`MU2eU2FB9e-igYk+cC*1?lqO{o7q1DmyzhL!A8fXNIS77lD){AKv;B)8)vwpk3D(^! zL4ce^!MWgL(CpdZtN8D0`0q8)*B9{L%RzAdmEmZ&pLB`jzZwKV@1Q%JFXH@ZoX_VO zA?Y$;`9FDy(&sxt5PT=tY@?&oK`=EHe0&D)r-I<@-BUqu{`JQ6`nwx9@7#ZHb8UTw z+I}PW`24wUKZ(=wy+PFddZjDw>AfN@F<`K;3o`IiK@eP&-!BD0@NM~hI=~S4^RiR^ z73ViFpxZeU1X$hlnV!P)&Gu9f{1lvqFXEXpfWC5X;Zo~TdU34CDO2PevQ3unCVTP1 zx5tXTWQv`Q21Oa?H{z$~$4Z?xrA}`q_aBY}^s*`N${^|Y<9xixE4B#tG+yLYTVy}V zqy2c!Kmy!?&z>_Re0+B5+|PouQ!itvXMRS)VM4{f&lS%;BebAa@N)1mNm8o#Wtu`}sb~)C z9e{WD_FDq@cOAfQ%WtfokK{LI=g-LRKRXo!-wig~r``|FzB=_raCYjYH-fXl7vBiZ ze(6j2?+rX7qYT-yIA z*leG9KltfO!9V|(jo^*-Zw0O2{#J1MC&ARqKMAJL_9-8%QvmBFv^bo4KRBcA1OW}> zC5+|kfcusAgEN2cbim-8lRq$oQ!e~O2!BR;e>r&n+}+?OKe!wG?tgYS_(%WpZt%Ze zzh|I$_5EN9eb7)(p`$Y|=m;PK#?u~*)W1J;O^P&;2T|JH+waR{t~is~bS9H-!43kN z%vE^~W~hIIEc9Ph@BUYJ2-U%F-}5Vd8Qqeg-HwA;eVmu@!~FWah^YdzNSsxMcoE;+q|L?%~#WvuFw z?G=%f^v4BAeE)Ig+q|baN6SH!QWca`ry;RkMp{WoN}zx?M(4l$gCDH;|GtQQU0lv5!?L-T^vgI$n-E-3 z^6MrD%j)3+YVPj;j(zITAIDb_Gwn+nc;^DdzI1?<}XG$4F+ zibckmsUY~txvAi6@P(=1>^VaA%TvM3Yn$zFee&_yK;ggFr-GStn{D;U$7jxc^P7JH z$N=*F9*Sy83KmCiR`BM<+)S*4e5swvdBjlMfV`? zjrwu^b`TI-{e9^I`2Gj-dp-z)-;v*tt=I+Qvk(NqKat=2F9pHxGe}c&Q@rC{z>o*n zfdZK3uLr@IfBs|&n{E-9z{Hz3pT_x-x)B|z?buvCa5H_Hs!Hdbg*7Gk@zh*M0=(Ujy`W_0WeF`t^gj`$XN!a`j-?i^^DS6NChHdu6|$ z?M8ihwviTP)bDe-Rn_2<{!>8vbwEq4c<+Aaq(INt1Fh~Ler>b4ac`H(5sY7|Jp8S3;Ld&%==^r_U7+*KU;imfGu(n&Ll0lRANS+^JQ}F= zgQ!&3vl7#Oelj%oZ#S=JCBgE#z`~FIi37<$TMUBvso=~{vbTS zOzH`aVAVjh&gi;AG&(lRQQA}2qwbT@P!)07Q)%Yhjap{v=4O=i=P-t*KL$&>T)oNU zaB~nPeWBK`t!>u4gmx1_9%vp}RrIHVUKB7x>X(8528${1_g90DgI^AU z;2W~_{*{2E9+hlXza<-3@Gaq2XR#NjUHMs9=3w&*&Yt@PFb>+YWBt9Um4C8mg(wAc z7TDrhu(z{60dM7F9})f z@F^n@kog7@A%F78Cx43Uan-#c+YPkf`vd6_-+vHnw!cZ%$FB?81XWY#f{*E70Z{aX zAeaJ*!Onkh3g`^ZzJ!_Mz1kNs<}Yg;!KO(Pi$Ra8@oUK8{^c! zv0>1^v0>1^|J*73rfoD4Ikvl)9d*{7gmXb~X79s(@=6f=QX}~91P1;<+4=q>H%)A&nno)A(t(@y5$qvG{x% zf7x&RPfN3(x$$3dC-fD!@i$-jkN%O{`p-L|uey!Te(C>s=TkKPB`B$Jk@aDw?2_7} z7wPXwGx+{JHk1AoT59lnr-HArML+etiWOvoPo*qwIDe2KfFrrlrwK!42V1RU~Byf-^t;1(FqHt0k6A z-9srwSL7-1hEtSLnRGFnlc?)hq|CpH8&g5>?@tB6KR(AO_zP1(@ER63b|)_d!M_oI z#gCz_LNo+H@E^Yv1S^nI@bjDwg1`GU{{5S$gWxy*1^@o7(?ReL!93vqInDkbeE$6D zAovj&4E#Z-gJ39S{^IE%=t#eR>2wg>gDnkyqSHZeUp9)reL4vKmX!I+r-R@R;A{$l z;IEtxg1;l}{0FCl;LEbf{Hv#fU=PeG2!j9cbPyb1M-T+T-##4#mw^Ka>C-{*4f&0& z@0_&%_fH2wD&_z4(?Rf?(_H=^oDPETLs|zx@DEQ1!E1uIzy05w3jXoA&Gt8fPkwhQ z_=2E!rHqU6Oz<(e%AN$lnSb?P{*OsN2+n-5_oowBz=3+Gcwe6if^l668trK`5eI>K z|J;Sw&s|vQXI-Ne!xpL@sg)mPyD5G?UVZ(X6o{VzlSImcaBUhJfnJ9=L0huR_Px`eN}C5em^etc7Voj>cr26f}d&G zE@s-EASQBDDTFP2}CMRu;<+>%mlHf0Hr~~L}Dm-LGwP{&=fGI z8oKxljTv;euMVR;P11c8?xfAy&rZ4{AgB)Yvz>Q$()W)25UHVuB;Cu<{Eq2gb<{=k z$HfT+3H%NNjo&EdgZzPyd?Fi0U#BvMOi`8y1j(z<84(R#T*-bKb5eaqL=Nidga-ET zv2F@$MK9!iR;Y#GoYFLc_*vW?m9ccy2_HRL8Af>#tDR8)`asdtPlulpFawtXE1X$X z&(%)&_;I+Zb{NPC03T3arf&;{Mu0XlxJc2@EK(ZYs0{$C-1l>IenH`bc!kb1fl5<6 zr^30s=nqc18(5JzyCIfVr|39}U$Ph%Jp>&d>1 zMrkBdo0FC~6m-4Lso;x<8HH(?GniS*%j9OBgFkRT^JSLx=l9~Wd!R zdA~E=V1v>Fdi)^ogVD@~t{5cN!`)!24d`lA#CgZBU&Of@Mn!R$c^Z?ZdONg*rSQ&g6p~5aehyA_NR`TVe6w1WII9HEWNH&^p+}wF6 zDyLFf$A%10A`BV}j9vRO%1Z;dYM}6ArA0@hO>)4LzM1x%rWXCC?u-WfG93+6W66KH z6_=wNgLoaSC3|Z6(Mmr~RpZWR@K|+Ji#25$3mOVr;d3e~xQGitIZV1w7{=)a#h|=} z`ZG$}+Aj0Qk5^T-3qW1%gW>U-L{n%y%FD;kRopLPNGqXV8aYpIgMdM+M5j!mmG-De z%PI8y^>ZsZ;XpMEE@*^ybK(<%dem?y^?0IE;Y_F&NN&44@KM8WmkNMneERy7-6`&_ zJ-NGwLhm%^nD-0*#Am}eb!J6WB?4WPgU0seJ++>V`ea*I@v}0Iy4a494<+uYyW0w} z0%_b=dwDj{OH37Io}~LL>U}-*yTw}ClLhwvoJcyz0q7)(JEGsSs!PtCezspoF(@Er z0eEyM2y`1)(=@KP77R_+6rwd{+wAtUBGyZgDJPsE7U7hUVd^EI>5J+D#VD%jOA6!Z zbK-^n<_*mYzoB_yYoRHUZ6i%e@in=;@o)TZzeT+9ul%duAl?Wg3VHPEdE?h=8w9UB zeB*)$QH8D&v+IAI4FR$-DuxTrGn^gq8=|mJzlvW zZEwX8liY(eO#D|~uMJoODj+e#gR&eJEA#VtR?Lw-dM+P%HiTZhclR)ja~0BSkcn;S zR+1Ox)`&SBEweTA%rIu9Yz5mjgr4(CcO#E4=qkh%z84=ojQXQ^yUcRv;i#y$Vrzp3 z!`}MVySI3#{!7o)!L`5(>|+9w8MG@iR7ZuFl2Cp4A#?fNEbEgvQ61_?7`P_F_VZOs zk&DFXl)5kvk4&9J|a1tJ-cb`OoD$va)Q3h6(?gFGtYPG}k+U+->I zBwer^9!`>_>M&M$j7C&>5G$t_@)fe3Bq`PI5%!S#aZXR>)FvFT#VC(e{4DC0{UcQ# zB!$XSzm4fo#u(11q)^2{c9_n|?0Q22I(aC%f_miIs}O0Mr7~K&F8tSSh9a)3bHqRo z^K6Jv!w#CAb$}NWk@KVz#tTb(d)=saX}8sCU%Ilm&}v=oM$yt@w9sCN+U?$QeDzAJ zwYRjld$qf_e5t+HYDZUE%TaWxcj@xw%LdJ!CB<8$9o2CE)-|-kL;IP6RA%{%Tj!Gf zka35P{~A#PXp;Bt&g<=4_wO}#$>kf?yuSWqNIu+Vl=hmVVNZian@Y4(vE5*vGH{Yk ztz}PJ543qlHJnwdYq0CMpyjUDVPl)LPI@N4@5G1dv9>SDI;b&oih;3kI2Ar@Es;nB z7|x{J+#JbLDl~&vtAzpadKNb#Y#t2pw=;oSEIb(Y1W1puYo@4MoG4y&0e9hP zN)kb;XGcGFZTz$x$5s@}WFB(elH&KYAZr#Jzh#A?W;OFlrBz$=)?dte$~7k#Tg&6j zf@4kUU)*tGK{Ok{N0Y&)U3()07X7=G*NrCfHePK5PMJrFx7D5oZNw?N)-)8_z2*SGdZ$?EnV-7uIGO`@_dQKcAg5MGg>%Yz zz*Vr}G;S%b!;KTnT*p43I*N9tu4x@RRWg@D%C0s@wODNovwqS&T5a^Qv~1?_uaA;E zZVuyokRTK%Emj--h&1jfFXP@SHmuEVHcHFY2G7)LBT1h|{iL_rkl9&n%;B%OG=5gn zk6s+%?`St05gD#d$4~oeUh!8iL%k^Nb^PbzW~I(xeB=SH_OePj5+knW@G$DHlGyH0 z2i%Jn9SVzEIvVWSW@lz*q~KU{z_Hif+u!^7e!J!m`FMhna8sbUy)V^mt}^;Dz=NjJ~7Z>VmR_Y5G1$&+MGcT4c#$^2%N zj-vj`HV2U3NQx%_L1j6_-e{;IwY9d{#B=pDiPXjUUQ#?E4WT?5#vO_yQS^Uv5It)a z$&cesyS1r`epYt!XmHUO?R!bC!g&rn=|;n15T(tbP#6?JHiTl>LU)Rsp2?mW=PY?= znQJ4AIE5V`*;Ate7`Zqa?&nc2ZldvvB92}^H=m?sobN^5c>XZiOLW(?#gy*ZAkqMU zx()86gB}ppfhL=SD4icfX|x~bpQ`o+En13b5I4oy!Tt%}23WJLHf3wbXa`07oNW?P zSv_);2I7#RrlasN2Op>#F?@R}>-SVomNm^RdzkzkC{3jxgWCHjlo^7uArk{B2t1QL z*{m@Q(UrM{#aY$M6Fg9RS&p9LTpcEP+>eWb>^zrSx8M1(G80m$C?~QV!qbxN5m6WM zFv@XMAkoPnWh%}#Q3R-Uif=iJ{tH7 z?r9Pqmf0}r&J7QS-zhuoR(q+vNcL78SB2xXNf~!b*u0Xo^MMMZeBhZ}YCb4)dCA>P zjeo*t%a`9fu8;}`$*|as!{^R6*=n(xL>Mqba;`zB=Huh_#D!lx92FuwBTCXZKdzvm zBOa6z^cQ~H{7{$s*}}4u@`!f_2Ldu1i6&u1BbLRrt8J& zlZwXeyzO*e1Jbn5njR2y>F`PDc4UpcU~VUDz;5SV4O*~rliWfYW-W+dBA!!sQx&PD z*3vA_d%(~em9(NY{sz$z-tYn@6hepI5C2`NA{qrGoc)}N(b;w(@@+(?p`I1&y z);4h(eKd4+lskX$>W>h5i6~a+CSKg-8C?URm*x-XBY)=`{r%7bYG3C4p5kc#?`j{*HTDOg zo^YSSaHd(!fx)1zdPREi)1(_WL4&hQkKB&GW26mRCBl>xi3Emw(b=Q4SFA{FoaSO| z&?9Z(x)UD?K0eCoV%~&m%(-H4v#T3ZH_YSX3IPT^k9Ns+=yd}1$Y1GGTR5o_TY@=yZ5X8s( za2AV<-<|1Ci5|nMJinjr1krlo2`tAKNX~gUa4q!VySGR*kbg}!cJBN09kmzr3-P6a z&aGGyx=Yf}VqB?MQxJbq)4g^eaLh89J!+j6g5pnQilf$SSjEX2Kbd`15h);9$?=t%`1mbs`f6kUW3(wpML zwmof)(z|IlmZhRg!zoUUYIm)E!MhHk2hyWC7=@MTt-&Tj21@OPDrnz#ywK;jL(Zp=IhK=tY6_mQim&(F_%vy@`Qt{#XmGqCjzvNEO(F`k8U=xm*T&Bm zc7V?~nCvfeR;DJf>Ky3#BI@WV3$X_-Z& zHV%MN&lR1I>MXQcgF+3WXPt!>vrOmw0;w2EHMRyM&Ztq5GSzTxED&Qzte-!sZf%Or zF*7fAxXj9^-yFmP*hn9%d9_G9n3fD39kF9_hp(JSYk%~$fpRuke z{rg_5^*m;$HIP7-ucM)+puH&R$GsI6FgNpDkH-S06(8z`lso%Qs0Kl`BnN4574=nz zt?)8?Dyc+3x~M(J`5Zu4*vV1@vI_%ki#^)#WnMjec!m}w+atYd;bZWMFmxA?vwRvY zY_V?WrYl{>&x)idHA&l%HtYg%LXxZE`^9bdvbeYii$tXhpze`sXifx{;q5-0N##J< z`hI{?SUkFz?znf}VFP-VdvocHL#euDgAcD=Z1;%Yg=SJhM!p!?Ws~j+J7-DYQ{@W$ z;r77^C$^+3kMdNLoK$w!${4rcm&PSU9D}QQ_Qna5xET>qn$fC@GQx{5STmMhTuifv zn7h_9A><@a-J=-hC=G1kGzPusu&Q4~0D2CH(8Tyfq$b*@lC6_jgS2dzP6!aK^zt$m zO9DWUU{X6MHk0Y4y@g;)Ea6HPpjm8i$%0iwWI_o~%#;s&Ez2OX)PDR^!ahQw9}E1|sZ&istpBCT)UQGe9@TV&8}2q`0rt z`XhpQAL=oTJN#g+*CUM5OspIp-~btfRyi=QNN|C#d4iXZy3;uT;)B)Q1Z^~;Q5>c5+ejH&L&h4c4DW%3?((kKXoSP8MV>j++hqFvPq;KYfsBhI}y{nW}FTgP+ zzMDnl!@~j5WPg-LbXEh|+xA9j7k^kS0bC+eAApRtbg-+4IsM6e8r%W{aEE}kJJ~XZ z4JgWwv|ehpPEhCeV!4)yw%W-LW zi*jSG)GH@*rGB4Novf%ESz4+x8+8wO5%rTaK5u;!+GKx1FNht+Rvh(?jD`;PEx_gX zF#3}xmCrF~hbkgT$bO5GgRCgA(tGhlQ5B+!15(7-y?q zCAP456L=}<*OcdRdo(B>;%L{A-Z9xOxxVYRlTDRrfq81NkxEy(0LFVG-W~0Wdb(m8 zy@!N5{Ek{v7xbp5T8UQy#}jk~A@GxuxqrH08@l^6&hw;)6Z3|MX;&~a4iC<|qNBUz z0Zzp*S5(t5+{`M<12{|k3$a$YDn>&bnwwGGD8<~33IsM3>M-v2DLiOH^$@sLsyt@O z?n(Gs+&#!t6BSg?K?DVd#Zga9>%gMC=+4E5Sw5KS#q-F@KY!!q^#`}-4$49Q0#$AD zIi4AGs8xf0w!e?Wy<{~&3{ufy5jo4f@xVH4NaNr%VVydz@&Sj}c_%?7T&_NL1+rH+ za)a&#hprb}x&x^2deqG>VsehMkvfQQ zkT?_G0;-4G31`MjmGlZV4HBh(@aOp%U^vSu6$aUuiaB)~P!uZa_p?JZMRm!_&w(d} zDw4sdUq)%1jf(!!+&In|QN?}fodm6eBFNn;68YJsh4#|Ya(lUTg&!=mmakmByu93| zAUNpb7f|(5`|8q_OIH?`2pjeN%P_*}sNbLQC{1G(P`af)Jje#|huPj<(v7KxZP-2B z1cpK?l#Gjb1%s>S1KlyO_p|-|zNH0mJ*eVnu$%P@Ou9?Pg@a4C%i{YYDy;Xu z1dgm{{Vcyr2mN#r3;&H6v4J@C$cyH#&R{XUME*}Bm% znM;Pr-qBo^?^C_k&t15nvqHdA9KuWu>$3Lw;#`{ewOYx5&JT$kZL4J z_h&(7aX%a4P>dY`9S4ggp@9myKJaXdV9U1^r}5!L&$@QS!+>JMKP8NTYNl76Y3Dx7 zTUtQuCQkk1;< zq9RWYMS3*#+-HdUhzb>E1(Em>2jepN*k_1hQ`1Rm0-(q=LX!RNHUqGUBDRZF)o|ae z&dg!oazSMUm$4uudn$SwC4G<@?S9x^UkK=kC`Nqle6&}_2oWcn=XA24W_etw_xG~A z8*_T0_lZ&ZA4If!Wxy=4IPo3z52K?(I@JBmVrQ5VFU>}!bjV@(f+N+eZ??8Mm8HDZ z1j;Nq-H4y!o##y!mqG`aDJ%=8j=?S!}s%0WPVBcMm5N>bsyxOfufmq`2( zDc!n%Pp1kuIqfZs48vBG_OihZ%Fqb6qYt4?=@b@w<#1(wp07NzDJnP@l*g^SY*0Av zY}WaN_Gw8`0))9iI_l0bRdeuh6{77p?Ojh&Y-1}-n7hS$UZ|7b+igU$Ke<$m7R`HE z#YQ6p<|<9LIN1YjAlXxC#{1H7R1e;z?4trVridRf+fvMvbm*5`f-Zv6UCEcI8$v;*LSxi+uQG`@5M*sU={~>>~`;1ASVEf5)-TF zwN-_RD$&cHRgy9E<|dzEna~-EY(}X!8iY6881*K>N3Yz`6NV9uLnW*g6-J{H@+2FTb9u5i z>-?GZdw9gE#|1^l>Wo#5q)e0^sV*fevzvGEKKdW)cjGOaYcFSSJ8#vRY{zS6Pvg8F z9fj)gEG)a9sm+hVAJ#UyvoqJ5pQBSjl&n}EToIk1E+OzZxRSi#{%!8!VU!~bclHDW zt<+>!p2;PQpx{cV2@hWHf(3twrnY`8E}}iq8e6WNZi1nY0PA;rXu0XzY(he@wIP=hFc66b0sbbzkM zIr+jU1oVO`l6@R~IE;z+U{if0sg$i;X7ipF@Zx_HA1s{a{QkV_1rj6tB}7p{vxf!u zt6~sjKfA1>-}o2WT>I5Ab1i7zHP-&8mu~zB3CEwjcY{v7AV)ilwcGBA+}Axj7fiMO z6Bug$uYZ0*LoKgbzyanW6kWB`nzev3V>a6VSB|^PS_hE{F1-0HDer#INGowM@faxd zp%S@nY%Ju2-x{UAn(eB_HttzMan~}nmpnsaA$mlySMmTfz#VGGWyS!;feePXx`2P4t|-SgQZZZq^$jVt%Xth>amsVPf zsGdqi zImF2H;e~VV;ys;pMpdUGi9J)tIod|-AJ&0Nh4oRsmUj}Fke>!Vy_)^zGM zAmqjaykPgP6>p85sAL}}rR~YSB#~dZjJJ-@CM!E@awH?lR&DIMiqb@UZG0-~& zT|4{z%z42(LC-Egly^aGCn=1WhVx_hMA?5-iW@Fmud>C%W|Ag1qB4e6YrBjFI8CF0 z+C(CQ>PxH_FlPgG|zCp(%X^F%0E#50ze4`-0mppf% zL)!NVuWrZXz0vLl#$p?~9hYl4?tD(V)Lo^i>N{IeR6QJ3(wOPRTCKyv@VddP-L3d( zqH`n54Ab-NI8UPf9m@YwX>RvnoUg$Q=C$T$$dxtW)b!tvzpynt;IEI8eh*Xb)Y!TU z$D#&7gMIJGKJv4bQ8{vv-yP+7oQki}lC$lE#j58H@&@M3gROSA-y6edZFVOOpJSYI z#&SC@`NbHjZx-EX7~jhBt$6?DGpEY>L4+i}alSd~m&vg2HfP>##lwEob+NYIkE0Yk z9@#S7=I~rp6gxbYcGvSH-t(|=Gl6^au1gcQ$m;TLLK!ghXwA6VEx@z}QgS-2ynZKk z2WVc7;pBE6yUX4tb99>CT>F9h*9OA0G*s`522l$A0Tx__$iCbtZjJi=qxCFJNpEoK zZ4@`|Y;VzpQAvv63f8}Qn#{vQeAp~{pdlOU`Rr^dRPyUWGgD;?W44eT$-wcBsd*f z$qVkVAG>3)?>3Wtj(T!x3d_2m`Lw;o3Br0hCx}x6n+l5JsXV)z>Zg{pZsB@@cSid$ z=GX;_Ucj=nwjZbEcIh^TvXsfrt>73AiD`oP9RQryI+sQLTi{ya9yPuVzj1hx9l}P6 zAdB*0<7OM)(D^ha zPHHwP&7bd7it3#w>??BU0~>Z^o-;d19}>#7B#?CcexEBj4z_5HgI#h?b-=Pg{TR!Y zMig9OJc2?ut;%er0;|M-@?l;%BF#Rx7h+AYC5IVwR(PGMd%D4GG_Qp+C`n-`w-nS7 zh-z5HqHf*=Dk&rS z56YN2DtLp5u@8KeI)4{zC==#xr{TdS!*-v!BNx_jUQU=HiM&^~E{uF^VV$%~%S~`{ zEZaj8BWFjV_?#ZOW4yz9vPk^G;Lq&2@mpcM$kBpvc0=f&_NySpbo^AdSmDeu3tgW^ zB|9peMs?W_VMh*SalWE(#;_zgHYHYDoZPgxnb@OZ-UQGrbHuIKfU6rnE5D4USlJg^ zdE$}*(~s1tV?bU3hhn|w-lXsw=7GGX*!f312G>e5j@@E38e}yk-@2iYMny&gW%UOk zHBz+)P#-G6G7}h1w!)a<*p($Vb-K`|9APDdl-EGG1^&j#5%4X*IoP)R}$woWC zx7B6;@Q8O5Mu^-NpLVLgr51SAN~xb`U=AA+5%NODBYXzvtRoVO+~Z`NLqWBbd=6*j zBRI6vww4PgVAY}s0Cbn|C$7J-f>oLVC?KX!#l5ImZ)TTIRoYO<2ww-ymkqUlWV?AW8Mw zdUdPcukEaGGVh>M76zWV%RYwj1NX4iTe(G&OA{yORl0_ZVw*0Va#@b zU03vIN;`_GbVjh@w-~BveGFJvu9=JKnCCOYJGM0ewrgp+xdMdVXhG zZ?|henwJ~=n9kfTae15tsUAQ2BE2!};KdkjeC$YH7CUa|7B|!dPqo&qC1I7mHIVNB zbeX1VsYTZ5*WcL+5o)E~boHg4Enjx^ekXs7fb1@!N0Qdk&$U`G-5QiSsWNC~xeUTW zUgwC^;JdBsMd7rnG3qd$$?eKQ(oOp*XQc6(25DUrK6rTizh+9(wQ4vp7_mXxjE_J! zltm9n_!|jhkGD}?bK=9zYsdf)TZ4;+)bmtLuAGZ6%W_5;>6nb3+(touuO?r7U>owc ze+Dr;8gGs0g{KE>^#%vY_ND7*GX)H70cmx@+=ZW|ZH>8#dvPRvZLL~eo+gcYpKe%% z02%3w+dZ7A8+TouI;jVg`I;7nTIoy^0}8uJTuo7D>QUMv-4S_})~hqk_1yWGTvt{Z zrOXvX$kLcx$CKRX%!vBQb#y;siPSbFbSbYy1c>N5z9p+g=@w30)tW>>ky!8?!Ie z8^G$uks35F``K>$f`C$gASHkL~8r^Jm+~RgbvQI(1mTv8DII)vzO0;X7GDcj<)o zqzlI%dkH`)Hz|q+J>9?%o7X~YrQi>S09BNT#pEbO<{7s?90Z}F6Kc;PoSE90(~TU{ zIpzEB(#=!H^u3Oo0lKBrwOhBQ=kT233>}DG-w#JR27_*>FT%^5R~RL zP$xxC)DB5bry(s>QCVhX5<&%bN4Sn*6t`H<*s|8?c>ns3FsF0B^n= z**wQaC71T4jMbCoU=ncgIgty3ifp%&d({~5$Y&BY3+!Vm0IjP^-e%Kh9p2A(?E7kK zGcO*L2{>`4w%WvrMr8o>bxPi9P8v*&cIb{}T*W(PG`F-y>X1fFAE1rqHJ>xq^;J8Y zh8almmST)4RF@BHCb*%Ra#1B5wnxGHH5|BFThygcCn?AI5_zT`!v>U*o*q6s`f+Qay|{Gg@|ESQZ0MT^{X6k9f?cbh8XS9{`)32%0>D553|I>Y z%LaoSHhCfdfEk=l>$Fsvy#R4b?W;>yFJEb2y+n3VwovHNIVWBaI7UW`gSe{?!D#o6 z)`ID3al4~vENDGg{5(z&BBy<1(vuT$2u{?$tG*|#+mh1DzBzsD5T|kK?)~^tw(A}{ z9mElzgMA@a|?5oB);CCBrE6}~lL)XJaLKAz*6di99S zOWuvLp;Nz{*3IDFPfFuK`D(>pZn|ixWtTJhNZNuUDC>~jQ@fPX;Rr)#aM{iDF4Rjk z-BNEkEUL}TI(tqX>TSch?Mtg0`n%fkNfFOh+Kbb2E2dn`8bq^;y_d(hc*Jb<&9XEl z9?~uEPKmZ9d3R9GfEH~DAsI6wCtwuHkC_4pF+FNsMq!sR-C&%(36~8?PRcdh5WweD zC?dB(fN~H9GXaL~{?RbLi`(Y)vTX3gc)Rd-;}qa%mrzX!K_HYa7ooh;R6}|ZV5My$ zQF()lGjNRECr{0%z84?OGNO~TBi-A%5}R&AU_cI0n$4=1=OI)8d=ejps`0(}$e_hTq5m@JKG4T^ShnOQb2 zVV=wBaEI*r)<@|>B`D^?E-}gy)KnwwgpSLP(SVPLEKO+RAh1QlxJf@V2xte3L(3im zg9rm}7LZy$%_xs(rAOjnnwVZhRby07caDuez-C?| zT~xzu#U8$+ewZEoYPO4jdJxBtvRyvsuMMdchbqE2Is2XtkiMTEA)1X6vmq0g8jg1R zNmp&$lPrNfNy=5kIgXJ@%rPKCys-%orVn^;eq`gki5lz(aifNFn-0>10&y9K}Ub2Ml+C4Rp-O20J5U(TR#CQI10Va4#w&8$C=P3LolR(wB%#3fqK| zLrBDq>lWRI@tJWFVlzUW*Z5;G@0ASxKYxFsf(XYMqZ-g2&QRK7pMehcbcVG*(uB~i zJwM>h$)}=(W3XaK!Gr^g1~r7l(bn#UT_TTF(?)%gu($8L8$l{d3+%YrqZJ(YLM=cm zg>)o_ZL*~r1d3Mqwen<(c-+w0@oV`j1A;QZ+78FH8>LU)PgMCdLP!Gw3oCh(trb3b zzm5CGC48AtC<=?j8)%k0rtx_it=T;j+h=tfsw||Dey5ckwQyN0UECpq;7M{%trR6m zSK_@U#{&U7VuJ?W#GlR@*EGGIQ{jpbOKnXUtq9VlYRhG21ixvds=t}2B>@{V%`HIV z^)y=vNT1N&ctZ{>TDz6rAF~oDtsg5~or79cdfG0X(26QCNrWB;PCY_!cCH>%fGun{ zjW&e<86hfBRzjB*y1FwOI7GLkC(k7@CKj4bp3OU>0rV}2>n60JnXnb|h`Dl3v16i} z0742X&&#(^e@01L+hzXvv1^^+E_860+lS!TZ4ymUYp4bm=FF6;3E9a=j!bI37IS9t0(F4gHHIqP!^y#W;5ZN^0r?Z@sG(af9Z zRyMV=x5DjXeG1=utrs~z1%9;ub zHiN2<)O7g6Y0gXbA!(-{(qWnpapZAkrxAL$H&!ZlR7h21AL3{>jd!zs##K!n>cFid zY42ZD2jGN?cUaU99m%x)=oLus1pD-Ml^MPna40W@UyztLFR{1c5z)acrcRF%U;_f` zeS)(s)ZyKWn|IFX8n22aSY8#dQDuC8>%@ippg>lE+NDffNLy;`g(uFjU~7J=O?E&H zxH42ab2u-Gh(4{cExQ^dw@K16PJ1zuozq2g<^ZI<6OGuQv|BwO$+XS@=)^}}I+ndW zj++O)UbBE|q8_Wa)$-!<^5xdD??bBGU+UeB+0FY+eX~7{jE+2c_n;nEovvZ!{XgIJ z?rq3DQZ&d(3b_|v9YlpfGHnb-?e(MLK=E*PN1Xc1_!+|l_uBBK9Wn2Xvcr^e3_ANY zwZ8Q(rxrgd%6Onr?IM!}oI_qGn$bI%OOgA@(>T?QTa%v`qGIGf$nVqMRQh?`pnKx` zb2Vvy_@PC&I%)O#+jB)Ps}RqzcjwwQukXz@Y{6pL1T~M%YNb2pjwPJ@wpaA}-55>E zS6P^fW@AfpZ&}j(i2a?y??8}5O77_G_$`%* zjqG#6!?nsCvDG8Dd>Icilk%YHl5HHKgvr7|5}&X>7E5z#`yd$* zxPC{D&>LYjiMYE5QIgW}`+BlYkd?oi4Tk-=jAzv#Dd?&NE^Oe#3b3c?!u*iM|3G+uywhunN3bbNf{x`bg-nno=*sL@%<5@a)g7?e};~FQN-ObOQ|=iVxzb z7w65rB<}Y*(;r~NHik;oKv>3e$3ZYH&VGNU0V6O|%o8g$!@|2X2VqP}W_u-33@C-TKpXQ%igCk;mO$Ra7T{OG*4 z`5W71nW@1O-~(4>xF&t?@Q_|!pH7`3uIK3Slew}hGs2DSt=pXW{Ra!!Ns^N2YsUDT z|6DXR{xApEnj#`?M@hd-(k5M1!-{q|qdrn0-Iqn%GlORRIbkF9S{r{plkQf7Fhonc zvJoHR9FnO*QVHoKQy#03Tcm50C~8Hxv#SXinV|lytaDsP8|wS2EHTgP{HXIGa}jum zI*+jPLsr7%$G8%sgS@0_`U8)TJ%=gNOz-iF{)Nk)kS2RcA~R2YFP) zoiOy7tDg;^9y_0&+xWZDv5D~Do^%cKN7LaCtHLCF?@_CH_3>LUVTr9!rlHF49aZ9l zdz_-gt(>FOEKxfTvap6y8RCJDgt7 z!T_E?=`)QR`zmitHlq@mcgIc6+6JYS71rSFZU(B%Bs5GrfOZ<(MV9*)2AijJEdu{J z17~#0v2|)U35|Y?zQ&C-p}Lc)0ftl+{d?Ic?P;y7Zox4oYixMlAYU{WUO{N~3^t7q zVJsSx9=nun-NYFj3&g6--wXXczLUoI3cygw17a))y8qDg#E7FqdkT@?Y=dJ}7r_0g z34r5zMV!zT_-KyzWr3MwhotI1;w;R zwk4k%X!&OMfXLliMKTBfU@>b)-vZmg&E?L5>w8gI#<_F$+oD9vEL|d@Et>Pglq&7hDK48SViGXa))*`!ZS~c#P&r}+l_)e12w;no zPcZrf1`6iWEQ{Z0z@95I+;j{_)32dyGHW&1@Vtf9e7W`WN3*A6>|IWc9l9G1T3sH# zUr*MIjU#iLk|@vc$>#0*_imbOh{#lSFFRBcTMNENoq8@Vda}@JSNz1+6VQ_vx5h;~ zRCq>(NoeEycu_Lq-d0r5CnSDnWVU8j5?Igna~Xvzg9&B~VY-3;-;}0l?Ais!z0UJ1 z^nNcp^!EtdiV5Lmnw7sB8%B#UTkoq3OXf- zPu(93+sIskSKi8^N^R`U1&}$_xSpgY%*wD2Q!t$K>>T)*1xNsB@}@o?(@MaRIDYw9 zHLC?ofUDUO;8TG|Mocs3JKP{M!2yvmyGr`>%;Q^3u3B@^qSK4q7W*kU!2!0U^Yg-u zcmnx(ZO|#zKzS9;>r)@bN~q@>t-_SjK_Q+Dp$xn+sHDFZ46f);unJ$A2o0g8;Tux4 z$#KIc>83TIvhGay4z=vD9;>iabPiq&HJE3qJXvj^m1u^dSs;x?cVVa=(`OOJWu0|2 z#^;G2|J-MaDDr(=RI$lPjB>hbqI(&vBjIIx35l$O*YMG`cv7XB!G&qYPHa<)Nj5uh zdrVA(o3I(WyH(;p{33kLfiX%)EpRQ}r|t}~3kOjy88;0ba50Y(oW%KNqO=Nz3sonI zp9g6ov1uG&q}3}~qP5bea)`=X)0|meGiB;~Oot`ChlK#Az=O?obL|Iep@oHAX`ZH_ z%+ez6@-RvaXqwxe^Q9P#CdB<`Q0X2sGscJiMEFOc<2~dQmVbpn6?qdElA}(VWimF< z7b@$rkvWL+0#PD!j~?$dre{8U^R4fE@O)=SCnt7P`aguV$tn`VAPY<66Zt)`z^B8V z9oqdfC5mYmuP0F}(F0Gf=3F%tdsC-*uc90;?tX7F^CBy~8$V@emN80M;@$Vv_^PV% zL=swhMHbYkUtmk%@jDyWOx;&hA|o~EWlKRp@2HTBBaT!J^&!wuh3ut~NFwo2P;GMa z#?KO5@j`A5j^}ZG8yK9YlAWJ!@Tfmh;SZ-j1S9&8h9MzF(>hj(O3jcCA%{UcVNOWk zH2Y@wg4Hpsn-hr>ux@5$qRLvqDSW*cW@T(A!tLjU*-GD^8LxInw^_ZB#~{|o(LwSg z&zRnKv#f7}3hixw-9BG8L1Ky#{**3Gegty|ez9g{+I&h(lHTH1^=&WP+jG*khOOD9 z*-NumW|wCdT4AN|<|ca8v69jk{}iZeCy8y0^9VYY*-`c=y5WoA=i5-+g#Q!L=5U@y&ib8`{bQ>s!s+3wdmI>3UygsF=yv=C}fQwd_=uc`yh7o-01cA z`<-|AdobYdqR=h!?5?~(R61^QvpNJ(#wuoXeak+i2x?m$kY;a;IeWV}PoJw*0F9Cd z%sU{k1=Z{Z$82^yxqSDy*7-augn_kFb5(w7ShKWA zT0lo2!ZwF4aA)vkOf(yUTp8D!YSHp1PbC|-Jpz1KS~buUDa?v~5$z6r5-6e^*9Qxz z7N*uS*ve9pS<;Y++tmRBCSm*5L8+lb3E--6L<$>n_hUXnv>DgmRt;_>W2(@NBo`&n zG05`31tEe;el~s}jc%2P`=h6?eqT}HoN7qJLhG_vlDujO*ZoVMByXfx9a_ixpPQS5 zv9k+%OMB}uBCqs0W$^o?8oYc;sO8k z3+|-!g>}HBrFoM_TXJQ15u?hl50)|F^t3ae5?bN>5-;Vqm^oW~@)Qn%=5Wv8UZ;MkI%!stZ? z8PoSImO2aG{z3|I%j7ub&U#6K``_%r1+NxCw(rHd(w)N$N>Z5Wvno!b-F}kpTdD$k zqJhw>n9TCG`1B_}G?DmJCewLGe9H~ARqJ^iQAi{jR@ok*gTb*KH&~X11f|aGQb)`h zz^K=ofMRN*If$M$;XQ@9xb_%HnUzt$Ifw^Yjx(b3YEg5_N<@(llgpz8)nhRwlLuV0 zURb@bD77NQ;Cl?)yr7`o$~vj4wru5R{!S8@9^g_PmsTdUJ1&wpBf6l>a5|ALXw+lb zcu-~8wV-ftIb}BTS*QozI3QLxi28XP^^RCIa0qF_n1BRht09nD3W=~fdV0N%xpYG_ zgIa~~1v7RGCkE*fOK?R8E9rntD8koI%?p?Q2tifqtIn0MZ5lHPlyR2LB&acG3Gf)c zz4im*+Du>z>Y8e3qk^z{J~C_VjWh71xVc%Jm!$Sa|R3`LrVf` zMT%Cd!r5PN?k{oVS%g2fH<)fIiPtur- znbxyMnaOGUdVgcl>r-1)Y>yKxBTm_nvz0Ngtcx= zFOG3D!*iwFM2&i>nu@e0-JEBD z9G#FBE2|rXMeYwz33oIUw>-(?@e1_V)&Rc)KLN&@*8s+hqyrI-XfMF5DN8WSSRi;7 zwHW7C9qFx)F6gA!W*%e?)}wwu#`$!QG?)f7Y5e*q!Fgs|!nowP#P_3|^7uI=j&qd? zr;^mS`ciM%x}OJjq*FK|cXoPj?d;6qYkE5B4-cXbcjGepFz z+l=mH;4Dc`?n}D6t#73iC0TcBWQt(5s%9~r>l>^Hc*rDy7<}eY<*nV=)LdaZmIN9E zIi}<`2+L4{Awk^N6ZSUu!CPPC2bHPk7^Z1*GS8@RPi~hFRmgc)*|qF?pG8lV`lP8& zN2Th=QBf+SF--Q7uF?%f{iHmaQ90wMu*j!i0E0FhiBtE`Ml4q=+h~1RJCo*PlDWda zpMH$;vz~MBn^nq$Gf1Wu~;Y=Pom*tcO=10}?iXM(t@I?M|d_GX&kK;TGS5-(X06)M5@SS%<52+{Xt+An| z(c2t;&7os`0)=_17Jmmvo4eHAI;miZ*yUInEt_@K}a)W+FUt2IGFxeG-?S0g@L?m{G9Z8_1Pq z$lNEf#Oh=^__lblA+egLNef~@@TQ(-gF8lwaAfa5WVx(H`7$em3OMAzNZBZEC3#Uw zFBXs!Ob|CfH^nuf3OHb_XfY*ViN%Sp?WxR;LzY?& zi%6VI!Od&18_lT3T2JoJLmjzmyEU-B7UDt2x6`4PCQc}!p8k{ZkP|un?3m{Ip9Rxe z^V#Uleg-m@d3qs2HhQ?IzQG{+vw4zv*)V&wNpm8EJcd+qM~;R(EXR4Mk^Umy{bG)( zk@gud=F2d>Tx*%5yCrqUcr4ats#2`dDZHl830Tui`X-AX6iofHRWN}{T`V=bwG|QO zh%fe(2uk@-pr`BB?9tam=26|A>@=kX+G+ZcCU%b~XD6y0iy=kAViqO3Eez9x#cssd zXh0jWJDCQDqfA^tl0x7Adr}~nGOBP~>%d$v4xqa#Y7n)Fj7lX5|3Z}qQL3R4h>LNM zXOVCm8g9=5x{EAYazPNd^KT>!p&JIF1ug zudw+SP9*Xp!1ixhvtXFuw~8|WvqL&b%XVRNR)1R9vXIADbx}q+PD~7Fd0|;)X*Y(E zKrCPtSA(UQw+&I@mI$Pn!p^FPO#JFFN+_-Zhj0*q&qrO!=4EaN@L0RQ)r-@fd#e{I zv^60YMnF}{!<(y+{M2uzjeIUyp6uiDlh&##M!P?XyJe@bu&M@}UAWU|ud05MKIt?T zS5=Ypt+y@}H{eB@(Q@hKQN0MbClXLcm2_FD-gvd!MFg<> zPM?I4yysd7>&J+%oV}40-6-#2zcS$}HQhNy#Z* zvQ~M$w!X7`rSf_-bY5OIFS}7cPJ2;q`@XukvwX>UpZA)GZENmk&zwS6c9s`yp@S$# zivMmNN67oIt}4mv@#I?3+9*5V@3VOkBOOv%GFz$5CD$ z*xr}dcb0FMmwQPb+jm!&cGm1L_xjmzc+{jYL^BIl+dJ3oEbPaOrJL=Yt7|(~?WhjW ztA_Tf+v-8Gf6#oI^~-2KZWhVDo}a60J8O1KlsGX-_nUG0H120Z7s$n(HH#L+jO7Eq zNLc7#Y3I5Hq#xz`aWl)KbU$u(lf2t^o4U2LW=V#N=5cSl+|thVC4)2YAO|5!J6A1T zfuYg`D9t2&(j3M#I;P*NOFPTAOe2UOa~fIPxoRh6knMuFh6h>d0=u|#-6Ci>Dh`H; z+x((C=|wjwiY%w)gUMOnS#F!Yi*BCv`+o11UW!4|kB^$eC@*olI#8@#+PQ9t zT*~6hEs7qOcdoD59=XlKBt=9RHOW{ivvhytG=Ft@#|32=??6tGVd(uzb^HZPkTR)BM$TsAJik{n@m}R8wc?AKUuW1*c)> zL&C@=xFhWaTRKsjND^UB=4>Wpdnyq~yjhfI(4n<-0#uCa=Cx_vP=jV}1_#JwavhN2 zLc4iu=lU`hH0HZ1G;d|OE03+%tWg>YL=H(GHGA z75z~s*=Xzd6td`<5HO5e;o7lK$KNoeRwBK$+QValqC>`K3IieQKcR!R6H?O&Xu|Cv zHF}3URFD0{PEJKY=FP-|GTrcih6obe#FztE{= z(XJ6EemJ|G*ZqEqGxIy?POi@Hgco)i-}?5&>6tg*nq66ayL0V3-+i>R^Z1AFfAHb+ zkMucu;S{6YLVcjZZ?)Fofc#eL27R?#{I$SeZT?#1uOB%ZM@hgx_i}^Yg3x z#jUrm^Iz-qwa5<_`Qf5GWB?X#auFl+q}e3~>=M_x#C0xlol9KjG8ehRMXqp>D_rEt zO~YFLkn#v3qCWV8!rA|ujE_aXT93L1v41V?hIzRKlh&PbXh+qsFS%xIa3w%-jhWgJmzKl% zZa<0Bl5_<=T~U94L&WTannf9vBR(t=7Ds9KAkWg|$FaVL*f=jhrehEbqImgMu!n~P zxiMNl7?Km$>N?&n93y@^Y5CZ`H7aE#d0x2*;F>B8hJj|mf=BXEplgEI^pu)z;Y z9j$SHo@Np@T68=nEr*I{2sT)I;l?c8$k9uBbPy3JpVJCj1<9s&AL^Qk#N-GGbW*+o z+4z9k)(3P<%_F&%&6=@jK@qa*Xt1Aj19w zXhJWU1dA*i^=OTahS12HM8ja>Ab!sbD(b8_Iv**&I^V|GjC#F1F0kN85F|rytl}TB z6ez6Wqzlbu($2iub1#BH8bra-wibowMeV{_-Tgf3#(Uu7u>CRH@^NJuK4ouzXS5&V zteo{$X(fa%cb{YsVu^~2F6Cq65wy!y%8;X(@~%2%ID!*|q9q8~XVDwOEOKQm!MykO zvxbrAs5q}NI)3Oq89y#~vdaNjHHf=B>WWIvj(5U`lf@@YvrvVVyH+_=jgZ9X*2j>i z`6wFY&i50-I+G@e8-%1N!MU3lQ497)T) zy9nH1Og$6upNw5jpe{)kiE#!sISIMQF*|LJ527ZsI1U1ET&!FkteX6%b2?nkU+Q_H z_3)wzX689*Ost@gIC5ETEx@=kjE)!UWax3P24W+C53)lw8rp-Sn#*~zuR?>{Nb{}} zW6(ibLz$cbo|nJgEl~KWKJLU1A4WMfB0;IzwWl8=1_n){j62{7djT9t#gON5gi&RC zdqrG!Ok>@HQTl|>t}eE(TwW&ZI9b{?p*a^X^S(l)kp|@W5laO<3cdN2&Ag}D8R)Ln zkJRWdlodtDhv=04t0ONxb9FnQG5&8Ad7cmn6SvYwN5g3ea=V}HMtxqSxK705@VLSw zDX-^AyyrcyT4FRsi0GZ96mc6OZl}WsMVvR+_T#i%QJct~RVGjPz7y=}MtL`GUJIYb zd68r(I36b!b6-Yz7dFdoIm$UnzvC*D(l$b9>;}9c-OWlbN(KlcCD~1h-Za$n5)*1Na7nPfbyXX%~x)T z!#Gd&{K{3ldlgaVMv||kJc`h0~x|Kq(J^TPUX$tYN{t9m8$frss*w2XW-2oV(enNEGyNo z-3-nBF;L}SAe{7xYVzs3H#|9)Hpm%@Sykq=i9s&JY-DoOkh1N>wlcWnE7mJUTPCdO z>E{i6;u}%<+y`Y~paHD)=o+ImK9mp|IhVw6Xvr}ahJ!=uUZhoan8tZWs>x=g6J9u< z7hSb`q#j1StibUUT-`tpeY@ysdS$PsF(Yi881Y8$dJJPTUu=+=mCj|xma;B9_JYZX zYi-52B9n_a%7MJS5kF13@g^VE(fjNkJ#6CsE7B6c!iWu#!J)GHYZNv;CTsz)#Yi}b-!-WNi6keg5+Q3&h^9!)w@ z3Kgczvi>|>$#jBS#f*xrK8=zsw~CSCnvKfgsO*f2IIq)zjK1QXZnZe^R`tz1$2JUD zB_)`(6e3ZYapU@+%`m$@G?|P?B(hNdDEy(n8gRzVS>;TZ+@fRx%Kk4E`& zYi*=^$i&$g=gzQ36R4b6L)M@<-EI{Xx;w#!21+AD*rnIsFzYAXqma~ax83G7 z{mNC!@tHst_s~!Rn@F;^7w2S?;_3E+x){l3lo!cNm6U}l47fT5Ou(cW>!T7ovVzCGInmf!AHVjJ@b}8 zt>?w?4px$C*d#T?WUUM1Oorx~@ZF9PliA@=WtR3{Oupb|H!9-hD8~&U5b_jnDcc&| zs+1h%{boUmmRr{0QuKMGR=QdG6!$ijd6X6iQRxhNmvDW}K`dvT`taAfATvLpb^(PM zTa^l3I&@}>P*IEqCni6-un4IQh%~ARohHniAv@>C3oz^GJ~XgO21)AWMOv7~kf7gh zPG9U-tC;a;!ixQD>KT6w<(eOL#wC1&T;;k_uwbo_SI6ZL;F!F2c$jI@Ty*)OMm<^` zYnHbQ6B<{1AqpFQJR&vhYc4Ok#KH|MR;6$$)Dxgat#CPto@0mG%|HyuO_&o@4ucC$ zGk{(8XVok|XWc^dR-ypn!#ce}$Zj}xo+N2f9E^G3s1hu~M&$AanV5xX2e%?(IXOK& zr$ik1xJE>LCM*H5_>m%ZLLM)gpJV^ShsOxj2pM?Ts=&#jIMuuO9+z56WAfC925W}n zk6Bu}`5Hb6O{}6hy@*qKbZB#8js}CHIo#-#!J{PU4=9}QJH}wmAFJBr$*|Oi4Foc0 zCQd#mBfMTH^aKU<^2lKvpNr%odkiHe(!g=M#vEreUaoatl_GntuW6{}dCwZp1nRdc#ozpkEL$;#=iO=jG<_uO;O|2_BIk?gR^t>^EtS<;1V@Schj z?FZUO?F2!%w80w>KJ|#Jh>xq7q)N=Q=&X81mQ5U;`YaW2CzR?`q2)tTW;FgwZFU$GA zOT?|6qbF=XPScZI4dRo?2`3p>2g20R{H*w;XfjvGsSo2E8T2YYjt;`)NOjeFHTnMD zywYBZ?;Ksqc(l|Lk-;gBhc@M;z1$F3qniyKUZ@9qoh2Q$6K{GIDU+6e%TmehktFye zKR9@GL=!f^@(3Y+h)o-(W5iZ+H``Qcra{AtVu&52{qqHlcDl3_=krj8s~Wx2wOr{g z0r|L+*oVyo9aw+;{JB+||qz6QMY2DRSaLhB8P}(qHt!Fev`Pw*J0D5^0O9>5ZvJQK^>4o=giH;{x zh;7>iQ{c&<;_;>z2(?zNq@dwi481LZqk-I!l$b#kORBputyRUAmS6|6$AP+LzAq>< zh?%9s4#xU$Wxjn|pDl2MyKj@cOqp|-5+(8qoP|<{j40ewNBKiKv){~9HoLD&T-XV~ zM{}dUG3j#n)VS3YX5+0*wu+=A+m)p(d*run#3*J)$S~w0?E#s`Hg3S70be6n?w>S? zRI}9B=y%YR9=Oe!3b-KMZg3lreA}PnwsKu_p>To z?`@J1qtib;W$*3D#57CPc9)r70U1eJflgCp^2Wh+UAoaN)?Sg!XH!G1Z(Ntdc=-6F zq(0Bai89zh!bf~`A5|;tk3iXdK4+kVYIX`v#^ZJ7VAv20K!LO}60M&u87Q)C{Xj=> zo#YhPRj{B<=w~0NVl^l^ne3*`8B&}I1+tEcl%b!1)RnhEQ%OEh)K@56Fz82_9$QD& zL{l*JOmrs`|DXaIcj7uB#lHWDoPM26Hu-!rK4SV3?IjwTU;8*cLYYkci1#LRL=3?M zX;7ucr1gZv_j)F&&mzTFfz?!vkE!li?#WfZ)Z0Z=K+r>iOK`SGLGMmXSC+$iaM$TA zr?eYKH{A+!hwd`#WI?-HW;H4?>YVV>IS&p42#L^T-$mMWdKKm=qnM*@c1X8R^K0XQ z%@5qr3B>&IHd*n}1fuJnnNB2Pk{4M;RNA$790$|BOeYY@Q>Rs9hNHru+7u2?!+3!E zTqb>%N~;$iv%n7I6U1tPm};KjGle$n+ZRkh2(XG|9Ev6&odB-~y&c{vleN)^kA@62 zgIA+aNZx?z4?3L5-PYz6$A^aH_kF7Z~8+G!*i8HRMw`?iIZ`fK(V;y zdLY%8v*%0Tu2wvHW3I#n6m*URv;@$w9L= z?S@!+CEBG@TET{@#CX*>K@JPVC{U5qmt4C-Y?NizMC+=2Tis`j~^=r5sLW zDp{!DeJ<}UT28M6J{3zB$aKh(BGD*(&A;2Xg(3VaP9?T>?ZtW)o#jN0ESPf@W)U6n zE6HQ+!I)ss)v1Z2eiH*(bi&sy0%7|77Irn*%$25&D9M!aP#zkc%qjk0I zwSHMWCY;=7T+JyYV5(t?q_X_o*=y$1!PVjm!$k-f_rdjkoD4gWlV*R}$=2t%md+@{ zK7|N-!E9M|`c9wO2ZI_d+k4eY#`jScA0Y4v0%s$oHyvaS)=#7CTs;oY)lO7s5Z05^I7<^cwD3uo#W2z6 zW;&N0?THXGF*i>VMBK%u?M_ti%+`}r5G`$ySm(!1M`u5p^y|sDb#z2;f0%5{ZcXEd z>dn#7*Digf6BW36i@l)9;gD=ObtJZc^>7zK4HYxB8v`&`_qZl3I^|S=k(pi}7~PLS z7DL0t%Hbj%PedU5Zs(N zNhEsXPtfQj$@mmn)x`v%PLidHrM_mj-JiBJ@6JvNS&dPvT%Y4MK$3enh?SkI&sn-V z1|K!ic@|7L+Qq5|B6!#uI-O3s?pr#TfcE5_ic)Adc_1_kjF>^CLJRS zOGl|cPD3QqIJR*)V2Ops(Fe-&7$+x5dX@z9w9Uki=(rk(vU%sonAw3g_WRN4L!8dn zMU?guy>lccRX;j?G|se7O?K;=bJomjg$LY3`w;S2|Ebl?oI>@taG=g2vZ4rYa#0_n z6%jbbzQiJlKggK)NdH7)Sx2R7EsR`R6Y7_@6|Mf%lyD`>el#=ljem6V&dkxw%&lKM#aWocnVDO^;&ckH^d_ZhtFl26SH@6d7G^okg}ZE>Htc;>IpXs-QL z&9!o2t8nZ);MjlgtA8^F$NuyW{zeRr{Wn~W{lnf&iDQ3Bx`<|GZhccDS(k`-S5KGM zk1iU%4~a7K*`Lv{{EHeEx&=6TlqN+OCsF1~kssV+n7(=NHwmV{Dlq+-YAN#PN?k#c z{6Fu=y7khe*m$CX)2KM6qLS|K+bU?cAR*|#MHCA&)-PUs`l;Ih59bz1BcoL0BD!=q zN=A~3C|&-0TOEZ(bQYfT-%mgF2Y8sp{i6u*@wdj~Evo3~04Ys8Pz6#4mILaj1dZ%9*{gr+S+jnb^3uJ~{NjdD*L1OqTci;ZuG@e$d>SvYK< zRBCtS&fQIwMMrU7Wal`f!eSq+s()-Z`)Tha%9?SCYpnZm*3H8rY=hKTcg>89uKEp4 zX}vHziK0=I9i)XzX8-%v?-S|&tv_Tk`!|KmzE(|Uf7a~>H1@MUp-9@OM#b%fvXQ&@`tr32*JcvrxK1vm3`uO0y!Mv1oxF-WV59jM*WQXls~T8uU_0d zKkmyPl`vPeGicBAW48mco3AvhVpxqK{7$`}h8h02>TFQHs}g*AV0y$~_l4iOzc?Y; zhiQLtZL_hl&62@ox&Qnh{`bUk|L3p$4zmVX2P{VQMd({$gR zowN5Gik%Ak(FF!=*c#C8*Q#1i5W7%mrc-KEJkkO($`wu?!1)qEry%&~tOs@WC>@<= z@zHUi>b-f@X|--QI<3wfKJTqQAPeI=+Rk`DX5}1!n8*@a(3{5Hm1g^%*ThNYS>SUl z)Q>0$o{la^^;vpAp+Rh!q7%fA=)zx_wd=Gyd%jl*)VTgyDMVB9@^;SiA{v^brcRoo zxJVAn*bs?x^=xZb?X2(KQcvPHY6H6qXY9(zEKRVWWYIdYL#mSHXz&X|15d(}NU?&W zz<}*`BE;lE`}TZxeT14}kVC~2T9(p$?J;RV#=}gOd-4T37A$=lLa^JnQbS>49Ma~_ zB{Ev6%Sc%6(uu|r^<1|{1T^C$>=p58)J@VdK~db7O3rDkMbh2WOXYxhtACz^!?@?# z8yaLC=eu4Hke&W7kevVi+|?x~LsBI-U*wV6l>)2S#_b)41)qeY zyj2dZ&_d@p$^q61lRk;*38}gA^O2guKN4Bd$EmI!KQrN!QrzYmfi*fVRC?V8-OQdd zQf8(^-+T#)Hk^AOGKi|#9IAA}u^DQb1HudrIae}g^mCt4Wd*g96Y|q1_pAH{K zgV3*GqygMbPoji?haAu|tE#QzjjoSG`#0SFBn{_YEuJ6+a-?rqy012JSmxF z0AR8M1OYGFYFKLJlRcY#p-T-gV^t5ptT9tup5p&LI@P=`lvm}*u)TC0y{wjEys>fl!f3B#; zmeWS9jf>+ni;HvBP)|G8uf63+@VZy!K^%*IMKvy)A#`10b*FEZ%K1_A4d-G#4vWwz zS3dfoHmIypw~h40Ws^4{hG~u7s63%DshjyjGoaV59j$f?B^iB-Pu&EE%eCVd57L72 zZ#3D74uJOplUwrWe@ALnI@?(MG4EOOZaknpoNwV)m$Rt~pqA}Mvi{gi z2}$hqD3YSll7F$_q%Jj45Kf%HQh5c*RMHrB;lwmHo~icjDf9TYy6w&bAGwvUUaxK7 zCh!e9dYC(@XC{x(e9>k-X?2?VG_tgFH))Ul?86x8;75Gzqb>w+WA+oa`tHuwGni}r zD37u@9H43|YL#_A%hLo2$>XTYAhYiyuQ6?IJl4fonMbctz23O0vY{U*-FgkcG#&(e zc6L%cn?dU}{@QpDFonO0`(_mk9>xBsBqbS@*w1v^RFVbv62z~uQKXCuX~!weBF%Z) zCNtvQ1xJNt*dS(rgw#BcN$d~DjrK038N1TIj@ ztdHU^HQRdfM3hpxF$({|AiT;eSdyy#%g|_<%)XdTMWBgWxk&<)xlF^aUzkh?B%Fzv zkS3@TIuO5uKP-6lB6n5rJDzaikC7Xa;Oq%sI1xB#m83=7<9a5NQ9U6-tVEW6JqN_S zsnd>dpW+;Gzl)k|8jJJho=!^O@XZRPGDwOd?N-qii9^K{7Wca~O|=u9=$k@uu)4BJ ztSa9W$H_375Qz@~sb}*jbL%MGFLSti93|_6JR+gT)d_?c592H^UJ->s&`~(B9())L z27FGcUfHmzf?G)brguz6j{O8%35u0qY5a^IkAXPQpaN9~>vPob*1Sw`L52FNR|-7o zK+~;Yp6^Vxqp{Tpx|2j3{fKlwe?;}8kyxaVj9w7}0MSxy7WWv&Kj5UfKvOXtQM{$z zm-DwZ-{}W`bGc<+ub+H}=u|Hoh>Qa%z~%g2ZSqJXKAs7PcLZgndD=5inqg(qNXT=C zl-JAbX^bWQT*!#e(lcVYE37N8XrO{onCI~+<=0IROCXh5>Ee<}W-b?0xcORF=u!M+ z>;Z=?O1xA_wIT#b!RljSnlvWD>arZXHB(N!c3!KNtoVp@-6_H%(q;PXN1jsRjJ_{J z-;&jUV%E23RK=NaMYy(W^hblr7iq{19A1xL(@Nh?e=HSA(zTVgs;=v|U3Afg{m`QO ziF5WLJ`?d6`*CCdJ{BrIMdJbWe4Nm|G9qg(rcCj7WX&fK7`=&l<3d*v>(&E0e1}@m zO}pZhi|Cz);wutNMwh+-85vPXx8mIQJzOD&j>?3pf=k}-r%6P&CnIN}Tc`UQ2#QwA zG0OO(X}}4zK^c%a=dMPO0=R8U}LuK{CO!z15RgK5#g84 z%((=4a$a)a;VdqWaTuA{N!0Hp6A)89O$rJNo z(`t&zMi)!-LW+D?t>S$CZGwq$!92>>sEK1eWn%*i z;ci~s$ai34YjTa=iu>?SIh{{;dafc6tJbgV8#p4}e4V5%5tI@_*p1#4svbO#dQp6e z0ub7p60%AP@ti4-u2+!N>hYj&9BZ~UzLat5rC|5G3LxCmaiPp3RS&qFx;Sd~0qWpY zIbMOPZ#-rT+KDt!IkPyK>Mi>;PbyE_G{(gdKki}=r`m_H99tDs)j=Cz+++W*jPKqG z*L~$qd+_~qY|iEiwLzqQ;i};m1rsguK52)HqLmw_*6hyde4@WHnNQ>%0oO+W=+Mr_ zf5#a`|BfVMdg(-e!KM>=9U!r2+B2jW{q0f>RU{DU!&c?w%-yGc-&M&*?0s=2kp~DQ zmR^0l_$QNEwBRLHN-oTk!8kwGu>I~h8Y2ThKYSV$`Vpv!@=5eFcY-(@hQblZ0@2U6 z$JtS&-!6CT+9A$6?$5}rm{W%UPia?O{RjZcv9w9ZB_U~|Ae9EG42?~U(NFAd2gz^! zqO&Q!rc1qe4a)a#dk=L23;!rllkywY@rMa<)lzlIT-CK_=)zd&Zoc_@ffB6Pde?3*9H_Oyz>k`W8AP=Aag><2mR@Xnp!Xqp zS+1PW61PY1<9YwQy|vPm)ZF*IGWs^Cr#;Ow71iJ>eQtMQ`^-r0YhjihI zPUv|FPkwp%W4+(YWsRZJi_@)Iet`SS=2ThooUT!#qDLA9GHogcU#wGan9lPE2MskN zPv+rB>JP~RZaP&*n&Myx#!0G!$|RIw-LQ*ip*30=5?oWp<0Hw;N>SN6u#(b3K~Xtm zipG5v=PVFiZ9{1zoV6hLozXPiCKdS{lM(l6WAh&Tw9zYaLD|Y$S=cM040&W>&wp5X9>6AGcpdo)NASL#rA69H2RlU;`&SuP?lpKF zzQ_ja35qlFue|%iQM=8@t^vzWD9&k%h3d=1&1SRQ6ss$XcSH=C=j(5JC^)8{FWKiZ zmr6|8)61jgn+* zJRluF4u_Z#eq+tF+>_>6s3KR~H68?M79Yh4GHFWh0HZETX!%hZsMMX#-m-2_HC(#4 zD?w&wXsO@XAh^L?rK*~FRf9uh|oNRW1tvsL_eY{N$tfrlwh~P z;T!SuH3g9`#Ka@f1?^&MyjXq0-gc4}u-G)sy7^8{)B5LMa5ZNw__A?=8}HrJR{enVe5~rhOX4R_Wg?kF{{YU|clUxO2vqhBK%pYGcpLWBtM{FJ1cBt^DA^ew zd=~YLUC8|BE$PRRuKQ|@#}XMkdCV>kd>kbo$H|F9d!_dVadJZ2Oz*1>+e9v4Na}SU z{I)=Wl`&_*V$G%Yh59ra2=V2U*G#+EdDKV< zSnN*UB&8*ynHm3!i4=m0&LD0+#&^%Am_(ylX^$xPJ^w54(;UGMs~&(n-99(OXLToiE0Xjv9@7Urr*Q#D8vI(2KWa4IxtDE?fi^zcxT z7%(!W%=FPVJ|OZj2mpmR!- z$JmIUe{R9s>JX0&MaTgzM6|tq1DC68#1=DG4cZLBz7RBrI33fB6N$URkiNh!;a0{Z zac%mmOa5>WX2V8rkoHbW3ZN|a;@lH_60gqVq!+PpvqfU4JE}F(N0#xv$KPbwRJASQ zA-4@)QCSES$UlfwdXT4ssK5meRRU0^ZE1thLNR@+Sg#E}!RfsET*u|_=(dMd$GMFrQuge2-IUs$ z++jnd-HKlgDU*oeq9=1|gbip4!)xq&+sBjp(`KsL;n(lcs?qvPBH%_F4`LV$qN6M{ zy?=rIZmL4!a`3c3TUe+;6y}90&Qg^Z8AN~%xuH@!Wgt7*el)oX-K6L0w&k)0)0383 z_f5`Ft$klJWVhD2k4t?|y0s;9)Tp-1Sw2>n=>gZTT891_NSPXa^k!$*nFB|zr%(&bvspIZyi!ide`pGvDVi7!-<9l|UAI_|Ert7+rgn;Kn!oakf=^o6kIYt}{OTM{aI=c& zn41H>|i~DL0Fc&E)hoIAeb?%Ps^aydOC2*1EMWzsmgc5}#M%TqrSGWsOKf)6~OjYZA zaozs zejf>Y?sFZimgklpxmWVkWzen)C@|#(V`*A^u&G{?x@{hxm?TDeXwDTPOV-umffjIq zl1t(xCM0)Y(A#wLb@V1i#EMRV(7>L5j=6c`->PGWJNq^b zVJ;LA9%oTs(YmUf>uqpKXqpak)p)><=B#{$*9JRz^R6Eq8%F`)5^?X)UH%-`Q=~KdtxU!ql^MQ?VaM zryI#(x{>q-<9@WU?V7Ii!iL=7qJovaQ=FEb?G#~FpiH3(T1%_T?bXgoxd{#h(v?np z3DXK)!!&Wj&6N~G6MaL#YC{4l13`u~Q&B%IY#waxRP45{ATLC|V79vDI3o|AGbOysj^Mgqd!8S#GM@vTB&3!}WB8 zT%K@X-d%;+CPn-l{I04GFpCE`AT1ExZmQaC)lgfB;`_YxDRY6#MoQ=&9lqU*d%+D} z{$wi~*9a0=jCjF8#+|0B-BAs-oetvOxgPMa7%gPcL7El|IK;DXmc>Q1FrqdKFvJ#6 zx8W?!`U`myA095`QIf|f?Yoer!!+?h0s&whoncp+s zQ*ZR4E0w5<9JB3@#&Pci3_2b$!wusk9)|8v3+n6`hx7T^JC6ruJRC%C;)8gAvV?Rg zFPYczkLi+f8gcziI2;WCLU_b%P6`8|WKTk>V0hkORKQE|%0E#2%(KIERR-EmrC8k+ zdL_QLa#IDH=i(1oK}MW|T`o5GSgvSp!(bee(7_7pGwS3A+mO;9 zI96fe6Ktn)@Ksx9TA|o{D&xXJdFzf%JFi~|Zu0~v^gFj2$@Xp>V7GVMaH4zr=%p4u zcE12pbKf6Rt2jI2vQAxaN7T(G#?ud`h*yi@(p+^(c{}dys&RF*iE;IVtB6>C#v)zq zz;~(!mR1wv%I{xZD*HguvXSVuaII9qWgAX_W*=27JtQ?RJ!NWEq?pf%WfLDdEF4h{ zie&}e)r7<~f3XT(XAPZ7z?P{= zOqnVtmCIrcH&R?;2|CM!TTP4OXy~od8W$a^5z;e`$U_wVzxRN*hJdfNmQB&y*2KMk4hq!_M z+!3mfTU<24d+WW5vn;+XVs^r1GlNVvy-UEHRW=3P&@B(Ac}f1Hg(Js{A8UmU^}>N@ z*Sb0~!E|Ta>uNI=2@S7FN6U3l3)d)>IhjlycaC%FV>%IQd}#8;w{|!}i|l9Wu_O+_NZE{O^&Zm{qT`j_BS+U zs?Il;QA5I&w7TT;bCh~5>07)IN9pHVgMMj-6>qr4hnXz6s;cd`zGV^8RZ?ttE9sRs zV}Spv*R9QCuqq;ekV&aQa_#D3vUSo_iRm`$CD4c2&buCkkS|&_K|VZ98BSZra(Af`#mtLLj=ZKrSDF8_2qqs|$MBL?q%A&(@4wo7N zxQ8NFRB}NlGl};rf`tYw6(*b$meLGEI~-4=B+A0UZtB!^s32zN>0z4nB5vaR%0FyN z%x2=jPUKaaU}}7H941Kw>&4cgs0@D2DY+^;SEI1#9n1STzlK`c74U*z)0~G1I8O3u znw@Ys<8@x(dbZaTuX&A3+(r>)!`Cnqzp z^@mg}&*h&WH+ZbO1sA*Z8dG;Ojh0{UjPP4V#TxvN{;GVu<4tE`!3kuH8 z&YI5V8C@{f=trk?@$8%=wn$QLu0~mO7{4*F?QCwV;NgiC&#N367MQSoOk2G=Nk6FJ z4GC=JMG6e5{x~AymMViywT+yqNcE1R-iaEdN4$K)G(%bUB8&$)1)!}s4RDfyx)yl% zf=%4vT*N1~R7^N7(qUM{JNk&m9JPy`U+dN!_D z(Tfpm%3_R-8rq5gP3B-?q#&6xM5j@f-FWvzMf_V+4A-Y-}jSKa% z2J>$tcQ_l2u7W$wPO}~G|6dOFm6}shIFV%ibvjsTw*3xBau^=22A~v#JdLup$-3k8 znA0fhs2XP>&M7*~+v9=?!|=0|uWK8|NlKy9QJO?aAyraBiw2Xa9^o)>uh_(^oAj23 zz%)6HkfvpADcHCDv}miBt8|l54Gn^3V9YHz5jASjRgE^A{@OA?W9`QCd>HDNQU(lt zwG_Q=`r~#PvaxsJ+rNa?6<6tsguzKmCI!KFSy?mP7-<@S= zqBgmRz(gBf#k7YVDH)=Hg&_m@_1{{{Q7oUY=f*{SaMCd3B&jBH#SycFI zJI(VL_pzFcTiO`pZ9%#}8BG^xYXfBvqc;UMn^NLV-T>5_QFaq4Hv2BCJP&$VHa-B0BLaA8Y|`Ya#xsO#x$iNm-%PWJkdJ-IaYBs0$0UXkV6JJ- zb$*7irfN$h>6DtP`VBu;D}VF&t5yCq%#nCgte3@MG<(FaA=x~Hz1DhtLB+{vTtJmt zq`fB78eYvDe3O_CB$$#{CQ7;L;F(+?idC4@OWPmCZGybW0_^ySWN;rFhDJ9sAx`h( z37H|)d-k>WU?Li*uw6eK=LI(NLIr!0N=*r8!W>|iz;)9mI^T1kx=#1ay<~&@)KU*c zs@{_gNAZ!~vyeb`Ipe9oZ;6J43`Rt)OhxR0LKz!EW89!%_Re{(0;lsPKjJ<;CP8at zWW`7R3t8T)XbnEh)#uW)jC9}mle>a@47ldz)OM5|rrA*Oxefu5U}kE8!%3DSc(FR_ z!hr%_EHX#o1oDK8$kOs@K|g>*tDFfF|xiP-I zn{Tb%eF1b|9yC3-uECRRRFr`eQt*X=hj`iO>08Xm8ZyfRIdd>!=t6Ez1|$Vx7K}h3 z`RHbG;c?9a0jluQRT+Y;$Ud4o+EPb4A64N}{NbGo|4C=*?&l_u>L+EmYJB z*XQEUX@VG%hQl9QfM;@~(x-Z(4Hiy1hI4{_46#`Ekxsm?K2R$*gi5p5cMb%LX1c=> zS%OiPM_lvYSu)MvK1m@!BX<`}^phW_XAKMcCEa3Le&5r{)c{O#KvzSyL*aPWm6oVH z_2al7T?(?6WEB)7lF7h_L2{2HocF0-*A7uNUPx*T;lNq7)j~ zp=6=)8~)69&JEvIthD6Ei`?`E#35{K{Bjyje}RYSrx1H7?7uj7Oo9m!ahXce;Y5xm zUVtoK-YeisM3J*#H^CPVrzzz!l=)*`A7%b%Ch|H}kynuaRSY@4ZzJkA#VP0umhy$E zG_xRc^Qp8HamPLLuWsDM2Ug<7okubxPnW}pHly0$i|SJoVy)Rswb%4^yO`PPe3pJI>p#jiB>=u$0U=`E3ZIw8tr zP^9X0&BqDF>ELGUtUX!Z{r;-Ltz)#48Ybt6v7W~1I3JwrlhdXnrh1}OcIWUSB6I1u z*v=w#$Ge*y52{pDhT(`|Ar0;+xx=0zi?a2HHcT*;XZPUGaL(NA)A zVlI6rP8y>uJp$n)8&uPVF8Wjg33o&KQ*d7qB)cvV;gPW$9;8_Tn@;14f7TcBXj)d` zVS&JrKaAcC)8@z}a>}NBz>y-$oL60|S?q!vI7-W<>WtG>Rl68}^EmKN)NO8^ZQoa7 zsKKx+VXt0BCqhuxte7K_MY@zABC_eHy2zQgltiyZ+AR^PmRQ{y^`Kc7VoQD^mWAMw zza3U(NGMeVhr+t9y*y=2b$YVgK18-FU1`;nd@kAzfYW;#WynKdRO{n97JJ0GE;ka?F;O6;a@SG$P3c&cph=TTBDPzEFd zS8<|VyY&59Q@5cf&Gat8s1H1*a2bz?%?0mby455LQ&9+oXLYMv!XQ>|qJ=MJTsS7B zti%7ZVmjeq)$3TZ5rix>ff}SK`QK!hmUzj-gG@%7Nn#DR?=w;y4)ocNc#pjgP{o{j z5+{gHN4=PK1`a}Gho=b%S%IC%X98(m6_8O31@B?Q5{C#ML562RnrF>O0JB=OqgNQggof9@@?DA`%KaUGB_0(sxgq)9O_E~z(DXgcni?(3LT7j{7=GcH_VQrf_90p zoX#eZ(}*`8cZ!I1$eGExPyD88Q=4j`Y%>Xwfw34Rr*W1hbZSQ`SWN4}6|*>oZoM|y z*aQTnI1{mf10S|lfb}``!yh`khd=xw?H-b$xxx6<;Zcs2>!eN=P+AuIK=}3#;s{HY z(TT8GVvFBqENk_8uk`L~#6RJ#HIGl{EEMux zu__YXP>ds~8GuPioznx1;t~l9DLU~H=PFcZX?7CQHHE~?UCbH)F*)^$FYm zbiRYq6=V2+q}nAp#?P7|48(^d*cbw{5^>IpA+m{s{bQTcMCqk&Vi~kf6=|Rm_bu6? zWbRJM)tT5yV6OA9b3G!k3+S14Mx_?L;|68U@ff*^5*St3Ji;Y_d~u~DEKTGq0ZXD_ zn~G9Yrl!-;sowDjn<N`48GJwQ5p=3^jp){+?H-v!kA)nxeD`N|`3*}R?Ns@(Ulm&0Lbm-U| z-*`gD=8Tb&g=c(HOYaWamVC;}>6MFgaH>?&m(|esSL+TI_3ja!g3-H2Za1tzu&25k z4M(u7$SbRhW_fi=Nh*HM7m`<~EUNxp(}MY3lF<>1TRJ6mfFdh3V3)KVHjJgMO`QTQPoeQtf~D3$+4SPdr8er7H^fW5A#|Im7 zaS1EH?eW1N?rn^W>#b_KnLZ12Z6UyYI&e$f-tt(KXUTE+vR^;Zg-jjW80CH-alcT? z(Z3K`PJCUdm#am}d5-~Qy|M}Egmk*9O~$JClN))V=;O4fZunKKNO!*jMHz>2GA<&; zs*^%7ae~st6se<4d_+MJp3?ysyS0HkMak6TB-A;zv%9{n+N-joYd3V+iARhviO!6g z;kp}kqm7g-!d$uP{FlGKgrspc;&9?(T%--LaB&?Y8@^oncUpCKb?H+?9EPQ^tNv5ZOjdIxc11evP_CS%2PxPz#&&croif*iHc5@y93aj>(K zfvKX+b^+_;g2&PcBWr30{$mL`g48r&h<>ncLxuN#Wk1dY9Iou_Ia{4(lTf&3hs(*8 zeJqO8GgXQ?tCKWrw%+0>?45*1(IU5_1M1?Vb^UksE=+lFT5K0jWrf;QkH%SsCANNz zb!QweMQlR{NaqH$s++pKp?Lxn!DQix4<$cLpDl5I<1o#Hc@dbUJL?;x@Cb9#W#Dz9 zs|lg|Xk!uLcBHW-M-zB*>vIhnC2D4ys>b>4o!Lz7ZzWAOg26k)! z>rYh-3*R9x8jf>?(IqSPOMyYm?PpQ~{4&XSauO8cK<<(U&1#CcGa`&Ihv~=D<((Bi zPHPsRC1F<8ZG|+OY&J!ldDAz#!R{{--2j!i&QXM|NXdHi2$S$#mMPCtPZetrJ+fG!PzjT&*FeTI z!e&*yJ}ph$r6H->KSg(W>nKg9tz@dwT+85!m2}?rRF=Z6magUD%|>q`e!1z204e9L z8svMsV{)eiRvuzO=`@tro`|Z%^<^C6;Hts|;3B|dva&3gKw+9| z1u1VBGH|k1%YnjIPzqB5k1q6IF?x6^MJ8a4bHaC9)GML;(bz2I9r>=a<>%cqdI$` z7tXa-k0W2NE`IF_3;D)X7Pu#!%7WR|wLBf%TPxH+75cEvt*N2FttxCoEvSR27mo7? z=Kv(&{MAlwLcejS%wt!&qmee08A>~a11Dl`VYe9}bYA5nx_loGd^&d?#UKycc zL{xY}{yKn_BumHe;s$RGm3dJrHiqJi8YXm4YYVMju|V8FXYqERX!oID~k8HEG4JVz@=Ablv8sSmC>Z* z0a#)o27#8Pp-7Udm6}9^@RyC|yAZpPeIs+{2n8H!7a2PmXQMQaa6Z(hJCvE_oiF^( z0-u3&)KZ0tlTCn87Gb-Ys(+aAt4+e`EK^1jDIC!~@0qwioy^n4-6+9nJUYt4zLTgy zyG~jRo;FM340ClJI<};$%XGxETvfhnsc+OHa|E1vWqBa_HA!)N1>((>4MY=^6*oAS zG~LiS;2=wG3EWu`Px4H|>>Bc=!-2{oI@m=Au(*Ik)OU9UOgU7_o=b5{)gtn zlTCDeglrsA+4+7-!d;RVF>NZ&BiTNHRC0|H+|Jl;NuUiSl!@o0GENASJ0C}-ni=Qm zIMW1V>Sr8|Gra3g+@e;@6q8rvP0WosvNrcl)w=ws_r-NIO#h7#nD&yrWh}*hB*-Ht zbf&VDjs=Mq!?GdgV*UqFlsHs0IM=;#xQ~t!=u<|B1%j51!B$R@GI*#IRux_;b4K;7 zII;55NjX-4O~n*NBr`3ox5x^!)UL5=rY7cwF4n{rhl_6%u;2lkx_pU9ZNnhFFzH3a zJseZzdMd)xHn6IvXf>^t_!Y`&QsP_H$3SkAkcH|iQYYYRvYY*gWD$+pf`3IDgIapi z#;OQuXRDE3pfq+JdPMrJIjTbxK$b6-R`+G&ok)oa<`sqijBNCPVDaSr#Mk_BF@~yM zIg?oX?o~APHiq5y=~NFoC&!ZfnR^mfMn}lgpEKdnnK1p`4Fm?IH`_0=-yeB3<@y){S%j?e`%c~~3D(62)z_IcZ=^;iKvW_cG zi^Oiw}rOUUzv^Ev7g;-I232*8Qkd zM-`G(wy2~?qVCm%^LPf)X_TGQo#v3?91V1QF*o$JppH^4i0PJtN%WJN$eQ8dh8&Qjt-`qn#>XQh4ZDlo0%1X0Lfyef;uYnv$m~_mNGUxs*@r` zupZcL2(y8qTV3oCQ3tazTFL1`uCt_N;3+&XAkwzTZy%{?-b1`Y<8!S<3f7-L-+Hc|GwMV-Ox7<~O4Fk@%t_!}H*p)C?& zj%lo-8rlzII&eg3b$?`zx&9-}9=i?mwiet@YtqCd+f7TYt6G;8C?Q^Qe&?y#kuOXi z7o972OiN->XI0g=)4XV~Z8EQ3c;T~$TWilB8%0maM9;^Gtpj^$3Q?Jb2>DdYwK9>Y zWA`?yY!?YcQ`SA1QI4ImU=0->)HhOOeagM^bYb1F`QyJNvBRdMRz5$FoRBAU6PNS5 zVC~5nuZ2zT!Qnk3q0>r~oPe5`yy*4KoKdhl}l_ovMO@A@Q)9B zM}bQ;AY4O6BdL6C!!p2Chk{>H`BN&%6ihegY+Y1QkJFnP%g?uXzO;fa>E-K~d%EOb zwT;JjgF6{`4*m?2UlD_1dl__1GYr{|oW#(Lv2<&?Ra|8c^7w4e*vNncF-iniI{950 z3f@VFkqH8vWodFG4l?_8zA1rnF>sQ39Ekw;)t1eTp}iYWNOcg{QuB?Qw zImlj8m7TE)TcU)r1rG)tYoV6xcsSO`wSlO)IdXdmd(gSw2o_VNuj@r3#v?m#wh$LL zHhV=>Y+lEGZJ5^k*@S~9;dNq*m+hvx$IT?0dHTkhpAA83%nhVkzfVf%xM96NS-LKH zH$HPrqhUua`=UvvSD*+cy@b+9F7}o^GPxr4 zkg&X}GgTo;AzKNLM79nAvREaZ$|Y(4GzPy3NUbmY++;4YBbFpb`e_f}t%<`aV4wui zWXEAHh1B#$KFU&*&AurwEa+YkFouM;cI0b?wIznf$sO7p6XmzAi_zUzHS?XnZheGe z-JhigeD+G!)-x2Q|K*vV-C7X24=F9XS#;cmN+HBOE+SE+YJD?|2Y>e$HaovP^H2WH zJ2SsA!!WHPNnB1nZGU6tXEVjj%*@Hm%s2jz-~Xd{Ff;Rw|M|cDqxhYfpMB%^zBV&6 zoSFIM`5(>9eB&RTyfbq&Gjr<~=_ZiFnVDOE*6k;nnNc77f}U6Tlok%(%9I}+hbZVD zWzVD0And^#)Q{HlUO0-Lq}lW6XdS9uKX{Q1){|b^N8`746byi z(i{;(rh;=j5LL%5AJ4L(#&SRVssZnwO6Y+em=ahPBN6QjsU^j~P!0j=c5{t15`N_# z>l0(3`cjz9qvG_Owux^5W?R5q)L^1JaDvGacm}7Zs}>iN0Hx@F6@=)@5WZBk@`6ud zjGCZ`CE=HYnA3VQq%heHy)Cxj#^~cHxo|0{BHmo}FjG+0QZ?$A6IOhD@Wh=%fES$L zQws`pzPr*Lj6dP*nP2~w=GH&2xpi%`@#GBW6+e#iB6s=qKl=OsnE183`p3kt|DN#c z*Ia)6RsVf3Zs{km?(1*P-OBPFE+zRS?5A{3g0TigY$(4cEV@)lkSjG;l|I3}pyDCr zRzXBb8pvUsMQ6CNU260+2AB_eF-DQ9_vTfn)mmwETAe!#iTZ#9&UfhFW;TAnwN3G! zRJ+d&qzhUJcUPM2duVc86r+4~aWPBtrtV>}pY|3H&l-S(foKj9i(@YWVtDH#lfpB3 ziL4e%TmuYcVxQxjgbnxb16(q|4-ij60om+aeJ<`u>0S7#kO1l@KT-0`ysn?k+i*HG zhz@kt1MW*o2m#@XX=W}v;F4Ihb&Jr0`rY%))IF0Tp zAgN*R&z{@nFEZXU6BH7mK8`c$qaOIE?k^&}#ayE+x1ty4xqYTJ$dlY53qb3~W ztbwfSk0&wdTzg=XU)LHwMsnR2E)}wGJ&B6m@rUE12(_fe*pl`ij)!3axJ0?jA?UI)h=m`#3$?&fT%K4>!L1(Z`$5wzhxw`OfZ( zPd@$L_kR!`^!m}^(Q*9Q$zYhIqaS5?F+M$ebN=Io@qck-WrJb_-4^PO>TSEW+IL{E zdwRwBC`u1OsC?Cr1J+B$V!U2!le-+utJ((L#K#wKB;(=afhJw&d4o`a4;h#?oZ?{T zX;eJS!lZZXK&BDxExWznQp5C8t@hI7G|CFpElhG0qUa9$w=w18=#6PtYpWJ?sO}CA zc%p5vh}y>wbY}z*#Q$q4eObGJP9Sr9Ol}y&TI=t`q_9bdyuC086uO8*CsAH37R?QW z8V4(2MSZ<$Js5^bc!VO{=jE$WJvL>|CN9QT&C$fTUc+KIVs6&M)5s3hw1L9g?ut-U z*SuFTPcdCg6S}B#0HUh-jOw8bmIy4Ds3+oK-yHYU`FW;C8I*1i-B2H>+b){%@oWj) z2#&M~S{Vd-#6{Q26)|O3hbj_m3yk0mywOxpHi)!IDS{W-Ku3aTI8Gm`*J~TcnedQ0x{8{!KLi=>9{Wn_=LSO6YUe(LUV>`^~BG5^iP*GB3=RyORgaO?Rm(%PfBEd2$J0sIb za&-NnD~~cl(f|x1c`YOvuoh~5Kn1bYjgQE+iz)6JSTT&&P+KQ@hsIa{fU879$7Lt>0k z)>cdwVtR(~aae>^ziacSrVS$bLF_)IE|jubLQwCOGFGH4HMpXL)tH|qWvd3AE@Lla zqY5bty#g;qE?YJfirbbil(z!8UN!z)Ds>HIn=hrK`_r*Y97K=ZTnMn0CIv@>zhz9g zV!JePKlXgtxR0g&SJWq6_EOc#*03>mXsY|F-RdlJ&hx_y7waMr5mF-lu&N|Muzy08 z(3sa(BeM7`;u6%E`#4S_M~@gWAslT?Pc5Z6fP=Si*%AkkJ`X_Yj;KV>+8Cs!2si0C z&KHxG?nK@n02BzALGvP`E?s>Jo1*(!o+gmaNu>504}xCY&w_bJKKnUmT3lBNeh~_K zSWLj1Y*~L|L|SjHjAd}kXrdb?@+(F9vB7RItR;vB;HN71;mcOz-u~z9g{3d{_L^7u zqrRwHb-tMYoxR!wuFV2JLq=qIm5KI5du%*@u9n>NO!Ml_Ak2@kE^Pj5fXNAPrXv%A zfMw69#xGLPvC8A2(XsS^jpTAXvSg))Y1w}EnOpRS-X*xr+Ub|-GB#g;Dt?N7=vvGC znL>ax7XVcQg!>9akFVt1su~Tw4+Hk4s#*V7)%nQ>YN<1?>OfPI8_%P)k1|6u_z)Q4 z*Ku_)`NM+l;~U7U*F25gcu?b)8V~ea^QvYQs?69On9V_r9ZiQ}Rr``@-SxAZn>uHCuoPm1aB=Sg&TCJE@Pr@G0N*DGM??oJiq-Ej%eB`zO}AdMT5 zk~Qw$4k_*JHJN%^jeCv#Z$q#NX?@;V_@Y{5-57Xlxn31`;X2}?FEMpD=SD9rt?-13 zUx#1BI({)8E$YzpqU%B}lBDIM?0Z(|!5-{dQ&2+R{ELozlwwuPOq#M@UN9umXKD#rc84DD*WL#q(o2PqMha-7g`7rSEQ`ygroA!#N?5?Ld~OBTl` zK)S^=+nY~#Q3o0}r??`2rmrgqTab*&q~oHiyD=zmDe_`^F27=Yy?V`jHTN&!Q?`k< z4WbS8Dc;j%#xpsR*F-YVO!-(-5N&SWXmPZmNaab( z+-KXs!uF;Qlg!_hFdy2M~A%vFZLoLIPuwc;2z{1MZmYqYbcCeyL2CN1M2 z?n!KeFJ;kQ!tZ4mmRMYo0+#C_8ccBks)b0_v&>S*RTPhZiEbk{mC^(x!vi;$Rfk4$cNnu|WSZ|7CJ z)oO7Zb{;Q!T{RkDV$@lj)+aiG&@jFD@2daA!G7=i-}wv~n}1z0z-HVGFq^UY zOY$l*zP|qTMY$m_%5Zonw>*bdqbz-Mj$zbEblzS2^y#aQH+FW{pYbhv-C*_h?bhwv z!R$3VdA`26wY#o6X}9h*+pU#mdu64$a_@#+e)o~??%uV*`R?Y1nNhoS{poynbM1R( z^iJ#A-MRkIOZx5Q>(6^7vU}2@Ta<_GN>2AA0-|ls8UmvF*8mzSMwC=T5?%uxLY4F#3%lEF2s1FUI+Q^dX z+*`i8+>oy;%k699Zo}a2g9Fui(`vQatyX)v({6Xd<>k(U4>Hy6JfLTHTb)j;)w+9U z>CWNG^2+U%&Yh^!Us}G~>fCL$TFYp={NVZ!7<_+_sin??4~iS~VX*u`)>rL20Ht#i zSPXVQC?0%}^;D;I17L1zTE>L#UcZB#_2-|gKYz9T;-T&+y}fbtXwY7Kdgsl-;Lc|& z`F6Oy{DWuTf4&}le{1-oAAI)F!SLIst%G}?z35(h0Umw4vHon=8SdpG6&pSbd(q-q zoJB|DFzZu1!Z`qXcGNIpeP4~}8kELKbiR)R1vAI*Xf5*>T`gl21af6vee=Kl;5(n; zq`-giud?3x8=`mKsn$Ecj-kEIqM4an|F@$%VDHgw;dxku?Zsj^S~TD`!eRf;akI>v1|}oP#Xx zA4QakjxN!gH<*5|hdanXRW3Nvf-~Ctefe7&+9?=7H4IBlwU+1cQG#;;xLleb!Qdl3 z7XnE;+%m5==4E(V!z1`xZmMT%yQ^v#=06%oROi)j7LrL1591z>pm#M?5*9Q}?>LN; zZl3kQfKFUc#wXaca}Q0J1d=gOYI+B zwPW}w>(3rZ<`VtaZmljaFKJ5tI1RbzD@$#|J}AQHjs{krR7#FabC}e~ zC|A`;Q?)lcscrPLL3kczjw0%(zKmUT6`L$17ddlO(KMx{XG}H1%hTi8w{#o6Ik((s zgo6dT$)9`sdyoSv=X^t3=(#E4f93_QopS<_AM`WM;H;qT+7yn&RpTAPA zK7YgLY1Lf2;G;f{zqzZ`aiDj2hv>se*`tMaH#q*YR?Quhj}nNw@811wy?k2 zrJwm>V;H_+bEDmAZK`~b7TqiyYNV0A#DS_LDsV0PYA~y;&Ri_3F(xEZT8$p+8x7Nb z)Xk66tiXFC*j$kQWP2G6bg$EF-?`gtw_0U2#Qn{BV=_qne&zd1o_cmWX0`4iy+>>4 zb2AUFxcoErsJf@ttHqvN@1ZM#@@@0 zfG}_L`%tIX>IMp~yBLl}G6Vr;1a|LGk2yO#cQsqiGn_ek(`vSw?MAD$wCtJCpur+d zFE{r>*5zkMi}COXc)7S+(%Exl1O{TjU;KhzC9sJjBdXkjfK1hXUQ~c_$IcE}14YE{ zK?PZO!r96XroE{ifqw2e1}JjsNnmiKbtgoMGkIAz0OEy53lxzXG;|J7-4*8rCz9 zy6eK4ghhNBsZZl9dI}f0kw@8Slqq(N7f2+F9Blfc)q2%nbrKokPg}7yMV_v7n(YNasub0%ugtkEu=Sf{do_q5bwMY3E9NpMCJ8Fy*DP-X)#=lm3ObYQoaRbGF_|6O+ z?f<1sI<1xAjPS3)$#Z*wKKz5P(QzyCEnn#FvG&I5hxtHl%X<%ZkMq)FCdhzo>`JG>MBeYpi|xwDalHeJ@pv(oLkpt3Y#UUml;P zBX3GpK52`wb9N+C!m(VnLKR{iy$%tvIE;n|QC2lW+ac4G?#=;1cK2P(+PBJJIPcM} zK*h`CRzRqMK%(R{Ao#tF=p-zv-b}}ZX33=A$Ue@~TcuK#-2g^wn<76zTm}F5LcvM|wT+!5b4ALnsp8?1S4!pXrXi>-w)VMX%Gde# z#KbxOvXPeB$Z6=i=o>v(Vus5sG5?+`F(-?m{AN`@h;shFriuw4)OQZ9R|naG`{oS_ z+vVF~ajXKvLAUytJ&nciG!_3fe}A^>L%Qi-t83llMmrmyJl=_u(8clp^nh{vpI(e(L^&f)lXsFHjBujVW6H`t?)pbZ}Rh@R`XXg~kQZ!n38cQwJ>8!Ty zuC_a~UlNGfIn_ed7F^gk$|9<1k;g@pb3IC~zho|F*9FU+++>yu)_#V!iQ)nMZj$ah z$2xI}mzeZXniOH2M46J_P|C%*QVusSWu}*=lG~+msT|dXix2>Zg`|&y2QTvQC|Wfv z%Ej5p-<0c#tr?5Jc`*A0roD#CxA}^9l^1Ci9z}*g!?UBuaGF`}1hWJ^ljk@;c#=ht zY5@S8V&Wqk`sbJAUpw0$9F8YzyD>`Rq+n+v*jI;H6qQ7oIqIytd!Sl;%9+oIA^p(6 z2A>3I5X9Dl7jzEy#m>W33axV%McwqZsM@XNySG>F(0OaM`H&!(59V=*UPXgE>dG*- z@|H};S#Jsp@YwrK6>~XMB64^K=i$alUmc7KT3ecb)NiUMX*NVWI9Jh|V)=I%eoY$N z2neY6&fi0{ntb1E2oHijg8!4~T)kW@qHKsuv=-w8Kj;jxrPjV~P3P|MtgG6cHkCHv zzwX|1Fp3Ya7-}GdMWdg=NC#>u_SVSH^CB8{0jwH?2hpI5XEKN>X}^>^zr1~#;15r! znlhxt6#BqNudpnUtOM7$TTo*n9n!La0vT4k!sO+(DRufR1@%?*_64(CyQz%bE@gdY zON!NaI9AwNSHiW(MG~t#9cMkJ+>#Lx4@;f_xU0%BsBVXQ;zwC@`uN$73g}(CvikRz zWpfp2*sh^#Y*hi5>{ZHX2@o*ee!l+6tH;lFf_)AdSBL|aIwGJvq2$RQx51Z%YG-%r z`P$RAtc+Q0c_argFI6POvqxA4)fhJV$Zf-x`cs?C)Q1+FaEQk8U z?YqI7{UoQ?jB;GeFZaiUQ1GIh*j|BfaXP86J&g@-{3)j!=haJHDwj+N1X@x}?#{JW zBqGH8k4KCBB&XbXj%noGK))0CwmQECJD?tbv9bu{LigUSD)SC$B%=#2B`9Zt95Cf; zTZuBe)G5=LJGiw%xLpM#{E`9Y#tx?7l<;|#PTZ|gayHxdnk%=Poz`9QH-!+d>Z$6N z@7b4)!w2WPiky63)ra4_d=q!o@5;ukE+lDjI{kMmz^LfNbz0r`g>WzOIXQcRorOx@ z)yUrqyXn?F`bB9mD_es33V}~r=DK}m<5yXj97XvnF@>60-mC2XIx_k~D1JIQv(b1k zs2Y@Tb!877h^qJ>+2+Hb$R1!sNBW>xSCPBT^SS&P`D- z^y4L3Oe9oz^2Hqr;suV;Qqu;h?a-=j9MpaUBbl#V=2R}S%5fD5-MkqN2IuoG)~u*7 zsFMgZ^B1;lPs1WYMp!pke)Qq_v*UxU{9b2iasB++EB_rCkR{?YNrosFdz=Rf}5 z_F1;}?31Gp^KL*ER+LcgMYp}Y(ry{ok&~nh?i?sMz6My#(=tFNL#=zgbUGMC`Ei&< zeV)woXQxkAcH6z9+r|0!df)%uIN!G z`s5?(1QU0C+AaH-b}DYS?{-=$91PO4sBhjtV6xS0EwE!MT z$gZBdruO{Y>ks?o1N!O;W9^ zIyBk9H_5fG=@yOTb7!lMF!Yn%zFdfVXt(nA3iZ~weA+p9n@ z1b)@j_Nq<{Szjl&y{aRF&MPOkSM@TH-99^~Za3BAXFIc>>yTa+p1~JnB2qjP;ydD{tCa@f}Ns#`47a=5G<4fWg9 za`go&7(4FfmB?BLc_b^)423}3oO-skyS|FM0#J<}QPDW3yIz42_GZT!mDDG_UG}s6 zBTUqUx3gi~Ag96Dl-^kZ>|0{}I4^LUdbeE>Y(qo?3wWn#ilr^+E8r2E=d=(L z?zp}H;J}k0swR-| z2&GU@MI=JQH;jg9cHTISkB+;YR%>(i3wMJd%zDRm$0dt6z)1t)QCvjil{DbnQiz5l zgh(YZ`!wELa(#%?wx1T;X|7&MH7~pxG&$bGogplvbRBv;uGi!puBOFIbsA;+POnkY zcYCEibhq$2Uz&<8+>(oe#RG{AGP6~7qOj%5ZXu$w!#GJZ1-4JdLjxv_*HXH32e5p6 zco@HNW0c&(2VK>X?G+weH*~izIUFu{LBPQ6ht{gAf-oE2S@z~ZE$i;SC^f;xrHq0@ z_I#)$nCID%YwmP;X@^(s?x!kvbN9|A-QkqW6*{DebyZ+`;}WgGizFY9;Fm;wk4{$= zP02&!I2+jA=cBkd9v?J&>2R@#hX+}16aSn&@x?3}L}4D~i-Qmse=O>=tcwJZ1PwqP z0FcB0Jup$k3&e*M5il=K$`7vJh6WHMI`GcnkzsfeA%QyT6=`-}@iLZ|?u_QEG(gBi z%*+!gpZ$`1a(3A$a76=RDy4l?ijUA#vnbl(txMXE)U|x{T&tq*da}-|)nWrJ8pr*9 zBOir5k~DS`iIAYtK)X(Ue~9@{?1i{{pc=$!yP%9BJs-F84^-z)r@g%FY$%uw&`;N% zKihcrbX9$vp3z2?BG~mtsM`%TLp#f~6Z(;Cgd+X};w=;?tx%oYcRqU9r1&qbIR&tG zqG;7z>u@#For@D<`5w~58$b=C6f{d63kPjD%^c{t87Riglj?%U$k}Wkg=cG(ynhd3WXAx6zqlZjnL<&j^E^&L@8lb`f-Ri*hN-oFwT>u<;jnfCn z_wf13hT;gtj#UNQ1zkBn+Bi))=H{Nea|}@T9EALCGi+-bBArv4q-?u*DYZ`epY&ja z3G0ssR(-r&MJ?(`1pl%Mqy=Rr6SjWprW%UX4maD?YfyYbE1b) zg8UZA+jS^|htTQ0cDWV5&?g;5jU=UoZ_3iwC*HEpw~^EeEw`$CyIq~ep%Vw^t;r_5 zhbSymyG4l*IXYS#p^wtrnz0$S({Rv5CIiD{N0*!?^=$ony9$@%?&v%x+s1yQYkE{Z zih8(+L>~cE#c`I7kB;fSGLxPw08>gwc~r%DPbySMMHocH!A?tvKRAfh?#>3x*RCH8qcT63~a|Gxt(=)`FW$74>d@3OB`KzfA*#7M|Wivy{otJiY#t9uf5Ls{1%xzawbMhqdYo)2^ zu$f#{H#_IbCq8gC=Vn0L-HVGKQqnFrLH^+{KaG+o3yU=S^e^i~#NX6upJzv%@a#x& z{=S=wxUuwbG=i<{BKyfbDvdulWf!1=2(X zr=ZieeL!V+xHr@I(=fcIR%(4nn`HI&!9a$5UTKS>`~tF3K-I4U5P;bik*cQH{+!#HNQGc|AE*b(#pK zML9e3W=6Pji>#SoF)DiO8AuHyx;9GB9PP+dvOP5s6mYuQq$6KtERvm^Pw)7-F{ds= z{`2T4&QWUCruxb+jdqjI2sPu>&YSGY63mQvq9x!W?a^_1XA<-h-B4jhaqMC`;oIm( zr;AKm){ip|9Fc^kOG8Em7K?fM38*h)j53IAyS1|;Tm%p$Dp*}!ZY?j{8LpijL8LNS zxYd7w#z=V+5^ALIv2IyKkz1PA<_oe)~I(L(lYJ z_8A78zdr%Er^49%r6Kl-p)CIDgo&RENH@f#w{8}Rrsl$`Sri{Bj4(4Z=P9Af<_dVI z@)wvSp6%j76uv!xfT%0LF|m?DUpj$-4(j1J|LS#87%UQ@3Lrl^%Mb<^r&?VjN21PH zbbGHR%AeCbfbHvo??Hcm){jTc&N27Tk<*ElS}hb^!A0aLo5Xe5NNvr zvCk&TJM&R!VyUiIlA5nt*buw;drHU=?k2QAGEX+6k!{+XbS?peQ zOYZ0Fb{4%DsjiAg>_*TWd>0iC9DH2vnxt7jI+Z_Xx6`~pQ6aaFel)mNAK&e%uDUn- z-C>Mw+O6BO-yMc;@LQ)fyVJ&(*6dCP&zA1Y?kuUUTE0EIv#h$RvoiZ38dTJcoBa@P zR3s+Meuy3_Qw(N5M5mR>0<#+!=PlJ(o816xW>0x`0}y$;!?PQJ#P0LXZrqkP?mn2E zeYqV)+5RkFG0X&$UZcX;>>6h%ZES;Pw13>1U6))Z(2X(6X17h!(nmUHiI4>1;k+t_ z;97ZA69Vr-k;V2mC6=L3|EZQ#CSs&5bWdtgrazijOROt*3cf})hiYa<*@ikvA=tr= zK$^DzD5|uPrPIXQx>LUABs$Mo4%^vHCW&7%w<~psd6|Cb1Ozg_9&J5)vhh^5SF0y> zfBH5u&~3W%3WS29*ax`c+g|dRLyu*=R8M1b>#^RomLvHk9eI&?O$H3Br2K>om|{4( zNH>Qi2MZUT$E&;- zs*Lh$N&DH%ZiUS9(jy|JBscqMvmThQ`*#SLlft zm;8k6GWyw$t2dp_qkLg<+ld(8Fbl~W+6$Yu{LaK>(q_IqCTSj?Cdo@ZJNm;+%1lVl z#ms}vaRT3gd=l{cla7H)FBfh6FyQ+L!8kiE<%&`@i6tV*pj=YwKHjt*GKfbzq;7SV zQW+HKu{176S*G-Gld4jale%G5DG5*kHfBF503&6k*ngwR)1qCgu9Ul05`n}x|Gco& zO$tlNLX|2@xhMv1iLd{ERa#2$a?{#U4qBzS)ZAMyF7^Mh_a^Xh9980Q>9BS9b}r{` z$%*YG9*st_WT_K}jHIzNwl2?%eB>H>W=fj2XS&DTJ(d+hLUuXApIr#|vD^>{_p;n1 z*#H3&2<&c_^IHPDz_QDIE$qU=-~N8@RaJL&Pmd%k4(xs(^6xh@?ykGud-dL{cSwEI zi!KGE#;@!_YQZ9x!g&n=r~V+(rKG{0S$HX#BzgB+Fb$*}+$NOsvh_(TxHCP4;iWF+ zw_BrQaK&vxPBu0q6mizJi)*!w;#$oqSF(5mCts4?!xYQ&WeJDCtCIW_r;Jd455P!S58) zP!`Op1<@9$WoRW(r|5aA>~MpV_V!-IqG{lzhj)z{^Nf7)7C)yOnzewo6WC&yx_On0u{ubwU?O`UKLEEXxHYDjxSPXgZrfW#%`JvVo%=xKGc)TmU7NyK|@4o#C$ zr_R3NJvVm_)_XaTgid4Kb!$(=4@3Q)dP7Rb;C0=%JQwODf%e>dMm~vBdpqO}_WXUI2&6C$C3Rj%3vo0sg6H$~ z0cq#vPBi3WbVLHAG%U@odh3veb?B+L3rX0tv!n-=)lK9Q zc$(CDrTTcE1HKX-a_5U>v!GmaQi`$3NZ-|vcfG5IB3=h(k{E`>H=dK~7ZS^Mj?>U6Do<4p0bOSln24iTupa~u~5Yn;Qp(TSl8_6m0b6>FChPv%S zdkxUud2V}6vrYvXgYQ(ZrR9yV5n7z~TAZJs#}?=3=O>omB8;uMk&xE+wi4nsX4^$< z%(jc!U}J2et6*tb;3I4)q1n~Y>`j}bW?Sax=OeaVf~LjqnPBtFn|%v3zNJ%Yyh*F* zIA*P)uXxOD(CmeBvn^UhcgM_s+rcp}XGvt}YKLy_Z;(d6&Z6M|MH&AL^YA}u1+cb@ z5Ujx7LI|SEs{v;SL3DXD|9x!}A+K(j=-CV~x0;Yv*dExX#x_FQ8W0rQ3F+ufkHvfX z`qhPE|4eTG;J)PK@sYtpW7^=}@$P+tyGO@I%CqA=PVr=l4j$|7ov5VadzvBOuVrg6 zhzP_u?2g4^O@#2&aSepTU@YAiz*t&fw3e+ALYf+2xD5^DO{v#j(fRX?+R^1`mp=IT zm+w7!X=HtV{?pHX@e`MS=mnRo>Uhyh-g@hw|K^3C`2IU?e)GNq|GfE*ZR>_!{;LgN z?|8=CJDJh%d*$rvhJX3UFE)KYdgrTNHZ%UV?ECl4f4dTUr1h_U_K%Oe z<>>Q1@XsF}c*&O!KhS#k{#U*I#ScGF*8lnH-LL=k4a&2wdc)Wkzx2w#Jm*t?IluEc z|MlS)J+o=x>%absb9+1g>5-iit4}G${`XrydFQSz2j17yzvF$cDqPjS>za4n)Lqmc z`qm2{dvtvAJLkP%_SM>Wu=A0*^l4$qS)bQ-uvdTjalVxOryLp{iS%mKb@ZK zJ3er7_L|XahH{hh(QB?5F(wWVPam8=aWWr|&(1DPYuYZ{nDa0$X*Q=FyTKJ1W8JVj zZSI?;cj&dx|IT+#eEq>&u3Eq0_!V`1i*yy7NoV`iKAeuP0vAHgwy+o%^n#xBld%zq$1* zsrSF&&#&7ZJN3#n#piVW)h|9?e$8;xK|Gf7#x4!Kkd*1%j%J1%*o~Jht9)9A)Yd$k{;?_u{>5Kn) z?Z3bN8#_L}?K2Bcm|JJ&A3oZ0;+(Jj;BTMyhL7yO;R!`@9a4C?e9O-_|^xr z-@V~qpYij_H{Lh6`~U90_G4ES{_p*tJ8=J>z4;Zt{pUN26R`{5_uk0RYsYSX_B;Qv z?Ke;Re&dGA*K;)UR7z|4S@KgjhzP;&pEghQtRduXhI4RQH4y?d0I?0|VH0dBSqpf# z4n6=Ko7xHKhWN0dxbetCKmI(qZq+51H!VEy8S9dP|9fFueB;)2h5KJR{mn0I>y7;K z$2Z>l&Eyw9dP#Sx>uYp#R^Ri&uiW;Zv%fv?>j$d4esHWWmT&y(pC9|?zDUEr{ntA_ zckY(=NBiH^bnQzfXAV9>k6iqQ_O~a0KK87p&rW~&k%8yG^U#Z$et+`*!5@F<@t=ME zZ|`dFh`u=a#tZ-D2dz)s{gR7MXWy`DDtG@k|KcC6c-BnUs~$IZfBs`%%b)kX@`1Tm zyyg9`?OOfsu{-b4-VlA_-(EV}`lcVfu4U-;cRYU0jw6@+Dp~xG+4Il&$nV$ZfB)CR zADLXWCA9DYEu@^Q8pi(o@3-_k_@ckQ@<)e`p4a&38?>&wUb^M)$YU3`-0{)m zJ&)}HlBT`k!Q0eeZwE-~Q_*!>dj|VV_#p^r{EHaLs?b=A*y)+Y@p9gFTOa zX8O9-?|AsD-}}T5fB&|*$(MX$+uYl~{IlOb{pDY{^ucQjpM39M=C?llyvoTJI?wsh zcW?j61ONT)+n@jasriBY)&J+?PuC z^$Oi`_27v|KlPIfKmWPbtNJdxe{|>1FRkADWBZ=e zEwP!qnlBywZp$g{!w>g9o=xuledpjOK6}@lPk;W*GymhUYkFGVaohLvnOlErAN_9o z)p0_|UF7?{v61Rm=N|p#s;}Hj-|)0;efh7%c7Eq;zxeQnUVmWs(OvBH@y40^r-^-u}6FT=p-$-+1AUUw-pe`nkD-zk1t=TQ@3?U;B)Y|Llp+cBBTs z`SUw={O7MfRC(!d?s)Mtei47wxw(5E(}v!(_ScCUPXFR~&*0skpFEU3a?BaH;JF+B zDf+b^6`uRuA6|I!br-(quRr(1-rcjkFFWt6FTCfjfBx1(Upvs2PHWR2eD0mY&F_Ba z5C4-=Lddhu>v`YcL!Z9>@^q}}nvR3tE&ulmzWDZ!zj5+cFWB+Y6DQyP!3%%=k6$c2 zbnm@Z%gdfOaO73(4@ZCW@WbEx_xE1=rYGL>HxJyj@$=U__WAK^8lL~iPmKphW2sYj z&UGAl{D*)3+wS-s_NSir!{N3+yXV^b-*)HyZ`u8gzTFd--Sh1mUv}%~|7!NRzx7lEmK*1{u?-SycQe)GubMuS~y#K!*dtJ}pfARQxiqH7s;gff~${RQ|l6-B+{dH<-qe#g44AA9)mvFBcRD1ZAmFWR~Jm!Eh;{)691 zzU@TvQ+M49V<>#+>vQqjx}DelO&OSN`bg`Fqy<;;pxCc=q2s^3hethIjqq&`9sr_p~3p;5WPUM^jTT z|KxXyyEpvg*^htjYrCo+fA>RAH_k8Yf8?@j^sf!{zVg3`pM3H zyS}mep^pPcJzvV_XXn7?^E%Fa2>u1Cwewd zle-C7KTYm#BAW>z=MqAo%vyX7e0uvdX=_>oAIPT7oS7}b`a7y4!&75j`B-r`$n++O=O}6k^#f!z_K;~i#b0(j}`;s)cY{s zHTeE8Rych(Fr26FZpNKoeUKHnoe**fIsL{4vYnK*e57p8?U>h%oO$vp6jj zhSc5t>d1gPJgg4wg~j4WCjtvBB5Yy{AvhGkKLEWoxOt}=TFB|v_2d*;Lr%AzI^9Mt zCa2pPHj>kAjjPG&)_ecGfm}dN$5uaj(}}Nt;h}bNnscR4-JlLcn}*BvD;StH_VI~r zCZsXOf1g80qso83kr2{HCVCnPfN29EcQ?Xl8=DAeTt`l!FbS)-iI7H=I>zIZ2zxPJ zsR5w55h@ZQSAY(&!XaKkt*Ov}qmnDZ$e>ayT80|b!L9&pq^W@;X^vVT9dr^xw(^s1Z7UpQkd1uz2L=bf@ysFvs$ z#{khWY%VM}`~h}|=djVe{5fp+Mf^8N^rHMX_&{O#8_0PCSSys?nFIqOIf%|zxNDaP z6oHlRXm)0u%2v0`nv49+G+{HkmG9+68p)^6A>=dXFn&(-2z=ef^#BB?+E!r|Td!P1 zCVE5xc(EG$t5oDMT@8y$PBj2AgEB2x#&YZmEQjG#1eP7*D*)ez$VAUt0`S+4u+vNk z$Z-v@I<15>v=P#X+5xxkd1`2t=bF}@Lc#f4?bXPVISIX(W@1sQWkw~ zhhtvG-5y zK;%6IrQuyWWvUf2%l?0$C`Q+KPXp;_#gK)QGsEW+5?lTA>MfULp9AP`nPt;}>kt?O z&U! zuL~RfN!~te)M@@34oaK115{v$mp_LP@(TVO4%Bb(@_<0E<$aw`2>EaR`~pJA$9P?! z8xQc`7ZO5l=j{M`F7UZu3@0rAeF-7t`9NI>A(s+DcJuO=5kl_dzb_|*{2l+T5JEoA z=h#6Ac@MngwCW0821vwK{u@Za%iv5Rgj^}L53~$$68^RmLVm}~1IT@k|GtV4@)%5l z5OOu_1s~@%gphmq+;=;(8%UX0w_Svg zerOm^4?=eHHSZ^c{1YED(Blr?<^Ul?;bRztvGM0{3Vn~m=e2~8XYzJ{`T7su&K_7h z*jPfy^@NaV-p?)Z z_b4Ic5ncvJ{zv(5I9pozZ&2ilHun=ke!%OF6GC3f=K@OIPw?`Su$O=+u=a!yz)|>{ z26*P{e1H)0c|Z=X9DXw|lO}}h;lDG$!tlO8Is5_sd+To+2w6ALa}6qjci`uC{5*${ z`!`clx+N-77trgRD<}3=j#*Wp~ zqhnL)jNH?JT(+P&T28ZZ71vBpr8A?cL^?Y%1Qj;&CEqC;j7v4w&)+y-EILi?B3==@Mn>xY)wr)P%7lf%I^g0oP-Z*cVO zUMgLAsdhC!kV%3h9BC&q9hPoZ;h0@HMJwgq~TEGy>U3SqeuXMJHH33R|^bgrB={V2zw0D6+ zjrAi8iwQ*t0dBqlcp2b2I|ym$B%}d&72r`oN?64iPrMe}>R!5>Pe|+UPoF-00e{^_ zh_Y!lm}-EZF((!!bFRHW?YyNbaq(>2oP*3u8iZ^)K}$*wyavE`p;9y*Q#oo@(Oztx z<`k_`DT!zq70k5+cxJ0nA0TyUl}dYFbLgCDEvS$$vrx@D`U%}xXfM!Nty*#-d5adP z;pkck-Jr|5q2fW&4)H$qJhjz!#oadet*|U)D&Js$WU**!tRD-&rN3qrRONaeP|Mw3 z{{I@-3OrvHgz-9y!Wl2a`jtXsvxz8*ORh(TR7D&kypsD4NV&9i!PnxbKp$ywnqZ+5 zW~o|cD+qrP-}ZZ}R*zC)8+Ngrwe{Pms&w}B^_O#ODiB&xvm8~a8YODm5lCZFp@nuu z5wrs#)VdQ(ASQ1iTCob?{Kr9(!Z`}8R<;M;bCBR3iir}&qTL#cnJnc!+emJt$%4fQFqW1bK}iq3 zK*pGzc<4LTa+&4PgLrr)s#%7j<;*Hex>$kOka-7(vE5b-N(;6!uRBF3utT$zay4JP zN|~!d{yy*^3$O`NKp=M}-mkO5G`Q{huzWcih-g!D{&e@L1Kr(AAa-&DBJ^>hr6>T{ z(t{c*#sCv2mocl)ErqUc_#eKM_O?1s(Q4bnM5TVUxl&}$Y$$?;=}t>iF77A z63@huDF&(t#9S8a&f#muztG{036-Kc^Cb5*AWN^Sqj@b~M5%fG;gQkoaC~?yksX_2 z8U?q{?b0Bd!Lu5rP8I~**S1HARuRzIgV4xk<Joa~r#Gfp5@aGeMKfkqu-lloW3B zgqS(aqE2y+n${e}BMdf6B8Ki_uACM&h0(%vqo9QhJ_IQ|L~{|)#}tqotyUD;@ysv_dwd<3u&`C>#i?R+-i8%t!eFSTH z%Z#KWgw=>BE?;l>hC>- z_`#qM&ecHsPPwAGjYBC0$7&d`;{XEWdvIWIK*bNim(}AAfiK#B79q$-B#P!I zByh)aADSoJ*Gxc53zVQ8!wTlLLSezh_;&nn1eOpO8YtErwXGAu0+6{`;ROQJh&KTn z1Gk&dL=ES(*6T(`{;82%$dpfQa0?*orRHf)Xsy8BRJJ=sdIHx<_cf62P-3#lgL3Rq z?SW-m#d=?{Dx?{R#_s~EkPmYP3fmSGV;B}!>0#=RiaAfM*=lL0LLod-#nNpW!Qj?A z6|+JOo?(_Fu?5)>fb;Rvohf6P%ye3rw{!<$4(f(7YIX%E33ksINKmFrgu`Gt=X7Jv zM;zF?AZ&AirDn~-F%K&uW~&|`VNr%{g~CDkI` zYgezjYgcbOpCAhNTn)tL#i)5nV?;+dD5{EMRVm_S{tvKE9^fIe?pVDXWNlnh_}IZw zY-3cbRHAvUq~|OenWs4yV_V>nW-a*7<~MUO<)z_b%KlJv+7`y;N_|Ra^BU>#$}w$K z*zsIxW*aK?An;97@+GPPYB?Q*oU*r+Ze<`H{?gQb{RpPS999e zoVg)L3V6ujObtS!=yg_~lN4_(+l;DghkKiBnK~K}h3%YBD2k(5bJS6l?a_SIcFZ!I zNlpX`cNL=W6%lp1?4nl6ouxCrqX$nZyL9_sg3|5 zrP@4PJp0RI9tL~dRg7EOd=~>lh*ZFbj7d(8Y6i{UcC0F6Xtb=^4#f*3pb5S~M$APg z;qFYn2$Au$Twc|3`Q=stFT?)+UCS#TzC6;BxX24>G~gzIT4mjac+)oUzd{KJ$+g^J zFWsm=)r4qdR>w0!d&+4GoDeeE#B*Y>E>qV;E|p}+h8PHt&BN0(cq8AGFIvE#dAhEi zfe9=zl1%T1o}dJ=mTO0-|%!4|owx{j7B&Vo|WYZlmgLGB#CnC@2bmnyNrv2l$&vOsEQg z5dS}bnW_NPJqf<7>&!Mo00|<_M;e#IU^S2d&OmiUtF{%z$d6HDPB%_Qi%z*DtASi- z_vw8FsK37UO5Fu@u#Kn%^-IP5RbDrY1!Ujghr~p!!Urpd`Ia#D=>`Gw(3ybx3C*$e zlOpKJteLL@!vvv5%9^E@FuaGYgNe>gg_h`?W-xuNP4iWYdi+)ZAFz)u-H1v!0Jo@B zL)`Mp*RgE+2ta|m6MPd~AuJex@qt+PE?GXPfpEdQEVbF#cpX_DMES9^wPFCYY@ZQq z*Vm=@4MetGS$AY=CY2rDo6St^PfP-3Uz?ekoJ@?f2hi#oR6Wg>AV;)E$kEpEKD4&I zuYo*^LuLcHh%hI1B@!{r2zcmo3kj=g$TkfZEmn+lNc70-Uiw)Gj%?-7-5Lhn2LyBj z8E11BFg{#@yjZB7L%M=*l}yzzXlbXSDFuy|O+#^tnxjBe37gs?){cl?0IA5mbTd*b zv@l1zBp{avy$`~@QTgE9BjR2O=_g!(E47Tf*BHJJq0ur(sEQ9{c$3_sq5h_}Gw$ap zU%Vh(AU1rd?v-CNYJ3Fq(kjkMK!jFt*Ug$V3pBzMBC>g60~&0(H-u}JD8?@cd%>)o9Jk0uAcR3iJdmnUyj%oOV5L8tk$hY?11VTp>yThn69L6}3Il%c$}zUNAD! z%W&7^!f2#q&Y4{m1I(yGESat|%q+-xAi7_#3aIzf7_TuOjR{o|NM$ACgBlfqR}9Gp z#>7)PyVY(cB!y5Oz!;V1iWK*i!uUYor|Pn}*s7vPSfl#j0LWk6qnsV-yordyjW$4= zzz_!C1o;F|8sZ0N65&8koqZq+(jO#gYg+2@rE5u#B#*W50OmkWHVjWqj?5%8+4#sv zDv@S3*Ll+@RCV9wWix0rp~B^Eh4JyJL)qc6#PI&?-l45ndAwnC0GgO1(Gt z$NIsitz)ei^z>AU8Ip&9#YPCD*TpDf7f=qUd5);b&4t8KB^r?J$=Bc1$rh~3wB|Z* zf$A5C>cSm>HRGGFchWJY(=(C*{~5T+xnN7^F*O+~FGV~qiH%0=o_{l?(@M-`xz{cs1Yf{|1Wqc(Z=7|=4QKb+ZK&)A4#U+6trH``i*G+u{)sh= z+J*X4G@$=#z(A)8cCw|iiR{FJh_0*~j;Ux2{Wwp7HX|0bt7T+2s+E$d6>K*P zrgzJ|fC$AU;`%5%*xeoT)kF4>WHfxCVcq2=njM; z@nBD{iXXx>q()xkf+2ok6CqrT2e7KL3?Rp56lE*VysZda0EW(@m6DbR{X{3=Lnqsq z&Yn&d0#z{}8me8Pv=GUeu&q1h^->9BYsHy|cih@pv9$74?YyTTmUtI1Fb2D7Q5%wH zM9S2*wK-}lnne}EbRc_~wm=KYj$GAI@|vMov``fT0N*U#SWt4h!+Vmh#^EpGzpl^E z&I#s2x~RVmujSo$;JcHZv$QYU@l#+ekg>4M&apCHO>M7_b3rk@YmPXF0_!VBp#`y zVCI3A0F@597B?1hvShzGok>kij%G)OTqh!^74B2qSjd6FusA5>Zfbpq8w)vbhY*E3 zQinQap44byrf3Kum@I6tzD8EVm*+bpt~!k_U-EJ5hb5y=Zmzg?Wt6A zB|Q)8w$>GT0=>#wj`P6{0#uD&tNp#Z2cdpjDlw8w2P=E$V-qUI!Rpe}c6f8}Gp#L! zToyPBfDEXy$>lYo+|1ZLT*cbdGy22%YbG8e+yLzOqSK-5zAN%XVj{R5jW1o*% z9QqTWmImwcV>&lk%U9v3)zIi%mr8aMzMlN&3OXdg zIne03MSlA{CWyhePY?sMG6;3`^R27^e7gl&VN(>0iw%v9gc58?T=R`d9qj7uiq)

<}ZU= zgye;fPXOL&-#L zfsK+-N>wD3YgZHwR#>*?Fp*)7Ne@po2-G45(x^|?wVPv3HiAYq4|ESAL%K0Bo|u3u zuS1C;?;47hP$}RMk>C~3Tet%Pe7pGWnau4CMbaxhe&YnqJEo6NC*cy9hE2u6R8Ipo-vc*S%Dey+9k${GPFN5Ks)l zCWAhAPIF8v3ONvM-7ziCF_bCS!9WEnT@+HOV(BL|N75MZ2Y!9P%Q)G;C!Fku#}@1I z$i6p7_ZQ#ZNV!^abYOd7S=!v!D@Th>VQBF#juvkF0xM=MN|_^Pg!wk@ROE}YKzJ*} z7*w7E!a!pzm)@*dDp1P~8mPIw`A-6Pyi655swso+WNx!{(8+!8{i<1QKX_}Ud2NA( zND81@=Ro%W*k&_qV=`O~25}wzVjzkA0V~MiiwX690Oqfdk(xZa8{-EqM7g25VqFt@ z&A2R+7np|IleWz27M(Ruf)Er^iifWerQo(ol)6v^Mw_3X@AA2wph|adGL_gnbr@3b z!GJ{z@?o}AzzDzm_Gmpl9vIbv{Pr*}@G&`PVB0*+MR26-xEl^V?mELv6Zy(WN1d3& z$`N{V7((yhav1MWMrV|qfDh*wEnk=k`%q@R;}oefVcw>fN}96QtQrMW(FK?}-UAp> zNn(~{Djs%&<~#qyq96`%8Di%Vq=rcfPdLg141o(0fb(l)ENP4@?_ycMoFX~uc&)yH~Ow^nqdZb3xKu+uF>Bt zgh)AR%0XqCdU^maJ6hA}v6_N19at==jGqPoYJ=6D55+-bJD16YvWSV=Zeleg-=B| z^}+c)N4u1SW-q|ar3mc^VqM9cSIQdrpc|Tzr#lthQI1w^M=6--K|+crr-s4um5B+kKToMHmuv4i2K$MDWA__L-+* zc>%ULh#+Xcwyvd@-_6kHSasgsRB|+)Nn}%*^tA8Vp=H+6=QM|U=gQK)O%RF^WXbi+ z03*tqaFM5lUqJ)*ta9%W?uJYxmZOxFc9+b(0DSoSm@=fL3Zn2H}RD=qGB z;cZ{vE)_oznXqM6t*@^SUi3wsd`0DW6!yAW@V^cbGeQXw+(+|}37tqu@BLo^%`%cB zZT|0Nu^o+Mt4lydN`N`tp`JY~s-lGlDGT=IFCfJ+@Gfc}swe1+0Jo5587Q#Gx6GnC zV!mbYC{Kin_(G$N1HkAQ_)Cp-_3Y~Ei$G{e2>1NuS1Jr+d%L@L*Gj%UoTu(l zZ63C$MyO_-x(|w6#1wRdI(aq{d{alAjc9lE^4HbdZ-o4h)m5Z5kQ*iC*EOk`sj>Ov z`gAH*Jg_h{U)pyhagb(uZycPq=2DaML*0Y@yL*ox8kwF;f((4_XfiV%AIhetrZPUh zW%Zoyl(d}3wlonq+JP-uBW7IEyjW@+V?-#N4Q$QKIanFFTr=>U{!(x&5G)1j&V&OI zMPz7^C?eq&Zyg?A%9`h2kvx@jXMCb7$Epj$ukiC`TIw3-7{GOJdeqR0t`(EK(* z0jH5#TqowjVMwQ&^%fDKKBzJrFM=bz z?%2qgfme^$mWY{{h3I43h02aize~#9#7r>)lK%FA?(QCb$+lgz8BwY13 zb8HV#qLL2RKjH z-gIB)QLljw1tKlPExIQZ}R*}s4Cn|9eOI!qSM+2_da7mG;;tE7sM!v6C?dwG@ynp_L^jZNB2YZoSvUGtx zDPWbTWX99V4!C+KgT*rhT7+Z(v~U$~Vk^oTz3M<;FZ9VIi4ck#fx#pG?CE3aYhV&G zUhRQVc&&~Ak1&>1$YVF;M^=cdj`q@dYFGLuE{Xml@lV9cbFnIk+!pD@XW##`nr zZB{e1-4e&n@3N378jN032;WM5*I&8!n<;;gKTV zh4_YKUp!v3JinDwqzl6+l88mfI~OELG6R$>KH-`Hr4tPjUs2_RZdbLEej8H@1Z)k0 zq=+qGfaNNi23ULm1U=`Yjp@r{gp(73&Gb~@DQ-&&u&y(PUN!^8IXK5 zETU}3J3(i^h_dsZiiXelk_jkm zZK4gJ9-ybKLkwMXl$Ng^84P$riGgx9#eM71M#23BOMsJ=uXZTS!%@3OtQaUyEs9Ng za*~&@PpedXQ(X$s>P^-oH(r*#Goe|0&e#l+9?u;rNTY1qqYX5DV$zC$ftL zZQv-bx-bimO%x>Y)MRUNa;48xw{fP&DSw^oaX6bvV2{>k{T+~bpd-2~*pov1|CtSCojMEZ$W3YwShYCUUwea=rjI^r)Su2DMqiV447)DBz}Bljaque2^5^w<&o2qG_O<^oT6zckut)E3t>tGGY08%VwAkI&URm9 z2LEO;n5v1-z=e-2E6fThfy|nUzk5*#^pfJY0)aHLC$qDrHLqC(T7X{?{f0lsszMB- zY{fE9>Rvuu_=||hSWyuh%Ue%X>ClaQsalYUf^Y3?Tu!MRdk`o?4eBf6!oib>n7*YR zt%4&UKtu5$c>bDt;V94bdCRQU%Vj-Z1nFSo$dDJgO@s~P@8!TgZEo-asI_KfC=1!{ z0~H_-y36hhzC)B3+zkw#ci>Cl36U0{YzxGu-~kYMxkcL*`EsRpWo3mNdh@)A`0!YA zGLaom#8Z>W$x)nyRM97<^>%log15F-V0dyZ7655WO-F~OQu`Auq9UIZ@b_Y|nqoZ| zJM!{6^|G1dL}F@29x7ZIi|UdsI=3?Cebgz$4c2)fS#EK(imy^FPk{9j z!PTT^TgQ-{6Lqkx0;#nniV532u~rmgk42)$c2J#Inx#{(w;>gnnZZ2wSbADteHbwVp0qYL~?9e_|#$L39o8T7H2E9ZqT z2@|@vtYRU^*dhoXIEk}mw$WhsDGa;7z}e^LgusCMNwmKTrpgTP%&e0xtx}OLLRf^Z zP%UIQv&wf6xsHGpR^5%p!tN~!&xOV33>-j+YLdmYmV6rmX?PVyI^!Vu36BWGxgk)f zr4uPQ06j6+dnf2%*gH4u2CFO$Q{nM41i=mM76_ZFz-h_5^GKJ;1MYxc>}vCuBPp73=T3i$*4hzeL-2~}%xm1D33sI`1(5IC4sWqUe3Qb)_r zcejvRw#o~AgWwuq>}(N2i77!we0SYzI9VgpNI;tor||_*VXvhdv!&|ELasL?2#Yvp znZqvJX?Ue8rRtn+c!zWgf8al7U%}5=_zuzOgu5$9F|>GAK(}9*cdHo0%8#x~!;Y>y zxs{)2-aWiNy+qk*2RT=n+t=|bwH7e- zJjT@wo@Zd~1D(>(PVY+9Hw!h|l(c?ty-wKK+a6T>RHwqE`k`9P=Uy z2M-TtymI^%V#rNT;cEMU2hrxvx@glxd?qy_hV+{FOlFGbL4f93j%xX1)Nz(@!CkzR zaOdTvJSKZ-HwaEZ8C|h-*?<>3wVu#dnaGlwIV7$v&Wz zm_C9yXB@+{(W0D`A|-%jgR$6d6+cAuld!`NbD}K9KT5DE>8fgY7p@!Q%!`Yl0$NlL zl<-|0ZUc_9t~1*K8DS9p{;n?iHTWW$T_o;_YopVFfPC@3#Q6A;y~)Y!Gz7}Di?oo& z4A?UkdbhP6rKQrstZvAdB~05FNsc7!-fARV$@JYb8+ju?>fk#Bufi?ZE(rw~K3t?% z;y)`#smsIeEJXY;(Y(N^yId#XnGp6A-&2UbS9C=oDld(`d^Zpo zYLJPCoPZRss91xVZ$ADKu_PQ;Vr(DEwwR#G{x$rr(OwM=6@s3c|OLE7}n zFG%Inn>->#W92 zf%Pa4u+3c)sMpTw2|GGg+#{7u1hxT$hI7#T8SA3>06_0@8}0ZU^H;!TL;3Rq<%1#v zn|Opj2IVT$TJMS`xKeHhYgh;P(9h9~aLOAGqr8oEgbXR}BbyO^_NZD#%NLnz2|k(U zIyNBmk%&+$aYwiakDaI+h6!1vPPLvsefo4GMg)BrKHey(3n(Ax>aMw3Jb=c`0nRs%)=kj{jxI2h!AKA1(@pko+ ziFhg*9~sJ~;*%p&6Mj&Jwi^pM`MhZbRRcB3SUKcOY%Ju!s#@GGDkmr6d+mkWs%D>A zo;sA#4(*RG9L%KW>{9>1LHh_sT;$CNOyj-EcYnTK1BYB=At%TDXJOglFkCwvA0A6& zM^edy%q;ebf^JtdCtsx2PR0`Kw2gAbv9wBIr@dg8%sFFDP7~B))d?C{jY#LQ$eb7a{|1yK$Ks(2RB=eW%tO2ji`iPS`Vdf81rU21a8)zLoX zYW5Gtdr3&c+4S&OVq|6e3?Pj$?fia-tQ={4BboO98wd@f?E@IK1 zyHD#OiCuDXdL{#Hp9 z<+k($e!#$;-;gE6jjulK?6>%QC6>G@hqzE{7zKgs19r zYaB_BPmNBF0uZ(eM#@t=G@!vZCE_kOd_YVG@1>L*`bf6~PEgdtyo?0_n%BNM5rkdl&%&7<*4Q zn6(x)aIvFS#HLP!jbG@O(CW3sBJl)XWvhk`;r6n5T~;YP>yJMe(s8aNLu;0<6>@3} z&5{}mxu=DiBVFv(5X_MKBS3(@K3L5RIUink?ryt?mL^!l8y_#xv??2rdBXBM!mobw$^W9sa09cCJP3BwUwoA z^OknoLRmW*EhBxvZt++6eZx}SdYBvT4YpK$7m-(fUC|Myz53WjW>zL3NGPztu3F^H z07v@ivFYfFv5>pUXAkwU-H`PP zP#$$jzNa0cC*!FWJ|D4K?hheL)wn=4Y4v z?_5FFFLrVdVs89(NE&-WvUhN+=#$|A|WYweB23|EN?#Q9SL1 z(BP^NIGQ7Xu$C7>rdL{6eb?OR`00!gB5|@c{KcOTDR89z>9}QA!qUyjvY6OE`f;nc zC?fPQ%R~@y_w^?X!TSro|9@ggCB`#U()-_xAwsvg92Akx7d%a z>#tbEXjb+^-ngKTB#!N^Qfp`|KX~KeQPAqP3f2-eZ`dwodzJOB%QJfwF=roOL4`u| z6NZQExH8P<)fO>3;p0?=8cLc)qD@yQEhrgkJ6+18 zsq8Ijc5x^C+NYh+@W&yVvrTXX!2bv4zM`0$f#n*c7Fz$!*wmm7n)?muPKLW#fYDV=;z2h2F0ESdrJ((T zScmhaTS@pDR&^ODhwBG;5Kzf&ALs|SDfp-#s)n16v&BGcszoQjm&94w89);bPKY8e zYprMVwHhsE#f9tTuBoALrsQ$GqLn!~;NVnQJv|EMc+f>-At&GYt(~9+U1JG*@UAo% z%%HK5yIH#4jYT5V$eRV-nA@{`CbM^7JKV74BN&Fwp?kIuiwBT)9{vmcpX)k?CMT1b zk)donHHw#}jfI?Sd0sP`@GuFDg`9lTSyQVvL_(m(8YyfmjIVuoYI1LKG&_>SD|ddk z%=yosr6#%*SuKtUJzNA!f_WC;Xk$(6>ZGl-SZ$@jRJ7MrE_?( z+tWr2`%-&jb)KiA7vooByE(wjgp$TS;bL6YP8Lkd(2Y52F>Jxir-A=SYy)54l~c_t z!l-71NBKg0OLFbz@1b>J+Kr=y{$$#wd7IrY&>6 zq=~+nM_rKpk$moan<_8gV%~Sc`aW;b0*pf|*}{5Q3M0?M%t{%$=4p=Ehev(fRo#0! z2}J9%Nx~J~khYIJm%hJJ8+TyW|y^M}$>HB8lOX^=Sp+&*OAGYRXp~LON)3)Ml0^ zoQSrOQ_7YGc}M?57z&CY3_$tU%9Ip&lI2A)Xu!0{o~sZT*OzHo3N5q>|Lb=WGR|cY zf8aZWJr6gRxZFFo3~JiYEbB^2vBo-E`C)Tq*kSV`&Z6T)#3>W!=gJ~^!jBo|dWXRHEZPS|53?3i6hRLtm z6o(lI3BI&@Pl1+A6+V1a8Qb#l-b-u(Vqs9wWeW$0TSLcK2S`v|(7}=cqSDvX+pXfq zJk0?ke)s>B4FK$6V25baut@$8IYQW);j#GSXksG4T`13)NKPiFYP~mBm32cmW#hAvH7{_LufRObu_TGl;p}4r z*+$qQqaZiS;!4_PiAKQEoZ7b1sSb8`$2w(;Fz)BMbQRKZj)+inV#s_R5CGgb0ZPyP;Y8sXDfWW7~EVw?l@oq4GB{Lbs^rK4~5(3h0@e! zm>iy3LyBid^Ci7v(}+8KN$P8JAFdn|w})ZktvuO}+rGfY1RISqAr@1aIFQLGWop~n z9943bd5i|*CAf_Q6~I^t@@L5UU$?XmtGx5D-g<-~Ol)AFSH%z57!JyaF)Zr%I$n9O1kY(gIc&y{FzoNne$oAFpY&WWNd{nK>Ss(77!i& ztO8+5@@5IlL**4!!rKGZ;>u;g5}>^Y=7{>=tBd;07{yYk@!SYTS56L0W)qWpr&7a- zY&wz2BqvAH*}ci}M0Prnnn_mefhIM8)IBS`S=k}Qv>0IgxI7V83zc`#4ij2Z(5`-FXgL9Lwd>*!Vg=^qd zHvOza8U4VAXg#>%{SqLBNdDM`^>p=70x@6(lAocj-i`Y!BkgK~Iyv(sF#17Vy;~k) z+loHVvc}%+Lv|QdG6zN{rk(lYg`Si7?#aT@^2m{q;}b`Q_Rk#E_Vy-FED6`;yY0yu zeQA!hx_r0BS@dA@P3CCtp+4KTEAs_sa%OMuf__{2;88u5o1Qy9v3KwQBYOc;asY>R zv~$iwcoO+iqd8+$DQwqy!&9krb}E$|O-}LzB=K>Kro$EDazs17ho$VL&I|95_E=gk z*$bVQ+$)t_)=mZe%$M#_h?%^k>@df?%GQkxWe>%Zne0enXa-%%cu_gf&PE2>H(<;m zNG6MSGb~Aqa10FTfrT4q#RR_(`@xHDm!{v?(Sy+6NSA2isNT9TD5pme-SaCV@JCo03Ez9z6aA}|53 zAP?N*0(ko~=|nc2mH~6g;@rEDw=R<_mnqpWnu<@49T=Ax5?)@0fmH+jySgz-!Fgj- zGwHVw zu#a!z!<6BJLG`)Jz@8hI#WV4tcv{|YnGE<5dZS!Zc(C$*MkIjs26ly9BRR>LweCIpY<^=j_#Wx@4*^9bORT)~^i26-NSFq3_E8xRI~ z5`mDVm0`@kv;l8)z8s)G7Du8tn9JB;ma&{?eAtBLKVaA@BX&KH^pK+7sN2}6{fnnd z6Wk+mIBOLhQq7Cpw3w@#qele%uBwLaEC_tDXo+eziy*Tpl^9RN(+TE{EK&vXQBkR@ z8#3j+&cW%Cp2TgAJ~3sca@wx`fj_YY1%x97O6WaHDxY-VbI0@E7uX@W(N0GW*}CSJiTYq}v^ z);D)TzpZ0-+S_4&a? zovvYC81DZ`Iba`L%nS3$bU|F{TsQsB*nl?775k@WHq`;};a|D0`EsVZqAnJnsw5_a zr{ok;I_NG?)(cW;B`p`chFr>p8;NH~W@2I1P)GCXzK)%ViO5oNEZ08x%trWHp>ouF z180*Oc=!JqQ;}u6c;l)p%fWl)qy_s3(M<&;^p(1~;#|2&4QSYfhdavob%4(oYvPR8 zUp}S;`dRqi_!rS(TXF&Roue>73;HYZ55ndCul9!CS5wMyDIZO>H$X~fFa%n59D1U`_IejZ) zQ<0ZuG#jsSzEn43>bfWCb|H)SZ3aE*B=W?jvb zz}YlkwWu;%HPE@zM!g3_mQ?Jb24U=WqU)uWGcC>0Pf*Mkw-XJq%cezxrW}IQ2kfsg zR3-CM0u@TQS%<9skQ`=elPR2KUzw#&1AaIM6e0Xf3%(S(kihFdsYB{V(EQ(|4qA-9G&aFG$e{f|j}fu-|UPh{!u zX{=|RB?lX5ARZ4f^w^@r8vap{1JIKS_&>y}-tY*XW(RauIS)djzpown8qH?U47UlgyfQ~)X8HR2BSjodT^0| zM3CVCF3B6nD&{ICdxEV(Mgv6DOFW3p>BhWH3)Cv=)WVU%)SF=-D<_|kFi3rsfK+F8 zL4YazR!Y>dA#Q+TQ=_0%s&)~)IrUiqnGjuI!K_+JrDz&dF)>-&F~_VZCv;6{x0G4S zEF-~%6m3-p;ssP~fO=amS4vbF%VegN>6r}F2UbRbnCjGaY5?DvUFfollIgf~!|DTi zXSQA@`r1WB5Dofp;z|JQx;K2dLt%)~+uhwK^L9085db&l{^@}qwh327E|_s0By0u{ z>u1BSKlWC*pob_owM>)~bbiqs(PtLx=s6cL?+N%0IS1-U@L{ozjN5W^)L};${#-d$ zfh$Mr?@ymTeF4vk*hYx*DS=hkxWKDP{2z;TRAu3eMEYYMXi%w0*X$w=mR*}sSPKqs4(}~GL ziJ{ct5Y=y+S)s-}%~>bqxO|fKH&|I{f4z!6lT}P%wkF-51*7F`V)7tN!7J-&LK_Ge zr8Da{5T8nVF6xfOJ!wM(j^}fM1HMD>S{$E*h;tLxV25{F9z8}Khgv1Cx5#X@RFXsw zZ@4Q*^k^8Oe~=@(J5Pb@nmFO+X^v-wu+3R#UbCoDptHI`3yP%`bW^ctp6VxRTs9>G z*V_3>=O8w+n3_!hjt|@1@%j*Mxl0;`egoaRAsEW;-o-qt!a$E-3i7isSi%$V-FYyZ zBncqv-s^dyybl%;wR_Hdhx~w#==+P+^`!7NUk*!V_5w0 z8UF6HkC$|Zs?lil%45_rXsN4WnMY~f$rg0$N<`m64zvYbkYG3@|1@t@_MvdCb=N~I zw3*D*L~=A0&oI{kHU`;9ypf{y@Y<2Y-uTRTCOaNyS($iI`O<4$qH38H8XclmNyl0n zMJ+J?xN&My?nJiGZ<*FCCo(dGE0df|XX2B?3C~QqcEQ<3tp)p#(Nz3kJj1dB@{%60 zYa%dpAa>{BY6)FYv|1^dT0t_aEC zf6cj78VfnUK=PWpH$e?#IMmN{tAzeJ$1)8)Z%1K;B86N`BBp#TR!&J{VU)CwXNqQ9 zBFHG;KE^Y7q||jjOCt-lUI=gof#O!+c{(}Z0g|VfmN1^L&5z@z?P{UWXjsjZP z*|4m}XF?k|G3KO6L&w!y9^2GRfP)bFCGi5Ruv!S^LBj{PE`^!DgMHT;Hm%~ zF~+*IS9Q&cWV9DgYlJ$E&`g*M;yv#yqR1#5C@SN;TfUGBlwt^u?`y6U20<@~2Q5g6 zH$8<|g8V9j9z5{wt9#%z`r<%0X{8bn-3#|-#vue+wqV#<7VJPb<|fPnQy^CKqFJJH z!ciZidzq*WF%2+fQC6$yS%E!laM*-LnLU;F8WgM9dzVmh?+YN7P2@rrD5R~gk&w1N zkM}GXcI~T8&4hHoE1~mw`647XJhGRhC1=CpUq0%J^I17{?FpluAbPEu#y zw2npQ^#WDm1!bsY<{?&B;I6l#M_`w_4C+WkkekFq@z4l~*BK_p@&eoY>pd=1y6T^w_G5Os17-FvD_jtFy0H?dy#?`HEUFY>^i!BA!&a?g63l5$*WP+t_!PvNtoX%&^jWS*n`WD%XsE5Tl##LFX(f%g z!sov=qICA}R{M9uMC-L$(haF;(EEX;!gO`PE+#Y6{CZUCA=cBY#(H|aK0+=!w<>7} z;q0D%phML1d5Dn(GlOUky5Uf3R?AZedG07Sb4iD^bOHSC_+a=2!{*^! zU>M*yqS!^VS}H(9Rhv36+wEGZBsvl!tD%gluh>>)M7OnEiQ0=QzwRH=j4FhSOCk(UV=yiD18M|M;)f_7Eg}BO$}(q zHQS+z?kGiSp&Gw^dOUGBJ3JmwVs`6hXv#aC8qaF<_j~SO8d3Q6PA@k`9fY~5_0HQ8 zrdNYe!W!amSAO{P!r}9~fHw5yJd_pmA&#Eu571p`vU+s z)6hyxm&rpH>m1N*$D&#p2?%bKUDhl|$sDwI@>hV2IrAhhUN&=J@>HOBO%^=p*se>5 z9MhgkXVyH;J=Mxo7{wB*)bO}CP|nl)kLDYcRv%qAo zIjtjQczB^IXBF$(g?AoIo|9^}4m^FU#v})N(xH|C)D0tQ0qgwS{~2)TVjj}2{+;!d zN~;Lu^%Xi{Pp5m)=w24+Dw#PFq7rVIv$R>w(83kM=hs#iDq&GkRtT@Il(l>wqnHFu zyqk^LLQakcB9-+_e?{Y1S{~9m&7xWf5x6psitcdJY^*4gRH2I5h(Z(S`uK!hu753m zfYt?|HUm}6Ic{;`S9#nsu5BsgTvLQb*EZ&p?3%arqiX^LcPkG$*wV@M$rC#mhOz-i_%i*!?Y#+bCCPanm_T1Z zUvppN3|Wn74rU}gy!UW)1CMNSaCJAP8^-|Xndu?9V7;osLpADERaeym8l$1j6(uis zSF&|%Shg%KX_J;@$+Q&WN;{MtT1wUtqG(YJ$qG>pue9FS2=5WG+Fi-^hUMvv@6V&M zjt8JIJ(kyIb;qkh9)D*3`Tu|Z`Df;za*W`ihPqRkT#(^T2FFT*$k=g{O~Y=|a1ood zoGdVB*k-)h49v(jw%xd6dcuitUfdHQcc0b-A+#1DElTG&+{{y)$4JbRC@k#%*{gfX zMDs{(e7u1lnyE-6LCSK0tDQNF>E@t@F(_)F`7Fefx;Z4Ji`p;AB$Kp~LW-?Tr)>_0 zt@yT5UAsUkCXJIITyI6D<*bKJWQLu3)VV?N96ezP+l`zOaDJf2HRz+nPz7+?)oUYw-v3$;m1H%wprBDm> zE!sjOPfFw>G~-@0!{D6M3eH8(2|7P#Tp=TbCwp0j%eP@W%}y(0p|wp1TWmnt`a#$< z%c7H9_JW=2{PN}b*F^Fz@I_tMLE#M&XQE&kk+^MV-FJ2}HAstE_Bt)sr)jwByAaCx z7KA)S!yqvwn!nK%t2FE{}L>q3co5@$Fz^qhYi+HF#810~VoVeS32K1MLso%*U?t zA*R81Oo;(ZA9hX}Ms~#N!WuIxb5m<`#v0tn8uOQp#icc4?zQ>Vwbe}d#`B^EeDrJ? z)9`b+M#&d%T)!??ER5QamXP{r-L>JKd*%81g%^tH2aQ2JN87a4x4HrQ8FUWThUs6XscuNn?;!_>oJ!fh znUoZW+&^hzh3mvN#_Gb<_3Qg*aKm+Cu!E+D<(h>23 z;P@9lC_cn%57EM@K$j_gr(L89y{WdtkAq{#B5^WOdqI!Spu+F8yVVK~5LVXE+e@+< zey2U8!+!zZWp2!^igr9-8!`snaPWm8Cx(ncM`WBNh&;T0amX0#*y0bQYIp8XB}NbvQH-qO2<41} zN)nDyno(35C*M7kYdk-SJhp%~N~!HIs#xuW7cfRG3%4(5wH!m65LSs`MJG68ylvYT zDjSj6;z4Ll6mJVaD5w?j)Z-j=+ZQTUv>WOe7?d?^FKLuL=lq&Q&B;^27(EF-_?NDYe+P|jD6t*qF(2ixl?g{ zS=V|UIkzKGxq2O#@Gl*S` z*(FG=tMiLja(sMcWomKFSe?5*H?uY*_-Dwtu{=AqHaBF<&Rw5dn*%&uUopU4G_97v z4hn^fhD>&C9+b%06U~^q=rm^Nz9RKBc`E=`WyHjb=fYDFhEX|rmNOrLMACJ3L#H99 zBNdtOwx`VkwbXnOuYpF~k-OUQ1W{|=mfQ3A(}}!{UX4dC9p%($JSEyS9)6hlr8w}R z+NUkUBNy}<#z02-mP?;_FtIDMW20E^d6qSl`h1{0Fx+EPo=0do-?LACraXCYT0IGw8*yRlNz=^uD-Pv z4mh?;6R$$+1~yz!`%TA;RueNy76L!n9BAlM9bh`#Tnhp(al>2`AzJIh0nhcfKolSS zc#6S+(DWUTLRIDRM6q|bD+Gv6FPBwCyh$ue(I!bghrYC`cm_6H$FpYwf5UB+kl=t| zr99~i^0WjU4Nv?sm8HTRk$`guwbo^xHi+mI& z%_jLyD)v2|fjDu(Jl&;FSr<_@*@pwI$Z`Bqj8eL7)9au=rQ@>fQ_^re`LbJT;d-t$1AM6o4b8Wt1abQe?8afGJe~tedOW$NQf>^7 zL4*yfXe*owu{eDOPWL0Kz97%0wZ}SUF<_nJBV0 z2?OprjgJkSr%4Ib7oy3XC zXd->O{IHT@3c)MeRP1vh3eEa07{( zkXd11mGC^PY zEKI%z5~q#p+kyLRKONAhLnoeTtzFY@s2S@R(z({6`8p8Gyu*|vHa_ORdUbAPPUPUV zH!c~2{2EvdAxaJKKQtVPCI3?ET;#MI%+recrlMTl zJdJX*T$fHJHH~Qi>y3G`gL4cNJ3!51v4)Xy9Co;I3(g-`%?(7<5cs2r`&hmso*zwHBFr&!82GMHdm{xKtrhden%i6-J5S*83 z(cv!Ij7t8Hw#~@Jt44fs>en^#dHbK=ox!aDb^3l6xjMa%|)I9mlW(oO>}n?}g#~&RT)*zX)G6 zvh2ehp%4}43mszT?q1YP%ubyu7ojS~;N*qL3k~||evl$}W}=_HZJ0gZrqg$sP9Z#% z@FB7JhkG0pdsRDZ@eHk{MP{?io>g)b#ZH+QQ57GSKzq>o=~< zFYQYtV1z=(7Zukv#k0vP}4lU${7e8_q`> zAR3{IRE#?Cb>^rA2*|xlQayz@-5Tl!SnRp&Y5cE7E9`~0{&51)Ozasd?*dO zooIjUIL&p0e0-QR#LM@GIx~DllI>hq*J8Rt*n3|Or2hK*xMaawiH-C?>OHvVi%5Av ztB&)}!^?_`WwPQYh375~TuKVAM{zZ=9c;VUF;3@=u>DTxi{!CY=xNZirrkuUa@ehs zKUB&K7^V}hg_EW4vR^)dxxM}Jl^-VMSu@h8Ob-(1gE+}+K^G@3PBiGJyB2hiF`BCJ9ww!(F|R#QN2`3JDOiEwA8ieCA?B;By@(yiipEg(qsuG83R(a zq8dn-ShP90VXVxpt{L1vkDw(~(`cI3RtFv{TugImhAd{llqz!CLE?y1d8wJ9w0xsA zQo}J5vjvYfPq7v%)b=o~;Dgl)P|s3v1Y#=j)s_ zoWMao`Y}V70BC9k9_>8ZX2K5-m8mr-r8=BVfr^?qS=I4j8>ryWW$4%$MMmZ5qQD4L zogdjfUmHKa)#|){d3ttt@#4(QH|AfDcPE?e&XRj|{@RK&>0X$*I$>S8@bb*^>$eu{ z`km&&nB%luA*k;IEr1cT)J**Nzntl2;X2Foo38rle38{@l0T08A@x%#)^5T^=B@SExA%LN~5I8zMHi~&?Nd@GMSJ?{Sa%WkAEXImW zkO%#<5a4`JLdf9msR9n0>iI*djlcRe8DDRq=H2|VgaXTqgDu?FP zg|%gID{HZxIpoql_6Gcu!Hb=Z=BuWW?vis^-}Pc9m=#Co|Dw&pTI){mnk1#?yvN->953L0ffL4Tjn zFQs^q3c;(&>GAx+)UrYC%;*8)T6N{^D{oto0CUb6vWjKtm=EVyygcE{$FSF>VpZ-D-s9SJ&6U9H^d$wFM*5mwj?l`zI&4TZv*_HIXmi=f{aI@Rh8; zG;kTX8@$Gm$@Hw%dFojjoMFmZHXJ;oXwW+vnTC7f$T)a{80$ECC)kPqs%xU7I zwfaTrJr#=go=pH7P^$eK(TD;{*Gw1(}f5O11amToB0iqs3~ zqUwu@n!eqJJ7zT|YVyRL03ivM>A4Br<1^63goLDXHJ2oXz z5_6NaTBhN6Wb#65C{{f(8EtMgR%ce`m)F)W&tIQ|Ffh*Bfz`n>>pD<&UMA)TdI_<5 zgYdX~4@ws9L7M#?#>a-AzZJILycIgFH(Tz;o1x!&(~9FaZ^duAR`BMXw)f^vu(3fu zBQF#Y#=g@(I;VSso(Rk4;?CfGAe{Nk0>_2sFxs~V_O;XT5z)&}i0XB0ZMZF*bIE*+zk ze#lPir78{ftf)qXb2q%&1Kz_l;PX3#L<*JVw9Eo40oQ)zs^Q<<%WB!n{#&77_OKx) zYAD1+r4pOljxky@>P7{YWY5`lJY&a<;Mhmr$kEH#xuJW@$j)iYTRf|HH6}Dgm|ua7 z`Cf6YQ3H_n8TFlJ7JJ8c^nS2R_5A^14-@4|#h1*D)@~(o=;RaKs=H}gTi7mUw4KC6 zdTZ05ku0zEYBsN2b993j0mv${j_r!=2Zd3w9I;}cYPU__ZW#B{ZG|iGIpM~JY1od}x#Jj~nK-_+ zYqT9R?nHc#8E)&Kjck_b%Lq7A2_lCUP;EC3J#$y)9g-i2NFuk{A(fFkTeh~G#PEVR z&TlzGP~ar)mJx7IeNc1!TS3erMb6=8Fk{-xpM;$QyX9+oHlC87-w0I}!VC=(yzf_UyvV)t9fY%WG3ejJD0lHSH#r@MIPvy7tD* z?XkJngPE}#;bd)TEL_}hCr0h7H=1)7mg+kYTmqJ~Gw87N?Ptd2WIGsnweynq`m(n( zIeX>y)a{!6#>B>*moB~$ygYv!upZ&{T3K3J%K&^pRBlMLLBF+0Z`VnlU)t?uoAkAn zW3(}z3gZ{5Oi#^RyRp2^-J$RSg(Ir2VIs}-AkPKVtuNnLxsu7EyBSWi^y7A!*}3T( zS9I`t8&1j#c>=l|O1~*fHt!X!Hly$;dtt1xH8VZ(onCt;>Z}D<7RM*7+uJV%?TfcY zw;X%pwfV@ueJz}9Z{HYMur8s+1ozq;U8*JF>Z9T@$FJO2Maq+?^7W;esq2~c>4}fr zSerr8(?}}syU`n{Q_|o8hfq~ZF~yO!)RA?flWa`1n`2bZ+39sSm0F#nbt0J@+jJxm zKP-~3cYGJ8U)L>{s*RjW*RM~l%`edciOf5!=cq9f;-8v<$zCrs1Y93FzqPXzc=ZClW8MWco+HM(wEI;WzE{ zBjL*2<@wiiD(aeab!p~Ww%7HZlU0&E0g)ir(PW%n-QE`Y>+YXln7T5zetmvguYc^LulVB#8PE`4aI7C@~zVQ{shcJn?Va%`l%SXbSF#DIr=E9sDv;|il4bm zb#yLN-FAi&mytuJ>*}=;T7Bcy$Pq9?+=Q zhsTC#1yhdksdbzzD=!(gmRu zo2R!@yb3ruyy~F^vr(S*L8Y^=z-qB1M9~Sg0Qow;QK>|2I)N5$hK3m>ZfyF-mb2SX zAS)GkuKC2UF%yKl;vyy#!@=V|Cas!M#cmjbH`Zq40vu|@^>o}qS-By5NgH8s%)2Jn zn%*&8+*rnSzjLz&7Kx12wWXD*D|7dSM!F1h4O(>LCP~96AId};G3MR3w#xbOeQBOh zyvg5?P{<{H3Jtko3_xktLTA*BqhUy?gJ*VHsJ{&Z+Owb%ZNkyWh!4sjm6MXFRKo5j zU`0tK)AYu^6a2K6T+1)iUCw=Q`lS;`m={Sh&rfzTe)iKjV8alTy|gSf$5V0IMDV^* z%F>OsD@*f>R}5&6#_HV4D|0LNg=$C}#SbpKfPOA}0MiaA^B9&%$JZmEUc>S>BJU}n z7mk)rWgbhXGJvnmLXP6^!%smz zTs8%HS{xArXnp=s;SQAz2X~c*ksCV|ETUPP2Arh86WyIJAkM9Y@?wTOf;cVUb#e(GZ&|u?{Q<5(g2ys1inw z6**=ib*Kuiz{G+!oi%Xyb)3(EkoHFhNQyd$=xO*s$7=5Hxx{A#wc%YtZTE045jRnC zCl<%~=i!O&BV|PQB}H^7N0J@)^T1cy)ODD2q|k^QD~N0-G7{7E0{CXYajw12C%(&v z4h34&p~KK@ISoVJu*zeHlj1F#_b?adKr&oXx-!Rc2qMo-0S6~0v2_4H@BDD$_50a7 z;1xkx#4X=_Aa3a)2LdoVovQlIolZ<9roH6v4~q>!KbSd+rsQw=C58Hio4_~W6_^({ zs)^!byaJ5%oMdnJ7>uzq?CqX&jP(pK)^naQ_5sG&S;l&fG1hnY?%lh6jPU(~ay3?zP`F znyzo+I@uvU{q!9_iHGQR6|;pXJ=Sq0#+t?AHftkCOS_mT8W%6 zh~XGuS2IM}*h&?IFou^?KQ=@fRWl6p@c20}x_EF{`n%7JB7~j{gXlwNS=WiNz)wuq zccjgVV;KyTTCCEr98*oyF#gmg>S~$0%kV=Gh(ZZ;mlb1DRc`(J>soN$S=pJKzK8=` z_sD^LI5ODrl320d2@#OplDE%6;-6Am@~W(28sb7Eqq1R0_|-Uc9DB=2tj$h{EoUfn z*owFHU3t}e&dYSOujwa&AGecCS-{lkOyP%S_Ng*v|BPgIt$n#+MB6LZG7~or9XC@& zDH&EeJ_bxTuw9EEH^F^V1lWKcCHA2VsZA&Xjr_PO`Gj(PVG)kD9sTI3ww(lfC0)xA z45wFHYE=bYt`xDv4o04BXj47!-G=OYkut-9NH;i9o51#VzSl&~5v7V}+#@j%3ohSp z92Urj*zEu6y7#P?)>P#BjJD-VZROhatz^^n_uU#M)9LFq`}sqITOACnC#%@RU0vPv zEydW!$bSLY`l#Az`&ENaZ1B#gnpnz$i=RKa!4u%E5}ZZdDv1?x*ECpHEK5t*2|qw- zZ+BdaC&rRE5o#Gz_cwhPJ{!Wd)aa(F{h35{VMSA>^}|m z&)*k+TW&d%g-T||ii+!Z;9ZSIMkLsba7!gWRS-r&D>B=(*DQ^5c@Ga{xjS^)PYm#oP1Gb=T4xZT+N$N`LJESfTTcXhUHSdRW@9o?3FAIRcO=LC2h}G zg?5dlA%y{0ng#eKh5cfo(`-6Su_yp&-`;GOC!@O1w?-0=tmP#+x= zu>Dl8&=!b~DEV{rF)ju0R^kPU{Zm{_^pE#4)<3QU#1Y$%i&4jqGDcC{GX)N97gv_G z<>AD!HsRs5(?$)&;Q=)IWEyjLF)>r7B|Iv`L|TB96Kkq6#_Zy%u}UL1O`iSi0&*wW z3?diz6>U3)85=u}=iwbWRws%Pi2ULtM6zinw1u_l;FKw!XUC4WLAo)Pu}nQVX5k@R ztysIpbNs?8H`&c^TTLrZ(+As+tJ(xX5OY^&V&#G+g_)5w=>#B6pmkOm%MXl?PShIo z1Cx^REYN{Mt-y~1&oQ3Ay0*3~?^dfIePeu-Gp-+t^g=mOEG`m3Sd=H~DztD!&K7t7 zcH@88H-GFuWCF-B1&M-z15Gh{88#5&?V9hlsZ6gyYB1Ah6MBjaH<#%RdSYU?0w+n*Xp|6;V$c#DA*TuqPSz&t z4f-MT+2IG>hYFokpcvwi|MP&05c1gFX;@9FVUuoBSFBO84)IxG2m8@-I~d%A6bHWd zwl=K@?!015Ejw|0>`t{4#=aRg#!>&{{Ex%a`dk^U|5ZWj9Jr+NDI<0v0gN4U%Ypx5 zT&`C5R*6cXtw{323xd8)=MUkDHvQbz=(<@H11S!*)Sp zzHf;*f1|6ma)c%d(o%COw^RGk8!O_p2;bqMb`(F*iMX%03ilPKAIW}50O2v%Gl@O9 zDX5w2^K*-9T|v!iJA3EWVy@E( zX)PIE@KrKCQOYqMmPjQ0{OY%G-lr=(GN~YiF1)oD-iQ%OttG0*HTt`x5vgJ!l~AKD znJ^{9uE_-@T~hQ$DGU70>7^m)h|=uEsTUNUg-6AMbq82DPe#PXZ*^s3-TuIhub6b4 zp?w{)e-zpGL0Dm1sx*}Li3X*1iW9u0wEmGADz^WC8!GV5OgNZW2B=`3$Bi zY#BmdkuEml-8gaDT+4&%r~GOWjda~1e*o6Jml072k%O^p2CwD(Aqk6b9hcx0*9oGM z{KL(Hxrxg7_*i|c!GGmwh%pi&qZB^c$Ptu+k2K?yW?ZHrI@*^}=k7~iW%-t)i}<$h zKzw@;x3uzH`Y&~Ljn~tKUo@Yz+h)g0cFf3jd`yS79i3TDX|adrm-#Y&aRk3;B}iVG z@(t6Y)qXPU@md))OTt<^Uo5~bflUWS0$zE+VaC+*{E(VA2{*_zS%RU(Ok8;Kpy^bw zvEf>->1iN1DdpD^w6#jx^xaC!j4apG5vOURbhEvi>}Cc4So!QQD z&1kK5K^~BRj`*p+XoQj)sx^`L;Gp(%>C@qn>b7g)Y6cUgmTo&_dX*vl_s;Y232!x` zz>q#5hMeABo&awop!K%n@oww|Ek4+MT?{roY=TvI#4z`@HD%k;aK{cWHOA{>hK%dP z&I)-&o?oU&TokJ>=1<6k_YQ=e8&1_uiHNq7M6MO9zX>tgSa(Jy+*pL$^6=!3^vB1cDD~@BvyOkuUz|kW-Qpr&Q=Sf}>pcZ($hLv$-$OwZS zC)((E*xg7DC30%2tc5^H-Wr(R>H%pY*ZO59jyGbp!a~1Hvlp%@XF+8xD2!-oLjg>w zn6l@1cyerHqCr2IaSx+meM~IDflw)Lx8Ux=^>}Wfo7l_Stg;g%uAW_ggGMB{AJ@S{#rfrzMXBHDM(!FXq zE}H479`#sl+l0UIGC5R5jV`w41)^dMWIOW%4u*n^Tbfbk*60Cq&D0wVB}~ zGJ_T=4^S6;FrAf&`2t0D`RXlkrxo5M{8?_>go8#n48p}6!G>oAL6|sERg|N#rNsxj0&z2FJ40MQcCgdN^mmOQ*>oZtkgyyAvSa!Q z@{5r*zb-B?g55WsyRkcLhWfe#zf9*I=BBbo%SA}{z89loc2lhEEvzbN9+vC1k+F8S za~C3yV#kL1A~2Yfsw9%t8Yx2-5~U2*(7p@FG`4E!e-sk#zveeFF)@KF!6uZb`_umv z=@hbAN&^zfU+p>_?_nR;tk3u2!{@2hn+unh7H_WO-1YkU?9#&2{GzgP_wAUTXEx2u zHbzagF(Y!!D^ry$3*o#Agz~dw(t{UYm3YT#R>`qKj4KUVPAc4w^S`;+m8OGV-@|kO z+k0{CbRd5fK)0ZJ@-Cz7Sr!Q+ zXV#Y9sJ1bUFBej>z49Y7tB`?Rq?L?TAA4#zhS8Ol4(>0GpQ+C2KBKkzn6wf=6n2}g zl#!#7Kb)pgci?H`@^na9y4c5|czr;VM%{Z5?5jwN_;>JRHwSPJGTqtKsU0)oH}%?d z-HPrCs$a$FPL$G6tT!RObfJ^R?42G*j#1+@z3x>lb9+kOsZ^Rp_tTSxqDt_}H8s01 zzgSYxMNM>N3VKLolENIWo}J+R7=2HnoGw_&LLd?I#Nf;~88L!i5-|5RMON(oBi?h-j+o1u$ONDe_n{9#aQmS`^JfWU} z?+Wf_Vts-9aHZwym`y`b*}^SJilTG3B&l#Bpyj32wJR%gtBQd1e7fhZED5P>Itl4n z(*@UF_5m?io#BU`Iw9?QQ|nJBL;&t`!kD)I4KrutgjZ7lvQlh$2DizI*JZIE-sdhi@$M{`y*17mjmOg zd@GS00%=7lfgr>xFs1er*WtI9i;>T8eVl^k*Z*aQOwATv#Fu6UKfoC3H2J0Exv^6S z>CE7Hur8tzCO60pOw=aF#VE%|!NM>n=#QJzC3zC8g1G@cf@bA%DOb5W5l0h7P|N~^ zpOZ_fAGC{3#0Zkc>A5ggl*dRW%U&rX3QOgGd1fBp4aBp?Dz-{P(UA>ErMfCFFa1^8 zGO2!PM7ke&)|d*zE@)B`{gR{<<&>x*B1wQ>B7dc-KwTtX+Eaq7EV}SLP?l$n%Q&_v z$U?!%h~-No+{f?2+*ca*o{vFVF=)@(zVoc911C@lU!=^NuiFnl3jz6_2MK z-*K8r5Ozr<+?I<(x^MI2uTnmYv&Yuv*SITLkuDt{^$kf}qNtHkJ06m*YJE-Y0emaJ z2N1(7Hd6db*(SmM9j95LBmCUlT|R!DE8CRJTd&RRL=&{}t4ACVX9qhVzEn1T{m*h< zM@W-{*A!i-W?*}Y4N1ZeH_I=KV6R=CnKNuB-b#W{Cv9WfHOX)#t}4TD(~N?h*eTem zv@y+d{mvb}-dyEOSP>Pn%*1I0(QfKRji!fY2TNI@Z6=O%Nuw_?3FHwYiIt^&aZHI- zTZQvMQ40v^a{j$BuN@o1*Z|5*50W8-i0~4pN`h37BKupBMr-v6Y)(vFp#$=0tzJ`G z7CD_!0UG1iTg?G7u)p%|^eI?gF(Et0{`&E5)51Qc&l~!8g2)adCyv3WC7!{1?dHDe zrPxCydhMn@_c{{?Z6{MkH!t74HXSjQf+$gj6Ns*tL6)Ieh+1)v&fuYXlb_Kqh*FyqW~z#%4h*{}KHY?S zskgz5RH2+k!Pl%pZ6+Sv*60!^nK&EI=_xaab*DfoD>n(7z-c4x_KbT(Kt|4Rr+;cv zm5D2FS|&+(3-M%KH7Al7q(n7y>w%e%G&oY-;XS~)w@cQ&?a?i7r z>iuTR@spt)r>T2MKUS~R#>vyYo=3VHPxI(^4I9zriHYX;)r(&6#`xro@!8IZH8!*1 z%q+z(H@7_QxBRh%sg?Pu+3BoTVYE7LwKrZ9 zPUh*B5J@p;s|HTLLi#`$>^AIcFmXp*NxO1mzm_2#D$f%6z<%~#I%dnUB3|o6EB3Ih zrWPkDgcjnV7a-pg%GIFA+YaoGr>!5I;dw+bESJdkNIsjR`PbkCS8;qx8Uecvc}G5i!!~kvQiH2=C8BaPDybQF$Pb3n008X^wm% z4=0b7vm(C;hpx!+0w1ng3v|4QE(BuaQr=Vf^l|J}Ei_tn+JmB`IQA+O1Bdx2>&ddb zTh4Bp^#Ls_B4p0@l;w)`-qxn+XZZoax zDTz?G8Owbz5ArJ(W3S5HFpems(9D*w0Yh+lIstysdKv5cf&95poG`^ad3um1z*}uN zIYu-tH;B%NBzUVNLcPK~`Y6N24Mmf(cJX+I4=V&6f`pedU7Gt`I=IR^aZ}x;(rLPr zy4WpWq}4XYWNRRCi;G z&bicW=Zt5@v9W|Z1y+MjWI4v7lk5c1ma&j-_{nO_>=@E|!~{P@T9@vl#3i%%(jm67@8Ck@KORWtQOa(eqSc2_L-W#3OR#T+sU*_Cd5tr4qBM3zgFLxnP$||$ zt~`VC)Wn~;l;BUyW~=u&jFPgzOQV_W-|4!ZqVHtxQ5L+1s@PRpy%lWlnm(*PTS|p1 z@#^uFy>|oujxyp+GxBF$@q@%^2Eo>FxNB4@i{h`TFdR;TEyuq!IG78T=DbUTgStg; z`hI|8=g!~mn7i1Pe5(`gVoNesFjOTqW8Ddn;P9H$N}1;LH^gd+gf7t|b*S{FcRFfn z()k?SpRF#F$dD%?kegjwoaKRvk<+h4i8*VY?kN|eg4CZx>I`ch1a-s~>eS0S?=yl| zkSSb)%F`{S&1nS_6L3c@H`hYt=w{;r?_Il(=m%dunD1ud&`Vu8w1*s~OH0FPIks#x=`m}ycFkhZ5 zcUE;?ZUd1uso2i8`a@$XRn^0D)oK}6{gB`)S-#|^sZJ8K%>>>kZO3?y=my5atqm{O z5w2);KAZF0J8qP+RE~ut_+i`8y{zjzR60xfkRPmfVkg3+>B9}ZS2H{(!DpE6AgCp} zF40vgMuA}9IsxYw$YDn*!_+2mL{&2iV;ym#Hc8HJ>+l6mg&ph#kpS;Bfx1WlYuQDbeIhk-M4dR< zh{cPvL>_W@V!csDtkZ&6IdDm?SKZcTC3GU%uIS^m5ojAmhcQ-X{J|TGJlG_3iZS*8WBt9j zD5B>KHfo&24}hMIoZB5IPAWJn_lSZTI!?46MnM?FrU%$38Dk$8u<^zr9l$=pSkF;h zLV;^3KJ{`BJC189a5qI?KV$tzPm0?rP9gX-eo%>%J&g6AhD+VvBaHPOeG$H&-adCi zbTbO$twTLf{M&c$-hEUQkN2a*M{oBb{1|(iF2r~^%@ugAwY%Pmf=-Csy^OJ^L~gv{ zxfhj3ReJS;kysQ=Af9B5-MxF4HAQB<8rzJqCR-SJnxAfD??r1)FxGz;xJENkEA}}4 zcoILdo*)SJ1Vdo2}5p^R9=>c&ZhiD`QLd9MI{cL;0^l;dDJR}aAXe%^#egTx(9@j13@^p2ZYf)gg(YtCu~Kg&G`h+GXnp3 zKf@MA&VoHp@{3|56P^)Y%nZYd81my97>zM@NdS1Ehp{W-8}8;mD8B#v?%lgDitoFW zeqrPrjD4Q5-=^Q+Wb8AHeUq`C-(sxi>x}ik4NiL-wufUlCbmoBtQl3zofeLV?3uX_ z)c`l)odt1nI&$rnQ@K912$!RKgTb9S0E3n&E65Sg^s)R|nw5#_tE_0a%G$@BX_+4Q zWW#N>O~2~e;6=#c6@eeTv1%>FO;69`tp4Km($~Eoa{umE{`;dh2LA91yZ_}s{*JMa z{Nne1>6!oSul&C+`Zs4z{P9!&_Q~J>$saoM`(yw5d(Qmg8*l!}zxZ!{`onMhwO<~8 z?)(4ltM%J&ph)h%s;K5PxeVj4&Em7SQ+BazH zx=4cprTB+*mf;Ww@*7Q;-x!}(MBZOI%h<&pEV6?{9%Sq@kP__Q+`ap6@Ak2`X=pk{ zL(?fSSb#cvAdfE9FaYEK#Bj}c-s(h=<0sy(fxTia$2P9+hE7y@#n^VEq+@!fCg7 zVcJ-ppMP!4m|vC1s&iz$b0`8~7wh$!K-ffW;sOx1Zw-L7hvxmn@$v{eiHbIf)iFM$ z7`ixI`&2oGjubHT35B6rIfll@YSXV(Uw^GS`x++2BV%Ku>TmKO%4=XeKXqjp7vI3C zhy8+}wo#72cfAmW-^r02en0XK>)##yr?l2*@n0LRoh!%x(E|Rb75*;{kCw4=8HG;G zEYAxJk8lj%2QUhUb;;C{M$heAhwfN9&c~uGf-Vk^jw%E_M3V3GcNzPcyDZDl#|r4u zS+Ralbj{Ds32c=x^x>eS$g1ZEuC&AS8g$3i86;Eg7V{{pe~WfxVX(+Zz2iEPdNDjq zj5cccSB9Tg#E396TU}XNFbs*9;hMoI>Cl-;{O<)G4ewisHxkS!(Yh0&o?RMtqS!EM z*4_=9b>l5sX6NIb*0957&NQqHe6eAosOvooBM&q7`5yKZv)y>B%ERjwfu;(eVf^o5 zM_6n(GyU3EX#UOEOw3Yxm1qaNq0~H9g-yC^!IckFd~7#KC3yFsA46XYRRqXm>##|g^a*UddnKf`pbM8D3^y|1f0v>?1!!^B$k?|Vz9qmsAR||Vb9d%MKoEY%k zLnYes?m@pV9rccIdFtD^)QSEb;qvsiajD~S<(&xQGX-3JRLJtZ2HAHaj^9oA?~u>M z@K(pHI0|BzTIKxyi(r01eG#vx+5B8HSpQ%&@mxeiC^y?rb*BxuYP#>>zS&*wP@YhqlvDRKqeo$CO}U z^~FY|YHT^-x@E4@tv}d-5u}v|j?zRy63X0YZ5k0NsAxzU&Ntr4Jg}-*n;U_z8bFou zf{rbdphZ?Y!qxQFMoWf1fKYxqsv7Uc*aCv`@jRrxA7Tq5|EhB-65mNGvADTj7XE?&f%gmC{Mz>j zV`NyyNszvW8G{A3?;*y>s*k_XM0?W;`Tj`(f$&M8-1YMX84k<77QP;Y)ITa7w5r9+ z#{HnkkM|F9?ddbU>|fozd-u=o-o5)6V?Wu$PO^oOCj|GrhcR}7z0Gjb_8G={aI5yC zoOAlw`+*AsKj#?hd;4xbbMOaj`aKV0{p4YVHW+H3dkV48R!;E7)ZYg@K7t>zsH-|h zj%V(wrYOWvutWg3jvB~msoHdX+w~P`V1+}E<|l_`W>AM7>p5nu7&Z@?qgGYtiCkVD zy&gMh=j0*qDk=#1y2YKQ@2DQn$8I~m9VlJ_XFz*bVuX<9##_Q^C00rxgP(>uQ!GY( znv95yeeM{-u?+L}=NWsQG4|gv#(thL_6eS{$Kn^K6MnuXgyb8HvF8|L-_02NG-K?0 z8Dm)E_&&zi-(;-kM;T*(i!lb<>ScoSHl62OhTW90zS)Nu`+h-AA7ZTUFO$%JyZ^+L zh`hpB-#P#QPcXejmn?UZ!ZW9|!(vRC!js z&x`jR@%|*heV6#-d1ODz*qh?-??mKR$qvh(|3UlyC6Mh2Tw)p9&A*O6egr>%LrqS; z2Y>G3$ER$cCm6N{;>VG8+q8rDi%9kb{QMn+(K_wt;a*j3;QY@J`Ef+Hum<@t{Mp2h zslrz9=XIRjb#ME_xHh#?8^J+>;kLUK1&O=Wpjp#Zq+7txi}?8nem+d|a3ouEw=N-M z5`g?Y0Zky?Mf_aA&p3Vt@$(({c>zBk(3<-MW9L3SJd6n@w%1j!FTS>Vb9HT@QLFLq z=^Lx~h9#?3tBv7%VfFGFuAjyChBJ0?a(sNWaoE!x^_mE{xST znobp-vTD`Dj9N}Y+L)YQSDRj7ZDD5nBrrypcwBvv{P}e6J@N)SByX_&c;n=K<&FO1 z?*k=EN&WAID_E8#jzngA4~F=k{tR;MU1Nx+yD~&%whzt@Pj_X9$ZQ{i8L+H<4y)dT z9wI@E({_;5?}+hU2p&ELQaIE=843+hET>t4?>m-?!Kff&urEMn0C*9M?ILQ()56K$ zoJiRpZm8Wy26w9Gh+0>G2-F}AiMGsIo)q!N$^H5rRxI~&^!?xY~0a%H2f zu+w(hGJ7$8(=okdvwOS?kI1UZ#r(HBPA83jOfR3hFIRy~>v#g&R3uT7JzIWBf@}q# zr)Qf4`hY+0Fi1Es*;aIQp`BPRmsj6_iEouk5&y)9RR!sv)#Px77~AD7dp*Z8^RZnTjPSpNb?1vW~z;8r9xV zWDSMP4Y8#{>40EezJ12E;n*WliY?ZUdCZoh0zsNQ5RHeji3_0>=|I_Yqua6~Xuy_h zi`7yw;L1oeK#SCo2_ExCl29nDG6z<}J;zq10i~W}SM#-?>`oFpz7_3;ity0-wrPc$ zc8)ry zRW1!$COk5CWZ|;DZrG*1h~Py4guXosf~REj6gHyCDxe03$);6M_KIijI?=^23X(we zuZ-h2&1R*JY#4qkyJRyDhy3r0U(p|ps;G1$~1ynhGAF*=Lt`SGBs!|48s5( z4*8)J83Q^-CccARhN5y|5@wVHDiL9+kp>+bA}ni%f!K(~tL@N>t5LiiRzou#y)f;K z#;Z}#f#j)j%CE-y=np#5k_2(MQ8lB~vIJS3kIx8DOkN8K{5ZkRS=q$0G`{1uHk;`r zxvZeb^jiu@uBM%4DEMltDY!6 zwZ4`2#fIJ&7%((cqJdGkrEHctEV{89lX9kG8iqg(gh-P(5wsSGsT`_9w;i`LYF-YC zNU&j5l6I&D)lw+UI8q~M4kH|jl}hW<_&ALRk7;eOf=~^u(3-TU4bxA|SjB=>qVa00 z9ae4yt|AbK4=q!w-Q@6|A0l)0K#xhmgEt<$Pm`IP@72w9m0-Y1f=x9dOTN^|4Ksa^ zqZf+K^+2xPNCKZ@vVal@d8QLhBk9p>h1;R0gq7$Wit=n;H=WW1HYq+M5b_y0C#2mV z=tcqN@j*ukL|vp&$vW-kBQsNjM5Po15n&o9Vo07g?6~*HHDqjxz4B!5U zUCJmLkZEtc+!2rMG~Dimh5F+kjlCfGICc%3B9m3(Zmlj%W23mL$ zs-mK}ol0Q}tWI&RRpHZ)B#3hP2TIeBl95yrrybIDRI)S}Zi^5jbEj(#S%*v&;v{m+ zwt@<2P=uP%*cAp`t0Fua$vS}$lBjlJQW)hWVZ0&|;Qb0)82PgvTy*`XJ!H_v?);uU zad4tv7-;|H5k`kJ`k^TGeb+N2JkLR9i(?z05g3H|nlF{y@m_AZhs0Zq&=ftt;xh=(hz@3c9v7w$P z_JcriBlvSC3AGAf{H0`pX2Ad@$+f?d=GxU7e9XmKmP@Ouz?w*N-m({LlO zRn4>uAwtrK?8+9=j>?pg!_@OTBNfX8naF+s4)Nek>*>FMe)uE4kkbQEOnKT`mTMvl z-q+Z|$nm$31!oS9yaiL`+pPC3*8k|Sw}9xkSpOrZ@MjOcj=lv)Zb>`bh^v+v#%NF7K21&JjJ4vd|DA>|QBTT7+(DCW$ zGtC@jQNW0d(XFhQXDVoMr^&^cz8a3{LV1d6G?(ioZWc2McxdZ#H#MJM$Da-cnyP-H*j&y)T>w4 zXO0OxnWWPr5-SjQVe}35Symi%lUY}h^=!R1 zIb5$@9IjuyIDBzZfmoSaSX!Ga10nq_qx3Z@oiFAiYac4UurynmF^lMS(D4)6FahR~ z?2dO!)bXFl%>(a+3&AJ4;0tGrj4G|>3792FEo(=%I@z)5r$x`<4S&p|J*;P>hn;&= z6vPh~b4ylS?_uZ8+tyaJ9-7IzIeF8%wPH@X<(-SM6cA5EGksAr6Oo*tw_4|9zucjhq&|3+z_v>6OYCdZ@-U{8i}tQzXI1@hwi6 zWt&8HHbu%@mGMKUcNjv?izY%%k>6M8n~qbz*mYZ zc0T2xkj**^M|K~F6K|SfI%Uq*13g=DSs+ixPW0!k_&qT2!2P+ZlcvSNtIt?^;RMx7C*!II4s z!Ner8Es`W7|6}LYz#G?Wyf`v!iSy5Cm~M&ha#qvQB$k)`R~k z&uKIutH9gnB8NgK1@O9EJHwbw1h-U^`Mm1gZ=4Uu_!>Iz-i=2pb~9ZLrg`vAHVhm@ zVPRNl20;?Tvv36-1|*US_ziXQJS->*g|OoVg@F=XKzkJVZb-BzwX>n3!uvw3cph}8 zEkntg0IfK?p4D;s#F1mX`+62e-em0az3efjDIvqOH*GlTR2lZjeZH5yr!=}TUaQrr zPwR07{RMb|-1-jWeJ)dNZJQe(9{yupNng%A=Cp^rf-@p-Jq2WPk zsM^7fPj~d)!3;Zu9Z-w*5$G~@Zb&x848vIMfy0Kls$<5x2(3m=7!2>4Z4a6(VHMj{ z$b+dw9~cjT+D33tAA*ECf$FV5ZL&rmXi*XfXh=GUkYNyOVh#-Mik*y&hFi$|z;@0b z;VK)3KRmE*Vr;NcZ}>@&-&5K*d?v_nsGstCUi*fbL55@ACBGN7@6T%ApJR-@PvGYZS~$)h z$h<$UegA~^{r9x*pVIK~_qFdYY2W`q`~F$&`{&?5K-A&OS~xb_%J5&%!r#)qzoLEr zL+$&kjM0iCo?q75_$!(U|EpU4e~rb4R_<>whJBgz{H6vU8-76tcz#Pu|8>TQ zCh+{Wmi`-B`rpyge^YE2#`C*c`rp&i|5Gjf?`!G*KuZrt3$i|csHOjBTKa#krGNDV z=$y`%h|T(#j$rFKZ2^8#kHSe1?tr96h9AW&=M2Kh+s?5}_*sOX!OZ4ZrijNOJ>gBF z81)pQ8Zt^kqf-R$1+=rsqDm((GjKW4{}{sGE7Mc0;G&}caSG3rK8PZWUS7J&LPfwD z*Z(7#A}G9y@E=9^3$h3b$JMU=pDTt>ARLD<)2dSX4X}?$K5s~~HqW-Fg`dPxyXeRHMk>H<|=KXm@{c{oZWy(8}$@>dPa9kwF*7hw#L9qd5 zej$_VD~S4j(U5Gee~75RCZfIq_j9TtUj?2w0PS;FQtGV_OClh?{bfYA5dBq71h9}G zGsXT2VmDRni8-JAVPrb^SCQrxrNQM6s^DLvI*FG2oG4r3n4teUQv85O@oT(zTxOz* z{|zMgK|R4S*AF{M1}(pdL_aJOWvcMCViiWRRroEv3SZ+@7}Trqb-fCd;DoT%WGeC7 zdL_P=sl+#ml^D%d;&=2)e1lg4x3eicd{eIkB{&{*k~|`QSFgi2GIjVpME#EfM?YWI z7ylF~{z#hP^%9de!Vhk6~pRZ<7Ao2mmP zIBv&Dz7F6#RflguuMCy1Q<{x zmvJ2@?6+8_8Scat$BdK8$S`i)9o}(0H%Nx*6d=srXJ4fN\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/729/f42d43ae\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 00:05:03 01.07.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ + \n\r\ + \n\r\ + \n#:local Script AM-GlobalConfig;\r\ + \n\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\ + \n\r\ + \n#/usb1/mikro_bak_rsa.pub\r\ + \n\r\ + \n\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\r\ + \n\ + \n:global MkDir;\ + \n\r\ + \n\ + \n:local FetchFile Manager@id_rsa.pub\ + \n:local localDir \"/\";\r\ + \n\r\ + \n\ + \n\ + \n\$MkDir \$localDir;\ + \n\ + \n\r\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +add dont-require-permissions=yes name=awg2-webui owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + put \"Download image, and save him to usb1/tmp\"\ + \n/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-chr.tar\" dst-p\ + ath=sata1/tmp/awg2-webui.tar\ + \n\ + \n:put \"1. Create veth interface\"\ + \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\ + \n\ + \n:put \"2. Create bridge and add veth\"\ + \n/interface bridge add name=br-awg\ + \n/interface bridge port add bridge=br-awg interface=veth-awg\ + \n\ + \n:put \"3. Assign IP to bridge\"\ + \n/ip address add address=10.9.9.1/24 interface=br-awg\ + \n\ + \n:put \"4. NAT: masquerade container traffic\"\ + \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\ + ade\ + \n\ + \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\ + \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 action=dst-n\ + at to-addresses=10.9.9.2 to-ports=55055 in-interface=ether1\ + \n\ + \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\ + \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 action=dst-\ + nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether1\ + \n\ + \n:put \"Create environment list..\"\ + \n/container envs add list=awgui-env key=WEB_USER value=vados\ + \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\ + \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\ + mboLs2325272931q\ + \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\ + 3\ + \n\ + \n:put \"Load and start container...\"\ + \n/container add file=sata1/tmp/awg2-webui.tar interface=veth-awg hostname\ + =awg2-webui \\\ + \nroot-dir=sata1/awg2-webui layer-dir=sata1/docker/awg2-webu/ envlist=awgu\ + i-env start-on-boot=yes logging=yes shm-size=4M\ + \n\ + \n:put \"Start...\"\ + \n/container start 0\ + \n\ + \n:put \"Verify...\"\ + \n/container print\ + \n\ + \n:put \"Should show: status=running\"\ + \n\ + \n/log print where topics~\"container\"\ + \n\ + \n:put \"Should show: AWG started, nginx running\"\ + \n" +add dont-require-permissions=no name=awg-proxy-go-Client owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:put \"[::::::::::::::: START :::::::::::::::]\"\ + \n:put \"\"\ + \n:put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n:put \"veth and network:\"\ + \n /interface/bridge add name=docker port-cost-mode=short\ + \n /ip/address/add address=192.168.100.1/24 interface=docker\ + \n\ + \n /interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n /interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n:put \"add config-client.json\"\ + \n/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json d\ + st=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n:put \"Add container\"\ + \n/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interface\ + =awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-proxy\ + -client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pro\ + xy-go-client\" mountlists=awgcfg-client\ + \n\ + \n:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n:put \"Add user:\"\ + \n /user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n:put \"Add forwarding port web-ui\"\ + \n /ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n /interface/wireguard/add name=wg-awg-client\ + \n /ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add comment=awg2wg dont-require-permissions=no name=awg2wg-uninstall owner=\ + Manager policy=ftp,read,write,policy source="\r\ + \n :put \"Uninstalling AmneziaWG...\"\r\ + \n :log info \"Uninstalling AmneziaWG...\"\r\ + \n /ip/route/remove [find where comment=awg2wg-tunnel]\r\ + \n :do { /tool/netwatch/remove [find where comment=Monitor-AWG2WG] } on-e\ + rror={}\r\ + \n :do { /ip/route/remove [find where comment=Monitor-AWG2WG] } on-error=\ + {}\r\ + \n /container/stop [find where interface=veth-awg2wg]\r\ + \n :delay 7s\r\ + \n /interface/list/member/remove [find where interface=wg-awg2wg]\r\ + \n /container/remove [find where interface=veth-awg2wg]\r\ + \n /container/envs/remove [find where list=\"awg2wg-env\"]\r\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg2wg\"]\r\ + \n /ip/address/remove [find where address=\"172.20.0.1/30\"]\r\ + \n /interface/veth/remove [find where name=\"veth-awg2wg\"]\r\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg2wg\"]\ + \r\ + \n /ip/address/remove [find where interface=\"wg-awg2wg\"]\r\ + \n /interface/wireguard/remove [find where name=\"wg-awg2wg\"]\r\ + \n :do { /file/remove [find where name~\"awg2wg.+tar\"] } on-error={}\r\ + \n :do { /file/remove [find where name=\"disk1/awg2wg\"] } on-error={}\r\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n /system/script/remove [find where name=awg2wg-uninstall]\r\ + \n" +add dont-require-permissions=no name=amneziawg-mikrotik-c owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\ + \n:global imagesPath \"amneziawg/img/\";\ + \n:local Image \"awg-proxy-amd64-7.20-Docker.tar.gz\";\ + \n\ + \n:global DstDir \"sata1/dst/\";\ + \n\ + \n:local Url=(\$GlobalScriptsUrl . \$ImagesPath . \$Image);\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n" +add comment=Generator dont-require-permissions=no name=awg-VDSina owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# ============================================================\ + \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\ + \n# 2026-06-30 22:08:12\ + \n# ============================================================\ + \n\ + \n# 0. Check prerequisites\ + \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \ + = 0) do={\ + \n :put \"Container package is not installed or disabled. Install it and \ + reboot.\"\ + \n :error \"Usage: /system/device-mode/update container=yes\"\ + \n}\ + \n\ + \n# Auto-detect storage\ + \n:global awgDisk \"disk1\"\ + \n{\ + \n :local usbFree 0\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \ + } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\ + \n } else={\ + \n :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\ + \n :put \"USB found but not mounted. Format as ext4\?\"\ + \n :put \"Press 'y' to confirm:\"\ + \n :local key [/terminal/inkey timeout=30]\ + \n :if (\$key = 121 || \$key = 89) do={\ + \n /disk/format-drive usb1 file-system=ext4 label=usb1\ + \n :delay 3s\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \ + free] } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n } else={ :put \"Format failed, using disk1\" }\ + \n } else={ :put \"Using disk1\" }\ + \n } else={ :put \"No USB, using disk1\" }\ + \n }\ + \n}\ + \n\ + \n# 1. Uninstall script\ + \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\ + \n :put \"Uninstallimg AmneziaWG...\"\ + \n :log info \"Uninstallimg AmneziaWG...\"\ + \n :local prevDNS \"\"\ + \n :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\ + env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\ + \n :local storageDisk \"disk1\"\ + \n :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\ + ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\ + \n :local prevTmpdir \"\"\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\ + Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\ + \n }\ + \n /ip/route/remove [find where comment=awg-VDSina-tunnel]\ + \n /ip/route/remove [find where comment=awg-VDSina-dns]\ + \n /container/stop [find where interface=veth-awg-VDSina]\ + \n :delay 7s\ + \n /container/remove [find where interface=veth-awg-VDSina]\ + \n /container/envs/remove [find where list=\"awg-VDSina-env\"]\ + \n :if (\$prevDNS != \"\") do={\ + \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\ + \n :put (\"DNS restored to: \$prevDNS\")\ + \n }\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n /container/config set tmpdir=\$prevTmpdir\ + \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\ + \n }\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\ + \n /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\ + \n /ip/address/remove [find where address=\"172.19.75.209/30\"]\ + \n /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\ + a\"]\ + \n /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\ + \n /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\ + \n :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\ + \_} on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\ + out.rsc\")] } on-error={}\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\ + n-error={}\ + \n }\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\ + \n /system/script/remove [find where name=awg-VDSina-uninstall]\ + \n}\ + \n\ + \n# 2. Network infrastructure\ + \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\ + y=172.19.75.209\ + \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\ + 5.208/30\ + \n\ + \n# 3. WireGuard interface (MikroTik derives the public key automatically)\ + \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"4CHyNhbOs923/E\ + yNDguMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=14710 disabled=yes\ + \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\ + Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcY\ + QnD9N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=172.19.75.210 endpoint-po\ + rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\ + \n/ip/address/add address=10.9.0.3/32 interface=wg-awg-VDSina\ + \n\ + \n# 4. Container environment variables\ + \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":51820\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\ + 77.79:55055\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\ + 438637\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\ + 809250\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\ + 09079495\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\ + 12329741\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\ + l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\ + face/wireguard/get [find name=wg-awg-VDSina] public-key]\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"\"\ + \n\ + \n# 5. DNS\ + \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\ + n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\ + \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\ + g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\ + \n# NOTE: replaces existing DNS configuration\ + \n/ip/dns/set servers=109.107.177.79\ + \n/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina distan\ + ce=1 comment=awg-VDSina-dns\ + \n\ + \n# 6. Download, create and start container\ + \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\ + \n:if (\$awgDisk != \"disk1\") do={\ + \n :local tmpPath (\$awgDisk . \"/pull\")\ + \n /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\ + ntainer/config/get tmpdir]\ + \n /container/config set tmpdir=\$tmpPath memory-high=200M\ + \n}\ + \n{\ + \n :local arch [/system/resource/get architecture-name]\ + \n :local ver [/system/resource/get version]\ + \n :local dotPos [:find \$ver \".\"]\ + \n :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\ + \n :local endPos [:find \$rest \".\"]\ + \n :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \ + \"] }\ + \n :local minor [:tonum [:pick \$rest 0 \$endPos]]\ + \n :local suffix \"\"\ + \n :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\ + \n :local file \"\"\ + \n :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\ + x . \".tar.gz\") }\ + \n :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \ + \".tar.gz\") }\ + \n :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \ + . \".tar.gz\") }\ + \n :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\ + \n :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\ + atest/download/\$file\"\ + \n :local filePath \$file\ + \n :if (\$awgDisk != \"disk1\") do={\ + \n :set filePath (\$awgDisk . \"/pull/\" . \$file)\ + \n :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\ + \n }\ + \n :if ([:len [/file/find where name=\$filePath]] = 0) do={\ + \n :local freeStorage 0\ + \n :if (\$awgDisk = \"disk1\") do={\ + \n :set freeStorage [/system/resource/get free-hdd-space]\ + \n } else={\ + \n :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\ + k] free] } on-error={}\ + \n }\ + \n :if (\$freeStorage < 262144) do={\ + \n :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\ + B free). Need at least 256KB.\")\ + \n :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\ + cient-disk-space\"\ + \n :error \"Insufficient disk space\"\ + \n }\ + \n :put (\"Fetching: \$url -> \" . \$filePath)\ + \n /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\ + \n } else={\ + \n :put (\"File already exists: \" . \$filePath)\ + \n }\ + \n :local rootDir (\$awgDisk . \"/awg-VDSina\")\ + \n /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\ + DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\ + yes comment=awg-VDSina\ + \n :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\ + =veth-awg-VDSina] shm-size=4M\"] }\ + \n /file/remove \$filePath\ + \n :local freeMem [/system/resource/get free-memory]\ + \n :if (\$freeMem < 16777216) do={\ + \n :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\ + . 16MB+ recommended.\")\ + \n }\ + \n /container/start [find where interface=veth-awg-VDSina]\ + \n :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\ + }\ + \n :put \"Waiting for container to start...\"\ + \n :delay 5s\ + \n /interface/wireguard/enable wg-awg-VDSina\ + \n :put \"WireGuard interface enabled\"\ + \n :put \"Installation complete!\"\ + \n :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\ + \"\ + \n /ping 109.107.177.79 count=10 interval=1\ + \n :put \"\"\ + \n :put \"======= NEXT STEPS =======\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \ + comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\ + \_comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\ + address=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run awg-VDSina-uninstall\"\ + \n :put \"=========================\"\ + \n}\ + \n\ + \n# 7. Verification\ + \n# /container/print\ + \n# /interface/wireguard/print\ + \n# /interface/wireguard/peers/print\ + \n" +add comment="wg2awg GH repo in client mode" dont-require-permissions=no name=\ + "wg2awg client" owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:local Arch \"amd64\";\ + \n:local Version \"v0.0.1\";\ + \n:local Name wg2awg;\ + \n:local WorkDisk \"sata1\";\ + \n:local WorkDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Bridge (\"Bridge-\" . \$Name);\ + \n:local VetchMTU \"1280\";\ + \n:local Vetch (\"vetch-\" . \$Name);\ + \n:local VetchNet \"10.9.0.0\";\ + \n:local VetchGate \"10.9.0.1\";\ + \n:local VetchAddr \"10.9.0.3/32\";\ + \n:local Env (\$Name . \"-env\");\ + \n:local ConfDir (\"/etc/\" . \$Name . \"/\");\ + \n:local ConfFile (\$Name . \".conf\");\ + \n:local Mounts (\$WorkDisk . \"/mounts/\" . \$Name . \"/\");\ + \n:local RootDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Registry \"https://registry-1.docker.io\";\ + \n:local FetchFile (\$Name . \"-\" . \$Arch . \"-oci.tar\");\ + \n:local FetchUrl (\"https://github.com/vados-dev/wg2awg/releases/download\ + /\" . \$Version . \"/\" . \$FetchFile);\ + \n:local FetchDir (\$WorkDisk . \"/dst/\");\ + \n:local AwgListen \":44044\";\ + \n:local AwgRemote \"109.107.177.79\";\ + \n\ + \n#:put \"\"\ + \n#put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n\ + \n:log warning \"[::::::::::::::: START :::::::::::::::]\"\ + \n:log warning \"Add veth and nat...\";\ + \n\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n\ + \n:do {\ + \n:log warning (\"Remove interface: name=\" . \$Vetch . \", address=\" . \ + \$VetchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/remove [find name=\$Vetch];\ + \n:log warning (\"Add interface: name=\" . \$Vetch . \", address=\" . \$Ve\ + tchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n:log warning (\"Remove ip address: address=\" . \$VetchGate . \", interf\ + ace=\" . \$Vetch);\ + \n/ip/address/remove [find address=\$VetchGate interface=\$Vetch];\ + \n:log warning (\"Add ip address: address=\" . \$VetchGate . \", interface\ + =\" . \$Vetch);\ + \n/ip/address/add address=\$VetchGate interface=\$Vetch;\ + \n:log warning (\"Remove firewall nat rule: chain=srcnat action=masquerade\ + \_src-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/remove [find chain=srcnat action=masquerade src-address\ + =(\$VetchNet . \"/24\")];\ + \n:log warning (\"Add firewall nat rule: chain=srcnat action=masquerade sr\ + c-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=(\$VethN\ + et . \"/24\");\ + \n} on-error={}\ + \n\ + \n#:do {\ + \n#/file add type=directory name=\$Mounts\ + \n#} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove WorkDir: \" . \$WorkDir . \"...\");\ + \n/file remove [find name=\$WorkDir];\ + \n:log warning (\"Add WorkDir: \" . \$WorkDir . \"...\");\ + \n/file add type=directory name=\$WorkDir;\ + \n:log warning (\"Remove config file \" . \$Mounts . \$ConfFile . \"...\")\ + ;\ + \n/file remove [find name=(\$Mounts . \$ConfFile)];\ + \n:log warning (\"Add config file \" . \$Mounts . \$ConfFile . \"...\");\ + \n/file add type=file name=(\$Mounts . \$ConfFile) contents=\"[Interface]\ + \nPrivateKey = 4CHyNhbOs923/EyNDguMXJXdghL2I3UyzXPwrANVgHs=\ + \nAddress = \$VetchAddr\ + \nMTU = \$VetchMTU\ + \nDNS = 109.107.177.79\ + \nPreUp = ip route add 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nPostDown = ip route del 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nJc = 9\ + \nJmin = 105\ + \nJmax = 920\ + \nS1 = 90\ + \nS2 = 136\ + \nS3 = 45\ + \nS4 = 27\ + \nH1 = 472437748-472438637\ + \nH2 = 707808381-707809250\ + \nH3 = 1609078552-1609079495\ + \nH4 = 1012329484-1012329741\ + \nI1 = <\ + r 4>\ + \nI2 = \ + \nI3 = \ + \nI4 = \ + \nI5 = \ + \n\ + \n[Peer]\ + \nPublicKey = o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\ + \nAllowedIPs = 0.0.0.0/0\ + \nEndpoint = \$AwgRemote\ + \nPersistentKeepalive = 10\ + \nPresharedKey = RNvF7T1cg5tyXcYQnD9N5BEp6e20vVJQTv0GMjyvHU0=\";\ + \n} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove mounts list \$Env...\");\ + \n/container/mounts/remove [find list=\$Env];\ + \n:log warning (\"Add mounts list \$Env...\");\ + \n/container/mounts/add src=(\$Mounts . \$ConfFile) dst=(\$ConfDir . \$Con\ + fFile) list=\$Env mode=ro;\ + \n:log warning (\"Remove Environment keys.\");\ + \n/container/envs/remove [find list=\$Env];\ + \n:log warning (\"Add Environment keys.\");\ + \n/container/envs/add list=\$Env key=AWG_CONFIG value=(\$ConfDir . \$ConfF\ + ile);\ + \n/container/envs/add list=\$Env key=AWG_LISTEN value=\$AwgListen\ + \n/container/envs/add list=\$Env key=AWG_REMOTE value=\$AwgRemote\ + \n/container/envs/add list=\$Env key=AWG_MODE value=client\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$WorkDisk . \"/tmp\");\ + \n/file remove [find name=(\$WorkDisk . \"/tmp\")];\ + \n:log warning (\"Add \" . \$WorkDisk . \"/tmp\");\ + \n/file add type=directory name=(\$WorkDisk . \"/tmp\");\ + \n:log warning (\"Container add tmpdir \" . \$WorkDisk . \"/tmp\");\ + \n/container config set tmpdir=(\$WorkDisk . \"/tmp\");\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$FetchDir . \$FetchFile . \".\");\ + \n/file remove [find name=(\$FetchDir . \$FetchFile)];\ + \n:log warning (\"Download image from \" . \$FetchUrl . \" and save him to\ + \_\" . \$FetchDir . \$FetchFile . \".\");\ + \n/tool/fetch url=\$FetchUrl dst-path=(\$FetchDir . \$FetchFile);\ + \n} on-error={}\ + \n\ + \n#:log warning (\"Container set registry \" . \$Registry . \" tmpdir= \" \ + . \$WorkDisk . \"/tmp\");\ + \n#/container/config/set registry-url=\$Registry tmpdir=(\$WorkDisk . \"/t\ + mp\");\ + \n\ + \n#:do {\ + \n:log warning (\"Container add width: file=\" . \$FetchDir . \$FetchFile \ + . \", interface=\" . \$Vetch . \", hostname=\" . \$Name . \", mountlists=\ + \" . \$Env . \", envlist=\" . \$Env . \", root-dir=\" . \$RootDir . \", wo\ + rkdir=\" . \$WorkDir . \", name=\" . \$Name . \", logging=yes, start-on-bo\ + ot=yes\");\ + \n/container/add file=(\$FetchDir . \$FetchFile) interface=\$Vetch hostnam\ + e=\$Name mountlists=\$Env envlist=\$Env root-dir=\$RootDir workdir=\$WorkD\ + ir name=\$Name logging=yes start-on-boot=yes;\ + \n#} on-error={}\ + \n\ + \n\ + \n#/container/start [find where interface=\$Vetch];\ + \n\ + \n#/interface/bridge add name=\$Bridge port-cost-mode=short;\ + \n#/ip/address/add address=192.168.100.1/24 interface=\$Bridge;\ + \n\ + \n#/interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n#/interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n#:put \"add config-client.json\"\ + \n#/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n#/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json \ + dst=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n#:put \"Add container\"\ + \n#/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interfac\ + e=awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-prox\ + y-client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pr\ + oxy-go-client\" mountlists=awgcfg-client\ + \n\ + \n#:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n#:put \"Add user:\"\ + \n#/user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n#:put \"Add forwarding port web-ui\"\ + \n#/ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n#:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n#/interface/wireguard/add name=wg-awg-client\ + \n#/ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add dont-require-permissions=no name=tmp_print owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDguMX\ + JXdghL2I3UyzXPwrANVgHs=\" listen-port=21641 \ + \n :put \"======= AWG PROXY SETUP =======\"\ + \n :put \"\"\ + \n :put \"Run awg-proxy on your external device (10.30.30.33).\"\ + \n :put \"\"\ + \n :put \"1. Download the binary for your platform:\"\ + \n :put \" Linux arm64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm64\"\ + \n :put \" Linux arm: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm\"\ + \n :put \" Linux amd64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-amd64\"\ + \n :put \"\"\ + \n :put \"2. Set environment variables and run:\"\ + \n :put \"export AWG_LISTEN=\\\":51820\\\"\"\ + \n :put \"export AWG_REMOTE=\\\"109.107.177.79:55055\\\"\"\ + \n :put \"export AWG_JC=\\\"9\\\"\"\ + \n :put \"export AWG_JMIN=\\\"105\\\"\"\ + \n :put \"export AWG_JMAX=\\\"920\\\"\"\ + \n :put \"export AWG_S1=\\\"90\\\"\"\ + \n :put \"export AWG_S2=\\\"136\\\"\"\ + \n :put \"export AWG_H1=\\\"472437748-472438637\\\"\"\ + \n :put \"export AWG_H2=\\\"707808381-707809250\\\"\"\ + \n :put \"export AWG_H3=\\\"1609078552-1609079495\\\"\"\ + \n :put \"export AWG_H4=\\\"1012329484-1012329741\\\"\"\ + \n :put \"export AWG_SERVER_PUB=\\\"o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+\ + v0b9jU=\\\"\"\ + \n :put (\"export AWG_CLIENT_PUB=\\\"\" . [/interface/wireguard/get [find\ + \_name=wg-VDSina] public-key] . \"\\\"\")\ + \n :put \"export AWG_S3=\\\"45\\\"\"\ + \n :put \"export AWG_S4=\\\"27\\\"\"\ + \n :put \"export AWG_I1=\\\"\\\"\"\ + \n :put \"export AWG_I2=\\\"\\\"\"\ + \n :put \"export AWG_I3=\\\"\\\"\"\ + \n :put \"export AWG_I4=\\\"\\\"\"\ + \n :put \"export AWG_I5=\\\"\\\"\"\ + \n :put \"\"\ + \n :put \"chmod +x awg-proxy-linux-* && ./awg-proxy-linux-\"\ + \n :put \"\"\ + \n :put \"3. (Optional) Create a systemd service for auto-start.\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-VDSina comm\ + ent=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-VDSina com\ + ment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=VDSina-tunnel dst-addr\ + ess=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run VDSina-uninstall\"\ + \n :put \"================================\"" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +add name=manager policy="local,ssh,ftp,read,write,policy,api,rest-api,!telnet,\ + !reboot,!test,!winbox,!password,!web,!sniff,!sensitive,!romon" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=*3 registry-mirrors="https://reg.vados.\ + ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/caps-man datapath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + xs-DataPath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + DataPath +/caps-man manager +set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \ + enabled=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=Bridge-LAN +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set crl-store=system +/container config +set layer-dir=/sata1/docker/layers memory-high=200.0MiB memory-max=4096.0MiB \ + registry-url=https://registry-1.docker.io tmpdir=/sata1/tmp username=\ + amsternl +/container envs +add key=AWG_CONFIG list=wg2awg-env value=/etc/wg2awg/wg2awg.conf +add key=AWG_LISTEN list=wg2awg-env value=:44044 +add key=AWG_MODE list=wg2awg-env value=client +add key=AWG_REMOTE list=wg2awg-env value=109.107.177.79 +/container mounts +add dst=/etc/wg2awg/wg2awg.conf list=wg2awg-env mode=ro src=\ + /sata1/mounts/wg2awg/wg2awg.conf +/ip smb +set enabled=no +/interface bridge port +add bridge=Bridge-LAN interface=LAN +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=ether1 list=WAN +add interface=Bridge-LAN list=LAN +/interface wifi cap +set discovery-interfaces=*DF +/interface wifi capsman +set ca-certificate=WiFi-CAPsMAN-CA-7DB23C23C976 certificate=\ + WiFi-CAPsMAN-7DB23C23C976 enabled=yes interfaces=Bridge-LAN package-path=\ + /tmpfs/capsman-packages require-peer-certificate=no upgrade-policy=none +/ip address +add address=10.30.30.10/24 interface=Bridge-LAN network=10.30.30.0 +/ip dhcp-client +add disabled=yes interface=ether1 name=client1 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=*3 lease-script=\ + lease-script lease-time=10m name=nucDHCP server-address=10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \ + verify-doh-cert=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set reverse-proxy disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \ + webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=*3 type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/special-login +add port=serial0 +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system gps +set set-system-time=yes +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system package update +set check-certificate=no ip-version=ipv4 +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260812/20260812144001-Diff-Config.rsc b/MikroNUC/history/20260812/20260812144001-Diff-Config.rsc new file mode 100644 index 0000000..a0fdcf3 --- /dev/null +++ b/MikroNUC/history/20260812/20260812144001-Diff-Config.rsc @@ -0,0 +1,3 @@ +5486,5487d5485 +< /system gps +< set set-system-time=yes -- 2.52.0